@webskill/chatbot 0.12.0 → 0.14.0

package/dist/index.js

@@ -7,10 +7,10 @@ import { t as json } from "./json-BOcU6nei.js";
 import { t as typescript } from "./typescript-DAau_Qyl.js";
 import { t as jsx$1 } from "./jsx-D2Jv0wvt.js";
 import { BEHAVIOR_RECORDS_KEY, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FullDisclosureRouter, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, USER_PROFILE_KEY, WebSkillError, WebSkillRuntime, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, diffUserProfile, exportUserProfile, formatAttachmentText, isUnsupportedRunSnapshot, messageOf, readBehaviorRecords, readUserProfile, refineUserProfile, resolveInsideRoot, sanitizeUntrustedLine, summarizeRunUsage, summarizeToolCalls, textParts } from "@webskill/sdk";
-import { BrowserWorkerScriptExecutor, checkDictationAvailability, compressImageToBudget, createEncryptedMemoryStore, createLlmClient, deleteMemoryEncryptionKey, openMemoryEncryptionKey, probeChromeBuiltinAvailability, startDictation } from "@webskill/sdk/browser";
+import { BrowserWorkerScriptExecutor, capturePhoto, checkCameraAvailability, checkDictationAvailability, compressImageToBudget, createEncryptedMemoryStore, createLlmClient, deleteMemoryEncryptionKey, openCamera, openMemoryEncryptionKey, probeChromeBuiltinAvailability, startDictation } from "@webskill/sdk/browser";
 import { JsonRenderSpecSurface, NativeSpecSurface, OpenUiSpecSurface, ReactBridgeState, SpecInteractionChannel, SurfaceFormTextsProvider, UiSurfaceSnapshotList, probeJsonRenderAvailability } from "@webskill/sdk/ui-react";
 import { A2UI_SPEC_FORM_PATH, collectFormScopes, createUiCatalogToolSource, fromA2uiSpecAction, fromA2uiSurfaceAction, interactionToFormModel, interactionToUiSpec, loadOpenUiPeers, loadWebSkillLitCatalog, renderMiniChart, shapeInteractionValue, toA2uiSpecMessages, toA2uiSurfaceAction, toVercelToolInvocation, uiCatalog } from "@webskill/sdk/ui";
-import { DownloadedFilePolicy, PAGE_ACTION_KINDS, TodoStore, createDelegationToolSource, createDownloadedFileToolSource, createPageActionToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createTodoToolSource, withDelegationOrigin } from "@webskill/sdk/agent";
+import { DownloadedFilePolicy, PAGE_ACTION_KINDS, TodoStore, createDelegationToolSource, createDownloadedFileToolSource, createPageActionToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createTabWorksetToolSource, createTodoToolSource, withDelegationOrigin } from "@webskill/sdk/agent";
 import * as React$1 from "react";
 import React, { Children, Component, Fragment, createContext, createElement, forwardRef, isValidElement, memo, useCallback, useContext, useDeferredValue, useEffect, useEffectEvent, useId, useInsertionEffect, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
@@ -254,7 +254,7 @@ const createLucideIcon = (iconName, iconNode) => {
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$49 = [
+const __iconNode$50 = [
 	["rect", {
 		x: "2",
 		y: "4",
@@ -276,7 +276,7 @@ const __iconNode$49 = [
 		key: "1svtjw"
 	}]
 ];
-const AppWindow = createLucideIcon("app-window", __iconNode$49);
+const AppWindow = createLucideIcon("app-window", __iconNode$50);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/archive-restore.mjs
@@ -286,7 +286,7 @@ const AppWindow = createLucideIcon("app-window", __iconNode$49);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$48 = [
+const __iconNode$49 = [
 	["rect", {
 		width: "20",
 		height: "5",
@@ -312,7 +312,7 @@ const __iconNode$48 = [
 		key: "192myk"
 	}]
 ];
-const ArchiveRestore = createLucideIcon("archive-restore", __iconNode$48);
+const ArchiveRestore = createLucideIcon("archive-restore", __iconNode$49);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/archive.mjs
@@ -322,7 +322,7 @@ const ArchiveRestore = createLucideIcon("archive-restore", __iconNode$48);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$47 = [
+const __iconNode$48 = [
 	["rect", {
 		width: "20",
 		height: "5",
@@ -340,7 +340,7 @@ const __iconNode$47 = [
 		key: "a56b0p"
 	}]
 ];
-const Archive = createLucideIcon("archive", __iconNode$47);
+const Archive = createLucideIcon("archive", __iconNode$48);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/arrow-up.mjs
@@ -350,14 +350,14 @@ const Archive = createLucideIcon("archive", __iconNode$47);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$46 = [["path", {
+const __iconNode$47 = [["path", {
 	d: "m5 12 7-7 7 7",
 	key: "hav0vg"
 }], ["path", {
 	d: "M12 19V5",
 	key: "x0mq9r"
 }]];
-const ArrowUp = createLucideIcon("arrow-up", __iconNode$46);
+const ArrowUp = createLucideIcon("arrow-up", __iconNode$47);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/bug.mjs
@@ -367,7 +367,7 @@ const ArrowUp = createLucideIcon("arrow-up", __iconNode$46);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$45 = [
+const __iconNode$46 = [
 	["path", {
 		d: "M12 20v-9",
 		key: "1qisl0"
@@ -413,7 +413,26 @@ const __iconNode$45 = [
 		key: "1vgav8"
 	}]
 ];
-const Bug = createLucideIcon("bug", __iconNode$45);
+const Bug = createLucideIcon("bug", __iconNode$46);
+
+//#endregion
+//#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/camera.mjs
+/**
+* @license lucide-react v1.27.0 - ISC
+*
+* This source code is licensed under the ISC license.
+* See the LICENSE file in the root directory of this source tree.
