@xiashe/cli 0.1.5 → 0.1.7

package/bin/xiashe.mjs

@@ -1,6 +1,10 @@
 #!/usr/bin/env node
 
+import { createHash } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { readdir, readFile, stat } from 'node:fs/promises';
 import os from 'node:os';
+import path from 'node:path';
 
 let sdk;
 try {
@@ -51,7 +55,6 @@ Usage:
   ${c} whoami
 
   ${c} config path|get|set <key> <value>|use <profile>
-  ${c} env use ${PRODUCT_ENV}
 
   ${c} connections list
   ${c} claw pair --connection <id-or-name>
@@ -63,6 +66,13 @@ Usage:
   ${c} skills install <skill> --connection <id-or-name> [--watch]
   ${c} skills jobs --connection <id-or-name>
   ${c} skills claim <one-time-token>
+  ${c} skills publish draft [skill-dir] --name <name> --entry <entry> --install-id <id> --source <source>
+  ${c} skills publish update <submission-id> [skill-dir] [--name <name>] [--entry <entry>]
+  ${c} skills publish doctor <submission-id>
+  ${c} skills publish submit <submission-id>
+  ${c} skills publish list
+  ${c} skills publish review <submission-id> --status <in_review|changes_requested|approved|rejected> [--notes <text>]
+  ${c} skills publish release <submission-id>
 
   ${c} agent issue [--name <name>] [--kind <kind>] [--json]
   ${c} agent connect --token <token> [--name <name>] [--kind <kind>] [--webhook-url <https-url>] [--webhook-token <secret>]
@@ -539,6 +549,10 @@ async function cmdSkills(sub, args, global) {
     ]);
     return;
   }
+  if (sub === 'publish' || sub === 'submission' || sub === 'submissions') {
+    await cmdSkillPublish(flags, client, global);
+    return;
+  }
   if (sub === 'claim' || sub === 'use') {
     await claimSkill(flags, client, global);
     return;
@@ -546,6 +560,106 @@ async function cmdSkills(sub, args, global) {
   fail(`Unknown skills command: ${sub}`, EXIT_USAGE);
 }
 
