@mearl/client 3.0.0-beta.0 → 3.0.0-beta.10

package/dist/plugins/sdk/plugin.js

@@ -146,12 +146,14 @@ export async function loadPlugin(entry, context, pluginName) {
     let registering = true;
     let name;
     let description;
+    let defaultCommand;
     let toolbox;
     let pageRuntime;
     let stateStorage;
     let taskRecovery;
     let appProfiles;
     let profileSources;
+    let setup;
     const registerCommand = (signature, handler, description = '', examples = [], toolboxOnly = false, runtimeOnly = false) => {
         if (!registering)
             throw new Error('命令只能在入口注册阶段声明');
@@ -312,6 +314,12 @@ export async function loadPlugin(entry, context, pluginName) {
             if (module.description !== undefined && typeof module.description !== 'string')
                 throw new Error('入口的 description 导出必须为字符串');
             description = module.description;
+            if (module.setup !== undefined && typeof module.setup !== 'function')
+                throw new Error('入口的 setup 导出必须为函数');
+            setup = module.setup;
+            if (module.defaultCommand !== undefined && typeof module.defaultCommand !== 'string')
+                throw new Error('入口的 defaultCommand 导出必须为字符串');
+            defaultCommand = module.defaultCommand;
             toolbox = normalizePluginToolboxContribution(module.toolbox);
             pageRuntime = normalizePluginPageRuntime(module.pageRuntime);
             stateStorage = normalizePluginState(module.stateStorage);
@@ -326,6 +334,8 @@ export async function loadPlugin(entry, context, pluginName) {
         }
         if (commands.size === 0 && !appProfiles)
             throw new Error('入口未注册任何命令');
+        if (defaultCommand !== undefined && (!commands.has(defaultCommand) || commands.get(defaultCommand)?.toolboxOnly || commands.get(defaultCommand)?.runtimeOnly))
+            throw new Error('defaultCommand 必须指向公开命令');
         for (const command of Object.keys(taskRecovery?.commands ?? {})) {
             if (!commands.has(command) ||
                 commands.get(command)?.runtimeOnly ||
@@ -401,12 +411,13 @@ export async function loadPlugin(entry, context, pluginName) {
         if (payload !== undefined && Object.keys(namedInput).length > 0) {
             throw new PluginError('PLUGIN_INVALID_INPUT', '插件业务选项与 --payload 调用不能混用');
         }
-        if (payload !== undefined &&
-            (!isObject(payload) || typeof payload.command !== 'string' || !isObject(payload.input))) {
+        const defaultPayload = defaultCommand && toolboxPage === false && isObject(payload) && !Object.hasOwn(payload, 'command');
+        if (payload !== undefined && !defaultPayload && !isPluginInvocation(payload)) {
             throw new PluginError('PLUGIN_INVALID_INPUT', '--payload 必须为 {"command":"...","input":{...}}');
         }
-        const envelope = payload;
-        const commandName = envelope?.command ?? positionals[0] ?? '';
+        const envelope = (defaultPayload ? { command: defaultCommand, input: payload } : payload);
+        const positionalOffset = defaultCommand && !commands.has(positionals[0]) && toolboxPage === false ? 0 : 1;
+        const commandName = envelope?.command ?? (positionalOffset === 0 ? defaultCommand : positionals[0] ?? '');
         const hidden = toolboxPage === 'recovery' || toolboxPage === 'migration';
         const selected = find(commandName, hidden ? false : toolboxPage);
         const command = selected.command;
@@ -426,7 +437,7 @@ export async function loadPlugin(entry, context, pluginName) {
             : Object.fromEntries(command.registeredArguments
                 .map((argument, index) => [
                 argument.name(),
-                argument.variadic ? positionals.slice(index + 1) : positionals[index + 1],
+                argument.variadic ? positionals.slice(index + positionalOffset) : positionals[index + positionalOffset],
             ])
                 .filter(([, value]) => value !== undefined));
         for (const name of Object.keys(namedInput)) {
@@ -437,7 +448,7 @@ export async function loadPlugin(entry, context, pluginName) {
         const input = { ...positionalInput, ...namedInput };
         if (!envelope &&
             !command.registeredArguments.some(argument => argument.variadic) &&
-            positionals.length - 1 > command.registeredArguments.length) {
+            positionals.length - positionalOffset > command.registeredArguments.length) {
             throw new PluginError('PLUGIN_INVALID_INPUT', '位置参数过多');
         }
         for (const argument of hidden ? [] : command.registeredArguments) {
@@ -528,7 +539,9 @@ export async function loadPlugin(entry, context, pluginName) {
     };
     return {
         name,
+        setup,
         description,
+        defaultCommand,
         toolbox,
         pageRuntime,
         stateStorage,
@@ -538,11 +551,11 @@ export async function loadPlugin(entry, context, pluginName) {
         version: readPluginVersion(entry),
         commandHelp(namespace) {
             return publicCommands()
-                .map(({ command, signature }) => `  ${namespace} ${signature}  ${command.description()}`)
+                .map(({ command, signature }) => `  ${namespace} ${command.name() === defaultCommand ? signature.slice(defaultCommand.length).trim() : signature}  ${command.description()}`)
                 .join('\n');
         },
         help(namespace, name) {
-            const selected = name ? [find(name)] : publicCommands();
+            const selected = name ? [find(defaultCommand && !commands.has(name) ? defaultCommand : name)] : publicCommands();
             if (!selected.length) {
                 const location = toolbox
                     ? `请在 Mearl ${toolbox.displayMode === 'popup' ? 'Popup' : '工具箱'} 中打开「${toolbox.title}」使用。`
@@ -552,7 +565,7 @@ export async function loadPlugin(entry, context, pluginName) {
             const examples = selected.flatMap(({ examples }) => examples);
             return [
                 '用法：',
-                ...selected.map(({ command, signature }) => `  ${namespace} ${signature}  ${command.description()}`),
+                ...selected.map(({ command, signature }) => `  ${namespace} ${command.name() === defaultCommand ? signature.slice(defaultCommand.length).trim() : signature}  ${command.description()}`),
                 ...(examples.length
                     ? ['', '示例：', ...examples.map(example => `  ${namespace} ${example}`)]
                     : []),

