@webskill/sdk 0.13.0 → 0.15.0

package/dist/{dist-Bev6i6Ip.js → skill-CAJMsLod.js}

@@ -1,31 +1,15 @@
+import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
+import { a as atomicWriteText, o as isAtomicTempPath, r as resolveInsideRoot } from "./pathSecurity-B1owvJAF.js";
 import { parse } from "yaml";
 import { Unzip, UnzipInflate, zipSync } from "fflate";
 
-//#region ../core/dist/index.js
-/**
-* 所有公开 API 抛出的结构化错误，code 供上层可编程处理
-* @stable
-*/
-var WebSkillError = class extends Error {
-	code;
-	details;
-	constructor(code, message, details) {
-		super(message);
-		this.name = "WebSkillError";
-		this.code = code;
-		this.details = details;
-	}
-};
-/** unknown 异常取消息文本（全仓单一来源，勿再本地重复定义） */
-function messageOf(e) {
-	return e instanceof Error ? e.message : String(e);
-}
+//#region ../core/src/skill/manifest.ts
 /** 技能目录内的安装清单文件名（不参与 files 列表与 digest） */
 const SKILL_MANIFEST_FILE = "webskill.skill-manifest.json";
 /** managed root 下的锁定文件名（不参与 files 列表与 digest） */
 const SKILLS_LOCKFILE = "skills.lock.json";
 /** 技能目录内的签名文件名（不参与 files 列表与 digest） */
-const SKILL_SIGNATURE_FILE = "webskill.skill-signature.json";
+const SKILL_SIGNATURE_FILE$1 = "webskill.skill-signature.json";
 /**
 * 不参与 digest 的技能目录内文件。
 *
@@ -36,7 +20,7 @@ const SKILL_SIGNATURE_FILE = "webskill.skill-signature.json";
 const MANIFEST_EXCLUDED_FILES = /* @__PURE__ */ new Set([
 	SKILL_MANIFEST_FILE,
 	SKILLS_LOCKFILE,
-	SKILL_SIGNATURE_FILE
+	SKILL_SIGNATURE_FILE$1
 ]);
 /** 整体 digest：逐文件 "<path>:<sha256>\n" 拼接串（文件按 path 排序）的 sha256（hash 由调用方提供，可为 WebCrypto 异步实现） */
 async function computeDigest(files, sha256) {
@@ -75,27 +59,11 @@ function verifyManifest(manifest, actualHashes, actualFiles = [...actualHashes.k
 		missing
 	};
 }
-/**
-* 原子写的临时文件名后缀模式；列举/打包侧据此排除中断残留（0.9.0 分册 11）。
-* 单一来源：不要在别处手写正则（AC-G10），复制正则必然漂移。
-* @stable
-*/
-const ATOMIC_TMP_SUFFIX_PATTERN = /\.tmp-\d+-[a-z0-9]+$/;
-/** 该路径是否是 atomicWriteText 留下的临时文件 */
-const isAtomicTempPath = (path) => ATOMIC_TMP_SUFFIX_PATTERN.test(path);
-/**
-* 原子写文本：先写临时文件再 rename（进程崩溃不留下半写文件；lockfile 等账本场景）。
-* 原子性强弱取决于 provider 的 rename 实现：NodeFS/MemoryFS 为真 rename；
-* OPFS 无原生 move，rename 是 copy+delete（非原子，崩溃可能残留双份），
-* 对崩溃一致性要求极高的场景在浏览器侧需知悉此前提。
-*/
-async function atomicWriteText(fs, path, content) {
-	const tmp = `${path}.tmp-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
-	await fs.writeText(tmp, content);
-	await fs.rename(tmp, path);
-}
+
+//#endregion
+//#region ../core/src/skill/signature.ts
 /** 技能目录内的签名文件名（与 manifest 同级，不参与 files 列表与 digest） */
-const SKILL_SIGNATURE_FILE$1 = "webskill.skill-signature.json";
+const SKILL_SIGNATURE_FILE = "webskill.skill-signature.json";
 const SIGNATURE_SCHEMA_VERSION = 1;
 const encoder = new TextEncoder();
 const toBase64Url = (bytes) => {
@@ -171,7 +139,7 @@ function parseSignature(raw, origin) {
 }
 /** 从技能目录读签名文件；文件不存在返回 undefined（缺签名由策略层判定，不是错误） */
 async function readSkillSignature(fs, skillRoot) {
-	const path = `${skillRoot}/${SKILL_SIGNATURE_FILE$1}`;
+	const path = `${skillRoot}/${SKILL_SIGNATURE_FILE}`;
 	if (!await fs.exists(path)) return void 0;
 	let parsed;
 	try {
@@ -193,7 +161,7 @@ async function verifySkillSignature(input) {
 	const { manifest, signature, trustedKeys, policy } = input;
 	const skill = JSON.stringify(manifest.name);
 	if (!signature) {
-		if (policy.unsigned === "deny") throw new WebSkillError("SIGNATURE_MISSING", `Skill ${skill} carries no ${SKILL_SIGNATURE_FILE$1} and the unsigned policy is "deny"`);
+		if (policy.unsigned === "deny") throw new WebSkillError("SIGNATURE_MISSING", `Skill ${skill} carries no ${SKILL_SIGNATURE_FILE} and the unsigned policy is "deny"`);
