ali-skills 0.0.7-beta.0 → 0.0.8

package/node_modules/@ali/cli-skills/dist/cli.mjs

@@ -450,14 +450,12 @@ async function getGitLabProject(ownerRepo, token) {
 		return null;
 	}
 }
-async function getSkillBlameAuthor(projectId, filePath, ref, token) {
+async function getSkillLastCommitAuthor(projectId, filePath, token) {
 	try {
-		const url = `${CODE_HOST}/api/v3/projects/${projectId}/repository/files/blame?file_path=${encodeURIComponent(filePath)}&ref=${encodeURIComponent(ref)}&private_token=${token}&projectId=${projectId}`;
+		const url = `${CODE_HOST}/api/v3/projects/${projectId}/repository/files/last_commit?filepath=${encodeURIComponent(filePath)}&sha=HEAD&private_token=${token}&projectId=${projectId}`;
 		const res = await fetch(url);
 		if (!res.ok) return null;
-		const entries = await res.json();
-		if (!Array.isArray(entries) || entries.length === 0) return null;
-		const author = entries[0]?.commit?.user;
+		const author = (await res.json())?.user;
 		if (!author) return null;
 		return {
 			employeeId: author.extern_uid ?? "",
@@ -467,7 +465,7 @@ async function getSkillBlameAuthor(projectId, filePath, ref, token) {
 			username: author.username ?? ""
 		};
 	} catch (error) {
-		console.error("[GitLab] Failed to get skill blame author:", error);
+		console.error("[GitLab] Failed to get skill last commit author:", error);
 		return null;
 	}
 }
@@ -618,27 +616,74 @@ async function hasSkillMd(dir) {
 		return false;
 	}
 }
+function emitParseFailure(sink, failure) {
+	sink?.(failure);
+}
 async function parseSkillMd(skillMdPath, options) {
+	const onFailure = options?.onParseFailure;
+	let content;
 	try {
-		const content = await readFile(skillMdPath, "utf-8");
-		const { data } = (0, import_gray_matter.default)(content);
-		if (!data.name || !data.description) return null;
-		if (typeof data.name !== "string" || typeof data.description !== "string") return null;
-		if (!isValidSkillName(data.name)) {
-			const suggested = data.name.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^[^a-z]+/, "").replace(/-+$/g, "");
-			console.warn(`⚠ Skill "${data.name}" 的名称不符合命名规范，将无法在技能市场中展示。\n  规范要求：以英文字母开头，仅允许小写字母(a-z)、数字(0-9)、连字符(-)、下划线(_)。\n  建议修改为：${suggested || "my-skill"}\n  请联系 Skill 开发者修改 SKILL.md 中的 name 字段。`);
-		}
-		if (data.metadata?.internal === true && !shouldInstallInternalSkills() && !options?.includeInternal) return null;
-		return {
-			name: data.name,
-			description: data.description,
-			path: dirname(skillMdPath),
-			rawContent: content,
-			metadata: data.metadata
-		};
-	} catch {
+		content = await readFile(skillMdPath, "utf-8");
+	} catch (err) {
+		emitParseFailure(onFailure, {
+			path: skillMdPath,
+			code: "read_error",
+			message: err instanceof Error ? err.message : String(err)
+		});
+		return null;
+	}
+	let data;
+	try {
+		({data} = (0, import_gray_matter.default)(content));
+	} catch (err) {
+		emitParseFailure(onFailure, {
+			path: skillMdPath,
+			code: "yaml_parse",
+			message: err instanceof Error ? err.message : String(err),
+			hint: "YAML frontmatter 语法无效。值里含 []、:、#、引号等时请用单引号或双引号把整个标量包起来"
+		});
 		return null;
 	}
+	if (!data.name || !data.description) {
+		const missing = [];
+		if (!data.name) missing.push("name");
+		if (!data.description) missing.push("description");
+		emitParseFailure(onFailure, {
+			path: skillMdPath,
+			code: "missing_frontmatter_fields",
+			message: `缺少必填 frontmatter 字段: ${missing.join(", ")}`
