@webskill/sdk 0.20.0 → 0.22.0

package/dist/agent.js

@@ -1,9 +1,10 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
 import { b as parseSkillMarkdown, y as isValidSkillName } from "./skill-CAJMsLod.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
-import { c as formatAttachmentText, l as UNTRUSTED_LINE_LIMIT, o as XLSX_MIME, s as classifyAttachment, u as sanitizeUntrustedLine } from "./kind-DxgS8LM-.js";
-import { o as toBase64, s as DEFAULT_MAX_DATA_SOURCE_BYTES } from "./linkedDocument-xNXF-z8n.js";
-import { a as frameLabel, i as toFrameScopes, n as PAGE_DOCUMENT_REF, o as frameSteps, r as toActionFrameScopes, t as PAGE_ACTION_KINDS } from "./types-DOJI5YC3.js";
+import { n as sanitizeUntrustedLine, t as UNTRUSTED_LINE_LIMIT } from "./untrustedText-BIaRvPZK.js";
+import { d as extractedDocumentFormat, f as formatAttachmentText, u as classifyAttachment } from "./kind-Dc8x0HWz.js";
+import { c as toBase64, d as SPREADSHEET_LIMITS, f as SPREADSHEET_MIME_TYPE, l as encodeSpreadsheet, m as DEFAULT_MAX_DATA_SOURCE_BYTES, u as SPREADSHEET_EXTENSION } from "./linkedDocument-CIuh_Yp0.js";
+import { C as DOCUMENT_READ_BUDGET, D as toFrameScopes, E as toActionFrameScopes, O as frameLabel, S as sniffDocumentFormat, T as PAGE_DOCUMENT_REF, _ as defersImage, a as columnWidthToPixels, b as isPdfTextTrustworthy, c as isRangeTopLeft, d as rangeContains, f as readImageSize, g as asReadMode, h as createDocumentToolSource, i as MAX_DIGIT_WIDTH, k as frameSteps, l as parseCellAddress, m as READ_DOCUMENT_TOOL, n as EMU_PER_POINT, o as fitWithin, p as PDF_LARGE_IMAGE_RATIO, r as EMU_PER_TWIP, s as formatCellAddress, t as EMU_PER_PIXEL, u as parseCellRange, v as takesImage, w as PAGE_ACTION_KINDS, x as measurePdfTextQuality, y as PDF_GARBLED_RATIO } from "./geometry-wx5ZTYzi.js";
 
 //#region ../agent/src/todo/store.ts
 const STATUSES = [
@@ -129,7 +130,7 @@ const STATUS_ENUM = [
 	"completed"
 ];
 const TODO_TOOL_DESCRIPTION = "Maintain the visible task list for a multi-step request. The rules are in the system prompt.";
-const INPUT_SCHEMA$4 = {
+const INPUT_SCHEMA$6 = {
 	type: "object",
 	properties: {
 		action: {
@@ -182,7 +183,7 @@ const INPUT_SCHEMA$4 = {
 	required: ["action"],
 	additionalProperties: false
 };
-function toolError$6(code, message) {
+function toolError$8(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -231,15 +232,15 @@ function createTodoToolSource(options = {}) {
 		try {
 			if (action === "create") {
 				const items = parseItems(args["items"]);
-				if (typeof items === "string") return Promise.resolve(toolError$6("VALIDATION_FAILED", items));
+				if (typeof items === "string") return Promise.resolve(toolError$8("VALIDATION_FAILED", items));
 				const list = store.create(items);
 				return Promise.resolve(ok(events, progressText(list.items)));
 			}
 			if (action === "update") {
 				const id = args["id"];
 				const status = args["status"];
-				if (typeof id !== "string") return Promise.resolve(toolError$6("VALIDATION_FAILED", "The \"id\" argument is required for action \"update\""));
-				if (status !== void 0 && typeof status !== "string") return Promise.resolve(toolError$6("VALIDATION_FAILED", "The \"status\" argument must be a string"));
+				if (typeof id !== "string") return Promise.resolve(toolError$8("VALIDATION_FAILED", "The \"id\" argument is required for action \"update\""));
+				if (status !== void 0 && typeof status !== "string") return Promise.resolve(toolError$8("VALIDATION_FAILED", "The \"status\" argument must be a string"));
 				const title = args["title"];
 				const list = store.update(id, {
 					...status !== void 0 ? { status } : {},
@@ -251,10 +252,10 @@ function createTodoToolSource(options = {}) {
 				store.clear();
 				return Promise.resolve(ok(events, progressText([])));
 			}
-			return Promise.resolve(toolError$6("VALIDATION_FAILED", "The \"action\" argument must be one of create, update, clear"));
+			return Promise.resolve(toolError$8("VALIDATION_FAILED", "The \"action\" argument must be one of create, update, clear"));
 		} catch (e) {
 			const code = e instanceof Error && "code" in e ? String(e.code) : "VALIDATION_FAILED";
-			return Promise.resolve(toolError$6(code, e instanceof Error ? e.message : String(e)));
+			return Promise.resolve(toolError$8(code, e instanceof Error ? e.message : String(e)));
 		} finally {
 			unsubscribe();
 		}
@@ -266,7 +267,7 @@ function createTodoToolSource(options = {}) {
 		listToolSpecs: () => Promise.resolve([{
 			name: MANAGE_TODO_TOOL,
 			description: TODO_TOOL_DESCRIPTION,
-			inputSchema: INPUT_SCHEMA$4
+			inputSchema: INPUT_SCHEMA$6
 		}]),
 		canHandle: (name) => name === MANAGE_TODO_TOOL,
 		argCaptureTrust: (name) => name === "manage_todo" ? { tier: "reviewed" } : void 0,
@@ -499,7 +500,7 @@ const SKILL_GENERATION_SYSTEM_PROMPT = [
 //#region ../agent/src/skillGeneration/toolSource.ts
 const GENERATE_SKILL_TOOL = "generate_skill";
 const TOOL_DESCRIPTION = "Turn the procedure just demonstrated in this conversation into a skill candidate. The user must confirm it, and a reviewer must approve it before anyone can use it.";
-const INPUT_SCHEMA$3 = {
+const INPUT_SCHEMA$5 = {
 	type: "object",
 	properties: {
 		name: {
@@ -557,7 +558,7 @@ const INPUT_SCHEMA$3 = {
 	],
 	additionalProperties: false
 };
-function toolError$5(code, message) {
+function toolError$7(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -626,7 +627,7 @@ function createSkillGenerationToolSource(options) {
 	const generator = new SkillGenerator(options);
 	const call = async (_name, args) => {
 		const draft = readDraft(args);
-		if (typeof draft === "string") return toolError$5("SKILL_GENERATION_VALIDATION_FAILED", draft);
+		if (typeof draft === "string") return toolError$7("SKILL_GENERATION_VALIDATION_FAILED", draft);
 		try {
 			const outcome = await generator.generate(draft);
 			if (outcome.status === "declined") return {
@@ -650,7 +651,7 @@ function createSkillGenerationToolSource(options) {
 				}]
 			};
 		} catch (e) {
-			return toolError$5(e instanceof Error && "code" in e ? String(e.code) : "SKILL_GENERATION_VALIDATION_FAILED", e instanceof Error ? e.message : String(e));
+			return toolError$7(e instanceof Error && "code" in e ? String(e.code) : "SKILL_GENERATION_VALIDATION_FAILED", e instanceof Error ? e.message : String(e));
 		}
 	};
 	return {
@@ -659,7 +660,7 @@ function createSkillGenerationToolSource(options) {
 		listToolSpecs: () => Promise.resolve([{
 			name: GENERATE_SKILL_TOOL,
 			description: TOOL_DESCRIPTION,
-			inputSchema: INPUT_SCHEMA$3
+			inputSchema: INPUT_SCHEMA$5
 		}]),
 		canHandle: (name) => name === GENERATE_SKILL_TOOL,
 		argCaptureTrust: (name) => name === "generate_skill" ? { tier: "reviewed" } : void 0,
@@ -769,7 +770,7 @@ const DELEGATION_SYSTEM_PROMPT = [
 //#region ../agent/src/delegation/toolSource.ts
 const DELEGATE_TASK_TOOL = "delegate_task";
 const DELEGATE_TOOL_DESCRIPTION = "Hand one self-contained sub-task to a sub-agent and wait for its summary. One delegation at a time.";
-const INPUT_SCHEMA$2 = {
+const INPUT_SCHEMA$4 = {
 	type: "object",
 	properties: {
 		todoId: {
@@ -789,7 +790,7 @@ const INPUT_SCHEMA$2 = {
 	required: ["todoId", "task"],
 	additionalProperties: false
 };
-function toolError$4(code, message) {
+function toolError$6(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -824,12 +825,12 @@ function createDelegationToolSource(options) {
 	const call = async (_name, args) => {
 		const todoId = args["todoId"];
 		const task = args["task"];
-		if (typeof todoId !== "string" || todoId === "") return toolError$4("VALIDATION_FAILED", "The \"todoId\" argument is required and must be a string");
-		if (typeof task !== "string" || task.trim() === "") return toolError$4("VALIDATION_FAILED", "The \"task\" argument is required and must be a non-empty string");
+		if (typeof todoId !== "string" || todoId === "") return toolError$6("VALIDATION_FAILED", "The \"todoId\" argument is required and must be a string");
+		if (typeof task !== "string" || task.trim() === "") return toolError$6("VALIDATION_FAILED", "The \"task\" argument is required and must be a non-empty string");
 		const rawTools = args["allowedTools"];
 		let allowedTools;
 		if (rawTools !== void 0) {
-			if (!Array.isArray(rawTools) || rawTools.some((entry) => typeof entry !== "string")) return toolError$4("VALIDATION_FAILED", "The \"allowedTools\" argument must be an array of tool names");
+			if (!Array.isArray(rawTools) || rawTools.some((entry) => typeof entry !== "string")) return toolError$6("VALIDATION_FAILED", "The \"allowedTools\" argument must be an array of tool names");
 			allowedTools = rawTools;
 		}
 		try {
@@ -861,7 +862,7 @@ function createDelegationToolSource(options) {
 				}]
 			};
 		} catch (e) {
