@webskill/sdk 0.2.6 → 0.2.8

package/dist/browser.d.ts

@@ -1,5 +1,5 @@
-import { B as SkillManifest, C as FileStat, G as SkillsLockfile, L as SkillInstallSource, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, o as InteractionRequest, q as VerifyResult, s as InteractionResponse, v as UiBridge, w as FileSystemProvider, y as ArchiveLimits } from "./types-CKm5G_eQ-krKWW8WV.js";
-import { Et as parseBridgeRequest, N as NetworkPolicy, Q as ScriptExecutor, Z as ScriptExecutionContext, d as BridgeCapabilities, it as ToolResult, m as BridgeResponse, nt as ToolDefinition, p as BridgeRequest, pt as bridgeError, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-DJOha4b6.js";
+import { K as SkillInstallSource, M as FileStat, N as FileSystemProvider, O as ArchiveLimits, Y as SkillManifest, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, et as SkillsLockfile, f as LlmStreamEvent, nt as VerifyResult, o as InteractionRequest, s as InteractionResponse, v as UiBridge } from "./types-AmKCKJn_-BogJPQHU.js";
+import { N as NetworkPolicy, Ot as parseBridgeRequest, Q as ScriptExecutor, Z as ScriptExecutionContext, d as BridgeCapabilities, it as ToolResult, m as BridgeResponse, nt as ToolDefinition, p as BridgeRequest, pt as bridgeError, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-QrHtAudz.js";
 //#region ../browser/dist/index.d.ts
 //#region src/fs/featureDetection.d.ts
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -32,8 +32,9 @@ declare class OpfsProvider implements FileSystemProvider {
 /**
  * Worker 引导源码（字符串 → Blob URL → new Worker(url, {type:'module'})）。
  * 注意：内容为纯 JS，不能含反引号与 ${ 占位（外层用模板字符串内嵌）；
- * isNetworkAllowed/networkUrlHost 经函数源码注入（匹配逻辑单一来源在
- * runtime/sandbox/networkPolicy.ts，此处禁止复制实现）。
+ * isNetworkAllowed/networkUrlHost 经 networkPolicyLibSource() 注入（匹配逻辑单一来源在
+ * runtime/sandbox/networkPolicy.ts，此处禁止复制实现）。该辅助把函数源码绑定到固定变量名，
+ * 消费方生产构建压缩改名后仍可调用（0.2.8 C4）。
  *
  * 协议（宿主 ↔ Worker）：
  * - 宿主 → Worker：{type:'load', id, source, networkPolicy?} 请求加载脚本定义
@@ -296,6 +297,12 @@ type WorkerEvent = {
   type: 'text-delta';
   runId: string;
   delta: string;
+} |
+/** 不阻断 run 但宿主应当知晓的降级（如外部技能提供者报错导致技能缺失） */
+{
+  type: 'host-warning';
+  runId: string;
+  message: string;
 };
 /** Worker 内全局作用域最小接口（postMessage + 消息监听） */
 interface WorkerScopeLike {
@@ -336,6 +343,8 @@ interface WorkerRuntimeClientDeps {
   uiBridge?: UiBridge;
   /** 单次请求超时（默认 120_000ms）；超时返回结构化 error 响应（不 reject） */
   timeoutMs?: number;
+  /** 不阻断 run 的降级告警出口（默认 console.warn） */
+  onWarning?(runId: string, message: string): void;
 }
 /** 主线程客户端：init/run/cancel/status/dispose 的 Promise API + 交互转发 */
 declare class WorkerRuntimeClient {

package/dist/browser.js

@@ -1,5 +1,5 @@
 import { C as messageOf, D as readResponseWithLimit, E as parseSkillPackManifest, M as unzipWithLimits, N as validateSkills, P as verifyManifest, T as parseSkillMarkdown, b as exportSkills, c as SkillDiscovery, d as assertRemoteUrlAllowed, h as buildManifest, i as SKILL_MANIFEST_FILE, j as resolveInsideRoot, m as buildCatalog, p as atomicWriteText, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
-import { A as isNetworkAllowed, C as bridgeError, E as createWebSkillApi, F as normalizeToolError, I as parseBridgeRequest, M as networkUrlHost, P as normalizeToolContent, c as FsArtifactStore, h as ProgressiveRouter, i as AgentLoop, j as mergeCatalogEntries, l as FsMemoryStore, m as OpenAiCompatibleClient, o as CapabilityApproval, u as FsRunSnapshotStore, y as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-BXpDDZpR.js";
+import { C as bridgeError, E as createWebSkillApi, I as normalizeToolContent, L as normalizeToolError, M as mergeCatalogEntries, N as networkPolicyLibSource, R as parseBridgeRequest, c as FsArtifactStore, h as ProgressiveRouter, i as AgentLoop, l as FsMemoryStore, m as OpenAiCompatibleClient, o as CapabilityApproval, u as FsRunSnapshotStore, y as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-B9VLwOME.js";
 import { n as MockLlmClient } from "./testing-BUoXvm1u.js";
 
 //#region ../browser/dist/index.js
@@ -157,8 +157,9 @@ var OpfsProvider = class {
 /**
 * Worker 引导源码（字符串 → Blob URL → new Worker(url, {type:'module'})）。
 * 注意：内容为纯 JS，不能含反引号与 ${ 占位（外层用模板字符串内嵌）；
-* isNetworkAllowed/networkUrlHost 经函数源码注入（匹配逻辑单一来源在
-* runtime/sandbox/networkPolicy.ts，此处禁止复制实现）。
+* isNetworkAllowed/networkUrlHost 经 networkPolicyLibSource() 注入（匹配逻辑单一来源在
+* runtime/sandbox/networkPolicy.ts，此处禁止复制实现）。该辅助把函数源码绑定到固定变量名，
+* 消费方生产构建压缩改名后仍可调用（0.2.8 C4）。
 *
 * 协议（宿主 ↔ Worker）：
 * - 宿主 → Worker：{type:'load', id, source, networkPolicy?} 请求加载脚本定义
@@ -180,9 +181,7 @@ var pending = new Map();
 var bridgeSeq = 0;
 var networkPolicy = 'deny-all';
 
-${isNetworkAllowed.toString()}
-
-${networkUrlHost.toString()}
+${networkPolicyLibSource()}
 
 function resolveUrl(raw) {
   try {
@@ -1180,6 +1179,11 @@ function parseWorkerEvent(data) {
 		runId: data["runId"],
 		delta: data["delta"]
 	} : void 0;
+	if (data["type"] === "host-warning") return isNonEmptyString(data["runId"]) && isNonEmptyString(data["message"]) ? {
+		type: "host-warning",
+		runId: data["runId"],
+		message: data["message"]
+	} : void 0;
 	if (!isNonEmptyString(data["id"])) return;
 	switch (data["type"]) {
 		case "ready": return {
@@ -1499,10 +1503,12 @@ var WorkerRuntimeClient = class {
 	#timeoutMs;
 	#pending = /* @__PURE__ */ new Map();
 	#seq = 0;
+	#onWarning;
 	constructor(deps) {
 		this.#worker = deps.worker;
 		this.#uiBridge = deps.uiBridge;
 		this.#timeoutMs = deps.timeoutMs ?? 12e4;
+		this.#onWarning = deps.onWarning ?? ((runId, message) => console.warn(`[webskill] run ${runId}: ${message}`));
 		this.#worker.addEventListener("message", (event) => {
 			this.#onMessage(event.data);
 		});
@@ -1623,6 +1629,10 @@ var WorkerRuntimeClient = class {
 			await this.#uiBridge?.onTextDelta?.(event.runId, event.delta);
 			return;
 		}
+		if (event.type === "host-warning") {
+			this.#onWarning(event.runId, event.message);
+			return;
+		}
 		const pending = this.#pending.get(event.id);
 		if (pending) {
 			this.#pending.delete(event.id);