@tera-system/pro 0.2.10 → 0.2.12

package/LICENSE.md

@@ -4,7 +4,7 @@
 
 ## النموذج: كود مفتوح + ترخيص مدفوع
 
-هذا الحزمة (`@tera-system/core`) مفتوحة المصدر لكنها **خاضعة لترخيص تجاري**.
+منظومة Tera (`@tera-system/pro`) نظام تجاري مرخّص — كود مفتوح المصدر لكنه **خاضع لترخيص تجاري**.
 
 ### ماذا يعني ذلك عملياً:
 

package/MANIFEST.json

@@ -1,6 +1,6 @@
 {
   "name": "@tera-system/pro",
-  "version": "0.2.10",
+  "version": "0.2.12",
   "description": "Build manifest for the Tera System Pro commercial plugin component (THIN mode — content served from teranoo.com signed bundle).",
   "compatibleEnvironments": [
     "opencode"
@@ -15,7 +15,7 @@
     "projectControlTemplates": 1,
     "assets": 49
   },
-  "bundleRef": "core-bundle-v0.2.10.signed.json (SHA256 4F776E78BC2CA99725DD320B9B9EC2C4F05200B52ED7B857BEE487A5F8FD4B13)",
+  "bundleRef": "core-bundle-v0.2.11.signed.json (SHA256 B05E0A99811958BE44DFB162812366723D3080145122A3C3E0C345E37E2E51B2)",
   "builtAt": "2026-08-28",
   "sha256": {
     "agents": "9769b3acc15e44e8ae56e4d585f7b965f6c30eafceea509edd0dfe3ce1d83270",

package/README.md

@@ -20,7 +20,7 @@ npm install @tera-system/pro
 > ```
 > أو مباشرة بدون موافقة:
 > ```bash
-> npx tera-restore
+> npx tera-pro-restore
 > # أو
 > node node_modules/@tera-system/pro/scripts/install.js
 > ```
@@ -54,21 +54,21 @@ npm run tera-sync
 | ط§ظ„ظ†ظˆط§ط© ط§ظ„ط­ظˆظƒظ…ظٹط© (110 ظ…ظ„ظپط§ظ‹) | `tera-system/` |
 | ظ‡ظٹظƒظ„ `project-control/` (ظ‚ظˆط§ظ„ط¨) | `project-control/` *(ظپظ‚ط· ط¥ظ† ظ„ظ… ظٹظˆط¬ط¯ — ط­ط§ظ„ط© ط®ط§طµط© ط¨ظƒظ„ ط¹ظ…ظٹظ„)* |
 | ط£ط¯ظˆط§طھ ط§ظ„طھظˆط²ظٹط¹ (7 ط³ظƒط±ط¨طھط§طھ) | `tools/` |
-| ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© | `.opencode/tera-core.manifest.json` |
+| ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© | `.opencode/tera.manifest.json` |
 
