@osborn001/zhiwei 0.0.0-stage → 0.2.0

package/README.md

@@ -1,3 +1,140 @@
-# Temporary Holding Version
+# 知微 CLI / MCP
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+在其他 Agent 完成任务后，把明确选定、脱敏的工作摘要送到自己的知微。
+一个程序同时提供命令行与本地 stdio MCP；不会自动采集历史对话、源码或附件。
+
+## 安装与使用
+
+npm 包名为 `@osborn001/zhiwei`，本文示例固定使用 `0.2.0`。
+安装公开 npm 包不需要注册 npm 账号；连接知微仍需每台电脑独立的连接器凭证。
+请核对完整包名与版本，不要安装名称相似的第三方包。
+
+需要 Node.js 20 或更新版本（建议使用受支持的 LTS）。
+支持 Windows、macOS、Linux，各提供 x64 / arm64 程序。
+当前 Windows x64 完成 npm 安装与 MCP 实际运行验收；其余平台完成交叉构建，尚待对应真机验收。
+
+```sh
+npm install -g @osborn001/zhiwei@0.2.0
+zhiwei version
+```
+
+也可以按需执行，无需全局安装或手选磁盘目录：
+
+```sh
+npx --yes @osborn001/zhiwei@0.2.0 version
+npx --yes @osborn001/zhiwei@0.2.0 mcp
+```
+
+包内带全部平台程序，安装时不编译、不额外从 GitHub 下载；首次 npm/npx 安装需要联网，
+后续本地程序运行不依赖 registry。安装无生命周期脚本、无运行依赖。
+程序启动时核对包内 SHA-256（用于发现损坏；来源真实性仍依赖可信 registry/发布者）。
+
+## 每台电脑独立配置
+
+推荐使用手机确认配对（需要支持电脑配对的知微服务端与 Android 0.3.8 或更新版本）：
+
+```sh
+zhiwei login
+```
+
+电脑显示短时配对码后，在手机“设置 → 连接的电脑”输入该码，核对名称、权限和有效期，再确认授权。
+只批准自己刚刚发起的请求。配对码十分钟后失效；电脑等待批准时每五秒查询一次，成功后自动保存独立凭证。
+同一电脑用户的 CLI 与 MCP 共用此配置，后续无需每次确认；到期或撤销后须重新授权。
+
+```sh
+zhiwei auth status
+zhiwei logout
+```
+
+`auth status` 联网检查当前授权；`logout` 撤销服务器凭证并清理本地配置。手机也可单独撤销某台电脑，已提交资料保留。
+电脑凭证只可提交摘要、读取自身回执和管理自身授权；不能读取个人日记、照片、聊天或长期记忆。
+不要复制手机凭证，也不要把凭证放进 MCP 配置、聊天、命令参数或 Git。
+
+默认私有配置位置：Windows `%APPDATA%\zhiwei\config.json`；macOS
+`~/Library/Application Support/zhiwei/config.json`；Linux `~/.config/zhiwei/config.json`。
+此路径是用户数据目录，与程序安装盘符无关。`ZHIWEI_HOME` 可指定独立目录。
+
+旧的管理员签发方式继续兼容。可以通过 stdin 导入管理员提供的 `{url,token}` JSON（仅创建新配置）：
+
+```powershell
+Get-Content -Raw -LiteralPath '你的私有配置文件.json' | zhiwei configure
+```
+
+```sh
+zhiwei configure < /path/to/private-config.json
+```
+
+请用当前用户权限保护配置目录。它不是加密保险箱；卸载 npm 包不会删除配置与离线队列。
+
+## MCP 接入
+
+推荐先全局安装，再在 MCP 客户端配置下列内容；客户端进程必须能在 PATH 找到 `zhiwei`。
+安装 Node 或 CLI 后可能需要完全退出并重开客户端。
+
+```json
+{
+  "mcpServers": {
+    "zhiwei": { "command": "zhiwei", "args": ["mcp"] }
+  }
+}
+```
+
+Codex CLI 注册命令：
+
+```sh
+codex mcp add zhiwei -- zhiwei mcp
+```
+
+支持 npx 的客户端也可以使用 `command: "npx"`，
+`args: ["--yes", "@osborn001/zhiwei@0.2.0", "mcp"]`。
+Windows 上不能直接启动 `.cmd` 的宿主可使用：
+
+```json
+{
+  "mcpServers": {
+    "zhiwei": {
+      "command": "cmd",
+      "args": ["/d", "/s", "/c", "npx --yes @osborn001/zhiwei@0.2.0 mcp"]
+    }
+  }
+}
+```
+
+配置中的命令是固定启动命令，不能拼入用户内容或令牌。重载连接后应看到
+`submit_work_summary`、`get_work_receipt`、`sync_work_summaries` 三个工具。
+可对 Agent 说：“把这个任务整理成脱敏工作摘要，区分已完成和待处理，提交到知微。”
+接入本身不会添加自动上传规则。
+
+## 回执、补传与数据边界
+
+配置完成后，将明确选定的工作摘要保存为 `summary.json`，先校验再提交：
+
+```sh
+zhiwei submit --file summary.json --dry-run
+zhiwei submit --file summary.json
+```
+
+`submit --dry-run` 只校验，不联网、不写队列。包内 `summary.example.json` 提供字段示例，
+使用前须将内容、标识和时间换成实际工作信息，不要直接上传示例。
+`state: accepted` 表示已取得云端回执；`state: queued` 表示仅保存本机。
+用 `zhiwei queue` 查看待传 ID，用 `zhiwei sync` 显式重试，无后台常驻上传。
+队列按服务器与凭证隔离；更换凭证后不会自动迁移旧队列。
+
+同一提交重试保留 `submission_id` 和内容；新的进展使用新的 ID。
+同 ID 不同内容返回 409。401 表示凭证失效，429 表示配额限制。
+单份 JSON ≤32 KiB、正文≤4000字，每凭证滚动24小时最多120份。
+
+摘要进入知微的独立工作资料和日记展示段落，可在手机查询，保留 Agent 来源。
+提交不调用模型，不自动提取长期偏好。只发送允许带出且已脱敏的工作概述。
+生产服务器只处理既有 HTTPS 请求，不需要为 npm 或 MCP 额外安装服务。
+
+## 更新和卸载
+
+更新时安装已核验的明确版本；若 MCP 用 npx 固定版本，也要修改其版本号。
+运行 `npm uninstall -g @osborn001/zhiwei` 卸载程序。凭证应另行撤销；卸载程序
+不等于撤销权限，也不会清空未传队列。升级与便携版共用同一配置和队列。
+
+## 许可
+
+本包标记为 `UNLICENSED`，公开分发不等于授予开源许可。
+第三方依赖的许可说明见包内 `THIRD_PARTY_LICENSES.txt`。