 		return {
 			ok: true,
 			unsigned: true,
@@ -279,245 +247,9 @@ var FsTrustedKeyStore = class {
 		await this.#write((await this.#read()).filter((key) => key.keyId !== keyId));
 	}
 };
-const ROOT = "/";
-/** 内存文件系统：路径一律规范化为 `/` 分隔，写入自动创建父目录 */
-var MemoryFS = class {
-	kind = "memory";
-	#entries = /* @__PURE__ */ new Map();
-	constructor() {
-		this.#entries.set(ROOT, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	#normalize(path) {
-		const out = [];
-		for (const seg of path.replace(/\\/g, "/").split("/")) {
-			if (seg === "" || seg === ".") continue;
-			if (seg === "..") out.pop();
-			else out.push(seg);
-		}
-		return ROOT + out.join("/");
-	}
-	#parentOf(key) {
-		const i = key.lastIndexOf("/");
-		return i <= 0 ? ROOT : key.slice(0, i);
-	}
-	#ensureParents(key) {
-		const chain = [];
-		let dir = this.#parentOf(key);
-		while (!this.#entries.has(dir)) {
-			chain.push(dir);
-			dir = this.#parentOf(dir);
-		}
-		for (const d of chain.reverse()) this.#entries.set(d, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	#getFile(key) {
-		const entry = this.#entries.get(key);
-		if (!entry || entry.type !== "file") throw new WebSkillError("FS_NOT_FOUND", `File not found: ${key}`);
-		return entry;
-	}
-	#getDirectory(key) {
-		const entry = this.#entries.get(key);
-		if (!entry || entry.type !== "directory") throw new WebSkillError("FS_NOT_FOUND", `Directory not found: ${key}`);
-		return entry;
-	}
-	async readText(path) {
-		return new TextDecoder().decode(this.#getFile(this.#normalize(path)).content);
-	}
-	async writeText(path, content) {
-		await this.writeBinary(path, new TextEncoder().encode(content));
-	}
-	async appendText(path, content) {
-		const key = this.#normalize(path);
-		const existing = this.#entries.get(key);
-		if (existing && existing.type !== "file") throw new WebSkillError("FS_PERMISSION_DENIED", `Cannot append to a directory: ${key}`);
-		const prior = existing ? new TextDecoder().decode(existing.content) : "";
-		this.#ensureParents(key);
-		this.#entries.set(key, {
-			type: "file",
-			content: new TextEncoder().encode(prior + content),
-			mtimeMs: Date.now()
-		});
-	}
-	async readBinary(path) {
-		return this.#getFile(this.#normalize(path)).content;
-	}
-	async writeBinary(path, content) {
-		const key = this.#normalize(path);
-		this.#ensureParents(key);
-		this.#entries.set(key, {
-			type: "file",
-			content,
-			mtimeMs: Date.now()
-		});
-	}
-	async exists(path) {
-		return this.#entries.has(this.#normalize(path));
-	}
-	async stat(path) {
-		const key = this.#normalize(path);
-		const entry = this.#entries.get(key);
-		if (!entry) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${key}`);
-		return {
-			path: key,
-			type: entry.type,
-			size: entry.type === "file" ? entry.content.length : void 0,
-			mtimeMs: entry.mtimeMs
-		};
-	}
-	async list(path) {
-		const key = this.#normalize(path);
-		this.#getDirectory(key);
-		const prefix = key === ROOT ? ROOT : key + "/";
-		const out = [];
-		for (const [k, entry] of this.#entries) {
-			if (k === key || !k.startsWith(prefix)) continue;
-			if (k.slice(prefix.length).includes("/")) continue;
-			out.push({
-				path: k,
-				type: entry.type,
-				size: entry.type === "file" ? entry.content.length : void 0,
-				mtimeMs: entry.mtimeMs
-			});
-		}
-		return out;
-	}
-	async mkdir(path) {
-		const key = this.#normalize(path);
-		if (this.#entries.has(key)) return;
-		this.#ensureParents(key);
