@d5render/cli 0.1.43 → 0.1.49

package/.skills/{review → code-review}/SKILL.md

@@ -3,7 +3,7 @@ name: code-review
 description: When the task is code-review, please follow this document to proceed the work.
 ---
 
-1. read file [review.instructions.md](./review.instructions.md).
+1. read file [code-review.instructions.md](./code-review.instructions.md).
 2. find all Markdown resumes within the project and their basic understanding of the project.
 3. integrate your understanding of code-review to process task.
 4. the merge request is only for change reference and is not the main objective of the review; therefore, it does not require in-depth analysis.

package/.skills/devops/README.md

@@ -10,7 +10,7 @@ CI MCP 的入口是 [server.ts](.\copilot\server\index.ts) 会经历一轮打包
 
 开发的一些注意点：
 
-1. [copilot.config.js](.\copilot\server\config.ts) 属于公共配置，有需要可以放这里
+1. [config.ts](.\copilot\server\config.ts) 属于公共配置，有需要可以放这里
 2. [vscode](.\vscode\index.ts) 插件的 client 需要单独开发
 3. 本地功能调试 gpt-5-mini 食用最佳🤣，效果测试建议切回当前模型（开发环境已内置）
 4. 返回 Promise 之后会丢失开发过程中的类型支持，registerTool 调用时可先不写 Promise 看 MCP Server 支持的返回参数

package/CHANGELOG.md

@@ -1,7 +1,10 @@
-2026-1-7
+### 2026-1-16
+补充安全相关检查
+
+### 2026-1-7
 代码评审 skills 更新
 
 使用内置 skills
 
-2025-12-31
+### 2025-12-31
 基础评审能力上云

package/README.md

@@ -1,3 +1,3 @@
 for devops, please refer [.skills/devops](.skills/devops)
 
-for codereview, please refer[.skills/review/SKILL.md](.skills/review/SKILL.md)
+for codereview, please refer[.skills/code-review/SKILL.md](.skills/code-review/SKILL.md)

package/bin/copilot.js

@@ -18809,7 +18809,6 @@ const getHash = "hash";
 const noMandatory = "dont't call under non-mandatory conditions";
 const file = "bin/copilot.js";
 const RUNTIME_CWD = join(dirname(fileURLToPath(import.meta.url)), "../");
-console.log("RUNTIME_CWD:", RUNTIME_CWD);
 const serveFile = join(RUNTIME_CWD, file);
 const envJson = buildEnv();
 const envUsed = {
@@ -18845,10 +18844,7 @@ const tools = [
 	"--deny-tool",
 	"github-mcp-server"
 ];
-{
-	const model = platform === "linux" ? "gemini-3-pro-preview" : "claude-sonnet-4.5";
-	tools.push("--model", model);
-}
+if (platform === "linux") tools.push("--model", "gemini-3-pro-preview");
 function toEnv(key, defaultValue) {
 	return envJson[key] || process.env[key] || defaultValue;
 }
@@ -18869,19 +18865,29 @@ function buildHeaders() {
 	else headers.set("Authorization", `Bearer ${GITLAB_TOKEN}`);
 	return headers;
 }
+function apiHost() {
+	const { CI_PROJECT_ID, CI_SERVER_URL } = envUsed;
+	if (CI_PROJECT_ID && CI_SERVER_URL) return `${CI_SERVER_URL}/api/v4/projects/${CI_PROJECT_ID}`;
+}
+function apiProject() {
+	const { CI_PROJECT_PATH, CI_SERVER_URL } = envUsed;
+	if (CI_PROJECT_PATH && CI_SERVER_URL) return `${CI_SERVER_URL}/${CI_PROJECT_PATH}`;
+}
 const pipelineMerge = () => {
-	const { CI_MERGE_REQUEST_IID, CI_PROJECT_ID, CI_SERVER_URL } = envUsed;
-	if (CI_MERGE_REQUEST_IID && CI_PROJECT_ID && CI_SERVER_URL) return `${CI_SERVER_URL}/api/v4/projects/${CI_PROJECT_ID}/merge_requests/${CI_MERGE_REQUEST_IID}`;
+	const api = apiHost();
+	const { CI_MERGE_REQUEST_IID } = envUsed;
+	if (CI_MERGE_REQUEST_IID && api) return `${api}/merge_requests/${CI_MERGE_REQUEST_IID}`;
 };
 const visitCommit = () => {
-	const { CI_PROJECT_PATH, CI_SERVER_URL } = envUsed;
-	if (CI_PROJECT_PATH && CI_SERVER_URL) return `${CI_SERVER_URL}/${CI_PROJECT_PATH}/-/commit`;
+	const api = apiProject();
+	if (api) return `${api}/-/commit`;
 };
 function visitPipeline(mid) {
-	const { CI_SERVER_URL, CI_PROJECT_PATH, CI_MERGE_REQUEST_IID = mid, CI_COMMIT_SHA } = envUsed;
-	if (!CI_SERVER_URL || !CI_PROJECT_PATH) return {};
+	const api = apiProject();
+	if (!api) return {};
+	const { CI_MERGE_REQUEST_IID = mid, CI_COMMIT_SHA } = envUsed;
 	if (CI_MERGE_REQUEST_IID) return {
-		url: `${CI_SERVER_URL}/${CI_PROJECT_PATH}/-/merge_requests/${CI_MERGE_REQUEST_IID}`,
+		url: `${api}/-/merge_requests/${CI_MERGE_REQUEST_IID}`,
 		type: "merge_request"
 	};
 	if (CI_COMMIT_SHA) return {
@@ -18891,45 +18897,29 @@ function visitPipeline(mid) {
 	return {};
 }
 const commits = () => {
-	const { CI_PROJECT_ID, CI_SERVER_URL } = envUsed;
-	if (CI_PROJECT_ID && CI_SERVER_URL) return `${CI_SERVER_URL}/api/v4/projects/${CI_PROJECT_ID}/repository/commits`;
+	const api = apiHost();
+	if (api) return `${api}/repository/commits`;
 };
 