+async function cmdSkillPublish(flags, client, global) {
+  const action = flags._[0] || 'list';
+  if (action === 'list' || action === 'ls') {
+    const rows = await client.listSkillSubmissions(Number(flags.limit || 20));
+    if (global.json) {
+      print(rows, global);
+      return;
+    }
+    table(rows, [
+      { label: 'id', value: (row) => row._id },
+      { label: 'status', value: (row) => row.status },
+      { label: 'market', value: (row) => row.market },
+      { label: 'name', value: (row) => row.name },
+      { label: 'updated', value: (row) => nowIso(row.updatedAt).slice(0, 19) }
+    ]);
+    return;
+  }
+  if (action === 'draft' || action === 'create') {
+    const skillDir = flags._[1] && !String(flags._[1]).startsWith('--') ? flags._[1] : '.';
+    const draft = await inferPublishDraft(skillDir, flags, client);
+    const result = await client.createSkillSubmissionDraft(draft);
+    if (global.json) {
+      print({ ok: true, ...result, draft }, global);
+      return;
+    }
+    print(
+      [
+        `Created Skill submission draft: ${result.submissionId}`,
+        `Name: ${draft.name}`,
+        `Market: ${draft.market}`,
+        `Source fingerprint: ${draft.packageSha256}`,
+        '',
+        `Next: ${COMMAND_NAME} skills publish doctor ${result.submissionId}`,
+        `Then: ${COMMAND_NAME} skills publish submit ${result.submissionId}`
+      ].join('\n'),
+      global
+    );
+    return;
+  }
+  if (action === 'update') {
+    const submissionId = requireArg(flags._[1], 'submission-id');
+    const skillDir = flags._[2] && !String(flags._[2]).startsWith('--') ? flags._[2] : '.';
+    const patch = await inferPublishDraft(skillDir, flags, client);
+    const result = await client.updateSkillSubmissionDraft(submissionId, patch);
+    print(global.json ? { ok: true, ...result, patch } : `Updated Skill submission draft: ${result.submissionId}`, global);
+    return;
+  }
+  if (action === 'doctor' || action === 'check') {
+    const submissionId = requireArg(flags._[1], 'submission-id');
+    const report = await client.runSkillSubmissionSafetyCheck(submissionId);
+    printSafetyReport(report, global);
+    return;
+  }
+  if (action === 'submit') {
+    const submissionId = requireArg(flags._[1], 'submission-id');
+    const result = await client.submitSkillSubmissionForReview(submissionId);
+    if (global.json) {
+      print(result, global);
+      return;
+    }
+    print(`Submitted Skill for review: ${submissionId}`, global);
+    return;
+  }
+  if (action === 'admin-list') {
+    const rows = await client.adminListSkillSubmissions({ status: flags.status || undefined, limit: Number(flags.limit || 50) });
+    if (global.json) {
+      print(rows, global);
+      return;
+    }
+    table(rows, [
+      { label: 'id', value: (row) => row._id },
+      { label: 'status', value: (row) => row.status },
+      { label: 'market', value: (row) => row.market },
+      { label: 'name', value: (row) => row.name },
+      { label: 'updated', value: (row) => nowIso(row.updatedAt).slice(0, 19) }
+    ]);
+    return;
+  }
+  if (action === 'review' || action === 'approve' || action === 'reject' || action === 'changes') {
+    const submissionId = requireArg(flags._[1], 'submission-id');
+    const status = action === 'approve'
+      ? 'approved'
+      : action === 'reject'
+        ? 'rejected'
+        : action === 'changes'
+          ? 'changes_requested'
+          : requireArg(flags.status, '--status');
+    const result = await client.adminReviewSkillSubmission(submissionId, status, flags.notes || flags.reviewNotes || '');
+    print(result, global);
+    return;
+  }
+  if (action === 'release' || action === 'publish') {
+    const submissionId = requireArg(flags._[1], 'submission-id');
+    const result = await client.publishSkillSubmission(submissionId, flags.status || 'released');
+    print(result, global);
+    return;
+  }
+  fail(`Unknown skills publish command: ${action}`, EXIT_USAGE);
+}
+
 async function watchSkillJob(client, connectionId, jobId, global) {
   const deadline = Date.now() + Number(global.watchTimeoutMs || 180_000);
   let latest = null;
@@ -1028,6 +1142,134 @@ function parseCsv(input) {
     .filter(Boolean);
 }
 
