@webskill/sdk 0.22.0 → 0.24.0

package/dist/{geometry-wx5ZTYzi.js → geometry-CRhuySKV.js}

@@ -43,6 +43,13 @@ function toFrameScopes(scope) {
 		...scope.exclude ? { exclude: scope.exclude } : {}
 	}];
 }
+/** 四个方向的规范清单；工具层校验与文案生成都从这里取，不各写一份 */
+const SCROLL_DIRECTIONS = [
+	"up",
+	"down",
+	"left",
+	"right"
+];
 
 //#endregion
 //#region ../agent/src/pageAction/types.ts
@@ -712,4 +719,4 @@ function readJpegSize(view, length) {
 }
 
 //#endregion
-export { DOCUMENT_READ_BUDGET as C, toFrameScopes as D, toActionFrameScopes as E, frameLabel as O, sniffDocumentFormat as S, PAGE_DOCUMENT_REF as T, defersImage as _, columnWidthToPixels as a, isPdfTextTrustworthy as b, isRangeTopLeft as c, rangeContains as d, readImageSize as f, asReadMode as g, createDocumentToolSource as h, MAX_DIGIT_WIDTH as i, frameSteps as k, parseCellAddress as l, READ_DOCUMENT_TOOL as m, EMU_PER_POINT as n, fitWithin as o, PDF_LARGE_IMAGE_RATIO as p, EMU_PER_TWIP as r, formatCellAddress as s, EMU_PER_PIXEL as t, parseCellRange as u, takesImage as v, PAGE_ACTION_KINDS as w, measurePdfTextQuality as x, PDF_GARBLED_RATIO as y };
+export { frameSteps as A, DOCUMENT_READ_BUDGET as C, SCROLL_DIRECTIONS as D, toActionFrameScopes as E, toFrameScopes as O, sniffDocumentFormat as S, PAGE_DOCUMENT_REF as T, defersImage as _, columnWidthToPixels as a, isPdfTextTrustworthy as b, isRangeTopLeft as c, rangeContains as d, readImageSize as f, asReadMode as g, createDocumentToolSource as h, MAX_DIGIT_WIDTH as i, frameLabel as k, parseCellAddress as l, READ_DOCUMENT_TOOL as m, EMU_PER_POINT as n, fitWithin as o, PDF_LARGE_IMAGE_RATIO as p, EMU_PER_TWIP as r, formatCellAddress as s, EMU_PER_PIXEL as t, parseCellRange as u, takesImage as v, PAGE_ACTION_KINDS as w, measurePdfTextQuality as x, PDF_GARBLED_RATIO as y };

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { K as FileSystemProvider, S as UiBridge, _t as SkillDocument, et as Page, f as LlmMessage, ht as SkillCatalogEntry, l as LlmClient, tt as PageQuery, xt as SkillManagerPort } from "./types-CpDRZ0rA-BM5FI9oN.js";
-import { Wt as RuntimeRun, dn as SkillIntegrityGuard, fn as SkillOutcomeReporter, gn as SkillStateGuard, hr as WebSkillRuntime, tt as IntegrityVerdict } from "./index-YPd8ZSEa.js";
-import { _ as SkillState, a as AuditLog, b as SkillVersionStore, c as CandidateFile, d as CandidateSkill, f as CandidateSource, g as SKILL_VERSION_PAGE_SIZE, h as CompositeApprovalPolicy, i as AuditEvent, l as CandidatePage, m as CandidateStore, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStatus, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateRisk, v as SkillVersion, x as candidateToCatalogEntry, y as SkillVersionPage } from "./skillVersionStore-B24Jjjry-BY1H7Krp.js";
+import { K as FileSystemProvider, S as UiBridge, _t as SkillDocument, et as Page, f as LlmMessage, ht as SkillCatalogEntry, l as LlmClient, tt as PageQuery, xt as SkillManagerPort } from "./types-CpDRZ0rA-CFQ-vdKz.js";
+import { Wt as RuntimeRun, dn as SkillIntegrityGuard, fn as SkillOutcomeReporter, gn as SkillStateGuard, hr as WebSkillRuntime, tt as IntegrityVerdict } from "./index-Bq299VnF.js";
+import { S as candidateToCatalogEntry, _ as SKILL_VERSION_PAGE_SIZE, a as AuditLog, b as SkillVersionPage, c as CandidateBinaryRef, d as CandidateRisk, f as CandidateSkill, g as CompositeApprovalPolicy, h as CandidateStore, i as AuditEvent, l as CandidateFile, m as CandidateStatus, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateSource, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidatePage, v as SkillState, x as SkillVersionStore, y as SkillVersion } from "./skillVersionStore-S4_HJ_Fl-Ds97pwm5.js";
 //#region ../governance/dist/index.d.ts
 //#region src/candidate/candidateNormalizer.d.ts
 /** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
@@ -10,10 +10,14 @@ declare function sanitizeCandidateName(raw: string): string;
 /**
  * 文件归一：补 SKILL.md；路径含 `..` / 以 `/` 开头 / 含 `\` → CANDIDATE_INVALID；
  * scripts/ 下必须是 .ts/.js。
+ *
+ * 路径校验对两种形态**一视同仁**（0.23.0 分册 20 FR-20.3）：这套校验本来就与内容无关，
+ * 二进制条目走另一套校验等于给越界路径开第二道门。
  */
 declare function normalizeCandidateFiles(files: Array<{
   path: string;
   content: string;
+  binary?: CandidateBinaryRef;
 }>, name: string, description: string): CandidateFile[];
 /** 含脚本且 LLM 自报 low → 强制 medium 并追加"必须人工审批"原因 */
 declare function normalizeRisk(declared: unknown, files: CandidateFile[], reasons: string[]): {
@@ -53,6 +57,20 @@ interface GeneratedSkillSubmission {
   sessionId?: string;
   /** 用户确认的时刻（FR-9.7 的「用户确认事实」） */
   confirmedAt: string;
+  /**
+   * 已物化的二进制，键是 `draft.files[].path`（0.23.0 分册 20）。
+   * 字节由 agent 侧在用户确认之前取好——候选一旦生成就必须能脱离会话附件独立存活（FR-20.6）。
+   */
+  binaries?: ReadonlyMap<string, SubmittedBinary>;
+}
+/** 一份随候选提交的字节及其校验信息（0.23.0 分册 20） */
+interface SubmittedBinary {
+  bytes: Uint8Array;
+  size: number;
+  /** 十六进制小写 */
+  sha256: string;
+  /** 上传时的原始文件名 */
+  sourceName: string;
 }
 interface CandidateSinkOptions {
   store: CandidateStore;
@@ -561,4 +579,4 @@ declare function createMissHook(deps: {
  */
