mulmoclaude 2.7.0 → 2.8.1

package/server/index.ts

@@ -55,6 +55,7 @@ import "./plugins/markdown-builtin.js";
 // Side-effect: registers the built-in "html" dispatch handler so the
 // presentHtml View's useRuntime().dispatch({ kind }) resolves (phase 2).
 import "./plugins/html-builtin.js";
+import "./plugins/spreadsheet-builtin.js";
 // Side-effect: registers the built-in "shapescript" dispatch handler so the
 // presentShapeScript View's useRuntime().dispatch({ kind }) resolves — the
 // source editor's load / save against artifacts/shapes/.

package/server/plugins/confined-file-ops.ts

@@ -0,0 +1,136 @@
+// Scoped FileOps: a lexical check on the plugin-supplied path, then a realpath check so a
+// symlink inside the scope root cannot lead out of it. Check-then-use, like `resolveWithinRoot`: not atomic
+// against a path swapped between the check and the call (Node fs has no openat / no-follow-parent).
+
+import path from "node:path";
+import { mkdir, readFile, readdir, realpath, stat as fsStat, unlink as fsUnlink } from "node:fs/promises";
+import type { FileOps } from "gui-chat-protocol";
+import { writeFileAtomic } from "../utils/files/atomic.js";
+import { isEnoent, resolveWriteWithinRoot } from "../utils/files/safe.js";
+import { ensureInsideBase } from "./runtime-loader.js";
+
+// ─────────────────────────────────────────────────────────────────────
+// Path normalisation contract (see plans/done/feat-plugin-runtime-extensions-1110.md)
+//
+//   1. Replace `\` with `/` (Windows path.join leak repair).
+//   2. `path.posix.normalize` (folds `..`, `.`, `//`).
+//   3. Reject if the normalised form starts with `..` or `/`
+//      (would escape the scope root or be absolute).
+//   4. `path.join(scopeRoot, ...segments)` — platform-aware join so
+//      the returned absolute path uses the host OS separator
+//      (backslashes on Windows, forward slashes on POSIX). Critical
+//      for `ensureInsideBase` to accept the result.
+//
+// Plugin authors should never need `node:path`; the platform meets
+// them where they are even if they mis-import it on Windows.
+// ─────────────────────────────────────────────────────────────────────
+
+/** Resolve a plugin-supplied path to an absolute path inside the
+ *  plugin's scope root. Throws on traversal. Lexical only — symlinks
+ *  are checked by the FileOps below. Exported for tests. */
+export function normalizePluginPath(scopeRoot: string, rel: string): string {
+  const slashed = rel.replace(/\\/g, "/");
+  const normalised = path.posix.normalize(slashed);
+  // `path.posix.normalize` produces `..` alone if the input is `..` itself, hence the equality branch.
+  if (normalised === ".." || normalised.startsWith("../") || normalised.startsWith("/")) {
+    throw new Error(`path escapes plugin scope: ${rel}`);
+  }
+  const segments = normalised === "." ? [] : normalised.split("/");
+  const absolute = path.join(scopeRoot, ...segments);
+  // Defence in depth so a future change to the lexical step cannot silently regress.
+  if (!ensureInsideBase(absolute, scopeRoot)) {
+    throw new Error(`path escapes plugin scope: ${rel}`);
+  }
+  return absolute;
+}
+
+/** The lexically checked path, relative to the scope root in host-native form ("" for the root). */
+const scopeRelative = (scopeRoot: string, rel: string): string => path.relative(scopeRoot, normalizePluginPath(scopeRoot, rel));
+
+/** An escape reads as a missing file, so callers that treat ENOENT as "not there" stay closed. */
+const notInScope = (rel: string): Error & { code: string } => Object.assign(new Error(`not inside the scope: ${rel}`), { code: "ENOENT" });
+
+/** Only a missing path reads as null; EACCES, ELOOP, ENOTDIR … propagate as before. */
+const realpathIfPresent = async (absPath: string): Promise<string | null> => {
+  try {
+    return await realpath(absPath);
+  } catch (err) {
+    if (isEnoent(err)) return null;
+    throw err;
+  }
+};
+
+const isWithin = (rootReal: string, candidateReal: string): boolean => candidateReal === rootReal || candidateReal.startsWith(rootReal + path.sep);