+		});
+		return null;
+	}
+	if (typeof data.name !== "string" || typeof data.description !== "string") {
+		emitParseFailure(onFailure, {
+			path: skillMdPath,
+			code: "wrong_field_types",
+			message: `name 与 description 必须为字符串（当前 name 为 ${typeof data.name}，description 为 ${typeof data.description}）`,
+			hint: "在 YAML 里给值加引号，例如 name: \"my-skill\" 或 description: \"说明文字\""
+		});
+		return null;
+	}
+	if (!isValidSkillName(data.name)) {
+		const suggested = data.name.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^[^a-z]+/, "").replace(/-+$/g, "");
+		console.warn(`⚠ Skill "${data.name}" 的名称不符合命名规范，将无法在技能市场中展示。\n  规范要求：以英文字母开头，仅允许小写字母(a-z)、数字(0-9)、连字符(-)、下划线(_)。\n  建议修改为：${suggested || "my-skill"}\n  请联系 Skill 开发者修改 SKILL.md 中的 name 字段。`);
+	}
+	if (data.metadata?.internal === true && !shouldInstallInternalSkills() && !options?.includeInternal) {
+		emitParseFailure(onFailure, {
+			path: skillMdPath,
+			code: "skipped_internal",
+			message: "该 skill 在 frontmatter 中标记为 internal，默认不参与安装",
+			hint: "设置环境变量 INSTALL_INTERNAL_SKILLS=1 或使用 --skill 显式指定要安装的技能名"
+		});
+		return null;
+	}
+	return {
+		name: data.name,
+		description: data.description,
+		path: dirname(skillMdPath),
+		rawContent: content,
+		metadata: data.metadata
+	};
 }
 async function findSkillDirs(dir, depth = 0, maxDepth = 5) {
 	if (depth > maxDepth) return [];
@@ -659,6 +704,19 @@ function isSubpathSafe(basePath, subpath) {
 async function discoverSkills(basePath, subpath, options) {
 	const skills = [];
 	const seenNames = /* @__PURE__ */ new Set();
+	const failureSink = options?.parseFailures;
+	const seenFailureKeys = /* @__PURE__ */ new Set();
+	const onParseFailure = (failure) => {
+		if (!failureSink) return;
+		const key = `${failure.code}\0${failure.path}`;
+		if (seenFailureKeys.has(key)) return;
+		seenFailureKeys.add(key);
+		failureSink.push(failure);
+	};
+	const mdOptions = {
+		includeInternal: options?.includeInternal,
+		onParseFailure
+	};
 	if (subpath && !isSubpathSafe(basePath, subpath)) throw new Error(`Invalid subpath: "${subpath}" resolves outside the repository directory. Subpath must not contain ".." segments that escape the base path.`);
 	const searchPath = subpath ? join(basePath, subpath) : basePath;
 	const pluginGroupings = await getPluginGroupings(searchPath);
@@ -668,7 +726,7 @@ async function discoverSkills(basePath, subpath, options) {
 		return skill;
 	};
 	if (await hasSkillMd(searchPath)) {
-		let skill = await parseSkillMd(join(searchPath, "SKILL.md"), options);
+		let skill = await parseSkillMd(join(searchPath, "SKILL.md"), mdOptions);
 		if (skill) {
 			skill = enhanceSkill(skill);
 			skills.push(skill);
@@ -713,7 +771,7 @@ async function discoverSkills(basePath, subpath, options) {
 		for (const entry of entries) if (entry.isDirectory()) {
 			const skillDir = join(dir, entry.name);
 			if (await hasSkillMd(skillDir)) {
-				let skill = await parseSkillMd(join(skillDir, "SKILL.md"), options);
+				let skill = await parseSkillMd(join(skillDir, "SKILL.md"), mdOptions);
 				if (skill && !seenNames.has(skill.name)) {
 					skill = enhanceSkill(skill);
 					skills.push(skill);
@@ -725,7 +783,7 @@ async function discoverSkills(basePath, subpath, options) {
 	if (skills.length === 0 || options?.fullDepth) {
 		const allSkillDirs = await findSkillDirs(searchPath);
 		for (const skillDir of allSkillDirs) {
-			let skill = await parseSkillMd(join(skillDir, "SKILL.md"), options);
