ali-skills 0.0.32 → 0.1.0

package/node_modules/@ali/cli-skills/dist/_chunks/plugin-manifest-validate.mjs

@@ -0,0 +1,309 @@
+import { existsSync, readFileSync, readdirSync, statSync } from "fs";
+import { join, normalize, resolve, sep } from "path";
+const ENV_URLS = {
+	local: "http://localhost:3000/api/skills",
+	daily: "https://next-ai-base.fn.taobao.net/api/skills",
+	pre: "https://pre-ali-skills.alibaba-inc.com/api/skills",
+	prod: "https://ali-skills.alibaba-inc.com/api/skills"
+};
+function resolveSkillsApiBaseUrl() {
+	const env = process.env.SKILLS_API_URL?.trim();
+	if (!env) return ENV_URLS.prod;
+	if (env in ENV_URLS) return ENV_URLS[env];
+	return env.replace(/\/+$/, "");
+}
+const SKILLS_API_BASE_URL = resolveSkillsApiBaseUrl();
+const GITLAB_ACCOUNT = {
+	user: process.env.GITLAB_USER ?? "fliggy-edith",
+	token: process.env.GITLAB_TOKEN ?? "rXn7iEvs1JYtKkE44fzj"
+};
+const MANIFEST_DIR_TO_AGENT = {
+	".claude-plugin": "claude-code",
+	".codex-plugin": "codex",
+	".cursor-plugin": "cursor"
+};
+const MANIFEST_DIR_NAMES = Object.keys(MANIFEST_DIR_TO_AGENT);
+const MAX_SCAN_DEPTH = 3;
+const SCAN_SKIP_DIRS = new Set([
+	".git",
+	"node_modules",
+	"__pycache__",
+	".agents"
+]);
+function isContainedIn(target, base) {
+	const nb = normalize(resolve(base));
+	const nt = normalize(resolve(target));
+	return nt === nb || nt.startsWith(nb + sep);
+}
+function detectDeclaredAgents(dir) {
+	const agents = [];
+	for (const [manifestDir, agent] of Object.entries(MANIFEST_DIR_TO_AGENT)) if (existsSync(join(dir, manifestDir, "plugin.json"))) agents.push(agent);
+	return agents;
+}
+function scanForFirstPackageRoot(baseDir, depth) {
+	if (depth > MAX_SCAN_DEPTH) return null;
+	if (detectDeclaredAgents(baseDir).length > 0) return baseDir;
+	let entries;
+	try {
+		entries = readdirSync(baseDir).sort();
+	} catch {
+		return null;
+	}
+	for (const name of entries) {
+		if (SCAN_SKIP_DIRS.has(name) || MANIFEST_DIR_NAMES.includes(name)) continue;
+		const child = join(baseDir, name);
+		try {
+			if (statSync(child).isDirectory()) {
+				const hit = scanForFirstPackageRoot(child, depth + 1);
+				if (hit) return hit;
+			}
+		} catch {}
+	}
+	return null;
+}
+function findPluginPackageRoots(baseDir, opts = {}) {
+	const base = resolve(baseDir);
+	if (opts.subpath) {
+		const root = join(base, opts.subpath);
+		if (!isContainedIn(root, base)) throw new Error(`Unsafe subpath escapes repo root: ${opts.subpath}`);
+		const declaredAgents = detectDeclaredAgents(root);
+		if (declaredAgents.length === 0) throw new Error(`No plugin manifest (.X-plugin/plugin.json) found at subpath: ${opts.subpath}`);
+		return [{
+			root,
+			declaredAgents
+		}];
+	}
+	const rootAgents = detectDeclaredAgents(base);
+	if (rootAgents.length > 0) return [{
+		root: base,
+		declaredAgents: rootAgents
+	}];
+	const root = scanForFirstPackageRoot(base, 0);
+	if (root) return [{
+		root,
