@webskill/sdk 0.14.0 → 0.15.0

package/dist/node.js

@@ -1,7 +1,11 @@
-import { $ as unzipWithLimits, B as messageOf, C as assertSafePathSegment, E as buildManifest, G as readSkillSignature, H as parseSkillMarkdown, I as isAtomicTempPath, J as resolveArchiveLimits, L as isValidSkillName, P as exportSkills, S as assertRemoteUrlAllowed, U as parseSkillPackManifest, W as readResponseWithLimit, Y as resolveInsideRoot, b as WebSkillError, c as MANIFEST_EXCLUDED_FILES, d as SKILLS_LOCKFILE, et as validateSkills, f as SKILL_MANIFEST_FILE, h as SKILL_PACK_FILE, nt as verifySkillSignature, tt as verifyManifest, w as atomicWriteText } from "./dist-D5YhlCdY.js";
-import { $ as bridgeError, Ct as normalizeToolError, St as normalizeToolContent, X as WebSkillRuntime, b as FsMemoryStore, tt as createScriptContext, u as CapabilityApproval, wt as parseBridgeRequest, y as FsArtifactStore, yt as networkPolicyLibSource } from "./dist-Bfga1TmS.js";
-import { i as probeLlmCapabilities } from "./env-8cY40DXB-CGnEVZby.js";
-import { t as AUDIT_EVENT_TYPES } from "./eventTypes-FllCrX-Z-DNDeHWoG.js";
+import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
+import { A as SKILL_MANIFEST_FILE, D as verifySkillSignature, M as buildManifest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, b as parseSkillMarkdown, c as unzipWithLimits, f as SKILL_PACK_FILE, k as SKILLS_LOCKFILE, m as parseSkillPackManifest, o as readResponseWithLimit, p as exportSkills, s as resolveArchiveLimits, t as validateSkills, w as readSkillSignature, y as isValidSkillName } from "./skill-CAJMsLod.js";
+import { a as atomicWriteText, o as isAtomicTempPath, r as resolveInsideRoot, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
+import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
+import { B as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-BnLLCOG0.js";
+import { n as normalizeToolContent } from "./external-_ZRQe-V9.js";
+import { i as probeLlmCapabilities } from "./env-Bj1MI2Ww.js";
+import { t as AUDIT_EVENT_TYPES } from "./eventTypes-Y07N8IAC.js";
 import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";
 import { existsSync, promises, realpathSync } from "node:fs";
@@ -15,7 +19,7 @@ import { execFile, fork, spawn } from "node:child_process";
 import { createInterface } from "node:readline/promises";
 import { createHash } from "node:crypto";
 
-//#region ../node/dist/index.js
+//#region ../node/src/fs/nodeFs.ts
 const toPlatform$4 = (p) => p.split("/").join(path.sep);
 const toPosix = (p) => p.split(path.sep).join("/");
 const isEnoent = (e) => typeof e === "object" && e !== null && e.code === "ENOENT";
@@ -152,6 +156,9 @@ var NodeFS = class NodeFS {
 		return e;
 	}
 };
+
+//#endregion
+//#region ../node/src/executor/nodeScriptExecutor.ts
 const baseName$2 = (p) => p.split("/").pop() ?? p;
 /**
 * 进程内脚本执行器。接口按沙箱语义设计（context 无隐式宿主访问），
@@ -295,6 +302,9 @@ var NodeScriptExecutor = class {
 		};
 	}
 };
+
+//#endregion
+//#region ../node/src/executor/sandboxedScriptExecutor.ts
 const baseName$1 = (p) => p.split("/").pop() ?? p;
 const toPlatform$3 = (p) => p.split("/").join(path.sep);
 /**
@@ -396,7 +406,8 @@ var SandboxedScriptExecutor = class {
 				skillName: context.skillName,
 				runId: context.runId,
 				args,
-				scriptSource: await this.#fs.readText(scriptPath)
+				scriptSource: await this.#fs.readText(scriptPath),
+				...context.readUploadFile ? { uploadFiles: true } : {}