 //#endregion
 //#region packages/gitlab/commit.ts
 const getCommits = () => {
-	const { CI_COMMIT_SHA, CI_COMMIT_BEFORE_SHA } = envUsed;
 	const url = pipelineMerge();
 	if (url) return fetch(`${url}/commits`, { headers: buildHeaders() }).then((res) => {
-		if (!res.ok) throw new Error("");
+		if (!res.ok) throw new Error("请求GitLab API失败" + res.statusText);
 		return res.json();
-	}).then((commits$1) => {
-		console.log(`[调试] 从 GitLab API 获取了 ${commits$1.length} 个提交记录`);
-		commits$1.forEach((commit, index) => {
-			console.log(`[调试] 提交记录 ${index + 1}:`, {
-				提交ID: commit.id,
-				短ID: commit.short_id,
-				标题: commit.title,
-				消息: commit.message?.substring(0, 50),
-				作者姓名: commit.author_name,
-				作者邮箱: commit.author_email,
-				提交日期: commit.authored_date,
-				提交者姓名: commit.committer_name,
-				提交者邮箱: commit.committer_email
-			});
-		});
-		return { content: [{
-			type: "text",
-			description: "commits from `merge pipeline`",
-			text: `${commits$1.map((commit) => commit.id).join(",")}, the above review is from \`merge pipeline\` commits.`
-		}] };
-	}).catch((error) => ({
+	}).then((commits$1) => ({ content: [{
+		type: "text",
+		description: "commits from `merge pipeline`",
+		text: `${commits$1.map((commit) => commit.id).join(",")}, the above review is from \`merge pipeline\` commits.`
+	}] })).catch((error) => ({
 		content: [{
 			type: "text",
-			text: "error" + error.message ? ", reason: " + error.message || "请求GitLab API失败" : ""
+			text: "error " + (error.message || "请求GitLab API失败，请检查网络连接或访问权限")
 		}],
 		isError: true
 	}));
+	const { CI_COMMIT_SHA, CI_COMMIT_BEFORE_SHA } = envUsed;
 	if (CI_COMMIT_SHA && CI_COMMIT_BEFORE_SHA) return { content: [{
 		type: "text",
 		description: "commit from push pipeline",
@@ -18985,7 +18975,8 @@ function commonHeaders() {
 const getIssue = (request) => {
 	const { key } = request;
 	const { JIRA_BASE_URL } = envUsed;
-	return fetch(`${JIRA_BASE_URL}/rest/api/latest/issue/${key}`, { headers: commonHeaders() }).then((res) => res.json()).then(({ fields = {}, key: key$1 = "" }) => {
+	return fetch(`${JIRA_BASE_URL}/rest/api/latest/issue/${key}`, { headers: commonHeaders() }).then((res) => res.json()).then((res) => {
+		const { fields = {}, key: key$1 = "" } = res;
 		const { comment = {}, description = "", summary = "", priority = {} } = fields;
 		const { comments = [] } = comment;
 		return { content: [{
@@ -19099,22 +19090,64 @@ const schemaGitlabPipeline = "gitlab_pipeline";
 const schemaGitlabCommit = "gitlab_commit";
 const schemaDingdingTalk = "dingding_talk";
 function distReports(input) {
+	const { CI_PROJECT_NAME = "", CI_COMMIT_SHA = "", JIRA_BASE_URL, CI_MERGE_REQUEST_IID, DINGTALK_WEBHOOK } = envUsed;
+	const { title = "代码审查报告", summary = [], issues = [], jiras = [], risks = [], suggestions = [] } = input;
+	const mergeURL = pipelineMerge();
+	const commitsURL = commits();
