archived-MoviePilot-Plugins/scripts/verify-skill-dist.sh

#!/usr/bin/env bash
set -euo pipefail

ROOT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
cd "$ROOT_DIR"

show_help() {
  cat <<'EOF'
Usage:
  DIST_DIR=dist/skills bash scripts/verify-skill-dist.sh

Verifies Skill ZIPs, SHA256SUMS.txt and MANIFEST.json under DIST_DIR.
Defaults to dist/skills.
EOF
}

if [[ "${1:-}" == "--help" || "${1:-}" == "-h" ]]; then
  show_help
  exit 0
fi

DIST_DIR="${DIST_DIR:-dist/skills}" python3 - <<'PY'
from hashlib import sha256
import json
import os
from pathlib import Path
import subprocess
import tempfile
import zipfile

dist_dir = Path(os.environ["DIST_DIR"])
manifest = dist_dir / "SHA256SUMS.txt"
json_manifest = dist_dir / "MANIFEST.json"
if not dist_dir.exists():
    print(f"{dist_dir} 目录不存在")
    raise SystemExit(1)
if not manifest.exists():
    print(f"{manifest} 不存在")
    raise SystemExit(1)
if not json_manifest.exists():
    print(f"{json_manifest} 不存在")
    raise SystemExit(1)

zip_files = sorted(dist_dir.glob("*.zip"))
if not zip_files:
    print("Skill dist 目录没有 ZIP 文件")
    raise SystemExit(1)

expected = {}
for line in manifest.read_text(encoding="utf-8").splitlines():
    if not line.strip():
        continue
    try:
        digest, filename = line.split(None, 1)
    except ValueError:
        print(f"Skill SHA256SUMS.txt 行格式错误: {line}")
        raise SystemExit(1)
    expected[filename.strip()] = digest.strip()

zip_names = {path.name for path in zip_files}
manifest_names = set(expected)
missing = sorted(zip_names - manifest_names)
extra = sorted(manifest_names - zip_names)
if missing or extra:
    if missing:
        print("Skill SHA256SUMS.txt 缺少 ZIP:")
        print("\n".join(missing))
    if extra:
        print("Skill SHA256SUMS.txt 包含不存在的 ZIP:")
        print("\n".join(extra))
    raise SystemExit(1)

manifest_data = json.loads(json_manifest.read_text(encoding="utf-8"))
manifest_skills = manifest_data.get("skills")
if not isinstance(manifest_skills, list):
    print("Skill MANIFEST.json 缺少 skills 列表")
    raise SystemExit(1)
manifest_by_zip = {}
for item in manifest_skills:
    if not isinstance(item, dict) or not item.get("zip"):
        print("Skill MANIFEST.json 条目格式错误")
        raise SystemExit(1)
    manifest_by_zip[item["zip"]] = item
missing_json = sorted(zip_names - set(manifest_by_zip))
extra_json = sorted(set(manifest_by_zip) - zip_names)
if missing_json or extra_json:
    if missing_json:
        print("Skill MANIFEST.json 缺少 ZIP:")
        print("\n".join(missing_json))
    if extra_json:
        print("Skill MANIFEST.json 包含不存在的 ZIP:")
        print("\n".join(extra_json))
    raise SystemExit(1)

for zip_file in zip_files:
    actual = sha256(zip_file.read_bytes()).hexdigest()
    if expected[zip_file.name] != actual:
        print(f"{zip_file} SHA256 不匹配")
        raise SystemExit(1)
    manifest_item = manifest_by_zip[zip_file.name]
    if manifest_item.get("sha256") != actual:
        print(f"{zip_file} Skill MANIFEST.json SHA256 不匹配")
        raise SystemExit(1)
    if manifest_item.get("size") != zip_file.stat().st_size:
        print(f"{zip_file} Skill MANIFEST.json size 不匹配")
        raise SystemExit(1)
    skill_name = manifest_item.get("id")
    version = manifest_item.get("version")
    if not skill_name or not version:
        print(f"{zip_file} Skill MANIFEST.json 缺少 id/version")
        raise SystemExit(1)
    if zip_file.name != f"{skill_name}-{version}.zip":
        print(f"{zip_file} 文件名与 Skill MANIFEST.json id/version 不匹配")
        raise SystemExit(1)
    required = {
        f"{skill_name}/SKILL.md",
        f"{skill_name}/README.md",
        f"{skill_name}/CHANGELOG.md",
        f"{skill_name}/install.sh",
    }
    with zipfile.ZipFile(zip_file) as zip_obj:
        names = set(zip_obj.namelist())
        bad_entries = [
            name
            for name in names
            if "__pycache__" in name or name.endswith((".pyc", ".pyo", ".DS_Store"))
        ]
    missing_required = sorted(required - names)
    if missing_required:
        print(f"{zip_file} 缺少 Skill 必需文件:")
        print("\n".join(missing_required))
        raise SystemExit(1)
    if bad_entries:
        print(f"{zip_file} 包含不应发布的生成文件:")
        print("\n".join(sorted(bad_entries)))
        raise SystemExit(1)
    if skill_name == "agent-resource-officer":
        external_agent_required = {
            f"{skill_name}/EXTERNAL_AGENTS.md",
            f"{skill_name}/scripts/aro_request.py",
        }
        missing_external_agent = sorted(external_agent_required - names)
        if missing_external_agent:
            print(f"{zip_file} 缺少外部智能体入口文件:")
            print("\n".join(missing_external_agent))
            raise SystemExit(1)
        with tempfile.TemporaryDirectory() as tmpdir:
            with zipfile.ZipFile(zip_file) as zip_obj:
                zip_obj.extractall(tmpdir)
            helper = Path(tmpdir) / skill_name / "scripts" / "aro_request.py"
            raw = subprocess.check_output(["python3", str(helper), "external-agent"], text=True)
            payload = json.loads(raw)
            if payload.get("schema_version") != "external_agent.v1":
                print(f"{zip_file} external-agent schema_version 无效")
                raise SystemExit(1)
            if not payload.get("guide_file_exists"):
                print(f"{zip_file} external-agent guide_file_exists=false")
                raise SystemExit(1)
            if len(payload.get("tools") or []) != 4:
                print(f"{zip_file} external-agent tools 数量无效")
                raise SystemExit(1)

print(f"skill_dist_verify_ok files={len(zip_files)}")
PY