@entrorove/skill 0.1.83 → 0.1.84

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.84 — 2026-10-23
+
+- 修复能力发现失败误报业务请求未知的问题：分别保留原业务与发现请求编号、传输原因和未发送记录，阻止轮询无持久结果的发现编号，并保留同一业务请求此前的未知执行记录。
+- Separate discovery failures from business execution with original and discovery request IDs, transport causes and unsent-attempt records; reject discovery status polling while preserving earlier unknown business transmissions.
+
 ## 0.1.83 — 2026-10-23
 
 - 补齐 Blueprint 验收申请、查询与报告的 SDK 调用入口，修复只读查询的反馈回执判定；兼容原冻结计划的时间戳格式，修正 Calctool 打包与加载的完整性绑定。

package/IDE-EXECUTION.md

@@ -47,6 +47,8 @@ Initialize the SDK/task/signer/snapshot once and reuse valid records. Public key
 
 Recovery has a durable bound: two automatic retries per unchanged verified prerequisite set or signing transition, three original GET recovery observations, and two retries of an explicitly known pre-admission prerequisite. Repeating the same reserved recovery after a crash does not allocate a new attempt. A known pre-effect request may continue after its original workflow records new verified execution, acceptance or approved stage progress. Preserve its original envelope, fenced generations, total attempts and append-only failures. Budgets for previous progress points remain spent; caller hints, a fresh signature, status polling, a new nonce, an empty journal or an altered task cannot reset them. `ENTROROVE_RECOVERY_EXHAUSTED` preserves the original result and pending evidence and disables retries without progress. Report the specific failure once for repair. Never replay unknown POST/PUT, clear records or repeatedly stop/ask the same permission.
 
+If discovery fails before the business call, the SDK returns `ENTROROVE_DISCOVERY_FAILED` with the original business `requestId`, separate discovery `sourceRequestId`, `knownBeforeTransmission: true`, and available transport/HTTP cause. Do not poll the discovery ID: it has no persisted execution result. Resolve discovery before continuing the unchanged original command. This observation covers only that attempt and never resolves a previous unknown business transmission; the SDK preserves that prior ledger state. `status` rejects the discovery ID locally with `ENTROROVE_DISCOVERY_NOT_PERSISTED`, without sending repeated GETs.
+
 
 ### IDE display and cloud planning entry
 

package/SKILL.md

@@ -5,7 +5,7 @@ description: Route a task selected for Entrorove among its eight skills, approve
 
 # entrorove · 熵巡
 
-Version: 0.1.83.
+Version: 0.1.84.
 
 Entrorove applies only to the task for which it is selected; reading these instructions, discovering capabilities or installing the package never selects or governs another task. Hooks are optional. Reading this document or calling an entry once does not execute the task. On every later turn, including after compaction, continue the original task and its required next operation before dependent work. Keep the original goal, scope, account, flow, cloud task and failure records. Never describe planning, a reported step or model output as verified delivery.
 
@@ -19,6 +19,8 @@ Reuse the task binding, installed public key pin, accepted snapshot identity, sc
 
 Automatic recovery is finite: at most two retries with unchanged verified prerequisites, two retries of an unchanged signing transition, and three original GET recovery observations. A known pre-effect request can continue when its original workflow records new verified prerequisites; its original input, total attempts and failure history remain intact. A process restart, status poll, fresh signature or new nonce does not reset the saved counter. When exhausted without progress, preserve the original state and report the concrete failure once; do not generate further attempts, ask the same approval again, clear history or force Stop to loop. Unknown effects remain GET-only. See [IDE-EXECUTION.md](IDE-EXECUTION.md#one-task-entrance-approval).
 
