@xdxer/dingtalk-agent 0.1.1 → 0.1.2

package/dist/src/skills.js

@@ -0,0 +1,200 @@
+// 把本次 Run 要遵守的 Agent Skill 冻结进沙箱（TypeScript source）。
+// 运行中的 Run 永不热加载工作区后来修改的规则；重放时只认快照与 hash。
+import { copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, writeFileSync, } from 'node:fs';
+import { homedir } from 'node:os';
+import { basename, dirname, join, relative, resolve } from 'node:path';
+import { digest, stableStringify } from './events.js';
+import { resolvePackageRoot } from './package-root.js';
+const PACKAGE_ROOT = resolvePackageRoot(import.meta.url);
+const INSTALL_MARKER = '.dingtalk-agent-install.json';
+export function snapshotSkills(root, runPath, sources, sessionPath) {
+    if (!Array.isArray(sources) || !sources.length || sources.some((x) => typeof x !== 'string')) {
+        throw new Error('Workspace skills 必须是非空 string[]');
+    }
+    const rootReal = realpathSync(resolve(root));
+    const snapshotRoot = join(sessionPath, 'skills');
+    const existingManifest = join(snapshotRoot, 'manifest.json');
+    if (existsSync(existingManifest)) {
+        const manifest = verifySnapshotRoot(snapshotRoot);
+        copySessionSnapshot(snapshotRoot, runPath);
+        return manifest;
+    }
+    rmSync(snapshotRoot, { recursive: true, force: true });
+    mkdirSync(snapshotRoot, { recursive: true });
+    const entries = [];
+    const names = new Set();
+    for (const sourceSpec of sources) {
+        const resolved = resolveSkillSource(rootReal, sourceSpec);
+        const source = resolved.path;
+        const skillFile = join(source, 'SKILL.md');
+        if (!existsSync(skillFile))
+            throw new Error(`Agent Skill 缺少 SKILL.md: ${sourceSpec}`);
+        const metadata = parseFrontmatter(readFileSync(skillFile, 'utf8'), sourceSpec);
+        const name = metadata.name || basename(source);
+        if (names.has(name))
+            throw new Error(`Workspace skills 出现重复 Skill name: ${name}`);
+        names.add(name);
+        const files = walk(source);
+        const contentIndex = files.map((path) => {
+            const rel = relative(source, path).split('\\').join('/');
+            return { path: rel, hash: digest(readFileSync(path).toString('base64')) };
+        });
+        const hash = digest(stableStringify(contentIndex));
+        const destination = join(snapshotRoot, name);
+        for (const path of files) {
+            const rel = relative(source, path);
+            const out = join(destination, rel);
+            mkdirSync(dirname(out), { recursive: true });
+            copyFileSync(path, out);
+        }
+        entries.push({
+            name,
+            description: metadata.description || '',
+            version: metadata.version || '',
+            sourcePath: resolved.label,
+            snapshotPath: `context/skills/${name}/SKILL.md`,
+            hash,
+            files: contentIndex.length,
+        });
+    }
+    const unsigned = {
+        $schema: 'dingtalk-agent/skill-snapshot-manifest@1',
+        entries,
+    };
+    const manifest = {
+        ...unsigned,
+        hash: digest(stableStringify(unsigned)),
+    };
+    writeFileSync(join(snapshotRoot, 'manifest.json'), JSON.stringify(manifest, null, 2) + '\n');
+    copySessionSnapshot(snapshotRoot, runPath);
+    return manifest;
+}
+export function verifySkillSnapshot(runPath, expectedManifestHash) {
+    const snapshotRoot = join(runPath, 'context', 'skills');
+    return verifySnapshotRoot(snapshotRoot, expectedManifestHash);
+}
+function copySessionSnapshot(snapshotRoot, runPath) {
+    const runSnapshotRoot = join(runPath, 'context', 'skills');
+    rmSync(runSnapshotRoot, { recursive: true, force: true });
+    cpSync(snapshotRoot, runSnapshotRoot, { recursive: true });
+}
+function verifySnapshotRoot(snapshotRoot, expectedManifestHash = '') {
+    const manifestPath = join(snapshotRoot, 'manifest.json');
+    if (!existsSync(manifestPath))
+        throw new Error('Skill snapshot 缺少 manifest.json');
+    const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
