create-yss-spec 2.1.5 → 2.1.7

package/template/.pi/skills/drawio/scripts/tools/build-ai-icon-catalog.js

@@ -1,208 +0,0 @@
-#!/usr/bin/env node
-import { createHash } from 'node:crypto'
-import { mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from 'node:fs'
-import { dirname, join, resolve } from 'node:path'
-import { fileURLToPath, pathToFileURL } from 'node:url'
-import { gzipSync, gunzipSync } from 'node:zlib'
-
-import {
-  AI_ICON_CATALOG_COUNTS,
-  AI_ICON_CATALOG_SCHEMA_VERSION,
-  AI_ICON_SOURCE
-} from '../shared/ai-icon-contract.js'
-
-export { AI_ICON_SOURCE } from '../shared/ai-icon-contract.js'
-
-const DEFAULT_EXPECTED = AI_ICON_CATALOG_COUNTS
-const VARIANT_SUFFIX = /(?:-text-color|-text-[a-z]{2}|-text|-brand-color|-brand|-color)$/
-const LOCAL_FRAGMENT = /^#[A-Za-z_][A-Za-z0-9_.:-]*$/
-const MAX_SVG_BYTES = 128 * 1024
-
-function sourcePath(value) {
-  return value instanceof URL ? fileURLToPath(value) : resolve(String(value))
-}
-
-function asciiCompare(left, right) {
-  return left < right ? -1 : left > right ? 1 : 0
-}
-
-function normalizeSvg(svg, filename) {
-  if (Buffer.byteLength(svg, 'utf8') > MAX_SVG_BYTES) {
-    throw new Error(`AI icon source ${filename} exceeds ${MAX_SVG_BYTES} bytes`)
-  }
-  if (!/^\s*<svg\b/i.test(svg) || !/\bviewBox\s*=\s*["'][^"']+["']/i.test(svg)) {
-    throw new Error(`AI icon source ${filename} must have an SVG root and viewBox`)
-  }
-  if (/<!DOCTYPE\b|<!ENTITY\b|<\?[\s\S]*?\?>/i.test(svg)) {
-    throw new Error(`AI icon source ${filename} contains a forbidden declaration or processing instruction`)
-  }
-  if (/<\/?(?:[A-Za-z_][\w.-]*:)?(?:script|foreignObject|image)\b/i.test(svg)) {
-    throw new Error(`AI icon source ${filename} contains a forbidden active or embedded element`)
-  }
-  if (/\s(?:[A-Za-z_][\w.-]*:)?on[a-z0-9_-]+\s*=/i.test(svg)) {
-    throw new Error(`AI icon source ${filename} contains an event attribute`)
-  }
-  if (/@import\b/i.test(svg)) {
-    throw new Error(`AI icon source ${filename} contains an external CSS import`)
-  }
-  for (const match of svg.matchAll(/\s((?:xlink:)?href|src)\s*=\s*(["'])(.*?)\2/gi)) {
-    const [, attribute, , value] = match
-    if (attribute.toLowerCase() === 'src' || !LOCAL_FRAGMENT.test(value.trim())) {
-      throw new Error(`AI icon source ${filename} contains an external ${attribute} reference; only local fragments are allowed`)
-    }
-  }
-  if (/\s(?:xlink:)?href\s*=\s*[^"']/i.test(svg) || /\ssrc\s*=\s*[^"']/i.test(svg)) {
-    throw new Error(`AI icon source ${filename} contains an unquoted resource reference`)
-  }
-  for (const match of svg.matchAll(/url\(\s*(["']?)(.*?)\1\s*\)/gi)) {
-    if (!LOCAL_FRAGMENT.test(match[2].trim())) {
-      throw new Error(`AI icon source ${filename} contains an external CSS URL; only local fragments are allowed`)
-    }
-  }
-  return svg
-    .replace(/(<svg\b[^>]*\bwidth\s*=\s*)["']1em["']/i, '$1"24"')
-    .replace(/(<svg\b[^>]*\bheight\s*=\s*)["']1em["']/i, '$1"24"')
-    .trim()
-}
-
-function deterministicGzip(text) {
-  const bytes = gzipSync(Buffer.from(text, 'utf8'), { level: 9, mtime: 0 })
-  bytes[3] = 0
-  bytes.fill(0, 4, 8)
-  bytes[8] = 2
-  bytes[9] = 255
-  return bytes
-}
-
-function validatePackage(sourceDir) {
-  const metadata = JSON.parse(readFileSync(join(sourceDir, 'package.json'), 'utf8'))
-  for (const [key, expected] of Object.entries({
-    name: AI_ICON_SOURCE.package,
-    version: AI_ICON_SOURCE.version,
-    license: AI_ICON_SOURCE.license
-  })) {
-    if (metadata[key] !== expected) {
-      throw new Error(`AI icon source package ${key} must be ${JSON.stringify(expected)}; received ${JSON.stringify(metadata[key])}`)
-    }
-  }
-}
-
-function selectIcons(sourceDir, expected) {
-  const iconsDir = join(sourceDir, 'icons')
-  const variants = readdirSync(iconsDir, { withFileTypes: true })
-    .filter((entry) => entry.isFile() && entry.name.endsWith('.svg'))
-    .map((entry) => entry.name.slice(0, -4))
-    .sort(asciiCompare)
-  if (variants.length !== expected.variants) {
