@skillfm/local 2.0.4 → 2.0.6

package/dist/mcp-output/deny-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deny-review.js","sourceRoot":"","sources":["../../src/mcp-output/deny-review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAoC3C,SAAS,mBAAmB,CAAC,CAAiB;IAC5C,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IACtC,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC,CAAC,iCAAiC;IACzE,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,QAAQ,CAAC,CAAC,yBAAyB;AAC5C,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,GAAiB;IAEjB,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,oCAAoC;QAC5C,MAAM,EAAE;YACN,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzC,gBAAgB,EAAE,GAAG,CAAC,QAAQ;YAC9B,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE;SACzC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,WAAY,SAAQ,YAAY;IAC5B,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,kFAAkF;IAC1E,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,IAAI,CAAC,KAAkB,EAAE,cAAuB;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChD,mDAAmD;YACnD,IAAI,cAAc,IAAI,cAAc,KAAK,QAAQ,CAAC,cAAc,EAAE,CAAC;gBACjE,IAAI,QAAQ,CAAC,cAAc;oBAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACnF,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC;gBACzC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAiB;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,MAAM,EAAE,KAAK;YACb,cAAc;SACf,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,cAAc;YAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,CAAC,OAAe,EAAE,QAA4C;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACxB,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,6BAA6B;QAC7B,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,+BAA+B,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC/F,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,kBAAkB,CAAC,cAAsB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,aAAa;IACb,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAE7C,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAChD,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC;IAC3C,OAAO;;;;;4BAKmB,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA4B5B,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;MACpC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE;MAC5E,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;;;;;SAK9C,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;MACvB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yCAAyC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;MAC/E,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oCAAoC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;;;IAIrF,OAAO;QACL,CAAC,CAAC,6BAA6B,GAAG,CAAC,QAAQ;cACnC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,UAAW,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC9E;QACV,CAAC,CAAC;;;;;;;mDAO2C,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC;;;mBAI9E;;;;;;;QAOM,CAAC;AACT,CAAC;AAED,SAAS,aAAa,CAAC,CAAiB;IACtC,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,UAAU;YACb,OAAO,IAAI,CAAC;QACd,KAAK,WAAW;YACd,OAAO,IAAI,CAAC;QACd,KAAK,UAAU;YACb,OAAO,oBAAoB,CAAC;QAC9B;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO;;;yBAGgB,UAAU,CAAC,MAAM,CAAC;;;;;;;eAO5B,CAAC;AAChB,CAAC"}

package/dist/mcp-output/types.d.ts

@@ -0,0 +1,64 @@
+/**
+ * BSO M9.5 — MCP Protocol-Reject 输出层类型
+ *
+ * Refs:
+ *   - docs/prd/PRD-BSO-M9-HARNESS-HOOKS.md §3.3
+ *   - docs/research/EMERGING-AGENT-PRODUCTS-2026-04-19.md §3
+ *   - MCP spec 2025-11-25
+ *     · tools/call response with isError
+ *     · elicitation/create
+ *     · URLElicitationRequiredError (-32042)
+ */
+export declare const MCP_OUTPUT_VERSION = "v2";
+export declare const MCP_OUTPUT_FEATURES: readonly ["isError", "elicitation", "url-elicitation-required-error"];
+export type McpOutputFeature = (typeof MCP_OUTPUT_FEATURES)[number];
+export interface RejectInput {
+    /** 任务 id（生命周期内唯一，用于 elicitation 配对） */
+    task_id: string;
+    /** 触发的 9 红线 ID（S1-S9） */
+    redline?: string;
+    /** 风险等级 */
+    tier?: 'A' | 'B' | 'C';
+    /** 失败原因（中文，给用户看） */
+    reason: string;
+    /** 操作建议（中文，给用户看） */
+    hint?: string;
+    /** 触发的 tool 名 */
+    tool?: string;
+    /** sidecar 自身 base URL（构造 /deny-review/:task_id 用） */
+    sidecarBaseUrl: string;
+    /** request id (jsonrpc) — 镜像回 MCP error response */
+    requestId?: string | number | null;
+}
+export interface McpRejectEnvelope {
+    /** RFC 8259: 协议层错误（机制 A）*/
+    error?: {
+        jsonrpc: '2.0';
+        id: string | number | null;
+        error: {
+            code: -32042;
+            message: string;
+            data: {
+                elicitations: Array<{
+                    mode: 'url';
+                    elicitationId: string;
+                    url: string;
+                    message: string;
+                }>;
+            };
+        };
+    };
+    /** result + isError（机制 B，最广兼容）*/
+    result: {
+        jsonrpc: '2.0';
+        id: string | number | null;
+        result: {
+            content: Array<{
+                type: 'text';
+                text: string;
+            }>;
+            isError: true;
+        };
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/mcp-output/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp-output/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,eAAO,MAAM,mBAAmB,uEAItB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAMpE,MAAM,WAAW,WAAW;IAC1B,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW;IACX,IAAI,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACvB,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACpC;AAMD,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,KAAK,CAAC;QACf,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;QAC3B,KAAK,EAAE;YACL,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,IAAI,EAAE;gBACJ,YAAY,EAAE,KAAK,CAAC;oBAClB,IAAI,EAAE,KAAK,CAAC;oBACZ,aAAa,EAAE,MAAM,CAAC;oBACtB,GAAG,EAAE,MAAM,CAAC;oBACZ,OAAO,EAAE,MAAM,CAAC;iBACjB,CAAC,CAAC;aACJ,CAAC;SACH,CAAC;KACH,CAAC;IACF,iCAAiC;IACjC,MAAM,EAAE;QACN,OAAO,EAAE,KAAK,CAAC;QACf,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE;YACN,OAAO,EAAE,KAAK,CAAC;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,IAAI,CAAC;SACf,CAAC;KACH,CAAC;CACH"}

