itismyskillmarket 1.3.38 → 1.3.39

package/dist/{chunk-NWGRVBSX.js → chunk-VRXNOGLL.js}

@@ -5,6 +5,7 @@ import { createServer } from "http";
 import { readFileSync as readFileSync3, existsSync as existsSync3, mkdirSync, rmSync, readdirSync, renameSync } from "fs";
 import { join as join3, extname, dirname, basename } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
+import { tmpdir } from "os";
 import AdmZip from "adm-zip";
 
 // src/commands/npm.ts
@@ -636,44 +637,57 @@ import * as tar from "tar";
 var execAsync = promisify(exec);
 async function installSkill(skillId, version, options) {
   await ensureMarketDirs();
-  console.log(`Installing ${skillId}${version ? `@${version}` : ""}...`);
-  const pkgInfo = await fetchSkillPackage(skillId);
-  if (!pkgInfo) {
-    throw new Error(`Package ${skillId} not found`);
-  }
-  const packageName = pkgInfo.name;
-  const targetVersion = version || pkgInfo["dist-tags"]?.latest;
-  if (!targetVersion) {
-    throw new Error(`No version found for ${packageName}`);
-  }
-  const cacheDir = getCacheDir();
-  const targetDir = path9.join(cacheDir, `${packageName}@${targetVersion}`);
-  if (!await fs10.pathExists(targetDir)) {
-    console.log("Downloading package...");
-    await fs10.ensureDir(cacheDir);
-    try {
-      const { stdout } = await execAsync(
-        `npm pack ${packageName}@${targetVersion} --pack-destination "${cacheDir}"`
-      );
-      const tarballName = stdout.trim();
-      const tarballPath = path9.join(cacheDir, tarballName);
-      if (await fs10.pathExists(tarballPath)) {
-        await tar.extract({
-          file: tarballPath,
-          cwd: cacheDir
-        });
-        await fs10.remove(tarballPath);
-        await fs10.move(path9.join(cacheDir, "package"), targetDir, { overwrite: true });
+  let targetVersion;
+  let pkgRoot;
+  if (options?.sourceDir) {
+    console.log(`Installing ${skillId} from local source...`);
+    pkgRoot = options.sourceDir;
+    const pkgJsonPath = path9.join(pkgRoot, "package.json");
+    targetVersion = version || "0.0.0";
+    if (await fs10.pathExists(pkgJsonPath)) {
+      try {
+        const pkg = JSON.parse(await fs10.readFile(pkgJsonPath, "utf-8"));
+        if (pkg.version) targetVersion = pkg.version;
+      } catch {
       }
-    } catch (err) {
-      throw new Error(`Failed to download package: ${err}`);
     }
+  } else {
+    console.log(`Installing ${skillId}${version ? `@${version}` : ""}...`);
+    const pkgInfo = await fetchSkillPackage(skillId);
+    if (!pkgInfo) {
+      throw new Error(`Package ${skillId} not found`);
+    }
+    const packageName = pkgInfo.name;
+    targetVersion = version || pkgInfo["dist-tags"]?.latest;
+    if (!targetVersion) {
+      throw new Error(`No version found for ${packageName}`);
+    }
+    const cacheDir = getCacheDir();
+    const targetDir = path9.join(cacheDir, `${packageName}@${targetVersion}`);
+    if (!await fs10.pathExists(targetDir)) {
+      console.log("Downloading package...");
+      await fs10.ensureDir(cacheDir);
+      try {
+        const { stdout } = await execAsync(
+          `npm pack ${packageName}@${targetVersion} --pack-destination "${cacheDir}"`
+        );
+        const tarballName = stdout.trim();
+        const tarballPath = path9.join(cacheDir, tarballName);
+        if (await fs10.pathExists(tarballPath)) {
+          await tar.extract({ file: tarballPath, cwd: cacheDir });
+          await fs10.remove(tarballPath);
+          await fs10.move(path9.join(cacheDir, "package"), targetDir, { overwrite: true });
+        }
+      } catch (err) {
+        throw new Error(`Failed to download package: ${err}`);
+      }
+    }
+    pkgRoot = targetDir;
   }
   const skillsDir = getSkillsDir();
   const skillVersionDir = path9.join(skillsDir, `${skillId}@${targetVersion}`);
   console.log("Setting up skill...");
   await fs10.ensureDir(skillVersionDir);
-  const pkgRoot = targetDir;
   if (await fs10.pathExists(path9.join(pkgRoot, "SKILL.md"))) {
     await fs10.copy(
       path9.join(pkgRoot, "SKILL.md"),
@@ -1035,9 +1049,14 @@ import { fileURLToPath } from "url";
 import { promisify as promisify2 } from "util";
 var execAsync2 = promisify2(exec2);
 async function publishSkill(skillName, options) {
-  const __dirname2 = fileURLToPath(new URL(".", import.meta.url));
-  const projectRoot = join2(__dirname2, "..");
-  const skillDir = join2(projectRoot, "skills", skillName);
+  let skillDir;
+  if (options?.skillDir) {
+    skillDir = options.skillDir;
+  } else {
+    const __dirname2 = fileURLToPath(new URL(".", import.meta.url));
+    const projectRoot = join2(__dirname2, "..");
+    skillDir = join2(projectRoot, "skills", skillName);
+  }
   console.log(`Publishing ${skillName}...`);
   if (!existsSync2(skillDir)) {
     throw new Error(`Skill '${skillName}' not found in skills/ directory`);
@@ -1578,6 +1597,7 @@ async function adminAccess(skillId, level) {
 }
 
