@webskill/chatbot 0.18.0 → 0.19.0

package/dist/index.js

@@ -1,5 +1,5 @@
 import { i as __toESM, r as __require, t as __commonJSMin } from "./rolldown-runtime-DZ8SGSJo.js";
-import { i as withRuntimeConfigDefaults, n as defaultRuntimeConfig, o as mergeQuickPrompts, r as mergeRuntimeConfigDefaults, s as normalizeLocalizedText } from "./types-C4dzGOPp.js";
+import { i as withRuntimeConfigDefaults, n as defaultRuntimeConfig, o as mergeQuickPrompts, r as mergeRuntimeConfigDefaults, s as normalizeLocalizedText } from "./types-D6kVxBO9.js";
 import { a as svg, i as html$1, n as refractor, o as find, r as stringify$1, s as stringify } from "./core-D3Tq37jA.js";
 import { t as require_core } from "./core-DBetA176.js";
 import { t as markup } from "./markup-D2NSmoAx.js";
@@ -19,11 +19,11 @@ import { fromMarkdown } from "mdast-util-from-markdown";
 import { gfmFromMarkdown, gfmToMarkdown } from "mdast-util-gfm";
 import { gfm } from "micromark-extension-gfm";
 import { ActionBarPrimitive, AttachmentPrimitive, AuiProvider, ComposerPrimitive, ExternalThread, INTERNAL, MessagePrimitive, ThreadListItemPrimitive, ThreadListPrimitive, ThreadPrimitive, useAui, useAuiState, useMessagePartText } from "@assistant-ui/react";
-import { BEHAVIOR_RECORDS_KEY, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FullDisclosureRouter, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, USER_PROFILE_KEY, WebSkillError, WebSkillRuntime, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, diffUserProfile, exportUserProfile, formatAttachmentText, isUnsupportedRunSnapshot, messageOf, readBehaviorRecords, readUserProfile, refineUserProfile, resolveInsideRoot, sanitizeUntrustedLine, summarizeRunUsage, summarizeToolCalls, textParts } from "@webskill/sdk";
-import { BrowserWorkerScriptExecutor, WebOfficePolicy, capturePhoto, checkCameraAvailability, checkDictationAvailability, compressImageToBudget, createEncryptedMemoryStore, createLlmClient, createWebOfficeToolSource, deleteMemoryEncryptionKey, openCamera, openMemoryEncryptionKey, probeChromeBuiltinAvailability, startDictation } from "@webskill/sdk/browser";
+import { BEHAVIOR_RECORDS_KEY, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FullDisclosureRouter, SPREADSHEET_LIMITS, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, USER_PROFILE_KEY, WebSkillError, WebSkillRuntime, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, diffUserProfile, exportUserProfile, extractedDocumentFormat, formatAttachmentText, isUnsupportedRunSnapshot, messageOf, readBehaviorRecords, readUserProfile, refineUserProfile, resolveInsideRoot, sanitizeUntrustedLine, summarizeRunUsage, summarizeToolCalls, textParts } from "@webskill/sdk";
+import { BrowserWorkerScriptExecutor, WebOfficePolicy, capturePhoto, checkCameraAvailability, checkDictationAvailability, compressImageToBudget, createEncryptedMemoryStore, createLlmClient, createWebOfficeToolSource, deleteMemoryEncryptionKey, openCamera, openMemoryEncryptionKey, probeChromeBuiltinAvailability, startDictation, toDocumentImage } from "@webskill/sdk/browser";
 import { JsonRenderSpecSurface, NativeSpecSurface, OpenUiSpecSurface, ReactBridgeState, SpecInteractionChannel, SurfaceFormTextsProvider, UiSurfaceSnapshotList, probeJsonRenderAvailability } from "@webskill/sdk/ui-react";
 import { A2UI_SPEC_FORM_PATH, collectFormScopes, createUiCatalogToolSource, fromA2uiSpecAction, fromA2uiSurfaceAction, interactionToFormModel, interactionToUiSpec, loadOpenUiPeers, loadWebSkillLitCatalog, renderMiniChart, shapeInteractionValue, toA2uiSpecMessages, toA2uiSurfaceAction, toVercelToolInvocation, uiCatalog } from "@webskill/sdk/ui";
-import { DownloadedFilePolicy, PAGE_ACTION_KINDS, TodoStore, createDelegationToolSource, createDocumentToolSource, createDownloadedFileToolSource, createPageActionToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createSpreadsheetToolSource, createTabWorksetToolSource, createTodoToolSource, withDelegationOrigin } from "@webskill/sdk/agent";
+import { DownloadedFilePolicy, PAGE_ACTION_KINDS, TodoStore, createDelegationToolSource, createDocumentToolSource, createDownloadedFileToolSource, createDwgToolSource, createPageActionToolSource, createPageImageToolSource, createPagePerceptionToolSource, createRemoteImageToolSource, createSkillGenerationToolSource, createSpreadsheetToolSource, createTabWorksetToolSource, createTemplateToolSource, createTodoToolSource, withDelegationOrigin } from "@webskill/sdk/agent";
 import { DataRenderers, Tools } from "@assistant-ui/core/react";
 import { ModelContext, Suggestions } from "@assistant-ui/core/store";
 import { Derived, attachTransformScopes, useClientLookup, useClientResource } from "@assistant-ui/store";
@@ -19599,6 +19599,284 @@ function defaultUrlTransform(value) {
 	return "";
 }
 
+//#endregion
+//#region ../ui-kit/src/markdown/image.tsx
+/** `<img>` 里的 data URL 不会执行脚本，SVG 同理——放行的前提就是这个上下文 */
+const DATA_IMAGE = /^data:image\/[a-z0-9.+-]+[;,]/i;
+/**
+* 仓内图片引用。模型输出不了 base64，所以正文里贴附件图只能靠短引用，
+* 由宿主注入的解析器换成可显示的 URL。与投放通道的 `data-webskill-image` 同一套引用形态。
+*/
+const IMAGE_REF = /^(upload|artifact):/i;
+/**
+* react-markdown 的默认 `urlTransform` 只放行 `https?|ircs?|mailto|xmpp`，
+* 于是 `![](data:image/png;base64,…)` 与 `![](upload:xxx)` 的 src 都被剥成空串。
+*
+* 这里**只对 `<img src>` 补放行**：`<a href="data:image/svg+xml,…">` 点开是导航，
+* 那个上下文里 SVG 的脚本会执行，所以 href 仍走默认策略。
+*/
+const markdownUrlTransform = (url, key, node) => {
+	if (key === "src" && node.tagName === "img" && (DATA_IMAGE.test(url) || IMAGE_REF.test(url))) return url;
+	return defaultUrlTransform(url);
+};
+const ResolverContext = createContext(void 0);
+/**
+* 注入引用解析器。
+*
+* `resolve` **必须是稳定引用**（`useCallback` 且不依赖每次渲染新建的值），
+* 否则每次渲染都会重新解析一遍图片。
+*/
+function MarkdownImageResolverProvider({ resolve, children }) {
+	return /* @__PURE__ */ jsx(ResolverContext.Provider, {
+		value: resolve,
+		children
+	});
+}
+/**
+* 正文里的图片。外链、data URL、同源相对路径直接显示；`upload:` / `artifact:` 引用
+* 走宿主注入的解析器。
+*
+* `referrerPolicy="no-referrer"`：外链图会向第三方发请求，不必把当前会话的 URL 一起送出去。
+* 失败时退回 `alt` 文本而不是留破图——alt 由内容方给，天然随内容语言，不需要另配文案。
+*/
+function MarkdownImage({ node: _node, className, src, alt, ...rest }) {
+	const resolve = useContext(ResolverContext);
+	const [failed, setFailed] = useState(false);
+	const [resolved, setResolved] = useState();
+	const isRef = typeof src === "string" && IMAGE_REF.test(src);
+	useEffect(() => {
+		if (!isRef || typeof src !== "string") return;
+		if (resolve === void 0) {
+			setFailed(true);
+			return;
+		}
+		let cancelled = false;
+		let created;
+		setFailed(false);
+		setResolved(void 0);
+		resolve(src).then((url) => {
+			if (url === void 0) {
+				if (!cancelled) setFailed(true);
+				return;
+			}
+			created = url;
+			if (cancelled) {
+				if (url.startsWith("blob:")) URL.revokeObjectURL(url);
+				return;
+			}
+			setResolved(url);
+		}).catch(() => {
+			if (!cancelled) setFailed(true);
+		});
+		return () => {
+			cancelled = true;
+			if (created?.startsWith("blob:")) URL.revokeObjectURL(created);
+		};
+	}, [
+		isRef,
+		resolve,
+		src
+	]);
+	const effective = isRef ? resolved : src;
+	const text = typeof alt === "string" ? alt : "";
+	if (failed || effective === void 0 || effective === "") {
+		if (isRef && !failed) return null;
+		return /* @__PURE__ */ jsxs("span", {
+			className: "my-2 inline-flex items-center gap-1.5 rounded-md bg-subtle px-2 py-1 text-xs text-muted",
+			children: [/* @__PURE__ */ jsx(ImageOff, {
+				className: "size-3.5 shrink-0",
+				"aria-hidden": true
+			}), text === "" ? null : /* @__PURE__ */ jsx("span", { children: text })]
+		});
+	}
+	return /* @__PURE__ */ jsx("img", {
+		src: effective,
+		alt: text,
+		loading: "lazy",
+		decoding: "async",
+		referrerPolicy: "no-referrer",
+		onError: () => setFailed(true),
+		className: cn("my-2 max-h-96 max-w-full rounded-card border border-border object-contain", className),
+		...rest
+	});
+}
+
+//#endregion
+//#region ../ui-kit/src/theme/useDarkAncestor.ts
+/**
+* 声明了主题的祖先：`data-theme` 由 ThemeScope 挂（亮暗都挂），`.dark` 是宿主页面惯用的暗色类名。
+* 两者一起选，`closest` 才会停在**最近**的那一层，而不是越过亮色实例去命中外层的暗色宿主。
+*/
+const THEME_ANCESTOR = "[data-theme], .dark";
+function readDark(node) {
+	const scope = node.closest(THEME_ANCESTOR);
+	if (!scope) return false;
+	const declared = scope.getAttribute("data-theme");
+	return declared === null ? true : declared === "dark";
+}
+/**
+* 判定挂载点**最近的**主题祖先是否处于暗色（0.6.0 FR-20.4）。
+*
+* 不用 `document.querySelector('.dark')`：那是全局查询，宿主页面是暗色时，
+* 嵌在暗色宿主里的亮色 SDK 实例也会被判成暗色（反之亦然）。
+*
+* 返回 ref 回调而不是接受 ref 对象：ref 对象的赋值不触发渲染，拿不到「已挂载」这个时机。
+*
+* 首次判定在 ref 回调里**同步**完成，不等 effect：消费方（如按主题分叉的 markdown
+* 高亮器）可能在首帧就固化选择，晚一帧就会永久停在亮色（设计 15-01 §1.2 假设 H-c）。
+*/
+function useDarkAncestor() {
+	const scoped = useThemeValue();
+	const [node, setNode] = useState(null);
+	const [probed, setProbed] = useState(false);
+	const attach = useCallback((next) => {
+		setNode(next);
+		if (next) setProbed(readDark(next));
+	}, []);
+	useEffect(() => {
+		if (!node || scoped !== void 0) return;
+		const update = () => setProbed(readDark(node));
+		update();
+		const observer = new MutationObserver(update);
+		observer.observe(document.documentElement, {
+			attributes: true,
+			attributeFilter: ["class", "data-theme"],
+			subtree: true
+		});
+		return () => observer.disconnect();
+	}, [node, scoped]);
+	return [scoped !== void 0 ? scoped === "dark" : probed, attach];
+}
+
+//#endregion
+//#region ../ui-kit/src/markdown/mermaid.tsx
+/** 代码围栏的语言标签；两个渲染入口共用这一份判定 */
+const MERMAID_LANGUAGE = "mermaid";
+/**
+* 一条消息里常有多张图，共用同一个模块 promise，避免每个挂载点各发一次动态 import。
+* mermaid 是可选 peer：没装时这个 promise 一直是 rejected，各挂载点一律退回代码块。
+*/
+let mermaidModule;
+const loadMermaid = () => mermaidModule ??= import("mermaid");
+/** mermaid 主题变量 → 本仓语义 token。配色一律从这里取，不写死色值 */
+const MERMAID_COLOR_TOKENS = {
+	background: "--color-canvas",
+	primaryColor: "--color-subtle",
+	primaryTextColor: "--color-ink",
+	primaryBorderColor: "--color-border",
+	secondaryColor: "--color-surface",
+	tertiaryColor: "--color-card",
+	lineColor: "--color-muted",
+	textColor: "--color-ink"
+};
+/**
+* token 的值可能是 `oklch()` / `color-mix()`，而 mermaid 的调色靠 khroma，只认 rgb 一族。
+* 画进 1×1 画布再读像素，是唯一不依赖具体色彩空间的归一化方式。
+*/
+function readThemeColors(node) {
+	if (typeof document === "undefined") return void 0;
+	const styles = getComputedStyle(node);
+	const raw = Object.entries(MERMAID_COLOR_TOKENS).map(([variable, token]) => [variable, styles.getPropertyValue(token).trim()]).filter(([, value]) => value !== "");
+	if (raw.length === 0) return void 0;
+	const canvas = document.createElement("canvas");
+	canvas.width = 1;
+	canvas.height = 1;
+	const ctx = canvas.getContext("2d");
+	if (!ctx) return void 0;
+	const out = {};
+	for (const [variable, value] of raw) {
+		ctx.clearRect(0, 0, 1, 1);
+		ctx.fillStyle = value;
+		ctx.fillRect(0, 0, 1, 1);
+		const [r, g, b, a] = ctx.getImageData(0, 0, 1, 1).data;
+		out[variable] = `rgba(${r ?? 0}, ${g ?? 0}, ${b ?? 0}, ${(a ?? 255) / 255})`;
+	}
+	return out;
+}
+/**
+* mermaid 的配置是**全局**的（不像 echarts 是实例级），所以每次渲染前都整份重设：
+* 这样亮暗两个 ThemeScope 同页时，各自渲染各自那一次的配置仍然是对的。
+*/
+function buildConfig(dark, node) {
+	const themeVariables = node ? readThemeColors(node) : void 0;
+	return {
+		startOnLoad: false,
+		securityLevel: "strict",
+		htmlLabels: false,
+		suppressErrorRendering: true,
+		theme: dark ? "dark" : "default",
+		...themeVariables ? { themeVariables } : {}
+	};
+}
+/**
+* `click X href "…"` 即便在 strict 档也只是被 sanitize-url 过一遍，链接本身照样渲染。
+* 模型产出的图不该带跳转，所以插进 DOM 之前先把 href 摘干净。
+*/
+function stripDiagramLinks(svg) {
+	if (typeof DOMParser === "undefined" || !svg.includes("<a")) return svg;
+	const doc = new DOMParser().parseFromString(svg, "text/html");
+	const anchors = doc.querySelectorAll("a");
+	if (anchors.length === 0) return svg;
+	for (const anchor of anchors) {
+		anchor.removeAttribute("href");
+		anchor.removeAttribute("xlink:href");
+		anchor.removeAttribute("target");
+	}
+	return doc.body.innerHTML;
+}
