@topmindspace/topmind-writing-skills 0.8.50 → 0.8.51

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [0.8.51] - 2026-10-26
+
+- 新增独立宿主分发协议、可复现 ZIP、SHA256SUMS 和 latest.json；保留各技能独立版本与原 npx 安装方式。
+- 新增无 IO 的 HTML/文本排版核心、八个写作动作、宿主能力说明、图片清单及格式诊断，由 Desktop/Obsidian 以固定快照消费。
+- CLI 先完整复制到临时目录，再替换旧技能，复制或切换失败恢复旧版；不再先删除旧安装。
+- 补充公众号/X 长文的宿主适配与原位兼容说明，加入包构建、排版、安全和安装回归。
+
 ## [0.8.50] - 2026-10-26
 
 ### 创作方式与参考

package/README.en.md

@@ -18,6 +18,16 @@ npx @topmindspace/topmind-writing-skills install topmind-viral-posts   # install
 npx @topmindspace/topmind-writing-skills list                          # see all
 ```
 
+## Desktop and Obsidian integration
+
+A reviewed release snapshot of [topmind-writing-skills](https://github.com/topmindspace/topmind-writing-skills) is bundled by default: revision, formatting, briefs, social posts, WeChat, X Articles, covers and posters. The writing repository keeps its own release cadence and version.
+
+Open a Markdown document and choose **Writing & delivery** from Apps/status/commands in Desktop, or note menus/commands in Obsidian. Edit the source in the main editor, choose a delivery format and theme, then preview, copy or export beside it in `out/`. Existing article folders and WeChat drafts work in place.
+
+Built-in HTML/text typography requires no Python. Preview and copy use the same output; changed sources or images require regeneration. Diagnostics identify missing images, diagram source, extended containers and table paste limitations. AI images, PNG rendering and publishing require their respective tools. Copying does not publish; wording scores do not decide editorial quality.
+
+About & updates tracks the application, core skills, independent writing pack and integrations separately. Writing resources can update independently; compiled renderer code follows the host release. Managed packs are isolated, local modifications block replacement and failed installs preserve the previous version. Supported Desktop installs can download an update and explicitly restart; manual downloads remain available when signing or the installation channel prevents automatic updates.
+
 ## More choices, concrete references
 
 - Read actual references and visible specimens, then adapt their methods to the current material.

package/README.md

@@ -18,6 +18,16 @@ npx @topmindspace/topmind-writing-skills install topmind-viral-posts   # 装一
 npx @topmindspace/topmind-writing-skills list                          # 看全部
 ```
 
+## 在 Desktop 与 Obsidian 中使用
+
+默认内置 [topmind-writing-skills](https://github.com/topmindspace/topmind-writing-skills) 的版本化快照：改稿、只排版、短文、互动短帖、公众号、X 长文、封面与长图。写作仓独立迭代和发布，宿主内置经过验证的版本。
+
+打开 Markdown，Desktop 从应用、状态栏或命令面板进入“写作与交付”；Obsidian 从命令面板或笔记菜单进入。源稿继续在主编辑器修改；选择格式和主题后生成预览，可复制正文或导出到源稿旁的 `out/`。旧 `公众号稿.md` 和文章目录可直接使用，不会被批量改名。
+
+内置 HTML/文本排版无需 Python，预览与复制同源；源稿或图片改变后需要重新生成。扩展容器、图表源码、缺图和平台表格粘贴限制会显示诊断。封面生图、PNG 和外部发布依赖实际工具，复制不等于已发布。审校不使用“AI 味分数”作为定稿门槛。
+
+“关于与更新”分别展示 Desktop、核心技能、独立写作包和集成组件。写作资源可独立更新；编译进宿主的排版代码随宿主升级。受管包按身份隔离，覆盖本地定制会被阻止，失败保留旧版。Desktop 支持标准更新器下载后显式重启；签名、平台或渠道不支持时保留手动下载。
+
 ## 加选项，让经验帮助创作
 
