@wangkh/skill-sync-cli 0.1.0 → 0.2.0

package/README.md

@@ -91,6 +91,18 @@ default user file. An explicit missing or invalid file produces an error when
 reading; it never falls back to another manifest. Clone a remote configuration
 repository first, then pass the path to its local JSON file.
 
+To bootstrap from a manifest that is already published online, pass its file URL
+to `init --from`. Gitee and GitHub `blob` page URLs are converted to raw file
+URLs automatically, and the download is validated before anything is written:
+
+```bash
+npx @wangkh/skill-sync-cli init --from https://gitee.com/ai_1024/skill-sync/blob/main/skills.json
+npx @wangkh/skill-sync-cli init --from https://gitee.com/ai_1024/skill-sync/blob/main/skills.json --config ./my-skills/skills.json
+```
+
+Without `--config`, the manifest is written to the default user location;
+existing files still require `--force`.
+
 The `npx skills` package itself does not discover these files. This wrapper
 reads the selected manifest, then delegates each installation to `npx skills`.
 
@@ -198,6 +210,9 @@ npx @wangkh/skill-sync-cli plan --config ./my-skills/skills.json
 npx @wangkh/skill-sync-cli sync --config ./my-skills/skills.json
 ```
 
+You can skip the clone and initialize directly from the published file URL with
+`npx @wangkh/skill-sync-cli init --from <url>`.
+
 After committing and pushing future manifest edits, update each existing clone:
 
 ```bash
@@ -263,7 +278,7 @@ npm run check
 npm run test:package
 ```
 
-This creates `dist/wangkh-skill-sync-cli-0.1.0.tgz` and `dist/package-check.json`. The
+This creates `dist/wangkh-skill-sync-cli-0.2.0.tgz` and `dist/package-check.json`. The
 package check runs real npx commands offline, with a temporary home directory
 and a fresh npm cache. It verifies initialization, external manifests, previews, and
 error handling, then removes the temporary environment. The archive and report
@@ -272,9 +287,9 @@ remain in `dist/`.
 You can run that archive directly. Replace the path with its absolute location:
 
 ```bash
-npx --yes --package /absolute/path/wangkh-skill-sync-cli-0.1.0.tgz skill-sync-cli --help
-npx --yes --package /absolute/path/wangkh-skill-sync-cli-0.1.0.tgz skill-sync-cli init
-npx --yes --package /absolute/path/wangkh-skill-sync-cli-0.1.0.tgz skill-sync-cli plan
+npx --yes --package /absolute/path/wangkh-skill-sync-cli-0.2.0.tgz skill-sync-cli --help
+npx --yes --package /absolute/path/wangkh-skill-sync-cli-0.2.0.tgz skill-sync-cli init
+npx --yes --package /absolute/path/wangkh-skill-sync-cli-0.2.0.tgz skill-sync-cli plan
 ```
 
 These manual commands use your normal user configuration directory. To select a

package/README.zh-CN.md

@@ -48,6 +48,15 @@ npx @wangkh/skill-sync-cli path --config ./my-skills/skills.json
 
 每次使用仓库清单时都传入 `--config`；省略时使用默认用户配置。远程配置仓库先用 Git 克隆到本机，再把本地 JSON 文件路径交给这个参数。
 
+如果清单已经发布在 Gitee 或 GitHub 上，可以用 `init --from` 直接按链接初始化；`blob` 页面链接会自动转换为 raw 文件地址，下载后会先校验清单格式再写入：
+
+```bash
+npx @wangkh/skill-sync-cli init --from https://gitee.com/ai_1024/skill-sync/blob/main/skills.json
+npx @wangkh/skill-sync-cli init --from https://gitee.com/ai_1024/skill-sync/blob/main/skills.json --config ./my-skills/skills.json
+```
+
+不传 `--config` 时，清单写入默认用户配置位置；目标文件已存在时仍需显式加 `--force`。
+
 ## 清单格式
 