+/**
+* 代码围栏里的 mermaid 图。两个 markdown 渲染入口共用本组件，
+* 差别只在 `fallback` 由各自的代码块呈现提供。
+*
+* 三种情况一律退回 `fallback`：宿主没装 mermaid、语法不合法、渲染抛错。
+* 不加「渲染失败」之类的提示——降级物就是图的源码，用户看得见那是什么
+* （与 `MarkdownImage` 退回 alt 同理）。
+*/
+function MermaidDiagram({ code, fallback, className }) {
+	const [dark, attachTheme] = useDarkAncestor();
+	const [svg, setSvg] = useState(void 0);
+	const nodeRef = useRef(null);
+	const seqRef = useRef(0);
+	const idBase = `webskill-mermaid-${useId().replace(/[^a-zA-Z0-9_-]/g, "")}`;
+	const attach = useCallback((node) => {
+		nodeRef.current = node;
+		attachTheme(node);
+	}, [attachTheme]);
+	useEffect(() => {
+		let cancelled = false;
+		(async () => {
+			try {
+				const mermaid = (await loadMermaid()).default;
+				if (cancelled) return;
+				mermaid.initialize(buildConfig(dark, nodeRef.current));
+				if (!await mermaid.parse(code, { suppressErrors: true })) return;
+				if (cancelled) return;
+				const { svg: rendered } = await mermaid.render(`${idBase}-${++seqRef.current}`, code);
+				if (!cancelled) setSvg(stripDiagramLinks(rendered));
+			} catch {}
+		})();
+		return () => {
+			cancelled = true;
+		};
+	}, [
+		code,
+		dark,
+		idBase
+	]);
+	if (svg === void 0) return /* @__PURE__ */ jsx("div", {
+		ref: attach,
+		className: "contents",
+		children: fallback
+	});
+	return /* @__PURE__ */ jsx("div", {
+		ref: attach,
+		"data-webskill-mermaid": "",
+		"data-testid": "mermaid-diagram",
+		className: cn("my-3 flex justify-center overflow-x-auto rounded-card border border-border bg-card p-3", className),
+		dangerouslySetInnerHTML: { __html: svg }
+	});
+}
+
 //#endregion
 //#region ../../node_modules/.pnpm/@babel+runtime@7.29.7/node_modules/@babel/runtime/helpers/esm/objectWithoutPropertiesLoose.js
 function _objectWithoutPropertiesLoose(r, e) {
@@ -23792,53 +24070,6 @@ var typescript_default = typescript;
 //#region ../../node_modules/.pnpm/react-syntax-highlighter@16.1.1_react@19.2.8/node_modules/react-syntax-highlighter/dist/esm/languages/prism/yaml.js
 var yaml_default = yaml;
 
-//#endregion
-//#region ../ui-kit/src/theme/useDarkAncestor.ts
-/**
-* 声明了主题的祖先：`data-theme` 由 ThemeScope 挂（亮暗都挂），`.dark` 是宿主页面惯用的暗色类名。
-* 两者一起选，`closest` 才会停在**最近**的那一层，而不是越过亮色实例去命中外层的暗色宿主。
-*/
-const THEME_ANCESTOR = "[data-theme], .dark";
-function readDark(node) {
-	const scope = node.closest(THEME_ANCESTOR);
-	if (!scope) return false;
-	const declared = scope.getAttribute("data-theme");
-	return declared === null ? true : declared === "dark";
-}
-/**
-* 判定挂载点**最近的**主题祖先是否处于暗色（0.6.0 FR-20.4）。
-*
-* 不用 `document.querySelector('.dark')`：那是全局查询，宿主页面是暗色时，
-* 嵌在暗色宿主里的亮色 SDK 实例也会被判成暗色（反之亦然）。
-*
-* 返回 ref 回调而不是接受 ref 对象：ref 对象的赋值不触发渲染，拿不到「已挂载」这个时机。
-*
-* 首次判定在 ref 回调里**同步**完成，不等 effect：消费方（如按主题分叉的 markdown
-* 高亮器）可能在首帧就固化选择，晚一帧就会永久停在亮色（设计 15-01 §1.2 假设 H-c）。
-*/
-function useDarkAncestor() {
-	const scoped = useThemeValue();
-	const [node, setNode] = useState(null);
-	const [probed, setProbed] = useState(false);
-	const attach = useCallback((next) => {
-		setNode(next);
-		if (next) setProbed(readDark(next));
-	}, []);
-	useEffect(() => {
-		if (!node || scoped !== void 0) return;
-		const update = () => setProbed(readDark(node));
-		update();
-		const observer = new MutationObserver(update);
-		observer.observe(document.documentElement, {
-			attributes: true,
-			attributeFilter: ["class", "data-theme"],
-			subtree: true
-		});
-		return () => observer.disconnect();
-	}, [node, scoped]);
-	return [scoped !== void 0 ? scoped === "dark" : probed, attach];
-}
-
 //#endregion
 //#region ../ui-kit/src/markdown/prism.ts
 const languages = {
@@ -24475,7 +24706,16 @@ const CODE_TOKEN_VARS = Object.fromEntries(Object.keys(PRISM_THEME.light).filter
 //#region ../ui-kit/src/markdown/Markdown.tsx
 function CodeBlock({ node: _node, className, children, ...rest }) {
 	const [dark, themeRef] = useDarkAncestor();
-	const language = resolveLanguage(/language-(\w+)/.exec(className ?? "")?.[1]);
+	const match = /language-(\w+)/.exec(className ?? "");
+	const language = resolveLanguage(match?.[1]);
+	if (match?.[1] === "mermaid") return /* @__PURE__ */ jsx(MermaidDiagram, {
+		code: String(children).replace(/\n$/, ""),
+		fallback: /* @__PURE__ */ jsx("code", {
+			className: "rounded-md bg-subtle px-1.5 py-0.5 font-mono text-ink",
+			...rest,
+			children
+		})
+	});
 	if (language) return /* @__PURE__ */ jsxs("div", {
 		ref: themeRef,
 		className: "my-3 overflow-hidden rounded-card border border-border bg-card",
@@ -24502,35 +24742,42 @@ function CodeBlock({ node: _node, className, children, ...rest }) {
 		children
 	});
 }
+/**
+* 模块级常量，**不可内联进 JSX**：react-markdown 按 `components` 的引用决定是否重建子树，
+* 每次渲染换新对象会让图片组件卸载重挂，于是流式输出期间同一张图被反复解析。
+*/
+const MARKDOWN_COMPONENTS = {
+	code: CodeBlock,
+	img: MarkdownImage,
+	p: ({ node: _node, ...props }) => /* @__PURE__ */ jsx("p", {
+		className: "my-2",
+		...props
+	}),
+	ul: ({ node: _node, ...props }) => /* @__PURE__ */ jsx("ul", {
+		className: "my-2 list-disc space-y-1 pl-5",
+		...props
+	}),
+	ol: ({ node: _node, ...props }) => /* @__PURE__ */ jsx("ol", {
+		className: "my-2 list-decimal space-y-1 pl-5",
+		...props
+	}),
+	a: ({ node: _node, ...props }) => /* @__PURE__ */ jsx("a", {
+		className: "font-medium text-ink underline underline-offset-4 hover:text-muted",
+		target: "_blank",
+		rel: "noreferrer",
+		...props
+	}),
+	pre: ({ node: _node, ...props }) => /* @__PURE__ */ jsx("pre", {
+		className: "my-0",
+		...props
+	})
+};
 function Markdown({ children, className = "" }) {
 	return /* @__PURE__ */ jsx("div", {
 		className: `text-sm leading-6 text-ink ${className}`,
 		children: /* @__PURE__ */ jsx(Markdown$1, {
-			components: {
-				code: CodeBlock,
-				p: ({ node: _node, ...props }) => /* @__PURE__ */ jsx("p", {
-					className: "my-2",
-					...props
-				}),
-				ul: ({ node: _node, ...props }) => /* @__PURE__ */ jsx("ul", {
-					className: "my-2 list-disc space-y-1 pl-5",
-					...props
-				}),
-				ol: ({ node: _node, ...props }) => /* @__PURE__ */ jsx("ol", {
-					className: "my-2 list-decimal space-y-1 pl-5",
-					...props
-				}),
-				a: ({ node: _node, ...props }) => /* @__PURE__ */ jsx("a", {
-					className: "font-medium text-ink underline underline-offset-4 hover:text-muted",
-					target: "_blank",
-					rel: "noreferrer",
-					...props
-				}),
-				pre: ({ node: _node, ...props }) => /* @__PURE__ */ jsx("pre", {
-					className: "my-0",
-					...props
-				})
-			},
+			urlTransform: markdownUrlTransform,
+			components: MARKDOWN_COMPONENTS,
 			children
 		})
 	});
@@ -24857,16 +25104,41 @@ const preComponent = ({ className, ...props }) => /* @__PURE__ */ jsx("pre", {
 	className: cn("overflow-x-auto rounded-b-lg border border-border bg-card", className),
 	...props
 });
+const highlighters = {
+	light: makeHighlighter(false),
+	dark: makeHighlighter(true)
+};
+/** 图接在 CodeHeader 下面，外框要与 `preComponent` 同形，否则成功与降级两态的版式会跳 */
+function makeMermaidHighlighter(dark) {
+	const Highlighter = highlighters[dark ? "dark" : "light"];
+	return function MermaidHighlighter(props) {
+		return /* @__PURE__ */ jsx(MermaidDiagram, {
+			code: props.code,
+			className: "my-0 rounded-b-lg",
+			fallback: /* @__PURE__ */ jsx(Highlighter, { ...props })
+		});
+	};
+}
+/**
+* 必须是模块级常量：`CodeOverride` 的 memo 比较里直接拿
+* `prev.componentsByLanguage === next.componentsByLanguage`，换新对象就是每次渲染重建子树。
+*/
+const mermaidByLanguage = {
+	light: { [MERMAID_LANGUAGE]: { SyntaxHighlighter: makeMermaidHighlighter(false) } },
+	dark: { [MERMAID_LANGUAGE]: { SyntaxHighlighter: makeMermaidHighlighter(true) } }
+};
 const markdownComponents = {
 	light: memoizeMarkdownComponents({
-		SyntaxHighlighter: makeHighlighter(false),
+		SyntaxHighlighter: highlighters.light,
 		CodeHeader,
-		pre: preComponent
+		pre: preComponent,
+		img: MarkdownImage
 	}),
 	dark: memoizeMarkdownComponents({
-		SyntaxHighlighter: makeHighlighter(true),
+		SyntaxHighlighter: highlighters.dark,
 		CodeHeader,
-		pre: preComponent
+		pre: preComponent,
+		img: MarkdownImage
 	})
 };
 /**
@@ -24887,8 +25159,10 @@ const MarkdownText = memo(function MarkdownText({ className }) {
 		className: "contents",
 		children: /* @__PURE__ */ jsx(MarkdownTextPrimitive, {
 			remarkPlugins: [remarkGfm],
+			urlTransform: markdownUrlTransform,
 			className: cn("aui-md", className),
 			components,
+			componentsByLanguage: mermaidByLanguage[dark ? "dark" : "light"],
 			smooth: false,
 			defer: true
 		})
@@ -24948,28 +25222,60 @@ const TEXT_EXTENSIONS = [
 /** 非文本非图片但仍可整体外发的类型（provider 的 file 分片） @experimental */
 const FILE_MIME_TYPES = ["application/pdf"];
 /**
-* 需要**客户端先抽取成文本**才能外发的类型（FR-23.9 / 0.13.0 FR-12.5）。
-* 不走直通的 `file`：docx / xlsx 发给 provider 会被当成二进制垃圾。
+* 需要**客户端先抽取成文本**才能外发的类型（FR-23.9 / 0.13.0 FR-12.5 / 0.22.0 分册 18）。
+* 不走直通的 `file`：docx / xlsx / pptx 发给 provider 会被当成二进制垃圾。
 */
 const DOCX_MIME = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
 const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+const PPTX_MIME = "application/vnd.openxmlformats-officedocument.presentationml.presentation";
+/**
+* DWG 图纸的 MIME。没有官方注册值，各家各发一套，浏览器上传时更常见的是空串。
+* @experimental
+*/
+const DWG_MIME_TYPES = [
+	"image/vnd.dwg",
+	"application/acad",
+	"application/x-acad",
+	"application/dwg",
+	"application/x-dwg",
+	"drawing/dwg"
+];
+/**
+* 只存字节、不进上下文的扩展名。仍然是**白名单制**：
+* 新增 `binary` 类别不等于任意二进制放行（AC-19.18）。
+* @experimental
+*/
+const BINARY_EXTENSIONS = ["dwg"];
 const TEXT_EXTENSION_SET = new Set(TEXT_EXTENSIONS);
 const IMAGE_MIME_SET = new Set(IMAGE_MIME_TYPES);
 const FILE_MIME_SET = new Set(FILE_MIME_TYPES);
-const EXTRACTED_MIME_SET = /* @__PURE__ */ new Set([DOCX_MIME, XLSX_MIME]);
-const EXTRACTED_EXTENSION_SET = /* @__PURE__ */ new Set(["docx", "xlsx"]);
+const EXTRACTED_MIME_SET = /* @__PURE__ */ new Set([
+	DOCX_MIME,
+	XLSX_MIME,
+	PPTX_MIME
+]);
+const EXTRACTED_EXTENSION_SET = /* @__PURE__ */ new Set([
+	"docx",
+	"xlsx",
+	"pptx"
+]);
+const BINARY_MIME_SET = new Set(DWG_MIME_TYPES);
+const BINARY_EXTENSION_SET = new Set(BINARY_EXTENSIONS);
+/** 下载与上传都常把认不出的类型标成它，此时只能看扩展名 */
+const OPAQUE_MIME = "application/octet-stream";
 function extensionOf(fileName) {
 	return fileName.split(".").pop()?.toLowerCase() ?? "";
 }
-/** 分类集中一处，不散落在各 UI 分支里 @experimental */
-function classifyAttachment(contentType, fileName) {
+/** 分类集中一处，不散落在各 UI 分支里 @experimental */ function classifyAttachment(contentType, fileName) {
 	const type = contentType.toLowerCase();
 	if (IMAGE_MIME_SET.has(type)) return "image";
+	if (BINARY_MIME_SET.has(type)) return "binary";
 	if (EXTRACTED_MIME_SET.has(type)) return "document-text";
 	if (FILE_MIME_SET.has(type)) return "file";
 	if (type.startsWith("text/") || type === "application/json") return "text";
 	if (type === "" && TEXT_EXTENSION_SET.has(extensionOf(fileName))) return "text";
 	if (type === "" && EXTRACTED_EXTENSION_SET.has(extensionOf(fileName))) return "document-text";
+	if ((type === "" || type === OPAQUE_MIME) && BINARY_EXTENSION_SET.has(extensionOf(fileName))) return "binary";
 }
 
 //#endregion
@@ -25516,6 +25822,89 @@ var ChatbotVisionDelegate = class {
 	}
 };
 
+//#endregion
+//#region src/core/imageSource.ts
+/**
+* 授权卡的自述作用域（FR-11.10 / AC-G6）。
+*
+* 卡上写的范围与实际记忆的范围**由这一个函数同时导出**：
+* `key` 直接就是 `ImageSourceAuthorizer` 存进集合里的那个值，
+* `labelKey` 是复选框旁那句话。两者不可能分叉，因为只有一处。
+*
+* 出的是**字典键**而不是成品文案：这里是同步路径，读不到语言，
+* 写死一种语言就把复选框固定成英文了。
+* @experimental
+*/
+function describeImageSourceScope(kind) {
+	return {
+		key: kind,
+		labelKey: kind === "page-image" ? "interaction.imageSource.rememberPageImage" : "interaction.imageSource.rememberRemoteImage"
+	};
+}
+const MESSAGES = {
+	"page-image": "Allow the assistant to copy a picture from the page you are on into the document it is preparing? The picture is saved with this conversation’s files.",
+	"remote-image": "Allow the assistant to download an image from the web into the document it is preparing? The site hosting it will see that the request came from you."
