@nggaigc/cli 0.1.56 → 0.1.57

package/README.md

@@ -71,3 +71,5 @@ v2须声明以下有限元数据：
 运行清单是已签名的 `references/runtime-lock.json`，至少有 `schemaVersion: 1`及`files`路径到SHA256的映射。每个打包Python文件必须与其中同路径摘要一致；清单中不能出现未打包的scripts文件，也不能自引用运行清单。文档及同级依赖的摘要可继续由独立工具按自身范围复核；安装器不执行或解释其业务规则。
 
 安装、复用、API合同加载和回滚只验证/交付字节，**不会执行Python、安装解释器/FFmpeg或调用付费服务**。工作流按实际阶段检查宿主依赖并明确调用已声明入口。全部既有签名、逐文件摘要、安全ZIP、32文件/4MiB、路径检查、原子替换及回滚规则继续生效。旧v1 loader明确拒绝v2；不能给旧包加脚本但保留v1声明，或把源码改成文档后缀绕过规则。
+
+本地候选目录兼容协议：CLI 0.1.57 从已验签的 1.1.52 私有运行时启动，保留原位已安装总 Skill 1.1.49/1.1.50，不能把私有缓存准备称为原位总 Skill 升级。该运行时通过公开 `X-NGG-Catalog-View: private-runtime-v1` 协商当前目录；此值不授予权限，现有账户、设备、签名、hash 和在线准入检查仍逐次执行。未协商的旧客户端保留真实 C168。新私有运行时未正式签名/完整安装验收前，本候选不可发布。

package/dist/catalog-view.js

@@ -0,0 +1,11 @@
+/** Finite protocol negotiation; not an authentication credential. */
+export const PRIVATE_RUNTIME_VERSION = "1.1.52";
+export const CATALOG_VIEW_HEADER = "X-NGG-Catalog-View";
+export const CATALOG_VIEW = "private-runtime-v1";
+export function currentCatalogFetcher(fetcher = globalThis.fetch) {
+    return (input, init = {}) => {
+        const headers = new Headers(init.headers);
+        headers.set(CATALOG_VIEW_HEADER, CATALOG_VIEW);
+        return fetcher(input, { ...init, headers });
+    };
+}

package/dist/root-store.js

@@ -1,3 +1,4 @@
+import { PRIVATE_RUNTIME_VERSION } from "./catalog-view.js";
 /** Official root material is authenticity evidence; a local marker is only a hint. */
 import { createHash, randomBytes } from "node:crypto";
 import { lstat, mkdir, readFile, rename, copyFile, open, realpath, rm, } from "node:fs/promises";
@@ -122,7 +123,7 @@ export async function trustedRoot(skills, vendor = rootVendor) {
 }
 /** Creation holds the install lock; verified immutable reuse is read-only. */
 export async function trustedRuntime(skills, version, vendor = rootVendor, create = true) {
-    if (!["1.1.49", "1.1.50"].includes(version))
+    if (!["1.1.49", "1.1.50", PRIVATE_RUNTIME_VERSION].includes(version))
         throw new CliError("ROOT_UNAVAILABLE");
     await trustedRoot(skills, vendor);
     // Delegates always use an immutable runtime, including the currently installed version.

