@webskill/sdk 0.14.0 → 0.15.0

package/dist/{dist-D5YhlCdY.js → skill-CAJMsLod.js}

@@ -1,31 +1,15 @@
+import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
+import { a as atomicWriteText, o as isAtomicTempPath, r as resolveInsideRoot } from "./pathSecurity-B1owvJAF.js";
 import { parse } from "yaml";
 import { Unzip, UnzipInflate, zipSync } from "fflate";
 
-//#region ../core/dist/index.js
-/**
-* 所有公开 API 抛出的结构化错误，code 供上层可编程处理
-* @stable
-*/
-var WebSkillError = class extends Error {
-	code;
-	details;
-	constructor(code, message, details) {
-		super(message);
-		this.name = "WebSkillError";
-		this.code = code;
-		this.details = details;
-	}
-};
-/** unknown 异常取消息文本（全仓单一来源，勿再本地重复定义） */
-function messageOf(e) {
-	return e instanceof Error ? e.message : String(e);
-}
+//#region ../core/src/skill/manifest.ts
 /** 技能目录内的安装清单文件名（不参与 files 列表与 digest） */
 const SKILL_MANIFEST_FILE = "webskill.skill-manifest.json";
 /** managed root 下的锁定文件名（不参与 files 列表与 digest） */
 const SKILLS_LOCKFILE = "skills.lock.json";
 /** 技能目录内的签名文件名（不参与 files 列表与 digest） */
-const SKILL_SIGNATURE_FILE = "webskill.skill-signature.json";
+const SKILL_SIGNATURE_FILE$1 = "webskill.skill-signature.json";
 /**
 * 不参与 digest 的技能目录内文件。
 *
@@ -36,7 +20,7 @@ const SKILL_SIGNATURE_FILE = "webskill.skill-signature.json";
 const MANIFEST_EXCLUDED_FILES = /* @__PURE__ */ new Set([
 	SKILL_MANIFEST_FILE,
 	SKILLS_LOCKFILE,
-	SKILL_SIGNATURE_FILE
+	SKILL_SIGNATURE_FILE$1
 ]);
 /** 整体 digest：逐文件 "<path>:<sha256>\n" 拼接串（文件按 path 排序）的 sha256（hash 由调用方提供，可为 WebCrypto 异步实现） */
 async function computeDigest(files, sha256) {
@@ -75,27 +59,11 @@ function verifyManifest(manifest, actualHashes, actualFiles = [...actualHashes.k
 		missing
 	};
 }
-/**
-* 原子写的临时文件名后缀模式；列举/打包侧据此排除中断残留（0.9.0 分册 11）。
-* 单一来源：不要在别处手写正则（AC-G10），复制正则必然漂移。
-* @stable
-*/
-const ATOMIC_TMP_SUFFIX_PATTERN = /\.tmp-\d+-[a-z0-9]+$/;
-/** 该路径是否是 atomicWriteText 留下的临时文件 */
-const isAtomicTempPath = (path) => ATOMIC_TMP_SUFFIX_PATTERN.test(path);
-/**
-* 原子写文本：先写临时文件再 rename（进程崩溃不留下半写文件；lockfile 等账本场景）。
-* 原子性强弱取决于 provider 的 rename 实现：NodeFS/MemoryFS 为真 rename；
-* OPFS 无原生 move，rename 是 copy+delete（非原子，崩溃可能残留双份），
-* 对崩溃一致性要求极高的场景在浏览器侧需知悉此前提。
-*/
-async function atomicWriteText(fs, path, content) {
-	const tmp = `${path}.tmp-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
-	await fs.writeText(tmp, content);
-	await fs.rename(tmp, path);
-}
+
+//#endregion
+//#region ../core/src/skill/signature.ts
 /** 技能目录内的签名文件名（与 manifest 同级，不参与 files 列表与 digest） */
-const SKILL_SIGNATURE_FILE$1 = "webskill.skill-signature.json";
+const SKILL_SIGNATURE_FILE = "webskill.skill-signature.json";
 const SIGNATURE_SCHEMA_VERSION = 1;
 const encoder = new TextEncoder();
 const toBase64Url = (bytes) => {
@@ -171,7 +139,7 @@ function parseSignature(raw, origin) {
 }
 /** 从技能目录读签名文件；文件不存在返回 undefined（缺签名由策略层判定，不是错误） */
 async function readSkillSignature(fs, skillRoot) {
-	const path = `${skillRoot}/${SKILL_SIGNATURE_FILE$1}`;
+	const path = `${skillRoot}/${SKILL_SIGNATURE_FILE}`;
 	if (!await fs.exists(path)) return void 0;
 	let parsed;
 	try {
@@ -193,7 +161,7 @@ async function verifySkillSignature(input) {
 	const { manifest, signature, trustedKeys, policy } = input;
 	const skill = JSON.stringify(manifest.name);
 	if (!signature) {
