@birdie_moblie/plugin-marketplace-cli 1.0.1 → 1.3.0

package/dist/commands/install-repo.js

@@ -0,0 +1,200 @@
+import { createInterface } from 'node:readline/promises';
+import { executeMarketplaceRegistration, inspectMarketplaceRegistration, normalizeTargetIds, } from '../application/marketplace-registration.js';
+import { AGENT_TARGET_IDS, } from '../application/marketplace-registration-contract.js';
+import { CommandError } from '../core/errors.js';
+const INSPECTION_LABELS = {
+    ready: '可自动',
+    'missing-cli': '缺少 CLI',
+    'manual-required': '需手动',
+    failed: '不可用',
+    interrupted: '中断',
+};
+const RESULT_LABELS = {
+    completed: '完成',
+    'missing-cli': '缺少 CLI',
+    'manual-required': '需手动',
+    failed: '失败',
+    interrupted: '中断',
+};
+function defaultWrite(text) {
+    process.stdout.write(text);
+}
+async function defaultReadSelection(interruptController) {
+    if (interruptController.signal.aborted) {
+        return undefined;
+    }
+    const terminal = createInterface({ input: process.stdin, output: process.stdout });
+    const onSigint = () => {
+        interruptController.abort('SIGINT');
+    };
+    terminal.on('SIGINT', onSigint);
+    try {
+        if (interruptController.signal.aborted) {
+            return undefined;
+        }
+        return await terminal.question('> ', { signal: interruptController.signal });
+    }
+    catch (error) {
+        if (interruptController.signal.aborted ||
+            error?.name === 'AbortError') {
+            return undefined;
+        }
+        throw error;
+    }
+    finally {
+        terminal.removeListener('SIGINT', onSigint);
+        terminal.close();
+    }
+}
+export function parseTargetSelection(input, availableTargetIds, defaultTargetIds) {
+    const value = input.trim();
+    if (value.length === 0) {
+        if (defaultTargetIds.length === 0) {
+            throw new CommandError('当前没有默认可自动处理的 agent；请输入明确编号或 all。');
+        }
+        return normalizeTargetIds(defaultTargetIds);
+    }
+    if (value.toLowerCase() === 'all') {
+        return normalizeTargetIds(availableTargetIds);
+    }
+    const tokens = value.split(',').map((token) => token.trim());
+    if (tokens.some((token) => !/^\d+$/u.test(token))) {
+        throw new CommandError('请选择逗号分隔的 agent 编号，或输入 all。');
+    }
+    const selected = [];
+    for (const token of tokens) {
+        const index = Number(token) - 1;
+        const target = availableTargetIds[index];
+        if (!target) {
+            throw new CommandError(`agent 编号超出范围: ${token}`);
+        }
+        selected.push(target);
+    }
+    return normalizeTargetIds(selected);
+}
+function renderPrompt(inspection, write) {
+    write('请选择要注册 Marketplace 的 agent：\n');
+    inspection.targets.forEach((target, index) => {
+        write(`  ${index + 1}. ${target.label.padEnd(18)} [${INSPECTION_LABELS[target.status]}]\n`);
+    });
+    const defaults = inspection.targets
+        .filter((target) => target.status === 'ready')
+        .map((target) => target.id);
+    const defaultNumbers = defaults.map((id) => inspection.targets.findIndex((target) => target.id === id) + 1);
+    write(`\n默认：${defaultNumbers.length > 0 ? defaultNumbers.join(',') : '无'}\n`);
+    write('输入编号（逗号分隔），输入 all 选择全部，直接回车接受默认：\n');
+    return defaults;
+}
+function formatInvocation(target) {
+    if (!target.invocation) {
+        return target.message;
+    }
+    return [target.invocation.executable, ...target.invocation.args.map((arg) => JSON.stringify(arg))]
+        .join(' ');
+}
+function renderTargetStart(target, write) {
+    if (target.status === 'ready') {
+        write(`→ ${target.label}: ${formatInvocation(target)}\n`);
+    }
+}
+function renderResultLine(result, write) {
+    write(`  [${RESULT_LABELS[result.status]}] ${result.label}：${result.message}\n`);
