@heybox/hb-sdk 0.8.0-alpha.2 → 0.8.0-alpha.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heybox/hb-sdk",
-  "version": "0.8.0-alpha.2",
+  "version": "0.8.0-alpha.3",
   "sideEffects": [
     "./src/index.ts",
     "./src/core/singleton.ts",
@@ -53,12 +53,16 @@
   "keywords": [],
   "author": "",
   "license": "ISC",
+  "engines": {
+    "node": ">=22.20.0"
+  },
   "dependencies": {
     "@msgpack/msgpack": "2.8.0",
     "parse5": "^7.3.0",
+    "skills": "1.5.23",
     "undici": "^7.28.0",
     "ws": "^8.18.0",
-    "@heybox/hb-sdk-protocol": "0.8.0-alpha.2"
+    "@heybox/hb-sdk-protocol": "0.8.0-alpha.3"
   },
   "peerDependencies": {
     "vite": ">=5"
@@ -108,13 +112,13 @@
     "vue-tsc": "^3.3.7",
     "vite": "^8.0.12",
     "vitest": "^3.2.4",
+    "@heybox-domain/heybox-theme": "~0.1.0",
     "@heybox-domain/heybox-vue3-ui": "~0.1.0",
+    "@heybox/hb-sdk-runtime": "~0.8.0-alpha.3",
+    "@heybox/hb-api": "~1.25.23",
     "@heybox/runtime-policy": "~0.2.0",
-    "@heybox-domain/heybox-theme": "~0.1.0",
     "@heybox/runtime-transport-fetch": "~0.2.0",
-    "@heybox/hb-api": "~1.25.23",
-    "@heybox/runtime": "~0.2.0",
-    "@heybox/hb-sdk-runtime": "~0.8.0-alpha.2"
+    "@heybox/runtime": "~0.2.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -162,7 +166,7 @@
     "build:templates": "node scripts/copy-cli-templates.cjs",
     "build:types": "tsc -p tsconfig.dts.json",
     "check:boundary": "node scripts/check-boundary.cjs",
-    "check:docs-sync": "pnpm -w exec hbexec hb-sdk check",
+    "check:docs-sync": "pnpm --filter @heybox-docs/docs-hb_sdk run check:reference && node scripts/skill/check-references.mjs && node scripts/skill/validate-skill.mjs",
     "check:compatibility-evidence": "node scripts/validate-compatibility-evidence.mjs",
     "check:api-semver": "node ../../ops/jobs/hb-sdk-docs-contract/semantic-diff.cjs",
     "clean": "rimraf ./dist && rimraf ./types",
@@ -176,6 +180,7 @@
     "test:watch": "NODE_OPTIONS='--conditions=heybox' vitest",
     "changelog:draft": "node scripts/changelog-draft.cjs",
     "check:changelog": "node scripts/check-changelog.cjs",
+    "release:verify-tarball": "node scripts/skill/verify-tarball-install.mjs",
     "test:release": "node --test scripts/release-family.test.cjs ../../ops/jobs/publish-changed-packages/publish.test.cjs ../../ops/jobs/release-hb-sdk/docs-release-contract.test.cjs",
     "test:compatibility-evidence": "node --test scripts/validate-compatibility-evidence.test.mjs",
     "release:prepare": "node scripts/release-prepare.cjs",