+const PUBLISH_IGNORE = new Set(['.git', 'node_modules', '.DS_Store', '.env', '.env.local', 'dist', 'build', 'coverage']);
+const PUBLISH_MAX_FILE_BYTES = 2 * 1024 * 1024;
+
+async function readSmallText(filePath) {
+  try {
+    const info = await stat(filePath);
+    if (!info.isFile() || info.size > PUBLISH_MAX_FILE_BYTES) return '';
+    return await readFile(filePath, 'utf8');
+  } catch {
+    return '';
+  }
+}
+
+async function readJson(filePath) {
+  const text = await readSmallText(filePath);
+  if (!text) return null;
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+
+async function walkPublishFiles(root, current = root, out = []) {
+  let entries = [];
+  try {
+    entries = await readdir(current, { withFileTypes: true });
+  } catch {
+    return out;
+  }
+  for (const entry of entries) {
+    if (PUBLISH_IGNORE.has(entry.name) || entry.name.endsWith('.log') || entry.name.endsWith('.tmp')) continue;
+    const absolute = path.join(current, entry.name);
+    const relative = path.relative(root, absolute).replaceAll(path.sep, '/');
+    if (entry.isDirectory()) {
+      await walkPublishFiles(root, absolute, out);
+      continue;
+    }
+    if (!entry.isFile()) continue;
+    const info = await stat(absolute).catch(() => null);
+    if (!info || info.size > PUBLISH_MAX_FILE_BYTES) continue;
+    out.push({ absolute, relative, size: info.size });
+  }
+  return out.sort((a, b) => a.relative.localeCompare(b.relative));
+}
+
+async function hashPublishDirectory(root) {
+  const files = await walkPublishFiles(root);
+  const hash = createHash('sha256');
+  for (const file of files) {
+    const bytes = await readFile(file.absolute);
+    hash.update(file.relative);
+    hash.update('\0');
+    hash.update(bytes);
+    hash.update('\0');
+  }
+  return { sha256: hash.digest('hex'), fileCount: files.length, totalBytes: files.reduce((sum, file) => sum + file.size, 0) };
+}
+
+function firstHeading(text) {
+  return /^#\s+(.+)$/m.exec(text || '')?.[1]?.trim() || '';
+}
+
+function firstParagraph(text) {
+  return String(text || '')
+    .split(/\n{2,}/)
+    .map((item) => item.trim())
+    .find((item) => item && !item.startsWith('#') && !item.startsWith('---')) || '';
+}
+
+async function inferPublishDraft(skillDir, flags, client) {
+  const root = path.resolve(skillDir || '.');
+  const info = await stat(root).catch(() => null);
+  if (!info?.isDirectory()) {
+    throw new Error(`Skill directory not found: ${root}`);
+  }
+  const packageJson = await readJson(path.join(root, 'package.json'));
+  const skillMd = await readSmallText(path.join(root, 'SKILL.md'));
+  const readme = await readSmallText(path.join(root, 'README.md'));
+  const text = `${skillMd}\n\n${readme}`;
+  const digest = await hashPublishDirectory(root);
+  const name = flags.name || packageJson?.name || firstHeading(text) || path.basename(root);
+  const intro = flags.intro || flags.summary || packageJson?.description || firstParagraph(text);
+  const entrypoint =
+    flags.entry ||
+    flags.entrypoint ||
+    packageJson?.bin && (typeof packageJson.bin === 'string' ? packageJson.bin : Object.values(packageJson.bin)[0]) ||
+    packageJson?.main ||
+    'SKILL.md';
+  const source = flags.source || (COMMAND_NAME === 'agentpie' ? 'agentpie' : 'xiashe');
+  const installId = flags['install-id'] || flags.installId || packageJson?.name || path.basename(root);
+  return {
+    market: flags.market || client.profile.market || (COMMAND_NAME === 'agentpie' ? 'intl' : 'cn'),
+    name,
+    summary: intro,
+    summaryZh: flags['summary-zh'] || undefined,
+    description: flags.description || intro,
+    descriptionZh: flags['description-zh'] || undefined,
+    entrypoint,
+    installId,
+    source,
+    sourceUrl: flags['source-url'] || flags.repo || undefined,
+    iconImageUrl: flags['icon-url'] || undefined,
+    coverImageUrl: flags['cover-url'] || undefined,
+    previewImageUrls: parseCsv(flags['preview-url'] || flags['preview-urls']),
+    videoUrls: parseCsv(flags['video-url'] || flags['video-urls']),
+    category: flags.category || undefined,
+    tags: parseCsv(flags.tags),
+    registryEntryId: flags['registry-entry'] || flags.registryEntryId || undefined,
+    packageSha256: digest.sha256
+  };
+}
+
+function printSafetyReport(report, global) {
+  if (global.json) {
+    print(report, global);
+    return;
+  }
+  const lines = [
+    `Safety: ${report.status} (${report.score}/100)`,
+    ''
+  ];
+  for (const check of report.checks || []) {
+    lines.push(`${String(check.status).toUpperCase()} ${check.label}: ${check.message}`);
+  }
+  print(lines.join('\n'), global);
+}
+
 function osName() {
   return `${osPlatform()}-${process.arch}`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiashe/cli",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "type": "module",
   "bin": {
     "xiashe": "bin/xiashe.mjs"
@@ -10,7 +10,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@xiashe/sdk": "0.1.6"
+    "@xiashe/sdk": "0.1.7"
   },
   "engines": {
     "node": ">=20"