+    if (result.status !== 'completed' && result.recovery) {
+        write(`    下一步：${result.recovery}\n`);
+    }
+}
+function renderReport(report, write) {
+    const completed = report.results.filter((result) => result.status === 'completed');
+    const incomplete = report.results.filter((result) => result.status !== 'completed');
+    write('\n注册结果：\n');
+    write('已完成：\n');
+    if (completed.length === 0) {
+        write('  无\n');
+    }
+    else {
+        completed.forEach((result) => renderResultLine(result, write));
+    }
+    write('未完成：\n');
+    if (incomplete.length === 0) {
+        write('  无\n');
+    }
+    else {
+        incomplete.forEach((result) => renderResultLine(result, write));
+    }
+    write(`退出码：${report.exitCode}\n`);
+}
+function selectedInspection(inspection, targetIds) {
+    const selected = new Set(targetIds);
+    return {
+        source: inspection.source,
+        targets: inspection.targets.filter((target) => selected.has(target.id)),
+    };
+}
+export async function runInstallRepo(source, options, dependencies = {}) {
+    const requested = [...(options.agent ?? [])];
+    if (options.all && requested.length > 0) {
+        throw new CommandError('不能同时使用 --agent 与 --all。');
+    }
+    const interactive = dependencies.interactive ?? Boolean(process.stdin.isTTY && process.stdout.isTTY);
+    const explicitTargetIds = options.all
+        ? [...AGENT_TARGET_IDS]
+        : requested.length > 0
+            ? normalizeTargetIds(requested)
+            : undefined;
+    if (!explicitTargetIds && !interactive) {
+        throw new CommandError('非交互终端必须显式传入至少一个 --agent，或使用 --all。');
+    }
+    const write = dependencies.write ?? defaultWrite;
+    const interruptController = new AbortController();
+    const onSigint = () => interruptController.abort('SIGINT');
+    const runtime = {
+        ...dependencies.runtime,
+        signal: interruptController.signal,
+    };
+    process.on('SIGINT', onSigint);
+    try {
+        let inspection = await inspectMarketplaceRegistration(source, {
+            baseDir: dependencies.baseDir,
+            homeDir: dependencies.homeDir,
+            targetIds: explicitTargetIds ?? AGENT_TARGET_IDS,
+            runtime,
+        });
+        if (!explicitTargetIds) {
+            const interrupted = inspection.targets.some((target) => target.status === 'interrupted');
+            if (interrupted) {
+                const report = await executeMarketplaceRegistration(inspection, {
+                    runtime,
+                    onTargetResult: (result) => renderResultLine(result, write),
+                });
+                renderReport(report, write);
+                return { exitCode: 130, report };
+            }
+            const defaultTargetIds = renderPrompt(inspection, write);
+            if (interruptController.signal.aborted) {
+                write('\n[中断] 用户取消了 Marketplace 注册。\n');
+                return { exitCode: 130 };
+            }
+            const answer = dependencies.readSelection
+                ? await dependencies.readSelection(interruptController.signal)
+                : await defaultReadSelection(interruptController);
+            if (answer === undefined || interruptController.signal.aborted) {
+                write('\n[中断] 用户取消了 Marketplace 注册。\n');
+                return { exitCode: 130 };
+            }
+            const selected = parseTargetSelection(answer, inspection.targets.map((target) => target.id), defaultTargetIds);
+            inspection = selectedInspection(inspection, selected);
+        }
+        write(`Marketplace 来源：${inspection.source.displayValue}\n`);
+        const report = await executeMarketplaceRegistration(inspection, {
+            runtime,
+            onTargetStart: (target) => renderTargetStart(target, write),
+            onTargetResult: (result) => renderResultLine(result, write),
