@petercjl/taobao-ai-ops 0.4.5 → 0.4.7

package/README.md

@@ -101,3 +101,13 @@ Each component is an independent `@petercjl` npm package with its own canonical
 当前Agent通过 `dmp-product-report` 节点加载独立报告Skill，按需确认本店锚点。商品资料从橙色淘宝买家浏览器读取，DMP统计从蓝色商家电商浏览器读取；报告包含5张主图、店铺与页面指标，以及经营、推广、人群的四周期对比和8周趋势。子应用负责分析方法、独立模板、原始证据与最终校验。套件统一管理报告包和tbcli，保留独立包的升级边界。
 
 开发者入口：`taobao-ai-ops doctor --node dmp-product-report --json`、`taobao-ai-ops component run dmp-product-report ...`。
+
+## Skill 创建与维护
+
+独立组件 `@petercjl/portable-skill-creator` 提供Skill创建、更新、审查、测试与迁移方法，台账按用户业务流程图展示。当前Agent需要Node.js 22+、Python 3.10+及可动态加载的基础 `skill-creator`。套件管理独立包的安装和显式更新。
+
+> 用 portable-skill-creator 创建一个Skill：【说明业务目标与流程】。
+
+> 用 portable-skill-creator 优化这个Skill：【说明本次调整目标】。
+
+开发者入口：`taobao-ai-ops doctor --node portable-skill-creator --json`、`skill source --name portable-skill-creator --json` 与 `component run portable-skill-creator ...`。组件业务方法和资源由其独立包拥有；套件安装生成完整的独立运行副本。

package/UPDATE.md

@@ -11,3 +11,5 @@
 宿主安装完整候选后，在任务和审批空闲时切换并刷新 Skill。下载失败、离线、候选验证失败、用户修改过受管 Skill 或宿主刷新失败时，保留上一套。更新只涉及选定宿主的订阅目录，配置和凭据留在包外。插件详情显示实际成员版本及上次检查结果。
 
 开发者：每次检查都以当前壳的注册表为准，与 previous 回执比较成员身份、版本和所需 Skill；`collection prepare` 返回独立候选，宿主验证后才激活。回执中的运行环境必须跟随 CLI 调用，当前任务内保持同一版本。新集合入口不接管历史全局 npm 安装；历史安装继续通过其已声明的维护入口操作。
+
+开发者：迁移已批准的跨兼容版本组件时，在collection check/prepare中显式传入 `--accept-component-upgrades ID,ID` 并保留previous回执。该参数仅批准列出的组件升级，不批准降级；其余不兼容组件继续保留原版本。DMP快照v2迁移选择 `tbcli,dmp-product-report`，候选doctor通过后再激活。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@petercjl/taobao-ai-ops",
-  "version": "0.4.5",
+  "version": "0.4.7",
   "description": "Independent Taobao AI operations SOP skills with a managed suite lifecycle",
   "repository": {
     "type": "git",

package/skills/taobao-ai-operations/SKILL.md

@@ -9,7 +9,8 @@ Input: an operator's goal, supplied workbooks or authorized data sources, option
 
