e3209b74ae
Ship compliance skills and agent plugin wiring for Claude Code, Codex, OpenCode, and Cursor via Probo MCP (OAuth 2.0). Includes access-review and missing-signatures workflows, repo-root Git marketplaces, validation, and npm release CI. Signed-off-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Bryan FRIMIN <bryan@frimin.fr>
106 lines
3.5 KiB
JavaScript
106 lines
3.5 KiB
JavaScript
// Copyright (c) 2026 Probo Inc <hello@probo.com>.
|
|
//
|
|
// Permission to use, copy, modify, and/or distribute this software for any
|
|
// purpose with or without fee is hereby granted, provided that the above
|
|
// copyright notice and this permission notice appear in all copies.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
// PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
import { existsSync, readFileSync } from "node:fs";
|
|
import { dirname, join } from "node:path";
|
|
import { fileURLToPath } from "node:url";
|
|
|
|
const root = join(dirname(fileURLToPath(import.meta.url)), "..");
|
|
|
|
const requiredPaths = [
|
|
".claude-plugin/plugin.json",
|
|
".codex-plugin/plugin.json",
|
|
".agents/plugins/marketplace.json",
|
|
".mcp.json",
|
|
"commands/access-review.md",
|
|
"commands/missing-signatures.md",
|
|
"skills/access-review/SKILL.md",
|
|
"skills/missing-signatures/SKILL.md",
|
|
"skills/open-source-compliance/SKILL.md",
|
|
"skills/access-review/references/mcp-tools.md",
|
|
"skills/access-review/references/decision-rubric.md",
|
|
"skills/access-review/references/notes-format.md",
|
|
"skills/missing-signatures/references/mcp-tools.md",
|
|
"skills/missing-signatures/references/report-format.md",
|
|
"skills/missing-signatures/references/notes-format.md",
|
|
"COMPATIBILITY.md",
|
|
];
|
|
|
|
let failed = false;
|
|
|
|
for (const relativePath of requiredPaths) {
|
|
const absolutePath = join(root, relativePath);
|
|
if (!existsSync(absolutePath)) {
|
|
console.error(`missing required file: ${relativePath}`);
|
|
failed = true;
|
|
}
|
|
}
|
|
|
|
const manifestPath = join(root, ".claude-plugin/plugin.json");
|
|
const codexManifestPath = join(root, ".codex-plugin/plugin.json");
|
|
|
|
for (const [label, path] of [
|
|
["plugin.json", manifestPath],
|
|
[".codex-plugin/plugin.json", codexManifestPath],
|
|
]) {
|
|
if (!existsSync(path)) {
|
|
continue;
|
|
}
|
|
try {
|
|
const manifest = JSON.parse(readFileSync(path, "utf8"));
|
|
if (typeof manifest.name !== "string" || manifest.name.length === 0) {
|
|
console.error(`${label}: name must be a non-empty string`);
|
|
failed = true;
|
|
}
|
|
if (manifest.repository != null && typeof manifest.repository !== "string") {
|
|
console.error(
|
|
`${label}: repository must be a string URL, not an object`,
|
|
);
|
|
failed = true;
|
|
}
|
|
if (manifest.bugs != null && typeof manifest.bugs !== "string") {
|
|
console.error(`${label}: bugs must be a string URL, not an object`);
|
|
failed = true;
|
|
}
|
|
} catch (error) {
|
|
console.error(`${label} is not valid JSON: ${error.message}`);
|
|
failed = true;
|
|
}
|
|
}
|
|
|
|
const mcpPath = join(root, ".mcp.json");
|
|
if (existsSync(mcpPath)) {
|
|
try {
|
|
const mcpConfig = JSON.parse(readFileSync(mcpPath, "utf8"));
|
|
const servers = mcpConfig.mcpServers ?? {};
|
|
for (const [name, config] of Object.entries(servers)) {
|
|
if (config?.headers?.Authorization != null) {
|
|
console.error(
|
|
`.mcp.json: ${name} must use OAuth 2.0, not headers.Authorization`,
|
|
);
|
|
failed = true;
|
|
}
|
|
}
|
|
} catch (error) {
|
|
console.error(`.mcp.json is not valid JSON: ${error.message}`);
|
|
failed = true;
|
|
}
|
|
}
|
|
|
|
if (failed) {
|
|
process.exit(1);
|
|
}
|
|
|
|
console.log("@probo/skills validation passed");
|