+        });
+        renderReport(report, write);
+        return { exitCode: report.exitCode, report };
+    }
+    finally {
+        process.removeListener('SIGINT', onSigint);
+    }
+}
+//# sourceMappingURL=install-repo.js.map

package/dist/commands/install-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-repo.js","sourceRoot":"","sources":["../../src/commands/install-repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,gBAAgB,GAMjB,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAqBjD,MAAM,iBAAiB,GAA+C;IACpE,KAAK,EAAE,KAAK;IACZ,aAAa,EAAE,QAAQ;IACvB,iBAAiB,EAAE,KAAK;IACxB,MAAM,EAAE,KAAK;IACb,WAAW,EAAE,IAAI;CAClB,CAAC;AAEF,MAAM,aAAa,GAAuD;IACxE,SAAS,EAAE,IAAI;IACf,aAAa,EAAE,QAAQ;IACvB,iBAAiB,EAAE,KAAK;IACxB,MAAM,EAAE,IAAI;IACZ,WAAW,EAAE,IAAI;CAClB,CAAC;AAEF,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,mBAAoC;IAEpC,IAAI,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,mBAAmB,CAAC,MAAM,CAAC,OAAO;YACjC,KAA2B,EAAE,IAAI,KAAK,YAAY,EACnD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC5C,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,kBAA4C,EAC5C,gBAA0C;IAE1C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,YAAY,CAAC,kCAAkC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,YAAY,CAAC,4BAA4B,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,YAAY,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CACnB,UAA6C,EAC7C,KAA6B;IAE7B,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACvC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC3C,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO;SAChC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC;SAC7C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CACjC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CACvE,CAAC;IACF,KAAK,CAAC,QAAQ,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9E,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAwB;IAChD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;SAC/F,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAwB,EAAE,KAA6B;IAChF,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,KAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAgC,EAChC,KAA6B;IAE7B,KAAK,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrD,KAAK,CAAC,WAAW,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,MAAqC,EACrC,KAA6B;IAE7B,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;IACnF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;IACpF,KAAK,CAAC,WAAW,CAAC,CAAC;IACnB,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,CAAC,OAAO,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,kBAAkB,CACzB,UAA6C,EAC7C,SAAmC;IAEnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,OAA2B,EAC3B,eAA+C,EAAE;IAEjD,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,GAAG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,WAAW,GACf,YAAY,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnF,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG;QACnC,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC;QACvB,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,iBAAiB,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC,oCAAoC,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,IAAI,YAAY,CAAC;IACjD,MAAM,mBAAmB,GAAG,IAAI,eAAe,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,GAAS,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,OAAO,GAAmC;QAC9C,GAAG,YAAY,CAAC,OAAO;QACvB,MAAM,EAAE,mBAAmB,CAAC,MAAM;KACnC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,UAAU,GAAG,MAAM,8BAA8B,CAAC,MAAM,EAAE;YAC5D,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,SAAS,EAAE,iBAAiB,IAAI,gBAAgB;YAChD,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;YACzF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,UAAU,EAAE;oBAC9D,OAAO;oBACP,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;iBAC5D,CAAC,CAAC;gBACH,