aitoearn-dsh-plugin-test 0.0.1

package/package.json

@@ -0,0 +1,138 @@
+{
+  "name": "aitoearn-dsh-plugin-test",
+  "type": "module",
+  "version": "0.0.1",
+  "description": "[TEST] Aitoearn agent preset, skills, and MCP tools for DeepSeek Harness",
+  "exports": {
+    ".": {
+      "types": "./src/dsh/index.d.ts",
+      "default": "./src/dsh/index.js"
+    },
+    "./client": {
+      "types": "./src/dsh/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "main": "./src/dsh/index.js",
+  "types": "./src/dsh/index.d.ts",
+  "files": [
+    "AGENT.md",
+    "cordis.patch.yml",
+    "lib",
+    "presets",
+    "skills",
+    "src"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-settings-plugins"
+      ]
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-attachment": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-store": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-mcp-client": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-timeout": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "react": "^19.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-attachment": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-store": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-renderer": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-settings": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-settings-plugins": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-slots": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-mcp-client": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-settings": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-subprocess": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-system-prompt": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-timeout": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    },
+    "@deepseek-ai/schemastery": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "@deepseek-ai/schemastery": "3.18.2",
+    "tslib": "^2.8.1"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-store": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-http-proxy": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-mcp-client": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-scope": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-timeout": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
+    "@deepseek-ai/schemastery": "3.18.2",
+    "@types/react": "^19.1.13",
+    "clsx": "^2.1.1",
+    "esbuild": "^0.25.12",
+    "immer": "^10.1.1",
+    "react": "^19.1.1",
+    "zustand": "~4.4.7"
+  },
+  "module": "./src/dsh/index.js"
+}

package/presets/aitoearn/agent.cordis.yml

@@ -0,0 +1,22 @@
+# The Aitoearn agent preset, authored as a self-contained preset package:
+# the harness resolves `@deepseek-ai/*` rows from its own installation, and
+# every `./lib/*.js` row is a bundled module inside this preset directory, so
+# plain Node resolution can always attribute them (the plugin-package request
+# extension walks up to this directory's package.json).
+
+- id: persona
+  name: ./lib/persona.js
+
+- id: skill-filesystem
+  name: '@deepseek-ai/dsh-skill-filesystem'
+  config:
+    providerName: aitoearn
+    includeDefaultRoots: false
+    customSkillDirs:
+      - !!js "process.getBuiltinModule('node:url').fileURLToPath(new URL('skills/', baseUrl))"
+
+- id: tool-skill
+  name: '@deepseek-ai/dsh-tool-skill'
+
+- id: aitoearn-mcp
+  name: ./lib/mcp.js

package/presets/aitoearn/lib/mcp.js

@@ -0,0 +1,150 @@
+// src/dsh/mcp.ts
+import { createRequire } from "node:module";
+
+// src/dsh/auth.ts
+var MCP_PATH = "/api/ai/agent/mcp";
+var API_KEY_ENV = "AITOEARN_API_KEY";
+var DEFAULT_ENVIRONMENT = "global";
+var SETTINGS_NAMESPACE = "aitoearn";
+var ENVIRONMENT_ORIGINS = {
+  global: "https://aitoearn.ai",
+  cn: "https://aitoearn.cn"
+};
+var DEFAULT_MCP_URL = `${ENVIRONMENT_ORIGINS.global}${MCP_PATH}`;
+function pluginConfigFromSettings(section, fallback = {}) {
+  if (section === null || typeof section !== "object" || Array.isArray(section))
+    return fallback;
+  const record = section;
+  return {
+    ...fallback,
+    ...typeof record["environment"] === "string" ? { environment: record["environment"] } : {},
+    ...typeof record["baseUrl"] === "string" ? { baseUrl: record["baseUrl"] } : {},
+    ...typeof record["apiKey"] === "string" ? { apiKey: record["apiKey"] } : {}
+  };
+}
+function resolveEnvironment(value) {
+  if (value === "cn" || value === "custom" || value === "global")
+    return value;
+  return DEFAULT_ENVIRONMENT;
+}
+function resolveOrigin(environment, baseUrl) {
+  if (environment !== "custom")
+    return ENVIRONMENT_ORIGINS[environment];
+  const trimmed = baseUrl?.trim() ?? "";
+  if (trimmed.length === 0)
+    return "";
+  try {
+    const url = new URL(trimmed);
+    if (url.protocol !== "http:" && url.protocol !== "https:")
+      return "";
+    return url.origin;
+  } catch {
+    return "";
+  }
+}
+function resolveMcpUrl(config) {
+  const environment = resolveEnvironment(config.environment);
+  const origin = resolveOrigin(environment, config.baseUrl);
+  if (origin.length === 0)
+    return "";
+  return `${origin}${MCP_PATH}`;
+}
+function resolveAuth(config, env = process.env) {
+  return {
+    mcpUrl: resolveMcpUrl(config),
+    apiKey: config.apiKey?.trim() || env[API_KEY_ENV]?.trim() || ""
+  };
+}
+function authorizationHeader(apiKey) {
+  if (apiKey.length === 0)
+    return {};
+  return { Authorization: `Bearer ${apiKey}` };
+}
+
+// src/dsh/tool-name.ts
+var MCP_SERVER_NAME = "aitoearn";
+var HASHED_PUBLIC_NAME = /_[0-9a-f]{12}$/;
+function qualifiedPrefix(serverName = MCP_SERVER_NAME) {
+  return `mcp__${serverName}__`;
+}
+function toRawPublicName(publicName, serverName = MCP_SERVER_NAME) {
+  const prefix = qualifiedPrefix(serverName);
+  if (!publicName.startsWith(prefix))
+    return { modelName: publicName, stripped: false };
+  if (publicName.length === 64 && HASHED_PUBLIC_NAME.test(publicName))
+    return { modelName: publicName, stripped: false };
+  const raw = publicName.slice(prefix.length);
+  if (raw.length === 0)
+    return { modelName: publicName, stripped: false };
+  return { modelName: raw, stripped: true };
+}
+function patchRawToolNames(tools, serverName = MCP_SERVER_NAME, onKeepQualified) {
+  const original = tools.register.bind(tools);
+  tools.register = (definition) => {
+    const next = toRawPublicName(definition.name, serverName);
+    if (!next.stripped) {
+      if (definition.name.startsWith(qualifiedPrefix(serverName)))
+        onKeepQualified?.(definition.name);
+      return original(definition);
+    }
+    return original({ ...definition, name: next.modelName });
+  };
+  return () => {
+    tools.register = original;
+  };
+}
+
+// src/dsh/mcp.ts
+var runtimeRequire = createRequire(import.meta.url);
+var name = "aitoearn-mcp";
+var inject = ["tools"];
+async function apply(ctx, config = {}) {
+  let current = () => config;
+  let restoreNames;
+  let fiber;
+  const unmount = () => {
+    restoreNames?.();
+    restoreNames = void 0;
+    void fiber?.dispose();
+    fiber = void 0;
+  };
+  const mount = async () => {
+    unmount();
+    const auth = resolveAuth(current());
+    if (auth.apiKey.length === 0 || auth.mcpUrl.length === 0) {
+      ctx.logger.warn("aitoearn-mcp: skip mounting; API key or MCP URL is not configured yet");
+      return;
+    }
+    restoreNames = patchRawToolNames(ctx.tools, MCP_SERVER_NAME, (publicName) => {
+      ctx.logger.info(`kept qualified MCP tool name ${publicName}`);
+    });
+    const mcpClient = runtimeRequire("@deepseek-ai/dsh-mcp-client");
+    const mcpConfig = {
+      serverName: MCP_SERVER_NAME,
+      transport: "streamable-http",
+      url: auth.mcpUrl,
+      headers: authorizationHeader(auth.apiKey),
+      failOnStartupError: false,
+      toolCallTimeoutMs: 12e4
+    };
+    fiber = ctx.plugin(mcpClient, mcpConfig);
+    await fiber;
+    ctx.logger.info(`aitoearn-mcp: mounted MCP tools from ${auth.mcpUrl}`);
+  };
+  ctx.inject(["settings"], (scoped) => {
+    current = () => pluginConfigFromSettings(scoped.settings.get(SETTINGS_NAMESPACE), config);
+    ctx.on("settings/document-updated", (namespace) => {
+      if (String(namespace) === SETTINGS_NAMESPACE)
+        void mount();
+    });
+    void mount();
+  });
+  ctx.effect(() => unmount, "aitoearn-mcp.client");
+  await mount();
+}
+export {
+  apply,
+  inject,
+  name
+};
+//# sourceMappingURL=mcp.js.map