+    const { hash, ...unsigned } = manifest;
+    const actualManifestHash = digest(stableStringify(unsigned));
+    if (!hash || hash !== actualManifestHash ||
+        (expectedManifestHash && hash !== expectedManifestHash)) {
+        throw new Error('Skill snapshot manifest hash 不一致');
+    }
+    if (!Array.isArray(manifest.entries) || !manifest.entries.length) {
+        throw new Error('Skill snapshot manifest 没有 entries');
+    }
+    for (const entry of manifest.entries) {
+        const skillRoot = resolve(snapshotRoot, entry.name);
+        assertInside(realpathSync(snapshotRoot), realpathSync(skillRoot), `Skill snapshot ${entry.name}`);
+        const files = walk(skillRoot);
+        const contentIndex = files.map((path) => ({
+            path: relative(skillRoot, path).split('\\').join('/'),
+            hash: digest(readFileSync(path).toString('base64')),
+        }));
+        if (contentIndex.length !== entry.files || digest(stableStringify(contentIndex)) !== entry.hash) {
+            throw new Error(`Skill snapshot 内容漂移: ${entry.name}`);
+        }
+    }
+    return manifest;
+}
+function walk(dir) {
+    const out = [];
+    for (const name of readdirSync(dir).sort()) {
+        // 安装管理元数据不是 Skill 内容，不进入 Session 快照。
+        if (name === INSTALL_MARKER)
+            continue;
+        const path = join(dir, name);
+        const stat = lstatSync(path);
+        if (stat.isSymbolicLink())
+            throw new Error(`Agent Skill 不允许符号链接: ${path}`);
+        if (stat.isDirectory())
+            out.push(...walk(path));
+        else if (stat.isFile())
+            out.push(path);
+    }
+    return out;
+}
+function parseFrontmatter(text, label) {
+    const match = text.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
+    if (!match)
+        throw new Error(`Agent Skill ${label}/SKILL.md 缺少 YAML frontmatter`);
+    const out = {};
+    for (const line of match[1].split(/\r?\n/)) {
+        const m = line.match(/^([A-Za-z][A-Za-z0-9_-]*):\s*(.*)$/);
+        if (!m)
+            continue;
+        out[m[1]] = m[2].trim().replace(/^(['"])(.*)\1$/, '$2');
+    }
+    if (!out.name || !out.description) {
+        throw new Error(`Agent Skill ${label}/SKILL.md frontmatter 必须含 name 和 description`);
+    }
+    const nestedVersion = match[1].match(/^metadata:\s*\r?\n(?:[ \t]+.*\r?\n)*?[ \t]+version:\s*['"]?([^'"\r\n]+)['"]?\s*$/m);
+    if (nestedVersion?.[1])
+        out.version = nestedVersion[1].trim();
+    return out;
+}
+function resolveSkillSource(rootReal, sourceSpec) {
+    const spec = String(sourceSpec || '').trim();
+    if (!spec)
+        throw new Error('Workspace Skill name 不能为空');
+    // 显式路径只允许当前 Workspace 内，保留旧 workspace@1 兼容。
+    if (spec.includes('/') || spec.includes('\\') || spec.startsWith('.')) {
+        const candidate = resolve(rootReal, spec);
+        if (!existsSync(candidate) || !lstatSync(candidate).isDirectory()) {
+            throw new Error(`Agent Skill 不存在或不是目录: ${sourceSpec}`);
+        }
+        const actual = realpathSync(candidate);
+        assertInside(rootReal, actual, `Agent Skill ${sourceSpec}`);
+        return { path: actual, label: spec };
+    }
+    // bare name 的优先级：Workspace override → canonical global → client exposure
+    // → npm 内置。Session 创建后仍会冻结，运行中不会热切换。
+    const candidates = [
+        [`workspace:${spec}`, join(rootReal, 'skills', spec)],
+        [`global:${spec}`, join(homedir(), '.agents', 'skills', spec)],
+        [`claude:${spec}`, join(homedir(), '.claude', 'skills', spec)],
+        [`legacy-codex:${spec}`, join(homedir(), '.codex', 'skills', spec)],
+        [`bundled:${spec}`, join(PACKAGE_ROOT, 'skills', spec)],
+    ];
+    for (const [label, candidate] of candidates) {
+        if (!existsSync(candidate) || !lstatSync(candidate).isDirectory())
+            continue;
+        const actual = realpathSync(candidate);
+        if (!isInsideKnownSkillRoot(actual, rootReal))
+            continue;
+        return { path: actual, label };
+    }
+    throw new Error(`找不到 Agent Skill: ${spec}；请运行 dingtalk-agent skill install`);
