@petercjl/tuda 0.0.0-bootstrap.20261112 → 0.1.0

package/INSTALL.md

@@ -0,0 +1,11 @@
+# 宿主原生画板插件
+
+宿主安装 `@petercjl/tuda@next` 到自己的私有运行时目录，读取 `capabilities.json` 的 `nativePlugin` 合同，校验 contract、desktopCompatibility、prepare 与鉴权交接要求，再使用自己的 Node.js 执行 `dist/board-plugin.js`。原生入口无需安装 Skill 或全局 CLI；用户无需手动安装。Tuda 桌面制品由宿主提供，包不会隐式下载桌面或授予服务权限。首次内置包可作为离线回退。
+
+# Install Tuda for the current Agent
+
+Send your Agent: “Install @petercjl/tuda and its companion Skill for yourself.”
+
+The Agent installs this package, runs `tuda capabilities --json` and `tuda skill source --json`, resolves its own exact `using-tuda` Skill directory, then runs `tuda skill install --target <absolute-directory> --agent <current-agent> --json`. Verify with `skill status` and load the installed Skill using the host’s native discovery. A package install alone is incomplete. Existing unmanaged or edited directories are preserved.
+
+Each selected Skill receives a physical copy of the required bundled CLI under `.runtime/`; it can execute with Node.js 22.12+ independently of the bootstrap npm installation. Canvas operations require Tuda desktop. The package does not grant model access. Installation changes only the selected target. Host discovery is confirmed by the Agent, separately from package installation.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Iterlay contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,93 @@
-# Tuda publishing bootstrap
+# Tuda CLI 与画板插件
 
-This minimal prerelease establishes the npm package for GitHub Actions Trusted Publishing. It contains no runtime, credentials, or application data. The usable Tuda capability package is distributed through the next channel.
+宿主内置的画板插件使用 `nativePlugin` 合同：直接以 Node.js 22.12+ 执行包内 `dist/board-plugin.js`，通过 stdio MCP 提供画板管理、导入已有图片、布局、文字标注和导出。宿主准备兼容的 Tuda 桌面运行时，完成原生注册与内部授权；用户直接在当前 Agent 中使用。此入口仅提供画板操作，生成素材由调用方自己的媒体能力完成。
+
+初始发布渠道为 `@petercjl/tuda@next`。宿主按 `capabilities.json` 的 `nativePlugin.updates` 自动检查、下载并验证兼容版本，在下一次新连接启用；离线或更新失败继续使用当前版本。具体安装和更新合同见 [INSTALL.md](INSTALL.md) 与 [UPDATE.md](UPDATE.md)。独立 CLI 与配套 Skill 的安装方法见下文。
+
+Tuda 把图片、视频与创作工作流放在同一张画布上。CLI 让你和 Coding Agent 通过命令生成图片、修改素材、制作视频、整理画板并导出结果，复用 App 已保存的模型服务与授权。
+
+安装 App 后首次打开会自动安装随包 CLI。新开终端后运行 `tuda help`。
+
+日常使用无需先打开 App：CLI 会连接已有服务，或自动启动隐藏的后台工作台，不弹窗口、不抢焦点，macOS 不显示 Dock 图标。后台复用 App 已保存的模型配置、授权和数据；CLI 退出或停止等待不会终止生成任务。主动打开 App（或调用 `open_tuda`）会显示同一工作区。由 CLI 启动的工作台关闭窗口后继续在后台运行；通过 App 的退出命令可完全退出。
+
+这仍依赖已安装的 App/Electron 运行时，并非独立的无桌面服务器程序。`--no-launch` 禁止自动启动；服务未运行时会返回连接错误。帮助、版本、工具列表和 Guard 描述可离线读取。
+
+```bash
+tuda providers list --json
+tuda image generate --prompt "极简咖啡杯插画" --out ./cup.png --json
+tuda image edit --input ./cup.png --prompt "改成米白色" --out ./cup-light.png --json
+tuda tasks wait <task-id> --out ./result.png --json
+tuda tools list --json
+```
+
+完整工作台操作使用 `tuda call <operation> --input '<JSON>' --json`，操作与 schema 由 `tools list` 返回。
+
+`--reference`、`image edit --input` 和 `assets import --input` 按原始文件字节数校验：每个非空素材最多 20 MiB（20,971,520 字节）。Base64 编码后的数据使用独立的媒体校验，不占用提示词的 100,000 字符额度；CLI 会先导入原始素材，再把受管路径用于生成，不会自动压缩图片。超限错误会包含文件名、实际大小和上限；可压缩后重试，或先通过 App 导入，再用 `tuda call` 传入受管路径。模型服务自身仍可能有更低的参考图限制。此修复需要更新 App 后台，仅更新 CLI 无法修复旧版 App 的导入校验。
+
+## 配置视频与旁白模型
+
+配置命令通过 App 主进程原子保存，不会提交生成任务。视频支持现有的 `ark`、`fal`、`openrouter`、`minimax` 协议；`audio` 是新增的独立 OpenAI-compatible TTS 配置，目前仅保存配置，尚未提供语音生成命令、音乐或音效模型。
