mcp-osp-prompt 1.0.0

package/dialog/objc.js

@@ -0,0 +1,303 @@
+import os from 'os';
+import { execSync } from 'child_process';
+import { escapeAppleScriptString, cleanAppleScriptString, validateTimeout } from './utils.js';
+// ✅ UNIFIED: 导入统一的按钮管理常量
+import { BASE_DIALOG_BUTTONS, getSafeButtons, validateDialogButtons } from './constants.js';
+
+/**
+ * AppleScriptObjC-based dialog implementation for macOS
+ * Uses NSTextView for true multi-line text input with no external dependencies
+ */
+
+// Default timeout for all dialogs (5 minutes)
+const DEFAULT_TIMEOUT = 300000;
+
+/**
+ * Execute AppleScript using a temporary file to handle multiline scripts properly
+ */
+async function executeAppleScript(script, timeout = DEFAULT_TIMEOUT) {
+  const { writeFileSync, unlinkSync } = await import('fs');
+  const { tmpdir } = await import('os');
+  const path = await import('path');
+  const tempFile = path.join(tmpdir(), `dialog_${Date.now()}_${Math.random().toString(36).substr(2, 9)}.applescript`);
+  
+  try {
+    writeFileSync(tempFile, script, 'utf8');
+    const result = execSync(`osascript "${tempFile}"`, { 
+      encoding: 'utf8', 
+      timeout: validateTimeout(timeout)
+    });
+    unlinkSync(tempFile);
+    return result.trim();
+  } catch (err) {
+    try { unlinkSync(tempFile); } catch {}
+    throw err;
+  }
+}
+
+export async function showInputDialog({ title = '输入', message = '请输入内容:', defaultValue = '' }) {
+  // Handle automated testing mode
+  if (process.env.AUTOMATED_MODE === 'true') {
+    console.log(`🤖 [AUTOMATED] AppleScriptObjC showInputDialog: ${title}, returning: "${defaultValue}"`);
+    return defaultValue;
+  }
+
+  const platform = os.platform();
+  if (platform !== 'darwin') {
+    throw new Error('AppleScriptObjC dialogs are only supported on macOS');
+  }
+
+  try {
+    console.log('✨ [AppleScriptObjC] Showing multi-line capable input dialog...');
+    
+    // For AppleScriptObjC, minimal escaping to avoid syntax errors
+    const safeTitle = title.replace(/"/g, '""');
+    const safeMessage = message.replace(/"/g, '""');
+    const safeDefault = defaultValue.replace(/"/g, '""');
+    
+    // 修复版ObjC实现，确保NSTextView正确初始化
+    const script = `
+use AppleScript version "2.4"
+use scripting additions
+use framework "Foundation"
+use framework "AppKit"
+
+-- Create NSAlert
+set theAlert to current application's NSAlert's alloc()'s init()
+theAlert's setMessageText:"` + safeTitle + `"
+theAlert's setInformativeText:"` + safeMessage + `"
+theAlert's addButtonWithTitle:"确认"
+
+-- Create scroll view with frame
+set theFrame to current application's NSMakeRect(0, 0, 400, 120)
+set scrollView to current application's NSScrollView's alloc()'s initWithFrame:theFrame
+scrollView's setHasVerticalScroller:true
+
+-- Create text view with same frame
+set textView to current application's NSTextView's alloc()'s initWithFrame:theFrame
+textView's setString:"` + safeDefault + `"
+textView's setEditable:true
+textView's setSelectable:true
+textView's setRichText:false
+
+-- Set up the scroll view and text view
+scrollView's setDocumentView:textView
+theAlert's setAccessoryView:scrollView
+
+-- Prepare text view for input by making it the initial first responder
+textView's setEditable:true
+textView's setSelectable:true
+textView's setImportsGraphics:false