-		if (policy.unsigned === "deny") throw new WebSkillError("SIGNATURE_MISSING", `Skill ${skill} carries no ${SKILL_SIGNATURE_FILE$1} and the unsigned policy is "deny"`);
+		if (policy.unsigned === "deny") throw new WebSkillError("SIGNATURE_MISSING", `Skill ${skill} carries no ${SKILL_SIGNATURE_FILE} and the unsigned policy is "deny"`);
 		return {
 			ok: true,
 			unsigned: true,
@@ -279,303 +247,9 @@ var FsTrustedKeyStore = class {
 		await this.#write((await this.#read()).filter((key) => key.keyId !== keyId));
 	}
 };
-const ROOT = "/";
-/** 内存文件系统：路径一律规范化为 `/` 分隔，写入自动创建父目录 */
-var MemoryFS = class {
-	kind = "memory";
-	#entries = /* @__PURE__ */ new Map();
-	constructor() {
-		this.#entries.set(ROOT, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	#normalize(path) {
-		const out = [];
-		for (const seg of path.replace(/\\/g, "/").split("/")) {
-			if (seg === "" || seg === ".") continue;
-			if (seg === "..") out.pop();
-			else out.push(seg);
-		}
-		return ROOT + out.join("/");
-	}
-	#parentOf(key) {
-		const i = key.lastIndexOf("/");
-		return i <= 0 ? ROOT : key.slice(0, i);
-	}
-	#ensureParents(key) {
-		const chain = [];
-		let dir = this.#parentOf(key);
-		while (!this.#entries.has(dir)) {
-			chain.push(dir);
-			dir = this.#parentOf(dir);
-		}
-		for (const d of chain.reverse()) this.#entries.set(d, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	#getFile(key) {
-		const entry = this.#entries.get(key);
-		if (!entry || entry.type !== "file") throw new WebSkillError("FS_NOT_FOUND", `File not found: ${key}`);
-		return entry;
-	}
-	#getDirectory(key) {
-		const entry = this.#entries.get(key);
-		if (!entry || entry.type !== "directory") throw new WebSkillError("FS_NOT_FOUND", `Directory not found: ${key}`);
-		return entry;
-	}
-	async readText(path) {
-		return new TextDecoder().decode(this.#getFile(this.#normalize(path)).content);
-	}
-	async writeText(path, content) {
-		await this.writeBinary(path, new TextEncoder().encode(content));
-	}
-	async appendText(path, content) {
-		const key = this.#normalize(path);
-		const existing = this.#entries.get(key);
-		if (existing && existing.type !== "file") throw new WebSkillError("FS_PERMISSION_DENIED", `Cannot append to a directory: ${key}`);
-		const prior = existing ? new TextDecoder().decode(existing.content) : "";
-		this.#ensureParents(key);
-		this.#entries.set(key, {
-			type: "file",
-			content: new TextEncoder().encode(prior + content),
-			mtimeMs: Date.now()
-		});
-	}
-	async readBinary(path) {
-		return this.#getFile(this.#normalize(path)).content;
-	}
-	async writeBinary(path, content) {
-		const key = this.#normalize(path);
-		this.#ensureParents(key);
-		this.#entries.set(key, {
-			type: "file",
-			content,
-			mtimeMs: Date.now()
-		});
-	}
-	async exists(path) {
-		return this.#entries.has(this.#normalize(path));
-	}
-	async stat(path) {
-		const key = this.#normalize(path);
-		const entry = this.#entries.get(key);
-		if (!entry) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${key}`);
-		return {
-			path: key,
-			type: entry.type,
-			size: entry.type === "file" ? entry.content.length : void 0,
-			mtimeMs: entry.mtimeMs
-		};
-	}
-	async list(path) {
-		const key = this.#normalize(path);
-		this.#getDirectory(key);
-		const prefix = key === ROOT ? ROOT : key + "/";
-		const out = [];
-		for (const [k, entry] of this.#entries) {
-			if (k === key || !k.startsWith(prefix)) continue;