package/dist/plugins/sdk/pluginModelDefinition.js

@@ -1,5 +1,4 @@
 import { CODEX_MODEL_CAPABILITY } from '@mearl/agent-runtime/capabilities';
-import { compilePluginStateSchema } from './pluginStateDefinition.js';
 export function pluginModelCapabilities() {
     return { providers: [CODEX_MODEL_CAPABILITY] };
 }
@@ -44,7 +43,6 @@ export function normalizePluginModel(value) {
             request.outputSchema.$async ||
             Buffer.byteLength(JSON.stringify(request.outputSchema)) > 64 * 1024)
             throw new Error('Invalid model output schema');
-        compilePluginStateSchema(request.outputSchema);
     }
     return JSON.parse(JSON.stringify(request));
 }
@@ -65,10 +63,6 @@ export function validatePluginModelResult(request, value) {
                 code: 'PLUGIN_MODEL_SCHEMA_INVALID',
             });
         }
-        if (!compilePluginStateSchema(request.outputSchema)(output))
-            throw Object.assign(new Error('Model result does not match the output schema'), {
-                code: 'PLUGIN_MODEL_SCHEMA_INVALID',
-            });
         return { ...result, output };
     }
     return result;

package/dist/plugins/sdk/pluginPageDefinition.d.ts

@@ -1,3 +1,2 @@
 import type { PluginPageRuntime } from '@mearl/browser-core';
 export declare function normalizePluginPageRuntime(value: unknown): PluginPageRuntime | undefined;
-export declare function compilePluginPageSchema(schema: Record<string, unknown>): import("ajv/dist/core.js").AnyValidateFunction<unknown>;

