@yijiancaotang/cli 1.0.0 → 1.2.0

package/dist/schedule-help.js

@@ -0,0 +1,35 @@
+const id = "11111111-1111-4111-8111-111111111111";
+const key = "schedule-example-key-0001";
+const notes = "先复述标题、完整日期和时间（含时区）；没日期明确说“先不定日期”，本人确认后才传 confirmed:true。服务端不能验证口头确认。所有写必须用16-128位安全ASCII幂等键；未知202不是成功，保留原键和连接，用 schedule status 核对，不自动重试、换键或执行依赖写入。读取归 read_workbench，写入归 write_schedule，只读设备不能写；项目标签受 read_projects/read_drafts 限制。没有删除接口。";
+const fields = {
+    title: "create必填，update选填；按Go规则去首尾空白后1-200个Unicode码点，不含控制符。",
+    due_date: "选填，真实YYYY-MM-DD；null或空字符串清除时间，省略保持（create默认不定日期）。",
+    due_at: "选填，RFC3339含Z或明确时区偏移，例如2026-11-09T12:00:00+08:00；可null清除。due_date与due_at不能同时非空。",
+    project_id: "选填，本人项目UUID；null或空字符串解除关联，省略保持。",
+    confirmed: "必填且只能为true；表示调用方已取得本人确认，不代表服务器验证了口头确认。",
+};
+export const scheduleCommandHelp = {
+    "schedule list": {
+        command: "schedule list", usage: "caotang schedule list", description: "读取本人日程/待办，保留服务端排序、分组及分页；取消和完成记录永久保留。",
+        options: ["--view", "--status", "--group-by", "--project", "--q", "--start-date", "--end-date", "--limit", "--offset"],
+        fields: { view: "pending（默认）、workbench、recent_completed或history。", status: "仅view=history可传：all、completed、cancelled。", "group-by": "date（默认）或project。", project: "none表示不属于项目，否则传项目UUID；省略为全部。", "start-date": "北京时间含首尾日期YYYY-MM-DD；只到日期或精确时间，未定日期不进入日期范围。", "end-date": "YYYY-MM-DD，不早于start-date。", limit: "1-100；默认20，workbench默认5。", offset: "0至9007199254740991。", q: "标题关键字，去首尾空白后最多200个Unicode码点。" },
+        example: { command: "caotang schedule list --view history --status cancelled --limit 100" }, notes,
+    },
+    "schedule show": { command: "schedule show", usage: "caotang schedule show <id>", description: "读取一条日程及schedule_item.revision；写入时使用这一版本，不猜版本号。", options: [], example: { command: `caotang schedule show ${id}` }, notes },
+    "schedule status": { command: "schedule status", usage: "caotang schedule status --idempotency-key KEY", description: "只读核对同一连接的原写入回执；原键仅发送为Idempotency-Key header，不在query/body。未知结果退出非0。", options: ["--idempotency-key"], example: { command: `caotang schedule status --idempotency-key ${key}` }, notes },
+};
+for (const operation of ["create", "update", "complete", "cancel", "undo", "add", "done"]) {
+    const create = operation === "create" || operation === "add";
+    const edit = create || operation === "update";
+    const command = `schedule ${operation}`;
+    const suffix = `${create ? "" : " <id>"} --input file|- --idempotency-key KEY${create ? "" : " --revision N"}`;
+    scheduleCommandHelp[command] = {
+        command, usage: `caotang ${command}${suffix}`,
+        description: operation === "add" ? "create兼容别名，确认后新增待办。" : operation === "done" ? "complete兼容别名，确认后标完成。" : operation === "undo" ? "仅撤销刚完成的记录，约5秒窗口；不恢复取消、不删除记录。" : operation === "update" ? "按presence修改待办，只提交确认过的字段，至少一个业务字段。" : `确认后${{ create: "新增待办", complete: "标完成", cancel: "取消待办，保留记录" }[operation]}。`,
+        options: ["--input", "--idempotency-key", ...(create ? [] : ["--revision"])],
+        fields: { ...(edit ? fields : { confirmed: fields.confirmed }), ...(!create ? { revision: "必填--revision N，来自最近读回的正安全整数revision；发送strong If-Match:双引号包围N。冲突后核对，不自动重发。" } : {}) },
+        required_fields: [...(create ? ["title"] : []), "confirmed"],
+        example: { command: `caotang ${command}${create ? "" : ` ${id}`} --input - --idempotency-key ${key}${create ? "" : " --revision 3"}`, input: create ? { title: "本人确认的待办", confirmed: true } : operation === "update" ? { due_date: "2026-11-09", confirmed: true } : { confirmed: true } }, notes,
+    };
+}
+export const scheduleCommandUsages = Object.values(scheduleCommandHelp).map(item => item.usage.replace(/^caotang /, ""));