 - **看过再借鉴**：实际阅读参考作品和可见样张，迁移角度、组织、节奏与设计关系。

package/bin/topmind-writing-skills.js

@@ -242,9 +242,23 @@ function install(skillId, targetRoot, { force = false, defaultTarget = false } =
       );
     }
     upgradedFrom = cmp > 0 ? installedVer || 'unknown' : null;
-    fs.rmSync(dest, { recursive: true, force: true });
   }
-  copyDir(src, dest);
+  const stage = fs.mkdtempSync(path.join(targetRoot, `.${skillId}-stage-`));
+  let previous = null;
+  try {
+    copyDir(src, stage);
+    if (fs.existsSync(dest)) {
+      previous = fs.mkdtempSync(path.join(targetRoot, `.${skillId}-previous-`));
+      fs.rmdirSync(previous);
+      fs.renameSync(dest, previous);
+    }
+    try { fs.renameSync(stage, dest); }
+    catch (error) { if (previous) { fs.renameSync(previous, dest); previous = null; } throw error; }
+    if (previous) { try { fs.rmSync(previous, { recursive: true, force: true }); } catch { console.warn(`Previous copy retained at: ${previous}`); } }
+  } catch (error) {
+    fs.rmSync(stage, { recursive: true, force: true });
+    die(`Install failed; the previous installed skill was retained. ${error.message}`);
+  } finally { fs.rmSync(stage, { recursive: true, force: true }); }
   // 安装摘要三行：装到哪里 / 装了什么版本 / 下一步。
   const toNote = defaultTarget ? '  (default, auto-detected — no --to given)' : '';
   const skillVer = readSkillVersion(dest) || 'unknown';

package/lib/host-pack.cjs

@@ -0,0 +1,35 @@
+/** Official portable host distribution. Independent from any host checkout. */
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { createHash } = require('node:crypto');
+const hash = value => createHash('sha256').update(value).digest('hex');
+function buildHostPack(root) {
+  const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'));
+  const ids = fs.readdirSync(root).filter(id => /^[a-z0-9-]+$/.test(id) && fs.existsSync(path.join(root, id, 'SKILL.md'))).sort();
+  const resources = {};
+  const files = {};
+  function walk(dir, relative) {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0)) {
+      if (entry.name.startsWith('.') || ['node_modules', 'dist', '__pycache__'].includes(entry.name)) continue;
+      const rel = `${relative}/${entry.name}`;
+      if (entry.isSymbolicLink()) throw new Error(`Symlink in host pack: ${rel}`);
+      if (entry.isDirectory()) walk(path.join(dir, entry.name), rel);
+      else if (entry.isFile() && /\.(md|py|json|yaml|yml|css|html|txt|js|mjs|mts)$/i.test(entry.name)) {
+        const content = fs.readFileSync(path.join(dir, entry.name), 'utf8');
+        resources[rel] = content; files[rel] = hash(content);
+      }
+    }
+  }
+  for (const id of [...ids, 'runtime']) walk(path.join(root, id), id);
+  const skills = ids.map(id => {
+    const raw = resources[`${id}/SKILL.md`];
+    const meta = JSON.parse(fs.readFileSync(path.join(root, id, 'package.json'), 'utf8'));
+    if (!/^---\r?\n/u.test(raw) || !/^name:\s*/mu.test(raw)) throw new Error(`Invalid skill: ${id}`);
+    return { id, name: id, description: meta.description || id, version: meta.version, packId: 'topmind-writing-skills' };
+  });
+  const manifest = { schema_version: 1, name: 'topmind-writing-skills', version: pkg.version, license: pkg.license, repository: pkg.repository, entry_files: ids.map(id => `${id}/SKILL.md`), files, runtime: { api: 1, entry: 'runtime/article-renderer.mjs', update: 'host-release' } };
+  const digest = hash(JSON.stringify(manifest));
+  return { manifest: { ...manifest, digest }, snapshot: { id: manifest.name, version: pkg.version, source: 'https://github.com/topmindspace/topmind-writing-skills', license: pkg.license, digest, skills, resources } };
+}
+module.exports = { buildHostPack };

