@boostkit-dsh/skill-market 0.3.1

package/index.js

@@ -0,0 +1,323 @@
+import { existsSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+
+import { DEFAULT_CATALOG_PACKAGE, DEFAULT_REGISTRIES, downloadSkillPackage, loadRemoteCatalog } from './catalog.js'
+import { createSkillInstaller } from './installer.js'
+
+export const name = 'boostkit-skill-market'
+export const inject = ['authManagement']
+
+const API_PREFIX = '/boostkit-skill-market'
+const REQUEST_BYTES = 4096
+const NETWORK_TIMEOUT_MS = 20_000
+const BOOSTKIT_SKILLS_REPOSITORY = 'https://gitcode.com/boostkit/skills'
+
+function sameOrigin(request) {
+  const origin = request.headers.origin
+  const host = request.headers.host
+  if (origin === undefined || host === undefined) return false
+  const remote = request.socket?.remoteAddress
+  const loopback = remote === '::1' || remote === '127.0.0.1' || (typeof remote === 'string' && remote.startsWith('127.')) || (typeof remote === 'string' && remote.startsWith('::ffff:127.'))
+  if (!loopback) return false
+  try { return new URL(origin).host === host } catch { return false }
+}
+
+function sendJson(response, status, payload) {
+  if (response.destroyed || response.writableEnded) return
+  response.writeHead(status, { 'cache-control': 'no-store', 'content-type': 'application/json; charset=utf-8' })
+  response.end(JSON.stringify(payload))
+}
+
+function sendProtectedError(response, error) {
+  if (error?.code === 'AUTH_REQUIRED') return sendJson(response, 401, { ok: false, error: { code: 'AUTH_REQUIRED', message: String(error.message) } })
+  if (error?.code === 'AUTH_UNAVAILABLE') return sendJson(response, 503, { ok: false, error: { code: 'AUTH_UNAVAILABLE', message: String(error.message) } })
+  if (error?.code === 'busy') return sendJson(response, 409, { ok: false, agentsBusy: true, runningAgents: error.agents ?? [], error: String(error.message) })
+  sendJson(response, 400, { ok: false, error: String(error?.message ?? error) })
+}
+
+async function readJsonBody(request) {
+  const chunks = []
+  let size = 0
+  for await (const chunk of request) {
+    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)
+    size += buffer.length
+    if (size > REQUEST_BYTES) throw new Error('request body too large')
+    chunks.push(buffer)
+  }
+  const text = Buffer.concat(chunks).toString('utf8').trim()
+  return text === '' ? {} : JSON.parse(text)
+}
+
+function requestedName(body) {
+  return typeof body?.name === 'string' && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(body.name) ? body.name : null
+}
+
+function requestedWorkspaceId(value) {
+  return typeof value === 'string' && value.length > 0 && value.length <= 200 ? value : null
+}
+
+/** Match the filesystem Skill provider's upward `.git` project-root discovery. */
+function dshProjectRoot(cwd) {
+  const fallback = resolve(cwd)
+  let current = fallback
+  while (true) {
+    if (existsSync(join(current, '.git'))) return current
+    const parent = dirname(current)
+    if (parent === current) return fallback
+    current = parent
+  }
+}
+
+/** Resolve a client-selected, Host-registered workspace to the root DSH scans. */
+function workspaceProjectRoot(ctx, config, workspaceId) {
+  let registry
+  try { registry = ctx.get?.('workspaceRegistry') } catch { registry = undefined }
+  if (workspaceId !== null) {
+    const workspace = registry?.get?.(workspaceId)
+    if (workspace === undefined || typeof workspace.path !== 'string') throw new Error('所选 DSH 工作区不存在，请重新选择。')
+    return dshProjectRoot(workspace.path)
+  }
+  if (config.projectRoot !== undefined) return dshProjectRoot(resolve(config.projectRoot))
+  const workspaces = registry?.list?.()
+  if (Array.isArray(workspaces) && workspaces.length === 1 && typeof workspaces[0]?.path === 'string') return dshProjectRoot(workspaces[0].path)
+  throw new Error('请选择 Skill 的安装工作区。')
+}
+
+function runningAgentIds(ctx) {
+  let agents
+  try { agents = ctx.get?.('agents') } catch { return [] }
+  if (agents === undefined) return []
+  let listed
+  try { listed = agents.list() } catch { return [] }
