@actionway/cli 0.18.5 → 0.18.7

package/README.md

@@ -1,7 +1,7 @@
 # @actionway/cli — 本地端壳（bin: `actionway`）
 
 actionway CLI 的本地端壳（迁移文档 `docs/DL_TO_ACTIONWAY_CLI_MIGRATION.md` §3.2 / §3.4）：
-终端用户在自己机器上的 Coding Agent（Codex / Claude Code）通过它调用 Actionway 能力。
+终端用户在自己机器上的 Coding Agent（Codex / Claude Code / WorkBuddy）通过它调用 Actionway 能力。
 
 ## 安装
 
@@ -25,12 +25,35 @@ actionway init
 `doctor` 只输出脱敏后的 Node/npm、registry、global PATH、配置目录、loopback
 和 OAuth discovery 检查；它不会修改 npm、代理、CA、PATH 或 PowerShell policy。
 
+### Development 通道
+
+成功合并并部署 `dev` 后，workflow 从同一 bundle 生成独立公共包 `@actionway/cli-dev`。它只暴露 `actionway-dev`，固定连接 `https://dev.actionway.ai`，使用 `${HOME}/.actionway-dev` 和 `actionway-dev` Skill；不会安装或覆盖正式 `actionway`：
+
+```bash
+npm install --global @actionway/cli-dev@latest
+actionway-dev doctor
+actionway-dev init
+actionway-dev status
+```
+
+`actionway-dev update` 只读取和更新 `@actionway/cli-dev@latest`。每个 dev npm 版本包含不可变 source SHA 与 Actions run metadata；同一 tarball 也保存在私有 GitHub prerelease，后者仅用于内部审计和精确回滚，普通安装不需要 GitHub 账号。
+
+本地 Agent 在每条 Actionway 命令通过全局参数声明当前宿主：
+
+```bash
+actionway --agent-host=codex tools search "generate a product image"
+actionway --agent-host=claude_code tools search "generate a product image"
+actionway --agent-host=workbuddy tools search "generate a product image"
+```
+
+不带 `--agent-host` 表示用户直接使用 CLI。该声明不写入共享凭据，所以同一个用户和全局 CLI 可以交替被多个 Agent 使用。CLI 同时从每次进程的 Node.js 运行环境识别 Windows、macOS、WSL 或 Linux；这些字段只作为 Site 侧产品分析事件属性，不参与鉴权、计费或 Gateway 路由。
+
 - **auth 唯一途径：Clerk OAuth（PKCE）**。issuer / client_id 运行时从
   `{public origin}/api/auth/cli-config` 发现；浏览器授权走随机 `127.0.0.1` 回调端口；
   凭据存 `~/.actionway/credentials.json`（POSIX 上为 0600 owner-only 文件；
   Windows 上 chmod 无效，保密性依赖 `%USERPROFILE%` 的继承 ACL——不要把
   `ACTIONWAY_CONFIG_DIR` 指到共享目录）。CLI 从不打印或存储 OAuth client secret。
-- **命令面 = 明码写出的注册表**（无 profile flag、无运行期分叉）：
+- **命令面 = 明码写出的注册表**（无 capability profile flag；production/development 只切换包、命令、状态、Skill、更新源与 Gateway）：
   - `tools search / inspect / call` 是长尾 capability 的规范发现与执行面；
   - 高频 typed command 继续提供参数与文件 UX，但投影到同一个 Tool Call；
   - `account invitation` 获取或首次创建当前账户的永久邀请码、链接和服务端本地化分享文案；

package/assets/dev/actionway-dev-entry.mjs

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+
+import { spawnSync } from "node:child_process";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+process.env.ACTIONWAY_CLI_CHANNEL = "development";
+process.env.ACTIONWAY_CONFIG_DIR ||= join(homedir(), ".actionway-dev");
+process.env.ACTIONWAY_GATEWAY_URL ||= "https://dev.actionway.ai";
+
+const executable = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "dist", "index.js");
+const result = spawnSync(process.execPath, [executable, ...process.argv.slice(2)], {
+  stdio: "inherit",
+  env: process.env,
+  windowsHide: true,
+});
+if (result.error) throw result.error;
+process.exit(result.status || 0);

