@webskill/sdk 0.12.0 → 0.14.0

package/dist/{dist-DqcL6jKO.js → dist-CiaDIqkV.js}

@@ -1,4 +1,4 @@
-import { h as WebSkillError } from "./dist-Bev6i6Ip.js";
+import { b as WebSkillError } from "./dist-D5YhlCdY.js";
 import { toJSONSchema, z } from "zod";
 
 //#region ../ui/dist/webskillCatalog-nTgkL9Xe.js
@@ -3481,7 +3481,7 @@ function fromA2uiSpecAction(event) {
 */
 async function loadWebSkillLitCatalog() {
 	try {
-		const { webskillLitCatalog } = await import("./webskillLitCatalog-D_zCqeQF-C9lrvvMr.js");
+		const { webskillLitCatalog } = await import("./webskillLitCatalog-D_zCqeQF-swXsWoAe.js");
 		return webskillLitCatalog();
 	} catch (cause) {
 		throw new WebSkillError("UI_UNAVAILABLE", "The WebSkill A2UI catalog is unavailable; install @a2ui/lit, @a2ui/web_core and lit to render catalog surfaces with A2UI", cause);

package/dist/{dist-Bev6i6Ip.js → dist-D5YhlCdY.js}

@@ -518,6 +518,64 @@ function assertRemoteUrlAllowed(rawUrl, policy = {}) {
 	if (!policy.allowPrivateHosts && isPrivateHost(url.hostname)) throw new WebSkillError("NETWORK_BLOCKED", `Refusing to connect to a private/loopback/link-local address: ${url.hostname}`);
 	return url;
 }
+/** 可作为图片分片外发的 MIME 类型 @experimental */
+const IMAGE_MIME_TYPES = [
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"image/gif"
+];
+/**
+* 可按文本读取的扩展名。accept 白名单与判定白名单共用这一份——
+* 0.5.x 两处不一致，`log`/`yaml`/`yml` 能通过判定却在文件选择器里选不到。
+*/
+const TEXT_EXTENSIONS = [
+	"txt",
+	"md",
+	"csv",
+	"json",
+	"log",
+	"yaml",
+	"yml"
+];
+/** 非文本非图片但仍可整体外发的类型（provider 的 file 分片） @experimental */
+const FILE_MIME_TYPES = ["application/pdf"];
+/**
+* 需要**客户端先抽取成文本**才能外发的类型（FR-23.9 / 0.13.0 FR-12.5）。
+* 不走直通的 `file`：docx / xlsx 发给 provider 会被当成二进制垃圾。
+*/
+const DOCX_MIME = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+/** 文本类附件进模型上下文的字符上限（0.6.0） @experimental */
+const ATTACHMENT_TEXT_LIMIT = 32 * 1024;
+const TEXT_EXTENSION_SET = new Set(TEXT_EXTENSIONS);
+const IMAGE_MIME_SET = new Set(IMAGE_MIME_TYPES);
+const FILE_MIME_SET = new Set(FILE_MIME_TYPES);
+const EXTRACTED_MIME_SET = /* @__PURE__ */ new Set([DOCX_MIME, XLSX_MIME]);
+const EXTRACTED_EXTENSION_SET = /* @__PURE__ */ new Set(["docx", "xlsx"]);
+function extensionOf(fileName) {
+	return fileName.split(".").pop()?.toLowerCase() ?? "";
+}
+/** 分类集中一处，不散落在各 UI 分支里 @experimental */
+function classifyAttachment(contentType, fileName) {
+	const type = contentType.toLowerCase();
+	if (IMAGE_MIME_SET.has(type)) return "image";
+	if (EXTRACTED_MIME_SET.has(type)) return "document-text";
+	if (FILE_MIME_SET.has(type)) return "file";
+	if (type.startsWith("text/") || type === "application/json") return "text";
+	if (type === "" && TEXT_EXTENSION_SET.has(extensionOf(fileName))) return "text";
+	if (type === "" && EXTRACTED_EXTENSION_SET.has(extensionOf(fileName))) return "document-text";
+}
+/**
+* 文本类附件进模型上下文的最终形态。两条入口共用，差别只有出处那一段（0.14.0 D-20-6）。
+* @experimental
+*/
+function formatAttachmentText(input) {
+	const clipped = input.body.length > 32768 ? `${input.body.slice(0, ATTACHMENT_TEXT_LIMIT)}\n[truncated]` : input.body;
+	const bodyOnly = input.kind === "document-text" ? ", body text only" : "";
+	const from = input.origin === "download" ? ", from this device's downloads" : "";
+	return `--- Attachment: ${input.name} (${input.contentType}${bodyOnly}${from}) ---\n${clipped}`;
+}
