agent-trellis 0.7.0 → 0.8.2

package/docs/architecture.md

@@ -18,7 +18,7 @@ required reading for that.
                 │  trellis sync / trellis doctor
         ┌───────┼────────┬─────────────┬──────────────┐
         ▼                ▼             ▼              ▼
-   Claude Code         Codex          Kiro            pi
+   Claude Code         Codex          Kiro            pi          Kimi Code       ZCode
   (symlink adapter) (incremental   (symlink adapter) (bridge
                      TOML writer)                    extension)
 ```
@@ -57,7 +57,7 @@ Aligned to the `.agents Protocol` draft, extended where the draft is silent:
 ## Global vs. workspace scope
 
 **Global only, for now.** Trellis manages `~/.trellis` — one canonical
-source per machine, applied to that machine's four agents. It does not yet
+source per machine, applied to that machine's six supported agents. It does not yet
 read or merge a project-local `.trellis/` in a specific repo.
 
 The `.agents Protocol` draft (see `research.md`) describes a two-layer
@@ -72,11 +72,11 @@ that's scope creep against this section, not a natural extension.
 
 ## Private / agent-specific capabilities
 
-Not everything belongs to all four agents. A skill built around Claude
+Not everything belongs to all six agents. A skill built around Claude
 Code's Task-based subagent delegation has no equivalent to delegate to on
 Codex; an MCP server might only make sense for one agent's workflow. Every
 scopable item — skill, subagent profile, memory entry, MCP server —
-defaults to "shared with all four," and can be restricted with an explicit
+defaults to "shared with all managed agents," and can be restricted with an explicit
 `scope` (skills/agents/memories) or inline `agents:` (MCP servers, see
 below). Restriction is the exception you declare, not something you
 configure for the common case.
@@ -173,8 +173,22 @@ the hub instead — meaningfully less code and one fewer class of failure
 the project that is an agent runtime extension, not a config generator,
 regardless of hub mode.
 
+The pi bridge symlink follows the currently executing Trellis installation.
+When switching from a checkout to a global package (or between installation
+roots), sync can repair an outside-root link only if its target ends in
+`dist/pi-bridge/bundle.js` and its bytes match the current bridge bundle.
+The repair is backed up, including the old symlink target. Modified, unrelated,
+or dangling outside-root links remain conflicts; this exception applies only
+to the bridge extension, not to Skill or instruction symlinks.
+
 ## MCP hub mode
 
+For onboarding, the short rule is: **Gateway is the recommended local
+Trellis mode; Hub is for an already-running external service**. Gateway is a
+local stdio subprocess that Trellis starts for the Agent session. Hub is an
+HTTP endpoint operated outside this process; Trellis only writes the URL and
+does not deploy, configure, or health-manage that Hub.
+
 Every agent's MCP surface can be either N direct server definitions
 (default) or one static entry pointing at a single HTTP endpoint — `mcp.hub.url`
 in `mcp/servers.yaml` is the field, but the supported way to set it is
@@ -197,7 +211,7 @@ to the code writing one entry that points at it.
 - Every adapter writes ONE entry instead of N. This is most of the value:
   adding a new backend server means editing wherever the hub's own config
   lives (this project doesn't prescribe that either) and never touching
-  any of the four agents' configs or restarting them, if the hub supports
+  any of the five agents' configs or restarting them, if the hub supports
   live reload (mcp-hub does, via SSE).
 - The collision check against `known_host_injected` (docs/research.md
   §"Codex — three hard constraints") shrinks to checking one name instead
@@ -245,23 +259,29 @@ Codex's `codex mcp login`/`logout` pair, Kiro's `oauth`/`oauthScopes`
 fields — and pi, whose bridge is Trellis's own code, simply couldn't
 reach such a server at all.
 
-That changed with gateway mode (below), which made it unavoidable: in
-gateway mode the agent connects to Trellis, and Trellis connects to the
-remote server, so the agent's own OAuth flow is no longer on the path.
-Trellis now implements the client half itself — discovery (RFC 8414 /
-RFC 9728), dynamic client registration (RFC 7591), authorization code
-with PKCE S256 (RFC 7636), and the refresh grant — in `src/lib/oauth/`.
+Gateway mode does not automatically take ownership of OAuth servers. Mark a
+server explicitly with `auth: oauth` (or `trellis mcp set <name> --auth oauth`)
+and gateway planning keeps it direct. This preserves the native Agent OAuth
+flow for Claude Code/Codex/Kiro; Pi's bridge is the client for its direct OAuth
+connection and may use Trellis's own OAuth store. Trellis never infers this
+classification from a URL or a transient 401.
+
+Trellis still implements the client half itself — discovery (RFC 8414 /
+RFC 9728), dynamic client registration (RFC 7591), authorization code with
+PKCE S256 (RFC 7636), and the refresh grant — in `src/lib/oauth/`, but that
+path is currently used for Pi/direct bridge connections rather than silently
+replacing native Agent authorization.
 
 Two rules shape it, both from the constraint that the gateway is spawned
 silently by an agent with no terminal attached:
 
-- **Only `trellis mcp auth <server>` ever opens a browser.** It is run by
-  a human, once. The gateway never initiates an interactive flow under
-  any circumstance; a server with no stored credential is skipped the
-  same way an unreachable one is.
+- **Only an explicit human authorization command opens a browser.** Native
+  clients use their own login command for direct OAuth entries. Pi's direct
+  bridge uses `trellis mcp auth <server>`. The gateway never initiates an
+  interactive flow and never connects an OAuth-marked server.
 - **Refreshing is silent, and serialized by a lock.** A `refresh_token`
-  grant needs neither a browser nor a callback, so the gateway does it
-  at connect time. The lock (`~/.trellis/mcp/oauth/<name>.lock`) exists
+  grant needs neither a browser nor a callback, so the Pi direct bridge can
+  do it at connect time. The lock (`~/.trellis/mcp/oauth/<name>.lock`) exists
   because most authorization servers rotate the refresh token and
   invalidate its predecessor — two concurrent refreshes would leave one
   party holding a credential that is already dead.
