@v587d/capital-generation 2.10.2 → 2.11.1

package/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@v587d/config",
-  "version": "2.10.2",
+  "version": "2.11.1",
   "description": "自动模式的取数凭据与偏好配置行：卡片坐在 @v587d/capital-generation 插件主页的「配置」段，点这一行本身没有表单。",
   "license": "MIT",
   "type": "module",

package/lib/data-contract.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `capital:data-contract` system-prompt section: the single statement of how every Capital
+ * role obtains data. Skills declare what evidence they need; this section says where it comes
+ * from, so provider names and fetch recipes never live in skill prose.
+ * Static text — registered per role by the selected-skills row, which every skill-loading role mounts.
+ */
+export declare const DATA_CONTRACT_SECTION = "capital:data-contract";
+/** Just before the selected-skill brief (order 60). */
+export declare const DATA_CONTRACT_ORDER = 59;
+export declare function dataContractSection(): {
+    name: string;
+    order: number;
+    interpolate: false;
+    text: string;
+};

package/lib/data-contract.js

@@ -0,0 +1,26 @@
+/**
+ * `capital:data-contract` system-prompt section: the single statement of how every Capital
+ * role obtains data. Skills declare what evidence they need; this section says where it comes
+ * from, so provider names and fetch recipes never live in skill prose.
+ * Static text — registered per role by the selected-skills row, which every skill-loading role mounts.
+ */
+export const DATA_CONTRACT_SECTION = 'capital:data-contract';
+/** Just before the selected-skill brief (order 60). */
+export const DATA_CONTRACT_ORDER = 59;
+const TEXT = `# 数据边界
+
+需要数据时，先看本角色是不是取数通道的承担者：不是，就向承担它的角色提请求；是，就用本角色的工具面执行。除这两条路，不自己访问 URL、API、数据库、终端或脚本，也不用训练记忆补数字。
+
+- 结构化数据（行情、财务报表、宏观序列、持仓）→ 委派 data_collector
+- 网页、披露文件、新闻、会议材料、PDF → 委派 web_retriever
+- 已落库 Dataset 的计算、统计与出图 → 委派 data_junior
+- 你自己就是上述某一侧的承担者时，用本角色的工具面执行，不越过该面
+
+请求写清：标的或代码、证据类型（公告 / 财报 / 纪要 / 行情 / 宏观序列）、需要的字段或章节、期间与 as-of、频率、口径。"最新"必须带锚点日期。
+
+每个数字都要带出处（场所、文档名、文档日期、accession 或该次检索返回的链接）、取数路径与缺口。缺字段就点名缺哪个并停止该字段下的分析，不估算、不回填；用户粘贴的材料标 pasted by user，不因此提高置信度。
+
+skill 正文只写"要什么证据"，不写服务商、密钥、URL、下载步骤或脚本命令。`;
+export function dataContractSection() {
+    return { name: DATA_CONTRACT_SECTION, order: DATA_CONTRACT_ORDER, interpolate: false, text: TEXT };
+}

package/lib/selected-skills-entry.d.ts

@@ -1,7 +1,7 @@
 /**
- * `tools/selected-skills` row: role-scoped selected-skill catalog plus its role prompt section.
- * The row is mounted once per Capital preset (`config.role`) and registers into that Agent's
- * own scope only; it never writes to the preset standing scope or the host scope.
+ * `tools/selected-skills` row: role-scoped selected-skill catalog, the `capital:data-contract`
+ * section every skill-loading role needs, and the selected-skill brief. Mounted once per Capital
+ * preset (`config.role`) and registers into that Agent's own scope only.
  */
 import type { Context } from '@deepseek-ai/cordis';
 import { type SelectedSkillRole } from './agents/selected-skills-provider.js';

package/lib/selected-skills-entry.js

@@ -1,5 +1,6 @@
 import { registerSelectedSkills, renderSelectedSkillsBrief, SELECTED_SKILL_ENTRY_ROLES, } from './agents/selected-skills-provider.js';
 import { readCapitalConfig } from './capital-settings.js';
+import { dataContractSection } from './data-contract.js';
 export const name = 'capital-selected-skills';
 export const inject = ['systemPrompt'];
 const SECTION_NAME = 'capital:selected-skills';
@@ -17,6 +18,8 @@ export function apply(ctx, config = {}) {
     registerSelectedSkills(ctx, role, accessOf(ctx));
     let lastRenderError;
     ctx.effect(() => {
+        // Every role that can load a skill also needs the boundary that says where its data comes from.
+        const disposeContract = ctx.systemPrompt.section(dataContractSection());
         const dispose = ctx.systemPrompt.section({
             name: SECTION_NAME,
             order: SECTION_ORDER,
@@ -38,6 +41,11 @@ export function apply(ctx, config = {}) {
                 }
             },
         });
-        return typeof dispose === 'function' ? dispose : () => { };
+        return () => {
+            if (typeof dispose === 'function')
+                dispose();
+            if (typeof disposeContract === 'function')
+                disposeContract();
+        };
     }, 'capital-generation.selected-skills()');
 }

