@c4a/context-cli 0.6.11 → 0.6.13

package/cli.js

@@ -18278,7 +18278,7 @@ function renderReadme(projectName, language) {
       "- `sources/`：来源注册信息和采集快照。",
       "- `knowledge/`：持久知识及其结构投影。",
       "- `dist/`：生成的知识包。",
-      "- `.tmp/agent-payloads/`：Agent 可选的临时命令输入，成功 stage/apply 后可以删除。",
+      "- `.tmp/agent-payloads/`：Agent 可选的临时命令输入；初始化时会创建，被清理后可在写入前重新创建。",
       "- `.tmp/install/`：依赖安装使用的工作区本地临时目录。",
       "- `.tmp/context-runtime/`：可删除的 Context 运行时状态。",
       "",
@@ -18317,7 +18317,7 @@ function renderReadme(projectName, language) {
     "- `sources/`: registered sources and captured snapshots.",
     "- `knowledge/`: durable knowledge, its structural projection with minimal closed source inputs, and compact rejected-candidate fingerprints.",
     "- `dist/`: generated packages.",
-    "- `.tmp/agent-payloads/`: optional Agent-owned command inputs. These files are transient and can be removed after the corresponding stage or apply succeeds.",
+    "- `.tmp/agent-payloads/`: optional Agent-owned command inputs. Initialization creates it; recreate it before writing if scratch cleanup removed it.",
     "- `.tmp/install/`: workspace-local temporary files used during dependency installation.",
     "- `.tmp/context-runtime/`: disposable runtime files, including lifecycle candidates and staged structures. Successful close removes completed lifecycle and Review state.",
     "",
@@ -18358,7 +18358,7 @@ function renderAgents(projectName, language) {
       "- 不得根据目录、文件名、URL、示例或旧会话推断用户决定；没有明确授权时不得扫描或对来源仓库执行 clone、fetch、checkout、install、build、test 或脚本。已登记仓库 checkout 缺失时，使用 Route 返回的恢复计划和恢复动作，不手工创建来源软链。",
       "- 生命周期写入必须使用 Context CLI，不得用临时脚本修改 `sources/`、`knowledge/`、`dist/` 或 `.tmp/context-runtime/`。",
       "- 飞书采集只在 `evidence_status: error` 时停止；`projection_status: generic|warning` 表示原始 XML 已保留且可继续。不得在用户工作区修补 CLI 或手改快照来增加 renderer。",
-      "- Agent 编写的临时输入优先放在 `.tmp/agent-payloads/`；这是推荐而非强制。不要自行创建 `inputs/` 等顶层临时目录。",
+      "- Agent 编写的临时输入优先放在 `.tmp/agent-payloads/`；这是推荐而非强制。目录在初始化时创建，如果临时目录已清理则在写入前重新创建。不要自行创建 `inputs/` 等顶层临时目录。",
       "- Context 完成只证明知识工作流状态，不证明 Git 提交范围安全。保留任务开始前已有的工作树变更，只按明确路径暂存；不要用 `git add -A` 把无关修改、删除或未跟踪目录带入提交。",
       "- 调试追踪默认关闭；仅在用户明确要求时使用 `context debug enable`。追踪只写入 `.tmp/context-runtime/debug/`，属于观测数据，不能作为生命周期事实或授权依据。",
       "- 普通 Review 使用用户原样提供的 Payload；托管批准只能使用托管 status 返回的 revision-bound 原子命令。",
@@ -18398,7 +18398,7 @@ function renderAgents(projectName, language) {
     "- Never infer source or review decisions from repository layout, filenames, URLs, examples, or prior conversations. Never scan for, clone, fetch, checkout, install, build, test, or run source-repository scripts without explicit authority. When registered repository checkouts are missing, use the Route-selected recovery plan and resolution action instead of creating source links by hand.",
     "- Use Context CLI for lifecycle writes. Do not inspect or repair `sources/`, `knowledge/`, `dist/`, or `.tmp/context-runtime/` with ad hoc scripts.",
