@nggaigc/cli 0.1.45 → 0.1.47

package/README.md

@@ -1,6 +1,6 @@
 # @nggaigc/cli
 
-NGGAIGC Skill 的受信安装器，默认安装目标仍为 Codex。
+NGGAIGC Skill 的受信安装器。Codex 与 WorkBuddy 使用同一条安装命令，自动识别当前宿主。
 
 ```powershell
 npx --yes @nggaigc/cli@latest install
@@ -12,7 +12,15 @@ CLI 保留 macOS npm symlink 入口与 packed-TGZ launcher 检查，并验证随
 
 macOS arm64 辅助程序沿用已签名 Plugin 中通过完整性校验的字节；Intel Mac 不在支持范围内。实际公开版本和 `@latest` 状态以 npm registry 为准，Apple Silicon 真机验收需单独进行。
 
-## 跨 Agent 目标（0.1.45 起）
+## 统一安装入口（0.1.46 起）
+
+不带目录参数时，`install`、`start-skill`、`client` 使用同一套宿主识别：Codex 的当前会话标记，或 WorkBuddy 的会话标记／实际工作会话与专属应用标记组合。配置目录、已安装应用和通用终端变量本身不代表当前宿主；环境标记只是便利提示，不用于认证或授权。
+
+无法识别或同时命中两个宿主时，有交互终端可选择 Codex 或 WorkBuddy；非交互调用立即返回 `status: selection-required`、两项 `choices` 和退出码 3，不安装、不打开授权网页。当前 Agent 应让用户选择一次，再把 `--agent codex` 或 `--agent workbuddy` 加到原命令继续；`client` 的目标选项放在 `--` 分隔符之前，业务参数保持原样。安装结果始终返回真实 `skillsDirectory` 和 `skillPath`，连接失败也保留该位置，后续继续使用同一位置。
+
+本次仅 Codex 与 WorkBuddy 为自动识别支持范围；旧 `universal` 与自定义目录参数仍兼容，但不代表其他 Agent 已获验收。
+
+## 显式目标（0.1.45 起）
 
 下列目标参数与 `client` 桥要求 CLI 0.1.45 或更高版本。旧版本不支持新参数；`@latest` 的实际可用版本以 npm registry 与对应签名制品为准。
 
@@ -24,7 +32,7 @@ npx --yes @nggaigc/cli@latest start-skill skill.<id> [version] --skills-dir "/ab
 npx --yes @nggaigc/cli@latest client --skills-dir "/absolute/project/.codebuddy/skills" -- <原command> <原args>
 ```
 
-`install`、`start-skill` 和 `client` 支持互斥的 `--agent codex|workbuddy|universal` 或 `--skills-dir <绝对目录>`。未指定目标时仍安装至 Codex 的 `CODEX_HOME/skills`，未设置 `CODEX_HOME` 时为 `~/.codex/skills`。WorkBuddy 使用官方兼容配置目录 `~/.codebuddy/skills`；universal 使用 `~/.agents/skills`，不保证所有 Agent 自动识别。明确目录可用于宿主项目级技能路径。`--no-login` 仅跳过安装后的登录，不绕过签名、哈希、路径检查或后续鉴权。
+`install`、`start-skill` 和 `client` 支持互斥的 `--agent codex|workbuddy|universal` 或 `--skills-dir <绝对目录>`。识别或选择 Codex 后使用 `CODEX_HOME/skills`，未设置时为 `~/.codex/skills`。WorkBuddy 优先使用实际进程提供的 `WORKBUDDY_CONFIG_DIR/skills`（其次 `CODEBUDDY_CONFIG_DIR/skills`），否则使用 `~/.workbuddy/skills`；在宿主外升级时，若现代目录没有根 Skill 而旧 `~/.codebuddy/skills` 已安装，则继续使用旧位置。不会删除或迁移旧安装。`--skills-dir` 始终精确指定项目级或其他现有安装。universal 使用 `~/.agents/skills`，不保证所有 Agent 自动识别。`--no-login` 仅跳过安装后的登录，不绕过签名、哈希、路径检查或后续鉴权。
 
