@zhin.js/adapter-github 3.0.3 → 4.0.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @zhin.js/adapter-github
 
+## 4.0.0
+
+### Patch Changes
+
+- 7db69c1: 命令前缀改为适配器配置项：`MessageDispatcher` 不再硬编码 `/`，默认按消息所属适配器实例 config 的 `commandPrefix` 解析（默认 `''` 无前缀，任意文本按命令匹配），`endpoints[i].commandPrefix` 逐项覆盖；`ImRuntime({ commandPrefix })` 仍可设全局静态前缀。全部 20 个平台适配器 schema 新增 `commandPrefix` 属性。
+
+  BREAKING（行为变化）：未配置时命令不再需要 `/` 前缀——原 `/zt` 写法不再命中，直接发 `zt` 即可；需要斜杠风格的适配器请在配置里显式设 `commandPrefix: '/'`。
+
+- 713445c: 适配器配置格式定稿（不兼容旧格式）：`plugins.<adapter>` 顶层仅共享字段 + `commandPrefix`，`endpoints[i]` 携带 endpoint 级字段（`name` + 凭据，各 schema 已类型化），`endpoints` 为必填（icqq 另需顶层 `master`）；icqq 新增 `trusted` 列表（顶层/逐项均可）。scaffold-wizard 全部字段式与自定义 configure() 产出改为新格式，examples（full-bot / qq-games-bot）与 20 个适配器 README 同步迁移。
+- f32c424: 适配器配置统一为 endpoints 数组格式：`plugins.<adapter>` 为该 adapter 所有 endpoint 的通用配置，`plugins.<adapter>.endpoints[i]` 为单个 endpoint 的特殊配置（逐项覆盖，`name` 必填）。slack / github schema 新增 `endpoints` 属性；icqq / qq / slack 顶层必填改为 `anyOf`（单 endpoint 字段或 `endpoints` 数组二选一，兼容 Ajv strictRequired）。
+- Updated dependencies [7db69c1]
+- Updated dependencies [e5c84ed]
+- Updated dependencies [3ea84a0]
+- Updated dependencies [1ddcd70]
+- Updated dependencies [ac9da66]
+  - @zhin.js/core@1.4.0
+  - @zhin.js/adapter@1.1.0
+  - @zhin.js/plugin-runtime@1.1.0
+  - @zhin.js/agent@1.0.5
+  - @zhin.js/host-http@1.0.2
+  - zhin.js@5.0.0
+
 ## 3.0.3
 
 ### Patch Changes

package/README.md

@@ -24,14 +24,15 @@ Webhook 需要 Root 提供 `@zhin.js/host-http`（`zhin runtime start` 默认装
 # zhin.config.yml
 plugins:
   github:
-    name: my-github-bot
-    app_id: 123456
-    private_key: ./data/github-app.pem
-    webhook_secret: your-secret
     webhook_path: /github/webhook
     auto_reply_repos:
       - zhinjs/zhin
     workspace_root: ./data/github-workspaces
+    endpoints:
+      - name: my-github-bot
+        app_id: 123456
+        private_key: ./data/github-app.pem
+        webhook_secret: your-secret
 ```
 
 ```env
@@ -41,6 +42,20 @@ GITHUB_WEBHOOK_SECRET=your-secret
 
 `private_key` 支持文件路径或 PEM 内容。未配置 `webhook_secret` 时仅 API 出站 / agent 工具可用（无入站）。
 
+多 App：一个插件实例挂多个 endpoint（`endpoints` 数组逐项覆盖顶层字段，`name` 必填）：
+
+```yaml
+plugins:
+  github:
+    endpoints:
+      - name: app-a
+        app_id: 123456
+        private_key: ./data/app-a.pem
+      - name: app-b
+        app_id: 234567
+        private_key: ./data/app-b.pem
+```
+
 ## 已移除的配置
 
