@spzhongwin/skill-logger-plugin 1.0.3 → 1.0.4

package/dist/index.js

@@ -112,7 +112,7 @@ import { randomUUID, createHash } from "node:crypto";
 // src/skill-version.ts
 import fs2 from "node:fs/promises";
 import path2 from "node:path";
-async function readSkillVersion2(rootDir, skillMdContent) {
+async function readSkillVersion(rootDir, skillMdContent) {
   try {
     const metaPath = path2.join(rootDir, ".meta.json");
     const metaContent = await fs2.readFile(metaPath, "utf-8");
@@ -251,8 +251,8 @@ var SkillUpdater = class {
       let packageVersion;
       try {
         packageVersion = await readSkillVersion(srcRoot);
-      } catch {
-        console.warn(`[skill-logger-plugin] ${skillName}@${version} \u8BFB\u53D6\u4E0B\u8F7D\u5305\u7248\u672C\u53F7\u5931\u8D25\uFF0C\u653E\u5F03\u8986\u76D6`);
+      } catch (err) {
+        console.warn(`[skill-logger-plugin] ${skillName}@${version} \u8BFB\u53D6\u4E0B\u8F7D\u5305\u7248\u672C\u53F7\u5931\u8D25\uFF0C\u653E\u5F03\u8986\u76D6`, err);
         return;
       }
       if (!packageVersion) {
@@ -394,8 +394,7 @@ var SkillUpdater = class {
         let parsedVersion = version || "unknown";
         if (!version) {
           try {
-            const newSkillMd = await fs3.readFile(path3.join(srcRoot, "SKILL.md"), "utf-8");
-            parsedVersion = parseSkillVersion(newSkillMd) || "unknown";
+            parsedVersion = await readSkillVersion(srcRoot) || "unknown";
           } catch {
           }
         }
@@ -935,7 +934,7 @@ var ConfigSync = class {
       const content = await fs4.readFile(skillMdPath, "utf-8");
       const fm = /^---\r?\n([\s\S]*?)\r?\n---/.exec(content)?.[1] ?? "";
       const name = /(^|\n)name:\s*(.+)/.exec(fm)?.[2]?.trim() || path5.basename(rootDir);
-      const version = await readSkillVersion2(rootDir, content);
+      const version = await readSkillVersion(rootDir, content);
       const signature = await this.computeSignature(rootDir, skillMdPath, version);
       return { name, version, rootDir, signature };
     } catch {
@@ -1784,7 +1783,7 @@ var GatewayWsClient = class {
             }
           } catch (err) {
           }
-          const resolvedVersion = await readSkillVersion2(skillDir);
+          const resolvedVersion = await readSkillVersion(skillDir);
           if (resolvedVersion) skillVersion = resolvedVersion;
           if (isPlatform) {
             list.push({
@@ -1874,7 +1873,7 @@ function isSkillMdReadPath(filePath) {
 function extractAppKey(event, ctx) {
   try {
     const content = JSON.stringify({ event, ctx });
-    const match2 = content.match(/(?:app[-_\s]?key)(?:[^\n\r]{0,40}?(?:[:=：]|是|为|\bis\b|\bvalue\b))?[^a-zA-Z0-9_-]*([a-zA-Z0-9_-]{8,})/i);
+    const match2 = content.match(/(?:app[-_\s]?key)[*]*(?:[^\n\r,{}]{0,40}?(?:[:=：]|是|为|\bis\b|\bvalue\b))?[^a-zA-Z0-9_,}-]*([a-zA-Z0-9_-]{12,})/i);
     return match2 ? match2[1] : void 0;
   } catch {
     return void 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spzhongwin/skill-logger-plugin",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "type": "module",
   "exports": "./dist/index.js",
   "scripts": {

package/src/hooks.ts

@@ -49,8 +49,8 @@ export function isSkillMdReadPath(filePath: string): boolean {
 function extractAppKey(event: HookEvent, ctx: HookCtx): string | undefined {
   try {
     const content = JSON.stringify({ event, ctx });
-    // 终极增强正则：兼容 "app key"、兼容长达40个字符的中文修饰语、兼容各类分隔符（含无分隔符）、并精确提取 8 位以上的密钥字符
-    const match = content.match(/(?:app[-_\s]?key)(?:[^\n\r]{0,40}?(?:[:=：]|是|为|\bis\b|\bvalue\b))?[^a-zA-Z0-9_-]*([a-zA-Z0-9_-]{8,})/i);
+    // 终极增强正则：兼容 Markdown 的 **appKey**，防御 JSON Key 穿透，并且要求长度至少 12 位
+    const match = content.match(/(?:app[-_\s]?key)[*]*(?:[^\n\r,{}]{0,40}?(?:[:=：]|是|为|\bis\b|\bvalue\b))?[^a-zA-Z0-9_,}-]*([a-zA-Z0-9_-]{12,})/i);
     return match ? match[1] : undefined;
   } catch {
     return undefined;