@@ -272,8 +292,9 @@ mode 0600, never in `servers.yaml` and never in the OS keychain (macOS's
 non-interactive, no-GUI-session context the gateway runs in — measured,
 not assumed).
 
-In direct mode nothing here applies: each agent keeps using its own
-native OAuth flow, exactly as before.
+In direct mode nothing here changes: each agent keeps using its own native
+OAuth flow. In gateway mode, an OAuth-marked server is also kept direct; only
+ordinary MCP servers enter the gateway.
 
 ## MCP gateway mode
 
@@ -311,15 +332,25 @@ true rather than aspirational:
 would have written for that agent (same `resolveMcpPlan`, so per-server
 `agents:` scope, `enabled: false`, host-injected collisions,
 literal-secret refusals and unresolved `env` names all behave
-identically), connects each one, and exposes their tools as
-`<server>__<tool>`. Secrets resolve through `resolveSecretEnv` exactly as
+identically), connects each one, and exposes their tools through the shared
+Agent-safe name allocator. Names contain only `[A-Za-z0-9_-]` and are at most
+64 characters; unique short names stay short, while duplicate names retain a
+normalized `<server>__<tool>` identity. Secrets resolve through
+`resolveSecretEnv` exactly as
 in direct mode — the gateway introduces no second path by which a value
 could reach disk.
 
 **What it changes for the agents:** Codex's single-`bearer_token_env_var`
 limitation stops applying, because Codex no longer receives any server's
-`headers` — the gateway holds them. Remote servers needing real OAuth
-become reachable from every agent, including pi, for the same reason.
+`headers` — the gateway holds them. OAuth-marked servers are intentionally
+kept direct; ordinary remote servers remain shared through the gateway. An
+upstream tool keeps its original name when that name is unique and longer than
+the short-name threshold; generic short names receive a compact
+`<server>__<tool>` prefix even when unique. A tool already carrying its source
+prefix is not repeated. Dotted or otherwise invalid names are normalized, and long names
+receive a deterministic hash suffix within the 64-character budget. If
+normalized names still collide, Trellis adds a stable suffix instead of
+dropping a tool.
 
 **The seam.** `src/commands/mcpGateway.ts` depends on a `GatewayBackend`
 interface and nothing below it — never a connection, transport, or
@@ -332,12 +363,117 @@ substitution at one construction site: the entry written into each
 agent's config is identical either way, so converging later requires no
 re-sync and nothing the user notices.
 
+## MCP Runtime direction
+
+Gateway mode is the first consumer of a broader runtime shape. The runtime
+edge is available as `trellis mcp-runtime --agent <id>`. Existing
+`trellis mcp-gateway --agent <id>` entries are a compatibility alias and now
+use the same provider registry. Both edges can expose Trellis-owned
+capabilities and selected upstream MCP capabilities:
+
+```text
+Agent
+  │ one MCP connection
+  ▼
+Trellis MCP Runtime
+  ├─ BuiltinRegistry
+  │   ├─ SkillProvider   (read/search canonical skills)
+  │   ├─ RuntimeMemoryProvider
+  │   │   └─ CanonicalMemoryProvider (read-only canonical Markdown)
+  │   └─ StatusProvider  (future read-only diagnostics)
+  └─ UpstreamProvider
+      └─ existing GatewayBackend / future RemoteBackend
+```
+
+The runtime is a protocol edge; providers are the capability boundary. A
+provider may expose tools, resources, prompts, or a combination. The current
+`GatewayBackend` remains the upstream tool aggregation implementation and is
+mounted as an `UpstreamProvider`, so connection, OAuth, timeout, namespace,
+and cleanup logic stay in one place.
+
+Native skills remain the default delivery. Runtime MCP delivery is configured
+per agent under `mcp.runtime.delivery` and supports `native`, `mcp`, or
+`both`. The built-in providers are intentionally read-only and scope-filtered:
+SkillProvider reads canonical skills, while RuntimeMemoryProvider adapts a
+CanonicalMemoryProvider that reads canonical Markdown memories through
+`trellis.memory.search`, `trellis.memory.read`, and
+`trellis://memories/<name>.md`. Neither executes scripts or mutates canonical
+state. When the documented `memory` MCP backend is enabled, Agent-created
+entities and observations are written through that upstream MCP server; the
+Runtime provider does not duplicate its graph protocol. `trellis memory
+extract` is the explicit, conflict-safe graph-to-canonical path. A future
+local-graph/OpenViking source can implement the same MemoryProvider contract,
+and native/private Agent stores are never scraped implicitly.
+
+`trellis.runtime.status` reports Memory readiness separately: backend
+configuration, graph existence/readiness, canonical count, write authority,
+and which managed Agents receive the shared route. This prevents an empty
+canonical directory from being mistaken for a missing or unusable backend.
+
+Onboarding keeps two Memory decisions independent:
+
+- `--memory-migrate on|off` imports supported native Markdown memory into
+  canonical `memories/*.md`.
+- `--memory on|off` enables the shared Memory MCP backend and graph.
+
+The first adapter is Claude Code's exact current-workspace project-memory
+directory. Kimi Code and pi session stores, and Kiro databases, are reported as
+unsupported until a format-specific adapter is reviewed; Trellis does not
+interpret sessions or caches as memory.
+
+Kimi Code is Runtime-first. Its adapter writes one `trellis` entry to
+`~/.kimi-code/mcp.json`; it does not copy canonical Skills into
+`~/.kimi-code/skills` when delivery is `mcp`. Use `trellis kimi` for this mode:
+the launcher passes Kimi's documented `--skills-dir` override an empty
+temporary directory, preventing Kimi's automatic `~/.agents/skills` discovery
+from duplicating the Runtime SkillProvider. Kimi's native mode remains
+available when delivery is `native` or `both`.