+}
+function isInsideKnownSkillRoot(path, rootReal) {
+    const roots = [
+        join(rootReal, 'skills'),
+        join(homedir(), '.agents', 'skills'),
+        join(homedir(), '.claude', 'skills'),
+        join(homedir(), '.codex', 'skills'),
+        join(PACKAGE_ROOT, 'skills'),
+    ];
+    return roots.some((root) => {
+        if (!existsSync(root))
+            return false;
+        const actualRoot = realpathSync(root);
+        const rel = relative(actualRoot, path);
+        return rel !== '..' && !rel.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`);
+    });
+}
+function assertInside(root, path, label) {
+    const rel = relative(root, path);
+    if (rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`) || resolve(root, rel) !== path) {
+        throw new Error(`${label} 必须位于当前工作区内`);
+    }
+}
+//# sourceMappingURL=skills.js.map

package/dist/src/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/skills.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,0CAA0C;AAE1C,OAAO,EACL,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EACjF,YAAY,EAAE,MAAM,EAAE,aAAa,GACpC,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACtE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAEtD,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxD,MAAM,cAAc,GAAG,8BAA8B,CAAA;AAkBrD,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,OAAe,EACf,OAAiB,EACjB,WAAmB;IAEnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAC5D,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAA;QACjD,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1C,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACtD,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE5C,MAAM,OAAO,GAAyB,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAE,CAAA;IACvB,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAA;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;QAC1C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAA;QAErF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAA;QAC9E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAA;QACjF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEf,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACxD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAA;QAC3E,CAAC,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAA;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;YAClC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC5C,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACzB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;YACvC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;YAC/B,UAAU,EAAE,QAAQ,CAAC,KAAK;YAC1B,YAAY,EAAE,kBAAkB,IAAI,WAAW;YAC/C,IAAI;YACJ,KAAK,EAAE,YAAY,CAAC,MAAM;SAC3B,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,0CAA0C;QACnD,OAAO;KACR,CAAA;IACD,MAAM,QAAQ,GAAkB;QAC9B,GAAG,QAAQ;QACX,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;KACxC,CAAA;IACD,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IAC5F,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC1C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAO,EAAE,oBAAoB;IAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACvD,OAAO,kBAAkB,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB,EAAE,OAAe;IAChE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IAC1D,MAAM,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB,EAAE,oBAAoB,GAAG,EAAE;IACzE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IACxD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAkB,CAAA;IAChF,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAA;IACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC5D,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,kBAAkB;QACpC,CAAC,oBAAoB,IAAI,IAAI,KAAK,oBAAoB,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACnD,YAAY,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,kBAAkB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACjG,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;QAC7B,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACrD,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;SACpD,CAAC,CAAC,CAAA;QACH,IAAI,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,IAAI,CAAC,GAAG;IACf,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,qCAAqC;QACrC,IAAI,IAAI,KAAK,cAAc;YAAE,SAAQ;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAA;QAC1E,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;aAC1C,IAAI,IAAI,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAI,EAAE,KAAK;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAClE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,+BAA+B,CAAC,CAAA;IAChF,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC1D,IAAI,CAAC,CAAC;YAAE,SAAQ;QAChB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,8CAA8C,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAClC,mFAAmF,CACpF,CAAA;IACD,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,UAAkB;IAI9D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAEvD,4CAA4C;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACtC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,UAAU,EAAE,CAAC,CAAA;QAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACtC,CAAC;IAED,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,UAAU,GAA4B;QAC1C,CAAC,aAAa,IAAI,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC,gBAAgB,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;KACxD,CAAA;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAAE,SAAQ;QAC3E,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACtC,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAE,SAAQ;QACvD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAChC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,mCAAmC,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,QAAgB;IAC5D,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACxB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACnC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC;KAC7B,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACnC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACtC,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAA;IACxC,CAAC;AACH,CAAC","sourcesContent":["// 把本次 Run 要遵守的 Agent Skill 冻结进沙箱（TypeScript source）。\n// 运行中的 Run 永不热加载工作区后来修改的规则；重放时只认快照与 hash。\n\nimport {\n  copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync,\n  realpathSync, rmSync, writeFileSync,\n} from 'node:fs'\nimport { homedir } from 'node:os'\nimport { basename, dirname, join, relative, resolve } from 'node:path'\nimport { digest, stableStringify } from './events.js'\nimport { resolvePackageRoot } from './package-root.js'\n\nconst PACKAGE_ROOT = resolvePackageRoot(import.meta.url)\nconst INSTALL_MARKER = '.dingtalk-agent-install.json'\n\ninterface SkillManifestEntry {\n  name: string\n  description: string\n  version: string\n  sourcePath: string\n  snapshotPath: string\n  hash: string\n  files: number\n}\n\nexport interface SkillManifest {\n  $schema: string\n  entries: SkillManifestEntry[]\n  hash: string\n}\n\nexport function snapshotSkills(\n  root: string,\n  runPath: string,\n  sources: string[],\n  sessionPath: string,\n): SkillManifest {\n  if (!Array.isArray(sources) || !sources.length || sources.some((x) => typeof x !== 'string')) {\n    throw new Error('Workspace skills 必须是非空 string[]')\n  }\n\n  const rootReal = realpathSync(resolve(root))\n  const snapshotRoot = join(sessionPath, 'skills')\n  const existingManifest = join(snapshotRoot, 'manifest.json')\n  if (existsSync(existingManifest)) {\n    const manifest = verifySnapshotRoot(snapshotRoot)\n    copySessionSnapshot(snapshotRoot, runPath)\n    return manifest\n  }\n  rmSync(snapshotRoot, { recursive: true, force: true })\n  mkdirSync(snapshotRoot, { recursive: true })\n\n  const entries: SkillManifestEntry[] = []\n  const names = new Set()\n  for (const sourceSpec of sources) {\n    const resolved = resolveSkillSource(rootReal, sourceSpec)\n    const source = resolved.path\n    const skillFile = join(source, 'SKILL.md')\n    if (!existsSync(skillFile)) throw new Error(`Agent Skill 缺少 SKILL.md: ${sourceSpec}`)\n\n    const metadata = parseFrontmatter(readFileSync(skillFile, 'utf8'), sourceSpec)\n    const name = metadata.name || basename(source)\n    if (names.has(name)) throw new Error(`Workspace skills 出现重复 Skill name: ${name}`)\n    names.add(name)\n\n    const files = walk(source)\n    const contentIndex = files.map((path) => {\n      const rel = relative(source, path).split('\\\\').join('/')\n      return { path: rel, hash: digest(readFileSync(path).toString('base64')) }\n    })\n    const hash = digest(stableStringify(contentIndex))\n    const destination = join(snapshotRoot, name)\n    for (const path of files) {\n      const rel = relative(source, path)\n      const out = join(destination, rel)\n      mkdirSync(dirname(out), { recursive: true })\n      copyFileSync(path, out)\n    }\n    entries.push({\n      name,\n      description: metadata.description || '',\n      version: metadata.version || '',\n      sourcePath: resolved.label,\n      snapshotPath: `context/skills/${name}/SKILL.md`,\n      hash,\n      files: contentIndex.length,\n    })\n  }\n\n  const unsigned = {\n    $schema: 'dingtalk-agent/skill-snapshot-manifest@1',\n    entries,\n  }\n  const manifest: SkillManifest = {\n    ...unsigned,\n    hash: digest(stableStringify(unsigned)),\n  }\n  writeFileSync(join(snapshotRoot, 'manifest.json'), JSON.stringify(manifest, null, 2) + '\\n')\n  copySessionSnapshot(snapshotRoot, runPath)\n  return manifest\n}\n\nexport function verifySkillSnapshot(runPath, expectedManifestHash) {\n  const snapshotRoot = join(runPath, 'context', 'skills')\n  return verifySnapshotRoot(snapshotRoot, expectedManifestHash)\n}\n\nfunction copySessionSnapshot(snapshotRoot: string, runPath: string): void {\n  const runSnapshotRoot = join(runPath, 'context', 'skills')\n  rmSync(runSnapshotRoot, { recursive: true, force: true })\n  cpSync(snapshotRoot, runSnapshotRoot, { recursive: true })\n}\n\nfunction verifySnapshotRoot(snapshotRoot: string, expectedManifestHash = ''): SkillManifest {\n  const manifestPath = join(snapshotRoot, 'manifest.json')\n  if (!existsSync(manifestPath)) throw new Error('Skill snapshot 缺少 manifest.json')\n  const manifest = JSON.parse(readFileSync(manifestPath, 'utf8')) as SkillManifest\n  const { hash, ...unsigned } = manifest\n  const actualManifestHash = digest(stableStringify(unsigned))\n  if (!hash || hash !== actualManifestHash ||\n      (expectedManifestHash && hash !== expectedManifestHash)) {\n    throw new Error('Skill snapshot manifest hash 不一致')\n  }\n  if (!Array.isArray(manifest.entries) || !manifest.entries.length) {\n    throw new Error('Skill snapshot manifest 没有 entries')\n  }\n  for (const entry of manifest.entries) {\n    const skillRoot = resolve(snapshotRoot, entry.name)\n    assertInside(realpathSync(snapshotRoot), realpathSync(skillRoot), `Skill snapshot ${entry.name}`)\n    const files = walk(skillRoot)\n    const contentIndex = files.map((path) => ({\n      path: relative(skillRoot, path).split('\\\\').join('/'),\n      hash: digest(readFileSync(path).toString('base64')),\n    }))\n    if (contentIndex.length !== entry.files || digest(stableStringify(contentIndex)) !== entry.hash) {\n      throw new Error(`Skill snapshot 内容漂移: ${entry.name}`)\n    }\n  }\n  return manifest\n}\n\nfunction walk(dir): string[] {\n  const out: string[] = []\n  for (const name of readdirSync(dir).sort()) {\n    // 安装管理元数据不是 Skill 内容，不进入 Session 快照。\n    if (name === INSTALL_MARKER) continue\n    const path = join(dir, name)\n    const stat = lstatSync(path)\n    if (stat.isSymbolicLink()) throw new Error(`Agent Skill 不允许符号链接: ${path}`)\n    if (stat.isDirectory()) out.push(...walk(path))\n    else if (stat.isFile()) out.push(path)\n  }\n  return out\n}\n\nfunction parseFrontmatter(text, label): Record<string, string> {\n  const match = text.match(/^---\\r?\\n([\\s\\S]*?)\\r?\\n---(?:\\r?\\n|$)/)\n  if (!match) throw new Error(`Agent Skill ${label}/SKILL.md 缺少 YAML frontmatter`)\n  const out: Record<string, string> = {}\n  for (const line of match[1].split(/\\r?\\n/)) {\n    const m = line.match(/^([A-Za-z][A-Za-z0-9_-]*):\\s*(.