@webskill/chatbot 0.11.0 → 0.13.0

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { AgentLoopConfig, ApprovalScope, BridgeCapabilities, DataSourceInfo, DocxTextExtractor, ExternalSkillProvider, ExternalToolSource, FileSystemProvider, HookRunner, InteractionRequest, InteractionResponse, LifecycleEventInit, LinkedDocumentReader, LlmClient, NetworkPolicy, Page, PageQuery, PdfTextExtractor, RenderBlock, RenderResultRequest, RunSnapshot, RunSnapshotListEntry, RuntimePhase, RuntimeRun, ScriptExecutor, SessionStore, SkillCandidateMarker, SkillCatalogEntry, SkillIntegrityGuard, SkillOutcomeReporter, SkillStateGuard, UiBridge, UiSpecDrafts, UiSpecEvent, UiSpecSnapshot, UiSurfaceActionRequest, UiSurfaceActionResponse, UserProfile, UserProfileExport, WebSkillErrorCode, XlsxTextExtractor, diffUserProfile } from "@webskill/sdk";
+import { AgentLoopConfig, ApprovalScope, BridgeCapabilities, DataSourceInfo, DocumentSurfaceHost, DocxTextExtractor, ExternalSkillProvider, ExternalToolSource, FileSystemProvider, HookRunner, InteractionRequest, InteractionResponse, LifecycleEventInit, LinkedDocumentReader, LlmClient, NetworkPolicy, Page, PageQuery, PdfTextExtractor, RenderBlock, RenderResultRequest, RunSnapshot, RunSnapshotListEntry, RuntimePhase, RuntimeRun, ScriptExecutor, SessionStore, SkillCandidateMarker, SkillCatalogEntry, SkillIntegrityGuard, SkillOutcomeReporter, SkillStateGuard, UiBridge, UiSpecDrafts, UiSpecEvent, UiSpecSnapshot, UiSurfaceActionRequest, UiSurfaceActionResponse, UserProfile, UserProfileExport, WebSkillErrorCode, XlsxTextExtractor, diffUserProfile } from "@webskill/sdk";
 import { SandboxMode, TypeScriptSupportOptions } from "@webskill/sdk/browser";
 import { CustomSurfaceActionEvent, ReactBridgeState, SpecInteractionChannel, SurfaceRegistry, UiSurfaceActionEvent } from "@webskill/sdk/ui-react";
-import { DownloadedFileConsent, DownloadedFileReader, PageActionPolicy, PagePerceptionPolicy, PerceptionPagingBudget, PerceptionRecord, SkillCandidateSink, TodoItem } from "@webskill/sdk/agent";
+import { DownloadedFileConsent, DownloadedFileReader, PageActionPolicy, PagePerceptionPolicy, PerceptionPagingBudget, PerceptionRecord, SkillCandidateSink, TabWorksetPolicy, TodoItem } from "@webskill/sdk/agent";
 import "react";
 import "react/jsx-runtime";
 //#region ../ui-kit/src/i18n/types.d.ts
@@ -57,6 +57,23 @@ interface DataSourceInfo$1 {
   provenance?: 'page-declared' | 'tool-projection';
 }
 //#endregion
+//#region ../runtime/src/interaction/documentSurface.d.ts
+/**
+ * 渲染侧端口；由 chatbot 装配，`undefined` 表示本宿主没有文档面（按钮整个不渲染）。
+ *
+ * 收的是**产物文件名**，不是路径：路径由引擎按 run 拼出并做包含校验，
+ * 让声明树给完整路径等于凭空开一个读取面。
+ * @experimental
+ */
+interface DocumentSurfacePort {
+  open(request: {
+    runId: string;
+    artifact: string;
+    style?: string;
+    dataSource: string;
+  }): Promise<void>;
+}
+//#endregion
 //#region ../runtime/src/sandbox/bridgeProtocol.d.ts
 /**
  * 能力模式：true 直通 / false 关闭（TOOL_UNSUPPORTED）/ 'require-approval' 调用前强制授权
@@ -201,6 +218,18 @@ interface RuntimeSandboxConfig {
    * 而本能力的「需批准」是恒定的，放进去会凭空多出一个「开且不批准」的非法组合。
    */
   downloadedFiles: boolean;
+  /**
+   * 让技能脚本读用户本轮上传的文件（0.15.0 分册 17）。缺省 `false`。
+   *
+   * **不放进 `capabilities`**，理由同 `downloadedFiles`：本能力的「需批准」是恒定的。
+   * 关闭时脚本上下文里连那两个成员都不存在，而不是存在但总失败。
+   */
+  uploadFiles: boolean;
+  /**
+   * 单个上传文件交给脚本的字节上限（分册 17）。超出即拒，**不截断**
+   * ——截一半的 xlsx / 图片解不开，而脚本看不出它残缺。
+   */
+  maxUploadFileBytes: number;
 }
 /**
  * 只做类型擦除，不做类型检查。`esbuildUrl` 为绝对 http(s) 地址时按 `remoteUrl` 判定；
@@ -477,6 +506,15 @@ interface ChatbotHostAdapter {
    * @experimental
    */
   pageActions?: PageActionPolicy;
+  /**
+   * 模型侧标签页控制（0.16.0 分册 12）。**不注入即三个工具不存在**。
+   *
+   * 与 `pageActions` 分开给，是因为它们的实现依赖不同：前者只需一条页面通道，
+   * 后者需要宿主真的能枚举与关闭标签页。但它们的**开关**是同一个：
+   * 策略自己以 `pageActions.enabled` 为前提，不能操作页面的会话里切页没有意义。
+   * @experimental
+   */
+  pageTabs?: TabWorksetPolicy;
   /**
    * 读页面链接指向的文档（分册 22）。实现住在 `@webskill/browser`，
    * 而 chatbot 不依赖它 —— 与 `pagePerception` 同一条装配规矩：宿主注入。
@@ -492,7 +530,7 @@ interface ChatbotHostAdapter {
    * PDF 仍然默认直传，能读的端点拿到的还是原件；不注入即没有回退能力。
    */
   pdfExtractor?: PdfTextExtractor;
-  /** 文档读取留痕出口（FR-22.6） */
+  /** 文档读取留痕出口（FR-22.6）；分册 17 的 `upload.file.read` 也走这条 */
   documentAudit?: {
     append(event: {
       type: string;
@@ -513,6 +551,15 @@ interface ChatbotHostAdapter {
     /** 「不再询问」的记忆端口；不注入即每次都问 */
     consent?: DownloadedFileConsent;
   };
+  /**
+   * 文档投放面（0.15.0 分册 13）。宿主交出 viewer 页地址、投放前确认与审计出口，
+   * 三件都在 `createDocumentSurfaceHost` 的选项里。
+   *
+   * **不注入即 `OpenDocument` 按钮整个不渲染**——与 `pagePerception` 同一条装配规矩，
+   * 设置抽屉里没有也不会有开关。技能可经 `context.documentSurface` 提前探测。
+   * @experimental
+   */
+  documentSurface?: DocumentSurfaceHost;