-			if (k.slice(prefix.length).includes("/")) continue;
-			out.push({
-				path: k,
-				type: entry.type,
-				size: entry.type === "file" ? entry.content.length : void 0,
-				mtimeMs: entry.mtimeMs
-			});
-		}
-		return out;
-	}
-	async mkdir(path) {
-		const key = this.#normalize(path);
-		if (this.#entries.has(key)) return;
-		this.#ensureParents(key);
-		this.#entries.set(key, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	async remove(path, options) {
-		const key = this.#normalize(path);
-		if (!this.#entries.get(key)) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${key}`);
-		if (key === ROOT) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", "Cannot delete root directory");
-		const prefix = key + "/";
-		const descendants = [...this.#entries.keys()].filter((k) => k.startsWith(prefix));
-		if (descendants.length > 0 && !options?.recursive) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Directory not empty, use recursive: ${key}`);
-		for (const k of descendants) this.#entries.delete(k);
-		this.#entries.delete(key);
-	}
-	async rename(from, to) {
-		const src = this.#normalize(from);
-		const dst = this.#normalize(to);
-		const entry = this.#entries.get(src);
-		if (!entry) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${src}`);
-		const prefix = src + "/";
-		const descendants = [...this.#entries.entries()].filter(([k]) => k.startsWith(prefix));
-		this.#ensureParents(dst);
-		this.#entries.set(dst, entry);
-		for (const [k, v] of descendants) this.#entries.set(dst + k.slice(src.length), v);
-		for (const [k] of descendants) this.#entries.delete(k);
-		this.#entries.delete(src);
-	}
-};
-/** 统一分隔符为 `/`，去除 `.` 段与重复分隔符（不解析 `..`） */
-function normalizePath(path) {
-	return path.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".").join("/");
-}
-/**
-* 外部标识（runId、candidateId、skillName、versionId 等）作为单一路径段使用前的统一校验：
-* 拒绝空串、`.`、`..`、含 `/` 或 `\`、含 `:`（Windows 盘符/ADS）。
-* 违规抛 FS_PATH_OUTSIDE_ROOT（kind 用于错误消息定位，如 "runId"）。
-*/
-const CONTROL_CHARS_RE = /[\x00-\x1f\x7f]/;
-function assertSafePathSegment(segment, kind) {
-	if (CONTROL_CHARS_RE.test(segment)) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Invalid ${kind} (control characters including NUL are not allowed): ${JSON.stringify(segment)}`);
-	if (segment === "" || segment === "." || segment === ".." || segment.includes("/") || segment.includes("\\") || segment.includes(":")) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Invalid ${kind} (must be a single safe path segment): ${JSON.stringify(segment)}`);
-}
-/**
-* 将相对路径安全地解析到 root 之内。
-* 拒绝空路径、绝对路径（`/`、`\\`、`C:\` 形式）与任何 `..` 段。
-*
-* 注意：本函数仅做**词法**校验，不解析符号链接——root 内经符号链接指向
-* 外部的目标无法被词法检查拦截（realpath 防护见 NodeFS root 模式与
-* 安装管线的 lstat 符号链接扫描）。
-*/
-function resolveInsideRoot(root, relativePath) {
-	const fail = (reason) => {
-		throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Path outside root: ${reason} (path: ${JSON.stringify(relativePath)})`);
-	};
-	if (relativePath.trim() === "") fail("empty path");
-	if (relativePath.startsWith("/") || relativePath.startsWith("\\") || /^[a-zA-Z]:[\\/]/.test(relativePath)) fail("absolute paths not allowed");
-	const segments = relativePath.replace(/\\/g, "/").split("/");
-	if (CONTROL_CHARS_RE.test(relativePath)) fail("control characters including NUL are not allowed");
-	if (segments.some((s) => s === "..")) fail("`..` segments not allowed");
