@webskill/sdk 0.0.2 → 0.0.4

package/dist/{dist-BMioPPri.js → dist-Bvhbxrrt.js}

@@ -1,4 +1,4 @@
-import { D as normalizeToolContent, G as parseSkillMarkdown, H as isValidSkillName, J as resolveInsideRoot, O as parseBridgeRequest, R as WebSkillError, Y as validateSkills, o as FsArtifactStore, s as FsMemoryStore, x as bridgeError } from "./dist-BbyIk4vG.js";
+import { A as parseBridgeRequest, C as bridgeError, H as WebSkillError, I as SKILLS_LOCKFILE, J as isValidSkillName, L as SKILL_MANIFEST_FILE, W as buildManifest, Z as parseSkillMarkdown, et as resolveInsideRoot, k as normalizeToolContent, nt as verifyManifest, o as FsArtifactStore, s as FsMemoryStore, tt as validateSkills } from "./dist-COsE72Ct.js";
 import { existsSync, promises, readFileSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -796,10 +796,6 @@ async function removeDirQuiet(fs, dir) {
 		if (await fs.exists(dir)) await fs.remove(dir, { recursive: true });
 	} catch {}
 }
-/** 技能目录内的安装清单文件名（不参与 files 列表与 digest） */
-const SKILL_MANIFEST_FILE = "webskill.skill-manifest.json";
-/** managed root 下的锁定文件名（不参与 files 列表与 digest） */
-const SKILLS_LOCKFILE = "skills.lock.json";
 const messageOf$3 = (e) => e instanceof Error ? e.message : String(e);
 /** 导出技能目录全部文件（含 manifest）为 zip/tar 归档，返回 outPath */
 async function exportArchive(fs, skillRoot, options) {
@@ -824,7 +820,7 @@ async function readArchiveManifest(fs, archivePath) {
 	const data = await fs.readBinary(archivePath);
 	if (isZipArchive(data)) {
 		const entries = unzipSync(data);
-		const key = Object.keys(entries).find((k) => k === "webskill.skill-manifest.json" || k.endsWith(`/webskill.skill-manifest.json`));
+		const key = Object.keys(entries).find((k) => k === "webskill.skill-manifest.json" || k.endsWith(`/${"webskill.skill-manifest.json"}`));
 		if (!key) throw notFound();
 		return JSON.parse(new TextDecoder().decode(entries[key]));
 	}
@@ -833,7 +829,7 @@ async function readArchiveManifest(fs, archivePath) {
 		await tar.t({
 			file: toPlatform(archivePath),
 			onentry: (entry) => {
-				if (entry.path === "webskill.skill-manifest.json" || entry.path.endsWith(`/webskill.skill-manifest.json`)) {
+				if (entry.path === "webskill.skill-manifest.json" || entry.path.endsWith(`/${"webskill.skill-manifest.json"}`)) {
 					const chunks = [];
 					entry.on("data", (chunk) => chunks.push(chunk));
 					entry.on("end", () => {
@@ -903,10 +899,6 @@ async function stageGit(source, ctx) {
 function sha256Hex(data) {
 	return createHash("sha256").update(data).digest("hex");
 }
-/** 整体 digest：逐文件 "<path>:<sha256>\n" 拼接串（文件按 path 排序）的 sha256 */
-function computeDigest(files) {
-	return sha256Hex([...files].sort((a, b) => a.path.localeCompare(b.path)).map((f) => `${f.path}:${f.sha256}\n`).join(""));
-}
 const messageOf$1 = (e) => e instanceof Error ? e.message : String(e);
 /** http 源：下载归档（可选 expectedSha256 校验包体）→ 解包 → 定位技能根 */
 async function stageHttp(source, ctx, expectedSha256) {
@@ -1041,18 +1033,14 @@ async function createManifest(fs, skillRoot, input) {
 			sha256: sha256Hex(content)
 		});
 	}
-	const manifest = {
-		schemaVersion: 1,
+	const manifest = await buildManifest({
 		name: input.name,
 		...input.version !== void 0 ? { version: input.version } : {},
 		source: input.source,
 		installedAt: input.installedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
-		integrity: {
-			algorithm: "sha256",
-			digest: computeDigest(files)
-		},
-		files
-	};
+		files,
+		sha256: sha256Hex
+	});
 	await fs.writeText(`${skillRoot}/${SKILL_MANIFEST_FILE}`, JSON.stringify(manifest, null, 2));
 	return manifest;
 }
@@ -1066,22 +1054,15 @@ async function readManifest(fs, skillRoot) {
 		throw new WebSkillError("INTEGRITY_FAILED", `Skill manifest at ${path} is corrupted: ${e instanceof Error ? e.message : String(e)}`, e);
 	}
 }
-/** 按 manifest.files 逐文件重算 sha256 比对 */
+/** 按 manifest.files 逐文件重算 sha256 比对（core 纯逻辑校验） */
 async function verifyIntegrity(fs, skillRoot) {
 	const manifest = await readManifest(fs, skillRoot);
-	const mismatches = [];
+	const actualHashes = /* @__PURE__ */ new Map();
 	for (const file of manifest.files) {
 		const path = `${skillRoot}/${file.path}`;
-		if (!await fs.exists(path)) {
-			mismatches.push(file.path);
-			continue;
-		}
-		if (sha256Hex(await fs.readBinary(path)) !== file.sha256) mismatches.push(file.path);
+		if (await fs.exists(path)) actualHashes.set(file.path, sha256Hex(await fs.readBinary(path)));
 	}
-	return {
-		ok: mismatches.length === 0,
-		mismatches
-	};
+	return verifyManifest(manifest, actualHashes);
 }
 const messageOf = (e) => e instanceof Error ? e.message : String(e);
 const asInstallFailed = (e) => e instanceof WebSkillError && e.code === "INSTALL_FAILED" ? e : new WebSkillError("INSTALL_FAILED", `Install failed: ${messageOf(e)}`, e);
@@ -1126,6 +1107,7 @@ var SkillManager = class {
 				case "npm":
 					staged = await stageNpm(source, ctx);
 					break;
+				case "archive": throw new WebSkillError("TOOL_UNSUPPORTED", "The \"archive\" install source is only supported by the browser skill manager");
 			}
 			let name;
 			let version;
@@ -1319,4 +1301,4 @@ async function doProbeLlmCapabilities(config) {
 }
 
 //#endregion
-export { NodeScriptExecutor as a, SKILL_MANIFEST_FILE as c, loadLlmConfigFromEnv as d, probeLlmCapabilities as f, NodeFS as i, SandboxedScriptExecutor as l, FileArtifactStore as n, OxcSchemaInferer as o, readArchiveManifest as p, FileMemoryStore as r, SKILLS_LOCKFILE as s, CliUiBridge as t, SkillManager as u };
+export { NodeScriptExecutor as a, SkillManager as c, readArchiveManifest as d, NodeFS as i, loadLlmConfigFromEnv as l, FileArtifactStore as n, OxcSchemaInferer as o, FileMemoryStore as r, SandboxedScriptExecutor as s, CliUiBridge as t, probeLlmCapabilities as u };