+*/
+const __iconNode$45 = [["path", {
+	d: "M13.997 4a2 2 0 0 1 1.76 1.05l.486.9A2 2 0 0 0 18.003 7H20a2 2 0 0 1 2 2v9a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V9a2 2 0 0 1 2-2h1.997a2 2 0 0 0 1.759-1.048l.489-.904A2 2 0 0 1 10.004 4z",
+	key: "18u6gg"
+}], ["circle", {
+	cx: "12",
+	cy: "13",
+	r: "3",
+	key: "1vg3eu"
+}]];
+const Camera = createLucideIcon("camera", __iconNode$45);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/chart-column.mjs
@@ -30291,6 +30310,12 @@ const markdownComponents = {
 /**
 * 流式 Markdown：消费当前 text part 的增量文本，边流边成形（标题/列表/表格/代码块），
 * 终态与流式期是同一个组件、同一份数据，因此 run 结束时不重排。
+*
+* `smooth={false}` 是硬性要求，不是口味问题：assistant-ui 以 partIndex 作 React key
+* （`MessagePartsGrouped`），而运行细节的 part 排在正文之前，每来一次工具调用正文就整体后移一位、
+* 被卸载重挂。平滑揭示在重挂时从空串重新开始，于是同一段正文会被完整地重打一遍——
+* 表现为「正文下半段删掉又补回来、高度忽高忽低」。模型本身已按 token 粒度流式返回，
+* 再叠一层揭示动画只会把结构性重挂放大成可见抖动。守卫见 `e2e-extension/liveBodyMonotonic.spec.ts`。
 */
 const MarkdownText = memo(function MarkdownText({ className }) {
 	const [dark, themeRef] = useDarkAncestor();
@@ -30302,6 +30327,7 @@ const MarkdownText = memo(function MarkdownText({ className }) {
 			remarkPlugins: [remarkGfm],
 			className: cn("aui-md", className),
 			components,
+			smooth: false,
 			defer: true
 		})
 	});
@@ -31683,17 +31709,28 @@ const chatbotDictionary = defineDictionary({
 		"interaction.pageAction.select": "Allow the assistant to select an option in “{target}”?",
 		"interaction.pageAction.set": "Allow the assistant to toggle “{target}”?",
 		"interaction.pageAction.attach": "Allow the assistant to attach a file to “{target}”?",
+		"interaction.pageAction.back": "Allow the assistant to go back to the previous page on “{target}”?",
 		"interaction.pageAction.role.click": "this control",
 		"interaction.pageAction.role.fill": "this field",
 		"interaction.pageAction.role.submit": "this form",
 		"interaction.pageAction.role.select": "this list",
 		"interaction.pageAction.role.set": "this switch",
 		"interaction.pageAction.role.attach": "this upload field",
+		"interaction.pageAction.role.back": "this page",
 		"interaction.pageAction.remember": "Don’t ask again for this kind of action",
 		"interaction.pageAction.frame": "The target is in the embedded frame \"{frame}\".",
 		"interaction.pageAction.elevated": "This dialog is outside the usual allowlist; it was opened by this task.",
+		"interaction.downloadedFile.list": "Allow the assistant to see the list of files you recently downloaded?",
+		"interaction.downloadedFile.read": "Allow the assistant to read this file from your downloads?",
 		"interaction.downloadedFile.file": "{name} · {size}",
 		"interaction.downloadedFile.remember": "Don’t ask again for this kind of access",
+		"interaction.uploadFile.read": "Allow the skill “{skill}” to read the file you uploaded?",
+		"interaction.uploadFile.file": "{name} · {type} · {size}",
+		"interaction.sandbox.readReference": "Allow the skill “{skill}” to read the reference file “{path}”?",
+		"interaction.sandbox.readAsset": "Allow the skill “{skill}” to read the bundled asset “{path}”?",
+		"interaction.sandbox.fetchData": "Allow the skill “{skill}” to fetch the data source “{source}”?",
+		"interaction.sandbox.writeArtifact": "Allow the skill “{skill}” to write the artifact “{path}”?",
+		"interaction.sandbox.confirm": "The skill “{skill}” asks for confirmation:",
 		"interaction.traceEvidence.title": "Steps this skill claims",
 		"interaction.traceEvidence.columnDraft": "In the skill",
 		"interaction.traceEvidence.columnTrace": "Actually run in this session",
@@ -31767,6 +31804,20 @@ const chatbotDictionary = defineDictionary({
 		"composer.dictate.recording": "Recording",
 		"composer.dictate.api-missing": "This browser does not support speech recognition.",
 		"composer.dictate.insecure-context": "Voice input needs a secure connection (https or localhost).",
+		"composer.dictate.denied": "The browser denied microphone access. Allow it in the site permission settings, then try again.",
+		"composer.dictate.denied.handoff": "Microphone access needs to be granted once in a regular tab. Finish it there, then come back and try again.",
+		"composer.dictate.failed": "Voice input stopped unexpectedly. Try again, or type your message.",
+		"composer.camera": "Take a photo",
+		"composer.camera.title": "Take a photo",
+		"composer.camera.description": "The photo is added to the composer as an attachment. It is not sent until you send the message.",
+		"composer.camera.preview": "Camera preview",
+		"composer.camera.shutter": "Capture",
+		"composer.camera.noStorage": "attachments are unavailable in this host",
+		"composer.camera.api-missing": "This browser does not support camera capture.",
+		"composer.camera.insecure-context": "The camera needs a secure connection (https or localhost).",
+		"composer.camera.denied": "The browser denied camera access. Allow it in the site permission settings, then try again.",
+		"composer.camera.denied.handoff": "Camera access needs to be granted once in a regular tab. Finish it there, then come back and try again.",
+		"composer.camera.failed": "The photo could not be taken. Try again, or attach an image file instead.",
 		"settings.title": "Settings",
 		"settings.group.general": "General",
 		"settings.group.models": "Models",
@@ -32045,17 +32096,28 @@ const chatbotDictionary = defineDictionary({
 		"interaction.pageAction.select": "允许助手在「{target}」中选择选项吗？",
 		"interaction.pageAction.set": "允许助手切换「{target}」吗？",
 		"interaction.pageAction.attach": "允许助手向「{target}」附加文件吗？",
+		"interaction.pageAction.back": "允许助手在「{target}」上返回上一页吗？",
 		"interaction.pageAction.role.click": "这个控件",
 		"interaction.pageAction.role.fill": "这个输入框",
 		"interaction.pageAction.role.submit": "这个表单",
 		"interaction.pageAction.role.select": "这个选择框",
 		"interaction.pageAction.role.set": "这个开关",
 		"interaction.pageAction.role.attach": "这个上传控件",
+		"interaction.pageAction.role.back": "这个页面",
 		"interaction.pageAction.remember": "以后不再询问此类操作",
 		"interaction.pageAction.frame": "目标位于嵌入帧「{frame}」中。",
 		"interaction.pageAction.elevated": "该对话框不在常规允许清单内，是本次任务打开的。",
+		"interaction.downloadedFile.list": "允许助手查看你最近下载的文件列表吗？",
+		"interaction.downloadedFile.read": "允许助手读取你下载目录里的这份文件吗？",
 		"interaction.downloadedFile.file": "{name} · {size}",
 		"interaction.downloadedFile.remember": "以后不再询问此类访问",
