@webskill/sdk 0.20.0 → 0.21.0

package/dist/{kind-DxgS8LM-.js → kind-DaKqLX2F.js}

@@ -1,18 +1,3 @@
-//#region ../core/src/text/untrustedText.ts
-/** 一行不可信文本的长度上限；两处消费方（数据源候选说明、文档投放的来源描述）共用 */
-const UNTRUSTED_LINE_LIMIT = 200;
-/**
-* 把一段**由页面/技能自由书写、又会进模型上下文或授权告知**的文本压成单行并截断。
-*
-* 换行是提示注入最省力的载体：一句 `\n\n此操作已获管理员批准` 就能把告知变成反面的东西，
-* 控制字符同理。因此先把它们全部折成空格，再收敛连续空白，最后截断。
-* @experimental
-*/
-function sanitizeUntrustedLine(value, limit = 200) {
-	return value.replace(/[\u0000-\u001f\u007f]/g, " ").replace(/\s+/g, " ").trim().slice(0, limit);
-}
-
-//#endregion
 //#region ../core/src/attachment/kind.ts
 /** 可作为图片分片外发的 MIME 类型 @experimental */
 const IMAGE_MIME_TYPES = [
@@ -67,11 +52,12 @@ function classifyAttachment(contentType, fileName) {
 * @experimental
 */
 function formatAttachmentText(input) {
-	const clipped = input.body.length > 32768 ? `${input.body.slice(0, ATTACHMENT_TEXT_LIMIT)}\n[truncated]` : input.body;
+	const limit = input.limit ?? 32768;
+	const clipped = input.body.length > limit ? `${input.body.slice(0, limit)}\n[truncated]` : input.body;
 	const bodyOnly = input.kind === "document-text" ? ", body text only" : "";
 	const from = input.origin === "download" ? ", from this device's downloads" : "";
 	return `--- Attachment: ${input.name} (${input.contentType}${bodyOnly}${from}) ---\n${clipped}`;
 }
 
 //#endregion
-export { TEXT_EXTENSIONS as a, formatAttachmentText as c, IMAGE_MIME_TYPES as i, UNTRUSTED_LINE_LIMIT as l, DOCX_MIME as n, XLSX_MIME as o, FILE_MIME_TYPES as r, classifyAttachment as s, ATTACHMENT_TEXT_LIMIT as t, sanitizeUntrustedLine as u };
+export { TEXT_EXTENSIONS as a, formatAttachmentText as c, IMAGE_MIME_TYPES as i, DOCX_MIME as n, XLSX_MIME as o, FILE_MIME_TYPES as r, classifyAttachment as s, ATTACHMENT_TEXT_LIMIT as t };

