@lemoncat7/dsh-partner 1.4.2 → 1.5.1

package/lib/skills/network.d.ts

@@ -0,0 +1,14 @@
+export interface RemoteTextRequest {
+    url: string;
+    maxBytes: number;
+    timeoutMs: number;
+    method?: string;
+    headers?: HeadersInit;
+    body?: string;
+    proxyUrl?: string;
+}
+/** A bounded HTTP client used by both market discovery and package installs. */
+export declare function requestRemoteText(input: RemoteTextRequest): Promise<string>;
+export declare function requestRemoteBytes(input: RemoteTextRequest): Promise<Uint8Array>;
+export declare function normalizeProxyUrl(value: unknown): string | undefined;
+//# sourceMappingURL=network.d.ts.map

package/lib/skills/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/skills/network.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,gFAAgF;AAChF,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAIhF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAQpE"}

package/lib/skills/network.js

@@ -0,0 +1,174 @@
+import { request as httpRequest } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+import { connect as tlsConnect } from 'node:tls';
+const MAX_REDIRECTS = 5;
+/** A bounded HTTP client used by both market discovery and package installs. */
+export async function requestRemoteText(input) {
+    return new TextDecoder().decode(await requestRemoteBytes(input));
+}
+export function requestRemoteBytes(input) {
+    return input.proxyUrl
+        ? requestThroughHttpProxy(input, 0)
+        : requestDirect(input);
+}
+export function normalizeProxyUrl(value) {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    if (typeof value !== 'string')
+        throw new Error('proxyUrl must be a string');
+    const proxy = new URL(value.trim());
+    if (proxy.protocol !== 'http:')
+        throw new Error('Skill 市场代理目前仅支持 http:// 地址');
+    if (proxy.username || proxy.password)
+        throw new Error('Skill 市场代理地址不能包含账号或密码');
+    if (proxy.pathname !== '/' || proxy.search || proxy.hash)
+        throw new Error('Skill 市场代理地址不能包含路径、查询参数或片段');
+    return proxy.toString();
+}
+async function requestDirect(input) {
+    const response = await fetch(input.url, {
+        ...(input.method ? { method: input.method } : {}),
+        ...(input.headers ? { headers: input.headers } : {}),
+        ...(input.body !== undefined ? { body: input.body } : {}),
+        signal: AbortSignal.timeout(input.timeoutMs),
+    });
+    if (!response.ok)
+        throw new Error(`HTTP ${response.status} while fetching ${new URL(input.url).host}`);
+    const advertised = Number(response.headers.get('content-length') ?? 0);
+    if (advertised > input.maxBytes)
+        throw new Error('Remote content exceeds the size limit');
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    if (bytes.byteLength > input.maxBytes)
+        throw new Error('Remote content exceeds the size limit');
+    return bytes;
+}
+async function requestThroughHttpProxy(input, redirects) {
+    if (redirects > MAX_REDIRECTS)
+        throw new Error('Skill market request exceeded the redirect limit');
+    const target = new URL(input.url);
+    const proxy = new URL(normalizeProxyUrl(input.proxyUrl));
+    const response = target.protocol === 'https:'
+        ? await tunnelHttps(target, proxy, input)
+        : await proxyHttp(target, proxy, input);
+    const location = response.headers.location;
+    if (location && [301, 302, 303, 307, 308].includes(response.statusCode ?? 0)) {
+        response.resume();
+        const switchToGet = response.statusCode === 303 || ((response.statusCode === 301 || response.statusCode === 302) && input.method === 'POST');
+        if (switchToGet) {
+            const { body: _body, method: _method, ...rest } = input;
+            return requestThroughHttpProxy({ ...rest, method: 'GET', url: new URL(location, target).toString() }, redirects + 1);
+        }
+        return requestThroughHttpProxy({ ...input, url: new URL(location, target).toString() }, redirects + 1);
+    }
+    return readBounded(response, input.maxBytes, target.host);
+}
+function proxyHttp(target, proxy, input) {
+    const headers = requestHeaders(input.headers, target.host, input.body);
+    return issue(httpRequest, {
+        hostname: proxy.hostname,
+        port: proxy.port || 80,
+        method: input.method ?? 'GET',
+        path: target.toString(),
+        headers,
+    }, input.body, input.timeoutMs);
+}
+function tunnelHttps(target, proxy, input) {