package/dist/plugins/sdk/pluginPageDefinition.js

@@ -1,7 +1,5 @@
-import { parse } from 'acorn';
-import { Ajv } from 'ajv';
+import { Script } from 'node:vm';
 import { isPluginPageMatchPattern } from '@mearl/browser-core';
-const validators = new WeakMap();
 export function normalizePluginPageRuntime(value) {
     if (value === undefined)
         return undefined;
@@ -16,12 +14,7 @@ export function normalizePluginPageRuntime(value) {
         Buffer.byteLength(runtime.code) > 384 * 1024 ||
         Buffer.byteLength(JSON.stringify(runtime)) > 448 * 1024)
         throw new Error('Invalid plugin pageRuntime declaration');
-    const program = parse(`(${runtime.code}\n)`, { ecmaVersion: 'latest' });
-    const statement = program.body[0];
-    if (program.body.length !== 1 ||
-        statement.type !== 'ExpressionStatement' ||
-        !['ArrowFunctionExpression', 'FunctionExpression'].includes(statement.expression?.type ?? ''))
-        throw new Error('pageRuntime.code must be a self-contained function expression');
+    new Script(`(${runtime.code}\n)`, { filename: 'plugin-page-runtime.js' });
     if (runtime.events !== undefined &&
         (!runtime.events ||
             typeof runtime.events !== 'object' ||
@@ -46,17 +39,8 @@ export function normalizePluginPageRuntime(value) {
                     event.maxPending > 64)) ||
             event.schema.$async)
             throw new Error(`Invalid page event binding: ${name}`);
-        compilePluginPageSchema(event.schema);
     }
     if (runtime.initialize !== undefined && !/^[a-z][a-z0-9-]*$/.test(runtime.initialize))
         throw new Error('Invalid page runtime initialize command');
     return JSON.parse(JSON.stringify(runtime));
 }
-export function compilePluginPageSchema(schema) {
-    let validate = validators.get(schema);
-    if (!validate) {
-        validate = new Ajv({ strict: true, allErrors: false }).compile(schema);
-        validators.set(schema, validate);
-    }
-    return validate;
-}

package/dist/plugins/sdk/pluginRecoveryDefinition.js

@@ -1,5 +1,4 @@
 import { createHash } from 'node:crypto';
-import { compilePluginStateSchema } from './pluginStateDefinition.js';
 export function normalizePluginTaskRecovery(value) {
     if (value === undefined)
         return;
@@ -22,7 +21,6 @@ export function normalizePluginTaskRecovery(value) {
             Array.isArray(definition.schema) ||
             definition.schema.$async)
             throw new Error('Invalid task checkpoint definition');
-        compilePluginStateSchema(definition.schema);
         if (definition.migrateFrom !== undefined) {
             if (!Array.isArray(definition.migrateFrom) ||
                 definition.migrateFrom.length < 1 ||
@@ -40,7 +38,6 @@ export function normalizePluginTaskRecovery(value) {
                     Array.isArray(source.schema) ||
                     source.schema.$async)
                     throw new Error('Checkpoint migrations require distinct older versions and schemas');
-                compilePluginStateSchema(source.schema);
                 versions.add(source.version);
             }
         }

package/dist/plugins/sdk/pluginStateDefinition.d.ts

@@ -1,4 +1,3 @@
 import type { PluginStateDeclaration } from '@mearl/browser-core';
-export declare function compilePluginStateSchema(schema: Record<string, unknown>): import("ajv/dist/core.js").AnyValidateFunction<unknown>;
 export declare function normalizePluginState(value: unknown): PluginStateDeclaration | undefined;
 export declare function pluginStateSignature(collection: import('@mearl/browser-core').PluginStateCollection): string;

