@webskill/sdk 0.27.1 → 0.29.0

package/dist/{linkedDocument-0iiVPd5t.js → linkedDocument-GE-VV_Gj.js}

@@ -2,6 +2,116 @@ import { t as WebSkillError } from "./errors-BDZNpC13.js";
 import { unzipSync, zipSync } from "fflate";
 import writeXlsxFile from "write-excel-file/universal";
 
+//#region ../core/src/attachment/kind.ts
+/** 可作为图片分片外发的 MIME 类型 @experimental */
+const IMAGE_MIME_TYPES = [
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"image/gif"
+];
+/**
+* 可按文本读取的扩展名。accept 白名单与判定白名单共用这一份——
+* 0.5.x 两处不一致，`log`/`yaml`/`yml` 能通过判定却在文件选择器里选不到。
+*/
+const TEXT_EXTENSIONS = [
+	"txt",
+	"md",
+	"csv",
+	"json",
+	"log",
+	"yaml",
+	"yml"
+];
+/** 非文本非图片但仍可整体外发的类型（provider 的 file 分片） @experimental */
+const FILE_MIME_TYPES = ["application/pdf"];
+/**
+* 需要**客户端先抽取成文本**才能外发的类型（FR-23.9 / 0.13.0 FR-12.5 / 0.22.0 分册 18）。
+* 不走直通的 `file`：docx / xlsx / pptx 发给 provider 会被当成二进制垃圾。
+*/
+const DOCX_MIME = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+const XLS_MIME = "application/vnd.ms-excel";
+const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+const PPTX_MIME = "application/vnd.openxmlformats-officedocument.presentationml.presentation";
+/** 文本类附件进模型上下文的字符上限（0.6.0） @experimental */
+const ATTACHMENT_TEXT_LIMIT = 32 * 1024;
+/**
+* DWG 图纸的 MIME。没有官方注册值，各家各发一套，浏览器上传时更常见的是空串。
+* @experimental
+*/
+const DWG_MIME_TYPES = [
+	"image/vnd.dwg",
+	"application/acad",
+	"application/x-acad",
+	"application/dwg",
+	"application/x-dwg",
+	"drawing/dwg"
+];
+/**
+* 只存字节、不进上下文的扩展名。仍然是**白名单制**：
+* 新增 `binary` 类别不等于任意二进制放行（AC-19.18）。
+* @experimental
+*/
+const BINARY_EXTENSIONS = ["dwg"];
+const TEXT_EXTENSION_SET = new Set(TEXT_EXTENSIONS);
+const IMAGE_MIME_SET = new Set(IMAGE_MIME_TYPES);
+const FILE_MIME_SET = new Set(FILE_MIME_TYPES);
+const EXTRACTED_MIME_SET = /* @__PURE__ */ new Set([
+	DOCX_MIME,
+	XLS_MIME,
+	XLSX_MIME,
+	PPTX_MIME
+]);
+const EXTRACTED_EXTENSION_SET = /* @__PURE__ */ new Set([
+	"docx",
+	"xls",
+	"xlsx",
+	"pptx"
+]);
+const BINARY_MIME_SET = new Set(DWG_MIME_TYPES);
+const BINARY_EXTENSION_SET = new Set(BINARY_EXTENSIONS);
+/** 下载与上传都常把认不出的类型标成它，此时只能看扩展名 */
+const OPAQUE_MIME = "application/octet-stream";
+function extensionOf(fileName) {
+	return fileName.split(".").pop()?.toLowerCase() ?? "";
+}
+/**
+* 三种待抽取格式共用 `document-text` 这一种 kind，选抽取器时要按格式再分一次。
+* 下载列表与上传入口必须得出同一结论（AC-20.17），所以只能在这里一份。
+* @experimental
+*/
+function extractedDocumentFormat(contentType, fileName) {
+	const type = contentType.toLowerCase();
+	const ext = extensionOf(fileName);