package/THIRD_PARTY_LICENSES.txt

@@ -0,0 +1,479 @@
+Third-party licenses for Zhiwei CLI/MCP. No configuration or credentials are bundled.
+
+github.com/google/jsonschema-go / LICENSE
+
+MIT License
+
+Copyright (c) 2025 JSON Schema Go Project Authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+github.com/modelcontextprotocol/go-sdk / LICENSE
+
+The MCP project is undergoing a licensing transition from the MIT License to the Apache License, Version 2.0 ("Apache-2.0"). All new code and specification contributions to the project are licensed under Apache-2.0. Documentation contributions (excluding specifications) are licensed under CC-BY-4.0.
+
+Contributions for which relicensing consent has been obtained are licensed under Apache-2.0. Contributions made by authors who originally licensed their work under the MIT License and who have not yet granted explicit permission to relicense remain licensed under the MIT License.
+
+No rights beyond those granted by the applicable original license are conveyed for such contributions.
+
+---
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright
+      owner or by an individual or Legal Entity authorized to submit on behalf
+      of the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+---
+
+MIT License
+
+Copyright (c) 2024-2025 Model Context Protocol a Series of LF Projects, LLC.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+Creative Commons Attribution 4.0 International (CC-BY-4.0)
+
+Documentation in this project (excluding specifications) is licensed under
+CC-BY-4.0. See https://creativecommons.org/licenses/by/4.0/legalcode for
+the full license text.
+
+
+github.com/segmentio/asm / LICENSE
+
+MIT License
+
+Copyright (c) 2021 Segment
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+github.com/segmentio/encoding / LICENSE
+
+MIT License
+
+Copyright (c) 2019 Segment.io, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+github.com/yosida95/uritemplate/v3 / LICENSE
+
+Copyright (C) 2016, Kohei YOSHIDA <https://yosida95.com/>. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+    * Neither the name of the copyright holder nor the names of its
+      contributors may be used to endorse or promote products derived from
+      this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+golang.org/x/oauth2 / LICENSE
+
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+golang.org/x/sync / LICENSE
+
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+golang.org/x/sys / LICENSE
+
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+golang.org/x/time / LICENSE
+
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+Go runtime LICENSE
+
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

