xhs-minitool-creator 1.0.0

package/src/skill.mjs

@@ -0,0 +1,188 @@
+/**
+ * 官方打包规范 Skill（minitool-zip-builder）的版本查看与手动更新
+ *
+ * 重要限制：经实测，官方 CDN（fe-static.xhscdn.com）**没有稳定的 latest 端点**，
+ * 下载 URL 形如：
+ *   https://fe-static.xhscdn.com/mini-tool/<时间戳>/minitool-zip-builder-<版本>.skill
+ * 其中时间戳不可预测，因此**无法自动发现新版本**，只能由用户从官方文档取得
+ * 最新 URL 后手动更新。本模块对此不作伪装，如实告知。
+ *
+ * 官方 Skill 权威下载地址：https://fe-static.xhscdn.com/mini-tool/
+ */
+import { existsSync, readFileSync, rmSync, writeFileSync, mkdirSync, readdirSync, statSync } from 'node:fs';
+import { join, dirname, relative, resolve } from 'node:path';
+import { execFileSync } from 'node:child_process';
+import { tmpdir } from 'node:os';
+
+export const SKILL_DIR_NAME = 'minitool-zip-builder';
+export const DEFAULT_SKILL_PATH = '.agents/skills/minitool-zip-builder';
+
+/** 超过该天数提示用户去官方文档核对版本 */
+const STALE_DAYS = 90;
+
+function readSkillVersion(skillDir) {
+  const skillPath = join(skillDir, 'SKILL.md');
+  if (!existsSync(skillPath)) return null;
+  const text = readFileSync(skillPath, 'utf8');
+  const m = text.match(/^\s*version:\s*["']?([0-9][0-9.]*)["']?\s*$/m);
+  return m ? m[1] : null;
+}
+
+function walk(dir) {
+  const out = [];
+  for (const name of readdirSync(dir)) {
+    const p = join(dir, name);
+    if (statSync(p).isDirectory()) out.push(...walk(p));
+    else out.push(p);
+  }
+  return out;
+}
+
+/**
+ * 查看项目内 Skill 版本
+ * @param {string} cwd
+ */
+export function skillInfo(cwd = process.cwd()) {
+  const dir = resolve(cwd);
+  const skillDir = join(dir, DEFAULT_SKILL_PATH);
+
+  if (!existsSync(skillDir)) {
+    return {
+      found: false,
+      path: DEFAULT_SKILL_PATH,
+      message: `未找到官方 Skill（期望路径 ${DEFAULT_SKILL_PATH}）`,
+    };
+  }
+
+  const version = readSkillVersion(skillDir);
+  const files = walk(skillDir).map((f) => relative(skillDir, f).split('\\').join('/'));
+
+  let mtime = null;
+  try {
+    const st = statSync(join(skillDir, 'SKILL.md'));
+    mtime = st.mtime;
+  } catch { /* ignore */ }
+
+  const ageDays = mtime ? Math.floor((Date.now() - mtime.getTime()) / 86400000) : null;
+
+  return {
+    found: true,
+    version,
+    path: DEFAULT_SKILL_PATH,
+    files,
+    lastModified: mtime,
+    ageDays,
+    stale: ageDays !== null && ageDays > STALE_DAYS,
+  };
+}
+
+export function printSkillInfo(cwd = process.cwd()) {
+  const info = skillInfo(cwd);
+  if (!info.found) {
+    console.log(`\n${info.message}`);
+    return info;
+  }
+
+  console.log('\n官方打包规范 Skill');
+  console.log(`  路径     : ${info.path}`);
+  console.log(`  版本     : ${info.version || '(未标注)'}`);
+  console.log(`  文件数   : ${info.files.length}`);
+  if (info.lastModified) {
+    console.log(`  同步时间 : ${info.lastModified.toISOString().slice(0, 10)}（${info.ageDays} 天前）`);
+  }
+
+  console.log('\n  reference 文档：');
+  for (const f of info.files.filter((f) => f.startsWith('references/')).sort()) {