 ```json
@@ -150,6 +159,8 @@ npx @wangkh/skill-sync-cli plan --config ./my-skills/skills.json
 npx @wangkh/skill-sync-cli sync --config ./my-skills/skills.json
 ```
 
+也可以不克隆，直接用 `npx @wangkh/skill-sync-cli init --from <文件链接>` 按链接初始化。
+
 以后修改清单并提交、推送后，在已经克隆仓库的电脑上执行：
 
 ```bash
@@ -190,14 +201,14 @@ npm run check
 npm run test:package
 ```
 
-命令会生成 `dist/wangkh-skill-sync-cli-0.1.0.tgz` 和验证报告 `dist/package-check.json`。安装包验证通过真实 npx 命令离线执行，使用临时用户目录和全新的 npm 缓存，检查初始化、外部清单、预览和错误处理。验证结束后清理临时环境，保留安装包及报告。
+命令会生成 `dist/wangkh-skill-sync-cli-0.2.0.tgz` 和验证报告 `dist/package-check.json`。安装包验证通过真实 npx 命令离线执行，使用临时用户目录和全新的 npm 缓存，检查初始化、外部清单、预览和错误处理。验证结束后清理临时环境，保留安装包及报告。
 
 也可以直接用 npx 运行安装包。请把路径替换为安装包的实际绝对路径：
 
 ```powershell
-npx --yes --package "C:\path\to\wangkh-skill-sync-cli-0.1.0.tgz" skill-sync-cli --help
-npx --yes --package "C:\path\to\wangkh-skill-sync-cli-0.1.0.tgz" skill-sync-cli init
-npx --yes --package "C:\path\to\wangkh-skill-sync-cli-0.1.0.tgz" skill-sync-cli plan
+npx --yes --package "C:\path\to\wangkh-skill-sync-cli-0.2.0.tgz" skill-sync-cli --help
+npx --yes --package "C:\path\to\wangkh-skill-sync-cli-0.2.0.tgz" skill-sync-cli init
+npx --yes --package "C:\path\to\wangkh-skill-sync-cli-0.2.0.tgz" skill-sync-cli plan
 ```
 
 这些手动命令默认使用正常的用户配置目录。使用仓库清单时，在子命令后加上 `--config "C:\path\to\my-skills\skills.json"`。

package/RELEASING.md

@@ -1,18 +1,18 @@
-# 发布 0.1.0
+# 发布 0.2.0
 
 ## 发布信息
 
 | 项目 | 值 |
 | --- | --- |
 | npm 包名 | `@wangkh/skill-sync-cli` |
-| 版本 | `0.1.0` |
+| 版本 | `0.2.0` |
 | 命令入口 | `npx @wangkh/skill-sync-cli`；安装后的可执行命令为 `skill-sync-cli` |
 | 计划 GitHub 仓库 | `https://github.com/yudaiyan/skill-sync-cli` |
 | 默认上游 CLI | `skills@1.5.22` |
 | 默认配置位置 | `~/.config/skill-sync/skills.json` |
 | 仓库清单 | `--config /path/to/my-skills/skills.json`，也支持 `-c` |
 
-2026-09-10 首次发布时，npm 公共注册表拒绝了非作用域包名 `skill-sync-cli`，理由是它与已存在的 `skillsync-cli` 过于相似，并建议改用 `@wangkh/skill-sync-cli`；当前包名已采用该建议，发布需要 npm 账号的 2FA。GitHub CLI 登录账号为 `yudaiyan`，仓库地址按 `https://github.com/yudaiyan/skill-sync-cli` 准备。
+0.1.0 已于 2026-09-10 发布到 npm；首次尝试非作用域包名 `skill-sync-cli` 时被拒（与已存在的 `skillsync-cli` 过于相似），随后改用 `@wangkh/skill-sync-cli`。发布需要 npm 账号的 2FA。GitHub 仓库已创建：`https://github.com/yudaiyan/skill-sync-cli`。0.2.0 新增 `init --from <url>`，支持从 Gitee / GitHub 文件链接初始化清单。
 
 ## 生成并验证安装包
 
@@ -25,22 +25,17 @@ npm run test:package
 
 `test:package` 会实际执行 `npm pack`，随后用独立的用户目录和 npm 缓存离线运行安装包。输出：
 
-- `dist/wangkh-skill-sync-cli-0.1.0.tgz`：可分发的 npm 安装包。
+- `dist/wangkh-skill-sync-cli-0.2.0.tgz`：可分发的 npm 安装包。
 - `dist/package-check.json`：包摘要、文件清单、执行环境和通过的检查。
 
 `dist/` 已加入 Git 忽略规则。修改代码或文档后，需要重新生成安装包，使报告对应最终内容。
 
 ## 正式发布流程
 
-完成发布准备提交后，创建计划仓库并推送 `main`。例如，选择公开仓库时：
-
-```bash
-gh repo create yudaiyan/skill-sync-cli --public --source . --remote origin --push
-```
-
-确认 npm 登录身份，然后从项目源码目录发布：
+确认改动已提交并推送 `main`，然后确认 npm 登录身份，从项目源码目录发布：
 
