@webskill/sdk 0.7.0 → 0.8.0

package/dist/{dist-DnYG2-eY.js → dist-CJqQsIm9.js}

@@ -1,7 +1,137 @@
-import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
+import { m as WebSkillError } from "./dist-59XlqDuv.js";
 import { toJSONSchema, z } from "zod";
 
-//#region ../ui/dist/webskillCatalog-B-IQxOKs.js
+//#region ../ui/dist/webskillCatalog-CKM0bu47.js
+const DEFAULT_INTERACTION_TEXTS = {
+	submit: "Submit",
+	cancel: "Cancel",
+	confirm: "Confirm",
+	select: "Select",
+	allow: "Allow",
+	deny: "Deny",
+	chooseFile: "Choose file",
+	decline: "Decline",
+	required: "This field is required",
+	suggested: "Suggested:",
+	useSuggestion: "Use"
+};
+function resolveInteractionTexts(texts) {
+	return texts ? {
+		...DEFAULT_INTERACTION_TEXTS,
+		...texts
+	} : DEFAULT_INTERACTION_TEXTS;
+}
+/** 可复用的部分取自 DEFAULT_INTERACTION_TEXTS，不另抄一份（AC-G10） */
+const DEFAULT_SURFACE_FORM_TEXTS = {
+	required: DEFAULT_INTERACTION_TEXTS.required,
+	submit: DEFAULT_INTERACTION_TEXTS.submit,
+	cancel: DEFAULT_INTERACTION_TEXTS.cancel,
+	addItem: "Add",
+	removeItem: "Remove",
+	arrayFirstItemOnly: "This renderer shows only the first item of a repeatable group.",
+	readOnlySnapshot: "This is a saved record — its actions are no longer available."
+};
+function resolveSurfaceFormTexts(texts) {
+	return texts ? {
+		...DEFAULT_SURFACE_FORM_TEXTS,
+		...texts
+	} : DEFAULT_SURFACE_FORM_TEXTS;
+}
+/** 提交值按请求类型归形（WebFormBridge 与框架组件库共享单一来源） */
+function shapeInteractionValue(model, values) {
+	switch (model.kind) {
+		case "ask": return values["answer"];
+		case "confirm": return values["confirmed"] === true;
+		case "select": return values["selected"];
+		case "authorize": return true;
+		case "file-pick": return values["file"];
+		case "form": return values;
+	}
+}
+/** 五类 InteractionRequest → 统一中间模型（框架无关） */
+function interactionToFormModel(request, texts) {
+	const t = resolveInteractionTexts(texts);
+	switch (request.type) {
+		case "ask": return {
+			kind: "ask",
+			message: request.message,
+			controls: [{
+				name: "answer",
+				label: request.message,
+				control: "text",
+				required: true,
+				...request.suggestion ? { suggestion: request.suggestion } : {}
+			}],
+			submitLabel: t.submit,
+			cancelLabel: t.cancel
+		};
+		case "confirm": return {
+			kind: "confirm",
+			message: request.message,
+			controls: [{
+				name: "confirmed",
+				label: request.message,
+				control: "boolean",
+				defaultValue: request.defaultValue ?? true
+			}],
+			submitLabel: t.confirm,
+			cancelLabel: t.cancel
+		};
+		case "form": return {
+			kind: "form",
+			...request.title ? { title: request.title } : {},
+			controls: request.fields.map((f) => ({
+				name: f.name,
+				label: f.label,
+				control: f.type,
+				...f.required ? { required: true } : {},
+				...f.description ? { description: f.description } : {},
+				...f.defaultValue !== void 0 ? { defaultValue: f.defaultValue } : {},
+				...f.suggestion ? { suggestion: f.suggestion } : {},
+				...f.options ? { options: f.options } : {}
+			})),
+			submitLabel: t.submit,
+			cancelLabel: t.cancel
+		};
+		case "select": return {
+			kind: "select",
+			message: request.message,
+			controls: [{
+				name: "selected",
+				label: request.message,
+				control: "select",
+				required: true,