+	let gitlabReportMessage = `## 📖 ${title}\n`;
+	const commitComments = [];
+	let dingdingReportMessage = "";
 	const gitlabReport = {
 		title: schemaGitlabPipeline,
-		report: [() => Promise.resolve(void 0)]
+		report: [() => {
+			if (mergeURL) return fetch(`${mergeURL}/notes`, {
+				method: "POST",
+				headers: buildHeaders(),
+				body: JSON.stringify({ body: gitlabReportMessage })
+			}).then((res) => res.json()).then((res) => {
+				lastComment.value = res;
+			});
+			else if (commitsURL) {
+				const pipeURL = `${commitsURL}/${CI_COMMIT_SHA}`;
+				return fetch(`${pipeURL}/comments`, {
+					method: "POST",
+					headers: buildHeaders(),
+					body: JSON.stringify({
+						note: gitlabReportMessage,
+						line_type: "new"
+					})
+				}).then(() => fetch(`${pipeURL}/discussions`, {
+					method: "GET",
+					headers: buildHeaders()
+				})).then((res) => res.json()).then((res) => {
+					const { notes = [] } = res[res.length - 1] || {};
+					lastComment.value = notes[notes.length - 1] || {};
+				});
+			}
+			return Promise.resolve(void 0);
+		}]
 	};
 	const gitlabCommitReport = {
 		title: schemaGitlabCommit,
-		report: [() => Promise.resolve(void 0)]
+		report: [() => Promise.resolve()]
 	};
 	const dingdingReport = {
 		title: schemaDingdingTalk,
-		report: [() => Promise.resolve(void 0)]
+		report: [() => {
+			if (!DINGTALK_WEBHOOK) return Promise.resolve(void 0);
+			return sendding(title, dingdingReportMessage).then((response) => {
+				if (!response.ok) throw new Error(response.statusText);
+				return response.json();
+			}).then((res) => {
+				if (res.errcode === 0) return;
+				if (res.errcode === 31e4) return;
+				throw new Error("Post comments to DingTalk with error code:" + res.errcode + ", message: " + res.errmsg);
+			});
+		}]
 	};
-	const { title = "代码审查报告", summary = [], issues = [], jiras = [], risks = [], suggestions = [] } = input;
 	const result = [
-		gitlabCommitReport,
 		gitlabReport,
+		gitlabCommitReport,
 		dingdingReport
 	];
 	if (issues.length === 0 && suggestions.length === 0) {
@@ -19123,43 +19156,40 @@ function distReports(input) {
 		dingdingReport.report = [];
 		return result;
 	}
-	const { CI_PROJECT_NAME = "", CI_COMMIT_SHA = "", JIRA_BASE_URL, CI_MERGE_REQUEST_IID, DINGTALK_WEBHOOK } = envUsed;
 	const fileMap = /* @__PURE__ */ new Map();
 	const severityMap = /* @__PURE__ */ new Map();
 	const commitsSet = /* @__PURE__ */ new Set();
 	const commitsMap = /* @__PURE__ */ new Map();
-	const commitComments = [];
-	const mergeURL = pipelineMerge();
 	const linkBase = visitCommit();
-	const commitsURL = commits();
 	function distCommitComments({ file: file$1, commitSha, severity: severity$1 = "NON", line = "", details = [], suggestions: suggestions$1 = [], codeExample = "" }) {
-		if (commitSha && file$1) {
+		if (commitSha) {
 			const lines = line.split(",").map((line$1) => {
 				const str = line$1.trim().split("-");