+
+Kimi's user MCP registry is `~/.kimi-code/mcp.json`; the adapter preserves
+unowned entries and uses the existing MCP ownership ledger for the one entry
+Trellis owns. The Kimi CLI itself remains responsible for login and OAuth.
+
+## Built-in Trellis Skill lifecycle
+
+`schema/builtin-skills/trellis-runtime/SKILL.md` is part of the Trellis
+package, not a user-specific copy. `trellis init` bootstraps it into the
+canonical source at `~/.trellis/skills/trellis-runtime/SKILL.md`; subsequent
+changes are made once there and distributed through the normal adapter path.
+
+The Skill has two contracts:
+
+- **Takeover contract:** describe the safe operator flow — inspect, dry-run,
+  choose the migration source and managed boundary, select capabilities,
+  authorize OAuth, sync, audit, verify, and rollback. This is a procedure for
+  the human or an Agent assisting the human; it is not a license for an Agent
+  to silently rewrite native configuration.
+- **Runtime contract:** describe how a managed Agent consumes
+  `SkillProvider`, `RuntimeMemoryProvider`, the instruction provider, status
+  providers, and task handoff providers through the current MCP edge.
+
+Delivery determines how the second contract reaches an Agent:
+
+| Delivery | Projection | Runtime Skill source |
+| --- | --- | --- |
+| `native` | Trellis-owned native symlink | Agent's native Skill discovery |
+| `mcp` | No native Trellis Skill projection | `SkillProvider` through `trellis mcp-runtime` |
+| `both` | Native projection plus Runtime entry | Both, intentionally during compatibility or transition |
+
+This keeps takeover instructions and post-takeover capability instructions in
+one versioned Skill while preserving the security boundary: Runtime providers
+are external context, native instructions remain authoritative at startup,
+and task mutations require explicit confirmation. The MCP client's generated
+namespace (for example `mcp__trellis__skills_search`) is not part of the
+portable Skill contract.
+
 ## What Trellis explicitly does not build
 
 - A resident MCP gateway daemon. Gateway mode above is a per-session
   subprocess with no lifecycle; hub mode points at something you operate.
   Neither is a service Trellis starts, supervises, or keeps running.
-- A memory backend (defaults to `@modelcontextprotocol/server-memory`,
+- A semantic/external memory backend (the built-in provider only exposes
+  read-only canonical Markdown; the default graph backend remains
+  `@modelcontextprotocol/server-memory`,
   turned on with `trellis onboard --memory on` (trellis-onboard-mcp-mode)
   rather than hand-editing `servers.yaml`, documented in
   `schema/servers.example.yaml`; mem0/OpenMemory and totalrecallai-class
@@ -347,8 +483,12 @@ re-sync and nothing the user notices.
   provides — `~/.config/agent-env/secrets.env`, 1Password's `op run`,
   anything that populates `process.env` before an adapter's generated
   command runs)
-- A GUI (P5 in the roadmap evaluates embedding into an existing one —
-  mcp-router's or skills-hub's — before building a new one)
+- A GUI is now `@trellis/gui` — P10 in the roadmap, not P5 (P5 is
+  `@trellis/sdk`, the read-only API the GUI's own read views could have
+  used but didn't, per `openspec/changes/trellis-gui/design.md` Decision
+  1 — the GUI's sidecar imports internal command modules directly
+  instead, to reuse write/backup mechanics `@trellis/sdk`'s read-only
+  barrel deliberately excludes)
 
 ## MCP handshake probing is opt-in, not default
 
@@ -419,6 +559,53 @@ once; it is never where you repeatedly verify against it.
 ```
 scripts/sandbox.sh                    # interactive shell in the sandbox
 scripts/sandbox.sh npm run dev doctor  # run a command in the sandbox
+scripts/sandbox.sh --runtime           # divergent multi-agent Runtime lab
+scripts/sandbox.sh --migration         # Kiro -> Codex post-migration lab
+scripts/sandbox.sh --management        # steady-state unified management lab
+scripts/sandbox.sh --failure           # hanging-upstream isolation lab
+scripts/sandbox-matrix.sh              # run the full scenario matrix
+scripts/agent-sandbox.sh               # real Codex/Claude/Kiro/pi/Kimi CLI config smoke
+```
+
+`agent-sandbox.sh` 默认使用一次性 HOME。需要进行授权时，显式使用专用
+Docker volume（默认名为 `trellis-agent-auth-home`）：
+
+如果宿主机已经登录 Codex 或 pi，可以显式复用单个认证文件：
+
+```
+scripts/agent-sandbox.sh --host-auth codex
+scripts/agent-sandbox.sh --host-auth pi
+```
+
+这两个命令只读取宿主机对应的 `auth.json`，不读取整个 agent 配置目录。
+
+```
+scripts/agent-sandbox.sh --login codex
+scripts/agent-sandbox.sh --login claude
+scripts/agent-sandbox.sh --login kiro
+scripts/agent-sandbox.sh --status codex
+scripts/agent-sandbox.sh --status claude
+scripts/agent-sandbox.sh --status kiro
+scripts/agent-sandbox.sh --auth codex exec --help
+scripts/agent-sandbox.sh --auth claude -p --help
+scripts/agent-sandbox.sh --prepare
+scripts/agent-sandbox.sh --host-auth codex
+scripts/agent-sandbox.sh --host-auth pi
+```
+
+授权只写入这个 Docker volume，不会复制宿主机的登录态，也不会进入
+Git、镜像或 fixture。`--login` 会分别执行真实 agent 的登录命令：
+Codex 使用 device auth，Claude Code 使用 Claude subscription 登录，
+Kiro CLI 使用 free license 的 device flow。Kiro 在未登录时会明确拒绝
+`mcp list`，这是预期的授权前置条件。需要清空授权 volume 时，应由用户
+显式执行 `docker volume rm <volume-name>`；Trellis 不会自动删除它。
+
+授权后若要在同一登录态中运行真实 agent，使用 `--auth` 前缀，例如：
+
+```
+scripts/agent-sandbox.sh --prepare
+scripts/agent-sandbox.sh --auth codex exec ...
