simplemkt-skillctl 0.1.0

package/README.md

@@ -0,0 +1,11 @@
+# simplemkt-skillctl
+
+购买者会在平台订单交付中直接收到一行带个人授权码的命令：
+
+```bash
+npx simplemkt-skillctl install creator-benchmark --license SMKT-你的授权码 --agent codex --scope project
+```
+
+不需要登录网站、输入短信码或打开浏览器。安装器向授权 API 校验命令内的授权码，获得一个只可使用一次、有效期 5 分钟的下载地址，验证 SHA-256 后写入对应 Agent 的 Skill 目录；它不会执行 Skill 内的脚本。
+
+默认 `--agent auto` 写入当前项目的 `.agents/skills`。已知宿主可显式使用 `--agent codex` 或 `--agent claude-code`；任何其他宿主可以用 `--target /你的/Skill/目录` 指定目录。

package/bin.mjs

@@ -0,0 +1,81 @@
+#!/usr/bin/env node
+import crypto from 'node:crypto';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import process from 'node:process';
+import * as tar from 'tar';
+
+const DEFAULT_API = process.env.SMKT_SKILL_API || 'https://api.simplemkt.cc';
+const KNOWN_AGENTS = new Set(['auto', 'generic', 'codex', 'claude-code']);
+
+function usage(message) {
+  if (message) console.error(`Error: ${message}\n`);
+  console.error('Usage: skillctl install <skill-slug> --license <SMKT-...> [--agent auto|codex|claude-code|generic] [--scope project|user] [--target path] [--api URL]');
+  process.exitCode = 1;
+}
+
+function option(name, fallback) {
+  const index = process.argv.indexOf(name);
+  return index === -1 ? fallback : process.argv[index + 1];
+}
+
+function agentDirectory(agent, scope, target) {
+  if (target) return path.resolve(target);
+  const root = scope === 'user' ? os.homedir() : process.cwd();
+  if (agent === 'codex' && scope === 'user') return path.join(root, '.codex', 'skills');
+  if (agent === 'claude-code') return path.join(root, '.claude', 'skills');
+  return path.join(root, '.agents', 'skills');
+}
+
+function shouldExtract(entryPath) {
+  const name = path.posix.basename(entryPath);
+  return name !== '.DS_Store' && !name.startsWith('._');
+}
+
+async function request(api, pathname, init = {}) {
+  const response = await fetch(new URL(pathname, `${api.replace(/\/$/, '')}/`), {
+    ...init,
+    headers: { 'Content-Type': 'application/json', ...(init.headers || {}) },
+  });
+  const payload = response.headers.get('content-type')?.includes('application/json') ? await response.json() : null;
+  if (!response.ok) throw new Error(payload?.error || `Request failed (${response.status})`);
+  return payload;
+}
+
+async function install() {
+  const slug = process.argv[3];
+  const license = option('--license');
+  const agent = option('--agent', option('--host', 'auto'));
+  const scope = option('--scope', 'project');
+  const targetOption = option('--target');
+  const api = option('--api', DEFAULT_API);
+  if (!slug || !license || !KNOWN_AGENTS.has(agent) || !['project', 'user'].includes(scope)) return usage('Missing or invalid install options.');
+
+  const authorization = await request(api, '/v1/install/authorize', {
+    method: 'POST',
+    body: JSON.stringify({ product_slug: slug, license_key: license, agent, scope }),
+  });
+  const archiveResponse = await fetch(new URL(authorization.download_url, `${api.replace(/\/$/, '')}/`));
+  if (!archiveResponse.ok) throw new Error(`Release download failed (${archiveResponse.status})`);
+  const archive = Buffer.from(await archiveResponse.arrayBuffer());
+  const expectedHash = archiveResponse.headers.get('x-simplemkt-sha256');
+  const actualHash = crypto.createHash('sha256').update(archive).digest('hex');
+  if (!expectedHash || expectedHash !== actualHash) throw new Error('Release checksum verification failed');
+
+  const target = agentDirectory(agent, scope, targetOption);
+  const temporaryDirectory = await fs.mkdtemp(path.join(os.tmpdir(), 'simplemkt-skill-'));
+  try {
+    const archivePath = path.join(temporaryDirectory, 'release.tar.gz');
+    await fs.writeFile(archivePath, archive);
+    await fs.mkdir(target, { recursive: true });
+    await tar.x({ file: archivePath, cwd: target, strict: true, filter: shouldExtract });
+  } finally {
+    await fs.rm(temporaryDirectory, { recursive: true, force: true });
+  }
+  console.log(`Installed ${slug} to ${target}`);
+  console.log('Review the installed SKILL.md before allowing the agent to run any referenced script.');
+}
+
+if (process.argv[2] !== 'install') usage();
+else install().catch((error) => { console.error(`Installation failed: ${error.message}`); process.exitCode = 1; });

package/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "simplemkt-skillctl",
+  "version": "0.1.0",
+  "description": "Install licensed SimpleMkt Skills into supported agent hosts.",
+  "type": "module",
+  "bin": {
+    "skillctl": "./bin.mjs"
+  },
+  "files": [
+    "bin.mjs",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "tar": "^7.4.3"
+  }
+}