agent-hub-runner 0.2.2 → 0.3.2

package/README.md

@@ -1,3 +1,5 @@
+<!-- @意图#R747(2026-11-06): 说明 .claude/skills 需运行器 0.3.1 -->
+<!-- @意图#R745(2026-11-06): 说明 context_snapshot / 0.3.0 -->
 <!-- @意图#R729(2026-11-04): 加 browser install / status 和「bot 的浏览器」一节（0.2.0） -->
 <!-- @意图#R690(2026-11-01): 加「改动记录」一节：存在哪、打码、64 KB、30 天、怎么删 -->
 <!-- @意图#R732(2026-11-04): 常见问题加「升级了网页还说版本太旧」（0.2.2 起新版自动顶掉旧进程） -->
@@ -65,6 +67,11 @@ npx -y agent-hub-runner@latest browser status  # 看浏览器装没装
 - 想放别处：设环境变量 `AGENT_RUNNER_CONFIG=/某个路径/config.json`。
 - 文件坏了：删掉它，回网页拿新配对码重新配对。
 
+
+## 项目上下文快照（0.3.0；`.claude/skills` 起 0.3.1）
+
+服务器在每轮主对话开始时可能调用只读操作 `context_snapshot`（没有路径参数）：在**当前 bot 的授权文件夹根**里读取一份 AGENTS/CLAUDE 规则，并列出 `.pi/skills`、`.agents/skills`、`.claude/skills` 下技能的名称与说明（不上传技能全文）。目录外路径和越界符号链接一律拒绝。基础快照需要运行器 **0.3.0+**；发现 `.claude/skills` 需要 **0.3.1+**。
+
 ## 常见问题
 
 - `command not found: npx`：还没装 Node。
@@ -75,6 +82,7 @@ npx -y agent-hub-runner@latest browser status  # 看浏览器装没装
 - 「这个账号已经连着一台电脑了」：一个账号同时只能连一台，先在网页抽屉「连着的电脑」里点「断开」。
 - 开机自启报「Bootstrap failed: 5: Input/output error」：这个后台任务以前被 macOS 记成了「已禁用」。0.2.1 起 `autostart on` 会自己解除并重试，直接再运行一次 `npx -y agent-hub-runner@latest autostart on` 就行；还不行就按它给的那条 `launchctl enable …` 命令运行后再试，或重启电脑再试。
 - 升级后网页还说「运行器版本太旧」：旧版本的运行器还在后台跑着（升级前开的终端，或者旧的开机自启），新版一看有人连着就退出了。0.2.2 起新版会自己把旧版本停掉、接上服务器；从 0.2.1 或更早升上来的，运行一次 `npx -y agent-hub-runner@latest autostart on` 就行，它会先停掉正在跑的那个，等新版本真连上了才说「已设开机自启」。
+- 网页上点「升级」（0.3.2 起）：抽屉里有新版本时点一下，运行器自己去 npm 拉最新版、校验后换上并重启，不用开终端。0.3.1 及更早不认这个按钮，仍用上面那条命令升一次。
 
 ## 断开、卸载
 

package/autostart.mjs

@@ -20,7 +20,7 @@ export const THROTTLE_S = 10;
 /** 复制到 ~/.agent-runner/bin/<版本>/ 的文件（package.json 用来读版本号） */
 // @意图#R729(2026-11-04): 多复制 browser.mjs（runner.mjs 要 import 它）
 // @意图#R690(2026-11-01): 多复制 changes.mjs（runner.mjs 要 import 它，少了开机自启的副本起不来）
-export const COPY_FILES = ["runner.mjs", "ops.mjs", "edit.mjs", "changes.mjs", "browser.mjs", "autostart.mjs", "package.json"];
+export const COPY_FILES = ["runner.mjs", "ops.mjs", "project-context.mjs", "edit.mjs", "changes.mjs", "browser.mjs", "autostart.mjs", "package.json"];
 /** 优先用的稳定 node 路径（Homebrew 升级 node 后这两个软链还在；nvm 的带版本号路径卸了就没了） */
 export const STABLE_NODES = ["/opt/homebrew/bin/node", "/usr/local/bin/node"];
 export const ONLY_MAC = "开机自启目前只支持 Mac 和 Windows";
@@ -116,6 +116,17 @@ export function installCopy({ srcDir, version, env = process.env, platform = pro
   return path.join(cur, "runner.mjs");
 }
 