 const FRONTMATTER_RE = /^---[^\S\r\n]*\r?\n([\s\S]*?)\r?\n---[^\S\r\n]*(?:\r?\n|$)([\s\S]*)$/;
 const invalid = (message, details) => {
 	throw new WebSkillError("SKILL_INVALID_METADATA", message, details);
@@ -1130,4 +1188,4 @@ const xmlRenderer = {
 };
 
 //#endregion
-export { jsonRenderer as A, resolveArchiveLimits as B, computeDigest as C, exportSkills as D, escapeXml as E, parseSkillPackManifest as F, unzipWithLimits as G, signSkill as H, readResponseWithLimit as I, verifySkillSignature as J, validateSkills as K, readSkillSignature as L, messageOf as M, normalizePath as N, isAtomicTempPath as O, parseSkillMarkdown as P, renderAvailableSkillsXml as R, checkSkillRules as S, detectSkillArchiveShapeFromFs as T, signaturePayloadBytes as U, resolveInsideRoot as V, stripArchiveRoot as W, xmlRenderer as Y, assertSafePathSegment as _, MemoryFS as a, buildManifest as b, SKILL_MANIFEST_FILE as c, SKILL_PACK_FILE as d, SKILL_SIGNATURE_FILE as f, assertRemoteUrlAllowed as g, WebSkillError as h, MANIFEST_EXCLUDED_FILES as i, keyIdOf as j, isValidSkillName as k, SKILL_NAME_MAX_LENGTH as l, SkillReader as m, DEFAULT_ARCHIVE_LIMITS as n, SIGNATURE_SCHEMA_VERSION as o, SkillDiscovery as p, verifyManifest as q, FsTrustedKeyStore as r, SKILLS_LOCKFILE as s, ATOMIC_TMP_SUFFIX_PATTERN as t, SKILL_NAME_PATTERN as u, atomicWriteText as v, detectSkillArchiveShape as w, checkDependencyCycles as x, buildCatalog as y, renderCatalogJson as z };
+export { unzipWithLimits as $, computeDigest as A, messageOf as B, assertSafePathSegment as C, checkDependencyCycles as D, buildManifest as E, formatAttachmentText as F, readSkillSignature as G, parseSkillMarkdown as H, isAtomicTempPath as I, resolveArchiveLimits as J, renderAvailableSkillsXml as K, isValidSkillName as L, detectSkillArchiveShapeFromFs as M, escapeXml as N, checkSkillRules as O, exportSkills as P, stripArchiveRoot as Q, jsonRenderer as R, assertRemoteUrlAllowed as S, buildCatalog as T, parseSkillPackManifest as U, normalizePath as V, readResponseWithLimit as W, signSkill as X, resolveInsideRoot as Y, signaturePayloadBytes as Z, SkillDiscovery as _, FILE_MIME_TYPES as a, WebSkillError as b, MANIFEST_EXCLUDED_FILES as c, SKILLS_LOCKFILE as d, validateSkills as et, SKILL_MANIFEST_FILE as f, SKILL_SIGNATURE_FILE as g, SKILL_PACK_FILE as h, DOCX_MIME as i, detectSkillArchiveShape as j, classifyAttachment as k, MemoryFS as l, SKILL_NAME_PATTERN as m, ATTACHMENT_TEXT_LIMIT as n, verifySkillSignature as nt, FsTrustedKeyStore as o, SKILL_NAME_MAX_LENGTH as p, renderCatalogJson as q, DEFAULT_ARCHIVE_LIMITS as r, xmlRenderer as rt, IMAGE_MIME_TYPES as s, ATOMIC_TMP_SUFFIX_PATTERN as t, verifyManifest as tt, SIGNATURE_SCHEMA_VERSION as u, SkillReader as v, atomicWriteText as w, XLSX_MIME as x, TEXT_EXTENSIONS as y, keyIdOf as z };

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { R as FileSystemProvider, S as UiBridge, U as Page, W as PageQuery, f as LlmMessage, it as SkillCatalogEntry, l as LlmClient, ot as SkillDocument, ut as SkillManagerPort } from "./types-DLctJep_-B5G4uk2u.js";
-import { Nt as RuntimeRun, Pn as WebSkillRuntime, Qt as SkillOutcomeReporter, Y as IntegrityVerdict, Zt as SkillIntegrityGuard, nn as SkillStateGuard } from "./index-C9pzXLKy.js";
