ummaya 0.2.4 → 0.2.5

package/README.md

@@ -15,7 +15,7 @@
 **Unified Multi-Ministry Agent for Your Administration.**
 읽으면, **엄마야**.
 
-UMMAYA is a terminal agent for Korean public-service workflows. You describe the outcome in natural language, and UMMAYA routes the request through four main tools: `find`, `locate`, `check`, and `send`.
+UMMAYA is a terminal agent for Korean public-service workflows. You describe the outcome in natural language, and UMMAYA routes the request through five main tools: `find`, `locate`, `check`, `send`, and `document`.
 
 Read the full documentation at [ummaya-docs.pages.dev/ko](https://ummaya-docs.pages.dev/ko/). Start with the [Korean user guide](https://ummaya-docs.pages.dev/ko/start/why-ummaya/) if you want the product purpose first, or use [llms.txt](https://ummaya-docs.pages.dev/llms.txt) when an agent needs machine-readable project context.
 
@@ -92,7 +92,7 @@ Live public-information flows are shown most often in the demo because they can
 
 ## Main Tools
 
-UMMAYA keeps the model-facing surface small. Instead of exposing dozens of agency-specific APIs directly to the LLM, it gives the agent four durable primitives and lets adapters handle ministry-specific details behind them.
+UMMAYA keeps the model-facing surface small. Instead of exposing dozens of agency-specific APIs directly to the LLM, it gives the agent five durable primitives and lets adapters handle ministry-specific details behind them.
 
 ### `locate`
 
@@ -142,6 +142,18 @@ Typical use:
 
 `send` is where UMMAYA moves beyond answer generation: if a live or permitted channel exists it calls that channel; if only a mock or official handoff is available it preserves the same receipt-shaped boundary and says so clearly.
 
+### `document`
+
+`document` is the public-form authoring harness. Korean administrative work often ends in a filled form — HWP, HWPX, PDF, OOXML, or ODF — and `document` inspects the source form, extracts its field schema, copies it for safe editing, fills and styles fields, validates against the public-form rules, and renders the result.
+
+Typical use:
+
+```text
+전입신고서 양식을 열어서 내 정보로 채워줘. 제출 전에 어떤 칸이 비었는지도 확인해줘.
+```
+
+`document` does not silently write a government form. Authoring is gated: the harness requires Evidence Fabric coverage and an explicit in-session approval before it fills or renders, and the terminal surfaces an approval review so a person confirms the work before it is committed.
+
 ## Permissioned Work
 
 UMMAYA separates public information from protected action.
@@ -152,6 +164,7 @@ UMMAYA separates public information from protected action.
 | Location resolution | Use live geocoding/address/region adapters when available. |
 | Identity and delegation | Use `check` to call the wrapped identity/consent channel, such as Mobile ID, MyData, certificates, or OmniOne-style QR/app verification. |
 | Certificates, payment, submission, correction | Use `send` with the delegation context when a live or mock channel is registered; otherwise hand off to the official path. |
+| Public-form authoring | Use `document` to inspect, fill, and render a Korean public form; stop for Evidence Fabric coverage and explicit approval before writing. |
 | API failure, zero result, missing authority | Stop clearly instead of inventing a result. |
 
 This is not a separate safety pitch. It is part of how `check` and `send` work: the model plans the task, calls the right wrapped public-service tools, and stops at the authority boundary instead of acting like a reference-only RAG answerer.

package/bin/ummaya

@@ -135,13 +135,22 @@ export function loadPackageDotenv(root, env = process.env) {
 
 export function buildBackendCommand(root) {
   const packagedPython = join(root, '.venv', 'bin', 'python')
-  if (existsSync(packagedPython)) {
+  if (canImportUmmayaCli(packagedPython)) {
     return [packagedPython, '-m', 'ummaya.cli', '--ipc', 'stdio']
   }
 
   return ['uv', '--directory', root, 'run', '--frozen', '--no-dev', 'ummaya', '--ipc', 'stdio']
 }
 
