@hcmai/cli 0.3.9 → 0.3.11

package/dist/index.js

@@ -523,8 +523,8 @@ var init_TerminalRenderer = __esm({
         }
       }
       /** 来源行（仅子代理触发，agentPath ≥2 段时显示 `↑ 来自 a › b`，对齐 Web）。 */
-      originLine(path10) {
-        const segs = path10.split(".").filter(Boolean);
+      originLine(path9) {
+        const segs = path9.split(".").filter(Boolean);
         if (segs.length < 2) return "";
         const names = segs.map((k) => agentDisplayName(k));
         return chalk.gray(`  \u2191 \u6765\u81EA ${names.join(" \u203A ")}`) + "\n";
@@ -1458,10 +1458,10 @@ function ReplApp(props) {
       });
       const t0 = Date.now();
       try {
-        const result2 = await presenter.consume(handle.events);
+        const result = await presenter.consume(handle.events);
         const stats = presenter.completionStats;
-        if (result2.status === "completed") {
-          bridge.showCompleted(Date.now() - t0, result2.traceId, convRef.current ?? "", presenter.tokenCount || void 0, stats);
+        if (result.status === "completed") {
+          bridge.showCompleted(Date.now() - t0, result.traceId, convRef.current ?? "", presenter.tokenCount || void 0, stats);
         }
         if (presenter.tokenCount) setSessionTokens((prev) => prev + presenter.tokenCount);
         if (convRef.current) {
@@ -1706,8 +1706,8 @@ function agentLabel(agentId) {
   if (/^[0-9a-f]{8}-[0-9a-f-]{27}$/i.test(agentId)) return `agent \u2026${agentId.slice(-4)}`;
   return agentDisplayName(agentId);
 }
-function originLine(path10) {
-  const segs = (path10 ?? "").split(".").filter(Boolean);
+function originLine(path9) {
+  const segs = (path9 ?? "").split(".").filter(Boolean);
   if (segs.length < 2) return null;
   return `\u6765\u81EA ${segs.map((k) => agentDisplayName(k)).join(" \u203A ")}`;
 }
@@ -2650,12 +2650,12 @@ async function queryCommand(model, args) {
     if (args.offset) dsl.offset = Number(args.offset);
     if (!dsl.limit) dsl.limit = 20;
     const client3 = HcmClient.fromAuthContext(await getActiveAuthContextFromCli(args));
-    const result2 = await client3.query(model, dsl);
+    const result = await client3.query(model, dsl);
     const fmt = args.output ?? "table";
-    const out = formatRows(result2.rows, { format: fmt });
+    const out = formatRows(result.rows, { format: fmt });
     process.stdout.write(out + "\n");
-    if (fmt === "table" && result2.total !== void 0) {
-      process.stdout.write(`Showing ${result2.rows.length} of ${result2.total} results.
+    if (fmt === "table" && result.total !== void 0) {
+      process.stdout.write(`Showing ${result.rows.length} of ${result.total} results.
 `);
     }
     process.exit(0);
@@ -2772,17 +2772,17 @@ async function actionCommand(spec, args) {
     });
     if (params) input.params = params;
     const client3 = HcmClient2.fromAuthContext(await getActiveAuthContextFromCli(args));
-    const result2 = await client3.action(model, action, input);
+    const result = await client3.action(model, action, input);
     const fmt = args.output ?? "json";
-    if (fmt !== "json" && result2.taskId) {
+    if (fmt !== "json" && result.taskId) {
       process.stdout.write(
-        `\u23F3 task created: ${result2.taskId}  (use \`hcm task ${result2.taskId}\` to follow up \u2014 coming Phase 1)
+        `\u23F3 task created: ${result.taskId}  (use \`hcm task ${result.taskId}\` to follow up \u2014 coming Phase 1)
 `
       );
     } else if (fmt !== "json") {
       process.stdout.write("\u2705 action succeeded\n");
     }
-    process.stdout.write(formatObject(result2, { format: fmt }) + "\n");
+    process.stdout.write(formatObject(result, { format: fmt }) + "\n");
     process.exit(0);
   } catch (e) {
     const err = e;
@@ -2856,11 +2856,11 @@ async function updateCommand(model, args) {
       fileFlag: "--data-file"
     });
     const client3 = HcmClient4.fromAuthContext(await getActiveAuthContextFromCli(args));
-    const result2 = await client3.update(model, args.id, data);
+    const result = await client3.update(model, args.id, data);
     const fmt = args.output ?? "json";
     if (fmt !== "json") process.stdout.write(`\u2705 ${model}#${args.id} \u5DF2\u66F4\u65B0
 `);
-    process.stdout.write(formatObject3(result2, { format: fmt }) + "\n");
+    process.stdout.write(formatObject3(result, { format: fmt }) + "\n");
     process.exit(0);
   } catch (e) {
     const err = e;
@@ -2941,11 +2941,11 @@ async function settingSetCommand(domain, args) {
       process.exit(0);
     }
     const c = await client(args);
-    const result2 = await patchSettingDomain(c.raw(), domain, items);
+    const result = await patchSettingDomain(c.raw(), domain, items);
     const fmt = args.output ?? "json";
     if (fmt !== "json") process.stdout.write(`\u2705 ${domain} \u5DF2\u66F4\u65B0 ${items.length} \u9879
 `);
-    process.stdout.write(formatObject4(result2, { format: fmt }) + "\n");
+    process.stdout.write(formatObject4(result, { format: fmt }) + "\n");
     process.exit(0);
   } catch (e) {
     fail(e, args);
@@ -2962,11 +2962,11 @@ async function settingResetCommand(domain, namespace, key, args) {
     }
     const c = await client(args);
     const revision = args.revision === void 0 ? void 0 : Number(args.revision);
-    const result2 = await resetSettingItem(c.raw(), domain, namespace, key, revision);
+    const result = await resetSettingItem(c.raw(), domain, namespace, key, revision);
     const fmt = args.output ?? "json";
     if (fmt !== "json") process.stdout.write(`\u2705 ${namespace}.${key} \u5DF2\u56DE\u843D\u5230\u9ED8\u8BA4\u503C
 `);
-    process.stdout.write(formatObject4(result2, { format: fmt }) + "\n");
+    process.stdout.write(formatObject4(result, { format: fmt }) + "\n");
     process.exit(0);
   } catch (e) {
     fail(e, args);
@@ -3059,8 +3059,8 @@ import {
   formatObject as formatObject7,
   fromAxiosError as fromAxiosError8
 } from "@hcmai/sdk";
-function collectYmlFiles(path10) {
-  if (statSync(path10).isFile()) return [path10];
+function collectYmlFiles(path9) {
+  if (statSync(path9).isFile()) return [path9];
   const out = [];
   const walk = (dir) => {
     for (const name of readdirSync(dir).sort()) {
@@ -3069,7 +3069,7 @@ function collectYmlFiles(path10) {
       else if (full.endsWith(".yml") || full.endsWith(".yaml")) out.push(full);
     }
   };
-  walk(path10);
+  walk(path9);
   return out.sort();
 }
 var DRY_RUN_CLIENT = {
@@ -3077,9 +3077,9 @@ var DRY_RUN_CLIENT = {
   create: async () => ({ id: "" }),
   update: async () => ({})
 };
-async function importCommand(path10, args) {
+async function importCommand(path9, args) {
   try {
-    const files = collectYmlFiles(path10);
+    const files = collectYmlFiles(path9);
     const fixtures = files.map(
       (f) => parseFixture(readFileSync2(f, "utf8"), relative(process.cwd(), f))
     );
@@ -3089,16 +3089,16 @@ async function importCommand(path10, args) {
       onError: args.onError === "stop" ? "stop" : "continue"
     };
     const client3 = opts.dryRun ? DRY_RUN_CLIENT : HcmClient7.fromAuthContext(await getActiveAuthContextFromCli(args));
-    const result2 = await runImport(client3, fixtures, opts);
-    if (args.report) writeFileSync(args.report, JSON.stringify(result2, null, 2));
+    const result = await runImport(client3, fixtures, opts);
+    if (args.report) writeFileSync(args.report, JSON.stringify(result, null, 2));
     const fmt = args.output ?? "json";
     const tag = opts.dryRun ? "\u{1F50D} dry-run" : "\u{1F4E6} import";
     process.stdout.write(
-      `${tag}: created=${result2.created} updated=${result2.updated} skipped=${result2.skipped} failed=${result2.failed}
+      `${tag}: created=${result.created} updated=${result.updated} skipped=${result.skipped} failed=${result.failed}
 `
     );
-    process.stdout.write(formatObject7(result2, { format: fmt }) + "\n");
-    process.exit(result2.failed > 0 ? 3 : 0);
+    process.stdout.write(formatObject7(result, { format: fmt }) + "\n");
+    process.exit(result.failed > 0 ? 3 : 0);
   } catch (e) {
     const err = e;
     if (err?.isAxiosError) exitWithError(fromAxiosError8(err, args.profile));
@@ -3389,13 +3389,13 @@ async function printConversationList(args) {
   const ctx = await getActiveAuthContextFromCli(args);
   const client3 = HcmClient10.fromAuthContext(ctx);
   const limit = parsePositiveInt(args.limit, 10, "--limit");
-  const result2 = await fetchRecentConversations(client3.raw(), limit);
+  const result = await fetchRecentConversations(client3.raw(), limit);
   const fmt = args.output ?? "text";
   if (fmt === "json") {
-    process.stdout.write(formatObject9(result2, { format: "json" }) + "\n");
+    process.stdout.write(formatObject9(result, { format: "json" }) + "\n");
     return;
   }
-  const rows = result2.rows.map((row) => ({
+  const rows = result.rows.map((row) => ({
     UPDATED: formatShortDate(row.lastActiveAt ?? row.updateTime ?? row.createTime),
     MSGS: row.messageCount ?? 0,
     TOKENS: row.totalTokens ?? 0,
@@ -3403,8 +3403,8 @@ async function printConversationList(args) {
     CONVERSATION: row.id ?? "-"
   }));
   process.stdout.write(formatRows3(rows, { format: "table" }) + "\n");
-  if (result2.total !== void 0) {
-    process.stdout.write(`Showing ${result2.rows.length} of ${result2.total} conversations.
+  if (result.total !== void 0) {
+    process.stdout.write(`Showing ${result.rows.length} of ${result.total} conversations.
 `);
   }
 }
@@ -3676,9 +3676,9 @@ async function chatCommand(prompt, args) {
       process.once("SIGINT", sigintHandler);
       const t0 = Date.now();
       try {
-        const result2 = await presenter.consume(handle.events);
+        const result = await presenter.consume(handle.events);
         const stats = presenter.completionStats;
-        renderer.showCompleted(Date.now() - t0, result2.traceId, handle.conversationId, presenter.tokenCount || void 0, {
+        renderer.showCompleted(Date.now() - t0, result.traceId, handle.conversationId, presenter.tokenCount || void 0, {
           inputTokens: stats.inputTokens,
           outputTokens: stats.outputTokens,
           toolCount: stats.toolCount,
@@ -3687,8 +3687,8 @@ async function chatCommand(prompt, args) {
         await ws.close();
         await saveConversationState2(stateKey, {
           lastConversationId: handle.conversationId,
-          lastStreamId: result2.streamId,
-          lastTraceId: result2.traceId ?? void 0,
+          lastStreamId: result.streamId,
+          lastTraceId: result.traceId ?? void 0,
           lastAgentKey: args.agent,
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
         });
@@ -3700,7 +3700,7 @@ async function chatCommand(prompt, args) {
             resolve4();
           }
         });
-        process.exit(result2.status === "interrupted" ? 130 : 0);
+        process.exit(result.status === "interrupted" ? 130 : 0);
       } catch (e) {
         process.removeListener("SIGINT", sigintHandler);
         await ws.close();
@@ -4192,10 +4192,10 @@ async function withClient(args, fn) {
   const client3 = HcmClient13.fromAuthContext(await getActiveAuthContextFromCli(args));
   return fn(client3);
 }
-function emit(result2, args, human) {
+function emit(result, args, human) {
   const fmt = args.output ?? "json";
   if (fmt !== "json") process.stdout.write(human + "\n");
-  process.stdout.write(formatObject11(result2, { format: fmt }) + "\n");
+  process.stdout.write(formatObject11(result, { format: fmt }) + "\n");
   process.exit(0);
 }
 function fail2(e, args) {
@@ -4214,20 +4214,20 @@ async function cacheStatsCommand(model, args) {
 }
 async function cacheClearCommand(model, args) {
   try {
-    const result2 = await withClient(args, (c) => clearModelCache(c.raw(), model, args.id));
-    emit(result2, args, args.id ? `\u{1F9F9} \u5DF2\u6E05 ${model}#${args.id} \u7F13\u5B58` : `\u{1F9F9} \u5DF2\u6E05 ${model} \u5168\u90E8\u5B9E\u4F53\u7F13\u5B58`);
+    const result = await withClient(args, (c) => clearModelCache(c.raw(), model, args.id));
+    emit(result, args, args.id ? `\u{1F9F9} \u5DF2\u6E05 ${model}#${args.id} \u7F13\u5B58` : `\u{1F9F9} \u5DF2\u6E05 ${model} \u5168\u90E8\u5B9E\u4F53\u7F13\u5B58`);
   } catch (e) {
     fail2(e, args);
   }
 }
 async function cacheClearMetaCommand(model, args) {
   try {
-    const result2 = await withClient(
+    const result = await withClient(
       args,
       (c) => clearMetaCache(c.raw(), model, { type: args.type, state: args.state })
     );
     const scope = args.type ? `${args.type}${args.state ? `.${args.state}` : ""}` : "\u5168\u90E8";
-    emit(result2, args, `\u{1F9F9} \u5DF2\u6E05 ${model} \u5143\u6570\u636E\u7F13\u5B58\uFF08${scope}\uFF09`);
+    emit(result, args, `\u{1F9F9} \u5DF2\u6E05 ${model} \u5143\u6570\u636E\u7F13\u5B58\uFF08${scope}\uFF09`);
   } catch (e) {
     fail2(e, args);
   }
@@ -4280,21 +4280,20 @@ async function uploadCommand(filePath, args) {
 init_exit();
 import { promises as fsp2 } from "fs";
 import os2 from "os";
-import path6 from "path";
-import { createHash as createHash4 } from "crypto";
+import path4 from "path";
+import { createHash as createHash2 } from "crypto";
 import {
   createHttpClient as createHttpClient2,
   fetchSkillCatalog,
-  fetchSkillFile,
   fetchSkillMarkdown,
   fetchSkillReference,
   resolveChironBase,
-  assertSafeSkillId as assertSafeSkillId2,
+  assertSafeSkillId,
   assertSafeReferencePath as assertSafeReferencePath2,
-  normalizeReferences as normalizeReferences2,
+  normalizeReferences,
   parseSkillRequirements as parseSkillRequirements2,
   parseSkillFrontmatter as parseSkillFrontmatter2,
-  resolveSkillInstallOrder as resolveSkillInstallOrder2,
+  resolveSkillInstallOrder,
   resolveAllSkillsInstallOrder,
   matchSkills,
   filterByStage,
@@ -4303,8 +4302,8 @@ import {
   loadEnv as loadEnv5,
   loadGlobalConfig as loadGlobalConfig6,
   resolveActiveEnv as resolveActiveEnv3,
-  CliError as CliError18,
-  CliErrorCode as CliErrorCode17
+  CliError as CliError16,
+  CliErrorCode as CliErrorCode15
 } from "@hcmai/sdk";
 
 // src/commands/skills-catalog.ts
@@ -4593,810 +4592,20 @@ async function resolveBundledClosure(targetId, dir = bundledSkillsDir()) {
   return { documents, external: [...external].sort() };
 }
 
-// src/commands/skills-sync.ts
-import { createHash as createHash2 } from "crypto";
-import { promises as fs5 } from "fs";
-import path4 from "path";
-import {
-  CliError as CliError16,
-  CliErrorCode as CliErrorCode15,
-  assertSafeSkillFilePath,
-  assertSafeSkillId,
-  normalizeReferences,
-  resolveSkillInstallOrder
-} from "@hcmai/sdk";
-async function prepareSkillDocuments(catalog, requestedSkill, fetchMarkdown, fetchFile, fetchReference) {
-  const order = resolveSkillInstallOrder(catalog, requestedSkill);
-  for (const skill of order) {
-    if (skill.actionSurface !== "cli") {
-      throw invalid(`\u6280\u80FD ${skill.id} \u5C1A\u672A\u6536\u655B\u5230 hcm CLI\uFF0C\u4E0D\u80FD\u540C\u6B65\u4E3A WorkBuddy \u6B63\u5F0F\u6267\u884C Skill`);
-    }
-  }
-  return Promise.all(
-    order.map(async (skill) => {
-      let files;
-      if (skill.files === void 0) {
-        const markdown2 = await fetchMarkdown(skill.id);
-        const content = Buffer.from(markdown2, "utf8");
-        const references = normalizeReferences(skill.references, skill.id);
-        if (references.length > 0 && !fetchReference) {
-          throw invalid(`\u6280\u80FD ${skill.id} \u58F0\u660E\u4E86 references\uFF0C\u4F46\u8C03\u7528\u65B9\u6CA1\u6709\u53C2\u8003\u6587\u4EF6\u4E0B\u8F7D\u80FD\u529B`);
-        }
-        const referenceFiles = await Promise.all(
-          references.map(async (relativePath) => {
-            const targetPath = `references/${relativePath}`;
-            assertSafeSkillFilePath(targetPath);
-            const fetched = await fetchReference(skill.id, relativePath);
-            const referenceContent = Buffer.isBuffer(fetched) ? Buffer.from(fetched) : Buffer.from(fetched, "utf8");
-            return {
-              path: targetPath,
-              content: referenceContent,
-              bytes: referenceContent.length,
-              sha256: sha2562(referenceContent)
-            };
-          })
-        );
-        files = [
-          {
-            path: "SKILL.md",
-            content,
-            bytes: content.length,
-            sha256: sha2562(content)
-          },
-          ...referenceFiles
-        ];
-      } else {
-        if (!Array.isArray(skill.files) || skill.files.length === 0) {
-          throw invalid(`\u6280\u80FD ${skill.id} \u7684 files \u76EE\u5F55\u4E3A\u7A7A`);
-        }
-        if (!fetchFile) throw invalid(`\u6280\u80FD ${skill.id} \u63D0\u4F9B\u5B8C\u6574\u76EE\u5F55\uFF0C\u4F46\u8C03\u7528\u65B9\u6CA1\u6709\u6587\u4EF6\u4E0B\u8F7D\u80FD\u529B`);
-        const seen = /* @__PURE__ */ new Set();
-        for (const file of skill.files) {
-          assertSafeSkillFilePath(file.path);
-          if (seen.has(file.path))
-            throw invalid(`\u6280\u80FD ${skill.id} \u7684 files \u5305\u542B\u91CD\u590D\u8DEF\u5F84: ${file.path}`);
-          seen.add(file.path);
-          if (!Number.isInteger(file.bytes) || file.bytes < 0 || !/^[a-f0-9]{64}$/.test(file.sha256)) {
-            throw invalid(`\u6280\u80FD ${skill.id} \u7684\u6587\u4EF6\u76EE\u5F55\u5143\u6570\u636E\u975E\u6CD5: ${file.path}`);
-          }
-        }
-        if (!seen.has("SKILL.md")) throw invalid(`\u6280\u80FD ${skill.id} \u7684\u5B8C\u6574\u76EE\u5F55\u7F3A\u5C11 SKILL.md`);
-        files = await Promise.all(
-          skill.files.map(async (file) => {
-            const content = Buffer.from(await fetchFile(skill.id, file.path));
-            if (content.length !== file.bytes) {
-              throw invalid(
-                `\u6280\u80FD ${skill.id}/${file.path} \u5B57\u8282\u6570\u4E0E\u76EE\u5F55\u4E0D\u4E00\u81F4\uFF1A\u76EE\u5F55=${file.bytes}\uFF0C\u5B9E\u9645=${content.length}`
-              );
-            }
-            const digest = sha2562(content);
-            if (digest !== file.sha256) {
-              throw invalid(`\u6280\u80FD ${skill.id}/${file.path} \u6458\u8981\u4E0E\u76EE\u5F55\u4E0D\u4E00\u81F4`);
-            }
-            return { path: file.path, content, bytes: content.length, sha256: digest };
-          })
-        );
-      }
-      const root = files.find((file) => file.path === "SKILL.md");
-      if (!root) throw invalid(`\u6280\u80FD ${skill.id} \u7684\u5B8C\u6574\u76EE\u5F55\u7F3A\u5C11 SKILL.md`);
-      const markdown = root.content.toString("utf8");
-      if (!markdown.trim()) throw invalid(`\u6280\u80FD ${skill.id} \u5185\u5BB9\u4E3A\u7A7A`);
-      validateWorkBuddyFrontmatter(markdown, skill.id);
-      const bytes = root.bytes;
-      if (Number.isFinite(skill.bytes) && skill.bytes > 0 && skill.bytes !== bytes) {
-        throw invalid(`\u6280\u80FD ${skill.id} \u5B57\u8282\u6570\u4E0E\u76EE\u5F55\u4E0D\u4E00\u81F4\uFF1A\u76EE\u5F55=${skill.bytes}\uFF0C\u5B9E\u9645=${bytes}`);
-      }
-      return { id: skill.id, markdown, bytes, sha256: root.sha256, files };
-    })
-  );
-}
-async function syncWorkBuddyProject(input) {
-  const project = path4.resolve(input.project);
-  const metaDir = path4.join(project, ".hcm-delivery");
-  const skillsDir = path4.join(project, ".codebuddy", "skills");
-  const lockPath = path4.join(metaDir, "chiron.lock.json");
-  assertSafeSkillId(input.requestedSkill);
-  validatePreparedDocuments(input.documents, input.requestedSkill);
-  validatePreparedRuntime(input.runtime);
-  await recoverInterruptedSyncs(project, metaDir, lockPath);
-  const oldLock = await readLock(lockPath);
-  const skillEntries = input.documents.flatMap(
-    (document) => document.files.map((file) => [ownedFile(document.id, file.path), file])
-  );
-  const runtimeEntries = input.runtime.files.map((file) => [file.path, file]);
-  const desiredEntries = [
-    ...skillEntries,
-    ...runtimeEntries
-  ];
-  const desiredFiles = desiredEntries.map(([file]) => file);
-  const desiredByFile = new Map(desiredEntries);
-  const oldOwned = new Set(oldLock?.ownedFiles ?? []);
-  const oldDigestByFile = lockDigests(oldLock);
-  for (const file of oldOwned) validateOwnedFile(file);
-  for (const file of desiredFiles) {
-    const absolute = path4.join(project, file);
-    const current = await readOptionalBytes(absolute);
-    if (current !== void 0 && !oldOwned.has(file)) {
-      throw invalid(`\u76EE\u6807\u6587\u4EF6\u4E0D\u5C5E\u4E8E\u4E0A\u4E00\u4EFD Chiron \u9501\uFF0C\u62D2\u7EDD\u8986\u76D6\u987E\u95EE\u6587\u4EF6\uFF1A${file}`);
-    }
-  }
-  for (const file of oldOwned) {
-    const absolute = path4.join(project, file);
-    const current = await readOptionalBytes(absolute);
-    if (current === void 0) continue;
-    const expected = oldDigestByFile.get(file);
-    if (!expected || sha2562(current) !== expected.sha256 || !await fileModeMatches(absolute, expected.mode)) {
-      throw invalid(`\u4E0A\u4E00\u4EFD\u9501\u62E5\u6709\u7684\u751F\u6210\u6587\u4EF6\u5DF2\u88AB\u4EBA\u5DE5\u4FEE\u6539\uFF0C\u62D2\u7EDD\u8986\u76D6\u6216\u6E05\u7406\uFF1A${file}`);
-    }
-  }
-  const newLock = {
-    schemaVersion: 1,
-    source: {
-      endpointOriginSha256: sha2562(normalizeEndpoint(input.endpoint)),
-      catalogPath: "/skills.json",
-      catalogSha256: sha2562(stableJson2(input.catalog))
-    },
-    selection: { requestedSkill: input.requestedSkill },
-    resolvedSkills: input.documents.map(({ id, bytes, sha256: digest, files: skillFiles }) => ({
-      id,
-      bytes,
-      sha256: digest,
-      files: skillFiles.map(({ path: filePath, bytes: fileBytes, sha256: fileSha256 }) => ({
-        path: filePath,
-        bytes: fileBytes,
-        sha256: fileSha256
-      }))
-    })),
-    runtime: {
-      capabilities: input.runtime.capabilities,
-      capabilitiesSha256: input.runtime.capabilitiesSha256,
-      launch: input.runtime.launch,
-      files: input.runtime.files.map(({ path: filePath, bytes, sha256: digest, mode }) => ({
-        path: filePath,
-        bytes,
-        sha256: digest,
-        mode
-      }))
-    },
-    ownedFiles: desiredFiles,
-    syncedAt: input.now ?? (/* @__PURE__ */ new Date()).toISOString()
-  };
-  if (oldLock && sameLockContent(oldLock, newLock) && await desiredFilesMatch(project, desiredByFile)) {
-    return result(false, input, project, skillsDir, lockPath, [], []);
-  }
-  const obsolete = [...oldOwned].filter((file) => !desiredByFile.has(file));
-  await fs5.mkdir(metaDir, { recursive: true });
-  const staging = await fs5.mkdtemp(path4.join(metaDir, ".staging-"));
-  const stagedFiles = path4.join(staging, "new");
-  const backups = path4.join(staging, "backup");
-  const stagedLock = path4.join(staging, "chiron.lock.json");
-  const journalPath = path4.join(staging, "journal.json");
-  let journalReady = false;
-  try {
-    for (const [file, preparedFile2] of desiredByFile) {
-      const staged = path4.join(stagedFiles, file);
-      await fs5.mkdir(path4.dirname(staged), { recursive: true });
-      await fs5.writeFile(
-        staged,
-        preparedFile2.content,
-        preparedFile2.mode === void 0 ? void 0 : { mode: preparedFile2.mode }
-      );
-    }
-    await fs5.writeFile(stagedLock, `${JSON.stringify(newLock, null, 2)}
