@tera-system/pro 0.2.2 → 0.2.11

package/LICENSE.md

@@ -4,7 +4,7 @@
 
 ## النموذج: كود مفتوح + ترخيص مدفوع
 
-هذا الحزمة (`@tera-system/core`) مفتوحة المصدر لكنها **خاضعة لترخيص تجاري**.
+منظومة Tera (`@tera-system/pro`) نظام تجاري مرخّص — كود مفتوح المصدر لكنه **خاضع لترخيص تجاري**.
 
 ### ماذا يعني ذلك عملياً:
 

package/MANIFEST.json

@@ -1,6 +1,6 @@
 {
   "name": "@tera-system/pro",
-  "version": "0.2.2",
+  "version": "0.2.11",
   "description": "Build manifest for the Tera System Pro commercial plugin component (THIN mode — content served from teranoo.com signed bundle).",
   "compatibleEnvironments": [
     "opencode"
@@ -11,10 +11,11 @@
     "agents": 20,
     "commands": 11,
     "coreFiles": 112,
-    "tools": 7,
-    "projectControlTemplates": 1
+    "tools": 8,
+    "projectControlTemplates": 1,
+    "assets": 49
   },
-  "bundleRef": "core-bundle-v0.1.4.signed.json (SHA256 4C87BAB833AEC0ACE184A790819B51D58427C51F29124CE2B02DA3AAE98C3F13)",
+  "bundleRef": "core-bundle-v0.2.11.signed.json (SHA256 B05E0A99811958BE44DFB162812366723D3080145122A3C3E0C345E37E2E51B2)",
   "builtAt": "2026-08-28",
   "sha256": {
     "agents": "9769b3acc15e44e8ae56e4d585f7b965f6c30eafceea509edd0dfe3ce1d83270",

package/README.md

@@ -20,7 +20,7 @@ npm install @tera-system/pro
 > ```
 > أو مباشرة بدون موافقة:
 > ```bash
-> npx tera-restore
+> npx tera-pro-restore
 > # أو
 > node node_modules/@tera-system/pro/scripts/install.js
 > ```
@@ -54,21 +54,21 @@ npm run tera-sync
 | ط§ظ„ظ†ظˆط§ط© ط§ظ„ط­ظˆظƒظ…ظٹط© (110 ظ…ظ„ظپط§ظ‹) | `tera-system/` |
 | ظ‡ظٹظƒظ„ `project-control/` (ظ‚ظˆط§ظ„ط¨) | `project-control/` *(ظپظ‚ط· ط¥ظ† ظ„ظ… ظٹظˆط¬ط¯ — ط­ط§ظ„ط© ط®ط§طµط© ط¨ظƒظ„ ط¹ظ…ظٹظ„)* |
 | ط£ط¯ظˆط§طھ ط§ظ„طھظˆط²ظٹط¹ (7 ط³ظƒط±ط¨طھط§طھ) | `tools/` |
-| ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© | `.opencode/tera-core.manifest.json` |
+| ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© | `.opencode/tera.manifest.json` |
 
