@webskill/sdk 0.21.0 → 0.23.0

package/dist/agent.js

@@ -1,10 +1,10 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
-import { b as parseSkillMarkdown, y as isValidSkillName } from "./skill-CAJMsLod.js";
+import { b as parseSkillMarkdown, y as isValidSkillName } from "./skill-WSUDp6A1.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
 import { n as sanitizeUntrustedLine, t as UNTRUSTED_LINE_LIMIT } from "./untrustedText-BIaRvPZK.js";
-import { c as formatAttachmentText, o as XLSX_MIME, s as classifyAttachment } from "./kind-DaKqLX2F.js";
-import { c as SPREADSHEET_EXTENSION, f as DEFAULT_MAX_DATA_SOURCE_BYTES, l as SPREADSHEET_LIMITS, o as toBase64, s as encodeSpreadsheet, u as SPREADSHEET_MIME_TYPE } from "./linkedDocument-C0gj1sMq.js";
-import { _ as frameSteps, a as defersImage, c as isPdfTextTrustworthy, d as DOCUMENT_READ_BUDGET, f as PAGE_ACTION_KINDS, g as frameLabel, h as toFrameScopes, i as asReadMode, l as measurePdfTextQuality, m as toActionFrameScopes, n as READ_DOCUMENT_TOOL, o as takesImage, p as PAGE_DOCUMENT_REF, r as createDocumentToolSource, s as PDF_GARBLED_RATIO, t as PDF_LARGE_IMAGE_RATIO, u as sniffDocumentFormat } from "./toolSource-C9oNuKmr.js";
+import { d as extractedDocumentFormat, f as formatAttachmentText, u as classifyAttachment } from "./kind-Dc8x0HWz.js";
+import { c as toBase64, d as SPREADSHEET_LIMITS, f as SPREADSHEET_MIME_TYPE, l as encodeSpreadsheet, m as DEFAULT_MAX_DATA_SOURCE_BYTES, u as SPREADSHEET_EXTENSION } from "./linkedDocument-CZZOl9cO.js";
+import { A as frameSteps, C as DOCUMENT_READ_BUDGET, D as SCROLL_DIRECTIONS, E as toActionFrameScopes, O as toFrameScopes, S as sniffDocumentFormat, T as PAGE_DOCUMENT_REF, _ as defersImage, a as columnWidthToPixels, b as isPdfTextTrustworthy, c as isRangeTopLeft, d as rangeContains, f as readImageSize, g as asReadMode, h as createDocumentToolSource, i as MAX_DIGIT_WIDTH, k as frameLabel, l as parseCellAddress, m as READ_DOCUMENT_TOOL, n as EMU_PER_POINT, o as fitWithin, p as PDF_LARGE_IMAGE_RATIO, r as EMU_PER_TWIP, s as formatCellAddress, t as EMU_PER_PIXEL, u as parseCellRange, v as takesImage, w as PAGE_ACTION_KINDS, x as measurePdfTextQuality, y as PDF_GARBLED_RATIO } from "./geometry-CRhuySKV.js";
 
 //#region ../agent/src/todo/store.ts
 const STATUSES = [
@@ -66,13 +66,18 @@ var TodoStore = class {
 	/**
 	* 更新单条。置为 `in-progress` 时其余进行中条目降级为 `pending`，
 	* 每条降级各发一次 `todo.updated`，事件序列与状态变化一一对应。
+	*
+	* `options.concurrent` 由**编排器**在并发委派时传（0.23.0 分册 19 FR-19.9）：
+	* 几个子 agent 真的在同时跑，把别人降级回 `pending` 是在界面上说谎。
+	* 模型经 `manage_todo` 的写入不传它，仍维持「同时只有一条进行中」——
+	* 那条约束针对的是模型乱标（名义并行、实则一件事），不是真并发。
 	*/
-	update(id, patch) {
+	update(id, patch, options) {
 		const target = this.#items.find((item) => item.id === id);
 		if (!target) throw new WebSkillError("TODO_ITEM_NOT_FOUND", `Todo item "${id}" does not exist in the current list`);
 		if (patch.status !== void 0 && !STATUSES.includes(patch.status)) throw new WebSkillError("TODO_LIST_INVALID", `Todo item "${id}" has an unknown status; expected one of ${STATUSES.join(", ")}`);
 		const demoted = [];
-		if (patch.status === "in-progress") for (const item of this.#items) {
+		if (patch.status === "in-progress" && options?.concurrent !== true) for (const item of this.#items) {
 			if (item.id === id || item.status !== "in-progress") continue;
 			item.status = "pending";
 			demoted.push(item);
@@ -130,7 +135,7 @@ const STATUS_ENUM = [
 	"completed"
 ];
 const TODO_TOOL_DESCRIPTION = "Maintain the visible task list for a multi-step request. The rules are in the system prompt.";
-const INPUT_SCHEMA$5 = {
+const INPUT_SCHEMA$6 = {
 	type: "object",
 	properties: {
 		action: {
@@ -183,7 +188,7 @@ const INPUT_SCHEMA$5 = {
 	required: ["action"],
 	additionalProperties: false
 };
-function toolError$7(code, message) {
+function toolError$8(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -232,15 +237,15 @@ function createTodoToolSource(options = {}) {
 		try {
 			if (action === "create") {
 				const items = parseItems(args["items"]);
-				if (typeof items === "string") return Promise.resolve(toolError$7("VALIDATION_FAILED", items));
+				if (typeof items === "string") return Promise.resolve(toolError$8("VALIDATION_FAILED", items));
 				const list = store.create(items);
 				return Promise.resolve(ok(events, progressText(list.items)));
 			}
 			if (action === "update") {
 				const id = args["id"];
 				const status = args["status"];
-				if (typeof id !== "string") return Promise.resolve(toolError$7("VALIDATION_FAILED", "The \"id\" argument is required for action \"update\""));
-				if (status !== void 0 && typeof status !== "string") return Promise.resolve(toolError$7("VALIDATION_FAILED", "The \"status\" argument must be a string"));
+				if (typeof id !== "string") return Promise.resolve(toolError$8("VALIDATION_FAILED", "The \"id\" argument is required for action \"update\""));
+				if (status !== void 0 && typeof status !== "string") return Promise.resolve(toolError$8("VALIDATION_FAILED", "The \"status\" argument must be a string"));
 				const title = args["title"];
 				const list = store.update(id, {
 					...status !== void 0 ? { status } : {},
@@ -252,10 +257,10 @@ function createTodoToolSource(options = {}) {
 				store.clear();
 				return Promise.resolve(ok(events, progressText([])));
 			}
-			return Promise.resolve(toolError$7("VALIDATION_FAILED", "The \"action\" argument must be one of create, update, clear"));
+			return Promise.resolve(toolError$8("VALIDATION_FAILED", "The \"action\" argument must be one of create, update, clear"));
 		} catch (e) {
 			const code = e instanceof Error && "code" in e ? String(e.code) : "VALIDATION_FAILED";
-			return Promise.resolve(toolError$7(code, e instanceof Error ? e.message : String(e)));
+			return Promise.resolve(toolError$8(code, e instanceof Error ? e.message : String(e)));
 		} finally {
 			unsubscribe();
 		}
@@ -267,7 +272,7 @@ function createTodoToolSource(options = {}) {
 		listToolSpecs: () => Promise.resolve([{
 			name: MANAGE_TODO_TOOL,
 			description: TODO_TOOL_DESCRIPTION,
-			inputSchema: INPUT_SCHEMA$5
+			inputSchema: INPUT_SCHEMA$6
 		}]),
 		canHandle: (name) => name === MANAGE_TODO_TOOL,
 		argCaptureTrust: (name) => name === "manage_todo" ? { tier: "reviewed" } : void 0,
@@ -291,6 +296,9 @@ function ok(events, text) {
 //#endregion
 //#region ../agent/src/skillGeneration/generator.ts
 const DEFAULT_MAX_PER_SESSION = 3;
+/** 缺省体积闸门（0.23.0 分册 20 FR-20.12）：宿主可经 policy 覆盖 */
+const DEFAULT_MAX_BINARY_BYTES = 10 * 1024 * 1024;
+const DEFAULT_MAX_TOTAL_BINARY_BYTES = 25 * 1024 * 1024;
 const SCRIPT_EXTENSIONS = [".ts", ".js"];
 /** 缺省英文模板：与 0.9.0 之前硬编码的正文逐字一致 */
 function defaultConfirmSkill(draft) {
@@ -322,11 +330,66 @@ function validateDraft(draft) {
 	}
 }
 /** 确认面板正文：完整 SKILL.md + 附带文件，供用户逐字检查（FR-9.4 风险缓解） */
-function previewOf(draft) {
+function previewOf(draft, binaries) {
 	const sections = [`SKILL.md\n${"─".repeat(32)}\n${draft.content}`];
-	for (const file of draft.files ?? []) sections.push(`${file.path}\n${"─".repeat(32)}\n${file.content}`);
+	for (const file of draft.files ?? []) {
+		const binary = binaries.get(file.path);
+		const body = binary === void 0 ? file.content : `[binary ${binary.size} bytes from "${binary.sourceName}"]\nsha256: ${binary.sha256}`;
+		sections.push(`${file.path}\n${"─".repeat(32)}\n${body}`);
+	}
 	return sections.join("\n\n");
 }
+/** 环境无关 sha256（WebCrypto；Node ≥17 与浏览器均有 globalThis.crypto.subtle） */
+async function sha256Hex(bytes) {
+	const copy = new ArrayBuffer(bytes.byteLength);
+	new Uint8Array(copy).set(bytes);
+	const digest = await globalThis.crypto.subtle.digest("SHA-256", copy);
+	return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+/**
+* 把模型指认的附件变成字节（0.23.0 分册 20 §2.4）。
+*
+* 排在用户确认**之前**：「那个附件取不到」「超出上限」这类失败与用户当时正在做的事
+* 直接相关，拖到提交时才报，用户已经点完同意、等完一轮审核了。
+* 上限也在这里判——**拒绝必须发生在写盘之前**，先复制再检查会把超限的字节先落一遍磁盘。
+*/
+async function materializeBinaries(draft, options) {
+	const claimed = (draft.files ?? []).filter((file) => file.attachmentId !== void 0);
+	const out = /* @__PURE__ */ new Map();
+	if (claimed.length === 0) return out;
+	const resolve = options.resolveAttachment;
+	if (resolve === void 0) fail("This host cannot put uploaded files into a skill. Remove \"attachmentId\" from the file entries and write their contents instead.");
+	const maxOne = options.policy?.maxBinaryBytes ?? DEFAULT_MAX_BINARY_BYTES;
+	const maxTotal = options.policy?.maxTotalBinaryBytes ?? DEFAULT_MAX_TOTAL_BINARY_BYTES;
+	let total = 0;
+	for (const file of claimed) {
+		const id = file.attachmentId;
+		const attachment = await resolve(id);
+		if (attachment === void 0) fail(`No file with attachment id "${id}" was uploaded in this conversation, so "${file.path}" cannot be added to the skill.`, {
+			attachmentId: id,
+			path: file.path
+		});
+		const size = attachment.bytes.byteLength;
+		if (size > maxOne) fail(`The attached file "${attachment.name}" is ${size} bytes, above the ${maxOne} byte limit for one file.`, {
+			path: file.path,
+			size,
+			limit: maxOne
+		});
+		total += size;
+		if (total > maxTotal) fail(`The attached files add up to ${total} bytes, above the ${maxTotal} byte limit for one skill.`, {
+			path: file.path,
+			total,
+			limit: maxTotal
+		});
+		out.set(file.path, {
+			bytes: attachment.bytes,
+			size,
+			sha256: await sha256Hex(attachment.bytes),
+			sourceName: attachment.name
+		});
+	}
+	return out;
+}
 /**
 * 工具名硬校（FR-30.4 / AC-30.8）。
 *
@@ -422,6 +485,7 @@ var SkillGenerator = class {
 			assertStepsAreNotTruncated(draft, trace.records);
 		}
 		this.#used += 1;
+		const binaries = await materializeBinaries(draft, this.#options);
 		const evidence = trace.available ? buildTraceEvidence(draft, trace.records) : void 0;
 		this.#requestSeq += 1;
 		const response = await this.#options.ui.request({
@@ -430,7 +494,7 @@ var SkillGenerator = class {
 			capability: "confirm",
 			message: this.#options.messages?.confirmSkill?.(draft) ?? defaultConfirmSkill(draft),
 			details: {
-				preview: previewOf(draft),
+				preview: previewOf(draft, binaries),
 				...evidence !== void 0 ? { traceEvidence: evidence } : {}
 			}
 		});
@@ -439,7 +503,8 @@ var SkillGenerator = class {
 		const { id } = await sink.submit({
 			draft,
 			confirmedAt,
-			...sessionId !== void 0 ? { sessionId } : {}
+			...sessionId !== void 0 ? { sessionId } : {},
+			...binaries.size > 0 ? { binaries } : {}
 		});
 		return {
 			status: "submitted",
@@ -491,6 +556,10 @@ const SKILL_GENERATION_SYSTEM_PROMPT = [
 	"- `content` must be a complete SKILL.md: YAML frontmatter with `name` and `description`,",
 	"  then the instructions as Markdown. The frontmatter `name` must equal the `name` argument.",
 	"- Put helper scripts under `scripts/` and use the `.ts` or `.js` extension.",
+	"- A file shipped with the skill (a template spreadsheet, a reference document) is addressed",
+	"  from inside SKILL.md as `skill:<the skill name>/<the path you gave it>`, for example",
+	"  `skill:monthly-report/assets/template.xlsx`. Write that, never the attachment id of this",
+	"  conversation — that id is gone by the time anyone uses the skill.",
 	"- Never copy credentials, tokens or personal data into the skill.",
 	"- The user has to confirm every candidate, and the candidate stays unusable until a reviewer",
 	"  approves it. Say so instead of promising the skill is ready."
@@ -500,7 +569,7 @@ const SKILL_GENERATION_SYSTEM_PROMPT = [
 //#region ../agent/src/skillGeneration/toolSource.ts
 const GENERATE_SKILL_TOOL = "generate_skill";
 const TOOL_DESCRIPTION = "Turn the procedure just demonstrated in this conversation into a skill candidate. The user must confirm it, and a reviewer must approve it before anyone can use it.";
-const INPUT_SCHEMA$4 = {
+const INPUT_SCHEMA$5 = {
 	type: "object",
 	properties: {
 		name: {
@@ -517,17 +586,24 @@ const INPUT_SCHEMA$4 = {
 		},
 		files: {
 			type: "array",
-			description: "Optional helper scripts or reference files shipped with the skill",
+			description: "Optional helper scripts or reference files shipped with the skill. To ship a file the user uploaded in this conversation (a spreadsheet or document used as a template), give its attachment id instead of \"content\" — the skill then carries the real file and the user never has to upload it again. Do not retype an uploaded file's contents: you only ever saw text extracted from it, so what you write would not be the same file.",
 			items: {
 				type: "object",
 				properties: {
 					path: {
 						type: "string",
-						description: "Relative path, e.g. \"scripts/check.ts\""
+						description: "Relative path, e.g. \"scripts/check.ts\" or \"references/template.xlsx\""
 					},
-					content: { type: "string" }
+					content: {
+						type: "string",
+						description: "The file contents. Omit when \"attachmentId\" is given."
+					},
+					attachmentId: {
+						type: "string",
+						description: "Id of a file uploaded in this conversation. Its bytes are copied into the skill as-is. Omit when \"content\" is given. This id exists only in this conversation, so SKILL.md must address the shipped file as \"skill:<the skill name>/<its path in this list>\" instead."
+					}
 				},
-				required: ["path", "content"],
+				required: ["path"],
 				additionalProperties: false
 			}
 		},
@@ -558,7 +634,7 @@ const INPUT_SCHEMA$4 = {
 	],
 	additionalProperties: false
 };
-function toolError$6(code, message) {
+function toolError$7(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -585,10 +661,22 @@ function readDraft(args) {
 	for (const entry of rawFiles) {
 		if (typeof entry !== "object" || entry === null) return "Every entry in \"files\" must be an object";
 		const record = entry;
-		if (typeof record["path"] !== "string" || typeof record["content"] !== "string") return "Every attached file needs string \"path\" and \"content\"";
+		if (typeof record["path"] !== "string") return "Every attached file needs a string \"path\"";
+		const attachmentId = record["attachmentId"];
+		if (attachmentId !== void 0 && (typeof attachmentId !== "string" || attachmentId.trim() === "")) return "An attached file's \"attachmentId\" must be a non-empty string";
+		if (attachmentId === void 0) {
+			if (typeof record["content"] !== "string") return "Every attached file needs string \"content\", or an \"attachmentId\" pointing at an uploaded file";
+			files.push({
+				path: record["path"],
+				content: record["content"]
+			});
+			continue;
+		}
+		if (typeof record["content"] === "string" && record["content"] !== "") return "An attached file takes either \"content\" or \"attachmentId\", not both";
 		files.push({
 			path: record["path"],
-			content: record["content"]
+			content: "",
+			attachmentId
 		});
 	}
 	return {
@@ -627,7 +715,7 @@ function createSkillGenerationToolSource(options) {
 	const generator = new SkillGenerator(options);
 	const call = async (_name, args) => {
 		const draft = readDraft(args);
-		if (typeof draft === "string") return toolError$6("SKILL_GENERATION_VALIDATION_FAILED", draft);
+		if (typeof draft === "string") return toolError$7("SKILL_GENERATION_VALIDATION_FAILED", draft);
 		try {
 			const outcome = await generator.generate(draft);
 			if (outcome.status === "declined") return {
@@ -651,7 +739,7 @@ function createSkillGenerationToolSource(options) {
 				}]
 			};
 		} catch (e) {
-			return toolError$6(e instanceof Error && "code" in e ? String(e.code) : "SKILL_GENERATION_VALIDATION_FAILED", e instanceof Error ? e.message : String(e));
+			return toolError$7(e instanceof Error && "code" in e ? String(e.code) : "SKILL_GENERATION_VALIDATION_FAILED", e instanceof Error ? e.message : String(e));
 		}
 	};
 	return {
@@ -660,7 +748,7 @@ function createSkillGenerationToolSource(options) {
 		listToolSpecs: () => Promise.resolve([{
 			name: GENERATE_SKILL_TOOL,
 			description: TOOL_DESCRIPTION,
-			inputSchema: INPUT_SCHEMA$4
+			inputSchema: INPUT_SCHEMA$5
 		}]),
 		canHandle: (name) => name === GENERATE_SKILL_TOOL,
 		argCaptureTrust: (name) => name === "generate_skill" ? { tier: "reviewed" } : void 0,
@@ -670,13 +758,12 @@ function createSkillGenerationToolSource(options) {
 
 //#endregion
 //#region ../agent/src/delegation/orchestrator.ts
-const DEFAULT_MAX_TURNS = 8;
 /**
-* 串行委派编排器（设计 03 §13–§16）。
+* 委派编排器（设计 03 §13–§16，并发改造见 0.23.0 分册 19）。
 *
-* 严格串行由**内部互斥**保证而不是调用方自觉：并发委派会产生并发待决交互，
-* 而当前交互模型是单一待决 nonce，届时表现为「点了没反应」。
-* 放开并发必须显式改这里的守卫，不会悄悄发生。
+* 并发放开的前提是**并行的是执行、不是提问**：待决交互仍然一次只呈现一张，
+* 由 `ReactBridgeState` / `specInteractionChannel` 的队列保证。
+* 若要在别处复用本编排器，那两处的排队语义是它的前置条件。
 *
 * 上下文隔离靠回值形状达成：只有 `summary` 回到父 agent，
 * 子 agent 的消息历史根本不经过本对象。
@@ -684,34 +771,62 @@ const DEFAULT_MAX_TURNS = 8;
 */
 var DelegationOrchestrator = class {
 	#options;
-	#running;
+	/** 正在跑的子 run：id → 任务描述 */
+	#running = /* @__PURE__ */ new Map();
+	/** 等名额的委派，先进先出 */
+	#waiting = [];
+	/**
+	* 此刻在跑的子 run 已领走的轮数之和（FR-19.7）。
+	* 父级的 `remainingTurns` 不会因子 run 而减少（子 run 跑在独立 runtime 上），
+	* 不自己记账的话两个并发委派会各自读到同一个剩余值，把同一份额度花两遍。
+	*/
+	#claimedTurns = 0;
+	#seq = 0;
 	constructor(options) {
 		this.#options = options;
 	}
-	/** 当前正在执行的委派任务；无则 undefined */
+	/** 正在执行的委派任务之一；全部空闲则 undefined。仅供诊断 */
 	get running() {
-		return this.#running;
+		for (const request of this.#running.values()) return request.task;
+	}
+	#limit() {
+		const raw = this.#options.concurrencyLimit?.() ?? 1;
+		return Number.isFinite(raw) && raw >= 1 ? Math.floor(raw) : 1;
+	}
+	/** 让出一个名额并唤醒队首。必须在 finally 里调用，否则一次异常会把名额永久吞掉 */
+	#release(id, claimed) {
+		this.#running.delete(id);
+		this.#claimedTurns = Math.max(0, this.#claimedTurns - claimed);
+		this.#waiting.shift()?.();
 	}
 	async delegate(request) {
 		const runner = this.#options.runner;
 		if (!runner) throw new WebSkillError("DELEGATION_UNAVAILABLE", "Delegation is enabled but this host did not provide a sub-agent runner");
-		if (this.#running !== void 0) throw new WebSkillError("DELEGATION_IN_PROGRESS", `Only one sub-agent may run at a time; "${this.#running}" has not finished yet`);
 		if (request.task.trim() === "") throw new WebSkillError("DELEGATION_UNAVAILABLE", "A delegated task must not be empty");
+		while (this.#running.size >= this.#limit()) await new Promise((resolve) => this.#waiting.push(resolve));
+		const id = `d${this.#seq += 1}`;
 		const parent = this.#options.parentBudget();
+		const availableTurns = Math.max(0, parent.remainingTurns - this.#claimedTurns);
+		const idleSlots = Math.max(1, this.#limit() - this.#running.size);
+		const share = Math.floor(availableTurns / idleSlots);
 		const budget = {
-			maxTurns: Math.min(this.#options.policy?.maxTurns ?? DEFAULT_MAX_TURNS, parent.remainingTurns),
+			maxTurns: Math.min(this.#options.policy?.maxTurns ?? Number.POSITIVE_INFINITY, share),
 			timeoutMs: Math.min(this.#options.policy?.timeoutMs ?? Number.POSITIVE_INFINITY, parent.remainingTimeoutMs)
 		};
-		if (budget.maxTurns < 1 || budget.timeoutMs <= 0) return {
-			todoId: request.todoId,
-			outcome: "failed",
-			summary: `The parent run has no budget left to delegate "${request.task}" (${parent.remainingTurns} turns and ${parent.remainingTimeoutMs} ms remaining).`
-		};
-		this.#running = request.task;
+		if (budget.maxTurns < 1 || budget.timeoutMs <= 0) {
+			this.#waiting.shift()?.();
+			return {
+				todoId: request.todoId,
+				outcome: "failed",
+				summary: `The parent run has no budget left to delegate "${request.task}" (${availableTurns} turns and ${parent.remainingTimeoutMs} ms remaining).`
+			};
+		}
+		this.#running.set(id, request);
+		this.#claimedTurns += budget.maxTurns;
 		this.#options.todos?.update(request.todoId, {
 			status: "in-progress",
 			delegatedTo: request.task
-		});
+		}, { concurrent: true });
 		const controller = new AbortController();
 		let timedOut = false;
 		const timer = setTimeout(() => {
@@ -744,7 +859,7 @@ var DelegationOrchestrator = class {
 			};
 		} finally {
 			clearTimeout(timer);
-			this.#running = void 0;
+			this.#release(id, budget.maxTurns);
 		}
 	}
 };
@@ -752,25 +867,27 @@ var DelegationOrchestrator = class {
 //#endregion
 //#region ../agent/src/prompts/delegation.ts
 /**
-* 串行委派的策略提示词（设计 03 §13）。
+* 委派的策略提示词（设计 03 §13；并发改造见 0.23.0 分册 19）。
 *
-* 「一次只能有一个」是编排器的硬约束，这里写进提示词是为了让模型不去
-* 尝试并行委派——被拒绝的调用会浪费一轮，而不是产生并发。
+* 并发数那两句是**建议**而非约束：真正拦住数量的是编排器的排队与宿主硬上限。
+* 写在这里是为了让模型按任务真实需要给值，而不是一口气派出一大批。
 */
 const DELEGATION_SYSTEM_PROMPT = [
 	"Delegating sub-tasks:",
 	"- Delegate a task only when it is self-contained and its details do not need to stay in this conversation.",
-	"- Delegate one task at a time and wait for the result. A second delegation while one is running is rejected.",
+	"- Several delegations may run at the same time. Only delegate work that is genuinely independent: sub-agents cannot see each other and cannot exchange results.",
+	"- Keep the number of parallel sub-agents small. Use \"suggestedConcurrency\" to state how many this task really needs; the user picks the final number and the host may cap it lower.",
 	"- Every delegation must reference an existing task-list item via \"todoId\".",
 	"- You receive only the sub-agent summary, never its intermediate steps. If you need details, ask for them in the task description.",
-	"- If a delegation fails, decide yourself whether to retry with a narrower task or to continue without it."
+	"- If a delegation fails, decide yourself whether to retry with a narrower task or to continue without it.",
+	"- If the user declines delegation, do the work yourself in this conversation and do not delegate again."
