@webskill/sdk 0.28.1 → 0.29.0

package/dist/index.js

@@ -3,14 +3,13 @@ import { A as SKILL_MANIFEST_FILE, C as keyIdOf, D as verifySkillSignature, E as
 import { a as atomicWriteBinary, i as ATOMIC_TMP_SUFFIX_PATTERN, n as normalizePath, o as atomicWriteText, r as resolveInsideRoot, s as isAtomicTempPath, t as assertSafePathSegment } from "./pathSecurity-CirkQwWP.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
 import { n as sanitizeUntrustedLine, t as UNTRUSTED_LINE_LIMIT } from "./untrustedText-BIaRvPZK.js";
-import { a as FILE_MIME_TYPES, c as TEXT_EXTENSIONS, d as extractedDocumentFormat, f as formatAttachmentText, i as DWG_MIME_TYPES, l as XLSX_MIME, n as BINARY_EXTENSIONS, o as IMAGE_MIME_TYPES, r as DOCX_MIME, s as PPTX_MIME, t as ATTACHMENT_TEXT_LIMIT, u as classifyAttachment } from "./kind-Dc8x0HWz.js";
-import { $ as READ_SKILL_FILE_TOOL, A as BEHAVIOR_RECORDS_KEY, B as renderUserProfileContext, C as extractTodoTraceEvents, D as VISION_SLOW_THRESHOLD_MS, E as VISION_MAX_CONCURRENCY, F as readProfileEntries, G as schemaToForm, H as EMPTY_USER_PROFILE, I as readUserProfile, J as ASK_USER_INPUT_SCHEMA, K as createScriptContext, L as sampleBehaviorRecords, M as appendBehaviorRecords, N as mergeProfileEntries, O as clampVisionConcurrency, P as readBehaviorRecords, Q as READ_SKILL_FILE_INPUT_SCHEMA, R as USER_PROFILE_NO_INVENTION_RULE, S as extractSkillCandidate, T as VISION_DEFAULT_CONCURRENCY, U as SerializingMemoryStore, V as DEFAULT_USER_PROFILE_LIMITS, W as EventBus, X as ASK_USER_TOOL, Y as ASK_USER_MAX_FIELDS, Z as ASK_USER_TOOL_NAME, _ as FsRunSnapshotStore, a as networkPolicyLibSource, at as scriptToolName, b as DEFAULT_LOOP_LIMITS, c as bridgeError, ct as ProgressiveRouter, d as FsMemoryStore, dt as xmlRenderer, et as READ_SKILL_FILE_TOOL_NAME, f as WebSkillRuntime, g as redactToolStepArgs, h as SENSITIVE_ANNOTATION, i as isNetworkAllowed, it as schemaSourceLabel, j as USER_PROFILE_KEY, k as runVisionBatch, l as parseBridgeRequest, lt as escapeXml, m as AgentLoop, n as normalizeErrorCode, nt as formatSkillScriptManifest, o as networkUrlHost, ot as resolveToolName, p as summarizeRunUsage, q as ASK_USER_FIELD_TYPES, r as normalizeToolError, rt as listSkillScripts, s as UPLOAD_FILES_UNAVAILABLE, st as toLlmToolSpec, t as CapabilityApproval, tt as ALLOWED_TOOLS_EXCLUSION_REASON, u as FsArtifactStore, ut as renderAvailableSkillsXml, v as RUN_SNAPSHOT_SCHEMA_VERSION, w as TraceRecorder, x as MAX_TOOL_STEP_ARG_BYTES, y as isUnsupportedRunSnapshot, z as USER_PROFILE_PROMPT_HEADER } from "./approval-5BmspsRi.js";
+import { A as extractedDocumentFormat, C as FILE_MIME_TYPES, D as XLSX_MIME, E as TEXT_EXTENSIONS, O as XLS_MIME, S as DWG_MIME_TYPES, T as PPTX_MIME, _ as DEFAULT_MAX_UPLOAD_FILE_BYTES, a as UNSUPPORTED_DOCUMENT_MESSAGE, b as BINARY_EXTENSIONS, c as toBase64, d as SPREADSHEET_LIMITS, f as SPREADSHEET_MIME_TYPE, g as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, h as DEFAULT_MAX_DOCUMENT_BYTES, i as SUPPORTED_DOCUMENT_MIME, j as formatAttachmentText, k as classifyAttachment, l as encodeSpreadsheet, m as DEFAULT_MAX_DATA_SOURCE_BYTES, n as READ_LINKED_DOCUMENT_TOOL, p as XLSX_UNSUPPORTED, r as READ_LINKED_DOCUMENT_TOOL_NAME, s as isBytesOnlyDocument, t as BYTES_ONLY_DOCUMENT_MIME, u as SPREADSHEET_EXTENSION, v as TEXT_BUDGETED_CONTENT_TYPES, w as IMAGE_MIME_TYPES, x as DOCX_MIME, y as ATTACHMENT_TEXT_LIMIT } from "./linkedDocument-GE-VV_Gj.js";