+scripts/agent-sandbox.sh --auth claude -p ...
 ```
 
 Backed by OrbStack (this machine's Docker context — a Mac-native,
@@ -449,5 +636,20 @@ known findings, not just to look plausible:
   exercise the case-sensitivity check.
 - `test/fixtures/sample-mcp-server.js` — a minimal real MCP server (reads
   `initialize` over stdio, replies with fixed `serverInfo`) so
-  `probeMcpServer` has something deterministic to handshake against inside
-  the container without depending on a real npm package or network access.
+ `probeMcpServer` has something deterministic to handshake against inside
+ the container without depending on a real npm package or network access.
+
+For the MCP Runtime phase, the sandbox has a separate intentionally
+divergent fixture rather than expanding the baseline one:
+
+```
+scripts/sandbox.sh --runtime
+```
+
+This scenario gives Claude Code, Codex, Kiro, pi, and Kimi Code different native
+skills, instructions, and MCP entries; adds canonical scope, per-agent
+direct/gateway routes, `native`/`mcp`/`both` delivery, a deliberate
+host-injected collision, and canonical memory content. The lab then runs
+native sync, MCP sync, memory sync, secrets audit, and real MCP client
+handshakes against Claude/Codex/pi/Kimi runtime views. All writes stay inside
+the container-local HOME.

package/docs/assets/brand-v3/trellis-mark-v3-a.svg

@@ -0,0 +1,10 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 96 96" role="img" aria-labelledby="title desc">
+  <title id="title">Trellis mark</title>
+  <desc id="desc">A letter T whose beam is a trellis lattice.</desc>
+  <g fill="none" stroke="#161c24" stroke-linecap="round">
+    <rect x="16" y="18" width="64" height="18" rx="9" stroke-width="5.5"/>
+    <g stroke-width="2.6" clip-path="url(#a-beam)"><path d="M-64.5 32 L-55.5 23"/><path d="M-64.5 23 L-55.5 32"/><path d="M-46.5 32 L-37.5 23"/><path d="M-46.5 23 L-37.5 32"/><path d="M-28.5 32 L-19.5 23"/><path d="M-28.5 23 L-19.5 32"/><path d="M-10.5 32 L-1.5 23"/><path d="M-10.5 23 L-1.5 32"/><path d="M7.5 32 L16.5 23"/><path d="M7.5 23 L16.5 32"/><path d="M25.5 32 L34.5 23"/><path d="M25.5 23 L34.5 32"/><path d="M43.5 32 L52.5 23"/><path d="M43.5 23 L52.5 32"/><path d="M61.5 32 L70.5 23"/><path d="M61.5 23 L70.5 32"/><path d="M79.5 32 L88.5 23"/><path d="M79.5 23 L88.5 32"/><path d="M97.5 32 L106.5 23"/><path d="M97.5 23 L106.5 32"/><path d="M115.5 32 L124.5 23"/><path d="M115.5 23 L124.5 32"/></g>
+    <path d="M48 36 V78" stroke-width="8"/>
+  </g>
+  <defs><clipPath id="a-beam"><rect x="21" y="23" width="54" height="9" rx="4.5"/></clipPath></defs>
+</svg>

package/docs/assets/poster-series-v3/README.md

@@ -0,0 +1,60 @@
+# Agent Trellis poster series
+
+The canonical brand mark and social poster series. The earlier v1 and v2
+iterations were retired and removed; they remain in git history (`f4e5136`,
+`1045bb6`).
+
+Design notes:
+
+- The hero zone of each poster is a purpose-built diagram (agent paths,
+  migration flow, shared memory rail, context handoff) instead of the logo
+  scaled up inside empty corner brackets.
+- Each theme gets its own quiet accent color (indigo / teal / violet /
+  orange); the mark itself stays single-ink.
+- The kicker/title overlap in the v1 English layout is fixed; all metrics are
+  computed from the title baseline.
+- One horizontal 1200x675 master (X/Twitter, WeChat article header) joins the
+  3:4 verticals, in both English and Chinese.
+- Vertical posters are phone-first (feed width ~390 css px): body text runs at
+  34/35 px, diagram labels at 16-17 px, install line at 32 px. The horizontal
+  masters are desktop-first and keep the denser metrics.
+
+## Mark
+
+The brand mark is the **Lattice T** — the letter T whose beam is a trellis
+lattice: [svg](../brand-v3/trellis-mark-v3-a.svg) /
+[png](../brand-v3/trellis-mark-v3-a.png). It is a single-ink symbol and is the
+same mark used in the README header and every poster. Two retired alternates
+(constellation T, lattice panel) remain in git history.
+
+## Posters
+
+Vertical masters are 1080x1440 (3:4, Xiaohongshu / WeChat Moments); horizontal
+masters are 1200x675 (16:9). SVG sources are the editable masters.
+
+| Theme | EN | ZH |
+|---|---|---|
+| Unified runtime | [svg](agent-trellis-poster-v3-unified-en.svg) / [png](agent-trellis-poster-v3-unified-en.png) | [svg](agent-trellis-poster-v3-unified-zh.svg) / [png](agent-trellis-poster-v3-unified-zh.png) |
+| One-command migration | [svg](agent-trellis-poster-v3-migrate-en.svg) / [png](agent-trellis-poster-v3-migrate-en.png) | [svg](agent-trellis-poster-v3-migrate-zh.svg) / [png](agent-trellis-poster-v3-migrate-zh.png) |
+| Shared memory | [svg](agent-trellis-poster-v3-memory-en.svg) / [png](agent-trellis-poster-v3-memory-en.png) | [svg](agent-trellis-poster-v3-memory-zh.svg) / [png](agent-trellis-poster-v3-memory-zh.png) |
+| Switch agents | [svg](agent-trellis-poster-v3-switch-en.svg) / [png](agent-trellis-poster-v3-switch-en.png) | [svg](agent-trellis-poster-v3-switch-zh.svg) / [png](agent-trellis-poster-v3-switch-zh.png) |
+| Horizontal hero | [svg](agent-trellis-poster-v3-horizontal-en.svg) / [png](agent-trellis-poster-v3-horizontal-en.png) | [svg](agent-trellis-poster-v3-horizontal-zh.svg) / [png](agent-trellis-poster-v3-horizontal-zh.png) |
+
+## Copy
+
+Same approved copy as v1:
+
+- `One Runtime. Every Code Agent.` / 一个 Runtime，统一所有 Code Agent。
+- `Migrate in one command.` / 一条命令，迁移现有配置。
+- `Keep context in the loop.` / 让上下文始终在线。
+- `Change Agents. Keep moving.` / 切换 Agent，不丢上下文。
+
+## Regenerate
+
+```bash
+node scripts/generate-brand-v3.mjs          # brand mark
+node scripts/generate-poster-series-v3.mjs  # 8 vertical + 2 horizontal posters
+```
+
+Both scripts write SVG masters into `docs/assets/` and render PNGs through
+`qlmanage` + `sips` (macOS built-ins, no extra dependencies).