-			return toolError$4(e instanceof Error && "code" in e ? String(e.code) : "DELEGATION_FAILED", e instanceof Error ? e.message : String(e));
+			return toolError$6(e instanceof Error && "code" in e ? String(e.code) : "DELEGATION_FAILED", e instanceof Error ? e.message : String(e));
 		}
 	};
 	return {
@@ -871,7 +872,7 @@ function createDelegationToolSource(options) {
 		listToolSpecs: () => Promise.resolve([{
 			name: DELEGATE_TASK_TOOL,
 			description: DELEGATE_TOOL_DESCRIPTION,
-			inputSchema: INPUT_SCHEMA$2
+			inputSchema: INPUT_SCHEMA$4
 		}]),
 		canHandle: (name) => name === DELEGATE_TASK_TOOL,
 		argCaptureTrust: (name) => name === "delegate_task" ? { tier: "reviewed" } : void 0,
@@ -1274,7 +1275,7 @@ const PERCEPTION_SYSTEM_PROMPT = [
 //#endregion
 //#region ../agent/src/perception/toolSource.ts
 const PERCEIVE_PAGE_TOOL = "perceive_page";
-const DESCRIPTION$1 = "Read the parts of the current page the host made readable, as a structured accessibility outline. Read-only: it cannot click, type, submit or navigate.";
+const DESCRIPTION$4 = "Read the parts of the current page the host made readable, as a structured accessibility outline. Read-only: it cannot click, type, submit or navigate.";
 /**
 * 两个参数，且它们都扩不出一寸新范围（AC-10.8 的判据由 0.14.0 分册 22 §3 修订）。
 *
@@ -1287,7 +1288,7 @@ const DESCRIPTION$1 = "Read the parts of the current page the host made readable
 * 「模型看到的工具契约」随宿主配置漂移，同一段对话里换个设置就变一次形状，
 * 而模型的历史消息里还留着旧形状。宁可多一个恒定存在、关闭时明确拒绝的参数。
 */
-const INPUT_SCHEMA$1 = {
+const INPUT_SCHEMA$3 = {
 	type: "object",
 	properties: {
 		cursor: {
@@ -1308,7 +1309,7 @@ const SUBTREE_CODES = /* @__PURE__ */ new Set([
 	"PERCEPTION_SUBTREE_OUT_OF_SCOPE",
 	"PERCEPTION_SUBTREE_UNKNOWN_REF"
 ]);
-function toolError$3(code, message) {
+function toolError$5(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -1400,8 +1401,8 @@ function createPagePerceptionToolSource(options) {
 		kind: "page-perception",
 		listToolSpecs: () => Promise.resolve(policy.enabled ? [{
 			name: PERCEIVE_PAGE_TOOL,
-			description: DESCRIPTION$1,
-			inputSchema: INPUT_SCHEMA$1
+			description: DESCRIPTION$4,
+			inputSchema: INPUT_SCHEMA$3
 		}] : []),
 		systemPrompt: () => Promise.resolve(policy.enabled ? PERCEPTION_SYSTEM_PROMPT : void 0),
 		canHandle: (name) => name === PERCEIVE_PAGE_TOOL,
@@ -1415,11 +1416,11 @@ function createPagePerceptionToolSource(options) {
 			};
 			const cursor = args["cursor"];
 			const ref = args["ref"];
-			if (ref !== void 0 && typeof ref !== "string") return toolError$3("PERCEPTION_REF_INVALID", "perceive_page needs \"ref\" to be a string when it is present.");
+			if (ref !== void 0 && typeof ref !== "string") return toolError$5("PERCEPTION_REF_INVALID", "perceive_page needs \"ref\" to be a string when it is present.");
 			if (cursor !== void 0) {
 				const index = typeof cursor === "string" ? pending?.cursors.get(cursor) : void 0;
-				if (!paged || pending === void 0 || index === void 0 || pending.runId !== context?.runId) return toolError$3("PERCEPTION_CURSOR_INVALID", CURSOR_REJECTED);
-				if (ref !== void 0 && ref !== pending.subtreeRef) return toolError$3("PERCEPTION_CURSOR_INVALID", CURSOR_REJECTED);
+				if (!paged || pending === void 0 || index === void 0 || pending.runId !== context?.runId) return toolError$5("PERCEPTION_CURSOR_INVALID", CURSOR_REJECTED);
+				if (ref !== void 0 && ref !== pending.subtreeRef) return toolError$5("PERCEPTION_CURSOR_INVALID", CURSOR_REJECTED);
 				return resultOf(pending, index);
 			}
 			try {
@@ -1481,8 +1482,8 @@ function createPagePerceptionToolSource(options) {
 				return resultOf(pending, 0);
 			} catch (e) {
 				const code = e instanceof WebSkillError ? e.code : void 0;
-				if (code !== void 0 && SUBTREE_CODES.has(code)) return toolError$3(code, messageOf(e));
-				return toolError$3("PERCEPTION_FAILED", `perceive_page failed: ${messageOf(e)}`);
+				if (code !== void 0 && SUBTREE_CODES.has(code)) return toolError$5(code, messageOf(e));
+				return toolError$5("PERCEPTION_FAILED", `perceive_page failed: ${messageOf(e)}`);
 			}
 		}
 	};
@@ -1655,7 +1656,7 @@ const RECORD_LIMIT$1 = 50;
 function sanitizeDescription(value) {
 	return sanitizeUntrustedLine(value, DESCRIPTION_LIMIT);
 }
-function isRecord(value) {
+function isRecord$2(value) {
 	return typeof value === "object" && value !== null;
 }
 /**
@@ -1665,7 +1666,7 @@ function isRecord(value) {
 * 标成后者会让读代码的人以为它已经被验证过了。
 */
 function validate(raw, provenance) {
-	if (!isRecord(raw)) return void 0;
+	if (!isRecord$2(raw)) return void 0;
 	const { id, kind, description, target } = raw;
 	if (typeof id !== "string" || !ID_PATTERN.test(id)) return void 0;
 	if (typeof kind !== "string" || !OFFERABLE_KINDS.includes(kind)) return void 0;
@@ -2099,19 +2100,21 @@ const PAGE_ACTION_SYSTEM_PROMPT = [
 	"A reference expires as soon as the page is perceived again; perceive first, then act.",
 	"After an action, the result tells you where it led. \"openedTab\" means a new page opened — switch to it with focus_page_tab to read it. \"navigated\" means this page itself moved to a new address. \"elevatedModal\" means a dialog opened on this page. If none of the three appear, the page did not change.",
 	"Use the \"back\" action to return to the previous page in this page's history. It takes no \"ref\" and no \"value\", and it only affects the page you are currently on. After going back, always perceive_page again: every reference from before the action is dead.",
-	"Use the \"scroll\" action only when the page itself says there is more than you can see (for example a list that says it has 20 rows but shows 13). Pass the \"ref\" of any element inside the region you want to scroll and a \"value\" of \"down\" or \"up\"; the region is found for you, so do not look for a reference to the scrollbar or the container. The result carries \"scrolled\": when \"atEnd\" is true there is nothing further in that direction — stop scrolling and answer with what you have. Perceive the page again after each scroll: rows that left the screen no longer exist and their references are dead."
+	"Use the \"scroll\" action only when the page itself says there is more than you can see (for example a list that says it has 20 rows but shows 13). Pass the \"ref\" of any element inside the region you want to scroll and a \"value\" of \"down\" or \"up\"; the region is found for you, so do not look for a reference to the scrollbar or the container. The result carries \"scrolled\": when \"atEnd\" is true there is nothing further in that direction — stop scrolling and answer with what you have. Perceive the page again after each scroll: rows that left the screen no longer exist and their references are dead.",
+	"Use the \"hover\" action when a menu, tooltip or icon only appears while the pointer rests on something — a dropdown that ignores clicks, or a table header whose filter icon is invisible until hovered. Pass the \"ref\" of the thing to hover over and no \"value\". Then perceive_page again: whatever appeared is new and has no reference until you read it. If the result says \"noop\": true, nothing on the page reacted, and hovering again will not help — some pages reveal those panels through a pure CSS effect that only a real pointer can trigger. Say so and offer another route instead of retrying.",
+	"Use the \"drag\" action to drag one element onto another — reordering a list by its drag handle, for example. Pass the \"ref\" of what you are dragging and a \"value\" holding the ref of where it should land. Both must come from a perceive_page result, so perceive first and make sure the destination is actually on screen. You can only express a start and an end; there is no path, speed or pause in between."
 ].join("\n");
 
 //#endregion
 //#region ../agent/src/pageAction/toolSource.ts
 const PAGE_ACTION_TOOL = "act_on_page";
-const DESCRIPTION = "Act on one element of the current page. The target must be a \"ref\" from a fresh perceive_page result; selectors are rejected. Each call asks the user to confirm before anything happens.";
+const DESCRIPTION$3 = "Act on one element of the current page. The target must be a \"ref\" from a fresh perceive_page result; selectors are rejected. Each call asks the user to confirm before anything happens.";
 /**
 * 入参里**没有** `scope` / `selector` / `include` / `frame` 一类字段（AC-23.2）：
 * 工具一旦接受它们，「能操作哪里」就有了一条从模型输出流进来的路径。
 * 模型能表达的只有「在哪个句柄上做哪个动作」。
 */
-const INPUT_SCHEMA = {
+const INPUT_SCHEMA$2 = {
 	type: "object",
 	properties: {
 		ref: {
@@ -2124,13 +2127,13 @@ const INPUT_SCHEMA = {
 		},
 		value: {
 			type: "string",
-			description: "Text for \"fill\", the option name for \"select\", \"true\"/\"false\" for \"set\", or \"down\"/\"up\" for \"scroll\""
+			description: "Text for \"fill\", the option name for \"select\", \"true\"/\"false\" for \"set\", \"down\"/\"up\" for \"scroll\", or the destination ref for \"drag\". Not used by \"hover\" or \"attach\"."