 ## Main line
 
-1. For a Taobao/Tmall item ID requiring operating, promotion and new/returning-customer analysis, select `dmp-product-report`; its method and standalone report contract are below. Resolve other requested business results with `taobao-ai-ops nodes list --json`. A category/monthly market question uses `category-research`; a search-result workbook and concrete research object use `product-research`. Existing product scope can enter product research directly. If no supported node covers the request, report the missing node.
+1. For creating, updating, reviewing, testing or porting an Agent Skill, select `portable-skill-creator` and follow its exact current main line. Resolve other business requests below.
+   For a Taobao/Tmall item ID requiring operating, promotion and new/returning-customer analysis, select `dmp-product-report`; its method and standalone report contract are below. Resolve other requested business results with `taobao-ai-ops nodes list --json`. A category/monthly market question uses `category-research`; a search-result workbook and concrete research object use `product-research`. Existing product scope can enter product research directly. If no supported node covers the request, report the missing node.
    An explicit request to use `procli` for project/task information, SOP progression, knowledge reuse or result publication uses `project-management`. Preserve this child's explicit-trigger contract; offering project integration does not authorize service reads or writes. For an authorized project-backed research request, resolve the project and read its task context and compiled Wiki before selecting the business research node. Preserve the target profile, exact project/task identities, observation windows, provenance and unresolved questions in the handoff.
    A supplied analysis or compatible ViewModel requiring a reusable HTML report uses `html-report`, whose exact Skill is `compact-commerce-ui`. It supplies reporting methods, not business conclusions; existing category/product outputs keep their own declared contracts.
    A Cloud Hug brand conversion request for supplied detail pages, photography, main KV or SKU images uses `cloud-hug-style-transfer`; its brand-production contract is below.
@@ -104,3 +105,17 @@ For explicit Boardmix file, media or object operations, select `boardmix-tools`.
 输入为目标商品ID，可补充报告日与新输出目录；已有证据可按子合同离线build/finalize。接口需要的本店商品参数由tbcli自动从当前账户发现，报告仅采用目标商品侧数据。输出包括自包含HTML、商品资料、近7天/前7天、近30天/前30天及8个完整自然周证据、CSV、ViewModel、分析和校验。run产生draft后继续按子Skill完成分析和finalize；一句结论与编号证据、经营策略解读及最终概览均由子应用的当前知识方法承接。返回套件主线第4步保留成果或第6步交付。
 
 报告模板和分析知识继续由独立报告包维护，运行不依赖commerce-ui。套件负责注册、安装更新、精确Skill来源解析、依赖传递和预检。商品资料的页面展示口径与DMP分期统计分别解释；本次可用范围以平台实际返回为准。
+
+### DMP配套版本迁移
+
+用户授权更新DMP报告和取数链路时，检查当前集合的blocked成员。若报告包0.2与tbcli 0.12因跨兼容版本而保留旧版，使用旧回执和 `collection prepare --accept-component-upgrades tbcli,dmp-product-report` 明确迁移这两个组件；其他不兼容组件维持原选择。核对候选DMP doctor及真实版本后再切换宿主入口。该操作按用户已授权的组件范围执行，不扩大到其他Agent或未选组件。
+
+## Skill 创建与维护
+
+用户要求创建、更新、审查、测试或迁移Skill时，选择 `portable-skill-creator` 节点。独立拥有包为 `@petercjl/portable-skill-creator`（0.2.1+）；创建方法、策略来源、可移植性、业务流程台账和验证规则由该包维护。
+
+通过 `taobao-ai-ops skill source --name portable-skill-creator --json` 解析准确来源，完整读取当前SKILL.md。运行 `taobao-ai-ops doctor --node portable-skill-creator --json` 核对Node、Python及组件版本；当前Agent另外解析并完整读取系统提供的准确逻辑名 `skill-creator`，其缺失返回DEPENDENCY_MISSING，不由套件复制替代。宿主基础Creator解析是运行前置能力，doctor的本地成功不证明它存在。
+
+规范来源在组件npm包内，可使用 `taobao-ai-ops component run portable-skill-creator ...` 运行其实际CLI；本机受管安装副本带有自身 `.runtime`。输入是本次创建/维护意图、可选自然语言流程或脑图、既有资源与知识；输出是子Skill约定的规划、完整资源和验证证据。尊重子Skill当前的规划确认、隐私、独立回归授权和失败恢复规则；来源或能力缺失时停止相应阶段并保留原错误。完成后回到套件主线第4步保留成果、第6步交付。
+
+套件只登记并管理独立组件，普通业务调用保持已安装版本；用户显式更新时获取正式latest。台账按用户熟悉的业务流程图展示。基础Skill创建器仍由当前宿主动态提供。

