ali-skills 0.1.3 → 0.1.5

package/node_modules/@ali/cli-skills/dist/_chunks/plugin.mjs

@@ -2,7 +2,7 @@ import { i as __toESM } from "./rolldown-runtime.mjs";
 import { l as pD, u as require_picocolors } from "./libs/@clack/core.mjs";
 import { a as Y, n as M, s as fe } from "./libs/@clack/prompts.mjs";
 import { i as SKILLS_API_BASE_URL, n as findPluginPackageRoots, t as validatePluginPackage } from "./plugin-manifest-validate.mjs";
-import { A as getDisplaySource, D as redactCliSnippet, F as resolveSourceInput, I as toInternalHttpsCloneUrl, P as parseSource, T as cloneRepo, b as AGENTS_DIR, f as saveSelectedAgents, k as embedInternalGitCredentials, s as getLastSelectedAgents, v as trackPluginCommand, x as PLUGINS_SUBDIR, y as trackPluginInstall } from "./skill-lock.mjs";
+import { A as getDisplaySource, D as redactCliSnippet, F as resolveSourceInput, I as toInternalHttpsCloneUrl, P as parseSource, _ as trackPluginCommand, b as PLUGINS_SUBDIR, d as saveSelectedAgents, k as embedInternalGitCredentials, o as getLastSelectedAgents, v as trackPluginInstall, w as cloneRepo, y as AGENTS_DIR } from "./skill-lock.mjs";
 import "./libs/@kwsites/file-exists.mjs";
 import "./libs/@kwsites/promise-deferred.mjs";
 import "./libs/simple-git.mjs";

package/node_modules/@ali/cli-skills/dist/_chunks/publish.mjs

@@ -741,4 +741,4 @@ async function runPluginPublish(_options = {}) {
 	spinner.stop(`${import_picocolors.default.green("✓")} Registered ${items.length} plugin(s)`);
 	Se(import_picocolors.default.green("插件录入成功，已可在平台检索安装。"));
 }
-export { addSkillToLocalLock as a, discoverSkills as c, isValidSkillName as d, parseSkillMd as f, logSkillParseFailures as i, filterSkills as l, runPluginPublish as n, computeSkillFolderHash as o, runPublish as r, readLocalLock as s, parsePublishOptions as t, getSkillDisplayName as u };
+export { addSkillToLocalLock as a, writeLocalLock as c, getSkillDisplayName as d, isValidSkillName as f, logSkillParseFailures as i, discoverSkills as l, runPluginPublish as n, computeSkillFolderHash as o, parseSkillMd as p, runPublish as r, readLocalLock as s, parsePublishOptions as t, filterSkills as u };

