@uniqueli/openwork 0.2.4 → 0.3.0

package/README.md

@@ -42,12 +42,12 @@ Or configure them in-app via the settings panel.
 
 ## Supported Models
 
-| Provider  | Models                                                                                 |
-| --------- | -------------------------------------------------------------------------------------- |
-| Anthropic | Claude Opus 4.5, Claude Sonnet 4.5, Claude Haiku 4.5, Claude Opus 4.1, Claude Sonnet 4 |
-| OpenAI    | GPT-5.2, GPT-5.1, o3, o3 Mini, o4 Mini, o1, GPT-4.1, GPT-4o                            |
-| Google    | Gemini 3 Pro Preview, Gemini 3 Flash Preview, Gemini 2.5 Pro, Gemini 2.5 Flash, Gemini 2.5 Flash Lite |
-| **Custom**    | **Add unlimited custom providers!**                                |
+| Provider   | Models                                                                                                |
+| ---------- | ----------------------------------------------------------------------------------------------------- |
+| Anthropic  | Claude Opus 4.5, Claude Sonnet 4.5, Claude Haiku 4.5, Claude Opus 4.1, Claude Sonnet 4                |
+| OpenAI     | GPT-5.2, GPT-5.1, o3, o3 Mini, o4 Mini, o1, GPT-4.1, GPT-4o                                           |
+| Google     | Gemini 3 Pro Preview, Gemini 3 Flash Preview, Gemini 2.5 Pro, Gemini 2.5 Flash, Gemini 2.5 Flash Lite |
+| **Custom** | **Add unlimited custom providers!**                                                                   |
 
 ## ✨ Multiple Custom API Providers
 
@@ -68,6 +68,7 @@ Or configure them in-app via the settings panel.
 ### Supported Custom APIs
 
 Works with any OpenAI-compatible API:
+
 - **Chinese AI Providers**: Moonshot AI (Kimi), Zhipu AI (GLM), DeepSeek, Baichuan, etc.
 - **Self-hosted models**: vLLM, Text Generation WebUI, LocalAI, Ollama (with OpenAI compatibility)
 - **Cloud services**: Azure OpenAI, AWS Bedrock (with proxy), Cloudflare AI
@@ -76,6 +77,7 @@ Works with any OpenAI-compatible API:
 ### Example Configurations
 
 **Moonshot AI (Kimi)**
+
 ```
 ID: moonshot
 Display Name: Moonshot AI
@@ -84,6 +86,7 @@ Model Name: kimi-k2-turbo-preview
 ```
 
 **Zhipu AI (GLM)**
+
 ```
 ID: zhipu
 Display Name: Zhipu AI
@@ -92,13 +95,16 @@ Model Name: glm-4-plus
 ```
 
 **DeepSeek**
+
 ```
 ID: deepseek
 Display Name: DeepSeek
 Base URL: https://api.deepseek.com/v1
 Model Name: deepseek-chat
 ```
+
 Configure via Settings UI or by setting environment variables:
+
 ```bash
 CUSTOM_BASE_URL=https://api.example.com/v1
 CUSTOM_API_KEY=your-api-key
@@ -107,25 +113,41 @@ CUSTOM_MODEL=your-model-name  # optional
 
 ## Changelog
 
+### v0.3.0 (2026-02-09)
+
+- 🚀 **Skills System Major Upgrade**: 技能系统重大升级
+  - ⚡ **Performance**: 将所有文件操作转换为异步I/O，解决UI阻塞问题
+  - 🔒 **Security**: 新增完整的输入验证系统，防止注入攻击和资源耗尽
+  - 💾 **Memory**: 实现LRU缓存机制（最大100个技能），防止内存泄漏
+  - 🎯 **Skill Combination**: 新增技能组合功能，支持跨学科专业知识整合
+  - 📝 **Version Management**: 为所有技能添加语义化版本控制
+  - 🛠️ **Error Handling**: 增强错误处理系统，提供中文错误消息和恢复建议
+- 🐛 **UI Fix**: 修复创建技能对话框在From Template模式下窗口过大、关闭按钮不可见的问题
+
 ### v0.2.4 (2026-02-06)
+
 - ✨ **聊天建议卡片**: 新对话空状态下显示可点击的建议卡片（文件整理、内容创作、文档处理），点击即可快速开始对话
 
 ### v0.2.3 (2026-02-04)
+
 - ✨ **Skills System**: 新增技能配置系统，支持 12 个内置技能和自定义技能创建
 - 🐛 修复 `deleteUserSkill` 误删所有技能记录的严重 Bug
 - 🐛 修复 Switch 组件、创建技能对话框、技能过滤等多个问题
 - ⚡ 技能初始化改为懒加载，提升启动性能
 
 ### v0.2.2 (2026-xx-xx)
+
 - ✨ 支持多个自定义 API 配置
 - 🔧 动态 Provider 系统
 
 ### v0.2.1 (2026-01-19)
+
 - 🐛 **Critical Fix**: Fixed "Missing credentials" error for users without OpenAI API key
 - 🔧 Custom API now works correctly even when OPENAI_API_KEY is not set in environment
 - 📝 Improved logging for debugging custom API configurations
 
 ### v0.2.0 (2026-01-18)
+
 - ✨ **Multiple Custom API Providers**: Add unlimited custom providers via UI
 - 🎨 **Improved UX**: One-click provider addition with "+ 添加Provider" button
 - 🔧 **Better Configuration**: Each provider has its own name, base URL, API key, and model
@@ -133,6 +155,7 @@ CUSTOM_MODEL=your-model-name  # optional
 - 📝 **Simplified Settings**: Cleaner settings dialog focused on standard providers
 
 ### v0.1.0 (2026-01-15)
+
 - 🎉 Initial release with basic custom API support
 - 🔑 Single custom API configuration via Settings
 

package/out/main/index.js

@@ -1301,6 +1301,7 @@ const BUILTIN_SKILLS = [
     name: "SQL Expert",
     description: "Specialized in SQL query writing, database schema analysis, and query optimization",
     category: "data",
+    version: "1.0.0",
     prompt: `You are a SQL and database expert. Your expertise includes:
 
 ## Core Capabilities
@@ -1345,6 +1346,7 @@ When writing SQL:
     name: "Code Reviewer",
     description: "Expert in code review, best practices, and identifying potential issues",
     category: "coding",
+    version: "1.0.0",
     prompt: `You are an expert code reviewer. Your role is to analyze code for:
 
 ## Review Focus Areas
@@ -1408,6 +1410,7 @@ Be specific and actionable. Include code examples for fixes when helpful.`,
     name: "Technical Writer",
     description: "Specializes in writing clear, comprehensive technical documentation",
     category: "creative",
+    version: "1.0.0",
     prompt: `You are a technical documentation expert. Your expertise includes:
 
 ## Documentation Types
@@ -1478,6 +1481,7 @@ Use markdown formatting with:
     name: "Debugging Expert",
     description: "Specializes in systematic debugging and problem-solving",
     category: "system",
+    version: "1.0.0",
     prompt: `You are a debugging expert. Follow this systematic approach:
 
