@vocmarket/voc-skill 0.3.28 → 0.3.29

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "voc-intelligence",
   "description": "VOC intelligence skills for Claude Code: end-to-end VOC business workflows, Xiaohongshu and Douyin trend reports, live social VOC collection, Fmode Doubao image analysis, token/recharge checks, evidence-card outputs, prioritized issue pools, single-problem deep dives, competitor maps, 7-day content plans, VOC-backed speaking script co-creation, boss/operator action plans, and multi-turn memory.",
-  "version": "0.3.28",
+  "version": "0.3.29",
   "author": {
     "name": "nkkj-BrainHack"
   }

package/mcp/src/core/version-check.js

@@ -0,0 +1,211 @@
+'use strict';
+
+/**
+ * Self-update detection for the locally-installed VOC skill package.
+ *
+ * Surfaces a one-line "new version available" hint inside tool results so that
+ * a user running the skill in Claude Code is told, while they work, that an
+ * update exists. Network access is best-effort: it is throttled (24h cache),
+ * fail-silent (never throws, never blocks a tool call), and can be disabled.
+ */
+
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+const https = require('https');
+
+const PKG = '@vocmarket/voc-skill';
+const REGISTRY_URL = `https://registry.npmjs.org/${PKG.replace('/', '%2F')}/latest`;
+const TTL_MS = 24 * 60 * 60 * 1000; // check npm at most once per day
+const FETCH_TIMEOUT_MS = 1500;
+const CACHE_FILE = path.join(os.homedir(), '.claude', 'voc-update-check.json');
+
+let sessionNotified = false; // notify at most once per server process (session)
+let latestInMemory = null; // populated by primeUpdateCheck()
+
+function isDisabled() {
+  return process.env.VOC_SKILL_NO_UPDATE_CHECK === '1';
+}
+
+function getInstalledVersion() {
+  // version-check.js lives at <pkg>/mcp/src/core/, package.json at <pkg>/.
+  const candidates = [
+    path.join(__dirname, '..', '..', '..', 'package.json'),
+    path.join(__dirname, '..', '..', '..', 'skill-package-manifest.json')
+  ];
+  for (const file of candidates) {
+    try {
+      const json = JSON.parse(fs.readFileSync(file, 'utf8'));
+      if (json && typeof json.version === 'string') return json.version;
+    } catch (_) {
+      /* ignore and try next */
+    }
+  }
+  return null;
+}
+
+// Compare two semver strings. Returns 1 if a>b, -1 if a<b, 0 if equal.
+// Handles `major.minor.patch[-prerelease]`; a release outranks its prerelease.
+function compareSemver(a, b) {
+  const parse = v => {
+    const [core, pre] = String(v).trim().replace(/^v/, '').split('-');
+    const nums = core.split('.').map(n => parseInt(n, 10) || 0);
+    return { nums: [nums[0] || 0, nums[1] || 0, nums[2] || 0], pre: pre || '' };
+  };
+  const pa = parse(a);
+  const pb = parse(b);
+  for (let i = 0; i < 3; i += 1) {
+    if (pa.nums[i] > pb.nums[i]) return 1;
+    if (pa.nums[i] < pb.nums[i]) return -1;
+  }
+  if (pa.pre === pb.pre) return 0;
+  if (!pa.pre) return 1; // release > prerelease
+  if (!pb.pre) return -1;
+  return pa.pre > pb.pre ? 1 : -1;
+}
+
+function readCache() {
+  try {
+    const cache = JSON.parse(fs.readFileSync(CACHE_FILE, 'utf8'));
+    if (cache && typeof cache === 'object') return cache;
+  } catch (_) {
+    /* no cache yet / unreadable */
+  }
+  return null;
+}
+
+function writeCache(next) {
+  try {
+    fs.mkdirSync(path.dirname(CACHE_FILE), { recursive: true });
+    const tmp = `${CACHE_FILE}.${process.pid}.tmp`;
+    fs.writeFileSync(tmp, JSON.stringify(next));
+    fs.renameSync(tmp, CACHE_FILE); // atomic swap, survives concurrent writers
+  } catch (_) {
+    /* caching is best-effort */
+  }
+}
+