package/lib/zip.cjs

@@ -0,0 +1,18 @@
+/** Deterministic portable ZIP writer. Fixed DOS timestamp; no host permissions or paths. */
+const { deflateRawSync } = require('node:zlib');
+const table = Array.from({ length: 256 }, (_, n) => { let c = n; for (let i = 0; i < 8; i++) c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1; return c >>> 0; });
+const crc32 = data => { let crc = 0xffffffff; for (const byte of data) crc = table[(crc ^ byte) & 255] ^ (crc >>> 8); return (crc ^ 0xffffffff) >>> 0; };
+function createZip(files) {
+  const locals = [], directory = []; let offset = 0;
+  for (const [name, value] of Object.entries(files).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)) {
+    const filename = Buffer.from(name); const data = Buffer.from(value); const compressed = deflateRawSync(data); const crc = crc32(data);
+    const local = Buffer.alloc(30); local.writeUInt32LE(0x04034b50); local.writeUInt16LE(20, 4); local.writeUInt16LE(0x800, 6); local.writeUInt16LE(8, 8); local.writeUInt16LE(33, 12); local.writeUInt32LE(crc, 14); local.writeUInt32LE(compressed.length, 18); local.writeUInt32LE(data.length, 22); local.writeUInt16LE(filename.length, 26);
+    locals.push(local, filename, compressed);
+    const central = Buffer.alloc(46); central.writeUInt32LE(0x02014b50); central.writeUInt16LE(20, 4); central.writeUInt16LE(20, 6); central.writeUInt16LE(0x800, 8); central.writeUInt16LE(8, 10); central.writeUInt16LE(33, 14); central.writeUInt32LE(crc, 16); central.writeUInt32LE(compressed.length, 20); central.writeUInt32LE(data.length, 24); central.writeUInt16LE(filename.length, 28); central.writeUInt32LE(offset, 42);
+    directory.push(central, filename); offset += local.length + filename.length + compressed.length;
+  }
+  const bytes = Buffer.concat(directory), end = Buffer.alloc(22); const count = Object.keys(files).length;
+  end.writeUInt32LE(0x06054b50); end.writeUInt16LE(count, 8); end.writeUInt16LE(count, 10); end.writeUInt32LE(bytes.length, 12); end.writeUInt32LE(offset, 16);
+  return Buffer.concat([...locals, bytes, end]);
+}
+module.exports = { createZip };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topmindspace/topmind-writing-skills",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "description": "TopMindSpace 写作技能合集 — 通过 npm / npx 安装技能（公众号长文、X 长文、干货短文、X 引流短帖、改稿与质检、封面图、长图海报）。只出稿与发布包，不代发。",
   "license": "MIT",
   "author": "TopMindspace",
@@ -30,6 +30,8 @@
   },
   "files": [
     "bin",
+    "lib",
+    "runtime",
     "README.md",
     "README.en.md",
     "LICENSE",
@@ -78,7 +80,9 @@
     "check": "node scripts/run_skill_gates.js check",
     "privacy": "python3 scripts/ci_privacy_scan.py",
     "audit": "node scripts/run_skill_gates.js audit",
-    "package:skill": "node scripts/run_skill_gates.js package"
+    "package:skill": "node scripts/run_skill_gates.js package",
+    "test": "node --test tests/*.test.mjs",
+    "host:pack": "node scripts/build-host-pack.cjs"
   },
   "publishConfig": {
     "access": "public"