+    return new Promise((resolve, reject) => {
+        const targetPort = Number(target.port || 443);
+        const connectRequest = httpRequest({
+            hostname: proxy.hostname,
+            port: proxy.port || 80,
+            method: 'CONNECT',
+            path: `${target.hostname}:${targetPort}`,
+            headers: { host: `${target.hostname}:${targetPort}` },
+        });
+        const fail = (error) => reject(networkError(error));
+        connectRequest.setTimeout(input.timeoutMs, () => connectRequest.destroy(new Error('Skill market proxy connection timed out')));
+        connectRequest.on('error', fail);
+        connectRequest.once('connect', (response, socket, head) => {
+            if (response.statusCode !== 200) {
+                socket.destroy();
+                reject(new Error(`Skill market proxy CONNECT returned HTTP ${response.statusCode ?? 0}`));
+                return;
+            }
+            // CONNECT exposes the underlying socket separately from the TLS wrapper.
+            // Some proxies reset that raw socket during package downloads; keep an
+            // error consumer attached for the socket's full lifetime so a failed
+            // install cannot become an uncaught process-level error.
+            socket.on('error', fail);
+            if (head.byteLength > 0)
+                socket.unshift(head);
+            const secureSocket = tlsConnect({ socket, servername: target.hostname });
+            secureSocket.setTimeout(input.timeoutMs, () => secureSocket.destroy(new Error('Skill market TLS connection timed out')));
+            secureSocket.on('error', fail);
+            secureSocket.once('secureConnect', () => {
+                const headers = requestHeaders(input.headers, target.host, input.body);
+                void issue(httpsRequest, {
+                    hostname: target.hostname,
+                    port: targetPort,
+                    method: input.method ?? 'GET',
+                    path: `${target.pathname}${target.search}`,
+                    headers,
+                    agent: false,
+                    createConnection: () => secureSocket,
+                }, input.body, input.timeoutMs).then(resolve, reject);
+            });
+        });
+        connectRequest.end();
+    });
+}
+function issue(request, options, body, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const outgoing = request(options, resolve);
+        outgoing.setTimeout(timeoutMs, () => outgoing.destroy(new Error('Skill market request timed out')));
+        outgoing.on('error', error => reject(networkError(error)));
+        if (body)
+            outgoing.write(body);
+        outgoing.end();
+    });
+}
+function requestHeaders(value, host, body) {
+    const headers = Object.fromEntries(new Headers(value).entries());
+    headers.host = host;
+    if (body !== undefined)
+        headers['content-length'] = String(Buffer.byteLength(body));
+    return headers;
+}
+function readBounded(response, limit, host) {
+    return new Promise((resolve, reject) => {
+        if ((response.statusCode ?? 0) < 200 || (response.statusCode ?? 0) >= 300) {
+            response.resume();
+            reject(new Error(`HTTP ${response.statusCode ?? 0} while fetching ${host}`));
+            return;
+        }
+        const advertised = Number(response.headers['content-length'] ?? 0);
+        if (advertised > limit) {
+            response.destroy();
+            reject(new Error('Remote content exceeds the size limit'));
+            return;
+        }
+        const chunks = [];
+        let total = 0;
+        response.on('data', (chunk) => {
+            total += chunk.byteLength;
+            if (total > limit) {
+                response.destroy(new Error('Remote content exceeds the size limit'));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        response.once('end', () => resolve(Buffer.concat(chunks)));
+        response.on('error', error => reject(networkError(error)));
+    });
+}
+function networkError(error) {
+    const code = error?.code;
+    if (code === 'ECONNRESET')
+        return new Error('Skill 市场代理连接被中断，请检查代理后重试');
+    if (code === 'ECONNREFUSED')
+        return new Error('无法连接 Skill 市场代理，请确认地址和端口可用');
+    if (code === 'ENOTFOUND')
+        return new Error('无法解析 Skill 市场或代理地址，请检查网络配置');
+    return error instanceof Error ? error : new Error(String(error));
+}
+//# sourceMappingURL=network.js.map

