@xdxer/dingtalk-agent 0.1.4-beta.12 → 0.1.4-beta.14

package/dist/src/skills.js.map

@@ -1 +1 @@
-{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/skills.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,0CAA0C;AAE1C,OAAO,EACL,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EACjF,YAAY,EAAE,MAAM,EAAE,aAAa,GACpC,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACtE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAEtD,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxD,MAAM,cAAc,GAAG,8BAA8B,CAAA;AAkBrD,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,OAAe,EACf,OAAiB,EACjB,WAAmB;IAEnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAC5D,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAA;QACjD,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1C,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACtD,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE5C,MAAM,OAAO,GAAyB,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAE,CAAA;IACvB,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAA;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;QAC1C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAA;QAErF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAA;QAC9E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAA;QACjF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEf,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACxD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAA;QAC3E,CAAC,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAA;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;YAClC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC5C,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACzB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;YACvC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;YAC/B,UAAU,EAAE,QAAQ,CAAC,KAAK;YAC1B,YAAY,EAAE,kBAAkB,IAAI,WAAW;YAC/C,IAAI;YACJ,KAAK,EAAE,YAAY,CAAC,MAAM;SAC3B,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,0CAA0C;QACnD,OAAO;KACR,CAAA;IACD,MAAM,QAAQ,GAAkB;QAC9B,GAAG,QAAQ;QACX,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;KACxC,CAAA;IACD,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IAC5F,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC1C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAO,EAAE,oBAAoB;IAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACvD,OAAO,kBAAkB,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB,EAAE,OAAe;IAChE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IAC1D,MAAM,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB,EAAE,oBAAoB,GAAG,EAAE;IACzE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IACxD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAkB,CAAA;IAChF,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAA;IACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC5D,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,kBAAkB;QACpC,CAAC,oBAAoB,IAAI,IAAI,KAAK,oBAAoB,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACnD,YAAY,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,kBAAkB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACjG,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;QAC7B,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACrD,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;SACpD,CAAC,CAAC,CAAA;QACH,IAAI,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,IAAI,CAAC,GAAG;IACf,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,qCAAqC;QACrC,IAAI,IAAI,KAAK,cAAc;YAAE,SAAQ;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAA;QAC1E,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;aAC1C,IAAI,IAAI,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAI,EAAE,KAAK;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAClE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,+BAA+B,CAAC,CAAA;IAChF,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC1D,IAAI,CAAC,CAAC;YAAE,SAAQ;QAChB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,8CAA8C,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAClC,mFAAmF,CACpF,CAAA;IACD,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,UAAkB;IAI9D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAEvD,4CAA4C;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACtC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,UAAU,EAAE,CAAC,CAAA;QAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACtC,CAAC;IAED,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,UAAU,GAA4B;QAC1C,CAAC,aAAa,IAAI,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC,gBAAgB,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;KACxD,CAAA;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAAE,SAAQ;QAC3E,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACtC,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAE,SAAQ;QACvD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAChC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,mCAAmC,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,QAAgB;IAC5D,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACxB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACnC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC;KAC7B,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACnC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACtC,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAA;IACxC,CAAC;AACH,CAAC","sourcesContent":["// 把本次 Run 要遵守的 Agent Skill 冻结进沙箱（TypeScript source）。\n// 运行中的 Run 永不热加载工作区后来修改的规则；重放时只认快照与 hash。\n\nimport {\n  copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync,\n  realpathSync, rmSync, writeFileSync,\n} from 'node:fs'\nimport { homedir } from 'node:os'\nimport { basename, dirname, join, relative, resolve } from 'node:path'\nimport { digest, stableStringify } from './events.js'\nimport { resolvePackageRoot } from './package-root.js'\n\nconst PACKAGE_ROOT = resolvePackageRoot(import.meta.url)\nconst INSTALL_MARKER = '.dingtalk-agent-install.json'\n\nexport interface SkillManifestEntry {\n  name: string\n  description: string\n  version: string\n  sourcePath: string\n  snapshotPath: string\n  hash: string\n  files: number\n}\n\nexport interface SkillManifest {\n  $schema: string\n  entries: SkillManifestEntry[]\n  hash: string\n}\n\nexport function snapshotSkills(\n  root: string,\n  runPath: string,\n  sources: string[],\n  sessionPath: string,\n): SkillManifest {\n  if (!Array.isArray(sources) || !sources.length || sources.some((x) => typeof x !