+/**
+ * R750：校验 npm 包的 integrity。npm 给的是 "sha512-<base64>"，对不上返回 false，调用方不得替换正在跑的版本。
+ * 只认 sha512。别的算法（sha1、没有 integrity）一律 false，不将就。
+ */
+export function integrityOk(buf, integrity) {
+  const m = /^sha512-(.+)$/.exec(String(integrity ?? "").trim());
+  if (!m) return false;
+  const got = createHash("sha512").update(buf).digest("base64");
+  return got === m[1];
+}
+
 /** 默认的 launchctl：返回 { code, stdout, stderr }，不抛错。AGENT_RUNNER_LAUNCHCTL 可换成别的程序（测试用假的，不真加载） */
 export function runLaunchctl(args, env = process.env) {
   return new Promise((resolve) => {

package/ops.mjs

@@ -6,6 +6,7 @@ import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { editText } from "./edit.mjs";
+import { opContextSnapshot } from "./project-context.mjs";
 
 export const MAX_READ_BYTES = 20 * 1024 * 1024;
 /** bash 没给 timeout 时的默认上限（秒），到点杀掉整个进程组。 */
@@ -183,12 +184,15 @@ export function opBash(args, root, { onData, signal, platform = process.platform
 
 /** 按 op 分派；未知 op 拒绝。 */
 // @意图#R690(2026-11-01): write、edit 也收 extra（onChange 存改动记录）
-// @意图#R636(2026-10-27): 协议里只有这四种工具调用
+// @意图#R745(2026-11-06): 另加只读 context_snapshot（无路径入参）
+// @意图#R636(2026-10-27): 协议里原有四种工具调用
+// @意图#R745(2026-11-06): 从客户已授权目录加载项目规则并按需提供技能
 export function runOp(op, args, root, extra) {
   const a = args && typeof args === "object" ? args : {};
   if (op === "read") return opRead(a, root);
   if (op === "write") return opWrite(a, root, extra);
   if (op === "edit") return opEdit(a, root, extra);
   if (op === "bash") return opBash(a, root, extra);
+  if (op === "context_snapshot") return opContextSnapshot(a, root); // 固定扫授权根，忽略路径参数
   return Promise.reject(new Error(`未知操作 ${op}`));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hub-runner",
-  "version": "0.2.2",
+  "version": "0.3.2",
   "description": "agent-hub 的电脑运行器：配对后让你的 bot 在这台电脑上读写授权目录里的文件、跑命令（跑命令要你在网页上批准），还能用它自己的独立浏览器",
   "type": "module",
   "bin": {
@@ -9,6 +9,7 @@
   "files": [
     "runner.mjs",
     "ops.mjs",
+    "project-context.mjs",
     "edit.mjs",
     "changes.mjs",
     "browser.mjs",

