@tera-system/pro 0.2.10 → 0.2.11

package/LICENSE.md

@@ -4,7 +4,7 @@
 
 ## النموذج: كود مفتوح + ترخيص مدفوع
 
-هذا الحزمة (`@tera-system/core`) مفتوحة المصدر لكنها **خاضعة لترخيص تجاري**.
+منظومة Tera (`@tera-system/pro`) نظام تجاري مرخّص — كود مفتوح المصدر لكنه **خاضع لترخيص تجاري**.
 
 ### ماذا يعني ذلك عملياً:
 

package/MANIFEST.json

@@ -1,6 +1,6 @@
 {
   "name": "@tera-system/pro",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "description": "Build manifest for the Tera System Pro commercial plugin component (THIN mode — content served from teranoo.com signed bundle).",
   "compatibleEnvironments": [
     "opencode"
@@ -15,7 +15,7 @@
     "projectControlTemplates": 1,
     "assets": 49
   },
-  "bundleRef": "core-bundle-v0.2.10.signed.json (SHA256 4F776E78BC2CA99725DD320B9B9EC2C4F05200B52ED7B857BEE487A5F8FD4B13)",
+  "bundleRef": "core-bundle-v0.2.11.signed.json (SHA256 B05E0A99811958BE44DFB162812366723D3080145122A3C3E0C345E37E2E51B2)",
   "builtAt": "2026-08-28",
   "sha256": {
     "agents": "9769b3acc15e44e8ae56e4d585f7b965f6c30eafceea509edd0dfe3ce1d83270",

package/README.md

@@ -20,7 +20,7 @@ npm install @tera-system/pro
 > ```
 > أو مباشرة بدون موافقة:
 > ```bash
-> npx tera-restore
+> npx tera-pro-restore
 > # أو
 > node node_modules/@tera-system/pro/scripts/install.js
 > ```
@@ -54,21 +54,21 @@ npm run tera-sync
 | ط§ظ„ظ†ظˆط§ط© ط§ظ„ط­ظˆظƒظ…ظٹط© (110 ظ…ظ„ظپط§ظ‹) | `tera-system/` |
 | ظ‡ظٹظƒظ„ `project-control/` (ظ‚ظˆط§ظ„ط¨) | `project-control/` *(ظپظ‚ط· ط¥ظ† ظ„ظ… ظٹظˆط¬ط¯ — ط­ط§ظ„ط© ط®ط§طµط© ط¨ظƒظ„ ط¹ظ…ظٹظ„)* |
 | ط£ط¯ظˆط§طھ ط§ظ„طھظˆط²ظٹط¹ (7 ط³ظƒط±ط¨طھط§طھ) | `tools/` |
-| ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© | `.opencode/tera-core.manifest.json` |
+| ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© | `.opencode/tera.manifest.json` |
 
 ## ط³ظ„ظˆظƒ ط§ظ„ظ…ط«ط¨ظ‘طھ (ط؛ظٹط± ظ…ط¯ظ…ط± + ظˆط§ط¹ظچ ط¨ط§ظ„ظ…ظ„ظƒظٹط©)
 
 - **ظ„ط§ ظٹط­ط°ظپ ط£ظٹ ط´ظٹط، ط£ط¨ط¯ط§ظ‹.**
 - **ظ„ط§ ظٹظƒطھط¨ ظپظˆظ‚ ط£ظٹ ظ…ظ„ظپ ط؛ظٹط± ظ…ظ…ظ„ظˆظƒ ظ„ظ‡:** ط£ظٹ ظ…ظ„ظپ ظ…ظˆط¬ظˆط¯ ط¨ط§ط³ظ… ظٹطھط¹ط§ط±ط¶ ظ…ط¹ ط­ط²ظ…ط© `@tera-system/pro` (ظˆظ„ظ… طھط«ط¨ظ‘طھظ‡ ط§ظ„ط­ط²ظ…ط© ط³ط§ط¨ظ‚ط§ظ‹) ظٹظڈطھط±ظƒ ظƒظ…ط§ ظ‡ظˆ ظˆظٹظڈط³ط¬ظژظ‘ظ„ ظƒظ€ `CONFLICT` ظپظٹ طھظ‚ط±ظٹط± ط§ظ„طھط±ظƒظٹط¨.
-- **ظٹظپط±ظ‘ظ‚ ط¨ظٹظ† ظ…ظ„ظپط§طھظ‡ ظˆظ…ظ„ظپط§طھ ط§ظ„ظ…ط³طھط®ط¯ظ…** ط¹ط¨ط± ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© `.opencode/tera-core.manifest.json`.
+- **ظٹظپط±ظ‘ظ‚ ط¨ظٹظ† ظ…ظ„ظپط§طھظ‡ ظˆظ…ظ„ظپط§طھ ط§ظ„ظ…ط³طھط®ط¯ظ…** ط¹ط¨ط± ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© `.opencode/tera.manifest.json`.
 - **ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…ظ…ظ„ظˆظƒط© ظ„ظ„ط­ط²ظ…ط© ظپظ‚ط·** طھظڈط­ط¯ظژظ‘ط« ط¹ظ†ط¯ ط§ط®طھظ„ط§ظپظ‡ط§طŒ ظ…ط¹ **ظ†ط³ط®ط© ط§ط­طھظٹط§ط·ظٹط©** (`*.tera-bak-<ts>`) ظ‚ط¨ظ„ ط£ظٹ طھط­ط¯ظٹط«.
 - **ط¥ط¹ط§ط¯ط© ط§ظ„طھط´ط؛ظٹظ„ ط¢ظ…ظ†ط© (idempotent):** ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…طھط·ط§ط¨ظ‚ط© طھظڈطھط®ط·ظ‘ظ‰.
 - `opencode.json` ط§ظ„ظ…ظˆط¬ظˆط¯ ظ„ط¯ظ‰ ط§ظ„ظ…ط³طھط®ط¯ظ… **ظ„ط§ ظٹظڈظ„ظ…ط³ ط£ط¨ط¯ط§ظ‹** — طھظڈظˆط¶ط¹ ظ†ط³ط®ط© ظ…ط±ط¬ط¹ظٹط© ظپظ‚ط· ظˆطھط¸ظ‡ط± ط§ظ„طھط¹ظ„ظٹظ…ط§طھ ظپظٹ ط§ظ„طھظ‚ط±ظٹط±.
 