package/lib/skills/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/skills/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,WAAW,EAA6C,MAAM,WAAW,CAAA;AAC7F,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAA;AACpD,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,UAAU,CAAA;AAEhD,MAAM,aAAa,GAAG,CAAC,CAAA;AAYvB,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAwB;IAC9D,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,OAAO,KAAK,CAAC,QAAQ;QACnB,CAAC,CAAC,uBAAuB,CAAC,KAAK,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC3E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IACnC,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC7E,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC9E,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACvG,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAA;AACzB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAwB;IACnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE;QACtC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;KAC7C,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,mBAAmB,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACtG,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAA;IACtE,IAAI,UAAU,GAAG,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACzF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IAC1D,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC/F,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAAwB,EAAE,SAAiB;IAChF,IAAI,SAAS,GAAG,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IAClG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAE,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAC3C,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC;QACzC,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAA;IAC1C,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;QAC7E,QAAQ,CAAC,MAAM,EAAE,CAAA;QACjB,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;QAC5I,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAA;YACvD,OAAO,uBAAuB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;QACtH,CAAC;QACD,OAAO,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;IACxG,CAAC;IACD,OAAO,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,MAAW,EAAE,KAAU,EAAE,KAAwB;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;IACtE,OAAO,KAAK,CAAC,WAAW,EAAE;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;QAC7B,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,OAAO;KACR,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,MAAW,EAAE,KAAU,EAAE,KAAwB;IACpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAA;QAC7C,MAAM,cAAc,GAAG,WAAW,CAAC;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,UAAU,EAAE;YACxC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,UAAU,EAAE,EAAE;SACtD,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;QAClE,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC,CAAA;QAC9H,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAChC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YACxD,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAChC,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,QAAQ,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;gBACzF,OAAM;YACR,CAAC;YACD,yEAAyE;YACzE,uEAAuE;YACvE,qEAAqE;YACrE,yDAAyD;YACzD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACxB,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC;gBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;YACxE,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAA;YACxH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC9B,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE;gBACtC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gBACtE,KAAK,KAAK,CAAC,YAAY,EAAE;oBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;oBAC7B,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE;oBAC1C,OAAO;oBACP,KAAK,EAAE,KAAK;oBACZ,gBAAgB,EAAE,GAAG,EAAE,CAAC,YAAY;iBACrC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACvD,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,cAAc,CAAC,GAAG,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,KAAK,CACZ,OAA2B,EAC3B,OAAuB,EACvB,IAAwB,EACxB,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC1C,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAA;QACnG,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC1D,IAAI,IAAI;YAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,QAAQ,CAAC,GAAG,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B,EAAE,IAAY,EAAE,IAAwB;IAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAChE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAA;IACnB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;IACnF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,QAAyB,EAAE,KAAa,EAAE,IAAY;IACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;YAC1E,QAAQ,CAAC,MAAM,EAAE,CAAA;YACjB,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,UAAU,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAA;YAC5E,OAAM;QACR,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAA;QAClE,IAAI,UAAU,GAAG,KAAK,EAAE,CAAC;YACvB,QAAQ,CAAC,OAAO,EAAE,CAAA;YAClB,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAA;YAC1D,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACpC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;YACzB,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAClB,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAA;gBACpE,OAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC1D,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAA;IAC/D,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACvE,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC3E,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACxE,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC"}

package/lib/skills/repository.d.ts

@@ -0,0 +1,17 @@
+import type { LoadedSkill, PartnerSkill, SkillSourceKind } from './domain.js';
+export declare class SkillRepository {
+    readonly root: string;
+    constructor(root: string);
+    initialize(): Promise<void>;
+    read(skill: PartnerSkill): Promise<LoadedSkill>;
+    install(input: {
+        id: string;
+        document: string;
+        source: SkillSourceKind;
+        sourceId?: string;
+        trusted: boolean;
+        now?: number;
+    }): Promise<PartnerSkill>;
+    remove(skill: PartnerSkill): Promise<void>;
+}
+//# sourceMappingURL=repository.d.ts.map