 ## ط³ظ„ظˆظƒ ط§ظ„ظ…ط«ط¨ظ‘طھ (ط؛ظٹط± ظ…ط¯ظ…ط± + ظˆط§ط¹ظچ ط¨ط§ظ„ظ…ظ„ظƒظٹط©)
 
 - **ظ„ط§ ظٹط­ط°ظپ ط£ظٹ ط´ظٹط، ط£ط¨ط¯ط§ظ‹.**
 - **ظ„ط§ ظٹظƒطھط¨ ظپظˆظ‚ ط£ظٹ ظ…ظ„ظپ ط؛ظٹط± ظ…ظ…ظ„ظˆظƒ ظ„ظ‡:** ط£ظٹ ظ…ظ„ظپ ظ…ظˆط¬ظˆط¯ ط¨ط§ط³ظ… ظٹطھط¹ط§ط±ط¶ ظ…ط¹ ط­ط²ظ…ط© `@tera-system/pro` (ظˆظ„ظ… طھط«ط¨ظ‘طھظ‡ ط§ظ„ط­ط²ظ…ط© ط³ط§ط¨ظ‚ط§ظ‹) ظٹظڈطھط±ظƒ ظƒظ…ط§ ظ‡ظˆ ظˆظٹظڈط³ط¬ظژظ‘ظ„ ظƒظ€ `CONFLICT` ظپظٹ طھظ‚ط±ظٹط± ط§ظ„طھط±ظƒظٹط¨.
-- **ظٹظپط±ظ‘ظ‚ ط¨ظٹظ† ظ…ظ„ظپط§طھظ‡ ظˆظ…ظ„ظپط§طھ ط§ظ„ظ…ط³طھط®ط¯ظ…** ط¹ط¨ط± ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© `.opencode/tera-core.manifest.json`.
+- **ظٹظپط±ظ‘ظ‚ ط¨ظٹظ† ظ…ظ„ظپط§طھظ‡ ظˆظ…ظ„ظپط§طھ ط§ظ„ظ…ط³طھط®ط¯ظ…** ط¹ط¨ط± ط³ط¬ظ„ ط§ظ„ظ…ظ„ظƒظٹط© `.opencode/tera.manifest.json`.
 - **ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…ظ…ظ„ظˆظƒط© ظ„ظ„ط­ط²ظ…ط© ظپظ‚ط·** طھظڈط­ط¯ظژظ‘ط« ط¹ظ†ط¯ ط§ط®طھظ„ط§ظپظ‡ط§طŒ ظ…ط¹ **ظ†ط³ط®ط© ط§ط­طھظٹط§ط·ظٹط©** (`*.tera-bak-<ts>`) ظ‚ط¨ظ„ ط£ظٹ طھط­ط¯ظٹط«.
 - **ط¥ط¹ط§ط¯ط© ط§ظ„طھط´ط؛ظٹظ„ ط¢ظ…ظ†ط© (idempotent):** ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…طھط·ط§ط¨ظ‚ط© طھظڈطھط®ط·ظ‘ظ‰.
 - `opencode.json` ط§ظ„ظ…ظˆط¬ظˆط¯ ظ„ط¯ظ‰ ط§ظ„ظ…ط³طھط®ط¯ظ… **ظ„ط§ ظٹظڈظ„ظ…ط³ ط£ط¨ط¯ط§ظ‹** — طھظڈظˆط¶ط¹ ظ†ط³ط®ط© ظ…ط±ط¬ط¹ظٹط© ظپظ‚ط· ظˆطھط¸ظ‡ط± ط§ظ„طھط¹ظ„ظٹظ…ط§طھ ظپظٹ ط§ظ„طھظ‚ط±ظٹط±.
 
 ## ط¥ظ„ط؛ط§ط، ط§ظ„طھط«ط¨ظٹطھ (ظٹط¯ظˆظٹ — ط؛ظٹط± ظ…ط¯ظ…ط±)
 
-1. ط§ط­ط°ظپ ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…ط³ط¬ظ‘ظ„ط© ظپظٹ `.opencode/tera-core.manifest.json` (`files`).
-2. ط§ط­ط°ظپ `.opencode/tera-core.manifest.json` ظ†ظپط³ظ‡.
+1. ط§ط­ط°ظپ ط§ظ„ظ…ظ„ظپط§طھ ط§ظ„ظ…ط³ط¬ظ‘ظ„ط© ظپظٹ `.opencode/tera.manifest.json` (`files`).
+2. ط§ط­ط°ظپ `.opencode/tera.manifest.json` ظ†ظپط³ظ‡.
 3. ط§ط­طھظپط¸ ط¨ط£ظٹ `*.tera-bak-*` ط£ظˆ ظ…ظ„ظپط§طھظƒ ط§ظ„ط´ط®طµظٹط© ظƒظ…ط§ ظ‡ظٹ.
 