 				const num = Number.parseInt(str[str.length - 1], 10);
 				return Number.isNaN(num) ? void 0 : num;
 			}).filter((v) => v !== void 0);
+			const attach = file$1 ? {
+				file: file$1,
+				line: lines.length > 0 ? lines[lines.length - 1] : void 0
+			} : {};
 			commitComments.push({
 				sha: commitSha,
-				file: file$1,
-				line: lines.length > 0 ? lines[lines.length - 1] : void 0,
-				note: `**${severity$1}：** ${file$1}\n\n**问题：**\n\n - ${details.join("\n - ")}\n\n-------\n\n**修正建议：**\n - ${suggestions$1.join("\n - ")}${codeExample ? `\n------\n\n**代码示例：**\n${toCode(codeExample)}\n` : ""}`
+				note: `**${severity$1}：** ${file$1}\n\n**问题：**\n\n - ${details.join("\n - ")}\n\n-------\n\n**修正建议：**\n - ${suggestions$1.join("\n - ")}${codeExample ? `\n------\n\n**代码示例：**\n${toCode(codeExample)}\n` : ""}`,
+				...attach
 			});
 		}
 	}
 	for (const issue$1 of issues) {
-		const { file: file$1 = "NON", commitSha = "", severity: severity$1 = "NON", commitSha: NCommitSha = "NON", commitAuthor = "" } = issue$1;
+		const { file: file$1 = "NON", commitSha = "", severity: severity$1 = "NON", commitSha: NCommitSha = "NON" } = issue$1;
 		const fileList = fileMap.get(file$1) || [], issueList = severityMap.get(severity$1) || [];
 		fileList.push(issue$1);
 		fileMap.set(file$1, fileList);
 		issueList.push(issue$1);
 		severityMap.set(severity$1, issueList);
-		if (commitSha || commitAuthor) console.error(`[调试] 问题提交信息 - 提交SHA: ${commitSha}, 作者: ${commitAuthor}, 文件: ${file$1}`);
 		if (commitSha) commitsSet.add(commitSha);
 		commitsMap.set(NCommitSha, issue$1);
 		distCommitComments(issue$1);
 	}
-	let gitlabReportMessage = `## 📖 ${title}\n`;
 	if (summary && summary.length > 0) gitlabReportMessage += `> ${summary.join("  \n> ")}\n\n`;
 	if (risks.length > 0) gitlabReportMessage += "\n**📋 主要风险**\n - " + risks.join("\n - ");
 	if (fileMap.size > 0 || commitsSet.size > 0) {
@@ -19192,19 +19222,15 @@ function distReports(input) {
 		}
 		gitlabReportMessage += withNoFile + withFile;
 	}
-	let dingdingReportMessage = "";
+	const { url, type } = visitPipeline();
 	if (DINGTALK_WEBHOOK) {
 		dingdingReportMessage = `### 📖 ${title}\n\n**共计**：${issues.length}个问题\n\n${risks.length > 0 ? "**主要风险**：\n\n" + risks.join("\n\n") + "\n\n" : "\n\n"}-----\n\n**项目名**：${CI_PROJECT_NAME}`;
-		const { url, type } = visitPipeline();
 		if (type) {
 			const { value = {} } = lastComment;
 			let { id: note = "" } = value || {};
 			note = note ? `#note_${note}` : "";
-			dingdingReportMessage += `${type === "merge_request" ? `
-
-**合并**：[${CI_MERGE_REQUEST_IID}](${url}${note})` : `
-
-**提交**：[${CI_COMMIT_SHA.slice(0, 8)}](${url})`}`;
+			const commit = note ? "&评论" : "";
+			dingdingReportMessage += `${type === "merge_request" ? `\n\n**合并${commit}**：[${CI_MERGE_REQUEST_IID}](${url}${note})` : `\n\n**提交${commit}**：[${CI_COMMIT_SHA.slice(0, 8)}](${url}${note})`}`;
 		}
