@webskill/sdk 0.21.0 → 0.23.0

package/dist/sizeCapture-INFHLROL-D8PWxdOn.js

@@ -0,0 +1,56 @@
+import { n as __name } from "./chunk-Y2CYZVJY-U3QOMqrW.js";
+
+//#region ../../node_modules/.pnpm/mermaid@12.0.0/node_modules/mermaid/dist/chunks/mermaid.core/sizeCapture-INFHLROL.mjs
+var DDLT_SIZE_CAPTURE_VERSION = 1;
+function getCaptureGlobal() {
+	if (typeof globalThis === "undefined") return;
+	return globalThis;
+}
+__name(getCaptureGlobal, "getCaptureGlobal");
+function shouldCaptureSizes() {
+	return Boolean(getCaptureGlobal()?.mermaidCaptureSizes);
+}
+__name(shouldCaptureSizes, "shouldCaptureSizes");
+function capturedFromLocation() {
+	if (typeof location === "undefined") return "browser-dev";
+	return `${location.pathname}${location.search}`;
+}
+__name(capturedFromLocation, "capturedFromLocation");
+function emitCapturedSizes(captured, element) {
+	const g = getCaptureGlobal();
+	if (!g) return;
+	const domNode = element.node();
+	const svgId = ((domNode && "ownerSVGElement" in domNode ? domNode.ownerSVGElement : null) ?? domNode)?.id ?? "(unknown)";
+	g.mermaidCapturedSizes ??= [];
+	const entry = {
+		svgId,
+		sizes: captured
+	};
+	g.mermaidCapturedSizes.push(entry);
+	g.mermaidLastCapturedSizes = entry;
+}
+__name(emitCapturedSizes, "emitCapturedSizes");
+function captureNodeSizes(element, data4Layout) {
+	const nodes = [];
+	for (const node of data4Layout.nodes) {
+		if (node.isGroup) continue;
+		nodes.push({
+			id: node.id,
+			width: node.width ?? 0,
+			height: node.height ?? 0
+		});
+	}
+	if (nodes.length === 0) return;
+	emitCapturedSizes({
+		metadata: {
+			captureVersion: DDLT_SIZE_CAPTURE_VERSION,
+			capturedAt: (/* @__PURE__ */ new Date()).toISOString(),
+			capturedFrom: capturedFromLocation()
+		},
+		nodes
+	}, element);
+}
+__name(captureNodeSizes, "captureNodeSizes");
+
+//#endregion
+export { captureNodeSizes };

package/dist/{skill-CAJMsLod.js → skill-WSUDp6A1.js}

@@ -1,5 +1,5 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
-import { a as atomicWriteText, o as isAtomicTempPath, r as resolveInsideRoot } from "./pathSecurity-B1owvJAF.js";
+import { o as atomicWriteText, r as resolveInsideRoot, s as isAtomicTempPath } from "./pathSecurity-CirkQwWP.js";
 import { parse } from "yaml";
 import { Unzip, UnzipInflate, zipSync } from "fflate";
 

package/dist/{skillVersionStore-B24Jjjry-BkOk9wI_.d.ts → skillVersionStore-S4_HJ_Fl-Cvy9LqVu.d.ts}