package/node_modules/@ali/cli-skills/dist/_chunks/skill-lock.mjs

@@ -64,7 +64,15 @@ function parseOwnerRepo(ownerRepo) {
 	return null;
 }
 async function isRepoPrivate(owner, repo) {
-	return false;
+	try {
+		const source = encodeURIComponent(`${owner}/${repo}`);
+		const res = await fetch(`${SKILLS_API_BASE_URL}/github/repository?source=${source}`);
+		if (!res.ok) return null;
+		const data = await res.json();
+		return data.success && typeof data.data?.private === "boolean" ? data.data.private : null;
+	} catch {
+		return null;
+	}
 }
 function sanitizeSubpath(subpath) {
 	const segments = subpath.replace(/\\/g, "/").split("/");
@@ -360,6 +368,9 @@ async function cloneRepo(url, ref) {
 		throw new GitCloneError(`Failed to clone ${safeUrl}: ${safeErrorMessage}`, safeUrl, false, false);
 	}
 }
+async function getGitHeadHash(repoDir) {
+	return (await esm_default(repoDir).revparse(["HEAD"])).trim();
+}
 async function listRemoteBranches(url) {
 	const git = esm_default({
 		timeout: { block: 15e3 },
@@ -555,72 +566,63 @@ async function writeSkillLock(lock) {
 	await mkdir(dirname(lockPath), { recursive: true });
 	await writeFile(lockPath, JSON.stringify(lock, null, 2), "utf-8");
 }
-function getGitHubToken() {
-	if (process.env.GITHUB_TOKEN) return process.env.GITHUB_TOKEN;
-	if (process.env.GH_TOKEN) return process.env.GH_TOKEN;
-	try {
-		const token = execSync("gh auth token", {
-			encoding: "utf-8",
-			stdio: [
-				"pipe",
-				"pipe",
-				"pipe"
-			]
-		}).trim();
-		if (token) return token;
-	} catch {}
-	return null;
-}
-async function fetchSkillFolderHash(ownerRepo, skillPath, token) {
-	let folderPath = skillPath.replace(/\\/g, "/");
-	if (folderPath.endsWith("/SKILL.md")) folderPath = folderPath.slice(0, -9);
-	else if (folderPath.endsWith("SKILL.md")) folderPath = folderPath.slice(0, -8);
-	if (folderPath.endsWith("/")) folderPath = folderPath.slice(0, -1);
-	for (const ref of [
-		"HEAD",
-		"master",
-		"main"
-	]) try {
-		const url = `https://api.github.com/repos/${ownerRepo}/git/trees/${ref}?recursive=1`;
-		const headers = {
-			Accept: "application/vnd.github.v3+json",
-			"User-Agent": "skills-cli"
-		};
-		if (token) headers["Authorization"] = `Bearer ${token}`;
-		const response = await fetch(url, { headers });
-		if (!response.ok) continue;
-		const data = await response.json();
-		if (!folderPath) return data.sha;
-		const folderEntry = data.tree.find((entry) => entry.type === "tree" && entry.path === folderPath);
-		if (folderEntry) return folderEntry.sha;
-	} catch {
-		continue;
-	}
-	return null;
-}
-async function fetchAliInternalCommitHash(source, skillPath = "", token) {
+async function fetchAliInternalSkillVersion(source, skillPath = "", token) {
 	const refs = [
 		"HEAD",
 		"master",
 		"main"
 	];
 	const privateToken = token || process.env.GITLAB_PRIVATE_TOKEN || process.env.CODE_ALIBABA_TOKEN || GITLAB_ACCOUNT.token;
-	for (const ref of refs) try {
-		let url = `https://code.alibaba-inc.com/api/v4/projects/${encodeURIComponent(source)}/repository/commits?ref_name=${ref}&per_page=1`;
-		if (skillPath) url += `&path=${encodeURIComponent(skillPath)}`;
-		const headers = {
-			Accept: "application/json",
-			"User-Agent": "skills-cli",
-			"Private-Token": privateToken
-		};
-		const response = await fetch(url, { headers });
-		if (!response.ok) continue;
-		const latestCommit = (await response.json())[0];
-		if (latestCommit?.id) return latestCommit.id;
-	} catch {
-		continue;
+	const encodedSource = encodeURIComponent(source);
+	const normalizedPath = skillPath.trim().replace(/\\/g, "/").replace(/^\/+|\/+$/g, "").replace(/\/?SKILL\.md$/i, "").replace(/\/+$/g, "");
+	const skillFile = normalizedPath ? `${normalizedPath}/SKILL.md` : "SKILL.md";
+	const headers = {
+		Accept: "application/json",
+		"User-Agent": "skills-cli",
+		"Private-Token": privateToken