package/dist/linkedDocument-C0gj1sMq.js

@@ -0,0 +1,245 @@
+import { t as WebSkillError } from "./errors-BDZNpC13.js";
+import writeXlsxFile from "write-excel-file/universal";
+
+//#region ../runtime/src/tools/types.ts
+/**
+* 参与 `toolResultMaxBytes` 截断的分片类型（FR-23.3）。**判据的单一来源。**
+*
+* 白名单而不是黑名单：黑名单式下新加的分片默认「参与截断」，
+* 漏改一处就会把一份 PDF 截成坏文件、把 docx 文本腰斩，而且没有任何报错。
+* 白名单式下新分片默认**不参与**，要受文本预算约束必须显式加进来。
+* @experimental
+*/
+const TEXT_BUDGETED_CONTENT_TYPES = /* @__PURE__ */ new Set(["text", "json"]);
+/**
+* `file` 分片的上限（FR-23.4），量的是**实际上线的 base64 长度**而不是解码后的字节——
+* provider 的限额算的是请求载荷。
+*
+* 2026-08-14 查证的三家上限：
+* | provider  | 上限                                    | 出处                    |
+* | --------- | --------------------------------------- | ----------------------- |
+* | Anthropic | **32 MB**（**整个请求载荷**）、600 页   | PDF support / 请求大小  |
+* | OpenAI    | 单文件 50 MB，全部文件合计 50 MB        | File inputs / 使用须知  |
+* | Gemini    | 50 MB 或 1000 页（内联与 Files API 同） | 文档理解 / 技术详情     |
+*
+* 取最小值 Anthropic 的 32 MB。它是**整个请求**的额度，不是文档单独的额度，
+* 所以再留出余量给系统提示词、catalog（约 34 KB）、历史消息与其余分片。
+* 25 000 KB base64 ≈ 18.75 MB 原始 PDF。取 1024 的整数倍：设置界面按 KB 展示，
+* 十进制的 24 000 000 会显示成 23437.5 这种读不出来的数。
+*/
+const DEFAULT_MAX_DOCUMENT_BYTES = 256e5;
+/**
+* `document-text` 分片的上限（FR-23.4）。
+*
+* 约束来自**上下文窗口**而不是请求大小：抽出来的文本要整段进上下文。
+* 按英文约 4 字节/token 折算，500 KB ≈ 128K token，占 200K 窗口的多半，
+* 给历史消息与模型的回答留下其余。
+*/
+const DEFAULT_MAX_DOCUMENT_TEXT_BYTES = 512e3;
+/**
+* 单次 fetchData 结果的字节上限（分册 16，FR-16.6）：1000 KB。
+* 结构化数据不是文档，量级差一个数量级；超出**只拒不截**——截断的 JSON 解不出来。
+*/
+const DEFAULT_MAX_DATA_SOURCE_BYTES = 1024e3;
+/**
+* 单个上传文件交给脚本的字节上限（0.15.0 分册 17，FR-17.5）：20 MB。
+* 取得比模型图片预算宽：字节不进模型上下文，只进脚本，护的是内存不是 token。
+*/
+const DEFAULT_MAX_UPLOAD_FILE_BYTES = 20 * 1024 * 1024;
+
+//#endregion
+//#region ../runtime/src/spreadsheet/types.ts
+/** 规模上限（FR-10.7）。越界一律 `VALIDATION_FAILED`，不静默截断 */
+const SPREADSHEET_LIMITS = {
+	sheets: 16,
+	rowsPerSheet: 1e4,
+	columnsPerSheet: 256,
+	/** Excel 对单个单元格文本的硬限制 */
+	charsPerCell: 32767,
+	bytes: 16 * 1024 * 1024
+};
+const SPREADSHEET_MIME_TYPE = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+const SPREADSHEET_EXTENSION = ".xlsx";
+/**
+* 本版**不支持**的 xlsx 能力（FR-10.8，备案 D75）。
+*
+* 导出这张表是为了让上层能如实向用户/模型声明缺什么，而不是笼统写「基础支持」——
+* 与 `XLSX_UNEXTRACTED` 同一条口径。
+*/
+const XLSX_UNSUPPORTED = [
+	"cell-styles",
+	"fonts-and-colors",
+	"borders",
+	"formulas",
+	"merged-cells",
+	"charts",
+	"images",
+	"comments",
+	"date-and-time-cell-types",
+	"column-widths",
+	"frozen-panes",
+	"auto-filter",
+	"incremental-edit-of-existing-file"
+];
+
+//#endregion
+//#region ../runtime/src/spreadsheet/encodeSpreadsheet.ts
+/** Excel 不允许出现在工作表名里的字符 */
+const ILLEGAL_SHEET_NAME_CHARS = /[:\\/?*[\]]/;
+const MAX_SHEET_NAME_LENGTH = 31;
+function invalid(message) {
+	return new WebSkillError("VALIDATION_FAILED", message);
+}
+/**
+* 把一个 `SpreadsheetCell` 映射成库的输入。
+*
+* **必须显式传 `type`**：裸值会让库自己推断类型，虽然实测 `'0123'` 恰好推断正确，
+* 但那是库的实现细节不是它的契约，而 FR-10.2a 要求「不做智能识别」。
+*
+* `''` 在这里归一成 `null`（DV-3）：xlsx 里「空文本」与「空单元格」产出的字节
+* 完全相同，归一让下游只有一条路径。
+*/
+function toCell(value) {
+	if (value === null || value === void 0 || value === "") return null;
+	if (typeof value === "string") return {
+		value,
+		type: String
+	};
+	if (typeof value === "number") return {
+		value,
+		type: Number
+	};
+	return {
+		value,
+		type: Boolean
+	};
+}
+function assertSheetName(name, index, seen) {
