@nggaigc/cli 0.1.55 → 0.1.57

package/README.md

@@ -12,10 +12,12 @@ CLI 保留 macOS npm symlink 入口与 packed-TGZ launcher 检查，并验证随
 
 从 CLI `0.1.52` 起，Intel Mac 仅放开安装限制，安装的签名包与 macOS 辅助程序字节保持不变；未做 Intel 兼容性适配或真机验收，不保证登录及工作流可用，运行失败按原有机制报告。实际公开版本和 `@latest` 状态以 npm registry 为准，Apple Silicon 真机验收需单独进行。
 
-CLI `0.1.55` 是兼容修复候选，实际公开版本与 `latest` 以 registry 为准。它通过官方签名 ZIP 的完整文件闭包识别现有根 Skill `1.1.49`／`1.1.50`；本地安装标记仅作提示。兼容时直接复用现有启动器，当前目录确实要求新版根时才安全升级；不会降级已验证的新版安装。旧目录仍使用根149时，保留已装150，并在不可发现为 active Skill 的私有缓存内验证、使用官方149兼容运行文件；目录切到新版后使用150，启动回执指向实际受信运行文件。保留豆包工作识别和 Intel Mac 安装放行的原边界。
+CLI `0.1.56` 延续 `0.1.55` 的版本兼容修复，实际公开版本与 `latest` 以 registry 为准。它通过官方签名 ZIP 的完整文件闭包识别现有根 Skill `1.1.49`／`1.1.50`；本地安装标记仅作提示。兼容时直接复用现有启动器，当前目录确实要求新版根时才安全升级；不会降级已验证的新版安装。旧目录仍使用根149时，保留已装150，并在不可发现为 active Skill 的私有缓存内验证、使用官方149兼容运行文件；目录切到新版后使用150，启动回执指向实际受信运行文件。保留豆包工作识别和 Intel Mac 安装放行的原边界。
 
 升级在原安装锁内先验证私有临时目录的文件类型、哈希和系统可表达的执行位，再原子替换并复验。失败时恢复已验证旧安装；进程中断后先按原事务读回恢复，不盲目开始新升级。Windows 不把 POSIX 执行位当作其系统权限证明，真机验收另记。
 
+CLI `0.1.56` 修复 Windows 写盘句柄：校验缓存和升级暂存文件使用不截断文件的读写句柄执行 `fsync`，保留验签和失败停止。更新已发布安装器时，使用 `npx --yes @nggaigc/cli@0.1.56 install`；项目级或指定宿主安装保留原命令中的 `--skills-dir` 或 `--agent`，不要另换目录、删除配置或重提已有付费任务。发布状态以 npm 为准。本次原生 Windows 实测尚未完成，不能把模拟回归或 Mac 验收视为 Windows 已通过。维护者在原生 Windows 的 Node 22、24 上构建后，必须分别运行 `node --test packages/cli/scripts/windows-root-flush.integration.test.mjs`，覆盖新装、149→150 升级、重复安装及失败恢复；非 Windows 环境会明确拒绝该验收。模拟约束的回归测试不能代替此项。
+
 旧的显式 `start-skill skill.<id> <version>` 只有在官方受签、精确绑定当前目录的有限迁移许可内，才可转到同一 Skill 的当前版本；结果分别返回 `requestedVersion` 与 `resolvedVersion`，在线准入使用真实新版本及哈希。未列版本、目录变化、停用或验签失败均停止。确需固定版本可加 `--exact-version`，此时绝不迁移到其他版本。无版本调用仍要求唯一 active 入口，不激活旧版本。
 
 此许可仅用于新启动。已经受理或结果未知的任务保留原请求和任务身份；`client` 将原参数交给已验证启动器，不为恢复任务重新准入、提交或付费。
@@ -69,3 +71,5 @@ v2须声明以下有限元数据：
 运行清单是已签名的 `references/runtime-lock.json`，至少有 `schemaVersion: 1`及`files`路径到SHA256的映射。每个打包Python文件必须与其中同路径摘要一致；清单中不能出现未打包的scripts文件，也不能自引用运行清单。文档及同级依赖的摘要可继续由独立工具按自身范围复核；安装器不执行或解释其业务规则。
 