+import { $ as READ_SKILL_FILE_TOOL, A as BEHAVIOR_RECORDS_KEY, B as renderUserProfileContext, C as extractTodoTraceEvents, D as VISION_SLOW_THRESHOLD_MS, E as VISION_MAX_CONCURRENCY, F as readProfileEntries, G as schemaToForm, H as EMPTY_USER_PROFILE, I as readUserProfile, J as ASK_USER_INPUT_SCHEMA, K as createScriptContext, L as sampleBehaviorRecords, M as appendBehaviorRecords, N as mergeProfileEntries, O as clampVisionConcurrency, P as readBehaviorRecords, Q as READ_SKILL_FILE_INPUT_SCHEMA, R as USER_PROFILE_NO_INVENTION_RULE, S as extractSkillCandidate, T as VISION_DEFAULT_CONCURRENCY, U as SerializingMemoryStore, V as DEFAULT_USER_PROFILE_LIMITS, W as EventBus, X as ASK_USER_TOOL, Y as ASK_USER_MAX_FIELDS, Z as ASK_USER_TOOL_NAME, _ as FsRunSnapshotStore, a as networkPolicyLibSource, at as scriptToolName, b as DEFAULT_LOOP_LIMITS, c as bridgeError, ct as ProgressiveRouter, d as FsMemoryStore, dt as xmlRenderer, et as READ_SKILL_FILE_TOOL_NAME, f as WebSkillRuntime, g as redactToolStepArgs, h as SENSITIVE_ANNOTATION, i as isNetworkAllowed, it as schemaSourceLabel, j as USER_PROFILE_KEY, k as runVisionBatch, l as parseBridgeRequest, lt as escapeXml, m as AgentLoop, n as normalizeErrorCode, nt as formatSkillScriptManifest, o as networkUrlHost, ot as resolveToolName, p as summarizeRunUsage, q as ASK_USER_FIELD_TYPES, r as normalizeToolError, rt as listSkillScripts, s as UPLOAD_FILES_UNAVAILABLE, st as toLlmToolSpec, t as CapabilityApproval, tt as ALLOWED_TOOLS_EXCLUSION_REASON, u as FsArtifactStore, ut as renderAvailableSkillsXml, v as RUN_SNAPSHOT_SCHEMA_VERSION, w as TraceRecorder, x as MAX_TOOL_STEP_ARG_BYTES, y as isUnsupportedRunSnapshot, z as USER_PROFILE_PROMPT_HEADER } from "./approval-DnUytrkq.js";
 import { a as GoogleGenAiClient, c as findUnpairedToolCalls, d as partsToText, f as promptText, i as toVercelToolSpecs, l as interruptedToolResult, n as fromVercelResult, o as AnthropicClient, p as textParts, r as fromVercelStreamPart, s as OpenAiCompatibleClient, u as sealToolCallPairs } from "./llm-eIQNO9tr.js";
-import { _ as DEFAULT_MAX_UPLOAD_FILE_BYTES, a as UNSUPPORTED_DOCUMENT_MESSAGE, c as toBase64, d as SPREADSHEET_LIMITS, f as SPREADSHEET_MIME_TYPE, g as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, h as DEFAULT_MAX_DOCUMENT_BYTES, i as SUPPORTED_DOCUMENT_MIME, l as encodeSpreadsheet, m as DEFAULT_MAX_DATA_SOURCE_BYTES, n as READ_LINKED_DOCUMENT_TOOL, p as XLSX_UNSUPPORTED, r as READ_LINKED_DOCUMENT_TOOL_NAME, s as isBytesOnlyDocument, t as BYTES_ONLY_DOCUMENT_MIME, u as SPREADSHEET_EXTENSION, v as TEXT_BUDGETED_CONTENT_TYPES } from "./linkedDocument-0iiVPd5t.js";
 import { n as normalizeToolContent, t as mergeCatalogEntries } from "./external-_ZRQe-V9.js";
 import { n as extractChartSpec, t as buildRenderResult } from "./renderResult-2v3WQzs_.js";
 import { n as validateUiSpecEvent, r as validateUiSpecNode, t as extractUiSpecEvents } from "./surface-DVGiCmwq.js";
-import { t as createWebSkillApi } from "./webSkillApi-rX2e3SVB.js";
+import { t as createWebSkillApi } from "./webSkillApi-TeWPPFDn.js";
 