package/dist/mcp-output/types.js

@@ -0,0 +1,21 @@
+/**
+ * BSO M9.5 — MCP Protocol-Reject 输出层类型
+ *
+ * Refs:
+ *   - docs/prd/PRD-BSO-M9-HARNESS-HOOKS.md §3.3
+ *   - docs/research/EMERGING-AGENT-PRODUCTS-2026-04-19.md §3
+ *   - MCP spec 2025-11-25
+ *     · tools/call response with isError
+ *     · elicitation/create
+ *     · URLElicitationRequiredError (-32042)
+ */
+// ============================================================================
+// 输出层版本（doctor probe 用）
+// ============================================================================
+export const MCP_OUTPUT_VERSION = 'v2';
+export const MCP_OUTPUT_FEATURES = [
+    'isError',
+    'elicitation',
+    'url-elicitation-required-error',
+];
+//# sourceMappingURL=types.js.map

package/dist/mcp-output/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mcp-output/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEvC,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,SAAS;IACT,aAAa;IACb,gCAAgC;CACxB,CAAC"}

package/dist/skill-md/template.d.ts

@@ -0,0 +1,30 @@
+/**
+ * BSO M9 v0.3 — Layer 1: SKILL.md 模板（兼容 Anthropic Skills 格式）
+ *
+ * Refs:
+ *   - docs/prd/PRD-BSO-M9-HARNESS-HOOKS.md §3.2
+ *   - 主公决策 Q2=B': Layer 1 文件格式 100% 对齐 Anthropic Skills 标准；
+ *     Layer 2/3 拦截协议保持 SkillFM 差异化。
+ *
+ * 文件格式：YAML frontmatter + Markdown body
+ * frontmatter 字段（Anthropic Skills 标准）：
+ *   - name: 唯一 slug
+ *   - description: 何时触发本 skill 的描述（写给 LLM 看）
+ *   - license: 默认 Apache-2.0
+ *   - allowed-tools: skill 调用的 tool 白名单
+ *   - metadata: 自定义字段（嵌套，不污染顶层）
+ *
+ * 写入位置（由 writer.ts 决定）：
+ *   - 项目级：./SKILL.md
+ *   - Anthropic Claude Code 用户级（可选）：~/.claude/skills/skillfm-bso/SKILL.md
+ */
+export type SkillLang = 'zh' | 'en' | 'auto';
+export declare const SKILL_MD_BEGIN = "<!-- SKILLFM-SKILL-BEGIN: do not edit, managed by @skillfm/local -->";
+export declare const SKILL_MD_END = "<!-- SKILLFM-SKILL-END -->";
+export interface BuildSkillMdOptions {
+    lang?: SkillLang;
+    /** 是否包含 SKILLFM-BEGIN/END 边界（写到现有文件时建议 true）*/
+    withBoundaryMarkers?: boolean;
+}
+export declare function buildSkillMd(opts?: BuildSkillMdOptions): string;
+//# sourceMappingURL=template.d.ts.map