package/dist/schedule-start-wire.js

@@ -0,0 +1,80 @@
+import { validDate as validDay } from "./query-validation.js";
+const row = (value) => {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw Error();
+    return value;
+};
+const count = (value) => {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0)
+        throw Error();
+    return value;
+};
+const text = (value, max) => {
+    if (typeof value !== "string" || !value || [...value].length > max || /[\p{Cc}\u2028\u2029\uD800-\uDFFF]/u.test(value))
+        throw Error();
+    return value;
+};
+const identity = (value) => {
+    const result = text(value, 36);
+    if (!/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(result))
+        throw Error();
+    return result;
+};
+const projectTitle = (value) => {
+    if (typeof value !== "string" || !value || [...value].length > 80 || /[\u0000\uD800-\uDFFF]/u.test(value))
+        throw Error();
+    return value;
+};
+const timestamp = (value) => {
+    const result = text(value, 40);
+    if (!/^[0-9]{4}-[0-9]{2}-[0-9]{2}T(?:[01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9](?:\.[0-9]{1,9})?(?:Z|[+-](?:[01][0-9]|2[0-3]):[0-5][0-9])$/.test(result) || !validDay(result.slice(0, 10)) || !Number.isFinite(Date.parse(result)))
+        throw Error();
+    return result;
+};
+function values(value, cap) {
+    if (!Array.isArray(value) || value.length > cap)
+        throw Error();
+    return value;
+}
+function item(value, bucket) {
+    const r = row(value);
+    if (r.status !== "pending" || r.bucket !== bucket || (r.due_date === undefined) === (r.due_at === undefined))
+        throw Error();
+    let when;
+    if (r.due_date !== undefined) {
+        if (!validDay(r.due_date))
+            throw Error();
+        when = { due_date: r.due_date };
+    }
+    else
+        when = { due_at: timestamp(r.due_at) };
+    const project = r.project_id === undefined ? {} : { project_id: identity(r.project_id), project_title: projectTitle(r.project_title) };
+    if (r.project_id === undefined && r.project_title !== undefined)
+        throw Error();
+    if (r.project_unavailable_reason !== undefined && r.project_unavailable_reason !== "project_unavailable")
+        throw Error();
+    return { id: identity(r.id), title: text(r.title, 80), status: "pending", bucket, ...when, ...project,
+        ...(r.project_unavailable_reason === undefined ? {} : { project_unavailable_reason: r.project_unavailable_reason }) };
+}
+function segment(value, bucket) {
+    const r = row(value), total = count(r.total), items = values(r.items, 8).map(v => item(v, bucket));
+    if (items.length > total || r.has_more !== (items.length < total))
+        throw Error();
+    return { total, items, has_more: r.has_more };
+}
+function titles(value, cap) {
+    const r = row(value), total = count(r.total), titles = values(r.titles, cap).map(v => text(v, 80));
+    if (titles.length > total || r.has_more !== (titles.length < total))
+        throw Error();
+    return { total, titles, has_more: r.has_more };
+}
+export function verifiedScheduleStart(value) {
+    const r = row(value);
+    if (r.timezone !== "Asia/Shanghai" || r.item_limit !== 20)
+        throw Error();
+    const overdue = segment(r.overdue, "overdue"), today = segment(r.today, "today"), undated = titles(r.undated, 3), next = titles(r.next_seven_days, 1), total = count(r.total_stored), later = count(r.later_total);
+    if (overdue.total + today.total + undated.total + next.total + later > total)
+        throw Error();
+    return { timezone: "Asia/Shanghai", as_of: timestamp(r.as_of), item_limit: 20, total_stored: total,
+        overdue, today, undated, next_seven_days: next, later_total: later };
+}

