cli-blueprint 1.0.0 → 1.0.2

package/README.md

@@ -1,166 +1,37 @@
-# cli-blueprint
+# clitax-wvz6zmRWmX
 
-**多 skill 多 IDE 安装器** —— 一条命令从 cli.tax 拉取并分发到本机所有已装 IDE，可无限扩展。
+Install and run the Blueprint skill from [CLI.Tax](https://cli.tax/blueprint).
 
 ```bash
-npx cli-blueprint@latest install
-```
-
-默认包含：
-- `blueprint`（CLI.Tax 工程规划 skill，`https://cli.tax/wvz6zmRWmX`）
-- `calctool`（万能计算工具生成器，`https://cli.tax/KKyA6xljUX`）
-
-## 这是什么机制？
-
-clitaxio 的本质只是从 `https://cli.tax/api/public/skills/{code}` 下载两个文件
-（`SKILL.md` + `skill.json`）并写入 IDE 的 skills 目录。本包把这个过程**固化成一个可版本化、
-可分发、可扩展的本地插件包**，并打通了 cli.tax 生态：
-
-- **自动拉取**：`sources.json` 里配置 cli.tax skill 源（如 `wvz6zmRWmX`），
-  `node install.mjs pull` 或 install 时自动从 cli.tax 拉取最新内容到 `skills/`（可提交进 git）
-- **自动匹配分发**：每个 skill 是一个目录：`skills/<name>/SKILL.md`；安装器自动检测本机
-  真实安装的 IDE，把 skill 分发到各 IDE 自己的用户级根（如 Codex 扫 `~/.codex/skills`、
-  DSH 扫 `~/.dsh/skills`），各一份、互不干扰
-- 共享兼容根 `~/.agents/skills` 默认跳过——它会被多个工具扫描，是"同一 skill 重复出现"的根源
-
-**与 clitaxio 的区别**：clitaxio 只把 skill 装到**一个** IDE 目录；本包是"拉取 + 多 IDE 自动分发"，
-装一次，本机所有已装 IDE 都能用。
-
-## 安装 / 更新 / 卸载
-
-```bash
-# 本地运行（无需发布）
-node install.mjs pull            # 从 cli.tax（sources.json）拉取最新 skill 到 skills/，可 git 提交
-node install.mjs install         # 自动匹配：skills/ 为空时自动先 pull，再分发到本机已装 IDE
-node install.mjs install --all   # 装到所有已知 IDE（不管是否安装）
-node install.mjs install --ide codex --ide dsh   # 只装指定 IDE（可重复）
-node install.mjs install --skip cursor       # 自动匹配但跳过指定 IDE（可重复）
-node install.mjs install --pull  # 强制重新从 cli.tax 拉取后再安装
-node install.mjs install --project  # 额外装到当前项目的项目级根
-node install.mjs install --agents   # 额外装到共享 ~/.agents/skills（警告：可能被多工具重复发现）
-node install.mjs install --target /abs/path      # 只装到自定义目录
-node install.mjs update             # 幂等覆盖，等同 install
-node install.mjs list               # 列出包内 skills
-node install.mjs ides               # 查看已知 IDE 及本机检测结果（✓ = 本机已装）
-node install.mjs uninstall          # 从相同目标卸载本包安装的 skills
+npx clitaxio@latest install wvz6zmRWmX
 ```
 