 ## Debugging Methodology
@@ -1550,6 +1554,7 @@ Focus on finding the root cause, not just treating symptoms.`,
     name: "Test Engineer",
     description: "Specializes in writing comprehensive tests and test strategies",
     category: "coding",
+    version: "1.0.0",
     prompt: `You are a test engineering expert. Your expertise includes:
 
 ## Testing Philosophy
@@ -1650,6 +1655,7 @@ When suggesting tests:
     name: "Refactoring Expert",
     description: "Specializes in code refactoring, improving code quality, and reducing technical debt",
     category: "coding",
+    version: "1.0.0",
     prompt: `You are a refactoring expert. Your expertise includes:
 
 ## Refactoring Principles
@@ -1734,6 +1740,7 @@ When refactoring:
     name: "API Designer",
     description: "Expert in RESTful API design, documentation, and best practices",
     category: "coding",
+    version: "1.0.0",
     prompt: `You are an API design expert. Your expertise includes:
 
 ## RESTful API Design
@@ -1848,6 +1855,7 @@ When designing APIs:
     name: "Git Expert",
     description: "Specializes in Git workflows, branching strategies, and version control best practices",
     category: "system",
+    version: "1.0.0",
     prompt: `You are a Git and version control expert. Your expertise includes:
 
 ## Git Fundamentals
@@ -2001,6 +2009,7 @@ When helping with Git:
     name: "Performance Optimizer",
     description: "Expert in code optimization, profiling, and performance improvements",
     category: "coding",
+    version: "1.0.0",
     prompt: `You are a performance optimization expert. Your expertise includes:
 
 ## Performance Optimization Strategy
@@ -2139,6 +2148,7 @@ When optimizing:
     name: "Security Auditor",
     description: "Expert in identifying security vulnerabilities and implementing secure coding practices",
     category: "analysis",
+    version: "1.0.0",
     prompt: `You are a security expert. Your expertise includes identifying vulnerabilities and implementing secure coding practices.
 
 ## OWASP Top 10
@@ -2294,6 +2304,7 @@ When auditing code:
     name: "Python Expert",
     description: "Specialized in Python programming, best practices, and ecosystem tools",
     category: "coding",
+    version: "1.0.0",
     prompt: `You are a Python expert. Your expertise includes:
 
 ## Python Best Practices
@@ -2473,6 +2484,7 @@ When writing Python:
     name: "JavaScript Expert",
     description: "Expert in modern JavaScript (ES6+), TypeScript, and browser APIs",
     category: "coding",
+    version: "1.0.0",
     prompt: `You are a JavaScript/TypeScript expert. Your expertise includes:
 
 ## Modern JavaScript (ES6+)
@@ -2665,6 +2677,15 @@ function ensureSkillsDir() {
     fs.mkdirSync(SKILLS_FILE_DIR, { recursive: true });
   }
 }
+async function ensureSkillsDirAsync() {
+  try {
+    await fs$1.mkdir(SKILLS_FILE_DIR, { recursive: true });
+  } catch (error) {
+    if (error.code !== "EEXIST") {
+      throw error;
+    }
+  }
+}
 function skillToSkillMarkdown(skill) {
   return `---
 name: ${skill.name}
@@ -2681,45 +2702,52 @@ ${skill.description}
 ${skill.prompt}
 `;
 }
-function saveSkillFile(skill) {
-  ensureSkillsDir();
+async function saveSkillFile(skill) {
+  await ensureSkillsDirAsync();
   const skillDir = path.join(SKILLS_FILE_DIR, skill.id);
-  if (!fs.existsSync(skillDir)) {
-    fs.mkdirSync(skillDir, { recursive: true });
+  try {
+    await fs$1.mkdir(skillDir, { recursive: true });
+  } catch (error) {
+    if (error.code !== "EEXIST") {
+      throw error;
+    }
   }
   const skillFilePath = path.join(skillDir, "SKILL.md");
   const content = skillToSkillMarkdown(skill);
-  fs.writeFileSync(skillFilePath, content, "utf-8");
+  await fs$1.writeFile(skillFilePath, content, "utf-8");
   console.log(`[SkillFileManager] Saved skill file: ${skillFilePath}`);
 }
-function deleteSkillFile(skillId) {
+async function deleteSkillFile(skillId) {
   const skillDir = path.join(SKILLS_FILE_DIR, skillId);
   const skillFilePath = path.join(skillDir, "SKILL.md");
-  if (fs.existsSync(skillFilePath)) {
-    fs.unlinkSync(skillFilePath);
+  try {
+    await fs$1.unlink(skillFilePath);
     console.log(`[SkillFileManager] Deleted skill file: ${skillFilePath}`);
+  } catch (error) {
+    if (error.code !== "ENOENT") {
+      throw error;
+    }
   }
 }
 function getSkillsFileDir() {
   ensureSkillsDir();
   return SKILLS_FILE_DIR;
 }
-function initializeBuiltinSkills() {
-  ensureSkillsDir();
-  for (const skill of BUILTIN_SKILLS) {
-    saveSkillFile(skill);
-  }
+async function initializeBuiltinSkills() {
+  await ensureSkillsDirAsync();
+  await Promise.all(BUILTIN_SKILLS.map((skill) => saveSkillFile(skill)));
   console.log(`[SkillFileManager] Initialized ${BUILTIN_SKILLS.length} built-in skills`);
 }
-function syncEnabledSkills(enabledSkillIds) {
-  ensureSkillsDir();
-  for (const skill of BUILTIN_SKILLS) {
+async function syncEnabledSkills(enabledSkillIds) {
+  await ensureSkillsDirAsync();
+  const syncPromises = BUILTIN_SKILLS.map(async (skill) => {
     if (enabledSkillIds.includes(skill.id)) {
-      saveSkillFile(skill);
+      await saveSkillFile(skill);
     } else {
-      deleteSkillFile(skill.id);
+      await deleteSkillFile(skill.id);
     }
-  }
+  });
+  await Promise.all(syncPromises);
   console.log(`[SkillFileManager] Synced ${enabledSkillIds.length} enabled skills`);
 }
 const BASE_SYSTEM_PROMPT = `You are an AI assistant that helps users with various tasks including coding, research, and analysis.