+    console.log(`    · ${f}`);
+  }
+  const scripts = info.files.filter((f) => f.startsWith('scripts/'));
+  if (scripts.length) {
+    console.log('  审计脚本：');
+    for (const f of scripts.sort()) console.log(`    · ${f}`);
+  }
+
+  if (info.stale) {
+    console.log(`\n  ⚠ 距上次同步已 ${info.ageDays} 天，建议去官方文档核对是否有新版本。`);
+  }
+
+  console.log('\n  说明：官方 CDN 无稳定的 latest 端点，无法自动发现新版本。');
+  console.log('  更新方式：从官方文档取得最新 .skill 地址后执行');
+  console.log('    xhs-minitool-creator skill update --url <地址>');
+  return info;
+}
+
+/**
+ * 从官方 CDN 下载并覆盖项目内的 Skill
+ * @param {string} url .skill 文件地址
+ * @param {string} cwd
+ */
+export function skillUpdate(url, cwd = process.cwd()) {
+  const dir = resolve(cwd);
+  const target = join(dir, DEFAULT_SKILL_PATH);
+
+  if (!url || !/^https?:\/\//i.test(url)) {
+    throw new Error('请提供有效的 .skill 地址，例如 --url https://fe-static.xhscdn.com/mini-tool/<时间戳>/minitool-zip-builder-<版本>.skill');
+  }
+
+  const workDir = join(tmpdir(), `xmc-skill-${Date.now()}`);
+  const dlPath = join(workDir, 'skill.zip');
+  mkdirSync(workDir, { recursive: true });
+
+  console.log(`\n▸ 下载 ${url}`);
+  try {
+    execFileSync('curl', ['-sSL', '--fail', '-o', dlPath, url], { stdio: 'inherit' });
+  } catch {
+    rmSync(workDir, { recursive: true, force: true });
+    throw new Error('下载失败：请确认地址有效且网络可访问');
+  }
+
+  console.log('▸ 解压');
+  try {
+    // 优先用系统 unzip；不可用时回退到 Python
+    try {
+      execFileSync('unzip', ['-o', '-q', dlPath, '-d', workDir], { stdio: 'pipe' });
+    } catch {
+      execFileSync('python3', [
+        '-c',
+        `import zipfile;zipfile.ZipFile(${JSON.stringify(dlPath)}).extractall(${JSON.stringify(workDir)})`,
+      ], { stdio: 'pipe' });
+    }
+  } catch {
+    rmSync(workDir, { recursive: true, force: true });
+    throw new Error('解压失败：需要 unzip 或 python3');
+  }
+
+  // 定位解压出的 skill 目录
+  let src = join(workDir, SKILL_DIR_NAME);
+  if (!existsSync(src)) {
+    for (const name of readdirSync(workDir)) {
+      const p = join(workDir, name);
+      if (statSync(p).isDirectory() && existsSync(join(p, 'SKILL.md'))) {
+        src = p;
+        break;
+      }
+    }
+  }
+
+  const newVersion = readSkillVersion(src);
+  if (!newVersion) {
+    rmSync(workDir, { recursive: true, force: true });
+    throw new Error('下载内容中未找到有效的 SKILL.md，请确认地址指向官方 .skill 包');
+  }
+
+  const oldVersion = readSkillVersion(target);
+  console.log(`▸ 更新 ${oldVersion || '(无)'} → ${newVersion}`);
+
+  rmSync(target, { recursive: true, force: true });
+  mkdirSync(target, { recursive: true });
+  for (const file of walk(src)) {
+    const rel = relative(src, file);
+    const dest = join(target, rel);
+    mkdirSync(dirname(dest), { recursive: true });
+    writeFileSync(dest, readFileSync(file));
+  }
+
+  rmSync(workDir, { recursive: true, force: true });
+  console.log(`\n✓ 已更新到 v${newVersion}`);
+  return { from: oldVersion, to: newVersion };
+}

package/src/validate.mjs