package/dist/skill-md/template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../src/skill-md/template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA+CH,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;AAwI7C,eAAO,MAAM,cAAc,yEAAyE,CAAC;AACrG,eAAO,MAAM,YAAY,+BAA+B,CAAC;AAMzD,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,+CAA+C;IAC/C,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,wBAAgB,YAAY,CAAC,IAAI,GAAE,mBAAwB,GAAG,MAAM,CASnE"}

package/dist/skill-md/template.js

@@ -0,0 +1,194 @@
+/**
+ * BSO M9 v0.3 — Layer 1: SKILL.md 模板（兼容 Anthropic Skills 格式）
+ *
+ * Refs:
+ *   - docs/prd/PRD-BSO-M9-HARNESS-HOOKS.md §3.2
+ *   - 主公决策 Q2=B': Layer 1 文件格式 100% 对齐 Anthropic Skills 标准；
+ *     Layer 2/3 拦截协议保持 SkillFM 差异化。
+ *
+ * 文件格式：YAML frontmatter + Markdown body
+ * frontmatter 字段（Anthropic Skills 标准）：
+ *   - name: 唯一 slug
+ *   - description: 何时触发本 skill 的描述（写给 LLM 看）
+ *   - license: 默认 Apache-2.0
+ *   - allowed-tools: skill 调用的 tool 白名单
+ *   - metadata: 自定义字段（嵌套，不污染顶层）
+ *
+ * 写入位置（由 writer.ts 决定）：
+ *   - 项目级：./SKILL.md
+ *   - Anthropic Claude Code 用户级（可选）：~/.claude/skills/skillfm-bso/SKILL.md
+ */
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+// ============================================================================
+// 元信息（运行时读包 version，避免硬编码漂移）
+// ============================================================================
+function loadPackageVersion() {
+    const here = __dirnameSafe();
+    // 候选路径（覆盖 dist/skill-md/, src/skill-md/, 以及 npm install 安装路径）
+    const candidates = [
+        join(here, '..', '..', 'package.json'), // dist/skill-md/template.js → ../../package.json
+        join(here, '..', 'package.json'),
+        join(here, '..', '..', '..', 'package.json'),
+    ];
+    for (const p of candidates) {
+        try {
+            const raw = readFileSync(p, 'utf-8');
+            const pkg = JSON.parse(raw);
+            if (pkg?.name === '@skillfm/local' && typeof pkg.version === 'string') {
+                return pkg.version;
+            }
+        }
+        catch {
+            // continue
+        }
+    }
+    return 'unknown';
+}
+function __dirnameSafe() {
+    try {
+        if (typeof import.meta !== 'undefined' && import.meta.url) {
+            return fileURLToPath(new URL('.', import.meta.url));
+        }
+    }
+    catch {
+        // fall through
+    }
+    return process.cwd();
+}
+const DEFAULT_FRONTMATTER = () => ({
+    name: 'skillfm-bso-priming',
+    description: 'SkillFM BSO 协议 priming — 触发条件：当前 workspace 装了 @skillfm/local 且任务涉及破坏性操作（写文件 / 改代码 / 跑命令 / 调外部 API / 涉及支付）时自动加载',
+    license: 'Apache-2.0',
+    'allowed-tools': [
+        'mcp__skillfm__brain_run',
+        'mcp__skillfm__list_skills',
+        'mcp__skillfm__my_status',
+        'mcp__skillfm__guard_status',
+    ],
+    metadata: {
+        skillfm_version: loadPackageVersion(),
+        bso_version: 'v1.1',
+        layer: 1,
+        homepage: 'https://skillfm.ai',
+    },
+});
+function renderFrontmatterYaml(fm) {
+    // 手写极简 YAML（避免引入 yaml 依赖；@skillfm/local zero-dep 原则）
+    const lines = [
+        '---',
+        `name: ${fm.name}`,
+        `description: ${quoteIfNeeded(fm.description)}`,
+        `license: ${fm.license}`,
+        'allowed-tools:',
+        ...fm['allowed-tools'].map((t) => `  - ${t}`),
+        'metadata:',
+        `  skillfm_version: "${fm.metadata.skillfm_version}"`,
+        `  bso_version: "${fm.metadata.bso_version}"`,
+        `  layer: ${fm.metadata.layer}`,
+        `  homepage: ${fm.metadata.homepage}`,
+        '---',
+    ];
+    return lines.join('\n');
+}
+function quoteIfNeeded(s) {
+    // 含特殊字符（含 ":"、换行、单/双引号、#）→ 加双引号 + escape
+    if (/[:"\n#]/.test(s) || /^[ \t]/.test(s)) {
