@iflow-mcp/jane-xiaoer-skill-vision-control 1.3.0

package/.github/workflows/release.yml

@@ -0,0 +1,42 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Publish to npm
+        run: npm publish
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+  release:
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v1
+        with:
+          generate_release_notes: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,284 @@
+# Skill Vision Control (SVC)
+
+[![npm version](https://badge.fury.io/js/skill-vision-control.svg)](https://badge.fury.io/js/skill-vision-control)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+> **Safe MCP Skill Version Manager** - Detect updates, parallel testing, smart merge, confirm before replace
+
+## Features
+
+- 🔍 **Update Detection** - Automatically detect new versions from GitHub/npm
+- 🛡️ **Security Scanning** - Auto scan before download (Sentinel integration)
+- 📦 **Version Management** - Keep multiple versions, switch anytime
+- 🔀 **Smart Merge** - Merge official updates with your custom changes
+- 🧪 **A/B Testing** - Test new versions before switching
+- ⏰ **Scheduled Checks** - Automatic weekly/monthly update checks
+- 🔔 **Notifications** - Desktop notifications for updates
+- 🤖 **MCP Server** - Let AI manage your skills
+
+## Installation
+
+```bash
+npm install -g skill-vision-control
+```
+
+Or with yarn:
+
+```bash
+yarn global add skill-vision-control
+```
+
+## Quick Start
+
+```bash
+# Add a skill to manage
+svc add weather --source github:username/weather-mcp
+
+# Check for updates
+svc check
+
+# Download new version (keeps old version)
+svc download weather
+
+# Test and switch
+svc switch weather --version v1.1.0
+
+# Or if you have custom changes, merge them
+svc merge weather
+```
+
+## Commands
+
+### Skill Management
+
+| Command | Description |
+|---------|-------------|
+| `svc add <name> --source <url>` | Register a skill (github:user/repo or npm:package) |
+| `svc list` | List all managed skills |
+| `svc info <name>` | Show detailed information |
+| `svc remove <name>` | Remove a skill |
+
+### Version Control
+
+| Command | Description |
+|---------|-------------|
+| `svc check [name]` | Check for updates |
+| `svc download <name>` | Download new version (keep old) |
+| `svc versions <name>` | List all local versions |
+| `svc switch <name> -v <version>` | Switch to specific version |
+| `svc rollback <name>` | Rollback to previous version |
+| `svc confirm <name>` | Confirm current version |
+| `svc cleanup <name> --keep <n>` | Clean old versions |
+
+### Custom Modifications
+
+| Command | Description |
+|---------|-------------|
+| `svc fork <name>` | Create custom branch for modifications |
+| `svc save <name> -c "comment"` | Save your modifications |
+| `svc diff <name>` | View differences from official |
+| `svc merge <name>` | Merge official update with your changes |
+| `svc conflicts <name>` | View merge conflicts |
+| `svc resolve <name> -f <file> -u <choice>` | Resolve conflicts |
+
+### Schedule
+
+| Command | Description |
+|---------|-------------|
+| `svc schedule set -i <days>` | Set check interval (1/7/14/30 days) |
+| `svc schedule show` | Show current schedule |
+| `svc schedule enable` | Enable scheduled checks |
+| `svc schedule disable` | Disable scheduled checks |
+| `svc schedule run` | Manually trigger check |
+
+### Security Scanning
+
+| Command | Description |
+|---------|-------------|
+| `svc scan <path>` | Scan any skill directory for security issues |
+| `svc audit [name]` | Audit installed skill(s) |
+| `svc download <name> --skip-security` | Download without security scan (not recommended) |
+
+## Workflow Examples
+
+### Basic Update Flow
+
+```bash
+# 1. Check for updates
+svc check
+# Output: weather: v1.0.0 → v1.1.0 available
+
+# 2. Download (old version preserved)
+svc download weather
+
+# 3. Test new version