 安装、复用、API合同加载和回滚只验证/交付字节，**不会执行Python、安装解释器/FFmpeg或调用付费服务**。工作流按实际阶段检查宿主依赖并明确调用已声明入口。全部既有签名、逐文件摘要、安全ZIP、32文件/4MiB、路径检查、原子替换及回滚规则继续生效。旧v1 loader明确拒绝v2；不能给旧包加脚本但保留v1声明，或把源码改成文档后缀绕过规则。
+
+本地候选目录兼容协议：CLI 0.1.57 从已验签的 1.1.52 私有运行时启动，保留原位已安装总 Skill 1.1.49/1.1.50，不能把私有缓存准备称为原位总 Skill 升级。该运行时通过公开 `X-NGG-Catalog-View: private-runtime-v1` 协商当前目录；此值不授予权限，现有账户、设备、签名、hash 和在线准入检查仍逐次执行。未协商的旧客户端保留真实 C168。新私有运行时未正式签名/完整安装验收前，本候选不可发布。

package/dist/catalog-view.js

@@ -0,0 +1,11 @@
+/** Finite protocol negotiation; not an authentication credential. */
+export const PRIVATE_RUNTIME_VERSION = "1.1.52";
+export const CATALOG_VIEW_HEADER = "X-NGG-Catalog-View";
+export const CATALOG_VIEW = "private-runtime-v1";
+export function currentCatalogFetcher(fetcher = globalThis.fetch) {
+    return (input, init = {}) => {
+        const headers = new Headers(init.headers);
+        headers.set(CATALOG_VIEW_HEADER, CATALOG_VIEW);
+        return fetcher(input, { ...init, headers });
+    };
+}

package/dist/root-store.js

@@ -1,3 +1,4 @@
+import { PRIVATE_RUNTIME_VERSION } from "./catalog-view.js";
 /** Official root material is authenticity evidence; a local marker is only a hint. */
 import { createHash, randomBytes } from "node:crypto";
 import { lstat, mkdir, readFile, rename, copyFile, open, realpath, rm, } from "node:fs/promises";
@@ -89,7 +90,9 @@ export async function saveProof(skills, bundle, vendor = rootVendor) {
         path.join(temp, `nggaigc-plugin-${bundle.version}.zip`),
         path.join(temp, "manifest.json"),
     ]) {
-        const fd = await open(file, "r");
+        // Windows FlushFileBuffers requires a writable handle. r+ preserves bytes
+        // and fails if the already-verified staging file is missing (unlike w).
+        const fd = await open(file, "r+");
         try {
             await fd.sync();
         }
@@ -120,7 +123,7 @@ export async function trustedRoot(skills, vendor = rootVendor) {
 }
 /** Creation holds the install lock; verified immutable reuse is read-only. */
 export async function trustedRuntime(skills, version, vendor = rootVendor, create = true) {
-    if (!["1.1.49", "1.1.50"].includes(version))
+    if (!["1.1.49", "1.1.50", PRIVATE_RUNTIME_VERSION].includes(version))
         throw new CliError("ROOT_UNAVAILABLE");
     await trustedRoot(skills, vendor);
     // Delegates always use an immutable runtime, including the currently installed version.

package/dist/root-upgrade.js

@@ -315,7 +315,8 @@ export async function installVerifiedRootLocked(skills, bundle, options = {}) {
         await verifyInstalledSkill(p.stage, bundle.files, bundle.executableFiles);
         // Flush all payloads before recording intent; directory renames then survive process interruption.
         for (const name of Object.keys(bundle.files).filter((x) => x.startsWith("skills/nggaigc/"))) {
-            const fd = await open(path.join(p.stage, name.slice(15)), "r");
+            // Flush existing staged payloads without truncating or creating files.
+            const fd = await open(path.join(p.stage, name.slice(15)), "r+");
             try {
                 await fd.sync();
             }