package/assets/dev/actionway-dev-launcher.mjs

@@ -0,0 +1,370 @@
+#!/usr/bin/env node
+
+import { spawnSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import {
+  cpSync,
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  rmSync,
+  writeFileSync,
+} from "node:fs";
+import { homedir, tmpdir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+
+const repository = (process.env.ACTIONWAY_DEV_REPOSITORY || "PawLogic/actionway").trim();
+const packageName = "@actionway/cli-dev";
+const devHome = resolve(process.env.ACTIONWAY_DEV_HOME || join(homedir(), ".actionway-dev"));
+const metadataPath = join(devHome, "current-cli.json");
+const updateIntervalMs = Number(process.env.ACTIONWAY_DEV_UPDATE_INTERVAL_MS || 300_000);
+const npmCommand = process.platform === "win32" ? "npm.cmd" : "npm";
+
+export function commandInvocation(command, args, platform = process.platform, env = process.env) {
+  if (platform === "win32" && /\.(?:cmd|bat)$/i.test(command)) {
+    const commandProcessor = (env.ComSpec ?? env.COMSPEC ?? "cmd.exe").trim().replace(/^"|"$/g, "") || "cmd.exe";
+    return {
+      command: commandProcessor,
+      args: ["/d", "/s", "/c", command, ...args],
+    };
+  }
+  return { command, args: [...args] };
+}
+
+function run(command, args, { capture = false, env = process.env } = {}) {
+  const invocation = commandInvocation(command, args, process.platform, env);
+  const result = spawnSync(invocation.command, invocation.args, {
+    encoding: "utf8",
+    env,
+    stdio: capture ? ["ignore", "pipe", "pipe"] : "inherit",
+    windowsHide: true,
+  });
+  if (result.error) throw result.error;
+  if (result.status !== 0) {
+    if (capture && result.stderr) process.stderr.write(result.stderr);
+    const error = new Error(`${command} exited with status ${result.status}`);
+    error.exitCode = result.status || 1;
+    throw error;
+  }
+  return capture ? result.stdout.trim() : "";
+}
+
+function readMetadata() {
+  if (!existsSync(metadataPath)) return null;
+  return JSON.parse(readFileSync(metadataPath, "utf8"));
+}
+
+function writeMetadata(metadata) {
+  mkdirSync(devHome, { recursive: true, mode: 0o700 });
+  writeFileSync(metadataPath, `${JSON.stringify(metadata, null, 2)}\n`, { mode: 0o600 });
+}
+
+export function validateReleaseManifest(manifest, expectedRepository = repository) {
+  if (!manifest || typeof manifest !== "object" || Array.isArray(manifest)) {
+    throw new Error("Development release manifest must be a JSON object.");
+  }
+  if (
+    manifest.schema_version !== 1 ||
+    manifest.channel !== "development" ||
+    manifest.distribution !== "github_release"
+  ) {
+    throw new Error("Development release manifest has an unsupported schema, channel, or distribution.");
+  }
+  if (manifest.repository !== expectedRepository) {
+    throw new Error("Development release manifest uses an unexpected repository.");
+  }
+  if (typeof manifest.source_sha !== "string" || !/^[0-9a-f]{40}$/.test(manifest.source_sha)) {
+    throw new Error("Development release manifest has an invalid source_sha.");
+  }
+  if (manifest.release_tag !== `actionway-dev-${manifest.source_sha}`) {
+    throw new Error("Development release manifest tag does not match source_sha.");
+  }
+  if (manifest.gateway_url !== "https://dev.actionway.ai") {
+    throw new Error("Development release manifest does not target the development Gateway.");
+  }
+  if (!manifest.archive || typeof manifest.archive !== "object" || Array.isArray(manifest.archive)) {
+    throw new Error("Development release manifest is missing archive metadata.");
+  }
+  if (typeof manifest.archive.sha256 !== "string" || !/^[0-9a-f]{64}$/.test(manifest.archive.sha256)) {
