@tera-system/core 0.1.5 → 0.2.1

package/MANIFEST.json

@@ -1,6 +1,6 @@
 {
   "name": "@tera-system/core",
-  "version": "0.1.5",
+  "version": "0.2.1",
   "description": "Build manifest for the Tera System OpenCode Plugin component.",
   "compatibleEnvironments": [
     "opencode"
@@ -20,5 +20,5 @@
     "tools": "1f96a2de662c50c5c0a4c62d27ec583671c690163a0b35add036bfdd2b3a1f1a",
     "core/project-control": "cb979181d50e54c9b9b9173ffc890ca021bfaefe9678b1cad4a2f67ceac3dfdd"
   },
-  "builtAt": "2026-08-21"
+  "builtAt": "2026-08-26"
 }

package/RELEASES.md

@@ -4,6 +4,62 @@
 
 ---
 
+## 0.2.0 (2026-08-21)
+
+### النسخة الشخصية النظيفة (Personal Edition)
+
+**ما تغيّر:**
+- إزالة كل بوابات الترخيص من الوكلاء والأوامر — هذه النسخة للاستخدام الشخصي الحر
+- إزالة ملفات الحماية (license-gate, integrity, preflight)
+- استعادة `install.js` للنسخة البسيطة الأصلية (تسجيل حالة ترخيص غير مُلزم)
+- الفصل عن الحزمة التجارية: `@tera-system/pro`
+
+**لماذا هذا التحديث:**
+- `@tera-system/core` = نسخة شخصية للمالك (Majed) تستخدم في مشاريعه بحرية
+- الحماية التجارية (الترخيص، sync من السيرفر، heartbeat) تنتقل إلى `@tera-system/pro`
+
+---
+
+## 0.1.5 (2026-08-21)
+
+### ترقية: التحقق من الترخيص عبر API (أونلاين) مع fallback أوفلاين
+
+**ما تم تحسينه:**
+- **التحقق الأونلاين أولاً:** المُثبِّت يحاول الاتصال بـ API التحقق أولاً
+- **Fallback أوفلاين:** إذا فشل الاتصال، يتحقق محلياً بـ Ed25519
+- **لا يُوقف التثبيت:** التحقق لا يُوقف التثبيت أبداً
+- **dıagnostic واضح:** يُظهر مصدر التحقق (☁️ API / 🔒 Offline / 🔄 Fallback)
+
+**المتغيرات البيئية الجديدة:**
+| المتغير | الوصف | القيمة الافتراضية |
+|---------|-------|-------------------|
+| `TERA_LICENSE_API` | رابط API التحقق | `https://teranoo.com/api/license` |
+| `TERA_OFFLINE_ONLY` | تعطيل التحقق الأونلاين | `0` (مفعّل) |
+
+**لماذا هذا التحديث:**
+- التحقق الأونلاين يمنع التkey lowering
+- Fallback يضمن عمل التثبيت حتى بدون إنترنت
+- استعداد للعميل الذي يُنفّذ API التحقق
+
+**ملاحظات:**
+- API التحقق بانتظار تنفيذ العميل
+- التحقق الأوفلاين يعمل بشكل مستقل حتى بدون API
+
+---
+
+## 0.1.4 (2026-08-21)
+
+### إصلاح: تغيير حالة الترخيص عبر npm
+
+**ما تم إصلاحه:**
+- تحديث حالة الترخيص من "Active" إلى "Unlicensed" عبر npm
+- توثيق حالة الترخيص في LICENSE.md
+
+**ملاحظات:**
+- هذا إصلاح طارئ بعد النشر
+
+---
+
 ## 0.1.1 (2026-08-21)
 
 ### تحديث: توضيح الترخيص والتوثيق

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tera-system/core",
-  "version": "0.1.5",
-  "description": "Tera System OpenCode Plugin — governance core, 20 agents, 10 commands, distribution tools",
+  "version": "0.2.1",
+  "description": "Tera System OpenCode Plugin — governance core, 20 agents, 11 commands, distribution tools (personal edition)",
   "license": "SEE LICENSE IN LICENSE.md",
   "type": "module",
   "engines": {

package/scripts/install.js

@@ -84,7 +84,7 @@ const target = resolveTarget();
 const pkg = JSON.parse(fs.readFileSync(path.join(PKG_ROOT, "package.json"), "utf8"));
 const ownership = loadOwnership(target);
 
-const stats = { installed: 0, updated: 0, identical: 0, skippedGroups: 0, conflicts: [] };
+const stats = { installed: 0, updated: 0, identical: 0, adopted: 0, skippedGroups: 0, conflicts: [] };
 
 /* ------------------------------- group install ------------------------------- */
 
@@ -102,7 +102,15 @@ function installGroup(group) {
     if (fs.existsSync(destFile)) {
       const destHash = sha256(fs.readFileSync(destFile));
       if (destHash === srcHash) {
-        stats.identical++;
+        // Identical content — adopt ownership if not already owned.
+        // (byte-identical file = package content, so it is safe to claim it.)
+        if (!Object.prototype.hasOwnProperty.call(ownership.files, destRel)) {
+          ownership.files[destRel] = srcHash;
+          stats.adopted++;
+          console.log(`  [adopt   ] ${destRel} — identical, now owned by package`);
+        } else {
+          stats.identical++;
+        }
         continue;
       }
       const owned = Object.prototype.hasOwnProperty.call(ownership.files, destRel);
@@ -203,6 +211,7 @@ const manifest = {
     installed: stats.installed,
     updated: stats.updated,
     identical: stats.identical,
+    adopted: stats.adopted,
     skippedGroups: stats.skippedGroups,
     conflicts: stats.conflicts.length,
   },
@@ -213,139 +222,28 @@ fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
 fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
 
