promptgraph-mcp 2.4.0 → 2.4.2

package/github-import.js

@@ -4,7 +4,8 @@ import fs from 'fs';
 import https from 'https';
 import { globSync } from 'glob';
 import { indexAll, indexSource } from './indexer.js';
-import { loadConfig, saveConfig, SKILLS_STORE_DIR } from './config.js';
+import { loadConfig, saveConfig, PROMPTGRAPH_DIR, SKILLS_STORE_DIR } from './config.js';
+import { validateSkill } from './validator.js';
 
 const SKILL_DIRS = ['skills', 'commands', 'prompts', 'agents', 'skills-store', 'slash-commands', 'custom-commands', 'templates'];
 
@@ -33,6 +34,58 @@ function repoExists(ownerRepo) {
   });
 }
 
+// Validate all .md files in a repo's skills subdir against validateSkill().
+// Returns { ok, errors[], warnings[] }.
+export async function validateRepoSkills(ownerRepo) {
+  const errors = [];
+  const warnings = [];
+
+  const detected = await detectSkillsDirFromAPI(ownerRepo);
+  if (!detected) {
+    return { ok: false, errors: [`No skills directory found in ${ownerRepo}`], warnings: [] };
+  }
+
+  const subdir = detected.subdir;
+  const listUrl = `https://api.github.com/repos/${ownerRepo}/contents/${subdir}`;
+  let entries;
+  try {
+    const json = await httpsGet(listUrl);
+    entries = JSON.parse(json);
+  } catch (e) {
+    return { ok: false, errors: [`Failed to list ${subdir}/ contents: ${e.message}`], warnings: [] };
+  }
+
+  const mdFiles = entries.filter(e => e.type === 'file' && e.name.endsWith('.md'));
+  if (mdFiles.length === 0) {
+    return { ok: false, errors: [`No .md files found in ${subdir}/`], warnings: [] };
+  }
+
+  const tmpDir = path.join(PROMPTGRAPH_DIR, '.validate-tmp');
+  fs.mkdirSync(tmpDir, { recursive: true });
+
+  for (const file of mdFiles) {
+    try {
+      const content = await httpsGet(file.download_url);
+      const tmpPath = path.join(tmpDir, file.name);
+      fs.writeFileSync(tmpPath, content);
+      const result = validateSkill(tmpPath);
+      if (!result.ok) {
+        errors.push(`${file.name}: ${result.errors.join('; ')}`);
+      }
+      if (result.warnings?.length) {
+        warnings.push(...result.warnings.map(w => `${file.name}: ${w}`));
+      }
+      fs.unlinkSync(tmpPath);
+    } catch (e) {
+      errors.push(`${file.name}: failed to validate — ${e.message}`);
+    }
+  }
+
+  try { fs.rmSync(tmpDir, { recursive: true, force: true }); } catch {}
+
+  return { ok: errors.length === 0, errors, warnings };
+}
+
 // Ask GitHub API which subdir to use (without cloning anything). Exported for validation.
 export
 // Returns { subdir, label } or null (use root).

package/marketplace.js

@@ -5,9 +5,10 @@ import { createHash } from 'crypto';
 import { spawnSync } from 'child_process';
 import { createRequire } from 'module';
 import { getDb } from './db.js';
+import { globSync } from 'glob';
 import { validateSkill, validateBundle } from './validator.js';
 import { loadConfig, saveConfig, PROMPTGRAPH_DIR, SKILLS_STORE_DIR } from './config.js';
-import { importFromGitHub } from './github-import.js';
+import { importFromGitHub, validateRepoSkills } from './github-import.js';
 
 const REGISTRY_URL = 'https://raw.githubusercontent.com/NeiP4n/promptgraph-registry/main/registry.json';
 const SKILLS_DIR = path.join(SKILLS_STORE_DIR, 'marketplace');
@@ -316,6 +317,19 @@ export async function publishBundle(bundleDef) {
     return { error: 'Bundle validation failed', issues: validation.errors, warnings: validation.warnings };
   }
 
+  // Validate repo skills content if repo_url is set
+  if (def.repo_url) {
+    const ownerRepo = def.repo_url.replace(/^https?:\/\/github\.com\//, '').replace(/\.git$/, '');
+    const repoValidation = await validateRepoSkills(ownerRepo);
+    if (!repoValidation.ok) {
+      return {
+        error: 'Repo skills validation failed',
+        issues: repoValidation.errors,
+        warnings: repoValidation.warnings,
+      };
+    }
+  }
+
   const bundleJson = JSON.stringify(def, null, 2);
   const tmpFile = path.join(PROMPTGRAPH_DIR, `bundle-${def.id}.json`);
   fs.mkdirSync(PROMPTGRAPH_DIR, { recursive: true });
@@ -385,3 +399,53 @@ export function recordFail(skillId) {
     ON CONFLICT(skill_id) DO UPDATE SET fail = fail + 1
   `).run(skillId);
 }
+
+// Scan all imported repos, validate their .md files, and remove repos that fail.
+// Returns { removed: string[], kept: string[], errors: string[] }.
+export function pruneInvalidRepos() {
+  const config = loadConfig();
+  const removed = [];
+  const kept = [];
+  const errors = [];
+
+  const repoSources = config.sources.filter(s => s.source?.startsWith('github:'));
+  if (repoSources.length === 0) {
+    return { removed, kept, errors: [], message: 'No imported repos found.' };
+  }
+
+  for (const src of repoSources) {
+    const repoName = src.source.replace('github:', '');
+    if (!fs.existsSync(src.dir)) {
+      removed.push({ repo: repoName, reason: 'directory not found' });
+      config.sources = config.sources.filter(s => s !== src);
+      continue;
+    }
+
+    const mdFiles = globSync(`${src.dir}/**/*.md`);
+    if (mdFiles.length === 0) {
+      removed.push({ repo: repoName, reason: 'no .md files' });
+      config.sources = config.sources.filter(s => s !== src);
+      try { fs.rmSync(src.dir, { recursive: true, force: true }); } catch {}
+      continue;
+    }
+
+    const invalid = [];
+    for (const fp of mdFiles) {
+      const v = validateSkill(fp);
+      if (!v.ok) {
+        invalid.push({ file: path.relative(src.dir, fp), errors: v.errors });
+      }
+    }
+
+    if (invalid.length > 0) {
+      removed.push({ repo: repoName, reason: `${invalid.length}/${mdFiles.length} .md files failed validation`, invalid });
+      config.sources = config.sources.filter(s => s !== src);
+      try { fs.rmSync(src.dir, { recursive: true, force: true }); } catch (e) { errors.push(`Failed to remove ${src.dir}: ${e.message}`); }
+    } else {
+      kept.push(repoName);
+    }
+  }
+
+  saveConfig(config);
+  return { removed, kept, errors };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "promptgraph-mcp",
-  "version": "2.4.0",
+  "version": "2.4.2",
   "main": "index.js",
   "type": "module",
   "bin": {
@@ -51,4 +51,4 @@
     "tar": "^6.2.1",
     "js-yaml": "^4.1.0"
   }
-}
+}