-    throw new Error(`AI icon source must contain ${expected.variants} SVG variants; received ${variants.length}`)
-  }
-
-  const families = new Map()
-  for (const variant of variants) {
-    const slug = variant.replace(VARIANT_SUFFIX, '')
-    if (!families.has(slug)) families.set(slug, new Set())
-    families.get(slug).add(variant)
-  }
-  if (families.size !== expected.brands) {
-    throw new Error(`AI icon source must contain ${expected.brands} base brands; received ${families.size}`)
-  }
-
-  const distribution = { color: 0, brandColor: 0, base: 0 }
-  const icons = []
-  for (const slug of [...families.keys()].sort(asciiCompare)) {
-    const family = families.get(slug)
-    let variant
-    let kind
-    if (family.has(`${slug}-color`)) {
-      variant = `${slug}-color`
-      kind = 'color'
-    } else if (family.has(`${slug}-brand-color`)) {
-      variant = `${slug}-brand-color`
-      kind = 'brandColor'
-    } else if (family.has(slug)) {
-      variant = slug
-      kind = 'base'
-    } else {
-      throw new Error(`AI icon family ${slug} has no canonical color, brand-color, or base variant`)
-    }
-    distribution[kind]++
-    const filename = `${variant}.svg`
-    icons.push({ slug, variant, svg: normalizeSvg(readFileSync(join(iconsDir, filename), 'utf8'), filename) })
-  }
-
-  assertDistribution(distribution, expected.distribution)
-  return { icons, distribution, variants: variants.length }
-}
-
-function assertDistribution(actual, expected) {
-  for (const key of ['color', 'brandColor', 'base']) {
-    if (actual[key] !== expected[key]) {
-      throw new Error(`AI icon ${key} variant count must be ${expected[key]}; received ${actual[key]}`)
-    }
-  }
-}
-
-export function buildAiIconCatalog({ sourceDir, output, integrity, expected = DEFAULT_EXPECTED }) {
-  if (!sourceDir || !output) throw new TypeError('buildAiIconCatalog requires sourceDir and output')
-  if (integrity !== AI_ICON_SOURCE.integrity) {
-    throw new Error(`AI icon source integrity must be ${AI_ICON_SOURCE.integrity}`)
-  }
-  const input = sourcePath(sourceDir)
-  const destination = resolve(String(output))
-  validatePackage(input)
-  const selected = selectIcons(input, expected)
-  const catalog = {
-    schemaVersion: AI_ICON_CATALOG_SCHEMA_VERSION,
-    source: {
-      package: AI_ICON_SOURCE.package,
-      version: AI_ICON_SOURCE.version,
-      integrity: AI_ICON_SOURCE.integrity,
-      license: AI_ICON_SOURCE.license,
-      variantOrder: [...AI_ICON_SOURCE.variantOrder]
-    },
-    icons: selected.icons
-  }
-  const json = `${JSON.stringify(catalog)}\n`
-  const bytes = deterministicGzip(json)
-  const temporary = `${destination}.tmp`
-  mkdirSync(dirname(destination), { recursive: true })
-  try {
-    writeFileSync(temporary, bytes)
-    JSON.parse(gunzipSync(readFileSync(temporary)).toString('utf8'))
-    renameSync(temporary, destination)
-  } finally {
-    rmSync(temporary, { force: true })
-  }
-  return {
-    variants: selected.variants,
-    brands: selected.icons.length,
-    distribution: selected.distribution,
-    output: destination,
-    uncompressedBytes: Buffer.byteLength(json),
-    gzipBytes: bytes.length,
-    sha256: createHash('sha256').update(bytes).digest('hex')
-  }
-}
-
-function parseCliArgs(args) {
-  const options = {}
-  for (let index = 0; index < args.length; index += 2) {
-    const flag = args[index]
-    const value = args[index + 1]
-    if (!['--source-dir', '--integrity', '--output'].includes(flag) || value === undefined) {
-      throw new Error('Usage: build-ai-icon-catalog --source-dir <dir> --integrity <sri> --output <file>')
-    }
-    options[flag.slice(2).replace(/-([a-z])/g, (_, letter) => letter.toUpperCase())] = value
-  }
-  return options
-}
-
-if (process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href) {
-  try {
-    const result = buildAiIconCatalog(parseCliArgs(process.argv.slice(2)))
-    console.log(JSON.stringify(result, null, 2))
-  } catch (error) {
-    console.error(error.message)
-    process.exitCode = 1
-  }
-}

