ali-skills 0.0.2 → 0.0.3

package/dist/add.js

@@ -3,7 +3,7 @@ import pc from 'picocolors';
 import { existsSync } from 'fs';
 import { homedir } from 'os';
 import { sep } from 'path';
-import { parseSource, getOwnerRepo, parseOwnerRepo, isRepoPrivate } from './source-parser.js';
+import { parseSource, getOwnerRepo, parseOwnerRepo, isRepoPrivate, isInternalGitUrl, } from './source-parser.js';
 import { searchMultiselect, cancelSymbol } from './prompts/search-multiselect.js';
 // Helper to check if a value is a cancel symbol (works with both clack and our custom prompts)
 const isCancelled = (value) => typeof value === 'symbol';
@@ -27,7 +27,6 @@ import { track, setVersion, fetchAuditData, } from './telemetry.js';
 import { wellKnownProvider } from './providers/index.js';
 import { addSkillToLock, fetchSkillFolderHash, getGitHubToken, isPromptDismissed, dismissPrompt, getLastSelectedAgents, saveSelectedAgents, } from './skill-lock.js';
 import { addSkillToLocalLock, computeSkillFolderHash } from './local-lock.js';
-import packageJson from '../package.json' with { type: 'json' };
 export function initTelemetry(version) {
     setVersion(version);
 }
@@ -308,8 +307,6 @@ async function selectAgentsInteractive(options) {
     }
     return selected;
 }
-const version = packageJson.version;
-setVersion(version);
 /**
  * Handle skills from a well-known endpoint (RFC 8615).
  * Discovers skills from /.well-known/skills/index.json
@@ -1172,15 +1169,45 @@ export async function runAdd(args, options = {}) {
         // breaking restore for private repos that require SSH authentication.
         const isSSH = parsed.url.startsWith('git@');
         const lockSource = isSSH ? parsed.url : normalizedSource;
+        const isInternalSource = isInternalGitUrl(parsed.url);
+        const telemetrySourceType = isInternalSource ? 'internal-git' : parsed.type;
         // Only track if we have a valid remote source and it's not a private repo
         if (normalizedSource) {
-            const ownerRepo = parseOwnerRepo(normalizedSource);
-            if (ownerRepo) {
-                // Check if repo is private - skip telemetry for private repos
-                const isPrivate = await isRepoPrivate(ownerRepo.owner, ownerRepo.repo);
-                // Only send telemetry if repo is public (isPrivate === false)
-                // If we can't determine (null), err on the side of caution and skip telemetry
-                if (isPrivate === false) {
+            if (isInternalSource) {
+                // Internal repositories: do not send to public skills telemetry.
+                // The telemetry router in telemetry.ts will route sourceType=internal-* to
+                // the internal placeholder hook.
+                track({
+                    event: 'install',
+                    source: normalizedSource,
+                    skills: selectedSkills.map((s) => s.name).join(','),
+                    agents: targetAgents.join(','),
+                    ...(installGlobally && { global: '1' }),
+                    skillFiles: JSON.stringify(skillFiles),
+                    sourceType: telemetrySourceType,
+                });
+            }
+            else {
+                const ownerRepo = parseOwnerRepo(normalizedSource);
+                if (ownerRepo) {
+                    // Check if repo is private - skip telemetry for private repos
+                    const isPrivate = await isRepoPrivate(ownerRepo.owner, ownerRepo.repo);
+                    // Only send telemetry if repo is public (isPrivate === false)
+                    // If we can't determine (null), err on the side of caution and skip telemetry
+                    if (isPrivate === false) {
+                        track({
+                            event: 'install',
+                            source: normalizedSource,
+                            skills: selectedSkills.map((s) => s.name).join(','),
+                            agents: targetAgents.join(','),
+                            ...(installGlobally && { global: '1' }),
+                            skillFiles: JSON.stringify(skillFiles),
+                            sourceType: telemetrySourceType,
+                        });
+                    }
+                }
+                else {
+                    // If we can't parse owner/repo, still send telemetry (for non-GitHub sources)
                     track({
                         event: 'install',
                         source: normalizedSource,
@@ -1188,20 +1215,10 @@ export async function runAdd(args, options = {}) {
                         agents: targetAgents.join(','),
                         ...(installGlobally && { global: '1' }),
                         skillFiles: JSON.stringify(skillFiles),
+                        sourceType: telemetrySourceType,
                     });
                 }
             }
-            else {
-                // If we can't parse owner/repo, still send telemetry (for non-GitHub sources)
-                track({
-                    event: 'install',
-                    source: normalizedSource,
-                    skills: selectedSkills.map((s) => s.name).join(','),
-                    agents: targetAgents.join(','),
-                    ...(installGlobally && { global: '1' }),
-                    skillFiles: JSON.stringify(skillFiles),
-                });
-            }
         }
         // Add to skill lock file for update tracking (only for global installs)
         if (successful.length > 0 && installGlobally && normalizedSource) {

