wave-agent-sdk 1.1.5 → 1.3.0

package/dist/tools/artifactTool.js

@@ -4,14 +4,21 @@ import { marked } from "marked";
 import { ARTIFACT_TOOL_NAME } from "../constants/tools.js";
 import { authService, createAuthAwareFetch } from "../services/authService.js";
 import { logger } from "../utils/globalLogger.js";
-import { recordArtifact, getArtifactByFilePath, getRecordedVersion, recordVersion, } from "../services/artifactSession.js";
+import { recordArtifact, getArtifactByFilePath, getRecordedVersion, recordVersion, markArtifactReadApproved, isArtifactReadApproved, } from "../services/artifactSession.js";
+import { extractArtifactSlug, fetchFrameMeta, readArtifactContent, persistArtifactContent, summarizeArtifactAsReader, } from "../services/artifactContent.js";
+import { formatSize } from "../services/contentSummarizer.js";
 // --- Limits ---
 const DEPLOY_TIMEOUT_MS = 30000;
 const PROBE_TIMEOUT_MS = 15000;
 /** Server-side content limit — POSTs above this get a 413. */
 const ARTIFACT_MAX_CONTENT_BYTES = 16 * 1024 * 1024; // 16MB
 const LABEL_MAX_LENGTH = 60;
+/** Server-side title limit — POSTs above this get a 400. */
+const TITLE_MAX_LENGTH = 1000;
 const DEFAULT_FAVICON = "📄";
+/** The tool's two actions; publishing is the default when `action` is omitted. */
+const PUBLISH_ACTION = "publish";
+const READ_ACTION = "read";
 function isValidFavicon(favicon) {
     if (!favicon || favicon.trim().length === 0)
         return false;
@@ -27,48 +34,375 @@ function isValidFavicon(favicon) {
         return /\p{Emoji}/u.test(cp);
     });
 }
-/** Extract the artifact slug from a `{host}/code/artifact/{slug}` URL. */
-function extractSlugFromUrl(url) {
-    try {
-        const parsed = new URL(url);
-        const match = parsed.pathname.match(/^\/code\/artifact\/([^/]+)\/?$/);
-        return match ? decodeURIComponent(match[1]) : null;
-    }
-    catch {
-        return null;
-    }
-}
 function escapeHtml(s) {
     return s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
 }
-/** Render Markdown to a complete HTML document (client-side md→HTML). */
+/**
+ * The file's basename without extension — CC's last-resort title. HTML publishes
+ * always send a non-empty `title` this way, which is what closes the title chain;
+ * Markdown publishes use it as their filename identity (see the publish path).
+ */
+function basenameTitle(filePath) {
+    const base = path.basename(filePath, path.extname(filePath)).trim();
+    return base || undefined;
+}
+/**
+ * Render Markdown to a complete HTML document (client-side md→HTML). The injected
+ * `<title>` carries the file's **filename identity** — CC keeps Markdown pages on
+ * their file name, so `title` never enters the tag.
+ */
 function renderMarkdown(md, title) {
     const body = marked.parse(md, { async: false });
     const titleTag = title ? `<title>${escapeHtml(title)}</title>` : "";
     return `<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">${titleTag}</head><body>${body}</body></html>`;
 }
-/** Probe an artifact's current metadata (`via=model_read` marks model access). */
-async function probeFrame(slug, signal) {
+function denyResult(permissionResult) {
+    return {
+        success: false,
+        content: "",
+        error: `${ARTIFACT_TOOL_NAME} operation denied by user, reason: ${permissionResult.message || "No reason provided"}`,
+    };
+}
+// --- Read action ---
+/**
+ * Read an artifact back. Owned artifacts return raw HTML (inline CSS/JS intact)
+ * so the page can be edited or debugged; artifacts shared by someone else go
+ * through the fast model and only the summary reaches the conversation.
+ */
+async function readArtifact(args, context) {
+    const url = typeof args.url === "string" ? args.url.trim() : "";
+    if (!url) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: missing required parameter "url" for a read`,
+        };
+    }
+    const slug = extractArtifactSlug(url);
+    if (!slug) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: url must point to an artifact page ({host}/code/artifact/{slug})`,
+        };
+    }
+    const prompt = typeof args.prompt === "string" ? args.prompt.trim() : "";
+    if (!authService.getSSOToken()) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: not authenticated. Run /login to connect your account before reading artifacts.`,
+        };
+    }
+    const readResult = await readArtifactContent(slug, {
+        url,
+        abortSignal: context.abortSignal,
+    });
+    if (readResult.kind === "error") {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: ${readResult.error}`,
+        };
+    }
+    const artifact = readResult.artifact;
+    const sessionId = context.sessionId || "";
+    if (sessionId && artifact.version) {
+        // Reading counts as seeing the latest version, so a follow-up republish of
+        // this artifact is not flagged as stale.