+textView's setRichText:false
+
+-- Force application to be active and in front
+set theApp to current application's NSApplication's sharedApplication()
+theApp's activateIgnoringOtherApps:true
+
+-- Show modal dialog first, then handle focus
+set response to theAlert's runModal()
+
+-- After modal dialog closes, textView should have captured any input
+-- No need to manage window focus manually as NSAlert handles this
+
+-- Return result (only one button now)
+set resultText to (textView's string()) as text
+return resultText`;
+    
+    const result = await executeAppleScript(script, DEFAULT_TIMEOUT);
+    return result;
+
+  } catch (err) {
+    // Enhanced error handling with more specific error messages
+    const errorMsg = err.message || 'Unknown error';
+    if (errorMsg.includes('timeout')) {
+      console.warn(`WARNING: AppleScriptObjC input dialog timed out after ${DEFAULT_TIMEOUT/1000} seconds. Returning default value.`);
+    } else if (errorMsg.includes('User canceled')) {
+      console.log(`INFO:  User cancelled AppleScriptObjC input dialog.`);
+    } else {
+      console.warn(`WARNING: AppleScriptObjC input dialog failed: ${errorMsg}. Returning default value.`);
+    }
+    return defaultValue;
+  }
+}
+
+export async function showConfirmDialog({ title = '确认', message = '请选择:', buttons }) {
+  // ✅ UNIFIED: 使用统一的按钮管理系统
+  buttons = getSafeButtons(buttons);
+  console.log('🔧 [BUTTON-UNIFIED] AppleScriptObjC dialog using unified button management:', buttons);
+  
+  if (process.env.AUTOMATED_MODE === 'true') {
+    // ✅ UNIFIED: 验证按钮包含"修改计划"选项，确保统一标准
+    if (!validateDialogButtons(buttons)) {
+      console.warn(`⚠️  [AUTOMATED] AppleScriptObjC dialog missing '修改计划' option:`, buttons);
+    }
+    console.log(`🤖 [AUTOMATED] AppleScriptObjC showConfirmDialog: ${title}, returning: "${buttons[0]}" (buttons: ${JSON.stringify(buttons)})`);
+    return buttons[0];
+  }
+
+  const platform = os.platform();
+  if (platform !== 'darwin') {
+    throw new Error('AppleScriptObjC dialogs are only supported on macOS');
+  }
+
+  try {
+    console.log('✨ [AppleScriptObjC] Showing confirmation dialog...');
+    
+    // Use safe string processing
+    const safeTitle = cleanAppleScriptString(title) || 'Confirmation';
+    const safeMessage = cleanAppleScriptString(message);
+    const safeButtons = buttons.map(b => cleanAppleScriptString(b));
+    
+    const buttonsList = safeButtons.map(b => `"${b}"`).join(', ');
+    const script = `set selectedButton to button returned of (display dialog "${safeMessage}" with title "${safeTitle}" buttons {${buttonsList}} default button "${safeButtons[0]}")`;
+    
+    const result = await executeAppleScript(script, DEFAULT_TIMEOUT);
+    
+    const selectedButton = result.trim();
+    console.log('✅ [AppleScriptObjC] User selected:', selectedButton);
+    
+    // Map clean button back to original button
+    const cleanIndex = safeButtons.indexOf(selectedButton);
+    return cleanIndex >= 0 ? buttons[cleanIndex] : buttons[0];
+
+  } catch (error) {
+    const errorMsg = error.message || 'Unknown error';
+    if (errorMsg.includes('timeout')) {
+      console.warn(`WARNING: AppleScriptObjC confirm dialog timed out after ${DEFAULT_TIMEOUT/1000} seconds. Returning first button.`);
+    } else if (errorMsg.includes('User canceled')) {
