@entrorove/skill 0.1.40 → 0.1.41

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.41 — 2026-10-15
+
+- 修复 0.1.39 受管技能升级与 Codex hook 配置权限误拒；补齐本地 probe/reassess 的 importContexts 输入合同。
+- Fixed upgrades from the 0.1.39 managed skill and Codex hook config permission checks; added importContexts to local probe and reassess inputs.
+
 ## 0.1.40 — 2026-10-15
 
 - 修复 flow 终止与会话解绑、tsconfig 授权路径解析，并加入离线 unlock 自救入口。

package/SKILL.md

@@ -5,7 +5,7 @@ description: Execute an engineering task through Entrorove, preserving its origi
 
 # entrorove · 熵巡
 
-Version: 0.1.40.
+Version: 0.1.41.
 
 Entrorove applies to the whole task once selected. Reading this document or calling an entry once does not execute the task. On every later turn, including after compaction, continue the original task and its required next operation before dependent work. Keep the original goal, scope, account, flow, cloud task and failure records. Never describe planning, a reported step or model output as verified delivery.
 

package/cli.mjs

@@ -133,7 +133,7 @@ async function managedState(directory) {
   if (marker.schemaVersion !== markerSchema || marker.name !== 'entrorove'
     || typeof marker.version !== 'string' || !/^\d+\.\d+\.\d+$/.test(marker.version)
     || !markerFiles.includes('SKILL.md') || !markerFiles.includes('manifest.json')
-    || markerFiles.some((name) => !installFiles.includes(name))
+    || markerFiles.some((name) => !installFiles.includes(name) && !(marker.version === '0.1.39' && name === 'DELIVERY-BOUNDARIES.md'))
     || entries.slice().sort().join(',') !== [...markerFiles, markerName].sort().join(',')) {
     return false;
   }

package/ide-install.mjs

@@ -21,6 +21,11 @@ async function prepareConfigDirectory(home) {
   if (!stat.isDirectory() || stat.isSymbolicLink() || process.platform !== 'win32' && stat.uid !== process.getuid()) throw ideError('ENTROROVE_IDE_CONFIG', 'Codex config must be an owned real directory');
   return directory;
 }
+async function readHostConfig(file) {
+  const raw = await fs.readFile(file, 'utf8').catch(cause => { if (cause.code === 'ENOENT') return null; throw cause; });
+  if (raw === null) return null;
+  try { return JSON.parse(raw); } catch { throw ideError('ENTROROVE_IDE_CONFIG', 'Existing Codex hooks config is not valid JSON; it was preserved'); }
+}
 function mergeHooks(existing, previous, current) {
   if (existing && (typeof existing !== 'object' || Array.isArray(existing) || existing.hooks && typeof existing.hooks !== 'object')) throw ideError('ENTROROVE_IDE_CONFIG', 'Existing hooks config is invalid; it was preserved');
   const next = { ...existing, hooks: { ...existing?.hooks } };
@@ -37,7 +42,7 @@ export async function installIdeHooks({ home, version, packageDirectory = source
   const directory = await ideDirectory(home, true), configDirectory = await prepareConfigDirectory(home);
   const hooksPath = path.join(configDirectory, 'hooks.json'), recordPath = path.join(directory, 'installation.json');
   return withStateLock(hooksPath, async () => {
-    const existing = await readIdeJson(hooksPath), previous = await readIdeJson(recordPath);
+    const existing = await readHostConfig(hooksPath), previous = await readIdeJson(recordPath);
     const current = definition(node, path.join(directory, 'ide-hook.mjs'));
     const config = mergeHooks(existing, previous?.definition, current);
     const contents = await Promise.all(files.map(async name => [name, await fs.readFile(path.join(source, name))]));