package/lib/sources/fuyao-rest.js

@@ -999,7 +999,7 @@ function endpointDefinitions() {
             name: 'get_a_share_financials_indicators',
             capability: 'financial_indicators',
             summary: '单期五类财务指标（成长/盈利/偿债/营运/现金流）',
-            description: '获取单只标的指定报告期的五类财务指标（growth/profitability/solvency/operation/cash-flow）。thscode 不接受逗号；report 格式 yyyy-1..yyyy-4（1 一季报/2 中报/3 三季报/4 年报）。返回 data.abilities[].indicators[]，每项含 index_id 与 value：value 是数据源原始数值**字符串**（保留精度与尾随小数位，不转 number），缺失为 null；百分比类指标按百分数原值表达（如 89.12000000 表示 89.12%），周转率按次、已获利息倍数按倍，展示时按 index_id 识别单位。',
+            description: '获取单只标的指定报告期的五类财务指标（growth/profitability/solvency/operation/cash-flow）。thscode 不接受逗号；report 格式 yyyy-1..yyyy-4（1 一季报/2 中报/3 三季报/4 年报）。返回 data.abilities[].indicators[]，每项含 index_id 与 value：value 是数据源原始数值**字符串**（保留精度与尾随小数位，不转 number），缺失为 null；百分比类指标按百分数原值表达（如 89.12000000 表示 89.12%），周转率按次、已获利息倍数按倍，展示时按 index_id 识别单位。⚠️ 上游返回 code=5003 表示该报告期数据尚未入库（财报披露前常见，实测 2026-3 全市场均为 5003），属数据缺口而非参数错误：**不要 force_refresh 重试**，改用更早报告期或等披露后再取。',
             path: '/api/a-share/financials/indicators',
             inputSchema: objectSchema({
                 thscode: { type: 'string', description: '单只标的完整代码（如 300033.SZ），不接受逗号' },

package/lib/web-retriever/local-fetch.d.ts

@@ -3,7 +3,7 @@
  * Known limit: DNS resolves per request but the IP is not pinned to the connection,
  * so a rebinding window remains (same trade-off as dsh-search-first).
  */
-export declare const LOCAL_FETCH_CLIENT_VERSION = "2.10.2";
+export declare const LOCAL_FETCH_CLIENT_VERSION = "2.11.1";
 export declare const LOCAL_FETCH_MAX_URL_LENGTH = 2048;
 export type LocalFetchErrorCode = 'ABORTED' | 'TIMEOUT' | 'INVALID_URL' | 'BLOCKED_URL' | 'DNS' | 'REDIRECT' | 'HTTP' | 'TOO_LARGE' | 'UNSUPPORTED_CONTENT_TYPE';
 export declare class LocalFetchError extends Error {

package/lib/web-retriever/local-fetch.js

@@ -4,7 +4,7 @@
  * so a rebinding window remains (same trade-off as dsh-search-first).
  */
 import { htmlToMarkdown, stripInvisibleText } from './html-markdown.js';
-export const LOCAL_FETCH_CLIENT_VERSION = '2.10.2';
+export const LOCAL_FETCH_CLIENT_VERSION = '2.11.1';
 export const LOCAL_FETCH_MAX_URL_LENGTH = 2048;
 export class LocalFetchError extends Error {
     code;

package/lib/web-retriever/sources.d.ts

@@ -30,6 +30,10 @@ export declare class SourceError extends Error {
     readonly code: string;
     constructor(source: SourceId, code: string, message: string);
 }
+/** Named sources return API payloads, not web pages: the 100k-char HTML cap cuts a 50-item
+ * CLS telegraph body (measured 106,106 chars) into invalid JSON. Size for JSON, not HTML. */
+export declare const SOURCE_MAX_BYTES = 1048576;
+export declare const SOURCE_MAX_CHARS = 262144;
 type Requester = ReturnType<typeof createHttpRequester>;
 /** Built per source-tool call; lazy transport, configured timeout. */
 export declare function createSourceTransport(options: LocalFetchOptions): Requester;

