@xiashe/skill 0.1.23 → 0.1.24

package/README.md

@@ -51,8 +51,9 @@ Use the `claimUrl` returned with a dashboard dynamic code exactly as issued. `pu
 The publish path keeps three different values separate:
 
 - **Source fingerprint** — a stable SHA-256 of reviewed Skill source files. It is the idempotency key for the publish job.
-- **Artifact checksum** — SHA-256 of the generated `.tgz` bytes. The backend compares it only with storage's checksum for those exact bytes.
-- **Storage checksum** — the checksum reported after upload. It must match the artifact checksum; it is never compared with the source fingerprint.
+- **Artifact checksum** — SHA-256 of the generated `.tgz` bytes, sent with the upload request.
+- **Storage metadata checksum** — an upload-store diagnostic; it is never trusted as the sole proof of the uploaded bytes.
+- **Verified upload checksum** — the backend rehashes the exact stored archive bytes and compares that value with the artifact checksum. None of these are compared with the source fingerprint.
 
 If the network breaks after the server receives a dynamic-code claim, rerun the exact same `publish` command before that code expires. The registry accepts only the same code and source fingerprint, returns the original local manifest credentials, and reuses the same package job. It never creates a second Skill or a second upload job. Do not generate a new dashboard code merely because a local HTTP response was interrupted.
 