package/docs/assets/poster-series-v3/agent-trellis-poster-v3-horizontal-en.svg

@@ -0,0 +1,51 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1600" height="1600" viewBox="0 0 1600 1600">
+  <rect width="1600" height="1600" fill="#fafaf8"/>
+  <g transform="translate(0 350)">
+    <g transform="translate(64 100) scale(0.58)" fill="none" stroke="#161c24" stroke-linecap="round">
+  <defs><clipPath id="v3-beam-64-100"><rect x="21" y="23" width="54" height="9" rx="4.5"/></clipPath></defs>
+  <rect x="16" y="18" width="64" height="18" rx="9" stroke-width="5.5"/>
+  <g stroke-width="2.6" clip-path="url(#v3-beam-64-100)"><path d="M-64.5 32 L-55.5 23"/><path d="M-64.5 23 L-55.5 32"/><path d="M-46.5 32 L-37.5 23"/><path d="M-46.5 23 L-37.5 32"/><path d="M-28.5 32 L-19.5 23"/><path d="M-28.5 23 L-19.5 32"/><path d="M-10.5 32 L-1.5 23"/><path d="M-10.5 23 L-1.5 32"/><path d="M7.5 32 L16.5 23"/><path d="M7.5 23 L16.5 32"/><path d="M25.5 32 L34.5 23"/><path d="M25.5 23 L34.5 32"/><path d="M43.5 32 L52.5 23"/><path d="M43.5 23 L52.5 32"/><path d="M61.5 32 L70.5 23"/><path d="M61.5 23 L70.5 32"/><path d="M79.5 32 L88.5 23"/><path d="M79.5 23 L88.5 32"/><path d="M97.5 32 L106.5 23"/><path d="M97.5 23 L106.5 32"/><path d="M115.5 32 L124.5 23"/><path d="M115.5 23 L124.5 32"/></g>
+  <path d="M48 36 V78" stroke-width="8"/>
+</g>
+    <text x="140" y="141" text-anchor="start" font-family="Helvetica Neue, PingFang SC, Arial, sans-serif" font-size="26" font-weight="700" letter-spacing="2.6" fill="#161c24">AGENT TRELLIS</text>
+    <text x="1536" y="140" text-anchor="end" font-family="Menlo, SFMono-Regular, monospace" font-size="15" font-weight="400" letter-spacing="1.7" fill="#69727d">OPEN SOURCE · LOCAL FIRST</text>
+    <path d="M64 192 H1536" stroke="#dfe4ea" stroke-width="1.5"/>
+    <rect x="64" y="189" width="46" height="3" fill="#3457d5"/>
+
+    <text x="108" y="262" text-anchor="start" font-family="Menlo, SFMono-Regular, monospace" font-size="17" font-weight="400" letter-spacing="2.2" fill="#3457d5">UNIFIED CODE AGENT RUNTIME</text>
+    <rect x="64" y="300" width="8" height="182" fill="#3457d5"/>
+    <text x="108" y="366" text-anchor="start" font-family="Helvetica Neue, PingFang SC, Arial, sans-serif" font-size="84" font-weight="800" letter-spacing="-2.2" fill="#161c24">One Runtime.</text><text x="108" y="464" text-anchor="start" font-family="Helvetica Neue, PingFang SC, Arial, sans-serif" font-size="84" font-weight="800" letter-spacing="-2.2" fill="#161c24">Every Code Agent.</text>
+    <text x="108" y="522" text-anchor="start" font-family="Helvetica Neue, PingFang SC, Arial, sans-serif" font-size="24" font-weight="450" letter-spacing="0" fill="#69727d">Skills, MCP, Memory and Instructions</text><text x="108" y="558" text-anchor="start" font-family="Helvetica Neue, PingFang SC, Arial, sans-serif" font-size="24" font-weight="450" letter-spacing="0" fill="#69727d">stay aligned from one canonical source.</text>
+
+    <text x="108" y="640" text-anchor="start" font-family="Menlo, SFMono-Regular, monospace" font-size="15" font-weight="400" letter-spacing="1.6" fill="#69727d">SKILLS · MCP · MEMORY · INSTRUCTIONS</text>
+    <circle cx="112" cy="700" r="5.5" fill="#3457d5"/>
+    <text x="140" y="709" text-anchor="start" font-family="Menlo, SFMono-Regular, monospace" font-size="24" font-weight="500" letter-spacing="0.2" fill="#161c24">$ npm i -g agent-trellis</text>
+
+    <g>
+  <rect x="1000" y="250" width="500" height="450" fill="none" stroke="#dfe4ea" stroke-width="1.5"/>
+  <path d="M991 250 H1009 M1000 241 V259" fill="none" stroke="#dfe4ea" stroke-width="2"/><path d="M1491 250 H1509 M1500 241 V259" fill="none" stroke="#dfe4ea" stroke-width="2"/><path d="M991 700 H1009 M1000 691 V709" fill="none" stroke="#dfe4ea" stroke-width="2"/><path d="M1491 700 H1509 M1500 691 V709" fill="none" stroke="#dfe4ea" stroke-width="2"/>
+  <rect x="1018" y="228" width="242" height="44" fill="#fafaf8"/>
+  <text x="1035" y="258" text-anchor="start" font-family="Menlo, SFMono-Regular, monospace" font-size="20" font-weight="400" letter-spacing="1.8" fill="#3457d5">FIG.00 — RUNTIME</text>
+</g>
+    <g>
+  <rect x="1039" y="319" width="22" height="22" rx="6" fill="none" stroke="#161c24" stroke-width="3"/><rect x="1039" y="464" width="22" height="22" rx="6" fill="none" stroke="#161c24" stroke-width="3"/><rect x="1039" y="609" width="22" height="22" rx="6" fill="none" stroke="#161c24" stroke-width="3"/>
