@entrorove/skill 0.1.31 → 0.1.32

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.32 — 2026-10-11
+
+- 增加云端沙箱状态与用量只读查询，并支持按任务直接读取真实状态。
+- Added read-only cloud sandbox status and direct reads of authoritative task state and usage.
+
 ## 0.1.31 — 2026-10-11
 
 - 修复云端沙箱任务响应处理并保留可继续的任务上下文。

package/SKILL.md

@@ -5,7 +5,7 @@ description: An engineering skill that understands a task, chooses a fitting wor
 
 # entrorove · 熵巡
 
-Version: 0.1.31.
+Version: 0.1.32.
 
 Read the user's goal and repository instructions first. Preserve the original task through planning, execution and verification. Use the workflow only where it helps; a small, low-risk edit can proceed directly. Never claim a reported step is a verified result.
 
@@ -25,11 +25,13 @@ On first use or after a material agreement revision, the CLI returns a Confirm P
 
 Send JSON on standard input to `npx @entrorove/skill invoke`. Before every execution call, discover `operation: "capabilities"` with `{}` and validate input against the returned operation schema. The CLI performs remote discovery automatically; local adapters discover the installed contract before execution. Discovery failure stops execution. Adapters that expose the four-step task route can call `task-describe`, `message-route`, `message-accept` and `task-resume` in order; `start` remains the one-call workflow equivalent. Then start with `operation: "start"` and an `input.task` containing the goal, work type, risk, difficulty and observed scope facts. Work types are `implementation`, `documentation`, `calculation`, `merge`, `review`, `decision` and `diagnosis`. Assess facts from the real task and repository; do not invent certainty. entrorove chooses the workflow. A small task may return `decision: "direct"`, meaning the IDE should do the work without another service call. The public envelope is `entrorove.skill.request/2.0`; `requestId` is the SHA-256 digest of `operation + canonical(input)`. Version 1.0 remains accepted for older callers.
 
-`start` creates a normal durable skill flow. It does not create a cloud-sandbox task or contribute to cloud-sandbox usage. To create a real cloud-sandbox task, call `operation: "cloud-task"` with `input.goal`; the CLI returns a Confirm Protocol choice interaction before any cloud request. Continue the same request with `sandboxChoice: "use"` or `sandboxChoice: "local"`. `use` calls the authenticated `/api/cloud-task` endpoint and returns the real `taskId`; `local` skips only this task. A `needs-input`, `blocked` or `failed` result is not a successful dispatch and must be shown to the user.
+`start` creates a normal durable skill flow. It does not create a cloud-sandbox task or contribute to cloud-sandbox usage. To create a real cloud-sandbox task, call `operation: "cloud-task"` with `input.goal`; the CLI returns a Confirm Protocol choice interaction before any cloud request. Continue the same request with `sandboxChoice: "use"` or `sandboxChoice: "local"`. `use` calls the authenticated `/api/cloud-task` endpoint and returns the real `taskId`; `local` skips only this task. The server is authoritative for account entitlement and the account-wide sandbox preference: a disabled or unavailable account returns `blocked` and creates no task. A `needs-input`, `blocked` or `failed` result is not a successful dispatch and must be shown to the user.
+
+After dispatch, query the real task without resending it with the CLI-only `operation: "cloud-status"` and `input.taskId`, or `npx @entrorove/skill cloud-status` with the same JSON. This special CLI route reads the authoritative task list and usage endpoints; it is not part of the `/api/skill/invoke` capability map. The read-only result includes the current task status, public title/summary, and recorded model usage when available. A missing task is reported explicitly; it is never treated as completed. This is the skill-side status and usage check for cloud tasks; the web dock may additionally subscribe to its event stream.
 