+  if (!Array.isArray(listed)) return []
+  return [...new Set(listed.filter((agent) => agent?.status === 'running').map((agent) => typeof agent.id === 'string' && agent.id !== '' ? agent.id : 'agent'))]
+}
+
+function mergeState(catalog, installed) {
+  const local = new Map(installed.map((entry) => [entry.name, entry]))
+  const result = catalog.skills.map((entry) => {
+    const current = local.get(entry.name)
+    local.delete(entry.name)
+    return {
+      ...entry,
+      installed: current !== undefined,
+      present: current?.present ?? false,
+      enabled: current?.enabled ?? true,
+      currentVersion: current?.version ?? '',
+      updateAvailable: current !== undefined && (current.version !== entry.version || current.integrity !== entry.integrity),
+      managed: current !== undefined,
+      sourceUrl: `${entry.source.repository.replace(/\/$/, '')}/tree/${entry.commit}/${entry.source.path}`,
+    }
+  })
+  for (const current of local.values()) {
+    result.push({
+      ...current,
+      displayName: { zh: current.name },
+      description: '此 Skill 已安装，但当前 npm catalog 中不存在。',
+      category: 'unlisted',
+      tags: [],
+      installed: true,
+      enabled: current.enabled ?? true,
+      currentVersion: current.version,
+      updateAvailable: false,
+      managed: true,
+      listed: false,
+    })
+  }
+  return result.sort((left, right) => left.name.localeCompare(right.name))
+}
+
+/** Create the host service used by the BoostKit Skill Market page. */
+export function createSkillMarketService(options = {}) {
+  const defaultProjectRoot = resolve(options.projectRoot ?? process.cwd())
+  const installers = new Map()
+  const fetchImpl = options.fetchImpl ?? fetch
+  const catalogPackage = options.catalogPackage ?? DEFAULT_CATALOG_PACKAGE
+  const registries = options.registries ?? DEFAULT_REGISTRIES
+  const timeoutMs = options.timeoutMs ?? NETWORK_TIMEOUT_MS
+  let cachedCatalog = null
+  let activeOperation = null
+  let disposed = false
+  const controllers = new Set()
+
+  function installerFor(projectRoot = defaultProjectRoot) {
+    const root = resolve(projectRoot)
+    let installer = installers.get(root)
+    if (installer === undefined) {
+      installer = createSkillInstaller({ projectRoot: root, now: options.now })
+      installers.set(root, installer)
+    }
+    return installer
+  }
+
+  async function network(task) {
+    if (disposed) throw new Error('BoostKit Skill 市场服务已释放')
+    const controller = new AbortController()
+    const timer = setTimeout(() => controller.abort(new Error('npm 请求超时')), timeoutMs)
+    controllers.add(controller)
+    try { return await task(controller.signal) } finally { clearTimeout(timer); controllers.delete(controller) }
+  }
+
+  async function catalog(refresh = false) {
+    if (!refresh && cachedCatalog !== null) return cachedCatalog
+    const loaded = await network((signal) => loadRemoteCatalog({ fetchImpl, packageName: catalogPackage, registries, signal }))
+    cachedCatalog = loaded
+    return loaded
+  }
+
+  async function state(refresh = false, projectRoot = defaultProjectRoot) {
+    const installer = installerFor(projectRoot)
+    const installed = installer.list()
+    try {
+      const remote = await catalog(refresh)
+      return {
+        connected: true,
+        release: remote.release,
+        catalogPackage,
+        repositoryUrl: BOOSTKIT_SKILLS_REPOSITORY,
+        skills: mergeState(remote, installed),
+      }
+    } catch (error) {
+      return {
+        connected: false,
+        error: String(error?.message ?? error),
+        release: '',
+        catalogPackage,
+        repositoryUrl: BOOSTKIT_SKILLS_REPOSITORY,
+        skills: mergeState({ skills: [] }, installed),
+      }
+    }
+  }
+
+  async function mutate(action, skillName, projectRoot = defaultProjectRoot) {
+    if (disposed) throw new Error('BoostKit Skill 市场服务已释放')
+    if (activeOperation !== null) throw Object.assign(new Error(`正在处理 ${activeOperation}`), { code: 'busy' })
+    activeOperation = `${action}:${skillName}`
+    try {
+      const installer = installerFor(projectRoot)