package/runtime/article-renderer.d.mts

@@ -0,0 +1,9 @@
+export type WritingPlatform = 'wechat' | 'x' | 'text';
+export type WritingTheme = 'minimal-ink' | 'tech-blue' | 'newsprint' | 'graphite';
+export const WRITING_THEMES: Record<WritingTheme, { ink: string; accent: string; paper: string; muted: string }>;
+export const WRITING_ACTIONS: ReadonlyArray<{ id: string; zh: string; en: string; prompt: string; promptEn: string }>;
+export function stripFrontmatter(value: string): string;
+export interface ArticleDelivery { platform: WritingPlatform; theme: WritingTheme; html: string; body: string; text: string; checklist: string; images: Array<{ source: string; alt: string; status: string }>; diagnostics: Array<{ code: string; source?: string }> }
+export function renderArticle(input: { markdown: string; platform?: WritingPlatform; theme?: WritingTheme; title?: string; images?: Record<string, string> }): ArticleDelivery;
+export function resolveArticleImage(sourcePath: string, reference: string): string;
+export function prepareArticle(input: { sourcePath: string; markdown: string; platform?: WritingPlatform; theme?: WritingTheme; title?: string }, readImage: (relative: string) => Promise<string>): Promise<ArticleDelivery>;

package/runtime/article-renderer.mjs

@@ -0,0 +1,130 @@
+/** Portable host renderer. Canonical source: topmind-writing-skills. No IO or executable HTML. */
+export const WRITING_THEMES = Object.freeze({
+  'minimal-ink': { ink: '#252525', accent: '#955247', paper: '#ffffff', muted: '#666666' },
+  'tech-blue': { ink: '#172033', accent: '#0369a1', paper: '#ffffff', muted: '#536174' },
+  newsprint: { ink: '#24211c', accent: '#80502a', paper: '#fffdf8', muted: '#655f55' },
+  graphite: { ink: '#222222', accent: '#444444', paper: '#ffffff', muted: '#666666' },
+});
+export const WRITING_ACTIONS = Object.freeze([
+  { id: 'topmind-revise', zh: '改稿', en: 'Revise', prompt: '按 topmind-revise 审校当前内容，保留事实、数字、归因和作者原意。' },
+  { id: 'topmind-format', zh: '只排版', en: 'Format', prompt: '按 topmind-format 只调整当前内容的排版，不改写文字。' },
+  { id: 'topmind-briefs', zh: '短文', en: 'Brief', prompt: '按 topmind-briefs，基于当前材料写一篇信息清楚的短文。' },
+  { id: 'topmind-viral-posts', zh: '互动短帖', en: 'Social post', prompt: '按 topmind-viral-posts，基于当前材料写一条互动短帖。' },
+  { id: 'topmind-wechat-post', zh: '公众号', en: 'WeChat', prompt: '按 topmind-wechat-post，基于当前材料完成公众号稿，只出稿不代发。' },
+  { id: 'topmind-x-article', zh: 'X 长文', en: 'X Article', prompt: '按 topmind-x-article，基于当前材料完成 X 长文，只出稿不代发。' },
+  { id: 'topmind-cover', zh: '封面', en: 'Cover', prompt: '按 topmind-cover，为当前文章制作封面；先核对实际生图能力，缺少工具时说明。' },
+  { id: 'topmind-poster', zh: '长图', en: 'Poster', prompt: '按 topmind-poster，为当前内容制作信息长图；先核对实际渲染能力，缺少工具时保留 HTML 并说明。' },
+].map(action => ({ ...action, promptEn: `Use ${action.id} for the current document. Preserve source language, facts and author intent. Use only available tools; explain missing image or rendering capabilities. Draft and deliver only; do not publish.` })));
+const esc = value => String(value).replace(/[&<>"']/gu, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
+export function stripFrontmatter(value) {
+  return String(value || '').replace(/^\uFEFF/u, '').replace(/\r\n?/gu, '\n').replace(/^---\n[\s\S]*?\n---(?:\n|$)/u, '');
+}
+export function resolveArticleImage(sourcePath, reference) {
+  if (!sourcePath || /[\\:]|^\//u.test(sourcePath) || /[\\:]|^\//u.test(reference)) throw new Error('Invalid workspace image path');
+  const parts = sourcePath.split('/').slice(0, -1);
+  for (const segment of reference.split('/')) {
+    if (!segment || segment === '.') continue;
+    if (segment === '..') { if (!parts.length) throw new Error('Image escapes workspace'); parts.pop(); }
+    else parts.push(segment);
+  }
+  return parts.join('/');
+}
+export async function prepareArticle(input, readImage) {