+
+/** Real location of `relative` (host-native, from `scopeRelative`) if it exists inside the root; null when missing or outside. */
+const resolveExisting = async (rootReal: string, relative: string): Promise<string | null> => {
+  const candidateReal = await realpathIfPresent(path.resolve(rootReal, relative));
+  return candidateReal !== null && isWithin(rootReal, candidateReal) ? candidateReal : null;
+};
+
+// Only a write creates the scope root; a read-only call against an absent root sees "missing".
+const realRoot = async (scopeRoot: string): Promise<string> => {
+  await mkdir(scopeRoot, { recursive: true });
+  return realpath(scopeRoot);
+};
+
+const existingPath = async (scopeRoot: string, rel: string): Promise<string | null> => {
+  const relative = scopeRelative(scopeRoot, rel);
+  const rootReal = await realpathIfPresent(scopeRoot);
+  return rootReal === null ? null : resolveExisting(rootReal, relative);
+};
+
+const requireExisting = async (scopeRoot: string, rel: string): Promise<string> => {
+  const resolved = await existingPath(scopeRoot, rel);
+  if (resolved === null) throw notInScope(rel);
+  return resolved;
+};
+
+const writeTarget = async (scopeRoot: string, rel: string): Promise<string> => {
+  const target = await resolveWriteWithinRoot(await realRoot(scopeRoot), scopeRelative(scopeRoot, rel));
+  if (target === null) throw new Error(`refusing to write outside the scope: ${rel}`);
+  return target;
+};
+
+// unlink does not follow the leaf, so only the parent is confined: a link is removed, never its target.
+const unlinkTarget = async (scopeRoot: string, rel: string): Promise<string | null> => {
+  const relative = scopeRelative(scopeRoot, rel);
+  const rootReal = await realpathIfPresent(scopeRoot);
+  if (rootReal === null) return null;
+  if (relative === "") return rootReal;
+  const parentReal = await resolveExisting(rootReal, path.dirname(relative));
+  return parentReal === null ? null : path.join(parentReal, path.basename(relative));
+};
+
+const ignoreEnoent = async <T>(operation: () => Promise<T>, fallback: T): Promise<T> => {
+  try {
+    return await operation();
+  } catch (err) {
+    if (isEnoent(err)) return fallback;
+    throw err;
+  }
+};
+
+export function makeConfinedFileOps(scopeRoot: string): FileOps {
+  return {
+    read: async (rel) => readFile(await requireExisting(scopeRoot, rel), "utf-8"),
+    readBytes: async (rel) => {
+      const buf = await readFile(await requireExisting(scopeRoot, rel));
+      return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
+    },
+    write: async (rel, content) => writeFileAtomic(await writeTarget(scopeRoot, rel), content),
+    readDir: async (rel) => {
+      const resolved = await existingPath(scopeRoot, rel);
+      return resolved === null ? [] : ignoreEnoent(() => readdir(resolved), []);
+    },
+    stat: async (rel) => {
+      const { mtimeMs, size } = await fsStat(await requireExisting(scopeRoot, rel));
+      return { mtimeMs, size };
+    },
+    exists: async (rel) => (await existingPath(scopeRoot, rel)) !== null,
+    unlink: async (rel) => {
+      const target = await unlinkTarget(scopeRoot, rel);
+      if (target !== null) await ignoreEnoent(() => fsUnlink(target), undefined);
+    },
+  };
+}

package/server/plugins/runtime.ts

@@ -3,25 +3,23 @@
 //
 // Every helper closes over `pkgName` so a plugin's pubsub channel,
 // data dir, log prefix etc. cannot leak across plugins. Path arguments
-// to `files.{data,config}` are normalised to POSIX, then anchored
-// inside the plugin's scope root via `ensureInsideBase` — so misuse of
-// `node:path` on Windows still works and `"../../etc/passwd"` is
-// rejected.
+// to `files.{data,config,artifacts}` are confined to their scope root
+// by `makeConfinedFileOps` — lexically, then by realpath, so neither
+// `"../../etc/passwd"` nor a symlink inside the root leads out.
 //
 // This module is server-side only. The browser-side counterpart lives
 // at `src/utils/plugin/runtime.ts`.
 
