From 149174e1272a697e73ab46b0f21db00aca090234 Mon Sep 17 00:00:00 2001
From: Yige <a@wyr.me>
Date: Tue, 29 Sep 2026 05:40:51 -0400
Subject: [PATCH] =?UTF-8?q?chore(invoice-organizer):=201.0.5=20=E2=80=94?=
 =?UTF-8?q?=E2=80=94=20pin=20=E5=88=B0=E5=86=85=E5=AE=B9=E4=BB=93=E5=BA=93?=
 =?UTF-8?q?=E5=90=88=E5=B9=B6=E6=8F=90=E4=BA=A4=20(#195)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## 改动 / Changes

- `entry.json` 与 `catalog-metadata.v1.json` 的三处 ref pin 到
[desirecore-agent/invoice-organizer#2](https://github.com/desirecore-agent/invoice-organizer/pull/2)
的合并提交 `b2e6d69f0df2345e282ceea424afce0b9345d97f`
- `latestVersion` / `release.version` 1.0.4 → 1.0.5
- `compatibility.requirements` 的 runtime 一条补上 XML 解析与系统自带解压工具（unzip /
python3 / bsdtar），与 Agent 的 USAGE 口径一致

Pins the invoice-organizer pointer entry to content commit `b2e6d69`
(1.0.5) and syncs the runtime requirement text with the Agent's USAGE.

## 1.0.5 内容 / What's in 1.0.5

- 收下 `.zip` / `.xml` 附件：12306 把铁路电子客票打成 zip 发，此前整封邮件被跳过（真实邮箱实测漏 8 张）；zip
只经技能自带的 `unpack-zip.sh` 解包，附件名与条目名不进命令行，四种模式 × 9
个用例（含命令注入、输出伪造、符号链接、加密、压缩炸弹、GBK 名、macOS 元数据）实测
- 数电票 XML 作为优先级最高的载体；「电子发票（铁路电子客票）」按 8 张真票重写并新增 D 族键表
- 识别红字发票（`InIssuType`、备注、`RedEInvoice`、负数合计），台账成对标出已红冲 / 部分红冲
- 下载失败与解不开的内层压缩包落盘到 `ledger.json#unprocessed`；附件逐个下载；不把整理流程委派给别的 Agent
- 内容仓库 PR 经独立子代理三轮审查（高 1 / 中 9 / 低若干，全部处理），第三轮结论「可以合并」

## 验证 / Verification

- `validate_catalog_metadata.py --require-complete`：0 error（agents=7）
- 新增文本无真实邮箱、税号、发票号码或公司名

🤖 Generated with [Claude Code](https://claude.com/claude-code)
---
 agents/invoice-organizer/catalog-metadata.v1.json | 8 ++++----
 agents/invoice-organizer/entry.json               | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/agents/invoice-organizer/catalog-metadata.v1.json b/agents/invoice-organizer/catalog-metadata.v1.json
index 105dde2..fdb5ea7 100644
--- a/agents/invoice-organizer/catalog-metadata.v1.json
+++ b/agents/invoice-organizer/catalog-metadata.v1.json
@@ -30,7 +30,7 @@
   },
   "release": {
     "state": "known",
-    "version": "1.0.4",
+    "version": "1.0.5",
     "versionScheme": "semver"
   },
   "timestamps": {
@@ -59,7 +59,7 @@
     "content": {
       "kind": "git",
       "url": "https://github.com/desirecore-agent/invoice-organizer.git",
-      "ref": "553ce87d52ea66da83f3a5e07862805fef89c556"
+      "ref": "b2e6d69f0df2345e282ceea424afce0b9345d97f"
     }
   },
   "governance": {
@@ -77,7 +77,7 @@
     },
     "compliance": {
       "licenseEvidencePath": "LICENSE",
-      "reviewedRef": "553ce87d52ea66da83f3a5e07862805fef89c556",
+      "reviewedRef": "b2e6d69f0df2345e282ceea424afce0b9345d97f",
       "reviewedAt": "2026-09-29",
       "reviewedBy": "yi-ge",
       "upstreamEndorsed": true
@@ -94,7 +94,7 @@
       },
       {
         "kind": "runtime",
-        "value": "Parsing PDF, OFD and scanned images needs nothing installed. Only the .xlsx ledger may require Python with openpyxl and pandas; when they are unavailable the Agent degrades to a UTF-8 BOM CSV and reports the degradation."
+        "value": "Parsing PDF, OFD, XML and scanned images needs nothing installed. .zip attachments are unpacked with the system's own unzip, python3 or bsdtar (macOS and Windows ship at least one; a minimal Linux image may have none, in which case the archive is quarantined for the user to unpack). Only the .xlsx ledger may require Python with openpyxl and pandas; when they are unavailable the Agent degrades to a UTF-8 BOM CSV and reports the degradation."
       },
       {
         "kind": "permission",
diff --git a/agents/invoice-organizer/entry.json b/agents/invoice-organizer/entry.json
index a4cf749..ee0df7f 100644
--- a/agents/invoice-organizer/entry.json
+++ b/agents/invoice-organizer/entry.json
@@ -19,7 +19,7 @@
       "shortDesc": "Turns the invoices buried in a mailbox into a reconcilable ledger: collects attachments over a stated range, extracts fields from PDF, OFD and scanned images, deduplicates, archives, and produces a spreadsheet ledger plus a monthly report. Requires a one-time mailbox authorization inside DesireCore; it performs format and arithmetic checks only, never tax-authority invoice verification."
     }
   },
-  "latestVersion": "1.0.4",
+  "latestVersion": "1.0.5",
   "maintainer": {
     "name": "DesireCore Official",
     "verified": true
@@ -38,6 +38,6 @@
     "kind": "git",
     "repoUrl": "https://github.com/desirecore-agent/invoice-organizer.git",
     "repoBranch": "main",
-    "ref": "553ce87d52ea66da83f3a5e07862805fef89c556"
+    "ref": "b2e6d69f0df2345e282ceea424afce0b9345d97f"
   }
 }