+Capability discovery failures are separate from business execution. `ENTROROVE_DISCOVERY_FAILED` identifies the pending business `requestId` and the discovery `sourceRequestId`; `knownBeforeTransmission` describes only that unsent attempt. Capability discovery has no stored execution status, so never poll its ID as business recovery. Preserve any earlier unknown transmission of the same business request; a failed discovery cannot clear it or authorize a replay.
+
 ## Required execution
 
 1. Install `npx --yes --prefer-online @entrorove/skill@latest install --host codex` only when the user chooses to install this skill. The default installs the skill with hooks disabled and removes its recorded Codex hooks on upgrade, preserving other host settings. SDK calls work directly in an IDE without a hook callback or supported hook adapter; retain the actual host identity. Missing credentials, failed discovery and the SDK/API's scope, approval and evidence checks still return explicit failures.

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.skill-manifest/1.0",
   "name": "entrorove",
-  "version": "0.1.83",
+  "version": "0.1.84",
   "endpoint": "https://entrorove.com",
   "requestSchemaVersion": "entrorove.skill.request/2.0",
   "supportedRequestSchemaVersions": [

package/native-client.mjs

@@ -1,9 +1,8 @@
 import Ajv from 'ajv';
 import { canonical, sha256 } from './local-integrity.mjs';
-import { postInvocation } from './remote-client.mjs';
+import { invokeDiscovery, postInvocation } from './remote-client.mjs';
 import { presentInvocationNotices } from './ide-presentation.mjs';
 import { trustedOrigin } from './remote-transport.mjs';
-import { discoveryPrerequisite } from './service-prerequisite.mjs';
 
 const domains = new Set(['aimlock', 'blueprint', 'calctool', 'swarm', 'validator', 'mergeguard', 'archguard', 'confirm-protocol']);
 const runtimeCodes = { aimlock: 'R3mQ8kWpXn', blueprint: 'wvz6zmRWmX', calctool: 'KKyA6xljUX', swarm: 'zj7fTPVh4p',
@@ -48,10 +47,7 @@ export async function invokeNativeResult(domain, operation, input, dependencies)
   const token = await dependencies.readCredential(home);
   let feedbackRequired = operation !== 'capabilities';
   if (operation !== 'capabilities') {
-    let discovery;
-    try { discovery = await postInvocation(buildNativeInvocation(domain, 'capabilities', {}, dependencies.apiOrigin()), token, home); }
-    catch (error) { throw discoveryPrerequisite(error, call.requestId); }
-    if (!discovery.response.ok || discovery.result.output.status !== 'succeeded') throw new Error('Native capability discovery failed');
+    const discovery = await invokeDiscovery(call, buildNativeInvocation(domain, 'capabilities', {}, dependencies.apiOrigin()), token, home);
     const found = discovery.result.output;
     const extension = (found.capabilities ?? found).responseExtensions;
     if (extension?.automaticFeedback === 'entrorove.automatic-feedback/1.0') feedbackRequired = !extension.automaticFeedbackObservations.includes(operation);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@entrorove/skill",
-  "version": "0.1.83",
+  "version": "0.1.84",
   "type": "module",
   "bin": {
     "entrorove": "cli.mjs"