-	const clean = segments.filter((s) => s !== "" && s !== ".");
-	if (clean.length === 0) fail("path resolves to empty");
-	const normalizedRoot = normalizePath(root);
-	const joined = normalizedRoot === "" ? clean.join("/") : `${normalizedRoot}/${clean.join("/")}`;
-	return root.startsWith("/") || root.startsWith("\\") ? `/${joined}` : joined;
-}
-const LOOPBACK_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "localhost."]);
-function ipv4Octets(host) {
-	const parts = host.split(".");
-	if (parts.length !== 4) return void 0;
-	const octets = parts.map((p) => /^\d{1,3}$/.test(p) ? Number(p) : NaN);
-	return octets.every((n) => n >= 0 && n <= 255) ? octets : void 0;
-}
-function isPrivateIpv4(octets) {
-	const [a, b] = octets;
-	return a === 0 || a === 10 || a === 127 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254;
-}
-function isPrivateIpv6(host) {
-	const h = host.toLowerCase();
-	if (h === "::1" || h === "::") return true;
-	const mapped = h.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/);
-	if (mapped) {
-		const octets = ipv4Octets(mapped[1]);
-		return octets !== void 0 && isPrivateIpv4(octets);
-	}
-	const mappedHex = h.match(/^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
-	if (mappedHex) {
-		const hi = parseInt(mappedHex[1], 16);
-		const lo = parseInt(mappedHex[2], 16);
-		return isPrivateIpv4([
-			hi >> 8,
-			hi & 255,
-			lo >> 8,
-			lo & 255
-		]);
-	}
-	const first = h.split(":")[0];
-	if (/^[0-9a-f]{1,4}$/.test(first)) {
-		const n = parseInt(first, 16);
-		if ((n & 65472) === 65152) return true;
-		if ((n & 65024) === 64512) return true;
-	}
-	return false;
-}
-function isPrivateHost(hostname) {
-	const host = hostname.toLowerCase();
-	if (LOOPBACK_HOSTNAMES.has(host) || host.endsWith(".localhost")) return true;
-	const v4 = ipv4Octets(host);
-	if (v4) return isPrivateIpv4(v4);
-	if (host.startsWith("[") && host.endsWith("]")) return isPrivateIpv6(host.slice(1, -1));
-	if (host.includes(":")) return isPrivateIpv6(host);
-	return false;
-}
-/**
-* 校验远程 URL 是否允许连接；违规抛 NETWORK_BLOCKED。
-* rawUrl 非合法 URL 时抛 TypeError（由调用方按自身错误码包装）。
-*/
-function assertRemoteUrlAllowed(rawUrl, policy = {}) {
-	const url = new URL(rawUrl);
-	if (url.protocol === "http:") {
-		if (!policy.allowHttp) throw new WebSkillError("NETWORK_BLOCKED", `Insecure URL scheme "http:" is not allowed (opt in via allowHttp): ${url.href}`);
-	} else if (url.protocol !== "https:") throw new WebSkillError("NETWORK_BLOCKED", `URL scheme "${url.protocol}" is not allowed (https only): ${url.href}`);
-	if (!policy.allowPrivateHosts && isPrivateHost(url.hostname)) throw new WebSkillError("NETWORK_BLOCKED", `Refusing to connect to a private/loopback/link-local address: ${url.hostname}`);
-	return url;
-}
-/** 可作为图片分片外发的 MIME 类型 @experimental */
-const IMAGE_MIME_TYPES = [
-	"image/png",
-	"image/jpeg",
-	"image/webp",
-	"image/gif"
-];
-/**
-* 可按文本读取的扩展名。accept 白名单与判定白名单共用这一份——
-* 0.5.x 两处不一致，`log`/`yaml`/`yml` 能通过判定却在文件选择器里选不到。
-*/
-const TEXT_EXTENSIONS = [
-	"txt",
-	"md",
-	"csv",
-	"json",
-	"log",
-	"yaml",
-	"yml"
-];
-/** 非文本非图片但仍可整体外发的类型（provider 的 file 分片） @experimental */
-const FILE_MIME_TYPES = ["application/pdf"];
-/**
-* 需要**客户端先抽取成文本**才能外发的类型（FR-23.9 / 0.13.0 FR-12.5）。
-* 不走直通的 `file`：docx / xlsx 发给 provider 会被当成二进制垃圾。
-*/
-const DOCX_MIME = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