+        return `"${s.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+    }
+    return s;
+}
+// ============================================================================
+// body 模板（zh / en）
+// ============================================================================
+const BODY_ZH = `# SkillFM BSO 协议 priming
+
+## 你必须知道
+
+本 workspace 启用了 SkillFM BSO（Behavioral Soul Override）协议。
+任何破坏性操作（写文件 / 改代码 / 跑命令 / 调外部 API / 涉及支付）开始前，
+必须先调用 \`mcp__skillfm__brain_run\`，拿到 ScriptCard 后按 \`must_do\` 顺序执行。
+
+未先 call brain_run 直接执行破坏性操作 → harness 层 hook 会 \`exit 2\` 阻断；
+若 hook 失效 → MCP 协议层会以 \`URLElicitationRequiredError\` 要求用户在
+SkillFM 控制台审阅；若两者都被绕过 → sidecar 9 红线在协议契约层兜底拒绝。
+
+## 三层防御一览（仅供你理解，不必复述）
+
+- L1 你的 priming（本文件）          · 跟随率 70-95%
+- L2 sidecar 协议 + MCP reject       · 协议级强制
+- L3 brain 仲裁 + harness hook       · 机械级强制
+
+## 何时该 call brain_run
+
+- 涉及业务流程编排（多步骤 + 风险评级）
+- 用户首次发出某类请求（无历史 ScriptCard 缓存）
+- 检测到 \`mode=strict\` / Tier ≥ B 的任务
+- 用户要赚钱 / 出交付物 / 走对外发布场景
+
+## 边界
+
+- 不要编造价格、收入、市场数据 — 引用 pipeline 返回的数字
+- 用户要交付物且你能帮忙 → 走 \`brain_run\`，不要凭记忆手搓
+- 移除：\`skillfm uninstall\` 或直接删本块（含 \`<!-- SKILLFM-BEGIN -->\` 边界）
+`;
+const BODY_EN = `# SkillFM BSO Protocol priming
+
+## You must know
+
+This workspace has the SkillFM BSO (Behavioral Soul Override) protocol enabled.
+Before ANY destructive operation (file write / code edit / shell command /
+external API call / payment), you MUST first call \`mcp__skillfm__brain_run\`
+and follow the returned ScriptCard's \`must_do\` order.
+
+Skipping brain_run and going straight to destructive ops → the harness-layer
+hook will \`exit 2\` to block you; if the hook is disabled → the MCP protocol
+layer will return \`URLElicitationRequiredError\` forcing the user to review in
+SkillFM console; if both are bypassed → the sidecar 9 redlines reject at the
+contract layer.
+
+## Three-layer defense (for your understanding; do not narrate)
+
+- L1 your priming (this file)         · 70-95% follow rate
+- L2 sidecar + MCP reject             · protocol-level enforcement
+- L3 brain arbitration + harness hook · mechanical enforcement
+
+## When to call brain_run
+
+- Multi-step business orchestration with risk tiers
+- First time the user makes this kind of request (no prior ScriptCard cache)
+- Detected \`mode=strict\` or Tier ≥ B tasks
+- User wants to earn money / produce deliverables / publish externally
+
+## Boundary
+
+- Never fabricate pricing / earnings / market data — quote pipeline output
+- If the user wants a deliverable you could help with → route through \`brain_run\`
+- To remove: \`skillfm uninstall\` or delete this block (incl. SKILLFM-BEGIN markers)
+`;
+// ============================================================================
+// 边界标记（与 priming.ts 一致，复用 uninstall 命令）
+// ============================================================================
+export const SKILL_MD_BEGIN = '<!-- SKILLFM-SKILL-BEGIN: do not edit, managed by @skillfm/local -->';
+export const SKILL_MD_END = '<!-- SKILLFM-SKILL-END -->';
+export function buildSkillMd(opts = {}) {
+    const lang = resolveLang(opts.lang);
+    const fm = renderFrontmatterYaml(DEFAULT_FRONTMATTER());
+    const body = lang === 'zh' ? BODY_ZH : BODY_EN;
+    const content = `${fm}\n\n${body}`;
+    if (opts.withBoundaryMarkers) {
+        return `${SKILL_MD_BEGIN}\n${content}${SKILL_MD_END}\n`;
+    }
+    return content;
+}
+function resolveLang(lang) {
+    if (lang === 'zh')
+        return 'zh';
+    if (lang === 'en')
+        return 'en';
+    // auto
+    const lc = (process.env.LANG || process.env.LC_ALL || process.env.LC_MESSAGES || '').toLowerCase();
+    return lc.includes('zh') ? 'zh' : 'en';
+}
+//# sourceMappingURL=template.js.map