 declare function completeText(llm: LlmClient, messages: LlmMessage[]): Promise<string>;
 //#endregion
-export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditChainVerification, type AuditEvent, type AuditEventType, type AuditLog, type AuditPage, type AuditQueryFilter, CANDIDATE_PAGE_SIZE, type CandidateFile, type CandidatePage, type CandidateRisk, type CandidateSink, type CandidateSinkOptions, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, type GeneratedSkillSubmission, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, type RepairOption, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, type SkillVersionPage, SkillVersionStore, type SourceDocument, USER_CAUSED_CODES, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditChainVerification, type AuditEvent, type AuditEventType, type AuditLog, type AuditPage, type AuditQueryFilter, CANDIDATE_PAGE_SIZE, type CandidateBinaryRef, type CandidateFile, type CandidatePage, type CandidateRisk, type CandidateSink, type CandidateSinkOptions, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, type GeneratedSkillSubmission, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, type RepairOption, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, type SkillVersionPage, SkillVersionStore, type SourceDocument, type SubmittedBinary, USER_CAUSED_CODES, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };

package/dist/governance.js

@@ -1,6 +1,6 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
-import { y as isValidSkillName } from "./skill-CAJMsLod.js";
-import { a as atomicWriteText, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
+import { y as isValidSkillName } from "./skill-WSUDp6A1.js";
+import { a as atomicWriteBinary, o as atomicWriteText, t as assertSafePathSegment } from "./pathSecurity-CirkQwWP.js";
 import { d as partsToText, p as textParts } from "./llm-eIQNO9tr.js";
 import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-DcTQXSV1.js";
 
@@ -36,8 +36,32 @@ const kindOf = (path) => {
 	return "asset";
 };
 /**
+* 二进制引用的形状校验（0.23.0 分册 20）。
+*
+* 这条管线的既定前提是「不信任全链路」，所以引用也要逐字段查过才收下：
+* 一条字段缺失的引用会一路活到安装那一步，届时才表现为读不到字节的技能包。
+* `file` 必须是单个文件名——带路径分隔符的值等于一条越出候选旁路目录的通路。
+*/
+function readBinaryRef(raw) {
+	if (raw === void 0 || raw === null) return void 0;
+	if (typeof raw !== "object" || Array.isArray(raw)) return invalid("Candidate file \"binary\" must be an object");
+	const { file, size, sha256, sourceName } = raw;
+	if (typeof file !== "string" || file === "" || file.includes("/") || file.includes("\\") || file.includes("..")) return invalid(`Candidate binary file name is not allowed: ${JSON.stringify(file)}`);
+	if (typeof size !== "number" || !Number.isFinite(size) || size < 0) return invalid(`Candidate binary "${file}" has an invalid size`);
+	if (typeof sha256 !== "string" || !/^[0-9a-f]{64}$/.test(sha256)) return invalid(`Candidate binary "${file}" has an invalid sha256`);
+	return {
+		file,
+		size,
+		sha256,
+		sourceName: typeof sourceName === "string" ? sourceName : file
+	};
+}
+/**
 * 文件归一：补 SKILL.md；路径含 `..` / 以 `/` 开头 / 含 `\` → CANDIDATE_INVALID；
 * scripts/ 下必须是 .ts/.js。
+*
+* 路径校验对两种形态**一视同仁**（0.23.0 分册 20 FR-20.3）：这套校验本来就与内容无关，
+* 二进制条目走另一套校验等于给越界路径开第二道门。
 */
 function normalizeCandidateFiles(files, name, description) {
 	const out = [];
@@ -49,7 +73,8 @@ function normalizeCandidateFiles(files, name, description) {
 		out.push({
 			path: p,
 			kind,
-			content: String(file.content ?? "")
+			content: String(file.content ?? ""),
+			...file.binary !== void 0 ? { binary: file.binary } : {}
 		});
 	}
 	if (!out.some((f) => f.kind === "skill-md")) out.unshift({
@@ -77,10 +102,15 @@ function normalizeCandidate(input) {
 	const description = typeof raw["description"] === "string" ? raw["description"] : "";
 	if (description.trim() === "") invalid("Candidate is missing a description");
 	const name = sanitizeCandidateName(typeof raw["name"] === "string" ? raw["name"] : invalid("Candidate is missing a name"));
-	const files = normalizeCandidateFiles((Array.isArray(raw["files"]) ? raw["files"] : []).map((f) => ({
-		path: String(f?.["path"] ?? ""),
-		content: String(f?.["content"] ?? "")
-	})), name, description);
+	const files = normalizeCandidateFiles((Array.isArray(raw["files"]) ? raw["files"] : []).map((f) => {
+		const record = f ?? {};
+		const binary = readBinaryRef(record["binary"]);
+		return {
+			path: String(record["path"] ?? ""),
+			content: String(record["content"] ?? ""),
+			...binary !== void 0 ? { binary } : {}
+		};
+	}), name, description);
 	const declaredReasons = Array.isArray(raw["riskReasons"]) ? raw["riskReasons"].map(String) : [];
 	const { risk, reasons } = normalizeRisk(raw["risk"], files, declaredReasons);
 	const now = input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
@@ -137,6 +167,8 @@ function takeTailPage(all, options, defaultLimit, what) {
 //#endregion
 //#region ../governance/src/candidate/candidateStore.ts
 const dirOf$1 = (root) => `${root}/.webskill/candidates`;
+/** 候选的二进制旁路目录（0.23.0 分册 20 §3）：与元数据 JSON 同级，整目录随候选一起删 */