package/project-context.mjs

@@ -0,0 +1,402 @@
+// @意图#R747(2026-11-06): 授权根增加 .claude/skills，兼容 Claude Code 项目技能目录
+// @意图#R745(2026-11-06): 从客户已授权目录加载项目规则并按需提供技能
+// 只扫授权根：一份 AGENTS/CLAUDE 候选 + .pi/skills + .agents/skills + .claude/skills；不读祖先、不读 ~/.agents / ~/.pi / ~/.claude。
+import fs from "node:fs/promises";
+import { existsSync, readFileSync, readdirSync, statSync, lstatSync, readlinkSync, realpathSync } from "node:fs";
+import path from "node:path";
+
+// 路径校验与 ops.mjs 同语义，避免与 ops 循环依赖。
+export const inside = (real, root) => real === root || real.startsWith(root.endsWith(path.sep) ? root : root + path.sep);
+
+export async function realOf(abs, depth = 0) {
+  if (depth > 40) throw new Error("符号链接太多层");
+  try {
+    return await fs.realpath(abs);
+  } catch (e) {
+    if (e?.code !== "ENOENT") throw e;
+    let st;
+    try { st = lstatSync(abs); } catch { st = undefined; }
+    if (st?.isSymbolicLink()) {
+      const target = path.resolve(path.dirname(abs), readlinkSync(abs));
+      return realOf(target, depth + 1);
+    }
+    const parent = path.dirname(abs);
+    if (parent === abs) throw e;
+    return path.join(await realOf(parent, depth + 1), path.basename(abs));
+  }
+}
+
+export const AGENTS_CANDIDATES = ["AGENTS.override.md", "AGENTS.md", "AGENTS.MD", "CLAUDE.md", "CLAUDE.MD"];
+export const MAX_TOTAL_BYTES = 2 * 1024 * 1024;
+export const MAX_FILE_BYTES = 128 * 1024;
+export const MAX_SKILLS = 100;
+export const SKILL_DIRS = [".pi/skills", ".agents/skills", ".claude/skills"];
+export const IGNORE_FILE_NAMES = [".gitignore", ".ignore", ".fdignore"];
+
+export function stripBom(s) {
+  return s.charCodeAt(0) === 0xfeff ? s.slice(1) : s;
+}
+
+function toPosix(p) {
+  return p.split(path.sep).join("/");
+}
+
+/** 极简 ignore：注释、否定、末尾 /、* 与 **（不含完整 gitignore 语义，够 pi 技能树常用规则）。 */
+export function createIgnoreMatcher() {
+  const rules = [];
+  return {
+    add(patterns) {
+      for (const raw of patterns) {
+        const line = String(raw);
+        const trimmed = line.trim();
+        if (!trimmed || (trimmed.startsWith("#") && !trimmed.startsWith("\\#"))) continue;
+        let negated = false;
+        let pattern = line;
+        if (pattern.startsWith("!")) { negated = true; pattern = pattern.slice(1); }
+        else if (pattern.startsWith("\\!")) pattern = pattern.slice(1);
+        if (pattern.startsWith("/")) pattern = pattern.slice(1);
+        rules.push({ negated, pattern: pattern.replace(/\\/g, "/"), dirOnly: pattern.endsWith("/") });
+      }
+    },
+    ignores(rel, isDir = false) {
+      const target = toPosix(rel).replace(/^\/+/, "");
+      let ignored = false;
+      for (const r of rules) {
+        const pat = r.dirOnly ? r.pattern.slice(0, -1) : r.pattern;
+        if (r.dirOnly && !isDir) continue;
+        if (matchGlob(pat, target) || matchGlob(pat, target.split("/").pop() || "")) {
+          ignored = !r.negated;
+        }
+      }
+      return ignored;
+    },
+  };
+}
+
+function matchGlob(pat, text) {
+  if (pat === text) return true;
+  if (pat.endsWith("/**")) {
+    const base = pat.slice(0, -3);
+    return text === base || text.startsWith(base + "/");
+  }
+  if (pat.includes("**")) {
+    const parts = pat.split("**");
+    if (parts.length !== 2) return false;
+    const [a, b] = parts;
+    if (a && !text.startsWith(a.replace(/\/$/, ""))) {
+      if (!text.includes("/" + a.replace(/^\/|\/$/g, ""))) return false;
+    }
+    const rest = a ? text.slice(Math.max(text.indexOf(a.replace(/\/$/, "")) + a.replace(/\/$/, "").length, 0)) : text;
+    const needle = b.replace(/^\//, "");
+    return !needle || rest.includes(needle) || rest.endsWith(needle.replace(/^\//, ""));
+  }
+  if (!pat.includes("*") && !pat.includes("?")) {
+    return text === pat || text.endsWith("/" + pat);
+  }
+  const esc = pat.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, "[^/]*").replace(/\?/g, "[^/]");
+  return new RegExp(`(?:^|/)${esc}$`).test(text) || new RegExp(`^${esc}$`).test(text);
+}
+
+function addIgnoreRules(ig, dir, root) {
+  const relativeDir = path.relative(root, dir);
+  const prefix = relativeDir && relativeDir !== "." ? `${toPosix(relativeDir)}/` : "";
+  for (const filename of IGNORE_FILE_NAMES) {
+    const ignorePath = path.join(dir, filename);
+    if (!existsSync(ignorePath)) continue;
+    try {
+      const content = readFileSync(ignorePath, "utf8");
+      const patterns = content.split(/\r?\n/).map((line) => {
+        const trimmed = line.trim();
+        if (!trimmed || (trimmed.startsWith("#") && !trimmed.startsWith("\\#"))) return null;
+        let pattern = line;
+        let negated = false;
+        if (pattern.startsWith("!")) { negated = true; pattern = pattern.slice(1); }
+        else if (pattern.startsWith("\\!")) pattern = pattern.slice(1);
+        if (pattern.startsWith("/")) pattern = pattern.slice(1);
+        const prefixed = prefix ? `${prefix}${pattern}` : pattern;
+        return negated ? `!${prefixed}` : prefixed;
+      }).filter(Boolean);
+      if (patterns.length) ig.add(patterns);
+    } catch { /* ignore unreadable */ }
+  }
+}
+
+/**