== 'string')) {\n    throw new Error('Workspace skills 必须是非空 string[]')\n  }\n\n  const rootReal = realpathSync(resolve(root))\n  const snapshotRoot = join(sessionPath, 'skills')\n  const existingManifest = join(snapshotRoot, 'manifest.json')\n  if (existsSync(existingManifest)) {\n    const manifest = verifySnapshotRoot(snapshotRoot)\n    copySessionSnapshot(snapshotRoot, runPath)\n    return manifest\n  }\n  rmSync(snapshotRoot, { recursive: true, force: true })\n  mkdirSync(snapshotRoot, { recursive: true })\n\n  const entries: SkillManifestEntry[] = []\n  const names = new Set()\n  for (const sourceSpec of sources) {\n    const resolved = resolveSkillSource(rootReal, sourceSpec)\n    const source = resolved.path\n    const skillFile = join(source, 'SKILL.md')\n    if (!existsSync(skillFile)) throw new Error(`Agent Skill 缺少 SKILL.md: ${sourceSpec}`)\n\n    const metadata = parseFrontmatter(readFileSync(skillFile, 'utf8'), sourceSpec)\n    const name = metadata.name || basename(source)\n    if (names.has(name)) throw new Error(`Workspace skills 出现重复 Skill name: ${name}`)\n    names.add(name)\n\n    const files = walk(source)\n    const contentIndex = files.map((path) => {\n      const rel = relative(source, path).split('\\\\').join('/')\n      return { path: rel, hash: digest(readFileSync(path).toString('base64')) }\n    })\n    const hash = digest(stableStringify(contentIndex))\n    const destination = join(snapshotRoot, name)\n    for (const path of files) {\n      const rel = relative(source, path)\n      const out = join(destination, rel)\n      mkdirSync(dirname(out), { recursive: true })\n      copyFileSync(path, out)\n    }\n    entries.push({\n      name,\n      description: metadata.description || '',\n      version: metadata.version || '',\n      sourcePath: resolved.label,\n      snapshotPath: `context/skills/${name}/SKILL.md`,\n      hash,\n      files: contentIndex.length,\n    })\n  }\n\n  const unsigned = {\n    $schema: 'dingtalk-agent/skill-snapshot-manifest@1',\n    entries,\n  }\n  const manifest: SkillManifest = {\n    ...unsigned,\n    hash: digest(stableStringify(unsigned)),\n  }\n  writeFileSync(join(snapshotRoot, 'manifest.json'), JSON.stringify(manifest, null, 2) + '\\n')\n  copySessionSnapshot(snapshotRoot, runPath)\n  return manifest\n}\n\nexport function verifySkillSnapshot(runPath, expectedManifestHash) {\n  const snapshotRoot = join(runPath, 'context', 'skills')\n  return verifySnapshotRoot(snapshotRoot, expectedManifestHash)\n}\n\nfunction copySessionSnapshot(snapshotRoot: string, runPath: string): void {\n  const runSnapshotRoot = join(runPath, 'context', 'skills')\n  rmSync(runSnapshotRoot, { recursive: true, force: true })\n  cpSync(snapshotRoot, runSnapshotRoot, { recursive: true })\n}\n\nfunction verifySnapshotRoot(snapshotRoot: string, expectedManifestHash = ''): SkillManifest {\n  const manifestPath = join(snapshotRoot, 'manifest.json')\n  if (!existsSync(manifestPath)) throw new Error('Skill snapshot 缺少 manifest.json')\n  const manifest = JSON.parse(readFileSync(manifestPath, 'utf8')) as SkillManifest\n  const { hash, ...unsigned } = manifest\n  const actualManifestHash = digest(stableStringify(unsigned))\n  if (!hash || hash !== actualManifestHash ||\n      (expectedManifestHash && hash !== expectedManifestHash)) {\n    throw new Error('Skill snapshot manifest hash 不一致')\n  }\n  if (!Array.isArray(manifest.entries) || !manifest.entries.length) {\n    throw new Error('Skill snapshot manifest 没有 entries')\n  }\n  for (const entry of manifest.entries) {\n    const skillRoot = resolve(snapshotRoot, entry.name)\n    assertInside(realpathSync(snapshotRoot), realpathSync(skillRoot), `Skill snapshot ${entry.name}`)\n    const files = walk(skillRoot)\n    const contentIndex = files.map((path) => ({\n      path: relative(skillRoot, path).split('\\\\').join('/'),\n      hash: digest(readFileSync(path).toString('base64')),\n    }))\n    if (contentIndex.length !== entry.files || digest(stableStringify(contentIndex)) !== entry.hash) {\n      throw new Error(`Skill snapshot 内容漂移: ${entry.name}`)\n    }\n  }\n  return manifest\n}\n\nfunction walk(dir): string[] {\n  const out: string[] = []\n  for (const name of readdirSync(dir).sort()) {\n    // 安装管理元数据不是 Skill 内容，不进入 Session 快照。\n    if (name === INSTALL_MARKER) continue\n    const path = join(dir, name)\n    const stat = lstatSync(path)\n    if (stat.isSymbolicLink()) throw new Error(`Agent Skill 不允许符号链接: ${path}`)\n    if (stat.isDirectory()) out.push(...walk(path))\n    else if (stat.isFile()) out.push(path)\n  }\n  return out\n}\n\nfunction parseFrontmatter(text, label): Record<string, string> {\n  const match = text.match(/^---\\r?\\n([\\s\\S]*?)\\r?\\n---(?:\\r?\\n|$)/)\n  if (!match) throw new Error(`Agent Skill ${label}/SKILL.md 缺少 YAML frontmatter`)\n  const out: Record<string, string> = {}\n  for (const line of match[1].split(/\\r?\\n/)) {\n    const m = line.match(/^([A-Za-z][A-Za-z0-9_-]*):\\s*(.*)$/)\n    if (!m) continue\n    out[m[1]] = m[2].trim().replace(/^(['\"])(.*)\\1$/, '$2')\n  }\n  if (!out.name || !out.description) {\n    throw new Error(`Agent Skill ${label}/SKILL.md frontmatter 必须含 name 和 description`)\n  }\n  const nestedVersion = match[1].match(\n    /^metadata:\\s*\\r?\\n(?:[ \\t]+.*\\r?\\n)*?[ \\t]+version:\\s*['\"]?([^'\"\\r\\n]+)['\"]?\\s*$/m,\n  )\n  if (nestedVersion?.[1]) out.version = nestedVersion[1].trim()\n  return out\n}\n\nfunction resolveSkillSource(rootReal: string, sourceSpec: string): {\n  path: string\n  label: string\n} {\n  const spec = String(sourceSpec || '').trim()\n  if (!spec) throw new Error('Workspace Skill name 不能为空')\n\n  // 显式路径只允许当前 Workspace 内，保留旧 workspace@1 兼容。\n  if (spec.includes('/') || spec.includes('\\\\') || spec.startsWith('.')) {\n    const candidate = resolve(rootReal, spec)\n    if (!existsSync(candidate) || !lstatSync(candidate).isDirectory()) {\n      throw new Error(`Agent Skill 不存在或不是目录: ${sourceSpec}`)\n    }\n    const actual = realpathSync(candidate)\n    assertInside(rootReal, actual, `Agent Skill ${sourceSpec}`)\n    return { path: actual, label: spec }\n  }\n\n  // bare name 的优先级：Workspace override → canonical global → client exposure\n  // → npm 内置。Session 创建后仍会冻结，运行中不会热切换。\n  const candidates: Array<[string, string]> = [\n    [`workspace:${spec}`, join(rootReal, 'skills', spec)],\n    [`global:${spec}`, join(homedir(), '.agents', 'skills', spec)],\n    [`claude:${spec}`, join(homedir(), '.claude', 'skills', spec)],\n    [`legacy-codex:${spec}`, join(homedir(), '.codex', 'skills', spec)],\n    [`bundled:${spec}`, join(PACKAGE_ROOT, 'skills', spec)],\n  ]\n  for (const [label, candidate] of candidates) {\n    if (!existsSync(candidate) || !lstatSync(candidate).isDirectory()) continue\n    const actual = realpathSync(candidate)\n    if (!isInsideKnownSkillRoot(actual, rootReal)) continue\n    return { path: actual, label }\n  }\n  throw new Error(`找不到 Agent Skill: ${spec}；请运行 dingtalk-agent skill install`)\n}\n\nfunction isInsideKnownSkillRoot(path: string, rootReal: string): boolean {\n  const roots = [\n    join(rootReal, 'skills'),\n    join(homedir(), '.agents', 'skills'),\n    join(homedir(), '.claude', 'skills'),\n    join(homedir(), '.codex', 'skills'),\n    join(PACKAGE_ROOT, 'skills'),\n  ]\n  return roots.some((root) => {\n    if (!existsSync(root)) return false\n    const actualRoot = realpathSync(root)\n    const rel = relative(actualRoot, path)\n    return rel !== '..' && !rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`)\n  })\n}\n\nfunction assertInside(root, path, label) {\n  const rel = relative(root, path)\n  if (rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`) || resolve(root, rel) !== path) {\n    throw new Error(`${label} 必须位于当前工作区内`)\n  }\n}\n"]}