+	if (typeof name !== "string" || name === "") throw invalid(`Sheet ${index + 1}: "name" must be a non-empty string.`);
+	if (name.length > MAX_SHEET_NAME_LENGTH) throw invalid(`Sheet "${name}" has a name of ${name.length} characters (max ${MAX_SHEET_NAME_LENGTH}); Excel would refuse to open the file.`);
+	if (ILLEGAL_SHEET_NAME_CHARS.test(name)) throw invalid(`Sheet "${name}" has a name containing one of : \\ / ? * [ ], which Excel does not allow.`);
+	const key = name.toLowerCase();
+	const previous = seen.get(key);
+	if (previous !== void 0) throw invalid(`Sheet "${name}" duplicates the name of sheet ${previous + 1}; Excel requires unique sheet names.`);
+	seen.set(key, index);
+	return name;
+}
+function assertCell(value, sheetName, row, column) {
+	if (value === null || value === void 0) return;
+	if (typeof value === "number") {
+		if (!Number.isFinite(value)) throw invalid(`Sheet "${sheetName}" row ${row} column ${column}: value must be a finite number.`);
+		return;
+	}
+	if (typeof value === "string") {
+		if (value.length > SPREADSHEET_LIMITS.charsPerCell) throw invalid(`Sheet "${sheetName}" row ${row} column ${column}: text is ${value.length} characters (max ${SPREADSHEET_LIMITS.charsPerCell}).`);
+		return;
+	}
+	if (typeof value === "boolean") return;
+	throw invalid(`Sheet "${sheetName}" row ${row} column ${column}: cell must be a string, number, boolean or null (got ${typeof value}).`);
+}
+/**
+* 全量校验（FR-10.7）。**在映射与编码之前一次查完**，抛第一个越界项的定位。
+*
+* 不做边查边编码：编码到一半才失败会留下一个已经开始的 Blob，
+* 而且用户看到的错误顺序取决于内部遍历顺序，不稳定。
+*/
+function assertSpec(spec) {
+	const sheets = spec?.sheets;
+	if (!Array.isArray(sheets) || sheets.length === 0) throw invalid("Spreadsheet must contain at least one sheet.");
+	if (sheets.length > SPREADSHEET_LIMITS.sheets) throw invalid(`Spreadsheet has ${sheets.length} sheets (max ${SPREADSHEET_LIMITS.sheets}).`);
+	const seen = /* @__PURE__ */ new Map();
+	sheets.forEach((sheet, index) => {
+		const name = assertSheetName(sheet?.name, index, seen);
+		const { columns, rows } = sheet;
+		if (columns !== void 0 && !Array.isArray(columns)) throw invalid(`Sheet "${name}": "columns" must be an array of header strings when present.`);
+		if (!Array.isArray(rows)) throw invalid(`Sheet "${name}": "rows" must be an array of rows.`);
+		if (rows.length > SPREADSHEET_LIMITS.rowsPerSheet) throw invalid(`Sheet "${name}" exceeds the row limit: ${rows.length} rows (max ${SPREADSHEET_LIMITS.rowsPerSheet}).`);
+		const widest = rows.reduce((max, row) => Math.max(max, Array.isArray(row) ? row.length : 0), columns?.length ?? 0);
+		if (widest > SPREADSHEET_LIMITS.columnsPerSheet) throw invalid(`Sheet "${name}" exceeds the column limit: ${widest} columns (max ${SPREADSHEET_LIMITS.columnsPerSheet}).`);
+		const headerOffset = columns === void 0 ? 0 : 1;
+		columns?.forEach((header, column) => assertCell(header, name, 1, column + 1));
+		rows.forEach((row, rowIndex) => {
+			if (!Array.isArray(row)) throw invalid(`Sheet "${name}" row ${rowIndex + 1 + headerOffset}: row must be an array of cells.`);
+			row.forEach((cell, column) => assertCell(cell, name, rowIndex + 1 + headerOffset, column + 1));
+		});
+	});
+	return sheets;
+}
+/**
+* 表头行。加粗写死在这里，**不向调用方暴露任何样式入参**——
+* D75 延后的是样式 API，不是「产出的文件里一个样式属性都不许有」：
+* 表头不加粗的表格在 Excel 里看不出哪行是表头。
+*/
+function headerRow(columns) {
+	return columns.map((header) => {
+		const cell = toCell(header);
+		return cell === null ? null : {
+			...cell,
+			fontWeight: "bold"
+		};
+	});
+}
+/**