+	if (type === "" || type === OPAQUE_MIME) return ext === "xls" || ext === "xlsx" ? "xlsx" : ext === "pptx" ? "pptx" : "docx";
+	if (type === "application/vnd.ms-excel" || type === "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet") return "xlsx";
+	if (type === "application/vnd.openxmlformats-officedocument.presentationml.presentation") return "pptx";
+	return "docx";
+}
+/** 分类集中一处，不散落在各 UI 分支里 @experimental */ function classifyAttachment(contentType, fileName) {
+	const type = contentType.toLowerCase();
+	if (IMAGE_MIME_SET.has(type)) return "image";
+	if (BINARY_MIME_SET.has(type)) return "binary";
+	if (EXTRACTED_MIME_SET.has(type)) return "document-text";
+	if (FILE_MIME_SET.has(type)) return "file";
+	if (type.startsWith("text/") || type === "application/json") return "text";
+	if (type === "" && TEXT_EXTENSION_SET.has(extensionOf(fileName))) return "text";
+	if ((type === "" || type === OPAQUE_MIME) && EXTRACTED_EXTENSION_SET.has(extensionOf(fileName))) return "document-text";
+	if ((type === "" || type === OPAQUE_MIME) && BINARY_EXTENSION_SET.has(extensionOf(fileName))) return "binary";
+}
+/**
+* 文本类附件进模型上下文的最终形态。两条入口共用，差别只有出处那一段（0.14.0 D-20-6）。
+* @experimental
+*/
+function formatAttachmentText(input) {
+	const limit = input.limit ?? 32768;
+	const clipped = input.body.length > limit ? `${input.body.slice(0, limit)}\n[truncated]` : input.body;
+	const bodyOnly = input.kind === "document-text" ? ", body text only" : "";
+	const from = input.origin === "download" ? ", from this device's downloads" : "";
+	return `--- Attachment: ${input.name} (${input.contentType}${bodyOnly}${from}) ---\n${clipped}`;
+}
+
+//#endregion
 //#region ../runtime/src/tools/types.ts
 /**
 * 参与 `toolResultMaxBytes` 截断的分片类型（FR-23.3）。**判据的单一来源。**
@@ -421,7 +531,7 @@ function isBytesOnlyDocument(mime, url) {
 	return ((url.split(/[?#]/)[0] ?? "").split(".").pop() ?? "").toLowerCase() === "dwg";
 }
 /** 引擎侧固定流程（§2.3）用到的错误文案，集中一处便于判据引用 */
-const UNSUPPORTED_DOCUMENT_MESSAGE = `Only PDF (${SUPPORTED_DOCUMENT_MIME.pdf}), Word (${SUPPORTED_DOCUMENT_MIME.docx}), Excel (${SUPPORTED_DOCUMENT_MIME.xlsx}), PowerPoint (${SUPPORTED_DOCUMENT_MIME.pptx}) and plain text documents can be read.`;
+const UNSUPPORTED_DOCUMENT_MESSAGE = `Only PDF (${SUPPORTED_DOCUMENT_MIME.pdf}), Word (${SUPPORTED_DOCUMENT_MIME.docx}), Excel (${SUPPORTED_DOCUMENT_MIME.xlsx} or ${XLS_MIME}), PowerPoint (${SUPPORTED_DOCUMENT_MIME.pptx}) and plain text documents can be read.`;
 const READ_LINKED_DOCUMENT_INPUT_SCHEMA = {
 	type: "object",
 	properties: { url: {
@@ -455,4 +565,4 @@ function fromBase64(data) {
 }
 