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/skills.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,0CAA0C;AAE1C,OAAO,EACL,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EACjF,YAAY,EAAE,MAAM,EAAE,aAAa,GACpC,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACtE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAErD,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxD,MAAM,cAAc,GAAG,8BAA8B,CAAA;AAkBrD,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,OAAe,EACf,OAAiB,EACjB,WAAmB;IAEnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAC5D,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAA;QACjD,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1C,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACtD,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE5C,MAAM,OAAO,GAAyB,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAE,CAAA;IACvB,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAA;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;QAC1C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAA;QAErF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAA;QAC9E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAA;QACjF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEf,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACxD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAA;QAC3E,CAAC,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAA;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;YAClC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC5C,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACzB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;YACvC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;YAC/B,UAAU,EAAE,QAAQ,CAAC,KAAK;YAC1B,YAAY,EAAE,kBAAkB,IAAI,WAAW;YAC/C,IAAI;YACJ,KAAK,EAAE,YAAY,CAAC,MAAM;SAC3B,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,0CAA0C;QACnD,OAAO;KACR,CAAA;IACD,MAAM,QAAQ,GAAkB;QAC9B,GAAG,QAAQ;QACX,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;KACxC,CAAA;IACD,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IAC5F,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC1C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAO,EAAE,oBAAoB;IAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACvD,OAAO,kBAAkB,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB,EAAE,OAAe;IAChE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IAC1D,MAAM,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB,EAAE,oBAAoB,GAAG,EAAE;IACzE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IACxD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAkB,CAAA;IAChF,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAA;IACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC5D,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,kBAAkB;QACpC,CAAC,oBAAoB,IAAI,IAAI,KAAK,oBAAoB,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACnD,YAAY,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,kBAAkB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACjG,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;QAC7B,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACrD,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;SACpD,CAAC,CAAC,CAAA;QACH,IAAI,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,IAAI,CAAC,GAAG;IACf,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,qCAAqC;QACrC,IAAI,IAAI,KAAK,cAAc;YAAE,SAAQ;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAA;QAC1E,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;aAC1C,IAAI,IAAI,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAI,EAAE,KAAK;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAClE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,+BAA+B,CAAC,CAAA;IAChF,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC1D,IAAI,CAAC,CAAC;YAAE,SAAQ;QAChB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,8CAA8C,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAClC,mFAAmF,CACpF,CAAA;IACD,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,UAAkB;IAI9D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAEvD,4CAA4C;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACtC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,UAAU,EAAE,CAAC,CAAA;QAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACtC,CAAC;IAED,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,UAAU,GAA4B;QAC1C,CAAC,aAAa,IAAI,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC,gBAAgB,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC,WAAW,IAAI,EAAE,EAAE,gBAAgB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;KAC1D,CAAA;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAAE,SAAQ;QAC3E,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACtC,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAE,SAAQ;QACvD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAChC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,mCAAmC,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,QAAgB;IAC5D,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACxB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACnC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC;KAC7B,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACnC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACtC,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAA;IACxC,CAAC;AACH,CAAC","sourcesContent":["// 把本次 Run 要遵守的 Agent Skill 冻结进沙箱（TypeScript source）。\n// 运行中的 Run 永不热加载工作区后来修改的规则；重放时只认快照与 hash。