+* 把表格规格编码为 xlsx 字节。
+*
+* 纯函数——不认识产物、run 与工具，因此工具、脚本能力、测试三个消费面共用同一份
+* 实现，AC-10.8「双消费面逐字节相同」是结构性成立的。
+*/
+async function encodeSpreadsheet(spec) {
+	const blob = await writeXlsxFile(assertSpec(spec).map((sheet) => ({
+		sheet: sheet.name,
+		data: [...sheet.columns === void 0 ? [] : [headerRow(sheet.columns)], ...sheet.rows.map((row) => row.map(toCell))]
+	}))).toBlob();
+	const bytes = new Uint8Array(await blob.arrayBuffer());
+	if (bytes.length > SPREADSHEET_LIMITS.bytes) throw invalid(`The encoded spreadsheet is ${bytes.length} bytes (max ${SPREADSHEET_LIMITS.bytes}); reduce the number of rows or sheets.`);
+	return bytes;
+}
+
+//#endregion
+//#region ../runtime/src/tools/linkedDocument.ts
+const READ_LINKED_DOCUMENT_TOOL_NAME = "read_linked_document";
+/**
+* 能直接给模型用的 MIME。其余一律拒绝并列出这份清单——
+* 「尽力而为地猜格式」会让模型收到乱码却以为读成功了。
+*/
+const SUPPORTED_DOCUMENT_MIME = {
+	pdf: "application/pdf",
+	docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+	xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+};
+/** 引擎侧固定流程（§2.3）用到的错误文案，集中一处便于判据引用 */
+const UNSUPPORTED_DOCUMENT_MESSAGE = `Only PDF (${SUPPORTED_DOCUMENT_MIME.pdf}), Word (${SUPPORTED_DOCUMENT_MIME.docx}), Excel (${SUPPORTED_DOCUMENT_MIME.xlsx}) and plain text documents can be read.`;
+const READ_LINKED_DOCUMENT_INPUT_SCHEMA = {
+	type: "object",
+	properties: { url: {
+		type: "string",
+		description: "The href of a link that appeared in a perceive_page result."
+	} },
+	required: ["url"]
+};
+/**
+* 内建工具：读页面链接指向的文档。
+*
+* **始终注册**（只要宿主装配了 reader）：docx / xlsx 与纯文本这条路对所有模型成立。
+* PDF 目标在模型不支持文档时**取数后拒绝**，而不是入口就拦 ——
+* 入口拦会误伤 docx，它抽成文本后根本不需要文档能力。
+*/
+const READ_LINKED_DOCUMENT_TOOL = {
+	name: READ_LINKED_DOCUMENT_TOOL_NAME,
+	description: "Read a document linked from the current page. Pass the exact \"href\" from a perceive_page result. Cross-origin documents need the user to confirm each time.",
+	inputSchema: READ_LINKED_DOCUMENT_INPUT_SCHEMA,
+	source: "builtin"
+};
+/** 二进制转 base64；`btoa` 只吃 latin1，必须逐字节喂而不是先 decode 成字符串 */
+function toBase64(bytes) {
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary);
+}
+/** `toBase64` 的逆；分片里的文档要交回抽取器时用（0.13.0 FR-22.3） */
+function fromBase64(data) {
+	return Uint8Array.from(atob(data), (char) => char.charCodeAt(0));
+}
+
+//#endregion
+export { fromBase64 as a, SPREADSHEET_EXTENSION as c, XLSX_UNSUPPORTED as d, DEFAULT_MAX_DATA_SOURCE_BYTES as f, TEXT_BUDGETED_CONTENT_TYPES as g, DEFAULT_MAX_UPLOAD_FILE_BYTES as h, UNSUPPORTED_DOCUMENT_MESSAGE as i, SPREADSHEET_LIMITS as l, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as m, READ_LINKED_DOCUMENT_TOOL_NAME as n, toBase64 as o, DEFAULT_MAX_DOCUMENT_BYTES as p, SUPPORTED_DOCUMENT_MIME as r, encodeSpreadsheet as s, READ_LINKED_DOCUMENT_TOOL as t, SPREADSHEET_MIME_TYPE as u };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { K as JsonSchema, _ as LlmToolSpec, ft as SkillDocument, ut as SkillCatalogEntry } from "./types-Btpdd1y--BcxQ10Fa.js";
-import { R as ExternalSkillProvider, _n as ToolDisclosure, fr as mergeCatalogEntries, yn as ToolResult, z as ExternalToolSource } from "./index-BDyXe-a5.js";
+import { _ as LlmToolSpec, dt as SkillCatalogEntry, pt as SkillDocument, q as JsonSchema } from "./types-BvTV_05--BW8zDuEk.js";
+import { Cn as ToolDisclosure, R as ExternalSkillProvider, Tn as ToolResult, jr as mergeCatalogEntries, z as ExternalToolSource } from "./index-DHopiH_m.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/node.d.ts