@@ -3527,8 +3555,18 @@ class SkillLoader {
   builtinSkills;
   userSkills;
   cache = /* @__PURE__ */ new Map();
+  MAX_CACHE_SIZE = 100;
+  // Maximum number of cached skills
+  cacheHits = 0;
+  cacheMisses = 0;
   constructor() {
-    this.builtinSkills = new Map(BUILTIN_SKILLS.map((s) => [s.id, s]));
+    this.builtinSkills = new Map(
+      BUILTIN_SKILLS.map((s) => [
+        s.id,
+        // Ensure version field exists (default to "1.0.0" for compatibility)
+        { ...s, version: s.version || "1.0.0" }
+      ])
+    );
     this.userSkills = /* @__PURE__ */ new Map();
     this.loadUserSkillsFromStorage();
   }
@@ -3547,6 +3585,8 @@ class SkillLoader {
         subSkills: skillData.subSkills,
         enabled: skillData.enabled,
         isBuiltin: skillData.isBuiltin,
+        version: skillData.version || "1.0.0",
+        // Default version for compatibility
         createdAt: new Date(skillData.createdAt),
         updatedAt: new Date(skillData.updatedAt)
       };
@@ -3575,21 +3615,71 @@ class SkillLoader {
    * Get a specific skill by ID
    */
   getSkill(id) {
-    if (this.cache.has(id)) {
-      return this.cache.get(id);
+    const cachedEntry = this.cache.get(id);
+    if (cachedEntry) {
+      this.cacheHits++;
+      cachedEntry.lastAccessed = Date.now();
+      return cachedEntry.skill;
     }
+    this.cacheMisses++;
     if (this.builtinSkills.has(id)) {
       const skill = this.builtinSkills.get(id);
-      this.cache.set(id, skill);
+      this.addToCache(id, skill);
       return skill;
     }
     if (this.userSkills.has(id)) {
       const skill = this.userSkills.get(id);
-      this.cache.set(id, skill);
+      this.addToCache(id, skill);
       return skill;
     }
     return void 0;
   }
+  /**
+   * Add skill to cache with LRU eviction
+   */
+  addToCache(id, skill) {
+    if (this.cache.size >= this.MAX_CACHE_SIZE && !this.cache.has(id)) {
+      let lruId = null;
+      let lruTime = Infinity;
+      for (const [cacheId, entry] of this.cache.entries()) {
+        if (entry.lastAccessed < lruTime) {
+          lruTime = entry.lastAccessed;
+          lruId = cacheId;
+        }
+      }
+      if (lruId) {
+        this.cache.delete(lruId);
+        console.log(`[SkillLoader] Evicted LRU skill from cache: ${lruId}`);
+      }
+    }
+    this.cache.set(id, {
+      skill,
+      lastAccessed: Date.now()
+    });
+  }
+  /**
+   * Clear the cache
+   */
+  clearCache() {
+    this.cache.clear();
+    this.cacheHits = 0;
+    this.cacheMisses = 0;
+    console.log("[SkillLoader] Cache cleared");
+  }
+  /**
+   * Get cache statistics
+   */
+  getCacheStats() {
+    const total = this.cacheHits + this.cacheMisses;
+    const hitRate = total > 0 ? this.cacheHits / total * 100 : 0;
+    return {
+      size: this.cache.size,
+      maxSize: this.MAX_CACHE_SIZE,
+      hits: this.cacheHits,
+      misses: this.cacheMisses,
+      hitRate: Math.round(hitRate * 100) / 100
+    };
+  }
   /**
    * Get enabled skills
    */
@@ -3653,7 +3743,7 @@ class SkillLoader {
    * Refresh user skills from storage
    */
   refresh() {
-    this.cache.clear();
+    this.clearCache();
     this.userSkills.clear();
     this.loadUserSkillsFromStorage();
   }
@@ -3665,7 +3755,7 @@ function getSkillLoader() {
   }
   return globalSkillLoader;
 }
-function createUserSkill(name, description, category, prompt, subSkills) {
+function createUserSkill(name, description, category, prompt, subSkills, version) {
   return {
     id: `user-${uuid.v4()}`,
     name,
@@ -3675,6 +3765,8 @@ function createUserSkill(name, description, category, prompt, subSkills) {