+  <g fill="none">
+  <defs><clipPath id="d-horizontal"><rect x="1172" y="337" width="156" height="276" rx="12"/></clipPath></defs>
+  <rect x="1165" y="330" width="170" height="290" rx="18" stroke="#161c24" stroke-width="3.5"/>
+  <g clip-path="url(#d-horizontal)" stroke="#69727d" stroke-width="2" opacity="0.85"><path d="M710 613 L986 337"/><path d="M710 337 L986 613"/><path d="M731 613 L1007 337"/><path d="M731 337 L1007 613"/><path d="M752 613 L1028 337"/><path d="M752 337 L1028 613"/><path d="M773 613 L1049 337"/><path d="M773 337 L1049 613"/><path d="M794 613 L1070 337"/><path d="M794 337 L1070 613"/><path d="M815 613 L1091 337"/><path d="M815 337 L1091 613"/><path d="M836 613 L1112 337"/><path d="M836 337 L1112 613"/><path d="M857 613 L1133 337"/><path d="M857 337 L1133 613"/><path d="M878 613 L1154 337"/><path d="M878 337 L1154 613"/><path d="M899 613 L1175 337"/><path d="M899 337 L1175 613"/><path d="M920 613 L1196 337"/><path d="M920 337 L1196 613"/><path d="M941 613 L1217 337"/><path d="M941 337 L1217 613"/><path d="M962 613 L1238 337"/><path d="M962 337 L1238 613"/><path d="M983 613 L1259 337"/><path d="M983 337 L1259 613"/><path d="M1004 613 L1280 337"/><path d="M1004 337 L1280 613"/><path d="M1025 613 L1301 337"/><path d="M1025 337 L1301 613"/><path d="M1046 613 L1322 337"/><path d="M1046 337 L1322 613"/><path d="M1067 613 L1343 337"/><path d="M1067 337 L1343 613"/><path d="M1088 613 L1364 337"/><path d="M1088 337 L1364 613"/><path d="M1109 613 L1385 337"/><path d="M1109 337 L1385 613"/><path d="M1130 613 L1406 337"/><path d="M1130 337 L1406 613"/><path d="M1151 613 L1427 337"/><path d="M1151 337 L1427 613"/><path d="M1172 613 L1448 337"/><path d="M1172 337 L1448 613"/><path d="M1193 613 L1469 337"/><path d="M1193 337 L1469 613"/><path d="M1214 613 L1490 337"/><path d="M1214 337 L1490 613"/><path d="M1235 613 L1511 337"/><path d="M1235 337 L1511 613"/><path d="M1256 613 L1532 337"/><path d="M1256 337 L1532 613"/><path d="M1277 613 L1553 337"/><path d="M1277 337 L1553 613"/><path d="M1298 613 L1574 337"/><path d="M1298 337 L1574 613"/><path d="M1319 613 L1595 337"/><path d="M1319 337 L1595 613"/><path d="M1340 613 L1616 337"/><path d="M1340 337 L1616 613"/><path d="M1361 613 L1637 337"/><path d="M1361 337 L1637 613"/><path d="M1382 613 L1658 337"/><path d="M1382 337 L1658 613"/><path d="M1403 613 L1679 337"/><path d="M1403 337 L1679 613"/><path d="M1424 613 L1700 337"/><path d="M1424 337 L1700 613"/><path d="M1445 613 L1721 337"/><path d="M1445 337 L1721 613"/><path d="M1466 613 L1742 337"/><path d="M1466 337 L1742 613"/><path d="M1487 613 L1763 337"/><path d="M1487 337 L1763 613"/><path d="M1508 613 L1784 337"/><path d="M1508 337 L1784 613"/><path d="M1529 613 L1805 337"/><path d="M1529 337 L1805 613"/><path d="M1550 613 L1826 337"/><path d="M1550 337 L1826 613"/><path d="M1571 613 L1847 337"/><path d="M1571 337 L1847 613"/><path d="M1592 613 L1868 337"/><path d="M1592 337 L1868 613"/><path d="M1613 613 L1889 337"/><path d="M1613 337 L1889 613"/><path d="M1634 613 L1910 337"/><path d="M1634 337 L1910 613"/></g>
+</g>
+  <g fill="none" stroke="#161c24" stroke-width="3">
+    <path d="M1062 330 C 1120 330 1128 400 1165 400"/>
+    <path d="M1062 475 H1165"/>
+    <path d="M1062 620 C 1120 620 1128 550 1165 550"/>
+    <path d="M1335 400 H1450 M1335 475 H1450 M1335 550 H1450"/>
+  </g>
+  <g fill="#3457d5"><circle cx="1456" cy="400" r="6.5"/><circle cx="1456" cy="475" r="6.5"/><circle cx="1456" cy="550" r="6.5"/></g>
+</g>
+    <text x="1250" y="745" text-anchor="middle" font-family="Menlo, SFMono-Regular, monospace" font-size="14" font-weight="400" letter-spacing="2" fill="#3457d5">ONE RUNTIME · MANY AGENTS</text>
+
+    <path d="M64 784 H1536" stroke="#dfe4ea" stroke-width="1.5"/>
+    <text x="64" y="822" text-anchor="start" font-family="Menlo, SFMono-Regular, monospace" font-size="13.5" font-weight="400" letter-spacing="1.5" fill="#69727d">AGENT TRELLIS — UNIFIED CODE AGENT RUNTIME</text>
+    <text x="1536" y="822" text-anchor="end" font-family="Menlo, SFMono-Regular, monospace" font-size="13.5" font-weight="400" letter-spacing="1.5" fill="#69727d">agent-trellis.dev</text>