+};
+/**
+* 图片来源的会话内授权（分册 11 §3.3）。
+*
+* 记忆随会话生灭：`forgetSessionDecisions()` 在新建 / 切换会话时调，新会话重新问。
+* 没有任何持久化端口——本版刻意不做跨会话记忆，那是比用户预期更宽的授权。
+* @experimental
+*/
+var ImageSourceAuthorizer = class {
+	#ui;
+	#approved = /* @__PURE__ */ new Set();
+	/** 同一类来源的并发请求搭同一次询问，不各弹各的（同视觉委派 FR-26.8） */
+	#asking = /* @__PURE__ */ new Map();
+	#seq = 0;
+	constructor(options) {
+		this.#ui = options.ui;
+	}
+	forgetSessionDecisions() {
+		this.#approved.clear();
+	}
+	/**
+	* 记忆粒度是**来源类型**，不是域名（FR-13.7）。因此同一类的并发请求搭同一次询问，
+	* 卡上也只会出现其中一个 URL——这正是为什么卡文必须把
+	* 「本次对话内所有外链图片」说出来，而不是只展示那一个域名。
+	*/
+	async authorize(kind, details = {}) {
+		if (this.#approved.has(kind)) return true;
+		const pending = this.#asking.get(kind);
+		if (pending !== void 0) return await pending;
+		const ask = this.#ask(kind, details);
+		this.#asking.set(kind, ask);
+		try {
+			return await ask;
+		} finally {
+			this.#asking.delete(kind);
+		}
+	}
+	async #ask(kind, details) {
+		this.#seq += 1;
+		const scope = describeImageSourceScope(kind);
+		const { note, url } = details;
+		const response = await this.#ui.request({
+			type: "authorize",
+			id: `image-source-${kind}-${String(this.#seq)}`,
+			capability: "readImageSource",
+			message: note === void 0 ? MESSAGES[kind] : `${MESSAGES[kind]} The assistant says: ${note}`,
+			details: {
+				kind: scope.key,
+				...note === void 0 ? {} : { note },
+				...url === void 0 ? {} : { url },
+				rememberable: true,
+				rememberScope: "session",
+				rememberLabelKey: scope.labelKey
+			}
+		});
+		if (response.cancelled === true || response.value === false) return false;
+		if (response.remembered === true) this.#approved.add(scope.key);
+		return true;
+	}
+};
+
 //#endregion
 //#region src/core/markdownBoundary.ts
 /**
@@ -26088,6 +26477,8 @@ const chatbotDictionary = defineDictionary({
 		"interaction.pageAction.attach": "Allow the assistant to attach a file to “{target}”?",
 		"interaction.pageAction.scroll.down": "Allow the assistant to scroll down the area around “{target}”?",
 		"interaction.pageAction.scroll.up": "Allow the assistant to scroll up the area around “{target}”?",
+		"interaction.pageAction.hover": "Allow the assistant to hover over “{target}”?",
+		"interaction.pageAction.drag": "Allow the assistant to drag “{target}” onto another element?",
 		"interaction.pageAction.back": "Allow the assistant to go back to the previous page on “{target}”?",
 		"interaction.pageAction.role.click": "this control",
 		"interaction.pageAction.role.fill": "this field",
@@ -26096,6 +26487,8 @@ const chatbotDictionary = defineDictionary({
 		"interaction.pageAction.role.set": "this switch",
 		"interaction.pageAction.role.attach": "this upload field",
 		"interaction.pageAction.role.scroll": "this area",
+		"interaction.pageAction.role.hover": "this element",
+		"interaction.pageAction.role.drag": "this item",
 		"interaction.pageAction.role.back": "this page",
 		"interaction.pageAction.remember": "Don’t ask again for this kind of action",
 		"interaction.pageAction.frame": "The target is in the embedded frame \"{frame}\".",
@@ -26119,6 +26512,15 @@ const chatbotDictionary = defineDictionary({
 		"interaction.visionDelegation.rememberFallback": "Don’t ask again for this endpoint",
 		"interaction.visionDelegation.rememberSession": "Don’t ask again in this conversation",
 		"interaction.visionDelegation.body": "The model you selected cannot read images. Send the {images} image(s) produced by “{source}” to “{label}” at {host} to be described? If you decline, nothing is sent and the turn continues without them.",
+		"interaction.imageSource.title": "Put a picture into the document?",
+		"interaction.imageSource.pageImageBody": "Allow the assistant to copy a picture from the page into the document it is building? The picture is saved with this conversation until you delete it.",
+		"interaction.imageSource.remoteImageBody": "Allow the assistant to download an image from {url} and put it into the document it is building? Fetching it tells that server your network address and when you asked for it.",
+		"interaction.imageSource.remoteImageAnyBody": "Allow the assistant to download images from the web and put them into the document it is building? Fetching one tells that server your network address and when you asked for it.",
+		"interaction.imageSource.insecure": "This address is plain http://, so the image can be read or swapped by anyone on the network in between.",
+		"interaction.imageSource.note": "The assistant says it is for: {note}",
+		"interaction.imageSource.rememberFallback": "Don’t ask again in this conversation",
+		"interaction.imageSource.rememberPageImage": "Don’t ask again in this conversation before taking pictures from the page",
+		"interaction.imageSource.rememberRemoteImage": "Don’t ask again in this conversation before downloading images from the web",
 		"interaction.uploadFile.read": "Allow the skill “{skill}” to read the file you uploaded?",
 		"interaction.uploadFile.file": "{name} · {type} · {size}",
 		"interaction.sandbox.readReference": "Allow the skill “{skill}” to read the reference file “{path}”?",
@@ -26184,6 +26586,7 @@ const chatbotDictionary = defineDictionary({
 		"composer.attachment.kind.image": "Image",
 		"composer.attachment.kind.file": "File",
 		"composer.attachment.kind.document-text": "Doc text",
+		"composer.attachment.kind.binary": "Drawing",
 		"composer.attachment.compressed": "Compressed {from} → {to}",
 		"composer.model": "Model",
 		"composer.model.unconfigured": "Not usable: this entry has no API key or base URL. Configure it in the console.",
@@ -26198,6 +26601,7 @@ const chatbotDictionary = defineDictionary({
 		"attachment.storeFailed.title": "Not enough space on this device",
 		"attachment.storeFailed": "“{name}” could not be saved to this device’s storage, so it was not attached. Free up space and try again.",
 		"attachment.pdfAsText": "“{name}” is {size}, over the {limit} a single request can carry, so its extracted text was sent instead of the original file. Layout, figures and scanned pages are not included.",
+		"attachment.pdfAsPagedRead": "“{name}” is {size}, over the {limit} a single request can carry, so the file was not attached. The assistant will read it page by page instead, which takes several passes over a long document.",
 		"attachment.pdfRefused": "“{name}” is {size}, over the {limit} a single request can carry, and no text could be extracted from it — it is most likely a scan. It was not sent. Try a smaller file, a page range, or a text version.",
 		"attachment.pdfNoExtractor": "“{name}” is {size}, over the {limit} a single request can carry, and this environment cannot extract PDF text. It was not sent. Switch to a model that accepts large documents, or attach a Word or plain-text version.",
 		"attachment.textTooLong": "The text of “{name}” is {size}, over the {limit} one request may put into the model’s context. It was not sent, and it was not truncated either, because half a document is worse than none. Raise the extracted text limit in Settings → Agent runtime, or attach a shorter excerpt.",
@@ -26502,6 +26906,8 @@ const chatbotDictionary = defineDictionary({
 		"interaction.pageAction.attach": "允许助手向「{target}」附加文件吗？",
 		"interaction.pageAction.scroll.down": "允许助手在「{target}」所在区域向下滚动吗？",
 		"interaction.pageAction.scroll.up": "允许助手在「{target}」所在区域向上滚动吗？",
+		"interaction.pageAction.hover": "允许助手将鼠标悬停在「{target}」上吗？",
+		"interaction.pageAction.drag": "允许助手将「{target}」拖到另一个位置吗？",
 		"interaction.pageAction.back": "允许助手在「{target}」上返回上一页吗？",
 		"interaction.pageAction.role.click": "这个控件",
 		"interaction.pageAction.role.fill": "这个输入框",
@@ -26510,6 +26916,8 @@ const chatbotDictionary = defineDictionary({
 		"interaction.pageAction.role.set": "这个开关",
 		"interaction.pageAction.role.attach": "这个上传控件",
 		"interaction.pageAction.role.scroll": "这一块",
+		"interaction.pageAction.role.hover": "这个元素",
+		"interaction.pageAction.role.drag": "这一项",
 		"interaction.pageAction.role.back": "这个页面",
 		"interaction.pageAction.remember": "以后不再询问此类操作",
 		"interaction.pageAction.frame": "目标位于嵌入帧「{frame}」中。",
@@ -26533,6 +26941,15 @@ const chatbotDictionary = defineDictionary({
 		"interaction.visionDelegation.rememberFallback": "以后不再为该端点询问",
 		"interaction.visionDelegation.rememberSession": "本次对话不再询问，默认同意",
 		"interaction.visionDelegation.body": "你选中的模型看不了图片。是否把「{source}」产出的 {images} 张图发往「{label}」（{host}）请它描述？不同意则什么都不会发出，这一轮就当没看到图。",
+		"interaction.imageSource.title": "把图片放进文档？",
+		"interaction.imageSource.pageImageBody": "允许助手把当前页面上的一张图放进它正在生成的文档吗？该图会随本次会话保存，直到你删除这次会话。",
+		"interaction.imageSource.remoteImageBody": "允许助手从 {url} 下载一张图片放进它正在生成的文档吗？下载会把你的网络地址与访问时间告知该服务器。",
+		"interaction.imageSource.remoteImageAnyBody": "允许助手从互联网下载图片放进它正在生成的文档吗？下载会把你的网络地址与访问时间告知对方服务器。",
+		"interaction.imageSource.insecure": "这个地址是明文 http://，图片内容可被链路上的任何人看到或替换。",
+		"interaction.imageSource.note": "助手声称的用途：{note}",
+		"interaction.imageSource.rememberFallback": "本次对话不再询问",
+		"interaction.imageSource.rememberPageImage": "本次对话不再询问取用页面上的图",
+		"interaction.imageSource.rememberRemoteImage": "本次对话不再询问从互联网下载图片",
 		"interaction.uploadFile.read": "允许技能「{skill}」读取你上传的这份文件吗？",
 		"interaction.uploadFile.file": "{name} · {type} · {size}",
 		"interaction.sandbox.readReference": "允许技能「{skill}」读取参考资料「{path}」吗？",
@@ -26598,6 +27015,7 @@ const chatbotDictionary = defineDictionary({
 		"composer.attachment.kind.image": "图片",
 		"composer.attachment.kind.file": "文件",
 		"composer.attachment.kind.document-text": "文档正文",
+		"composer.attachment.kind.binary": "图纸",
 		"composer.attachment.compressed": "已压缩 {from} → {to}",
 		"composer.model": "模型",
 		"composer.model.unconfigured": "不可用：该条目既没有 API 密钥也没有基础地址，请在控制台补全。",
@@ -26612,6 +27030,7 @@ const chatbotDictionary = defineDictionary({
 		"attachment.storeFailed.title": "本机存储不够了",
 		"attachment.storeFailed": "「{name}」没能存入本机存储，因此未作为附件添加。请腾出空间后重试。",
 		"attachment.pdfAsText": "「{name}」有 {size}，超过单次请求能带的 {limit}，已改为发送从中抽取的文本，而不是原件。版面、图表与扫描页不在其中。",
+		"attachment.pdfAsPagedRead": "「{name}」有 {size}，超过单次请求能带的 {limit}，因此未作为附件发送。助手改为逐页读取，长文档会读好几轮。",
 		"attachment.pdfRefused": "「{name}」有 {size}，超过单次请求能带的 {limit}，而且从中抽不出文本——它多半是扫描件。该文件未发送。请改用更小的文件、指定页码范围，或换文本版本。",
 		"attachment.pdfNoExtractor": "「{name}」有 {size}，超过单次请求能带的 {limit}，而本环境无法抽取 PDF 文本。该文件未发送。请换一个能收大文档的模型，或改传 Word / 纯文本版本。",
 		"attachment.textTooLong": "「{name}」的文本有 {size}，超过单次请求能放进模型上下文的 {limit}。该文件未发送，也没有截断——半份文档比没有更糟。请在「设置 → 智能体运行」里调高抽取文本上限，或改附一段节选。",
@@ -26785,6 +27204,24 @@ function translateText(locale, key, params) {
 	return interpolate$1(chatbotDictionary[locale]?.[key] ?? chatbotDictionary.en[key] ?? key, params);
 }
 
+//#endregion
+//#region src/core/attachmentRef.ts
+/**
+* `upload:` 引用落到哪条附件上。
+*
+* 引擎侧（投放文档里的图片块）与组件侧（正文 markdown 里的 `![](upload:…)`）读的是
+* 两份不同的数据——一份从会话存储读回，一份是 React 手上的消息数组——但**判定必须是同一条**，
+* 否则会出现「文档里贴得出、对话里贴不出」这种没法向用户解释的差异。
+*
+* id 先行：它唯一。文件名兜底是必需的而不是宽容——附件 id 是 `att-…` 随机串，
+* 模型上下文里最显眼的始终是文件名，只认 id 的结果就是整篇文档一张图都没有。
+* 重名时取最先那条：这一路的候选全部来自用户自己的消息，没有越权面，
+* 取错一张也远好过整批丢图。
+*/
+function findAttachmentByRef(attachments, ref) {
+	return attachments.find((a) => a.id === ref) ?? attachments.find((a) => a.name === ref);
+}
+
 //#endregion
 //#region src/core/runPhases.ts
 /** 展示用相位：discover 并进 route，prepare/observe 并进 execute（07 号文档 §4） */
@@ -26987,6 +27424,22 @@ function fromBase64(data) {
 function formatSize(bytes) {
 	return bytes >= 1024 * 1024 ? `${(bytes / 1024 / 1024).toFixed(1)} MB` : `${Math.max(1, Math.round(bytes / 1024))} KB`;
 }
+/** 技能写在图片块上的引用，由 publish 脚本渲染成这个属性；字节在这里填回去 */
+const IMAGE_REF_ATTR = "data-webskill-image";
+/**
+* 单张图进文档的字节上限。超了先压（`compressImageToBudget`），压不下去按 FR-11.8 归因丢弃，
+* 不许原样塞进载荷去撞分册 10 的硬兜底——那会让一张图带走整份文档。
+*/
+const MAX_DOCUMENT_IMAGE_BYTES = 8e6;
+/**
+* 在线 WebOffice 文档作模板时的取件号前缀（0.22.0 分册 42 · FR-42.12）。
+*
+* 前缀是显式的，不靠猜：`inspect_template` 的取件号绝大多数是附件 id，
+* 拿一个普通 id 去在线文档那边碰运气，猜中一次的收益远小于猜错一次的代价——
+* 那是把另一份文档当成用户指的那一份填了出去。
+* @experimental
+*/
+const WEB_OFFICE_TEMPLATE_PREFIX = "weboffice:";
 /**
 * 图片附件的指认说明（0.21.0 分册 22 · FR-22.4b）。
 *
@@ -26998,7 +27451,8 @@ function formatSize(bytes) {
 * 与图分开成片：端点拒收图时 `#dropRejectedImages` 换掉的只有图那一片，说明留在原地。
 */
 function imageAttachmentLabel(attachment) {
-	return `--- Attachment: ${attachment.name} (${attachment.contentType}) ---\nThe user attached this image to this message and it is already visible to you. Do not look for it on the page, in the downloads list or anywhere else, and do not call a tool to obtain it.`;
+	return `--- Attachment: ${attachment.name} (${attachment.contentType}, id: ${attachment.id}) ---\nThe user attached this image to this message and it is already visible to you. Do not look for it on the page, in the downloads list or anywhere else, and do not call a tool to obtain it.