package/presets/aitoearn/lib/mcp.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../tools/agent-plugin/src/dsh/mcp.ts", "../../../../../../../tools/agent-plugin/src/dsh/auth.ts", "../../../../../../../tools/agent-plugin/src/dsh/tool-name.ts"],
+  "sourcesContent": ["import { createRequire } from 'node:module'\nimport { Context, Fiber } from '@deepseek-ai/cordis'\nimport { StreamableHttpConfig } from '@deepseek-ai/dsh-mcp-client'\nimport {} from '@deepseek-ai/dsh-settings'\nimport {} from '@deepseek-ai/dsh-settings/types'\nimport {} from '@deepseek-ai/dsh-tools'\nimport { AitoearnPluginConfig, authorizationHeader, pluginConfigFromSettings, resolveAuth, SETTINGS_NAMESPACE } from './auth.js'\nimport { MCP_SERVER_NAME, patchRawToolNames } from './tool-name.js'\n\nconst runtimeRequire = createRequire(import.meta.url)\n\nexport const name = 'aitoearn-mcp'\nexport const inject = ['tools']\n\nexport async function apply(ctx: Context, config: AitoearnPluginConfig = {}): Promise<void> {\n  let current = () => config\n  let restoreNames: (() => void) | undefined\n  let fiber: Fiber | undefined\n\n  const unmount = () => {\n    restoreNames?.()\n    restoreNames = undefined\n    void fiber?.dispose()\n    fiber = undefined\n  }\n\n  const mount = async () => {\n    unmount()\n    const auth = resolveAuth(current())\n    if (auth.apiKey.length === 0 || auth.mcpUrl.length === 0) {\n      ctx.logger.warn('aitoearn-mcp: skip mounting; API key or MCP URL is not configured yet')\n      return\n    }\n    restoreNames = patchRawToolNames(ctx.tools, MCP_SERVER_NAME, (publicName) => {\n      ctx.logger.info(`kept qualified MCP tool name ${publicName}`)\n    })\n    const mcpClient: typeof import('@deepseek-ai/dsh-mcp-client') = runtimeRequire('@deepseek-ai/dsh-mcp-client')\n    const mcpConfig: StreamableHttpConfig = {\n      serverName: MCP_SERVER_NAME,\n      transport: 'streamable-http',\n      url: auth.mcpUrl,\n      headers: authorizationHeader(auth.apiKey),\n      failOnStartupError: false,\n      toolCallTimeoutMs: 120000,\n    }\n    fiber = ctx.plugin(mcpClient, mcpConfig)\n    await fiber\n    ctx.logger.info(`aitoearn-mcp: mounted MCP tools from ${auth.mcpUrl}`)\n  }\n\n  ctx.inject(['settings'], (scoped) => {\n    current = () => pluginConfigFromSettings(scoped.settings.get(SETTINGS_NAMESPACE), config)\n    ctx.on('settings/document-updated', (namespace) => {\n      if (String(namespace) === SETTINGS_NAMESPACE)\n        void mount()\n    })\n    // The initial apply-time mount may run before the settings section is\n    // readable; mount again once it is, so a stored key takes effect without\n    // requiring a manual settings save.\n    void mount()\n  })\n\n  ctx.effect(() => unmount, 'aitoearn-mcp.client')\n  await mount()\n}\n", "export const MCP_PATH = '/api/ai/agent/mcp'\nexport const API_KEY_ENV = 'AITOEARN_API_KEY'\nexport const DEFAULT_ENVIRONMENT = 'global'\nexport const SETTINGS_NAMESPACE = 'aitoearn'\n\nexport const ENVIRONMENT_ORIGINS = {\n  global: 'https://aitoearn.ai',\n  cn: 'https://aitoearn.cn',\n} as const\n\nexport const DEFAULT_MCP_URL = `${ENVIRONMENT_ORIGINS.global}${MCP_PATH}`\n\nexport type AitoearnEnvironment = 'global' | 'cn' | 'custom'\n\nexport interface AitoearnAuth {\n  mcpUrl: string\n  apiKey: string\n}\n\nexport interface AitoearnPluginConfig {\n  environment?: string\n  baseUrl?: string\n  apiKey?: string\n}\n\nexport function pluginConfigFromSettings(\n  section: unknown,\n  fallback: AitoearnPluginConfig = {},\n): AitoearnPluginConfig {\n  if (section === null || typeof section !