 根 Skill 按实际读取的 `SKILL.md` 定位父目录及其上一级 `skillsDirectory`；后续升级与 `start-skill` 显式使用同一目录。准备回执增加 `skillsDirectory`、`rootLauncherPath`，保留 `preparedSkills`；宿主应显式读取返回的真实路径。独立包的原客户端调用使用回执的受信根启动器；`client` 是同目录根包验签桥，保留原命令／参数，不增加 API 专用业务分支。安装新包不证明当前宿主热加载，必要时开启新会话。
 

package/dist/agent-selection.js

@@ -0,0 +1,91 @@
+import { createInterface } from "node:readline/promises";
+import { resolveSkillLocation, } from "./skill-location.js";
+export const agentChoices = [
+    { agent: "codex", label: "Codex" },
+    { agent: "workbuddy", label: "WorkBuddy" },
+];
+export class AgentSelectionRequired extends Error {
+    reason;
+    code = "AGENT_SELECTION_REQUIRED";
+    constructor(reason) {
+        super("AGENT_SELECTION_REQUIRED");
+        this.reason = reason;
+    }
+}
+/** Configuration paths and installed applications are not caller identity. */
+export function detectCallingAgent(environment) {
+    const present = (value) => typeof value === "string" && value.trim().length > 0;
+    const codex = present(environment.CODEX_THREAD_ID);
+    // WorkBuddy's prewarmed runtime omits WORKBUDDY_CONVERSATION_ID. Its shell
+    // still has a CodeBuddy session AND WorkBuddy-specific application markers.
+    // A standalone CodeBuddy session is deliberately not treated as WorkBuddy.
+    const workbuddy = present(environment.WORKBUDDY_CONVERSATION_ID) ||
+        (present(environment.CODEBUDDY_SESSION_ID) &&
+            present(environment.WORKBUDDY_APP_VERSION) &&
+            present(environment.WORKBUDDY_APP_PATH));
+    if (codex && workbuddy)
+        return { reason: "conflicting" };
+    if (codex)
+        return { agent: "codex" };
+    if (workbuddy)
+        return { agent: "workbuddy" };
+    return { reason: "unknown" };
+}
+async function chooseInTerminal() {
+    const terminal = createInterface({
+        input: process.stdin,
+        output: process.stderr,
+    });
+    const controller = new AbortController();
+    const cancel = () => controller.abort();
+    terminal.once("SIGINT", cancel);
+    terminal.once("close", cancel);
+    try {
+        const answer = (await terminal.question("请选择使用 NGGAIGC 的 AI 助手：1. Codex  2. WorkBuddy\n输入 1 或 2：", { signal: controller.signal }))
+            .trim()
+            .toLowerCase();
+        if (answer === "1" || answer === "codex")
+            return "codex";
+        if (answer === "2" || answer === "workbuddy")
+            return "workbuddy";
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        terminal.off("SIGINT", cancel);
+        terminal.off("close", cancel);
+        terminal.close();
+    }
+}
+/** Resolve before any installation, browser authorization or client request. */
+export async function selectCommandLocation(options, runtime = {}) {
+    const environment = runtime.environment ?? process.env;
+    if (options.agent !== undefined ||
+        options.skillsDirectory !== undefined ||
+        options.codexHome !== undefined) {
+        resolveSkillLocation(options, environment);
+        return options;
+    }
+    const detected = detectCallingAgent(environment);
+    if ("agent" in detected)
+        return { ...options, agent: detected.agent };
+    const choose = runtime.choose ??
+        (process.stdin.isTTY && process.stderr.isTTY
+            ? chooseInTerminal
+            : undefined);
+    const agent = await choose?.();
+    if (agent === "codex" || agent === "workbuddy")
+        return { ...options, agent };
+    throw new AgentSelectionRequired(detected.reason);
+}
+export function selectionRequiredResult(error) {
+    return {
+        status: "selection-required",
+        error: { code: error.code, reason: error.reason },
+        message: "请选择当前使用的 AI 助手，然后在原命令中添加 --agent codex 或 --agent workbuddy 继续；client 命令的选项须放在 -- 分隔符之前。",
+        choices: agentChoices,
+        nextAction: "select-agent-and-retry",
+    };
+}

package/dist/bundle.js

@@ -47,7 +47,7 @@ export async function verifyBundle(input) {
             !exactKeys(manifestValue, manifestKeys) ||
             manifestValue.schemaVersion !== "nggaigc-plugin-package/v1" ||
             manifestValue.artifactId !== "plugin.nggaigc" ||
-            manifestValue.version !== "1.1.44" ||
+            manifestValue.version !== "1.1.45" ||
             manifestValue.artifactPath !==
                 `packages/plugins/nggaigc-plugin-${manifestValue.version}.zip` ||
             typeof manifestValue.sourceCommit !== "string" ||