-`, "utf8");
-    const affected = [.../* @__PURE__ */ new Set([...desiredFiles, ...obsolete])];
-    for (const file of affected) {
-      const target = path4.join(project, file);
-      if (!await exists(target)) continue;
-      const backup = path4.join(backups, file);
-      await fs5.mkdir(path4.dirname(backup), { recursive: true });
-      await fs5.copyFile(target, backup);
-    }
-    const oldLockExisted = await exists(lockPath);
-    if (oldLockExisted) {
-      const backupLock = path4.join(backups, ".hcm-delivery", "chiron.lock.json");
-      await fs5.mkdir(path4.dirname(backupLock), { recursive: true });
-      await fs5.copyFile(lockPath, backupLock);
-    }
-    const journal = {
-      schemaVersion: 1,
-      project,
-      affectedFiles: affected,
-      oldLockExisted
-    };
-    await fs5.writeFile(journalPath, `${JSON.stringify(journal, null, 2)}
-`, "utf8");
-    journalReady = true;
-    for (const file of desiredFiles) {
-      const target = path4.join(project, file);
-      await fs5.mkdir(path4.dirname(target), { recursive: true });
-      await fs5.rm(target, { force: true });
-      await fs5.rename(path4.join(stagedFiles, file), target);
-    }
-    for (const file of obsolete) await fs5.unlink(path4.join(project, file)).catch(ignoreMissing);
-    await fs5.rm(lockPath, { force: true });
-    await fs5.rename(stagedLock, lockPath);
-    await fs5.unlink(journalPath);
-    journalReady = false;
-  } catch (cause) {
-    if (journalReady) await recoverStaging(project, staging, lockPath);
-    throw cause;
-  } finally {
-    await fs5.rm(staging, { recursive: true, force: true });
-  }
-  return result(
-    true,
-    input,
-    project,
-    skillsDir,
-    lockPath,
-    input.documents.map((document) => document.id),
-    [...new Set(obsolete.map(idFromOwnedFile).filter((id) => id !== void 0))]
-  );
-}
-async function recoverInterruptedSyncs(project, metaDir, lockPath) {
-  let entries;
-  try {
-    entries = await fs5.readdir(metaDir, { withFileTypes: true });
-  } catch (cause) {
-    if (cause.code === "ENOENT") return;
-    throw cause;
-  }
-  for (const entry of entries) {
-    if (!entry.isDirectory() || !entry.name.startsWith(".staging-")) continue;
-    const staging = path4.join(metaDir, entry.name);
-    if (await exists(path4.join(staging, "journal.json"))) {
-      await recoverStaging(project, staging, lockPath);
-    }
-    await fs5.rm(staging, { recursive: true, force: true });
-  }
-}
-async function recoverStaging(project, staging, lockPath) {
-  const journalPath = path4.join(staging, "journal.json");
-  const journal = parseJournal(await fs5.readFile(journalPath, "utf8"), project);
-  const backups = path4.join(staging, "backup");
-  for (const file of journal.affectedFiles) {
-    const target = path4.join(project, file);
-    const backup = path4.join(backups, file);
-    if (await exists(backup)) {
-      await fs5.mkdir(path4.dirname(target), { recursive: true });
-      await fs5.rm(target, { force: true });
-      await fs5.rename(backup, target);
-    } else {
-      await fs5.rm(target, { force: true });
-    }
-  }
-  const backupLock = path4.join(backups, ".hcm-delivery", "chiron.lock.json");
-  if (journal.oldLockExisted) {
-    if (!await exists(backupLock)) throw invalid(`\u540C\u6B65\u6062\u590D\u7F3A\u5C11\u65E7\u9501\u5907\u4EFD\uFF1A${backupLock}`);
-    await fs5.mkdir(path4.dirname(lockPath), { recursive: true });
-    await fs5.rm(lockPath, { force: true });
-    await fs5.rename(backupLock, lockPath);
-  } else {
-    await fs5.rm(lockPath, { force: true });
-  }
-}
-function parseJournal(content, project) {
-  let journal;
-  try {
-    journal = JSON.parse(content);
-  } catch (cause) {
-    throw new CliError16({
-      code: CliErrorCode15.CONFIG_PARSE_ERROR,
-      message: "Chiron \u540C\u6B65\u6062\u590D\u65E5\u5FD7\u635F\u574F",
-      cause
-    });
-  }
-  if (journal.schemaVersion !== 1 || journal.project !== project || !Array.isArray(journal.affectedFiles) || typeof journal.oldLockExisted !== "boolean") {
-    throw invalid("Chiron \u540C\u6B65\u6062\u590D\u65E5\u5FD7\u5408\u540C\u4E0D\u5339\u914D\uFF0C\u62D2\u7EDD\u731C\u6D4B\u6062\u590D\u8303\u56F4");
-  }
-  for (const file of journal.affectedFiles) validateOwnedFile(file);
-  return journal;
-}
-function validatePreparedDocuments(documents, requestedSkill) {
-  const seen = /* @__PURE__ */ new Set();
-  for (const document of documents) {
-    assertSafeSkillId(document.id);
-    if (seen.has(document.id)) throw invalid(`\u540C\u6B65\u95ED\u5305\u5305\u542B\u91CD\u590D\u6280\u80FD: ${document.id}`);
-    seen.add(document.id);
-    if (!document.markdown.trim()) throw invalid(`\u6280\u80FD ${document.id} \u5185\u5BB9\u4E3A\u7A7A`);
-    const paths = /* @__PURE__ */ new Set();
-    for (const file of document.files) {
-      assertSafeSkillFilePath(file.path);
-      if (paths.has(file.path)) throw invalid(`\u6280\u80FD ${document.id} \u5305\u542B\u91CD\u590D\u6587\u4EF6: ${file.path}`);
-      paths.add(file.path);
-      if (file.content.length !== file.bytes || sha2562(file.content) !== file.sha256) {
-        throw invalid(`\u6280\u80FD ${document.id}/${file.path} \u7684\u5DF2\u51C6\u5907\u5185\u5BB9\u6458\u8981\u4E0D\u4E00\u81F4`);
-      }
-    }
-    const root = document.files.find((file) => file.path === "SKILL.md");
-    if (!root || !root.content.equals(Buffer.from(document.markdown, "utf8")) || root.bytes !== document.bytes || root.sha256 !== document.sha256) {
-      throw invalid(`\u6280\u80FD ${document.id} \u7684\u5DF2\u51C6\u5907\u5185\u5BB9\u6458\u8981\u4E0D\u4E00\u81F4`);
-    }
-  }
-  if (!seen.has(requestedSkill)) throw invalid(`\u540C\u6B65\u95ED\u5305\u4E0D\u5305\u542B\u76EE\u6807\u6280\u80FD: ${requestedSkill}`);
-}
-function validatePreparedRuntime(runtime) {
-  if (!Array.isArray(runtime.capabilities) || runtime.capabilities.length === 0) {
-    throw invalid("WorkBuddy CLI \u80FD\u529B\u96C6\u5408\u4E3A\u7A7A");
-  }
-  const capabilities = /* @__PURE__ */ new Set();
-  for (const capability of runtime.capabilities) {
-    if (!/^[a-z0-9]+(?:[.-][a-z0-9]+)*$/.test(capability) || capabilities.has(capability)) {
-      throw invalid(`WorkBuddy CLI \u80FD\u529B\u6807\u8BC6\u975E\u6CD5\u6216\u91CD\u590D\uFF1A${capability}`);
-    }
-    capabilities.add(capability);
-  }
-  if (!validDigest(runtime.capabilitiesSha256) || runtime.capabilitiesSha256 !== sha2562(`${runtime.capabilities.join("\n")}
-`)) {
-    throw invalid("WorkBuddy CLI \u80FD\u529B\u6458\u8981\u4E0D\u4E00\u81F4");
-  }
-  if (!validDigest(runtime.launch.executableSha256)) {
-    throw invalid("WorkBuddy CLI \u53EF\u6267\u884C\u6587\u4EF6\u6458\u8981\u975E\u6CD5");
-  }
-  if (runtime.launch.kind === "node-entry" && !validDigest(runtime.launch.entrySha256)) {
-    throw invalid("WorkBuddy CLI \u5165\u53E3\u6458\u8981\u975E\u6CD5");
-  }
-  if (!Array.isArray(runtime.files) || runtime.files.length !== 2) {
-    throw invalid("WorkBuddy \u8FD0\u884C\u5165\u53E3\u5FC5\u987B\u540C\u65F6\u5305\u542B Unix \u4E0E Windows \u6587\u4EF6");
-  }
-  const files = /* @__PURE__ */ new Set();
-  for (const file of runtime.files) {
-    validateRuntimeFile(file);
-    if (files.has(file.path)) throw invalid(`WorkBuddy \u8FD0\u884C\u5165\u53E3\u91CD\u590D\uFF1A${file.path}`);
-    files.add(file.path);
-  }
-  if (!files.has(".hcm-delivery/bin/hcm") || !files.has(".hcm-delivery/bin/hcm.cmd")) {
-    throw invalid("WorkBuddy \u8FD0\u884C\u5165\u53E3\u5408\u540C\u4E0D\u5B8C\u6574");
-  }
-}
-function validateRuntimeFile(file) {
-  validateOwnedFile(file.path);
-  if (file.content.length !== file.bytes || sha2562(file.content) !== file.sha256 || !Number.isInteger(file.mode) || file.mode < 0 || file.mode > 511) {
-    throw invalid(`WorkBuddy \u8FD0\u884C\u5165\u53E3\u6458\u8981\u6216\u6743\u9650\u4E0D\u4E00\u81F4\uFF1A${file.path}`);
-  }
-}
-function validateWorkBuddyFrontmatter(markdown, skillId) {
-  const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(markdown);
-  if (!match) throw invalid(`\u6280\u80FD ${skillId} \u7F3A\u5C11 YAML frontmatter`);
-  const frontmatter = match[1] ?? "";
-  const name = /^name:\s*['"]?([^'"\s]+)['"]?\s*$/m.exec(frontmatter)?.[1];
-  const description = /^description:\s*(.+)$/m.exec(frontmatter)?.[1]?.trim();
-  if (name !== skillId) throw invalid(`\u6280\u80FD ${skillId} \u7684 frontmatter name \u4E0D\u4E00\u81F4`);
-  if (!description) throw invalid(`\u6280\u80FD ${skillId} \u7F3A\u5C11 description\uFF0CWorkBuddy \u65E0\u6CD5\u53D1\u73B0`);
-}
-async function readLock(lockPath) {
-  const content = await readOptional(lockPath);
-  if (content === void 0) return void 0;
-  try {
-    const lock = JSON.parse(content);
-    if (lock.schemaVersion !== 1 || !lock.source || !lock.selection?.requestedSkill || !Array.isArray(lock.resolvedSkills) || !Array.isArray(lock.ownedFiles)) {
-      throw new Error("schema mismatch");
-    }
-    assertSafeSkillId(lock.selection.requestedSkill);
-    for (const skill of lock.resolvedSkills) {
-      assertSafeSkillId(skill.id);
-      if (!Number.isInteger(skill.bytes) || skill.bytes < 0 || !/^[a-f0-9]{64}$/.test(skill.sha256)) {
-        throw new Error("invalid skill digest");
-      }
-      if (skill.files !== void 0) {
-        if (!Array.isArray(skill.files) || skill.files.length === 0)
-          throw new Error("invalid files");
-        const seen = /* @__PURE__ */ new Set();
-        for (const file of skill.files) {
-          assertSafeSkillFilePath(file.path);
-          if (seen.has(file.path) || !Number.isInteger(file.bytes) || file.bytes < 0 || !/^[a-f0-9]{64}$/.test(file.sha256)) {
-            throw new Error("invalid file digest");
-          }
-          seen.add(file.path);
-        }
-        if (!seen.has("SKILL.md")) throw new Error("missing SKILL.md");
-      }
-    }
-    if (lock.runtime !== void 0) validateLockedRuntime(lock.runtime);
-    for (const file of lock.ownedFiles) validateOwnedFile(file);
-    return lock;
-  } catch (cause) {
-    throw new CliError16({
-      code: CliErrorCode15.CONFIG_PARSE_ERROR,
-      message: `Chiron \u9501\u6587\u4EF6\u635F\u574F\uFF0C\u62D2\u7EDD\u731C\u6D4B\u6587\u4EF6\u6240\u6709\u6743\uFF1A${lockPath}`,
-      cause
-    });
-  }
-}
-function validateLockedRuntime(runtime) {
-  if (!Array.isArray(runtime.capabilities) || runtime.capabilities.length === 0 || !validDigest(runtime.capabilitiesSha256) || runtime.capabilitiesSha256 !== sha2562(`${runtime.capabilities.join("\n")}
-`) || !runtime.launch || !validDigest(runtime.launch.executableSha256) || !Array.isArray(runtime.files) || runtime.files.length !== 2) {
-    throw new Error("invalid runtime");
-  }
-  if (runtime.launch.kind === "node-entry") {
-    if (!validDigest(runtime.launch.entrySha256)) throw new Error("invalid runtime entry");
-  } else if (runtime.launch.kind !== "executable") {
-    throw new Error("invalid runtime launch kind");
-  }
-  const capabilities = /* @__PURE__ */ new Set();
-  for (const capability of runtime.capabilities) {
-    if (!/^[a-z0-9]+(?:[.-][a-z0-9]+)*$/.test(capability) || capabilities.has(capability)) {
-      throw new Error("invalid runtime capability");
-    }
-    capabilities.add(capability);
-  }
-  const files = /* @__PURE__ */ new Set();
-  for (const file of runtime.files) {
-    validateOwnedFile(file.path);
-    if (files.has(file.path) || !Number.isInteger(file.bytes) || file.bytes < 0 || !validDigest(file.sha256) || !Number.isInteger(file.mode) || file.mode < 0 || file.mode > 511) {
-      throw new Error("invalid runtime file");
-    }
-    files.add(file.path);
-  }
-  if (!files.has(".hcm-delivery/bin/hcm") || !files.has(".hcm-delivery/bin/hcm.cmd")) {
-    throw new Error("missing runtime file");
-  }
-}
-function sameLockContent(left, right) {
-  const withoutTime = (lock) => ({ ...lock, syncedAt: void 0 });
-  return stableJson2(withoutTime(left)) === stableJson2(withoutTime(right));
-}
-async function desiredFilesMatch(project, desired) {
-  for (const [file, preparedFile2] of desired) {
-    const absolute = path4.join(project, file);
-    const current = await readOptionalBytes(absolute);
-    if (current === void 0 || sha2562(current) !== preparedFile2.sha256 || !await fileModeMatches(absolute, preparedFile2.mode)) {
-      return false;
-    }
-  }
-  return true;
+// src/commands/skills.ts
+var SKILLS_STATE_FILE = ".hcm-skills.json";
+async function sha256File(file) {
+  return createHash2("sha256").update(await fsp2.readFile(file)).digest("hex");
 }
-function result(changed, input, project, skillsDir, lockPath, installed, removed) {
+async function currentSkillsRuntimeLaunch() {
+  const entry = process.argv[1];
+  if (!entry) throw invalid("\u65E0\u6CD5\u89E3\u6790\u5F53\u524D CLI entry");
   return {
-    changed,
-    requestedSkill: input.requestedSkill,
-    resolvedSkills: input.documents.map((document) => document.id),
-    project,
-    skillsDir,
-    lockPath,
-    runnerPath: path4.join(project, ".hcm-delivery", "bin", "hcm"),
-    capabilitiesSha256: input.runtime.capabilitiesSha256,
-    installed,
-    removed
-  };
-}
-function ownedFile(id, relativePath = "SKILL.md") {
-  assertSafeSkillId(id);
-  assertSafeSkillFilePath(relativePath);
-  return `.codebuddy/skills/${id}/${relativePath}`;
-}
-function idFromOwnedFile(file) {
-  validateOwnedFile(file);
-  if (!file.startsWith(".codebuddy/skills/")) return void 0;
-  return file.split("/")[2] ?? "";
-}
-function validateOwnedFile(file) {
-  if (file === ".hcm-delivery/bin/hcm" || file === ".hcm-delivery/bin/hcm.cmd") return;
-  const match = /^\.codebuddy\/skills\/([a-z0-9][a-z0-9-]{0,63})\/(.+)$/.exec(file);
-  if (!match) throw invalid(`\u9501\u6587\u4EF6\u5305\u542B\u975E\u6CD5\u6240\u6709\u6743\u8DEF\u5F84\uFF1A${file}`);
-  const id = match[1];
-  const relativePath = match[2];
-  if (!id || !relativePath) throw invalid(`\u9501\u6587\u4EF6\u5305\u542B\u975E\u6CD5\u6240\u6709\u6743\u8DEF\u5F84\uFF1A${file}`);
-  assertSafeSkillId(id);
-  try {
-    assertSafeSkillFilePath(relativePath);
-  } catch {
-    throw invalid(`\u9501\u6587\u4EF6\u5305\u542B\u975E\u6CD5\u6240\u6709\u6743\u8DEF\u5F84\uFF1A${file}`);
-  }
-}
-function normalizeEndpoint(endpoint) {
-  let url;
-  try {
-    url = new URL(endpoint);
-  } catch (cause) {
-    throw new CliError16({
-      code: CliErrorCode15.INVALID_ARGUMENT,
-      message: `\u975E\u6CD5 endpoint\uFF1A${endpoint}`,
-      cause
-    });
-  }
-  url.username = "";
-  url.password = "";
-  url.search = "";
-  url.hash = "";
-  url.pathname = url.pathname.replace(/\/+$/, "");
-  return url.toString().replace(/\/$/, "");
-}
-function sha2562(value) {
-  return createHash2("sha256").update(value).digest("hex");
-}
-function stableJson2(value) {
-  if (Array.isArray(value)) return `[${value.map(stableJson2).join(",")}]`;
-  if (value && typeof value === "object") {
-    const entries = Object.entries(value).filter(([, item]) => item !== void 0).sort(([left], [right]) => left.localeCompare(right));
-    return `{${entries.map(([key, item]) => `${JSON.stringify(key)}:${stableJson2(item)}`).join(",")}}`;
-  }
-  return JSON.stringify(value);
-}
-async function readOptional(file) {
-  try {
-    return await fs5.readFile(file, "utf8");
-  } catch (cause) {
-    if (cause.code === "ENOENT") return void 0;
-    throw cause;
-  }
-}
-async function readOptionalBytes(file) {
-  try {
-    return await fs5.readFile(file);
-  } catch (cause) {
-    if (cause.code === "ENOENT") return void 0;
-    throw cause;
-  }
-}
-async function exists(file) {
-  try {
-    await fs5.access(file);
-    return true;
-  } catch (cause) {
-    if (cause.code === "ENOENT") return false;
-    throw cause;
-  }
-}
-function lockDigests(lock) {
-  const digests = /* @__PURE__ */ new Map();
-  for (const skill of lock?.resolvedSkills ?? []) {
-    if (skill.files === void 0) {
-      digests.set(ownedFile(skill.id), { sha256: skill.sha256 });
-      continue;
-    }
-    for (const file of skill.files) {
-      digests.set(ownedFile(skill.id, file.path), { sha256: file.sha256 });
-    }
-  }
-  for (const file of lock?.runtime?.files ?? []) {
-    digests.set(file.path, { sha256: file.sha256, mode: file.mode });
-  }
-  return digests;
-}
-async function fileModeMatches(file, expected) {
-  if (expected === void 0 || process.platform === "win32") return true;
-  const stat = await fs5.stat(file);
-  return (stat.mode & 511) === expected;
-}
-function validDigest(value) {
-  return typeof value === "string" && /^[a-f0-9]{64}$/.test(value);
-}
-function ignoreMissing(cause) {
-  if (cause.code !== "ENOENT") throw cause;
-}
-function invalid(message) {
-  return new CliError16({ code: CliErrorCode15.INVALID_ARGUMENT, message });
-}
-
-// src/commands/skills-runtime.ts
-import { execFile } from "child_process";
-import { createHash as createHash3 } from "crypto";
-import { createReadStream, promises as fs6 } from "fs";
-import path5 from "path";
-import { promisify } from "util";
-import { CliError as CliError17, CliErrorCode as CliErrorCode16 } from "@hcmai/sdk";
-var execFileAsync = promisify(execFile);
-var REQUIRED_CAPABILITIES = [
-  "hcm.help.skills",
-  "hcm.skills.help.sync",
-  "hcm.skills.sync.option.project",
-  "hcm.skills.sync.option.target"
-];
-async function prepareWorkBuddyRuntime(input = {}) {
-  const candidate = input.candidate?.trim() || input.currentEntry || process.argv[1];
-  if (!candidate) throw invalid2("\u65E0\u6CD5\u89E3\u6790\u5F53\u524D HCM CLI \u5165\u53E3\uFF1B\u8BF7\u4F20 --cli <path>");
-  const launch = await resolveLaunch(candidate, input.nodeExecutable ?? process.execPath);
-  const launchTarget = launch.kind === "node-entry" ? launch.entry : launch.executable;
-  for (const forbidden2 of input.forbiddenCandidatePaths ?? []) {
-    if (await comparablePath(forbidden2) === launchTarget) {
-      throw invalid2("\u5019\u9009 HCM CLI \u4E0D\u80FD\u6307\u5411\u5F85\u751F\u6210\u7684\u9879\u76EE\u7A33\u5B9A\u5165\u53E3");
-    }
-  }
-  if (!(input.currentEntryHasRequiredCapabilities && !input.candidate?.trim())) {
-    const beforeProbe = await launchIdentity(launch);
-    const syncHelp = await runProbe(launch, ["skills", "sync", "--help"], input.timeoutMs).catch(
-      () => ""
-    );
-    const missing = [];
-    if (!/\bhcm\s+skills\s+sync\b/.test(syncHelp)) {
-      missing.push(REQUIRED_CAPABILITIES[0], REQUIRED_CAPABILITIES[1]);
-    }
-    if (!/--project(?:\s|=|<|\[|$)/.test(syncHelp)) missing.push(REQUIRED_CAPABILITIES[2]);
-    if (!/--target(?:\s|=|<|\[|$)/.test(syncHelp)) missing.push(REQUIRED_CAPABILITIES[3]);
-    if (missing.length > 0) {
-      throw invalid2(`\u5019\u9009 HCM CLI \u7F3A\u5C11 WorkBuddy \u6240\u9700\u80FD\u529B\uFF1A${missing.join(", ")}`);
-    }
-    if (await launchIdentity(launch) !== beforeProbe) {
-      throw invalid2("\u5019\u9009 HCM CLI \u5728\u80FD\u529B\u63A2\u9488\u671F\u95F4\u53D1\u751F\u53D8\u5316\uFF0C\u8BF7\u91CD\u8BD5\u540C\u6B65");
-    }
-  }
-  const capabilities = [...REQUIRED_CAPABILITIES];
-  const capabilitiesSha256 = sha2563(`${capabilities.join("\n")}
-`);
-  const executableSha256 = await sha256File(launch.executable);
-  const launchRecord = launch.kind === "node-entry" ? {
     kind: "node-entry",
-    executableSha256,
-    entrySha256: await sha256File(launch.entry)
-  } : { kind: "executable", executableSha256 };
-  const unixContent = Buffer.from(unixLauncher(launch), "utf8");
-  const windowsContent = Buffer.from(windowsLauncher(launch), "utf8");
-  return {
-    capabilities,
-    capabilitiesSha256,
-    launch: launchRecord,
-    files: [
-      preparedFile(".hcm-delivery/bin/hcm", unixContent, 493),
-      preparedFile(".hcm-delivery/bin/hcm.cmd", windowsContent, 420)
-    ]
-  };
-}
-async function resolveLaunch(candidate, nodeExecutable) {
-  const requested = path5.resolve(candidate);
-  const resolvedCandidate = await realFile(requested, "\u5019\u9009 HCM CLI");
-  const header = (await readPrefix(resolvedCandidate, 256)).toString("utf8");
-  const nodeEntry = /^(?:#![^\r\n]*\bnode\b)|\.(?:c|m)?js$/i.test(
-    header.startsWith("#!") ? header.split(/\r?\n/, 1)[0] ?? "" : resolvedCandidate
-  );
-  if (nodeEntry) {
-    return {
-      kind: "node-entry",
-      executable: await realFile(path5.resolve(nodeExecutable), "Node \u53EF\u6267\u884C\u6587\u4EF6"),
-      entry: resolvedCandidate
-    };
-  }
-  return { kind: "executable", executable: resolvedCandidate };
-}
-async function realFile(file, label) {
-  try {
-    const resolved = await fs6.realpath(file);
-    const stat = await fs6.stat(resolved);
-    if (!stat.isFile()) throw new Error("not a regular file");
-    return resolved;
-  } catch (cause) {
-    throw new CliError17({
-      code: CliErrorCode16.INVALID_ARGUMENT,
-      message: `${label}\u4E0D\u53EF\u7528\uFF1A${file}`,
-      cause
-    });
-  }
-}
-async function comparablePath(file) {
-  const absolute = path5.resolve(file);
-  return fs6.realpath(absolute).catch(() => absolute);
-}
-async function launchIdentity(launch) {
-  const files = launch.kind === "node-entry" ? [launch.executable, launch.entry] : [launch.executable];
-  const identities = await Promise.all(
-    files.map(async (file) => {
-      const stat = await fs6.stat(file, { bigint: true });
-      return [file, stat.dev, stat.ino, stat.size, stat.mtimeNs, stat.ctimeNs].map(String).join("\0");
-    })
-  );
-  return identities.join("\n");
-}
-async function readPrefix(file, bytes) {
-  const handle = await fs6.open(file, "r");
-  try {
-    const buffer = Buffer.alloc(bytes);
-    const result2 = await handle.read(buffer, 0, bytes, 0);
-    return buffer.subarray(0, result2.bytesRead);
-  } finally {
-    await handle.close();
-  }
-}
-async function runProbe(launch, args, timeoutMs = 5e3) {
-  const command = launch.executable;
-  const commandArgs = launch.kind === "node-entry" ? [launch.entry, ...args] : args;
-  const env2 = {
-    ...process.env,
-    CI: "1",
-    NO_COLOR: "1",
-    HCM_RUNTIME_PROBE: "1"
+    executableSha256: await sha256File(process.execPath),
+    entrySha256: await sha256File(entry)
   };
-  const nodeOptions = normalizeWorkBuddyNodeOptions(env2.NODE_OPTIONS);
-  if (nodeOptions === void 0) delete env2.NODE_OPTIONS;
-  else env2.NODE_OPTIONS = nodeOptions;
-  try {
-    const { stdout, stderr } = await execFileAsync(command, commandArgs, {
-      encoding: "utf8",
-      timeout: timeoutMs,
-      maxBuffer: 256 * 1024,
-      windowsHide: true,
-      env: env2
-    });
-    return `${stdout}
-${stderr}`;
-  } catch (cause) {
-    throw new CliError17({
-      code: CliErrorCode16.INVALID_ARGUMENT,
-      message: `\u5019\u9009 HCM CLI \u80FD\u529B\u63A2\u9488\u5931\u8D25\uFF1Ahcm ${args.join(" ")}`,
-      cause
-    });
-  }
-}
-function unixLauncher(launch) {
-  const command = shellQuote(launch.executable);
-  const entry = launch.kind === "node-entry" ? ` ${shellQuote(launch.entry)}` : "";
-  return `#!/bin/sh
-set -eu
-
-# WorkBuddy on macOS may inject --use-system-ca. Node can then spend minutes
-# evaluating the Keychain when a short-lived CLI process exits. Preserve every
-# other host option (including safety --require hooks) and change only this CA mode.