+				options: request.options,
+				...request.suggestion ? { suggestion: request.suggestion } : {}
+			}],
+			submitLabel: t.select,
+			cancelLabel: t.cancel
+		};
+		case "authorize": return {
+			kind: "authorize",
+			title: "Authorization required",
+			message: request.message,
+			controls: [],
+			submitLabel: t.allow,
+			cancelLabel: t.deny
+		};
+		case "file-pick": return {
+			kind: "file-pick",
+			title: "File requested",
+			message: request.message,
+			controls: [{
+				name: "file",
+				label: request.field ?? "file",
+				control: "file",
+				required: true,
+				...request.accept ? { accept: request.accept } : {},
+				...request.multiple ? { multiple: true } : {}
+			}],
+			submitLabel: t.chooseFile,
+			cancelLabel: t.decline
+		};
+	}
+}
 /**
 * 最小子集 markdown → DOM：标题（#..###）、无序列表、代码块（```）、加粗、链接。
 * 全部内容经 textContent 写入，用户内容天然转义防 HTML 注入。
@@ -192,6 +322,139 @@ function mountEchart(container) {
 		}
 	};
 }
+function isRecord$1$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+* 逐节点降级（FR-23.3）。
+*
+* 与 `validate` 的关系见 `UiCatalog.sanitize` 的注释：一个整块拒绝、一个逐节点救。
+*
+* **不写回 `safeParse` 的结果**是刻意的：zod 会剥离未声明的键，
+* 而渲染层确实在读若干未进 zod 的 prop（如 `suggestion`，由 SDK 侧下发而非模型生成）。
+* 写回等于把它们悄悄删掉。这里只删「确实解析失败」的那几个键。
+*/
+function sanitizeNode(catalog, byName, node, path, degradations) {
+	if (!isRecord$1$1(node)) {
+		degradations.push({
+			path,
+			kind: "node-dropped",
+			component: "unknown",
+			detail: "Node is not an object."
+		});
+		return;
+	}
+	const name = node["component"];
+	if (typeof name !== "string") {
+		degradations.push({
+			path,
+			kind: "node-dropped",
+			component: "unknown",
+			detail: "Node has no \"component\" name."
+		});
+		return;
+	}
+	const def = byName.get(name);
+	if (!def) {
+		degradations.push({
+			path,
+			kind: "unknown-component",
+			component: name,
+			detail: `Unknown component "${name}"; the catalog declares: ${catalog.components.map((c) => c.name).join(", ")}`
+		});
+		return;
+	}
+	const rawProps = isRecord$1$1(node["props"]) ? node["props"] : {};
+	let props = rawProps;
+	const parsed = def.props.safeParse(rawProps);
+	if (!parsed.success) {
+		const offending = new Set(parsed.error.issues.map((issue) => String(issue.path[0] ?? "")).filter((key) => key !== ""));
+		const kept = {};
+		for (const [key, value] of Object.entries(rawProps)) if (!offending.has(key)) kept[key] = value;
+		const retry = def.props.safeParse(kept);
+		if (!retry.success) {
+			degradations.push({
+				path,
+				kind: "node-dropped",
+				component: name,
+				detail: `Props cannot be repaired by dropping invalid keys: ${retry.error.issues.map((i) => i.message).join("; ")}`
+			});
+			return;
+		}
+		for (const key of offending) degradations.push({
+			path: `${path}.props.${key}`,
+			kind: "prop-dropped",
+			component: name,
+			detail: `Dropped invalid prop "${key}".`
+		});
+		props = kept;
+	}
+	const sanitized = {
+		component: name,
+		props
+	};
+	if (typeof node["id"] === "string") sanitized.id = node["id"];
+	const children = node["children"];
+	if (children === void 0) return sanitized;
+	if (!Array.isArray(children)) {
+		degradations.push({
+			path: `${path}.children`,
+			kind: "constraint-ignored",
+			component: name,
+			detail: "children is not an array; rendered without children."
