@gaoding/cli 1.0.0-alpha.25 → 1.1.0

package/README.md

@@ -35,7 +35,7 @@ gd-cli model get <model>
 
 CLI 最多每小时检查一次 npm `latest`，发现新版本后每天最多在 stderr 提醒一次；检查失败不影响原命令，`CI=true` 时跳过。普通启动不会检查或修复 Agent Skill。`gd-cli update` 始终实时检查 `latest`，支持更新 npm、pnpm 全局安装并同步 Agent Skill。
 
-发布切换必须先完成精确版本的安装验收，再执行仓库中的 `scripts/promote-latest.mjs`；不要直接用未校验的 `npm dist-tag add` 移动 `latest`。
+发布只由仓库受保护 `main` 的 CI 执行：先发布并验证 `candidate` 与精确版本安装，再提升 `latest` 并验证默认安装。版本与 dist-tag 不由本地手工修改。
 
 ## License
 

package/dist/bin/postinstall.js

@@ -1,7 +1,8 @@
 import { fileURLToPath } from "node:url";
-import { resolve } from "node:path";
+import { dirname, resolve } from "node:path";
 import { loadBundledSkills } from "../src/features/skill/bundled-skills.js";
 import { syncBundledSkills } from "../src/features/skill/installer.js";
+import { markWorkBuddyInstallation, readInstallationOwner } from "../src/platform/installation-owner.js";
 export function isSupportedGlobalLifecycle(env) {
     const userAgent = env.npm_config_user_agent ?? "";
     if (env.npm_config_global === "true") {
@@ -19,8 +20,31 @@ export async function runPostinstall(options = {}) {
     if (!isSupportedGlobalLifecycle(env))
         return;
     const writeError = options.writeError ?? ((text) => process.stderr.write(text));
+    let skills;
+    try {
+        skills = (options.loadSkills ?? loadBundledSkills)(options.startFile ?? fileURLToPath(import.meta.url));
+    }
+    catch (error) {
+        if (env.GD_CLI_INSTALL_OWNER === "workbuddy") {
+            throw new Error("无法确认当前安装的 package。");
+        }
+        writeError(`警告: ${oneLineMessage(error)}\n`);
+        return;
+    }
+    const primarySkill = skills.find((skill) => skill.skill === "gd-cli");
+    if (!primarySkill)
+        throw new Error("Bundled gd-cli Skill is missing.");
+    const packageRoot = dirname(dirname(primarySkill.sourceDirectory));
+    if (env.GD_CLI_INSTALL_OWNER === "workbuddy") {
+        markWorkBuddyInstallation(packageRoot);
+        return;
+    }
+    const owner = readInstallationOwner(packageRoot);
+    if (owner === "workbuddy")
+        return;
+    if (owner === "invalid")
+        throw new Error("无法确认当前安装的托管信息。");
     try {
-        const skills = (options.loadSkills ?? loadBundledSkills)(options.startFile ?? fileURLToPath(import.meta.url));
         await (options.syncSkills ?? syncBundledSkills)(skills, {
             env,
             ...(options.homeDirectory ? { homeDirectory: options.homeDirectory } : {})
@@ -38,5 +62,8 @@ const entryPath = process.argv[1];
 const isDirectEntry = entryPath !== undefined
     && resolve(entryPath) === fileURLToPath(import.meta.url);
 if (isDirectEntry || process.env.npm_lifecycle_event === "postinstall") {
-    void runPostinstall();
+    void runPostinstall().catch((error) => {
+        process.stderr.write(`${oneLineMessage(error)}\n`);
+        process.exitCode = 1;
+    });
 }