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC5B,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;YACnC,CAAC;YACD,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACzD,IAAI,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACxC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa;gBACvC,CAAC,CAAC,MAAM,YAAY,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,CAAC;gBAC9D,CAAC,CAAC,MAAM,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;YACpD,IAAI,MAAM,KAAK,SAAS,IAAI,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/D,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACxC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,QAAQ,GAAG,oBAAoB,CACnC,MAAM,EACN,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAC7C,gBAAgB,CACjB,CAAC;YACF,UAAU,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC;QAED,KAAK,CAAC,kBAAkB,UAAU,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,UAAU,EAAE;YAC9D,OAAO;YACP,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;YAC3D,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;SAC5D,CAAC,CAAC;QACH,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/commands/release-local.d.ts

@@ -3,6 +3,7 @@
  *
  * 该命令假定调用前已执行完整构建流程。
  */
+export declare function assertPortableArchive(archivePath: string): void;
 export declare function runReleaseLocal(options?: {
     root?: string;
 }): void;

package/dist/commands/release-local.js

@@ -4,21 +4,296 @@
  * 该命令假定调用前已执行完整构建流程。
  */
 import { spawnSync } from 'node:child_process';
-import { cpSync, existsSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
+import { gunzipSync } from 'node:zlib';
+import { cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, readdirSync, realpathSync, rmSync, writeFileSync, } from 'node:fs';
+import { basename, dirname, isAbsolute, join, posix, relative, resolve } from 'node:path';
 import chalk from 'chalk';
 import { loadAllPlugins, loadMarketplaceMetadata, resolveRepoContext, } from '../utils/helpers.js';
+import { loadOpenSpecAdapters } from '../adapters/openspec.js';
 function assertExists(path, label) {
     if (!existsSync(path)) {
         throw new Error(`${label} 不存在，请先运行 npm run ci:local`);
     }
 }
-function copyDirectory(from, to) {
+function isGeneratedMetadataPath(path) {
+    const name = basename(path);
+    return (name === '.DS_Store' ||
+        name === '__pycache__' ||
+        name.startsWith('._') ||
+        /\.py[co]$/i.test(name));
+}
+function copyDirectory(from, to, options = {}) {
+    const sourceRoot = resolve(from);
     cpSync(from, to, {
         recursive: true,
-        filter: (src) => !src.endsWith('.DS_Store'),
+        verbatimSymlinks: true,
+        filter: (src) => {
+            if (isGeneratedMetadataPath(src))
+                return false;
+            if (options.excludePluginTests) {
+                const parts = relative(sourceRoot, resolve(src)).split(/[\\/]/);
+                if (parts.length >= 2 && parts[1] === 'tests')
+                    return false;
+            }
+            return true;
+        },
     });
 }
+function isInside(root, candidate) {
+    const value = relative(root, candidate);
+    return value === '' || (!value.startsWith('..') && !isAbsolute(value));
+}
+function assertPortableTree(root) {
+    const resolvedRoot = realpathSync(root);
+    const visit = (directory) => {
+        for (const name of readdirSync(directory)) {
+            const path = join(directory, name);
+            if (isGeneratedMetadataPath(path)) {
+                throw new Error(`发布包包含解释器或文件系统元数据: ${relative(root, path)}`);
+            }
+            const metadata = lstatSync(path);
+            if (metadata.isSymbolicLink()) {
+                const target = readlinkSync(path);
+                if (isAbsolute(target)) {
+                    throw new Error(`发布包包含绝对符号链接: ${relative(root, path)}`);
+                }
