@webskill/sdk 0.13.0 → 0.15.0

package/dist/pathSecurity-B1owvJAF.js

@@ -0,0 +1,65 @@
+import { t as WebSkillError } from "./errors-BDZNpC13.js";
+
+//#region ../core/src/fs/atomicWrite.ts
+/**
+* 原子写的临时文件名后缀模式；列举/打包侧据此排除中断残留（0.9.0 分册 11）。
+* 单一来源：不要在别处手写正则（AC-G10），复制正则必然漂移。
+* @stable
+*/
+const ATOMIC_TMP_SUFFIX_PATTERN = /\.tmp-\d+-[a-z0-9]+$/;
+/** 该路径是否是 atomicWriteText 留下的临时文件 */
+const isAtomicTempPath = (path) => ATOMIC_TMP_SUFFIX_PATTERN.test(path);
+/**
+* 原子写文本：先写临时文件再 rename（进程崩溃不留下半写文件；lockfile 等账本场景）。
+* 原子性强弱取决于 provider 的 rename 实现：NodeFS/MemoryFS 为真 rename；
+* OPFS 无原生 move，rename 是 copy+delete（非原子，崩溃可能残留双份），
+* 对崩溃一致性要求极高的场景在浏览器侧需知悉此前提。
+*/
+async function atomicWriteText(fs, path, content) {
+	const tmp = `${path}.tmp-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
+	await fs.writeText(tmp, content);
+	await fs.rename(tmp, path);
+}
+
+//#endregion
+//#region ../core/src/fs/pathSecurity.ts
+/** 统一分隔符为 `/`，去除 `.` 段与重复分隔符（不解析 `..`） */
+function normalizePath(path) {
+	return path.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".").join("/");
+}
+/**
+* 外部标识（runId、candidateId、skillName、versionId 等）作为单一路径段使用前的统一校验：
+* 拒绝空串、`.`、`..`、含 `/` 或 `\`、含 `:`（Windows 盘符/ADS）。
+* 违规抛 FS_PATH_OUTSIDE_ROOT（kind 用于错误消息定位，如 "runId"）。
+*/
+const CONTROL_CHARS_RE = /[\x00-\x1f\x7f]/;
+function assertSafePathSegment(segment, kind) {
+	if (CONTROL_CHARS_RE.test(segment)) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Invalid ${kind} (control characters including NUL are not allowed): ${JSON.stringify(segment)}`);
+	if (segment === "" || segment === "." || segment === ".." || segment.includes("/") || segment.includes("\\") || segment.includes(":")) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Invalid ${kind} (must be a single safe path segment): ${JSON.stringify(segment)}`);
+}
+/**
+* 将相对路径安全地解析到 root 之内。
+* 拒绝空路径、绝对路径（`/`、`\\`、`C:\` 形式）与任何 `..` 段。
+*
+* 注意：本函数仅做**词法**校验，不解析符号链接——root 内经符号链接指向
+* 外部的目标无法被词法检查拦截（realpath 防护见 NodeFS root 模式与
+* 安装管线的 lstat 符号链接扫描）。
+*/
+function resolveInsideRoot(root, relativePath) {
+	const fail = (reason) => {
+		throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Path outside root: ${reason} (path: ${JSON.stringify(relativePath)})`);
+	};
+	if (relativePath.trim() === "") fail("empty path");
+	if (relativePath.startsWith("/") || relativePath.startsWith("\\") || /^[a-zA-Z]:[\\/]/.test(relativePath)) fail("absolute paths not allowed");
+	const segments = relativePath.replace(/\\/g, "/").split("/");
+	if (CONTROL_CHARS_RE.test(relativePath)) fail("control characters including NUL are not allowed");
+	if (segments.some((s) => s === "..")) fail("`..` segments not allowed");
+	const clean = segments.filter((s) => s !== "" && s !== ".");
+	if (clean.length === 0) fail("path resolves to empty");
+	const normalizedRoot = normalizePath(root);
+	const joined = normalizedRoot === "" ? clean.join("/") : `${normalizedRoot}/${clean.join("/")}`;
+	return root.startsWith("/") || root.startsWith("\\") ? `/${joined}` : joined;
+}
+
+//#endregion
+export { atomicWriteText as a, ATOMIC_TMP_SUFFIX_PATTERN as i, normalizePath as n, isAtomicTempPath as o, resolveInsideRoot as r, assertSafePathSegment as t };

