@nggaigc/cli 0.1.51 → 0.1.53

package/README.md

@@ -8,9 +8,11 @@ npx --yes @nggaigc/cli@latest install
 
 安装器会先验证内置 Plugin 的 Ed25519 签名、归档哈希和逐文件哈希，再原子安装 Skill。首次运行会打开 NGGAIGC 浏览器授权页；浏览器仅接收短期连接挑战，安装器通过内存中的独立轮询凭据获取连接结果，设备凭据只通过标准输入进入操作系统受保护的凭据存储（Windows Credential Manager 或 macOS Keychain）。安装器不接受 API Key、授权码或设备凭据参数，也不从环境变量读取这些值。
 
-CLI 保留 macOS npm symlink 入口与 packed-TGZ launcher 检查，并验证随包的已签名 Plugin；实际版本以包内签名清单为准。支持 Windows x64/arm64 与 Apple 芯片 Mac arm64，使用本机 Node.js 22.x（22.13 起）或 24.x，不下载或内嵌 Node.js。Windows PowerShell 5.1 默认 `Restricted` 时，安装器仅为受信凭据辅助脚本的子进程指定 `RemoteSigned`；不修改系统或用户执行策略。安装成功但连接失败会明确分开报告，无需重装；由于系统 URL 处理器退出码不能证明浏览器窗口已显示，安装器会同时给出短期一次性手动授权链接。
+CLI 保留 macOS npm symlink 入口与 packed-TGZ launcher 检查，并验证随包的已签名 Plugin；实际版本以包内签名清单为准。允许 Windows x64/arm64、Apple 芯片 Mac arm64 和 Intel Mac x64 安装，使用本机 Node.js 22.x（22.13 起）或 24.x，不下载或内嵌 Node.js。Windows PowerShell 5.1 默认 `Restricted` 时，安装器仅为受信凭据辅助脚本的子进程指定 `RemoteSigned`；不修改系统或用户执行策略。安装成功但连接失败会明确分开报告，无需重装；由于系统 URL 处理器退出码不能证明浏览器窗口已显示，安装器会同时给出短期一次性手动授权链接。
 
-macOS arm64 辅助程序沿用已签名 Plugin 中通过完整性校验的字节；Intel Mac 不在支持范围内。实际公开版本和 `@latest` 状态以 npm registry 为准，Apple Silicon 真机验收需单独进行。
+从 CLI `0.1.52` 起，Intel Mac 仅放开安装限制，安装的签名包与 macOS 辅助程序字节保持不变；未做 Intel 兼容性适配或真机验收，不保证登录及工作流可用，运行失败按原有机制报告。实际公开版本和 `@latest` 状态以 npm registry 为准，Apple Silicon 真机验收需单独进行。
+
+CLI `0.1.53` 随包安装已签名的 NGGAIGC 根 Skill `1.1.49`，保留豆包工作识别和 Intel Mac 安装放行；后续独立工作流仍经当前目录解析、在线准入和签名验签加载。
 
 ## 统一安装入口（0.1.46 起）
 
@@ -38,7 +40,7 @@ npx --yes @nggaigc/cli@latest client --skills-dir "/absolute/project/.codebuddy/
 
 本地技能包导入可能复制文件，需核导入后的实际路径和独立包同级关系。交互使用宿主可用的提问工具或当前聊天，交付使用宿主可用的媒体／附件能力；不依赖 Codex 专用工具。切换宿主继续复用当前系统用户的系统凭证库和任务历史，不迁移凭据、不要求重新粘贴密钥。资金、权限与未知结果同幂等键恢复规则不变。
 
-此功能不增加 Linux、Intel Mac 支持，也不代表已接入或认证 WorkBuddy 官方连接器市场；现有系统、Node.js 与正式发布门禁保持适用。
+此功能不增加 Linux 支持；Intel Mac 仅允许安装，不代表兼容性已验证，也不代表已接入或认证 WorkBuddy 官方连接器市场；现有系统、Node.js 与正式发布门禁保持适用。
 
