@josephyulei/summon-foundation 0.1.11 → 0.1.12

package/README.md

@@ -4,7 +4,7 @@
 
 保留真实下载状态与独立确认。基础环境不能安全启动页面时，由 Codex 对话先披露并取得独立批准，再准备专用环境；页面启动后全程同页。具体方法见仓库 `docs/install-with-codex.md`，不能先运行 npx 来准备缺失的 Node。不修改共享 PATH；获取器专用环境及其回执按缓存保留，程序另用随包运行时。发行发现仅需 curl，获取还需 tar；已验证载荷的确认、恢复和卸载不依赖下载工具。
 
-0.1.11 单页试用入口与 Foundation 0.2.16 的运行引擎共同支持当前用户共用安装及清晰的完成、取消和部分完成反馈。同一页面内保留目录选择、程序和 Skill 独立确认。真实安装、新任务发现和主动告知仍需独立验收。
+0.1.12 单页试用入口与 Foundation 0.2.17 的运行引擎共同支持当前用户共用安装及清晰的完成、取消和部分完成反馈。同一页面内保留目录选择、程序和 Skill 独立确认。真实安装、新任务发现和主动告知仍需独立验收。
 
 首次 URL 持续显示本次流程；确认仅转交本次受控子进程的当前计划，不新开manager页。--acquire仍只读获取；--resume仅在用户明确要求后恢复未完成Skill，不重放程序安装。
 
@@ -16,7 +16,7 @@ Foundation 的薄获取入口，不包含完整运行包，没有 npm 安装生
 确认 registry 中存在本版本及对应不可变 Release 后，在具备安装权限的新 Codex 对话粘贴：
 
 ```text
-npx --yes --package @josephyulei/summon-foundation@0.1.11 summon foundation
+npx --yes --package @josephyulei/summon-foundation@0.1.12 summon foundation
 ```
 
 旧版退出推荐入口；支持边界见[现行支持策略](https://github.com/y15801172513-lang/foundation/blob/main/docs/install-platform-024.md#现行支持策略)。旧不可变版本不修改，不自动迁移或清除旧安装。