package/lib/web-retriever/sources.js

@@ -21,13 +21,23 @@ export class SourceError extends Error {
     }
 }
 const REQUEST_TIMEOUT_MS = 20_000;
+/** Named sources return API payloads, not web pages: the 100k-char HTML cap cuts a 50-item
+ * CLS telegraph body (measured 106,106 chars) into invalid JSON. Size for JSON, not HTML. */
+export const SOURCE_MAX_BYTES = 1_048_576;
+export const SOURCE_MAX_CHARS = 262_144;
 function createHash(algorithm) {
     const processLike = globalThis.process;
     return processLike?.getBuiltinModule?.('node:crypto')?.createHash?.(algorithm);
 }
 /** Built per source-tool call; lazy transport, configured timeout. */
 export function createSourceTransport(options) {
-    return createHttpRequester({ ...options, timeoutMs: options.timeoutMs || REQUEST_TIMEOUT_MS });
+    return createHttpRequester({
+        ...options,
+        timeoutMs: options.timeoutMs || REQUEST_TIMEOUT_MS,
+        // Never lower the JSON ceiling to the HTML setting: a truncated body cannot be parsed.
+        maxBytes: Math.max(options.maxBytes, SOURCE_MAX_BYTES),
+        maxContentChars: Math.max(options.maxContentChars, SOURCE_MAX_CHARS),
+    });
 }
 /**
  * Eastmoney shares the other sources' egress gate; throttling stays process-wide.
@@ -89,7 +99,11 @@ function asRecord(value) {
         ? value
         : undefined;
 }
-function parseJson(text, source, what) {
+function parseJson(text, source, what, truncated = false) {
+    // A truncated body always fails JSON.parse with a syntax error; name the real cause instead.
+    if (truncated) {
+        throw new SourceError(source, 'INVALID_RESPONSE', `${what} 超过本机响应体上限被截断，无法解析；请降低 limit 或缩小查询范围`);
+    }
     try {
         return JSON.parse(text);
     }
@@ -137,7 +151,7 @@ export async function clsTelegraph(transport, input) {
     };
     const query = Object.keys(params).sort().map((key) => `${key}=${params[key]}`).join('&');
     const outcome = await transport.request({ url: `${CLS_URL}?${query}&sign=${clsSign(params)}`, headers: { referer: CLS_REFERER } }, input.signal);
-    const body = asRecord(parseJson(outcome.text, 'cls', '财联社响应'));
+    const body = asRecord(parseJson(outcome.text, 'cls', '财联社响应', outcome.truncated));
     if (!body)
         throw new SourceError('cls', 'INVALID_RESPONSE', '财联社响应不是对象');
     if (body.errno !== 0) {
@@ -179,7 +193,7 @@ export async function wscnLives(transport, input) {
     if (input.cursor !== undefined)
         params.set('cursor', input.cursor);
     const outcome = await transport.request({ url: `${WSCN_URL}?${params.toString()}` }, input.signal);
-    const body = asRecord(parseJson(outcome.text, 'wscn', '华尔街见闻响应'));
+    const body = asRecord(parseJson(outcome.text, 'wscn', '华尔街见闻响应', outcome.truncated));
     if (!body)
         throw new SourceError('wscn', 'INVALID_RESPONSE', '华尔街见闻响应不是对象');
     if (body.code !== 20000) {
@@ -225,7 +239,7 @@ function formBody(fields) {
  */
 export async function cninfoIrm(transport, input) {
     const keyword = await transport.request({ url: IRM_KEYWORD_URL, method: 'POST', body: formBody({ keyWord: input.code }) }, input.signal);
-    const keywordBody = asRecord(parseJson(keyword.text, 'cninfo_irm', '互动易代码查询响应'));
+    const keywordBody = asRecord(parseJson(keyword.text, 'cninfo_irm', '互动易代码查询响应', keyword.truncated));
     const matches = Array.isArray(keywordBody?.data) ? keywordBody.data : [];
     const first = asRecord(matches[0]);
     const orgId = typeof first?.secid === 'string' ? first.secid : undefined;
@@ -243,7 +257,7 @@ export async function cninfoIrm(transport, input) {
         endDay: '',
     });
     const page = await transport.request({ url: `${IRM_QUESTION_URL}?${params.toString()}`, method: 'POST', body: '' }, input.signal);
-    const pageBody = asRecord(parseJson(page.text, 'cninfo_irm', '互动易问答响应'));
+    const pageBody = asRecord(parseJson(page.text, 'cninfo_irm', '互动易问答响应', page.truncated));
     const rows = requireRows(pageBody?.rows, 'cninfo_irm', '互动易 rows');
     const total = typeof pageBody?.total === 'number' ? pageBody.total : undefined;
     const items = [];
@@ -311,7 +325,7 @@ async function sseCompanyPage(transport, page, signal) {
     if (cached !== undefined)
         return cached;
     const outcome = await transport.request({ url: `${SSE_BASE}/allcompany.do`, method: 'POST', body: formBody({ code: '0', order: '2', areaId: '0', page: String(page) }), headers: { referer: SSE_REFERER } }, signal);
-    const body = asRecord(parseJson(outcome.text, 'sseinfo', '上证e互动公司列表响应'));
+    const body = asRecord(parseJson(outcome.text, 'sseinfo', '上证e互动公司列表响应', outcome.truncated));
     const content = typeof body?.content === 'string' ? body.content : undefined;
     if (content === undefined) {
         throw new SourceError('sseinfo', 'INVALID_RESPONSE', `上证e互动公司列表第 ${page} 页没有 content 字符串（页面结构可能已变）`);