-import { _ as SkillState, a as AuditLog, b as SkillVersionStore, c as CandidateFile, d as CandidateSkill, f as CandidateSource, g as SKILL_VERSION_PAGE_SIZE, h as CompositeApprovalPolicy, i as AuditEvent, l as CandidatePage, m as CandidateStore, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStatus, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateRisk, v as SkillVersion, x as candidateToCatalogEntry, y as SkillVersionPage } from "./skillVersionStore-D-qHk9ZE-DheTIwAB.js";
+import { S as UiBridge, U as FileSystemProvider, X as PageQuery, Y as Page, f as LlmMessage, ft as SkillDocument, gt as SkillManagerPort, l as LlmClient, ut as SkillCatalogEntry } from "./types-C3V6lAeO-BgeOvc1Y.js";
+import { $t as SkillIntegrityGuard, Ft as RuntimeRun, Rn as WebSkillRuntime, X as IntegrityVerdict, en as SkillOutcomeReporter, in as SkillStateGuard } from "./index-CWoKOFBP.js";
+import { _ as SkillState, a as AuditLog, b as SkillVersionStore, c as CandidateFile, d as CandidateSkill, f as CandidateSource, g as SKILL_VERSION_PAGE_SIZE, h as CompositeApprovalPolicy, i as AuditEvent, l as CandidatePage, m as CandidateStore, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStatus, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateRisk, v as SkillVersion, x as candidateToCatalogEntry, y as SkillVersionPage } from "./skillVersionStore-D-qHk9ZE-C0OFDTQY.js";
 //#region ../governance/dist/index.d.ts
 //#region src/candidate/candidateNormalizer.d.ts
 /** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */

package/dist/governance.js

@@ -1,5 +1,5 @@
-import { M as messageOf, _ as assertSafePathSegment, h as WebSkillError, k as isValidSkillName, v as atomicWriteText } from "./dist-Bev6i6Ip.js";
-import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
+import { B as messageOf, C as assertSafePathSegment, L as isValidSkillName, b as WebSkillError, w as atomicWriteText } from "./dist-D5YhlCdY.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-BxtUkrgV.js";
 import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-FllCrX-Z-DNDeHWoG.js";
 
 //#region ../governance/dist/index.js

package/dist/{index-C9pzXLKy.d.ts → index-CWoKOFBP.d.ts}

@@ -1,4 +1,4 @@
-import { B as JsonSchema, G as RemoteUrlPolicy, I as DiscoveryResult, O as UiSurfaceActionRequest, R as FileSystemProvider, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, W as PageQuery, _ as LlmToolSpec, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, d as LlmContentPart, dt as SkillManifest, f as LlmMessage, g as LlmToolCall, h as LlmTokenUsage, i as FormField, it as SkillCatalogEntry, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, r as ChartSpec, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, u as LlmCompleteInput, v as MemoryStore, w as UiSpecDrafts, y as RenderBlock } from "./types-DLctJep_-B5G4uk2u.js";
+import { B as DiscoveryResult, Dt as UiSpecNode, K as JsonSchema, Mt as WebSkillErrorCode, O as UiSurfaceActionRequest, S as UiBridge, T as UiSpecEvent, U as FileSystemProvider, X as PageQuery, Y as Page, Z as RemoteUrlPolicy, _ as LlmToolSpec, _t as SkillManifest, b as RenderResultRequest, d as LlmContentPart, dt as SkillDiscovery, f as LlmMessage, ft as SkillDocument, g as LlmToolCall, h as LlmTokenUsage, i as FormField, kt as ValidationReport, l as LlmClient, lt as SkillCatalog, m as LlmStreamEvent, n as ArtifactStore, o as InteractionPolicy, p as LlmResponse, pt as SkillInstallSource, r as ChartSpec, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, ut as SkillCatalogEntry, v as MemoryStore, w as UiSpecDrafts, y as RenderBlock } from "./types-C3V6lAeO-BgeOvc1Y.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/parts.d.ts