-		this.#entries.set(key, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	async remove(path, options) {
-		const key = this.#normalize(path);
-		if (!this.#entries.get(key)) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${key}`);
-		if (key === ROOT) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", "Cannot delete root directory");
-		const prefix = key + "/";
-		const descendants = [...this.#entries.keys()].filter((k) => k.startsWith(prefix));
-		if (descendants.length > 0 && !options?.recursive) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Directory not empty, use recursive: ${key}`);
-		for (const k of descendants) this.#entries.delete(k);
-		this.#entries.delete(key);
-	}
-	async rename(from, to) {
-		const src = this.#normalize(from);
-		const dst = this.#normalize(to);
-		const entry = this.#entries.get(src);
-		if (!entry) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${src}`);
-		const prefix = src + "/";
-		const descendants = [...this.#entries.entries()].filter(([k]) => k.startsWith(prefix));
-		this.#ensureParents(dst);
-		this.#entries.set(dst, entry);
-		for (const [k, v] of descendants) this.#entries.set(dst + k.slice(src.length), v);
-		for (const [k] of descendants) this.#entries.delete(k);
-		this.#entries.delete(src);
-	}
-};
-/** 统一分隔符为 `/`，去除 `.` 段与重复分隔符（不解析 `..`） */
-function normalizePath(path) {
-	return path.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".").join("/");
-}
-/**
-* 外部标识（runId、candidateId、skillName、versionId 等）作为单一路径段使用前的统一校验：
-* 拒绝空串、`.`、`..`、含 `/` 或 `\`、含 `:`（Windows 盘符/ADS）。
-* 违规抛 FS_PATH_OUTSIDE_ROOT（kind 用于错误消息定位，如 "runId"）。
-*/
-const CONTROL_CHARS_RE = /[\x00-\x1f\x7f]/;
-function assertSafePathSegment(segment, kind) {
-	if (CONTROL_CHARS_RE.test(segment)) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Invalid ${kind} (control characters including NUL are not allowed): ${JSON.stringify(segment)}`);
-	if (segment === "" || segment === "." || segment === ".." || segment.includes("/") || segment.includes("\\") || segment.includes(":")) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Invalid ${kind} (must be a single safe path segment): ${JSON.stringify(segment)}`);
-}
-/**
-* 将相对路径安全地解析到 root 之内。
-* 拒绝空路径、绝对路径（`/`、`\\`、`C:\` 形式）与任何 `..` 段。
-*
-* 注意：本函数仅做**词法**校验，不解析符号链接——root 内经符号链接指向
-* 外部的目标无法被词法检查拦截（realpath 防护见 NodeFS root 模式与
-* 安装管线的 lstat 符号链接扫描）。
-*/
-function resolveInsideRoot(root, relativePath) {
-	const fail = (reason) => {
-		throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Path outside root: ${reason} (path: ${JSON.stringify(relativePath)})`);
-	};
-	if (relativePath.trim() === "") fail("empty path");
-	if (relativePath.startsWith("/") || relativePath.startsWith("\\") || /^[a-zA-Z]:[\\/]/.test(relativePath)) fail("absolute paths not allowed");
-	const segments = relativePath.replace(/\\/g, "/").split("/");
-	if (CONTROL_CHARS_RE.test(relativePath)) fail("control characters including NUL are not allowed");
-	if (segments.some((s) => s === "..")) fail("`..` segments not allowed");
-	const clean = segments.filter((s) => s !== "" && s !== ".");
-	if (clean.length === 0) fail("path resolves to empty");
-	const normalizedRoot = normalizePath(root);
-	const joined = normalizedRoot === "" ? clean.join("/") : `${normalizedRoot}/${clean.join("/")}`;
-	return root.startsWith("/") || root.startsWith("\\") ? `/${joined}` : joined;
-}
-const LOOPBACK_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "localhost."]);
-function ipv4Octets(host) {
-	const parts = host.split(".");
-	if (parts.length !== 4) return void 0;