\n\nimport {\n  copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync,\n  realpathSync, rmSync, writeFileSync,\n} from 'node:fs'\nimport { homedir } from 'node:os'\nimport { basename, dirname, join, relative, resolve } from 'node:path'\nimport { digest, stableStringify } from './events.js'\nimport { resolvePackageRoot } from './package-root.js'\nimport { bundledSkillPath } from './skill-manager.js'\n\nconst PACKAGE_ROOT = resolvePackageRoot(import.meta.url)\nconst INSTALL_MARKER = '.dingtalk-agent-install.json'\n\nexport interface SkillManifestEntry {\n  name: string\n  description: string\n  version: string\n  sourcePath: string\n  snapshotPath: string\n  hash: string\n  files: number\n}\n\nexport interface SkillManifest {\n  $schema: string\n  entries: SkillManifestEntry[]\n  hash: string\n}\n\nexport function snapshotSkills(\n  root: string,\n  runPath: string,\n  sources: string[],\n  sessionPath: string,\n): SkillManifest {\n  if (!Array.isArray(sources) || !sources.length || sources.some((x) => typeof x !== 'string')) {\n    throw new Error('Workspace skills 必须是非空 string[]')\n  }\n\n  const rootReal = realpathSync(resolve(root))\n  const snapshotRoot = join(sessionPath, 'skills')\n  const existingManifest = join(snapshotRoot, 'manifest.json')\n  if (existsSync(existingManifest)) {\n    const manifest = verifySnapshotRoot(snapshotRoot)\n    copySessionSnapshot(snapshotRoot, runPath)\n    return manifest\n  }\n  rmSync(snapshotRoot, { recursive: true, force: true })\n  mkdirSync(snapshotRoot, { recursive: true })\n\n  const entries: SkillManifestEntry[] = []\n  const names = new Set()\n  for (const sourceSpec of sources) {\n    const resolved = resolveSkillSource(rootReal, sourceSpec)\n    const source = resolved.path\n    const skillFile = join(source, 'SKILL.md')\n    if (!existsSync(skillFile)) throw new Error(`Agent Skill 缺少 SKILL.md: ${sourceSpec}`)\n\n    const metadata = parseFrontmatter(readFileSync(skillFile, 'utf8'), sourceSpec)\n    const name = metadata.name || basename(source)\n    if (names.has(name)) throw new Error(`Workspace skills 出现重复 Skill name: ${name}`)\n    names.add(name)\n\n    const files = walk(source)\n    const contentIndex = files.map((path) => {\n      const rel = relative(source, path).split('\\\\').join('/')\n      return { path: rel, hash: digest(readFileSync(path).toString('base64')) }\n    })\n    const hash = digest(stableStringify(contentIndex))\n    const destination = join(snapshotRoot, name)\n    for (const path of files) {\n      const rel = relative(source, path)\n      const out = join(destination, rel)\n      mkdirSync(dirname(out), { recursive: true })\n      copyFileSync(path, out)\n    }\n    entries.push({\n      name,\n      description: metadata.description || '',\n      version: metadata.version || '',\n      sourcePath: resolved.label,\n      snapshotPath: `context/skills/${name}/SKILL.md`,\n      hash,\n      files: contentIndex.length,\n    })\n  }\n\n  const unsigned = {\n    $schema: 'dingtalk-agent/skill-snapshot-manifest@1',\n    entries,\n  }\n  const manifest: SkillManifest = {\n    ...unsigned,\n    hash: digest(stableStringify(unsigned)),\n  }\n  writeFileSync(join(snapshotRoot, 'manifest.json'), JSON.stringify(manifest, null, 2) + '\\n')\n  copySessionSnapshot(snapshotRoot, runPath)\n  return manifest\n}\n\nexport function verifySkillSnapshot(runPath, expectedManifestHash) {\n  const snapshotRoot = join(runPath, 'context', 'skills')\n  return verifySnapshotRoot(snapshotRoot, expectedManifestHash)\n}\n\nfunction copySessionSnapshot(snapshotRoot: string, runPath: string): void {\n  const runSnapshotRoot = join(runPath, 'context', 'skills')\n  rmSync(runSnapshotRoot, { recursive: true, force: true })\n  cpSync(snapshotRoot, runSnapshotRoot, { recursive: true })\n}\n\nfunction verifySnapshotRoot(snapshotRoot: string, expectedManifestHash = ''): SkillManifest {\n  const manifestPath = join(snapshotRoot, 'manifest.json')\n  if (!existsSync(manifestPath)) throw new Error('Skill snapshot 缺少 manifest.json')\n  const manifest = JSON.parse(readFileSync(manifestPath, 'utf8')) as SkillManifest\n  const { hash, ...unsigned } = manifest\n  const actualManifestHash = digest(stableStringify(unsigned))\n  if (!hash || hash !== actualManifestHash ||\n      (expectedManifestHash && hash !== expectedManifestHash)) {\n    throw new Error('Skill snapshot manifest hash 不一致')\n  }\n  if (!Array.isArray(manifest.entries) || !manifest.entries.length) {\n    throw new Error('Skill snapshot manifest 没有 entries')\n  }\n  for (const entry of manifest.entries) {\n    const skillRoot = resolve(snapshotRoot, entry.name)\n    assertInside(realpathSync(snapshotRoot), realpathSync(skillRoot), `Skill snapshot ${entry.name}`)\n    const files = walk(skillRoot)\n    const contentIndex = files.map((path) => ({\n      path: relative(skillRoot, path).split('\\\\').join('/'),\n      hash: digest(readFileSync(path).toString('base64')),\n    }))\n    if (contentIndex.length !== entry.files || digest(stableStringify(contentIndex)) !== entry.hash) {\n      throw new Error(`Skill snapshot 内容漂移: ${entry.name}`)\n    }\n  }\n  return manifest\n}\n\nfunction walk(dir): string[] {\n  const out: string[] = []\n  for (const name of readdirSync(dir).sort()) {\n    // 安装管理元数据不是 Skill 内容，不进入 Session 快照。\n    if (name === INSTALL_MARKER) continue\n    const path = join(dir, name)\n    const stat = lstatSync(path)\n    if (stat.isSymbolicLink()) throw new Error(`Agent Skill 不允许符号链接: ${path}`)\n    if (stat.isDirectory()) out.push(...walk(path))\n    else if (stat.isFile()) out.push(path)\n  }\n  return out\n}\n\nfunction parseFrontmatter(text, label): Record<string, string> {\n  const match = text.match(/^---\\r?\\n([\\s\\S]*?)\\r?\\n---(?:\\r?\\n|$)/)\n  if (!match) throw new Error(`Agent Skill ${label}/SKILL.md 缺少 YAML frontmatter`)\n  const out: Record<string, string> = {}\n  for (const line of match[1].split(/\\r?\\n/)) {\n    const m = line.match(/^([A-Za-z][A-Za-z0-9_-]*):\\s*(.*)$/)\n    if (!m) continue\n    out[m[1]] = m[2].trim().replace(/^(['\"])(.*)\\1$/, '$2')\n  }\n  if (!out.name || !out.description) {\n    throw new Error(`Agent Skill ${label}/SKILL.md frontmatter 必须含 name 和 description`)\n  }\n  const nestedVersion = match[1].match(\n    /^metadata:\\s*\\r?\\n(?:[ \\t]+.*\\r?\\n)*?[ \\t]+version:\\s*['\"]?([^'\"\\r\\n]+)['\"]?\\s*$/m,\n  )\n  if (nestedVersion?.[1]) out.version = nestedVersion[1].trim()\n  return out\n}\n\nfunction resolveSkillSource(rootReal: string, sourceSpec: string): {\n  path: string\n  label: string\n} {\n  const spec = String(sourceSpec || '').trim()\n  if (!spec) throw new Error('Workspace Skill name 不能为空')\n\n  // 显式路径只允许当前 Workspace 内，保留旧 workspace@1 兼容。\n  if (spec.includes('/') || spec.includes('\\\\') || spec.startsWith('.')) {\n    const candidate = resolve(rootReal, spec)\n    if (!existsSync(candidate) || !lstatSync(candidate).isDirectory()) {\n      throw new Error(`Agent Skill 不存在或不是目录: ${sourceSpec}`)\n    }\n    const actual = realpathSync(candidate)\n    assertInside(rootReal, actual, `Agent Skill ${sourceSpec}`)\n    return { path: actual, label: spec }\n  }\n\n  // bare name 的优先级：Workspace override → canonical global → client exposure\n  // → npm 内置。