@entrorove/skill 0.1.35 → 0.1.37

package/CAPABILITY-MAP.md

@@ -23,7 +23,7 @@
 | 实际进度必须进入 IDE | `cloud-watch` 订阅本人任务 SSE，输出独立 IDE 事件；调用方必须把公开消息和摘要展示到对话进度 |
 | 执行提示与推广可见 | `智能执行中，请勿关闭！` 与服务端选中的真实推广独立输出；保留推广 HTTPS 链接，按事件 ID 去重 |
 | 断线恢复原任务 | `cloud-watch` 带原 `taskId/afterId` 只读续接；`status` 与 `feedback` 查询原请求，不重发业务 POST |
-| 服务端自动评价，无第二次评价写入 | 调用完成事务保存本人原 request 的评价与结果摘要；CLI 校验回执。旧式适配器使用幂等持久化并在同一 HTTP 响应返回 |
+| 调用结束立即确认评价回传 | 调用完成事务保存本人原 request 的评价与结果摘要；CLI 核验后立即回传原回执身份，服务端返回 IDE 接收确认，不重复写评价或计用量；只读恢复保留原执行代次 |
 | 未验证不可记好评 | intake、模型摘要、reported、不完整证据无评分；阻断、失败、P0/P1 不产生好评；发现和状态查询不生成新评价 |
 | 实际 IDE 与原调用绑定 | `ENTROROVE_IDE` 或宿主检测写入原调用标签；每个 OS 用户继续复用受限凭据存储 |
 | 最新官方技能说明生效 | 新调用使用 `npx --yes --prefer-online @entrorove/skill@latest`；安装更新后重新读取 managed `SKILL.md` |

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.1.37 — 2026-10-13
+
+- 统一 IDE 与网页沙箱任务编号；新任务按账号设置显示云端选择并保留原任务数据，进入及结束通知去重且发送失败可重试；适配 Windows Git 范围元数据检查。
+- Unified IDE and website sandbox task numbers; added account-based entry choices while preserving original task facts, deduplicated lifecycle notifications with retryable OS rejection, and adapted Git scope metadata inspection for Windows.
+
+## 0.1.36 — 2026-10-13
+
+- 技能调用结束立即确认 IDE 评价回传，提供原账号、原调用与执行代次绑定的接收回执；完善原回执只读恢复与公开合同校验。
+- Confirmed IDE evaluation acknowledgements immediately after skill calls, bound reception receipts to the original account, invocation and generation, and improved read-only recovery and published contract validation.
+
 ## 0.1.35 — 2026-10-13
 
 - 新增协作状态查询、Aimlock 专用规划与八域原生调用；接入账号和设备隔离的任务通知，修复失败接续的评价回执冲突，并完善范围门禁接续。

package/SKILL.md

@@ -5,7 +5,7 @@ description: An engineering skill that understands a task, chooses a fitting wor
 
 # entrorove · 熵巡
 
-Version: 0.1.35.
+Version: 0.1.37.
 
 Read the user's goal and repository instructions first. Preserve the original task through planning, execution and verification. Use the workflow only where it helps; a small, low-risk edit can proceed directly. Never claim a reported step is a verified result.
 
@@ -25,9 +25,11 @@ On first use or after a material agreement revision, the CLI returns a Confirm P
 
 ### IDE display and cloud planning entry
 
-For a task using this skill's cloud planning, first run `npx --yes --prefer-online @entrorove/skill@latest cloud-task` with `{"goal":"<the user's actual goal>","ideTaskId":"<the current IDE task ID, when available>"}` on stdin. Render the returned choice with the host's question tool or native UI. If no native adapter exists, show `interaction.chatFallback` in the conversation and collect its answer. Tool output alone is not a displayed question. Offer **确认** and **退出，采用本地方案**. Exit or an explicit cancellation continues the original task locally; it must not stop the task or change account preferences. An unanswered question does not authorize cloud consumption. Reuse a prior explicit choice for this same task rather than asking again.
+For a new engineering task, run `npx --yes --prefer-online @entrorove/skill@latest invoke` with `operation: "start"` and the actual task facts below. The CLI reads the authenticated account's sandbox preference before dispatch. An enabled account returns `status: "needs-input"` and a cloud choice, with no model call yet. This is a routing question, not an execution failure. Render it immediately with the host's question tool or native UI; if unavailable, display `interaction.chatFallback` and collect the answer. A collapsed command log is insufficient. Offer **确认** and **退出，采用本地方案**. After confirmation call the returned `cloud-task` callback with its exact original payload and `sandboxChoice: "use"`; exit repeats the original `start` with top-level `sandboxChoice: "local"`. Preserve the original goal, risk, work type and requirements. A disabled account continues through its configured local workflow; unavailable preferences stop entry explicitly. Reuse a prior explicit choice while resuming this task. Silence never authorizes cloud consumption.
 
-With `sandboxChoice: "use"` (or the protocol callback's `answer: "use"`), retain the real returned task ID and immediately run the returned `nextAction`, `cloud-watch`. It subscribes to that account's authoritative SSE stream, returns newline-delimited `entrorove.ide-event/1.0` events, then one `entrorove.cloud-watch/1.0` result. **Mirror each new event's public `message` and optional `detail` into visible IDE progress/commentary.** Deduplicate by task ID and event ID, including events repeated in the final result. The same rule applies to normal invocation `ideMessages` and notice events. A JSON field or collapsed command log does not satisfy this display requirement. Show `智能执行中，请勿关闭！` and the selected promotion on separate lines; preserve the promotion's actual HTTPS link. Use only the server's selected promotion; do not insert a local test advertisement.
+For an explicit cloud planning request without an existing start, `cloud-task` accepts `{"goal":"<actual goal>","ideTaskId":"<current IDE task ID, when available>"}` on stdin and returns the same choice. Do not start both routes for one task.
+
+With `sandboxChoice: "use"` (or the protocol callback's `answer: "use"`), immediately display the returned acceptance message, for example **云端任务 08921 · 已进入**. Use the returned `taskNumber` verbatim: it matches the homepage sandbox tab and notification. Retain the UUID `taskId` separately for API queries; never display the IDE chat ID or invent a number instead. Then run the returned `nextAction`, `cloud-watch`. It subscribes to that account's authoritative SSE stream, returns newline-delimited `entrorove.ide-event/1.0` events, then one `entrorove.cloud-watch/1.0` result. **Mirror each new event's public `message` and optional `detail` into visible IDE progress/commentary.** Deduplicate by task ID and event ID, including the acceptance message repeated in the stream or final result. The same rule applies to normal invocation `ideMessages` and notice events. A JSON field or collapsed command log does not satisfy this display requirement. Show `智能执行中，请勿关闭！` and the selected promotion on separate lines; preserve the promotion's actual HTTPS link. Use only the server's selected promotion; do not insert a local test advertisement.
 
 Display the actual entering, allocation, thinking, public output and exit events as they arrive. Do not generate model reasoning, invent intermediate events or replace `reported` with verified completion. The public model summary is the planning output available to show. `云端沙箱输出完毕` means the current planning response has arrived; inspect its real task/verification status before dependent execution. Exit here closes the progress subscription and does not cancel the persisted task.
 
@@ -37,7 +39,7 @@ Set `ENTROROVE_IDE` to the actual host name (for example `Codex`, `Cursor` or `C
 
 Send JSON on standard input to `npx @entrorove/skill invoke`. Before every execution call, discover `operation: "capabilities"` with `{}` and validate input against the returned operation schema. The CLI performs remote discovery automatically; local adapters discover the installed contract before execution. Discovery failure stops execution. Adapters that expose the four-step task route can call `task-describe`, `message-route`, `message-accept` and `task-resume` in order; `start` remains the one-call workflow equivalent. Then start with `operation: "start"` and an `input.task` containing the goal, work type, risk, difficulty and observed scope facts. Work types are `implementation`, `documentation`, `calculation`, `merge`, `review`, `decision` and `diagnosis`. Assess facts from the real task and repository; do not invent certainty. entrorove chooses the workflow. A small task may return `decision: "direct"`, meaning the IDE should do the work without another service call. The public envelope is `entrorove.skill.request/2.0`; `requestId` is the SHA-256 digest of `operation + canonical(input)`. Version 1.0 remains accepted for older callers.
 