package/lib/skills/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/skills/repository.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAI7E,qBAAa,eAAe;IACd,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;IAE3B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAQ/C,OAAO,CAAC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,eAAe,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IA+BnJ,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAKjD"}

package/lib/skills/repository.js

@@ -0,0 +1,76 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, rename, rm, writeFile } from 'node:fs/promises';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { loadSkill, skillMetadata } from './loader.js';
+const SAFE_ID = /^[a-z0-9][a-z0-9._-]{0,119}$/i;
+export class SkillRepository {
+    root;
+    constructor(root) {
+        this.root = root;
+    }
+    async initialize() {
+        await mkdir(this.root, { recursive: true, mode: 0o700 });
+    }
+    async read(skill) {
+        assertInside(this.root, skill.rootPath);
+        return loadSkill({
+            id: skill.id, rootPath: skill.rootPath, source: skill.source, ...(skill.sourceId ? { sourceId: skill.sourceId } : {}),
+            trusted: skill.trusted, installedAt: skill.installedAt, updatedAt: skill.updatedAt,
+        });
+    }
+    async install(input) {
+        if (!SAFE_ID.test(input.id))
+            throw new Error('Skill id is invalid');
+        if (Buffer.byteLength(input.document) > 512 * 1024)
+            throw new Error('SKILL.md exceeds the 512 KiB limit');
+        await this.initialize();
+        const now = input.now ?? Date.now();
+        const target = join(this.root, input.id);
+        const temporary = join(this.root, `.${input.id}.${randomUUID()}.tmp`);
+        const backup = join(this.root, `.${input.id}.${randomUUID()}.backup`);
+        await mkdir(temporary, { recursive: false, mode: 0o700 });
+        try {
+            await writeFile(join(temporary, 'SKILL.md'), input.document, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+            const loaded = await loadSkill({
+                id: input.id, rootPath: temporary, source: input.source, ...(input.sourceId ? { sourceId: input.sourceId } : {}),
+                trusted: input.trusted, installedAt: now, updatedAt: now,
+            });
+            let replaced = false;
+            try {
+                await rename(target, backup);
+                replaced = true;
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+            try {
+                await rename(temporary, target);
+            }
+            catch (error) {
+                if (replaced)
+                    await rename(backup, target).catch(() => { });
+                throw error;
+            }
+            await rm(backup, { recursive: true, force: true });
+            return { ...skillMetadata(loaded), rootPath: target };
+        }
+        finally {
+            await rm(temporary, { recursive: true, force: true }).catch(() => { });
+        }
+    }
+    async remove(skill) {
+        assertInside(this.root, skill.rootPath);
+        await rm(skill.rootPath, { recursive: true, force: true });
+    }
+}
+function assertInside(root, path) {
+    const base = resolve(root);
+    const candidate = resolve(path);
+    const rel = relative(base, candidate);
+    if (rel === '..' || rel.startsWith(`..${sep}`) || isAbsolute(rel))
+        throw new Error('Skill path escapes the repository');
+    if (dirname(candidate) !== base)
+        throw new Error('Skill path must be a direct repository child');
+}
+//# sourceMappingURL=repository.js.map

package/lib/skills/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/skills/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAGtD,MAAM,OAAO,GAAG,+BAA+B,CAAA;AAE/C,MAAM,OAAO,eAAe;IACL;IAArB,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAErC,KAAK,CAAC,UAAU;QACd,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAmB;QAC5B,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvC,OAAO,SAAS,CAAC;YACf,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrH,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;SACnF,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAmH;QAC/H,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACnE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,GAAG,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACzG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAA;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE,SAAS,CAAC,CAAA;QACrE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACzD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3G,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;gBAC7B,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChH,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;aACzD,CAAC,CAAA;YACF,IAAI,QAAQ,GAAG,KAAK,CAAA;YACpB,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAA;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACnE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAA;YACrE,CAAC;YACD,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YAAC,CAAC;YACvC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,QAAQ;oBAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAC1D,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAClD,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;QACvD,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACvE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAmB;QAC9B,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;CAEF;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACrC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACvH,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;AAClG,CAAC"}

