@webskill/sdk 0.21.0 → 0.23.0

package/dist/node.d.ts

@@ -1,6 +1,6 @@
-import { At as UnsignedPolicy, Dt as TrustedKeyStore, H as FileStat, Mt as VerifyResult, N as ArchiveLimits, S as UiBridge, U as FileSystemProvider, W as FileWriteStream, _t as SkillManagerPort, b as RenderResultRequest, c as InteractionResponse, et as SKILLS_LOCKFILE, mt as SkillInstallSource, ot as SignatureAuditSink, q as JsonSchema, s as InteractionRequest, tt as SKILL_MANIFEST_FILE, vt as SkillManifest, wt as SkillsLockfile } from "./types-BvTV_05--BW8zDuEk.js";
-import { H as FsMemoryStore, Jt as SchemaInferer, Sn as ToolDefinition, Tn as ToolResult, V as FsArtifactStore, Xt as ScriptExecutor, Yt as ScriptExecutionContext, ar as WebSkillRuntime, ct as NetworkPolicy, hr as createScriptContext, m as ApprovalScope, or as WebSkillRuntimeDeps, y as BridgeCapabilities } from "./index-DHopiH_m.js";
-import { a as AuditLog, b as SkillVersionStore, d as CandidateSkill, m as CandidateStore, r as ApprovalPolicy } from "./skillVersionStore-B24Jjjry-BkOk9wI_.js";
+import { G as FileStat, It as VerifyResult, K as FileSystemProvider, N as ArchiveLimits, Ot as SkillsLockfile, Pt as UnsignedPolicy, S as UiBridge, St as SkillManifest, X as JsonSchema, at as SKILL_MANIFEST_FILE, b as RenderResultRequest, c as InteractionResponse, it as SKILLS_LOCKFILE, jt as TrustedKeyStore, q as FileWriteStream, s as InteractionRequest, ut as SignatureAuditSink, vt as SkillInstallSource, xt as SkillManagerPort } from "./types-CpDRZ0rA-BiZBXGm4.js";
+import { $t as SchemaInferer, H as FsArtifactStore, Pn as ToolResult, Tr as createScriptContext, U as FsMemoryStore, b as BridgeCapabilities, en as ScriptExecutionContext, gr as WebSkillRuntimeDeps, hr as WebSkillRuntime, jn as ToolDefinition, m as ApprovalScope, tn as ScriptExecutor, ut as NetworkPolicy } from "./index-7No55dRb.js";
+import { a as AuditLog, f as CandidateSkill, h as CandidateStore, r as ApprovalPolicy, x as SkillVersionStore } from "./skillVersionStore-S4_HJ_Fl-Cvy9LqVu.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts

package/dist/node.js

@@ -1,9 +1,9 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
-import { A as SKILL_MANIFEST_FILE, D as verifySkillSignature, M as buildManifest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, b as parseSkillMarkdown, c as unzipWithLimits, f as SKILL_PACK_FILE, k as SKILLS_LOCKFILE, m as parseSkillPackManifest, o as readResponseWithLimit, p as exportSkills, s as resolveArchiveLimits, t as validateSkills, w as readSkillSignature, y as isValidSkillName } from "./skill-CAJMsLod.js";
-import { a as atomicWriteText, o as isAtomicTempPath, r as resolveInsideRoot, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
+import { A as SKILL_MANIFEST_FILE, D as verifySkillSignature, M as buildManifest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, b as parseSkillMarkdown, c as unzipWithLimits, f as SKILL_PACK_FILE, k as SKILLS_LOCKFILE, m as parseSkillPackManifest, o as readResponseWithLimit, p as exportSkills, s as resolveArchiveLimits, t as validateSkills, w as readSkillSignature, y as isValidSkillName } from "./skill-WSUDp6A1.js";
+import { a as atomicWriteBinary, o as atomicWriteText, r as resolveInsideRoot, s as isAtomicTempPath, t as assertSafePathSegment } from "./pathSecurity-CirkQwWP.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
-import { K as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-DwN2o2QG.js";
-import { u as SPREADSHEET_MIME_TYPE } from "./linkedDocument-C0gj1sMq.js";
+import { K as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-7CuZS3Z4.js";
+import { f as SPREADSHEET_MIME_TYPE } from "./linkedDocument-CZZOl9cO.js";
 import { n as normalizeToolContent } from "./external-_ZRQe-V9.js";
 import { i as probeLlmCapabilities } from "./env-Bj1MI2Ww.js";
 import { t as AUDIT_EVENT_TYPES } from "./eventTypes-DcTQXSV1.js";
@@ -2469,7 +2469,14 @@ var ApprovalWorkflow = class {
 		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-candidate-"))).split(path.sep).join("/");
 		try {
 			const skillDir = `${stagingRoot}/${candidate.name}`;
-			for (const file of candidate.files) await atomicWriteText(this.#fs, resolveInsideRoot(skillDir, file.path), file.content);
+			for (const file of candidate.files) {
+				const target = resolveInsideRoot(skillDir, file.path);
+				if (file.binary === void 0) {
+					await atomicWriteText(this.#fs, target, file.content);
+					continue;
+				}
+				await atomicWriteBinary(this.#fs, target, await this.#store.readCandidateBinary(candidate.id, file.binary.file));
+			}
 			const report = await validateSkills(this.#fs, [stagingRoot]);
 			if (!report.ok) {
 				const errors = report.issues.filter((i) => i.severity === "error");