package/dist/skill-command.js

@@ -1,3 +1,4 @@
+import { PRIVATE_RUNTIME_VERSION, currentCatalogFetcher, } from "./catalog-view.js";
 import { createHash, createPublicKey } from "node:crypto";
 import { readFile, realpath } from "node:fs/promises";
 import { createRequire } from "node:module";
@@ -7,18 +8,9 @@ import { resolveSkillLocation, } from "./skill-location.js";
 import { CliError } from "./errors.js";
 import { trustedKeyId, trustedKeySpkiSha256 } from "./bundle.js";
 import { trustedRoot, trustedRuntime, exists } from "./root-store.js";
-import { withRootLock, recoverRootForUse, ensureCurrentRootLocked, } from "./root-upgrade.js";
+import { withRootLock, recoverRootForUse } from "./root-upgrade.js";
 import { canonical, resolveStartAlias } from "./start-compatibility.js";
 import { IndependentSkillError, projectActiveSkillCatalog, startIndependentSkill, } from "./independent-skill.js";
-function compare(a, b) {
-    const x = a.split(".").map(Number), y = b.split(".").map(Number);
-    for (let i = 0; i < 3; i++) {
-        const d = x[i] - y[i];
-        if (d)
-            return d;
-    }
-    return 0;
-}
 function fail(code) {
     throw new IndependentSkillError(code);
 }
@@ -27,8 +19,8 @@ function record(value) {
 }
 async function productionDependenciesLocked(skillsDirectory, verifiedLauncher, runtimeVersion, createRuntime = true) {
     const vendor = fileURLToPath(new URL("../vendor/", import.meta.url));
-    const current = await trustedRoot(skillsDirectory);
-    const installed = await trustedRuntime(skillsDirectory, runtimeVersion ?? current.version, undefined, createRuntime);
+    await trustedRoot(skillsDirectory);
+    const installed = await trustedRuntime(skillsDirectory, runtimeVersion ?? PRIVATE_RUNTIME_VERSION, undefined, createRuntime);
     const root = installed.directory;
     const keys = JSON.parse(await readFile(path.join(vendor, "trusted-keys.json"), "utf8"));
     if (!record(keys) ||
@@ -82,9 +74,6 @@ export async function productionDependencies(skillsDirectory, verifiedLauncher,
         return productionDependenciesLocked(skillsDirectory, verifiedLauncher, runtimeVersion, true);
     });
 }
-async function upgradeRoot(skillsDirectory) {
-    await withRootLock(skillsDirectory, () => ensureCurrentRootLocked(skillsDirectory));
-}
 function catalogRootVersion(snapshot) {
     if (!record(snapshot) || !Array.isArray(snapshot.entries))
         fail("CATALOG_INVALID");
@@ -95,7 +84,7 @@ function catalogRootVersion(snapshot) {
         record(e.manifest.lifecycle) &&
         e.manifest.lifecycle.status === "published");
     if (roots.length !== 1 ||
-        !["1.1.49", "1.1.50"].includes(String(roots[0].version)))
+        String(roots[0].version) !== PRIVATE_RUNTIME_VERSION)
         fail("ROOT_UNAVAILABLE");
     return String(roots[0].version);
 }
@@ -131,8 +120,7 @@ export async function runClientCommand(args, options = {}, launcherOptions = {})
                 fail("CATALOG_INVALID");
             const target = catalogRootVersion(snapshot);
             if (target !== rootSkillVersion) {
-                if (compare(target, rootSkillVersion) > 0)
-                    await upgradeRoot(skillsDirectory);
+                // Switching a private runtime must never replace the installed legacy root.
                 const updated = await productionDependencies(skillsDirectory, options.verifiedLauncher, target);
                 launcher = updated.launcher;
                 const fresh = await launcher.main(["catalog-snapshot"], launcherOptions);
@@ -188,8 +176,7 @@ export async function runSkillStartCommand(skillId, skillVersion, options = {})
         if (production) {
             const target = catalogRootVersion(snapshot);
             if (target !== rootSkillVersion) {
-                if (compare(target, rootSkillVersion) > 0)
-                    await upgradeRoot(skillsDirectory);
+                // Switching a private runtime must never replace the installed legacy root.
                 const updated = await productionDependencies(skillsDirectory, options.verifiedLauncher, target);
                 launcher = updated.launcher;
                 rootSkillVersion = updated.rootSkillVersion;
@@ -208,7 +195,7 @@ export async function runSkillStartCommand(skillId, skillVersion, options = {})
             platformVersion,
             skillsDirectory,
             trust,
-            fetcher: options.fetcher,
+            fetcher: currentCatalogFetcher(options.fetcher),
             admit: async (identity) => {
                 const answer = await launcher.main([
                     "skill-admit",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nggaigc/cli",
-  "version": "0.1.56",
+  "version": "0.1.57",
   "description": "Secure NGGAIGC Skill installer for Codex, WorkBuddy and compatible agents.",
   "type": "module",
   "bin": {