-	const octets = parts.map((p) => /^\d{1,3}$/.test(p) ? Number(p) : NaN);
-	return octets.every((n) => n >= 0 && n <= 255) ? octets : void 0;
-}
-function isPrivateIpv4(octets) {
-	const [a, b] = octets;
-	return a === 0 || a === 10 || a === 127 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254;
-}
-function isPrivateIpv6(host) {
-	const h = host.toLowerCase();
-	if (h === "::1" || h === "::") return true;
-	const mapped = h.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/);
-	if (mapped) {
-		const octets = ipv4Octets(mapped[1]);
-		return octets !== void 0 && isPrivateIpv4(octets);
-	}
-	const mappedHex = h.match(/^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
-	if (mappedHex) {
-		const hi = parseInt(mappedHex[1], 16);
-		const lo = parseInt(mappedHex[2], 16);
-		return isPrivateIpv4([
-			hi >> 8,
-			hi & 255,
-			lo >> 8,
-			lo & 255
-		]);
-	}
-	const first = h.split(":")[0];
-	if (/^[0-9a-f]{1,4}$/.test(first)) {
-		const n = parseInt(first, 16);
-		if ((n & 65472) === 65152) return true;
-		if ((n & 65024) === 64512) return true;
-	}
-	return false;
-}
-function isPrivateHost(hostname) {
-	const host = hostname.toLowerCase();
-	if (LOOPBACK_HOSTNAMES.has(host) || host.endsWith(".localhost")) return true;
-	const v4 = ipv4Octets(host);
-	if (v4) return isPrivateIpv4(v4);
-	if (host.startsWith("[") && host.endsWith("]")) return isPrivateIpv6(host.slice(1, -1));
-	if (host.includes(":")) return isPrivateIpv6(host);
-	return false;
-}
-/**
-* 校验远程 URL 是否允许连接；违规抛 NETWORK_BLOCKED。
-* rawUrl 非合法 URL 时抛 TypeError（由调用方按自身错误码包装）。
-*/
-function assertRemoteUrlAllowed(rawUrl, policy = {}) {
-	const url = new URL(rawUrl);
-	if (url.protocol === "http:") {
-		if (!policy.allowHttp) throw new WebSkillError("NETWORK_BLOCKED", `Insecure URL scheme "http:" is not allowed (opt in via allowHttp): ${url.href}`);
-	} else if (url.protocol !== "https:") throw new WebSkillError("NETWORK_BLOCKED", `URL scheme "${url.protocol}" is not allowed (https only): ${url.href}`);
-	if (!policy.allowPrivateHosts && isPrivateHost(url.hostname)) throw new WebSkillError("NETWORK_BLOCKED", `Refusing to connect to a private/loopback/link-local address: ${url.hostname}`);
-	return url;
-}
+
+//#endregion
+//#region ../core/src/skill/parser.ts
 const FRONTMATTER_RE = /^---[^\S\r\n]*\r?\n([\s\S]*?)\r?\n---[^\S\r\n]*(?:\r?\n|$)([\s\S]*)$/;
 const invalid = (message, details) => {
 	throw new WebSkillError("SKILL_INVALID_METADATA", message, details);
@@ -541,12 +273,18 @@ function parseSkillMarkdown(raw) {
 		body: bodyRaw.trim()
 	};
 }
+
+//#endregion
+//#region ../core/src/skill/naming.ts
 const SKILL_NAME_MAX_LENGTH = 64;
 /** Agent Skills 官方命名规范：小写字母/数字/连字符，不允许首尾或连续连字符 */
 const SKILL_NAME_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;
 function isValidSkillName(name) {
 	return name.length <= 64 && SKILL_NAME_PATTERN.test(name);
 }
+
+//#endregion
+//#region ../core/src/skill/rules.ts
 const SCRIPT_EXTENSION_RE = /\.(ts|js)$/;
 /** D2 schema sidecar（scripts/<name>.schema.json）属于协议内文件，不算非法脚本 */
 const SCHEMA_SIDECAR_RE = /\.schema\.json$/;
@@ -649,6 +387,9 @@ function checkDependencyCycles(adjacency) {
 		involved
 	};
 }
+
+//#endregion
+//#region ../core/src/skill/skillPack.ts
 /**
 * 技能包集（skill pack）格式与打包逻辑（node/browser 共用单一来源）：
 *   webskill.skill-pack.json   { schemaVersion: 1, skills: [{ name, digest }] }
@@ -722,6 +463,9 @@ function parseSkillPackManifest(text) {
 	}
 	return raw;
 }
+
+//#endregion
+//#region ../core/src/skill/archiveShape.ts
 const SKILL_FILE = "SKILL.md";
 function normalize(path) {
 	return path.replace(/^\.?\//, "");