package/lib/web-retriever/wind-client.d.ts

@@ -35,7 +35,7 @@ export interface WindCallResult {
     code?: WindErrorCode;
 }
 /** Must match `package.json` version; a test pins the two together. */
-export declare const WIND_CLIENT_VERSION = "2.10.2";
+export declare const WIND_CLIENT_VERSION = "2.11.1";
 export interface WindClient {
     callTool(toolName: string, args: Record<string, unknown>, signal?: AbortSignal): Promise<WindCallResult>;
 }

package/lib/web-retriever/wind-client.js

@@ -19,7 +19,7 @@ export const WIND_SERVER_ENDPOINTS = {
     analytics_data: 'https://mcp.wind.com.cn/vserver_analytics_data/mcp/',
 };
 /** Must match `package.json` version; a test pins the two together. */
-export const WIND_CLIENT_VERSION = '2.10.2';
+export const WIND_CLIENT_VERSION = '2.11.1';
 function errorText(error) {
     return error instanceof Error ? error.message : String(error);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@v587d/capital-generation",
-  "version": "2.10.2",
+  "version": "2.11.1",
   "description": "Capital Generation：面向中国散户的 AI 投资助手插件（自动模式 Agent Preset）",
   "icon": "assets/cg-icon.png",
   "author": "v587d",

package/selected-skills/InvestSkill/UPSTREAM.md

@@ -87,3 +87,11 @@
   取数仍受本插件的角色与工具边界约束（主 Agent 委派、原始 rows 不出工具层），skill 正文只是方法论材料。
 - Review status: 收录供使用者自行实验，不构成对任何金融方法的背书。复核前先读上面的 Catalog scope，
   确认排除项没有被人顺手加回。
+
+## 2026-10 收敛：仓内只保留 catalog 正文
+
+本仓不再保存上游全量快照。除 catalog 命中的 28 颗正文、LICENSE 与本文件之外，以下内容按 2026-10 政策**从仓里删除**（不是仅从包里排除）；重新按上面所钉 commit 覆盖快照时按本节过滤。
+
+- **非 catalog skill（6 颗）**：`chart-master`、`dcf-valuation`、`full-report`、`fundamental-analysis`、`report-generator`、`research-bundle`。
+- **上游仓库材料**：`.claude-plugin`、`.cursor`、`.github`、`.npmignore`、`ADDING-NEW-SKILLS.md`、`CHANGELOG.md`、`CI-CD-GUIDE.md`、`CLAUDE.md`、`CONTRIBUTING.md`、`DEPLOYMENTS.md`、`FAQ.md`、`GEMINI.md`、`PLATFORM-COMPATIBILITY.md`、`README-claude-code.md`、`README-cursor.md`、`README-gemini.md`、`README-ollama.md`、`README-zh-TW.md`、`README.md`、`RELEASE-QUICK-REFERENCE.md`、`RELEASE_NOTES.md`、`SECURITY.md`、`TODO.md`、`data`、`doc`、`install.sh`、`package-lock.json`、`package.json`、`plugins`、`prompts`、`qa`、`scripts`、`site`。
+- 许可与署名不受影响：`LICENSE` 原件、所钉 commit 与作者信息仍在上面各节；公开许可只要求保留版权与许可声明。

package/selected-skills/InvestSkill/plugins/us-stock-analysis/skills/10k-digest/SKILL.md

@@ -5,11 +5,18 @@ description: Deep-read a 10-K annual report and output a structured markdown dig
 
 # 10-K Report Digest
 
+## Evidence request
+
+通过宿主数据契约请求：披露文件（公告、年报或招股书，带回出处与文档日期）。
+
+缺哪个字段就点名并停止该字段下的分析；用户粘贴的材料标 `pasted by user`。
+
+
 ## ⚠️ Data Verification — Do This Before Any Analysis
 
 Before running the digest, confirm the filing details:
 
-1. **Identify the filing** — confirm ticker, fiscal year-end, and exact 10-K filing date from SEC EDGAR.
+1. **Identify the filing** — confirm ticker, fiscal year-end and exact 10-K filing date from the retrieved filing's provenance (`Source` line), not from memory.
 2. **State your source** — note where the document came from (e.g., "SEC EDGAR, FY2024 10-K filed 2025-02-05") at the top of the output.
 3. **Flag incomplete data** — if only partial sections are available, list what is missing before proceeding.
 