 //#region ../core/src/fs/memoryFs.ts
 const ROOT = "/";
@@ -1018,7 +1017,7 @@ var FsToolStepStore = class {
 * Version of the published `@webskill/sdk` package, injected at build time.
 * @stable
 */
-const SDK_VERSION = "0.28.1";
+const SDK_VERSION = "0.29.0";
 
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, ATTACHMENT_TEXT_LIMIT, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, BINARY_EXTENSIONS, BYTES_ONLY_DOCUMENT_MIME, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_MAX_UPLOAD_FILE_BYTES, DEFAULT_USER_PROFILE_LIMITS, DOCX_MIME, DWG_MIME_TYPES, EMPTY_USER_PROFILE, EventBus, FILE_MIME_TYPES, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, IMAGE_MIME_TYPES, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, OpenAiCompatibleClient, PPTX_MIME, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SPREADSHEET_EXTENSION, SPREADSHEET_LIMITS, SPREADSHEET_MIME_TYPE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TEXT_EXTENSIONS, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, UNTRUSTED_LINE_LIMIT, UPLOAD_FILES_UNAVAILABLE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, VISION_DEFAULT_CONCURRENCY, VISION_MAX_CONCURRENCY, VISION_SLOW_THRESHOLD_MS, WebSkillError, WebSkillRuntime, XLSX_MIME, XLSX_UNSUPPORTED, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteBinary, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, clampVisionConcurrency, classifyAttachment, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, encodeSpreadsheet, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, extractedDocumentFormat, findUnpairedToolCalls, formatAttachmentText, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isBytesOnlyDocument, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, runVisionBatch, sampleBehaviorRecords, sanitizeUntrustedLine, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toBase64, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, ATTACHMENT_TEXT_LIMIT, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, BINARY_EXTENSIONS, BYTES_ONLY_DOCUMENT_MIME, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_MAX_UPLOAD_FILE_BYTES, DEFAULT_USER_PROFILE_LIMITS, DOCX_MIME, DWG_MIME_TYPES, EMPTY_USER_PROFILE, EventBus, FILE_MIME_TYPES, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, IMAGE_MIME_TYPES, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, OpenAiCompatibleClient, PPTX_MIME, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SPREADSHEET_EXTENSION, SPREADSHEET_LIMITS, SPREADSHEET_MIME_TYPE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TEXT_EXTENSIONS, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, UNTRUSTED_LINE_LIMIT, UPLOAD_FILES_UNAVAILABLE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, VISION_DEFAULT_CONCURRENCY, VISION_MAX_CONCURRENCY, VISION_SLOW_THRESHOLD_MS, WebSkillError, WebSkillRuntime, XLSX_MIME, XLSX_UNSUPPORTED, XLS_MIME, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteBinary, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, clampVisionConcurrency, classifyAttachment, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, encodeSpreadsheet, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, extractedDocumentFormat, findUnpairedToolCalls, formatAttachmentText, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isBytesOnlyDocument, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, runVisionBatch, sampleBehaviorRecords, sanitizeUntrustedLine, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toBase64, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/{linkedDocument-0iiVPd5t.js → linkedDocument-GE-VV_Gj.js}

@@ -2,6 +2,116 @@ import { t as WebSkillError } from "./errors-BDZNpC13.js";
 import { unzipSync, zipSync } from "fflate";
 import writeXlsxFile from "write-excel-file/universal";
 