package/release-state.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.release-state/1.0",
-  "version": "0.1.83",
-  "digest": "2a81190915dd2751aabaca0cf73018081e26a30c24d2bbacb8c6ace10968213e",
+  "version": "0.1.84",
+  "digest": "5329be638282179dadf323b72d02062c84ac1e6fbedcefb57ac29cf0c8271079",
   "files": {
     "local-recovery-budget.mjs": "be3af07db8e4cc96782edb130e827039c7a99bbe8275a92f0f741533716017f3",
     "remote-capability-cache.mjs": "9c22067e1a21eb2a209747a8ab2f27c0496b14a22a7e0f5654840e2035148df0",
@@ -92,7 +92,7 @@
     "runtime/validator-runtime-v7.0.44.d.mts": "7797edbfe2f7de24da370204dce4dfd22822a1bd80df93514fff900b98afe36f",
     "snapshot-retention.mjs": "ca46aeb36b1a5a24fe7e967031a71b9a3d33f40cb715d344402cbe0dc9c425cb",
     "snapshot-cleanup-journal.mjs": "76a9684cc95b4eb076e1298d78a9dff37948b00d9607b8f546c599072d3ed331",
-    "IDE-EXECUTION.md": "8376b69934ad02b268fd66a704821c0ebcd2c7eda04c0a2c6dec2ea6d393d8b8",
+    "IDE-EXECUTION.md": "14172eb6d0d69b410fa630996fbf1f1769d528dbab884d1489667ebb0794a8ba",
     "REUSE-DISCIPLINE.md": "f1d9c2002c0214bad0aa72aa696b39a4bd6ee4b5a236e804799e22de3418c686",
     "install-identity.mjs": "41b8c8d8b3e265d2057a07bf7dc98066c34d6b05c65bf7159ca9609c01ee4646",
     "package-archive.mjs": "e06db8d709db8710bead254ee950b78928088be01c58dcea383beaa5eb574e59",
@@ -174,7 +174,7 @@
     "install-cleanup.mjs": "8a8e1a7dfe37427f86cd4d6e317890d0829894a9949d4216674a716b36edbc54",
     "review-client.mjs": "3491eef68ed533174b31db3c53febb6519b8f088f71a9964644714a9a4c03c77",
     "version.mjs": "85284d4cd5e3314b449e6ae124243f96397bcc274817b5983a79cfdd903d46fd",
-    "SKILL.md": "5f68fe2742dfd64feeff7e5071719c1de5d09dd7f33f44cb742499f6dab3d3c9",
+    "SKILL.md": "c2baf4c0d6661526944caad19f63c16d7d560c7519f9452bd7f5c50e59e166a8",
     "CAPABILITY-MAP.md": "57805ba6a4b4fc79ffadb3bd1436999f82c295feac7bdc230bdc123f67662546",
     "AGREEMENT.md": "f93a68e92c457200dd024610e65f74e478b8f60860f951da818b70561f1b9bf8",
     "DELIVERY-BOUNDARIES.md": "cb23ce71b2197085c8441ba7c5b6c05fb21f2a954bf66b4d60cfef8b15895b8b",
@@ -257,8 +257,8 @@
     "local-scope-state.mjs": "7a6d275d6267a4d0bb55582e1bcc7654c502ecba9221b84b2149a98f0ee7518f",
     "local-scope-workspaces.mjs": "8a75ce7b6639b5682370b5738c5c2a90408e3130729608e008f03053cd50351f",
     "local-task-routing.mjs": "6e2e506b2fb0e2e8d8c5147d7df32849b57a4e94a23634f01a355d45735858e4",
-    "remote-client.mjs": "218843be687c147f60b2a231f678faac66d5e675336b860873e682daf77f08d9",
-    "service-prerequisite.mjs": "2361168ea12ca95faee75c79657a486af5e7edaf1ec8182f8f1afdf59f15c9a5",
+    "remote-client.mjs": "cb7be06201305da7b53cd21bb73b3dcdc3c8fb263855fdf731d6aeb39e080184",
+    "service-prerequisite.mjs": "7ac5a66d8b423941a5a2cef3aecce18a681aaf2b1a61612fecfa17f5d99f302d",
     "local-source-execution.mjs": "88f6ce1ea50d0a7b92e0cb47d535f8140491c52d9c6c0dfddf91ea90397a36f5",
     "fs-request-trace.mjs": "972eacbe21537bc102047127327449a6a4b0f0c65d75e3472370de91dedf4d2f",
     "cloud-task-client.mjs": "ab3e0296363b6af10eaa38a09dd43b4ae6e5704d699c7a5032fee1b7817fa0dc",
@@ -270,7 +270,7 @@
     "scope-amendment-observer.mjs": "9091f2e11b094b8a8cd27ad1454031d11a34ecb6923295fd6edfaa07c54899ee",
     "scope-amendment-mutation.mjs": "fa24191df290efad29d41eca3d1a081981fefde02b7dc4a11c75c6118a69106e",
     "scope-amendment-reference.mjs": "dc1768131beb7db224dd2ff8522dbf6361f73e01f466c9334cdfa24118720078",
-    "native-client.mjs": "522228a97d5d7dafde18b778856b3c499b6c6f75b13eae6f57c0050521233692",
+    "native-client.mjs": "1ad18c402fd1eadb3c186b547dbd075be35af34cfd46b8e5c8a0d15aac3ad4c2",
     "native-notification.mjs": "8859a26c6f13d222711f763acf49ed8546b3306cf71f990643ac31a5ccaf1ba1",
     "local-peer-status.mjs": "a971bcc69d60bb32b875ca5bb4297d948631d5d2821b812c279613ea059a8b4f",
     "cloud-watch-client.mjs": "eccce52bce1c915a71fe9a1fa3e435dba5af9a5455afdf478f04684901b6fb7b",

