@entrorove/skill 0.1.2 → 0.1.21

package/release.mjs

@@ -0,0 +1,145 @@
+import { createHash } from 'node:crypto'
+import { readFile, writeFile, rename, rm } from 'node:fs/promises'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const directory = path.dirname(fileURLToPath(import.meta.url))
+const sourceFiles = [
+  'cli.mjs', 'version.mjs', 'SKILL.md', 'AGREEMENT.md',
+  'package.json', 'manifest.json', 'release.mjs',
+  'local-cli.mjs', 'local-state-lock.mjs', 'local-execution.mjs', 'local-integrity.mjs', 'local-formula.mjs', 'local-ledger.mjs',
+  'local-approved-plan.mjs', 'local-budget-renewal.mjs', 'local-probe.mjs',
+  'local-task-routing.mjs', 'remote-client.mjs',
+]
+const stateFile = 'release-state.json'
+const changelogFile = 'CHANGELOG.md'
+const releasesFile = 'releases.json'
+
+async function read(name) {
+  return readFile(path.join(directory, name), 'utf8')
+}
+
+function digest(value) {
+  return createHash('sha256').update(value).digest('hex')
+}
+
+function normalized(name, text) {
+  if (name === 'SKILL.md') {
+    return text.replace(/^Version: \d+\.\d+\.\d+\.$/m, 'Version: <release>.')
+  }
+  if (name === 'package.json' || name === 'manifest.json') {
+    const metadata = JSON.parse(text)
+    metadata.version = '<release>'
+    return JSON.stringify(metadata)
+  }
+  return text
+}
+
+async function sourceDigests() {
+  const entries = await Promise.all(sourceFiles.map(async name =>
+    [name, digest(normalized(name, await read(name)))]))
+  return Object.fromEntries(entries)
+}
+
+function versionNext(version) {
+  const parts = version.split('.').map(Number)
+  if (parts.length !== 3 || parts.some(part => !Number.isSafeInteger(part) || part < 0)) {
+    throw new Error('Skill version is not semantic version MAJOR.MINOR.PATCH')
+  }
+  return `${parts[0]}.${parts[1]}.${parts[2] + 1}`
+}
+
+function releaseNote(changed) {
+  const suppliedZh = process.env.ENTROROVE_RELEASE_NOTE_ZH?.trim()
+  const suppliedEn = process.env.ENTROROVE_RELEASE_NOTE_EN?.trim()
+  if (Boolean(suppliedZh) !== Boolean(suppliedEn)) {
+    throw new Error('Release notes must provide both Chinese and English')
+  }
+  if (suppliedZh && suppliedEn) return {
+    zh: suppliedZh.replaceAll(/\s+/g, ' '), en: suppliedEn.replaceAll(/\s+/g, ' '),
+  }
+  const labels = {
+    'cli.mjs': { zh: '技能运行和受管安装', en: 'skill runtime and managed installation' },
+    'version.mjs': { zh: '版本安全检查', en: 'version safety checks' },
+    'SKILL.md': { zh: 'IDE 工作流程说明', en: 'IDE workflow instructions' },
+    'AGREEMENT.md': { zh: '使用、隐私与推广告知', en: 'usage, privacy, and promotion notice' },
+    'package.json': { zh: '安装包配置', en: 'package configuration' },
+    'manifest.json': { zh: '技能清单', en: 'skill manifest' },
+    'release.mjs': { zh: '自动版本与更新日志', en: 'automatic versioning and changelog' },
+    'local-cli.mjs': { zh: '本地执行命令', en: 'local execution command' },
+    'local-state-lock.mjs': { zh: '本地状态并发锁', en: 'local state concurrency lock' },
+    'local-execution.mjs': { zh: '本地执行闸门与预算', en: 'local execution gates and budgets' },
+    'local-integrity.mjs': { zh: '证据与回执验签', en: 'evidence and receipt verification' },
+    'local-formula.mjs': { zh: '确定性公式引擎', en: 'deterministic formula engine' },
+    'local-ledger.mjs': { zh: '执行与链路台账', en: 'execution and chain ledger' },
+    'local-approved-plan.mjs': { zh: '冻结计划执行器', en: 'frozen plan runner' },