+      console.log(`INFO:  User cancelled AppleScriptObjC confirm dialog.`);
+    } else {
+      console.warn(`WARNING: AppleScriptObjC confirm dialog failed: ${errorMsg}. Returning first button.`);
+    }
+    return buttons[0];
+  }
+}
+
+export async function showSelectDialog({ title = '选择', message = '请选择', items = [] }) {
+  if (process.env.AUTOMATED_MODE === 'true') {
+    console.log(`🤖 [AUTOMATED] AppleScriptObjC showSelectDialog: ${title}, returning: "${items[0] || ''}"`);
+    return items[0] || '';
+  }
+
+  const platform = os.platform();
+  if (platform !== 'darwin') {
+    throw new Error('AppleScriptObjC dialogs are only supported on macOS');
+  }
+
+  if (!items.length) return '';
+
+  try {
+    console.log('✨ [AppleScriptObjC] Showing select dialog...');
+    
+    // Use safe string processing
+    const safeTitle = cleanAppleScriptString(title);
+    const safeMessage = cleanAppleScriptString(message);
+    const safeItems = items.map(i => cleanAppleScriptString(i));
+    const listItems = safeItems.map(i => `"${i}"`).join(', ');
+    
+    const script = `set theChoice to choose from list {${listItems}} with title "${safeTitle}" with prompt "${safeMessage}"
+if theChoice is false then
+  return "false"
+else
+  return theChoice as string
+end if`;
+    
+    const result = await executeAppleScript(script, DEFAULT_TIMEOUT);
+    
+    const choice = result.trim();
+    
+    // Map clean choice back to original item
+    if (choice && choice !== 'false') {
+      const cleanIndex = safeItems.indexOf(choice);
+      return cleanIndex >= 0 ? items[cleanIndex] : choice;
+    }
+    
+    return '';
+
+  } catch (error) {
+    const errorMsg = error.message || 'Unknown error';
+    if (errorMsg.includes('timeout')) {
+      console.warn(`WARNING: AppleScriptObjC select dialog timed out after ${DEFAULT_TIMEOUT/1000} seconds.`);
+    } else if (errorMsg.includes('User canceled')) {
+      console.log('INFO:  User cancelled AppleScriptObjC select dialog.');
+    } else {
+      console.warn(`WARNING: AppleScriptObjC select dialog failed: ${errorMsg}.`);
+    }
+    
+    // Enhanced fallback to input dialog
+    console.log('🔄 Falling back to input dialog...');
+    return await showInputDialog({ title, message: `${message}\n输入选项:`, defaultValue: items[0] || '' });
+  }
+}
+
+export async function showPlanAdjustmentDialog({ title = '', message = '', currentPlan = '', options }) {
+  if (!title || !message) {
+    throw new Error('Title and message are required for plan adjustment dialog');
+  }
+
+  // ✅ UNIFIED: 使用统一的按钮管理系统
+  options = getSafeButtons(options);
+  console.log('🔧 [BUTTON-UNIFIED] AppleScriptObjC plan dialog using unified button management:', options);
+
+  if (process.env.AUTOMATED_MODE === 'true') {
+    // ✅ UNIFIED: 验证选项包含"修改计划"选项，确保统一标准
+    if (!validateDialogButtons(options)) {
+      console.warn(`⚠️  [AUTOMATED] AppleScriptObjC plan dialog missing '修改计划' option:`, options);
+    }
+    console.log(`🤖 [AUTOMATED] AppleScriptObjC showPlanAdjustmentDialog: ${title}, returning: "${options[0]}" (options: ${JSON.stringify(options)})`);
+    return options[0]; // Return first option
+  }
+
+  const platform = os.platform();
+  if (platform !== 'darwin') {
+    throw new Error('AppleScriptObjC dialogs are only supported on macOS');