+  </g>
+</svg>

package/docs/assets/poster-series-v3/agent-trellis-poster-v3-horizontal-zh.svg

@@ -0,0 +1,51 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1600" height="1600" viewBox="0 0 1600 1600">
+  <rect width="1600" height="1600" fill="#fafaf8"/>
+  <g transform="translate(0 350)">
+    <g transform="translate(64 100) scale(0.58)" fill="none" stroke="#161c24" stroke-linecap="round">
+  <defs><clipPath id="v3-beam-64-100"><rect x="21" y="23" width="54" height="9" rx="4.5"/></clipPath></defs>
+  <rect x="16" y="18" width="64" height="18" rx="9" stroke-width="5.5"/>
+  <g stroke-width="2.6" clip-path="url(#v3-beam-64-100)"><path d="M-64.5 32 L-55.5 23"/><path d="M-64.5 23 L-55.5 32"/><path d="M-46.5 32 L-37.5 23"/><path d="M-46.5 23 L-37.5 32"/><path d="M-28.5 32 L-19.5 23"/><path d="M-28.5 23 L-19.5 32"/><path d="M-10.5 32 L-1.5 23"/><path d="M-10.5 23 L-1.5 32"/><path d="M7.5 32 L16.5 23"/><path d="M7.5 23 L16.5 32"/><path d="M25.5 32 L34.5 23"/><path d="M25.5 23 L34.5 32"/><path d="M43.5 32 L52.5 23"/><path d="M43.5 23 L52.5 32"/><path d="M61.5 32 L70.5 23"/><path d="M61.5 23 L70.5 32"/><path d="M79.5 32 L88.5 23"/><path d="M79.5 23 L88.5 32"/><path d="M97.5 32 L106.5 23"/><path d="M97.5 23 L106.5 32"/><path d="M115.5 32 L124.5 23"/><path d="M115.5 23 L124.5 32"/></g>
+  <path d="M48 36 V78" stroke-width="8"/>
+</g>
+    <text x="140" y="141" text-anchor="start" font-family="Helvetica Neue, PingFang SC, Arial, sans-serif" font-size="26" font-weight="700" letter-spacing="2.6" fill="#161c24">AGENT TRELLIS</text>
+    <text x="1536" y="140" text-anchor="end" font-family="Menlo, SFMono-Regular, monospace" font-size="15" font-weight="400" letter-spacing="1.7" fill="#69727d">OPEN SOURCE · LOCAL FIRST</text>
+    <path d="M64 192 H1536" stroke="#dfe4ea" stroke-width="1.5"/>
+    <rect x="64" y="189" width="46" height="3" fill="#3457d5"/>
+
+    <text x="108" y="262" text-anchor="start" font-family="Menlo, SFMono-Regular, monospace" font-size="17" font-weight="400" letter-spacing="2.2" fill="#3457d5">UNIFIED CODE AGENT RUNTIME</text>
+    <rect x="64" y="308" width="8" height="164" fill="#3457d5"/>
+    <text x="108" y="366" text-anchor="start" font-family="Helvetica Neue, PingFang SC, Arial, sans-serif" font-size="74" font-weight="800" letter-spacing="-1" fill="#161c24">一个 Runtime，</text><text x="108" y="456" text-anchor="start" font-family="Helvetica Neue, PingFang SC, Arial, sans-serif" font-size="74" font-weight="800" letter-spacing="-1" fill="#161c24">统一所有 Code Agent。</text>
+    <text x="108" y="514" text-anchor="start" font-family="Helvetica Neue, PingFang SC, Arial, sans-serif" font-size="24" font-weight="450" letter-spacing="0" fill="#69727d">从一个 canonical source 统一管理</text><text x="108" y="550" text-anchor="start" font-family="Helvetica Neue, PingFang SC, Arial, sans-serif" font-size="24" font-weight="450" letter-spacing="0" fill="#69727d">Skill、MCP、Memory 与共享指令。</text>
+
+    <text x="108" y="640" text-anchor="start" font-family="Menlo, SFMono-Regular, monospace" font-size="15" font-weight="400" letter-spacing="1.6" fill="#69727d">SKILLS · MCP · MEMORY · INSTRUCTIONS</text>
+    <circle cx="112" cy="700" r="5.5" fill="#3457d5"/>
+    <text x="140" y="709" text-anchor="start" font-family="Menlo, SFMono-Regular, monospace" font-size="24" font-weight="500" letter-spacing="0.2" fill="#161c24">$ npm i -g agent-trellis</text>
+
+    <g>
+  <rect x="1000" y="250" width="500" height="450" fill="none" stroke="#dfe4ea" stroke-width="1.5"/>
+  <path d="M991 250 H1009 M1000 241 V259" fill="none" stroke="#dfe4ea" stroke-width="2"/><path d="M1491 250 H1509 M1500 241 V259" fill="none" stroke="#dfe4ea" stroke-width="2"/><path d="M991 700 H1009 M1000 691 V709" fill="none" stroke="#dfe4ea" stroke-width="2"/><path d="M1491 700 H1509 M1500 691 V709" fill="none" stroke="#dfe4ea" stroke-width="2"/>
+  <rect x="1018" y="228" width="242" height="44" fill="#fafaf8"/>
+  <text x="1035" y="258" text-anchor="start" font-family="Menlo, SFMono-Regular, monospace" font-size="20" font-weight="400" letter-spacing="1.8" fill="#3457d5">FIG.00 — RUNTIME</text>
+</g>
+    <g>
+  <rect x="1039" y="319" width="22" height="22" rx="6" fill="none" stroke="#161c24" stroke-width="3"/><rect x="1039" y="464" width="22" height="22" rx="6" fill="none" stroke="#161c24" stroke-width="3"/><rect x="1039" y="609" width="22" height="22" rx="6" fill="none" stroke="#161c24" stroke-width="3"/>
