@entrorove/skill 0.1.43 → 0.1.47

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 0.1.47 — 2026-10-16
+
+- 更新了Codex 后续轮次工具门禁、IDE 执行与复用纪律文档、技能运行和受管安装、IDE 工作流程说明、本地执行命令、远端恢复客户端。
+- Updated Codex tool guards across turns, IDE execution and reuse discipline documentation, skill runtime and managed installation, IDE workflow instructions, local execution command, remote recovery client.
+
+## 0.1.46 — 2026-10-16
+
+- 更新了Codex 后续轮次工具门禁、IDE 执行与复用纪律文档、技能运行和受管安装、IDE 工作流程说明。
+- Updated Codex tool guards across turns, IDE execution and reuse discipline documentation, skill runtime and managed installation, IDE workflow instructions.
+
+## 0.1.45 — 2026-10-16
+
+- 更新了原链同流程技能调用。
+- Updated original-chain skill calls on the same workflow.
+
+## 0.1.44 — 2026-10-16
+
+- 更新了Calctool 审计测试运维真实检查与独立最终闸门、自动版本与更新日志。
+- Updated Calctool audit, test, operations checks and independent final gate, automatic versioning and changelog.
+
 ## 0.1.43 — 2026-10-16
 
 - 更新了Codex 后续轮次工具门禁、复用与变更一致性门禁、IDE 执行与复用纪律文档、技能运行和受管安装、旧版受管安装清理、IDE 工作流程说明、任务交付边界说明、安装包配置、自动版本与更新日志、本地三轴读取预算、本地阶段边界与可恢复停止、远端恢复客户端、账号沙箱偏好与任务入口确认、工作流本地调用契约。

package/IDE-EXECUTION.md

@@ -2,7 +2,7 @@ Install or update the managed copy with `npx @entrorove/skill install`. The inst
 
 Register or sign in by email at https://entrorove.com. Enter the account key once with `npx @entrorove/skill configure` and `{"token":"..."}` on standard input. The credential persists in the current OS user's restricted local store across skill upgrades. Before asking again, use the stored credential; a missing or invalid credential must be reported explicitly. Never place the key in arguments, URLs, project files or logs. entrorove accounts and keys are independent of other services.
 
-If the IDE guard itself is the blocked step, run `entrorove unlock` directly from the installed CLI. This break-glass command is offline and management-only: it does not call a hook, read a credential, accept the agreement, inspect the protocol or authorize project writes. Use the resulting management plane to inspect or terminate the original flow; `flow-abandon` releases its task binding so the original task can start again.
+If the IDE guard itself is the blocked step, run `entrorove unlock` directly from the affected IDE terminal. The command is offline and records a 15-minute lease bound to that IDE session; it does not call a hook, read a credential, accept the agreement, inspect the protocol or authorize project writes. The host session ID must be present in the environment or supplied as `ENTROROVE_SESSION`. Under the lease, `flow-cancel` and `flow-abandon` recover the original flow; successful `flow-abandon` releases its task binding in both the flow state and the IDE session record, even without a hook callback. Queued requests remain, and other IDE sessions stay guarded.
 
 To stop using Entrorove on this computer, run `entrorove uninstall` directly. It works offline, removes only the recorded Entrorove host hooks and pristine global skill, and leaves other host settings, credentials and task records in place. A hand-edited file is reported as preserved rather than deleted. This command does not inspect or change another project.
 

package/SKILL.md

@@ -5,14 +5,14 @@ description: Execute an engineering task through Entrorove, preserving its origi
 
 # entrorove · 熵巡
 
-Version: 0.1.43.
+Version: 0.1.47.
 
 Entrorove applies to the whole task once selected. Reading this document or calling an entry once does not execute the task. On every later turn, including after compaction, continue the original task and its required next operation before dependent work. Keep the original goal, scope, account, flow, cloud task and failure records. Never describe planning, a reported step or model output as verified delivery.
 