+		});
+		return sanitized;
+	}
+	if (def.children === void 0) {
+		degradations.push({
+			path: `${path}.children`,
+			kind: "constraint-ignored",
+			component: name,
+			detail: `Component "${name}" is a leaf; its children were dropped.`
+		});
+		return sanitized;
+	}
+	const allowed = def.children;
+	const singletons = /* @__PURE__ */ new Map();
+	const kept = [];
+	children.forEach((child, index) => {
+		const childPath = `${path}.children[${index}]`;
+		const childName = isRecord$1$1(child) && typeof child["component"] === "string" ? child["component"] : void 0;
+		if (allowed !== "any" && childName !== void 0 && !allowed.includes(childName)) {
+			degradations.push({
+				path: childPath,
+				kind: byName.has(childName) ? "node-dropped" : "unknown-component",
+				component: childName,
+				detail: byName.has(childName) ? `Component "${name}" only accepts children: ${[...allowed].join(", ")}` : `Unknown component "${childName}"; the catalog declares: ${catalog.components.map((c) => c.name).join(", ")}`
+			});
+			return;
+		}
+		if (childName !== void 0 && byName.get(childName)?.singletonPerContainer === true) {
+			const seen = (singletons.get(childName) ?? 0) + 1;
+			singletons.set(childName, seen);
+			if (seen > 1) {
+				degradations.push({
+					path: childPath,
+					kind: "node-dropped",
+					component: childName,
+					detail: `At most one "${childName}" per container; the extra one was dropped.`
+				});
+				return;
+			}
+		}
+		const sanitizedChild = sanitizeNode(catalog, byName, child, childPath, degradations);
+		if (sanitizedChild) kept.push(sanitizedChild);
+	});
+	sanitized.children = kept;
+	return sanitized;
+}
+function sanitizeUiSpec(catalog, byName, spec) {
+	const degradations = [];
+	return {
+		node: sanitizeNode(catalog, byName, spec, "root", degradations),
+		degradations
+	};
+}
 function componentSchema(def) {
 	const props = toJSONSchema(def.props, { io: "input" });
 	const node = {
@@ -220,7 +483,7 @@ function componentSchema(def) {
 	};
 	return node;
 }
-function isRecord$1(value) {
+function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function typeOf(schema) {
@@ -260,7 +523,7 @@ function promptFor(catalog, options) {
 	return lines.join("\n").trimEnd();
 }
 function validateNode(catalog, byName, node, path, issues) {
-	if (!isRecord$1(node)) {
+	if (!isRecord$2(node)) {
 		issues.push({
 			path,
 			message: "Node must be an object"
@@ -308,7 +571,7 @@ function validateNode(catalog, byName, node, path, issues) {
 	const singletons = /* @__PURE__ */ new Map();
 	children.forEach((child, index) => {
 		const childPath = `${path}.children[${index}]`;
-		if (allowed !== "any" && isRecord$1(child) && typeof child["component"] === "string") {
+		if (allowed !== "any" && isRecord$2(child) && typeof child["component"] === "string") {
 			if (!allowed.includes(child["component"])) {
 				issues.push({
 					path: childPath,
@@ -317,7 +580,7 @@ function validateNode(catalog, byName, node, path, issues) {
 				return;
 			}
 		}
-		if (isRecord$1(child) && typeof child["component"] === "string") {
+		if (isRecord$2(child) && typeof child["component"] === "string") {
 			const childName = child["component"];
 			if (byName.get(childName)?.singletonPerContainer === true) {
 				const seen = (singletons.get(childName) ?? 0) + 1;
@@ -362,7 +625,8 @@ function defineUiCatalog(input) {
 				ok: false,
 				issues
 			};
-		}
+		},
+		sanitize: (spec) => sanitizeUiSpec(input, byName, spec)
 	};
 }
 const tone = z.enum([
@@ -397,8 +661,38 @@ const DATA = [
 const INPUT = [
 	"Form",
 	"Field",
+	"FieldArray",
 	"Button"