+ * 小型 frontmatter：只认 name / description / disable-model-invocation（及 camelCase）。
+ * 支持单双引号、| / > / |- / >- / |> / >| 多行块。
+ */
+export function parseSkillFrontmatter(raw) {
+  const text = stripBom(String(raw ?? ""));
+  if (!text.startsWith("---")) return null;
+  const nl = text.indexOf("\n");
+  if (nl < 0) return null;
+  const end = text.indexOf("\n---", nl);
+  if (end < 0) return null;
+  const body = text.slice(nl + 1, end);
+  const out = {};
+  const lines = body.split(/\r?\n/);
+  let i = 0;
+  while (i < lines.length) {
+    const line = lines[i];
+    const m = /^([A-Za-z0-9_-]+)\s*:\s*(.*)$/.exec(line);
+    if (!m) { i += 1; continue; }
+    const key = m[1];
+    let val = m[2];
+    if (val === "" || /^[|>](?:[+-]\d?|\d[+-]?)$/.test(val) || val === "|>" || val === ">|") {
+      const block = [];
+      i += 1;
+      while (i < lines.length) {
+        const L = lines[i];
+        if (L === "" || L.startsWith(" ") || L.startsWith("\t")) {
+          block.push(L.replace(/^  /, "").replace(/^\t/, ""));
+          i += 1;
+          continue;
+        }
+        if (/^[A-Za-z0-9_-]+\s*:/.test(L)) break;
+        block.push(L);
+        i += 1;
+      }
+      while (block.length && block[block.length - 1] === "") block.pop();
+      out[key] = block.join("\n");
+      continue;
+    }
+    if (val.startsWith('"')) {
+      // 双引号：优先按 JSON 字符串解（支持 \" \\ \n）；失败再剥一层皮
+      try { out[key] = JSON.parse(val); }
+      catch {
+        out[key] = val.length >= 2 && val.endsWith('"') ? val.slice(1, -1) : val.slice(1);
+      }
+    } else if (val.startsWith("'")) {
+      // 单引号：YAML 里 '' 表示一个 '
+      let s = val.endsWith("'") ? val.slice(1, -1) : val.slice(1);
+      out[key] = s.replace(/''/g, "'");
+    } else if (val === "true") out[key] = true;
+    else if (val === "false") out[key] = false;
+    else out[key] = val;
+    i += 1;
+  }
+  return out;
+}
+
+function skillFromFile(filePath) {
+  let raw;
+  try { raw = readFileSync(filePath, "utf8"); } catch { return { skill: null, notice: `无法读取技能文件：${filePath}` }; }
+  let bytes;
+  try { bytes = Buffer.byteLength(raw, "utf8"); } catch { bytes = raw.length; }
+  if (bytes > MAX_FILE_BYTES) {
+    return { skill: null, notice: `技能文件超过 ${MAX_FILE_BYTES} 字节，已跳过：${filePath}` };
+  }
+  const fm = parseSkillFrontmatter(raw);
+  const declared = path.basename(filePath) === "SKILL.md";
+  if (!fm) return { skill: null, notice: declared ? `技能缺少有效 YAML frontmatter，已跳过：${filePath}` : null };
+  const description = typeof fm.description === "string" ? fm.description.trim().slice(0, 1024) : "";
+  if (!description) return { skill: null, notice: declared ? `技能缺少 description，已跳过：${filePath}` : null };
+  const parentDirName = path.basename(path.dirname(filePath));
+  const name = typeof fm.name === "string" && fm.name.trim() ? fm.name.trim() : parentDirName;
+  const disable = fm["disable-model-invocation"] === true || fm.disableModelInvocation === true;
+  return {
+    skill: {
+      name,
+      description,
+      filePath,
+      baseDir: path.dirname(filePath),
+      disableModelInvocation: disable,
+      _bytes: Buffer.byteLength(JSON.stringify({ name, description, filePath, baseDir: path.dirname(filePath) }), "utf8"),
+    },
+    notice: null,
+  };
+}
+
+function markSkillsCapped(acc, detail) {
+  if (acc.capped) return;
+  acc.capped = true;
+  acc.stopped = true;
+  acc.notices.push(detail || `技能超过 ${MAX_SKILLS} 个上限，已停止发现`);
+}
+
+async function ensureInside(abs, authRoot, notices, label) {
+  let real;
+  try { real = await realOf(abs); } catch (e) {
+    notices.push(`无法解析${label}：${abs}（${e?.code ?? e?.message ?? e}）`);
+    return null;
+  }
+  if (!inside(real, authRoot)) {
+    notices.push(`目录外路径已拒绝：${label}（授权目录是 ${authRoot}）`);
+    return null;
+  }
+  return real;
+}
+
+async function loadSkillsFromDirInternal(dir, includeRootFiles, ig, root, acc, authRoot) {
+  if (!existsSync(dir)) return;
+  if (acc.skills.length >= MAX_SKILLS) { markSkillsCapped(acc); return; }
+  // 循环 symlink 指向已扫过的目录时跳过，不能卡住运行器事件循环。
+  if (acc.visited.has(dir)) return;
+  acc.visited.add(dir);
+  addIgnoreRules(ig, dir, root);
+  let entries;
+  try { entries = readdirSync(dir, { withFileTypes: true }); } catch { return; }
+
+  // SKILL.md 优先：有则加载并停止向子目录递归（pi 行为）
+  for (const entry of entries) {
+    if (entry.name !== "SKILL.md") continue;
+    const fullPath = path.join(dir, entry.name);
+    let isFile = entry.isFile();
+    if (entry.isSymbolicLink()) {
+      try { isFile = statSync(fullPath).isFile(); } catch { continue; }
+    }
+    const relPath = toPosix(path.relative(root, fullPath));
+    if (!isFile || ig.ignores(relPath, false)) continue;
+    const realFile = await ensureInside(fullPath, authRoot, acc.notices, relPath || entry.name);
+    if (!realFile) return; // 越界 symlink：记 notice，本目录当作技能根已处理完
+    const { skill, notice } = skillFromFile(realFile);
+    if (notice) acc.notices.push(notice);
+    if (skill) {
+      if (acc.total + skill._bytes > MAX_TOTAL_BYTES) {
+        acc.notices.push(`技能总大小将超过 ${MAX_TOTAL_BYTES} 字节，已停止发现：${fullPath}`);
+        acc.stopped = true;
+        return;
+      }