 - **`ai.githubMcp.enabled` / `ai.githubMcp.token`**：Plugin Runtime 迁移后 `register-github-mcp`（stdio `@modelcontextprotocol/server-github`，PAT 人身份）已移除，该配置不再生效。如需 MCP 工具，请按新运行时 `mcp/<name>.ts`（`@zhin.js/mcp-feature`）约定自行装配。

package/lib/workspace-manager.js

@@ -5,7 +5,16 @@ import { spawn } from 'node:child_process';
 import fs from 'node:fs';
 import path from 'node:path';
 const REPO_FULL_NAME_RE = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
-const GIT_REF_ILLEGAL_RE = /[\s\x00-\x1f\x7f~^:?*[\\`;]/;
+const GIT_REF_ILLEGAL_CHARS = new Set('~^:?*[\\`;');
+function containsIllegalGitRefCharacter(ref) {
+    return [...ref].some((character) => {
+        const code = character.charCodeAt(0);
+        return code <= 31
+            || code === 127
+            || /\s/u.test(character)
+            || GIT_REF_ILLEGAL_CHARS.has(character);
+    });
+}
 /**
  * 校验 GitHub "owner/name" 全名，防止路径穿越与 git 选项注入。
  * 返回通过校验的原值，便于调用方直接使用「已消毒」的变量。
@@ -27,7 +36,7 @@ export function assertGitRefName(ref) {
     }
     if (ref.startsWith('-') ||
         ref.includes('..') ||
-        GIT_REF_ILLEGAL_RE.test(ref) ||
+        containsIllegalGitRefCharacter(ref) ||
         ref.endsWith('/') ||
         ref.endsWith('.')) {
         throw new TypeError(`非法的 git ref: ${JSON.stringify(ref)}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-github",
-  "version": "3.0.3",
+  "version": "4.0.0",
   "description": "Zhin.js GitHub adapter for Plugin Runtime (App auth + webhook)",
   "type": "module",
   "main": "./lib/index.js",
@@ -41,20 +41,20 @@
     "directory": "plugins/adapters/github"
   },
   "dependencies": {
-    "@zhin.js/adapter": "1.0.1",
-    "@zhin.js/core": "1.3.5",
-    "@zhin.js/host-http": "1.0.1",
+    "@zhin.js/adapter": "1.1.0",
+    "@zhin.js/core": "1.4.0",
+    "@zhin.js/host-http": "1.0.2",
     "@zhin.js/logger": "1.0.75",
-    "@zhin.js/plugin-runtime": "1.0.1"
+    "@zhin.js/plugin-runtime": "1.1.0"
   },
   "peerDependencies": {
     "zod": "^4.0.0",
-    "@zhin.js/adapter": "1.0.1",
-    "@zhin.js/agent": "1.0.4",
-    "@zhin.js/core": "1.3.5",
-    "@zhin.js/host-http": "1.0.1",
-    "@zhin.js/plugin-runtime": "1.0.1",
-    "zhin.js": "4.1.3"
+    "@zhin.js/adapter": "1.1.0",
+    "@zhin.js/agent": "1.0.5",
+    "@zhin.js/core": "1.4.0",
+    "@zhin.js/host-http": "1.0.2",
+    "@zhin.js/plugin-runtime": "1.1.0",
+    "zhin.js": "5.0.0"
   },
   "peerDependenciesMeta": {
     "zhin.js": {
@@ -72,8 +72,8 @@
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
     "zod": "^4.4.3",
-    "@zhin.js/agent": "1.0.4",
-    "zhin.js": "4.1.3"
+    "@zhin.js/agent": "1.0.5",
+    "zhin.js": "5.0.0"
   },
   "files": [
     "adapters",