 ];
+/**
+* `visibleWhen` 的结构化条件（设计 23 §1.2）。用 `z.lazy` 自引用；
+* 语义深度上限不在 zod 里卡，由 `evaluateFieldCondition` 按 `MAX_CONDITION_DEPTH` 降级处理。
+*/
+const fieldCondition = z.lazy(() => z.union([
+	z.object({
+		field: z.string(),
+		equals: z.union([
+			z.string(),
+			z.number(),
+			z.boolean()
+		])
+	}),
+	z.object({
+		field: z.string(),
+		in: z.array(z.union([z.string(), z.number()]))
+	}),
+	z.object({
+		field: z.string(),
+		notEmpty: z.literal(true)
+	}),
+	z.object({ allOf: z.array(fieldCondition).min(1) }),
+	z.object({ anyOf: z.array(fieldCondition).min(1) })
+]));
+/** 选项既可以写死，也可以声明成异步取值（取值通道属分册 24） */
+const fieldOptions = z.array(z.object({
+	label: z.string(),
+	value: z.union([z.string(), z.number()])
+}));
 /** Tabs 的面板与 Grid 的格子必须自成容器，否则「每容器至多一个表单」就没有落脚点 */
 const PANEL = ["Card", "Stack"];
 /**
@@ -634,13 +928,16 @@ const uiCatalog = defineUiCatalog({
 			group: "data",
 			description: "Tabular data with explicit columns. Prefer it over Markdown tables.",
 			props: z.object({
+				title: z.string().optional(),
 				columns: z.array(z.string()).min(1),
 				rows: z.array(z.array(z.union([
 					z.string(),
 					z.number(),
 					z.boolean(),
 					z.null()
-				])))
+				]))),
+				/** 列宽权重，长度需与 columns 一致；不一致时整项忽略而不拒绝渲染 */
+				columnWidths: z.array(z.number().positive()).optional()
 			}),
 			example: {
 				component: "Table",
@@ -738,7 +1035,7 @@ const uiCatalog = defineUiCatalog({
 				submitLabel: z.string().default("Submit"),
 				cancelLabel: z.string().optional()
 			}),
-			children: ["Field"],
+			children: ["Field", "FieldArray"],
 			singletonPerContainer: true,
 			constraints: ["At most one Form per container", "Every Field name must be unique inside the Form"],
 			example: {
@@ -770,17 +1067,22 @@ const uiCatalog = defineUiCatalog({
 					"select",
 					"multi-select",
 					"toggle",
-					"file"
+					"file",
+					"password"
 				]),
 				required: z.boolean().optional(),
 				description: z.string().optional(),
 				defaultValue: z.unknown().optional(),
-				options: z.array(z.object({
-					label: z.string(),
-					value: z.union([z.string(), z.number()])
-				})).optional()
+				options: fieldOptions.optional(),
+				/** 声明后选项由宕主异步提供；与写死的 options 互斥 */
+				optionsSource: z.string().optional(),
+				visibleWhen: fieldCondition.optional()
 			}),
-			constraints: ["select / multi-select must provide options"],
+			constraints: [
+				"select / multi-select must provide options or optionsSource",
+				"password values are never persisted, never echoed and never enter the user profile",
+				"visibleWhen may only reference fields declared in the same Form"
+			],
 			example: {
 				component: "Field",
 				props: {
@@ -791,6 +1093,37 @@ const uiCatalog = defineUiCatalog({
 				}
 			}
 		},
+		{
+			name: "FieldArray",
+			group: "input",
+			description: "A repeatable group of fields. Only valid inside a Form; children must be Field nodes.",
+			props: z.object({
+				name: z.string(),
+				label: z.string(),
+				minItems: z.number().int().min(0).optional(),
+				maxItems: z.number().int().min(1).optional(),
+				addLabel: z.string().optional(),
+				removeLabel: z.string().optional()
+			}),
+			children: ["Field"],
+			constraints: ["Only valid inside a Form", "Submitted as an array of objects keyed by the inner Field names"],
+			example: {
+				component: "FieldArray",
+				props: {
+					name: "recipients",
+					label: "Recipients",
+					minItems: 1
+				},
+				children: [{
+					component: "Field",
+					props: {
+						name: "email",
+						label: "Email",
+						type: "text"
+					}
+				}]
+			}
+		},
 		{
