botrun-horse 2.29.2 → 2.30.0

package/botrun-c/.claude/skills/GitHub/346/212/200/350/203/275/scripts/github-list-tree.mjs

@@ -0,0 +1,336 @@
+#!/usr/bin/env node
+/**
+ * GitHub List Tree Script
+ * 列出 GitHub Repository 的完整檔案樹狀結構
+ *
+ * 安全設計：
+ * - 僅允許存取 /tmp/{userId}/github/ 目錄（本地 SSD）
+ * - 禁止路徑遍歷攻擊 (../)
+ * - 限制搜尋深度避免無限遞迴
+ *
+ * 路徑格式：/tmp/{userId}/github/{owner}/{repo}/
+ *
+ * Usage:
+ *   # 列出所有 repos 的檔案
+ *   node github-list-tree.mjs --userId "user123"
+ *
+ *   # 列出特定 repo 的檔案
+ *   node github-list-tree.mjs --userId "user123" --repo "owner/repo"
+ *
+ *   # 只列出特定類型檔案
+ *   node github-list-tree.mjs --userId "user123" --glob "*.md"
+ *
+ *   # 限制深度（預設 10）
+ *   node github-list-tree.mjs --userId "user123" --depth 3
+ */
+
+import { parseArgs } from 'node:util';
+import { readdir, stat } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join, relative, basename, extname } from 'node:path';
+import { getGitHubBasePath, validateUserId } from './lib/path-validator.mjs';
+
+const MAX_FILES = 1000;  // 限制最大檔案數
+const MAX_DEPTH = 10;    // 限制最大深度
+
+/**
+ * 驗證路徑安全性
+ */
+function validatePath(userId, targetPath) {
+  const baseDir = getGitHubBasePath(userId);
+  const resolved = join(baseDir, targetPath || '');
+
+  // 防止路徑遍歷
+  if (!resolved.startsWith(baseDir)) {
+    throw new Error('Path traversal detected');
+  }
+
+  return resolved;
+}
+
+/**
+ * 檢查檔案是否符合 glob pattern
+ */
+function matchGlob(filename, pattern) {
+  if (!pattern) return true;
+
+  // 簡單的 glob 匹配：*.md, *.js, etc.
+  if (pattern.startsWith('*.')) {
+    const ext = pattern.slice(1); // .md, .js
+    return filename.endsWith(ext);
+  }
+
+  // 包含匹配
+  return filename.includes(pattern);
+}
+
+/**
+ * 遞迴列出檔案
+ */
+async function listFilesRecursive(dirPath, baseDir, options = {}) {
+  const { glob, maxDepth = MAX_DEPTH, currentDepth = 0 } = options;
+  const files = [];
+
+  if (currentDepth >= maxDepth) {
+    return files;
+  }
+
+  try {
+    const entries = await readdir(dirPath, { withFileTypes: true });
+
+    // 排序：目錄優先，然後按名稱
+    entries.sort((a, b) => {
+      if (a.isDirectory() && !b.isDirectory()) return -1;
+      if (!a.isDirectory() && b.isDirectory()) return 1;
+      return a.name.localeCompare(b.name);
+    });
+
+    for (const entry of entries) {
+      // 跳過隱藏目錄（.git 等）和 node_modules
+      if (entry.name.startsWith('.') || entry.name === 'node_modules') {
+        continue;
+      }
+
+      const fullPath = join(dirPath, entry.name);
+      const relativePath = relative(baseDir, fullPath);
+
+      if (entry.isDirectory()) {
+        // 遞迴處理子目錄
+        const subFiles = await listFilesRecursive(fullPath, baseDir, {
+          glob,
+          maxDepth,
+          currentDepth: currentDepth + 1,
+        });
+
+        // 只加入非空目錄或有匹配檔案的目錄
+        if (subFiles.length > 0 || !glob) {
+          files.push({
+            type: 'directory',
+            name: entry.name,
+            path: relativePath,
+            depth: currentDepth,
+          });
+          files.push(...subFiles);
+        }
+      } else {
+        // 檢查 glob 匹配
+        if (matchGlob(entry.name, glob)) {
+          try {
+            const stats = await stat(fullPath);
+            files.push({
+              type: 'file',
+              name: entry.name,
+              path: relativePath,
+              depth: currentDepth,
+              size: stats.size,
+              sizeHuman: formatSize(stats.size),
+              extension: extname(entry.name),
+              modifiedAt: stats.mtime.toISOString(),
+            });
+          } catch {
+            // 無法讀取檔案資訊，跳過
+          }
+        }
+      }
+
+      // 限制檔案數量
+      if (files.length >= MAX_FILES) {
+        files.push({
+          type: 'truncated',