 ## 受信本地 Python 工具文件合同（开发候选）
 

package/dist/bundle.js

@@ -47,7 +47,7 @@ export async function verifyBundle(input) {
             !exactKeys(manifestValue, manifestKeys) ||
             manifestValue.schemaVersion !== "nggaigc-plugin-package/v1" ||
             manifestValue.artifactId !== "plugin.nggaigc" ||
-            manifestValue.version !== "1.1.48" ||
+            manifestValue.version !== "1.1.49" ||
             manifestValue.artifactPath !==
                 `packages/plugins/nggaigc-plugin-${manifestValue.version}.zip` ||
             typeof manifestValue.sourceCommit !== "string" ||

package/dist/install.js

@@ -9,7 +9,7 @@ import { resolveSkillLocation, } from "./skill-location.js";
 function defaultBundle() {
     const vendor = fileURLToPath(new URL("../vendor/", import.meta.url));
     return {
-        archive: path.join(vendor, "nggaigc-plugin-1.1.48.zip"),
+        archive: path.join(vendor, "nggaigc-plugin-1.1.49.zip"),
         manifest: path.join(vendor, "manifest.json"),
         trust: path.join(vendor, "trusted-keys.json"),
     };
@@ -20,7 +20,9 @@ function validateRuntime(platform, architecture) {
         throw new CliError("RUNTIME_UNSUPPORTED");
     if (platform !== "win32" && platform !== "darwin")
         throw new CliError("UNSUPPORTED_PLATFORM");
-    if ((platform === "darwin" && architecture !== "arm64") ||
+    if ((platform === "darwin" &&
+        architecture !== "arm64" &&
+        architecture !== "x64") ||
         (platform === "win32" && architecture !== "x64" && architecture !== "arm64"))
         throw new CliError("UNSUPPORTED_PLATFORM");
 }
@@ -220,7 +222,13 @@ export async function runInstall(options = {}) {
     const report = options.reporter ?? (() => undefined);
     report("verifying");
     const bundle = await verifyBundle(options.bundle ?? defaultBundle());
-    if (!bundle.platforms.includes(`${options.platform ?? process.platform}-${options.architecture ?? process.arch}`))
+    // Intel Macs may install the unchanged, verified macOS package as-is.
+    // This is installation admission only, not a new signed runtime support claim.
+    const intelMacInstallation = (options.platform ?? process.platform) === "darwin" &&
+        (options.architecture ?? process.arch) === "x64" &&
+        bundle.platforms.includes("darwin-arm64");
+    if (!bundle.platforms.includes(`${options.platform ?? process.platform}-${options.architecture ?? process.arch}`) &&
+        !intelMacInstallation)
         throw new CliError("UNSUPPORTED_PLATFORM");
     const temporaryParent = path.resolve(options.temporaryRoot ?? os.tmpdir());
     const temporary = await mkdtemp(path.join(temporaryParent, "nggaigc-cli-"));

package/dist/skill-command.js

@@ -15,7 +15,7 @@ function record(value) {
 export async function productionDependencies(skillsDirectory) {
     const vendor = fileURLToPath(new URL("../vendor/", import.meta.url));
     const bundle = await verifyBundle({
-        archive: path.join(vendor, "nggaigc-plugin-1.1.48.zip"),
+        archive: path.join(vendor, "nggaigc-plugin-1.1.49.zip"),
         manifest: path.join(vendor, "manifest.json"),
         trust: path.join(vendor, "trusted-keys.json"),
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nggaigc/cli",
-  "version": "0.1.51",
+  "version": "0.1.53",
   "description": "Secure NGGAIGC Skill installer for Codex, WorkBuddy and compatible agents.",
   "type": "module",
   "bin": {