@@ -754,7 +498,7 @@ function detectSkillArchiveShape(entries) {
 	if (!hasLooseRootFile && topLevels.size === 1) {
 		const [dir] = [...topLevels];
 		if (dir !== void 0) {
-			if (paths.includes(`${dir}/webskill.skill-pack.json`)) return {
+			if (paths.includes(`${dir}/${"webskill.skill-pack.json"}`)) return {
 				shape: "pack-set",
 				rootDir: dir
 			};
@@ -798,11 +542,14 @@ async function detectSkillArchiveShapeFromFs(fs, contentDir) {
 			continue;
 		}
 		if (await fs.exists(`${entry.path}/${SKILL_FILE}`)) sample.push(`${name}/${SKILL_FILE}`);
-		else if (await fs.exists(`${entry.path}/webskill.skill-pack.json`)) sample.push(`${name}/${SKILL_PACK_FILE}`);
+		else if (await fs.exists(`${entry.path}/${"webskill.skill-pack.json"}`)) sample.push(`${name}/${SKILL_PACK_FILE}`);
 		else sample.push(`${name}/`);
 	}
 	return detectSkillArchiveShape(sample);
 }
+
+//#endregion
+//#region ../core/src/skill/zipLimits.ts
 const DEFAULT_ARCHIVE_LIMITS = {
 	maxDownloadBytes: 64 * 1024 * 1024,
 	maxEntryBytes: 64 * 1024 * 1024,
@@ -912,10 +659,16 @@ async function readResponseWithLimit(res, limits) {
 	}
 	return concat(chunks, size);
 }
+
+//#endregion
+//#region ../core/src/skill/catalog.ts
 /** 由条目列表构建 Catalog，保证按名称排序 */
 function buildCatalog(entries) {
 	return { entries: [...entries].sort((a, b) => a.name.localeCompare(b.name)) };
 }
+
+//#endregion
+//#region ../core/src/skill/reader.ts
 /** 按技能名读取技能根目录内的文件，全部读取强制经过路径安全检查 */
 var SkillReader = class {
 	#fs;
@@ -939,6 +692,9 @@ var SkillReader = class {
 		return this.#fs.readBinary(resolveInsideRoot(this.#rootFor(skillName), relativePath));
 	}
 };
+
+//#endregion
+//#region ../core/src/skill/discovery.ts
 const baseName = (path) => path.split("/").pop() ?? path;
 var SkillDiscovery = class {
 	#fs;
@@ -1085,6 +841,9 @@ var SkillDiscovery = class {
 		return (await this.#fs.list(scriptsDir)).filter((s) => s.type === "file").map((s) => baseName(s.path));
 	}
 };
+
+//#endregion
+//#region ../core/src/skill/validator.ts
 /**
 * 合规校验。内部直接复用 SkillDiscovery 的扫描逻辑，
 * 规则判定同样落在 checkSkillRules 单一来源上。
@@ -1099,35 +858,6 @@ async function validateSkills(fs, roots, options) {
 		issues
 	};
 }
-function renderCatalogJson(catalog) {
-	return JSON.stringify(catalog, null, 2);
-}
-const jsonRenderer = {
-	format: "json",
-	render: renderCatalogJson
-};
-/** 转义 XML 五个特殊字符：& < > " ' */
-function escapeXml(text) {
-	return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
-}
-function renderAvailableSkillsXml(catalog) {
-	const lines = ["<available_skills>"];
-	for (const skill of catalog.entries) {
-		lines.push("  <skill>");
-		lines.push(`    <name>${escapeXml(skill.name)}</name>`);
-		lines.push(`    <description>${escapeXml(skill.description)}</description>`);
-		if (skill.version !== void 0) lines.push(`    <version>${escapeXml(skill.version)}</version>`);
-		if (skill.license !== void 0) lines.push(`    <license>${escapeXml(skill.license)}</license>`);
-		lines.push(`    <source>${escapeXml(skill.source)}</source>`);
-		lines.push("  </skill>");
-	}
-	lines.push("</available_skills>");
-	return lines.join("\n");
-}
-const xmlRenderer = {
-	format: "xml",
-	render: renderAvailableSkillsXml
-};
 
 //#endregion
