@webskill/sdk 0.2.8 → 0.4.0

package/dist/memoryArtifactStore-C9lFVqPF-yFz6yJj0.js

@@ -1,48 +0,0 @@
-//#region ../runtime/dist/memoryArtifactStore-C9lFVqPF.js
-/** 内存 ArtifactStore：测试与浏览器降级用；索引随进程生命周期存在 */
-var MemoryArtifactStore = class {
-	#byRun = /* @__PURE__ */ new Map();
-	#seq = 0;
-	async createTextArtifact(input) {
-		return this.#record({
-			runId: input.runId,
-			path: input.path,
-			type: "text",
-			size: new TextEncoder().encode(input.content).length,
-			mimeType: input.mimeType,
-			metadata: input.metadata
-		});
-	}
-	async createBinaryArtifact(input) {
-		return this.#record({
-			runId: input.runId,
-			path: input.path,
-			type: "binary",
-			size: input.content.length,
-			mimeType: input.mimeType,
-			metadata: input.metadata
-		});
-	}
-	async listArtifacts(runId) {
-		return [...this.#byRun.get(runId) ?? []];
-	}
-	#record(input) {
-		const artifact = {
-			id: `art-${++this.#seq}`,
-			runId: input.runId,
-			path: input.path,
-			type: input.type,
-			mimeType: input.mimeType,
-			size: input.size,
-			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-			metadata: input.metadata
-		};
-		const list = this.#byRun.get(input.runId) ?? [];
-		list.push(artifact);
-		this.#byRun.set(input.runId, list);
-		return artifact;
-	}
-};
-
-//#endregion
-export { MemoryArtifactStore as t };

package/dist/skillVersionStore-B7rGjtMi-BgnQho9v.d.ts

@@ -1,365 +0,0 @@
-import { K as SkillInstallSource, M as FileStat, N as FileSystemProvider, O as ArchiveLimits, P as JsonSchema, U as SkillCatalogEntry, Y as SkillManifest, _ as RenderResultRequest, et as SkillsLockfile, nt as VerifyResult, o as InteractionRequest, s as InteractionResponse, v as UiBridge } from "./types-AmKCKJn_-BogJPQHU.js";
-import { N as NetworkPolicy, Q as ScriptExecutor, X as SchemaInferer, Z as ScriptExecutionContext, b as FsArtifactStore, d as BridgeCapabilities, it as ToolResult, nt as ToolDefinition, u as ApprovalScope, x as FsMemoryStore } from "./index-QrHtAudz.js";
-import { Readable, Writable } from "node:stream";
-//#region ../node/dist/index.d.ts
-//#region src/fs/nodeFs.d.ts
-/**
- * 基于 node:fs/promises 的 FileSystemProvider；接受 `/` 风格路径，写入自动创建父目录。
- * 可选 root 模式：构造传入 root 后，read/write 操作先做 realpath 包含校验
- * （root 与目标都 realpath 后前缀比对），经符号链接逃逸 root → FS_PATH_OUTSIDE_ROOT。
- */
-declare class NodeFS implements FileSystemProvider {
-  #private;
-  readonly kind = "node";
-  constructor(deps?: {
-    root?: string;
-  });
-  /** root 模式：全部方法（read/write/exists/stat/list/mkdir/remove/rename）目标 realpath 必须落在 root realpath 前缀内 */
-  withRoot(root: string): NodeFS;
-  readText(p: string): Promise<string>;
-  writeText(p: string, content: string): Promise<void>;
-  appendText(p: string, content: string): Promise<void>;
-  readBinary(p: string): Promise<Uint8Array>;
-  writeBinary(p: string, content: Uint8Array): Promise<void>;
-  exists(p: string): Promise<boolean>;
-  stat(p: string): Promise<FileStat>;
-  list(p: string): Promise<FileStat[]>;
-  mkdir(p: string): Promise<void>;
-  remove(p: string, options?: {
-    recursive?: boolean;
-  }): Promise<void>;
-  rename(from: string, to: string): Promise<void>;
-}
-//#endregion
-//#region src/executor/nodeScriptExecutor.d.ts
-/**
- * 进程内脚本执行器。接口按沙箱语义设计（context 无隐式宿主访问），
- * worker_threads 沙箱见 deferred-items D1。
- */
-declare class NodeScriptExecutor implements ScriptExecutor {
-  #private;
-  constructor(fs: FileSystemProvider);
-  loadDefinition(skillRoot: string, scriptName: string): Promise<ToolDefinition>;
-  execute(input: {
-    skillRoot: string;
-    scriptName: string;
-    args: Record<string, unknown>;
-    context: Parameters<ScriptExecutor['execute']>[0]['context'];
-    timeoutMs: number;
-  }): Promise<ToolResult>;
-}
-//#endregion
-//#region src/executor/sandboxedScriptExecutor.d.ts
-interface SandboxOptions {
-  /** 默认 { maxOldGenerationSizeMb: 64, maxYoungGenerationSizeMb: 16 } */
-  resourceLimits?: {
-    maxOldGenerationSizeMb?: number;
-    maxYoungGenerationSizeMb?: number;
-  };
-  /** env 白名单（仅这些变量传入 Worker；默认空） */
-  envWhitelist?: string[];
-  capabilities?: BridgeCapabilities;
-  /** 网络策略：默认 'deny-all'（白名单见 runtime/sandbox/networkPolicy） */
-  networkPolicy?: NetworkPolicy;
-  /** 裸模块 allowlist（默认 []：一切 node: 内置模块全禁；按需放行如 ['node:path']） */
-  allowedModules?: string[];
-  /** require-approval 模式的授权询问出口（缺失时 require-approval 一律拒绝） */
-  uiBridge?: UiBridge;
-  /** 授权粒度：默认 'once-per-run' */
-  approvalScope?: ApprovalScope;
-}
-/**
- * D1：worker_threads 沙箱脚本执行器。
- * 每次执行独立 Worker（resourceLimits + env 白名单），loadDefinition 同样在
- * Worker 内完成（禁止主进程 import 不可信脚本）；超时 terminate（可杀同步死循环）。
- * 能力桥协议与浏览器同一来源（runtime/sandbox/bridgeProtocol）。
- *
- * 诚实标注：本执行器做的是**能力面收敛**（网络策略、模块 allowlist、资源限额、
- * 超时强杀），**不是安全边界**——Worker 内脚本与宿主共享进程；
- * 已知主动逃逸面（process.binding/_linkedBinding/dlopen/openStdin/reallyExit/abort）
- * 已在入口删除（0.2.3），常规 import 拦截之外不承诺防御其它宿主共享面；
- * 禁止假定其可隔离不可信脚本（隔离级需求用 ProcessSandboxExecutor）。
- */
-declare class SandboxedScriptExecutor implements ScriptExecutor {
-  #private;
-  constructor(fs: FileSystemProvider, options?: SandboxOptions);
-  loadDefinition(skillRoot: string, scriptName: string): Promise<ToolDefinition>;
-  execute(input: {
-    skillRoot: string;
-    scriptName: string;
-    args: Record<string, unknown>;
-    context: ScriptExecutionContext;
-    timeoutMs: number;
-  }): Promise<ToolResult>;
-}
-//#endregion
-//#region src/executor/processSandboxExecutor.d.ts
-interface ProcessSandboxOptions {
-  /** 温池大小（并发上限；执行后 kill 并补位重生），默认 2 */
-  poolSize?: number;
-  /** 透传给子进程的环境变量白名单（默认 []：子进程 env 为空，防密钥泄露） */
-  envWhitelist?: string[];
-  capabilities?: BridgeCapabilities;
-  /** 网络策略：默认 'deny-all'（权限模型无网络维度，补丁兜底；node:net 裸模块为已知残余面） */
-  networkPolicy?: NetworkPolicy;
-  /** require-approval 模式的授权询问出口 */
-  uiBridge?: UiBridge;
-  /** 授权粒度：默认 'once-per-run' */
-  approvalScope?: ApprovalScope;
-  /** 池维护告警出口（recycle 重生失败等；默认 console.warn） */
-  onWarning?: (message: string) => void;
-}
-/**
- * child_process.fork + --permission 进程沙箱（真实进程隔离）。
- * 每个子进程以 `--permission --allow-fs-read=<入口目录> --allow-fs-read=<skillRoot>
- * --allow-fs-write=<artifactDir>` 启动：fs 维度由权限模型管控（experimental），
- * 子进程/Worker/addons 默认禁；网络无权限维度仍靠 fetch/WebSocket patch。
- * 能力桥协议与 worker_threads 沙箱同一形态（readReference/writeArtifact/confirm + 授权）。
- * 温池（默认 2）：同 skillRoot 复用子进程；执行后 kill 并补位重生；并发上限即池大小。
- * 超时 kill（同步死循环可杀）；非零退出码 → TOOL_EXECUTION_FAILED。
- */
-declare class ProcessSandboxExecutor implements ScriptExecutor {
-  #private;
-  constructor(fs: FileSystemProvider, options?: ProcessSandboxOptions);
-  get poolSize(): number;
-  /** 池全部子进程销毁（测试收尾/进程退出前调用）；排队中的 acquire 一律 reject（不悬挂） */
-  dispose(): Promise<void>;
-  loadDefinition(skillRoot: string, scriptName: string): Promise<ToolDefinition>;
-  execute(input: {
-    skillRoot: string;
-    scriptName: string;
-    args: Record<string, unknown>;
-    context: ScriptExecutionContext;
-    timeoutMs: number;
-  }): Promise<ToolResult>;
-}
-//#endregion
-//#region src/schema/oxcSchemaInferer.d.ts
-/**
- * D2 Schema 推导（OXC 静态文本分析，宿主侧执行，不进沙箱）。
- * TS 类型标注为主路径，JSDoc @param 为辅路径；不支持类型降级 string 并标 'x-inferred'。
- */
-declare class OxcSchemaInferer implements SchemaInferer {
-  inferSchemaFromSource(source: string, options?: {
-    fileName?: string;
-  }): JsonSchema | undefined;
-}
-//#endregion
-//#region src/artifacts/fileArtifactStore.d.ts
-/**
- * FileArtifactStore：兼容别名，语义同阶段 2-4。
- * 实现已上移到 runtime 的 FsArtifactStore；node 侧保留 NodeFS 默认值。
- */
-declare class FileArtifactStore extends FsArtifactStore {
-  constructor(deps: {
-    root: string;
-    fs?: FileSystemProvider;
-  });
-}
-//#endregion
-//#region src/memory/fileMemoryStore.d.ts
-/**
- * FileMemoryStore：兼容别名，语义同阶段 3。
- * 实现已上移到 runtime 的 FsMemoryStore；node 侧保留 NodeFS 默认值。
- */
-declare class FileMemoryStore extends FsMemoryStore {
-  constructor(deps: {
-    root: string;
-    fs?: FileSystemProvider;
-  });
-}
-//#endregion
-//#region src/ui/cliUiBridge.d.ts
-/**
- * 命令行 UiBridge：ask→问答，confirm→y/n（带默认值），
- * form→逐字段提示（显示默认值与必填标记），select→编号列表，
- * authorize→授权询问（默认拒绝，仅显式 y/yes 批准）。
- * 输入/输出流可注入（测试用 PassThrough）。
- */
-declare class CliUiBridge implements UiBridge {
-  #private;
-  constructor(deps?: {
-    input?: Readable;
-    output?: Writable;
-  });
-  request(input: InteractionRequest): Promise<InteractionResponse>;
-  progress(input: {
-    runId: string;
-    message: string;
-    value?: number;
-  }): Promise<void>;
-  renderResult(input: RenderResultRequest): Promise<void>;
-}
-//#endregion
-//#region src/skillManagement/skillManager.d.ts
-/**
- * 技能管理门面：统一安装管线（staging → 解析 name → 校验 → 拷贝 → manifest → lockfile），
- * 任何失败清理现场抛 INSTALL_FAILED。
- * @stable
- */
-declare class SkillManager {
-  #private;
-  constructor(deps: {
-    managedRoot: string;
-    fs?: FileSystemProvider;
-    fetchImpl?: typeof fetch;
-    /** D2 安装期 schema 预推导（默认 true，可关） */
-    schemaInference?: boolean;
-    /** 归档体积三重上限（缺省 DEFAULT_ARCHIVE_LIMITS） */
-    archiveLimits?: ArchiveLimits;
-    /** install/uninstall 成功后的变更回调（宿主接线缓存失效，如 WebSkillRuntime.invalidate） */
-    onChanged?: () => void;
-  });
-  /** 托管根目录（治理发布归档捕获等只读场景） */
-  get managedRoot(): string;
-  install(source: SkillInstallSource, options?: {
-    expectedSha256?: string;
-  }): Promise<SkillManifest>;
-  uninstall(name: string): Promise<void>;
-  verifyIntegrity(name: string): Promise<VerifyResult>;
-  listInstalled(): Promise<SkillsLockfile>;
-  exportArchive(name: string, options: {
-    format: 'zip' | 'tar';
-    outPath: string;
-  }): Promise<string>;
-  /** 多技能包集导出（webskill.skill-pack.json + 各技能目录含 manifest），写 outPath 并返回 */
-  exportPack(names: string[], options: {
-    outPath: string;
-  }): Promise<string>;
-}
-//#endregion
-//#region src/skillManagement/export/archiveExporter.d.ts
-/** 导出技能目录全部文件（含 manifest）为 zip/tar 归档，返回 outPath */
-declare function exportArchive(fs: FileSystemProvider, skillRoot: string, options: {
-  format: 'zip' | 'tar';
-  outPath: string;
-}): Promise<string>;
-/** 只解出归档中的 webskill.skill-manifest.json 条目（安装前预览） */
-declare function readArchiveManifest(fs: FileSystemProvider, archivePath: string): Promise<SkillManifest>;
-//#endregion
-//#region ../governance/dist/skillVersionStore-B7rGjtMi.d.ts
-//#region src/types.d.ts
-type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
-type CandidateSource = 'runtime-miss' | 'document' | 'manual';
-type CandidateRisk = 'low' | 'medium' | 'high';
-interface CandidateFile {
-  path: string;
-  kind: 'skill-md' | 'script' | 'reference' | 'asset';
-  content: string;
-}
-interface CandidateSkill {
-  id: string;
-  name: string;
-  description: string;
-  status: CandidateStatus;
-  source: CandidateSource;
-  risk: CandidateRisk;
-  riskReasons: string[];
-  files: CandidateFile[];
-  suggestedTests?: string[];
-  createdAt: string;
-  updatedAt: string;
-  metadata?: Record<string, unknown>;
-}
-interface AuditEvent {
-  id: string;
-  type: string;
-  target: string;
-  actor?: string;
-  ts: string;
-  data?: Record<string, unknown>;
-  /** hash 链：上一条事件的 hash（首条为 GENESIS） */
-  prevHash?: string;
-  /** 本事件规范化载荷 + prevHash 的 sha256 */
-  hash?: string;
-}
-interface AuditLog {
-  append(event: Omit<AuditEvent, 'id' | 'ts'> & {
-    id?: string;
-    ts?: string;
-  }): Promise<AuditEvent>;
-  query(filter: {
-    target?: string;
-    type?: string;
-    since?: string;
-  }): Promise<AuditEvent[]>;
-}
-interface SkillVersion {
-  versionId: string;
-  parentVersionId?: string;
-  createdAt: string;
-  reason: string;
-  manifest: SkillManifest;
-  auditEventId?: string;
-  /** 发布时捕获的技能归档（zip 相对路径，applyRollback 恢复用；0.2.0 起记录） */
-  archivePath?: string;
-}
-type SkillState = 'active' | 'quarantined' | 'deprecated' | 'disabled';
-//#endregion
-//#region src/candidate/candidateStore.d.ts
-/** 逐文件持久化的候选存储：<managedRoot>/.webskill/candidates/<id>.json */
-declare class CandidateStore {
-  #private;
-  constructor(deps: {
-    root: string;
-    fs: FileSystemProvider;
-  });
-  save(candidate: CandidateSkill): Promise<void>;
-  get(id: string): Promise<CandidateSkill>;
-  list(): Promise<CandidateSkill[]>;
-  updateStatus(id: string, status: CandidateStatus, now?: string): Promise<CandidateSkill>;
-}
-/** 硬门禁：仅 published 可转换为 Catalog 条目，否则 APPROVAL_REQUIRED */
-declare function candidateToCatalogEntry(candidate: CandidateSkill): SkillCatalogEntry;
-//#endregion
-//#region src/approval/policies.d.ts
-interface ApprovalDecision {
-  needsHuman: boolean;
-  reason: string;
-}
-interface ApprovalPolicy {
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-/** 默认策略：任何候选都必须人工审批 */
-declare class AlwaysHumanApprovalPolicy implements ApprovalPolicy {
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
-declare class CompositeApprovalPolicy implements ApprovalPolicy {
-  #private;
-  constructor(rules: Array<(candidate: CandidateSkill) => ApprovalDecision | undefined>, fallback?: ApprovalPolicy);
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-//#endregion
-//#region src/versioning/skillVersionStore.d.ts
-/** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断）。
- *  保留策略：maxArchivesPerSkill（默认 5）超出时清理最旧版本（json + zip 归档一并删除）。 */
-declare class SkillVersionStore {
-  #private;
-  constructor(deps: {
-    root: string;
-    fs: FileSystemProvider;
-    now?: () => string;
-    createId?: () => string;
-    audit?: AuditLog;
-    /** 每技能保留的版本/归档上限（默认 5，超出清理最旧） */
-    maxArchivesPerSkill?: number;
-  });
-  add(skillName: string, input: {
-    reason: string;
-    manifest: SkillManifest;
-    parentVersionId?: string;
-    archive?: Uint8Array;
-  }): Promise<SkillVersion>;
-  /** 读取版本归档字节（applyRollback 用；未捕获归档的旧版本 → GOVERNANCE_FAILED） */
-  readArchive(skillName: string, versionId: string): Promise<Uint8Array>;
-  list(skillName: string): Promise<SkillVersion[]>;
-  get(skillName: string, versionId: string): Promise<SkillVersion>;
-  /** 回滚：基于旧 manifest 追加新版本 + skill.rolled_back 审计 */
-  rollback(skillName: string, targetVersionId: string, input: {
-    actor?: string;
-    reason?: string;
-  }): Promise<SkillVersion>;
-}
-//#endregion
-export { ProcessSandboxExecutor as C, SkillManager as D, SandboxedScriptExecutor as E, exportArchive as O, OxcSchemaInferer as S, SandboxOptions as T, CliUiBridge as _, AuditLog as a, NodeFS as b, CandidateSkill as c, CandidateStore as d, CompositeApprovalPolicy as f, candidateToCatalogEntry as g, SkillVersionStore as h, AuditEvent as i, readArchiveManifest as k, CandidateSource as l, SkillVersion as m, ApprovalDecision as n, CandidateFile as o, SkillState as p, ApprovalPolicy as r, CandidateRisk as s, AlwaysHumanApprovalPolicy as t, CandidateStatus as u, FileArtifactStore as v, ProcessSandboxOptions as w, NodeScriptExecutor as x, FileMemoryStore as y };