+  const images = Object.create(null);
+  for (const match of String(input.markdown).matchAll(/!\[[^\]]*\]\(([^\s)]+)(?:\s+"[^"]*")?\)/gu)) {
+    const source = match[1];
+    if (/^(https?:|data:)/iu.test(source) || Object.hasOwn(images, source)) continue;
+    try { images[source] = await readImage(resolveArticleImage(input.sourcePath, source)); }
+    catch { images[source] = ''; }
+  }
+  return renderArticle({ ...input, images });
+}
+function safeUrl(value, image = false) {
+  const url = String(value || '').trim();
+  if (/[\u0000-\u0020\u007f<>"']/u.test(url)) return null;
+  if (/^https?:\/\//iu.test(url)) return url;
+  if (!image && /^(mailto:|#)/iu.test(url)) return url;
+  if (image && /^data:image\/(png|jpe?g|gif|webp);base64,[a-z0-9+/=]+$/iu.test(url)) return url;
+  return null;
+}
+/** Render Markdown without interpreting raw HTML. Local image bytes must be supplied by the host. */
+export function renderArticle({ markdown = '', platform = 'wechat', theme = 'minimal-ink', title = '', images = {} } = {}) {
+  if (!['wechat', 'x', 'text'].includes(platform)) throw new Error('Unsupported delivery format');
+  if (!Object.hasOwn(WRITING_THEMES, theme)) throw new Error('Unknown writing theme');
+  const palette = WRITING_THEMES[theme];
+  const source = stripFrontmatter(markdown);
+  const diagnostics = [];
+  const imageList = [];
+  const footnotes = [];
+  const inline = raw => {
+    const stash = [];
+    const token = html => { stash.push(html); return `\u0001${stash.length - 1}\u0002`; };
+    // Remove control characters so a source cannot impersonate a stash token.
+    let value = String(raw).replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f]/gu, '');
+    value = value.replace(/`([^`]+)`/gu, (_, code) => token(`<code style="font-family:monospace;background:#f1f1f1;padding:2px 4px;">${esc(code)}</code>`));
+    value = value.replace(/!\[([^\]]*)\]\(([^\s)]+)(?:\s+"[^"]*")?\)/gu, (_, alt, src) => {
+      const supplied = Object.hasOwn(images, src) ? images[src] : src;
+      const url = safeUrl(supplied, true);
+      const status = !url ? 'missing' : /^data:/iu.test(url) ? 'embedded' : 'remote';
+      imageList.push({ source: src, alt, status });
+      if (!url) { diagnostics.push({ code: 'image-unavailable', source: src }); return token(`<span style="color:${palette.muted};">[${esc(alt || src)}]</span>`); }
+      return token(`<img src="${esc(url)}" alt="${esc(alt)}" style="max-width:100%;height:auto;display:block;margin:18px auto;" />`);
+    });
+    value = value.replace(/\[([^\]]+)\]\(([^\s)]+)(?:\s+"[^"]*")?\)/gu, (_, label, rawUrl) => {
+      const url = safeUrl(rawUrl);
+      if (!url) { diagnostics.push({ code: 'unsafe-link' }); return token(esc(label)); }
+      if (platform === 'wechat' && /^https?:/iu.test(url)) {
+        footnotes.push(url);
+        return token(`${esc(label)}<sup>[${footnotes.length}]</sup>`);
+      }
+      return token(`<a href="${esc(url)}" style="color:${palette.accent};">${esc(label)}</a>`);
+    });
+    value = esc(value).replace(/\*\*([^*]+)\*\*/gu, '<strong>$1</strong>').replace(/__([^_]+)__/gu, '<strong>$1</strong>').replace(/(?<!\*)\*([^*]+)\*(?!\*)/gu, '<em>$1</em>').replace(/~~([^~]+)~~/gu, '<s>$1</s>');
+    return value.replace(/\u0001(\d+)\u0002/gu, (_, n) => stash[Number(n)] || '');
+  };
+  const lines = source.split('\n');
+  const out = [];
+  let paragraph = [];
+  const flush = () => { if (paragraph.length) out.push(`<p style="margin:0 0 18px;line-height:1.85;">${inline(paragraph.join('\n')).replace(/\n/gu, '<br />')}</p>`); paragraph = []; };
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    if (/^\s*```/u.test(line)) {
+      flush(); const language = line.trim().slice(3); const code = [];
+      while (++i < lines.length && !/^\s*```/u.test(lines[i])) code.push(lines[i]);