+        recordVersion(sessionId, slug, artifact.version);
+    }
+    if (artifact.ownership === "reader") {
+        // Someone else's page: the content is third-party, so ask once per session
+        // before it reaches the model, and never hand back the full text.
+        if (context.permissionManager && !isArtifactReadApproved(sessionId, slug)) {
+            const permissionContext = context.permissionManager.createContext(ARTIFACT_TOOL_NAME, context.permissionMode || "default", context.canUseToolCallback, {
+                action: READ_ACTION,
+                url,
+                ...(prompt ? { prompt } : {}),
+            }, context.toolCallId);
+            permissionContext.warning =
+                "读取他人分享的 artifact：其内容将以摘要形式进入对话上下文。";
+            // Session-scoped approval: a standing rule would silently allow any
+            // other page later.
+            permissionContext.hidePersistentOption = true;
+            const permissionResult = await context.permissionManager.checkPermission(permissionContext);
+            if (permissionResult.behavior === "deny") {
+                return denyResult(permissionResult);
+            }
+            if (sessionId)
+                markArtifactReadApproved(sessionId, slug);
+        }
+        return summarizeArtifactAsReader(url, prompt, artifact.html, context);
+    }
+    const lines = [`Artifact: ${url}`];
+    if (artifact.version)
+        lines.push(`Version: ${artifact.version}`);
+    const persisted = persistArtifactContent(artifact.html);
+    return {
+        success: true,
+        content: `${lines.join("\n")}\n\n${persisted ?? artifact.html}`,
+        shortResult: `Read artifact ${slug}${artifact.version ? ` (v${artifact.version})` : ""} — ${formatSize(artifact.bytes)} of HTML`,
+    };
+}
+// --- Publish action ---
+async function publishArtifact(args, context) {
+    const filePath = typeof args.file_path === "string" ? args.file_path.trim() : "";
+    if (!filePath) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: missing required parameter "file_path"`,
+        };
+    }
+    const faviconRaw = typeof args.favicon === "string" ? args.favicon.trim() : "";
+    const favicon = faviconRaw || DEFAULT_FAVICON;
+    if (!isValidFavicon(favicon)) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: favicon must be 1-2 emoji characters (e.g. "📄" or "🔖"), no text, URLs, or HTML markup`,
+        };
+    }
+    // `label` is the short name for THIS publish (CC), not a title fallback — it
+    // only feeds the version list, so it is never auto-filled.
+    const labelRaw = typeof args.label === "string" ? args.label.trim() : "";
+    const label = labelRaw || undefined;
+    if (label !== undefined && label.length > LABEL_MAX_LENGTH) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: label must be at most ${LABEL_MAX_LENGTH} characters (got ${label.length})`,
+        };
+    }
+    // `title` is the artifact title, HTML publishes only (CC). It is rejected at
+    // the same length the server enforces, so an over-long title fails here instead
+    // of costing a round trip (the request would come back a 400 either way).
+    const titleRaw = typeof args.title === "string" ? args.title.trim() : "";
+    if (titleRaw.length > TITLE_MAX_LENGTH) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: title must be at most ${TITLE_MAX_LENGTH} characters (got ${titleRaw.length})`,
+        };
+    }
+    const explicitTitle = titleRaw || undefined;
+    const force = args.force === true;
+    const urlRaw = typeof args.url === "string" ? args.url.trim() : "";
+    const url = urlRaw || undefined;
+    let slug;
+    if (url) {
+        slug = extractArtifactSlug(url);
+        if (!slug) {
+            return {
+                success: false,
+                content: "",
+                error: `${ARTIFACT_TOOL_NAME}: url must point to an artifact page ({host}/code/artifact/{slug})`,
+            };
+        }
+    }
+    // Resolve and read the file (relative to the workdir).
