@webskill/sdk 0.13.0 → 0.15.0

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { B as JsonSchema, _ as LlmToolSpec, it as SkillCatalogEntry, ot as SkillDocument } from "./types-DLctJep_-B5G4uk2u.js";
-import { F as ExternalToolSource, P as ExternalSkillProvider, dn as ToolDisclosure, ir as mergeCatalogEntries, pn as ToolResult } from "./index-DkvBhJQy.js";
+import { K as JsonSchema, _ as LlmToolSpec, ft as SkillDocument, ut as SkillCatalogEntry } from "./types-C3V6lAeO-BIf7UB2e.js";
+import { R as ExternalSkillProvider, _n as ToolDisclosure, fr as mergeCatalogEntries, yn as ToolResult, z as ExternalToolSource } from "./index-Oc3H89TJ.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -75,6 +75,59 @@ declare class EndpointRegistry<TClient> {
   waitFor(endpoint: string, timeoutMs: number): Promise<TClient>;
 }
 //#endregion
+//#region src/pageHost/pageHostAnchor.d.ts
+/**
+ * 页面宿主握手（分册 18 FR-18.1）。
+ *
+ * 页面与宿主（浏览器扩展）是两个进程，各自持有一份 `EndpointRegistry`。
+ * 页面注册的端点如果不主动交出去，宿主那边永远是空的。本模块就是那个交接口。
+ *
+ * ## 只在宿主先落位时才交
+ *
+ * 锚点由宿主在**页面脚本运行之前**植入（扩展的 `document_start` 内容脚本）。
+ * 页面没被宿主接管时锚点不存在，本模块除了一次全局属性读取之外什么都不做——
+ * 默认态是「不暴露」，不是「对全网开放」（D-18-3）。
+ *
+ * ## 挡不住同世界的脚本，这一点不粉饰
+ *
+ * 锚点在页面自己的 JS 世界里，页面上任何脚本都读得到它、也能调它的 `register()`
+ * 塞进一个假端点。nonce、私有字段、闭包**都挡不住**同世界的脚本，这在 MAIN world
+ * 里无解。因此宿主必须把握手拿到的一切当作不可信内容（FR-18.7 第 1 条）。
+ * 反过来，握手也没给页面新权限：页面脚本本来就能调用页面自己的端点。
+ */
+/** 宿主植入的锚点契约。SDK 只消费，不生产，也不假设宿主是浏览器扩展 */
+interface PageHostAnchor {
+  version: 1;
+  register(endpoint: string, client: unknown): void;
+  unregister(endpoint: string): void;
+  /**
+   * 0.14.0 分册 21：页面自荐可用的数据源。宿主可不实现，页面据此判断本宿主支不支持。
+   *
+   * 入参是 `unknown[]` 而不是结构化类型：这段内容来自页面，
+   * 标成结构化类型会让宿主侧读代码的人以为它已经被验证过了。
+   * @experimental
+   */
+  declareDataSources?(sources: readonly unknown[]): void;
+}
+/** 全局属性名。宿主侧写死同一个串，改这里必须同时改宿主 */
+declare const PAGE_HOST_ANCHOR_KEY = "__webskillPageHost";
+/**
+ * 向宿主登记 / 注销一个端点。
+ *
+ * 全程吞异常是**刻意的**：握手是附加行为，宿主那边出任何问题都不能让页面自己的
+ * 端点注册失败。把这个 catch 去掉，一个坏掉的扩展就能让页面的 chatbot 一起坏掉。
+ */
+declare function notifyPageHost(kind: 'register', endpoint: string, client: unknown): void;
+declare function notifyPageHost(kind: 'unregister', endpoint: string): void;
+/**
+ * 向宿主自荐本页可用的数据源（0.14.0 分册 21）。
+ *
+ * 宿主不实现该方法即静默返回：页面无从得知宿主支不支持，这正是「不知道 ≠ 没有」。
+ * 提议**不等于**可用——宿主那边它只是候选，用户点头前谁都取不到数。
+ * @experimental
+ */
+declare function declareDataSourcesToPageHost(sources: readonly unknown[]): void;
+//#endregion
 //#region src/resolver/mcpToolResolver.d.ts
 /** MCP Client 最小接口（SDK Client 结构兼容，测试可纯对象替身） */
 interface McpClientLike {
@@ -515,4 +568,4 @@ interface RemoteEndpointHandle {
  */
 declare function connectRemoteEndpoint(registry: EndpointRegistry<McpClientLike>, config: RemoteEndpointConfig): Promise<RemoteEndpointHandle>;
 //#endregion
-export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, type McpSourceTrust, type McpToolDisclosure, McpToolResolver, type McpToolVisibility, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, WEB_MCP_SOURCE_ID_MAX, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, type McpSourceTrust, type McpToolDisclosure, McpToolResolver, type McpToolVisibility, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, PAGE_HOST_ANCHOR_KEY, type PageHostAnchor, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, WEB_MCP_SOURCE_ID_MAX, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, declareDataSourcesToPageHost, endpointToolLlmName, notifyPageHost, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/mcp.js