-export { jsonRenderer as A, resolveArchiveLimits as B, computeDigest as C, exportSkills as D, escapeXml as E, parseSkillPackManifest as F, unzipWithLimits as G, signSkill as H, readResponseWithLimit as I, verifySkillSignature as J, validateSkills as K, readSkillSignature as L, messageOf as M, normalizePath as N, isAtomicTempPath as O, parseSkillMarkdown as P, renderAvailableSkillsXml as R, checkSkillRules as S, detectSkillArchiveShapeFromFs as T, signaturePayloadBytes as U, resolveInsideRoot as V, stripArchiveRoot as W, xmlRenderer as Y, assertSafePathSegment as _, MemoryFS as a, buildManifest as b, SKILL_MANIFEST_FILE as c, SKILL_PACK_FILE as d, SKILL_SIGNATURE_FILE as f, assertRemoteUrlAllowed as g, WebSkillError as h, MANIFEST_EXCLUDED_FILES as i, keyIdOf as j, isValidSkillName as k, SKILL_NAME_MAX_LENGTH as l, SkillReader as m, DEFAULT_ARCHIVE_LIMITS as n, SIGNATURE_SCHEMA_VERSION as o, SkillDiscovery as p, verifyManifest as q, FsTrustedKeyStore as r, SKILLS_LOCKFILE as s, ATOMIC_TMP_SUFFIX_PATTERN as t, SKILL_NAME_PATTERN as u, atomicWriteText as v, detectSkillArchiveShape as w, checkDependencyCycles as x, buildCatalog as y, renderCatalogJson as z };
+export { SKILL_MANIFEST_FILE as A, keyIdOf as C, verifySkillSignature as D, signaturePayloadBytes as E, buildManifest as M, computeDigest as N, MANIFEST_EXCLUDED_FILES as O, verifyManifest as P, SIGNATURE_SCHEMA_VERSION as S, signSkill as T, SKILL_NAME_MAX_LENGTH as _, DEFAULT_ARCHIVE_LIMITS as a, parseSkillMarkdown as b, unzipWithLimits as c, stripArchiveRoot as d, SKILL_PACK_FILE as f, checkSkillRules as g, checkDependencyCycles as h, buildCatalog as i, SKILL_SIGNATURE_FILE$1 as j, SKILLS_LOCKFILE as k, detectSkillArchiveShape as l, parseSkillPackManifest as m, SkillDiscovery as n, readResponseWithLimit as o, exportSkills as p, SkillReader as r, resolveArchiveLimits as s, validateSkills as t, detectSkillArchiveShapeFromFs as u, SKILL_NAME_PATTERN as v, readSkillSignature as w, FsTrustedKeyStore as x, isValidSkillName as y };

package/dist/{skillVersionStore-D-qHk9ZE-DheTIwAB.d.ts → skillVersionStore-B24Jjjry-C4zomhMZ.d.ts}

@@ -1,5 +1,5 @@
-import { R as FileSystemProvider, U as Page, W as PageQuery, dt as SkillManifest, it as SkillCatalogEntry } from "./types-DLctJep_-B5G4uk2u.js";
-//#region ../governance/dist/skillVersionStore-D-qHk9ZE.d.ts
+import { U as FileSystemProvider, X as PageQuery, Y as Page, _t as SkillManifest, ut as SkillCatalogEntry } from "./types-C3V6lAeO-BIf7UB2e.js";
+//#region ../governance/dist/skillVersionStore-B24Jjjry.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
 /** `generated` 是 0.5.0 的技能自动生成来源（需求 12 号 AC-9.1） */
@@ -94,6 +94,8 @@ declare class CandidateStore {
   constructor(deps: {
     root: string;
     fs: FileSystemProvider;
+    /** 治理根下该技能是否仍装着；不注入则 published 一律拒删（见 `remove`） */
+    isSkillInstalled?: (name: string) => Promise<boolean>;
   });
   save(candidate: CandidateSkill): Promise<void>;
   get(id: string): Promise<CandidateSkill>;
@@ -106,6 +108,16 @@ declare class CandidateStore {
     status?: CandidateStatus;
   } & PageQuery): Promise<CandidatePage>;
   updateStatus(id: string, status: CandidateStatus, now?: string): Promise<CandidateSkill>;
+  /**
+   * 把候选记录从队列里删掉。
+   *
+   * `approved` 恒拒删：它是「已批准但还没发布」，删掉等于让批准过的东西凭空消失；
+   * 要清理先 `reject`（留下理由）再删。
+   * `published` 是已安装技能的来源凭证，技能还装着时同样拒删；技能卸载后它只剩堆在队列里，
+   * 此时可删（0.15.0 分册 16 D-16-2）。未注入 `isSkillInstalled` 时判断不了装没装，
+   * 退化为「published 一律拒删」——宁可留着清不掉，也不能把还装着的技能的来源凭证删了。
+   */
+  remove(id: string): Promise<void>;
 }
 /** 硬门禁：仅 published 可转换为 Catalog 条目，否则 APPROVAL_REQUIRED */
 declare function candidateToCatalogEntry(candidate: CandidateSkill): SkillCatalogEntry;

package/dist/surface-DVGiCmwq.js

@@ -0,0 +1,145 @@
+import { t as WebSkillError } from "./errors-BDZNpC13.js";
+
+//#region ../runtime/src/interaction/surface.ts
+const MAX_SURFACE_BYTES = 256 * 1024;
+const MAX_ACTIONS = 32;