+      if (action === 'remove') return { action, skill: installer.remove(skillName) }
+      if (action === 'enable' || action === 'disable') return { action, skill: installer.setEnabled(skillName, action === 'enable') }
+      if (action !== 'install' && action !== 'update') throw new Error(`Skill 操作非法：${action}`)
+      const remote = await catalog(true)
+      const entry = remote.skills.find((skill) => skill.name === skillName)
+      if (!entry) throw new Error(`npm catalog 中不存在 ${skillName}`)
+      const tarball = await network((signal) => downloadSkillPackage(entry, { fetchImpl, registries, signal }))
+      const skill = installer.install(entry, tarball, action)
+      return { action, skill }
+    } finally {
+      activeOperation = null
+    }
+  }
+
+  return {
+    projectRoot: defaultProjectRoot,
+    state,
+    mutate,
+    detail(name, projectRoot = defaultProjectRoot) { return installerFor(projectRoot).readSkill(name) },
+    refresh() { cachedCatalog = null },
+    dispose() {
+      disposed = true
+      cachedCatalog = null
+      for (const controller of controllers) controller.abort()
+      controllers.clear()
+    },
+  }
+}
+
+async function handleMutation(ctx, auth, service, config, action, request, response) {
+  if (request.method !== 'POST') {
+    response.writeHead(405, { allow: 'POST' })
+    response.end()
+    return
+  }
+  if (!sameOrigin(request)) return sendJson(response, 403, { ok: false, error: 'same-origin required' })
+  await auth.requireActor()
+  const body = await readJsonBody(request)
+  const skillName = requestedName(body)
+  if (skillName === null) return sendJson(response, 400, { ok: false, error: 'invalid Skill name' })
+  try {
+    const result = await auth.executeAudited({
+      action: `skill.${action}`,
+      target: { type: 'skill', id: skillName },
+      workspaceId: requestedWorkspaceId(body.workspaceId) ?? undefined,
+    }, () => {
+      const agents = runningAgentIds(ctx)
+      if (agents.length > 0) throw Object.assign(new Error(`有 Agent 正在运行（${agents.join(', ')}），请等待任务停止后重试。`), { code: 'busy', agents })
+      const projectRoot = workspaceProjectRoot(ctx, config, requestedWorkspaceId(body.workspaceId))
+      return service.mutate(action, skillName, projectRoot)
+    })
+    sendJson(response, 200, { ok: true, ...result })
+  } catch (error) {
+    sendProtectedError(response, error)
+  }
+}
+
+/** Register the Skill market service, HTTP endpoints and lifecycle cleanup. */
+export function apply(ctx, config = {}) {
+  const auth = ctx.get?.('authManagement') ?? ctx.authManagement
+  if (auth === undefined) throw new Error('boostkit-skill-market 需要 authManagement 服务')
+  const service = createSkillMarketService({
+    projectRoot: config.projectRoot === undefined ? process.cwd() : resolve(config.projectRoot),
+    catalogPackage: config.catalogPackage,
+    registries: config.registries,
+    fetchImpl: config.fetchImpl,
+  })
+  ctx.provide('boostkitSkillMarket', service)
+  ctx.effect?.(() => () => service.dispose(), 'boostkit-skill-market.dispose')
+  ctx.inject(['webServer'], (host) => {
+    host.effect(() => {
+      const routes = [
+        {
+          kind: 'exact',
+          path: `${API_PREFIX}/catalog`,
+          handler: (request, response) => {
+            if (request.method !== 'GET') { response.writeHead(405, { allow: 'GET' }); response.end(); return }
+            void auth.requireActor().then(() => {
+              let url
+              try { url = new URL(request.url ?? '', 'http://localhost') } catch { sendJson(response, 400, { connected: false, error: 'invalid request URL', skills: [] }); return null }
+              let projectRoot
+              try { projectRoot = workspaceProjectRoot(ctx, config, requestedWorkspaceId(url.searchParams.get('workspaceId'))) } catch (error) { sendJson(response, 400, { connected: false, error: String(error?.message ?? error), skills: [] }); return null }
+              return service.state(url.searchParams.has('refresh'), projectRoot).then((value) => sendJson(response, 200, value))
+            }).catch((error) => sendProtectedError(response, error))
+          },
+        },
+        {
+          kind: 'exact',
+          path: `${API_PREFIX}/detail`,
+          handler: (request, response) => {
+            if (request.method !== 'GET') { response.writeHead(405, { allow: 'GET' }); response.end(); return }
+            void auth.requireActor().then(() => {
+              let skillName = null
+              let workspaceId = null
+              try {
+                const url = new URL(request.url ?? '', 'http://localhost')
+                skillName = requestedName({ name: url.searchParams.get('name') })
+                workspaceId = requestedWorkspaceId(url.searchParams.get('workspaceId'))
+              } catch { /* invalid request URL */ }
+              if (skillName === null) { sendJson(response, 400, { ok: false, error: 'invalid Skill name' }); return }
+              const projectRoot = workspaceProjectRoot(ctx, config, workspaceId)
+              sendJson(response, 200, { ok: true, name: skillName, ...service.detail(skillName, projectRoot) })
+            }).catch((error) => sendProtectedError(response, error))
+          },
+        },
+        ...['install', 'update', 'remove', 'enable', 'disable'].map((action) => ({
+          kind: 'exact',
+          path: `${API_PREFIX}/${action}`,
+          handler: (request, response) => { void handleMutation(ctx, auth, service, config, action, request, response).catch((error) => sendProtectedError(response, error)) },
+        })),
+      ]
+      const disposers = routes.map((route) => host.webServer.register(route))
+      return () => { for (const dispose of disposers) dispose() }
+    }, 'boostkit-skill-market.http')
+  })
+}
+
+export const __testing = {
+  mergeState,
+  dshProjectRoot,
+  requestedName,
+  requestedWorkspaceId,
+  runningAgentIds,
+  sameOrigin,
+  workspaceProjectRoot,
+}

package/installer.js

@@ -0,0 +1,224 @@
+import { randomUUID } from 'node:crypto'
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs'
+import { join, relative, resolve, sep } from 'node:path'
+
+import { extractPackage } from './archive.js'
+
+const LOCK_VERSION = 1
+const SKILL_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/
+const MAX_SKILL_FILE_BYTES = 1024 * 1024
+
+function displayPath(projectRoot, target) {
+  return relative(projectRoot, target).split(sep).join('/')
+}
+
+function parseJson(file) {
+  return JSON.parse(readFileSync(file, 'utf8'))
+}
+
+function emptyLock() {
+  return { version: LOCK_VERSION, skills: {} }
+}
+
+function validateLock(value) {
+  if (value?.version !== LOCK_VERSION || value.skills === null || typeof value.skills !== 'object' || Array.isArray(value.skills)) throw new Error('BoostKit Skill lock 文件格式非法')
+  for (const [name, entry] of Object.entries(value.skills)) {
+    if (!SKILL_NAME_RE.test(name) || entry?.name !== name || typeof entry.package !== 'string' || typeof entry.version !== 'string' || typeof entry.commit !== 'string' || typeof entry.integrity !== 'string' || typeof entry.path !== 'string' || (entry.enabled !== undefined && typeof entry.enabled !== 'boolean')) throw new Error(`BoostKit Skill lock 条目非法：${name}`)
+  }
+  return value
+}
+
+function frontmatterName(text) {
+  const normalized = text.replace(/\r\n/g, '\n')
+  const match = /^---\n([\s\S]*?)\n---(?:\n|$)/.exec(normalized)
+  if (!match) throw new Error('SKILL.md 缺少 YAML frontmatter')
+  const name = /^name:\s*['"]?([^'"\n]+?)['"]?\s*$/m.exec(match[1])?.[1]?.trim()
+  if (!name) throw new Error('SKILL.md frontmatter 缺少 name')
+  return name
+}
+
+function writeLockAtomic(file, value) {
+  const temporary = `${file}.${process.pid}.${randomUUID()}.tmp`
+  const backup = `${file}.${process.pid}.${randomUUID()}.bak`
+  writeFileSync(temporary, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 })
+  let backedUp = false
+  try {
+    if (existsSync(file)) {
+      renameSync(file, backup)
+      backedUp = true
+    }
+    renameSync(temporary, file)
+  } catch (error) {
+    rmSync(temporary, { force: true })
+    if (backedUp && !existsSync(file)) renameSync(backup, file)
+    throw error
+  }
+  if (backedUp) {
+    try { rmSync(backup, { force: true }) } catch { /* committed lock remains authoritative */ }
+  }
+}
+
+/** Create a project-scoped, no-script BoostKit Skill installer. */
+export function createSkillInstaller(options = {}) {
+  const projectRoot = resolve(options.projectRoot ?? process.cwd())
+  const dshRoot = join(projectRoot, '.dsh')
+  const skillsRoot = join(dshRoot, 'skills')
+  const disabledRoot = join(skillsRoot, '.disabled')
+  const lockFile = join(skillsRoot, '.boostkit-lock.json')
+  const now = options.now ?? (() => new Date())
+
+  function skillPath(name, enabled) {
+    return enabled ? join(skillsRoot, name) : join(disabledRoot, name)
+  }
+
+  function readLock() {
+    if (!existsSync(lockFile)) return emptyLock()
+    return validateLock(parseJson(lockFile))
+  }
+
+  function list() {
+    const lock = readLock()
+    return Object.values(lock.skills).sort((left, right) => left.name.localeCompare(right.name)).map((entry) => {
+      const enabled = entry.enabled !== false
+      return {
+        ...entry,
+        enabled,
+        present: existsSync(skillPath(entry.name, enabled)),
+      }
+    })
+  }
+
+  function install(entry, tarball, action = 'install') {
+    if (action !== 'install' && action !== 'update') throw new Error(`Skill 操作非法：${action}`)
+    if (!SKILL_NAME_RE.test(entry?.name ?? '')) throw new Error('Skill 名称非法')
+    mkdirSync(skillsRoot, { recursive: true })
+    const lock = readLock()
+    const current = lock.skills[entry.name]
+    const enabled = current?.enabled !== false
+    const target = skillPath(entry.name, enabled)
+    if (action === 'install' && current !== undefined) throw new Error(`${entry.name} 已安装`)
+    if (action === 'update' && current === undefined) throw new Error(`${entry.name} 尚未安装`)
+    if (action === 'update' && current.package !== entry.package) throw new Error(`${entry.name} 的 npm 包身份发生变化，拒绝自动更新`)
+    if (current === undefined && existsSync(target)) throw new Error(`${entry.name} 是未由 BoostKit Skill 市场管理的本地 Skill，禁止覆盖`)
+    if (action === 'update' && current.version === entry.version && current.integrity === entry.integrity && existsSync(target)) throw new Error(`${entry.name} 已是 catalog 版本`)
+
+    const staging = mkdtempSync(join(dshRoot, `.boostkit-stage-${entry.name}-`))
+    const backup = join(dshRoot, `.boostkit-backup-${entry.name}-${randomUUID()}`)
+    let targetBackedUp = false
+    let targetInstalled = false
+    try {
+      const files = extractPackage(tarball, staging)
+      const skillFile = join(staging, 'SKILL.md')
+      if (!existsSync(skillFile)) throw new Error(`${entry.package} npm 包根目录缺少 SKILL.md`)
+      if (frontmatterName(readFileSync(skillFile, 'utf8')) !== entry.name) throw new Error(`${entry.package} 的 SKILL.md name 与 catalog 不一致`)
+      if (existsSync(target)) {
+        renameSync(target, backup)
+        targetBackedUp = true
+      }
+      renameSync(staging, target)
+      targetInstalled = true
+      const installed = {
+        name: entry.name,
+        package: entry.package,
+        version: entry.version,
+        commit: entry.commit,
+        integrity: entry.integrity,
+        path: displayPath(projectRoot, target),
+        enabled,
+        installedAt: now().toISOString(),
+        source: entry.source,
+        files: files.sort(),
+      }
+      writeLockAtomic(lockFile, { version: LOCK_VERSION, skills: { ...lock.skills, [entry.name]: installed } })
+      if (targetBackedUp) {
+        try { rmSync(backup, { recursive: true, force: true }) } catch { /* committed update remains valid */ }
+      }
+      return installed
+    } catch (error) {
+      if (targetInstalled) rmSync(target, { recursive: true, force: true })
+      if (targetBackedUp && existsSync(backup)) renameSync(backup, target)
+      throw error
+    } finally {
+      try { rmSync(staging, { recursive: true, force: true }) } catch { /* best-effort staging cleanup */ }
+      if (!targetBackedUp) {
+        try { rmSync(backup, { recursive: true, force: true }) } catch { /* path normally does not exist */ }