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
@@ -61,6 +61,25 @@ declare const DEFAULT_MAX_DOCUMENT_TEXT_BYTES = 512000;
  * 结构化数据不是文档，量级差一个数量级；超出**只拒不截**——截断的 JSON 解不出来。
  */
 declare const DEFAULT_MAX_DATA_SOURCE_BYTES = 1024000;
+/**
+ * 宿主声明的一个数据源的**可公开部分**（0.14.0 分册 19）。
+ *
+ * `target` 不在这里，且不得被加进来：这条通路的终点是模型上下文，
+ * 而「地址不由脚本提供」正是 0.11.0 分册 16 §2.2 授权面的全部依据。
+ * @experimental
+ */
+interface DataSourceInfo {
+  id: string;
+  description: string;
+  /**
+   * 非宿主声明时的出处（0.14.0 分册 21）。缺省即宿主声明，不带标注。
+   *
+   * 有值意味着 `description` **来自页面**，模型看到的清单里必须随之出现「可能不准确」的标注，
+   * 否则一段由站点控制的文本会以宿主口吻进上下文。
+   * @experimental
+   */
+  provenance?: 'page-declared' | 'tool-projection';
+}
 /**
  * 工具结果的内容分片（0.6.0 §1.1）。
  * `image` 分片不参与 `toolResultMaxBytes` 截断——那份预算是给文本的，
@@ -557,7 +576,13 @@ type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-fail
 /** 一轮模型调用产出的一段思考正文（data.text；每轮至多一条，UI-UX5 #32） */
 'llm.thinking' |
 /** 一轮模型调用的 token 用量（data.inputTokens/outputTokens；上游不回报则无此事件，UI-UX5 #47） */
-'llm.usage' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'ui.degraded' | 'todo.created' | 'todo.updated' | 'todo.cleared' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
+'llm.usage' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' |
+/**
+ * 按需披露的工具本轮未被任何已激活技能点名，因此没写进 tool spec（分册 19）。
+ * **不是拒绝**：它照样调得动。与 `tool.denied` 分开是因为排查方向相反——
+ * `denied` 指向「技能清单写错了」，`withheld` 指向「该激活的技能还没激活」。
+ */
+'tool.withheld' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'ui.degraded' | 'todo.created' | 'todo.updated' | 'todo.cleared' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
 interface TraceEvent {
   id: string;
   runId: string;
@@ -1313,19 +1338,30 @@ declare const READ_LINKED_DOCUMENT_TOOL_NAME = "read_linked_document";
 declare const SUPPORTED_DOCUMENT_MIME: {
   readonly pdf: "application/pdf";
   readonly docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+  readonly xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
 };
 /** docx 抽取实现由宿主注入（`DOMParser` 是浏览器 API，Node 没有；备案 D55） */
 type DocxTextExtractor = (bytes: Uint8Array) => Promise<string>;
+/** xlsx 抽取实现由宿主注入（0.13.0 FR-12.5；限制与 docx 相同） */
+type XlsxTextExtractor = (bytes: Uint8Array) => Promise<string>;
+/**
+ * PDF → 文本（0.13.0 FR-22.1）。**只用于直传被端点拒后的回退**，
+ * 不改变 PDF 默认直传的路径。SDK 不带实现：正确取到文本层要处理
+ * xref / 对象流 / FlateDecode / ToUnicode CMap，自写即 AGENTS.md §6 禁止的手写协议解析器。
+ */
+type PdfTextExtractor = (bytes: Uint8Array) => Promise<string>;
 /** 引擎侧固定流程（§2.3）用到的错误文案，集中一处便于判据引用 */
 declare const UNSUPPORTED_DOCUMENT_MESSAGE: string;
 /**
  * 内建工具：读页面链接指向的文档。
  *
- * **始终注册**（只要宿主装配了 reader）：docx 与纯文本这条路对所有模型成立。
+ * **始终注册**（只要宿主装配了 reader）：docx / xlsx 与纯文本这条路对所有模型成立。
  * PDF 目标在模型不支持文档时**取数后拒绝**，而不是入口就拦 ——
  * 入口拦会误伤 docx，它抽成文本后根本不需要文档能力。
  */
 declare const READ_LINKED_DOCUMENT_TOOL: ToolDefinition;
+/** 二进制转 base64；`btoa` 只吃 latin1，必须逐字节喂而不是先 decode 成字符串 */
+declare function toBase64(bytes: Uint8Array): string;
 //#endregion
 //#region src/engine/toolStep.d.ts
 /**
@@ -1392,6 +1428,22 @@ declare class FsToolStepStore implements ToolStepStore {
 }
 //#endregion
 //#region src/engine/external.d.ts
+/**
+ * 工具披露层级（分册 19）。`on-demand` 只影响工具写不写进 LLM tool spec，