+const MAX_NODES = 2e3;
+const MAX_NODE_DEPTH = 32;
+const MAX_JSON_DEPTH = 16;
+const MAX_PATCH_OPERATIONS = 128;
+const actionIntents = /* @__PURE__ */ new Set([
+	"submit",
+	"cancel",
+	"select",
+	"download",
+	"refresh"
+]);
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function reject(message) {
+	throw new WebSkillError("VALIDATION_FAILED", message);
+}
+function requireString(value, name) {
+	if (typeof value !== "string" || value.trim() === "") reject(`${name} must be a non-empty string`);
+}
+function requireNonNegativeInteger(value, name) {
+	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) reject(`${name} must be a non-negative integer`);
+}
+function isJsonValue(value, depth = 0) {
+	if (depth > MAX_JSON_DEPTH || value === void 0 || typeof value === "function" || typeof value === "symbol") return false;
+	if (value === null || typeof value === "string" || typeof value === "boolean") return true;
+	if (typeof value === "number") return Number.isFinite(value);
+	if (Array.isArray(value)) return value.every((item) => isJsonValue(item, depth + 1));
+	if (!isRecord(value)) return false;
+	return Object.keys(value).every((key) => key !== "__proto__" && key !== "constructor" && isJsonValue(value[key], depth + 1));
+}
+/**
+* Runtime 只做结构校验；组件名白名单与 props schema 属于 catalog 语义，
+* 留在 `@webskill/ui`——runtime 不得为了校验反向依赖 ui。
+*/
+function assertNode(value, path, depth, counter) {
+	if (depth > MAX_NODE_DEPTH) reject(`A UI spec tree must not nest deeper than ${MAX_NODE_DEPTH} levels`);
+	if (++counter.nodes > MAX_NODES) reject(`A UI spec tree must contain at most ${MAX_NODES} nodes`);
+	if (!isRecord(value)) reject(`${path} must be an object`);
+	requireString(value["component"], `${path}.component`);
+	if (value["id"] !== void 0) requireString(value["id"], `${path}.id`);
+	if (value["props"] !== void 0 && (!isRecord(value["props"]) || !isJsonValue(value["props"]))) reject(`${path}.props must be a JSON object`);
+	const children = value["children"];
+	if (children === void 0) return;
+	if (!Array.isArray(children)) reject(`${path}.children must be an array`);
+	children.forEach((child, index) => assertNode(child, `${path}.children[${index}]`, depth + 1, counter));
+}
+function assertActions(value) {
+	if (value === void 0) return;
+	if (!Array.isArray(value) || value.length > MAX_ACTIONS) reject(`Surface actions must contain at most ${MAX_ACTIONS} items`);
+	for (const action of value) {
+		if (!isRecord(action)) reject("A surface action must be an object");
+		requireString(action["id"], "Surface action ID");
+		const intent = action["intent"];
+		if (typeof intent !== "string" || !actionIntents.has(intent)) reject("Surface action intent is invalid");
+		if (action["awaitResponse"] !== void 0 && typeof action["awaitResponse"] !== "boolean") reject("Surface action awaitResponse must be a boolean");
+		if (action["nonce"] !== void 0 && (typeof action["nonce"] !== "string" || action["nonce"] === "")) reject("Surface action nonce must be a non-empty string");
+	}
+}
+/** Validates the allowlisted, data-only node tree accepted by a UI surface renderer. @experimental */
+function validateUiSpecNode(value) {
+	assertNode(value, "root", 0, { nodes: 0 });
+	if (!isJsonValue(value)) reject("A UI spec tree must contain JSON data only");
+	if (JSON.stringify(value).length > MAX_SURFACE_BYTES) reject(`A UI spec tree exceeds the ${MAX_SURFACE_BYTES}-byte limit`);
+	return structuredClone(value);
+}
+function assertPatch(value) {
+	if (!isRecord(value)) reject("A surface patch operation must be an object");