 ].join("\n");
 
 //#endregion
 //#region ../agent/src/delegation/toolSource.ts
 const DELEGATE_TASK_TOOL = "delegate_task";
-const DELEGATE_TOOL_DESCRIPTION = "Hand one self-contained sub-task to a sub-agent and wait for its summary. One delegation at a time.";
-const INPUT_SCHEMA$3 = {
+const DELEGATE_TOOL_DESCRIPTION = "Hand one self-contained sub-task to a sub-agent and wait for its summary. Several delegations may run in parallel, up to a limit the user picks.";
+const INPUT_SCHEMA$4 = {
 	type: "object",
 	properties: {
 		todoId: {
@@ -785,12 +902,17 @@ const INPUT_SCHEMA$3 = {
 			type: "array",
 			description: "Optional subset of tool names the sub-agent may use; omit to inherit the current set",
 			items: { type: "string" }
+		},
+		suggestedConcurrency: {
+			type: "integer",
+			minimum: 1,
+			description: "How many sub-agents this task genuinely needs to run at once. The user confirms the final number and the host may cap it lower; omit if one at a time is enough"
 		}
 	},
 	required: ["todoId", "task"],
 	additionalProperties: false
 };
-function toolError$5(code, message) {
+function toolError$6(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -825,12 +947,12 @@ function createDelegationToolSource(options) {
 	const call = async (_name, args) => {
 		const todoId = args["todoId"];
 		const task = args["task"];
-		if (typeof todoId !== "string" || todoId === "") return toolError$5("VALIDATION_FAILED", "The \"todoId\" argument is required and must be a string");
-		if (typeof task !== "string" || task.trim() === "") return toolError$5("VALIDATION_FAILED", "The \"task\" argument is required and must be a non-empty string");
+		if (typeof todoId !== "string" || todoId === "") return toolError$6("VALIDATION_FAILED", "The \"todoId\" argument is required and must be a string");
+		if (typeof task !== "string" || task.trim() === "") return toolError$6("VALIDATION_FAILED", "The \"task\" argument is required and must be a non-empty string");
 		const rawTools = args["allowedTools"];
 		let allowedTools;
 		if (rawTools !== void 0) {
-			if (!Array.isArray(rawTools) || rawTools.some((entry) => typeof entry !== "string")) return toolError$5("VALIDATION_FAILED", "The \"allowedTools\" argument must be an array of tool names");
+			if (!Array.isArray(rawTools) || rawTools.some((entry) => typeof entry !== "string")) return toolError$6("VALIDATION_FAILED", "The \"allowedTools\" argument must be an array of tool names");
 			allowedTools = rawTools;
 		}
 		try {
@@ -862,7 +984,7 @@ function createDelegationToolSource(options) {
 				}]
 			};
 		} catch (e) {
-			return toolError$5(e instanceof Error && "code" in e ? String(e.code) : "DELEGATION_FAILED", e instanceof Error ? e.message : String(e));
+			return toolError$6(e instanceof Error && "code" in e ? String(e.code) : "DELEGATION_FAILED", e instanceof Error ? e.message : String(e));
 		}
 	};
 	return {
@@ -872,7 +994,7 @@ function createDelegationToolSource(options) {
 		listToolSpecs: () => Promise.resolve([{
 			name: DELEGATE_TASK_TOOL,
 			description: DELEGATE_TOOL_DESCRIPTION,
-			inputSchema: INPUT_SCHEMA$3
+			inputSchema: INPUT_SCHEMA$4
 		}]),
 		canHandle: (name) => name === DELEGATE_TASK_TOOL,
 		argCaptureTrust: (name) => name === "delegate_task" ? { tier: "reviewed" } : void 0,
@@ -1275,7 +1397,7 @@ const PERCEPTION_SYSTEM_PROMPT = [
 //#endregion
 //#region ../agent/src/perception/toolSource.ts
 const PERCEIVE_PAGE_TOOL = "perceive_page";
-const DESCRIPTION$2 = "Read the parts of the current page the host made readable, as a structured accessibility outline. Read-only: it cannot click, type, submit or navigate.";
+const DESCRIPTION$4 = "Read the parts of the current page the host made readable, as a structured accessibility outline. Read-only: it cannot click, type, submit or navigate.";
 /**
 * 两个参数，且它们都扩不出一寸新范围（AC-10.8 的判据由 0.14.0 分册 22 §3 修订）。
 *
@@ -1288,7 +1410,7 @@ const DESCRIPTION$2 = "Read the parts of the current page the host made readable
 * 「模型看到的工具契约」随宿主配置漂移，同一段对话里换个设置就变一次形状，
 * 而模型的历史消息里还留着旧形状。宁可多一个恒定存在、关闭时明确拒绝的参数。
 */
-const INPUT_SCHEMA$2 = {
+const INPUT_SCHEMA$3 = {
 	type: "object",
 	properties: {
 		cursor: {
@@ -1309,7 +1431,7 @@ const SUBTREE_CODES = /* @__PURE__ */ new Set([
 	"PERCEPTION_SUBTREE_OUT_OF_SCOPE",
 	"PERCEPTION_SUBTREE_UNKNOWN_REF"
 ]);
-function toolError$4(code, message) {
+function toolError$5(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -1401,8 +1523,8 @@ function createPagePerceptionToolSource(options) {
 		kind: "page-perception",
 		listToolSpecs: () => Promise.resolve(policy.enabled ? [{
 			name: PERCEIVE_PAGE_TOOL,
-			description: DESCRIPTION$2,
-			inputSchema: INPUT_SCHEMA$2
+			description: DESCRIPTION$4,
+			inputSchema: INPUT_SCHEMA$3
 		}] : []),
 		systemPrompt: () => Promise.resolve(policy.enabled ? PERCEPTION_SYSTEM_PROMPT : void 0),
 		canHandle: (name) => name === PERCEIVE_PAGE_TOOL,
@@ -1416,11 +1538,11 @@ function createPagePerceptionToolSource(options) {
 			};
 			const cursor = args["cursor"];
 			const ref = args["ref"];
-			if (ref !== void 0 && typeof ref !== "string") return toolError$4("PERCEPTION_REF_INVALID", "perceive_page needs \"ref\" to be a string when it is present.");
+			if (ref !== void 0 && typeof ref !== "string") return toolError$5("PERCEPTION_REF_INVALID", "perceive_page needs \"ref\" to be a string when it is present.");
 			if (cursor !== void 0) {
 				const index = typeof cursor === "string" ? pending?.cursors.get(cursor) : void 0;
-				if (!paged || pending === void 0 || index === void 0 || pending.runId !== context?.runId) return toolError$4("PERCEPTION_CURSOR_INVALID", CURSOR_REJECTED);
-				if (ref !== void 0 && ref !== pending.subtreeRef) return toolError$4("PERCEPTION_CURSOR_INVALID", CURSOR_REJECTED);
+				if (!paged || pending === void 0 || index === void 0 || pending.runId !== context?.runId) return toolError$5("PERCEPTION_CURSOR_INVALID", CURSOR_REJECTED);
+				if (ref !== void 0 && ref !== pending.subtreeRef) return toolError$5("PERCEPTION_CURSOR_INVALID", CURSOR_REJECTED);
 				return resultOf(pending, index);
 			}
 			try {
@@ -1482,8 +1604,8 @@ function createPagePerceptionToolSource(options) {
 				return resultOf(pending, 0);
 			} catch (e) {
 				const code = e instanceof WebSkillError ? e.code : void 0;
-				if (code !== void 0 && SUBTREE_CODES.has(code)) return toolError$4(code, messageOf(e));
-				return toolError$4("PERCEPTION_FAILED", `perceive_page failed: ${messageOf(e)}`);
+				if (code !== void 0 && SUBTREE_CODES.has(code)) return toolError$5(code, messageOf(e));
+				return toolError$5("PERCEPTION_FAILED", `perceive_page failed: ${messageOf(e)}`);
 			}
 		}
 	};
@@ -1656,7 +1778,7 @@ const RECORD_LIMIT$1 = 50;
 function sanitizeDescription(value) {
 	return sanitizeUntrustedLine(value, DESCRIPTION_LIMIT);
 }
-function isRecord$1(value) {
+function isRecord$2(value) {
 	return typeof value === "object" && value !== null;
 }
 /**
@@ -1666,7 +1788,7 @@ function isRecord$1(value) {
 * 标成后者会让读代码的人以为它已经被验证过了。
 */
 function validate(raw, provenance) {
-	if (!isRecord$1(raw)) return void 0;
+	if (!isRecord$2(raw)) return void 0;
 	const { id, kind, description, target } = raw;
 	if (typeof id !== "string" || !ID_PATTERN.test(id)) return void 0;
 	if (typeof kind !== "string" || !OFFERABLE_KINDS.includes(kind)) return void 0;
@@ -1867,6 +1989,7 @@ function clampDownloadWaitMs(ms) {
 
 //#endregion
 //#region ../agent/src/pageAction/policy.ts
+const scrollDirectionOf = (value) => SCROLL_DIRECTIONS.includes(value) ? value : "down";
 const declineReason = "Page action was declined by the user.";
 /** 目标记忆的上限；它在 `act()` 之后立刻就被读走，容量只为防无界增长 */
 const TARGET_MEMO_LIMIT = 200;
@@ -2001,7 +2124,7 @@ var PageActionPolicy = class {
 		const where = target.frame === void 0 ? "on the page" : `in the embedded frame "${target.frame}"`;
 		const scopeNote = target.elevated === true ? " This dialog is outside the usual allowlist; it was opened by this task." : "";
 		const scopeLabel = rememberable ? this.#options.consent?.describeScope?.(target, request.action) : void 0;
-		const message = request.action === "back" ? `Allow the assistant to go back to the previous page${target.name === void 0 ? "" : ` on "${target.name}"`}?${scopeNote}` : request.action === "scroll" ? `Allow the assistant to scroll ${request.value === "up" ? "up" : "down"} the area around "${target.name ?? target.role}" ${where}?${scopeNote}` : `Allow the assistant to ${request.action} "${target.name ?? target.role}" ${where}?${scopeNote}`;
+		const message = request.action === "back" ? `Allow the assistant to go back to the previous page${target.name === void 0 ? "" : ` on "${target.name}"`}?${scopeNote}` : request.action === "scroll" ? `Allow the assistant to scroll ${scrollDirectionOf(request.value)} the area around "${target.name ?? target.role}" ${where}?${scopeNote}` : `Allow the assistant to ${request.action} "${target.name ?? target.role}" ${where}?${scopeNote}`;
 		const response = await this.#options.ui.request({
 			type: "authorize",
 			id: `page-action-${this.#seq}`,
@@ -2018,7 +2141,7 @@ var PageActionPolicy = class {
 				...rememberable ? { rememberable: true } : {},
 				...scopeLabel !== void 0 ? { rememberLabel: scopeLabel } : {},
 				...request.action === "fill" && request.value !== void 0 ? { value: target.secret === true ? "••••••" : request.value } : {},
-				...request.action === "scroll" ? { direction: request.value === "up" ? "up" : "down" } : {}
+				...request.action === "scroll" ? { direction: scrollDirectionOf(request.value) } : {}
 			}
 		});
 		if (response.cancelled === true || response.value === false) return false;
@@ -2100,19 +2223,21 @@ const PAGE_ACTION_SYSTEM_PROMPT = [
 	"A reference expires as soon as the page is perceived again; perceive first, then act.",
 	"After an action, the result tells you where it led. \"openedTab\" means a new page opened — switch to it with focus_page_tab to read it. \"navigated\" means this page itself moved to a new address. \"elevatedModal\" means a dialog opened on this page. If none of the three appear, the page did not change.",
 	"Use the \"back\" action to return to the previous page in this page's history. It takes no \"ref\" and no \"value\", and it only affects the page you are currently on. After going back, always perceive_page again: every reference from before the action is dead.",
-	"Use the \"scroll\" action only when the page itself says there is more than you can see (for example a list that says it has 20 rows but shows 13). Pass the \"ref\" of any element inside the region you want to scroll and a \"value\" of \"down\" or \"up\"; the region is found for you, so do not look for a reference to the scrollbar or the container. The result carries \"scrolled\": when \"atEnd\" is true there is nothing further in that direction — stop scrolling and answer with what you have. Perceive the page again after each scroll: rows that left the screen no longer exist and their references are dead."