package/skill/SKILL.md

@@ -114,17 +114,16 @@ For host/runtime/protocol-maintenance code:
    - `cat packages/hb-sdk/DOC_SYNC_CHECKLIST.md`
 3. When preparing a package release, run `pnpm --filter @heybox/hb-sdk run release:prepare -- --bump patch` or `pnpm --filter @heybox/hb-sdk run release:prepare -- --version <x.y.z>`. The release assistant updates the Protocol/Runtime/SDK family versions, inserts `packages/hb-sdk/CHANGELOG.md`, and runs `check:changelog`. Use `--ai-command "<command>"` or `HB_SDK_CHANGELOG_AI_COMMAND` when an AI writer should rewrite the Conventional Commit draft. Review the entry for Mini-program developers and Host/Runtime integration maintainers, and do not expose Runtime internal adapter, state-machine, or security-policy details.
 4. When modifying this repo's source skill at `packages/hb-sdk/skill` and preparing distributable artifacts, also run:
-   - `node packages/hb-sdk/skill/scripts/package-skill.mjs`
+   - `node packages/hb-sdk/scripts/skill/sync-references.mjs`
+   - `node packages/hb-sdk/scripts/skill/validate-skill.mjs`
 5. When modifying CLI, local debugging, package exports, or package dependency direction, also run:
    - `pnpm --filter @heybox/hb-sdk run check:boundary`
    - `pnpm --filter @heybox/hb-sdk run test:unit`
-6. Inspect the generated zip before distribution:
-   - `unzip -l packages/hb-sdk/hb-sdk.zip | sed -n '1,120p'`
-7. When adding or modifying the deploy command or its upload pipeline, also run:
+6. When adding or modifying the deploy command or its upload pipeline, also run:
    - `pnpm --filter @heybox/hb-sdk run check:boundary`
    - `pnpm --filter @heybox/hb-sdk run test:unit`
    - Verify `dist/cli.cjs` does not have any `require('cos-nodejs-sdk-v5')` left after `build:cli`; the boundary check enforces this automatically.
-8. Verify the canonical payload before publishing:
-   - `pnpm exec hbexec hb-sdk sync`
-   - `pnpm exec hbexec hb-sdk check`
-   - For a release artifact, run `pnpm exec hbexec hb-sdk sync --out-dir <payload-dir>` and then `pnpm exec hbexec hb-sdk check-artifact --artifact-dir <payload-dir>`.
+7. Verify the canonical payload before publishing:
+   - `node packages/hb-sdk/scripts/skill/sync-references.mjs`
+   - `node packages/hb-sdk/scripts/skill/validate-skill.mjs`
+   - For a release artifact, run `npm pack --dry-run` and `node packages/hb-sdk/scripts/skill/verify-tarball-install.mjs`.

package/skill/references/api-protocol.md

@@ -1,6 +1,6 @@
 # Protocol API reference
 
-> Generated by `node packages/hb-sdk/skill/scripts/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
+> Generated by `node packages/hb-sdk/scripts/skill/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
 
 ## Sources
 
@@ -302,7 +302,7 @@ Reference 由 `@heybox/hb-sdk` 的公开导出与源码注释自动生成，不
 | Miniapp Publish API | 0 | 5 | 2 | 0 | 0 |
 | Vite API | 0 | 1 | 5 | 1 | 1 |
 
-<!-- Generated by apps/docs/hb-sdk/scripts/generate-api-docs.ts; schemaVersion=2; fingerprint=904f09f0012164f5d6b18c0f93477bb2bd541a41b99da8f270d0a40b93e96602 -->
+<!-- Generated by apps/docs/hb-sdk/scripts/generate-api-docs.ts; schemaVersion=2; fingerprint=cb985ad876f7066639ee3b72d545185f251ed6ad597b8276425e02615bb608ba -->
 
 ## SDK API
 

package/skill/references/api-root.md

@@ -1,6 +1,6 @@
 # Root API reference
 
-> Generated by `node packages/hb-sdk/skill/scripts/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
+> Generated by `node packages/hb-sdk/scripts/skill/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
 
 ## Sources
 
@@ -24,7 +24,7 @@
 ## Package metadata
 
 - Package: `@heybox/hb-sdk`
-- Version at generation time: `0.8.0-alpha.2`
+- Version at generation time: `0.8.0-alpha.3`
 - Public root export: `@heybox/hb-sdk`
 - Protocol export: `@heybox/hb-sdk/protocol`
 - Vite plugin export: `@heybox/hb-sdk/vite`

package/skill/references/cli.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-> Generated by `node packages/hb-sdk/skill/scripts/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
+> Generated by `node packages/hb-sdk/scripts/skill/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
 
