@cjhyy/code-shell-link 0.9.40 → 0.9.42

package/README.md

@@ -36,3 +36,7 @@ Core 也不反向依赖这个包。Desktop / Link Server 作为宿主，在加
 新增 Provider 时，先在 `src/catalog.ts` 增加 manifest，再在可信执行宿主实现相同的 `actionIds`。
 `bun run test` 会校验每个 Provider 都有可用本地方法、独立服务端方法、完整授权引导，并锁定支持
 零复制会话的官方 CLI 清单。
+
+Slack 精确消息/线程与 GitHub PR 文件、提交和 exact commit 的只读契约，见
+[Link source reads](../../docs/link-source-reads.md)。本地、CLI 与远程执行宿主必须显式支持
+相同的 Action；已部署远程服务不会因客户端清单更新而自动新增能力。

package/dist/catalog.js

@@ -76,6 +76,7 @@ export const LINK_PROVIDER_MANIFESTS = [
             },
             { ...managedOAuth("GitHub App"), id: "github-app" },
         ],
+        fileSelection: { kind: "github-file", action: "get_file", resourceGroup: "repositories" },
         actionIds: [
             "list_repositories",
             "get_repository",
@@ -87,6 +88,9 @@ export const LINK_PROVIDER_MANIFESTS = [
             "get_issue",
             "list_pull_requests",
             "get_pull_request",
+            "list_pull_request_files",
+            "list_pull_request_commits",
+            "get_commit",
             "create_issue",
             "update_issue",
         ],
@@ -204,7 +208,7 @@ export const LINK_PROVIDER_MANIFESTS = [
         id: "slack",
         displayName: "Slack",
         category: "communication",
-        description: text("列出频道并读取最近消息。", "List channels and read recent messages."),
+        description: text("列出频道、读取精确消息及分页线程。", "List channels, read exact messages and paged threads."),
         brandText: "S",
         icon: "conversation",
         accent: "fuchsia",
@@ -234,15 +238,17 @@ export const LINK_PROVIDER_MANIFESTS = [
                     text("在 Slack API 创建 App，并选择目标工作区。", "Create an app in Slack API and choose the target workspace."),
                     text("在 OAuth & Permissions 添加 Bot Token Scopes。", "Add the bot token scopes under OAuth & Permissions."),
                     text("安装 App 到工作区；需要读消息的频道还要邀请该 App。", "Install the app, then invite it to channels whose history it should read."),
+                    text("公开或私有频道的完整线程读取可能需要 User OAuth Token（xoxp-）与相应 history 权限；Bot Token 不一定能读取频道线程。", "Public/private channel threads may require a User OAuth Token (xoxp-) with the corresponding history scope; bot tokens may not read those threads."),
                     text("复制 Bot User OAuth Token（xoxb-）并回到这里验证。", "Copy the Bot User OAuth Token (xoxb-) and verify it here."),
                 ],
             }),
             managedOAuth("Slack"),
         ],
-        actionIds: ["list_channels", "get_channel_history"],
+        actionIds: ["list_channels", "get_channel_history", "get_message", "get_thread"],
     },
     {
         id: "notion",
+        fileSelectionLimitation: "document-content-unavailable",
         displayName: "Notion",
         category: "work",
         description: text("搜索并读取已共享的页面和数据库。", "Search and read shared pages and databases."),
@@ -395,6 +401,7 @@ export const LINK_PROVIDER_MANIFESTS = [
             }),
             { ...managedOAuth("Figma"), id: "figma-oauth" },
         ],
+        fileSelection: { kind: "figma-file", action: "get_file", resourceGroup: "files" },
         actionIds: ["get_file", "get_comments"],
     },
 ];

package/dist/file-selection.d.ts

@@ -0,0 +1,21 @@
+export type LinkFileSelectionInput = {
+    kind: "github-file";
+    owner: string;
+    repo: string;
+    path: string;
+    ref?: string;
+    label?: string;
+} | {
+    kind: "figma-file";
+    fileUrlOrKey: string;
+    label?: string;
+};
+/** Provider-owned normalization, shared by Hosts without accepting arbitrary action JSON. */
+export declare function resolveLinkFileSelection(providerId: string, input: unknown): {
+    providerId: string;
+    action: "get_file";
+    scopeId: string;
+    params: Record<string, string>;
+    resourceId: string;
+    label: string;
+};