+
+```bash
+# 查看配置，不返回密钥
+tuda providers list --kind video --json
+tuda providers show <provider-id> --json
+
+# 修改已有视频默认模型；保留地址、凭证及其它已保存模型
+tuda models set --kind video --provider <provider-id> --model <model-id> --json
+
+# 新增 TTS：从已有环境变量读取密钥，不把密钥放进命令参数
+tuda providers set --kind audio --provider narration --name "旁白" \
+  --base-url https://api.openai.com --model gpt-4o-mini-tts --voice nova \
+  --api-key-env OPENAI_API_KEY --default --json
+
+tuda providers set --kind audio --provider narration --voice alloy --json
+tuda providers default narration --kind audio --json
+tuda providers list --kind audio --json
+tuda models list --provider narration --json
+tuda providers remove narration --kind audio --json
+```
+
+新增视频服务使用 `providers set --kind video --type <协议> --base-url <地址> --model <模型>`，可用 `--provider` 自定 ID，省略则生成 ID。重复 `--saved-model <模型>` 会替换已保存列表，并始终包含 `--model` 指定的默认模型；省略则保留列表。`--default` 同时将此服务设为该类别默认服务。内置官方服务不可修改或删除，图片、文本配置暂不开放修改。
+
+TTS 的 `--speech-endpoint` 默认 `/v1/audio/speech`，表示相对 `--base-url` 的接口路径；例如地址为 `https://api.openai.com/v1` 时可设 `/audio/speech`。模型及音色 ID 由服务商决定，保存配置不代表远端模型可用。`models list` 只列已保存模型，不查询远程目录。
+
+凭证可通过 `--api-key-env <变量名>` 或管道配合 `--api-key-stdin` 输入，二者不可同时使用；查询仅返回 `authConfigured`。省略凭证选项会保留原密钥；`--clear-api-key` 显式清除。App 使用系统安全存储加密，无法加密时整次修改回滚。不要把真实密钥放进 `tuda call --input`、聊天或日志。
+
+fal / OpenRouter 视频可用 `--connection-provider <同类型图片服务ID>` 复用其地址和凭证。复用时不能设置独立密钥；用 `--connection-provider none` 解除关联，再设置独立连接。CLI 与 App 共用设置，需要配套运行包含此功能的新版后台服务；仅替换 CLI 无法让旧 App 支持配置操作。
+
+`tuda guard descriptor` 可离线输出随包携带的 HOL Guard 命令描述；它不会安装 Guard 或改变 Agent 权限。生成/编辑、文件导出、配置安装与通用调用按影响分类，最终决策仍受 Guard 全局策略控制。参见 [说明](../docs/guard.md)。
+
+Coding Agent 在 App 的设置 → Coding Agent 中一键安装 `using-tuda` Skill，或运行 `npx tuda add --agent <id>`。支持 `codex`、`claude-code`、`workbuddy`、`cursor`、`windsurf`、`cline`、`roo-cline`、`gemini-cli` 和 `opencode`；省略 `--agent` 时自动安装到已检测到的 Agent。WorkBuddy 的安装位置为 `~/.workbuddy/skills/using-tuda`。`using-tuda` 仅供手动调用：Codex 使用 `$using-tuda`，Claude Code 使用 `/using-tuda`，其他支持 Skills 的 Agent 直接按其 Skill 调用语法使用。迁移会移除 Codex/Claude Code 原来的 Tuda MCP 条目，保留其他服务。独立 CLI 的 Skill 入口使用命令调用；宿主原生画板入口单独提供 stdio MCP。
+
+指定 `--user-data-path` 或 `TUDA_USER_DATA_PATH` 时只连接指定工作区，不自动启动另一个工作区。生成默认等待，`--async` 提交即返回；结束等待不会取消远端任务。导出失败后可重试导出，不必重新生成。
+
+开发：`npm ci && npm run build`。发布前自动同步 App 的 Skill，版本保持一致。
+
+### 本地切图
+
+```sh
+tuda image slice --path <受管图片路径> --board <画板ID> --rows 3 --columns 4 --out ./avatars --json
+tuda image slice --input ./sheet.png --rows 3 --columns 4 --margin 12 --gap 8 --json
+tuda image slice --node <节点ID> --board <画板ID> --crops '[{"x":10,"y":20,"width":300,"height":300}]' --json
+```
+
+复用 App 本地切图，不调用模型；保留原图，切片保存为受管 PNG 并加入画板。源参数三选一，宫格与 crops 互斥；每轴最多 8 格、最多 64 个区域。坐标、边距和间距均为原图像素；不自动去底、识别主体或统一输出尺寸。返回 images、crops、nodeIds 和可选 exportedPaths；--out 为目录，已有文件默认不覆盖。高级入口为 `tuda call slice_image --input '<JSON>' --json`，精确 schema 见 tools list。
+
+### 可复用图片模板
+
+模板规则保存到当前工作区的模板库，与 App 自定义模板共用。创建/更新模板不调用模型、不产生生成费用。
+
+```sh
+tuda templates create --name "品牌海报" --prompt "米白背景、黑色大标题、充足留白" --category marketing
+tuda templates list
+tuda templates show 'custom:返回的ID'
+tuda templates update 'custom:返回的ID' --description "品牌系列海报"
+tuda image generate --template 'custom:返回的ID' --prompt "春季咖啡新品，标题：春日第一杯" --out poster.png
