@yijiancaotang/cli 1.0.0 → 1.1.0

package/dist/local-records.js

@@ -0,0 +1,149 @@
+import { createHash } from "node:crypto";
+import { join, relative, resolve, sep, isAbsolute } from "node:path";
+import { asRecord, CliError } from "./errors.js";
+import { OwnedTree } from "./installation.js";
+import { isPlatformId } from "./local-types.js";
+import { bindSkillAgent, completeSkillInventory } from "./skill-assets.js";
+const unsafe = () => new CliError("local_record_unsafe", "本机连接说明或技能安装记录未通过核对。", "保留现有连接和文件，先由本人核对本机记录；不要重新批准、覆盖或删除。", 7);
+const digest = (value) => createHash("sha256").update(value).digest("hex");
+const keys = (value, expected) => Object.keys(value).sort().join(",") === [...expected].sort().join(",");
+const id = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,128}$/.test(value);
+const hash = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value);
+const label = (value) => typeof value === "string" && value.trim() === value && [...value].length >= 1 && [...value].length <= 80 && !/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u.test(value) && !/[^\S ]/u.test(value);
+const date = (value) => typeof value === "string" && /^\d{4}-\d\d-\d\dT/.test(value) && Number.isFinite(Date.parse(value));
+// These records contain no credentials. Immutable, content-addressed receipts
+// retain upgrade history; identical setup never rewrites or accumulates files.
+// They document installation, and never authorize overwriting a skill.
+export class LocalRecords {
+    agent;
+    environment;
+    origin;
+    tree;
+    connectionDirectory;
+    skillDirectory;
+    constructor(home, agent, environment, origin) {
+        this.agent = agent;
+        this.environment = environment;
+        this.origin = origin;
+        this.tree = new OwnedTree(home);
+        this.connectionDirectory = join(this.tree.home, ".caotang", "connection-info", environment, agent.fileKey);
+        this.skillDirectory = join(this.tree.home, ".caotang", "skill-receipts", agent.fileKey);
+    }
+    async read(path) {
+        try {
+            const bytes = await this.tree.read(path, 32768);
+            if (!bytes)
+                return null;
+            const value = asRecord(JSON.parse(bytes.toString("utf8")));
+            if (!value)
+                throw unsafe();
+            return value;
+        }
+        catch {
+            throw unsafe();
+        }
+    }
+    async connection(tokenId, secrets = []) {
+        if (!id(tokenId))
+            throw unsafe();
+        const record = await this.read(join(this.connectionDirectory, `${tokenId}.json`));
+        if (!record)
+            return null;
+        const connectionName = record.connection_name;
+        if (!keys(record, ["version", "environment", "origin", "agent_key", "token_id", "connection_name", "connected_at"])
+            || record.version !== 1 || record.environment !== this.environment || record.origin !== this.origin || record.agent_key !== this.agent.key || record.token_id !== tokenId
+            || !label(connectionName) || !date(record.connected_at) || secrets.some(secret => secret.length >= 8 && connectionName.includes(secret)))
+            throw unsafe();
+        return { connection_name: connectionName, connection_name_source: "local_authorization_record", connected_at: record.connected_at, connection_time_source: "device_authorization" };
+    }
+    async rememberConnection(tokenId, info, secrets = []) {
+        if (!id(tokenId) || info.connection_name_source !== "local_authorization_record" || !label(info.connection_name) || !date(info.connected_at)
+            || secrets.some(secret => secret.length >= 8 && info.connection_name.includes(secret)))
+            throw unsafe();
+        const record = { version: 1, environment: this.environment, origin: this.origin, agent_key: this.agent.key, token_id: tokenId, connection_name: info.connection_name, connected_at: info.connected_at };
+        try {
+            await this.tree.writeNew(join(this.connectionDirectory, `${tokenId}.json`), Buffer.from(JSON.stringify(record)), 0o600);
+        }
+        catch {
+            throw unsafe();