package/bin/summon.mjs

@@ -8,7 +8,7 @@ import {acquireInWorker} from '../lib/acquisition-task.mjs';
 import {startProgressPage} from '../lib/progress-page.mjs';
 import {followSelectedSkill} from '../lib/skill-handoff.mjs';
 import {followMaintenance} from '../lib/maintenance-handoff.mjs';
-import {installedClient} from '../lib/manager-step.mjs';
+import {installedClient,assertUpdateEngineSupport,operationFailure} from '../lib/manager-step.mjs';
 import {resumeSkillHandoff} from '../lib/resume-handoff.mjs';
 import {parseSummonArgs} from '../lib/cli-options.mjs';
 import {createOperation,saveOperation,readOperation,runtimeObservation,operationExitCode} from '../lib/operation-result.mjs';
@@ -78,7 +78,7 @@ try{
   }else if(maintenance){
     plainPath(args.root);
     const env={...process.env};for(const key of ['NODE_OPTIONS','NODE_PATH','NODE_V8_COVERAGE','NODE_REDIRECT_WARNINGS','NODE_COMPILE_CACHE','NODE_COMPILE_CACHE_PORTABLE','NODE_PRESERVE_SYMLINKS'])delete env[key];
-    const installed=installedClient(args.root,env),current=installed.call(['manager','inspect','--root',args.root]).installation?.current;
+    const installed=installedClient(args.root,env),inspection=installed.call(['manager','inspect','--root',args.root]),current=inspection.installation?.current;
     if(!current?.identity?.installId)fail('当前安装身份无法核实；尚未获取或执行维护');
     const capability=spawnSync(installed.launcher,['--help'],{encoding:'utf8',env,timeout:15000});
     if(capability.status!==0||!capability.stdout.includes('--journey-channel'))fail('当前安装不受新版单页流程支持。请另行确认卸载旧版并重新安装新版；本次不删除、不迁移、不回退旧页面');
@@ -89,6 +89,7 @@ try{
     if(environment.state!=='ready')fail('环境复检未通过：'+environment.state+'；缺少 '+environment.missing.join('、')+'；保留当前安装，不修改系统工具');
     let candidate;
     if(args.update){
+      assertUpdateEngineSupport(inspection,{root:args.root,stage});
       updateOperation({phase:'discovering'});
       const {context,receipt}=await acquireInWorker({version:args.version,stage,operationId:operation.operationId,onContext:context=>updateOperation({version:context.version,sourceCommit:context.sourceCommit}),onProgress:download=>updateOperation({download}),onPhase:phase=>updateOperation({phase,...(phase==='fetching-and-verifying-runtime'?{download:null}:{})})});
       const directory=plainPath(path.dirname(receipt.launcher)),manifest=JSON.parse(fs.readFileSync(plainPath(path.join(directory,'manifest.json'))));
@@ -149,4 +150,4 @@ try{
     if(!operation.terminal)updateOperation({state:'verification-required',terminal:true,childExitCode:ended.code,next:'服务退出不等于成功或取消；只读核验原 session 与 installed 状态，不自动重试'});
     process.exitCode=operationExitCode(operation);
   }
-}catch(e){const message=String(e.message).replace(/https?:\/\/\S+/g,'[已脱敏网址]').replace(/(?:github_pat_|ghp_|npm_)[A-Za-z0-9_]+/g,'[已脱敏凭据]');updateOperation({state:e.code==='ENTRY_CHOICE_CANCELLED'?'cancelled-no-install':e.code==='ENTRY_CHOICE_EXPIRED'?'expired-no-install':operation?.programState==='completed'?'partial':operation&&operation.installationWrites!=='none'?'verification-required':'failed',terminal:true,...(operation?.programState==='completed'?{failedPhase:operation.phase,phase:'finished'}:{}),errorCode:['ACQUISITION_TRANSPORT_FAILED','ACQUISITION_VALIDATION_FAILED','ENTRY_CHOICE_CANCELLED','ENTRY_CHOICE_EXPIRED'].includes(e.code)?e.code:'INSTALL_ENTRY_FAILED',diagnostic:e.diagnostic||null,next:message+'。先核验旧工具进程已结束及同次结果；保留材料，不自动重试或重放安装确认'});console.error(`错误：${message}`);process.exitCode=operationExitCode(operation);}finally{if(progressPage)await progressPage.close();}
+}catch(e){const failure=operationFailure(e);const message=String(e.message).replace(/https?:\/\/\S+/g,'[已脱敏网址]').replace(/(?:github_pat_|ghp_|npm_)[A-Za-z0-9_]+/g,'[已脱敏凭据]');updateOperation({state:e.code==='ENTRY_CHOICE_CANCELLED'?'cancelled-no-install':e.code==='ENTRY_CHOICE_EXPIRED'?'expired-no-install':operation?.programState==='completed'?'partial':operation&&operation.installationWrites!=='none'?'verification-required':'failed',terminal:true,...(operation?.programState==='completed'?{failedPhase:operation.phase,phase:'finished'}:{}),errorCode:failure.code,errorStage:failure.stage,retryable:failure.retryable,diagnostic:{...failure,...(e.code==='ACQUISITION_TRANSPORT_FAILED'?{transport:e.diagnostic}:{} )},next:(e.diagnostic?.category?failure.next:message)+'。先核验旧工具进程已结束及同次结果；保留材料，不自动重试或重放安装确认'});console.error(`错误：[${failure.code} / ${failure.stage} / retryable=${failure.retryable}] ${message}`);process.exitCode=operationExitCode(operation);}finally{if(progressPage)await progressPage.close();}