package/src/cli.mjs

@@ -9,10 +9,10 @@ import {checkUpdate,installUpdate} from './update.mjs';
 import {collectionCheck,collectionPrepare} from './subscription.mjs';
 import fs from 'node:fs/promises';
 const print=v=>console.log(JSON.stringify(v,null,2));
-function options(args){const out={};for(let i=0;i<args.length;i++){const k=args[i];if(['--json','--adopt','--yes'].includes(k))out[k.slice(2)]=true;else if(['--directory','--previous','--path','--agent','--target-dir','--name','--node','--profile','--mode','--run-dir','--input','--out','--candidate','--query','--tag','--context','--run-id'].includes(k)){if(!args[i+1]||args[i+1].startsWith('--'))throw fail('USAGE',`${k} needs a value`);out[k.slice(2).replace(/-([a-z])/g,(_,c)=>c.toUpperCase())]=args[++i];}else throw fail('USAGE',`Unknown option ${k}`);}return out;}
+function options(args){const out={};for(let i=0;i<args.length;i++){const k=args[i];if(['--json','--adopt','--yes'].includes(k))out[k.slice(2)]=true;else if(['--accept-component-upgrades','--directory','--previous','--path','--agent','--target-dir','--name','--node','--profile','--mode','--run-dir','--input','--out','--candidate','--query','--tag','--context','--run-id'].includes(k)){if(!args[i+1]||args[i+1].startsWith('--'))throw fail('USAGE',`${k} needs a value`);out[k.slice(2).replace(/-([a-z])/g,(_,c)=>c.toUpperCase())]=args[++i];}else throw fail('USAGE',`Unknown option ${k}`);}return out;}
 export async function main(argv){
  const [command,action,...rest]=argv;
- if(!command||['help','--help','-h'].includes(command))return console.log(`taobao-ai-ops ${PACKAGE.version}\nversion | nodes list | node show ID | capabilities\ncollection check [--previous RECEIPT] --json | collection prepare --directory NEW --yes --json [--previous RECEIPT]\ndoctor --node ID [--mode excel|nas]\nskill source [--name NAME] | skill status|install|update --agent AGENT [--profile research] [--adopt]\ncomponents status|check|install [--agent AGENT --yes]\ncomponents register --name ID --path CHECKOUT --yes [--mode npm]\ncomponent run ID [arguments...] | script NODE SCRIPT [arguments...] | tool run TOOL [arguments...]\nworkflow plan|status --run-dir DIR [--node ID] [--input FILE]\nhandoff create --node ID --input FILE --out FILE [--candidate PATH --query QUERY]\nupdate check|install [--tag latest] [--agent AGENT --yes]`);
+ if(!command||['help','--help','-h'].includes(command))return console.log(`taobao-ai-ops ${PACKAGE.version}\nversion | nodes list | node show ID | capabilities\ncollection check [--previous RECEIPT] --json | collection prepare --directory NEW --yes --json [--previous RECEIPT] [--accept-component-upgrades ID,ID]\ndoctor --node ID [--mode excel|nas]\nskill source [--name NAME] | skill status|install|update --agent AGENT [--profile research] [--adopt]\ncomponents status|check|install [--agent AGENT --yes]\ncomponents register --name ID --path CHECKOUT --yes [--mode npm]\ncomponent run ID [arguments...] | script NODE SCRIPT [arguments...] | tool run TOOL [arguments...]\nworkflow plan|status --run-dir DIR [--node ID] [--input FILE]\nhandoff create --node ID --input FILE --out FILE [--candidate PATH --query QUERY]\nupdate check|install [--tag latest] [--agent AGENT --yes]`);
  if(['version','--version'].includes(command))return action==='--json'?print({ok:true,package:PACKAGE.name,version:PACKAGE.version}):console.log(PACKAGE.version);
  if(command==='script')return runScript(action,rest[0],rest.slice(1));
  if(command==='component'&&action==='run'){
@@ -25,11 +25,11 @@ export async function main(argv){
  }
  if(command==='nodes'&&action==='list')return print(MANIFEST.nodes);
  if(command==='node'&&action==='show')return print(nodeFor(rest[0]));
- if(command==='capabilities')return print({package:PACKAGE.name,version:PACKAGE.version,...MANIFEST,collectionContract:{schemaVersion:1,manifest:'sealwork.collection.json',check:['collection','check','--json'],prepare:['collection','prepare','--directory','{newDirectory}','--yes','--json'],previousOption:'--previous',installationMode:'host-owned-generation',hostDiscoveryAuthority:'host'}});
+ if(command==='capabilities')return print({package:PACKAGE.name,version:PACKAGE.version,...MANIFEST,collectionContract:{schemaVersion:1,manifest:'sealwork.collection.json',check:['collection','check','--json'],prepare:['collection','prepare','--directory','{newDirectory}','--yes','--json'],previousOption:'--previous',migrationOption:'--accept-component-upgrades',migrationPolicy:'Explicitly approved component IDs may cross compatibility boundaries; unselected incompatible versions stay pinned; downgrades stay blocked',installationMode:'host-owned-generation',hostDiscoveryAuthority:'host'}});
  if(command==='doctor'){const opts=options(argv.slice(1));const r=await doctor(opts.node,opts.mode);print(r);if(!r.ok)process.exitCode=1;return;}
  const opts=options(rest);
  if(command==='collection'){
-  if(action==='check')return print(await collectionCheck(opts.previous?JSON.parse(await fs.readFile(opts.previous,'utf8')):undefined));
+  if(action==='check')return print(await collectionCheck(opts.previous?JSON.parse(await fs.readFile(opts.previous,'utf8')):undefined,undefined,opts.acceptComponentUpgrades));
   if(action==='prepare')return print(await collectionPrepare(opts));
  }
 