 			name: "Button",
 			group: "input",
@@ -935,7 +1268,7 @@ function a2uiComponentShapes(catalog) {
 			childList: def.children !== void 0,
 			...childrenDescription ? { childListDescription: childrenDescription } : {},
 			actionProps: keys.filter((key) => key === ACTION_PROP),
-			valueProps: def.group === "input" && keys.includes(NAME_PROP) ? [A2UI_VALUE_PROP] : [],
+			valueProps: def.group === "input" && def.children === void 0 && keys.includes(NAME_PROP) ? [A2UI_VALUE_PROP] : [],
 			...keys.includes(SUBMIT_LABEL_PROP) ? { submitLabelProp: SUBMIT_LABEL_PROP } : {},
 			...keys.includes(CANCEL_LABEL_PROP) ? { cancelLabelProp: CANCEL_LABEL_PROP } : {}
 		};
@@ -985,101 +1318,7 @@ function buildA2uiCatalogDefinition(catalog) {
 
 //#endregion
 //#region ../ui/dist/index.js
-/** 提交值按请求类型归形（WebFormBridge 与框架组件库共享单一来源） */
-function shapeInteractionValue(model, values) {
-	switch (model.kind) {
-		case "ask": return values["answer"];
-		case "confirm": return values["confirmed"] === true;
-		case "select": return values["selected"];
-		case "authorize": return true;
-		case "file-pick": return values["file"];
-		case "form": return values;
-	}
-}
-/** 五类 InteractionRequest → 统一中间模型（框架无关） */
-function interactionToFormModel(request) {
-	switch (request.type) {
-		case "ask": return {
-			kind: "ask",
-			message: request.message,
-			controls: [{
-				name: "answer",
-				label: request.message,
-				control: "text",
-				required: true,
-				...request.suggestion ? { suggestion: request.suggestion } : {}
-			}],
-			submitLabel: "Submit",
-			cancelLabel: "Cancel"
-		};
-		case "confirm": return {
-			kind: "confirm",
-			message: request.message,
-			controls: [{
-				name: "confirmed",
-				label: request.message,
-				control: "boolean",
-				defaultValue: request.defaultValue ?? true
-			}],
-			submitLabel: "Confirm",
-			cancelLabel: "Cancel"
-		};
-		case "form": return {
-			kind: "form",
-			...request.title ? { title: request.title } : {},
-			controls: request.fields.map((f) => ({
-				name: f.name,
-				label: f.label,
-				control: f.type,
-				...f.required ? { required: true } : {},
-				...f.description ? { description: f.description } : {},
-				...f.defaultValue !== void 0 ? { defaultValue: f.defaultValue } : {},
-				...f.suggestion ? { suggestion: f.suggestion } : {},
-				...f.options ? { options: f.options } : {}
-			})),
-			submitLabel: "Submit",
-			cancelLabel: "Cancel"
-		};
-		case "select": return {
-			kind: "select",
-			message: request.message,
-			controls: [{
-				name: "selected",
-				label: request.message,
-				control: "select",
-				required: true,
-				options: request.options,
-				...request.suggestion ? { suggestion: request.suggestion } : {}
-			}],
-			submitLabel: "Select",
-			cancelLabel: "Cancel"
-		};
-		case "authorize": return {
-			kind: "authorize",
-			title: "Authorization required",
-			message: request.message,
-			controls: [],
-			submitLabel: "Allow",
-			cancelLabel: "Deny"
-		};
-		case "file-pick": return {
-			kind: "file-pick",
-			title: "File requested",
-			message: request.message,
-			controls: [{
-				name: "file",
-				label: request.field ?? "file",
-				control: "file",
-				required: true,
-				...request.accept ? { accept: request.accept } : {},
-				...request.multiple ? { multiple: true } : {}
-			}],
-			submitLabel: "Choose file",
-			cancelLabel: "Decline"
-		};
-	}
-}
-const isEmpty = (v) => v === void 0 || v === "";
+const isEmpty$1 = (v) => v === void 0 || v === "";
 /**
 * 控件名 → 属性选择器：优先 CSS.escape（标识符形式，免引号转义）；
 * 无 CSS.escape 的环境退化为引号包裹 + 转义反斜杠/双引号（防选择器注入崩溃）