-`start` creates a normal durable skill flow. It does not create a cloud-sandbox task or contribute to cloud-sandbox usage. To create a real cloud-sandbox task, call `operation: "cloud-task"` with `input.goal`; the CLI returns a Confirm Protocol choice interaction before any cloud request. Continue the same request with `sandboxChoice: "use"` or `sandboxChoice: "local"`. `use` calls the authenticated `/api/cloud-task` endpoint and returns the real `taskId`; `local` skips only this task. The server is authoritative for account entitlement and the account-wide sandbox preference: a disabled or unavailable account returns `blocked` and creates no task. A `needs-input`, `blocked` or `failed` result is not a successful dispatch and must be shown to the user.
+The server's ordinary `start` operation creates a durable skill flow and counts a skill invocation. The IDE CLI routes new starts through the account's preference and explicit task choice described above. A real sandbox is created only by `/api/cloud-task`, which returns both `taskId` and `taskNumber` and counts sandbox usage separately. `local` changes only this task's route. Disabled entitlement or missing model prerequisites stop cloud dispatch; a `needs-input`, `blocked` or `failed` result must never be described as sandbox entry. Do not send a second ordinary `start` after cloud acceptance; continue the original bound flow returned by its watch/status.
 
 After dispatch, use `cloud-watch` for live IDE progress and `cloud-status` for a read-only snapshot with `input.taskId`. Both are CLI-only routes, also accepted by `invoke`; they do not pass through `/api/skill/invoke`. Status includes public title/summary, actual model usage and the stored automatic evaluation when available. A missing task is explicit and never treated as completed. The IDE and website consume the same account-bound event stream.
 
@@ -81,13 +83,13 @@ Local CLI failures use the machine-readable `entrorove.local-error/1.0` envelope
 
 ### Optional task notifications
 
-System notifications are disabled until this account explicitly enables them. `npx @entrorove/skill notifications configure` accepts only `{"enabled":true}` or `{"enabled":false}` on stdin; `notifications status` observes the account's setting and `notifications test` submits a generic test only when enabled. macOS and Linux use their existing notification service. Real IDE events notify output availability, verification, failure or required confirmation, deduplicated by original task/request and state. Promotion and keep-alive messages remain visible in the IDE and never trigger system notifications. Changing the stored account credential disables the previous account's notification setting. OS acceptance does not prove that permission allows a visible notification.
+System notifications are disabled until this account explicitly enables them. `npx @entrorove/skill notifications configure` accepts only `{"enabled":true}` or `{"enabled":false}` on stdin; `notifications status` observes the account's setting and `notifications test` submits a generic test only when enabled. macOS and Linux use their existing notification service. Cloud notifications show the same `taskNumber` as the website: one entry and one ending, including a specific model-balance warning. Intermediate steps, promotion, keep-alive and repeated feedback do not repeat notifications. A rejected OS submission is not marked as sent and remains retryable. Settings use the same home and account as the invocation; changing the credential disables the previous account's setting. OS acceptance does not prove that a notification was visibly displayed.
 
 The website's signed-in bell control enables encrypted Web Push for the current account and device. Desktop browsers and supported phones use this same push protocol; iPhone requires a Home Screen web app. Ask permission only through the user's enable action. Logout clears the browser binding and subscription. Messages contain only generic task status, with no prompts, credentials, model output or promotion. Delivery retries keep the original event and device binding; expired endpoints and temporary tasks are cleaned up automatically. Never describe an unsupported platform or failed delivery as a successful notification.
 
 ### Automatic invocation evaluation and optional user reviews
 
-Every completed or failed execution call receives a server-generated `feedback` receipt bound to the original account, request hash and result digest. Durable calls commit this evaluation in the same transaction as the result; legacy adapters return an idempotent receipt with the same HTTP response. The CLI verifies the original identity and evaluation digest. Preserve `receiptId`, `requestId` and `evaluation.digest`; never generate a score or comment locally. Display the returned evaluation acknowledgement in IDE progress, deduplicated by receipt ID. Read the saved receipt with `npx @entrorove/skill feedback <original requestId>` after a connection loss; this is GET only and never repeats execution or submits another evaluation. An authorized retry before side effects keeps the original request but gets a new server execution generation and immutable receipt. Default feedback reads the latest generation; `feedback <original requestId> <generation>` reads a preserved earlier receipt. Never overwrite a failed receipt or use it as the current retry result. Discovery/status queries create no evaluations.
+Every completed or failed execution call receives a server-generated `feedback` receipt bound to the original account, request hash and result digest. Durable calls commit this evaluation in the same transaction as the result; domain adapters return an idempotent receipt with the same HTTP response. The CLI verifies the original identity and evaluation digest, then immediately returns that exact receipt identity to the authenticated acknowledgement endpoint before finishing the call. Cloud watches do the same as soon as the original evaluation is available. A confirmed `acknowledgement` records the IDE and server reception time without changing the evaluation or counting another invocation. Preserve `receiptId`, `requestId` and `evaluation.digest`; never generate a score or comment locally. Immediately display the confirmed evaluation acknowledgement in visible IDE commentary before the task's final answer, deduplicated by receipt ID. Tool output alone is insufficient. Say “已回传” only with a confirmed acknowledgement; an upload failure must remain visible and cannot become successful feedback. Read the saved receipt with `npx @entrorove/skill feedback <original requestId>` after a connection loss; this is GET only and never repeats execution or submits another evaluation. An authorized retry before side effects keeps the original request but gets a new server execution generation and immutable receipt. Default feedback reads the latest generation; `feedback <original requestId> <generation>` reads a preserved earlier receipt. Never overwrite a failed receipt or use it as the current retry result. Discovery/status queries create no evaluations.
 
 Only server-verified progress or a validated pure operation earns a positive automatic evaluation. Reported steps, intake, model summaries and incomplete evidence remain `pending` with no score. Blocked/failed results and P0/P1 findings cannot become positive. These are private technical evaluations; they do not create a public user review or masquerade as the user's words. If a server advertising this extension returns no valid receipt, show the missing receipt and query its original ID. Do not silently claim that evaluation was reported.
 
