@qomicex/cli 0.1.0

package/dist/lib/zip.js

@@ -0,0 +1,126 @@
+// 极简 ZIP 读写（无依赖）：node:zlib deflateRaw + 手写 CRC32/目录结构。
+// 仅覆盖 .qplugin 需要的子集：无加密、无目录条目、UTF-8 文件名、deflate/存储。
+import { deflateRawSync, inflateRawSync } from 'node:zlib';
+const CRC_TABLE = (() => {
+    const table = new Uint32Array(256);
+    for (let n = 0; n < 256; n++) {
+        let c = n;
+        for (let k = 0; k < 8; k++)
+            c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;
+        table[n] = c >>> 0;
+    }
+    return table;
+})();
+export function crc32(data) {
+    let crc = 0xffffffff;
+    for (let i = 0; i < data.length; i++) {
+        crc = CRC_TABLE[(crc ^ data[i]) & 0xff] ^ (crc >>> 8);
+    }
+    return (crc ^ 0xffffffff) >>> 0;
+}
+function u16(n) {
+    return new Uint8Array([n & 0xff, (n >>> 8) & 0xff]);
+}
+function u32(n) {
+    return new Uint8Array([n & 0xff, (n >>> 8) & 0xff, (n >>> 16) & 0xff, (n >>> 24) & 0xff]);
+}
+function concat(parts) {
+    const total = parts.reduce((s, p) => s + p.length, 0);
+    const out = new Uint8Array(total);
+    let off = 0;
+    for (const p of parts) {
+        out.set(p, off);
+        off += p.length;
+    }
+    return out;
+}
+export function zipWrite(files) {
+    const locals = [];
+    const central = [];
+    let offset = 0;
+    const UTF8_FLAG = 0x0800;
+    for (const file of files) {
+        const nameBytes = new TextEncoder().encode(file.name);
+        const comp = deflateRawSync(file.data);
+        const crc = crc32(file.data);
+        const method = file.data.length === 0 ? 0 : 8;
+        locals.push(u32(0x04034b50), u16(20), // version needed
+        u16(UTF8_FLAG), // flags
+        u16(method), u16(0), u16(0), // mod time/date
+        u32(crc), u32(comp.length), u32(file.data.length), u16(nameBytes.length), u16(0), // extra len
+        nameBytes, method === 8 ? comp : file.data);
+        central.push(u32(0x02014b50), u16(0x0314), // version made by (unix)
+        u16(20), u16(UTF8_FLAG), u16(method), u16(0), u16(0), u32(crc), u32(comp.length), u32(file.data.length), u16(nameBytes.length), u16(0), u16(0), // extra / comment len
+        u16(0), u16(0), // disk start / internal attrs
+        u32(0), // external attrs
+        u32(offset), nameBytes);
+        offset += 30 + nameBytes.length + (method === 8 ? comp.length : file.data.length);
+    }
+    const cdBytes = concat(central);
+    const cdOffset = offset;
+    const eocd = concat([
+        u32(0x06054b50),
+        u16(0), u16(0),
+        u16(files.length), u16(files.length),
+        u32(cdBytes.length),
+        u32(cdOffset),
+        u16(0),
+    ]);
+    return concat([...locals, cdBytes, eocd]);
+}
+function findEocd(bytes) {
+    const maxBack = Math.min(bytes.length, 65557);
+    for (let i = bytes.length - 22; i >= bytes.length - maxBack; i--) {
+        if (bytes[i] === 0x50 && bytes[i + 1] === 0x4b && bytes[i + 2] === 0x05 && bytes[i + 3] === 0x06) {
+            return i;
+        }
+    }
+    throw new Error('不是有效的 zip 包（缺少 EOCD）');
+}
+function readCentral(bytes) {
+    const eocd = findEocd(bytes);
+    const count = bytes[eocd + 10] | (bytes[eocd + 11] << 8);
+    const cdOffset = bytes[eocd + 16] | (bytes[eocd + 17] << 8) | (bytes[eocd + 18] << 16) | (bytes[eocd + 19] << 24);
+    const entries = [];
+    let p = cdOffset;
+    for (let i = 0; i < count; i++) {
+        if (bytes[p] !== 0x50 || bytes[p + 1] !== 0x4b || bytes[p + 2] !== 0x01 || bytes[p + 3] !== 0x02) {
+            throw new Error('zip 中央目录解析失败');
+        }
+        const method = bytes[p + 10] | (bytes[p + 11] << 8);
+        const compSize = bytes[p + 20] | (bytes[p + 21] << 8) | (bytes[p + 22] << 16) | (bytes[p + 23] << 24);
+        const size = bytes[p + 24] | (bytes[p + 25] << 8) | (bytes[p + 26] << 16) | (bytes[p + 27] << 24);
+        const nameLen = bytes[p + 28] | (bytes[p + 29] << 8);
+        const extraLen = bytes[p + 30] | (bytes[p + 31] << 8);
+        const commentLen = bytes[p + 32] | (bytes[p + 33] << 8);
+        const localOffset = bytes[p + 42] | (bytes[p + 43] << 8) | (bytes[p + 44] << 16) | (bytes[p + 45] << 24);
+        const name = new TextDecoder().decode(bytes.subarray(p + 46, p + 46 + nameLen));
+        entries.push({ name, method, compSize, size, localOffset });
+        p += 46 + nameLen + extraLen + commentLen;
+    }
+    return entries;
+}
+export function zipRead(bytes) {
+    const out = {};
+    for (const e of readCentral(bytes)) {
+        if (e.name.endsWith('/'))
+            continue;
+        const p = e.localOffset;
+        const nameLen = bytes[p + 26] | (bytes[p + 27] << 8);
+        const extraLen = bytes[p + 28] | (bytes[p + 29] << 8);
+        const dataStart = p + 30 + nameLen + extraLen;
+        const raw = bytes.subarray(dataStart, dataStart + e.compSize);
+        let data;
+        if (e.method === 0) {
+            data = raw;
+        }
+        else if (e.method === 8) {
+            data = inflateRawSync(raw);
+        }
+        else {
+            throw new Error(`不支持的 zip 压缩方式: ${e.method} (${e.name})`);
+        }
+        out[e.name] = data;
+    }
+    return out;
+}