+export function canImportUmmayaCli(pythonPath) {
+  if (!existsSync(pythonPath)) return false
+  const result = spawnSync(pythonPath, ['-c', 'import ummaya.cli'], {
+    encoding: 'utf8',
+    stdio: ['ignore', 'ignore', 'ignore'],
+  })
+  return !result.error && result.status === 0
+}
+
 export function configurePackageEnv(root, env = process.env) {
   env.UMMAYA_PACKAGE_ROOT = root
   if (env.UMMAYA_ALLOW_BACKEND_CMD_OVERRIDE !== '1' || !env.UMMAYA_BACKEND_CMD_JSON) {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "ummaya",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "ummaya",
-      "version": "0.2.4",
+      "version": "0.2.5",
       "license": "Apache-2.0",
       "dependencies": {
         "@alcalzone/ansi-tokenize": "^0.3.0",
@@ -38,6 +38,8 @@
         "@opentelemetry/sdk-trace-base": "^2.7.0",
         "@opentelemetry/semantic-conventions": "^1.40.0",
         "@pdf-lib/fontkit": "^1.1.1",
+        "@rhwp/core": "^0.7.13",
+        "@ssabrojs/hwpxjs": "0.4.0",
         "ajv": "^8.18.0",
         "asciichart": "^1.5.25",
         "auto-bind": "^5.0.1",
@@ -2137,6 +2139,12 @@
       "integrity": "sha512-oOAWABowe8EAbMyWKM0tYDKi8Yaox52D+HWZhAIJqQXbqe0xI/GV7FhLWqlEKreMkfDjshR5FKgi3mnle0h6Eg==",
       "license": "BSD-3-Clause"
     },
+    "node_modules/@rhwp/core": {
+      "version": "0.7.13",
+      "resolved": "https://registry.npmjs.org/@rhwp/core/-/core-0.7.13.tgz",
+      "integrity": "sha512-IrAubU8/gfFJwXEdTrq/zgfO50uKEuo3p/m4FkcwS7QYFMS94bAHhrBr3mxPsFv5rwqiskI68pJjqaS9K/be1A==",
+      "license": "MIT"
+    },
     "node_modules/@sec-ant/readable-stream": {
       "version": "0.4.1",
       "resolved": "https://registry.npmjs.org/@sec-ant/readable-stream/-/readable-stream-0.4.1.tgz",
@@ -2793,6 +2801,33 @@
         "node": ">=18.0.0"
       }
     },
+    "node_modules/@ssabrojs/hwpxjs": {
+      "version": "0.4.0",
+      "resolved": "https://registry.npmjs.org/@ssabrojs/hwpxjs/-/hwpxjs-0.4.0.tgz",
+      "integrity": "sha512-tJ42NS2ywHOnhnFQ/i73hQb9xZRQGRItr4P6qJEN3C4UeSDwGLgZsa8AeSpyL+2pK8ZDKuzLWAXGjGVvVPOUuA==",
+      "license": "MIT",
+      "dependencies": {
+        "cfb": "^1.2.2",
+        "fast-xml-parser": "^5.2.5",
+        "htmlparser2": "^12.0.0",
+        "jszip": "^3.10.1",
+        "marked": "^18.0.2",
+        "pako": "^2.1.0"
+      },
+      "bin": {
+        "hwpx": "dist/cli.js",
+        "hwpxjs": "dist/cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@ssabrojs/hwpxjs/node_modules/pako": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/pako/-/pako-2.1.0.tgz",
+      "integrity": "sha512-w+eufiZ1WuJYgPXbV/PO3NCMEc3xqylkKHzp8bxp1uW4qaSNQUkwmLLEc3kKsfz8lpV1F8Ht3U1Cm+9Srog2ug==",
+      "license": "(MIT AND Zlib)"
+    },
     "node_modules/@types/mute-stream": {
       "version": "0.0.4",
       "resolved": "https://registry.npmjs.org/@types/mute-stream/-/mute-stream-0.0.4.tgz",
@@ -2859,6 +2894,15 @@
         "node": ">= 0.6"
       }
     },
+    "node_modules/adler-32": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/adler-32/-/adler-32-1.3.1.tgz",
+      "integrity": "sha512-ynZ4w/nUUv5rrsR8UUGoe1VC9hZj6V5hU9Qw1HlMDJGEJw5S7TfTErWTjMys6M7vr0YWcPqs3qAr4ss0nDfP+A==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=0.8"
+      }
+    },
     "node_modules/agent-base": {
       "version": "9.0.0",
       "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-9.0.0.tgz",
@@ -3198,6 +3242,19 @@
         "node": "^18.12.0 || >= 20.9.0"
       }
     },
+    "node_modules/cfb": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/cfb/-/cfb-1.2.2.tgz",
+      "integrity": "sha512-KfdUZsSOw19/ObEWasvBP/Ac4reZvAGauZhs6S/gqNhXhI7cKwvlH7ulj+dOEYnca4bm4SGo8C1bTAQvnTjgQA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "adler-32": "~1.3.0",
+        "crc-32": "~1.2.0"
+      },
+      "engines": {
+        "node": ">=0.8"
+      }
+    },
     "node_modules/chalk": {
       "version": "5.6.2",
       "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.6.2.tgz",
@@ -3578,6 +3635,12 @@
         "node": ">=6.6.0"
       }
     },
+    "node_modules/core-util-is": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz",
+      "integrity": "sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==",