package/template/.pi/skills/drawio/scripts/tools/build-ai-icon-catalog.test.js

@@ -1,107 +0,0 @@
-import test from 'node:test'
-import assert from 'node:assert/strict'
-import { cpSync, mkdtempSync, readFileSync, writeFileSync } from 'node:fs'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { gunzipSync } from 'node:zlib'
-
-import { buildAiIconCatalog } from './build-ai-icon-catalog.js'
-
-const FIXTURE_DIR = new URL('./fixtures/ai-icons-package/', import.meta.url)
-const INTEGRITY = 'sha512-ZDflEq0uUvAkH4WK4h3qNvvY09ts4OqUb5azD7A0xKfcuYhffGwB1Q/As2RguZYq4Gh4v925CJ8iodiClzc4zw=='
-const EXPECTED = { variants: 6, brands: 3, distribution: { color: 1, brandColor: 1, base: 1 } }
-
-function copyFixture() {
-  const source = join(mkdtempSync(join(tmpdir(), 'drawio-ai-icons-source-')), 'package')
-  cpSync(FIXTURE_DIR, source, { recursive: true })
-  return source
-}
-
-test('buildAiIconCatalog selects canonical variants and writes deterministic gzip metadata', () => {
-  const output = join(mkdtempSync(join(tmpdir(), 'drawio-ai-icons-')), 'catalog.json.gz')
-  const result = buildAiIconCatalog({
-    sourceDir: FIXTURE_DIR,
-    output,
-    integrity: INTEGRITY,
-    expected: EXPECTED
-  })
-
-  const bytes = readFileSync(output)
-  assert.deepEqual([...bytes.subarray(0, 10)], [31, 139, 8, 0, 0, 0, 0, 0, 2, 255])
-  const catalog = JSON.parse(gunzipSync(bytes).toString('utf8'))
-  assert.deepEqual(catalog.icons.map(({ slug, variant }) => ({ slug, variant })), [
-    { slug: 'alpha', variant: 'alpha-color' },
-    { slug: 'beta', variant: 'beta-brand-color' },
-    { slug: 'civitai', variant: 'civitai' }
-  ])
-  assert.equal(catalog.icons[0].svg.includes('width="24" height="24"'), true)
-  assert.equal(result.sha256.length, 64)
-})
-
-test('buildAiIconCatalog rejects external SVG resource URLs', () => {
-  const sourceDir = copyFixture()
-  writeFileSync(
-    join(sourceDir, 'icons', 'alpha-color.svg'),
-    '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path fill="url(https://example.com/a.svg#x)"/></svg>'
-  )
-  assert.throws(
-    () => buildAiIconCatalog({ sourceDir, output: join(sourceDir, 'out.gz'), integrity: INTEGRITY, expected: EXPECTED }),
-    /external|local fragment/i
-  )
-})
-
-test('buildAiIconCatalog rejects unsafe SVG structures through the source boundary', () => {
-  const unsafe = [
-    ['script', '<script>alert(1)</script>'],