 ## ط§ظ„طھط­ظ‚ظ‚ ظ…ظ† ط§ظ„ظ†ط²ط§ظ‡ط©

package/RELEASES.md

@@ -4,17 +4,44 @@
 
 ---
 
+
+
+## 0.2.11 (2026-08-30)
+
+### Security hardening: license-gate message fix + zero core traces
+
+**What changed:**
+- Runtime license-gate tamper message now points to @tera-system/pro (was @tera-system/core)
+- Removed ALL references to any internal package from user-visible files (LICENSE, README, WELCOME, RELEASES)
+- Manifest renamed .opencode/tera-core.manifest.json -> .opencode/tera.manifest.json (auto-migrated on install)
+- Bundle type renamed tera-core-bundle -> tera-bundle (signed, verified)
+
+**Why:**
+- Commercial isolation: the licensed product is @tera-system/pro; no trace of other packages remains for clients
+
+## 0.2.10 (2026-08-29)
+
+### First-sale readiness: full content sync with core 0.2.10 + license gates
+
+**What changed:**
+- Synced all content from core 0.2.10: 20 agents, 11 commands, tera-system (112 files), tools (8), opencode.tera.example.json (structurizr enabled)
+- License gates preserved/re-injected: every agent has its LICENSE GATE section, every command its license-gate line (verified 1-per-file)
+- Bundle rebuilt with production key (core-bundle-v0.2.10.signed.json) - 200 files incl. assets (pricing calculator v4.3, 35 client templates, structurizr-mcp, architecture) - binary-safe
+
+**Why:**
+- First commercial sale prep - client must receive the current system (source ownership SCP-004, calculator v4.3, 5-tool standard SCP-012, voucher templates, etc.)
+
 ## 0.2.2 (2026-08-28)
 
 ### حل الاستعادة عند الحذف بالخطأ + توافق npm 11
 
 **ما تغيّر:**
-- إضافة `bin` جديد: `tera-restore` و `tera-pro-restore` — نفس حل core لكن للحزمة التجارية
+- إضافة `bin` جديد: `tera-restore` و `tera-pro-restore` — أمرا استعادة للحزمة التجارية
 - توثيق `npm approve-scripts @tera-system/pro` كحل لأمان npm 11
 - قسم "الاستعادة عند الحذف بالخطأ" في README
 
 **لماذا هذا التحديث:**
-- نفس مشكلة core — حذف `.opencode/agents` بالخطأ كان يحتاج أمراً صريحاً لا يعتمد على `postinstall`
+- حذف `.opencode/agents` بالخطأ كان يحتاج أمراً صريحاً لا يعتمد على `postinstall`
 
 ---
 

package/WELCOME.md

@@ -33,7 +33,7 @@
 ## هل حذفت ملفات بالخطأ؟
 إذا اختفت ملفات `.opencode/agents/` بعد `npm install` ولم تظهر، شغّل:
 ```bash
-npx tera-restore
+npx tera-pro-restore
 ```
 ثم أعد فتح OpenCode.
 

package/opencode.tera.example.json

@@ -20,9 +20,9 @@
         "structurizr-mcp",
         "structurizr-mcp"
       ],
-      "enabled": false,
-      "env": {
-        "STRUCTURIZR_WORKSPACE_DIR": "../architecture",
+      "enabled": true,
+      "environment": {
+        "STRUCTURIZR_WORKSPACE_DIR": "architecture",
         "STRUCTURIZR_URL": "http://localhost:8081"
       }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tera-system/pro",
-  "version": "0.2.2",
+  "version": "0.2.11",
   "description": "Tera System Pro — commercial edition (thin): system files are fetched from teranoo.com as a signed bundle; enforced license gate + heartbeat",
   "license": "SEE LICENSE IN LICENSE.md",
   "type": "module",

package/scripts/build-bundle.mjs

@@ -1,12 +1,16 @@
 #!/usr/bin/env node
 /**
- * @tera-system/pro — Signed Core Bundle Builder
+ * @tera-system/pro — Signed Core Bundle Builder (SCP-2026-08-29-013)
  * --------------------------------------------------------------
  * Generates a signed bundle of all core content (agents, commands,
- * tera-system, tools) that the remote server will host as a static
+ * tera-system, tools, assets) that the remote server hosts as a static
  * artifact. The installer/sync module downloads it, verifies the
  * Ed25519 signature, validates hashes, and applies files.
  *
+ * Binary-safe: every file is read as raw bytes and embedded as
+ * base64url — the pricing calculator (.xlsx) and images survive
+ * byte-for-byte.
+ *
  * Usage:
  *   node scripts/build-bundle.mjs [--out artifacts/core-bundle.json]
  *
@@ -52,26 +56,29 @@ function loadPrivateKey() {
   throw new Error("Private key not found. Set TERA_PRIVATE_KEY_PATH.");
 }
 
+// Bundle groups. `assets` is binary-safe and installs to the repo root
+// (project-control/, tera-workshop/, structurizr-mcp/, architecture/).
 const groups = [
   { name: "agents", relDir: "agents" },
   { name: "commands", relDir: "commands" },
   { name: "tera-system", relDir: "core/tera-system" },
   { name: "tools", relDir: "tools" },
+  { name: "assets", relDir: "assets" },
 ];
 
-// Collect all bundle files
+// Collect all bundle files — keep raw Buffer (binary-safe)
 const files = [];
 for (const g of groups) {
   const srcDir = path.join(ROOT, g.relDir);
   for (const f of walkFiles(srcDir)) {
-    files.push({ path: `${g.name}/${f.rel}`, content: fs.readFileSync(f.abs, "utf8") });
+    files.push({ path: `${g.name}/${f.rel}`, buf: fs.readFileSync(f.abs) });
   }
 }
 
-// Build manifest of hashes
+// Build manifest of hashes (over raw bytes)
 const manifest = {};
 for (const f of files) {
-  manifest[f.path] = createHash("sha256").update(f.content).digest("hex");
+  manifest[f.path] = createHash("sha256").update(f.buf).digest("hex");
 }
 
 // Canonical payload to sign: sorted manifest lines
@@ -85,13 +92,13 @@ const privateKey = loadPrivateKey();
 const signature = crypto.sign(null, Buffer.from(canonicalHash), privateKey).toString("base64url");
 
 const bundle = {
-  type: "tera-core-bundle",
+  type: "tera-bundle",
   schema: 1,
   packageName: pkg.name,
   packageVersion: pkg.version,
   createdAt: new Date().toISOString(),
   contentSha256: canonicalHash,
-  files: files.map((f) => ({ path: f.path, data: Buffer.from(f.content, "utf8").toString("base64url") })),
+  files: files.map((f) => ({ path: f.path, data: f.buf.toString("base64url") })),
   manifest,
   signature,
 };
@@ -115,4 +122,4 @@ console.log(`  contentSha256 : ${canonicalHash}`);
 console.log(`  signature     : ${signature.slice(0, 40)}...`);
 console.log(`  full          : ${outPath}`);
 console.log(`  compact       : ${compactPath}`);
-console.log(`  size(full)    : ${(fs.statSync(outPath).size / 1024).toFixed(1)} KB`);
+console.log(`  size(full)    : ${(fs.statSync(outPath).size / 1024).toFixed(1)} KB`);

package/scripts/install.js

@@ -8,7 +8,7 @@
  * Rules:
  *  - Never deletes anything.
  *  - Never overwrites a file it does not own.
- *  - Tracks ownership via `.opencode/tera-core.manifest.json`.
+ *  - Tracks ownership via `.opencode/tera.manifest.json`.
  *  - Only updates files it owns, always keeping a backup first.
  *  - Idempotent: re-running is safe; identical files are skipped.
  *  - Never touches an existing user `opencode.json`.
@@ -30,7 +30,8 @@ import { verifyBundle, applyBundle } from "./lib/bundle.mjs";
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const PKG_ROOT = path.resolve(__dirname, "..");
-const MANIFEST_NAME = "tera-core.manifest.json";
+const MANIFEST_NAME = "tera.manifest.json";
+const LEGACY_MANIFEST_NAME = "tera-core.manifest.json";
 const CONFIG_EXAMPLE = "opencode.tera.example.json";
 
 /** Generate a stable device id from hostname + target path. */
@@ -78,7 +79,19 @@ function copyFile(src, dest) {
 
 function loadOwnership(target) {
   const p = path.join(target, ".opencode", MANIFEST_NAME);
-  if (!fs.existsSync(p)) return { files: {} };
+  if (!fs.existsSync(p)) {
+    // Legacy name (pre-0.2.11) — migrate silently
+    const legacy = path.join(target, ".opencode", LEGACY_MANIFEST_NAME);
+    if (fs.existsSync(legacy)) {
+      try {
+        const parsed = JSON.parse(fs.readFileSync(legacy, "utf8"));
+        return { files: parsed.files && typeof parsed.files === "object" ? parsed.files : {} };
+      } catch {
+        return { files: {} };
+      }
+    }
+    return { files: {} };
+  }
   try {
     const parsed = JSON.parse(fs.readFileSync(p, "utf8"));
     return { files: parsed.files && typeof parsed.files === "object" ? parsed.files : {} };
@@ -197,7 +210,7 @@ function installProjectControl() {
 
 /* ----------------------------------- run ----------------------------------- */
 
-console.log(`\n@tera/core v${pkg.version} — install`);
+console.log(`\nTera System Pro v${pkg.version} — install`);
 console.log(`  target workspace : ${target}\n`);
 
 installGroup({ name: "agents", src: path.join(PKG_ROOT, "agents"), dest: path.join(target, ".opencode", "agents") });
@@ -231,6 +244,15 @@ const manifestPath = path.join(target, ".opencode", MANIFEST_NAME);
 fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
 fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
 
+// Migrate away from the legacy manifest name (pre-0.2.11) — removes any "core" trace
+const legacyManifestPath = path.join(target, ".opencode", LEGACY_MANIFEST_NAME);
+if (fs.existsSync(legacyManifestPath)) {
+  try {
+    fs.unlinkSync(legacyManifestPath);
+    console.log(`  [manifest] migrated: ${LEGACY_MANIFEST_NAME} → ${MANIFEST_NAME}`);
+  } catch { /* non-destructive best-effort */ }
+}
+
 /* ------------------- license state (non-blocking, never breaks install) ------------------- */
 
 /**

package/scripts/lib/bundle.mjs

@@ -18,7 +18,7 @@ export function loadPublicKey() {
  * Returns { ok, reason, manifest?, contentSha256? }
  */
 export function verifyBundle(bundle) {
-  if (!bundle || bundle.type !== "tera-core-bundle") {
+  if (!bundle || bundle.type !== "tera-bundle") {
     return { ok: false, reason: "not-a-bundle" };
   }
   if (typeof bundle.contentSha256 !== "string" || !bundle.signature) {
@@ -80,6 +80,7 @@ export function verifyBundle(bundle) {
  *   - .opencode/commands/
  *   - tera-system/
  *   - tools/
+ *   - project-control/, tera-workshop/, structurizr-mcp/, architecture/ (assets group)
  */
 export function applyBundle(bundle, target, { dryRun = false } = {}) {
   if (!Array.isArray(bundle.files)) return { applied: 0, errors: [] };
@@ -89,6 +90,7 @@ export function applyBundle(bundle, target, { dryRun = false } = {}) {
     commands: path.join(target, ".opencode", "commands"),
     "tera-system": path.join(target, "tera-system"),
     tools: path.join(target, "tools"),
+    assets: path.join(target, "."), // calculator, client templates, structurizr-mcp, architecture
   };
 
   let applied = 0;

package/scripts/lib/license-gate.mjs

@@ -169,7 +169,7 @@ export async function enforceLicenseGate(target, options = {}) {
       message:
         "❌ Tera System files have been tampered with.\n" +
         `Tampered files: ${criticalCheck.tampered.map((t) => t.file).join(", ")}\n\n` +
-        "Reinstall required: npm install @tera-system/core@latest",
+        "Reinstall required: npm install @tera-system/pro@latest (or npx tera-pro-restore)",
     };
   }