 ## Required execution
 
 1. Install `npx --yes --prefer-online @entrorove/skill@latest install` only when the user chooses to enable this skill. The managed installer writes the skill and IDE lifecycle hook configuration; confirm that the IDE trusts it and observe a real callback before describing enforcement as active. Do not ask the user to type a nonexistent `/hooks` command. If the host reports a blocked management call, show and allow the offline `entrorove unlock` command; it only opens the skill management plane and never grants project-write authority. New execution from a detected IDE requires the exact live host approval. An unsupported IDE adapter, missing hook callback, missing credential, or failed discovery stops execution explicitly. Do not silently use native tools instead. The guard is host-agnostic: one managed hook is installed once, and each host is described by its own adapter (config location, event names, entry shape). Codex and Claude Code are the verified adapters today; a host with no verified adapter, or a run whose host session identity is missing, is refused explicitly rather than degrading to native tools.
-   `entrorove unlock` is the break-glass path: run the installed CLI directly in a terminal. It writes a short-lived management-only lease locally, without a hook callback, network request, credential read, agreement check or protocol lookup. It never authorizes project writes; use it only to recover the management plane and then continue or terminate the original flow.
+   `entrorove unlock` is the break-glass path: run the installed CLI directly in the affected IDE terminal. It writes a short-lived lease for that IDE session only, without a hook callback, network request, credential read, agreement check or protocol lookup. The current session ID must be available from the host environment or `ENTROROVE_SESSION`. The lease permits `flow-cancel` and `flow-abandon` recovery, never project writes or another session's calls. A successful `flow-abandon` clears that session's old binding locally even without a hook callback and preserves its queued requests.
    To remove this skill and its host hooks, run `entrorove uninstall` directly. It works offline and preserves unrelated host settings, credentials and task records. If a managed file was edited, it reports the preserved path instead of deleting it.
 2. Read [IDE-EXECUTION.md](IDE-EXECUTION.md) for the exact entry, cloud callbacks, account agreement and operation contracts. Use the stored account credential; never put it in arguments, URLs, project files, output or fixtures. Entrorove is independent of other systems.
 3. Discover `capabilities`, then invoke `start` with the actual goal, task type, risk and scope facts. An enabled account returns a cloud choice before charging a model. Show that choice visibly using the host question tool. Confirmation calls its original callback; exit adopts the local route for this task. Never treat silence as permission, invent acceptance, or create both routes. Existing explicit authorization for this task persists.

package/break-glass.mjs

@@ -1,10 +1,16 @@
 import { promises as fs } from 'node:fs';
-import { randomUUID } from 'node:crypto';
+import { createHash, randomUUID } from 'node:crypto';
 import os from 'node:os';
 import path from 'node:path';
 
 export const breakGlassSchema = 'entrorove.ide-break-glass/1.0';
 export const breakGlassTtlMs = 15 * 60 * 1000;
+export function breakGlassSessionDigest(sessionId) {
+  if (typeof sessionId !== 'string' || !/^[A-Za-z0-9_-]{1,200}$/u.test(sessionId)) {
+    throw new Error('Break-glass requires the current IDE session identity');
+  }
+  return createHash('sha256').update(sessionId).digest('hex');
+}
 
 function homeDirectory(home) {
   if (typeof home !== 'string' || !path.isAbsolute(home)) throw new Error('Break-glass home must be absolute');
@@ -38,11 +44,12 @@ export function breakGlassPath(home = os.homedir()) {
   return path.join(homeDirectory(home), 'break-glass.json');
 }
 
-export async function writeBreakGlass(home = os.homedir(), now = Date.now()) {
+export async function writeBreakGlass(home = os.homedir(), now = Date.now(), sessionId) {
   if (!Number.isFinite(now)) throw new Error('Break-glass clock is invalid');
+  const sessionDigest = breakGlassSessionDigest(sessionId);
   const file = breakGlassPath(home), directory = path.dirname(file);
   await ensurePrivateDirectory(directory, home);
-  const value = { schemaVersion: breakGlassSchema, mode: 'management-only', createdAt: new Date(now).toISOString(),
+  const value = { schemaVersion: breakGlassSchema, mode: 'management-only', sessionDigest, createdAt: new Date(now).toISOString(),
     expiresAt: new Date(now + breakGlassTtlMs).toISOString() };
   const stage = `${file}.${randomUUID()}.tmp`;
   await fs.writeFile(stage, `${JSON.stringify(value)}\n`, { flag: 'wx', mode: 0o600 });

package/cli.mjs

@@ -19,7 +19,7 @@ import { watchCloudTask } from './cloud-watch-client.mjs';
 import { queryAutomaticFeedback } from './automatic-feedback-client.mjs';
 import { activeIdeAdapters, installIdeHooks, uninstallIdeHooks } from './ide-install.mjs';
 import { cleanManagedDuplicates } from './install-cleanup.mjs';
-import { assertIdeExecution } from './ide-session.mjs';
+import { assertIdeExecution, ideGuardBinding, settleBreakGlassSession } from './ide-session.mjs';
 import { writeBreakGlass } from './break-glass.mjs';
 const markerName = '.entrorove-managed.json';
 const installFiles = ['SKILL.md', 'CAPABILITY-MAP.md', 'AGREEMENT.md', 'manifest.json', 'IDE-EXECUTION.md', 'REUSE-DISCIPLINE.md', 'DELIVERY-BOUNDARIES.md'];
@@ -388,7 +388,9 @@ async function invoke(data) {
   if (data?.operation === 'cloud-task') return runCloudTask(data.input, remoteDependencies());
   if (data?.operation === 'cloud-status') return runCloudStatus(data.input, remoteDependencies());
   if (data?.operation === 'cloud-watch') return runCloudWatch(data.input);
-  return invokeRemote(data, remoteDependencies());
+  const result = await invokeRemote(data, remoteDependencies());
+  await settleBreakGlassSession(['invoke'], data, result);
+  return result;
 }
 