-    ['event', '<path onclick="alert(1)"/>'],
-    ['foreignObject', '<foreignObject/>'],
-    ['image', '<image href="#local"/>'],
-    ['external href', '<use href="https://example.com/icon.svg#x"/>'],
-    ['doctype', '<!DOCTYPE svg>']
-  ]
-  for (const [name, fragment] of unsafe) {
-    const sourceDir = copyFixture()
-    writeFileSync(
-      join(sourceDir, 'icons', 'alpha-color.svg'),
-      `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">${fragment}</svg>`
-    )
-    assert.throws(
-      () => buildAiIconCatalog({ sourceDir, output: join(sourceDir, 'out.gz'), integrity: INTEGRITY, expected: EXPECTED }),
-      /forbidden|event|external/i,
-      name
-    )
-  }
-})
-
-test('buildAiIconCatalog rejects source metadata, integrity, and count mismatches', () => {
-  const sourceDir = copyFixture()
-  writeFileSync(join(sourceDir, 'package.json'), '{"name":"wrong","version":"1.91.0","license":"MIT"}')
-  assert.throws(
-    () => buildAiIconCatalog({ sourceDir, output: join(sourceDir, 'out.gz'), integrity: INTEGRITY, expected: EXPECTED }),
-    /package name/i
-  )
-  assert.throws(
-    () => buildAiIconCatalog({ sourceDir: FIXTURE_DIR, output: join(sourceDir, 'out.gz'), integrity: 'sha512-wrong', expected: EXPECTED }),
-    /integrity/i
-  )
-  assert.throws(
-    () => buildAiIconCatalog({ sourceDir: FIXTURE_DIR, output: join(sourceDir, 'out.gz'), integrity: INTEGRITY }),
-    /871 SVG variants/i
-  )
-})
-
-test('buildAiIconCatalog reproduces bytes and leaves an existing output intact on failure', () => {
-  const directory = mkdtempSync(join(tmpdir(), 'drawio-ai-icons-output-'))
-  const first = join(directory, 'first.gz')
-  const second = join(directory, 'second.gz')
-  const options = { sourceDir: FIXTURE_DIR, integrity: INTEGRITY, expected: EXPECTED }
-  const firstResult = buildAiIconCatalog({ ...options, output: first })
-  const secondResult = buildAiIconCatalog({ ...options, output: second })
-  assert.deepEqual(readFileSync(first), readFileSync(second))
-  assert.equal(firstResult.sha256, secondResult.sha256)
-
-  const protectedOutput = join(directory, 'protected.gz')
-  writeFileSync(protectedOutput, 'keep-me')
-  assert.throws(() => buildAiIconCatalog({ ...options, output: protectedOutput, integrity: 'sha512-wrong' }), /integrity/i)
-  assert.equal(readFileSync(protectedOutput, 'utf8'), 'keep-me')
-})