+```
+
+`--prompt` 在创建/更新时表示固定模板规则，在生成时表示本次内容；使用模板不会修改模板本身。生成记录保留模板 ID，结果沿用普通图片任务的等待、导出和画板流程。编辑模板使用 `--mode edit`，配合 `image edit --template ... --input ... --prompt ...`。
+
+复杂模板可使用 `templates create --input template.json` 或 `templates update <id> --input patch.json`，支持 name、description、prompt、category、mode、useCase、fields（id/label/value）、extractionScenario；命令行字段覆盖文件中的同名字段。更新保留未提供的字段，修改 prompt 且未提供 fields 时清除旧结构字段。`--expected-prompt` 可拒绝覆盖已改变的规则。
+
+目前列表包含自定义模板，不包含内置预设。旧版 localStorage 模板会在打开升级后的工作台时迁入共享库；首次迁移前，纯后台 CLI 无法读取这些旧模板。旧客户端不支持新接口，须使用同版本的 App 后台和 CLI。模板不保证模型输出像素级一致，仍需检查生成结果。

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,15 @@
+# 第三方依赖与资源
+
+根目录 MIT 许可证适用于本项目贡献者拥有版权的原创代码，不替代第三方组件的许可证，也不授予 Iterlay 商标权。
+
+JavaScript 依赖见 `package.json`、`pnpm-lock.yaml` 和 `cli/package-lock.json`。分发前应保留所用版本要求的版权及许可证声明。
+
+FFmpeg / FFprobe 作为独立视频工具组件按需下载，不包含在应用安装包内。`scripts/prepare-ffmpeg.mjs` 调用 `scripts/build-ffmpeg.sh`，从校验过 SHA-256 的固定源码构建，禁止使用 nonfree 预编译替代物。源码仓库的 MIT 许可不覆盖这些工具。
+
+演示图片、图标及其他视觉资源需依据各自来源和授权使用；不要将源码许可证理解为对来源未核实资源的重新授权。
+
+## 视频工具组件分发
+
+`ffmpeg6-r1` 组件包含 FFmpeg 6.0 和 x264 commit `b35605ace3ddf7c1a5d67a2eb553f034aef41d55`，启用 GPL 和 libx264，不启用 nonfree，最低系统版本为 macOS 14，架构为 ARM64。组件以 `iterlay-media-tools-ffmpeg6-r1-darwin-arm64.zip` 发布至 GitHub Release `media-tools-ffmpeg6-r1`；应用内清单固定其下载 URL、长度及 SHA-256。
+
+组件的 `licenses/` 目录包含 GPL-2.0 文本、FFmpeg 许可证说明和 README、x264 COPYING、与二进制精确对应的两个原始源码压缩包、构建脚本，以及记录编译器、完整 FFmpeg 配置、源地址和源码哈希的 `build-info.json`。这些材料随二进制同一归档分发并原样安装到用户数据目录，便于获取相应源代码和重建。分发者仍需遵循各组件许可条件；这些工具不适用本项目 MIT 许可证。

package/UPDATE.md

@@ -0,0 +1,11 @@
+# 宿主原生插件自动更新
+
+`nativePlugin.updates` 是原生入口的更新合同。宿主在启动或新建连接时按24小时持久节流检查 `@petercjl/tuda@next`，元数据请求最多1500毫秒；使用 npm registry 声明的完整性验证下载，将候选安装到私有不可变版本目录。自动更新限定0.x同minor、1.x以上同major，并校验 native contract、桌面协议与最低版本、准备和鉴权合同。通过验证后原子切换活动指针，新连接使用新版本；已有连接固定原版本。下载、校验或激活失败保留当前版本，离线继续工作。升级桌面合同或不兼容版本由宿主显式迁移。禁用、状态与策略由宿主管理，仅影响该宿主私有安装，不同步其他 Agent。
+
+# Update Tuda for the current Agent
+
+Send your Agent: “Update @petercjl/tuda and synchronize your companion Skill.”
+
+Resolve the current Agent’s exact `using-tuda` directory. Read `tuda skill status --target <absolute-directory> --json`; if current, reuse it without reinstalling. Otherwise run `tuda update check --json` and, when authorized, `tuda update install --target <absolute-directory> --agent <current-agent> --json`. The update stages an exact npm version, validates and activates the selected target-owned runtime, and preserves a recoverable backup. It leaves the bootstrap installation unchanged and returns the active runtime entry. Use that entry for subsequent operations; a bootstrap package is not the installed runtime authority.
+
+Local edits and unmanaged targets stop the operation. A failed staged update retains its directory for diagnosis; a failed activation restores the previous target. Recheck status and host discovery before reporting completion. Git checkouts update through Git. Offline or advisory update checks do not interrupt canvas work. Desktop releases use the in-app update button and retain local user data.

package/capabilities.json

@@ -0,0 +1,443 @@
+{
+  "schemaVersion": 1,
+  "name": "@petercjl/tuda",
+  "version": "0.1.0",
+  "kind": "cli-skill",
+  "skills": [
+    "using-tuda"
+  ],
+  "platforms": {
+    "darwin": "development",