+//#region ../core/src/attachment/kind.ts
+/** 可作为图片分片外发的 MIME 类型 @experimental */
+const IMAGE_MIME_TYPES = [
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"image/gif"
+];
+/**
+* 可按文本读取的扩展名。accept 白名单与判定白名单共用这一份——
+* 0.5.x 两处不一致，`log`/`yaml`/`yml` 能通过判定却在文件选择器里选不到。
+*/
+const TEXT_EXTENSIONS = [
+	"txt",
+	"md",
+	"csv",
+	"json",
+	"log",
+	"yaml",
+	"yml"
+];
+/** 非文本非图片但仍可整体外发的类型（provider 的 file 分片） @experimental */
+const FILE_MIME_TYPES = ["application/pdf"];
+/**
+* 需要**客户端先抽取成文本**才能外发的类型（FR-23.9 / 0.13.0 FR-12.5 / 0.22.0 分册 18）。
+* 不走直通的 `file`：docx / xlsx / pptx 发给 provider 会被当成二进制垃圾。
+*/
+const DOCX_MIME = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+const XLS_MIME = "application/vnd.ms-excel";
+const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+const PPTX_MIME = "application/vnd.openxmlformats-officedocument.presentationml.presentation";
+/** 文本类附件进模型上下文的字符上限（0.6.0） @experimental */
+const ATTACHMENT_TEXT_LIMIT = 32 * 1024;
+/**
+* DWG 图纸的 MIME。没有官方注册值，各家各发一套，浏览器上传时更常见的是空串。
+* @experimental
+*/
+const DWG_MIME_TYPES = [
+	"image/vnd.dwg",
+	"application/acad",
+	"application/x-acad",
+	"application/dwg",
+	"application/x-dwg",
+	"drawing/dwg"
+];
+/**
+* 只存字节、不进上下文的扩展名。仍然是**白名单制**：
+* 新增 `binary` 类别不等于任意二进制放行（AC-19.18）。
+* @experimental
+*/
+const BINARY_EXTENSIONS = ["dwg"];
+const TEXT_EXTENSION_SET = new Set(TEXT_EXTENSIONS);
+const IMAGE_MIME_SET = new Set(IMAGE_MIME_TYPES);
+const FILE_MIME_SET = new Set(FILE_MIME_TYPES);
+const EXTRACTED_MIME_SET = /* @__PURE__ */ new Set([
+	DOCX_MIME,
+	XLS_MIME,
+	XLSX_MIME,
+	PPTX_MIME
+]);
+const EXTRACTED_EXTENSION_SET = /* @__PURE__ */ new Set([
+	"docx",
+	"xls",
+	"xlsx",
+	"pptx"
+]);
+const BINARY_MIME_SET = new Set(DWG_MIME_TYPES);
+const BINARY_EXTENSION_SET = new Set(BINARY_EXTENSIONS);
+/** 下载与上传都常把认不出的类型标成它，此时只能看扩展名 */
+const OPAQUE_MIME = "application/octet-stream";
+function extensionOf(fileName) {
+	return fileName.split(".").pop()?.toLowerCase() ?? "";
+}
+/**
+* 三种待抽取格式共用 `document-text` 这一种 kind，选抽取器时要按格式再分一次。
+* 下载列表与上传入口必须得出同一结论（AC-20.17），所以只能在这里一份。
+* @experimental
+*/
+function extractedDocumentFormat(contentType, fileName) {
+	const type = contentType.toLowerCase();
+	const ext = extensionOf(fileName);
+	if (type === "" || type === OPAQUE_MIME) return ext === "xls" || ext === "xlsx" ? "xlsx" : ext === "pptx" ? "pptx" : "docx";
+	if (type === "application/vnd.ms-excel" || type === "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet") return "xlsx";
+	if (type === "application/vnd.openxmlformats-officedocument.presentationml.presentation") return "pptx";
+	return "docx";
+}
+/** 分类集中一处，不散落在各 UI 分支里 @experimental */ function classifyAttachment(contentType, fileName) {
+	const type = contentType.toLowerCase();
+	if (IMAGE_MIME_SET.has(type)) return "image";
+	if (BINARY_MIME_SET.has(type)) return "binary";
+	if (EXTRACTED_MIME_SET.has(type)) return "document-text";
+	if (FILE_MIME_SET.has(type)) return "file";
+	if (type.startsWith("text/") || type === "application/json") return "text";
+	if (type === "" && TEXT_EXTENSION_SET.has(extensionOf(fileName))) return "text";
+	if ((type === "" || type === OPAQUE_MIME) && EXTRACTED_EXTENSION_SET.has(extensionOf(fileName))) return "document-text";
+	if ((type === "" || type === OPAQUE_MIME) && BINARY_EXTENSION_SET.has(extensionOf(fileName))) return "binary";
+}
+/**
+* 文本类附件进模型上下文的最终形态。两条入口共用，差别只有出处那一段（0.14.0 D-20-6）。
+* @experimental
+*/
+function formatAttachmentText(input) {
+	const limit = input.limit ?? 32768;
+	const clipped = input.body.length > limit ? `${input.body.slice(0, limit)}\n[truncated]` : input.body;
+	const bodyOnly = input.kind === "document-text" ? ", body text only" : "";
+	const from = input.origin === "download" ? ", from this device's downloads" : "";
+	return `--- Attachment: ${input.name} (${input.contentType}${bodyOnly}${from}) ---\n${clipped}`;
+}
+
+//#endregion
 //#region ../runtime/src/tools/types.ts
 /**
 * 参与 `toolResultMaxBytes` 截断的分片类型（FR-23.3）。**判据的单一来源。**
@@ -421,7 +531,7 @@ function isBytesOnlyDocument(mime, url) {
 	return ((url.split(/[?#]/)[0] ?? "").split(".").pop() ?? "").toLowerCase() === "dwg";
 }
 /** 引擎侧固定流程（§2.3）用到的错误文案，集中一处便于判据引用 */
-const UNSUPPORTED_DOCUMENT_MESSAGE = `Only PDF (${SUPPORTED_DOCUMENT_MIME.pdf}), Word (${SUPPORTED_DOCUMENT_MIME.docx}), Excel (${SUPPORTED_DOCUMENT_MIME.xlsx}), PowerPoint (${SUPPORTED_DOCUMENT_MIME.pptx}) and plain text documents can be read.`;
+const UNSUPPORTED_DOCUMENT_MESSAGE = `Only PDF (${SUPPORTED_DOCUMENT_MIME.pdf}), Word (${SUPPORTED_DOCUMENT_MIME.docx}), Excel (${SUPPORTED_DOCUMENT_MIME.xlsx} or ${XLS_MIME}), PowerPoint (${SUPPORTED_DOCUMENT_MIME.pptx}) and plain text documents can be read.`;
 const READ_LINKED_DOCUMENT_INPUT_SCHEMA = {
 	type: "object",
 	properties: { url: {
@@ -455,4 +565,4 @@ function fromBase64(data) {
 }
 