package/vendor/roots/1.1.52/manifest.json

@@ -0,0 +1,47 @@
+{
+  "schemaVersion": "nggaigc-plugin-package/v1",
+  "artifactId": "plugin.nggaigc",
+  "version": "1.1.52",
+  "sourceCommit": "e2aa56e384db076f5dd69713d26c2c096c82159e",
+  "artifactPath": "packages/plugins/nggaigc-plugin-1.1.52.zip",
+  "sha256": "85e6a51dc48946a02f385ebb366605107468fb86fe5d7c1a03cb6669e5e03b8d",
+  "sizeBytes": 510622,
+  "fileCount": 24,
+  "platforms": [
+    "win32-x64",
+    "win32-arm64",
+    "darwin-arm64"
+  ],
+  "files": {
+    ".codex-plugin/plugin.json": "d1aa9601a6f1cb10fda9804efdcd9100b46fa499e6c8799fa42a17b712389f21",
+    "installer/install.cjs": "76f4ed73233fd39900fb0bedbc434dea39e52e6b6b4622f3fd388a5ca09c6f62",
+    "installer/legacy-root-digests.json": "922552646a5aa6cff8616c372912a37b1d5f263351206b85785ed9b2eae31641",
+    "installer/signed-pair-1.1.16.json": "ccb22a90302cc5c9c585067ebc211a27b0c9d8a177c2740a5678a58a3d70bfe9",
+    "installer/signed-pair-1.1.17.json": "a3697506c929aaa085a6d994fc3a1b9a87e522ec6e1e32f3f760e6a534effa2b",
+    "migration/seedream-1.1.3/agents/openai.yaml": "3cbf034ddccd64a7972acd37e7433683a3944f3d8c7b5bdccbbd70e517bf5a8c",
+    "migration/seedream-1.1.3/references/image-generation.md": "15a6dd1f96c53240ef9e961049a7b323ca3c42d2dcf01c9982f1849f01e96afe",
+    "migration/seedream-1.1.3/references/source.json": "75998d079a229435d1097b00bd008703bd38026fc6485c312254925bf55398a8",
+    "migration/seedream-1.1.3/scripts/seedream.mjs": "dcc6af4d945790d9dfd7fac21c60934759d7ac2576a14507d0299f4833942a96",
+    "migration/seedream-1.1.3/SKILL.md": "65e39b129f40f86b76b24a19be6494f9b091bc3d1ccffd20b8a6cd56130a0cb7",
+    "skills/nggaigc/agents/openai.yaml": "8936d97b9821e687e224e9349cc42be2ee5fc20988562efffbcb70080aedf87c",
+    "skills/nggaigc/references/catalog-and-updates.md": "534979fe28e85463c4558700e14401268b1c0e443fc49092199eef1911449f0c",
+    "skills/nggaigc/references/source.json": "3063b696eeb56d71d47516dfa849ed4542771b708412e8442fe94b228da48105",
+    "skills/nggaigc/scripts/api_client.mjs": "e16bf750a297ef7e88e4843d2fba9c33b412a66516bfe76822d7deec6c153069",
+    "skills/nggaigc/scripts/api_package.mjs": "824ea8f935e2c3aec7ad5ea5c6ad043f1b77ccd9918c86687a9bd61558954fe4",
+    "skills/nggaigc/scripts/bootstrap-public.json": "4c3dd5e548480e8e60842bae85ce76fb2bd0107defd4b3532129b29842dda33b",
+    "skills/nggaigc/scripts/launch-ngg-client.cjs": "69bc926f0816196436b3fbbcec70efc7b17a7f44ec6c06c5082c211574a76bad",
+    "skills/nggaigc/scripts/macos-keychain": "b0bdf29d14219d38ca18c7e5c599deb0daa8c8ac70b0babbc7d4fb23673079ec",
+    "skills/nggaigc/scripts/macos-keychain.swift": "1b57e74fde66c824fe970547dd8ca0883a3334c34c065e85a8a2a90d4556a7f5",
+    "skills/nggaigc/scripts/ngg-session.mjs": "632f5368bc861a9bdd52d7cfeb8fb8376c34ef8f802e01ca1d41fc2716dbc31a",
+    "skills/nggaigc/scripts/ngg_client.mjs": "89458ab4acb5fd0b4b9ae77cea15f8f259a13cd7588038f52511bf809d5b44e2",
+    "skills/nggaigc/scripts/supported-platforms.json": "ec8b0754c489e04534a1d9880dd6664ba9c5bcd07789e06d138e0923f23575ff",
+    "skills/nggaigc/scripts/windows-credential.ps1": "641888d8c6016bb84f18df19315322ed802c5709fbe5209250eaf1b0ce498aec",
+    "skills/nggaigc/SKILL.md": "bca7a53138b6f820c0a735dcdcb20b688e9a702699bc84babc4ef6a630988a07"
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "keyId": "ngg-signing-skill-release-1",
+    "scope": "artifact-bytes",
+    "value": "/SCLOXoya4UqiisUZLvnJm9BjXQ0iaF5FvU+2tTEAd24QCNqkXNQDDtIGp5J/pj1CL+ioEFiml42xcahfLUXAg=="
+  }
+}

