@entrorove/skill 0.1.21 → 0.1.23

package/CAPABILITY-MAP.md

@@ -0,0 +1,18 @@
+# v2 capability map (AC-16)
+
+This is the operation-level inventory for the eight legacy domains. `equivalent` means the v2 operation preserves the contract; `narrower` means the operation is available behind a stricter v2 gate or with a smaller side-effect boundary; `uncovered` means the old operation remains intentionally unavailable and callers must receive an explicit unsupported result.
+
+| Legacy domain | Legacy operations | v2 mapping and semantics |
+| --- | --- | --- |
+| aimlock | capabilities, help, intake, classify, scope-contract, skill-route, propose-nodes, accept-nodes, snapshot-plan, mutate-gate, continuity-check, interrupt, keep-alive, delivery-doc, validate-json, snapshot-verify, run-status, chain-plan, chain-status, feedback | `capabilities/help/intake` → equivalent shared discovery; `classify/skill-route/scope-contract/propose-nodes/accept-nodes/continuity-check/validate-json` → equivalent through `task-describe/message-route`; `snapshot-plan/snapshot-verify/mutate-gate/interrupt/keep-alive/run-status/chain-plan/chain-status/feedback/delivery-doc` → narrower through persisted flow state, local guarded writes, cancellation, status, and evidence gates. |
+| blueprint | capabilities, help, intake, validate, compile-inline, acceptance-report | `capabilities/help/intake/validate/compile-inline/acceptance-report` → equivalent through `blueprint` runtime; acceptance evidence is caller supplied and cannot be self-promoted to verified. |
+| calctool | capabilities, help, intake, validate, compile-inline | `capabilities/help/intake/validate/compile-inline` → equivalent through `calctool`; `formula-evaluate/formula-graph/formula-final-gate` → local Decimal execution and final-gate evidence. |
+| swarm | capabilities, help, intake, org-chart, blueprint-bridge, dispatch, claim, report, accept, swarm-status, traffic-light, security-check, validate-json, heartbeat, reclaim | `capabilities/help/intake/org-chart/blueprint-bridge/dispatch/claim/report/accept/swarm-status/traffic-light/security-check/validate-json/heartbeat/reclaim` → narrower through server-routed coordination, bounded worker counts, leases, and persisted reported/verified states. |
+| validator | capabilities, help, intake, plan, validate-structure, security-scan, compliance-audit, functional-verify, verdict | All nine → equivalent through the `validator` runtime; `functional-verify` requires API-side receipt verification and `verdict` cannot turn reported evidence green. |
+| mergeguard | capabilities, help, intake, resolve-propose, ruleguard-scan, ruleguard-compile | All six → equivalent through `mergeguard`; `merge-verified` remains a local operation and fails closed without a valid baseline, evidence, and receipt. |
+| archguard | capabilities, help, intake, contract-create, contract-get, contract-update, template-list, checkpoint, rules-scan, complexity-report, drift-status, ledger-query | All twelve → equivalent through `archguard`; contract writes and ledger records are local and path/baseline bound. |
+| confirm-protocol | capabilities, help, interaction-request, interaction-answer, chat-render, memory-set, memory-list, memory-clear, batch-request, audit-query | All ten → equivalent for pure protocol operations; native/mobile notifier operations remain explicitly planned and are returned as unavailable. High-risk interaction keeps `default: null`, no memory, and no batch approval. |
+
+The local execution surface also covers `snapshot-plan`, `snapshot-verify`, `mutate-gate`, `gate-issue`, `gate-verify`, `guarded-write`, `budget-init`, `budget-context`, `budget-read`, `budget-status`, `budget-extend`, `budget-auto-renew-request`, `budget-auto-renew`, `budget-auto-renew-stop`, `peer-coordinate`, `spawn-bind`, `peer-complete`, `complete`, `lease-verify`, `evidence-sign`, `evidence-verify`, `merge-verified`, `rollback`, `final-gate`, `formula-evaluate`, `formula-graph`, `formula-final-gate`, `calculation-final-gate`, `run-approved-plan`, `branch-create`, `branch-list`, `branch-switch`, `diff-report`, `preflight`, `ledger-query`, `chain-init`, `chain-resume`, `chain-status`, `chain-answer`, `branch-create-virtual`, `chain-ledger-init`, `chain-ledger-status`, `chain-ledger-query`, `probe`, `reassess`, `task-describe`, `message-route`, `message-accept`, and `task-resume`. Local branch operations are virtual ledger records and never create Git branches or worktrees.
+
+The only intentionally uncovered legacy surface is an old notifier or an operation that would execute remote filesystem changes. These are represented as planned or narrowed behavior in capabilities; no adapter may silently substitute a different operation.