 		}
 	},
 	required: ["action"],
 	additionalProperties: false
 };
-function toolError$2(code, message) {
+function toolError$4(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -2153,8 +2156,8 @@ function createPageActionToolSource(options) {
 		kind: "page-action",
 		listToolSpecs: () => Promise.resolve(policy.enabled ? [{
 			name: PAGE_ACTION_TOOL,
-			description: DESCRIPTION,
-			inputSchema: INPUT_SCHEMA
+			description: DESCRIPTION$3,
+			inputSchema: INPUT_SCHEMA$2
 		}] : []),
 		systemPrompt: () => Promise.resolve(policy.enabled ? PAGE_ACTION_SYSTEM_PROMPT : void 0),
 		canHandle: (name) => name === PAGE_ACTION_TOOL,
@@ -2180,7 +2183,7 @@ function createPageActionToolSource(options) {
 		},
 		call: async (_name, args, context) => {
 			const action = args["action"];
-			if (typeof action !== "string" || !PAGE_ACTION_KINDS.includes(action)) return toolError$2("VALIDATION_FAILED", `act_on_page needs one of ${PAGE_ACTION_KINDS.join(" / ")}.`);
+			if (typeof action !== "string" || !PAGE_ACTION_KINDS.includes(action)) return toolError$4("VALIDATION_FAILED", `act_on_page needs one of ${PAGE_ACTION_KINDS.join(" / ")}.`);
 			const runContext = { ...context?.runId !== void 0 ? { runId: context.runId } : {} };
 			const run = async (request) => {
 				try {
@@ -2197,25 +2200,25 @@ function createPageActionToolSource(options) {
 						} }
 					};
 				} catch (e) {
-					return toolError$2(e instanceof WebSkillError ? e.code : "PAGE_ACTION_FAILED", messageOf(e));
+					return toolError$4(e instanceof WebSkillError ? e.code : "PAGE_ACTION_FAILED", messageOf(e));
 				}
 			};
 			if (action === "back") {
-				if ("ref" in args || "value" in args) return toolError$2("VALIDATION_FAILED", "act_on_page with \"back\" takes no \"ref\" and no \"value\".");
+				if ("ref" in args || "value" in args) return toolError$4("VALIDATION_FAILED", "act_on_page with \"back\" takes no \"ref\" and no \"value\".");
 				return await run({
 					ref: PAGE_DOCUMENT_REF,
 					action: "back"
 				});
 			}
 			const ref = args["ref"];
-			if (typeof ref !== "string") return toolError$2("VALIDATION_FAILED", `act_on_page needs a "ref" string when the action is "${action}".`);
+			if (typeof ref !== "string") return toolError$4("VALIDATION_FAILED", `act_on_page needs a "ref" string when the action is "${action}".`);
 			const value = args["value"];
 			if ([
 				"fill",
 				"select",
 				"set"
-			].includes(action) && typeof value !== "string") return toolError$2("VALIDATION_FAILED", `act_on_page needs a "value" string when the action is "${action}".`);
-			if (action === "scroll" && value !== "down" && value !== "up") return toolError$2("VALIDATION_FAILED", "act_on_page with \"scroll\" needs a \"value\" of \"down\" or \"up\".");
+			].includes(action) && typeof value !== "string") return toolError$4("VALIDATION_FAILED", `act_on_page needs a "value" string when the action is "${action}".`);
+			if (action === "scroll" && value !== "down" && value !== "up") return toolError$4("VALIDATION_FAILED", "act_on_page with \"scroll\" needs a \"value\" of \"down\" or \"up\".");
 			return await run({
 				ref,
 				action,
@@ -2457,7 +2460,7 @@ const SPECS = [
 		inputSchema: TAB_SCHEMA
 	}
 ];
-function toolError$1(code, message) {
+function toolError$3(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -2492,7 +2495,7 @@ function createTabWorksetToolSource(options) {
 					}]
 				};
 				const handle = args["tab"];
-				if (typeof handle !== "string" || handle === "") return toolError$1("VALIDATION_FAILED", `${name} needs a "tab" handle from list_page_tabs.`);
+				if (typeof handle !== "string" || handle === "") return toolError$3("VALIDATION_FAILED", `${name} needs a "tab" handle from list_page_tabs.`);
 				return {
 					ok: true,
 					content: [{
@@ -2501,7 +2504,7 @@ function createTabWorksetToolSource(options) {
 					}]
 				};
 			} catch (e) {
-				return toolError$1(e instanceof WebSkillError ? e.code : "PAGE_TAB_FAILED", messageOf(e));
+				return toolError$3(e instanceof WebSkillError ? e.code : "PAGE_TAB_FAILED", messageOf(e));
 			}
 		}
 	};
@@ -2517,12 +2520,12 @@ function formatSize(bytes) {
 	if (bytes < 1024 * 1024) return `${Math.round(bytes / 1024)} KB`;
 	return `${(bytes / 1024 / 1024).toFixed(1)} MB`;
 }
-/** 两种待抽取格式共用 `document-text` 这一种 kind，选抽取器时要按格式再分一次 */
-function isSpreadsheet(contentType, name) {
-	const type = contentType.toLowerCase();
-	if (type !== "") return type === XLSX_MIME;
-	return name.toLowerCase().endsWith(".xlsx");
-}
+/** `document-text` 下的三种格式各自的抽取器与称呼 */
+const EXTRACTED_LABEL = {
+	docx: "Word documents",
+	xlsx: "Excel workbooks",
+	pptx: "PowerPoint presentations"
+};
 /**
 * 读取本机下载文件的策略（0.14.0 分册 20）。
 *
@@ -2622,6 +2625,42 @@ var DownloadedFilePolicy = class {
 		});
 		return result;
 	}
+	/**
+	* 取原始字节，不做形态化（0.21.0 分册 22 · FR-22.4）。
+	*
+	* 授权卡、审计留痕与 `read()` 完全一致——逐单元读文档要的是字节本身，
+	* 但绝不能因此绕过策略：那等于给「读用户本机磁盘」开第二个没有授权的入口。
+	* @experimental
+	*/
+	async readBytes(id) {
+		const reader = this.#reader();
+		const entry = await this.#resolve(id);
+		const approved = await this.#authorize("read", entry);
+		if (approved === false) {
+			const reason = `Reading "${entry.name}" was declined by the user.`;
+			await this.#record({
+				action: "read",
+				...describe(entry),
+				approved: false,
+				ok: false,
+				reason
+			});
+			throw new WebSkillError("TOOL_DENIED", reason);
+		}
+		const { contentType, bytes } = await reader.read(id);
+		await this.#record({
+			action: "read",
+			...describe(entry),
+			contentType,
+			approved,
+			ok: true
+		});
+		return {
+			entry,
+			contentType,
+			bytes
+		};
+	}
 	async #materialize(entry, contentType, kind, bytes) {
 		if (kind === "text" || kind === "document-text") {
 			const body = kind === "text" ? new TextDecoder().decode(bytes) : await this.#extract(contentType, entry.name)(bytes);
@@ -2629,15 +2668,10 @@ var DownloadedFilePolicy = class {
 				entry,
 				contentType,
 				kind,
-				text: formatAttachmentText({
-					name: entry.name,
-					contentType,
-					body,
-					kind,
-					origin: "download"
-				})
+				text: this.#label(entry, contentType, body, kind)
 			};
 		}
+		if (kind === "file" && this.#overDocumentLimit(bytes)) return await this.#pdfAsText(entry, contentType, bytes);
 		return {
 			entry,
 			contentType,
@@ -2645,14 +2679,57 @@ var DownloadedFilePolicy = class {
 			bytes
 		};
 	}
+	/** 与手动上传共用同一个格式化器：两条入口的产出必须逐字一致（AC-20.6） */
+	#label(entry, contentType, body, kind) {
+		return formatAttachmentText({
+			name: entry.name,
+			contentType,
+			body,
+			kind,
+			origin: "download"
+		});
+	}
+	/** base64 编码后才是请求体里的长度，量原始字节会漏掉那三分之一（与上传侧同口径） */
+	#overDocumentLimit(bytes) {
+		const max = this.#options.maxDocumentBytes?.();
+		return max !== void 0 && Math.ceil(bytes.length / 3) * 4 > max;
+	}
+	/**
+	* 超阈值 PDF 退到抽取文本（AC-21.2），抽不出就**拒绝并说明**（AC-21.3）：
+	* 半份原件是坏文件，半份抽取文本会让模型以为自己读全了。与上传侧 `#routeDocument` 同一套判断。
+	*/
+	async #pdfAsText(entry, contentType, bytes) {
+		const tooLarge = `${entry.name} is ${formatSize(bytes.length)}, over the request limit for sending a document as is. It was not truncated, because a partial document would be unusable.`;
+		const extract = this.#options.pdfExtractor;
+		if (extract === void 0) throw new WebSkillError("TOOL_UNSUPPORTED", `${tooLarge} This environment has no PDF text extractor either, so no fallback is available. Tell the user to switch to a model that accepts large documents.`);
+		let body;
+		try {
+			body = await extract(bytes);
+		} catch (e) {
+			throw new WebSkillError("TOOL_UNSUPPORTED", `${tooLarge} Text extraction failed as well: ${e instanceof Error ? e.message : String(e)}. Ask the user for a smaller file or a specific page range.`);
+		}
+		if (body.trim() === "") throw new WebSkillError("TOOL_UNSUPPORTED", `${tooLarge} It has no text layer either — most likely a scan or an image-only export — so nothing could be extracted. Tell the user this instead of guessing what it contains.`);
+		return {
+			entry,
+			contentType,
+			kind: "document-text",
+			text: this.#label(entry, contentType, body, "document-text")
+		};
+	}
 	#extract(contentType, name) {
-		const extract = isSpreadsheet(contentType, name) ? this.#options.xlsxExtractor : this.#options.docxExtractor;
+		const extract = this.#extractorFor(contentType, name);
 		if (extract === void 0) throw new WebSkillError("TOOL_UNSUPPORTED", this.#noExtractorReason(contentType, name));
 		return extract;
 	}
+	#extractorFor(contentType, name) {
+		const format = extractedDocumentFormat(contentType, name);
+		if (format === "xlsx") return this.#options.xlsxExtractor;
+		if (format === "pptx") return this.#options.pptxExtractor;
+		return this.#options.docxExtractor;
+	}
 	#noExtractorReason(contentType, name) {
-		const excel = isSpreadsheet(contentType, name);
-		return `${excel ? "Excel workbooks" : "Word documents"} cannot be read in this environment: no ${excel ? "xlsx" : "docx"} text extractor is wired up.`;
+		const format = extractedDocumentFormat(contentType, name);