 ### Per-task cloud sandbox choice
 
-When the host exposes an enabled cloud-sandbox preference and a new task is about to dispatch a cloud model, ask once whether this task should use the cloud sandbox. This is a low-risk routing preference, separate from agreement acceptance and the medium/high-risk confirmations below. Offer `use for this task` and `continue locally`; if the user gives no answer, use the cloud sandbox by the host's stated timeout default. An explicit opt-out applies only to the current task and must not change the account-wide sandbox preference. Do not ask again while continuing or resuming the same task. If the account-wide preference is disabled or unavailable, do not dispatch a cloud task and do not show a misleading per-task prompt; preserve the normal local workflow and report the prerequisite clearly. This choice never bypasses the normal task schema, mutation authority, evidence checks, or risk confirmation.
+When the host exposes an enabled cloud-sandbox preference and a new task is about to dispatch a cloud model, ask once whether this task should use the cloud sandbox. This is a low-risk routing preference, separate from agreement acceptance and the medium/high-risk confirmations below. Offer `use for this task` and `continue locally`; if the user gives no answer, use the cloud sandbox by the host's stated timeout default. An explicit opt-out applies only to the current task and must not change the account-wide sandbox preference. Do not ask again while continuing or resuming the same task. If the host cannot preflight the account preference, show the choice only as a routing decision and let the server's authoritative `/api/cloud-task` check return a clear `blocked` prerequisite; never claim that a task started after a blocked response. This choice never bypasses the normal task schema, mutation authority, evidence checks, or risk confirmation.
 
 ```json
 {"operation":"start","input":{"task":{"goal":"Update the checkout flow and verify it","workType":"implementation","risk":"medium","difficulty":"medium","crossModule":true,"parallel":false,"unclear":false,"architectureContract":false}}}

package/cli.mjs

@@ -12,7 +12,7 @@ import { runTaskMessageCli } from './task-message-cli.mjs';
 import { apiUrl, buildInvocation, invokeRemote, queryFlows, queryStatus } from './remote-client.mjs';
 const packageDir = path.dirname(fileURLToPath(import.meta.url));
 import { buildReview, submitSkillFeedback, feedbackNoticeVersion } from './review-client.mjs';
-import { runCloudTask as dispatchCloudTask } from './cloud-task-client.mjs';
+import { queryCloudTask, runCloudTask as dispatchCloudTask } from './cloud-task-client.mjs';
 const markerName = '.entrorove-managed.json';
 const installFiles = ['SKILL.md', 'CAPABILITY-MAP.md', 'AGREEMENT.md', 'manifest.json'];
 const markerSchema = 'entrorove.managed-install/1.0';
@@ -389,10 +389,20 @@ export async function runCloudTask(input, dependencies = remoteDependencies()) {
   return result;
 }
 
+export async function runCloudStatus(input, dependencies = remoteDependencies()) {
+  const result = await queryCloudTask(input?.taskId, dependencies);
+  process.stdout.write(`${JSON.stringify(result)}\n`);
+  if (['blocked', 'failed', 'missing'].includes(result.status)) process.exitCode = 2;
+  return result;
+}
+
 async function invoke(data) {
   if (data?.operation === 'cloud-task') {
     return runCloudTask(data.input, remoteDependencies());
   }
+  if (data?.operation === 'cloud-status') {
+    return runCloudStatus(data.input, remoteDependencies());
+  }
   return invokeRemote(data, remoteDependencies());
 }
 
@@ -423,6 +433,8 @@ async function main() {
     await runTaskMessageCli(args, await stdinJson(), remoteDependencies());
   } else if (command === 'cloud-task' && args.length === 0) {
     await runCloudTask(await stdinJson());
+  } else if (command === 'cloud-status' && args.length === 0) {
+    await runCloudStatus(await stdinJson());
   } else if (command === 'review' && args.length === 0) {