+		"interaction.uploadFile.read": "允许技能「{skill}」读取你上传的这份文件吗？",
+		"interaction.uploadFile.file": "{name} · {type} · {size}",
+		"interaction.sandbox.readReference": "允许技能「{skill}」读取参考资料「{path}」吗？",
+		"interaction.sandbox.readAsset": "允许技能「{skill}」读取随附文件「{path}」吗？",
+		"interaction.sandbox.fetchData": "允许技能「{skill}」访问数据源「{source}」吗？",
+		"interaction.sandbox.writeArtifact": "允许技能「{skill}」写出产物「{path}」吗？",
+		"interaction.sandbox.confirm": "技能「{skill}」请求确认：",
 		"interaction.traceEvidence.title": "该技能声称的步骤",
 		"interaction.traceEvidence.columnDraft": "技能里写的",
 		"interaction.traceEvidence.columnTrace": "本会话实际执行的",
@@ -32129,6 +32191,20 @@ const chatbotDictionary = defineDictionary({
 		"composer.dictate.recording": "录音中",
 		"composer.dictate.api-missing": "当前浏览器不支持语音识别。",
 		"composer.dictate.insecure-context": "语音输入需要安全连接（https 或 localhost）。",
+		"composer.dictate.denied": "浏览器拒绝了麦克风。请在站点权限设置里允许麦克风后重试。",
+		"composer.dictate.denied.handoff": "麦克风需要在普通标签页里授权一次。请在那里完成授权，再回到这里重试。",
+		"composer.dictate.failed": "语音输入意外中断。可以再试一次，或直接打字。",
+		"composer.camera": "拍照",
+		"composer.camera.title": "拍照",
+		"composer.camera.description": "拍好的照片会作为附件放进输入框，你点发送才会发出去。",
+		"composer.camera.preview": "摄像头取景",
+		"composer.camera.shutter": "拍照",
+		"composer.camera.noStorage": "当前宿主不支持附件",
+		"composer.camera.api-missing": "当前浏览器不支持调用摄像头。",
+		"composer.camera.insecure-context": "使用摄像头需要安全连接（https 或 localhost）。",
+		"composer.camera.denied": "浏览器拒绝了摄像头。请在站点权限设置里允许摄像头后重试。",
+		"composer.camera.denied.handoff": "摄像头需要在普通标签页里授权一次。请在那里完成授权，再回到这里重试。",
+		"composer.camera.failed": "没能拍下这张照片。可以再试一次，或改为直接添加图片文件。",
 		"settings.title": "设置",
 		"settings.group.general": "通用",
 		"settings.group.models": "模型",
@@ -33102,9 +33178,21 @@ var ChatEngine = class {
 			await this.#finishRun(sessionId, result);
 		} catch (e) {
 			this.#emitError(e);
+		} finally {
+			this.#releaseTabWorkset();
 		}
 	}
 	/**
+	* run 结束就丢掉标签页工作集（0.16.0 FR-11.4 / FR-12.7）。
+	*
+	* 放在 `finally` 而不是 `#finishRun` 里：完成、失败、中断、取消四条路径必须清得一样干净，
+	* 而异常路径根本不经过 `#finishRun`——漏一条就是让上一轮的句柄活到下一轮，
+	* 那正是 SC-2 要堵的口子。它**不关闭任何标签页**：模型开出来的页归用户处置。
+	*/
+	#releaseTabWorkset() {
+		Promise.resolve(this.#adapter.pageTabs?.reset()).catch(() => void 0);
+	}
+	/**
 	* 本轮触发消息里的附件，包成只对这一次 run 生效的读取端口（0.15.0 分册 17）。
 	* 开关关着就返回 undefined → 脚本上下文里那两个成员整个不存在，
 	* 与「本轮没传附件」（空数组）分得开。
@@ -33233,6 +33321,8 @@ var ChatEngine = class {
 			await this.#finishRun(sessionId, result);
 		} catch (e) {
 			this.#emitError(e);
+		} finally {
+			this.#releaseTabWorkset();
 		}
 	}
 	async #persistSurfaceDraft(runId, surfaceId, value) {
@@ -33541,6 +33631,7 @@ var ChatEngine = class {
 				}
 			})] : [],
 			...this.#adapter.pageActions ? [createPageActionToolSource({ policy: this.#adapter.pageActions })] : [],
+			...this.#adapter.pageTabs ? [createTabWorksetToolSource({ policy: this.#adapter.pageTabs })] : [],
 			...this.#adapter.downloads ? [createDownloadedFileToolSource({ policy: new DownloadedFilePolicy({
 				reader: this.#adapter.downloads.reader,
 				ui: this.#uiBridge,
@@ -34250,6 +34341,7 @@ function assembleAssistantParts(source) {
 		...source.skills.map(skillPart),
 		...source.perceptions.map(perceptionPart),
 		...source.runDetails.map((item) => item.part),
+		...source.precedingBody ?? [],
 		...bodyParts(source.contentParts, source.text),
 		...source.interactions.map(interactionPart),
 		...source.candidates.map(skillCandidatePart),
@@ -34272,15 +34364,24 @@ function terminationParts(phases) {
 		}
 	}];
 }
+/** 引用在「已落盘」集合里的键；blocks 一个 run 至多一个，无需再分 */
+const refKey = (part) => part.type === "surface" ? `surface:${part.surfaceId}` : "blocks";
 /**
 * 同 run 的运行细节合并计划（UI-UX5 #7）：FR-17.8 的交互切片会让一个 run 产生多条
 * assistant 消息，每条各自组装「运行细节」就是用户看到的两个框（run id 相同）。
 * 这里把相位/技能/工具并入**第一条片段**（表单上方），后续片段与续跑 live 不再出框。
 * 相位本来就是无重叠的增量切片（`#flushed` 水位），直接拼接即全量；
 * live 的相位是全量累积，增量 = 全量减去已落盘数。
+*
+* 分册 16：run 未终止时还要把已切片载体本身并进 live 气泡（`hidden`）。
+* 切片会把写到一半的正文从 live 气泡搬到一个新 id 的消息上，
+* live 气泡随即被清空再由下一轮填满——每次工具调用都卸载/重建一次 DOM，
+* 就是用户看到的「正文下半段删掉又补新的进去、高度一会变小一会变大」。
+* 合并后一个进行中的 run 始终只有一条气泡，内容只增不减；终态消息到达后才恢复切片形态（历史不变）。
 */
 function planRunTrace(messages, live) {
 	const byMessage = /* @__PURE__ */ new Map();
+	const hidden = /* @__PURE__ */ new Set();
 	let livePlan;
 	const byRun = /* @__PURE__ */ new Map();
 	for (const message of messages) {
@@ -34321,16 +34422,27 @@ function planRunTrace(messages, live) {
 				terminationPhases: message.phases ?? []
 			});
 		});
-		if (liveHere) livePlan = {
-			phases: [],
-			skills: [],
-			runDetails: [],
-			settled: false,
-			terminationPhases: liveHere.phases
-		};
+		if (liveHere) {
+			const refs = /* @__PURE__ */ new Set();
+			for (const message of carriers) for (const part of message.contentParts ?? []) if (part.type !== "text") refs.add(refKey(part));
+			for (const message of carriers) hidden.add(message.id);
+			livePlan = {
+				phases: mergedPhases,
+				skills: mergedSkills,
+				runDetails: mergedRunDetails,
+				settled: false,
+				terminationPhases: liveHere.phases,
+				merged: {
+					carriers,
+					text: carriers.reduce((total, m) => total + (m.text?.length ?? 0), 0),
+					refs
+				}
+			};
+		}
 	}
 	return {
 		byMessage,
+		hidden,
 		...livePlan ? { live: livePlan } : {}
 	};
 }
@@ -34383,6 +34495,9 @@ function liveTiming(live) {
 	};
 }
 function liveMessage(live, trace) {
+	const from = trace?.merged?.text ?? 0;
+	const flushedRefs = trace?.merged?.refs;
+	const precedingBody = (trace?.merged?.carriers ?? []).flatMap((message) => [...bodyParts(message.contentParts, message.text), ...(message.interactions ?? []).map(interactionPart)]);
 	const content = assembleAssistantParts({
 		phases: trace?.phases ?? live.phases,
 		skills: trace?.skills ?? live.skills,
@@ -34391,8 +34506,9 @@ function liveMessage(live, trace) {
 			part: liveToolPart(call),
 			at: call.startedAt
 		})), live.thinkings),
-		text: live.text,
-		contentParts: materialize(live.ledger, live.text, 0, { includePending: true }),
+		precedingBody,
+		text: live.text.slice(from),
+		contentParts: materialize(live.ledger, live.text, from, { includePending: true }).filter((part) => part.type === "text" || flushedRefs === void 0 || !flushedRefs.has(refKey(part))),
 		interactions: [],
 		candidates: [],
 		settled: trace?.settled ?? false,
@@ -34427,13 +34543,14 @@ function liveMessage(live, trace) {
 */
 function toExternalMessages(messages, live, cache) {