 ```bash
+git push origin main
 npm whoami --registry=https://registry.npmjs.org/
 npm publish
 ```
@@ -51,8 +46,8 @@ npm publish
 
 ```bash
 npm view @wangkh/skill-sync-cli version
-npx --yes @wangkh/skill-sync-cli@0.1.0 --version
-npx --yes @wangkh/skill-sync-cli@0.1.0 --help
+npx --yes @wangkh/skill-sync-cli@0.2.0 --version
+npx --yes @wangkh/skill-sync-cli@0.2.0 --help
 ```
 
 ## 后续版本

package/bin/skill-sync.mjs

@@ -25,6 +25,7 @@ Usage:
 
 Options:
   -c, --config <file>      Use this JSON manifest (relative or absolute path)
+  --from <url>             Initialize from a remote manifest URL (init only)
   --dry-run               Print commands without downloading anything
   --continue-on-error     Continue after a skill installation fails
   --force                 Replace the selected manifest with init
@@ -38,6 +39,7 @@ Examples:
   npx ${COMMAND_NAME} sync
   npx ${COMMAND_NAME} init --config ./my-skills/skills.json
   npx ${COMMAND_NAME} sync --config ./my-skills/skills.json
+  npx ${COMMAND_NAME} init --from https://gitee.com/ai_1024/skill-sync/blob/main/skills.json
 
 Without --config, use ~/.config/skill-sync/skills.json.
 Relative config paths and project installations use the current working directory.
@@ -74,6 +76,16 @@ function parseArgs(argv) {
         throw new Error("--config requires a file path")
       }
       options.configFile = value
+    } else if (arg === "--from" || arg.startsWith("--from=")) {
+      if (options.from !== undefined) {
+        throw new Error("Specify --from only once")
+      }
+      const inline = arg.startsWith("--from=")
+      const value = inline ? arg.slice("--from=".length) : argv[++index]
+      if (value === undefined || value.trim() === "" || (!inline && value.startsWith("-"))) {
+        throw new Error("--from requires a URL")
+      }
+      options.from = value
     } else if (arg.startsWith("-")) {
       throw new Error(`Unknown option: ${arg}`)
     } else {
@@ -104,6 +116,9 @@ async function main() {
   if (options.positional.length > 1) {
     throw new Error(`Unexpected argument: ${options.positional[1]}`)
   }
+  if (options.from !== undefined && command !== "init") {
+    throw new Error("--from is only supported by init")
+  }
 
   const filename = resolveConfigPath(options.configFile)
   if (command === "init") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wangkh/skill-sync-cli",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Sync declared agent skills across machines through the skills CLI",
   "author": "wkh",
   "repository": {

package/src/commands.mjs

@@ -11,6 +11,7 @@ import {
   runCommand,
   statusCode,
 } from "./runner.mjs"
+import { downloadManifest } from "./remote.mjs"
 
 const SAMPLE_MANIFEST = {
   version: 1,
@@ -109,7 +110,7 @@ export async function syncCommand(manifestFilename, options = {}) {
   return 0
 }
 