 //#endregion
-export { DEFAULT_MAX_UPLOAD_FILE_BYTES as _, UNSUPPORTED_DOCUMENT_MESSAGE as a, toBase64 as c, SPREADSHEET_LIMITS as d, SPREADSHEET_MIME_TYPE as f, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as g, DEFAULT_MAX_DOCUMENT_BYTES as h, SUPPORTED_DOCUMENT_MIME as i, encodeSpreadsheet as l, DEFAULT_MAX_DATA_SOURCE_BYTES as m, READ_LINKED_DOCUMENT_TOOL as n, fromBase64 as o, XLSX_UNSUPPORTED as p, READ_LINKED_DOCUMENT_TOOL_NAME as r, isBytesOnlyDocument as s, BYTES_ONLY_DOCUMENT_MIME as t, SPREADSHEET_EXTENSION as u, TEXT_BUDGETED_CONTENT_TYPES as v };
+export { extractedDocumentFormat as A, FILE_MIME_TYPES as C, XLSX_MIME as D, TEXT_EXTENSIONS as E, XLS_MIME as O, DWG_MIME_TYPES as S, PPTX_MIME as T, DEFAULT_MAX_UPLOAD_FILE_BYTES as _, UNSUPPORTED_DOCUMENT_MESSAGE as a, BINARY_EXTENSIONS as b, toBase64 as c, SPREADSHEET_LIMITS as d, SPREADSHEET_MIME_TYPE as f, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as g, DEFAULT_MAX_DOCUMENT_BYTES as h, SUPPORTED_DOCUMENT_MIME as i, formatAttachmentText as j, classifyAttachment as k, encodeSpreadsheet as l, DEFAULT_MAX_DATA_SOURCE_BYTES as m, READ_LINKED_DOCUMENT_TOOL as n, fromBase64 as o, XLSX_UNSUPPORTED as p, READ_LINKED_DOCUMENT_TOOL_NAME as r, isBytesOnlyDocument as s, BYTES_ONLY_DOCUMENT_MIME as t, SPREADSHEET_EXTENSION as u, TEXT_BUDGETED_CONTENT_TYPES as v, IMAGE_MIME_TYPES as w, DOCX_MIME as x, ATTACHMENT_TEXT_LIMIT as y };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { X as JsonSchema, _ as LlmToolSpec, _t as SkillDocument, ht as SkillCatalogEntry } from "./types-CpDRZ0rA-CFQ-vdKz.js";
-import { B as ExternalToolSource, Hr as mergeCatalogEntries, Mn as ToolDisclosure, Pn as ToolResult, z as ExternalSkillProvider } from "./index-D6eSrEi5.js";
+import { X as JsonSchema, _ as LlmToolSpec, _t as SkillDocument, ht as SkillCatalogEntry } from "./types-wKp3YBSM-D7w-ZbsB.js";
+import { B as ExternalToolSource, Hr as mergeCatalogEntries, Mn as ToolDisclosure, Pn as ToolResult, z as ExternalSkillProvider } from "./index-Cngzg2WS.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/{miniChart-D0nYMzz8.js → miniChart-k95Dpy0q.js}