-wb_node_options="\${NODE_OPTIONS-}"
-if [ "$(uname -s 2>/dev/null || printf '%s' unknown)" = 'Darwin' ] &&   printf '%s
-' "$wb_node_options" | grep -Eq '(^|[[:space:]])--use-system-ca([[:space:]]|$)'; then
-  while printf '%s
-' "$wb_node_options" | grep -Eq '(^|[[:space:]])--use-system-ca([[:space:]]|$)'; do
-    wb_next_options="$(printf '%s
-' "$wb_node_options" | sed -E 's/(^|[[:space:]])--use-system-ca([[:space:]]|$)/\\1\\2/g')"
-    [ "$wb_next_options" != "$wb_node_options" ] || break
-    wb_node_options="$wb_next_options"
-  done
-  if ! printf '%s
-' "$wb_node_options" | grep -Eq '(^|[[:space:]])--use-bundled-ca([[:space:]]|$)'; then
-    wb_node_options="\${wb_node_options:+$wb_node_options }--use-bundled-ca"
-  fi
-  NODE_OPTIONS="$wb_node_options"
-  export NODE_OPTIONS
-fi
-
-exec ${command}${entry} "$@"
-`;
-}
-function normalizeWorkBuddyNodeOptions(value, platform = process.platform) {
-  if (platform !== "darwin" || value === void 0) return value;
-  const systemCa = /(^|[\t\n\r ])--use-system-ca(?=$|[\t\n\r ])/;
-  if (!systemCa.test(value)) return value;
-  let normalized = value;
-  while (systemCa.test(normalized)) normalized = normalized.replace(systemCa, "$1");
-  normalized = normalized.trim();
-  const bundledCa = /(^|[\t\n\r ])--use-bundled-ca(?=$|[\t\n\r ])/;
-  if (!bundledCa.test(normalized)) {
-    normalized = `${normalized}${normalized ? " " : ""}--use-bundled-ca`;
-  }
-  return normalized;
-}
-function windowsLauncher(launch) {
-  const command = cmdQuote(launch.executable);
-  const entry = launch.kind === "node-entry" ? ` ${cmdQuote(launch.entry)}` : "";
-  return `@echo off\r
-${command}${entry} %*\r
-`;
-}
-function shellQuote(value) {
-  if (/[\r\n\0]/.test(value)) throw invalid2("CLI \u542F\u52A8\u8DEF\u5F84\u5305\u542B\u975E\u6CD5\u63A7\u5236\u5B57\u7B26");
-  return `'${value.replace(/'/g, `'"'"'`)}'`;
-}
-function cmdQuote(value) {
-  if (/[\r\n\0"]/g.test(value)) throw invalid2("CLI \u542F\u52A8\u8DEF\u5F84\u5305\u542B\u975E\u6CD5\u63A7\u5236\u5B57\u7B26");
-  return `"${value.replace(/%/g, "%%")}"`;
 }
-function preparedFile(filePath, content, mode) {
-  return { path: filePath, content, bytes: content.length, sha256: sha2563(content), mode };
-}
-async function sha256File(file) {
-  const hash = createHash3("sha256");
-  await new Promise((resolve4, reject) => {
-    const stream = createReadStream(file);
-    stream.on("data", (chunk) => hash.update(chunk));
-    stream.on("error", reject);
-    stream.on("end", resolve4);
-  });
-  return hash.digest("hex");
-}
-function sha2563(value) {
-  return createHash3("sha256").update(value).digest("hex");
-}
-function invalid2(message) {
-  return new CliError17({ code: CliErrorCode16.INVALID_ARGUMENT, message });
-}
-
-// src/commands/skills.ts
-var SKILLS_STATE_FILE = ".hcm-skills.json";
 function migrateSkillsState(state) {
   const skills2 = {};
   for (const [id, record] of Object.entries(state.skills ?? {})) {
@@ -5409,8 +4618,8 @@ function migrateSkillsState(state) {
   }
   return { ...state, skills: skills2 };
 }
-function sha2564(text) {
-  return createHash4("sha256").update(text, "utf8").digest("hex");
+function sha2562(text) {
+  return createHash2("sha256").update(text, "utf8").digest("hex");
 }
 async function resolveEndpoint(args) {
   if (args.endpoint) return args.endpoint.replace(/\/+$/, "");
@@ -5418,35 +4627,35 @@ async function resolveEndpoint(args) {
   const envName = resolveActiveEnv3({ envFlag: args.env }, process.env, g);
   const env2 = await loadEnv5(envName).catch(() => null);
   if (!env2?.endpoint) {
-    throw new CliError18({
-      code: CliErrorCode17.MISSING_FLAG,
+    throw new CliError16({
+      code: CliErrorCode15.MISSING_FLAG,
       message: "\u672A\u89E3\u6790\u5230 endpoint \u2014\u2014 \u4F20 --endpoint <url>\uFF0C\u6216\u5148 `hcm env add <name> --endpoint <url>`\u3002\uFF08\u6280\u80FD\u5E93\u514D\u8BA4\u8BC1\uFF0C\u4E0D\u9700\u8981\u5148 login\uFF09"
     });
   }
   return env2.endpoint.replace(/\/+$/, "");
 }
-function normalizeEndpoint2(endpoint) {
+function normalizeEndpoint(endpoint) {
   return endpoint.replace(/\/+$/, "");
 }
 function decideTrackedEndpoint(options) {
   const { explicit } = options;
-  const current = options.current ? normalizeEndpoint2(options.current) : void 0;
-  const recorded = options.recorded ? normalizeEndpoint2(options.recorded) : void 0;
+  const current = options.current ? normalizeEndpoint(options.current) : void 0;
+  const recorded = options.recorded ? normalizeEndpoint(options.recorded) : void 0;
   if (explicit) {
-    if (!current) throw invalid3("\u672A\u89E3\u6790\u5230 endpoint \u2014\u2014 \u4F20 --endpoint <url>\uFF0C\u6216\u7528 --env <name> \u6307\u4E00\u4E2A\u914D\u597D\u7684\u73AF\u5883");
+    if (!current) throw invalid("\u672A\u89E3\u6790\u5230 endpoint \u2014\u2014 \u4F20 --endpoint <url>\uFF0C\u6216\u7528 --env <name> \u6307\u4E00\u4E2A\u914D\u597D\u7684\u73AF\u5883");
     return current;
   }
   if (!recorded) {
     if (!current) {
-      throw new CliError18({
-        code: CliErrorCode17.MISSING_FLAG,
+      throw new CliError16({
+        code: CliErrorCode15.MISSING_FLAG,
         message: "\u672A\u89E3\u6790\u5230 endpoint \u2014\u2014 \u4F20 --endpoint <url>\uFF0C\u6216\u5148 `hcm env add <name> --endpoint <url>`\u3002\uFF08\u6280\u80FD\u5E93\u514D\u8BA4\u8BC1\uFF0C\u4E0D\u9700\u8981\u5148 login\uFF09"
       });
     }
     return current;
   }
   if (!current || current === recorded) return recorded;
-  throw invalid3(
+  throw invalid(
     `\u8FD9\u4E2A\u76EE\u5F55\u7684\u6280\u80FD\u88C5\u81EA ${recorded}\uFF0C\u5F53\u524D env \u6307\u5411 ${current} \u2014\u2014 \u4E0D\u662F\u540C\u4E00\u4E2A\u73AF\u5883\u3002
 \u6280\u80FD\u968F\u4EA7\u54C1\u7248\u672C\u8D70\uFF0C\u8DE8\u73AF\u5883\u5347\u7EA7\u4F1A\u62FF\u53E6\u4E00\u4E2A\u73AF\u5883\u7684\u7248\u672C\u76D6\u6389\u73B0\u5728\u8FD9\u4EFD\uFF0C\u4E14\u4E0D\u4F1A\u6709\u4EFB\u4F55\u63D0\u793A\u3002
 \u660E\u8BF4\u8981\u54EA\u4E2A\uFF1A
@@ -5454,7 +4663,7 @@ function decideTrackedEndpoint(options) {
   \xB7 \u6539\u8DDF\u5F53\u524D\u8FD9\u4E2A           \u2192  \u52A0 --endpoint ${current}\uFF08\u6765\u6E90\u4F1A\u6539\u6210\u5B83\uFF0C\u4E4B\u540E\u4E0D\u7528\u518D\u5E26\uFF09`
   );
 }
-async function exists2(target) {
+async function exists(target) {
   try {
     await fsp2.stat(target);
     return true;
@@ -5463,25 +4672,25 @@ async function exists2(target) {
   }
 }
 async function detectTarget(cwd) {
-  if (await exists2(path6.join(cwd, ".claude"))) return "claude";
-  if (await exists2(path6.join(cwd, "AGENTS.md"))) return "codex";
-  if (await exists2(path6.join(cwd, ".codex"))) return "codex";
+  if (await exists(path4.join(cwd, ".claude"))) return "claude";
+  if (await exists(path4.join(cwd, "AGENTS.md"))) return "codex";
+  if (await exists(path4.join(cwd, ".codex"))) return "codex";
   return void 0;
 }
 async function resolveInstallLayout(args, cwd = process.cwd()) {
   const requested = args.target && args.target !== "auto" ? args.target : void 0;
   const target = requested ?? await detectTarget(cwd) ?? "claude";
   if (target === "codex") {
-    const root = args.global ? path6.join(os2.homedir(), ".codex") : cwd;
+    const root = args.global ? path4.join(os2.homedir(), ".codex") : cwd;
     return {
       target,
-      baseDir: args.dir ? path6.resolve(args.dir) : path6.join(root, "hcm-skills"),
-      agentsFile: path6.join(root, "AGENTS.md")
+      baseDir: args.dir ? path4.resolve(args.dir) : path4.join(root, "hcm-skills"),
+      agentsFile: path4.join(root, "AGENTS.md")
     };
   }
   return {
     target,
-    baseDir: args.dir ? path6.resolve(args.dir) : args.global ? path6.join(os2.homedir(), ".claude", "skills") : path6.join(cwd, ".claude", "skills")
+    baseDir: args.dir ? path4.resolve(args.dir) : args.global ? path4.join(os2.homedir(), ".claude", "skills") : path4.join(cwd, ".claude", "skills")
   };
 }
 async function chironClient(args) {
@@ -5518,8 +4727,8 @@ async function skillsListCommand(keyword, args) {
     const catalog = buildUnifiedCatalog({ source, chironManifest: manifest2, bundled, cliVersion: CLI_VERSION });
     const conflicts = detectIdConflicts(catalog);
     if (conflicts.ids.length > 0) {
-      throw new CliError18({
-        code: CliErrorCode17.SKILL_ID_CONFLICT,
+      throw new CliError16({
+        code: CliErrorCode15.SKILL_ID_CONFLICT,
         message: conflictMessage(conflicts.ids, endpoint ?? "(\u672A\u77E5\u73AF\u5883)")
       });
     }
@@ -5635,7 +4844,7 @@ async function listInstalledSkills(keyword, args) {
       process.stdout.write(formatObject14({ baseDir: layout.baseDir, target: layout.target, all: false, skills: [] }, { format: fmt }) + "\n");
       process.exit(0);
     }
-    process.stdout.write(`${path6.join(layout.baseDir, SKILLS_STATE_FILE)} \u4E0D\u5B58\u5728\u6216\u4E3A\u7A7A \u2014\u2014 \u8FD9\u4E2A\u76EE\u5F55\u4E0B\u8FD8\u6CA1\u7528\u672C CLI \u88C5\u8FC7\u6280\u80FD\u3002
+    process.stdout.write(`${path4.join(layout.baseDir, SKILLS_STATE_FILE)} \u4E0D\u5B58\u5728\u6216\u4E3A\u7A7A \u2014\u2014 \u8FD9\u4E2A\u76EE\u5F55\u4E0B\u8FD8\u6CA1\u7528\u672C CLI \u88C5\u8FC7\u6280\u80FD\u3002
 `);
     process.stdout.write("  \u88C5\u5168\u90E8\uFF1Ahcm skills install --all\n");
     process.exit(0);
@@ -5657,7 +4866,7 @@ async function listInstalledSkills(keyword, args) {
       direct: record.direct,
       installedAt: record.installedAt,
       // 三种状态互斥：文件没了 / 本地改过 / 和装的时候一致
-      status: markdown === void 0 ? "missing" : sha2564(markdown) !== record.sha256 ? "locally-modified" : "installed"
+      status: markdown === void 0 ? "missing" : sha2562(markdown) !== record.sha256 ? "locally-modified" : "installed"
     });
   }
   const byKeyword = keyword ? rows.filter((row) => row.id.includes(keyword) || row.title.includes(keyword)) : rows;
@@ -5719,7 +4928,7 @@ async function listInstalledSkills(keyword, args) {
 }
 async function skillsShowCommand(id, args) {
   try {
-    assertSafeSkillId2(id);
+    assertSafeSkillId(id);
     const source = parseSourceFilter(args.source);
     if (source !== "chiron" && listBundledSkills().some((s) => s.id === id)) {
       const document = await readBundledSkillDocument(id);
@@ -5727,7 +4936,7 @@ async function skillsShowCommand(id, args) {
       process.exit(0);
     }
     if (source === "cli") {
-      throw invalid3(`\u8FD9\u4E00\u7248 CLI \u6CA1\u6709\u81EA\u5E26 ${id} \u8FD9\u4E2A\u6280\u80FD\uFF08--source cli \u4E0D\u770B\u777F\u620E\u76EE\u5F55\uFF09`);
+      throw invalid(`\u8FD9\u4E00\u7248 CLI \u6CA1\u6709\u81EA\u5E26 ${id} \u8FD9\u4E2A\u6280\u80FD\uFF08--source cli \u4E0D\u770B\u777F\u620E\u76EE\u5F55\uFF09`);
     }
     const { http, base } = await chironClient(args);
     const md = await fetchSkillMarkdown(http, id, base);
@@ -5737,80 +4946,12 @@ async function skillsShowCommand(id, args) {
     fail3(e, args);
   }
 }
-async function skillsSyncCommand(id, args) {
-  try {
-    assertSafeSkillId2(id);
-    if (args.target !== "workbuddy") {
-      throw invalid3(`sync --target \u5F53\u524D\u53EA\u652F\u6301 workbuddy\uFF0C\u6536\u5230 "${args.target ?? ""}"`);
-    }
-    if (!args.project?.trim()) throw invalid3("sync \u5FC5\u987B\u4F20 --project <path>");
-    if (listBundledSkills().some((one) => one.id === id)) {
-      throw new CliError18({
-        code: CliErrorCode17.SYNC_SOURCE_UNSUPPORTED,
-        message: `\`${id}\` \u662F CLI \u81EA\u5E26\u6280\u80FD\uFF1Bskills sync \u7684\u9501\u6587\u4EF6\uFF08chiron.lock.json\uFF09\u6B64\u523B\u53EA\u80FD\u8BB0\u5F55\u777F\u620E\u6765\u6E90\u7684\u51FA\u5904\u3002\u88C5\u5230\u672C\u5730\u7528 \`hcm skills install ` + id + "`\u3002"
-      });
-    }
-    const project = path6.resolve(args.project);
-    const runtime = await prepareWorkBuddyRuntime({
-      candidate: args.cli,
-      currentEntryHasRequiredCapabilities: !args.cli?.trim(),
-      forbiddenCandidatePaths: [
-        path6.join(project, ".hcm-delivery", "bin", "hcm"),
-        path6.join(project, ".hcm-delivery", "bin", "hcm.cmd")
-      ]
-    });
-    const connectionArgs = { endpoint: args.endpoint, env: args.env };
-    const { http, endpoint, base } = await chironClient(connectionArgs);
-    const catalog = await fetchSkillCatalog(http, base);
-    const documents = await prepareSkillDocuments(
-      catalog,
-      id,
-      async (skillId) => fetchSkillMarkdown(http, skillId, base),
-      async (skillId, relativePath) => fetchSkillFile(http, skillId, relativePath, base),
-      async (skillId, relativePath) => fetchSkillReference(http, skillId, relativePath, base)
-    );
-    const result2 = await syncWorkBuddyProject({
-      project,
-      endpoint,
-      catalog,
-      requestedSkill: id,
-      documents,
-      runtime
-    });
-    const fmt = args.output ?? "table";
-    if (fmt === "json" || fmt === "yaml") {
-      process.stdout.write(`${formatObject14(result2, { format: fmt })}
-`);
-    } else if (result2.changed) {
-      process.stdout.write(`\u2705 ${id} \u2192 ${result2.skillsDir}
-`);
-      process.stdout.write(`   \u95ED\u5305 ${result2.resolvedSkills.join(" \u2192 ")}
-`);
-      process.stdout.write(`   \u5165\u53E3 ${result2.runnerPath}
-`);
-      process.stdout.write(`   CLI \u80FD\u529B ${result2.capabilitiesSha256.slice(0, 12)}
-`);
-      process.stdout.write(`   \u9501 ${result2.lockPath}
-`);
-    } else {
-      process.stdout.write(`\u2713 ${id} \u5DF2\u662F\u5F53\u524D\u76EE\u6807\u5B9E\u4F8B\u7248\u672C\uFF0C\u65E0\u9700\u66F4\u65B0
-`);
-      process.stdout.write(`  \u5165\u53E3 ${result2.runnerPath}
-`);
-      process.stdout.write(`  \u9501 ${result2.lockPath}
-`);
-    }
-    process.exit(0);
-  } catch (e) {
-    fail3(e, { endpoint: args.endpoint, env: args.env });
-  }
-}
 async function skillsInstallCommand(id, args) {
   try {
     const all = Boolean(args.all);
-    if (all && id) throw invalid3("`--all` \u662F\u88C5\u6574\u4E2A\u6280\u80FD\u5E93\uFF0C\u4E0D\u8981\u518D\u5E26\u6280\u80FD id\uFF1B\u53EA\u88C5\u4E00\u4E2A\u5C31\u53BB\u6389 --all");
-    if (!all && !id) throw invalid3("\u8981\u88C5\u54EA\u4E2A\u6280\u80FD\uFF1F\u7ED9\u4E2A id\uFF08`hcm skills list` \u770B\u76EE\u5F55\uFF09\uFF0C\u6216\u7528 `--all` \u88C5\u5168\u90E8");
-    if (id) assertSafeSkillId2(id);
+    if (all && id) throw invalid("`--all` \u662F\u88C5\u6574\u4E2A\u6280\u80FD\u5E93\uFF0C\u4E0D\u8981\u518D\u5E26\u6280\u80FD id\uFF1B\u53EA\u88C5\u4E00\u4E2A\u5C31\u53BB\u6389 --all");
+    if (!all && !id) throw invalid("\u8981\u88C5\u54EA\u4E2A\u6280\u80FD\uFF1F\u7ED9\u4E2A id\uFF08`hcm skills list` \u770B\u76EE\u5F55\uFF09\uFF0C\u6216\u7528 `--all` \u88C5\u5168\u90E8");
+    if (id) assertSafeSkillId(id);
     const layout = await resolveInstallLayout(args);
     let documents;
     let requestedIds;
@@ -5819,7 +4960,7 @@ async function skillsInstallCommand(id, args) {
     let manifest2;
     let conflictNote;
     if (args.from) {
-      const root = path6.resolve(args.from);
+      const root = path4.resolve(args.from);
       requestedIds = all ? await listLocalSkillIds(root) : [id];
       const seen = /* @__PURE__ */ new Set();
       documents = [];
@@ -5849,14 +4990,14 @@ async function skillsInstallCommand(id, args) {
       const catalog = buildUnifiedCatalog({ source, chironManifest: manifest2, bundled, cliVersion: CLI_VERSION });
       const conflicts = detectIdConflicts(catalog);
       if (conflicts.ids.length > 0) {
-        throw new CliError18({
-          code: CliErrorCode17.SKILL_ID_CONFLICT,
+        throw new CliError16({
+          code: CliErrorCode15.SKILL_ID_CONFLICT,
           message: conflictMessage(conflicts.ids, endpoint ?? "(\u672A\u77E5\u73AF\u5883)")
         });
       }
       conflictNote = conflicts.checked ? void 0 : unconfirmedConflictNote(source);
       for (const v of checkCrossSourceRequires(catalog)) {
-        throw invalid3(`${v.from} \u58F0\u660E\u4F9D\u8D56 ${v.to}\uFF0C\u4F46 ${v.to} \u662F CLI \u81EA\u5E26\u6280\u80FD\u3002${v.reason}`);
+        throw invalid(`${v.from} \u58F0\u660E\u4F9D\u8D56 ${v.to}\uFF0C\u4F46 ${v.to} \u662F CLI \u81EA\u5E26\u6280\u80FD\u3002${v.reason}`);
       }
       const wantBundled = (one) => catalog.cli.entries.has(one);
       const seen = /* @__PURE__ */ new Set();
@@ -5872,16 +5013,16 @@ async function skillsInstallCommand(id, args) {
         const { documents: local, external } = await resolveBundledClosure(one);
         for (const need of external) {
           if (catalog.chiron.status !== "fetched") {
-            throw invalid3(
+            throw invalid(
               `\u81EA\u5E26\u6280\u80FD ${one} \u4F9D\u8D56\u777F\u620E\u6280\u80FD ${need}\uFF0C\u4F46\u8FD9\u4E00\u8D9F\u6CA1\u8FDE\u7F51\u53D6\u777F\u620E\u76EE\u5F55\uFF08--source ${source}\uFF09\u3002\u8054\u7F51\u540E\u91CD\u8DD1\uFF0C\u6216\u5148\u5355\u72EC\u88C5\u4E0A\u5B83\u3002`
             );
           }
           if (!catalog.chiron.entries.has(need)) {
-            throw invalid3(`\u81EA\u5E26\u6280\u80FD ${one} \u4F9D\u8D56 ${need}\uFF0C\u4F46 ${endpoint} \u7684\u6280\u80FD\u76EE\u5F55\u91CC\u6CA1\u6709\u5B83`);
+            throw invalid(`\u81EA\u5E26\u6280\u80FD ${one} \u4F9D\u8D56 ${need}\uFF0C\u4F46 ${endpoint} \u7684\u6280\u80FD\u76EE\u5F55\u91CC\u6CA1\u6709\u5B83`);
           }
           pushAll(
             await mapWithConcurrency(
-              resolveSkillInstallOrder2(manifest2, need),
+              resolveSkillInstallOrder(manifest2, need),
               FETCH_CONCURRENCY,
               (skill) => fetchSkillDocument(http, skill, endpoint, base)
             )
@@ -5893,7 +5034,7 @@ async function skillsInstallCommand(id, args) {
         const order = manifest2 ? resolveAllSkillsInstallOrder(manifest2) : [];
         const bundledIds = [...catalog.cli.entries.keys()].sort();
         if (order.length === 0 && bundledIds.length === 0) {
-          throw invalid3(`${endpoint ?? "\u8FD9\u4E00\u8D9F\u770B\u7684\u6765\u6E90"} \u91CC\u6CA1\u6709\u53EF\u88C5\u7684\u6280\u80FD`);
+          throw invalid(`${endpoint ?? "\u8FD9\u4E00\u8D9F\u770B\u7684\u6765\u6E90"} \u91CC\u6CA1\u6709\u53EF\u88C5\u7684\u6280\u80FD`);
         }
         requestedIds = [...order.map((skill) => skill.id), ...bundledIds];
         if (order.length > 0) {
@@ -5911,19 +5052,19 @@ async function skillsInstallCommand(id, args) {
         await installBundled(id);
       } else {
         if (source === "cli") {
-          throw invalid3(`\u8FD9\u4E00\u7248 CLI \u6CA1\u6709\u81EA\u5E26 ${id} \u8FD9\u4E2A\u6280\u80FD\uFF08--source cli \u4E0D\u770B\u777F\u620E\u76EE\u5F55\uFF09`);
+          throw invalid(`\u8FD9\u4E00\u7248 CLI \u6CA1\u6709\u81EA\u5E26 ${id} \u8FD9\u4E2A\u6280\u80FD\uFF08--source cli \u4E0D\u770B\u777F\u620E\u76EE\u5F55\uFF09`);
         }
         requestedIds = [id];
         pushAll(
           await mapWithConcurrency(
-            resolveSkillInstallOrder2(manifest2, id),
+            resolveSkillInstallOrder(manifest2, id),
             FETCH_CONCURRENCY,
             (skill) => fetchSkillDocument(http, skill, endpoint, base)
           )
         );
       }
     }
-    const result2 = await installSkillDocuments(documents, requestedIds, layout.baseDir, Boolean(args.force), {
+    const result = await installSkillDocuments(documents, requestedIds, layout.baseDir, Boolean(args.force), {
       endpoint,
       base,
       target: layout.target,
@@ -5932,19 +5073,19 @@ async function skillsInstallCommand(id, args) {
     const agents = layout.agentsFile ? await syncAgentsIndex(layout, manifest2) : void 0;