package/template/.pi/skills/drawio/scripts/tools/build-shape-catalog.js

@@ -1,84 +0,0 @@
-#!/usr/bin/env node
-import { mkdirSync, readFileSync, writeFileSync } from 'node:fs'
-import { dirname, resolve } from 'node:path'
-import { fileURLToPath } from 'node:url'
-import { gzipSync, gunzipSync } from 'node:zlib'
-import { COVERED_PREFIXES } from '../dsl/shape-catalog.js'
-
-const __dirname = dirname(fileURLToPath(import.meta.url))
-const skillRoot = resolve(__dirname, '../..')
-const sourcePath = resolve(skillRoot, 'assets/catalog/shape-index.json.gz')
-const outputPath = resolve(skillRoot, 'assets/catalog/shape-catalog.json.gz')
-const FAMILY_KINDS = new Map([
-  ['mxgraph.kubernetes.icon2', 'k8sParamIcon'],
-  ['mxgraph.cisco19.rect', 'cisco19ParamIcon'],
-  ['mxgraph.aws4.productIcon', 'aws4ProductIcon'],
-  ['mxgraph.aws4.group', 'aws4GroupIcon']
-])
-
-function styleValue(style, key) {
-  return new RegExp(`(?:^|;)${key}=([^;]+)`).exec(style)?.[1] || null
-}
-
-function metadata(row) {
-  return { t: row.title || '', g: String(row.tags || '').split(/\s+/).filter(Boolean) }
-}
-
-export function buildCatalog(rows) {
-  const entries = new Map()
-  const families = new Map()
-  const builtin = new Set()
-
-  for (const row of rows) {
-    const style = row.style || ''
-    const shape = styleValue(style, 'shape')
-    const meta = metadata(row)
-    if (shape && !shape.startsWith('mxgraph.')) builtin.add(shape)
-
-    for (const name of [shape, styleValue(style, 'resIcon')]) {
-      if (!name || !COVERED_PREFIXES.some((prefix) => name.startsWith(prefix))) continue
-      const kind = name === shape ? 'stencil' : 'aws4ResourceIcon'
-      const key = `${kind}:${name}`
-      const existing = entries.get(key)
-      if (existing) {
-        existing.g = [...new Set([...existing.g, ...meta.g])].sort()
-        if (!existing.t && meta.t) existing.t = meta.t
-      } else {
-        entries.set(key, { n: name, k: kind, ...meta, g: [...new Set(meta.g)].sort() })
-      }
-    }
-
-    if (!shape || !FAMILY_KINDS.has(shape)) continue
-    const param = ['prIcon', 'resIcon', 'grIcon'].find((key) => styleValue(style, key))
-    if (!param) continue
-    const value = styleValue(style, param)
-    const familyKey = `${shape}:${param}`
-    if (!families.has(familyKey)) {
-      families.set(familyKey, { base: shape, param, k: FAMILY_KINDS.get(shape), values: new Map() })
-    }
-    families.get(familyKey).values.set(value, { v: value, ...meta })
-  }
-
-  return {
-    version: 2,
-    generatedFrom: 'shape-index.json.gz (jgraph/drawio-mcp, Apache-2.0)',
-    builtin: [...builtin].sort(),
-    entries: [...entries.values()].sort((a, b) => a.n.localeCompare(b.n) || a.k.localeCompare(b.k)),
-    families: [...families.values()]
-      .map((family) => ({ ...family, values: [...family.values.values()].sort((a, b) => a.v.localeCompare(b.v)) }))
-      .sort((a, b) => a.base.localeCompare(b.base))
-  }
-}
-
-export function writeCatalog(source = sourcePath, output = outputPath) {
-  const rows = JSON.parse(gunzipSync(readFileSync(source)).toString('utf-8'))
-  const catalog = buildCatalog(rows)
-  mkdirSync(dirname(output), { recursive: true })
-  writeFileSync(output, gzipSync(`${JSON.stringify(catalog)}\n`))
-  return catalog
-}
-
-if (process.argv[1] === fileURLToPath(import.meta.url)) {
-  const catalog = writeCatalog()
-  console.log(`catalog v${catalog.version}: ${catalog.entries.length} entries, ${catalog.families.map((f) => `${f.base}=${f.values.length}`).join(', ')}`)
-}