@@ -99,4 +101,6 @@ Feedback command example (replace the request ID with the original successful in
 {"invocationRequestId":"<original successful request ID>","ide":"Codex","rating":5,"comment":"<unchanged user words>","publicConsent":true,"noticeVersion":"2026-10-07.1"}
 ```
 
-The fixed Git byte-metering adapter ships hash-pinned precompiled libraries for Darwin and glibc Linux on arm64/x64. It extracts the selected library on first use; it never invokes a C compiler on the user machine. Darwin requires Apple’s trusted Git (Xcode or Command Line Tools), xcrun and codesign; Linux requires the trusted `/usr/bin/git` and glibc. Missing or unsupported tools return `ENTROROVE_GIT_READER_UNSUPPORTED` explicitly and do not fall back to unmetered source reads.
+Ordinary Windows scope inspection resolves an absolute Git for Windows `git.exe` from its installation or absolute PATH directories, including paths containing spaces. It never invokes `/usr/bin/git` on Windows, a shell wrapper or a Git executable inside the inspected repository. Missing Git gives `ENTROROVE_GIT_UNAVAILABLE` and requires installing Git for Windows before reconnecting the original scope.
+
+The fixed Git byte-metering adapter ships hash-pinned precompiled libraries for Darwin and glibc Linux on arm64/x64. It extracts the selected library on first use; it never invokes a C compiler on the user machine. Darwin requires Apple’s trusted Git (Xcode or Command Line Tools), xcrun and codesign; Linux requires the trusted `/usr/bin/git` and glibc. Native comparisons with enforced source-read budgets remain restricted to these platforms. An unsupported native budget adapter returns `ENTROROVE_GIT_READER_UNSUPPORTED`; do not bypass its budget or claim an ordinary Windows inspection verifies that separate capability.

package/automatic-feedback-client.mjs

@@ -43,3 +43,38 @@ export async function queryAutomaticFeedback(requestId, dependencies, generation
   if (!response.ok) throw new Error(`Automatic feedback unavailable: HTTP ${response.status}; requestId=${requestId}`);
   return verifyAutomaticFeedback(result.feedback,requestId);
 }
+
+function confirmedAcknowledgement(value, original, expectedIde) {
+  verifyAutomaticFeedback(value,original.requestId,original.requestHash);
+  const ack = value.acknowledgement, generation = original.generation ?? 1;
+  if (value.receiptId !== original.receiptId || value.resultDigest !== original.resultDigest
+    || value.evaluation.digest !== original.evaluation.digest || (value.generation ?? 1) !== generation
+    || !ack || ack.schemaVersion !== 'entrorove.feedback-acknowledgement/1.0' || ack.stored !== true
+    || ack.receiptId !== original.receiptId || ack.requestId !== original.requestId || ack.generation !== generation
+    || typeof ack.ide !== 'string' || !/^[\p{L}\p{N} .+_-]{2,48}$/u.test(ack.ide)
+    || expectedIde && ack.ide !== expectedIde || !Number.isFinite(Date.parse(ack.receivedAt))) {
+    throw new Error(`IDE feedback is not confirmed; query feedback ${original.requestId}. Do not repeat the invocation.`);
+  }
+  return value;
+}
+
+export async function acknowledgeAutomaticFeedback(feedback, origin, token, ideHeaders) {
+  verifyAutomaticFeedback(feedback,feedback.requestId,feedback.requestHash);
+  if (feedback.acknowledgement) return confirmedAcknowledgement(feedback,feedback);
+  const route = `/api/skill/feedback/${feedback.requestId}`;
+  const headers = { authorization: `Bearer ${token}`,...ideHeaders };
+  let response;
+  try {
+    response = await requestTransport(trustedOrigin(origin),`${route}/ack`, { method: 'POST',
+      headers: { ...headers,'content-type': 'application/json' },body: JSON.stringify({ receiptId: feedback.receiptId,
+        requestHash: feedback.requestHash,resultDigest: feedback.resultDigest,evaluationDigest: feedback.evaluation.digest,
+        generation: feedback.generation ?? 1 }) });
+  } catch (cause) {
+    if (!cause.established) throw new Error(`IDE feedback was not sent; query feedback ${feedback.requestId}. Do not repeat the invocation.`);
+    // A lost acknowledgement response is recovered only by reading this
+    // immutable receipt. Neither the execution nor its acknowledgement POST is replayed.
+    response = await requestTransport(trustedOrigin(origin),`${route}?generation=${feedback.generation ?? 1}`, { headers });
+  }
+  if (!response.ok) throw new Error(`IDE feedback acknowledgement failed: HTTP ${response.status}; query feedback ${feedback.requestId}. Do not repeat the invocation.`);
+  return confirmedAcknowledgement(parseTransportResponse(response,'IDE feedback acknowledgement').feedback,feedback,ideHeaders?.['x-entrorove-ide']);
+}

package/cli.mjs

@@ -390,7 +390,7 @@ export function remoteDependencies(home = os.homedir()) {
 export async function runCloudTask(input, dependencies = remoteDependencies()) {
   const result = await dispatchCloudTask(input, dependencies);
   process.stdout.write(`${JSON.stringify(result)}\n`);
-  if (['blocked', 'failed', 'incomplete', 'needs-input'].includes(result.status)) process.exitCode = 2;
+  if (['blocked', 'failed', 'incomplete'].includes(result.status)) process.exitCode = 2;
   return result;
 }
 

package/cloud-task-client.mjs

@@ -3,6 +3,7 @@ import { appendInvocation } from './local-invocations.mjs';
 import { parseTransportResponse, requestTransport, trustedOrigin } from './remote-transport.mjs';
 import { displayIdeEvent, ideClientHeaders } from './ide-presentation.mjs';
 import { verifyAutomaticFeedback } from './automatic-feedback-client.mjs';
+import { sandboxTaskNumber } from './task-identity.mjs';
 
 const CLOUD_TASK_SCHEMA = 'entrorove.cloud-task/1.0';
 const CLOUD_STATUS_SCHEMA = 'entrorove.cloud-status/1.0';
@@ -34,7 +35,11 @@ function validateInput(input) {
   if ((input.sandboxChoice ?? input.answer) !== undefined && !['use', 'local'].includes(input.sandboxChoice ?? input.answer)) {
     throw new Error('cloud-task sandboxChoice must be use or local');
   }
-  return { goal: input.goal, ...(input.ideTaskId === undefined ? {} : { ideTaskId: input.ideTaskId }) };
+  if (input.task !== undefined && (!input.task || typeof input.task !== 'object' || Array.isArray(input.task) || input.task.goal !== input.goal)) {
+    throw new Error('Cloud task must preserve the original task goal');
+  }
+  return { goal: input.goal, ...(input.ideTaskId === undefined ? {} : { ideTaskId: input.ideTaskId }),
+    ...(input.task === undefined ? {} : { task: input.task }) };
 }
 
 function validateDependencies(dependencies) {
@@ -100,7 +105,7 @@ export async function runCloudTask(input, dependencies) {
   const metadata = { kind: 'remote', operation: 'cloud-task', requestId: id };
   await appendInvocation({ ...metadata, event: 'started' }, dependencies.home);
   displayIdeEvent({ schemaVersion: 'entrorove.ide-event/1.0',requestId: id,kind: 'status',
-    phase: 'enter',message: '正在进入云端沙箱',separateLine: true },dependencies.onIdeEvent);
+    phase: 'enter',message: '正在进入云端沙箱',separateLine: true },dependencies.onIdeEvent,{home:dependencies.home});
   let response;
   try {
     response = await requestTransport(origin, '/api/cloud-task', {
@@ -129,15 +134,21 @@ export async function runCloudTask(input, dependencies) {
     const code = typeof result?.error === 'string' ? result.error : 'cloud-task-rejected';
     return envelope(task, response.status === 403 ? 'blocked' : 'failed', { code, message: result?.message ?? code, httpStatus: response.status });
   }