package/dist/{openUiLibrary-b0i7F_oZ.js → openUiLibrary-B7j3rLrm.js}

@@ -1,4 +1,4 @@
-import { g as uiCatalog } from "./openUiSpecLang-CLXJEeRU.js";
+import { g as uiCatalog } from "./openUiSpecLang-BSYYnjay.js";
 import { t as CatalogNode } from "./ui-react.js";
 import { Renderer, createLibrary, defineComponent } from "./dist-CTsxblSD.js";
 import { z } from "zod";

package/dist/{openUiSpecLang-CLXJEeRU.js → openUiSpecLang-BSYYnjay.js}

@@ -1286,7 +1286,7 @@ const uiCatalog = defineUiCatalog({
 		{
 			name: "Image",
 			group: "content",
-			description: "An image the host already serves. `src` must be same-origin or a data URL — remote URLs are rejected by policy, so never link to an image you found on the web. `alt` is required: it is what a screen reader and a later model read instead of the pixels.",
+			description: "An image the host already serves. `src` must be same-origin or a data URL; a reference from an image tool (`artifact:…`) is not a path. To show an image you found on the web, write markdown in your reply instead of using this component. `alt` is required: a screen reader and a later model read it instead of the pixels, so describe only what you have actually seen.",
 			props: z.object({
 				src: imageSrc,
 				alt: z.string(),

package/dist/ordinal-CxA6GHQS.js

@@ -0,0 +1,84 @@
+import { t as initRange } from "./init-CMOIWdg-.js";
+
+//#region ../../node_modules/.pnpm/internmap@2.0.3/node_modules/internmap/src/index.js
+var InternMap = class extends Map {
+	constructor(entries, key = keyof) {
+		super();
+		Object.defineProperties(this, {
+			_intern: { value: /* @__PURE__ */ new Map() },
+			_key: { value: key }
+		});
+		if (entries != null) for (const [key, value] of entries) this.set(key, value);
+	}
+	get(key) {
+		return super.get(intern_get(this, key));
+	}
+	has(key) {
+		return super.has(intern_get(this, key));
+	}
+	set(key, value) {
+		return super.set(intern_set(this, key), value);
+	}
+	delete(key) {
+		return super.delete(intern_delete(this, key));
+	}
+};
+function intern_get({ _intern, _key }, value) {
+	const key = _key(value);
+	return _intern.has(key) ? _intern.get(key) : value;
+}
+function intern_set({ _intern, _key }, value) {
+	const key = _key(value);
+	if (_intern.has(key)) return _intern.get(key);
+	_intern.set(key, value);
+	return value;
+}
+function intern_delete({ _intern, _key }, value) {
+	const key = _key(value);
+	if (_intern.has(key)) {
+		value = _intern.get(key);
+		_intern.delete(key);
+	}
+	return value;
+}
+function keyof(value) {
+	return value !== null && typeof value === "object" ? value.valueOf() : value;
+}
+
+//#endregion
+//#region ../../node_modules/.pnpm/d3-scale@4.0.2/node_modules/d3-scale/src/ordinal.js
+const implicit = Symbol("implicit");
+function ordinal() {
+	var index = new InternMap(), domain = [], range = [], unknown = implicit;
+	function scale(d) {
+		let i = index.get(d);
+		if (i === void 0) {
+			if (unknown !== implicit) return unknown;
+			index.set(d, i = domain.push(d) - 1);
+		}
+		return range[i % range.length];
+	}
+	scale.domain = function(_) {
+		if (!arguments.length) return domain.slice();
+		domain = [], index = new InternMap();
+		for (const value of _) {
+			if (index.has(value)) continue;
+			index.set(value, domain.push(value) - 1);
+		}
+		return scale;
+	};
+	scale.range = function(_) {
+		return arguments.length ? (range = Array.from(_), scale) : range.slice();
+	};
+	scale.unknown = function(_) {
+		return arguments.length ? (unknown = _, scale) : unknown;
+	};
+	scale.copy = function() {
+		return ordinal(domain, range).unknown(unknown);
+	};
+	initRange.apply(scale, arguments);
+	return scale;
+}
+
+//#endregion
+export { ordinal as t };