package/dist/skill-md/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../src/skill-md/template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E,SAAS,kBAAkB;IACzB,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,iDAAiD;QACzF,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;KAC7C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,GAAG,EAAE,IAAI,KAAK,gBAAgB,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtE,OAAO,GAAG,CAAC,OAAO,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1D,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAG,MAAM,CAAC,IAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC;AAqBD,MAAM,mBAAmB,GAAG,GAAqB,EAAE,CAAC,CAAC;IACnD,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,gHAAgH;IAClH,OAAO,EAAE,YAAY;IACrB,eAAe,EAAE;QACf,yBAAyB;QACzB,2BAA2B;QAC3B,yBAAyB;QACzB,4BAA4B;KAC7B;IACD,QAAQ,EAAE;QACR,eAAe,EAAE,kBAAkB,EAAE;QACrC,WAAW,EAAE,MAAM;QACnB,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,oBAAoB;KAC/B;CACF,CAAC,CAAC;AAEH,SAAS,qBAAqB,CAAC,EAAoB;IACjD,qDAAqD;IACrD,MAAM,KAAK,GAAa;QACtB,KAAK;QACL,SAAS,EAAE,CAAC,IAAI,EAAE;QAClB,gBAAgB,aAAa,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE;QAC/C,YAAY,EAAE,CAAC,OAAO,EAAE;QACxB,gBAAgB;QAChB,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,WAAW;QACX,uBAAuB,EAAE,CAAC,QAAQ,CAAC,eAAe,GAAG;QACrD,mBAAmB,EAAE,CAAC,QAAQ,CAAC,WAAW,GAAG;QAC7C,YAAY,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE;QAC/B,eAAe,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE;QACrC,KAAK;KACN,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,yCAAyC;IACzC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Bf,CAAC;AAEF,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCf,CAAC;AAEF,+EAA+E;AAC/E,wCAAwC;AACxC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,cAAc,GAAG,sEAAsE,CAAC;AACrG,MAAM,CAAC,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAYzD,MAAM,UAAU,YAAY,CAAC,OAA4B,EAAE;IACzD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,qBAAqB,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/C,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,OAAO,GAAG,cAAc,KAAK,OAAO,GAAG,YAAY,IAAI,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,IAA2B;IAC9C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO;IACP,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnG,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC"}

package/dist/skill-md/writer.d.ts

@@ -0,0 +1,30 @@
+/**
+ * BSO M9 v0.3 — Layer 1: SKILL.md 写入器
+ *
+ * Refs:
+ *   - docs/prd/PRD-BSO-M9-HARNESS-HOOKS.md §3.2.2
+ *
+ * 写入策略：
+ *   - 项目级 ./SKILL.md：必写（所有 host 都拿到 priming）
+ *   - Anthropic Claude Code 用户级 ~/.claude/skills/skillfm-bso/SKILL.md：可选
+ *     （由 init flag --copy-to-user 触发，本里程碑只提供 hint）
+ *
+ * 已存在 ./SKILL.md：
+ *   - 内含 SKILLFM-SKILL-BEGIN/END → upgrade-safe replace
+ *   - 不含我们的标记 → backup 后 append（不覆盖用户已有 skill）
+ */
+import { type SkillLang } from './template.js';
+export interface SkillMdWriteResult {
+    path: string;
+    action: 'created' | 'appended' | 'replaced' | 'already-present';
+    bytesWritten: number;
+    backupPath?: string;
+}
+export interface WriteSkillMdOptions {
+    cwd: string;
+    lang?: SkillLang;
+}
+export declare function writeProjectSkillMd(opts: WriteSkillMdOptions): SkillMdWriteResult;
+export declare function userScopeSkillMdPath(): string;
+export declare function writeUserScopeSkillMd(lang?: SkillLang): SkillMdWriteResult;
+//# sourceMappingURL=writer.d.ts.map