+                const lexicalTarget = resolve(dirname(path), target);
+                if (!isInside(resolvedRoot, lexicalTarget)) {
+                    throw new Error(`发布包包含越界符号链接: ${relative(root, path)}`);
+                }
+                let realTarget;
+                try {
+                    realTarget = realpathSync(path);
+                }
+                catch {
+                    throw new Error(`发布包包含断链符号链接: ${relative(root, path)}`);
+                }
+                if (!isInside(resolvedRoot, realTarget)) {
+                    throw new Error(`发布包符号链接最终目标越界: ${relative(root, path)}`);
+                }
+                continue;
+            }
+            if (metadata.isDirectory()) {
+                visit(path);
+                continue;
+            }
+            if (!metadata.isFile()) {
+                throw new Error(`发布包包含不支持的文件类型: ${relative(root, path)}`);
+            }
+        }
+    };
+    visit(resolvedRoot);
+}
+function tarString(buffer, offset, length) {
+    const field = buffer.subarray(offset, offset + length);
+    const end = field.indexOf(0);
+    return field.subarray(0, end < 0 ? field.length : end).toString('utf-8').trim();
+}
+function tarNumber(buffer, offset, length) {
+    const field = buffer.subarray(offset, offset + length);
+    if (field.length && (field[0] & 0x80) !== 0) {
+        let value = BigInt(field[0] & 0x7f);
+        for (const byte of field.subarray(1))
+            value = (value << 8n) | BigInt(byte);
+        const numeric = Number(value);
+        if (!Number.isSafeInteger(numeric))
+            throw new Error('发布包 tar 数值字段超出安全范围');
+        return numeric;
+    }
+    const text = field.toString('ascii').replace(/\0.*$/s, '').trim();
+    if (!text)
+        return 0;
+    if (!/^[0-7]+$/.test(text))
+        throw new Error('发布包 tar 数值字段无效');
+    return Number.parseInt(text, 8);
+}
+function parsePax(payload) {
+    const values = {};
+    let offset = 0;
+    while (offset < payload.length) {
+        const space = payload.indexOf(0x20, offset);
+        if (space < 0)
+            throw new Error('发布包 PAX header 无效');
+        const lengthText = payload.subarray(offset, space).toString('ascii');
+        if (!/^[1-9][0-9]*$/.test(lengthText))
+            throw new Error('发布包 PAX 长度无效');
+        const length = Number.parseInt(lengthText, 10);
+        const end = offset + length;
+        if (!Number.isSafeInteger(length) || end > payload.length || end <= space + 1) {
+            throw new Error('发布包 PAX record 越界');
+        }
+        const record = payload.subarray(space + 1, end - 1).toString('utf-8');
+        const equals = record.indexOf('=');
+        if (equals > 0)
+            values[record.slice(0, equals)] = record.slice(equals + 1);
+        offset = end;
+    }
+    return values;
+}
+function safeArchivePath(value, label) {
+    if (!value ||
+        value.includes('\0') ||
+        value.includes('\\') ||
+        posix.isAbsolute(value) ||
+        /^[A-Za-z]:[\\/]/.test(value)) {
+        throw new Error(`发布包包含不安全${label}: ${value}`);
+    }
+    const parts = value.split('/').filter((part) => part !== '' && part !== '.');
+    if (parts.includes('..'))
+        throw new Error(`发布包包含不安全${label}: ${value}`);
+    const normalized = posix.normalize(value).replace(/^\.\//, '').replace(/\/$/, '');
+    if (!normalized || normalized === '..' || normalized.startsWith('../')) {
+        throw new Error(`发布包包含不安全${label}: ${value}`);
+    }
+    return normalized;
+}
+function safeArchiveLinkTarget(member, value) {
+    if (!value ||
+        value.includes('\0') ||
+        value.includes('\\') ||
+        posix.isAbsolute(value) ||
+        /^[A-Za-z]:[\\/]/.test(value)) {
+        throw new Error(`发布包包含不安全链接目标: ${member.path}`);
+    }
+    const target = member.type === 'symlink'