+  }
+
+  // Enhanced message with current plan
+  let fullMessage = message;
+  if (currentPlan) {
+    fullMessage += `\n\n📝 当前计划:\n${currentPlan}`;
+  }
+  
+  try {
+    console.log('✨ [AppleScriptObjC] Showing plan adjustment dialog...');
+    
+    // Use safe string processing
+    const safeTitle = cleanAppleScriptString(title);
+    const safeMessage = escapeAppleScriptString(fullMessage);
+    const safeOptions = options.map(o => cleanAppleScriptString(o));
+    const buttonsList = safeOptions.map(b => `"${b}"`).join(', ');
+    
+    // First show the choice dialog
+    const script = `set selectedButton to button returned of (display dialog "${safeMessage}" with title "${safeTitle}" buttons {${buttonsList}} default button "${safeOptions[0]}")`;
+    const result = await executeAppleScript(script, DEFAULT_TIMEOUT);
+    
+    // If "修改计划" is selected, show input dialog using AppleScriptObjC NSTextView
+    if (result.includes('修改计划')) {
+      const inputValue = await showInputDialog({
+        title: '计划修改建议',
+        message: '请输入您的调整建议：\n\n💡 您可以描述具体的修改需求或建议\n📝 支持多行内容输入',
+        defaultValue: ''
+      });
+      
+      return {
+        action: result,
+        input: inputValue
+      };
+    }
+    
+    // Map safe result back to original option
+    const safeIndex = safeOptions.indexOf(result);
+    return safeIndex >= 0 ? options[safeIndex] : result;
+  } catch (error) {
+    const errorMsg = error.message || 'Unknown error';
+    if (errorMsg.includes('timeout')) {
+      console.warn(`WARNING: AppleScriptObjC plan adjustment dialog timed out after ${DEFAULT_TIMEOUT/1000} seconds. Returning first option.`);
+    } else if (errorMsg.includes('User canceled')) {
+      console.log('INFO:  User cancelled AppleScriptObjC plan adjustment dialog.');
+    } else {
+      console.warn(`WARNING: AppleScriptObjC plan adjustment dialog failed: ${errorMsg}. Returning first option.`);
+    }
+    return options[0];
+  }
+}

package/dialog/utils.js

@@ -0,0 +1,140 @@
+/**
+ * Utilities for safe dialog string handling
+ */
+
+/**
+ * Safely escape strings for AppleScript usage
+ * Enhanced to handle complex special characters including code blocks, multiple quotes, etc.
+ * Handles all special characters that could cause injection or syntax errors
+ */
+export function escapeAppleScriptString(str) {
+  if (typeof str !== 'string') {
+    str = String(str);
+  }
+  
+  // Truncate extremely long strings to prevent AppleScript crashes
+  if (str.length > 32000) {
+    str = str.substring(0, 32000) + '...[内容过长已截断]';
+  }
+  
+  return str
+    // 🎯 **彻底解决方案第1步：移除和转换问题Unicode字符**
+    .replace(/[\u2028\u2029]/g, '\\n')  // Line and paragraph separators
+    
+    // 🔥 **关键修复：处理全角标点符号** - 这些字符经常导致AppleScript语法错误
+    .replace(/：/g, ':')      // 全角冒号 → 半角冒号
+    .replace(/，/g, ',')      // 全角逗号 → 半角逗号  
+    .replace(/。/g, '.')      // 全角句号 → 半角句号
+    .replace(/？/g, '?')      // 全角问号 → 半角问号
+    .replace(/！/g, '!')      // 全角感叹号 → 半角感叹号
+    .replace(/；/g, ';')      // 全角分号 → 半角分号
+    .replace(/（/g, '(')      // 全角左括号 → 半角左括号
+    .replace(/）/g, ')')      // 全角右括号 → 半角右括号
+    .replace(/、/g, ',')      // 顿号 → 逗号
+    
+    // 移除所有emoji和特殊Unicode字符，包括圆圈编号
+    .replace(/[\u{1F600}-\u{1F64F}]|[\u{1F300}-\u{1F5FF}]|[\u{1F680}-\u{1F6FF}]|[\u{1F1E0}-\u{1F1FF}]|[\u{2600}-\u{26FF}]|[\u{2700}-\u{27BF}]/gu, '')
