@webskill/chatbot 0.27.0 → 0.28.0-next.1

package/dist/index.d.ts

@@ -1559,6 +1559,8 @@ declare const chatbotDictionary: {
     'interaction.sandbox.readReference': string;
     'interaction.sandbox.readAsset': string;
     'interaction.sandbox.fetchData': string;
+    'interaction.controller.dataSource': string;
+    'interaction.controller.linkedDocument': string;
     'interaction.sandbox.writeArtifact': string;
     'interaction.sandbox.confirm': string;
     'interaction.traceEvidence.title': string;
@@ -2020,6 +2022,8 @@ declare const chatbotDictionary: {
     'interaction.sandbox.readReference': string;
     'interaction.sandbox.readAsset': string;
     'interaction.sandbox.fetchData': string;
+    'interaction.controller.dataSource': string;
+    'interaction.controller.linkedDocument': string;
     'interaction.sandbox.writeArtifact': string;
     'interaction.sandbox.confirm': string;
     'interaction.traceEvidence.title': string;
@@ -2484,6 +2488,8 @@ declare const useT: () => TranslateFn<{
     'interaction.sandbox.readReference': string;
     'interaction.sandbox.readAsset': string;
     'interaction.sandbox.fetchData': string;
+    'interaction.controller.dataSource': string;
+    'interaction.controller.linkedDocument': string;
     'interaction.sandbox.writeArtifact': string;
     'interaction.sandbox.confirm': string;
     'interaction.traceEvidence.title': string;
@@ -2945,6 +2951,8 @@ declare const useT: () => TranslateFn<{
     'interaction.sandbox.readReference': string;
     'interaction.sandbox.readAsset': string;
     'interaction.sandbox.fetchData': string;
+    'interaction.controller.dataSource': string;
+    'interaction.controller.linkedDocument': string;
     'interaction.sandbox.writeArtifact': string;
     'interaction.sandbox.confirm': string;
     'interaction.traceEvidence.title': string;
@@ -3500,6 +3508,6 @@ declare function ErrorCard({ code, message, loopLimits, onOpenSettings, onDismis
  * Version of the published `@webskill/chatbot` package, injected at build time.
  * @stable
  */
-declare const CHATBOT_VERSION = "0.27.0";
+declare const CHATBOT_VERSION = "0.28.0-next.1";
 //#endregion
 export { A2uiSurfaceHost, type A2uiSurfaceHostProps, A2uiSurfaceSnapshotHost, type A2uiSurfaceSnapshotHostProps, type AppearanceChange, CHATBOT_VERSION, type ChatAttachmentInput, type ChatAttachmentMeta, type ChatComponent, type ChatComponentCallRecord, type ChatComponentConfirmation, type ChatComponentCredentialField, type ChatComponentInvokeContext, type ChatComponentOutcome, type ChatComponentStore, type ChatComponentText, type ChatContentPart, ChatEngine, type ChatEngineOptions, type ChatEvent, type ChatInteractionRecord, type ChatLayout, type ChatMessage, type ChatRunPhase, type ChatSessionListResult, type ChatSessionMeta, type ChatTheme, type ChatThinking, type ChatTokenUsage, type ChatToolCall, Chatbot, type ChatbotConfig, type ChatbotGovernancePorts, type ChatbotHostAdapter, type ChatbotProps, ChatbotVisionDelegate, type ChatbotVisionDelegateOptions, CompositeUiBridge, type CompositeUiBridgeDeps, DEFAULT_RENDERER_CAPABILITIES, DEFAULT_RUNTIME_CONFIG_STORAGE_KEY, type DownloadableFile, type DwgHost, ErrorCard, type ErrorCardProps, type HttpMessageComponentOptions, InteractionCard, type InteractionCardProps, InterruptedBanner, type InterruptedBannerProps, type Locale, type LocalizedText, OpenUiSurfaceHost, type OpenUiSurfaceHostProps, OpenUiSurfaceSnapshotHost, type OpenUiSurfaceSnapshotHostProps, type QuickPrompt, type QuickPromptIconName, type RendererCapability, type RendererKind, type ResolvedChatLayout, ResultBlockList, type ResultBlockListProps, ResultBlocksPro, type ResultBlocksProProps, type RunSnapshot, type RuntimeAppearanceConfig, type RuntimeConfig, type RuntimeConfigStore, type RuntimeQuickPrompt, type RuntimeRendererId, type SandboxExecutorDeps, type SettingsSectionId, SkillBadges, SpecInteraction, type SpecInteractionProps, VercelPayloadPreview, type VercelPayloadPreviewProps, VercelSurfaceHost, type VercelSurfaceHostProps, VercelSurfaceSnapshotHost, type VercelSurfaceSnapshotHostProps, type VisionDelegationConsent, type VisionDelegationEndpoint, WEB_OFFICE_TEMPLATE_PREFIX, chatbotDictionary, configureA2uiMarkdown, createHttpMessageComponent, createLocalStorageRuntimeConfigStore, createMemoryRuntimeConfigStore, isLlmEntryUsable, pickUsableLlmEntry, probeA2uiAvailability, probeOpenUiAvailability, sandboxExecutorDeps, useT };