package/dist/plugins/sdk/pluginStateDefinition.js

@@ -1,14 +1,4 @@
 import { createHash } from 'node:crypto';
-import { Ajv } from 'ajv';
-const validators = new WeakMap();
-export function compilePluginStateSchema(schema) {
-    let validate = validators.get(schema);
-    if (!validate) {
-        validate = new Ajv({ strict: true }).compile(schema);
-        validators.set(schema, validate);
-    }
-    return validate;
-}
 export function normalizePluginState(value) {
     if (value === undefined)
         return;
@@ -55,7 +45,6 @@ export function normalizePluginState(value) {
             throw new Error('State TTL must be between 1 ms and 7 days');
         if (collection.storage === 'persistent' && collection.ttlMs !== undefined)
             throw new Error('Persistent state does not accept TTL');
-        compilePluginStateSchema(collection.schema);
     }
     return declaration;
 }

package/dist/runtimePaths.d.ts

@@ -1,4 +1,5 @@
 export declare const CLIENT_VERSION: string;
 export declare const PLUGIN_TASK_HOST_PATH: string;
 export declare const PLUGIN_WORKER_PATH: string;
+export declare const SCRIPT_WORKER_PATH: string;
 export declare const PLUGIN_MODEL_SESSION_WORKER_PATH: string;

package/dist/runtimePaths.js

@@ -5,4 +5,5 @@ const require = createRequire(import.meta.url);
 export const CLIENT_VERSION = require('../package.json').version;
 export const PLUGIN_TASK_HOST_PATH = fileURLToPath(new URL('./plugin-task-host.js', import.meta.url));
 export const PLUGIN_WORKER_PATH = fileURLToPath(new URL('./plugin-worker.js', import.meta.url));
+export const SCRIPT_WORKER_PATH = fileURLToPath(new URL('./scriptWorker.js', import.meta.url));
 export const PLUGIN_MODEL_SESSION_WORKER_PATH = fileURLToPath(new URL('./pluginModelSessionWorker.js', import.meta.url));

package/dist/script.d.ts

@@ -0,0 +1,30 @@
+import { type UnifiedInvokeOptions } from './unified.js';
+export interface ScriptExecutionOptions extends UnifiedInvokeOptions {
+    serverUrl?: string;
+    /** Overall deadline, independent of individual action timeouts. Default: 60 seconds. */
+    executionTimeoutSec?: number;
+    /** Combined stdout/stderr limit in bytes. Default: 256 KiB; maximum: 1 MiB. */
+    maxOutputBytes?: number;
+    signal?: AbortSignal;
+    source?: 'cli' | 'mcp' | 'sdk';
+}
+export interface ScriptExecutionResult {
+    success: boolean;
+    stdout: string;
+    stderr: string;
+    session?: Record<string, unknown>;
+    error?: {
+        code: string;
+        message: string;
+        stack?: string;
+        details?: unknown;
+        stage?: string;
+        attempt?: unknown;
+    };
+    executionStopped: boolean;
+    /** Dispatched browser/plugin calls can finish after the script has stopped. */
+    mayHaveLateEffects: boolean;
+    pendingActions: string[];
+}
+/** Runs trusted agent code in a short-lived Node process, with one shared SDK client. */
+export declare function executeScript(code: string, options?: ScriptExecutionOptions): Promise<ScriptExecutionResult>;