+		declaredAgents: detectDeclaredAgents(root)
+	}];
+	return [];
+}
+const AGENT_REFERENCE_FIELDS = {
+	"claude-code": [
+		{
+			field: "skills",
+			kind: "dir"
+		},
+		{
+			field: "commands",
+			kind: "file"
+		},
+		{
+			field: "agents",
+			kind: "file"
+		},
+		{
+			field: "hooks",
+			kind: "file"
+		},
+		{
+			field: "mcpServers",
+			kind: "mcp"
+		},
+		{
+			field: "lspServers",
+			kind: "file"
+		}
+	],
+	codex: [
+		{
+			field: "skills",
+			kind: "dir"
+		},
+		{
+			field: "hooks",
+			kind: "file"
+		},
+		{
+			field: "mcpServers",
+			kind: "mcp"
+		},
+		{
+			field: "apps",
+			kind: "file"
+		}
+	],
+	cursor: [
+		{
+			field: "rules",
+			kind: "dir"
+		},
+		{
+			field: "skills",
+			kind: "dir"
+		},
+		{
+			field: "agents",
+			kind: "file"
+		},
+		{
+			field: "commands",
+			kind: "file"
+		},
+		{
+			field: "hooks",
+			kind: "file"
+		},
+		{
+			field: "mcpServers",
+			kind: "mcp"
+		}
+	]
+};
+const AGENT_MCP_FILENAME = {
+	"claude-code": ".mcp.json",
+	codex: ".mcp.json",
+	cursor: "mcp.json"
+};
+const AGENT_TO_MANIFEST_DIR = Object.fromEntries(Object.entries(MANIFEST_DIR_TO_AGENT).map(([dir, agent]) => [agent, dir]));
+const OPTIONAL_MISSING_REF_FIELDS = new Set([
+	"agents",
+	"commands",
+	"rules",
+	"apps",
+	"lspServers"
+]);
+function isWithin(target, base) {
+	const nb = normalize(resolve(base));
+	const nt = normalize(resolve(target));
+	return nt === nb || nt.startsWith(nb + sep);
+}
+function toArray(v) {
+	if (typeof v === "string") return [v];
+	if (Array.isArray(v)) return v.filter((x) => typeof x === "string");
+	return [];
+}
+function validateRef(pkgRoot, agent, ref, manifest, errors) {
+	const raw = manifest[ref.field];
+	if (raw === void 0) return;
+	if (ref.kind === "mcp") {
+		if (typeof raw === "object" && !Array.isArray(raw)) return;
+		for (const p of toArray(raw)) {
+			const full = join(pkgRoot, p);
+			if (!isWithin(full, pkgRoot)) {
+				errors.push(`${agent}.${ref.field} 路径越界包根: ${p}`);
+				continue;
+			}
+			if (!existsSync(full)) {
+				if (OPTIONAL_MISSING_REF_FIELDS.has(ref.field)) continue;
+				errors.push(`${agent}.${ref.field} 引用文件不存在: ${p}`);
+				continue;
+			}
+			const base = p.split("/").pop() ?? "";
+			const expected = AGENT_MCP_FILENAME[agent];
+			if (expected && base !== expected && (base === ".mcp.json" || base === "mcp.json")) errors.push(`${agent}.${ref.field} mcp 文件名应为 ${expected}，实际 ${base}`);
+		}
+		return;
+	}
+	for (const p of toArray(raw)) {
+		const full = join(pkgRoot, p);
+		if (!isWithin(full, pkgRoot)) {
+			errors.push(`${agent}.${ref.field} 路径越界包根: ${p}`);
+			continue;
+		}
+		if (!existsSync(full)) {
+			if (OPTIONAL_MISSING_REF_FIELDS.has(ref.field)) continue;
+			errors.push(`${agent}.${ref.field} 引用路径不存在: ${p}`);
+			continue;
+		}
+		const st = statSync(full);
+		if (ref.kind === "dir" && !st.isDirectory()) errors.push(`${agent}.${ref.field} 期望目录，实际非目录: ${p}`);