+		return `${EXTRACTED_LABEL[format]} cannot be read in this environment: no ${format} text extractor is wired up.`;
 	}
 	/** 可读性判定与附件分类器同源（AC-20.17）；返回 `undefined` 即可读 */
 	async #unreadableReason(contentType, name) {
@@ -2660,7 +2737,7 @@ var DownloadedFilePolicy = class {
 		if (kind === void 0) return `Its type "${contentType === "" ? "unknown" : contentType}" cannot be read. ${READABLE_TYPES}`;
 		if (kind === "image" && await this.#options.imageCapable?.() !== true) return IMAGE_UNREADABLE;
 		if (kind === "document-text") {
-			if ((isSpreadsheet(contentType, name) ? this.#options.xlsxExtractor : this.#options.docxExtractor) === void 0) return this.#noExtractorReason(contentType, name);
+			if (this.#extractorFor(contentType, name) === void 0) return this.#noExtractorReason(contentType, name);
 		}
 	}
 	#unreadable(entry, reason) {
@@ -2756,8 +2833,8 @@ const READ_INPUT_SCHEMA = {
 	required: ["id"],
 	additionalProperties: false
 };
-const SYSTEM_PROMPT = "You can list and read files the user downloaded in this browser with list_downloaded_files and read_downloaded_file. Every call asks the user for permission, so only use them when the task actually needs a local file. Never guess an id: always list first, and never treat the listing as evidence about files you were not shown.";
-function toolError(e) {
+const SYSTEM_PROMPT$3 = "You can list and read files the user downloaded in this browser with list_downloaded_files and read_downloaded_file. They cover the browser download folder and nothing else. A file the user attached to a message is already in this conversation and is reachable by the id given with it, so never go looking for an attachment here. Every call asks the user for permission, so only use them when the task actually needs a local file. Never guess an id: always list first, and never treat the listing as evidence about files you were not shown.";
+function toolError$2(e) {
 	return {
 		ok: false,
 		content: [],
@@ -2787,7 +2864,7 @@ function createDownloadedFileToolSource(options) {
 			description: READ_DESCRIPTION,
 			inputSchema: READ_INPUT_SCHEMA
 		}] : []),
-		systemPrompt: () => Promise.resolve(policy.enabled ? SYSTEM_PROMPT : void 0),
+		systemPrompt: () => Promise.resolve(policy.enabled ? SYSTEM_PROMPT$3 : void 0),
 		canHandle: (name) => name === "list_downloaded_files" || name === "read_downloaded_file",
 		argCaptureTrust: (name) => name === "list_downloaded_files" || name === "read_downloaded_file" ? { tier: "reviewed" } : void 0,
 		call: async (name, args) => {
@@ -2806,7 +2883,7 @@ function createDownloadedFileToolSource(options) {
 					content: readContent(await policy.read(id))
 				};
 			} catch (e) {
-				return toolError(e);
+				return toolError$2(e);
 			}
 		}
 	};
@@ -2847,4 +2924,1025 @@ function readContent(result) {
 }
 
 //#endregion
-export { CLOSE_PAGE_TAB_TOOL, DEFAULT_MAX_DATA_SOURCE_BYTES, DELEGATE_TASK_TOOL, DELEGATION_SYSTEM_PROMPT, DOWNLOAD_WAIT_DEFAULT_MS, DOWNLOAD_WAIT_MAX_MS, DOWNLOAD_WAIT_MIN_MS, DataSourceCandidatePolicy, DataSourcePolicy, DelegationOrchestrator, DownloadedFilePolicy, FOCUS_PAGE_TAB_TOOL, GENERATE_SKILL_TOOL, LIST_DOWNLOADED_FILES_TOOL, LIST_PAGE_TABS_TOOL, MANAGE_TODO_TOOL, PAGE_ACTION_KINDS, PAGE_ACTION_SYSTEM_PROMPT, PAGE_ACTION_TOOL, PAGE_DOCUMENT_REF, PERCEIVE_PAGE_TOOL, PERCEPTION_PAGING_DEFAULTS, PERCEPTION_SYSTEM_PROMPT, PageActionPolicy, PagePerceptionPolicy, READ_DOWNLOADED_FILE_TOOL, SKILL_GENERATION_SYSTEM_PROMPT, SkillGenerator, TAB_WORKSET_DEFAULT_MAX, TAB_WORKSET_MAX_MAX, TAB_WORKSET_MIN_MAX, TAB_WORKSET_SYSTEM_PROMPT, TODO_SYSTEM_PROMPT, TabWorksetPolicy, TodoStore, clampDownloadWaitMs, clampWorksetMax, createDelegationToolSource, createDownloadedFileToolSource, createHttpDataSourceTransport, createPageActionToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createTabWorksetToolSource, createTodoToolSource, frameLabel, frameSteps, toActionFrameScopes, toFrameScopes, withDelegationOrigin };
+//#region ../agent/src/spreadsheet/toolSource.ts
+const EXPORT_SPREADSHEET_TOOL = "export_spreadsheet";
+const DESCRIPTION$2 = "Write tabular data — and, when they belong in the sheet, pictures — to an Excel (.xlsx) file the user can download.";
+const CELL_SCHEMA = {
+	anyOf: [
+		{ type: "string" },
+		{ type: "number" },
+		{ type: "boolean" },
+		{ type: "null" }
+	],
+	description: "Text is never re-parsed as a number or a date: \"0123\" stays \"0123\". Use null for an empty cell."
+};
+/**
+* 表里的图。只在宿主接了 `resolveImage` 时才并进 schema——
+* 接不了字节却把字段给出去，等于邀请模型填一个填了也不算数的东西。
+*/
+const IMAGES_SCHEMA = {
+	type: "array",
+	maxItems: SPREADSHEET_LIMITS.imagesPerSheet,
+	description: "Pictures placed on this sheet. Use this instead of telling the user to paste images in themselves, and instead of handing out download links for them.",
+	items: {
+		type: "object",
+		properties: {
+			ref: {
+				type: "string",
+				description: "Where the picture comes from: \"artifact:<file name>\" for something produced earlier in this conversation, or \"upload:<id or file name>\" for a picture the user attached. Never base64."
+			},
+			anchor: {
+				type: "object",
+				description: "Top-left cell the picture sits on. Both numbers are 1-based, so row 1 is the header row.",
+				properties: {
+					row: {
+						type: "integer",
+						minimum: 1
+					},
+					column: {
+						type: "integer",
+						minimum: 1
+					}
+				},
+				required: ["row", "column"],
+				additionalProperties: false
+			},
+			width: {
+				type: "integer",
+				minimum: 1,
+				description: "Displayed width in pixels."
+			},
+			height: {
+				type: "integer",
+				minimum: 1,
+				description: "Displayed height in pixels."
+			},
+			alt: {
+				type: "string",
+				description: "Short caption, used as the picture name inside the workbook."
+			}
+		},
+		required: [
+			"ref",
+			"anchor",
+			"width",
+			"height"
+		],
+		additionalProperties: false
+	}
+};
+function inputSchema(withImages) {
+	return {
+		type: "object",
+		properties: {
+			fileName: {
+				type: "string",
+				description: "Name for the workbook, for example \"sales-2026.xlsx\". A missing .xlsx suffix is added for you."
+			},
+			spec: {
+				type: "object",
+				properties: { sheets: {
+					type: "array",
+					minItems: 1,
+					maxItems: SPREADSHEET_LIMITS.sheets,
+					items: {
+						type: "object",
+						properties: {
+							name: {
+								type: "string",
+								description: "Sheet name: at most 31 characters, and none of : \\ / ? * [ ]"
+							},
+							columns: {
+								type: "array",
+								items: { type: "string" },
+								description: "Optional header row. When given it becomes the first, bold row."
+							},
+							rows: {
+								type: "array",
+								maxItems: SPREADSHEET_LIMITS.rowsPerSheet,
+								items: {
+									type: "array",
+									maxItems: SPREADSHEET_LIMITS.columnsPerSheet,
+									items: CELL_SCHEMA
+								}
+							},
+							...withImages ? { images: IMAGES_SCHEMA } : {}
+						},
+						required: ["name", "rows"],
+						additionalProperties: false
+					}
+				} },
+				required: ["sheets"],
+				additionalProperties: false
+			}
+		},
+		required: ["fileName", "spec"],
+		additionalProperties: false
+	};
+}
+function systemPrompt$1(withImages) {
+	return "Use export_spreadsheet when the user asks for a downloadable Excel file. The tool returns only a summary; the file itself is delivered to the user as a card. Do not re-read the file you just wrote. Cell values are written literally — the tool never turns text into a number or a date, and it writes no styling, formulas, merged cells or charts." + (withImages ? " Pictures do go in: put them in the sheet's \"images\" with a ref and an anchor cell. A picture the user attached to a message is already in this conversation — reference it as \"upload:<id or file name>\" and do not go looking for it on the page or in the download list first. When the user asks for a workbook of pictures, put the pictures in it — do not deliver the images separately and ask the user to insert them." : "");
+}
+function toolError$1(e) {
+	return {
+		ok: false,
+		content: [],
+		error: {
+			code: e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED",
+			message: messageOf(e)
+		}
+	};
+}
+const isRecord$1 = (v) => typeof v === "object" && v !== null;
+/**
+* FR-10.3a 的两条分支。忘写后缀是模型的高频行为，为它打断一整轮不划算；
+* 写成 `.csv` 则是**意图冲突**而不是疏漏，必须拒。
+*
+* 路径安全不在这里做：`writeArtifact` 那一条（`resolveInsideRoot`）是唯一的一份，
+* FR-10.3b 明确禁止另写一份。
+*/
+function resolveFileName$1(value) {
+	if (typeof value !== "string" || value.trim() === "") throw new WebSkillError("VALIDATION_FAILED", "export_spreadsheet requires a non-empty \"fileName\".");
+	const fileName = value.trim();
+	const lastSegment = fileName.split(/[\\/]/).pop() ?? "";
+	const dot = lastSegment.lastIndexOf(".");
+	const extension = dot <= 0 ? "" : lastSegment.slice(dot + 1);
+	if (extension === "") return `${fileName}${SPREADSHEET_EXTENSION}`;
+	if (extension.toLowerCase() === "xlsx") return fileName;