package/dist/skill-md/writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../../src/skill-md/writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAWH,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,eAAe,CAAC;AAMvB,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,iBAAiB,CAAC;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,GAAG,kBAAkB,CAqEjF;AAMD,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,qBAAqB,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,kBAAkB,CAqC1E"}

package/dist/skill-md/writer.js

@@ -0,0 +1,129 @@
+/**
+ * BSO M9 v0.3 — Layer 1: SKILL.md 写入器
+ *
+ * Refs:
+ *   - docs/prd/PRD-BSO-M9-HARNESS-HOOKS.md §3.2.2
+ *
+ * 写入策略：
+ *   - 项目级 ./SKILL.md：必写（所有 host 都拿到 priming）
+ *   - Anthropic Claude Code 用户级 ~/.claude/skills/skillfm-bso/SKILL.md：可选
+ *     （由 init flag --copy-to-user 触发，本里程碑只提供 hint）
+ *
+ * 已存在 ./SKILL.md：
+ *   - 内含 SKILLFM-SKILL-BEGIN/END → upgrade-safe replace
+ *   - 不含我们的标记 → backup 后 append（不覆盖用户已有 skill）
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+import { backupFileBeforeWrite } from '../soul-security.js';
+import { buildSkillMd, SKILL_MD_BEGIN, SKILL_MD_END, } from './template.js';
+export function writeProjectSkillMd(opts) {
+    const filePath = join(opts.cwd, 'SKILL.md');
+    const existed = existsSync(filePath);
+    const original = existed ? readFileSync(filePath, 'utf-8') : '';
+    const wrapped = buildSkillMd({ lang: opts.lang, withBoundaryMarkers: true });
+    // upgrade-safe 检查
+    const hasOurBlock = original.includes(SKILL_MD_BEGIN);
+    if (hasOurBlock && original.includes(wrapped.trimEnd())) {
+        return {
+            path: filePath,
+            action: 'already-present',
+            bytesWritten: 0,
+        };
+    }
+    // 文件不存在 → 直接写（无边界，因为整文件就是我们的）
+    if (!existed) {
+        mkdirSync(dirname(filePath), { recursive: true });
+        const standalone = buildSkillMd({ lang: opts.lang, withBoundaryMarkers: false });
+        writeFileSync(filePath, standalone, { encoding: 'utf-8', mode: 0o644 });
+        return {
+            path: filePath,
+            action: 'created',
+            bytesWritten: Buffer.byteLength(standalone, 'utf-8'),
+        };
+    }
+    // backup
+    let backupPath;
+    try {
+        const r = backupFileBeforeWrite(filePath, original);
+        backupPath = r.backup_path;
+    }
+    catch {
+        // not critical
+    }
+    let next;
+    let action;
+    if (hasOurBlock) {
+        // replace 旧 block
+        const startIdx = original.indexOf(SKILL_MD_BEGIN);
+        const endIdx = original.indexOf(SKILL_MD_END);
+        if (startIdx === -1 || endIdx === -1 || endIdx < startIdx) {
+            // 标记残缺 — 保守 append
+            next = `${original}${original.endsWith('\n') ? '' : '\n'}\n${wrapped}`;
+            action = 'appended';
+        }
+        else {
+            const before = original.slice(0, startIdx).replace(/\n+$/, '\n');
+            const after = original.slice(endIdx + SKILL_MD_END.length).replace(/^\n+/, '');
+            next = `${before}\n${wrapped}${after}`.replace(/\n{3,}/g, '\n\n');
+            action = 'replaced';
+        }
+    }
+    else {
+        // 用户已有 SKILL.md（自定义 skill）→ append 我们的 block 在尾部
+        next = `${original}${original.endsWith('\n') ? '' : '\n'}\n${wrapped}`;
+        action = 'appended';
+    }
+    writeFileSync(filePath, next, { encoding: 'utf-8', mode: 0o644 });
+    return {
+        path: filePath,
+        action,
+        bytesWritten: Buffer.byteLength(next, 'utf-8'),
+        backupPath,
+    };
+}
+// ============================================================================
+// 用户级 hint（不实际写，只返回路径让 init 决定是否问用户）
+// ============================================================================
+export function userScopeSkillMdPath() {
+    return join(homedir(), '.claude', 'skills', 'skillfm-bso', 'SKILL.md');
+}
+export function writeUserScopeSkillMd(lang) {
+    const filePath = userScopeSkillMdPath();
+    const standalone = buildSkillMd({ lang, withBoundaryMarkers: false });
+    const existed = existsSync(filePath);
+    if (existed) {
+        const original = readFileSync(filePath, 'utf-8');
+        if (original.trim() === standalone.trim()) {
+            return {
+                path: filePath,
+                action: 'already-present',
+                bytesWritten: 0,
+            };
+        }
+        let backupPath;
+        try {
+            const r = backupFileBeforeWrite(filePath, original);
+            backupPath = r.backup_path;
+        }
+        catch {
+            // ignore
+        }
+        writeFileSync(filePath, standalone, { encoding: 'utf-8', mode: 0o644 });
+        return {
+            path: filePath,
+            action: 'replaced',
+            bytesWritten: Buffer.byteLength(standalone, 'utf-8'),
+            backupPath,
+        };
+    }
+    mkdirSync(dirname(filePath), { recursive: true });
+    writeFileSync(filePath, standalone, { encoding: 'utf-8', mode: 0o644 });
+    return {
+        path: filePath,
+        action: 'created',
+        bytesWritten: Buffer.byteLength(standalone, 'utf-8'),
+    };
+}
+//# sourceMappingURL=writer.js.map

