@follenfang/fupload 0.0.21 → 0.0.23

package/fupload/SKILL.md

@@ -2,7 +2,7 @@
 name: fupload
 description: Explicit author-publishing workflow for World of Warcraft plugins, configuration shares, and WA/strings on NewBeeBox, NetEase DD, CurseForge, Heybox Workshop, and ModUs.Creator, including local Creator login reuse and plugin ZIP publishing. Use only when the user explicitly invokes `$fupload`, explicitly asks to use the Fupload Skill, or loads this Skill by path. Do not trigger from ordinary mentions of publishing, NewBeeBox, DD, CurseForge, Heybox, ModUs, plugins, configurations, or WA.
 metadata:
-  version: "0.0.21"
+  version: "0.0.23"
 ---
 
 # Fupload

package/fupload/references/modus.md

@@ -136,7 +136,7 @@ PUT are separate stages.
 | `zip_size` | `zipSize` | non-negative integer | derived | local ZIP stat | must describe exact ZIP | metadata create/update | `zipSize` |
 | `unzip_size` | `unzipSize` | non-negative integer | derived | ZIP central directory | bounded by ZIP preflight | metadata create/update | `unzipSize` |
 | `path` | `path` | string, max 500 | metadata optional | Creator/object response | local path is never binary upload | metadata create/update | `path` |
-| `toc_version` | `tocVersion` | string, max 80 | derived | every ZIP `.toc` `Interface` | incompatible/missing/mixed values fail before write | metadata create/update | `tocVersion` |
+| `toc_version` | `tocVersion` | string, max 80 | derived | each addon `.toc` `Interface`; TOCs under a `Libs` directory are ignored | incompatible/missing/mixed addon values fail before write | metadata create/update | `tocVersion` |
 | `changelog` | `changelog` | string/null, max 10000 | optional | free text | omitted/empty behavior is action-specific | metadata create/update | `changelog` |
 | `file` | not in JSON; raw bytes | local path | create/upload required | local filesystem | valid ZIP, max 200 MiB; bytes PUT only after metadata/signature | signed URL from `GET .../upload/signature/{projectId}/{fileId}`, then HTTP `PUT` | object upload status plus release detail hashes/sizes |
 | `transaction_log` | not sent | local path string | optional | caller | redacted durable stage record | local record only | transaction JSON |
@@ -147,9 +147,9 @@ binary upload stages that ran; failed records include `failed_stage`, a redacted
 error, and whether the ZIP was retained. The transaction record is established
 before file-ID allocation and ZIP preflight, so those early failures are also
 durable. Binary-upload errors expose only a query-free endpoint identifier,
-status when available, and a bounded redacted response summary. The provider parses every ZIP `.toc`
+status when available, and a bounded redacted response summary. The provider parses each addon `.toc`
 `Interface` value to derive
-`toc_version` and `supported_game_versions`; explicit caller values must match.
+`toc_version` and `supported_game_versions`, and ignores TOCs under a `Libs` directory. Explicit caller values must match.
 The provider validates the ZIP, computes `md5`, `zip_size`, and `unzip_size`,
 registers metadata, obtains a signed URL, then uploads the ZIP bytes with HTTP
 `PUT` and `Content-Type: application/zip`. A local path is metadata only; it is

package/fupload/scripts/fupload_cli/__init__.py

@@ -1,3 +1,3 @@
 """Fupload Python CLI."""
 
-__version__ = "0.0.21"
+__version__ = "0.0.23"

package/fupload/scripts/fupload_cli/dd.py

@@ -1486,13 +1486,15 @@ def plugin_form(
         if isinstance(author_value, Mapping) and isinstance(author_value.get("latest_version"), dict)
         else {}
     )
-    # Official detail dialog projection followed by the editor's pick list.
+    # The author list is the live publication projection. DD detail_v2 can
+    # retain an older latest_version, so an available author-list value wins
+    # over detail for the version/package fields used to rebuild modify form.
     source = {name: copy.deepcopy(value[name]) for name in PLUGIN_FIELDS if name in value}
     for name in ("detail_url", "release_type", "version"):
         latest_name = {"detail_url": "file_path"}.get(name, name)
-        projected = latest.get(latest_name)
+        projected = author_latest.get(latest_name)
         if projected is None:
-            projected = author_latest.get(latest_name)
+            projected = latest.get(latest_name)
         if projected is None:
             source.pop(name, None)
         else:
@@ -1517,22 +1519,29 @@ def plugin_form(
     return form
 