 			}, timeoutMs, (request) => this.#handleBridge(request, context), (host) => context.onWarning?.(`Network request blocked by sandbox network policy: ${host}`));
 			if (!result.ok) {
 				const stderrSummary = result.stderr?.length ? ` | stderr: ${result.stderr.join(" | ").slice(0, 500)}` : "";
@@ -561,12 +572,29 @@ var SandboxedScriptExecutor = class {
 						value: await context.confirm(request.message)
 					};
 				}
+				case "listUploadFiles":
+					if (!context.listUploadFiles) return bridgeError(request.id, "TOOL_UNSUPPORTED", UPLOAD_FILES_UNAVAILABLE);
+					return {
+						id: request.id,
+						ok: true,
+						value: await context.listUploadFiles()
+					};
+				case "readUploadFile":
+					if (!context.readUploadFile) return bridgeError(request.id, "TOOL_UNSUPPORTED", UPLOAD_FILES_UNAVAILABLE);
+					return {
+						id: request.id,
+						ok: true,
+						value: Array.from(await context.readUploadFile(request.fileId))
+					};
 			}
 		} catch (e) {
 			return bridgeError(request.id, e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", messageOf(e));
 		}
 	}
 };
+
+//#endregion
+//#region ../node/src/executor/processSandboxExecutor.ts
 const baseName = (p) => p.split("/").pop() ?? p;
 const toPlatform$2 = (p) => p.split("/").join(path.sep);
 const NETWORK_POLICY_LIB = networkPolicyLibSource();
@@ -777,7 +805,8 @@ var ProcessSandboxExecutor = class {
 				runId: context.runId,
 				args,
 				scriptSource: await this.#fs.readText(scriptPath),
-				scratchDir: slot.artifactDir
+				scratchDir: slot.artifactDir,
+				...context.readUploadFile ? { uploadFiles: true } : {}
 			}, timeoutMs, (request) => this.#handleBridge(request, context), (host) => context.onWarning?.(`Network request blocked by sandbox network policy: ${host}`));
 			if (!result.ok) {
 				const stderrSummary = result.stderr?.length ? ` | stderr: ${result.stderr.join(" | ").slice(0, 500)}` : "";
@@ -938,12 +967,29 @@ var ProcessSandboxExecutor = class {
 						value: await context.confirm(request.message)
 					};
 				}
+				case "listUploadFiles":
+					if (!context.listUploadFiles) return bridgeError(request.id, "TOOL_UNSUPPORTED", UPLOAD_FILES_UNAVAILABLE);
+					return {
+						id: request.id,
+						ok: true,
+						value: await context.listUploadFiles()
+					};
+				case "readUploadFile":
+					if (!context.readUploadFile) return bridgeError(request.id, "TOOL_UNSUPPORTED", UPLOAD_FILES_UNAVAILABLE);
+					return {
+						id: request.id,
+						ok: true,
+						value: Array.from(await context.readUploadFile(request.fileId))
+					};
 			}
 		} catch (e) {
 			return bridgeError(request.id, e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", messageOf(e));
 		}
 	}
 };
+
+//#endregion
+//#region ../node/src/schema/oxcSchemaInferer.ts
 const require_ = createRequire(import.meta.url);
 let parseSyncCache;
 function loadParseSync() {
@@ -1126,6 +1172,9 @@ var OxcSchemaInferer = class {
 		return inferFromJsDoc(jsdoc.value, mapper, reparse);
 	}
 };
+
+//#endregion
+//#region ../node/src/artifacts/fileArtifactStore.ts
 /**
 * FileArtifactStore：兼容别名，语义同阶段 2-4。
 * 实现已上移到 runtime 的 FsArtifactStore；node 侧保留 NodeFS 默认值。
@@ -1138,6 +1187,9 @@ var FileArtifactStore = class extends FsArtifactStore {
 		});
 	}
 };
+
+//#endregion
+//#region ../node/src/memory/fileMemoryStore.ts
 /**
 * FileMemoryStore：兼容别名，语义同阶段 3。