 }
 //#endregion
 //#region src/core/chatEngine.d.ts
@@ -646,6 +693,16 @@ declare class ChatEngine {
   setRenderer(renderer: RendererKind): void;
   /** 非 native 三档共用的交互通道（Chatbot 的 SpecInteraction 订阅/attach；core 只产出 catalog 节点树） */
   get interactionChannel(): SpecInteractionChannel;
+  /**
+   * 文档投放端口（0.15.0 分册 13）。宿主没注入 `adapter.documentSurface` 时为 `undefined`，
+   * 渲染侧据此整个不渲染按钮。
+   *
+   * 端口实现落在引擎里而不是宿主里，是因为「产物在哪、技能叫什么」这两件事只有引擎知道：
+   * 交给宿主就等于把产物目录布局变成宿主必须复刻的知识，两个宿主各抄一份必然分叉，
+   * 而那正是本册要消灭的东西。
+   * @experimental
+   */
+  get documentSurface(): DocumentSurfacePort | undefined;
   /** 探测 @a2ui/lit 是否安装（Appearance/设置区 A2UI 档置灰判定） */
   probeA2uiAvailability(): Promise<boolean>;
   onEvent(listener: (event: ChatEvent) => void): () => void;
@@ -1435,15 +1492,19 @@ declare const chatbotDictionary: {
     'interaction.pageAction.select': string;
     'interaction.pageAction.set': string;
     'interaction.pageAction.attach': string;
+    'interaction.pageAction.back': string;
     'interaction.pageAction.role.click': string;
     'interaction.pageAction.role.fill': string;
     'interaction.pageAction.role.submit': string;
     'interaction.pageAction.role.select': string;
     'interaction.pageAction.role.set': string;
     'interaction.pageAction.role.attach': string;
+    'interaction.pageAction.role.back': string;
     'interaction.pageAction.remember': string;
     'interaction.pageAction.frame': string;
     'interaction.pageAction.elevated': string;
+    'interaction.downloadedFile.list': string;
+    'interaction.downloadedFile.read': string;
     'interaction.downloadedFile.file': string;
     'interaction.downloadedFile.remember': string;
     'interaction.traceEvidence.title': string;
@@ -1467,6 +1528,7 @@ declare const chatbotDictionary: {
     'surface.readOnlySnapshot': string;
     'surface.suggested': string;
     'surface.useSuggestion': string;
+    'surface.openDocument': string;
     'surface.control.previousPage': string;
     'surface.control.previous': string;
     'surface.control.nextPage': string;
@@ -1796,15 +1858,19 @@ declare const chatbotDictionary: {
     'interaction.pageAction.select': string;
     'interaction.pageAction.set': string;
     'interaction.pageAction.attach': string;
+    'interaction.pageAction.back': string;
     'interaction.pageAction.role.click': string;
     'interaction.pageAction.role.fill': string;
     'interaction.pageAction.role.submit': string;
     'interaction.pageAction.role.select': string;
     'interaction.pageAction.role.set': string;
     'interaction.pageAction.role.attach': string;
+    'interaction.pageAction.role.back': string;
     'interaction.pageAction.remember': string;
     'interaction.pageAction.frame': string;
     'interaction.pageAction.elevated': string;
+    'interaction.downloadedFile.list': string;
+    'interaction.downloadedFile.read': string;
     'interaction.downloadedFile.file': string;
     'interaction.downloadedFile.remember': string;
     'interaction.traceEvidence.title': string;
@@ -1828,6 +1894,7 @@ declare const chatbotDictionary: {
     'surface.readOnlySnapshot': string;
     'surface.suggested': string;
     'surface.useSuggestion': string;
+    'surface.openDocument': string;
     'surface.control.previousPage': string;
     'surface.control.previous': string;
     'surface.control.nextPage': string;
@@ -2160,15 +2227,19 @@ declare const useT: () => TranslateFn<{
     'interaction.pageAction.select': string;
     'interaction.pageAction.set': string;
     'interaction.pageAction.attach': string;
+    'interaction.pageAction.back': string;
     'interaction.pageAction.role.click': string;
     'interaction.pageAction.role.fill': string;
     'interaction.pageAction.role.submit': string;
     'interaction.pageAction.role.select': string;
     'interaction.pageAction.role.set': string;
     'interaction.pageAction.role.attach': string;
+    'interaction.pageAction.role.back': string;
     'interaction.pageAction.remember': string;
     'interaction.pageAction.frame': string;
     'interaction.pageAction.elevated': string;
+    'interaction.downloadedFile.list': string;
+    'interaction.downloadedFile.read': string;
     'interaction.downloadedFile.file': string;
     'interaction.downloadedFile.remember': string;
     'interaction.traceEvidence.title': string;
@@ -2192,6 +2263,7 @@ declare const useT: () => TranslateFn<{
     'surface.readOnlySnapshot': string;
     'surface.suggested': string;
     'surface.useSuggestion': string;
+    'surface.openDocument': string;
     'surface.control.previousPage': string;
     'surface.control.previous': string;
     'surface.control.nextPage': string;