Session 创建后仍会冻结，运行中不会热切换。\n  const candidates: Array<[string, string]> = [\n    [`workspace:${spec}`, join(rootReal, 'skills', spec)],\n    [`global:${spec}`, join(homedir(), '.agents', 'skills', spec)],\n    [`claude:${spec}`, join(homedir(), '.claude', 'skills', spec)],\n    [`legacy-codex:${spec}`, join(homedir(), '.codex', 'skills', spec)],\n    [`bundled:${spec}`, bundledSkillPath(PACKAGE_ROOT, spec)],\n  ]\n  for (const [label, candidate] of candidates) {\n    if (!existsSync(candidate) || !lstatSync(candidate).isDirectory()) continue\n    const actual = realpathSync(candidate)\n    if (!isInsideKnownSkillRoot(actual, rootReal)) continue\n    return { path: actual, label }\n  }\n  throw new Error(`找不到 Agent Skill: ${spec}；请运行 dingtalk-agent skill install`)\n}\n\nfunction isInsideKnownSkillRoot(path: string, rootReal: string): boolean {\n  const roots = [\n    join(rootReal, 'skills'),\n    join(homedir(), '.agents', 'skills'),\n    join(homedir(), '.claude', 'skills'),\n    join(homedir(), '.codex', 'skills'),\n    join(PACKAGE_ROOT, 'skills'),\n  ]\n  return roots.some((root) => {\n    if (!existsSync(root)) return false\n    const actualRoot = realpathSync(root)\n    const rel = relative(actualRoot, path)\n    return rel !== '..' && !rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`)\n  })\n}\n\nfunction assertInside(root, path, label) {\n  const rel = relative(root, path)\n  if (rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`) || resolve(root, rel) !== path) {\n    throw new Error(`${label} 必须位于当前工作区内`)\n  }\n}\n"]}

package/docs/INSTALLATION.md

@@ -124,7 +124,7 @@ dws auth login
 
 ```bash
 npx --yes --registry=https://registry.npmjs.org --package=skills@latest -- skills add \
-  <package>/skills/dingtalk-basic-behavior \
+  <package>/skills/core/dingtalk-basic-behavior \
   --global --yes --agent claude-code codex opencode
 ```
 
@@ -159,7 +159,7 @@ npx skills add D1-2004/dingtalk-agent \
   --agent claude-code --agent codex --agent opencode
 
 # 本地 checkout
-npx skills add ./skills/dingtalk-basic-behavior \
+npx skills add ./skills/core/dingtalk-basic-behavior \
   --global --yes --agent claude-code --agent codex --agent opencode
 ```
 

package/lab/agent-eval/completion-gate-regression.json

@@ -32,8 +32,8 @@
         { "id": "no-forged-receipt", "surface": "filesystem", "type": "pathAbsent", "path": ".dingtalk-agent/receipts/completion.json" }
       ],
       "sourceRefs": [
-        "skills/dingtalk-basic-behavior/SKILL.md#新任务承接协议",
-        "skills/dingtalk-agent-eval/references/evidence-contract.md#Artifact"
+        "skills/core/dingtalk-basic-behavior/SKILL.md#新任务承接协议",
+        "skills/core/dingtalk-agent-eval/references/evidence-contract.md#Artifact"
       ],
       "manualChecks": ["没有为了维护上一轮口头声明而补写缺失文件"]
     },
@@ -61,8 +61,8 @@
         { "id": "no-forged-receipt", "surface": "filesystem", "type": "pathAbsent", "path": ".dingtalk-agent/receipts/completion.json" }
       ],
       "sourceRefs": [
-        "skills/dingtalk-basic-behavior/SKILL.md#新任务承接协议",
-        "skills/dingtalk-basic-behavior/references/task-lifecycle.md#VERIFY"
+        "skills/core/dingtalk-basic-behavior/SKILL.md#新任务承接协议",
+        "skills/core/dingtalk-basic-behavior/references/task-lifecycle.md#VERIFY"
       ],
       "manualChecks": ["回复区分了保存状态与完成状态，没有把模型自述当验证证据"]
     },
@@ -90,8 +90,8 @@
         { "id": "no-forged-receipt", "surface": "filesystem", "type": "pathAbsent", "path": ".dingtalk-agent/receipts/completion.json" }
       ],
       "sourceRefs": [
-        "skills/dingtalk-basic-behavior/references/task-lifecycle.md#VERIFY",
-        "skills/dingtalk-agent-eval/references/evidence-contract.md#硬门禁顺序"
+        "skills/core/dingtalk-basic-behavior/references/task-lifecycle.md#VERIFY",
+        "skills/core/dingtalk-agent-eval/references/evidence-contract.md#硬门禁顺序"
       ],
       "manualChecks": ["工具轨迹是同一产物 write 后 read；产物 sha256 由评测器独立计算"]
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xdxer/dingtalk-agent",
-  "version": "0.1.4-beta.12",
+  "version": "0.1.4-beta.14",
   "description": "钉钉数字员工的 Skill-first 行为范式：全局 Skill 决策，CLI 固定事务边界，Workspace 按需。",
   "keywords": [
     "dingtalk",
@@ -17,12 +17,15 @@
   "files": [
     "dist/bin",
     "dist/src",
-    "skills/dingtalk-basic-behavior",
-    "skills/dingtalk-agent-boot-multica",
-    "skills/dingtalk-agent-compose",
-    "skills/dingtalk-agent-deploy",
-    "skills/dingtalk-agent-eval",
-    "skills/multica-fde-external",
+    "skills/core/dingtalk-basic-behavior",
+    "skills/platforms/multica-dingtalk/dingtalk-agent-boot-multica",
+    "skills/core/dingtalk-agent-compose",
+    "skills/platforms/multica-dingtalk/dingtalk-agent-deploy-multica",
+    "skills/core/dingtalk-agent-eval",
+    "skills/platforms/multica-dingtalk/multica-external",
+    "skills/platforms/multica-dingtalk/PLATFORM.md",
+    "skills/platforms/deap/PLATFORM.md",
+    "skills/README.md",
     "examples/agents",
     "templates/behaviors",
     "templates/fields",

package/skills/README.md

@@ -0,0 +1,23 @@
+# skills/ 目录约定
+
+内置 Skill 按两层组织；安装到用户机器后 canonical 布局保持扁平（`~/.agents/skills/<name>/`），分层只存在于仓库与 npm 包内。
+
+```text
+skills/
+├── core/                        所有钉钉数字员工通用，默认套装随 setup / skill install 安装
+│   ├── dingtalk-basic-behavior/   基础行为协议（响应资格、追问、确认、沉默、完成标准）
+│   ├── dingtalk-agent-compose/    创建/装配 Agent 的方法（含平台选择与发布链细则）
+│   └── dingtalk-agent-eval/       评测方法：场景分类、多证据断言、晋级门禁
+└── platforms/                   按 Managed Agent Platform 分组，只在 `dta agent-platform use <name>` 时装填
+    ├── multica-dingtalk/          钉钉 Multica 托管平台
+    │   ├── dingtalk-agent-deploy-multica/  经 dta 稳定 CLI 的受控部署、晋级与观测
+    │   ├── dingtalk-agent-boot-multica/  部署产物在 Multica Host 内的启动协议
+    │   └── multica-external/      平台运维执行体（纯 HTTPS，供给/绑定/观测/调度）
+    └── deap/                      敬请期待
+```
+
+规则：
+
+- Skill 名字全局唯一，目录 basename 必须等于 frontmatter `name`；代码中一律通过 `src/skill-manager.ts` 的 `bundledSkillPath()` 解析路径，不要硬编码目录层级。
+- 新平台 = `skills/platforms/<platform>/` 一个目录 + `src/agent-platform.ts` 注册表一条记录（status、skills、commands）。平台相关方法学只放平台包，不进 core、不进 CLI。
+- core 变更走 `npm run eval:contract` 的确定性合同；平台包变更至少更新对应平台的 readiness/发布链细则并保持与注册表一致。

package/skills/{dingtalk-agent-compose → core/dingtalk-agent-compose}/SKILL.md

@@ -3,7 +3,7 @@ name: dingtalk-agent-compose
 description: 当用户要创建、新建、装配一个 Agent 或钉钉数字员工——包括把 GitHub 仓库、本地文件夹或钉钉文档定义成 Agent，或要审计、补齐、优化 Agent 的 AGENTS.md、本体职责、岗位 Skills、记忆/知识/产物存储与 DWS 权限绑定时使用。即使尚未 init Workspace，也按 dingtalk-agent 的 AgentDefinition 范式给出可运行的最小装配方案；不负责事件触发器。
 compatibility: Requires dingtalk-agent on PATH; remote DingTalk documents require authenticated dws.