@@ -0,0 +1,347 @@
+/**
+ * 小工具静态合规校验（纯 Node，零依赖，不依赖 Python）
+ *
+ * 规则基线：官方 Skill minitool-zip-builder v1.6.0
+ *  - zip-artifact-spec.md  目录结构 / 文件类型 / CSP / 路径 / 自检
+ *  - device-capabilities.md 可用与禁用能力
+ *  - js-compatibility.md   Chrome 61 / ES2017 基线
+ *  - performance-budget.md 体积门禁（10 MiB 硬上限）
+ *
+ * 注意：静态检查无法替代真机验证。未实测时应在交付说明中标注。
+ */
+import { readdirSync, readFileSync, statSync, existsSync } from 'node:fs';
+import { extname, join, relative, resolve, dirname } from 'node:path';
+
+export const ALLOWED_EXT = new Set([
+  '.html', '.css', '.js',
+  '.png', '.jpg', '.jpeg', '.gif', '.webp', '.svg',
+  '.woff', '.woff2', '.json',
+]);
+
+const HARD_ZIP_LIMIT = 10 * 1024 * 1024; // 10 MiB 上传硬上限
+const SUGGEST_ZIP_LIMIT = 2 * 1024 * 1024; // 2 MiB 建议值
+const BASE64_LIMIT = 1024 * 1024; // 单条 Base64 解码后 1 MiB
+const BASE64_WARN = 100 * 1024; // 超过 100 KiB 提示风险
+const SINGLE_TEXT_WARN = 2 * 1024 * 1024; // 单个文本文件 > 2 MiB 提示
+const TOTAL_TEXT_WARN = 5 * 1024 * 1024; // 文本合计 > 5 MiB 提示
+
+/** 被禁能力：命中即 ERROR */
+const FORBIDDEN_PATTERNS = [
+  // 网络
+  { re: /\bfetch\s*\(/g, name: 'fetch()', tip: '容器禁网，数据改打包 .json 或写进 JS 常量' },
+  { re: /\bnew\s+XMLHttpRequest\b/g, name: 'XMLHttpRequest', tip: '移除' },
+  { re: /\bnew\s+WebSocket\s*\(/g, name: 'WebSocket', tip: '移除，无轮询替代' },
+  { re: /\bnew\s+EventSource\s*\(/g, name: 'EventSource', tip: '移除' },
+  { re: /\bnew\s+RTCPeerConnection\s*\(/g, name: 'RTCPeerConnection', tip: '移除' },
+  { re: /navigator\.sendBeacon/g, name: 'sendBeacon', tip: '移除' },
+  // 动态代码
+  { re: /\beval\s*\(/g, name: 'eval()', tip: '改写为静态逻辑' },
+  { re: /\bnew\s+Function\s*\(/g, name: 'new Function()', tip: '改写为静态逻辑' },
+  { re: /\bWebAssembly\b/g, name: 'WebAssembly', tip: '移除或改纯 JS 实现' },
+  // 后台
+  { re: /\bnew\s+Worker\s*\(/g, name: 'Worker', tip: '逻辑放主线程' },
+  { re: /\bnew\s+SharedWorker\s*\(/g, name: 'SharedWorker', tip: '移除' },
+  { re: /serviceWorker\s*\./g, name: 'Service Worker', tip: '移除' },
+  { re: /\bSharedArrayBuffer\b/g, name: 'SharedArrayBuffer', tip: '移除' },
+  // 定位 / 硬件 / 传感器 / 剪贴板
+  { re: /navigator\.geolocation/g, name: 'geolocation', tip: '移除' },
+  { re: /navigator\.clipboard/g, name: 'clipboard', tip: '改为展示可选中文本引导长按复制' },
+  { re: /execCommand\s*\(\s*['"](copy|cut|paste)/g, name: 'execCommand(copy)', tip: '移除' },
+  { re: /navigator\.(bluetooth|usb|hid|serial)\b/g, name: '硬件连接 API', tip: '移除' },
+  { re: /\bnew\s+(Accelerometer|Gyroscope|Magnetometer)\s*\(/g, name: '传感器', tip: '改用触摸手势' },
+  { re: /\bDevice(Motion|Orientation)Event\b/g, name: '设备传感器事件', tip: '移除' },
+  { re: /navigator\.(getBattery|connection|locks)\b/g, name: '设备信息 / 锁', tip: '移除' },
+  { re: /navigator\.credentials/g, name: 'WebAuthn', tip: '移除' },
+  { re: /navigator\.storage\.persist/g, name: 'storage.persist', tip: '移除' },
+  { re: /mediaDevices\.enumerateDevices/g, name: 'enumerateDevices', tip: '移除' },
+  { re: /getDisplayMedia/g, name: 'getDisplayMedia', tip: '移除' },