+const candidateBinaryDir = (root, id) => `${dirOf$1(root)}/${id}.files`;
 /** 候选列表的缺省页长。缺省属于实现，不属于调用方 */
 const CANDIDATE_PAGE_SIZE = 50;
 /** 逐文件持久化的候选存储：<managedRoot>/.webskill/candidates/<id>.json */
@@ -149,11 +181,37 @@ var CandidateStore = class {
 		this.#fs = deps.fs;
 		this.#isSkillInstalled = deps.isSkillInstalled;
 	}
-	async save(candidate) {
+	/**
+	* 存候选。`binaries` 的键是 `CandidateFile.binary.file`，缺省即本候选全是文本。
+	*
+	* 落盘顺序是**先字节、后 JSON**（0.23.0 分册 20 §3.2）：反过来的话，
+	* 崩溃会留下一条指向不存在字节的元数据，而那种候选要到审批安装那一步才暴露——
+	* 正是 FR-20.6 要避免的那类「延迟到审批才失败」。
+	*/
+	async save(candidate, binaries) {
 		validateCandidate(candidate);
 		assertSafePathSegment(candidate.id, "candidate id");
+		for (const file of candidate.files) {
+			if (file.binary === void 0) continue;
+			const bytes = binaries?.get(file.binary.file);
+			if (bytes === void 0) {
+				if (await this.#fs.exists(this.#binaryPath(candidate.id, file.binary.file))) continue;
+				throw new WebSkillError("CANDIDATE_INVALID", `Candidate "${candidate.name}" declares binary "${file.path}" but its bytes were not provided`);
+			}
+			assertSafePathSegment(file.binary.file, "candidate binary file");
+			await atomicWriteBinary(this.#fs, this.#binaryPath(candidate.id, file.binary.file), bytes);
+		}
 		await atomicWriteText(this.#fs, `${dirOf$1(this.#root)}/${candidate.id}.json`, JSON.stringify(candidate, null, 2));
 	}
+	/** 读回候选旁路里的一份字节（安装时按原样写进技能目录，0.23.0 分册 20 FR-20.8） */
+	readCandidateBinary(id, file) {
+		assertSafePathSegment(id, "candidate id");
+		assertSafePathSegment(file, "candidate binary file");
+		return this.#fs.readBinary(this.#binaryPath(id, file));
+	}
+	#binaryPath(id, file) {
+		return `${candidateBinaryDir(this.#root, id)}/${file}`;
+	}
 	async get(id) {
 		assertSafePathSegment(id, "candidate id");
 		const path = `${dirOf$1(this.#root)}/${id}.json`;
@@ -202,6 +260,8 @@ var CandidateStore = class {
 		if (candidate.status === "approved") throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidate.name}" cannot be removed from status "${candidate.status}"`);
 		if (candidate.status === "published" && await this.#skillStillInstalled(candidate.name)) throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidate.name}" is the provenance record of an installed skill and cannot be removed; uninstall the skill first`);
 		await this.#fs.remove(`${dirOf$1(this.#root)}/${id}.json`);
+		const binaryDir = candidateBinaryDir(this.#root, id);
+		if (await this.#fs.exists(binaryDir)) await this.#fs.remove(binaryDir, { recursive: true });
 	}
 	async #skillStillInstalled(name) {
 		return this.#isSkillInstalled === void 0 ? true : await this.#isSkillInstalled(name);
@@ -224,6 +284,16 @@ function candidateToCatalogEntry(candidate) {
 //#endregion
 //#region ../governance/src/candidate/candidateSink.ts
 /**
+* 旁路文件名：序号在前保证唯一，原名跟在后面是为了让人在文件管理器里也认得出
+* 哪个是哪个（0.23.0 分册 20 §3）。直接拿技能内路径当文件名不行——
+* 那是一个平铺目录，`references/a/t.xlsx` 与 `references/b/t.xlsx` 会撞在一起。
+* 权威的原名记在 `sourceName` 里，这里只保留能安全落盘的那部分。
+*/
+const binaryFileNameOf = (index, path) => {
+	const safe = (path.split("/").pop() ?? "").replace(/[^A-Za-z0-9._-]/g, "_").replace(/^\.+/, "");
+	return `${index}-${safe === "" ? "file" : safe}`;
+};
+/**
 * 把 agent 生成的技能草稿接进既有的候选管线（设计 02 §5）。
 *
 * 走的是与文档抽取、runtime-miss 完全相同的 `normalizeCandidate` → `CandidateStore.save`，
@@ -232,6 +302,26 @@ function candidateToCatalogEntry(candidate) {
 function createCandidateSink(options) {
 	return { async submit(input) {
 		const { draft } = input;
+		const bytes = /* @__PURE__ */ new Map();
+		const files = (draft.files ?? []).map((file, index) => {
+			const payload = input.binaries?.get(file.path);
+			if (payload === void 0) return {
+				path: file.path,
+				content: file.content
+			};
+			const name = binaryFileNameOf(index, file.path);
+			bytes.set(name, payload.bytes);
+			return {
+				path: file.path,
+				content: "",
+				binary: {
+					file: name,
+					size: payload.size,
+					sha256: payload.sha256,
+					sourceName: payload.sourceName
+				}
+			};
+		});
 		const candidate = normalizeCandidate({
 			raw: {
 				name: draft.name,
@@ -239,7 +329,7 @@ function createCandidateSink(options) {
 				files: [{
 					path: "SKILL.md",
 					content: draft.content
-				}, ...draft.files ?? []]
+				}, ...files]
 			},
 			source: "generated",
 			...options.now ? { now: options.now } : {},
@@ -250,7 +340,7 @@ function createCandidateSink(options) {
 			confirmedAt: input.confirmedAt,
 			...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {}
 		};
-		await options.store.save(candidate);
+		await options.store.save(candidate, bytes);
 		await options.audit?.append({
 			type: AUDIT_EVENT_TYPES.candidateCreated,
 			target: candidate.id,
@@ -816,7 +906,11 @@ const fileOf = (root) => `${root}/.webskill/states.json`;
 const POLICY_DENIAL_CODES = /* @__PURE__ */ new Set([
 	"NETWORK_BLOCKED",
 	"TOOL_NOT_ALLOWED",
-	"FS_PERMISSION_DENIED"
+	"FS_PERMISSION_DENIED",
+	"PAGE_ACTION_OUT_OF_SCOPE",
+	"PERCEPTION_SUBTREE_OUT_OF_SCOPE",