+      if (i === lines.length) diagnostics.push({ code: 'unclosed-code-fence' });
+      out.push(`<section style="font-family:monospace;white-space:pre-wrap;overflow-wrap:anywhere;background:#f4f4f4;padding:14px;margin:18px 0;">${esc(code.join('\n'))}</section>`);
+      if (language === 'mermaid') diagnostics.push({ code: 'diagram-source-only' });
+    } else if (/^#{1,6}\s/u.test(line)) {
+      flush(); const [, marks, text] = line.match(/^(#{1,6})\s+(.*)$/u);
+      out.push(`<h${Math.max(2, marks.length)} style="font-size:${marks.length < 3 ? 22 : 18}px;line-height:1.5;margin:28px 0 14px;color:${palette.accent};">${inline(text)}</h${Math.max(2, marks.length)}>`);
+    } else if (/^\s*([-*_])(?:\s*\1){2,}\s*$/u.test(line)) {
+      flush(); out.push('<hr style="border:0;border-top:1px solid #dddddd;margin:26px 0;" />');
+    } else if (/^\s*>/u.test(line)) {
+      flush(); const quote = [line.replace(/^\s*>\s?/u, '')];
+      while (i + 1 < lines.length && /^\s*>/u.test(lines[i + 1])) quote.push(lines[++i].replace(/^\s*>\s?/u, ''));
+      out.push(`<blockquote style="margin:18px 0;padding:10px 16px;border-left:3px solid ${palette.accent};color:${palette.muted};">${inline(quote.join('\n')).replace(/\n/gu, '<br />')}</blockquote>`);
+    } else if (/^\s*(?:[-+*]|\d+[.)])\s+/u.test(line)) {
+      flush(); const ordered = /^\s*\d/u.test(line); const tag = ordered ? 'ol' : 'ul'; const items = [line];
+      const re = ordered ? /^\s*\d+[.)]\s+/u : /^\s*[-+*]\s+/u;
+      while (i + 1 < lines.length && re.test(lines[i + 1])) items.push(lines[++i]);
+      out.push(`<${tag} style="padding-left:24px;margin:16px 0;">${items.map(item => `<li style="margin:8px 0;line-height:1.8;">${inline(item.replace(re, ''))}</li>`).join('')}</${tag}>`);
+    } else if (line.includes('|') && i + 1 < lines.length && /^\s*\|?\s*:?-{3,}/u.test(lines[i + 1])) {
+      flush(); const cells = row => row.trim().replace(/^\||\|$/gu, '').split('|').map(c => c.trim());
+      const head = cells(line); i++; const rows = [];
+      while (i + 1 < lines.length && lines[i + 1].trim() && lines[i + 1].includes('|')) rows.push(cells(lines[++i]));
+      const row = (values, tag) => `<tr>${values.map(cell => `<${tag} style="border:1px solid #dddddd;padding:8px;text-align:left;">${inline(cell)}</${tag}>`).join('')}</tr>`;
+      out.push(`<table style="border-collapse:collapse;width:100%;font-size:14px;margin:20px 0;"><thead>${row(head, 'th')}</thead><tbody>${rows.map(r => row(r, 'td')).join('')}</tbody></table>`);
+      if (platform === 'x') diagnostics.push({ code: 'table-paste-check' });
+    } else if (/^:::/u.test(line)) {
+      flush(); diagnostics.push({ code: 'container-as-text' }); paragraph.push(line);
+    } else if (!line.trim()) flush();
+    else paragraph.push(line);
+  }
+  flush();
+  if (footnotes.length) out.push(`<section style="font-size:13px;color:${palette.muted};margin-top:28px;">${footnotes.map((url, i) => `<p>[${i + 1}] ${esc(url)}</p>`).join('')}</section>`);
+  const text = source.trim();
+  const body = `<section style="color:${palette.ink};background:${palette.paper};font-family:-apple-system,BlinkMacSystemFont,'PingFang SC',sans-serif;font-size:16px;line-height:1.85;overflow-wrap:anywhere;">${out.join('\n')}</section>`;
+  const html = `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src data: https:; style-src 'unsafe-inline';"><title>${esc(title || '文章预览')}</title></head><body style="max-width:720px;margin:0 auto;padding:24px;">${body}</body></html>`;
+  const checklist = ['# 图片交付清单', '', '按正文出现顺序核对；内嵌不代表目标平台已托管或发布。', '', ...imageList.map((item, i) => `${i + 1}. ${item.status} · ${item.source.replace(/[\r\n]/gu, ' ')}`)].join('\n');
+  return { platform, theme, html, body, text, images: imageList, diagnostics, checklist };
+}