+    throw new Error("Development release manifest has an invalid archive sha256.");
+  }
+  if (
+    manifest.archive.asset_name !==
+    `actionway-cli-${manifest.source_sha}-${manifest.archive.sha256}.tgz`
+  ) {
+    throw new Error("Development release archive asset does not match source_sha and sha256.");
+  }
+  if (!Number.isSafeInteger(manifest.archive.size_bytes) || manifest.archive.size_bytes <= 0) {
+    throw new Error("Development release manifest has an invalid archive size.");
+  }
+  if (!Number.isSafeInteger(manifest.run_id) || manifest.run_id <= 0) {
+    throw new Error("Development release manifest has an invalid run_id.");
+  }
+  if (
+    manifest.run_url !==
+    `https://github.com/${manifest.repository}/actions/runs/${manifest.run_id}`
+  ) {
+    throw new Error("Development release manifest has an invalid run_url.");
+  }
+  if (manifest.artifact_name !== `actionway-cli-dev-${manifest.source_sha}`) {
+    throw new Error("Development release manifest has an invalid artifact_name.");
+  }
+  if (typeof manifest.published_at !== "string" || !Number.isFinite(Date.parse(manifest.published_at))) {
+    throw new Error("Development release manifest has an invalid published_at timestamp.");
+  }
+
+  return {
+    headSha: manifest.source_sha,
+    runId: manifest.run_id,
+    runUrl: manifest.run_url,
+    artifact: manifest.artifact_name,
+    releaseTag: manifest.release_tag,
+    archiveAsset: manifest.archive.asset_name,
+    archiveSha256: manifest.archive.sha256,
+    archiveSize: manifest.archive.size_bytes,
+    archivePath: null,
+  };
+}
+
+function resolveLatestRelease() {
+  const localArchive = process.env.ACTIONWAY_DEV_ARCHIVE?.trim();
+  if (localArchive) {
+    return {
+      headSha: (process.env.ACTIONWAY_DEV_SOURCE_SHA || "local-development").trim(),
+      runId: null,
+      runUrl: null,
+      artifact: null,
+      releaseTag: null,
+      archiveAsset: null,
+      archiveSha256: null,
+      archiveSize: null,
+      archivePath: resolve(localArchive),
+    };
+  }
+
+  const manifest = JSON.parse(run(npmCommand, ["view", `${packageName}@latest`, "--json"], { capture: true }));
+  if (manifest?.name !== packageName || typeof manifest.version !== "string") {
+    throw new Error(`npm did not return a valid ${packageName}@latest manifest.`);
+  }
+  const metadata = manifest.actionway;
+  if (
+    metadata?.channel !== "development" ||
+    !/^[0-9a-f]{40}$/.test(metadata.source_sha || "") ||
+    !Number.isSafeInteger(metadata.run_id) ||
+    metadata.run_id <= 0 ||
+    metadata.run_url !== `https://github.com/${repository}/actions/runs/${metadata.run_id}` ||
+    metadata.gateway_url !== "https://dev.actionway.ai"
+  ) {
+    throw new Error(`The published ${packageName}@${manifest.version} metadata is invalid.`);
+  }
+  if (typeof manifest.dist?.integrity !== "string" || !manifest.dist.integrity.startsWith("sha512-")) {
+    throw new Error(`The published ${packageName}@${manifest.version} integrity is missing.`);
+  }
+  return {
+    headSha: metadata.source_sha,
+    runId: metadata.run_id,
+    runUrl: metadata.run_url,
+    artifact: `actionway-cli-dev-${metadata.source_sha}`,
+    releaseTag: `actionway-dev-${metadata.source_sha}`,
+    archiveAsset: null,
+    archiveSha256: null,
+    archiveSize: null,
+    archivePath: null,
+    packageVersion: manifest.version,
+    npmIntegrity: manifest.dist.integrity,
+  };
+}
+
+function installSkill(packageRoot) {
+  const source = join(packageRoot, "assets", "skill", "actionway-dev");
+  if (!existsSync(source)) throw new Error("The development CLI artifact is missing its actionway-dev Skill.");
+  const explicitTarget = process.env.ACTIONWAY_DEV_SKILL_DIR?.trim();
