@webskill/sdk 0.2.8 → 0.3.0

package/README.md

@@ -49,6 +49,12 @@ npm install @webskill/sdk
 React/Vue integrations require their respective peer dependencies
 (`react` + `react-dom`, or `vue`), which are optional.
 
+`zod` ships as a direct dependency: the `@webskill/sdk/ui` catalog references it
+in its static import graph and in its public types, so declaring it optional
+would misrepresent the artifact. Hosts do not need to install it themselves.
+`tar`, `oxc-parser` and `@modelcontextprotocol/sdk` remain optional peers —
+they are loaded lazily and only when the corresponding API is called.
+
 ## Requirements
 
 - Node.js >= 22.18 (native type stripping for `.ts` skill scripts)
@@ -214,6 +220,42 @@ import { MockLlmClient, MockUiBridge, InMemoryStore, MemoryArtifactStore } from
 const llm = new MockLlmClient([{ content: 'deterministic answer' }]);
 ```
 
+## `allowed-tools`
+
+A skill may narrow the tool surface it needs by declaring `allowed-tools` in its
+`SKILL.md` frontmatter. Three kinds of tools can be listed:
+
+```yaml
+allowed-tools:
+  - render # a script of this skill (scripts/render.ts)
+  - endpoint:github/create_issue # one tool of an MCP endpoint
+  - endpoint:github/* # every tool of an MCP endpoint
+  - mcp#read_file # one page-provided (WebMCP) tool
+```
+
+Matching rules:
+
+- Only whole-entry matches and a trailing `/*` are supported. Wildcards in any
+  other position are not, and a bare `endpoint:github` is **not** a prefix
+  wildcard — it simply matches nothing.
+- A bare identifier means a script of the declaring skill only. It never grants
+  access to another skill's script of the same name.
+
+When several skills are active at the same time:
+
+| Situation                                | Result                                                                                                   |
+| ---------------------------------------- | -------------------------------------------------------------------------------------------------------- |
+| No active skill declares `allowed-tools` | Unrestricted                                                                                             |
+| At least one active skill declares it    | A tool is allowed if it matches any declaring skill's list, **or** if some active skill declares nothing |
+
+Enforcement level differs per tool kind in 0.3.0:
+
+- **Scripts** — enforced since 0.0.5: a script outside the list is not
+  registered, and calling it by name returns `TOOL_NOT_FOUND`.
+- **MCP / WebMCP tools** — 0.3.0 only records a `run.warning` naming the tool
+  and the entry to add, and still allows the call. This becomes a rejection in
+  0.4.0, so treat the warning as a build error in your own pipeline.
+
 ## Stability
 
 This package follows semver starting at 0.1.0. Public symbols carry JSDoc

package/dist/browser.d.ts

@@ -1,5 +1,5 @@
-import { K as SkillInstallSource, M as FileStat, N as FileSystemProvider, O as ArchiveLimits, Y as SkillManifest, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, et as SkillsLockfile, f as LlmStreamEvent, nt as VerifyResult, o as InteractionRequest, s as InteractionResponse, v as UiBridge } from "./types-AmKCKJn_-BogJPQHU.js";
-import { N as NetworkPolicy, Ot as parseBridgeRequest, Q as ScriptExecutor, Z as ScriptExecutionContext, d as BridgeCapabilities, it as ToolResult, m as BridgeResponse, nt as ToolDefinition, p as BridgeRequest, pt as bridgeError, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-QrHtAudz.js";
+import { $ as SkillInstallSource, N as FileStat, O as ArchiveLimits, P as FileSystemProvider, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, lt as SkillsLockfile, mt as VerifyResult, o as InteractionRequest, rt as SkillManifest, s as InteractionResponse, v as UiBridge } from "./types-AmKCKJn_-VGabeXK4.js";
+import { Ct as WebSkillApi, Et as bridgeError, F as NetworkPolicy, Vt as parseBridgeRequest, _t as ToolResult, ct as ScriptExecutor, d as BridgeCapabilities, ht as ToolDefinition, m as BridgeResponse, p as BridgeRequest, st as ScriptExecutionContext, u as ApprovalScope, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-8d-oEDww.js";
 //#region ../browser/dist/index.d.ts
 //#region src/fs/featureDetection.d.ts
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */

package/dist/browser.js

@@ -1,6 +1,6 @@
-import { C as messageOf, D as readResponseWithLimit, E as parseSkillPackManifest, M as unzipWithLimits, N as validateSkills, P as verifyManifest, T as parseSkillMarkdown, b as exportSkills, c as SkillDiscovery, d as assertRemoteUrlAllowed, h as buildManifest, i as SKILL_MANIFEST_FILE, j as resolveInsideRoot, m as buildCatalog, p as atomicWriteText, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
-import { C as bridgeError, E as createWebSkillApi, I as normalizeToolContent, L as normalizeToolError, M as mergeCatalogEntries, N as networkPolicyLibSource, R as parseBridgeRequest, c as FsArtifactStore, h as ProgressiveRouter, i as AgentLoop, l as FsMemoryStore, m as OpenAiCompatibleClient, o as CapabilityApproval, u as FsRunSnapshotStore, y as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-B9VLwOME.js";
-import { n as MockLlmClient } from "./testing-BUoXvm1u.js";
+import { A as parseSkillMarkdown, B as unzipWithLimits, H as verifyManifest, L as resolveInsideRoot, M as readResponseWithLimit, O as messageOf, T as isValidSkillName, V as validateSkills, _ as atomicWriteText, f as SkillDiscovery, h as assertRemoteUrlAllowed, j as parseSkillPackManifest, m as WebSkillError, o as SKILLS_LOCKFILE, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, u as SKILL_PACK_FILE, v as buildCatalog, w as exportSkills, y as buildManifest } from "./dist-8oQRa8Xz.js";
+import { A as createWebSkillApi, B as normalizeToolContent, D as bridgeError, H as parseBridgeRequest, I as mergeCatalogEntries, L as networkPolicyLibSource, V as normalizeToolError, _ as ProgressiveRouter, c as FsArtifactStore, g as OpenAiCompatibleClient, i as AgentLoop, l as FsMemoryStore, o as CapabilityApproval, u as FsRunSnapshotStore, x as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-rorEJsNi.js";
+import { n as MockLlmClient } from "./testing-CsrG3XLz.js";
 
 //#region ../browser/dist/index.js
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -702,10 +702,9 @@ var BrowserSkillManager = class {
 		}
 	}
 	async #createManifest(skillRoot, input) {
-		const excluded = /* @__PURE__ */ new Set([SKILL_MANIFEST_FILE, SKILLS_LOCKFILE]);
 		const files = [];
 		for (const rel of (await listFiles(this.#fs, skillRoot)).sort()) {
-			if (excluded.has(rel.split("/").pop() ?? "")) continue;
+			if (MANIFEST_EXCLUDED_FILES.has(rel.split("/").pop() ?? "")) continue;
 			const content = await this.#fs.readBinary(`${skillRoot}/${rel}`);
 			files.push({
 				path: rel,