package/runtime/host-guide.md

@@ -0,0 +1,7 @@
+# Topmind 内置写作能力
+
+这是独立写作包的宿主快照。正文和参考按技能来源读取，不混用其他包的同名资源。
+
+宿主提供 `render_article`：从工作区源稿生成公众号、X 长文或文本的确定性排版结果；需要持久交付时再使用宿主文件写入工具，遵守原有写闸。也可在“写作与交付”界面预览、复制和导出。不要求用户照抄 Python 命令，不把脚本文本可读当成可执行权限。
+
+排版不改原稿；主题、表格粘贴、缺图、扩展容器和图表限制按工具真实诊断说明。封面、海报、PNG、外部检索和发布依实际工具能力执行，不虚构成功。旧文章直接使用，不为兼容批量改名。审校基于事实与作者意图，不以措辞分数定稿。

package/topmind-wechat-post/SKILL.md

@@ -3,7 +3,7 @@ name: topmind-wechat-post
 description: "创作、整理和排版公众号文章；从选题或底稿到 Markdown，按需导出内联 HTML、预览与上传清单。支持已有稿件直接排版；公众号短文用 topmind-briefs，独立改稿用 topmind-revise。"
 license: MIT
 metadata:
-  version: "0.3.21"
+  version: "0.3.22"
   action_category: "write"
   triggers: "公众号, 写公众号, 微信排版, 公众号排版, 公众号稿, 公众号长文, 排版这篇文章, 定稿, 发公众号, 公众号交付, wechat, mp format, 写公众号文章, 公众号排版定稿, 公众号发布清单"
   author: "TopMindSpace"

package/topmind-wechat-post/package.json

@@ -1,6 +1,6 @@
 {
   "name": "topmind-wechat-post",
-  "version": "0.3.21",
+  "version": "0.3.22",
   "private": true,
   "description": "公众号文章全生命周期：交付包、审校改写、质量三关、状态同步、微信内联排版与发布清单。",
   "license": "MIT",

package/topmind-wechat-post/references/workspace.md

@@ -2,6 +2,14 @@
 
 本包默认一篇长文一份源稿，用户已有目录与流程优先；纯聊天写稿无需生成全套文件夹。
 
+## Topmind 宿主适配
+
+写作包保持独立仓库、版本和发布。Topmind Desktop 与 Obsidian 插件内置经验证的快照，日常从当前笔记、选区或自然语言进入，不要求先安装或选择技能。外部 Agent 继续使用本包 CLI 和脚本。
+
+宿主公布的真实能力优先于脚本示例：内置 HTML/文本排版使用宿主交付入口，不要求用户安装 Python；脚本可读不代表允许执行 shell。封面、生图、外部检索和 PNG 必须核对实际工具，缺少能力时说明具体未完成项。高级脚本与宿主排版支持范围不同，遇到扩展容器、图表或表格粘贴限制须保留内容并说明。
+
+预览、复制和导出使用同一份源稿及主题。源稿或图片改变后重新生成；预览不改写原稿，复制不代表发布成功。旧文章目录和 `公众号稿.md` 可原位使用，不为工具兼容批量改名。
+
 常用结构是 `<文章名>/<文章名>.md` 配 `images/`、`cover/`、`素材来源.md`、`raw/`、`out/`，复杂稿可用 `骨架.md`，外来参考可放 `参考/`。从源稿导出需要的平台版本到 `out/`，修改后重新派生，减少多稿漂移。
 