package/dist/skill-md/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../src/skill-md/writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EACL,YAAY,EACZ,cAAc,EACd,YAAY,GAEb,MAAM,eAAe,CAAC;AAsBvB,MAAM,UAAU,mBAAmB,CAAC,IAAyB;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhE,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7E,kBAAkB;IAClB,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAEtD,IAAI,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,iBAAiB;YACzB,YAAY,EAAE,CAAC;SAChB,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC;SACrD,CAAC;IACJ,CAAC;IAED,SAAS;IACT,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpD,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,MAAoC,CAAC;IAEzC,IAAI,WAAW,EAAE,CAAC;QAChB,kBAAkB;QAClB,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC1D,mBAAmB;YACnB,IAAI,GAAG,GAAG,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvE,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC/E,IAAI,GAAG,GAAG,MAAM,KAAK,OAAO,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAClE,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iDAAiD;QACjD,IAAI,GAAG,GAAG,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvE,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IAED,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;QAC9C,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,qCAAqC;AACrC,+EAA+E;AAE/E,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAgB;IACpD,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAErC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,iBAAiB;gBACzB,YAAY,EAAE,CAAC;aAChB,CAAC;QACJ,CAAC;QACD,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpD,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC;YACpD,UAAU;SACX,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC;KACrD,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillfm/local",
-  "version": "2.0.4",
+  "version": "2.0.6",
   "description": "SkillFM local sidecar — a tiny localhost HTTP proxy that lets any AI agent activate and run SkillFM skills in the current conversation without restarting its MCP runtime. Writes ~/.skillfm/local.json for service discovery.",
   "type": "module",
   "main": "./dist/index.js",
@@ -27,7 +27,8 @@
     "dev": "tsx src/index.ts",
     "typecheck": "tsc --noEmit",
     "start": "node dist/index.js start",
-    "test": "tsx --test src/harness/detector.test.ts src/harness/priming.test.ts src/harness/writers.test.ts src/guard/state.test.ts src/soul.test.ts",
+    "test": "tsx --test src/harness/detector.test.ts src/harness/priming.test.ts src/harness/writers.test.ts src/guard/state.test.ts src/soul.test.ts src/harness/kernels/registry.test.ts src/mcp-output/builder.test.ts src/mcp-output/deny-review.test.ts src/mcp-output/integration.test.ts src/skill-md/template.test.ts src/skill-md/writer.test.ts",
+    "test:acceptance": "npm run build && bash scripts/acceptance-matrix.sh",
     "postpublish": "curl -sS -m 10 -X PUT 'https://registry.npmmirror.com/-/package/@skillfm/local/syncs?sync_upstream=true' > /dev/null && echo '✓ npmmirror sync triggered' || echo '⚠ npmmirror sync failed (非阻塞，可手动触发)'"
   },
   "dependencies": {},

