@elisym/sdk 0.14.0 → 0.15.1

package/dist/skills.d.cts

@@ -1,4 +1,5 @@
 import { A as Asset } from './assets-C-nzSYD4.cjs';
+import { S as SkillRateLimit } from './types-8vJ1I2KQ.cjs';
 
 /**
  * Shared SKILL.md runtime types. A skill is a markdown document whose
@@ -141,6 +142,12 @@ interface RunScriptOptions {
     timeoutMs?: number;
     /** Cap on stdout/stderr capture. Default `MAX_SCRIPT_OUTPUT`. */
     maxOutput?: number;
+    /**
+     * Full environment for the child. When omitted, the child inherits
+     * `process.env`. Caller is responsible for spreading `process.env`
+     * if PATH/HOME/etc. need to be preserved alongside extras.
+     */
+    env?: NodeJS.ProcessEnv;
 }
 interface RunScriptResult {
     stdout: string;
@@ -256,6 +263,12 @@ interface StaticScriptSkillParams {
     scriptArgs: string[];
     /** Optional override of the default 60s timeout. */
     scriptTimeoutMs?: number;
+    /**
+     * Full environment for the script. When omitted, the script inherits
+     * `process.env`. Callers (typically the CLI loader) spread `process.env`
+     * and add narrowly-scoped secrets like provider API keys.
+     */
+    scriptEnv?: NodeJS.ProcessEnv;
     image?: string;
     imageFile?: string;
 }
@@ -277,6 +290,7 @@ declare class StaticScriptSkill implements Skill {
     private scriptPath;
     private scriptArgs;
     private scriptTimeoutMs?;
+    private scriptEnv?;
     constructor(params: StaticScriptSkillParams);
     execute(_input: SkillInput, ctx: SkillContext): Promise<SkillOutput>;
 }
@@ -293,6 +307,12 @@ interface DynamicScriptSkillParams {
     scriptArgs: string[];
     /** Optional override of the default 60s timeout. */
     scriptTimeoutMs?: number;
+    /**
+     * Full environment for the script. When omitted, the script inherits
+     * `process.env`. Callers (typically the CLI loader) spread `process.env`
+     * and add narrowly-scoped secrets like provider API keys.
+     */
+    scriptEnv?: NodeJS.ProcessEnv;
     image?: string;
     imageFile?: string;
 }
@@ -314,6 +334,7 @@ declare class DynamicScriptSkill implements Skill {
     private scriptPath;
     private scriptArgs;
     private scriptTimeoutMs?;
+    private scriptEnv?;
     constructor(params: DynamicScriptSkillParams);
     execute(input: SkillInput, ctx: SkillContext): Promise<SkillOutput>;
 }
@@ -357,6 +378,12 @@ interface SkillFrontmatter {
     script_args?: unknown;
     /** Optional override of `DEFAULT_SCRIPT_TIMEOUT_MS`. */
     script_timeout_ms?: unknown;
+    /**
+     * Optional per-skill rate limit. Applies to any skill mode. Snake-case
+     * keys here match the YAML frontmatter convention; parsed into camelCase
+     * `rateLimit` on `ParsedSkill`.
+     */
+    rate_limit?: unknown;
 }
 interface ParsedSkill {
     name: string;
@@ -385,6 +412,8 @@ interface ParsedSkill {
     scriptArgs: string[];
     /** Undefined => caller uses `DEFAULT_SCRIPT_TIMEOUT_MS`. */
     scriptTimeoutMs?: number;
+    /** Optional per-skill rate limit (any mode). */
+    rateLimit?: SkillRateLimit;
 }
 interface LoaderLogger {
     debug?(obj: Record<string, unknown>, msg?: string): void;
@@ -411,4 +440,4 @@ declare function validateSkillFrontmatter(frontmatter: SkillFrontmatter, systemP
  */
 declare function loadSkillsFromDir(skillsDir: string, options?: LoadSkillsOptions): Skill[];
 