package/vendor/start-compatibility.json

@@ -2,9 +2,9 @@
   "payload": {
     "schemaVersion": "nggaigc-start-compatibility/v1",
     "catalog": {
-      "releaseId": "catalog-2026.11.02.3",
-      "catalogVersion": "1.10.168",
-      "releaseSha256": "11fa89a45efc9b859d26ae6398b97b3a7559c1d614eefae3ff59a9403f481950"
+      "releaseId": "catalog-2026.11.03.3",
+      "catalogVersion": "1.10.172",
+      "releaseSha256": "e6de2635868a34ad501355ae132ce8c420bc5b1a38df31530fb6c38a356c4410"
     },
     "contract": "same-skill-inputs-pricing-permissions",
     "aliases": [
@@ -19,8 +19,15 @@
         "id": "skill.h3-broll-video-assets",
         "fromVersion": "0.1.9",
         "fromManifestSha256": "d4f3a01ce66879e668935af9ccba225ca08ca9b123296e8f7e6144a2beb71674",
-        "toVersion": "0.1.10",
-        "toManifestSha256": "14b2d3996d927f2b3c995c3e827a33e990bcca923aa64f84c905b24b3badcfe4"
+        "toVersion": "0.1.12",
+        "toManifestSha256": "f42ea141a6c0e67844dbe981c52047c7c8871737decd6cde2534bf273d8d5987"
+      },
+      {
+        "id": "skill.h3-broll-video-assets",
+        "fromVersion": "0.1.10",
+        "fromManifestSha256": "14b2d3996d927f2b3c995c3e827a33e990bcca923aa64f84c905b24b3badcfe4",
+        "toVersion": "0.1.12",
+        "toManifestSha256": "f42ea141a6c0e67844dbe981c52047c7c8871737decd6cde2534bf273d8d5987"
       },
       {
         "id": "skill.image-singing-digital-human",
@@ -47,8 +54,15 @@
         "id": "skill.ngg-depth-dance-copy",
         "fromVersion": "0.2.1",
         "fromManifestSha256": "efb34854dd2d5ab5e8d33363ca1ce93c69c7743cac143c16c34c360a8bab89fd",
-        "toVersion": "0.2.2",
-        "toManifestSha256": "6eca6fc0897875ba56c0cb460052f7f490f6833c61164daf3dfc22b4e9530fd9"
+        "toVersion": "0.2.3",
+        "toManifestSha256": "e2448e360bc9bdfd57d14ff20cf81cc90693eda00a7edcf1a27abd9f09b62a20"
+      },
+      {
+        "id": "skill.ngg-depth-dance-copy",
+        "fromVersion": "0.2.2",
+        "fromManifestSha256": "6eca6fc0897875ba56c0cb460052f7f490f6833c61164daf3dfc22b4e9530fd9",
+        "toVersion": "0.2.3",
+        "toManifestSha256": "e2448e360bc9bdfd57d14ff20cf81cc90693eda00a7edcf1a27abd9f09b62a20"
       },
       {
         "id": "skill.ngg-drama-workflow",
@@ -119,6 +133,6 @@
     "algorithm": "ed25519",
     "keyId": "ngg-signing-skill-release-1",
     "scope": "nggaigc-start-compatibility/v1",
-    "value": "TieQh/DsCu0K6ViZsYATqXFnBIFtnJxk97Nd3j9Jp8F4VfeacC7IE2vOlG5VLz/gWvxXqALy6J9OOiBJi45PDQ=="
+    "value": "tHSv9okTaDs4zJISa0tj9nAc99Hq9VogRKNDZgceJXz5KWhXUIcOKY5Ipk6nZTuEiTWvGV5PLAokYGCRWT7XAg=="
   }
 }