package/bin/launcher.cjs

@@ -0,0 +1,60 @@
+'use strict';
+
+const { createHash } = require('node:crypto');
+const { readFileSync } = require('node:fs');
+const path = require('node:path');
+const { spawn } = require('node:child_process');
+const { constants } = require('node:os');
+
+const targets = new Set(['win32-x64', 'win32-arm64', 'darwin-x64', 'darwin-arm64', 'linux-x64', 'linux-arm64']);
+
+function resolveBinary(root, platform = process.platform, arch = process.arch) {
+  const target = `${platform}-${arch}`;
+  if (!targets.has(target)) throw new Error(`Unsupported platform: ${target}. Supported: Windows, macOS and Linux on x64/arm64.`);
+  const file = `native/${target}/zhiwei${platform === 'win32' ? '.exe' : ''}`;
+  try {
+    const manifest = JSON.parse(readFileSync(path.join(root, 'native-manifest.json'), 'utf8'));
+    const pkg = JSON.parse(readFileSync(path.join(root, 'package.json'), 'utf8'));
+    const expected = manifest.binaries[target];
+    if (manifest.version !== pkg.version || expected.file !== file) throw new Error('Invalid manifest');
+    const binary = readFileSync(path.join(root, file));
+    if (binary.length !== expected.size || createHash('sha256').update(binary).digest('hex') !== expected.sha256) {
+      throw new Error('Integrity mismatch');
+    }
+  } catch {
+    throw new Error(`Bundled program missing or damaged for ${target}. Reinstall the verified package.`);
+  }
+  return path.join(root, file);
+}
+
+async function run(args = process.argv.slice(2), options = {}) {
+  const root = options.root || path.resolve(__dirname, '..');
+  const host = options.host || process;
+  let executable;
+  try { executable = resolveBinary(root, options.platform, options.arch); }
+  catch (error) { host.stderr.write(`zhiwei: ${error.message}\n`); return 1; }
+
+  // Inherit stdio directly: stdout belongs exclusively to the CLI / MCP protocol.
+  // No shell, download, lifecycle installer, token arguments or environment logging.
+  return new Promise(resolve => {
+    let child;
+    try { child = (options.spawn || spawn)(executable, args, { stdio: 'inherit', shell: false, windowsHide: true }); }
+    catch { host.stderr.write('zhiwei: cannot start bundled program.\n'); resolve(1); return; }
+    const onInterrupt = () => child.kill('SIGINT');
+    const onTerminate = () => child.kill('SIGTERM');
+    host.on('SIGINT', onInterrupt);
+    host.on('SIGTERM', onTerminate);
+    let finished = false;
+    function finish(code) {
+      if (finished) return;
+      finished = true;
+      host.removeListener('SIGINT', onInterrupt);
+      host.removeListener('SIGTERM', onTerminate);
+      resolve(code);
+    }
+    child.once('error', () => { host.stderr.write('zhiwei: cannot start bundled program.\n'); finish(1); });
+    child.once('exit', (code, signal) => finish(code === null ? 128 + (constants.signals[signal] || 1) : code));
+  });
+}
+
+module.exports = { resolveBinary, run };

package/bin/zhiwei.cjs

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+'use strict';
+
+require('./launcher.cjs').run().then(code => { process.exitCode = code; }).catch(() => {
+  process.stderr.write('zhiwei: launcher failed. Reinstall the verified package.\n');
+  process.exitCode = 1;
+});

package/native-manifest.json

@@ -0,0 +1,35 @@
+{
+  "version": "0.2.0",
+  "binaries": {
+    "win32-x64": {
+      "file": "native/win32-x64/zhiwei.exe",
+      "size": 9183744,
+      "sha256": "4f6f6b9529159b53a06dad4914d0287d4f64da4e2bd95d4ee1480f659812a9c5"
+    },
+    "win32-arm64": {
+      "file": "native/win32-arm64/zhiwei.exe",
+      "size": 8340480,
+      "sha256": "f635a927703b253e17898a05e9fde7420c3f4fc2fddc5385f50bae5b51453824"
+    },
+    "darwin-x64": {
+      "file": "native/darwin-x64/zhiwei",
+      "size": 9166336,
+      "sha256": "c6baba68d521df25eab3f5058cc462ef8034871a01ea9ebb1d96517d9c208764"
+    },
+    "darwin-arm64": {
+      "file": "native/darwin-arm64/zhiwei",
+      "size": 8502754,
+      "sha256": "19f484c8ea4ab4d1e36490fa571c6da249b9e25a892d6fa9bca9f5da8af86a9b"
+    },
+    "linux-x64": {
+      "file": "native/linux-x64/zhiwei",
+      "size": 8941728,
+      "sha256": "048ad4b9a7da15b235bd502c9d9cf84ca9033dce05909a8206bf83290fc76058"
+    },
+    "linux-arm64": {
+      "file": "native/linux-arm64/zhiwei",
+      "size": 8323232,
+      "sha256": "b2f9faeffe275d71eebe838ed5aa25f98dce9b9ec8fe663c62efc831389beeb8"
+    }
+  }
+}

package/package.json

@@ -1,6 +1,33 @@
 {
   "name": "@osborn001/zhiwei",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "Zhiwei CLI and local stdio MCP for explicitly selected work summaries",
+  "license": "UNLICENSED",
+  "bin": {
+    "zhiwei": "bin/zhiwei.cjs"
+  },
+  "files": [
+    "bin/",
+    "native/",
+    "native-manifest.json",
+    "README.md",
+    "summary.example.json",
+    "THIRD_PARTY_LICENSES.txt"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "os": [
+    "win32",
+    "darwin",
+    "linux"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}

package/summary.example.json

@@ -0,0 +1,11 @@
+{
+  "submission_id": "task-20261006-checkpoint-1",
+  "task_id": "example-task",
+  "occurred_at": "2026-10-05T18:00:00+08:00",
+  "project": "示例项目",
+  "title": "完成接口重试验证",
+  "summary": "验证断网后重试和重复提交处理，生产部署仍待完成。请替换成实际脱敏摘要后提交。",
+  "status": "in_progress",
+  "outcomes": ["重试测试通过"],
+  "open_items": ["生产部署尚未执行"]
+}