 ## Sources
 
@@ -40,7 +40,8 @@ hb-sdk build [--env <name>] [--verbose]
 hb-sdk login
 hb-sdk login status
 hb-sdk login clear
-hb-sdk doctor
+hb-sdk skill install [--global] [--agent <agent>] [--all-agents] [--force]
+hb-sdk doctor [--agent <agent>] [--all-agents] [--json]
 hb-sdk remote access
 hb-sdk remote entity list
 hb-sdk remote entity current
@@ -272,8 +273,8 @@ Agent rules:
 
 Agent rules:
 
-- Use `hb-sdk doctor` for read-only diagnosis of local SDK, remote latest skill metadata, and local skill metadata.
-- Do not use `hb-sdk doctor` to auto-install skills; when installation or refresh is needed, tell the user to run `npx skills add https://open.xiaoheihe.cn/agent-skills/hb-sdk`.
-- If doctor reports `SDK_MISMATCH`, tell the user to upgrade `@heybox/hb-sdk@latest` before reinstalling the skill.
+- Use `hb-sdk doctor [--agent <agent>] [--all-agents] [--json]` for read-only diagnosis of the locally installed SDK and its bundled Skill.
+- Use `hb-sdk skill install` to install or refresh the Skill bundled with the matching npm package. Add `--global` for user scope, `--agent <agent>` for one Agent, or `--all-agents` for every supported Agent.
+- If doctor reports `SDK_MISMATCH`, upgrade the project dependency to the matching @heybox/hb-sdk version before reinstalling the skill.
 
 ## Update reminders

package/skill/references/examples.md

@@ -1,6 +1,6 @@
 # Smoke examples and anti-examples
 
-> Generated by `node packages/hb-sdk/skill/scripts/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
+> Generated by `node packages/hb-sdk/scripts/skill/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
 
 ## Sources
 

package/skill/references/llms-index.md

@@ -1,6 +1,6 @@
 # LLM documentation index
 
-> Generated by `node packages/hb-sdk/skill/scripts/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
+> Generated by `node packages/hb-sdk/scripts/skill/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
 
 ## Sources
 

package/skill/references/recipes.md

@@ -1,6 +1,6 @@
 # Recipes
 
-> Generated by `node packages/hb-sdk/skill/scripts/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
+> Generated by `node packages/hb-sdk/scripts/skill/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
 
 ## Sources
 

package/skill/references/safety-boundaries.md

@@ -1,6 +1,6 @@
 # Safety boundaries
 
-> Generated by `node packages/hb-sdk/skill/scripts/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
+> Generated by `node packages/hb-sdk/scripts/skill/sync-references.mjs` from the public hb-sdk source/docs. Do not edit by hand; update sources or this generator instead.
 
 ## Sources
 

package/skill/skill.json

@@ -1,11 +1,16 @@
 {
   "name": "hb-sdk",
-  "skillVersion": "0.8.0-alpha.2+skill.417e5072238c",
+  "skillVersion": "0.8.0-alpha.3+skill.9d9d09c2d52c",
   "sdk": {
     "package": "@heybox/hb-sdk",
-    "version": "0.8.0-alpha.2",
-    "compatibility": "0.8.0-alpha.2"
+    "version": "0.8.0-alpha.3",
+    "compatibility": "0.8.0-alpha.3"
   },
-  "source": "https://open.xiaoheihe.cn/agent-skills/hb-sdk",
-  "integrity": "sha256-417e5072238c0b2a53836824d60639046935ad28ca337a63d82016421c97127b"
+  "distribution": {
+    "type": "npm",
+    "package": "@heybox/hb-sdk",
+    "version": "0.8.0-alpha.3",
+    "path": "skill"
+  },
+  "integrity": "sha256-9d9d09c2d52ce6fca7e0ea48bcfa51bad464502d92e32e97dd0d1cad321fae52"
 }

package/types/skill-metadata.d.ts

@@ -1,6 +1,2 @@
 export declare const HB_SDK_PACKAGE_NAME = "@heybox/hb-sdk";
 export declare const HB_SDK_SKILL_NAME = "hb-sdk";
-export declare const HB_SDK_AGENT_SKILLS_BASE_URL = "https://open.xiaoheihe.cn/agent-skills";
-export declare const HB_SDK_SKILL_SOURCE = "https://open.xiaoheihe.cn/agent-skills/hb-sdk";
-export declare const HB_SDK_SKILL_INDEX_URL = "https://open.xiaoheihe.cn/agent-skills/.well-known/agent-skills/index.json";
-export declare const HB_SDK_SKILL_INSTALL_COMMAND = "npx skills add https://open.xiaoheihe.cn/agent-skills/hb-sdk";

