grokbox 0.1.0-alpha.6 → 0.1.0-alpha.8

package/README.md

@@ -10,9 +10,8 @@ This project is not affiliated with or endorsed by Anysphere, Cursor, xAI, or
 Grok Bot. Grok Bot, Cursor, and related names identify compatible products and
 remain the property of their respective owners.
 
-> **Alpha:** current source is `0.1.0-alpha.6`. npm `next` currently points to
-> `0.1.0-alpha.5`; `0.0.1` remains `latest`. `v0.1.0-alpha.1` through
-> `v0.1.0-alpha.4` exist as Git tags only. Prereleases publish only after
+> **Alpha:** current source is `0.1.0-alpha.8`. npm `next` currently points to
+> `0.1.0-alpha.7`; `0.0.1` remains `latest`. Prereleases publish only after
 > release checks and explicitly scoped external acceptance.
 
 ## What it does
@@ -36,7 +35,7 @@ Highlights:
 
 - strict local and remote Profiles with separate credential authorities;
 - finite Unix-socket/loopback daemon and private Tailscale Serve mapping;
-- agent/group management, send, transcript, Memory, and bounded events;
+- agent/group and native Routine lifecycle management, send, transcript, Memory, and bounded events;
 - named-root governed file reads and mutations;
 - literal structured execution with durable Jobs and bounded logs;
 - layered read-only diagnosis and explicit recovery;
@@ -138,14 +137,18 @@ grokbox profile list --table
 grokbox doctor
 grokbox daemon status
 grokbox agents list --table
+grokbox agents routines list <agent> --table
 grokbox groups list --table
 grokbox history tail <target> --limit 20
 grokbox memory list <agent>
+grokbox export agent <agent> --out ./export
 grokbox fs stat workspace:/artifact.txt
 grokbox jobs list --table
 grokbox desktop status --table
 ```
 
+Routine reads expose bounded metadata only: prompt bodies, webhook credentials, native paths, and unknown provider fields stay private. Box-local Bots support create/update/enable/disable/delete; create always writes a disabled definition and later mutations require explicit confirmation plus the exact revision from a fresh `agents routines list/show`. Temporal Bots are Server-authoritative: list/show, webhook credential, enable/disable, and delete use the bounded Temporal Routine bridge; current upstream contracts do not expose Temporal definition create/update, so those commands refuse instead of writing the legacy Box store. `agents routines webhook credential <agent> <routine-id> --confirm` returns the URL while hiding the key; add `--reveal-key` only when secret output is explicitly required. Without the Host bridge, Temporal Routine reads fail closed rather than reporting a false empty list. Upstream Routine writes have no native compare-and-swap or idempotency contract, so an uncertain acknowledgement is never replayed automatically.
+
 Mutating commands require explicit capability and, where destructive, explicit
 confirmation. `desktop prune run` defaults to dry-run; `--yes` invokes the
 upstream stop-window path and deletes that fork's Chrome profile.

package/README.zh-CN.md

@@ -6,7 +6,7 @@
 
 本项目与 Anysphere、Cursor、xAI 或 Grok Bot 没有隶属或背书关系。Grok Bot、Cursor 及相关名称仅用于标识兼容产品，其权利归各自所有者。
 
-> **Alpha：** 当前源码版本是 `0.1.0-alpha.6`。npm 的 `next` dist-tag 目前指向 `0.1.0-alpha.5`；`0.0.1` 仍是 `latest`。`v0.1.0-alpha.1` 到 `v0.1.0-alpha.4` 只存在于 Git tag。只有通过发布检查及明确范围的外部验收后，才会发布新的预发布版本。
+> **Alpha：** 当前源码版本是 `0.1.0-alpha.8`。npm 的 `next` dist-tag 目前指向 `0.1.0-alpha.7`；`0.0.1` 仍是 `latest`。只有通过发布检查及明确范围的外部验收后，才会发布新的预发布版本。
 
 ## 它能做什么
 
@@ -29,7 +29,7 @@ fs  exec  jobs  desktop
 
 - 严格区分本机与远端 Profile，并分离不同凭据权威；
 - 有限的 Unix socket/loopback daemon 与私有 Tailscale Serve 映射；
-- Agent/Group 管理、消息发送、Transcript、Memory 和有界事件读取；
+- Agent/Group 与原生 Routine 全生命周期管理、消息发送、Transcript、Memory 和有界事件读取；
 - 通过命名根目录治理文件读取与变更；
 - 字面量结构化执行、持久 Job 和有界日志；
 - 分层只读诊断与显式恢复；
@@ -118,14 +118,18 @@ grokbox profile list --table
 grokbox doctor
 grokbox daemon status
 grokbox agents list --table
+grokbox agents routines list <agent> --table
 grokbox groups list --table
 grokbox history tail <target> --limit 20
 grokbox memory list <agent>
+grokbox export agent <agent> --out ./export
 grokbox fs stat workspace:/artifact.txt
 grokbox jobs list --table
 grokbox desktop status --table
 ```
 
+Routine 读取只输出有界元数据，不暴露 prompt 正文、Webhook credential、原生路径或未知 provider 字段。Box-local Bot 支持 create/update/enable/disable/delete；create 始终只创建 disabled definition，后续 mutation 需要显式确认，并携带刚从 `agents routines list/show` 读到的精确 revision。Temporal Bot 的 Routine 以 Server 为权威：list/show、Webhook credential、enable/disable/delete 通过受限的 Temporal Routine bridge；当前官方合同没有暴露 Temporal definition create/update，因此 CLI 会明确拒绝，而不会误写旧 Box store。`agents routines webhook credential <agent> <routine-id> --confirm` 默认返回 URL 并隐藏 key；只有显式增加 `--reveal-key` 才把 key 输出到 stdout。Host bridge 不可用时，Temporal Routine 查询 fail-closed，不再冒充为空列表。上游 Routine 写接口没有 native compare-and-swap 或 idempotency 合同，因此回执不确定时不会自动重放。
+
 变更命令需要显式 capability；破坏性操作还需要显式确认。`desktop prune run` 默认 dry-run；传入 `--yes` 后会调用上游 stop-window 路径，并删除该 fork 的 Chrome profile。
 
 ## 凭据