package/dist/processSandboxEntry.js

@@ -177,7 +177,11 @@ async function main(task) {
 				mimeType: options?.mimeType,
 				metadata: options?.metadata
 			}),
-			confirm: (message) => callCapability("confirm", { message })
+			confirm: (message) => callCapability("confirm", { message }),
+			...task.uploadFiles ? {
+				listUploadFiles: () => callCapability("listUploadFiles", {}),
+				readUploadFile: async (fileId) => new Uint8Array(await callCapability("readUploadFile", { fileId }))
+			} : {}
 		};
 		const runFn = mod["run"];
 		const value = await runFn(task.args ?? {}, context);

package/dist/renderResult-D9Q-Vu2x.js

@@ -0,0 +1,143 @@
+import { t as WebSkillError } from "./errors-BDZNpC13.js";
+
+//#region ../runtime/src/artifacts/metadataAdmission.ts
+/**
+* 产物 metadata 的准入与判读（分册 18）。
+*
+* metadata 是能力桥上第一个**开放结构**的入参，且来自沙箱内的技能脚本。
+* 校验落在 `createScriptContext.writeArtifact`——它是 in-process 与三个沙箱执行器
+* 唯一的汇聚点，在此抛错才能带上正确的桥请求 id 回给脚本（DV-10）。
+*/
+/** 序列化后的字节上限；`index.json` 是整覆盖原子写，无上限等于廉价的放大面 */
+const ARTIFACT_METADATA_MAX_BYTES = 4096;
+/** 原型污染键；JSON 解析产生的同名键是**自有键**，可被 getOwnPropertyNames 查出 */
+const FORBIDDEN_KEYS = /* @__PURE__ */ new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
+function isPlainObject(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+	const proto = Object.getPrototypeOf(value);
+	return proto === Object.prototype || proto === null;
+}
+/** 函数声明而非箭头函数赋值：只有前者能让 TS 的控制流分析认到 never 终止 */
+function reject(message) {
+	throw new WebSkillError("VALIDATION_FAILED", message);
+}
+/**
+* 递归拒绝原型污染键与不可序列化值。
+* `JSON.stringify` 会**静默丢弃**函数与 symbol，而静默正是本需求明令禁止的形态，
+* 所以必须在序列化之前显式查一遍。
+*/
+function assertSerializableShape(value, path, seen) {
+	const kind = typeof value;
+	if (kind === "function" || kind === "symbol" || kind === "bigint") reject(`Artifact metadata value at "${path}" is not JSON-serializable (${kind})`);
+	if (kind !== "object" || value === null) return;
+	const container = value;
+	if (seen.has(container)) reject(`Artifact metadata contains a circular reference at "${path}"`);
+	seen.add(container);
+	if (Array.isArray(value)) value.forEach((item, index) => assertSerializableShape(item, `${path}[${index}]`, seen));
+	else {
+		if (!isPlainObject(value)) reject(`Artifact metadata value at "${path}" must be a plain object or array`);
+		for (const key of Object.getOwnPropertyNames(value)) {
+			if (FORBIDDEN_KEYS.has(key)) reject(`Artifact metadata must not contain the reserved key "${key}" (at "${path}")`);
+			assertSerializableShape(value[key], `${path}.${key}`, seen);
+		}
+	}
+	seen.delete(container);
+}
+/**
+* 准入校验。通过后返回 `JSON.parse(JSON.stringify(...))` 的副本：
+* in-process 路径由此获得与 JSON stdio 沙箱路径完全相同的语义，
+* 而不是依赖某条传输链路碰巧做了序列化。
+*/
+function admitArtifactMetadata(value) {
+	if (!isPlainObject(value)) reject("Artifact metadata must be a plain object");
+	assertSerializableShape(value, "metadata", /* @__PURE__ */ new Set());
+	let json;
+	try {
+		json = JSON.stringify(value);
+	} catch (error) {
+		reject(`Artifact metadata is not JSON-serializable: ${error.message}`);
+	}
+	const bytes = new TextEncoder().encode(json).length;
+	if (bytes > 4096) reject(`Artifact metadata is too large: ${bytes} bytes exceeds the ${ARTIFACT_METADATA_MAX_BYTES} byte limit`);
+	return JSON.parse(json);
+}
+/**
+* 「这份产物不出自动下载卡」的判读。**严格 `=== false`**：
+* 隐式真值转换会让写错的键值静默生效，而隐藏是不可见的失败。
+* `buildRenderResult` 与 agentLoop 的去重集合共用本函数，两处判据不得分叉。
+*/
+function isArtifactCardHidden(artifact) {
+	return artifact.metadata?.["resultCard"] === false;
+}
+
+//#endregion
+//#region ../runtime/src/interaction/renderResult.ts
+const isRecord = (v) => typeof v === "object" && v !== null;
+/**
+* $chart 约定的形状校验：JSON content 的 data 含 $chart 键且形状合法 → ChartSpec；
+* 任何畸形（kind 非法 / labels 非字符串数组 / series 项缺数值 data）→ undefined（忽略不炸）。
+*/
+function extractChartSpec(data) {
+	if (!isRecord(data)) return void 0;
+	const raw = data["$chart"];
+	if (!isRecord(raw)) return void 0;
+	const { kind, labels, series } = raw;
+	if (kind !== "bar" && kind !== "line" && kind !== "pie") return void 0;
+	if (!Array.isArray(labels) || !labels.every((l) => typeof l === "string")) return void 0;
+	if (!Array.isArray(series)) return void 0;
+	const validSeries = [];
+	for (const item of series) {
+		if (!isRecord(item) || !Array.isArray(item["data"]) || !item["data"].every((n) => typeof n === "number")) return;
+		const name = item["name"];
+		validSeries.push({
+			...typeof name === "string" ? { name } : {},
+			data: item["data"]
+		});
+	}
+	const title = raw["title"];
+	return {
+		kind,
+		labels,
+		series: validSeries,
+		...typeof title === "string" ? { title } : {}
+	};
+}
+/**
+* 默认的结果渲染构造：run 内收集的 renderBlocks（chart 等）在前，
+* LLM 最终输出 → markdown block，run.artifacts → file blocks 在后；summary 取 terminationReason。
+* 注入 output block 时一并记下它的下标（S7），供消费方按来源去重。
+*/
+function buildRenderResult(run, output, renderBlocks = []) {
+	const blocks = [...renderBlocks];
+	let outputBlockIndex;
+	if (output.trim() !== "") {
+		outputBlockIndex = blocks.length;
+		blocks.push({
+			type: "markdown",
+			text: output
+		});
+	}
+	for (const artifact of run.artifacts) {
+		if (isArtifactCardHidden(artifact)) continue;
+		blocks.push({
+			type: "file",
+			path: artifact.path,
+			...artifact.mimeType ? { mimeType: artifact.mimeType } : {},
+			size: artifact.size
+		});
+	}
+	return {
+		runId: run.id,
+		summary: run.terminationReason,
+		blocks,
+		artifacts: run.artifacts,
+		...outputBlockIndex === void 0 ? {} : { outputBlockIndex }
+	};
+}
+
+//#endregion
+export { isArtifactCardHidden as i, extractChartSpec as n, admitArtifactMetadata as r, buildRenderResult as t };

package/dist/{rolldown-runtime-BOF7iYI8.js → rolldown-runtime-BHkdefai.js}

@@ -43,7 +43,6 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
 var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
@@ -52,4 +51,4 @@ var __toCommonJS = (mod) => __hasOwnProp.call(mod, "module.exports") ? mod["modu
 var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
 
 //#endregion
-export { __require as a, __reExport as i, __esmMin as n, __toCommonJS as o, __exportAll as r, __toESM as s, __commonJSMin as t };
+export { __toCommonJS as a, __require as i, __esmMin as n, __toESM as o, __exportAll as r, __commonJSMin as t };

package/dist/sandboxWorkerEntry.js

@@ -238,7 +238,11 @@ async function main() {
 				mimeType: options?.mimeType,
 				metadata: options?.metadata
 			}),
-			confirm: (message) => callCapability("confirm", { message })
+			confirm: (message) => callCapability("confirm", { message }),
+			...task.uploadFiles ? {
+				listUploadFiles: () => callCapability("listUploadFiles", {}),
+				readUploadFile: async (fileId) => new Uint8Array(await callCapability("readUploadFile", { fileId }))
+			} : {}
 		};
 		const runFn = mod["run"];
 		const value = await runFn(task.args ?? {}, context);