+      if (acc.skills.length >= MAX_SKILLS) { markSkillsCapped(acc); return; }
+      if (acc.names.has(skill.name)) acc.notices.push(`技能重名，已跳过后一份：${skill.name}（${skill.filePath}）`);
+      if (!acc.names.has(skill.name)) {
+        acc.names.add(skill.name);
+        acc.total += skill._bytes;
+        const { _bytes, ...rest } = skill;
+        acc.skills.push(rest);
+      }
+    }
+    return; // 有 SKILL.md 不再递归
+  }
+
+  for (const entry of entries) {
+    if (acc.stopped || acc.skills.length >= MAX_SKILLS) return;
+    // 技能树内部仍跳过隐藏项；根上的 .pi / .agents / .claude 由 SKILL_DIRS 显式进入，不会走到这里
+    if (entry.name.startsWith(".")) continue;
+    if (entry.name === "node_modules") continue;
+    const fullPath = path.join(dir, entry.name);
+    let isDirectory = entry.isDirectory();
+    let isFile = entry.isFile();
+    if (entry.isSymbolicLink()) {
+      try {
+        const st = statSync(fullPath);
+        isDirectory = st.isDirectory();
+        isFile = st.isFile();
+      } catch { continue; }
+    }
+    const relPath = toPosix(path.relative(root, fullPath));
+    if (ig.ignores(relPath, isDirectory)) continue;
+    if (isDirectory) {
+      const realDir = await ensureInside(fullPath, authRoot, acc.notices, relPath || entry.name);
+      if (!realDir) continue; // 越界目录 symlink：跳过并已记 notice
+      await loadSkillsFromDirInternal(realDir, false, ig, root, acc, authRoot);
+      continue;
+    }
+    if (!isFile || !includeRootFiles || !entry.name.endsWith(".md")) continue;
+    const realFile = await ensureInside(fullPath, authRoot, acc.notices, relPath || entry.name);
+    if (!realFile) continue;
+    const { skill, notice } = skillFromFile(realFile);
+    if (notice) acc.notices.push(notice);
+    if (!skill) continue;
+    if (acc.total + skill._bytes > MAX_TOTAL_BYTES) {
+      acc.notices.push(`技能总大小将超过 ${MAX_TOTAL_BYTES} 字节，已停止发现：${fullPath}`);
+      acc.stopped = true;
+      return;
+    }
+    if (acc.skills.length >= MAX_SKILLS) { markSkillsCapped(acc); return; }
+    if (acc.names.has(skill.name)) acc.notices.push(`技能重名，已跳过后一份：${skill.name}（${skill.filePath}）`);
+    if (!acc.names.has(skill.name)) {
+      acc.names.add(skill.name);
+      acc.total += skill._bytes;
+      const { _bytes, ...rest } = skill;
+      acc.skills.push(rest);
+    }
+  }
+}
+
+async function resolveRootFile(root, name) {
+  const abs = path.join(root, name);
+  if (!existsSync(abs)) return null;
+  let st;
+  try { st = statSync(abs); } catch { return null; }
+  if (!st.isFile()) return null;
+  let real;
+  try { real = await realOf(abs); } catch (e) {
+    return { error: `无法解析路径：${name}（${e?.code ?? e?.message ?? e}）` };
+  }
+  if (!inside(real, root)) return { error: `目录外路径已拒绝：${name}（授权目录是 ${root}）` };
+  return { real, size: st.size };
+}
+
+/**
+ * 在授权根目录发现项目上下文。无路径入参；越界 symlink 拒绝。
+ * @returns {{ kind: 'project_context', contextFiles: {path,content}[], skills: object[], notices: string[] }}
+ */
+// @意图#R747(2026-11-06): 授权根增加 .claude/skills，兼容 Claude Code 项目技能目录
+// @意图#R745(2026-11-06): 从客户已授权目录加载项目规则并按需提供技能
+export async function discoverProjectContext(root) {
+  const notices = [];
+  const contextFiles = [];
+  let total = 0;
+
+  for (const name of AGENTS_CANDIDATES) {
+    const got = await resolveRootFile(root, name);
+    if (!got) continue;
+    if (got.error) { notices.push(got.error); break; }
+    if (got.size > MAX_FILE_BYTES) {
+      notices.push(`${name} 超过 ${MAX_FILE_BYTES} 字节，未注入项目规则（避免撑爆提示）`);
+      break;
+    }
+    if (total + got.size > MAX_TOTAL_BYTES) {
+      notices.push(`${name} 会使总大小超过 ${MAX_TOTAL_BYTES} 字节，未注入项目规则`);
+      break;
+    }
+    let raw;
+    try { raw = await fs.readFile(got.real, "utf8"); } catch (e) {
+      notices.push(`无法读取 ${name}：${e?.message ?? e}`);
+      break;
+    }
+    const content = stripBom(raw);
+    const bytes = Buffer.byteLength(content, "utf8");
+    if (bytes > MAX_FILE_BYTES) {
+      notices.push(`${name} 超过 ${MAX_FILE_BYTES} 字节，未注入项目规则（避免撑爆提示）`);
+      break;
+    }
+    contextFiles.push({ path: got.real, content });
+    total += bytes;
+    break; // 只取最高优先级一份
+  }
+
+  const acc = { skills: [], notices, names: new Set(), visited: new Set(), total, stopped: false, capped: false };
+  for (const rel of SKILL_DIRS) {
+    if (acc.stopped) break;
+    const dir = path.join(root, rel);
+    if (!existsSync(dir)) continue;
+    let realDir;
+    try { realDir = await realOf(dir); } catch (e) {
+      notices.push(`无法解析技能目录 ${rel}：${e?.code ?? e?.message ?? e}`);
+      continue;
+    }
+    if (!inside(realDir, root)) {
+      notices.push(`目录外路径已拒绝：${rel}（授权目录是 ${root}）`);
+      continue;
+    }
+    const ig = createIgnoreMatcher();
+    // authRoot 用授权根（非 skills 子根），越界 symlink 相对整棵授权树判断
+    await loadSkillsFromDirInternal(realDir, true, ig, realDir, acc, root);
+  }
+
+  return {
+    kind: "project_context",
+    contextFiles,
+    skills: acc.skills,
+    notices,
+  };
+}
+
+/** ops 入口：忽略任何路径参数，只扫授权根。 */
+// @意图#R747(2026-11-06): 授权根增加 .claude/skills，兼容 Claude Code 项目技能目录
+// @意图#R745(2026-11-06): 从客户已授权目录加载项目规则并按需提供技能
+export async function opContextSnapshot(_args, root) {
+  return discoverProjectContext(root);
+}