 
-def plugin_version_projection(value: Mapping[str, Any]) -> Dict[str, Any]:
+def plugin_version_projection(
+    value: Mapping[str, Any], author_value: Optional[Mapping[str, Any]] = None,
+) -> Dict[str, Any]:
     """Project version fields for readback without feeding them into modify."""
     latest = value.get("latest_version") if isinstance(value.get("latest_version"), dict) else {}
+    author_latest = (
+        author_value.get("latest_version")
+        if isinstance(author_value, Mapping) and isinstance(author_value.get("latest_version"), dict)
+        else {}
+    )
     projection: Dict[str, Any] = {}
     sources = {
-        "game_versions": (latest, "game_versions", value, "game_versions"),
-        "detail_url": (latest, "file_path", value, "detail_url"),
-        "release_type": (latest, "release_type", value, "release_type"),
-        "version": (latest, "version", value, "version"),
-        "update_desc": (latest, "update_desc", value, "update_desc"),
+        "game_versions": ((author_latest, "game_versions"), (latest, "game_versions"), (value, "game_versions")),
+        "detail_url": ((author_latest, "file_path"), (latest, "file_path"), (value, "detail_url")),
+        "release_type": ((author_latest, "release_type"), (latest, "release_type"), (value, "release_type")),
+        "version": ((author_latest, "version"), (latest, "version"), (value, "version")),
+        "update_desc": ((author_latest, "update_desc"), (latest, "update_desc"), (value, "update_desc")),
     }
-    for name, (preferred, preferred_name, fallback, fallback_name) in sources.items():
-        if preferred.get(preferred_name) is not None:
-            projection[name] = copy.deepcopy(preferred[preferred_name])
-        elif fallback.get(fallback_name) is not None:
-            projection[name] = copy.deepcopy(fallback[fallback_name])
+    for name, candidates in sources.items():
+        for source, source_name in candidates:
+            if source.get(source_name) is not None:
+                projection[name] = copy.deepcopy(source[source_name])
+                break
     return projection
 
 
@@ -2088,11 +2097,33 @@ class DD:
             apply_present(form, doc, PLUGIN_FIELDS)
         else:
             current = self._fresh_detail(session, "plugin", doc["sn"])
+            if current.get("assign_user_sn") and doc.get("scope") == "private":
+                raise ValidationError("assigned plugins can only use public scope", path="$.scope")
             game_type = current.get("game_type") or (current.get("game_types") or [None])[0]
             listing = author_item(
                 session, "plugin", str(doc["sn"]), str(current.get("name") or ""), game_type,
             )
-            form = plugin_form(current, listing)
+            if action == "edit":
+                if not listing:
+                    raise FuploadError(
+                        "DD author-list projection is required to preserve the published plugin version",
+                        kind="verification_required", stage="dependency_get", endpoint="/addon/list",
+                        verification_required=True,
+                    )
+                published_version = plugin_version_projection({}, listing)
+                missing_published = [
+                    name for name in ("detail_url", "release_type", "version")
+                    if name not in published_version
+                ]
+                if missing_published:
+                    raise FuploadError(
+                        "DD author-list projection is missing published plugin field(s): %s"
+                        % ", ".join(missing_published),
+                        kind="verification_required", stage="dependency_get", endpoint="/addon/list",
+                        verification_required=True,
+                        details={"fields": missing_published},
+                    )
+            form = plugin_form(current, listing) if action == "edit" else plugin_form(current)
             allowed = PLUGIN_EDIT_FIELDS if action == "edit" else ("game_versions", "detail_url", "release_type", "version", "update_desc")
             current_version = str(form.get("version") or "").strip()
             apply_present(form, doc, allowed)
@@ -2152,6 +2183,7 @@ class DD:
             "creation_statement", "need_buy",
             "price_fen", "buy_life_type", "jump_room", "room_id", "channel_id", "channel_type",
             "sync_room", "with_associate", "associated_acts", "need_anchor_vip", "vip_levels",
+            "game_versions", "detail_url", "release_type", "version",
         )
         if action != "update":
             raw_readback: Any = {}

package/fupload/scripts/fupload_cli/modus_zip.py

@@ -46,6 +46,17 @@ _INTERFACE_VALUE_RE = re.compile(r"^\d+$")
 _SOURCE = Union[str, os.PathLike[str], bytes, bytearray, memoryview, BinaryIO]
 
 
+def _is_library_toc(name: str) -> bool:
+    """Return whether ``name`` is an embedded library TOC.
+
+    Creator's release form reads the addon TOC.  Libraries such as Ace3 and
+    LibDeflate live under a ``Libs`` directory and declare their own Interface
+    values, so treating them as addons rejects packages the Creator accepts.
+    """
+    parts = name.replace("\\", "/").split("/")
+    return any(part.casefold() == "libs" for part in parts[:-1])
+
+
 def _read_source(source: _SOURCE) -> Tuple[bytes, str]:
     """Read a path, byte buffer, or seekable stream without leaking content."""
     if isinstance(source, (bytes, bytearray, memoryview)):
@@ -127,18 +138,26 @@ def _zip_entries(raw: bytes, source_name: str) -> Iterable[Tuple[str, bytes]]:
 def parse_modus_zip(source: _SOURCE) -> Dict[str, Any]:
     """Return ModUs metadata inferred from ``source``.
 