package/dist/script.js

@@ -0,0 +1,261 @@
+import { spawn } from 'node:child_process';
+import { isBrowserCommandAction } from '@mearl/browser-core/browserActionProtocol';
+import { exportArtifact } from './artifacts.js';
+import { UnifiedClient } from './unified.js';
+import { loadCloudServerConfig } from './unifiedConfig.js';
+import { stopPluginProcessTree } from './plugins/runtime/pluginProcessTree.js';
+import { SCRIPT_WORKER_PATH } from './runtimePaths.js';
+import { SDK_METHOD_ACTIONS as METHOD_ACTIONS, SDK_OPTIONS_ONLY_METHODS as OPTIONS_ONLY, } from './sdkMethods.js';
+import { getCommandHelp } from './commandHelp.js';
+import { executeRegisteredPlugin } from './plugins/runtime/pluginExecutor.js';
+import { findPluginRegistration } from './plugins/pluginRegistry.js';
+import { findOfficialPlugin } from './plugins/officialPluginCatalog.js';
+import { ensureOfficialPluginRegistered } from './plugins/officialPluginInstaller.js';
+import { serializeScriptError as serializeError } from './scriptErrors.js';
+const METHODS = [...METHOD_ACTIONS.keys(), 'invoke', 'invokePlugin', 'saveArtifact', 'help'];
+const MAX_SCRIPT_BYTES = 1024 * 1024;
+/** Runs trusted agent code in a short-lived Node process, with one shared SDK client. */
+export async function executeScript(code, options = {}) {
+    if (typeof code !== 'string' || !code.trim() || Buffer.byteLength(code) > MAX_SCRIPT_BYTES)
+        throw new Error('Script must be non-empty JavaScript of at most 1 MiB');
+    const { serverUrl, executionTimeoutSec = 60, maxOutputBytes = 256 * 1024, signal, source = 'sdk', ...defaults } = options;
+    if (!Number.isFinite(executionTimeoutSec) ||
+        executionTimeoutSec <= 0 ||
+        executionTimeoutSec * 1000 > 2_147_483_647)
+        throw new Error('executionTimeoutSec must be positive and within the timer range');
+    if (!Number.isSafeInteger(maxOutputBytes) || maxOutputBytes < 1 || maxOutputBytes > 1024 * 1024)
+        throw new Error('maxOutputBytes must be an integer between 1 and 1048576');
+    const client = new UnifiedClient({
+        serverUrl: serverUrl ?? process.env.MEARL_SERVER_URL ?? loadCloudServerConfig()?.server,
+    });
+    let session = defaults.session && defaults.session !== 'new' ? { sessionId: defaults.session } : undefined;
+    let sessionId = defaults.session;
+    let uncertainEffects = false;
+    const pending = new Map();
+    const controller = new AbortController();
+    const invoke = async (action, payload, overrides = {}) => {
+        controller.signal.throwIfAborted();
+        const result = await client.invoke(action, payload, {
+            ...defaults,
+            session: sessionId,
+            ...overrides,
+        });
+        if (result?.action?.stage === 'dispatch-uncertain' || result?.stage === 'dispatch-uncertain')
+            uncertainEffects = true;
+        if (result?.session?.sessionId &&
+            (!overrides.session || overrides.session === 'new' || overrides.session === sessionId)) {
+            session = result.session;
+            if (!overrides.session || overrides.session === 'new')
+                sessionId = result.session.sessionId;
+        }
+        return result;
+    };
+    try {
+        return await new Promise((resolve, reject) => {
+            if (signal?.aborted) {
+                resolve({
+                    success: false,
+                    stdout: '',
+                    stderr: '',
+                    ...(session ? { session } : {}),
+                    error: { code: 'SCRIPT_CANCELLED', message: 'Script execution cancelled' },
+                    executionStopped: true,
+                    mayHaveLateEffects: false,
+                    pendingActions: [],
+                });
+                return;
+            }
+            const child = spawn(process.execPath, [SCRIPT_WORKER_PATH], {
+                stdio: ['ignore', 'pipe', 'pipe', 'ipc'],
+                serialization: 'advanced',
+                detached: process.platform !== 'win32',
+            });
+            const output = { stdout: [], stderr: [] };
+            let outputBytes = 0;
+            let outcome;
+            let cleanup;
+            let cleanupError;
+            let pendingActions = [];
+            let closed = false;
+            const pluginCalls = new Set();
+            const stop = (error) => {
+                if (outcome !== undefined || closed)
+                    return;
+                outcome = error ?? true;
+                pendingActions = [...pending.values()];
+                controller.abort();
