npm - @alphafox/cli - Versions diffs - 0.3.4 → 0.3.6 - Mend

@alphafox/cli 0.3.4 → 0.3.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (39) hide show

package/LICENSE +1 -1
package/README.md +27 -6
package/dist/auth/loopback-callback.js +3 -3
package/dist/commands/run.js +26 -2
package/dist/index.d.ts +4 -0
package/dist/index.js +20 -1
package/dist/install/types.d.ts +8 -1
package/dist/install/types.js +1 -0
package/dist/install/wizard.js +91 -53
package/dist/keychain/windows-credential.d.ts +1 -1
package/dist/keychain/windows-credential.js +1 -1
package/dist/skills/manager.d.ts +96 -0
package/dist/skills/manager.js +445 -0
package/dist/skills/run-command.d.ts +22 -0
package/dist/skills/run-command.js +143 -0
package/dist/skills-manifest.json +141 -0
package/dist/update/notify.d.ts +24 -0
package/dist/update/notify.js +109 -0
package/dist/update/run-command.d.ts +41 -0
package/dist/update/run-command.js +204 -0
package/dist/version.d.ts +1 -1
package/dist/version.js +1 -1
package/docs/agents/issue-tracker.md +2 -2
package/docs/agents/triage-labels.md +1 -1
package/docs/alphafox-cli-installation-guide.md +15 -16
package/docs/index.html +11 -11
package/docs/release-supply-chain.md +11 -6
package/package.json +2 -2
package/skills/account/SKILL.md +1 -1
package/skills/admin/SKILL.md +1 -1
package/skills/alphafox/SKILL.md +26 -4
package/skills/alphafox-shared/SKILL.md +24 -4
package/skills/auth/SKILL.md +2 -2
package/skills/engine-backtest/SKILL.md +1 -1
package/skills/exchange/SKILL.md +1 -1
package/skills/market/SKILL.md +1 -1
package/skills/notification/SKILL.md +1 -1
package/skills/strategy/SKILL.md +1 -1
package/skills/trading/SKILL.md +1 -1

package/docs/index.html CHANGED Viewed

@@ -3,10 +3,10 @@
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>Alphafox CLI</title>
+    <title>AlphaFox CLI</title>
     <meta
       name="description"
-      content="仅需一行指令，在任意 Agent 操作 Alphafox。安装 CLI 与 Skills，用 Public Application API 做回测、策略与交易。"
+      content="仅需一行指令，在任意 Agent 操作 AlphaFox。安装 CLI 与 Skills，用 Public Application API 做回测、策略与交易。"
     />
     <meta name="theme-color" content="#FF991F" />
     <link rel="icon" href="favicon.svg" type="image/svg+xml" />
@@ -491,7 +491,7 @@
   <body>
     <header class="site-header">
       <div class="site-header-inner">
-        <a class="brand" href="./" aria-label="Alphafox CLI">
+        <a class="brand" href="./" aria-label="AlphaFox CLI">
           <img class="mark" src="logo/alphafox-mark.svg" alt="" width="36" height="36" />
           <img
             class="wordmark wordmark-light"
@@ -544,8 +544,8 @@
     <main class="wrap">
       <section class="hero">
-        <p class="kicker">Alphafox CLI</p>
-        <h1 class="headline" data-i18n="headline">仅需一行指令，在任意 Agent 操作 Alphafox</h1>
+        <p class="kicker">AlphaFox CLI</p>
+        <h1 class="headline" data-i18n="headline">仅需一行指令，在任意 Agent 操作 AlphaFox</h1>
         <p class="lede" data-i18n="lede">
           安装 CLI 与 Skills，用 Public Application API 做回测、策略与交易。
         </p>
@@ -576,7 +576,7 @@
         <section class="panel" id="panel-agent" role="tabpanel" aria-labelledby="tab-agent" hidden>
           <p class="hint" data-i18n="agentHint">把下面这段话发给任意 AI Agent，它会按安装指南完成配置：</p>
           <div class="cmd">
-            <code id="agent-cmd">帮我安装 Alphafox CLI：https://github.com/alphafoxai/alphafox-cli/blob/main/docs/alphafox-cli-installation-guide.md</code>
+            <code id="agent-cmd">帮我安装 AlphaFox CLI：https://github.com/alphafoxai/alphafox-cli/blob/main/docs/alphafox-cli-installation-guide.md</code>
             <button class="copy" type="button" data-copy="agent-cmd">
               <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
                 <rect x="5.5" y="5.5" width="8" height="8" rx="1.5" stroke="currentColor" />
@@ -604,7 +604,7 @@
     </main>
     <footer class="site-footer">
-      <span>© 2026 Alphafox</span>
+      <span>© 2026 AlphaFox</span>
       ·
       <a href="https://www.alphafox.app">alphafox.app</a>
     </footer>
@@ -613,7 +613,7 @@
       const copyLabels = { zh: { idle: "复制", done: "已复制" }, en: { idle: "Copy", done: "Copied" } };
       const i18n = {
         zh: {
-          headline: "仅需一行指令，在任意 Agent 操作 Alphafox",
+          headline: "仅需一行指令，在任意 Agent 操作 AlphaFox",
           lede: "安装 CLI 与 Skills，用 Public Application API 做回测、策略与交易。",
           tabManual: "手动安装",
           tabAgent: "通过 AI Agent 安装",
@@ -629,10 +629,10 @@
           themeAriaDark: "切换到浅色模式",
           langAria: "切换语言",
           agentCmd:
-            "帮我安装 Alphafox CLI：https://github.com/alphafoxai/alphafox-cli/blob/main/docs/alphafox-cli-installation-guide.md",
+            "帮我安装 AlphaFox CLI：https://github.com/alphafoxai/alphafox-cli/blob/main/docs/alphafox-cli-installation-guide.md",
         },
         en: {
-          headline: "One command to operate Alphafox from any Agent",
+          headline: "One command to operate AlphaFox from any Agent",
           lede: "Install the CLI and Skills, then run backtests, strategies, and trades through the Public Application API.",
           tabManual: "Manual install",
           tabAgent: "Install via AI Agent",
@@ -648,7 +648,7 @@
           themeAriaDark: "Switch to light mode",
           langAria: "Switch language",
           agentCmd:
-            "Install Alphafox CLI for me: https://github.com/alphafoxai/alphafox-cli/blob/main/docs/alphafox-cli-installation-guide.md",
+            "Install AlphaFox CLI for me: https://github.com/alphafoxai/alphafox-cli/blob/main/docs/alphafox-cli-installation-guide.md",
         },
       };

package/docs/release-supply-chain.md CHANGED Viewed

@@ -58,12 +58,17 @@ OIDC-provenance release.
 - Skills major aligns with CLI major. There is no separate Skills registry
   in v1 and no silent download of a different Skills version at runtime.
 - `npm install -g @alphafox/cli` places `skills/` next to the binary only.
-  Agents do not load that directory. `alphafox install` (and the Agent
-  install guide) copy those files into Agent skill dirs via
-  `npx skills add`:
-  1. the globally installed package path (co-versioned with the CLI)
-  2. the running package / checkout `skills/` tree
-  3. GitHub `alphafoxai/alphafox-cli` as a last-resort fallback
+  Agents do not load that directory. `alphafox install`, `alphafox update`,
+  and `alphafox skills sync` verify `dist/skills-manifest.json`, then copy
+  only from that exact package into global Agent skill dirs.
+- GitHub `main` is not an update fallback. A missing or invalid package
+  manifest fails closed instead of silently changing the Skills version.
+- Sync state and per-Skill hashes live under the AlphaFox config directory.
+  Missing or unchanged stale Skills may update automatically. Modified Skills
+  require `alphafox skills sync --force --yes` and are backed up first.
+- Retired Skills are removed only when the state proves they are AlphaFox
+  managed and unmodified. Failed copy/removal verification does not advance
+  sync state.
 - `contractVersion` on the CLI profile MUST match the Public API
   `contractVersion` (or the documented compatible range). Mismatch → fail
   closed; do not download an older contract or degrade quietly.

package/package.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "name": "@alphafox/cli",
-  "version": "0.3.4",
-  "description": "Alphafox CLI — Agent/Human entry for the public Application API.",
+  "version": "0.3.6",
+  "description": "AlphaFox CLI — Agent/Human entry for the public Application API.",
   "type": "commonjs",
   "bin": {
     "alphafox": "bin/alphafox.js"

package/skills/account/SKILL.md CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 name: alphafox-account
 description: Account, wallet, and subscription read paths.
-version: 0.3.4
+version: 0.3.6
 ---
 # Account / wallet

package/skills/admin/SKILL.md CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 name: alphafox-admin
 description: Admin-only operations reusing Web role authorization.
-version: 0.3.4
+version: 0.3.6
 ---
 # Admin

package/skills/alphafox/SKILL.md CHANGED Viewed

@@ -1,10 +1,10 @@
 ---
 name: alphafox
-description: Alphafox CLI entry router. Use for any Alphafox request — install, login, whoami, 回测, engine backtest, strategy chat, traders, ticker/标的 resolve, market data, exchange connectors, wallet, subscriptions, notifications, or admin. Start here, then open the routed domain skill. Do not guess alphafox-engine-backtest vs alphafox-strategy from memory.
-version: 0.3.4
+description: AlphaFox CLI entry router. Use for any AlphaFox request — install, update, login, whoami, 回测, engine backtest, strategy chat, traders, ticker/标的 resolve, market data, exchange connectors, wallet, subscriptions, notifications, or admin. If a CLI command prints `[alphafox] update available`, ask the user「检测到新的版本，是否需要我帮你升级？」and only then run `alphafox update --format json --no-input`. Start here, then open the routed domain skill. Do not guess alphafox-engine-backtest vs alphafox-strategy from memory.
+version: 0.3.6
 ---
-# Alphafox
+# AlphaFox
 This skill only routes. After choosing a row, **read that skill's `SKILL.md` and follow it**. Do not improvise domain procedures from this file.
@@ -16,7 +16,7 @@ Human-mentioned tickers go through `alphafox-market` (`alphafox resolve-symbols`
 | User intent | Skill |
 |---|---|
-| Install, doctor, version, catalog, how to call the CLI | `alphafox-shared` |
+| Install, update, Skills status/sync, doctor, version, catalog, how to call the CLI | `alphafox-shared` |
 | Login, logout, whoami, profile, staging vs production | `alphafox-auth` |
 | Coin / ticker / 标的 / `BTC/USDT:USDT` / resolve a misspelled symbol | `alphafox-market` |
 | Engine WASM backtest, experiment, `engine-backtest run`, persist a local run | `alphafox-engine-backtest` |
@@ -29,6 +29,28 @@ Human-mentioned tickers go through `alphafox-market` (`alphafox resolve-symbols`
 If several rows apply, load **all** of them (typical: `alphafox-shared` + `alphafox-market` + one domain skill).
+## Upgrade reminder
+The CLI may print this on **stderr** at most once every 24 hours:
+```text
+[alphafox] update available: 0.3.5 -> 0.3.6. After the user confirms, run: alphafox update --format json --no-input
+```
+If you see that notice (or `updateAvailable: true` from `alphafox update --check`):
+1. Ask the user: **检测到新的版本，是否需要我帮你升级？**
+2. Wait for an explicit yes. Do not upgrade on your own.
+3. After they confirm:
+```bash
+alphafox update --format json --no-input
+```
+4. Tell the user to **restart the AI tool** so the new Skills load.
+Do not install Skills from GitHub. Details and dry-run / check commands live in `alphafox-shared`.
 ## Do not mix these backtest paths
 - Local Engine tape + wasm + optional persist → `alphafox-engine-backtest` (`alphafox engine-backtest run`, hyphen).

package/skills/alphafox-shared/SKILL.md CHANGED Viewed

@@ -1,10 +1,10 @@
 ---
 name: alphafox-shared
-description: Shared Alphafox CLI rules for Agents — auth, profiles, envelopes, risk gates, and public operationIds only.
-version: 0.3.4
+description: Shared AlphaFox CLI rules for Agents — auth, profiles, envelopes, risk gates, and public operationIds only.
+version: 0.3.6
 ---
-# Alphafox shared Agent contract
+# AlphaFox shared Agent contract
 User-facing entry is skill `alphafox` (router). This file is the shared CLI contract every domain skill assumes.
@@ -14,7 +14,7 @@ Co-versioned with `@alphafox/cli`. Query compatibility with `alphafox version --
 Prefer the wizard (CLI + Agent Skills) or the Agent install guide. Do not treat
 `npm install -g @alphafox/cli` as enough for Agents — Skills must be registered
-with `npx skills add`.
+with `alphafox skills sync`.
 ```bash
 npx @alphafox/cli@latest install
@@ -24,6 +24,26 @@ npx @alphafox/cli version --format json --no-input
 npx @alphafox/cli doctor --format json --no-input
 ```
+The CLI checks npm at most once every 24 hours and only prints a notice on
+**stderr**. It never auto-upgrades. If you see
+`[alphafox] update available` (or `updateAvailable: true`), ask the user:
+**检测到新的版本，是否需要我帮你升级？**
+Wait for an explicit yes. Then keep CLI and Skills co-versioned:
+```bash
+alphafox update --check --format json --no-input
+alphafox update --format json --no-input
+alphafox skills status --format json --no-input
+```
+After a successful `alphafox update`, tell the user to restart the AI tool.
+Never update AlphaFox Skills independently from GitHub. If `skills status`
+reports local modifications, stop and ask before using
+`alphafox skills sync --force --yes`; the CLI backs up replaced files.
 - Default profile: `production`. Use `--profile staging|local` explicitly.
 - Tokens: OS keychain only (macOS Keychain, Linux Secret Service, Windows Credential Manager). Never pass `--token`. Never read tokens from config JSON.
 - Automation tokens are **not supported in v1** (interactive Device Flow / PKCE only).

package/skills/auth/SKILL.md CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 name: alphafox-auth
-description: Login, status, logout, whoami, and environment isolation for Alphafox CLI.
-version: 0.3.4
+description: Login, status, logout, whoami, and environment isolation for AlphaFox CLI.
+version: 0.3.6
 ---
 # Auth Skill

package/skills/engine-backtest/SKILL.md CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 name: alphafox-engine-backtest
 description: Local Engine WASM backtest (alphafox engine-backtest run|sweep) vs catalog experiment CRUD.
-version: 0.3.4
+version: 0.3.6
 ---
 # Engine Backtest

package/skills/exchange/SKILL.md CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 name: alphafox-exchange
 description: Exchange connectors list and connection management via Public API.
-version: 0.3.4
+version: 0.3.6
 ---
 # Exchange connectors

package/skills/market/SKILL.md CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 name: alphafox-market
 description: Market data, ticker resolution, and spread-radar readonly queries.
-version: 0.3.4
+version: 0.3.6
 ---
 # Market

package/skills/notification/SKILL.md CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 name: alphafox-notification
 description: Notification channels and subscriptions.
-version: 0.3.4
+version: 0.3.6
 ---
 # Notification

package/skills/strategy/SKILL.md CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 name: alphafox-strategy
 description: Strategy definitions and chats via public operationIds.
-version: 0.3.4
+version: 0.3.6
 ---
 # Strategy / Chat

package/skills/trading/SKILL.md CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 name: alphafox-trading
 description: Traders list and high-risk start/stop with confirmation gates.
-version: 0.3.4
+version: 0.3.6
 ---
 # Trading