package/releases.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.1.84",
+    "date": "2026-10-23",
+    "zh": "修复能力发现失败误报业务请求未知的问题：分别保留原业务与发现请求编号、传输原因和未发送记录，阻止轮询无持久结果的发现编号，并保留同一业务请求此前的未知执行记录。",
+    "en": "Separate discovery failures from business execution with original and discovery request IDs, transport causes and unsent-attempt records; reject discovery status polling while preserving earlier unknown business transmissions."
+  },
   {
     "version": "0.1.83",
     "date": "2026-10-23",

package/remote-client.mjs

@@ -2,7 +2,7 @@ import { createHash } from 'node:crypto';
 import { pathToFileURL } from 'node:url';
 import Ajv from 'ajv';
 import { parseTransportResponse, requestTransport, trustedOrigin } from './remote-transport.mjs';
-import { appendInvocation } from './local-invocations.mjs';
+import { appendInvocation, readInvocations } from './local-invocations.mjs';
 import { acknowledgeAutomaticFeedback, verifyAutomaticFeedback } from './automatic-feedback-client.mjs';
 import { ideClientHeaders, presentInvocationNotices } from './ide-presentation.mjs';
 import { routeTaskEntry } from './task-entry-client.mjs';
@@ -104,10 +104,7 @@ async function invokeDiscovered(data, token, { home, apiOrigin }) {
   let feedbackRequired = false;
   if (data.operation !== 'capabilities') {
     const fetch = async () => {
-      let discovery;
-      try { discovery = await postInvocation({ ...buildInvocation('capabilities', {}), url: call.url }, token, home); }
-      catch (error) { throw discoveryPrerequisite(error, call.requestId); }
-      if (!discovery.response.ok || discovery.result.output.status !== 'succeeded') throw new Error(`Capability discovery failed: HTTP ${discovery.response.status}`);
+      const discovery = await invokeDiscovery(call, { ...buildInvocation('capabilities', {}), url: call.url }, token, home);
       return discovery.result.output.capabilities;
     };
     let capabilities = await discoveredCapabilities(new URL(call.url).origin, token, home, fetch);
@@ -123,6 +120,26 @@ async function invokeDiscovered(data, token, { home, apiOrigin }) {
   return postInvocation(call, token, home,feedbackRequired);
 }
 