package/dist/errors.js

@@ -1,9 +1,57 @@
+const localCauseCodes = new Set([
+    "EPERM",
+    "EACCES",
+    "ENOENT",
+    "EAGAIN",
+    "EMFILE",
+    "ENFILE",
+    "ENOMEM",
+    "EINVAL",
+    "ERR_ACCESS_DENIED",
+    "ERR_MODULE_NOT_FOUND",
+    "SETUP_REQUIRED",
+    "CREDENTIAL_FRAME_INVALID",
+    "CREDENTIAL_STORE_FAILED",
+    "INVALID_INPUT",
+    "CREDENTIAL_CHANGED",
+    "ALREADY_CONFIGURED",
+    "CREDENTIAL_STORE_UNAVAILABLE",
+    "CREDENTIAL_HELPER_START_FAILED",
+    "CREDENTIAL_HELPER_FAILED",
+    "DISTRIBUTION_INVALID",
+    "LOCAL_SESSION_FAILED",
+    "LOCAL_SESSION_TIMEOUT",
+    "POWERSHELL_EXECUTION_POLICY_BLOCKED",
+    "RUNTIME_UNSUPPORTED",
+    "UNKNOWN",
+]);
+export function safeConnectionDiagnostics(value) {
+    if (value === null || typeof value !== "object" || !("stage" in value))
+        return undefined;
+    const stage = value.stage;
+    if (stage !== "helper_start" && stage !== "credential_verification")
+        return undefined;
+    const cause = "causeCode" in value ? value.causeCode : undefined;
+    return {
+        stage,
+        causeCode: typeof cause === "string" && localCauseCodes.has(cause)
+            ? cause
+            : "UNKNOWN",
+    };
+}
 export class CliError extends Error {
     code;
-    constructor(code) {
+    stage;
+    causeCode;
+    constructor(code, diagnostics) {
         super(code);
         this.code = code;
         this.name = "CliError";
+        const safe = safeConnectionDiagnostics(diagnostics);
+        if (safe) {
+            this.stage = safe.stage;
+            this.causeCode = safe.causeCode;
+        }
     }
 }
 export function fixedErrorCode(error) {