package/vendor/manifest.json

@@ -1,11 +1,11 @@
 {
   "schemaVersion": "nggaigc-plugin-package/v1",
   "artifactId": "plugin.nggaigc",
-  "version": "1.1.48",
-  "sourceCommit": "17038f7181c59b72b968866e68547f248069a3c5",
-  "artifactPath": "packages/plugins/nggaigc-plugin-1.1.48.zip",
-  "sha256": "92831457de7bd2f3e60ccd3805c4b7846ec32df7fd255b6b552dee225a83acc3",
-  "sizeBytes": 508669,
+  "version": "1.1.49",
+  "sourceCommit": "69db1c015defab063dc6ac590c3191c3f2accf13",
+  "artifactPath": "packages/plugins/nggaigc-plugin-1.1.49.zip",
+  "sha256": "8f102ea49ea1123c44d2e199fb6f03a520a85890735a3dc88bbbf9718ec8dc65",
+  "sizeBytes": 508722,
   "fileCount": 24,
   "platforms": [
     "win32-x64",
@@ -13,7 +13,7 @@
     "darwin-arm64"
   ],
   "files": {
-    ".codex-plugin/plugin.json": "54daccc21f12195f2c44a1cd049e10bff5a73fa6daba245e201b3affe2e1ad7d",
+    ".codex-plugin/plugin.json": "ff760760b31838bcf605fc6239c02dd5efbe08e5c66ca2999ab63a75cf535ef0",
     "installer/install.cjs": "76f4ed73233fd39900fb0bedbc434dea39e52e6b6b4622f3fd388a5ca09c6f62",
     "installer/legacy-root-digests.json": "922552646a5aa6cff8616c372912a37b1d5f263351206b85785ed9b2eae31641",
     "installer/signed-pair-1.1.16.json": "ccb22a90302cc5c9c585067ebc211a27b0c9d8a177c2740a5678a58a3d70bfe9",
@@ -25,15 +25,15 @@
     "migration/seedream-1.1.3/SKILL.md": "5c5cf3c2d99376f246425e873c5566436ed528256372ac3208abb60364c4517c",
     "skills/nggaigc/agents/openai.yaml": "8936d97b9821e687e224e9349cc42be2ee5fc20988562efffbcb70080aedf87c",
     "skills/nggaigc/references/catalog-and-updates.md": "a43bee94a480aa2bf0b1e7038cee6f27fb86d2bd8fa88a28a63678963d7c1530",
-    "skills/nggaigc/references/source.json": "5fb7443d94c522a22cd03e508bb8b1bb2c6f67983b719ce85f5bf88bef2f01d0",
+    "skills/nggaigc/references/source.json": "64ac80a785146b993aace78f00e88bdd6a571957d019f8ac093264f8c59b9210",
     "skills/nggaigc/scripts/api_client.mjs": "e16bf750a297ef7e88e4843d2fba9c33b412a66516bfe76822d7deec6c153069",
     "skills/nggaigc/scripts/api_package.mjs": "824ea8f935e2c3aec7ad5ea5c6ad043f1b77ccd9918c86687a9bd61558954fe4",
-    "skills/nggaigc/scripts/bootstrap-public.json": "6d0a7d79ae4364fb5fba5786d87417732af6f559e32592373031daf24db078d2",
-    "skills/nggaigc/scripts/launch-ngg-client.cjs": "4f4786c2e70fbac8e24fa2de1ba02aa713d68d3f36773f4c7c242f91364a005e",
+    "skills/nggaigc/scripts/bootstrap-public.json": "1c5ef86f600dc35543db9f20fe0142fc97ff7f2940b585eb2a27860e3328e83f",
+    "skills/nggaigc/scripts/launch-ngg-client.cjs": "97c3fb740eba0c0a3dc3ef9f24f3cbb201cd2e1b3209d14b782744bcc083e232",
     "skills/nggaigc/scripts/macos-keychain": "b0bdf29d14219d38ca18c7e5c599deb0daa8c8ac70b0babbc7d4fb23673079ec",
     "skills/nggaigc/scripts/macos-keychain.swift": "1b57e74fde66c824fe970547dd8ca0883a3334c34c065e85a8a2a90d4556a7f5",
-    "skills/nggaigc/scripts/ngg_client.mjs": "254f36fad2e0fb600c91b9ae22e8f35cfd602fbb36c25ef56ab494436a2e4a77",
-    "skills/nggaigc/scripts/ngg-session.mjs": "026a1d9d480712ee3e2f4d505e1448e78001800c88025cd048658b38d3c040ce",
+    "skills/nggaigc/scripts/ngg_client.mjs": "43ce6697bd15f2bfef089031e33eab73ef1f3883cc724962f1e82731c676ef0c",
+    "skills/nggaigc/scripts/ngg-session.mjs": "dbb69158307e3726a567ae65987f61d6ad15f75e3c6e2d41bf43bc50f15d91ec",
     "skills/nggaigc/scripts/supported-platforms.json": "ec8b0754c489e04534a1d9880dd6664ba9c5bcd07789e06d138e0923f23575ff",
     "skills/nggaigc/scripts/windows-credential.ps1": "641888d8c6016bb84f18df19315322ed802c5709fbe5209250eaf1b0ce498aec",
     "skills/nggaigc/SKILL.md": "8cb3eb8a03cf144ce15fa01d7d342495c2b11ba0f6a0cf61a493e1e43c83a11f"
@@ -42,6 +42,6 @@
     "algorithm": "ed25519",
     "keyId": "ngg-signing-skill-release-1",
     "scope": "artifact-bytes",
-    "value": "FQ+2ziXnms95GTjoiJcdjVxekqOjSBcsfpZrGh+0IKCChqXt18AZi59WSPRDfhdM1BQO8AEiqZtM1ge5gI+JDA=="
+    "value": "OTRlG+kA7/YmFdLHqdeGfoDftbYidQFCfZay4RSPWdaNmgpuIy32fT7s/u2GWbkAbUz8L1attssM6IPZUraZAg=="
   }
 }