package/lib/skills/service.d.ts

@@ -0,0 +1,48 @@
+import type { Companion, PartnerState } from '../domain.js';
+import type { PartnerStore } from '../store.js';
+import type { LoadedSkill, MarketSkillEntry, PartnerSkill, SkillMarketSource } from './domain.js';
+import { SkillRepository } from './repository.js';
+export declare class SkillService {
+    private readonly store;
+    readonly repository: SkillRepository;
+    private readonly cache;
+    private readonly mutations;
+    constructor(store: PartnerStore, repository: SkillRepository);
+    initialize(): Promise<void>;
+    bindings(companionId: string, state?: Pick<PartnerState, 'skills' | 'skillBindings'>): PartnerSkill[];
+    load(skillId: string): Promise<LoadedSkill>;
+    installLocal(document: string, id?: string): Promise<PartnerSkill>;
+    private installLocalLocked;
+    uninstall(skillId: string): Promise<void>;
+    private uninstallLocked;
+    setBinding(companionId: string, skillId: string, enabled: boolean): Promise<void>;
+    addMarketSource(input: unknown): Promise<SkillMarketSource>;
+    removeMarketSource(sourceId: string): Promise<void>;
+    networkSettings(): {
+        proxyUrl?: string;
+    };
+    setNetworkSettings(input: unknown): Promise<{
+        proxyUrl?: string;
+    }>;
+    testNetwork(input: unknown): Promise<{
+        ok: true;
+        latencyMs: number;
+        sourceCount: number;
+        entryCount: number;
+    }>;
+    market(force?: boolean): Promise<{
+        sources: SkillMarketSource[];
+        entries: MarketSkillEntry[];
+        errors: Array<{
+            sourceId: string;
+            error: string;
+        }>;
+    }>;
+    installMarket(sourceId: string, entryId: string): Promise<PartnerSkill>;
+    private installMarketLocked;
+    private loadMarket;
+    private fetchMarket;
+    private assertInstallCapacity;
+}
+export declare function renderEnabledSkills(companion: Companion, skills: PartnerSkill[], injectedIds?: ReadonlySet<string>): string;
+//# sourceMappingURL=service.d.ts.map

package/lib/skills/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/skills/service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG/C,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAEjG,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAYjD,qBAAa,YAAY;IAIX,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAgB,QAAQ,CAAC,UAAU,EAAE,eAAe;IAHtF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;gBAErB,KAAK,EAAE,YAAY,EAAW,UAAU,EAAE,eAAe;IAEhF,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAejC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,eAAe,CAAyB,GAAG,YAAY,EAAE;IAKtH,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQ3C,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;YAI1D,kBAAkB;IAU1B,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAIjC,eAAe;IAUvB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjF,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAe3D,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASzD,eAAe,IAAI;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;IAIlC,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQlE,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAc9G,MAAM,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAAC,OAAO,EAAE,gBAAgB,EAAE,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAWjJ,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;YAI/D,mBAAmB;YA6BnB,UAAU;YAQV,WAAW;IAMzB,OAAO,CAAC,qBAAqB;CAI9B;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,WAAW,GAAE,WAAW,CAAC,MAAM,CAAa,GAAG,MAAM,CAMtI"}

