@clack-platform/cli 0.3.1 → 0.3.2

package/dist/cli.js

@@ -28,6 +28,31 @@ var CliError = class extends Error {
     return 1;
   }
 };
+function describeDetails(details) {
+  if (!details || typeof details !== "object" || Array.isArray(details)) return [];
+  const d = details;
+  const text = (v) => typeof v === "string" && v ? v.replace(/[\p{C}]/gu, "").slice(0, 160) : typeof v === "number" || typeof v === "boolean" ? String(v) : void 0;
+  const lines = [];
+  const reason = text(d.reason);
+  if (reason) lines.push(`\uC0AC\uC720: ${reason}`);
+  const file = text(d.file);
+  if (file) lines.push(`\uD30C\uC77C: ${file}`);
+  if (Array.isArray(d.issues)) {
+    for (const issue of d.issues.slice(0, 5)) {
+      if (!issue || typeof issue !== "object") continue;
+      const i = issue;
+      const parts = [["\uD30C\uC77C", i.file], ["\uC704\uCE58", i.pointer], ["\uADDC\uCE59", i.rule], ["\uAC12", i.param]].flatMap(([label, v]) => {
+        const t = text(v);
+        return t ? [`${label}=${t}`] : [];
+      });
+      if (parts.length) lines.push(`\uBB38\uC81C: ${parts.join(" ")}`);
+    }
+  }
+  const expected = text(d.expected);
+  const actual = text(d.actual);
+  if (expected !== void 0 || actual !== void 0) lines.push(`\uAE30\uB300: ${expected ?? "-"} / \uC2E4\uC81C: ${actual ?? "-"}`);
+  return lines;
+}
 function apiError(status, body, retryAfter) {
   const value2 = body && typeof body === "object" ? body : {};
   const code = typeof value2.code === "string" ? value2.code : `HTTP_${status}`;
@@ -47,6 +72,9 @@ function apiError(status, body, retryAfter) {
   if (code === "CONTENT_METADATA_EXTRAS_DISABLED") message += " \uC774 \uD658\uACBD\uC5D0\uC11C\uB294 \uC5B8\uC5B4\uBCC4 \uBA54\uD0C0\uB370\uC774\uD130\xB7\uD0DC\uADF8\uB97C \uC544\uC9C1 \uC4F8 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.";
   if (status === 423 || code === "USER_BANNED") message += " \uACC4\uC815 \uC81C\uD55C \uC0C1\uD0DC\uB97C \uC571\uC5D0\uC11C \uD655\uC778\uD558\uC138\uC694.";
   if (status === 503 && code.endsWith("DISABLED")) message += " \uD604\uC7AC \uC678\uBD80 \uB3C4\uAD6C \uC811\uADFC\uC774 \uC77C\uC2DC \uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4.";
+  const located = describeDetails(value2.details);
+  if (located.length) message += `
+${located.map((line) => `  ${line}`).join("\n")}`;
   const raw = Number(value2.retry_after ?? retryAfter);
   const retry = Number.isFinite(raw) && raw > 0 ? Math.ceil(raw) : void 0;
   return new CliError(message, code, status, retry);
@@ -156,7 +184,7 @@ function redact(value2) {
 // package.json
 var package_default = {
   name: "@clack-platform/cli",
-  version: "0.3.1",
+  version: "0.3.2",
   description: "\uD074\uB799 \uACC4\uC815\uC758 \uC0C1\uD488\xB7\uCF58\uD150\uCE20\xB7\uD504\uB85C\uD544\uC744 \uAD00\uB9AC\uD558\uB294 CLI",
   type: "module",
   bin: {
@@ -2477,6 +2505,16 @@ function inspectIntroSemantics(skill, form, slots, fail2) {
     if (!field2 || field2["x-clack-visibility"] !== "public") fail2(`/output/intro/${key}`, "\uACF5\uAC1C \uBB38\uC790\uC5F4(text\xB7textarea) \uD3FC \uD544\uB4DC\uB97C \uAC00\uB9AC\uCF1C\uC57C \uD569\uB2C8\uB2E4.");
     else if (field2.maxLength > max) fail2(`/output/intro/${key}`, `\uAC00\uB9AC\uD0A4\uB294 \uD3FC \uD544\uB4DC\uC758 \uCD5C\uB300 \uAE38\uC774\uAC00 ${max}\uC790 \uC774\uD558\uC5EC\uC57C \uD569\uB2C8\uB2E4.`);
   }
+  let sectionLength = 0;
+  for (const [key, name2] of Object.entries(intro.sections ?? {})) {
+    const field2 = textField(name2);
+    if (!field2 || field2["x-clack-visibility"] !== "public") fail2(`/output/intro/sections/${key}`, "\uC18C\uAC1C \uC139\uC158\uC740 \uACF5\uAC1C \uBB38\uC790\uC5F4(text\xB7textarea) \uD3FC \uD544\uB4DC\uB9CC \uAC00\uB9AC\uD0AC \uC218 \uC788\uC2B5\uB2C8\uB2E4.");
+    else {
+      if (field2.maxLength > 2e3) fail2(`/output/intro/sections/${key}`, "\uC18C\uAC1C \uC139\uC158\uC758 \uCD5C\uB300 \uAE38\uC774\uB294 2,000\uC790\uC785\uB2C8\uB2E4.");