+        ? posix.normalize(posix.join(posix.dirname(member.path), value))
+        : posix.normalize(value);
+    if (!target || target === '..' || target.startsWith('../')) {
+        throw new Error(`发布包包含越界链接目标: ${member.path}`);
+    }
+    return target.replace(/^\.\//, '').replace(/\/$/, '');
+}
+function parseTarMembers(tar) {
+    const members = [];
+    let offset = 0;
+    let pendingName;
+    let pendingLink;
+    let pendingPax = {};
+    let globalPax = {};
+    let ended = false;
+    while (offset + 512 <= tar.length) {
+        const header = tar.subarray(offset, offset + 512);
+        if (header.every((byte) => byte === 0)) {
+            const second = tar.subarray(offset + 512, offset + 1024);
+            if (second.length !== 512 || !second.every((byte) => byte === 0)) {
+                throw new Error('发布包 tar 缺少两个结束块');
+            }
+            if (!tar.subarray(offset + 1024).every((byte) => byte === 0)) {
+                throw new Error('发布包 tar 结束块后包含非零内容');
+            }
+            ended = true;
+            offset = tar.length;
+            break;
+        }
+        const storedChecksum = tarNumber(header, 148, 8);
+        let computedChecksum = 0;
+        for (let index = 0; index < header.length; index += 1) {
+            computedChecksum += index >= 148 && index < 156 ? 0x20 : header[index];
+        }
+        if (storedChecksum !== computedChecksum) {
+            throw new Error('发布包 tar header checksum 无效');
+        }
+        const magic = header.subarray(257, 263);
+        const version = header.subarray(263, 265).toString('ascii');
+        if (!magic.equals(Buffer.from([0x75, 0x73, 0x74, 0x61, 0x72, 0x00])) || version !== '00') {
+            throw new Error('发布包 tar magic/version 无效');
+        }
+        const size = tarNumber(header, 124, 12);
+        const typeFlag = String.fromCharCode(header[156] || 0);
+        const prefix = tarString(header, 345, 155);
+        const headerName = [prefix, tarString(header, 0, 100)].filter(Boolean).join('/');
+        const dataStart = offset + 512;
+        const dataEnd = dataStart + size;
+        if (dataEnd > tar.length)
+            throw new Error('发布包 tar member 内容越界');
+        const payload = tar.subarray(dataStart, dataEnd);
+        if (typeFlag === 'x' || typeFlag === 'g') {
+            const values = parsePax(payload);
+            if (typeFlag === 'g')
+                globalPax = { ...globalPax, ...values };
+            else
+                pendingPax = values;
+        }
+        else if (typeFlag === 'L') {
+            pendingName = payload.toString('utf-8').replace(/\0.*$/s, '').replace(/\n$/, '');
+        }
+        else if (typeFlag === 'K') {
+            pendingLink = payload.toString('utf-8').replace(/\0.*$/s, '').replace(/\n$/, '');
+        }
+        else {
+            const attributes = { ...globalPax, ...pendingPax };
+            const memberPath = safeArchivePath(attributes.path || pendingName || headerName, '成员路径');
+            const type = typeFlag === '\0' || typeFlag === '0'
+                ? 'file'
+                : typeFlag === '5'
+                    ? 'directory'
+                    : typeFlag === '2'
+                        ? 'symlink'
+                        : typeFlag === '1'
+                            ? 'hardlink'
+                            : null;
+            if (type === null) {
+                throw new Error(`发布包包含不支持的 tar header type ${JSON.stringify(typeFlag)}: ${memberPath}`);
+            }
+            const rawLink = attributes.linkpath || pendingLink || tarString(header, 157, 100);
+            members.push({ path: memberPath, type, ...(rawLink ? { linkName: rawLink } : {}) });
+            pendingName = undefined;
+            pendingLink = undefined;
+            pendingPax = {};
+        }