-const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
-/** 文本类附件进模型上下文的字符上限（0.6.0） @experimental */
-const ATTACHMENT_TEXT_LIMIT = 32 * 1024;
-const TEXT_EXTENSION_SET = new Set(TEXT_EXTENSIONS);
-const IMAGE_MIME_SET = new Set(IMAGE_MIME_TYPES);
-const FILE_MIME_SET = new Set(FILE_MIME_TYPES);
-const EXTRACTED_MIME_SET = /* @__PURE__ */ new Set([DOCX_MIME, XLSX_MIME]);
-const EXTRACTED_EXTENSION_SET = /* @__PURE__ */ new Set(["docx", "xlsx"]);
-function extensionOf(fileName) {
-	return fileName.split(".").pop()?.toLowerCase() ?? "";
-}
-/** 分类集中一处，不散落在各 UI 分支里 @experimental */
-function classifyAttachment(contentType, fileName) {
-	const type = contentType.toLowerCase();
-	if (IMAGE_MIME_SET.has(type)) return "image";
-	if (EXTRACTED_MIME_SET.has(type)) return "document-text";
-	if (FILE_MIME_SET.has(type)) return "file";
-	if (type.startsWith("text/") || type === "application/json") return "text";
-	if (type === "" && TEXT_EXTENSION_SET.has(extensionOf(fileName))) return "text";
-	if (type === "" && EXTRACTED_EXTENSION_SET.has(extensionOf(fileName))) return "document-text";
-}
-/**
-* 文本类附件进模型上下文的最终形态。两条入口共用，差别只有出处那一段（0.14.0 D-20-6）。
-* @experimental
-*/
-function formatAttachmentText(input) {
-	const clipped = input.body.length > 32768 ? `${input.body.slice(0, ATTACHMENT_TEXT_LIMIT)}\n[truncated]` : input.body;
-	const bodyOnly = input.kind === "document-text" ? ", body text only" : "";
-	const from = input.origin === "download" ? ", from this device's downloads" : "";
-	return `--- Attachment: ${input.name} (${input.contentType}${bodyOnly}${from}) ---\n${clipped}`;
-}
+
+//#endregion
+//#region ../core/src/skill/parser.ts
 const FRONTMATTER_RE = /^---[^\S\r\n]*\r?\n([\s\S]*?)\r?\n---[^\S\r\n]*(?:\r?\n|$)([\s\S]*)$/;
 const invalid = (message, details) => {
 	throw new WebSkillError("SKILL_INVALID_METADATA", message, details);
@@ -599,12 +273,18 @@ function parseSkillMarkdown(raw) {
 		body: bodyRaw.trim()
 	};
 }
+
+//#endregion
+//#region ../core/src/skill/naming.ts
 const SKILL_NAME_MAX_LENGTH = 64;
 /** Agent Skills 官方命名规范：小写字母/数字/连字符，不允许首尾或连续连字符 */
 const SKILL_NAME_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;
 function isValidSkillName(name) {
 	return name.length <= 64 && SKILL_NAME_PATTERN.test(name);
 }
+
+//#endregion
+//#region ../core/src/skill/rules.ts
 const SCRIPT_EXTENSION_RE = /\.(ts|js)$/;
 /** D2 schema sidecar（scripts/<name>.schema.json）属于协议内文件，不算非法脚本 */
 const SCHEMA_SIDECAR_RE = /\.schema\.json$/;
@@ -707,6 +387,9 @@ function checkDependencyCycles(adjacency) {
 		involved
 	};
 }
+
+//#endregion
+//#region ../core/src/skill/skillPack.ts
 /**
 * 技能包集（skill pack）格式与打包逻辑（node/browser 共用单一来源）：
 *   webskill.skill-pack.json   { schemaVersion: 1, skills: [{ name, digest }] }
@@ -780,6 +463,9 @@ function parseSkillPackManifest(text) {
 	}
 	return raw;
 }
+
+//#endregion
+//#region ../core/src/skill/archiveShape.ts
 const SKILL_FILE = "SKILL.md";
 function normalize(path) {
 	return path.replace(/^\.?\//, "");
@@ -812,7 +498,7 @@ function detectSkillArchiveShape(entries) {
 	if (!hasLooseRootFile && topLevels.size === 1) {
 		const [dir] = [...topLevels];
 		if (dir !== void 0) {
-			if (paths.includes(`${dir}/webskill.skill-pack.json`)) return {
+			if (paths.includes(`${dir}/${"webskill.skill-pack.json"}`)) return {
 				shape: "pack-set",
 				rootDir: dir