+    const absolutePath = path.resolve(context.workdir, filePath);
+    const ext = path.extname(absolutePath).toLowerCase();
+    if (ext !== ".html" && ext !== ".md") {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: only .html and .md files can be published as artifacts (got "${ext || "no extension"}")`,
+        };
+    }
+    let fileContent;
+    try {
+        fileContent = readFileSync(absolutePath, "utf-8");
+    }
+    catch {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: file not found or unreadable: ${filePath}`,
+        };
+    }
+    // CC's title chain is <title> tag (wins, server-side) → `title` parameter →
+    // file basename, and the client is the one that supplies that last resort — so
+    // an .html publish always sends a non-empty `title`. Markdown keeps its file
+    // name identity instead: the tag injected below carries it, and the `title`
+    // parameter does not apply.
+    const fileTitle = basenameTitle(filePath);
+    const title = ext === ".html" ? (explicitTitle ?? fileTitle) : undefined;
+    const content = ext === ".md" ? renderMarkdown(fileContent, fileTitle) : fileContent;
+    const contentBytes = Buffer.byteLength(content, "utf-8");
+    if (contentBytes > ARTIFACT_MAX_CONTENT_BYTES) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: content exceeds the ${Math.floor(ARTIFACT_MAX_CONTENT_BYTES / 1024 / 1024)}MB server limit (${(contentBytes / 1024 / 1024).toFixed(1)}MB). Reduce the file or split it up.`,
+        };
+    }
+    if (!authService.getSSOToken()) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: not authenticated. Run /login to connect your account before publishing artifacts.`,
+        };
+    }
+    const sessionId = context.sessionId || "";
+    const signal = context.abortSignal
+        ? AbortSignal.any([
+            context.abortSignal,
+            AbortSignal.timeout(DEPLOY_TIMEOUT_MS),
+        ])
+        : AbortSignal.timeout(DEPLOY_TIMEOUT_MS);
+    // Redeploy: probe current metadata for baseVersion, shared-live detection,
+    // and the stale-version guard.
+    let serverVersion;
+    let sharedLive = false;
+    if (url && slug) {
+        const metaResult = await fetchFrameMeta(slug, {
+            abortSignal: AbortSignal.timeout(PROBE_TIMEOUT_MS),
+        });
+        if (metaResult.kind === "error") {
+            return {
+                success: false,
+                content: "",
+                error: `${ARTIFACT_TOOL_NAME}: artifact not found at ${url}. It may have been deleted or the URL is invalid.`,
+            };
+        }
+        const meta = metaResult.meta;
+        serverVersion = meta.version;
+        sharedLive = !!(meta.perm && meta.perm.mode !== "owner" && !meta.shared);
+        const recorded = getRecordedVersion(sessionId, slug);
+        if (recorded !== undefined && recorded !== meta.version && !force) {
+            return {
+                success: false,
+                content: "",
+                error: `${ARTIFACT_TOOL_NAME}: stale version — this artifact has been updated to version ${meta.version} since this session last saw version ${recorded}. Pass "force": true to overwrite it anyway.`,
+            };
+        }
+    }
+    // Permission check: first publish and shared-live redeploys require
+    // confirmation; republishing a file/artifact this session already
+    // confirmed once auto-allows (matching Claude Code's behavior).
+    const publishedThisSession = !!getArtifactByFilePath(sessionId, filePath) ||
+        (slug ? getRecordedVersion(sessionId, slug) !== undefined : false);
+    const needsConfirm = !publishedThisSession || sharedLive;
+    if (context.permissionManager && needsConfirm) {
+        const permissionContext = context.permissionManager.createContext(ARTIFACT_TOOL_NAME, context.permissionMode || "default", context.canUseToolCallback, {
+            file_path: filePath,
+            ...(favicon !== DEFAULT_FAVICON ? { favicon } : {}),
+            ...(label !== undefined ? { label } : {}),
+            ...(url !== undefined ? { url } : {}),
+            ...(force ? { force: true } : {}),
+        }, context.toolCallId);
+        if (sharedLive) {
+            permissionContext.warning =
+                "此 artifact 处于 shared-live 状态（共享且实时更新），重新部署后所有访问者都会立即看到新内容。";
+            permissionContext.hidePersistentOption = true;
+        }
+        const permissionResult = await context.permissionManager.checkPermission(permissionContext);
+        if (permissionResult.behavior === "deny") {
+            return denyResult(permissionResult);
+        }
+    }
+    // Deploy.