@@ -1,7 +1,8 @@
-import { M as messageOf, g as assertRemoteUrlAllowed, h as WebSkillError } from "./dist-Bev6i6Ip.js";
-import { St as normalizeToolContent, _t as mergeCatalogEntries } from "./dist-ExSQky4C.js";
+import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
+import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
+import { n as normalizeToolContent, t as mergeCatalogEntries } from "./external-_ZRQe-V9.js";
 
-//#region ../mcp/dist/index.js
+//#region ../mcp/src/transport/jsonRpc.ts
 /**
 * JSON-RPC 2.0 消息校验（守卫）。
 * 规则：jsonrpc === '2.0'；请求/通知有 method；响应有 id 且 result/error 恰好其一；
@@ -29,6 +30,9 @@ function validateJsonRpcMessage(value) {
 	}
 	return true;
 }
+
+//#endregion
+//#region ../mcp/src/transport/messageChannelTransport.ts
 const currentOrigin = () => globalThis.location?.origin;
 /**
 * 跑在 MessageChannel/MessagePort 端点间的 MCP Transport。
@@ -112,6 +116,42 @@ var MessageChannelTransport = class {
 		this.onmessage?.(event.data);
 	}
 };
+
+//#endregion
+//#region ../mcp/src/pageHost/pageHostAnchor.ts
+/** 全局属性名。宿主侧写死同一个串，改这里必须同时改宿主 */
+const PAGE_HOST_ANCHOR_KEY = "__webskillPageHost";
+function readAnchor() {
+	const raw = globalThis[PAGE_HOST_ANCHOR_KEY];
+	if (typeof raw !== "object" || raw === null) return void 0;
+	const candidate = raw;
+	if (candidate.version !== 1) return void 0;
+	if (typeof candidate.register !== "function" || typeof candidate.unregister !== "function") return void 0;
+	return candidate;
+}
+function notifyPageHost(kind, endpoint, client) {
+	try {
+		const anchor = readAnchor();
+		if (anchor === void 0) return;
+		if (kind === "register") anchor.register(endpoint, client);
+		else anchor.unregister(endpoint);
+	} catch {}
+}
+/**
+* 向宿主自荐本页可用的数据源（0.14.0 分册 21）。
+*
+* 宿主不实现该方法即静默返回：页面无从得知宿主支不支持，这正是「不知道 ≠ 没有」。
+* 提议**不等于**可用——宿主那边它只是候选，用户点头前谁都取不到数。
+* @experimental
+*/
+function declareDataSourcesToPageHost(sources) {
+	try {
+		readAnchor()?.declareDataSources?.(sources);
+	} catch {}
+}
+
+//#endregion
+//#region ../mcp/src/registry/endpointRegistry.ts
 /** endpoint 名 → client 注册表；单调版本号，事件驱动等待（禁止轮询） */
 var EndpointRegistry = class {
 	#clients = /* @__PURE__ */ new Map();
@@ -124,12 +164,14 @@ var EndpointRegistry = class {
 		this.#clients.set(endpoint, client);
 		this.#versions.set(endpoint, (this.#versions.get(endpoint) ?? 0) + 1);
 		this.#flushWaiters(endpoint);
+		notifyPageHost("register", endpoint, client);
 	}
 	/** 热替换 client，版本号 +1 */
 	set(endpoint, client) {
 		this.#clients.set(endpoint, client);
 		this.#versions.set(endpoint, (this.#versions.get(endpoint) ?? 0) + 1);
 		this.#flushWaiters(endpoint);
+		notifyPageHost("register", endpoint, client);
 	}
 	get(endpoint) {
 		const client = this.#clients.get(endpoint);
@@ -138,6 +180,7 @@ var EndpointRegistry = class {
 	}
 	unregister(endpoint) {
 		this.#clients.delete(endpoint);
+		notifyPageHost("unregister", endpoint);
 	}
 	version(endpoint) {
 		return this.#versions.get(endpoint) ?? 0;
@@ -172,6 +215,9 @@ var EndpointRegistry = class {
 		for (const resolve of queue) resolve(client);
 	}
 };
+
+//#endregion
+//#region ../mcp/src/resolver/mcpToolResolver.ts
 /** MCP 结果单项 text 上限（64KB） */
 const MAX_MCP_RESULT_TEXT_BYTES = 64 * 1024;
 const failure$1 = (code, message) => ({
@@ -260,6 +306,9 @@ var McpToolResolver = class {
 		};
 	}
 };
+
+//#endregion
+//#region ../mcp/src/resolver/nameSanitize.ts
 /**
 * LLM 可见名消毒（OpenAI 工具名只允许 [a-zA-Z0-9_-]）。
 * 约定：`endpoint:tool` ↔ `endpoint__tool`，`mcp#tool` ↔ `mcp__tool`；
@@ -302,6 +351,9 @@ function parseWebMcpToolLlmName(llmName, sourceIds = []) {
 	}
 	return { toolName: rest };
 }
+
+//#endregion
+//#region ../mcp/src/skills/temporarySkillProvider.ts
 const textOfContent = (content) => {
 	if (typeof content === "string") return content;
 	if (typeof content === "object" && content !== null) {
@@ -388,6 +440,9 @@ var TemporarySkillProvider = class {
 		}
 	}
 };
+
+//#endregion
+//#region ../mcp/src/skills/serveSkillAsMcp.ts
 async function loadFromJSONSchema() {
 	try {
 		return (await import("zod")).fromJSONSchema;
@@ -431,11 +486,17 @@ async function serveSkillAsMcp(server, skill) {
 		} : { content };
 	});
 }
+
+//#endregion
+//#region ../mcp/src/skills/catalogMerge.ts
 /**
 * 本地/临时 Catalog 合并：同名本地优先；mcp:// URI 保留用于强制指定临时技能。
 * 实现单一来源在 runtime（runtime 自身合并也用同一函数）。
 */
 const catalogMerge = mergeCatalogEntries;
+
+//#endregion
+//#region ../mcp/src/webmcp/experimentalWebMcpAdapter.ts
 const failure = (code, message) => ({
 	ok: false,
 	content: [],
@@ -505,7 +566,7 @@ var ExperimentalWebMcpAdapter = class {
 		this.#enabled = options?.enabled ?? false;
 		if (options?.sourceId !== void 0) {
 			if (!/^[a-zA-Z0-9-]+$/.test(options.sourceId)) throw new WebSkillError("VALIDATION_FAILED", `WebMCP sourceId "${options.sourceId}" may only contain letters, digits and hyphens.`);
-			if (options.sourceId.length > 24) throw new WebSkillError("VALIDATION_FAILED", `WebMCP sourceId "${options.sourceId}" is longer than 24 characters; it is prefixed onto every tool name and therefore costs tokens on every request.`);
+			if (options.sourceId.length > 24) throw new WebSkillError("VALIDATION_FAILED", `WebMCP sourceId "${options.sourceId}" is longer than ${24} characters; it is prefixed onto every tool name and therefore costs tokens on every request.`);
 			this.sourceId = options.sourceId;
 		}
 	}
@@ -569,6 +630,9 @@ var ExperimentalWebMcpAdapter = class {
 		}
 	}
 };
+
+//#endregion
+//#region ../mcp/src/plugin/mcpRuntimePlugin.ts
 const disabledResult = (llmToolName) => ({
 	ok: false,
 	content: [],
@@ -766,6 +830,9 @@ var McpRuntimePlugin = class {
 		};
 	}
 };
+
+//#endregion
+//#region ../mcp/src/remote/oauth.ts
 /**
 * 构造授权相关错误。`message` 只含端点名与阶段，`details` 只有 `{ endpoint, stage }`——
 * 不带 `cause`：SDK 的错误 message 可能回显授权 URL 或 token 端点的响应体（AC-22.6）。
@@ -892,6 +959,9 @@ function createOAuthProvider(endpoint, config) {
 		}
 	};
 }
+
+//#endregion
+//#region ../mcp/src/remote/connectRemoteEndpoint.ts
 async function loadMcpSdk() {
 	try {
 		const [client, sse, streamable, auth, errors] = await Promise.all([
@@ -1037,4 +1107,4 @@ async function connectRemoteEndpoint(registry, config) {
 }
 
