@zhin.js/adapter-github 1.1.0 → 1.1.3

package/CHANGELOG.md

@@ -1,5 +1,120 @@
 # @zhin.js/adapter-github
 
+## 1.1.3
+
+### Patch Changes
+
+- 36c2eb9: Add schema-driven database setup with explicit live-tested server and driver versions, validate environment-backed connection options before startup, and generate safe database examples for new projects.
+
+  Make durable timestamp columns portable across SQL dialects, preserve dialect-specific identity syntax, migrate legacy inbox tables before their first millisecond timestamp write, and encode canonical conversation keys at the database boundary so PostgreSQL accepts them.
+
+  Keep legacy durable conversation rows readable, normalize transaction results consistently, and make production mode select the matching environment overlay by default.
+
+- Updated dependencies [5b5d270]
+- Updated dependencies [36c2eb9]
+  - @zhin.js/im-contract@1.1.2
+  - @zhin.js/core@1.1.38
+  - @zhin.js/adapter@1.1.15
+  - @zhin.js/host-http@1.1.2
+  - @zhin.js/agent-feature@1.1.2
+  - @zhin.js/feature-kit@1.1.2
+  - @zhin.js/skill@1.1.2
+  - @zhin.js/tool@1.1.2
+
+## 1.1.2
+
+### Patch Changes
+
+- 62dee52: Rename the Agent Tool policy field from `approval` to `requiresApproval`, so values such as `never` and `always` state when human approval is required. Remove the old field without a compatibility alias and migrate built-in, adapter, feature, and utility Tools to the canonical contract.
+- a9e4a40: Derive Command user routes only from explicit `commands/**/*/index.ts(x)` entry paths instead of prepending the plugin owner. Child plugins can now publish top-level static or dynamic commands, while duplicate routes across owners fail during generation construction. Adapter endpoint commands move to explicit paths such as `commands/qq/endpoint/list/index.ts` and are invoked as `qq endpoint list`.
+- 8740059: Standardize TypeScript capabilities on named module directories such as `commands/foo/index.ts`, `middlewares/audit/index.ts`, `handlers/message-receive/index.ts`, `pages/workroom/index.tsx`, and `mcps/filesystem/index.ts`. Only the fixed `index` entry is discovered; sibling files remain private helpers.
+
+  Command route segments come from directories, while `[name]`, `[[name]]`, `[...name]`, and `[[...name]]` directories declare dynamic parameters. Plugin owners do not enter the route unless their config explicitly sets `commandNamespace`; Endpoint `commandPrefix` remains platform-owned and defaults to an empty string.
+
+  Migrate the built-in adapters, plugins, examples, generators, migration tooling, hot reload classification, Agent authoring surfaces, documentation, and release artifacts to the explicit entry convention.
+
+  Make Tool ownership and progressive disclosure explicit across all four supported locations: plugin-public `tools/`, Agent-private `agents/<name>/tools/`, Skill-private `skills/<name>/tools/`, and Agent-Skill-private `agents/<name>/skills/<name>/tools/`. Move adapter and group-suite operations that require domain instructions into their owning Skills so `load_skill` is the only path that unlocks their schemas.
+
+  Remove the package-root `agent/` convention. Public capabilities now use named package-root directories, schedules use `schedules/<name>/index.ts` or `plugin.ts` injection, MCP connections use `mcps/<name>/index.ts`, Prompt Sections use `prompt-sections/<name>/index.ts`, Agent definitions use `agents/<name>/`, and permission vocabulary is published as `PERMITS.md`.
+
+- 25a845a: Unify Skills on `skills/<name>/SKILL.md`, support Agent-private Skills and nested Skill-private Tools, publish and mount existing plugin Skills, add governed Skill metadata and Turn access filtering, unlock only already-admitted same-owner Tools, and make `on-risk` and `once` approval behavior precise.
+- ddbb92e: Isolate adapter Skills under platform-specific Agents and automatically select the matching platform Agent for IM ingress, preventing unrelated adapter Skills from entering another platform's prompt surface.
+- 40d2c8f: Reduce the default Agent Tool surface by moving process diagnostics into a Skill and splitting broad platform Skills into focused task domains. Restore ICQQ friend and group directory tools with `on-risk` approval and explicit owner, administrator, master, or trusted access.