package/schema.json

@@ -3,38 +3,10 @@
   "type": "object",
   "additionalProperties": false,
   "properties": {
-    "name": {
-      "type": "string",
-      "default": "github-bot"
-    },
     "host": {
       "type": "string",
       "description": "GitHub Enterprise hostname (default github.com)"
     },
-    "app_id": {
-      "type": ["string", "number"],
-      "description": "GitHub App ID"
-    },
-    "appId": {
-      "type": ["string", "number"],
-      "description": "GitHub App ID (camelCase alias)"
-    },
-    "private_key": {
-      "type": "string",
-      "description": "GitHub App private key (PEM content or file path)"
-    },
-    "privateKey": {
-      "type": "string",
-      "description": "GitHub App private key (camelCase alias)"
-    },
-    "webhook_secret": {
-      "type": "string",
-      "description": "Webhook HMAC secret; enables httpHostToken POST route"
-    },
-    "webhookSecret": {
-      "type": "string",
-      "description": "Webhook HMAC secret (camelCase alias)"
-    },
     "webhook_path": {
       "type": "string",
       "default": "/github/webhook"
@@ -50,7 +22,9 @@
     },
     "auto_reply_repos": {
       "type": "array",
-      "items": { "type": "string" },
+      "items": {
+        "type": "string"
+      },
       "description": "Repos whose Issue/PR comments auto-trigger AI without @bot"
     },
     "bot_login": {
@@ -60,6 +34,61 @@
     "workspace_root": {
       "type": "string",
       "description": "Managed git workspace root"
+    },
+    "endpoints": {
+      "type": "array",
+      "description": "多账号：一个插件实例挂多个 endpoint",
+      "items": {
+        "type": "object",
+        "additionalProperties": true,
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "GitHub App bot name"
+          },
+          "app_id": {
+            "type": [
+              "string",
+              "number"
+            ],
+            "description": "GitHub App ID"
+          },
+          "appId": {
+            "type": [
+              "string",
+              "number"
+            ],
+            "description": "GitHub App ID (camelCase alias)"
+          },
+          "private_key": {
+            "type": "string",
+            "description": "GitHub App private key (PEM content or file path)"
+          },
+          "privateKey": {
+            "type": "string",
+            "description": "GitHub App private key (camelCase alias)"
+          },
+          "webhook_secret": {
+            "type": "string",
+            "description": "Webhook HMAC secret; enables httpHostToken POST route"
+          },
+          "webhookSecret": {
+            "type": "string",
+            "description": "Webhook HMAC secret (camelCase alias)"
+          }
+        },
+        "required": [
+          "name"
+        ]
+      }
+    },
+    "commandPrefix": {
+      "type": "string",
+      "default": "",
+      "description": "命令前缀（默认 '' 无前缀，任意文本按命令匹配；如 '/' 要求 / 开头）。endpoints[i] 可逐项覆盖"
     }
-  }
+  },
+  "required": [
+    "endpoints"
+  ]
 }

package/src/workspace-manager.ts

@@ -7,7 +7,17 @@ import path from 'node:path';
 import type { GhClient, GitHubBotIdentity } from './gh-client.js';
 
 const REPO_FULL_NAME_RE = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
-const GIT_REF_ILLEGAL_RE = /[\s\x00-\x1f\x7f~^:?*[\\`;]/;
+const GIT_REF_ILLEGAL_CHARS = new Set('~^:?*[\\`;');
+
+function containsIllegalGitRefCharacter(ref: string): boolean {
+  return [...ref].some((character) => {
+    const code = character.charCodeAt(0);
+    return code <= 31
+      || code === 127
+      || /\s/u.test(character)
+      || GIT_REF_ILLEGAL_CHARS.has(character);
+  });
+}
 
 /**
  * 校验 GitHub "owner/name" 全名，防止路径穿越与 git 选项注入。
@@ -34,7 +44,7 @@ export function assertGitRefName(ref: string): string {
   if (
     ref.startsWith('-') ||
     ref.includes('..') ||
-    GIT_REF_ILLEGAL_RE.test(ref) ||
+    containsIllegalGitRefCharacter(ref) ||
     ref.endsWith('/') ||
     ref.endsWith('.')
   ) {