-  if (!result?.ok || typeof result.taskId !== 'string' || !UUID.test(result.taskId)) {
+  if (!result?.ok || typeof result.taskId !== 'string' || !UUID.test(result.taskId)
+    || result.taskNumber !== undefined && result.taskNumber !== sandboxTaskNumber(result.taskId)
+    || result.afterId !== undefined && (typeof result.afterId !== 'string' || !/^[1-9][0-9]{0,18}$/u.test(result.afterId) || BigInt(result.afterId)>9223372036854775807n)) {
     await appendInvocation({ ...metadata, event: 'outcome-unknown' }, dependencies.home);
     throw new Error(`Cloud sandbox response lost its task identity; requestId=${id}`);
   }
   await appendInvocation({ ...metadata, event: 'completed' }, dependencies.home);
-  return envelope(task, 'started', { taskId: result.taskId,
+  const taskNumber = sandboxTaskNumber(result.taskId);
+  const event = { schemaVersion: 'entrorove.ide-event/1.0',requestId: id,taskId: result.taskId,taskNumber,
+    kind: 'status',phase: 'accepted',message: `云端任务 ${taskNumber} · 已进入`,separateLine: true };
+  displayIdeEvent(event,dependencies.onIdeEvent,{home:dependencies.home});
+  return envelope(task, 'started', { taskId: result.taskId,taskNumber,ideMessages: [event.message],
     taskStatus: typeof result.status === 'string' ? result.status : 'running',
     executionIsolation: typeof result.executionIsolation === 'string' ? result.executionIsolation : 'worker',
-    nextAction: { operation: 'cloud-watch',input: { taskId: result.taskId,afterId: '0' } } });
+    nextAction: { operation: 'cloud-watch',input: { taskId: result.taskId,afterId: result.afterId ?? '0' } } });
 }
 
 function publicTask(task) {
@@ -187,7 +198,7 @@ export async function queryCloudTask(taskId, dependencies) {
     else usageError = typeof usageBody?.error === 'string' ? usageBody.error : 'cloud-usage-unavailable';
   } catch { usageError = 'cloud-usage-invalid-response'; }
   await appendInvocation({ ...metadata, event: 'status' }, dependencies.home);
-  return { schemaVersion: CLOUD_STATUS_SCHEMA, status: 'observed', taskId: id,
+  return { schemaVersion: CLOUD_STATUS_SCHEMA, status: 'observed', taskId: id,taskNumber: sandboxTaskNumber(id),
     taskStatus: task.status, task: publicTask(task), usage, ...(feedback ? { feedback } : {}),
     ...(usageError ? { usageError } : {}) };
 }

package/cloud-watch-client.mjs

@@ -2,6 +2,8 @@ import { trustedOrigin } from './remote-transport.mjs';
 import { consumeCloudStream } from './cloud-event-stream.mjs';
 import { automaticFeedbackIdeEvent, cloudIdeEvent, displayIdeEvent, ideClientHeaders } from './ide-presentation.mjs';
 import { queryCloudTask } from './cloud-task-client.mjs';
+import { acknowledgeAutomaticFeedback } from './automatic-feedback-client.mjs';
+import { sandboxTaskNumber } from './task-identity.mjs';
 
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function inputOptions(input) {
@@ -20,7 +22,7 @@ export async function watchCloudTask(input, dependencies) {
     interaction: dependencies.agreementRequired(dependencies.home) };
   const token = await dependencies.readCredential(dependencies.home);
   const controller = new AbortController(), deadline = setTimeout(() => controller.abort(),waitMs);
-  const events = [], emit = event => { events.push(event); displayIdeEvent(event,dependencies.onIdeEvent); };
+  const events = [], emit = event => { events.push(event); displayIdeEvent(event,dependencies.onIdeEvent,{home:dependencies.home}); };
   let afterId = options.afterId, taskStatus = 'running', outputAvailable = false, settled = false, flowId;
   try {
     const response = await fetch(`${trustedOrigin(dependencies.apiOrigin())}/api/cloud-sandbox/tasks/${taskId}/events`, {
@@ -49,10 +51,13 @@ export async function watchCloudTask(input, dependencies) {
     message: '云端沙箱输出完毕；实际验证状态以任务回执为准。',separateLine: true });
   const current = await queryCloudTask(taskId,dependencies);
   if (current.status === 'observed') taskStatus = current.taskStatus;
-  if (current.feedback) emit(automaticFeedbackIdeEvent(current.feedback));
+  if (current.feedback) {
+    current.feedback = await acknowledgeAutomaticFeedback(current.feedback,dependencies.apiOrigin(),token,ideClientHeaders());
+    emit({ ...automaticFeedbackIdeEvent(current.feedback),taskId,taskNumber:sandboxTaskNumber(taskId) });
+  }
   emit({ schemaVersion: 'entrorove.ide-event/1.0',taskId,kind: 'status',phase: 'exit',
     message: settled || taskStatus !== 'running' ? '云端沙箱正在退出本次进度订阅' : '云端沙箱仍在执行，下次从当前进度继续读取',separateLine: true });
-  return { schemaVersion: 'entrorove.cloud-watch/1.0',status: current.status,taskId,taskStatus,afterId,outputAvailable,
+  return { schemaVersion: 'entrorove.cloud-watch/1.0',status: current.status,taskId,taskNumber: sandboxTaskNumber(taskId),taskStatus,afterId,outputAvailable,
     events,...(flowId ? { flowId } : {}),task: current.task,usage: current.usage,...(current.feedback ? { feedback: current.feedback } : {}),
     nextAction: taskStatus === 'running' && !settled ? { operation: 'cloud-watch',input: { taskId,afterId,waitMs } } : null };
 }

package/ide-presentation.mjs

@@ -1,15 +1,16 @@
 const UUID = /^[0-9a-f-]{36}$/i;
 import { notifyIdeEvent } from './native-notification.mjs';
+import { sandboxTaskNumber } from './task-identity.mjs';
 export function ideClientHeaders(environment = process.env) {
   const ide = environment.ENTROROVE_IDE ?? (environment.CODEX_THREAD_ID ? 'Codex'
     : environment.CURSOR_TRACE_ID ? 'Cursor' : environment.CLAUDE_CODE_ENTRYPOINT ? 'Claude Code' : 'Entrorove CLI');
   if (typeof ide !== 'string' || !/^[\p{L}\p{N} .+_-]{2,48}$/u.test(ide)) throw new Error('Invalid ENTROROVE_IDE client name');
   return { 'x-entrorove-ide': ide };
 }
-export function displayIdeEvent(event, sink) {
+export function displayIdeEvent(event, sink, notifications) {
   if (sink) sink(event);
   else process.stderr.write(`${event.message}\n${event.detail ? event.detail + '\n' : ''}`);
-  void notifyIdeEvent(event).catch(() => process.stderr.write('Entrorove system notification unavailable; IDE progress remains visible.\n'));
+  void notifyIdeEvent(event,notifications).catch(() => process.stderr.write('Entrorove system notification unavailable; IDE progress remains visible.\n'));
 }
 function text(value) {
   return typeof value === 'string' ? value.replace(/[\u0000-\u0008\u000b-\u001f\u007f]/gu, '').slice(0,12000) : '';
@@ -21,13 +22,14 @@ export function cloudIdeEvent(value, taskId) {
   }
   const metadata = value.metadata ?? {};
   let message = text(value.content), phase = String(metadata.stepId ?? 'workflow');
-  if (message === 'Cloud task accepted.') message = '已进入云端沙箱，正在分配沙箱任务';
+  if (message === 'Cloud task accepted.') { message = `云端任务 ${sandboxTaskNumber(taskId)} · 已进入`; phase = 'accepted'; }
   else if (message === 'Cloud workflow started.') message = '云端沙箱任务已分配';
   else if (message === 'Cloud model classification started.') message = '云端沙箱正在思考中';
   else if (message === 'Task classification completed.') message = '云端沙箱思考正在输出';
-  const event = { schemaVersion: 'entrorove.ide-event/1.0',taskId,eventId: value.id,kind: value.kind,
+  const event = { schemaVersion: 'entrorove.ide-event/1.0',taskId,taskNumber: sandboxTaskNumber(taskId),eventId: value.id,kind: value.kind,
     state: metadata.state ?? 'running',phase,message,separateLine: true };
   if (metadata.requiresUserInput === true || phase === 'confirm' && event.state === 'pending') event.requiresConfirmation = true;
+  if (metadata.errorCode === 'model-balance-insufficient') event.errorCode = metadata.errorCode;
