@mearl/setup 3.0.0-beta.0 → 3.0.0-beta.1

package/README.md

@@ -28,7 +28,7 @@ npx @mearl/setup@beta provider <install|update|uninstall> <package|id>
 一个命令安装 skill 并注册它的 CLI、SDK 和 MCP 能力：
 
 ```bash
-npx @mearl/setup@beta plugin install https://github.com/F-loat/mearl/tree/v3.0.0-beta.0 --skill browser-tab-manager --yes
+npx @mearl/setup@beta plugin install https://github.com/F-loat/mearl/tree/v3.0.0-beta.1 --skill browser-tab-manager --yes
 mearl tabs summary
 ```
 
@@ -121,7 +121,7 @@ npx @mearl/setup@beta provider uninstall example-device
   CDP 标签 ID 计数也保留，防止旧请求命中新标签。
 - `--mcp` 的客户端配置和清理由 `@mearl/mcp-server` 自己的命令完成。
 - 默认的 `install` / `update` 不处理浏览器扩展。`extension` 是独立命令：从
-  `https://github.com/F-loat/mearl/releases/download/v3.0.0-beta.0/` 读取同版本 beta 扩展发行元数据（正式 setup 使用 `releases/latest/download/`）并下载对应的 `mearl-chrome-v*.zip`，原子解压到
+  `https://github.com/F-loat/mearl/releases/download/v3.0.0-beta.1/` 读取同版本 beta 扩展发行元数据（正式 setup 使用 `releases/latest/download/`）并下载对应的 `mearl-chrome-v*.zip`，原子解压到
   `~/.mearl/chrome-extension`。首次安装通过浏览器级 CDP 的 `Extensions.loadUnpacked`
   加载；后续更新由 `mearl check --local --json` 确认当前扩展仍来自 setup 管理目录后，直接替换
   文件并通过 Native Host 触发扩展 reload。固定目录和 manifest 中的 `key` 保证扩展 ID

package/dist/plugin.js

@@ -111,7 +111,7 @@ function globalSkill(entry) {
     return undefined;
 }
 function projectSkill(entry, managedBy) {
-    if (managedBy !== 'skills' && managedBy !== 'ali-skills')
+    if (!managedBy)
         return undefined;
     const absolute = resolve(entry);
     const marker = `${sep}.agents${sep}skills${sep}`;

package/dist/preset.js

@@ -95,7 +95,7 @@ export class PresetInstaller {
                 const result = await this.invokeHost(reload ? 'preset_browser_sync' : 'preset_browser_status', reload ? { installationRevision } : {}, target, reload ? 130 : 15, reload);
                 if (result?.accepted === false)
                     return { id: target.id, state: 'rejected', settingsReady: false, error: typeof result.error === 'string' ? result.error : 'Browser preset activation rejected' };
-                return { id: target.id, state: result?.ready === true && result?.browserRevision === browserRevision && result?.installationRevision === installationRevision ? 'active' : 'pending', settingsReady: result?.settingsReady === true };
+                return { id: target.id, state: result?.ready === true && result?.browserRevision === browserRevision && result?.installationRevision === installationRevision ? 'active' : 'pending', settingsReady: result?.settingsReady === true, ...(Array.isArray(result?.permissionPending) && result.permissionPending.length ? { error: 'PRESET_DOMAIN_PERMISSION_REQUIRED: Open extension settings and authorize preset domains' } : {}) };
             }
             catch {
                 return { id: target.id, state: 'pending', settingsReady: false, error: 'BROWSER_UNAVAILABLE' };

package/dist/skillSources.d.ts

@@ -34,8 +34,11 @@ export interface SkillInstallationStatus {
     state: 'ready' | 'missing' | 'version' | 'registration' | 'conflict';
     reason?: string;
 }
+/** Developer links keep their Git checkout as the source receipt without changing a manager's lock. */
+export declare function readLinkedSkillSource(directory: string, name: string): TrackedSkillSource | undefined;
 /** CLI and Agent readiness use the same source, manifest and registration evidence. */
 export declare function inspectGlobalSkill(source: string, name: string, version?: string, options?: {
+    homeDirectory?: string;
     readSources?: typeof readTrackedSkillSources;
     externalManager?: boolean;
     normalizeSource?: (source: string, sourceType?: string) => string;