+- 4380cf9: Colocate adapter command definitions and Agent Skill handlers with their owning capabilities, and provide a shared validated platform permission constructor.
+- 46489ee: Require one canonical expanded GitHub endpoint configuration. Remove nested endpoint, environment, camelCase alias, default identity, and inert polling compatibility while making the resolved App credentials and workspace root explicit.
+- 5c3858e: Make `@zhin.js/im-contract` the explicit zero-dependency owner of transport identities, canonical segments, media guards, conversation facts, stores, and delivery contracts. Platform adapters now read media contracts from that foundation instead of reaching through Core.
+- 33ea736: Use `tools/<name>/index.ts` and `defineAgentTool` from `@zhin.js/tool` as the sole Agent Tool authoring model. Remove the duplicate `@zhin.js/tools` definition, context, bridge, export, and discovery path; migrate plugin manifests, examples, scaffolding, HMR, and prepack compilation to the generation-owned Tool Feature.
+- Updated dependencies [c861789]
+- Updated dependencies [1414ccb]
+- Updated dependencies [743d470]
+- Updated dependencies [62dee52]
+- Updated dependencies [cd54131]
+- Updated dependencies [244e475]
+- Updated dependencies [a9e4a40]
+- Updated dependencies [5855db7]
+- Updated dependencies [ec921d2]
+- Updated dependencies [8740059]
+- Updated dependencies [63d1f7a]
+- Updated dependencies [25a845a]
+- Updated dependencies [103f2c3]
+- Updated dependencies [9110ab8]
+- Updated dependencies [cd2a888]
+- Updated dependencies [eb3227a]
+- Updated dependencies [b853dba]
+- Updated dependencies [e561309]
+- Updated dependencies [d4c6175]
+- Updated dependencies [7a0e1ca]
+- Updated dependencies [103b5d3]
+- Updated dependencies [5a7a7f7]
+- Updated dependencies [b076eae]
+- Updated dependencies [535fed1]
+- Updated dependencies [73a24b7]
+- Updated dependencies [2dbbc15]
+- Updated dependencies [1cb1163]
+- Updated dependencies [be3061e]
+- Updated dependencies [75f8332]
+- Updated dependencies [81935e2]
+- Updated dependencies [f9ed01b]
+- Updated dependencies [ac0ab50]
+- Updated dependencies [5140ce1]
+- Updated dependencies [522d75f]
+- Updated dependencies [a7611b3]
+- Updated dependencies [8823044]
+- Updated dependencies [379439b]
+- Updated dependencies [11c9352]
+- Updated dependencies [6b70e46]
+- Updated dependencies [135ac91]
+- Updated dependencies [140cf0f]
+- Updated dependencies [251e4d2]
+- Updated dependencies [203ad34]
+- Updated dependencies [e6c5113]
+- Updated dependencies [e0f6478]
+- Updated dependencies [baef56b]
+- Updated dependencies [698f16f]
+- Updated dependencies [da0a8e3]
+- Updated dependencies [2fd8017]
+- Updated dependencies [5c3858e]
+- Updated dependencies [33ea736]
+- Updated dependencies [507d602]
+- Updated dependencies [df9f76b]
+  - @zhin.js/core@1.1.37
+  - @zhin.js/tool@1.1.1
+  - @zhin.js/host-http@1.1.1
+  - @zhin.js/adapter@1.1.14
+  - @zhin.js/feature-kit@1.1.1
+  - @zhin.js/agent-feature@1.1.1
+  - @zhin.js/skill@1.1.1
+  - @zhin.js/logger@1.1.1
+  - @zhin.js/im-contract@1.1.1
+
+## 1.1.1
+
+### Patch Changes
+
+- Updated dependencies [769e67f]
+  - @zhin.js/adapter@1.1.13
+  - @zhin.js/core@1.1.36
+
 ## 1.1.0
 
 ### Minor Changes

package/README.md

@@ -8,7 +8,7 @@ GitHub Plugin Runtime 适配器 — Issue/PR 评论区即聊天通道，GitHub A
 - **Webhook 入站**：HMAC-SHA256 验签 → `Endpoint.emit(...)`
 - **出站**：`send({ conversation, payload })` → Issue/PR comment（`conversation.id` 为 channel ID）
 - **GitHub App 认证**：JWT → Installation Token
-- **Agent 工具**：`agent/` 下 star/bind/subscribe/workspace 等保留
+- **Agent 工具**：按账号、订阅和仓库操作拆分在 `agents/github/skills/github-*/tools/`，只激活当前任务所需的一组
 
 ## 安装
 
@@ -36,37 +36,36 @@ plugins:
       - zhinjs/zhin
     workspace_root: ./data/github-workspaces
     endpoints:
-      - name: my-github-bot
-        app_id: 123456
+      - id: my-github-bot
+        app_id: "${GITHUB_APP_ID}"
         private_key: ./data/github-app.pem
-        webhook_secret: your-secret
-```
-
-```env
-GITHUB_APP_ID=123456
-GITHUB_WEBHOOK_SECRET=your-secret
+        webhook_secret: "${GITHUB_WEBHOOK_SECRET}"
 ```
 
 `private_key` 支持文件路径或 PEM 内容。未配置 `webhook_secret` 时仅 API 出站 / agent 工具可用（无入站）。
 
-多 App：一个插件实例挂多个 endpoint（`endpoints` 数组逐项覆盖顶层字段，`name` 必填）：
+`AdapterIndex` 会先合并插件实例默认值与 endpoint 覆盖值，再把一份完整配置交给
+GitHub adapter。协议层只接受这份展开后的 endpoint 配置，不读取环境变量、不解析嵌套
+`endpoints`，也不接受 camelCase 配置别名。`${...}` 由 composition root 在加载配置时展开。
+
+多 App：一个插件实例挂多个 endpoint（`endpoints` 数组逐项覆盖顶层字段；`id`、`app_id`、`private_key` 必填）：
 
 ```yaml
 plugins:
   github:
     endpoints:
-      - name: app-a
+      - id: app-a
         app_id: 123456
         private_key: ./data/app-a.pem
-      - name: app-b
+      - id: app-b
         app_id: 234567
         private_key: ./data/app-b.pem
 ```
 
-## 已移除的配置
+## 已移除的能力
 
-- **`ai.githubMcp.enabled` / `ai.githubMcp.token`**：Plugin Runtime 迁移后 `register-github-mcp`（stdio `@modelcontextprotocol/server-github`，PAT 人身份）已移除，该配置不再生效。如需 MCP 工具，请按新运行时 `mcp/<name>.ts`（`@zhin.js/mcp-feature`）约定自行装配。
-- **`poll_interval`**：轮询降级已删除，仅 webhook 入站；该字段目前解析但不生效（deferred）。
+- **`ai.githubMcp.enabled` / `ai.githubMcp.token`**：Plugin Runtime 迁移后 `register-github-mcp`（stdio `@modelcontextprotocol/server-github`，PAT 人身份）已移除，该配置不再生效。如需 MCP 工具，请按 `mcps/<name>/index.ts`（`@zhin.js/mcp-feature`）约定自行装配。
+- 轮询降级已删除，入站只通过 Webhook；没有保留无效的轮询配置字段。
 
 ## Channel ID
 
@@ -77,14 +76,14 @@ plugins:
 
 ## AI 工具
 
-见 `agent/tools/`：`github_star`、`github_bind`、`github_subscribe`、`github_prepare_workspace` 等。
+见 `agents/github/skills/github-*/tools/`：账号绑定、订阅管理和仓库写入分别按需披露。
 
 ## 架构
 
 | 路径 | 职责 |
 |------|------|
 | `plugin.ts` | 插件元数据；有 DatabaseHost 时定义 `github_oauth_users` |
-| `adapters/github.ts` | 薄 `defineAdapter` 入口（发现约定） |
+| `adapters/github/index.ts` | 薄 `defineAdapter` 入口（发现约定） |
 | `src/endpoint.ts` | Endpoint 生命周期、出站、admit |
 | `src/webhook.ts` | HMAC 验签与事件分发 |
 | `src/oauth-users.ts` | OAuth 表 SSOT + token 查找 |

package/adapters/{github.js → github/index.js}

@@ -1,15 +1,15 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 /**
- * Convention entry: discover `adapters/github.ts` → defineAdapter.
+ * Convention entry: discover `adapters/github/index.ts` → defineAdapter.
  * Implementation lives under `src/` (endpoint / webhook / oauth / protocol).
  */
 import { defineAdapter } from 'zhin.js/adapter';
 import { httpHostToken } from '@zhin.js/host-http';
 import { databaseHostToken, } from 'zhin.js';
-import { GithubEndpoint } from "../lib/endpoint.js";
-import { githubRuntimeStateToken } from "../lib/github-runtime-state.js";
-import { resolveGithubConfig, } from "../lib/protocol.js";
-export { GithubEndpoint } from "../lib/endpoint.js";
+import { GithubEndpoint } from "../../lib/endpoint.js";
+import { githubRuntimeStateToken } from "../../lib/github-runtime-state.js";
+import { resolveGithubConfig, } from "../../lib/protocol.js";
+export { GithubEndpoint } from "../../lib/endpoint.js";
 function optionalDatabase(context) {
     try {
         return context.use(databaseHostToken);
@@ -28,7 +28,7 @@ export default defineAdapter({
     create(context) {
         const config = resolveGithubConfig(context.config);
         const database = optionalDatabase(context);
-        // 注册到插件运行时状态（github.endpoint list 的"运行中"数据源）
+        // 注册到插件运行时状态（github endpoint list 的"运行中"数据源）
         context.use(githubRuntimeStateToken).endpoints.set(config.id, {
             id: config.id,
             mode: config.webhookSecret ? 'webhook' : 'api',

package/adapters/{github.ts → github/index.ts}

@@ -1,5 +1,5 @@
 /**
- * Convention entry: discover `adapters/github.ts` → defineAdapter.
+ * Convention entry: discover `adapters/github/index.ts` → defineAdapter.
  * Implementation lives under `src/` (endpoint / webhook / oauth / protocol).
  */
 import { defineAdapter, type AdapterContext } from 'zhin.js/adapter';
@@ -8,15 +8,15 @@ import {
   databaseHostToken,
   type PluginDatabaseHost,
 } from 'zhin.js';
-import { GithubEndpoint } from '../src/endpoint.js';
-import { githubRuntimeStateToken } from '../src/github-runtime-state.js';
+import { GithubEndpoint } from '../../src/endpoint.js';
+import { githubRuntimeStateToken } from '../../src/github-runtime-state.js';
 import {
   resolveGithubConfig,
-  type GithubAdapterConfig,
-} from '../src/protocol.js';
+  type GithubEndpointConfig,
+} from '../../src/protocol.js';
 
-export { GithubEndpoint } from '../src/endpoint.js';
-export type { GithubEndpointOptions } from '../src/endpoint.js';
+export { GithubEndpoint } from '../../src/endpoint.js';
+export type { GithubEndpointOptions } from '../../src/endpoint.js';
 
 function optionalDatabase(context: AdapterContext): PluginDatabaseHost | undefined {
   try {
@@ -26,7 +26,7 @@ function optionalDatabase(context: AdapterContext): PluginDatabaseHost | undefin
   }
 }
 
-export default defineAdapter<GithubAdapterConfig>({
+export default defineAdapter<GithubEndpointConfig>({
   capabilities: ['inbound', 'outbound'],
   // Issue/PR 评论以 markdown 图片链接消费远程 URL；无交互面，交互段降级纯文本。
   segments: {
@@ -36,7 +36,7 @@ export default defineAdapter<GithubAdapterConfig>({
   create(context) {
     const config = resolveGithubConfig(context.config);
     const database = optionalDatabase(context);
-    // 注册到插件运行时状态（github.endpoint list 的"运行中"数据源）
+    // 注册到插件运行时状态（github endpoint list 的"运行中"数据源）
     context.use(githubRuntimeStateToken).endpoints.set(config.id, {
       id: config.id,
       mode: config.webhookSecret ? 'webhook' : 'api',

package/agents/github/agent.json

@@ -0,0 +1,20 @@
+{
+  "name": "GITHUB Platform Agent",
+  "version": "1.0.0",
+  "description": "Handles github platform-specific operations and progressively loads only the required platform Skill.",
+  "trigger_rules": {
+    "file_patterns": [],
+    "keywords": [
+      "github",
+      "adapter:github"
+    ]
+  },
+  "entry_points": [
+    "system.md",
+    "boundaries.md",
+    "conventions.md"
+  ],
+  "platforms": [
+    "github"
+  ]
+}

package/agents/github/boundaries.md

@@ -0,0 +1,3 @@
+# Boundaries
+
+Operate only on the active github endpoint and authenticated conversation context. Respect every Tool permission and approval policy. Do not infer identifiers, roles, or authorization from display names.

package/agents/github/conventions.md

@@ -0,0 +1,3 @@
+# Conventions
+
+Use stable platform identifiers from the current turn or directory queries. Load one task-specific Skill at a time, and use the unified reply and outbound message path.

package/agents/github/skills/github-account/SKILL.md

@@ -0,0 +1,20 @@
+---
+name: github-account
+platforms:
+  - github
+description: GitHub 账号绑定、安装状态和身份查询能力。
+keywords:
+  - "github"
+  - "账号"
+  - "绑定"
+  - "安装"
+tools:
+  - "bind"
+  - "install"
+  - "unbind"
+  - "whoami"
+---
+
+# github-account
+
+处理 GitHub 身份与绑定状态时加载。`bind` 使用 Device Flow 绑定用户 OAuth 身份；`install` 返回 GitHub App 安装入口；`whoami` 用于确认当前绑定。用户想用自己的账号执行操作时先绑定。解绑和安装相关操作遵守 Tool 审批，不回显 Token、Device Code 或其他凭据。

package/{lib/github-tool-handlers.js → agents/github/skills/github-account/handlers.js}

@@ -1,14 +1,11 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { formatCompact } from '@zhin.js/logger';
 import { getCurrentCommMessage } from '@zhin.js/agent/security';
-import { GhClient } from './gh-client.js';
+import { GhClient } from "../../../../lib/gh-client.js";
 function oauthModel(client) {
     const db = client.database;
     return db?.models?.get('github_oauth_users');
 }
-function subscriptionsModel(client) {
-    const db = client.database;
-    return db?.models?.get('github_subscriptions');
-}
 function depsLogger() {
     return {
         debug: (...args) => console.debug(...args),
@@ -16,26 +13,6 @@ function depsLogger() {
         error: (...args) => console.error(...args),
     };
 }
-export async function executeGithubStar(args, client, commMessage) {
-    const msg = commMessage ?? getCurrentCommMessage();
-    const gh = await client.getUserOrDefaultApi(msg?.$adapter, msg?.$sender.id);
-    switch (args.action) {
-        case 'star': {
-            const r = await gh.starRepo(args.repo);
-            return r.ok ? `⭐ 已 Star ${args.repo}` : `❌ ${r.data?.message || JSON.stringify(r.data)}`;
-        }
-        case 'unstar': {
-            const r = await gh.unstarRepo(args.repo);
-            return r.ok ? `💔 已取消 Star ${args.repo}` : `❌ ${r.data?.message || JSON.stringify(r.data)}`;
-        }
-        case 'check': {
-            const starred = await gh.isStarred(args.repo);
-            return starred ? `⭐ 已 Star ${args.repo}` : `☆ 尚未 Star ${args.repo}`;
-        }
-        default:
-            return `❌ 未知操作: ${args.action}`;
-    }
-}
 export async function executeGithubBind(_args, client, commMessage) {
     const log = depsLogger();
     const msg = commMessage ?? getCurrentCommMessage();
@@ -137,78 +114,3 @@ export async function executeGithubInstall(client) {
     }
     return msg;
 }
-export async function executeGithubSubscribe(args, client, commMessage) {
-    const msg = commMessage ?? getCurrentCommMessage();
-    if (!msg?.$adapter || !msg?.$sender.id || !msg?.$channel?.id || !msg?.$endpoint) {
-        return '❌ 无法获取当前聊天通道信息';
-    }
-    const model = subscriptionsModel(client);
-    if (!model)
-        return '❌ 数据库未就绪';
-    const validEvents = ['push', 'issue', 'star', 'fork', 'unstar', 'pull_request'];
-    const events = args.events
-        ? args.events.split(',').map((s) => s.trim()).filter((e) => validEvents.includes(e))
-        : validEvents;
-    if (!events.length)
-        return `❌ 无效的事件类型，可选: ${validEvents.join(', ')}`;
-    const [existing] = await model.select().where({
-        repo: args.repo,
-        target_id: msg.$channel?.id,
-        adapter: msg.$adapter,
-        endpoint: msg.$endpoint,
-    });
-    if (existing) {
-        await model.update({ events, target_type: msg.$channel?.type || 'private' }).where({ id: existing.id });
-        return `✅ 已更新订阅 ${args.repo}\n📡 事件: ${events.join(', ')}`;
-    }
-    await model.insert({
-        id: Date.now(),
-        repo: args.repo,
-        events,
-        target_id: msg.$channel?.id,
-        target_type: msg.$channel?.type || 'private',
-        adapter: msg.$adapter,
-        endpoint: msg.$endpoint,
-    });
-    return `✅ 已订阅 ${args.repo}\n📡 事件: ${events.join(', ')}\n📌 通知将推送到当前通道`;
-}
-export async function executeGithubUnsubscribe(args, client, commMessage) {
-    const msg = commMessage ?? getCurrentCommMessage();
-    if (!msg?.$adapter || !msg?.$channel?.id || !msg?.$endpoint) {
-        return '❌ 无法获取当前聊天通道信息';
-    }
-    const model = subscriptionsModel(client);
-    if (!model)
-        return '❌ 数据库未就绪';
-    const [existing] = await model.select().where({
-        repo: args.repo,
-        target_id: msg.$channel?.id,
-        adapter: msg.$adapter,
-        endpoint: msg.$endpoint,
-    });
-    if (!existing)
-        return `📭 当前通道未订阅 ${args.repo}`;
-    await model.delete().where({ id: existing.id });
-    return `✅ 已取消订阅 ${args.repo}`;
-}
-export async function executeGithubSubscriptions(_args, client, commMessage) {
-    const msg = commMessage ?? getCurrentCommMessage();
-    if (!msg?.$adapter || !msg?.$channel?.id || !msg?.$endpoint) {
-        return '❌ 无法获取当前聊天通道信息';
-    }
-    const model = subscriptionsModel(client);
-    if (!model)
-        return '❌ 数据库未就绪';
-    const subs = await model.select().where({
-        target_id: msg.$channel?.id,
-        adapter: msg.$adapter,
-        endpoint: msg.$endpoint,
-    });
-    if (!subs?.length)
-        return '📭 当前通道没有任何 GitHub 订阅';
-    return `📋 当前通道订阅 (${subs.length}):\n\n` +
-        subs.map((s) => {
-            const events = Array.isArray(s.events) ? s.events : [];
-            return `  📦 ${s.repo}\n     📡 ${events.join(', ') || '(无事件)'}`;
-        }).join('\n\n');
-}

package/{src/github-tool-handlers.ts → agents/github/skills/github-account/handlers.ts}

@@ -1,9 +1,8 @@
 import { formatCompact } from '@zhin.js/logger';
 import type { Message } from 'zhin.js';
 import { getCurrentCommMessage } from '@zhin.js/agent/security';
-import { GhClient } from './gh-client.js';
-import type { EventType } from './types.js';
-import type { GithubClient } from './client.js';
+import { GhClient } from '../../../../src/gh-client.js';
+import type { GithubClient } from '../../../../src/client.js';
 
 function oauthModel(client: GithubClient) {
   const db = client.database as {
@@ -16,18 +15,6 @@ function oauthModel(client: GithubClient) {
   } | undefined;
 }
 
-function subscriptionsModel(client: GithubClient) {
-  const db = client.database as {
-    models?: Map<string, unknown>;
-  } | null | undefined;
-  return db?.models?.get('github_subscriptions') as {
-    select: () => { where: (q: object) => Promise<any[]> };
-    insert: (row: object) => Promise<void>;
-    update: (row: object) => { where: (q: object) => Promise<void> };
-    delete: () => { where: (q: object) => Promise<void> };
-  } | undefined;
-}
-
 function depsLogger() {
   return {
     debug: (...args: unknown[]) => console.debug(...args),
@@ -36,27 +23,6 @@ function depsLogger() {
   };
 }
 
-export async function executeGithubStar(args: { action: 'star' | 'unstar' | 'check'; repo: string }, client: GithubClient, commMessage?: Message) {
-  const msg = commMessage ?? getCurrentCommMessage();
-  const gh = await client.getUserOrDefaultApi(msg?.$adapter, msg?.$sender.id);
-  switch (args.action) {
-    case 'star': {
-      const r = await gh.starRepo(args.repo);
-      return r.ok ? `⭐ 已 Star ${args.repo}` : `❌ ${r.data?.message || JSON.stringify(r.data)}`;
-    }
-    case 'unstar': {
-      const r = await gh.unstarRepo(args.repo);
-      return r.ok ? `💔 已取消 Star ${args.repo}` : `❌ ${r.data?.message || JSON.stringify(r.data)}`;
-    }
-    case 'check': {
-      const starred = await gh.isStarred(args.repo);
-      return starred ? `⭐ 已 Star ${args.repo}` : `☆ 尚未 Star ${args.repo}`;
-    }
-    default:
-      return `❌ 未知操作: ${args.action}`;
-  }
-}
-
 export async function executeGithubBind(_args: Record<string, never>, client: GithubClient, commMessage?: Message) {
   const log = depsLogger();
   const msg = commMessage ?? getCurrentCommMessage();
@@ -168,85 +134,3 @@ export async function executeGithubInstall(client: GithubClient) {
   }
   return msg;
 }
-
-export async function executeGithubSubscribe(args: { repo: string; events?: string }, client: GithubClient, commMessage?: Message) {
-  const msg = commMessage ?? getCurrentCommMessage();
-  if (!msg?.$adapter || !msg?.$sender.id || !msg?.$channel?.id || !msg?.$endpoint) {
-    return '❌ 无法获取当前聊天通道信息';
-  }
-
-  const model = subscriptionsModel(client);
-  if (!model) return '❌ 数据库未就绪';
-
-  const validEvents: EventType[] = ['push', 'issue', 'star', 'fork', 'unstar', 'pull_request'];
-  const events: EventType[] = args.events
-    ? args.events.split(',').map((s) => s.trim()).filter((e): e is EventType => validEvents.includes(e as EventType))
-    : validEvents;
-  if (!events.length) return `❌ 无效的事件类型，可选: ${validEvents.join(', ')}`;
-
-  const [existing] = await model.select().where({
-    repo: args.repo,
-    target_id: msg.$channel?.id,
-    adapter: msg.$adapter,
-    endpoint: msg.$endpoint,
-  });
-  if (existing) {
-    await model.update({ events, target_type: msg.$channel?.type || 'private' }).where({ id: existing.id });
-    return `✅ 已更新订阅 ${args.repo}\n📡 事件: ${events.join(', ')}`;
-  }
-
-  await model.insert({
-    id: Date.now(),
-    repo: args.repo,
-    events,
-    target_id: msg.$channel?.id,
-    target_type: msg.$channel?.type || 'private',
-    adapter: msg.$adapter,
-    endpoint: msg.$endpoint,
-  });
-  return `✅ 已订阅 ${args.repo}\n📡 事件: ${events.join(', ')}\n📌 通知将推送到当前通道`;
-}
-
-export async function executeGithubUnsubscribe(args: { repo: string }, client: GithubClient, commMessage?: Message) {
-  const msg = commMessage ?? getCurrentCommMessage();
-  if (!msg?.$adapter || !msg?.$channel?.id || !msg?.$endpoint) {
-    return '❌ 无法获取当前聊天通道信息';
-  }
-
-  const model = subscriptionsModel(client);
-  if (!model) return '❌ 数据库未就绪';
-
-  const [existing] = await model.select().where({
-    repo: args.repo,
-    target_id: msg.$channel?.id,
-    adapter: msg.$adapter,
-    endpoint: msg.$endpoint,
-  });
-  if (!existing) return `📭 当前通道未订阅 ${args.repo}`;
-
-  await model.delete().where({ id: existing.id });
-  return `✅ 已取消订阅 ${args.repo}`;
-}
-
-export async function executeGithubSubscriptions(_args: Record<string, never>, client: GithubClient, commMessage?: Message) {
-  const msg = commMessage ?? getCurrentCommMessage();
-  if (!msg?.$adapter || !msg?.$channel?.id || !msg?.$endpoint) {
-    return '❌ 无法获取当前聊天通道信息';
-  }
-
-  const model = subscriptionsModel(client);
-  if (!model) return '❌ 数据库未就绪';
-
-  const subs = await model.select().where({
-    target_id: msg.$channel?.id,
-    adapter: msg.$adapter,
-    endpoint: msg.$endpoint,
-  });
-  if (!subs?.length) return '📭 当前通道没有任何 GitHub 订阅';
-
-  return `📋 当前通道订阅 (${subs.length}):\n\n` +
-    subs.map((s: any) => {
-      const events = Array.isArray(s.events) ? s.events : [];
-      return `  📦 ${s.repo}\n     📡 ${events.join(', ') || '(无事件)'}`;
-    }).join('\n\n');
-}

package/agents/github/skills/github-account/tools/bind/index.js

@@ -0,0 +1,13 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { defineAgentTool } from '@zhin.js/tool';
+import { z } from 'zod';
+import { executeGithubBind } from '../../handlers.js';
+export default defineAgentTool({
+    description: '绑定你的 GitHub 账号 — 使用 Device Flow 授权，无需输入密码',
+    adapter: 'github',
+    inputSchema: z.object({}),
+    tags: ['github'],
+    async execute(input, context) {
+        return executeGithubBind({}, context.$client);
+    },
+});

package/{agent/tools/bind.ts → agents/github/skills/github-account/tools/bind/index.ts}

@@ -1,6 +1,6 @@
-import { defineAgentTool } from '@zhin.js/agent/tools';
+import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { executeGithubBind } from '../../src/github-tool-handlers.js';
+import { executeGithubBind } from '../../handlers.js';
 
 export default defineAgentTool<{}>({
   description: '绑定你的 GitHub 账号 — 使用 Device Flow 授权，无需输入密码',
@@ -8,6 +8,6 @@ export default defineAgentTool<{}>({
   inputSchema: z.object({}),
   tags: ['github'],
   async execute(input, context) {
-    return executeGithubBind({}, context.$client, context.message);
+    return executeGithubBind({}, context.$client);
   },
 });

package/agents/github/skills/github-account/tools/install/index.js

@@ -0,0 +1,13 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { defineAgentTool } from '@zhin.js/tool';
+import { z } from 'zod';
+import { executeGithubInstall } from '../../handlers.js';
+export default defineAgentTool({
+    description: '获取安装 GitHub App 的链接 — 安装后 Endpoint 可以访问你的仓库，你也可以使用更多功能',
+    adapter: 'github',
+    inputSchema: z.object({}),
+    tags: ['github'],
+    async execute(input, context) {
+        return executeGithubInstall(context.$client);
+    },
+});

package/{agent/tools/install.ts → agents/github/skills/github-account/tools/install/index.ts}

@@ -1,6 +1,6 @@
-import { defineAgentTool } from '@zhin.js/agent/tools';
+import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { executeGithubInstall } from '../../src/github-tool-handlers.js';
+import { executeGithubInstall } from '../../handlers.js';
 
 export default defineAgentTool<{}>({
   description: '获取安装 GitHub App 的链接 — 安装后 Endpoint 可以访问你的仓库，你也可以使用更多功能',

package/agents/github/skills/github-account/tools/unbind/index.js

@@ -0,0 +1,13 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { defineAgentTool } from '@zhin.js/tool';
+import { z } from 'zod';
+import { executeGithubUnbind } from '../../handlers.js';
+export default defineAgentTool({
+    description: '解除你绑定的 GitHub 账号',
+    adapter: 'github',
+    inputSchema: z.object({}),
+    tags: ['github'],
+    async execute(input, context) {
+        return executeGithubUnbind({}, context.$client);
+    },
+});