package/dist/packet-AYTQ26CC-BOm08cxl.js

@@ -0,0 +1,4 @@
+import "./chunk-FOHPRMQF-Dkbp819z.js";
+import { S as createPacketServices, x as PacketModule } from "./mermaid-parser.core-pYR5siSx.js";
+
+export { createPacketServices };

package/dist/path-C27Z2Bjv.js

@@ -0,0 +1,106 @@
+//#region ../../node_modules/.pnpm/d3-path@3.1.0/node_modules/d3-path/src/path.js
+const pi = Math.PI;
+const tau = 2 * pi;
+const epsilon = 1e-6;
+const tauEpsilon = tau - epsilon;
+function append(strings) {
+	this._ += strings[0];
+	for (let i = 1, n = strings.length; i < n; ++i) this._ += arguments[i] + strings[i];
+}
+function appendRound(digits) {
+	let d = Math.floor(digits);
+	if (!(d >= 0)) throw new Error(`invalid digits: ${digits}`);
+	if (d > 15) return append;
+	const k = 10 ** d;
+	return function(strings) {
+		this._ += strings[0];
+		for (let i = 1, n = strings.length; i < n; ++i) this._ += Math.round(arguments[i] * k) / k + strings[i];
+	};
+}
+var Path = class {
+	constructor(digits) {
+		this._x0 = this._y0 = this._x1 = this._y1 = null;
+		this._ = "";
+		this._append = digits == null ? append : appendRound(digits);
+	}
+	moveTo(x, y) {
+		this._append`M${this._x0 = this._x1 = +x},${this._y0 = this._y1 = +y}`;
+	}
+	closePath() {
+		if (this._x1 !== null) {
+			this._x1 = this._x0, this._y1 = this._y0;
+			this._append`Z`;
+		}
+	}
+	lineTo(x, y) {
+		this._append`L${this._x1 = +x},${this._y1 = +y}`;
+	}
+	quadraticCurveTo(x1, y1, x, y) {
+		this._append`Q${+x1},${+y1},${this._x1 = +x},${this._y1 = +y}`;
+	}
+	bezierCurveTo(x1, y1, x2, y2, x, y) {
+		this._append`C${+x1},${+y1},${+x2},${+y2},${this._x1 = +x},${this._y1 = +y}`;
+	}
+	arcTo(x1, y1, x2, y2, r) {
+		x1 = +x1, y1 = +y1, x2 = +x2, y2 = +y2, r = +r;
+		if (r < 0) throw new Error(`negative radius: ${r}`);
+		let x0 = this._x1, y0 = this._y1, x21 = x2 - x1, y21 = y2 - y1, x01 = x0 - x1, y01 = y0 - y1, l01_2 = x01 * x01 + y01 * y01;
+		if (this._x1 === null) this._append`M${this._x1 = x1},${this._y1 = y1}`;
+		else if (!(l01_2 > epsilon));
+		else if (!(Math.abs(y01 * x21 - y21 * x01) > epsilon) || !r) this._append`L${this._x1 = x1},${this._y1 = y1}`;
+		else {
+			let x20 = x2 - x0, y20 = y2 - y0, l21_2 = x21 * x21 + y21 * y21, l20_2 = x20 * x20 + y20 * y20, l21 = Math.sqrt(l21_2), l01 = Math.sqrt(l01_2), l = r * Math.tan((pi - Math.acos((l21_2 + l01_2 - l20_2) / (2 * l21 * l01))) / 2), t01 = l / l01, t21 = l / l21;
+			if (Math.abs(t01 - 1) > epsilon) this._append`L${x1 + t01 * x01},${y1 + t01 * y01}`;
+			this._append`A${r},${r},0,0,${+(y01 * x20 > x01 * y20)},${this._x1 = x1 + t21 * x21},${this._y1 = y1 + t21 * y21}`;
+		}
+	}
+	arc(x, y, r, a0, a1, ccw) {
+		x = +x, y = +y, r = +r, ccw = !!ccw;
+		if (r < 0) throw new Error(`negative radius: ${r}`);
+		let dx = r * Math.cos(a0), dy = r * Math.sin(a0), x0 = x + dx, y0 = y + dy, cw = 1 ^ ccw, da = ccw ? a0 - a1 : a1 - a0;
+		if (this._x1 === null) this._append`M${x0},${y0}`;
+		else if (Math.abs(this._x1 - x0) > epsilon || Math.abs(this._y1 - y0) > epsilon) this._append`L${x0},${y0}`;
+		if (!r) return;
+		if (da < 0) da = da % tau + tau;
+		if (da > tauEpsilon) this._append`A${r},${r},0,1,${cw},${x - dx},${y - dy}A${r},${r},0,1,${cw},${this._x1 = x0},${this._y1 = y0}`;
+		else if (da > epsilon) this._append`A${r},${r},0,${+(da >= pi)},${cw},${this._x1 = x + r * Math.cos(a1)},${this._y1 = y + r * Math.sin(a1)}`;
+	}
+	rect(x, y, w, h) {
+		this._append`M${this._x0 = this._x1 = +x},${this._y0 = this._y1 = +y}h${w = +w}v${+h}h${-w}Z`;
+	}
+	toString() {
+		return this._;
+	}
+};
+function path() {
+	return new Path();
+}
+path.prototype = Path.prototype;
+
+//#endregion
+//#region ../../node_modules/.pnpm/d3-shape@3.2.0/node_modules/d3-shape/src/constant.js
+function constant_default(x) {
+	return function constant() {
+		return x;
+	};
+}
+
+//#endregion
+//#region ../../node_modules/.pnpm/d3-shape@3.2.0/node_modules/d3-shape/src/path.js
+function withPath(shape) {
+	let digits = 3;
+	shape.digits = function(_) {
+		if (!arguments.length) return digits;
+		if (_ == null) digits = null;
+		else {
+			const d = Math.floor(_);
+			if (!(d >= 0)) throw new RangeError(`invalid digits: ${_}`);
+			digits = d;
+		}
+		return shape;
+	};
+	return () => new Path(digits);
+}
+
+//#endregion
+export { constant_default as n, withPath as t };