-**自动匹配说明**：默认安装会探测本机真实安装的 IDE（`which` 命令 / 应用路径 / 配置文件），
-只装给已安装的 IDE，让每个 IDE 自己识别需要的 skill。用 `node install.mjs ides` 查看
-本机检测结果（✓ = 已安装）。
-
-## 支持的 IDE（全世界已知安装位置，官方文档核实）
-
-| IDE | 用户级根 | 项目级根 | 说明 |
-|---|---|---|---|
-| Codex CLI | `~/.codex/skills` | `.codex/skills` | 新官方约定 `~/.agents/skills`；此处用专属根避免共享冲突 |
-| DSH | `~/.dsh/skills` | `.dsh/skills` | skill-filesystem 自动扫描 |
-| Claude Code | `~/.claude/skills` | `.claude/skills` | 父目录向上扫描至 repo root |
-| Gemini CLI | `~/.gemini/skills` | `.gemini/skills` | 别名 `.agents/skills` 优先级更高 |
-| Google Antigravity | `~/.gemini/antigravity/skills` | `.agents/skills`（随 --agents） | workspace 级固定用 agents 标准 |
-| Cursor | `~/.cursor/skills` | `.cursor/skills` | 兼容加载 .claude/.codex/.agents/skills |
-| Cline | `~/.cline/skills` | `.cline/skills` | 全局优先于项目 |
-| Roo Code | `~/.roo/skills` | `.roo/skills` | 项目覆盖全局 |
-| Kilo Code | `~/.kilo/skills` | `.kilo/skills` | kilo.jsonc 可配 |
-| Windsurf | `~/.codeium/windsurf/skills` | `.windsurf/skills` | Cascade Skills |
-| VS Code / Copilot | `~/.copilot/skills` | `.github/skills` | 另兼容 .claude/skills |
-| Trae | `~/.trae-cn/skills`（国内版） | `.trae/skills` | 国际版用户级未确认 |
-| Qwen Code | `~/.qwen/skills` | `.qwen/skills` | 模型自动调用 |
-| OpenCode | `~/.config/opencode/skills` | `.opencode/skills` | 兼容 .claude/.agents |
-| Zed | `~/.agents/skills`（仅 --agents） | `.agents/skills`（仅 --agents） | 官方即用 agents 标准根 |
-| Amazon Q | 无 skills 机制 | 无 skills 机制 | 官方确认不支持 SKILL.md |
-
-> 跨工具互操作标准根 `~/.agents/skills`（agentskills.io）：Codex 新约定、Gemini、Zed、
-> OpenCode、Cursor、Antigravity、Kilo 等都支持，但会被**多个工具同时扫描**——同一 skill
-> 装进去会在各工具中重复出现。本安装器默认跳过它（`--agents` 显式开启并警告）。
->
-> 新增 IDE：在 `install.mjs` 的 `IDES` 数组加一行即可，其余逻辑自动生效。
-
-## 分发给别人
+Installs the Blueprint skill into the current IDE skills directory
+(`$CODEX_HOME/skills/blueprint`, falling back to `.codex/skills/blueprint`),
+so the IDE agent can discover the protocol and compile goals into
+implementation-ready engineering blueprints.
 
-### 方式 A：npm 一条命令（推荐，最简单）
-已发布到 npm（`cli-blueprint` / `cli-calctool` / `cli-swarm`），使用者只需：
 ```bash
-npx cli-blueprint@latest install     # 装 blueprint + calctool + swarm 三个 skill
-npx cli-calctool@latest install      # 同样内容（calctool 命名入口）
-npx cli-swarm@latest install         # 同样内容（swarm 命名入口）
+npx clitaxio@latest run wvz6zmRWmX
 ```
-自动完成：从 cli.tax 拉取 blueprint + calctool + swarm → 检测本机已装 IDE → 分发到每个 IDE。
-更新：同一命令（`@latest` 自动拉新版），且每次 install 会对比 cli.tax 最新版本并提示 ⤴。
-
-### 方式 B：Git 仓库
-```bash
-git clone https://github.com/88208555/Blueprint-clitax.git
-cd Blueprint-clitax
-node install.mjs install
-```
-更新：`git pull && node install.mjs update`（install/update 会对比已装版本与 cli.tax 最新版本并提示）。
-
-### 更新感知（自动升级 + check）
 
-**自动升级**：每次发布新版本到 npm / cli.tax 后，已安装用户只需重跑一次安装命令，
-安装器会自动对比本地已装版本与远端最新版本，**有新版本直接覆盖升级到最新**（无需先卸载）：
+Runs the skill handshake in the terminal: it prints the capability address,
+method, and example request so the IDE agent can read the installed SKILL.md
+and take the intake questions before calling.
 
-```bash
-npx cli-blueprint@latest install     # 自动拉取最新并覆盖升级（blueprint/calctool/swarm）
-node install.mjs install             # 源码方式同理
-```
-升级时输出 `⤴ 已更新 <skill> 旧版本 → 新版本`。
+The live endpoint is `https://cli.tax/wvz6zmRWmX` and speaks
+`blueprint.skill.request/1.0`.
 
-**静默自动更新（--silent / --yes）**：不想看到任何安装/升级输出，直接覆盖到最新：
-```bash
-npx cli-blueprint@latest install --silent   # 静默升级，无任何提示
-node install.mjs install --yes              # 源码方式静默升级
-```
+## Distribution
 
-**主动检查（check）**：不确定是否有新版本时，可随时主动检查（不写盘）：
-```bash
-node install.mjs check               # 遍历本机已装 IDE，对比 cli.tax 最新版本
-npx cli-blueprint@latest check       # 单包检查（calctool / swarm 同理）
-```
-
-安装器写入 `install-meta.json`（来源/版本/时间）到每个 skill 目录；SKILL.md 注入版本横幅，
-IDE 每次读取即可见当前版本与更新命令。
+No npm account is required. The installer tarball is hosted on the platform
+itself and mirrored to the object storage download folder `cli-downloads/`:
 
-### 方式 C：直接用 clitaxio（只装单个 IDE，作为对照）
 ```bash
-npx clitaxio@latest install wvz6zmRWmX
-```
-> ⚠️ 注意：clitaxio **只把 skill 装到默认的 Codex 目录**（单一 IDE），不会自动检测/分发到
-> 其他 IDE，也不处理 `~/.agents/skills` 共享根重复问题。需要多 IDE 分发请用方式 A/B。
-
-## 目录结构
-
-```
-cli-blueprint/
-├── install.mjs       # 安装器（Node ≥18，零依赖）：pull / install / uninstall / list / ides
-├── sources.json      # ★ cli.tax skill 源清单（code → 自动拉取），扩展就加一行
-├── package.json      # npm 包元数据（cli-blueprint）
-├── README.md
-└── skills/           # skill 内容（pull 生成，可提交 git 离线兜底）
-    └── blueprint/
-        ├── SKILL.md
-        └── skill.json
+pnpm pack:blueprint
 ```
 
-## 无限扩展（加新 skill 两种方式）
-
-**方式 A：从 cli.tax 拉取**（推荐）——`sources.json` 加一行：
-```json
-{ "cliTax": [
-  { "code": "wvz6zmRWmX", "slug": "blueprint", "endpoint": "https://cli.tax/api/public/skills/{code}" },
-  { "code": "你的新code", "slug": "新skill名", "endpoint": "https://cli.tax/api/public/skills/{code}" }
-] }
-```
-然后 `node install.mjs pull` → 自动下载到 skills/。
-
-**方式 B：本地手工写**——直接建 `skills/my-new-skill/SKILL.md`（frontmatter: `name` kebab-case + `description`）。
-
-两种方式后都只需 `node install.mjs update` 同步到本机所有已装 IDE。
-
-## 常见问题
-
-- **装完当前会话没立刻出现？** skill 目录在会话初始化时注入，新会话即可发现；文件系统 watcher 也会自动感知变更。
-- **Codex 里出现了 2 个同一个 skill？** 常见原因是同时存在 `~/.codex/skills/<name>` 和 `~/.agents/skills/<name>`（或 config.toml 注册条目）。本安装器默认不会装到 `~/.agents/skills`，避免此问题；如已发生，删除 `~/.agents/skills/<name>` 并清理 config.toml 中的 `[[skills.config]]` 条目即可。
-- **想改 skill 内容？** 直接改 `skills/<name>/SKILL.md` 再 `update`，幂等覆盖。
-- **命名要求？** 目录名即 skill 名，必须 kebab-case（如 `my-new-skill`）。
+`scripts/pack-blueprint-cli.mjs` packs this directory into
+`apps/web/public/cli-downloads/clitax-wvz6zmRWmX.tgz`; the production deploy
+uploads every file in that folder to the object storage bucket under the
+dedicated `cli-downloads/` key prefix.

package/cli.mjs

@@ -0,0 +1,226 @@
+#!/usr/bin/env node
+import { copyFile, mkdir, writeFile } from 'node:fs/promises'
+import { createInterface } from 'node:readline/promises'
+import { stdin, stdout } from 'node:process'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { existsSync, readFileSync } from 'node:fs'
+
+const ENDPOINT = 'https://cli.tax/wvz6zmRWmX'
+const SCHEMA_VERSION = 'blueprint.skill.request/1.0'
+const PACKAGE_SKILL_DIR = join(dirname(fileURLToPath(import.meta.url)), 'skill')
+const INSTALL_META = 'install-meta.json'
+const LATEST_ENDPOINT = 'https://cli.tax/api/public/skills/wvz6zmRWmX'
+
+const INTAKE_QUESTIONS = [
+  {
+    id: 'goal',
+    prompt: 'Describe the product or site goal in one paragraph: what must the user be able to do, and what must never happen.',
+    required: true,
+    example: 'A bubble-gum minigame that works offline for 60 seconds.',
+  },
+  {
+    id: 'scope',
+    prompt: "List the pages, regions, and actors that must be covered, or say 'the whole site'.",
+    required: false,
+    example: 'One game page plus a results summary.',
+  },
+  {
+    id: 'constraints',
+    prompt: 'State hard constraints: platforms, input methods, languages, offline or online, storage, and anything that is forbidden.',
+    required: false,
+    example: 'No account, no ads, no payments; keyboard and touch only.',
+  },
+  {
+    id: 'acceptance',
+    prompt: 'List the acceptance checks that prove the result works, including failure and boundary paths.',
+    required: true,
+    example: 'Timer, scoring, and results always match the active state; a lower score never overwrites the high score.',
+  },
+]
+
+function usage() {
+  return [
+    'clitax-wvz6zmRWmX — install and run the Blueprint skill from CLI.Tax',
+    '',
+    'Usage:',
+    '  npx <package-url> install [directory]',
+    '      Install the Blueprint skill for the current IDE (Codex skills directory by default).',
+    '      If an older version is already installed, it reports and upgrades it.',
+    '  npx <package-url> check [directory]',
+    '      Check whether the installed skill has a newer version on cli.tax.',
+    '  npx <package-url> run',
+    '      Run the skill handshake: discover capabilities, answer the intake questions,',
+    '      and save BLUEPRINT-REQUIREMENTS.json for the IDE agent.',
+    '',
+    `Endpoint: ${ENDPOINT}`,
+  ].join('\n')
+}
+
+/** 读取已安装目录的版本元数据 */
+function readMeta(dir) {
+  const p = join(dir, INSTALL_META)
+  if (!existsSync(p)) return null
+  try { return JSON.parse(readFileSync(p, 'utf8')) } catch { return null }
+}
+
+/** 查询 cli.tax 最新版本（GET /api/public/skills/{code}） */
+async function fetchLatestVersion() {
+  try {
+    const resp = await fetch(LATEST_ENDPOINT)
+    if (!resp.ok) return null
+    const data = await resp.json()
+    return { version: data.version ?? '', displayName: data.displayName ?? 'blueprint' }
+  } catch {
+    return null
+  }
+}
+
+async function postRequest(operation, requestId) {
+  const response = await fetch(ENDPOINT, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      input: {
+        schemaVersion: SCHEMA_VERSION,
+        requestId,
+        operation,
+        input: {},
+      },
+    }),
+  })
+  let payload
+  try {
+    payload = await response.json()
+  } catch {
+    throw new Error(`Blueprint ${operation} failed: the runtime host returned a non-JSON response (HTTP ${response.status}). Check that the CLI runtime is deployed on ${ENDPOINT}.`)
+  }
+  if (!response.ok || payload?.ok !== true) {
+    const message = payload?.error?.message ?? payload?.error ?? `HTTP ${response.status}`
+    throw new Error(`Blueprint ${operation} failed: ${message}`)
+  }
+  return payload
+}
+
+function installTarget(explicit) {
+  if (explicit) return resolve(explicit)
+  const codexHome = process.env.CODEX_HOME?.trim()
+  if (codexHome) return join(codexHome, 'skills', 'blueprint')
+  const projectCodex = join(process.cwd(), '.codex', 'skills', 'blueprint')
+  return projectCodex
+}
+
+async function install(explicit) {
+  const target = installTarget(explicit)
+  await mkdir(target, { recursive: true })
+  const previous = readMeta(target)
+  await copyFile(join(PACKAGE_SKILL_DIR, 'SKILL.md'), join(target, 'SKILL.md'))
+  await copyFile(join(PACKAGE_SKILL_DIR, 'skill.json'), join(target, 'skill.json'))
+  const localVersion = process.env.npm_package_version ?? ''
+  const latest = await fetchLatestVersion()
+  await writeFile(join(target, INSTALL_META), `${JSON.stringify({
+    source: 'wvz6zmRWmX',
+    slug: 'blueprint',
+    version: latest?.version ?? '',
+    packageVersion: localVersion,
+    endpoint: ENDPOINT,
+    installedAt: new Date().toISOString(),
+  }, null, 2)}\n`)
+  if (previous?.version && latest?.version && previous.version !== latest.version) {
+    console.log(`Blueprint skill updated: ${target}`)
+    console.log(`  ⤴ ${previous.version} → ${latest.version}`)
+  } else {
+    console.log(`Blueprint skill installed: ${target}${latest?.version ? ` (${latest.version})` : ''}`)
+  }
+  if (latest?.version) {
+    console.log(`Latest version on cli.tax: ${latest.version}`)
+  }
+  console.log('Next: return to your IDE conversation and state the goal.')
+  console.log('The IDE agent reads the installed SKILL.md, asks you the intake questions,')
+  console.log('and then calls the Blueprint protocol to build and validate the blueprint.')
+}
+
+async function check(explicit) {
+  const target = installTarget(explicit)
+  const local = readMeta(target)
+  const latest = await fetchLatestVersion()
+  if (!latest) {
+    console.log('blueprint: cannot reach cli.tax to check updates.')
+    process.exitCode = 1
+    return
+  }
+  if (!local?.version) {
+    console.log(`blueprint: no version record in ${target} (installed before update tracking).`)
+    console.log(`Latest on cli.tax: ${latest.version}. Run install to record and refresh.`)
+    process.exitCode = 1
+    return
+  }
+  if (local.version === latest.version) {
+    console.log(`blueprint is up to date (${latest.version}) at ${target}`)
+  } else {
+    console.log(`blueprint update available: ${local.version} → ${latest.version} at ${target}`)
+    console.log('Run: npx cli-blueprint@latest install')
+    process.exitCode = 1
+  }
+}
+
+async function askOne(question, readline) {
+  const requiredMark = question.required ? ' (required)' : ''
+  console.log(`\n${question.prompt}${requiredMark}`)
+  console.log(`Example: ${question.example}`)
+  for (;;) {
+    const answer = (await readline.question('> ')).trim()
+    if (answer || !question.required) return answer || ''
+    console.log('This question is required. Please answer before continuing.')
+  }
+}
+
+async function run() {
+  const capabilities = await postRequest('capabilities', 'cli-1')
+  const skill = capabilities.output?.skill ?? {}
+  const nextStep = capabilities.output?.nextStep ?? {}
+  console.log(`Blueprint ${skill.version ?? ''} — ${skill.description ?? 'installable engineering blueprints'}`)
+  if (nextStep.instruction) console.log(nextStep.instruction)
+
+  const readline = createInterface({ input: stdin, output: stdout })
+  const answers = []
+  try {
+    for (const question of INTAKE_QUESTIONS) {
+      answers.push({ id: question.id, prompt: question.prompt, answer: await askOne(question, readline) })
+    }
+  } finally {
+    readline.close()
+  }
+
+  const requirements = {
+    schemaVersion: SCHEMA_VERSION,
+    endpoint: ENDPOINT,
+    createdAt: new Date().toISOString(),
+    answers,
+  }
+  const target = join(process.cwd(), 'BLUEPRINT-REQUIREMENTS.json')
+  await writeFile(target, `${JSON.stringify(requirements, null, 2)}\n`)
+  console.log(`\nRequirements saved: ${target}`)
+  console.log('Next: continue in your IDE agent with this file.')
+}
+
+const command = process.argv[2] ?? 'help'
+const argument = process.argv[3] ?? ''
+try {
+  if (command === 'install') {
+    await install(argument)
+  } else if (command === 'check') {
+    await check(argument)
+  } else if (command === 'run') {
+    await run()
+  } else if (command === '--help' || command === '-h' || command === 'help') {
+    console.log(usage())
+  } else {
+    console.error(`Unknown command: ${command}\n`)
+    console.log(usage())
+    process.exitCode = 1
+  }
+} catch (error) {
+  console.error(error instanceof Error ? error.message : error)
+  process.exitCode = 1
+}

package/package.json

@@ -1,27 +1,25 @@
 {
   "name": "cli-blueprint",
-  "version": "1.0.0",
-  "description": "Blueprint + Calctool + Swarm 多 IDE 安装器：从 cli.tax 自动拉取并分发到本机所有已装 IDE。支持 check 更新检测与 --silent 静默升级。",
+  "version": "1.0.2",
+  "description": "Blueprint skill installer for CLI.Tax: compile one goal into an executable, verifiable engineering blueprint.",
   "type": "module",
   "bin": {
-    "cli-blueprint": "install.mjs"
+    "cli-blueprint": "./cli.mjs"
   },
   "files": [
-    "install.mjs",
-    "sources.json",
-    "skills"
+    "cli.mjs",
+    "README.md",
+    "skill/SKILL.md",
+    "skill/skill.json"
   ],
   "engines": {
     "node": ">=18"
   },
-  "license": "MIT",
+  "license": "UNLICENSED",
   "keywords": [
-    "blueprint",
-    "skill",
     "cli.tax",
-    "clitax",
-    "codex",
-    "agent",
-    "installer"
+    "skill",
+    "installer",
+    "agent"
   ]
-}
+}

package/{skills/blueprint → skill}/SKILL.md

@@ -40,6 +40,10 @@ POST JSON to the endpoint with an `input` wrapper:
 4. Build a Blueprint conforming to `blueprint.ir/1.0`, then call `validate`.
 5. Fix every validation finding until the report is green, then call `compile-inline` and save the artifacts.
 
+## Official catalog hops
+
+After `capabilities`, read `officialCatalog`. Default allowlist is official skills. Call another skill only when its capability matches this demand. User-named extras enter only when the user names them; then confirm that skill's capabilities before invoke. Do not call chain-unrelated or self-extended skills.
+
 ## Safety rules
 
 - Never send credentials, model keys, provider endpoints, or personal secrets inside the request envelope or `input`.

package/{skills/blueprint → skill}/skill.json

@@ -2,9 +2,9 @@
   "name": "blueprint",
   "displayName": "Blueprint",
   "description": "Blueprint 是一个跨工具的工程规划 CLI，把明确目标编译为可执行、可追溯、可验收的全站工程蓝图，并通过确定性规则检查每个节点、分支、合同、任务与验收闭环。默认由当前 IDE 的多智能体协同推演，也可连接用户自行安装的本地 Hermes；平台不托管模型密钥。",
-  "schemaVersion": "cli.request/1.0",
+  "schemaVersion": "blueprint.skill.request/1.0",
   "endpoint": "https://cli.tax/wvz6zmRWmX",
   "method": "POST",
-  "version": "v0.4.0",
+  "version": "v1.0.2",
   "type": "Skill"
 }