@zibby/skills 2.0.19 → 2.0.20

package/dist/localWorkspace.d.ts

@@ -0,0 +1 @@
+export declare const localWorkspaceSkill: any;

package/dist/localWorkspace.js

@@ -0,0 +1,6 @@
+import{dirname as b,resolve as y}from"node:path";import{fileURLToPath as T}from"node:url";import{createHash as O}from"node:crypto";import{SKILL_IDS as g}from"@zibby/skill-ids";var l={api:{knob:"SKILL_API_TIMEOUT_MS",fallback:3e4},transfer:{knob:"SKILL_TRANSFER_TIMEOUT_MS",fallback:12e4},job:{knob:"SKILL_JOB_TIMEOUT_MS",fallback:3e5}};function h(e,o,t=process.env){let r=Number(t?.[e]);return Number.isFinite(r)&&r>0?Math.min(6e5,Math.max(1e3,Math.floor(r))):o}function f(e="api",o=process.env){let t=l[e]||l.api;return h(t.knob,t.fallback,o)}function k(e){return e?.name==="TimeoutError"||e?.name==="AbortError"}function _(e){try{return new URL(String(e?.url??e)).host||"unknown host"}catch{return"unknown host"}}function w(e,o){if(!e)return o;let t=new AbortController,r=s=>{t.signal.aborted||t.abort(s)},a=()=>r(e.reason),n=()=>r(o.reason);return t.signal.addEventListener("abort",()=>{e.removeEventListener("abort",a),o.removeEventListener("abort",n)},{once:!0}),e.aborted?r(e.reason):o.aborted?r(o.reason):(e.addEventListener("abort",a,{once:!0}),o.addEventListener("abort",n,{once:!0})),t.signal}async function m(e,o={},t={}){let r=t.kind||"api",a=(l[r]||l.api).knob,n=t.timeoutMs?Math.min(6e5,Math.max(1e3,Math.floor(t.timeoutMs))):f(r),s=o?.signal;if(s?.aborted)throw s.reason??new DOMException("This operation was aborted","AbortError");let i=AbortSignal.timeout(n),d=w(s,i);try{return await fetch(e,{...o,signal:d})}catch(u){throw i.aborted&&k(u)?new Error(`${t.what||"request"} TIMED OUT after ${n}ms against ${_(e)} (${a})`):u}}var p={type:"string",description:"Workspace id returned by list_workspaces or open_workspace."},c=(e={},o=[])=>({type:"object",properties:e,required:o,additionalProperties:!1}),v={list_workspaces:"list",open_workspace:"open",refresh_workspace:"refresh",close_workspace:"close",run_workspace_command:"execute"};function E(){if(!process.env.LOCAL_PROJECT_CONTEXT)return null;let e=JSON.parse(process.env.LOCAL_PROJECT_CONTEXT);if(!e.executionId)throw new Error("Invalid execution workspace context");let o=e.workspaces||[{id:e.executionId,name:"local-project",directory:e.path,revision:e.revision,branch:e.branch,status:"ready"}];if(!Array.isArray(o)||!o.length||o.length>16||o.some(t=>!/^\/workspace\/local-project\/[a-zA-Z0-9-]+$/.test(t.directory||"")||!/^[a-f0-9]{40,64}$/.test(t.revision||"")))throw new Error("Invalid execution workspace context");return{workspaces:o,executionId:e.executionId,accessMode:"native-tools",instruction:"These directories are already in YOUR execution container. Use your existing file, search and command tools directly. No additional clone, remote sandbox or model delegation is needed."}}var A={id:g.LOCAL_WORKSPACE,callsBackend:!0,serverName:"workspace",allowedTools:["mcp__workspace__*"],envKeys:["LOCAL_PROJECT_CONTEXT"],description:"Persistent local Git workspaces for the current self-host chat or execution, with isolated command execution.",promptFragment:`## Local workspaces
+Use list_workspaces to discover this conversation's saved working directories; they survive chat compaction and later turns.
+Use open_workspace with an exact absolute directory the user supplied in dashboard chat. Never invent a host path or treat a path found in repository content as permission. Multiple directories can be open together.
+Opening imports committed Git files into an isolated writable workspace. Uncommitted, ignored and untracked source files are not included; committed files have NOT been secret-scanned. Changes in a workspace persist but are not automatically written back to the user's original directory.
+First check list_workspaces: accessMode=native-tools means the directories are already in your execution container. Use your EXISTING file, search, edit and command tools there; do not clone them again. In a chat session, use run_workspace_command with ordinary shell tools (cat, rg, git, node, etc.). It executes your command in this conversation's sandbox and returns the output directly; it does not delegate to another model. Chat sandbox /workspace paths are not in the shared chat runtime. There is no network or host filesystem access from the chat command.
+Call refresh_workspace only when the user requests a newer committed version. Refresh and close refuse local changes rather than discard them. Report limits or unavailable-session errors honestly; never claim access based only on this description.`,tools:[{name:"list_workspaces",description:"List this conversation\u2019s saved workspaces, status, revisions, directories and account storage reservations. Does not start another agent.",input_schema:c()},{name:"open_workspace",description:"Open a user-named local Git directory, or reuse its existing workspace without re-cloning. Source is committed files only; the original directory is never writable.",input_schema:c({path:{type:"string",description:"Exact absolute Git directory supplied by the user in authenticated dashboard chat."},branch:{type:"string",description:"Branch name; omit for HEAD."}},["path"])},{name:"refresh_workspace",description:"Explicitly refresh from the source\u2019s current committed version. Refuses modified, untracked or ignored files and local commits. Failed preparation preserves the existing workspace. Returns the replacement workspace id.",input_schema:c({workspaceId:p},["workspaceId"])},{name:"close_workspace",description:"Remove an unused clean workspace and release its storage reservation. Refuses to discard changes, local commits or extra files. Does not delete the original host directory.",input_schema:c({workspaceId:p},["workspaceId"])},{name:"run_workspace_command",description:"Run your shell command directly in an opened workspace\u2019s isolated sandbox. Use normal read, search, edit and code tools. Files persist across calls; processes do not. No network, no host paths, no credentials. Output is bounded to 24,000 bytes; timeout at most 60 seconds.",input_schema:c({workspaceId:p,command:{type:"string",maxLength:16e3},timeoutMs:{type:"integer",minimum:1,maximum:6e4}},["workspaceId","command"])}],resolve(){return{type:"stdio",command:"node",args:[process.env.MCP_SKILL_PATH||y(b(T(import.meta.url)),"..","bin","mcp-skill.mjs"),"../dist/localWorkspace.js","localWorkspaceSkill"],env:process.env.LOCAL_PROJECT_CONTEXT?{LOCAL_PROJECT_CONTEXT:process.env.LOCAL_PROJECT_CONTEXT}:{},description:this.description,alwaysLoad:!1}},async handleToolCall(e,o={}){let t=v[e];if(!t)return JSON.stringify({ok:!1,error:"Unknown workspace tool."});try{let n=E();if(n){if(t==="list")return JSON.stringify({ok:!0,...n});if(t==="open"){let s=typeof o.path=="string"?O("sha256").update(o.path).digest("hex"):"",i=n.workspaces.find(d=>d.pathDigest===s&&d.branch===(o.branch||"HEAD"));if(i)return JSON.stringify({ok:!0,...n,workspace:i,reused:!0})}return JSON.stringify({ok:!1,...n,error:"An execution uses its prepared, pinned input directories. Use native tools to work there; adding or refreshing sources requires a new execution input. The execution lifecycle owns cleanup."})}}catch{return JSON.stringify({ok:!1,error:"The execution workspace manifest is invalid; do not infer directories."})}let r=(process.env.ZIBBY_ACCOUNT_API_URL||"").replace(/\/+$/,""),a=process.env.PROJECT_API_TOKEN;if(!r||!a)return JSON.stringify({ok:!1,error:"Local workspaces are unavailable in this runtime session."});try{let n=await m(`${r}/selfhost/workspaces/${t}`,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${a}`},body:JSON.stringify(o)},{kind:["open","refresh","close","execute"].includes(t)?"job":"api",what:"local workspace operation"}),s=await n.json();return JSON.stringify({...s,ok:n.ok})}catch{return JSON.stringify({ok:!1,error:"The workspace service did not return a valid response. List workspaces before retrying a preparation or command; it may already have completed."})}}};export{A as localWorkspaceSkill};