+ * **不影响可执行性**——要限制访问的宿主应当使用禁用（各来源自己的 enabled 通道）。
+ */
+type ToolDisclosure = 'always' | 'on-demand';
+/**
+ * 一次工具调用的调用侧上下文（0.14.0 分册 22 FR-22.5）。
+ *
+ * 工具源不实现这个参数即行为不变：TypeScript 里参数更少的函数可以
+ * 赋给参数更多的函数类型。它存在的唯一理由是「游标跨 run 一律失效」——
+ * 宝宝在游标里编时间戳只能做到「基本失效」，做不到「一律失效」。
+ * @experimental
+ */
+interface ToolCallContext {
+  readonly runId: string;
+}
 /**
  * 外部工具来源（runtime 扩展点，mcp 包实现并插入）。
  * LLM 可见名为已消毒名（如 endpoint__greet / mcp__search）。
@@ -1399,6 +1451,13 @@ declare class FsToolStepStore implements ToolStepStore {
 interface ExternalToolSource {
   readonly kind: string;
   listToolSpecs(): Promise<LlmToolSpec[]>;
+  /**
+   * 该工具的披露层级（分册 19 / FR-19.2）。**不实现 ⇒ 该源全部工具按 `always`**（存量来源行为不变）。
+   *
+   * 每轮实时求值，不写进 `LlmToolSpec` 字段：spec 只在 run 起点与 resume 各收集一次，
+   * 凝固进 spec 会让宿主中途改配置整轮不生效。
+   */
+  disclosure?(llmToolName: string): ToolDisclosure;
   /**
    * 可选：向 run 的 system 消息追加一段说明（组件 catalog 之类的大段规格）。
    *
@@ -1408,7 +1467,7 @@ interface ExternalToolSource {
    */
   systemPrompt?(): Promise<string | undefined>;
   canHandle(llmToolName: string): boolean;
-  call(llmToolName: string, args: Record<string, unknown>): Promise<ToolResult>;
+  call(llmToolName: string, args: Record<string, unknown>, context?: ToolCallContext): Promise<ToolResult>;
   /**
    * 参数留存的信任判定（分册 30 / FR-30.3）。**不实现 ⇒ 该源全部工具按 untrusted 处理**（参数全脱敏）。
    *
@@ -1554,6 +1613,13 @@ interface AgentLoopDeps {
    * 所以这里只收一个函数，不收策略对象——否则依赖方向反了。
    */
   fetchData?: (sourceId: string, params?: Record<string, unknown>) => Promise<unknown>;
+  /**
+   * 宿主声明的数据源清单（0.14.0 分册 19）：技能声明了本宿主没有的源时，激活期据此说明缺什么。
+   * 只含可公开字段——`target` 进不来，见 `DataSourceInfo`。
+   *
+   * 可传函数：宿主的源清单随用户配置变动时，惰性形式免去为一次配置改动重建引擎。
+   */
+  dataSources?: readonly DataSourceInfo[] | (() => readonly DataSourceInfo[]);
   /**
    * 页面链接文档的读取实现（分册 22）。不注入即 `read_linked_document` 不注册——
    * 模型连这个工具的存在都看不到，而不是看得到再被拒。
@@ -1561,6 +1627,12 @@ interface AgentLoopDeps {
   linkedDocuments?: LinkedDocumentReader;
   /** docx → 文本；`DOMParser` 是浏览器 API，因此由宿主注入（Node 侧无此能力，备案 D55） */
   docxExtractor?: DocxTextExtractor;
+  xlsxExtractor?: XlsxTextExtractor;
+  /**
+   * PDF → 文本（FR-22.1）。**只在直传被端点拒后用作回退**，不改变 PDF 默认直传。
+   * 不注入即没有回退能力，失败照报——与 docx / xlsx「不注入即没这个能力」同款。
+   */
+  pdfExtractor?: PdfTextExtractor;
   /** 文档读取留痕出口（FR-22.6）；不注入即不留痕，装配方要自己承担这个选择 */
   documentAudit?: {
     append(event: {
@@ -1734,6 +1806,11 @@ interface WebSkillRuntimeDeps {
    * 通常由 `@webskill/agent` 的 `DataSourcePolicy.fetchData` 绑定过来。
    */
   fetchData?: (sourceId: string, params?: Record<string, unknown>) => Promise<unknown>;
+  /**
+   * 宿主声明的数据源清单（0.14.0 分册 19）；用 `DataSourcePolicy.publicSources` 取，不要自己传 `sources`。
+   * 不注入即「宿主没说」，引擎不会断言某个源不存在。
+   */
+  dataSources?: readonly DataSourceInfo[] | (() => readonly DataSourceInfo[]);
   /**
    * 读页面链接指向的文档（分册 22）；不注入即 `read_linked_document` 不注册。
    * 实现住在 `@webskill/browser`（docx 抽取要 `DOMParser`），由宿主装配。
@@ -1741,6 +1818,10 @@ interface WebSkillRuntimeDeps {
   linkedDocuments?: LinkedDocumentReader;
   /** docx → 文本；不注入即 Word 文档明确报「本环境不支持」（FR-23.8） */
   docxExtractor?: DocxTextExtractor;
+  /** xlsx → 文本；不注入即 Excel 工作簿明确报「本环境不支持」（FR-12.5） */
+  xlsxExtractor?: XlsxTextExtractor;
+  /** PDF → 文本；**只在直传被端点拒后做回退**，不注入即没有回退能力（FR-22.1） */
+  pdfExtractor?: PdfTextExtractor;
   /** 文档读取留痕出口（FR-22.6） */
   documentAudit?: {
     append(event: {