     await submitReview(await stdinJson());
   } else if (command === 'status' && args.length === 1) {
@@ -444,7 +456,7 @@ async function main() {
   } else if (command === 'local') {
     await runLocal(args);
   } else {
-    throw new Error('Usage: entrorove install | configure | agreement | invoke | host-message [adapterModulePath] | cloud-task | status <requestId> | flows | review | local (JSON on stdin)');
+    throw new Error('Usage: entrorove install | configure | agreement | invoke | host-message [adapterModulePath] | cloud-task | cloud-status | status <requestId> | flows | review | local (JSON on stdin)');
   }
 }
 if (process.argv[1] && realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url))) {

package/cloud-task-client.mjs

@@ -3,6 +3,7 @@ import { appendInvocation } from './local-invocations.mjs';
 import { parseTransportResponse, requestTransport, trustedOrigin } from './remote-transport.mjs';
 
 const CLOUD_TASK_SCHEMA = 'entrorove.cloud-task/1.0';
+const CLOUD_STATUS_SCHEMA = 'entrorove.cloud-status/1.0';
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 
 function canonical(value) {
@@ -38,6 +39,11 @@ function validateDependencies(dependencies) {
   }
 }
 
+function validateTaskId(taskId) {
+  if (typeof taskId !== 'string' || !UUID.test(taskId)) throw new Error('cloud-status taskId must be a UUID');
+  return taskId;
+}
+
 export function sandboxChoiceInteraction(id) {
   return {
     schemaVersion: 'confirm.interaction/1.0', requestId: id, type: 'choice',
@@ -117,3 +123,53 @@ export async function runCloudTask(input, dependencies) {
     executionIsolation: typeof result.executionIsolation === 'string' ? result.executionIsolation : 'worker' });
 }
 
+function publicTask(task) {
+  if (!task || typeof task !== 'object' || Array.isArray(task)) return null;
+  const allowed = ['id', 'status', 'displayTitle', 'titleStatus', 'titleError', 'summary', 'ideTaskId',
+    'createdAt', 'updatedAt', 'completedAt'];
+  return Object.fromEntries(allowed.filter(key => task[key] !== undefined).map(key => [key, task[key]]));
+}
+
+function publicUsage(value) {
+  if (!Array.isArray(value)) return [];
+  const allowed = ['usageId', 'requestId', 'operation', 'attempt', 'meterKind', 'state', 'tokenStatus',
+    'inputTokens', 'outputTokens', 'durationMs', 'durationBasis', 'providerId', 'modelId'];
+  return value.filter(item => item && typeof item === 'object' && !Array.isArray(item))
+    .map(item => Object.fromEntries(allowed.filter(key => item[key] !== undefined).map(key => [key, item[key]])));
+}
+
+export async function queryCloudTask(taskId, dependencies) {
+  const id = validateTaskId(taskId);
+  validateDependencies(dependencies);
+  await dependencies.install();
+  if (!await dependencies.agreementAccepted(dependencies.home)) {
+    return { schemaVersion: CLOUD_STATUS_SCHEMA, status: 'blocked', taskId: id,
+      code: 'agreement-required', interaction: dependencies.agreementRequired(dependencies.home) };
+  }
+  const token = await dependencies.readCredential(dependencies.home);
+  const origin = trustedOrigin(dependencies.apiOrigin());
+  const metadata = { kind: 'remote', operation: 'cloud-status', requestId: requestId({ taskId: id }) };
+  const taskResponse = await requestTransport(origin, `/api/cloud-sandbox/tasks/${id}`, { headers: { authorization: `Bearer ${token}` } });
+  let taskBody;
+  try { taskBody = await responseBody(taskResponse); } catch { taskBody = null; }
+  if (!taskResponse.ok || !taskBody?.task || taskBody.task.id !== id) {
+    await appendInvocation({ ...metadata, event: 'rejected' }, dependencies.home);
+    return { schemaVersion: CLOUD_STATUS_SCHEMA, status: taskResponse.status === 403 ? 'blocked' : taskResponse.status === 404 ? 'missing' : 'failed', taskId: id,
+      code: typeof taskBody?.error === 'string' ? taskBody.error : taskResponse.status === 404 ? 'cloud-task-not-found' : 'cloud-status-unavailable', httpStatus: taskResponse.status };
+  }
+  const task = taskBody.task;
