@hcmai/cli 0.3.12 → 0.3.14

package/dist/index.js

@@ -4594,18 +4594,6 @@ async function resolveBundledClosure(targetId, dir = bundledSkillsDir()) {
 
 // src/commands/skills.ts
 var SKILLS_STATE_FILE = ".hcm-skills.json";
-async function sha256File(file) {
-  return createHash2("sha256").update(await fsp2.readFile(file)).digest("hex");
-}
-async function currentSkillsRuntimeLaunch() {
-  const entry = process.argv[1];
-  if (!entry) throw invalid("\u65E0\u6CD5\u89E3\u6790\u5F53\u524D CLI entry");
-  return {
-    kind: "node-entry",
-    executableSha256: await sha256File(process.execPath),
-    entrySha256: await sha256File(entry)
-  };
-}
 function migrateSkillsState(state) {
   const skills2 = {};
   for (const [id, record] of Object.entries(state.skills ?? {})) {
@@ -5426,7 +5414,6 @@ async function recordInstalled(baseDir, documents, meta2) {
   if (meta2.base !== void 0) state.base = meta2.base;
   if (meta2.all) state.all = true;
   state.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-  state.runtime = { launch: await currentSkillsRuntimeLaunch() };
   for (const document of documents) {
     const previous = state.skills[document.id];
     state.skills[document.id] = {
@@ -8007,9 +7994,8 @@ async function prepareDeliveryExecution(input) {
   const rollback = await bindDocument(project, input.rollbackRef, "\u56DE\u6EDA\u8BF4\u660E");
   const payloads = await bindPayloadFiles(project, input.argv);
   const evidence = await bindEvidenceDirectory(project, input.evidenceDir);
-  const { bytes: lockBytes, runtime: lockedRuntime } = await readSkillsLock(project);
+  const lockBytes = await readSkillsLock(project);
   const runtime = await (input.runtimeIdentity ?? currentRuntimeIdentity)();
-  assertRuntimeMatches(runtime, lockedRuntime);
   const created = (input.now ?? (() => /* @__PURE__ */ new Date()))();
   if (Number.isNaN(created.getTime())) throw invalid2("\u5F53\u524D\u65F6\u95F4\u65E0\u6548");
   const core = {
@@ -8067,12 +8053,11 @@ async function executeDeliveryPlan(input) {
   if (canonicalJson(assessment) !== canonicalJson(plan.assessment)) {
     throw invalid2("\u5B9E\u9645 argv \u4E0E\u6267\u884C\u8BA1\u5212\u7684\u547D\u4EE4\u6458\u8981\u6216\u98CE\u9669\u4E8B\u5B9E\u4E0D\u4E00\u81F4");
   }
-  const { bytes: lockBytes, runtime: lockedRuntime } = await readSkillsLock(project);
+  const lockBytes = await readSkillsLock(project);
   if (sha2565(lockBytes) !== plan.skillsLockSha256) {
     throw invalid2("\u6280\u80FD\u9501\u6458\u8981\u5DF2\u6F02\u79FB\uFF0C\u8BF7\u91CD\u65B0\u8BC4\u4F30\u5E76 prepare");
   }
   const runtime = await (input.runtimeIdentity ?? currentRuntimeIdentity)();
-  assertRuntimeMatches(runtime, lockedRuntime);
   if (canonicalJson(runtime) !== canonicalJson(plan.runtime)) {
     throw invalid2("CLI \u8FD0\u884C\u65F6\u6458\u8981\u4E0E\u6267\u884C\u8BA1\u5212\u4E0D\u4E00\u81F4");
   }
@@ -8193,19 +8178,12 @@ async function readSkillsLock(project) {
     );
   }
   const bytes = await readSafeFile(project, path8.join(project, found[0]), "\u6280\u80FD\u9501");
-  let parsed;
   try {
-    parsed = JSON.parse(bytes.toString("utf8"));
+    JSON.parse(bytes.toString("utf8"));
   } catch (cause) {