     const serverUrl = authService.getServerUrl();
     const authFetch = createAuthAwareFetch(globalThis.fetch);
+    const body = {
+        content,
+        favicon,
+        ...(title !== undefined ? { title } : {}),
+        ...(label !== undefined ? { label } : {}),
+        ...(url !== undefined ? { url } : {}),
+        ...(serverVersion !== undefined ? { baseVersion: serverVersion } : {}),
+        ...(force ? { force: true } : {}),
+    };
+    let res;
     try {
-        const res = await authFetch(`${serverUrl}/api/frame/${encodeURIComponent(slug)}?via=model_read`, { method: "GET", signal });
-        if (res.status === 404)
-            return null;
-        if (!res.ok) {
-            logger?.warn("Artifact probe failed", {
-                slug,
-                status: res.status,
-                statusText: res.statusText,
-            });
-            return null;
-        }
-        return (await res.json());
+        res = await authFetch(`${serverUrl}/api/frame/deploy/direct`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(body),
+            signal,
+        });
     }
     catch (err) {
-        logger?.warn("Artifact probe error", { slug, error: String(err) });
-        return null;
+        logger?.warn("Artifact deploy request failed", { error: String(err) });
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: failed to reach the server: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    const data = (await res.json().catch(() => ({})));
+    if (res.status === 201) {
+        const deploy = data;
+        recordArtifact(sessionId, filePath, {
+            url: deploy.url,
+            slug: deploy.slug,
+            version: deploy.version,
+        });
+        const lines = [`Artifact published: ${deploy.url}`];
+        if (deploy.path)
+            lines.push(`Path: ${deploy.path}`);
+        if (deploy.title)
+            lines.push(`Title: ${deploy.title}`);
+        lines.push(`Version: ${deploy.version}`);
+        return {
+            success: true,
+            content: lines.join("\n"),
+            shortResult: `Published ${filePath} → ${deploy.url}`,
+        };
+    }
+    if (res.status === 409) {
+        const live = typeof data.live === "string" ? data.live : undefined;
+        if (live && slug) {
+            recordVersion(sessionId, slug, live);
+        }
+        const serverMessage = typeof data.message === "string"
+            ? data.message
+            : typeof data.error === "string"
+                ? data.error
+                : "the artifact has been updated by someone else";
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: conflict detected — ${serverMessage}${live ? ` (live version: ${live})` : ""}. Pass "force": true to overwrite the live version.`,
+        };
     }
+    if (res.status === 413) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: the published content is too large (server limit is 16MB). Reduce the file or split it up.`,
+        };
+    }
+    if (res.status === 400) {
+        const serverMessage = typeof data.message === "string"
+            ? data.message
+            : typeof data.error === "string"
+                ? data.error
+                : "the server rejected the content";
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: the server rejected the publish — ${serverMessage}`,
+        };
+    }
+    if (res.status === 401 || res.status === 403) {
+        return {
+            success: false,
+            content: "",
+            error: `${ARTIFACT_TOOL_NAME}: authentication failed (HTTP ${res.status}). Run /login again and retry.`,
+        };
+    }
+    logger?.warn("Artifact deploy unexpected status", {
+        status: res.status,
+        statusText: res.statusText,
+    });
+    return {
+        success: false,
+        content: "",
+        error: `${ARTIFACT_TOOL_NAME}: server returned HTTP ${res.status} ${res.statusText}`,
+    };
 }
 export const artifactTool = {
     name: ARTIFACT_TOOL_NAME,
@@ -77,281 +411,80 @@ export const artifactTool = {
         type: "function",
         function: {
             name: ARTIFACT_TOOL_NAME,
-            description: "Publish local HTML or Markdown files as shareable web pages (artifacts). " +
-                "Each publish returns a private URL you can share; the page is only accessible to you " +
-                "unless you change its sharing. Only .html and .md files are supported — inline content " +
-                "is not accepted. Markdown files are rendered to HTML automatically. " +
-                "Pass `url` (an existing artifact URL) to redeploy that artifact, " +
-                "or omit it to republish a file already published in this session. " +
-                "Use `force` to overwrite an artifact that has been updated by someone else.",