 		dingdingReportMessage += `\n\n含问题的commits：${[...commitsMap.keys()].map((v) => `[${v.slice(0, 8)}](${linkBase}/${v})`).join(", ")}\n\n-----\n`;
 		dingdingReportMessage += "\n#### 🐞 问题列表\n";
@@ -19219,7 +19245,6 @@ function distReports(input) {
 					break;
 				}
 				const { title: issueTitle = "NON", commitSha = "", file: file$1 = "NON", line = "NON", commitAuthor = "" } = issue$1;
-				console.error(`[调试] 在钉钉报告中使用作者信息 - 提交SHA: ${commitSha}, 作者: ${commitAuthor}, 标题: ${issueTitle}`);
 				const shortSha = (commitSha || "").slice(0, 8);
 				const commitLink = linkBase && commitSha ? `${linkBase}/${commitSha}` : void 0;
 				dingdingReportMessage += `\n- ${issueTitle}\n\n   - hash: ${commitLink ? `[${shortSha}](${commitLink}) ` : shortSha}\n\n   - author: ${commitAuthor}\n\n   - file: ${file$1}\n\n   - line: ${line}`;
@@ -19228,40 +19253,23 @@ function distReports(input) {
 		}
 		if (jiras.length > 0) dingdingReportMessage += `\n\n\n\n#### 🔗 关联 JIRA\n ${jiras.map((v) => `[${v.key}](${JIRA_BASE_URL}/browse/${v.key}): ${v.summary}`).join("\n\n")}`;
 	}
-	gitlabCommitReport.report = commitsURL ? commitComments.map(({ sha, file: file$1, line, note }) => () => fetch(`${commitsURL}/${sha}/comments`, {
-		method: "POST",
-		headers: buildHeaders(),
-		body: JSON.stringify({
-			note,
-			path: file$1,
-			line,
-			line_type: "new"
-		})
-	})) : [];
-	gitlabReport.report = mergeURL ? [() => fetch(mergeURL + `/notes`, {
-		method: "POST",
-		headers: buildHeaders(),
-		body: JSON.stringify({ body: gitlabReportMessage })
-	}).then((res) => res.json()).then((res) => {
-		lastComment.value = res;
-	})] : CI_COMMIT_SHA ? [() => fetch(`${commitsURL}/${CI_COMMIT_SHA}/comments`, {
-		method: "POST",
-		headers: buildHeaders(),
-		body: JSON.stringify({
-			note: gitlabReportMessage,
-			line_type: "new"
-		})
-	}).then((res) => res.json()).then((res) => {
-		lastComment.value = res;
-	})] : [() => Promise.reject(/* @__PURE__ */ new Error("⚠️ 报告内容已生成但未发布。"))];
-	dingdingReport.report = DINGTALK_WEBHOOK ? [() => sendding(title, dingdingReportMessage).then((response) => {
-		if (!response.ok) throw new Error(response.statusText);
-		return response.json();
-	}).then((res) => {
-		if (res.errcode === 0) return;
-		if (res.errcode === 31e4) return;
-		throw new Error("Post comments to DingTalk with error code:" + res.errcode + ", message: " + res.errmsg);
-	})] : [];
+	if (commitsURL) gitlabCommitReport.report = commitComments.map(({ sha, file: file$1, line, note }) => () => {
+		const { value = {} } = lastComment;
+		let { id = "" } = value || {};
+		if (id) note += `
+
+[**完整评论请查看**](${url}#note_${id})`;
+		return fetch(`${commitsURL}/${sha}/comments`, {
+			method: "POST",
+			headers: buildHeaders(),
+			body: JSON.stringify({
+				note,
+				path: file$1,
+				line,
+				line_type: "new"
+			})
+		});
+	});
 	return result;
 }
 async function runReport(input) {