   if (typeof metadata.summary === 'string' && metadata.summary !== value.content
     && value.content !== 'Cloud model classification started.') event.detail = text(metadata.summary);
   if (value.kind === 'notice' && metadata.url !== undefined) {
@@ -45,13 +47,13 @@ export function invocationIdeNotices(output) {
   return [...new Set(strings.filter(value => typeof value === 'string').flatMap(value => value.split(/\r?\n/u))
     .filter(value => value === '智能执行中，请勿关闭！' || /^【[^\n】]{1,32}】/u.test(value)).map(text))];
 }
-export function presentInvocationNotices(result, sink) {
+export function presentInvocationNotices(result, sink, notifications) {
   const messages = invocationIdeNotices(result?.output);
   for (const message of messages) displayIdeEvent({ schemaVersion: 'entrorove.ide-event/1.0',
-    requestId: result.output.requestId,kind: 'notice',message,separateLine: true },sink);
+    requestId: result.output.requestId,kind: 'notice',message,separateLine: true },sink,notifications);
   if (result?.feedback) {
     const event = automaticFeedbackIdeEvent(result.feedback);
-    messages.push(event.message); displayIdeEvent(event,sink);
+    messages.push(event.message); displayIdeEvent(event,sink,notifications);
   }
   return messages.length ? { ...result,ideMessages: messages } : result;
 }
@@ -60,5 +62,6 @@ export function automaticFeedbackIdeEvent(feedback) {
   const status = disposition === 'good' ? '当前调用验证通过' : disposition === 'bad'
     ? '当前调用被阻断或验证失败' : '交付验证尚未完成，暂不评分';
   return { schemaVersion: 'entrorove.ide-event/1.0',requestId: feedback.requestId,receiptId: feedback.receiptId,
-    kind: 'evaluation',phase: 'feedback',disposition, message: `本次调用评价已回传至服务器：${status}。`,separateLine: true };
+    kind: 'evaluation',phase: 'feedback',disposition,
+    message: `${feedback.acknowledgement?.stored === true ? '本次调用评价已回传至服务器' : '服务器已保存本次调用评价'}：${status}。`,separateLine: true };
 }

package/local-error.mjs

@@ -8,9 +8,11 @@ export const LOCAL_ERROR_CODE_CATALOG = Object.freeze({
   ENTROROVE_MUTATION_AUTHORITY_REQUIRED: Object.freeze({ disposition: 'needs-human', stability: 'stable' }),
   ENTROROVE_BUDGET_LEASE_EXPIRED: Object.freeze({ disposition: 'retriable', stability: 'stable' }),
   ENTROROVE_GIT_READER_UNSUPPORTED: Object.freeze({ disposition: 'terminal', stability: 'stable' }),
+  ENTROROVE_GIT_UNAVAILABLE: Object.freeze({ disposition: 'needs-human', stability: 'stable' }),
 });
 
 const BLOCKED_CODES = new Set([
+  'ENTROROVE_GIT_UNAVAILABLE',
   'ENTROROVE_MUTATE_NOT_ACCEPTED', 'ENTROROVE_MUTATION_AUTHORITY_REQUIRED',
   'ENTROROVE_MUTATION_PASS_INVALID', 'ENTROROVE_MUTATION_PASS_EXPIRED',
   'ENTROROVE_BUDGET_LEASE_EXPIRED', 'ENTROROVE_BUDGET_AUTHORITY_REQUIRED',

package/local-git-executable.mjs

@@ -0,0 +1,33 @@
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { fail } from './local-budget-grants.mjs';
+
+export function scopeGitCandidates(platform, environment) {
+  if (['darwin','linux'].includes(platform)) return ['/usr/bin/git'];
+  if (platform !== 'win32') fail('ENTROROVE_GIT_READER_UNSUPPORTED', 'Git scope inspection does not support this operating system');
+  const entries = (environment.PATH ?? environment.Path ?? '').split(';')
+    .map(value => value.trim().replace(/^"(.*)"$/u,'$1')).filter(value => path.win32.isAbsolute(value));
+  const installed = [environment.ProgramFiles,environment['ProgramFiles(x86)']]
+    .filter(value => typeof value === 'string' && path.win32.isAbsolute(value))
+    .map(value => path.win32.join(value,'Git','cmd'));
+  return [...new Set([...installed,...entries].map(value => path.win32.join(value,'git.exe')))];
+}
+/** Resolve an absolute executable, never a shell command or a repository-local PATH entry. */
+export async function scopeGitExecutable({ platform = process.platform, environment = process.env, files = fs, repositoryRoot } = {}) {
+  for (const target of scopeGitCandidates(platform,environment)) {
+    try {
+      const stat = await files.lstat(target);
+      if (!stat.isFile() || stat.isSymbolicLink()) continue;
+      const actual = await files.realpath(target);
+      if (platform === 'win32' && !actual.toLowerCase().endsWith('\\git.exe')) continue;
+      if (platform === 'win32' && repositoryRoot) {
+        const relative = path.win32.relative(repositoryRoot,actual);
+        if (!path.win32.isAbsolute(relative) && relative !== '..' && !relative.startsWith('..\\')) continue;
+      }
+      return actual;
+    } catch (cause) { if (!['ENOENT','ENOTDIR'].includes(cause.code)) throw cause; }
+  }
+  fail('ENTROROVE_GIT_UNAVAILABLE', platform === 'win32'
+    ? 'Install Git for Windows and add its cmd directory to PATH before reconnecting this original scope.'
+    : 'The fixed system Git executable is unavailable; install the operating system Git tools before reconnecting this original scope.');
+}

package/local-scope-git-reads.mjs

@@ -5,6 +5,7 @@ import { promisify } from 'node:util';
 import { assertBudgetReadContext } from './local-budget-reads.mjs';
 import { readBudgetedGitBlob } from './local-budget-git.mjs';
 import { scopeFail, scopePath } from './local-scope-files.mjs';
+import { scopeGitExecutable } from './local-git-executable.mjs';
 
 const execute = promisify(execFile), objectIdPattern = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
 const configFields = new Set(['core.attributesfile', 'core.filemode', 'core.autocrlf', 'core.eol', 'diff.algorithm', 'diff.indentheuristic', 'diff.renames', 'diff.renamelimit']);
@@ -41,7 +42,8 @@ const safeFlags = ['--no-optional-locks', '-c', 'core.hooksPath=/dev/null', '-c'
 export async function scopeGitMetadata(root, args, input, allowed = []) {
   await assertBudgetReadContext(input);
   if (!metadataCommand(args)) scopeFail('ENTROROVE_GIT_FAILED', 'Git metadata command is outside the fixed scope inspection vocabulary');
-  try { return (await execute('/usr/bin/git', [...safeFlags, ...args], settings(root, null, 2097152, 'utf8'))).stdout; }
+  const executable = await scopeGitExecutable({ repositoryRoot: root });
+  try { return (await execute(executable, [...safeFlags, ...args], settings(root, null, 2097152, 'utf8'))).stdout; }
   catch (error) {
     if (error.code === 129 && args.length === 2 && args[0] === 'var' && args[1] === 'GIT_ATTR_SYSTEM') {
       return `${await compiledGitSystemAttributes()}\n`;

package/local-scope-repository.mjs

@@ -12,12 +12,14 @@ import { assertBudgetRunnerAllowed } from './local-budget-reads.mjs';
 import { observeBudgetScopeGit, scopeGitBudgetEnforced } from './local-scope-git.mjs';
 import { scopeGitMetadata } from './local-scope-git-reads.mjs';
 import { scopeTsconfigImports } from './local-scope-config-imports.mjs';
+import { scopeGitExecutable } from './local-git-executable.mjs';
 
 const execute = promisify(execFile);
 async function git(root, args, allowed = [], input = { repositoryRoot: root }) {
   await assertBudgetRunnerAllowed(input);
+  const executable = await scopeGitExecutable({ repositoryRoot: root });
   try {
-    return (await execute('git', ['--no-optional-locks', '-c', 'core.hooksPath=/dev/null', '-c', 'core.fsmonitor=false', '-c', 'diff.external=', ...args],
+    return (await execute(executable, ['--no-optional-locks', '-c', 'core.hooksPath=/dev/null', '-c', 'core.fsmonitor=false', '-c', 'diff.external=', ...args],
       { cwd: root, encoding: 'utf8', timeout: 10_000, maxBuffer: 2_097_152,
         env: { ...Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith('GIT_'))), GIT_OPTIONAL_LOCKS: '0' } })).stdout;
   } catch (error) {