 路径从 CLI 参数、已配置环境和实际目录解析，不猜个人路径。`article_scaffold.py --base` 可明确位置；公众号 `new-article.py` 的 `--base`、`TOPMIND_WECHAT_BASE`、`TOPMIND_WORKSPACE` 解析见平台操作参考。工具采用的文件名、frontmatter 和图片顺序协议在采用该工具时核对，不当作所有写作任务的先决条件。

package/topmind-x-article/SKILL.md

@@ -3,7 +3,7 @@ name: topmind-x-article
 description: "创作或整理 X Article 长文，按需导出可复制 HTML、纯文本、封面与发布清单。保留单源稿与图文顺序，由用户在编辑器发布。普通短帖用 topmind-briefs 或 topmind-viral-posts，纯格式化用 topmind-format。"
 license: MIT
 metadata:
-  version: "0.4.26"
+  version: "0.4.27"
   action_category: "write"
   triggers: "X 长文, 发 X 文章, 写 X 文章, X article, 长文发 X, X 发长文, X 文章排版, 转纯文本, X 纯文本, X发布稿, 发 article, 一键复制, 写 X 长文, X 长文发布, 推特长文, twitter 长文, Twitter Article"
   author: "TopMindSpace"

package/topmind-x-article/package.json

@@ -1,6 +1,6 @@
 {
   "name": "topmind-x-article",
-  "version": "0.4.26",
+  "version": "0.4.27",
   "private": true,
   "description": "X 长文（Article）一键发布：Markdown 原稿转可直接粘贴的纯文本 + 封面图 + 发布清单。",
   "license": "MIT",

package/topmind-x-article/references/workspace.md

@@ -2,6 +2,14 @@
 
 本包默认一篇长文一份源稿，用户已有目录与流程优先；纯聊天写稿无需生成全套文件夹。
 
+## Topmind 宿主适配
+
+写作包保持独立仓库、版本和发布。Topmind Desktop 与 Obsidian 插件内置经验证的快照，日常从当前笔记、选区或自然语言进入，不要求先安装或选择技能。外部 Agent 继续使用本包 CLI 和脚本。
+
+宿主公布的真实能力优先于脚本示例：内置 HTML/文本排版使用宿主交付入口，不要求用户安装 Python；脚本可读不代表允许执行 shell。封面、生图、外部检索和 PNG 必须核对实际工具，缺少能力时说明具体未完成项。高级脚本与宿主排版支持范围不同，遇到扩展容器、图表或表格粘贴限制须保留内容并说明。
+
+预览、复制和导出使用同一份源稿及主题。源稿或图片改变后重新生成；预览不改写原稿，复制不代表发布成功。旧文章目录和 `公众号稿.md` 可原位使用，不为工具兼容批量改名。
+
 常用结构是 `<文章名>/<文章名>.md` 配 `images/`、`cover/`、`素材来源.md`、`raw/`、`out/`，复杂稿可用 `骨架.md`，外来参考可放 `参考/`。从源稿导出需要的平台版本到 `out/`，修改后重新派生，减少多稿漂移。
 
 路径从 CLI 参数、已配置环境和实际目录解析，不猜个人路径。`article_scaffold.py --base` 可明确位置；公众号 `new-article.py` 的 `--base`、`TOPMIND_WECHAT_BASE`、`TOPMIND_WORKSPACE` 解析见平台操作参考。工具采用的文件名、frontmatter 和图片顺序协议在采用该工具时核对，不当作所有写作任务的先决条件。