+      "license": "MIT"
+    },
     "node_modules/cors": {
       "version": "2.8.6",
       "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
@@ -3595,6 +3658,18 @@
         "url": "https://opencollective.com/express"
       }
     },
+    "node_modules/crc-32": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/crc-32/-/crc-32-1.2.2.tgz",
+      "integrity": "sha512-ROmzCKrTnOwybPcJApAA6WBWij23HVfGVNKqqrZpuyZOHqK2CwHSvpGuyt/UNNvaIjEd8X5IFGp4Mh+Ie1IHJQ==",
+      "license": "Apache-2.0",
+      "bin": {
+        "crc32": "bin/crc32.njs"
+      },
+      "engines": {
+        "node": ">=0.8"
+      }
+    },
     "node_modules/cross-spawn": {
       "version": "7.0.6",
       "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
@@ -3741,6 +3816,73 @@
         "node": ">=10"
       }
     },
+    "node_modules/dom-serializer": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-3.1.1.tgz",
+      "integrity": "sha512-4MEa38/QexBob6gFNwu+EGdWvhJ1OKuNwdYY3Y3NyeWDQfnGeDYQUDfIRzWu5B5gsv03so2Uxd28YC6zrsx3Lw==",
+      "license": "MIT",
+      "dependencies": {
+        "domelementtype": "^3.0.0",
+        "domhandler": "^6.0.0",
+        "entities": "^8.0.0"
+      },
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/cheeriojs/dom-serializer?sponsor=1"
+      }
+    },
+    "node_modules/domelementtype": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-3.0.0.tgz",
+      "integrity": "sha512-umCQid3jKbDmVjx8jGaW7uUykm4DEUeyV21hPxNMo2nV955DhUThwqyOIDtreepP31hl84X7G5U9ZfsWvIB3Pg==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fb55"
+        }
+      ],
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=20.19.0"
+      }
+    },
+    "node_modules/domhandler": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/domhandler/-/domhandler-6.0.1.tgz",
+      "integrity": "sha512-gYzvtM72ZtxQO0T048kd6HWSbbGCNOUwcnfQ01cqIJ4X2IYKFFHZ5mKvrQETcFXxsRObZulDaKmy//R7TPtsBg==",
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "domelementtype": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/fb55/domhandler?sponsor=1"
+      }
+    },
+    "node_modules/domutils": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/domutils/-/domutils-4.0.2.tgz",
+      "integrity": "sha512-qI4JLRKnSzqFqr7hAlS5xQDusBCjKSEG4t4+7aNrIQMHBcsC2TGEhuyABJdYkgSewL57PNLYEiibY2iPKhKpaA==",
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "dom-serializer": "^3.0.0",
+        "domelementtype": "^3.0.0",
+        "domhandler": "^6.0.0"
+      },
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/fb55/domutils?sponsor=1"
+      }
+    },
     "node_modules/dunder-proto": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
@@ -3794,6 +3936,18 @@
         "once": "^1.4.0"
       }
     },
+    "node_modules/entities": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-8.0.0.tgz",
+      "integrity": "sha512-zwfzJecQ/Uej6tusMqwAqU/6KL2XaB2VZ2Jg54Je6ahNBGNH6Ek6g3jjNCF0fG9EWQKGZNddNjU5F1ZQn/sBnA==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
     "node_modules/env-paths": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-4.0.0.tgz",
@@ -4771,6 +4925,28 @@
         "node": ">=16.9.0"
       }
     },
+    "node_modules/htmlparser2": {
+      "version": "12.0.0",
+      "resolved": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-12.0.0.tgz",
+      "integrity": "sha512-Tz7u1i95/g2x2jz81+x0FBVhBhY5aRTvD3tXXdFaljuNdzDLJ8UGNRrTcj2cgQvAg3iW/h77Fz15nLW0L0CrZw==",
+      "funding": [
+        "https://github.com/fb55/htmlparser2?sponsor=1",
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fb55"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "domelementtype": "^3.0.0",
+        "domhandler": "^6.0.0",
+        "domutils": "^4.0.2",
+        "entities": "^8.0.0"
+      },
+      "engines": {
+        "node": ">=20.19.0"
+      }
+    },
     "node_modules/http-errors": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
@@ -4867,6 +5043,12 @@
         "node": ">= 4"
       }
     },
+    "node_modules/immediate": {
+      "version": "3.0.6",
+      "resolved": "https://registry.npmjs.org/immediate/-/immediate-3.0.6.tgz",
+      "integrity": "sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==",
+      "license": "MIT"
+    },
