@subbly/plugin-lint 0.0.4 → 0.0.7

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @subbly/plugin-lint
 
+## 0.0.7
+
+### Patch Changes
+
+- A config field may carry `description` beside `label`: a string of 1-300 characters after trimming, shown under the input in the install dialog. Before, the linter rejected it as an unknown key (rule `manifest/namespace-unknown-key`), though the builder accepts it. A blank or over-long description fails rule `field/description`.
+
+## 0.0.6
+
+### Patch Changes
+
+- 937b7e6: A connector marker may carry `liveTools` beside `auth` and `tools`: the read tools that a live page may call. It is a non-empty array of unique tool names, 1-100 characters each, as `tools` is. When `tools` is there too, each live tool must also be in `tools` (rule `connector/live-tools`). A marker with none of `auth`, `tools` and `liveTools` is rejected, as the builder refresh rejects it.
+
+## 0.0.5
+
+### Patch Changes
+
+- 1efe820: The plugin slug `custom` is an error, as the builder refresh reserves it for user-created connectors and credentials. No other rule changes.
+
 ## 0.0.4
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@subbly/plugin-lint",
-  "version": "0.0.4",
+  "version": "0.0.7",
   "private": false,
   "type": "module",
   "description": "The Subbly marketplace release gate, offline. Lints marketplace.json, plugin manifests, mcp.json, skills, agents and automations.",

package/src/report.mjs

@@ -41,6 +41,7 @@ export const RULES = {
   'field/key-format': 'field keys must match /^[A-Z][A-Z0-9_]*$/',
   'field/key-duplicate': 'a duplicate field key silently overrides the first',
   'field/label': 'label is required, 1-100 characters',
+  'field/description': 'description is optional, 1-300 characters after trimming',
   'field/type': 'type must be "text" or "select"',
   'field/options': 'options belong to select fields and select fields require them',
   'field/public-secret': 'public and secret are mutually exclusive',
@@ -64,9 +65,10 @@ export const RULES = {
   'setup/missing-install-skill': 'setup: true requires a skills/install skill',
 
   // connectors and mcp.json
-  'connector/marker': 'a connector marker holds auth, tools or both, and nothing else',
+  'connector/marker': 'a connector marker holds one or more of auth, tools and liveTools, and nothing else',
   'connector/auth': 'auth, when present, is exactly "oauth"',
-  'connector/tools': 'tools is a non-empty array of unique tool names, 1-100 characters each',
+  'connector/tools': 'tools and liveTools are each a non-empty array of unique tool names, 1-100 characters each',
+  'connector/live-tools': 'each live tool is also in tools, when tools is present',
   'connector/name-length': 'connector names are 1-100 characters',
   'connector/undefined-server': 'a declared connector needs a matching mcp.json server',
   'connector/no-mcp': 'declaring a connector requires an mcp.json',

package/src/rules.mjs

@@ -35,7 +35,7 @@ const CONTENT_NAME_PATTERN = /^[a-z0-9][a-z0-9_-]*$/i
 
 const MANIFEST_KEYS = ['$schema', 'name', 'version', 'description', 'author', 'homepage', 'repository', 'license', 'keywords', 'extensions']
 const NAMESPACE_KEYS = ['displayName', 'image', 'default', 'fields', 'automations', 'setup', 'connectors']
-const FIELD_KEYS = ['key', 'label', 'type', 'required', 'secret', 'public', 'pattern', 'options']
+const FIELD_KEYS = ['key', 'label', 'description', 'type', 'required', 'secret', 'public', 'pattern', 'options']
 const AUTOMATION_KEYS = ['name', 'schedule', 'model']
 const AUTOMATION_MODELS = ['normal', 'intelligent-high']
 const SERVER_KEYS = ['type', 'url', 'headers']
@@ -51,6 +51,8 @@ export const DEFAULT_ENV_KEYS = [
   'NEXT_PUBLIC_TERMS_CONDITIONS_URL',
 ]
 
+const RESERVED_SLUG = 'custom'
+
 const MISPLACED = ['agents', 'automations', 'scripts', 'instructions.md']
 