+function fetchLatest() {
+  return new Promise(resolve => {
+    let done = false;
+    const finish = value => {
+      if (done) return;
+      done = true;
+      resolve(value);
+    };
+    try {
+      const req = https.get(REGISTRY_URL, { timeout: FETCH_TIMEOUT_MS }, res => {
+        if (res.statusCode !== 200) {
+          res.resume();
+          return finish(null);
+        }
+        let body = '';
+        res.on('data', chunk => {
+          body += chunk;
+          if (body.length > 1e6) req.destroy(); // guard against pathological size
+        });
+        res.on('end', () => {
+          try {
+            const v = JSON.parse(body).version;
+            finish(typeof v === 'string' ? v : null);
+          } catch (_) {
+            finish(null);
+          }
+        });
+      });
+      req.on('timeout', () => {
+        req.destroy();
+        finish(null);
+      });
+      req.on('error', () => finish(null));
+    } catch (_) {
+      finish(null);
+    }
+  });
+}
+
+/**
+ * Fire-and-forget at server startup. Refreshes `latestInMemory` from the 24h
+ * cache, or from npm when the cache is stale. Always resolves, never throws.
+ */
+async function primeUpdateCheck() {
+  if (isDisabled()) return;
+  try {
+    const cache = readCache();
+    if (cache && cache.latest && typeof cache.fetchedAt === 'number' && Date.now() - cache.fetchedAt < TTL_MS) {
+      latestInMemory = cache.latest;
+      return;
+    }
+    const latest = await fetchLatest();
+    if (latest) {
+      latestInMemory = latest;
+      writeCache({ ...(cache || {}), latest, fetchedAt: Date.now() });
+    } else if (cache && cache.latest) {
+      latestInMemory = cache.latest; // fall back to a stale-but-known value
+    }
+  } catch (_) {
+    /* never let update detection affect the server */
+  }
+}
+
+/**
+ * Synchronous. Returns a one-line update notice the first time it is called in
+ * a session where a newer version is known, otherwise null. Safe to call from
+ * the hot path of every tool result.
+ */
+function consumeUpdateNotice() {
+  try {
+    if (isDisabled() || sessionNotified) return null;
+
+    let latest = latestInMemory;
+    if (!latest) {
+      const cache = readCache(); // prime may not have finished yet
+      if (cache && cache.latest) latest = cache.latest;
+    }
+    if (!latest) return null;
+
+    const installed = getInstalledVersion();
+    if (!installed) return null;
+    if (compareSemver(latest, installed) <= 0) return null;
+
+    // Don't re-nag across sessions for a version we already announced.
+    const cache = readCache() || {};
+    if (cache.notifiedVersion === latest) {
+      sessionNotified = true;
+      return null;
+    }
+
+    sessionNotified = true;
+    writeCache({ ...cache, notifiedVersion: latest });
+    return (
+      `ℹ️ VOC 技能包有新版本 ${latest}（当前 ${installed}）。新版多平台电商/海外选品等接口能力更全。\n` +
+      '更新命令：npx @vocmarket/voc-skill@latest install（或 workspace 模式同理）。'
+    );
+  } catch (_) {
+    return null;
+  }
+}
+
+/** Prepend the update notice (once) to a normalized tool result in place. */
+function applyUpdateNotice(result) {
+  try {
+    if (!result || typeof result.assistantMessage !== 'string') return result;
+    const notice = consumeUpdateNotice();
+    if (notice) {
+      result.assistantMessage = result.assistantMessage
+        ? `${notice}\n\n${result.assistantMessage}`
+        : notice;
+    }
+  } catch (_) {
+    /* never block a tool result */
+  }
+  return result;
+}
+
+module.exports = {
+  primeUpdateCheck,
+  consumeUpdateNotice,
+  applyUpdateNotice,
+  getInstalledVersion,
+  compareSemver
+};