+	"PERCEPTION_NOT_ENABLED",
+	"SKILL_GENERATION_DISABLED"
 ]);
 /**
 * 用户自身原因的错误码（0.10.0 UI-UX5 #49-2）：交互等待超时（用户没处理）与
@@ -826,7 +920,13 @@ const POLICY_DENIAL_CODES = /* @__PURE__ */ new Set([
 * 是因为宿主执行器也可能把「等用户时被取消/超时」包成 ok:false 的失败结果交回来——
 * 「算不算技能的错」的判定口径必须在上报侧只有这一处。
 */
-const USER_CAUSED_CODES = /* @__PURE__ */ new Set(["RUN_INTERACTION_TIMEOUT", "RUN_CANCELLED"]);
+const USER_CAUSED_CODES = /* @__PURE__ */ new Set([
+	"RUN_INTERACTION_TIMEOUT",
+	"RUN_CANCELLED",
+	"PAGE_ACTION_DECLINED",
+	"TOOL_DENIED",
+	"DOCUMENT_SURFACE_DECLINED"
+]);
 /** 自动隔离的原因判别式（FR-12.6）；人工隔离仍写自由文本 */
 const QUARANTINE_REASONS = {
 	integrity: "integrity",

package/dist/{index-CjwdZQOS.d.ts → index-B3rMAUWB.d.ts}

@@ -1,5 +1,5 @@
-import { L as ChatAttachmentKind, Rt as WebSkillErrorCode, S as UiBridge, a as InteractionOrigin, c as InteractionResponse, nt as RemoteUrlPolicy, s as InteractionRequest, t as Artifact } from "./types-CpDRZ0rA-BM5FI9oN.js";
-import { B as ExternalToolSource, F as DocxTextExtractor, Fn as ToolStepReader, M as DataSourceInfo, kn as ToolCallContext, mt as PptxTextExtractor, pt as PdfTextExtractor, vr as XlsxTextExtractor, xn as SpreadsheetImageBytes } from "./index-YPd8ZSEa.js";
+import { L as ChatAttachmentKind, Rt as WebSkillErrorCode, S as UiBridge, a as InteractionOrigin, c as InteractionResponse, nt as RemoteUrlPolicy, s as InteractionRequest, t as Artifact } from "./types-CpDRZ0rA-CFQ-vdKz.js";
+import { B as ExternalToolSource, F as DocxTextExtractor, Fn as ToolStepReader, M as DataSourceInfo, kn as ToolCallContext, mt as PptxTextExtractor, pt as PdfTextExtractor, vr as XlsxTextExtractor, xn as SpreadsheetImageBytes } from "./index-Bq299VnF.js";
 //#region ../agent/dist/index.d.ts
 //#region src/todo/types.d.ts
 /** 待办条目状态：未开始 / 进行中 / 已完成（FR-3.1） */
@@ -48,11 +48,18 @@ declare class TodoStore {
   /**
    * 更新单条。置为 `in-progress` 时其余进行中条目降级为 `pending`，
    * 每条降级各发一次 `todo.updated`，事件序列与状态变化一一对应。
+   *
+   * `options.concurrent` 由**编排器**在并发委派时传（0.23.0 分册 19 FR-19.9）：
+   * 几个子 agent 真的在同时跑，把别人降级回 `pending` 是在界面上说谎。
+   * 模型经 `manage_todo` 的写入不传它，仍维持「同时只有一条进行中」——
+   * 那条约束针对的是模型乱标（名义并行、实则一件事），不是真并发。
    */
   update(id: string, patch: {
     status?: TodoStatus;
     title?: string;
     delegatedTo?: string;
+  }, options?: {
+    concurrent?: boolean;
   }): TodoList;
   clear(): void;
 }
@@ -90,9 +97,14 @@ interface GeneratedSkillDraft {
   description: string;
   /** SKILL.md 全文，含 frontmatter */
   content: string;
+  /**
+   * 附带文件。`attachmentId` 在场即本条目的内容是**本会话已上传的那个附件的字节**，
+   * 此时 `content` 恒为空串——模型从没持有过那些字节，让它复述等于让它编（0.23.0 分册 20）。
+   */
   files?: readonly {
     path: string;
     content: string;
+    attachmentId?: string;
   }[];
   /**
    * 模型声称这个技能会执行的工具调用（分册 30 / FR-30.4）。
@@ -105,6 +117,30 @@ interface GeneratedSkillDraft {
     args?: Record<string, unknown>;
   }[];
 }
+/**
+ * 一个被指认的附件的字节与身份（0.23.0 分册 20）。
+ * 由宿主的 `SkillGeneratorOptions.resolveAttachment` 交出。
+ */
+interface SkillAttachmentBytes {
+  bytes: Uint8Array;
+  /** 上传时的原始文件名，供审核者辨认（FR-20.10） */
+  name: string;
+  contentType?: string;
+}
+/**
+ * 已物化的一份二进制：字节加上它的身份与校验信息（0.23.0 分册 20）。
+ *
+ * `sha256` 不是装饰——AC-20.1 的「逐字节相同」靠它判，
+ * 而本册要防的失败模式正是**悄悄损坏**：被 UTF-8 往返污染过的 `.xlsx`
+ * 仍能被宽容的解析器打开，却在用户手里丢数据。
+ */
+interface SkillBinaryPayload {
+  bytes: Uint8Array;
+  size: number;
+  /** 十六进制小写 */
+  sha256: string;
+  sourceName: string;
+}
 /**
  * 候选收货端口。实现由宿主注入——`@webskill/agent` 不依赖 `@webskill/governance`
  * （治理层要求宿主提供治理根与审计存储，是可选层）。
@@ -117,6 +153,11 @@ interface SkillCandidateSink {
     sessionId?: string;
     /** 用户确认的时刻（FR-9.7 要求审计能查到确认事实） */
     confirmedAt: string;
+    /**
+     * 已物化的二进制，键是 `draft.files[].path`。缺省即本次生成全是文本（0.23.0 分册 20）。
+     * 字节在这里就已经读出来了：候选必须能脱离会话附件独立存活（FR-20.6）。
+     */
+    binaries?: ReadonlyMap<string, SkillBinaryPayload>;
   }): Promise<{
     id: string;
   }>;
@@ -125,6 +166,10 @@ interface SkillCandidateSink {
 interface SkillGenerationPolicy {
   /** 单次会话内的生成次数上限，默认 3 */
   maxPerSession?: number;
+  /** 单个二进制条目的字节上限（0.23.0 分册 20 FR-20.12） */
+  maxBinaryBytes?: number;
+  /** 一个技能内所有二进制条目的字节总量上限（0.23.0 分册 20 FR-20.12） */
+  maxTotalBinaryBytes?: number;
 }
 type SkillGenerationOutcome = {
   status: 'submitted';
@@ -151,6 +196,16 @@ interface SkillGeneratorOptions {
    * 这既让本册可分步落地，也给 AC-30.14 的反向对照留了现成的造法。
    */
   steps?: ToolStepReader;
+  /**
+   * 按 id 取本会话已上传附件的字节（0.23.0 分册 20 FR-20.2）。
+   *
+   * **按 id 查而不是按路径取**是安全边界：路径入参等于给模型一条把宿主磁盘上
+   * 任意文件复制进技能包的通路；按 id 在本会话附件表里查，能被指认的集合
+   * 恰好等于「用户自己这次会话上传的东西」。查不到（含跨会话的 id）返回 `undefined`。
+   *
+   * 不注入即本宿主不支持指认附件，模型给了 `attachmentId` 也按拒绝处理。
+   */
+  resolveAttachment?: (id: string) => Promise<SkillAttachmentBytes | undefined>;
 }
 /** 生成器面向用户的文案；缺省全部为英文模板 */
 interface SkillGenerationMessages {
@@ -263,13 +318,21 @@ interface DelegationOrchestratorOptions {
   policy?: Partial<DelegationBudget>;
   /** 接上清单后委派关系在 UI 可见（FR-11.5） */
   todos?: TodoStore;
+  /**
+   * 同时在跑的子 agent 数上限（0.23.0 分册 19 FR-19.5/19.16）。
+   *
+   * 每次委派入口都会重新调用它：用户在确认卡里选的并发数是会话中途才定下来的，