@@ -19,12 +26,12 @@ Before running the digest, confirm the filing details:
 
 ## 📋 Data & Sources Header — Open Every Output With It
 
-The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard documented on the [Data & Accuracy](https://yennanliu.github.io/InvestSkill/data-and-accuracy.html) page and the first thing `result-validator` looks for:
+The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard `result-validator` looks for first:
 
 ```
 Data & Sources
   As of:      <date the figures represent, e.g. 2026-06-30>
-  Source:     <primary docs — SEC EDGAR 10-K/10-Q, company IR, FRED, exchange data …>
+  Source:     <venue, document, date — as returned by retrieval>
   Retrieval:  <delegated retrieval | web/tool retrieval | pasted by user>
   Confidence: <HIGH | MEDIUM | LOW>
 ```
@@ -43,7 +50,7 @@ Everything below the surface of this file lives in `references/`. **whole, with
 file gets reported as read when it was only skimmed. The file names below are the only
 addressing this entry has.
 
-- `references/10-retrieving-the-filing.md` — 🔎 Retrieving the Filing — the Keyless EDGAR Path; How to Use; Output Document Structure
+- `references/10-retrieving-the-filing.md` — 🔎 Evidence Request and the Filing; How to Use; Output Document Structure
 - `references/11-key-metrics-table.md` — (continued) Output Document Structure; References
 - `references/12-language-mode.md` — Language Mode; File Output; Thesis Invalidation
 

package/selected-skills/InvestSkill/plugins/us-stock-analysis/skills/10k-digest/references/10-retrieving-the-filing.md

@@ -1,32 +1,41 @@
-# 🔎 Retrieving the Filing — the Keyless EDGAR Path
+# 🔎 Evidence Request and the Filing
 
-Part 1 of 3 for `10k-digest` — 🔎 Retrieving the Filing — the Keyless EDGAR Path; How to Use; Output Document Structure
+Part 1 of 3 for `10k-digest` — 🔎 Evidence Request and the Filing; How to Use; Output Document Structure
 See `SKILL.md` for what to read and when; this part is procedure, not routing.
 
-## 🔎 Retrieving the Filing — the Keyless EDGAR Path
+## 🔎 Evidence request
 
-This skill fetches nothing by itself. When the user gives only a ticker, obtain the 10-K in one of three ways and record which one in the `Data & Sources` header:
+This skill fetches nothing by itself. When the user gives only a ticker, request the filing through the host data contract and record what came back in the `Data & Sources` header:
 
-**A. Retrieval through the host (the normal path)** → `Retrieval: delegated retrieval`. In a role-split host, delegate the fetch to the agent that owns web retrieval — this step never searches from the analysis role itself. Every step is free and needs no API key:
+- **What to ask for** — the latest annual report for the ticker (10-K; a foreign private issuer files 20-F; a 10-K/A is an amendment), the fiscal year it covers, the filing date, the accession number, and the document itself: Item 1, 1A, 7, 7A, 8, 9A, 3, and Items 10–13 when incorporated by reference.
+- **What the request must carry** — ticker, fiscal year or "latest", the sections needed, and the as-of date. Ask once; do not send the retrieval role after one section at a time.
+- **What comes back** — the document plus provenance: venue, document name, filing date, accession or the link the retrieval returned. Put those in the cover block and in References. A link is evidence only when the retrieval actually returned it.
+- **Structured statement data** — when the retrieval also returns tagged statement facts, cite them as the confirmation of the figures read from Item 8, and keep the filing itself as the primary source.
 
-1. **Ticker → CIK** — `https://www.sec.gov/files/company_tickers.json`: find the entry whose `ticker` matches (write `BRK-B` for `BRK.B`) and zero-pad its `cik_str` to 10 digits.
-2. **Filings index** — `https://data.sec.gov/submissions/CIK##########.json`: inside `filings.recent` the arrays `form`, `filingDate`, `reportDate`, `accessionNumber` and `primaryDocument` are aligned by index. Take the newest row whose `form` is `10-K` (foreign private issuers file `20-F` instead; a `10-K/A` is an amendment). The top-level `fiscalYearEnd` is `MMDD`.
-3. **The document** — `https://www.sec.gov/Archives/edgar/data/<CIK without leading zeros>/<accessionNumber without dashes>/<primaryDocument>`: the complete filing as HTML (inline XBRL). The filing's index page is the same folder plus `<accessionNumber>-index.htm`; cite that URL and the accession number in the References.
-4. **Structured statement data (optional)** — `https://data.sec.gov/api/xbrl/companyfacts/CIK##########.json`: every US-GAAP fact the company has tagged, by concept and period. Use it to confirm the figures read from Item 8.
-5. **Full-text search (optional)** — `https://www.sec.gov/edgar/search/#/q=%22<phrase>%22&forms=10-K` when a filing has to be located by phrase rather than ticker.
+The retrieval role owns the mechanics (identifier lookup, filing index, document fetch, structured statement data, full-text search). This skill does not repeat them, and the analysis role never searches or downloads by itself.
 