 	const trace = planRunTrace(messages, live);
-	const result = messages.map((message) => {
-		if (message.role === "user") return userMessage(message);
+	const result = messages.flatMap((message) => {
+		if (message.role === "user") return [userMessage(message)];
+		if (trace.hidden.has(message.id)) return [];
 		const override = trace.byMessage.get(message.id);
 		const cached = cache?.get(message.id);
 		const external = cached !== void 0 && override === void 0 ? cached : assistantMessage(message, override);
 		if (override === void 0) cache?.set(message.id, external);
-		return external;
+		return [external];
 	});
 	const settled = messages.some((message) => message.role === "assistant" && message.runId === live?.runId && message.interactions === void 0);
 	if (live && !settled) result.push(liveMessage(live, trace.live));
@@ -34955,6 +35072,124 @@ function InteractionWaitBar({ bridge, label, elsewhere = false, panel, onLocate
 	});
 }
 
+//#endregion
+//#region src/react/CameraCaptureDialog.tsx
+/**
+* 取景与快门（分册 14 FR-14.5）。
+*
+* 点遮罩不关闭：摄像头开着时误点一下就得重新授权取流，代价与「丢掉表单草稿」同级。
+* 预览框按 4:3 留位，避免流还没出画时对话框高度跳一下。
+*/
+function CameraCaptureDialog({ open, busy, videoRef, onCapture, onCancel }) {
+	const t = useT();
+	return /* @__PURE__ */ jsx(Dialog, {
+		open,
+		onClose: onCancel,
+		dismissOnOutsideClick: false,
+		title: t("composer.camera.title"),
+		description: t("composer.camera.description"),
+		size: "lg",
+		footer: /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(Button, {
+			variant: "secondary",
+			onClick: onCancel,
+			children: t("common.cancel")
+		}), /* @__PURE__ */ jsx(Button, {
+			"data-testid": "composer-camera-shutter",
+			icon: /* @__PURE__ */ jsx(Camera, { className: "size-4" }),
+			disabled: busy,
+			onClick: onCapture,
+			children: t("composer.camera.shutter")
+		})] }),
+		children: /* @__PURE__ */ jsx("video", {
+			ref: videoRef,
+			"data-testid": "composer-camera-preview",
+			"aria-label": t("composer.camera.preview"),
+			autoPlay: true,
+			muted: true,
+			playsInline: true,
+			className: "aspect-[4/3] w-full rounded-card bg-subtle object-contain"
+		})
+	});
+}
+
+//#endregion
+//#region src/react/useComposerCamera.ts
+/**
+* composer 的拍照接线（分册 14）。照片只作为附件落进输入框，**不发送**——
+* 与语音同一条口径：拍歪了要能先删掉再重拍，自动发送会把误拍变成不可撤销的操作。
+*/
+function useComposerCamera(onPermissionDenied) {
+	const aui = useAui();
+	const [availability] = useState(() => checkCameraAvailability());
+	const [previewing, setPreviewing] = useState(false);
+	const [busy, setBusy] = useState(false);
+	const [failure, setFailure] = useState();
+	const sessionRef = useRef(void 0);
+	const videoElementRef = useRef(null);
+	const close = useCallback(() => {
+		sessionRef.current?.close();
+		sessionRef.current = void 0;
+		if (videoElementRef.current !== null) videoElementRef.current.srcObject = null;
+		setPreviewing(false);
+		setBusy(false);
+	}, []);
+	useEffect(() => () => sessionRef.current?.close(), []);
+	/** 侧栏 / popup 这类页面弹不出授权框，只有宿主知道该把用户带到哪儿去（FR-14.7） */
+	const report = useCallback((e) => {
+		const denied = e instanceof WebSkillError && e.code === "CAMERA_PERMISSION_DENIED";
+		setFailure(denied ? "denied" : "failed");
+		if (denied) onPermissionDenied?.();
+	}, [onPermissionDenied]);
+	const videoRef = useCallback((element) => {
+		videoElementRef.current = element;
+		if (element === null) return;
+		const stream = sessionRef.current?.stream;
+		if (stream === void 0) return;
+		element.srcObject = stream;
+		element.play().catch(() => void 0);
+	}, []);
+	return {
+		availability,
+		previewing,
+		busy,
+		start: useCallback(() => {
+			if (!availability.available || busy || previewing) return;
+			setFailure(void 0);
+			setBusy(true);
+			openCamera().then((session) => {
+				sessionRef.current = session;
+				setPreviewing(true);
+				setBusy(false);
+			}).catch((e) => {
+				setBusy(false);
+				report(e);
+			});
+		}, [
+			availability,
+			busy,
+			previewing,
+			report
+		]),
+		cancel: close,
+		capture: useCallback(() => {
+			const video = videoElementRef.current;
+			if (video === null || busy) return;
+			setBusy(true);
+			capturePhoto(video).then((file) => aui.thread.composer().addAttachment(file)).then(() => close()).catch((e) => {
+				close();
+				report(e);
+			});
+		}, [
+			aui,
+			busy,
+			close,
+			report
+		]),
+		videoRef,
+		...failure !== void 0 ? { failure } : {}
+	};
+}
+
 //#endregion
 //#region src/react/useComposerDictation.ts
 /** 转写片段拼到已有草稿后面：语音只做追加，不覆盖用户已经打好的字 */
@@ -34967,11 +35202,11 @@ function joinText(base, addition) {
 * composer 的语音输入接线（需求 7）。转写结果只写进输入框，**不发送**（FR-7.8）——
 * 语音识别不准是常态，自动发送会把识别错误变成不可撤销的操作。
 */
-function useComposerDictation(lang) {
+function useComposerDictation(lang, onPermissionDenied) {
 	const aui = useAui();
 	const [availability] = useState(() => checkDictationAvailability());
 	const [recording, setRecording] = useState(false);
-	const [error, setError] = useState();
+	const [failure, setFailure] = useState();
 	const sessionRef = useRef(void 0);
 	/** 本次录音开始时输入框里的内容；中间结果每次都在它后面重画，否则会自我叠加 */
 	const baseRef = useRef("");
@@ -34981,6 +35216,12 @@ function useComposerDictation(lang) {
 		setRecording(false);
 	}, []);
 	useEffect(() => () => sessionRef.current?.stop(), []);
+	/** 侧栏 / popup 这类页面弹不出授权框，只有宿主知道该把用户带到哪儿去（FR-10.1） */
+	const report = useCallback((e) => {
+		const denied = e instanceof WebSkillError && e.code === "DICTATION_PERMISSION_DENIED";
+		setFailure(denied ? "denied" : "failed");
+		if (denied) onPermissionDenied?.();
+	}, [onPermissionDenied]);
 	return {
 		availability,
 		recording,
@@ -34992,7 +35233,7 @@ function useComposerDictation(lang) {
 			if (!availability.available) return;
 			const composer = aui.thread.composer();
 			baseRef.current = composer.getState().text;
-			setError(void 0);
+			setFailure(void 0);
 			try {
 				sessionRef.current = startDictation({
 					lang,
@@ -35002,21 +35243,22 @@ function useComposerDictation(lang) {
 						aui.thread.composer().setText(baseRef.current);
 					},
 					onError: (e) => {
-						setError(messageOf(e));
+						report(e);
 						stop();
 					}
 				});
 				setRecording(true);
 			} catch (e) {
-				setError(messageOf(e));
+				report(e);
 			}
 		}, [
 			aui,
 			availability,
 			lang,
+			report,
 			stop
 		]),
-		...error !== void 0 ? { error } : {}
+		...failure !== void 0 ? { failure } : {}