+			let skill = await parseSkillMd(join(skillDir, "SKILL.md"), mdOptions);
 			if (skill && !seenNames.has(skill.name)) {
 				skill = enhanceSkill(skill);
 				skills.push(skill);
@@ -1946,7 +2004,17 @@ function createEmptyLocalLock() {
 		skills: {}
 	};
 }
-var version$1 = "2.0.4";
+function logSkillParseFailures(failures) {
+	if (failures.length === 0) return;
+	console.log();
+	M.error(import_picocolors.default.bold("以下 SKILL.md 解析未通过（请按提示修复）"));
+	for (const f of failures) {
+		M.message(import_picocolors.default.dim(f.path));
+		M.message(import_picocolors.default.red(`  [${f.code}] ${f.message}`));
+		if (f.hint) M.message(import_picocolors.default.yellow(`  提示: ${f.hint}`));
+	}
+}
+var version$1 = "2.0.6";
 const isCancelled$1 = (value) => typeof value === "symbol";
 async function isSourcePrivate(source) {
 	const ownerRepo = parseOwnerRepo(source);
@@ -2521,11 +2589,14 @@ async function runAdd(args, options = {}) {
 			if (!options.skill.includes(parsed.skillFilter)) options.skill.push(parsed.skillFilter);
 		}
 		const includeInternal = !!(options.skill && options.skill.length > 0);
-		spinner.start("Discovering skills...");
-		let skills = await discoverSkills(skillsDir, parsed.subpath, {
+		const skillParseFailures = [];
+		const discoverOpts = {
 			includeInternal,
-			fullDepth: options.fullDepth
-		});
+			fullDepth: options.fullDepth,
+			parseFailures: skillParseFailures
+		};
+		spinner.start("Discovering skills...");
+		let skills = await discoverSkills(skillsDir, parsed.subpath, discoverOpts);
 		if (skills.length === 0 && !usedOssFallback && [
 			"github",
 			"internal",
@@ -2546,16 +2617,15 @@ async function runAdd(args, options = {}) {
 						usedOssFallback = true;
 						spinner.stop("Skill package downloaded");
 						spinner.start("Discovering skills...");
-						skills = await discoverSkills(skillsDir, parsed.subpath, {
-							includeInternal,
-							fullDepth: options.fullDepth
-						});
+						skillParseFailures.length = 0;
+						skills = await discoverSkills(skillsDir, parsed.subpath, discoverOpts);
 					}
 				} catch {}
 			}
 		}
 		if (skills.length === 0) {
 			spinner.stop(import_picocolors.default.red("No skills found"));
+			logSkillParseFailures(skillParseFailures);
 			Se(import_picocolors.default.red("No valid skills found. Skills require a SKILL.md with name and description."));
 			await cleanup(tempDir);
 			process.exit(1);
@@ -2858,7 +2928,7 @@ async function runAdd(args, options = {}) {
 				if (project) {
 					const firstSkillPath = Object.values(skillFiles)[0];
 					if (firstSkillPath) {
-						const author = await getSkillBlameAuthor(project.id, firstSkillPath, parsed.ref || project.defaultBranch, gitlabToken);
+						const author = await getSkillLastCommitAuthor(project.id, firstSkillPath, gitlabToken);
 						if (author) skillAuthor = author;
 					}
 				}
@@ -3069,6 +3139,7 @@ const BOLD$2 = "\x1B[1m";
 const DIM$2 = "\x1B[38;5;102m";
 const TEXT$1 = "\x1B[38;5;145m";
 const CYAN$1 = "\x1B[36m";
+const YELLOW$1 = "\x1B[33m";
 const SKILLS_API_URL = process.env.SKILLS_API_URL;
 const SEARCH_ENDPOINT = SKILLS_API_URL ? `${SKILLS_API_URL.replace(/\/+$/, "")}/search` : "https://next-ai-base.pre-fn.alibaba-inc.com/api/skills/search";
 function formatInstalls(count) {
@@ -3077,6 +3148,9 @@ function formatInstalls(count) {
 	if (count >= 1e3) return `${(count / 1e3).toFixed(1).replace(/\.0$/, "")}K installs`;