+	"Use the \"scroll\" action only when the page itself says there is more than you can see (for example a list that says it has 20 rows but shows 13). Pass the \"ref\" of any element inside the region you want to scroll and a \"value\" of \"down\" or \"up\"; the region is found for you, so do not look for a reference to the scrollbar or the container. The result carries \"scrolled\": when \"atEnd\" is true there is nothing further in that direction — stop scrolling and answer with what you have. Perceive the page again after each scroll: rows that left the screen no longer exist and their references are dead.",
+	"Use the \"hover\" action when a menu, tooltip or icon only appears while the pointer rests on something — a dropdown that ignores clicks, or a table header whose filter icon is invisible until hovered. Pass the \"ref\" of the thing to hover over and no \"value\". Then perceive_page again: whatever appeared is new and has no reference until you read it. If the result says \"noop\": true, nothing on the page reacted, and hovering again will not help — some pages reveal those panels through a pure CSS effect that only a real pointer can trigger. Say so and offer another route instead of retrying.",
+	"Use the \"drag\" action to drag one element onto another — reordering a list by its drag handle, for example. Pass the \"ref\" of what you are dragging and a \"value\" holding the ref of where it should land. Both must come from a perceive_page result, so perceive first and make sure the destination is actually on screen. You can only express a start and an end; there is no path, speed or pause in between."
 ].join("\n");
 
 //#endregion
 //#region ../agent/src/pageAction/toolSource.ts
 const PAGE_ACTION_TOOL = "act_on_page";
-const DESCRIPTION$1 = "Act on one element of the current page. The target must be a \"ref\" from a fresh perceive_page result; selectors are rejected. Each call asks the user to confirm before anything happens.";
+const DESCRIPTION$3 = "Act on one element of the current page. The target must be a \"ref\" from a fresh perceive_page result; selectors are rejected. Each call asks the user to confirm before anything happens.";
 /**
 * 入参里**没有** `scope` / `selector` / `include` / `frame` 一类字段（AC-23.2）：
 * 工具一旦接受它们，「能操作哪里」就有了一条从模型输出流进来的路径。
 * 模型能表达的只有「在哪个句柄上做哪个动作」。
 */
-const INPUT_SCHEMA$1 = {
+const INPUT_SCHEMA$2 = {
 	type: "object",
 	properties: {
 		ref: {
@@ -2125,13 +2250,13 @@ const INPUT_SCHEMA$1 = {
 		},
 		value: {
 			type: "string",
-			description: "Text for \"fill\", the option name for \"select\", \"true\"/\"false\" for \"set\", or \"down\"/\"up\" for \"scroll\""
+			description: "Text for \"fill\", the option name for \"select\", \"true\"/\"false\" for \"set\", one of \"down\"/\"up\"/\"left\"/\"right\" for \"scroll\", or the destination ref for \"drag\". Not used by \"hover\" or \"attach\". After a scroll, call perceive_page again: content that was outside the viewport may not have existed in the page at all until you scrolled to it."
 		}
 	},
 	required: ["action"],
 	additionalProperties: false
 };
-function toolError$3(code, message) {
+function toolError$4(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -2154,8 +2279,8 @@ function createPageActionToolSource(options) {
 		kind: "page-action",
 		listToolSpecs: () => Promise.resolve(policy.enabled ? [{
 			name: PAGE_ACTION_TOOL,
-			description: DESCRIPTION$1,
-			inputSchema: INPUT_SCHEMA$1
+			description: DESCRIPTION$3,
+			inputSchema: INPUT_SCHEMA$2
 		}] : []),
 		systemPrompt: () => Promise.resolve(policy.enabled ? PAGE_ACTION_SYSTEM_PROMPT : void 0),
 		canHandle: (name) => name === PAGE_ACTION_TOOL,
@@ -2181,7 +2306,7 @@ function createPageActionToolSource(options) {
 		},
 		call: async (_name, args, context) => {
 			const action = args["action"];
-			if (typeof action !== "string" || !PAGE_ACTION_KINDS.includes(action)) return toolError$3("VALIDATION_FAILED", `act_on_page needs one of ${PAGE_ACTION_KINDS.join(" / ")}.`);
+			if (typeof action !== "string" || !PAGE_ACTION_KINDS.includes(action)) return toolError$4("VALIDATION_FAILED", `act_on_page needs one of ${PAGE_ACTION_KINDS.join(" / ")}.`);
 			const runContext = { ...context?.runId !== void 0 ? { runId: context.runId } : {} };
 			const run = async (request) => {
 				try {
@@ -2198,25 +2323,25 @@ function createPageActionToolSource(options) {
 						} }
 					};
 				} catch (e) {
-					return toolError$3(e instanceof WebSkillError ? e.code : "PAGE_ACTION_FAILED", messageOf(e));
+					return toolError$4(e instanceof WebSkillError ? e.code : "PAGE_ACTION_FAILED", messageOf(e));
 				}
 			};
 			if (action === "back") {
-				if ("ref" in args || "value" in args) return toolError$3("VALIDATION_FAILED", "act_on_page with \"back\" takes no \"ref\" and no \"value\".");
+				if ("ref" in args || "value" in args) return toolError$4("VALIDATION_FAILED", "act_on_page with \"back\" takes no \"ref\" and no \"value\".");
 				return await run({
 					ref: PAGE_DOCUMENT_REF,
 					action: "back"
 				});
 			}
 			const ref = args["ref"];
-			if (typeof ref !== "string") return toolError$3("VALIDATION_FAILED", `act_on_page needs a "ref" string when the action is "${action}".`);
+			if (typeof ref !== "string") return toolError$4("VALIDATION_FAILED", `act_on_page needs a "ref" string when the action is "${action}".`);
 			const value = args["value"];
 			if ([
 				"fill",
 				"select",
 				"set"
-			].includes(action) && typeof value !== "string") return toolError$3("VALIDATION_FAILED", `act_on_page needs a "value" string when the action is "${action}".`);
-			if (action === "scroll" && value !== "down" && value !== "up") return toolError$3("VALIDATION_FAILED", "act_on_page with \"scroll\" needs a \"value\" of \"down\" or \"up\".");
+			].includes(action) && typeof value !== "string") return toolError$4("VALIDATION_FAILED", `act_on_page needs a "value" string when the action is "${action}".`);
+			if (action === "scroll" && !SCROLL_DIRECTIONS.includes(value)) return toolError$4("VALIDATION_FAILED", `act_on_page with "scroll" needs a "value" of ${SCROLL_DIRECTIONS.map((d) => `"${d}"`).join(" / ")}.`);
 			return await run({
 				ref,
 				action,
@@ -2458,7 +2583,7 @@ const SPECS = [
 		inputSchema: TAB_SCHEMA
 	}
 ];
-function toolError$2(code, message) {
+function toolError$3(code, message) {
 	return {
 		ok: false,
 		content: [],
@@ -2493,7 +2618,7 @@ function createTabWorksetToolSource(options) {
 					}]
 				};
 				const handle = args["tab"];
-				if (typeof handle !== "string" || handle === "") return toolError$2("VALIDATION_FAILED", `${name} needs a "tab" handle from list_page_tabs.`);
+				if (typeof handle !== "string" || handle === "") return toolError$3("VALIDATION_FAILED", `${name} needs a "tab" handle from list_page_tabs.`);
 				return {
 					ok: true,
 					content: [{
@@ -2502,7 +2627,7 @@ function createTabWorksetToolSource(options) {
 					}]
 				};
 			} catch (e) {
-				return toolError$2(e instanceof WebSkillError ? e.code : "PAGE_TAB_FAILED", messageOf(e));
+				return toolError$3(e instanceof WebSkillError ? e.code : "PAGE_TAB_FAILED", messageOf(e));
 			}
 		}
 	};
@@ -2518,12 +2643,12 @@ function formatSize(bytes) {
 	if (bytes < 1024 * 1024) return `${Math.round(bytes / 1024)} KB`;
 	return `${(bytes / 1024 / 1024).toFixed(1)} MB`;
 }
-/** 两种待抽取格式共用 `document-text` 这一种 kind，选抽取器时要按格式再分一次 */
-function isSpreadsheet(contentType, name) {
-	const type = contentType.toLowerCase();
-	if (type !== "") return type === XLSX_MIME;
-	return name.toLowerCase().endsWith(".xlsx");
-}
+/** `document-text` 下的三种格式各自的抽取器与称呼 */
+const EXTRACTED_LABEL = {
+	docx: "Word documents",
+	xlsx: "Excel workbooks",
+	pptx: "PowerPoint presentations"
+};
 /**
 * 读取本机下载文件的策略（0.14.0 分册 20）。
 *
@@ -2715,13 +2840,19 @@ var DownloadedFilePolicy = class {
 		};
 	}
 	#extract(contentType, name) {
-		const extract = isSpreadsheet(contentType, name) ? this.#options.xlsxExtractor : this.#options.docxExtractor;
+		const extract = this.#extractorFor(contentType, name);
 		if (extract === void 0) throw new WebSkillError("TOOL_UNSUPPORTED", this.#noExtractorReason(contentType, name));
 		return extract;
 	}
+	#extractorFor(contentType, name) {
+		const format = extractedDocumentFormat(contentType, name);
+		if (format === "xlsx") return this.#options.xlsxExtractor;
+		if (format === "pptx") return this.#options.pptxExtractor;
+		return this.#options.docxExtractor;
+	}
 	#noExtractorReason(contentType, name) {
-		const excel = isSpreadsheet(contentType, name);
-		return `${excel ? "Excel workbooks" : "Word documents"} cannot be read in this environment: no ${excel ? "xlsx" : "docx"} text extractor is wired up.`;
+		const format = extractedDocumentFormat(contentType, name);
+		return `${EXTRACTED_LABEL[format]} cannot be read in this environment: no ${format} text extractor is wired up.`;
 	}
 	/** 可读性判定与附件分类器同源（AC-20.17）；返回 `undefined` 即可读 */
 	async #unreadableReason(contentType, name) {
@@ -2729,7 +2860,7 @@ var DownloadedFilePolicy = class {
 		if (kind === void 0) return `Its type "${contentType === "" ? "unknown" : contentType}" cannot be read. ${READABLE_TYPES}`;
 		if (kind === "image" && await this.#options.imageCapable?.() !== true) return IMAGE_UNREADABLE;
 		if (kind === "document-text") {
-			if ((isSpreadsheet(contentType, name) ? this.#options.xlsxExtractor : this.#options.docxExtractor) === void 0) return this.#noExtractorReason(contentType, name);
+			if (this.#extractorFor(contentType, name) === void 0) return this.#noExtractorReason(contentType, name);
 		}
 	}
 	#unreadable(entry, reason) {
@@ -2825,8 +2956,8 @@ const READ_INPUT_SCHEMA = {
 	required: ["id"],
 	additionalProperties: false
 };
-const SYSTEM_PROMPT$1 = "You can list and read files the user downloaded in this browser with list_downloaded_files and read_downloaded_file. Every call asks the user for permission, so only use them when the task actually needs a local file. Never guess an id: always list first, and never treat the listing as evidence about files you were not shown.";
-function toolError$1(e) {
+const SYSTEM_PROMPT$3 = "You can list and read files the user downloaded in this browser with list_downloaded_files and read_downloaded_file. They cover the browser download folder and nothing else. A file the user attached to a message is already in this conversation and is reachable by the id given with it, so never go looking for an attachment here. Every call asks the user for permission, so only use them when the task actually needs a local file. Never guess an id: always list first, and never treat the listing as evidence about files you were not shown.";
+function toolError$2(e) {
 	return {
 		ok: false,
 		content: [],
@@ -2856,7 +2987,7 @@ function createDownloadedFileToolSource(options) {
 			description: READ_DESCRIPTION,
 			inputSchema: READ_INPUT_SCHEMA
 		}] : []),
-		systemPrompt: () => Promise.resolve(policy.enabled ? SYSTEM_PROMPT$1 : void 0),
+		systemPrompt: () => Promise.resolve(policy.enabled ? SYSTEM_PROMPT$3 : void 0),
 		canHandle: (name) => name === "list_downloaded_files" || name === "read_downloaded_file",
 		argCaptureTrust: (name) => name === "list_downloaded_files" || name === "read_downloaded_file" ? { tier: "reviewed" } : void 0,
 		call: async (name, args) => {
@@ -2875,7 +3006,7 @@ function createDownloadedFileToolSource(options) {
 					content: readContent(await policy.read(id))
 				};
 			} catch (e) {
-				return toolError$1(e);
+				return toolError$2(e);
 			}
 		}
 	};
@@ -2918,63 +3049,124 @@ function readContent(result) {
 //#endregion
 //#region ../agent/src/spreadsheet/toolSource.ts
 const EXPORT_SPREADSHEET_TOOL = "export_spreadsheet";
-const DESCRIPTION = "Write tabular data to an Excel (.xlsx) file the user can download.";
-const INPUT_SCHEMA = {
-	type: "object",
-	properties: {
-		fileName: {
-			type: "string",
-			description: "Name for the workbook, for example \"sales-2026.xlsx\". A missing .xlsx suffix is added for you."
+const DESCRIPTION$2 = "Write tabular data — and, when they belong in the sheet, pictures — to an Excel (.xlsx) file the user can download.";
+const CELL_SCHEMA = {
+	anyOf: [
+		{ type: "string" },
+		{ type: "number" },
+		{ type: "boolean" },
+		{ type: "null" }
+	],
+	description: "Text is never re-parsed as a number or a date: \"0123\" stays \"0123\". Use null for an empty cell."