 // The builder-maintained symlink to the installed version, the only stable
@@ -224,8 +226,13 @@ function lintMarketplaceManifest(root, report) {
 
     let slug = null
     if (check.string('marketplace/entry-slug', `${base}.slug`, entry.slug, { min: 1, max: 64, required: true })) {
-      if (SLUG_PATTERN.test(entry.slug)) slug = entry.slug
-      else report.error('marketplace/entry-slug', file, `${base}.slug: ${SLUG_MESSAGE}`, at(`${base}.slug`))
+      if (entry.slug === RESERVED_SLUG) {
+        report.error('marketplace/entry-slug', file, `${base}.slug: "${RESERVED_SLUG}" is reserved for user-created connectors and credentials`, at(`${base}.slug`))
+      } else if (SLUG_PATTERN.test(entry.slug)) {
+        slug = entry.slug
+      } else {
+        report.error('marketplace/entry-slug', file, `${base}.slug: ${SLUG_MESSAGE}`, at(`${base}.slug`))
+      }
     }
 
     if (slug) {
@@ -451,6 +458,9 @@ function lintFields(report, file, at, check, ns, ext, slug) {
     }
 
     check.string('field/label', `${p}.label`, field.label, { min: 1, max: 100, required: true, label: `${label}.label` })
+    if (field.description !== undefined) {
+      check.string('field/description', `${p}.description`, field.description, { min: 1, max: 300, trim: true, label: `${label}.description` })
+    }
 
     if (field.type !== 'text' && field.type !== 'select') {
       report.error('field/type', file, `${label}.type: expected "text" or "select", received ${JSON.stringify(field.type)}`, at(`${p}.type`))
@@ -580,9 +590,9 @@ function lintConnectors(report, file, at, check, ns, ext) {
       report.error('connector/marker', file, `${label}: expected object, received ${typeOf(marker)}`, at(p))
       continue
     }
-    check.strictKeys('connector/marker', p, marker, ['auth', 'tools'], label)
-    if (marker.auth === undefined && marker.tools === undefined) {
-      report.error('connector/marker', file, `${label}: declare auth, tools or both`, at(p))
+    check.strictKeys('connector/marker', p, marker, ['auth', 'tools', 'liveTools'], label)
+    if (marker.auth === undefined && marker.tools === undefined && marker.liveTools === undefined) {
+      report.error('connector/marker', file, `${label}: declare auth, tools or liveTools`, at(p))
     }
     if (marker.auth !== undefined && marker.auth !== 'oauth') {
       report.error('connector/auth', file, `${label}.auth: expected "oauth", received ${JSON.stringify(marker.auth)}`, at(`${p}.auth`))
@@ -590,6 +600,10 @@ function lintConnectors(report, file, at, check, ns, ext) {
     if (marker.tools !== undefined) {
       lintToolAllowlist(report, file, at, check, `${p}.tools`, `${label}.tools`, marker.tools)
     }
+    if (marker.liveTools !== undefined) {
+      lintToolAllowlist(report, file, at, check, `${p}.liveTools`, `${label}.liveTools`, marker.liveTools)
+      lintLiveToolsInTools(report, file, at, p, label, marker)
+    }
     names.push(name)
   }
   return names
@@ -617,6 +631,15 @@ function lintToolAllowlist(report, file, at, check, p, label, tools) {
   }
 }
 
+function lintLiveToolsInTools(report, file, at, p, label, marker) {
+  if (!Array.isArray(marker.tools) || !Array.isArray(marker.liveTools)) return
+  for (const [index, tool] of marker.liveTools.entries()) {
+    if (typeof tool === 'string' && !marker.tools.includes(tool)) {
+      report.error('connector/live-tools', file, `${label}.liveTools[${index}]: live tool "${tool}" must also be in tools`, at(`${p}.liveTools.${index}`))
+    }
+  }
+}
+
 // --- mcp.json --------------------------------------------------------------
 
 function lintMcp(root, entry, manifest, report) {