+                client.disconnect();
+                if (child.pid) {
+                    cleanup = stopPluginProcessTree(child.pid).catch(error => {
+                        cleanupError = error;
+                        child.kill('SIGKILL');
+                    });
+                }
+            };
+            const abort = () => stop({ code: 'SCRIPT_CANCELLED', message: 'Script execution cancelled' });
+            const deadline = setTimeout(() => stop({ code: 'SCRIPT_TIMEOUT', message: 'Script execution deadline exceeded' }), executionTimeoutSec * 1000);
+            signal?.addEventListener('abort', abort, { once: true });
+            if (signal?.aborted)
+                abort();
+            const appendOutput = (stream, chunk) => {
+                const remaining = maxOutputBytes - outputBytes;
+                output[stream].push(chunk.subarray(0, Math.max(0, remaining)));
+                outputBytes += Math.min(chunk.length, Math.max(0, remaining));
+                if (chunk.length > remaining)
+                    stop({
+                        code: 'SCRIPT_OUTPUT_LIMIT',
+                        message: `Script output exceeded ${maxOutputBytes} bytes`,
+                    });
+            };
+            for (const stream of ['stdout', 'stderr']) {
+                child[stream].on('data', (chunk) => appendOutput(stream, chunk));
+            }
+            const runPlugin = async (name, invocation, overrides = {}, help) => {
+                if (!findPluginRegistration(name) && findOfficialPlugin(name))
+                    await ensureOfficialPluginRegistered(name);
+                controller.signal.throwIfAborted();
+                const pluginOptions = { ...defaults, session: sessionId, ...overrides };
+                if (pluginOptions.session === 'new' && !help)
+                    throw new Error('Create the control session with a browser action before calling a Skill command');
+                const operation = executeRegisteredPlugin(name, invocation, {
+                    invoke: (action, payload = {}, options) => invoke(action, payload, options),
+                }, {
+                    ...pluginOptions,
+                    source,
+                    signal: controller.signal,
+                    cancellationGraceMs: 50,
+                    onOutput: appendOutput,
+                    ...(help ? { help } : {}),
+                });
+                pluginCalls.add(operation);
+                try {
+                    return await operation;
+                }
+                finally {
+                    pluginCalls.delete(operation);
+                }
+            };
+            const send = (message) => {
+                if (outcome !== undefined || !child.connected)
+                    return;
+                child.send(message, error => {
+                    if (error)
+                        stop(serializeError(error));
+                });
+            };
+            child.on('message', (message) => {
+                if (outcome !== undefined || !message || typeof message !== 'object')
+                    return;
+                if (message.type === 'done' || message.type === 'error') {
+                    stop(message.type === 'error'
+                        ? serializeError(message.error)
+                        : pending.size
+                            ? {
+                                code: 'SCRIPT_PENDING_CALLS',
+                                message: 'Script finished with unawaited SDK calls',
+                            }
+                            : undefined);
+                    return;
+                }
+                if (message.type !== 'call')
+                    return;
+                const { id, method, args } = message;
+                if (!Number.isSafeInteger(id) ||
+                    pending.has(id) ||
+                    !METHODS.includes(method) ||
+                    !Array.isArray(args)) {
+                    stop({ code: 'SCRIPT_PROTOCOL_ERROR', message: 'Invalid script SDK call' });
+                    return;
+                }
+                if (method !== 'help' && sessionId === 'new' && pending.size) {
+                    send({
+                        type: 'response',
+                        id,
+                        error: {
+                            code: 'SCRIPT_SESSION_INITIALIZING',
+                            message: 'Await the first session call before starting concurrent calls',
+                        },
+                    });