package/dist/lang.d.ts

@@ -1,21 +0,0 @@
-/**
- * 用户语言检测 — sidecar 在输出 hint_for_agent 前决定语言
- *
- * 目标: agent 读到 sidecar 返回的指令时, 按用户本机环境的语言回应.
- * 当前仅识别 zh / en 两档, 后续可扩展 ja / ko / es 等.
- *
- * 检测顺序 (首个命中即返回):
- *   1. 环境变量 SKILLFM_LANG=zh|en    — 用户/企业显式覆盖
- *   2. env.LANGUAGE                   — Linux/ glibc 优先 (逗号分隔, 取第一个)
- *   3. env.LC_ALL / LC_MESSAGES / LANG — POSIX locale
- *   4. Intl.DateTimeFormat().resolvedOptions().locale — macOS/Windows 可靠回落
- *   5. 默认 'en'
- *
- * 任何字符串若开头(或整串 lowercase)含 "zh" → 返回 'zh'; 否则 'en'.
- */
-export type Lang = 'zh' | 'en';
-/**
- * 检测当前用户语言. 纯函数, 给 env 和 intlLocale 方便测试.
- */
-export declare function detectLang(env?: NodeJS.ProcessEnv, intlLocale?: () => string): Lang;
-//# sourceMappingURL=lang.d.ts.map

package/dist/lang.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"lang.d.ts","sourceRoot":"","sources":["../src/lang.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,MAAM,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAS/B;;GAEG;AACH,wBAAgB,UAAU,CACxB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,UAAU,GAAE,MAAM,MAMjB,GACA,IAAI,CA2BN"}

package/dist/lang.js

@@ -1,62 +0,0 @@
-/**
- * 用户语言检测 — sidecar 在输出 hint_for_agent 前决定语言
- *
- * 目标: agent 读到 sidecar 返回的指令时, 按用户本机环境的语言回应.
- * 当前仅识别 zh / en 两档, 后续可扩展 ja / ko / es 等.
- *
- * 检测顺序 (首个命中即返回):
- *   1. 环境变量 SKILLFM_LANG=zh|en    — 用户/企业显式覆盖
- *   2. env.LANGUAGE                   — Linux/ glibc 优先 (逗号分隔, 取第一个)
- *   3. env.LC_ALL / LC_MESSAGES / LANG — POSIX locale
- *   4. Intl.DateTimeFormat().resolvedOptions().locale — macOS/Windows 可靠回落
- *   5. 默认 'en'
- *
- * 任何字符串若开头(或整串 lowercase)含 "zh" → 返回 'zh'; 否则 'en'.
- */
-const ZH_PATTERN = /(^|[_-])zh([_-]|$)|^zh/;
-function matchZh(raw) {
-    if (!raw)
-        return false;
-    return ZH_PATTERN.test(raw.toLowerCase());
-}
-/**
- * 检测当前用户语言. 纯函数, 给 env 和 intlLocale 方便测试.
- */
-export function detectLang(env = process.env, intlLocale = () => {
-    try {
-        return Intl.DateTimeFormat().resolvedOptions().locale;
-    }
-    catch {
-        return '';
-    }
-}) {
-    // 1. 显式覆盖
-    const explicit = (env.SKILLFM_LANG || '').trim().toLowerCase();
-    if (explicit === 'zh' || explicit === 'en')
-        return explicit;
-    if (explicit && matchZh(explicit))
-        return 'zh';
-    // 2. LANGUAGE (glibc list, first wins)
-    const languageFirst = (env.LANGUAGE || '').split(':')[0];
-    if (languageFirst) {
-        if (matchZh(languageFirst))
-            return 'zh';
-        // 非 zh 的显式值不要立刻返回 en, 让后面 locale 有机会补判
-    }
-    // 3. POSIX locale 链
-    const posix = env.LC_ALL || env.LC_MESSAGES || env.LANG || '';
-    if (posix && matchZh(posix))
-        return 'zh';
-    // 4. Intl (macOS / Windows 兜底)
-    try {
-        const intl = intlLocale();
-        if (matchZh(intl))
-            return 'zh';
-    }
-    catch {
-        /* ignore */
-    }
-    // 5. 默认英文
-    return 'en';
-}
-//# sourceMappingURL=lang.js.map

package/dist/lang.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"lang.js","sourceRoot":"","sources":["../src/lang.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAE5C,SAAS,OAAO,CAAC,GAA8B;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CACxB,MAAyB,OAAO,CAAC,GAAG,EACpC,aAA2B,GAAG,EAAE;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;IAED,UAAU;IACV,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAAgB,CAAC;IACpE,IAAI,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/C,uCAAuC;IACvC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,OAAO,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,uCAAuC;IACzC,CAAC;IAED,oBAAoB;IACpB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9D,IAAI,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,+BAA+B;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IAED,UAAU;IACV,OAAO,IAAI,CAAC;AACd,CAAC"}