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@qomicex/cli",
+  "version": "0.1.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "description": "Qomicex 插件生态 CLI：create / dev / pack / verify / publish",
+  "bin": {
+    "qomicex": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "templates"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "typescript": "~5.8.3"
+  }
+}

package/templates/plugin/README.md

@@ -0,0 +1,20 @@
+# __QOMICEX_PLUGIN_NAME__
+
+由 `qomicex create __QOMICEX_PLUGIN_ID__` 生成的最小插件模板（Vite + React 19 + TypeScript + Tailwind + `@qomicex/plugin-ui`）。
+
+## 开发
+
+```bash
+pnpm install
+pnpm run dev      # Vite 热重载
+```
+
+## 打包与校验
+
+```bash
+qomicex verify    # manifest 合法性 + 权限最小化 + 长循环告警
+qomicex pack      # tsc && vite build → 打 .qplugin
+qomicex publish   # 设备流登录后签名并上传到商店
+```
+
+详见 `packages/qomicex-cli/README.md`。

package/templates/plugin/index.html

@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="zh-CN">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>__QOMICEX_PLUGIN_NAME__</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>

package/templates/plugin/manifest.json

@@ -0,0 +1,22 @@
+{
+  "id": "__QOMICEX_PLUGIN_ID__",
+  "name": "__QOMICEX_PLUGIN_NAME__",
+  "version": "0.1.0",
+  "minLauncherVersion": "0.1.0",
+  "layers": ["l2"],
+  "permissions": ["config:read", "ui:toast", "network:cors_proxy"],
+  "entry": {
+    "frontend": "dist/index.html",
+    "theme": "dist/theme.css"
+  },
+  "contributes": {
+    "menuItems": [
+      {
+        "path": "/plugins/p/__QOMICEX_PLUGIN_ID__",
+        "label": "__QOMICEX_PLUGIN_NAME__",
+        "icon": "🧩",
+        "action": "page"
+      }
+    ]
+  }
+}

package/templates/plugin/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "__QOMICEX_PLUGIN_ID__",
+  "private": true,
+  "version": "0.1.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc --noEmit && vite build"
+  },
+  "dependencies": {
+    "@qomicex/plugin-ui": "^0.2.1",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0"
+  },
+  "devDependencies": {
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
+    "@vitejs/plugin-react": "^4.7.0",
+    "autoprefixer": "^10.4.20",
+    "postcss": "^8.4.49",
+    "tailwindcss": "^3.4.19",
+    "typescript": "~5.8.3",
+    "vite": "^7.3.6"
+  }
+}

package/templates/plugin/pnpm-workspace.yaml

@@ -0,0 +1,4 @@
+# 生成项目自成一 workspace root：可独立 pnpm install，且不受外层仓库 workspace 影响。
+# pnpm 11 用 allowBuilds 允许 esbuild 构建脚本（Linux/mac 需其 postinstall 下载二进制）。
+allowBuilds:
+  esbuild: true

package/templates/plugin/postcss.config.js

@@ -0,0 +1,6 @@
+export default {
+  plugins: {
+    tailwindcss: {},
+    autoprefixer: {},
+  },
+}