 import path from "node:path";
-import { readFile, readdir, stat as fsStat, unlink as fsUnlink } from "node:fs/promises";
 import { randomUUID } from "node:crypto";
 import type { FileOps, PluginFetchJsonOptions, PluginFetchOptions, PluginRuntime } from "gui-chat-protocol";
 
 import { WORKSPACE_PATHS, workspacePath } from "../workspace/paths.js";
 import { writeFileAtomic } from "../utils/files/atomic.js";
 import { errorMessage } from "../utils/errors.js";
-import { isErrorWithCode, isRecord } from "../utils/types.js";
+import { isRecord } from "../utils/types.js";
 import { log as hostLog, type Logger } from "../system/logger/index.js";
-import { ensureInsideBase } from "./runtime-loader.js";
+import { makeConfinedFileOps } from "./confined-file-ops.js";
 import { ONE_SECOND_MS } from "../utils/time.js";
 import type { IPubSub } from "../events/pub-sub/index.js";
 import * as notifierEngine from "../notifier/engine.js";
@@ -35,59 +33,6 @@ import { BUILTIN_ROLE_IDS } from "../../src/config/roles.js";
 
 const DEFAULT_FETCH_TIMEOUT_MS = 10 * ONE_SECOND_MS;
 
-// ─────────────────────────────────────────────────────────────────────
-// Path normalisation contract (see plans/done/feat-plugin-runtime-extensions-1110.md)
-//
-//   1. Replace `\` with `/` (Windows path.join leak repair).
-//   2. `path.posix.normalize` (folds `..`, `.`, `//`).
-//   3. Reject if the normalised form starts with `..` or `/`
-//      (would escape the scope root or be absolute).
-//   4. `path.join(scopeRoot, ...segments)` — platform-aware join so
-//      the returned absolute path uses the host OS separator
-//      (backslashes on Windows, forward slashes on POSIX). Critical
-//      for `ensureInsideBase` to accept the result.
-//
-// Plugin authors should never need `node:path`; the platform meets
-// them where they are even if they mis-import it on Windows.
-// ─────────────────────────────────────────────────────────────────────
-
-/** Resolve a plugin-supplied path to an absolute path inside the
- *  plugin's scope root. Throws on traversal. Exported for tests.
- *
- *  Cross-platform: `scopeRoot` is the host OS's native form (drive
- *  letter + backslashes on Windows, forward slashes on POSIX). The
- *  user-supplied `rel` is POSIX-relative by contract; we sanitise
- *  for the lexical traversal check via `path.posix.*`, then join
- *  with `path.join` so the returned absolute path is in the host's
- *  native form (which `ensureInsideBase` requires). */
-export function normalizePluginPath(scopeRoot: string, rel: string): string {
-  // Defang Windows path.join output and any mixed-separator inputs.
-  const slashed = rel.replace(/\\/g, "/");
-  // Fold `..` / `.` / repeated `/` lexically (no fs touch yet).
-  const normalised = path.posix.normalize(slashed);
-  // Reject lexically — anything that escapes the scope root after
-  // normalisation either starts with `..` (parent-traversal) or is
-  // absolute (`/etc/passwd`). `path.posix.normalize` produces `..`
-  // alone if the input is `..` itself, hence the equality branch.
-  if (normalised === ".." || normalised.startsWith("../") || normalised.startsWith("/")) {
-    throw new Error(`path escapes plugin scope: ${rel}`);
-  }
-  const segments = normalised === "." ? [] : normalised.split("/");
-  // `path.join` (platform-aware) so the result uses the host