+    "win32": "customer"
+  },
+  "requiredRuntime": {
+    "node": ">=22.12.0",
+    "desktop": "Tuda for canvas operations"
+  },
+  "agentEligibility": "valid-name-with-generic-fallback",
+  "hostDiscoveryAuthority": "host",
+  "automaticUpdates": {
+    "enabled": true,
+    "install": false,
+    "intervalHours": 24,
+    "timeoutMs": 600,
+    "optOut": "TUDA_NO_UPDATE_CHECK=1"
+  },
+  "installationLifecycle": {
+    "skillRequired": true,
+    "updateRequiresSkillSync": true,
+    "required_components": [
+      "cli",
+      "skill"
+    ],
+    "install": "skill install --target <exact-directory>",
+    "update": "update install --target <exact-directory>",
+    "verification": "skill status --target <exact-directory> --json",
+    "agentNeutral": true,
+    "explicitDestination": true,
+    "hostDiscoveryVerificationRequired": true,
+    "physicalRuntimeIsolation": true,
+    "bootstrapNotice": "INSTALL.md"
+  },
+  "commandContracts": {
+    "version": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        }
+      },
+      "sideEffects": "none"
+    },
+    "capabilities": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        }
+      },
+      "sideEffects": "none"
+    },
+    "doctor": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        }
+      },
+      "sideEffects": "none"
+    },
+    "skill source": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        },
+        "--target": {
+          "type": "string",
+          "semantics": "exact Skill directory"
+        },
+        "--agent": {
+          "type": "string"
+        },
+        "--name": {
+          "type": "string"
+        }
+      },
+      "sideEffects": "none"
+    },
+    "skill status": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        },
+        "--target": {
+          "type": "string",
+          "semantics": "exact Skill directory"
+        },
+        "--agent": {
+          "type": "string"
+        },
+        "--name": {
+          "type": "string"
+        }
+      },
+      "sideEffects": "none"
+    },
+    "skill install": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        },
+        "--target": {
+          "type": "string",
+          "semantics": "exact Skill directory"
+        },
+        "--agent": {
+          "type": "string"
+        },
+        "--name": {
+          "type": "string"
+        }
+      },
+      "sideEffects": "local-write"
+    },
+    "skill update": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        },
+        "--target": {
+          "type": "string",
+          "semantics": "exact Skill directory"
+        },
+        "--agent": {
+          "type": "string"
+        },
+        "--name": {
+          "type": "string"
+        }
+      },
+      "sideEffects": "local-write"
+    },
+    "update check": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        },
+        "--channel": {
+          "type": "string",
+          "enum": [
+            "latest",
+            "next"
+          ]
+        }
+      },
+      "sideEffects": "none"
+    },
+    "update install": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        },
+        "--target": {
+          "type": "string",
+          "semantics": "exact Skill directory"
+        },
+        "--agent": {