 //#endregion
-export { DEFAULT_MAX_UPLOAD_FILE_BYTES as _, UNSUPPORTED_DOCUMENT_MESSAGE as a, toBase64 as c, SPREADSHEET_LIMITS as d, SPREADSHEET_MIME_TYPE as f, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as g, DEFAULT_MAX_DOCUMENT_BYTES as h, SUPPORTED_DOCUMENT_MIME as i, encodeSpreadsheet as l, DEFAULT_MAX_DATA_SOURCE_BYTES as m, READ_LINKED_DOCUMENT_TOOL as n, fromBase64 as o, XLSX_UNSUPPORTED as p, READ_LINKED_DOCUMENT_TOOL_NAME as r, isBytesOnlyDocument as s, BYTES_ONLY_DOCUMENT_MIME as t, SPREADSHEET_EXTENSION as u, TEXT_BUDGETED_CONTENT_TYPES as v };
+export { extractedDocumentFormat as A, FILE_MIME_TYPES as C, XLSX_MIME as D, TEXT_EXTENSIONS as E, XLS_MIME as O, DWG_MIME_TYPES as S, PPTX_MIME as T, DEFAULT_MAX_UPLOAD_FILE_BYTES as _, UNSUPPORTED_DOCUMENT_MESSAGE as a, BINARY_EXTENSIONS as b, toBase64 as c, SPREADSHEET_LIMITS as d, SPREADSHEET_MIME_TYPE as f, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as g, DEFAULT_MAX_DOCUMENT_BYTES as h, SUPPORTED_DOCUMENT_MIME as i, formatAttachmentText as j, classifyAttachment as k, encodeSpreadsheet as l, DEFAULT_MAX_DATA_SOURCE_BYTES as m, READ_LINKED_DOCUMENT_TOOL as n, fromBase64 as o, XLSX_UNSUPPORTED as p, READ_LINKED_DOCUMENT_TOOL_NAME as r, isBytesOnlyDocument as s, BYTES_ONLY_DOCUMENT_MIME as t, SPREADSHEET_EXTENSION as u, TEXT_BUDGETED_CONTENT_TYPES as v, IMAGE_MIME_TYPES as w, DOCX_MIME as x, ATTACHMENT_TEXT_LIMIT as y };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { X as JsonSchema, _ as LlmToolSpec, _t as SkillDocument, ht as SkillCatalogEntry } from "./types-wKp3YBSM-167azx1H.js";
-import { B as ExternalToolSource, Hr as mergeCatalogEntries, Mn as ToolDisclosure, Pn as ToolResult, z as ExternalSkillProvider } from "./index-DU8sKyQq.js";
+import { X as JsonSchema, _ as LlmToolSpec, _t as SkillDocument, ht as SkillCatalogEntry } from "./types-wKp3YBSM-D7w-ZbsB.js";
+import { B as ExternalToolSource, Hr as mergeCatalogEntries, Mn as ToolDisclosure, Pn as ToolResult, z as ExternalSkillProvider } from "./index-Cngzg2WS.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/node.d.ts

@@ -1,6 +1,6 @@
-import { G as FileStat, It as VerifyResult, K as FileSystemProvider, N as ArchiveLimits, Ot as SkillsLockfile, Pt as UnsignedPolicy, S as UiBridge, St as SkillManifest, X as JsonSchema, at as SKILL_MANIFEST_FILE, b as RenderResultRequest, c as InteractionResponse, it as SKILLS_LOCKFILE, jt as TrustedKeyStore, q as FileWriteStream, s as InteractionRequest, ut as SignatureAuditSink, vt as SkillInstallSource, xt as SkillManagerPort } from "./types-wKp3YBSM-167azx1H.js";
-import { $t as SchemaInferer, H as FsArtifactStore, Pn as ToolResult, Tr as createScriptContext, U as FsMemoryStore, b as BridgeCapabilities, en as ScriptExecutionContext, gr as WebSkillRuntimeDeps, hr as WebSkillRuntime, jn as ToolDefinition, m as ApprovalScope, tn as ScriptExecutor, ut as NetworkPolicy } from "./index-DU8sKyQq.js";
-import { a as AuditLog, f as CandidateSkill, h as CandidateStore, r as ApprovalPolicy, x as SkillVersionStore } from "./skillVersionStore-S4_HJ_Fl-DzZM_UIw.js";
+import { G as FileStat, It as VerifyResult, K as FileSystemProvider, N as ArchiveLimits, Ot as SkillsLockfile, Pt as UnsignedPolicy, S as UiBridge, St as SkillManifest, X as JsonSchema, at as SKILL_MANIFEST_FILE, b as RenderResultRequest, c as InteractionResponse, it as SKILLS_LOCKFILE, jt as TrustedKeyStore, q as FileWriteStream, s as InteractionRequest, ut as SignatureAuditSink, vt as SkillInstallSource, xt as SkillManagerPort } from "./types-wKp3YBSM-D7w-ZbsB.js";
+import { $t as SchemaInferer, H as FsArtifactStore, Pn as ToolResult, Tr as createScriptContext, U as FsMemoryStore, b as BridgeCapabilities, en as ScriptExecutionContext, gr as WebSkillRuntimeDeps, hr as WebSkillRuntime, jn as ToolDefinition, m as ApprovalScope, tn as ScriptExecutor, ut as NetworkPolicy } from "./index-Cngzg2WS.js";
+import { a as AuditLog, f as CandidateSkill, h as CandidateStore, r as ApprovalPolicy, x as SkillVersionStore } from "./skillVersionStore-S4_HJ_Fl-AiNsSSdO.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts

package/dist/node.js

@@ -2,8 +2,8 @@ import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
 import { A as SKILL_MANIFEST_FILE, D as verifySkillSignature, M as buildManifest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, b as parseSkillMarkdown, c as unzipWithLimits, f as SKILL_PACK_FILE, k as SKILLS_LOCKFILE, m as parseSkillPackManifest, o as readResponseWithLimit, p as exportSkills, s as resolveArchiveLimits, t as validateSkills, w as readSkillSignature, y as isValidSkillName } from "./skill-WSUDp6A1.js";
 import { a as atomicWriteBinary, o as atomicWriteText, r as resolveInsideRoot, s as isAtomicTempPath, t as assertSafePathSegment } from "./pathSecurity-CirkQwWP.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
-import { K as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-5BmspsRi.js";
-import { f as SPREADSHEET_MIME_TYPE } from "./linkedDocument-0iiVPd5t.js";
+import { f as SPREADSHEET_MIME_TYPE } from "./linkedDocument-GE-VV_Gj.js";
+import { K as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-DnUytrkq.js";
 import { n as normalizeToolContent } from "./external-_ZRQe-V9.js";
 import { i as probeLlmCapabilities } from "./env-Bj1MI2Ww.js";
 import { t as AUDIT_EVENT_TYPES } from "./eventTypes-DcTQXSV1.js";

package/dist/{skillVersionStore-S4_HJ_Fl-DzZM_UIw.d.ts → skillVersionStore-S4_HJ_Fl-AiNsSSdO.d.ts}

@@ -1,4 +1,4 @@
-import { K as FileSystemProvider, St as SkillManifest, et as Page, ht as SkillCatalogEntry, tt as PageQuery } from "./types-wKp3YBSM-167azx1H.js";
+import { K as FileSystemProvider, St as SkillManifest, et as Page, ht as SkillCatalogEntry, tt as PageQuery } from "./types-wKp3YBSM-D7w-ZbsB.js";
 //#region ../governance/dist/skillVersionStore-S4_HJ_Fl.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { S as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, v as MemoryStore } from "./types-wKp3YBSM-167azx1H.js";
+import { S as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, v as MemoryStore } from "./types-wKp3YBSM-D7w-ZbsB.js";
 import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-AK3cSMEA-Dli6QU5E.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts

package/dist/{types-wKp3YBSM-167azx1H.d.ts → types-wKp3YBSM-D7w-ZbsB.d.ts}

@@ -521,6 +521,7 @@ declare const FILE_MIME_TYPES: readonly ["application/pdf"];
  * 不走直通的 `file`：docx / xlsx / pptx 发给 provider 会被当成二进制垃圾。
  */
 declare const DOCX_MIME = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+declare const XLS_MIME = "application/vnd.ms-excel";
 declare const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
 declare const PPTX_MIME = "application/vnd.openxmlformats-officedocument.presentationml.presentation";
 /** 文本类附件进模型上下文的字符上限（0.6.0） @experimental */
@@ -1276,4 +1277,4 @@ interface MemoryStore {
   transaction?<T>(scope: string, fn: (inner: MemoryStore) => Promise<T>): Promise<T>;
 }
 //#endregion
-export { PPTX_MIME as $, exportSkills as $t, extractSkillCandidate as A, TrustedKey as At, DOCX_MIME as B, assertRemoteUrlAllowed as Bt, UiSpecActionCapability as C, verifySkillSignature as Cn, SkillMetadata as Ct, UiSpecSnapshot as D, SkillSource as Dt, UiSpecPatch as E, SkillSignature as Et, BINARY_EXTENSIONS as F, ValidationReport as Ft, FileStat as G, buildManifest as Gt, DiscoveryResult as H, atomicWriteBinary as Ht, CatalogRenderer as I, VerifyResult as It, FsTrustedKeyStore as J, classifyAttachment as Jt, FileSystemProvider as K, checkDependencyCycles as Kt, ChatAttachmentKind as L, WebSkillError as Lt, ATTACHMENT_TEXT_LIMIT as M, UNTRUSTED_LINE_LIMIT as Mt, ArchiveLimits as N, UiSpecNode as Nt, UiSurfaceActionRequest as O, SkillsLockfile as Ot, AttachmentTextInput as P, UnsignedPolicy as Pt, MemoryFS as Q, escapeXml as Qt, CryptoKeyLike as R, WebSkillErrorCode as Rt, UiBridge as S, verifyManifest as Sn, SkillManifest as St, UiSpecEvent as T, SkillReader as Tt, ExtractedDocumentFormat as U, atomicWriteText as Ut, DWG_MIME_TYPES as V, assertSafePathSegment as Vt, FILE_MIME_TYPES as W, buildCatalog as Wt, JsonSchema as X, detectSkillArchiveShape as Xt, IMAGE_MIME_TYPES as Y, computeDigest as Yt, MANIFEST_EXCLUDED_FILES as Z, detectSkillArchiveShapeFromFs as Zt, LlmToolSpec as _, signSkill as _n, SkillDocument as _t, InteractionOrigin as a, keyIdOf as an, SKILL_MANIFEST_FILE as at, RenderResultRequest as b, unzipWithLimits as bn, SkillLocation as bt, InteractionResponse as c, parseSkillMarkdown as cn, SKILL_PACK_FILE as ct, LlmContentPart as d, readSkillSignature as dn, SignatureVerdict as dt, extractedDocumentFormat as en, Page as et, LlmMessage as f, renderAvailableSkillsXml as fn, SkillArchiveDetection as ft, LlmToolCall as g, sanitizeUntrustedLine as gn, SkillDiscovery as gt, LlmTokenUsage as h, resolveInsideRoot as hn, SkillCatalogEntry as ht, FormField as i, jsonRenderer as in, SKILLS_LOCKFILE as it, ATOMIC_TMP_SUFFIX_PATTERN as j, TrustedKeyStore as jt, UiSurfaceActionResponse as k, TEXT_EXTENSIONS as kt, LlmClient as l, parseSkillPackManifest as ln, SKILL_SIGNATURE_FILE as lt, LlmStreamEvent as m, resolveArchiveLimits as mn, SkillCatalog as mt, ArtifactStore as n, isAtomicTempPath as nn, RemoteUrlPolicy as nt, InteractionPolicy as o, messageOf as on, SKILL_NAME_MAX_LENGTH as ot, LlmResponse as p, renderCatalogJson as pn, SkillArchiveShape as pt, FileWriteStream as q, checkSkillRules as qt, ChartSpec as r, isValidSkillName as rn, SIGNATURE_SCHEMA_VERSION as rt, InteractionRequest as s, normalizePath as sn, SKILL_NAME_PATTERN as st, Artifact as t, formatAttachmentText as tn, PageQuery as tt, LlmCompleteInput as u, readResponseWithLimit as un, SignatureAuditSink as ut, MemoryStore as v, signaturePayloadBytes as vn, SkillInstallSource as vt, UiSpecDrafts as w, xmlRenderer as wn, SkillPackManifest as wt, SkillCandidateMarker as x, validateSkills as xn, SkillManagerPort as xt, RenderBlock as y, stripArchiveRoot as yn, SkillIssue as yt, DEFAULT_ARCHIVE_LIMITS as z, XLSX_MIME as zt };
+export { PPTX_MIME as $, escapeXml as $t, extractSkillCandidate as A, TrustedKey as At, DOCX_MIME as B, XLS_MIME as Bt, UiSpecActionCapability as C, verifyManifest as Cn, SkillMetadata as Ct, UiSpecSnapshot as D, SkillSource as Dt, UiSpecPatch as E, SkillSignature as Et, BINARY_EXTENSIONS as F, ValidationReport as Ft, FileStat as G, buildCatalog as Gt, DiscoveryResult as H, assertSafePathSegment as Ht, CatalogRenderer as I, VerifyResult as It, FsTrustedKeyStore as J, checkSkillRules as Jt, FileSystemProvider as K, buildManifest as Kt, ChatAttachmentKind as L, WebSkillError as Lt, ATTACHMENT_TEXT_LIMIT as M, UNTRUSTED_LINE_LIMIT as Mt, ArchiveLimits as N, UiSpecNode as Nt, UiSurfaceActionRequest as O, SkillsLockfile as Ot, AttachmentTextInput as P, UnsignedPolicy as Pt, MemoryFS as Q, detectSkillArchiveShapeFromFs as Qt, CryptoKeyLike as R, WebSkillErrorCode as Rt, UiBridge as S, validateSkills as Sn, SkillManifest as St, UiSpecEvent as T, xmlRenderer as Tn, SkillReader as Tt, ExtractedDocumentFormat as U, atomicWriteBinary as Ut, DWG_MIME_TYPES as V, assertRemoteUrlAllowed as Vt, FILE_MIME_TYPES as W, atomicWriteText as Wt, JsonSchema as X, computeDigest as Xt, IMAGE_MIME_TYPES as Y, classifyAttachment as Yt, MANIFEST_EXCLUDED_FILES as Z, detectSkillArchiveShape as Zt, LlmToolSpec as _, sanitizeUntrustedLine as _n, SkillDocument as _t, InteractionOrigin as a, jsonRenderer as an, SKILL_MANIFEST_FILE as at, RenderResultRequest as b, stripArchiveRoot as bn, SkillLocation as bt, InteractionResponse as c, normalizePath as cn, SKILL_PACK_FILE as ct, LlmContentPart as d, readResponseWithLimit as dn, SignatureVerdict as dt, exportSkills as en, Page as et, LlmMessage as f, readSkillSignature as fn, SkillArchiveDetection as ft, LlmToolCall as g, resolveInsideRoot as gn, SkillDiscovery as gt, LlmTokenUsage as h, resolveArchiveLimits as hn, SkillCatalogEntry as ht, FormField as i, isValidSkillName as in, SKILLS_LOCKFILE as it, ATOMIC_TMP_SUFFIX_PATTERN as j, TrustedKeyStore as jt, UiSurfaceActionResponse as k, TEXT_EXTENSIONS as kt, LlmClient as l, parseSkillMarkdown as ln, SKILL_SIGNATURE_FILE as lt, LlmStreamEvent as m, renderCatalogJson as mn, SkillCatalog as mt, ArtifactStore as n, formatAttachmentText as nn, RemoteUrlPolicy as nt, InteractionPolicy as o, keyIdOf as on, SKILL_NAME_MAX_LENGTH as ot, LlmResponse as p, renderAvailableSkillsXml as pn, SkillArchiveShape as pt, FileWriteStream as q, checkDependencyCycles as qt, ChartSpec as r, isAtomicTempPath as rn, SIGNATURE_SCHEMA_VERSION as rt, InteractionRequest as s, messageOf as sn, SKILL_NAME_PATTERN as st, Artifact as t, extractedDocumentFormat as tn, PageQuery as tt, LlmCompleteInput as u, parseSkillPackManifest as un, SignatureAuditSink as ut, MemoryStore as v, signSkill as vn, SkillInstallSource as vt, UiSpecDrafts as w, verifySkillSignature as wn, SkillPackManifest as wt, SkillCandidateMarker as x, unzipWithLimits as xn, SkillManagerPort as xt, RenderBlock as y, signaturePayloadBytes as yn, SkillIssue as yt, DEFAULT_ARCHIVE_LIMITS as z, XLSX_MIME as zt };

package/dist/ui-react.d.ts

@@ -1,6 +1,6 @@
-import { C as UiSpecActionCapability, D as UiSpecSnapshot, Nt as UiSpecNode, O as UiSurfaceActionRequest, S as UiBridge, T as UiSpecEvent, b as RenderResultRequest, c as InteractionResponse, k as UiSurfaceActionResponse, s as InteractionRequest, w as UiSpecDrafts } from "./types-wKp3YBSM-167azx1H.js";
-import { P as DocumentSurfacePort } from "./index-DU8sKyQq.js";
-import { H as InteractionSpecLabels, nt as SurfaceFormTexts, rt as SurfaceHostControlTexts, v as ChartColors, y as ChartFontSizes } from "./index-DJeYqzlE.js";
+import { C as UiSpecActionCapability, D as UiSpecSnapshot, Nt as UiSpecNode, O as UiSurfaceActionRequest, S as UiBridge, T as UiSpecEvent, b as RenderResultRequest, c as InteractionResponse, k as UiSurfaceActionResponse, s as InteractionRequest, w as UiSpecDrafts } from "./types-wKp3YBSM-D7w-ZbsB.js";
+import { P as DocumentSurfacePort } from "./index-Cngzg2WS.js";
+import { H as InteractionSpecLabels, nt as SurfaceFormTexts, rt as SurfaceHostControlTexts, v as ChartColors, y as ChartFontSizes } from "./index-C3t1jKAs.js";
 import { z } from "zod";
 import React$1, { ComponentType, ReactNode } from "react";
 import "react/jsx-runtime";