 	return `${count} install${count === 1 ? "" : "s"}`;
 }
+function buildSkillUrl(skill) {
+	return `https://ali-skills.alibaba-inc.com/skills/${skill.source}/${skill.name}`;
+}
 async function searchSkillsAPI(query) {
 	try {
 		const url = `${SEARCH_ENDPOINT}?q=${encodeURIComponent(query)}&limit=10`;
@@ -3087,8 +3161,14 @@ async function searchSkillsAPI(query) {
 			name: skill.name,
 			slug: skill.id,
 			source: skill.source || "",
-			installs: skill.installs
-		})).sort((a, b) => (b.installs || 0) - (a.installs || 0));
+			installs: skill.installs,
+			sourceType: skill.sourceType ?? "github"
+		})).sort((a, b) => {
+			const aIsInternal = a.sourceType === "internal" ? 1 : 0;
+			const bIsInternal = b.sourceType === "internal" ? 1 : 0;
+			if (bIsInternal !== aIsInternal) return bIsInternal - aIsInternal;
+			return (b.installs || 0) - (a.installs || 0);
+		});
 	} catch {
 		return [];
 	}
@@ -3129,8 +3209,9 @@ async function runSearchPrompt(initialQuery = "") {
 				const source = skill.source ? ` ${DIM$2}${skill.source}${RESET$2}` : "";
 				const installs = formatInstalls(skill.installs);
 				const installsBadge = installs ? ` ${CYAN$1}${installs}${RESET$2}` : "";
+				const githubBadge = skill.sourceType === "github" ? ` ${YELLOW$1}GitHub${RESET$2}` : "";
 				const loadingIndicator = loading && i === 0 ? ` ${DIM$2}...${RESET$2}` : "";
-				lines.push(`  ${arrow} ${name}${source}${installsBadge}${loadingIndicator}`);
+				lines.push(`  ${arrow} ${name}${source}${githubBadge}${installsBadge}${loadingIndicator}`);
 			}
 		}
 		lines.push("");
@@ -3215,18 +3296,6 @@ async function runSearchPrompt(initialQuery = "") {
 		process.stdin.on("keypress", handleKeypress);
 	});
 }
-function getOwnerRepoFromString(pkg) {
-	const atIndex = pkg.lastIndexOf("@");
-	const match = (atIndex > 0 ? pkg.slice(0, atIndex) : pkg).match(/^([^/]+)\/([^/]+)$/);
-	if (match) return {
-		owner: match[1],
-		repo: match[2]
-	};
-	return null;
-}
-async function isRepoPublic(owner, repo) {
-	return await isRepoPrivate(owner, repo) === false;
-}
 async function runFind(args) {
 	const query = args.join(" ");
 	const isNonInteractive = !process.stdin.isTTY;
@@ -3249,8 +3318,10 @@ ${DIM$2}  2) npx @ali/cli-skills add <owner/repo@skill>${RESET$2}`;
 		for (const skill of results.slice(0, 6)) {
 			const pkg = skill.source || skill.slug;
 			const installs = formatInstalls(skill.installs);
-			console.log(`${TEXT$1}${pkg}@${skill.name}${RESET$2}${installs ? ` ${CYAN$1}${installs}${RESET$2}` : ""}`);
-			console.log(`${DIM$2}└ https://skills.sh/${skill.slug}${RESET$2}`);
+			const githubBadge = skill.sourceType === "github" ? ` ${YELLOW$1}GitHub${RESET$2}` : "";
+			console.log(`${TEXT$1}${pkg}@${skill.name}${RESET$2}${githubBadge}${installs ? ` ${CYAN$1}${installs}${RESET$2}` : ""}`);
+			const skillUrl = buildSkillUrl(skill);
+			console.log(`${DIM$2}└ ${skillUrl}${RESET$2}`);
 			console.log();
 		}
 		return;
@@ -3283,9 +3354,8 @@ ${DIM$2}  2) npx @ali/cli-skills add <owner/repo@skill>${RESET$2}`;
 	]);
 	await runAdd(source, options);
 	console.log();
-	const info = getOwnerRepoFromString(pkg);
-	if (info && await isRepoPublic(info.owner, info.repo)) console.log(`${DIM$2}View the skill at${RESET$2} ${TEXT$1}https://skills.sh/${selected.slug}${RESET$2}`);
-	else console.log(`${DIM$2}Discover more skills at${RESET$2} ${TEXT$1}https://skills.sh${RESET$2}`);