package/src/component-skill-install.mjs

@@ -0,0 +1,16 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import {spawnSync} from 'node:child_process';
+import {fail} from './core.mjs';
+// Only explicitly registered components delegate complete Skill/runtime materialization.
+// The suite owns selection/transaction recovery; the component owns its installation contract.
+export async function materializeComponentSkill(record,name,destination){
+ if(name!=='portable-skill-creator'||record.package!=='@petercjl/portable-skill-creator')throw fail('UNSUPPORTED_COMPONENT_INSTALLER',name);
+ destination=path.join(await fs.realpath(path.dirname(destination)),path.basename(destination));
+ try{const existing=await fs.readdir(destination);if(existing.length)throw fail('UNMANAGED_TARGET','Component destination must be absent or an empty suite stage');await fs.rmdir(destination);}catch(e){if(e.code!=='ENOENT')throw e;}
+ const result=spawnSync(process.execPath,[record.entry,'skill','install','--agent','suite-managed','--target',destination,'--json'],{encoding:'utf8',timeout:60000,env:{...process.env,PORTABLE_SKILL_UPDATE_CHECK:'0'}});
+ let data;try{data=JSON.parse(result.stdout);}catch{}
+ if(result.status!==0||data?.ok!==true||data.package!==record.package||data.name!==name||data.version!==record.version||data.current!==true||data.verification?.verified!==true)throw fail('COMPONENT_SKILL_INSTALL_FAILED',name,{child:data??result.stderr});
+ await fs.access(path.join(destination,'.runtime','bin','portable-skill-creator.mjs'));
+ return data;
+}