+  const officialRoot = join(homedir(), ".agents", "skills");
+  const legacyRoot = join(homedir(), ".codex", "skills");
+  const skillRoot = process.env.CODEX_HOME?.trim()
+    ? join(resolve(process.env.CODEX_HOME), "skills")
+    : existsSync(legacyRoot) && !existsSync(officialRoot)
+      ? legacyRoot
+      : officialRoot;
+  const target = explicitTarget ? resolve(explicitTarget) : join(skillRoot, "actionway-dev");
+  mkdirSync(dirname(target), { recursive: true, mode: 0o700 });
+  rmSync(target, { recursive: true, force: true });
+  cpSync(source, target, { recursive: true });
+  return target;
+}
+
+function refreshInstalledAssets(metadata) {
+  const packageRoot = join(metadata.runtime_dir, "node_modules", "@actionway", "cli-dev");
+  if (!existsSync(packageRoot)) throw new Error("The installed Actionway development CLI package is missing.");
+  const skillDir = installSkill(packageRoot);
+  const packagedLauncher = join(packageRoot, "assets", "dev", "actionway-dev-launcher.mjs");
+  const installedLauncher = join(devHome, "bin", "actionway-dev-launcher.mjs");
+  if (existsSync(packagedLauncher)) {
+    mkdirSync(dirname(installedLauncher), { recursive: true, mode: 0o700 });
+    cpSync(packagedLauncher, installedLauncher, { force: true });
+  }
+  return { ...metadata, skill_dir: skillDir };
+}
+
+export function verifyArchiveBytes(bytes, expectedSize, expectedSha256) {
+  const archive = Buffer.from(bytes);
+  if (archive.byteLength !== expectedSize) {
+    throw new Error(
+      `Development archive size mismatch: expected ${expectedSize}, received ${archive.byteLength}.`,
+    );
+  }
+  const actualSha256 = createHash("sha256").update(archive).digest("hex");
+  if (actualSha256 !== expectedSha256) throw new Error("Development archive checksum mismatch.");
+  return archive;
+}
+
+function installRelease(release) {
+  const downloadDir = mkdtempSync(join(tmpdir(), "actionway-dev-cli-"));
+  try {
+    let archivePath = release.archivePath;
+    if (!archivePath) {
+      const packed = JSON.parse(
+        run(npmCommand, ["pack", `${packageName}@${release.packageVersion}`, "--pack-destination", downloadDir, "--json"], {
+          capture: true,
+        }),
+      );
+      const filename = packed?.[0]?.filename;
+      if (typeof filename !== "string") throw new Error(`npm pack did not return ${packageName}@${release.packageVersion}.`);
+      archivePath = join(downloadDir, filename);
+      const actualIntegrity = `sha512-${createHash("sha512").update(readFileSync(archivePath)).digest("base64")}`;
+      if (actualIntegrity !== release.npmIntegrity) throw new Error("Development npm archive integrity mismatch.");
+    }
+    if (!existsSync(archivePath)) throw new Error(`Actionway development CLI archive not found: ${archivePath}`);
+
+    const runtimeDir = join(devHome, "runtimes", release.headSha);
+    mkdirSync(runtimeDir, { recursive: true, mode: 0o700 });
+    run(npmCommand, [
+      "install",
+      "--ignore-scripts",
+      "--no-audit",
+      "--no-fund",
+      "--prefix",
+      runtimeDir,
+      archivePath,
+    ]);
+
+    const packageRoot = join(runtimeDir, "node_modules", "@actionway", "cli-dev");
+    const executable = join(runtimeDir, "node_modules", ".bin", process.platform === "win32" ? "actionway-dev.cmd" : "actionway-dev");
+    if (!existsSync(executable)) throw new Error("The development CLI artifact did not install an actionway-dev executable.");
+    const skillDir = installSkill(packageRoot);
+
+    const packagedLauncher = join(packageRoot, "assets", "dev", "actionway-dev-launcher.mjs");
+    const installedLauncher = join(devHome, "bin", "actionway-dev-launcher.mjs");
+    if (existsSync(packagedLauncher)) {