@@ -2521,15 +2593,19 @@ declare const useT: () => TranslateFn<{
     'interaction.pageAction.select': string;
     'interaction.pageAction.set': string;
     'interaction.pageAction.attach': string;
+    'interaction.pageAction.back': string;
     'interaction.pageAction.role.click': string;
     'interaction.pageAction.role.fill': string;
     'interaction.pageAction.role.submit': string;
     'interaction.pageAction.role.select': string;
     'interaction.pageAction.role.set': string;
     'interaction.pageAction.role.attach': string;
+    'interaction.pageAction.role.back': string;
     'interaction.pageAction.remember': string;
     'interaction.pageAction.frame': string;
     'interaction.pageAction.elevated': string;
+    'interaction.downloadedFile.list': string;
+    'interaction.downloadedFile.read': string;
     'interaction.downloadedFile.file': string;
     'interaction.downloadedFile.remember': string;
     'interaction.traceEvidence.title': string;
@@ -2553,6 +2629,7 @@ declare const useT: () => TranslateFn<{
     'surface.readOnlySnapshot': string;
     'surface.suggested': string;
     'surface.useSuggestion': string;
+    'surface.openDocument': string;
     'surface.control.previousPage': string;
     'surface.control.previous': string;
     'surface.control.nextPage': string;
@@ -3019,6 +3096,6 @@ declare function ErrorCard({ code, message, loopLimits, onOpenSettings, onDismis
  * Version of the published `@webskill/chatbot` package, injected at build time.
  * @stable
  */
-declare const CHATBOT_VERSION = "0.11.0";
+declare const CHATBOT_VERSION = "0.13.0";
 //#endregion
 export { A2uiSurfaceHost, type A2uiSurfaceHostProps, A2uiSurfaceSnapshotHost, type A2uiSurfaceSnapshotHostProps, type AppearanceChange, CHATBOT_VERSION, type ChatAttachmentInput, type ChatAttachmentMeta, type ChatContentPart, ChatEngine, type ChatEngineOptions, type ChatEvent, type ChatInteractionRecord, type ChatLayout, type ChatMessage, type ChatRunPhase, type ChatSessionListResult, type ChatSessionMeta, type ChatTheme, type ChatThinking, type ChatTokenUsage, type ChatToolCall, Chatbot, type ChatbotConfig, type ChatbotGovernancePorts, type ChatbotHostAdapter, type ChatbotProps, CompositeUiBridge, type CompositeUiBridgeDeps, DEFAULT_RENDERER_CAPABILITIES, DEFAULT_RUNTIME_CONFIG_STORAGE_KEY, type DownloadableFile, ErrorCard, type ErrorCardProps, InteractionCard, type InteractionCardProps, InterruptedBanner, type InterruptedBannerProps, type Locale, type LocalizedText, OpenUiSurfaceHost, type OpenUiSurfaceHostProps, OpenUiSurfaceSnapshotHost, type OpenUiSurfaceSnapshotHostProps, type QuickPrompt, type QuickPromptIconName, type RendererCapability, type RendererKind, type ResolvedChatLayout, ResultBlockList, type ResultBlockListProps, ResultBlocksPro, type ResultBlocksProProps, type RunSnapshot, type RuntimeAppearanceConfig, type RuntimeConfig, type RuntimeConfigStore, type RuntimeQuickPrompt, type RuntimeRendererId, type SandboxExecutorDeps, type SettingsSectionId, SkillBadges, SpecInteraction, type SpecInteractionProps, VercelPayloadPreview, type VercelPayloadPreviewProps, VercelSurfaceHost, type VercelSurfaceHostProps, VercelSurfaceSnapshotHost, type VercelSurfaceSnapshotHostProps, chatbotDictionary, configureA2uiMarkdown, createLocalStorageRuntimeConfigStore, createMemoryRuntimeConfigStore, isLlmEntryUsable, pickUsableLlmEntry, probeA2uiAvailability, probeOpenUiAvailability, sandboxExecutorDeps, useT };

package/dist/index.js

@@ -6,11 +6,11 @@ import { t as yaml } from "./yaml-C888tCbJ.js";
 import { t as json } from "./json-BOcU6nei.js";
 import { t as typescript } from "./typescript-DAau_Qyl.js";
 import { t as jsx$1 } from "./jsx-D2Jv0wvt.js";
-import { BEHAVIOR_RECORDS_KEY, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FullDisclosureRouter, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, USER_PROFILE_KEY, WebSkillError, WebSkillRuntime, applyUserProfileImport, assertRemoteUrlAllowed, atomicWriteText, diffUserProfile, exportUserProfile, formatAttachmentText, isUnsupportedRunSnapshot, messageOf, readBehaviorRecords, readUserProfile, refineUserProfile, summarizeRunUsage, summarizeToolCalls, textParts } from "@webskill/sdk";
+import { BEHAVIOR_RECORDS_KEY, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FullDisclosureRouter, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, USER_PROFILE_KEY, WebSkillError, WebSkillRuntime, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, diffUserProfile, exportUserProfile, formatAttachmentText, isUnsupportedRunSnapshot, messageOf, readBehaviorRecords, readUserProfile, refineUserProfile, resolveInsideRoot, sanitizeUntrustedLine, summarizeRunUsage, summarizeToolCalls, textParts } from "@webskill/sdk";