 // src/commands/ui.ts
+var MAX_UPLOAD_SIZE = 50 * 1024 * 1024;
 var __filename = fileURLToPath2(import.meta.url);
 var __dirname = dirname(__filename);
 var guiDir = join3(__dirname, "..", "gui");
@@ -2074,7 +2094,6 @@ API_ROUTES.POST["/api/update"] = async (req, res, _url) => {
     jsonResponse(res, 500, { error: String(err) });
   }
 };
-var PROJECT_ROOT = join3(__dirname, "..");
 API_ROUTES.POST["/api/upload"] = async (req, res, _url) => {
   try {
     const body = await parseBody(req);
@@ -2090,6 +2109,11 @@ API_ROUTES.POST["/api/upload"] = async (req, res, _url) => {
       jsonResponse(res, 400, { error: "Empty file data" });
       return;
     }
+    if (buffer.length > MAX_UPLOAD_SIZE) {
+      const sizeMB = (buffer.length / 1024 / 1024).toFixed(1);
+      jsonResponse(res, 400, { error: `File too large (${sizeMB} MB). Maximum is 50 MB.` });
+      return;
+    }
     const zip = new AdmZip(buffer);
     const entries = zip.getEntries();
     if (entries.length === 0) {
@@ -2119,26 +2143,27 @@ API_ROUTES.POST["/api/upload"] = async (req, res, _url) => {
     }
     skillName = skillName.replace(/[^a-zA-Z0-9_-]/g, "_").toLowerCase();
     if (!skillName) skillName = "untitled-skill";
-    const skillDir = join3(PROJECT_ROOT, "skills", skillName);
-    if (existsSync3(skillDir)) {
-      rmSync(skillDir, { recursive: true, force: true });
-    }
-    mkdirSync(skillDir, { recursive: true });
-    zip.extractAllTo(skillDir, true);
-    const extractedItems = readdirSync(skillDir, { withFileTypes: true });
+    const uploadId = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+    const tempDir = join3(tmpdir(), `skm-upload-${uploadId}`);
+    if (existsSync3(tempDir)) {
+      rmSync(tempDir, { recursive: true, force: true });
+    }
+    mkdirSync(tempDir, { recursive: true });
+    zip.extractAllTo(tempDir, true);
+    const extractedItems = readdirSync(tempDir, { withFileTypes: true });
     const subDirs = extractedItems.filter((i) => i.isDirectory());
     const files = extractedItems.filter((i) => !i.isDirectory());
     if (subDirs.length === 1 && files.length === 0) {
-      const subDirPath = join3(skillDir, subDirs[0].name);
+      const subDirPath = join3(tempDir, subDirs[0].name);
       const subItems = readdirSync(subDirPath, { withFileTypes: true });
       for (const item of subItems) {
-        renameSync(join3(subDirPath, item.name), join3(skillDir, item.name));
+        renameSync(join3(subDirPath, item.name), join3(tempDir, item.name));
       }
       rmSync(subDirPath, { recursive: true, force: true });
     }
-    const skillMdPath = findFileSync(skillDir, "SKILL.md");
+    const skillMdPath = findFileSync(tempDir, "SKILL.md");
     const skillMdExists = skillMdPath !== null;