package/dist/{pathSecurity-B1owvJAF.js → pathSecurity-CirkQwWP.js}

@@ -20,6 +20,17 @@ async function atomicWriteText(fs, path, content) {
 	await fs.writeText(tmp, content);
 	await fs.rename(tmp, path);
 }
+/**
+* 原子写二进制：与 `atomicWriteText` 逐字对称，只换写入方法（0.23.0 分册 20）。
+*
+* 临时名必须沿用同一条 `ATOMIC_TMP_SUFFIX_PATTERN` 形状——打包与列举侧靠那条正则
+* 排除中断残留，另起一套命名会让残留的临时文件被打进技能包。
+*/
+async function atomicWriteBinary(fs, path, content) {
+	const tmp = `${path}.tmp-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
+	await fs.writeBinary(tmp, content);
+	await fs.rename(tmp, path);
+}
 
 //#endregion
 //#region ../core/src/fs/pathSecurity.ts
@@ -62,4 +73,4 @@ function resolveInsideRoot(root, relativePath) {
 }
 
 //#endregion
-export { atomicWriteText as a, ATOMIC_TMP_SUFFIX_PATTERN as i, normalizePath as n, isAtomicTempPath as o, resolveInsideRoot as r, assertSafePathSegment as t };
+export { atomicWriteBinary as a, ATOMIC_TMP_SUFFIX_PATTERN as i, normalizePath as n, atomicWriteText as o, resolveInsideRoot as r, isAtomicTempPath as s, assertSafePathSegment as t };

package/dist/pegDiagram-GJSIUBJH-BLGJOewQ.js

@@ -0,0 +1,115 @@
+import { t as MermaidParseError, u as createRailroadPegServices } from "./mermaid-parser.core-pYR5siSx.js";
+import { n as __name } from "./chunk-Y2CYZVJY-U3QOMqrW.js";
+import { m as log } from "./src-NkhI3UMl.js";
+import "./chunk-O7XYJQB3-B6K0KOSL.js";
+import "./chunk-6AEJRKK7-JXK89I-O.js";
+import { n as getStyles, r as renderer, t as db } from "./chunk-GTNCS2PH-CLmh4I2c.js";
+import { t as populateCommonDb } from "./chunk-JWPE2WC7-D1rC79GS.js";
+
+//#region ../../node_modules/.pnpm/mermaid@12.0.0/node_modules/mermaid/dist/chunks/mermaid.core/pegDiagram-GJSIUBJH.mjs
+var langiumParser = createRailroadPegServices().RailroadPeg.parser.LangiumParser;
+var transformOrderedChoice = /* @__PURE__ */ __name((choice) => {
+	const alternatives = choice.alternatives.map(transformSequence);
+	if (alternatives.length === 1) return alternatives[0];
+	return {
+		type: "choice",
+		alternatives
+	};
+}, "transformOrderedChoice");
+var transformSequence = /* @__PURE__ */ __name((sequence) => {
+	const elements = sequence.elements.map(transformPrefix);
+	if (elements.length === 1) return elements[0];
+	return {
+		type: "sequence",
+		elements
+	};
+}, "transformSequence");
+var transformPrefix = /* @__PURE__ */ __name((prefix) => {
+	const inner = transformSuffix(prefix.suffix);
+	if (!prefix.operator) return inner;
+	return {
+		type: "special",
+		text: prefix.operator === "&" ? `&${nodeToLabel(inner)}` : `!${nodeToLabel(inner)}`
+	};
+}, "transformPrefix");
+var nodeToLabel = /* @__PURE__ */ __name((node) => {
+	switch (node.type) {
+		case "terminal": return `"${node.value}"`;
+		case "nonterminal": return node.name;
+		case "special": return node.text;
+		default: return "(...)";
+	}
+}, "nodeToLabel");
+var transformSuffix = /* @__PURE__ */ __name((suffix) => {
+	const inner = transformPrimary(suffix.primary);
+	if (!suffix.operator) return inner;
+	switch (suffix.operator) {
+		case "?": return {
+			type: "optional",
+			element: inner
+		};
+		case "*": return {
+			type: "repetition",
+			element: inner,
+			min: 0,
+			max: Infinity
+		};
+		case "+": return {
+			type: "repetition",
+			element: inner,
+			min: 1,
+			max: Infinity
+		};
+		default: throw new Error(`Unsupported PEG suffix operator: ${suffix.operator}`);
+	}
+}, "transformSuffix");
+var transformPrimary = /* @__PURE__ */ __name((primary) => {
+	switch (primary.$type) {
+		case "PegLiteral": return {
+			type: "terminal",
+			value: primary.value
+		};
+		case "PegIdentifier": return {
+			type: "nonterminal",
+			name: primary.name
+		};
+		case "PegGroup": return transformOrderedChoice(primary.element);
+		case "PegAny": return {
+			type: "special",
+			text: primary.dot
+		};
+		default: throw new Error(`Unsupported PEG primary node: ${primary.$type}`);
+	}
+}, "transformPrimary");
+var transformRule = /* @__PURE__ */ __name((rule) => {
+	return {
+		name: rule.name,
+		definition: transformOrderedChoice(rule.definition)
+	};
+}, "transformRule");
+var populateDb = /* @__PURE__ */ __name((ast) => {
+	populateCommonDb(ast, db);
+	if (ast.title) db.setTitle(ast.title);
+	ast.rules.map((rule) => db.addRule(transformRule(rule)));
+}, "populateDb");
+var diagram = {
+	parser: {
+		parse: /* @__PURE__ */ __name((input) => {
+			db.clear();
+			log.debug("[PEG Parser] Starting Langium parse");
+			const result = langiumParser.parse(input);
+			if (result.lexerErrors.length > 0 || result.parserErrors.length > 0) throw new MermaidParseError(result);
+			const ast = result.value;
+			log.debug("[PEG Parser] Parsed rules:", ast.rules.length);
+			populateDb(ast);
+			log.debug("[PEG Parser] Parse complete");
+		}, "parse"),
+		parser: { yy: db }
+	},
+	db,
+	renderer,
+	styles: getStyles
+};
+
+//#endregion
+export { diagram };

package/dist/pie-WAS4IAKB-Dvg7glpk.js

@@ -0,0 +1,4 @@
+import "./chunk-FOHPRMQF-Dkbp819z.js";
+import { b as createPieServices, y as PieModule } from "./mermaid-parser.core-pYR5siSx.js";
+
+export { createPieServices };