+};
+/**
+* 表里的图。只在宿主接了 `resolveImage` 时才并进 schema——
+* 接不了字节却把字段给出去，等于邀请模型填一个填了也不算数的东西。
+*/
+const IMAGES_SCHEMA = {
+	type: "array",
+	maxItems: SPREADSHEET_LIMITS.imagesPerSheet,
+	description: "Pictures placed on this sheet. Use this instead of telling the user to paste images in themselves, and instead of handing out download links for them.",
+	items: {
+		type: "object",
+		properties: {
+			ref: {
+				type: "string",
+				description: "Where the picture comes from: \"artifact:<file name>\" for something produced earlier in this conversation, or \"upload:<id or file name>\" for a picture the user attached. Never base64."
+			},
+			anchor: {
+				type: "object",
+				description: "Top-left cell the picture sits on. Both numbers are 1-based, so row 1 is the header row.",
+				properties: {
+					row: {
+						type: "integer",
+						minimum: 1
+					},
+					column: {
+						type: "integer",
+						minimum: 1
+					}
+				},
+				required: ["row", "column"],
+				additionalProperties: false
+			},
+			width: {
+				type: "integer",
+				minimum: 1,
+				description: "Displayed width in pixels."
+			},
+			height: {
+				type: "integer",
+				minimum: 1,
+				description: "Displayed height in pixels."
+			},
+			alt: {
+				type: "string",
+				description: "Short caption, used as the picture name inside the workbook."
+			}
 		},
-		spec: {
-			type: "object",
-			properties: { sheets: {
-				type: "array",
-				minItems: 1,
-				maxItems: SPREADSHEET_LIMITS.sheets,
-				items: {
-					type: "object",
-					properties: {
-						name: {
-							type: "string",
-							description: "Sheet name: at most 31 characters, and none of : \\ / ? * [ ]"
-						},
-						columns: {
-							type: "array",
-							items: { type: "string" },
-							description: "Optional header row. When given it becomes the first, bold row."
-						},
-						rows: {
-							type: "array",
-							maxItems: SPREADSHEET_LIMITS.rowsPerSheet,
-							items: {
+		required: [
+			"ref",
+			"anchor",
+			"width",
+			"height"
+		],
+		additionalProperties: false
+	}
+};
+function inputSchema(withImages) {
+	return {
+		type: "object",
+		properties: {
+			fileName: {
+				type: "string",
+				description: "Name for the workbook, for example \"sales-2026.xlsx\". A missing .xlsx suffix is added for you."
+			},
+			spec: {
+				type: "object",
+				properties: { sheets: {
+					type: "array",
+					minItems: 1,
+					maxItems: SPREADSHEET_LIMITS.sheets,
+					items: {
+						type: "object",
+						properties: {
+							name: {
+								type: "string",
+								description: "Sheet name: at most 31 characters, and none of : \\ / ? * [ ]"
+							},
+							columns: {
+								type: "array",
+								items: { type: "string" },
+								description: "Optional header row. When given it becomes the first, bold row."
+							},
+							rows: {
 								type: "array",
-								maxItems: SPREADSHEET_LIMITS.columnsPerSheet,
+								maxItems: SPREADSHEET_LIMITS.rowsPerSheet,
 								items: {
-									anyOf: [
-										{ type: "string" },
-										{ type: "number" },
-										{ type: "boolean" },
-										{ type: "null" }
-									],
-									description: "Text is never re-parsed as a number or a date: \"0123\" stays \"0123\". Use null for an empty cell."
+									type: "array",
+									maxItems: SPREADSHEET_LIMITS.columnsPerSheet,
+									items: CELL_SCHEMA
 								}
-							}
-						}
-					},
-					required: ["name", "rows"],
-					additionalProperties: false
-				}
-			} },
-			required: ["sheets"],
-			additionalProperties: false
-		}
-	},
-	required: ["fileName", "spec"],
-	additionalProperties: false
-};
-const SYSTEM_PROMPT = "Use export_spreadsheet when the user asks for a downloadable Excel file. The tool returns only a summary; the file itself is delivered to the user as a card. Do not re-read the file you just wrote. Cell values are written literally — the tool never turns text into a number or a date, and it writes no styling, formulas, merged cells or charts.";
-function toolError(e) {
+							},
+							...withImages ? { images: IMAGES_SCHEMA } : {}
+						},
+						required: ["name", "rows"],
+						additionalProperties: false
+					}
+				} },
+				required: ["sheets"],
+				additionalProperties: false
+			}
+		},
+		required: ["fileName", "spec"],
+		additionalProperties: false
+	};
+}
+function systemPrompt$1(withImages) {
+	return "Use export_spreadsheet when the user asks for a downloadable Excel file. The tool returns only a summary; the file itself is delivered to the user as a card. Do not re-read the file you just wrote. Cell values are written literally — the tool never turns text into a number or a date, and it writes no styling, formulas, merged cells or charts." + (withImages ? " Pictures do go in: put them in the sheet's \"images\" with a ref and an anchor cell. A picture the user attached to a message is already in this conversation — reference it as \"upload:<id or file name>\" and do not go looking for it on the page or in the download list first. When the user asks for a workbook of pictures, put the pictures in it — do not deliver the images separately and ask the user to insert them." : "");
+}
+function toolError$1(e) {
 	return {
 		ok: false,
 		content: [],
@@ -2984,7 +3176,7 @@ function toolError(e) {
 		}
 	};
 }
-const isRecord = (v) => typeof v === "object" && v !== null;
+const isRecord$1 = (v) => typeof v === "object" && v !== null;
 /**
 * FR-10.3a 的两条分支。忘写后缀是模型的高频行为，为它打断一整轮不划算；
 * 写成 `.csv` 则是**意图冲突**而不是疏漏，必须拒。
@@ -2992,7 +3184,7 @@ const isRecord = (v) => typeof v === "object" && v !== null;
 * 路径安全不在这里做：`writeArtifact` 那一条（`resolveInsideRoot`）是唯一的一份，
 * FR-10.3b 明确禁止另写一份。
 */
-function resolveFileName(value) {
+function resolveFileName$1(value) {
 	if (typeof value !== "string" || value.trim() === "") throw new WebSkillError("VALIDATION_FAILED", "export_spreadsheet requires a non-empty \"fileName\".");
 	const fileName = value.trim();
 	const lastSegment = fileName.split(/[\\/]/).pop() ?? "";
@@ -3004,9 +3196,11 @@ function resolveFileName(value) {
 }
 function summarize(spec) {
 	const sheets = spec.sheets;
+	const imageCount = sheets.reduce((total, sheet) => total + (sheet.images?.length ?? 0), 0);
 	return {
 		sheetCount: sheets.length,
-		rowCount: sheets.reduce((total, sheet) => total + sheet.rows.length, 0)
+		rowCount: sheets.reduce((total, sheet) => total + sheet.rows.length, 0),
+		...imageCount > 0 ? { imageCount } : {}
 	};
 }
 /**
@@ -3017,20 +3211,23 @@ function summarize(spec) {
 * @experimental
 */
 function createSpreadsheetToolSource(options) {
-	const { writeArtifact } = options;
+	const { writeArtifact, resolveImage } = options;
+	const withImages = resolveImage !== void 0;
+	const schema = inputSchema(withImages);
+	const prompt = systemPrompt$1(withImages);
 	return {
 		kind: "spreadsheet",
 		listToolSpecs: () => Promise.resolve(writeArtifact ? [{
 			name: EXPORT_SPREADSHEET_TOOL,
-			description: DESCRIPTION,
-			inputSchema: INPUT_SCHEMA
+			description: DESCRIPTION$2,
+			inputSchema: schema
 		}] : []),
-		systemPrompt: () => Promise.resolve(writeArtifact ? SYSTEM_PROMPT : void 0),
+		systemPrompt: () => Promise.resolve(writeArtifact ? prompt : void 0),
 		canHandle: (name) => name === EXPORT_SPREADSHEET_TOOL,
 		captureArgs: (_name, args) => {
 			const spec = args["spec"];
-			const sheets = isRecord(spec) && Array.isArray(spec["sheets"]) ? spec["sheets"] : [];
-			const rowCount = sheets.reduce((total, sheet) => total + (isRecord(sheet) && Array.isArray(sheet["rows"]) ? sheet["rows"].length : 0), 0);
+			const sheets = isRecord$1(spec) && Array.isArray(spec["sheets"]) ? spec["sheets"] : [];
+			const rowCount = sheets.reduce((total, sheet) => total + (isRecord$1(sheet) && Array.isArray(sheet["rows"]) ? sheet["rows"].length : 0), 0);
 			return {
 				...typeof args["fileName"] === "string" ? { fileName: args["fileName"] } : {},
 				sheetCount: sheets.length,
@@ -3040,9 +3237,9 @@ function createSpreadsheetToolSource(options) {
 		call: async (name, args, context) => {
 			try {
 				if (name !== "export_spreadsheet" || !writeArtifact) throw new WebSkillError("TOOL_UNSUPPORTED", `${name} is not available in this host.`);
-				const fileName = resolveFileName(args["fileName"]);
+				const fileName = resolveFileName$1(args["fileName"]);
 				const spec = args["spec"];
-				const bytes = await encodeSpreadsheet(spec);
+				const bytes = await encodeSpreadsheet(spec, resolveImage ? (ref) => resolveImage(ref, context) : void 0);
 				const artifact = await writeArtifact(fileName, bytes, SPREADSHEET_MIME_TYPE, context);
 				return {
 					ok: true,
@@ -3055,12 +3252,820 @@ function createSpreadsheetToolSource(options) {
 						}
 					}]
 				};
+			} catch (e) {
+				return toolError$1(e);
+			}
+		}
+	};
+}
+
+//#endregion
+//#region ../agent/src/template/toolSource.ts
+/** @experimental */
+const INSPECT_TEMPLATE_TOOL = "inspect_template";
+/** @experimental */
+const FILL_TEMPLATE_TOOL = "fill_template";
+const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+const DOCX_MIME = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+/**
+* 骨架预算。模板不是文档，格子数是有限的（实测四份模板 32～56 个），
+* 但没人能保证用户不传一份两千行的台账进来——超了就截断并明说截了。
+* @experimental
+*/
+const TEMPLATE_INSPECT_BUDGET = {
+	cells: 400,
+	chars: 2e4
+};
+const INSPECT_DESCRIPTION = "Look inside an Excel (.xlsx) or Word (.docx) template the user attached, and report where things are: sheet names, cell addresses and their current text, merged regions; for Word, paragraph indexes and table/row/column coordinates. A cell reported with a \"formula\" is worked out by the template itself; fill the cells it reads instead. Call this before fill_template — you cannot guess a template's layout.";
+const FILL_DESCRIPTION = "Fill an Excel (.xlsx) or Word (.docx) template the user attached and hand the result back as a downloadable file. Everything the template already contains — styling, column widths, merged cells, formulas, headers and footers — is kept exactly as it was; only the places you name are written. The one exception is VBA macros: if the template is a macro-enabled workbook or document, the result is a plain .xlsx or .docx and its macros are dropped. Say so when you hand the file over.";
+const TEMPLATE_ID = "The attachment id, or the id from list_downloaded_files.";
+function inspectSchema(idHint) {
+	return {
+		type: "object",
+		properties: {
+			template: {
+				type: "string",
+				description: templateIdDescription(idHint)
+			},
+			sheet: {
+				type: "string",
+				description: "Excel only: inspect just this sheet. Omit to inspect every sheet."
+			}
+		},
+		required: ["template"],
+		additionalProperties: false
+	};
+}
+/**
+* 取件号的可用形式由**宿主接了什么**决定，所以多出来的那一句由宿主给。
+* 无条件写死「还可以传在线文档」的后果是：没接那条通路的宿主里，模型会反复尝试一个永远读不到的号。
+*/
+function templateIdDescription(idHint) {
+	return idHint === void 0 || idHint === "" ? TEMPLATE_ID : `${TEMPLATE_ID} ${idHint}`;
+}
+const IMAGE_REF = {
+	type: "string",
+	description: "Where the picture comes from: \"artifact:<file name>\" for something produced earlier in this conversation, or \"upload:<id or file name>\" for a picture the user attached. Never base64."
+};
+function fillSchema(withImages, idHint) {
+	return {
+		type: "object",
+		properties: {
+			template: {
+				type: "string",
+				description: templateIdDescription(idHint)
+			},
+			fileName: {
+				type: "string",
+				description: "Name for the file you are producing. The template itself is never modified."
+			},
+			cells: {
+				type: "array",
+				description: "Excel only. Each entry writes one cell. Never write to a cell that inspect_template reported with a \"formula\" — an amount or a total is the template's own calculation, and overwriting it produces a sheet that no longer adds up when anything changes.",
+				items: {
+					type: "object",
+					properties: {
+						sheet: {
+							type: "string",
+							description: "Sheet name. Omit for the first sheet."
