@rune-kit/rune 2.3.3 → 2.6.0

package/compiler/parser.js

@@ -1,247 +1,267 @@
-/**
- * SKILL.md Parser
- *
- * Parses SKILL.md files into a structured intermediate representation (IR).
- * Extracts frontmatter, cross-references, tool references, HARD-GATE blocks, and sections.
- */
-
-const CROSS_REF_PATTERN = /`?rune:([a-z][\w-]*)`?/g;
-const TOOL_REF_PATTERN = /`(Read|Write|Edit|Glob|Grep|Bash|TodoWrite|Skill|Agent)`/g;
-const HARD_GATE_PATTERN = /<HARD-GATE>([\s\S]*?)<\/HARD-GATE>/g;
-const _SECTION_PATTERN = /^## (.+)$/gm;
-
-/**
- * Parse YAML-like frontmatter from SKILL.md
- * Handles nested metadata block
- */
-function parseFrontmatter(content) {
-  // Normalize line endings to \n for cross-platform compatibility
-  const normalized = content.replace(/\r\n/g, '\n');
-  const match = normalized.match(/^---\n([\s\S]*?)\n---/);
-  if (!match) return { frontmatter: {}, body: normalized };
-
-  const raw = match[1];
-  const body = normalized.slice(match[0].length).trim();
-  const frontmatter = {};
-
-  let currentIndent = null;
-  let nestedKey = null;
-  const _nestedObj = {};
-
-  for (const line of raw.split('\n')) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-
-    // Detect nested block (e.g., metadata:)
-    if (/^\w+:\s*$/.test(trimmed)) {
-      nestedKey = trimmed.replace(':', '').trim();
-      frontmatter[nestedKey] = {};
-      currentIndent = 'nested';
-      continue;
-    }
-
-    if (currentIndent === 'nested' && line.startsWith('  ')) {
-      const kvMatch = trimmed.match(/^(\w+):\s*(.+)$/);
-      if (kvMatch) {
-        const value = kvMatch[2].replace(/^["']|["']$/g, '');
-        frontmatter[nestedKey][kvMatch[1]] = value;
-      }
-      continue;
-    }
-
-    // Top-level key-value
-    currentIndent = null;
-    nestedKey = null;
-    const kvMatch = trimmed.match(/^(\w[\w-]*):\s*(.+)$/);
-    if (kvMatch) {
-      const value = kvMatch[2].replace(/^["']|["']$/g, '');
-      frontmatter[kvMatch[1]] = value;
-    }
-  }
-
-  return { frontmatter, body };
-}
-
-/**
- * Extract all rune:<name> cross-references from body
- */
-export function extractCrossRefs(body) {
-  const refs = [];
-  const lines = body.split('\n');
-
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-    let match;
-    const regex = new RegExp(CROSS_REF_PATTERN.source, 'g');
-
-    while ((match = regex.exec(line)) !== null) {
-      refs.push({
-        raw: match[0],
-        skillName: match[1],
-        line: i + 1,
-        context: line.trim(),
-      });
-    }
-  }
-
-  return refs;
-}
-
-/**
- * Extract all Claude Code tool references from body
- */
-export function extractToolRefs(body) {
-  const refs = [];
-  const lines = body.split('\n');
-
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-    let match;
-    const regex = new RegExp(TOOL_REF_PATTERN.source, 'g');
-
-    while ((match = regex.exec(line)) !== null) {
-      refs.push({
-        raw: match[0],
-        toolName: match[1],
-        line: i + 1,
-        context: line.trim(),
-      });
-    }
-  }
-
-  return refs;
-}
-
-/**
- * Extract HARD-GATE blocks
- */
-function extractHardGates(body) {
-  const gates = [];
-  let match;
-  const regex = new RegExp(HARD_GATE_PATTERN.source, 'gs');
-
-  while ((match = regex.exec(body)) !== null) {
-    gates.push(match[1].trim());
-  }
-
-  return gates;
-}
-
-/**
- * Extract ## sections as a Map<sectionName, content>
- */
-function extractSections(body) {
-  const sections = new Map();
-  const lines = body.split('\n');
-  let currentSection = null;
-  let currentContent = [];
-
-  for (const line of lines) {
-    const sectionMatch = line.match(/^## (.+)$/);
-    if (sectionMatch) {
-      if (currentSection) {
-        sections.set(currentSection, currentContent.join('\n').trim());
-      }
-      currentSection = sectionMatch[1];
-      currentContent = [];
-    } else if (currentSection) {
-      currentContent.push(line);
-    }
-  }
-
-  if (currentSection) {
-    sections.set(currentSection, currentContent.join('\n').trim());
-  }
-
-  return sections;
-}
-
-/**
- * Parse a SKILL.md file content into structured IR
- *
- * @param {string} content - raw SKILL.md content
- * @param {string} [filePath] - optional file path for error reporting
- * @returns {ParsedSkill}
- */
-export function parseSkill(content, filePath = '') {
-  const { frontmatter, body } = parseFrontmatter(content);
-
-  const metadata = frontmatter.metadata || {};
-
-  return {
-    name: frontmatter.name || '',
-    description: frontmatter.description || '',
-    layer: metadata.layer || 'L2',
-    model: metadata.model || 'sonnet',
-    group: metadata.group || 'general',
-    contextFork: frontmatter.context === 'fork',
-    agentType: frontmatter.agent || null,
-    body,
-    crossRefs: extractCrossRefs(body),