     const fmt = args.output ?? "table";
     if (fmt === "json" || fmt === "yaml") {
-      process.stdout.write(formatObject14({ ...result2, all, target_agent: layout.target, agentsFile: layout.agentsFile, agents, conflictCheck: conflictNote ? { checked: false, note: conflictNote } : { checked: true } }, { format: fmt }) + "\n");
+      process.stdout.write(formatObject14({ ...result, all, target_agent: layout.target, agentsFile: layout.agentsFile, agents, conflictCheck: conflictNote ? { checked: false, note: conflictNote } : { checked: true } }, { format: fmt }) + "\n");
     } else {
-      const headline = all ? `\u2705 \u5168\u90E8 ${requestedIds.length} \u4E2A\u6280\u80FD \u2192 ${result2.baseDir}` : `\u2705 ${id} \u2192 ${path6.join(result2.baseDir, id, "SKILL.md")}`;
+      const headline = all ? `\u2705 \u5168\u90E8 ${requestedIds.length} \u4E2A\u6280\u80FD \u2192 ${result.baseDir}` : `\u2705 ${id} \u2192 ${path4.join(result.baseDir, id, "SKILL.md")}`;
       process.stdout.write(`${headline}
 `);
-      if (result2.installed.length > 0) {
-        process.stdout.write(all ? `   \u65B0\u5199\u5165 ${result2.installed.length} \u4E2A
-` : `   \u5DF2\u5B89\u88C5 ${result2.installed.join(" \u2192 ")}
+      if (result.installed.length > 0) {
+        process.stdout.write(all ? `   \u65B0\u5199\u5165 ${result.installed.length} \u4E2A
+` : `   \u5DF2\u5B89\u88C5 ${result.installed.join(" \u2192 ")}
 `);
       }
-      if (result2.unchanged.length > 0) {
-        process.stdout.write(all ? `   \u5DF2\u662F\u8FD9\u4E00\u7248\u3001\u672A\u6539\u52A8 ${result2.unchanged.length} \u4E2A
-` : `   \u5DF2\u5B58\u5728\u4E14\u7248\u672C\u4E00\u81F4 ${result2.unchanged.join(", ")}
+      if (result.unchanged.length > 0) {
+        process.stdout.write(all ? `   \u5DF2\u662F\u8FD9\u4E00\u7248\u3001\u672A\u6539\u52A8 ${result.unchanged.length} \u4E2A
+` : `   \u5DF2\u5B58\u5728\u4E14\u7248\u672C\u4E00\u81F4 ${result.unchanged.join(", ")}
 `);
       }
       const referenceCount = documents.reduce((n, d) => n + (d.references?.length ?? 0), 0);
@@ -5956,7 +5097,7 @@ async function skillsInstallCommand(id, args) {
         process.stdout.write(`   \u5DF2${agents === "created" ? "\u521B\u5EFA" : "\u66F4\u65B0"} ${layout.agentsFile} \u91CC\u7684\u6280\u80FD\u7D22\u5F15\uFF08Codex \u8BFB\u8FD9\u91CC\uFF09
 `);
       }
-      process.stdout.write(`   \u6765\u6E90 ${endpoint ?? (args.from ? path6.resolve(args.from) : `@hcmai/cli@${CLI_VERSION}`)}
+      process.stdout.write(`   \u6765\u6E90 ${endpoint ?? (args.from ? path4.resolve(args.from) : `@hcmai/cli@${CLI_VERSION}`)}
 `);
       if (conflictNote) process.stdout.write(`   \u26A0\uFE0F ${conflictNote}
 `);
@@ -5986,18 +5127,18 @@ async function listLocalSkillIds(root) {
   try {
     entries = await fsp2.readdir(root, { withFileTypes: true });
   } catch {
-    throw invalid3(`\u8BFB\u4E0D\u5230\u672C\u5730\u6280\u80FD\u76EE\u5F55\uFF1A${root}`);
+    throw invalid(`\u8BFB\u4E0D\u5230\u672C\u5730\u6280\u80FD\u76EE\u5F55\uFF1A${root}`);
   }
   const ids = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    if (await exists2(path6.join(root, entry.name, "SKILL.md"))) ids.push(entry.name);
+    if (await exists(path4.join(root, entry.name, "SKILL.md"))) ids.push(entry.name);
   }
-  if (ids.length === 0) throw invalid3(`\u672C\u5730\u76EE\u5F55\u91CC\u6CA1\u6709\u4EFB\u4F55 <id>/SKILL.md\uFF1A${root}`);
+  if (ids.length === 0) throw invalid(`\u672C\u5730\u76EE\u5F55\u91CC\u6CA1\u6709\u4EFB\u4F55 <id>/SKILL.md\uFF1A${root}`);
   return ids.sort();
 }
 async function fetchSkillDocument(http, skill, endpoint, base) {
-  const relatives = normalizeReferences2(skill.references, skill.id);
+  const relatives = normalizeReferences(skill.references, skill.id);
   const references = await Promise.all(relatives.map(async (relative2) => ({
     path: relative2,
     content: await fetchSkillReference(http, skill.id, relative2, base)
@@ -6018,23 +5159,23 @@ async function syncAgentsIndex(layout, manifest2) {
   for (const category of manifest2?.categories ?? []) {
     for (const skill of category.skills ?? []) catalog.set(skill.id, skill);
   }
-  const agentsDir = path6.dirname(layout.agentsFile);
+  const agentsDir = path4.dirname(layout.agentsFile);
   const entries = Object.keys(state.skills).sort().map((id) => {
     const known = catalog.get(id);
-    const absolute = path6.join(layout.baseDir, id, "SKILL.md");
-    let relative2 = path6.relative(agentsDir, absolute);
+    const absolute = path4.join(layout.baseDir, id, "SKILL.md");
+    let relative2 = path4.relative(agentsDir, absolute);
     if (!relative2.startsWith(".")) relative2 = `./${relative2}`;
     return {
       id,
       title: known?.title ?? id,
       description: known?.description ?? "",
-      relativePath: relative2.split(path6.sep).join("/")
+      relativePath: relative2.split(path4.sep).join("/")
     };
   });
   return upsertAgentsBlock(layout.agentsFile, renderAgentsBlock(entries));
 }
 async function resolveLocalSkillDocuments(sourceRoot, targetId) {
-  assertSafeSkillId2(targetId);
+  assertSafeSkillId(targetId);
   const state = /* @__PURE__ */ new Map();
   const pathStack = [];
   const order = [];
@@ -6043,20 +5184,20 @@ async function resolveLocalSkillDocuments(sourceRoot, targetId) {
     if (current === "done") return;
     if (current === "visiting") {
       const start = pathStack.indexOf(id);
-      throw invalid3(`\u6280\u80FD\u4F9D\u8D56\u5B58\u5728\u73AF: ${[...pathStack.slice(Math.max(0, start)), id].join(" -> ")}`);
+      throw invalid(`\u6280\u80FD\u4F9D\u8D56\u5B58\u5728\u73AF: ${[...pathStack.slice(Math.max(0, start)), id].join(" -> ")}`);
     }
-    assertSafeSkillId2(id);
-    const local = path6.join(sourceRoot, id, "SKILL.md");
+    assertSafeSkillId(id);
+    const local = path4.join(sourceRoot, id, "SKILL.md");
     let markdown;
     try {
       markdown = await fsp2.readFile(local, "utf8");
     } catch (cause) {
       if (cause?.code === "ENOENT") {
-        throw invalid3(requiredBy ? `\u672C\u5730\u6280\u80FD ${requiredBy} \u4F9D\u8D56\u4E0D\u5B58\u5728: ${id}\uFF08${local}\uFF09` : `\u672C\u5730\u76EE\u5F55\u91CC\u6CA1\u6709 ${id}/SKILL.md\uFF1A${path6.join(sourceRoot, id)}`);
+        throw invalid(requiredBy ? `\u672C\u5730\u6280\u80FD ${requiredBy} \u4F9D\u8D56\u4E0D\u5B58\u5728: ${id}\uFF08${local}\uFF09` : `\u672C\u5730\u76EE\u5F55\u91CC\u6CA1\u6709 ${id}/SKILL.md\uFF1A${path4.join(sourceRoot, id)}`);
       }
       throw cause;
     }
-    if (!markdown.trim()) throw invalid3(`\u6280\u80FD ${id} \u5185\u5BB9\u4E3A\u7A7A`);
+    if (!markdown.trim()) throw invalid(`\u6280\u80FD ${id} \u5185\u5BB9\u4E3A\u7A7A`);
     state.set(id, "visiting");
     pathStack.push(id);
     const document = {
@@ -6064,7 +5205,7 @@ async function resolveLocalSkillDocuments(sourceRoot, targetId) {
       markdown,
       source: local,
       sourceKind: "local",
-      references: await readLocalReferences(path6.join(sourceRoot, id))
+      references: await readLocalReferences(path4.join(sourceRoot, id))
     };
     for (const required of parseSkillRequirements2(markdown, id)) {
       await visit(required, id);
@@ -6078,7 +5219,7 @@ async function resolveLocalSkillDocuments(sourceRoot, targetId) {
 }
 async function readSkillsState(baseDir) {
   try {
-    const raw = await fsp2.readFile(path6.join(baseDir, SKILLS_STATE_FILE), "utf8");
+    const raw = await fsp2.readFile(path4.join(baseDir, SKILLS_STATE_FILE), "utf8");
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object" || !parsed.skills) return void 0;
     return migrateSkillsState(parsed);
@@ -6088,7 +5229,7 @@ async function readSkillsState(baseDir) {
 }
 async function writeSkillsState(baseDir, state) {
   await fsp2.mkdir(baseDir, { recursive: true });
-  const file = path6.join(baseDir, SKILLS_STATE_FILE);
+  const file = path4.join(baseDir, SKILLS_STATE_FILE);
   const temp = `${file}.${process.pid}.tmp`;
   await fsp2.writeFile(temp, JSON.stringify(state, null, 2) + "\n", "utf8");
   await fsp2.rename(temp, file);
@@ -6117,7 +5258,7 @@ async function upsertAgentsBlock(agentsFile, block) {
     existing = await fsp2.readFile(agentsFile, "utf8");
   } catch (cause) {
     if (cause?.code !== "ENOENT") throw cause;
-    await fsp2.mkdir(path6.dirname(agentsFile), { recursive: true });
+    await fsp2.mkdir(path4.dirname(agentsFile), { recursive: true });
     await fsp2.writeFile(agentsFile, block + "\n", "utf8");
     return "created";
   }
@@ -6133,22 +5274,22 @@ async function upsertAgentsBlock(agentsFile, block) {
   return "appended";
 }
 async function installSkillDocuments(documents, requestedIds, baseDir, force, meta2) {
-  if (requestedIds.length === 0) throw invalid3("\u6CA1\u6709\u6307\u5B9A\u8981\u88C5\u7684\u6280\u80FD");
-  for (const id of requestedIds) assertSafeSkillId2(id);
+  if (requestedIds.length === 0) throw invalid("\u6CA1\u6709\u6307\u5B9A\u8981\u88C5\u7684\u6280\u80FD");
+  for (const id of requestedIds) assertSafeSkillId(id);
   const seen = /* @__PURE__ */ new Set();
   const candidates = documents.map((document) => {
-    assertSafeSkillId2(document.id);
-    if (seen.has(document.id)) throw invalid3(`\u5B89\u88C5\u95ED\u5305\u5305\u542B\u91CD\u590D\u6280\u80FD: ${document.id}`);
+    assertSafeSkillId(document.id);
+    if (seen.has(document.id)) throw invalid(`\u5B89\u88C5\u95ED\u5305\u5305\u542B\u91CD\u590D\u6280\u80FD: ${document.id}`);
     seen.add(document.id);
-    if (!document.markdown.trim()) throw invalid3(`\u6280\u80FD ${document.id} \u5185\u5BB9\u4E3A\u7A7A`);
+    if (!document.markdown.trim()) throw invalid(`\u6280\u80FD ${document.id} \u5185\u5BB9\u4E3A\u7A7A`);
     return {
       ...document,
-      target: path6.join(baseDir, document.id, "SKILL.md"),
+      target: path4.join(baseDir, document.id, "SKILL.md"),
       bytes: Buffer.byteLength(document.markdown)
     };
   });
   for (const id of requestedIds) {
-    if (!seen.has(id)) throw invalid3(`\u5B89\u88C5\u95ED\u5305\u4E0D\u5305\u542B\u76EE\u6807\u6280\u80FD: ${id}`);
+    if (!seen.has(id)) throw invalid(`\u5B89\u88C5\u95ED\u5305\u4E0D\u5305\u542B\u76EE\u6807\u6280\u80FD: ${id}`);
   }
   const unchanged = /* @__PURE__ */ new Set();
   for (const candidate of candidates) {
@@ -6159,7 +5300,7 @@ async function installSkillDocuments(documents, requestedIds, baseDir, force, me
       unchanged.add(candidate.id);
       continue;
     }
-    throw invalid3(
+    throw invalid(
       `${candidate.target} \u5DF2\u5B58\u5728\uFF0C\u4E14\u548C\u76EE\u6807\u73AF\u5883\u8FD9\u4E00\u7248\u4E0D\u4E00\u81F4\u3002\u7528 --force \u8986\u76D6\uFF08\u4F1A\u4E22\u6389\u672C\u5730\u6539\u52A8\uFF09\uFF0C\u6216 --dir <path> \u88C5\u5230\u522B\u5904\uFF1B\u53EA\u60F3\u8DDF\u4E0A\u4EA7\u54C1\u7248\u672C\u7528 hcm skills update`
     );
   }
@@ -6194,7 +5335,7 @@ async function sameOnDisk(baseDir, candidate) {
   return true;
 }
 async function readLocalReferences(skillDir) {
-  const root = path6.join(skillDir, "references");
+  const root = path4.join(skillDir, "references");
   const out = [];
   const walk = async (dir, prefix) => {
     let items;
@@ -6207,12 +5348,12 @@ async function readLocalReferences(skillDir) {
     for (const item of items.sort((a, b) => a.name.localeCompare(b.name))) {
       const relative2 = prefix ? `${prefix}/${item.name}` : item.name;
       if (item.isDirectory()) {
-        await walk(path6.join(dir, item.name), relative2);
+        await walk(path4.join(dir, item.name), relative2);
         continue;
       }
       if (!item.isFile()) continue;
       assertSafeReferencePath2(relative2);
-      out.push({ path: relative2, content: await fsp2.readFile(path6.join(dir, item.name), "utf8") });
+      out.push({ path: relative2, content: await fsp2.readFile(path4.join(dir, item.name), "utf8") });
     }
   };
   await walk(root, "");
@@ -6228,7 +5369,7 @@ async function planStaleReferences(state, documents, baseDir) {
       if (fresh.has(relative2)) continue;
       const onDisk = await readInstalledReference(baseDir, document.id, relative2);
       if (onDisk === void 0) continue;
-      if (sha2564(onDisk) !== recordedSha) {
+      if (sha2562(onDisk) !== recordedSha) {
         keptLocallyModified.push({ id: document.id, path: relative2 });
         continue;
       }
@@ -6243,15 +5384,15 @@ async function writeSkillDocuments(documents, baseDir, removals = []) {
   const removed = [];
   try {
     for (const document of documents) {
-      const target = path6.join(baseDir, document.id, "SKILL.md");
-      await fsp2.mkdir(path6.dirname(target), { recursive: true });
-      const temp = path6.join(path6.dirname(target), `.SKILL.md.${process.pid}.${Date.now()}.tmp`);
+      const target = path4.join(baseDir, document.id, "SKILL.md");
+      await fsp2.mkdir(path4.dirname(target), { recursive: true });
+      const temp = path4.join(path4.dirname(target), `.SKILL.md.${process.pid}.${Date.now()}.tmp`);
       await fsp2.writeFile(temp, document.markdown, "utf8");
       staged.push({ temp, target });
       for (const reference of document.references ?? []) {
         assertSafeReferencePath2(reference.path);
-        const referenceTarget = path6.join(baseDir, document.id, "references", reference.path);
-        await fsp2.mkdir(path6.dirname(referenceTarget), { recursive: true });
+        const referenceTarget = path4.join(baseDir, document.id, "references", reference.path);
+        await fsp2.mkdir(path4.dirname(referenceTarget), { recursive: true });
         const referenceTemp = `${referenceTarget}.${process.pid}.${Date.now()}.tmp`;
         await fsp2.writeFile(referenceTemp, reference.content, "utf8");
         staged.push({ temp: referenceTemp, target: referenceTarget });
@@ -6259,7 +5400,7 @@ async function writeSkillDocuments(documents, baseDir, removals = []) {
     }
     for (const stale of removals) {
       assertSafeReferencePath2(stale.path);
-      const original = path6.join(baseDir, stale.id, "references", stale.path);
+      const original = path4.join(baseDir, stale.id, "references", stale.path);
       const parked = `${original}.${process.pid}.${Date.now()}.removed`;
       await fsp2.rename(original, parked);
       removed.push({ parked, original });
@@ -6285,6 +5426,7 @@ async function recordInstalled(baseDir, documents, meta2) {
   if (meta2.base !== void 0) state.base = meta2.base;
   if (meta2.all) state.all = true;
   state.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+  state.runtime = { launch: await currentSkillsRuntimeLaunch() };
   for (const document of documents) {
     const previous = state.skills[document.id];
     state.skills[document.id] = {
@@ -6292,24 +5434,24 @@ async function recordInstalled(baseDir, documents, meta2) {
       // 🔴 两个键同值：`source` 留给旧 CLI 读（降级不炸），新代码只读 `sourceLocator`。
       sourceKind: document.sourceKind ?? previous?.sourceKind ?? "chiron",
       sourceLocator: document.source,
-      sha256: sha2564(document.markdown),
+      sha256: sha2562(document.markdown),
       installedAt: meta2.keepInstalledAt?.has(document.id) && previous ? previous.installedAt : state.updatedAt,
       // 已经是直接安装的，不因为这次作为依赖被带进来就降级
       direct: meta2.directIds.has(document.id) || Boolean(previous?.direct),
       references: Object.fromEntries(
-        (document.references ?? []).map((reference) => [reference.path, sha2564(reference.content)])
+        (document.references ?? []).map((reference) => [reference.path, sha2562(reference.content)])
       )
     };
   }
   await writeSkillsState(baseDir, state);
   return state;
 }
-function invalid3(message) {
-  return new CliError18({ code: CliErrorCode17.INVALID_ARGUMENT, message });
+function invalid(message) {
+  return new CliError16({ code: CliErrorCode15.INVALID_ARGUMENT, message });
 }
 async function readInstalled(baseDir, id) {
   try {
-    return await fsp2.readFile(path6.join(baseDir, id, "SKILL.md"), "utf8");
+    return await fsp2.readFile(path4.join(baseDir, id, "SKILL.md"), "utf8");
   } catch (cause) {
     if (cause?.code === "ENOENT") return void 0;
     throw cause;
@@ -6317,7 +5459,7 @@ async function readInstalled(baseDir, id) {
 }
 async function readInstalledReference(baseDir, id, relative2) {
   try {
-    return await fsp2.readFile(path6.join(baseDir, id, "references", relative2), "utf8");
+    return await fsp2.readFile(path4.join(baseDir, id, "references", relative2), "utf8");
   } catch (cause) {
     if (cause?.code === "ENOENT") return void 0;
     throw cause;
@@ -6377,7 +5519,7 @@ async function planSkillUpdate(options) {
   for (const id of chironNeeded) {
     if (!manifest2) continue;
     try {
-      for (const skill of resolveSkillInstallOrder2(manifest2, id)) {
+      for (const skill of resolveSkillInstallOrder(manifest2, id)) {
         if (!closure.has(skill.id)) closure.set(skill.id, { kind: "chiron", skill });
       }
     } catch {
@@ -6403,12 +5545,12 @@ async function planSkillUpdate(options) {
     const remote = await fetch();
     const remoteReferences = remote.references ?? [];
     let differsFromRemote = remote.markdown !== onDisk;
-    let editedLocally = record !== void 0 && sha2564(onDisk) !== record.sha256;
+    let editedLocally = record !== void 0 && sha2562(onDisk) !== record.sha256;
     for (const reference of remoteReferences) {
       const installed = await readInstalledReference(baseDir, id, reference.path);
       if (installed !== reference.content) differsFromRemote = true;
       const recordedSha = record?.references?.[reference.path];
-      if (installed !== void 0 && recordedSha && sha2564(installed) !== recordedSha) editedLocally = true;
+      if (installed !== void 0 && recordedSha && sha2562(installed) !== recordedSha) editedLocally = true;
     }
     if (!differsFromRemote) {
       entries.push({ id, status: "unchanged" });
@@ -6449,9 +5591,9 @@ async function skillsUpdateCommand(args) {
     const layout = await resolveInstallLayout(args);
     const state = await readSkillsState(layout.baseDir);
     if (!state || Object.keys(state.skills).length === 0) {
-      throw new CliError18({
-        code: CliErrorCode17.INVALID_ARGUMENT,
-        message: `${path6.join(layout.baseDir, SKILLS_STATE_FILE)} \u4E0D\u5B58\u5728\u6216\u4E3A\u7A7A \u2014\u2014 \u8FD9\u4E2A\u76EE\u5F55\u4E0B\u8FD8\u6CA1\u6709\u7528\u672C CLI \u88C5\u8FC7\u6280\u80FD\u3002\u5148 \`hcm skills install <id>\`\uFF1B\u5982\u679C\u6280\u80FD\u662F\u624B\u5DE5\u62F7\u8FDB\u6765\u7684\uFF0C\u91CD\u88C5\u4E00\u6B21\u5373\u53EF\u63A5\u7BA1\u5347\u7EA7\u3002`
+      throw new CliError16({
+        code: CliErrorCode15.INVALID_ARGUMENT,
+        message: `${path4.join(layout.baseDir, SKILLS_STATE_FILE)} \u4E0D\u5B58\u5728\u6216\u4E3A\u7A7A \u2014\u2014 \u8FD9\u4E2A\u76EE\u5F55\u4E0B\u8FD8\u6CA1\u6709\u7528\u672C CLI \u88C5\u8FC7\u6280\u80FD\u3002\u5148 \`hcm skills install <id>\`\uFF1B\u5982\u679C\u6280\u80FD\u662F\u624B\u5DE5\u62F7\u8FDB\u6765\u7684\uFF0C\u91CD\u88C5\u4E00\u6B21\u5373\u53EF\u63A5\u7BA1\u5347\u7EA7\u3002`
       });
     }
     const source = parseSourceFilter(args.source);
@@ -6581,8 +5723,8 @@ import {
   loadEnv as loadEnv6,
   loadGlobalConfig as loadGlobalConfig7,
   resolveActiveEnv as resolveActiveEnv4,
-  CliError as CliError19,
-  CliErrorCode as CliErrorCode18
+  CliError as CliError17,
+  CliErrorCode as CliErrorCode16
 } from "@hcmai/sdk";
 init_exit();
 async function resolveBootstrapKey(args, stdinTaken) {
@@ -6590,8 +5732,8 @@ async function resolveBootstrapKey(args, stdinTaken) {
   if (fromEnv) return fromEnv;
   if (args.bootstrapKeyStdin) {