package/dist/install.js

@@ -4,12 +4,12 @@ import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { extractBundle, verifyBundle, verifyExtractedBundle, verifyInstalledSkill, } from "./bundle.js";
-import { CliError, fixedErrorCode } from "./errors.js";
+import { CliError, fixedErrorCode, safeConnectionDiagnostics, } from "./errors.js";
 import { resolveSkillLocation, } from "./skill-location.js";
 function defaultBundle() {
     const vendor = fileURLToPath(new URL("../vendor/", import.meta.url));
     return {
-        archive: path.join(vendor, "nggaigc-plugin-1.1.44.zip"),
+        archive: path.join(vendor, "nggaigc-plugin-1.1.45.zip"),
         manifest: path.join(vendor, "manifest.json"),
         trust: path.join(vendor, "trusted-keys.json"),
     };
@@ -37,6 +37,47 @@ function installationError(error) {
         return new CliError("SKILL_PAIR_RECOVERY_REQUIRED");
     return new CliError("INSTALLATION_FAILED");
 }
+function connectionError(error, fallback) {
+    const code = fixedErrorCode(error);
+    const localCodes = [
+        "CREDENTIAL_HELPER_START_FAILED",
+        "CREDENTIAL_VERIFICATION_FAILED",
+        "CREDENTIAL_STORE_FAILED",
+        "CREDENTIAL_STORE_UNAVAILABLE",
+        "CREDENTIAL_FRAME_INVALID",
+        "CREDENTIAL_HELPER_FAILED",
+        "DISTRIBUTION_INVALID",
+        "LOCAL_SESSION_FAILED",
+        "LOCAL_SESSION_TIMEOUT",
+        "POWERSHELL_EXECUTION_POLICY_BLOCKED",
+        "RUNTIME_UNSUPPORTED",
+        "UNSUPPORTED_PLATFORM",
+        "BROWSER_OPEN_FAILED",
+    ];
+    if (localCodes.includes(code))
+        return new CliError(code, error);
+    // Older signed launchers can throw a synchronous OS spawn error before
+    // they can return a protected error envelope. Keep only this closed cause.
+    if (error !== null &&
+        typeof error === "object" &&
+        "syscall" in error &&
+        typeof error.syscall === "string" &&
+        /^spawn(?: |$)/.test(error.syscall)) {
+        return new CliError("CREDENTIAL_HELPER_START_FAILED", {
+            stage: "helper_start",
+            causeCode: code,
+        });
+    }
+    if (fallback === "BROWSER_AUTHORIZATION_FAILED" &&
+        [
+            "AUTHORIZATION_REJECTED",
+            "AUTHORIZATION_CANCELLED",
+            "ACTIVATION_REJECTED",
+            "ACTIVATION_INPUT_INVALID",
+        ].includes(code ?? ""))
+        return new CliError(fallback);
+    return new CliError("CONNECTION_VERIFICATION_FAILED");
+}
 async function installedVersion(target) {
     try {
         const marker = JSON.parse(await readFile(path.join(target, ".nggaigc-install.json"), "utf8"));
@@ -116,10 +157,8 @@ async function connect(launcher, options, report, probe) {
     catch (error) {
         if (!probe && fixedErrorCode(error) === "SETUP_REQUIRED")
             configured = false;
-        else if (fixedErrorCode(error) === "POWERSHELL_EXECUTION_POLICY_BLOCKED")
-            throw new CliError("POWERSHELL_EXECUTION_POLICY_BLOCKED");
         else
-            throw new CliError("CONNECTION_VERIFICATION_FAILED");
+            throw connectionError(error, "CONNECTION_VERIFICATION_FAILED");
     }
     if (!configured) {
         report("launching");
@@ -157,11 +196,7 @@ async function connect(launcher, options, report, probe) {
                 throw new Error();
         }
         catch (error) {
-            if (fixedErrorCode(error) === "BROWSER_OPEN_FAILED")
-                throw new CliError("BROWSER_OPEN_FAILED");
-            if (fixedErrorCode(error) === "POWERSHELL_EXECUTION_POLICY_BLOCKED")
-                throw new CliError("POWERSHELL_EXECUTION_POLICY_BLOCKED");
-            throw new CliError("BROWSER_AUTHORIZATION_FAILED");
+            throw connectionError(error, "BROWSER_AUTHORIZATION_FAILED");
         }
         finally {
             process.off("SIGINT", interrupt);
@@ -215,11 +250,13 @@ export async function runInstall(options = {}) {
         catch (error) {
             if (!(error instanceof CliError))
                 throw error;
+            const diagnostics = safeConnectionDiagnostics(error);
             return {
                 status: "installed-unconnected",
                 installation,
                 version: bundle.version,
                 connectionError: error.code,
+                ...(diagnostics ? { connectionDiagnostics: diagnostics } : {}),
             };
         }
     }