 	};
 }
 
@@ -35091,13 +35333,22 @@ function ModelMenuButton({ models }) {
 		}, option.id))
 	})] });
 }
-function AssistantUiComposer({ running, disabled = false, waitTarget, placeholder, attachments = false, attachmentInfo, attachmentImages, centered = false, models, noModel, dictationLang, capabilities }) {
+function AssistantUiComposer({ running, disabled = false, waitTarget, placeholder, attachments = false, attachmentInfo, attachmentImages, centered = false, models, noModel, dictationLang, onDictationPermissionDenied, onCameraPermissionDenied, capabilities }) {
 	const t = useT();
 	const locale = useLocale();
-	const dictation = useComposerDictation(dictationLang ?? DEFAULT_DICTATION_LANG[locale]);
+	const dictation = useComposerDictation(dictationLang ?? DEFAULT_DICTATION_LANG[locale], onDictationPermissionDenied);
+	const camera = useComposerCamera(onCameraPermissionDenied);
 	const dictationReason = dictation.availability.available ? void 0 : t(`composer.dictate.${dictation.availability.reason}`);
+	const dictationFailure = dictation.failure === void 0 ? void 0 : dictation.failure === "denied" && onDictationPermissionDenied !== void 0 ? t("composer.dictate.denied.handoff") : t(`composer.dictate.${dictation.failure}`);
 	const waitReason = disabled ? t("interaction.wait", { target: waitTarget ?? t("interaction.wait.fallback") }) : void 0;
 	const attachmentReason = attachmentImages === void 0 || attachmentImages.enabled && attachmentImages.imageCapable ? void 0 : attachmentImages.enabled ? t("composer.addAttachment.modelNoImages") : t("composer.addAttachment.imagesOff");
+	/**
+	* 相机的禁用原因（FR-14.2）。三道门缺一不可，且顺序即优先级：
+	* 存不下 → 图片被关 / 模型不收图 → 浏览器不支持。先说最外层那道，
+	* 否则用户会照着「换 https」折腾半天，其实是模型压根不收图。
+	*/
+	const cameraReason = !attachments ? t("composer.camera.noStorage") : attachmentReason ?? (camera.availability.available ? void 0 : t(`composer.camera.${camera.availability.reason}`));
+	const cameraFailure = camera.failure === void 0 ? void 0 : camera.failure === "denied" && onCameraPermissionDenied !== void 0 ? t("composer.camera.denied.handoff") : t(`composer.camera.${camera.failure}`);
 	const plainChatHintId = useId();
 	return /* @__PURE__ */ jsx(ComposerPrimitive.Root, {
 		"data-testid": "assistant-ui-composer",
@@ -35231,70 +35482,102 @@ function AssistantUiComposer({ running, disabled = false, waitTarget, placeholde
 						]
 					}), /* @__PURE__ */ jsxs("div", {
 						className: "flex shrink-0 items-center gap-1",
-						children: [/* @__PURE__ */ jsxs("button", {
-							type: "button",
-							"data-testid": "composer-dictate",
-							"data-recording": dictation.recording ? "true" : void 0,
-							"aria-pressed": dictation.recording,
-							"aria-label": dictation.recording ? t("composer.dictate.stop") : t("composer.dictate"),
-							title: dictationReason ?? (dictation.recording ? t("composer.dictate.stop") : t("composer.dictate")),
-							disabled: dictationReason !== void 0,
-							onClick: dictation.toggle,
-							className: `inline-flex size-8 shrink-0 items-center justify-center rounded-full transition-colors disabled:cursor-not-allowed disabled:opacity-50 ${dictation.recording ? "animate-pulse bg-danger/10 text-danger" : "text-muted hover:bg-accent hover:text-ink"}`,
-							children: [dictation.recording ? /* @__PURE__ */ jsx(Square, {
-								className: "size-3 fill-current",
-								"aria-hidden": true
-							}) : /* @__PURE__ */ jsx(Mic, {
-								className: "size-4",
-								"aria-hidden": true
-							}), /* @__PURE__ */ jsx("span", {
-								className: "sr-only",
-								children: dictation.recording ? t("composer.dictate.recording") : t("composer.dictate")
-							})]
-						}), running ? /* @__PURE__ */ jsxs(ComposerPrimitive.Cancel, {
-							"data-testid": "composer-send",
-							"aria-label": t("composer.stop"),
-							className: "inline-flex size-8 shrink-0 items-center justify-center rounded-full border border-border text-ink transition-colors hover:bg-accent",
-							children: [/* @__PURE__ */ jsx(Square, {
-								className: "size-3 fill-current",
-								"aria-hidden": true
-							}), /* @__PURE__ */ jsx("span", {
-								className: "sr-only",
-								children: t("composer.stop")
-							})]
-						}) : noModel ? /* @__PURE__ */ jsxs("button", {
-							type: "button",
-							"data-testid": "composer-send",
-							"aria-label": t("composer.send"),
-							onClick: noModel.onConfigure,
-							className: "webskill-aui-send inline-flex size-8 shrink-0 items-center justify-center rounded-full transition-colors disabled:cursor-not-allowed disabled:opacity-50",
-							children: [/* @__PURE__ */ jsx(ArrowUp, {
-								className: "size-4",
-								"aria-hidden": true
-							}), /* @__PURE__ */ jsx("span", {
-								className: "sr-only",
-								children: t("composer.send")
-							})]
-						}) : /* @__PURE__ */ jsxs(ComposerPrimitive.Send, {
-							"data-testid": "composer-send",
-							"aria-label": t("composer.send"),
-							className: "webskill-aui-send inline-flex size-8 shrink-0 items-center justify-center rounded-full transition-colors disabled:cursor-not-allowed disabled:opacity-50",
-							children: [/* @__PURE__ */ jsx(ArrowUp, {
-								className: "size-4",
-								"aria-hidden": true
-							}), /* @__PURE__ */ jsx("span", {
-								className: "sr-only",
-								children: t("composer.send")
-							})]
-						})]
+						children: [
+							/* @__PURE__ */ jsxs("button", {
+								type: "button",
+								"data-testid": "composer-camera",
+								"aria-label": t("composer.camera"),
+								title: cameraReason === void 0 ? t("composer.camera") : `${t("composer.camera")} — ${cameraReason}`,
+								disabled: cameraReason !== void 0 || camera.busy,
+								onClick: camera.start,
+								className: "inline-flex size-8 shrink-0 items-center justify-center rounded-full text-muted transition-colors hover:bg-accent hover:text-ink disabled:cursor-not-allowed disabled:opacity-50",
+								children: [/* @__PURE__ */ jsx(Camera, {
+									className: "size-4",
+									"aria-hidden": true
+								}), /* @__PURE__ */ jsx("span", {
+									className: "sr-only",
+									children: t("composer.camera")
+								})]
+							}),
+							/* @__PURE__ */ jsxs("button", {
+								type: "button",
+								"data-testid": "composer-dictate",
+								"data-recording": dictation.recording ? "true" : void 0,
