cardbuddy 0.24.0 → 0.25.0

package/dist/preview-editor/index.html

@@ -8,7 +8,7 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon-16-Cg6Nrosk.png" />
     <link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon-32-B_1744sp.png" />
     <link rel="apple-touch-icon" sizes="180x180" href="/assets/apple-touch-icon-BQcES9QK.png" />
-    <script type="module" crossorigin src="/assets/index-BumNBo-n.js"></script>
+    <script type="module" crossorigin src="/assets/index-DL4ZCJCA.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-MWKPP9nd.css">
   </head>
   <body>

package/dist/skills-upgrade.js

@@ -18,12 +18,16 @@
  *   交互环境外（非 TTY）无法确认时，必须带 --force 才能升级，否则明确拒绝并提示（不再
  *   静默跳过、假装升级成功）。
  * 标志：--force/-y 跳过确认直接覆盖；--prune 额外删除 ORPHAN；--dry-run 只报告不落盘。
+ * 依赖检查：升级后探测 skills/ 内 package.json 声明的依赖能否从工程解析，缺失的
+ *   显式给出 `npm install <pkg>` 补装指引（升级不自动装依赖——是否动工程 node_modules
+ *   由用户决定；解析探测与脚本运行时的 Node 解析链一致）。
  * 同步后写 skills/.synced-from = 当前装包版本，供下次 drift 检测与启动提示。
  */
 import fs from 'node:fs'
 import path from 'node:path'
 import readline from 'node:readline/promises'
 import { fileURLToPath } from 'node:url'
+import { createRequire } from 'node:module'
 import chalk from 'chalk'
 import { loadConfig } from './config.js'
 
@@ -75,6 +79,38 @@ function walkFiles(dir, base = dir, out = []) {
   return out
 }
 
+/**
+ * 收集 skills/ 内各 package.json 声明的依赖中「从其所在目录无法解析」的包名。
+ * 技能脚本运行时按 Node 规则从脚本位置向上找 node_modules（先 skill 自身，再工程根），
+ * 这里用 createRequire 从该 package.json 所在目录模拟同一解析链；解析不到的即缺口——
+ * 升级只拷文件不装依赖，缺口必须显式提示用户补装（0.83.x 事故的教训：
+ * playwright 曾是 optional 依赖静默缺失，脚本运行时才报 Cannot find package）。
+ * @param {string} destSkills 工程内 skills/ 目录
+ * @returns {string[]} 形如 "playwright-core（platform-session-navigator/scripts/package.json）"
+ */
+function collectMissingSkillDeps(destSkills) {
+  const missing = []
+  for (const rel of walkFiles(destSkills)) {
+    if (path.posix.basename(rel) !== 'package.json') continue
+    const pkgPath = path.join(destSkills, rel)
+    let deps
+    try {
+      const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'))
+      deps = { ...pkg.dependencies, ...pkg.devDependencies }
+    } catch {
+      continue
+    }
+    for (const name of Object.keys(deps)) {
+      try {
+        createRequire(path.join(pkgPath, 'index.js')).resolve(name)
+      } catch {
+        missing.push(`${name}（${rel}）`)
+      }
+    }
+  }
+  return missing
+}
+
 /**
  * 比对源/目标技能树（内容比对）。
  * @returns {{ added:string[], same:string[], modified:string[], orphan:string[] }}
@@ -153,6 +189,25 @@ export async function runSkillsUpgrade({
   const warn = (m) => say(chalk.yellow(`• ${m}`))
   const dim = (m) => say(chalk.dim(`• ${m}`))
 