 * 实现已上移到 runtime 的 FsMemoryStore；node 侧保留 NodeFS 默认值。
@@ -1150,6 +1202,9 @@ var FileMemoryStore = class extends FsMemoryStore {
 		});
 	}
 };
+
+//#endregion
+//#region ../node/src/ui/cliUiBridge.ts
 /**
 * 命令行 UiBridge：ask→问答，confirm→y/n（带默认值），
 * form→逐字段提示（显示默认值与必填标记），select→编号列表，
@@ -1279,6 +1334,9 @@ var CliUiBridge = class {
 		return new Promise((resolve) => this.#waiters.push(resolve));
 	}
 };
+
+//#endregion
+//#region ../node/src/skillManagement/extract.ts
 const toPlatform$1 = (p) => p.split("/").join(path.sep);
 const isZipArchive = (data) => data.length > 1 && data[0] === 80 && data[1] === 75;
 let tarModule$1;
@@ -1330,6 +1388,9 @@ async function extractTarFile(archivePath, destRoot, limits) {
 		throw new WebSkillError("INSTALL_FAILED", `Failed to extract tar archive: ${messageOf(e)}`, e);
 	}
 }
+
+//#endregion
+//#region ../node/src/skillManagement/fsUtils.ts
 /** 递归列出目录内全部文件（相对路径，posix 分隔，不含目录条目；原子写中断残留的 `.tmp-*` 不计入） */
 async function listFiles(fs, root, prefix = "") {
 	const out = [];
@@ -1373,6 +1434,9 @@ async function removeDirQuiet(fs, dir) {
 		if (await fs.exists(dir)) await fs.remove(dir, { recursive: true });
 	} catch {}
 }
+
+//#endregion
+//#region ../node/src/skillManagement/export/archiveExporter.ts
 let tarModule;
 async function loadTar() {
 	tarModule ??= await import("tar").catch((e) => {
@@ -1427,6 +1491,9 @@ async function readArchiveManifest(fs, archivePath) {
 	if (manifestText === void 0) throw notFound();
 	return JSON.parse(manifestText);
 }
+
+//#endregion
+//#region ../node/src/skillManagement/installers/exec.ts
 const _execFileP = promisify(execFile);
 /**
 * 跨平台执行命令：Windows 下对 npm 等 cmd 包装的命令通过 cmd.exe 代理执行，
@@ -1445,6 +1512,9 @@ async function execFileP(command, args, options = {}) {
 function commandFailed(command, e) {
 	return new WebSkillError("INSTALL_FAILED", `Failed to run ${command}: ${e?.code === "ENOENT" ? `command "${command}" not found on this system` : messageOf(e)}`, e);
 }
+
+//#endregion
+//#region ../node/src/skillManagement/installers/gitInstaller.ts
 /** git url 协议白名单：https:// 与 git@ SCP 形式；无 scheme 的本地路径放行（dev 工作流）；
 * 其余显式协议（ext::/file:// 等）一律拒绝 */
 function assertGitUrlSafe(url) {
@@ -1491,9 +1561,15 @@ async function stageGit(source, ctx) {
 		}
 	};
 }
+
+//#endregion
+//#region ../node/src/skillManagement/checksum.ts
 function sha256Hex(data) {
 	return createHash("sha256").update(data).digest("hex");
 }
+
+//#endregion
+//#region ../node/src/skillManagement/installers/httpArchiveInstaller.ts
 /** 重定向跳数上限（SSRF 防护：逐跳重新校验目标 URL） */
 const MAX_REDIRECT_HOPS = 3;
 /**
@@ -1561,6 +1637,9 @@ async function stageHttp(source, ctx, expectedSha256) {
 	};
 	throw new WebSkillError("INSTALL_FAILED", "Archive does not contain a SKILL.md at its root or in a single top-level directory");
 }
+
+//#endregion
+//#region ../node/src/skillManagement/installers/localInstaller.ts
 /** local 源：校验源目录存在，拷贝到 staging */
 async function stageLocal(source, ctx) {
 	if (!await ctx.fs.exists(source.path)) throw new WebSkillError("INSTALL_FAILED", `Local skill directory not found: ${source.path}`);
@@ -1571,6 +1650,9 @@ async function stageLocal(source, ctx) {
 		source
 	};
 }
+
+//#endregion
+//#region ../node/src/skillManagement/installers/npmInstaller.ts
 /** npm 包名（@scope/name 或 name，小写字母数字 . _ - /）与版本（semver 或 dist-tag）正则 */
 const PACKAGE_NAME_RE = /^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/;