@@ -300,7 +300,7 @@ function renderMiniMarkdown(text, doc) {
 //#endregion
 //#region ../ui/src/chart/miniChart.ts
 /**
-* 轻量 SVG 图表自绘（bar/line/pie，零依赖，三端复用单一来源）。
+* 轻量 SVG 图表自绘（bar/line/pie/bar-line，零依赖，三端复用单一来源）。
 * 全部经 doc.createElementNS 构建（内容来自技能输出，不拼 innerHTML）。
 */
 const SVG_NS = "http://www.w3.org/2000/svg";
@@ -442,6 +442,81 @@ function renderLine(chart, svg, doc) {
 		svg.appendChild(text(doc, px(li), plot.y1 + 12, label, { "text-anchor": "middle" }));
 	});
 }
+function renderBarLine(chart, svg, doc) {
+	const plot = {
+		x0: 30,
+		y0: 24,
+		x1: 312,
+		y1: 164
+	};
+	const max = maxValue(chart);
+	svg.appendChild(el(doc, "line", {
+		x1: String(plot.x0),
+		y1: String(plot.y0),
+		x2: String(plot.x0),
+		y2: String(plot.y1),
+		stroke: "currentColor",
+		"stroke-opacity": "0.35"
+	}));
+	svg.appendChild(el(doc, "line", {
+		x1: String(plot.x0),
+		y1: String(plot.y1),
+		x2: String(plot.x1),
+		y2: String(plot.y1),
+		stroke: "currentColor",
+		"stroke-opacity": "0.35"
+	}));
+	if (max <= 0 || chart.labels.length === 0 || chart.series.length === 0) return;
+	const typed = chart.series.map((series, index) => ({
+		series,
+		index,
+		kind: series.type ?? (index === 0 ? "bar" : "line")
+	}));
+	const bars = typed.filter((entry) => entry.kind === "bar");
+	const groupWidth = (plot.x1 - plot.x0) / chart.labels.length;
+	const barWidth = Math.max(1, groupWidth / Math.max(1, bars.length) * .7);
+	for (const [barIndex, entry] of bars.entries()) {
+		const color = CHART_PALETTE[entry.index % CHART_PALETTE.length];
+		entry.series.data.forEach((value, labelIndex) => {
+			if (labelIndex >= chart.labels.length) return;
+			const height = (plot.y1 - plot.y0) * value / max;
+			const x = plot.x0 + labelIndex * groupWidth + (groupWidth - barWidth * bars.length) / 2 + barIndex * barWidth;
+			const y = plot.y1 - height;
+			svg.appendChild(el(doc, "rect", {
+				x: String(x),
+				y: String(y),
+				width: String(barWidth),
+				height: String(height),
+				fill: color,
+				"data-series": entry.series.name ?? String(entry.index)
+			}));
+		});
+	}
+	const step = chart.labels.length > 1 ? (plot.x1 - plot.x0) / (chart.labels.length - 1) : 0;
+	const px = (index) => chart.labels.length > 1 ? plot.x0 + index * step : (plot.x0 + plot.x1) / 2;
+	const py = (value) => plot.y1 - (plot.y1 - plot.y0) * value / max;
+	for (const entry of typed.filter((candidate) => candidate.kind === "line")) {
+		const color = CHART_PALETTE[entry.index % CHART_PALETTE.length];
+		const points = entry.series.data.slice(0, chart.labels.length).map((value, index) => `${px(index)},${py(value)}`).join(" ");
+		if (points !== "") svg.appendChild(el(doc, "polyline", {
+			points,
+			fill: "none",
+			stroke: color,
+			"stroke-width": "1.5"
+		}));
+		entry.series.data.slice(0, chart.labels.length).forEach((value, index) => {
+			svg.appendChild(el(doc, "circle", {
+				cx: String(px(index)),
+				cy: String(py(value)),
+				r: "2",
+				fill: color
+			}));
+		});
+	}
+	chart.labels.forEach((label, index) => {
+		svg.appendChild(text(doc, px(index), plot.y1 + 12, label, { "text-anchor": "middle" }));
+	});
+}
 function renderPie(chart, svg, doc) {
 	const data = (chart.series[0]?.data ?? []).slice(0, chart.labels.length);
 	const total = data.reduce((sum, v) => sum + (v > 0 ? v : 0), 0);
@@ -480,8 +555,8 @@ function renderPie(chart, svg, doc) {
 	});
 }
 /**
-* ChartSpec → SVG（bar 等宽柱 + 值标签；line 折线 + 点；pie 扇形 + 图例；空数据容错）。
-* mini 档只有这三种画法，其余类型走最接近的一种并在图内注明是近似呈现。
+* ChartSpec → SVG（bar 等宽柱 + 值标签；line 折线 + 点；pie 扇形 + 图例；bar-line 柱线叠加；空数据容错）。
+* mini 档只有这四种画法，其余类型走最接近的一种并在图内注明是近似呈现。
 * @stable
 */
 function renderMiniChart(chart, doc) {
@@ -506,6 +581,9 @@ function renderMiniChart(chart, doc) {
 		case "line":
 			renderLine(chart, svg, doc);
 			break;
+		case "bar-line":
+			renderBarLine(chart, svg, doc);
+			break;
 		case "pie":
 			renderPie(chart, svg, doc);
 			break;
@@ -513,7 +591,7 @@ function renderMiniChart(chart, doc) {
 			renderLine(chart, svg, doc);
 			break;
 	}
-	if (chart.kind !== "bar" && chart.kind !== "line" && chart.kind !== "pie") svg.appendChild(text(doc, WIDTH / 2, HEIGHT - 4, `Approximate rendering of "${chart.kind}"`, { "text-anchor": "middle" }));
+	if (chart.kind !== "bar" && chart.kind !== "line" && chart.kind !== "pie" && chart.kind !== "bar-line") svg.appendChild(text(doc, WIDTH / 2, HEIGHT - 4, `Approximate rendering of "${chart.kind}"`, { "text-anchor": "middle" }));
 	return svg;
 }
 /** A2UI/OpenUI 降级：chart → table（labels 为首列，series 各为一列） */