+      sectionLength += field2.maxLength;
+    }
+  }
+  if (sectionLength > 6e3) fail2("/output/intro/sections", "\uC18C\uAC1C \uC139\uC158\uC758 \uCD5C\uB300 \uAE38\uC774 \uD569\uACC4\uB294 6,000\uC790\uC785\uB2C8\uB2E4.");
   const fallback = intro.description_fallback ?? [];
   let composed = 0;
   for (const name2 of fallback) {
@@ -3831,6 +3869,37 @@ var clack_skill_v1_schema_default = {
               minItems: 1,
               maxItems: 8,
               uniqueItems: true
+            },
+            sections: {
+              type: "object",
+              additionalProperties: false,
+              description: "\uACF5\uAC1C \uBB38\uC790\uC5F4 \uD3FC \uD544\uB4DC\uB97C \uC18C\uAC1C \uC139\uC158\uC5D0 \uB9E4\uD551\uD569\uB2C8\uB2E4. \uD56D\uBAA9\uBCC4 \uCD5C\uB300 2,000\uC790, \uC120\uC5B8\uB41C \uD544\uB4DC \uCD5C\uB300 \uAE38\uC774 \uD569\uACC4 6,000\uC790\uC785\uB2C8\uB2E4.",
+              properties: {
+                how_to: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                },
+                notice: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                },
+                character: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                },
+                setting: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                },
+                relationship: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                },
+                first_scene: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                }
+              }
             }
           }
         }
@@ -5135,6 +5204,7 @@ var clack_content_v1_schema_default = {
 var MAX_ZIP = 10 * 1024 * 1024;
 var MAX_EXPANDED = 30 * 1024 * 1024;
 var MAX_FILES2 = 500;
+var MAX_ZIP_ENTRIES = 2e3;
 var textDecoder2 = new TextDecoder("utf-8", { fatal: true });
 var ajv = new Ajv20202({ allErrors: true, strict: false });
 ajv.addSchema(clack_content_v1_schema_default);
@@ -5179,6 +5249,14 @@ function skillPathAllowed(path) {
   if (parts.includes("scripts") || /\.(?:sh|bash|zsh|fish|bat|cmd|ps1|exe|dll|so|dylib|wasm|py|rb|php|jar)$/i.test(path)) return false;
   return true;
 }
+function isArchiveMetadata(path) {
+  const parts = path.split("/");
+  const name2 = parts.at(-1) ?? "";
+  return parts[0] === "__MACOSX" || name2 === ".DS_Store" || name2.startsWith("._");
+}
+function unsafeArchivePath(path) {
+  return path.startsWith("/") || /[\p{Cc}]/u.test(path) || path.split("/").includes("..");
+}
 async function collectFiles(directory) {
   const files = {};
   let totalBytes = 0;
@@ -5186,6 +5264,7 @@ async function collectFiles(directory) {
     const entries = await readdir(join2(directory, relative), { withFileTypes: true });
     for (const entry of entries.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0)) {
       const path = relative ? `${relative}/${entry.name}` : entry.name;
+      if (isArchiveMetadata(path)) continue;
       if (!skillPathAllowed(path)) invalid2(`\uD5C8\uC6A9\uB418\uC9C0 \uC54A\uB294 \uD328\uD0A4\uC9C0 \uACBD\uB85C: ${path}`);
       if (entry.isSymbolicLink() || !(entry.isDirectory() || entry.isFile())) invalid2(`\uC77C\uBC18 \uD30C\uC77C\xB7\uD3F4\uB354\uB9CC \uD5C8\uC6A9\uB429\uB2C8\uB2E4: ${path}`);
       if (entry.isDirectory()) {
@@ -5204,22 +5283,47 @@ async function collectFiles(directory) {
 }
 function inspectZip(bytes2, expectedDirectory, hashMismatch) {
   if (!bytes2.length || bytes2.length > MAX_ZIP) invalid2("\uC2A4\uD0AC ZIP\uC740 \uBE44\uC5B4 \uC788\uC9C0 \uC54A\uC740 10 MiB \uC774\uD558 \uD30C\uC77C\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.");
+  const raw = [];
+  try {
+    unzipSync2(bytes2, { filter(entry) {
+      if (raw.length >= MAX_ZIP_ENTRIES) invalid2("ZIP \uD56D\uBAA9 \uC218\uAC00 2,000\uAC1C\uB97C \uCD08\uACFC\uD588\uC2B5\uB2C8\uB2E4.");
+      const dir = entry.name.endsWith("/");
+      raw.push({ name: dir ? entry.name.slice(0, -1) : entry.name, dir });
+      return false;
+    } });
+  } catch (error2) {