@@ -1,6 +1,6 @@
-import { $ as SKILLS_LOCKFILE, Ct as SkillsLockfile, Et as TrustedKeyStore, H as FileStat, K as JsonSchema, N as ArchiveLimits, S as UiBridge, U as FileSystemProvider, _t as SkillManifest, at as SignatureAuditSink, b as RenderResultRequest, c as InteractionResponse, et as SKILL_MANIFEST_FILE, gt as SkillManagerPort, jt as VerifyResult, kt as UnsignedPolicy, pt as SkillInstallSource, s as InteractionRequest } from "./types-Btpdd1y--BcxQ10Fa.js";
-import { Gn as WebSkillRuntimeDeps, Gt as SchemaInferer, H as FsMemoryStore, Kt as ScriptExecutionContext, V as FsArtifactStore, Wn as WebSkillRuntime, Zn as createScriptContext, ct as NetworkPolicy, gn as ToolDefinition, m as ApprovalScope, qt as ScriptExecutor, y as BridgeCapabilities, yn as ToolResult } from "./index-BDyXe-a5.js";
-import { a as AuditLog, b as SkillVersionStore, d as CandidateSkill, m as CandidateStore, r as ApprovalPolicy } from "./skillVersionStore-B24Jjjry-v2CCU0Xo.js";
+import { At as UnsignedPolicy, Dt as TrustedKeyStore, H as FileStat, Mt as VerifyResult, N as ArchiveLimits, S as UiBridge, U as FileSystemProvider, W as FileWriteStream, _t as SkillManagerPort, b as RenderResultRequest, c as InteractionResponse, et as SKILLS_LOCKFILE, mt as SkillInstallSource, ot as SignatureAuditSink, q as JsonSchema, s as InteractionRequest, tt as SKILL_MANIFEST_FILE, vt as SkillManifest, wt as SkillsLockfile } from "./types-BvTV_05--BW8zDuEk.js";
+import { H as FsMemoryStore, Jt as SchemaInferer, Sn as ToolDefinition, Tn as ToolResult, V as FsArtifactStore, Xt as ScriptExecutor, Yt as ScriptExecutionContext, ar as WebSkillRuntime, ct as NetworkPolicy, hr as createScriptContext, m as ApprovalScope, or as WebSkillRuntimeDeps, y as BridgeCapabilities } from "./index-DHopiH_m.js";
+import { a as AuditLog, b as SkillVersionStore, d as CandidateSkill, m as CandidateStore, r as ApprovalPolicy } from "./skillVersionStore-B24Jjjry-BkOk9wI_.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts
@@ -23,6 +23,11 @@ declare class NodeFS implements FileSystemProvider {
   appendText(p: string, content: string): Promise<void>;
   readBinary(p: string): Promise<Uint8Array>;
   writeBinary(p: string, content: Uint8Array): Promise<void>;
+  /**
+   * 分块写入（FR-18.2c）。先写同目录临时文件，`close()` 时 rename 到位：
+   * 中途失败只会留下临时文件（随即删掉），目标路径要么没有、要么是完整内容（FR-18.2e）。
+   */
+  createWriteStream(p: string): Promise<FileWriteStream>;
   exists(p: string): Promise<boolean>;
   stat(p: string): Promise<FileStat>;
   list(p: string): Promise<FileStat[]>;