package/runner.mjs

@@ -28,7 +28,7 @@ import { fileURLToPath } from "node:url";
 import { runOp } from "./ops.mjs";
 import { buildChangeRecord, changesDirFor, CHANGE_ID_RE, createChangeStore } from "./changes.mjs";
 import { browserStatus, createBrowserManager, installBrowser } from "./browser.mjs";
-import { autostartOff, autostartOffWindows, autostartOn, autostartOnWindows, autostartStatus, autostartStatusWindows, logFileFor, ONLY_MAC, otherAutostarts, runnerHome, truncateLogIfBig } from "./autostart.mjs";
+import { autostartOff, autostartOffWindows, autostartOn, autostartOnWindows, autostartStatus, autostartStatusWindows, COPY_FILES, installCopy, integrityOk, logFileFor, ONLY_MAC, otherAutostarts, runnerHome, truncateLogIfBig } from "./autostart.mjs";
 
 export const PROTOCOL_VERSION = 1;
 /** npm 包名，也是装好后的命令名 */
@@ -438,7 +438,7 @@ export function createSession(cfg, { log = say, platform = process.platform, pic
 // @意图#R640(2026-10-27): hello 报 bot→目录 对照表（bot_dirs），不再报单一 dir
 // @意图#R639(2026-10-27): 没目录也能连上；目录由 createSession 管（网页上选完马上生效），重连时 hello 带当前目录
 // @意图#R636(2026-10-27): 前台运行、心跳、执行工具调用；断线时杀掉正在跑的命令，重连后不重放
-export function startRunner(cfg, { log = say, retryMs = 2000, platform = process.platform, pickDir = platform === "win32" ? pickDirWindows : pickDirMac, file = configPath(), background = process.env.AGENT_RUNNER_LAUNCHD === "1" } = {}) {
+export function startRunner(cfg, { log = say, retryMs = 2000, platform = process.platform, pickDir = platform === "win32" ? pickDirWindows : pickDirMac, file = configPath(), background = process.env.AGENT_RUNNER_LAUNCHD === "1", selfUpdate: selfUpdateFn } = {}) {
   checkNode();
   let fails = 0;
   const session = createSession(cfg, { log, pickDir, platform, file });
@@ -446,12 +446,16 @@ export function startRunner(cfg, { log = say, retryMs = 2000, platform = process
   let ws = null;
   let stopped = false;
   let beat = null;
+  let retry = null;
   let resolveDone;
   const done = new Promise((r) => { resolveDone = r; });
   const finish = (why) => { if (!stopped) { stopped = true; } resolveDone(why); };
   const send = (sock, msg) => { if (sock.readyState === WebSocket.OPEN) sock.send(JSON.stringify(msg)); };
   const browserInfo = () => { try { const b = browserStatus(); return { installed: b.installed, version: b.version }; } catch { return { installed: false, version: null }; } };
 