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.skill-manifest/1.0",
   "name": "entrorove",
-  "version": "0.1.35",
+  "version": "0.1.37",
   "endpoint": "https://entrorove.com",
   "requestSchemaVersion": "entrorove.skill.request/2.0",
   "supportedRequestSchemaVersions": [

package/native-client.mjs

@@ -41,7 +41,10 @@ export async function invokeNativeResult(domain, operation, input, dependencies)
     const found = discovery.result.output;
     const extension = (found.capabilities ?? found).responseExtensions;
     if (extension?.automaticFeedback === 'entrorove.automatic-feedback/1.0') feedbackRequired = !extension.automaticFeedbackObservations.includes(operation);
-    const ajv = new Ajv({ strict: true, strictRequired: false, allErrors: true });
+    // JSON Schema permits object keywords without an adjacent type keyword.
+    // Validate their actual semantics rather than rejecting the published
+    // contract through Ajv's optional strictTypes authoring convention.
+    const ajv = new Ajv({ strict: true, strictRequired: false, strictTypes: false, allErrors: true });
     ajv.addKeyword({ keyword: 'optional', schemaType: 'boolean', valid: true });
     ajv.addFormat('uuid', /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i);
     ajv.addFormat('date-time', value => Number.isFinite(Date.parse(value)));
@@ -52,7 +55,7 @@ export async function invokeNativeResult(domain, operation, input, dependencies)
 }
 export async function runNative(domain, operation, input, dependencies) {
   const { response, result } = await invokeNativeResult(domain, operation, input, dependencies);
-  process.stdout.write(`${JSON.stringify(presentInvocationNotices(result, dependencies.onIdeEvent))}\n`);
+  process.stdout.write(`${JSON.stringify(presentInvocationNotices(result, dependencies.onIdeEvent,{home:dependencies.home}))}\n`);
   if (!response.ok || ['blocked', 'failed', 'incomplete'].includes(result.output.status)) process.exitCode = 2;
   return result;
 }

package/native-notification.mjs

@@ -5,10 +5,13 @@ import os from 'node:os';
 import { sha256 } from './local-integrity.mjs';
 import { readCredential } from './local-credential.mjs';
 import { withStateLock } from './local-state-lock.mjs';
+import { sandboxTaskNumber } from './task-identity.mjs';
 
 const messageKinds = { confirmed: '任务需要你确认。', failed: '任务执行失败，请查看 IDE 中的状态。',
   blocked: '任务已阻断，请查看 IDE 中的所需操作。',
-  reported: '任务输出已生成，请查看 IDE 中的结果。', verified: '任务验证已完成。', test: 'Entrorove 系统通知测试。' };
+  reported: '任务输出已生成，请查看 IDE 中的结果。', verified: '任务验证已完成。',
+  entered: '沙箱已进入。', balance: '模型余额不足。', test: 'Entrorove 系统通知测试。' };
+const shortStates = { entered:'已进入',reported:'待验收',verified:'已完成',confirmed:'待确认',failed:'执行失败',blocked:'已阻断',balance:'余额不足' };
 function controls(home) { return path.join(home, '.entrorove', 'notifications.json'); }
 async function readControls(home) {
   const file = controls(home);
@@ -42,8 +45,9 @@ export async function configureNativeNotifications(input, home = os.homedir()) {
   await withStateLock(controls(home), () => saveControls(home, state));
   return notificationSettings(home);
 }
-export async function sendNativeNotification(kind, { platform = process.platform, execute = execFile } = {}) {
-  const message = messageKinds[kind];
+export async function sendNativeNotification(kind, { platform = process.platform, execute = execFile, taskNumber } = {}) {
+  const message = /^\d{5}$/u.test(taskNumber ?? '') && shortStates[kind]
+    ? `沙箱 ${taskNumber} · ${shortStates[kind]}` : messageKinds[kind];
   if (!message) throw new Error('Invalid notification kind');
   let file, args;
   if (platform === 'darwin') {
@@ -58,7 +62,9 @@ export async function sendNativeNotification(kind, { platform = process.platform
   return { submitted: true, displayVerified: false };
 }
 export async function notifyIdeEvent(event, { home = os.homedir(), send = sendNativeNotification } = {}) {
-  const kind = event.requiresConfirmation && event.kind !== 'notice' ? 'confirmed'
+  const kind = event.taskId && event.phase === 'accepted' ? 'entered'
+    : event.errorCode === 'model-balance-insufficient' ? 'balance'
+    : event.requiresConfirmation && event.kind !== 'notice' ? 'confirmed'
     : event.kind === 'evaluation' ? event.disposition === 'bad' ? 'failed' : null
     : event.state === 'blocked' ? event.requiresConfirmation ? 'confirmed' : 'blocked'
       : event.phase === 'workflow' && ['reported', 'verified', 'failed'].includes(event.state) ? event.state : null;
@@ -68,9 +74,10 @@ export async function notifyIdeEvent(event, { home = os.homedir(), send = sendNa
   return withStateLock(controls(home), async () => {
     const state = await readControls(home);
     if (!state?.enabled || state.accountBinding !== sha256(await readCredential(home))) return { submitted: false };
-    const key = sha256(`${id}:${kind}`);
+    const key = sha256(`${id}:${event.taskId ? kind === 'entered' ? 'start' : 'end' : kind}`);
     if (state.seen.includes(key)) return { submitted: false, duplicate: true };
+    const result = await send(kind,event.taskId ? { taskNumber:sandboxTaskNumber(event.taskId) } : {});
     state.seen = [...state.seen.slice(-99), key]; await saveControls(home, state);
-    return send(kind);
+    return result;
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@entrorove/skill",
-  "version": "0.1.35",
+  "version": "0.1.37",
   "type": "module",
   "bin": {
     "entrorove": "cli.mjs"
@@ -79,6 +79,9 @@
     "remote-client.mjs",
     "scope-runner-client.mjs",
     "cloud-task-client.mjs",
+    "task-entry-client.mjs",
+    "task-identity.mjs",
+    "task-identity.d.mts",
     "cloud-watch-client.mjs",
     "cloud-event-stream.mjs",
     "ide-presentation.mjs",
@@ -134,6 +137,7 @@
     "local-scope-workspaces.mjs",
     "local-scope-git.mjs",
     "local-scope-git-reads.mjs",
+    "local-git-executable.mjs",
     "local-scope-git-comparison.mjs",
     "local-scope-git-attributes.mjs",
     "local-scope-git-history.mjs",

package/release-state.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.release-state/1.0",
-  "version": "0.1.35",
-  "digest": "a6c953df9972ceb589a3e0bbbd057a3db5fb30f6811962d6c984a8d2cf827f83",
+  "version": "0.1.37",
+  "digest": "7b17a634819efd17e06f32525d69cab7d0ef2a7c35ce9c53f9e8a3c8283710ee",
   "files": {
     "local-final-gate16.mjs": "b30caab08441449ad556a6e9a3cefbf91190f0b3f7370f46d2a21156375aa8e3",
     "local-final-gate16-checks.mjs": "1dd30e9666d458d8b12ca6e4975f6f0ac8450c3ea9cbecc7401ae037f66b589a",
@@ -44,15 +44,15 @@
     "local-autocoord17-waits.mjs": "2b0a713987822548a94e1ed3a9a891532db45383797dfc5d5bc8d1e35593cf25",
     "local-validator-isolation17.mjs": "48e94604e28b8fddd567dfb35ff60b73fd094a5803bd49f076388b7f310f92aa",
     "local-calctool-composition17.mjs": "ac89fcb41ab0d0d9b47c1b5696945281b0894eb064820775e36a011c76314e6a",
-    "cli.mjs": "f0a3104ef9f4431ded2a7049c08ae6435b09ed53c4cba486c2bd52db2728d999",
+    "cli.mjs": "6ecb24fe53e7aa5412e38028921246e8a1f7128a2c5931a6fcd80aa1153ca358",
     "review-client.mjs": "3491eef68ed533174b31db3c53febb6519b8f088f71a9964644714a9a4c03c77",
     "version.mjs": "1f392147d72c40af4b03b307ea607075fb815af5174fa07e254b95fe12dbf3e7",
-    "SKILL.md": "ffea399b940f9eedd82d2c5e2f9b3bce606f47b27020c2c1b3c8b128e3a2161a",
-    "CAPABILITY-MAP.md": "8e1d007d594ae82dd77f89842cf1aa8d17db56f9cac98691759390c28162d848",
+    "SKILL.md": "eba3ac28270ff590d2602ec057d1e0a6f5dcb3921f53367d6dee588d9b3e9265",