package/template/.pi/skills/drawio/scripts/tools/build-shape-catalog.test.js

@@ -1,43 +0,0 @@
-import test from 'node:test'
-import assert from 'node:assert/strict'
-import { buildCatalog } from './build-shape-catalog.js'
-
-test('buildCatalog extracts deterministic flat and parameterized entries', () => {
-  const rows = [
-    { style: 'shape=mxgraph.kubernetes.icon2;prIcon=pod;', title: 'Pod', tags: 'kubernetes pod' },
-    { style: 'shape=mxgraph.mscae.vm;', title: 'VM', tags: 'azure vm' },
-    { style: 'shape=rectangle;', title: 'Rectangle', tags: 'rect' }
-  ]
-  const catalog = buildCatalog(rows)
-  assert.deepEqual(catalog.builtin, ['rectangle'])
-  assert.ok(catalog.entries.some((entry) => entry.n === 'mxgraph.mscae.vm'))
-  assert.deepEqual(catalog.families[0].values[0], { v: 'pod', t: 'Pod', g: ['kubernetes', 'pod'] })
-})
-
-test('buildCatalog includes SysML and BPMN stencils while merging variant search tags', () => {
-  const rows = [
-    { style: 'shape=mxgraph.bpmn.task2;taskMarker=abstract;', title: 'Generic Task', tags: 'bpmn task generic' },
-    { style: 'shape=mxgraph.bpmn.task2;taskMarker=manual;', title: 'Manual', tags: 'bpmn task manual' },
-    { style: 'shape=mxgraph.sysml.port;sysMLPortType=flowN;', title: 'Flow Port', tags: 'sysml port flow' },
-    { style: 'shape=mxgraph.sysml.package;', title: 'Package', tags: 'sysml block package' },
-    {
-      style: 'shape=mxgraph.sysml.package;sysMLType=requirement;',
-      title: 'Requirement Diagram',
-      tags: 'sysml requirement diagram'
-    }
-  ]
-
-  const catalog = buildCatalog(rows)
-  assert.deepEqual(
-    catalog.entries.map((entry) => entry.n),
-    ['mxgraph.bpmn.task2', 'mxgraph.sysml.package', 'mxgraph.sysml.port']
-  )
-  assert.deepEqual(
-    catalog.entries.find((entry) => entry.n === 'mxgraph.bpmn.task2').g,
-    ['bpmn', 'generic', 'manual', 'task']
-  )
-  assert.deepEqual(
-    catalog.entries.find((entry) => entry.n === 'mxgraph.sysml.package').g,
-    ['block', 'diagram', 'package', 'requirement', 'sysml']
-  )
-})

package/template/.pi/skills/drawio/scripts/tools/fixtures/ai-icons-package/icons/alpha-color.svg

@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24"><defs><linearGradient id="a"><stop stop-color="#fff"/><stop offset="1" stop-color="#000"/></linearGradient></defs><path fill="url(#a)" d="M2 2h20v20H2z"/></svg>

package/template/.pi/skills/drawio/scripts/tools/fixtures/ai-icons-package/icons/alpha.svg

@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24"><path fill="currentColor" d="M2 2h20v20H2z"/></svg>

package/template/.pi/skills/drawio/scripts/tools/fixtures/ai-icons-package/icons/beta-brand-color.svg

@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24"><circle fill="#369" cx="12" cy="12" r="10"/></svg>

package/template/.pi/skills/drawio/scripts/tools/fixtures/ai-icons-package/icons/beta.svg

@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24"><circle cx="12" cy="12" r="10"/></svg>

package/template/.pi/skills/drawio/scripts/tools/fixtures/ai-icons-package/icons/civitai-text-color.svg

@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24"><text x="2" y="16">Civitai</text></svg>

package/template/.pi/skills/drawio/scripts/tools/fixtures/ai-icons-package/icons/civitai.svg

@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24"><path d="M12 1l10 11-10 11L2 12z"/></svg>

package/template/.pi/skills/drawio/scripts/tools/fixtures/ai-icons-package/package.json

@@ -1,5 +0,0 @@
-{
-  "name": "@lobehub/icons-static-svg",
-  "version": "1.91.0",
-  "license": "MIT"
-}