+            description: "Publish local HTML or Markdown files as shareable web pages (artifacts), or read a published artifact back. " +
+                `\`action: "publish"\` (the default when omitted) publishes a file: each publish returns a private URL you can share; ` +
+                "the page is only accessible to you unless you change its sharing. Only .html and .md files are supported — inline content " +
+                "is not accepted. Markdown files are rendered to HTML automatically. Pass `url` (an existing artifact URL) to redeploy that " +
+                "artifact, or omit it to republish a file already published in this session. Use `force` to overwrite an artifact that has " +
+                `been updated by someone else. \`action: "read"\` returns the current content of an artifact you pass as \`url\`: artifacts you ` +
+                "own come back as raw HTML with inline CSS/JS intact (use it to keep editing, style-check, or debug a published page), while " +
+                "artifacts shared by someone else come back as an isolated summary steered by the optional `prompt`.",
             parameters: {
                 type: "object",
                 properties: {
+                    action: {
+                        type: "string",
+                        enum: [PUBLISH_ACTION, READ_ACTION],
+                        description: 'The action to perform: "publish" (default) publishes a local file, "read" returns an artifact\'s current content.',
+                    },
                     file_path: {
                         type: "string",
-                        description: "Path to the .html or .md file to publish (relative to the working directory). The file must exist.",
+                        description: 'Path to the .html or .md file to publish (relative to the working directory). The file must exist. Required for action "publish".',
                     },
                     favicon: {
                         type: "string",
-                        description: "1-2 emoji characters shown as the page favicon (no text, URLs, or HTML). Defaults to 📄.",
+                        description: "1-2 emoji characters shown as the page favicon (no text, URLs, or HTML). Defaults to 📄. Only used when publishing.",
+                    },
+                    title: {
+                        type: "string",
+                        description: "Title for the artifact — the name shown in the browser tab and gallery. Only used when publishing an .html file. Prefer a <title> tag at the top of the HTML itself: this parameter fills in only when the file lacks one in the first 8KB, and never overrides the tag. When neither is present the file name is used. Markdown pages keep their filename identity instead.",
                     },
                     label: {
                         type: "string",
-                        description: `Optional short label for the artifact (max ${LABEL_MAX_LENGTH} characters).`,
+                        description: `A short name for this publish, max ${LABEL_MAX_LENGTH} characters (e.g. "Draft to legal"). Optional — a few words, not a description. Only used when publishing.`,
                     },
                     url: {
                         type: "string",
-                        description: "Existing artifact URL to redeploy, e.g. https://host/code/artifact/abc123. Omit when republishing a file already published earlier in this session.",
+                        description: "Artifact URL, e.g. https://host/code/artifact/abc123. When publishing: the existing artifact to redeploy (omit when republishing a file already published earlier in this session). When reading: the artifact to read (required).",
                     },
                     force: {
                         type: "boolean",
-                        description: "Set true to overwrite an artifact that was updated since this session last saw it (stale version or conflict).",
+                        description: "Set true to overwrite an artifact that was updated since this session last saw it (stale version or conflict). Only used when publishing.",
+                    },
+                    prompt: {
+                        type: "string",
+                        description: 'Optional steering for action "read" when the artifact is shared by someone else — e.g. "how is the layout structured?" or "what does it render?". Ignored for artifacts you own.',
                     },
                 },
-                required: ["file_path"],
+                required: [],
             },
         },
     },
+    // Value only, never the tool name: the collapsed row renders
+    // "<tool name> <compactParams>", so wrapping the value in "Artifact(...)"
+    // printed the name twice.