+      mkdirSync(dirname(installedLauncher), { recursive: true, mode: 0o700 });
+      cpSync(packagedLauncher, installedLauncher, { force: true });
+    }
+
+    const now = new Date().toISOString();
+    const metadata = {
+      version: 1,
+      source_sha: release.headSha,
+      run_id: release.runId,
+      run_url: release.runUrl,
+      artifact: release.artifact,
+      release_tag: release.releaseTag,
+      archive_asset: release.archiveAsset,
+      archive_sha256: release.archiveSha256,
+      package: packageName,
+      package_version: release.packageVersion ?? null,
+      npm_integrity: release.npmIntegrity ?? null,
+      runtime_dir: runtimeDir,
+      skill_dir: skillDir,
+      gateway_url: "https://dev.actionway.ai",
+      installed_at: now,
+      last_checked_at: now,
+    };
+    writeMetadata(metadata);
+    return metadata;
+  } finally {
+    rmSync(downloadDir, { recursive: true, force: true });
+  }
+}
+
+function checkForUpdate({ install, skipInterval = false } = {}) {
+  const current = readMetadata();
+  if (!skipInterval && current?.last_checked_at) {
+    const age = Date.now() - Date.parse(current.last_checked_at);
+    if (Number.isFinite(age) && age >= 0 && age < updateIntervalMs) return current;
+  }
+
+  const latest = resolveLatestRelease();
+  const updateAvailable = current?.source_sha !== latest.headSha;
+  if (!install) {
+    process.stdout.write(
+      `${JSON.stringify({
+        ok: true,
+        update_available: updateAvailable,
+        installed_source_sha: current?.source_sha || null,
+        latest_source_sha: latest.headSha,
+      })}\n`,
+    );
+    return current;
+  }
+  if (!updateAvailable) {
+    const refreshed = refreshInstalledAssets(current);
+    refreshed.last_checked_at = new Date().toISOString();
+    writeMetadata(refreshed);
+    return refreshed;
+  }
+  return installRelease(latest);
+}
+
+function executableFor(metadata) {
+  return join(
+    metadata.runtime_dir,
+    "node_modules",
+    ".bin",
+    process.platform === "win32" ? "actionway-dev.cmd" : "actionway-dev",
+  );
+}
+
+function main(args = process.argv.slice(2)) {
+  if (args[0] === "status") {
+    process.stdout.write(`${JSON.stringify({ ok: true, channel: "development", ...readMetadata() }, null, 2)}\n`);
+    return 0;
+  }
+  if (args[0] === "update") {
+    const checkOnly = args.includes("--check");
+    const metadata = checkForUpdate({ install: !checkOnly, skipInterval: true });
+    if (!checkOnly && metadata) {
+      process.stdout.write(`Actionway development CLI is current at ${metadata.source_sha}.\n`);
+    }
+    return 0;
+  }
+
+  let metadata = readMetadata();
+  try {
+    metadata = checkForUpdate({ install: true }) || metadata;
+  } catch (error) {
+    if (!metadata) throw error;
+    process.stderr.write(`Actionway development update check failed; using ${metadata.source_sha}: ${error.message}\n`);
+  }
+  if (!metadata) throw new Error("Actionway development CLI is not installed. Run the installer first.");
+
+  const executable = executableFor(metadata);
+  if (!existsSync(executable)) throw new Error("The installed Actionway development CLI runtime is missing.");
+  const childEnv = {
+    ...process.env,
+    ACTIONWAY_CONFIG_DIR: devHome,
+    ACTIONWAY_GATEWAY_URL: "https://dev.actionway.ai",
+  };
+  const invocation = commandInvocation(executable, args.length > 0 ? args : ["--help"], process.platform, childEnv);
+  const result = spawnSync(invocation.command, invocation.args, {
+    stdio: "inherit",
+    env: childEnv,
+    windowsHide: true,
+  });
+  if (result.error) throw result.error;
+  return result.status || 0;
+}
+
+if (process.env.ACTIONWAY_DEV_ASSET_IMPORT_ONLY !== "1") {
+  process.exit(main());
+}