 export { buildReview };
@@ -422,7 +424,7 @@ async function runAccountCommand(command, args) {
 async function main() {
   const [command, ...args] = process.argv.slice(2);
   if (command === 'unlock' && args.length === 0) {
-    process.stdout.write(`${JSON.stringify(await writeBreakGlass())}\n`);
+    process.stdout.write(`${JSON.stringify(await writeBreakGlass(os.homedir(), Date.now(), ideGuardBinding().sessionId))}\n`);
   } else if (command === 'uninstall' && args.length === 0) {
     const result = await uninstall();
     process.stdout.write(`${JSON.stringify(result)}\n`);

package/ide-hook.mjs

@@ -101,7 +101,7 @@ function collectResult(state, values, local) {
 }
 async function beforeTool(event, state, home) {
   if (state.phase === 'user-exited') return {};
-  const unlocked = await readBreakGlass(home);
+  const unlocked = await readBreakGlass(home, state.sessionId);
   const command = event.tool_input?.command ?? event.tool_input?.cmd, parsed = literalCommand(command);
   const isShell = ['Bash', 'exec_command', 'shell_command'].includes(event.tool_name);
   const installer = isShell && installerCommand(parsed);
@@ -230,7 +230,7 @@ export async function runIdeHook(event, { home } = {}) {
       if (resumed) messages.push(resumed);
       return { ...output(name, { additionalContext: ideContext(state) }), ...(messages.length ? { systemMessage: messages.join('\n') } : {}) };
     }
-    if (name==='Stop' && state.active && !(await readBreakGlass(home))) {
+    if (name==='Stop' && state.active && !(await readBreakGlass(home, state.sessionId))) {
       const resumed = await advanceIdeQueue(state,home);
       if (resumed || unclassifiedIdeRequirements(state) || unfinishedIdeQueue(state) && !['blocked','needs-input','delivered'].includes(state.phase)
         || !['ended','blocked','needs-input','setup','delivered'].includes(state.phase)) return {decision:'block',reason:blockedReason(state, event, `${ideContext(state)}${ideQueueContext(state)}${resumed}原任务或队列尚未取得结束回执；继续可运行工作，真实阻断必须明确报告。`)};

package/ide-session.mjs

@@ -6,7 +6,7 @@ import path from 'node:path';
 import { credentialDirectory, readCredential } from './local-credential.mjs';
 import { withStateLock } from './local-state-lock.mjs';
 import { requestTransport, parseTransportResponse } from './remote-transport.mjs';
-import { breakGlassPath, breakGlassSchema, writeBreakGlass as writeOfflineBreakGlass } from './break-glass.mjs';
+import { breakGlassPath, breakGlassSchema, breakGlassSessionDigest, writeBreakGlass as writeOfflineBreakGlass } from './break-glass.mjs';
 