 ## ط¥ظ„ط؛ط§ط، ط§ظ„طھط«ط¨ظٹطھ (ظٹط¯ظˆظٹ — ط؛ظٹط± ظ…ط¯ظ…ط±)
 
-1. ط§ط­ط°ظپ ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…ط³ط¬ظ‘ظ„ط© ظپظٹ `.opencode/tera-core.manifest.json` (`files`).
-2. ط§ط­ط°ظپ `.opencode/tera-core.manifest.json` ظ†ظپط³ظ‡.
+1. ط§ط­ط°ظپ ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…ط³ط¬ظ‘ظ„ط© ظپظٹ `.opencode/tera.manifest.json` (`files`).
+2. ط§ط­ط°ظپ `.opencode/tera.manifest.json` ظ†ظپط³ظ‡.
 3. ط§ط­طھظپط¸ ط¨ط£ظٹ `*.tera-bak-*` ط£ظˆ ظ…ظ„ظپط§طھظƒ ط§ظ„ط´ط®طµظٹط© ظƒظ…ط§ ظ‡ظٹ.
 
 ## ط§ظ„طھط­ظ‚ظ‚ ظ…ظ† ط§ظ„ظ†ط²ط§ظ‡ط©

package/RELEASES.md

@@ -5,6 +5,20 @@
 ---
 
 
+
+## 0.2.11 (2026-08-30)
+
+### Security hardening: license-gate message fix + zero core traces
+
+**What changed:**
+- Runtime license-gate tamper message now points to @tera-system/pro (was @tera-system/core)
+- Removed ALL references to any internal package from user-visible files (LICENSE, README, WELCOME, RELEASES)
+- Manifest renamed .opencode/tera-core.manifest.json -> .opencode/tera.manifest.json (auto-migrated on install)
+- Bundle type renamed tera-core-bundle -> tera-bundle (signed, verified)
+
+**Why:**
+- Commercial isolation: the licensed product is @tera-system/pro; no trace of other packages remains for clients
+
 ## 0.2.10 (2026-08-29)
 
 ### First-sale readiness: full content sync with core 0.2.10 + license gates
@@ -22,12 +36,12 @@
 ### حل الاستعادة عند الحذف بالخطأ + توافق npm 11
 
 **ما تغيّر:**
-- إضافة `bin` جديد: `tera-restore` و `tera-pro-restore` — نفس حل core لكن للحزمة التجارية
+- إضافة `bin` جديد: `tera-restore` و `tera-pro-restore` — أمرا استعادة للحزمة التجارية
 - توثيق `npm approve-scripts @tera-system/pro` كحل لأمان npm 11
 - قسم "الاستعادة عند الحذف بالخطأ" في README
 
 **لماذا هذا التحديث:**
-- نفس مشكلة core — حذف `.opencode/agents` بالخطأ كان يحتاج أمراً صريحاً لا يعتمد على `postinstall`
+- حذف `.opencode/agents` بالخطأ كان يحتاج أمراً صريحاً لا يعتمد على `postinstall`
 
 ---
 

package/WELCOME.md

@@ -33,7 +33,7 @@
 ## هل حذفت ملفات بالخطأ؟
 إذا اختفت ملفات `.opencode/agents/` بعد `npm install` ولم تظهر، شغّل:
 ```bash
-npx tera-restore
+npx tera-pro-restore
 ```
 ثم أعد فتح OpenCode.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tera-system/pro",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "description": "Tera System Pro — commercial edition (thin): system files are fetched from teranoo.com as a signed bundle; enforced license gate + heartbeat",
   "license": "SEE LICENSE IN LICENSE.md",
   "type": "module",

package/scripts/build-bundle.mjs

@@ -92,7 +92,7 @@ const privateKey = loadPrivateKey();
 const signature = crypto.sign(null, Buffer.from(canonicalHash), privateKey).toString("base64url");
 
 const bundle = {
-  type: "tera-core-bundle",
+  type: "tera-bundle",
   schema: 1,
   packageName: pkg.name,
   packageVersion: pkg.version,

package/scripts/install.js

@@ -8,7 +8,7 @@
  * Rules:
  *  - Never deletes anything.
  *  - Never overwrites a file it does not own.
- *  - Tracks ownership via `.opencode/tera-core.manifest.json`.
+ *  - Tracks ownership via `.opencode/tera.manifest.json`.
  *  - Only updates files it owns, always keeping a backup first.
  *  - Idempotent: re-running is safe; identical files are skipped.
  *  - Never touches an existing user `opencode.json`.
@@ -30,7 +30,8 @@ import { verifyBundle, applyBundle } from "./lib/bundle.mjs";
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const PKG_ROOT = path.resolve(__dirname, "..");
-const MANIFEST_NAME = "tera-core.manifest.json";
+const MANIFEST_NAME = "tera.manifest.json";
+const LEGACY_MANIFEST_NAME = "tera-core.manifest.json";
 const CONFIG_EXAMPLE = "opencode.tera.example.json";
 
 /** Generate a stable device id from hostname + target path. */
@@ -78,7 +79,19 @@ function copyFile(src, dest) {
 
 function loadOwnership(target) {
   const p = path.join(target, ".opencode", MANIFEST_NAME);
-  if (!fs.existsSync(p)) return { files: {} };
+  if (!fs.existsSync(p)) {
+    // Legacy name (pre-0.2.11) — migrate silently
+    const legacy = path.join(target, ".opencode", LEGACY_MANIFEST_NAME);
+    if (fs.existsSync(legacy)) {
+      try {
+        const parsed = JSON.parse(fs.readFileSync(legacy, "utf8"));
+        return { files: parsed.files && typeof parsed.files === "object" ? parsed.files : {} };
+      } catch {
+        return { files: {} };
+      }
+    }
+    return { files: {} };
+  }
   try {
     const parsed = JSON.parse(fs.readFileSync(p, "utf8"));
     return { files: parsed.files && typeof parsed.files === "object" ? parsed.files : {} };
@@ -197,7 +210,7 @@ function installProjectControl() {
 
 /* ----------------------------------- run ----------------------------------- */
 
-console.log(`\n@tera/core v${pkg.version} — install`);
+console.log(`\nTera System Pro v${pkg.version} — install`);
 console.log(`  target workspace : ${target}\n`);
 
 installGroup({ name: "agents", src: path.join(PKG_ROOT, "agents"), dest: path.join(target, ".opencode", "agents") });
@@ -231,6 +244,15 @@ const manifestPath = path.join(target, ".opencode", MANIFEST_NAME);
 fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
 fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
 
+// Migrate away from the legacy manifest name (pre-0.2.11) — removes any "core" trace
+const legacyManifestPath = path.join(target, ".opencode", LEGACY_MANIFEST_NAME);
+if (fs.existsSync(legacyManifestPath)) {
+  try {
+    fs.unlinkSync(legacyManifestPath);
+    console.log(`  [manifest] migrated: ${LEGACY_MANIFEST_NAME} → ${MANIFEST_NAME}`);
+  } catch { /* non-destructive best-effort */ }
+}
+
 /* ------------------- license state (non-blocking, never breaks install) ------------------- */
 
 /**

package/scripts/lib/bundle.mjs

@@ -18,7 +18,7 @@ export function loadPublicKey() {
  * Returns { ok, reason, manifest?, contentSha256? }
  */
 export function verifyBundle(bundle) {
-  if (!bundle || bundle.type !== "tera-core-bundle") {
+  if (!bundle || bundle.type !== "tera-bundle") {
     return { ok: false, reason: "not-a-bundle" };
   }
   if (typeof bundle.contentSha256 !== "string" || !bundle.signature) {

package/scripts/lib/license-gate.mjs

@@ -169,7 +169,7 @@ export async function enforceLicenseGate(target, options = {}) {
       message:
         "❌ Tera System files have been tampered with.\n" +
         `Tampered files: ${criticalCheck.tampered.map((t) => t.file).join(", ")}\n\n` +
-        "Reinstall required: npm install @tera-system/core@latest",
+        "Reinstall required: npm install @tera-system/pro@latest (or npx tera-pro-restore)",
     };
   }