 import { BrowserWorkerScriptExecutor, checkDictationAvailability, compressImageToBudget, createEncryptedMemoryStore, createLlmClient, deleteMemoryEncryptionKey, openMemoryEncryptionKey, probeChromeBuiltinAvailability, startDictation } from "@webskill/sdk/browser";
 import { JsonRenderSpecSurface, NativeSpecSurface, OpenUiSpecSurface, ReactBridgeState, SpecInteractionChannel, SurfaceFormTextsProvider, UiSurfaceSnapshotList, probeJsonRenderAvailability } from "@webskill/sdk/ui-react";
 import { A2UI_SPEC_FORM_PATH, collectFormScopes, createUiCatalogToolSource, fromA2uiSpecAction, fromA2uiSurfaceAction, interactionToFormModel, interactionToUiSpec, loadOpenUiPeers, loadWebSkillLitCatalog, renderMiniChart, shapeInteractionValue, toA2uiSpecMessages, toA2uiSurfaceAction, toVercelToolInvocation, uiCatalog } from "@webskill/sdk/ui";
-import { DownloadedFilePolicy, PAGE_ACTION_KINDS, TodoStore, createDelegationToolSource, createDownloadedFileToolSource, createPageActionToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createTodoToolSource, withDelegationOrigin } from "@webskill/sdk/agent";
+import { DownloadedFilePolicy, PAGE_ACTION_KINDS, TodoStore, createDelegationToolSource, createDownloadedFileToolSource, createPageActionToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createTabWorksetToolSource, createTodoToolSource, withDelegationOrigin } from "@webskill/sdk/agent";
 import * as React$1 from "react";
 import React, { Children, Component, Fragment, createContext, createElement, forwardRef, isValidElement, memo, useCallback, useContext, useDeferredValue, useEffect, useEffectEvent, useId, useInsertionEffect, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
@@ -30416,6 +30416,11 @@ const DEFAULT_MAX_DOCUMENT_TEXT_BYTES = 512e3;
 * 结构化数据不是文档，量级差一个数量级；超出**只拒不截**——截断的 JSON 解不出来。
 */
 const DEFAULT_MAX_DATA_SOURCE_BYTES = 1024e3;
+/**
+* 单个上传文件交给脚本的字节上限（0.15.0 分册 17，FR-17.5）：20 MB。
+* 取得比模型图片预算宽：字节不进模型上下文，只进脚本，护的是内存不是 token。
+*/
+const DEFAULT_MAX_UPLOAD_FILE_BYTES = 20 * 1024 * 1024;
 
 //#endregion
 //#region ../runtime/src/engine/limits.ts
@@ -30589,7 +30594,9 @@ function defaultRuntimeConfig() {
 				allowPrivateHosts: false
 			},
 			typescript: { enabled: false },
-			downloadedFiles: false
+			downloadedFiles: false,
+			uploadFiles: false,
+			maxUploadFileBytes: DEFAULT_MAX_UPLOAD_FILE_BYTES
 		},
 		llm: { entries: [] },
 		agentCapabilities: {
@@ -31676,15 +31683,19 @@ const chatbotDictionary = defineDictionary({
 		"interaction.pageAction.select": "Allow the assistant to select an option in “{target}”?",
 		"interaction.pageAction.set": "Allow the assistant to toggle “{target}”?",
 		"interaction.pageAction.attach": "Allow the assistant to attach a file to “{target}”?",
+		"interaction.pageAction.back": "Allow the assistant to go back to the previous page on “{target}”?",
 		"interaction.pageAction.role.click": "this control",
 		"interaction.pageAction.role.fill": "this field",
 		"interaction.pageAction.role.submit": "this form",
 		"interaction.pageAction.role.select": "this list",
 		"interaction.pageAction.role.set": "this switch",
 		"interaction.pageAction.role.attach": "this upload field",
+		"interaction.pageAction.role.back": "this page",
 		"interaction.pageAction.remember": "Don’t ask again for this kind of action",
 		"interaction.pageAction.frame": "The target is in the embedded frame \"{frame}\".",
 		"interaction.pageAction.elevated": "This dialog is outside the usual allowlist; it was opened by this task.",
+		"interaction.downloadedFile.list": "Allow the assistant to see the list of files you recently downloaded?",
+		"interaction.downloadedFile.read": "Allow the assistant to read this file from your downloads?",
 		"interaction.downloadedFile.file": "{name} · {size}",
 		"interaction.downloadedFile.remember": "Don’t ask again for this kind of access",
 		"interaction.traceEvidence.title": "Steps this skill claims",
@@ -31708,6 +31719,7 @@ const chatbotDictionary = defineDictionary({
 		"surface.readOnlySnapshot": "This is a saved record — its actions are no longer available.",
 		"surface.suggested": "Suggested:",
 		"surface.useSuggestion": "Use",
+		"surface.openDocument": "Open document",
 		"surface.control.previousPage": "Previous page",
 		"surface.control.previous": "Previous",
 		"surface.control.nextPage": "Next page",
@@ -32037,15 +32049,19 @@ const chatbotDictionary = defineDictionary({
 		"interaction.pageAction.select": "允许助手在「{target}」中选择选项吗？",
 		"interaction.pageAction.set": "允许助手切换「{target}」吗？",
 		"interaction.pageAction.attach": "允许助手向「{target}」附加文件吗？",
+		"interaction.pageAction.back": "允许助手在「{target}」上返回上一页吗？",
 		"interaction.pageAction.role.click": "这个控件",
 		"interaction.pageAction.role.fill": "这个输入框",
 		"interaction.pageAction.role.submit": "这个表单",
 		"interaction.pageAction.role.select": "这个选择框",
 		"interaction.pageAction.role.set": "这个开关",
 		"interaction.pageAction.role.attach": "这个上传控件",
+		"interaction.pageAction.role.back": "这个页面",
 		"interaction.pageAction.remember": "以后不再询问此类操作",
 		"interaction.pageAction.frame": "目标位于嵌入帧「{frame}」中。",
 		"interaction.pageAction.elevated": "该对话框不在常规允许清单内，是本次任务打开的。",
+		"interaction.downloadedFile.list": "允许助手查看你最近下载的文件列表吗？",
+		"interaction.downloadedFile.read": "允许助手读取你下载目录里的这份文件吗？",
 		"interaction.downloadedFile.file": "{name} · {size}",
 		"interaction.downloadedFile.remember": "以后不再询问此类访问",
 		"interaction.traceEvidence.title": "该技能声称的步骤",
@@ -32069,6 +32085,7 @@ const chatbotDictionary = defineDictionary({
 		"surface.readOnlySnapshot": "这是已保存的记录，其中的操作已不可用。",
 		"surface.suggested": "建议：",
 		"surface.useSuggestion": "使用",
+		"surface.openDocument": "打开文档",
 		"surface.control.previousPage": "上一页",
 		"surface.control.previous": "上一页",
 		"surface.control.nextPage": "下一页",
@@ -32597,11 +32614,18 @@ var ChatEngine = class {
 	#ready;
 	/** 已装配的 runtime（cancel 等同步委托用；未装配时为 undefined） */
 	#runtime;
+	/**
+	* 每轮 `send()` 开头刷新的运行时配置快照（0.15.0 分册 15 · FR-15.6）。
+	* 只给那些必须同步回答、又不能等到重建运行时的开关用。
+	*/
+	#liveConfig;
 	#handles = /* @__PURE__ */ new Map();
 	#currentSessionId;
 	#listeners = /* @__PURE__ */ new Set();
 	/** runId → 已激活技能累积（skill-activated 事件用；终态清理） */
 	#runSkills = /* @__PURE__ */ new Map();
+	/** 文档投放端口只构造一次：渲染侧把它放进 memo 依赖，每次取新对象会触发无谓重渲染 */
+	#documentSurfacePort;
 	/** 当前渲染框架档（复合 uiBridge 分发；setRenderer 热切换） */
 	#renderer;
 	/** 非 native 三档共用的交互通道（Chatbot 的 SpecInteraction attach 后生效） */
@@ -32810,6 +32834,52 @@ var ChatEngine = class {
 	get interactionChannel() {
 		return this.#interactionChannel;
 	}
+	/**
+	* 文档投放端口（0.15.0 分册 13）。宿主没注入 `adapter.documentSurface` 时为 `undefined`，
+	* 渲染侧据此整个不渲染按钮。
+	*
+	* 端口实现落在引擎里而不是宿主里，是因为「产物在哪、技能叫什么」这两件事只有引擎知道：
+	* 交给宿主就等于把产物目录布局变成宿主必须复刻的知识，两个宿主各抄一份必然分叉，
+	* 而那正是本册要消灭的东西。
+	* @experimental
+	*/
+	get documentSurface() {
+		const host = this.#adapter.documentSurface;
+		if (!host) return void 0;
+		return this.#documentSurfacePort ??= { open: async ({ runId, artifact, style, dataSource }) => {
+			const dir = `${this.#chatRoot}/artifacts/${runId}`;
+			const html = await this.#adapter.storage.readText(this.#artifactPath(dir, artifact));
+			const css = style === void 0 ? void 0 : await this.#adapter.storage.readText(this.#artifactPath(dir, style));
+			await host.open({
+				skillName: await this.#skillNamesOfRun(runId),
+				dataSource: sanitizeUntrustedLine(dataSource),
+				document: {
+					html,
+					...css === void 0 ? {} : { css }
+				}
+			});
+		} };
+	}
+	/**
+	* 产物名 → 绝对路径。`assertSafePathSegment` + `resolveInsideRoot` 两道都不是可选写法：
+	* 少了它们，「组件只收产物名」就退化成「组件收完整路径」，凭空开出一个读取面。
+	*/
+	#artifactPath(dir, artifact) {
+		assertSafePathSegment(artifact, "artifact");
+		return resolveInsideRoot(dir, artifact);
+	}
+	/**
+	* 这次 run 激活过的技能名。它是授权告知的主语，因此**不能**由发出 surface 的技能自报——
+	* 那等于让被授权方自己写授权提示。
+	*
+	* 进行中的 run 读内存累积；已结束的（历史消息里的按钮就是这种）读 trace，
+	* 只读内存会在 run 收尾清表后得到空串。
+	*/
+	async #skillNamesOfRun(runId) {
+		const live = this.#runSkills.get(runId);
+		if (live && live.size > 0) return [...live].sort().join(", ");
+		return [...(await this.#traceStore.get(runId).catch(() => void 0))?.activeSkills ?? []].sort().join(", ");
+	}
 	/** 探测 @a2ui/lit 是否安装（Appearance/设置区 A2UI 档置灰判定） */
 	probeA2uiAvailability() {
 		return probeA2uiAvailability();
@@ -33007,6 +33077,7 @@ var ChatEngine = class {
 	async send(text, attachments = []) {
 		if (this.#disposed) throw new WebSkillError("RUN_FAILED", "This ChatEngine was disposed; create a new one to keep chatting.");
 		if (text.trim() === "" && attachments.length === 0) return;
+		this.#liveConfig = await this.#runtimeConfigStore()?.load();
 		const admitted = await this.#admitAttachments(attachments);
 		const runtime = await this.#ensureReady();
 		const sessionId = this.#currentSessionId ?? (await this.createSession({ title: truncateTitle(text) })).id;
@@ -33034,12 +33105,48 @@ var ChatEngine = class {
 		});
 		const handle = this.#sessionHandle(runtime, sessionId);
 		try {
-			const result = await handle.run(prompt);
+			const uploadFiles = this.#uploadFilesFor(admitted.accepted);
+			const result = await handle.run(prompt, uploadFiles ? { uploadFiles } : {});
 			await this.#finishRun(sessionId, result);
 		} catch (e) {
 			this.#emitError(e);
+		} finally {
+			this.#releaseTabWorkset();
 		}
 	}
+	/**
+	* run 结束就丢掉标签页工作集（0.16.0 FR-11.4 / FR-12.7）。
+	*
+	* 放在 `finally` 而不是 `#finishRun` 里：完成、失败、中断、取消四条路径必须清得一样干净，
+	* 而异常路径根本不经过 `#finishRun`——漏一条就是让上一轮的句柄活到下一轮，