package/bin/d5cli

@@ -2,7 +2,7 @@
 import { execSync, spawn } from "node:child_process";
 import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { argv, env, exit, platform } from "node:process";
+import { argv, env, platform } from "node:process";
 import { fileURLToPath } from "node:url";
 
 //#region copilot/server/config.ts
@@ -11,7 +11,6 @@ const report = "report";
 const getHash = "hash";
 const file = "bin/copilot.js";
 const RUNTIME_CWD = join(dirname(fileURLToPath(import.meta.url)), "../");
-console.log("RUNTIME_CWD:", RUNTIME_CWD);
 const serveFile = join(RUNTIME_CWD, file);
 const envJson = buildEnv();
 const envUsed = {
@@ -47,10 +46,7 @@ const tools = [
 	"--deny-tool",
 	"github-mcp-server"
 ];
-{
-	const model = platform === "linux" ? "gemini-3-pro-preview" : "claude-sonnet-4.5";
-	tools.push("--model", model);
-}
+if (platform === "linux") tools.push("--model", "gemini-3-pro-preview");
 function toEnv(key, defaultValue) {
 	return envJson[key] || process.env[key] || defaultValue;
 }
@@ -112,7 +108,7 @@ function installCopilot() {
 //#endregion
 //#region package.json
 var name = "@d5render/cli";
-var version = "0.1.43";
+var version = "0.1.49";
 
 //#endregion
 //#region packages/gitlab/url.ts
@@ -124,15 +120,24 @@ function buildHeaders() {
 	else headers.set("Authorization", `Bearer ${GITLAB_TOKEN}`);
 	return headers;
 }
-const visitCommit = () => {
+function apiHost() {
+	const { CI_PROJECT_ID, CI_SERVER_URL } = envUsed;
+	if (CI_PROJECT_ID && CI_SERVER_URL) return `${CI_SERVER_URL}/api/v4/projects/${CI_PROJECT_ID}`;
+}
+function apiProject() {
 	const { CI_PROJECT_PATH, CI_SERVER_URL } = envUsed;
-	if (CI_PROJECT_PATH && CI_SERVER_URL) return `${CI_SERVER_URL}/${CI_PROJECT_PATH}/-/commit`;
+	if (CI_PROJECT_PATH && CI_SERVER_URL) return `${CI_SERVER_URL}/${CI_PROJECT_PATH}`;
+}
+const visitCommit = () => {
+	const api = apiProject();
+	if (api) return `${api}/-/commit`;
 };
 function visitPipeline(mid) {
-	const { CI_SERVER_URL, CI_PROJECT_PATH, CI_MERGE_REQUEST_IID = mid, CI_COMMIT_SHA } = envUsed;
-	if (!CI_SERVER_URL || !CI_PROJECT_PATH) return {};
+	const api = apiProject();
+	if (!api) return {};
+	const { CI_MERGE_REQUEST_IID = mid, CI_COMMIT_SHA } = envUsed;
 	if (CI_MERGE_REQUEST_IID) return {
-		url: `${CI_SERVER_URL}/${CI_PROJECT_PATH}/-/merge_requests/${CI_MERGE_REQUEST_IID}`,
+		url: `${api}/-/merge_requests/${CI_MERGE_REQUEST_IID}`,
 		type: "merge_request"
 	};
 	if (CI_COMMIT_SHA) return {
@@ -142,8 +147,8 @@ function visitPipeline(mid) {
 	return {};
 }
 const commits = () => {
-	const { CI_PROJECT_ID, CI_SERVER_URL } = envUsed;
-	if (CI_PROJECT_ID && CI_SERVER_URL) return `${CI_SERVER_URL}/api/v4/projects/${CI_PROJECT_ID}/repository/commits`;
+	const api = apiHost();
+	if (api) return `${api}/repository/commits`;
 };
 