-export async function initCommand(manifestFilename, { force = false } = {}) {
+export async function initCommand(manifestFilename, { force = false, from, fetchImpl } = {}) {
   const filename = path.resolve(manifestFilename)
   if (!force) {
     try {
@@ -120,12 +121,25 @@ export async function initCommand(manifestFilename, { force = false } = {}) {
     }
   }
 
+  let text = `${JSON.stringify(SAMPLE_MANIFEST, null, 2)}\n`
+  let source
+  if (from !== undefined) {
+    const downloaded = await downloadManifest(from, { fetchImpl })
+    source = downloaded.url
+    try {
+      normalizeManifest(JSON.parse(downloaded.text))
+    } catch (error) {
+      throw new Error(`Remote manifest at ${source} is invalid: ${error.message}`)
+    }
+    text = downloaded.text.endsWith("\n") ? downloaded.text : `${downloaded.text}\n`
+  }
+
   await mkdir(path.dirname(filename), { recursive: true })
-  await writeFile(filename, `${JSON.stringify(SAMPLE_MANIFEST, null, 2)}\n`, {
+  await writeFile(filename, text, {
     encoding: "utf8",
     flag: force ? "w" : "wx",
   })
-  console.log(`Created ${filename}`)
+  console.log(source ? `Created ${filename} from ${source}` : `Created ${filename}`)
   return 0
 }
 

package/src/remote.mjs

@@ -0,0 +1,51 @@
+const MAX_MANIFEST_BYTES = 1024 * 1024
+
+export function normalizeManifestUrl(input) {
+  let parsed
+  try {
+    parsed = new URL(input)
+  } catch {
+    return input
+  }
+
+  if (parsed.hostname === "gitee.com") {
+    const match = parsed.pathname.match(/^\/([^/]+)\/([^/]+)\/blob\/(.+)$/)
+    if (match) return `${parsed.origin}/${match[1]}/${match[2]}/raw/${match[3]}`
+  }
+
+  if (parsed.hostname === "github.com") {
+    const match = parsed.pathname.match(/^\/([^/]+)\/([^/]+)\/blob\/(.+)$/)
+    if (match) return `https://raw.githubusercontent.com/${match[1]}/${match[2]}/${match[3]}`
+  }
+
+  return input
+}
+
+export async function downloadManifest(url, { fetchImpl = fetch, timeoutMs = 20000 } = {}) {
+  if (typeof url !== "string" || !/^https?:\/\//i.test(url)) {
+    throw new Error("--from requires an http(s) URL")
+  }
+
+  const normalized = normalizeManifestUrl(url)
+  let response
+  try {
+    response = await fetchImpl(normalized, {
+      redirect: "follow",
+      signal: AbortSignal.timeout(timeoutMs),
+      headers: { "user-agent": "skill-sync-cli" },
+    })
+  } catch (error) {
+    throw new Error(`Cannot download manifest from ${normalized}: ${error.message}`)
+  }
+
+  if (!response.ok) {
+    throw new Error(`Cannot download manifest from ${normalized}: HTTP ${response.status}`)
+  }
+
+  const text = await response.text()
+  if (Buffer.byteLength(text, "utf8") > MAX_MANIFEST_BYTES) {
+    throw new Error(`Remote manifest is too large (limit ${MAX_MANIFEST_BYTES} bytes): ${normalized}`)
+  }
+
+  return { url: normalized, text: text.replace(/^\uFEFF/, "") }
+}