-export { type CompletionResult, DEFAULT_MAX_TOOL_ROUNDS, DEFAULT_SCRIPT_TIMEOUT_MS, DynamicScriptSkill, type DynamicScriptSkillParams, type LlmClient, type LlmClientConfig, type LlmProvider, type LoadSkillsOptions, type LoaderLogger, MAX_SCRIPT_OUTPUT, MAX_STATIC_FILE_SIZE, type ParsedSkill, type RunScriptOptions, type RunScriptResult, ScriptSkill, type ScriptSkillLogger, type ScriptSkillParams, type Skill, type SkillContext, type SkillFrontmatter, type SkillInput, type SkillLlmOverride, type SkillMode, type SkillOutput, type SkillToolDef, StaticFileSkill, type StaticFileSkillParams, StaticScriptSkill, type StaticScriptSkillParams, type ToolCall, type ToolDef, type ToolResult, loadSkillsFromDir, parseSkillMd, resolveInsidePath, runScript, validateSkillFrontmatter };
+export { type CompletionResult, DEFAULT_MAX_TOOL_ROUNDS, DEFAULT_SCRIPT_TIMEOUT_MS, DynamicScriptSkill, type DynamicScriptSkillParams, type LlmClient, type LlmClientConfig, type LlmProvider, type LoadSkillsOptions, type LoaderLogger, MAX_SCRIPT_OUTPUT, MAX_STATIC_FILE_SIZE, type ParsedSkill, type RunScriptOptions, type RunScriptResult, ScriptSkill, type ScriptSkillLogger, type ScriptSkillParams, type Skill, type SkillContext, type SkillFrontmatter, type SkillInput, type SkillLlmOverride, type SkillMode, type SkillOutput, SkillRateLimit, type SkillToolDef, StaticFileSkill, type StaticFileSkillParams, StaticScriptSkill, type StaticScriptSkillParams, type ToolCall, type ToolDef, type ToolResult, loadSkillsFromDir, parseSkillMd, resolveInsidePath, runScript, validateSkillFrontmatter };

package/dist/skills.d.ts

@@ -1,4 +1,5 @@
 import { A as Asset } from './assets-C-nzSYD4.js';
+import { S as SkillRateLimit } from './types-8vJ1I2KQ.js';
 
 /**
  * Shared SKILL.md runtime types. A skill is a markdown document whose
@@ -141,6 +142,12 @@ interface RunScriptOptions {
     timeoutMs?: number;
     /** Cap on stdout/stderr capture. Default `MAX_SCRIPT_OUTPUT`. */
     maxOutput?: number;
+    /**
+     * Full environment for the child. When omitted, the child inherits
+     * `process.env`. Caller is responsible for spreading `process.env`
+     * if PATH/HOME/etc. need to be preserved alongside extras.
+     */
+    env?: NodeJS.ProcessEnv;
 }
 interface RunScriptResult {
     stdout: string;
@@ -256,6 +263,12 @@ interface StaticScriptSkillParams {
     scriptArgs: string[];
     /** Optional override of the default 60s timeout. */
     scriptTimeoutMs?: number;
+    /**
+     * Full environment for the script. When omitted, the script inherits
+     * `process.env`. Callers (typically the CLI loader) spread `process.env`
+     * and add narrowly-scoped secrets like provider API keys.
+     */
+    scriptEnv?: NodeJS.ProcessEnv;
     image?: string;
     imageFile?: string;
 }
@@ -277,6 +290,7 @@ declare class StaticScriptSkill implements Skill {
     private scriptPath;
     private scriptArgs;
     private scriptTimeoutMs?;
+    private scriptEnv?;
     constructor(params: StaticScriptSkillParams);
     execute(_input: SkillInput, ctx: SkillContext): Promise<SkillOutput>;
 }
@@ -293,6 +307,12 @@ interface DynamicScriptSkillParams {
     scriptArgs: string[];
     /** Optional override of the default 60s timeout. */
     scriptTimeoutMs?: number;
+    /**
+     * Full environment for the script. When omitted, the script inherits
+     * `process.env`. Callers (typically the CLI loader) spread `process.env`
+     * and add narrowly-scoped secrets like provider API keys.
+     */
+    scriptEnv?: NodeJS.ProcessEnv;
     image?: string;
     imageFile?: string;
 }
@@ -314,6 +334,7 @@ declare class DynamicScriptSkill implements Skill {
     private scriptPath;
     private scriptArgs;
     private scriptTimeoutMs?;
+    private scriptEnv?;
     constructor(params: DynamicScriptSkillParams);
     execute(input: SkillInput, ctx: SkillContext): Promise<SkillOutput>;
 }
@@ -357,6 +378,12 @@ interface SkillFrontmatter {
     script_args?: unknown;
     /** Optional override of `DEFAULT_SCRIPT_TIMEOUT_MS`. */
     script_timeout_ms?: unknown;
+    /**
+     * Optional per-skill rate limit. Applies to any skill mode. Snake-case
+     * keys here match the YAML frontmatter convention; parsed into camelCase
+     * `rateLimit` on `ParsedSkill`.
+     */
+    rate_limit?: unknown;
 }
 interface ParsedSkill {
     name: string;
@@ -385,6 +412,8 @@ interface ParsedSkill {
     scriptArgs: string[];
     /** Undefined => caller uses `DEFAULT_SCRIPT_TIMEOUT_MS`. */
     scriptTimeoutMs?: number;
+    /** Optional per-skill rate limit (any mode). */
+    rateLimit?: SkillRateLimit;
 }
 interface LoaderLogger {
     debug?(obj: Record<string, unknown>, msg?: string): void;
@@ -411,4 +440,4 @@ declare function validateSkillFrontmatter(frontmatter: SkillFrontmatter, systemP
  */
 declare function loadSkillsFromDir(skillsDir: string, options?: LoadSkillsOptions): Skill[];
 