package/dist/src/bootstrap/create-runtime.js

@@ -37,6 +37,7 @@ import { createUpdateNotificationService } from "../features/update/update-notif
 import { classifyTelemetryError } from "../cli/errors.js";
 import { createTelemetryInvocation } from "../telemetry/invocation.js";
 import { createSlsTelemetrySink } from "../telemetry/sls-sink.js";
+import { readInstallationOwner } from "../platform/installation-owner.js";
 const productionEndpoints = {
     orgApi: new URL("https://gdcli.gaoding.com/api"),
     agentApi: new URL("https://gdcli.gaoding.com/api"),
@@ -51,6 +52,8 @@ export function createProductionRuntime(options = {}) {
     const primarySkill = bundledSkills.find((skill) => skill.skill === "gd-cli");
     if (!primarySkill)
         throw new Error("Bundled gd-cli Skill is missing.");
+    const packageRoot = dirname(dirname(primarySkill.sourceDirectory));
+    const installationOwner = readInstallationOwner(packageRoot);
     const endpoints = options.endpoints ?? productionEndpoints;
     const fetch = options.fetch ?? globalThis.fetch;
     const now = options.now ?? (() => new Date());
@@ -233,13 +236,13 @@ export function createProductionRuntime(options = {}) {
     });
     const update = {
         run(signal) {
-            const packageRoot = dirname(dirname(primarySkill.sourceDirectory));
             return createUpdateService({
                 currentVersion: primarySkill.version,
                 packageRoot,
                 bundledSkills,
                 fetch,
                 telemetry,
+                installationOwner,
                 ...(process.argv[1] ? { binaryPath: process.argv[1] } : {}),
                 ...(options.homeDirectory ? { homeDirectory: options.homeDirectory } : {})
             }).run(signal);
@@ -249,6 +252,7 @@ export function createProductionRuntime(options = {}) {
         currentVersion: primarySkill.version,
         fetch,
         now,
+        installationOwner,
         ...(options.homeDirectory ? { homeDirectory: options.homeDirectory } : {}),
         ...(options.env ? { env: options.env } : {}),
         notify: (message) => { presenter.notice(message); }

package/dist/src/features/update/update-notification.js

@@ -24,6 +24,8 @@ export function createUpdateNotificationService(options) {
     });
     return {
         async check(signal) {
+            if ((options.installationOwner ?? "user") !== "user")
+                return;
             if (env.CI === "true")
                 return;
             let release = null;

package/dist/src/features/update/update-service.js

@@ -4,6 +4,7 @@ import { resolve } from "node:path";
 import { gt } from "semver";
 import { syncBundledSkills, verifyBundledSkills } from "../skill/installer.js";
 import { fetchLatestVersion } from "./latest-version.js";
+import { readInstallationOwner } from "../../platform/installation-owner.js";
 export class UpdateError extends Error {
     code;
     nextSteps;
@@ -57,6 +58,14 @@ export function createUpdateService(options) {
     return {
         async run(signal) {
             signal.throwIfAborted();
+            const owner = options.installationOwner
+                ?? readInstallationOwner(options.packageRoot);
+            if (owner === "workbuddy") {
+                throw new UpdateError("UPDATE_FAILED", "此 gd-cli 由 WorkBuddy 连接器管理。", ["请在 WorkBuddy 中更新「稿定」连接器。"]);
+            }
+            if (owner === "invalid") {
+                throw new UpdateError("UPDATE_FAILED", "无法确认当前安装的托管信息。", ["请通过原安装渠道重新安装 gd-cli。"]);
+            }
             const latest = await options.telemetry.stage("registry", async () => {
                 try {
                     const result = await fetchLatestVersion({ fetch: fetchPackage, signal });