     subSkills,
     enabled: false,
     isBuiltin: false,
+    version: version || "1.0.0",
+    // Default to version 1.0.0
     createdAt: /* @__PURE__ */ new Date(),
     updatedAt: /* @__PURE__ */ new Date()
   };
@@ -3689,6 +3781,8 @@ function saveUserSkill(skill) {
     subSkills: skill.subSkills,
     enabled: skill.enabled,
     isBuiltin: skill.isBuiltin,
+    version: skill.version,
+    // Include version in storage
     createdAt: skill.createdAt.toISOString(),
     updatedAt: skill.updatedAt.toISOString()
   };
@@ -3708,6 +3802,348 @@ function deleteUserSkill(skillId) {
   saveUserSkills(filtered);
   getSkillLoader().refresh();
 }
+const SKILL_LIMITS = {
+  NAME_MAX_LENGTH: 100,
+  DESCRIPTION_MAX_LENGTH: 500,
+  PROMPT_MAX_LENGTH: 5e4,
+  // 50k characters ~ 15-20k tokens
+  CATEGORY_MAX_LENGTH: 50,
+  SUBSKILLS_MAX_COUNT: 20
+};
+const SKILL_MIN_LENGTHS = {
+  NAME_MIN_LENGTH: 2,
+  DESCRIPTION_MIN_LENGTH: 10,
+  PROMPT_MIN_LENGTH: 50
+};
+const VALID_CATEGORIES = [
+  "coding",
+  "analysis",
+  "creative",
+  "data",
+  "system",
+  "custom"
+];
+function validateSkillName(name) {
+  if (!name || typeof name !== "string") {
+    return {
+      valid: false,
+      error: "Name is required",
+      field: "name"
+    };
+  }
+  const trimmed = name.trim();
+  if (trimmed.length < SKILL_MIN_LENGTHS.NAME_MIN_LENGTH) {
+    return {
+      valid: false,
+      error: `Name must be at least ${SKILL_MIN_LENGTHS.NAME_MIN_LENGTH} characters`,
+      field: "name"
+    };
+  }
+  if (trimmed.length > SKILL_LIMITS.NAME_MAX_LENGTH) {
+    return {
+      valid: false,
+      error: `Name must not exceed ${SKILL_LIMITS.NAME_MAX_LENGTH} characters`,
+      field: "name"
+    };
+  }
+  if (/[<>{}\\]/.test(trimmed)) {
+    return {
+      valid: false,
+      error: "Name contains invalid characters",
+      field: "name"
+    };
+  }
+  return { valid: true };
+}
+function validateSkillDescription(description) {
+  if (!description || typeof description !== "string") {
+    return {
+      valid: false,
+      error: "Description is required",
+      field: "description"
+    };
+  }
+  const trimmed = description.trim();
+  if (trimmed.length < SKILL_MIN_LENGTHS.DESCRIPTION_MIN_LENGTH) {
+    return {
+      valid: false,
+      error: `Description must be at least ${SKILL_MIN_LENGTHS.DESCRIPTION_MIN_LENGTH} characters`,
+      field: "description"
+    };
+  }
+  if (trimmed.length > SKILL_LIMITS.DESCRIPTION_MAX_LENGTH) {
+    return {
+      valid: false,
+      error: `Description must not exceed ${SKILL_LIMITS.DESCRIPTION_MAX_LENGTH} characters`,
+      field: "description"
+    };
+  }
+  return { valid: true };
+}
+function validateSkillPrompt(prompt) {
+  if (!prompt || typeof prompt !== "string") {
+    return {
+      valid: false,
+      error: "Prompt is required",
+      field: "prompt"
+    };
+  }
+  const trimmed = prompt.trim();
+  if (trimmed.length < SKILL_MIN_LENGTHS.PROMPT_MIN_LENGTH) {
+    return {
+      valid: false,
+      error: `Prompt must be at least ${SKILL_MIN_LENGTHS.PROMPT_MIN_LENGTH} characters`,
+      field: "prompt"
+    };
+  }
+  if (trimmed.length > SKILL_LIMITS.PROMPT_MAX_LENGTH) {
+    return {
+      valid: false,
+      error: `Prompt must not exceed ${SKILL_LIMITS.PROMPT_MAX_LENGTH} characters (currently ${trimmed.length})`,
+      field: "prompt"
+    };
+  }
+  const dangerousPatterns = [
+    /<script[^>]*>.*?<\/script>/gi,
+    // Script tags
+    /javascript:/gi,
+    // JavaScript protocol
+    /on\w+\s*=/gi,
+    // Event handlers (onclick, onload, etc.)