-    Every ``.toc`` in the archive must declare the same Interface set.  This
-    avoids choosing an arbitrary addon when a multi-addon archive contains
-    incompatible game versions.  Multiple Interface values in one TOC are
-    supported and become a deterministic comma-separated ``toc_version``.
+    Addon ``.toc`` files must declare the same Interface set.  This avoids
+    choosing an arbitrary addon when a multi-addon archive contains
+    incompatible game versions.  TOCs under a ``Libs`` directory are ignored.
+    Multiple Interface values in one TOC are supported and become a
+    deterministic comma-separated ``toc_version``.
 
     Returned keys are JSON-ready and use the exact snake_case names accepted
     by the Fupload ModUs schema.  ``interface_values`` and ``toc_files`` are
     diagnostic fields for callers and can be omitted from the wire request.
     """
     raw, source_name = _read_source(source)
+    addon_entries = [
+        (name, toc_raw)
+        for name, toc_raw in _zip_entries(raw, source_name)
+        if not _is_library_toc(name)
+    ]
+    if not addon_entries:
+        raise ValidationError("ZIP contains no addon .toc file outside a Libs directory", path="$.file")
     signatures: List[Tuple[str, Tuple[str, ...]]] = []
-    for name, toc_raw in _zip_entries(raw, source_name):
+    for name, toc_raw in addon_entries:
         values = tuple(_interface_values(_decode_toc(toc_raw, name), name))
         signatures.append((name, values))
     expected = signatures[0][1]

package/npm/skill-manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "fupload.npm-skill-manifest.v1",
   "package_name": "@follenfang/fupload",
-  "package_version": "0.0.21",
-  "skill_version": "0.0.21",
-  "tree_sha256": "06e04c9d9820c812a5bce0e530887212460eb5aa55ada6f9cfa0f68b92222ae9",
+  "package_version": "0.0.23",
+  "skill_version": "0.0.23",
+  "tree_sha256": "92ada2b43090f9d3d44c90da840fba1ed420e79ef8166275dc790c5a200d53db",
   "files": [
     {
       "path": "agents/openai.yaml",
@@ -92,8 +92,8 @@
     },
     {
       "path": "references/modus.md",
-      "bytes": 37142,
-      "sha256": "84e1524bc3404de3c3bc0582d85651b884c616ff009b1d01839fb84e348917b3"
+      "bytes": 37236,
+      "sha256": "396bf899cef28dfdd66558a555c37bc9af7afaa444f96b2b5b5b1f9b68508783"
     },
     {
       "path": "references/newbee-official-cli.md",
@@ -113,7 +113,7 @@
     {
       "path": "scripts/fupload_cli/__init__.py",
       "bytes": 50,
-      "sha256": "72bdf8ff38debf5bf6e764f214f7381a9dca2a17d9a0396952ac63b58bba679d"
+      "sha256": "36c61f2ff8e0593fc5d731f120d8406354634b1ae61805d20c2d73da59ced3d0"
     },
     {
       "path": "scripts/fupload_cli/blackbox_web.py",
@@ -147,8 +147,8 @@
     },
     {
       "path": "scripts/fupload_cli/dd.py",
-      "bytes": 115484,
-      "sha256": "bf42e40784111e07ded17e7f7ad3cfacd007cf8efad6f61df475d0b3873a2793"
+      "bytes": 117372,
+      "sha256": "19a303e84ce08dd3af9a905d04d24f7224c3302f83f0d62f899618cf45fe0433"
     },
     {
       "path": "scripts/fupload_cli/errors.py",
@@ -162,8 +162,8 @@
     },
     {
       "path": "scripts/fupload_cli/modus_zip.py",
-      "bytes": 7833,
-      "sha256": "3b35b30266dd48874f679b40d12739534ede3dc58f0c34cdd35ac2deca4e07db"
+      "bytes": 8590,
+      "sha256": "6c3949d59356e3e28aa15458eb09019f64fdb0d383af26e7bb0c4c262b857559"
     },
     {
       "path": "scripts/fupload_cli/modus.py",
@@ -208,7 +208,7 @@
     {
       "path": "SKILL.md",
       "bytes": 28582,
-      "sha256": "d24b44882de93eb9fc43655ef995ff33c075b3b2fb5230b1a357ab43bedd082c"
+      "sha256": "f150b547db8ce091c1d1e5493026f2c30fce8c9458042a76df33844bac214972"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@follenfang/fupload",
-  "version": "0.0.21",
+  "version": "0.0.23",
   "description": "Install and run the Fuploader Agent Skill and Python CLI.",
   "type": "module",
   "bin": {