+	throw new WebSkillError("VALIDATION_FAILED", `export_spreadsheet writes .xlsx files; "${fileName}" asks for .${extension}. Drop the suffix or use .xlsx.`);
+}
+function summarize(spec) {
+	const sheets = spec.sheets;
+	const imageCount = sheets.reduce((total, sheet) => total + (sheet.images?.length ?? 0), 0);
+	return {
+		sheetCount: sheets.length,
+		rowCount: sheets.reduce((total, sheet) => total + sheet.rows.length, 0),
+		...imageCount > 0 ? { imageCount } : {}
+	};
+}
+/**
+* 把表格导出接到既有工具协议上。
+*
+* 做成 `ExternalToolSource` 而不是 `AgentLoop` 的内置数组（DV-4）：本工具需要
+* `argCaptureTrust` 与 `captureArgs` 两个钩子，内置数组里没有这两个概念。
+* @experimental
+*/
+function createSpreadsheetToolSource(options) {
+	const { writeArtifact, resolveImage } = options;
+	const withImages = resolveImage !== void 0;
+	const schema = inputSchema(withImages);
+	const prompt = systemPrompt$1(withImages);
+	return {
+		kind: "spreadsheet",
+		listToolSpecs: () => Promise.resolve(writeArtifact ? [{
+			name: EXPORT_SPREADSHEET_TOOL,
+			description: DESCRIPTION$2,
+			inputSchema: schema
+		}] : []),
+		systemPrompt: () => Promise.resolve(writeArtifact ? prompt : void 0),
+		canHandle: (name) => name === EXPORT_SPREADSHEET_TOOL,
+		captureArgs: (_name, args) => {
+			const spec = args["spec"];
+			const sheets = isRecord$1(spec) && Array.isArray(spec["sheets"]) ? spec["sheets"] : [];
+			const rowCount = sheets.reduce((total, sheet) => total + (isRecord$1(sheet) && Array.isArray(sheet["rows"]) ? sheet["rows"].length : 0), 0);
+			return {
+				...typeof args["fileName"] === "string" ? { fileName: args["fileName"] } : {},
+				sheetCount: sheets.length,
+				rowCount
+			};
+		},
+		call: async (name, args, context) => {
+			try {
+				if (name !== "export_spreadsheet" || !writeArtifact) throw new WebSkillError("TOOL_UNSUPPORTED", `${name} is not available in this host.`);
+				const fileName = resolveFileName$1(args["fileName"]);
+				const spec = args["spec"];
+				const bytes = await encodeSpreadsheet(spec, resolveImage ? (ref) => resolveImage(ref, context) : void 0);
+				const artifact = await writeArtifact(fileName, bytes, SPREADSHEET_MIME_TYPE, context);
+				return {
+					ok: true,
+					content: [{
+						type: "json",
+						data: {
+							path: artifact.path,
+							size: artifact.size,
+							...summarize(spec)
+						}
+					}]
+				};
+			} catch (e) {
+				return toolError$1(e);
+			}
+		}
+	};
+}
+
+//#endregion
+//#region ../agent/src/template/toolSource.ts
+/** @experimental */
+const INSPECT_TEMPLATE_TOOL = "inspect_template";
+/** @experimental */
+const FILL_TEMPLATE_TOOL = "fill_template";
+const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+const DOCX_MIME = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+/**
+* 骨架预算。模板不是文档，格子数是有限的（实测四份模板 32～56 个），
+* 但没人能保证用户不传一份两千行的台账进来——超了就截断并明说截了。
+* @experimental
+*/
+const TEMPLATE_INSPECT_BUDGET = {
+	cells: 400,
+	chars: 2e4
+};
+const INSPECT_DESCRIPTION = "Look inside an Excel (.xlsx) or Word (.docx) template the user attached, and report where things are: sheet names, cell addresses and their current text, merged regions; for Word, paragraph indexes and table/row/column coordinates. A cell reported with a \"formula\" is worked out by the template itself; fill the cells it reads instead. Call this before fill_template — you cannot guess a template's layout.";
+const FILL_DESCRIPTION = "Fill an Excel (.xlsx) or Word (.docx) template the user attached and hand the result back as a downloadable file. Everything the template already contains — styling, column widths, merged cells, formulas, headers and footers — is kept exactly as it was; only the places you name are written.";
+const TEMPLATE_ID = "The attachment id, or the id from list_downloaded_files.";
+function inspectSchema(idHint) {
+	return {
+		type: "object",
+		properties: {
+			template: {
+				type: "string",
+				description: templateIdDescription(idHint)
+			},
+			sheet: {
+				type: "string",
+				description: "Excel only: inspect just this sheet. Omit to inspect every sheet."
+			}
+		},
+		required: ["template"],
+		additionalProperties: false
+	};
+}
+/**
+* 取件号的可用形式由**宿主接了什么**决定，所以多出来的那一句由宿主给。
+* 无条件写死「还可以传在线文档」的后果是：没接那条通路的宿主里，模型会反复尝试一个永远读不到的号。
+*/
+function templateIdDescription(idHint) {
+	return idHint === void 0 || idHint === "" ? TEMPLATE_ID : `${TEMPLATE_ID} ${idHint}`;
+}
+const IMAGE_REF = {
+	type: "string",
+	description: "Where the picture comes from: \"artifact:<file name>\" for something produced earlier in this conversation, or \"upload:<id or file name>\" for a picture the user attached. Never base64."
+};
+function fillSchema(withImages, idHint) {
+	return {
+		type: "object",
+		properties: {
+			template: {
+				type: "string",
+				description: templateIdDescription(idHint)
+			},
+			fileName: {
+				type: "string",
+				description: "Name for the file you are producing. The template itself is never modified."
+			},
+			cells: {
+				type: "array",
+				description: "Excel only. Each entry writes one cell. Never write to a cell that inspect_template reported with a \"formula\" — an amount or a total is the template's own calculation, and overwriting it produces a sheet that no longer adds up when anything changes.",
+				items: {
+					type: "object",
+					properties: {
+						sheet: {
+							type: "string",
+							description: "Sheet name. Omit for the first sheet."
+						},
+						address: {
+							type: "string",
+							description: "A1-style address, for example \"B7\"."
+						},
+						value: {
+							type: "string",
+							description: "A plain number such as \"2\" or \"-1.5\" is stored as a number, so formulas and totals in the template add it up. Anything else is stored as text, including \"0123\", \"1,200\" and \"12 kg\" — write amounts as bare digits with no thousands separator, currency sign or unit, or the template's SUM will skip them. Everything is written literally: \"0123\" stays \"0123\". Use \"\" to clear the cell while keeping its formatting."
+						}
+					},
+					required: ["address", "value"],
+					additionalProperties: false
+				}
+			},
+			rows: {
+				type: "array",
+				description: "Excel only. Insert blank rows before writing cells, when the template has fewer detail rows than you need. Formulas, merged regions and the rows below move down with them; addresses in \"cells\" are the positions after the insert.",
+				items: {
+					type: "object",
+					properties: {
+						sheet: { type: "string" },
+						at: {
+							type: "integer",
+							minimum: 1,
+							description: "1-based row number the new rows are inserted before."
+						},
+						count: {
+							type: "integer",
+							minimum: 1
+						},
+						copyStyleFrom: {
+							type: "integer",
+							minimum: 1,
+							description: "Row whose formatting the new rows copy. Defaults to the row just above \"at\"."
+						}
+					},
+					required: ["at", "count"],
+					additionalProperties: false
+				}
+			},
+			texts: {
+				type: "array",
+				description: "Word only. Each entry replaces the WHOLE text of one paragraph or one table cell — not part of it. A header line often holds several fields at once (for example \"No.: ABC-01        Serial: \"), and writing only the field you are changing deletes the others. Copy the text inspect_template reported and change just the part that differs, keeping the spacing that lines the fields up.",
+				items: {
+					type: "object",
+					properties: {
+						paragraph: {
+							type: "integer",
+							minimum: 0,
+							description: "0-based body paragraph index."
+						},
+						table: {
+							type: "integer",
+							minimum: 0,
+							description: "0-based table index."
+						},
+						row: {
+							type: "integer",
+							minimum: 0
+						},
+						column: {
+							type: "integer",
+							minimum: 0
+						},
+						value: {
+							type: "string",
+							description: "Written literally, and it becomes the entire content of the target. Use \"\" to clear the target."
+						}
+					},
+					required: ["value"],
+					additionalProperties: false
+				}
+			},
+			...withImages ? { images: {
+				type: "array",
+				description: "Pictures to place in the template. Use this instead of telling the user to paste them in themselves. Each picture is scaled down to fit the cell it lands on and never overflows it.",
+				items: {
+					type: "object",
+					properties: {
+						ref: IMAGE_REF,
+						sheet: {
+							type: "string",
+							description: "Excel only."
+						},
+						address: {
+							type: "string",
+							description: "Excel only: A1-style cell the picture sits on."
+						},
+						paragraph: {
+							type: "integer",
+							minimum: 0,
+							description: "Word only."
+						},
+						table: {
+							type: "integer",
+							minimum: 0,
+							description: "Word only."
+						},
+						row: {
+							type: "integer",
+							minimum: 0,
+							description: "Word only."
+						},
+						column: {
+							type: "integer",
+							minimum: 0,
+							description: "Word only."