package/dist/source-parser.js

@@ -1,4 +1,31 @@
 import { isAbsolute, resolve } from 'path';
+const INTERNAL_GIT_HOSTS = new Set(['code.alibaba-inc.com', 'gitlab.alibaba-inc.com']);
+const INTERNAL_GIT_CANONICAL_HOST = 'gitlab.alibaba-inc.com';
+const INTERNAL_GIT_CANONICAL_PROTOCOL = 'http';
+function toInternalCanonicalGitUrl(repoPath) {
+    const cleanPath = repoPath.replace(/^\/+/, '').replace(/\.git$/, '').replace(/\/+$/, '');
+    return `${INTERNAL_GIT_CANONICAL_PROTOCOL}://${INTERNAL_GIT_CANONICAL_HOST}/${cleanPath}.git`;
+}
+export function isInternalGitHost(hostname) {
+    return INTERNAL_GIT_HOSTS.has(hostname.toLowerCase());
+}
+export function isInternalGitUrl(input) {
+    // SSH style: git@code.alibaba-inc.com:group/repo.git
+    const sshMatch = input.match(/^git@([^:]+):.+$/);
+    if (sshMatch && isInternalGitHost(sshMatch[1])) {
+        return true;
+    }
+    if (!input.startsWith('http://') && !input.startsWith('https://')) {
+        return false;
+    }
+    try {
+        const parsed = new URL(input);
+        return isInternalGitHost(parsed.hostname);
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Extract owner/repo (or group/subgroup/repo for GitLab) from a parsed source
  * for lockfile tracking and telemetry.
@@ -173,9 +200,12 @@ export function parseSource(input) {
     if (gitlabTreeWithPathMatch) {
         const [, protocol, hostname, repoPath, ref, subpath] = gitlabTreeWithPathMatch;
         if (hostname !== 'github.com' && repoPath) {
+            const normalizedUrl = isInternalGitHost(hostname)
+                ? toInternalCanonicalGitUrl(repoPath)
+                : `${protocol}://${hostname}/${repoPath.replace(/\.git$/, '')}.git`;
             return {
                 type: 'gitlab',
-                url: `${protocol}://${hostname}/${repoPath.replace(/\.git$/, '')}.git`,
+                url: normalizedUrl,
                 ref,
                 subpath: subpath ? sanitizeSubpath(subpath) : subpath,
             };
@@ -186,9 +216,12 @@ export function parseSource(input) {
     if (gitlabTreeMatch) {
         const [, protocol, hostname, repoPath, ref] = gitlabTreeMatch;
         if (hostname !== 'github.com' && repoPath) {
+            const normalizedUrl = isInternalGitHost(hostname)
+                ? toInternalCanonicalGitUrl(repoPath)
+                : `${protocol}://${hostname}/${repoPath.replace(/\.git$/, '')}.git`;
             return {
                 type: 'gitlab',
-                url: `${protocol}://${hostname}/${repoPath.replace(/\.git$/, '')}.git`,
+                url: normalizedUrl,
                 ref,
             };
         }
@@ -207,6 +240,21 @@ export function parseSource(input) {
             };
         }
     }
+    // Internal Git host URL (e.g., https://code.alibaba-inc.com/group/repo/)
+    // Treat as GitLab-style repository URL for clone/discovery compatibility.
+    const internalGitRepoMatch = input.match(/^(https?):\/\/([^/]+)\/(.+?)(?:\.git)?\/?$/);
+    if (internalGitRepoMatch) {
+        const [, _protocol, hostname, repoPath] = internalGitRepoMatch;
+        if (repoPath && isInternalGitHost(hostname)) {
+            // Must have at least owner/repo (one slash)
+            if (repoPath.includes('/')) {
+                return {
+                    type: 'gitlab',
+                    url: toInternalCanonicalGitUrl(repoPath),
+                };
+            }
+        }
+    }
     // GitHub shorthand: owner/repo, owner/repo/path/to/skill, or owner/repo@skill-name
     // Exclude paths that start with . or / to avoid matching local paths
     // First check for @skill syntax: owner/repo@skill-name
@@ -258,6 +306,9 @@ function isWellKnownUrl(input) {
         if (excludedHosts.includes(parsed.hostname)) {
             return false;
         }
+        if (isInternalGitHost(parsed.hostname)) {
+            return false;
+        }
         // Don't match URLs that look like git repos (should be handled by git type)
         if (input.endsWith('.git')) {
             return false;

package/dist/telemetry.js

@@ -1,6 +1,21 @@
 const TELEMETRY_URL = 'https://add-skill.vercel.sh/t';
 const AUDIT_URL = 'https://add-skill.vercel.sh/audit';
+const INTERNAL_TELEMETRY_SOURCE_PREFIX = 'internal-';
 let cliVersion = null;
+function shouldRouteToInternalTelemetry(data) {
+    // Internal telemetry routing hook:
+    // Any event tagged with sourceType starting with "internal-" is considered
+    // an intranet source and must not be sent to public skills telemetry.
+    return 'sourceType' in data && typeof data.sourceType === 'string'
+        ? data.sourceType.startsWith(INTERNAL_TELEMETRY_SOURCE_PREFIX)
+        : false;
+}
+function trackInternalPlaceholder(_data) {
+    // TODO(internal-telemetry):
+    // Implement intranet telemetry reporting endpoint here.
+    // Keep this as no-op for now so internal repository installs are not reported
+    // to public skills.sh telemetry.
+}
 function isCI() {
     return !!(process.env.CI ||
         process.env.GITHUB_ACTIONS ||
@@ -46,6 +61,10 @@ export async function fetchAuditData(source, skillSlugs, timeoutMs = 3000) {
 export function track(data) {
     if (!isEnabled())
         return;
+    if (shouldRouteToInternalTelemetry(data)) {
+        trackInternalPlaceholder(data);
+        return;
+    }
     try {
         const params = new URLSearchParams();
         // Add version

package/package.json

@@ -1,12 +1,11 @@
 {
   "name": "ali-skills",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {
     "ali-skills": "./bin/cli.mjs",
-    "skills": "./bin/cli.mjs",
-    "add-skill": "./bin/cli.mjs"
+    "skills": "./bin/cli.mjs"
   },
   "files": [
     "dist",