+   * 装配期读一次就固化的话，那个旋钮永远停在默认值上。
+   * 缺省 1，即维持 0.22.x 之前的串行行为——只是超额的请求改为排队而不再报错。
+   */
+  concurrencyLimit?: () => number;
 }
 /**
- * 串行委派编排器（设计 03 §13–§16）。
+ * 委派编排器（设计 03 §13–§16，并发改造见 0.23.0 分册 19）。
  *
- * 严格串行由**内部互斥**保证而不是调用方自觉：并发委派会产生并发待决交互，
- * 而当前交互模型是单一待决 nonce，届时表现为「点了没反应」。
- * 放开并发必须显式改这里的守卫，不会悄悄发生。
+ * 并发放开的前提是**并行的是执行、不是提问**：待决交互仍然一次只呈现一张，
+ * 由 `ReactBridgeState` / `specInteractionChannel` 的队列保证。
+ * 若要在别处复用本编排器，那两处的排队语义是它的前置条件。
  *
  * 上下文隔离靠回值形状达成：只有 `summary` 回到父 agent，
  * 子 agent 的消息历史根本不经过本对象。
@@ -278,7 +341,7 @@ interface DelegationOrchestratorOptions {
 declare class DelegationOrchestrator {
   #private;
   constructor(options: DelegationOrchestratorOptions);
-  /** 当前正在执行的委派任务；无则 undefined */
+  /** 正在执行的委派任务之一；全部空闲则 undefined。仅供诊断 */
   get running(): string | undefined;
   delegate(request: DelegationRequest): Promise<DelegationResult>;
 }
@@ -313,10 +376,10 @@ declare function withDelegationOrigin(bridge: UiBridge, origin: InteractionOrigi
 //#endregion
 //#region src/prompts/delegation.d.ts
 /**
- * 串行委派的策略提示词（设计 03 §13）。
+ * 委派的策略提示词（设计 03 §13；并发改造见 0.23.0 分册 19）。
  *
- * 「一次只能有一个」是编排器的硬约束，这里写进提示词是为了让模型不去
- * 尝试并行委派——被拒绝的调用会浪费一轮，而不是产生并发。
+ * 并发数那两句是**建议**而非约束：真正拦住数量的是编排器的排队与宿主硬上限。
+ * 写在这里是为了让模型按任务真实需要给值，而不是一口气派出一大批。
  */
 declare const DELEGATION_SYSTEM_PROMPT: string;
 //#endregion
@@ -444,8 +507,23 @@ interface PerceivedNode {
    * 它的其余子节点在前一段或后一段里。缺省不带该字段。
    */
   continued?: boolean;
+  /**
+   * 此处还能往哪些方向滚（0.23.0 分册 22 FR-22.1）。只在该元素**自身**是可滚容器、
+   * 且该方向尚未到头时出现；两端都到头字段就消失。
+   *
+   * 不表达滚动量：给了数值模型就会算「还要滚几次」，而列虚拟化下 `scrollWidth`
+   * 随列的重建而变，那个算法必然算错（沿用 0.18.0 FR-10.2）。
+   *
+   * **出现该字段的节点必然带 `ref`**——标了能滚却给不出句柄，模型就处在
+   * 「知道能滚、够不着」的状态，正是 AC-G8 要禁的那种幽灵能力。
+   */
+  scrollable?: readonly ScrollDirection[];
   children?: readonly PerceivedNode[];
 }
+/** 滚动方向（0.23.0 分册 22）。感知的 `scrollable` 与动作记录的 `direction` 共用，避免两处漂移 */
+type ScrollDirection = 'up' | 'down' | 'left' | 'right';
+/** 四个方向的规范清单；工具层校验与文案生成都从这里取，不各写一份 */
+declare const SCROLL_DIRECTIONS: readonly ScrollDirection[];
 /** 随感知一起下发的一张图像（FR-12.1） @experimental */
 interface PerceivedImage {
   /** 与 `PerceivedNode.imageId` 对应 */
@@ -1274,9 +1352,11 @@ interface PageActionRecord {
    * 本次滚动的方向与实际位移（0.18.0 FR-10.8）；非 `scroll` 动作不带。
    * 位移要进留痕：只记「滚了」而不记「滚了多少」，事后分不出
    * 「滚到底了」与「根本没滚动」。
+   *
+   * 0.23.0 分册 22 起方向扩到四向：横向滚动记成 `down` 会让留痕说谎。
    */
   scrolled?: {
-    direction: 'down' | 'up';
+    direction: ScrollDirection;
     movedBy: number;
     atEnd: boolean;
   };
@@ -1488,12 +1568,6 @@ interface PageActionToolSourceOptions {
 declare function createPageActionToolSource(options: PageActionToolSourceOptions): ExternalToolSource;
 //#endregion
 //#region src/prompts/pageAction.d.ts
-/**
- * 页面操作的系统提示词（需求 23）。
- *
- * 措辞刻意保守：提示词里的鼓励性表述会直接抬高模型尝试操作的频率，
- * 而每一次尝试都要打断用户去点确认。
- */
 declare const PAGE_ACTION_SYSTEM_PROMPT: string;
 //#endregion
 //#region src/tabs/policy.d.ts
@@ -2088,6 +2162,12 @@ interface TemplateSheetSkeleton {
   readonly cells: readonly TemplateCellSkeleton[];
   readonly merges: readonly string[];
   readonly columnWidths: readonly number[];
+  /** 空着、等着被填的格，压成矩形区间如 `B6:B8`（0.24.0 FR-17.1 / FR-17.3） */
+  readonly blanks?: readonly string[];
+  /** 被合并区吞掉的格（不含左上角），写进去不会显示（FR-17.4） */
+  readonly covered?: readonly string[];
+  /** 表头行，1 基（FR-17.5）。启发式推导，只用于警示 */
+  readonly headerRows?: readonly number[];
 }
 /** @experimental */
 interface XlsxTemplateSkeleton {
@@ -2152,10 +2232,49 @@ interface DocxTemplateFillSpec {
     column?: number;
   } & TemplateImageBytes)[];
 }
+/**
+ * 一条被挡回的填写（0.24.0 分册 17 · 设计 18 §4.2）。
+ *
+ * 挡是对的，整批抛不对：模型一次写四十格、其中一格撞上公式，
+ * 另外三十九格不该跟着消失。
+ * @experimental
+ */
+interface TemplateFillRejection {
+  readonly sheet: string;
+  readonly address: string;
+  readonly code: 'TEMPLATE_CELL_IS_FORMULA' | 'TEMPLATE_CELL_IS_COVERED';
+  /** 面向模型的英文说明，含「那应该写哪儿」 */
+  readonly reason: string;
+}
+/** 放行了，但值得说一句（表头写入）。判据是推导的，所以不挡 @experimental */
+interface TemplateFillWarning {
+  readonly sheet: string;
+  readonly address: string;
+  readonly reason: string;
+}
+/** @experimental */
+interface TemplateSheetBlanks {
+  readonly sheet: string;
+  readonly ranges: readonly string[];
+}
+/**
+ * 填充回执（FR-17.8 ~ FR-17.12）。
+ *
+ * `filled` 是**真正写进文件**的条数，不是请求条数——后者看不出漏填。
+ * @experimental
+ */
+interface XlsxFillOutcome {
+  readonly bytes: Uint8Array;
+  readonly filled: number;
+  readonly rejected: readonly TemplateFillRejection[];
+  readonly warnings: readonly TemplateFillWarning[];
+  /** 填完之后仍空着的待填区，只统计这次动过的工作表 */
+  readonly stillBlank: readonly TemplateSheetBlanks[];
+}
 /** @experimental */
 interface XlsxTemplateEngine {
   read(bytes: Uint8Array): Promise<XlsxTemplateSkeleton>;
-  fill(bytes: Uint8Array, spec: XlsxTemplateFillSpec): Promise<Uint8Array>;
+  fill(bytes: Uint8Array, spec: XlsxTemplateFillSpec): Promise<XlsxFillOutcome>;
 }
 /** @experimental */
 interface DocxTemplateEngine {
@@ -2666,4 +2785,4 @@ declare function dwgViewsOf(doc: DwgDocumentContent): readonly DwgView[];