package/mcp/src/server.js

@@ -16,6 +16,7 @@ const { runBusinessWorkflow } = require('./tools/voc-business-workflow-run');
 const { analyzeFmodeImage } = require('./tools/fmode-image-analysis');
 const { searchVocApis, getVocApiDoc, callVocApi } = require('./tools/voc-api-catalog-run');
 const { buildVocRechargeInfo, buildMissingTokenMessage, buildMissingNewApiTokenMessage } = require('./core/payment-links');
+const { primeUpdateCheck, applyUpdateNotice } = require('./core/version-check');
 
 function asToolResult(result) {
   const normalized = normalizeToolResult(result);
@@ -55,6 +56,7 @@ function normalizeToolResult(result = {}) {
   if (Object.prototype.hasOwnProperty.call(result, 'errors')) {
     normalized.errors = Array.isArray(result.errors) ? result.errors : [];
   }
+  applyUpdateNotice(normalized);
   return normalized;
 }
 
@@ -774,6 +776,7 @@ function createServer() {
 
 async function main() {
   const server = createServer();
+  primeUpdateCheck(); // fire-and-forget: refresh latest-version knowledge for update hints
   const transport = new StdioServerTransport();
   await server.connect(transport);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vocmarket/voc-skill",
-  "version": "0.3.28",
+  "version": "0.3.29",
   "description": "Claude Code VOC intelligence skills for Xiaohongshu and Douyin trend reports, live social VOC collection, Fmode image analysis, single-issue deep dives, boss/operator action plans, and multi-turn memory.",
   "type": "commonjs",
   "bin": {

package/skill-package-manifest.json

@@ -1,7 +1,63 @@
 {
   "name": "claude-code-voc-intelligence",
-  "version": "0.3.28",
+  "version": "0.3.29",
+  "capabilities": {
+    "summary": "三类情报源同源接入：①社媒内容 ②国内电商+创作者情报 ③海外选品。统一 search→doc→call、鉴权计费一致。",
+    "channels": [
+      {
+        "key": "social",
+        "label": "社媒内容",
+        "platforms": 18,
+        "apis": 1018,
+        "examples": [
+          "抖音",
+          "小红书",
+          "TikTok",
+          "YouTube",
+          "微博",
+          "哔哩哔哩",
+          "快手",
+          "知乎",
+          "Instagram",
+          "Reddit",
+          "Twitter/X",
+          "微信/视频号"
+        ]
+      },
+      {
+        "key": "ecommerce",
+        "label": "国内电商 + 创作者情报",
+        "platforms": 32,
+        "apis": 285,
+        "examples": [
+          "京东",
+          "淘宝天猫",
+          "1688",
+          "抖音电商",
+          "TikTok Shop",
+          "闲鱼",
+          "得物",
+          "抖音星图",
+          "小红书蒲公英"
+        ]
+      },
+      {
+        "key": "overseas",
+        "label": "海外选品",
+        "platforms": 1,
+        "apis": 37,
+        "examples": [
+          "亚马逊"
+        ]
+      }
+    ],
+    "totals": {
+      "platforms": 51,
+      "apis": 1340
+    }
+  },
   "description": "Claude Code native VOC intelligence package for cross-industry social VOC workflows. Includes Xiaohongshu and Douyin trend intelligence, live token checks, evidence-card reports, single-issue VOC deep dives, boss/operator action plans, and scoped multi-turn memory.",
+  "changelogUrl": "https://www.npmjs.com/package/@vocmarket/voc-skill?activeTab=versions",
   "plugin": "voc-intelligence",
   "skills": [
     "xiaohongshu-trend-intelligence",
@@ -67,4 +123,4 @@
   "workspaceInstallCommand": "npx @vocmarket/voc-skill workspace --smoke",
   "workspaceInstallTarget": ".claude/plugins/voc-intelligence",
   "installHint": "Supports three delivery modes: unzip and run node install.js, install globally into ~/.claude/plugins/voc-intelligence, or install into the current workspace. Workspace mode writes .mcp.json plus .claude/skills/* entries for trend intelligence, issue pool, deep dive, competitor map, content plan, speaking script, VOC business workflow, and Fmode image analysis so VSCode Claude Code can discover the workflows without relying only on --plugin-dir."
-}
+}