package/src/runtime.mjs

@@ -9,7 +9,7 @@ export function componentEnvironment(id,env=process.env,records=componentRecords
  let reportEntries={};
  if(id==='dmp-product-report'){if(!records.tbcli?.entry)throw fail('COMPONENT_NOT_INSTALLED','DMP report requires the registered tbcli component');reportEntries={DMP_REPORT_TBCLI_ENTRY:records.tbcli.entry,AGENT_PACKAGE_UPDATE_CHECK:'0'};}
  const canvasEntries=id==='competitor-visual-canvas'?Object.fromEntries([['tbcli','TBCLI_ENTRY'],['sealseek-media','SEALSEEK_MEDIA_ENTRY'],['boardmixcli','BOARDMIXCLI_ENTRY']].filter(([key])=>records[key]?.entry).map(([key,variable])=>[variable,records[key].entry])):{};
- return {...env,...canvasEntries,...reportEntries,BOARDMIXCLI_UPDATE_CHECK:'0',TBCLI_UPDATE_CHECK:'0',SYCMCLI_DISABLE_AUTO_UPDATE:'1',SEEDAUDIO_AUTO_UPDATE:'0',SEALSEEK_MEDIA_AUTO_UPDATE:'0',COMPETITOR_CANVAS_AUTO_UPDATE:'0',...(id==='cloud-hug-style-transfer'&&media&&!env.CLOUD_HUG_MEDIA_ROOT?{CLOUD_HUG_MEDIA_ROOT:media.root}:{})};
+ return {...env,...(id==='portable-skill-creator'?{PORTABLE_SKILL_UPDATE_CHECK:'0'}:{}),...canvasEntries,...reportEntries,BOARDMIXCLI_UPDATE_CHECK:'0',TBCLI_UPDATE_CHECK:'0',SYCMCLI_DISABLE_AUTO_UPDATE:'1',SEEDAUDIO_AUTO_UPDATE:'0',SEALSEEK_MEDIA_AUTO_UPDATE:'0',COMPETITOR_CANVAS_AUTO_UPDATE:'0',...(id==='cloud-hug-style-transfer'&&media&&!env.CLOUD_HUG_MEDIA_ROOT?{CLOUD_HUG_MEDIA_ROOT:media.root}:{})};
 }
 export function pythonEnvironment(env=process.env){
  return {...env,PYTHONUTF8:'1',PYTHONIOENCODING:'utf-8',PYTHONDONTWRITEBYTECODE:'1'};
@@ -108,6 +108,14 @@ export async function doctor(id,mode='excel'){
    checks.push({id:'dmp-report-capabilities',ok:result.status===0&&detail.ok===true&&detail.tbcliSnapshot===2&&detail.subjectMode==='target-only'&&detail.tbcliItemSummary===1,value:detail});
   }catch(e){checks.push({id:'dmp-report-dependencies',ok:false,code:e.code??'CAPABILITY_UNAVAILABLE',message:e.message});}
  }
+ if(n.component==='portable-skill-creator'){
+  const record=componentRecord(n.component);
+  const result=spawnSync(process.execPath,[record.entry,'doctor','--json'],{encoding:'utf8',timeout:30000,env:componentEnvironment(n.component)});
+  let detail;try{detail=JSON.parse(result.stdout||result.stderr);}catch{detail={ok:false,code:'COMPONENT_DOCTOR_FAILED'};}
+  const version=record.version?.split('.').map(Number);const supported=version?.length===3&&version.every(Number.isInteger)&&(version[0]>0||version[1]>2||version[1]===2&&version[2]>=1);
+  checks.push({id:'creator-version',ok:Boolean(supported),value:record.version,minimum:'0.2.1'});
+  checks.push({id:'creator-runtime',ok:result.status===0&&detail.ok===true&&detail.package===MANIFEST.components[n.component].package&&detail.version===record.version&&detail.python?.version?.length>=2,value:detail});
+ }
  if(n.component==='competitor-visual-canvas'){
   const record=componentRecord(n.component);
   const result=spawnSync(process.execPath,[record.entry,'doctor','--json'],{encoding:'utf8',timeout:30000,env:componentEnvironment(n.component)});

package/src/skill-manager.mjs

@@ -2,7 +2,8 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import os from 'node:os';
 import {randomUUID,createHash} from 'node:crypto';
-import {PACKAGE,source,nodeVersion,closure,json,stat,fileHashes,digest,fail,stateRoot} from './core.mjs';
+import {materializeComponentSkill} from './component-skill-install.mjs';
+import {MANIFEST,componentRecord,PACKAGE,source,nodeVersion,closure,json,stat,fileHashes,digest,fail,stateRoot} from './core.mjs';
 
