@webskill/sdk 0.2.4 → 0.2.6

package/dist/browser.d.ts

@@ -1,5 +1,5 @@
-import { C as FileStat, I as SkillInstallSource, K as VerifyResult, W as SkillsLockfile, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, o as InteractionRequest, s as InteractionResponse, v as UiBridge, w as FileSystemProvider, y as ArchiveLimits, z as SkillManifest } from "./types-CKm5G_eQ-BqyXnvoR.js";
-import { Et as parseBridgeRequest, N as NetworkPolicy, Q as ScriptExecutor, Z as ScriptExecutionContext, d as BridgeCapabilities, it as ToolResult, m as BridgeResponse, nt as ToolDefinition, p as BridgeRequest, pt as bridgeError, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-DZShzhon.js";
+import { B as SkillManifest, C as FileStat, G as SkillsLockfile, L as SkillInstallSource, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, o as InteractionRequest, q as VerifyResult, s as InteractionResponse, v as UiBridge, w as FileSystemProvider, y as ArchiveLimits } from "./types-CKm5G_eQ-krKWW8WV.js";
+import { Et as parseBridgeRequest, N as NetworkPolicy, Q as ScriptExecutor, Z as ScriptExecutionContext, d as BridgeCapabilities, it as ToolResult, m as BridgeResponse, nt as ToolDefinition, p as BridgeRequest, pt as bridgeError, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-DJOha4b6.js";
 //#region ../browser/dist/index.d.ts
 //#region src/fs/featureDetection.d.ts
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */

package/dist/browser.js

@@ -1,6 +1,6 @@
-import { A as unzipWithLimits, C as parseSkillMarkdown, M as verifyManifest, T as readResponseWithLimit, b as isValidSkillName, c as SkillDiscovery, f as atomicWriteText, i as SKILL_MANIFEST_FILE, j as validateSkills, k as resolveInsideRoot, m as buildManifest, p as buildCatalog, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, w as parseSkillPackManifest, y as exportSkills } from "./dist-D7MsoMPx.js";
-import { A as isNetworkAllowed, C as bridgeError, E as createWebSkillApi, F as normalizeToolError, I as parseBridgeRequest, M as networkUrlHost, P as normalizeToolContent, c as FsArtifactStore, h as ProgressiveRouter, i as AgentLoop, j as mergeCatalogEntries, l as FsMemoryStore, m as OpenAiCompatibleClient, o as CapabilityApproval, u as FsRunSnapshotStore, y as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-CV64gN62.js";
-import { n as MockLlmClient } from "./testing-BN18eqbD.js";
+import { C as messageOf, D as readResponseWithLimit, E as parseSkillPackManifest, M as unzipWithLimits, N as validateSkills, P as verifyManifest, T as parseSkillMarkdown, b as exportSkills, c as SkillDiscovery, d as assertRemoteUrlAllowed, h as buildManifest, i as SKILL_MANIFEST_FILE, j as resolveInsideRoot, m as buildCatalog, p as atomicWriteText, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
+import { A as isNetworkAllowed, C as bridgeError, E as createWebSkillApi, F as normalizeToolError, I as parseBridgeRequest, M as networkUrlHost, P as normalizeToolContent, c as FsArtifactStore, h as ProgressiveRouter, i as AgentLoop, j as mergeCatalogEntries, l as FsMemoryStore, m as OpenAiCompatibleClient, o as CapabilityApproval, u as FsRunSnapshotStore, y as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-BXpDDZpR.js";
+import { n as MockLlmClient } from "./testing-BUoXvm1u.js";
 