@@ -2111,4 +2192,4 @@ interface RedactedArgs {
  */
 declare function redactToolStepArgs(args: Record<string, unknown>, schema: JsonSchema | undefined, trust: ToolStepTrust): RedactedArgs;
 //#endregion
-export { LifecycleHook as $, isUnsupportedRunSnapshot as $n, SkillRouter as $t, DocxTextExtractor as A, UserProfileImportDiff as An, validateUiSpecNode as Ar, RunTraceSummary as At, FsRunTraceStore as B, createScriptContext as Bn, ScriptExecutionContext as Bt, CapabilityApproval as C, USER_PROFILE_NO_INVENTION_RULE as Cn, summarizeRunUsage as Cr, RunSnapshotStore as Ct, DEFAULT_MAX_DOCUMENT_BYTES as D, UserProfile as Dn, toRecordDigests as Dr, RunTraceFilter as Dt, DEFAULT_MAX_DATA_SOURCE_BYTES as E, UnsupportedRunSnapshot as En, toLlmToolSpec as Er, RunTraceFile as Et, ExternalToolSource as F, WebSkillRuntimeDeps as Fn, RuntimeSessionHandle as Ft, GoogleGenAiClientConfig as G, extractTodoTraceEvents as Gn, SerializingMemoryStore as Gt, FsToolStepStore as H, diffUserProfile as Hn, SealOptions as Ht, FS_SESSION_PAGE_SIZE as I, appendBehaviorRecords as In, SENSITIVE_ANNOTATION as It, InstalledSkillManifest as J, formatSkillScriptManifest as Jn, SessionRecord as Jt, HookRunner as K, extractUiSpecEvents as Kn, SessionListPage as Kt, FsArtifactStore as L, applyUserProfileImport as Ln, SESSION_SCHEMA_VERSION as Lt, EventBus as M, VercelToolSpec as Mn, RuntimePhase as Mt, ExecuteLifecycleData as N, WebSkillApi as Nn, RuntimeRun as Nt, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as O, UserProfileEntry as On, toVercelToolSpecs as Or, RunTraceMetrics as Ot, ExternalSkillProvider as P, WebSkillRuntime as Pn, RuntimeSession as Pt, LifecycleEventInit as Q, isNetworkAllowed as Qn, SkillOutcomeReporter as Qt, FsMemoryStore as R, bridgeError as Rn, SUPPORTED_DOCUMENT_MIME as Rt, BridgeResponse as S, USER_PROFILE_KEY as Sn, sealToolCallPairs as Sr, RunSnapshotListEntry as St, DEFAULT_LOOP_LIMITS as T, USER_PROFILE_REFINE_PROMPT as Tn, textParts as Tr, RunToolCall as Tt, FullDisclosureRouter as U, exportUserProfile as Un, SealRecord as Ut, FsSessionStore as V, createWebSkillApi as Vn, ScriptExecutor as Vt, GoogleGenAiClient as W, extractChartSpec as Wn, SealResult as Wt, InteractLifecycleData as X, fromVercelStreamPart as Xn, SkillFailureReport as Xt, IntegrityVerdict as Y, fromVercelResult as Yn, SessionStore as Yt, LifecycleEvent as Z, interruptedToolResult as Zn, SkillIntegrityGuard as Zt, BehaviorRecordKind as _, TraceEvent as _n, resolveToolName as _r, RouteLifecycleData as _t, ASK_USER_TOOL as a, TerminalLifecycleData as an, normalizeErrorCode as ar, OpenAiCompatibleClient as at, BridgeCapability as b, UNSUPPORTED_DOCUMENT_MESSAGE as bn, schemaToForm as br, RunResult as bt, AgentLoop as c, ToolContent as cn, parseBridgeRequest as cr, READ_LINKED_DOCUMENT_TOOL as ct, AnthropicClient as d, ToolResult as dn, readBehaviorRecords as dr, READ_SKILL_FILE_TOOL as dt, SkillScriptDescriptor as en, listSkillScripts as er, LifecycleHookContext as et, AnthropicClientConfig as f, ToolStepReader as fn, readProfileEntries as fr, READ_SKILL_FILE_TOOL_NAME as ft, BehaviorRecord as g, TraceClock as gn, renderUserProfileContext as gr, RefineUserProfileInput as gt, BEHAVIOR_RECORDS_KEY as h, ToolStepTrust as hn, refineUserProfile as hr, RedactedArgs as ht, ASK_USER_MAX_FIELDS as i, TEXT_BUDGETED_CONTENT_TYPES as in, networkUrlHost as