cfKanban 0.1.0-alpha.32

cfKanban 0.1.0-alpha.32

Testing prerelease / 测试发行版

English

This testing prerelease closes the one-time capability delivery gap found while dogfooding the public Skill commands.

Changes:

• adds dedicated web launch and invite create commands and blocks their secret-producing endpoints in generic api request before any network write;
• opens Browser Launches through a short-lived, memory-only loopback redirect after checking that a local browser opener exists, so the remote URL/code never enters normal output, files, receipts, journals, or child-process arguments;
• copies Invite text through the clipboard helper's stdin after checking that a supported helper exists, while returning only allowlisted non-secret metadata;
• limits delivery-helper child processes to a small allowlist of desktop/session environment variables instead of inheriting unrelated ambient credentials;
• requires one exact acknowledgement before the explicit stdout_once headless fallback and marks that result as a one-time bearer capability;
• verifies trusted-origin continuity, the returned target or Grants, the operation envelope, and the capability URL shape before delivery;
• never recovers or redisplays the capability on an idempotent replay, and reports a safe committed-state recovery path when local delivery fails after creation;
• exposes command output classifications and the complete scope resolve input contract in help.

The Service API, D1 schema, and deployment topology are unchanged from alpha.31. Existing instances do not need a Worker deployment or D1 migration for this Skill-only behavior change. Local Skill update and Instance upgrade remain independent.

Install the tagged plugin:

codex plugin marketplace add https://github.com/breakstring/cfKanban.git --ref 0.1.0-alpha.32
codex plugin add cfkanban-agent-skills@cfkanban

简体中文

这次测试发行修复了公开 Skill 命令在真实使用中暴露出来的一次性 capability 交付缺口。

变更：

• 新增专用 web launch 与 invite create 命令，并让通用 api request 在网络写入前拒绝两个会产生 secret 的 endpoint；
• Browser Launch 会先确认本地浏览器 opener 可用，再通过短期、纯内存的 loopback redirect 打开；远端 URL/code 不进入普通输出、文件、receipt、journal 或子进程参数；
• Invite 会先确认剪贴板 helper 可用，再通过 helper 的 stdin 写入邀请话术，普通输出只保留白名单内的非秘密元数据；
• 交付 helper 子进程只继承少量桌面与会话环境变量，不再顺带继承无关的环境凭据；
• 无图形环境明确使用 stdout_once 兜底时，必须提交准确确认句，结果也会明确标记为一次性 Bearer capability；
• 交付前核对 trusted-origin 连续性、返回 target 或 Grants、操作 envelope 与 capability URL 形状；
• 幂等重放绝不恢复或再次展示 capability；远端创建后本地交付失败时，只返回安全的已提交恢复路径；
• help 现在公开命令输出分类，以及 scope resolve 的完整输入合同。

Service API、D1 schema 与部署拓扑相对 alpha.31 均未变化。这个只影响 Skill 的行为变更不要求现有实例重新部署 Worker，也不需要 D1 migration。本地 Skill update 与 Instance upgrade 仍是互不隐含的两个平面。

安装带 tag 的 plugin：

codex plugin marketplace add https://github.com/breakstring/cfKanban.git --ref 0.1.0-alpha.32
codex plugin add cfkanban-agent-skills@cfkanban