+          message: `已達到 ${MAX_FILES} 檔案上限，結果已截斷`,
+        });
+        break;
+      }
+    }
+  } catch (error) {
+    console.error(`Error reading ${dirPath}: ${error.message}`);
+  }
+
+  return files;
+}
+
+/**
+ * 格式化檔案大小
+ */
+function formatSize(bytes) {
+  if (bytes < 1024) return `${bytes}B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;
+  return `${(bytes / 1024 / 1024).toFixed(1)}MB`;
+}
+
+/**
+ * 生成樹狀顯示字串
+ */
+function generateTreeString(files, baseDir) {
+  const lines = [`📁 ${basename(baseDir)}/`];
+
+  for (const file of files) {
+    if (file.type === 'truncated') {
+      lines.push(`⚠️  ${file.message}`);
+      continue;
+    }
+
+    const indent = '  '.repeat(file.depth + 1);
+    const icon = file.type === 'directory' ? '📁' : '📄';
+    const name = file.type === 'directory' ? `${file.name}/` : file.name;
+    const size = file.sizeHuman ? ` (${file.sizeHuman})` : '';
+
+    lines.push(`${indent}${icon} ${name}${size}`);
+  }
+
+  return lines.join('\n');
+}
+
+/**
+ * 取得所有本地 repos
+ * 路徑格式：/tmp/{userId}/github/{owner}/{repo}/
+ */
+async function getLocalRepos(userId) {
+  const repoDir = getGitHubBasePath(userId);
+  const repos = [];
+
+  if (!existsSync(repoDir)) {
+    return repos;
+  }
+
+  // 第一層：owners
+  const ownerEntries = await readdir(repoDir, { withFileTypes: true });
+
+  for (const ownerEntry of ownerEntries) {
+    if (!ownerEntry.isDirectory()) continue;
+
+    const ownerPath = join(repoDir, ownerEntry.name);
+
+    // 第二層：repos
+    const repoEntries = await readdir(ownerPath, { withFileTypes: true });
+
+    for (const repoEntry of repoEntries) {
+      if (!repoEntry.isDirectory()) continue;
+
+      const repoPath = join(ownerPath, repoEntry.name);
+      const gitPath = join(repoPath, '.git');
+
+      if (existsSync(gitPath)) {
+        const repoFullName = `${ownerEntry.name}/${repoEntry.name}`;
+        repos.push({
+          repoFullName,
+          localPath: repoPath,
+          owner: ownerEntry.name,
+          name: repoEntry.name,
+        });
+      }
+    }
+  }
+
+  return repos;
+}
+
+async function main() {
+  const { values } = parseArgs({
+    options: {
+      userId: { type: 'string' },
+      repo: { type: 'string' },
+      glob: { type: 'string' },
+      depth: { type: 'string' },
+      format: { type: 'string', default: 'json' }, // json | tree
+    },
+  });
+
+  const { userId, repo, glob, depth, format } = values;
+
+  if (!userId) {
+    console.log(JSON.stringify({ success: false, error: 'userId is required' }));
+    process.exit(1);
+  }
+
+  // 驗證 userId 格式（防止注入）
+  if (!/^[a-zA-Z0-9_-]+$/.test(userId)) {
+    console.log(JSON.stringify({ success: false, error: 'Invalid userId format' }));
+    process.exit(1);
+  }
+
+  const maxDepth = depth ? parseInt(depth, 10) : MAX_DEPTH;
+
+  try {
+    const repos = await getLocalRepos(userId);
+
+    if (repos.length === 0) {
+      console.log(JSON.stringify({
+        success: false,
+        error: 'No GitHub repositories found',
+        message: '尚未 clone 任何 GitHub Repository。請先使用 github-clone.mjs 來 clone。',
+      }));
+      return;
+    }
+
+    // 篩選指定的 repo
+    let targetRepos = repos;
+    if (repo) {
+      targetRepos = repos.filter(r =>
+        r.repoFullName === repo ||
+        r.repoFullName.toLowerCase().includes(repo.toLowerCase())
+      );
+
+      if (targetRepos.length === 0) {
+        console.log(JSON.stringify({
+          success: false,
+          error: `Repository "${repo}" not found`,
+          availableRepos: repos.map(r => r.repoFullName),
+        }));
+        return;
+      }
+    }
+
+    // 列出每個 repo 的檔案
+    const results = [];
+    let totalFiles = 0;
+    let totalDirectories = 0;
+
+    for (const targetRepo of targetRepos) {