package/dist/cli-chunks/doctor-EsCYJGhV.cjs

@@ -1,204 +0,0 @@
-'use strict';
-
-var fs$1 = require('node:fs');
-var fs = require('node:fs/promises');
-var os = require('node:os');
-var path = require('node:path');
-var index = require('./index-BL5eEPap.cjs');
-require('node:module');
-require('path');
-require('os');
-require('readline');
-require('tty');
-require('assert');
-require('events');
-require('stream');
-require('buffer');
-require('util');
-
-const DEFAULT_TIMEOUT_MS = 3000;
-const PACKAGE_JSON_CANDIDATES = [
-    path.resolve(__dirname, '..', 'package.json'),
-    path.resolve(__dirname, '..', '..', 'package.json'),
-    path.resolve(__dirname, '..', '..', '..', 'package.json'),
-];
-async function runDoctorCommand(runtime = {}) {
-    const logger = runtime.logger ?? index.createCliLogger();
-    const result = await logger.task('正在检查 Agent Skill 元数据', () => getDoctorResult(runtime), {
-        successText: 'Agent Skill 检查完成',
-    });
-    printDoctorResult(result, logger);
-    printDoctorNextStep(result, logger);
-    return result;
-}
-async function getDoctorResult(runtime = {}) {
-    const currentSdkVersion = await readCurrentSdkVersion(runtime.packageJsonFiles);
-    const localSkillJsonPath = await resolveLocalSkillJsonPath(runtime);
-    let remoteSkill;
-    try {
-        remoteSkill = await fetchRemoteSkill(runtime);
-    }
-    catch {
-        return {
-            currentSdkVersion,
-            localSkillJsonPath,
-            status: 'REMOTE_UNAVAILABLE',
-        };
-    }
-    if (remoteSkill?.sdk?.version !== currentSdkVersion) {
-        return {
-            currentSdkVersion,
-            localSkillJsonPath,
-            remoteSkill,
-            status: 'SDK_MISMATCH',
-        };
-    }
-    const localSkill = await readLocalSkillManifest(localSkillJsonPath);
-    if (!localSkill.exists) {
-        return {
-            currentSdkVersion,
-            localSkillJsonPath,
-            remoteSkill,
-            status: 'SKILL_MISSING',
-        };
-    }
-    if (!localSkill.manifest ||
-        localSkill.manifest.name !== index.HB_SDK_SKILL_NAME ||
-        localSkill.manifest.skillVersion !== remoteSkill.version ||
-        localSkill.manifest.sdk?.version !== remoteSkill.sdk?.version) {
-        return {
-            currentSdkVersion,
-            localSkillJsonPath,
-            localSkillVersion: localSkill.manifest?.skillVersion,
-            remoteSkill,
-            status: 'SKILL_OUTDATED',
-        };
-    }
-    return {
-        currentSdkVersion,
-        localSkillJsonPath,
-        localSkillVersion: localSkill.manifest.skillVersion,
-        remoteSkill,
-        status: 'OK',
-    };
-}
-function printDoctorResult(result, logger) {
-    logger.section('Doctor');
-    logger.info(`SDK version: ${result.currentSdkVersion}`);
-    logger.info(`Remote skill: ${result.remoteSkill?.version ? `${result.remoteSkill.version} (sdk ${result.remoteSkill.sdk?.version ?? 'unknown'})` : 'unavailable'}`);
-    logger.info(`Local skill: ${result.localSkillVersion ?? 'missing'}`);
-    logger.debug(`Local skill path: ${result.localSkillJsonPath}`);
-    logger.info(`Status: ${result.status}`);
-}
-function printDoctorNextStep(result, logger) {
-    if (result.status === 'OK') {
-        logger.success('Skill is up to date.');
-        return;
-    }
-    if (result.status === 'SDK_MISMATCH') {
-        logger.warn(`Current SDK does not match the latest skill metadata. Upgrade with: npm i -D ${index.HB_SDK_PACKAGE_NAME}@latest`);
-        logger.info(`Then install or refresh the skill manually: ${formatSkillInstallCommand(result)}`);
-        return;
-    }