+          "type": "string"
+        },
+        "--name": {
+          "type": "string"
+        },
+        "--channel": {
+          "type": "string",
+          "enum": [
+            "latest",
+            "next"
+          ]
+        }
+      },
+      "sideEffects": "package-and-skill-update"
+    },
+    "desktop prepare": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        },
+        "--app-path": {
+          "type": "string"
+        },
+        "--user-data-path": {
+          "type": "string"
+        },
+        "--startup-timeout": {
+          "type": "number",
+          "unit": "seconds",
+          "minimum": 1,
+          "maximum": 180
+        }
+      },
+      "sideEffects": "local-process-start"
+    }
+  },
+  "discoveryContract": {
+    "schemaVersion": 1,
+    "entryPoints": [
+      {
+        "argv": [
+          "capabilities",
+          "--json"
+        ],
+        "result": "manifest"
+      }
+    ],
+    "commandsField": "commandContracts",
+    "version": {
+      "command": "version",
+      "argv": [
+        "version",
+        "--json"
+      ],
+      "fields": {
+        "package": {
+          "field": "package",
+          "type": "string"
+        },
+        "version": {
+          "field": "version",
+          "type": "string"
+        }
+      }
+    },
+    "skillCollection": {
+      "namesField": "skills",
+      "default": "using-tuda",
+      "selector": {
+        "option": "--name",
+        "type": "string"
+      },
+      "enumeration": {
+        "argv": [
+          "skill",
+          "source",
+          "--json"
+        ],
+        "itemsField": "skills",
+        "completeField": "complete"
+      },
+      "namedSource": [
+        "skill",
+        "source",
+        "--name",
+        "{skill}",
+        "--json"
+      ]
+    }
+  },
+  "maintenanceContract": {
+    "schemaVersion": 1,
+    "agentEligibility": "valid-name-with-generic-fallback",
+    "hostDiscoveryAuthority": "host",
+    "targetOptions": {
+      "--target": {
+        "type": "string",
+        "kind": "skill-directory"
+      }
+    },
+    "source": {
+      "name": {
+        "field": "name",
+        "type": "string"
+      },
+      "package": {
+        "field": "package",
+        "type": "string"
+      },
+      "version": {
+        "field": "version",
+        "type": "string"
+      },
+      "path": {
+        "field": "sourcePath",
+        "type": "string"
+      }
+    },
+    "status": {
+      "name": {
+        "field": "name",
+        "type": "string"
+      },
+      "package": {
+        "field": "package",
+        "type": "string"
+      },
+      "version": {
+        "field": "version",
+        "type": "string"
+      },
+      "target": {
+        "field": "target",
+        "type": "string"
+      },
+      "installed": {
+        "field": "installed",
+        "type": "boolean"
+      },
+      "managed": {
+        "field": "managed",
+        "type": "boolean"
+      },
+      "current": {
+        "field": "current",
+        "type": "boolean"
+      },
+      "edited": {
+        "field": "edited",
+        "type": "boolean"
+      },
+      "verification": {
+        "field": "verification",
+        "type": "object"
+      },
+      "recovery": {
+        "field": "recovery",
+        "type": "object"