@@ -1118,7 +1357,7 @@ function collectValues(controls, container) {
 			value = raw === "" ? void 0 : raw;
 		}
 		values[control.name] = value;
-		if (control.required && isEmpty(value)) missingRequired.push(control.name);
+		if (control.required && isEmpty$1(value)) missingRequired.push(control.name);
 	}
 	return {
 		values,
@@ -1489,17 +1728,21 @@ var WebFormBridge = class {
 	#doc;
 	#styles;
 	#progressEl;
+	#texts;
+	#interactionTexts;
 	/** 等待中的 request 取消句柄（id → 触发 cancelled 并卸载 DOM） */
 	#pending = /* @__PURE__ */ new Map();
 	constructor(options) {
 		this.#mount = options.mount;
 		this.#doc = options.document ?? options.mount.ownerDocument;
 		this.#styles = options.styles ?? true;
+		this.#interactionTexts = options.texts;
+		this.#texts = resolveSurfaceFormTexts(options.texts);
 	}
 	request(input) {
 		if (this.#styles) ensureStyles(this.#doc);
 		this.#clearProgress();
-		const model = interactionToFormModel(input);
+		const model = interactionToFormModel(input, this.#interactionTexts);
 		const { form, cleanup } = this.#renderForm(model);
 		return new Promise((resolve) => {
 			const cancel = () => {
@@ -1655,7 +1898,7 @@ var WebFormBridge = class {
 		error.className = "webskill-form__error";
 		error.id = errorId;
 		error.setAttribute("role", "alert");
-		error.textContent = "This field is required";
+		error.textContent = this.#texts.required;
 		wrapper.appendChild(error);
 		return wrapper;
 	}
@@ -1758,6 +2001,142 @@ function collectScopedValues(values, scope) {
 	}
 	return out;
 }
+/**
+* 条件树的语义深度上限。
+* `MAX_JSON_DEPTH` 管的是 props 的 JSON 深度，管不到这里——超它之前就能先把栈打爆。
+*/
+const MAX_CONDITION_DEPTH = 8;
+const isRecord$1 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isEmpty = (value) => value === void 0 || value === null || value === "" || Array.isArray(value) && value.length === 0;
+function invalid(path, detail) {
+	return {
+		visible: true,
+		degraded: {
+			path,
+			kind: "condition-invalid",
+			detail
+		}
+	};
+}
+function evaluate(condition, context, depth) {
+	if (depth > 8) return invalid(context.path, `Condition nesting exceeds 8 levels.`);
+	if (!isRecord$1(condition)) return invalid(context.path, "Condition must be an object.");
+	if (Array.isArray(condition["allOf"]) || Array.isArray(condition["anyOf"])) {
+		const isAll = Array.isArray(condition["allOf"]);
+		const branches = isAll ? condition["allOf"] : condition["anyOf"];
+		if (branches.length === 0) return invalid(context.path, `"${isAll ? "allOf" : "anyOf"}" must not be empty.`);
+		let visible = isAll;
+		for (const branch of branches) {
+			const result = evaluate(branch, context, depth + 1);
+			if (result.degraded) return result;
+			visible = isAll ? visible && result.visible : visible || result.visible;
+		}
+		return { visible };
+	}
+	const field = condition["field"];
+	if (typeof field !== "string" || field === "") return invalid(context.path, "Condition needs a \"field\" name.");
+	const value = context.resolve(field);
+	if ("equals" in condition) {
+		const expected = condition["equals"];
+		if (typeof expected !== "string" && typeof expected !== "number" && typeof expected !== "boolean") return invalid(context.path, "\"equals\" must be a string, number or boolean.");
+		return { visible: value === expected };
+	}
+	if ("in" in condition) {
+		const options = condition["in"];
+		if (!Array.isArray(options)) return invalid(context.path, "\"in\" must be an array.");
+		return { visible: options.some((option) => option === value) };
+	}
+	if ("notEmpty" in condition) {
+		if (condition["notEmpty"] !== true) return invalid(context.path, "\"notEmpty\" must be true.");