package/dist/skill-command.js

@@ -1,3 +1,4 @@
+import { PRIVATE_RUNTIME_VERSION, currentCatalogFetcher, } from "./catalog-view.js";
 import { createHash, createPublicKey } from "node:crypto";
 import { readFile, realpath } from "node:fs/promises";
 import { createRequire } from "node:module";
@@ -7,18 +8,9 @@ import { resolveSkillLocation, } from "./skill-location.js";
 import { CliError } from "./errors.js";
 import { trustedKeyId, trustedKeySpkiSha256 } from "./bundle.js";
 import { trustedRoot, trustedRuntime, exists } from "./root-store.js";
-import { withRootLock, recoverRootForUse, ensureCurrentRootLocked, } from "./root-upgrade.js";
+import { withRootLock, recoverRootForUse } from "./root-upgrade.js";
 import { canonical, resolveStartAlias } from "./start-compatibility.js";
 import { IndependentSkillError, projectActiveSkillCatalog, startIndependentSkill, } from "./independent-skill.js";
-function compare(a, b) {
-    const x = a.split(".").map(Number), y = b.split(".").map(Number);
-    for (let i = 0; i < 3; i++) {
-        const d = x[i] - y[i];
-        if (d)
-            return d;
-    }
-    return 0;
-}
 function fail(code) {
     throw new IndependentSkillError(code);
 }
@@ -27,8 +19,8 @@ function record(value) {
 }
 async function productionDependenciesLocked(skillsDirectory, verifiedLauncher, runtimeVersion, createRuntime = true) {
     const vendor = fileURLToPath(new URL("../vendor/", import.meta.url));
-    const current = await trustedRoot(skillsDirectory);
-    const installed = await trustedRuntime(skillsDirectory, runtimeVersion ?? current.version, undefined, createRuntime);
+    await trustedRoot(skillsDirectory);
+    const installed = await trustedRuntime(skillsDirectory, runtimeVersion ?? PRIVATE_RUNTIME_VERSION, undefined, createRuntime);
     const root = installed.directory;
     const keys = JSON.parse(await readFile(path.join(vendor, "trusted-keys.json"), "utf8"));
     if (!record(keys) ||
@@ -82,9 +74,6 @@ export async function productionDependencies(skillsDirectory, verifiedLauncher,
         return productionDependenciesLocked(skillsDirectory, verifiedLauncher, runtimeVersion, true);
     });
 }
-async function upgradeRoot(skillsDirectory) {
-    await withRootLock(skillsDirectory, () => ensureCurrentRootLocked(skillsDirectory));
-}
 function catalogRootVersion(snapshot) {
     if (!record(snapshot) || !Array.isArray(snapshot.entries))
         fail("CATALOG_INVALID");
@@ -95,7 +84,7 @@ function catalogRootVersion(snapshot) {
         record(e.manifest.lifecycle) &&
         e.manifest.lifecycle.status === "published");
     if (roots.length !== 1 ||
-        !["1.1.49", "1.1.50"].includes(String(roots[0].version)))
+        String(roots[0].version) !== PRIVATE_RUNTIME_VERSION)
         fail("ROOT_UNAVAILABLE");
     return String(roots[0].version);
 }
@@ -131,8 +120,7 @@ export async function runClientCommand(args, options = {}, launcherOptions = {})
                 fail("CATALOG_INVALID");
             const target = catalogRootVersion(snapshot);
             if (target !== rootSkillVersion) {
-                if (compare(target, rootSkillVersion) > 0)
-                    await upgradeRoot(skillsDirectory);
+                // Switching a private runtime must never replace the installed legacy root.
                 const updated = await productionDependencies(skillsDirectory, options.verifiedLauncher, target);
                 launcher = updated.launcher;
                 const fresh = await launcher.main(["catalog-snapshot"], launcherOptions);
@@ -188,8 +176,7 @@ export async function runSkillStartCommand(skillId, skillVersion, options = {})
         if (production) {
             const target = catalogRootVersion(snapshot);
             if (target !== rootSkillVersion) {
-                if (compare(target, rootSkillVersion) > 0)
-                    await upgradeRoot(skillsDirectory);
+                // Switching a private runtime must never replace the installed legacy root.
                 const updated = await productionDependencies(skillsDirectory, options.verifiedLauncher, target);
                 launcher = updated.launcher;
                 rootSkillVersion = updated.rootSkillVersion;
@@ -208,7 +195,7 @@ export async function runSkillStartCommand(skillId, skillVersion, options = {})
             platformVersion,
             skillsDirectory,
             trust,
-            fetcher: options.fetcher,
+            fetcher: currentCatalogFetcher(options.fetcher),
             admit: async (identity) => {
                 const answer = await launcher.main([
                     "skill-admit",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nggaigc/cli",
-  "version": "0.1.55",
+  "version": "0.1.57",
   "description": "Secure NGGAIGC Skill installer for Codex, WorkBuddy and compatible agents.",
   "type": "module",
   "bin": {