+        }
+    }
+    targetPath(path) {
+        if (typeof path !== "string" || !path || isAbsolute(path) || /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u.test(path))
+            throw unsafe();
+        const absolute = this.tree.within(join(this.tree.home, path));
+        if (absolute === this.tree.home || relative(this.tree.home, absolute) !== path || path.split(sep).includes(".."))
+            throw unsafe();
+        return absolute;
+    }
+    async targets() {
+        let names;
+        try {
+            names = await this.tree.list(this.skillDirectory);
+        }
+        catch {
+            throw unsafe();
+        }
+        if (!names)
+            return [];
+        if (names.length > 256)
+            throw unsafe();
+        const targets = new Map();
+        for (const name of names) {
+            if (!/^[a-z-]+\.[a-f0-9]{64}\.json$/.test(name))
+                throw unsafe();
+            const value = await this.read(join(this.skillDirectory, name));
+            if (!value || !keys(value, ["version", "agent_key", "platform", "skill_directory", "bundle_sha", "skills"]) || value.version !== 1 || value.agent_key !== this.agent.key
+                || typeof value.platform !== "string" || !isPlatformId(value.platform) || !hash(value.bundle_sha) || !Array.isArray(value.skills)
+                || !value.skills.every(item => { const entry = asRecord(item); return entry && keys(entry, ["name", "sha256"]) && typeof entry.name === "string" && hash(entry.sha256); })
+                || !completeSkillInventory(value.skills.map(item => item.name)) || name !== `${value.platform}.${digest(JSON.stringify(value))}.json`)
+                throw unsafe();
+            const skillDirectory = this.targetPath(value.skill_directory);
+            try {
+                await this.tree.list(skillDirectory);
+            }
+            catch {
+                throw unsafe();
+            }
+            // A retained receipt cannot make a removed directory appear installed.
+            // Keep the target so the ordinary inspector reports its missing skills.
+            const target = { id: value.platform, skillDirectory, detected: true, evidence: "skills" };
+            const previous = targets.get(target.id);
+            if (previous && previous.skillDirectory !== target.skillDirectory)
+                throw unsafe();
+            targets.set(target.id, target);
+        }
+        return [...targets.values()];
+    }
+    async rememberInstallation(targets, assets, bundleSha) {
+        if (!hash(bundleSha) || !completeSkillInventory(assets.map(asset => asset.name)))
+            throw unsafe();
+        for (const target of targets) {
+            const bound = assets.map(asset => bindSkillAgent(asset, this.agent.key));
+            if (!await verifiedSkillFiles(this.tree.home, target, bound))
+                throw unsafe();
+            const record = { version: 1, agent_key: this.agent.key, platform: target.id, skill_directory: relative(this.tree.home, resolve(target.skillDirectory)), bundle_sha: bundleSha, skills: bound.map(({ name, sha256 }) => ({ name, sha256 })) };
+            this.targetPath(record.skill_directory);
+            try {
+                await this.tree.writeNew(join(this.skillDirectory, `${target.id}.${digest(JSON.stringify(record))}.json`), Buffer.from(JSON.stringify(record)), 0o600);
+            }
+            catch {
+                throw unsafe();
+            }
+        }
+    }
+}
+export async function verifiedSkillFiles(home, target, assets) {
+    const tree = new OwnedTree(home);
+    if (!completeSkillInventory(assets.map(asset => asset.name)))
+        return false;
+    for (const asset of assets) {
+        const directory = join(target.skillDirectory, asset.name), entries = await tree.list(directory);
+        if (!entries || entries.length !== 1 || entries[0] !== "SKILL.md")
+            return false;
+        const bytes = await tree.read(join(directory, "SKILL.md"), 65536);
+        if (!bytes || digest(bytes) !== asset.sha256)
+            return false;
+    }
+    return true;
+}

package/dist/managed-skill-baseline.js

@@ -0,0 +1,35 @@
+// Public CLI 1.0.0 skill templates from reviewed commit 74530387. These pins
+// authorize only exact per-AI rendering after the complete old bundle verifies;
+// installation receipts, directory names and same-name files are never proof.
+export const LEGACY_MANAGED_SKILLS = [
+    {
+        "name": "caotang-context",
+        "description": "每个新对话第一件工作前，即使未提草堂也主动短读一次；闲聊和纯问答不读，接入同意门优先。",
+        "sha256": "e698b74c7fc0e81ae5155a842e5bcc026c0383cb528dac66ef4ee869703e89b1"
+    },
+    {
+        "name": "caotang-save-knowledge",
+        "description": "仅在要写入一间草堂私有知识、来源或长势时加载；确认内容再写，公开须本人网页确认。",
+        "sha256": "5c10105f96691697d7640e0c1e7a9ad5e8b79250dadc0c8d126e5538609391eb"
+    },
+    {
+        "name": "caotang-project-progress",
+        "description": "用户要记录一间草堂项目进展时，确认后保存私有进展，并按需局部更新认知摘要或阶段；项目公开须申请并由本人网页确认。",
+        "sha256": "bbece00f3f69fddb8ef57c12a4d84576238c962ae1526367cecdc102ac0cf409"
+    },
+    {
+        "name": "caotang-search",
+        "description": "用户询问一间草堂以前记录的项目、进展或知识时，先按词或时间检索，需要全文才读详情，并说明实际查询范围和权限缺口。",
+        "sha256": "d1feb8c82f841a0baa3fc4e70085d5eb90d0d7e35fdb08d3e3d0fd0d3bae967a"
+    },
+    {
+        "name": "caotang-workday",
+        "description": "仅在完成重要工作或收工时，整理一间草堂进展和下一步，先确认再保存；不承担开工。",
+        "sha256": "e6673787c66472fb58799b75da85894594da7c7da9a3b110d250a1166b1a358f"
+    },
+    {
+        "name": "caotang-first-connect",
+        "description": "一间草堂接入对话按入口首次安装和账号状态分流：有内容或未知先问一次再读，空账号只拟私有条目，同意才写；重复接入不问不读。",
+        "sha256": "47202fb64c5a9cd06ad06740be7f1ba1734400439bbb125c3138a0239b1bbd53"
+    }
+];

package/dist/missing-sections.js

@@ -4,6 +4,7 @@ const knownSections = {
     daily_knowledge: { capability: "read_knowledge", label: "日汇总中的知识新增与长势" },
     search_projects: { capability: "read_projects", label: "搜索中的项目与进展" },
     search_knowledge: { capability: "read_knowledge", label: "搜索中的知识" },
+    search_schedule_items: { capability: "read_workbench", label: "搜索中的待办" },
     workbench: { capability: "read_workbench", label: "工作台" },
     briefing: { capability: "read_notifications", label: "简报" },
     knowledge: { capability: "read_knowledge", label: "知识内容" },

package/dist/output.js

@@ -3,6 +3,7 @@ import { formatMissingSections } from "./missing-sections.js";
 import { projectedWriteCompleted } from "./write-permissions.js";
 import { formatSearchWarnings } from "./query-search.js";
 import { formatDailyNotice } from "./query-daily.js";
+import { calendarStartNotice } from "./habit-wire.js";
 import { createDraftNotice } from "./create-bundle.js";
 const sensitiveKey = /^(token|access_token|token_value|token_hash|device_code|upload_nonce|upload_url|required_headers|authorization|cookie|set-cookie|x-opc-upload-token)$/i;
 export function redact(value, secrets, depth = 0) {
@@ -32,8 +33,9 @@ export function renderResult(result, human, secrets) {
     const warningNotice = human ? formatSearchWarnings(asRecord(data)?.data) : "";
     const dailyNotice = human ? formatDailyNotice(asRecord(data)?.data) : "";
     const draftNotice = human && [200, 201].includes(result.status) ? createDraftNotice(asRecord(data)?.data) : "";
+    const startNotice = human ? calendarStartNotice(asRecord(data)?.data) : "";
     const replayNotice = human && [200, 201].includes(result.status) && body?.idempotency_replayed === true ? "这是已有创建请求的回放结果，本次没有重新创建。\n" : "";
-    return `${pendingNotice}${replayNotice}${writeNotice}${missing}${warningNotice}${dailyNotice}${draftNotice}${JSON.stringify(data, null, human ? 2 : undefined)}\n`;
+    return `${pendingNotice}${replayNotice}${writeNotice}${startNotice ? startNotice + "\n" : ""}${missing}${warningNotice}${dailyNotice}${draftNotice}${JSON.stringify(data, null, human ? 2 : undefined)}\n`;
 }
 // Only coherent transport/receipt evidence classifies the submitted write;
 // neither a drafted audit log nor a moderation-pending 202 means unknown.

package/dist/platforms.js

@@ -2,6 +2,7 @@ import { constants } from "node:fs";
 import { access, lstat, readdir, realpath, stat } from "node:fs/promises";
 import { delimiter, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { asRecord, CliError } from "./errors.js";
+import { PLATFORM_IDS, platformSupported } from "./local-types.js";
 const unsafe = () => new CliError("platform_path_unsafe", "平台目录未通过安全检查。", "请使用用户目录内的绝对路径，并检查目录和符号链接；不要提供目录中的配置内容。");
 const metadataError = (error) => {
     const code = asRecord(error)?.code;
@@ -87,6 +88,52 @@ async function skillDirectory(home, canonicalHome, root) {
     }
     return target;
 }
+function configuredSkillRoot(home, env, id) {
+    switch (id) {
+        case "claude-code": return env.CLAUDE_CONFIG_DIR ?? join(home, ".claude");
+        case "codex": return join(home, ".agents");
+        case "openclaw": return env.OPENCLAW_STATE_DIR ?? (env.OPENCLAW_HOME === undefined ? join(home, ".openclaw") : (() => {
+            if (!absolute(env.OPENCLAW_HOME) || !within(home, resolve(env.OPENCLAW_HOME)))
+                throw unsafe();
+            return join(env.OPENCLAW_HOME, ".openclaw");
+        })());
+        case "kimi-code": return env.KIMI_CODE_HOME ?? join(home, ".kimi-code");
+        case "kimi-work": return join(home, "Library/Application Support/kimi-desktop/daimon-share/daimon");
+        case "workbuddy": return join(home, ".workbuddy");
+    }
+}
+// Bounded skill-location discovery only. No PATH, application bundle, client
+// executable, configuration contents or arbitrary HOME traversal is involved.
+export async function knownSkillTargets(options) {
+    if (!absolute(options.homeDir))
+        throw unsafe();
+    const home = resolve(options.homeDir);
+    let canonicalHome;
+    try {
+        canonicalHome = await realpath(home);
+        if (!(await stat(home)).isDirectory())
+            throw unsafe();
+    }
+    catch (error) {
+        if (error instanceof CliError)
+            throw error;
+        throw metadataError(error);
+    }
+    const targets = [];
+    for (const id of PLATFORM_IDS)
+        if (platformSupported(id, options.operatingSystem)) {
+            try {
+                targets.push({ id, detected: false, evidence: "none", skillDirectory: await skillDirectory(home, canonicalHome, configuredSkillRoot(home, options.env, id)) });
+            }
+            catch (error) {
+                // Only optional, bounded discovery isolates a candidate. Explicit or
+                // recorded targets are checked by their original strict path instead.
+                if (!options.skipInvalidCandidates)
+                    throw error;
+            }
+        }
+    return targets;
+}
 async function claudeDesktop(home) {
     const root = join(home, "Library", "Application Support", "Claude", "claude-code");
     for (const version of await directories(root)) {
@@ -122,15 +169,7 @@ export async function detectPlatforms(options) {
         throw unsafe();
     const selected = (id) => options.platformIds === undefined || options.platformIds.includes(id);
     const targets = [];
-    const candidates = [
-        { id: "claude-code", root: () => env.CLAUDE_CONFIG_DIR ?? join(home, ".claude") },
-        { id: "codex", root: () => join(home, ".agents") },
-        { id: "openclaw", root: () => env.OPENCLAW_STATE_DIR ?? (env.OPENCLAW_HOME === undefined ? join(home, ".openclaw") : (() => {
-                if (!absolute(env.OPENCLAW_HOME) || !within(home, resolve(env.OPENCLAW_HOME)))
-                    throw unsafe();
-                return join(env.OPENCLAW_HOME, ".openclaw");
-            })()) },
-    ];
+    const candidates = ["claude-code", "codex", "openclaw"].map(id => ({ id, root: () => configuredSkillRoot(home, env, id) }));
     for (const candidate of candidates) {
         if (selected(candidate.id))
             targets.push({ id: candidate.id, detected: false, evidence: "none", skillDirectory: await skillDirectory(home, canonicalHome, candidate.root()) });
@@ -167,9 +206,9 @@ export async function detectPlatforms(options) {
         // Do not inspect an unselected new platform's personal paths. Without a
         // selector, only a verified program makes its skill root relevant.
         for (const [id, app, binary, rootPath, command] of [
-            ["kimi-code", "Kimi Code", "Kimi Code", env.KIMI_CODE_HOME ?? join(home, ".kimi-code"), "kimi"],
-            ["kimi-work", "Kimi", "Kimi", join(home, "Library/Application Support/kimi-desktop/daimon-share/daimon"), null],
-            ["workbuddy", "WorkBuddy", "Electron", join(home, ".workbuddy"), null],
+            ["kimi-code", "Kimi Code", "Kimi Code", configuredSkillRoot(home, env, "kimi-code"), "kimi"],
+            ["kimi-work", "Kimi", "Kimi", configuredSkillRoot(home, env, "kimi-work"), null],
+            ["workbuddy", "WorkBuddy", "Electron", configuredSkillRoot(home, env, "workbuddy"), null],
         ]) {
             if (!selected(id))
                 continue;

package/dist/query-search.js

@@ -30,10 +30,11 @@ export function expectSearchOK(result) {
     }
     const body = asRecord(result.body), code = body?.code ?? body?.error;
     if (result.status === 403 && code === "capability_disabled" && (body?.code === undefined || body.code === code) && (body?.error === undefined || body.error === code)) {
-        const expected = [{ section: "search_projects", required_capability: "read_projects", reason: "capability_disabled" }, { section: "search_knowledge", required_capability: "read_knowledge", reason: "capability_disabled" }];
         const rows = Array.isArray(body?.missing_sections) ? body.missing_sections : [];
+        const schedule = rows.some(row => { const item = asRecord(row); return item?.section === "search_schedule_items" || item?.required_capability === "read_workbench"; });
+        const expected = [{ section: "search_projects", required_capability: "read_projects", reason: "capability_disabled" }, { section: "search_knowledge", required_capability: "read_knowledge", reason: "capability_disabled" }, ...(schedule ? [{ section: "search_schedule_items", required_capability: "read_workbench", reason: "capability_disabled" }] : [])];
         if (!Object.hasOwn(body, "required_capability") && expected.every(want => rows.some(row => { const item = asRecord(row); return item?.section === want.section && item.required_capability === want.required_capability && item.reason === want.reason; }))) {
-            throw new CliError("capability_disabled", "“读取项目”和“读取知识”开关都未开启。", "请本人到网页的 Agent 管理核对并开启所需开关；不要重新授权、换入口或重试来绕过限制。", 4, { http_status: 403, missing_sections: expected });
+            throw new CliError("capability_disabled", schedule ? "“读取项目”、“读取知识”和“读取工作台”开关都未开启。" : "“读取项目”和“读取知识”开关都未开启。", "请本人到网页的 Agent 管理核对并开启所需开关；不要重新授权、换入口或重试来绕过限制。", 4, { http_status: 403, missing_sections: expected });
         }
     }
     const checked = expectQueryOK(result);