package/dist/skillSources.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto';
 import { mkdtemp, readFile, readdir, realpath, rm, stat } from 'node:fs/promises';
-import { readFileSync, statSync } from 'node:fs';
+import { readFileSync, statSync, lstatSync, realpathSync } from 'node:fs';
+import { execFileSync } from 'node:child_process';
 import { homedir, tmpdir } from 'node:os';
 import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -209,14 +210,42 @@ export async function checkTrackedSkillUpdates(options = {}) {
         await rm(temporary, { recursive: true, force: true });
     }
 }
+/** Developer links keep their Git checkout as the source receipt without changing a manager's lock. */
+export function readLinkedSkillSource(directory, name) {
+    try {
+        if (!lstatSync(directory).isSymbolicLink())
+            return undefined;
+        const actual = realpathSync(directory);
+        const git = (...args) => execFileSync('git', ['--no-optional-locks', '-c', 'core.fsmonitor=false', '-C', actual, ...args], {
+            encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 2_000, maxBuffer: 16_384,
+        }).trim();
+        const root = git('rev-parse', '--show-toplevel');
+        const folder = relative(root, actual);
+        if (folder === '..' || folder.startsWith('..' + sep) || isAbsolute(folder))
+            return undefined;
+        const skillPath = (folder ? folder.split(sep).join('/') + '/' : '') + 'SKILL.md';
+        if (git('ls-files', '--full-name', '--error-unmatch', '--', 'SKILL.md') !== skillPath)
+            return undefined;
+        const source = git('config', '--get', 'remote.origin.url');
+        if (!source || source.length > 4096 || /[\0\r\n]/.test(source))
+            return undefined;
+        if (!isAbsolute(source))
+            gitSource(source);
+        return { name, source, scope: 'global', skillPath, sourceType: 'git', hashKind: 'folder' };
+    }
+    catch {
+        return undefined;
+    }
+}
 /** CLI and Agent readiness use the same source, manifest and registration evidence. */
 export function inspectGlobalSkill(source, name, version, options = {}) {
     if (!source.trim() || !name || name === '.' || name === '..' || /[\\/\0\r\n]/.test(name))
         throw new Error('Invalid Skill identity');
-    const directory = join(homedir(), '.agents', 'skills', name);
+    const directory = join(options.homeDirectory ?? homedir(), '.agents', 'skills', name);
     if (existsSync(join(directory, 'SKILL.md')) && existsSync(join(directory, DISABLED_SKILL_MANIFEST)))
         return { state: 'conflict', reason: 'SKILL_MANIFEST_CONFLICT' };
-    const tracked = (options.readSources ?? readTrackedSkillSources)('global').find(entry => entry.name === name);
+    const tracked = (options.readSources ?? readTrackedSkillSources)('global', undefined, { homeDirectory: options.homeDirectory }).find(entry => entry.name === name)
+        ?? (!/(?:#|\/(?:tree|blob)\/)/.test(source) ? readLinkedSkillSource(directory, name) : undefined);
     if (tracked && ((!options.externalManager && !isPublicSkillSource(tracked)) || !matchesTrackedSkillSource(source, tracked, options.normalizeSource)))
         return { state: 'conflict', reason: 'SKILL_SOURCE_CONFLICT' };
     const metadata = readInstalledSkillMetadata(directory);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mearl/setup",
-  "version": "3.0.0-beta.0",
+  "version": "3.0.0-beta.1",
   "description": "One-shot environment setup and configuration for Mearl",
   "type": "module",
   "main": "dist/index.js",
@@ -74,11 +74,11 @@
     "extract-zip": "^2.0.1",
     "ws": "^8.18.3",
     "semver": "^7.8.5",
-    "@mearl/client": "3.0.0-beta.0",
-    "@mearl/provider": "3.0.0-beta.0",
-    "@mearl/daemon-core": "3.0.0-beta.0",
-    "@mearl/preset": "3.0.0-beta.0",
-    "@mearl/browser-core": "3.0.0-beta.0"
+    "@mearl/preset": "3.0.0-beta.1",
+    "@mearl/daemon-core": "3.0.0-beta.1",
+    "@mearl/client": "3.0.0-beta.1",
+    "@mearl/provider": "3.0.0-beta.1",
+    "@mearl/browser-core": "3.0.0-beta.1"
   },
   "devDependencies": {
     "@types/node": "^24.9.1",
@@ -86,6 +86,11 @@
     "typescript": "^5.8.3",
     "@types/semver": "^7.7.1"
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/F-loat/mearl.git",
+    "directory": "packages/setup"
+  },
   "scripts": {
     "build": "rm -rf dist/ && tsc && chmod +x dist/bin.js",
     "dev": "tsc --watch",