package/vendor/roots/1.1.52/manifest.json

@@ -0,0 +1,47 @@
+{
+  "schemaVersion": "nggaigc-plugin-package/v1",
+  "artifactId": "plugin.nggaigc",
+  "version": "1.1.52",
+  "sourceCommit": "e2aa56e384db076f5dd69713d26c2c096c82159e",
+  "artifactPath": "packages/plugins/nggaigc-plugin-1.1.52.zip",
+  "sha256": "85e6a51dc48946a02f385ebb366605107468fb86fe5d7c1a03cb6669e5e03b8d",
+  "sizeBytes": 510622,
+  "fileCount": 24,
+  "platforms": [
+    "win32-x64",
+    "win32-arm64",
+    "darwin-arm64"
+  ],
+  "files": {
+    ".codex-plugin/plugin.json": "d1aa9601a6f1cb10fda9804efdcd9100b46fa499e6c8799fa42a17b712389f21",
+    "installer/install.cjs": "76f4ed73233fd39900fb0bedbc434dea39e52e6b6b4622f3fd388a5ca09c6f62",
+    "installer/legacy-root-digests.json": "922552646a5aa6cff8616c372912a37b1d5f263351206b85785ed9b2eae31641",
+    "installer/signed-pair-1.1.16.json": "ccb22a90302cc5c9c585067ebc211a27b0c9d8a177c2740a5678a58a3d70bfe9",
+    "installer/signed-pair-1.1.17.json": "a3697506c929aaa085a6d994fc3a1b9a87e522ec6e1e32f3f760e6a534effa2b",
+    "migration/seedream-1.1.3/agents/openai.yaml": "3cbf034ddccd64a7972acd37e7433683a3944f3d8c7b5bdccbbd70e517bf5a8c",
+    "migration/seedream-1.1.3/references/image-generation.md": "15a6dd1f96c53240ef9e961049a7b323ca3c42d2dcf01c9982f1849f01e96afe",
+    "migration/seedream-1.1.3/references/source.json": "75998d079a229435d1097b00bd008703bd38026fc6485c312254925bf55398a8",
+    "migration/seedream-1.1.3/scripts/seedream.mjs": "dcc6af4d945790d9dfd7fac21c60934759d7ac2576a14507d0299f4833942a96",
+    "migration/seedream-1.1.3/SKILL.md": "65e39b129f40f86b76b24a19be6494f9b091bc3d1ccffd20b8a6cd56130a0cb7",
+    "skills/nggaigc/agents/openai.yaml": "8936d97b9821e687e224e9349cc42be2ee5fc20988562efffbcb70080aedf87c",
+    "skills/nggaigc/references/catalog-and-updates.md": "534979fe28e85463c4558700e14401268b1c0e443fc49092199eef1911449f0c",
+    "skills/nggaigc/references/source.json": "3063b696eeb56d71d47516dfa849ed4542771b708412e8442fe94b228da48105",
+    "skills/nggaigc/scripts/api_client.mjs": "e16bf750a297ef7e88e4843d2fba9c33b412a66516bfe76822d7deec6c153069",
+    "skills/nggaigc/scripts/api_package.mjs": "824ea8f935e2c3aec7ad5ea5c6ad043f1b77ccd9918c86687a9bd61558954fe4",
+    "skills/nggaigc/scripts/bootstrap-public.json": "4c3dd5e548480e8e60842bae85ce76fb2bd0107defd4b3532129b29842dda33b",
+    "skills/nggaigc/scripts/launch-ngg-client.cjs": "69bc926f0816196436b3fbbcec70efc7b17a7f44ec6c06c5082c211574a76bad",
+    "skills/nggaigc/scripts/macos-keychain": "b0bdf29d14219d38ca18c7e5c599deb0daa8c8ac70b0babbc7d4fb23673079ec",
+    "skills/nggaigc/scripts/macos-keychain.swift": "1b57e74fde66c824fe970547dd8ca0883a3334c34c065e85a8a2a90d4556a7f5",
+    "skills/nggaigc/scripts/ngg-session.mjs": "632f5368bc861a9bdd52d7cfeb8fb8376c34ef8f802e01ca1d41fc2716dbc31a",
+    "skills/nggaigc/scripts/ngg_client.mjs": "89458ab4acb5fd0b4b9ae77cea15f8f259a13cd7588038f52511bf809d5b44e2",
+    "skills/nggaigc/scripts/supported-platforms.json": "ec8b0754c489e04534a1d9880dd6664ba9c5bcd07789e06d138e0923f23575ff",
+    "skills/nggaigc/scripts/windows-credential.ps1": "641888d8c6016bb84f18df19315322ed802c5709fbe5209250eaf1b0ce498aec",
+    "skills/nggaigc/SKILL.md": "bca7a53138b6f820c0a735dcdcb20b688e9a702699bc84babc4ef6a630988a07"
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "keyId": "ngg-signing-skill-release-1",
+    "scope": "artifact-bytes",
+    "value": "/SCLOXoya4UqiisUZLvnJm9BjXQ0iaF5FvU+2tTEAd24QCNqkXNQDDtIGp5J/pj1CL+ioEFiml42xcahfLUXAg=="
+  }
+}