package/assets/dev/install-actionway-dev.mjs

@@ -0,0 +1,185 @@
+#!/usr/bin/env node
+
+import { spawnSync } from "node:child_process";
+import {
+  accessSync,
+  chmodSync,
+  constants,
+  copyFileSync,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  writeFileSync,
+} from "node:fs";
+import { homedir } from "node:os";
+import { delimiter, dirname, join, resolve } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+const repository = (process.env.ACTIONWAY_DEV_REPOSITORY || "PawLogic/actionway").trim();
+const bootstrapRef = (process.env.ACTIONWAY_DEV_BOOTSTRAP_REF || "dev").trim();
+const devHome = resolve(process.env.ACTIONWAY_DEV_HOME || join(homedir(), ".actionway-dev"));
+const installedLauncher = join(devHome, "bin", "actionway-dev-launcher.mjs");
+const marker = "Actionway managed development launcher";
+
+export function commandInvocation(command, args, platform = process.platform, env = process.env) {
+  if (platform === "win32" && /\.(?:cmd|bat)$/i.test(command)) {
+    const commandProcessor = (env.ComSpec ?? env.COMSPEC ?? "cmd.exe").trim().replace(/^"|"$/g, "") || "cmd.exe";
+    return {
+      command: commandProcessor,
+      args: ["/d", "/s", "/c", command, ...args],
+    };
+  }
+  return { command, args: [...args] };
+}
+
+function run(command, args, { capture = false } = {}) {
+  const invocation = commandInvocation(command, args);
+  const result = spawnSync(invocation.command, invocation.args, {
+    encoding: "utf8",
+    env: process.env,
+    stdio: capture ? ["ignore", "pipe", "pipe"] : "inherit",
+    windowsHide: true,
+  });
+  if (result.error) throw result.error;
+  if (result.status !== 0) {
+    if (capture && result.stderr) process.stderr.write(result.stderr);
+    throw new Error(`${command} exited with status ${result.status || 1}`);
+  }
+  return capture ? result.stdout : "";
+}
+
+function requireNode20() {
+  const major = Number(process.versions.node.split(".")[0]);
+  if (!Number.isInteger(major) || major < 20) {
+    throw new Error(`Actionway development requires Node.js 20 or newer; found ${process.version}.`);
+  }
+}
+
+function pathEntries() {
+  return (process.env.PATH || "")
+    .split(delimiter)
+    .map((entry) => entry.trim())
+    .filter(Boolean)
+    .map((entry) => resolve(entry));
+}
+
+function samePath(left, right) {
+  return process.platform === "win32" ? left.toLowerCase() === right.toLowerCase() : left === right;
+}
+
+function isOnPath(directory) {
+  const target = resolve(directory);
+  return pathEntries().some((entry) => samePath(entry, target));
+}
+
+function ensureWritable(directory) {
+  try {
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    accessSync(directory, constants.W_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function existingActionwayBin() {
+  const executableNames = process.platform === "win32" ? ["actionway.cmd", "actionway.exe", "actionway"] : ["actionway"];
+  for (const directory of pathEntries()) {
+    if (executableNames.some((name) => existsSync(join(directory, name))) && ensureWritable(directory)) return directory;
+  }
+  return null;
+}
+
+function npmGlobalBin() {
+  try {
+    const prefix = run(process.platform === "win32" ? "npm.cmd" : "npm", ["prefix", "--global"], {
+      capture: true,
+    }).trim();
+    if (!prefix) return null;
+    const directory = process.platform === "win32" ? resolve(prefix) : resolve(prefix, "bin");
+    return isOnPath(directory) && ensureWritable(directory) ? directory : null;
+  } catch {