+                    return;
+                }
+                pending.set(id, method === 'invoke' || method === 'invokePlugin' ? String(args[0]) : method);
+                void Promise.resolve()
+                    .then(async () => {
+                    if (outcome !== undefined)
+                        throw new Error('Script execution stopped');
+                    if (method === 'help') {
+                        const target = args[0];
+                        if (target && typeof target === 'object') {
+                            if (typeof target.plugin !== 'string' ||
+                                !target.plugin.trim() ||
+                                (target.command !== undefined && typeof target.command !== 'string'))
+                                throw new Error('Plugin help requires { plugin, command? }');
+                            return runPlugin(target.plugin, { command: '', input: {} }, {}, { namespace: `mearl ${target.plugin}`, command: target.command });
+                        }
+                        return getCommandHelp(target);
+                    }
+                    if (method === 'invoke') {
+                        if (!isBrowserCommandAction(args[0]) && args[0] !== 'browser_select_browser')
+                            throw new Error(`Unsupported browser action: ${args[0]}; use invokePlugin for registered Skill commands`);
+                        return invoke(args[0], args[1] ?? {}, args[2]);
+                    }
+                    if (method === 'invokePlugin') {
+                        return runPlugin(args[0], args[1], args[2]);
+                    }
+                    if (method === 'saveArtifact')
+                        return exportArtifact({ invoke }, args[0], args[1], {
+                            ...defaults,
+                            session: sessionId,
+                            ...args[2],
+                        });
+                    const optionsOnly = (OPTIONS_ONLY.has(method) && !(method === 'browserList' && args[0] &&
+                        ('provider' in args[0] || 'launchForm' in args[0]))) || (method === 'browserRelease' && args.length < 2);
+                    return invoke(METHOD_ACTIONS.get(method), optionsOnly ? {} : (args[0] ?? {}), optionsOnly ? args[0] : args[1]);
+                })
+                    .then(result => send({ type: 'response', id, result, session }), error => send({ type: 'response', id, error: serializeError(error), session }))
+                    .finally(() => pending.delete(id));
+            });
+            child.once('error', error => {
+                stop(serializeError(error));
+            });
+            child.once('exit', () => {
+                if (outcome === undefined)
+                    stop({
+                        code: 'SCRIPT_EXITED',
+                        message: 'Script process exited before reporting completion',
+                    });
+            });
+            child.once('close', () => {
+                closed = true;
+                clearTimeout(deadline);
+                signal?.removeEventListener('abort', abort);
+                void Promise.allSettled([cleanup, ...pluginCalls])
+                    .then(outcomes => {
+                    if (outcomes.some(result => result.status === 'rejected' &&
+                        result.reason?.code === 'PLUGIN_EXECUTOR_CLEANUP_FAILED'))
+                        cleanupError = new Error('Unable to confirm Skill process cleanup');
+                    const error = cleanupError
+                        ? serializeError(cleanupError, 'SCRIPT_CLEANUP_FAILED')
+                        : outcome === true
+                            ? undefined
+                            : outcome;
+                    resolve({
+                        success: !error && outcome === true,
+                        stdout: Buffer.concat(output.stdout).toString('utf8'),
+                        stderr: Buffer.concat(output.stderr).toString('utf8'),
+                        ...(session ? { session } : {}),
+                        ...(error ? { error } : {}),
+                        executionStopped: !cleanupError,
+                        mayHaveLateEffects: pendingActions.length > 0 || uncertainEffects,
+                        pendingActions,
+                    });
+                })
+                    .catch(reject);
+            });
+            send({ type: 'start', code, methods: METHODS, session });
+        });
+    }
+    finally {
+        client.disconnect();
+    }
+}