+    /<iframe[^>]*>/gi,
+    // Iframes
+    /<embed[^>]*>/gi,
+    // Embed tags
+    /<object[^>]*>/gi
+    // Object tags
+  ];
+  for (const pattern of dangerousPatterns) {
+    if (pattern.test(trimmed)) {
+      return {
+        valid: false,
+        error: "Prompt contains potentially dangerous content",
+        field: "prompt"
+      };
+    }
+  }
+  const repeatedChars = /(.)\1{100,}/g;
+  if (repeatedChars.test(trimmed)) {
+    return {
+      valid: false,
+      error: "Prompt contains excessive repetition",
+      field: "prompt"
+    };
+  }
+  return { valid: true };
+}
+function validateSkillCategory(category) {
+  if (!category || typeof category !== "string") {
+    return {
+      valid: false,
+      error: "Category is required",
+      field: "category"
+    };
+  }
+  const trimmed = category.trim().toLowerCase();
+  if (trimmed.length > SKILL_LIMITS.CATEGORY_MAX_LENGTH) {
+    return {
+      valid: false,
+      error: `Category must not exceed ${SKILL_LIMITS.CATEGORY_MAX_LENGTH} characters`,
+      field: "category"
+    };
+  }
+  if (!VALID_CATEGORIES.includes(trimmed)) {
+    return {
+      valid: false,
+      error: `Invalid category. Must be one of: ${VALID_CATEGORIES.join(", ")}`,
+      field: "category"
+    };
+  }
+  return { valid: true };
+}
+function validateSubSkills(subSkills) {
+  if (!subSkills || subSkills.length === 0) {
+    return { valid: true };
+  }
+  if (!Array.isArray(subSkills)) {
+    return {
+      valid: false,
+      error: "Sub-skills must be an array",
+      field: "subSkills"
+    };
+  }
+  if (subSkills.length > SKILL_LIMITS.SUBSKILLS_MAX_COUNT) {
+    return {
+      valid: false,
+      error: `Cannot have more than ${SKILL_LIMITS.SUBSKILLS_MAX_COUNT} sub-skills`,
+      field: "subSkills"
+    };
+  }
+  for (let i = 0; i < subSkills.length; i++) {
+    const subSkill = subSkills[i];
+    if (typeof subSkill !== "string" || subSkill.trim().length === 0) {
+      return {
+        valid: false,
+        error: `Sub-skill at index ${i} must be a non-empty string`,
+        field: "subSkills"
+      };
+    }
+  }
+  return { valid: true };
+}
+function validateSkillData(data) {
+  const nameResult = validateSkillName(data.name);
+  if (!nameResult.valid) {
+    return nameResult;
+  }
+  const descriptionResult = validateSkillDescription(data.description);
+  if (!descriptionResult.valid) {
+    return descriptionResult;
+  }
+  const categoryResult = validateSkillCategory(data.category);
+  if (!categoryResult.valid) {
+    return categoryResult;
+  }
+  const promptResult = validateSkillPrompt(data.prompt);
+  if (!promptResult.valid) {
+    return promptResult;
+  }
+  const subSkillsResult = validateSubSkills(data.subSkills);
+  if (!subSkillsResult.valid) {
+    return subSkillsResult;
+  }
+  return { valid: true };
+}
+function sanitizePrompt(prompt) {
+  let sanitized = prompt;
+  sanitized = sanitized.replace(/\0/g, "");
+  sanitized = sanitized.replace(/\s+/g, " ").trim();
+  return sanitized;
+}
+function createSkillError(code, message, extras) {
+  return {
+    code,
+    message,
+    ...extras
+  };
+}
+function isSkillError(error) {
+  return typeof error === "object" && error !== null && "code" in error && "message" in error;
+}
+const SKILL_ERRORS = {
+  // Validation errors
+  VALIDATION_FAILED: createSkillError("VALIDATION_FAILED", "技能数据验证失败", {
+    details: "请确保所有字段符合要求",
+    recovery: [
+      "检查必填字段是否都已填写",
+      "确认字段长度在限制范围内",
+      "验证字段格式是否正确"
+    ]
+  }),
+  MISSING_REQUIRED_FIELD: (field) => createSkillError("MISSING_REQUIRED_FIELD", `缺少必填字段`, {
+    field,
+    details: `字段 "${field}" 是必填的`,
+    recovery: [`请填写 ${field} 字段`]
+  }),
+  // Permission errors
+  CANNOT_MODIFY_BUILTIN: createSkillError(
+    "CANNOT_MODIFY_BUILTIN",
+    "无法修改内置技能",
+    {
+      details: "内置技能是系统提供的，不能直接修改",
+      recovery: [
+        "如需自定义，请创建一个新的用户技能",
+        "复制内置技能的内容到新技能中",
+        "根据需要修改新技能的内容"
+      ]
+    }
+  ),
+  CANNOT_DELETE_BUILTIN: createSkillError(
+    "CANNOT_DELETE_BUILTIN",
+    "无法删除内置技能",
+    {
+      details: "内置技能是系统提供的，不能删除",
+      recovery: [
+        "您可以禁用不需要的内置技能",
+        "在设置中切换技能的启用状态"
+      ]
+    }
+  ),
+  SKILL_NOT_ENABLED: (skillName) => createSkillError("SKILL_NOT_ENABLED", `技能 "${skillName}" 未启用`, {
+    details: "该技能当前处于禁用状态",
+    recovery: [
+      "在技能面板中启用该技能",
+      "确保该技能在已启用技能列表中",
+      "重新加载技能列表"
+    ]
+  }),
+  // Resource errors
+  SKILL_NOT_FOUND: (skillId) => createSkillError("SKILL_NOT_FOUND", `找不到技能: ${skillId}`, {
+    details: "技能 ID 不存在或已被删除",
+    recovery: [
+      "检查技能 ID 是否正确",
+      "刷新技能列表",
+      "该技能可能已被删除"
+    ]
+  }),
+  SKILL_ALREADY_EXISTS: (skillId) => createSkillError("SKILL_ALREADY_EXISTS", `技能已存在: ${skillId}`, {
+    details: "具有相同 ID 的技能已经存在",
+    recovery: [
+      "使用不同的 ID 创建新技能",
+      "如果要更新现有技能，请使用更新功能",
+      "删除现有技能后重新创建"
+    ]
+  }),
+  // Storage errors
+  STORAGE_ERROR: (details) => createSkillError("STORAGE_ERROR", "存储错误", {
+    details,
+    recovery: [
+      "检查磁盘空间是否充足",
+      "确保有文件写入权限",
+      "尝试重新启动应用",
+      "检查存储路径是否有效"
+    ]
+  }),
+  SAVE_FAILED: createSkillError("SAVE_FAILED", "保存技能失败", {
+    details: "无法将技能数据保存到存储",
+    recovery: [
+      "检查技能数据格式是否正确",
+      "确保存储路径可访问",
+      "尝试删除并重新创建技能",
+      "查看控制台日志获取详细错误信息"
+    ]
+  })
+};
+function wrapSkillError(error, context, code = "UNKNOWN_ERROR") {
+  if (isSkillError(error)) {
+    return error;
+  }
+  if (error instanceof Error) {
+    return createSkillError(code, `${context}: ${error.message}`, {
+      details: error.stack,
+      originalError: error
+    });
+  }
+  return createSkillError(code, `${context}: 未知错误`, {
+    originalError: error
+  });
+}
+function parseValidationError(error) {
+  const errorMsg = error instanceof Error ? error.message : String(error);
+  if (errorMsg.includes("name")) {
+    return SKILL_ERRORS.MISSING_REQUIRED_FIELD("name");
+  }
+  if (errorMsg.includes("description")) {
+    return SKILL_ERRORS.MISSING_REQUIRED_FIELD("description");
+  }
+  if (errorMsg.includes("prompt")) {