     if (stdinTaken) {
-      throw new CliError19({
-        code: CliErrorCode18.INVALID_ARGUMENT,
+      throw new CliError17({
+        code: CliErrorCode16.INVALID_ARGUMENT,
         message: "--bootstrap-key-stdin \u4E0E --admin-password-stdin \u4E0D\u80FD\u540C\u65F6\u7528\uFF08stdin \u53EA\u6709\u4E00\u8DEF\uFF09\uFF1B\u628A\u5176\u4E2D\u4E00\u4E2A\u6539\u8D70 HCM_BOOTSTRAP_KEY \u73AF\u5883\u53D8\u91CF\u6216\u4EA4\u4E92\u8F93\u5165"
       });
     }
@@ -6621,8 +5763,8 @@ async function resolveEndpoint2(args) {
   const envName = resolveActiveEnv4({ envFlag: args.env }, process.env, g);
   const env2 = await loadEnv6(envName).catch(() => null);
   if (!env2?.endpoint) {
-    throw new CliError19({
-      code: CliErrorCode18.MISSING_FLAG,
+    throw new CliError17({
+      code: CliErrorCode16.MISSING_FLAG,
       message: "\u672A\u89E3\u6790\u5230 endpoint \u2014\u2014 \u4F20 --endpoint <url>\uFF0C\u6216\u5148 `hcm env add <name> --endpoint <url>`"
     });
   }
@@ -6631,8 +5773,8 @@ async function resolveEndpoint2(args) {
 async function tenantBootstrapCommand(args) {
   try {
     if (!args.tenantId || !args.adminUsername) {
-      throw new CliError19({
-        code: CliErrorCode18.MISSING_FLAG,
+      throw new CliError17({
+        code: CliErrorCode16.MISSING_FLAG,
         message: "--tenant-id \u4E0E --admin-username \u5FC5\u586B"
       });
     }
@@ -6654,7 +5796,7 @@ async function tenantBootstrapCommand(args) {
       onRefresh: async () => {
       }
     });
-    const result2 = await bootstrapTenant(http, key, {
+    const result = await bootstrapTenant(http, key, {
       tenantId: args.tenantId,
       adminUsername: args.adminUsername,
       adminPassword: pwd,
@@ -6663,12 +5805,12 @@ async function tenantBootstrapCommand(args) {
     const fmt = args.output ?? "json";
     if (fmt !== "json") {
       process.stdout.write(
-        `\u2705 \u79DF\u6237 ${result2.tenantId} \u5DF2\u5F00\u901A\uFF08adminUserId ${result2.adminUserId ?? "-"}\uFF09
+        `\u2705 \u79DF\u6237 ${result.tenantId} \u5DF2\u5F00\u901A\uFF08adminUserId ${result.adminUserId ?? "-"}\uFF09
    \u4E0B\u4E00\u6B65\uFF1Ahcm env add <name> --endpoint ${endpoint} && hcm login --env <name>
 `
       );
     }
-    process.stdout.write(formatObject15(result2, { format: fmt }) + "\n");
+    process.stdout.write(formatObject15(result, { format: fmt }) + "\n");
     process.exit(0);
   } catch (e) {
     const err = e;
@@ -6692,8 +5834,8 @@ import {
   getTenantMeta,
   saveTenantMeta,
   deleteTenantMeta,
-  CliError as CliError20,
-  CliErrorCode as CliErrorCode19
+  CliError as CliError18,
+  CliErrorCode as CliErrorCode17
 } from "@hcmai/sdk";
 init_exit();
 init_auth_guard();
@@ -6729,21 +5871,21 @@ async function metaListCommand(args) {
     fail4(e, args);
   }
 }
-async function metaGetCommand(path10, args) {
+async function metaGetCommand(path9, args) {
   try {
     const c = await client2(args);
-    const content = await getTenantMeta(c.raw(), path10);
+    const content = await getTenantMeta(c.raw(), path9);
     process.stdout.write(content.endsWith("\n") ? content : content + "\n");
     process.exit(0);
   } catch (e) {
     fail4(e, args);
   }
 }
-async function metaSetCommand(path10, args) {
+async function metaSetCommand(path9, args) {
   try {
     if (!args.file) {
-      throw new CliError20({
-        code: CliErrorCode19.MISSING_FLAG,
+      throw new CliError18({
+        code: CliErrorCode17.MISSING_FLAG,
         message: "--file <path> \u5FC5\u586B\uFF08\u4ECE\u6587\u4EF6\u8BFB\u53D6 meta \u539F\u6587\uFF1B\u7528 - \u8868\u793A stdin\uFF09"
       });
     }
@@ -6756,7 +5898,7 @@ async function metaSetCommand(path10, args) {
     }) : await fsp3.readFile(args.file, "utf8");
     if (args.dryRun) {
       process.stdout.write(
-        `[dry-run] \u5C06\u5199\u5165 ${path10}\uFF08${Buffer.byteLength(content)} B\uFF09\u2014\u2014\u672A\u5B9E\u9645\u5199\u5165
+        `[dry-run] \u5C06\u5199\u5165 ${path9}\uFF08${Buffer.byteLength(content)} B\uFF09\u2014\u2014\u672A\u5B9E\u9645\u5199\u5165
 ---
 ${content}
 `
@@ -6764,35 +5906,35 @@ ${content}
       process.exit(0);
     }
     const c = await client2(args);
-    const result2 = await saveTenantMeta(c.raw(), path10, content);
+    const result = await saveTenantMeta(c.raw(), path9, content);
     const fmt = args.output ?? "json";
     if (fmt !== "json") {
-      process.stdout.write(`\u2705 \u5DF2\u5199\u5165 ${path10}
+      process.stdout.write(`\u2705 \u5DF2\u5199\u5165 ${path9}
    \u8BB0\u5F97\u6E05\u7F13\u5B58\uFF1Ahcm cache clear-meta <Model>
 `);
     }
-    process.stdout.write(formatObject16(result2, { format: fmt }) + "\n");
+    process.stdout.write(formatObject16(result, { format: fmt }) + "\n");
     process.exit(0);
   } catch (e) {
     if (e?.code === "ENOENT") exitWithError(new Error(`\u6587\u4EF6\u4E0D\u5B58\u5728\uFF1A${args.file}`));
     fail4(e, args);
   }
 }
-async function metaDeleteCommand(path10, args) {
+async function metaDeleteCommand(path9, args) {
   try {
     if (!args.yes) {
-      const ok = await promptConfirm(`\u5C06\u5220\u9664\u5143\u6570\u636E ${path10}\uFF0C\u6B64\u64CD\u4F5C\u4E0D\u53EF\u9006\u3002\u7EE7\u7EED\uFF1F`);
+      const ok = await promptConfirm(`\u5C06\u5220\u9664\u5143\u6570\u636E ${path9}\uFF0C\u6B64\u64CD\u4F5C\u4E0D\u53EF\u9006\u3002\u7EE7\u7EED\uFF1F`);
       if (!ok) {
         process.stderr.write("\u5DF2\u53D6\u6D88\n");
         process.exit(1);
       }
     }
     const c = await client2(args);
-    const result2 = await deleteTenantMeta(c.raw(), path10);
+    const result = await deleteTenantMeta(c.raw(), path9);
     const fmt = args.output ?? "json";
-    if (fmt !== "json") process.stdout.write(`\u{1F5D1}\uFE0F  \u5DF2\u5220\u9664 ${path10}
+    if (fmt !== "json") process.stdout.write(`\u{1F5D1}\uFE0F  \u5DF2\u5220\u9664 ${path9}
 `);
-    process.stdout.write(formatObject16(result2, { format: fmt }) + "\n");
+    process.stdout.write(formatObject16(result, { format: fmt }) + "\n");
     process.exit(0);
   } catch (e) {
     fail4(e, args);
@@ -6803,8 +5945,8 @@ async function metaDeleteCommand(path10, args) {
 init_exit();
 init_auth_guard();
 import * as crypto from "crypto";
-import * as fs7 from "fs/promises";
-import * as path7 from "path";
+import * as fs5 from "fs/promises";
+import * as path5 from "path";
 import {
   buildMiniPreviewTargets,
   buildMiniVerifyAgentReport,
@@ -6873,7 +6015,7 @@ async function workspaceListCommand(args) {
   try {
     const client3 = HcmClient16.fromAuthContext(await getActiveAuthContextFromCli(args));
     const limit = parsePositiveInt3(args.limit, 50, "--limit");
-    const result2 = await client3.query("TenantExtensionWorkspace", {
+    const result = await client3.query("TenantExtensionWorkspace", {
       keyword: args.keyword,
       fields: [
         "workspaceKey",
@@ -6888,7 +6030,7 @@ async function workspaceListCommand(args) {
       sort: [{ field: "devModeEnabled", desc: true }, { field: "updateTime", desc: true }],
       limit
     });
-    writeWorkspaceListResult(result2.rows, args.output ?? "table", result2.total);
+    writeWorkspaceListResult(result.rows, args.output ?? "table", result.total);
     process.exit(0);
   } catch (e) {
     exitWorkspaceError(e, args.env ?? args.profile);
@@ -6902,12 +6044,12 @@ async function workspaceActiveCommand(args) {
       fallbackEnv: localContext?.profile
     });
     const client3 = HcmClient16.fromAuthContext(ctx);
-    const result2 = await client3.query("TenantExtensionWorkspace", {
+    const result = await client3.query("TenantExtensionWorkspace", {
       filter: { devModeEnabled: true },
       fields: ["workspaceKey", "devModeEnabled"],
       limit: 1
     });
-    const activeWorkspaceKey = optionalText(result2.rows[0]?.workspaceKey) ?? null;
+    const activeWorkspaceKey = optionalText(result.rows[0]?.workspaceKey) ?? null;
     const view = {
       activeWorkspaceKey,
       localWorkspaceKey: localContext?.workspaceKey ?? null,
@@ -6939,7 +6081,7 @@ async function workspaceBindCommand(workspaceKey, args) {
       tenantId: args.tenant ?? client3?.tenantId,
       endpoint: args.endpoint ?? client3?.endpoint
     });
-    await fs7.mkdir(rootDir, { recursive: true });
+    await fs5.mkdir(rootDir, { recursive: true });
     await writeWorkspaceContext(rootDir, context);
     writeWorkspaceBindResult(context, rootDir, args.output ?? "table");
     process.exit(0);
@@ -6974,7 +6116,7 @@ async function workspaceCreateCommand(workspaceKey, args) {
       tenantId: client3.tenantId,
       endpoint: client3.endpoint
     });
-    await fs7.mkdir(rootDir, { recursive: true });
+    await fs5.mkdir(rootDir, { recursive: true });
     await writeWorkspaceContext(rootDir, context);
     writeWorkspaceCreateResult(
       {
@@ -7011,23 +6153,23 @@ async function workspacePullCommand(args) {
       tenantId: client3.tenantId ?? existing?.tenantId,
       endpoint: client3.endpoint ?? existing?.endpoint
     });
-    await fs7.mkdir(rootDir, { recursive: true });
+    await fs5.mkdir(rootDir, { recursive: true });
     await writeWorkspaceContext(rootDir, context);
     const files = await listWorkspaceFiles(client3.raw(), workspaceKey, { pageSize: 5e3 });
     const miniApps = detectRemoteMiniApps(files.data);
     const pulledMiniApps = [];
     for (const appCode of miniApps) {
-      const result2 = await pullMiniAppProject({
+      const result = await pullMiniAppProject({
         http: client3.raw(),
         appCode,
         workspaceKey,
-        targetDir: path7.join(rootDir, MINI_APPS_DIR, appCode),
+        targetDir: path5.join(rootDir, MINI_APPS_DIR, appCode),
         tenantId: client3.tenantId,
         endpoint: client3.endpoint,
         profile: args.profile ?? client3.profile,
         force: !!args.force
       });
-      pulledMiniApps.push(result2);
+      pulledMiniApps.push(result);
     }
     const rawFiles = files.data.filter(
       (file) => !isDirectoryMarker(file.relativePath) && !isMiniAppPath(file.relativePath)
@@ -7036,7 +6178,7 @@ async function workspacePullCommand(args) {
     const rawRemoteByLocalPath = /* @__PURE__ */ new Map();
     for (const file of rawFiles) {
       const content = await loadWorkspaceFileContent(client3.raw(), file.id);
-      const target = path7.join(rootDir, content.relativePath);
+      const target = path5.join(rootDir, content.relativePath);
       await writeTextFile(target, content.content, !!args.force);
       pulledRawFiles.push(content.relativePath);
       rawRemoteByLocalPath.set(content.relativePath, file);
@@ -7083,10 +6225,10 @@ async function workspaceAddMiniCommand(appCode, args) {
       fields: args.fields,
       defaults: args.defaults
     });
-    const result2 = await initMiniAppProject({
+    const result = await initMiniAppProject({
       appCode,
       workspaceKey: context.workspaceKey,
-      targetDir: path7.join(rootDir, MINI_APPS_DIR, appCode),
+      targetDir: path5.join(rootDir, MINI_APPS_DIR, appCode),
       name: args.name,
       defaultSurface: parseSurface(args.surface),
       templateKind,
@@ -7100,7 +6242,7 @@ async function workspaceAddMiniCommand(appCode, args) {
       profile: args.env ?? args.profile ?? client3?.profile ?? context.profile,
       force: !!args.force
     });
-    writeWorkspaceAddMiniResult(result2, rootDir, args.output ?? "table");
+    writeWorkspaceAddMiniResult(result, rootDir, args.output ?? "table");
     process.exit(0);
   } catch (e) {
     exitWorkspaceError(e, args.env ?? args.profile);
@@ -7180,12 +6322,12 @@ async function workspacePushCommand(args) {
     });
     const results = [];
     for (const app of miniApps) {
-      const result2 = await pushMiniAppProject({
+      const result = await pushMiniAppProject({
         http: client3.raw(),
         rootDir: app.dir,
         dryRun: !!args.dryRun
       });
-      results.push({ app, result: result2 });
+      results.push({ app, result });
     }
     writeWorkspacePushResult(rawResult, results, args.output ?? "table");
     process.exit(
@@ -7327,7 +6469,7 @@ function removedMiniCommand() {
   );
 }
 function resolveRootDir(dir) {
-  return path7.resolve(dir ?? ".");
+  return path5.resolve(dir ?? ".");
 }
 function buildWorkspaceContext(args) {
   return {
@@ -7343,7 +6485,7 @@ function buildWorkspaceContext(args) {
 async function readWorkspaceContext(rootDir) {
   try {
     const parsed = JSON.parse(
-      await fs7.readFile(path7.join(rootDir, WORKSPACE_CONTEXT_FILE), "utf-8")
+      await fs5.readFile(path5.join(rootDir, WORKSPACE_CONTEXT_FILE), "utf-8")
     );
     if (parsed.kind !== WORKSPACE_CONTEXT_KIND || parsed.version !== WORKSPACE_CONTEXT_VERSION) {
       throw new Error(`${WORKSPACE_CONTEXT_FILE} is not an HCM workspace context`);
@@ -7372,25 +6514,25 @@ async function requireWorkspaceContext(rootDir) {
   return context;
 }
 async function writeWorkspaceContext(rootDir, context) {
-  await fs7.writeFile(
-    path7.join(rootDir, WORKSPACE_CONTEXT_FILE),
+  await fs5.writeFile(
+    path5.join(rootDir, WORKSPACE_CONTEXT_FILE),
     JSON.stringify(context, null, 2) + "\n"
   );
 }
 async function writeTextFile(file, content, force) {
   try {
-    await fs7.access(file);
+    await fs5.access(file);
     if (!force) throw new Error(`${file} already exists; use --force to overwrite`);
   } catch (e) {
     if (e.code !== "ENOENT") throw e;
   }
-  await fs7.mkdir(path7.dirname(file), { recursive: true });
-  await fs7.writeFile(file, content);
+  await fs5.mkdir(path5.dirname(file), { recursive: true });
+  await fs5.writeFile(file, content);
 }
 async function readWorkspaceRawManifest(rootDir, context) {
   try {
     const parsed = JSON.parse(
-      await fs7.readFile(path7.join(rootDir, WORKSPACE_STATE_DIR, WORKSPACE_PULL_MANIFEST_FILE), "utf-8")
+      await fs5.readFile(path5.join(rootDir, WORKSPACE_STATE_DIR, WORKSPACE_PULL_MANIFEST_FILE), "utf-8")
     );
     if (parsed.version !== WORKSPACE_CONTEXT_VERSION || parsed.workspaceKey !== context.workspaceKey) {
       throw new Error(`${WORKSPACE_PULL_MANIFEST_FILE} does not match workspace ${context.workspaceKey}`);
@@ -7408,8 +6550,8 @@ async function readWorkspaceRawManifest(rootDir, context) {
   }
 }
 async function writeWorkspaceRawState(rootDir, context, files, remoteByLocalPath) {
-  const stateDir = path7.join(rootDir, WORKSPACE_STATE_DIR);
-  await fs7.mkdir(stateDir, { recursive: true });
+  const stateDir = path5.join(rootDir, WORKSPACE_STATE_DIR);
+  await fs5.mkdir(stateDir, { recursive: true });
   const snapshots = files.map((file) => ({
     localPath: file.localPath,
     remotePath: file.localPath,
@@ -7418,8 +6560,8 @@ async function writeWorkspaceRawState(rootDir, context, files, remoteByLocalPath
     size: file.size,
     lastModified: remoteByLocalPath.get(file.localPath)?.lastModified
   }));
-  await fs7.writeFile(
-    path7.join(stateDir, WORKSPACE_PULL_MANIFEST_FILE),
+  await fs5.writeFile(
+    path5.join(stateDir, WORKSPACE_PULL_MANIFEST_FILE),
     JSON.stringify(
       {
         version: WORKSPACE_CONTEXT_VERSION,
@@ -7441,10 +6583,10 @@ async function readWorkspaceRawLocalFiles(rootDir) {
   return files;
 }
 async function walkWorkspaceRawFiles(rootDir, relativeDir, files) {
-  const absoluteDir = path7.join(rootDir, relativeDir);
+  const absoluteDir = path5.join(rootDir, relativeDir);
   let entries;
   try {
-    entries = await fs7.readdir(absoluteDir, { withFileTypes: true });
+    entries = await fs5.readdir(absoluteDir, { withFileTypes: true });
   } catch (e) {
     if (e.code === "ENOENT") return;
     throw e;
@@ -7452,19 +6594,19 @@ async function walkWorkspaceRawFiles(rootDir, relativeDir, files) {
   for (const entry of entries) {
     if (entry.isDirectory() && RAW_WORKSPACE_EXCLUDED_DIRS.has(entry.name)) continue;
     if (entry.isFile() && RAW_WORKSPACE_EXCLUDED_FILES.has(entry.name)) continue;
-    const localPath = normalizeRelativePath(path7.posix.join(toPosix(relativeDir), entry.name));
-    const absolutePath = path7.join(rootDir, localPath);
+    const localPath = normalizeRelativePath(path5.posix.join(toPosix(relativeDir), entry.name));
+    const absolutePath = path5.join(rootDir, localPath);
     if (entry.isDirectory()) {
       await walkWorkspaceRawFiles(rootDir, localPath, files);
       continue;
     }
     if (!entry.isFile()) continue;
-    const content = await fs7.readFile(absolutePath, "utf-8");
+    const content = await fs5.readFile(absolutePath, "utf-8");
     files.push({
       localPath,
       absolutePath,
       content,
-      sha256: sha2565(content),
+      sha256: sha2563(content),
       size: Buffer.byteLength(content, "utf-8")
     });
   }
@@ -7478,13 +6620,13 @@ async function pushWorkspaceRawFiles(args) {
   const localFiles = await readWorkspaceRawLocalFiles(args.rootDir);
   const remoteFiles = await loadWorkspaceRawRemoteFiles(args.http, args.context.workspaceKey);
   const plan = buildWorkspaceRawPushPlan(manifest2, localFiles, remoteFiles);
-  const result2 = {
+  const result = {
     workspaceKey: args.context.workspaceKey,
     dryRun: args.dryRun,
     operations: plan.operations,
     conflicts: plan.conflicts
   };
-  if (args.dryRun || plan.conflicts.length) return result2;
+  if (args.dryRun || plan.conflicts.length) return result;
   const localByPath = new Map(localFiles.map((file) => [file.localPath, file]));
   for (const operation of plan.operations) {
     if (operation.operation === "skip") continue;
@@ -7510,17 +6652,17 @@ async function pushWorkspaceRawFiles(args) {
   const latestRemoteFiles = await loadWorkspaceRawRemoteFiles(args.http, args.context.workspaceKey);
   const latestRemoteByLocalPath = new Map(latestRemoteFiles.map((file) => [file.item.relativePath, file.item]));
   await writeWorkspaceRawState(args.rootDir, args.context, localFiles, latestRemoteByLocalPath);
-  return result2;
+  return result;
 }
 async function loadWorkspaceRawRemoteFiles(http, workspaceKey) {
   const list = await listWorkspaceFiles(http, workspaceKey, { pageSize: 5e3 });
-  const result2 = [];
+  const result = [];
   for (const item of list.data) {
     if (isDirectoryMarker(item.relativePath) || isMiniAppPath(item.relativePath)) continue;
     const content = await loadWorkspaceFileContent(http, item.id);
-    result2.push({ item, content: content.content });
+    result.push({ item, content: content.content });
   }
-  return result2;
+  return result;
 }
 function buildWorkspaceRawPushPlan(manifest2, localFiles, remoteFiles) {
   const status = computeWorkspaceRawStatus(manifest2, localFiles);
@@ -7531,7 +6673,7 @@ function buildWorkspaceRawPushPlan(manifest2, localFiles, remoteFiles) {
   for (const entry of status) {
     const remote = remoteByLocal.get(entry.localPath);
     const base = baseByLocal.get(entry.localPath);
-    const remoteSha = remote ? sha2565(remote.content) : void 0;
+    const remoteSha = remote ? sha2563(remote.content) : void 0;
     if (entry.status === "added") {
       if (remote) {
         conflicts.push(workspaceRawConflict(entry, "remote file already exists but was not in local snapshot"));
@@ -7633,15 +6775,15 @@ function workspaceRawConflict(entry, reason) {
   };
 }
 async function discoverMiniApps(rootDir) {
-  const appsRoot = path7.join(rootDir, MINI_APPS_DIR);
+  const appsRoot = path5.join(rootDir, MINI_APPS_DIR);
   let entries;
   try {
-    entries = await fs7.readdir(appsRoot, { withFileTypes: true });
+    entries = await fs5.readdir(appsRoot, { withFileTypes: true });