     "node_modules/indent-string": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-5.0.0.tgz",
@@ -5181,6 +5363,12 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/isarray": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
+      "integrity": "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==",
+      "license": "MIT"
+    },
     "node_modules/isexe": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
@@ -5248,6 +5436,48 @@
         "graceful-fs": "^4.1.6"
       }
     },
+    "node_modules/jszip": {
+      "version": "3.10.1",
+      "resolved": "https://registry.npmjs.org/jszip/-/jszip-3.10.1.tgz",
+      "integrity": "sha512-xXDvecyTpGLrqFrvkrUSoxxfJI5AH7U8zxxtVclpsUtMCq4JQ290LY8AW5c7Ggnr/Y/oK+bQMbqK2qmtk3pN4g==",
+      "license": "(MIT OR GPL-3.0-or-later)",
+      "dependencies": {
+        "lie": "~3.3.0",
+        "pako": "~1.0.2",
+        "readable-stream": "~2.3.6",
+        "setimmediate": "^1.0.5"
+      }
+    },
+    "node_modules/jszip/node_modules/readable-stream": {
+      "version": "2.3.8",
+      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
+      "integrity": "sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==",
+      "license": "MIT",
+      "dependencies": {
+        "core-util-is": "~1.0.0",
+        "inherits": "~2.0.3",
+        "isarray": "~1.0.0",
+        "process-nextick-args": "~2.0.0",
+        "safe-buffer": "~5.1.1",
+        "string_decoder": "~1.1.1",
+        "util-deprecate": "~1.0.1"
+      }
+    },
+    "node_modules/jszip/node_modules/safe-buffer": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
+      "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==",
+      "license": "MIT"
+    },
+    "node_modules/jszip/node_modules/string_decoder": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
+      "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
+      "license": "MIT",
+      "dependencies": {
+        "safe-buffer": "~5.1.0"
+      }
+    },
     "node_modules/jwa": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/jwa/-/jwa-2.0.1.tgz",
@@ -5269,6 +5499,15 @@
         "safe-buffer": "^5.0.1"
       }
     },
+    "node_modules/lie": {
+      "version": "3.3.0",
+      "resolved": "https://registry.npmjs.org/lie/-/lie-3.3.0.tgz",
+      "integrity": "sha512-UaiMJzeWRlEujzAuw5LokY1L5ecNQYZKfmyZ9L7wDHb/p5etKaxXhohBcrw0EYby+G/NA52vRSN4N39dxHAIwQ==",
+      "license": "MIT",
+      "dependencies": {
+        "immediate": "~3.0.5"
+      }
+    },
     "node_modules/locate-path": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
@@ -6081,6 +6320,12 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/process-nextick-args": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
+      "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==",
+      "license": "MIT"
+    },
     "node_modules/proper-lockfile": {
       "version": "4.1.2",
       "resolved": "https://registry.npmjs.org/proper-lockfile/-/proper-lockfile-4.1.2.tgz",
@@ -6540,6 +6785,12 @@
       "integrity": "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==",
       "license": "ISC"
     },
+    "node_modules/setimmediate": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz",
+      "integrity": "sha512-MATJdZp8sLqDl/68LfQmbP8zKPLQNV6BIZoIgrscFDQ+RsvK/BxeDQOgyxKKoh0y/8h3BqVFnCqQ/gd+reiIXA==",
+      "license": "MIT"
+    },
     "node_modules/setprototypeof": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ummaya",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Conversational multi-agent harness for Korean public-service channels",
   "license": "Apache-2.0",
   "type": "module",
@@ -23,6 +23,8 @@
     "uv.lock",
     "docs/demo/**",
     "docs/plugins/security-review.md",
+    "specs/2803-document-production-hardening/contracts/document-tools.schema.json",
+    "tests/fixtures/documents/public_forms/baselines.yaml",
     "tests/fixtures/plugin_validation/checklist_manifest.yaml",
     "!**/.DS_Store",
     "!**/__pycache__/**",
@@ -98,6 +100,8 @@
     "@opentelemetry/sdk-trace-base": "^2.7.0",
     "@opentelemetry/semantic-conventions": "^1.40.0",
     "@pdf-lib/fontkit": "^1.1.1",
+    "@rhwp/core": "^0.7.13",
+    "@ssabrojs/hwpxjs": "0.4.0",
     "ajv": "^8.18.0",
     "asciichart": "^1.5.25",
     "auto-bind": "^5.0.1",