package/dist/schedule.js

@@ -0,0 +1,70 @@
+import { CliError } from "./errors.js";
+import { validateCommandArguments } from "./input-validation.js";
+import { ScheduleProblem, scheduleBody, scheduleFailure, scheduleID, scheduleInvalid, scheduleKey, scheduleQuery, scheduleReadResult, scheduleReceipt, scheduleRoot, scheduleUnknown, validScheduleRevision } from "./schedule-contract.js";
+export async function executeSchedule(args, flags, ctx) {
+    try {
+        validateCommandArguments(args, flags);
+        const operation = args[1] === "add" ? "create" : args[1] === "done" ? "complete" : args[1];
+        let path, options = { method: "GET", token: ctx.token }, key;
+        const detail = operation === "show";
+        if (operation === "list") {
+            const names = { view: "view", status: "status", "group-by": "group_by", project: "project_id", q: "q", "start-date": "start_date", "end-date": "end_date", limit: "limit", offset: "offset" };
+            const input = {};
+            for (const [name, value] of Object.entries(flags)) {
+                if (!Object.hasOwn(names, name))
+                    scheduleInvalid();
+                if (name === "limit" || name === "offset") {
+                    if (typeof value !== "string" || !/^\d+$/.test(value))
+                        scheduleInvalid();
+                    input[names[name]] = Number(value);
+                }
+                else
+                    input[names[name]] = value;
+            }
+            const query = new URLSearchParams(Object.entries(scheduleQuery(input)).map(([name, value]) => [name, String(value)])).toString();
+            path = `${scheduleRoot}/m1/schedule-items${query ? `?${query}` : ""}`;
+        }
+        else if (detail)
+            path = `${scheduleRoot}/m1/schedule-items/${scheduleID(args[2])}`;
+        else if (operation === "status") {
+            key = scheduleKey(flags["idempotency-key"]);
+            path = `${scheduleRoot}/m1/schedule-write-status`;
+            options.headers = { "Idempotency-Key": key };
+        }
+        else {
+            if (!["create", "update", "complete", "cancel", "undo"].includes(operation))
+                return scheduleInvalid();
+            key = scheduleKey(flags["idempotency-key"]);
+            const create = operation === "create";
+            const headers = { "Idempotency-Key": key };
+            if (!create) {
+                const revision = flags.revision;
+                if (typeof revision !== "string" || !/^[1-9]\d*$/.test(revision) || !validScheduleRevision(Number(revision)))
+                    scheduleInvalid();
+                headers["If-Match"] = `"${revision}"`;
+            }
+            if (typeof flags.input !== "string" || !flags.input.trim())
+                scheduleInvalid();
+            const body = scheduleBody(operation, await ctx.readInput(flags.input));
+            path = `${scheduleRoot}/m2/schedule-items${create ? "" : `/${scheduleID(args[2])}${operation === "update" ? "" : `/${operation}`}`}`;
+            options = { ...options, method: operation === "update" ? "PATCH" : "POST", body, headers };
+        }
+        let result;
+        try {
+            result = await ctx.api.request(path, options);
+        }
+        catch {
+            if (key)
+                throw scheduleUnknown(key);
+            throw new ScheduleProblem("network_error", "日程读取未完成。", "检查当前执行环境的网络；不要反复重试或重新授权。", 6);
+        }
+        if (![200, 201].includes(result.status))
+            throw scheduleFailure(result.status, result.body, operation === "list" || detail ? ["read_workbench", "read_projects"] : operation === "status" ? [] : ["write_schedule"], key);
+        return { ...result, body: key ? scheduleReceipt(result.status, result.body, key) : scheduleReadResult(result.status, result.body, detail) };
+    }
+    catch (error) {
+        if (error instanceof ScheduleProblem)
+            throw new CliError(error.code, error.humanMessage, error.nextAction, error.exitCode, error.details);
+        throw error;
+    }
+}