 //#region ../browser/dist/index.js
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -462,8 +462,7 @@ async function extractZipWeb(fs, data, destRoot, limits) {
 		else await fs.writeBinary(target, content);
 	}
 }
-const messageOf$1 = (e) => e instanceof Error ? e.message : String(e);
-const asInstallFailed = (e) => e instanceof WebSkillError && (e.code === "INSTALL_FAILED" || e.code === "TOOL_UNSUPPORTED") ? e : new WebSkillError("INSTALL_FAILED", `Install failed: ${messageOf$1(e)}`, e);
+const asInstallFailed = (e) => e instanceof WebSkillError && (e.code === "INSTALL_FAILED" || e.code === "TOOL_UNSUPPORTED") ? e : new WebSkillError("INSTALL_FAILED", `Install failed: ${messageOf(e)}`, e);
 const lockfilePath = (root) => `${root}/${SKILLS_LOCKFILE}`;
 /**
 * D5：浏览器技能安装（http(s) zip / ArrayBuffer；tar/git/npm → TOOL_UNSUPPORTED）。
@@ -494,9 +493,15 @@ var BrowserSkillManager = class {
 			if (source.type === "http") {
 				let res;
 				try {
-					res = await (this.#fetchImpl ?? fetch)(source.url);
+					const absolute = new URL(source.url, typeof location !== "undefined" ? location.href : void 0).href;
+					const url = assertRemoteUrlAllowed(absolute, {
+						allowHttp: source.allowHttp ?? false,
+						allowPrivateHosts: source.allowPrivateHosts ?? false
+					});
+					res = await (this.#fetchImpl ?? fetch)(url.href);
 				} catch (e) {
-					throw new WebSkillError("INSTALL_FAILED", `Download failed: ${messageOf$1(e)}`, e);
+					if (e instanceof WebSkillError) throw e;
+					throw new WebSkillError("INSTALL_FAILED", `Download failed: ${messageOf(e)}`, e);
 				}
 				if (!res.ok) throw new WebSkillError("INSTALL_FAILED", `Download failed with HTTP ${res.status}`);
 				data = await readResponseWithLimit(res, this.#archiveLimits);
@@ -526,7 +531,7 @@ var BrowserSkillManager = class {
 				name = metadata.name;
 				version = typeof metadata["version"] === "string" ? metadata["version"] : void 0;
 			} catch (e) {
-				throw new WebSkillError("INSTALL_FAILED", `Failed to read skill name from SKILL.md: ${messageOf$1(e)}`, e);
+				throw new WebSkillError("INSTALL_FAILED", `Failed to read skill name from SKILL.md: ${messageOf(e)}`, e);
 			}
 			if (!isValidSkillName(name)) throw new WebSkillError("INSTALL_FAILED", `Invalid skill name in SKILL.md (path traversal rejected): ${JSON.stringify(name)}`);
 			const finalRoot = `${stagingRoot}/final`;
@@ -592,7 +597,7 @@ var BrowserSkillManager = class {
 					name = metadata.name;
 					versions.set(name, typeof metadata["version"] === "string" ? metadata["version"] : void 0);
 				} catch (e) {
-					throw new WebSkillError("INSTALL_FAILED", `Failed to read skill name from SKILL.md of pack entry "${entry.name}": ${messageOf$1(e)}`, e);
+					throw new WebSkillError("INSTALL_FAILED", `Failed to read skill name from SKILL.md of pack entry "${entry.name}": ${messageOf(e)}`, e);
 				}
 				if (name !== entry.name) throw new WebSkillError("INSTALL_FAILED", `Skill pack entry "${entry.name}" does not match the SKILL.md name "${name}"`);
 				await copyDir(fs, skillDir, `${finalRoot}/${name}`);
@@ -674,7 +679,7 @@ var BrowserSkillManager = class {
 			await this.#removeLockEntry(name);
 			this.#onChanged?.();
 		} catch (e) {
-			throw new WebSkillError("UNINSTALL_FAILED", `Failed to uninstall "${name}": ${messageOf$1(e)}`, e);
+			throw new WebSkillError("UNINSTALL_FAILED", `Failed to uninstall "${name}": ${messageOf(e)}`, e);
 		}
 	}
 	async verifyIntegrity(name) {
@@ -694,7 +699,7 @@ var BrowserSkillManager = class {
 		try {
 			return JSON.parse(await this.#fs.readText(path));
 		} catch (e) {
-			throw new WebSkillError("INTEGRITY_FAILED", `Skills lockfile at ${path} is corrupted: ${messageOf$1(e)}`, e);
+			throw new WebSkillError("INTEGRITY_FAILED", `Skills lockfile at ${path} is corrupted: ${messageOf(e)}`, e);
 		}
 	}
 	async #createManifest(skillRoot, input) {
@@ -726,7 +731,7 @@ var BrowserSkillManager = class {
 		try {
 			return JSON.parse(await this.#fs.readText(path));
 		} catch (e) {
-			throw new WebSkillError("INTEGRITY_FAILED", `Skill manifest at ${path} is corrupted: ${messageOf$1(e)}`, e);
+			throw new WebSkillError("INTEGRITY_FAILED", `Skill manifest at ${path} is corrupted: ${messageOf(e)}`, e);
 		}
 	}
 	async #upsertLockEntry(name, entry) {
@@ -864,7 +869,6 @@ const resolveWorkerFactory = (mode) => {
 	return blobWorkerFactory;
 };
 const baseName = (p) => p.split("/").pop() ?? p;
-const messageOf = (e) => e instanceof Error ? e.message : String(e);
 /**
 * Web Worker 脚本沙箱执行器：loadDefinition 与 execute 都在 Worker 内完成，
 * 主线程从不 import 技能脚本；每次执行独立 Worker；超时 terminate 强杀。