 //#endregion
@@ -173,8 +178,6 @@ async function sendding(title, text) {
 //#region copilot/bin/utils.ts
 const NAME = name.replaceAll("/", "_");
 const VERSION = version;
-const HOME = env.USERPROFILE ?? env.HOME ?? env.HOMEPATH;
-if (!HOME) throw new Error("cannot find `USERPROFILE` directory");
 const TEMP = env.CI_PROJECT_DIR + "." + NAME;
 const dingding = async (...args) => {
 	try {
@@ -186,25 +189,30 @@ const dingding = async (...args) => {
 };
 async function deploy() {
 	if (!env.CI) return;
-	const config = join(HOME, ".copilot/config.json"), dir = join(HOME, ".copilot/skills/codereview");
+	const HOME = env.USERPROFILE ?? env.HOME ?? env.HOMEPATH;
+	if (!HOME) throw new Error("cannot find `USERPROFILE` directory");
+	const config = join(HOME, ".copilot/config.json"), dir = join(HOME, ".copilot/skills/code-review");
 	console.log("deploy...");
 	if (existsSync(config)) {
 		rmSync(config);
 		console.log("removed config cache.");
 	}
 	if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
-	const versiono = readFileSync(join(RUNTIME_CWD, ".skills/review/version"), "utf8");
 	const changelog = readFileSync(join(RUNTIME_CWD, "CHANGELOG.md"), "utf8");
-	const cachepath = join(TEMP, "CHANGELOG");
+	const cachepath = join(TEMP, "CHANGELOG-" + env.CI_RUNNER_ID || "0");
 	if (changelog !== (existsSync(cachepath) ? readFileSync(cachepath, "utf8") : "")) {
 		if (!existsSync(TEMP)) mkdirSync(TEMP, { recursive: true });
 		writeFileSync(cachepath, changelog, "utf8");
 		console.log("updated CHANGELOG cache.");
-		await dingding("NOTICE", `codereview skills has been updated to version ${versiono}\n\nfor more details, please refer to [ONLINE](https://www.npmjs.com/package/@d5render/cli?activeTab=readme)`);
+		await dingding("NOTICE", `code-review/SKILL.md 更新到${VERSION}\n\n请参考[线上文档内容](https://www.npmjs.com/package/@d5render/cli?activeTab=readme)`);
 	}
 	const versionnPath = join(dir, "version");
-	if ((existsSync(versionnPath) ? readFileSync(versionnPath, "utf8") : "") === versiono) return;
-	const skillRoot = join(RUNTIME_CWD, ".skills/review");
+	if ((existsSync(versionnPath) ? readFileSync(versionnPath, "utf8") : "") === VERSION) return;
+	if (existsSync(dir)) rmSync(dir, {
+		recursive: true,
+		force: true
+	});
+	const skillRoot = join(RUNTIME_CWD, ".skills/code-review");
 	readdirSync(skillRoot).forEach((skill) => copyFileSync(join(skillRoot, skill), join(dir, skill)));
 	const instructionsRoot = join(RUNTIME_CWD, ".github/instructions");
 	readdirSync(instructionsRoot).forEach((instruction) => copyFileSync(join(instructionsRoot, instruction), join(dir, instruction)));
@@ -250,12 +258,10 @@ async function need() {
 