+    return SKILL_ERRORS.MISSING_REQUIRED_FIELD("prompt");
+  }
+  if (errorMsg.includes("category")) {
+    return SKILL_ERRORS.MISSING_REQUIRED_FIELD("category");
+  }
+  return SKILL_ERRORS.VALIDATION_FAILED;
+}
 function registerSkillsHandlers(ipcMain) {
   console.log("[Skills] Registering skills handlers...");
   ipcMain.on("skills:list", (event, params) => {
@@ -3774,12 +4210,29 @@ function registerSkillsHandlers(ipcMain) {
   ipcMain.on("skills:create", (event, params) => {
     console.log("[Skills] Create request:", params.name);
     try {
+      const validation = validateSkillData({
+        name: params.name,
+        description: params.description,
+        category: params.category,
+        prompt: params.prompt,
+        subSkills: params.subSkills
+      });
+      if (!validation.valid) {
+        event.reply("skills:create:result", {
+          success: false,
+          error: validation.error || "Validation failed",
+          field: validation.field
+        });
+        return;
+      }
+      const sanitizedPrompt = sanitizePrompt(params.prompt);
       const skill = createUserSkill(
         params.name,
         params.description,
         params.category,
-        params.prompt,
-        params.subSkills
+        sanitizedPrompt,
+        params.subSkills,
+        params.version
       );
       saveUserSkill(skill);
       event.reply("skills:create:result", {
@@ -3800,16 +4253,40 @@ function registerSkillsHandlers(ipcMain) {
       const loader = getSkillLoader();
       const existing = loader.getSkill(params.skillId);
       if (!existing) {
+        const skillError = SKILL_ERRORS.SKILL_NOT_FOUND(params.skillId);
         event.reply("skills:update:result", {
           success: false,
-          error: `Skill not found: ${params.skillId}`
+          error: skillError.message,
+          details: skillError.details,
+          recovery: skillError.recovery
         });
         return;
       }
       if (existing.isBuiltin) {
         event.reply("skills:update:result", {
           success: false,
-          error: "Cannot modify built-in skills"
+          error: SKILL_ERRORS.CANNOT_MODIFY_BUILTIN.message,
+          details: SKILL_ERRORS.CANNOT_MODIFY_BUILTIN.details,
+          recovery: SKILL_ERRORS.CANNOT_MODIFY_BUILTIN.recovery
+        });
+        return;
+      }
+      const updatedData = {
+        name: params.name || existing.name,
+        description: params.description || existing.description,
+        category: params.category || existing.category,
+        prompt: params.prompt || existing.prompt,
+        subSkills: params.subSkills !== void 0 ? params.subSkills : existing.subSkills
+      };
+      const validation = validateSkillData(updatedData);
+      if (!validation.valid) {
+        const error = parseValidationError(validation.error);
+        event.reply("skills:update:result", {
+          success: false,
+          error: error.message,
+          field: error.field,
+          details: error.details,
+          recovery: error.recovery
         });
         return;
       }
@@ -3818,7 +4295,7 @@ function registerSkillsHandlers(ipcMain) {
         ...params.name && { name: params.name },
         ...params.description && { description: params.description },
         ...params.category && { category: params.category },
-        ...params.prompt && { prompt: params.prompt },
+        ...params.prompt && { prompt: sanitizePrompt(params.prompt) },
         ...params.subSkills && { subSkills: params.subSkills },
         updatedAt: /* @__PURE__ */ new Date()
       };
@@ -3829,9 +4306,12 @@ function registerSkillsHandlers(ipcMain) {
       });
     } catch (error) {
       console.error("[Skills] Update error:", error);
+      const wrappedError = wrapSkillError(error, "更新技能失败");
       event.reply("skills:update:result", {
         success: false,
-        error: error instanceof Error ? error.message : "Unknown error"
+        error: wrappedError.message,
+        details: wrappedError.details,
+        recovery: wrappedError.recovery
       });
     }
   });
@@ -3866,12 +4346,12 @@ function registerSkillsHandlers(ipcMain) {
       });
     }
   });
-  ipcMain.on("skills:toggle", (event, { skillId, enabled }) => {
+  ipcMain.on("skills:toggle", async (event, { skillId, enabled }) => {
     console.log("[Skills] Toggle request:", skillId, enabled);
     try {
       toggleSkillEnabled(skillId, enabled);
       const enabledIds = getEnabledSkillIds();
-      syncEnabledSkills(enabledIds);
+      await syncEnabledSkills(enabledIds);
       event.reply("skills:toggle:result", {
         success: true,
         enabled
@@ -3884,11 +4364,11 @@ function registerSkillsHandlers(ipcMain) {
       });
     }
   });
-  ipcMain.on("skills:setEnabled", (event, { skillIds }) => {
+  ipcMain.on("skills:setEnabled", async (event, { skillIds }) => {
     console.log("[Skills] Set enabled request:", skillIds);
     try {
       setEnabledSkillIds(skillIds);
-      syncEnabledSkills(skillIds);
+      await syncEnabledSkills(skillIds);
       event.reply("skills:setEnabled:result", {
         success: true,
         skillIds
@@ -3972,35 +4452,63 @@ function registerSkillsHandlers(ipcMain) {
       });
     }
   });
-  ipcMain.on("skills:import", (event, { data }) => {
-    console.log("[Skills] Import request:", data.skills.length, "skills");
-    try {
-      const imported = [];
-      for (const skillData of data.skills) {
-        const skill = {
-          ...skillData,
-          id: `imported-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
-          enabled: false,
-          isBuiltin: false,
-          createdAt: /* @__PURE__ */ new Date(),
-          updatedAt: /* @__PURE__ */ new Date()
-        };
-        saveUserSkill(skill);
-        imported.push(skill);
+  ipcMain.on(
+    "skills:import",
+    (event, {
+      data
+    }) => {
+      console.log("[Skills] Import request:", data.skills.length, "skills");
+      try {
+        const imported = [];
+        const errors = [];
+        for (let i = 0; i < data.skills.length; i++) {
+          const skillData = data.skills[i];