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.1.23 — 2026-10-06
+
+- 修复受管安装漏装能力映射文档的问题；旧安装自动补齐，用户编辑仍受保护。
+- Fixed the missing capability map in managed installations; older installations are repaired while user edits remain protected.
+
+## 0.1.22 — 2026-10-04
+
+- 完整补齐隔离检测、运行时生成、基线契约、云任务取消与事件流、能力覆盖映射及隐私告知。
+- Completed isolation detection, reproducible runtime generation, baseline contracts, cloud cancellation and event streaming, capability coverage mapping, and privacy notices.
+
 ## 0.1.21 — 2026-10-04
 
 - 更新了本地执行闸门与预算。

package/SKILL.md

@@ -5,7 +5,7 @@ description: An engineering skill that understands a task, chooses a fitting wor
 
 # entrorove · 熵巡
 
-Version: 0.1.21.
+Version: 0.1.23.
 
 Read the user's goal and repository instructions first. Preserve the original task through planning, execution and verification. Use the workflow only where it helps; a small, low-risk edit can proceed directly. Never claim a reported step is a verified result.
 
@@ -23,6 +23,10 @@ Send JSON on standard input to `npx @entrorove/skill invoke`. Call `operation: "
 {"operation":"start","input":{"task":{"goal":"Update the checkout flow and verify it","workType":"implementation","risk":"medium","difficulty":"medium","crossModule":true,"parallel":false,"unclear":false,"architectureContract":false}}}
 ```
 
+For `workType: "merge"`, include `baselineRef` with the concrete branch, tag, commit, or review baseline used for comparison. The API rejects a merge plan without it, and the baseline must remain unchanged through verification. For `workType: "decision"`, include the structured `interaction`; elevated-risk decisions also require `riskDescription`.
+
+The v2 capability map is recorded in [`CAPABILITY-MAP.md`](CAPABILITY-MAP.md). It maps every legacy domain and operation to its v2 equivalent, narrower semantics, or an explicitly documented uncovered area; adapters must not silently substitute an uncovered operation.
+
 For a returned `flowId`, continue with `{"operation":"continue","input":{"flowId":"<returned ID>","operation":"<next operation>","payload":{}}}`. Fill `payload` with the next operation's required input. Keep the same task and evidence in the IDE. For later work, `input.task.phase` may be `plan`, `coordinate`, `architecture`, `verify`, `merge` or `decision`; it remains the same skill entry point. Never treat an unknown request outcome as permission to retry a paid or mutating action; query the original request ID when the workflow supports it.
 
 The v2 progress sequence is durable and ordered: the first runtime step reports `intake`, then the applicability `gate` is recorded and verified, then the selected contract or plan steps run. Every step can be `pending`, `running`, `reported`, `verified`, `blocked` or `failed`; only a completed verdict with trusted evidence is green.

package/cli.mjs

@@ -11,7 +11,7 @@ import { apiUrl, buildInvocation, invokeRemote, queryFlows, queryStatus } from '
 const packageDir = path.dirname(fileURLToPath(import.meta.url));
 const reviewUrl = 'https://entrorove.com/api/ide-reviews';
 const markerName = '.entrorove-managed.json';
-const installFiles = ['SKILL.md', 'AGREEMENT.md', 'manifest.json'];
+const installFiles = ['SKILL.md', 'CAPABILITY-MAP.md', 'AGREEMENT.md', 'manifest.json'];
 const markerSchema = 'entrorove.managed-install/1.0';
 const credentialSchema = 'entrorove.credential/1.0';
 const agreementSchema = 'entrorove.agreement-acceptance/1.0';

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.skill-manifest/1.0",
   "name": "entrorove",
-  "version": "0.1.21",
+  "version": "0.1.23",
   "endpoint": "https://entrorove.com",
   "requestSchemaVersion": "entrorove.skill.request/2.0",
   "supportedRequestSchemaVersions": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@entrorove/skill",