+To show this picture rather than describe it, reference it as \`upload:${attachment.id}\`: write \`![caption](upload:${attachment.id})\` in your reply to display it inline, or pass the same string as the image \`ref\` when a skill or an export tool builds a document. Never invent base64 data for it.`;
 }
 /** 内置演示 LLM 的应答序列（用尽后从头循环） */
 const DEMO_REPLIES = [
@@ -27153,6 +27607,11 @@ var ChatEngine = class {
 	#listeners = /* @__PURE__ */ new Set();
 	/** runId → 已激活技能累积（skill-activated 事件用；终态清理） */
 	#runSkills = /* @__PURE__ */ new Map();
+	/**
+	* runId → sessionId。trace 要等 run 结束才落盘，而导出工具在 run **进行中**
+	* 就要按会话找附件与历史产物，只读 trace 时它们一律扑空（分册 21 §2.6）。
+	*/
+	#runSessions = /* @__PURE__ */ new Map();
 	/** 文档投放端口只构造一次：渲染侧把它放进 memo 依赖，每次取新对象会触发无谓重渲染 */
 	#documentSurfacePort;
 	/** 当前渲染框架档（复合 uiBridge 分发；setRenderer 热切换） */
@@ -27181,6 +27640,15 @@ var ChatEngine = class {
 	* 拒绝的记忆挂在它身上，因此 `createSession()` 要能找到它把那一位清掉。
 	*/
 	#visionDelegate;
+	/**
+	* 图片来源授权（0.22.0 分册 11 §3.3）。记忆随会话生灭，因此与视觉委派一样，
+	* 切换 / 新建会话时要把那一份集合清掉。
+	*/
+	#imageSources;
+	/** run → 已落下的页面图张数；产物名 `page-image-N.png` 的 N 从这里来 */
+	#pageImageSeq = /* @__PURE__ */ new Map();
+	/** run → 已落下的外链图张数；与页面图分开编号，产物名一眼看得出来源 */
+	#remoteImageSeq = /* @__PURE__ */ new Map();
 	/** 当前 run（'route' 事件捕获，终态清理）；清单与页面感知的事件归属共用 */
 	#activeRunId;
 	/** dispose() 之后拒绝再发起 run：卸载后的组件不该还能悄悄跑一轮 */
@@ -27386,17 +27854,177 @@ var ChatEngine = class {
 			const dir = `${this.#chatRoot}/artifacts/${runId}`;
 			const html = await this.#adapter.storage.readText(this.#artifactPath(dir, artifact));
 			const css = style === void 0 ? void 0 : await this.#adapter.storage.readText(this.#artifactPath(dir, style));
+			const resolved = await this.#resolveDocumentImages(html, runId);
 			await host.open({
 				skillName: await this.#skillNamesOfRun(runId),
 				dataSource: sanitizeUntrustedLine(dataSource),
 				document: {
-					html,
+					html: resolved.html,
 					...css === void 0 ? {} : { css }
-				}
+				},
+				...resolved.images.length > 0 ? { images: resolved.images } : {},
+				...resolved.omissions.length > 0 ? { omissions: resolved.omissions } : {}
 			});
 		} };
 	}
 	/**
+	* 把产物 HTML 里的图片占位换成可直接显示的 `src`（0.22.0 FR-11.6）。
+	*
+	* 落在引擎而不是宿主或投放面，理由与 `documentSurface` 端口本身相同：要读产物就得知道
+	* 产物目录布局，那是引擎独有的知识。`startViewerShell` 因此一行不改。
+	*
+	* 解析发生在宿主的确认框之前，用户取消时白做一次——接受这个代价，因为**体积与像素的
+	* 度量必须看到已填字节的文档**，否则量到的是一份全是占位的空壳。
+	*/
+	async #resolveDocumentImages(html, runId) {
+		if (!html.includes(IMAGE_REF_ATTR)) return {
+			html,
+			images: [],
+			omissions: []
+		};
+		const doc = new DOMParser().parseFromString(html, "text/html");
+		const images = [];
+		const omissions = [];
+		for (const element of [...doc.querySelectorAll(`img[${IMAGE_REF_ATTR}]`)]) {
+			const ref = element.getAttribute(IMAGE_REF_ATTR) ?? "";
+			const alt = element.getAttribute("alt") ?? "";
+			element.removeAttribute(IMAGE_REF_ATTR);
+			try {
+				const src = await this.#documentImageSrc(ref, runId, images);
+				element.setAttribute("src", src);
+			} catch (e) {
+				const reason = messageOf(e);
+				omissions.push({
+					ref,
+					alt,
+					stage: "resolve",
+					reason
+				});
+				const note = doc.createElement("p");
+				note.className = "wsdoc__image-missing";
+				note.textContent = `[image unavailable] ${alt} — ${reason}`;
+				element.replaceWith(note);
+			}
+		}
+		return {
+			html: doc.body.innerHTML,
+			images,
+			omissions
+		};
+	}
+	/** 解析一条引用并把实测事实记进 `images`；失败一律抛错，由调用方转成归因 */
+	async #documentImageSrc(ref, runId, images) {
+		const separator = ref.indexOf(":");
+		const kind = separator === -1 ? "" : ref.slice(0, separator);
+		const rest = ref.slice(separator + 1);
+		if (kind === "remote") {
+			assertRemoteUrlAllowed(rest, { allowHttp: true });
+			return rest;
+		}
+		const image = await toDocumentImage(await this.#documentImageBytes(kind, rest, runId), { maxBytes: MAX_DOCUMENT_IMAGE_BYTES });
+		const src = `data:${image.mimeType};base64,${image.data}`;
+		images.push({
+			ref,
+			width: image.width,
+			height: image.height,
+			units: src.length
+		});
+		return src;
+	}
+	async #documentImageBytes(kind, rest, runId) {
+		if (kind === "artifact") {
+			assertSafePathSegment(rest, "artifact");
+			const read = (owner) => this.#adapter.storage.readBinary(resolveInsideRoot(`${this.#chatRoot}/artifacts/${owner}`, rest));
+			try {
+				return await read(runId);
+			} catch {}
+			for (const prior of await this.#priorRunIds(runId)) try {
+				return await read(prior);
+			} catch {}
+			throw new WebSkillError("FS_NOT_FOUND", `artifact "${rest}" was not produced anywhere in this conversation`);
+		}
+		if (kind === "upload") {
+			const attachment = await this.#uploadOfRun(runId, rest);
+			if (attachment === void 0) throw new WebSkillError("UPLOAD_FILE_NOT_FOUND", `no attachment with id or file name "${rest}" was uploaded anywhere in this conversation`);
+			return this.#adapter.storage.readBinary(resolveInsideRoot(this.attachmentsRoot, attachment.path));
+		}
+		throw new WebSkillError("VALIDATION_FAILED", `image reference "${kind}:${rest}" has no known prefix; expected artifact:, upload: or remote:`);
+	}
+	/**
+	* 这一次 run 属于哪个会话。
+	*
+	* 进行中读内存，已结束读 trace——与 `#skillNamesOfRun` 同一范式。
+	* 只读 trace 会让**工具调用期**的每一次查找扑空：trace 要等 run 收尾才 `put`，
+	* 于是 `export_spreadsheet` 当场拿不到会话，而文档投放（用户事后点按钮）却正常，
+	* 表现成「同一张图 Word 放得进、Excel 放不进」。
+	*/
+	async #sessionOfRun(runId) {
+		return this.#runSessions.get(runId) ?? (await this.#traceStore.get(runId).catch(() => void 0))?.sessionId;
+	}
+	/**
+	* 本会话里 `runId` 之前的那些 run，由近及远。
+	*
+	* 「先出 Word，再出一份 PPT」是两轮 run，图片产物却落在第一轮的目录里；
+	* 只认当前 run 会让第二份文档必然缺图，而且缺得毫无道理——用户看来那张图刚刚还在。
+	*
+	* 放宽止于**本会话**：目录仍由引擎按 runId 拼，产物名仍过 `assertSafePathSegment`，
+	* 模型既给不出别的会话，也给不出路径（FR-11.7 的守卫面一寸没让）。
+	*/
+	async #priorRunIds(runId) {
+		const sessionId = await this.#sessionOfRun(runId);
+		if (sessionId === void 0) return [];
+		const messages = (await this.#sessions.get(sessionId).catch(() => void 0))?.messages ?? [];
+		const ids = [];
+		for (const message of messages) {
+			const id = message.runId;
+			if (message.role !== "assistant" || id === void 0 || id === runId || ids.includes(id)) continue;
+			ids.push(id);
+		}
+		return ids.reverse();
+	}
+	/**
+	* 表格里那张图的字节（0.22.0 分册 20 FR-20.8）。
+	*
+	* 与投放文档共用 `#documentImageBytes`：AC-G1 要的不是几条通道行为一致，而是只有一条通道。
+	* 「同一张图 Word 放得进、Excel 放不进」正是分叉出第二条通道的代价。
+	*
+	* 外链在这里是硬拒：xlsx 里没有「链着一张图」这回事，工作簿必须自带字节。
+	*/
+	async #spreadsheetImage(ref, runId) {
+		if (runId === void 0) throw new WebSkillError("TOOL_EXECUTION_FAILED", "Putting a picture in a workbook requires an active run.");
+		const separator = ref.indexOf(":");
+		const kind = separator === -1 ? "" : ref.slice(0, separator);
+		const rest = ref.slice(separator + 1);
+		if (kind === "remote") throw new WebSkillError("VALIDATION_FAILED", `image reference "${ref}" cannot go into a workbook: a spreadsheet carries the bytes, not a link. Download it with fetch_remote_image first, then reference the artifact it returns.`);
+		const image = await toDocumentImage(await this.#documentImageBytes(kind, rest, runId), { maxBytes: SPREADSHEET_LIMITS.imageBytes });
+		return {
+			bytes: Uint8Array.from(atob(image.data), (char) => char.charCodeAt(0)),
+			contentType: image.mimeType
+		};
+	}
+	/**
+	* 会话里的上传件，从发起本 run 的那条用户消息起往前找。
+	*
+	* 与 `#priorRunIds` 同一个理由：「上传照片 → 出 Word → 再出 PPT」是两轮，
+	* 第二轮那条用户消息上没有附件，只认本轮就必然缺图。附件不随轮次过期。
+	*
+	* 仍然**在消息里查**而不是拿引用当路径拼：候选全部是用户自己在这个会话里上传的东西，
+	* 路径一寸都不来自模型，跨会话与路径穿越都无从谈起（FR-11.7）。
+	* 落到哪条附件上由 `findAttachmentByRef` 判，与正文 markdown 那一侧共用一份规则。
+	*/
+	async #uploadOfRun(runId, ref) {
+		const sessionId = await this.#sessionOfRun(runId);
+		if (sessionId === void 0) return void 0;
+		const messages = (await this.#sessions.get(sessionId).catch(() => void 0))?.messages ?? [];
+		const started = messages.findIndex((message) => message.role === "assistant" && message.runId === runId);
+		for (let i = (started === -1 ? messages.length : started) - 1; i >= 0; i -= 1) {
+			const message = messages[i];
+			if (message?.role !== "user") continue;
+			const hit = findAttachmentByRef(message.attachments ?? [], ref);
+			if (hit !== void 0) return hit;
+		}
+	}
+	/**
 	* 产物名 → 绝对路径。`assertSafePathSegment` + `resolveInsideRoot` 两道都不是可选写法：
 	* 少了它们，「组件只收产物名」就退化成「组件收完整路径」，凭空开出一个读取面。
 	*/
@@ -27405,6 +28033,84 @@ var ChatEngine = class {
 		return resolveInsideRoot(dir, artifact);
 	}
 	/**
+	* 把宿主页面上的一张图落成本 run 的产物（0.22.0 FR-12.1 / FR-12.7）。
+	*
+	* 三件事按顺序发生且都在引擎侧：授权 → 取字节 → 落产物。宿主只做中间那一步，
+	* 因为「run 目录在哪、会话什么时候换」只有引擎知道。
+	*/
+	async #capturePageImage(host, artifacts, input, runId) {
+		if (runId === void 0) throw new WebSkillError("TOOL_EXECUTION_FAILED", "Capturing a picture requires an active run.");
+		const note = input.note === void 0 ? void 0 : sanitizeUntrustedLine(input.note);
+		if (!await (this.#imageSources ??= new ImageSourceAuthorizer({ ui: this.#uiBridge })).authorize("page-image", note === void 0 ? {} : { note })) return {
+			reason: "the user declined to let the assistant copy pictures from the page",
+			triedLevels: []
+		};
+		const captured = await host.capture(input.ref, MAX_DOCUMENT_IMAGE_BYTES);
+		if ("reason" in captured) return {
+			reason: captured.reason,
+			triedLevels: captured.triedLevels
+		};
+		const seq = (this.#pageImageSeq.get(runId) ?? 0) + 1;
+		this.#pageImageSeq.set(runId, seq);
+		const path = `page-image-${String(seq)}.${captured.mimeType === "image/jpeg" ? "jpg" : "png"}`;
+		await artifacts.createBinaryArtifact({
+			runId,
+			path,
+			content: Uint8Array.from(atob(captured.data), (char) => char.charCodeAt(0)),
+			mimeType: captured.mimeType,
+			metadata: { resultCard: false }
+		});
+		return {
+			artifact: `artifact:${path}`,
+			width: captured.width,
+			height: captured.height,
+			bytes: captured.bytes
+		};
+	}
+	/**
+	* 把一张外链图落成本 run 的产物（0.22.0 FR-13.1 ~ FR-13.4）。
+	*
+	* 与 `#capturePageImage` 同一条顺序：授权 → 取字节 → 落产物。
+	* **授权在 `fetch` 之前**不是风格问题：拒绝之后网络层必须一个请求都没发出去（AC-13.5），
+	* 「先抓回来再丢掉」时用户的 IP 已经交出去了。
+	*/
+	async #fetchRemoteImage(host, artifacts, input, runId) {
+		if (runId === void 0) throw new WebSkillError("TOOL_EXECUTION_FAILED", "Downloading an image requires an active run.");
+		const note = input.note === void 0 ? void 0 : sanitizeUntrustedLine(input.note);
+		if (!await (this.#imageSources ??= new ImageSourceAuthorizer({ ui: this.#uiBridge })).authorize("remote-image", {
+			...note === void 0 ? {} : { note },
+			url: sanitizeUntrustedLine(input.url)
+		})) return {
+			reason: "the user declined to let the assistant download images from the web",
+			kind: "declined"
+		};
+		const fetched = await host.fetch(input.url, MAX_DOCUMENT_IMAGE_BYTES);
+		if ("kind" in fetched) return {
+			reason: fetched.reason,
+			kind: fetched.kind
+		};
+		const seq = (this.#remoteImageSeq.get(runId) ?? 0) + 1;
+		this.#remoteImageSeq.set(runId, seq);
+		const path = `remote-image-${String(seq)}.${fetched.mimeType === "image/jpeg" ? "jpg" : "png"}`;
+		await artifacts.createBinaryArtifact({
+			runId,
+			path,
+			content: Uint8Array.from(atob(fetched.data), (char) => char.charCodeAt(0)),
+			mimeType: fetched.mimeType,
+			metadata: { resultCard: false }
+		});
+		return {
+			artifact: `artifact:${path}`,
+			width: fetched.width,
+			height: fetched.height,
+			bytes: fetched.bytes,
+			...input.describe === true ? {
+				data: fetched.data,
+				mimeType: fetched.mimeType
+			} : {}
+		};
+	}
+	/**
 	* 这次 run 激活过的技能名。它是授权告知的主语，因此**不能**由发出 surface 的技能自报——
 	* 那等于让被授权方自己写授权提示。
 	*
@@ -27511,6 +28217,7 @@ var ChatEngine = class {
 		});
 		this.#currentSessionId = session.id;
 		this.#visionDelegate?.forgetSessionDecision();
+		this.#imageSources?.forgetSessionDecisions();
 		if (previous !== void 0 && previous !== session.id) {
 			this.#endSession(previous, "switched");
 			this.#applySelectedModel(void 0);
@@ -27529,6 +28236,7 @@ var ChatEngine = class {
 		const previous = this.#currentSessionId;
 		this.#currentSessionId = id;