package/dist/index.js

@@ -23,7 +23,7 @@ import { ActionBarPrimitive, AttachmentPrimitive, AuiProvider, ComposerPrimitive
 import { BrowserWorkerScriptExecutor, WebOfficePolicy, capturePhoto, checkCameraAvailability, checkDictationAvailability, compressImageToBudget, createEncryptedMemoryStore, createLlmClient, createWebOfficeToolSource, deleteMemoryEncryptionKey, openCamera, openMemoryEncryptionKey, probeChromeBuiltinAvailability, startDictation, toDocumentImage } from "@webskill/sdk/browser";
 import { JsonRenderSpecSurface, NativeSpecSurface, OpenUiSpecSurface, ReactBridgeState, SpecInteractionChannel, SurfaceFormTextsProvider, UiSurfaceSnapshotList, probeJsonRenderAvailability } from "@webskill/sdk/ui-react";
 import { A2UI_SPEC_FORM_PATH, collectFormScopes, createUiCatalogToolSource, fromA2uiSpecAction, fromA2uiSurfaceAction, interactionToFormModel, interactionToUiSpec, loadOpenUiPeers, loadWebSkillLitCatalog, renderMiniChart, shapeInteractionValue, toA2uiSpecMessages, toA2uiSurfaceAction, toVercelToolInvocation, uiCatalog } from "@webskill/sdk/ui";
-import { DownloadedFilePolicy, PAGE_ACTION_KINDS, SCROLL_DIRECTIONS, TodoStore, createDelegationToolSource, createDocumentToolSource, createDownloadedFileToolSource, createDwgToolSource, createPageActionToolSource, createPageImageToolSource, createPagePerceptionToolSource, createRemoteImageToolSource, createSkillGenerationToolSource, createSpreadsheetToolSource, createTabWorksetToolSource, createTableQueryToolSource, createTemplateToolSource, createTodoToolSource, isStreamingTableWorkbook, profileStreamingTable, profileTable, sniffDocumentFormat, summarizeStreamingWorkbook, withDelegationOrigin } from "@webskill/sdk/agent";
+import { DownloadedFilePolicy, ImageSourceAuthorizer, PAGE_ACTION_KINDS, SCROLL_DIRECTIONS, TodoStore, createDelegationToolSource, createDocumentToolSource, createDownloadedFileToolSource, createDwgToolSource, createPageActionToolSource, createPageImageToolSource, createPagePerceptionToolSource, createRemoteImageToolSource, createSkillGenerationToolSource, createSpreadsheetToolSource, createTabWorksetToolSource, createTableQueryToolSource, createTemplateToolSource, createTodoToolSource, fetchRemoteImageArtifact, isStreamingTableWorkbook, profileStreamingTable, profileTable, sniffDocumentFormat, summarizeStreamingWorkbook, withDelegationOrigin } from "@webskill/sdk/agent";
 import { DataRenderers, Tools } from "@assistant-ui/core/react";
 import { ModelContext, Suggestions } from "@assistant-ui/core/store";
 import { Derived, attachTransformScopes, useClientLookup, useClientResource } from "@assistant-ui/store";
@@ -26643,6 +26643,8 @@ const chatbotDictionary = defineDictionary({
 		"interaction.sandbox.readReference": "Allow the skill “{skill}” to read the reference file “{path}”?",
 		"interaction.sandbox.readAsset": "Allow the skill “{skill}” to read the bundled asset “{path}”?",
 		"interaction.sandbox.fetchData": "Allow the skill “{skill}” to fetch the data source “{source}”?",
+		"interaction.controller.dataSource": "Allow the assistant to fetch the browser data source “{source}”?",
+		"interaction.controller.linkedDocument": "Allow the assistant to read this linked document? {url}",
 		"interaction.sandbox.writeArtifact": "Allow the skill “{skill}” to write the artifact “{path}”?",
 		"interaction.sandbox.confirm": "The skill “{skill}” asks for confirmation:",