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
   }
-  return entries.filter((entry) => entry.isDirectory()).map((entry) => ({ appCode: entry.name, dir: path7.join(appsRoot, entry.name) })).sort((a, b) => a.appCode.localeCompare(b.appCode));
+  return entries.filter((entry) => entry.isDirectory()).map((entry) => ({ appCode: entry.name, dir: path5.join(appsRoot, entry.name) })).sort((a, b) => a.appCode.localeCompare(b.appCode));
 }
 function detectRemoteMiniApps(files) {
   const appCodes = /* @__PURE__ */ new Set();
@@ -7794,9 +6936,9 @@ function normalizeRelativePath(value) {
   return normalized;
 }
 function toPosix(value) {
-  return value.split(path7.sep).join("/");
+  return value.split(path5.sep).join("/");
 }
-function sha2565(content) {
+function sha2563(content) {
   return crypto.createHash("sha256").update(content, "utf-8").digest("hex");
 }
 function stringRequired(value, field) {
@@ -7863,52 +7005,52 @@ function writeWorkspaceBindResult(context, rootDir, format) {
     ].join("\n") + "\n"
   );
 }
-function writeWorkspaceCreateResult(result2, format) {
+function writeWorkspaceCreateResult(result, format) {
   if (format !== "table") {
-    process.stdout.write(formatObject17(result2, { format }) + "\n");
+    process.stdout.write(formatObject17(result, { format }) + "\n");
     return;
   }
   process.stdout.write(
     [
-      `workspace created: ${result2.workspaceKey}`,
-      `id: ${result2.id}`,
-      `directory: ${result2.rootDir}`,
-      `profile: ${result2.profile}`,
-      `tenant: ${result2.tenantId}`,
-      `activated: ${result2.activated ? "yes" : "no"}`
+      `workspace created: ${result.workspaceKey}`,
+      `id: ${result.id}`,
+      `directory: ${result.rootDir}`,
+      `profile: ${result.profile}`,
+      `tenant: ${result.tenantId}`,
+      `activated: ${result.activated ? "yes" : "no"}`
     ].join("\n") + "\n"
   );
 }
-function writeWorkspacePullResult(result2, format) {
+function writeWorkspacePullResult(result, format) {
   if (format !== "table") {
-    process.stdout.write(formatObject17(result2, { format }) + "\n");
+    process.stdout.write(formatObject17(result, { format }) + "\n");
     return;
   }
   const lines = [
-    `workspace pulled: ${result2.workspaceKey}`,
-    `directory: ${result2.rootDir}`,
-    `remote files: ${result2.totalRemoteFiles}`,
-    `mini apps: ${result2.miniApps.length}`,
-    `raw files: ${result2.rawFiles.length}`
+    `workspace pulled: ${result.workspaceKey}`,
+    `directory: ${result.rootDir}`,
+    `remote files: ${result.totalRemoteFiles}`,
+    `mini apps: ${result.miniApps.length}`,
+    `raw files: ${result.rawFiles.length}`
   ];
-  if (result2.miniApps.length) {
+  if (result.miniApps.length) {
     lines.push("mini artifacts:");
-    for (const app of result2.miniApps) lines.push(`  - ${app.appCode}: ${app.files} files`);
+    for (const app of result.miniApps) lines.push(`  - ${app.appCode}: ${app.files} files`);
   }
   process.stdout.write(lines.join("\n") + "\n");
 }
-function writeWorkspaceAddMiniResult(result2, rootDir, format) {
+function writeWorkspaceAddMiniResult(result, rootDir, format) {
   if (format !== "table") {
-    process.stdout.write(formatObject17({ ...result2, workspaceRoot: rootDir }, { format }) + "\n");
+    process.stdout.write(formatObject17({ ...result, workspaceRoot: rootDir }, { format }) + "\n");
     return;
   }
   process.stdout.write(
     [
-      `workspace artifact added: mini:${result2.appCode}`,
-      `workspace: ${result2.workspaceKey}`,
+      `workspace artifact added: mini:${result.appCode}`,
+      `workspace: ${result.workspaceKey}`,
       `workspace root: ${rootDir}`,
-      `directory: ${result2.targetDir}`,
-      `files: ${result2.files.length}`
+      `directory: ${result.targetDir}`,
+      `files: ${result.files.length}`
     ].join("\n") + "\n"
   );
 }
@@ -8093,8 +7235,8 @@ import {
   deleteIdentity as deleteIdentity2,
   loadGlobalConfig as loadGlobalConfig8,
   TokenStore as TokenStore3,
-  CliError as CliError21,
-  CliErrorCode as CliErrorCode20
+  CliError as CliError19,
+  CliErrorCode as CliErrorCode18
 } from "@hcmai/sdk";
 async function identityList(args) {
   try {
@@ -8122,8 +7264,8 @@ async function identityUse(name) {
   try {
     const meta2 = await loadIdentity4(name);
     const env2 = await loadEnv7(meta2.env).catch(() => {
-      throw new CliError21({
-        code: CliErrorCode20.IDENTITY_NOT_IN_ENV,
+      throw new CliError19({
+        code: CliErrorCode18.IDENTITY_NOT_IN_ENV,
         message: `identity '${name}' references env '${meta2.env}' which no longer exists. Re-create the env, or remove this orphan: hcm identity remove ${name}`
       });
     });
@@ -8165,7 +7307,7 @@ import {
 } from "@hcmai/sdk";
 
 // src/commands/delivery.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 var APPROVAL_BYPASS_FLAGS = /* @__PURE__ */ new Set(["-y", "--yes", "--force", "--auto-approve"]);
 var CREDENTIAL_FLAGS = /* @__PURE__ */ new Set([
   "--password",
@@ -8187,7 +7329,7 @@ var GUARDED_EXECUTOR_REASON_CODES = /* @__PURE__ */ new Set([
 ]);
 function assessDeliveryCommand(inputArgv, options = {}) {
   const argv = inputArgv[0] === "--" ? inputArgv.slice(1) : [...inputArgv];
-  const commandSha256 = sha2566(JSON.stringify(argv));
+  const commandSha256 = sha2564(JSON.stringify(argv));
   const name = argv[0] ?? "";
   const subcommand = argv[1] && !argv[1].startsWith("-") ? argv[1] : void 0;
   const envAlias = flagValue(argv, "--env");
@@ -8218,7 +7360,7 @@ function assessDeliveryCommand(inputArgv, options = {}) {
   return {
     schemaVersion: 1,
     contractVersion: "2026-08-29",
-    assessmentId: sha2566(`2026-08-29
+    assessmentId: sha2564(`2026-08-29
 ${commandSha256}`).slice(0, 24),
     commandSha256,
     command: { name: name || "(empty)", ...subcommand ? { subcommand } : {} },
@@ -8390,17 +7532,17 @@ function summarizeTarget(argv, actionResolution) {
   }
   const id = flagValue(argv, "--id");
   if (name === "user" && subcommand === "reset-password") {
-    if (id) target.userIdSha256 = sha2566(id);
+    if (id) target.userIdSha256 = sha2564(id);
     const username = flagValue(argv, "--username");
-    if (username) target.usernameSha256 = sha2566(username);
+    if (username) target.usernameSha256 = sha2564(username);
     target.forceChangeOnNextLogin = !hasFlag(argv, "--no-force-change");
   } else if (id) {
-    target.recordIdSha256 = sha2566(id);
+    target.recordIdSha256 = sha2564(id);
   }
   for (const flag of PAYLOAD_FLAGS) {
     const raw = flagValue(argv, flag);
     if (!raw) continue;
-    target.payloadSha256 = sha2566(raw);
+    target.payloadSha256 = sha2564(raw);
     try {
       const parsed = JSON.parse(raw);
       if (isPlainObject(parsed)) target.fieldNames = Object.keys(parsed).sort();
@@ -8497,8 +7639,8 @@ function valuesAfterFlag(argv, flag) {
   }
   return values;
 }
-function sha2566(value) {
-  return createHash6("sha256").update(value).digest("hex");
+function sha2564(value) {
+  return createHash4("sha256").update(value).digest("hex");
 }
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -8683,11 +7825,11 @@ async function deliveryReconCommand(args) {
 async function deliveryReconRoundCommand(args) {
   let code;
   try {
-    const result2 = inspectRound(args.dir ?? ".");
+    const result = inspectRound(args.dir ?? ".");
     const fmt = args.output ?? "json";
-    if (fmt !== "json") process.stdout.write(renderRound(result2));
-    process.stdout.write(formatObject20(result2, { format: fmt }) + "\n");
-    code = ROUND_EXIT_CODES[result2.state];
+    if (fmt !== "json") process.stdout.write(renderRound(result));
+    process.stdout.write(formatObject20(result, { format: fmt }) + "\n");
+    code = ROUND_EXIT_CODES[result.state];
   } catch (e) {
     exitWithError(e);
     code = 1;
@@ -8708,20 +7850,20 @@ import {
   loadProtocolFacts,
   scan
 } from "@hcmai/sdk";
-import * as path8 from "path";
-function renderGate0(result2, skillRoot) {
-  const where = skillRoot ? `\uFF08${path8.resolve(skillRoot)}\uFF09` : "";
+import * as path6 from "path";
+function renderGate0(result, skillRoot) {
+  const where = skillRoot ? `\uFF08${path6.resolve(skillRoot)}\uFF09` : "";
   const lines = [
-    `\u626B\u63CF\u9762${where}\uFF1A${result2.scanned.length} \u4E2A\u6587\u4EF6\uFF1B\u5224\u7EA2 ${result2.red.length} \u6761\uFF1B\u7F3A\u53E3\u653E\u884C ${result2.gaps.length} \u6761\u3002`
+    `\u626B\u63CF\u9762${where}\uFF1A${result.scanned.length} \u4E2A\u6587\u4EF6\uFF1B\u5224\u7EA2 ${result.red.length} \u6761\uFF1B\u7F3A\u53E3\u653E\u884C ${result.gaps.length} \u6761\u3002`
   ];
   for (const channel of CHANNELS) {
-    const rows = result2.channels[channel];
+    const rows = result.channels[channel];
     lines.push(`  [${channel}] ${rows.length} \u6761`);
     for (const red of rows) lines.push(`    - (${red.reason}) ${red.message}`);
   }
-  if (result2.gaps.length > 0) {
-    lines.push(`  [gaps] ${result2.gaps.length} \u6761\uFF08\u4E0D\u9876 rc\uFF0C\u8BF7\u81EA\u5DF1\u770B\u4E00\u773C\uFF09`);
-    for (const gap of result2.gaps) lines.push(`    - (${gap.reason}) ${gap.why}`);
+  if (result.gaps.length > 0) {
+    lines.push(`  [gaps] ${result.gaps.length} \u6761\uFF08\u4E0D\u9876 rc\uFF0C\u8BF7\u81EA\u5DF1\u770B\u4E00\u773C\uFF09`);
+    for (const gap of result.gaps) lines.push(`    - (${gap.reason}) ${gap.why}`);
   }
   return `${lines.join("\n")}
 `;
@@ -8733,17 +7875,17 @@ async function deliveryGate0Command(args) {
     const reconDir = args.recon ?? ".";
     const { aclass, problems: aclassProblems } = deriveAclass(reconDir, args.mapping ?? null);
     const { facts, problems: factsProblems } = loadProtocolFacts();
-    const result2 = scan(skillRoot, aclass, facts, { aclassProblems, factsProblems });
-    const premise = checkPremise([
-      ...result2.premise,
+    const result = scan(skillRoot, aclass, facts, { aclassProblems, factsProblems });
+    const premise2 = checkPremise([
+      ...result.premise,
       ...baselineRoundPremise(inspectRound2(reconDir))
     ]);
-    const merged = { ...result2, premise };
+    const merged = { ...result, premise: premise2 };
     const fmt = args.output ?? "json";
     if (fmt !== "json") process.stdout.write(renderGate0(merged, skillRoot));
     process.stdout.write(`${formatObject21(merged, { format: fmt })}
 `);
-    for (const problem of premise) {
+    for (const problem of premise2) {
       process.stderr.write(`\u{1F534} \u524D\u63D0\u4E0D\u6210\u7ACB\uFF08${problem.reason}\uFF09\uFF1A${problem.message}
 `);
     }
@@ -8755,14 +7897,99 @@ async function deliveryGate0Command(args) {
   process.exit(code);
 }
 
+// src/commands/delivery-triage.ts
+init_auth_guard();
+init_exit();
+import {
+  computeReconSourceKey as computeReconSourceKey2,
+  HcmClient as HcmClient20,
+  httpProbe as httpProbe3,
+  ReconLayout as ReconLayout2,
+  runTriageRound
+} from "@hcmai/sdk";
+import { mkdirSync, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "fs";
+import * as path7 from "path";
+var DEFAULT_CAPABILITIES3 = "default";
+function premise(message, hint) {
+  process.stderr.write(`\u{1F534} \u524D\u63D0\u4E0D\u6210\u7ACB\uFF1A${message}
+`);
+  process.stderr.write(`   ${hint}
+`);
+  return 1;
+}
+var REQUESTS_SHAPE = "`--requests` \u6536\u7684\u662F\u4E00\u4E2A JSON \u6570\u7EC4\uFF0C\u6BCF\u6761\u81F3\u5C11\u8981\u6709 `request` / `verdict` / `evidence` \u4E09\u683C\u3002\u516D\u683C\u6838\u67E5\u8868\u7531\u672C\u547D\u4EE4\u81EA\u5DF1\u586B\uFF0C\u522B\u624B\u5199\u3002";
+function readRequests(file) {
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync4(file, "utf8"));
+  } catch (e) {
+    throw new Error(`\u9700\u6C42\u6E05\u5355\u8BFB\u4E0D\u51FA\u6765\uFF08${file}\uFF09\uFF1A${e instanceof Error ? e.message : String(e)}`);
+  }
+  if (!Array.isArray(raw)) {
+    throw new Error(`\u9700\u6C42\u6E05\u5355\u4E0D\u662F\u4E00\u4E2A JSON \u6570\u7EC4\uFF08${file}\uFF09\uFF0C\u5B9E\u9645\u662F ${typeof raw}`);
+  }
+  raw.forEach((row, i) => {
+    if (!row || typeof row !== "object" || Array.isArray(row)) {
+      throw new Error(`\u9700\u6C42\u6E05\u5355\u7B2C ${i + 1} \u6761\u4E0D\u662F\u4E00\u4E2A JSON \u5BF9\u8C61\uFF0C\u800C\u662F ${typeof row}`);
+    }
+  });
+  return raw;
+}
+function renderProblems(rows) {
+  const lines = ["\u5206\u8BCA\u7ED3\u8BBA\u4E0E\u8BC1\u636E\u6253\u67B6\uFF0C\u8FD9\u4EFD\u4EA7\u51FA\u6CA1\u6709\u843D\u76D8\uFF1A"];
+  for (const row of rows) {
+    lines.push(`  [${row.idx}] ${row.request.slice(0, 30)} \xB7 ${row.rule}\uFF1A${row.note}`);
+  }
+  return `${lines.join("\n")}
+`;
+}
+function writeTriageArtifact(outDir, body) {
+  const out = path7.join(outDir, "work", "triage.md");
+  mkdirSync(path7.dirname(out), { recursive: true });
+  writeFileSync2(out, body, "utf8");
+  return out;
+}
+async function runTriage(args) {
+  if (!args.requests) return premise("\u6CA1\u7ED9 `--requests`", REQUESTS_SHAPE);
+  let entriesIn;
+  try {
+    entriesIn = readRequests(args.requests);
+  } catch (e) {
+    return premise(e instanceof Error ? e.message : String(e), REQUESTS_SHAPE);
+  }
+  const ctx = await getActiveAuthContextFromCli(args);
+  const client3 = HcmClient20.fromAuthContext(ctx);
+  const probe = httpProbe3(client3.raw(), args.capabilities ?? DEFAULT_CAPABILITIES3);
+  const artifactsDir = args.recon ?? new ReconLayout2(args.out ?? ".", ctx.tenantId, await computeReconSourceKey2(probe)).dir;
+  const result = await runTriageRound(probe, artifactsDir, entriesIn);
+  if (result.body === null) {
+    process.stdout.write(renderProblems(result.problems));
+    return 1;
+  }
+  const out = writeTriageArtifact(args.out ?? ".", result.body);
+  process.stdout.write(`\u5206\u8BCA\u81EA\u6D3D\uFF0C\u5DF2\u5199 ${out}\uFF08${result.entries.length} \u6761\uFF09
+`);
+  return 0;
+}
+async function deliveryTriageCommand(args) {
+  let code;
+  try {
+    code = await runTriage(args);
+  } catch (e) {
+    exitWithError(e);
+    code = 1;
+  }
+  process.exit(code);
+}
+
 // src/commands/delivery-execution.ts
-import { createHash as createHash7, randomBytes as secureRandomBytes } from "crypto";
+import { createHash as createHash5, randomBytes as secureRandomBytes } from "crypto";
 import { spawn } from "child_process";
-import { createReadStream as createReadStream2, promises as fs8 } from "fs";
-import path9 from "path";
-import { CliError as CliError22, CliErrorCode as CliErrorCode21, formatObject as formatObject22 } from "@hcmai/sdk";
+import { createReadStream, promises as fs6 } from "fs";
+import path8 from "path";
+import { CliError as CliError20, CliErrorCode as CliErrorCode19, formatObject as formatObject22 } from "@hcmai/sdk";
 init_exit();
-var EXECUTION_CONTRACT_VERSION = "2026-08-29.controlled-v2";
+var EXECUTION_CONTRACT_VERSION = "2026-08-29.controlled-v3";
 var DEFAULT_TTL_SECONDS = 15 * 60;
 var MIN_TTL_SECONDS = 60;
 var MAX_TTL_SECONDS = 60 * 60;
@@ -8774,102 +8001,102 @@ async function prepareDeliveryExecution(input) {
   assertGuardedAssessment(assessment, input.argv);
   const ttlSeconds = input.ttlSeconds ?? DEFAULT_TTL_SECONDS;
   if (!Number.isInteger(ttlSeconds) || ttlSeconds < MIN_TTL_SECONDS || ttlSeconds > MAX_TTL_SECONDS) {
-    throw invalid4(`--ttl-seconds \u5FC5\u987B\u662F ${MIN_TTL_SECONDS} \u5230 ${MAX_TTL_SECONDS} \u7684\u6574\u6570`);
+    throw invalid2(`--ttl-seconds \u5FC5\u987B\u662F ${MIN_TTL_SECONDS} \u5230 ${MAX_TTL_SECONDS} \u7684\u6574\u6570`);
   }
   const change = await bindDocument(project, input.changeRef, "\u53D8\u66F4\u8BF4\u660E");
   const rollback = await bindDocument(project, input.rollbackRef, "\u56DE\u6EDA\u8BF4\u660E");
   const payloads = await bindPayloadFiles(project, input.argv);
   const evidence = await bindEvidenceDirectory(project, input.evidenceDir);
-  const { bytes: lockBytes, runtime: lockedRuntime } = await readChironLock(project);
+  const { bytes: lockBytes, runtime: lockedRuntime } = await readSkillsLock(project);
   const runtime = await (input.runtimeIdentity ?? currentRuntimeIdentity)();
   assertRuntimeMatches(runtime, lockedRuntime);
   const created = (input.now ?? (() => /* @__PURE__ */ new Date()))();
-  if (Number.isNaN(created.getTime())) throw invalid4("\u5F53\u524D\u65F6\u95F4\u65E0\u6548");
+  if (Number.isNaN(created.getTime())) throw invalid2("\u5F53\u524D\u65F6\u95F4\u65E0\u6548");
   const core = {
     schemaVersion: 1,
     contractVersion: EXECUTION_CONTRACT_VERSION,
-    nonceSha256: sha2567((input.randomBytes ?? secureRandomBytes)(12)),
+    nonceSha256: sha2565((input.randomBytes ?? secureRandomBytes)(12)),
     createdAt: created.toISOString(),
     expiresAt: new Date(created.getTime() + ttlSeconds * 1e3).toISOString(),
-    chironLockSha256: sha2567(lockBytes),
+    skillsLockSha256: sha2565(lockBytes),
     runtime,
     assessment,
     documents: { change, rollback },
     payloads,
     evidenceDir: evidence.relative
   };
-  const planId = sha2567(canonicalJson(core)).slice(0, 24);
+  const planId = sha2565(canonicalJson(core)).slice(0, 24);
   const plan = { ...core, planId };
-  const plansDir = path9.join(project, ".hcm-delivery", "execution-plans");
+  const plansDir = path8.join(project, ".hcm-delivery", "execution-plans");
   await safeManagedDirectory(project, ".hcm-delivery/execution-plans", plansDir);
-  const planFile = path9.join(plansDir, `${planId}.json`);
+  const planFile = path8.join(plansDir, `${planId}.json`);
   try {
-    await fs8.writeFile(planFile, `${JSON.stringify(plan, null, 2)}
+    await fs6.writeFile(planFile, `${JSON.stringify(plan, null, 2)}
 `, {
       encoding: "utf8",
       mode: 384,
       flag: "wx"
     });
   } catch (cause) {
-    throw invalid4(`\u6267\u884C\u8BA1\u5212\u5199\u5165\u5931\u8D25\u6216 planId \u5DF2\u5B58\u5728\uFF1A${planId}`, cause);
+    throw invalid2(`\u6267\u884C\u8BA1\u5212\u5199\u5165\u5931\u8D25\u6216 planId \u5DF2\u5B58\u5728\uFF1A${planId}`, cause);
   }
   return plan;
 }
 async function executeDeliveryPlan(input) {
-  if (!PLAN_ID_PATTERN.test(input.planId)) throw invalid4("planId \u5FC5\u987B\u662F 24 \u4F4D\u5C0F\u5199\u5341\u516D\u8FDB\u5236");
+  if (!PLAN_ID_PATTERN.test(input.planId)) throw invalid2("planId \u5FC5\u987B\u662F 24 \u4F4D\u5C0F\u5199\u5341\u516D\u8FDB\u5236");
   const project = await realProject(input.project);
   if (await readProjectMode(project) !== "controlled") {
-    throw invalid4("\u9879\u76EE\u4E0D\u662F controlled\uFF0C\u4E0D\u80FD\u6267\u884C R2 \u8BA1\u5212");
+    throw invalid2("\u9879\u76EE\u4E0D\u662F controlled\uFF0C\u4E0D\u80FD\u6267\u884C R2 \u8BA1\u5212");
   }
-  const planFile = path9.join(project, ".hcm-delivery", "execution-plans", `${input.planId}.json`);
+  const planFile = path8.join(project, ".hcm-delivery", "execution-plans", `${input.planId}.json`);
   const plan = await readPlan(project, planFile);
   if (plan.planId !== input.planId || computePlanId(plan) !== input.planId) {
-    throw invalid4("\u6267\u884C\u8BA1\u5212\u5185\u5BB9\u4E0E planId \u6458\u8981\u4E0D\u4E00\u81F4");
+    throw invalid2("\u6267\u884C\u8BA1\u5212\u5185\u5BB9\u4E0E planId \u6458\u8981\u4E0D\u4E00\u81F4");
   }
   const now = (input.now ?? (() => /* @__PURE__ */ new Date()))();
-  if (Number.isNaN(now.getTime())) throw invalid4("\u5F53\u524D\u65F6\u95F4\u65E0\u6548");
+  if (Number.isNaN(now.getTime())) throw invalid2("\u5F53\u524D\u65F6\u95F4\u65E0\u6548");
   const expiresAt = Date.parse(plan.expiresAt);
   const createdAt = Date.parse(plan.createdAt);