+        offset = dataStart + Math.ceil(size / 512) * 512;
+    }
+    if (offset > tar.length || !ended)
+        throw new Error('发布包 tar 对齐或结束区无效');
+    return members;
+}
+export function assertPortableArchive(archivePath) {
+    let tar;
+    try {
+        tar = gunzipSync(readFileSync(archivePath));
+    }
+    catch {
+        throw new Error(`发布包压缩流无效: ${archivePath}`);
+    }
+    const sensitiveText = tar.toString('utf-8');
+    if (/\/(?:Users|home)\/[A-Za-z0-9._-]+\//.test(sensitiveText) ||
+        /\/(?:private\/tmp|private\/var\/folders|var\/folders)\//.test(sensitiveText) ||
+        /[A-Za-z]:\\Users\\[^\\\r\n\0]+\\/i.test(sensitiveText)) {
+        throw new Error('发布包包含本机绝对路径');
+    }
+    const members = parseTarMembers(tar);
+    const memberPaths = new Set();
+    for (const member of members) {
+        if (memberPaths.has(member.path)) {
+            throw new Error(`发布包包含重复成员路径: ${member.path}`);
+        }
+        memberPaths.add(member.path);
+    }
+    for (const member of members) {
+        const parts = member.path.split('/');
+        if (parts.some((part) => part.startsWith('._') || part === '__pycache__' || /\.py[co]$/i.test(part))) {
+            throw new Error(`发布包包含解释器或文件系统元数据: ${member.path}`);
+        }
+        if (member.type === 'symlink' || member.type === 'hardlink') {
+            const target = safeArchiveLinkTarget(member, member.linkName || '');
+            if (!memberPaths.has(target)) {
+                throw new Error(`发布包包含越界或断开的 ${member.type}: ${member.path}`);
+            }
+        }
+    }
+}
+function listComponentLabels(config) {
+    const labels = [];
+    if (config.components.skills?.length)
+        labels.push('Skill');
+    if (config.components.mcp?.length)
+        labels.push('MCP');
+    if (config.components.lsp?.length)
+        labels.push('LSP');
+    if (config.components.hooks?.length)
+        labels.push('Hook');
+    return labels;
+}
 function writeReleaseReadme(releaseDir, marketplaceName, pluginCount) {
     const readme = `# ${marketplaceName} 本地发布包
 
@@ -26,9 +301,15 @@ function writeReleaseReadme(releaseDir, marketplaceName, pluginCount) {
 
 ## 内容
 
-- \`plugins/\`: 插件源文件以及生成后的 Claude Code / Codex manifest
+- \`plugins/\`: 每个目录都是带根 \`plugin.json\` 的 Agent Plugins 1.0 包，同时保留 Claude Code / Codex manifest
+- 插件源码中的顶层 \`tests/\` 不进入消费者发布包
+- 插件内 \`mcp.json\`: Agent Plugins 1.0 MCP 配置（仅 MCP 插件）
+- 插件内 \`.lsp.json\`: Claude Code LSP server 配置（仅 LSP 插件）
 - \`.claude-plugin/marketplace.json\`: Claude Code marketplace manifest
+- \`.github/plugin/marketplace.json\`: GitHub Copilot / VS Code marketplace manifest
 - \`.agents/plugins/marketplace.json\`: Codex repo marketplace manifest
+- \`.cursor-plugin/marketplace.json\`: Cursor team marketplace manifest（仓库导入要求 GitHub/GitHub Enterprise）
+- \`.openspec-plugin/source-adapters.json\`: OpenSpec source adapter sidecar 索引
 - \`marketplace.json\`: 根目录兼容镜像
 - \`marketplace.yaml\`: marketplace 元数据
 - \`release-manifest.json\`: 本次发布包的元信息
@@ -46,10 +327,12 @@ function createArchive(distDir, marketplaceName) {
     const archivePath = join(distDir, archiveName);
     const result = spawnSync('tar', ['-czf', archivePath, '-C', distDir, 'release'], {
         stdio: 'inherit',
+        env: { ...process.env, COPYFILE_DISABLE: '1' },
     });
     if (result.status !== 0) {
         throw new Error(`发布包压缩失败: ${archiveName}`);
     }
+    assertPortableArchive(archivePath);
     return archivePath;
 }
 export function runReleaseLocal(options = {}) {
@@ -59,25 +342,39 @@ export function runReleaseLocal(options = {}) {
     const plugins = loadAllPlugins(context);
     const releaseDir = join(context.distDir, 'release');
     assertExists(join(context.rootDir, '.claude-plugin/marketplace.json'), 'Claude marketplace manifest');
+    assertExists(join(context.rootDir, '.github/plugin/marketplace.json'), 'GitHub Copilot marketplace manifest');