package/bin/xiashe-skill.mjs

@@ -68,7 +68,7 @@ function isTransportError(error) {
 }
 
 const LOCAL_ENV_DEFAULTS = loadLocalEnvDefaults();
-const VERSION = process.env.XIASHE_SKILL_CLI_VERSION || '0.1.23';
+const VERSION = process.env.XIASHE_SKILL_CLI_VERSION || '0.1.24';
 const COMMAND_NAME = process.env.XIASHE_SKILL_CLI_NAME || 'xiashe-skill';
 const PRODUCT_NAME = process.env.XIASHE_SKILL_PRODUCT_NAME || (COMMAND_NAME === 'agentpie-skill' ? 'AgentPie' : 'XiaShe');
 const REGISTRY_PROVIDER = process.env.XIASHE_SKILL_REGISTRY_PROVIDER || (COMMAND_NAME === 'agentpie-skill' ? 'agentpie' : 'xiashe');
@@ -98,6 +98,7 @@ const MANIFEST_FILE = process.env.XIASHE_SKILL_MANIFEST_FILE || (COMMAND_NAME ==
   : 'xiashe.skill.json');
 const WORK_DIR = process.env.XIASHE_SKILL_WORK_DIR || (COMMAND_NAME === 'agentpie-skill' ? '.agentpie' : '.xiashe');
 const PUBLIC_PROTOCOL_DIR = process.env.XIASHE_SKILL_PUBLIC_PROTOCOL_DIR || (REGISTRY_PROVIDER === 'agentpie' ? 'agentpie' : 'xiashe');
+const PUBLIC_PACKAGE_MANIFEST_FILE = 'package-manifest.json';
 const HANDOFF_FILE = 'UPLOAD_HANDOFF.md';
 const DEFAULT_REGISTRY_URL = process.env.XIASHE_SKILL_REGISTRY_URL || `${DEFAULT_BASE_URL}/registry/skill-events`;
 const DEFAULT_AGENT_ACK_URL = process.env.XIASHE_SKILL_AGENT_ACK_URL || `${DEFAULT_BASE_URL}/registry/agent-ack`;
@@ -163,8 +164,8 @@ const PLATFORM_REVIEW_PROFILES = {
     disclosurePlacement: ['Skill public page', 'README', `${WORK_DIR}/REGISTRY_DISCLOSURE.md`],
     runtimeDataPolicy: 'runtime_capable',
     defaultDataSource: 'runtime',
-    allowedFilePolicy: 'Upload the complete reviewed Skill package, including the local registry manifest.',
-    forbiddenPublicFiles: ['.env', 'credentials', 'node_modules', 'dist', 'build', 'browser profiles', 'SSH keys']
+    allowedFilePolicy: 'Upload the complete reviewed Skill package together with the generated no-secret package manifest. Keep the local registry manifest and runtime credentials on the creator device.',
+    forbiddenPublicFiles: [WORK_DIR, '.env', 'credentials', 'node_modules', 'dist', 'build', 'browser profiles', 'SSH keys', 'public tokens', 'signing secrets']
   },
   xiashe: {
     label: 'XiaShe Store',
@@ -173,8 +174,8 @@ const PLATFORM_REVIEW_PROFILES = {
     disclosurePlacement: ['Skill public page', 'README', `${WORK_DIR}/REGISTRY_DISCLOSURE.md`],
     runtimeDataPolicy: 'runtime_capable',
     defaultDataSource: 'runtime',
-    allowedFilePolicy: 'Upload the complete reviewed Skill package, including the local registry manifest.',
-    forbiddenPublicFiles: ['.env', 'credentials', 'node_modules', 'dist', 'build', 'browser profiles', 'SSH keys']
+    allowedFilePolicy: 'Upload the complete reviewed Skill package together with the generated no-secret package manifest. Keep the local registry manifest and runtime credentials on the creator device.',
+    forbiddenPublicFiles: [WORK_DIR, '.env', 'credentials', 'node_modules', 'dist', 'build', 'browser profiles', 'SSH keys', 'public tokens', 'signing secrets']
   },
   red: {
     label: 'Red Skill',
@@ -1090,11 +1091,16 @@ function shouldIgnorePackageEntry(relativePath, entryName, isDirectory = false)
   if (entryName === '.env' || entryName.startsWith('.env.')) return true;
   if (/\.(pem|key)$/i.test(entryName)) return true;
   if (packageArtifactPrefix && normalized.startsWith(packageArtifactPrefix)) return true;
-  if (isDirectory && (normalized === WORK_DIR || normalized === PUBLIC_PROTOCOL_DIR)) return false;
-  if (isDirectory && (normalized.startsWith(`${WORK_DIR}/`) || normalized.startsWith(`${PUBLIC_PROTOCOL_DIR}/`))) return false;
-  if ((normalized === WORK_DIR || normalized.startsWith(localRegistryPrefix)) && !isXiashePackageRegistryFile(normalized)) {
+  // The local registry workspace carries the public token, signing key and
+  // resumable-upload state. It is intentionally never part of an installable
+  // archive, even for first-party distribution. A separate, no-secret
+  // package manifest is written below `PUBLIC_PROTOCOL_DIR` instead.
+  if (normalized === WORK_DIR || normalized.startsWith(localRegistryPrefix)) {
     return true;
   }
+  if (normalized === PUBLIC_PROTOCOL_DIR || normalized.startsWith(`${PUBLIC_PROTOCOL_DIR}/`)) {
+    return isDirectory ? false : !isXiashePackageRegistryFile(normalized);
+  }
   const otherRegistryDir = WORK_DIR === '.xiashe' ? '.agentpie' : '.xiashe';
   if (normalized === otherRegistryDir || normalized.startsWith(`${otherRegistryDir}/`)) return true;
   return false;
@@ -1103,17 +1109,45 @@ function shouldIgnorePackageEntry(relativePath, entryName, isDirectory = false)
 function isXiashePackageRegistryFile(relativePath) {
   const normalized = String(relativePath || '').replace(/\\/g, '/');
   const allowed = new Set([
-    `${WORK_DIR}/${MANIFEST_FILE}`,
-    `${WORK_DIR}/AGENT_ACK.md`,
-    `${WORK_DIR}/REGISTRY_DISCLOSURE.md`,
-    `${WORK_DIR}/runtime-events.js`,
     `${PUBLIC_PROTOCOL_DIR}/AGENT_ACK.md`,
     `${PUBLIC_PROTOCOL_DIR}/REGISTRY_DISCLOSURE.md`,
-    `${PUBLIC_PROTOCOL_DIR}/runtime.yaml`
+    `${PUBLIC_PROTOCOL_DIR}/runtime.yaml`,
+    `${PUBLIC_PROTOCOL_DIR}/${PUBLIC_PACKAGE_MANIFEST_FILE}`
   ]);
   return allowed.has(normalized);
 }
 
+function publicPackageManifestRelativePath() {
+  return `${PUBLIC_PROTOCOL_DIR}/${PUBLIC_PACKAGE_MANIFEST_FILE}`;
+}
+
+async function writePublicPackageManifest(root, inspected) {
+  const registry = inspected.registry || {};
+  const outputPath = path.join(root, PUBLIC_PROTOCOL_DIR, PUBLIC_PACKAGE_MANIFEST_FILE);
+  const manifest = {
+    schemaVersion: `${REGISTRY_PROVIDER}.skill.package.v1`,
+    skill: {
+      name: inspected.name,
+      skillKey: inspected.skillKey,
+      description: inspected.description || null,
+      version: inspected.version || null,
+      isPaid: Boolean(inspected.isPaid),
+      requiresEntitlement: Boolean(inspected.requiresEntitlement)
+    },
+    creator: {
+      cardUrl: normalizeText(registry.creatorCardUrl || registry.creatorProfile?.cardUrl, 800) || null
+    },
+    safety: {
+      localRegistryStateIncluded: false,
+      credentialsIncluded: false,
+      signingMaterialIncluded: false
+    }
+  };
+  await mkdir(path.dirname(outputPath), { recursive: true });
+  await writeFile(outputPath, `${JSON.stringify(manifest, null, 2)}\n`, { mode: 0o644 });
+  return { outputPath, manifest };
+}
+
 async function walkXiashePackageFiles(root, current = root, out = []) {
   const entries = await readdir(current, { withFileTypes: true });
   for (const entry of entries) {
@@ -1218,8 +1252,9 @@ async function createTarGz(files) {
 