 const VERSION_RE = /^[a-z0-9._~^>=<x*+-]+$/i;
@@ -1629,6 +1711,9 @@ async function stageNpm(source, ctx) {
 		}
 	};
 }
+
+//#endregion
+//#region ../node/src/skillManagement/lockfile.ts
 const emptyLockfile = () => ({
 	schemaVersion: 1,
 	skills: {}
@@ -1661,6 +1746,9 @@ async function removeLockEntry(fs, managedRoot, name) {
 async function writeLockfileAtomic(fs, managedRoot, lockfile) {
 	await atomicWriteText(fs, `${managedRoot}/${SKILLS_LOCKFILE}`, JSON.stringify(lockfile, null, 2));
 }
+
+//#endregion
+//#region ../node/src/skillManagement/manifest.ts
 /** 递归收集技能目录内的文件（相对路径，posix 分隔） */
 async function walkFiles(fs, root, prefix = "") {
 	const out = [];
@@ -1712,6 +1800,9 @@ async function verifyIntegrity(fs, skillRoot) {
 	for (const rel of actualFiles) actualHashes.set(rel, sha256Hex(await fs.readBinary(`${skillRoot}/${rel}`)));
 	return verifyManifest(manifest, actualHashes, actualFiles);
 }
+
+//#endregion
+//#region ../node/src/skillManagement/skillManager.ts
 /**
 * 验签失败不能被折叠成 INSTALL_FAILED：四种失败的宿主处置完全不同
 * （引导选策略 / 提示重下 / 引导添加密钥 / 安全事件），见 design 03 §3.1。
@@ -2020,9 +2111,12 @@ var SkillManager = class {
 		return options.outPath;
 	}
 };
+
+//#endregion
+//#region ../node/src/mcp/connectStdioEndpoint.ts
 async function loadMcpSdk() {
 	try {
-		const [client, stdio] = await Promise.all([import("./client-BCM6Z3yq-qUQNkKrK.js"), import("./stdio-CFMoANJJ-BxrTeXh7.js")]);
+		const [client, stdio] = await Promise.all([import("@modelcontextprotocol/sdk/client/index.js"), import("@modelcontextprotocol/sdk/shared/stdio.js")]);
 		return {
 			Client: client.Client,
 			ReadBuffer: stdio.ReadBuffer,
@@ -2238,7 +2332,7 @@ async function connectStdioEndpoint(registry, config) {
 }
 
 //#endregion
-//#region ../governance/dist/node.js
+//#region ../governance/src/approval/approvalWorkflow.ts
 /** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
 var ApprovalWorkflow = class {
 	#policy;
@@ -2386,6 +2480,9 @@ var ApprovalWorkflow = class {
 		}
 	}
 };
+
+//#endregion
+//#region ../governance/src/evaluation/evaluationRuntime.ts
 /**
 * 治理评估专用 runtime 装配（不可信技能试用路径）：
 * 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程

package/dist/openUiLibrary-CY_ADoe0.js

@@ -0,0 +1,30 @@
+import { h as uiCatalog } from "./openUiSpecLang-DuOCdw9G.js";
+import { t as CatalogNode } from "./ui-react.js";
+import { Renderer, createLibrary, defineComponent } from "./dist-CTsxblSD.js";
+import { z } from "zod";
+import { jsx } from "react/jsx-runtime";
+
+//#region ../ui-react/src/catalog/openUiLibrary.tsx
+const propsFor = (props, container) => container ? props.extend({ children: z.array(z.any()).optional() }) : props;
+const components = uiCatalog.components.map((def) => defineComponent({
+	name: def.name,
+	description: def.description,
+	props: propsFor(def.props, def.children !== void 0),
+	component: ((input) => /* @__PURE__ */ jsx(CatalogNode, {
+		name: def.name,
+		props: input.props,
+		children: input.renderNode(input.props["children"])
+	}))
+}));
+/**
+* catalog 的 OpenUI 投影：`defineComponent` 复用同一份 zod schema 与描述，
+* 渲染实现取自共享的 ui-kit 组件表，因此 OpenUI 档渲染的是我们的设计系统而不是 OpenUI 默认组件。
+*/
+const webskillOpenUiLibrary = createLibrary({
+	id: "webskill-shadcn",
+	components
+});
+const OPEN_UI_COMPONENTS = Object.keys(webskillOpenUiLibrary.components);
+
+//#endregion
+export { OPEN_UI_COMPONENTS, Renderer, webskillOpenUiLibrary };