-  // separator. On Windows that's backslashes; on POSIX, forward
-  // slashes — matching `scopeRoot`'s existing form so
-  // `ensureInsideBase`'s `path.resolve` + `path.sep` comparison
-  // works across both platforms.
-  const absolute = path.join(scopeRoot, ...segments);
-  // Defence in depth: even though the lexical check above should
-  // catch every escape, run `ensureInsideBase` so a future change to
-  // either step doesn't silently regress the safety guarantee.
-  if (!ensureInsideBase(absolute, scopeRoot)) {
-    throw new Error(`path escapes plugin scope: ${rel}`);
-  }
-  return absolute;
-}
-
 // ─────────────────────────────────────────────────────────────────────
 // Scoped FileOps factory
 // ─────────────────────────────────────────────────────────────────────
@@ -99,59 +44,7 @@ export function normalizePluginPath(scopeRoot: string, rel: string): string {
  *  category subdir (`charts/`, …) and all write logic; the host only
  *  provides this generic primitive. */
 export function makeArtifactsFileOps(): FileOps {
-  return makeFileOps(path.join(workspacePath, "artifacts"));
-}
-
-function makeFileOps(scopeRoot: string): FileOps {
-  // The scope root may not exist on first use. Lazy-create at write
-  // time (writeFileAtomic does its own mkdir for the file's parent;
-  // we ensure the scope root exists for readDir() / stat() etc.).
-  // Reads against a never-written plugin throw ENOENT — exposed as
-  // `exists() === false` rather than handled here.
-
-  return {
-    async read(rel) {
-      return readFile(normalizePluginPath(scopeRoot, rel), "utf-8");
-    },
-    async readBytes(rel) {
-      const buf = await readFile(normalizePluginPath(scopeRoot, rel));
-      return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
-    },
-    async write(rel, content) {
-      const abs = normalizePluginPath(scopeRoot, rel);
-      await writeFileAtomic(abs, content);
-    },
-    async readDir(rel) {
-      const abs = normalizePluginPath(scopeRoot, rel);
-      try {
-        return await readdir(abs);
-      } catch (err) {
-        if (isErrorWithCode(err) && err.code === "ENOENT") return [];
-        throw err;
-      }
-    },
-    async stat(rel) {
-      const { mtimeMs, size } = await fsStat(normalizePluginPath(scopeRoot, rel));
-      return { mtimeMs, size };
-    },
-    async exists(rel) {
-      try {
-        await fsStat(normalizePluginPath(scopeRoot, rel));
-        return true;
-      } catch (err) {
-        if (isErrorWithCode(err) && err.code === "ENOENT") return false;
-        throw err;
-      }
-    },
-    async unlink(rel) {
-      try {
-        await fsUnlink(normalizePluginPath(scopeRoot, rel));
-      } catch (err) {
-        if (isErrorWithCode(err) && err.code === "ENOENT") return;
-        throw err;
-      }
-    },
-  };
+  return makeConfinedFileOps(path.join(workspacePath, "artifacts"));
 }
 
 // ─────────────────────────────────────────────────────────────────────
@@ -395,8 +288,8 @@ export function makePluginRuntime(deps: MakePluginRuntimeDeps): MulmoclaudeRunti
     pubsub: makeScopedPubSub(pkgName, pubsub),
     locale,
     files: {
-      data: makeFileOps(dataRoot),
-      config: makeFileOps(configRoot),
+      data: makeConfinedFileOps(dataRoot),
+      config: makeConfinedFileOps(configRoot),
       artifacts: makeArtifactsFileOps(),
     },
     log: makeScopedLogger(pkgName),