+export async function invokeDiscovery(original, discovery, token, home) {
+  try {
+    const observed = await postInvocation(discovery, token, home);
+    if (!observed.response.ok || observed.result.output.status !== 'succeeded') {
+      throw Object.assign(new Error('Capability discovery was rejected'), { httpStatus: observed.response.status });
+    }
+    return observed;
+  } catch (cause) {
+    const error = discoveryPrerequisite(cause, original.requestId, discovery.requestId);
+    // A failed discovery did not send this attempt. Never let that observation
+    // overwrite an earlier unresolved transmission of the same business ID.
+    const rows = await readInvocations(home);
+    const previous = rows.filter(row => row.kind === 'remote' && row.requestId === original.requestId).at(-1);
+    if (!previous || previous.event === 'not-sent') {
+      await appendInvocation({ kind: 'remote', operation: original.body.operation, requestId: original.requestId, event: 'not-sent' }, home);
+    }
+    throw error;
+  }
+}
+
 export async function postInvocation(call, token, home, feedbackRequired = false) {
   const metadata = { kind: 'remote', operation: call.body.operation, requestId: call.requestId };
   const logged = async value => {
@@ -139,12 +156,12 @@ export async function postInvocation(call, token, home, feedbackRequired = false
   } catch (cause) {
     if (cause.established) await logged({ event: 'outcome-unknown' });
     else await appendInvocation({ ...metadata, event: 'not-sent' }, home);
-    if (cause.established) throw unknownInvocation(call.requestId);
+    if (cause.established) throw unknownInvocation(call.requestId, cause);
     throw Object.assign(new Error(`Entrorove request was not sent; connection failed after ${cause.attempts ?? 1} attempt(s); requestId=${call.requestId}`),
       { requestId: call.requestId, retryableBeforeTransmission: Boolean(cause.retryableBeforeTransmission), attempts: cause.attempts ?? 1 });
   }
-  try { result = await readResponse(response, 'invocation'); } catch {
-    await logged({ event: 'outcome-unknown' }); throw unknownInvocation(call.requestId);
+  try { result = await readResponse(response, 'invocation'); } catch (cause) {
+    await logged({ event: 'outcome-unknown' }); throw unknownInvocation(call.requestId, { ...cause, httpStatus: response.status });
   }
   if (!response.ok && !result?.output) {
     const prerequisite = prerequisiteError(response, result, { requestId: call.requestId });
@@ -153,7 +170,7 @@ export async function postInvocation(call, token, home, feedbackRequired = false
       throw Object.assign(prerequisite, prerequisite.knownBeforeEffects ? {} : { outcomeUnknown: true });
     }
     await logged({ event: response.status >= 500 ? 'outcome-unknown' : 'rejected' });
-    if (response.status >= 500) throw unknownInvocation(call.requestId);
+    if (response.status >= 500) throw unknownInvocation(call.requestId, { httpStatus: response.status });
     const code = typeof result?.error === 'string' && /^[a-z][a-z0-9-]{0,63}$/.test(result.error) ? result.error : 'request-rejected';
     throw new Error(`entrorove invocation failed: HTTP ${response.status}; ${code}; requestId=${call.requestId}`);
   }
@@ -180,9 +197,12 @@ export async function postInvocation(call, token, home, feedbackRequired = false
   return { response, result };
 }
 
-function unknownInvocation(requestId) {
-  return Object.assign(new Error(`Invocation outcome is unknown; requestId=${requestId}. Do not automatically resend this request.`),
-    { requestId, outcomeUnknown: true });
+function unknownInvocation(requestId, cause = {}) {
+  const causeCode = [cause.transportCode, cause.code].find(value => typeof value === 'string' && /^[A-Z][A-Z0-9_]{0,63}$/.test(value));
+  const httpStatus = Number.isInteger(cause.httpStatus) ? cause.httpStatus : undefined;
+  const detail = `${causeCode ? `; cause=${causeCode}` : ''}${httpStatus ? `; HTTP=${httpStatus}` : ''}`;
+  return Object.assign(new Error(`Invocation outcome is unknown; requestId=${requestId}${detail}. Do not automatically resend this request.`),
+    { requestId, outcomeUnknown: true, ...(causeCode ? { causeCode } : {}), ...(httpStatus ? { httpStatus } : {}) });
 }
 async function machineCredential(dependencies) {
   await dependencies.install();
@@ -216,10 +236,7 @@ export function createTaskMessageClient(dependencies) {
       let feedbackRequired = false;
       if (operation !== 'capabilities') {
         const discovery = buildInvocation('capabilities', {});
-        let discovered;
-        try { discovered = await postInvocation({ ...discovery, url: `${origin}/api/skill/invoke` }, token, dependencies.home); }
-        catch (error) { throw discoveryPrerequisite(error, original.requestId); }
-        if (!discovered.response.ok || discovered.result.output.status !== 'succeeded') throw new Error('Task message capability discovery failed');
+        const discovered = await invokeDiscovery(original, { ...discovery, url: `${origin}/api/skill/invoke` }, token, dependencies.home);
         validateMachineCapability(operation, input, discovered.result.output.capabilities);
         feedbackRequired = requiresAutomaticFeedback(operation,input,discovered.result.output.capabilities);
       }
@@ -250,6 +267,10 @@ export function createTaskMessageClient(dependencies) {
 