@@ -1,5 +1,5 @@
-import { U as FileSystemProvider, X as Page, Z as PageQuery, dt as SkillCatalogEntry, vt as SkillManifest } from "./types-BvTV_05--BW8zDuEk.js";
-//#region ../governance/dist/skillVersionStore-B24Jjjry.d.ts
+import { K as FileSystemProvider, St as SkillManifest, et as Page, ht as SkillCatalogEntry, tt as PageQuery } from "./types-CpDRZ0rA-BiZBXGm4.js";
+//#region ../governance/dist/skillVersionStore-S4_HJ_Fl.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
 /** `generated` 是 0.5.0 的技能自动生成来源（需求 12 号 AC-9.1） */
@@ -8,7 +8,29 @@ type CandidateRisk = 'low' | 'medium' | 'high';
 interface CandidateFile {
   path: string;
   kind: 'skill-md' | 'script' | 'reference' | 'asset';
+  /**
+   * 文件正文。二进制条目为空串——字节存在候选自己的旁路里，见 `binary`。
+   * 保持必填 `string`：它的消费方遍布审核 UI、发布链路与测试，
+   * 改成联合类型会让每一处都要分支，而其中大多数只关心文本。
+   */
   content: string;
+  /** 在场即本条目是二进制，正文在旁路文件里（0.23.0 分册 20） */
+  binary?: CandidateBinaryRef;
+}
+/**
+ * 候选二进制旁路里的一份字节（0.23.0 分册 20）。
+ *
+ * 字节**不内嵌进候选 JSON**：`CandidateStore.list()` 会把目录里每一个 JSON 全文读出来解析，
+ * 内嵌等于审批列表每翻一页都要把所有候选的二进制读进内存再做一次 base64 往返。
+ */
+interface CandidateBinaryRef {
+  /** 候选二进制目录（`<id>.files/`）下的文件名，不是路径 */
+  file: string;
+  size: number;
+  /** sha-256，十六进制小写；AC-20.1 的「逐字节相同」靠它判 */
+  sha256: string;
+  /** 来源附件的原始文件名，供审核者辨认（FR-20.10） */
+  sourceName: string;
 }
 interface CandidateSkill {
   id: string;
@@ -97,7 +119,16 @@ declare class CandidateStore {
     /** 治理根下该技能是否仍装着；不注入则 published 一律拒删（见 `remove`） */
     isSkillInstalled?: (name: string) => Promise<boolean>;
   });
-  save(candidate: CandidateSkill): Promise<void>;
+  /**
+   * 存候选。`binaries` 的键是 `CandidateFile.binary.file`，缺省即本候选全是文本。
+   *
+   * 落盘顺序是**先字节、后 JSON**（0.23.0 分册 20 §3.2）：反过来的话，
+   * 崩溃会留下一条指向不存在字节的元数据，而那种候选要到审批安装那一步才暴露——
+   * 正是 FR-20.6 要避免的那类「延迟到审批才失败」。
+   */
+  save(candidate: CandidateSkill, binaries?: ReadonlyMap<string, Uint8Array>): Promise<void>;
+  /** 读回候选旁路里的一份字节（安装时按原样写进技能目录，0.23.0 分册 20 FR-20.8） */
+  readCandidateBinary(id: string, file: string): Promise<Uint8Array>;
   get(id: string): Promise<CandidateSkill>;
   /**
    * 候选（= 审批队列）分页。`status` 是端口参数而不是上层 `.filter()`：
@@ -182,4 +213,4 @@ declare class SkillVersionStore {
   }): Promise<SkillVersion>;
 }
 //#endregion
-export { SkillState as _, AuditLog as a, SkillVersionStore as b, CandidateFile as c, CandidateSkill as d, CandidateSource as f, SKILL_VERSION_PAGE_SIZE as g, CompositeApprovalPolicy as h, AuditEvent as i, CandidatePage as l, CandidateStore as m, ApprovalDecision as n, AuditQueryFilter as o, CandidateStatus as p, ApprovalPolicy as r, CANDIDATE_PAGE_SIZE as s, AlwaysHumanApprovalPolicy as t, CandidateRisk as u, SkillVersion as v, candidateToCatalogEntry as x, SkillVersionPage as y };
+export { candidateToCatalogEntry as S, SKILL_VERSION_PAGE_SIZE as _, AuditLog as a, SkillVersionPage as b, CandidateBinaryRef as c, CandidateRisk as d, CandidateSkill as f, CompositeApprovalPolicy as g, CandidateStore as h, AuditEvent as i, CandidateFile as l, CandidateStatus as m, ApprovalDecision as n, AuditQueryFilter as o, CandidateSource as p, ApprovalPolicy as r, CANDIDATE_PAGE_SIZE as s, AlwaysHumanApprovalPolicy as t, CandidatePage as u, SkillState as v, SkillVersionStore as x, SkillVersion as y };