flower-trellis 0.6.2 → 0.6.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (31) hide show
  1. package/package.json +3 -3
  2. package/src/builtin-marketplaces/rd-guide.json +6 -3
  3. package/src/builtin-plugins/flower-plugin-author/plugin.json +6 -1
  4. package/src/builtin-plugins/flower-plugin-author/skills/flower-plugin-author/references/ci-and-review.md +2 -2
  5. package/src/commands/plugin-interactive.js +546 -38
  6. package/src/commands/plugin-remote.js +156 -10
  7. package/src/commands/plugin.js +35 -4
  8. package/src/lib/skill-catalog.js +20 -1
  9. package/src/plugin/application-service.js +81 -7
  10. package/src/plugin/auth/credential-store.js +25 -3
  11. package/src/plugin/auth/gitlab-credential-resolver.js +234 -0
  12. package/src/plugin/auth/gitlab-oauth.js +26 -5
  13. package/src/plugin/authoring/scaffold.js +6 -1
  14. package/src/plugin/authoring/templates/rd-guide/CODEOWNERS +1 -1
  15. package/src/plugin/authoring/templates/rd-guide/gitlab-ci.yml +2 -2
  16. package/src/plugin/authoring/templates/rd-guide/verify-integration-review.mjs +1 -1
  17. package/src/plugin/content-selection.js +189 -0
  18. package/src/plugin/contracts.js +21 -2
  19. package/src/plugin/formats/adapters.js +27 -3
  20. package/src/plugin/formats/normalized-package.js +126 -14
  21. package/src/plugin/gitlab/rest-client.js +21 -0
  22. package/src/plugin/install/content-projector.js +19 -7
  23. package/src/plugin/resolver/dependency-resolver.js +6 -0
  24. package/src/plugin/runtime-errors.js +1 -0
  25. package/src/plugin/schemas/marketplace-manifest.js +4 -1
  26. package/src/plugin/schemas/plugin-manifest.js +55 -3
  27. package/src/plugin/schemas/project-files.js +18 -0
  28. package/src/plugin/schemas/shared.js +10 -0
  29. package/src/plugin/sources/github-provider.js +1 -1
  30. package/src/plugin/sources/gitlab-provider.js +377 -51
  31. package/src/plugin/sources/user-source-store.js +17 -1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "flower-trellis",
3
- "version": "0.6.2",
3
+ "version": "0.6.3",
4
4
  "description": "一键安装/升级 Trellis 并自动融合 skill-garden 强化包(默认 Claude + agents)",
5
5
  "type": "module",
6
6
  "bin": {
@@ -70,9 +70,9 @@
70
70
  "commit-and-tag-version": "^12.7.3"
71
71
  },
72
72
  "flowerReleaseNotes": {
73
- "version": "0.6.2",
73
+ "version": "0.6.3",
74
74
  "source": "CHANGELOG.md",
75
- "body": "### 🐛 修复 Bug Fixes\n\n* **flower:** 修正遥测上报地址并忽略上游 npm 升级提示 ([3030472](https://github.com/SilentFlower/flower-trellis/commit/303047282032270267cf3b26ffc20c13f9892324))",
75
+ "body": "### ✨ 新功能 Features\n\n* **plugin:** 对齐 RD Guide 的 Marketplace 包模型 ([e399d6e](https://github.com/SilentFlower/flower-trellis/commit/e399d6e70042256258431a4629f5efa15ba2f417))\n* **plugin:** 支持在非 Trellis 项目中管理通用 Skill ([0a9cd62](https://github.com/SilentFlower/flower-trellis/commit/0a9cd62ff3cd37971f5d65ea8500e4f51ed3a280))\n* **plugin:** 复用 GitLab 全局凭据 ([a3c6b16](https://github.com/SilentFlower/flower-trellis/commit/a3c6b1616b123ff0f7328ce5b2eace5eb631ae5b))\n* **plugin:** 支持 Marketplace Skill 子集选择 ([6406ccb](https://github.com/SilentFlower/flower-trellis/commit/6406ccbdbe982a885069a6a4af133fc132565a1c))\n\n\n### 🐛 修复 Bug Fixes\n\n* **plugin:** 加速 GitLab RD Guide Skill 清单读取 ([8bd1eac](https://github.com/SilentFlower/flower-trellis/commit/8bd1eac86ac32680d52c6fa715ece1b4c4ba99ef))",
76
76
  "truncated": false
77
77
  },
78
78
  "optionalDependencies": {
package/src/builtin-marketplaces/rd-guide.json CHANGED
@@ -7,12 +7,15 @@
7
7
  "baseUrl": "https://gitlab.xhgjdev.com",
8
8
  "project": "digital-rd-governance/rd-guide",
9
9
  "ref": "main",
10
- "marketplacePath": ".flower-marketplace/marketplace.json",
10
+ "marketplacePath": ".flower-plugin/marketplace.json",
11
11
  "oauth": {
12
12
  "applicationId": "0f73e53d745450b6ab9596960b10a2ac1654d67c0941bae381f6dbbf6839ec04",
13
13
  "scopes": [
14
- "read_api",
15
- "read_repository"
14
+ "openid",
15
+ "profile",
16
+ "read_user",
17
+ "write_repository",
18
+ "api"
16
19
  ]
17
20
  }
18
21
  }
package/src/builtin-plugins/flower-plugin-author/plugin.json CHANGED
@@ -15,7 +15,12 @@
15
15
  },
16
16
  "content": {
17
17
  "skills": [
18
- "skills/flower-plugin-author"
18
+ {
19
+ "name": "flower-plugin-author",
20
+ "path": "skills/flower-plugin-author",
21
+ "version": "1.0.0",
22
+ "description": "Flower Plugin 作者工具"
23
+ }
19
24
  ]
20
25
  }
21
26
  }
package/src/builtin-plugins/flower-plugin-author/skills/flower-plugin-author/references/ci-and-review.md CHANGED
@@ -3,14 +3,14 @@
3
3
  rd-guide CI 对完整 Marketplace 运行：
4
4
 
5
5
  ```bash
6
- flower-trellis plugin validate .flower-marketplace/marketplace.json --subject marketplace --checkout-map .flower-marketplace/checkouts.json --ci --json
6
+ flower-trellis plugin validate .flower-plugin/marketplace.json --subject marketplace --checkout-map .flower-plugin/checkouts.json --ci --json
7
7
  ```
8
8
 
9
9
  checkout map 的 key 使用 `<source>/<plugin>@<version>`，value 使用
10
10
  `{"path":"checkouts/...","commit":"<40-sha>"}`，同时绑定 CI 工作区路径和实际固定 commit。
11
11
  CI 必须拒绝可变 ref、占位或不匹配 commit、摘要或版本不一致、依赖不闭合、兼容范围无效和 capability 越权。
12
12
 
13
- `review.required=true` 时，CI 必须运行随模板分发的 `verify-integration-review.mjs`。该脚本要求 `.flower-marketplace/integration-review.json` 使用以下结构并绑定本次 Marketplace digest：
13
+ `review.required=true` 时，CI 必须运行随模板分发的 `verify-integration-review.mjs`。该脚本要求 `.flower-plugin/integration-review.json` 使用以下结构并绑定本次 Marketplace digest：
14
14
 
15
15
  ```json
16
16
  {