package/lib/acquisition-task.mjs

@@ -11,7 +11,7 @@ export function acquireInWorker({version,stage,operationId,onContext=()=>{},onPh
       else if(event.type==='phase')onPhase(event.phase);
       else if(event.type==='progress')onProgress(event.download);
       else if(event.type==='complete')receipt=event.receipt;
-      else if(event.type==='failure')failure=Object.assign(Error(event.message),{code:event.code,diagnostic:event.diagnostic});
+      else if(event.type==='failure')failure=Object.assign(Error(event.message),{code:event.code,stage:event.stage,retryable:event.retryable,diagnostic:event.diagnostic});
     });
     worker.on('error',error=>{failure=error;});
     worker.once('exit',code=>{

package/lib/acquisition-worker.mjs

@@ -3,6 +3,7 @@
 import {parentPort, workerData} from 'node:worker_threads';
 import {inspectRelease, acquireRelease} from './acquire.mjs';
 
+let phase='discovering';
 try {
   const context = inspectRelease(workerData.version);
   // The parent persists context atomically in the stage. Finish that write
@@ -15,10 +16,10 @@ try {
   await recorded;
   const receipt = await acquireRelease(context, workerData.stage, {
     operationId:workerData.operationId,
-    onPhase:phase=>parentPort.postMessage({type:'phase',phase}),
+    onPhase:value=>{phase=value;parentPort.postMessage({type:'phase',phase});},
     onProgress:download=>parentPort.postMessage({type:'progress',download}),
   });
   parentPort.postMessage({type:'complete',receipt});
 } catch(error) {
-  parentPort.postMessage({type:'failure',code:error.code,diagnostic:error.diagnostic||null,message:String(error.message).replace(/https?:\/\/\S+/g,'[已脱敏网址]').replace(/(?:github_pat_|ghp_|npm_)[A-Za-z0-9_]+/g,'[已脱敏凭据]')});
+  parentPort.postMessage({type:'failure',code:error.code||'ACQUISITION_VALIDATION_FAILED',stage:phase,retryable:error.code==='ACQUISITION_TRANSPORT_FAILED',diagnostic:error.diagnostic||null,message:String(error.message).replace(/https?:\/\/\S+/g,'[已脱敏网址]').replace(/(?:github_pat_|ghp_|npm_)[A-Za-z0-9_]+/g,'[已脱敏凭据]')});
 }

package/lib/manager-step.mjs

@@ -2,13 +2,27 @@ import {spawn,spawnSync} from 'node:child_process';
 import path from 'node:path';
 import {plainPath} from './acquire.mjs';
 
+import {operationFailure,installedCommandFailure} from './operation-failure.mjs';
+export {operationFailure,installedCommandFailure} from './operation-failure.mjs';
+
+export function assertUpdateEngineSupport(inspection,{root,stage}={}) {
+  if(['0.2.15','0.2.16'].includes(inspection?.installation?.current?.version)&&root&&stage){
+    const relative=path.relative(path.dirname(plainPath(root)),plainPath(stage));
+    if(relative&&!relative.startsWith('..'+path.sep)&&relative!=='..'&&!path.isAbsolute(relative))return;
+  }
+  if(inspection?.supportedLifecycleOptions?.updateCandidateAuthority!=='os-account-acquisition-v1'){
+    const detail=operationFailure({code:'UPDATE_ENGINE_ACQUISITION_UNSUPPORTED',stage:'authority',retryable:false});
+    throw Object.assign(Error(detail.next),detail,{diagnostic:detail});
+  }
+}
+
 // A client of the existing installed manager, never a confirmation authority.
 export function installedClient(root,env,journeyControl=null) {
   root=plainPath(root);
   const launcher=plainPath(path.join(root,'bin/foundation-kit'));
   const call=args=>{
     const r=spawnSync(launcher,args,{env,encoding:'utf8',timeout:30000,maxBuffer:4*1024*1024});
-    if(r.status!==0){const e=Error('已安装入口检查失败；保留已核实结果，不自动重放');e.code='INSTALLED_COMMAND_FAILED';e.command=args.slice(0,2);e.exitCode=r.status;throw e;}
+    if(r.status!==0)throw installedCommandFailure(r);
     return JSON.parse(r.stdout);
   };
   return {root,launcher,call,env,journeyControl};