+      }
+    }
+  },
+  "nativePlugin": {
+    "contract": 1,
+    "profile": "boards-only",
+    "transport": "stdio-mcp",
+    "entry": "dist/board-plugin.js",
+    "requiresSkill": false,
+    "requiresDesktop": true,
+    "environment": {
+      "TUDA_USER_DATA_PATH": "exact private workspace directory",
+      "TUDA_APP_PATH": "compatible desktop root",
+      "TUDA_PLUGIN_SPACE": "fixed personal or enterprise space",
+      "TUDA_SPACE": "alias with precedence",
+      "TUDA_EMBEDDED_HOST": "host identity for isolated packaged desktop",
+      "TUDA_AUTH_HANDOFF_FILE": "host-private short-lived PKCE handoff file; never a model argument",
+      "TUDA_STARTUP_TIMEOUT_MS": "background readiness deadline, 1000..180000 ms; native plugin default 120000"
+    },
+    "generationTools": false,
+    "preparation": {
+      "argv": [
+        "desktop",
+        "prepare",
+        "--app-path",
+        "{appRoot}",
+        "--user-data-path",
+        "{userData}",
+        "--startup-timeout",
+        "120",
+        "--json"
+      ],
+      "readyField": "data.ready",
+      "instanceField": "data.instanceId",
+      "requiresAuth": false,
+      "sequence": [
+        "prepare",
+        "issue-instance-bound-handoff",
+        "tools/call"
+      ],
+      "contract": 1,
+      "resultSchema": {
+        "type": "object",
+        "required": [
+          "schemaVersion",
+          "ok",
+          "data"
+        ],
+        "properties": {
+          "schemaVersion": {
+            "const": 1
+          },
+          "ok": {
+            "const": true
+          },
+          "data": {
+            "type": "object",
+            "required": [
+              "ready",
+              "instanceId",
+              "protocolVersion"
+            ],
+            "properties": {
+              "ready": {
+                "const": true
+              },
+              "instanceId": {
+                "type": "string",
+                "pattern": "^[a-f0-9]{64}$"
+              },
+              "protocolVersion": {
+                "const": 1
+              }
+            },
+            "additionalProperties": false
+          }
+        }
+      }
+    },
+    "authHandoff": {
+      "contract": 1,
+      "transport": "private-file",
+      "environment": "TUDA_AUTH_HANDOFF_FILE",
+      "targetAppId": "tuda",
+      "required": [
+        "contract",
+        "origin",
+        "appId",
+        "code",
+        "verifier",
+        "expiresAt",
+        "instanceId"
+      ],
+      "instanceField": "instanceId",
+      "bindingSource": "nativePlugin.preparation.data.instanceId",
+      "sessionPersistence": "memory-only",
+      "sequence": [
+        "prepare-desktop",
+        "issue-handoff",
+        "write-instance-bound-file",
+        "tools/call"
+      ]
+    },
+    "desktopCompatibility": {
+      "contract": 1,
+      "protocolVersion": 1,
+      "minimumVersion": "0.1.0"
+    },
+    "updates": {
+      "contract": 1,
+      "owner": "host",
+      "package": "@petercjl/tuda",
+      "channel": "next",
+      "mode": "automatic",
+      "intervalHours": 24,
+      "timeoutMs": 1500,
+      "activation": "next-connection",
+      "compatibility": "same-minor-for-0.x-same-major-for-1.x",
+      "failure": "keep-active"
+    }
+  }
+}