package/vendor/start-compatibility.json

@@ -2,9 +2,9 @@
   "payload": {
     "schemaVersion": "nggaigc-start-compatibility/v1",
     "catalog": {
-      "releaseId": "catalog-2026.11.02.3",
-      "catalogVersion": "1.10.168",
-      "releaseSha256": "11fa89a45efc9b859d26ae6398b97b3a7559c1d614eefae3ff59a9403f481950"
+      "releaseId": "catalog-2026.11.03.3",
+      "catalogVersion": "1.10.172",
+      "releaseSha256": "e6de2635868a34ad501355ae132ce8c420bc5b1a38df31530fb6c38a356c4410"
     },
     "contract": "same-skill-inputs-pricing-permissions",
     "aliases": [
@@ -19,8 +19,15 @@
         "id": "skill.h3-broll-video-assets",
         "fromVersion": "0.1.9",
         "fromManifestSha256": "d4f3a01ce66879e668935af9ccba225ca08ca9b123296e8f7e6144a2beb71674",
-        "toVersion": "0.1.10",
-        "toManifestSha256": "14b2d3996d927f2b3c995c3e827a33e990bcca923aa64f84c905b24b3badcfe4"
+        "toVersion": "0.1.12",
+        "toManifestSha256": "f42ea141a6c0e67844dbe981c52047c7c8871737decd6cde2534bf273d8d5987"
+      },
+      {
+        "id": "skill.h3-broll-video-assets",
+        "fromVersion": "0.1.10",
+        "fromManifestSha256": "14b2d3996d927f2b3c995c3e827a33e990bcca923aa64f84c905b24b3badcfe4",
+        "toVersion": "0.1.12",
+        "toManifestSha256": "f42ea141a6c0e67844dbe981c52047c7c8871737decd6cde2534bf273d8d5987"
       },
       {
         "id": "skill.image-singing-digital-human",
@@ -47,8 +54,15 @@
         "id": "skill.ngg-depth-dance-copy",
         "fromVersion": "0.2.1",
         "fromManifestSha256": "efb34854dd2d5ab5e8d33363ca1ce93c69c7743cac143c16c34c360a8bab89fd",
-        "toVersion": "0.2.2",
-        "toManifestSha256": "6eca6fc0897875ba56c0cb460052f7f490f6833c61164daf3dfc22b4e9530fd9"
+        "toVersion": "0.2.3",
+        "toManifestSha256": "e2448e360bc9bdfd57d14ff20cf81cc90693eda00a7edcf1a27abd9f09b62a20"
+      },
+      {
+        "id": "skill.ngg-depth-dance-copy",
+        "fromVersion": "0.2.2",
+        "fromManifestSha256": "6eca6fc0897875ba56c0cb460052f7f490f6833c61164daf3dfc22b4e9530fd9",
+        "toVersion": "0.2.3",
+        "toManifestSha256": "e2448e360bc9bdfd57d14ff20cf81cc90693eda00a7edcf1a27abd9f09b62a20"
       },
       {
         "id": "skill.ngg-drama-workflow",
@@ -119,6 +133,6 @@
     "algorithm": "ed25519",
     "keyId": "ngg-signing-skill-release-1",
     "scope": "nggaigc-start-compatibility/v1",
-    "value": "TieQh/DsCu0K6ViZsYATqXFnBIFtnJxk97Nd3j9Jp8F4VfeacC7IE2vOlG5VLz/gWvxXqALy6J9OOiBJi45PDQ=="
+    "value": "tHSv9okTaDs4zJISa0tj9nAc99Hq9VogRKNDZgceJXz5KWhXUIcOKY5Ipk6nZTuEiTWvGV5PLAokYGCRWT7XAg=="
   }
 }