 export const ideDigest = value => createHash('sha256').update(typeof value === 'string' ? value : JSON.stringify(value)).digest('hex');
 export const ideError = (code, message) => Object.assign(new Error(message), { code });
@@ -35,10 +35,12 @@ export async function writeIdeJson(file, value) {
   try { await fs.rename(stage, file); } finally { await fs.rm(stage, { force: true }); }
 }
 export const writeBreakGlass = writeOfflineBreakGlass;
-export async function readBreakGlass(home = os.homedir()) {
+export async function readBreakGlass(home = os.homedir(), sessionId) {
+  if (!sessionId) return null;
   const directory = await ideDirectory(home, true);
   const value = await readIdeJson(breakGlassPath(home));
   if (!value || value.schemaVersion !== breakGlassSchema || value.mode !== 'management-only'
+    || value.sessionDigest !== breakGlassSessionDigest(sessionId)
     || typeof value.expiresAt !== 'string' || !Number.isFinite(Date.parse(value.expiresAt))
     || Date.parse(value.expiresAt) <= Date.now()) return null;
   return value;
@@ -109,6 +111,22 @@ async function declaredHost(environment) {
 export async function assertIdeExecution(args, input, { home = os.homedir(), environment = process.env } = {}) {
   const { host, sessionId } = ideGuardBinding(environment);
   if (!host || host === 'Entrorove CLI') return;
+  const lifecycle = args[0] === 'local' ? args[1] : args[0] === 'invoke' ? input?.operation : null;
+  if (['flow-cancel', 'flow-abandon'].includes(lifecycle) && await readBreakGlass(home, sessionId)) {
+    const flowId = args[0] === 'invoke' ? input?.input?.flowId : input?.flowId;
+    const state = await readIdeJson(path.join(await ideDirectory(home), `session-${ideDigest(sessionId)}.json`));
+    if (state?.flowId && state.flowId !== flowId) throw ideError('ENTROROVE_IDE_RECOVERY_SCOPE', 'Recovery must settle the flow bound to this IDE session');
+    if (args[0] === 'local') {
+      const root = input?.repositoryRoot ?? args[2];
+      if (state?.repositoryRoot && root && await fs.realpath(root) !== state.repositoryRoot) {
+        throw ideError('ENTROROVE_IDE_RECOVERY_SCOPE', 'Recovery cannot switch the IDE session repository');
+      }
+      if (input?.home && await fs.realpath(input.home) !== await fs.realpath(home)) {
+        throw ideError('ENTROROVE_IDE_RECOVERY_SCOPE', 'Recovery cannot switch the IDE session home');
+      }
+    }
+    return;
+  }
   const declared = verifiedIdeGuards[host] ? null : await declaredHost(environment);
   if (!verifiedIdeGuards[host] && declared !== host || !sessionId) {
     throw ideError('ENTROROVE_IDE_GUARD_UNSUPPORTED', `${host} has no verified tool guard adapter. Execution is blocked; never continue with another executor.`);
@@ -124,3 +142,26 @@ export async function assertIdeExecution(args, input, { home = os.homedir(), env
   approvedResultContext = { home, sessionId: state.sessionId, repositoryRoot: state.repositoryRoot,
     accountDigest: state.accountDigest, toolUseId: approved.toolUseId, inputDigest: expected };
 }
+
+export async function settleBreakGlassSession(args, input, result, { home = os.homedir(), environment = process.env } = {}) {
+  const operation = args[0] === 'local' ? args[1] : args[0] === 'invoke' ? input?.operation : null;
+  if (!['flow-cancel', 'flow-abandon'].includes(operation)) return false;
+  const value = result?.output ?? result;
+  const flowId = args[0] === 'invoke' ? input?.input?.flowId : input?.flowId;
+  if (value?.operation !== operation || value.flowId !== flowId || !['succeeded', 'reported'].includes(value.status)
+    || operation === 'flow-abandon' && value.unbound !== true) return false;
+  const { host, sessionId } = ideGuardBinding(environment);
+  if (!host || host === 'Entrorove CLI' || !await readBreakGlass(home, sessionId)) return false;
+  const file = path.join(await ideDirectory(home), `session-${ideDigest(sessionId)}.json`);
+  const current = await readIdeJson(file);
+  if (!current) return false;
+  return ideSession({ session_id: sessionId, cwd: current.repositoryRoot }, state => {
+    if (state.flowId !== flowId) throw ideError('ENTROROVE_IDE_RECOVERY_SCOPE', 'Recovered flow no longer matches the IDE session');
+    if (operation === 'flow-abandon') {
+      for (const key of ['flowId', 'taskId', 'taskNumber', 'requestId', 'remoteRequestId', 'nextStep', 'pendingCall', 'readCalls']) delete state[key];
+      state.feedbackAcknowledged = false;
+      if (state.phase !== 'user-exited') state.phase = 'entry';
+    } else state.phase = 'ended';
+    return true;
+  }, home);
+}

package/local-chain-broker.mjs

@@ -4,11 +4,6 @@ import { inspectLocalChainResult } from './local-chain-plan.mjs';
 
 const STAGES = Object.freeze({ 'workflow-gate': 'aimlock', 'workflow-contract': 'aimlock',
   'workflow-plan': 'blueprint', 'workflow-dispatch': 'swarm', 'workflow-verdict': 'validator' });
-function nativeSchema(runtime, operation) {
-  const schemas = runtime.operationSchemas;
-  const selected = Array.isArray(schemas) ? schemas.find(value => value.operation === operation) : schemas?.[operation];
-  return selected?.inputSchema ?? selected?.input ?? selected;
-}
 export async function captureChainCloud(plan, client) {
   if (!plan.skills.length) return null;
   const output = await client.invoke('capabilities', {}), capabilities = output.capabilities;
@@ -37,10 +32,16 @@ export function checkChainSkillDispatch(original, state, resumed, input) {
   }
   const slug = STAGES[original.operation] ?? resumed.route?.slug;
   if (slug !== original.skillId) fail('ENTROROVE_CHAIN_SKILL_BINDING', 'declared skill differs from the original native workflow stage');
-  const runtime = state.cloud.runtimes.find(value => value.slug === original.skillId);
-  const schema = state.cloud.workflowOperations?.operationSchemas?.[original.operation] ?? nativeSchema(runtime, original.operation);
+  // `continue` is a workflow operation. A native skill operation with the
+  // same name can have a different request body (for example, the workflow
+  // reads its persisted interaction while the native runtime requires one).
+  const schema = state.cloud.workflowOperations?.operationSchemas?.[original.operation];
   if (schema) {
-    const validate = new Ajv({ strict: true, strictRequired: false, allErrors: true }).compile(schema);
+    // Pinned native schemas include legacy `optional` annotations and nested
+    // object branches without an explicit `type`. Keep validation of the
+    // actual JSON Schema constraints while accepting those published forms.
+    const validate = new Ajv({ strict: true, strictRequired: false, strictTypes: false, allErrors: true })
+      .addKeyword({ keyword: 'optional', schemaType: 'boolean', valid: true }).compile(schema);
     if (!validate(input)) fail('ENTROROVE_CHAIN_SKILL_INPUT', 'bound input violates its fixed original operation schema');
   }
   // Native operations without public nested schemas remain server-validated on