-Send a `User-Agent` header that identifies the requester (the SEC requires it, e.g. `Name email@example.com`) and stay under 10 requests per second. Never substitute a summary site for the filing itself.
+A request brief that works:
 
-**B. Only if the host has no retrieval path at all** → `Retrieval: pasted by user`. Ask the user for the sections needed. The repository's own fetch helpers are optional, keyless, and live outside this plugin — they are never run from here.
+```
+Ticker: AAPL
+Evidence: latest annual report (10-K), fiscal year 2024
+Sections: Item 1, 1A, 7, 7A, 8, 9A, 3, Items 10–13 if incorporated
+Return: document text, venue, filing date, accession, link
+As-of: 2025-02-05
+```
+
+Substitute the ticker, fiscal year and section list; leave the return fields unchanged. If the issuer files 20-F, write "20-F" instead of "10-K" and the same fields apply. Ask for the whole filing once rather than one Item at a time: the digest compares sections against each other, and a section-by-section fetch loses the cross-references the filing relies on.
+
+**If the host has no retrieval path at all** → `Retrieval: pasted by user`. Ask for the sections needed and say which ones are missing.
 
-**C. Neither** → show the ⚠️ *Source unavailable* warning and digest only what the user provided. What is absent stays absent: no accession number, figure or date is filled in from memory.
+**If nothing comes back** → show the ⚠️ *Source unavailable* warning and digest only what the user provided. What is absent stays absent: no accession number, figure or date is filled in from memory. A summary site is never a substitute for the filing itself.
 
 ---
 
 ## How to Use
 
 ```
-# Analyze by ticker (retrieves the latest 10-K via the EDGAR path above, or asks you to paste it)
+# Analyze by ticker (requests the latest 10-K through the host data contract, or asks you to paste it)
 /10k-digest AAPL
 
 # Paste 10-K text directly
@@ -56,7 +65,7 @@ The skill produces a single markdown document with the following sections in ord
 # [Company Name] ([TICKER]) — 10-K Digest
 **Fiscal Year:** [FY20XX ending MM/DD/YYYY]
 **Filed:** [Filing date]
-**Source:** SEC EDGAR — [Direct URL to filing]
+**Source:** [venue, document, filing date, accession or link returned by retrieval]
 **Prepared:** [Today's date]
 **Language:** English | 繁體中文
 ```

package/selected-skills/InvestSkill/plugins/us-stock-analysis/skills/10k-digest/references/11-key-metrics-table.md

@@ -109,8 +109,9 @@ List all sources cited in this digest. Format:
 ```
 ## References
 
-1. **SEC EDGAR Filing** — [Company] 10-K, FY[XXXX]
-   URL: https://www.sec.gov/cgi-bin/browse-edgar?...
+1. **Annual report** — [Company] 10-K, FY[XXXX]
+   Source: [venue and document name as returned by retrieval]
+   Link: [link returned by retrieval, or "not returned"]
    Filed: [Date] | Accession No.: [XXXXXXXXXX-XX-XXXXXX]
 
 2. **Item 1 — Business** (pp. X–X of filing)

package/selected-skills/InvestSkill/plugins/us-stock-analysis/skills/bear-case/SKILL.md

@@ -5,6 +5,13 @@ description: Build the strongest possible bear case against a stock — a delibe
 
 # Bear Case (Bearish Investor)
 
+## Evidence request
+
+通过宿主数据契约请求：披露文件（公告、年报或招股书，带回出处与文档日期）、行情序列（复权口径与 as-of）。
+
+缺哪个字段就点名并停止该字段下的分析；用户粘贴的材料标 `pasted by user`。
+
+
 ## ⚠️ Data Verification — Do This Before Any Analysis
 
 Before running any analysis, always retrieve the latest market data for the ticker:
@@ -22,12 +29,12 @@ Never substitute a remembered value for a retrieved one. Getting the number is t
 
 ## 📋 Data & Sources Header — Open Every Output With It
 
-The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard documented on the [Data & Accuracy](https://yennanliu.github.io/InvestSkill/data-and-accuracy.html) page and the first thing `result-validator` looks for:
+The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard `result-validator` looks for first:
 