-    toolRefs: extractToolRefs(body),
-    hardGates: extractHardGates(body),
-    sections: extractSections(body),
-    filePath,
-    frontmatter,
-  };
-}
-
-/**
- * Parse a PACK.md extension file (same format, slightly different metadata)
- * Supports both monolith format (all skills inline) and split format (skills in separate files)
- *
- * Split format detection: metadata.format === "split" OR metadata.skills array present
- */
-export function parsePack(content, filePath = '') {
-  const { frontmatter, body } = parseFrontmatter(content);
-  const metadata = frontmatter.metadata || {};
-
-  // Detect split format
-  const isSplit = metadata.format === 'split' || Array.isArray(metadata.skills);
-
-  return {
-    name: frontmatter.name || '',
-    description: frontmatter.description || '',
-    version: metadata.version || frontmatter.version || '1.0.0',
-    layer: 'L4',
-    group: 'extension',
-    isSplit,
-    skillManifest: isSplit ? parseSkillManifest(metadata.skills || []) : [],
-    body,
-    crossRefs: extractCrossRefs(body),
-    toolRefs: extractToolRefs(body),
-    hardGates: extractHardGates(body),
-    sections: extractSections(body),
-    filePath,
-    frontmatter,
-  };
-}
-
-/**
- * Parse the skills manifest from split PACK.md frontmatter
- *
- * @param {Array} skills - array of skill entries from frontmatter metadata.skills
- * @returns {Array<{name: string, file: string, model: string, description: string}>}
- */
-function parseSkillManifest(skills) {
-  if (!Array.isArray(skills)) return [];
-
-  return skills.map((skill) => {
-    // Handle both string format ("skill-name") and object format ({name, file, model, description})
-    if (typeof skill === 'string') {
-      return {
-        name: skill,
-        file: `skills/${skill}.md`,
-        model: 'sonnet',
-        description: '',
-      };
-    }
-
-    return {
-      name: skill.name || '',
-      file: skill.file || `skills/${skill.name}.md`,
-      model: skill.model || 'sonnet',
-      description: skill.description || '',
-    };
-  });
-}
+/**
+ * SKILL.md Parser
+ *
+ * Parses SKILL.md files into a structured intermediate representation (IR).
+ * Extracts frontmatter, cross-references, tool references, HARD-GATE blocks, and sections.
+ */
+
+/**
+ * Metadata fields that should be parsed as comma-separated arrays
+ * e.g. emit: code.changed, tests.passed → ["code.changed", "tests.passed"]
+ */
+const COMMA_LIST_FIELDS = new Set(['emit', 'listen']);
+
+const CROSS_REF_PATTERN = /`?rune:([a-z][\w-]*)`?/g;
+const TOOL_REF_PATTERN = /`(Read|Write|Edit|Glob|Grep|Bash|TodoWrite|Skill|Agent)`/g;
+const HARD_GATE_PATTERN = /<HARD-GATE>([\s\S]*?)<\/HARD-GATE>/g;
+const _SECTION_PATTERN = /^## (.+)$/gm;
+
+/**
+ * Parse YAML-like frontmatter from SKILL.md
+ * Handles nested metadata block
+ */
+function parseFrontmatter(content) {
+  // Normalize line endings to \n for cross-platform compatibility
+  const normalized = content.replace(/\r\n/g, '\n');
+  const match = normalized.match(/^---\n([\s\S]*?)\n---/);
+  if (!match) return { frontmatter: {}, body: normalized };
+
+  const raw = match[1];
+  const body = normalized.slice(match[0].length).trim();
+  const frontmatter = {};
+
+  let currentIndent = null;
+  let nestedKey = null;
+  const _nestedObj = {};
+
+  for (const line of raw.split('\n')) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+
+    // Detect nested block (e.g., metadata:)
+    if (/^\w+:\s*$/.test(trimmed)) {
+      nestedKey = trimmed.replace(':', '').trim();
+      frontmatter[nestedKey] = {};
+      currentIndent = 'nested';
+      continue;
+    }
+
+    if (currentIndent === 'nested' && line.startsWith('  ')) {
+      const kvMatch = trimmed.match(/^(\w[\w-]*):\s*(.+)$/);
+      if (kvMatch) {
+        const rawValue = kvMatch[2].replace(/^["']|["']$/g, '');
+        // Comma-separated list fields → parse as array
+        if (COMMA_LIST_FIELDS.has(kvMatch[1])) {
+          frontmatter[nestedKey][kvMatch[1]] = rawValue
+            .split(',')
+            .map((s) => s.trim())
+            .filter(Boolean);
+        } else {
+          frontmatter[nestedKey][kvMatch[1]] = rawValue;
+        }
+      }
+      continue;
+    }
+
+    // Top-level key-value
+    currentIndent = null;
+    nestedKey = null;
+    const kvMatch = trimmed.match(/^(\w[\w-]*):\s*(.+)$/);
+    if (kvMatch) {
+      const value = kvMatch[2].replace(/^["']|["']$/g, '');
+      frontmatter[kvMatch[1]] = value;
+    }
+  }
+
+  return { frontmatter, body };
+}
+
+/**
+ * Extract all rune:<name> cross-references from body
+ */
+export function extractCrossRefs(body) {
+  const refs = [];
+  const lines = body.split('\n');
+
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    let match;
+    const regex = new RegExp(CROSS_REF_PATTERN.source, 'g');
+