ir, NetworkPolicy as it, EMPTY_USER_PROFILE as j, UserProfileLimits as jn, RunUsageSummary as jt, DEFAULT_USER_PROFILE_LIMITS as k, UserProfileExport as kn, validateUiSpecEvent as kr, RunTraceStore as kt, AgentLoopConfig as l, ToolDefinition as ln, parseUserProfileExport as lr, READ_LINKED_DOCUMENT_TOOL_NAME as lt, ApprovalScope as m, ToolStepStore as mn, redactToolStepArgs as mr, RUN_TRACE_SCHEMA_VERSION as mt, ASK_USER_FIELD_TYPES as n, SkillStateGuard as nn, mergeProfileEntries as nr, LinkedDocumentReader as nt, ASK_USER_TOOL_NAME as o, TextualToolContent as on, normalizeToolContent as or, OpenAiCompatibleClientConfig as ot, ApprovalDecision as p, ToolStepRecord as pn, readUserProfile as pr, RUN_SNAPSHOT_SCHEMA_VERSION as pt, HookRunnerOptions as q, findUnpairedToolCalls as qn, SessionMeta as qt, ASK_USER_INPUT_SCHEMA as r, SkillSuccessReport as rn, networkPolicyLibSource as rr, MAX_TOOL_STEP_ARG_BYTES as rt, ActivateLifecycleData as s, TodoTraceEvent as sn, normalizeToolError as sr, ProgressiveRouter as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, SkillScriptSchemaSource as tn, mergeCatalogEntries as tr, LifecycleListener as tt, AgentLoopDeps as u, ToolResolution as un, partsToText as ur, READ_SKILL_FILE_INPUT_SCHEMA as ut, BehaviorScene as v, TraceEventType as vn, sampleBehaviorRecords as vr, RouteResult as vt, CapabilityMode as w, USER_PROFILE_PROMPT_HEADER as wn, summarizeToolCalls as wr, RunTerminationReason as wt, BridgeRequest as x, USER_PROFILE_EXPORT_VERSION as xn, scriptToolName as xr, RunSnapshot as xt, BridgeCapabilities as y, TraceRecorder as yn, schemaSourceLabel as yr, RunLimitErrorDetails as yt, FsRunSnapshotStore as z, buildRenderResult as zn, SchemaInferer as zt };
+export { LifecycleEventInit as $, formatSkillScriptManifest as $n, SkillIntegrityGuard as $t, DataSourceInfo as A, UnsupportedRunSnapshot as An, textParts as Ar, RunTraceMetrics as At, FsRunSnapshotStore as B, XlsxTextExtractor as Bn, SUPPORTED_DOCUMENT_MIME as Bt, CapabilityApproval as C, TraceRecorder as Cn, sampleBehaviorRecords as Cr, RunSnapshot as Ct, DEFAULT_MAX_DOCUMENT_BYTES as D, USER_PROFILE_NO_INVENTION_RULE as Dn, sealToolCallPairs as Dr, RunToolCall as Dt, DEFAULT_MAX_DATA_SOURCE_BYTES as E, USER_PROFILE_KEY as En, scriptToolName as Er, RunTerminationReason as Et, ExternalSkillProvider as F, UserProfileLimits as Fn, validateUiSpecEvent as Fr, RuntimeRun as Ft, GoogleGenAiClient as G, createScriptContext as Gn, SealRecord as Gt, FsSessionStore as H, applyUserProfileImport as Hn, ScriptExecutionContext as Ht, ExternalToolSource as I, VercelToolSpec as In, validateUiSpecNode as Ir, RuntimeSession as It, HookRunnerOptions as J, exportUserProfile as Jn, SessionListPage as Jt, GoogleGenAiClientConfig as K, createWebSkillApi as Kn, SealResult as Kt, FS_SESSION_PAGE_SIZE as L, WebSkillApi as Ln, RuntimeSessionHandle as Lt, EMPTY_USER_PROFILE as M, UserProfileEntry as Mn, toLlmToolSpec as Mr, RunTraceSummary as Mt, EventBus as N, UserProfileExport as Nn, toRecordDigests as Nr, RunUsageSummary as Nt, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as O, USER_PROFILE_PROMPT_HEADER as On, summarizeRunUsage as Or, RunTraceFile as Ot, ExecuteLifecycleData as P, UserProfileImportDiff as Pn, toVercelToolSpecs as Pr, RuntimePhase as Pt, LifecycleEvent as Q, findUnpairedToolCalls as Qn, SkillFailureReport as Qt, FsArtifactStore