package/dist/scriptCli.d.ts

@@ -0,0 +1 @@
+export declare function runScriptCli(args: string[], commandName: string): Promise<number>;

package/dist/scriptCli.js

@@ -0,0 +1,94 @@
+import { readFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { Command } from 'commander';
+import { executeScript } from './script.js';
+export async function runScriptCli(args, commandName) {
+    const program = new Command()
+        .name(`${commandName} run`)
+        .description('执行 Node.js 脚本；预注入 mearl SDK，支持顶层 await、条件和循环')
+        .option('--file <path>', '读取 JavaScript 文件；省略时从 stdin 读取')
+        .option('--session <new-or-id>', '首次建立或复用控制会话')
+        .option('--browser <id-or-name>', '指定浏览器')
+        .option('--connector <id-or-name>', '限制到远端 connector')
+        .option('--local', '仅使用本机浏览器')
+        .option('--cdp', '强制本机 CDP')
+        .option('--server <url>', '覆盖 cloud-server 地址')
+        .option('--timeout <seconds>', '整个脚本的执行时限（默认 60 秒）', '60')
+        .allowExcessArguments(false)
+        .exitOverride()
+        .addHelpText('after', `\n示例：\n  ${commandName} run --file task.mjs\n  ${commandName} run <<'JS'\n  console.log(await mearl.tabList());\n  JS\n\n脚本拥有当前宿主的 Node.js 权限；使用 await import() 加载模块。\n调用 Skill 命令：await mearl.invokePlugin('notes', { command: 'search', input: { query: 'project' } })。\n用 console.log(await mearl.help('pageClick')) 查询共享帮助，mearl.structure(value) 查看结果结构。\n每次运行重建 JS 变量；复用 session 和 tabId 可继续同一浏览器任务。\n`);
+    let source;
+    let options;
+    try {
+        program.parse(args, { from: 'user' });
+        options = program.opts();
+        const timeout = Number(options.timeout);
+        if (!Number.isFinite(timeout) || timeout <= 0 || timeout * 1000 > 2_147_483_647)
+            throw new Error('--timeout 必须是有效范围内的大于 0 的秒数');
+        if ((options.local || options.cdp) && options.connector)
+            throw new Error('--local/--cdp 不能与 --connector 同时使用');
+        if (options.file)
+            source = await readFile(resolve(options.file), 'utf8');
+        else {
+            if (process.stdin.isTTY)
+                throw new Error('通过 stdin 提交脚本，或使用 --file <path>');
+            const chunks = [];
+            let size = 0;
+            for await (const chunk of process.stdin) {
+                const buffer = Buffer.from(chunk);
+                size += buffer.length;
+                if (size > 1024 * 1024)
+                    throw new Error('脚本不能超过 1 MiB');
+                chunks.push(buffer);
+            }
+            source = Buffer.concat(chunks).toString('utf8');
+        }
+        if (!source.trim() || Buffer.byteLength(source) > 1024 * 1024)
+            throw new Error('脚本必须是非空且不超过 1 MiB 的 JavaScript');
+    }
+    catch (error) {
+        if (error.code === 'commander.helpDisplayed')
+            return 0;
+        console.error(error instanceof Error ? error.message : String(error));
+        return 2;
+    }
+    const controller = new AbortController();
+    const abort = () => controller.abort();
+    process.once('SIGINT', abort);
+    process.once('SIGTERM', abort);
+    try {
+        const result = await executeScript(source, {
+            executionTimeoutSec: Number(options.timeout),
+            signal: controller.signal,
+            source: 'cli',
+            ...(options.session ? { session: options.session } : {}),
+            ...(options.browser ? { browser: options.browser } : {}),
+            ...(options.connector ? { connector: options.connector } : {}),
+            ...(options.local || options.cdp ? { local: true } : {}),
+            ...(options.cdp ? { transport: 'cdp' } : {}),
+            ...(options.server ? { serverUrl: options.server } : {}),
+        });
+        if (result.stdout)
+            process.stdout.write(result.stdout);
+        if (result.stderr)
+            process.stderr.write(result.stderr);
+        if (result.session)
+            console.error(JSON.stringify({ session: result.session }));
+        if (!result.success)
+            console.error(JSON.stringify({
+                error: result.error,
+                executionStopped: result.executionStopped,
+                mayHaveLateEffects: result.mayHaveLateEffects,
+                pendingActions: result.pendingActions,
+            }));
+        return result.success ? 0 : 1;
+    }
+    catch (error) {
+        console.error(error instanceof Error ? error.message : String(error));
+        return 1;
+    }
+    finally {
+        process.removeListener('SIGINT', abort);
+        process.removeListener('SIGTERM', abort);
+    }
+}

package/dist/scriptErrors.d.ts

@@ -0,0 +1,8 @@
+export declare function serializeScriptError(error: unknown, fallback?: string): {
+    stack?: string | undefined;
+    attempt?: {} | null | undefined;
+    stage?: string | undefined;
+    details?: Record<string, unknown> | undefined;
+    code: string;
+    message: string;
+};