package/local-cli.mjs

@@ -25,7 +25,7 @@ import { ARCHGUARD_LOCAL_OPERATIONS } from './local-archguard-operations.mjs';
 import { LOCAL_BUDGET_HANDOFF_OPERATIONS } from './local-budget-handoff.mjs';
 import { LOCAL_CHAIN_OPERATIONS } from './local-chain-operations.mjs';
 import { DISCIPLINE_LOCAL_OPERATIONS } from './local-discipline-operations.mjs';
-import { assertIdeExecution } from './ide-session.mjs';
+import { assertIdeExecution, settleBreakGlassSession } from './ide-session.mjs';
 import { runManagedWorkflowLocalStep } from './workflow-local-client.mjs';
 import { localErrorEnvelope } from './local-error.mjs';
 
@@ -101,6 +101,7 @@ export async function runLocal(args = [], dependencies) {
     const validated = await checkedLocalInput(operation, input);
     const supplied = operation === 'workflow-run-step' || Object.hasOwn(LOCAL_CHAIN_OPERATIONS, operation) ? dependencies : undefined;
     const output = await withLocalInvocation(operation, validated, () => withBudgetReadContext(validated, () => handler(validated, supplied)));
+    await settleBreakGlassSession(['local', ...args], validated, output);
     process.stdout.write(`${JSON.stringify(output)}\n`);
     if (['pending', 'blocked', 'failed', 'incomplete'].includes(output?.status)) process.exitCode = 2;
   } catch (cause) {
@@ -115,5 +116,7 @@ export async function runLocalInput(operation, input, dependencies) {
   if (!handler) throw new Error(`Unsupported local operation: ${operation}`);
   const validated = await checkedLocalInput(operation, input);
   const supplied = operation === 'workflow-run-step' || Object.hasOwn(LOCAL_CHAIN_OPERATIONS, operation) ? dependencies : undefined;
-  return withLocalInvocation(operation, validated, () => withBudgetReadContext(validated, () => handler(validated, supplied)));
+  const output = await withLocalInvocation(operation, validated, () => withBudgetReadContext(validated, () => handler(validated, supplied)));
+  await settleBreakGlassSession(['local', operation], validated, output);
+  return output;
 }

package/local-final-gate16.mjs

@@ -96,8 +96,8 @@ async function performRole16(role, prepared) {
     verifiedAt: status === 'verified' ? new Date(now).toISOString() : null };
   return { execution, result, response };
 }
-function finished16(input, prepared, record) {
-  const now = Date.now(), roles = Object.fromEntries(FINAL_GATE16_ROLES.map(role => [role, record.roles[role].response]));
+export function finished16(input, prepared, record, now = Date.now()) {
+  const roles = Object.fromEntries(FINAL_GATE16_ROLES.map(role => [role, record.roles[role].response]));
   let status = FINAL_GATE16_ROLES.every(role => roles[role].status === 'verified') ? 'verified'
     : FINAL_GATE16_ROLES.some(role => roles[role].status === 'blocked') ? 'blocked' : 'incomplete';
   if (status === 'verified') for (const role of FINAL_GATE16_ROLES) {

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.skill-manifest/1.0",
   "name": "entrorove",
-  "version": "0.1.43",
+  "version": "0.1.47",
   "endpoint": "https://entrorove.com",
   "requestSchemaVersion": "entrorove.skill.request/2.0",
   "supportedRequestSchemaVersions": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@entrorove/skill",
-  "version": "0.1.43",
+  "version": "0.1.47",
   "type": "module",
   "bin": {
     "entrorove": "cli.mjs"

package/release-state.json

@@ -1,14 +1,14 @@
 {
   "schemaVersion": "entrorove.release-state/1.0",
-  "version": "0.1.43",
-  "digest": "4def2226e316c684fd009096f1bcafeec0c3519a3d4532cebe203ef095834467",
+  "version": "0.1.47",
+  "digest": "479d681e00143de8b7ac8191a245dd1240918b9ff5c0fcca2145b0a73a184452",
   "files": {
     "ide-code-mode.mjs": "f3f53357ba09727b3b597851976a24de93287c0faca5052448277d0904bb61f7",
     "ide-command.mjs": "158d8f26c1dc28a04284e429150a2060d7278661f656a75e7e9f7600f536b7bf",
-    "ide-hook.mjs": "a2f151a6d1651872b0160487493d3ecedf01e30301b7af3d336201e7f6135e32",
+    "ide-hook.mjs": "2f00e56de1e1149f117714d5dd334196f1a3f206c3bfab541393bc0f625e0108",
     "ide-install.mjs": "10247efadcfeef5da001022d12080bd0f789e67fdf7862bcc65db73dda3bbe57",
-    "ide-session.mjs": "ce3ee463804faf4c557d82ff221b0bf7ddb6f6ab7257ce7e9e0af8fbc15d57b8",
-    "break-glass.mjs": "2ad6f084c788d63fec11e64412864ac715bcb1a282dd2d8f03dc14e89e82135e",
+    "ide-session.mjs": "dc256e77b03303932d354768c0e79384340a3137e7421b4ae9c869f7e58e1a3a",
+    "break-glass.mjs": "6ec9f97c5d68bb33121b2374c06b9d4c8eb3419b52d00849fec7124bc63e4582",
     "ide-results.mjs": "dfe0d3f773c65a9fc21056538d7005012c982ed4509bc0410d7f62813d0863fd",
     "ide-queue.mjs": "806e716c775fd0079417027b135977c8516f47dddb0bc5ca19e32a355dab0e9e",
     "local-discipline-actions.mjs": "2379c08d0f49c44068f8239db7e514d75885f4606b1b88a7a36e4ff19167caca",
@@ -29,10 +29,10 @@
     "runtime/validator-runtime-v7.0.44.d.mts": "7797edbfe2f7de24da370204dce4dfd22822a1bd80df93514fff900b98afe36f",
     "snapshot-retention.mjs": "4f8919fe8ec49fb4c23e080a8ad2fa3a9282bca3fffe7cf55c64e89ef316697e",
     "snapshot-cleanup-journal.mjs": "76a9684cc95b4eb076e1298d78a9dff37948b00d9607b8f546c599072d3ed331",
-    "IDE-EXECUTION.md": "64f48dd283f8b7ad76bd33b542baebc3ae4380315c4b7158974927fd4f7a4c17",
+    "IDE-EXECUTION.md": "fc40040262f07d6bcc64fe157e200bfb85e6ea1845109e4624e7903745877891",
     "REUSE-DISCIPLINE.md": "295ecd41c931b00c21d009ab65ac160f0e2ab81b4000ed498d2e8e97c2dc6c63",
     "reuse-discipline-release.mjs": "20ded9c21bd71b8779c454f5eba4c7c0a943ef99d94117b9bbef891d2ab6e3de",
-    "local-final-gate16.mjs": "b30caab08441449ad556a6e9a3cefbf91190f0b3f7370f46d2a21156375aa8e3",
+    "local-final-gate16.mjs": "083aec470670e6cdb7ad2ab27b7a51b53a9ec3a8b4121cb9cbfa17d9940892c2",
     "local-final-gate16-checks.mjs": "1dd30e9666d458d8b12ca6e4975f6f0ac8450c3ea9cbecc7401ae037f66b589a",
     "local-final-gate16-worker.mjs": "344d64b6c1c5552b96960e0d8514a876a3dbfa9762ab9eb749038e8351727121",
     "local-final-gate16-plan.mjs": "9d34c51fa239376e552abc312409a7f3258519efe0b29d88a5054680cdda483c",
@@ -73,18 +73,18 @@
     "local-autocoord17-waits.mjs": "2b0a713987822548a94e1ed3a9a891532db45383797dfc5d5bc8d1e35593cf25",
     "local-validator-isolation17.mjs": "48e94604e28b8fddd567dfb35ff60b73fd094a5803bd49f076388b7f310f92aa",
     "local-calctool-composition17.mjs": "ac89fcb41ab0d0d9b47c1b5696945281b0894eb064820775e36a011c76314e6a",
-    "cli.mjs": "14e27d25acf2838f3eddd24a21ec438baa82650ac2235fb471f15718e996109f",
+    "cli.mjs": "0119f5c5647c41ba5a4b709664b529be76f1a9b698ab9574ba38e6683eff9717",