 		"interaction.traceEvidence.title": "Steps this skill claims",
@@ -27104,6 +27106,8 @@ const chatbotDictionary = defineDictionary({
 		"interaction.sandbox.readReference": "允许技能「{skill}」读取参考资料「{path}」吗？",
 		"interaction.sandbox.readAsset": "允许技能「{skill}」读取随附文件「{path}」吗？",
 		"interaction.sandbox.fetchData": "允许技能「{skill}」访问数据源「{source}」吗？",
+		"interaction.controller.dataSource": "允许助手访问浏览器中的数据源「{source}」吗？",
+		"interaction.controller.linkedDocument": "允许助手读取这份链接文档吗？{url}",
 		"interaction.sandbox.writeArtifact": "允许技能「{skill}」写出产物「{path}」吗？",
 		"interaction.sandbox.confirm": "技能「{skill}」请求确认：",
 		"interaction.traceEvidence.title": "该技能声称的步骤",
@@ -28133,89 +28137,6 @@ function createComponentToolSource(options) {
 	};
 }
 
-//#endregion
-//#region src/core/imageSource.ts
-/**
-* 授权卡的自述作用域（FR-11.10 / AC-G6）。
-*
-* 卡上写的范围与实际记忆的范围**由这一个函数同时导出**：
-* `key` 直接就是 `ImageSourceAuthorizer` 存进集合里的那个值，
-* `labelKey` 是复选框旁那句话。两者不可能分叉，因为只有一处。
-*
-* 出的是**字典键**而不是成品文案：这里是同步路径，读不到语言，
-* 写死一种语言就把复选框固定成英文了。
-* @experimental
-*/
-function describeImageSourceScope(kind) {
-	return {
-		key: kind,
-		labelKey: kind === "page-image" ? "interaction.imageSource.rememberPageImage" : "interaction.imageSource.rememberRemoteImage"
-	};
-}
-const MESSAGES = {
-	"page-image": "Allow the assistant to copy a picture from the page you are on into the document it is preparing? The picture is saved with this conversation’s files.",
-	"remote-image": "Allow the assistant to download an image from the web into the document it is preparing? The site hosting it will see that the request came from you."
-};
-/**
-* 图片来源的会话内授权（分册 11 §3.3）。
-*
-* 记忆随会话生灭：`forgetSessionDecisions()` 在新建 / 切换会话时调，新会话重新问。
-* 没有任何持久化端口——本版刻意不做跨会话记忆，那是比用户预期更宽的授权。
-* @experimental
-*/
-var ImageSourceAuthorizer = class {
-	#ui;
-	#approved = /* @__PURE__ */ new Set();
-	/** 同一类来源的并发请求搭同一次询问，不各弹各的（同视觉委派 FR-26.8） */
-	#asking = /* @__PURE__ */ new Map();
-	#seq = 0;
-	constructor(options) {
-		this.#ui = options.ui;
-	}
-	forgetSessionDecisions() {
-		this.#approved.clear();
-	}
-	/**
-	* 记忆粒度是**来源类型**，不是域名（FR-13.7）。因此同一类的并发请求搭同一次询问，
-	* 卡上也只会出现其中一个 URL——这正是为什么卡文必须把
-	* 「本次对话内所有外链图片」说出来，而不是只展示那一个域名。
-	*/
-	async authorize(kind, details = {}) {
-		if (this.#approved.has(kind)) return true;
-		const pending = this.#asking.get(kind);
-		if (pending !== void 0) return await pending;
-		const ask = this.#ask(kind, details);
-		this.#asking.set(kind, ask);
-		try {
-			return await ask;
-		} finally {
-			this.#asking.delete(kind);
-		}
-	}
-	async #ask(kind, details) {
-		this.#seq += 1;
-		const scope = describeImageSourceScope(kind);
-		const { note, url } = details;
-		const response = await this.#ui.request({
-			type: "authorize",
-			id: `image-source-${kind}-${String(this.#seq)}`,
-			capability: "readImageSource",
-			message: note === void 0 ? MESSAGES[kind] : `${MESSAGES[kind]} The assistant says: ${note}`,
-			details: {
-				kind: scope.key,
-				...note === void 0 ? {} : { note },
-				...url === void 0 ? {} : { url },
-				rememberable: true,
-				rememberScope: "session",
-				rememberLabelKey: scope.labelKey
-			}
-		});
-		if (response.cancelled === true || response.value === false) return false;
-		if (response.remembered === true) this.#approved.add(scope.key);
-		return true;
-	}
-};
-
 //#endregion
 //#region src/core/markdownBoundary.ts
 /**
@@ -29777,40 +29698,18 @@ var ChatEngine = class {
 	* 「先抓回来再丢掉」时用户的 IP 已经交出去了。
 	*/
 	async #fetchRemoteImage(host, artifacts, input, runId) {
-		if (runId === void 0) throw new WebSkillError("TOOL_EXECUTION_FAILED", "Downloading an image requires an active run.");
-		const note = input.note === void 0 ? void 0 : sanitizeUntrustedLine(input.note);
-		if (!await (this.#imageSources ??= new ImageSourceAuthorizer({ ui: this.#uiBridge })).authorize("remote-image", {
-			...note === void 0 ? {} : { note },
-			url: sanitizeUntrustedLine(input.url)
-		})) return {