   if (!Number.isFinite(createdAt) || !Number.isFinite(expiresAt) || expiresAt - createdAt < MIN_TTL_SECONDS * 1e3 || expiresAt - createdAt > MAX_TTL_SECONDS * 1e3) {
-    throw invalid4("\u6267\u884C\u8BA1\u5212\u65F6\u95F4\u7A97\u53E3\u65E0\u6548");
+    throw invalid2("\u6267\u884C\u8BA1\u5212\u65F6\u95F4\u7A97\u53E3\u65E0\u6548");
   }
-  if (now.getTime() < createdAt - 5e3) throw invalid4("\u5F53\u524D\u65F6\u95F4\u65E9\u4E8E\u8BA1\u5212\u521B\u5EFA\u65F6\u95F4");
-  if (now.getTime() > expiresAt) throw invalid4("\u6267\u884C\u8BA1\u5212\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0 prepare");
+  if (now.getTime() < createdAt - 5e3) throw invalid2("\u5F53\u524D\u65F6\u95F4\u65E9\u4E8E\u8BA1\u5212\u521B\u5EFA\u65F6\u95F4");
+  if (now.getTime() > expiresAt) throw invalid2("\u6267\u884C\u8BA1\u5212\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0 prepare");
   const assessment = await (input.assessCommand ?? assessEffectiveDeliveryCommand)(input.argv);
   assertGuardedAssessment(assessment, input.argv);
   if (canonicalJson(assessment) !== canonicalJson(plan.assessment)) {
-    throw invalid4("\u5B9E\u9645 argv \u4E0E\u6267\u884C\u8BA1\u5212\u7684\u547D\u4EE4\u6458\u8981\u6216\u98CE\u9669\u4E8B\u5B9E\u4E0D\u4E00\u81F4");
+    throw invalid2("\u5B9E\u9645 argv \u4E0E\u6267\u884C\u8BA1\u5212\u7684\u547D\u4EE4\u6458\u8981\u6216\u98CE\u9669\u4E8B\u5B9E\u4E0D\u4E00\u81F4");
   }
-  const { bytes: lockBytes, runtime: lockedRuntime } = await readChironLock(project);
-  if (sha2567(lockBytes) !== plan.chironLockSha256) {
-    throw invalid4("Chiron \u9501\u6458\u8981\u5DF2\u6F02\u79FB\uFF0C\u8BF7\u91CD\u65B0\u8BC4\u4F30\u5E76 prepare");
+  const { bytes: lockBytes, runtime: lockedRuntime } = await readSkillsLock(project);
+  if (sha2565(lockBytes) !== plan.skillsLockSha256) {
+    throw invalid2("\u6280\u80FD\u9501\u6458\u8981\u5DF2\u6F02\u79FB\uFF0C\u8BF7\u91CD\u65B0\u8BC4\u4F30\u5E76 prepare");
   }
   const runtime = await (input.runtimeIdentity ?? currentRuntimeIdentity)();
   assertRuntimeMatches(runtime, lockedRuntime);
   if (canonicalJson(runtime) !== canonicalJson(plan.runtime)) {
-    throw invalid4("CLI \u8FD0\u884C\u65F6\u6458\u8981\u4E0E\u6267\u884C\u8BA1\u5212\u4E0D\u4E00\u81F4");
+    throw invalid2("CLI \u8FD0\u884C\u65F6\u6458\u8981\u4E0E\u6267\u884C\u8BA1\u5212\u4E0D\u4E00\u81F4");
   }
   await assertDocumentUnchanged(project, plan.documents.change, "\u53D8\u66F4\u8BF4\u660E");
   await assertDocumentUnchanged(project, plan.documents.rollback, "\u56DE\u6EDA\u8BF4\u660E");
   await assertPayloadsUnchanged(project, plan.payloads);
   const evidenceDir = await bindEvidenceDirectory(project, plan.evidenceDir);
-  const receiptFile = path9.join(evidenceDir.absolute, `${plan.planId}.receipt.json`);
-  if (await pathExists(receiptFile)) throw invalid4(`\u6267\u884C\u6536\u636E\u5DF2\u5B58\u5728\uFF0C\u62D2\u7EDD\u518D\u6B21\u6267\u884C\uFF1A${plan.planId}`);
-  const claimsDir = path9.join(project, ".hcm-delivery", "execution-claims");
+  const receiptFile = path8.join(evidenceDir.absolute, `${plan.planId}.receipt.json`);
+  if (await pathExists(receiptFile)) throw invalid2(`\u6267\u884C\u6536\u636E\u5DF2\u5B58\u5728\uFF0C\u62D2\u7EDD\u518D\u6B21\u6267\u884C\uFF1A${plan.planId}`);
+  const claimsDir = path8.join(project, ".hcm-delivery", "execution-claims");
   await safeManagedDirectory(project, ".hcm-delivery/execution-claims", claimsDir);
-  const claimFile = path9.join(claimsDir, `${plan.planId}.json`);
+  const claimFile = path8.join(claimsDir, `${plan.planId}.json`);
   try {
-    await fs8.writeFile(
+    await fs6.writeFile(
       claimFile,
       `${JSON.stringify({ schemaVersion: 1, planId: plan.planId, claimedAt: now.toISOString() }, null, 2)}
 `,
       { encoding: "utf8", mode: 384, flag: "wx" }
     );
   } catch (cause) {
-    throw invalid4(`\u6267\u884C\u8BA1\u5212\u5DF2\u6D88\u8D39\uFF0C\u62D2\u7EDD\u91CD\u590D\u6267\u884C\uFF1A${plan.planId}`, cause);
+    throw invalid2(`\u6267\u884C\u8BA1\u5212\u5DF2\u6D88\u8D39\uFF0C\u62D2\u7EDD\u91CD\u590D\u6267\u884C\uFF1A${plan.planId}`, cause);
   }
-  const stdoutHash = createHash7("sha256");
-  const stderrHash = createHash7("sha256");
+  const stdoutHash = createHash5("sha256");
+  const stderrHash = createHash5("sha256");
   const run = input.runCommand ?? runCurrentCliCommand;
   let exitCode;
   try {
@@ -8885,7 +8112,7 @@ async function executeDeliveryPlan(input) {
     exitCode = 1;
   }
   const completed = (input.now ?? (() => /* @__PURE__ */ new Date()))();
-  if (Number.isNaN(completed.getTime())) throw invalid4("\u5B8C\u6210\u65F6\u95F4\u65E0\u6548");
+  if (Number.isNaN(completed.getTime())) throw invalid2("\u5B8C\u6210\u65F6\u95F4\u65E0\u6548");
   if (!Number.isInteger(exitCode) || exitCode < 0) exitCode = 1;
   const receipt = {
     schemaVersion: 1,
@@ -8904,9 +8131,9 @@ async function executeDeliveryPlan(input) {
 }
 async function deliveryPrepareCommand(argv, args) {
   try {
-    if (!args.changeRef) throw invalid4("--change-ref <file> \u5FC5\u586B");
-    if (!args.rollbackRef) throw invalid4("--rollback-ref <file> \u5FC5\u586B");
-    if (!args.evidenceDir) throw invalid4("--evidence-dir <dir> \u5FC5\u586B");
+    if (!args.changeRef) throw invalid2("--change-ref <file> \u5FC5\u586B");
+    if (!args.rollbackRef) throw invalid2("--rollback-ref <file> \u5FC5\u586B");
+    if (!args.evidenceDir) throw invalid2("--evidence-dir <dir> \u5FC5\u586B");
     const ttlSeconds = parseTtl(args.ttlSeconds);
     const plan = await prepareDeliveryExecution({
       project: args.project ?? process.cwd(),
@@ -8935,54 +8162,75 @@ async function deliveryExecuteCommand(planId, argv, args) {
   }
 }
 async function readProjectMode(project) {
-  const file = path9.join(project, ".hcm-delivery", "project.yml");
+  const file = path8.join(project, ".hcm-delivery", "project.yml");
   const content = await readSafeFile(project, file, "\u9879\u76EE\u914D\u7F6E");
   const match = content.toString("utf8").match(
     /^deliveryMode:\s*(?:"(plan-only|controlled)"|'(plan-only|controlled)'|(plan-only|controlled))\s*$/m
   );
   const mode = match?.[1] ?? match?.[2] ?? match?.[3];
   if (mode !== "plan-only" && mode !== "controlled") {
-    throw invalid4("project.yml \u7F3A\u5C11\u5408\u6CD5 deliveryMode");
+    throw invalid2("project.yml \u7F3A\u5C11\u5408\u6CD5 deliveryMode");
   }
   return mode;
 }
-async function readChironLock(project) {
-  const file = path9.join(project, ".hcm-delivery", "chiron.lock.json");
-  const bytes = await readSafeFile(project, file, "Chiron \u9501");
+var SKILLS_LOCK_CANDIDATES = [
+  path8.join("hcm-skills", ".hcm-skills.json"),
+  path8.join(".claude", "skills", ".hcm-skills.json")
+];
+async function readSkillsLock(project) {
+  const found = [];
+  for (const candidate of SKILLS_LOCK_CANDIDATES) {
+    if (await pathExists(path8.join(project, candidate))) found.push(candidate);
+  }
+  if (found.length === 0) {
+    throw invalid2(
+      "\u627E\u4E0D\u5230\u6280\u80FD\u9501\uFF08hcm-skills/.hcm-skills.json \u6216 .claude/skills/.hcm-skills.json\uFF09\u3002next_step=\u5148\u5728\u9879\u76EE\u91CC\u8DD1\u4E00\u6B21 `hcm skills install <id>`\uFF0C\u518D\u91CD\u65B0 prepare"
+    );
+  }
+  if (found.length > 1) {
+    throw invalid2(
+      `\u9879\u76EE\u91CC\u6709\u591A\u4EFD\u6280\u80FD\u9501\uFF08${found.join("\u3001")}\uFF09\uFF0C\u65E0\u6CD5\u552F\u4E00\u5224\u5B9A\u53D7\u63A7\u6267\u884C\u7ED1\u5B9A\u54EA\u4E00\u4EFD\u3002next_step=\u53EA\u4FDD\u7559\u5B9E\u9645\u5728\u7528\u7684\u90A3\u4E2A\u6280\u80FD\u76EE\u5F55`
+    );
+  }
+  const bytes = await readSafeFile(project, path8.join(project, found[0]), "\u6280\u80FD\u9501");
   let parsed;
   try {
     parsed = JSON.parse(bytes.toString("utf8"));
   } catch (cause) {
-    throw invalid4("Chiron \u9501\u4E0D\u662F\u5408\u6CD5 JSON", cause);
+    throw invalid2("\u6280\u80FD\u9501\u4E0D\u662F\u5408\u6CD5 JSON", cause);
   }
   const launch = parsed?.runtime?.launch;
-  if (!isRuntimeIdentity(launch)) throw invalid4("Chiron \u9501\u7F3A\u5C11\u5408\u6CD5 runtime.launch \u6458\u8981");
+  if (!isRuntimeIdentity(launch)) {
+    throw invalid2(
+      "\u6280\u80FD\u9501\u6CA1\u6709\u8BB0\u5F55 runtime.launch\uFF0C\u65E0\u6CD5\u786E\u8BA4\u300C\u73B0\u5728\u8FD9\u4EFD CLI \u5C31\u662F\u5F53\u521D\u88C5\u6280\u80FD\u7684\u90A3\u4EFD\u300D\u3002next_step=\u7528\u5F53\u524D CLI \u91CD\u8DD1\u4E00\u6B21 `hcm skills install`\uFF08\u6216 `hcm skills update`\uFF09\u5237\u65B0\u6280\u80FD\u9501"
+    );
+  }
   return { bytes, runtime: launch };
 }
 async function bindDocument(project, reference, label) {
   const relative2 = safeRelative(reference, label);
   if (!(relative2.startsWith("work/") || relative2.startsWith("decisions/"))) {
-    throw invalid4(`${label}\u5FC5\u987B\u4F4D\u4E8E\u9879\u76EE work/ \u6216 decisions/ \u4E0B`);
+    throw invalid2(`${label}\u5FC5\u987B\u4F4D\u4E8E\u9879\u76EE work/ \u6216 decisions/ \u4E0B`);
   }
-  const file = path9.join(project, relative2);
+  const file = path8.join(project, relative2);
   const bytes = await readSafeFile(project, file, label);
-  return { path: relative2, sha256: sha2567(bytes) };
+  return { path: relative2, sha256: sha2565(bytes) };
 }
 async function assertDocumentUnchanged(project, document, label) {
   const current = await bindDocument(project, document.path, label);
-  if (current.sha256 !== document.sha256) throw invalid4(`${label}\u6458\u8981\u5DF2\u6F02\u79FB\uFF0C\u8BF7\u91CD\u65B0 prepare`);
+  if (current.sha256 !== document.sha256) throw invalid2(`${label}\u6458\u8981\u5DF2\u6F02\u79FB\uFF0C\u8BF7\u91CD\u65B0 prepare`);
 }
 async function bindEvidenceDirectory(project, reference) {
   const relative2 = safeRelative(reference, "evidence \u76EE\u5F55");
   if (!(relative2 === "evidence" || relative2.startsWith("evidence/"))) {
-    throw invalid4("evidence \u76EE\u5F55\u5FC5\u987B\u4F4D\u4E8E\u9879\u76EE evidence/ \u4E0B");
+    throw invalid2("evidence \u76EE\u5F55\u5FC5\u987B\u4F4D\u4E8E\u9879\u76EE evidence/ \u4E0B");
   }
-  const absolute = path9.join(project, relative2);
+  const absolute = path8.join(project, relative2);
   await assertNoSymlinkComponents(project, relative2);
-  const stat = await fs8.stat(absolute).catch((cause) => {
-    throw invalid4(`evidence \u76EE\u5F55\u4E0D\u53EF\u7528\uFF1A${relative2}`, cause);
+  const stat = await fs6.stat(absolute).catch((cause) => {
+    throw invalid2(`evidence \u76EE\u5F55\u4E0D\u53EF\u7528\uFF1A${relative2}`, cause);
   });
-  if (!stat.isDirectory()) throw invalid4(`evidence \u8DEF\u5F84\u4E0D\u662F\u76EE\u5F55\uFF1A${relative2}`);
+  if (!stat.isDirectory()) throw invalid2(`evidence \u8DEF\u5F84\u4E0D\u662F\u76EE\u5F55\uFF1A${relative2}`);
   return { relative: relative2, absolute };
 }
 async function readPlan(project, file) {
@@ -8991,39 +8239,39 @@ async function readPlan(project, file) {
   try {
     plan = JSON.parse(bytes.toString("utf8"));
   } catch (cause) {
-    throw invalid4("\u6267\u884C\u8BA1\u5212\u4E0D\u662F\u5408\u6CD5 JSON", cause);
+    throw invalid2("\u6267\u884C\u8BA1\u5212\u4E0D\u662F\u5408\u6CD5 JSON", cause);
   }
-  if (!isExecutionPlan(plan)) throw invalid4("\u6267\u884C\u8BA1\u5212 schema \u65E0\u6548");
+  if (!isExecutionPlan(plan)) throw invalid2("\u6267\u884C\u8BA1\u5212 schema \u65E0\u6548");
   return plan;
 }
 function computePlanId(plan) {
   const core = { ...plan };
   delete core.planId;
-  return sha2567(canonicalJson(core)).slice(0, 24);
+  return sha2565(canonicalJson(core)).slice(0, 24);
 }
 function assertGuardedAssessment(assessment, argv) {
-  if (assessment.risk !== "R2") throw invalid4("\u53EA\u6709 R2 \u547D\u4EE4\u53EF\u4EE5\u8FDB\u5165\u53D7\u63A7\u6267\u884C\u8BA1\u5212");
+  if (assessment.risk !== "R2") throw invalid2("\u53EA\u6709 R2 \u547D\u4EE4\u53EF\u4EE5\u8FDB\u5165\u53D7\u63A7\u6267\u884C\u8BA1\u5212");
   if (!assessment.guardedExecutionAvailable) {
-    throw invalid4("\u8BE5 R2 \u547D\u4EE4\u4E0D\u5728\u9996\u6279\u53D7\u63A7\u6267\u884C\u5668\u652F\u6301\u9762");
+    throw invalid2("\u8BE5 R2 \u547D\u4EE4\u4E0D\u5728\u9996\u6279\u53D7\u63A7\u6267\u884C\u5668\u652F\u6301\u9762");
   }
-  if (!assessment.environment.envAlias) throw invalid4("R2 argv \u5FC5\u987B\u663E\u5F0F\u5305\u542B --env \u73AF\u5883\u522B\u540D");
+  if (!assessment.environment.envAlias) throw invalid2("R2 argv \u5FC5\u987B\u663E\u5F0F\u5305\u542B --env \u73AF\u5883\u522B\u540D");
   if (!assessment.environment.identityAlias) {
-    throw invalid4("R2 argv \u5FC5\u987B\u663E\u5F0F\u5305\u542B --as \u8EAB\u4EFD\u522B\u540D");
+    throw invalid2("R2 argv \u5FC5\u987B\u663E\u5F0F\u5305\u542B --as \u8EAB\u4EFD\u522B\u540D");
   }
   validateSupportedCommandShape(assessment.reasonCode, argv);
 }
 function validateSupportedCommandShape(reasonCode, argv) {
   if (reasonCode === "credential-reset") {
     if (argv[0] !== "user" || argv[1] !== "reset-password") {
-      throw invalid4("credential-reset \u53EA\u652F\u6301 user reset-password");
+      throw invalid2("credential-reset \u53EA\u652F\u6301 user reset-password");
     }
     const userId = optionalFlagValue(argv, "--id");
     const username = optionalFlagValue(argv, "--username");
     if (Boolean(userId) === Boolean(username)) {
-      throw invalid4("user reset-password \u5FC5\u987B\u4E14\u53EA\u80FD\u5305\u542B --id \u6216 --username");
+      throw invalid2("user reset-password \u5FC5\u987B\u4E14\u53EA\u80FD\u5305\u542B --id \u6216 --username");
     }
     if (!argv.includes("--password-stdin")) {
-      throw invalid4("user reset-password \u5FC5\u987B\u5305\u542B\u72EC\u7ACB\u7684 --password-stdin");
+      throw invalid2("user reset-password \u5FC5\u987B\u5305\u542B\u72EC\u7ACB\u7684 --password-stdin");
     }
     if (argv.some(
       (value) => [
@@ -9035,7 +8283,7 @@ function validateSupportedCommandShape(reasonCode, argv) {
         "--pat-stdin"
       ].includes(value.split("=", 1)[0] ?? "")
     ) || argv.some((value) => value.startsWith("--password-stdin="))) {
-      throw invalid4("user reset-password \u4E0D\u5141\u8BB8\u5728 argv \u4E2D\u643A\u5E26\u660E\u6587\u51ED\u636E");
+      throw invalid2("user reset-password \u4E0D\u5141\u8BB8\u5728 argv \u4E2D\u643A\u5E26\u660E\u6587\u51ED\u636E");
     }
     return;
   }
@@ -9049,17 +8297,17 @@ function validateSupportedCommandShape(reasonCode, argv) {
     return;
   }
   if (reasonCode === "cache-mutation") {
-    if (!argv[2] || argv[2].startsWith("-")) throw invalid4("cache clear \u5FC5\u987B\u5305\u542B Model");
+    if (!argv[2] || argv[2].startsWith("-")) throw invalid2("cache clear \u5FC5\u987B\u5305\u542B Model");
     return;
   }
   if (reasonCode === "setting-write") {
-    if (!argv[2] || argv[2].startsWith("-")) throw invalid4("setting \u5199\u547D\u4EE4\u5FC5\u987B\u5305\u542B domain");
+    if (!argv[2] || argv[2].startsWith("-")) throw invalid2("setting \u5199\u547D\u4EE4\u5FC5\u987B\u5305\u542B domain");
     if (argv[1] === "set") {
       requireFlagValue(argv, "--set", "setting set \u5FC5\u987B\u5305\u542B --set <assignment>");
       return;
     }
     if (argv[1] === "reset" && (!argv[3] || !argv[4])) {
-      throw invalid4("setting reset \u5FC5\u987B\u5305\u542B domain\u3001namespace \u4E0E key");
+      throw invalid2("setting reset \u5FC5\u987B\u5305\u542B domain\u3001namespace \u4E0E key");
     }
   }
 }
@@ -9080,10 +8328,10 @@ function requireExactlyOnePayload(argv, command) {
   const inline = optionalFlagValue(argv, "--data") !== void 0;
   const fromFile = optionalFlagValue(argv, "--data-file") !== void 0;
   if (inline && fromFile) {
-    throw invalid4(`${command} \u7684 --data \u4E0E --data-file \u4E92\u65A5\uFF0C\u53EA\u80FD\u7ED9\u4E00\u4E2A`);
+    throw invalid2(`${command} \u7684 --data \u4E0E --data-file \u4E92\u65A5\uFF0C\u53EA\u80FD\u7ED9\u4E00\u4E2A`);
   }
   if (!inline && !fromFile) {
-    throw invalid4(`${command} \u5FC5\u987B\u5305\u542B --data <JSON> \u6216 --data-file <\u6587\u4EF6>`);
+    throw invalid2(`${command} \u5FC5\u987B\u5305\u542B --data <JSON> \u6216 --data-file <\u6587\u4EF6>`);
   }
 }
 var PAYLOAD_FILE_FLAGS = ["--data-file", "--params-file"];
@@ -9098,15 +8346,15 @@ async function bindPayloadFiles(project, argv) {
 }
 async function bindPayloadFile(project, reference, label) {
   const relative2 = safeRelative(reference, label);
-  const file = path9.join(project, relative2);
+  const file = path8.join(project, relative2);
   const bytes = await readSafeFile(project, file, label);
-  return { path: relative2, sha256: sha2567(bytes) };
+  return { path: relative2, sha256: sha2565(bytes) };
 }
 async function assertPayloadsUnchanged(project, payloads) {
   for (const payload of payloads) {
     const current = await bindPayloadFile(project, payload.path, `\u8F7D\u8377 ${payload.path}`);
     if (current.sha256 !== payload.sha256) {
-      throw invalid4(`\u8F7D\u8377\u6587\u4EF6 ${payload.path} \u7684\u5185\u5BB9\u5DF2\u53D8\u66F4\uFF0C\u8BF7\u91CD\u65B0 prepare`);
+      throw invalid2(`\u8F7D\u8377\u6587\u4EF6 ${payload.path} \u7684\u5185\u5BB9\u5DF2\u53D8\u66F4\uFF0C\u8BF7\u91CD\u65B0 prepare`);
     }
   }
 }
@@ -9116,22 +8364,22 @@ function requireFlagValue(argv, flag, message) {
     if (value === flag) {
       const next = argv[index + 1];
       if (next && !next.startsWith("-")) return next;
-      throw invalid4(message);
+      throw invalid2(message);
     }
     if (value?.startsWith(`${flag}=`) && value.length > flag.length + 1) {
       return value.slice(flag.length + 1);
     }
   }
-  throw invalid4(message);
+  throw invalid2(message);
 }
 function assertRuntimeMatches(actual, expected) {
   if (canonicalJson(actual) !== canonicalJson(expected)) {
-    throw invalid4("\u5F53\u524D CLI \u8FD0\u884C\u65F6\u6458\u8981\u4E0E Chiron \u9501\u4E0D\u4E00\u81F4\uFF0C\u8BF7\u91CD\u65B0 skills sync");
+    throw invalid2("\u5F53\u524D CLI \u8FD0\u884C\u65F6\u6458\u8981\u4E0E\u6280\u80FD\u9501\u4E0D\u4E00\u81F4\u3002next_step=\u7528\u5F53\u524D CLI \u91CD\u8DD1\u4E00\u6B21 `hcm skills install` \u5237\u65B0\u6280\u80FD\u9501\uFF0C\u518D prepare");
   }
 }
 async function currentRuntimeIdentity() {
   const entry = process.argv[1];
-  if (!entry) throw invalid4("\u65E0\u6CD5\u89E3\u6790\u5F53\u524D CLI entry");
+  if (!entry) throw invalid2("\u65E0\u6CD5\u89E3\u6790\u5F53\u524D CLI entry");
   return {
     kind: "node-entry",
     executableSha256: await sha256File2(process.execPath),
@@ -9140,7 +8388,7 @@ async function currentRuntimeIdentity() {
 }
 async function runCurrentCliCommand(argv, cwd, streams) {
   const entry = process.argv[1];
-  if (!entry) throw invalid4("\u65E0\u6CD5\u89E3\u6790\u5F53\u524D CLI entry");
+  if (!entry) throw invalid2("\u65E0\u6CD5\u89E3\u6790\u5F53\u524D CLI entry");
   return new Promise((resolve4, reject) => {
     const child = spawn(process.execPath, [entry, ...argv], {
       cwd,
@@ -9164,29 +8412,29 @@ async function runCurrentCliCommand(argv, cwd, streams) {
 async function writeReceiptExclusive(target, receipt) {
   const temp = `${target}.${process.pid}.${Date.now()}.tmp`;
   try {
-    await fs8.writeFile(temp, `${JSON.stringify(receipt, null, 2)}
+    await fs6.writeFile(temp, `${JSON.stringify(receipt, null, 2)}
 `, {
       encoding: "utf8",
       mode: 384,
       flag: "wx"
     });
-    await fs8.link(temp, target);
+    await fs6.link(temp, target);
   } catch (cause) {
-    throw invalid4(`\u6267\u884C\u6536\u636E\u5199\u5165\u5931\u8D25\u6216\u5DF2\u5B58\u5728\uFF1A${path9.basename(target)}`, cause);
+    throw invalid2(`\u6267\u884C\u6536\u636E\u5199\u5165\u5931\u8D25\u6216\u5DF2\u5B58\u5728\uFF1A${path8.basename(target)}`, cause);