package/lib/skills/service.js

@@ -0,0 +1,248 @@
+import { randomUUID } from 'node:crypto';
+import { optionalBoolean, requiredText } from '../core/validation.js';
+import { AsyncSemaphore } from '../core/semaphore.js';
+import { sha256 } from './loader.js';
+import { BUILTIN_SKILLS, BUILTIN_SKILL_SOURCE } from './builtin.js';
+import { marketRequest, parseMarketResponse } from './markets/adapters.js';
+import { extractSkillMarkdown } from './zip.js';
+import { normalizeProxyUrl, requestRemoteBytes, requestRemoteText } from './network.js';
+const MARKET_CACHE_MS = 5 * 60_000;
+const MAX_MARKET_BYTES = 1024 * 1024;
+const MAX_SKILL_BYTES = 512 * 1024;
+export class SkillService {
+    store;
+    repository;
+    cache = new Map();
+    mutations = new AsyncSemaphore(1);
+    constructor(store, repository) {
+        this.store = store;
+        this.repository = repository;
+    }
+    async initialize() {
+        await this.repository.initialize();
+        const replacements = [];
+        for (const skill of this.store.snapshot().skills) {
+            if (skill.source !== 'builtin')
+                continue;
+            const builtin = BUILTIN_SKILLS.get(skill.id);
+            if (!builtin || skill.checksum === sha256(builtin.document))
+                continue;
+            replacements.push(await this.repository.install({ id: skill.id, document: builtin.document, source: 'builtin', sourceId: BUILTIN_SKILL_SOURCE, trusted: true }));
+        }
+        if (replacements.length > 0)
+            await this.store.update(state => {
+                const byId = new Map(replacements.map(skill => [skill.id, skill]));
+                state.skills = state.skills.map(skill => byId.get(skill.id) ?? skill);
+            });
+    }
+    bindings(companionId, state = this.store.snapshot()) {
+        const enabled = new Set(state.skillBindings.filter(item => item.companionId === companionId && item.enabled).map(item => item.skillId));
+        return state.skills.filter(item => enabled.has(item.id));
+    }
+    async load(skillId) {
+        const skill = this.store.snapshot().skills.find(item => item.id === skillId);
+        if (!skill)
+            throw new Error('Skill is not installed');
+        const loaded = await this.repository.read(skill);
+        if (loaded.checksum !== skill.checksum)
+            throw new Error('Skill content changed outside the installer; reinstall it before use');
+        return loaded;
+    }
+    async installLocal(document, id) {
+        return this.mutations.use(() => this.installLocalLocked(document, id));
+    }
+    async installLocalLocked(document, id) {
+        const skillId = id ? requiredText(id, 'skill id', 120) : `skill-${randomUUID()}`;
+        this.assertInstallCapacity(skillId);
+        const installed = await this.repository.install({ id: skillId, document, source: 'local', trusted: true });
+        await this.store.update(state => {
+            state.skills = [...state.skills.filter(item => item.id !== installed.id), installed];
+        });
+        return installed;
+    }
+    async uninstall(skillId) {
+        return this.mutations.use(() => this.uninstallLocked(skillId));
+    }
+    async uninstallLocked(skillId) {
+        const skill = this.store.snapshot().skills.find(item => item.id === skillId);
+        if (!skill)
+            throw new Error('Skill is not installed');
+        await this.store.update(state => {
+            state.skills = state.skills.filter(item => item.id !== skillId);
+            state.skillBindings = state.skillBindings.filter(item => item.skillId !== skillId);
+        });
+        await this.repository.remove(skill);
+    }
+    async setBinding(companionId, skillId, enabled) {
+        const state = this.store.snapshot();
+        if (!state.companions.some(item => item.id === companionId))
+            throw new Error('Companion does not exist');
+        if (!state.skills.some(item => item.id === skillId))
+            throw new Error('Skill is not installed');
+        await this.store.update(draft => {
+            draft.skillBindings = draft.skillBindings.filter(item => !(item.companionId === companionId && item.skillId === skillId));