+          const validation = validateSkillData({
+            name: skillData.name,
+            description: skillData.description,
+            category: skillData.category,
+            prompt: skillData.prompt,
+            subSkills: skillData.subSkills
+          });
+          if (!validation.valid) {
+            errors.push({
+              index: i,
+              skill: skillData.name,
+              error: validation.error || "Validation failed"
+            });
+            continue;
+          }
+          const skill = {
+            ...skillData,
+            id: `imported-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
+            prompt: sanitizePrompt(skillData.prompt),
+            // Sanitize prompt
+            enabled: false,
+            isBuiltin: false,
+            createdAt: /* @__PURE__ */ new Date(),
+            updatedAt: /* @__PURE__ */ new Date()
+          };
+          saveUserSkill(skill);
+          imported.push(skill);
+        }
+        getSkillLoader().refresh();
+        event.reply("skills:import:result", {
+          success: true,
+          imported: imported.map((s) => ({ id: s.id, name: s.name })),
+          total: data.skills.length,
+          importedCount: imported.length,
+          errorCount: errors.length,
+          errors: errors.length > 0 ? errors : void 0
+        });
+      } catch (error) {
+        console.error("[Skills] Import error:", error);
+        event.reply("skills:import:result", {
+          success: false,
+          error: error instanceof Error ? error.message : "Unknown error"
+        });
       }
-      getSkillLoader().refresh();
-      event.reply("skills:import:result", {
-        success: true,
-        imported: imported.map((s) => ({ id: s.id, name: s.name }))
-      });
-    } catch (error) {
-      console.error("[Skills] Import error:", error);
-      event.reply("skills:import:result", {
-        success: false,
-        error: error instanceof Error ? error.message : "Unknown error"
-      });
     }
-  });
+  );
   ipcMain.on("skills:getStats", (event) => {
     console.log("[Skills] Get stats request");
     try {
@@ -4013,10 +4521,13 @@ function registerSkillsHandlers(ipcMain) {
         builtin: allSkills.filter((s) => s.isBuiltin).length,
         user: allSkills.filter((s) => !s.isBuiltin).length,
         enabled: enabledIds.length,
-        byCategory: allSkills.reduce((acc, skill) => {
-          acc[skill.category] = (acc[skill.category] || 0) + 1;
-          return acc;
-        }, {}),
+        byCategory: allSkills.reduce(
+          (acc, skill) => {
+            acc[skill.category] = (acc[skill.category] || 0) + 1;
+            return acc;
+          },
+          {}
+        ),
         mostUsed: Object.values(usageStats).sort((a, b) => b.count - a.count).slice(0, 5).map((s) => ({ skillId: s.skillId, count: s.count, lastUsed: s.lastUsed }))
       };
       event.reply("skills:getStats:result", {
@@ -4055,6 +4566,39 @@ function registerSkillsHandlers(ipcMain) {
       });
     }
   });
+  ipcMain.on("skills:getCacheStats", (event) => {
+    console.log("[Skills] Get cache stats request");
+    try {
+      const loader = getSkillLoader();
+      const stats = loader.getCacheStats();
+      event.reply("skills:getCacheStats:result", {
+        success: true,
+        stats
+      });
+    } catch (error) {
+      console.error("[Skills] Get cache stats error:", error);
+      event.reply("skills:getCacheStats:result", {
+        success: false,
+        error: error instanceof Error ? error.message : "Unknown error"
+      });
+    }
+  });
+  ipcMain.on("skills:clearCache", (event) => {
+    console.log("[Skills] Clear cache request");
+    try {
+      const loader = getSkillLoader();
+      loader.clearCache();
+      event.reply("skills:clearCache:result", {
+        success: true
+      });
+    } catch (error) {
+      console.error("[Skills] Clear cache error:", error);
+      event.reply("skills:clearCache:result", {
+        success: false,
+        error: error instanceof Error ? error.message : "Unknown error"
+      });
+    }
+  });
   console.log("[Skills] Handlers registered successfully");
 }
 let mainWindow = null;

package/out/renderer/assets/{index-B2t12qbx.css → index-0WBq9FlY.css}

@@ -96,6 +96,7 @@
     --spacing: .25rem;
     --container-md: 28rem;
     --container-lg: 32rem;
+    --container-2xl: 42rem;
     --container-3xl: 48rem;
     --text-xs: .75rem;
     --text-xs--line-height: calc(1 / .75);
@@ -751,6 +752,10 @@
     max-height: 80vh;
   }
 
+  .max-h-\[90vh\] {
+    max-height: 90vh;
+  }
+
   .min-h-0 {
     min-height: calc(var(--spacing) * 0);
   }
@@ -847,6 +852,10 @@
     width: 1px;
   }
 
+  .max-w-2xl {
+    max-width: var(--container-2xl);
+  }
+
   .max-w-3xl {
     max-width: var(--container-3xl);
   }

package/out/renderer/assets/{index-Be3u7LN6.js → index-ZbiHA5we.js}

@@ -76278,7 +76278,14 @@ function TabbedPanel({ threadId, showTabBar = true }) {
     ) })
   ] });
 }
-function Switch({ checked = false, onCheckedChange, disabled = false, className, onClick, ...props }) {
+function Switch({
+  checked = false,
+  onCheckedChange,
+  disabled = false,
+  className,
+  onClick,
+  ...props
+}) {
   const handleClick = (e) => {
     onClick?.(e);
     if (!disabled) {
@@ -76611,19 +76618,20 @@ function CreateSkillDialog({ open, onClose, onCreate }) {
   };
   const currentTemplate = SKILL_TEMPLATES.find((t) => t.id === selectedTemplate);
   if (!open) return null;
-  return /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "fixed inset-0 z-50 flex items-center justify-center bg-black/50", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "w-full max-w-3xl mx-4 bg-[#1A1A1D] rounded-lg shadow-xl border border-white/10", children: [
-    /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between px-6 py-4 border-b border-white/5", children: [
+  return /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "fixed inset-0 z-50 flex items-center justify-center bg-black/50 p-4", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "w-full max-w-2xl bg-[#1A1A1D] rounded-lg shadow-xl border border-white/10 flex flex-col max-h-[90vh]", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between px-6 py-4 border-b border-white/5 flex-shrink-0", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("h2", { className: "text-lg font-semibold text-white", children: "Create Custom Skill" }),
-      /* @__PURE__ */ jsxRuntimeExports.jsx(
-        "button",
+      /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: onClose, className: "text-gray-400 hover:text-white transition-colors", children: /* @__PURE__ */ jsxRuntimeExports.jsx("svg", { className: "w-5 h-5", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
+        "path",
         {
-          onClick: onClose,
-          className: "text-gray-400 hover:text-white transition-colors",
-          children: /* @__PURE__ */ jsxRuntimeExports.jsx("svg", { className: "w-5 h-5", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsxRuntimeExports.jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M6 18L18 6M6 6l12 12" }) })
+          strokeLinecap: "round",
+          strokeLinejoin: "round",
+          strokeWidth: 2,
+          d: "M6 18L18 6M6 6l12 12"
         }
-      )
+      ) }) })
     ] }),
-    /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2 px-6 py-3 border-b border-white/5", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2 px-6 py-3 border-b border-white/5 flex-shrink-0", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx(
         "button",
         {
@@ -76643,7 +76651,7 @@ function CreateSkillDialog({ open, onClose, onCreate }) {
         }
       )
     ] }),
-    /* @__PURE__ */ jsxRuntimeExports.jsxs("form", { onSubmit: handleSubmit, className: "p-6 space-y-4", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsxs("form", { onSubmit: handleSubmit, className: "p-6 space-y-4 overflow-y-auto flex-1", children: [
       mode === "template" && /* Template Selection */
       /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
         /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "block text-sm font-medium text-gray-300 mb-2", children: "Choose Template" }),
@@ -76749,7 +76757,7 @@ function CreateSkillDialog({ open, onClose, onCreate }) {
         ),
         /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "mt-1 text-xs text-gray-500", children: "This prompt will be loaded when the agent activates this skill, providing specialized knowledge and instructions." })
       ] }),
-      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-end gap-3 pt-4 border-t border-white/5", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-end gap-3 pt-4 border-t border-white/5 flex-shrink-0", children: [
         /* @__PURE__ */ jsxRuntimeExports.jsx(
           "button",
           {
@@ -76780,7 +76788,13 @@ const categoryColors = {
   system: "bg-orange-500/10 text-orange-500 border-orange-500/20",
   custom: "bg-cyan-500/10 text-cyan-500 border-cyan-500/20"
 };
-function SkillDetailDialog({ skill, open, onClose, onToggle, onDelete }) {
+function SkillDetailDialog({
+  skill,
+  open,
+  onClose,
+  onToggle,
+  onDelete
+}) {
   if (!open) return null;
   return /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "fixed inset-0 z-50 flex items-center justify-center bg-black/50", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "w-full max-w-3xl mx-4 max-h-[80vh] bg-[#1A1A1D] rounded-lg shadow-xl border border-white/10 flex flex-col", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-start justify-between px-6 py-4 border-b border-white/5", children: [
@@ -76803,7 +76817,15 @@ function SkillDetailDialog({ skill, open, onClose, onToggle, onDelete }) {
         {
           onClick: onClose,
           className: "ml-4 text-gray-400 hover:text-white transition-colors",
-          children: /* @__PURE__ */ jsxRuntimeExports.jsx("svg", { className: "w-5 h-5", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsxRuntimeExports.jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M6 18L18 6M6 6l12 12" }) })
+          children: /* @__PURE__ */ jsxRuntimeExports.jsx("svg", { className: "w-5 h-5", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
+            "path",
+            {
+              strokeLinecap: "round",
+              strokeLinejoin: "round",
+              strokeWidth: 2,
+              d: "M6 18L18 6M6 6l12 12"
+            }
+          ) })
         }
       )
     ] }),
@@ -77215,7 +77237,15 @@ function RightPanel() {
         else if (nextPanel === "skills") setSkillsOpen(false);
       }
     },
-    [getContentHeights, getAvailableContentHeight, filesOpen, agentsOpen, skillsOpen, agentsHeight, skillsHeight]
+    [
+      getContentHeights,
+      getAvailableContentHeight,
+      filesOpen,
+      agentsOpen,
+      skillsOpen,
+      agentsHeight,
+      skillsHeight
+    ]
   );
   const handleFilesResize = reactExports.useCallback(
     (totalDelta) => {
@@ -78201,7 +78231,7 @@ function App() {
         },
         children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "app-badge-name", children: "OPENWORK" }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "app-badge-version", children: "0.2.4" })
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "app-badge-version", children: "0.3.0" })
         ]
       }
     ),

package/out/renderer/index.html

@@ -7,8 +7,8 @@
       http-equiv="Content-Security-Policy"
       content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:"
     />
-    <script type="module" crossorigin src="./assets/index-Be3u7LN6.js"></script>
-    <link rel="stylesheet" crossorigin href="./assets/index-B2t12qbx.css">
+    <script type="module" crossorigin src="./assets/index-ZbiHA5we.js"></script>
+    <link rel="stylesheet" crossorigin href="./assets/index-0WBq9FlY.css">
   </head>
   <body>
     <div id="root"></div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniqueli/openwork",
-  "version": "0.2.4",
+  "version": "0.3.0",
   "description": "A tactical agent interface for deepagentsjs with multiple custom API support",
   "main": "./out/main/index.js",
   "files": [