 		if (previous !== void 0 && previous !== id) this.#endSession(previous, "switched");
+		if (previous !== id) this.#imageSources?.forgetSessionDecisions();
 		if (options.cursor === void 0) {
 			const stored = (await this.#sessions.getMeta(id))?.modelId;
 			this.#applySelectedModel(stored ?? [...page.items].reverse().find((message) => message.model !== void 0)?.model);
@@ -27746,12 +28454,26 @@ var ChatEngine = class {
 				text: handle
 			});
 			if (attachment.kind === "text" || attachment.kind === "document-text") {
-				const body = await this.#adapter.storage.readText(path);
+				const body = await this.#attachmentText(attachment, path);
+				if (body === void 0) {
+					parts.push({
+						type: "text",
+						text: `Attachment "${attachment.name}" (${attachment.contentType}) is attached, but no text extractor for this format is available in this environment, so its body is not inlined below.` + (this.#hasDocumentReader(attachment) ? ` Use read_document with id ${attachment.id} to read it unit by unit.` : "")
+					});
+					continue;
+				}
 				const routed = this.#routeText(attachment, body, attachment.kind);
 				parts.push(routed.part);
 				if (routed.notice !== void 0) notices.push(routed.notice);
 				continue;
 			}
+			if (attachment.kind === "binary") {
+				parts.push({
+					type: "text",
+					text: `Attachment "${attachment.name}" (${attachment.size} bytes) is available to tools as id ${attachment.id}. Its contents are not included here — pass the id to a tool that reads this format.`
+				});
+				continue;
+			}
 			const data = toBase64(await this.#adapter.storage.readBinary(path));
 			if (attachment.kind === "image") {
 				parts.push({
@@ -27775,7 +28497,7 @@ var ChatEngine = class {
 		};
 	}
 	/**
-	* 文本类附件进上下文的预算（`loop.maxDocumentTextBytes`，默认 500 KB）。
+	* 文本类附件进上下文的预算（`loop.maxDocumentTextBytes`，默认 5000 KB）。
 	* 与 agentLoop 的 `#documentTooLarge` 同一个值、同一条口径。
 	*/
 	#textBudget() {
@@ -27801,11 +28523,38 @@ var ChatEngine = class {
 	* 给了 id 就是教模型去调一个不存在的工具。
 	*/
 	#documentHandleLabel(attachment) {
-		const mime = attachment.contentType.split(";")[0]?.trim().toLowerCase();
-		if ((mime === SUPPORTED_DOCUMENT_MIME.pdf ? this.#adapter.pdfDocumentReader : mime === SUPPORTED_DOCUMENT_MIME.docx ? this.#adapter.docxDocumentReader : mime === SUPPORTED_DOCUMENT_MIME.xlsx ? this.#adapter.xlsxDocumentReader : void 0) === void 0) return void 0;
+		if (!this.#hasDocumentReader(attachment)) return void 0;
 		return `--- Attachment: ${attachment.name} (${attachment.contentType}, id: ${attachment.id}) ---\nread_document accepts this id while this turn lasts. Use it whenever you need the pictures, charts, diagrams or scanned pages inside this document: extracted text never contains them, and an endpoint that refuses attached files leaves you with the text alone. Do not answer "the document has no images" without reading it this way first.`;
 	}
 	/**
+	* 这份附件的格式有没有注册文档读取器，即 `read_document` 能不能读它（0.22.0 分册 16 FR-16.1）。
+	*
+	* 取件号与「超限改走分批」共用这一个判据：判反了不是少一句说明，
+	* 而是给出一个调不到的工具（没 reader 却给 id），或者白白丢掉全文（有 reader 却当没有）。
+	*/
+	#hasDocumentReader(attachment) {
+		const mime = attachment.contentType.split(";")[0]?.trim().toLowerCase();
+		return (mime === SUPPORTED_DOCUMENT_MIME.pdf ? this.#adapter.pdfDocumentReader : mime === SUPPORTED_DOCUMENT_MIME.docx ? this.#adapter.docxDocumentReader : mime === SUPPORTED_DOCUMENT_MIME.xlsx ? this.#adapter.xlsxDocumentReader : mime === SUPPORTED_DOCUMENT_MIME.pptx ? this.#adapter.pptxDocumentReader : void 0) !== void 0;
+	}
+	/**
+	* 文本类附件的正文。`text` 存的就是文本；`document-text` 存的是**原件**，文本在这里现抽。
+	*
+	* 抽取推迟到发送，是为了让 `read_document` 还能拿到原件字节去读图表与扫描页——
+	* 上传时就抽掉的话，那些东西在磁盘上根本不存在了（0.22.0 分册 18）。
+	*
+	* 返回 `undefined` = 本环境抽不出文本。不抛错：附件是上传时被收下的，
+	* 此刻让整条消息发不出去等于拿用户刚打的字陪绑，而原件还在盘上，模型仍可按 id 逐块读。
+	*/
+	async #attachmentText(attachment, path) {
+		if (attachment.kind === "text") return await this.#adapter.storage.readText(path);
+		const bytes = await this.#adapter.storage.readBinary(path);
+		if (!(bytes[0] === 80 && bytes[1] === 75)) return new TextDecoder().decode(bytes);
+		const format = extractedDocumentFormat(attachment.contentType, attachment.name);
+		const extract = format === "xlsx" ? this.#adapter.xlsxExtractor : format === "pptx" ? this.#adapter.pptxExtractor : this.#adapter.docxExtractor;
+		if (extract === void 0) return void 0;
+		return await extract(bytes);
+	}
+	/**
 	* 文本类附件（纯文本 / docx / xlsx / 抽取出来的 PDF 文本）的发送形态。
 	*
 	* 预算走 `maxDocumentTextBytes` 而不是 `formatAttachmentText` 的 32 KiB 兜底：
@@ -27817,16 +28566,24 @@ var ChatEngine = class {
 		const size = new TextEncoder().encode(body).length;
 		if (size > max) {
 			const locale = this.#liveConfig?.appearance.locale ?? "en";
+			const params = {
+				name: attachment.name,
+				size: formatSize(size),
+				limit: formatSize(max)
+			};
+			if (this.#hasDocumentReader(attachment)) return {
+				part: {
+					type: "text",
+					text: `--- Attachment: ${attachment.name} (${attachment.contentType}, not attached, read it in parts) ---\nIts text alone is ${size} bytes, over the ${max} byte context limit, so it is not in this message. It was not truncated, because a partial document would be unusable. Call read_document with id ${attachment.id} to read it a block at a time — each result tells you how much is left and which cursor continues from there. Read as many times as the task needs before answering.`
+				},
+				notice: translateText(locale, "attachment.pdfAsPagedRead", params)
+			};
 			return {
 				part: {
 					type: "text",
 					text: `--- Attachment: ${attachment.name} (${attachment.contentType}, not attached) ---\nIts text is ${size} bytes, over the ${max} byte context limit for attached text. It was not truncated, because a partial document would be unusable. Tell the user to raise the extracted-text limit in settings, or to attach a shorter excerpt or a specific section.`
 				},
-				notice: translateText(locale, "attachment.textTooLong", {
-					name: attachment.name,
-					size: formatSize(size),
-					limit: formatSize(max)
-				})
+				notice: translateText(locale, "attachment.textTooLong", params)
 			};
 		}
 		return { part: {
@@ -27841,9 +28598,11 @@ var ChatEngine = class {
 		} };
 	}
 	/**
-	* 单个 PDF 附件的发送形态（FR-18.5）。阈值内直传原件——保住扫描件、版面与图表；
-	* 超阈值才退到抽取文本，抽不出就**拒绝并说明**，绝不截断：半份 PDF 是坏文件，
-	* 半份抽取文本会让模型以为自己读全了（FR-18.5a，与 `#documentTooLarge` 同口径）。
+	* 单个 PDF 附件的发送形态（FR-18.5；0.22.0 分册 16 改写超阈值那一支）。
+	*
+	* 阈值内直传原件——保住扫描件、版面与图表。超阈值分两种走法：
+	* 该格式**注册了读取器**时交给 `read_document` 分批读（FR-16.1），正文一个字都不进消息；
+	* 没有读取器时才退到抽取文本，抽不出就**拒绝并说明**，绝不截断（FR-18.5a）。
 	*/
 	async #routeDocument(attachment, data) {
 		const max = this.#documentBudget();
@@ -27867,6 +28626,13 @@ var ChatEngine = class {
 			},
 			notice: translateText(locale, key, params)
 		});
+		if (this.#hasDocumentReader(attachment)) return {
+			part: {
+				type: "text",
+				text: `${label("not attached, read it in pages")}The document is ${data.length} bytes once encoded, over the ${max} byte request limit, so the file itself is not in this message. Its text is not here either: a document this size does not fit the context window in one piece, and a partial copy would be unusable. Call read_document with id ${attachment.id} to read it page by page — each result tells you how much is left and which cursor continues from there. Read as many times as the task needs before answering.`
+			},
+			notice: translateText(locale, "attachment.pdfAsPagedRead", params)
+		};
 		const extract = this.#adapter.pdfExtractor;
 		if (extract === void 0) return refuse("This environment has no PDF text extractor, so no fallback is available. Tell the user to switch to a model that accepts large documents, or to attach the content as a Word or plain-text file instead.", "attachment.pdfNoExtractor");
 		let body;
@@ -28227,6 +28993,7 @@ var ChatEngine = class {
 			...this.#adapter.downloads.consent ? { consent: this.#adapter.downloads.consent } : {},
 			...this.#adapter.docxExtractor ? { docxExtractor: this.#adapter.docxExtractor } : {},
 			...this.#adapter.xlsxExtractor ? { xlsxExtractor: this.#adapter.xlsxExtractor } : {},
+			...this.#adapter.pptxExtractor ? { pptxExtractor: this.#adapter.pptxExtractor } : {},
 			...this.#adapter.pdfExtractor ? { pdfExtractor: this.#adapter.pdfExtractor } : {},
 			maxDocumentBytes: () => this.#documentBudget(),
 			...this.#adapter.documentAudit ? { audit: this.#adapter.documentAudit } : {}
@@ -28235,17 +29002,55 @@ var ChatEngine = class {
 			root: `${this.#chatRoot}/artifacts`,
 			fs
 		});
+		const readDocumentBytes = async (id, context) => {
+			const attachment = this.#runAttachments.find((a) => a.id === id);
+			if (attachment) {
+				const bytes = await this.#adapter.storage.readBinary(`${this.attachmentsRoot}/${attachment.path}`);
+				return {
+					name: attachment.name,
+					bytes
+				};
+			}
+			const stored = context?.binaries?.get(id);
+			if (stored) return {
+				name: stored.name,
+				bytes: stored.bytes
+			};
+			if (!downloadPolicy) return void 0;
+			const downloaded = await downloadPolicy.readBytes(id);
+			return {
+				name: downloaded.entry.name,
+				bytes: downloaded.bytes
+			};
+		};
+		/**
+		* 模板字节比 `read_document` 多认一条取件号：`weboffice:<handle>`（0.22.0 分册 42 FR-42.12）。
+		*
+		* 多的只是**取件**这一段——拿到字节之后走的与本地模板是同一条路（FR-42.12 后半句）。
+		* 前缀是显式的：不去猜某个 id 会不会恰好是个 weboffice handle，猜错的代价是
+		* 拿了另一份文档冒充用户指的那一份。前缀不匹配时连问都不问，直接当作没有。
+		*/
+		const readTemplateBytes = async (id, context) => {
+			const local = await readDocumentBytes(id, context);
+			if (local) return local;
+			const online = this.#adapter.webOfficeTemplateSource;
+			if (!online || !id.startsWith("weboffice:")) return void 0;
+			return await online.read(id.slice(10), context);
+		};
 		const baseTools = [
 			...pageSkillSource ? [pageSkillSource] : [],
-			createSpreadsheetToolSource({ writeArtifact: (path, content, mimeType, context) => {
-				if (!context?.runId) throw new WebSkillError("TOOL_EXECUTION_FAILED", "Writing a workbook requires an active run.");
-				return artifactStore.createBinaryArtifact({
-					runId: context.runId,
-					path,
-					content,
-					mimeType
-				});
-			} }),
+			createSpreadsheetToolSource({
+				writeArtifact: (path, content, mimeType, context) => {
+					if (!context?.runId) throw new WebSkillError("TOOL_EXECUTION_FAILED", "Writing a workbook requires an active run.");
+					return artifactStore.createBinaryArtifact({
+						runId: context.runId,
+						path,
+						content,
+						mimeType
+					});
+				},
+				resolveImage: (ref, context) => this.#spreadsheetImage(ref, context?.runId)
+			}),
 			...(rc === void 0 ? this.#options.generativeUi === true : rc.agentCapabilities.generativeUi) ? [createUiCatalogToolSource(rc ? { presets: rc.agentCapabilities.uiPresets } : {})] : [],
 			...rc?.agentCapabilities.todo === false ? [] : [createTodoToolSource({ store: this.#todoStore })],
 			...rc?.agentCapabilities.skillGeneration === true ? [createSkillGenerationToolSource({
@@ -28272,29 +29077,51 @@ var ChatEngine = class {
 				}
 			})] : [],
 			...this.#adapter.pageActions ? [createPageActionToolSource({ policy: this.#adapter.pageActions })] : [],
+			...this.#adapter.pageImage ? [createPageImageToolSource({ capture: (input, context) => this.#capturePageImage(this.#adapter.pageImage, artifactStore, input, context?.runId) })] : [],
+			...this.#adapter.remoteImage ? [createRemoteImageToolSource({ fetchImage: (input, context) => this.#fetchRemoteImage(this.#adapter.remoteImage, artifactStore, input, context?.runId) })] : [],
 			...this.#adapter.pageTabs ? [createTabWorksetToolSource({ policy: this.#adapter.pageTabs })] : [],
 			...downloadPolicy ? [createDownloadedFileToolSource({ policy: downloadPolicy })] : [],
 			createDocumentToolSource({
-				files: { read: async (id) => {
-					const attachment = this.#runAttachments.find((a) => a.id === id);
-					if (attachment) {
-						const bytes = await this.#adapter.storage.readBinary(`${this.attachmentsRoot}/${attachment.path}`);