+	};
+	let sawNotFound = false;
+	for (const ref of refs) {
+		const controller = new AbortController();
+		const timer = setTimeout(() => controller.abort(), 8e3);
+		try {
+			const fileUrl = `https://code.alibaba-inc.com/api/v4/projects/${encodedSource}/repository/files/${encodeURIComponent(skillFile)}?ref=${encodeURIComponent(ref)}`;
+			const fileResponse = await fetch(fileUrl, {
+				headers,
+				signal: controller.signal
+			});
+			if (fileResponse.status === 404) {
+				sawNotFound = true;
+				continue;
+			}
+			if (fileResponse.status === 401 || fileResponse.status === 403) return { status: "unauthorized" };
+			if (fileResponse.status === 429) return { status: "rate-limited" };
+			if (!fileResponse.ok) return { status: "upstream-error" };
+			let commitUrl = `https://code.alibaba-inc.com/api/v4/projects/${encodedSource}/repository/commits?ref_name=${encodeURIComponent(ref)}&per_page=1`;
+			if (normalizedPath) commitUrl += `&path=${encodeURIComponent(normalizedPath)}`;
+			const commitResponse = await fetch(commitUrl, {
+				headers,
+				signal: controller.signal
+			});
+			if (commitResponse.status === 401 || commitResponse.status === 403) return { status: "unauthorized" };
+			if (commitResponse.status === 429) return { status: "rate-limited" };
+			if (!commitResponse.ok) return { status: "upstream-error" };
+			const commits = await commitResponse.json();
+			return commits[0]?.id ? {
+				status: "ok",
+				latestHash: commits[0].id
+			} : { status: "upstream-error" };
+		} catch (error) {
+			return { status: error instanceof Error && error.name === "AbortError" ? "timeout" : "upstream-error" };
+		} finally {
+			clearTimeout(timer);
+		}
 	}
-	return null;
+	return { status: sawNotFound ? "not-found" : "upstream-error" };
+}
+async function fetchAliInternalCommitHash(source, skillPath = "", token) {
+	const result = await fetchAliInternalSkillVersion(source, skillPath, token);
+	return result.status === "ok" ? result.latestHash ?? null : null;
 }
 async function addSkillToLock(skillName, entry) {
 	const lock = await readSkillLock();
@@ -689,4 +691,4 @@ function sanitizeSourceUrl(url) {
 	}
 	return url;
 }
-export { getDisplaySource as A, GitCloneError as C, redactCliSnippet as D, listRemoteBranches as E, resolveSourceInput as F, toInternalHttpsCloneUrl as I, isRepoPrivate as M, parseOwnerRepo as N, redactSensitiveText as O, parseSource as P, SKILLS_SUBDIR as S, cloneRepo as T, track as _, getAllLockedSkills as a, AGENTS_DIR$1 as b, getSkillFromLock as c, sanitizeSourceUrl as d, saveSelectedAgents as f, setVersion as g, getPendingTelemetryCount as h, fetchSkillFolderHash as i, getOwnerRepo as j, embedInternalGitCredentials as k, isPromptDismissed as l, flushTelemetry as m, dismissPrompt as n, getGitHubToken as o, fetchAuditData as p, fetchAliInternalCommitHash as r, getLastSelectedAgents as s, addSkillToLock as t, removeSkillFromLock as u, trackPluginCommand as v, cleanupTempDir as w, PLUGINS_SUBDIR as x, trackPluginInstall as y };
+export { getDisplaySource as A, cleanupTempDir as C, redactCliSnippet as D, listRemoteBranches as E, resolveSourceInput as F, toInternalHttpsCloneUrl as I, isRepoPrivate as M, parseOwnerRepo as N, redactSensitiveText as O, parseSource as P, GitCloneError as S, getGitHeadHash as T, trackPluginCommand as _, getAllLockedSkills as a, PLUGINS_SUBDIR as b, isPromptDismissed as c, saveSelectedAgents as d, fetchAuditData as f, track as g, setVersion as h, fetchAliInternalSkillVersion as i, getOwnerRepo as j, embedInternalGitCredentials as k, removeSkillFromLock as l, getPendingTelemetryCount as m, dismissPrompt as n, getLastSelectedAgents as o, flushTelemetry as p, fetchAliInternalCommitHash as r, getSkillFromLock as s, addSkillToLock as t, sanitizeSourceUrl as u, trackPluginInstall as v, cloneRepo as w, SKILLS_SUBDIR as x, AGENTS_DIR$1 as y };