     "install-cleanup.mjs": "72bb6bd55382449a986828cd1ae3e98e5fd0bf373f89bbdcc039023ae72a2337",
     "review-client.mjs": "3491eef68ed533174b31db3c53febb6519b8f088f71a9964644714a9a4c03c77",
     "version.mjs": "1f392147d72c40af4b03b307ea607075fb815af5174fa07e254b95fe12dbf3e7",
-    "SKILL.md": "5531f764b82b3c2fe89592d291d05f508711b1498a65c75219c2b4396b532467",
+    "SKILL.md": "6d55d552c31ee30795aec5e29b5f3eb0a007b8da9a81431901fae4b20b3f4be5",
     "CAPABILITY-MAP.md": "a0f0468a098725ced52a96dd8e22bfc7d1ce7681a8446ebf7dae3696c76c3385",
     "AGREEMENT.md": "f93a68e92c457200dd024610e65f74e478b8f60860f951da818b70561f1b9bf8",
     "DELIVERY-BOUNDARIES.md": "d1bb2895e23fc14bf1c76707bd1f6f03b39695501a78a0b7289dc37b099889dc",
     "package.json": "8be823b5756da9b393af966a4152bee301cb49f988823aaf757e8c51bf867085",
     "manifest.json": "ab06e307795bc9da5add926752b6c4dbdaf18625090261a035aa356a679c504f",
-    "release.mjs": "9b71dc6dbda1e8db1097f0b14dbc1d66b3968ed241813f32851ceef54facec77",
-    "local-cli.mjs": "aa4c217c5029408020f76d6c0c5dafc9a0f51216085b2624f3b6aca3cffbe555",
+    "release.mjs": "34a3da868e8b5b586b318f2e8275f2f238d48a20afceb7d51c0f783a120f6973",
+    "local-cli.mjs": "11461e4cf4f6a8612ff275bf8296ec57ff22281156cb2c72834d3c764ba422a1",
     "local-state-lock.mjs": "1dbf64264642a0851faf043e07ee9f66d2ad0508e9f799b0626246e42fae893e",
     "local-execution.mjs": "46fddd78cd954fb080c660affe90cdaa716695580427336acb820089441a8025",
     "local-integrity.mjs": "e6d6eace80c610f3c7299d4f8644b0dc023aa9e3d8d64b26535ea7fbced248f1",
@@ -95,7 +95,7 @@
     "blueprint-criterion-wire.mjs": "fb6b7dcce0b97a699e3e8968372767a3fddd83fedc750998573f789177243072",
     "blueprint-criterion-runner.mjs": "761c0e670b4b20c6bed53e5ca5d0178759505c3977ea2ed1b7223383c534bc4c",
     "local-chain-bindings.mjs": "b8eff999ccd17b53c614a3c9f5376da78fcaa8632bb3e07bc1adcceda2e75f6c",
-    "local-chain-broker.mjs": "0f43ae3d5e713a344d94c3f67891b0d5f6ed0b70a8d237a54d06c0fa36e4c6d8",
+    "local-chain-broker.mjs": "d9a63f2c9eec561853a84ab5fdb7d6794f256582126017c54e5d21d0d370b015",
     "local-chain-contracts.mjs": "d4d2be4e5c6980f2dda8ff598c7333a75e0bbf2f656aa7fe327af7c9fe73da07",
     "local-chain-controller.mjs": "dd80d8001a11d8433b615a017a34c30dd130ff5cd9c5b58731314a8f93c9571b",
     "local-chain-human.mjs": "9d5dbaef13ebbbe0cfdd1146cd9c48cefcca30f33ccc0b1566e67cbd730d3499",
@@ -152,7 +152,7 @@
     "local-scope-state.mjs": "8b600a91fc0068d7a8c0bb752ddba7ed30ada93daafb118d6cba2368fd94cb27",
     "local-scope-workspaces.mjs": "a44c34537e5ed2dcaf193a985e5bc05957989fbb160a650f9e37ba7d66eb2de8",
     "local-task-routing.mjs": "6e2e506b2fb0e2e8d8c5147d7df32849b57a4e94a23634f01a355d45735858e4",
-    "remote-client.mjs": "8c2450613480d0bdb39e942fb1dea14d74d5ffadd3c72809c74aa5fbc3c8d773",
+    "remote-client.mjs": "bfb58132759a4312adc8ab33115d807c5a8d90c955aca3678e361ab9cefa84bd",
     "cloud-task-client.mjs": "11acb1a033c94cdfbdfb177a3402ad97f6a5226f577138c8cf6395dc3ebb1a39",
     "scope-runner-client.mjs": "646ab4f80d4a8209e922fd45f40efd968f0744d9dfc03188b222c1a2e11e83b8",
     "native-client.mjs": "6f5575909bae9daba643287f876ffa0f9ff1c53a367b32a40145d740456d6605",