package/dist/file-selection.js

@@ -0,0 +1,75 @@
+import { getLinkProviderManifest } from "./catalog.js";
+function text(value, field, max) {
+    if (typeof value !== "string" ||
+        !value.trim() ||
+        value.length > max ||
+        /[\x00-\x1f\x7f]/.test(value))
+        throw new Error(`Invalid linked file ${field}`);
+    return value.trim();
+}
+/** Provider-owned normalization, shared by Hosts without accepting arbitrary action JSON. */
+export function resolveLinkFileSelection(providerId, input) {
+    const capability = getLinkProviderManifest(providerId)?.fileSelection;
+    if (!capability || !input || typeof input !== "object" || Array.isArray(input))
+        throw new Error("This connection does not support document file selection");
+    const file = input;
+    if (file.kind !== capability.kind)
+        throw new Error("Linked file belongs to another provider");
+    const allowed = capability.kind === "github-file"
+        ? ["kind", "owner", "repo", "path", "ref", "label"]
+        : ["kind", "fileUrlOrKey", "label"];
+    if (Object.keys(file).some((key) => !allowed.includes(key)))
+        throw new Error("Unknown linked file field");
+    const label = file.label === undefined ? undefined : text(file.label, "label", 512);
+    let params, resourceId, defaultLabel;
+    if (capability.kind === "github-file") {
+        const owner = text(file.owner, "owner", 100).toLowerCase();
+        const repo = text(file.repo, "repository", 100).toLowerCase();
+        if (!/^[a-z0-9][a-z0-9-]{0,38}$/.test(owner) ||
+            !/^[a-z0-9_.-]+$/.test(repo) ||
+            [".", ".."].includes(repo))
+            throw new Error("Invalid GitHub repository");
+        const path = text(file.path, "path", 2_000);
+        for (const segment of path.split("/")) {
+            let decoded = segment;
+            try {
+                decoded = decodeURIComponent(segment);
+            }
+            catch {
+                /* Literal percent signs are allowed. */
+            }
+            if ([segment, decoded].some((part) => !part || part === "." || part === ".." || /[/\\]/.test(part)))
+                throw new Error("Invalid GitHub file path");
+        }
+        const ref = file.ref === undefined || file.ref === "" ? undefined : text(file.ref, "ref", 300);
+        params = { owner, repo, path, ...(ref ? { ref } : {}) };
+        resourceId = `${owner}/${repo}`;
+        defaultLabel = `${resourceId}/${path}`;
+    }
+    else {
+        let key = text(file.fileUrlOrKey, "Figma file", 1_000);
+        if (key.startsWith("https://")) {
+            const url = new URL(key);
+            if (!["figma.com", "www.figma.com"].includes(url.hostname) ||
+                url.username ||
+                url.password ||
+                url.port)
+                throw new Error("Invalid Figma file URL");
+            key =
+                /^\/(?:file|design|board)\/([A-Za-z0-9_-]{1,200})(?:\/|$)/.exec(url.pathname)?.[1] ?? "";
+        }
+        if (!/^[A-Za-z0-9_-]{1,200}$/.test(key))
+            throw new Error("Invalid Figma file key");
+        params = { file_url_or_key: key };
+        resourceId = key;
+        defaultLabel = `Figma · ${key}`;
+    }
+    return {
+        providerId,
+        action: capability.action,
+        scopeId: `${providerId}:${capability.action}`,
+        params,
+        resourceId,
+        label: label ?? defaultLabel.slice(-512),
+    };
+}

package/dist/index.d.ts

@@ -1,3 +1,5 @@
 export { LINK_PROVIDER_MANIFESTS, getLinkProviderManifest, localizeLinkText } from "./catalog.js";
+export { resolveLinkFileSelection } from "./file-selection.js";
+export type { LinkFileSelectionInput } from "./file-selection.js";
 export type { LinkAuthGuide, LinkAuthKind, LinkConnectionMethodManifest, LinkCliSessionAuth, LinkExecutionRuntime, LinkLocalizedText, LinkMethodAvailability, LinkPermissionGuide, LinkPermissionLevel, LinkProviderAccent, LinkProviderCategory, LinkProviderIcon, LinkProviderManifest, LinkSecretLocation, } from "./types.js";
 export type { LinkProviderView, LinkAuthMode, LinkAuthorization, LinkAuthorizationInput, LinkAuthorizationResponse, LinkAuthorizationStep, LinkCredentialFieldView, LinkResourceGroupView, LinkConnectionInput, LinkErrorCode, LinkSnapshot, MaskedLinkConnection, TokenConnectionInput, } from "./management-types.js";

package/dist/index.js

@@ -1 +1,2 @@
 export { LINK_PROVIDER_MANIFESTS, getLinkProviderManifest, localizeLinkText } from "./catalog.js";
+export { resolveLinkFileSelection } from "./file-selection.js";

package/dist/types.d.ts

@@ -82,4 +82,11 @@ export interface LinkProviderManifest {
     featured?: boolean;
     connectionMethods: LinkConnectionMethodManifest[];
     actionIds: string[];
+    /** Reviewed exact-file reads; absence means this provider cannot supply file content. */
+    fileSelection?: {
+        kind: "github-file" | "figma-file";
+        action: "get_file";
+        resourceGroup: "repositories" | "files";
+    };
+    fileSelectionLimitation?: "document-content-unavailable";
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-link",
-  "version": "0.9.40",
+  "version": "0.9.42",
   "description": "Framework-independent provider manifests and authorization guides for CodeShell Link.",
   "type": "module",
   "main": "./dist/index.js",