     assertExists(join(context.rootDir, '.agents/plugins/marketplace.json'), 'Codex marketplace manifest');
+    assertExists(join(context.rootDir, '.cursor-plugin/marketplace.json'), 'Cursor marketplace manifest');
+    assertExists(join(context.rootDir, '.openspec-plugin/source-adapters.json'), 'OpenSpec source adapter sidecar 索引');
     assertExists(join(context.rootDir, 'marketplace.json'), 'marketplace.json');
     assertExists(context.marketplaceYamlPath, 'marketplace.yaml');
     assertExists(join(context.pluginsDir, 'CATALOG.md'), 'plugins/CATALOG.md');
     for (const { name, dir, config } of plugins) {
+        assertExists(join(dir, 'plugin.json'), `${name} Agent Plugins manifest`);
         assertExists(join(dir, '.claude-plugin/plugin.json'), `${name} Claude manifest`);
         assertExists(join(dir, '.codex-plugin/plugin.json'), `${name} Codex manifest`);
         if (config.components.mcp?.length) {
+            assertExists(join(dir, 'mcp.json'), `${name} Agent Plugins MCP 配置`);
             assertExists(join(dir, '.mcp.json'), `${name} MCP 配置`);
         }
+        if (config.components.lsp?.length) {
+            assertExists(join(dir, '.lsp.json'), `${name} LSP 配置`);
+        }
         if (config.components.hooks?.length) {
             assertExists(join(dir, 'hooks/hooks.json'), `${name} hooks 配置`);
         }
+        if (loadOpenSpecAdapters(dir).length) {
+            assertExists(join(dir, '.openspec-plugin/plugin.json'), `${name} OpenSpec sidecar`);
+        }
     }
     rmSync(releaseDir, { recursive: true, force: true });
     mkdirSync(releaseDir, { recursive: true });
-    copyDirectory(context.pluginsDir, join(releaseDir, 'plugins'));
+    copyDirectory(context.pluginsDir, join(releaseDir, 'plugins'), { excludePluginTests: true });
     copyDirectory(join(context.rootDir, '.claude-plugin'), join(releaseDir, '.claude-plugin'));
-    copyDirectory(join(context.rootDir, '.agents'), join(releaseDir, '.agents'));
+    copyDirectory(join(context.rootDir, '.github', 'plugin'), join(releaseDir, '.github', 'plugin'));
+    copyDirectory(join(context.rootDir, '.agents', 'plugins'), join(releaseDir, '.agents', 'plugins'));
+    copyDirectory(join(context.rootDir, '.cursor-plugin'), join(releaseDir, '.cursor-plugin'));
+    copyDirectory(join(context.rootDir, '.openspec-plugin'), join(releaseDir, '.openspec-plugin'));
     cpSync(join(context.rootDir, 'marketplace.json'), join(releaseDir, 'marketplace.json'));
     cpSync(context.marketplaceYamlPath, join(releaseDir, 'marketplace.yaml'));
     const manifest = {
@@ -87,17 +384,23 @@ export function runReleaseLocal(options = {}) {
             name,
             version: config.version,
             category: config.category || 'general',
+            components: listComponentLabels(config),
         })),
         artifacts: {
             plugins: 'plugins/',
+            agentPluginRoots: 'plugins/*/',
             claudeMarketplace: '.claude-plugin/marketplace.json',
+            copilotMarketplace: '.github/plugin/marketplace.json',
             codexMarketplace: '.agents/plugins/marketplace.json',
+            cursorMarketplace: '.cursor-plugin/marketplace.json',
+            openSpecSourceAdapters: '.openspec-plugin/source-adapters.json',
             marketplaceMirror: 'marketplace.json',
             marketplaceMetadata: 'marketplace.yaml',
         },
     };
     writeFileSync(join(releaseDir, 'release-manifest.json'), JSON.stringify(manifest, null, 2) + '\n');
     writeReleaseReadme(releaseDir, marketplace.name, plugins.length);
+    assertPortableTree(releaseDir);
     const archivePath = createArchive(context.distDir, marketplace.name);
     console.log(chalk.green(`  ✓ dist/release (${plugins.length} 个插件)`));
     console.log(chalk.green(`  ✓ ${archivePath}`));