-    if (result.status === 'REMOTE_UNAVAILABLE') {
-        logger.warn('Remote skill metadata is unavailable. Try again later.');
-        logger.info(`Manual install command: ${index.HB_SDK_SKILL_INSTALL_COMMAND}`);
-        return;
-    }
-    logger.info(`Install or refresh the skill manually: ${formatSkillInstallCommand(result)}`);
-}
-function formatSkillInstallCommand(result) {
-    return `npx skills add ${result.remoteSkill?.source || index.HB_SDK_SKILL_SOURCE}`;
-}
-async function fetchRemoteSkill(runtime) {
-    const fetchImpl = runtime.fetchImpl ?? fetch;
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), runtime.timeoutMs ?? DEFAULT_TIMEOUT_MS);
-    try {
-        const response = await fetchImpl(runtime.remoteIndexUrl ?? index.HB_SDK_SKILL_INDEX_URL, {
-            headers: {
-                accept: 'application/json',
-            },
-            signal: controller.signal,
-        });
-        if (!response.ok) {
-            throw new Error(`remote skill index returned ${response.status}`);
-        }
-        const index$1 = (await response.json());
-        const skill = index$1.skills?.find(item => item.name === index.HB_SDK_SKILL_NAME);
-        if (!skill?.version || skill.sdk?.package !== index.HB_SDK_PACKAGE_NAME || !skill.sdk.version) {
-            throw new Error('remote hb-sdk skill metadata is incomplete');
-        }
-        return skill;
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-}
-async function readLocalSkillManifest(skillJsonPath) {
-    if (!(await pathExists(skillJsonPath))) {
-        return {
-            exists: false,
-        };
-    }
-    try {
-        return {
-            exists: true,
-            manifest: JSON.parse(await fs.readFile(skillJsonPath, 'utf8')),
-        };
-    }
-    catch {
-        return {
-            exists: true,
-        };
-    }
-}
-async function readCurrentSdkVersion(packageJsonCandidates = PACKAGE_JSON_CANDIDATES) {
-    for (const candidate of packageJsonCandidates) {
-        if (!(await pathExists(candidate))) {
-            continue;
-        }
-        const packageJson = JSON.parse(await fs.readFile(candidate, 'utf8'));
-        if (typeof packageJson.version === 'string' && packageJson.version) {
-            return packageJson.version;
-        }
-    }
-    throw new Error('未能读取 @heybox/hb-sdk 当前版本号');
-}
-async function resolveLocalSkillJsonPath(runtime) {
-    if (runtime.localSkillJsonPath) {
-        return runtime.localSkillJsonPath;
-    }
-    const projectSkillJsonPath = await findProjectSkillJsonPath(runtime.cwd ?? process.cwd());
-    if (projectSkillJsonPath) {
-        return projectSkillJsonPath;
-    }
-    const codexHome = runtime.codexHome ?? runtime.env?.CODEX_HOME ?? process.env.CODEX_HOME ?? path.join(os.homedir(), '.codex');
-    return path.join(codexHome, 'skills', index.HB_SDK_SKILL_NAME, 'skill.json');
-}
-async function findProjectSkillJsonPath(startDir) {
-    let current = path.resolve(startDir);
-    while (true) {
-        const skillJsonPath = path.join(current, '.agents', 'skills', index.HB_SDK_SKILL_NAME, 'skill.json');
-        if ((await pathExists(path.join(current, 'package.json'))) && (await pathExists(skillJsonPath))) {
-            return skillJsonPath;
-        }
-        const parent = path.dirname(current);
-        if (parent === current) {
-            return undefined;
-        }
-        current = parent;
-    }
-}
-async function pathExists(filePath) {
-    try {
-        await fs.access(filePath, fs$1.constants.F_OK);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-
-exports.getDoctorResult = getDoctorResult;
-exports.runDoctorCommand = runDoctorCommand;