+						}
+					},
+					required: ["ref"],
+					additionalProperties: false
+				}
+			} } : {}
+		},
+		required: ["template", "fileName"],
+		additionalProperties: false
+	};
+}
+function systemPrompt(withImages) {
+	return "When the user gives you a form, a table or a report template and asks you to produce a filled-in copy, fill that template — do not build a new file from scratch and do not describe what to type where. Always call inspect_template first: the addresses and coordinates come from it, never from guesswork, and a wrong address is a wrong file. fill_template returns only a summary; the file is delivered to the user as a card, so do not read it back. The template is left untouched — everything it already contains is preserved, and you only name the places that change. When the template has too few detail rows for the data, insert rows instead of overwriting the rows below." + (withImages ? " A template that reserves space for a photo takes one: reference the picture as \"artifact:<name>\" or \"upload:<id or name>\" and give the cell it belongs in. Do not hand the picture over separately and ask the user to paste it." : "");
+}
+function toolError(e) {
+	return {
+		ok: false,
+		content: [],
+		error: {
+			code: e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED",
+			message: messageOf(e)
+		}
+	};
+}
+const isRecord = (v) => typeof v === "object" && v !== null;
+/**
+* 照着模板出文件（0.22.0 分册 42）。
+*
+* 两个工具而不是一个：模型得先看见模板的坐标，才谈得上决定往哪儿写。
+* 合成一个工具就只剩两条路——要么让模型盲填，要么每次把整份骨架塞进填值的返回里。
+* @experimental
+*/
+function createTemplateToolSource(options) {
+	const { files, xlsx, docx, writeArtifact, resolveImage } = options;
+	const withImages = resolveImage !== void 0;
+	const inspectInput = inspectSchema(options.idHint);
+	const schema = fillSchema(withImages, options.idHint);
+	const prompt = systemPrompt(withImages);
+	const available = () => xlsx !== void 0 || docx !== void 0;
+	const budgetOf = () => options.budget?.() ?? TEMPLATE_INSPECT_BUDGET;
+	return {
+		kind: "office-template",
+		listToolSpecs: () => {
+			if (!available()) return Promise.resolve([]);
+			const specs = [{
+				name: INSPECT_TEMPLATE_TOOL,
+				description: INSPECT_DESCRIPTION,
+				inputSchema: inspectInput
+			}];
+			if (writeArtifact !== void 0) specs.push({
+				name: FILL_TEMPLATE_TOOL,
+				description: FILL_DESCRIPTION,
+				inputSchema: schema
+			});
+			return Promise.resolve(specs);
+		},
+		systemPrompt: () => Promise.resolve(available() && writeArtifact !== void 0 ? prompt : void 0),
+		canHandle: (name) => name === "inspect_template" || name === "fill_template",
+		argCaptureTrust: (name) => name === "inspect_template" ? { tier: "reviewed" } : void 0,
+		captureArgs: (name, args) => {
+			if (name === "inspect_template") return args;
+			const count = (key) => Array.isArray(args[key]) ? args[key].length : 0;
+			return {
+				...typeof args["fileName"] === "string" ? { fileName: args["fileName"] } : {},
+				filledCount: count("cells") + count("texts"),
+				insertedRows: (Array.isArray(args["rows"]) ? args["rows"] : []).reduce((total, row) => total + (isRecord(row) && typeof row["count"] === "number" ? row["count"] : 0), 0),
+				imageCount: count("images")
+			};
+		},
+		call: async (name, args, context) => {
+			try {
+				if (name === "inspect_template") return await inspect(args, context);
+				if (name === "fill_template") return await fill(args, context);
+				throw new WebSkillError("TOOL_NOT_FOUND", `Unknown tool ${name}.`);
+			} catch (e) {
+				return toolError(e);
+			}
+		}
+	};
+	async function load(raw, tool, context) {
+		if (typeof raw !== "string" || raw === "") throw new WebSkillError("TOOL_UNSUPPORTED", `${tool} requires the "template" id of an attachment or download.`);
+		const file = await files.read(raw, context);
+		if (file === void 0) throw new WebSkillError("TOOL_UNSUPPORTED", `No readable file with id "${raw}". It is either not an attachment of the current message, or a download id that has since expired — list the downloads again to get a fresh one.`);
+		const format = sniffDocumentFormat(file.bytes, file.name);
+		if (format !== "xlsx" && format !== "docx") throw new WebSkillError("TEMPLATE_UNSUPPORTED", `"${file.name}" is not an Excel (.xlsx) or Word (.docx) file, so it cannot be used as a template.`);
+		if ((format === "xlsx" ? xlsx : docx) === void 0) throw new WebSkillError("TEMPLATE_UNSUPPORTED", `This environment cannot fill ${format} templates.`);
+		return {
+			name: file.name,
+			bytes: file.bytes,
+			format
+		};
+	}
+	async function inspect(args, context) {
+		const template = await load(args["template"], INSPECT_TEMPLATE_TOOL, context);
+		const budget = budgetOf();
+		if (template.format === "xlsx") {
+			const skeleton = await xlsx.read(template.bytes);
+			const only = typeof args["sheet"] === "string" ? args["sheet"] : void 0;
+			const sheets = only === void 0 ? skeleton.sheets : skeleton.sheets.filter((sheet) => sheet.name === only);
+			if (only !== void 0 && sheets.length === 0) throw new WebSkillError("TEMPLATE_TARGET_MISSING", `The workbook has no sheet named "${only}". It has: ${skeleton.sheets.map((s) => s.name).join(", ")}.`);
+			let left = budget.cells;
+			let truncated = false;
+			const described = sheets.map((sheet) => {
+				const cells = sheet.cells.slice(0, Math.max(left, 0));
+				if (cells.length < sheet.cells.length) truncated = true;
+				left -= cells.length;
+				return {
+					name: sheet.name,
+					range: sheet.range,
+					cells: cells.map((cell) => ({
+						address: cell.address,
+						text: clip(cell.text, budget.chars),
+						...cell.formula === void 0 ? {} : { formula: cell.formula }
+					})),
+					...sheet.merges.length > 0 ? { merges: [...sheet.merges] } : {},
+					...cells.length < sheet.cells.length ? { omittedCells: sheet.cells.length - cells.length } : {}
+				};
+			});
+			return json({
+				file: template.name,
+				format: "xlsx",
+				sheets: described,
+				...truncated ? { truncated: `Only the first ${budget.cells} filled cells are listed; inspect one sheet at a time.` } : {}
+			});
+		}
+		const skeleton = await docx.read(template.bytes);
+		let left = budget.cells;
+		const paragraphs = skeleton.paragraphs.filter((paragraph) => paragraph.text !== "").slice(0, left);
+		left -= paragraphs.length;
+		const cells = skeleton.cells.slice(0, Math.max(left, 0));
+		const tableCount = skeleton.cells.reduce((max, cell) => Math.max(max, cell.table + 1), 0);
+		const omitted = skeleton.cells.length - cells.length;
+		return json({
+			file: template.name,
+			format: "docx",
+			paragraphs: paragraphs.map((paragraph) => ({
+				index: paragraph.index,
+				text: clip(paragraph.text, budget.chars)
+			})),
+			tableCount,
+			cells: cells.map((cell) => ({
+				table: cell.table,
+				row: cell.row,
+				column: cell.column,
+				text: clip(cell.text, budget.chars),
+				...cell.gridSpan === void 0 ? {} : { gridSpan: cell.gridSpan },
+				...cell.vMerge === void 0 ? {} : { vMerge: cell.vMerge }
+			})),
+			...omitted > 0 ? { truncated: `${omitted} further table cell(s) are not listed; the template is larger than the budget.` } : {}
+		});
+	}
+	async function fill(args, context) {
+		if (writeArtifact === void 0) throw new WebSkillError("TOOL_UNSUPPORTED", `${FILL_TEMPLATE_TOOL} is not available in this host.`);
+		const template = await load(args["template"], FILL_TEMPLATE_TOOL, context);
+		const fileName = resolveFileName(args["fileName"], template.format);
+		const images = await resolveImages(args["images"], context);
+		if (template.format === "xlsx") {
+			const spec = {
+				...Array.isArray(args["rows"]) ? { rows: args["rows"] } : {},
+				...Array.isArray(args["cells"]) ? { cells: args["cells"] } : {},
+				...images.length > 0 ? { images: images.map((image) => {
+					const address = image.placement["address"];
+					if (typeof address !== "string" || address === "") throw new WebSkillError("TEMPLATE_ADDRESS_INVALID", `The picture "${image.ref}" needs an "address" telling which cell it goes on.`);
+					const sheet = image.placement["sheet"];
+					return {
+						address,
+						...typeof sheet === "string" ? { sheet } : {},
+						...image.bytes
+					};
+				}) } : {}
+			};
+			const bytes = await xlsx.fill(template.bytes, spec);
+			const artifact = await writeArtifact(fileName, bytes, XLSX_MIME, context);
+			return json({
+				path: artifact.path,
+				size: artifact.size,
+				filledCount: spec.cells?.length ?? 0,
+				insertedRows: (spec.rows ?? []).reduce((total, row) => total + row.count, 0),
+				...images.length > 0 ? { imageCount: images.length } : {}
+			});
+		}
+		const spec = {
+			...Array.isArray(args["texts"]) ? { texts: args["texts"] } : {},
+			...images.length > 0 ? { images: images.map((image) => ({
+				...pickCoordinates(image.placement),
+				...image.bytes
+			})) } : {}
+		};
+		const bytes = await docx.fill(template.bytes, spec);
+		const artifact = await writeArtifact(fileName, bytes, DOCX_MIME, context);
+		return json({
+			path: artifact.path,
+			size: artifact.size,
+			filledCount: spec.texts?.length ?? 0,
+			...images.length > 0 ? { imageCount: images.length } : {}
+		});
+	}
+	async function resolveImages(raw, context) {
+		if (!Array.isArray(raw) || raw.length === 0) return [];
+		if (resolveImage === void 0) throw new WebSkillError("TEMPLATE_IMAGE_UNRESOLVED", "This host cannot resolve picture references.");
+		const out = [];
+		for (const entry of raw) {
+			if (!isRecord(entry) || typeof entry["ref"] !== "string") throw new WebSkillError("TEMPLATE_IMAGE_UNRESOLVED", "Every picture needs a \"ref\".");
+			const ref = entry["ref"];
+			const bytes = await resolveImage(ref, context);
+			if (bytes === void 0) throw new WebSkillError("TEMPLATE_IMAGE_UNRESOLVED", `Nothing in this conversation matches the picture reference "${ref}".`);
+			out.push({
+				ref,
+				bytes,
+				placement: entry
+			});
+		}
+		return out;
+	}
+}
+function pickCoordinates(placement) {
+	const out = {};
+	for (const key of [
+		"paragraph",
+		"table",
+		"row",
+		"column"
+	]) {
+		const value = placement[key];
+		if (typeof value === "number" && Number.isInteger(value) && value >= 0) out[key] = value;
+	}
+	return out;
+}
+/** 后缀必须与模板同格式：拿 xlsx 模板出 .docx 是意图冲突，不是笔误 */
+function resolveFileName(value, format) {
+	if (typeof value !== "string" || value.trim() === "") throw new WebSkillError("VALIDATION_FAILED", `${FILL_TEMPLATE_TOOL} requires a non-empty "fileName".`);
+	const fileName = value.trim();
+	const lastSegment = fileName.split(/[\\/]/).pop() ?? "";
+	const dot = lastSegment.lastIndexOf(".");
+	const extension = dot <= 0 ? "" : lastSegment.slice(dot + 1).toLowerCase();
+	if (extension === "") return `${fileName}.${format}`;
+	if (extension === format) return fileName;
+	throw new WebSkillError("VALIDATION_FAILED", `The template is a .${format} file, so the result is a .${format} file; "${fileName}" asks for .${extension}.`);
+}
+function clip(text, limit) {
+	const max = Math.max(Math.floor(limit / 40), 40);
+	return text.length <= max ? text : `${text.slice(0, max)}…`;
+}
+function json(data) {
+	return {
+		ok: true,
+		content: [{
+			type: "json",
+			data
+		}]
+	};
+}
+
+//#endregion
+//#region ../agent/src/pageImage/toolSource.ts
+const CAPTURE_PAGE_IMAGE_TOOL = "capture_page_image";
+const DESCRIPTION$1 = "Save a picture that is already on the page as a run artifact, so a skill can place it in a document.";
+const INPUT_SCHEMA$1 = {
+	type: "object",
+	properties: {
+		ref: {
+			type: "string",
+			description: "Element handle from perceive_page. Only nodes marked \"capturable\" can be captured — those are the <img>, <canvas> and <svg> elements."