+	}
+}
+function validateAgentManifest(pkgRoot, agent) {
+	const errors = [];
+	const manifestDir = AGENT_TO_MANIFEST_DIR[agent];
+	if (!manifestDir) return {
+		agent,
+		valid: false,
+		errors: [`未知 agent: ${agent}`]
+	};
+	const manifestPath = join(pkgRoot, manifestDir, "plugin.json");
+	if (!existsSync(manifestPath)) return {
+		agent,
+		valid: false,
+		errors: [`缺少 ${manifestDir}/plugin.json`]
+	};
+	let manifest;
+	try {
+		manifest = JSON.parse(readFileSync(manifestPath, "utf-8"));
+	} catch (err) {
+		return {
+			agent,
+			valid: false,
+			errors: [`plugin.json JSON 解析失败: ${err.message}`]
+		};
+	}
+	if (typeof manifest.name !== "string" || manifest.name.trim() === "") errors.push(`${agent} plugin.json 缺少必填字段 name`);
+	for (const ref of AGENT_REFERENCE_FIELDS[agent] ?? []) validateRef(pkgRoot, agent, ref, manifest, errors);
+	return {
+		agent,
+		valid: errors.length === 0,
+		errors,
+		manifest
+	};
+}
+function listSkillNames(pkgRoot) {
+	const dir = join(pkgRoot, "skills");
+	if (!existsSync(dir)) return [];
+	const out = [];
+	for (const name of readdirSync(dir)) try {
+		if (statSync(join(dir, name)).isDirectory() && existsSync(join(dir, name, "SKILL.md"))) out.push(name);
+	} catch {}
+	return out;
+}
+function readMcpServerNames(pkgRoot) {
+	for (const fn of [".mcp.json", "mcp.json"]) {
+		const f = join(pkgRoot, fn);
+		if (!existsSync(f)) continue;
+		try {
+			const data = JSON.parse(readFileSync(f, "utf-8"));
+			const servers = data.mcpServers ?? data.mcp_servers ?? data;
+			if (servers && typeof servers === "object") return Object.keys(servers);
+		} catch {}
+	}
+	return [];
+}
+function summarizeComponents(pkgRoot) {
+	return {
+		skills: listSkillNames(pkgRoot),
+		agents: listFlatNames(join(pkgRoot, "agents")),
+		commands: listFlatNames(join(pkgRoot, "commands")),
+		hooks: existsSync(join(pkgRoot, "hooks", "hooks.json")),
+		mcpServers: readMcpServerNames(pkgRoot),
+		rules: listFlatNames(join(pkgRoot, "rules")),
+		apps: existsSync(join(pkgRoot, ".app.json")) ? ["(.app.json)"] : [],
+		lsp: existsSync(join(pkgRoot, ".lsp.json")) ? ["(.lsp.json)"] : []
+	};
+}
+function listFlatNames(dir) {
+	if (!existsSync(dir)) return [];
+	try {
+		return readdirSync(dir).filter((n) => n.endsWith(".md") || n.endsWith(".mdc")).map((n) => n.replace(/\.(md|mdc)$/, ""));
+	} catch {
+		return [];
+	}
+}
+function validatePluginPackage(pkgRoot, declaredAgents) {
+	const perAgent = [];
+	const manifests = {};
+	for (const agent of declaredAgents) {
+		const v = validateAgentManifest(pkgRoot, agent);
+		perAgent.push(v);
+		if (v.valid && v.manifest) manifests[agent] = v.manifest;
+	}
+	return {
+		targetAgents: perAgent.filter((v) => v.valid).map((v) => v.agent),
+		perAgent,
+		manifests,
+		components: summarizeComponents(pkgRoot)
+	};
+}
+export { SKILLS_API_BASE_URL as i, findPluginPackageRoots as n, GITLAB_ACCOUNT as r, validatePluginPackage as t };