+								"aria-pressed": dictation.recording,
+								"aria-label": dictation.recording ? t("composer.dictate.stop") : t("composer.dictate"),
+								title: dictationReason ?? (dictation.recording ? t("composer.dictate.stop") : t("composer.dictate")),
+								disabled: dictationReason !== void 0,
+								onClick: dictation.toggle,
+								className: `inline-flex size-8 shrink-0 items-center justify-center rounded-full transition-colors disabled:cursor-not-allowed disabled:opacity-50 ${dictation.recording ? "animate-pulse bg-danger/10 text-danger" : "text-muted hover:bg-accent hover:text-ink"}`,
+								children: [dictation.recording ? /* @__PURE__ */ jsx(Square, {
+									className: "size-3 fill-current",
+									"aria-hidden": true
+								}) : /* @__PURE__ */ jsx(Mic, {
+									className: "size-4",
+									"aria-hidden": true
+								}), /* @__PURE__ */ jsx("span", {
+									className: "sr-only",
+									children: dictation.recording ? t("composer.dictate.recording") : t("composer.dictate")
+								})]
+							}),
+							running ? /* @__PURE__ */ jsxs(ComposerPrimitive.Cancel, {
+								"data-testid": "composer-send",
+								"aria-label": t("composer.stop"),
+								className: "inline-flex size-8 shrink-0 items-center justify-center rounded-full border border-border text-ink transition-colors hover:bg-accent",
+								children: [/* @__PURE__ */ jsx(Square, {
+									className: "size-3 fill-current",
+									"aria-hidden": true
+								}), /* @__PURE__ */ jsx("span", {
+									className: "sr-only",
+									children: t("composer.stop")
+								})]
+							}) : noModel ? /* @__PURE__ */ jsxs("button", {
+								type: "button",
+								"data-testid": "composer-send",
+								"aria-label": t("composer.send"),
+								onClick: noModel.onConfigure,
+								className: "webskill-aui-send inline-flex size-8 shrink-0 items-center justify-center rounded-full transition-colors disabled:cursor-not-allowed disabled:opacity-50",
+								children: [/* @__PURE__ */ jsx(ArrowUp, {
+									className: "size-4",
+									"aria-hidden": true
+								}), /* @__PURE__ */ jsx("span", {
+									className: "sr-only",
+									children: t("composer.send")
+								})]
+							}) : /* @__PURE__ */ jsxs(ComposerPrimitive.Send, {
+								"data-testid": "composer-send",
+								"aria-label": t("composer.send"),
+								className: "webskill-aui-send inline-flex size-8 shrink-0 items-center justify-center rounded-full transition-colors disabled:cursor-not-allowed disabled:opacity-50",
+								children: [/* @__PURE__ */ jsx(ArrowUp, {
+									className: "size-4",
+									"aria-hidden": true
+								}), /* @__PURE__ */ jsx("span", {
+									className: "sr-only",
+									children: t("composer.send")
+								})]
+							})
+						]
 					})]
 				}),
-				dictation.error !== void 0 ? /* @__PURE__ */ jsx("p", {
+				dictationFailure !== void 0 ? /* @__PURE__ */ jsx("p", {
 					"data-testid": "composer-dictate-error",
 					role: "alert",
 					className: "text-xs text-danger",
-					children: dictation.error
-				}) : null
+					children: dictationFailure
+				}) : null,
+				cameraFailure !== void 0 ? /* @__PURE__ */ jsx("p", {
+					"data-testid": "composer-camera-error",
+					role: "alert",
+					className: "text-xs text-danger",
+					children: cameraFailure
+				}) : null,
+				/* @__PURE__ */ jsx(CameraCaptureDialog, {
+					open: camera.previewing,
+					busy: camera.busy,
+					videoRef: camera.videoRef,
+					onCapture: camera.capture,
+					onCancel: camera.cancel
+				})
 			]
 		})
 	});
@@ -45858,8 +46141,155 @@ function InlineBlocks() {
 	});
 }
 
+//#endregion
+//#region src/react/authorizeDetails.ts
+/** 页面操作确认卡的载荷；形状不对就整段不渲染，退回通用授权展示 */
+function pageActionDetails(details) {
+	if (typeof details !== "object" || details === null) return void 0;
+	const record = details;
+	const action = record["action"];
+	const target = record["target"];
+	if (typeof action !== "string" || !PAGE_ACTION_KINDS.includes(action)) return void 0;
+	if (typeof target !== "object" || target === null) return void 0;
+	const { role, name, frame } = target;
+	if (typeof role !== "string") return void 0;
+	const value = record["value"];
+	const rememberLabel = record["rememberLabel"];
+	return {
+		action,
+		role,
+		...typeof name === "string" ? { name } : {},
+		...typeof value === "string" ? { value } : {},
+		...typeof frame === "string" ? { frame } : {},
+		...record["elevated"] === true ? { elevated: true } : {},
+		...record["rememberable"] === true ? { rememberable: true } : {},
+		...typeof rememberLabel === "string" ? { rememberLabel } : {}
+	};
+}
+/**
+* 下载文件确认卡的载荷（0.14.0 分册 20）。与 `pageActionDetails` 同一条规矩：
+* 形状不对就整段不渲染，退回通用授权展示，不猜。
+*/
+function downloadedFileDetails(details) {
+	if (typeof details !== "object" || details === null) return void 0;
+	const record = details;
+	const action = record["action"];
+	if (action !== "list" && action !== "read") return void 0;
+	const file = record["file"];
+	const rememberLabel = record["rememberLabel"];
+	const named = typeof file === "object" && file !== null ? file : void 0;
+	return {
+		action,
+		...typeof named?.["name"] === "string" && typeof named["size"] === "number" ? { file: {
+			name: named["name"],
+			size: named["size"]
+		} } : {},
+		...record["rememberable"] === true ? { rememberable: true } : {},
+		...typeof rememberLabel === "string" ? { rememberLabel } : {}
+	};
+}
+/** 上传文件确认卡的载荷（0.15.0 分册 17，0.17.0 分册 19 起结构化） */
+function uploadFileDetails(details) {
+	if (typeof details !== "object" || details === null) return void 0;
+	const record = details;
+	const skill = record["skill"];
+	if (typeof skill !== "string") return void 0;
+	const file = record["file"];
+	const named = typeof file === "object" && file !== null ? file : void 0;
+	return {
+		skill,
+		...typeof named?.["name"] === "string" && typeof named["contentType"] === "string" && typeof named["size"] === "number" ? { file: {
+			name: named["name"],
+			contentType: named["contentType"],
+			size: named["size"]
+		} } : {}
+	};
+}
+/** 五个沙箱能力闸门的共用载荷（`gate()` 统一注入 `skill`，其余按能力各带一项） */
+function sandboxDetails(details) {
+	if (typeof details !== "object" || details === null) return void 0;
+	const record = details;
+	const skill = record["skill"];
+	if (typeof skill !== "string") return void 0;