package/dist/{dist-D7MsoMPx.js → dist-BQzncxXg.js}

@@ -16,6 +16,10 @@ var WebSkillError = class extends Error {
 		this.details = details;
 	}
 };
+/** unknown 异常取消息文本（全仓单一来源，勿再本地重复定义） */
+function messageOf(e) {
+	return e instanceof Error ? e.message : String(e);
+}
 /** 技能目录内的安装清单文件名（不参与 files 列表与 digest） */
 const SKILL_MANIFEST_FILE = "webskill.skill-manifest.json";
 /** managed root 下的锁定文件名（不参与 files 列表与 digest） */
@@ -200,7 +204,12 @@ var MemoryFS = class {
 		this.#entries.delete(src);
 	}
 };
-/** 原子写文本：先写临时文件再 rename（进程崩溃不留下半写文件；lockfile 等账本场景） */
+/**
+* 原子写文本：先写临时文件再 rename（进程崩溃不留下半写文件；lockfile 等账本场景）。
+* 原子性强弱取决于 provider 的 rename 实现：NodeFS/MemoryFS 为真 rename；
+* OPFS 无原生 move，rename 是 copy+delete（非原子，崩溃可能残留双份），
+* 对崩溃一致性要求极高的场景在浏览器侧需知悉此前提。
+*/
 async function atomicWriteText(fs, path, content) {
 	const tmp = `${path}.tmp-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
 	await fs.writeText(tmp, content);
@@ -243,6 +252,65 @@ function resolveInsideRoot(root, relativePath) {
 	const joined = normalizedRoot === "" ? clean.join("/") : `${normalizedRoot}/${clean.join("/")}`;
 	return root.startsWith("/") || root.startsWith("\\") ? `/${joined}` : joined;
 }
+const LOOPBACK_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "localhost."]);
+function ipv4Octets(host) {
+	const parts = host.split(".");
+	if (parts.length !== 4) return void 0;
+	const octets = parts.map((p) => /^\d{1,3}$/.test(p) ? Number(p) : NaN);
+	return octets.every((n) => n >= 0 && n <= 255) ? octets : void 0;
+}
+function isPrivateIpv4(octets) {
+	const [a, b] = octets;
+	return a === 0 || a === 10 || a === 127 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254;
+}
+function isPrivateIpv6(host) {
+	const h = host.toLowerCase();
+	if (h === "::1" || h === "::") return true;
+	const mapped = h.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/);
+	if (mapped) {
+		const octets = ipv4Octets(mapped[1]);
+		return octets !== void 0 && isPrivateIpv4(octets);
+	}
+	const mappedHex = h.match(/^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
+	if (mappedHex) {
+		const hi = parseInt(mappedHex[1], 16);
+		const lo = parseInt(mappedHex[2], 16);
+		return isPrivateIpv4([
+			hi >> 8,
+			hi & 255,
+			lo >> 8,
+			lo & 255
+		]);
+	}
+	const first = h.split(":")[0];
+	if (/^[0-9a-f]{1,4}$/.test(first)) {
+		const n = parseInt(first, 16);
+		if ((n & 65472) === 65152) return true;
+		if ((n & 65024) === 64512) return true;
+	}
+	return false;
+}
+function isPrivateHost(hostname) {
+	const host = hostname.toLowerCase();
+	if (LOOPBACK_HOSTNAMES.has(host) || host.endsWith(".localhost")) return true;
+	const v4 = ipv4Octets(host);
+	if (v4) return isPrivateIpv4(v4);
+	if (host.startsWith("[") && host.endsWith("]")) return isPrivateIpv6(host.slice(1, -1));
+	if (host.includes(":")) return isPrivateIpv6(host);
+	return false;
+}
+/**
+* 校验远程 URL 是否允许连接；违规抛 NETWORK_BLOCKED。
+* rawUrl 非合法 URL 时抛 TypeError（由调用方按自身错误码包装）。
+*/
+function assertRemoteUrlAllowed(rawUrl, policy = {}) {
+	const url = new URL(rawUrl);
+	if (url.protocol === "http:") {
+		if (!policy.allowHttp) throw new WebSkillError("NETWORK_BLOCKED", `Insecure URL scheme "http:" is not allowed (opt in via allowHttp): ${url.href}`);
+	} else if (url.protocol !== "https:") throw new WebSkillError("NETWORK_BLOCKED", `URL scheme "${url.protocol}" is not allowed (https only): ${url.href}`);
+	if (!policy.allowPrivateHosts && isPrivateHost(url.hostname)) throw new WebSkillError("NETWORK_BLOCKED", `Refusing to connect to a private/loopback/link-local address: ${url.hostname}`);
+	return url;
+}
 const FRONTMATTER_RE = /^---[^\S\r\n]*\r?\n([\s\S]*?)\r?\n---[^\S\r\n]*(?:\r?\n|$)([\s\S]*)$/;
 const invalid = (message, details) => {
 	throw new WebSkillError("SKILL_INVALID_METADATA", message, details);
@@ -383,7 +451,6 @@ function checkDependencyCycles(adjacency) {
 */
 /** 包级清单文件名（位于 zip 根，不参与各技能 digest） */
 const SKILL_PACK_FILE = "webskill.skill-pack.json";
-const messageOf = (e) => e instanceof Error ? e.message : String(e);
 const baseName$1 = (p) => p.split("/").pop() ?? p;
 async function listFilesRecursive(fs, root, prefix = "") {
 	const out = [];
@@ -769,4 +836,4 @@ const xmlRenderer = {
 };
 
 //#endregion
-export { unzipWithLimits as A, parseSkillMarkdown as C, renderCatalogJson as D, renderAvailableSkillsXml as E, verifyManifest as M, xmlRenderer as N, resolveArchiveLimits as O, normalizePath as S, readResponseWithLimit as T, computeDigest as _, SKILL_NAME_MAX_LENGTH as a, isValidSkillName as b, SkillDiscovery as c, assertSafePathSegment as d, atomicWriteText as f, checkSkillRules as g, checkDependencyCycles as h, SKILL_MANIFEST_FILE as i, validateSkills as j, resolveInsideRoot as k, SkillReader as l, buildManifest as m, MemoryFS as n, SKILL_NAME_PATTERN as o, buildCatalog as p, SKILLS_LOCKFILE as r, SKILL_PACK_FILE as s, DEFAULT_ARCHIVE_LIMITS as t, WebSkillError as u, escapeXml as v, parseSkillPackManifest as w, jsonRenderer as x, exportSkills as y };
+export { resolveArchiveLimits as A, messageOf as C, readResponseWithLimit as D, parseSkillPackManifest as E, xmlRenderer as F, unzipWithLimits as M, validateSkills as N, renderAvailableSkillsXml as O, verifyManifest as P, jsonRenderer as S, parseSkillMarkdown as T, checkSkillRules as _, SKILL_NAME_MAX_LENGTH as a, exportSkills as b, SkillDiscovery as c, assertRemoteUrlAllowed as d, assertSafePathSegment as f, checkDependencyCycles as g, buildManifest as h, SKILL_MANIFEST_FILE as i, resolveInsideRoot as j, renderCatalogJson as k, SkillReader as l, buildCatalog as m, MemoryFS as n, SKILL_NAME_PATTERN as o, atomicWriteText as p, SKILLS_LOCKFILE as r, SKILL_PACK_FILE as s, DEFAULT_ARCHIVE_LIMITS as t, WebSkillError as u, computeDigest as v, normalizePath as w, isValidSkillName as x, escapeXml as y };