 //#endregion
 //#region copilot/bin/index.ts
-try {
-	codereview();
-} catch (error) {
+codereview().catch((error) => {
 	dingding("CRITICAL", "CI ERROR: 未知错误，请自行检查日志");
 	throw error;
-}
+});
 async function codereview() {
 	await deploy();
 	if (!await need()) {
@@ -281,29 +287,20 @@ Otherwise, use chinese as default language to call the mcp tool '${name$1}-${rep
 		],
 		...platform === "win32" && { windowsHide: true }
 	});
-	copilot.stdout.on("data", (chunk) => console.log("Stdout:" + String(chunk)));
-	copilot.stderr.on("data", (chunk) => console.error("Stderr:" + String(chunk)));
-	copilot.on("close", (code) => {
-		if (!code) dingding("CRITICAL", "CI ERROR: 代码审查任务失败，请自行检查日志");
-		exit(code);
+	copilot.stdout.on("data", (chunk) => console.log(String(chunk)));
+	copilot.stderr.on("data", (chunk) => console.error(String(chunk)));
+	return new Promise((res, rej) => {
+		copilot.on("close", (code) => {
+			if (!code) rej(/* @__PURE__ */ new Error("CI ERROR: 代码审查任务失败，请自行检查日志"));
+			else res();
+		});
 	});
 }
-/**
-* 根据操作系统和架构获取对应的 copilot 包名
-*/
-function getCopilotPackageName() {
-	return "@github/copilot";
-}
 function findCopilopt() {
-	const platformPackage = getCopilotPackageName();
 	let copilot = "";
 	try {
-		copilot = execSync(`npm list ${platformPackage} -g -p`).toString().trim();
-	} catch {
-		try {
-			copilot = execSync("npm list @github/copilot -g -p").toString().trim();
-		} catch {}
-	}
+		copilot = execSync("npm list @github/copilot -g -p").toString().trim();
+	} catch {}
 	if (!copilot) {
 		const first = platform === "win32" ? win : linux;
 		const second = platform === "win32" ? linux : win;
@@ -314,7 +311,7 @@ function findCopilopt() {
 	const pkg = join(copilot, "package.json");
 	if (!existsSync(pkg)) throw new Error("安装的包找不到正确版本 " + pkg);
 	const copilotPackage = JSON.parse(readFileSync(pkg, "utf8"));
-	const binPath = typeof copilotPackage.bin === "string" ? copilotPackage.bin : copilotPackage.bin?.copilot || copilotPackage.bin?.[platformPackage] || copilotPackage.bin?.["@github/copilot"];
+	const binPath = typeof copilotPackage.bin === "string" ? copilotPackage.bin : copilotPackage.bin?.copilot || copilotPackage.bin?.["@github/copilot"];
 	if (!binPath) throw new Error("non copilot executable found");
 	const copilotVersion = copilotPackage.version || "unknown";
 	const copilotPath = join(copilot, binPath);
@@ -331,9 +328,7 @@ function win() {
 	const pathSeparator = platform === "win32" ? ";" : ":";
 	const npm = pathEnv.split(pathSeparator).find((p) => p.includes("npm"));
 	if (!npm) return "";
-	const packagePath = join(npm, "node_modules", ...getCopilotPackageName().split("/"));
-	if (existsSync(join(packagePath, "package.json"))) return packagePath;
-	const fallbackPath = join(npm, "node_modules", "@github", "copilot");
+	const fallbackPath = join(npm, "node_modules", "@github/copilot");
 	if (existsSync(join(fallbackPath, "package.json"))) return fallbackPath;
 	return "";
 }
@@ -346,10 +341,7 @@ function linux() {
 		if (npm) cached = npm;
 	}
 	if (!cached) return "";
-	const platformPackage = getCopilotPackageName();
-	const packagePath = join(cached, "..", "lib", "node_modules", ...platformPackage.split("/"));
-	if (existsSync(join(packagePath, "package.json"))) return packagePath;
-	const fallbackPath = join(cached, "..", "lib", "node_modules", "@github", "copilot");
+	const fallbackPath = join(cached, "..", "lib", "node_modules", "@github/copilot");
 	if (existsSync(join(fallbackPath, "package.json"))) return fallbackPath;
 	return "";
 }

package/package.json

@@ -4,22 +4,24 @@
   "license": "MIT",
   "author": "jasirou",
   "main": "./bin/d5cli",
-  "version": "0.1.43",
+  "version": "0.1.49",
   "devDependencies": {
     "@modelcontextprotocol/sdk": "^1.25.1",
     "@types/node": "^25.0.3",
     "@types/vscode": "^1.107.0",
     "@vscode/vsce": "^3.7.1",
+    "json5": "^2.2.3",
     "oxfmt": "^0.21.0",
     "oxlint": "^1.37.0",
     "rolldown": "1.0.0-beta.58",
+    "vitest": "^4.0.17",
     "zod": "^4.3.5"
   },
   "files": [
-    ".github/instructions/review.instructions.md",
+    ".github/instructions/code-review.instructions.md",
     ".github/instructions/severity.instructions.md",
     ".skills/devops",
-    ".skills/review",
+    ".skills/code-review",
     "bin/copilot.js",
     "bin/d5cli",
     "CHANGELOG.md"

package/.skills/review/version

@@ -1 +0,0 @@
-0.0.1