+	const skillUrl = buildSkillUrl(selected);
+	console.log(`${DIM$2}View the skill at${RESET$2} ${TEXT$1}${skillUrl}${RESET$2}`);
 	console.log();
 }
 const isCancelled = (value) => typeof value === "symbol";
@@ -4040,9 +4110,15 @@ async function runPublish(args, options = {}) {
 	const source = `${repoInfo.owner}/${repoInfo.repo}`;
 	spinner.stop(`Repository: ${import_picocolors.default.cyan(source)} ${import_picocolors.default.dim(`(${repoInfo.sourceType})`)}`);
 	spinner.start("Discovering skills...");
-	const skills = await discoverSkills(process.cwd(), void 0, { includeInternal: true });
+	const cwd = process.cwd();
+	const skillParseFailures = [];
+	const skills = await discoverSkills(cwd, void 0, {
+		includeInternal: true,
+		parseFailures: skillParseFailures
+	});
 	if (skills.length === 0) {
 		spinner.stop(import_picocolors.default.red("No skills found"));
+		logSkillParseFailures(skillParseFailures);
 		Se(import_picocolors.default.red("No valid skills found. Skills require a SKILL.md with name and description."));
 		process.exit(1);
 	}
@@ -4205,12 +4281,12 @@ const BOLD = "\x1B[1m";
 const DIM = "\x1B[38;5;102m";
 const TEXT = "\x1B[38;5;145m";
 const LOGO_LINES = [
-	"███████╗██╗  ██╗██╗██╗     ██╗     ███████╗",
-	"██╔════╝██║ ██╔╝██║██║     ██║     ██╔════╝",
-	"███████╗█████╔╝ ██║██║     ██║     ███████╗",
-	"╚════██║██╔═██╗ ██║██║     ██║     ╚════██║",
-	"███████║██║  ██╗██║███████╗███████╗███████║",
-	"╚══════╝╚═╝  ╚═╝╚═╝╚══════╝╚══════╝╚══════╝"
+	" █████╗ ██╗     ██╗    ███████╗██╗  ██╗██╗██╗     ██╗     ███████╗",
+	"██╔══██╗██║     ██║    ██╔════╝██║ ██╔╝██║██║     ██║     ██╔════╝",
+	"███████║██║     ██║    ███████╗█████╔╝ ██║██║     ██║     ███████╗",
+	"██╔══██║██║     ██║    ╚════██║██╔═██╗ ██║██║     ██║     ╚════██║",
+	"██║  ██║███████╗██║    ███████║██║  ██╗██║███████╗███████╗███████║",
+	"╚═╝  ╚═╝╚══════╝╚═╝   ╚══════╝╚═╝  ╚═╝╚═╝╚══════╝╚══════╝╚══════╝"
 ];
 const GRAYS = [
 	"\x1B[38;5;250m",

package/node_modules/@ali/cli-skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ali/cli-skills",
-  "version": "2.0.4",
+  "version": "2.0.6",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {
@@ -24,7 +24,8 @@
     "prepare": "husky",
     "test": "vitest",
     "type-check": "tsc --noEmit",
-    "publish:snapshot": "tnpm version prerelease --preid=snapshot --no-git-tag-version && tnpm publish --tag snapshot"
+    "publish:snapshot": "tnpm version prerelease --preid=snapshot --no-git-tag-version && tnpm publish --tag snapshot",
+    "publish:latest:patch": "tnpm version patch && tnpm publish && git push --follow-tags"
   },
   "lint-staged": {
     "src/**/*.ts": "prettier --write",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ali-skills",
-  "version": "0.0.7-beta.0",
+  "version": "0.0.8",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {
@@ -25,12 +25,13 @@
     "url": "git+http://gitlab.alibaba-inc.com/trip-tools/ali-skills.git"
   },
   "scripts": {
-    "publish:beta": "npm version prerelease --preid=beta --no-git-tag-version && npm publish --tag beta"
+    "publish:beta": "npm version prerelease --preid=beta --no-git-tag-version && npm publish --tag beta",
+    "publish:latest:patch": "npm version patch && npm publish && git push --follow-tags"
   },
   "author": "",
   "license": "MIT",
   "dependencies": {
-    "@ali/cli-skills": "^2.0.4"
+    "@ali/cli-skills": "^2.0.6"
   },
   "bundleDependencies": [
     "@ali/cli-skills"