 //#endregion
-export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, TemporarySkillProvider, WEB_MCP_SOURCE_ID_MAX, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, PAGE_HOST_ANCHOR_KEY, TemporarySkillProvider, WEB_MCP_SOURCE_ID_MAX, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, declareDataSourcesToPageHost, endpointToolLlmName, notifyPageHost, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/memoryArtifactStore-D6dLeY55.js

@@ -0,0 +1,48 @@
+//#region ../runtime/src/artifacts/memoryArtifactStore.ts
+/** 内存 ArtifactStore：测试与浏览器降级用；索引随进程生命周期存在 */
+var MemoryArtifactStore = class {
+	#byRun = /* @__PURE__ */ new Map();
+	#seq = 0;
+	async createTextArtifact(input) {
+		return this.#record({
+			runId: input.runId,
+			path: input.path,
+			type: "text",
+			size: new TextEncoder().encode(input.content).length,
+			mimeType: input.mimeType,
+			metadata: input.metadata
+		});
+	}
+	async createBinaryArtifact(input) {
+		return this.#record({
+			runId: input.runId,
+			path: input.path,
+			type: "binary",
+			size: input.content.length,
+			mimeType: input.mimeType,
+			metadata: input.metadata
+		});
+	}
+	async listArtifacts(runId) {
+		return [...this.#byRun.get(runId) ?? []];
+	}
+	#record(input) {
+		const artifact = {
+			id: `art-${++this.#seq}`,
+			runId: input.runId,
+			path: input.path,
+			type: input.type,
+			mimeType: input.mimeType,
+			size: input.size,
+			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+			metadata: input.metadata
+		};
+		const list = this.#byRun.get(input.runId) ?? [];
+		list.push(artifact);
+		this.#byRun.set(input.runId, list);
+		return artifact;
+	}
+};
+
+//#endregion
+export { MemoryArtifactStore as t };