+  // 窗口
+  { re: /window\.open\s*\(/g, name: 'window.open', tip: '改为单页内视图切换' },
+  { re: /window\.prompt\s*\(/g, name: 'window.prompt', tip: '改页内 Modal' },
+  { re: /requestFullscreen|webkitRequestFullscreen/g, name: 'requestFullscreen', tip: '用 CSS 沉浸式布局' },
+  { re: /\bPaymentRequest\b/g, name: 'PaymentRequest', tip: '移除' },
+];
+
+/** HTML 层面的违规：命中即 ERROR */
+const HTML_PATTERNS = [
+  { re: /<script(?![^>]*\bsrc=)[^>]*>[\s\S]*?<\/script>/gi, name: '内联 <script>', tip: '提取为包内 .js，用 <script src> 引入' },
+  { re: /\son(click|error|load|change|input|submit|focus|blur|mouse\w+|touch\w+|key\w+)\s*=/gi, name: '行内事件属性 (onclick 等)', tip: '改用 addEventListener' },
+  { re: /<script[^>]*\stype\s*=\s*["']module["']/gi, name: '<script type="module">', tip: '改为经典脚本（module 在离线 zip 下解析不可靠）' },
+  { re: /<iframe\b/gi, name: '<iframe>', tip: '内容直接写进页面' },
+  { re: /<object\b/gi, name: '<object>', tip: '移除' },
+  { re: /<base\s+href/gi, name: '<base href>', tip: '删除，会破坏真机路径' },
+  { re: /<a[^>]*\starget\s*=\s*["']_blank["']/gi, name: 'target="_blank"', tip: '移除' },
+  { re: /<a[^>]*\sdownload\b/gi, name: 'a[download]', tip: '移除' },
+  { re: /<form[^>]*>/gi, name: '<form>', tip: '需 preventDefault 后用 JS 处理，不得提交跳转' },
+  { re: /(?:src|href)\s*=\s*["']https?:\/\//gi, name: '外部 http(s) 资源引用', tip: '下载后打进 zip 改相对路径' },
+  { re: /<meta[^>]+http-equiv\s*=\s*["']Content-Security-Policy/gi, name: '自建 CSP meta', tip: '安全策略由容器统一管理，删除' },
+];
+
+/** JS 中的 module 语法：命中即 ERROR */
+const JS_MODULE_PATTERNS = [
+  { re: /(^|\n)\s*import\s+[^;\n]*from\s+['"][^'"]+['"]/g, name: 'import 语句', tip: '产物须为经典脚本，改用构建链打包' },
+  { re: /(^|\n)\s*import\s*\(/g, name: '动态 import()', tip: '移除' },
+  { re: /(^|\n)\s*export\s+(default|const|let|var|function|class|\{)/g, name: 'export 语句', tip: '产物须为经典脚本' },
+];
+
+function walk(dir) {
+  const out = [];
+  for (const name of readdirSync(dir)) {
+    const p = join(dir, name);
+    if (statSync(p).isDirectory()) out.push(...walk(p));
+    else out.push(p);
+  }
+  return out;
+}
+
+function lineOf(text, index) {
+  return text.slice(0, index).split('\n').length;
+}
+
+function scanPatterns(text, file, patterns, issues) {
+  for (const { re, name, tip } of patterns) {
+    re.lastIndex = 0;
+    let m;
+    let count = 0;
+    let firstLine = 0;
+    while ((m = re.exec(text)) !== null) {
+      count += 1;
+      if (count === 1) firstLine = lineOf(text, m.index);
+      if (m.index === re.lastIndex) re.lastIndex += 1;
+      if (count > 20) break;
+    }
+    if (count) {
+      issues.push({
+        level: 'ERROR',
+        file,
+        line: firstLine,
+        rule: name,
+        message: `出现 ${count} 处：${tip}`,
+      });
+    }
+  }
+}
+
+/**
+ * 校验产物目录
+ * @param {string} outDir 构建产物目录（含 index.html）
+ * @param {{ strict?: boolean }} [options] strict 为 true 时 WARNING 也视为失败
+ * @returns {{ code: number, errors: object[], warnings: object[], summary: object }}