 /** 按 id 取视图；取不到就退回第一个，而不是什么都没有 */
 declare function dwgPickView(doc: DwgDocumentContent, viewId: string | undefined): DwgView;
 //#endregion
-export { DownloadedFileEntry as $, SkillGenerationToolSourceOptions as $n, createPageImageToolSource as $r, PERCEPTION_PAGING_DEFAULTS as $t, DataSourceRecord as A, PerceptionAuditSink as An, TodoListener as Ar, FILL_TEMPLATE_TOOL as At, DocumentFileSource as B, READ_DOCUMENT_TOOL as Bn, XlsxTemplateEngine as Br, LIST_PAGE_TABS_TOOL as Bt, DataSourceCandidateRecord as C, toActionFrameScopes as Ci, ParentBudget as Cn, TemplateParagraphSkeleton as Cr, DwgView as Ct, DataSourcePolicy as D, PdfTextQuality as Dn, TodoEvent as Dr, EMU_PER_TWIP as Dt, DataSourceKind as E, PdfPageImage as En, TemplateToolSourceOptions as Er, EMU_PER_POINT as Et, DelegationRequest as F, PerceptionScope as Fn, WorksetTab as Fr, GeneratedSkillDraft as Ft, DocumentToolSourceOptions as G, RemoteImageToolSourceOptions as Gn, clampWorksetMax as Gr, OpenedTabSignal as Gt, DocumentImageRole as H, RemoteImageFetch as Hn, XlsxTemplateSkeleton as Hr, MAX_DIGIT_WIDTH as Ht, DelegationResult as I, PerceptionScopeInput as In, WorksetTabView as Ir, HttpDataSourceOptions as It, DocxTemplateEngine as J, Size as Jn, createDocumentToolSource as Jr, PAGE_ACTION_TOOL as Jt, DocxDocumentContent as K, RenderedImage as Kn, columnWidthToPixels as Kr, PAGE_ACTION_KINDS as Kt, DelegationToolSourceOptions as L, PptxDocumentContent as Ln, XlsxDocumentContent as Lr, INSPECT_TEMPLATE_TOOL as Lt, DelegationBudget as M, PerceptionPagingBudget as Mn, TodoStore as Mr, FrameNote as Mt, DelegationOrchestrator as N, PerceptionRecord as Nn, TodoToolSourceOptions as Nr, FrameScope as Nt, DataSourcePolicyOptions as O, PerceivedImage as On, TodoItem as Or, EXPORT_SPREADSHEET_TOOL as Ot, DelegationOrchestratorOptions as P, PerceptionResult as Pn, VIEW_DWG_TOOL as Pr, GENERATE_SKILL_TOOL as Pt, DownloadedFileConsent as Q, SkillGenerationPolicy as Qn, createPageActionToolSource as Qr, PERCEIVE_PAGE_TOOL as Qt, DocumentBlock as R, PptxDocumentReader as Rn, XlsxDocumentReader as Rr, ImageCaptureBudget as Rt, DataSourceCandidatePolicyOptions as S, takesImage as Si, PagePerceptionToolSourceOptions as Sn, TemplateImageResolver as Sr, DwgUnits as St, DataSourceDef as T, withDelegationOrigin as Ti, PdfDocumentReader as Tn, TemplateTableCellSkeleton as Tr, EMU_PER_PIXEL as Tt, DocumentReadBudget as U, RemoteImageFetchFailure as Un, asReadMode as Ur, NestedFrameRef as Ut, DocumentFormat as V, READ_DOWNLOADED_FILE_TOOL as Vn, XlsxTemplateFillSpec as Vr, MANAGE_TODO_TOOL as Vt, DocumentReadMode as W, RemoteImageResult as Wn, clampDownloadWaitMs as Wr, OpenedPageInfo as Wt, DocxTemplateSkeleton as X, SkillGenerationMessages as Xn, createDwgToolSource as Xr, PDF_GARBLED_RATIO as Xt, DocxTemplateFillSpec as Y, SkillCandidateSink as Yn, createDownloadedFileToolSource as Yr, PAGE_DOCUMENT_REF as Yt, DownloadedFileAction as Z, SkillGenerationOutcome as Zn, createHttpDataSourceTransport as Zr, PDF_LARGE_IMAGE_RATIO as Zt, DWG_MODEL_VIEW_ID as _, parseCellAddress as _i, PageImageResult as _n, TabWorksetPort as _r, DwgOmission as _t, ActionTabWindow as a, createTemplateToolSource as ai, PageActionPolicy as an, SubAgentRunInput as ar, DownloadedFileRecord as at, DataSourceCandidateAuditSink as b, readImageSize as bi, PagePerceptionPolicyOptions as bn, TemplateFileSource as br, DwgProjection as bt, CellAddress as c, dwgPickView as ci, PageActionRequest as cn, TAB_WORKSET_DEFAULT_MAX as cr, DwgComponent as ct, DELEGATE_TASK_TOOL as d, formatCellAddress as di, PageActionTarget as dn, TAB_WORKSET_SYSTEM_PROMPT as dr, DwgEntity as dt, createPagePerceptionToolSource as ei, PERCEPTION_SYSTEM_PROMPT as en, SkillGenerator as er, DownloadedFileListing as et, DELEGATION_SYSTEM_PROMPT as f, frameLabel as fi, PageActionToolSourceOptions as fn, TEMPLATE_INSPECT_BUDGET as fr, DwgFill as ft, DOWNLOAD_WAIT_MIN_MS as g, measurePdfTextQuality as gi, PageImageFailure as gn, TabWorksetPolicyOptions as gr, DwgLoadedDrawing as gt, DOWNLOAD_WAIT_MAX_MS as h, isRangeTopLeft as hi, PageImageCapture as hn, TabWorksetPolicy as hr, DwgLayer as ht, ActionTabWatcher as i, createTabWorksetToolSource as ii, PageActionOutcome as in, SpreadsheetToolSourceOptions as ir, DownloadedFileReader as it, DataSourceTransport as j, PerceptionCaptureOptions as jn, TodoStatus as jr, FOCUS_PAGE_TAB_TOOL as jt, DataSourceProvenance as k, PerceivedNode as kn, TodoList as kr, FETCH_REMOTE_IMAGE_TOOL as kt, CellRange as l, dwgViewsOf as li, PageActionScope as ln, TAB_WORKSET_MAX_MAX as lr, DwgDocumentContent as lt, DOWNLOAD_WAIT_DEFAULT_MS as m, isPdfTextTrustworthy as mi, PageAuditSink as mn, TabAdmission as mr, DwgGeometry as mt, ActionDownloadWindow as n, createSkillGenerationToolSource as ni, PageActionExecutor as nn, SkillTraceEvidence as nr, DownloadedFilePolicyOptions as nt, CAPTURE_PAGE_IMAGE_TOOL as o, createTodoToolSource as oi, PageActionPolicyOptions as on, SubAgentRunner as or, DownloadedFileToolSourceOptions as ot, DOCUMENT_READ_BUDGET as p, frameSteps