+	* 那正是 SC-2 要堵的口子。它**不关闭任何标签页**：模型开出来的页归用户处置。
+	*/
+	#releaseTabWorkset() {
+		Promise.resolve(this.#adapter.pageTabs?.reset()).catch(() => void 0);
+	}
+	/**
+	* 本轮触发消息里的附件，包成只对这一次 run 生效的读取端口（0.15.0 分册 17）。
+	* 开关关着就返回 undefined → 脚本上下文里那两个成员整个不存在，
+	* 与「本轮没传附件」（空数组）分得开。
+	*/
+	#uploadFilesFor(attachments) {
+		if (!(this.#liveConfig?.sandbox.uploadFiles ?? false)) return void 0;
+		const files = attachments.map((a) => ({ ...a }));
+		const infos = files.map((a) => ({
+			id: a.id,
+			name: a.name,
+			contentType: a.contentType,
+			size: a.size
+		}));
+		return {
+			list: async () => infos,
+			read: async (id) => {
+				const attachment = files.find((a) => a.id === id);
+				if (!attachment) throw new WebSkillError("UPLOAD_FILE_NOT_FOUND", `Upload file "${id}" is not part of the message that started this run`);
+				return this.#adapter.storage.readBinary(`${this.attachmentsRoot}/${attachment.path}`);
+			}
+		};
+	}
 	/** 附件落盘根目录（composer 附件适配器写入，send 时读回） */
 	get attachmentsRoot() {
 		return `${this.#chatRoot}/attachments`;
@@ -33146,6 +33253,8 @@ var ChatEngine = class {
 			await this.#finishRun(sessionId, result);
 		} catch (e) {
 			this.#emitError(e);
+		} finally {
+			this.#releaseTabWorkset();
 		}
 	}
 	async #persistSurfaceDraft(runId, surfaceId, value) {
@@ -33185,6 +33294,13 @@ var ChatEngine = class {
 		return this.#ready;
 	}
 	/**
+	* `sandbox.downloadedFiles` 的实时取值（分册 15 · FR-15.6）。
+	* 优先读每轮 `send()` 刷新的快照；还没发过消息时回落到装配期的那一份。
+	*/
+	#sandboxDownloadedFiles(assembled) {
+		return (this.#liveConfig ?? assembled)?.sandbox.downloadedFiles === true;
+	}
+	/**
 	* LLM 选择链：options.llm（demo/测试）→ `RuntimeConfig.llm` 里选中/默认的条目
 	* → 内置演示。streaming=false 时包装掉 stream（AgentLoop 走 complete）。
 	*/
@@ -33447,10 +33563,11 @@ var ChatEngine = class {
 				}
 			})] : [],
 			...this.#adapter.pageActions ? [createPageActionToolSource({ policy: this.#adapter.pageActions })] : [],
+			...this.#adapter.pageTabs ? [createTabWorksetToolSource({ policy: this.#adapter.pageTabs })] : [],
 			...this.#adapter.downloads ? [createDownloadedFileToolSource({ policy: new DownloadedFilePolicy({
 				reader: this.#adapter.downloads.reader,
 				ui: this.#uiBridge,
-				capabilityEnabled: () => rc?.sandbox.downloadedFiles === true,
+				capabilityEnabled: () => this.#sandboxDownloadedFiles(rc),
 				imageCapable: async () => {
 					return entryCapabilities(pickLlmEntry(await this.#runtimeConfigStore()?.load(), this.#selectedModelId)).image;
 				},
@@ -33499,6 +33616,9 @@ var ChatEngine = class {
 			...this.#adapter.xlsxExtractor ? { xlsxExtractor: this.#adapter.xlsxExtractor } : {},
 			...this.#adapter.pdfExtractor ? { pdfExtractor: this.#adapter.pdfExtractor } : {},
 			...this.#adapter.documentAudit ? { documentAudit: this.#adapter.documentAudit } : {},
+			...this.#adapter.documentAudit ? { uploadFileAudit: this.#adapter.documentAudit } : {},
+			maxUploadFileBytes: rc?.sandbox.maxUploadFileBytes ?? defaultRuntimeConfig().sandbox.maxUploadFileBytes,
+			...this.#adapter.documentSurface ? { documentSurface: true } : {},
 			...toolStepStore ? { toolSteps: toolStepStore } : {}
 		};
 		const runtime = new WebSkillRuntime({
@@ -33801,7 +33921,8 @@ function ChatbotSurfaceTexts({ children }) {
 			arrayFirstItemOnly: t("surface.arrayFirstItemOnly"),
 			readOnlySnapshot: t("surface.readOnlySnapshot"),
 			suggested: t("surface.suggested"),
-			useSuggestion: t("surface.useSuggestion")
+			useSuggestion: t("surface.useSuggestion"),
+			openDocument: t("surface.openDocument")
 		}), [t]),
 		hostControlTexts: useMemo(() => ({
 			previousPage: t("surface.control.previousPage"),
@@ -45665,7 +45786,7 @@ function resolveByNonce(bridge, snapshots, event) {
 * 一组 surface 快照 → 当前渲染档的宿主（分册 17）。
 * 四档与原 `HistoricalSurfaces` 一一对应；差别只在 `bridge` 存在时补上动作/草稿回接。
 */
-function SurfaceByRenderer({ snapshots, renderer, registry, bridge }) {
+function SurfaceByRenderer({ snapshots, renderer, registry, bridge, documentSurface }) {
 	const drafts = bridge && snapshots[0]?.runId ? bridge.surfaceDrafts(snapshots[0].runId) : void 0;
 	const onDraftChange = bridge ? (event) => bridge.setSurfaceDraft(event.runId, event.surfaceId, event.value) : void 0;
 	if (renderer === "a2ui") {
@@ -45704,6 +45825,7 @@ function SurfaceByRenderer({ snapshots, renderer, registry, bridge }) {
 	return /* @__PURE__ */ jsx(UiSurfaceSnapshotList, {
 		snapshots,
 		...registry ? { registry } : {},
+		...documentSurface ? { documentSurface } : {},
 		...bridge ? { onAction: (event) => resolveByNonce(bridge, snapshots, event) } : {},
 		...drafts ? { drafts } : {},
 		...onDraftChange ? { onDraftChange } : {}
@@ -45738,6 +45860,7 @@ function InlineSurface({ surfaceId }) {