package/dist/src/platform/installation-owner.js

@@ -0,0 +1,81 @@
+import { randomUUID } from "node:crypto";
+import { closeSync, linkSync, lstatSync, openSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+const markerFilename = ".gd-cli-installation.json";
+export function readInstallationOwner(packageRoot) {
+    const path = join(packageRoot, markerFilename);
+    try {
+        if (!lstatSync(path).isFile())
+            return "invalid";
+        const value = JSON.parse(readFileSync(path, "utf8"));
+        if (!isRecord(value))
+            return "invalid";
+        const keys = Object.keys(value);
+        return keys.length === 1 && keys[0] === "owner" && value.owner === "workbuddy"
+            ? "workbuddy"
+            : "invalid";
+    }
+    catch (error) {
+        return isMissing(error) ? "user" : "invalid";
+    }
+}
+export function markWorkBuddyInstallation(packageRoot) {
+    const packageMetadata = parsePackageMetadata(packageRoot);
+    if (packageMetadata.name !== "@gaoding/cli") {
+        throw new Error("无法确认当前安装的 package。");
+    }
+    const markerPath = join(packageRoot, markerFilename);
+    const current = readInstallationOwner(packageRoot);
+    if (current === "workbuddy")
+        return;
+    if (current === "invalid")
+        throw new Error("无法确认当前安装的托管信息。");
+    const temporaryPath = join(packageRoot, `.${markerFilename}.${randomUUID()}.tmp`);
+    let descriptor;
+    try {
+        descriptor = openSync(temporaryPath, "wx", 0o600);
+        writeFileSync(descriptor, `${JSON.stringify({ owner: "workbuddy" }, null, 2)}\n`, "utf8");
+        closeSync(descriptor);
+        descriptor = undefined;
+        linkSync(temporaryPath, markerPath);
+        unlinkSync(temporaryPath);
+    }
+    catch (error) {
+        if (descriptor !== undefined) {
+            try {
+                closeSync(descriptor);
+            }
+            catch { /* best effort */ }
+        }
+        try {
+            unlinkSync(temporaryPath);
+        }
+        catch { /* best effort */ }
+        if (isExists(error)) {
+            if (readInstallationOwner(packageRoot) === "workbuddy")
+                return;
+            throw new Error("无法确认当前安装的托管信息。");
+        }
+        throw error;
+    }
+}
+function parsePackageMetadata(packageRoot) {
+    try {
+        const value = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8"));
+        if (!isRecord(value))
+            throw new Error("invalid package metadata");
+        return value;
+    }
+    catch {
+        throw new Error("无法确认当前安装的 package。");
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isMissing(error) {
+    return isRecord(error) && error.code === "ENOENT";
+}
+function isExists(error) {
+    return isRecord(error) && error.code === "EEXIST";
+}

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@gaoding/cli",
-  "version": "1.0.0-alpha.25",
+  "version": "1.1.0",
   "description": "Gaoding command-line interface for agents and people.",
   "type": "module",
   "license": "MIT",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/",
-    "tag": "alpha"
+    "tag": "latest"
   },
   "engines": {
     "node": ">=20.0.0"
@@ -55,8 +55,8 @@
     "vitest": "4.1.10"
   },
   "gaodingRelease": {
-    "sourceCommit": "36580b12b2af5b16235c7c658505553d4eaa3c34",
-    "pipelineId": "166774",
-    "pipelineUrl": "https://git.intra.gaoding.com/gtt/gaoding-cli/-/pipelines/166774"
+    "sourceCommit": "24e9f75334bea21d5d5fed4797a346c81b37c0b1",
+    "pipelineId": "173862",
+    "pipelineUrl": "https://git.intra.gaoding.com/gtt/gaoding-cli/-/pipelines/173862"
   }
 }

package/skills/gd-cli/references/update.md

@@ -10,4 +10,6 @@ gd-cli update
 
 正常使用 CLI 时，版本可用性最多每小时检查一次；存在新版本时，同一本地自然日最多在 stderr 提醒一次。看到提示后执行 `gd-cli update`。自动检查不会更新 CLI，也不会检查或修复 Agent Skill；`CI=true` 时跳过。
 
+如果 `gd-cli update` 提示当前安装由 WorkBuddy 连接器管理，请在 WorkBuddy 中更新「稿定」连接器。不要尝试绕过该安装渠道单独升级 CLI 或同步 Agent Skill；连接器会一起管理并验收匹配版本的 CLI 与 Skill。
+
 命令不接收参数或 `--json`。不支持自动更新的安装来源会给出明确的 npm、pnpm 全局安装命令。若 CLI 已更新但 Agent Skill 验收失败，保留已更新版本，按 stderr 的下一步修复后重新执行 `gd-cli update`。