 ```
 Data & Sources
   As of:      <date the figures represent, e.g. 2026-06-30>
-  Source:     <primary docs — SEC EDGAR 10-K/10-Q, company IR, FRED, exchange data …>
+  Source:     <venue, document, date — as returned by retrieval>
   Retrieval:  <delegated retrieval | web/tool retrieval | pasted by user>
   Confidence: <HIGH | MEDIUM | LOW>
 ```

package/selected-skills/InvestSkill/plugins/us-stock-analysis/skills/catalyst-calendar/SKILL.md

@@ -5,6 +5,13 @@ description: Forward-looking catalyst calendar identifying upcoming events and t
 
 # Catalyst Calendar
 
+## Evidence request
+
+通过宿主数据契约请求：披露文件（公告、年报或招股书，带回出处与文档日期）、宏观序列（数值、期间与发布日期）。
+
+缺哪个字段就点名并停止该字段下的分析；用户粘贴的材料标 `pasted by user`。
+
+
 ## ⚠️ Data Verification — Do This Before Any Analysis
 
 Before running any analysis, always retrieve the latest market data for the ticker:
@@ -22,12 +29,12 @@ Never substitute a remembered value for a retrieved one. Getting the number is t
 
 ## 📋 Data & Sources Header — Open Every Output With It
 
-The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard documented on the [Data & Accuracy](https://yennanliu.github.io/InvestSkill/data-and-accuracy.html) page and the first thing `result-validator` looks for:
+The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard `result-validator` looks for first:
 
 ```
 Data & Sources
   As of:      <date the figures represent, e.g. 2026-06-30>
-  Source:     <primary docs — SEC EDGAR 10-K/10-Q, company IR, FRED, exchange data …>
+  Source:     <venue, document, date — as returned by retrieval>
   Retrieval:  <delegated retrieval | web/tool retrieval | pasted by user>
   Confidence: <HIGH | MEDIUM | LOW>
 ```

package/selected-skills/InvestSkill/plugins/us-stock-analysis/skills/competitor-analysis/SKILL.md

@@ -5,6 +5,13 @@ description: Deep competitive moat analysis, market position assessment, and ind
 
 # Competitor Analysis
 
+## Evidence request
+
+通过宿主数据契约请求：同业可比数据（口径与期间一致）、财务报表（三表与附注，注明期间与 as-of）。
+
+缺哪个字段就点名并停止该字段下的分析；用户粘贴的材料标 `pasted by user`。
+
+
 ## ⚠️ Data Verification — Do This Before Any Analysis
 
 Before running any analysis, always retrieve the latest market data for the ticker:
@@ -22,12 +29,12 @@ Never substitute a remembered value for a retrieved one. Getting the number is t
 
 ## 📋 Data & Sources Header — Open Every Output With It
 
-The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard documented on the [Data & Accuracy](https://yennanliu.github.io/InvestSkill/data-and-accuracy.html) page and the first thing `result-validator` looks for:
+The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard `result-validator` looks for first:
 
 ```
 Data & Sources
   As of:      <date the figures represent, e.g. 2026-06-30>
-  Source:     <primary docs — SEC EDGAR 10-K/10-Q, company IR, FRED, exchange data …>
+  Source:     <venue, document, date — as returned by retrieval>
   Retrieval:  <delegated retrieval | web/tool retrieval | pasted by user>
   Confidence: <HIGH | MEDIUM | LOW>
 ```

package/selected-skills/InvestSkill/plugins/us-stock-analysis/skills/competitor-analysis/references/13-input-formats.md

@@ -18,7 +18,7 @@ See `SKILL.md` for what to read and when; this part is procedure, not routing.
 # Moat analysis only (faster, focused output)
 /competitor-analysis GOOGL --moat-only
 
-# Full analysis with visual output for /report-generator
+# Full analysis with chart-ready tables for the host chart channel
 /competitor-analysis AMZN --visual
 ```
 
@@ -83,7 +83,7 @@ Provide a comprehensive competitive analysis report with:
 - Porter's Five Forces radar chart data
 - Competitive benchmarking grouped bar chart data
 - Moat score components horizontal bar chart data
-- Chart specifications for HTML report generation via `/report-generator`
+- Chart specifications the host chart channel can render (this plugin exports no HTML)
 
 ## Standard Signal Output
 

package/selected-skills/InvestSkill/plugins/us-stock-analysis/skills/dividend-analysis/SKILL.md

@@ -5,6 +5,13 @@ description: "Comprehensive capital allocation analysis: dividends, buybacks, M&
 
 # Capital Allocation Analysis (Dividend, Buyback, M&A & FCF Deployment)
 
+## Evidence request
+
+通过宿主数据契约请求：财务报表（三表与附注，注明期间与 as-of）、行情序列（复权口径与 as-of）。
+
+缺哪个字段就点名并停止该字段下的分析；用户粘贴的材料标 `pasted by user`。
+
+
 ## ⚠️ Data Verification — Do This Before Any Analysis
 
 Before running any analysis, always retrieve the latest market data for the ticker:
@@ -22,12 +29,12 @@ Never substitute a remembered value for a retrieved one. Getting the number is t
 