+    while ((match = regex.exec(line)) !== null) {
+      refs.push({
+        raw: match[0],
+        skillName: match[1],
+        line: i + 1,
+        context: line.trim(),
+      });
+    }
+  }
+
+  return refs;
+}
+
+/**
+ * Extract all Claude Code tool references from body
+ */
+export function extractToolRefs(body) {
+  const refs = [];
+  const lines = body.split('\n');
+
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    let match;
+    const regex = new RegExp(TOOL_REF_PATTERN.source, 'g');
+
+    while ((match = regex.exec(line)) !== null) {
+      refs.push({
+        raw: match[0],
+        toolName: match[1],
+        line: i + 1,
+        context: line.trim(),
+      });
+    }
+  }
+
+  return refs;
+}
+
+/**
+ * Extract HARD-GATE blocks
+ */
+function extractHardGates(body) {
+  const gates = [];
+  let match;
+  const regex = new RegExp(HARD_GATE_PATTERN.source, 'gs');
+
+  while ((match = regex.exec(body)) !== null) {
+    gates.push(match[1].trim());
+  }
+
+  return gates;
+}
+
+/**
+ * Extract ## sections as a Map<sectionName, content>
+ */
+function extractSections(body) {
+  const sections = new Map();
+  const lines = body.split('\n');
+  let currentSection = null;
+  let currentContent = [];
+
+  for (const line of lines) {
+    const sectionMatch = line.match(/^## (.+)$/);
+    if (sectionMatch) {
+      if (currentSection) {
+        sections.set(currentSection, currentContent.join('\n').trim());
+      }
+      currentSection = sectionMatch[1];
+      currentContent = [];
+    } else if (currentSection) {
+      currentContent.push(line);
+    }
+  }
+
+  if (currentSection) {
+    sections.set(currentSection, currentContent.join('\n').trim());
+  }
+
+  return sections;
+}
+
+/**
+ * Parse a SKILL.md file content into structured IR
+ *
+ * @param {string} content - raw SKILL.md content
+ * @param {string} [filePath] - optional file path for error reporting
+ * @returns {ParsedSkill}
+ */
+export function parseSkill(content, filePath = '') {
+  const { frontmatter, body } = parseFrontmatter(content);
+
+  const metadata = frontmatter.metadata || {};
+
+  // Extract signals — emit/listen arrays from metadata
+  const emit = Array.isArray(metadata.emit) ? metadata.emit : [];
+  const listen = Array.isArray(metadata.listen) ? metadata.listen : [];
+  const signals = emit.length > 0 || listen.length > 0 ? { emit, listen } : null;
+
+  return {
+    name: frontmatter.name || '',
+    description: frontmatter.description || '',
+    layer: metadata.layer || 'L2',
+    model: metadata.model || 'sonnet',
+    group: metadata.group || 'general',
+    signals,
+    contextFork: frontmatter.context === 'fork',
+    agentType: frontmatter.agent || null,
+    body,
+    crossRefs: extractCrossRefs(body),
+    toolRefs: extractToolRefs(body),
+    hardGates: extractHardGates(body),
+    sections: extractSections(body),
+    filePath,
+    frontmatter,
+  };
+}
+
+/**
+ * Parse a PACK.md extension file (same format, slightly different metadata)
+ * Supports both monolith format (all skills inline) and split format (skills in separate files)
+ *
+ * Split format detection: metadata.format === "split" OR metadata.skills array present
+ */
+export function parsePack(content, filePath = '') {
+  const { frontmatter, body } = parseFrontmatter(content);
+  const metadata = frontmatter.metadata || {};
+
+  // Detect split format
+  const isSplit = metadata.format === 'split' || Array.isArray(metadata.skills);
+
+  return {
+    name: frontmatter.name || '',
+    description: frontmatter.description || '',
+    version: metadata.version || frontmatter.version || '1.0.0',
+    layer: 'L4',
+    group: 'extension',
+    isSplit,
+    skillManifest: isSplit ? parseSkillManifest(metadata.skills || []) : [],
+    body,
+    crossRefs: extractCrossRefs(body),
+    toolRefs: extractToolRefs(body),
+    hardGates: extractHardGates(body),
+    sections: extractSections(body),
+    filePath,
+    frontmatter,
+  };
+}
+
+/**
+ * Parse the skills manifest from split PACK.md frontmatter
+ *
+ * @param {Array} skills - array of skill entries from frontmatter metadata.skills
+ * @returns {Array<{name: string, file: string, model: string, description: string}>}
+ */
+function parseSkillManifest(skills) {
+  if (!Array.isArray(skills)) return [];
+
+  return skills.map((skill) => {
+    // Handle both string format ("skill-name") and object format ({name, file, model, description})
+    if (typeof skill === 'string') {
+      return {
+        name: skill,
+        file: `skills/${skill}.md`,
+        model: 'sonnet',
+        description: '',
+      };
+    }
+
+    return {
+      name: skill.name || '',
+      file: skill.file || `skills/${skill.name}.md`,
+      model: skill.model || 'sonnet',
+      description: skill.description || '',
+    };
+  });
+}