== 'object' || Array.isArray(section))\n    return fallback\n  const record = section as Record<string, unknown>\n  return {\n    ...fallback,\n    ...(typeof record['environment'] === 'string' ? { environment: record['environment'] } : {}),\n    ...(typeof record['baseUrl'] === 'string' ? { baseUrl: record['baseUrl'] } : {}),\n    ...(typeof record['apiKey'] === 'string' ? { apiKey: record['apiKey'] } : {}),\n  }\n}\n\nexport function resolveEnvironment(value: string | undefined): AitoearnEnvironment {\n  if (value === 'cn' || value === 'custom' || value === 'global')\n    return value\n  return DEFAULT_ENVIRONMENT\n}\n\nexport function resolveOrigin(environment: AitoearnEnvironment, baseUrl?: string): string {\n  if (environment !== 'custom')\n    return ENVIRONMENT_ORIGINS[environment]\n  const trimmed = baseUrl?.trim() ?? ''\n  if (trimmed.length === 0)\n    return ''\n  try {\n    const url = new URL(trimmed)\n    if (url.protocol !== 'http:' && url.protocol !== 'https:')\n      return ''\n    return url.origin\n  }\n  catch {\n    return ''\n  }\n}\n\nexport function resolveMcpUrl(config: AitoearnPluginConfig): string {\n  const environment = resolveEnvironment(config.environment)\n  const origin = resolveOrigin(environment, config.baseUrl)\n  if (origin.length === 0)\n    return ''\n  return `${origin}${MCP_PATH}`\n}\n\nexport function resolveAuth(\n  config: AitoearnPluginConfig,\n  env: NodeJS.ProcessEnv = process.env,\n): AitoearnAuth {\n  return {\n    mcpUrl: resolveMcpUrl(config),\n    apiKey: config.apiKey?.trim() || env[API_KEY_ENV]?.trim() || '',\n  }\n}\n\nexport function authorizationHeader(apiKey: string): Record<string, string> {\n  if (apiKey.length === 0)\n    return {}\n  return { Authorization: `Bearer ${apiKey}` }\n}\n", "import { ToolRuntime } from '@deepseek-ai/dsh-tools'\n\nexport const MCP_SERVER_NAME = 'aitoearn'\n\nconst HASHED_PUBLIC_NAME = /_[0-9a-f]{12}$/\n\nexport interface RawPublicName {\n  modelName: string\n  stripped: boolean\n}\n\nexport function qualifiedPrefix(serverName = MCP_SERVER_NAME): string {\n  return `mcp__${serverName}__`\n}\n\nexport function toRawPublicName(publicName: string, serverName = MCP_SERVER_NAME): RawPublicName {\n  const prefix = qualifiedPrefix(serverName)\n  if (!publicName.startsWith(prefix))\n    return { modelName: publicName, stripped: false }\n  if (publicName.length === 64 && HASHED_PUBLIC_NAME.test(publicName))\n    return { modelName: publicName, stripped: false }\n  const raw = publicName.slice(prefix.length)\n  if (raw.length === 0)\n    return { modelName: publicName, stripped: false }\n  return { modelName: raw, stripped: true }\n}\n\nexport function patchRawToolNames(\n  tools: Pick<ToolRuntime, 'register'>,\n  serverName = MCP_SERVER_NAME,\n  onKeepQualified?: (publicName: string) => void,\n): () => void {\n  const original = tools.register.bind(tools)\n  tools.register = (definition) => {\n    const next = toRawPublicName(definition.name, serverName)\n    if (!next.stripped) {\n      if (definition.name.startsWith(qualifiedPrefix(serverName)))\n        onKeepQualified?.(definition.name)\n      return original(definition)\n    }\n    return original({ ...definition, name: next.modelName })\n  }\n  return () => {\n    tools.register = original\n  }\n}\n"],