+		},
+		note: {
+			type: "string",
+			description: "Why you need this picture. It is shown to the user when asking for permission."
+		}
+	},
+	required: ["ref"],
+	additionalProperties: false
+};
+const SYSTEM_PROMPT$2 = "Use capture_page_image when a picture on the current page belongs in a document you are about to produce. It returns a reference, never the picture itself — pass that reference to the skill, do not try to read it back. Capturing does not tell you what the picture shows; ask for a page perception with images if you need that. Capture one picture per call, and only for nodes the page perception marked as capturable. Do not list the captured references back to the user. They are working material for the document, not a deliverable; say how many pictures went in and leave it at that.";
+const isFailure$1 = (result) => "reason" in result;
+/**
+* 页面取像工具（0.22.0 分册 12）。
+*
+* 与 `export_spreadsheet` 同一套 `ExternalToolSource` 范式（FR-12.1），
+* 不另造第二套注册机制。
+* @experimental
+*/
+function createPageImageToolSource(options) {
+	const { capture } = options;
+	return {
+		kind: "page-image",
+		listToolSpecs: () => Promise.resolve(capture ? [{
+			name: CAPTURE_PAGE_IMAGE_TOOL,
+			description: DESCRIPTION$1,
+			inputSchema: INPUT_SCHEMA$1
+		}] : []),
+		systemPrompt: () => Promise.resolve(capture ? SYSTEM_PROMPT$2 : void 0),
+		canHandle: (name) => name === CAPTURE_PAGE_IMAGE_TOOL,
+		captureArgs: (_name, args) => typeof args["ref"] === "string" ? { ref: args["ref"] } : {},
+		call: async (name, args, context) => {
+			try {
+				if (name !== "capture_page_image" || !capture) throw new WebSkillError("TOOL_UNSUPPORTED", `${name} is not available in this host.`);
+				const ref = args["ref"];
+				if (typeof ref !== "string" || ref.trim() === "") throw new WebSkillError("VALIDATION_FAILED", `${CAPTURE_PAGE_IMAGE_TOOL} requires a non-empty "ref" taken from a page perception.`);
+				const note = typeof args["note"] === "string" && args["note"].trim() !== "" ? args["note"].trim() : void 0;
+				const result = await capture({
+					ref: ref.trim(),
+					...note === void 0 ? {} : { note }
+				}, context);
+				if (isFailure$1(result)) {
+					const levels = result.triedLevels ?? [];
+					return {
+						ok: false,
+						content: [],
+						error: {
+							code: "TOOL_EXECUTION_FAILED",
+							message: levels.length > 0 ? `${result.reason} (tried: ${levels.join(", ")})` : result.reason
+						}
+					};
+				}
+				return {
+					ok: true,
+					content: [{
+						type: "json",
+						data: {
+							ref: ref.trim(),
+							artifact: result.artifact,
+							width: result.width,
+							height: result.height,
+							bytes: result.bytes
+						}
+					}]
+				};
+			} catch (e) {
+				return {
+					ok: false,
+					content: [],
+					error: {
+						code: e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED",
+						message: messageOf(e)
+					}
+				};
+			}
+		}
+	};
+}
+
+//#endregion
+//#region ../agent/src/remoteImage/toolSource.ts
+const FETCH_REMOTE_IMAGE_TOOL = "fetch_remote_image";
+const DESCRIPTION = "Download an image from a public URL and save it as a run artifact, so a skill can place it in a document.";
+const INPUT_SCHEMA = {
+	type: "object",
+	properties: {
+		url: {
+			type: "string",
+			description: "Absolute https:// or http:// address of the image. Addresses on private networks are refused."
+		},
+		note: {
+			type: "string",
+			description: "Why you need this image. It is shown to the user when asking for permission."
+		},
+		describe: {
+			type: "boolean",
+			description: "Attach the image itself to the result so you can look at it. Set it only when the user asked what the picture shows; leave it out when you are collecting images for a document."
+		}
+	},
+	required: ["url"],
+	additionalProperties: false
+};
+const SYSTEM_PROMPT$1 = "Use fetch_remote_image when a document you are about to produce needs an image that lives at a public URL. To just show a public image in the conversation, write plain markdown — ![alt](https://…) — and do not call this tool. It returns a reference to pass on to the skill: a reference is not a path and cannot be read back. Set \"describe\" to true only when the user asked what a picture shows — it attaches the image so you can look at it, which costs extra, so leave it out while you are only collecting images for a document. Without \"describe\" you have not seen the image: say you cannot see it rather than guessing. Never infer the subject from the URL, the file name or the site it came from. The user is asked for permission before the first download, because fetching reveals their IP address to that site. Fetch one image per call, and only from addresses you got from the page or from the user — never guess a URL. Do not list the fetched references back to the user; say how many images went into the document instead.";
+const isFailure = (result) => "reason" in result;
+/**
+* 外链图片抓取工具（0.22.0 分册 13）。
+*
+* 与 `capture_page_image` 同一套范式：模型给出来源、宿主拿字节、回给模型的只有引用。
+* 三种图片来源（上传、页面、外链）因此在技能那一侧长得一模一样（AC-G1）。
+* @experimental
+*/
+function createRemoteImageToolSource(options) {
+	const { fetchImage } = options;
+	return {
+		kind: "remote-image",
+		listToolSpecs: () => Promise.resolve(fetchImage ? [{
+			name: FETCH_REMOTE_IMAGE_TOOL,
+			description: DESCRIPTION,
+			inputSchema: INPUT_SCHEMA
+		}] : []),
+		systemPrompt: () => Promise.resolve(fetchImage ? SYSTEM_PROMPT$1 : void 0),
+		canHandle: (name) => name === FETCH_REMOTE_IMAGE_TOOL,
+		captureArgs: (_name, args) => typeof args["url"] === "string" ? { url: args["url"] } : {},
+		call: async (name, args, context) => {
+			try {
+				if (name !== "fetch_remote_image" || !fetchImage) throw new WebSkillError("TOOL_UNSUPPORTED", `${name} is not available in this host.`);
+				const url = args["url"];
+				if (typeof url !== "string" || url.trim() === "") throw new WebSkillError("VALIDATION_FAILED", `${FETCH_REMOTE_IMAGE_TOOL} requires a non-empty "url" pointing at an image.`);
+				const note = typeof args["note"] === "string" && args["note"].trim() !== "" ? args["note"].trim() : void 0;
+				const describe = args["describe"] === true;
+				const result = await fetchImage({
+					url: url.trim(),
+					...note === void 0 ? {} : { note },
+					...describe ? { describe } : {}
+				}, context);
+				if (isFailure(result)) return {
+					ok: false,
+					content: [],
+					error: {
+						code: "TOOL_EXECUTION_FAILED",
+						message: result.kind === void 0 ? result.reason : `${result.reason} [${result.kind}]`
+					}
+				};
+				const data = describe ? result.data : void 0;
+				const mimeType = describe ? result.mimeType : void 0;
+				const seen = data !== void 0 && mimeType !== void 0;
+				const content = [{
+					type: "json",
+					data: {
+						url: url.trim(),
+						artifact: result.artifact,
+						width: result.width,
+						height: result.height,
+						bytes: result.bytes,
+						...seen ? { note: "The image in the next message is the picture downloaded from this URL." } : {}
+					}
+				}];
+				if (data !== void 0 && mimeType !== void 0) content.push({
+					type: "image",
+					id: result.artifact.replace(/^artifact:/, ""),
+					mimeType,
+					data
+				});
+				return {
+					ok: true,
+					content
+				};
+			} catch (e) {
+				return {
+					ok: false,
+					content: [],
+					error: {
+						code: e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED",
+						message: messageOf(e)
+					}
+				};
+			}
+		}
+	};
+}
+
+//#endregion
+//#region ../agent/src/dwg/views.ts
+/**
+* 视图取用（0.22.0 分册 23 FR-23.5 / FR-23.7）。
+*
+* 单独成文件是因为 diff、导出、投放面三边都要用同一套「哪些视图、按什么配对」，
+* 各写一份迟早会在某一边把空布局漏掉。
+*/
+/** 模型空间视图的固定 id。两份图纸靠它配对 */
+const DWG_MODEL_VIEW_ID = "Model";
+/**
+* 文档的视图列表。
+*
+* 分册 23 之前解析出的文档没有 `views`，给它补一个模型空间视图：
+* 那时的 `entities` 本来就是模型空间的全部内容，语义对得上。
+*/
+function dwgViewsOf(doc) {
+	const views = doc.views;
+	if (views && views.length > 0) return views;
+	return [{
+		id: DWG_MODEL_VIEW_ID,
+		name: DWG_MODEL_VIEW_ID,
+		kind: "model",
+		entities: doc.entities,
+		bounds: doc.bounds,
+		viewports: []
+	}];
+}
+/** 按 id 取视图；取不到就退回第一个，而不是什么都没有 */
+function dwgPickView(doc, viewId) {
+	const views = dwgViewsOf(doc);
+	return views.find((v) => v.id === viewId) ?? views[0];
+}
+
+//#endregion
+//#region ../agent/src/dwg/toolSource.ts
+const VIEW_DWG_TOOL = "view_dwg";
+/** 图层汇总进上下文的条数上限：图纸动辄几十上百个图层，全给等于把预算烧在噪声上 */
+const MAX_LAYER_ROWS = 25;
+/** 叠加的硬上限（FR-35.1）。三份叠在一起没有颜色方案能让人分得清 */
+const MAX_DRAWINGS = 2;
+const VIEW_SCHEMA = {
+	type: "object",
+	properties: { files: {
+		type: "array",
+		items: {
+			type: "string",
+			description: "The id of a .dwg. It can come from the download list, from a file the user attached, or from the id that read_linked_document returns for a drawing on the page. The download listing marks .dwg as unreadable because it has no text to extract — pass the id here anyway."
+		},
+		minItems: 1,
+		maxItems: MAX_DRAWINGS,
+		description: "One drawing id, or two to stack them on top of each other. Two drawings are overlaid in the same coordinate system so the user can see where they differ and measure it — the first id becomes the top layer. Pass two only when the user asked to look at two drawings."
