flower-trellis 0.6.2 → 0.6.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/enhancements/MANIFEST.json +1 -1
- package/package.json +3 -3
- package/src/builtin-marketplaces/rd-guide.json +6 -3
- package/src/builtin-plugins/flower-plugin-author/plugin.json +6 -1
- package/src/builtin-plugins/flower-plugin-author/skills/flower-plugin-author/references/ci-and-review.md +2 -2
- package/src/commands/plugin-interactive.js +546 -38
- package/src/commands/plugin-remote.js +223 -26
- package/src/commands/plugin.js +46 -6
- package/src/commands/update.js +10 -2
- package/src/lib/skill-catalog.js +20 -1
- package/src/plugin/application-service.js +245 -37
- package/src/plugin/auth/credential-store.js +25 -3
- package/src/plugin/auth/gitlab-credential-resolver.js +234 -0
- package/src/plugin/auth/gitlab-oauth.js +26 -5
- package/src/plugin/authoring/scaffold.js +6 -1
- package/src/plugin/authoring/templates/rd-guide/CODEOWNERS +1 -1
- package/src/plugin/authoring/templates/rd-guide/gitlab-ci.yml +2 -2
- package/src/plugin/authoring/templates/rd-guide/verify-integration-review.mjs +1 -1
- package/src/plugin/content-selection.js +189 -0
- package/src/plugin/contracts.js +21 -2
- package/src/plugin/formats/adapters.js +27 -3
- package/src/plugin/formats/normalized-package.js +126 -14
- package/src/plugin/gitlab/rest-client.js +21 -0
- package/src/plugin/install/content-projector.js +19 -7
- package/src/plugin/resolver/dependency-resolver.js +64 -7
- package/src/plugin/runtime-errors.js +1 -0
- package/src/plugin/schemas/marketplace-manifest.js +4 -1
- package/src/plugin/schemas/plugin-manifest.js +55 -3
- package/src/plugin/schemas/project-files.js +18 -0
- package/src/plugin/schemas/shared.js +10 -0
- package/src/plugin/sources/github-provider.js +1 -1
- package/src/plugin/sources/gitlab-provider.js +377 -51
- package/src/plugin/sources/user-source-store.js +17 -1
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "flower-trellis",
|
|
3
|
-
"version": "0.6.
|
|
3
|
+
"version": "0.6.4",
|
|
4
4
|
"description": "一键安装/升级 Trellis 并自动融合 skill-garden 强化包(默认 Claude + agents)",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|
|
@@ -70,9 +70,9 @@
|
|
|
70
70
|
"commit-and-tag-version": "^12.7.3"
|
|
71
71
|
},
|
|
72
72
|
"flowerReleaseNotes": {
|
|
73
|
-
"version": "0.6.
|
|
73
|
+
"version": "0.6.4",
|
|
74
74
|
"source": "CHANGELOG.md",
|
|
75
|
-
"body": "### 🐛 修复 Bug Fixes\n\n* **
|
|
75
|
+
"body": "### 🐛 修复 Bug Fixes\n\n* **plugin:** 支持离线冻结未更新的外部 Plugin ([6210cfa](https://github.com/SilentFlower/flower-trellis/commit/6210cfae8d459a3e7b105043e4ecbc23d1b5bed9))",
|
|
76
76
|
"truncated": false
|
|
77
77
|
},
|
|
78
78
|
"optionalDependencies": {
|
|
@@ -7,12 +7,15 @@
|
|
|
7
7
|
"baseUrl": "https://gitlab.xhgjdev.com",
|
|
8
8
|
"project": "digital-rd-governance/rd-guide",
|
|
9
9
|
"ref": "main",
|
|
10
|
-
"marketplacePath": ".flower-
|
|
10
|
+
"marketplacePath": ".flower-plugin/marketplace.json",
|
|
11
11
|
"oauth": {
|
|
12
12
|
"applicationId": "0f73e53d745450b6ab9596960b10a2ac1654d67c0941bae381f6dbbf6839ec04",
|
|
13
13
|
"scopes": [
|
|
14
|
-
"
|
|
15
|
-
"
|
|
14
|
+
"openid",
|
|
15
|
+
"profile",
|
|
16
|
+
"read_user",
|
|
17
|
+
"write_repository",
|
|
18
|
+
"api"
|
|
16
19
|
]
|
|
17
20
|
}
|
|
18
21
|
}
|
|
@@ -3,14 +3,14 @@
|
|
|
3
3
|
rd-guide CI 对完整 Marketplace 运行：
|
|
4
4
|
|
|
5
5
|
```bash
|
|
6
|
-
flower-trellis plugin validate .flower-
|
|
6
|
+
flower-trellis plugin validate .flower-plugin/marketplace.json --subject marketplace --checkout-map .flower-plugin/checkouts.json --ci --json
|
|
7
7
|
```
|
|
8
8
|
|
|
9
9
|
checkout map 的 key 使用 `<source>/<plugin>@<version>`，value 使用
|
|
10
10
|
`{"path":"checkouts/...","commit":"<40-sha>"}`，同时绑定 CI 工作区路径和实际固定 commit。
|
|
11
11
|
CI 必须拒绝可变 ref、占位或不匹配 commit、摘要或版本不一致、依赖不闭合、兼容范围无效和 capability 越权。
|
|
12
12
|
|
|
13
|
-
`review.required=true` 时，CI 必须运行随模板分发的 `verify-integration-review.mjs`。该脚本要求 `.flower-
|
|
13
|
+
`review.required=true` 时，CI 必须运行随模板分发的 `verify-integration-review.mjs`。该脚本要求 `.flower-plugin/integration-review.json` 使用以下结构并绑定本次 Marketplace digest：
|
|
14
14
|
|
|
15
15
|
```json
|
|
16
16
|
{
|