 /* ------------------- license state (non-blocking, never breaks install) ------------------- */
-
-/**
- * License verification with API-first strategy + offline fallback.
- *
- * Flow:
- *   1. Try online API verification (if API URL is configured)
- *   2. On API failure → fallback to offline Ed25519 verification
- *   3. Never blocks install — always continues
- *
- * Environment variables:
- *   TERA_LICENSE_API  — API base URL (e.g. https://teranoo.com/api/license)
- *   TERA_LICENSE_KEY  — Manual license key override
- */
-const LICENSE_API_URL = process.env.TERA_LICENSE_API || "https://teranoo.com/api/license";
-const LICENSE_TIMEOUT_MS = 5000; // 5 seconds max for API call
-
-/**
- * Verify license via remote API (online).
- * Returns: { ok: boolean, state: string, reason: string, expiresAt?: string, source: "api" }
- */
-async function verifyViaAPI(licenseKey) {
-  if (!licenseKey) return { ok: false, state: "Unlicensed", reason: "no-key", source: "api" };
-
-  try {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), LICENSE_TIMEOUT_MS);
-
-    const res = await fetch(`${LICENSE_API_URL}/verify`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ licenseKey }),
-      signal: controller.signal,
-    });
-    clearTimeout(timeout);
-
-    if (!res.ok) {
-      return { ok: false, state: "Invalid", reason: `api-http-${res.status}`, source: "api" };
-    }
-
-    const data = await res.json();
-    return {
-      ok: data.valid === true,
-      state: data.state || "Invalid",
-      reason: data.reason || "api-response",
-      expiresAt: data.expiresAt || null,
-      source: "api",
-    };
-  } catch (err) {
-    // Network error, timeout, abort — fall through to offline
-    return { ok: false, state: "Unknown", reason: `api-error: ${err.message}`, source: "api-fallback" };
-  }
-}
-
-/**
- * Verify license offline (Ed25519 signature check).
- * Returns: { ok: boolean, state: string, reason: string, expiresAt?: string, source: "offline" }
- */
-function verifyOffline(licenseKey) {
+try {
+  const stateFile = path.join(target, ".tera", "license.state.json");
+  let licenseKey = (readLicenseState(stateFile) || {}).licenseKey;
+  if (!licenseKey) licenseKey = process.env.TERA_LICENSE_KEY || undefined;
   const state = assessLicenseState(licenseKey);
-  return {
-    ok: state.state === "Active" || state.state === "Grace",
+  writeLicenseState(stateFile, {
     state: state.state,
     reason: state.reason,
+    licenseKey: licenseKey || null,
     expiresAt: state.expiresAt || null,
-    graceUntil: state.graceUntil || null,
-    source: "offline",
-  };
+    checkedAt: new Date().toISOString(),
+  });
+  console.log(`  [license ] state=${state.state} (${state.reason})`);
+} catch (err) {
+  console.log(`  [license ] skipped (${err.message}) — install continues`);
 }
 
-/**
- * Combined verification: API-first, offline fallback.
- * Always returns a result — never throws.
- */
-async function verifyLicense(licenseKey) {
-  // Step 1: Try API (unless explicitly disabled)
-  if (process.env.TERA_OFFLINE_ONLY === "1") {
-    return verifyOffline(licenseKey);
-  }
-
-  const apiResult = await verifyViaAPI(licenseKey);
-
-  // If API succeeded and gave a definitive answer, use it
-  if (apiResult.source === "api" && apiResult.ok !== undefined) {
-    return apiResult;
-  }
-
-  // Step 2: Fallback to offline
-  const offlineResult = verifyOffline(licenseKey);
-
-  // If offline confirms API's failure, use offline (more trusted)
-  if (!apiResult.ok && !offlineResult.ok) {
-    return offlineResult;
-  }
-
-  // If API failed but offline says active, trust offline (API might be down)
-  if (!apiResult.ok && offlineResult.ok) {
-    return { ...offlineResult, reason: `offline-verified (api-unavailable: ${apiResult.reason})` };
-  }
-
-  // Default: trust API
-  return apiResult;
-}
-
-// Run license check (async wrapper, non-blocking)
-(async () => {
-  try {
-    const stateFile = path.join(target, ".tera", "license.state.json");
-    let licenseKey = (readLicenseState(stateFile) || {}).licenseKey;
-    if (!licenseKey) licenseKey = process.env.TERA_LICENSE_KEY || undefined;
-
-    const result = await verifyLicense(licenseKey);
-
-    writeLicenseState(stateFile, {
-      state: result.state,
-      reason: result.reason,
-      licenseKey: licenseKey || null,
-      expiresAt: result.expiresAt || null,
-      graceUntil: result.graceUntil || null,
-      source: result.source,
-      checkedAt: new Date().toISOString(),
-    });
-
-    const sourceTag = result.source === "api" ? "☁️" : result.source === "offline" ? "🔒" : "🔄";
-    console.log(`  [license ] ${sourceTag} state=${result.state} (${result.reason})`);
-  } catch (err) {
-    console.log(`  [license ] skipped (${err.message}) — install continues`);
-  }
-})();
-
 console.log("\n  summary:");
 console.log(`    installed : ${stats.installed}`);
 console.log(`    updated   : ${stats.updated}`);
 console.log(`    identical : ${stats.identical}`);
+console.log(`    adopted   : ${stats.adopted} (pre-existing identical files now owned)`);
 console.log(`    conflicts : ${stats.conflicts.length} (your files kept untouched)`);
 console.log(`    skipped   : ${stats.skippedGroups} group(s) — user-owned state`);
 console.log(`  ownership log : ${path.join(".opencode", MANIFEST_NAME)}\n`);