+	} },
+	required: ["files"],
+	additionalProperties: false
+};
+const SYSTEM_PROMPT = "Use view_dwg to show a CAD drawing. Drawings reach you as ids, never as content: from the download list, from a file the user attached, or from read_linked_document when the drawing is linked on the page. Those three all hand you an id and nothing else — a drawing is far too large to put in front of you, so an id with no readable content is the expected outcome, not a failed read. list_downloaded_files reports .dwg as unreadable — that verdict is about extracting text, and does not apply here: hand the id to this tool and it will read the drawing itself. It opens a viewer for the user and returns only a summary to you — the drawing geometry never comes back as data, so do not ask for entity coordinates and do not try to describe the drawing from the tool result alone. The user drives the viewer: they switch between sheets and model space, turn layers on and off, and measure distances, areas and angles there. Pass two ids to stack two drawings in one viewer. That is for the user to look at, not for you to compare: you never receive the geometry, so you cannot say what changed between them. Tell the user to look and to measure, and offer to explain what the viewer controls do. The \"approximated\" count is geometry drawn imprecisely and the \"notDrawn\" count is geometry missing from the viewer entirely — say which one applies rather than merging them.";
+function omissionNote(doc) {
+	return doc.omissions.map((o) => {
+		switch (o.reason) {
+			case "acis-not-tessellated": return `${o.count} ${o.kind} solid(s) cannot be displayed: they are ACIS solids, which this reader does not tessellate.`;
+			case "pattern-approximated": return `${o.count} ${o.kind} entity(ies) are drawn with an approximated fill pattern, not the exact hatch definition.`;
+			case "pattern-too-dense": return `${o.count} hatch(es) have a pattern too dense to draw; their outline is shown without the fill.`;
+			case "linetype-unavailable": return `${o.count} entity(ies) reference a line type whose dash definition is unavailable; they are drawn solid.`;
+			case "unsupported-entity": return `${o.count} ${o.kind} entity(ies) are not supported and were not drawn.`;
+		}
+	});
+}
+function summariseDocument(doc) {
+	const views = dwgViewsOf(doc);
+	const tally = (severity) => doc.omissions.filter((o) => o.severity === severity).reduce((total, o) => total + o.count, 0);
+	return {
+		version: doc.version,
+		entities: views.reduce((total, v) => total + v.entities.length, 0),
+		views: views.map((v) => ({
+			id: v.id,
+			kind: v.kind,
+			entities: v.entities.length,
+			viewports: v.viewports.length
+		})),
+		layers: doc.layers.map((l) => l.name).slice(0, MAX_LAYER_ROWS),
+		layerCount: doc.layers.length,
+		approximated: tally("degraded"),
+		notDrawn: tally("dropped"),
+		notes: omissionNote(doc)
+	};
+}
+/**
+* 取件号列表（FR-35.1 / AC-35.2）。
+*
+* 超过上限**整调用拒绝**，不截断：模型传了三份却只看到两份，
+* 它会把缺的那份归因到图纸而不是工具。
+*/
+function requireFiles(args) {
+	const raw = args["files"];
+	if (!Array.isArray(raw) || raw.length === 0) throw new WebSkillError("VALIDATION_FAILED", `${VIEW_DWG_TOOL} requires a non-empty "files" array.`);
+	if (raw.length > MAX_DRAWINGS) throw new WebSkillError("VALIDATION_FAILED", `${VIEW_DWG_TOOL} opens at most ${MAX_DRAWINGS} drawings at once; ${raw.length} were requested. Ask the user which two to look at.`);
+	return raw.map((value, index) => {
+		if (typeof value !== "string" || value.trim() === "") throw new WebSkillError("VALIDATION_FAILED", `${VIEW_DWG_TOOL} "files[${index}]" must be a non-empty string.`);
+		return value.trim();
+	});
+}
+/** 宽松判断：只要带协议头就按链接处理。宁可多脱敏一次，也不要漏掉一个带令牌的地址 */
+function looksLikeUrl(value) {
+	return /^[a-z][a-z0-9+.-]*:\/\//i.test(value.trim());
+}
+/** 把 `load()` 的两种返回形态归一（FR-31.1）。判据是有没有 `document`，不是 `in` 关键字之外的猜测 */
+async function readDrawing(load, file, context) {
+	const loaded = await load(file, context);
+	if (!("document" in loaded)) return { document: loaded };
+	const name = typeof loaded.name === "string" ? loaded.name.trim() : "";
+	return {
+		document: loaded.document,
+		...name === "" ? {} : { name }
+	};
+}
+/**
+* DWG 查看工具（0.22.0 分册 19，分册 34 收敛为单工具）。
+*
+* 与 `capture_page_image` 同一套 `ExternalToolSource` 范式。
+* 解析与投放都由宿主注入：本包不认识 `.dwg` 字节，也不认识 `documentSurface`。
+* @experimental
+*/
+function createDwgToolSource(options) {
+	const { load, project } = options;
+	const available = load !== void 0 && project !== void 0;
+	return {
+		kind: "dwg",
+		listToolSpecs: () => Promise.resolve(available ? [{
+			name: VIEW_DWG_TOOL,
+			description: "Open a CAD drawing (DWG) in a viewer.",
+			inputSchema: VIEW_SCHEMA
+		}] : []),
+		systemPrompt: () => Promise.resolve(available ? SYSTEM_PROMPT : void 0),
+		canHandle: (name) => name === VIEW_DWG_TOOL,
+		/**
+		* 已审查（分册 30）：文件引用**通常**是用户可见的名字。
+		* 但 schema 允许传页面上的链接，而链接可能是带签名令牌的临时地址——
+		* 那种东西进技能快照就是把凭证写进一份可分享的产物。
+		* 所以不是把字段永久标成敏感，而是本次引用长得像 URL 时整调用不留。
+		*/
+		argCaptureTrust: (name, args) => {
+			if (name !== "view_dwg") return void 0;
+			const files = args["files"];
+			return Array.isArray(files) && files.some((f) => typeof f === "string" && looksLikeUrl(f)) ? { tier: "untrusted" } : { tier: "reviewed" };
+		},
+		captureArgs: (_name, args) => {
+			const files = args["files"];
+			return Array.isArray(files) ? { files: files.filter((f) => typeof f === "string") } : {};
+		},
+		call: async (name, args, context) => {
+			try {
+				if (!available || name !== "view_dwg") throw new WebSkillError("TOOL_UNSUPPORTED", `${name} is not available in this host.`);
+				const files = requireFiles(args);
+				const drawings = [];
+				for (const file of files) {
+					const drawing = await readDrawing(load, file, context);
+					drawings.push({
+						title: file,
+						document: drawing.document,
+						...drawing.name === void 0 ? {} : { fileName: drawing.name }
+					});
+				}
+				await project({ drawings }, context);
+				return {
+					ok: true,
+					content: [{
+						type: "json",
+						data: { drawings: drawings.map((d) => ({
+							file: d.title,
+							...d.fileName === void 0 ? {} : { fileName: d.fileName },
+							...summariseDocument(d.document)
+						})) }
+					}]
+				};
+			} catch (e) {
+				return {
+					ok: false,
+					content: [],
+					error: {
+						code: e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED",
+						message: messageOf(e)
+					}
+				};
+			}
+		}
+	};
+}
+
+//#endregion
+export { CAPTURE_PAGE_IMAGE_TOOL, CLOSE_PAGE_TAB_TOOL, DEFAULT_MAX_DATA_SOURCE_BYTES, DELEGATE_TASK_TOOL, DELEGATION_SYSTEM_PROMPT, DOCUMENT_READ_BUDGET, DOWNLOAD_WAIT_DEFAULT_MS, DOWNLOAD_WAIT_MAX_MS, DOWNLOAD_WAIT_MIN_MS, DWG_MODEL_VIEW_ID, DataSourceCandidatePolicy, DataSourcePolicy, DelegationOrchestrator, DownloadedFilePolicy, EMU_PER_PIXEL, EMU_PER_POINT, EMU_PER_TWIP, EXPORT_SPREADSHEET_TOOL, FETCH_REMOTE_IMAGE_TOOL, FILL_TEMPLATE_TOOL, FOCUS_PAGE_TAB_TOOL, GENERATE_SKILL_TOOL, INSPECT_TEMPLATE_TOOL, LIST_DOWNLOADED_FILES_TOOL, LIST_PAGE_TABS_TOOL, MANAGE_TODO_TOOL, MAX_DIGIT_WIDTH, PAGE_ACTION_KINDS, PAGE_ACTION_SYSTEM_PROMPT, PAGE_ACTION_TOOL, PAGE_DOCUMENT_REF, PDF_GARBLED_RATIO, PDF_LARGE_IMAGE_RATIO, PERCEIVE_PAGE_TOOL, PERCEPTION_PAGING_DEFAULTS, PERCEPTION_SYSTEM_PROMPT, PageActionPolicy, PagePerceptionPolicy, READ_DOCUMENT_TOOL, READ_DOWNLOADED_FILE_TOOL, SKILL_GENERATION_SYSTEM_PROMPT, SkillGenerator, TAB_WORKSET_DEFAULT_MAX, TAB_WORKSET_MAX_MAX, TAB_WORKSET_MIN_MAX, TAB_WORKSET_SYSTEM_PROMPT, TEMPLATE_INSPECT_BUDGET, TODO_SYSTEM_PROMPT, TabWorksetPolicy, TodoStore, VIEW_DWG_TOOL, asReadMode, clampDownloadWaitMs, clampWorksetMax, columnWidthToPixels, createDelegationToolSource, createDocumentToolSource, createDownloadedFileToolSource, createDwgToolSource, createHttpDataSourceTransport, createPageActionToolSource, createPageImageToolSource, createPagePerceptionToolSource, createRemoteImageToolSource, createSkillGenerationToolSource, createSpreadsheetToolSource, createTabWorksetToolSource, createTemplateToolSource, createTodoToolSource, defersImage, dwgPickView, dwgViewsOf, fitWithin, formatCellAddress, frameLabel, frameSteps, isPdfTextTrustworthy, isRangeTopLeft, measurePdfTextQuality, parseCellAddress, parseCellRange, rangeContains, readImageSize, sniffDocumentFormat, takesImage, toActionFrameScopes, toFrameScopes, withDelegationOrigin };