+    if (error2 instanceof CliError) throw error2;
+    return invalid2("ZIP \uAD6C\uC870\uB97C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+  }
+  for (const { name: name2 } of raw) if (unsafeArchivePath(name2)) invalid2(`\uD5C8\uC6A9\uB418\uC9C0 \uC54A\uB294 ZIP \uACBD\uB85C: ${name2.replace(new RegExp("\\p{C}", "gu"), "").slice(0, 160)}`);
+  const kept = raw.filter(({ name: name2 }) => !isArchiveMetadata(name2));
+  const keptFiles = kept.filter(({ dir }) => !dir);
+  if (keptFiles.length > MAX_FILES2) invalid2("\uC2A4\uD0AC \uD30C\uC77C \uC218\uAC00 500\uAC1C\uB97C \uCD08\uACFC\uD588\uC2B5\uB2C8\uB2E4.");
+  let prefix = "";
+  const top = keptFiles[0]?.name.split("/")[0];
+  if (top && keptFiles.every(({ name: name2 }) => name2.startsWith(`${top}/`))) {
+    const names = new Set(keptFiles.map(({ name: name2 }) => name2));
+    if (names.has(`${top}/SKILL.md`) && names.has(`${top}/clack.skill.json`)) prefix = `${top}/`;
+  }
   const seen = /* @__PURE__ */ new Set();
-  let entries = 0;
+  const wanted = /* @__PURE__ */ new Map();
+  for (const { name: name2, dir } of kept) {
+    if (dir && prefix && name2 === prefix.slice(0, -1)) continue;
+    const path = prefix && name2.startsWith(prefix) ? name2.slice(prefix.length) : name2;
+    if (!skillPathAllowed(path) || seen.has(path.toLowerCase())) invalid2(`\uD5C8\uC6A9\uB418\uC9C0 \uC54A\uB294 ZIP \uACBD\uB85C: ${path}`);
+    seen.add(path.toLowerCase());
+    if (!dir) wanted.set(name2, path);
+  }
   let totalBytes = 0;
-  let extracted;
+  const extracted = {};
   try {
-    extracted = unzipSync2(bytes2, { filter(entry) {
-      entries++;
-      if (entries > MAX_FILES2) invalid2("\uC2A4\uD0AC \uD30C\uC77C \uC218\uAC00 500\uAC1C\uB97C \uCD08\uACFC\uD588\uC2B5\uB2C8\uB2E4.");
-      const path = entry.name.endsWith("/") ? entry.name.slice(0, -1) : entry.name;
-      if (!skillPathAllowed(path) || seen.has(path.toLowerCase())) invalid2(`\uD5C8\uC6A9\uB418\uC9C0 \uC54A\uB294 ZIP \uACBD\uB85C: ${path}`);
-      seen.add(path.toLowerCase());
-      if (entry.name.endsWith("/")) return false;
+    const content = unzipSync2(bytes2, { filter(entry) {
+      if (!wanted.has(entry.name)) return false;
       totalBytes += entry.originalSize;
       if (totalBytes > MAX_EXPANDED) invalid2("\uC2A4\uD0AC \uC555\uCD95 \uD574\uC81C \uC6A9\uB7C9\uC774 30 MiB\uB97C \uCD08\uACFC\uD588\uC2B5\uB2C8\uB2E4.");
       return true;
     } });
+    for (const [name2, data] of Object.entries(content)) extracted[wanted.get(name2)] = data;
   } catch (error2) {
     if (error2 instanceof CliError) throw error2;
     return invalid2("ZIP \uAD6C\uC870\uB97C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
@@ -5462,11 +5566,12 @@ async function pushSkillVersion(client, prepared, skillId) {
     if (error2 instanceof CliError && error2.code === "SKILL_VERSION_MAJOR_REQUIRED") {
       throw new CliError(`${error2.message} (\uCDE8\uC18C: clack skill cancel ${resolvedSkillId} ${session2.version_id})`, error2.code, error2.status);
     }
-    if (error2 instanceof CliError) throw new CliError(
-      `${error2.message} \uC644\uB8CC \uC7AC\uC2DC\uB3C4: clack skill complete ${resolvedSkillId} ${session2.version_id}`,
-      error2.code,
-      error2.status
-    );
+    if (error2 instanceof CliError) {
+      const judged = error2.status >= 400 && error2.status < 500 && error2.status !== 429;
+      const hint = judged ? "\uD328\uD0A4\uC9C0\uB97C \uACE0\uCE5C \uB4A4 \uAC19\uC740 \uBC84\uC804\uC73C\uB85C \uB2E4\uC2DC clack skill push\uD558\uC138\uC694." : `\uC644\uB8CC \uC7AC\uC2DC\uB3C4: clack skill complete ${resolvedSkillId} ${session2.version_id}`;
+      throw new CliError(`${error2.message}
+${hint}`, error2.code, error2.status, error2.retryAfter);
+    }
     throw error2;
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clack-platform/cli",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "클랙 계정의 상품·콘텐츠·프로필을 관리하는 CLI",
   "type": "module",
   "bin": {