+    // 移除圆圈编号字符 ①②③④⑤⑥⑦⑧⑨⑩ (U+2460-U+2469)
+    .replace(/[\u2460-\u2469]/g, (match) => {
+      const num = match.charCodeAt(0) - 0x2460 + 1;
+      return num + '';  // 转换为普通数字
+    })
+    // 移除其他圆圈/括号编号 (U+2474-U+249B)
+    .replace(/[\u2474-\u249B]/g, (match) => {
+      const code = match.charCodeAt(0);
+      if (code <= 0x247D) { // (1) to (10)
+        const num = code - 0x2474 + 1;
+        return '(' + num + ')';
+      }
+      return '';
+    })
+    // 移除其他装饰性Unicode字符
+    .replace(/[\u{1F900}-\u{1F9FF}]|[\u{2B00}-\u{2BFF}]|[\u{1F200}-\u{1F2FF}]/gu, '')
+    
+    // 🎯 **彻底解决方案第2步：智能引号转换**
+    .replace(/[''`]/g, "'")   // 将智能单引号和反引号转为普通单引号
+    .replace(/[""]/g, '"')    // 将智能双引号转为普通双引号
+    
+    // 🎯 **彻底解决方案第3步：关键字符转义（顺序很重要）**
+    // Step 1: Escape backslashes first to avoid double-escaping
+    .replace(/\\/g, '\\\\')
+    
+    // Step 2: 🔥 **最关键修复**：双引号转义 - AppleScript字符串的核心需求
+    .replace(/"/g, '\\"')
+    
+    // Step 3: 🔥 **单引号处理** - 在shell命令中，单引号会破坏 osascript -e '...' 语法结构
+    // 解决方案：将单引号直接移除，避免shell语法冲突
+    .replace(/'/g, '')  // 直接移除单引号，避免任何shell语法问题
+    
+    // Step 4: 处理换行符和控制字符 - 在osascript -e '...'中必须转义换行符
+    .replace(/\n/g, '\\n')  // 转义换行符为\n，osascript -e需要
+    .replace(/\r/g, '')     // 移除回车符
+    .replace(/\t/g, '  ')   // 制表符转为2个空格
+    
+    // Step 5: 🔥 **AppleScript安全处理** - 移除problematic字符，不需要shell转义
+    // 在osascript -e '...'中，AppleScript字符串在单引号内，shell不会解释内部字符
+    .replace(/\$/g, '$')      // 保持美元符号，在AppleScript字符串中安全
+    .replace(/`/g, '')        // 移除反引号避免问题
+    .replace(/!/g, '!')       // 保持感叹号，在AppleScript字符串中安全
+    .replace(/[()]/g, '')     // 🎯 关键修复：直接移除圆括号避免AppleScript转义问题
+    .replace(/[[\]]/g, '')    // 移除方括号
+    .replace(/[{}]/g, '')     // 移除花括号
+    .replace(/[|]/g, '|')     // 保持管道符，在AppleScript字符串中安全
+    .replace(/[&]/g, '&')     // 保持与号，在AppleScript字符串中安全
+    .replace(/[;]/g, ';')     // 保持分号，在AppleScript字符串中安全
+    .replace(/[<>]/g, '')     // 移除重定向符号
+    .replace(/\*/g, '*')      // 保持星号，在AppleScript字符串中安全
+    .replace(/\?/g, '?')      // 保持问号，在AppleScript字符串中安全
+    
+    // Step 6: 移除其他控制字符
+    .replace(/[\x00-\x08\x0B\x0C\x0E-\x1F]/g, '')
+    
+    // Step 7: 简化markdown格式
+    .replace(/\*\*(.*?)\*\*/g, '$1')  // Remove bold formatting
+    .replace(/\*(.*?)\*/g, '$1')      // Remove italic formatting
+    .replace(/#{1,6}\s*/g, '')        // Remove markdown headers
+    
+    // Step 8: 清理多余空白
+    .replace(/\s+/g, ' ')
+    .trim();
+}
+
+/**
+ * Clean strings for AppleScript by removing problematic characters
+ * Used for titles and UI elements where special characters aren't needed
+ * 
+ * This function now reuses escapeAppleScriptString to avoid code duplication
+ */
+export function cleanAppleScriptString(str) {
+  // Reuse the main escaping logic to avoid code duplication
+  return escapeAppleScriptString(str);
+}
+
+/**
+ * Validate timeout value and return a safe default
+ */
+export function validateTimeout(timeout, defaultTimeout = 300000) {
+  if (typeof timeout !== 'number' || timeout < 1000 || timeout > 600000) {
+    return defaultTimeout; // Default to 5 minutes, max 10 minutes
+  }
+  return timeout;
+}
+
+/**
+ * Create a safe AppleScript execution environment
+ */
+export function createSafeAppleScript(template, variables = {}) {