+  // @意图#R750(2026-11-07): 网页点「升级」发来 self_update（不带参数）。自己查最新版、校验、换上、拉起新版，回一条结果后正常退出，
+  //   让新版接上。失败了回原因，旧版继续跑。同时只跑一个，重复发来的忽略。
+  let updating = false;
   function connect() {
     if (stopped) return;
     const sock = new WebSocket(wsUrlOf(cfg.server));
@@ -471,6 +475,7 @@ export function startRunner(cfg, { log = say, retryMs = 2000, platform = process
         log(n ? `已连上服务器 ${cfg.server}，${n} 个 bot 选了目录。${tail}`
           : `已连上服务器 ${cfg.server}，还没有 bot 选目录：请在网页上每个 bot 的私聊里点输入框下面「我的电脑」那一行，再点「选择目录」。${tail}`);
       } else if (msg.type === "revoked") { session.killAll(); log("网页上已断开这台电脑，令牌已作废。要再连，请在网页上重新拿配对码配对。"); }
+      else if (msg.type === "self_update") { void runSelfUpdate(sock); }
       else void session.onMessage(msg, (m) => send(sock, m));
     });
     sock.addEventListener("close", (ev) => {
@@ -494,6 +499,7 @@ export function startRunner(cfg, { log = say, retryMs = 2000, platform = process
     session.killAll();
     void session.closeBrowsers(); // R729
     clearInterval(beat);
+    clearTimeout(retry);
     try { ws?.close(1000, "runner stopped"); } catch { /* ignore */ }
     resolveDone("stopped");
   };
@@ -622,6 +628,90 @@ export async function waitNewHolder(file, { version = RUNNER_VERSION, ms = 10000
   }
 }
 