+    'local-budget-renewal.mjs': { zh: '预算续期确认', en: 'budget renewal confirmation' },
+    'local-probe.mjs': { zh: '范围探测与分档', en: 'scope probing and tiering' },
+    'local-task-routing.mjs': { zh: '本地任务路由', en: 'local task routing' },
+    'remote-client.mjs': { zh: '远端恢复客户端', en: 'remote recovery client' },
+  }
+  return {
+    zh: `更新了${changed.map(name => labels[name].zh).join('、')}。`,
+    en: `Updated ${changed.map(name => labels[name].en).join(', ')}.`,
+  }
+}
+
+async function writeAll(changes) {
+  const originals = new Map()
+  const staged = []
+  try {
+    for (const [name, content] of changes) {
+      originals.set(name, await read(name))
+      const temporary = path.join(directory, `.${name}.${process.pid}.tmp`)
+      await writeFile(temporary, content, { flag: 'wx', mode: 0o600 })
+      staged.push([name, temporary])
+    }
+    for (const [name, temporary] of staged) await rename(temporary, path.join(directory, name))
+  } catch (error) {
+    for (const [name, content] of originals) await writeFile(path.join(directory, name), content)
+    for (const [, temporary] of staged) await rm(temporary, { force: true })
+    throw error
+  }
+}
+
+const metadata = JSON.parse(await read('package.json'))
+const manifest = JSON.parse(await read('manifest.json'))
+const state = JSON.parse(await read(stateFile))
+const skill = await read('SKILL.md')
+if (metadata.version !== manifest.version || metadata.version !== state.version
+  || !skill.includes(`Version: ${metadata.version}.`)) {
+  throw new Error('Skill package, manifest, instruction, and release state versions differ')
+}
+const files = await sourceDigests()
+const currentDigest = digest(JSON.stringify(files))
+if (currentDigest !== state.digest) {
+  const changed = sourceFiles.filter(name => files[name] !== state.files[name])
+  if (changed.length === 0) throw new Error('Skill source digest changed without a changed file')
+  const next = versionNext(metadata.version)
+  metadata.version = next
+  manifest.version = next
+  const nextSkill = skill.replace(`Version: ${state.version}.`, `Version: ${next}.`)
+  const changelog = await read(changelogFile)
+  const date = new Date().toISOString().slice(0, 10)
+  const notes = releaseNote(changed)
+  const entry = `## ${next} — ${date}\n\n- ${notes.zh}\n- ${notes.en}\n\n`
+  const nextLog = changelog.replace('# Changelog\n\n', `# Changelog\n\n${entry}`)
+  if (nextLog === changelog) throw new Error('Changelog header is missing')
+  const releases = JSON.parse(await read(releasesFile))
+  if (!Array.isArray(releases) || releases[0]?.version !== state.version) {
+    throw new Error('Release index does not match current skill version')
+  }
+  const nextState = { schemaVersion: 'entrorove.release-state/1.0', version: next,
+    digest: currentDigest, files }
+  await writeAll([
+    ['package.json', JSON.stringify(metadata, null, 2) + '\n'],
+    ['manifest.json', JSON.stringify(manifest, null, 2) + '\n'],
+    ['SKILL.md', nextSkill],
+    [changelogFile, nextLog],
+    [releasesFile, JSON.stringify([{ version: next, date, ...notes }, ...releases], null, 2) + '\n'],
+    [stateFile, JSON.stringify(nextState, null, 2) + '\n'],
+  ])
+  process.stdout.write(`entrorove skill ${next}: ${notes.en}\n`)
+} else {
+  process.stdout.write(`entrorove skill ${state.version}: no source change\n`)
+}

package/releases.json

@@ -0,0 +1,122 @@
+[
+  {
+    "version": "0.1.21",
+    "date": "2026-10-04",
+    "zh": "更新了本地执行闸门与预算。",
+    "en": "Updated local execution gates and budgets."
+  },
+  {
+    "version": "0.1.20",
+    "date": "2026-10-04",
+    "zh": "更新了本地状态并发锁、本地执行闸门与预算、执行与链路台账。",
+    "en": "Updated local state concurrency lock, local execution gates and budgets, execution and chain ledger."
+  },
+  {
+    "version": "0.1.19",
+    "date": "2026-10-04",
+    "zh": "更新了安装包配置、自动版本与更新日志、本地状态并发锁、本地执行闸门与预算、预算续期确认、本地任务路由。",
+    "en": "Updated package configuration, automatic versioning and changelog, local state concurrency lock, local execution gates and budgets, budget renewal confirmation, local task routing."
+  },
+  {
+    "version": "0.1.18",
+    "date": "2026-10-04",
+    "zh": "更新了冻结计划执行器。",
+    "en": "Updated frozen plan runner."
+  },
+  {
+    "version": "0.1.17",
+    "date": "2026-10-04",
+    "zh": "更新了本地执行命令、冻结计划执行器。",
+    "en": "Updated local execution command, frozen plan runner."
+  },
+  {
+    "version": "0.1.16",
+    "date": "2026-10-04",
+    "zh": "更新了远端恢复客户端。",
+    "en": "Updated remote recovery client."
+  },
+  {
+    "version": "0.1.15",
+    "date": "2026-10-04",
+    "zh": "更新了IDE 工作流程说明。",
+    "en": "Updated IDE workflow instructions."
+  },
+  {
+    "version": "0.1.14",
+    "date": "2026-10-02",
+    "zh": "更新了本地执行闸门与预算。",
+    "en": "Updated local execution gates and budgets."
+  },
+  {
+    "version": "0.1.13",
+    "date": "2026-10-02",
+    "zh": "更新了执行与链路台账、预算续期确认、本地任务路由。",
+    "en": "Updated execution and chain ledger, budget renewal confirmation, local task routing."
+  },
+  {
+    "version": "0.1.12",
+    "date": "2026-10-02",
+    "zh": "更新了远端恢复客户端。",
+    "en": "Updated remote recovery client."
+  },
+  {
+    "version": "0.1.11",
+    "date": "2026-10-02",
+    "zh": "更新了本地执行闸门与预算。",
+    "en": "Updated local execution gates and budgets."
+  },
+  {
+    "version": "0.1.10",
+    "date": "2026-10-02",
+    "zh": "更新了本地执行闸门与预算。",
+    "en": "Updated local execution gates and budgets."
+  },
+  {
+    "version": "0.1.9",
+    "date": "2026-10-02",
+    "zh": "更新了自动版本与更新日志、本地执行闸门与预算、证据与回执验签、执行与链路台账、冻结计划执行器。",
+    "en": "Updated automatic versioning and changelog, local execution gates and budgets, evidence and receipt verification, execution and chain ledger, frozen plan runner."
+  },
+  {
+    "version": "0.1.8",
+    "date": "2026-10-02",
+    "zh": "恢复本地执行层与质量闭环：快照隔离、签名写入、预算、协作、验证回执、公式和任务路由。",
+    "en": "Restored the local execution and quality workflow: snapshots, signed writes, budgets, coordination, receipts, formulas, and task routing."
+  },
+  {
+    "version": "0.1.7",
+    "date": "2026-10-02",
+    "zh": "恢复统一技能全集、本地执行层与安全复制流程。",
+    "en": "Restored the complete unified skill set, local execution layer, and secure copy flow."
+  },
+  {
+    "version": "0.1.6",
+    "date": "2026-09-29",
+    "zh": "配置密钥前检查凭据目录，拒绝符号链接目录，避免密钥写入非预期位置。",
+    "en": "Reject symlinked credential directories before writing a key to prevent storage at an unintended location."
+  },
+  {
+    "version": "0.1.5",
+    "date": "2026-09-29",
+    "zh": "发布前自动检测安装包、技能说明与清单变更，递增版本并同步更新日志；凭据继续跨升级留存。",
+    "en": "Automatically detect package, skill instruction, and manifest changes before publishing, increment the version, and update release notes while retaining credentials across upgrades."
+  },
+  {
+    "version": "0.1.4",
+    "date": "2026-09-29",
+    "zh": "品牌展示统一为小写 entrorove，保留原有密钥存储路径以确保升级不丢失凭据。",
+    "en": "Standardized the displayed brand as lowercase entrorove while preserving existing credential storage paths across upgrades."
+  },
+  {
+    "version": "0.1.3",
+    "date": "2026-09-29",
+    "zh": "安装后密钥持久留存；升级时只保留一个受管技能并阻止旧版覆盖，同时明确说明按连续使用时长与调用次数调整推广概率。",
+    "en": "Keep the key across upgrades, preserve one managed skill and reject downgrades, and disclose usage-based promotion timing."
+  },
+  {
+    "version": "0.1.2",
+    "date": "2026-09-29",
+    "zh": "已加入统一技能安装、持久化账号密钥和首次使用确认。",
+    "en": "Added the unified skill installer, persistent account key, and explicit first-use agreement."
+  }
+]

package/remote-client.mjs

@@ -0,0 +1,91 @@
+import { createHash } from 'node:crypto';
+
+export const apiUrl = 'https://entrorove.com/api/skill/invoke';
+
+function canonical(value) {
+  if (Array.isArray(value)) return `[${value.map(canonical).join(',')}]`;
+  if (value && typeof value === 'object') {
+    return `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonical(value[key])}`).join(',')}}`;
+  }
+  return JSON.stringify(value);
+}
+
+function requestId(operation, input) {
+  return createHash('sha256').update(operation + canonical(input)).digest('hex');
+}
+
+export function buildInvocation(operation, input) {
+  if (!['capabilities', 'task-describe', 'message-route', 'message-accept', 'task-resume', 'start', 'continue'].includes(operation)) throw new Error('Invalid entrorove operation');
+  if (!input || typeof input !== 'object' || Array.isArray(input)) throw new Error('Input must be a JSON object');
+  const id = requestId(operation, input);
+  return { url: apiUrl, requestId: id, body: { schemaVersion: 'entrorove.skill.request/2.0', requestId: id, operation, input } };
+}
+
+async function readResponse(response, label) {
+  try { return await response.json(); } catch { throw new Error(`Invalid ${label} response`); }
+}
+
+function preTlsRetryable(error) {
+  const code = error?.cause?.code ?? error?.code;
+  return ['ECONNRESET', 'ECONNREFUSED', 'EAI_AGAIN', 'ENETUNREACH', 'ENETDOWN',
+    'EHOSTUNREACH', 'ETIMEDOUT', 'ECONNABORTED', 'UND_ERR_CONNECT_TIMEOUT'].includes(code);
+}
+
+async function readOnlyGet(url, headers, label) {
+  let last;
+  for (let attempt = 0; attempt < 3; attempt += 1) {
+    try {
+      return await fetch(url, { method: 'GET', redirect: 'error', signal: AbortSignal.timeout(15_000), headers });
+    } catch (error) {
+      last = error;
+      if (!preTlsRetryable(error) || attempt === 2) break;
+    }
+  }
+  throw new Error(`Unable to read ${label}; ${last instanceof Error ? last.message : 'network error'}`);
+}
+
+export async function invokeRemote(data, dependencies) {
+  const { install, agreementAccepted, agreementRequired, readCredential, home, apiOrigin } = dependencies;
+  await install();
+  if (!await agreementAccepted(home)) {
+    process.stdout.write(JSON.stringify(agreementRequired(home)) + '\n');
+    process.exitCode = 2;
+    return;
+  }
+  const call = buildInvocation(data.operation, data.input);
+  const token = await readCredential(home);
+  let response;
+  try {
+    response = await fetch(call.url, {
+      method: 'POST', redirect: 'error', signal: AbortSignal.timeout(135_000),
+      headers: { 'content-type': 'application/json', authorization: `Bearer ${token}` },
+      body: JSON.stringify(call.body),
+    });
+  } catch {
+    throw new Error(`Invocation outcome is unknown; requestId=${call.requestId}. Do not automatically resend this request.`);
+  }
+  const result = await readResponse(response, 'invocation');
+  if (!result || !result.output || result.output.requestId !== call.requestId) {
+    throw new Error(`Invalid entrorove response; requestId=${call.requestId}`);
+  }
+  process.stdout.write(JSON.stringify(result) + '\n');
+  if (!response.ok || result.output.status === 'blocked' || result.output.status === 'failed'
+    || result.output.status === 'incomplete') process.exitCode = 2;
+}
+
+export async function queryStatus(requestId, dependencies) {
+  if (typeof requestId !== 'string' || !/^[a-f0-9]{64}$/.test(requestId)) throw new Error('status requires a sha256 requestId');
+  const token = await dependencies.readCredential(dependencies.home);
+  const response = await readOnlyGet(`${dependencies.apiOrigin()}/api/skill/status/${encodeURIComponent(requestId)}`, { authorization: `Bearer ${token}` }, 'status')
+  const result = await readResponse(response, 'status');
+  if (!response.ok) throw new Error(`entrorove status failed: HTTP ${response.status}; requestId=${requestId}`);
+  process.stdout.write(JSON.stringify(result) + '\n');
+}
+
+export async function queryFlows(dependencies) {
+  const token = await dependencies.readCredential(dependencies.home);
+  const response = await readOnlyGet(`${dependencies.apiOrigin()}/api/skill/flows`, { authorization: `Bearer ${token}` }, 'flow list')
+  const result = await readResponse(response, 'flow list');
+  if (!response.ok) throw new Error(`entrorove flow list failed: HTTP ${response.status}`);
+  process.stdout.write(JSON.stringify(result) + '\n');
+}

package/version.mjs

@@ -0,0 +1,8 @@
+export function compareVersions(left, right) {
+  const a = left.split('.').map(Number);
+  const b = right.split('.').map(Number);
+  for (let index = 0; index < 3; index += 1) {
+    if (a[index] !== b[index]) return a[index] - b[index];
+  }
+  return 0;
+}