+      const files = await listFilesRecursive(targetRepo.localPath, targetRepo.localPath, {
+        glob,
+        maxDepth,
+      });
+
+      const fileCount = files.filter(f => f.type === 'file').length;
+      const dirCount = files.filter(f => f.type === 'directory').length;
+      totalFiles += fileCount;
+      totalDirectories += dirCount;
+
+      results.push({
+        repo: targetRepo.repoFullName,
+        localPath: targetRepo.localPath,
+        fileCount,
+        directoryCount: dirCount,
+        files,
+        tree: format === 'tree' ? generateTreeString(files, targetRepo.localPath) : undefined,
+      });
+    }
+
+    const output = {
+      success: true,
+      glob: glob || null,
+      depth: maxDepth,
+      totalRepos: results.length,
+      totalFiles,
+      totalDirectories,
+      results,
+    };
+
+    // 如果要求 tree 格式，也輸出純文字版本
+    if (format === 'tree') {
+      output.treeOutput = results.map(r => r.tree).join('\n\n');
+    }
+
+    console.log(JSON.stringify(output, null, 2));
+
+  } catch (error) {
+    console.log(JSON.stringify({
+      success: false,
+      error: error.message,
+    }));
+    process.exit(1);
+  }
+}
+
+main();

package/botrun-c/.claude/skills/GitHub/346/212/200/350/203/275/scripts/github-list.mjs

@@ -0,0 +1,199 @@
+#!/usr/bin/env node
+/**
+ * GitHub List Script
+ * 列出使用者已連結的 GitHub Repositories
+ *
+ * 策略：
+ * 1. 先透過 API 查詢 Firestore 中已連結的 repos
+ * 2. 檢查本地是否已 clone
+ * 3. 回傳完整資訊，讓 AI 知道哪些需要 clone
+ *
+ * 路徑格式：/tmp/{userId}/github/{owner}/{repo}/
+ *
+ * Usage:
+ *   node github-list.mjs --userId "user123"
+ */
+
+import { parseArgs } from 'node:util';
+import { readdir, stat, readFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { getGitHubBasePath, validateUserId } from './lib/path-validator.mjs';
+
+const API_URL = process.env.API_URL || 'http://localhost:8080';
+const INTERNAL_API_KEY = process.env.INTERNAL_API_KEY || '';
+
+async function getReposFromAPI(userId) {
+  try {
+    // 使用內部認證呼叫 API
+    const response = await fetch(`${API_URL}/api/github/repos`, {
+      headers: {
+        'Content-Type': 'application/json',
+        'X-User-Id': userId,
+        'X-Internal-Key': INTERNAL_API_KEY,
+      },
+    });
+
+    if (!response.ok) {
+      console.error(`[github-list] API error: ${response.status} ${response.statusText}`);
+      return null;
+    }
+
+    const data = await response.json();
+    return data.repos || [];
+  } catch (error) {
+    console.error(`[github-list] Failed to fetch from API: ${error.message}`);
+    return null;
+  }
+}
+
+async function getLocalRepos(userId) {
+  const repoDir = getGitHubBasePath(userId);
+  const repos = [];
+
+  if (!existsSync(repoDir)) {
+    return repos;
+  }
+
+  // 第一層：owners
+  const ownerEntries = await readdir(repoDir, { withFileTypes: true });
+
+  for (const ownerEntry of ownerEntries) {
+    if (!ownerEntry.isDirectory()) continue;
+
+    const ownerPath = join(repoDir, ownerEntry.name);
+
+    // 第二層：repos
+    const repoEntries = await readdir(ownerPath, { withFileTypes: true });
+
+    for (const repoEntry of repoEntries) {
+      if (!repoEntry.isDirectory()) continue;
+
+      const repoPath = join(ownerPath, repoEntry.name);
+      const gitPath = join(repoPath, '.git');
+
+      if (existsSync(gitPath)) {
+        // 取得目前分支
+        let currentBranch = 'unknown';
+        try {
+          const headPath = join(gitPath, 'HEAD');
+          const headContent = await readFile(headPath, 'utf-8');
+          const match = headContent.match(/ref: refs\/heads\/(.+)/);
+          if (match) {
+            currentBranch = match[1].trim();
+          }
+        } catch {
+          // Ignore
+        }
+
+        // 取得最後修改時間
+        const stats = await stat(repoPath);