+  let usage = [];
+  let usageError;
+  const usageResponse = await requestTransport(origin, `/api/cloud-sandbox/tasks/${id}/usage`, {
+    headers: { authorization: `Bearer ${token}` },
+  });
+  try {
+    const usageBody = await responseBody(usageResponse);
+    if (usageResponse.ok) usage = publicUsage(usageBody?.usage);
+    else usageError = typeof usageBody?.error === 'string' ? usageBody.error : 'cloud-usage-unavailable';
+  } catch { usageError = 'cloud-usage-invalid-response'; }
+  await appendInvocation({ ...metadata, event: 'status' }, dependencies.home);
+  return { schemaVersion: CLOUD_STATUS_SCHEMA, status: 'observed', taskId: id,
+    taskStatus: task.status, task: publicTask(task), usage, ...(usageError ? { usageError } : {}) };
+}
+

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.skill-manifest/1.0",
   "name": "entrorove",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "endpoint": "https://entrorove.com",
   "requestSchemaVersion": "entrorove.skill.request/2.0",
   "supportedRequestSchemaVersions": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@entrorove/skill",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "type": "module",
   "bin": {
     "entrorove": "cli.mjs"

package/release-state.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.release-state/1.0",
-  "version": "0.1.31",
-  "digest": "005df83b58c713b893d715a7480c08a91896301f6295746525f49abd2d746044",
+  "version": "0.1.32",
+  "digest": "615bc63383071e3a1356d129b2c072e1641744f6b82def3ec0c2f56fa68a39a4",
   "files": {
     "local-final-gate16.mjs": "b30caab08441449ad556a6e9a3cefbf91190f0b3f7370f46d2a21156375aa8e3",
     "local-final-gate16-checks.mjs": "1dd30e9666d458d8b12ca6e4975f6f0ac8450c3ea9cbecc7401ae037f66b589a",
@@ -44,10 +44,10 @@
     "local-autocoord17-waits.mjs": "2b0a713987822548a94e1ed3a9a891532db45383797dfc5d5bc8d1e35593cf25",
     "local-validator-isolation17.mjs": "48e94604e28b8fddd567dfb35ff60b73fd094a5803bd49f076388b7f310f92aa",
     "local-calctool-composition17.mjs": "ac89fcb41ab0d0d9b47c1b5696945281b0894eb064820775e36a011c76314e6a",
-    "cli.mjs": "6b2f31ee3204c8584ac4733a9b2d1c6ca72e2ea205e84f8a314a68f31917f629",
+    "cli.mjs": "6d455d8e22fccd24332726de6821a8a99f628d057648c9aae7c6262d89745722",
     "review-client.mjs": "3491eef68ed533174b31db3c53febb6519b8f088f71a9964644714a9a4c03c77",
     "version.mjs": "1f392147d72c40af4b03b307ea607075fb815af5174fa07e254b95fe12dbf3e7",
-    "SKILL.md": "fa3fa41f1551e54512de0cae7940e2d7ad670f81a46c2e642cdc2323b171224f",
+    "SKILL.md": "20c09094ffd094fa59f73a26b8cbb987cf40a8247368bb5b6417695831ed2a70",
     "CAPABILITY-MAP.md": "128ecc8d90b2c17846ce6f0c650eada9e7fa7240f5d3c03b31e3ee01135557b8",
     "AGREEMENT.md": "f93a68e92c457200dd024610e65f74e478b8f60860f951da818b70561f1b9bf8",
     "package.json": "77e29f7740cc2a2284490a992a9945fbb4a3ad3ac044f4ff9a59b1aa83e44ae0",
@@ -118,7 +118,7 @@
     "local-scope-workspaces.mjs": "a44c34537e5ed2dcaf193a985e5bc05957989fbb160a650f9e37ba7d66eb2de8",
     "local-task-routing.mjs": "e26d6f1ba134ffe1da2a49b4fb6bb6dfa5617671f774a08e719d04f202cf5eca",
     "remote-client.mjs": "ce16258faffb09c9db19609d47a0af6f63fcbc256feb35ba7a14bbb89e69cc6e",
-    "cloud-task-client.mjs": "b7dc4be6c4d2a60404538e3d875cf95533e1b7be3f43ac7f5d49118042ce1d45",
+    "cloud-task-client.mjs": "ca6c5af7f7c2507680fcce3b8ab739a50ebed88f5a202cffbecea962861bbebb",
     "remote-transport.mjs": "5e5a8c0b490371f7f5a052cffbeee6202d4cf713dff1c43b6d910fe944f8429c",
     "local-credential.mjs": "2a302a7f67b5ea8dc73453fc96ab33db349b59ca11fa9456e48ca1d9669d877c",
     "local-invocations.mjs": "f6ac4c41c1a5ec34de358c4cca210ca8e403b3a913150a43bb55ec9be55d9998",

package/releases.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.1.32",
+    "date": "2026-10-11",
+    "zh": "增加云端沙箱状态与用量只读查询，并支持按任务直接读取真实状态。",
+    "en": "Added read-only cloud sandbox status and direct reads of authoritative task state and usage."
+  },
   {
     "version": "0.1.31",
     "date": "2026-10-11",