package/lib/operation-failure.mjs

@@ -0,0 +1,18 @@
+export function operationFailure(error) {
+  const code=/^[A-Z][A-Z0-9_]{1,79}$/.test(error?.code||'')?error.code:'INSTALL_ENTRY_FAILED';
+  const stage=/^[a-z][a-z-]{0,39}$/.test(error?.stage||'')?error.stage:'entry';
+  const category=code==='ACQUISITION_TRANSPORT_FAILED'?'transport':/PATH|TRUSTED_ROOT|SYMLINK|ANCESTOR|ACQUISITION_CACHE|UPDATE_ENGINE/.test(code)?'local-path':/CANDIDATE|INTEGRITY|SIGNATURE|ACQUISITION_VALIDATION/.test(code)?'integrity':/CONFIRM|PLAN|SESSION/.test(code)?'confirmation':'engine';
+  const next=category==='local-path'?'当前引擎不能安全接收此更新候选。保留原安装与已下载材料，不重复下载或搬移候选；核实版本兼容性。旧引擎不支持时，须另行确认保留项目资料后的卸载与新版首装。':category==='integrity'?'候选完整性或来源核验失败；保留证据，不执行或手工修补材料。':category==='transport'?'网络传输未完成；保留本次记录，核实网络后再明确发起获取，尚未执行安装。':category==='confirmation'?'确认或计划未完成；核实同次状态，不重放旧批准。':'当前操作未核实完成；保留结果，检查同次记录，不自动重试。';
+  return {code,stage,retryable:error?.retryable===true,category,next};
+}
+
+export function installedCommandFailure(result) {
+  let value;
+  for(const text of [result.stderr,result.stdout]){
+    if(typeof text!=='string'||text.length>65536)continue;
+    try{const parsed=JSON.parse(text);value=parsed.error||parsed;if(value?.code)break;}catch{}
+  }
+  const detail=operationFailure(value||{code:'INSTALLED_COMMAND_FAILED',stage:'installed-command'});
+  // Never forward arbitrary stderr/message/details, credentials or plan nonces.
+  return Object.assign(Error(detail.next),detail,{diagnostic:detail,exitCode:result.status});
+}

package/lib/progress-page.mjs

@@ -53,7 +53,7 @@ export function acquisitionProgress(record) {
   const content=lifecycleContent(record,observations);
   Object.assign(phases,{'awaiting-confirmation':'等待你确认'+verb,executing:'正在'+verb,'runtime-ended':'读取'+verb+'结果',finished:verb+'结果已返回'});
   if(record.terminal&&record.state==='partial'&&record.programState==='completed'&&kind==='update')journey.title='程序已更新，Skill 尚未更新';
-  return {content,journey,operationId:record.operationId,title:journey.title,phase:({'skill-confirmation':'等待你确认 Codex 操作','skill-executing':'正在处理 Codex 对话能力'})[record.phase]||phases[record.phase]||'正在核实本次操作',state:record.state,version:record.currentVersion&&kind==='update'?record.currentVersion+' → '+record.version:record.version||record.currentVersion||null,download:record.download||null,downloadStatus:downloadStatus(record),program:record.programState==='completed'?'程序'+verb+'已完成；'+(kind==='uninstall'?'结果由独立回执保留':record.runtimeHealth==='passed'?'稳定入口健康已核验':'健康待核实'):record.installationWrites==='none'?'尚未执行程序操作':'程序结果以同次记录为准',skill:kind==='uninstall'?(observations.remove?.state==='completed'?'已解除已归属 Codex 注册；修改和未知文件按计划保留':'本次没有已核实的注册移除结果'):record.skillRegistered===true?'Skill 文件与归属已核验；新对话识别另验':record.journeyContext?.skillChoice==='skipped'?'本次不接入 Codex':record.journeyContext?.skillChoice==='selected'?'已选择接入 Codex；仅在分别确认后执行':'Codex 接入可选，尚未选择',project:'未自动接入项目',installationRoot:record.installationRoot||null,skillDestination:record.skillDestination||null,next:record.next||(record.terminal&&record.state==='completed'&&record.journeyContext?.skillChoice==='skipped'?'本次已跳过 Codex 接入；程序操作已完成，项目另行确认。':journey.summary),nextUrl:record.terminal?(kind!=='uninstall'&&record.workbench?.state==='ready'?record.workbench.url:null):record.confirmationUrl||null,nextLabel:record.terminal?'打开已安装工作台':record.phase?.startsWith('skill-')?'查看 Codex 精确确认':kind==='install'?'继续到目录选择 / 本人确认页':'查看'+verb+'确认',resultFile:record.resultFile||null,terminal,diagnostic:record.diagnostic||null};
+  return {content,journey,operationId:record.operationId,title:journey.title,phase:({'skill-confirmation':'等待你确认 Codex 操作','skill-executing':'正在处理 Codex 对话能力'})[record.phase]||phases[record.phase]||'正在核实本次操作',state:record.state,version:record.currentVersion&&kind==='update'?record.currentVersion+' → '+record.version:record.version||record.currentVersion||null,download:record.download||null,downloadStatus:downloadStatus(record),program:record.programState==='completed'?'程序'+verb+'已完成；'+(kind==='uninstall'?'结果由独立回执保留':record.runtimeHealth==='passed'?'稳定入口健康已核验':'健康待核实'):record.installationWrites==='none'?'尚未执行程序操作':'程序结果以同次记录为准',skill:kind==='uninstall'?(observations.remove?.state==='completed'?'已解除已归属 Codex 注册；修改和未知文件按计划保留':'本次没有已核实的注册移除结果'):record.skillRegistered===true?'Skill 文件与归属已核验；新对话识别另验':record.journeyContext?.skillChoice==='skipped'?'本次不接入 Codex':record.journeyContext?.skillChoice==='selected'?'已选择接入 Codex；仅在分别确认后执行':'Codex 接入可选，尚未选择',project:'未自动接入项目',installationRoot:record.installationRoot||null,skillDestination:record.skillDestination||null,next:record.next||(record.terminal&&record.state==='completed'&&record.journeyContext?.skillChoice==='skipped'?'本次已跳过 Codex 接入；程序操作已完成，项目另行确认。':journey.summary),nextUrl:record.terminal?(kind!=='uninstall'&&record.workbench?.state==='ready'?record.workbench.url:null):record.confirmationUrl||null,nextLabel:record.terminal?'打开已安装工作台':record.phase?.startsWith('skill-')?'查看 Codex 精确确认':kind==='install'?'继续到目录选择 / 本人确认页':'查看'+verb+'确认',resultFile:record.resultFile||null,terminal,errorCode:record.errorCode||null,errorStage:record.errorStage||null,retryable:record.retryable===true,diagnostic:record.diagnostic||null};
 }
 
 // A bounded, read-only loopback view over the existing in-memory operation.

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@josephyulei/summon-foundation",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@josephyulei/summon-foundation",
-      "version": "0.1.11",
+      "version": "0.1.12",
       "license": "MIT",
       "dependencies": {
         "@sigstore/bundle": "4.0.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@josephyulei/summon-foundation",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "description": "Prepare a verified Foundation release for an explicitly confirmed Codex installation",
   "type": "module",
   "bin": {"summon": "bin/summon.mjs"},