as pi, PageActionUi as pn, TODO_SYSTEM_PROMPT as pr, DwgFont as pt, DocxDocumentReader as q, SKILL_GENERATION_SYSTEM_PROMPT as qn, createDelegationToolSource as qr, PAGE_ACTION_SYSTEM_PROMPT as qt, ActionFrameScope as r, createSpreadsheetToolSource as ri, PageActionKind as rn, SkillTraceEvidenceStep as rr, DownloadedFileReadResult as rt, CLOSE_PAGE_TAB_TOOL as s, defersImage as si, PageActionRecord as sn, SubtreeRejection as sr, DwgBounds as st, ActionDownloadWatcher as t, createRemoteImageToolSource as ti, PageActionConsent as tn, SkillGeneratorOptions as tr, DownloadedFilePolicy as tt, ConsentUi as u, fitWithin as ui, PageActionScopeInput as un, TAB_WORKSET_MIN_MAX as ur, DwgDocumentReader as ut, DataSourceAuditSink as v, parseCellRange as vi, PageImageToolSourceOptions as vn, TabWorksetToolSourceOptions as vr, DwgPoint as vt, DataSourceCandidateStore as w, toFrameScopes as wi, PdfDocumentHandle as wn, TemplateSheetSkeleton as wr, DwgViewport as wt, DataSourceCandidatePolicy as x, sniffDocumentFormat as xi, PagePerceptionReader as xn, TemplateImageBytes as xr, DwgToolSourceOptions as xt, DataSourceCandidate as y, rangeContains as yi, PagePerceptionPolicy as yn, TemplateCellSkeleton as yr, DwgProjectedDrawing as yt, DocumentFileBytes as z, PptxSlideContent as zn, XlsxSheetContent as zr, LIST_DOWNLOADED_FILES_TOOL as zt };
+export { DownloadedFileEntry as $, SkillCandidateSink as $n, clampWorksetMax as $r, PERCEPTION_PAGING_DEFAULTS as $t, DataSourceRecord as A, takesImage as Ai, PerceptionAuditSink as An, TemplateSheetBlanks as Ar, FILL_TEMPLATE_TOOL as At, DocumentFileSource as B, READ_DOCUMENT_TOOL as Bn, TodoToolSourceOptions as Br, LIST_PAGE_TABS_TOOL as Bt, DataSourceCandidateRecord as C, isRangeTopLeft as Ci, ParentBudget as Cn, TemplateCellSkeleton as Cr, DwgView as Ct, DataSourcePolicy as D, rangeContains as Di, PdfTextQuality as Dn, TemplateImageBytes as Dr, EMU_PER_TWIP as Dt, DataSourceKind as E, parseCellRange as Ei, PdfPageImage as En, TemplateFillWarning as Er, EMU_PER_POINT as Et, DelegationRequest as F, PerceptionScope as Fn, TodoItem as Fr, GeneratedSkillDraft as Ft, DocumentToolSourceOptions as G, RemoteImageToolSourceOptions as Gn, XlsxDocumentReader as Gr, OpenedTabSignal as Gt, DocumentImageRole as H, RemoteImageFetch as Hn, WorksetTab as Hr, MAX_DIGIT_WIDTH as Ht, DelegationResult as I, PerceptionScopeInput as In, TodoList as Ir, HttpDataSourceOptions as It, DocxTemplateEngine as J, SKILL_GENERATION_SYSTEM_PROMPT as Jn, XlsxTemplateEngine as Jr, PAGE_ACTION_TOOL as Jt, DocxDocumentContent as K, RenderedImage as Kn, XlsxFillOutcome as Kr, PAGE_ACTION_KINDS as Kt, DelegationToolSourceOptions as L, PptxDocumentContent as Ln, TodoListener as Lr, INSPECT_TEMPLATE_TOOL as Lt, DelegationBudget as M, toFrameScopes as Mi, PerceptionPagingBudget as Mn, TemplateTableCellSkeleton as Mr, FrameNote as Mt, DelegationOrchestrator as N, withDelegationOrigin as Ni, PerceptionRecord as Nn, TemplateToolSourceOptions as Nr, FrameScope as Nt, DataSourcePolicyOptions as O, readImageSize as Oi, PerceivedImage as On, TemplateImageResolver as Or, EXPORT_SPREADSHEET_TOOL as Ot, DelegationOrchestratorOptions as P, PerceptionResult as Pn, TodoEvent as Pr, GENERATE_SKILL_TOOL as Pt, DownloadedFileConsent as Q, SkillBinaryPayload as Qn, clampDownloadWaitMs as Qr, PERCEIVE_PAGE_TOOL as Qt, DocumentBlock as R, PptxDocumentReader as Rn, TodoStatus as Rr, ImageCaptureBudget as Rt, DataSourceCandidatePolicyOptions as S, isPdfTextTrustworthy as Si, PagePerceptionToolSourceOptions as Sn, TabWorksetToolSourceOptions as Sr, DwgUnits as St, DataSourceDef as T, parseCellAddress as Ti, PdfDocumentReader as Tn, TemplateFillRejection as Tr, EMU_PER_PIXEL as Tt, DocumentReadBudget as U, RemoteImageFetchFailure as Un, WorksetTabView as Ur, NestedFrameRef as Ut, DocumentFormat as V, READ_DOWNLOADED_FILE_TOOL as Vn, VIEW_DWG_TOOL as Vr, MANAGE_TODO_TOOL as Vt, DocumentReadMode as W, RemoteImageResult as Wn, XlsxDocumentContent as Wr, OpenedPageInfo as Wt, DocxTemplateSkeleton as X, Size as Xn, XlsxTemplateSkeleton as Xr, PDF_GARBLED_RATIO as Xt, DocxTemplateFillSpec as Y, ScrollDirection as Yn, XlsxTemplateFillSpec as Yr, PAGE_DOCUMENT_REF as Yt, DownloadedFileAction as Z, SkillAttachmentBytes as Zn, asReadMode as Zr, PDF_LARGE_IMAGE_RATIO as Zt, DWG_MODEL_VIEW_ID as _, dwgViewsOf as _i, PageImageResult as _n, TODO_SYSTEM_PROMPT as _r, DwgOmission as _t, ActionTabWindow as a, createHttpDataSourceTransport as ai, PageActionPolicy as an, SkillGeneratorOptions as ar, DownloadedFileRecord as at, DataSourceCandidateAuditSink as b, frameLabel as bi, PagePerceptionPolicyOptions as bn, TabWorksetPolicyOptions as br, DwgProjection as bt, CellAddress as c, createPagePerceptionToolSource as ci, PageActionRequest as cn, SpreadsheetToolSourceOptions as cr, DwgComponent as ct, DELEGATE_TASK_TOOL as d, createSpreadsheetToolSource as di, PageActionTarget as dn, SubtreeRejection as dr, DwgEntity as dt, columnWidthToPixels as ei, PERCEPTION_SYSTEM_PROMPT as en, SkillGenerationMessages as