+svc switch weather -v v1.1.0 -t official
+
+# 4. If good, confirm; if not, rollback
+svc confirm weather
+# or
+svc rollback weather
+```
+
+### Security Audit Before Install
+
+```bash
+# Scan a skill before installing
+svc scan ~/Downloads/some-mcp-skill
+
+# Output:
+# 🛡️  Sentinel Security Scan Report
+# ══════════════════════════════════════════════════
+# Risk Level: MEDIUM
+# Recommendation: REVIEW
+# 
+# ⚠️  SUSPICIOUS: 3 items found
+#    - src/api.ts:15 - Network request (axios)
+#    - src/config.ts:8 - Environment variable access
+
+# Audit all installed skills
+svc audit
+
+# Audit specific skill with details
+svc audit weather -v
+```
+
+### Custom Changes + Update
+
+```bash
+# 1. Create custom branch
+svc fork weather
+
+# 2. Make your modifications...
+# 3. Save changes
+svc save weather -c "Added Chinese language support"
+
+# 4. Later, when update available
+svc check
+# Output: ⚠️ You have custom changes. Use "svc merge"
+
+# 5. Download and merge
+svc download weather
+svc merge weather
+
+# 6. If conflicts exist
+svc conflicts weather
+svc resolve weather -f src/config.ts -u custom
+
+# 7. Test merged version
+svc switch weather -v v1.1.0-merged -t merged
+
+# 8. Confirm
+svc confirm weather
+```
+
+## Using as MCP Server
+
+Add to your MCP configuration:
+
+```json
+{
+  "mcpServers": {
+    "skill-vision-control": {
+      "command": "svc",
+      "args": ["serve"]
+    }
+  }
+}
+```
+
+Available MCP tools:
+- `svc_list_skills` - List all managed skills
+- `svc_get_skill_info` - Get skill details
+- `svc_check_updates` - Check for updates
+- `svc_get_versions` - Get local versions
+- `svc_switch_version` - Switch version
+- `svc_rollback` - Rollback to previous
+- `svc_download_update` - Download new version
+- `svc_merge` - Merge with custom changes
+- `svc_get_conflicts` - View merge conflicts
+
+## Data Storage
+
+All data is stored in `~/.svc/`:
+
+```
+~/.svc/
+├── skills.json      # Skill registry
+├── schedule.json    # Schedule settings
+├── config.json      # Global config
+└── versions/        # Version storage
+    └── <skill>/
+        ├── official/
+        ├── custom/
+        ├── merged/
+        └── active -> ...
+```
+
+## Security Scanning
+
+SVC integrates [Sentinel](https://github.com/Jane-xiaoer/skill-vision-control) security patterns for automatic code scanning.
+
+### Detection Capabilities
+
+| Level | Description | Examples |
+|-------|-------------|----------|
+| **CRITICAL** | High-risk patterns | `eval()`, `exec()`, `rm -rf`, registry access |
+| **SUSPICIOUS** | Needs review | Network requests, env vars, file operations |
+| **WARNING** | Potential issues | Long lines, high entropy files |
+
+### Risk Levels
+
+| Level | Action |
+|-------|--------|
+| `SAFE` | Safe to install |
+| `LOW` | Minor concerns, review recommended |
+| `MEDIUM` | Review required before install |
+| `HIGH` | Significant risks detected |
+| `CRITICAL` | Do not install without careful review |
+
+### Auto-Scan on Download
+
+When you run `svc download`, security scan runs automatically:
+
+```bash
+svc download weather
+# 🛡️  Running security scan...
+# ✅ Security scan passed
+# ✓ Download complete
+```
+
+If issues found:
+```bash
+svc download untrusted-skill
+# 🛡️  Running security scan...
+# 🛑 Security scan found critical issues!
+# ? Do you still want to proceed? (NOT RECOMMENDED) (y/N)
+```
+
+To skip (not recommended):
+```bash
+svc download weather --skip-security
+```
+
+## Configuration
+
+### Supported Sources
+
+- **GitHub**: `github:username/repo` or `username/repo`
+- **npm**: `npm:package-name`
+
+### Schedule Options
+
+- `1d` - Daily checks
+- `7d` - Weekly checks (default)
+- `14d` - Bi-weekly checks
+- `30d` - Monthly checks
+
+## Contributing
+
+Contributions are welcome! Please feel free to submit a Pull Request.
+
+## License
+
+MIT License - see [LICENSE](LICENSE) for details.