package/server/plugins/spreadsheet-builtin.ts

@@ -0,0 +1,26 @@
+// MulmoClaude's host wiring for the presentSpreadsheet View's dispatch channel.
+// The @gui-chat-plugin/spreadsheet View loads and saves its workbook through
+// `useRuntime().dispatch({ kind: "loadSpreadsheet" | "saveSpreadsheet", … })`;
+// this routes those calls to the package's `executeSpreadsheetDispatch` against
+// the workspace `artifacts/` (confined by realpath, so a symlink cannot lead out), then publishes a file-change event
+// after a save that wrote the file. Imported for side effect at boot (server/index.ts).
+
+import { executeSpreadsheetDispatch, isSpreadsheetDispatchArgs } from "@gui-chat-plugin/spreadsheet";
+import { makeArtifactsFileOps } from "./runtime.js";
+import { publishFileChange } from "../events/file-change.js";
+import { describeKind, registerBuiltinDispatch } from "./builtin-dispatch.js";
+import { wroteSpreadsheetFile } from "./spreadsheet-save-outcome.js";
+
+/** Matches `wrapWithScope("spreadsheet", …)` in `src/plugins/spreadsheet/index.ts`. */
+const SPREADSHEET_SCOPE = "spreadsheet";
+
+registerBuiltinDispatch(SPREADSHEET_SCOPE, async (args) => {
+  if (!isSpreadsheetDispatchArgs(args)) {
+    throw new Error(`spreadsheet plugin: unrecognised dispatch payload (kind=${describeKind(args)})`);
+  }
+  const result = await executeSpreadsheetDispatch(makeArtifactsFileOps(), args);
+  if (wroteSpreadsheetFile(args, result.data)) {
+    void publishFileChange(args.path);
+  }
+  return result;
+});

package/server/plugins/spreadsheet-save-outcome.ts

@@ -0,0 +1,7 @@
+// Whether a spreadsheet dispatch changed the file on disk, so the host should announce it.
+// A save refused for a conflict (the file moved on since the View's baseVersion) wrote nothing.
+
+import type { SpreadsheetDispatchArgs, SpreadsheetFileData } from "@gui-chat-plugin/spreadsheet";
+
+export const wroteSpreadsheetFile = (args: SpreadsheetDispatchArgs, data: SpreadsheetFileData | undefined): boolean =>
+  args.kind === "saveSpreadsheet" && data !== undefined && data.conflict !== true;

package/server/utils/files/store-resolvers.ts

@@ -1,5 +1,5 @@
 // Shared resolver factory for file-store modules (attachment-store,
-// image-store, spreadsheet-store). Each store used to define its own
+// image-store). Each store used to define its own
 // `safeResolve(relativePath)` wrapper of identical shape: ensure the
 // root dir exists, cache its realpath, strip the leading store
 // prefix, hand off to `resolveWithinRoot`. That left three name-cloned

package/src/lang/de.ts

@@ -1099,26 +1099,6 @@ const deMessages = {
   pluginSkill: {
     noDescription: "(keine Beschreibung)",
   },
-  pluginSpreadsheet: {
-    previewUntitled: "Tabelle",
-    previewSheets: "{count} Blatt | {count} Blätter",
-    untitled: "Tabelle",
-    excel: "Excel",
-    valuePlaceholder: "Wert",
-    valueOrFormulaPlaceholder: "Wert oder Formel (z. B. 100 oder SUM(B2:B11))",
-    formatPlaceholder: "Format (z. B. $#,##0.00)",
-    loading: "Tabelle wird geladen...",
-    noData: "Keine Tabellendaten verfügbar",
-    editData: "Tabellendaten bearbeiten",
-    applyChanges: "Änderungen übernehmen",
-    dataMustBeArray: "Daten müssen ein Array von Blättern sein",
-    loadFailed: "Laden der Tabelle fehlgeschlagen: {error}",
-    invalidJsonAlert: "Ungültiges JSON-Format: {error}",
-    unknownError: "Unbekannter Fehler",
-    update: "Aktualisieren",
-    stringType: "Zeichenkette",
-    formulaType: "Formel",
-  },
   app: {
     startConversation: "Gespräch beginnen",
     thinking: "Denkt nach…",