as R, WebSkillRuntime as Rn, SENSITIVE_ANNOTATION as Rt, BridgeResponse as S, TraceEventType as Sn, resolveToolName as Sr, RunResult as St, DEFAULT_LOOP_LIMITS as T, USER_PROFILE_EXPORT_VERSION as Tn, schemaToForm as Tr, RunSnapshotStore as Tt, FsToolStepStore as U, bridgeError as Un, ScriptExecutor as Ut, FsRunTraceStore as V, appendBehaviorRecords as Vn, SchemaInferer as Vt, FullDisclosureRouter as W, buildRenderResult as Wn, SealOptions as Wt, IntegrityVerdict as X, extractTodoTraceEvents as Xn, SessionRecord as Xt, InstalledSkillManifest as Y, extractChartSpec as Yn, SessionMeta as Yt, InteractLifecycleData as Z, extractUiSpecEvents as Zn, SessionStore as Zt, BehaviorRecordKind as _, ToolStepRecord as _n, readProfileEntries as _r, RedactedArgs as _t, ASK_USER_TOOL as a, SkillSuccessReport as an, listSkillScripts as ar, NetworkPolicy as at, BridgeCapability as b, TraceClock as bn, refineUserProfile as br, RouteResult as bt, AgentLoop as c, TextualToolContent as cn, networkPolicyLibSource as cr, PdfTextExtractor as ct, AnthropicClient as d, ToolContent as dn, normalizeToolContent as dr, READ_LINKED_DOCUMENT_TOOL_NAME as dt, SkillOutcomeReporter as en, fromVercelResult as er, LifecycleHook as et, AnthropicClientConfig as f, ToolDefinition as fn, normalizeToolError as fr, READ_SKILL_FILE_INPUT_SCHEMA as ft, BehaviorRecord as g, ToolStepReader as gn, readBehaviorRecords as gr, RUN_TRACE_SCHEMA_VERSION as gt, BEHAVIOR_RECORDS_KEY as h, ToolResult as hn, partsToText as hr, RUN_SNAPSHOT_SCHEMA_VERSION as ht, ASK_USER_MAX_FIELDS as i, SkillStateGuard as in, isUnsupportedRunSnapshot as ir, MAX_TOOL_STEP_ARG_BYTES as it, DocxTextExtractor as j, UserProfile as jn, toBase64 as jr, RunTraceStore as jt, DEFAULT_USER_PROFILE_LIMITS as k, USER_PROFILE_REFINE_PROMPT as kn, summarizeToolCalls as kr, RunTraceFilter as kt, AgentLoopConfig as l, TodoTraceEvent as ln, networkUrlHost as lr, ProgressiveRouter as lt, ApprovalScope as m, ToolResolution as mn, parseUserProfileExport as mr, READ_SKILL_FILE_TOOL_NAME as mt, ASK_USER_FIELD_TYPES as n, SkillScriptDescriptor as nn, interruptedToolResult as nr, LifecycleListener as nt, ASK_USER_TOOL_NAME as o, TEXT_BUDGETED_CONTENT_TYPES as on, mergeCatalogEntries as or, OpenAiCompatibleClient as ot, ApprovalDecision as p, ToolDisclosure as pn, parseBridgeRequest as pr, READ_SKILL_FILE_TOOL as pt, HookRunner as q, diffUserProfile as qn, SerializingMemoryStore as qt, ASK_USER_INPUT_SCHEMA as r, SkillScriptSchemaSource as rn, isNetworkAllowed as rr, LinkedDocumentReader as rt, ActivateLifecycleData as s, TerminalLifecycleData as sn, mergeProfileEntries as sr, OpenAiCompatibleClientConfig as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, SkillRouter as tn, fromVercelStreamPart as tr, LifecycleHookContext as tt, AgentLoopDeps as u, ToolCallContext as un, normalizeErrorCode as ur, READ_LINKED_DOCUMENT_TOOL as ut, BehaviorScene as v, ToolStepStore as vn, readUserProfile as vr, RefineUserProfileInput as vt, CapabilityMode as w, UNSUPPORTED_DOCUMENT_MESSAGE as wn, schemaSourceLabel as wr, RunSnapshotListEntry as wt, BridgeRequest as x, TraceEvent as xn, renderUserProfileContext as xr, RunLimitErrorDetails as xt, BridgeCapabilities as y, ToolStepTrust as yn, redactToolStepArgs as yr, RouteLifecycleData as yt, FsMemoryStore as z, WebSkillRuntimeDeps as zn, SESSION_SCHEMA_VERSION as zt };