@webskill/sdk 0.2.6 → 0.2.8

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { I as SkillDocument, P as SkillCatalogEntry, T as JsonSchema, m as LlmToolSpec } from "./types-CKm5G_eQ-krKWW8WV.js";
-import { it as ToolResult, v as ExternalSkillProvider, xt as mergeCatalogEntries, y as ExternalToolSource } from "./index-DJOha4b6.js";
+import { G as SkillDocument, P as JsonSchema, U as SkillCatalogEntry, m as LlmToolSpec } from "./types-AmKCKJn_-BogJPQHU.js";
+import { St as mergeCatalogEntries, it as ToolResult, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-QrHtAudz.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -214,7 +214,7 @@ declare class ExperimentalWebMcpAdapter {
     enabled?: boolean;
   });
   isAvailable(): boolean;
-  /** 工具清单（listTools 缺失/失败时返回 undefined）；描述含 inputSchema 时透传 */
+  /** 工具清单（listTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
   listTools(): Promise<WebMcpToolDescriptor[] | undefined>;
   /** 工具名清单（listTools 缺失/失败时返回 undefined） */
   listToolNames(): Promise<string[] | undefined>;
@@ -235,6 +235,8 @@ declare class McpRuntimePlugin implements ExternalToolSource {
     resolver?: McpToolResolver;
     /** 已知的 endpoint 名（注销后仍按 MCP_ENDPOINT_UNAVAILABLE 响应，而非 TOOL_NOT_FOUND） */
     endpoints?: string[];
+    /** endpoint 不可用时的告警出口（默认 console.warn） */
+    onWarning?(message: string): void;
   });
   listToolSpecs(): Promise<LlmToolSpec[]>;
   canHandle(llmToolName: string): boolean;

package/dist/mcp.js

@@ -1,5 +1,5 @@
 import { C as messageOf, d as assertRemoteUrlAllowed, u as WebSkillError } from "./dist-BQzncxXg.js";
-import { P as normalizeToolContent, j as mergeCatalogEntries } from "./dist-BXpDDZpR.js";
+import { I as normalizeToolContent, M as mergeCatalogEntries } from "./dist-B9VLwOME.js";
 
 //#region ../mcp/dist/index.js
 /**
@@ -418,13 +418,14 @@ var ExperimentalWebMcpAdapter = class {
 	isAvailable() {
 		return this.#enabled && typeof this.#resolveApi()?.executeTool === "function";
 	}
-	/** 工具清单（listTools 缺失/失败时返回 undefined）；描述含 inputSchema 时透传 */
+	/** 工具清单（listTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
 	async listTools() {
 		const api = this.#resolveApi();
 		if (typeof api?.listTools !== "function") return void 0;
 		try {
 			return extractToolDescriptors(await api.listTools());
-		} catch {
+		} catch (e) {
+			console.warn(`[webskill] navigator.modelContext.listTools() failed: ${e instanceof Error ? e.message : String(e)}`);
 			return;
 		}
 	}
@@ -460,11 +461,13 @@ var McpRuntimePlugin = class {
 	#resolver;
 	#webMcp;
 	#configuredEndpoints;
+	#onWarning;
 	constructor(deps) {
 		this.#registry = deps.registry;
 		this.#resolver = deps.resolver ?? new McpToolResolver(deps.registry);
 		this.#webMcp = deps.webMcp;
 		this.#configuredEndpoints = deps.endpoints ?? [];
+		this.#onWarning = deps.onWarning ?? ((message) => console.warn(message));
 	}
 	#endpoints() {
 		return [.../* @__PURE__ */ new Set([...this.#configuredEndpoints, ...this.#registry.endpoints()])];
@@ -481,7 +484,9 @@ var McpRuntimePlugin = class {
 					properties: {}
 				}
 			});
-		} catch {}
+		} catch (e) {
+			this.#onWarning(`[webskill] MCP endpoint "${endpoint}" is unavailable; its tools are omitted from this turn: ${e instanceof Error ? e.message : String(e)}`);
+		}
 		if (this.#webMcp?.isAvailable()) {
 			const tools = await this.#webMcp.listTools();
 			for (const tool of tools ?? []) specs.push({

package/dist/node.d.ts

@@ -1,5 +1,50 @@
-import { B as SkillManifest, G as SkillsLockfile, L as SkillInstallSource, O as SKILLS_LOCKFILE, k as SKILL_MANIFEST_FILE, q as VerifyResult } from "./types-CKm5G_eQ-krKWW8WV.js";
-import { ht as createScriptContext } from "./index-DJOha4b6.js";
+import { K as SkillInstallSource, L as SKILLS_LOCKFILE, N as FileSystemProvider, R as SKILL_MANIFEST_FILE, Y as SkillManifest, et as SkillsLockfile, nt as VerifyResult, v as UiBridge } from "./types-AmKCKJn_-BogJPQHU.js";
+import { Q as ScriptExecutor, dt as WebSkillRuntime, ft as WebSkillRuntimeDeps, ht as createScriptContext } from "./index-QrHtAudz.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-BPUBZCwJ-4jat_SVG.js";
-import { a as NodeScriptExecutor, c as ProcessSandboxOptions, d as SkillManager, f as exportArchive, i as NodeFS, l as SandboxOptions, n as FileArtifactStore, o as OxcSchemaInferer, p as readArchiveManifest, r as FileMemoryStore, s as ProcessSandboxExecutor, t as CliUiBridge, u as SandboxedScriptExecutor } from "./index-DRlYzdr2.js";
-export { CliUiBridge, FileArtifactStore, FileMemoryStore, type LlmCapabilities, type LlmEnvConfig, NodeFS, NodeScriptExecutor, OxcSchemaInferer, ProcessSandboxExecutor, type ProcessSandboxOptions, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, type SandboxOptions, SandboxedScriptExecutor, type SkillInstallSource, SkillManager, type SkillManifest, type SkillsLockfile, type VerifyResult, createScriptContext, exportArchive, probeLlmCapabilities, readArchiveManifest };
+import { C as ProcessSandboxExecutor, D as SkillManager, E as SandboxedScriptExecutor, O as exportArchive, S as OxcSchemaInferer, T as SandboxOptions, _ as CliUiBridge, a as AuditLog, b as NodeFS, c as CandidateSkill, d as CandidateStore, h as SkillVersionStore, k as readArchiveManifest, r as ApprovalPolicy, v as FileArtifactStore, w as ProcessSandboxOptions, x as NodeScriptExecutor, y as FileMemoryStore } from "./skillVersionStore-B7rGjtMi-BgnQho9v.js";
+//#region ../governance/dist/node.d.ts
+//#region src/approval/approvalWorkflow.d.ts
+/** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
+declare class ApprovalWorkflow {
+  #private;
+  constructor(deps: {
+    policy: ApprovalPolicy;
+    audit: AuditLog;
+    store: CandidateStore;
+    skillManager: SkillManager;
+    versions: SkillVersionStore;
+    fs?: FileSystemProvider;
+  });
+  /** 策略评估；needs-human 时经 UiBridge confirm 真实询问，按应答迁移状态 */
+  review(candidateId: string, input: {
+    actor: string;
+    uiBridge?: UiBridge;
+  }): Promise<CandidateSkill>;
+  /** publish 全链路：approved 前置 → 写出 staging → validateSkills → install → 版本 → 审计 */
+  publish(candidateId: string, input: {
+    actor: string;
+  }): Promise<SkillManifest>;
+  /**
+   * 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
+   * 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
+   * RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
+   */
+  applyRollback(skillName: string, versionId: string, input: {
+    actor: string;
+    reason?: string;
+  }): Promise<SkillManifest>;
+}
+//#endregion
+//#region src/evaluation/evaluationRuntime.d.ts
+/**
+ * 治理评估专用 runtime 装配（不可信技能试用路径）：
+ * 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程
+ * env 默认清空防密钥泄露，需透传时经 ProcessSandboxOptions.envWhitelist 显式放行）。
+ * 可配置 executor 切回 SandboxedScriptExecutor（worker_threads 能力面收敛形态，
+ * 非安全边界；envWhitelist 同样适用于该执行器）。
+ */
+declare function createEvaluationRuntime(deps: WebSkillRuntimeDeps & {
+  executor?: ScriptExecutor;
+}): WebSkillRuntime;
+//#endregion
+export { ApprovalWorkflow, CliUiBridge, FileArtifactStore, FileMemoryStore, type LlmCapabilities, type LlmEnvConfig, NodeFS, NodeScriptExecutor, OxcSchemaInferer, ProcessSandboxExecutor, type ProcessSandboxOptions, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, type SandboxOptions, SandboxedScriptExecutor, type SkillInstallSource, SkillManager, type SkillManifest, type SkillsLockfile, type VerifyResult, createEvaluationRuntime, createScriptContext, exportArchive, probeLlmCapabilities, readArchiveManifest };