+ */
+export function validateDir(outDir, options = {}) {
+  const dir = resolve(outDir);
+  const issues = [];
+  const info = { files: 0, bytes: 0, textBytes: 0 };
+
+  if (!existsSync(dir)) {
+    return {
+      code: 1,
+      errors: [{ level: 'ERROR', file: '-', rule: '目录不存在', message: `缺少目录 ${dir}，请先执行构建` }],
+      warnings: [],
+      summary: { files: 0, bytes: 0 },
+    };
+  }
+
+  const indexPath = join(dir, 'index.html');
+  if (!existsSync(indexPath)) {
+    issues.push({
+      level: 'ERROR', file: 'index.html', rule: '缺少入口',
+      message: 'zip 根目录必须有 index.html',
+    });
+  }
+
+  const files = walk(dir);
+
+  for (const file of files) {
+    const rel = relative(dir, file).split('\\').join('/');
+    const size = statSync(file).size;
+    info.files += 1;
+    info.bytes += size;
+
+    const ext = extname(file).toLowerCase();
+
+    // 文件类型白名单
+    if (!ALLOWED_EXT.has(ext)) {
+      issues.push({
+        level: 'ERROR', file: rel, rule: '不支持的文件类型',
+        message: `${ext} 不在白名单内，交付前会被移除`,
+      });
+      continue;
+    }
+
+    // 禁止的垃圾文件
+    if (rel.includes('node_modules') || ext === '.map') {
+      issues.push({
+        level: 'ERROR', file: rel, rule: '禁止文件',
+        message: '不得包含 node_modules / source map',
+      });
+    }
+
+    if (ext === '.html') {
+      const text = readFileSync(file, 'utf8');
+      scanPatterns(text, rel, HTML_PATTERNS, issues);
+
+      // 本地引用的资源必须真实存在（防止构建后仍引用未打包的源文件）
+      const baseDir = dirname(rel) === '.' ? dir : join(dir, dirname(rel));
+      const seen = new Set();
+      const refRe = /(?:src|href)\s*=\s*["'](\.\.?\/[^"'#?]+)["']/gi;
+      let rm;
+      while ((rm = refRe.exec(text)) !== null) {
+        const ref = rm[1].split('/').filter((s) => s && s !== '.').join('/');
+        if (seen.has(ref)) continue;
+        seen.add(ref);
+        if (!existsSync(join(baseDir, ref))) {
+          issues.push({
+            level: 'ERROR', file: rel, rule: '引用文件缺失',
+            message: `引用了不存在的文件 ./${ref}（构建是否遗漏？），容器中会加载失败`,
+          });
+        }
+      }
+
+      if (!/viewport-fit\s*=\s*cover/i.test(text)) {
+        issues.push({
+          level: 'WARNING', file: rel, rule: 'viewport 缺 viewport-fit=cover',
+          message: '安全区需要配合 viewport-fit=cover',
+        });
+      }
+      if (!/<meta\s+charset=/i.test(text)) {
+        issues.push({ level: 'WARNING', file: rel, rule: '缺 charset', message: '建议声明 UTF-8' });
+      }
+    }
+
+    if (ext === '.js') {
+      const text = readFileSync(file, 'utf8');
+      info.textBytes += size;
+      scanPatterns(text, rel, JS_MODULE_PATTERNS, issues);
+      scanPatterns(text, rel, FORBIDDEN_PATTERNS, issues);
+
+      // ES2018+ 语法探测（Chrome 61 不支持，属硬失败）
+      if (/\?\?[^?]/.test(text) || /\?\?=?\s/.test(text)) {
+        issues.push({
+          level: 'ERROR', file: rel, rule: '空值合并 ?? (ES2020)',
