@yottameta/yotta-skills-plugin 0.25.1 → 0.27.0

package/skills/yotta-skills/lib/hub-scan.js

@@ -0,0 +1,97 @@
+'use strict';
+
+/**
+ * Shared "yotta-verify" engine discovery + scan runner for Hub adoption.
+ *
+ * The CLI and the local Hub panel (yotta-skills view) both import this module
+ * so an adopt action always runs the same gate: locate a trusted verifier,
+ * run it against the candidate directory, then evaluate the verdict.
+ */
+
+const path = require('path');
+const { spawnSync } = require('child_process');
+const depsLib = require('./deps');
+const gateLib = require('./verify-gate');
+const trustedVerifierLib = require('./trusted-verifier');
+
+function currentCommand() {
+  const args = process.argv.slice(2).map((a) => (/\s/.test(a) ? '"' + a + '"' : a));
+  return 'yotta-skills ' + args.join(' ');
+}
+
+function findVerifyEngine(dest, opts) {
+  // Do not use the registry for verifier identity: only the trusted record
+  // written by the install pipeline (path + digest) counts.
+  return gateLib.findVerifier({ dest, opts, trustedVerifier: trustedVerifierLib.loadRecord() });
+}
+
+function findPython(opts) {
+  const options = opts || {};
+  const cands = [];
+  if (options.python) cands.push(options.python);
+  if (process.env.YOTTA_SKILLS_PYTHON) cands.push(process.env.YOTTA_SKILLS_PYTHON);
+  cands.push('python3', 'python');
+  if (process.platform === 'win32') cands.push('py');
+  for (const c of cands) {
+    try {
+      const r = spawnSync(c, ['--version'], { encoding: 'utf8', timeout: 10000 });
+      if (r.status === 0) return c;
+    } catch (_) { /* next candidate */ }
+  }
+  return null;
+}
+
+function runScan(engine, skillDir, opts) {
+  const python = findPython(opts || {});
+  if (!python) {
+    return {
+      ok: false,
+      error: depsLib.describe('python', { command: currentCommand(), missing: true }),
+    };
+  }
+  return gateLib.runVerifier(engine, skillDir, { python, spawnSync });
+}
+
+/** Hub adopt scan engine: Hub itself first, then every discovered host dir. */
+function scanEngineForHub(hubDir, discovery, opts) {
+  const direct = findVerifyEngine(hubDir, opts);
+  if (direct) return direct;
+  const hosts = (discovery && discovery.hosts) || [];
+  for (const host of hosts) {
+    if (!host.exists) continue;
+    const engine = findVerifyEngine(host.dir, opts);
+    if (engine) return engine;
+  }
+  return null;
+}
+
+/**
+ * Scan one candidate directory for Hub adoption.
+ * Returns { ok, verdict, counts, block } or { ok:false, error }.
+ */
+function hubScanSkill(hubDir, discovery, opts, skillDir) {
+  const options = opts || {};
+  if (options.skipScan) {
+    return { ok: true, verdict: 'explicit-unverified', counts: null, block: false };
+  }
+  const engine = scanEngineForHub(hubDir, discovery, options);
+  if (!engine) {
+    return {
+      ok: false,
+      error: '未找到元信扫描引擎（可先安装 yotta-verify，或用 --allow-unverified 显式降级）',
+    };
+  }
+  const scan = runScan(engine, skillDir, options);
+  if (!scan.ok) return scan;
+  const verdict = gateLib.evaluateVerdict(scan.verdict);
+  return { ok: true, verdict: scan.verdict, counts: scan.counts, block: verdict.block };
+}
+
+module.exports = {
+  currentCommand,
+  findVerifyEngine,
+  findPython,
+  runScan,
+  scanEngineForHub,
+  hubScanSkill,
+};