   } finally {
-    await fs8.unlink(temp).catch(() => void 0);
+    await fs6.unlink(temp).catch(() => void 0);
   }
 }
 async function safeManagedDirectory(project, relative2, absolute) {
-  await assertNoSymlinkComponents(project, path9.dirname(relative2));
-  const existing = await fs8.lstat(absolute).catch(() => void 0);
-  if (existing?.isSymbolicLink()) throw invalid4(`\u53D7\u7BA1\u76EE\u5F55\u4E0D\u80FD\u662F\u7B26\u53F7\u94FE\u63A5\uFF1A${relative2}`);
-  if (existing && !existing.isDirectory()) throw invalid4(`\u53D7\u7BA1\u8DEF\u5F84\u4E0D\u662F\u76EE\u5F55\uFF1A${relative2}`);
-  if (!existing) await fs8.mkdir(absolute, { mode: 448 });
-  await fs8.chmod(absolute, 448);
+  await assertNoSymlinkComponents(project, path8.dirname(relative2));
+  const existing = await fs6.lstat(absolute).catch(() => void 0);
+  if (existing?.isSymbolicLink()) throw invalid2(`\u53D7\u7BA1\u76EE\u5F55\u4E0D\u80FD\u662F\u7B26\u53F7\u94FE\u63A5\uFF1A${relative2}`);
+  if (existing && !existing.isDirectory()) throw invalid2(`\u53D7\u7BA1\u8DEF\u5F84\u4E0D\u662F\u76EE\u5F55\uFF1A${relative2}`);
+  if (!existing) await fs6.mkdir(absolute, { mode: 448 });
+  await fs6.chmod(absolute, 448);
 }
 async function pathExists(file) {
-  return fs8.lstat(file).then(
+  return fs6.lstat(file).then(
     () => true,
     (cause) => {
       if (cause.code === "ENOENT") return false;
@@ -9195,49 +8443,49 @@ async function pathExists(file) {
   );
 }
 async function readSafeFile(project, file, label) {
-  const relative2 = path9.relative(project, file).split(path9.sep).join("/");
-  if (relative2.startsWith("../") || path9.isAbsolute(relative2))
-    throw invalid4(`${label}\u8DEF\u5F84\u9003\u9038\u9879\u76EE`);
+  const relative2 = path8.relative(project, file).split(path8.sep).join("/");
+  if (relative2.startsWith("../") || path8.isAbsolute(relative2))
+    throw invalid2(`${label}\u8DEF\u5F84\u9003\u9038\u9879\u76EE`);
   await assertNoSymlinkComponents(project, relative2);
   let stat;
   try {
-    stat = await fs8.lstat(file);
+    stat = await fs6.lstat(file);
   } catch (cause) {
-    throw invalid4(`${label}\u4E0D\u53EF\u7528\uFF1A${relative2}`, cause);
+    throw invalid2(`${label}\u4E0D\u53EF\u7528\uFF1A${relative2}`, cause);
   }
-  if (stat.isSymbolicLink()) throw invalid4(`${label}\u4E0D\u80FD\u662F\u7B26\u53F7\u94FE\u63A5\uFF1A${relative2}`);
-  if (!stat.isFile()) throw invalid4(`${label}\u4E0D\u662F\u666E\u901A\u6587\u4EF6\uFF1A${relative2}`);
-  return fs8.readFile(file);
+  if (stat.isSymbolicLink()) throw invalid2(`${label}\u4E0D\u80FD\u662F\u7B26\u53F7\u94FE\u63A5\uFF1A${relative2}`);
+  if (!stat.isFile()) throw invalid2(`${label}\u4E0D\u662F\u666E\u901A\u6587\u4EF6\uFF1A${relative2}`);
+  return fs6.readFile(file);
 }
 async function assertNoSymlinkComponents(project, relative2) {
   const parts = relative2.split("/").filter(Boolean);
   let current = project;
   for (const part of parts) {
-    current = path9.join(current, part);
-    const stat = await fs8.lstat(current).catch(() => void 0);
-    if (stat?.isSymbolicLink()) throw invalid4(`\u8DEF\u5F84\u5305\u542B\u7B26\u53F7\u94FE\u63A5\uFF1A${relative2}`);
+    current = path8.join(current, part);
+    const stat = await fs6.lstat(current).catch(() => void 0);
+    if (stat?.isSymbolicLink()) throw invalid2(`\u8DEF\u5F84\u5305\u542B\u7B26\u53F7\u94FE\u63A5\uFF1A${relative2}`);
     if (!stat) break;
   }
 }
 async function realProject(requested) {
-  const absolute = path9.resolve(requested);
+  const absolute = path8.resolve(requested);
   let project;
   try {
-    project = await fs8.realpath(absolute);
+    project = await fs6.realpath(absolute);
   } catch (cause) {
-    throw invalid4(`\u9879\u76EE\u76EE\u5F55\u4E0D\u53EF\u7528\uFF1A${absolute}`, cause);
+    throw invalid2(`\u9879\u76EE\u76EE\u5F55\u4E0D\u53EF\u7528\uFF1A${absolute}`, cause);
   }
-  const stat = await fs8.stat(project);
-  if (!stat.isDirectory()) throw invalid4(`\u9879\u76EE\u8DEF\u5F84\u4E0D\u662F\u76EE\u5F55\uFF1A${absolute}`);
+  const stat = await fs6.stat(project);
+  if (!stat.isDirectory()) throw invalid2(`\u9879\u76EE\u8DEF\u5F84\u4E0D\u662F\u76EE\u5F55\uFF1A${absolute}`);
   return project;
 }
 function safeRelative(reference, label) {
-  if (!reference || path9.isAbsolute(reference) || /[\r\n\0]/.test(reference)) {
-    throw invalid4(`${label}\u5FC5\u987B\u662F\u9879\u76EE\u5185\u76F8\u5BF9\u8DEF\u5F84`);
+  if (!reference || path8.isAbsolute(reference) || /[\r\n\0]/.test(reference)) {
+    throw invalid2(`${label}\u5FC5\u987B\u662F\u9879\u76EE\u5185\u76F8\u5BF9\u8DEF\u5F84`);
   }
-  const normalized = path9.normalize(reference).split(path9.sep).join("/");
+  const normalized = path8.normalize(reference).split(path8.sep).join("/");
   if (normalized === ".." || normalized.startsWith("../") || normalized === ".") {
-    throw invalid4(`${label}\u8DEF\u5F84\u9003\u9038\u9879\u76EE`);
+    throw invalid2(`${label}\u8DEF\u5F84\u9003\u9038\u9879\u76EE`);
   }
   return normalized.replace(/^\.\//, "");
 }
@@ -9248,7 +8496,7 @@ function isRuntimeIdentity(value) {
 }
 function isExecutionPlan(value) {
   if (!isRecord(value)) return false;
-  return value.schemaVersion === 1 && value.contractVersion === EXECUTION_CONTRACT_VERSION && typeof value.planId === "string" && PLAN_ID_PATTERN.test(value.planId) && typeof value.createdAt === "string" && typeof value.expiresAt === "string" && isSha(value.nonceSha256) && isSha(value.chironLockSha256) && isRuntimeIdentity(value.runtime) && isRecord(value.assessment) && isRecord(value.documents) && isBoundDocument(value.documents.change) && isBoundDocument(value.documents.rollback) && Array.isArray(value.payloads) && value.payloads.every(isBoundDocument) && typeof value.evidenceDir === "string";
+  return value.schemaVersion === 1 && value.contractVersion === EXECUTION_CONTRACT_VERSION && typeof value.planId === "string" && PLAN_ID_PATTERN.test(value.planId) && typeof value.createdAt === "string" && typeof value.expiresAt === "string" && isSha(value.nonceSha256) && isSha(value.skillsLockSha256) && isRuntimeIdentity(value.runtime) && isRecord(value.assessment) && isRecord(value.documents) && isBoundDocument(value.documents.change) && isBoundDocument(value.documents.rollback) && Array.isArray(value.payloads) && value.payloads.every(isBoundDocument) && typeof value.evidenceDir === "string";
 }
 function isBoundDocument(value) {
   return isRecord(value) && typeof value.path === "string" && isSha(value.sha256);
@@ -9261,7 +8509,7 @@ function isSha(value) {
 }
 function parseTtl(value) {
   if (value === void 0) return void 0;
-  if (!/^\d+$/.test(value)) throw invalid4("--ttl-seconds \u5FC5\u987B\u662F\u6574\u6570");
+  if (!/^\d+$/.test(value)) throw invalid2("--ttl-seconds \u5FC5\u987B\u662F\u6574\u6570");
   return Number(value);
 }
 function canonicalJson(value) {
@@ -9271,46 +8519,46 @@ function canonicalJson(value) {
   }
   return JSON.stringify(value) ?? "null";
 }
-function sha2567(value) {
-  return createHash7("sha256").update(value).digest("hex");
+function sha2565(value) {
+  return createHash5("sha256").update(value).digest("hex");
 }
 async function sha256File2(file) {
-  const hash = createHash7("sha256");
+  const hash = createHash5("sha256");
   await new Promise((resolve4, reject) => {
-    const stream = createReadStream2(file);
+    const stream = createReadStream(file);
     stream.on("data", (chunk) => hash.update(chunk));
     stream.on("error", reject);
     stream.on("end", resolve4);
   });
   return hash.digest("hex");
 }
-function invalid4(message, cause) {
-  return new CliError22({ code: CliErrorCode21.INVALID_ARGUMENT, message, cause });
+function invalid2(message, cause) {
+  return new CliError20({ code: CliErrorCode19.INVALID_ARGUMENT, message, cause });
 }
 
 // src/commands/user.ts
 init_auth_guard();
 init_exit();
 import {
-  HcmClient as HcmClient20,
+  HcmClient as HcmClient21,
   adminResetPassword,
   formatObject as formatObject23,
   fromAxiosError as fromAxiosError19,
-  CliError as CliError23,
-  CliErrorCode as CliErrorCode22
+  CliError as CliError21,
+  CliErrorCode as CliErrorCode20
 } from "@hcmai/sdk";
 function buildAdminResetPasswordRequest(args, password) {
   const hasId = Boolean(args.id);
   const hasUsername = Boolean(args.username);
   if (hasId === hasUsername) {
-    throw new CliError23({
-      code: CliErrorCode22.INVALID_ARGUMENT,
+    throw new CliError21({
+      code: CliErrorCode20.INVALID_ARGUMENT,
       message: "--id <uuid> \u4E0E --username <user> \u5FC5\u987B\u4E14\u53EA\u80FD\u63D0\u4F9B\u4E00\u4E2A"
     });
   }
   if (!password) {
-    throw new CliError23({
-      code: CliErrorCode22.INVALID_ARGUMENT,
+    throw new CliError21({
+      code: CliErrorCode20.INVALID_ARGUMENT,
       message: "\u65B0\u5BC6\u7801\u4E0D\u80FD\u4E3A\u7A7A"
     });
   }
@@ -9326,9 +8574,9 @@ async function userResetPasswordCommand(args) {
   try {
     const password = args.passwordStdin ? await readSecretFromStdin() : await promptPasswordTwice();
     const request = buildAdminResetPasswordRequest(args, password);
-    const client3 = HcmClient20.fromAuthContext(await getActiveAuthContextFromCli(args));
-    const result2 = await adminResetPassword(client3.raw(), request);
-    process.stdout.write(formatObject23(result2, { format: args.output ?? "json" }) + "\n");
+    const client3 = HcmClient21.fromAuthContext(await getActiveAuthContextFromCli(args));
+    const result = await adminResetPassword(client3.raw(), request);
+    process.stdout.write(formatObject23(result, { format: args.output ?? "json" }) + "\n");
   } catch (cause) {
     const err = cause;
     if (err?.isAxiosError) exitWithError(fromAxiosError19(err, args.env));
@@ -9339,8 +8587,8 @@ async function promptPasswordTwice() {
   const password = await promptSecret("\u65B0\u5BC6\u7801: ");
   const confirmation = await promptSecret("\u518D\u6B21\u8F93\u5165\u65B0\u5BC6\u7801: ");
   if (password !== confirmation) {
-    throw new CliError23({
-      code: CliErrorCode22.INVALID_ARGUMENT,
+    throw new CliError21({
+      code: CliErrorCode20.INVALID_ARGUMENT,
       message: "\u4E24\u6B21\u8F93\u5165\u7684\u65B0\u5BC6\u7801\u4E0D\u4E00\u81F4"
     });
   }
@@ -9402,6 +8650,15 @@ delivery.command("gate0").description(
   "--mapping <file>",
   "\u987E\u95EE\u624B\u5199\u7684\u6620\u5C04\u5DE5\u4EF6\uFF08naturalKey \u8FD9\u4E00\u7C7B\u7684\u552F\u4E00\u6765\u6E90\uFF09\uFF1B\u4E0D\u7ED9 \u21D2 \u90A3\u4E00\u7C7B\u6052\u7EFF \u21D2 rc=2"
 ).option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").action((opts) => deliveryGate0Command(opts));
+delivery.command("triage").description(
+  "\u9700\u6C42\u5206\u8BCA\uFF1A\u516D\u7C7B\u627F\u8F7D\u7269\u7531\u672C\u547D\u4EE4\u73B0\u63A2\u73B0\u586B\uFF08\u987E\u95EE\u8DF3\u4E0D\u4E86\u6B65\uFF09\uFF0C\u7ED3\u8BBA\u4E0E\u8BC1\u636E\u7531\u4F60\u7ED9\uFF0C\u5B83\u53EA\u5224\u4E24\u8005\u6253\u4E0D\u6253\u67B6"
+).requiredOption(
+  "--requests <file>",
+  '\u5F85\u5206\u8BCA\u7684\u9700\u6C42\u6E05\u5355\uFF08**\u8FD9\u53F0\u673A\u5668\u4E0A**\u7684\u4E00\u4EFD JSON \u6570\u7EC4\uFF09\uFF1A\u6BCF\u6761 `{"request":\u5BA2\u6237\u539F\u8BDD, "verdict":REUSE|CONFIG|EXTEND|GAP, "evidence":\u51ED\u4EC0\u4E48\u8FD9\u4E48\u5224, "debtAction":\u7F3A\u54EA\u4E2A Action\uFF08GAP \u65F6\uFF09, "blindAcknowledged":true\uFF08\u5224 GAP \u4E14\u6709\u76F2\u533A\u65F6\u5FC5\u987B\u663E\u5F0F\u627F\u8BA4\uFF09}`'
+).option(
+  "--recon <dir>",
+  "\u57FA\u7EBF\u4EA7\u7269\u76EE\u5F55\uFF08<out>/recon/<\u79DF\u6237\u6BB5>/<\u6765\u6E90\u6BB5>\uFF09\uFF1B\u4E0D\u7ED9\u5219\u6309\u722C\u53D6\u8EAB\u4EFD\u73B0\u7B97\u4E00\u4EFD"
+).option("--out <dir>", "\u4EA7\u7269\u6839\uFF08\u5199 work/triage.md\uFF09", ".").option("--capabilities <caps>", "\u672C\u6B21\u63A2\u6D4B\u58F0\u660E\u7684 capability \u4E32", "default").action((opts) => deliveryTriageCommand(opts));
 delivery.command("prepare").description("\u628A\u53D7\u652F\u6301\u7684 R2 argv \u4E0E\u9501\u3001\u8FD0\u884C\u65F6\u548C\u53D8\u66F4/\u56DE\u6EDA\u8BF4\u660E\u7ED1\u5B9A\u4E3A\u77ED\u65F6\u6267\u884C\u8BA1\u5212").requiredOption("--change-ref <file>", "\u9879\u76EE work/ \u6216 decisions/ \u4E0B\u7684\u53D8\u66F4\u8BF4\u660E").requiredOption("--rollback-ref <file>", "\u9879\u76EE work/ \u6216 decisions/ \u4E0B\u7684\u56DE\u6EDA\u8BF4\u660E").requiredOption("--evidence-dir <dir>", "\u9879\u76EE evidence/ \u4E0B\u7684\u6536\u636E\u76EE\u5F55").option("--project <dir>", "HCM \u987E\u95EE\u9879\u76EE\u6839\u76EE\u5F55", ".").option("--ttl-seconds <n>", "\u6709\u6548\u671F\u79D2\u6570\uFF0860-3600\uFF09", "900").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").allowUnknownOption(true).argument("<command...>", "\u88AB\u7ED1\u5B9A\u7684 R2 HCM \u5B50\u547D\u4EE4\u4E0E\u53C2\u6570\uFF0C\u4E0D\u5305\u542B hcm \u672C\u8EAB").action((command, opts) => deliveryPrepareCommand(command, opts));
 delivery.command("execute <planId>").description("\u9010\u6B21\u6279\u51C6\u540E\u6D88\u8D39\u77ED\u65F6\u8BA1\u5212\uFF0C\u5E76\u6267\u884C\u4E00\u6B21\u4E0E\u8BA1\u5212\u5B8C\u5168\u76F8\u540C\u7684 R2 argv").option("--project <dir>", "HCM \u987E\u95EE\u9879\u76EE\u6839\u76EE\u5F55", ".").option("--output <fmt>", "\u6536\u636E\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").allowUnknownOption(true).argument("<command...>", "\u4E0E prepare \u5B8C\u5168\u76F8\u540C\u7684 R2 HCM \u5B50\u547D\u4EE4\u4E0E\u53C2\u6570").action((planId, command, opts) => deliveryExecuteCommand(planId, command, opts));
 program.command("query <Model>").description("\u67E5\u8BE2 Model \u5217\u8868\u6570\u636E\uFF08\u901A\u8FC7 ModelQueryDsl JSON \u8868\u8FBE\u8FC7\u6EE4/\u6392\u5E8F/\u5206\u9875\uFF09").option(
@@ -9468,7 +8725,6 @@ skills.command("list [keyword]").description("\u5217\u51FA\u76EE\u6807\u73AF\u58
 skills.command("manifest").description("\u6253\u5370\u672C CLI \u7684\u547D\u4EE4\u9762\u4E0E\u81EA\u5E26\u6280\u80FD\u6E05\u5355\uFF08\u4E0D\u8FDE\u7F51\uFF0C\u4F9B\u5B88\u536B\u4E0E\u5916\u90E8\u5DE5\u5177\u6BD4\u5BF9\uFF09").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").action((opts) => skillsManifestCommand(program, opts));
 skills.command("show <id>").description("\u6253\u5370\u6280\u80FD\u539F\u6587\uFF08\u7BA1\u9053\u53CB\u597D\uFF09\uFF1B\u81EA\u5E26\u6280\u80FD\u76F4\u63A5\u8BFB\u672C\u5730\uFF0C\u4E0D\u8FDE\u7F51").option("--source <kind>", "\u8FD9\u4E00\u8D9F\u770B\u54EA\u4E9B\u6765\u6E90\uFF1Acli\uFF08\u53EA\u770B\u81EA\u5E26\uFF0C\u4E0D\u8FDE\u7F51\uFF09| chiron | all", "all").option("--endpoint <url>", "\u6280\u80FD\u5E93\u5730\u5740\uFF08\u9ED8\u8BA4\u53D6 activeEnv \u7684 endpoint\uFF09").option("--env <name>", "\u4ECE\u8BE5 env \u89E3\u6790 endpoint").action((id, opts) => skillsShowCommand(id, opts));
 skills.command("install [id]").description("\u8FDE\u540C requires \u524D\u7F6E\u6280\u80FD\u4E0E\u53C2\u8003\u6587\u4EF6\u88C5\u5230 agent \u6280\u80FD\u76EE\u5F55\uFF1B--all \u88C5\u6574\u4E2A\u6280\u80FD\u5E93").option("--all", "\u88C5\u6574\u4E2A\u6280\u80FD\u5E93\uFF0C\u5E76\u8BB0\u4E3A\u300C\u8DDF\u968F\u5168\u96C6\u300D\uFF08\u5F80\u540E update \u4F1A\u81EA\u52A8\u8865\u4E0A\u4EA7\u54C1\u65B0\u589E\u7684\u6280\u80FD\uFF09").option("--target <agent>", "\u88C5\u7ED9\u54EA\u4E2A agent\uFF1Aclaude\uFF08.claude/skills/\uFF09| codex\uFF08hcm-skills/ + AGENTS.md\uFF09| auto", "auto").option("--global", "\u88C5\u5230\u7528\u6237\u7EA7\u76EE\u5F55\u800C\u975E\u5F53\u524D\u9879\u76EE").option("--dir <path>", "\u88C5\u5230\u6307\u5B9A\u76EE\u5F55").option("--from <dir>", "\u4ECE\u672C\u5730\u76EE\u5F55\u88C5\uFF08\u73B0\u573A\u6539\u8FC7\u7684\u7248\u672C\uFF09\uFF0C\u4E0D\u8D70\u7F51\u7EDC").option("--source <kind>", "\u8FD9\u4E00\u8D9F\u770B\u54EA\u4E9B\u6765\u6E90\uFF1Acli\uFF08\u53EA\u770B\u81EA\u5E26\uFF0C\u4E0D\u8FDE\u7F51\uFF09| chiron | all", "all").option("--force", "\u8986\u76D6\u5DF2\u5B58\u5728\u7684\u540C\u540D\u6280\u80FD").option("--endpoint <url>", "\u6280\u80FD\u5E93\u5730\u5740\uFF08\u9ED8\u8BA4\u53D6 activeEnv \u7684 endpoint\uFF09").option("--env <name>", "\u4ECE\u8BE5 env \u89E3\u6790 endpoint").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "table").action((id, opts) => skillsInstallCommand(id, opts));
-skills.command("sync <id>").description("\u4ECE\u76EE\u6807\u5B9E\u4F8B\u540C\u6B65 Skill \u95ED\u5305\u5230 WorkBuddy \u9879\u76EE\u5E76\u5199 chiron.lock").requiredOption("--target <agent>", "\u76EE\u6807 Agent \u5BBF\u4E3B\uFF1B\u5F53\u524D\u652F\u6301 workbuddy").requiredOption("--project <path>", "WorkBuddy \u9879\u76EE\u6839\u76EE\u5F55").option("--cli <path>", "\u663E\u5F0F\u6307\u5B9A\u8981\u9501\u5B9A\u5230\u9879\u76EE\u7684 HCM CLI\uFF1B\u9ED8\u8BA4\u4F7F\u7528\u5F53\u524D\u8FD9\u4EFD CLI").option("--endpoint <url>", "\u6280\u80FD\u5E93\u5730\u5740\uFF08\u9ED8\u8BA4\u53D6 activeEnv \u7684 endpoint\uFF09").option("--env <name>", "\u4ECE\u8BE5 env \u89E3\u6790 endpoint").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "table").action((id, opts) => skillsSyncCommand(id, opts));
 skills.command("update").description("\u628A\u88C5\u8FC7\u7684\u6280\u80FD\u5347\u5230\u76EE\u6807\u73AF\u5883\u8FD9\u4E00\u7248\uFF08\u4EA7\u54C1\u5347\u7EA7\u540E\u8DD1\u5B83\uFF09").option("--all", "\u8FDE\u4EA7\u54C1\u65B0\u589E\u7684\u6280\u80FD\u4E00\u8D77\u88C5\u4E0A\uFF0C\u5E76\u8BB0\u4E3A\u300C\u8DDF\u968F\u5168\u96C6\u300D").option("--check", "\u53EA\u770B\u4F1A\u53D8\u4EC0\u4E48\uFF0C\u4E0D\u5199\u76D8").option("--target <agent>", "claude | codex | auto\uFF08\u9ED8\u8BA4\u6309\u5DF2\u5B89\u88C5\u76EE\u5F55\u63A2\uFF09", "auto").option("--global", "\u5347\u7EA7\u7528\u6237\u7EA7\u76EE\u5F55\u91CC\u7684\u6280\u80FD").option("--dir <path>", "\u5347\u7EA7\u6307\u5B9A\u76EE\u5F55\u91CC\u7684\u6280\u80FD").option("--force", "\u8FDE\u672C\u5730\u6539\u8FC7\u7684\u6280\u80FD\u4E00\u8D77\u8986\u76D6\u6210\u4EA7\u54C1\u8FD9\u4E00\u7248").option("--source <kind>", "\u8FD9\u4E00\u8D9F\u770B\u54EA\u4E9B\u6765\u6E90\uFF1Acli\uFF08\u53EA\u770B\u81EA\u5E26\uFF0C\u4E0D\u8FDE\u7F51\uFF09| chiron | all", "all").option("--endpoint <url>", "\u6280\u80FD\u5E93\u5730\u5740\uFF08\u9ED8\u8BA4\u53D6\u5B89\u88C5\u65F6\u8BB0\u5F55\u7684\u5730\u5740\uFF09").option("--env <name>", "\u4ECE\u8BE5 env \u89E3\u6790 endpoint").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "table").action((opts) => skillsUpdateCommand(opts));
 program.command("update <Model>").description("\u66F4\u65B0\u4E00\u6761 Model \u8BB0\u5F55\uFF08\u8D70\u540E\u7AEF\u5B8C\u6574\u6821\u9A8C\uFF09").requiredOption("--id <id>", "\u8BB0\u5F55 ID").option("--data <JSON>", `\u8981\u66F4\u65B0\u7684\u5B57\u6BB5 JSON\uFF0C\u4F8B\u5982 '{"name":"\u65B0\u540D\u79F0"}'`).option("--data-file <path>", "\u4ECE UTF-8 JSON \u6587\u4EF6\u8BFB\u53D6\u66F4\u65B0\u5B57\u6BB5\uFF08\u4E0E --data \u4E92\u65A5\uFF09").option("--env <name>", "\u4E34\u65F6\u5207\u73AF\u5883\uFF08\u8986\u76D6 activeEnv\uFF0C\u672C\u6B21\u547D\u4EE4\uFF09").option("--as <identity>", "\u4E34\u65F6\u6362\u8EAB\u4EFD\uFF08\u8986\u76D6 env defaultIdentity\uFF0C\u672C\u6B21\u547D\u4EE4\uFF09").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").action((model, opts) => updateCommand(model, opts));
 program.command("version").description("\u67E5\u540E\u7AEF\u7248\u672C\uFF08commit / tag / \u6784\u5EFA\u65F6\u95F4\uFF09\u2014\u2014\u514D\u8BA4\u8BC1\uFF0C\u65E0\u9700\u5148 login").option("--endpoint <url>", "\u540E\u7AEF\u5730\u5740\uFF08\u9ED8\u8BA4\u53D6 activeEnv \u7684 endpoint\uFF09").option("--env <name>", "\u4ECE\u8BE5 env \u89E3\u6790 endpoint").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").action((opts) => versionCommand(opts));