-    const pkgJsonPath = findFileSync(skillDir, "package.json") || join3(skillDir, "package.json");
+    const pkgJsonPath = findFileSync(tempDir, "package.json") || join3(tempDir, "package.json");
     if (existsSync3(pkgJsonPath)) {
       try {
         pkgInfo = JSON.parse(readFileSync3(pkgJsonPath, "utf-8"));
@@ -2154,7 +2179,9 @@ API_ROUTES.POST["/api/upload"] = async (req, res, _url) => {
       platforms: meta.platforms || [],
       hasPackageJson: existsSync3(pkgJsonPath),
       hasSkillMd: skillMdExists,
-      fileCount: entries.length
+      fileCount: entries.length,
+      tempDir
+      // 返回临时目录路径，供后续 action 使用
     };
     jsonResponse(res, 200, result);
   } catch (err) {
@@ -2166,6 +2193,7 @@ API_ROUTES.POST["/api/upload/action"] = async (req, res, _url) => {
     const body = await parseBody(req);
     const skillName = String(body.skillName || "");
     const action = String(body.action || "");
+    const tempDir = body.tempDir ? String(body.tempDir) : "";
     if (!skillName) {
       jsonResponse(res, 400, { error: "Missing skillName" });
       return;
@@ -2174,15 +2202,14 @@ API_ROUTES.POST["/api/upload/action"] = async (req, res, _url) => {
       jsonResponse(res, 400, { error: 'action must be "publish", "install", or "both"' });
       return;
     }
-    const skillDir = join3(PROJECT_ROOT, "skills", skillName);
-    if (!existsSync3(skillDir)) {
-      jsonResponse(res, 404, { error: `Skill "${skillName}" not found in skills/ directory. Upload first.` });
+    if (!tempDir || !existsSync3(tempDir)) {
+      jsonResponse(res, 404, { error: "Upload session expired or not found. Please upload again." });
       return;
     }
     const results = {};
     if (action === "publish" || action === "both") {
       try {
-        await publishSkill(skillName);
+        await publishSkill(skillName, { skillDir: tempDir });
         results.publish = { success: true, message: `${skillName} published to npm` };
       } catch (err) {
         results.publish = { success: false, message: String(err) };
@@ -2190,12 +2217,16 @@ API_ROUTES.POST["/api/upload/action"] = async (req, res, _url) => {
     }
     if (action === "install" || action === "both") {
       try {
-        await installSkill(skillName, void 0, { force: true });
+        await installSkill(skillName, void 0, { force: true, sourceDir: tempDir });
         results.install = { success: true, message: `${skillName} installed locally` };
       } catch (err) {
         results.install = { success: false, message: String(err) };
       }
     }
+    try {
+      rmSync(tempDir, { recursive: true, force: true });
+    } catch {
+    }
     jsonResponse(res, 200, { success: true, skillName, action, results });
   } catch (err) {
     jsonResponse(res, 500, { error: String(err) });