package/skill/scripts/check-references.mjs

@@ -1,14 +0,0 @@
-#!/usr/bin/env node
-import { spawnSync } from 'node:child_process';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import process from 'node:process';
-
-const scriptPath = path.join(path.dirname(fileURLToPath(import.meta.url)), 'sync-references.mjs');
-const result = spawnSync(process.execPath, [scriptPath, '--check'], {
-  cwd: process.cwd(),
-  encoding: 'utf8',
-  stdio: 'inherit',
-});
-
-process.exit(result.status ?? 1);

package/skill/scripts/markdown-sections.mjs

@@ -1,36 +0,0 @@
-export function extractSection(markdown, heading) {
-  const lines = markdown.split('\n');
-  const start = lines.findIndex((line) => line.trim() === heading);
-  if (start === -1) return '';
-  const level = heading.match(/^#+/)?.[0].length ?? 2;
-  const out = [lines[start]];
-  let fenceChar = '';
-  for (let index = start + 1; index < lines.length; index += 1) {
-    const line = lines[index];
-    const fenceMatch = line.match(/^\s*(`{3,}|~{3,})/);
-
-    if (fenceChar) {
-      out.push(line);
-      if (fenceMatch?.[1]?.startsWith(fenceChar)) fenceChar = '';
-      continue;
-    }
-
-    if (fenceMatch) {
-      fenceChar = fenceMatch[1][0];
-      out.push(line);
-      continue;
-    }
-
-    const headingMatch = line.match(/^(#+)\s/);
-    if (headingMatch && headingMatch[1].length <= level) break;
-    out.push(line);
-  }
-  return out.join('\n').trimEnd();
-}
-
-export function replaceRequiredSection(markdown, heading, replacement) {
-  const section = extractSection(markdown, heading);
-  if (!section) throw new Error(`sync-references: 未找到待覆盖章节 ${heading}`);
-  const start = markdown.indexOf(section);
-  return `${markdown.slice(0, start)}${replacement.trimEnd()}${markdown.slice(start + section.length)}`;
-}

package/skill/scripts/package-skill.mjs

@@ -1,60 +0,0 @@
-#!/usr/bin/env node
-import { cpSync, existsSync, mkdtempSync, rmSync } from 'node:fs';
-import { spawnSync } from 'node:child_process';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import process from 'node:process';
-import { HB_SDK_SKILL_NAME } from './skill-metadata.mjs';
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const skillDir = path.resolve(scriptDir, '..');
-const packageRoot = path.resolve(skillDir, '..');
-const skillName = HB_SDK_SKILL_NAME;
-const repoRoot = findRepoRoot(process.cwd()) ?? packageRoot;
-const zipPath = path.join(packageRoot, `${skillName}.zip`);
-
-function findRepoRoot(startDir) {
-  let dir = path.resolve(startDir);
-  while (true) {
-    if (existsSync(path.join(dir, 'package.json')) && existsSync(path.join(dir, 'packages/hb-sdk/package.json'))) {
-      return dir;
-    }
-    const parent = path.dirname(dir);
-    if (parent === dir) return null;
-    dir = parent;
-  }
-}
-
-if (!existsSync(path.join(skillDir, 'SKILL.md'))) {
-  console.error(`Missing ${path.relative(repoRoot, path.join(skillDir, 'SKILL.md'))}.`);
-  process.exit(1);
-}
-
-if (existsSync(zipPath)) rmSync(zipPath);
-
-const tempRoot = mkdtempSync(path.join(tmpdir(), 'hb-sdk-skill-'));
-const packagedSkillRoot = path.join(tempRoot, skillName);
-
-try {
-  cpSync(skillDir, packagedSkillRoot, { recursive: true });
-
-  const result = spawnSync(
-    'zip',
-    ['-r', zipPath, skillName, '-x', `${skillName}/README.md`, '-x', `${skillName}/**/.DS_Store`],
-    {
-      cwd: tempRoot,
-      encoding: 'utf8',
-    },
-  );
-
-  if (result.status !== 0) {
-    process.stderr.write(result.stderr || result.stdout);
-    process.exit(result.status ?? 1);
-  }
-
-  console.error(result.stdout.trim());
-  console.log(JSON.stringify({ ok: true, zip: path.relative(repoRoot, zipPath).split(path.sep).join('/') }));
-} finally {
-  rmSync(tempRoot, { recursive: true, force: true });
-}