+    "CAPABILITY-MAP.md": "40755edd3c698bbbbd4f49bc47a21c5ad9bbb8eb05e9542dd7d3a11a0254ea35",
     "AGREEMENT.md": "f93a68e92c457200dd024610e65f74e478b8f60860f951da818b70561f1b9bf8",
-    "package.json": "9a7f12414556bcc150d57e64881694aeddfe0b760e98454491ac5a6585ed0421",
+    "package.json": "0a106634b48e5c1174fac08345bbb8f324e65a793ac4ba88fb48fe132f503a4a",
     "manifest.json": "ab06e307795bc9da5add926752b6c4dbdaf18625090261a035aa356a679c504f",
-    "release.mjs": "eca6032eae240fb90c7646e0b1509ea6b4c94c23b90aca87e4091996c5b9b5f8",
+    "release.mjs": "6b6726525ec567d7e69b7ed29dbd205b63a2a018b92766e1846e085c82eec1e6",
     "local-cli.mjs": "9eca8aefcb086cdce792105f9558cc26e34a0c88befaf0a56f4c7bdbd35f0a05",
     "local-state-lock.mjs": "1dbf64264642a0851faf043e07ee9f66d2ad0508e9f799b0626246e42fae893e",
     "local-execution.mjs": "cdada6df6dc8831cebb58a629b56c4b3f8e1bf9aae4e3fdc121521ba20839383",
@@ -60,7 +60,7 @@
     "local-evidence-verification.mjs": "9b7dea31777505272f63616fd62af7603338f703bb1285fc565d6451715c7ce0",
     "local-formula.mjs": "706d5ec0cb2caf95a547531a81ca746fe246d4c53d902e03595a3b360e8c85af",
     "local-ledger.mjs": "2009fb68aadcd7292b72f1d0d99f378d03644be1c5b4b4150d9f6a0b3f7c15ce",
-    "local-error.mjs": "9dc42763ca7013cde607543308e029796d68f3b020a5a3b4ad9e68815e38d0f5",
+    "local-error.mjs": "29845eec009fa946b90a0c08367ccda2408949ad5fbd2c250e408b541a5dc7d0",
     "blueprint-criterion-wire.mjs": "fb6b7dcce0b97a699e3e8968372767a3fddd83fedc750998573f789177243072",
     "blueprint-criterion-runner.mjs": "761c0e670b4b20c6bed53e5ca5d0178759505c3977ea2ed1b7223383c534bc4c",
     "local-chain-bindings.mjs": "b8eff999ccd17b53c614a3c9f5376da78fcaa8632bb3e07bc1adcceda2e75f6c",
@@ -89,9 +89,10 @@
     "local-scope-candidate.mjs": "8f0bd9606e70d4a0ebacdd3cd600ec3afed85e2bb3e1760aa1144cf55d4e028a",
     "local-scope-context.mjs": "79753abfc6c76089d17f003a1be537dfaea10d6731c542f7fc53f2a9996ed164",
     "local-scope-files.mjs": "0671ac4baef610a55ea6c1db6ebca7a4b6cfda45edb8aeaa828019e2a26f5a76",
-    "local-scope-repository.mjs": "af7fe24408509dcebe39bdfc6fcef6adcf66f6ad09473149f920d5e921a48d1a",
+    "local-scope-repository.mjs": "b6f3f9923e040bfa3d5f48f447431df1cf9bbda02c967b3d9378863c8fd44733",
     "local-scope-git.mjs": "53bbbb6c4795db711b5bc164591a6ad79a561427da046d6bbe997dae6eb82829",
-    "local-scope-git-reads.mjs": "d18d4441664aa59ad8360ee16a69fc0282e7530705d5ae7950944a8158448bb4",
+    "local-scope-git-reads.mjs": "5d8a2636bab955cb325cb693db7423e69512355887ae5b5af3b8cb615f5ddad0",
+    "local-git-executable.mjs": "9391d716529025b1de3ee006df658a9d765b6ef29ad24ef9b7436829318e651e",
     "local-scope-git-comparison.mjs": "d86e559843087ae851795c9fb16b844dc46cc461fb5da37dbca0f6ba0d06450b",
     "local-scope-git-attributes.mjs": "63c37db40a6789a5dd98ca431b24d9d118ba3d808b330785b88c7f9037e40518",
     "local-scope-git-history.mjs": "47d2ee6baa0b1d3d5f0b7a1d5bb9e23c1fbd6cf2884328458448f45da5013483",
@@ -118,17 +119,20 @@
     "local-scope-state.mjs": "8b600a91fc0068d7a8c0bb752ddba7ed30ada93daafb118d6cba2368fd94cb27",
     "local-scope-workspaces.mjs": "a44c34537e5ed2dcaf193a985e5bc05957989fbb160a650f9e37ba7d66eb2de8",
     "local-task-routing.mjs": "e26d6f1ba134ffe1da2a49b4fb6bb6dfa5617671f774a08e719d04f202cf5eca",
-    "remote-client.mjs": "f676d17c867e9abd59943528a7716d444a0cf2fa637d48a1e397cbce9f37c640",
-    "cloud-task-client.mjs": "ecb6124ea5e6249f31fb95cb68d13d821d2daea8768fe47ddf6dcf82fc3392cc",
+    "remote-client.mjs": "62a4ddf8422d279bdb568d9800dbf2bd8e3477556188d5a0ef04091a846ccf69",
+    "cloud-task-client.mjs": "77ced16a6f5dc3f08ef149da999fb488e62bb64964d448efa821f675f67cbdd7",
     "scope-runner-client.mjs": "646ab4f80d4a8209e922fd45f40efd968f0744d9dfc03188b222c1a2e11e83b8",
-    "native-client.mjs": "d0f8a52e1195dd72ba0ae1febe25f0d6c37eff6ecf010e568935cacdf3c975bb",
-    "native-notification.mjs": "f116772178140d1a2a7aac4a8e361a76543b1f47c84b3823a26a797f11a8bfbb",
+    "native-client.mjs": "6f5575909bae9daba643287f876ffa0f9ff1c53a367b32a40145d740456d6605",
+    "native-notification.mjs": "8859a26c6f13d222711f763acf49ed8546b3306cf71f990643ac31a5ccaf1ba1",
     "local-peer-status.mjs": "a971bcc69d60bb32b875ca5bb4297d948631d5d2821b812c279613ea059a8b4f",
-    "cloud-watch-client.mjs": "bfbe636c10af467855776f9d29008d9ce13420b66bcc91b5bf8f6ef79fb2aefe",
+    "cloud-watch-client.mjs": "5b93935c19a104d72afed07d4a56746c9617707e075884b93d22050c95cee0c1",
     "cloud-event-stream.mjs": "e0eec9fc3e0613094523929634f25030df5ca5c5b5fe2c1e1a4586ab10574808",
-    "ide-presentation.mjs": "dcf4efaa546a35752247a64dc4a6d0c0feaf7c3c2c8222330288b1202c0484f9",
-    "automatic-feedback-client.mjs": "eeedc0344f91603ff8523fdbc43569a561ed10fec4178cc898db6d61f7663246",
-    "remote-transport.mjs": "5e5a8c0b490371f7f5a052cffbeee6202d4cf713dff1c43b6d910fe944f8429c",
+    "ide-presentation.mjs": "60a4d791790a767cec9666bf8734961a20a2db59146e74bafc090740b9f169c1",
+    "automatic-feedback-client.mjs": "75e92f50d6fbfa4f482af36e16c9ce5dd323a02e99eb9b434dcfa3faa846a532",
+    "task-entry-client.mjs": "36473ff61b869b8a8ba0eef1fc00e565b894dc54c92182d14e906276a6a03f9e",
+    "task-identity.mjs": "e0e6cf1f48bfa5ee3c5cb86a3c21adfce6d66b4220f4a164ca099263c7a09fb4",
+    "task-identity.d.mts": "55472e1ffc81b9d5e5c5bd56c0bf1d18ecde03ee5170a58a15ce9caf222d8761",
+    "remote-transport.mjs": "93caaca646fca298a4e08142678b134ecc3a657e00de5b9939e2364b2db9d6c4",
     "local-credential.mjs": "2a302a7f67b5ea8dc73453fc96ab33db349b59ca11fa9456e48ca1d9669d877c",
     "local-invocations.mjs": "f6ac4c41c1a5ec34de358c4cca210ca8e403b3a913150a43bb55ec9be55d9998",
     "local-task-handoff-fence.mjs": "5532a359ee29b885f7ce0cf7178f76dba0fc9245bdd92ef460982275baf0d557",

package/release.mjs

@@ -65,6 +65,7 @@ const sourceFiles = [
   'local-scope-repository.mjs',
   'local-scope-git.mjs',
   'local-scope-git-reads.mjs',
+  'local-git-executable.mjs',
   'local-scope-git-comparison.mjs',
   'local-scope-git-attributes.mjs',
   'local-scope-git-history.mjs',
@@ -94,6 +95,7 @@ const sourceFiles = [
   'scope-runner-client.mjs',
   'native-client.mjs', 'native-notification.mjs', 'local-peer-status.mjs',
   'cloud-watch-client.mjs', 'cloud-event-stream.mjs', 'ide-presentation.mjs', 'automatic-feedback-client.mjs',
+  'task-entry-client.mjs', 'task-identity.mjs', 'task-identity.d.mts',
   'remote-transport.mjs', 'local-credential.mjs', 'local-invocations.mjs',
   'local-task-handoff-fence.mjs',
   'local-task-handoff-storage.mjs', 'local-task-handoff-overlay-wire.mjs', 'local-task-handoff-completion-wire.mjs',
@@ -251,6 +253,12 @@ const invocationReleaseLabels = {
   'local-credential.mjs': { zh: '唯一私有凭据与原子轮换', en: 'Single private credential and atomic rotation' },
   'local-invocations.mjs': { zh: '无明文调用台账与用量对账', en: 'Metadata invocation ledger and usage reconciliation' },
 }
+const taskEntryReleaseLabels = {
+  'task-entry-client.mjs': { zh: '账号沙箱偏好与任务入口确认', en: 'account sandbox preferences and task entry confirmation' },
+  'task-identity.mjs': { zh: 'IDE与网页统一任务编号', en: 'shared IDE and website task numbers' },
+  'task-identity.d.mts': { zh: '任务编号接口', en: 'task number interface' },
+  'local-git-executable.mjs': { zh: 'Windows Git范围检查兼容', en: 'Windows Git scope inspection compatibility' },
+}
 
 function releaseNote(changed) {
   const suppliedZh = process.env.ENTROROVE_RELEASE_NOTE_ZH?.trim()
@@ -269,7 +277,7 @@ function releaseNote(changed) {
   return { zh: `更新了${distinct.map(label => label.zh).join('、')}。`, en: `Updated ${distinct.map(label => label.en).join(', ')}.` }
 }