+	if (value["op"] !== "replace" && value["op"] !== "merge" && value["op"] !== "append") reject("Surface patch operation is invalid");
+	requireString(value["path"], "Surface patch path");
+	if (!value["path"].startsWith("/")) reject("Surface patch path must be a JSON pointer");
+	if (!isJsonValue(value["value"])) reject("Surface patch value must be JSON data");
+}
+/** Validates an individual event in the framework-neutral surface stream. @experimental */
+function validateUiSpecEvent(value) {
+	if (!isRecord(value) || typeof value["type"] !== "string") reject("A UI surface event must have a type");
+	if (value["runId"] !== void 0) requireString(value["runId"], "Surface event run ID");
+	switch (value["type"]) {
+		case "open":
+			requireString(value["id"], "UI surface ID");
+			assertActions(value["actions"]);
+			return {
+				type: "open",
+				...value["runId"] ? { runId: value["runId"] } : {},
+				id: value["id"],
+				node: validateUiSpecNode(value["node"]),
+				...value["actions"] ? { actions: structuredClone(value["actions"]) } : {}
+			};
+		case "patch":
+			requireString(value["id"], "Surface patch ID");
+			requireNonNegativeInteger(value["revision"], "Surface patch revision");
+			if (!Array.isArray(value["operations"]) || value["operations"].length === 0) reject("A surface patch requires operations");
+			if (value["operations"].length > MAX_PATCH_OPERATIONS) reject(`A surface patch must contain at most ${MAX_PATCH_OPERATIONS} operations`);
+			for (const operation of value["operations"]) assertPatch(operation);
+			return {
+				type: "patch",
+				...value["runId"] ? { runId: value["runId"] } : {},
+				id: value["id"],
+				revision: value["revision"],
+				operations: structuredClone(value["operations"])
+			};
+		case "complete":
+			requireString(value["id"], "Surface completion ID");
+			requireNonNegativeInteger(value["revision"], "Surface completion revision");
+			return {
+				type: "complete",
+				...value["runId"] ? { runId: value["runId"] } : {},
+				id: value["id"],
+				revision: value["revision"]
+			};
+		case "error":
+			requireString(value["id"], "Surface error ID");
+			requireString(value["code"], "Surface error code");
+			requireString(value["message"], "Surface error message");
+			return {
+				type: "error",
+				...value["runId"] ? { runId: value["runId"] } : {},
+				id: value["id"],
+				code: value["code"],
+				message: value["message"]
+			};
+		case "cancel":
+			requireString(value["id"], "Surface cancellation ID");
+			return {
+				type: "cancel",
+				...value["runId"] ? { runId: value["runId"] } : {},
+				id: value["id"]
+			};
+		default: return reject("UI surface event type is invalid");
+	}
+}
+/** Extracts validated surface stream events from structured tool output. @experimental */
+function extractUiSpecEvents(data) {
+	if (!isRecord(data) || data["$surface"] === void 0) return [];
+	const raw = data["$surface"];
+	return (Array.isArray(raw) ? raw : [raw]).map((event) => validateUiSpecEvent(event));
+}
+
+//#endregion
+export { validateUiSpecEvent as n, validateUiSpecNode as r, extractUiSpecEvents as t };

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { S as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, v as MemoryStore } from "./types-DLctJep_-B5G4uk2u.js";
+import { S as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, v as MemoryStore } from "./types-C3V6lAeO-BIf7UB2e.js";
 import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-AK3cSMEA-Dli6QU5E.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts