cognitive-modules-cli 2.2.0 → 2.2.5

package/CHANGELOG.md

@@ -0,0 +1,11 @@
+# Changelog
+
+All notable changes to this package are documented in this file.
+
+## 2.2.5 - 2026-02-06
+
+- Standardized v2.2 runtime behavior and cross-surface error envelope consistency (CLI/HTTP/MCP).
+- Clarified `compose` output contract: default/pretty output returns full v2.2 envelope, while `compose --trace` returns a debug wrapper object (`result/moduleResults/trace/totalTimeMs`) for diagnostics.
+- Hardened module add/update/remove and registry path handling against traversal risks.
+- Improved composition/subagent/streaming reliability and fallback handling.
+- Added stricter package publish checks and metadata alignment for npm release.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ziel-io
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -2,7 +2,7 @@
 
 [![npm version](https://badge.fury.io/js/cognitive-modules-cli.svg)](https://www.npmjs.com/package/cognitive-modules-cli)
 
-Node.js/TypeScript 版本的 Cognitive Modules CLI。
+Node.js/TypeScript 版本的 Cognitive Modules CLI，提供 `cog` 命令。
 
 > 这是 [cognitive-modules](../../README.md) monorepo 的一部分。
 
@@ -10,21 +10,22 @@ Node.js/TypeScript 版本的 Cognitive Modules CLI。
 
 ```bash
 # 全局安装（推荐）
-npm install -g cogn
+npm install -g cogn@2.2.5
+# 或使用完整包名（同样提供 `cog` 命令）
+# npm install -g cognitive-modules-cli@2.2.5
 
 # 或使用 npx 零安装
-npx cogn --help
+npx cogn@2.2.5 --help
 ```
 
 ## 快速开始
 
 ```bash
 # 配置 LLM
-export LLM_PROVIDER=openai
 export OPENAI_API_KEY=sk-xxx
 
 # 运行模块
-cog run code-reviewer --args "def login(u,p): return db.query(f'SELECT * FROM users WHERE name={u}')"
+cog run code-reviewer --args "def login(u,p): return db.query(f'SELECT * FROM users WHERE name={u}')" --pretty
 
 # 列出模块
 cog list
@@ -33,33 +34,18 @@ cog list
 echo "review this code" | cog pipe --module code-reviewer
 ```
 
-## 与 Python 版的功能对比
-
-| 功能 | Python (`cogn`) | Node.js (`cog`) |
-|------|----------------|-----------------|
-| 包名 | `cognitive-modules` | `cogn` / `cognitive-modules-cli` |
-| 安装 | `pip install` | `npm install -g` |
-| 子代理 | ✅ `@call:module` | ✅ `@call:module` |
-| MCP Server | ✅ | ✅ |
-| HTTP Server | ✅ | ✅ |
-| v2.2 Envelope | ✅ | ✅ |
-
-两个版本功能完全一致，共享相同的模块格式和 v2.2 规范。
-
-**推荐使用 Node.js 版**：零安装快速体验 `npx cogn run ...`
-
 ## 支持的 Provider
 
-| Provider | 环境变量 | 别名 |
+| Provider | 环境变量 | 说明 |
 |----------|----------|------|
-| OpenAI | `OPENAI_API_KEY` | - |
-| Anthropic | `ANTHROPIC_API_KEY` | - |
-| Gemini | `GEMINI_API_KEY` | - |
-| DeepSeek | `DEEPSEEK_API_KEY` | - |
-| MiniMax | `MINIMAX_API_KEY` | - |
-| Moonshot | `MOONSHOT_API_KEY` | `kimi` |
-| Qwen | `DASHSCOPE_API_KEY` | `tongyi` |
-| Ollama | `OLLAMA_HOST` | `local` |
+| OpenAI | `OPENAI_API_KEY` | OpenAI API |
+| Anthropic | `ANTHROPIC_API_KEY` | Claude |
+| Gemini | `GEMINI_API_KEY` | Google Gemini |
+| DeepSeek | `DEEPSEEK_API_KEY` | DeepSeek |
+| MiniMax | `MINIMAX_API_KEY` | MiniMax |
+| Moonshot | `MOONSHOT_API_KEY` | Kimi |
+| Qwen | `DASHSCOPE_API_KEY` / `QWEN_API_KEY` | 通义千问 |
+| Ollama | `OLLAMA_HOST` | 本地模型 |
 
 ## 命令
 
@@ -74,9 +60,22 @@ cog versions <url>            # 查看可用版本
 cog init <name>               # 创建新模块
 cog pipe --module <name>      # 管道模式
 
+# 组合执行
+cog compose <module> --args "..."
+cog compose-info <module>
+
+# 校验与迁移
+cog validate <module> --v22
+cog validate --all
+cog migrate <module> --dry-run
+cog migrate --all --no-backup
+
 # 服务器
 cog serve --port 8000         # 启动 HTTP API 服务
 cog mcp                       # 启动 MCP 服务（Claude Code / Cursor）
+
+# 环境检查
+cog doctor
 ```
 
 ## 开发
@@ -92,6 +91,13 @@ npm run build
 npm run dev -- run code-reviewer --args "..."
 ```
 
+## 发布前检查
+
+```bash
+# 完整发布检查（构建 + 测试 + npm 打包清单）
+npm run release:check
+```
+
 ## License
 
 MIT