-						return {
-							name: attachment.name,
-							bytes
-						};
-					}
-					if (!downloadPolicy) return void 0;
-					const downloaded = await downloadPolicy.readBytes(id);
-					return {
-						name: downloaded.entry.name,
-						bytes: downloaded.bytes
-					};
-				} },
+				files: { read: readDocumentBytes },
 				...this.#adapter.pdfDocumentReader ? { pdf: this.#adapter.pdfDocumentReader } : {},
 				...this.#adapter.docxDocumentReader ? { docx: this.#adapter.docxDocumentReader } : {},
-				...this.#adapter.xlsxDocumentReader ? { xlsx: this.#adapter.xlsxDocumentReader } : {}
+				...this.#adapter.xlsxDocumentReader ? { xlsx: this.#adapter.xlsxDocumentReader } : {},
+				...this.#adapter.pptxDocumentReader ? { pptx: this.#adapter.pptxDocumentReader } : {}
 			}),
+			...this.#adapter.xlsxTemplateEngine || this.#adapter.docxTemplateEngine ? [createTemplateToolSource({
+				files: { read: readTemplateBytes },
+				...this.#adapter.webOfficeTemplateSource ? { idHint: `For a document open in an online WPS/WebOffice viewer, use "${WEB_OFFICE_TEMPLATE_PREFIX}<handle>" with the handle from list_weboffice_documents.` } : {},
+				...this.#adapter.xlsxTemplateEngine ? { xlsx: this.#adapter.xlsxTemplateEngine } : {},
+				...this.#adapter.docxTemplateEngine ? { docx: this.#adapter.docxTemplateEngine } : {},
+				writeArtifact: (path, content, mimeType, context) => {
+					if (!context?.runId) throw new WebSkillError("TOOL_EXECUTION_FAILED", "Filling a template requires an active run.");
+					return artifactStore.createBinaryArtifact({
+						runId: context.runId,
+						path,
+						content,
+						mimeType
+					});
+				},
+				resolveImage: async (ref, context) => {
+					const found = await this.#spreadsheetImage(ref, context?.runId);
+					return {
+						bytes: found.bytes,
+						extension: found.contentType.replace(/^image\//, "") || "png",
+						contentType: found.contentType
+					};
+				}
+			})] : [],
+			...this.#adapter.dwg ? [createDwgToolSource({
+				load: async (file, context) => {
+					const found = await readDocumentBytes(file, context);
+					if (!found) throw new WebSkillError("TOOL_EXECUTION_FAILED", `No file named "${file}" is available. Use one from the download list, a page link, or an attachment.`);
+					return {
+						document: await this.#adapter.dwg.read(found.bytes, found.name),
+						name: found.name
+					};
+				},
+				project: (input) => this.#adapter.dwg.project(input)
+			})] : [],
 			...this.#adapter.webOffice ? [createWebOfficeToolSource({ policy: new WebOfficePolicy({
 				host: this.#adapter.webOffice.host,
 				ui: this.#uiBridge,
@@ -28345,6 +29172,7 @@ var ChatEngine = class {
 			...this.#adapter.linkedDocuments ? { linkedDocuments: this.#adapter.linkedDocuments } : {},
 			...this.#adapter.docxExtractor ? { docxExtractor: this.#adapter.docxExtractor } : {},
 			...this.#adapter.xlsxExtractor ? { xlsxExtractor: this.#adapter.xlsxExtractor } : {},
+			...this.#adapter.pptxExtractor ? { pptxExtractor: this.#adapter.pptxExtractor } : {},
 			...this.#adapter.pdfExtractor ? { pdfExtractor: this.#adapter.pdfExtractor } : {},
 			visionDelegate: this.#visionDelegate,
 			...this.#adapter.documentAudit ? { documentAudit: this.#adapter.documentAudit } : {},
@@ -28366,6 +29194,7 @@ var ChatEngine = class {
 			})] : []]
 		});
 		runtime.events.on("*", (event) => {
+			this.#runSessions.set(event.runId, event.sessionId);
 			if (event.phase === "route") {
 				this.#runSkills.set(event.runId, /* @__PURE__ */ new Set());
 				this.#runPhases.delete(event.runId);
@@ -28541,6 +29370,7 @@ var ChatEngine = class {
 			message: assistantMessage
 		});
 		this.#runSkills.delete(run.id);
+		this.#runSessions.delete(run.id);
 		this.#runTodos.delete(run.id);
 		this.#runPerceptions.delete(run.id);
 		this.#runCandidates.delete(run.id);
@@ -29821,6 +30651,44 @@ function visionDelegationDetails(details) {
 		...typeof rememberLabel === "string" ? { rememberLabel } : {}
 	};
 }
+/**
+* 图片来源授权卡的载荷（0.22.0 分册 11 §3.3 / 分册 12）。
+*
+* `kind` 决定风险说的是哪一件事：取页面上的图、还是去互联网上下载一张。
+* 两者共用一个能力名，所以**没有 `kind` 就不能渲染**——缺省回退成另一句话
+* 等于让用户在看不见来源的情况下点同意。
+*/
+function imageSourceDetails(details) {
+	if (typeof details !== "object" || details === null) return void 0;
+	const record = details;
+	const kind = record["kind"];
+	if (kind !== "page-image" && kind !== "remote-image") return void 0;
+	const note = record["note"];
+	const url = record["url"];
+	const rememberLabelKey = record["rememberLabelKey"];
+	return {
+		kind,
+		...typeof note === "string" && note !== "" ? { note } : {},
+		...typeof url === "string" && url !== "" ? { url } : {},
+		...record["rememberable"] === true ? { rememberable: true } : {},
+		...record["rememberScope"] === "session" ? { rememberScope: "session" } : {},
+		...typeof rememberLabelKey === "string" ? { rememberLabelKey } : {}
+	};
+}
+/**
+* 这个地址是不是明文 http。
+*
+* 只认真正的 `http:` 协议，不做子串匹配——`https://a/?next=http://b` 里的那截
+* 不是本次要发的请求，据此吓唬用户会让这条提示很快被当成噪音忽略掉。
+*/
+function isInsecureUrl(url) {
+	if (url === void 0) return false;
+	try {
+		return new URL(url).protocol === "http:";
+	} catch {
+		return false;
+	}
+}
 /** 五个沙箱能力闸门的共用载荷（`gate()` 统一注入 `skill`，其余按能力各带一项） */ function sandboxDetails(details) {
 	if (typeof details !== "object" || details === null) return void 0;
 	const record = details;
@@ -29910,6 +30778,14 @@ function localizedAuthorizeMessage(request, t) {
 			host: details.endpointHost
 		});
 	}
+	if (request.capability === "readImageSource") {
+		const details = imageSourceDetails(request.details);
+		if (details === void 0) return void 0;
+		const head = details.kind === "remote-image" && details.url !== void 0 ? t("interaction.imageSource.remoteImageBody", { url: details.url }) : t(`interaction.imageSource.${details.kind === "remote-image" ? "remoteImageAnyBody" : "pageImageBody"}`);
+		const insecure = isInsecureUrl(details.url) ? ` ${t("interaction.imageSource.insecure")}` : "";
+		if (details.note === void 0) return `${head}${insecure}`;
+		return `${head}${insecure} ${t("interaction.imageSource.note", { note: details.note })}`;
+	}
 }
 
 //#endregion
@@ -29976,7 +30852,7 @@ function InteractionWaitBar({ bridge, label, elsewhere = false, panel, onLocate
 		id: INTERACTION_WAIT_ID,
 		"data-testid": "interaction-wait",
 		role: "status",
-		className: "webskill-chat-prose mx-auto flex w-full items-center gap-2 px-4 pt-2 text-xs text-muted",
+		className: "webskill-chat-prose mx-auto flex w-full shrink-0 items-center gap-2 px-4 pt-2 text-xs text-muted",
 		children: [
 			/* @__PURE__ */ jsx(Hourglass, {
 				className: "size-3.5 shrink-0",
@@ -42189,6 +43065,8 @@ function attachmentAccept(options) {
 	if (options.files) parts.push(...FILE_MIME_TYPES);
 	if (options.documents) parts.push(DOCX_MIME, ".docx");
 	if (options.spreadsheets) parts.push(XLSX_MIME, ".xlsx");
+	if (options.presentations) parts.push(PPTX_MIME, ".pptx");
+	if (options.drawings) parts.push(...DWG_MIME_TYPES, ...BINARY_EXTENSIONS.map((ext) => `.${ext}`));
 	return parts.join(",");
 }
 
@@ -42207,11 +43085,14 @@ function safeName(name) {
 	const cleaned = (name.split(/[\\/]/).pop() ?? "attachment").replace(/[^\w.\- ]+/g, "_").replace(/^\.+/, "");
 	return cleaned === "" ? "attachment" : cleaned.slice(0, 80);
 }
-/** 两种待抽取格式共用 `document-text` 这一种 kind，选抽取器时要按格式再分一次 */
-function isSpreadsheet(file) {
-	const type = file.type.toLowerCase();
-	if (type !== "") return type === SUPPORTED_DOCUMENT_MIME.xlsx;
-	return file.name.toLowerCase().endsWith(".xlsx");
+/** 三种待抽取格式共用 `document-text` 这一种 kind，选抽取器时要按格式再分一次 */
+const EXTRACTED_LABEL = {
+	docx: "Word documents",
+	xlsx: "Excel workbooks",
+	pptx: "PowerPoint presentations"
+};
+function formatOf(file) {
+	return extractedDocumentFormat(file.type, file.name);
 }
 /**
 * 附件落盘到 `<attachmentsRoot>/<sessionId>/`，`ChatEngine.send` 再按路径读回构造 `LlmContentPart[]`。
@@ -42230,7 +43111,9 @@ var WebSkillAttachmentAdapter = class {
 			images: this.#imagesAllowed(),
 			files: true,
 			documents: this.#options.docxExtractor !== void 0,
-			spreadsheets: this.#options.xlsxExtractor !== void 0
+			spreadsheets: this.#options.xlsxExtractor !== void 0,
+			presentations: this.#options.pptxExtractor !== void 0,
+			drawings: this.#options.drawingsSupported?.() ?? false
 		});
 	}
 	#multimodal() {
@@ -42240,7 +43123,10 @@ var WebSkillAttachmentAdapter = class {
 		return this.#multimodal().imageAttachments && (this.#options.imageCapable?.() ?? false);
 	}
 	#extractorFor(file) {
-		return isSpreadsheet(file) ? this.#options.xlsxExtractor : this.#options.docxExtractor;
+		const format = formatOf(file);
+		if (format === "xlsx") return this.#options.xlsxExtractor;
+		if (format === "pptx") return this.#options.pptxExtractor;
+		return this.#options.docxExtractor;
 	}
 	async add({ file }) {
 		const kind = classifyAttachment(file.type, file.name);
@@ -42248,11 +43134,12 @@ var WebSkillAttachmentAdapter = class {
 		if (kind === "image") {
 			if (!this.#multimodal().imageAttachments) throw new WebSkillError("ATTACHMENT_TYPE_REJECTED", "Image attachments are turned off. Enable them in settings before sending images.");
 			if (!(this.#options.imageCapable?.() ?? false)) throw new WebSkillError("MODEL_IMAGE_UNSUPPORTED", "Current model does not support image input. Switch model or remove the image.");
-		} else if (kind === "document-text" && this.#extractorFor(file) === void 0) throw new WebSkillError("ATTACHMENT_TYPE_REJECTED", `${isSpreadsheet(file) ? "Excel workbooks" : "Word documents"} are not supported in this environment: no ${isSpreadsheet(file) ? "xlsx" : "docx"} extractor is wired up.`);
+		} else if (kind === "document-text" && this.#extractorFor(file) === void 0) throw new WebSkillError("ATTACHMENT_TYPE_REJECTED", `${EXTRACTED_LABEL[formatOf(file)]} are not supported in this environment: no ${formatOf(file)} extractor is wired up.`);
+		else if (kind === "binary" && !(this.#options.drawingsSupported?.() ?? false)) throw new WebSkillError("ATTACHMENT_TYPE_REJECTED", `Drawings are not supported in this environment: no CAD reader is wired up.`);
 		const id = `att-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
 		const relative = `${this.#options.sessionId() ?? "pending"}/${id}-${safeName(file.name)}`;
 		const path = `${this.#options.root}/${relative}`;
-		const contentType = file.type === "" ? "text/plain" : file.type;
+		const contentType = file.type !== "" ? file.type : kind === "binary" ? "application/octet-stream" : "text/plain";
 		try {
 			this.#stored.set(id, await this.#store({
 				id,
@@ -42296,9 +43183,8 @@ var WebSkillAttachmentAdapter = class {
 			};
 		}
 		if (kind === "document-text") {
-			const extract = this.#extractorFor(file);
-			if (extract === void 0) throw new WebSkillError("ATTACHMENT_TYPE_REJECTED", "No document text extractor is wired up in this environment.");
-			await this.#options.storage.writeText(path, await extract(new Uint8Array(await file.arrayBuffer())));
+			if (this.#extractorFor(file) === void 0) throw new WebSkillError("ATTACHMENT_TYPE_REJECTED", "No document text extractor is wired up in this environment.");
+			await this.#writeStreaming(path, file);
 			return {
 				...base,
 				size: file.size
@@ -42311,6 +43197,13 @@ var WebSkillAttachmentAdapter = class {
 				size: file.size
 			};
 		}
+		if (kind === "binary") {
+			await this.#writeStreaming(path, file);
+			return {
+				...base,
+				size: file.size
+			};
+		}
 		const compressed = await compressImageToBudget(file, this.#multimodal().maxImageBytes);
 		await this.#options.storage.writeBinary(path, new Uint8Array(await compressed.blob.arrayBuffer()));
 		const recoded = compressed.compressedBytes !== compressed.originalBytes;
@@ -42832,8 +43725,9 @@ function ActiveInteractionCard({ request, bridge }) {
 	const downloadedFile = isAuthorize && request.capability === "readDownloadedFile" ? downloadedFileDetails(request.details) : void 0;
 	const webOffice = isAuthorize && request.capability === "readWebOfficeDocument" ? webOfficeDetails(request.details) : void 0;