package/dist/setup-guidance.js

@@ -0,0 +1,40 @@
+import { productionOrigin } from "./config.js";
+import { getAgentOperations } from "./generated/agent-operations.js";
+// Match the existing closed config origins, not an arbitrary apiFactory URL.
+// This reads public metadata only; it never loads a credential or probes an API.
+function currentOrigin(input) {
+    const expected = input.environment === "production" ? productionOrigin : input.environment === "test" ? "https://test.gtcai.cn" : undefined;
+    if (!expected || typeof input.baseUrl !== "string" || input.credentialOrigin !== expected || input.baseUrl.trim() !== input.baseUrl)
+        return undefined;
+    try {
+        const url = new URL(input.baseUrl);
+        if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash || url.pathname !== "/" || url.origin !== expected)
+            return undefined;
+        return url.origin;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function setupGuidance(input) {
+    const operations = getAgentOperations(), origin = currentOrigin(input);
+    const verified = input.connectionVerified === true && origin !== undefined;
+    const name = typeof input.agentName === "string" && input.agentName.trim() === input.agentName && [...input.agentName].length >= 1 && [...input.agentName].length <= 80
+        && !/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u.test(input.agentName) ? input.agentName : undefined;
+    const scope = verified && (input.scope === "read_only" || input.scope === "read_write") ? input.scope : "unknown";
+    return {
+        schema_version: 1,
+        user_experience: { state: "unknown", basis: "not_recorded" },
+        agent_preparation: {
+            status: "required",
+            body_obtained: "unknown",
+            evidence: "not_observable_by_cli",
+            operations: { version: operations.version, sha256: operations.sha256, source: "package_generated", command: "caotang guide", manual_path: operations.manual_path },
+        },
+        presentation_reason: input.ready === true && verified ? "requested" : "not_ready",
+        identity: { verified, ...(verified && name !== undefined ? { agent_name: name } : {}), ...(origin ? { environment: input.environment, origin } : {}) },
+        permissions: { scope, account_capabilities: "unknown", effective_capabilities: "unknown" },
+        entry: { transport: "cli", skill_support: "unknown" },
+        ...(origin ? { manual_url: new URL(operations.manual_path, origin).href } : {}),
+    };
+}

package/dist/skill-assets.js

@@ -7,7 +7,7 @@ import { fileURLToPath } from "node:url";
 import { asRecord, CliError } from "./errors.js";
 // One release path allowlist, checked against the real package manifest.
 // Never use an arbitrary manifest entry as a filesystem installation target.
-export const skillNames = Object.freeze(["caotang-context", "caotang-save-knowledge", "caotang-project-progress", "caotang-search", "caotang-workday", "caotang-first-connect"]);
+export const skillNames = Object.freeze(["caotang-context", "caotang-save-knowledge", "caotang-project-progress", "caotang-search", "caotang-workday", "caotang-first-connect", "caotang-schedule"]);
 export function completeSkillInventory(names) {
     return names.length === skillNames.length && new Set(names).size === skillNames.length && names.every(name => skillNames.includes(name));
 }