+    return null;
+  }
+}
+
+function resolveBinDir() {
+  if (process.env.ACTIONWAY_DEV_BIN_DIR?.trim()) {
+    const explicit = resolve(process.env.ACTIONWAY_DEV_BIN_DIR.trim());
+    if (!ensureWritable(explicit)) throw new Error(`Development CLI bin directory is not writable: ${explicit}`);
+    return explicit;
+  }
+  return existingActionwayBin() || npmGlobalBin() || join(homedir(), ".local", "bin");
+}
+
+function localLauncherSource() {
+  const candidates = [
+    process.env.ACTIONWAY_DEV_LAUNCHER?.trim(),
+    join(dirname(fileURLToPath(import.meta.url)), "actionway-dev-launcher.mjs"),
+    join(process.cwd(), "packages", "cli", "assets", "dev", "actionway-dev-launcher.mjs"),
+  ].filter(Boolean);
+  return candidates.find((candidate) => existsSync(resolve(candidate))) || null;
+}
+
+function fetchLauncher() {
+  const endpoint = `repos/${repository}/contents/packages/cli/assets/dev/actionway-dev-launcher.mjs?ref=${encodeURIComponent(bootstrapRef)}`;
+  const source = run(
+    "gh",
+    ["api", "-H", "Accept: application/vnd.github.raw+json", endpoint],
+    { capture: true },
+  );
+  if (!source.startsWith("#!/usr/bin/env node")) {
+    throw new Error(`GitHub did not return the Actionway development launcher from ${repository}@${bootstrapRef}.`);
+  }
+  return source;
+}
+
+function installLauncher() {
+  mkdirSync(dirname(installedLauncher), { recursive: true, mode: 0o700 });
+  const localSource = localLauncherSource();
+  if (localSource) copyFileSync(resolve(localSource), installedLauncher);
+  else writeFileSync(installedLauncher, fetchLauncher(), { mode: 0o600 });
+  run(process.execPath, ["--check", installedLauncher], { capture: true });
+}
+
+function installShim(binDir) {
+  if (!ensureWritable(binDir)) throw new Error(`Development CLI bin directory is not writable: ${binDir}`);
+  const shimPath = join(binDir, process.platform === "win32" ? "actionway-dev.cmd" : "actionway-dev");
+  if (existsSync(shimPath) && !readFileSync(shimPath, "utf8").includes(marker)) {
+    throw new Error(`Refusing to overwrite unmanaged executable: ${shimPath}`);
+  }
+  const shim =
+    process.platform === "win32"
+      ? `@echo off\r\nrem ${marker}\r\nnode "${installedLauncher}" %*\r\n`
+      : `#!/usr/bin/env node\n// ${marker}\nimport(${JSON.stringify(pathToFileURL(installedLauncher).href)});\n`;
+  writeFileSync(shimPath, shim, { mode: 0o755 });
+  if (process.platform !== "win32") chmodSync(shimPath, 0o755);
+  return shimPath;
+}
+
+function main() {
+  requireNode20();
+  run(process.platform === "win32" ? "npm.cmd" : "npm", ["--version"], { capture: true });
+  if (!process.env.ACTIONWAY_DEV_ARCHIVE?.trim()) {
+    run("gh", ["auth", "status", "--hostname", "github.com"], { capture: true });
+  }
+  installLauncher();
+  const binDir = resolveBinDir();
+  const shimPath = installShim(binDir);
+  run(process.execPath, [installedLauncher, "update"]);
+
+  process.stdout.write(`Installed ${shimPath}.\n`);
+  if (!isOnPath(binDir)) {
+    process.stdout.write(`Add ${binDir} to PATH, then open a new terminal.\n`);
+  }
+  process.stdout.write("Stable command: actionway\nDevelopment command: actionway-dev\n");
+}
+
+if (process.env.ACTIONWAY_DEV_ASSET_IMPORT_ONLY !== "1") {
+  try {
+    main();
+  } catch (error) {
+    process.stderr.write(`Actionway development installation failed: ${error instanceof Error ? error.message : String(error)}\n`);
+    process.exit(1);
+  }
+}

package/assets/skill/actionway/SKILL.md

@@ -9,6 +9,17 @@ metadata:
 