 ## 📋 Data & Sources Header — Open Every Output With It
 
-The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard documented on the [Data & Accuracy](https://yennanliu.github.io/InvestSkill/data-and-accuracy.html) page and the first thing `result-validator` looks for:
+The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard `result-validator` looks for first:
 
 ```
 Data & Sources
   As of:      <date the figures represent, e.g. 2026-06-30>
-  Source:     <primary docs — SEC EDGAR 10-K/10-Q, company IR, FRED, exchange data …>
+  Source:     <venue, document, date — as returned by retrieval>
   Retrieval:  <delegated retrieval | web/tool retrieval | pasted by user>
   Confidence: <HIGH | MEDIUM | LOW>
 ```

package/selected-skills/InvestSkill/plugins/us-stock-analysis/skills/dividend-analysis/references/13-fcf-deployment-scorecard.md

@@ -85,27 +85,19 @@ Score    Interpretation
 
 ## Data Sources
 
-**Primary Financials**
-- SEC filings (10-K / 10-Q): FCF, net income, dividends paid (cash flow statement), share repurchase disclosures
-- Company investor relations pages: dividend history, buyback program announcements, earnings call transcripts
-
-**Dividend Research Platforms**
-- **Simply Safe Dividends**: Dividend Safety Scores, comprehensive dividend data (premium)
-- **Dividend.com**: Dividend yield, history, DRIP calculators
-- **DRIP Investing Resource Center (dripinvesting.org)**: Aristocrats/Kings lists
-- **Seeking Alpha Dividends**: Analyst commentary on dividend sustainability
-- **S&P Global**: Official Dividend Aristocrats and Kings lists
-
-**Capital Allocation Research**
-- **Compustat / FactSet**: Multi-year buyback and M&A data
-- **Bloomberg**: Credit ratings, bond spreads, covenant disclosures
-- **Morningstar**: Capital allocation ratings, M&A track record, stewardship grade
-- **GuruFocus**: FCF analysis, buyback history, insider ownership
-
-**Screening Tools**
-- Finviz screener: Filter by dividend yield, payout ratio, buyback yield
-- Morningstar: Capital Allocation rating (Exemplary / Standard / Poor)
-- GuruFocus: Capital allocation and management quality scores
+## Evidence to request
+
+Ask the host data contract for the evidence behind the scorecard, not for a vendor list:
+
+- **Financial statements** — free cash flow, net income, dividends paid, and share repurchases, each with the period and the accounting basis it uses
+- **Issuer disclosures** — dividend history, a buyback programme announcement, and the earnings-call material that explains a change in payout policy
+- **Payout classification** — whether the name appears on a published dividend-growth index, and which index and vintage that claim comes from
+- **Capital-allocation evidence** — credit ratings, bond spreads, covenant terms, and buyback / M&A history, each with its as-of date
+- **Screening thresholds** — dividend yield, payout ratio and buyback yield computed from the returned statements, not copied from a third-party screen
+
+If a figure exists only on an analyst commentary page, label it secondary and keep it out of the primary ratios.
+
+Two habits keep the scorecard honest. First, compute every ratio from the same statement set and the same period; a payout ratio built from one year's dividend and another year's FCF is not a ratio. Second, when the company funds the dividend with debt or asset sales, say so next to the coverage figure — the scorecard measures how the cash was deployed, not just whether the payment arrived.
 
 ## Input Formats
 

package/selected-skills/InvestSkill/plugins/us-stock-analysis/skills/earnings-call-analysis/SKILL.md

@@ -5,6 +5,13 @@ description: Analyze earnings call transcripts for sentiment, key themes, and ma
 
 # Earnings Call Analysis
 
+## Evidence request
+
+通过宿主数据契约请求：电话会纪要（正文与问答，带回日期）。
+
+缺哪个字段就点名并停止该字段下的分析；用户粘贴的材料标 `pasted by user`。
+
+
 ## ⚠️ Data Verification — Do This Before Any Analysis
 
 Before running any analysis, always retrieve the latest market data for the ticker:
@@ -22,12 +29,12 @@ Never substitute a remembered value for a retrieved one. Getting the number is t
 
 ## 📋 Data & Sources Header — Open Every Output With It
 
-The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard documented on the [Data & Accuracy](https://yennanliu.github.io/InvestSkill/data-and-accuracy.html) page and the first thing `result-validator` looks for:
+The first thing in the output is this provenance block, filled in — never left as placeholders. It is the standard `result-validator` looks for first:
 
 ```
 Data & Sources
   As of:      <date the figures represent, e.g. 2026-06-30>
-  Source:     <primary docs — SEC EDGAR 10-K/10-Q, company IR, FRED, exchange data …>
+  Source:     <venue, document, date — as returned by retrieval>
   Retrieval:  <delegated retrieval | web/tool retrieval | pasted by user>
   Confidence: <HIGH | MEDIUM | LOW>
 ```