package/dist/main.js

@@ -1,8 +1,9 @@
 import path from "node:path";
-import { CliError, fixedErrorCode } from "./errors.js";
+import { CliError, fixedErrorCode, safeConnectionDiagnostics, } from "./errors.js";
 import { runInstall } from "./install.js";
 import { runSkillStartCommand, runClientCommand, } from "./skill-command.js";
 import { parseSkillLocation, resolveSkillLocation } from "./skill-location.js";
+import { AgentSelectionRequired, selectCommandLocation, selectionRequiredResult, } from "./agent-selection.js";
 const messages = {
     authorizing: "浏览器已成功启动，请在 NGGAIGC 页面确认连接…",
     connected: "NGGAIGC Skill 已安装，设备连接验证成功。",
@@ -16,6 +17,15 @@ const errorMessages = {
     BROWSER_AUTHORIZATION_FAILED: "网页授权未完成；请在当前 Agent 中调用 NGGAIGC 继续连接，无需重装。",
     BROWSER_OPEN_FAILED: "系统未能打开默认浏览器，也无法提供手动授权入口；请在当前 Agent 中调用 NGGAIGC 重试连接，无需重装。",
     CONNECTION_VERIFICATION_FAILED: "设备连接验证未完成；请在当前 Agent 中检查连接状态，无需重装。",
+    CREDENTIAL_HELPER_START_FAILED: "本地凭据助手未能启动；请先处理当前运行错误，不要重复网页授权或重装。安装器没有更改系统保护。",
+    CREDENTIAL_VERIFICATION_FAILED: "凭据写入后的本地验证未完成，已尝试安全清理本次凭据；请先处理原本地错误，不要重复网页授权或重装。",
+    CREDENTIAL_STORE_FAILED: "本地凭据保存未完成；请先检查本地存储错误，不要重复网页授权。",
+    CREDENTIAL_STORE_UNAVAILABLE: "本地凭据存储暂不可用；请先检查本地运行条件，不要重复网页授权。",
+    CREDENTIAL_FRAME_INVALID: "本地凭据数据未能通过校验；请先处理当前本地错误，不要重复网页授权。",
+    CREDENTIAL_HELPER_FAILED: "本地凭据助手未能完成操作；请先处理当前本地错误，不要重复网页授权。",
+    DISTRIBUTION_INVALID: "本地受信客户端文件无法通过校验；请先检查当前安装，不要重复网页授权或手工修改签名文件。",
+    LOCAL_SESSION_FAILED: "本地凭据会话未能完成；请先处理本地错误，不要重复网页授权。",
+    LOCAL_SESSION_TIMEOUT: "本地凭据会话超时；请先检查当前本地进程，不要重复网页授权。",
     POWERSHELL_EXECUTION_POLICY_BLOCKED: "Windows 脚本执行受到系统或组织策略限制，设备连接未完成。安装器没有更改执行策略。",
     INSTALLATION_FAILED: "本地安装未完成，请检查现有文件状态后重试。",
     SKILL_PAIR_UPGRADE_REQUIRED: "检测到无法安全配套迁移的本地 Seedream Skill，已停止升级。请保留旧 Skill 和任务文件并联系支持。",
@@ -34,7 +44,8 @@ export async function main(args, runtime = {}) {
             "install [--agent codex|workbuddy|universal | --skills-dir <absolute-directory>] [--no-login]",
             "start-skill skill.<id> [version] [--agent codex|workbuddy|universal | --skills-dir <absolute-directory>]",
             "client [--agent codex|workbuddy|universal | --skills-dir <absolute-directory>] -- <command> [arguments]",
-            "Default: Codex (existing CODEX_HOME is preserved). WorkBuddy: ~/.codebuddy/skills; universal: ~/.agents/skills.",
+            "Default: automatically detect Codex or WorkBuddy. If unknown or conflicting, select one; non-interactive calls return selection-required (exit 3).",
+            "Codex: existing CODEX_HOME is preserved, otherwise ~/.codex/skills. WorkBuddy: its runtime config directory/skills, otherwise ~/.workbuddy/skills; existing legacy ~/.codebuddy installs are reused. Explicit legacy universal/custom targets remain supported.",
             "Use the same target for install and subsequent commands. --no-login installs verified files without opening a browser.",
             "client examples: -- status, -- login, -- account-status, -- workflows, -- history, -- disconnect",
             "",
@@ -52,7 +63,8 @@ export async function main(args, runtime = {}) {
             if (positional.length)
                 throw new CliError("INVALID_INPUT");
             process.once("SIGINT", interrupt);
-            const result = await (runtime.client ?? runClientCommand)(args.slice(separator + 1), location, {
+            const selectedLocation = await selectCommandLocation(location, runtime.agentSelection);
+            const result = await (runtime.client ?? runClientCommand)(args.slice(separator + 1), selectedLocation, {
                 signal: controller.signal,
                 browserManualLink: (url) => errorOutput(`如果没有看到授权网页，请在本机浏览器打开此一次性链接；不要转发或保存：\n${url}\n`),
                 browserFallback: (url) => errorOutput(`浏览器未能自动打开，请在本机手动打开此一次性链接；不要转发或保存：\n${url}\n`),