-			reason: "the user declined to let the assistant download images from the web",
-			kind: "declined"
-		};
-		const fetched = await host.fetch(input.url, MAX_DOCUMENT_IMAGE_BYTES);
-		if ("kind" in fetched) return {
-			reason: fetched.reason,
-			kind: fetched.kind
-		};
-		const seq = (this.#remoteImageSeq.get(runId) ?? 0) + 1;
-		this.#remoteImageSeq.set(runId, seq);
-		const path = `remote-image-${String(seq)}.${fetched.mimeType === "image/jpeg" ? "jpg" : "png"}`;
-		await artifacts.createBinaryArtifact({
+		return await fetchRemoteImageArtifact({
+			host,
+			artifacts,
+			authorizer: this.#imageSources ??= new ImageSourceAuthorizer({ ui: this.#uiBridge }),
+			input,
 			runId,
-			path,
-			content: Uint8Array.from(atob(fetched.data), (char) => char.charCodeAt(0)),
-			mimeType: fetched.mimeType,
-			metadata: { resultCard: false }
+			nextPath: (mimeType) => {
+				const seq = (this.#remoteImageSeq.get(runId ?? "") ?? 0) + 1;
+				this.#remoteImageSeq.set(runId ?? "", seq);
+				return `remote-image-${String(seq)}.${mimeType === "image/jpeg" ? "jpg" : "png"}`;
+			}
 		});
-		return {
-			artifact: `artifact:${path}`,
-			width: fetched.width,
-			height: fetched.height,
-			bytes: fetched.bytes,
-			...input.describe === true ? {
-				data: fetched.data,
-				mimeType: fetched.mimeType
-			} : {}
-		};
 	}
 	/**
 	* 这次 run 激活过的技能名。它是授权告知的主语，因此**不能**由发出 surface 的技能自报——
@@ -32881,6 +32780,17 @@ function localizedAuthorizeMessage(request, t) {
 		const component = componentDetails(request.details);
 		if (component !== void 0) return componentMessage(component, t);
 	}
+	if (request.capability === "readLinkedDocument") {
+		const details = request.details;
+		const url = typeof details === "object" && details !== null ? details["url"] : void 0;
+		if (typeof url !== "string") return void 0;
+		return t("interaction.controller.linkedDocument", { url });
+	}
+	if (request.capability === "fetchData") {
+		const details = request.details;
+		const record = typeof details === "object" && details !== null ? details : {};
+		if (record["skill"] === void 0 && typeof record["sourceId"] === "string") return t("interaction.controller.dataSource", { source: record["sourceId"] });
+	}
 	if (request.capability === "readReference" || request.capability === "readAsset" || request.capability === "writeArtifact" || request.capability === "fetchData" || request.capability === "confirm") {
 		const details = sandboxDetails(request.details);
 		if (details === void 0) return void 0;
@@ -47789,7 +47699,7 @@ function VercelPayloadPreview({ bridge }) {
 * Version of the published `@webskill/chatbot` package, injected at build time.
 * @stable
 */
-const CHATBOT_VERSION = "0.27.0";
+const CHATBOT_VERSION = "0.28.0-next.1";
 
 //#endregion
 export { A2uiSurfaceHost, A2uiSurfaceSnapshotHost, CHATBOT_VERSION, ChatEngine, Chatbot, ChatbotVisionDelegate, CompositeUiBridge, DEFAULT_RENDERER_CAPABILITIES, DEFAULT_RUNTIME_CONFIG_STORAGE_KEY, ErrorCard, InteractionCard, InterruptedBanner, OpenUiSurfaceHost, OpenUiSurfaceSnapshotHost, ResultBlockList, ResultBlocksPro, SkillBadges, SpecInteraction, VercelPayloadPreview, VercelSurfaceHost, VercelSurfaceSnapshotHost, WEB_OFFICE_TEMPLATE_PREFIX, chatbotDictionary, configureA2uiMarkdown, createHttpMessageComponent, createLocalStorageRuntimeConfigStore, createMemoryRuntimeConfigStore, isLlmEntryUsable, pickUsableLlmEntry, probeA2uiAvailability, probeOpenUiAvailability, sandboxExecutorDeps, useT };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webskill/chatbot",
-  "version": "0.27.0",
+  "version": "0.28.0-next.1",
   "license": "MIT",
   "type": "module",
   "exports": {
@@ -38,7 +38,7 @@
     "@a2ui/web_core": "^0.10.5",
     "@lit/context": "^1.1.0",
     "@openuidev/react-lang": "0.2.8",
-    "@webskill/sdk": "^0.30.0",
+    "@webskill/sdk": "^0.31.0-next.1",
     "mermaid": "^12.0.0",
     "react": ">=19.0.0",
     "react-dom": ">=19.0.0",