package/local-contracts.mjs

@@ -85,6 +85,8 @@ add('budget-auto-renew-request', renewal, ['repositoryRoot', 'flowId', 'requestI
 add('budget-auto-renew', { ...renewal, confirmation, grant: record }, ['repositoryRoot', 'flowId', 'requestId', 'scope', 'policy'], ['grant', 'confirmation']);
 add('budget-auto-renew-stop', { ...flow, reason: enumeration(['revoked', 'completed']) }, ['repositoryRoot', 'flowId', 'reason']);
 const probePaths = { anyOf: [paths, { const: ['.'] }] };
+const importContexts = { ...array(object({ sourcePrefix: relativePath, configPath: relativePath }, ['sourcePrefix', 'configPath'])),
+  maxItems: 100, uniqueItems: true, $comment: 'Source prefixes must be unique even when config paths differ.' };
 const scopeRequirement = object({ id: ledgerIdentifier, description: { ...text, pattern: '\\S', maxLength: 12000 } }, ['id', 'description']);
 const scopeInteraction = object({ type: enumeration(['confirm', 'choice', 'multi', 'input']), question: text,
   options: array(object({ id: ledgerIdentifier, label: text, hint: { type: 'string' } }, ['id', 'label'])), riskDescription: { type: 'string' },
@@ -94,7 +96,8 @@ const scopeTask = object({ goal: { ...text, pattern: '\\S', maxLength: 12000 },
   unclear: { type: 'boolean' }, architectureContract: { type: 'boolean' }, explicitAimlockRequested: { type: 'boolean' }, explicitEntroroveRequested: { type: 'boolean' }, userSpecifiedSkills: array(text),
   requirements: { ...array(scopeRequirement, 1), maxItems: 500 }, phase: enumeration(['plan', 'coordinate', 'architecture', 'verify', 'merge', 'decision']), baselineRef: text, interaction: scopeInteraction }, ['goal', 'workType', 'difficulty', 'risk']);
 const probe = { ...step, paths: probePaths, targetPaths: probePaths, task: scopeTask, baselineRef: text, snapshotId: identifier,
-  targetSymbols: array(text, 1), contextMapPath: relativePath, signerConfigPath: nullable(text), taskDigest: sha256, ownerId: ledgerIdentifier, chainDigest: sha256, repositoryId: identifier, challenge: ledgerIdentifier };
+  targetSymbols: array(text, 1), contextMapPath: relativePath, importContexts, signerConfigPath: nullable(text),
+  taskDigest: sha256, ownerId: ledgerIdentifier, chainDigest: sha256, repositoryId: identifier, challenge: ledgerIdentifier };
 add('probe', { ...probe, handoffCandidate: HANDOFF_SNAPSHOT_CANDIDATE_SCHEMA }, ['repositoryRoot']);
 schemas.probe.allOf = [{ if: { type: 'object', anyOf: ['flowId', 'stepId', 'snapshotId'].map(field => ({ required: [field] })) },
   then: { type: 'object', required: ['flowId', 'stepId', 'snapshotId'], anyOf: ['paths', 'targetPaths', 'targetSymbols'].map(field => ({ required: [field] })) } },
@@ -155,6 +158,11 @@ export function validateLocalInput(operation, input) {
     const details = validate.errors.map(error => `${error.instancePath || '/'} ${error.message}`).join('; ');
     throw Object.assign(new Error(`Invalid ${operation} input: ${details}`), { code: 'ENTROROVE_INPUT_INVALID' });
   }
+  if ((operation === 'probe' || operation === 'reassess') && Array.isArray(input.importContexts)) {
+    const prefixes = input.importContexts.map(context => context.sourcePrefix);
+    if (new Set(prefixes).size !== prefixes.length) throw Object.assign(
+      new Error(`Invalid ${operation} input: importContexts sourcePrefix values must be unique`), { code: 'ENTROROVE_INPUT_INVALID' });
+  }
   return input;
 }
 export const operationSchemasFor = operations => Object.freeze(Object.fromEntries(Object.keys(operations).map(name => [name, schemas[name]])));

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.skill-manifest/1.0",
   "name": "entrorove",
-  "version": "0.1.40",
+  "version": "0.1.41",
   "endpoint": "https://entrorove.com",
   "requestSchemaVersion": "entrorove.skill.request/2.0",
   "supportedRequestSchemaVersions": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@entrorove/skill",
-  "version": "0.1.40",
+  "version": "0.1.41",
   "type": "module",
   "bin": {
     "entrorove": "cli.mjs"

package/release-state.json

@@ -1,12 +1,12 @@
 {
   "schemaVersion": "entrorove.release-state/1.0",
-  "version": "0.1.40",
-  "digest": "4175f36123295cacefbcd09150116696d7528716ba1541256cf345ec3f31a2f3",
+  "version": "0.1.41",
+  "digest": "c69d8d891d666165a31daadaf5b8e4a12fb823400a06ed0b41ff7f8e6644d2b3",
   "files": {
     "ide-code-mode.mjs": "cd5318342aac23ba9719ad760b7d7b8018d31839df1bed4ed7142c2782e22def",
     "ide-command.mjs": "e50a7e0b68bfc1812568f60562598a463ae169984a1abe9d401229c2b66c78c2",
     "ide-hook.mjs": "567593a4c06911889954dc6499bd22be0ab67c78f0d8d46ad671bf55934f9041",
-    "ide-install.mjs": "65814d1e73cbdccdae4d8703cf9e8573492a3fd6a549ef8562a3f9d703f0ba09",
+    "ide-install.mjs": "90ff0b8d1ce26cfeae08cd88aef49e4784c0816dfdb81046bfcf463ffccb4bd8",
     "ide-session.mjs": "964c5088454a9069fbf5672d2456ba136718c3b2e9eec31c96f7c5943972731b",
     "break-glass.mjs": "2ad6f084c788d63fec11e64412864ac715bcb1a282dd2d8f03dc14e89e82135e",
     "ide-results.mjs": "dfe0d3f773c65a9fc21056538d7005012c982ed4509bc0410d7f62813d0863fd",
@@ -73,7 +73,7 @@
     "local-autocoord17-waits.mjs": "2b0a713987822548a94e1ed3a9a891532db45383797dfc5d5bc8d1e35593cf25",
     "local-validator-isolation17.mjs": "48e94604e28b8fddd567dfb35ff60b73fd094a5803bd49f076388b7f310f92aa",
     "local-calctool-composition17.mjs": "ac89fcb41ab0d0d9b47c1b5696945281b0894eb064820775e36a011c76314e6a",
-    "cli.mjs": "bb99f5a52c770ded055fe27a35b3067ac348441b9488df336e6bf751b803e459",
+    "cli.mjs": "12e2fa1e1f6b922f249668a18eec50e56c3c71d318eb5aeac6a3d63279e60d68",
     "review-client.mjs": "3491eef68ed533174b31db3c53febb6519b8f088f71a9964644714a9a4c03c77",
     "version.mjs": "1f392147d72c40af4b03b307ea607075fb815af5174fa07e254b95fe12dbf3e7",
     "SKILL.md": "d89c2a83a080a217d67d75fa0251b0f054b92e81a9e40a6c0b52c7ecf3d79099",
@@ -182,7 +182,7 @@
     "workflow-local-request.mjs": "4e24c543ce386292a87dc9cd41f90d23375f12079cacffc515c8cd01fd571780",
     "task-message-entry.mjs": "31d10056cb905237cd5649e8eb067009ff1612ec5dc1061e0373209fbc0b646a",
     "task-message-cli.mjs": "3ca65e96c28129b3bd5cac962d106e0859a1f17df1f6a66ee543c6efc22f918d",
-    "local-contracts.mjs": "d47022162233ee0b840bfd808b9d12590f4a367133ef0999233b7f76d76daa43",
+    "local-contracts.mjs": "bb1df682f06782f1c8814d50fe1c455153b29f3a1a093e87dd4ab2ed5ae16e1a",
     "local-contract-types.mjs": "85e71fa4dd67e351a4b67573c740bcdb1661cede53f097189f11837771e75e91",
     "local-archguard-ast.mjs": "7ff7df9dab0d98ed62983add751c80edea598bc94ef4f38ede0ebd4d41226c87",
     "local-archguard-checkpoint.mjs": "37896902520cc995720c96288e4a5ed3585952b55c9c35be281f91fa754c71ec",

package/releases.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.1.41",
+    "date": "2026-10-15",
+    "zh": "修复 0.1.39 受管技能升级与 Codex hook 配置权限误拒；补齐本地 probe/reassess 的 importContexts 输入合同。",
+    "en": "Fixed upgrades from the 0.1.39 managed skill and Codex hook config permission checks; added importContexts to local probe and reassess inputs."
+  },
   {
     "version": "0.1.40",
     "date": "2026-10-15",