 const OWNER='.taobao-ai-ops-managed.json';
 export function targetRoot(opts){
@@ -39,9 +40,11 @@ export async function status(root,n){
  return {...base,mode:'copy',managed:true,state:!same?'modified':meta.sourceDigest===base.sourceDigest?'current':'stale'};
 }
 async function makeCopy(dest,n){
- const files=await fileHashes(source(n));await fs.mkdir(dest,{recursive:true});
- for(const relative of Object.keys(files)){const d=path.join(dest,relative);await fs.mkdir(path.dirname(d),{recursive:true});await fs.copyFile(path.join(source(n),relative),d);}
- await fs.writeFile(path.join(dest,'.suite-install.json'),JSON.stringify({package:PACKAGE.name,skill:n.skill,version:nodeVersion(n),sourceDigest:digest(files),files}),{flag:'wx'});
+ const canonical=await fileHashes(source(n));
+ if(MANIFEST.components[n.component]?.skill_installation==='component-managed')await materializeComponentSkill(componentRecord(n.component),n.skill,dest);
+ else{await fs.mkdir(dest,{recursive:true});for(const relative of Object.keys(canonical)){const d=path.join(dest,relative);await fs.mkdir(path.dirname(d),{recursive:true});await fs.copyFile(path.join(source(n),relative),d);}}
+ const files=await fileHashes(dest);
+ await fs.writeFile(path.join(dest,'.suite-install.json'),JSON.stringify({package:PACKAGE.name,skill:n.skill,version:nodeVersion(n),sourceDigest:digest(canonical),files}),{flag:'wx'});
  await fs.writeFile(path.join(dest,'.install-meta.json'),JSON.stringify({title:n.skill,description:`Taobao AI operations: ${n.id}`}),{flag:'wx'});
 }
 async function restore(backup,dest,inPlace){
@@ -67,7 +70,7 @@ export async function install(opts,options={}){
     if(inPlace)await fs.cp(dest,backup,{recursive:true,errorOnExist:true,force:false});
    }
    const record={dest,backup:await stat(backup)?backup:null,inPlace};changed.push(record);
-   const mode=item.mode==='copy'&&item.managed?'copy':(opts.mode||'auto')==='auto'?(process.platform==='win32'?'copy':'link'):opts.mode;
+   const mode=MANIFEST.components[n.component]?.skill_installation==='component-managed'?'copy':item.mode==='copy'&&item.managed?'copy':(opts.mode||'auto')==='auto'?(process.platform==='win32'?'copy':'link'):opts.mode;
    if(!['link','copy'].includes(mode))throw fail('USAGE','Mode must be auto, link or copy');
    if(inPlace){for(const e of await fs.readdir(dest))await fs.rm(path.join(dest,e),{recursive:true,force:true});}
    if(mode==='link')await fs.symlink(source(n),dest,process.platform==='win32'?'junction':'dir');else await makeCopy(dest,n);

package/src/subscription.mjs

@@ -1,6 +1,7 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import {spawn} from 'node:child_process';
+import {materializeComponentSkill} from './component-skill-install.mjs';
 import {componentEnvironment} from './runtime.mjs';
 import {ROOT,PACKAGE,MANIFEST,fail,stat,fileHashes} from './core.mjs';
 
@@ -10,7 +11,9 @@ export function compatible(current,next){
  const a=current.split('.').map(Number),b=next.split('.').map(Number);
  return a[0]===b[0]&&(a[0]!==0||a[1]===b[1])&&next.localeCompare(current,undefined,{numeric:true})>=0;
 }
-export async function collectionCheck(previous,registry=fetch){
+export async function collectionCheck(previous,registry=fetch,approved=[]){
+ const selected=new Set(typeof approved==='string'?approved.split(',').map(x=>x.trim()).filter(Boolean):approved);
+ for(const id of selected)if(!Object.hasOwn(MANIFEST.components,id))throw fail('UNKNOWN_COMPONENT',id);
  if(previous&&(previous.package!==PACKAGE.name||!Array.isArray(previous.members)||!stable(previous.version)))throw fail('INVALID_PREVIOUS_COLLECTION','Previous receipt must belong to this collection');
  const members=[];
  for(const [id,c] of Object.entries(MANIFEST.components)){
@@ -19,9 +22,10 @@ export async function collectionCheck(previous,registry=fetch){
   const metadata=await response.json();
   if(metadata.name!==c.package||!stable(metadata.version))throw fail('INVALID_REGISTRY_IDENTITY',c.package);
   const old=previous?.members?.find(m=>m.package===c.package);
-  const accepted=!old||compatible(old.version,metadata.version);
+  const explicitMigration=Boolean(old&&selected.has(id)&&metadata.version.localeCompare(old.version,undefined,{numeric:true})>=0);
+  const accepted=!old||compatible(old.version,metadata.version)||explicitMigration;
   members.push({id,package:c.package,version:accepted?metadata.version:old.version,available:metadata.version,
-   bin:c.bin,skills:c.skills,blocked:!accepted});
+   bin:c.bin,skills:c.skills,blocked:!accepted,explicitMigration});
  }
  const changed=previous?.version!==PACKAGE.version||JSON.stringify(members.map(m=>[m.id,m.package,m.version,m.skills]))!==JSON.stringify(previous?.members?.map(m=>[m.id,m.package,m.version,m.skills]));
  return {ok:true,schemaVersion:1,package:PACKAGE.name,version:PACKAGE.version,changed,members};
@@ -69,7 +73,7 @@ export async function collectionPrepare(opts,services={}){
  const directory=path.resolve(opts.directory);
  if(await stat(directory))throw fail('TARGET_EXISTS','Candidate directory must be new');
  const previous=opts.previous?JSON.parse(await fs.readFile(opts.previous,'utf8')):undefined;
- const plan=await collectionCheck(previous,services.registry);
+ const plan=await collectionCheck(previous,services.registry,opts.acceptComponentUpgrades);
  await fs.mkdir(directory,{recursive:true,mode:0o700});
  try{
   const shell=path.join(directory,'shell'),runtime=path.join(directory,'runtime'),skills=path.join(directory,'skills');
@@ -81,7 +85,7 @@ export async function collectionPrepare(opts,services={}){
   const installed=[],records={};
   async function copySkill(name,source,entry,member){
    if(installed.some(s=>s.name===name))throw fail('DUPLICATE_SKILL',name);
-   const destination=path.join(skills,name);await fileHashes(source);await fs.cp(source,destination,{recursive:true,dereference:true});
+   const destination=path.join(skills,name);await fileHashes(source);if(MANIFEST.components[member.id]?.skill_installation==='component-managed')await materializeComponentSkill({entry,package:member.package,version:member.version},name,destination);else await fs.cp(source,destination,{recursive:true,dereference:true});
    installed.push({name,package:member.package,version:member.version,source,directory:destination,runtimeEntry:entry});
   }
   for(const member of plan.members){