package/src/lang/en.ts

@@ -1109,26 +1109,6 @@ const enMessages = {
   pluginSkill: {
     noDescription: "(no description)",
   },
-  pluginSpreadsheet: {
-    previewUntitled: "Spreadsheet",
-    previewSheets: "{count} sheet | {count} sheets",
-    untitled: "Spreadsheet",
-    excel: "Excel",
-    valuePlaceholder: "Value",
-    valueOrFormulaPlaceholder: "Value or Formula (e.g., 100 or SUM(B2:B11))",
-    formatPlaceholder: "Format (e.g., $#,##0.00)",
-    loading: "Loading spreadsheet...",
-    noData: "No spreadsheet data available",
-    editData: "Edit Spreadsheet Data",
-    applyChanges: "Apply Changes",
-    dataMustBeArray: "Data must be an array of sheets",
-    loadFailed: "Failed to load spreadsheet: {error}",
-    invalidJsonAlert: "Invalid JSON format: {error}",
-    unknownError: "Unknown error",
-    update: "Update",
-    stringType: "String",
-    formulaType: "Formula",
-  },
   app: {
     startConversation: "Start a conversation",
     thinking: "Thinking…",

package/src/lang/es.ts

@@ -1097,26 +1097,6 @@ const esMessages = {
   pluginSkill: {
     noDescription: "(sin descripción)",
   },
-  pluginSpreadsheet: {
-    previewUntitled: "Hoja de cálculo",
-    previewSheets: "{count} hoja | {count} hojas",
-    untitled: "Hoja de cálculo",
-    excel: "Excel",
-    valuePlaceholder: "Valor",
-    valueOrFormulaPlaceholder: "Valor o Fórmula (ej. 100 o SUM(B2:B11))",
-    formatPlaceholder: "Formato (ej. $#,##0.00)",
-    loading: "Cargando la hoja de cálculo...",
-    noData: "No hay datos de hoja de cálculo disponibles",
-    editData: "Editar datos de la hoja de cálculo",
-    applyChanges: "Aplicar cambios",
-    dataMustBeArray: "Los datos deben ser una matriz de hojas",
-    loadFailed: "Error al cargar la hoja de cálculo: {error}",
-    invalidJsonAlert: "Formato JSON no válido: {error}",
-    unknownError: "Error desconocido",
-    update: "Actualizar",
-    stringType: "Texto",
-    formulaType: "Fórmula",
-  },
   app: {
     startConversation: "Inicia una conversación",
     thinking: "Pensando…",

package/src/lang/fr.ts

@@ -1089,26 +1089,6 @@ const frMessages = {
   pluginSkill: {
     noDescription: "(aucune description)",
   },
-  pluginSpreadsheet: {
-    previewUntitled: "Tableur",
-    previewSheets: "{count} feuille | {count} feuilles",
-    untitled: "Tableur",
-    excel: "Excel",
-    valuePlaceholder: "Valeur",
-    valueOrFormulaPlaceholder: "Valeur ou formule (ex. 100 ou SUM(B2:B11))",
-    formatPlaceholder: "Format (ex. $#,##0.00)",
-    loading: "Chargement du tableur...",
-    noData: "Aucune donnée de tableur disponible",
-    editData: "Modifier les données du tableur",
-    applyChanges: "Appliquer les modifications",
-    dataMustBeArray: "Les données doivent être un tableau de feuilles",
-    loadFailed: "Échec du chargement du tableur : {error}",
-    invalidJsonAlert: "Format JSON non valide : {error}",
-    unknownError: "Erreur inconnue",
-    update: "Mettre à jour",
-    stringType: "Texte",
-    formulaType: "Formule",
-  },
   app: {
     startConversation: "Démarrer une conversation",
     thinking: "Réflexion…",

package/src/lang/ja.ts

@@ -1083,26 +1083,6 @@ const jaMessages = {
   pluginSkill: {
     noDescription: "(説明なし)",
   },
-  pluginSpreadsheet: {
-    previewUntitled: "スプレッドシート",
-    previewSheets: "{count} シート",
-    untitled: "スプレッドシート",
-    excel: "Excel",
-    valuePlaceholder: "値",
-    valueOrFormulaPlaceholder: "値または数式（例: 100, SUM(B2:B11)）",
-    formatPlaceholder: "書式（例: $#,##0.00）",
-    loading: "スプレッドシート読み込み中...",
-    noData: "スプレッドシートのデータがありません",
-    editData: "スプレッドシートデータを編集",
-    applyChanges: "変更を適用",
-    dataMustBeArray: "データはシートの配列である必要があります",
-    loadFailed: "スプレッドシートの読み込みに失敗: {error}",
-    invalidJsonAlert: "不正な JSON 形式です: {error}",
-    unknownError: "不明なエラー",
-    update: "更新",
-    stringType: "文字列",
-    formulaType: "数式",
-  },
   app: {
     startConversation: "会話を開始してください",
     thinking: "考え中…",