-  "version": "0.1.21",
+  "version": "0.1.23",
   "type": "module",
   "bin": {
     "entrorove": "cli.mjs"
@@ -25,7 +25,8 @@
     "CHANGELOG.md",
     "releases.json",
     "release.mjs",
-    "release-state.json"
+    "release-state.json",
+    "CAPABILITY-MAP.md"
   ],
   "scripts": {
     "test": "node --test test/*.test.mjs",

package/release-state.json

@@ -1,15 +1,16 @@
 {
   "schemaVersion": "entrorove.release-state/1.0",
-  "version": "0.1.21",
-  "digest": "0f39c9c357df24e41585a8afd639b8245eac02b00b05ab468600c174191619e3",
+  "version": "0.1.23",
+  "digest": "2795a4d4218fe32b03c708b8dc4940a98a301452c709daa19d8b58ce6d4ab861",
   "files": {
-    "cli.mjs": "dd56d1a184dab5c5e07abf01d1c5e6f49e1df47fee5cc6d82afc2497c7105194",
+    "cli.mjs": "44303d5342d3108f6377c45c3275e989be043c9ec7274b24b37e55edeb8a2332",
     "version.mjs": "1f392147d72c40af4b03b307ea607075fb815af5174fa07e254b95fe12dbf3e7",
-    "SKILL.md": "38fae5a117e832c17eb8d0d2db8b37193147fb91d012a8ba367b8390a5b983a7",
+    "SKILL.md": "da0566308440a676f004dd6fed47c8ffe2c0be17497ef3d76ef29f94fe090c5c",
+    "CAPABILITY-MAP.md": "276426da6b76820b3a502fe4cd80ca246ccab2d6c70036f89793b63fbced1552",
     "AGREEMENT.md": "7a9a95c7d796f356d48f65c2b9a2f7b425548f0efb90241cba2579ae195089e3",
-    "package.json": "025f69bb9c39bfe1f6a70b66c8aa138e7e38dcfb076102df6acfa1945668c0e5",
+    "package.json": "e6d26143455badf1d35697a177973b09bd0b84cb6cec0ebc425fb2f69a4e0088",
     "manifest.json": "ab06e307795bc9da5add926752b6c4dbdaf18625090261a035aa356a679c504f",
-    "release.mjs": "d7940fc0411cf375f78bb100d88e7535b77461261b911444fa74351fb92b624f",
+    "release.mjs": "2074abd5c892487ea393f36ca56544230d69c9d158d2b6f48fea6ff0e0b3f8a9",
     "local-cli.mjs": "6754d6d974c0f4775f7c3679751c3c3605ec8cfe6975bb152465fc37bd518d09",
     "local-state-lock.mjs": "1dbf64264642a0851faf043e07ee9f66d2ad0508e9f799b0626246e42fae893e",
     "local-execution.mjs": "8c5bb7359f4baf4c5388c9a70863a2720722c406654952b6295fcec422e6ab8c",

package/release.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'node:url'
 
 const directory = path.dirname(fileURLToPath(import.meta.url))
 const sourceFiles = [
-  'cli.mjs', 'version.mjs', 'SKILL.md', 'AGREEMENT.md',
+  'cli.mjs', 'version.mjs', 'SKILL.md', 'CAPABILITY-MAP.md', 'AGREEMENT.md',
   'package.json', 'manifest.json', 'release.mjs',
   'local-cli.mjs', 'local-state-lock.mjs', 'local-execution.mjs', 'local-integrity.mjs', 'local-formula.mjs', 'local-ledger.mjs',
   'local-approved-plan.mjs', 'local-budget-renewal.mjs', 'local-probe.mjs',
@@ -62,6 +62,7 @@ function releaseNote(changed) {
     'cli.mjs': { zh: '技能运行和受管安装', en: 'skill runtime and managed installation' },
     'version.mjs': { zh: '版本安全检查', en: 'version safety checks' },
     'SKILL.md': { zh: 'IDE 工作流程说明', en: 'IDE workflow instructions' },
+    'CAPABILITY-MAP.md': { zh: '能力覆盖映射', en: 'capability coverage map' },
     'AGREEMENT.md': { zh: '使用、隐私与推广告知', en: 'usage, privacy, and promotion notice' },
     'package.json': { zh: '安装包配置', en: 'package configuration' },
     'manifest.json': { zh: '技能清单', en: 'skill manifest' },

package/releases.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.1.23",
+    "date": "2026-10-06",
+    "zh": "修复受管安装漏装能力映射文档的问题；旧安装自动补齐，用户编辑仍受保护。",
+    "en": "Fixed the missing capability map in managed installations; older installations are repaired while user edits remain protected."
+  },
+  {
+    "version": "0.1.22",
+    "date": "2026-10-04",
+    "zh": "完整补齐隔离检测、运行时生成、基线契约、云任务取消与事件流、能力覆盖映射及隐私告知。",
+    "en": "Completed isolation detection, reproducible runtime generation, baseline contracts, cloud cancellation and event streaming, capability coverage mapping, and privacy notices."
+  },
   {
     "version": "0.1.21",
     "date": "2026-10-04",