-export { type CompletionResult, DEFAULT_MAX_TOOL_ROUNDS, DEFAULT_SCRIPT_TIMEOUT_MS, DynamicScriptSkill, type DynamicScriptSkillParams, type LlmClient, type LlmClientConfig, type LlmProvider, type LoadSkillsOptions, type LoaderLogger, MAX_SCRIPT_OUTPUT, MAX_STATIC_FILE_SIZE, type ParsedSkill, type RunScriptOptions, type RunScriptResult, ScriptSkill, type ScriptSkillLogger, type ScriptSkillParams, type Skill, type SkillContext, type SkillFrontmatter, type SkillInput, type SkillLlmOverride, type SkillMode, type SkillOutput, type SkillToolDef, StaticFileSkill, type StaticFileSkillParams, StaticScriptSkill, type StaticScriptSkillParams, type ToolCall, type ToolDef, type ToolResult, loadSkillsFromDir, parseSkillMd, resolveInsidePath, runScript, validateSkillFrontmatter };
+export { type CompletionResult, DEFAULT_MAX_TOOL_ROUNDS, DEFAULT_SCRIPT_TIMEOUT_MS, DynamicScriptSkill, type DynamicScriptSkillParams, type LlmClient, type LlmClientConfig, type LlmProvider, type LoadSkillsOptions, type LoaderLogger, MAX_SCRIPT_OUTPUT, MAX_STATIC_FILE_SIZE, type ParsedSkill, type RunScriptOptions, type RunScriptResult, ScriptSkill, type ScriptSkillLogger, type ScriptSkillParams, type Skill, type SkillContext, type SkillFrontmatter, type SkillInput, type SkillLlmOverride, type SkillMode, type SkillOutput, SkillRateLimit, type SkillToolDef, StaticFileSkill, type StaticFileSkillParams, StaticScriptSkill, type StaticScriptSkillParams, type ToolCall, type ToolDef, type ToolResult, loadSkillsFromDir, parseSkillMd, resolveInsidePath, runScript, validateSkillFrontmatter };