 ## ط³ظ„ظˆظƒ ط§ظ„ظ…ط«ط¨ظ‘طھ (ط؛ظٹط± ظ…ط¯ظ…ط± + ظˆط§ط¹ظچ ط¨ط§ظ„ظ…ظ„ظƒظٹط©)
 
 - **ظ„ط§ ظٹط­ط°ظپ ط£ظٹ ط´ظٹط، ط£ط¨ط¯ط§ظ‹.**
 - **ظ„ط§ ظٹظƒطھط¨ ظپظˆظ‚ ط£ظٹ ظ…ظ„ظپ ط؛ظٹط± ظ…ظ…ظ„ظˆظƒ ظ„ظ‡:** ط£ظٹ ظ…ظ„ظپ ظ…ظˆط¬ظˆط¯ ط¨ط§ط³ظ… ظٹطھط¹ط§ط±ط¶ ظ…ط¹ ط­ط²ظ…ط© `@tera-system/pro` (ظˆظ„ظ… طھط«ط¨ظ‘طھظ‡ ط§ظ„ط­ط²ظ…ط© ط³ط§ط¨ظ‚ط§ظ‹) ظٹظڈطھط±ظƒ ظƒظ…ط§ ظ‡ظˆ ظˆظٹظڈط³ط¬ظژظ‘ظ„ ظƒظ€ `CONFLICT` ظپظٹ طھظ‚ط±ظٹط± ط§ظ„طھط±ظƒظٹط¨.
-- **ظٹظپط±ظ‘ظ‚ ط¨ظٹظ† ظ…ظ„ظپط§طھظ‡ ظˆظ…ظ„ظپط§طھ ط§ظ„ظ…ط³طھط®ط¯ظ…** ط¹ط¨ط± ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© `.opencode/tera-core.manifest.json`.
+- **ظٹظپط±ظ‘ظ‚ ط¨ظٹظ† ظ…ظ„ظپط§طھظ‡ ظˆظ…ظ„ظپط§طھ ط§ظ„ظ…ط³طھط®ط¯ظ…** ط¹ط¨ط± ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© `.opencode/tera.manifest.json`.
 - **ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…ظ…ظ„ظˆظƒط© ظ„ظ„ط­ط²ظ…ط© ظپظ‚ط·** طھظڈط­ط¯ظژظ‘ط« ط¹ظ†ط¯ ط§ط®طھظ„ط§ظپظ‡ط§طŒ ظ…ط¹ **ظ†ط³ط®ط© ط§ط­طھظٹط§ط·ظٹط©** (`*.tera-bak-<ts>`) ظ‚ط¨ظ„ ط£ظٹ طھط­ط¯ظٹط«.
 - **ط¥ط¹ط§ط¯ط© ط§ظ„طھط´ط؛ظٹظ„ ط¢ظ…ظ†ط© (idempotent):** ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…طھط·ط§ط¨ظ‚ط© طھظڈطھط®ط·ظ‘ظ‰.
 - `opencode.json` ط§ظ„ظ…ظˆط¬ظˆط¯ ظ„ط¯ظ‰ ط§ظ„ظ…ط³طھط®ط¯ظ… **ظ„ط§ ظٹظڈظ„ظ…ط³ ط£ط¨ط¯ط§ظ‹** — طھظڈظˆط¶ط¹ ظ†ط³ط®ط© ظ…ط±ط¬ط¹ظٹط© ظپظ‚ط· ظˆطھط¸ظ‡ط± ط§ظ„طھط¹ظ„ظٹظ…ط§طھ ظپظٹ ط§ظ„طھظ‚ط±ظٹط±.
 
 ## ط¥ظ„ط؛ط§ط، ط§ظ„طھط«ط¨ظٹطھ (ظٹط¯ظˆظٹ — ط؛ظٹط± ظ…ط¯ظ…ط±)
 
-1. ط§ط­ط°ظپ ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…ط³ط¬ظ‘ظ„ط© ظپظٹ `.opencode/tera-core.manifest.json` (`files`).
-2. ط§ط­ط°ظپ `.opencode/tera-core.manifest.json` ظ†ظپط³ظ‡.
+1. ط§ط­ط°ظپ ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…ط³ط¬ظ‘ظ„ط© ظپظٹ `.opencode/tera.manifest.json` (`files`).
+2. ط§ط­ط°ظپ `.opencode/tera.manifest.json` ظ†ظپط³ظ‡.
 3. ط§ط­طھظپط¸ ط¨ط£ظٹ `*.tera-bak-*` ط£ظˆ ظ…ظ„ظپط§طھظƒ ط§ظ„ط´ط®طµظٹط© ظƒظ…ط§ ظ‡ظٹ.
 