     formatCompactParams: (params) => {
-        const filePath = typeof params.file_path === "string" ? params.file_path : "";
         const url = typeof params.url === "string" ? params.url : "";
-        return `${ARTIFACT_TOOL_NAME}(${filePath}${url ? ` → ${url}` : ""})`;
+        if (params.action === READ_ACTION) {
+            return `read ${url}`;
+        }
+        const filePath = typeof params.file_path === "string" ? params.file_path : "";
+        return `${filePath}${url ? ` → ${url}` : ""}`;
     },
     execute: async (args, context) => {
-        const filePath = typeof args.file_path === "string" ? args.file_path.trim() : "";
-        if (!filePath) {
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: missing required parameter "file_path"`,
-            };
-        }
-        const faviconRaw = typeof args.favicon === "string" ? args.favicon.trim() : "";
-        const favicon = faviconRaw || DEFAULT_FAVICON;
-        if (!isValidFavicon(favicon)) {
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: favicon must be 1-2 emoji characters (e.g. "📄" or "🔖"), no text, URLs, or HTML markup`,
-            };
-        }
-        const labelRaw = typeof args.label === "string" ? args.label.trim() : "";
-        const label = labelRaw || undefined;
-        if (label !== undefined && label.length > LABEL_MAX_LENGTH) {
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: label must be at most ${LABEL_MAX_LENGTH} characters (got ${label.length})`,
-            };
-        }
-        const force = args.force === true;
-        const urlRaw = typeof args.url === "string" ? args.url.trim() : "";
-        const url = urlRaw || undefined;
-        let slug;
-        if (url) {
-            slug = extractSlugFromUrl(url);
-            if (!slug) {
-                return {
-                    success: false,
-                    content: "",
-                    error: `${ARTIFACT_TOOL_NAME}: url must point to an artifact page ({host}/code/artifact/{slug})`,
-                };
-            }
-        }
-        // Resolve and read the file (relative to the workdir).
-        const absolutePath = path.resolve(context.workdir, filePath);
-        const ext = path.extname(absolutePath).toLowerCase();
-        if (ext !== ".html" && ext !== ".md") {
+        const actionRaw = typeof args.action === "string" ? args.action.trim() : "";
+        if (actionRaw &&
+            actionRaw !== PUBLISH_ACTION &&
+            actionRaw !== READ_ACTION) {
             return {
                 success: false,
                 content: "",
-                error: `${ARTIFACT_TOOL_NAME}: only .html and .md files can be published as artifacts (got "${ext || "no extension"}")`,
+                error: `${ARTIFACT_TOOL_NAME}: action must be "publish" or "read" (got "${actionRaw}")`,
             };
         }
-        let fileContent;
-        try {
-            fileContent = readFileSync(absolutePath, "utf-8");
-        }
-        catch {
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: file not found or unreadable: ${filePath}`,
-            };
+        if (actionRaw === READ_ACTION) {
+            return readArtifact(args, context);
         }
-        const content = ext === ".md" ? renderMarkdown(fileContent, label) : fileContent;
-        const contentBytes = Buffer.byteLength(content, "utf-8");
-        if (contentBytes > ARTIFACT_MAX_CONTENT_BYTES) {
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: content exceeds the ${Math.floor(ARTIFACT_MAX_CONTENT_BYTES / 1024 / 1024)}MB server limit (${(contentBytes / 1024 / 1024).toFixed(1)}MB). Reduce the file or split it up.`,
-            };
-        }
-        if (!authService.getSSOToken()) {
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: not authenticated. Run /login to connect your account before publishing artifacts.`,
-            };
-        }
-        const sessionId = context.sessionId || "";
-        const signal = context.abortSignal
-            ? AbortSignal.any([
-                context.abortSignal,
-                AbortSignal.timeout(DEPLOY_TIMEOUT_MS),
-            ])
-            : AbortSignal.timeout(DEPLOY_TIMEOUT_MS);
-        // Redeploy: probe current metadata for baseVersion, shared-live detection,
-        // and the stale-version guard.
-        let serverVersion;
-        let sharedLive = false;
-        if (url && slug) {
-            const meta = await probeFrame(slug, AbortSignal.timeout(PROBE_TIMEOUT_MS));
-            if (!meta) {
-                return {
-                    success: false,
-                    content: "",
-                    error: `${ARTIFACT_TOOL_NAME}: artifact not found at ${url}. It may have been deleted or the URL is invalid.`,
-                };
-            }
-            serverVersion = meta.version;
-            sharedLive = !!(meta.perm && meta.perm.mode !== "owner" && !meta.shared);
-            const recorded = getRecordedVersion(sessionId, slug);
-            if (recorded !== undefined && recorded !== meta.version && !force) {
-                return {
-                    success: false,
-                    content: "",
-                    error: `${ARTIFACT_TOOL_NAME}: stale version — this artifact has been updated to version ${meta.version} since this session last saw version ${recorded}. Pass "force": true to overwrite it anyway.`,
-                };
-            }
-        }
-        // Permission check: first publish and shared-live redeploys require
-        // confirmation; republishing a file/artifact this session already
-        // confirmed once auto-allows (matching Claude Code's behavior).