+	const out = { skill };
+	for (const key of [
+		"path",
+		"sourceId",
+		"question"
+	]) {
+		const value = record[key];
+		if (typeof value === "string") out[key] = value;
+	}
+	return out;
+}
+/**
+* 授权卡正文的本地化文案（分册 19 FR-19.2 / FR-19.6）。
+*
+* 活卡、只读回看、非 native 三档的 spec 通道读的是同一个 `request`，因此这份映射
+* 只能有一份：写进任一视图都会让另外两个继续显示 runtime 的英文原句——
+* 0.12.0 分册 23 与 0.16.0 分册 15 各犯过一次。
+* 认不得的能力或形状不对的载荷返回 undefined，正文回落到 `request.message`（FR-19.5）。
+*/
+function localizedAuthorizeMessage(request, t) {
+	if (request.type !== "authorize") return void 0;
+	if (request.capability === "readUploadFile") {
+		const details = uploadFileDetails(request.details);
+		if (details === void 0) return void 0;
+		const head = t("interaction.uploadFile.read", { skill: details.skill });
+		if (details.file === void 0) return head;
+		return `${head} ${t("interaction.uploadFile.file", {
+			name: details.file.name,
+			type: details.file.contentType,
+			size: formatBytes(details.file.size)
+		})}`;
+	}
+	if (request.capability === "readReference" || request.capability === "readAsset" || request.capability === "writeArtifact" || request.capability === "fetchData" || request.capability === "confirm") {
+		const details = sandboxDetails(request.details);
+		if (details === void 0) return void 0;
+		if (request.capability === "fetchData") {
+			if (details["sourceId"] === void 0) return void 0;
+			return t("interaction.sandbox.fetchData", {
+				skill: details["skill"],
+				source: details["sourceId"]
+			});
+		}
+		if (request.capability === "confirm") {
+			const head = t("interaction.sandbox.confirm", { skill: details["skill"] });
+			return details["question"] === void 0 ? head : `${head} ${details["question"]}`;
+		}
+		if (details["path"] === void 0) return void 0;
+		return t(`interaction.sandbox.${request.capability}`, {
+			skill: details["skill"],
+			path: details["path"]
+		});
+	}
+	if (request.capability === "pageAction") {
+		const details = pageActionDetails(request.details);
+		if (details === void 0) return void 0;
+		return t(`interaction.pageAction.${details.action}`, { target: details.name ?? t(`interaction.pageAction.role.${details.action}`) });
+	}
+	if (request.capability === "readDownloadedFile") {
+		const details = downloadedFileDetails(request.details);
+		if (details === void 0) return void 0;
+		const head = t(`interaction.downloadedFile.${details.action}`);
+		if (details.file === void 0) return head;
+		return `${head} ${t("interaction.downloadedFile.file", {
+			name: details.file.name,
+			size: formatBytes(details.file.size)
+		})}`;
+	}
+}
+
 //#endregion
 //#region src/react/interactionLabels.ts
+/**
+* 这两类的次要按钮是「不同意」而非「中止这次运行」（UI-UX8 D14）：
+* 报成 cancelled 会让运行整个结束，工具拿不到否决结果，也就不会留下否决的审计。
+* native 卡与 spec 三档共用本判定，不得各写一份（分册 15 缺陷 C 就是两份逐渐走歧）。
+*/
+function declinesOnCancel(request) {
+	return request.type === "confirm" || request.type === "authorize";
+}
 /** 交互类型 → 标题字典键。徽章与声明树共用，避免两处各写一份映射。 */
 function interactionTitleKey(request) {
 	return request.type === "file-pick" ? "interaction.filePick.title" : `interaction.${request.type}.title`;
@@ -45869,10 +46299,12 @@ function interactionTitleKey(request) {
 * 四档共用本函数，切换渲染档不会让同一个请求出现两套文案。
 */
 function interactionLabels(request, t) {
+	const message = localizedAuthorizeMessage(request, t);
 	return {
 		title: request.type === "form" && request.title ? request.title : t(interactionTitleKey(request)),
 		submitLabel: t(request.type === "authorize" ? "interaction.allow" : request.type === "confirm" ? "interaction.confirm" : "interaction.submit"),
-		cancelLabel: t(request.type === "authorize" ? "interaction.deny" : "interaction.cancel")
+		cancelLabel: t(request.type === "authorize" ? "interaction.deny" : "interaction.cancel"),
+		...message !== void 0 ? { message } : {}
 	};
 }
 
@@ -47410,51 +47842,6 @@ function fileToBase64(file) {
 		reader.readAsDataURL(file);
 	});
 }
-/** 页面操作确认卡的载荷；形状不对就整段不渲染，退回通用授权展示 */
-function pageActionDetails(details) {
-	if (typeof details !== "object" || details === null) return void 0;
-	const record = details;
-	const action = record["action"];
-	const target = record["target"];
-	if (typeof action !== "string" || !PAGE_ACTION_KINDS.includes(action)) return void 0;
-	if (typeof target !== "object" || target === null) return void 0;
-	const { role, name, frame } = target;
-	if (typeof role !== "string") return void 0;
-	const value = record["value"];
-	const rememberLabel = record["rememberLabel"];
-	return {
-		action,
-		role,
-		...typeof name === "string" ? { name } : {},
-		...typeof value === "string" ? { value } : {},
-		...typeof frame === "string" ? { frame } : {},
-		...record["elevated"] === true ? { elevated: true } : {},
-		...record["rememberable"] === true ? { rememberable: true } : {},
-		...typeof rememberLabel === "string" ? { rememberLabel } : {}
-	};
-}
-/**
-* 下载文件确认卡的载荷（0.14.0 分册 20）。与 `pageActionDetails` 同一条规矩：
-* 形状不对就整段不渲染，退回通用授权展示，不猜。
-*/
-function downloadedFileDetails(details) {
-	if (typeof details !== "object" || details === null) return void 0;
-	const record = details;
-	const action = record["action"];
-	if (action !== "list" && action !== "read") return void 0;
-	const file = record["file"];
-	const rememberLabel = record["rememberLabel"];
-	const named = typeof file === "object" && file !== null ? file : void 0;
-	return {
-		action,
-		...typeof named?.["name"] === "string" && typeof named["size"] === "number" ? { file: {
-			name: named["name"],
-			size: named["size"]
-		} } : {},
-		...record["rememberable"] === true ? { rememberable: true } : {},
-		...typeof rememberLabel === "string" ? { rememberLabel } : {}
-	};
-}
 /**
 * 轨迹证据载荷（分册 30）。形状不对就整段不渲染，退回 `preview` 纯文本——
 * 与 `pageActionDetails` 同一个先例：认不得的结构不猜。
@@ -47490,17 +47877,19 @@ function ActiveInteractionCard({ request, bridge }) {
 	const pageAction = isAuthorize && request.capability === "pageAction" ? pageActionDetails(request.details) : void 0;
 	const downloadedFile = isAuthorize && request.capability === "readDownloadedFile" ? downloadedFileDetails(request.details) : void 0;
 	const traceEvidence = isAuthorize ? traceEvidenceDetails(request.details) : void 0;
-	const spec = interactionToUiSpec(request.type === "authorize" && pageAction !== void 0 ? {
+	const localized = pageAction !== void 0 || downloadedFile !== void 0;
+	const spec = interactionToUiSpec(request.type === "authorize" && localized ? {