+
+        const repoFullName = `${ownerEntry.name}/${repoEntry.name}`;
+
+        repos.push({
+          repoFullName,
+          owner: ownerEntry.name,
+          name: repoEntry.name,
+          currentBranch,
+          localPath: repoPath,
+          lastSyncAt: stats.mtime.toISOString(),
+          isCloned: true,
+        });
+      }
+    }
+  }
+
+  return repos;
+}
+
+async function main() {
+  const { values } = parseArgs({
+    options: {
+      userId: { type: 'string' },
+    },
+  });
+
+  const { userId } = values;
+
+  if (!userId) {
+    console.log(JSON.stringify({ error: 'userId is required' }));
+    process.exit(1);
+  }
+
+  try {
+    // 同時取得 API 和本地資料
+    const [apiRepos, localRepos] = await Promise.all([
+      getReposFromAPI(userId),
+      getLocalRepos(userId),
+    ]);
+
+    // 建立本地 repos 的 map（用 repoFullName 作為 key）
+    const localReposMap = new Map();
+    for (const repo of localRepos) {
+      localReposMap.set(repo.repoFullName, repo);
+    }
+
+    // 合併資料
+    const allRepos = [];
+    const needsClone = [];
+
+    // 如果 API 有回傳資料，以 API 為準
+    if (apiRepos && apiRepos.length > 0) {
+      for (const apiRepo of apiRepos) {
+        const fullName = apiRepo.repoFullName || apiRepo.fullName;
+        const localRepo = localReposMap.get(fullName);
+
+        if (localRepo) {
+          // 已 clone
+          allRepos.push({
+            ...localRepo,
+            id: apiRepo.id,
+            status: apiRepo.status || 'cloned',
+          });
+        } else {
+          // 已連結但未 clone
+          needsClone.push({
+            repoFullName: fullName,
+            owner: fullName.split('/')[0],
+            name: fullName.split('/')[1],
+            status: 'not_cloned',
+            isCloned: false,
+            message: `Repository "${fullName}" 已連結但尚未 clone。請先執行 clone。`,
+          });
+        }
+      }
+    } else {
+      // API 無法連線或無資料，只回傳本地資料
+      allRepos.push(...localRepos);
+    }
+
+    // 輸出結果
+    const result = {
+      success: true,
+      repos: allRepos,
+      clonedCount: allRepos.length,
+      needsClone: needsClone,
+      needsCloneCount: needsClone.length,
+    };
+
+    // 加入提示訊息
+    if (allRepos.length === 0 && needsClone.length > 0) {
+      result.message = `找到 ${needsClone.length} 個已連結的 Repository，但都尚未 clone 到本地。請使用 github-clone.mjs 來 clone Repository。`;
+      result.hint = needsClone.map(r => `node $OFFICIAL_SKILLS_DIR/GitHub技能/scripts/github-clone.mjs --userId "$USER_ID" --repo "${r.repoFullName}"`);
+    } else if (allRepos.length === 0 && needsClone.length === 0) {
+      result.message = '尚未連結任何 GitHub Repository。請先至設定頁面連結 GitHub。';
+    }
+
+    console.log(JSON.stringify(result, null, 2));
+
+  } catch (error) {
+    console.log(JSON.stringify({
+      success: false,
+      error: error.message,
+    }));
+    process.exit(1);
+  }
+}
+
+main();

package/botrun-c/.claude/skills/GitHub/346/212/200/350/203/275/scripts/github-merge.mjs

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+/**
+ * GitHub Merge Script
+ * 合併分支到當前分支
+ *
+ * Usage:
+ *   node github-merge.mjs --userId "user123" --repo "owner/repo" --branch "feature/new"
+ *   node github-merge.mjs --userId "user123" --repo "owner/repo" --branch "feature/new" --no-ff
+ */
+
+import { parseArgs } from 'node:util';
+
+const API_URL = process.env.API_URL || 'http://localhost:8080';
+const INTERNAL_API_KEY = process.env.INTERNAL_API_KEY || '';
+
+async function main() {
+  const { values } = parseArgs({
+    options: {
+      userId: { type: 'string' },
+      repo: { type: 'string' },
+      branch: { type: 'string' },
+      'no-ff': { type: 'boolean', default: false },
+    },
+  });
+
+  const { userId, repo, branch } = values;