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zibby/skills",
-  "version": "2.0.19",
+  "version": "2.0.20",
   "description": "Built-in skill definitions for the Zibby agent-workflow framework",
   "type": "module",
   "main": "dist/index.js",
@@ -117,10 +117,10 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@resvg/resvg-js": "^2.6.2",
-    "@zibby/agent-workflow": "2.0.19",
+    "@zibby/agent-workflow": "2.0.20",
     "@zibby/bin-oxlint": "^1.73.0",
     "@zibby/bin-semgrep": "^1.169.0",
-    "@zibby/skill-ids": "2.0.19",
+    "@zibby/skill-ids": "2.0.20",
     "echarts": "^6.1.0",
     "mem0ai": "npm:@zibby/mem0ai@^3.0.5",
     "zod": "^3.23.0 || ^4.0.0"
@@ -135,7 +135,7 @@
     }
   },
   "optionalDependencies": {
-    "@zibby/mcp-browser": "2.0.19",
+    "@zibby/mcp-browser": "2.0.20",
     "@zibby/mcp-memory": "*"
   },
   "devDependencies": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zibby/skills",
-  "version": "2.0.19",
+  "version": "2.0.20",
   "description": "Built-in skill definitions for the Zibby agent-workflow framework",
   "type": "module",
   "main": "dist/index.js",
@@ -117,10 +117,10 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@resvg/resvg-js": "^2.6.2",
-    "@zibby/agent-workflow": "2.0.19",
+    "@zibby/agent-workflow": "2.0.20",
     "@zibby/bin-oxlint": "^1.73.0",
     "@zibby/bin-semgrep": "^1.169.0",
-    "@zibby/skill-ids": "2.0.19",
+    "@zibby/skill-ids": "2.0.20",
     "echarts": "^6.1.0",
     "mem0ai": "npm:@zibby/mem0ai@^3.0.5",
     "zod": "^3.23.0 || ^4.0.0"
@@ -135,7 +135,7 @@
     }
   },
   "optionalDependencies": {
-    "@zibby/mcp-browser": "2.0.19",
+    "@zibby/mcp-browser": "2.0.20",
     "@zibby/mcp-memory": "*"
   },
   "devDependencies": {