+          message: 'Chrome 61 不支持，会解析失败导致白屏；设置 build.target 为 es2017/chrome61',
+        });
+      }
+      if (/\?\.[a-zA-Z_$[(]/.test(text) && !/\?\.\d/.test(text)) {
+        issues.push({
+          level: 'ERROR', file: rel, rule: '可选链 ?. (ES2020)',
+          message: 'Chrome 61 不支持；设置 build.target 为 es2017/chrome61',
+        });
+      }
+      if (/(^|[^.\w])\.\.\.[a-zA-Z_$[{]/m.test(text) && /\?\?/.test(text) === false) {
+        // 对象 spread 误报率高，仅提示
+        issues.push({
+          level: 'WARNING', file: rel, rule: '疑似对象展开 ... (ES2018)',
+          message: '若命中需由构建链转译到 ES2017',
+        });
+      }
+
+      // 大 Base64 检测
+      const b64 = text.match(/["']data:[^"';\s]+;base64,[A-Za-z0-9+/=]+["']/g);
+      if (b64) {
+        for (const b of b64) {
+          const payloadLen = b.length - b.indexOf(',') - 2;
+          const decoded = Math.floor((payloadLen * 3) / 4);
+          if (decoded > BASE64_LIMIT) {
+            issues.push({
+              level: 'ERROR', file: rel, rule: '大 Base64',
+              message: `单条解码后约 ${(decoded / 1024 / 1024).toFixed(2)} MiB，超过 1 MiB 上限，须改为独立包内文件`,
+            });
+          } else if (decoded > BASE64_WARN) {
+            issues.push({
+              level: 'WARNING', file: rel, rule: '较大 Base64',
+              message: `单条解码后约 ${(decoded / 1024).toFixed(0)} KiB，建议改为独立包内文件`,
+            });
+          }
+        }
+      }
+    }
+
+    if (ext === '.css') {
+      const text = readFileSync(file, 'utf8');
+      info.textBytes += size;
+      const cssUrls = text.match(/url\(\s*['"]?https?:\/\/[^)]*\)/gi);
+      if (cssUrls) {
+        issues.push({
+          level: 'ERROR', file: rel, rule: 'CSS 外部资源',
+          message: `出现 ${cssUrls.length} 处 url(http...)，须下载后打进包内`,
+        });
+      }
+    }
+
+    if (ext === '.json') info.textBytes += size;
+
+    // 单个文本过大
+    if (['.html', '.css', '.js', '.json'].includes(ext) && size > SINGLE_TEXT_WARN) {
+      issues.push({
+        level: 'WARNING', file: rel, rule: '单个文本文件过大',
+        message: `${(size / 1024 / 1024).toFixed(2)} MiB 超过 2 MiB，请确认未塞入大型数据集`,
+      });
+    }
+  }
+
+  // 文本合计
+  if (info.textBytes > TOTAL_TEXT_WARN) {
+    issues.push({
+      level: 'WARNING', file: '-', rule: '文本文件合计过大',
+      message: `${(info.textBytes / 1024 / 1024).toFixed(2)} MiB 超过 5 MiB，请确认未塞入大型数据集`,
+    });
+  }
+
+  // 总体积（目录口径，zip 会略小）
+  if (info.bytes > HARD_ZIP_LIMIT) {
+    issues.push({
+      level: 'ERROR', file: '-', rule: '总体积超硬上限',
+      message: `${(info.bytes / 1024 / 1024).toFixed(2)} MiB 超过 10 MiB 上传硬上限`,
+    });
+  } else if (info.bytes > SUGGEST_ZIP_LIMIT) {
+    issues.push({
+      level: 'WARNING', file: '-', rule: '总体积超建议值',
+      message: `${(info.bytes / 1024 / 1024).toFixed(2)} MiB 超过建议的 2 MiB，建议优化图片/媒体`,
+    });
+  }
+
+  const errors = issues.filter((i) => i.level === 'ERROR');
+  const warnings = issues.filter((i) => i.level === 'WARNING');
+  const strict = options.strict !== false;