 			snapshots: [snapshot],
 			...ctx.renderer ? { renderer: ctx.renderer } : {},
 			...ctx.registry ? { registry: ctx.registry } : {},
+			...ctx.documentSurface ? { documentSurface: ctx.documentSurface } : {},
 			...!persisted && bridge ? { bridge } : {}
 		})
 	});
@@ -45760,6 +45883,14 @@ function InlineBlocks() {
 
 //#endregion
 //#region src/react/interactionLabels.ts
+/**
+* 这两类的次要按钮是「不同意」而非「中止这次运行」（UI-UX8 D14）：
+* 报成 cancelled 会让运行整个结束，工具拿不到否决结果，也就不会留下否决的审计。
+* native 卡与 spec 三档共用本判定，不得各写一份（分册 15 缺陷 C 就是两份逐渐走歧）。
+*/
+function declinesOnCancel(request) {
+	return request.type === "confirm" || request.type === "authorize";
+}
 /** 交互类型 → 标题字典键。徽章与声明树共用，避免两处各写一份映射。 */
 function interactionTitleKey(request) {
 	return request.type === "file-pick" ? "interaction.filePick.title" : `interaction.${request.type}.title`;
@@ -46571,7 +46702,7 @@ function SkillBadges({ skills }) {
 //#endregion
 //#region src/react/WebSkillMessageExtensions.tsx
 /** WebSkill domain content rendered beneath a Base message without choosing its chat layout. */
-function WebSkillMessageExtensions({ message, onDownload, surfaceRegistry, renderer }) {
+function WebSkillMessageExtensions({ message, onDownload, surfaceRegistry, documentSurface, renderer }) {
 	const t = useT();
 	if (message.role === "user") return null;
 	const contentParts = message.contentParts ?? [];
@@ -46592,7 +46723,8 @@ function WebSkillMessageExtensions({ message, onDownload, surfaceRegistry, rende
 				children: /* @__PURE__ */ jsx(SurfaceByRenderer, {
 					snapshots: renderable,
 					...renderer ? { renderer } : {},
-					...surfaceRegistry ? { registry: surfaceRegistry } : {}
+					...surfaceRegistry ? { registry: surfaceRegistry } : {},
+					...documentSurface ? { documentSurface } : {}
 				})
 			}) : null,
 			renderable.length < surfaces.filter((snapshot) => !inlineIds.has(snapshot.id)).length ? /* @__PURE__ */ jsx("p", {
@@ -46719,6 +46851,7 @@ function AssistantUiMessage(props) {
 		...props.bridge ? { bridge: props.bridge } : {},
 		...props.renderer ? { renderer: props.renderer } : {},
 		...props.surfaceRegistry ? { registry: props.surfaceRegistry } : {},
+		...props.documentSurface ? { documentSurface: props.documentSurface } : {},
 		...props.onDownload ? { onDownload: props.onDownload } : {}
 	}), [
 		message?.surfaces,
@@ -46727,6 +46860,7 @@ function AssistantUiMessage(props) {
 		props.bridge,
 		props.renderer,
 		props.surfaceRegistry,
+		props.documentSurface,
 		props.onDownload
 	]);
 	if (role === "user") return /* @__PURE__ */ jsxs("div", {
@@ -46782,6 +46916,7 @@ function AssistantUiMessage(props) {
 				message,
 				...props.onDownload ? { onDownload: props.onDownload } : {},
 				...props.surfaceRegistry ? { surfaceRegistry: props.surfaceRegistry } : {},
+				...props.documentSurface ? { documentSurface: props.documentSurface } : {},
 				...props.renderer ? { renderer: props.renderer } : {}
 			}) : null,
 			/* @__PURE__ */ jsx(AssistantUiMessageActions, { ...props })
@@ -47386,7 +47521,8 @@ function ActiveInteractionCard({ request, bridge }) {
 	const pageAction = isAuthorize && request.capability === "pageAction" ? pageActionDetails(request.details) : void 0;
 	const downloadedFile = isAuthorize && request.capability === "readDownloadedFile" ? downloadedFileDetails(request.details) : void 0;
 	const traceEvidence = isAuthorize ? traceEvidenceDetails(request.details) : void 0;
-	const spec = interactionToUiSpec(request.type === "authorize" && pageAction !== void 0 ? {
+	const localized = pageAction !== void 0 || downloadedFile !== void 0;
+	const spec = interactionToUiSpec(request.type === "authorize" && localized ? {
 		...request,
 		message: ""
 	} : request, {
@@ -47396,7 +47532,7 @@ function ActiveInteractionCard({ request, bridge }) {
 	const preview = isAuthorize && typeof request.details === "object" && request.details !== null ? request.details["preview"] : void 0;
 	const handleAction = (event) => {
 		if (event.intent !== "submit") {
-			if (request.type === "confirm" || request.type === "authorize") {
+			if (declinesOnCancel(request)) {
 				bridge.resolve({
 					id: request.id,
 					value: false
@@ -47500,22 +47636,30 @@ function ActiveInteractionCard({ request, bridge }) {
 							}), pageAction.rememberLabel ?? t("interaction.pageAction.remember")]
 						}) : null
 					] }) : null,
-					downloadedFile ? /* @__PURE__ */ jsxs(Fragment$1, { children: [downloadedFile.file ? /* @__PURE__ */ jsx("p", {
-						"data-testid": "interaction-downloaded-file",
-						className: "text-sm text-ink",
-						children: t("interaction.downloadedFile.file", {
-							name: downloadedFile.file.name,
-							size: formatBytes(downloadedFile.file.size)