package/dist/node.js

@@ -2,10 +2,11 @@ import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
 import { A as SKILL_MANIFEST_FILE, D as verifySkillSignature, M as buildManifest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, b as parseSkillMarkdown, c as unzipWithLimits, f as SKILL_PACK_FILE, k as SKILLS_LOCKFILE, m as parseSkillPackManifest, o as readResponseWithLimit, p as exportSkills, s as resolveArchiveLimits, t as validateSkills, w as readSkillSignature, y as isValidSkillName } from "./skill-CAJMsLod.js";
 import { a as atomicWriteText, o as isAtomicTempPath, r as resolveInsideRoot, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
-import { B as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-Bbh_Apwg.js";
+import { K as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-DwN2o2QG.js";
+import { u as SPREADSHEET_MIME_TYPE } from "./linkedDocument-C0gj1sMq.js";
 import { n as normalizeToolContent } from "./external-_ZRQe-V9.js";
 import { i as probeLlmCapabilities } from "./env-Bj1MI2Ww.js";
-import { t as AUDIT_EVENT_TYPES } from "./eventTypes-CwciaqCU.js";
+import { t as AUDIT_EVENT_TYPES } from "./eventTypes-DcTQXSV1.js";
 import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";
 import { existsSync, promises, realpathSync } from "node:fs";
@@ -93,6 +94,50 @@ var NodeFS = class NodeFS {
 		await promises.mkdir(path.dirname(target), { recursive: true });
 		await promises.writeFile(target, content);
 	}
+	/**
+	* 分块写入（FR-18.2c）。先写同目录临时文件，`close()` 时 rename 到位：
+	* 中途失败只会留下临时文件（随即删掉），目标路径要么没有、要么是完整内容（FR-18.2e）。
+	*/
+	async createWriteStream(p) {
+		await this.#assertContained(p);
+		const target = toPlatform$4(p);
+		await promises.mkdir(path.dirname(target), { recursive: true });
+		const temp = `${target}.${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}.part`;
+		const handle = await promises.open(temp, "wx");
+		let settled = false;
+		const discard = async () => {
+			await handle.close().catch(() => void 0);
+			await promises.rm(temp, { force: true }).catch(() => void 0);
+		};
+		return {
+			write: async (chunk) => {
+				if (settled) throw new WebSkillError("FS_PERMISSION_DENIED", `Cannot write to a finished write stream: ${p}`);
+				try {
+					await handle.write(chunk);
+				} catch (e) {
+					settled = true;
+					await discard();
+					throw this.#mapError(e, p);
+				}
+			},
+			close: async () => {
+				if (settled) throw new WebSkillError("FS_PERMISSION_DENIED", `Cannot close a finished write stream: ${p}`);
+				settled = true;
+				try {
+					await handle.close();
+					await promises.rename(temp, target);
+				} catch (e) {
+					await promises.rm(temp, { force: true }).catch(() => void 0);
+					throw this.#mapError(e, p);
+				}
+			},
+			abort: async () => {
+				if (settled) return;
+				settled = true;
+				await discard();
+			}
+		};
+	}
 	async exists(p) {
 		await this.#assertContained(p);
 		try {
@@ -407,7 +452,8 @@ var SandboxedScriptExecutor = class {
 				runId: context.runId,
 				args,
 				scriptSource: await this.#fs.readText(scriptPath),
-				...context.readUploadFile ? { uploadFiles: true } : {}
+				...context.readUploadFile ? { uploadFiles: true } : {},
+				...context.writeSpreadsheet ? { writeSpreadsheet: true } : {}
 			}, timeoutMs, (request) => this.#handleBridge(request, context), (host) => context.onWarning?.(`Network request blocked by sandbox network policy: ${host}`));
 			if (!result.ok) {
 				const stderrSummary = result.stderr?.length ? ` | stderr: ${result.stderr.join(" | ").slice(0, 500)}` : "";
@@ -565,6 +611,20 @@ var SandboxedScriptExecutor = class {
 						value: artifact
 					};
 				}
+				case "writeSpreadsheet": {
+					if (!context.writeSpreadsheet) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"writeSpreadsheet\" is unavailable");
+					const denied = await gate("writeArtifact", `Script "${context.skillName}" wants to write artifact "${request.path}"`, {
+						path: request.path,
+						mimeType: SPREADSHEET_MIME_TYPE
+					});
+					if (denied) return denied;
+					const artifact = await context.writeSpreadsheet(request.path, request.spec, { ...request.metadata === void 0 ? {} : { metadata: request.metadata } });
+					return {
+						id: request.id,
+						ok: true,
+						value: artifact
+					};
+				}
 				case "confirm": {
 					if (!context.confirm) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"confirm\" is disabled");
 					const denied = await gate("confirm", `Script "${context.skillName}" asks for confirmation: ${request.message}`, { question: request.message });
@@ -809,7 +869,8 @@ var ProcessSandboxExecutor = class {
 				args,
 				scriptSource: await this.#fs.readText(scriptPath),
 				scratchDir: slot.artifactDir,
-				...context.readUploadFile ? { uploadFiles: true } : {}
+				...context.readUploadFile ? { uploadFiles: true } : {},
+				...context.writeSpreadsheet ? { writeSpreadsheet: true } : {}
 			}, timeoutMs, (request) => this.#handleBridge(request, context), (host) => context.onWarning?.(`Network request blocked by sandbox network policy: ${host}`));
 			if (!result.ok) {
 				const stderrSummary = result.stderr?.length ? ` | stderr: ${result.stderr.join(" | ").slice(0, 500)}` : "";
@@ -963,6 +1024,20 @@ var ProcessSandboxExecutor = class {
 						value: artifact
 					};
 				}
+				case "writeSpreadsheet": {
+					if (!context.writeSpreadsheet) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"writeSpreadsheet\" is unavailable");
+					const denied = await gate("writeArtifact", `Script "${context.skillName}" wants to write artifact "${request.path}"`, {
+						path: request.path,
+						mimeType: SPREADSHEET_MIME_TYPE
+					});
+					if (denied) return denied;
+					const artifact = await context.writeSpreadsheet(request.path, request.spec, { ...request.metadata === void 0 ? {} : { metadata: request.metadata } });
+					return {
+						id: request.id,
+						ok: true,
+						value: artifact
+					};
+				}
 				case "confirm": {
 					if (!context.confirm) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"confirm\" is disabled");
 					const denied = await gate("confirm", `Script "${context.skillName}" asks for confirmation: ${request.message}`, { question: request.message });