package/README_CN.md

@@ -0,0 +1,206 @@
+# Skill Vision Control (SVC)
+
+[![npm version](https://badge.fury.io/js/skill-vision-control.svg)](https://badge.fury.io/js/skill-vision-control)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+> **安全的 MCP Skill 版本管理器** - 检测更新、并行测试、智能合并、确认后替换
+
+## 功能特点
+
+- 🔍 **更新检测** - 自动检测 GitHub/npm 上的新版本
+- 📦 **版本管理** - 保留多个版本，随时切换
+- 🔀 **智能合并** - 将官方更新与你的自定义修改合并
+- 🧪 **A/B 测试** - 切换前先测试新版本
+- ⏰ **定时检查** - 自动每周/每月检查更新
+- 🔔 **桌面通知** - 有更新时发送通知
+- 🤖 **MCP Server** - 让 AI 帮你管理 Skills
+
+## 安装
+
+```bash
+npm install -g skill-vision-control
+```
+
+或使用 yarn：
+
+```bash
+yarn global add skill-vision-control
+```
+
+## 快速开始
+
+```bash
+# 添加一个 Skill 进行管理
+svc add weather --source github:username/weather-mcp
+
+# 检查更新
+svc check
+
+# 下载新版本（保留旧版本）
+svc download weather
+
+# 测试并切换
+svc switch weather --version v1.1.0
+
+# 或者如果你有自定义修改，进行合并
+svc merge weather
+```
+
+## 命令列表
+
+### Skill 管理
+
+| 命令 | 说明 |
+|------|------|
+| `svc add <name> --source <url>` | 注册一个 Skill（github:用户/仓库 或 npm:包名） |
+| `svc list` | 列出所有管理的 Skills |
+| `svc info <name>` | 显示详细信息 |
+| `svc remove <name>` | 移除一个 Skill |
+
+### 版本控制
+
+| 命令 | 说明 |
+|------|------|
+| `svc check [name]` | 检查更新 |
+| `svc download <name>` | 下载新版本（保留旧版本） |
+| `svc versions <name>` | 列出所有本地版本 |
+| `svc switch <name> -v <version>` | 切换到指定版本 |
+| `svc rollback <name>` | 回滚到上一个版本 |
+| `svc confirm <name>` | 确认当前版本 |
+| `svc cleanup <name> --keep <n>` | 清理旧版本 |
+
+### 自定义修改
+
+| 命令 | 说明 |
+|------|------|
+| `svc fork <name>` | 创建自定义分支进行修改 |
+| `svc save <name> -c "说明"` | 保存你的修改 |
+| `svc diff <name>` | 查看与官方的差异 |
+| `svc merge <name>` | 将官方更新与你的修改合并 |
+| `svc conflicts <name>` | 查看合并冲突 |
+| `svc resolve <name> -f <文件> -u <选择>` | 解决冲突 |
+
+### 定时调度
+
+| 命令 | 说明 |
+|------|------|
+| `svc schedule set -i <天数>` | 设置检查周期（1/7/14/30 天） |
+| `svc schedule show` | 显示当前调度设置 |
+| `svc schedule enable` | 启用定时检查 |
+| `svc schedule disable` | 禁用定时检查 |
+| `svc schedule run` | 手动触发检查 |
+
+## 使用流程示例
+
+### 基本更新流程
+
+```bash
+# 1. 检查更新
+svc check
+# 输出: weather: v1.0.0 → v1.1.0 可用
+
+# 2. 下载（旧版本保留）
+svc download weather
+
+# 3. 测试新版本
+svc switch weather -v v1.1.0 -t official
+
+# 4. 如果好用就确认；不好用就回滚
+svc confirm weather
+# 或者
+svc rollback weather
+```
+
+### 有自定义修改时更新
+
+```bash
+# 1. 创建自定义分支
+svc fork weather
+
+# 2. 进行你的修改...
+# 3. 保存修改
+svc save weather -c "添加了中文支持"
+
+# 4. 之后，当有更新时
+svc check
+# 输出: ⚠️ 你有自定义修改，建议使用 merge 命令
+
+# 5. 下载并合并
+svc download weather
+svc merge weather
+
+# 6. 如果有冲突
+svc conflicts weather
+svc resolve weather -f src/config.ts -u custom
+
+# 7. 测试合并后的版本
+svc switch weather -v v1.1.0-merged -t merged
+
+# 8. 确认使用
+svc confirm weather
+```
+
+## 作为 MCP Server 使用
+
+添加到你的 MCP 配置：
+
+```json
+{
+  "mcpServers": {
+    "skill-vision-control": {
+      "command": "svc",
+      "args": ["serve"]
+    }
+  }
+}
+```
+
+可用的 MCP 工具：
+- `svc_list_skills` - 列出所有管理的 Skills
+- `svc_get_skill_info` - 获取 Skill 详情
+- `svc_check_updates` - 检查更新
+- `svc_get_versions` - 获取本地版本
+- `svc_switch_version` - 切换版本
+- `svc_rollback` - 回滚到上一个版本
+- `svc_download_update` - 下载新版本
+- `svc_merge` - 与自定义修改合并
+- `svc_get_conflicts` - 查看合并冲突
+
+## 数据存储
+
+所有数据存储在 `~/.svc/`：
+
+```
+~/.svc/
+├── skills.json      # Skill 注册信息
+├── schedule.json    # 调度设置
+├── config.json      # 全局配置
+└── versions/        # 版本存储
+    └── <skill名称>/
+        ├── official/   # 官方版本
+        ├── custom/     # 自定义版本
+        ├── merged/     # 合并版本
+        └── active -> ... # 当前激活版本
+```
+
+## 配置说明
+
+### 支持的源
+
+- **GitHub**: `github:用户名/仓库名` 或直接 `用户名/仓库名`
+- **npm**: `npm:包名`
+
+### 调度选项
+
+- `1d` - 每天检查
+- `7d` - 每周检查（默认）
+- `14d` - 每两周检查
+- `30d` - 每月检查
+
+## 贡献
+
+欢迎贡献代码！请随时提交 Pull Request。
+
+## 许可证
+
+MIT License - 详见 [LICENSE](LICENSE)

package/dist/svc/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/svc/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/svc/cli.ts"],"names":[],"mappings":""}