 function releaseLabels() {
-  return withFinalGate16ReleaseLabels({ ...calctoolReleaseLabels, ...mutationReleaseLabels, ...swarmReleaseLabels, ...coordination17ReleaseLabels, ...nativeReadReleaseLabels, ...feedbackReleaseLabels, ...invocationReleaseLabels, ...chainReleaseLabels,
+  return withFinalGate16ReleaseLabels({ ...calctoolReleaseLabels, ...mutationReleaseLabels, ...swarmReleaseLabels, ...coordination17ReleaseLabels, ...nativeReadReleaseLabels, ...feedbackReleaseLabels, ...invocationReleaseLabels, ...chainReleaseLabels, ...taskEntryReleaseLabels,
     'blueprint-criterion-wire.mjs': { zh: '蓝图验收标准执行授权', en: 'Blueprint criterion execution authority' },
     'blueprint-criterion-runner.mjs': { zh: '蓝图验收标准实际执行器', en: 'Blueprint criterion process runner' },
     'local-archguard-ast.mjs': { zh: 'Archguard 架构合同与执行守卫', en: 'Archguard architecture contract and execution guard' },

package/releases.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.1.37",
+    "date": "2026-10-13",
+    "zh": "统一 IDE 与网页沙箱任务编号；新任务按账号设置显示云端选择并保留原任务数据，进入及结束通知去重且发送失败可重试；适配 Windows Git 范围元数据检查。",
+    "en": "Unified IDE and website sandbox task numbers; added account-based entry choices while preserving original task facts, deduplicated lifecycle notifications with retryable OS rejection, and adapted Git scope metadata inspection for Windows."
+  },
+  {
+    "version": "0.1.36",
+    "date": "2026-10-13",
+    "zh": "技能调用结束立即确认 IDE 评价回传，提供原账号、原调用与执行代次绑定的接收回执；完善原回执只读恢复与公开合同校验。",
+    "en": "Confirmed IDE evaluation acknowledgements immediately after skill calls, bound reception receipts to the original account, invocation and generation, and improved read-only recovery and published contract validation."
+  },
   {
     "version": "0.1.35",
     "date": "2026-10-13",

package/remote-client.mjs

@@ -2,8 +2,9 @@ import { createHash } from 'node:crypto';
 import Ajv from 'ajv';
 import { parseTransportResponse, requestTransport, trustedOrigin } from './remote-transport.mjs';
 import { appendInvocation } from './local-invocations.mjs';
-import { verifyAutomaticFeedback } from './automatic-feedback-client.mjs';
+import { acknowledgeAutomaticFeedback, verifyAutomaticFeedback } from './automatic-feedback-client.mjs';
 import { ideClientHeaders, presentInvocationNotices } from './ide-presentation.mjs';
+import { routeTaskEntry } from './task-entry-client.mjs';
 
 export const apiUrl = 'https://entrorove.com/api/skill/invoke';
 
@@ -71,8 +72,14 @@ export async function invokeRemote(data, dependencies) {
     return;
   }
   const token = await readCredential(home);
+  const routed = await routeTaskEntry(data, token, dependencies);
+  if (routed) {
+    process.stdout.write(JSON.stringify(routed) + '\n');
+    if (['blocked','failed','incomplete'].includes(routed.status)) process.exitCode = 2;
+    return routed;
+  }
   const { response, result } = await invokeDiscovered(data, token, { home, apiOrigin });
-  process.stdout.write(JSON.stringify(presentInvocationNotices(result,dependencies.onIdeEvent)) + '\n');
+  process.stdout.write(JSON.stringify(presentInvocationNotices(result,dependencies.onIdeEvent,{home})) + '\n');
   if (!response.ok || result.output.status === 'blocked' || result.output.status === 'failed'
     || result.output.status === 'incomplete') process.exitCode = 2;
 }
@@ -135,6 +142,7 @@ export async function postInvocation(call, token, home, feedbackRequired = false
     const expected = call.feedbackHashes ?? [call.requestId];
     if (!expected.includes(result.feedback.requestHash)) throw new Error('Automatic feedback lost its original invocation binding');
     verifyAutomaticFeedback(result.feedback,call.requestId,result.feedback.requestHash);
+    result.feedback = await acknowledgeAutomaticFeedback(result.feedback,new URL(call.url).origin,token,ideClientHeaders());
   }
   else if (feedbackRequired && !['running','pending'].includes(result.output.status)) {
     throw new Error(`Automatic feedback receipt is missing; query feedback ${call.requestId}. Do not repeat the invocation.`);

package/remote-transport.mjs

@@ -57,8 +57,10 @@ export async function requestTransport(origin, pathname, options = {}) {
   const trusted = trustedOrigin(origin);
   if (typeof pathname !== 'string' || !pathname.startsWith('/api/') || pathname.includes('://')) throw new Error('Invalid Entrorove API path');
   const url = new URL(pathname, trusted);
-  if (url.origin !== trusted || url.search || url.hash) throw new Error('Invalid Entrorove API path');
   const configured = { timeoutMs: 15_000, method: 'GET', ...options };
+  const originalGeneration = configured.method === 'GET' && /^\/api\/skill\/feedback\/[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(url.pathname)
+    && /^\?generation=[1-9][0-9]{0,14}$/.test(url.search) && Number.isSafeInteger(Number(url.searchParams.get('generation')));
+  if (url.origin !== trusted || url.hash || url.search && !originalGeneration) throw new Error('Invalid Entrorove API path');
   if (!['GET', 'POST'].includes(configured.method)) throw new Error('Invalid Entrorove transport method');
   for (let number = 1; number <= 3; number++) {
     try {

package/task-entry-client.mjs

@@ -0,0 +1,28 @@
+import { requestTransport, parseTransportResponse, trustedOrigin } from './remote-transport.mjs';
+import { runCloudTask } from './cloud-task-client.mjs';
+import { displayIdeEvent, ideClientHeaders } from './ide-presentation.mjs';
+
+/** New IDE tasks use the authenticated account preference; resumes keep their original route. */
+export async function routeTaskEntry(data, token, dependencies) {
+  if (data.operation !== 'start' || data.input?.sandboxTaskId) return null;
+  const choice = data.sandboxChoice;
+  if (choice !== undefined && !['use','local'].includes(choice)) throw new Error('sandboxChoice must be use or local');
+  if (choice === 'local') {
+    displayIdeEvent({ schemaVersion: 'entrorove.ide-event/1.0',kind: 'status',phase: 'route',
+      message: '本次采用本地方案。',separateLine: true },dependencies.onIdeEvent,{home:dependencies.home});
+    return null;
+  }
+  const response = await requestTransport(trustedOrigin(dependencies.apiOrigin()), '/api/cloud-sandbox', {
+    headers: { authorization: `Bearer ${token}`,...ideClientHeaders() },timeoutMs: 15000,
+  });
+  const preference = parseTransportResponse(response, 'cloud-sandbox preference');
+  if (!response.ok || typeof preference?.enabled !== 'boolean') {
+    throw new Error(`Cloud sandbox preference unavailable: HTTP ${response.status}. Task entry stopped.`);
+  }
+  if (!preference.enabled && choice === undefined) return null;
+  const task = data.input?.task;
+  if (!task || typeof task.goal !== 'string') throw new Error('Task entry requires the original task goal');
+  const ideTaskId = data.ideTaskId ?? process.env.CODEX_THREAD_ID;
+  return runCloudTask({ goal: task.goal, task,
+    ...(ideTaskId ? { ideTaskId } : {}),...(choice ? { sandboxChoice: choice } : {}) },dependencies);
+}

package/task-identity.d.mts

@@ -0,0 +1,2 @@
+export function scopedTaskNumber(identity: string): string;
+export function sandboxTaskNumber(taskId: string): string;

package/task-identity.mjs

@@ -0,0 +1,9 @@
+export function scopedTaskNumber(identity) {
+  let hash = 2166136261;
+  for (const character of identity) {
+    hash ^= character.codePointAt(0) ?? 0;
+    hash = Math.imul(hash, 16777619);
+  }
+  return String((hash >>> 0) % 100000).padStart(5, '0');
+}
+export function sandboxTaskNumber(taskId) { return scopedTaskNumber(`task:${taskId}`); }