package/suite-manifest.json

@@ -18,7 +18,8 @@
       "competitor-visual-canvas",
       "cloud-hug-style-transfer",
       "boardmix-tools",
-      "dmp-product-report"
+      "dmp-product-report",
+      "portable-skill-creator"
     ]
   },
   "nodes": [
@@ -50,7 +51,8 @@
         "1688-product-sourcing",
         "1688-opportunity-sourcing-research",
         "cloud-hug-style-transfer",
-        "dmp-product-report"
+        "dmp-product-report",
+        "portable-skill-creator"
       ],
       "python_imports": [],
       "scripts": [],
@@ -307,6 +309,36 @@
         "tbcli": "0.12.0+; dmp snapshot version 2 target-only subject, automatic owned-item execution context and itemSummary version 1"
       },
       "contract_resolution": "Resolve current exact child Skill and CLI capabilities; preserve the selected merchant/buyer endpoints and returned data availability."
+    },
+    {
+      "id": "portable-skill-creator",
+      "skill": "portable-skill-creator",
+      "component": "portable-skill-creator",
+      "stage": "skill-authoring",
+      "method_version": "portable-skill-creator@0.2",
+      "requires_skills": [],
+      "python_imports": [],
+      "scripts": [],
+      "native_requirements": [
+        "agent.skill.base-creator.resolve"
+      ],
+      "input_contract": {
+        "required": [
+          "Skill creation, update, review or test intent"
+        ],
+        "optional": [
+          "business flow in natural language or diagram",
+          "existing Skill and knowledge sources"
+        ]
+      },
+      "output_contract": {
+        "result": "child-scoped design, complete Skill resources and verification evidence",
+        "state": "child owns business flow, strategies, privacy, run ledger and confirmation boundaries"
+      },
+      "required_component_contracts": {
+        "portable-skill-creator": "0.2.1+; business-flow ledger presentation; Node 22+ and Python 3.10+"
+      },
+      "contract_resolution": "Resolve the exact current child Skill and live CLI; dynamically load the host-provided base skill-creator, preserving the child confirmation and regression boundaries."
     }
   ],
   "tools": {
@@ -382,6 +414,11 @@
       "package": "@petercjl/dmp-product-report",
       "component": "dmp-product-report",
       "role": "DMP product performance, promotion and customer composition report with buyer-page product identity"
+    },
+    "portable-skill-creator": {
+      "package": "@petercjl/portable-skill-creator",
+      "component": "portable-skill-creator",
+      "role": "Skill creation, maintenance, portability QA and business-flow run ledger design"
     }
   },
   "targets": {
@@ -509,6 +546,14 @@
       "skills": [
         "dmp-product-report"
       ]
+    },
+    "portable-skill-creator": {
+      "package": "@petercjl/portable-skill-creator",
+      "bin": "portable-skill-creator",
+      "skills": [
+        "portable-skill-creator"
+      ],
+      "skill_installation": "component-managed"
     }
   }
 }