+  // 依赖在位检查（升级只同步文件、不装依赖，但必须把缺口显式暴露出来）：
+  // 逐个解析 skills/ 内 package.json 声明的依赖，解析不到的给出补装命令。
+  const reportDeps = () => {
+    let missing
+    try {
+      missing = collectMissingSkillDeps(destSkills)
+    } catch {
+      return
+    }
+    if (!missing.length) {
+      dim('技能依赖在位：skills/ 内 package.json 声明的依赖均可从工程解析')
+      return
+    }
+    const names = [...new Set(missing.map((m) => m.slice(0, m.indexOf('（'))))]
+    warn(`⚠ 检测到 ${missing.length} 个技能依赖无法解析（新版本技能可能带来新依赖）：`)
+    for (const m of missing) say(chalk.yellow(`    ${m}`))
+    say(chalk.yellow(`  请在工程根执行：npm install ${names.join(' ')}`))
+  }
+
   if (dryRun) say(chalk.yellow('（dry-run：只报告将要做的事，不落盘）'))
 
   if (!src || !fs.existsSync(src)) {
@@ -169,6 +224,7 @@ export async function runSkillsUpgrade({
 
   if (!diff.added.length && !diff.modified.length && !diff.orphan.length && fs.existsSync(destSkills)) {
     dim(`skills 已是最新（cardbuddy@${version}，无新增 / 修改 / 孤儿）`)
+    reportDeps()
     return 0
   }
 
@@ -240,6 +296,9 @@ export async function runSkillsUpgrade({
     }
   }
 
+  // 依赖在位检查（dry-run 也报，作为升级后的预期状态）
+  reportDeps()
+
   // 汇总
   log('')
   say(chalk.green(dryRun ? 'dry-run 完成（未落盘）' : 'skills 升级完成'))

package/dist/vendored/server/core/browser.js

@@ -35,8 +35,11 @@ let chromiumMod = null
 
 /** 取（惰性启动的）单例浏览器；启动失败会把 browserPromise 复位并抛出 */
 async function getBrowser() {
-  // 动态 import playwright：避免其进入 vite.config 加载图（见文件头注释）
-  if (!chromiumMod) chromiumMod = await import('playwright')
+  // 动态 import playwright-core：避免其进入 vite.config 加载图（见文件头注释）。
+  // 用 playwright-core 而非 playwright：浏览器走系统 Chrome（channel: 'chrome'），
+  // 只需 JS API；playwright 的 postinstall 浏览器下载作为 optional 依赖失败时会被
+  // npm 静默跳过，导致 vendored 发布态运行时报 Cannot find package（0.83.x 事故）。
+  if (!chromiumMod) chromiumMod = await import('playwright-core')
   if (!browserPromise) {
     browserPromise = chromiumMod.chromium
       .launch({ channel: 'chrome', headless: true })
@@ -98,9 +101,9 @@ function serialize(task) {
 
 /**
  * 打开卡片渲染页（chrome=off 纯净模式）并等待首帧稳定。
- * @param {import('playwright').BrowserContext} context
+ * @param {import('playwright-core').BrowserContext} context
  * @param {string} id 卡片 id
- * @returns {Promise<{ page: import('playwright').Page, screen: import('playwright').ElementHandle | null }>}
+ * @returns {Promise<{ page: import('playwright-core').Page, screen: import('playwright-core').ElementHandle | null }>}
  */
 async function openCardScreen(context, id) {
   const page = await context.newPage()

package/dist/vendored/skills/dsl-card-generator/references/generation_pitfalls.md