+  const noFastForward = values['no-ff'];
+
+  if (!userId || !repo || !branch) {
+    console.error(JSON.stringify({
+      error: 'userId, repo, and branch are required',
+      usage: 'node github-merge.mjs --userId "user123" --repo "owner/repo" --branch "feature/new" [--no-ff]',
+    }));
+    process.exit(1);
+  }
+
+  try {
+    const [owner, repoName] = repo.split('/');
+
+    if (!owner || !repoName) {
+      throw new Error('Invalid repo format. Expected: owner/repo');
+    }
+
+    const response = await fetch(`${API_URL}/api/github/repos/${owner}/${repoName}/merge`, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'X-User-Id': userId,
+        'X-Internal-Key': INTERNAL_API_KEY,
+      },
+      body: JSON.stringify({ branchName: branch, noFastForward }),
+    });
+
+    const data = await response.json();
+
+    if (!data.success) {
+      // Check for conflicts
+      if (data.data?.conflicts) {
+        console.log(JSON.stringify({
+          success: false,
+          hasConflicts: true,
+          conflicts: data.data.conflicts,
+          message: data.message || `Merge conflict with branch: ${branch}`,
+          hint: 'Resolve conflicts manually, then commit the changes.',
+        }, null, 2));
+        process.exit(1);
+      }
+      throw new Error(data.error || data.message || 'Failed to merge');
+    }
+
+    console.log(JSON.stringify({
+      success: true,
+      branch: data.data?.branch || branch,
+      message: data.message || `Successfully merged branch: ${branch}`,
+    }, null, 2));
+
+  } catch (error) {
+    console.error(JSON.stringify({
+      success: false,
+      error: error.message,
+    }));
+    process.exit(1);
+  }
+}
+
+main();

package/botrun-c/.claude/skills/GitHub/346/212/200/350/203/275/scripts/github-move.mjs

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+/**
+ * GitHub Move/Rename File Script
+ * 移動或重新命名 Repository 中的檔案
+ *
+ * Usage:
+ *   node github-move.mjs --userId "user123" --repo "owner/repo" --from "old/path.txt" --to "new/path.txt"
+ */
+
+import { parseArgs } from 'node:util';
+
+const API_URL = process.env.API_URL || 'http://localhost:8080';
+const INTERNAL_API_KEY = process.env.INTERNAL_API_KEY || '';
+
+async function main() {
+  const { values } = parseArgs({
+    options: {
+      userId: { type: 'string' },
+      repo: { type: 'string' },
+      from: { type: 'string' },
+      to: { type: 'string' },
+    },
+  });
+
+  const { userId, repo, from, to } = values;
+
+  if (!userId || !repo || !from || !to) {
+    console.error(JSON.stringify({
+      error: 'userId, repo, from, and to are required',
+      usage: 'node github-move.mjs --userId "user123" --repo "owner/repo" --from "old/path.txt" --to "new/path.txt"',
+    }));
+    process.exit(1);
+  }
+
+  try {
+    const [owner, repoName] = repo.split('/');
+
+    if (!owner || !repoName) {
+      throw new Error('Invalid repo format. Expected: owner/repo');
+    }
+
+    // 呼叫 API 移動檔案
+    const response = await fetch(`${API_URL}/api/github/repos/${owner}/${repoName}/files/move`, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'X-User-Id': userId,
+        'X-Internal-Key': INTERNAL_API_KEY,
+      },
+      body: JSON.stringify({ oldPath: from, newPath: to }),
+    });
+
+    const data = await response.json();
+
+    if (!data.success) {
+      throw new Error(data.error || data.message || 'Failed to move file');
+    }
+
+    console.log(JSON.stringify({
+      success: true,
+      oldPath: from,
+      newPath: to,
+      message: data.message || `File moved successfully: ${from} -> ${to}`,
+    }, null, 2));
+
+  } catch (error) {
+    console.error(JSON.stringify({
+      success: false,
+      error: error.message,
+    }));
+    process.exit(1);
+  }
+}
+
+main();