+						},
+						address: {
+							type: "string",
+							description: "A1-style address, for example \"B7\"."
+						},
+						value: {
+							type: "string",
+							description: "A plain number such as \"2\" or \"-1.5\" is stored as a number, so formulas and totals in the template add it up. Anything else is stored as text, including \"0123\", \"1,200\" and \"12 kg\" — write amounts as bare digits with no thousands separator, currency sign or unit, or the template's SUM will skip them. Everything is written literally: \"0123\" stays \"0123\". Use \"\" to clear the cell while keeping its formatting."
+						}
+					},
+					required: ["address", "value"],
+					additionalProperties: false
+				}
+			},
+			rows: {
+				type: "array",
+				description: "Excel only. Insert blank rows before writing cells, when the template has fewer detail rows than you need. Formulas, merged regions and the rows below move down with them; addresses in \"cells\" are the positions after the insert.",
+				items: {
+					type: "object",
+					properties: {
+						sheet: { type: "string" },
+						at: {
+							type: "integer",
+							minimum: 1,
+							description: "1-based row number the new rows are inserted before."
+						},
+						count: {
+							type: "integer",
+							minimum: 1
+						},
+						copyStyleFrom: {
+							type: "integer",
+							minimum: 1,
+							description: "Row whose formatting the new rows copy. Defaults to the row just above \"at\"."
+						}
+					},
+					required: ["at", "count"],
+					additionalProperties: false
+				}
+			},
+			texts: {
+				type: "array",
+				description: "Word only. Each entry replaces the WHOLE text of one paragraph or one table cell — not part of it. A header line often holds several fields at once (for example \"No.: ABC-01        Serial: \"), and writing only the field you are changing deletes the others. Copy the text inspect_template reported and change just the part that differs, keeping the spacing that lines the fields up.",
+				items: {
+					type: "object",
+					properties: {
+						paragraph: {
+							type: "integer",
+							minimum: 0,
+							description: "0-based body paragraph index."
+						},
+						table: {
+							type: "integer",
+							minimum: 0,
+							description: "0-based table index."
+						},
+						row: {
+							type: "integer",
+							minimum: 0
+						},
+						column: {
+							type: "integer",
+							minimum: 0
+						},
+						value: {
+							type: "string",
+							description: "Written literally, and it becomes the entire content of the target. Use \"\" to clear the target."
+						}
+					},
+					required: ["value"],
+					additionalProperties: false
+				}
+			},
+			...withImages ? { images: {
+				type: "array",
+				description: "Pictures to place in the template. Use this instead of telling the user to paste them in themselves. Each picture is scaled down to fit the cell it lands on and never overflows it.",
+				items: {
+					type: "object",
+					properties: {
+						ref: IMAGE_REF,
+						sheet: {
+							type: "string",
+							description: "Excel only."
+						},
+						address: {
+							type: "string",
+							description: "Excel only: A1-style cell the picture sits on."
+						},
+						paragraph: {
+							type: "integer",
+							minimum: 0,
+							description: "Word only."
+						},
+						table: {
+							type: "integer",
+							minimum: 0,
+							description: "Word only."
+						},
+						row: {
+							type: "integer",
+							minimum: 0,
+							description: "Word only."
+						},
+						column: {
+							type: "integer",
+							minimum: 0,
+							description: "Word only."
+						}
+					},
+					required: ["ref"],
+					additionalProperties: false
+				}
+			} } : {}
+		},
+		required: ["template", "fileName"],
+		additionalProperties: false
+	};
+}
+function systemPrompt(withImages) {
+	return "When the user gives you a form, a table or a report template and asks you to produce a filled-in copy, fill that template — do not build a new file from scratch and do not describe what to type where. Always call inspect_template first: the addresses and coordinates come from it, never from guesswork, and a wrong address is a wrong file. fill_template returns only a summary; the file is delivered to the user as a card, so do not read it back. The template is left untouched — everything it already contains is preserved, and you only name the places that change. When the template has too few detail rows for the data, insert rows instead of overwriting the rows below." + (withImages ? " A template that reserves space for a photo takes one: reference the picture as \"artifact:<name>\" or \"upload:<id or name>\" and give the cell it belongs in. Do not hand the picture over separately and ask the user to paste it." : "");
+}
+function toolError(e) {
+	return {
+		ok: false,
+		content: [],
+		error: {
+			code: e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED",
+			message: messageOf(e)
+		}
+	};
+}
+const isRecord = (v) => typeof v === "object" && v !== null;
+/**
+* 照着模板出文件（0.22.0 分册 42）。
+*
+* 两个工具而不是一个：模型得先看见模板的坐标，才谈得上决定往哪儿写。
+* 合成一个工具就只剩两条路——要么让模型盲填，要么每次把整份骨架塞进填值的返回里。
+* @experimental
+*/
+function createTemplateToolSource(options) {
+	const { files, xlsx, docx, writeArtifact, resolveImage } = options;
+	const withImages = resolveImage !== void 0;
+	const inspectInput = inspectSchema(options.idHint);
+	const schema = fillSchema(withImages, options.idHint);
+	const prompt = systemPrompt(withImages);
+	const available = () => xlsx !== void 0 || docx !== void 0;
+	const budgetOf = () => options.budget?.() ?? TEMPLATE_INSPECT_BUDGET;
+	return {
+		kind: "office-template",
+		listToolSpecs: () => {
+			if (!available()) return Promise.resolve([]);
+			const specs = [{
+				name: INSPECT_TEMPLATE_TOOL,
+				description: INSPECT_DESCRIPTION,
+				inputSchema: inspectInput
+			}];
+			if (writeArtifact !== void 0) specs.push({
+				name: FILL_TEMPLATE_TOOL,
+				description: FILL_DESCRIPTION,
+				inputSchema: schema
+			});
+			return Promise.resolve(specs);
+		},
+		systemPrompt: () => Promise.resolve(available() && writeArtifact !== void 0 ? prompt : void 0),
+		canHandle: (name) => name === "inspect_template" || name === "fill_template",
+		argCaptureTrust: (name) => name === "inspect_template" ? { tier: "reviewed" } : void 0,
+		captureArgs: (name, args) => {
+			if (name === "inspect_template") return args;
+			const count = (key) => Array.isArray(args[key]) ? args[key].length : 0;
+			return {
+				...typeof args["fileName"] === "string" ? { fileName: args["fileName"] } : {},
+				filledCount: count("cells") + count("texts"),
+				insertedRows: (Array.isArray(args["rows"]) ? args["rows"] : []).reduce((total, row) => total + (isRecord(row) && typeof row["count"] === "number" ? row["count"] : 0), 0),
+				imageCount: count("images")
+			};
+		},
+		call: async (name, args, context) => {
+			try {
+				if (name === "inspect_template") return await inspect(args, context);
+				if (name === "fill_template") return await fill(args, context);
+				throw new WebSkillError("TOOL_NOT_FOUND", `Unknown tool ${name}.`);
 			} catch (e) {
 				return toolError(e);
 			}
 		}
 	};
+	async function load(raw, tool, context) {
+		if (typeof raw !== "string" || raw === "") throw new WebSkillError("TOOL_UNSUPPORTED", `${tool} requires the "template" id of an attachment or download.`);
+		const file = await files.read(raw, context);
+		if (file === void 0) throw new WebSkillError("TOOL_UNSUPPORTED", `No readable file with id "${raw}". It is either not an attachment of the current message, or a download id that has since expired — list the downloads again to get a fresh one.`);
+		const format = sniffDocumentFormat(file.bytes, file.name);
+		if (format !== "xlsx" && format !== "docx") throw new WebSkillError("TEMPLATE_UNSUPPORTED", `"${file.name}" is not an Excel (.xlsx) or Word (.docx) file, so it cannot be used as a template.`);
+		if ((format === "xlsx" ? xlsx : docx) === void 0) throw new WebSkillError("TEMPLATE_UNSUPPORTED", `This environment cannot fill ${format} templates.`);
+		return {
+			name: file.name,
+			bytes: file.bytes,
+			format
+		};
+	}
+	async function inspect(args, context) {
+		const template = await load(args["template"], INSPECT_TEMPLATE_TOOL, context);
+		const budget = budgetOf();
+		if (template.format === "xlsx") {
+			const skeleton = await xlsx.read(template.bytes);
+			const only = typeof args["sheet"] === "string" ? args["sheet"] : void 0;
+			const sheets = only === void 0 ? skeleton.sheets : skeleton.sheets.filter((sheet) => sheet.name === only);
+			if (only !== void 0 && sheets.length === 0) throw new WebSkillError("TEMPLATE_TARGET_MISSING", `The workbook has no sheet named "${only}". It has: ${skeleton.sheets.map((s) => s.name).join(", ")}.`);
+			let left = budget.cells;
+			let truncated = false;
+			const described = sheets.map((sheet) => {
+				const cells = sheet.cells.slice(0, Math.max(left, 0));
+				if (cells.length < sheet.cells.length) truncated = true;
+				left -= cells.length;
+				return {
+					name: sheet.name,
+					range: sheet.range,
+					cells: cells.map((cell) => ({
+						address: cell.address,
+						text: clip(cell.text, budget.chars),
+						...cell.formula === void 0 ? {} : { formula: cell.formula }
+					})),
+					...sheet.merges.length > 0 ? { merges: [...sheet.merges] } : {},
+					...cells.length < sheet.cells.length ? { omittedCells: sheet.cells.length - cells.length } : {}
+				};
+			});
+			return json({
+				file: template.name,
+				format: "xlsx",
+				sheets: described,
+				...truncated ? { truncated: `Only the first ${budget.cells} filled cells are listed; inspect one sheet at a time.` } : {}
+			});
+		}
+		const skeleton = await docx.read(template.bytes);
+		let left = budget.cells;
+		const paragraphs = skeleton.paragraphs.filter((paragraph) => paragraph.text !== "").slice(0, left);
+		left -= paragraphs.length;
+		const cells = skeleton.cells.slice(0, Math.max(left, 0));
+		const tableCount = skeleton.cells.reduce((max, cell) => Math.max(max, cell.table + 1), 0);
+		const omitted = skeleton.cells.length - cells.length;
+		return json({
+			file: template.name,
+			format: "docx",
+			paragraphs: paragraphs.map((paragraph) => ({
+				index: paragraph.index,
+				text: clip(paragraph.text, budget.chars)
+			})),
+			tableCount,
+			cells: cells.map((cell) => ({
+				table: cell.table,
+				row: cell.row,
+				column: cell.column,
+				text: clip(cell.text, budget.chars),
+				...cell.gridSpan === void 0 ? {} : { gridSpan: cell.gridSpan },
+				...cell.vMerge === void 0 ? {} : { vMerge: cell.vMerge }
+			})),
+			...omitted > 0 ? { truncated: `${omitted} further table cell(s) are not listed; the template is larger than the budget.` } : {}
+		});
+	}
+	async function fill(args, context) {
+		if (writeArtifact === void 0) throw new WebSkillError("TOOL_UNSUPPORTED", `${FILL_TEMPLATE_TOOL} is not available in this host.`);
+		const template = await load(args["template"], FILL_TEMPLATE_TOOL, context);
+		const fileName = resolveFileName(args["fileName"], template.format);
+		const images = await resolveImages(args["images"], context);
+		if (template.format === "xlsx") {
+			const spec = {
+				...Array.isArray(args["rows"]) ? { rows: args["rows"] } : {},
+				...Array.isArray(args["cells"]) ? { cells: args["cells"] } : {},
+				...images.length > 0 ? { images: images.map((image) => {
+					const address = image.placement["address"];
+					if (typeof address !== "string" || address === "") throw new WebSkillError("TEMPLATE_ADDRESS_INVALID", `The picture "${image.ref}" needs an "address" telling which cell it goes on.`);
+					const sheet = image.placement["sheet"];
+					return {
+						address,
+						...typeof sheet === "string" ? { sheet } : {},
+						...image.bytes
+					};
+				}) } : {}
+			};
+			const bytes = await xlsx.fill(template.bytes, spec);
+			const artifact = await writeArtifact(fileName, bytes, XLSX_MIME, context);
+			return json({
+				path: artifact.path,
+				size: artifact.size,
+				filledCount: spec.cells?.length ?? 0,
+				insertedRows: (spec.rows ?? []).reduce((total, row) => total + row.count, 0),
+				...images.length > 0 ? { imageCount: images.length } : {}
+			});
+		}
+		const spec = {
+			...Array.isArray(args["texts"]) ? { texts: args["texts"] } : {},
+			...images.length > 0 ? { images: images.map((image) => ({
+				...pickCoordinates(image.placement),
+				...image.bytes
+			})) } : {}
+		};
+		const bytes = await docx.fill(template.bytes, spec);
+		const artifact = await writeArtifact(fileName, bytes, DOCX_MIME, context);
+		return json({
+			path: artifact.path,
+			size: artifact.size,
+			filledCount: spec.texts?.length ?? 0,
+			...images.length > 0 ? { imageCount: images.length } : {}
+		});
+	}
+	async function resolveImages(raw, context) {
+		if (!Array.isArray(raw) || raw.length === 0) return [];
+		if (resolveImage === void 0) throw new WebSkillError("TEMPLATE_IMAGE_UNRESOLVED", "This host cannot resolve picture references.");
+		const out = [];
+		for (const entry of raw) {
+			if (!isRecord(entry) || typeof entry["ref"] !== "string") throw new WebSkillError("TEMPLATE_IMAGE_UNRESOLVED", "Every picture needs a \"ref\".");
+			const ref = entry["ref"];
+			const bytes = await resolveImage(ref, context);
+			if (bytes === void 0) throw new WebSkillError("TEMPLATE_IMAGE_UNRESOLVED", `Nothing in this conversation matches the picture reference "${ref}".`);
+			out.push({
+				ref,
+				bytes,
+				placement: entry
+			});
+		}
+		return out;
+	}
+}
+function pickCoordinates(placement) {
+	const out = {};
+	for (const key of [
+		"paragraph",
+		"table",
+		"row",
+		"column"
+	]) {
+		const value = placement[key];
+		if (typeof value === "number" && Number.isInteger(value) && value >= 0) out[key] = value;
+	}
+	return out;
+}
+/** 后缀必须与模板同格式：拿 xlsx 模板出 .docx 是意图冲突，不是笔误 */
+function resolveFileName(value, format) {
+	if (typeof value !== "string" || value.trim() === "") throw new WebSkillError("VALIDATION_FAILED", `${FILL_TEMPLATE_TOOL} requires a non-empty "fileName".`);
+	const fileName = value.trim();
+	const lastSegment = fileName.split(/[\\/]/).pop() ?? "";
+	const dot = lastSegment.lastIndexOf(".");
+	const extension = dot <= 0 ? "" : lastSegment.slice(dot + 1).toLowerCase();
+	if (extension === "") return `${fileName}.${format}`;
+	if (extension === format) return fileName;
+	throw new WebSkillError("VALIDATION_FAILED", `The template is a .${format} file, so the result is a .${format} file; "${fileName}" asks for .${extension}.`);
+}
+function clip(text, limit) {
+	const max = Math.max(Math.floor(limit / 40), 40);
+	return text.length <= max ? text : `${text.slice(0, max)}…`;
+}
+function json(data) {
+	return {
+		ok: true,
+		content: [{
+			type: "json",
+			data
+		}]
+	};
+}
+
+//#endregion
+//#region ../agent/src/pageImage/toolSource.ts
+const CAPTURE_PAGE_IMAGE_TOOL = "capture_page_image";
+const DESCRIPTION$1 = "Save a picture that is already on the page as a run artifact, so a skill can place it in a document.";
+const INPUT_SCHEMA$1 = {
+	type: "object",
+	properties: {
+		ref: {
+			type: "string",
+			description: "Element handle from perceive_page. Only nodes marked \"capturable\" can be captured — those are the <img>, <canvas> and <svg> elements."
+		},
+		note: {
+			type: "string",
+			description: "Why you need this picture. It is shown to the user when asking for permission."
+		}
+	},
+	required: ["ref"],
+	additionalProperties: false
+};
+const SYSTEM_PROMPT$2 = "Use capture_page_image when a picture on the current page belongs in a document you are about to produce. It returns a reference, never the picture itself — pass that reference to the skill, do not try to read it back. Capturing does not tell you what the picture shows; ask for a page perception with images if you need that. Capture one picture per call, and only for nodes the page perception marked as capturable. Do not list the captured references back to the user. They are working material for the document, not a deliverable; say how many pictures went in and leave it at that.";
+const isFailure$1 = (result) => "reason" in result;
+/**
+* 页面取像工具（0.22.0 分册 12）。
+*
+* 与 `export_spreadsheet` 同一套 `ExternalToolSource` 范式（FR-12.1），
+* 不另造第二套注册机制。
+* @experimental
+*/
+function createPageImageToolSource(options) {
+	const { capture } = options;
+	return {
+		kind: "page-image",
+		listToolSpecs: () => Promise.resolve(capture ? [{
+			name: CAPTURE_PAGE_IMAGE_TOOL,
+			description: DESCRIPTION$1,
+			inputSchema: INPUT_SCHEMA$1
+		}] : []),
+		systemPrompt: () => Promise.resolve(capture ? SYSTEM_PROMPT$2 : void 0),
+		canHandle: (name) => name === CAPTURE_PAGE_IMAGE_TOOL,
+		captureArgs: (_name, args) => typeof args["ref"] === "string" ? { ref: args["ref"] } : {},
+		call: async (name, args, context) => {
+			try {
+				if (name !== "capture_page_image" || !capture) throw new WebSkillError("TOOL_UNSUPPORTED", `${name} is not available in this host.`);
+				const ref = args["ref"];
+				if (typeof ref !== "string" || ref.trim() === "") throw new WebSkillError("VALIDATION_FAILED", `${CAPTURE_PAGE_IMAGE_TOOL} requires a non-empty "ref" taken from a page perception.`);
+				const note = typeof args["note"] === "string" && args["note"].trim() !== "" ? args["note"].trim() : void 0;
+				const result = await capture({
+					ref: ref.trim(),
+					...note === void 0 ? {} : { note }
+				}, context);
+				if (isFailure$1(result)) {
+					const levels = result.triedLevels ?? [];
+					return {
+						ok: false,
+						content: [],
+						error: {
+							code: "TOOL_EXECUTION_FAILED",
+							message: levels.length > 0 ? `${result.reason} (tried: ${levels.join(", ")})` : result.reason
+						}
+					};
+				}
+				return {
+					ok: true,
+					content: [{
+						type: "json",
+						data: {
+							ref: ref.trim(),
+							artifact: result.artifact,
+							width: result.width,
+							height: result.height,
+							bytes: result.bytes
+						}
+					}]
+				};
+			} catch (e) {
+				return {
+					ok: false,
+					content: [],
+					error: {
+						code: e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED",
+						message: messageOf(e)
+					}
+				};
+			}
+		}
+	};
+}
+
+//#endregion
+//#region ../agent/src/remoteImage/toolSource.ts
+const FETCH_REMOTE_IMAGE_TOOL = "fetch_remote_image";
+const DESCRIPTION = "Download an image from a public URL and save it as a run artifact, so a skill can place it in a document.";
+const INPUT_SCHEMA = {
+	type: "object",
+	properties: {
+		url: {
+			type: "string",
+			description: "Absolute https:// or http:// address of the image. Addresses on private networks are refused."
+		},
+		note: {
+			type: "string",
+			description: "Why you need this image. It is shown to the user when asking for permission."
+		},
+		describe: {
+			type: "boolean",
+			description: "Attach the image itself to the result so you can look at it. Set it only when the user asked what the picture shows; leave it out when you are collecting images for a document."
+		}
+	},
+	required: ["url"],
+	additionalProperties: false
+};
+const SYSTEM_PROMPT$1 = "Use fetch_remote_image when a document you are about to produce needs an image that lives at a public URL. To just show a public image in the conversation, write plain markdown — ![alt](https://…) — and do not call this tool. It returns a reference to pass on to the skill: a reference is not a path and cannot be read back. Set \"describe\" to true only when the user asked what a picture shows — it attaches the image so you can look at it, which costs extra, so leave it out while you are only collecting images for a document. Without \"describe\" you have not seen the image: say you cannot see it rather than guessing. Never infer the subject from the URL, the file name or the site it came from. The user is asked for permission before the first download, because fetching reveals their IP address to that site. Fetch one image per call, and only from addresses you got from the page or from the user — never guess a URL. Do not list the fetched references back to the user; say how many images went into the document instead.";
+const isFailure = (result) => "reason" in result;
+/**
+* 外链图片抓取工具（0.22.0 分册 13）。
+*
+* 与 `capture_page_image` 同一套范式：模型给出来源、宿主拿字节、回给模型的只有引用。
+* 三种图片来源（上传、页面、外链）因此在技能那一侧长得一模一样（AC-G1）。
+* @experimental
+*/
+function createRemoteImageToolSource(options) {
+	const { fetchImage } = options;
+	return {
+		kind: "remote-image",
+		listToolSpecs: () => Promise.resolve(fetchImage ? [{
+			name: FETCH_REMOTE_IMAGE_TOOL,
+			description: DESCRIPTION,
+			inputSchema: INPUT_SCHEMA
+		}] : []),
+		systemPrompt: () => Promise.resolve(fetchImage ? SYSTEM_PROMPT$1 : void 0),
+		canHandle: (name) => name === FETCH_REMOTE_IMAGE_TOOL,
+		captureArgs: (_name, args) => typeof args["url"] === "string" ? { url: args["url"] } : {},
+		call: async (name, args, context) => {
+			try {
+				if (name !== "fetch_remote_image" || !fetchImage) throw new WebSkillError("TOOL_UNSUPPORTED", `${name} is not available in this host.`);
+				const url = args["url"];
+				if (typeof url !== "string" || url.trim() === "") throw new WebSkillError("VALIDATION_FAILED", `${FETCH_REMOTE_IMAGE_TOOL} requires a non-empty "url" pointing at an image.`);
+				const note = typeof args["note"] === "string" && args["note"].trim() !== "" ? args["note"].trim() : void 0;
+				const describe = args["describe"] === true;
+				const result = await fetchImage({
+					url: url.trim(),
+					...note === void 0 ? {} : { note },
+					...describe ? { describe } : {}
+				}, context);
+				if (isFailure(result)) return {
+					ok: false,
+					content: [],
+					error: {
+						code: "TOOL_EXECUTION_FAILED",
+						message: result.kind === void 0 ? result.reason : `${result.reason} [${result.kind}]`
+					}
+				};
+				const data = describe ? result.data : void 0;
+				const mimeType = describe ? result.mimeType : void 0;
+				const seen = data !== void 0 && mimeType !== void 0;
+				const content = [{
+					type: "json",
+					data: {
+						url: url.trim(),
+						artifact: result.artifact,
+						width: result.width,
+						height: result.height,
+						bytes: result.bytes,
+						...seen ? { note: "The image in the next message is the picture downloaded from this URL." } : {}
+					}
+				}];
+				if (data !== void 0 && mimeType !== void 0) content.push({
+					type: "image",
+					id: result.artifact.replace(/^artifact:/, ""),
+					mimeType,
+					data
+				});
+				return {
+					ok: true,
+					content
+				};
+			} catch (e) {
+				return {
+					ok: false,
+					content: [],
+					error: {
+						code: e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED",
+						message: messageOf(e)
+					}
+				};
+			}
+		}
+	};
+}
+
+//#endregion
+//#region ../agent/src/dwg/views.ts
+/**
+* 视图取用（0.22.0 分册 23 FR-23.5 / FR-23.7）。
+*
+* 单独成文件是因为 diff、导出、投放面三边都要用同一套「哪些视图、按什么配对」，
+* 各写一份迟早会在某一边把空布局漏掉。
+*/
+/** 模型空间视图的固定 id。两份图纸靠它配对 */
+const DWG_MODEL_VIEW_ID = "Model";
+/**
+* 文档的视图列表。
+*
+* 分册 23 之前解析出的文档没有 `views`，给它补一个模型空间视图：
+* 那时的 `entities` 本来就是模型空间的全部内容，语义对得上。
+*/
+function dwgViewsOf(doc) {
+	const views = doc.views;
+	if (views && views.length > 0) return views;
+	return [{
+		id: DWG_MODEL_VIEW_ID,
+		name: DWG_MODEL_VIEW_ID,
+		kind: "model",
+		entities: doc.entities,
+		bounds: doc.bounds,
+		viewports: []
+	}];
+}
+/** 按 id 取视图；取不到就退回第一个，而不是什么都没有 */
+function dwgPickView(doc, viewId) {
+	const views = dwgViewsOf(doc);
+	return views.find((v) => v.id === viewId) ?? views[0];
+}
+
+//#endregion
+//#region ../agent/src/dwg/toolSource.ts
+const VIEW_DWG_TOOL = "view_dwg";
+/** 图层汇总进上下文的条数上限：图纸动辄几十上百个图层，全给等于把预算烧在噪声上 */
+const MAX_LAYER_ROWS = 25;
+/** 叠加的硬上限（FR-35.1）。三份叠在一起没有颜色方案能让人分得清 */
+const MAX_DRAWINGS = 2;
+const VIEW_SCHEMA = {
+	type: "object",
+	properties: { files: {
+		type: "array",
+		items: {
+			type: "string",
+			description: "The id of a .dwg. It can come from the download list, from a file the user attached, or from the id that read_linked_document returns for a drawing on the page. The download listing marks .dwg as unreadable because it has no text to extract — pass the id here anyway."
+		},
+		minItems: 1,
+		maxItems: MAX_DRAWINGS,
+		description: "One drawing id, or two to stack them on top of each other. Two drawings are overlaid in the same coordinate system so the user can see where they differ and measure it — the first id becomes the top layer. Pass two only when the user asked to look at two drawings."
+	} },
+	required: ["files"],
+	additionalProperties: false
+};
+const SYSTEM_PROMPT = "Use view_dwg to show a CAD drawing. Drawings reach you as ids, never as content: from the download list, from a file the user attached, or from read_linked_document when the drawing is linked on the page. Those three all hand you an id and nothing else — a drawing is far too large to put in front of you, so an id with no readable content is the expected outcome, not a failed read. list_downloaded_files reports .dwg as unreadable — that verdict is about extracting text, and does not apply here: hand the id to this tool and it will read the drawing itself. It opens a viewer for the user and returns only a summary to you — the drawing geometry never comes back as data, so do not ask for entity coordinates and do not try to describe the drawing from the tool result alone. The user drives the viewer: they switch between sheets and model space, turn layers on and off, and measure distances, areas and angles there. Pass two ids to stack two drawings in one viewer. That is for the user to look at, not for you to compare: you never receive the geometry, so you cannot say what changed between them. Tell the user to look and to measure, and offer to explain what the viewer controls do. The \"approximated\" count is geometry drawn imprecisely and the \"notDrawn\" count is geometry missing from the viewer entirely — say which one applies rather than merging them.";
+function omissionNote(doc) {
+	return doc.omissions.map((o) => {
+		switch (o.reason) {
+			case "acis-not-tessellated": return `${o.count} ${o.kind} solid(s) cannot be displayed: they are ACIS solids, which this reader does not tessellate.`;
+			case "pattern-approximated": return `${o.count} ${o.kind} entity(ies) are drawn with an approximated fill pattern, not the exact hatch definition.`;
+			case "pattern-too-dense": return `${o.count} hatch(es) have a pattern too dense to draw; their outline is shown without the fill.`;
+			case "linetype-unavailable": return `${o.count} entity(ies) reference a line type whose dash definition is unavailable; they are drawn solid.`;
+			case "unsupported-entity": return `${o.count} ${o.kind} entity(ies) are not supported and were not drawn.`;
+		}
+	});
+}
+function summariseDocument(doc) {
+	const views = dwgViewsOf(doc);
+	const tally = (severity) => doc.omissions.filter((o) => o.severity === severity).reduce((total, o) => total + o.count, 0);
+	return {
+		version: doc.version,
+		entities: views.reduce((total, v) => total + v.entities.length, 0),
+		views: views.map((v) => ({
+			id: v.id,
+			kind: v.kind,
+			entities: v.entities.length,
+			viewports: v.viewports.length
+		})),
+		layers: doc.layers.map((l) => l.name).slice(0, MAX_LAYER_ROWS),
+		layerCount: doc.layers.length,
+		approximated: tally("degraded"),
+		notDrawn: tally("dropped"),
+		notes: omissionNote(doc)
+	};
+}
+/**
+* 取件号列表（FR-35.1 / AC-35.2）。
+*
+* 超过上限**整调用拒绝**，不截断：模型传了三份却只看到两份，
+* 它会把缺的那份归因到图纸而不是工具。
+*/
+function requireFiles(args) {
+	const raw = args["files"];
+	if (!Array.isArray(raw) || raw.length === 0) throw new WebSkillError("VALIDATION_FAILED", `${VIEW_DWG_TOOL} requires a non-empty "files" array.`);
+	if (raw.length > MAX_DRAWINGS) throw new WebSkillError("VALIDATION_FAILED", `${VIEW_DWG_TOOL} opens at most ${MAX_DRAWINGS} drawings at once; ${raw.length} were requested. Ask the user which two to look at.`);
+	return raw.map((value, index) => {
+		if (typeof value !== "string" || value.trim() === "") throw new WebSkillError("VALIDATION_FAILED", `${VIEW_DWG_TOOL} "files[${index}]" must be a non-empty string.`);
+		return value.trim();
+	});
+}
+/** 宽松判断：只要带协议头就按链接处理。宁可多脱敏一次，也不要漏掉一个带令牌的地址 */
+function looksLikeUrl(value) {
+	return /^[a-z][a-z0-9+.-]*:\/\//i.test(value.trim());
+}
+/** 把 `load()` 的两种返回形态归一（FR-31.1）。判据是有没有 `document`，不是 `in` 关键字之外的猜测 */
+async function readDrawing(load, file, context) {
+	const loaded = await load(file, context);
+	if (!("document" in loaded)) return { document: loaded };
+	const name = typeof loaded.name === "string" ? loaded.name.trim() : "";
+	return {
+		document: loaded.document,
+		...name === "" ? {} : { name }
+	};
+}
+/**
+* DWG 查看工具（0.22.0 分册 19，分册 34 收敛为单工具）。
+*
+* 与 `capture_page_image` 同一套 `ExternalToolSource` 范式。
+* 解析与投放都由宿主注入：本包不认识 `.dwg` 字节，也不认识 `documentSurface`。
+* @experimental
+*/
+function createDwgToolSource(options) {
+	const { load, project } = options;
+	const available = load !== void 0 && project !== void 0;
+	return {
+		kind: "dwg",
+		listToolSpecs: () => Promise.resolve(available ? [{
+			name: VIEW_DWG_TOOL,
+			description: "Open a CAD drawing (DWG) in a viewer.",
+			inputSchema: VIEW_SCHEMA
+		}] : []),
+		systemPrompt: () => Promise.resolve(available ? SYSTEM_PROMPT : void 0),
+		canHandle: (name) => name === VIEW_DWG_TOOL,
+		/**
+		* 已审查（分册 30）：文件引用**通常**是用户可见的名字。
+		* 但 schema 允许传页面上的链接，而链接可能是带签名令牌的临时地址——
+		* 那种东西进技能快照就是把凭证写进一份可分享的产物。
+		* 所以不是把字段永久标成敏感，而是本次引用长得像 URL 时整调用不留。
+		*/
+		argCaptureTrust: (name, args) => {
+			if (name !== "view_dwg") return void 0;
+			const files = args["files"];
+			return Array.isArray(files) && files.some((f) => typeof f === "string" && looksLikeUrl(f)) ? { tier: "untrusted" } : { tier: "reviewed" };
+		},
+		captureArgs: (_name, args) => {
+			const files = args["files"];
+			return Array.isArray(files) ? { files: files.filter((f) => typeof f === "string") } : {};
+		},
+		call: async (name, args, context) => {
+			try {
+				if (!available || name !== "view_dwg") throw new WebSkillError("TOOL_UNSUPPORTED", `${name} is not available in this host.`);
+				const files = requireFiles(args);
+				const drawings = [];
+				for (const file of files) {
+					const drawing = await readDrawing(load, file, context);
+					drawings.push({
+						title: file,
+						document: drawing.document,
+						...drawing.name === void 0 ? {} : { fileName: drawing.name }
+					});
+				}
+				await project({ drawings }, context);
+				return {
+					ok: true,
+					content: [{
+						type: "json",
+						data: { drawings: drawings.map((d) => ({
+							file: d.title,
+							...d.fileName === void 0 ? {} : { fileName: d.fileName },
+							...summariseDocument(d.document)
+						})) }
+					}]
+				};
+			} catch (e) {
+				return {
+					ok: false,
+					content: [],
+					error: {
+						code: e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED",
+						message: messageOf(e)
+					}
+				};
+			}
+		}
+	};
 }
 
 //#endregion
-export { CLOSE_PAGE_TAB_TOOL, DEFAULT_MAX_DATA_SOURCE_BYTES, DELEGATE_TASK_TOOL, DELEGATION_SYSTEM_PROMPT, DOCUMENT_READ_BUDGET, DOWNLOAD_WAIT_DEFAULT_MS, DOWNLOAD_WAIT_MAX_MS, DOWNLOAD_WAIT_MIN_MS, DataSourceCandidatePolicy, DataSourcePolicy, DelegationOrchestrator, DownloadedFilePolicy, EXPORT_SPREADSHEET_TOOL, FOCUS_PAGE_TAB_TOOL, GENERATE_SKILL_TOOL, LIST_DOWNLOADED_FILES_TOOL, LIST_PAGE_TABS_TOOL, MANAGE_TODO_TOOL, PAGE_ACTION_KINDS, PAGE_ACTION_SYSTEM_PROMPT, PAGE_ACTION_TOOL, PAGE_DOCUMENT_REF, PDF_GARBLED_RATIO, PDF_LARGE_IMAGE_RATIO, PERCEIVE_PAGE_TOOL, PERCEPTION_PAGING_DEFAULTS, PERCEPTION_SYSTEM_PROMPT, PageActionPolicy, PagePerceptionPolicy, READ_DOCUMENT_TOOL, READ_DOWNLOADED_FILE_TOOL, SKILL_GENERATION_SYSTEM_PROMPT, SkillGenerator, TAB_WORKSET_DEFAULT_MAX, TAB_WORKSET_MAX_MAX, TAB_WORKSET_MIN_MAX, TAB_WORKSET_SYSTEM_PROMPT, TODO_SYSTEM_PROMPT, TabWorksetPolicy, TodoStore, asReadMode, clampDownloadWaitMs, clampWorksetMax, createDelegationToolSource, createDocumentToolSource, createDownloadedFileToolSource, createHttpDataSourceTransport, createPageActionToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createSpreadsheetToolSource, createTabWorksetToolSource, createTodoToolSource, defersImage, frameLabel, frameSteps, isPdfTextTrustworthy, measurePdfTextQuality, sniffDocumentFormat, takesImage, toActionFrameScopes, toFrameScopes, withDelegationOrigin };
+export { CAPTURE_PAGE_IMAGE_TOOL, CLOSE_PAGE_TAB_TOOL, DEFAULT_MAX_DATA_SOURCE_BYTES, DELEGATE_TASK_TOOL, DELEGATION_SYSTEM_PROMPT, DOCUMENT_READ_BUDGET, DOWNLOAD_WAIT_DEFAULT_MS, DOWNLOAD_WAIT_MAX_MS, DOWNLOAD_WAIT_MIN_MS, DWG_MODEL_VIEW_ID, DataSourceCandidatePolicy, DataSourcePolicy, DelegationOrchestrator, DownloadedFilePolicy, EMU_PER_PIXEL, EMU_PER_POINT, EMU_PER_TWIP, EXPORT_SPREADSHEET_TOOL, FETCH_REMOTE_IMAGE_TOOL, FILL_TEMPLATE_TOOL, FOCUS_PAGE_TAB_TOOL, GENERATE_SKILL_TOOL, INSPECT_TEMPLATE_TOOL, LIST_DOWNLOADED_FILES_TOOL, LIST_PAGE_TABS_TOOL, MANAGE_TODO_TOOL, MAX_DIGIT_WIDTH, PAGE_ACTION_KINDS, PAGE_ACTION_SYSTEM_PROMPT, PAGE_ACTION_TOOL, PAGE_DOCUMENT_REF, PDF_GARBLED_RATIO, PDF_LARGE_IMAGE_RATIO, PERCEIVE_PAGE_TOOL, PERCEPTION_PAGING_DEFAULTS, PERCEPTION_SYSTEM_PROMPT, PageActionPolicy, PagePerceptionPolicy, READ_DOCUMENT_TOOL, READ_DOWNLOADED_FILE_TOOL, SCROLL_DIRECTIONS, SKILL_GENERATION_SYSTEM_PROMPT, SkillGenerator, TAB_WORKSET_DEFAULT_MAX, TAB_WORKSET_MAX_MAX, TAB_WORKSET_MIN_MAX, TAB_WORKSET_SYSTEM_PROMPT, TEMPLATE_INSPECT_BUDGET, TODO_SYSTEM_PROMPT, TabWorksetPolicy, TodoStore, VIEW_DWG_TOOL, asReadMode, clampDownloadWaitMs, clampWorksetMax, columnWidthToPixels, createDelegationToolSource, createDocumentToolSource, createDownloadedFileToolSource, createDwgToolSource, createHttpDataSourceTransport, createPageActionToolSource, createPageImageToolSource, createPagePerceptionToolSource, createRemoteImageToolSource, createSkillGenerationToolSource, createSpreadsheetToolSource, createTabWorksetToolSource, createTemplateToolSource, createTodoToolSource, defersImage, dwgPickView, dwgViewsOf, fitWithin, formatCellAddress, frameLabel, frameSteps, isPdfTextTrustworthy, isRangeTopLeft, measurePdfTextQuality, parseCellAddress, parseCellRange, rangeContains, readImageSize, sniffDocumentFormat, takesImage, toActionFrameScopes, toFrameScopes, withDelegationOrigin };