 ## ط§ظ„طھط­ظ‚ظ‚ ظ…ظ† ط§ظ„ظ†ط²ط§ظ‡ط©

package/RELEASES.md

@@ -5,6 +5,34 @@
 ---
 
 
+
+
+## 0.2.12 (2026-08-30)
+
+### Bug fix: preflight false tamper detection (SCP-2026-08-30-002)
+
+**What changed (scripts only - bundle unchanged):**
+- integrity.mjs: removed .tera/license.state.json from CRITICAL_FILES - it is a self-modifying STATE file (checkedAt changes on every install/heartbeat/re-check). License security comes from the Ed25519-signed key, not from hashing the state file.
+- install.js: license state is now written BEFORE the integrity snapshot, so the manifest always reflects the final on-disk state.
+- tera-license.mjs: added the 'activate <key> [email]' command (TERA_LICENSE_GUARD.md instructs blocked users to run it - it did not exist).
+
+**Why:**
+- preflight.mjs always failed with "Tampered files: .tera/license.state.json" because the install wrote the state file after the snapshot (0.36s gap) - verified and reproduced.
+- No bundle change: the fix is entirely in npm-shipped scripts. Server bundle stays v0.2.11.
+
+## 0.2.11 (2026-08-30)
+
+### Security hardening: license-gate message fix + zero core traces
+
+**What changed:**
+- Runtime license-gate tamper message now points to @tera-system/pro (was @tera-system/core)
+- Removed ALL references to any internal package from user-visible files (LICENSE, README, WELCOME, RELEASES)
+- Manifest renamed .opencode/tera-core.manifest.json -> .opencode/tera.manifest.json (auto-migrated on install)
+- Bundle type renamed tera-core-bundle -> tera-bundle (signed, verified)
+
+**Why:**
+- Commercial isolation: the licensed product is @tera-system/pro; no trace of other packages remains for clients
+
 ## 0.2.10 (2026-08-29)
 
 ### First-sale readiness: full content sync with core 0.2.10 + license gates
@@ -22,12 +50,12 @@
 ### حل الاستعادة عند الحذف بالخطأ + توافق npm 11
 
 **ما تغيّر:**
-- إضافة `bin` جديد: `tera-restore` و `tera-pro-restore` — نفس حل core لكن للحزمة التجارية
+- إضافة `bin` جديد: `tera-restore` و `tera-pro-restore` — أمرا استعادة للحزمة التجارية
 - توثيق `npm approve-scripts @tera-system/pro` كحل لأمان npm 11
 - قسم "الاستعادة عند الحذف بالخطأ" في README
 
 **لماذا هذا التحديث:**
-- نفس مشكلة core — حذف `.opencode/agents` بالخطأ كان يحتاج أمراً صريحاً لا يعتمد على `postinstall`
+- حذف `.opencode/agents` بالخطأ كان يحتاج أمراً صريحاً لا يعتمد على `postinstall`
 
 ---
 

package/WELCOME.md

@@ -33,7 +33,7 @@
 ## هل حذفت ملفات بالخطأ؟
 إذا اختفت ملفات `.opencode/agents/` بعد `npm install` ولم تظهر، شغّل:
 ```bash
-npx tera-restore
+npx tera-pro-restore
 ```
 ثم أعد فتح OpenCode.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tera-system/pro",
-  "version": "0.2.10",
+  "version": "0.2.12",
   "description": "Tera System Pro — commercial edition (thin): system files are fetched from teranoo.com as a signed bundle; enforced license gate + heartbeat",
   "license": "SEE LICENSE IN LICENSE.md",
   "type": "module",

package/scripts/build-bundle.mjs

@@ -92,7 +92,7 @@ const privateKey = loadPrivateKey();
 const signature = crypto.sign(null, Buffer.from(canonicalHash), privateKey).toString("base64url");
 
 const bundle = {
-  type: "tera-core-bundle",
+  type: "tera-bundle",
   schema: 1,
   packageName: pkg.name,
   packageVersion: pkg.version,

package/scripts/install.js

@@ -8,7 +8,7 @@
  * Rules:
  *  - Never deletes anything.
  *  - Never overwrites a file it does not own.
- *  - Tracks ownership via `.opencode/tera-core.manifest.json`.
+ *  - Tracks ownership via `.opencode/tera.manifest.json`.
  *  - Only updates files it owns, always keeping a backup first.
  *  - Idempotent: re-running is safe; identical files are skipped.
  *  - Never touches an existing user `opencode.json`.
@@ -30,7 +30,8 @@ import { verifyBundle, applyBundle } from "./lib/bundle.mjs";
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const PKG_ROOT = path.resolve(__dirname, "..");
-const MANIFEST_NAME = "tera-core.manifest.json";
+const MANIFEST_NAME = "tera.manifest.json";
+const LEGACY_MANIFEST_NAME = "tera-core.manifest.json";
 const CONFIG_EXAMPLE = "opencode.tera.example.json";
 
 /** Generate a stable device id from hostname + target path. */
@@ -78,7 +79,19 @@ function copyFile(src, dest) {
 
 function loadOwnership(target) {
   const p = path.join(target, ".opencode", MANIFEST_NAME);
-  if (!fs.existsSync(p)) return { files: {} };
+  if (!fs.existsSync(p)) {
+    // Legacy name (pre-0.2.11) — migrate silently
+    const legacy = path.join(target, ".opencode", LEGACY_MANIFEST_NAME);
+    if (fs.existsSync(legacy)) {
+      try {
+        const parsed = JSON.parse(fs.readFileSync(legacy, "utf8"));
+        return { files: parsed.files && typeof parsed.files === "object" ? parsed.files : {} };
+      } catch {
+        return { files: {} };
+      }
+    }
+    return { files: {} };
+  }
   try {
     const parsed = JSON.parse(fs.readFileSync(p, "utf8"));
     return { files: parsed.files && typeof parsed.files === "object" ? parsed.files : {} };
@@ -197,7 +210,7 @@ function installProjectControl() {
 
 /* ----------------------------------- run ----------------------------------- */
 
-console.log(`\n@tera/core v${pkg.version} — install`);
+console.log(`\nTera System Pro v${pkg.version} — install`);
 console.log(`  target workspace : ${target}\n`);
 
 installGroup({ name: "agents", src: path.join(PKG_ROOT, "agents"), dest: path.join(target, ".opencode", "agents") });
@@ -231,6 +244,15 @@ const manifestPath = path.join(target, ".opencode", MANIFEST_NAME);
 fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
 fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
 
+// Migrate away from the legacy manifest name (pre-0.2.11) — removes any "core" trace
+const legacyManifestPath = path.join(target, ".opencode", LEGACY_MANIFEST_NAME);
+if (fs.existsSync(legacyManifestPath)) {
+  try {
+    fs.unlinkSync(legacyManifestPath);
+    console.log(`  [manifest] migrated: ${LEGACY_MANIFEST_NAME} → ${MANIFEST_NAME}`);
+  } catch { /* non-destructive best-effort */ }
+}
+
 /* ------------------- license state (non-blocking, never breaks install) ------------------- */
 
 /**
@@ -423,16 +445,9 @@ async function tryServerSync() {
       console.log("              npm run tera-sync   (or re-run install when online)");
     }
 
-    // Step 2: integrity manifest (after sync, covers server files too)
-    try {
-      const integrityManifest = createIntegrityManifest(target);
-      saveIntegrityManifest(target, integrityManifest);
-      console.log(`  [integrity] manifest created (${integrityManifest.fileCount} files tracked)`);
-    } catch (err) {
-      console.log(`  [integrity] skipped (${err.message}) — install continues`);
-    }
-
-    // Step 3: license verification (API-first with email, offline fallback)
+    // Step 2: license verification (API-first with email, offline fallback)
+    // NOTE: license state is written BEFORE the integrity snapshot (SCP-2026-08-30-002)
+    // so the manifest always reflects the final on-disk state.
     const stateFile = path.join(target, ".tera", "license.state.json");
     const prevState = readLicenseState(stateFile) || {};
     let licenseKey = prevState.licenseKey;
@@ -441,7 +456,7 @@ async function tryServerSync() {
     if (!accountEmail) accountEmail = process.env.TERA_LICENSE_EMAIL || undefined;
     const deviceId = prevState.deviceId || createDeviceId(target);
 
-    // 3a. best-effort activation (only when we have key + email and not activated yet)
+    // 2a. best-effort activation (only when we have key + email and not activated yet)
     if (licenseKey && accountEmail && !prevState.activated) {
       const act = await activateViaAPI(licenseKey, accountEmail, deviceId);
       if (act && act.ok === true) {
@@ -466,6 +481,15 @@ async function tryServerSync() {
 
     const sourceTag = result.source === "api" ? "☁️" : result.source === "offline" ? "🔒" : "🔄";
     console.log(`  [license ] ${sourceTag} state=${result.state} (${result.reason})`);
+
+    // Step 3: integrity manifest (AFTER all writes — snapshot reflects final state)
+    try {
+      const integrityManifest = createIntegrityManifest(target);
+      saveIntegrityManifest(target, integrityManifest);
+      console.log(`  [integrity] manifest created (${integrityManifest.fileCount} files tracked)`);
+    } catch (err) {
+      console.log(`  [integrity] skipped (${err.message}) — install continues`);
+    }
   } catch (err) {
     console.log(`  [license ] skipped (${err.message}) — install continues`);
   }

package/scripts/lib/bundle.mjs

@@ -18,7 +18,7 @@ export function loadPublicKey() {
  * Returns { ok, reason, manifest?, contentSha256? }
  */
 export function verifyBundle(bundle) {
-  if (!bundle || bundle.type !== "tera-core-bundle") {
+  if (!bundle || bundle.type !== "tera-bundle") {
     return { ok: false, reason: "not-a-bundle" };
   }
   if (typeof bundle.contentSha256 !== "string" || !bundle.signature) {

package/scripts/lib/integrity.mjs

@@ -12,7 +12,9 @@ const CRITICAL_FILES = [
   "scripts/lib/integrity.mjs",
   "scripts/install.js",
   "scripts/preflight.mjs",
-  ".tera/license.state.json",
+  // NOTE: .tera/license.state.json is intentionally NOT hashed (SCP-2026-08-30-002).
+  // It is a self-modifying STATE file (checkedAt written on every install/heartbeat/re-check).
+  // License security comes from the Ed25519-signed key, not from hashing the state file.
 ];
 
 /**

package/scripts/lib/license-gate.mjs

@@ -169,7 +169,7 @@ export async function enforceLicenseGate(target, options = {}) {
       message:
         "❌ Tera System files have been tampered with.\n" +
         `Tampered files: ${criticalCheck.tampered.map((t) => t.file).join(", ")}\n\n` +
-        "Reinstall required: npm install @tera-system/core@latest",
+        "Reinstall required: npm install @tera-system/pro@latest (or npx tera-pro-restore)",
     };
   }
 

package/scripts/tera-license.mjs

@@ -13,7 +13,10 @@ function usage() {
   tera-license gen --tier <basic|premium> --project <name> --expires <YYYY-MM-DD> [--seats N]
        (private key: env TERA_LICENSE_PRIVATE or the dev key under license/dev/)
   tera-license check [--key <licenseKey> | --state-file <path>]
-       (or env TERA_LICENSE_KEY)`);
+       (or env TERA_LICENSE_KEY)
+  tera-license activate <licenseKey> [accountEmail]
+       (writes the key into .tera/license.state.json and verifies it)
+       (target: env TERA_TARGET_DIR / INIT_CWD / cwd)`);
 }
 
 const args = process.argv.slice(2);
@@ -58,6 +61,31 @@ if (cmd === "gen") {
     process.exit(0);
   }
   console.log(JSON.stringify(assessLicenseState(key), null, 2));
+} else if (cmd === "activate") {
+  // Write a license key into .tera/license.state.json and verify it (SCP-2026-08-30-002).
+  const key = args[1] || flag("--key");
+  if (!key) { usage(); process.exit(1); }
+  const email = args[2] || flag("--email") || process.env.TERA_LICENSE_EMAIL || null;
+  const target = path.resolve(process.env.TERA_TARGET_DIR || process.env.INIT_CWD || process.cwd());
+  const stateFile = path.join(target, ".tera", "license.state.json");
+  fs.mkdirSync(path.dirname(stateFile), { recursive: true });
+  const prev = readLicenseState(stateFile) || {};
+  const assessment = assessLicenseState(key);
+  const state = {
+    ...prev,
+    state: assessment.state,
+    reason: assessment.reason,
+    licenseKey: key,
+    accountEmail: email || prev.accountEmail || null,
+    deviceId: prev.deviceId || null,
+    activated: true,
+    expiresAt: assessment.expiresAt || null,
+    graceUntil: assessment.graceUntil || null,
+    checkedAt: new Date().toISOString(),
+  };
+  fs.writeFileSync(stateFile, JSON.stringify(state, null, 2));
+  console.log(`Activated: state=${assessment.state} (${assessment.reason}) — ${stateFile}`);
+  process.exit(assessment.state === "Active" || assessment.state === "Grace" ? 0 : 1);
 } else {
   usage();
 }