package/dist/skills-export.js

@@ -0,0 +1,206 @@
+import { createHash, randomUUID } from "node:crypto";
+import { constants, closeSync, fstatSync, fsyncSync, linkSync, lstatSync, openSync, readSync, realpathSync, unlinkSync, writeFileSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, parse, relative, resolve, sep } from "node:path";
+import { asRecord, CliError } from "./errors.js";
+import { getAgentOperations } from "./generated/agent-operations.js";
+import { loadSkillAssets } from "./skill-assets.js";
+const unsafe = () => new CliError("skills_export_path_unsafe", "导出位置未通过安全检查。", "请明确指定一个新ZIP文件，父目录须已存在、属于本人且不是符号链接；不会自动创建目录、改权限或覆盖文件。", 2);
+const exists = () => new CliError("skills_export_exists", "导出目标已存在，未覆盖。", "保留原文件；请本人明确选择一个新的ZIP文件路径。", 2);
+const same = (a, b) => a.dev === b.dev && a.ino === b.ino;
+const missing = (error) => asRecord(error)?.code === "ENOENT";
+const digest = (bytes) => createHash("sha256").update(bytes).digest("hex");
+const crcTable = Uint32Array.from({ length: 256 }, (_, index) => {
+    let value = index;
+    for (let bit = 0; bit < 8; bit++)
+        value = value & 1 ? 0xedb88320 ^ (value >>> 1) : value >>> 1;
+    return value >>> 0;
+});
+function crc32(bytes) {
+    let crc = 0xffffffff;
+    for (const byte of bytes)
+        crc = crcTable[(crc ^ byte) & 0xff] ^ (crc >>> 8);
+    return (crc ^ 0xffffffff) >>> 0;
+}
+function zip(entries) {
+    if (entries.length > 32 || entries.reduce((total, entry) => total + entry.content.length, 0) > 1048576)
+        throw unsafe();
+    const local = [], central = [];
+    let offset = 0;
+    for (const entry of [...entries].sort((a, b) => a.name.localeCompare(b.name, "en"))) {
+        if (!/^(?:[a-zA-Z0-9_-]+\/)*[a-zA-Z0-9_.-]+$/.test(entry.name) || entry.name.split("/").some(part => part === "." || part === ".."))
+            throw unsafe();
+        const name = Buffer.from(entry.name, "utf8"), crc = crc32(entry.content);
+        const header = Buffer.alloc(30);
+        header.writeUInt32LE(0x04034b50);
+        header.writeUInt16LE(20, 4);
+        header.writeUInt16LE(0x0800, 6);
+        header.writeUInt16LE(0x0021, 12); // Fixed DOS 1980-01-01; no local identity/time metadata.
+        header.writeUInt32LE(crc, 14);
+        header.writeUInt32LE(entry.content.length, 18);
+        header.writeUInt32LE(entry.content.length, 22);
+        header.writeUInt16LE(name.length, 26);
+        const directory = Buffer.alloc(46);
+        directory.writeUInt32LE(0x02014b50);
+        directory.writeUInt16LE(0x0314, 4);
+        directory.writeUInt16LE(20, 6);
+        directory.writeUInt16LE(0x0800, 8);
+        directory.writeUInt16LE(0x0021, 14);
+        directory.writeUInt32LE(crc, 16);
+        directory.writeUInt32LE(entry.content.length, 20);
+        directory.writeUInt32LE(entry.content.length, 24);
+        directory.writeUInt16LE(name.length, 28);
+        directory.writeUInt32LE((0o100600 << 16) >>> 0, 38);
+        directory.writeUInt32LE(offset, 42);
+        local.push(header, name, entry.content);
+        central.push(directory, name);
+        offset += header.length + name.length + entry.content.length;
+    }
+    const directory = Buffer.concat(central), end = Buffer.alloc(22);
+    end.writeUInt32LE(0x06054b50);
+    end.writeUInt16LE(entries.length, 8);
+    end.writeUInt16LE(entries.length, 10);
+    end.writeUInt32LE(directory.length, 12);
+    end.writeUInt32LE(offset, 16);
+    return Buffer.concat([...local, directory, end]);
+}
+function outputPath(value) {
+    if (typeof value !== "string" || !value.trim() || value.length > 4096 || /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u.test(value))
+        throw unsafe();
+    const target = resolve(value);
+    if (!isAbsolute(target) || target === parse(target).root || !basename(target).toLowerCase().endsWith(".zip"))
+        throw unsafe();
+    return target;
+}
+// Public ZIP output is not restricted to HOME. All existing ancestors must be
+// real directories; only trusted root/sticky system ancestors may precede the
+// user's private final parent. No directory contents are scanned or modified.
+function checkedParent(path) {
+    if (typeof process.getuid !== "function")
+        throw unsafe();
+    const uid = process.getuid(), parent = dirname(path), root = parse(parent).root;
+    let current = root, result;
+    for (const part of [null, ...relative(root, parent).split(sep).filter(Boolean)]) {
+        if (part !== null)
+            current = join(current, part);
+        const info = lstatSync(current), final = current === parent;
+        const stickyRootAncestor = !final && info.uid === 0 && (info.mode & 0o1000) !== 0;
+        if (!info.isDirectory() || (final ? info.uid !== uid : info.uid !== uid && info.uid !== 0)
+            || (info.mode & 0o022) !== 0 && !stickyRootAncestor)
+            throw unsafe();
+        result = info;
+    }
+    if (!result || realpathSync(parent) !== parent)
+        throw unsafe();
+    return result;
+}
+function readDescriptor(fd, length) {
+    const bytes = Buffer.alloc(length);
+    let offset = 0;
+    while (offset < length) {
+        const count = readSync(fd, bytes, offset, length - offset, offset);
+        if (!count)
+            break;
+        offset += count;
+    }
+    return bytes.subarray(0, offset);
+}
+function publish(path, bytes) {
+    const parent = dirname(path), identity = checkedParent(path), original = process.cwd();
+    let fd, stagedIdentity, temporary, published = false;
+    try {
+        // Keep all operations synchronous while pinned to the verified parent inode.
+        process.chdir(parent);
+        const current = lstatSync(".");
+        if (!same(current, identity) || current.uid !== identity.uid || current.mode !== identity.mode)
+            throw unsafe();
+        const name = basename(path);
+        try {
+            lstatSync(name);
+            throw exists();
+        }
+        catch (error) {
+            if (!missing(error))
+                throw error;
+        }
+        temporary = `.caotang-skills-export-${randomUUID()}.tmp`;
+        fd = openSync(temporary, constants.O_RDWR | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+        stagedIdentity = fstatSync(fd);
+        const valid = (info, links) => info.isFile() && info.uid === identity.uid && info.nlink === links && (info.mode & 0o7777) === 0o600 && same(info, stagedIdentity);
+        if (!valid(stagedIdentity, 1) || stagedIdentity.size !== 0)
+            throw unsafe();
+        writeFileSync(fd, bytes);
+        fsyncSync(fd);
+        const written = fstatSync(fd);
+        if (!valid(written, 1) || written.size !== bytes.length || !same(written, lstatSync(temporary)) || !readDescriptor(fd, bytes.length).equals(bytes))
+            throw unsafe();
+        try {
+            linkSync(temporary, name);
+            published = true;
+        }
+        catch (error) {
+            if (asRecord(error)?.code === "EEXIST")
+                throw exists();
+            throw error;
+        }
+        if (!valid(lstatSync(name), 2) || !same(lstatSync(temporary), stagedIdentity))
+            throw unsafe();
+        unlinkSync(temporary);
+        temporary = undefined;
+        const final = lstatSync(name);
+        if (!valid(final, 1) || final.size !== bytes.length || !readDescriptor(fd, bytes.length).equals(bytes))
+            throw unsafe();
+        const after = lstatSync(".");
+        if (!same(after, identity) || after.uid !== identity.uid || after.mode !== identity.mode)
+            throw unsafe();
+        // cwd remains the old inode after a concurrent rename. Also verify the
+        // absolute location promised to the caller, including its safe ancestry.
+        const promisedParent = checkedParent(path), promisedTarget = lstatSync(path);
+        if (!same(promisedParent, identity) || promisedParent.uid !== identity.uid || promisedParent.mode !== identity.mode
+            || !valid(promisedTarget, 1) || promisedTarget.size !== bytes.length || !same(promisedTarget, final)
+            || !readDescriptor(fd, bytes.length).equals(bytes))
+            throw unsafe();
+    }
+    catch (error) {
+        if (published)
+            throw new CliError("skills_export_unconfirmed", "已创建导出目标，但最终核对未完成。", "保留现有ZIP并由本人核对文件；不要自动删除、覆盖或重新导出到同一路径。", 6);
+        if (error instanceof CliError)
+            throw error;
+        throw unsafe();
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+        if (temporary && stagedIdentity) {
+            try {
+                if (same(lstatSync(temporary), stagedIdentity))
+                    unlinkSync(temporary);
+            }
+            catch { /* Preserve an unverified pathname; never remove another inode. */ }
+        }
+        process.chdir(original);
+    }
+}
+export async function exportSkillsBundle(options) {
+    const path = outputPath(options.outputPath);
+    const assets = await loadSkillAssets(options.packageRoot);
+    if (assets.some(asset => asset.content.includes("本技能使用的 AI 名字是")))
+        throw new CliError("skills_export_source_invalid", "本包技能含绑定身份，未导出。", "只使用官方未绑定个人身份的技能包，不从已安装个人目录导出。", 7);
+    const operations = getAgentOperations();
+    const manifest = { formatVersion: 1, skills: assets.map(({ name, description }) => ({ name, description })) };
+    const entries = [
+        { name: "skills/manifest.json", content: Buffer.from(JSON.stringify(manifest, null, 2) + "\n") },
+        ...assets.map(asset => ({ name: `skills/${asset.name}/SKILL.md`, content: Buffer.from(asset.content) })),
+        { name: "operations.md", content: Buffer.from(operations.content) },
+        { name: "README.md", content: Buffer.from(`# 一间草堂官方公共技能包\n\n七项技能来自本CLI包内官方资源，未绑定个人身份；不含账号、令牌、同意或个人配置。\n公共短合同版本：${operations.version}；正文SHA256：${operations.sha256}。\n人用手册：当前服务的 ${operations.manual_path}。\n\n导出不等于安装、授权、当前会话加载或行为通过。请按目标宿主实际支持的导入方式使用，核对共享范围；不会自动上传共享库、启动Agent或改个人配置。\n能执行CLI但无Skill的入口仍可按公共说明使用完整业务能力；纯网页无外部工具的AI尚未接通。\n`) },
+    ];
+    const bytes = zip(entries);
+    try {
+        publish(path, bytes);
+    }
+    catch (error) {
+        if (error instanceof CliError)
+            throw error;
+        throw unsafe();
+    }
+    return { status: 200, body: { operation: "skills_export", output_path: path, format: "zip", compression: "store", size_bytes: bytes.length, sha256: digest(bytes), entry_count: entries.length, skill_count: assets.length, uploaded: false } };
+}

package/dist/web-citations.js

@@ -1,7 +1,7 @@
 const record = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : undefined;
 const uuid = (v) => typeof v === "string" && /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}(?![\s\S])/i.test(v);
 const publicOrigins = ["https://test.gtcai.cn", "https://caotang.gtcai.cn"];
-const gapCaps = { search_projects: "read_projects", search_knowledge: "read_knowledge", knowledge: "read_knowledge", recent_knowledge: "read_knowledge", draft_knowledge: "read_drafts", recent_projects: "read_projects", project_updates: "read_projects", draft_projects: "read_projects", project_drafts: "read_drafts", project_draft_checkins: "read_drafts", project_evidence: "read_projects", draft_project_evidence: "read_drafts", knowledge_applied_updates: "read_knowledge", draft_knowledge_applied_updates: "read_drafts", knowledge_result: "read_knowledge", draft_knowledge_result: "read_drafts", project_result: "read_projects", draft_project_result: "read_drafts" };
+const gapCaps = { search_projects: "read_projects", search_knowledge: "read_knowledge", search_schedule_items: "read_workbench", knowledge: "read_knowledge", recent_knowledge: "read_knowledge", draft_knowledge: "read_drafts", recent_projects: "read_projects", project_updates: "read_projects", draft_projects: "read_projects", project_drafts: "read_drafts", project_draft_checkins: "read_drafts", project_evidence: "read_projects", draft_project_evidence: "read_drafts", knowledge_applied_updates: "read_knowledge", draft_knowledge_applied_updates: "read_drafts", knowledge_result: "read_knowledge", draft_knowledge_result: "read_drafts", project_result: "read_projects", draft_project_result: "read_drafts" };
 function withoutURL(row) { if (!Object.hasOwn(row, "web_url"))
     return row; const { web_url: _ignored, ...data } = row; return data; }
 export function citationOrigin(api, configured) {

package/dist/work-context-human.js

@@ -0,0 +1,67 @@
+import { verifiedWorkContext } from "./work-context-wire.js";
+const row = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : undefined;
+const clean = (v, limit = 60) => {
+    if (typeof v !== "string")
+        return "";
+    const chars = [...v.replace(/[\p{Cc}\u2028\u2029\u202a-\u202e\u2066-\u2069]/gu, " ").replace(/\s+/gu, " ").trim()];
+    return chars.length > limit ? chars.slice(0, limit).join("") + "…" : chars.join("");
+};
+function unavailable(section) {
+    if (section?.status === "disabled")
+        return "未读取（没有权限）";
+    if (section?.status === "read_failed")
+        return "本次读取未完成";
+    if (section?.status === "deferred")
+        return section.reason === "budget_limited" ? "部分内容延后展示" : "本次尚未提供";
+    if (section?.status === "not_recorded")
+        return "尚未记录";
+    if (section?.status === "not_applicable")
+        return "本次不适用";
+    return "未核实";
+}
+function total(section) {
+    return (section?.status === "available" || section?.status === "empty") && typeof section.total === "number" ? String(section.total) : unavailable(section);
+}
+// Human display only. Agents retain the default complete JSON for rules and scope.
+export function workContextHuman(value) {
+    try {
+        const source = row(value), sourceContext = row(source?.context), selection = row(row(sourceContext?.current_project)?.data);
+        const selected = typeof selection?.project_id === "string" ? selection.project_id : undefined;
+        const verified = verifiedWorkContext(value, selected);
+        if (!verified)
+            return undefined;
+        const context = verified.context, overview = row(context.project_overview), projects = row(context.projects), current = row(context.current_project), counts = row(overview?.data);
+        const at = new Intl.DateTimeFormat("zh-CN", { timeZone: "Asia/Shanghai", month: "2-digit", day: "2-digit", hour: "2-digit", minute: "2-digit", hourCycle: "h23" }).format(new Date(verified.as_of));
+        const header = counts ? `可读项目 ${counts.total}，进行中 ${counts.active}，核心 ${counts.core}${counts.draft === null ? "（草稿未计入）" : ""}` : `项目：${unavailable(overview)}`;
+        const lines = [`草堂摘要 · ${at} · ${header}`];
+        const list = Array.isArray(projects?.data) ? projects.data : [];
+        if (current?.status === "available" && list.length) {
+            const project = list[0], next = row(project.next_step), step = row(next?.data);
+            lines.push(`本次：${clean(project.title)}；上次留下的下一步：${step ? clean(step.summary, 100) : "未留下明确记录"}`);
+        }
+        else if (list.length) {
+            lines.push(`核心/近期：${list.slice(0, 2).map(p => clean(p.title)).join("、")}${list.length > 2 ? `；另有 ${list.length - 2} 个候选` : ""}。`);
+        }
+        else
+            lines.push(`项目详情：${projects?.status === "empty" ? "当前可读范围内暂无项目" : unavailable(projects)}`);
+        const schedule = row(context.schedule_items), data = row(schedule?.data);
+        if (schedule?.status === "available" && data) {
+            const overdue = row(data.overdue), today = row(data.today), undated = row(data.undated);
+            const urgent = [...overdue.items, ...today.items].slice(0, 3).map(p => clean(p.title, 40));
+            lines.push(`待办：今日 ${today.total}，逾期 ${overdue.total}，未定日期 ${undated.total}${urgent.length ? `；优先：${urgent.join("、")}` : ""}`);
+        }
+        else
+            lines.push(`待办：${unavailable(schedule)}`);
+        const rules = row(context.rules), pending = row(context.pending), notices = row(context.official_notices), noticeData = row(notices?.data);
+        lines.push(`待确认：${total(pending)}${typeof pending?.total === "number" ? " 项（网页核对）" : ""}；规矩：${total(rules)}${typeof rules?.total === "number" ? " 条（原文见 JSON）" : ""}；通知：${noticeData ? noticeData.unread_count : unavailable(notices)}`);
+        const connections = row(context.recent_connections), reminders = row(context.conditional_reminders);
+        const connectionText = connections?.status === "available" || connections?.status === "empty" ? `${connections.total} 条近期记录` : unavailable(connections);
+        const reminderData = row(reminders?.data);
+        const reminderText = reminderData ? `项目 ${total(row(reminderData.projects))}，知识 ${total(row(reminderData.knowledge))}` : unavailable(reminders);
+        lines.push(`协作：${connectionText}；整理提示：${reminderText}。完整内容可去掉 --human 查看。`);
+        return lines.join("\n");
+    }
+    catch {
+        return undefined;
+    }
+}