+            draft.skillBindings.push({ companionId, skillId, enabled });
+        });
+    }
+    async addMarketSource(input) {
+        const value = input;
+        const indexUrl = validHttpUrl(requiredText(value.indexUrl, 'indexUrl', 2000));
+        const now = Date.now();
+        const source = {
+            id: `market-${randomUUID()}`, name: requiredText(value.name, 'name', 100), kind: 'dsh-index', indexUrl,
+            enabled: optionalBoolean(value.enabled, true), trusted: optionalBoolean(value.trusted, false), createdAt: now, updatedAt: now,
+        };
+        await this.store.update(state => {
+            if (state.skillMarketSources.length >= 20)
+                throw new Error('Skill market source limit reached');
+            state.skillMarketSources.push(source);
+        });
+        return source;
+    }
+    async removeMarketSource(sourceId) {
+        await this.store.update(state => {
+            const source = state.skillMarketSources.find(item => item.id === sourceId);
+            if (source?.builtin)
+                throw new Error('Built-in Skill market source cannot be removed');
+            state.skillMarketSources = state.skillMarketSources.filter(item => item.id !== sourceId);
+        });
+        this.cache.delete(sourceId);
+    }
+    networkSettings() {
+        return this.store.snapshot().skillMarketNetwork;
+    }
+    async setNetworkSettings(input) {
+        const value = input;
+        const proxyUrl = normalizeProxyUrl(value.proxyUrl);
+        await this.store.update(state => { state.skillMarketNetwork = proxyUrl ? { proxyUrl } : {}; });
+        this.cache.clear();
+        return this.networkSettings();
+    }
+    async testNetwork(input) {
+        const value = input;
+        const proxyUrl = normalizeProxyUrl(value.proxyUrl);
+        const sources = this.store.snapshot().skillMarketSources.filter(item => item.enabled);
+        const startedAt = Date.now();
+        const results = await Promise.allSettled(sources.map(source => this.fetchMarket(source, proxyUrl)));
+        const succeeded = results.filter((result) => result.status === 'fulfilled');
+        if (succeeded.length === 0) {
+            const reasons = results.flatMap(result => result.status === 'rejected' ? [result.reason instanceof Error ? result.reason.message : String(result.reason)] : []);
+            throw new Error(`Skill 市场网络测试失败：${reasons.slice(0, 2).join('；') || '没有可用市场'}`);
+        }
+        return { ok: true, latencyMs: Date.now() - startedAt, sourceCount: succeeded.length, entryCount: succeeded.reduce((sum, result) => sum + result.value.length, 0) };
+    }
+    async market(force = false) {
+        const sources = this.store.snapshot().skillMarketSources.filter(item => item.enabled);
+        const errors = [];
+        const groups = await Promise.all(sources.map(async (source) => {
+            try {
+                return await this.loadMarket(source, force);
+            }
+            catch (error) {
+                errors.push({ sourceId: source.id, error: error instanceof Error ? error.message : String(error) });
+                return [];
+            }
+        }));
+        const entries = deduplicateMarket([...BUILTIN_SKILLS.values()].map(item => item.entry).concat(groups.flat()));
+        return { sources, entries, errors };
+    }
+    async installMarket(sourceId, entryId) {
+        return this.mutations.use(() => this.installMarketLocked(sourceId, entryId));
+    }
+    async installMarketLocked(sourceId, entryId) {
+        this.assertInstallCapacity(entryId);
+        if (sourceId === BUILTIN_SKILL_SOURCE) {
+            const builtin = BUILTIN_SKILLS.get(entryId);
+            if (!builtin)
+                throw new Error('Built-in Skill does not exist');
+            const installed = await this.repository.install({ id: entryId, document: builtin.document, source: 'builtin', sourceId: BUILTIN_SKILL_SOURCE, trusted: true });
+            await this.store.update(state => {
+                state.skills = [...state.skills.filter(item => item.id !== installed.id), installed];
+            });
+            return installed;
+        }