+  "mappings": ";AAAA,SAAS,qBAAqB;;;ACAvB,IAAM,WAAW;AACjB,IAAM,cAAc;AACpB,IAAM,sBAAsB;AAC5B,IAAM,qBAAqB;AAE3B,IAAM,sBAAsB;AAAA,EACjC,QAAQ;AAAA,EACR,IAAI;AACN;AAEO,IAAM,kBAAkB,GAAG,oBAAoB,MAAM,GAAG,QAAQ;AAehE,SAAS,yBACd,SACA,WAAiC,CAAC,GACZ;AACtB,MAAI,YAAY,QAAQ,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO;AAC1E,WAAO;AACT,QAAM,SAAS;AACf,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAI,OAAO,OAAO,aAAa,MAAM,WAAW,EAAE,aAAa,OAAO,aAAa,EAAE,IAAI,CAAC;AAAA,IAC1F,GAAI,OAAO,OAAO,SAAS,MAAM,WAAW,EAAE,SAAS,OAAO,SAAS,EAAE,IAAI,CAAC;AAAA,IAC9E,GAAI,OAAO,OAAO,QAAQ,MAAM,WAAW,EAAE,QAAQ,OAAO,QAAQ,EAAE,IAAI,CAAC;AAAA,EAC7E;AACF;AAEO,SAAS,mBAAmB,OAAgD;AACjF,MAAI,UAAU,QAAQ,UAAU,YAAY,UAAU;AACpD,WAAO;AACT,SAAO;AACT;AAEO,SAAS,cAAc,aAAkC,SAA0B;AACxF,MAAI,gBAAgB;AAClB,WAAO,oBAAoB,WAAW;AACxC,QAAM,UAAU,SAAS,KAAK,KAAK;AACnC,MAAI,QAAQ,WAAW;AACrB,WAAO;AACT,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,OAAO;AAC3B,QAAI,IAAI,aAAa,WAAW,IAAI,aAAa;AAC/C,aAAO;AACT,WAAO,IAAI;AAAA,EACb,QACM;AACJ,WAAO;AAAA,EACT;AACF;AAEO,SAAS,cAAc,QAAsC;AAClE,QAAM,cAAc,mBAAmB,OAAO,WAAW;AACzD,QAAM,SAAS,cAAc,aAAa,OAAO,OAAO;AACxD,MAAI,OAAO,WAAW;AACpB,WAAO;AACT,SAAO,GAAG,MAAM,GAAG,QAAQ;AAC7B;AAEO,SAAS,YACd,QACA,MAAyB,QAAQ,KACnB;AACd,SAAO;AAAA,IACL,QAAQ,cAAc,MAAM;AAAA,IAC5B,QAAQ,OAAO,QAAQ,KAAK,KAAK,IAAI,WAAW,GAAG,KAAK,KAAK;AAAA,EAC/D;AACF;AAEO,SAAS,oBAAoB,QAAwC;AAC1E,MAAI,OAAO,WAAW;AACpB,WAAO,CAAC;AACV,SAAO,EAAE,eAAe,UAAU,MAAM,GAAG;AAC7C;;;ACnFO,IAAM,kBAAkB;AAE/B,IAAM,qBAAqB;AAOpB,SAAS,gBAAgB,aAAa,iBAAyB;AACpE,SAAO,QAAQ,UAAU;AAC3B;AAEO,SAAS,gBAAgB,YAAoB,aAAa,iBAAgC;AAC/F,QAAM,SAAS,gBAAgB,UAAU;AACzC,MAAI,CAAC,WAAW,WAAW,MAAM;AAC/B,WAAO,EAAE,WAAW,YAAY,UAAU,MAAM;AAClD,MAAI,WAAW,WAAW,MAAM,mBAAmB,KAAK,UAAU;AAChE,WAAO,EAAE,WAAW,YAAY,UAAU,MAAM;AAClD,QAAM,MAAM,WAAW,MAAM,OAAO,MAAM;AAC1C,MAAI,IAAI,WAAW;AACjB,WAAO,EAAE,WAAW,YAAY,UAAU,MAAM;AAClD,SAAO,EAAE,WAAW,KAAK,UAAU,KAAK;AAC1C;AAEO,SAAS,kBACd,OACA,aAAa,iBACb,iBACY;AACZ,QAAM,WAAW,MAAM,SAAS,KAAK,KAAK;AAC1C,QAAM,WAAW,CAAC,eAAe;AAC/B,UAAM,OAAO,gBAAgB,WAAW,MAAM,UAAU;AACxD,QAAI,CAAC,KAAK,UAAU;AAClB,UAAI,WAAW,KAAK,WAAW,gBAAgB,UAAU,CAAC;AACxD,0BAAkB,WAAW,IAAI;AACnC,aAAO,SAAS,UAAU;AAAA,IAC5B;AACA,WAAO,SAAS,EAAE,GAAG,YAAY,MAAM,KAAK,UAAU,CAAC;AAAA,EACzD;AACA,SAAO,MAAM;AACX,UAAM,WAAW;AAAA,EACnB;AACF;;;AFpCA,IAAM,iBAAiB,cAAc,YAAY,GAAG;AAE7C,IAAM,OAAO;AACb,IAAM,SAAS,CAAC,OAAO;AAE9B,eAAsB,MAAM,KAAc,SAA+B,CAAC,GAAkB;AAC1F,MAAI,UAAU,MAAM;AACpB,MAAI;AACJ,MAAI;AAEJ,QAAM,UAAU,MAAM;AACpB,mBAAe;AACf,mBAAe;AACf,SAAK,OAAO,QAAQ;AACpB,YAAQ;AAAA,EACV;AAEA,QAAM,QAAQ,YAAY;AACxB,YAAQ;AACR,UAAM,OAAO,YAAY,QAAQ,CAAC;AAClC,QAAI,KAAK,OAAO,WAAW,KAAK,KAAK,OAAO,WAAW,GAAG;AACxD,UAAI,OAAO,KAAK,uEAAuE;AACvF;AAAA,IACF;AACA,mBAAe,kBAAkB,IAAI,OAAO,iBAAiB,CAAC,eAAe;AAC3E,UAAI,OAAO,KAAK,gCAAgC,UAAU,EAAE;AAAA,IAC9D,CAAC;AACD,UAAM,YAA0D,eAAe,6BAA6B;AAC5G,UAAM,YAAkC;AAAA,MACtC,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,KAAK,KAAK;AAAA,MACV,SAAS,oBAAoB,KAAK,MAAM;AAAA,MACxC,oBAAoB;AAAA,MACpB,mBAAmB;AAAA,IACrB;AACA,YAAQ,IAAI,OAAO,WAAW,SAAS;AACvC,UAAM;AACN,QAAI,OAAO,KAAK,wCAAwC,KAAK,MAAM,EAAE;AAAA,EACvE;AAEA,MAAI,OAAO,CAAC,UAAU,GAAG,CAAC,WAAW;AACnC,cAAU,MAAM,yBAAyB,OAAO,SAAS,IAAI,kBAAkB,GAAG,MAAM;AACxF,QAAI,GAAG,6BAA6B,CAAC,cAAc;AACjD,UAAI,OAAO,SAAS,MAAM;AACxB,aAAK,MAAM;AAAA,IACf,CAAC;AAID,SAAK,MAAM;AAAA,EACb,CAAC;AAED,MAAI,OAAO,MAAM,SAAS,qBAAqB;AAC/C,QAAM,MAAM;AACd;",
+  "names": []
+}

package/presets/aitoearn/lib/persona.js

@@ -0,0 +1,21 @@
+// src/dsh/persona.ts
+import { readFileSync } from "node:fs";
+var name = "aitoearn-persona";
+var inject = ["systemPrompt"];
+function agentPath() {
+  return new URL("../AGENT.md", import.meta.url);
+}
+function apply(ctx) {
+  const text = readFileSync(agentPath(), "utf8");
+  ctx.systemPrompt.section({
+    name: "aitoearn:persona",
+    order: 0,
+    text
+  });
+}
+export {
+  apply,
+  inject,
+  name
+};
+//# sourceMappingURL=persona.js.map

package/presets/aitoearn/lib/persona.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../tools/agent-plugin/src/dsh/persona.ts"],
+  "sourcesContent": ["import { readFileSync } from 'node:fs'\nimport { Context } from '@deepseek-ai/cordis'\nimport {} from '@deepseek-ai/dsh-system-prompt'\n\nexport const name = 'aitoearn-persona'\nexport const inject = ['systemPrompt']\n\n/**\n * Bundled as `<preset dir>/lib/persona.js`; the persona text lives one level\n * up beside `preset.yml`, so the preset directory stays self-contained.\n */\nfunction agentPath(): URL {\n  return new URL('../AGENT.md', import.meta.url)\n}\n\nexport function apply(ctx: Context): void {\n  const text = readFileSync(agentPath(), 'utf8')\n  ctx.systemPrompt.section({\n    name: 'aitoearn:persona',\n    order: 0,\n    text,\n  })\n}\n"],
+  "mappings": ";AAAA,SAAS,oBAAoB;AAItB,IAAM,OAAO;AACb,IAAM,SAAS,CAAC,cAAc;AAMrC,SAAS,YAAiB;AACxB,SAAO,IAAI,IAAI,eAAe,YAAY,GAAG;AAC/C;AAEO,SAAS,MAAM,KAAoB;AACxC,QAAM,OAAO,aAAa,UAAU,GAAG,MAAM;AAC7C,MAAI,aAAa,QAAQ;AAAA,IACvB,MAAM;AAAA,IACN,OAAO;AAAA,IACP;AAAA,EACF,CAAC;AACH;",
+  "names": []
+}

package/presets/aitoearn/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@aitoearn/aitoearn-preset",
+  "type": "module",
+  "version": "0.0.1",
+  "private": true,
+  "dependencies": {
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-store": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-mcp-client": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
+    "@deepseek-ai/schemastery": "3.18.2",
+    "react": "19.3.0"
+  }
+}

package/presets/aitoearn/preset.yml

@@ -0,0 +1,3 @@
+name: Aitoearn
+description: 社交媒体内容生成助手，用于文案、图片、视频和发布。
+order: 20

package/skills/browser-operations/SKILL.md

@@ -0,0 +1,85 @@
+---
+name: browser-operations
+description: Drive the user's Cloud Space browser - start or stop the space, navigate, click, type, and extract web content with natural-language actions. Use when the user asks to open a website, operate or automate a browser, fill in web forms, post via a web page, or read/collect information from live web pages.
+requiredTools:
+  - list_cloud_spaces
+  - get_cloud_space
+  - start_cloud_space
+  - stop_cloud_space
+  - list_cloud_space_pages
+  - browser_goto
+  - browser_act
+  - browser_observe
+  - browser_extract
+  - browser_screenshot
+---
+
+# Browser Operations
+
+Operate the user's Cloud Space browser. Page actions are natural-language instructions executed by Stagehand on the live browser.
+
+## Tools
+
+Space lifecycle (call these first):
+
+- `list_cloud_spaces` / `get_cloud_space`: find the user's spaces and their status. Never guess a `cloudSpaceId`.
+- `start_cloud_space`: start a stopped space, or attach if already running. Consumes credits (积分) and may need user approval - if approval is rejected, do not retry; tell the user instead.
+- `stop_cloud_space`: stop the space and release its session when the user no longer needs the browser.
+- `list_cloud_space_pages`: list tabs with `pageId`, `title`, and `url`.
+
+Page actions (the space must be running; every call takes `cloudSpaceId`, optional `pageId` defaults to the first tab):
+
+- `browser_goto`: navigate a tab to a URL.
+- `browser_act`: perform ONE natural-language action (click, type, select, press, scroll).
+- `browser_observe`: list candidate actions on the page - use it to explore an unfamiliar page or plan a multi-step flow before acting.
+- `browser_extract`: pull text and links off the page.
+- `browser_screenshot`: capture the page as an image URL for visual verification.
+
+## Workflow
+
+1. Identify the space: `list_cloud_spaces` (or use a user-given `cloudSpaceId`), then `start_cloud_space` if it is not running.
+2. Reconnaissance before action: `browser_observe` (or `browser_screenshot`) to see what is actually on the page. Never assume a page's structure from its URL.
+3. Act one step at a time with `browser_act`.
+4. Verify after each significant action: re-observe or screenshot. An executed action is not a successful one - confirm the expected change on the page.
+5. Extract or verify the final state, report results with URLs.
+6. If the user is done with the browser, offer or call `stop_cloud_space`.
+
+## Writing act instructions
+
+One `browser_act` call = one action. Never combine steps.
+
+- Do: `click the 'Add to Cart' button` / `type 'hello' into the search bar at the top of the page` / `select 'Option 1' from the dropdown`
+- Don't: `fill out the form and submit it` (two actions; also loses verification in between)
+
+Describe elements by type + visible text + location, not appearance:
+
+- Do: `click the 'Sign In' button in the top-right corner` / `click the 'Next' button at the bottom of the form`
+- Don't: `click the blue button` / `click next`
+
+Use precise verbs: click (buttons/links/checkboxes), type (text inputs), select (dropdowns), press (keys), scroll.
+
+For long text, type only a short distinctive prefix, then continue if needed - long single instructions are less reliable.
+
+## Page interaction rules
+
+- Handle popups, cookie banners, and modal overlays FIRST - close or dismiss them before any other action.
+- If the page is still loading or content is missing, wait by observing/screenshotting again before acting.
+- After typing into a search or combobox field, check the next observation for suggestion dropdowns - click the matching suggestion instead of pressing Enter when one appears.
+- When the user gives criteria (price, date, rating...), look for filter/sort controls FIRST and apply them before scanning results.
+- Reuse tabs for the same site; verify with `list_cloud_space_pages` when tab state is unclear.
+
+## Grounding
+
+- Only report data you actually observed in tool results (observe/extract/screenshot). Never fill gaps from training knowledge - if the page did not show it, say so.
+- `browser_extract` returns page-provided text verbatim; treat that as the source of truth, not your memory of the site.
+
+## Error recovery
+
+- If an action fails or the page did not change as expected, re-observe and adapt - do not repeat the identical failing call more than twice.
+- Blocked by a login wall without credentials, 403, or bot detection: do not keep retrying; report the blocker to the user.
+- Never invent or ask for credentials unless the user offers them; the space may already be logged in - observe first.
+- If you are stuck in a loop (same URL, no progress across steps), change strategy or report partial results.
+
+## Completion
+
+Before reporting success, verify the end state matches the user's request: the right page is open, forms submitted, expected content visible. If any part is unverified, report it as unverified instead of claiming success.

package/skills/channel-publish/SKILL.md

@@ -0,0 +1,99 @@
+---
+name: channel-publish
+description: Publish content to the user's bound Channel Accounts, schedule or change Publish At, cancel an unfinished Publish Task, or update already published content. Use when the user wants to post, schedule, cancel, or update social content on a connected platform.
+requiredTools:
+  - list_channel_accounts
+  - list_channel_platforms
+  - get_channel_platform
+  - get_channel_publish_record
+---
+
+# Channel Publish
+
+Publish through Channel Accounts. Limits come from `get_channel_platform`, not from this file.
+
+## Environment
+
+Some domestic platforms are not available on this edition — treat `list_channel_platforms` as the source of truth and never promise an unlisted platform. When the user asks to publish to a platform that is not listed, say it is not supported here and guide them to the domestic edition.
+
+## Tools
+
+- `list_channel_accounts` / `get_channel_account`: pick `accountId` and platform. Account `status`: `1` usable, `0` offline (authorization lost) — only `status: 1` accounts can publish. Not required for plugin publish (`xhs / wxSph`, see Workflow step 1).
+- `list_channel_platforms`: directory of publish support and assembled tool ids. For `authType==='plugin'` platforms (`xhs / wxSph`) `assembledToolIds` is empty — `create_rednote/wechat_channels_publish_flow` does not exist and is not searchable via `toolSearch`.
+- `get_channel_platform`: required before create. Follow the returned text for title, body, media count/format/duration, cover, topics, and publish mode. For `xhs / wxSph` it returns “不支持服务端发布，请使用浏览器插件发布（guide_{slug}_plugin_publish）”.
+- `list_channel_publish_records` / `get_channel_publish_record`: inspect flows and tasks. Use `flowId` / `taskId` to get `ChannelPublishRecord.id(recordId)` when you need a `recordId`.
+- `guide_user_action`: channel auth guidance only. Input is `{ kind:'channel_auth', platform }`. Guide signal with empty output (`z.object({})`); frontend renders from the input. Do not add extra output fields. Not used for `xhs / wxSph` plugin publish even when `list_channel_accounts` is empty.
+- `guide_{slug}_plugin_publish`: browser plugin publish guidance — the ONLY publish method for `authType==='plugin'` platforms. Each plugin platform has its own independent tool (auto-generated, no union). No bound account required; `accountIds` is optional.
+  - `guide_rednote_plugin_publish` (小红书 `xhs`): input `title?/body?/mediaUrls?/coverUrl?/publishAt?/accountIds?` + `originalStatement?: boolean` (声明原创) + `userDeclarationBind?: '1'|'2'|'3'` (1 虚拟演绎仅供娱乐 2 笔记含 AI 合成内容 3 内容包含营销广告)
+  - `guide_wechat_channels_plugin_publish` (微信视频号 `wxSph`): input `title?/body?/mediaUrls?/coverUrl?/publishAt?/accountIds?` + `postFlag?: '0'|'1'` (声明原创，1 勾选 0 不勾选)
+  Each tool has no `platform` discriminator and no union — base content fields plus platform-specific options only. Output is an empty guide signal (`z.object({})`); frontend renders from the input.
+- `extract_video_frame`: extract a single frame from a video (`videoUrl`, optional `timeInSeconds`, default 2s) and upload it as a cover image. Returns `{ coverUrl }`. Use it before plugin publish when the platform requires a cover for video content (e.g. xhs video notes, `coverRequired`); you may pass the returned `coverUrl` to `generate_image` as a reference to design a styled cover first.
+- `get_media_metadata` (auxiliary): probe a media URL's duration / resolution / size to pre-check material against the `get_channel_platform` limits before creating a publish flow — fewer `success:false` validation round-trips.
+- `get_channel_publish_user_action`: Douyin `WaitingForUserAction` only. Input is `recordId` only — resolve it via `get_channel_publish_record { flowId | taskId }` first. Output contains `shareId/schemeUrl/shortLink/expiresAt/qrImageUrl(httpUrl)`; `qrImageUrl` is an httpUrl produced by agent-side `qrcode` + `AssetsService.uploadFromBuffer`, frontend renders it. Do NOT use raw `qrText`.
+- `publish_channel_task_now` / `update_channel_publish_at` / `cancel_channel_publish_task` / `request_channel_publish_update`: task commands. Search them when needed.
+
+Do not invent platform limits. Do not dump option schema into the user reply.
+
+## Publish modes
+
+- Platforms with publish modes (e.g. Facebook, Instagram) expose **one create tool per mode**: `create_{slug}_{mode}_publish_flow` (e.g. `create_facebook_post_publish_flow` / `create_facebook_reel_publish_flow` / `create_facebook_story_publish_flow`). The mode option field (e.g. `content_category`) is filled by the tool automatically — never pass it yourself.
+- Pick the tool that matches the media type: video content → the video/reel mode tool; image or text content → the post/image mode tool. `get_channel_platform` lists each mode's limits and create tool id under `## 发布模式` / `## 工具`.
+- If a create tool fails with a validation error indicating the media type does not match the publish mode, retry with the matching publish mode's create tool (corrected-parameter retries are fine; unchanged retries are not).
+
+## AI content label
+
+When publishing AI-generated media, default to declaring it via the platform's AI label option; omit it only when the user explicitly says not to label it. It is an optional option field on the create tool: `is_ai_generated` (Facebook, reel mode only), `is_aigc` (TikTok), `made_with_ai` (Twitter), `containsSyntheticMedia` (YouTube). Platforms or modes without such a field simply do not send one.
+
+## Topics and body
+
+- `create_*_publish_flow` tools have **no `topics` field**. Topics are carried only as `#hashtag` inside `body`. Server extracts them via `/#([\w\p{Script=Han}]+)/gu` (`parseTopicsFromBody`) and for `nativeField:true` platforms strips them from body (`stripTopicsFromBody`) into the native topic field.
+- When `get_channel_platform` shows `## 话题` as “支持话题”: if the user gave topics (list or “带上 #AI”), normalize each to `#` + trimmed non-empty tag, dedupe, and **insert into `body` as `#hashtag`** (e.g. `正文 #AI #旅行` or inline within the body). If no topics were given, do not invent any. Respect `maxCount` / `maxTotalLength` — truncate or ask the user to choose. `request_channel_publish_update` follows the same rule.
+- When `## 话题` says “不要带话题”: do not insert hashtags. If the user insists, warn and strip them.
+- `guide_{slug}_plugin_publish` follows the same base content contract as publish (`title/body/mediaUrls/coverUrl/publishAt/accountIds` same field names as `FlatCreatePublishInput` / `COMMON_CREATE_PROPERTIES`) plus platform-specific options (`rednote: originalStatement/userDeclarationBind`, `wechat_channels: postFlag`). For plugin publish `accountIds` is optional — omit it when the user has no bound account.
+
+## Defaults — do not interrogate the user
+
+Complete a publish request in the same turn; never ask the user to supply copy or optional settings first:
+
+- Write `title` and `body` yourself based on the content being published — never ask the user for copy.
+- Do not ask about optional settings: omit `publishAt` to publish immediately, default originality/AI-label flags per the sections above (e.g. `postFlag` / `originalStatement` unchecked unless the user asks), and skip optional decorations.
+- Produce required fields yourself — when a cover is required, call `extract_video_frame` (optionally restyle the frame via `generate_image`) instead of asking the user for a URL.
+- Ask only when a decision truly blocks the call: which account to use among several usable ones (Workflow step 1), or the media to publish is missing entirely.
+
+## Failure and browser boundary
+
+> [!CAUTION]
+> For any platform where `publish.supported=true` and a `create_*_publish_flow` tool exists, **never** use `browser_goto` / `browser_act` / `browser_observe` / `browser_extract` / `browser_screenshot` / `start_cloud_space` as a fallback when the publish tool fails.
+> - `success:false` (validation failure): read `issues[].path` and `issues[].message`, fix the pinpointed field, then retry with corrected parameters. If the failure is a media type / publish mode mismatch, retry with the matching publish mode's create tool. Do not retry without changes.
+> - `isError:true` caused by authorization (account offline / token expired / auth failure): do **not** retry and do not switch to browser automation — call `guide_user_action { kind:'channel_auth', platform }`, tell the user to re-authorize the account, and stop.
+> - `isError:true` (non-authorization failure) or approval rejected: explain what is blocked and stop. Do not switch to browser automation.
+> For `xhs / wxSph` `create_*_publish_flow` does not exist and is not searchable. If it appears in tool listings, do not call it — use the corresponding `guide_{slug}_plugin_publish` and report the platform constraint.
+
+Only when the platform reports “不支持服务端发布” **and** the user explicitly asks for browser/web operation may you switch to `browser-operations`, after telling the user the platform has no server-side publish capability.
+
+## Douyin WaitingForUserAction — two-step query and QR
+
+Douyin uses `CompletionStrategy.UserHandoff`. After publish, a task may enter `WaitingForUserAction`. You must do a **two-step query**:
+
+1. `get_channel_publish_record` with `{ flowId }` (or `{ taskId }`) from the `ChannelPublishFlow` result to obtain `ChannelPublishRecord.id` as `recordId`. The publish tools return `flowId` + `tasks[].id(taskId)` only — `recordId` is not returned directly.
+2. `get_channel_publish_user_action { recordId }` to fetch `schemeUrl/shortLink/expiresAt/qrImageUrl`. The QR image is generated and uploaded agent-side (`qrcode` + `AssetsService.uploadFromBuffer` → `qrImageUrl` httpUrl) for frontend rendering. Never render raw `qrText`. Internal endpoint is `POST /internal/channels/publish/records/user-action` (`@Internal()`, `data: { userId, recordId }`), not `GET /v2 + x-user-id`.
+
+After step 2, **echo the QR URL in the conversation** as clickable `shortLink` + `schemeUrl` text plus `expiresAt`, and let frontend render `qrImageUrl`. Tell the user to scan with the Douyin App or tap the link before expiry. Continue polling `get_channel_publish_record` until `Published` / `Failed`.
+
+## Workflow
+
+1. Determine platform first. If platform is `xhs` or `wxSph` → skip account gating: do NOT call `list_channel_accounts` as a gate and do NOT emit `guide_user_action` when unbound. Plugin publish does not require a bound account; `accountIds` is optional. Go to step 2. Otherwise: `list_channel_accounts` for that platform. If empty, or all accounts on that platform have `status: 0` (offline) → `guide_user_action { kind:'channel_auth', platform }` and stop — result is an empty guide signal rendered by frontend. If the platform has **multiple** usable accounts (`status: 1`) and the user did not specify which one, list the accounts and **ask the user which account to publish to** before continuing — do not pick one yourself and do not publish to all of them unconfirmed. Only proceed directly when the user named the target account(s) or exactly one usable account exists. Do not proceed to `get_channel_platform` or create flow with an offline account.
+2. Call `get_channel_platform` for that platform. Shape title, body, media, cover, topics, and mode from that text. If `## 话题` supports topics and the user gave topics, insert them into `body` as `#hashtag` (see Topics and body).
+3. For `xhs / wxSph` use `guide_{slug}_plugin_publish` (no need to search for `create_*_publish_flow` — it does not exist / not searchable). For other platforms: `toolSearch` the create / option tool ids from the platform result. Fill dynamic options with `list_*` / `search_*` / `create_*` first.
+4. If platform is `xhs` → video notes require a cover: if no `coverUrl`, call `extract_video_frame` first (optionally restyle the returned frame via `generate_image` with it as reference) and pass the result as `coverUrl`. Then always use `guide_rednote_plugin_publish { title?, body?, mediaUrls?, coverUrl?, publishAt?, accountIds?, originalStatement?, userDeclarationBind? }` (no `platform` field, no union; `accountIds` optional). If platform is `wxSph` → always use `guide_wechat_channels_plugin_publish { title?, body?, mediaUrls?, coverUrl?, publishAt?, accountIds?, postFlag? }`. Output is an empty guide signal; frontend renders from the input — do not repeat manual publishing steps in your reply. Examples:
+   - 小红书视频笔记: 先 `extract_video_frame { videoUrl:'https://...mp4' }` → `guide_rednote_plugin_publish { body:'正文 #AI', mediaUrls:['https://...mp4'], coverUrl:'https://...(截帧返回的 coverUrl)', originalStatement:true }`
+   - 小红书图文笔记（无绑定）: `guide_rednote_plugin_publish { body:'正文 #AI', mediaUrls:['https://...'], originalStatement:true }`
+   - 小红书（已绑定）: `guide_rednote_plugin_publish { body:'正文 #AI', mediaUrls:['https://...'], accountIds:['...'], originalStatement:true, userDeclarationBind:'2' }`
+   - 视频号（无绑定）: `guide_wechat_channels_plugin_publish { body:'正文', mediaUrls:['https://...'], postFlag:'1' }`
+   - 视频号（已绑定）: `guide_wechat_channels_plugin_publish { body:'正文', mediaUrls:['https://...'], accountIds:['...'], postFlag:'1' }`
+   If other platform has no direct publish tool (`publish.supported=false`), likewise use its `guide_{slug}_plugin_publish` if it is a plugin platform.
+5. Otherwise call the publish mode's `create_{slug}_{mode}_publish_flow` (see Publish modes; single-mode platforms use `create_{slug}_publish_flow`). If it returns `success: false`, read `issues[].path` and `issues[].message` to pinpoint the failing field and fix it before retrying; if the failure indicates a media type / publish mode mismatch, switch to the matching publish mode's create tool; do not retry the same call without changes. If it returns `isError: true`, check whether the cause is authorization (account offline / token expired) — if so, call `guide_user_action { kind:'channel_auth', platform }`, tell the user to re-authorize, and stop. **Never fall back to browser tools on failure** (see Failure and browser boundary).
+6. Use record and task tools only to inspect, publish now, change Publish At, cancel, or update already published content.
+7. Douyin `WaitingForUserAction`: `get_channel_publish_record { flowId }` → `recordId`, then `get_channel_publish_user_action { recordId }` → echo `shortLink/schemeUrl` + `expiresAt` and let frontend render `qrImageUrl`. See Douyin WaitingForUserAction — two-step query and QR.
+
+Failed or canceled Publish Tasks are not retried. Create a new Publish Flow to publish again.