+  <g fill="none">
+  <defs><clipPath id="d-horizontal"><rect x="1172" y="337" width="156" height="276" rx="12"/></clipPath></defs>
+  <rect x="1165" y="330" width="170" height="290" rx="18" stroke="#161c24" stroke-width="3.5"/>
+  <g clip-path="url(#d-horizontal)" stroke="#69727d" stroke-width="2" opacity="0.85"><path d="M710 613 L986 337"/><path d="M710 337 L986 613"/><path d="M731 613 L1007 337"/><path d="M731 337 L1007 613"/><path d="M752 613 L1028 337"/><path d="M752 337 L1028 613"/><path d="M773 613 L1049 337"/><path d="M773 337 L1049 613"/><path d="M794 613 L1070 337"/><path d="M794 337 L1070 613"/><path d="M815 613 L1091 337"/><path d="M815 337 L1091 613"/><path d="M836 613 L1112 337"/><path d="M836 337 L1112 613"/><path d="M857 613 L1133 337"/><path d="M857 337 L1133 613"/><path d="M878 613 L1154 337"/><path d="M878 337 L1154 613"/><path d="M899 613 L1175 337"/><path d="M899 337 L1175 613"/><path d="M920 613 L1196 337"/><path d="M920 337 L1196 613"/><path d="M941 613 L1217 337"/><path d="M941 337 L1217 613"/><path d="M962 613 L1238 337"/><path d="M962 337 L1238 613"/><path d="M983 613 L1259 337"/><path d="M983 337 L1259 613"/><path d="M1004 613 L1280 337"/><path d="M1004 337 L1280 613"/><path d="M1025 613 L1301 337"/><path d="M1025 337 L1301 613"/><path d="M1046 613 L1322 337"/><path d="M1046 337 L1322 613"/><path d="M1067 613 L1343 337"/><path d="M1067 337 L1343 613"/><path d="M1088 613 L1364 337"/><path d="M1088 337 L1364 613"/><path d="M1109 613 L1385 337"/><path d="M1109 337 L1385 613"/><path d="M1130 613 L1406 337"/><path d="M1130 337 L1406 613"/><path d="M1151 613 L1427 337"/><path d="M1151 337 L1427 613"/><path d="M1172 613 L1448 337"/><path d="M1172 337 L1448 613"/><path d="M1193 613 L1469 337"/><path d="M1193 337 L1469 613"/><path d="M1214 613 L1490 337"/><path d="M1214 337 L1490 613"/><path d="M1235 613 L1511 337"/><path d="M1235 337 L1511 613"/><path d="M1256 613 L1532 337"/><path d="M1256 337 L1532 613"/><path d="M1277 613 L1553 337"/><path d="M1277 337 L1553 613"/><path d="M1298 613 L1574 337"/><path d="M1298 337 L1574 613"/><path d="M1319 613 L1595 337"/><path d="M1319 337 L1595 613"/><path d="M1340 613 L1616 337"/><path d="M1340 337 L1616 613"/><path d="M1361 613 L1637 337"/><path d="M1361 337 L1637 613"/><path d="M1382 613 L1658 337"/><path d="M1382 337 L1658 613"/><path d="M1403 613 L1679 337"/><path d="M1403 337 L1679 613"/><path d="M1424 613 L1700 337"/><path d="M1424 337 L1700 613"/><path d="M1445 613 L1721 337"/><path d="M1445 337 L1721 613"/><path d="M1466 613 L1742 337"/><path d="M1466 337 L1742 613"/><path d="M1487 613 L1763 337"/><path d="M1487 337 L1763 613"/><path d="M1508 613 L1784 337"/><path d="M1508 337 L1784 613"/><path d="M1529 613 L1805 337"/><path d="M1529 337 L1805 613"/><path d="M1550 613 L1826 337"/><path d="M1550 337 L1826 613"/><path d="M1571 613 L1847 337"/><path d="M1571 337 L1847 613"/><path d="M1592 613 L1868 337"/><path d="M1592 337 L1868 613"/><path d="M1613 613 L1889 337"/><path d="M1613 337 L1889 613"/><path d="M1634 613 L1910 337"/><path d="M1634 337 L1910 613"/></g>
+</g>
+  <g fill="none" stroke="#161c24" stroke-width="3">
+    <path d="M1062 330 C 1120 330 1128 400 1165 400"/>
+    <path d="M1062 475 H1165"/>
+    <path d="M1062 620 C 1120 620 1128 550 1165 550"/>
+    <path d="M1335 400 H1450 M1335 475 H1450 M1335 550 H1450"/>
+  </g>
+  <g fill="#3457d5"><circle cx="1456" cy="400" r="6.5"/><circle cx="1456" cy="475" r="6.5"/><circle cx="1456" cy="550" r="6.5"/></g>
+</g>
+    <text x="1250" y="745" text-anchor="middle" font-family="Menlo, SFMono-Regular, monospace" font-size="14" font-weight="400" letter-spacing="2" fill="#3457d5">ONE RUNTIME · MANY AGENTS</text>
+
+    <path d="M64 784 H1536" stroke="#dfe4ea" stroke-width="1.5"/>
+    <text x="64" y="822" text-anchor="start" font-family="Menlo, SFMono-Regular, monospace" font-size="13.5" font-weight="400" letter-spacing="1.5" fill="#69727d">AGENT TRELLIS — UNIFIED CODE AGENT RUNTIME</text>
+    <text x="1536" y="822" text-anchor="end" font-family="Menlo, SFMono-Regular, monospace" font-size="13.5" font-weight="400" letter-spacing="1.5" fill="#69727d">agent-trellis.dev</text>
+  </g>
+</svg>