*)$/)\n    if (!m) continue\n    out[m[1]] = m[2].trim().replace(/^(['\"])(.*)\\1$/, '$2')\n  }\n  if (!out.name || !out.description) {\n    throw new Error(`Agent Skill ${label}/SKILL.md frontmatter 必须含 name 和 description`)\n  }\n  const nestedVersion = match[1].match(\n    /^metadata:\\s*\\r?\\n(?:[ \\t]+.*\\r?\\n)*?[ \\t]+version:\\s*['\"]?([^'\"\\r\\n]+)['\"]?\\s*$/m,\n  )\n  if (nestedVersion?.[1]) out.version = nestedVersion[1].trim()\n  return out\n}\n\nfunction resolveSkillSource(rootReal: string, sourceSpec: string): {\n  path: string\n  label: string\n} {\n  const spec = String(sourceSpec || '').trim()\n  if (!spec) throw new Error('Workspace Skill name 不能为空')\n\n  // 显式路径只允许当前 Workspace 内，保留旧 workspace@1 兼容。\n  if (spec.includes('/') || spec.includes('\\\\') || spec.startsWith('.')) {\n    const candidate = resolve(rootReal, spec)\n    if (!existsSync(candidate) || !lstatSync(candidate).isDirectory()) {\n      throw new Error(`Agent Skill 不存在或不是目录: ${sourceSpec}`)\n    }\n    const actual = realpathSync(candidate)\n    assertInside(rootReal, actual, `Agent Skill ${sourceSpec}`)\n    return { path: actual, label: spec }\n  }\n\n  // bare name 的优先级：Workspace override → canonical global → client exposure\n  // → npm 内置。Session 创建后仍会冻结，运行中不会热切换。\n  const candidates: Array<[string, string]> = [\n    [`workspace:${spec}`, join(rootReal, 'skills', spec)],\n    [`global:${spec}`, join(homedir(), '.agents', 'skills', spec)],\n    [`claude:${spec}`, join(homedir(), '.claude', 'skills', spec)],\n    [`legacy-codex:${spec}`, join(homedir(), '.codex', 'skills', spec)],\n    [`bundled:${spec}`, join(PACKAGE_ROOT, 'skills', spec)],\n  ]\n  for (const [label, candidate] of candidates) {\n    if (!existsSync(candidate) || !lstatSync(candidate).isDirectory()) continue\n    const actual = realpathSync(candidate)\n    if (!isInsideKnownSkillRoot(actual, rootReal)) continue\n    return { path: actual, label }\n  }\n  throw new Error(`找不到 Agent Skill: ${spec}；请运行 dingtalk-agent skill install`)\n}\n\nfunction isInsideKnownSkillRoot(path: string, rootReal: string): boolean {\n  const roots = [\n    join(rootReal, 'skills'),\n    join(homedir(), '.agents', 'skills'),\n    join(homedir(), '.claude', 'skills'),\n    join(homedir(), '.codex', 'skills'),\n    join(PACKAGE_ROOT, 'skills'),\n  ]\n  return roots.some((root) => {\n    if (!existsSync(root)) return false\n    const actualRoot = realpathSync(root)\n    const rel = relative(actualRoot, path)\n    return rel !== '..' && !rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`)\n  })\n}\n\nfunction assertInside(root, path, label) {\n  const rel = relative(root, path)\n  if (rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`) || resolve(root, rel) !== path) {\n    throw new Error(`${label} 必须位于当前工作区内`)\n  }\n}\n"]}

package/dist/src/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"","sourcesContent":["export type JsonPrimitive = null | boolean | number | string\nexport type JsonValue = JsonPrimitive | JsonValue[] | JsonObject\nexport interface JsonObject { [key: string]: JsonValue }\n\nexport type EventKind =\n  | 'im.message.mentioned'\n  | 'im.message.dm'\n  | 'im.message.group'\n  | 'agent.heartbeat'\n  | (string & {})\n\nexport type ActionKind = 'ack' | 'reply' | 'ask' | 'silence'\nexport type ActionOutcome = 'confirmed' | 'accepted-unverified' | 'uncertain'\n\nexport interface Correlation {\n  source: string\n  key: string\n}\n\nexport interface ReplyTarget {\n  tenantId: string\n  conversationId: string\n  messageId: string\n  senderOpenDingTalkId: string\n}\n\nexport interface NormalizedEvent {\n  $schema: 'dingtalk-agent/event@1'\n  id: string\n  idSource: 'source' | 'derived'\n  kind: EventKind\n  occurredAt: string | null\n  source: { adapter: string; type: string; subscribeId: string }\n  tenant: { id: string }\n  actor: {\n    id: string\n    openDingTalkId: string\n    userId: string\n    displayName: string\n  }\n  conversation: { id: string; type: string }\n  message: { id: string; text: string; threadId: string; rootMessageId: string }\n  correlation: Correlation\n  replyTarget: ReplyTarget | null\n}\n\nexport interface CompactEvent {\n  $schema: 'dingtalk-agent/trigger@1'\n  id: string\n  type: EventKind\n  contextId: string\n  occurredAt: string | null\n  conversationId: string\n  messageId: string\n  actorId: string\n  actorName: string\n  text: string\n}\n\nexport interface RuntimeConfig {\n  sessionRoot: string\n  eventIndexRoot: string\n  waitRoot: string\n  waitTtlMs: number\n}\n\nexport interface AgentConfig {\n  schemaVersion: number\n  agent: { name: string; userId: string; ownerId: string }\n  dws: { profile: string; expectedUserId: string }\n  runtime: RuntimeConfig\n  fields: FieldEntry[]\n  kb: Array<Record<string, any>>\n  duties: Array<Record<string, any>>\n  eval: { target: string }\n}\n\nexport interface FieldEntry {\n  id: string\n  path: string\n  default?: boolean\n  priority?: number\n}\n\nexport interface FieldDefinition {\n  id: string\n  name?: string\n  description?: string\n  match?: Partial<Record<'tenantIds' | 'conversationIds' | 'actorIds' | 'eventKinds', string[]>>\n  transport: {\n    mode: 'personal-event' | 'robot-connect'\n    egressOwner: 'dingtalk-agent' | 'connector'\n  }\n  dws?: Partial<AgentConfig['dws']>\n  behavior: { packs: string[] }\n  memory?: Record<string, unknown>\n  skills?: Record<string, unknown>\n  evolution?: Record<string, unknown>\n}\n\nexport interface BehaviorRule {\n  eligibility?: string\n  defaultAction: ActionKind\n  allowedActions: ActionKind[]\n  replyPolicy?: string\n  [key: string]: unknown\n}\n\nexport interface BehaviorSnapshot {\n  $schema: 'dingtalk-agent/behavior-snapshot@1'\n  id: string\n  version: string\n  description: string\n  handles: Record<string, BehaviorRule>\n  stateMachine: {\n    initial: string\n    transitions: Record<string, Partial<Record<ActionKind, string>>>\n    terminal: string[]\n  }\n  limits: Partial<Record<'maxAckPerRun' | 'maxOutwardActionsPerRun' | 'maxTerminalMessagesPerRun' | 'maxTextCharacters', number>>\n  invariants: string[]\n  packs: Array<{ path: string; id: string; version: string; hash: string }>\n  hash: string\n}\n\nexport type ResumeContext =\n  | { mode: 'start' }\n  | {\n      mode: 'resume' | 'cancel'\n      waitId: string\n      waitScopeHash: string\n      sourceRunId: string\n      sourceActionId: string\n      questionText: string\n      questionDelivery: Record<string, unknown> | null\n      claimedByEventId: string\n      cancelRequested: boolean\n      cancelEventId: string\n      suppressedInput: boolean\n    }\n\nexport interface ActionCounts {\n  ack: number\n  reply: number\n  ask: number\n  silence: number\n  outward: number\n  terminal: number\n}\n\nexport interface SessionRecord {\n  $schema: 'dingtalk-agent/session@1'\n  id: string\n  contextId: string\n  fieldId: string\n  correlation: Correlation\n  correlationScope: string\n  createdAt: string\n  generation: number\n  principal: NormalizedEvent['actor']\n  tenant: NormalizedEvent['tenant']\n  conversation: NormalizedEvent['conversation']\n  updatedAt?: string\n  cancelledAt?: string\n  lastCancelEventId?: string\n}\n\nexport interface RunRecord {\n  $schema: 'dingtalk-agent/run@1'\n  protocol: 'basic-behavior/v1'\n  id: string\n  contextId: string\n  sessionId: string\n  fieldId: string\n  eventId: string\n  eventHash: string\n  eventKind: EventKind\n  createdAt: string\n  updatedAt: string\n  sessionGeneration: number\n  resume: ResumeContext\n  state: string\n  status: string\n  actionCounts: ActionCounts\n  appliedActionIds: string[]\n  behavior: { id: string; version: string; hash: string }\n  skills: { manifestHash: string; manifestPath: string }\n  [key: string]: unknown\n}\n\nexport interface ActionReceipt {\n  $schema: 'dingtalk-agent/action-receipt@1'\n  actionId: string\n  runId: string\n  kind: ActionKind\n  completedAt: string\n  fromState: string\n  toState: string\n  outcome: ActionOutcome\n  verified: boolean\n  verification: string\n  duplicate?: boolean\n  [key: string]: unknown\n}\n"]}