     "- Stop Lark capture only for `evidence_status: error`. A `projection_status` of `generic` or `warning` means the original XML is preserved and the route may continue. Never patch the CLI or edit snapshots in a user workspace to add a renderer.",
-    "- Prefer `.tmp/agent-payloads/` for Agent-authored transient command inputs. This is a recommendation, not a CLI requirement; explicit custom paths remain valid. Avoid inventing top-level scratch directories such as `inputs/`.",
+    "- Prefer `.tmp/agent-payloads/` for Agent-authored transient command inputs. This is a recommendation, not a CLI requirement; explicit custom paths remain valid. Initialization creates the directory; recreate it before writing if scratch cleanup removed it. Avoid inventing top-level scratch directories such as `inputs/`.",
     "- Context completion proves knowledge-workflow state, not Git commit safety. Preserve worktree changes that existed before the task, stage only explicit paths, and never use `git add -A` to mix unrelated modifications, deletions, or untracked directories into the deliverable.",
     "- Debug tracing is off by default; use `context debug enable` only when the user explicitly requests it. Trace files stay in `.tmp/context-runtime/debug/` and are observational data, never lifecycle facts or authority.",
     "- Review uses the user's exact Payload in ordinary mode. Managed approval uses only the revision-bound atomic command returned by managed status.",
@@ -18474,6 +18474,9 @@ async function initContextProject(input) {
   for (const dir of PROJECT_DIRS) {
     await mkdir14(join27(projectRoot, dir), { recursive: true });
   }
+  for (const dir of PROJECT_SCRATCH_DIRS) {
+    await mkdir14(join27(projectRoot, dir), { recursive: true });
+  }
   await mkdir14(join27(projectRoot, "sources", "repo"), { recursive: true });
   await mkdir14(join27(projectRoot, "sources", "file"), { recursive: true });
   await mkdir14(join27(projectRoot, "sources", "lark"), { recursive: true });
@@ -18558,7 +18561,7 @@ function formatProjectInitResult(result) {
     next
   });
 }
-var PROJECT_DIRS, DEFAULT_PROJECT_DIR = "context", DEFAULT_PROJECT_ENTRY = "src/index.ts", PROJECT_LANGUAGES;
+var PROJECT_DIRS, PROJECT_SCRATCH_DIRS, DEFAULT_PROJECT_DIR = "context", DEFAULT_PROJECT_ENTRY = "src/index.ts", PROJECT_LANGUAGES;
 var init_workspace = __esm(() => {
   init_cliFeedback();
   init_errors();
@@ -18566,6 +18569,7 @@ var init_workspace = __esm(() => {
   init_packageTemplateReview();
   init_debugTrace();
   PROJECT_DIRS = ["src", "sources", "knowledge", "dist"];
+  PROJECT_SCRATCH_DIRS = [join27(".tmp", "agent-payloads")];
   PROJECT_LANGUAGES = ["en", "zh-CN"];
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4a/context-cli",
-  "version": "0.6.11",
+  "version": "0.6.13",
   "type": "module",
   "description": "Local runtime and Agent integration for traceable knowledge production",
   "license": "MIT",
@@ -24,7 +24,7 @@
   },
   "dependencies": {
     "@c4a/agent-graph": "0.2.6",
-    "@c4a/context": "0.6.11",
+    "@c4a/context": "0.6.13",
     "commander": "^11.0.0",
     "fast-xml-parser": "^5.10.1",
     "handlebars": "^4.7.8",

package/plugins/VERSION

@@ -1 +1 @@
-0.6.11
+0.6.13

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "c4a",
   "description": "Start or continue a project-local knowledge workspace through one graph-routed entry.",
-  "version": "0.6.11",
+  "version": "0.6.13",
   "author": {
     "name": "c4a"
   },

package/plugins/claude/commands/context.md

@@ -61,9 +61,13 @@ Execute only `next_action.command` returned by `context entry`:
 
 ### Conversation modes
 
-Enable debugging only when the user explicitly requests it. Run `context debug
-enable` first; debugging records traces below `.tmp/context-runtime/debug/` but
-does not grant workflow authority or provide source evidence.
+Enable debugging only when the user explicitly requests it. If initialization
+is required, pass `--debug` to `context entry` and execute its returned
+`context init ... --debug` command; do not run a workspace-only debug command
+before initialization. For an existing workspace, run `context debug enable`
+before workflow evaluation. Debugging records traces below
+`.tmp/context-runtime/debug/` but does not grant workflow authority or provide
+source evidence.
 
 For explicitly authorized fully managed operation, use:
 
@@ -115,6 +119,12 @@ Explain, ask, confirm, and summarize in the user's current conversation
 language. Keep commands, flags, paths, ids, status values, JSONL keys,
 `source_ref` values, and copied CLI tokens unchanged.
 
+When the user explicitly asks to publish a completed build, treat publication
+as a downstream distribution step outside the Context Route. Use only an
+explicitly installed distribution tool and its documented complete-output
+upload command. If no such tool is available, stop after the local build and
+explain that Context itself does not publish to a hosted service.
+
 Do not infer repo sources, extraction scope, review decisions, or package output
 choices from surrounding files. Do not call source-repo operations such as
 clone, checkout, reset, fetch, install, build, or test without explicit user

package/plugins/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "c4a",
-  "version": "0.6.11",
+  "version": "0.6.13",
   "description": "Start or continue a project-local knowledge workspace through one graph-routed entry.",
   "author": {
     "name": "c4a"
@@ -18,7 +18,7 @@
   "skills": "./skills/",
   "interface": {
     "displayName": "C4A Context",
-    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.6.11",
+    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.6.13",
     "longDescription": "Create a Context workspace and use agent-guided next steps to register sources, run extraction, review candidates, build package outputs, and verify health without silently mutating source repositories.",
     "developerName": "c4a",
     "category": "Productivity",

package/plugins/codex/skills/context/SKILL.md

@@ -73,9 +73,13 @@ Execute only `next_action.command` returned by `context entry`:
 
 ### Conversation modes
 
-Enable debugging only when the user explicitly requests it. Run `context debug
-enable` first; debugging records traces below `.tmp/context-runtime/debug/` but
-does not grant workflow authority or provide source evidence.
+Enable debugging only when the user explicitly requests it. If initialization
+is required, pass `--debug` to `context entry` and execute its returned
+`context init ... --debug` command; do not run a workspace-only debug command
+before initialization. For an existing workspace, run `context debug enable`
+before workflow evaluation. Debugging records traces below
+`.tmp/context-runtime/debug/` but does not grant workflow authority or provide
+source evidence.
 
 For explicitly authorized fully managed operation, use:
 
@@ -127,6 +131,12 @@ Explain, ask, confirm, and summarize in the user's current conversation
 language. Keep commands, flags, paths, ids, status values, JSONL keys,
 `source_ref` values, and copied CLI tokens unchanged.
 
+When the user explicitly asks to publish a completed build, treat publication
+as a downstream distribution step outside the Context Route. Use only an
+explicitly installed distribution tool and its documented complete-output
+upload command. If no such tool is available, stop after the local build and
+explain that Context itself does not publish to a hosted service.
+
 Do not infer repo sources, extraction scope, review decisions, or package output
 choices from surrounding files. Do not call source-repo operations such as
 clone, checkout, reset, fetch, install, build, or test without explicit user

package/plugins/cursor/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "c4a",
   "displayName": "C4A Context",
-  "version": "0.6.11",
+  "version": "0.6.13",
   "description": "Start or continue a project-local knowledge workspace through one graph-routed entry.",
   "author": {
     "name": "Context4AI",

package/plugins/cursor/commands/c4a-context.md

@@ -65,9 +65,13 @@ Execute only `next_action.command` returned by `context entry`:
 
 ### Conversation modes
 
-Enable debugging only when the user explicitly requests it. Run `context debug
-enable` first; debugging records traces below `.tmp/context-runtime/debug/` but
-does not grant workflow authority or provide source evidence.
+Enable debugging only when the user explicitly requests it. If initialization
+is required, pass `--debug` to `context entry` and execute its returned
+`context init ... --debug` command; do not run a workspace-only debug command
+before initialization. For an existing workspace, run `context debug enable`
+before workflow evaluation. Debugging records traces below
+`.tmp/context-runtime/debug/` but does not grant workflow authority or provide
+source evidence.
 
 For explicitly authorized fully managed operation, use:
 
@@ -119,6 +123,12 @@ Explain, ask, confirm, and summarize in the user's current conversation
 language. Keep commands, flags, paths, ids, status values, JSONL keys,
 `source_ref` values, and copied CLI tokens unchanged.
 
+When the user explicitly asks to publish a completed build, treat publication
+as a downstream distribution step outside the Context Route. Use only an
+explicitly installed distribution tool and its documented complete-output
+upload command. If no such tool is available, stop after the local build and
+explain that Context itself does not publish to a hosted service.
+
 Do not infer repo sources, extraction scope, review decisions, or package output
 choices from surrounding files. Do not call source-repo operations such as
 clone, checkout, reset, fetch, install, build, or test without explicit user

package/plugins/skills/c4a-context/SKILL.md

@@ -73,9 +73,13 @@ Execute only `next_action.command` returned by `context entry`:
 
 ### Conversation modes
 
-Enable debugging only when the user explicitly requests it. Run `context debug
-enable` first; debugging records traces below `.tmp/context-runtime/debug/` but
-does not grant workflow authority or provide source evidence.
+Enable debugging only when the user explicitly requests it. If initialization
+is required, pass `--debug` to `context entry` and execute its returned
+`context init ... --debug` command; do not run a workspace-only debug command
+before initialization. For an existing workspace, run `context debug enable`
+before workflow evaluation. Debugging records traces below
+`.tmp/context-runtime/debug/` but does not grant workflow authority or provide
+source evidence.
 
 For explicitly authorized fully managed operation, use:
 
@@ -127,6 +131,12 @@ Explain, ask, confirm, and summarize in the user's current conversation
 language. Keep commands, flags, paths, ids, status values, JSONL keys,
 `source_ref` values, and copied CLI tokens unchanged.
 
+When the user explicitly asks to publish a completed build, treat publication
+as a downstream distribution step outside the Context Route. Use only an
+explicitly installed distribution tool and its documented complete-output
+upload command. If no such tool is available, stop after the local build and
+explain that Context itself does not publish to a hosted service.
+
 Do not infer repo sources, extraction scope, review decisions, or package output
 choices from surrounding files. Do not call source-repo operations such as
 clone, checkout, reset, fetch, install, build, or test without explicit user

package/providers/context/manifest.json

@@ -2,7 +2,7 @@
   "schema": "agent-graph.bundle.v1",
   "provider": {
     "id": "c4a/context",
-    "version": "0.6.11"
+    "version": "0.6.13"
   },
   "providerManifest": "provider.yaml",
   "graphs": [
@@ -532,7 +532,7 @@
     },
     {
       "path": "provider.yaml",
-      "digest": "sha256:f89e3a74b6c752aaabbad5b5774d3687a7fb5419894f30741129b71419d234d4"
+      "digest": "sha256:bd0a404a8371bc9641e21e54e8ebcaf5bedfa508ee8ab378db127d91413c3930"
     },
     {
       "path": "resources/diagnostics/projection-stale.md",
@@ -750,5 +750,5 @@
   "graphDependencies": {
     "workspace": []
   },
-  "digest": "sha256:15058859f3884290c2c88de136633c2fbfb16e1a69d1a55796d92dc9082cdb94"
+  "digest": "sha256:b327de9553d4b71e182a98f87dd48e39ed5d24cb4f6aeaf50b7373b75368bf9a"
 }

package/providers/context/provider.yaml

@@ -1,6 +1,6 @@
 schema: agent-graph.provider.v1
 id: c4a/context
-version: 0.6.11
+version: 0.6.13
 name: Context workflow
 description: Internal work contract for Context knowledge workspaces.
 graphs: