@yijiancaotang/cli 1.1.0 → 1.2.1

package/dist/installation.js

@@ -4,11 +4,12 @@ import { createHash } from "node:crypto";
 import { basename, delimiter, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { CliError, asRecord } from "./errors.js";
-import { PLATFORM_IDS, isPlatformId, platformSupported } from "./local-types.js";
+import { PLATFORM_IDS, isSkillTargetId, platformSupported } from "./local-types.js";
 import { bindSkillAgent, completeSkillInventory } from "./skill-assets.js";
 import { acquireLocalLock } from "./local-lock.js";
 import { LEGACY_MANAGED_SKILLS } from "./managed-skill-baseline.js";
-import { REVIEWED_MANAGED_BUNDLE_1_1_0 } from "./reviewed-managed-bundle-baseline.js";
+import { REVIEWED_MANAGED_BUNDLE_1_1_0, REVIEWED_NPM_MANAGED_BUNDLE_1_1_0, REVIEWED_NPM_MANAGED_BUNDLE_1_2_0 } from "./reviewed-managed-bundle-baseline.js";
+const reviewedManagedBundles = [REVIEWED_MANAGED_BUNDLE_1_1_0, REVIEWED_NPM_MANAGED_BUNDLE_1_1_0, REVIEWED_NPM_MANAGED_BUNDLE_1_2_0];
 const same = (a, b) => a.dev === b.dev && a.ino === b.ino;
 const missing = (error) => asRecord(error)?.code === "ENOENT";
 const unsafe = () => new CliError("installation_unsafe", "本地安装位置未通过安全检查。", "请人工检查属主、权限、符号链接与目标目录；不要自动删除、覆盖或修改凭据。");
@@ -338,16 +339,35 @@ async function bundle(ctx, tree) {
     if (!(await lstat(dist)).isDirectory() || await realpath(dist) !== dist)
         throw sourceInvalid();
     const modules = (await readdir(dist)).filter(name => name.endsWith(".js")).sort();
-    // The shipped runtime has one nested generated dependency. Keep the 64-file
-    // JS limit across both categories; do not recursively trust dist subtrees.
-    if (!modules.includes("cli.js") || modules.length + 1 > 64)
+    // Only reviewed generated dependencies may enter a stable runtime bundle.
+    // Old fixtures/releases with no operations import retain the original closure.
+    if (!modules.includes("cli.js"))
         throw sourceInvalid();
     for (const name of modules) {
         if (!/^[a-z][a-z0-9-]*\.js$/.test(name))
             throw sourceInvalid();
         files.push({ path: `dist/${name}`, bytes: await readSource(join(dist, name)), mode: 0o600 });
     }
-    files.push({ path: "dist/generated/knowledge-growth.js", bytes: await readSource(join(dist, "generated", "knowledge-growth.js")), mode: 0o600 });
+    const generatedModules = ["knowledge-growth.js"];
+    const operationsPath = join(dist, "generated", "agent-operations.js");
+    let hasOperations = false;
+    try {
+        await lstat(operationsPath);
+        hasOperations = true;
+    }
+    catch (error) {
+        if (!missing(error))
+            throw sourceInvalid();
+    }
+    const requiresOperations = files.some(file => file.path.startsWith("dist/") && file.bytes.toString("utf8").includes("generated/agent-operations.js"));
+    if (requiresOperations && !hasOperations)
+        throw sourceInvalid();
+    if (hasOperations)
+        generatedModules.push("agent-operations.js");
+    if (modules.length + generatedModules.length > 64)
+        throw sourceInvalid();
+    for (const name of generatedModules)
+        files.push({ path: `dist/generated/${name}`, bytes: await readSource(join(dist, "generated", name)), mode: 0o600 });
     files.push({ path: "skills/manifest.json", bytes: Buffer.from(JSON.stringify({ formatVersion: 1, skills: ctx.assets.map(({ name, description }) => ({ name, description })) })), mode: 0o600 });
     for (const asset of ctx.assets)
         files.push({ path: `skills/${asset.name}/SKILL.md`, bytes: Buffer.from(asset.content), mode: 0o600 });
@@ -362,10 +382,10 @@ async function bundle(ctx, tree) {
     return { files, sha, directory, command, shim, version: info.version };
 }
 function validateTargets(ctx, tree) {
-    if (ctx.targets.length > PLATFORM_IDS.length || new Set(ctx.targets.map(target => target.id)).size !== ctx.targets.length)
+    if (ctx.targets.length > PLATFORM_IDS.length + 1 || new Set(ctx.targets.map(target => target.id)).size !== ctx.targets.length)
         throw unsafe();
     for (const target of ctx.targets) {
-        if (!isPlatformId(target.id) || !platformSupported(target.id, ctx.operatingSystem) || !isAbsolute(target.skillDirectory) || tree.within(target.skillDirectory) === tree.home)
+        if (!isSkillTargetId(target.id) || target.id !== "generic" && !platformSupported(target.id, ctx.operatingSystem) || !isAbsolute(target.skillDirectory) || tree.within(target.skillDirectory) === tree.home)
             throw unsafe();
     }
 }
@@ -420,10 +440,10 @@ async function onPath(command, env) {
     }
     return false;
 }
-// The fixed 1.1.0 baseline is admitted only after its complete public runtime
-// inventory verifies. Never infer provenance from a version or receipt.
-async function reviewedV110Bundle(tree, value) {
-    const pin = REVIEWED_MANAGED_BUNDLE_1_1_0, directory = join(tree.home, ".caotang", "cli", "releases", pin.sha);
+// Each fixed baseline is admitted only after its own complete public runtime
+// inventory verifies. Never combine files across pins or trust a version/receipt.
+async function reviewedBundle(tree, value, pin) {
+    const directory = join(tree.home, ".caotang", "cli", "releases", pin.sha);
     const children = new Map([["", new Set()]]);
     for (const file of pin.files) {
         const parts = file.path.split("/");
@@ -463,7 +483,7 @@ async function reviewedV110Bundle(tree, value) {
 // Keep the reviewed 1.0.0 six-skill baseline unchanged. A directory digest alone
 // cannot authorize replacing somebody's same-name skill.
 async function legacyBundles(ctx, tree, value) {
-    if (!["1.0.1", "1.1.0"].includes(value.version) || ctx.agentName === undefined)
+    if (!["1.0.1", "1.1.0", "1.1.1", "1.2.0", "1.2.1"].includes(value.version) || ctx.agentName === undefined)
         return [];
     const releases = join(tree.home, ".caotang", "cli", "releases"), entries = await tree.list(releases) ?? [];
     if (entries.length > 128)
@@ -512,8 +532,11 @@ async function legacyBundles(ctx, tree, value) {
             throw conflict();
         found.push({ bundle: { files, sha, version: "1.0.0", directory, command: value.command, shim: managedShim(directory) }, assets });
     }
-    if (value.version === "1.1.0" && value.sha !== REVIEWED_MANAGED_BUNDLE_1_1_0.sha && entries.includes(REVIEWED_MANAGED_BUNDLE_1_1_0.sha))
-        found.push(await reviewedV110Bundle(tree, value));
+    if (["1.1.0", "1.1.1", "1.2.0", "1.2.1"].includes(value.version)) {
+        for (const pin of reviewedManagedBundles)
+            if (value.sha !== pin.sha && entries.includes(pin.sha))
+                found.push(await reviewedBundle(tree, value, pin));
+    }
     return found;
 }
 async function installPlan(ctx, tree, value) {
@@ -708,7 +731,7 @@ export async function inspectLocalInstallation(ctx) {
             }
             skills.push({ name: asset.name, status });
             if (target.detected && status !== "installed")
-                issue(status === "missing" ? "skill_missing" : status === "modified" ? "skill_modified" : "skill_unsafe", "本地技能缺失、已修改或不满足安全要求。", status === "missing" ? `运行 setup --platform ${target.id} 安装缺失技能。` : "保留现有技能并人工核对，不自动覆盖或修复。");
+                issue(status === "missing" ? "skill_missing" : status === "modified" ? "skill_modified" : "skill_unsafe", "本地技能缺失、已修改或不满足安全要求。", status === "missing" ? (target.id === "generic" ? "保留本次 --skills-dir 的明确目录再运行 setup；不会猜测其他技能位置。" : `运行 setup --platform ${target.id} 安装缺失技能。`) : "保留现有技能并人工核对，不自动覆盖或修复。");
         }
         platforms.push({ id: target.id, detected: target.detected, skill_directory: target.skillDirectory, skills });
     }

package/dist/local-commands.js

@@ -1,18 +1,19 @@
 import { shellWord } from "./agent-identity.js";
 import { constants } from "node:fs";
 import { open } from "node:fs/promises";
-import { join } from "node:path";
+import { isAbsolute, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { authLogin } from "./auth.js";
 import { doctor } from "./doctor.js";
 import { CliError, asRecord } from "./errors.js";
 import { inspectLocalInstallation, inspectManagedOrigins, installLocal } from "./installation.js";
 import { isPlatformId, platformSupported } from "./local-types.js";
-import { detectPlatforms, knownSkillTargets } from "./platforms.js";
+import { detectPlatforms, explicitSkillsTarget, knownSkillTargets } from "./platforms.js";
 import { loadSkillAssets } from "./skill-assets.js";
 import { LocalRecords } from "./local-records.js";
 import { defaultConnectionNames, inspectAccountState, onboardingMessage } from "./onboarding.js";
 import { connectionCopy, setupFailureMessage } from "./connection-copy.js";
+import { setupGuidance } from "./setup-guidance.js";
 const root = () => fileURLToPath(new URL("../", import.meta.url));
 const invalid = () => new CliError("invalid_arguments", "命令或参数无效。", "运行 --help；平台支持claude-code、codex、openclaw，以及仅macOS支持的kimi-code、kimi-work和workbuddy。");
 export function selectedPlatforms(value, operatingSystem = process.platform) {
@@ -27,6 +28,15 @@ export function selectedPlatforms(value, operatingSystem = process.platform) {
         throw new CliError("platform_unsupported", "所选新增平台尚不支持当前系统。", "kimi-code、kimi-work和workbuddy仅支持macOS本机安装；不要套用或猜测其它系统的技能目录。");
     return values;
 }
+export function selectedSkillsDirectory(flags) {
+    const value = flags["skills-dir"];
+    if (value === undefined)
+        return undefined;
+    if (flags.platform !== undefined || typeof value !== "string" || !value.trim() || !isAbsolute(value)
+        || /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u.test(value))
+        throw new CliError("invalid_arguments", "--skills-dir须为明确的绝对父目录，且不能与--platform同时使用。", "指定七项技能子目录的共同父目录；不提供配置内容，不以此绑定项目。", 2);
+    return value;
+}
 export async function localVersion(packageRoot = root()) {
     const failed = () => new CliError("version_unavailable", "无法核对当前命令行版本。", "请使用完整的一间草堂命令行构建；不要运行不明升级脚本。", 7);
     try {
@@ -68,8 +78,19 @@ function connectionTimeInBeijing(value) {
     return `${fields.year}-${fields.month}-${fields.day} ${fields.hour}:${fields.minute}`;
 }
 const recordsFor = (ctx) => ctx.agent ? new LocalRecords(ctx.homeDir, ctx.agent, ctx.auth.environment ?? "production", new URL(ctx.auth.api.baseUrl).origin) : undefined;
-async function targetsFor(ctx, ids, setup, assets, recorded) {
+async function targetsFor(ctx, ids, setup, assets, recorded, skillsDirectory) {
     const inspect = (targets) => inspectManagedOrigins({ ...ctx, agentName: ctx.agent?.key, assets, targets });
+    if (skillsDirectory !== undefined) {
+        const target = await explicitSkillsTarget({ homeDir: ctx.homeDir, skillsDirectory });
+        return { targets: [target], origins: await inspect([target]) };
+    }
+    if (ids === undefined && recorded.some(target => target.id === "generic")) {
+        if (recorded.length !== 1)
+            throw new CliError("skill_target_ambiguous", "这个名字记录了多个技能目录，未自动选择。", "请保留本次明确的--skills-dir或--platform参数；不会批量更新不同工作区。", 2);
+        const target = await explicitSkillsTarget({ homeDir: ctx.homeDir, skillsDirectory: recorded[0].skillDirectory });
+        return { targets: [target], origins: await inspect([target]) };
+    }
+    recorded = recorded.filter(target => isPlatformId(target.id));
     if (ctx.agent) {
         if (ids && ids.length !== 1)
             throw new CliError("invalid_arguments", "每次接入只给一个 AI 平台安装技能。", "请带自己的 --agent 名字，一次只选一个 --platform；其它 AI 分别接入。");
@@ -80,13 +101,13 @@ async function targetsFor(ctx, ids, setup, assets, recorded) {
             if (own.length > 0 || !ctx.agent.platform)
                 return { targets: own, origins };
         }
-        ids = ids ?? (recorded.length ? recorded.map(target => target.id) : ctx.agent.platform ? [ctx.agent.platform] : []);
+        ids = ids ?? (recorded.length ? recorded.map(target => target.id).filter(isPlatformId) : ctx.agent.platform ? [ctx.agent.platform] : []);
     }
     const redirected = (id) => id === "claude-code" ? ctx.env.CLAUDE_CONFIG_DIR !== undefined
         : id === "openclaw" ? ctx.env.OPENCLAW_STATE_DIR !== undefined || ctx.env.OPENCLAW_HOME !== undefined
             : id === "kimi-code" && ctx.env.KIMI_CODE_HOME !== undefined;
-    const preferred = recorded.filter(target => (!ids || ids.includes(target.id)) && !redirected(target.id));
-    if (preferred.some(target => !platformSupported(target.id, ctx.operatingSystem)))
+    const preferred = recorded.filter(target => isPlatformId(target.id) && (!ids || ids.includes(target.id)) && !redirected(target.id));
+    if (preferred.some(target => isPlatformId(target.id) && !platformSupported(target.id, ctx.operatingSystem)))
         throw new CliError("platform_unsupported", "已记录的技能平台不支持当前系统。", "请在原支持的系统上检查该平台；不会猜测新目录或搬动技能。", 2);
     const discoveryIds = ids?.filter(id => !preferred.some(target => target.id === id));
     // A recorded custom target must not cause inspection of an unrelated default
@@ -100,15 +121,16 @@ async function targetsFor(ctx, ids, setup, assets, recorded) {
             target.evidence = "skills";
         }
     }
-    return { targets: ids ? all.filter(target => ids.includes(target.id)) : setup ? all.filter(target => target.detected) : all, origins };
+    return { targets: ids ? all.filter(target => isPlatformId(target.id) && ids.includes(target.id)) : setup ? all.filter(target => target.detected) : all, origins };
 }
 export async function localDoctor(ctx, flags, authFailure) {
+    const skillsDirectory = selectedSkillsDirectory(flags);
     return doctor({
         auth: ctx.auth, authFailure, agent: ctx.agent,
         inspectLocal: async () => {
             const assets = await loadSkillAssets(ctx.packageRoot ?? root());
-            const recorded = await recordsFor(ctx)?.targets() ?? [];
-            const selection = await targetsFor(ctx, selectedPlatforms(flags.platform, ctx.operatingSystem), false, assets, recorded);
+            const recorded = skillsDirectory === undefined ? await recordsFor(ctx)?.targets() ?? [] : [];
+            const selection = await targetsFor(ctx, selectedPlatforms(flags.platform, ctx.operatingSystem), false, assets, recorded, skillsDirectory);
             const inspected = await inspectLocalInstallation({ ...ctx, agentName: ctx.agent?.key, assets, targets: selection.targets });
             const platforms = inspected.platforms.map(platform => {
                 const origin = selection.origins.platforms.find(origin => origin.id === platform.id && origin.skill_directory === platform.skill_directory);
@@ -123,15 +145,16 @@ export async function localDoctor(ctx, flags, authFailure) {
                         issues.splice(index, 1);
                 issues.push({ code: "command_outdated", message: "已核对为旧版受管命令行，需要更新。", next_action: "沿用原来的名字运行 npx @yijiancaotang/cli@latest setup --agent <你的名字> 更新，不需要重新批准连接。" });
             }
-            const skillPlatforms = selection.targets.filter(target => recorded.some(record => record.id === target.id)
+            const skillPlatforms = selection.targets.filter(target => recorded.some(record => record.id === target.id && record.skillDirectory === target.skillDirectory)
                 || selection.origins.platforms.some(origin => origin.id === target.id && origin.skill_directory === target.skillDirectory && origin.ownKnownCount > 0)).map(target => target.id);
             return { ...inspected, command, platforms, issues, skill_platforms: skillPlatforms };
         },
     });
 }
 export async function localSetup(ctx, flags) {
-    const records = recordsFor(ctx), recorded = await records?.targets() ?? [];
-    const assets = await loadSkillAssets(ctx.packageRoot ?? root()), { targets } = await targetsFor(ctx, selectedPlatforms(flags.platform, ctx.operatingSystem), true, assets, recorded);
+    const skillsDirectory = selectedSkillsDirectory(flags);
+    const records = recordsFor(ctx), recorded = skillsDirectory === undefined ? await records?.targets() ?? [] : [];
+    const assets = await loadSkillAssets(ctx.packageRoot ?? root()), { targets } = await targetsFor(ctx, selectedPlatforms(flags.platform, ctx.operatingSystem), true, assets, recorded, skillsDirectory);
     const local = { ...ctx, agentName: ctx.agent?.key, assets, targets };
     const installed = await installLocal(local);
     await records?.rememberInstallation(targets, assets, installed.bundleSha);
@@ -224,6 +247,7 @@ export async function localSetup(ctx, flags) {
     } : {};
     return { exitCode: report.exitCode, result: { status: 200, body: { ...body, operation: "setup", local_installation: { changed: installed.changed, bundle_sha: installed.bundleSha }, authorization_attempted: authorizationAttempted,
                 new_authorization_confirmed: confirmed, ...(confirmed ? { new_authorization_owner_id: newAuthorizationOwner } : {}), reused_existing: reused, ...connection, ...greeting, ...onboardingCopy, ...reuseCopy,
-                ...(ctx.agent && !targets.length ? { generic_usage: { message: "暂未定位到这个名字的专用技能；若曾使用自定义目录，请保留原目录参数再检查。仍可按下列命令使用自己的连接。", commands: ["doctor", "context --start", "projects", "knowledge", "search", "auth status"].map(command => `caotang --agent ${shellWord(ctx.agent.name)} ${command}`) } } : {}),
-                ...(body.ready === true ? { next_conversation: "请开新对话说‘开工了’。" } : {}) } } };
+                guidance: setupGuidance({ ready: body.ready === true, connectionVerified: Boolean(sameConnection), agentName: ctx.agent?.name, environment: ctx.auth.environment, baseUrl: ctx.auth.api.baseUrl, credentialOrigin: ctx.auth.store.origin, scope: checkedIdentity?.scope }),
+                ...(ctx.agent && !targets.length ? { generic_usage: { message: "暂未定位到这个名字的专用技能；若曾使用自定义目录，请保留原目录参数再检查。仍可按下列命令使用自己的连接；context --handoff接手需服务端支持新协议，仅本人明确开工才用context --start。", commands: ["doctor", "context --handoff", "projects", "knowledge", "search", "auth status"].map(command => `caotang --agent ${shellWord(ctx.agent.name)} ${command}`) } } : {}),
+                ...(body.ready === true ? { next_conversation: "可以直接说‘看看草堂里的某个项目’；无需固定口令。" } : {}) } } };
 }

package/dist/local-records.js

@@ -2,7 +2,7 @@ import { createHash } from "node:crypto";
 import { join, relative, resolve, sep, isAbsolute } from "node:path";
 import { asRecord, CliError } from "./errors.js";
 import { OwnedTree } from "./installation.js";
-import { isPlatformId } from "./local-types.js";
+import { isSkillTargetId } from "./local-types.js";
 import { bindSkillAgent, completeSkillInventory } from "./skill-assets.js";
 const unsafe = () => new CliError("local_record_unsafe", "本机连接说明或技能安装记录未通过核对。", "保留现有连接和文件，先由本人核对本机记录；不要重新批准、覆盖或删除。", 7);
 const digest = (value) => createHash("sha256").update(value).digest("hex");
@@ -94,7 +94,7 @@ export class LocalRecords {
                 throw unsafe();
             const value = await this.read(join(this.skillDirectory, name));
             if (!value || !keys(value, ["version", "agent_key", "platform", "skill_directory", "bundle_sha", "skills"]) || value.version !== 1 || value.agent_key !== this.agent.key
-                || typeof value.platform !== "string" || !isPlatformId(value.platform) || !hash(value.bundle_sha) || !Array.isArray(value.skills)
+                || typeof value.platform !== "string" || !isSkillTargetId(value.platform) || !hash(value.bundle_sha) || !Array.isArray(value.skills)
                 || !value.skills.every(item => { const entry = asRecord(item); return entry && keys(entry, ["name", "sha256"]) && typeof entry.name === "string" && hash(entry.sha256); })
                 || !completeSkillInventory(value.skills.map(item => item.name)) || name !== `${value.platform}.${digest(JSON.stringify(value))}.json`)
                 throw unsafe();
@@ -108,10 +108,11 @@ export class LocalRecords {
             // A retained receipt cannot make a removed directory appear installed.
             // Keep the target so the ordinary inspector reports its missing skills.
             const target = { id: value.platform, skillDirectory, detected: true, evidence: "skills" };
-            const previous = targets.get(target.id);
+            const key = target.id === "generic" ? `${target.id}\0${target.skillDirectory}` : target.id;
+            const previous = targets.get(key);
             if (previous && previous.skillDirectory !== target.skillDirectory)
                 throw unsafe();
-            targets.set(target.id, target);
+            targets.set(key, target);
         }
         return [...targets.values()];
     }

package/dist/local-types.js

@@ -1,3 +1,4 @@
 export const PLATFORM_IDS = ["claude-code", "codex", "openclaw", "kimi-code", "kimi-work", "workbuddy"];
+export const isSkillTargetId = (value) => value === "generic" || isPlatformId(value);
 export const isPlatformId = (value) => PLATFORM_IDS.some(id => id === value);
 export const platformSupported = (id, operatingSystem = process.platform) => operatingSystem === "darwin" || (id !== "kimi-code" && id !== "kimi-work" && id !== "workbuddy");

package/dist/onboarding.js

@@ -1,10 +1,8 @@
 import { hostname } from "node:os";
-import { resolveCredential } from "./auth.js";
-import { verifiedHabit } from "./habit-wire.js";
 import { connectionCopy } from "./connection-copy.js";
 export const platformNames = {
     "claude-code": "Claude Code", codex: "Codex", openclaw: "OpenClaw",
-    "kimi-code": "Kimi Code", "kimi-work": "Kimi 工作模式", workbuddy: "WorkBuddy",
+    "kimi-code": "Kimi Code", "kimi-work": "Kimi 工作模式", workbuddy: "WorkBuddy", generic: "通用技能目录",
 };
 export function defaultConnectionNames(platforms, computerName = hostname(), agentName) {
     if (agentName !== undefined)
@@ -17,22 +15,8 @@ export function defaultConnectionNames(platforms, computerName = hostname(), age
         && !/^(?:[a-f\d-]{12,}|ip-\d|localhost$|runner|docker|container|sandbox|codespace|pod-)/i.test(name);
     return { clientName, deviceName: reliable ? `${clientName} · ${name}` : clientName };
 }
-export async function inspectAccountState(auth, owner) {
-    if (!/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(owner))
-        return "unknown";
-    try {
-        const credential = await resolveCredential(auth);
-        const result = await auth.api.request("/api/v1/agent/m1/habit/start", { method: "GET", token: credential.token, signal: auth.signal });
-        if (result.status !== 200)
-            return "unknown";
-        const body = verifiedHabit(result.body, true);
-        if (body?.owner_id !== owner)
-            return "unknown";
-        return body.account_empty === true ? "empty" : body.account_empty === false ? "has_content" : "unknown";
-    }
-    catch {
-        return "unknown";
-    }
+export async function inspectAccountState(_auth, _owner) {
+    return "unknown";
 }
 export function onboardingMessage(newlyConnected, state, scope) {
     const action = newlyConnected.length === 0 ? "none" : state === "empty" ? "introduce" : "ask_once";
@@ -43,6 +27,6 @@ export function onboardingMessage(newlyConnected, state, scope) {
         account_state: state,
         onboarding: { action, newly_connected_platforms: newlyConnected },
         user_message: message,
-        skill_activation: newlyConnected.map(platform => ({ platform, message: platform === "codex" || platform === "claude-code" ? "新对话可以加载本次安装的技能。" : "如果看不到技能，请开新对话或重启应用；本次没有自动重启。" })),
+        skill_activation: newlyConnected.map(platform => ({ platform, message: "技能安装不代表当前 AI 已取得说明正文；请按宿主支持的方式加载，或运行 caotang guide 获取公共说明。" })),
     };
 }

package/dist/output.js

@@ -1,3 +1,4 @@
+import { workContextHuman } from "./work-context-human.js";
 import { asRecord, CliError } from "./errors.js";
 import { formatMissingSections } from "./missing-sections.js";
 import { projectedWriteCompleted } from "./write-permissions.js";
@@ -24,6 +25,9 @@ export function redact(value, secrets, depth = 0) {
 }
 export function renderResult(result, human, secrets) {
     const data = redact({ http_status: result.status, data: result.body, ...(result.operationAudit?.length ? { operation_audit: result.operationAudit } : {}) }, secrets);
+    const summary = human ? workContextHuman(asRecord(data)?.data) : undefined;
+    if (summary !== undefined)
+        return summary + "\n";
     const missing = human ? formatMissingSections(asRecord(data)?.data) : "";
     const writeNotice = human && projectedWriteCompleted(result) ? "写入已完成；以下内容因读取权限未开启而没有返回，不是写入失败。\n" : "";
     const body = asRecord(result.body);

package/dist/platforms.js

@@ -2,6 +2,7 @@ import { constants } from "node:fs";
 import { access, lstat, readdir, realpath, stat } from "node:fs/promises";
 import { delimiter, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { asRecord, CliError } from "./errors.js";
+import { OwnedTree } from "./installation.js";
 import { PLATFORM_IDS, platformSupported } from "./local-types.js";
 const unsafe = () => new CliError("platform_path_unsafe", "平台目录未通过安全检查。", "请使用用户目录内的绝对路径，并检查目录和符号链接；不要提供目录中的配置内容。");
 const metadataError = (error) => {
@@ -88,6 +89,23 @@ async function skillDirectory(home, canonicalHome, root) {
     }
     return target;
 }
+// An explicit parent directory is a target, never a request to scan a host or
+// append another "skills" component. Current managed writes retain HOME's fence.
+export async function explicitSkillsTarget(options) {
+    const failure = () => new CliError("platform_path_unsafe", "通用技能目录未通过安全检查。", "当前受管安装仅支持本人用户目录内的真实绝对路径；共享或远程位置可先离线导出技能ZIP，再按宿主正式入口导入，不会放宽属主或链接保护。", 2);
+    if (!absolute(options.homeDir) || !absolute(options.skillsDirectory))
+        throw failure();
+    const home = resolve(options.homeDir), path = resolve(options.skillsDirectory);
+    if (path === home || !within(home, path))
+        throw failure();
+    try {
+        await new OwnedTree(home).directory(path, false, async () => true);
+    }
+    catch {
+        throw failure();
+    }
+    return { id: "generic", detected: true, evidence: "explicit", skillDirectory: path };
+}
 function configuredSkillRoot(home, env, id) {
     switch (id) {
         case "claude-code": return env.CLAUDE_CONFIG_DIR ?? join(home, ".claude");

package/dist/project-binding-cli.js

@@ -0,0 +1,110 @@
+import { authStatus } from "./auth.js";
+import { asRecord, CliError } from "./errors.js";
+import { previewProjectBinding, confirmProjectBinding, readProjectBinding, unbindProjectBinding } from "./project-binding.js";
+export function isProjectBindingCommand(command) { return command[0] === "project" && ["bind", "binding", "unbind"].includes(command[1]); }
+function operation(command, flags) { return command[1] === "bind" ? flags.confirm === undefined ? "project_bind_preview" : "project_bind" : command[1] === "unbind" ? flags.confirm === undefined ? "project_unbind_preview" : "project_unbind" : "project_binding"; }
+export function projectBindingLocalScopeOutcome(command, flags) {
+    if (!isProjectBindingCommand(command) || flags["local-workspace"] === true || command[1] === "bind" && flags.confirm === undefined)
+        return;
+    return { result: { status: 200, body: { schema_version: 1, operation: operation(command, flags), status: "local_scope_required", reason: "independent_local_workspace_not_confirmed" } }, exitCode: 2 };
+}
+function serviceOrigin(value) {
+    try {
+        const url = new URL(value);
+        if (typeof value !== "string" || value.trim() !== value || url.username || url.password || url.search || url.hash || url.pathname !== "/" || url.protocol !== "https:" && !(url.protocol === "http:" && ["127.0.0.1", "localhost", "[::1]"].includes(url.hostname)))
+            throw Error();
+        return url.origin;
+    }
+    catch {
+        throw new CliError("project_binding_origin_unverified", "当前关联操作的服务地址未通过核对。", "保留当前账号和本机元数据，先核对实际服务；不要借环境标签使用另一服务的关联。", 7);
+    }
+}
+const identityError = () => new CliError("invalid_auth_response", "无法核对本次关联操作的账号身份。", "先核对当前连接，不读取旧关联或自动切换账号。", 7);
+const cancelled = (auth) => { if (auth.signal?.aborted)
+    throw new CliError("authorization_cancelled", "本次关联操作已取消。", "需要时重新查看本机预览，不自动确认或重写。", 130); };
+// The caller selects the credential once. Flags carry an already-obtained human
+// decision; neither a flag nor a digest is proof that the human consented.
+export async function createVerifiedProjectBindingConnection(auth, selectedToken, options) {
+    cancelled(auth);
+    const origin = serviceOrigin(auth.api.baseUrl);
+    if (auth.store.origin !== origin || options.expectedOrigin !== undefined && serviceOrigin(options.expectedOrigin) !== origin)
+        throw identityError();
+    const who = asRecord((await authStatus({ ...auth, tokenOverride: selectedToken })).body);
+    if (!who || who.status !== "authenticated" || typeof who.user_id !== "string" || !/^[A-Za-z0-9_-]{1,128}$/.test(who.user_id) || serviceOrigin(auth.api.baseUrl) !== origin || auth.store.origin !== origin)
+        throw identityError();
+    const owner = who.user_id;
+    let validation;
+    const context = {
+        homeDir: options.homeDir, cwd: options.cwd, apiBaseUrl: origin, serviceBase: "/api/v1/agent", verifiedOwnerId: owner, localScopeConfirmed: options.localScopeConfirmed === true,
+        async readProject(id) {
+            cancelled(auth);
+            if (serviceOrigin(auth.api.baseUrl) !== origin || auth.store.origin !== origin)
+                throw identityError();
+            let response;
+            try {
+                response = await auth.api.request(`/api/v1/agent/m1/projects/${encodeURIComponent(id)}`, { method: "GET", token: selectedToken, signal: auth.signal });
+            }
+            catch {
+                validation = { reason: auth.signal?.aborted ? "cancelled" : "transport_unavailable" };
+                throw new CliError("project_binding_target_unverified", "未核实关联目标。", "保留本机元数据，不自动确认或重试。", auth.signal?.aborted ? 130 : 7);
+            }
+            cancelled(auth);
+            if (response.status === 403 || response.status === 404) {
+                validation = { reason: response.status === 403 ? "permission_denied" : "not_found_or_unreadable", http_status: response.status };
+                return null;
+            }
+            if (response.status !== 200) {
+                validation = { reason: response.status === 401 ? "authorization_unverified" : response.status >= 500 ? "server_unavailable" : "project_response_unverified", http_status: response.status };
+                throw new CliError("project_binding_target_unverified", "未核实关联目标。", "保留本机元数据，不自动确认、重试或扩大读取。", response.status === 401 ? 3 : 7);
+            }
+            const body = asRecord(response.body), project = asRecord(body?.project);
+            // This existing endpoint reads the one necessary project context, not a
+            // zero-content metadata API. Binding never receives summary/updates/cards.
+            if (!body || Object.hasOwn(body, "code") || Object.hasOwn(body, "error") || !project || project.owner_id !== owner || typeof project.id !== "string" || project.id.toLowerCase() !== id.toLowerCase() || typeof project.title !== "string" || typeof project.status !== "string" || serviceOrigin(auth.api.baseUrl) !== origin || auth.store.origin !== origin) {
+                validation = { reason: "project_owner_or_metadata_unverified", http_status: 200 };
+                throw new CliError("project_binding_target_unverified", "未核实关联目标的归属或元数据。", "保留本机元数据，不根据旧项目名称猜测或确认。", 7);
+            }
+            return { id: project.id, title: project.title, status: project.status };
+        },
+    };
+    return { context, projectCheck: () => validation };
+}
+function outcomeExit(body, check) {
+    if (["bound", "unbound", "not_bound", "confirmation_required"].includes(body.status))
+        return 0;
+    if (check?.reason === "cancelled")
+        return 130;
+    if (check?.http_status === 401)
+        return 3;
+    if (check?.http_status === 403)
+        return 4;
+    if (body.status === "unknown")
+        return body.reason === "project_binding_update_unknown" || body.reason === "project_binding_busy" ? 6 : 7;
+    return 2;
+}
+export async function executeProjectBindingCLI(command, flags, options) {
+    const scope = projectBindingLocalScopeOutcome(command, flags);
+    if (scope)
+        return scope;
+    let connection;
+    try {
+        connection = await createVerifiedProjectBindingConnection(options.auth, options.token, options);
+    }
+    catch (error) {
+        const known = error instanceof CliError ? error : undefined;
+        const http = asRecord(known?.details)?.http_status;
+        return { result: { status: 200, body: { schema_version: 1, operation: operation(command, flags), status: "unknown", reason: "identity_validation_unavailable", identity_check: { reason: known?.code === "unauthorized" ? "authorization_unverified" : known?.code === "project_binding_origin_unverified" ? "service_origin_unverified" : known?.exitCode === 130 ? "cancelled" : "identity_unverified", ...(typeof http === "number" ? { http_status: http } : {}) } } }, exitCode: known?.exitCode === 130 ? 130 : known?.code === "unauthorized" ? 3 : known?.exitCode === 4 ? 4 : 7 };
+    }
+    cancelled(options.auth);
+    let body;
+    if (command[1] === "bind") {
+        const binding = { projectId: command[2], includeSubdirs: flags["include-subdirs"] === true };
+        body = flags.confirm === undefined ? await previewProjectBinding(connection.context, binding) : await confirmProjectBinding(connection.context, { ...binding, previewDigest: String(flags.confirm), localScopeConfirmed: true });
+    }
+    else if (command[1] === "binding")
+        body = await readProjectBinding(connection.context);
+    else
+        body = await unbindProjectBinding(connection.context, { ...(flags.confirm === undefined ? {} : { previewDigest: String(flags.confirm), localScopeConfirmed: true }) });
+    const check = connection.projectCheck();
+    return { result: { status: 200, body: { ...body, ...(check ? { project_check: check } : {}) } }, exitCode: outcomeExit(body, check) };
+}