 			};
@@ -856,11 +542,14 @@ async function detectSkillArchiveShapeFromFs(fs, contentDir) {
 			continue;
 		}
 		if (await fs.exists(`${entry.path}/${SKILL_FILE}`)) sample.push(`${name}/${SKILL_FILE}`);
-		else if (await fs.exists(`${entry.path}/webskill.skill-pack.json`)) sample.push(`${name}/${SKILL_PACK_FILE}`);
+		else if (await fs.exists(`${entry.path}/${"webskill.skill-pack.json"}`)) sample.push(`${name}/${SKILL_PACK_FILE}`);
 		else sample.push(`${name}/`);
 	}
 	return detectSkillArchiveShape(sample);
 }
+
+//#endregion
+//#region ../core/src/skill/zipLimits.ts
 const DEFAULT_ARCHIVE_LIMITS = {
 	maxDownloadBytes: 64 * 1024 * 1024,
 	maxEntryBytes: 64 * 1024 * 1024,
@@ -970,10 +659,16 @@ async function readResponseWithLimit(res, limits) {
 	}
 	return concat(chunks, size);
 }
+
+//#endregion
+//#region ../core/src/skill/catalog.ts
 /** 由条目列表构建 Catalog，保证按名称排序 */
 function buildCatalog(entries) {
 	return { entries: [...entries].sort((a, b) => a.name.localeCompare(b.name)) };
 }
+
+//#endregion
+//#region ../core/src/skill/reader.ts
 /** 按技能名读取技能根目录内的文件，全部读取强制经过路径安全检查 */
 var SkillReader = class {
 	#fs;
@@ -997,6 +692,9 @@ var SkillReader = class {
 		return this.#fs.readBinary(resolveInsideRoot(this.#rootFor(skillName), relativePath));
 	}
 };
+
+//#endregion
+//#region ../core/src/skill/discovery.ts
 const baseName = (path) => path.split("/").pop() ?? path;
 var SkillDiscovery = class {
 	#fs;
@@ -1143,6 +841,9 @@ var SkillDiscovery = class {
 		return (await this.#fs.list(scriptsDir)).filter((s) => s.type === "file").map((s) => baseName(s.path));
 	}
 };
+
+//#endregion
+//#region ../core/src/skill/validator.ts
 /**
 * 合规校验。内部直接复用 SkillDiscovery 的扫描逻辑，
 * 规则判定同样落在 checkSkillRules 单一来源上。
@@ -1157,35 +858,6 @@ async function validateSkills(fs, roots, options) {
 		issues
 	};
 }
-function renderCatalogJson(catalog) {
-	return JSON.stringify(catalog, null, 2);
-}
-const jsonRenderer = {
-	format: "json",
-	render: renderCatalogJson
-};
-/** 转义 XML 五个特殊字符：& < > " ' */
-function escapeXml(text) {
-	return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
-}
-function renderAvailableSkillsXml(catalog) {
-	const lines = ["<available_skills>"];
-	for (const skill of catalog.entries) {
-		lines.push("  <skill>");
-		lines.push(`    <name>${escapeXml(skill.name)}</name>`);
-		lines.push(`    <description>${escapeXml(skill.description)}</description>`);
-		if (skill.version !== void 0) lines.push(`    <version>${escapeXml(skill.version)}</version>`);
-		if (skill.license !== void 0) lines.push(`    <license>${escapeXml(skill.license)}</license>`);
-		lines.push(`    <source>${escapeXml(skill.source)}</source>`);
-		lines.push("  </skill>");
-	}
-	lines.push("</available_skills>");
-	return lines.join("\n");
-}
-const xmlRenderer = {
-	format: "xml",
-	render: renderAvailableSkillsXml
-};
 
 //#endregion