+		return { visible: !isEmpty(value) };
+	}
+	return invalid(context.path, "Condition has no recognised operator (equals / in / notEmpty / allOf / anyOf).");
+}
+/**
+* 全仓唯一的条件求值实现（AC-23.4）。纯函数、无 React 依赖——
+* `useSurfaceForm` 在 ui-react 且是 hook，ui-vue 用不了它。
+*/
+function evaluateFieldCondition(condition, values, options = {}) {
+	const resolveField = options.resolveField;
+	return evaluate(condition, {
+		values,
+		resolve: (field) => values[resolveField ? resolveField(field) : field],
+		path: options.path ?? "visibleWhen"
+	}, 1);
+}
+/**
+* 生成式表格的列模型（分册 15-03 定义 `priority`，分册 25 在同一结构上追加 `weight`）。
+*
+* 四个渲染档共用这一份：native / json-render / OpenUI 走 TS，a2ui 是 Lit，
+* 后者读不到 TS 常量，所以最小列宽以 **CSS 变量**交付，两侧引用同一个名字。
+*/
+/** 最小列宽的分档取值。`desktop` 沿用历史值，改它会动所有既有表格的视觉基线 */
+const SPEC_TABLE_MIN_COLUMN_WIDTH = {
+	desktop: "8rem",
+	mobile: "5rem"
+};
+/** CSS 侧的引用名：`surfaces.css` 与 a2ui 的 Lit 样式都只写这个变量，不写字面量 */
+const SPEC_TABLE_MIN_COLUMN_VAR = "--webskill-table-min-col";
+/**
+* 校验并归一化 `columnWidths`。
+*
+* **整项忽略**是刻意的：部分采纳（例如只丢掉那个负数）会让模型拿到一个
+* 「看起来生效了」的结果，更难发现自己写错了（FR-25.3）。
+*/
+function normalizeColumnWidths(raw, columnCount) {
+	const equal = () => Array.from({ length: columnCount }, () => 1);
+	if (raw === void 0) return { weights: equal() };
+	if (raw.length !== columnCount) return {
+		weights: equal(),
+		rejected: "length-mismatch"
+	};
+	if (raw.some((value) => typeof value !== "number" || !Number.isFinite(value))) return {
+		weights: equal(),
+		rejected: "non-finite"
+	};
+	if (raw.some((value) => value < 0)) return {
+		weights: equal(),
+		rejected: "negative"
+	};
+	if (raw.every((value) => value === 0)) return {
+		weights: equal(),
+		rejected: "all-zero"
+	};
+	return { weights: [...raw] };
+}
+/**
+* 按权重分配列宽，且每列不低于 `minWidth`。
+*
+* 朴素实现（按权重算一遍、低于下限的抬到下限）会让总宽超出容器，
+* 白白产生本可避免的横滚。这里迭代到不动点：每轮把触底的列钉住，
+* 剩余空间在剩余列间按权重重新分配（FR-25.2）。
+*
+* 容器本身放不下 `columnCount * minWidth` 时无解——此时全部取下限并返回，
+* 由调用方决定横滚（AC-25.4）。
+*/
+function resolveColumnWidths(weights, available, minWidth) {
+	const count = weights.length;
+	if (count === 0) return [];
+	if (available <= count * minWidth) return Array.from({ length: count }, () => minWidth);
+	const result = Array.from({ length: count }, () => 0);
+	const pinned = new Array(count).fill(false);
+	for (let round = 0; round <= count; round += 1) {
+		const freeIndexes = result.map((_, index) => index).filter((index) => !pinned[index]);
+		const remaining = available - result.reduce((sum, value, index) => pinned[index] ? sum + value : sum, 0);
+		const weightTotal = freeIndexes.reduce((sum, index) => sum + (weights[index] ?? 0), 0);
+		let changed = false;
+		for (const index of freeIndexes) {
+			const share = weightTotal > 0 ? remaining * (weights[index] ?? 0) / weightTotal : remaining / freeIndexes.length;
+			if (share < minWidth) {
+				result[index] = minWidth;
+				pinned[index] = true;
+				changed = true;
+			} else result[index] = share;
+		}
+		if (!changed) break;
+	}
+	return result;
+}
 /** 五类场景预设（FR-6.4）。@experimental */
 const UI_PRESETS = [
 	{
@@ -2044,14 +2423,15 @@ function toJsonRenderSpec(spec) {
 		elements
 	};
 }
-/** ControlModel 的控件词汇 → catalog `Field.type`（catalog 的 8 种是超集） */
+/** ControlModel 的控件词汇 → catalog `Field.type`（catalog 的 9 种是超集） */
 const FIELD_TYPE = {
 	text: "text",
 	number: "number",
 	boolean: "toggle",
 	select: "select",
 	textarea: "textarea",
-	file: "file"
+	file: "file",
+	password: "password"
 };
 function toOptions(options) {
 	return (options ?? []).map((option) => ({
@@ -2491,7 +2871,7 @@ function fromA2uiSpecAction(event) {
 */
 async function loadWebSkillLitCatalog() {