 async function buildXiashePackageArtifact(root, inspected, flags = {}) {
   const absoluteRoot = path.resolve(root || '.');
+  await writePublicPackageManifest(absoluteRoot, inspected);
   const files = await walkXiashePackageFiles(absoluteRoot);
-  const manifestRelative = `${WORK_DIR}/${MANIFEST_FILE}`;
+  const manifestRelative = publicPackageManifestRelativePath();
   const skillMarkdownPresent = files.some((file) => /^SKILL(\.[a-z0-9]+)?$/i.test(file.relative));
   const manifestPresent = files.some((file) => file.relative === manifestRelative);
   if (!skillMarkdownPresent) {
@@ -1639,10 +1674,10 @@ async function writeManifest(root, flags) {
 
 function hubInstruction(hub) {
   if (hub === 'agentpie') {
-    return 'AgentPie Registry publish is the full Skill package and registry manifest flow. Keep public disclosure, attribution, and runtime analytics callbacks; if the local manifest has a registry public token or a creator-authenticated CLI/API session exists, create or reuse the AgentPie registry draft.';
+    return 'AgentPie Registry publish is the full Skill package flow. The local registry manifest stays on the creator device; the installable package contains only the generated no-secret package manifest. Keep public disclosure, attribution, and runtime analytics callbacks; if a creator-authenticated CLI/API session exists, create or reuse the AgentPie registry draft.';
   }
   if (hub === 'xiashe') {
-    return '虾舍商店发布是完整 Skill 包和 registry manifest 的主流程。请保留公开披露、归因和 runtime analytics 回传能力；如果本地 manifest 有 registry public token 或已有创作者认证 CLI/API 会话，就创建或复用虾舍商店草稿。';
+    return '虾舍商店发布是完整 Skill 包的主流程。本地 registry manifest 仅保留在创作者设备；安装包只包含自动生成的不含敏感信息的 package manifest。请保留公开披露、归因和 runtime analytics 回传能力；如果已有创作者认证 CLI/API 会话，就创建或复用虾舍商店草稿。';
   }
   if (hub === 'red') {
     return `Red Skill 的官方 uploader.md / skillhub-upload / 页面流程是主流程。请优先使用本机 skillhub-upload；${PRODUCT_NAME} 负责生成平台安全披露、connector/运行时协议和本地 registry handoff，并把 registry id、public token、endpoint 等后台字段保留在本地私有配置或平台私有字段里。`;
@@ -1716,16 +1751,16 @@ function uploadCompatibilityLines(hub, manifestFile, protectedPaidSkill = false)
   if (hub === 'agentpie') {
     return [
       'AgentPie Registry compatibility requirements:',
-      `- AgentPie Registry can receive the complete Skill package and ${localManifest} registry manifest.`,
-      '- Keep public disclosure text, attribution links, and runtime event callbacks; do not remove the registry manifest.',
+      `- AgentPie Registry receives the complete Skill package. Keep ${localManifest} on the creator device; it is not an installable-package file.`,
+      '- Keep public disclosure text, attribution links, and runtime event callbacks; do not remove the generated public protocol files.',
       '- Before submitting a draft, still exclude .env, keys, node_modules, dist/build, and unrelated local files.'
     ];
   }
   if (hub === 'xiashe') {
     return [
       '虾舍商店兼容性要求：',
-      `- 虾舍商店可以接收完整 Skill 包和 ${localManifest} registry manifest。`,
-      '- 保留公开披露文本、归因链接和 runtime event callback；不要删除 registry manifest。',
+      `- 虾舍商店接收完整 Skill 包；${localManifest} 仅保留在创作者设备，不属于安装包。`,
+      '- 保留公开披露文本、归因链接和 runtime event callback；不要删除生成的公开协议文件。',
       '- 提交草稿前仍需排除 .env、密钥、node_modules、dist/build 和无关本地文件。'
     ];
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiashe/skill",
-  "version": "0.1.23",
+  "version": "0.1.24",
   "type": "module",
   "bin": {
     "xiashe-skill": "bin/xiashe-skill.mjs"