@@ -169,7 +169,7 @@ node skills/dsl-card-generator/scripts/render_card.mjs --id <id> --width 375 --o
 ```js
 // 仅当需要自定义页面交互/逐样式断言且宿主 dev server(5180) 已启动时使用；
 // 本 skill 的离线 render_card.mjs 不提供任意页面交互，复制 skill 到其他项目后该配方按需自建。
-import { chromium } from 'playwright';
+import { chromium } from 'playwright-core';
 const ts = Date.now();
 const url = `http://localhost:5180/?card=<id>&t=${ts}`;
 const browser = await chromium.launch({ channel: 'chrome', args: ['--no-sandbox'] });

package/dist/vendored/skills/mbank-design-gen/tools/screenshot.mjs

@@ -2,7 +2,8 @@
 // MBank mockup 截图工具：把 375×812 的 mockup HTML 导出为 750×1624 @2x PNG。
 // 用法：node <skill>/tools/screenshot.mjs <input.html> [output.png] [--full]
 //   --full  整页截图（长页 mockup 用；默认 812pt 视口截断）
-// 依赖 playwright（仓库根 node_modules 已装；本脚本从自身位置向上解析）。
+// 依赖 playwright-core（免浏览器下载的纯 JS API，从自身位置向上解析）。
+// 浏览器优先走系统 Chrome（channel: 'chrome'，仓库约定），未找到时才尝试内置浏览器。
 import { createRequire } from 'node:module';
 import { dirname, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -10,7 +11,15 @@ import { pathToFileURL } from 'node:url';
 
 const here = dirname(fileURLToPath(import.meta.url));
 const require = createRequire(import.meta.url);
-const { chromium } = require('playwright');
+let chromium;
+try {
+  ({ chromium } = require('playwright-core'));
+} catch {
+  console.error(
+    '[screenshot] 缺少依赖 playwright-core：请在本工程根执行 npm install（cardbuddy 依赖会带上），或手动 npm i playwright-core。',
+  );
+  process.exit(1);
+}
 
 const args = process.argv.slice(2);
 const full = args.includes('--full');
@@ -22,15 +31,14 @@ if (!input) {
 }
 const output = positional[1] || input.replace(/\.html$/i, '') + '.png';
 
-// 优先用 Playwright 自带浏览器；未下载（ms-playwright 缓存为空）时回退系统 Chrome，
-// 与仓库「Playwright + 系统 Chrome 验证」约定一致，避免强依赖 npx playwright install。
+// 优先用系统 Chrome（channel: 'chrome'，仓库约定）；不可用时回退内置浏览器。
 let browser;
 try {
-  browser = await chromium.launch();
+  browser = await chromium.launch({ channel: 'chrome' });
 } catch (err) {
   if (!/Executable doesn't exist/.test(String(err?.message ?? err))) throw err;
-  console.error('[screenshot] 未找到 Playwright 内置浏览器，回退系统 Chrome');
-  browser = await chromium.launch({ channel: 'chrome' });
+  console.error('[screenshot] 未找到系统 Chrome，回退 Playwright 内置浏览器');
+  browser = await chromium.launch();
 }
 const page = await browser.newPage({
   viewport: { width: 375, height: 812 },

package/dist/vendored/skills/platform-card-sync/scripts/api_batch_sync.mjs

@@ -29,10 +29,18 @@ const scriptDir = path.dirname(fileURLToPath(import.meta.url));
 const skillDir = path.resolve(scriptDir, '..');
 // skill now lives under <repo-root>/skills/<name>: repo root is two levels up from skillDir
 const workspace = path.resolve(skillDir, '..', '..');
-// 与 platform_login.mjs 保持一致的解析方式：用裸标识符让 Node 从项目根 node_modules 解析
-// playwright。原硬编码路径指向 .workbuddy/skills/platform-session-navigator/scripts/node_modules
-// （该 node_modules 是已失效的断链符号链接），导致「Cannot find module」报错。
-const { chromium } = await import('playwright');
+// 与 platform_login.mjs 保持一致的解析方式：用裸标识符让 Node 从项目根 node_modules 解析。
+// 用 playwright-core（免浏览器下载的纯 JS API）：浏览器走系统 Chrome + CDP，
+// 不需要 playwright 自带浏览器；playwright 作为 optional 依赖安装失败时会被 npm
+// 静默跳过，导致运行时报 Cannot find package（0.83.x 事故）。
+let chromium;
+try {
+  ({ chromium } = await import('playwright-core'));
+} catch {
+  throw new Error(
+    '缺少依赖 playwright-core：请在本工程根执行 npm install（cardbuddy 依赖会带上 playwright-core），或手动 npm i playwright-core。',
+  );
+}
 
