refactor: clean up comments and finalize new manifest structure

- Remove decorative comments
- Remove old structure compatibility mentions
- Simplify validation logic
- Update security check for versions array

Author: esengine

.github/workflows/auto-review.yml

@@ -124,7 +124,6 @@ jobs:
           ISSUES=()
 
           for file in ${{ steps.changed-files.outputs.all_changed_files }}; do
-            # 检查必填字段完整性（新结构）
             REQUIRED_FIELDS="id name author description category repository license latestVersion versions"
             for field in $REQUIRED_FIELDS; do
               VALUE=$(node -e "console.log(require('./$file').$field || '')")

.github/workflows/validate-pr.yml

@@ -57,30 +57,18 @@ jobs:
       - name: Check version immutability
         if: steps.changed-files.outputs.any_changed == 'true'
         run: |
-          # 检查是否有版本对应的 ZIP 已存在（版本不可变）
           for file in ${{ steps.changed-files.outputs.all_changed_files }}; do
             PLUGIN_DIR=$(dirname "$file")
 
-            # 读取 manifest 中的所有版本（支持新旧结构）
             VERSIONS=$(node -e "
               const fs = require('fs');
               const manifest = JSON.parse(fs.readFileSync('$file'));
 
-              // 新结构：使用 versions 数组
               if (Array.isArray(manifest.versions)) {
                 manifest.versions.forEach(v => console.log(v.version));
               }
-              // 旧结构：使用 version 字段
-              else if (manifest.version) {
-                console.log(manifest.version);
-              }
-              // 兜底：使用 latestVersion
-              else if (manifest.latestVersion) {
-                console.log(manifest.latestVersion);
-              }
             ")
 
-            # 检查主分支是否已有这些版本的 ZIP
             git fetch origin main:main 2>/dev/null || true
 
             for VERSION in $VERSIONS; do

scripts/check-repo-security.js

@@ -132,10 +132,17 @@ async function checkManifestSecurity(manifestPath) {
     }
   }
 
-  await checkDistributionUrl(manifest.distribution.url, isNewPlugin);
-
-  if (manifest.distribution.css) {
-    await checkDistributionUrl(manifest.distribution.css, isNewPlugin);
+  if (Array.isArray(manifest.versions)) {
+    for (const version of manifest.versions) {
+      if (version.zipUrl) {
+        await checkDistributionUrl(version.zipUrl, isNewPlugin);
+      }
+    }
+  } else if (manifest.distribution?.url) {
+    await checkDistributionUrl(manifest.distribution.url, isNewPlugin);
+    if (manifest.distribution.css) {
+      await checkDistributionUrl(manifest.distribution.css, isNewPlugin);
+    }
   }
 
   await scanRepositoryCode(manifest.repository.url);

scripts/generate-registry.js

@@ -58,7 +58,6 @@ function generateRegistry() {
         const content = fs.readFileSync(manifestPath, 'utf-8');
         const manifest = JSON.parse(content);
 
-        // 验证新结构
         if (!manifest.latestVersion) {
           throw new Error('Missing required field: latestVersion');
         }
@@ -68,8 +67,6 @@ function generateRegistry() {
 
         const versions = manifest.versions;
         const latestVersion = manifest.latestVersion;
-
-        // 添加插件信息到 registry
         const pluginInfo = {
           id: manifest.id,
           name: manifest.name,

scripts/validate-manifest.js

@@ -142,14 +142,12 @@ function validateManifest(manifestPath) {
 
   const errors = [];
 
-  // 检查必需字段
   for (const field of SCHEMA.required) {
     if (!(field in manifest)) {
       errors.push(`Missing required field: ${field}`);
     }
   }
 
-  // 验证 versions 数组
   if (Array.isArray(manifest.versions)) {
     if (manifest.versions.length === 0) {
       errors.push('versions array cannot be empty');
@@ -168,7 +166,6 @@ function validateManifest(manifestPath) {
     });
   }
 
-  // 验证其他字段
   for (const [field, fieldSchema] of Object.entries(SCHEMA.properties)) {
     if (field in manifest) {
       errors.push(...validateValue(manifest[field], fieldSchema, field));