package/dist/processSandboxEntry.js

@@ -178,6 +178,11 @@ async function main(task) {
 				metadata: options?.metadata
 			}),
 			confirm: (message) => callCapability("confirm", { message }),
+			...task.writeSpreadsheet ? { writeSpreadsheet: (path, spec, options) => callCapability("writeSpreadsheet", {
+				path,
+				spec,
+				metadata: options?.metadata
+			}) } : {},
 			...task.uploadFiles ? {
 				listUploadFiles: () => callCapability("listUploadFiles", {}),
 				readUploadFile: async (fileId) => new Uint8Array(await callCapability("readUploadFile", { fileId }))

package/dist/sandboxWorkerEntry.js

@@ -239,6 +239,11 @@ async function main() {
 				metadata: options?.metadata
 			}),
 			confirm: (message) => callCapability("confirm", { message }),
+			...task.writeSpreadsheet ? { writeSpreadsheet: (path, spec, options) => callCapability("writeSpreadsheet", {
+				path,
+				spec,
+				metadata: options?.metadata
+			}) } : {},
 			...task.uploadFiles ? {
 				listUploadFiles: () => callCapability("listUploadFiles", {}),
 				readUploadFile: async (fileId) => new Uint8Array(await callCapability("readUploadFile", { fileId }))

package/dist/{skillVersionStore-B24Jjjry-v2CCU0Xo.d.ts → skillVersionStore-B24Jjjry-BkOk9wI_.d.ts}

@@ -1,4 +1,4 @@
-import { U as FileSystemProvider, X as PageQuery, Y as Page, _t as SkillManifest, ut as SkillCatalogEntry } from "./types-Btpdd1y--BcxQ10Fa.js";
+import { U as FileSystemProvider, X as Page, Z as PageQuery, dt as SkillCatalogEntry, vt as SkillManifest } from "./types-BvTV_05--BW8zDuEk.js";
 //#region ../governance/dist/skillVersionStore-B24Jjjry.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { S as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, v as MemoryStore } from "./types-Btpdd1y--BcxQ10Fa.js";
+import { S as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, v as MemoryStore } from "./types-BvTV_05--BW8zDuEk.js";
 import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-AK3cSMEA-Dli6QU5E.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts