@entrorove/skill 0.1.2 → 0.1.6

package/AGREEMENT.md

@@ -1,33 +1,33 @@
-# Entrorove 使用、隐私与广告信息协议
+# entrorove 使用、隐私与广告信息协议
 
-版本：2026-09-29
+版本：2026-09-29.2
 
-本协议是首次使用 Entrorove 技能时的合并告知与使用条款。只有用户明确选择“同意”后，技能请求才会发送。IDE 的“完全访问”权限只是本地权限，不代表同意本协议。
+本协议是首次使用 entrorove 技能时的合并告知与使用条款。只有用户明确选择“同意”后，技能请求才会发送。IDE 的“完全访问”权限只是本地权限，不代表同意本协议。
 
 ## 1. 技能与权限
 
-- Entrorove 会按用户与 IDE 明确提供的任务、上下文和权限辅助分析、修改代码及运行检查。
+- entrorove 会按用户与 IDE 明确提供的任务、上下文和权限辅助分析、修改代码及运行检查。
 - 高权限操作可能修改或删除文件、运行命令或调用外部服务。用户应检查范围、保留备份，并对有重大后果的操作单独确认。
 - 本协议不扩大 IDE 已授予的权限，也不替代具体高风险操作所需的单独确认。
 
 ## 2. 隐私与数据
 
-- 安装包不会因安装本身自动扫描或上传项目文件。只有在发起技能调用时，才会向 Entrorove API 发送 IDE 明确组装的请求负载。
+- 安装包不会因安装本身自动扫描或上传项目文件。只有在发起技能调用时，才会向 entrorove API 发送 IDE 明确组装的请求负载。
 - 账号服务会处理登录邮箱、密钥哈希与前缀、加密保存的完整密钥、会话与安全记录、调用时间/数量，以及用户自愿提交的留言。已登录用户可再次复制自己的完整密钥。
-- 当前实现不将项目源文件或技能任务负载写入业务数据库，不使用个人信息决定广告展示，不出售个人信息。
+- 当前实现不将项目源文件或技能任务负载写入业务数据库，不出售个人信息。推广选择使用密钥的连续调用时长和调用次数判断展示时机，不分析项目内容或建立跨站画像。
 - 本地同意回执仅保存协议版本、同意结果和时间，不包含邮箱、项目内容或密钥。
 
 ## 3. 消息与广告
 
 - 在长时间任务的“请勿关闭”提示下，服务可按后台配置追加一条带 HTTPS 链接的消息。
 - 商业内容以后台配置的分类标签显示为 `【分类】`，不伪装成执行结果、系统警告或独立推荐。
-- 推广仅在配置的有效期内按权重随机展示；多条推广的权重共同决定展示概率及选择频率。选择不使用用户画像、项目内容或个人信息。
+- 推广仅在配置的有效期和任务使用时段内展示。后台可设置候选权重与概率范围；服务根据同一密钥的连续调用时长及次数调整概率，不分析任务文本或项目文件。
 - 广告链接指向第三方时，第三方的内容、隐私与条款由其自行负责。
 
 ## 4. 风险与责任限制
 
 - 技能按现状提供，不保证所有结果均正确、完整、不中断或适合特定目的。用户应在合并、发布或用于生产前审查修改并运行适当检查。
-- 在适用法律允许的最大范围内，Entrorove 不承担因使用或无法使用技能导致的间接、附带、特殊或后果性损失。
+- 在适用法律允许的最大范围内，entrorove 不承担因使用或无法使用技能导致的间接、附带、特殊或后果性损失。
 - 上述限制不排除法律不允许排除的责任，也不限制欺诈、故意不当行为或适用法律规定的强制性消费者权利。
 
 ## 5. 同意、拒绝与更新
@@ -38,14 +38,14 @@
 
 ---
 
-# Entrorove Terms, Privacy and Advertising Notice
+# entrorove Terms, Privacy and Advertising Notice
 
-Version: 2026-09-29
+Version: 2026-09-29.2
 
 This combined notice applies on first use. A skill request is sent only after an explicit **Accept** choice. Granting an IDE “full access” permission does not accept this agreement.
 
-- **Use and access.** Entrorove acts only on tasks, context and permissions supplied by the user and IDE. Elevated permissions may permit file changes, command execution and external calls. Review scope, keep backups and separately confirm consequential actions.
-- **Data.** Installation alone does not scan or upload project files. The account service processes login email, key hashes and prefixes, an encrypted copy of the full key that a signed-in user can copy again, sessions and security records, invocation time/count, and messages submitted voluntarily. Skill request payloads are received for execution; the current implementation does not store project source files or task payloads in its business database. It does not sell personal information or use personal information to select ads.
-- **Advertising.** A configured message may appear beneath a long-running-task notice. Commercial content carries its configured category label as `【Category】`, includes an HTTPS link, and is selected by the weights of eligible messages without profiling or targeting. Third-party links are governed by their operators.
-- **Risk.** The skill is provided as available without a guarantee that every result is correct, complete, uninterrupted or fit for a particular purpose. Review and test changes before production use. To the maximum extent permitted by applicable law, Entrorove excludes indirect, incidental, special and consequential losses. Nothing excludes non-waivable liability, fraud, wilful misconduct or mandatory consumer rights.
+- **Use and access.** entrorove acts only on tasks, context and permissions supplied by the user and IDE. Elevated permissions may permit file changes, command execution and external calls. Review scope, keep backups and separately confirm consequential actions.
+- **Data.** Installation alone does not scan or upload project files. The account service processes login email, key hashes and prefixes, an encrypted copy of the full key that a signed-in user can copy again, sessions and security records, invocation time/count, and messages submitted voluntarily. Skill request payloads are received for execution; the current implementation does not store project source files or task payloads in its business database. It does not sell personal information. Promotion timing uses consecutive invocation duration and count for the same key, without examining project content or building a cross-site profile.
+- **Advertising.** A configured message may appear beneath a long-running-task notice. Commercial content carries its configured category label as `【Category】` and includes an HTTPS link. Administrators set active dates, task-duration windows, selection weights and probability bounds. The service adjusts display probability using consecutive invocation duration and count, without inspecting task text or project files. Third-party links are governed by their operators.
+- **Risk.** The skill is provided as available without a guarantee that every result is correct, complete, uninterrupted or fit for a particular purpose. Review and test changes before production use. To the maximum extent permitted by applicable law, entrorove excludes indirect, incidental, special and consequential losses. Nothing excludes non-waivable liability, fraud, wilful misconduct or mandatory consumer rights.
 - **Choice.** Declining prevents the skill request from being sent. Material changes require a new explicit acceptance. Mandatory local laws may provide additional rights. Qualified counsel should review this notice before production release for the actual operating and user jurisdictions.

package/CHANGELOG.md

@@ -0,0 +1,26 @@
+# Changelog
+
+## 0.1.6 — 2026-09-29
+
+- 配置密钥前检查凭据目录，拒绝符号链接目录，避免密钥写入非预期位置。
+- Reject symlinked credential directories before writing a key to prevent storage at an unintended location.
+
+## 0.1.5 — 2026-09-29
+
+- 发布前自动检测安装包、技能说明与清单变更，递增版本并同步更新日志；凭据继续跨升级留存。
+- Automatically detect package, skill instruction, and manifest changes before publishing, increment the version, and update release notes while retaining credentials across upgrades.
+
+## 0.1.4 — 2026-09-29
+
+- 品牌展示统一为小写 entrorove，保留原有密钥存储路径以确保升级不丢失凭据。
+- Standardized the displayed brand as lowercase entrorove while preserving existing credential storage paths across upgrades.
+
+## 0.1.3 — 2026-09-29
+
+- 安装后密钥持久留存；升级时只保留一个受管技能并阻止旧版覆盖，同时明确说明按连续使用时长与调用次数调整推广概率。
+- Keep the key across upgrades, preserve one managed skill and reject downgrades, and disclose usage-based promotion timing.
+
+## 0.1.2 — 2026-09-29
+
+- 已加入统一技能安装、持久化账号密钥和首次使用确认。
+- Added the unified skill installer, persistent account key, and explicit first-use agreement.

package/SKILL.md

@@ -5,19 +5,19 @@ description: An engineering skill that understands a task, chooses a fitting wor
 
 # entrorove · 熵巡
 
-Version: 0.1.2.
+Version: 0.1.6.
 
 Read the user's goal and repository instructions first. Preserve the original task through planning, execution and verification. Use the workflow only where it helps; a small, low-risk edit can proceed directly. Never claim a reported step is a verified result.
 
-Install or update the managed copy with `npx @entrorove/skill install`. The installer removes only pristine duplicate entrorove installations and preserves unmanaged files.
+Install or update the managed copy with `npx @entrorove/skill install`. The installer keeps one global managed entrorove skill, replaces its older pristine version, removes only pristine duplicate installations, and preserves hand-edited files. An older package cannot overwrite a newer managed version.
 
-Register or sign in by email at https://entrorove.com. Enter the account key with `npx @entrorove/skill configure` and `{"token":"..."}` on standard input. Never place it in arguments, URLs, project files or logs. Entrorove accounts and keys are independent of other services.
+Register or sign in by email at https://entrorove.com. Enter the account key once with `npx @entrorove/skill configure` and `{"token":"..."}` on standard input. The credential persists in the current OS user's restricted local store across skill upgrades. Before asking again, use the stored credential; a missing or invalid credential must be reported explicitly. Never place the key in arguments, URLs, project files or logs. entrorove accounts and keys are independent of other services.
 
-On first use, the CLI returns a Confirm Protocol-compatible agreement interaction. Render it with the IDE's native confirmation UI, or show its `chatFallback` text when no adapter exists. The user must explicitly accept with `npx @entrorove/skill agreement` and JSON `{"version":"2026-09-29","answer":"accept"}` on standard input before retrying the skill request. A full-access IDE permission never counts as agreement acceptance. The combined terms, privacy and advertising notice is installed as `AGREEMENT.md`.
+On first use or after a material agreement revision, the CLI returns a Confirm Protocol-compatible agreement interaction. Render it with the IDE's native confirmation UI, or show its `chatFallback` text when no adapter exists. The user must explicitly accept with `npx @entrorove/skill agreement` and JSON `{"version":"2026-09-29.2","answer":"accept"}` on standard input before retrying the skill request. A full-access IDE permission never counts as agreement acceptance. The combined terms, privacy and advertising notice is installed as `AGREEMENT.md`.
 
 ## Work with a task
 
-Send JSON on standard input to `npx @entrorove/skill invoke`. Start with `operation: "start"` and an `input.task` containing the goal, work type, risk, difficulty and observed scope facts. Work types are `implementation`, `documentation`, `calculation`, `merge`, `review` and `decision`. Assess facts from the real task and repository; do not invent certainty. Entrorove chooses the workflow. A small task may return `decision: "direct"`, meaning the IDE should do the work without another service call.
+Send JSON on standard input to `npx @entrorove/skill invoke`. Start with `operation: "start"` and an `input.task` containing the goal, work type, risk, difficulty and observed scope facts. Work types are `implementation`, `documentation`, `calculation`, `merge`, `review` and `decision`. Assess facts from the real task and repository; do not invent certainty. entrorove chooses the workflow. A small task may return `decision: "direct"`, meaning the IDE should do the work without another service call.
 
 ```json
 {"operation":"start","input":{"task":{"goal":"Update the checkout flow and verify it","workType":"implementation","risk":"medium","difficulty":"medium","crossModule":true,"parallel":false,"unclear":false,"architectureContract":false}}}
@@ -27,6 +27,4 @@ For a returned `flowId`, continue with `{"operation":"continue","input":{"flowId
 
 For a decision, include `input.task.interaction` with `type` (`confirm`, `choice`, `multi` or `input`), a `question`, `options` (two or more with unique `id` and `label`, or an empty array for input), and a `callback` containing its `operation` and `payload`. Medium- and high-risk decisions also need a `riskDescription`. The decision waits for an explicit answer; it never chooses a default on timeout.
 
-The live API and install package must be deployed and published before this command works outside the local checkout.
-
-When the user gives an actual evaluation after using the skill, offer to publish that feedback. Only after they explicitly agree to public display, send their own words, IDE name and 1–5 rating as JSON on standard input to `npx @entrorove/skill review` with `publicConsent: true`. Never invent, rewrite or infer a review from task completion. The website reads accepted reviews directly from Entrorove's independent database.
+When the user gives an actual evaluation after using the skill, offer to publish that feedback. Only after they explicitly agree to public display, send their own words, IDE name and 1–5 rating as JSON on standard input to `npx @entrorove/skill review` with `publicConsent: true`. Never invent, rewrite or infer a review from task completion. The website reads accepted reviews directly from entrorove's independent database.

package/cli.mjs

@@ -5,6 +5,7 @@ import { promises as fs, realpathSync } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { compareVersions } from './version.mjs';
 
 const packageDir = path.dirname(fileURLToPath(import.meta.url));
 const apiUrl = 'https://entrorove.com/api/skill/invoke';
@@ -17,7 +18,7 @@ const agreementSchema = 'entrorove.agreement-acceptance/1.0';
 const invocationTimeoutMs = 135_000;
 const installLockWaitMs = 10_000;
 const installLockStaleMs = 120_000;
-export const agreementVersion = '2026-09-29';
+export const agreementVersion = '2026-09-29.2';
 
 function sha256(content) {
   return createHash('sha256').update(content).digest('hex');
@@ -48,7 +49,7 @@ async function sourceBundle() {
     content.set(name, await fs.readFile(path.join(packageDir, name)));
   }
   if (!content.get('SKILL.md').toString('utf8').includes(`Version: ${manifest.version}.`)) {
-    throw new Error('Entrorove skill instructions have a mismatched version');
+    throw new Error('entrorove skill instructions have a mismatched version');
   }
   const hashes = Object.fromEntries(installFiles.map((name) => [name, sha256(content.get(name))]));
   return { manifest, content, hashes };
@@ -79,7 +80,7 @@ export function agreementInteraction() {
     schemaVersion: 'confirm.interaction/1.0',
     requestId: `entrorove-agreement-${agreementVersion}`,
     type: 'confirm',
-    question: `首次使用前，请阅读 Entrorove 使用、隐私与广告信息协议（${agreementVersion}）。是否同意？`,
+    question: `首次使用前，请阅读 entrorove 使用、隐私与广告信息协议（${agreementVersion}）。是否同意？`,
     options: [
       { id: 'accept', label: '同意', hint: '记录本地回执并允许后续技能调用' },
       { id: 'decline', label: '不同意', hint: '不发送技能请求' },
@@ -104,7 +105,7 @@ function agreementRequired(home) {
     agreement,
     interaction: agreementInteraction(),
     chatFallback: [
-      `Entrorove 首次使用确认（${agreementVersion}）`,
+      `entrorove 首次使用确认（${agreementVersion}）`,
       `请先阅读：${agreement}`,
       '1. accept — 同意并继续',
       '2. decline — 不同意，不发送请求',
@@ -168,7 +169,7 @@ async function removeStaleInstallLock(lock) {
   const state = await statOrNull(lock);
   if (!state) return true;
   if (!state.isDirectory() || state.isSymbolicLink()) {
-    throw new Error('Entrorove install lock is not a directory');
+    throw new Error('entrorove install lock is not a directory');
   }
   if (Date.now() - state.mtimeMs < installLockStaleMs) return false;
   let owner;
@@ -195,7 +196,7 @@ async function removeStaleInstallLock(lock) {
   const moved = await fs.lstat(quarantine);
   if (moved.ino !== state.ino || moved.dev !== state.dev) {
     await fs.rename(quarantine, lock);
-    throw new Error('Entrorove install lock changed during stale recovery');
+    throw new Error('entrorove install lock changed during stale recovery');
   }
   await fs.rm(quarantine, { recursive: true });
   return true;
@@ -211,7 +212,7 @@ async function withInstallLock(parent, action) {
     } catch (error) {
       if (error.code !== 'EEXIST') throw error;
       if (await removeStaleInstallLock(lock)) continue;
-      if (Date.now() >= deadline) throw new Error('Entrorove install is busy');
+      if (Date.now() >= deadline) throw new Error('entrorove install is busy');
       await new Promise(resolve => setTimeout(resolve, 100));
     }
   }
@@ -229,6 +230,9 @@ async function updateGlobalInstall(target, bundle) {
   await fs.mkdir(parent, { recursive: true, mode: 0o700 });
   const previous = await managedState(target);
   if (previous === false) throw new Error('Global entrorove skill is not pristine and managed; refusing overwrite');
+  if (previous && compareVersions(previous.version, bundle.manifest.version) > 0) {
+    throw new Error('A newer managed entrorove skill is installed; use the latest package');
+  }
   if (previous?.version === bundle.manifest.version
     && installFiles.every((name) => previous.files[name] === bundle.hashes[name])) return false;
   const stage = path.join(parent, `.entrorove-stage-${randomUUID()}`);
@@ -314,14 +318,20 @@ async function stdinJson() {
   return value;
 }
 
+async function preparePrivateDirectory(parent) {
+  await fs.mkdir(parent, { recursive: true, mode: 0o700 });
+  const state = await fs.lstat(parent);
+  if (!state.isDirectory() || state.isSymbolicLink()) throw new Error('Credential directory must be a real directory');
+  if (process.platform !== 'win32') await fs.chmod(parent, 0o700);
+}
+
 async function writeCredential(token, home) {
   if (typeof token !== 'string' || !/^ent_[A-Za-z0-9_-]{16,256}$/.test(token)) {
     throw new Error('Invalid entrorove key');
   }
   const file = credentialPath(home);
   const parent = path.dirname(file);
-  await fs.mkdir(parent, { recursive: true, mode: 0o700 });
-  if (process.platform !== 'win32') await fs.chmod(parent, 0o700);
+  await preparePrivateDirectory(parent);
   const existing = await statOrNull(file);
   if (existing && (!existing.isFile() || existing.isSymbolicLink())) throw new Error('Credential path is not a regular file');
   const stage = path.join(parent, `.credential-${randomUUID()}.tmp`);
@@ -369,8 +379,7 @@ async function writeAgreementAcceptance(data, home) {
   if (data.answer === 'decline') return false;
   const file = agreementPath(home);
   const parent = path.dirname(file);
-  await fs.mkdir(parent, { recursive: true, mode: 0o700 });
-  if (process.platform !== 'win32') await fs.chmod(parent, 0o700);
+  await preparePrivateDirectory(parent);
   const existing = await statOrNull(file);
   if (existing && (!existing.isFile() || existing.isSymbolicLink())) {
     throw new Error('Agreement path is not a regular file');

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.skill-manifest/1.0",
   "name": "entrorove",
-  "version": "0.1.2",
+  "version": "0.1.6",
   "endpoint": "https://entrorove.com",
   "requestSchemaVersion": "entrorove.skill.request/1.0"
 }

package/package.json

@@ -1,18 +1,24 @@
 {
   "name": "@entrorove/skill",
-  "version": "0.1.2",
+  "version": "0.1.6",
   "type": "module",
   "bin": {
     "entrorove": "cli.mjs"
   },
   "files": [
     "cli.mjs",
+    "version.mjs",
     "SKILL.md",
     "AGREEMENT.md",
-    "manifest.json"
+    "manifest.json",
+    "CHANGELOG.md",
+    "releases.json",
+    "release.mjs",
+    "release-state.json"
   ],
   "scripts": {
-    "test": "node --test test/*.test.mjs"
+    "test": "node --test test/*.test.mjs",
+    "prepublishOnly": "node release.mjs"
   },
   "engines": {
     "node": ">=20"

package/release-state.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "entrorove.release-state/1.0",
+  "version": "0.1.6",
+  "digest": "4ab58749501fc5c9e3fe609b28142ea5840eea737c26d709b775a463edf9df47",
+  "files": {
+    "cli.mjs": "35e9f546dc8750d034c4804030361388ea81551366494e9d16a2b65cc5c75fcb",
+    "version.mjs": "1f392147d72c40af4b03b307ea607075fb815af5174fa07e254b95fe12dbf3e7",
+    "SKILL.md": "3aa9031fe5df2989096d4153717a439d646d30b8ab03d2df2f0207731b1e400a",
+    "AGREEMENT.md": "24a38ad19b8364a7fafed145782fb91469bbf3bb018f0c845b02c4dc2a534f4e",
+    "package.json": "a63df90309025a4fca247b3236c4602d81cea6ca3c52b6e5a2acfafc8c90dfe9",
+    "manifest.json": "a2086fe3e4dded88775ef7d9cd978e958dc6c8d42f16e7f559d77562ef5c6f59",
+    "release.mjs": "7db31862735e8e734207cbba05ac2a5f58e2faf9b4c752100a6af098f9eaf7eb"
+  }
+}

package/release.mjs

@@ -0,0 +1,131 @@
+import { createHash } from 'node:crypto'
+import { readFile, writeFile, rename, rm } from 'node:fs/promises'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const directory = path.dirname(fileURLToPath(import.meta.url))
+const sourceFiles = [
+  'cli.mjs', 'version.mjs', 'SKILL.md', 'AGREEMENT.md',
+  'package.json', 'manifest.json', 'release.mjs',
+]
+const stateFile = 'release-state.json'
+const changelogFile = 'CHANGELOG.md'
+const releasesFile = 'releases.json'
+
+async function read(name) {
+  return readFile(path.join(directory, name), 'utf8')
+}
+
+function digest(value) {
+  return createHash('sha256').update(value).digest('hex')
+}
+
+function normalized(name, text) {
+  if (name === 'SKILL.md') {
+    return text.replace(/^Version: \d+\.\d+\.\d+\.$/m, 'Version: <release>.')
+  }
+  if (name === 'package.json' || name === 'manifest.json') {
+    const metadata = JSON.parse(text)
+    metadata.version = '<release>'
+    return JSON.stringify(metadata)
+  }
+  return text
+}
+
+async function sourceDigests() {
+  const entries = await Promise.all(sourceFiles.map(async name =>
+    [name, digest(normalized(name, await read(name)))]))
+  return Object.fromEntries(entries)
+}
+
+function versionNext(version) {
+  const parts = version.split('.').map(Number)
+  if (parts.length !== 3 || parts.some(part => !Number.isSafeInteger(part) || part < 0)) {
+    throw new Error('Skill version is not semantic version MAJOR.MINOR.PATCH')
+  }
+  return `${parts[0]}.${parts[1]}.${parts[2] + 1}`
+}
+
+function releaseNote(changed) {
+  const suppliedZh = process.env.ENTROROVE_RELEASE_NOTE_ZH?.trim()
+  const suppliedEn = process.env.ENTROROVE_RELEASE_NOTE_EN?.trim()
+  if (Boolean(suppliedZh) !== Boolean(suppliedEn)) {
+    throw new Error('Release notes must provide both Chinese and English')
+  }
+  if (suppliedZh && suppliedEn) return {
+    zh: suppliedZh.replaceAll(/\s+/g, ' '), en: suppliedEn.replaceAll(/\s+/g, ' '),
+  }
+  const labels = {
+    'cli.mjs': { zh: '技能运行和受管安装', en: 'skill runtime and managed installation' },
+    'version.mjs': { zh: '版本安全检查', en: 'version safety checks' },
+    'SKILL.md': { zh: 'IDE 工作流程说明', en: 'IDE workflow instructions' },
+    'AGREEMENT.md': { zh: '使用、隐私与推广告知', en: 'usage, privacy, and promotion notice' },
+    'package.json': { zh: '安装包配置', en: 'package configuration' },
+    'manifest.json': { zh: '技能清单', en: 'skill manifest' },
+    'release.mjs': { zh: '自动版本与更新日志', en: 'automatic versioning and changelog' },
+  }
+  return {
+    zh: `更新了${changed.map(name => labels[name].zh).join('、')}。`,
+    en: `Updated ${changed.map(name => labels[name].en).join(', ')}.`,
+  }
+}
+
+async function writeAll(changes) {
+  const originals = new Map()
+  const staged = []
+  try {
+    for (const [name, content] of changes) {
+      originals.set(name, await read(name))
+      const temporary = path.join(directory, `.${name}.${process.pid}.tmp`)
+      await writeFile(temporary, content, { flag: 'wx', mode: 0o600 })
+      staged.push([name, temporary])
+    }
+    for (const [name, temporary] of staged) await rename(temporary, path.join(directory, name))
+  } catch (error) {
+    for (const [name, content] of originals) await writeFile(path.join(directory, name), content)
+    for (const [, temporary] of staged) await rm(temporary, { force: true })
+    throw error
+  }
+}
+
+const metadata = JSON.parse(await read('package.json'))
+const manifest = JSON.parse(await read('manifest.json'))
+const state = JSON.parse(await read(stateFile))
+const skill = await read('SKILL.md')
+if (metadata.version !== manifest.version || metadata.version !== state.version
+  || !skill.includes(`Version: ${metadata.version}.`)) {
+  throw new Error('Skill package, manifest, instruction, and release state versions differ')
+}
+const files = await sourceDigests()
+const currentDigest = digest(JSON.stringify(files))
+if (currentDigest !== state.digest) {
+  const changed = sourceFiles.filter(name => files[name] !== state.files[name])
+  if (changed.length === 0) throw new Error('Skill source digest changed without a changed file')
+  const next = versionNext(metadata.version)
+  metadata.version = next
+  manifest.version = next
+  const nextSkill = skill.replace(`Version: ${state.version}.`, `Version: ${next}.`)
+  const changelog = await read(changelogFile)
+  const date = new Date().toISOString().slice(0, 10)
+  const notes = releaseNote(changed)
+  const entry = `## ${next} — ${date}\n\n- ${notes.zh}\n- ${notes.en}\n\n`
+  const nextLog = changelog.replace('# Changelog\n\n', `# Changelog\n\n${entry}`)
+  if (nextLog === changelog) throw new Error('Changelog header is missing')
+  const releases = JSON.parse(await read(releasesFile))
+  if (!Array.isArray(releases) || releases[0]?.version !== state.version) {
+    throw new Error('Release index does not match current skill version')
+  }
+  const nextState = { schemaVersion: 'entrorove.release-state/1.0', version: next,
+    digest: currentDigest, files }
+  await writeAll([
+    ['package.json', JSON.stringify(metadata, null, 2) + '\n'],
+    ['manifest.json', JSON.stringify(manifest, null, 2) + '\n'],
+    ['SKILL.md', nextSkill],
+    [changelogFile, nextLog],
+    [releasesFile, JSON.stringify([{ version: next, date, ...notes }, ...releases], null, 2) + '\n'],
+    [stateFile, JSON.stringify(nextState, null, 2) + '\n'],
+  ])
+  process.stdout.write(`entrorove skill ${next}: ${notes.en}\n`)
+} else {
+  process.stdout.write(`entrorove skill ${state.version}: no source change\n`)
+}

package/releases.json

@@ -0,0 +1,32 @@
+[
+  {
+    "version": "0.1.6",
+    "date": "2026-09-29",
+    "zh": "配置密钥前检查凭据目录，拒绝符号链接目录，避免密钥写入非预期位置。",
+    "en": "Reject symlinked credential directories before writing a key to prevent storage at an unintended location."
+  },
+  {
+    "version": "0.1.5",
+    "date": "2026-09-29",
+    "zh": "发布前自动检测安装包、技能说明与清单变更，递增版本并同步更新日志；凭据继续跨升级留存。",
+    "en": "Automatically detect package, skill instruction, and manifest changes before publishing, increment the version, and update release notes while retaining credentials across upgrades."
+  },
+  {
+    "version": "0.1.4",
+    "date": "2026-09-29",
+    "zh": "品牌展示统一为小写 entrorove，保留原有密钥存储路径以确保升级不丢失凭据。",
+    "en": "Standardized the displayed brand as lowercase entrorove while preserving existing credential storage paths across upgrades."
+  },
+  {
+    "version": "0.1.3",
+    "date": "2026-09-29",
+    "zh": "安装后密钥持久留存；升级时只保留一个受管技能并阻止旧版覆盖，同时明确说明按连续使用时长与调用次数调整推广概率。",
+    "en": "Keep the key across upgrades, preserve one managed skill and reject downgrades, and disclose usage-based promotion timing."
+  },
+  {
+    "version": "0.1.2",
+    "date": "2026-09-29",
+    "zh": "已加入统一技能安装、持久化账号密钥和首次使用确认。",
+    "en": "Added the unified skill installer, persistent account key, and explicit first-use agreement."
+  }
+]

package/version.mjs

@@ -0,0 +1,8 @@
+export function compareVersions(left, right) {
+  const a = left.split('.').map(Number);
+  const b = right.split('.').map(Number);
+  for (let index = 0; index < 3; index += 1) {
+    if (a[index] !== b[index]) return a[index] - b[index];
+  }
+  return 0;
+}