er, DownloadedFileListing as et, DELEGATION_SYSTEM_PROMPT as f, createTabWorksetToolSource as fi, PageActionToolSourceOptions as fn, TAB_WORKSET_DEFAULT_MAX as fr, DwgFill as ft, DOWNLOAD_WAIT_MIN_MS as g, dwgPickView as gi, PageImageFailure as gn, TEMPLATE_INSPECT_BUDGET as gr, DwgLoadedDrawing as gt, DOWNLOAD_WAIT_MAX_MS as h, defersImage as hi, PageImageCapture as hn, TAB_WORKSET_SYSTEM_PROMPT as hr, DwgLayer as ht, ActionTabWatcher as i, createDwgToolSource as ii, PageActionOutcome as in, SkillGenerator as ir, DownloadedFileReader as it, DataSourceTransport as j, toActionFrameScopes as ji, PerceptionCaptureOptions as jn, TemplateSheetSkeleton as jr, FOCUS_PAGE_TAB_TOOL as jt, DataSourceProvenance as k, sniffDocumentFormat as ki, PerceivedNode as kn, TemplateParagraphSkeleton as kr, FETCH_REMOTE_IMAGE_TOOL as kt, CellRange as l, createRemoteImageToolSource as li, PageActionScope as ln, SubAgentRunInput as lr, DwgDocumentContent as lt, DOWNLOAD_WAIT_DEFAULT_MS as m, createTodoToolSource as mi, PageAuditSink as mn, TAB_WORKSET_MIN_MAX as mr, DwgGeometry as mt, ActionDownloadWindow as n, createDocumentToolSource as ni, PageActionExecutor as nn, SkillGenerationPolicy as nr, DownloadedFilePolicyOptions as nt, CAPTURE_PAGE_IMAGE_TOOL as o, createPageActionToolSource as oi, PageActionPolicyOptions as on, SkillTraceEvidence as or, DownloadedFileToolSourceOptions as ot, DOCUMENT_READ_BUDGET as p, createTemplateToolSource as pi, PageActionUi as pn, TAB_WORKSET_MAX_MAX as pr, DwgFont as pt, DocxDocumentReader as q, SCROLL_DIRECTIONS as qn, XlsxSheetContent as qr, PAGE_ACTION_SYSTEM_PROMPT as qt, ActionFrameScope as r, createDownloadedFileToolSource as ri, PageActionKind as rn, SkillGenerationToolSourceOptions as rr, DownloadedFileReadResult as rt, CLOSE_PAGE_TAB_TOOL as s, createPageImageToolSource as si, PageActionRecord as sn, SkillTraceEvidenceStep as sr, DwgBounds as st, ActionDownloadWatcher as t, createDelegationToolSource as ti, PageActionConsent as tn, SkillGenerationOutcome as tr, DownloadedFilePolicy as tt, ConsentUi as u, createSkillGenerationToolSource as ui, PageActionScopeInput as un, SubAgentRunner as ur, DwgDocumentReader as ut, DataSourceAuditSink as v, fitWithin as vi, PageImageToolSourceOptions as vn, TabAdmission as vr, DwgPoint as vt, DataSourceCandidateStore as w, measurePdfTextQuality as wi, PdfDocumentHandle as wn, TemplateFileSource as wr, DwgViewport as wt, DataSourceCandidatePolicy as x, frameSteps as xi, PagePerceptionReader as xn, TabWorksetPort as xr, DwgToolSourceOptions as xt, DataSourceCandidate as y, formatCellAddress as yi, PagePerceptionPolicy as yn, TabWorksetPolicy as yr, DwgProjectedDrawing as yt, DocumentFileBytes as z, PptxSlideContent as zn, TodoStore as zr, LIST_DOWNLOADED_FILES_TOOL as zt };

package/dist/{index-YPd8ZSEa.d.ts → index-Bq299VnF.d.ts}

@@ -1,4 +1,4 @@
-import { Ft as ValidationReport, H as DiscoveryResult, K as FileSystemProvider, Nt as UiSpecNode, O as UiSurfaceActionRequest, Rt as WebSkillErrorCode, S as UiBridge, St as SkillManifest, T as UiSpecEvent, X as JsonSchema, _ as LlmToolSpec, _t as SkillDocument, b as RenderResultRequest, d as LlmContentPart, et as Page, f as LlmMessage, g as LlmToolCall, gt as SkillDiscovery, h as LlmTokenUsage, ht as SkillCatalogEntry, i as FormField, l as LlmClient, m as LlmStreamEvent, mt as SkillCatalog, n as ArtifactStore, nt as RemoteUrlPolicy, o as InteractionPolicy, p as LlmResponse, r as ChartSpec, s as InteractionRequest, t as Artifact, tt as PageQuery, u as LlmCompleteInput, v as MemoryStore, vt as SkillInstallSource, w as UiSpecDrafts, y as RenderBlock } from "./types-CpDRZ0rA-BM5FI9oN.js";
+import { Ft as ValidationReport, H as DiscoveryResult, K as FileSystemProvider, Nt as UiSpecNode, O as UiSurfaceActionRequest, Rt as WebSkillErrorCode, S as UiBridge, St as SkillManifest, T as UiSpecEvent, X as JsonSchema, _ as LlmToolSpec, _t as SkillDocument, b as RenderResultRequest, d as LlmContentPart, et as Page, f as LlmMessage, g as LlmToolCall, gt as SkillDiscovery, h as LlmTokenUsage, ht as SkillCatalogEntry, i as FormField, l as LlmClient, m as LlmStreamEvent, mt as SkillCatalog, n as ArtifactStore, nt as RemoteUrlPolicy, o as InteractionPolicy, p as LlmResponse, r as ChartSpec, s as InteractionRequest, t as Artifact, tt as PageQuery, u as LlmCompleteInput, v as MemoryStore, vt as SkillInstallSource, w as UiSpecDrafts, y as RenderBlock } from "./types-CpDRZ0rA-CFQ-vdKz.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/parts.d.ts
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
@@ -1409,8 +1409,11 @@ declare class FsArtifactStore implements ArtifactStore {
 /**
  * 把表格规格编码为 xlsx 字节。
  *
- * 纯函数——不认识产物、run 与工具，因此工具、脚本能力、测试三个消费面共用同一份
- * 实现，AC-10.8「双消费面逐字节相同」是结构性成立的。
+ * 纯函数——不认识产物、run 与工具，因此工具、脚本能力、测试三个消费面共用同一份实现。
+ *
+ * 「纯函数」只保证三个消费面走的是同一条代码路径，**不足以**保证输出逐字节相同：
+ * 归档格式本身会把编码时刻写进字节。AC-10.8「双消费面逐字节相同」靠的是
+ * `withFixedTimestamps()` 把那个时刻拿掉（0.23.0 分册 24）。
  *
  * `resolveImage` 是图片引用的解析出口（0.22.0 分册 20 FR-20.3）。它同样不破坏纯函数性：
  * 给定相同的规格与相同的解析结果，输出逐字节相同。规格里有图片却没给它，是