 	const visionDelegation = isAuthorize && request.capability === "delegateVision" ? visionDelegationDetails(request.details) : void 0;
+	const imageSource = isAuthorize && request.capability === "readImageSource" ? imageSourceDetails(request.details) : void 0;
 	const traceEvidence = isAuthorize ? traceEvidenceDetails(request.details) : void 0;
-	const localized = pageAction !== void 0 || downloadedFile !== void 0 || webOffice !== void 0 || visionDelegation !== void 0;
+	const localized = pageAction !== void 0 || downloadedFile !== void 0 || webOffice !== void 0 || visionDelegation !== void 0 || imageSource !== void 0;
 	const spec = interactionToUiSpec(request.type === "authorize" && localized ? {
 		...request,
 		message: ""
@@ -43036,6 +43930,37 @@ function ActiveInteractionCard({ request, bridge }) {
 							}), visionDelegation.rememberLabel ?? t(visionDelegation.rememberScope === "endpoint" ? "interaction.visionDelegation.rememberFallback" : "interaction.visionDelegation.rememberSession")]
 						}) : null
 					] }) : null,
+					imageSource ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
+						/* @__PURE__ */ jsx("p", {
+							"data-testid": "interaction-image-source-title",
+							className: "text-sm font-medium text-ink",
+							children: t("interaction.imageSource.title")
+						}),
+						/* @__PURE__ */ jsx("p", {
+							"data-testid": "interaction-image-source-body",
+							className: "text-sm text-ink",
+							children: imageSource.kind === "remote-image" ? imageSource.url !== void 0 ? t("interaction.imageSource.remoteImageBody", { url: imageSource.url }) : t("interaction.imageSource.remoteImageAnyBody") : t("interaction.imageSource.pageImageBody")
+						}),
+						isInsecureUrl(imageSource.url) ? /* @__PURE__ */ jsx("p", {
+							"data-testid": "interaction-image-source-insecure",
+							className: "text-sm text-destructive",
+							children: t("interaction.imageSource.insecure")
+						}) : null,
+						imageSource.note !== void 0 ? /* @__PURE__ */ jsx("p", {
+							"data-testid": "interaction-image-source-note",
+							className: "text-sm text-muted",
+							children: t("interaction.imageSource.note", { note: imageSource.note })
+						}) : null,
+						imageSource.rememberable === true ? /* @__PURE__ */ jsxs("label", {
+							className: "flex items-center gap-2 text-sm text-ink",
+							children: [/* @__PURE__ */ jsx("input", {
+								type: "checkbox",
+								"data-testid": "interaction-image-source-remember",
+								checked: remember,
+								onChange: (event) => setRemember(event.currentTarget.checked)
+							}), t(imageSource.rememberLabelKey ?? "interaction.imageSource.rememberFallback")]
+						}) : null
+					] }) : null,
 					traceEvidence ? /* @__PURE__ */ jsxs("div", {
 						"data-testid": "interaction-trace-evidence",
 						children: [/* @__PURE__ */ jsx("div", {
@@ -43694,6 +44619,7 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 		multimodal: () => multimodalRef.current,
 		imageCapable: () => imageCapableRef.current,
 		notifyStorageError: (fileName) => storageToastRef.current?.(fileName),
+		drawingsSupported: () => adapter.dwg !== void 0,
 		...adapter.docxExtractor ? { docxExtractor: adapter.docxExtractor } : {},
 		...adapter.xlsxExtractor ? { xlsxExtractor: adapter.xlsxExtractor } : {}
 	}), [adapter, engine]);
@@ -43957,6 +44883,19 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 		const bytes = await adapter.storage.readBinary(`${engine.attachmentsRoot}/${attachment.path}`);
 		return URL.createObjectURL(new Blob([bytes], { type: attachment.contentType }));
 	}, [adapter, engine]);
+	const messagesRef = useRef(messages);
+	messagesRef.current = messages;
+	/** `![](upload:{id})` → 附件字节的 blob URL。模型输出不了 base64，正文贴附件图只能靠引用 */
+	const resolveImageRef = useCallback(async (ref) => {
+		const separator = ref.indexOf(":");
+		if (separator === -1) return void 0;
+		const kind = ref.slice(0, separator);
+		const rest = ref.slice(separator + 1);
+		if (kind !== "upload") return void 0;
+		const attachment = findAttachmentByRef([...messagesRef.current].reverse().flatMap((message) => message.attachments ?? []), rest);
+		if (attachment === void 0) return void 0;
+		return resolveAttachmentUrl(attachment);
+	}, [resolveAttachmentUrl]);
 	const handleRetry = useCallback((messageId) => {
 		flushPendingDeletes().then(() => engine.retry(messageId)).catch((e) => setError({ message: toErrorMessage(e) }));
 	}, [engine, flushPendingDeletes]);
@@ -44123,187 +45062,190 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 			onArchiveSession: handleArchiveSession,
 			onUnarchiveSession: handleUnarchiveSession,
 			onDeleteSession: handleDeleteSession,
-			children: /* @__PURE__ */ jsx(ThemeScope, {
-				ref: shellRef,
-				theme,
-				"data-layout": resolvedLayout,
-				"data-session-list": resolvedSessionList,
-				"data-session-narrow": narrow ? "true" : "false",
-				className: "webskill-aui-shell relative flex h-full min-h-0 flex-row font-sans text-ink",
-				children: /* @__PURE__ */ jsxs(LocalizedUndoToastProvider, { children: [/* @__PURE__ */ jsxs(Fragment$1, { children: [
-					/* @__PURE__ */ jsx(AttachmentStorageToastBridge, { sink: storageToastRef }),
-					narrow && sessionsExpanded ? /* @__PURE__ */ jsx("div", {
-						"data-testid": "session-list-overlay",
-						"aria-hidden": true,
-						onClick: () => setSessionsOpen(false),
-						className: "absolute inset-0 z-[var(--webskill-z-raised)] bg-scrim"
-					}) : null,
-					/* @__PURE__ */ jsx(AssistantUiSessionList, {
-						className: "webskill-aui-session-list",
-						onCollapse: () => setSessionsOpen(false),
-						...narrow ? { onNavigate: () => setSessionsOpen(false) } : {},
-						hasEarlier: sessionsCursor !== void 0,
-						loadingEarlier: loadingEarlierSessions,
-						onLoadEarlier: handleLoadEarlierSessions,
-						source: sessionsSource,
-						skipped: skippedSessions
-					})
-				] }), /* @__PURE__ */ jsxs("div", {
-					className: "webskill-chat-column flex min-h-0 min-w-0 flex-1 flex-col",
-					children: [
-						/* @__PURE__ */ jsx(AssistantUiThreadToolbar, {
-							...config?.title ? { title: config.title } : {},
-							onOpenSessions: () => setSessionsOpen(true),
-							onCreateSession: handleCreate,
-							...onOpenSettings ? { onOpenSettings: () => onOpenSettings() } : {},
-							...docked !== void 0 ? { docked } : {},
-							...onDock ? { onDock } : {},
-							...onClose ? { onClose } : {}
-						}),
-						/* @__PURE__ */ jsx(InterruptedBanner, {
-							engine,
-							...currentSessionId ? { sessionId: currentSessionId } : {}
-						}),
-						/* @__PURE__ */ jsxs("div", {
-							className: `flex min-h-0 flex-1 flex-col ${composerCentered ? "justify-center" : ""}`,
-							children: [
-								/* @__PURE__ */ jsx(AssistantUiViewport, {
-									grow: !composerCentered,
-									children: /* @__PURE__ */ jsxs("div", {
-										className: "webskill-chat-prose mx-auto flex w-full min-w-0 flex-col gap-4 px-4 py-6",
-										children: [
-											messages.length === 0 && !sending ? /* @__PURE__ */ jsx(AssistantUiEmptyState, {
-												...config?.title ? { title: config.title } : {},
-												...staticQuickPrompts ? { prompts: staticQuickPrompts } : {},
-												...config?.dynamicQuickPrompts ? { dynamicPrompts: config.dynamicQuickPrompts } : {},
-												limit: quickPromptLimit,
-												disabled: sending,
-												onPrompt: handleSend
-											}) : null,
-											/* @__PURE__ */ jsx(MessageDeleteOutlet, {
-												queue: pendingDeletes,
-												messages,
-												...currentSessionId ? { sessionId: currentSessionId } : {},
-												onRemove: (messageId) => setMessages((prev) => prev.filter((m) => m.id !== messageId)),
-												children: (handleDeleteMessage) => /* @__PURE__ */ jsx(AssistantUiMessageList, {
+			children: /* @__PURE__ */ jsx(MarkdownImageResolverProvider, {
+				resolve: resolveImageRef,
+				children: /* @__PURE__ */ jsx(ThemeScope, {
+					ref: shellRef,
+					theme,
+					"data-layout": resolvedLayout,
+					"data-session-list": resolvedSessionList,
+					"data-session-narrow": narrow ? "true" : "false",
+					className: "webskill-aui-shell relative flex h-full min-h-0 flex-row overflow-hidden font-sans text-ink",
+					children: /* @__PURE__ */ jsxs(LocalizedUndoToastProvider, { children: [/* @__PURE__ */ jsxs(Fragment$1, { children: [
+						/* @__PURE__ */ jsx(AttachmentStorageToastBridge, { sink: storageToastRef }),
+						narrow && sessionsExpanded ? /* @__PURE__ */ jsx("div", {
+							"data-testid": "session-list-overlay",
+							"aria-hidden": true,
+							onClick: () => setSessionsOpen(false),
+							className: "absolute inset-0 z-[var(--webskill-z-raised)] bg-scrim"
+						}) : null,
+						/* @__PURE__ */ jsx(AssistantUiSessionList, {
+							className: "webskill-aui-session-list",
+							onCollapse: () => setSessionsOpen(false),
+							...narrow ? { onNavigate: () => setSessionsOpen(false) } : {},
+							hasEarlier: sessionsCursor !== void 0,
+							loadingEarlier: loadingEarlierSessions,
+							onLoadEarlier: handleLoadEarlierSessions,
+							source: sessionsSource,
+							skipped: skippedSessions
+						})
+					] }), /* @__PURE__ */ jsxs("div", {
+						className: "webskill-chat-column flex min-h-0 min-w-0 flex-1 flex-col",
+						children: [
+							/* @__PURE__ */ jsx(AssistantUiThreadToolbar, {
+								...config?.title ? { title: config.title } : {},
+								onOpenSessions: () => setSessionsOpen(true),
+								onCreateSession: handleCreate,
+								...onOpenSettings ? { onOpenSettings: () => onOpenSettings() } : {},
+								...docked !== void 0 ? { docked } : {},
+								...onDock ? { onDock } : {},
+								...onClose ? { onClose } : {}
+							}),
+							/* @__PURE__ */ jsx(InterruptedBanner, {
+								engine,
+								...currentSessionId ? { sessionId: currentSessionId } : {}
+							}),
+							/* @__PURE__ */ jsxs("div", {
+								className: `flex min-h-0 flex-1 flex-col ${composerCentered ? "justify-center" : ""}`,
+								children: [
+									/* @__PURE__ */ jsx(AssistantUiViewport, {
+										grow: !composerCentered,
+										children: /* @__PURE__ */ jsxs("div", {
+											className: "webskill-chat-prose mx-auto flex w-full min-w-0 flex-col gap-4 px-4 py-6",
+											children: [
+												messages.length === 0 && !sending ? /* @__PURE__ */ jsx(AssistantUiEmptyState, {
+													...config?.title ? { title: config.title } : {},
+													...staticQuickPrompts ? { prompts: staticQuickPrompts } : {},
+													...config?.dynamicQuickPrompts ? { dynamicPrompts: config.dynamicQuickPrompts } : {},
+													limit: quickPromptLimit,
+													disabled: sending,
+													onPrompt: handleSend
+												}) : null,
+												/* @__PURE__ */ jsx(MessageDeleteOutlet, {
+													queue: pendingDeletes,
 													messages,
-													...messagesCursor !== void 0 ? { earlier: {
-														loading: loadingEarlierMessages,
-														onLoad: handleLoadEarlierMessages
-													} } : {},
-													renderMessage: (message) => /* @__PURE__ */ jsx(AssistantUiMessage, {
-														message,
-														onRetry: handleRetry,
-														onDelete: handleDeleteMessage,
-														onDownload: handleDownload,
-														modelLabels,
-														resolveAttachmentUrl,
-														...surfaceRegistry ? { surfaceRegistry } : {},
-														...engine.documentSurface ? { documentSurface: engine.documentSurface } : {},
-														renderer,
-														bridge: engine.bridge,
-														...adapter.navigation.openConsoleTrace ? { onViewTrace: adapter.navigation.openConsoleTrace } : {},
-														...adapter.navigation.openConsoleCandidate ? { onOpenCandidate: adapter.navigation.openConsoleCandidate } : {}
-													})
-												})
-											}),
-											(() => {