 export async function queryStatus(requestId, dependencies) {
   if (typeof requestId !== 'string' || !/^[a-f0-9]{64}$/.test(requestId)) throw new Error('status requires a sha256 requestId');
+  if (requestId === buildInvocation('capabilities', {}).requestId) {
+    throw Object.assign(new Error('This ID belongs to capability discovery, which has no stored execution result. Stop polling this ID and recover the original business command or workflow; a discovery lookup cannot establish its execution outcome.'),
+      { code: 'ENTROROVE_DISCOVERY_NOT_PERSISTED', requestId, repeatStatus: false });
+  }
   const token = await dependencies.readCredential(dependencies.home);
   const response = await readOnlyGet(dependencies.apiOrigin(), `/api/skill/status/${encodeURIComponent(requestId)}`, { authorization: `Bearer ${token}` }, 'status')
   const result = await readResponse(response, 'status');

package/service-prerequisite.mjs

@@ -32,10 +32,20 @@ export function prerequisiteFields(error) {
     ...(error.knownBeforeTransmission ? { knownBeforeTransmission: true } : {}),
     ...(error.knownBeforeEffects ? { knownBeforeEffects: true } : {}) } : {};
 }
-export function discoveryPrerequisite(error, requestId) {
-  if (!servicePrerequisite({ status: 403 }, error?.servicePrerequisite)) return error;
-  Object.assign(error, { sourceRequestId: error.requestId, requestId, knownBeforeTransmission: true });
-  delete error.outcomeUnknown; return error;
+export function discoveryPrerequisite(error, requestId, discoveryRequestId = error?.requestId) {
+  const sourceRequestId = discoveryRequestId;
+  if (servicePrerequisite({ status: 403 }, error?.servicePrerequisite)) {
+    Object.assign(error, { sourceRequestId, requestId, knownBeforeTransmission: true });
+    delete error.outcomeUnknown; return error;
+  }
+  const causeCode = [error?.causeCode, error?.transportCode, error?.code].find(value => typeof value === 'string' && /^[A-Z][A-Z0-9_]{0,63}$/.test(value));
+  const detail = `${causeCode ? `; cause=${causeCode}` : ''}${Number.isInteger(error?.httpStatus) ? `; HTTP=${error.httpStatus}` : ''}`;
+  return Object.assign(new Error(`Capability discovery failed before this business request was sent; requestId=${requestId}; discoveryRequestId=${sourceRequestId}${detail}. Do not poll the discovery ID: capability queries have no stored execution result. Repair discovery, then continue the original command with unchanged input.`), {
+    code: 'ENTROROVE_DISCOVERY_FAILED', requestId, sourceRequestId, knownBeforeTransmission: true,
+    discoveryOutcomeUnknown: error?.outcomeUnknown === true, grantsExecutionAuthority: false,
+    ...(causeCode ? { causeCode } : {}),
+    ...(Number.isInteger(error?.httpStatus) ? { httpStatus: error.httpStatus } : {}),
+  });
 }
 export async function retainPrerequisite(error, state, location, save, field = 'pending') {
   const pending = state[field], value = servicePrerequisite({ status: 403 }, error?.servicePrerequisite);