 		...request,
 		message: ""
 	} : request, {
 		...interactionLabels(request, t),
+		...localized ? { message: "" } : {},
 		title: request.type === "form" && request.title ? request.title : ""
 	});
 	const preview = isAuthorize && typeof request.details === "object" && request.details !== null ? request.details["preview"] : void 0;
 	const handleAction = (event) => {
 		if (event.intent !== "submit") {
-			if (request.type === "confirm" || request.type === "authorize") {
+			if (declinesOnCancel(request)) {
 				bridge.resolve({
 					id: request.id,
 					value: false
@@ -47604,22 +47993,30 @@ function ActiveInteractionCard({ request, bridge }) {
 							}), pageAction.rememberLabel ?? t("interaction.pageAction.remember")]
 						}) : null
 					] }) : null,
-					downloadedFile ? /* @__PURE__ */ jsxs(Fragment$1, { children: [downloadedFile.file ? /* @__PURE__ */ jsx("p", {
-						"data-testid": "interaction-downloaded-file",
-						className: "text-sm text-ink",
-						children: t("interaction.downloadedFile.file", {
-							name: downloadedFile.file.name,
-							size: formatBytes(downloadedFile.file.size)
-						})
-					}) : null, downloadedFile.rememberable === true ? /* @__PURE__ */ jsxs("label", {
-						className: "flex items-center gap-2 text-sm text-ink",
-						children: [/* @__PURE__ */ jsx("input", {
-							type: "checkbox",
-							"data-testid": "interaction-downloaded-file-remember",
-							checked: remember,
-							onChange: (event) => setRemember(event.currentTarget.checked)
-						}), downloadedFile.rememberLabel ?? t("interaction.downloadedFile.remember")]
-					}) : null] }) : null,
+					downloadedFile ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
+						/* @__PURE__ */ jsx("p", {
+							"data-testid": "interaction-downloaded-file-action",
+							className: "text-sm text-ink",
+							children: t(`interaction.downloadedFile.${downloadedFile.action}`)
+						}),
+						downloadedFile.file ? /* @__PURE__ */ jsx("p", {
+							"data-testid": "interaction-downloaded-file",
+							className: "text-sm text-ink",
+							children: t("interaction.downloadedFile.file", {
+								name: downloadedFile.file.name,
+								size: formatBytes(downloadedFile.file.size)
+							})
+						}) : null,
+						downloadedFile.rememberable === true ? /* @__PURE__ */ jsxs("label", {
+							className: "flex items-center gap-2 text-sm text-ink",
+							children: [/* @__PURE__ */ jsx("input", {
+								type: "checkbox",
+								"data-testid": "interaction-downloaded-file-remember",
+								checked: remember,
+								onChange: (event) => setRemember(event.currentTarget.checked)
+							}), downloadedFile.rememberLabel ?? t("interaction.downloadedFile.remember")]
+						}) : null
+					] }) : null,
 					traceEvidence ? /* @__PURE__ */ jsxs("div", {
 						"data-testid": "interaction-trace-evidence",
 						children: [/* @__PURE__ */ jsx("div", {
@@ -47667,7 +48064,7 @@ function ActiveInteractionCard({ request, bridge }) {
 							}, `${step.tool}-${index}`))
 						})]
 					}) : null,
-					request.details !== void 0 && pageAction === void 0 ? /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("div", {
+					request.details !== void 0 && !localized ? /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("div", {
 						className: "mb-1 text-xs font-medium text-muted",
 						children: t("interaction.authorize.details")
 					}), /* @__PURE__ */ jsx("pre", {
@@ -47948,11 +48345,15 @@ function SpecInteraction({ channel, renderer }) {
 	}, [channel, renderer]);
 	if (!session) return null;
 	const Surface = SURFACES[renderer];
+	const { request } = session;
 	return /* @__PURE__ */ jsx(Surface, {
-		surfaceId: session.request.id,
+		surfaceId: request.id,
 		spec: session.spec,
 		actions: INTERACTION_ACTIONS,
-		onAction: (event) => channel.handleAction(event)
+		onAction: (event) => {
+			if (event.intent !== "submit" && declinesOnCancel(request)) channel.decline(request.id);
+			else channel.handleAction(event);
+		}
 	});
 }
 
@@ -48088,7 +48489,7 @@ async function downloadArtifactFile(storage, chatRoot, file) {
 * presentation shell and accessible thread primitives.
 * @stable
 */
-function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, renderer: rendererProp, dictationLang: dictationLangProp, surfaceRegistry, layout = "auto", sessionList = "auto", onOpenSettings, docked, onDock, onClose, onEngineReady }) {
+function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, renderer: rendererProp, dictationLang: dictationLangProp, onDictationPermissionDenied, onCameraPermissionDenied, surfaceRegistry, layout = "auto", sessionList = "auto", onOpenSettings, docked, onDock, onClose, onEngineReady }) {
 	const engine = useMemo(() => new ChatEngine(adapter, {
 		...config?.chatRoot ? { chatRoot: config.chatRoot } : {},
 		...config?.llm ? { llm: config.llm } : {},
@@ -48785,6 +49186,8 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 										imageCapable: modelTakesImages
 									},
 									...dictationLang !== "" ? { dictationLang } : {},
+									...onDictationPermissionDenied ? { onDictationPermissionDenied } : {},
+									...onCameraPermissionDenied ? { onCameraPermissionDenied } : {},
 									...composerModels && !noUsableModel ? { models: composerModels } : {},
 									...noUsableModel ? { noModel: { onConfigure: () => setNoModelGuideOpen(true) } } : {},
 									...config?.placeholder ? { placeholder: config.placeholder } : {}
@@ -48861,7 +49264,7 @@ function VercelPayloadPreview({ bridge }) {
 * Version of the published `@webskill/chatbot` package, injected at build time.
 * @stable
 */
-const CHATBOT_VERSION = "0.12.0";
+const CHATBOT_VERSION = "0.14.0";
 
 //#endregion
 export { A2uiSurfaceHost, A2uiSurfaceSnapshotHost, CHATBOT_VERSION, ChatEngine, Chatbot, CompositeUiBridge, DEFAULT_RENDERER_CAPABILITIES, DEFAULT_RUNTIME_CONFIG_STORAGE_KEY, ErrorCard, InteractionCard, InterruptedBanner, OpenUiSurfaceHost, OpenUiSurfaceSnapshotHost, ResultBlockList, ResultBlocksPro, SkillBadges, SpecInteraction, VercelPayloadPreview, VercelSurfaceHost, VercelSurfaceSnapshotHost, chatbotDictionary, configureA2uiMarkdown, createLocalStorageRuntimeConfigStore, createMemoryRuntimeConfigStore, isLlmEntryUsable, pickUsableLlmEntry, probeA2uiAvailability, probeOpenUiAvailability, sandboxExecutorDeps, useT };