package/dist/node.d.ts

@@ -1,6 +1,6 @@
-import { G as FileStat, It as VerifyResult, K as FileSystemProvider, N as ArchiveLimits, Ot as SkillsLockfile, Pt as UnsignedPolicy, S as UiBridge, St as SkillManifest, X as JsonSchema, at as SKILL_MANIFEST_FILE, b as RenderResultRequest, c as InteractionResponse, it as SKILLS_LOCKFILE, jt as TrustedKeyStore, q as FileWriteStream, s as InteractionRequest, ut as SignatureAuditSink, vt as SkillInstallSource, xt as SkillManagerPort } from "./types-CpDRZ0rA-CFQ-vdKz.js";
-import { $t as SchemaInferer, H as FsArtifactStore, Pn as ToolResult, Tr as createScriptContext, U as FsMemoryStore, b as BridgeCapabilities, en as ScriptExecutionContext, gr as WebSkillRuntimeDeps, hr as WebSkillRuntime, jn as ToolDefinition, m as ApprovalScope, tn as ScriptExecutor, ut as NetworkPolicy } from "./index-D6eSrEi5.js";
-import { a as AuditLog, f as CandidateSkill, h as CandidateStore, r as ApprovalPolicy, x as SkillVersionStore } from "./skillVersionStore-S4_HJ_Fl-Ds97pwm5.js";
+import { G as FileStat, It as VerifyResult, K as FileSystemProvider, N as ArchiveLimits, Ot as SkillsLockfile, Pt as UnsignedPolicy, S as UiBridge, St as SkillManifest, X as JsonSchema, at as SKILL_MANIFEST_FILE, b as RenderResultRequest, c as InteractionResponse, it as SKILLS_LOCKFILE, jt as TrustedKeyStore, q as FileWriteStream, s as InteractionRequest, ut as SignatureAuditSink, vt as SkillInstallSource, xt as SkillManagerPort } from "./types-wKp3YBSM-D7w-ZbsB.js";
+import { $t as SchemaInferer, H as FsArtifactStore, Pn as ToolResult, Tr as createScriptContext, U as FsMemoryStore, b as BridgeCapabilities, en as ScriptExecutionContext, gr as WebSkillRuntimeDeps, hr as WebSkillRuntime, jn as ToolDefinition, m as ApprovalScope, tn as ScriptExecutor, ut as NetworkPolicy } from "./index-Cngzg2WS.js";
+import { a as AuditLog, f as CandidateSkill, h as CandidateStore, r as ApprovalPolicy, x as SkillVersionStore } from "./skillVersionStore-S4_HJ_Fl-AiNsSSdO.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts
@@ -22,6 +22,7 @@ declare class NodeFS implements FileSystemProvider {
   writeText(p: string, content: string): Promise<void>;
   appendText(p: string, content: string): Promise<void>;
   readBinary(p: string): Promise<Uint8Array>;
+  createReadStream(p: string): Promise<AsyncIterable<Uint8Array>>;
   writeBinary(p: string, content: Uint8Array): Promise<void>;
   /**
    * 分块写入（FR-18.2c）。先写同目录临时文件，`close()` 时 rename 到位：

package/dist/node.js

@@ -2,8 +2,8 @@ import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
 import { A as SKILL_MANIFEST_FILE, D as verifySkillSignature, M as buildManifest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, b as parseSkillMarkdown, c as unzipWithLimits, f as SKILL_PACK_FILE, k as SKILLS_LOCKFILE, m as parseSkillPackManifest, o as readResponseWithLimit, p as exportSkills, s as resolveArchiveLimits, t as validateSkills, w as readSkillSignature, y as isValidSkillName } from "./skill-WSUDp6A1.js";
 import { a as atomicWriteBinary, o as atomicWriteText, r as resolveInsideRoot, s as isAtomicTempPath, t as assertSafePathSegment } from "./pathSecurity-CirkQwWP.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
-import { K as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-BSwffz8P.js";
-import { f as SPREADSHEET_MIME_TYPE } from "./linkedDocument-0iiVPd5t.js";
+import { f as SPREADSHEET_MIME_TYPE } from "./linkedDocument-GE-VV_Gj.js";
+import { K as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-DnUytrkq.js";
 import { n as normalizeToolContent } from "./external-_ZRQe-V9.js";
 import { i as probeLlmCapabilities } from "./env-Bj1MI2Ww.js";
 import { t as AUDIT_EVENT_TYPES } from "./eventTypes-DcTQXSV1.js";
@@ -88,6 +88,23 @@ var NodeFS = class NodeFS {
 			throw this.#mapError(e, p);
 		}
 	}
+	async createReadStream(p) {
+		await this.#assertContained(p);
+		const handle = await promises.open(toPlatform$4(p), "r").catch((e) => {
+			throw this.#mapError(e, p);
+		});
+		const stream = handle.createReadStream({
+			highWaterMark: 1024 * 1024,
+			autoClose: false
+		});
+		return (async function* () {
+			try {
+				for await (const chunk of stream) yield chunk;
+			} finally {
+				await handle.close();
+			}
+		})();
+	}
 	async writeBinary(p, content) {
 		await this.#assertContained(p);
 		const target = toPlatform$4(p);

package/dist/{openUiLibrary-CxtrnX54.js → openUiLibrary-BnhYUlqY.js}

@@ -1,4 +1,4 @@
-import { g as uiCatalog } from "./openUiSpecLang-DIcLcybq.js";
+import { g as uiCatalog } from "./openUiSpecLang-C8qNOxzA.js";
 import { t as CatalogNode } from "./ui-react.js";
 import { Renderer, createLibrary, defineComponent } from "./dist-CTsxblSD.js";
 import { z } from "zod";