 // 统一日志美化（容错：缺 server/core/logger 时回退极简实现，保证 demo / 老项目不崩）。
 // 实时项目与 build 后的 dist/server-core 均含该模块；demo 等缺少 server/ 目录的场景走 fallback。

package/dist/vendored/skills/platform-session-navigator/scripts/package-lock.json

@@ -8,22 +8,7 @@
       "name": "platform-session-navigator-scripts",
       "version": "1.0.0",
       "dependencies": {
-        "playwright": "^1.62.1"
-      }
-    },
-    "node_modules/playwright": {
-      "version": "1.64.1",
-      "resolved": "https://registry.npmmirror.com/playwright/-/playwright-1.64.1.tgz",
-      "integrity": "sha512-HCrVhHr5QQuwYoswEUGTb7gGp522yflbv/ST8nF4sFWGuLjQCt17Q/EubpGGSNKYn1tsTCPZxqHhHCfVURu7UA==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "playwright-core": "1.64.1"
-      },
-      "bin": {
-        "playwright": "cli.js"
-      },
-      "engines": {
-        "node": ">=20"
+        "playwright-core": "^1.62.1"
       }
     },
     "node_modules/playwright-core": {

package/dist/vendored/skills/platform-session-navigator/scripts/package.json

@@ -3,8 +3,8 @@
   "version": "1.0.0",
   "private": true,
   "type": "module",
-  "description": "Playwright-based 远端 UAT auto-login scripts",
+  "description": "playwright-core-based 远端自动登录脚本（纯 JS API，浏览器走系统 Chrome + CDP）",
   "dependencies": {
-    "playwright": "^1.62.1"
+    "playwright-core": "^1.62.1"
   }
 }

package/dist/vendored/skills/platform-session-navigator/scripts/platform_login.mjs

@@ -1,4 +1,15 @@
-import { chromium } from "playwright";
+// 依赖只取 playwright 的 JS API（浏览器由本脚本 spawn 系统 Chrome + connectOverCDP 连接，
+// 不需要 playwright 自带浏览器），因此用免下载的 playwright-core：它是 cardbuddy 与工程
+// devDependencies 里的普通依赖，npm install 即落地；不用 playwright（postinstall 下载
+// 数百 MB 浏览器，作为 optionalDependency 安装失败时会被 npm 静默跳过，错误延迟到运行时）。
+let chromium;
+try {
+  ({ chromium } = await import("playwright-core"));
+} catch {
+  throw new Error(
+    "缺少依赖 playwright-core：请在本工程根执行 npm install（cardbuddy 依赖会带上 playwright-core），或手动 npm i playwright-core。",
+  );
+}
 import { readFile, writeFile, mkdir } from "node:fs/promises";
 import { existsSync } from "node:fs";
 import { spawn } from "node:child_process";

package/dist/vendored/skills/platform-session-navigator/scripts/session-manager.mjs

@@ -58,7 +58,7 @@ let _sessionCache = null; // { browser, login, at }
  * @param {object} [options]
  * @param {number} [options.debugPort=SYNC_PORT]
  * @param {boolean} [options.headless=true]
- * @returns {Promise<{ browser: import('playwright').Browser, login: object }>}
+ * @returns {Promise<{ browser: import('playwright-core').Browser, login: object }>}
  */
 export async function ensurePlatformSession({ debugPort = SYNC_PORT, headless = true } = {}) {
   // 热路径：进程内缓存未过期且 CDP 仍连通 → 直接复用（跳过 runPlatformLogin 的

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cardbuddy",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "description": "Local dev service for the CardBuddy card editor — decouples card CRUD (sync/save/validate/render-status/screenshot) from the static public editor, so the editor can be deployed to any static host while each developer runs a local service against their own card source.",
   "type": "module",
   "bin": {
@@ -30,14 +30,12 @@
     "codejar": "^4.3.0",
     "connect": "^3.7.0",
     "dotenv": "^18.0.9",
+    "playwright-core": "^1.62.1",
     "pngjs": "^7.0.0",
     "prismjs": "^1.30.0",
     "qrcode": "^1.5.4",
     "selfsigned": "^4.0.1",
     "vite": "^8.2.0",
     "vue": "^3.5.40"
-  },
-  "optionalDependencies": {
-    "playwright": "^1.62.1"
   }
 }