package/dist/skills.js

@@ -18,7 +18,8 @@ function runScript(cmd, args, opts) {
       stdio: ["pipe", "pipe", "pipe"],
       timeout: timeoutMs,
       killSignal: "SIGKILL",
-      signal: opts.signal
+      signal: opts.signal,
+      env: opts.env
     });
     let stdout = "";
     let stderr = "";
@@ -239,6 +240,7 @@ var StaticScriptSkill = class {
   scriptPath;
   scriptArgs;
   scriptTimeoutMs;
+  scriptEnv;
   constructor(params) {
     this.name = params.name;
     this.description = params.description;
@@ -250,12 +252,14 @@ var StaticScriptSkill = class {
     this.scriptPath = params.scriptPath;
     this.scriptArgs = params.scriptArgs;
     this.scriptTimeoutMs = params.scriptTimeoutMs;
+    this.scriptEnv = params.scriptEnv;
   }
   async execute(_input, ctx) {
     const result = await runScript(this.scriptPath, this.scriptArgs, {
       cwd: dirname(this.scriptPath),
       signal: ctx.signal,
-      timeoutMs: this.scriptTimeoutMs
+      timeoutMs: this.scriptTimeoutMs,
+      env: this.scriptEnv
     });
     if (result.spawnError) {
       throw new Error(`script spawn failed: ${result.spawnError.message}`);
@@ -279,6 +283,7 @@ var DynamicScriptSkill = class {
   scriptPath;
   scriptArgs;
   scriptTimeoutMs;
+  scriptEnv;
   constructor(params) {
     this.name = params.name;
     this.description = params.description;
@@ -290,13 +295,15 @@ var DynamicScriptSkill = class {
     this.scriptPath = params.scriptPath;
     this.scriptArgs = params.scriptArgs;
     this.scriptTimeoutMs = params.scriptTimeoutMs;
+    this.scriptEnv = params.scriptEnv;
   }
   async execute(input, ctx) {
     const result = await runScript(this.scriptPath, this.scriptArgs, {
       cwd: dirname(this.scriptPath),
       stdin: input.data,
       signal: ctx.signal,
-      timeoutMs: this.scriptTimeoutMs
+      timeoutMs: this.scriptTimeoutMs,
+      env: this.scriptEnv
     });
     if (result.spawnError) {
       throw new Error(`script spawn failed: ${result.spawnError.message}`);
@@ -575,6 +582,33 @@ function validateLlmOverride(skillName, frontmatter, mode) {
   }
   return override;
 }
+var MAX_RATE_LIMIT_WINDOW_SECS = 86400;
+var MAX_RATE_LIMIT_PER_WINDOW = 1e4;
+function validateRateLimit(skillName, raw) {
+  if (raw === void 0 || raw === null) {
+    return void 0;
+  }
+  if (typeof raw !== "object") {
+    throw new Error(`SKILL.md "${skillName}": "rate_limit" must be an object`);
+  }
+  const record = raw;
+  const perWindowSecs = record.per_window_secs;
+  const maxPerWindow = record.max_per_window;
+  if (typeof perWindowSecs !== "number" || !Number.isInteger(perWindowSecs) || perWindowSecs < 1 || perWindowSecs > MAX_RATE_LIMIT_WINDOW_SECS) {
+    throw new Error(
+      `SKILL.md "${skillName}": "rate_limit.per_window_secs" must be an integer between 1 and ${MAX_RATE_LIMIT_WINDOW_SECS}`
+    );
+  }
+  if (typeof maxPerWindow !== "number" || !Number.isInteger(maxPerWindow) || maxPerWindow < 1 || maxPerWindow > MAX_RATE_LIMIT_PER_WINDOW) {
+    throw new Error(
+      `SKILL.md "${skillName}": "rate_limit.max_per_window" must be an integer between 1 and ${MAX_RATE_LIMIT_PER_WINDOW}`
+    );
+  }
+  return {
+    perWindowMs: perWindowSecs * 1e3,
+    maxPerWindow
+  };
+}
 function validateScriptTimeoutMs(skillName, raw) {
   if (raw === void 0 || raw === null) {
     return void 0;
@@ -717,6 +751,7 @@ function validateSkillFrontmatter(frontmatter, systemPrompt, options = {}) {
   const image = typeof frontmatter.image === "string" ? frontmatter.image : void 0;
   const imageFile = typeof frontmatter.image_file === "string" ? frontmatter.image_file : void 0;
   const llmOverride = validateLlmOverride(frontmatter.name, frontmatter, mode);
+  const rateLimit = validateRateLimit(frontmatter.name, frontmatter.rate_limit);
   return {
     name: frontmatter.name,
     description: frontmatter.description,
@@ -733,7 +768,8 @@ function validateSkillFrontmatter(frontmatter, systemPrompt, options = {}) {
     outputFile,
     script,
     scriptArgs,
-    scriptTimeoutMs
+    scriptTimeoutMs,
+    rateLimit
   };
 }
 function buildSkillFromParsed(parsed, skillDir, logger) {