     throw invalid2("\u6280\u80FD\u9501\u4E0D\u662F\u5408\u6CD5 JSON", cause);
   }
-  const launch = parsed?.runtime?.launch;
-  if (!isRuntimeIdentity(launch)) {
-    throw invalid2(
-      "\u6280\u80FD\u9501\u6CA1\u6709\u8BB0\u5F55 runtime.launch\uFF0C\u65E0\u6CD5\u786E\u8BA4\u300C\u73B0\u5728\u8FD9\u4EFD CLI \u5C31\u662F\u5F53\u521D\u88C5\u6280\u80FD\u7684\u90A3\u4EFD\u300D\u3002next_step=\u7528\u5F53\u524D CLI \u91CD\u8DD1\u4E00\u6B21 `hcm skills install`\uFF08\u6216 `hcm skills update`\uFF09\u5237\u65B0\u6280\u80FD\u9501"
-    );
-  }
-  return { bytes, runtime: launch };
+  return bytes;
 }
 async function bindDocument(project, reference, label) {
   const relative2 = safeRelative(reference, label);
@@ -8227,10 +8205,21 @@ async function bindEvidenceDirectory(project, reference) {
   }
   const absolute = path8.join(project, relative2);
   await assertNoSymlinkComponents(project, relative2);
-  const stat = await fs6.stat(absolute).catch((cause) => {
-    throw invalid2(`evidence \u76EE\u5F55\u4E0D\u53EF\u7528\uFF1A${relative2}`, cause);
-  });
-  if (!stat.isDirectory()) throw invalid2(`evidence \u8DEF\u5F84\u4E0D\u662F\u76EE\u5F55\uFF1A${relative2}`);
+  const stat = await fs6.stat(absolute).catch(() => null);
+  if (stat === null) {
+    await fs6.mkdir(absolute, { recursive: true, mode: 448 }).catch((cause) => {
+      throw invalid2(
+        `evidence \u76EE\u5F55\u5EFA\u4E0D\u51FA\u6765\uFF1A${relative2}\u3002next_step=\u68C0\u67E5\u4E0A\u7EA7\u76EE\u5F55\u6743\u9650\uFF0C\u6216\u6362\u4E00\u4E2A evidence/ \u4E0B\u7684\u8DEF\u5F84`,
+        cause
+      );
+    });
+    return { relative: relative2, absolute };
+  }
+  if (!stat.isDirectory()) {
+    throw invalid2(
+      `evidence \u8DEF\u5F84\u5DF2\u5B58\u5728\u4F46\u4E0D\u662F\u76EE\u5F55\uFF1A${relative2}\u3002next_step=\u6362\u4E00\u4E2A evidence/ \u4E0B\u7684\u76EE\u5F55\u540D`
+    );
+  }
   return { relative: relative2, absolute };
 }
 async function readPlan(project, file) {
@@ -8372,18 +8361,13 @@ function requireFlagValue(argv, flag, message) {
   }
   throw invalid2(message);
 }
-function assertRuntimeMatches(actual, expected) {
-  if (canonicalJson(actual) !== canonicalJson(expected)) {
-    throw invalid2("\u5F53\u524D CLI \u8FD0\u884C\u65F6\u6458\u8981\u4E0E\u6280\u80FD\u9501\u4E0D\u4E00\u81F4\u3002next_step=\u7528\u5F53\u524D CLI \u91CD\u8DD1\u4E00\u6B21 `hcm skills install` \u5237\u65B0\u6280\u80FD\u9501\uFF0C\u518D prepare");
-  }
-}
 async function currentRuntimeIdentity() {
   const entry = process.argv[1];
   if (!entry) throw invalid2("\u65E0\u6CD5\u89E3\u6790\u5F53\u524D CLI entry");
   return {
     kind: "node-entry",
-    executableSha256: await sha256File2(process.execPath),
-    entrySha256: await sha256File2(entry)
+    executableSha256: await sha256File(process.execPath),
+    entrySha256: await sha256File(entry)
   };
 }
 async function runCurrentCliCommand(argv, cwd, streams) {
@@ -8522,7 +8506,7 @@ function canonicalJson(value) {
 function sha2565(value) {
   return createHash5("sha256").update(value).digest("hex");
 }
-async function sha256File2(file) {
+async function sha256File(file) {
   const hash = createHash5("sha256");
   await new Promise((resolve4, reject) => {
     const stream = createReadStream(file);