+  // Validate and escape all variables
+  const safeVars = {};
+  for (const [key, value] of Object.entries(variables)) {
+    safeVars[key] = escapeAppleScriptString(value);
+  }
+  
+  // Replace template variables safely
+  let script = template;
+  for (const [key, value] of Object.entries(safeVars)) {
+    script = script.replace(new RegExp(`\\$\\{${key}\\}`, 'g'), value);
+  }
+  
+  return script;
+}

package/fetcher.js

@@ -0,0 +1,56 @@
+// fetcher.js - prompt获取接口层
+import { getPrompt as getPromptFromManager, getLocalPromptInfo as getVersionFromManager, getLocalPromptInfo } from './prompt-manager.js';
+import { detectPlatformFromPath, parseRemotePath, validatePlatformConfiguration } from './platform-utils.js';
+
+// 主要接口：获取prompt内容
+export async function getPrompt(fileName) {
+  return await getPromptFromManager(fileName);
+}
+
+// 批量获取prompts（优化功能）
+export async function getPrompts(fileNames) {
+  const promises = fileNames.map(fileName => getPrompt(fileName));
+  return await Promise.all(promises);
+}
+
+// 检查prompt是否可用
+export async function isPromptAvailable(fileName) {
+  try {
+    const content = await getPrompt(fileName);
+    return content && content.length > 0;
+  } catch (error) {
+    return false;
+  }
+}
+
+// 获取当前配置的平台类型
+export function getCurrentPlatform() {
+  const promptPath = process.env.PROMPT_PATH;
+  return detectPlatformFromPath(promptPath);
+}
+
+// 获取平台配置信息
+export function getPlatformInfo() {
+  const promptPath = process.env.PROMPT_PATH;
+  const platform = detectPlatformFromPath(promptPath);
+  
+  if (platform === 'local') {
+    return { platform, path: promptPath };
+  }
+  
+  try {
+    return { platform, ...parseRemotePath(promptPath) };
+  } catch (error) {
+    return { platform, error: error.message };
+  }
+}
+
+// 验证当前配置
+export function validateCurrentConfiguration() {
+  try {
+    const platform = validatePlatformConfiguration(process.env.RESOURCE_PATH, process.env.GIT_TOKEN);
+    return { valid: true, platform };
+  } catch (error) {
+    return { valid: false, error: error.message };
+  }
+}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "mcp-osp-prompt",
+  "version": "1.0.0",
+  "description": "MCP server for fetching and caching prompt templates from GitHub, GitLab, or local directories",
+  "main": "server.js",
+  "bin": {
+    "mcp-prompt-fetcher": "./server.js"
+  },
+  "type": "module",
+  "author": "OSP Team",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/mcp-tools/mcp-prompt-fetcher.git"
+  },
+  "homepage": "https://github.com/mcp-tools/mcp-prompt-fetcher#readme",
+  "bugs": {
+    "url": "https://github.com/mcp-tools/mcp-prompt-fetcher/issues"
+  },
+  "keywords": [
+    "mcp",
+    "prompt",
+    "github",
+    "gitlab",
+    "cursor",
+    "ide",
+    "ai",
+    "development",
+    "automation"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "*.js",
+    "dialog/*",
+    "README.md"
+  ],
+  "dependencies": {
+    "open": "^9.0.0"
+  },
+  "scripts": {
+    "test": "node test.js",
+    "test:all": "node test.js && node tests/test-simplified-config.js && node tests/test-code-deduplication.js",
+    "prepublishOnly": "npm run test:all && npm run audit:security",
+    "publish:dry": "npm pack --dry-run",
+    "audit:security": "node tests/test-security-audit.js"
+  }
+}