+        const source = this.store.snapshot().skillMarketSources.find(item => item.id === sourceId && item.enabled);
+        if (!source)
+            throw new Error('Skill market source is unavailable');
+        const entry = (await this.loadMarket(source, false)).find(item => item.id === entryId);
+        if (!entry)
+            throw new Error('Skill market entry does not exist');
+        const proxyUrl = this.networkSettings().proxyUrl;
+        const document = entry.installKind === 'zip'
+            ? await fetchSkillFromZip(entry.skillUrl, MAX_SKILL_BYTES, proxyUrl)
+            : await fetchText(entry.skillUrl, MAX_SKILL_BYTES, undefined, proxyUrl);
+        if (entry.checksum && sha256(document) !== normalizeChecksum(entry.checksum))
+            throw new Error('Skill checksum verification failed');
+        const installed = await this.repository.install({
+            id: entry.id, document, source: 'market', sourceId: source.id, trusted: source.trusted,
+        });
+        await this.store.update(state => {
+            state.skills = [...state.skills.filter(item => item.id !== installed.id), installed];
+        });
+        return installed;
+    }
+    async loadMarket(source, force) {
+        const cached = this.cache.get(source.id);
+        if (!force && cached && cached.expiresAt > Date.now())
+            return cached.entries;
+        const entries = await this.fetchMarket(source, this.networkSettings().proxyUrl);
+        this.cache.set(source.id, { entries, expiresAt: Date.now() + MARKET_CACHE_MS });
+        return entries;
+    }
+    async fetchMarket(source, proxyUrl) {
+        const request = marketRequest(source);
+        const raw = await fetchText(request.url, MAX_MARKET_BYTES, request.init, proxyUrl);
+        return parseMarketResponse(JSON.parse(raw), source);
+    }
+    assertInstallCapacity(skillId) {
+        const skills = this.store.snapshot().skills;
+        if (!skills.some(item => item.id === skillId) && skills.length >= 500)
+            throw new Error('Installed Skill limit reached');
+    }
+}
+export function renderEnabledSkills(companion, skills, injectedIds = new Set()) {
+    if (!companion.capabilities.includes('skills') || skills.length === 0)
+        return '';
+    return [
+        '以下 Skill 已绑定到当前伙伴。已注入的可信 inline Skill 可直接遵循；其他 Skill 必须通过 partner_skill 加载或运行，不要假装已经执行。隔离 Skill 只能缩小既有工具权限。',
+        ...skills.map(skill => `- ${skill.id}｜${skill.displayName}｜${skill.description}｜${injectedIds.has(skill.id) ? '已注入当前会话' : skill.executionContext === 'fork' ? '按需隔离运行' : '按需加载'}`),
+    ].join('\n');
+}
+async function fetchText(url, limit, init = {}, proxyUrl) {
+    const headers = new Headers(init.headers);
+    if (!headers.has('accept'))
+        headers.set('accept', 'application/json,text/markdown,text/plain');
+    return requestRemoteText({
+        url: validHttpUrl(url), maxBytes: limit, timeoutMs: 15_000, headers,
+        ...(init.method ? { method: init.method } : {}),
+        ...(typeof init.body === 'string' ? { body: init.body } : {}),
+        ...(proxyUrl ? { proxyUrl } : {}),
+    });
+}
+async function fetchSkillFromZip(url, limit, proxyUrl) {
+    const bytes = await requestRemoteBytes({
+        url: validHttpUrl(url), maxBytes: 8 * 1024 * 1024, timeoutMs: 20_000,
+        headers: { accept: 'application/zip,application/octet-stream' }, ...(proxyUrl ? { proxyUrl } : {}),
+    });
+    return extractSkillMarkdown(bytes, limit);
+}
+function validHttpUrl(value) {
+    const url = new URL(value);
+    if (url.protocol !== 'https:' && url.protocol !== 'http:')
+        throw new Error('Only HTTP(S) market URLs are supported');
+    url.username = '';
+    url.password = '';
+    return url.toString();
+}
+function normalizeChecksum(value) {
+    const checksum = value.replace(/^sha256:/i, '').trim().toLocaleLowerCase();
+    if (!/^[a-f0-9]{64}$/.test(checksum))
+        throw new Error('Skill checksum must be SHA-256');
+    return checksum;
+}
+function deduplicateMarket(entries) {
+    const seen = new Set();
+    return entries.filter(entry => { const key = `${entry.sourceId}:${entry.id}`; if (seen.has(key))
+        return false; seen.add(key); return true; });
+}
+//# sourceMappingURL=service.js.map