+      }
+    }
+  }
+
+  function remove(name) {
+    if (!SKILL_NAME_RE.test(name ?? '')) throw new Error('Skill 名称非法')
+    const lock = readLock()
+    const current = lock.skills[name]
+    if (current === undefined) throw new Error(`${name} 未由 BoostKit Skill 市场管理`)
+    const target = skillPath(name, current.enabled !== false)
+    const backup = join(dshRoot, `.boostkit-remove-${name}-${randomUUID()}`)
+    let moved = false
+    try {
+      if (existsSync(target)) {
+        renameSync(target, backup)
+        moved = true
+      }
+      const skills = { ...lock.skills }
+      delete skills[name]
+      writeLockAtomic(lockFile, { version: LOCK_VERSION, skills })
+      if (moved) {
+        try { rmSync(backup, { recursive: true, force: true }) } catch { /* committed removal remains valid */ }
+      }
+      return current
+    } catch (error) {
+      if (moved && existsSync(backup) && !existsSync(target)) renameSync(backup, target)
+      throw error
+    }
+  }
+
+  function setEnabled(name, enabled) {
+    if (!SKILL_NAME_RE.test(name ?? '')) throw new Error('Skill 名称非法')
+    if (typeof enabled !== 'boolean') throw new Error('Skill 启用状态非法')
+    const lock = readLock()
+    const current = lock.skills[name]
+    if (current === undefined) throw new Error(`${name} 未由 BoostKit Skill 市场管理`)
+    const wasEnabled = current.enabled !== false
+    if (wasEnabled === enabled) return { ...current, enabled: wasEnabled }
+    const source = skillPath(name, wasEnabled)
+    const target = skillPath(name, enabled)
+    if (!existsSync(source)) throw new Error(`${name} 的 Skill 文件缺失`)
+    if (existsSync(target)) throw new Error(`${name} 的目标目录已存在，无法切换状态`)
+    mkdirSync(enabled ? skillsRoot : disabledRoot, { recursive: true })
+    renameSync(source, target)
+    try {
+      const updated = { ...current, enabled, path: displayPath(projectRoot, target) }
+      writeLockAtomic(lockFile, { version: LOCK_VERSION, skills: { ...lock.skills, [name]: updated } })
+      return updated
+    } catch (error) {
+      renameSync(target, source)
+      throw error
+    }
+  }
+
+  function readSkill(name) {
+    if (!SKILL_NAME_RE.test(name ?? '')) throw new Error('Skill 名称非法')
+    const lock = readLock()
+    const current = lock.skills[name]
+    if (current === undefined) throw new Error(`${name} 未由 BoostKit Skill 市场管理`)
+    const enabled = current.enabled !== false
+    const file = join(skillPath(name, enabled), 'SKILL.md')
+    if (!existsSync(file)) throw new Error(`${name} 的 SKILL.md 文件缺失`)
+    if (statSync(file).size > MAX_SKILL_FILE_BYTES) throw new Error(`${name} 的 SKILL.md 超过 1 MiB 展示上限`)
+    return { content: readFileSync(file, 'utf8'), enabled }
+  }
+
+  return {
+    projectRoot,
+    skillsRoot,
+    lockFile,
+    install,
+    list,
+    readSkill,
+    readLock,
+    remove,
+    setEnabled,
+  }
+}
+
+export const skillLockVersion = LOCK_VERSION

package/package.json

@@ -0,0 +1,66 @@
+{
+  "name": "@boostkit-dsh/skill-market",
+  "version": "0.3.1",
+  "type": "module",
+  "description": "在 DSH 中浏览、安装、启停、更新和卸载 BoostKit 项目级 Skill",
+  "main": "index.js",
+  "files": [
+    "CHANGELOG.md",
+    "README.md",
+    "archive.js",
+    "catalog.js",
+    "client.js",
+    "cordis.patch.yml",
+    "index.js",
+    "installer.js"
+  ],
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://gitcode.com/lujinxing/kunpeng-dsh-demo.git",
+    "directory": "plugins/skill-market"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "test": "node --test test/*.test.mjs"
+  },
+  "dependencies": {
+    "@boostkit-dsh/auth-management": "0.1.1"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-api-workspace-controller",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ]
+    },
+    "market": {
+      "displayName": {
+        "zh": "BoostKit Skill 市场",
+        "en": "BoostKit Skill Market"
+      },
+      "category": "kunpeng-rd",
+      "maintainers": [
+        "@lujinxing"
+      ],
+      "compatibility": {
+        "dsh": "0.1.7-alpha.1"
+      },
+      "allowedBuilds": []
+    }
+  }
+}