-export { unzipWithLimits as $, computeDigest as A, messageOf as B, assertSafePathSegment as C, checkDependencyCycles as D, buildManifest as E, formatAttachmentText as F, readSkillSignature as G, parseSkillMarkdown as H, isAtomicTempPath as I, resolveArchiveLimits as J, renderAvailableSkillsXml as K, isValidSkillName as L, detectSkillArchiveShapeFromFs as M, escapeXml as N, checkSkillRules as O, exportSkills as P, stripArchiveRoot as Q, jsonRenderer as R, assertRemoteUrlAllowed as S, buildCatalog as T, parseSkillPackManifest as U, normalizePath as V, readResponseWithLimit as W, signSkill as X, resolveInsideRoot as Y, signaturePayloadBytes as Z, SkillDiscovery as _, FILE_MIME_TYPES as a, WebSkillError as b, MANIFEST_EXCLUDED_FILES as c, SKILLS_LOCKFILE as d, validateSkills as et, SKILL_MANIFEST_FILE as f, SKILL_SIGNATURE_FILE as g, SKILL_PACK_FILE as h, DOCX_MIME as i, detectSkillArchiveShape as j, classifyAttachment as k, MemoryFS as l, SKILL_NAME_PATTERN as m, ATTACHMENT_TEXT_LIMIT as n, verifySkillSignature as nt, FsTrustedKeyStore as o, SKILL_NAME_MAX_LENGTH as p, renderCatalogJson as q, DEFAULT_ARCHIVE_LIMITS as r, xmlRenderer as rt, IMAGE_MIME_TYPES as s, ATOMIC_TMP_SUFFIX_PATTERN as t, verifyManifest as tt, SIGNATURE_SCHEMA_VERSION as u, SkillReader as v, atomicWriteText as w, XLSX_MIME as x, TEXT_EXTENSIONS as y, keyIdOf as z };
+export { SKILL_MANIFEST_FILE as A, keyIdOf as C, verifySkillSignature as D, signaturePayloadBytes as E, buildManifest as M, computeDigest as N, MANIFEST_EXCLUDED_FILES as O, verifyManifest as P, SIGNATURE_SCHEMA_VERSION as S, signSkill as T, SKILL_NAME_MAX_LENGTH as _, DEFAULT_ARCHIVE_LIMITS as a, parseSkillMarkdown as b, unzipWithLimits as c, stripArchiveRoot as d, SKILL_PACK_FILE as f, checkSkillRules as g, checkDependencyCycles as h, buildCatalog as i, SKILL_SIGNATURE_FILE$1 as j, SKILLS_LOCKFILE as k, detectSkillArchiveShape as l, parseSkillPackManifest as m, SkillDiscovery as n, readResponseWithLimit as o, exportSkills as p, SkillReader as r, resolveArchiveLimits as s, validateSkills as t, detectSkillArchiveShapeFromFs as u, SKILL_NAME_PATTERN as v, readSkillSignature as w, FsTrustedKeyStore as x, isValidSkillName as y };

package/dist/{skillVersionStore-D-qHk9ZE-C0OFDTQY.d.ts → skillVersionStore-B24Jjjry-C4zomhMZ.d.ts}

@@ -1,5 +1,5 @@
-import { U as FileSystemProvider, X as PageQuery, Y as Page, _t as SkillManifest, ut as SkillCatalogEntry } from "./types-C3V6lAeO-BgeOvc1Y.js";
-//#region ../governance/dist/skillVersionStore-D-qHk9ZE.d.ts
+import { U as FileSystemProvider, X as PageQuery, Y as Page, _t as SkillManifest, ut as SkillCatalogEntry } from "./types-C3V6lAeO-BIf7UB2e.js";
+//#region ../governance/dist/skillVersionStore-B24Jjjry.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
 /** `generated` 是 0.5.0 的技能自动生成来源（需求 12 号 AC-9.1） */
@@ -94,6 +94,8 @@ declare class CandidateStore {
   constructor(deps: {
     root: string;
     fs: FileSystemProvider;
+    /** 治理根下该技能是否仍装着；不注入则 published 一律拒删（见 `remove`） */
+    isSkillInstalled?: (name: string) => Promise<boolean>;
   });
   save(candidate: CandidateSkill): Promise<void>;
   get(id: string): Promise<CandidateSkill>;
@@ -106,6 +108,16 @@ declare class CandidateStore {
     status?: CandidateStatus;
   } & PageQuery): Promise<CandidatePage>;
   updateStatus(id: string, status: CandidateStatus, now?: string): Promise<CandidateSkill>;
+  /**
+   * 把候选记录从队列里删掉。
+   *
+   * `approved` 恒拒删：它是「已批准但还没发布」，删掉等于让批准过的东西凭空消失；
+   * 要清理先 `reject`（留下理由）再删。
+   * `published` 是已安装技能的来源凭证，技能还装着时同样拒删；技能卸载后它只剩堆在队列里，
+   * 此时可删（0.15.0 分册 16 D-16-2）。未注入 `isSkillInstalled` 时判断不了装没装，
+   * 退化为「published 一律拒删」——宁可留着清不掉，也不能把还装着的技能的来源凭证删了。
+   */
+  remove(id: string): Promise<void>;
 }
 /** 硬门禁：仅 published 可转换为 Catalog 条目，否则 APPROVAL_REQUIRED */
 declare function candidateToCatalogEntry(candidate: CandidateSkill): SkillCatalogEntry;