+/**
+ * R750：自己升级。版本号自己去 npm 查，不接收调用方给的版本或命令。
+ * 下载的包按 integrity 校验 sha512，对不上就不替换。
+ * fetchLatest / download / extract / spawnNext 都可以换成假的（测试用），默认走真的 npm。
+ * 返回 { ok:true, version } 或 { ok:false, error }。成功时新进程已经拉起，调用方负责退出自己。
+ */
+// @意图#R750(2026-11-07): 网页点「升级」，运行器自己拉最新版换上，用户不用开终端。指令不带参数，目标版本自己查，
+//   校验不过就不动旧版。没开开机自启的也拉一个后台新进程接上，不用先 Ctrl-C。
+export const NPM_PACK_URL = (version) => `https://registry.npmjs.org/agent-hub-runner/-/agent-hub-runner-${version}.tgz`;
+export async function fetchLatestPack(fetchImpl = globalThis.fetch, timeoutMs = 8000) {
+  const r = await fetchImpl("https://registry.npmjs.org/agent-hub-runner/latest", { headers: { accept: "application/json" }, signal: AbortSignal.timeout(timeoutMs) });
+  if (!r.ok) return null;
+  const b = await r.json().catch(() => null);
+  const version = typeof b?.version === "string" ? b.version : "";
+  const integrity = typeof b?.dist?.integrity === "string" ? b.dist.integrity : "";
+  if (!/^\d+\.\d+\.\d+/.test(version) || !integrity.startsWith("sha512-")) return null;
+  return { version, integrity, tarball: typeof b?.dist?.tarball === "string" ? b.dist.tarball : NPM_PACK_URL(version) };
+}
+/** 下载 tgz。地址只接受 registry.npmjs.org，别的一律拒绝，不跟随调用方给的地址。 */
+export async function downloadPack(latest, fetchImpl = globalThis.fetch, timeoutMs = 20000) {
+  const url = new URL(latest.tarball);
+  if (url.protocol !== "https:" || url.hostname !== "registry.npmjs.org") throw new Error("只从 registry.npmjs.org 下载");
+  const r = await fetchImpl(url, { signal: AbortSignal.timeout(timeoutMs) });
+  if (!r.ok) throw new Error(`下载失败 ${r.status}`);
+  return Buffer.from(await r.arrayBuffer());
+}
+/** 解压 tgz 到临时目录，返回 package/ 子目录（npm 包的根）。只取运行器自己那几份文件，不执行包里的任何东西。 */
+export async function extractPack(buf) {
+  const { mkdtempSync } = await import("node:fs");
+  const dir = mkdtempSync(path.join(os.tmpdir(), "agent-runner-upd-"));
+  const tar = spawn("tar", ["-xzf", "-", "-C", dir], { stdio: ["pipe", "ignore", "ignore"] });
+  const done = new Promise((resolve, reject) => { tar.on("exit", (code) => code === 0 ? resolve() : reject(new Error(`解压失败 ${code}`))); tar.on("error", reject); });
+  tar.stdin.end(buf);
+  await done;
+  const pkg = path.join(dir, "package");
+  const { readdirSync } = await import("node:fs");
+  for (const name of readdirSync(pkg)) if (!COPY_FILES.includes(name)) rmSync(path.join(pkg, name), { recursive: true, force: true });
+  return pkg;
+}
+/**
+ * 拉起新版后台进程。新版从刚装好的副本起，不从下载的临时目录起。
+ * 开机自启的交给 launchd / 计划任务重新加载（新版按 R732 顶掉旧的）；没开的自己起一个后台进程，等它拿到锁。
+ */
+export async function spawnUpdated({ version, file, env = process.env, platform = process.platform, launchctl, schtasks, spawnFn = spawn, wait = waitNewHolder }) {
+  const script = path.join(runnerHome(env), "bin", version, "runner.mjs");
+  if (platform === "win32" && env.AGENT_RUNNER_LAUNCHD === "1") {
+    await autostartOnWindows({ configFile: file, version, srcDir: path.dirname(script), execPath: process.execPath, env, schtasks });
+  } else if (platform === "darwin" && env.AGENT_RUNNER_LAUNCHD === "1") {
+    await autostartOn({ configFile: file, version, srcDir: path.dirname(script), execPath: process.execPath, env, launchctl, platform });
+  } else {
+    const child = spawnFn(process.execPath, [script, "start"], { detached: true, stdio: "ignore", env: { ...env, AGENT_RUNNER_LAUNCHD: "" } });
+    child.unref();
+  }
+  const got = await wait(file, { version });
+  if (!got) throw new Error("新版没有接上");
+  return got;
+}
+/**
+ * R750：处理一条 self_update。不看消息内容（版本号、命令都忽略），只跑 selfUpdate。
+ * 回一条 self_update_result。成功返回 true，调用方退出让新版接上；失败返回 false，旧版继续跑。
+ */
+export async function handleSelfUpdate({ file, platform, selfUpdate: run = selfUpdate, log = () => {} }, send) {
+  const r = await run({ file, env: process.env, platform }).catch((e) => ({ ok: false, error: e?.message ?? String(e) }));
+  send({ type: "self_update_result", ok: r.ok === true, ...(r.ok ? { version: r.version } : { error: r.error ?? "升级失败" }) });
+  if (r.ok) { log(`已换到 ${r.version}，这个进程退出，新版接上`); return true; }
+  log(`升级没成：${r.error}`);
+  return false;
+}
+export async function selfUpdate({ file = configPath(), env = process.env, platform = process.platform, fetchLatest = () => fetchLatestPack(), download = downloadPack, extract = extractPack, spawnNext = spawnUpdated, currentVersion = RUNNER_VERSION } = {}) {
+  const latest = await fetchLatest().catch(() => null);
+  if (!latest) return { ok: false, error: "查不到最新版，没有更换" };
+  if (!newerVersion(latest.version, currentVersion)) return { ok: false, error: `已经是最新版（${currentVersion}）` };
+  const buf = await download(latest).catch(() => null);
+  if (!buf) return { ok: false, error: "下载失败，没有更换" };
+  if (!integrityOk(buf, latest.integrity)) return { ok: false, error: "下载的包校验对不上，没有更换" };
+  let srcDir;
+  try { srcDir = await extract(buf, latest.version); } catch (e) { return { ok: false, error: `解压失败，没有更换：${e?.message ?? e}` }; }
+  installCopy({ srcDir, version: latest.version, env, platform });
+  try {
+    await spawnNext({ version: latest.version, file, env });
+  } catch (e) { return { ok: false, error: `新版没接上，没有换掉正在跑的：${e?.message ?? e}` }; }
+  return { ok: true, version: latest.version };
+}
+
 const here = () => path.dirname(fileURLToPath(import.meta.url));
 // @意图#R666(2026-10-29): 开启自启：前台有一个在跑就先停掉它（不然后台那个起来就因为锁退出了），再交给 autostart.mjs（复制自己、写 plist、加载）
 // @意图#R725(2026-11-03): Windows 走计划任务（autostartOnWindows），Mac 走 launchd。提示里的「这台 Mac」按平台写。