@@ -61,7 +73,11 @@ export async function main(args, runtime = {}) {
             return 0;
         }
         catch (error) {
-            errorOutput(`${JSON.stringify({ error: { code: fixedErrorCode(error) ?? "CLIENT_UNAVAILABLE" } })}\n`);
+            if (error instanceof AgentSelectionRequired) {
+                output(`${JSON.stringify(selectionRequiredResult(error))}\n`);
+                return 3;
+            }
+            errorOutput(`${JSON.stringify({ error: { code: fixedErrorCode(error) ?? "CLIENT_UNAVAILABLE", ...safeConnectionDiagnostics(error) } })}\n`);
             return 1;
         }
         finally {
@@ -80,11 +96,16 @@ export async function main(args, runtime = {}) {
     if (args[0] === "start-skill" &&
         (parameters.length === 1 || parameters.length === 2)) {
         try {
-            const result = await (runtime.startSkill ?? runSkillStartCommand)(parameters[0], parameters[1], { ...runtime.skillOptions, ...parsed.location });
+            const location = await selectCommandLocation({ ...runtime.skillOptions, ...parsed.location }, runtime.agentSelection);
+            const result = await (runtime.startSkill ?? runSkillStartCommand)(parameters[0], parameters[1], location);
             output(`${JSON.stringify({ status: "ready", ...result })}\n`);
             return 0;
         }
         catch (error) {
+            if (error instanceof AgentSelectionRequired) {
+                output(`${JSON.stringify(selectionRequiredResult(error))}\n`);
+                return 3;
+            }
             const code = fixedErrorCode(error) ?? "SKILL_START_UNAVAILABLE";
             errorOutput(`${JSON.stringify({ error: { code } })}\n`);
             return 1;
@@ -97,8 +118,10 @@ export async function main(args, runtime = {}) {
         return 1;
     }
     try {
+        const location = await selectCommandLocation(parsed.location, runtime.agentSelection);
+        const { skillsDirectory } = resolveSkillLocation(location);
         const result = await (runtime.install ?? runInstall)({
-            ...parsed.location,
+            ...location,
             ...(parameters[0] === "--no-login" ? { connect: false } : {}),
             reporter: (event) => output(`${messages[event]}\n`),
             launcherOptionsFactory: () => ({
@@ -112,18 +135,24 @@ export async function main(args, runtime = {}) {
                 },
             }),
         });
+        output(`${JSON.stringify({
+            ...result,
+            ...(location.agent ? { agent: location.agent } : {}),
+            skillsDirectory,
+            skillPath: path.join(skillsDirectory, "nggaigc", "SKILL.md"),
+            guidance: "在当前 AI 助手中调用 NGGAIGC；若未发现新 Skill，请新开一个对话。后续安装、更新和工作流加载沿用此 skillsDirectory。",
+        })}\n`);
         if (result.status === "installed-unconnected") {
             errorOutput(`NGGAIGC Skill ${result.version} 文件已${result.installation === "unchanged" ? "存在" : "安装"}，但设备尚未连接。${errorMessages[result.connectionError] ?? "请在当前 Agent 中检查连接状态。"}\n`);
             return 2;
         }
-        if (result.status === "installed" ||
-            Object.keys(parsed.location).length > 0) {
-            const { skillsDirectory } = resolveSkillLocation(parsed.location);
-            output(`${JSON.stringify({ ...result, skillsDirectory, skillPath: path.join(skillsDirectory, "nggaigc", "SKILL.md") })}\n`);
-        }
         return 0;
     }
     catch (error) {
+        if (error instanceof AgentSelectionRequired) {
+            output(`${JSON.stringify(selectionRequiredResult(error))}\n`);
+            return 3;
+        }
         const code = error instanceof CliError ? error.code : "INSTALLATION_FAILED";
         errorOutput(`${errorMessages[code] ?? errorMessages.INSTALLATION_FAILED}\n`);
         return 1;

package/dist/skill-command.js

@@ -15,7 +15,7 @@ function record(value) {
 export async function productionDependencies(skillsDirectory) {
     const vendor = fileURLToPath(new URL("../vendor/", import.meta.url));
     const bundle = await verifyBundle({
-        archive: path.join(vendor, "nggaigc-plugin-1.1.44.zip"),
+        archive: path.join(vendor, "nggaigc-plugin-1.1.45.zip"),
         manifest: path.join(vendor, "manifest.json"),
         trust: path.join(vendor, "trusted-keys.json"),
     });

package/dist/skill-location.js

@@ -1,5 +1,6 @@
 import os from "node:os";
 import path from "node:path";
+import { lstatSync } from "node:fs";
 import { CliError } from "./errors.js";
 export function absoluteDirectory(value) {
     if (!path.isAbsolute(value) || /[\0\r\n]/u.test(value))
@@ -16,6 +17,30 @@ export function stateDirectoryForSkills(skillsDirectory) {
         ? path.join(path.dirname(skillsDirectory), ".nggaigc-managed")
         : path.join(skillsDirectory, ".nggaigc-managed", "custom-target");
 }
+function hasInstalledRoot(home) {
+    try {
+        lstatSync(path.join(home, "skills", "nggaigc"));
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw new CliError("INSTALLATION_FAILED");
+    }
+}
+function workbuddyHome(profile, environment) {
+    const configured = environment.WORKBUDDY_CONFIG_DIR ?? environment.CODEBUDDY_CONFIG_DIR;
+    if (configured !== undefined)
+        return absoluteDirectory(configured);
+    const current = path.join(profile, ".workbuddy");
+    const legacy = path.join(profile, ".codebuddy");
+    // Upgrade an existing legacy global installation in place when outside the
+    // host. Inside WorkBuddy, its actual runtime configuration takes precedence.
+    // The installer still verifies ownership/signatures before changing files.
+    return !hasInstalledRoot(current) && hasInstalledRoot(legacy)
+        ? legacy
+        : current;
+}
 /** One explicit location for root installation and every dependent Skill. */
 export function resolveSkillLocation(options = {}, environment = process.env) {
     if ([options.agent, options.skillsDirectory, options.codexHome].filter((value) => value !== undefined).length > 1)
@@ -36,7 +61,9 @@ export function resolveSkillLocation(options = {}, environment = process.env) {
             ? ((options.profile === undefined
                 ? environment.CODEX_HOME
                 : undefined) ?? path.join(profile, ".codex"))
-            : path.join(profile, agent === "workbuddy" ? ".codebuddy" : ".agents")));
+            : agent === "workbuddy"
+                ? workbuddyHome(profile, options.profile === undefined ? environment : {})
+                : path.join(profile, ".agents")));
     return {
         skillsDirectory: path.join(home, "skills"),
         // Explicit and named-host calls for the same directory share one journal.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nggaigc/cli",
-  "version": "0.1.45",
+  "version": "0.1.47",
   "description": "Secure NGGAIGC Skill installer for Codex, WorkBuddy and compatible agents.",
   "type": "module",
   "bin": {

package/vendor/manifest.json

@@ -1,11 +1,11 @@
 {
   "schemaVersion": "nggaigc-plugin-package/v1",
   "artifactId": "plugin.nggaigc",
-  "version": "1.1.44",
-  "sourceCommit": "daa6585bd3c9c57b77a92ac452a866566efe546c",
-  "artifactPath": "packages/plugins/nggaigc-plugin-1.1.44.zip",
-  "sha256": "d3e9c98a65df60f9ffb6426e60341a3c621a62e1779a172f6d7939023be7fb16",
-  "sizeBytes": 498924,
+  "version": "1.1.45",
+  "sourceCommit": "241601b7d034ce36442e7738438cbc6c6b3b867d",
+  "artifactPath": "packages/plugins/nggaigc-plugin-1.1.45.zip",
+  "sha256": "e23b7781579124a1b90ece1558d58d418dfef6a6557152f1581cbb81145281da",
+  "sizeBytes": 502168,
   "fileCount": 24,
   "platforms": [
     "win32-x64",
@@ -13,7 +13,7 @@
     "darwin-arm64"
   ],
   "files": {
-    ".codex-plugin/plugin.json": "44ffcd18f569942856d9b955dacca52dd7559972ba7e42ca5c875084b7c36bb8",
+    ".codex-plugin/plugin.json": "89478e096e5cbd46ad156cb06abee9a59973f530e08be815283bf6d4ddc3903f",
     "installer/install.cjs": "76f4ed73233fd39900fb0bedbc434dea39e52e6b6b4622f3fd388a5ca09c6f62",
     "installer/legacy-root-digests.json": "922552646a5aa6cff8616c372912a37b1d5f263351206b85785ed9b2eae31641",
     "installer/signed-pair-1.1.16.json": "ccb22a90302cc5c9c585067ebc211a27b0c9d8a177c2740a5678a58a3d70bfe9",
@@ -24,24 +24,24 @@
     "migration/seedream-1.1.3/scripts/seedream.mjs": "dcc6af4d945790d9dfd7fac21c60934759d7ac2576a14507d0299f4833942a96",
     "migration/seedream-1.1.3/SKILL.md": "5c5cf3c2d99376f246425e873c5566436ed528256372ac3208abb60364c4517c",
     "skills/nggaigc/agents/openai.yaml": "8936d97b9821e687e224e9349cc42be2ee5fc20988562efffbcb70080aedf87c",
-    "skills/nggaigc/references/catalog-and-updates.md": "990abe5d4e6d34283ad957a372e1892fda2dc1620aa2fb6c5adca28ad3727d89",
-    "skills/nggaigc/references/source.json": "49025cea97197ff8644448fe35d54addc2f27154f8dfeb7791099badcba28ee8",
+    "skills/nggaigc/references/catalog-and-updates.md": "a43bee94a480aa2bf0b1e7038cee6f27fb86d2bd8fa88a28a63678963d7c1530",
+    "skills/nggaigc/references/source.json": "26838dd1c3df2347abb97ac47da61148c7099ce9f12c935b788c6fe2e9e26f0c",
     "skills/nggaigc/scripts/api_client.mjs": "e16bf750a297ef7e88e4843d2fba9c33b412a66516bfe76822d7deec6c153069",
     "skills/nggaigc/scripts/api_package.mjs": "6beee22aed770cbf501abe6d1d9d252f7a53893eeb9b6399bd26c4ef68470d5a",
-    "skills/nggaigc/scripts/bootstrap-public.json": "67bc46ee22771782b2186613ecb5ef04ec813e2ce68d5365eb42012703edad94",
-    "skills/nggaigc/scripts/launch-ngg-client.cjs": "c9295fa3838015d0614cb663a1419e3965ed673b87bba42856828ef8bcf1ade9",
+    "skills/nggaigc/scripts/bootstrap-public.json": "4b1aba50683bc50d3ac9c2ec10479366fa10e7452874b67f2cd6b93e3e23952d",
+    "skills/nggaigc/scripts/launch-ngg-client.cjs": "5953b9211b31e72b9f7d22a92f954e9b526387f6d86ac4387e0c810f3e01c0da",
     "skills/nggaigc/scripts/macos-keychain": "b0bdf29d14219d38ca18c7e5c599deb0daa8c8ac70b0babbc7d4fb23673079ec",
     "skills/nggaigc/scripts/macos-keychain.swift": "1b57e74fde66c824fe970547dd8ca0883a3334c34c065e85a8a2a90d4556a7f5",
-    "skills/nggaigc/scripts/ngg_client.mjs": "9a8bcb2557dbcb8d8d97c6a930c22ca6833bbfbdbffa742ab6dd0bf00799ee4c",
-    "skills/nggaigc/scripts/ngg-session.mjs": "4ab35bae06c02a5825d36a8d860273ed9c512f9ee40debd7f8cf32c50fc9d94f",
+    "skills/nggaigc/scripts/ngg_client.mjs": "2b4903ad8afe76b0dc970b5519a50d04dcc0e12dfa8f4267fb85d878187c3789",
+    "skills/nggaigc/scripts/ngg-session.mjs": "21df7cd76e729a2109e2f8ec53d5a5998e801ab9259ce8d20b9c62f9926b1135",
     "skills/nggaigc/scripts/supported-platforms.json": "ec8b0754c489e04534a1d9880dd6664ba9c5bcd07789e06d138e0923f23575ff",
     "skills/nggaigc/scripts/windows-credential.ps1": "80d470fb0c9473d26bd599cafa9f1c2ad69056d4a835888ddcbb5c1548f9d059",
-    "skills/nggaigc/SKILL.md": "7985e5c6543d56bfb16502f050b2e24bd59172346f6cba3e159b1d1e8a923e52"
+    "skills/nggaigc/SKILL.md": "8cb3eb8a03cf144ce15fa01d7d342495c2b11ba0f6a0cf61a493e1e43c83a11f"
   },
   "signature": {
     "algorithm": "ed25519",
     "keyId": "ngg-signing-skill-release-1",
     "scope": "artifact-bytes",
-    "value": "zWO1/CE7wHcX6+KPdluqCzsmbqUp8xy4piqj/Znj7ZpnfZJCMJnfqxn5Nc9G/mjDW1Yqznigg39bs78LrED5BA=="
+    "value": "OlUz+AuTVQN/u8Kp+d91twCKkU6VtRPUrzez8iGYLRmLck5lXvG6KUbVabPMIkEirKD/fOCcwJ47SKSsS8x+BQ=="
   }
 }