package/skill/scripts/package-skill.sh

@@ -1,6 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-echo "Packaging hb-sdk skill" >&2
-node "$SCRIPT_DIR/package-skill.mjs"

package/skill/scripts/skill-metadata.mjs

@@ -1,77 +0,0 @@
-import { createHash } from 'node:crypto';
-
-export const HB_SDK_SKILL_NAME = 'hb-sdk';
-export const HB_SDK_PACKAGE_NAME = '@heybox/hb-sdk';
-export const HB_SDK_AGENT_SKILLS_BASE_URL = 'https://open.xiaoheihe.cn/agent-skills';
-export const HB_SDK_SKILL_SOURCE = `${HB_SDK_AGENT_SKILLS_BASE_URL}/${HB_SDK_SKILL_NAME}`;
-export const HB_SDK_SKILL_INDEX_URL = `${HB_SDK_AGENT_SKILLS_BASE_URL}/.well-known/agent-skills/index.json`;
-export const HB_SDK_SKILL_INSTALL_COMMAND = `npx skills add ${HB_SDK_SKILL_SOURCE}`;
-
-export function createSkillContentHash(fileEntries) {
-  const hash = createHash('sha256');
-
-  for (const entry of [...fileEntries].sort((left, right) => left.path.localeCompare(right.path))) {
-    hash.update(entry.path);
-    hash.update('\0');
-    hash.update(entry.content);
-    hash.update('\0');
-  }
-
-  return {
-    hex: hash.digest('hex'),
-  };
-}
-
-export function createSkillManifest({ contentHash, sdkVersion }) {
-  const shortHash = contentHash.hex.slice(0, 12);
-
-  return {
-    name: HB_SDK_SKILL_NAME,
-    skillVersion: `${sdkVersion}+skill.${shortHash}`,
-    sdk: {
-      package: HB_SDK_PACKAGE_NAME,
-      version: sdkVersion,
-      compatibility: sdkVersion,
-    },
-    source: HB_SDK_SKILL_SOURCE,
-    integrity: `sha256-${contentHash.hex}`,
-  };
-}
-
-export function validateSkillManifest({ manifest, sdkVersion }) {
-  const errors = [];
-
-  if (manifest?.name !== HB_SDK_SKILL_NAME) {
-    errors.push(`skill.json name must be \`${HB_SDK_SKILL_NAME}\`.`);
-  }
-
-  if (manifest?.sdk?.package !== HB_SDK_PACKAGE_NAME) {
-    errors.push(`skill.json sdk.package must be \`${HB_SDK_PACKAGE_NAME}\`.`);
-  }
-
-  if (manifest?.sdk?.version !== sdkVersion) {
-    errors.push('skill.json sdk.version must match packages/hb-sdk/package.json version.');
-  }
-
-  if (manifest?.sdk?.compatibility !== sdkVersion) {
-    errors.push('skill.json sdk.compatibility must match packages/hb-sdk/package.json version.');
-  }
-
-  if (typeof manifest?.skillVersion !== 'string' || !manifest.skillVersion.startsWith(`${sdkVersion}+skill.`)) {
-    errors.push('skill.json skillVersion must be derived from the current SDK version.');
-  }
-
-  if (manifest?.source !== HB_SDK_SKILL_SOURCE) {
-    errors.push('skill.json source must be the public hb-sdk skill URL.');
-  }
-
-  if (typeof manifest?.integrity !== 'string' || !/^sha256-[0-9a-f]{64}$/.test(manifest.integrity)) {
-    errors.push('skill.json integrity must be a sha256 hex digest.');
-  }
-
-  return errors;
-}
-
-export function normalizeSkillManifest(manifest) {
-  return `${JSON.stringify(manifest, null, 2)}\n`;
-}