package/release.mjs

@@ -278,10 +278,7 @@ function releaseNote(changed) {
   const distinct = distinctReleaseLabels(changed, releaseLabels())
   return { zh: `更新了${distinct.map(label => label.zh).join('、')}。`, en: `Updated ${distinct.map(label => label.en).join(', ')}.` }
 }
-function releaseLabels() {
-  return withFinalGate16ReleaseLabels({ ...reuseDisciplineReleaseLabels, ...calctoolReleaseLabels, ...mutationReleaseLabels, ...swarmReleaseLabels, ...coordination17ReleaseLabels, ...nativeReadReleaseLabels, ...feedbackReleaseLabels, ...invocationReleaseLabels, ...chainReleaseLabels, ...taskEntryReleaseLabels,
-    'blueprint-criterion-wire.mjs': { zh: '蓝图验收标准执行授权', en: 'Blueprint criterion execution authority' },
-    'blueprint-criterion-runner.mjs': { zh: '蓝图验收标准实际执行器', en: 'Blueprint criterion process runner' },
+const archguardReleaseLabels = {
     'local-archguard-ast.mjs': { zh: 'Archguard 架构合同与执行守卫', en: 'Archguard architecture contract and execution guard' },
     'local-archguard-checkpoint.mjs': { zh: 'Archguard 架构合同与执行守卫', en: 'Archguard architecture contract and execution guard' },
     'local-archguard-components.mjs': { zh: 'Archguard 架构合同与执行守卫', en: 'Archguard architecture contract and execution guard' },
@@ -298,6 +295,11 @@ function releaseLabels() {
     'local-archguard.mjs': { zh: 'Archguard 架构合同与执行守卫', en: 'Archguard architecture contract and execution guard' },
     'archguard-runtime-build.mjs': { zh: 'Archguard 架构合同与执行守卫', en: 'Archguard architecture contract and execution guard' },
     'runtime/archguard-runtime-v7.0.44.mjs': { zh: 'Archguard 架构合同与执行守卫', en: 'Archguard architecture contract and execution guard' },
+}
+function releaseLabels() {
+  return withFinalGate16ReleaseLabels({ ...reuseDisciplineReleaseLabels, ...calctoolReleaseLabels, ...mutationReleaseLabels, ...swarmReleaseLabels, ...coordination17ReleaseLabels, ...nativeReadReleaseLabels, ...feedbackReleaseLabels, ...invocationReleaseLabels, ...chainReleaseLabels, ...taskEntryReleaseLabels, ...archguardReleaseLabels,
+    'blueprint-criterion-wire.mjs': { zh: '蓝图验收标准执行授权', en: 'Blueprint criterion execution authority' },
+    'blueprint-criterion-runner.mjs': { zh: '蓝图验收标准实际执行器', en: 'Blueprint criterion process runner' },
     'cli.mjs': { zh: '技能运行和受管安装', en: 'skill runtime and managed installation' },
     'install-cleanup.mjs': { zh: '旧版受管安装清理', en: 'managed installation cleanup' },
     'version.mjs': { zh: '版本安全检查', en: 'version safety checks' },

package/releases.json

@@ -1,4 +1,28 @@
 [
+  {
+    "version": "0.1.47",
+    "date": "2026-10-16",
+    "zh": "更新了Codex 后续轮次工具门禁、IDE 执行与复用纪律文档、技能运行和受管安装、IDE 工作流程说明、本地执行命令、远端恢复客户端。",
+    "en": "Updated Codex tool guards across turns, IDE execution and reuse discipline documentation, skill runtime and managed installation, IDE workflow instructions, local execution command, remote recovery client."
+  },
+  {
+    "version": "0.1.46",
+    "date": "2026-10-16",
+    "zh": "更新了Codex 后续轮次工具门禁、IDE 执行与复用纪律文档、技能运行和受管安装、IDE 工作流程说明。",
+    "en": "Updated Codex tool guards across turns, IDE execution and reuse discipline documentation, skill runtime and managed installation, IDE workflow instructions."
+  },
+  {
+    "version": "0.1.45",
+    "date": "2026-10-16",
+    "zh": "更新了原链同流程技能调用。",
+    "en": "Updated original-chain skill calls on the same workflow."
+  },
+  {
+    "version": "0.1.44",
+    "date": "2026-10-16",
+    "zh": "更新了Calctool 审计测试运维真实检查与独立最终闸门、自动版本与更新日志。",
+    "en": "Updated Calctool audit, test, operations checks and independent final gate, automatic versioning and changelog."
+  },
   {
     "version": "0.1.43",
     "date": "2026-10-16",

package/remote-client.mjs

@@ -85,6 +85,7 @@ export async function invokeRemote(data, dependencies) {
   process.stdout.write(JSON.stringify(presentInvocationNotices(result,dependencies.onIdeEvent,{home})) + '\n');
   if (!response.ok || result.output.status === 'blocked' || result.output.status === 'failed'
     || result.output.status === 'incomplete') process.exitCode = 2;
+  return result;
 }
 
 export async function invokeRemoteResult(data, dependencies) {