-        const publishedThisSession = !!getArtifactByFilePath(sessionId, filePath) ||
-            (slug ? getRecordedVersion(sessionId, slug) !== undefined : false);
-        const needsConfirm = !publishedThisSession || sharedLive;
-        if (context.permissionManager && needsConfirm) {
-            const permissionContext = context.permissionManager.createContext(ARTIFACT_TOOL_NAME, context.permissionMode || "default", context.canUseToolCallback, {
-                file_path: filePath,
-                ...(favicon !== DEFAULT_FAVICON ? { favicon } : {}),
-                ...(label !== undefined ? { label } : {}),
-                ...(url !== undefined ? { url } : {}),
-                ...(force ? { force: true } : {}),
-            }, context.toolCallId);
-            if (sharedLive) {
-                permissionContext.warning =
-                    "此 artifact 处于 shared-live 状态（共享且实时更新），重新部署后所有访问者都会立即看到新内容。";
-                permissionContext.hidePersistentOption = true;
-            }
-            const permissionResult = await context.permissionManager.checkPermission(permissionContext);
-            if (permissionResult.behavior === "deny") {
-                return {
-                    success: false,
-                    content: "",
-                    error: `${ARTIFACT_TOOL_NAME} operation denied by user, reason: ${permissionResult.message || "No reason provided"}`,
-                };
-            }
-        }
-        // Deploy.
-        const serverUrl = authService.getServerUrl();
-        const authFetch = createAuthAwareFetch(globalThis.fetch);
-        const body = {
-            content,
-            favicon,
-            ...(label !== undefined ? { label } : {}),
-            ...(url !== undefined ? { url } : {}),
-            ...(serverVersion !== undefined ? { baseVersion: serverVersion } : {}),
-            ...(force ? { force: true } : {}),
-        };
-        let res;
-        try {
-            res = await authFetch(`${serverUrl}/api/frame/deploy/direct`, {
-                method: "POST",
-                headers: { "Content-Type": "application/json" },
-                body: JSON.stringify(body),
-                signal,
-            });
-        }
-        catch (err) {
-            logger?.warn("Artifact deploy request failed", { error: String(err) });
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: failed to reach the server: ${err instanceof Error ? err.message : String(err)}`,
-            };
-        }
-        const data = (await res.json().catch(() => ({})));
-        if (res.status === 201) {
-            const deploy = data;
-            recordArtifact(sessionId, filePath, {
-                url: deploy.url,
-                slug: deploy.slug,
-                version: deploy.version,
-            });
-            const lines = [`Artifact published: ${deploy.url}`];
-            if (deploy.path)
-                lines.push(`Path: ${deploy.path}`);
-            if (deploy.title)
-                lines.push(`Title: ${deploy.title}`);
-            lines.push(`Version: ${deploy.version}`);
-            return {
-                success: true,
-                content: lines.join("\n"),
-                shortResult: `Published ${filePath} → ${deploy.url}`,
-            };
-        }
-        if (res.status === 409) {
-            const live = typeof data.live === "string" ? data.live : undefined;
-            if (live && slug) {
-                recordVersion(sessionId, slug, live);
-            }
-            const serverMessage = typeof data.message === "string"
-                ? data.message
-                : typeof data.error === "string"
-                    ? data.error
-                    : "the artifact has been updated by someone else";
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: conflict detected — ${serverMessage}${live ? ` (live version: ${live})` : ""}. Pass "force": true to overwrite the live version.`,
-            };
-        }
-        if (res.status === 413) {
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: the published content is too large (server limit is 16MB). Reduce the file or split it up.`,
-            };
-        }
-        if (res.status === 400) {
-            const serverMessage = typeof data.message === "string"
-                ? data.message
-                : typeof data.error === "string"
-                    ? data.error
-                    : "the server rejected the content";
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: the server rejected the publish — ${serverMessage}`,
-            };
-        }
-        if (res.status === 401 || res.status === 403) {
-            return {
-                success: false,
-                content: "",
-                error: `${ARTIFACT_TOOL_NAME}: authentication failed (HTTP ${res.status}). Run /login again and retry.`,
-            };
-        }
-        logger?.warn("Artifact deploy unexpected status", {
-            status: res.status,
-            statusText: res.statusText,
-        });
-        return {
-            success: false,
-            content: "",
-            error: `${ARTIFACT_TOOL_NAME}: server returned HTTP ${res.status} ${res.statusText}`,
-        };
+        return publishArtifact(args, context);
     },
 };