-						})
-					}) : null, downloadedFile.rememberable === true ? /* @__PURE__ */ jsxs("label", {
-						className: "flex items-center gap-2 text-sm text-ink",
-						children: [/* @__PURE__ */ jsx("input", {
-							type: "checkbox",
-							"data-testid": "interaction-downloaded-file-remember",
-							checked: remember,
-							onChange: (event) => setRemember(event.currentTarget.checked)
-						}), downloadedFile.rememberLabel ?? t("interaction.downloadedFile.remember")]
-					}) : null] }) : null,
+					downloadedFile ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
+						/* @__PURE__ */ jsx("p", {
+							"data-testid": "interaction-downloaded-file-action",
+							className: "text-sm text-ink",
+							children: t(`interaction.downloadedFile.${downloadedFile.action}`)
+						}),
+						downloadedFile.file ? /* @__PURE__ */ jsx("p", {
+							"data-testid": "interaction-downloaded-file",
+							className: "text-sm text-ink",
+							children: t("interaction.downloadedFile.file", {
+								name: downloadedFile.file.name,
+								size: formatBytes(downloadedFile.file.size)
+							})
+						}) : null,
+						downloadedFile.rememberable === true ? /* @__PURE__ */ jsxs("label", {
+							className: "flex items-center gap-2 text-sm text-ink",
+							children: [/* @__PURE__ */ jsx("input", {
+								type: "checkbox",
+								"data-testid": "interaction-downloaded-file-remember",
+								checked: remember,
+								onChange: (event) => setRemember(event.currentTarget.checked)
+							}), downloadedFile.rememberLabel ?? t("interaction.downloadedFile.remember")]
+						}) : null
+					] }) : null,
 					traceEvidence ? /* @__PURE__ */ jsxs("div", {
 						"data-testid": "interaction-trace-evidence",
 						children: [/* @__PURE__ */ jsx("div", {
@@ -47563,7 +47707,7 @@ function ActiveInteractionCard({ request, bridge }) {
 							}, `${step.tool}-${index}`))
 						})]
 					}) : null,
-					request.details !== void 0 && pageAction === void 0 ? /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("div", {
+					request.details !== void 0 && !localized ? /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("div", {
 						className: "mb-1 text-xs font-medium text-muted",
 						children: t("interaction.authorize.details")
 					}), /* @__PURE__ */ jsx("pre", {
@@ -47844,11 +47988,15 @@ function SpecInteraction({ channel, renderer }) {
 	}, [channel, renderer]);
 	if (!session) return null;
 	const Surface = SURFACES[renderer];
+	const { request } = session;
 	return /* @__PURE__ */ jsx(Surface, {
-		surfaceId: session.request.id,
+		surfaceId: request.id,
 		spec: session.spec,
 		actions: INTERACTION_ACTIONS,
-		onAction: (event) => channel.handleAction(event)
+		onAction: (event) => {
+			if (event.intent !== "submit" && declinesOnCancel(request)) channel.decline(request.id);
+			else channel.handleAction(event);
+		}
 	});
 }
 
@@ -48621,6 +48769,7 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 														modelLabels,
 														resolveAttachmentUrl,
 														...surfaceRegistry ? { surfaceRegistry } : {},
+														...engine.documentSurface ? { documentSurface: engine.documentSurface } : {},
 														renderer,
 														bridge: engine.bridge,
 														...adapter.navigation.openConsoleTrace ? { onViewTrace: adapter.navigation.openConsoleTrace } : {},
@@ -48756,7 +48905,7 @@ function VercelPayloadPreview({ bridge }) {
 * Version of the published `@webskill/chatbot` package, injected at build time.
 * @stable
 */
-const CHATBOT_VERSION = "0.11.0";
+const CHATBOT_VERSION = "0.13.0";
 
 //#endregion
 export { A2uiSurfaceHost, A2uiSurfaceSnapshotHost, CHATBOT_VERSION, ChatEngine, Chatbot, CompositeUiBridge, DEFAULT_RENDERER_CAPABILITIES, DEFAULT_RUNTIME_CONFIG_STORAGE_KEY, ErrorCard, InteractionCard, InterruptedBanner, OpenUiSurfaceHost, OpenUiSurfaceSnapshotHost, ResultBlockList, ResultBlocksPro, SkillBadges, SpecInteraction, VercelPayloadPreview, VercelSurfaceHost, VercelSurfaceSnapshotHost, chatbotDictionary, configureA2uiMarkdown, createLocalStorageRuntimeConfigStore, createMemoryRuntimeConfigStore, isLlmEntryUsable, pickUsableLlmEntry, probeA2uiAvailability, probeOpenUiAvailability, sandboxExecutorDeps, useT };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webskill/chatbot",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "license": "MIT",
   "type": "module",
   "exports": {
@@ -26,7 +26,7 @@
     "@a2ui/web_core": "^0.10.5",
     "@lit/context": "^1.1.0",
     "@openuidev/react-lang": "0.2.8",
-    "@webskill/sdk": "^0.14.0",
+    "@webskill/sdk": "^0.16.0",
     "react": ">=19.0.0",
     "react-dom": ">=19.0.0",
     "zod": "^3.25.0 || ^4.0.0"