-												const interactionVisible = interactionSessionId === void 0 || interactionSessionId === currentSessionId;
-												return /* @__PURE__ */ jsxs(Fragment$1, { children: [renderer !== "native" ? /* @__PURE__ */ jsx("div", {
-													"data-testid": "spec-interaction-slot",
-													...interactionVisible ? { "data-webskill-interaction-anchor": "" } : {},
-													className: interactionVisible ? void 0 : "hidden",
-													children: /* @__PURE__ */ jsx(SpecInteraction, {
-														channel: engine.interactionChannel,
-														renderer
+													...currentSessionId ? { sessionId: currentSessionId } : {},
+													onRemove: (messageId) => setMessages((prev) => prev.filter((m) => m.id !== messageId)),
+													children: (handleDeleteMessage) => /* @__PURE__ */ jsx(AssistantUiMessageList, {
+														messages,
+														...messagesCursor !== void 0 ? { earlier: {
+															loading: loadingEarlierMessages,
+															onLoad: handleLoadEarlierMessages
+														} } : {},
+														renderMessage: (message) => /* @__PURE__ */ jsx(AssistantUiMessage, {
+															message,
+															onRetry: handleRetry,
+															onDelete: handleDeleteMessage,
+															onDownload: handleDownload,
+															modelLabels,
+															resolveAttachmentUrl,
+															...surfaceRegistry ? { surfaceRegistry } : {},
+															...engine.documentSurface ? { documentSurface: engine.documentSurface } : {},
+															renderer,
+															bridge: engine.bridge,
+															...adapter.navigation.openConsoleTrace ? { onViewTrace: adapter.navigation.openConsoleTrace } : {},
+															...adapter.navigation.openConsoleCandidate ? { onOpenCandidate: adapter.navigation.openConsoleCandidate } : {}
+														})
 													})
-												}) : null, interactionVisible ? /* @__PURE__ */ jsx(InteractionCard, { bridge: engine.bridge }) : null] });
-											})(),
-											/* @__PURE__ */ jsx(ResultBlocksPro, {
-												bridge: engine.bridge,
-												activeRunId: currentRunId,
-												onDownload: handleDownload
-											}),
-											error ? /* @__PURE__ */ jsx(ErrorCard, {
-												message: error.message,
-												...error.code ? { code: error.code } : {},
-												loopLimits,
-												...onOpenSettings ? { onOpenSettings: () => onOpenSettings("settings.runtime") } : {},
-												onDismiss: () => setError(void 0)
-											}) : null
-										]
-									})
-								}),
-								/* @__PURE__ */ jsx(InteractionWaitBar, {
-									bridge: engine.bridge,
-									...interactionPending && interactionTarget !== void 0 ? { label: interactionTarget } : {},
-									...interactionElsewhere ? {
-										elsewhere: true,
-										...interactionPanel !== void 0 ? { panel: interactionPanel } : {}
-									} : {},
-									onLocate: handleLocateInteraction
-								}),
-								(() => {
-									const items = visiblePinnedTodos(pinnedTodos);
-									return items ? /* @__PURE__ */ jsx("div", {
-										"data-testid": "pinned-todo-panel",
-										className: "webskill-chat-prose mx-auto w-full shrink-0 px-3",
-										children: /* @__PURE__ */ jsx(TodoPanel, {
-											items,
-											scrollable: true,
-											onDismiss: () => setPinnedTodos(dismissPinnedTodos)
+												}),
+												(() => {
+													const interactionVisible = interactionSessionId === void 0 || interactionSessionId === currentSessionId;
+													return /* @__PURE__ */ jsxs(Fragment$1, { children: [renderer !== "native" ? /* @__PURE__ */ jsx("div", {
+														"data-testid": "spec-interaction-slot",
+														...interactionVisible ? { "data-webskill-interaction-anchor": "" } : {},
+														className: interactionVisible ? void 0 : "hidden",
+														children: /* @__PURE__ */ jsx(SpecInteraction, {
+															channel: engine.interactionChannel,
+															renderer
+														})
+													}) : null, interactionVisible ? /* @__PURE__ */ jsx(InteractionCard, { bridge: engine.bridge }) : null] });
+												})(),
+												/* @__PURE__ */ jsx(ResultBlocksPro, {
+													bridge: engine.bridge,
+													activeRunId: currentRunId,
+													onDownload: handleDownload
+												}),
+												error ? /* @__PURE__ */ jsx(ErrorCard, {
+													message: error.message,
+													...error.code ? { code: error.code } : {},
+													loopLimits,
+													...onOpenSettings ? { onOpenSettings: () => onOpenSettings("settings.runtime") } : {},
+													onDismiss: () => setError(void 0)
+												}) : null
+											]
 										})
-									}) : null;
-								})(),
-								(() => {
-									const window = selectedEntry?.contextWindow;
-									const usage = formatContextUsage(contextTokens, window);
-									if (!queuedSend && usage === void 0) return null;
-									return /* @__PURE__ */ jsxs("div", {
-										className: "webskill-chat-prose text-muted-foreground mx-auto flex w-full shrink-0 items-center justify-between gap-2 px-3 text-xs",
-										children: [queuedSend ? /* @__PURE__ */ jsx("span", {
-											"data-testid": "queued-send-hint",
-											children: locale === "zh" ? "前一条还在处理，这条排在后面" : "Waiting for the previous message to finish"
-										}) : /* @__PURE__ */ jsx("span", {}), usage !== void 0 ? /* @__PURE__ */ jsx("span", {
-											"data-testid": "context-usage",
-											children: locale === "zh" ? `上下文 ${usage}` : `Context ${usage}`
-										}) : null]
-									});
-								})(),
-								/* @__PURE__ */ jsx(AssistantUiComposer, {
-									...modelCapabilities ? { capabilities: {
-										tools: modelCapabilities.tools,
-										image: modelCapabilities.image
-									} } : {},
-									running: busy,
-									disabled: interactionPending,
-									...interactionTarget !== void 0 ? { waitTarget: interactionTarget } : {},
-									centered: composerCentered,
-									attachments: attachmentsReady,
-									attachmentInfo: (id) => attachmentAdapter.describe(id),
-									attachmentImages: {
-										enabled: multimodal.imageAttachments,
-										imageCapable: modelTakesImages
-									},
-									...dictationLang !== "" ? { dictationLang } : {},
-									...onDictationPermissionDenied ? { onDictationPermissionDenied } : {},
-									...onCameraPermissionDenied ? { onCameraPermissionDenied } : {},
-									...composerModels && !noUsableModel ? { models: composerModels } : {},
-									...noUsableModel ? { noModel: { onConfigure: () => setNoModelGuideOpen(true) } } : {},
-									...config?.placeholder ? { placeholder: config.placeholder } : {}
-								}),
-								/* @__PURE__ */ jsx(NoModelGuideDialog, {
-									open: noModelGuideOpen,
-									onClose: () => setNoModelGuideOpen(false),
-									...onOpenSettings ? { onConfigure: () => {
-										setNoModelGuideOpen(false);
-										onOpenSettings("connections.models");
-									} } : {}
-								})
-							]
-						})
-					]
-				})] })
+									}),
+									/* @__PURE__ */ jsx(InteractionWaitBar, {
+										bridge: engine.bridge,
+										...interactionPending && interactionTarget !== void 0 ? { label: interactionTarget } : {},
+										...interactionElsewhere ? {
+											elsewhere: true,
+											...interactionPanel !== void 0 ? { panel: interactionPanel } : {}
+										} : {},
+										onLocate: handleLocateInteraction
+									}),
+									(() => {
+										const items = visiblePinnedTodos(pinnedTodos);
+										return items ? /* @__PURE__ */ jsx("div", {
+											"data-testid": "pinned-todo-panel",
+											className: "webskill-chat-prose mx-auto w-full shrink-0 px-3",
+											children: /* @__PURE__ */ jsx(TodoPanel, {
+												items,
+												scrollable: true,
+												onDismiss: () => setPinnedTodos(dismissPinnedTodos)
+											})
+										}) : null;
+									})(),
+									(() => {
+										const window = selectedEntry?.contextWindow;
+										const usage = formatContextUsage(contextTokens, window);
+										if (!queuedSend && usage === void 0) return null;
+										return /* @__PURE__ */ jsxs("div", {
+											className: "webskill-chat-prose text-muted-foreground mx-auto flex w-full shrink-0 items-center justify-between gap-2 px-3 text-xs",
+											children: [queuedSend ? /* @__PURE__ */ jsx("span", {
+												"data-testid": "queued-send-hint",
+												children: locale === "zh" ? "前一条还在处理，这条排在后面" : "Waiting for the previous message to finish"
+											}) : /* @__PURE__ */ jsx("span", {}), usage !== void 0 ? /* @__PURE__ */ jsx("span", {
+												"data-testid": "context-usage",
+												children: locale === "zh" ? `上下文 ${usage}` : `Context ${usage}`
+											}) : null]
+										});
+									})(),
+									/* @__PURE__ */ jsx(AssistantUiComposer, {
+										...modelCapabilities ? { capabilities: {
+											tools: modelCapabilities.tools,
+											image: modelCapabilities.image
+										} } : {},
+										running: busy,
+										disabled: interactionPending,
+										...interactionTarget !== void 0 ? { waitTarget: interactionTarget } : {},
+										centered: composerCentered,
+										attachments: attachmentsReady,
+										attachmentInfo: (id) => attachmentAdapter.describe(id),
+										attachmentImages: {
+											enabled: multimodal.imageAttachments,
+											imageCapable: modelTakesImages
+										},
+										...dictationLang !== "" ? { dictationLang } : {},
+										...onDictationPermissionDenied ? { onDictationPermissionDenied } : {},
+										...onCameraPermissionDenied ? { onCameraPermissionDenied } : {},
+										...composerModels && !noUsableModel ? { models: composerModels } : {},
+										...noUsableModel ? { noModel: { onConfigure: () => setNoModelGuideOpen(true) } } : {},
+										...config?.placeholder ? { placeholder: config.placeholder } : {}
+									}),
+									/* @__PURE__ */ jsx(NoModelGuideDialog, {
+										open: noModelGuideOpen,
+										onClose: () => setNoModelGuideOpen(false),
+										...onOpenSettings ? { onConfigure: () => {
+											setNoModelGuideOpen(false);
+											onOpenSettings("connections.models");
+										} } : {}
+									})
+								]
+							})
+						]
+					})] })
+				})
 			})
 		}) })
 	});
@@ -44364,7 +45306,7 @@ function VercelPayloadPreview({ bridge }) {
 * Version of the published `@webskill/chatbot` package, injected at build time.
 * @stable
 */
-const CHATBOT_VERSION = "0.18.0";
+const CHATBOT_VERSION = "0.19.0";
 
 //#endregion
-export { A2uiSurfaceHost, A2uiSurfaceSnapshotHost, CHATBOT_VERSION, ChatEngine, Chatbot, ChatbotVisionDelegate, CompositeUiBridge, DEFAULT_RENDERER_CAPABILITIES, DEFAULT_RUNTIME_CONFIG_STORAGE_KEY, ErrorCard, InteractionCard, InterruptedBanner, OpenUiSurfaceHost, OpenUiSurfaceSnapshotHost, ResultBlockList, ResultBlocksPro, SkillBadges, SpecInteraction, VercelPayloadPreview, VercelSurfaceHost, VercelSurfaceSnapshotHost, chatbotDictionary, configureA2uiMarkdown, createLocalStorageRuntimeConfigStore, createMemoryRuntimeConfigStore, isLlmEntryUsable, pickUsableLlmEntry, probeA2uiAvailability, probeOpenUiAvailability, sandboxExecutorDeps, useT };
+export { A2uiSurfaceHost, A2uiSurfaceSnapshotHost, CHATBOT_VERSION, ChatEngine, Chatbot, ChatbotVisionDelegate, CompositeUiBridge, DEFAULT_RENDERER_CAPABILITIES, DEFAULT_RUNTIME_CONFIG_STORAGE_KEY, ErrorCard, InteractionCard, InterruptedBanner, OpenUiSurfaceHost, OpenUiSurfaceSnapshotHost, ResultBlockList, ResultBlocksPro, SkillBadges, SpecInteraction, VercelPayloadPreview, VercelSurfaceHost, VercelSurfaceSnapshotHost, WEB_OFFICE_TEMPLATE_PREFIX, chatbotDictionary, configureA2uiMarkdown, createLocalStorageRuntimeConfigStore, createMemoryRuntimeConfigStore, isLlmEntryUsable, pickUsableLlmEntry, probeA2uiAvailability, probeOpenUiAvailability, sandboxExecutorDeps, useT };