+  const code = errors.length ? 1 : strict && warnings.length ? 2 : 0;
+
+  return { code, errors, warnings, summary: { files: info.files, bytes: info.bytes } };
+}
+
+/** 校验已打好的 zip 文件 */
+export function validateZip(zipPath, zipBytes, options = {}) {
+  const issues = [];
+  const size = zipBytes.length;
+
+  if (size > HARD_ZIP_LIMIT) {
+    issues.push({
+      level: 'ERROR', file: zipPath, rule: 'zip 超硬上限',
+      message: `${(size / 1024 / 1024).toFixed(2)} MiB 超过 10 MiB 上传硬上限，无法上传`,
+    });
+  } else if (size > SUGGEST_ZIP_LIMIT) {
+    issues.push({
+      level: 'WARNING', file: zipPath, rule: 'zip 超建议值',
+      message: `${(size / 1024 / 1024).toFixed(2)} MiB 超过建议的 2 MiB`,
+    });
+  }
+
+  const errors = issues.filter((i) => i.level === 'ERROR');
+  const warnings = issues.filter((i) => i.level === 'WARNING');
+  const strict = options.strict !== false;
+  return {
+    code: errors.length ? 1 : strict && warnings.length ? 2 : 0,
+    errors,
+    warnings,
+    summary: { bytes: size },
+  };
+}
+
+export function formatIssues(result) {
+  const lines = [];
+  for (const i of [...result.errors, ...result.warnings]) {
+    const loc = i.file && i.file !== '-' ? `${i.file}${i.line ? ':' + i.line : ''}` : '-';
+    lines.push(`[${i.level}] ${loc} — ${i.rule}\n        ${i.message}`);
+  }
+  return lines.join('\n');
+}

package/src/vite-preset.mjs

@@ -0,0 +1,46 @@
+/**
+ * 小红书小工具 Vite 预设
+ *
+ * 相对原 xhs-minitool-vite-config 的关键修正：
+ *  ✅ 显式 build.target = ['es2017','chrome61']
+ *     原预设未设置 target，Vite 默认值会保留 `??` 等 ES2020 语法，
+ *     在 Android 8.1 / WebView 61 上解析失败 —— 症状是「页面白屏且无任何报错」。
+ *
+ * 其余沿用合理部分：相对 base、IIFE 单入口、不做资源内联、关闭 CSS 分片与预加载。
+ */
+
+/** @returns {import('vite').UserConfig} */
+export function defineMinitoolConfig(overrides = {}) {
+  return {
+    base: './',
+    build: {
+      outDir: 'xhs-tool',
+      emptyOutDir: true,
+      assetsInlineLimit: 0,
+      cssCodeSplit: false,
+      modulePreload: false,
+      // 官方 Skill v1.6.0 js-compatibility.md 要求：最终产物面向 Chrome 61 / ES2017
+      target: ['es2017', 'chrome61'],
+      rollupOptions: {
+        output: {
+          // 经典脚本：容器离线加载下 module 的相对 import 解析不可靠
+          format: 'iife',
+          inlineDynamicImports: true,
+          entryFileNames: 'app.js',
+          chunkFileNames: 'chunk-[name].js',
+          assetFileNames: (assetInfo) => {
+            const name = assetInfo.name || '';
+            if (name.endsWith('.css')) return 'app.css';
+            if (/\.(woff2?)$/i.test(name)) return 'fonts/[name][extname]';
+            if (/\.(png|jpe?g|gif|webp|svg)$/i.test(name)) return 'images/[name][extname]';
+            return 'assets/[name][extname]';
+          },
+        },
+      },
+      ...(overrides.build || {}),
+    },
+    ...Object.fromEntries(Object.entries(overrides).filter(([k]) => k !== 'build')),
+  };
+}
+
+export default defineMinitoolConfig;