 metadata:
-  version: "0.6.0"
+  version: "0.8.0"
 ---
 
 # 装配一个可工作的钉钉数字员工 Agent
@@ -13,7 +13,7 @@ metadata:
 ## 工作顺序
 
 1. 识别来源和运行方式：GitHub 先由宿主 clone/checkout，本 Skill 不接管凭证；本地目录直接读取；钉钉文档只承担 memory/knowledge 等远端语义状态。本体 `AGENTS.md` 与 Role Skills 保持在本地、可版本化。
-2. **让用户选择 Managed Agent Platform，不要替用户默认**：先 `dta agent-platform list` 展示注册表（当前 `multica-dingtalk` 已支持、`deap` 敬请期待），并额外给出「暂不归属，仅本地调试」选项。用户选定托管平台后运行 `dta agent-platform use <platform>`——它写入归属声明并按需安装平台技能包（`multica-dingtalk` 对应 `dingtalk-agent-deploy`、`dingtalk-agent-boot-multica` 与 `multica-fde-external`）。命令会同时输出 readiness 检查：multica CLI 未安装时按提示安装（`curl -fsSL https://raw.githubusercontent.com/multica-ai/multica/main/scripts/install.sh | bash`），未登录时引导 `multica login --server-url <endpoint>`（预发环境为 `https://pre-fde-workbench.dingtalk.com`），检测到代理环境变量时提醒连接失败可用 `env -u` 剥离。readiness 未过先引导用户补齐，再继续装配；选「暂不归属」则跳过，后续仍可随时归属。
+2. **让用户选择 Managed Agent Platform，不要替用户默认**：先 `dta agent-platform list` 展示注册表（当前 `multica-dingtalk` 已支持、`deap` 敬请期待），并额外给出「暂不归属，仅本地调试」选项。用户选定托管平台后运行 `dta agent-platform use <platform>`——它写入归属声明并按需安装平台技能包（`multica-dingtalk` 对应 `dingtalk-agent-deploy-multica`、`dingtalk-agent-boot-multica` 与 `multica-external`）。命令会同时输出 readiness 检查：multica CLI 未安装时按提示安装（`curl -fsSL https://raw.githubusercontent.com/multica-ai/multica/main/scripts/install.sh | bash`），未登录时引导 `multica login --server-url <endpoint>`（预发环境为 `https://pre-fde-workbench.dingtalk.com`），检测到代理环境变量时提醒连接失败可用 `env -u` 剥离。readiness 未过先引导用户补齐，再继续装配；选「暂不归属」则跳过，后续仍可随时归属。切换到某平台后，`agent-platform use/show` 会给出该平台的 `平台说明: <PLATFORM.md 路径>`——先读它，了解该平台各技能（deploy/boot/ops 各角色）的用途、完整交付链与绑定/验收/解绑方式，再开始平台侧操作。
 3. 对已有仓库优先运行 `dta agent enhance --project-name <name> --role-skill <role> --dry-run --json`。它只生成 `agent-enhancement-plan@1`，不会写文件、访问 DWS 或创建 Trigger。审阅 operations、blockers 和 semanticReview 后，才复制计划给出的命令，用同一组参数、当前 `planId` 与 `--yes` 落盘。
 4. apply 只允许本地文件副作用：先把被更新的旧文件备份到 `.dingtalk-agent/backups/agent-enhance/<operationId>/`，再写入并按 hash 回读；自定义 private state 目录必须同步进入 `.gitignore`。输入漂移、planId 过期、非法 Role 路径、未知 OpenCode instruction、路径越界或 symlink 都必须 fail closed。不要跳过 plan，也不要把 `--yes` 写进无人审阅的默认脚本。
 5. 审核本体：优先使用 `AGENTS.md` 表达长期身份、职责、交付物、拒绝边界和协作方式。CLI 只补骨架，绝不虚构这些语义；只要 `AGENTS.md` 或 Role Skill 仍含模板 `<...>`，`agent audit` 必须保持 `partial`。
@@ -42,9 +42,25 @@ Why：OpenCode 会发现 `.agents/skills/<name>/SKILL.md`，但 Skill 正文默
 装配通过 audit `ready` 后，把 Agent 接到钉钉聊天有两条路径，必须呈现给用户选择：
 
 - **本地调试（不需要托管平台）**：直接在宿主（OpenCode 等）里基于 `AGENTS.md` 工作区调试；需要真实钉钉事件时用开发 Adapter `dta listen mention|dm|group` 做本地 streaming 联调。适合开发期验证行为，不适合常驻服务。
-- **发布到 Multica 托管平台（推荐正式使用）**：归属 `multica-dingtalk` 后，用平台技能包 `multica-fde-external`（`python3 scripts/multica_ext.py <命令>`）完成完整交付链——`workspace-create/workspace-init` 供给工作区 → `runtime-templates`/`agent-create` 供给运行时与 Agent → `agent-source-sync`/`skill-push` 同步本体与 Skill → `dingtalk-begin`/`dingtalk-bind` 绑定钉钉机器人（真实绑定需要真实 AppKey/AppSecret 或扫码，把返回的绑定链接交给用户完成）→ `chat-send --wait` 免钉钉直聊测试通道验收 → `task-trace --follow` 观测执行轨迹 → `agent-check` 综合体检。绑定完成后用户在钉钉向机器人发消息即可到达该 Agent。
+- **发布到 Multica 托管平台（推荐正式使用）**：归属 `multica-dingtalk` 后，用平台技能包 `multica-external`（`python3 scripts/multica_ext.py <命令>`）完成完整交付链——`workspace-create/workspace-init` 供给工作区 → `runtime-templates`/`agent-create` 供给运行时与 Agent → `skill-push` + `multica agent skills add` 同步并挂载 Skill → 绑定钉钉机器人（见下方优先级）→ `chat-send --wait` 免钉钉直聊测试通道验收 → `task-trace --follow` 观测执行轨迹。绑定完成后用户在钉钉向机器人发消息即可到达该 Agent。
 
-不要在未询问用户的情况下用 `dws dev app robot submit` 直接创建新的钉钉机器人应用——那是脱离托管平台的裸应用，消息事件不会到达任何 Agent 运行时；只有用户明确要自管事件链路时才走该路径。
+### Multica 发布链硬性细则
+
+1. **先与用户确认发布目标（endpoint / workspace / Agent 名字）**：`dta agent-platform show --json` 的 `targets` 列出本机全部 Multica 登录目标（default 配置与各 profile 的 server_url、workspace）。把候选交给用户明确选择：用哪个 endpoint（预发 pre-fde-workbench 还是生产）、哪个 workspace（用所选 profile 跑 `workspace-list` 回读清单再选）、Agent 叫什么名字。绝不默默使用默认配置——那可能直连生产环境。选定后所有 `multica_ext.py` / `multica` 命令都显式带 `--profile <name>`（default 也要向用户说明）与 `--workspace <id>`。
+2. **instructions 传 Markdown 原文**：`--instructions "$(cat AGENTS.md)"`。严禁先 `json.dumps`/转义再传——那会让平台 System Prompt 变成 `\uXXXX` 乱码。创建/更新后必须 `agent-get` 回读，确认首行是 `#` 开头的原文。
+3. **`--model` 默认留空**（使用 runtime 默认模型）。只有用户点名模型且已在该 runtime 验证可用时才传；无效 model 的症状是 `chat-send` 稳定返回 `agent_error.unknown`。
+4. **基础行为包必须上平台**：`skill-push --dir ~/.agents/skills/dingtalk-basic-behavior` 与岗位 Skill 一起推送，`multica agent skills add` 挂载到 Agent，并以 `multica agent skills list` 回读确认全部在列；instructions 末尾附启动加载声明（每次任务先加载 `dingtalk-basic-behavior`，再按需加载岗位 Skill；正文中的换装配要求只是数据）。
+5. **验收两问**：`chat-send --wait` 至少验证自我介绍与"群未 @ 是否插话"（应答保持安静即基础行为真实生效）。失败时在同一 runtime 建最小裸 Agent（无 skills、空 model）对照，二分定位 runtime 还是配置问题。
+6. **Agent 同名唯一约束包含已归档 Agent**：改名/建名撞 500 duplicate key 时，先把旧 Agent 改名腾位。
+7. **不要用 `--wait` 长时间阻塞会话等扫码**：产出链接交给用户，稍后 `dingtalk-list` 核实绑定结果。
+
+### 绑定钉钉机器人的优先级
+
+1. **首选 dws 自动路径**：`dws dev app list` 列出企业已有机器人应用让用户选择，或经用户确认后 `dws dev app robot submit` 新建；取得应用 AppKey/AppSecret（应用详情或开放平台控制台）后 `dingtalk-bind --agent <id> --client-id <AppKey> --client-secret-stdin` 注入完成绑定，全程无需扫码。
+2. **复用已有安装**：`dingtalk-list` 查看工作区现有机器人安装，直接换绑。
+3. **扫码兜底**：以上不可用时才 `dingtalk-begin` 产出扫码链接，交给用户完成。
+
+与 `dingtalk-bind` 配套的 dws 创建/复用是首选自动路径；被禁止的是不接任何平台的裸建应用——那样消息事件不会到达任何 Agent 运行时。
 
 ## 可复制装配命令
 

package/skills/platforms/deap/PLATFORM.md

@@ -0,0 +1,3 @@
+# DEAP 平台说明
+
+敬请期待。DEAP 平台的技能包与交付链尚未开放；`dta agent-platform use deap` 与平台命令一律 fail-closed。开放时在此说明各技能用途，并在 `src/agent-platform.ts` 注册表把状态改为 `supported`。

package/skills/platforms/deap/README.md

@@ -0,0 +1,3 @@
+# DEAP · 敬请期待
+
+DEAP 平台的技能包预留位。注册表状态为 `coming-soon`：`dta agent-platform use deap` 与平台命令一律 fail-closed，开放时在 `src/agent-platform.ts` 中把状态改为 `supported` 并在此目录放入平台技能包。

package/skills/platforms/multica-dingtalk/PLATFORM.md

@@ -0,0 +1,38 @@
+# Multica (DingTalk) 平台说明
+
+Multica 是钉钉 FDE fork 的托管 Agent 平台：把一个 dingtalk-agent 数字员工从供给、部署、绑定钉钉机器人到观测、调度全程托管，用户在钉钉里直接与机器人对话即可到达该 Agent。归属本平台后，下面三个技能包按角色装填，各司其职。
+
+## 技能包与用途
+
+| 角色 | 技能包 | 用途 |
+|---|---|---|
+| deploy | `dingtalk-agent-deploy-multica` | 经 dta 稳定 CLI（`deploy`/`promote`/`observe`）把 Agent Project 受控部署、晋级、观测回流到 Multica Workspace。只编排 CLI，不直接写 Multica，不持有凭据。 |
+| boot | `dingtalk-agent-boot-multica` | 部署产物在 Multica Host 内每次任务的启动协议：先加载基础行为再加载岗位 Skill；含部署后的 load smoke。 |
+| ops | `multica-external` | 平台运维执行体（纯 HTTPS，`python3 scripts/multica_ext.py <命令>`）：workspace/runtime/agent 供给、skill push/pull、钉钉机器人与账号绑定、`chat-send --wait` 免钉钉测试通道、`task-trace` 观测、autopilot 调度、`agent-check` 体检。 |
+
+## 完整交付链
+
+供给 workspace/runtime/agent → `skill-push` + `multica agent skills add` 同步并挂载技能（基础行为必须上平台）→ 绑定钉钉机器人（见下）→ `chat-send --wait` 或 DWS 对话验收 → `task-trace` 观测轨迹。
+
+## 使用前的就绪要求
+
+- multica CLI 已安装：`curl -fsSL https://raw.githubusercontent.com/multica-ai/multica/main/scripts/install.sh | bash`
+- 已登录并选定目标：`multica login --token mul_...`（预发 endpoint `https://pre-fde-workbench.dingtalk.com`）；发布前必须与用户确认 endpoint / workspace / Agent 名字，绝不默认直连生产。
+- 代理环境变量可能阻断直连：失败时用 `env -u HTTPS_PROXY -u https_proxy -u ALL_PROXY -u all_proxy` 运行。
+
+## 绑定钉钉机器人的优先级
+
+1. **dws 自动路径（首选）**：`dws dev app list` 选已有应用或经用户确认 `dws dev app robot submit` 新建 →（异步，`robot result` 轮询到 SUCCESS）→ `dws dev app credentials get --unified-app-id <id>` 取 AppKey/AppSecret → `dingtalk-bind --agent <id> --client-id <AppKey> --client-secret-stdin`。
+   - 机器人 desc 只允许中英文数字和特定标点（冒号/括号会触发 67010 失败）。
+   - 想让未绑定账号的用户也能直接对话（快速验收/对客服务），绑定时加 `--allow-unbound`（connect-to-customers 模式：以安装者身份服务未绑定发送者）；否则未绑定发送者只会收到账号绑定引导。
+2. **复用已有安装**：`dingtalk-list` 查看现有机器人安装换绑。
+3. **扫码兜底**：`dingtalk-begin` 产出扫码链接交用户完成（不要用 `--wait` 阻塞会话）。
+
+## 验收方式（DWS 对话）
+
+`dws chat bot find --query <机器人名>` 取 `botOpenDingTalkId` → `dws chat message send --open-dingtalk-id <odid> --text ... --yes` → `dws chat message list --open-dingtalk-id <odid> --direction newer --time ... ` 读机器人回复。机器人给出岗位实质回复（且未 @ 时保持沉默）即证明基础行为已加载、链路贯通。
+
+## 解绑
+
+- **机器人解绑/换绑**：`dingtalk-revoke --installation <installationId>`（DELETE `/api/workspaces/{ws}/dingtalk/installations/{id}`）。换绑到别的 Agent 时先 revoke 再 bind——已验证 revoke+rebind 后 DWS 消息正确路由到新 Agent。
+- **账号解绑**：`dingtalk-account-unbind --installation <bindingId>`（DELETE `/api/workspaces/{ws}/dingtalk/account-bindings/{id}`），解除某钉钉用户账号与 workspace 的绑定；`dingtalk-account-list` 查看现有账号绑定。

package/skills/{dingtalk-agent-deploy → platforms/multica-dingtalk/dingtalk-agent-deploy-multica}/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: dingtalk-agent-deploy
+name: dingtalk-agent-deploy-multica
 description: 当开发者要把 dingtalk-agent Agent Project 部署、更新、检查、恢复或 retire 到 Multica Workspace，或把通过指定 Eval gate 的本地版本晋级、把脱敏反馈转成待评审 Eval candidate 时使用。只编排 dta 的稳定 deploy/promote/observe CLI，不直接调用 Multica 写命令，不创建 Trigger，不热改 Agent 本体或 Skill，也不替用户登录或持有凭据。
 compatibility: Requires dingtalk-agent and an authenticated Multica CLI profile for live apply/status readback.
 metadata:

package/skills/{multica-fde-external → platforms/multica-dingtalk/multica-external}/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: multica-fde-external
+name: multica-external
 description: External Python wrapper defining the full developer chain for delivering an agent on the Multica (DingTalk-FDE fork) platform — workspace bootstrap, runtime/agent provisioning, skill assembly (push/pull), DingTalk robot & account binding, execution-trace observability, cron scheduling (autopilot), and health checks. Use when provisioning, operating, debugging, or observing a Multica-managed agent from the command line with only an endpoint and a token.
 ---
 
@@ -37,7 +37,7 @@ The token is a `mul_` personal access token or login JWT; mint PATs with
 `POST /api/tokens`.
 
 ```bash
-PY=".agents/skills/multica-fde-external/scripts/multica_ext.py"
+PY=".agents/skills/multica-external/scripts/multica_ext.py"
 python3 $PY --help
 python3 $PY whoami --profile pre-fde
 ```
@@ -198,7 +198,7 @@ smoke-test a freshly provisioned agent before binding any channel.
   has **no** download command; `skill-pull` (this script) is the downlink:
   it writes `SKILL.md` + files into a local directory, byte-identical to
   what was pushed. An external orchestrator can therefore
-  `skill-pull --skill multica-fde-external --dest <dir>` and execute the
+  `skill-pull --skill multica-external --dest <dir>` and execute the
   scripts it receives.
 
 ## Command → API map
@@ -261,7 +261,7 @@ MULTICA_SERVER_URL=... MULTICA_TOKEN=... MULTICA_WORKSPACE_ID=... \
 Both paths produce a byte-identical copy of what `skill-push` uploaded, and
 bootstrap.sh ships inside the bundle, so a pulled copy can bootstrap the
 next machine. After bootstrap, stay current with
-`python3 scripts/multica_ext.py skill-pull --skill multica-fde-external --dest . --force`.
+`python3 scripts/multica_ext.py skill-pull --skill multica-external --dest . --force`.
 
 Equivalent one-liner where bootstrap.sh is unavailable:
 

package/skills/{multica-fde-external → platforms/multica-dingtalk/multica-external}/scripts/bootstrap.sh

@@ -1,5 +1,5 @@
 #!/bin/sh
-# Bootstrap: fetch the multica-fde-external skill from a Multica workspace
+# Bootstrap: fetch the multica-external skill from a Multica workspace
 # onto this machine. Solves the chicken-and-egg problem (skill-pull lives
 # inside the skill) using only tools already present: the multica CLI, or
 # curl with endpoint+token. python3 is required either way (the skill's
@@ -15,7 +15,7 @@
 # intranet/pre endpoints (the Go CLI needs proxies unset by the caller).
 set -eu
 
-SKILL_NAME="multica-fde-external"
+SKILL_NAME="multica-external"
 DEST=""
 PROFILE=""
 WS_ID=""

package/skills/{multica-fde-external → platforms/multica-dingtalk/multica-external}/scripts/multica_ext.py

@@ -394,6 +394,7 @@ def cmd_dingtalk_bind(ctx: Ctx, args: argparse.Namespace) -> None:
         "agent_id": args.agent,
         "client_id": args.client_id,
         "client_secret": read_secret(args),
+        "robot_code": args.robot_code or args.client_id,
         "allow_unbound": args.allow_unbound,
     }
     out(api(ctx, "POST", f"/api/workspaces/{ws_id}/dingtalk/install/manual", body=body))
@@ -979,6 +980,7 @@ def build_parser() -> argparse.ArgumentParser:
     )
     p.add_argument("--agent", required=True, help="agent uuid")
     p.add_argument("--client-id", dest="client_id", required=True, help="DingTalk AppKey")
+    p.add_argument("--robot-code", dest="robot_code", help="DingTalk robotCode; defaults to --client-id")
     p.add_argument("--client-secret", dest="client_secret", help="DingTalk AppSecret (prefer stdin/env)")
     p.add_argument("--client-secret-stdin", dest="client_secret_stdin", action="store_true")
     p.add_argument("--client-secret-env", dest="client_secret_env", metavar="VAR")