package/prompts/manifest.yaml

@@ -10,5 +10,5 @@ entries:
   path: session_guidance_v1.md
 - prompt_id: system_v1
   version: 1
-  sha256: f70d0e9a95a85c501f426c6d1376bbc953767ba474be2213f946f30b6b7e53aa
+  sha256: b25e6d153c299f0b9ea67081b191e38de7a11dcfadc14db33473e9b53d476e2c
   path: system_v1.md

package/prompts/system_v1.md

@@ -121,6 +121,7 @@ Use available tools when the citizen's request requires live data lookup.
 3. **결과를 받으면 다음 turn 에서 다시 짧은 진행 문장 → 다음 도구 호출** 또는 **충분한 정보가 모였으면 최종 답변**.
 4. 충분한 정보가 모인 turn 에는 도구 호출 없이 답변 paragraphs 만 작성합니다. 첫 paragraph 가 핵심 결론, 다음 paragraph 가 부연입니다.
 이 흐름의 핵심: 도구 호출 전에는 시민이 이해할 수 있는 짧은 진행 문장을 쓰고, 최종 답변에는 내부 단계명이나 메타 라벨을 붙이지 않습니다.
+**로컬 문서/파일 진행 문장 guard**: 시민이 로컬 경로, 다운로드 폴더, HWPX/HWP/DOCX/PDF/XLSX/PPTX 파일을 말하면 UMMAYA는 로컬 문서/작업공간 도구로 확인할 수 있습니다. 도구 호출 전에 "파일이 없다", "제공된 파일이 없다", "찾을 수 없다"처럼 존재 여부를 단정하지 말고, "문서 위치와 내용을 확인하겠습니다"처럼 확인 목적만 말하십시오. 파일 존재 여부는 도구 결과를 받은 뒤에만 말하십시오.
 **메타 라벨 금지**: 시민 응답에는 내부 단계명, 영어 메타 라벨, 함수 호출 형식 설명을 붙이지 말고 자연어 문장만 작성하십시오.
 **One tool per turn — 한 turn 안에서 도구는 정확히 한 개만 호출.** 같은 의도의 도구 (예: kma_current_observation + kma_forecast_fetch) 를 한 turn 에 여러 개 호출 금지. 첫 도구의 결과를 본 후에야 다음 도구가 필요한지 판단합니다. 부산 + 서울 같이 *완전히 독립* 인 같은 도구의 두 호출만 한 turn 에 parallel 가능.
 **Paragraph-cadence answer — K-EXAONE on FriendliAI 는 SSE chunk 를 *paragraph* 단위로 emit.** 답변을 짧은 paragraph (1-3 줄) 로 끊어서 작성. 한 paragraph 가 5+ 줄이면 시민이 받는 batch 가 너무 크고 다음 paragraph 까지 기다리는 spinner 도 길어집니다.