package/templates/plugin/src/App.tsx

@@ -0,0 +1,55 @@
+import { useCallback, useState } from 'react'
+import { Button, Card, CardContent, CardDescription, CardHeader, CardTitle } from '@qomicex/plugin-ui'
+import { getApi, getPluginId } from './api.ts'
+
+export default function App() {
+  const api = getApi()
+  const id = getPluginId()
+  const [log, setLog] = useState('')
+
+  const run = useCallback(async (label: string, fn: () => Promise<unknown>) => {
+    try {
+      const res = await fn()
+      setLog(`✓ ${label}\n${JSON.stringify(res, null, 2)}`)
+    } catch (e) {
+      setLog(`✗ ${label}\n${e instanceof Error ? e.message : String(e)}`)
+    }
+  }, [])
+
+  const loadSetting = useCallback(() => {
+    run('getSettings', () => api!.call('getSettings', id) as Promise<unknown>)
+  }, [api, id, run])
+
+  return (
+    <Card className="m-4">
+      <CardHeader>
+        <CardTitle>你好，{id}</CardTitle>
+        <CardDescription>
+          插件 API 桥已{api ? '注入' : '未注入（浏览器直开时优雅降级）'}。
+        </CardDescription>
+      </CardHeader>
+      <CardContent className="flex flex-col gap-2">
+        <div className="flex gap-2">
+          <Button onClick={loadSetting}>读取配置（config:read）</Button>
+          <Button
+            variant="outline"
+            onClick={() => run('showToast', () => api!.call('showToast', '来自插件的提示', 'info'))}
+          >
+            弹提示（ui:toast）
+          </Button>
+          <Button
+            variant="outline"
+            onClick={() =>
+              run('proxyFetch', () =>
+                api!.call('proxyFetch', { url: 'https://api.qomicex.top/ping', method: 'GET' }) as Promise<unknown>
+              )
+            }
+          >
+            网络请求（network:fetch）
+          </Button>
+        </div>
+        {log && <pre className="whitespace-pre-wrap rounded bg-muted p-3 text-xs text-muted-foreground">{log}</pre>}
+      </CardContent>
+    </Card>
+  )
+}

package/templates/plugin/src/api.ts

@@ -0,0 +1,35 @@
+/// <reference types="vite/client" />
+
+declare global {
+  interface Window {
+    __PLUGIN_API__?: PluginApi
+    __PLUGIN_ID__?: string
+  }
+}
+
+export interface ProxyRequest {
+  url: string
+  method?: string
+  headers?: Record<string, string>
+  body?: string
+  timeoutMs?: number
+}
+
+export interface PluginApi {
+  call: (method: string, ...args: unknown[]) => Promise<unknown>
+  registerMethod: (method: string, fn: (...args: unknown[]) => unknown) => void
+  callPlugin: (pluginId: string, method: string, ...args: unknown[]) => Promise<unknown>
+  proxyFetchStream: (req: ProxyRequest, handlers: { onChunk: (c: string) => void; onError: (e: Error) => void }) => Promise<void>
+}
+
+/**
+ * 沙箱注入的插件 API 桥；在 l2 iframe / inline 渲染中均可用。
+ * 独立 `pnpm dev`（浏览器直开）时返回 null，UI 可优雅降级。
+ */
+export function getApi(): PluginApi | null {
+  return window.__PLUGIN_API__ ?? null
+}
+
+export function getPluginId(): string {
+  return window.__PLUGIN_ID__ ?? 'unknown'
+}

package/templates/plugin/src/index.css

@@ -0,0 +1,9 @@
+@tailwind base;
+@tailwind components;
+@tailwind utilities;
+
+html,
+body,
+#root {
+  height: 100%;
+}

package/templates/plugin/src/main.tsx

@@ -0,0 +1,7 @@
+import React from 'react'
+import { createRoot } from 'react-dom/client'
+import App from './App.tsx'
+import './index.css'
+
+const rootEl = document.getElementById('root')
+if (rootEl) createRoot(rootEl).render(<React.StrictMode><App /></React.StrictMode>)

package/templates/plugin/tailwind.config.js

@@ -0,0 +1,8 @@
+import preset from '@qomicex/plugin-ui/tailwind-preset'
+
+/** @type {import('tailwindcss').Config} */
+export default {
+  content: ['./index.html', './src/**/*.{ts,tsx}', './node_modules/@qomicex/plugin-ui/dist/**/*.{js,ts,tsx}'],
+  presets: [preset],
+  darkMode: 'class',
+}

package/templates/plugin/theme.css

@@ -0,0 +1,7 @@
+/* 插件主题：只消费主题语义 token（见 docs/junsi-dev-docs/2-架构设计/主题语义Token规范v1.md）。
+   v1 以 CSS 变量覆盖为主，全部 var() 引用，禁止内联色值。 */
+:root[data-theme] {
+  /* 可选：覆盖默认 HSL token 例如
+     --primary: 142 71% 48%;
+  */
+}

package/templates/plugin/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "lib": ["ES2020", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "skipLibCheck": true,
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+    "strict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["src"]
+}

package/templates/plugin/vite.config.ts

@@ -0,0 +1,16 @@
+import { defineConfig } from 'vite'
+import react from '@vitejs/plugin-react'
+
+export default defineConfig({
+  plugins: [react()],
+  // 关键：必须用相对路径 base，否则产物中的 /assets/... 会被当成站点根路径
+  base: './',
+  build: {
+    outDir: 'dist',
+    rollupOptions: {
+      input: {
+        main: 'index.html',
+      },
+    },
+  },
+})