package/dist/electron-entry.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   startGuiServer
-} from "./chunk-NWGRVBSX.js";
+} from "./chunk-VRXNOGLL.js";
 export {
   startGuiServer
 };

package/dist/index.js

@@ -34,7 +34,7 @@ import {
   uninstallAll,
   uninstallSkill,
   updateSkill
-} from "./chunk-NWGRVBSX.js";
+} from "./chunk-VRXNOGLL.js";
 
 // src/cli.ts
 import { Command } from "commander";

package/gui/app.js

@@ -1933,8 +1933,12 @@ const uploadState = {
   skillName: '',
   file: null,
   data: null, // Parsed result from backend
+  tempDir: '', // Temporary directory path from server
 };
 
+/** 上传文件大小限制：50 MB */
+const MAX_UPLOAD_SIZE = 50 * 1024 * 1024;
+
 /** 初始化 Upload 控件 */
 function initializeUploadControls() {
   const dropzone = document.getElementById('upload-dropzone');
@@ -1946,16 +1950,30 @@ function initializeUploadControls() {
   if (!dropzone) return;
 
   // 文件选择
-  selectBtn.addEventListener('click', () => fileInput.click());
+  selectBtn.addEventListener('click', (e) => {
+    e.stopPropagation(); // 防止冒泡到 dropzone 的 click 事件
+    fileInput.click();
+  });
   fileInput.addEventListener('change', (e) => {
     if (e.target.files.length > 0) {
-      uploadState.file = e.target.files[0];
+      const file = e.target.files[0];
+      if (file.size > MAX_UPLOAD_SIZE) {
+        const sizeMB = (file.size / 1024 / 1024).toFixed(1);
+        showToast(`File too large (${sizeMB} MB). Maximum is 50 MB.`, 'error');
+        e.target.value = '';
+        return;
+      }
+      uploadState.file = file;
       submitBtn.disabled = false;
     }
   });
 
-  // 拖拽上传
-  dropzone.addEventListener('click', () => fileInput.click());
+  // 拖拽上传 — 仅处理拖拽事件，点击由 Choose File 按钮或单独点击处理
+  dropzone.addEventListener('click', (e) => {
+    // 如果点击的是内部按钮，不重复触发文件选择（由按钮的 stopPropagation 处理）
+    if (e.target.closest('button')) return;
+    fileInput.click();
+  });
 
   dropzone.addEventListener('dragover', (e) => {
     e.preventDefault();
@@ -1970,7 +1988,13 @@ function initializeUploadControls() {
     e.preventDefault();
     dropzone.classList.remove('drag-over');
     if (e.dataTransfer.files.length > 0) {
-      uploadState.file = e.dataTransfer.files[0];
+      const file = e.dataTransfer.files[0];
+      if (file.size > MAX_UPLOAD_SIZE) {
+        const sizeMB = (file.size / 1024 / 1024).toFixed(1);
+        showToast(`File too large (${sizeMB} MB). Maximum is 50 MB.`, 'error');
+        return;
+      }
+      uploadState.file = file;
       submitBtn.disabled = false;
     }
   });
@@ -1981,6 +2005,12 @@ function initializeUploadControls() {
       showToast(t('upload.errorNoFile'), 'error');
       return;
     }
+    // 文件大小校验
+    if (uploadState.file.size > MAX_UPLOAD_SIZE) {
+      const sizeMB = (uploadState.file.size / 1024 / 1024).toFixed(1);
+      showToast(`File too large (${sizeMB} MB). Maximum is 50 MB.`, 'error');
+      return;
+    }
     // Use skill name override if provided
     const override = skillNameInput.value.trim();
     handleUpload(uploadState.file, override || undefined);
@@ -2007,6 +2037,7 @@ function resetUploadView() {
   uploadState.file = null;
   uploadState.data = null;
   uploadState.skillName = '';
+  uploadState.tempDir = '';
   document.getElementById('upload-phase1').classList.remove('hidden');
   document.getElementById('upload-phase2').classList.add('hidden');
   document.getElementById('upload-submit-btn').disabled = true;
@@ -2068,6 +2099,7 @@ async function handleUpload(file, skillNameOverride) {
 
     uploadState.data = result;
     uploadState.skillName = skillNameOverride || result.skillName;
+    uploadState.tempDir = result.tempDir || '';
 
     // Switch to preview phase
     setTimeout(() => {
@@ -2151,6 +2183,7 @@ async function executeUploadAction(action) {
       body: JSON.stringify({
         skillName: uploadState.skillName,
         action: action,
+        tempDir: uploadState.tempDir,
       }),
     });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "itismyskillmarket",
-  "version": "1.3.38",
+  "version": "1.3.39",
   "description": "Cross-platform skill manager for AI coding tools",
   "type": "module",
   "bin": {