package/src/lang/ko.ts

@@ -1081,26 +1081,6 @@ const koMessages = {
   pluginSkill: {
     noDescription: "(설명 없음)",
   },
-  pluginSpreadsheet: {
-    previewUntitled: "스프레드시트",
-    previewSheets: "{count}개 시트",
-    untitled: "스프레드시트",
-    excel: "Excel",
-    valuePlaceholder: "값",
-    valueOrFormulaPlaceholder: "값 또는 수식 (예: 100 또는 SUM(B2:B11))",
-    formatPlaceholder: "형식 (예: $#,##0.00)",
-    loading: "스프레드시트를 불러오는 중...",
-    noData: "사용 가능한 스프레드시트 데이터가 없습니다",
-    editData: "스프레드시트 데이터 편집",
-    applyChanges: "변경 사항 적용",
-    dataMustBeArray: "데이터는 시트 배열이어야 합니다",
-    loadFailed: "스프레드시트 불러오기 실패: {error}",
-    invalidJsonAlert: "잘못된 JSON 형식: {error}",
-    unknownError: "알 수 없는 오류",
-    update: "업데이트",
-    stringType: "문자열",
-    formulaType: "수식",
-  },
   app: {
     startConversation: "대화 시작",
     thinking: "생각 중…",

package/src/lang/pt-BR.ts

@@ -1085,26 +1085,6 @@ const ptBRMessages = {
   pluginSkill: {
     noDescription: "(sem descrição)",
   },
-  pluginSpreadsheet: {
-    previewUntitled: "Planilha",
-    previewSheets: "{count} aba | {count} abas",
-    untitled: "Planilha",
-    excel: "Excel",
-    valuePlaceholder: "Valor",
-    valueOrFormulaPlaceholder: "Valor ou Fórmula (ex.: 100 ou SUM(B2:B11))",
-    formatPlaceholder: "Formato (ex.: $#,##0.00)",
-    loading: "Carregando planilha...",
-    noData: "Nenhum dado de planilha disponível",
-    editData: "Editar dados da planilha",
-    applyChanges: "Aplicar alterações",
-    dataMustBeArray: "Os dados devem ser uma matriz de planilhas",
-    loadFailed: "Falha ao carregar a planilha: {error}",
-    invalidJsonAlert: "Formato JSON inválido: {error}",
-    unknownError: "Erro desconhecido",
-    update: "Atualizar",
-    stringType: "Texto",
-    formulaType: "Fórmula",
-  },
   app: {
     startConversation: "Iniciar uma conversa",
     thinking: "Pensando…",

package/src/lang/zh.ts

@@ -1065,26 +1065,6 @@ const zhMessages = {
   pluginSkill: {
     noDescription: "(无描述)",
   },
-  pluginSpreadsheet: {
-    previewUntitled: "电子表格",
-    previewSheets: "{count} 个工作表",
-    untitled: "电子表格",
-    excel: "Excel",
-    valuePlaceholder: "值",
-    valueOrFormulaPlaceholder: "值或公式(例如 100 或 SUM(B2:B11))",
-    formatPlaceholder: "格式(例如 $#,##0.00)",
-    loading: "正在加载电子表格...",
-    noData: "没有可用的电子表格数据",
-    editData: "编辑电子表格数据",
-    applyChanges: "应用更改",
-    dataMustBeArray: "数据必须是工作表数组",
-    loadFailed: "加载电子表格失败: {error}",
-    invalidJsonAlert: "无效的 JSON 格式: {error}",
-    unknownError: "未知错误",
-    update: "更新",
-    stringType: "字符串",
-    formulaType: "公式",
-  },
   app: {
     startConversation: "开始对话",
     thinking: "思考中…",