package/compiler/transforms/scripts-path.js

@@ -0,0 +1,18 @@
+/**
+ * Scripts Path Transform
+ *
+ * Replaces {scripts_dir} placeholder in skill body with the
+ * platform-resolved scripts directory path.
+ */
+
+/**
+ * Replace {scripts_dir} placeholder with platform-resolved path.
+ *
+ * @param {string} body - skill body text
+ * @param {string} scriptsPath - resolved path for this platform
+ * @returns {string} body with placeholders resolved
+ */
+export function resolveScriptsPath(body, scriptsPath) {
+  if (!body || !scriptsPath) return body;
+  return body.replaceAll('{scripts_dir}', scriptsPath);
+}

package/extensions/zalo/PACK.md

@@ -3,7 +3,7 @@ name: "@rune/zalo"
 description: Zalo platform integration — Official Account API (OAuth2, messaging, webhooks, MCP server) and personal account automation (zca-js). Dual-track with explicit risk gating.
 metadata:
   author: runedev
-  version: "0.1.0"
+  version: "0.2.0"
   layer: L4
   price: free
   target: Vietnamese developers building Zalo bots, OA automation, and AI agent integrations
@@ -116,6 +116,25 @@ Called By ← mcp-builder (L2): when building Zalo-specific MCP server
 | Webhook signature verification skipped in development, then deployed to production unsigned | HIGH | Always validate `X-Zalo-Signature` header from first commit — skip in dev only via explicit `SKIP_WEBHOOK_VERIFY=true` env flag |
 | Rate limit hit causes account ban with no warning (HTTP 429 mishandled as transient error) | HIGH | Implement token bucket per endpoint; treat sustained 429s as ban-risk signal and back off for 60+ seconds |
 
+## References
+
+| Reference | Trigger |
+|-----------|---------|
+| [VietQR & Banking](references/vietqr-banking.md) | Payment, bank transfer, QR code patterns detected |
+| [Conversation Management](references/conversation-management.md) | Polls, auto-reply, mute/archive, advanced messaging |
+| [MCP Production](references/mcp-production.md) | MCP server deployment, cursor pagination, pm2 setup |
+| [Multi-Account & Proxy](references/multi-account-proxy.md) | Multi-account setup, proxy configuration, VPS deployment |
+| [Listen Mode](references/listen-mode.md) | WebSocket listener, real-time events, webhook forwarding |
+| [Eval Scenarios](references/eval-scenarios.md) | Quality gate — 24 test scenarios (functional + security) |
+
+## Credits
+
+This pack was originally inspired by and incorporates patterns from:
+
+- **[zalo-agent-cli](https://github.com/PhucMPham/zalo-agent-cli)** by PhucMPham (MIT) — CLI tool for Zalo automation, 90+ commands, MCP server, VietQR banking integration
+- **[openzalo](https://github.com/darkamenosa/openzalo)** by darkamenosa — OpenClaw channel plugin for Zalo personal accounts via openzca CLI
+- **[zca-js](https://github.com/RFS-ADRENO/zca-js)** — Unofficial Zalo client library (reverse-engineered API)
+
 ## Done When
 
 - OA OAuth2 flow working with auto-refresh