 Use the installed `actionway` CLI and its server-backed Capability Registry as the source of truth. Do not memorize a complete command catalog, Schema, provider list, or price table in this Skill.
 
+## Declare this Agent
+
+Use one invocation prefix for every Actionway command in this Agent session, including update, authentication, discovery, calls, and waits:
+
+- Codex: `actionway --agent-host=codex`
+- Claude Code: `actionway --agent-host=claude_code`
+- WorkBuddy: `actionway --agent-host=workbuddy`
+- A human directly using the CLI: `actionway` without `--agent-host`
+
+Where the instructions below show `actionway ...`, insert this Agent's `--agent-host` immediately after `actionway`. Do not persist one host in shared credentials: the same user and global CLI may be used by multiple Agents.
+
 ## Prepare
 
 1. Run Actionway commands with network access and permission to read `~/.actionway`. On Windows, use the generated `actionway.cmd` entrypoint when PowerShell policy blocks `actionway.ps1`. If setup or update fails, run `actionway.cmd doctor` on Windows or `actionway doctor` elsewhere from the host terminal and preserve its failed check IDs; do not weaken registry, proxy, CA, PATH, or PowerShell policy without user approval. If a sandboxed command reports `E_NOT_AUTHENTICATED` for an already logged-in user, rerun the same command with host permission before starting login again.

package/assets/skill/actionway-dev/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: actionway-dev
+description: Use the installed Actionway development channel to discover, inspect, price, and call capabilities against dev.actionway.ai; test confirmed calls and async jobs; or inspect the deployed dev CLI source SHA without touching the stable Actionway installation. Trigger for Actionway dev environment, staging verification, a newly merged dev deployment, or pre-production Codex testing.
+---
+
+# Actionway Dev
+
+Use only the `actionway-dev` executable. Never substitute the stable `actionway` command.
+
+## Prepare
+
+1. Run `actionway-dev update` once per Agent session. It follows public `@actionway/cli-dev@latest` from the latest successful `dev` deployment and never updates the stable `@actionway/cli` package.
+2. Run `actionway-dev status` when the user asks which source SHA is installed.
+3. Run `actionway-dev whoami`. On `E_NOT_AUTHENTICATED`, run `actionway-dev init` and ask the user only to approve browser login. Never request or expose credentials.
+
+## Discover and call
+
+1. For long-tail capabilities run `actionway-dev tools search "<intent>"`, then inspect exactly one supported result with `actionway-dev tools inspect <tool_ref>`.
+2. Match the inspected Schema exactly and call with `actionway-dev tools call <tool_ref> --input-json '<object>'`.
+3. On `confirmation_required`, present the server plan and quote. Resume only after approval with `actionway-dev tools call --resume <call_ref>`.
+4. On `accepted`, immediately run `actionway-dev wait --job-ref=<uuid>`. Reuse the same reference until terminal state; never resubmit a pending call.
+
+Use typed commands only when `actionway-dev --help` exposes an exact fit. Read command help and `--print-schema`, then run `--dry-run` before a real typed call.
+
+## Boundaries
+
+- Treat the development Gateway as the authority for Schema, price, confirmation, and results.
+- Development calls can consume development credits and real upstream vendor cost.
+- Do not run the stable CLI's updater, publish npm packages, or change production configuration.

package/assets/skill/actionway-dev/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Actionway Dev"
+  short_description: "Use the isolated Actionway development channel"
+  default_prompt: "Use $actionway-dev to test a capability against the latest Actionway development deployment."