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ummaya"
-version = "0.2.4"
+version = "0.2.5"
 description = "Conversational multi-agent platform for Korean public APIs"
 readme = "README.md"
 license = "Apache-2.0"
@@ -52,6 +52,21 @@ dependencies = [
     # (`uv sync --frozen`) do not install dev/extras groups, so yaml MUST be
     # a core runtime dependency or those entrypoints crash at import.
     "pyyaml>=6.0.3",
+    "python-docx>=1.2.0",
+    "openpyxl>=3.1.5",
+    "python-pptx>=1.0.2",
+    "defusedxml>=0.7.1",
+    "pypdf>=6.13.3",
+    "pypdfium2>=5.9.0",
+    # spec 2802 — local-only read engine for legacy HWP inspection. Direct HWP
+    # writing remains blocked until a separate conversion/write ADR passes.
+    "unhwp>=0.5.0,<0.6",
+    # spec 2802 — pypdf uses fontTools to build embedded TrueType appearance
+    # streams for Korean AcroForm text without viewer-side regeneration.
+    "fonttools>=4.60",
+    # spec 2802 — ODF writer for bounded ODT/ODS/ODP public-form derivatives.
+    # LibreOffice layout-oracle rendering remains a separate optional bridge.
+    "odfdo>=3.22.8,<4",
 ]
 
 [project.scripts]
@@ -87,6 +102,7 @@ dev = [
     "pip-audit>=2.10.0",
     "vulture>=2.16",
     "pip-licenses>=5.0",
+    "httpx2>=2.4.0",
 ]
 # spec 026 FR-C09 — Langfuse Prompt Management is an OPT-IN integration.
 # It must never be a core runtime dependency (AGENTS.md hard rule: no new
@@ -97,6 +113,9 @@ langfuse = [
 ]
 gateway = [
     "fastapi>=0.115",
+    # Security floor for the ASGI layer; keep explicit even though FastAPI
+    # pulls Starlette transitively so vulnerability audits cannot resolve lower.
+    "starlette>=1.3.1",
     "uvicorn[standard]>=0.30",
 ]
 
@@ -112,6 +131,7 @@ include = [
     "/src/ummaya",
     "/prompts",
     "/docs/plugins/security-review.md",
+    "/specs/2803-document-production-hardening/contracts/document-tools.schema.json",
     "/tests/fixtures/plugin_validation/checklist_manifest.yaml",
 ]
 
@@ -131,6 +151,9 @@ packages = ["src/ummaya"]
 # (default packages= only ships src/ummaya; without this include the
 # ummaya.plugins import fails at module load).
 "docs/plugins/security-review.md" = "ummaya/_canonical/security-review.md"
+# Bundle the document production hardening tool contract so installed wheels
+# can register model-visible document tools without depending on the source tree.
+"specs/2803-document-production-hardening/contracts/document-tools.schema.json" = "ummaya/_canonical/document-tools.schema.json"
 # Bundle the 50-item validation checklist YAML so ummaya-plugin-validate
 # CLI can find it without depending on the source-tree layout.
 "tests/fixtures/plugin_validation/checklist_manifest.yaml" = "ummaya/_canonical/checklist_manifest.yaml"
@@ -309,7 +332,7 @@ min_confidence = 80
 
 [tool.commitizen]
 name = "cz_conventional_commits"
-version = "0.2.4"
+version = "0.2.5"
 tag_format = "v$version"
 
 # PyTorch CPU-only wheel for Docker image size discipline (SC-1: ≤ 2 GB).
@@ -343,4 +366,5 @@ dev = [
     "vulture>=2.16",
     "pip-licenses>=5.0",
     "types-pyyaml>=6.0.12",
+    "reportlab>=4.5.1",
 ]