 	try {
-		const { webskillLitCatalog } = await import("./webskillLitCatalog-_mugzRHx-B_54vxum.js");
+		const { webskillLitCatalog } = await import("./webskillLitCatalog-DwTwSBFt-DiXXpNZA.js");
 		return webskillLitCatalog();
 	} catch (cause) {
 		throw new WebSkillError("UI_UNAVAILABLE", "The WebSkill A2UI catalog is unavailable; install @a2ui/lit, @a2ui/web_core and lit to render catalog surfaces with A2UI", cause);
@@ -2516,4 +2896,4 @@ async function loadOpenUiPeers() {
 }
 
 //#endregion
-export { defineUiCatalog as $, loadOpenUiPeers as A, toOpenUiSpecLang as B, ensureStyles as C, fromVercelToolResult as D, fromUiSurfaceActionDispatch as E, renderRenderResult as F, A2UI_COMMON_TYPES as G, toVercelToolInvocation as H, shapeInteractionValue as I, WEBSKILL_A2UI_CATALOG_ID as J, UI_CATALOG_GROUPS as K, toA2uiSpecMessages as L, qualifyFieldName as M, renderBlocks as N, interactionToFormModel as O, renderMiniChart as P, chartSpecFromProps as Q, toA2uiSurfaceAction as R, createUiCatalogToolSource as S, fromA2uiSurfaceAction as T, uiPreset as U, toUiSurfaceActionDispatch as V, A2UI_CHILDREN_PROP as W, a2uiComponentShapes as X, a2uiComponentSchema as Y, buildA2uiCatalogDefinition as Z, chartToTable as _, A2UI_VERSION as a, collectSpecActions as b, RENDER_UI_TOOL as c, VERCEL_INTERACTION_TOOL_NAME as d, mountEchart as et, VercelUiBridge as f, applySuggestion as g, WebFormBridge as h, A2UI_SURFACE_ACTION as i, loadWebSkillLitCatalog as j, interactionToUiSpec as k, UI_PRESETS as l, WEBSKILL_SURFACE_ACTION as m, A2UI_SPEC_ACTION as n, uiCatalog as nt, CHART_PALETTE as o, WEBSKILL_STYLES_CSS as p, UI_CATALOG_PROMPT_BUDGET_BYTES as q, A2UI_SPEC_FORM_PATH as r, DESCRIBE_UI_PRESET_TOOL as s, A2UI_BASIC_CATALOG_ID as t, renderMiniMarkdown as tt, UI_PRESET_NAMES as u, collectFormScopes as v, fromA2uiSpecAction as w, collectValues as x, collectScopedValues as y, toJsonRenderSpec as z };
+export { UI_CATALOG_PROMPT_BUDGET_BYTES as $, fromUiSurfaceActionDispatch as A, resolveColumnWidths as B, collectSpecActions as C, evaluateFieldCondition as D, ensureStyles as E, normalizeColumnWidths as F, toUiSurfaceActionDispatch as G, toA2uiSurfaceAction as H, qualifyFieldName as I, A2UI_CHILDREN_PROP as J, toVercelToolInvocation as K, renderBlocks as L, interactionToUiSpec as M, loadOpenUiPeers as N, fromA2uiSpecAction as O, loadWebSkillLitCatalog as P, UI_CATALOG_GROUPS as Q, renderMiniChart as R, collectScopedValues as S, createUiCatalogToolSource as T, toJsonRenderSpec as U, toA2uiSpecMessages as V, toOpenUiSpecLang as W, DEFAULT_INTERACTION_TEXTS as X, A2UI_COMMON_TYPES as Y, DEFAULT_SURFACE_FORM_TEXTS as Z, WEBSKILL_SURFACE_ACTION as _, A2UI_VERSION as a, defineUiCatalog as at, chartToTable as b, MAX_CONDITION_DEPTH as c, renderMiniMarkdown as ct, SPEC_TABLE_MIN_COLUMN_WIDTH as d, shapeInteractionValue as dt, WEBSKILL_A2UI_CATALOG_ID as et, UI_PRESETS as f, uiCatalog as ft, WEBSKILL_STYLES_CSS as g, VercelUiBridge as h, A2UI_SURFACE_ACTION as i, chartSpecFromProps as it, fromVercelToolResult as j, fromA2uiSurfaceAction as k, RENDER_UI_TOOL as l, resolveInteractionTexts as lt, VERCEL_INTERACTION_TOOL_NAME as m, A2UI_SPEC_ACTION as n, a2uiComponentShapes as nt, CHART_PALETTE as o, interactionToFormModel as ot, UI_PRESET_NAMES as p, uiPreset as q, A2UI_SPEC_FORM_PATH as r, buildA2uiCatalogDefinition as rt, DESCRIBE_UI_PRESET_TOOL as s, mountEchart as st, A2UI_BASIC_CATALOG_ID as t, a2uiComponentSchema as tt, SPEC_TABLE_MIN_COLUMN_VAR as u, resolveSurfaceFormTexts as ut, WebFormBridge as v, collectValues as w, collectFormScopes as x, applySuggestion as y, renderRenderResult as z };