attention-manifest-protocol 0.4.5 → 0.4.6

package/CHANGELOG.md

@@ -5,21 +5,22 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
-
-## [0.4.5] - 2026-10-31
+## [0.4.6] - 2026-11-02
 
-### Fixed
+### Added
 
-- Bound discovery tree construction and subtree lookahead under small output limits, deep or cyclic input, and exhausted traversal budgets; extensionless file filters now work consistently.
-- Enforced filesystem session read/write/create permissions across MCP tools, sanitized classified failures, and kept stdio sessions alive after malformed or escaping requests.
-- Checked excluded paths against case-folded Windows paths and resolved symlink targets; preserved selected-root routing for multi-root outlines and dependency graphs.
-- Applied session and service read/tree/graph budgets consistently and report truncation instead of returning incomplete results as complete.
+- Host-owned `SkillRegistry`, `KnowledgeRegistry` and `ProtocolRegistry` with validated registration, duplicate rejection, defensive copies and deterministic listing.
+- Metadata-only `skills`, `knowledge` and `protocols` discovery scopes, with registry injection through workspace and global agent services. Disabled skills and protocols are excluded from discovery.
 
 ### Changed
 
-- Standardized TypeScript tool filenames on lowerCamelCase and updated repository documentation and references.
-- Advanced the npm package version to 0.4.5.
+- Share in-memory registry storage and query mechanics through `InMemoryRegistry` while keeping validation and list policies in each domain.
+
+### Fixed
+
+- Reserve discovery node capacity for ancestors before visiting descendants so tight limits preserve tree structure and accurate summary counts.
+
+## [Unreleased]
 
 ### Added
 
@@ -33,8 +34,8 @@ project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 - Agent workspace: a `File`/`Directory` tree, paged reads, CAS atomic writes, strategy-based outlines, import/export/dependency graphs and Office parsing (DOCX/XLSX/PPTX, with best-effort DOC/XLS/PPT/PUB/ACCDB).
 - Session module: `ses_` identity, one-time bearer token, TTL, suspend/revoke/rotate, fork, per-session context isolation and quotas; SQLite adapters `SqliteWorkspaceSessionStore` / `SqliteWorkspaceSessionContextStore`.
 - `src/hook`: `useRead`, `useWrite`, `useDiff`, `useParse`, `useDependency`, `useExportation`, `useImportation`, `useOutline`, `useCode`, `useProject`. Every hook is read-only except `useWrite`, and runs are recorded in `hook_runs`.
-- `amp_tool_file_*` (ten tools), the `amp_tool_globalfs_*` global naming adapter, and `amp_service_filesystem` / `amp_protocol_filesystem`.
-- Lossless read-only syntax trees: `amp_tool_file_ast`, `useAst`, `src/syntax/syntaxTree.ts` and `src/syntax/syntaxRegistry.ts`; languages, token kinds and node kinds are registry data, every token keeps UTF-8 byte and line ranges, and the target file is never executed.
+- `amp_tool_filesystem_*` (ten tools), the `amp_tool_globalfs_*` global naming adapter, and `amp_service_filesystem` / `amp_protocol_filesystem`.
+- Lossless read-only syntax trees: `amp_tool_filesystem_ast`, `useAst`, `src/syntax/syntaxTree.ts` and `src/syntax/syntaxRegistry.ts`; languages, token kinds and node kinds are registry data, every token keeps UTF-8 byte and line ranges, and the target file is never executed.
 - SQLite tables: `workspace_sessions`, `session_roots`, `session_context`, `file_nodes`, `file_annotations`, `file_writes`, `file_outlines`, `file_imports`, `file_exports`, `file_dependencies`, `hook_runs`.
 - Data structures: `Trie`, `ByteLineIndex` (segment-tree prefix sums) and `OutlineIndex` (AST + Trie + SegmentTree).
 - Outline strategies cover code (TS/JS/Python/Java/C/C++/C#/Go/Rust), Vue, project manifests (npm/Maven/Gradle/CMake/Cargo/Go/pyproject/Make), prose (Markdown/TeX/plain text), HTML/CSS/SCSS/Sass/XML/OPML and Office; `outlineCoverageCheck` verifies 74 cases.

package/CHANGELOG.zh-CN.md

@@ -5,29 +5,30 @@
 格式遵循 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)，版本号遵循
 [语义化版本](https://semver.org/lang/zh-CN/)。
 
-## [未发布]
-
-## [0.4.5] - 2026-10-31
+## [0.4.6] - 2026-11-02
 
-### 修复
+### 新增
 
-- 对小输出限额、深层或循环输入以及遍历预算耗尽场景限制 discovery 树构建和子树探测；无扩展名文件过滤现在保持一致。
-- 在 MCP 工具中落实 filesystem session 的读取、写入和创建权限，统一错误分类并隐藏主机路径；畸形或越界请求后 stdio 会话仍可继续处理。
-- 路径排除检查覆盖 Windows 大小写折叠及符号链接真实目标；多根 workspace 的大纲和依赖查询保持所选根目录。
-- 一致执行 session 与 service 的读取、目录树和依赖图预算；结果截断时明确标记，不再伪报完整。
+- 宿主维护的 `SkillRegistry`、`KnowledgeRegistry` 与 `ProtocolRegistry`，支持登记校验、重复 ID 拒绝、防御性副本与稳定列表。
+- 只返回元数据的 `skills`、`knowledge`、`protocols` 发现范围，并贯通 workspace/global agent 服务的注册中心注入；发现时排除禁用的 skill 与 protocol。
 
 ### 变更
 
-- TypeScript 工具文件名统一为小写开头的 camelCase，并更新仓库内路径引用和文档。
-- npm 包版本升至 0.4.5。
+- 通过 `InMemoryRegistry` 复用内存存储与查询机制，各领域保留独立校验和列表策略。
+
+### 修复
+
+- 发现树先为祖先预留节点容量，紧凑预算下仍保留树结构并准确统计节点。
+
+## [未发布]
 
 ### 新增
 
 - Agent 工作区：`File`/`Directory` 树、分页读、CAS 原子写、策略化大纲、import/export/dependency 图与 Office（DOCX/XLSX/PPTX，DOC/XLS/PPT/PUB/ACCDB best-effort）解析。
 - Session 模块：`ses_` 身份、一次性 bearer 令牌、TTL、暂停/撤销/rotate、fork、每会话上下文隔离与配额；SQLite 适配器 `SqliteWorkspaceSessionStore` / `SqliteWorkspaceSessionContextStore`。
 - `src/hook` 组合层：`useRead`、`useWrite`、`useDiff`、`useParse`、`useDependency`、`useExportation`、`useImportation`、`useOutline`、`useCode`、`useProject`；除 `useWrite` 外只读，并记录 `hook_runs`。
-- `amp_tool_file_*` 十个工具与 `amp_tool_globalfs_*` 全局命名适配器；`amp_service_filesystem` / `amp_protocol_filesystem`。
-- 无损只读语法树：`amp_tool_file_ast`、`useAst`、`src/syntax/syntaxTree.ts` 与 `src/syntax/syntaxRegistry.ts`；语言/Token/节点类别由注册中心管理，全部 token 保留 UTF-8 字节与行范围，不执行目标文件。`syntaxTreeCheck` 8 例，完整 verify 135/135。
+- `amp_tool_filesystem_*` 十个工具与 `amp_tool_globalfs_*` 全局命名适配器；`amp_service_filesystem` / `amp_protocol_filesystem`。
+- 无损只读语法树：`amp_tool_filesystem_ast`、`useAst`、`src/syntax/syntaxTree.ts` 与 `src/syntax/syntaxRegistry.ts`；语言/Token/节点类别由注册中心管理，全部 token 保留 UTF-8 字节与行范围，不执行目标文件。`syntaxTreeCheck` 8 例，完整 verify 135/135。
 - SQLite 表：`workspace_sessions`、`session_roots`、`session_context`、`file_nodes`、`file_annotations`、`file_writes`、`file_outlines`、`file_imports`、`file_exports`、`file_dependencies`、`hook_runs`。
 - 数据结构：`Trie`、`ByteLineIndex`（SegmentTree 前缀和）、`OutlineIndex`（AST + Trie + SegmentTree）。
 - 大纲策略覆盖代码（TS/JS/Python/Java/C/C++/C#/Go/Rust）、Vue、项目清单（npm/Maven/Gradle/CMake/Cargo/Go/pyproject/Make）、文章（Markdown/TeX/plain text）、HTML/CSS/SCSS/Sass/XML/OPML 与 Office；`outlineCoverageCheck` 74 例逐项验证。

package/README.md

@@ -2,7 +2,7 @@
 
 **English** · [简体中文](README.zh-CN.md) · [Changelog](CHANGELOG.md)
 
-AMP is a metacognitive protocol for agents: declare knowledge and obligations, allocate finite attention, obtain evidence, and record costs and outcomes. The reference implementation is version `0.4.5`, requires **Node.js 24 or later**, and uses Apache-2.0.
+AMP is a metacognitive protocol for agents: declare knowledge and obligations, allocate finite attention, obtain evidence, and record costs and outcomes. The reference implementation is version `0.4.2`, requires **Node.js 24 or later**, and uses Apache-2.0.
 
 ## Architecture
 
@@ -53,7 +53,9 @@ Offline parsers live in `tools/support/`. The runtime stays database-free and us
 
 ### Discovery
 
-`amp_tool_workspace_discover` returns one structural tree over the authorized projects. File nodes carry a module kind (`service`, `tool`, `controller`, `route`, `repository`, `model`, `config`, `test`, `middleware`, `component`, `util`), an extension and bounded content matches. Hosts register project descriptions, purposes, summaries, plugins, services and tools through `HostCatalog`; project metadata is attached to project nodes, and an unregistered project falls back to its workspace summary. Discovery is read-only, never widens `projectIds`, and returns snippets as discovery evidence rather than as a Frame-allocated detail read.
+`amp_tool_workspace_discover` returns one structural tree over authorized projects, host components, skills, knowledge and protocols. File nodes carry a module kind (`service`, `tool`, `controller`, `route`, `repository`, `model`, `config`, `test`, `middleware`, `component`, `util`), an extension and bounded content matches. Hosts register projects and components through `HostCatalog`, reusable instructions through `SkillRegistry`, source-aware entries through `KnowledgeRegistry`, and protocol metadata through `ProtocolRegistry`. Discovery exposes skill/knowledge/protocol metadata only; full entries are fetched from their registries by ID. Discovery is read-only, never widens `projectIds`, and returns snippets as discovery evidence rather than as a Frame-allocated detail read.
+
+These registries are domain-owned catalogs, not a mandate to duplicate every concept as a generic registry. Existing runtime state and policies for ability, cognition, progress and behavior should stay in their domain models; add a read-only catalog/discovery projection only when enumeration is needed. Agents should not write directly to active registries by default. A future contribution flow should create a sourced, versioned proposal and require host authorization, review and audit before activation.
 
 ## Quick start
 
@@ -85,7 +87,7 @@ import { ToolIds, parseId } from "attention-manifest-protocol/naming";
 
 `npm run build:lib` rebuilds `lib/` and `prepublishOnly` runs it before publishing. The build compiles only the library; the Vite demo entry (`src/main.ts`) is not part of it.
 
-Focused checks can be run directly with the corresponding camelCase tools, such as `node tools/workspaceAgentCheck.ts`, `node tools/workspaceProjectCheck.ts`, `node tools/workspaceDiffCheck.ts`, `node tools/workspaceReactiveDiffCheck.ts`, `node tools/discoverCheck.ts` and `node tools/discoverAgentCheck.ts`. `verify` runs the full chain and both type checks. Evaluation inputs/reports remain in [docs/eval](docs/eval/) and [docs/probes](docs/probes/) as JSON; fixture and recorded-probe results are not independent human studies or production-quality evidence.
+Focused checks: `npm run workspace-agent-check`, `workspace-project-check`, `workspace-diff-check`, `workspace-reactive-diff-check` and the `workspace-*-boundary-check` suites, `workspace-context-check`, `document-context-check`, `tex-context-check`, `governance-check`, `assignment-check`, `interaction-binding-check`, `discover-check`, `discover-agent-check`, `typecheck` and `typecheck:tools`. `verify` runs the full chain and both type checks. Evaluation inputs/reports remain in [docs/eval](docs/eval/) and [docs/probes](docs/probes/) as JSON; fixture and recorded-probe results are not independent human studies or production-quality evidence.
 
 ## Agent tools
 
@@ -116,20 +118,20 @@ The `amp_protocol_workspace` v1 response contains `protocol`, `version`, `revisi
 
 ### Filesystem tools
 
-`amp_tool_file_*` is bound to one authenticated Session; the bearer token never appears in a tool argument. Every tool except `write` is read-only.
+`amp_tool_filesystem_*` is bound to one authenticated Session; the bearer token never appears in a tool argument. Every tool except `write` is read-only.
 
 | Tool | Purpose |
 | --- | --- |
-| `amp_tool_file_session` | Current identity, roots, permissions, remaining TTL and quotas |
-| `amp_tool_file_file` | One File/Directory node; `depth`/`offset`/`limit` bound the subtree |
-| `amp_tool_file_directory` | Flat listing of direct children |
-| `amp_tool_file_read` | 1-based line page with fingerprint, charset and the next line |
-| `amp_tool_file_write` | Atomic write; create/overwrite/upsert/append, CAS, dry-run |
-| `amp_tool_file_outline` | Structural outline with `query`/`startLine`/`endLine` filters |
-| `amp_tool_file_import` | Outgoing, incoming or two-way imports |
-| `amp_tool_file_export` | Exported symbols, signatures and re-export edges |
-| `amp_tool_file_dependency` | Cycles, topological order and bounded closures |
-| `amp_tool_file_ast` | Lossless syntax tree: every non-whitespace token, declaration/markup hierarchy, UTF-8/line ranges; read-only, never executes |
+| `amp_tool_filesystem_session` | Current identity, roots, permissions, remaining TTL and quotas |
+| `amp_tool_filesystem_file` | One File/Directory node; `depth`/`offset`/`limit` bound the subtree |
+| `amp_tool_filesystem_directory` | Flat listing of direct children |
+| `amp_tool_filesystem_read` | 1-based line page with fingerprint, charset and the next line |
+| `amp_tool_filesystem_write` | Atomic write; create/overwrite/upsert/append, CAS, dry-run |
+| `amp_tool_filesystem_outline` | Structural outline with `query`/`startLine`/`endLine` filters |
+| `amp_tool_filesystem_import` | Outgoing, incoming or two-way imports |
+| `amp_tool_filesystem_export` | Exported symbols, signatures and re-export edges |
+| `amp_tool_filesystem_dependency` | Cycles, topological order and bounded closures |
+| `amp_tool_filesystem_ast` | Lossless syntax tree: every non-whitespace token, declaration/markup hierarchy, UTF-8/line ranges; read-only, never executes |
 
 The global variant is `amp_tool_globalfs_*`, a naming adapter in [src/global/filesystem.ts](src/global/filesystem.ts) that grants no new root or permission. Outline nodes carry `isFile`/`isDirectory`/`file?`/`directory?`/`path` (for example `add.py#add`) and `range` (UTF-8 bytes plus 1-based lines as bigint; decimal strings on the wire). Strategies cover code, Vue, project manifests, Markdown/TeX/plain text, CSS/SCSS/Sass, HTML, XML/OPML and Office; Office parsing covers DOCX/XLSX/PPTX and treats DOC/XLS/PPT/PUB/ACCDB as best-effort CFB.
 
@@ -153,8 +155,8 @@ await diff.run({ path: "src/new.ts", before: "" });
 ### MCP stdio
 
 ```sh
-node tools/workspaceAgentDemo.ts
-node tools/workspaceAgentServer.ts --config .cache/workspace-agent.local
+npm run workspace-agent-demo
+npm run workspace-agent -- --config .cache/workspace-agent.local
 ```
 
 For an MCP client, start Node directly to keep package-manager banners out of stdout. Replace absolute paths with your checkout location:

package/README.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](README.md) · **简体中文** · [更新日志](CHANGELOG.zh-CN.md)
 
-AMP 是供 agent 使用的元认知协议：声明知识和义务，分配有限注意力，获取证据，记录成本与结果。当前参考实现为 `0.4.5`，要求 **Node.js 24 或以上**，使用 Apache-2.0 许可证。
+AMP 是供 agent 使用的元认知协议：声明知识和义务，分配有限注意力，获取证据，记录成本与结果。当前参考实现为 `0.4.2`，要求 **Node.js 24 或以上**，使用 Apache-2.0 许可证。
 
 ## 架构
 
@@ -38,7 +38,7 @@ Context 使用结构树和类型化关系图。项目依赖、导入、调用与
 - MCP 执行、参数 Schema 校验、摘要固定与旧式握手回退，以及 A2A 发现与消息绑定。
 - 项目树、项目依赖图、TS/JS 的部分静态导入/调用/引用图，以及知识库词法检索。
 - Agent 工作区：`File`/`Directory` 树（指纹、字符集、bigint 行数/字节数、时间、描述/摘要/用途）；分页读、CAS 原子写、按策略提取的大纲（代码/项目/文章/Office）；import/export/dependency 图（Tarjan SCC、拓扑序、有界闭包）；Session 身份与上下文隔离；`src/hook` 组合层；SQLite 实体与仓储。
-- 宿主发现：以一棵结构树返回获准项目、内部模块（service/tool/controller/route/repository/model/config/test/...）、文件名、有界内容匹配，以及宿主注册的插件、服务与工具。项目节点带描述、用途与简介。
+- 宿主发现：以一棵结构树返回获准项目、内部模块（service/tool/controller/route/repository/model/config/test/...）、文件名、有界内容匹配，以及宿主注册的插件、服务、工具、skills 和 knowledge。项目节点带描述、用途与简介；skill/knowledge 节点只暴露元数据，详情由注册中心按 ID 查询。
 - Markdown、TXT、DOCX、XLSX、PPTX、TeX/LaTeX/BibTeX 的结构提取、原生定位与摘要/详情分层。
 - `amp_protocol_workspace` v1 服务、8 个 agent 工具、本地运行时接入与 MCP stdio 服务端。
 - 带显式策略的指纹：值使用 RFC 8785 规范化 JSON，文件按字节哈希，目录树使用域分隔的 Merkle 根，`verify` 比较算法、`kind` 与策略，而不是只比对裸十六进制字符串。未配对代理项与 `-0` 被拒绝，而不是被静默改写。
@@ -53,7 +53,9 @@ Context 使用结构树和类型化关系图。项目依赖、导入、调用与
 
 ### 发现
 
-`amp_tool_workspace_discover` 以一棵结构树返回获准项目。文件节点带模块分类（`service`、`tool`、`controller`、`route`、`repository`、`model`、`config`、`test`、`middleware`、`component`、`util`）、扩展名与有界内容匹配。宿主通过 `HostCatalog` 登记项目的描述、用途、简介，以及插件、服务和工具；项目元数据附在项目节点上，未登记的项目回退到 workspace 摘要。发现是只读的，不会扩大 `projectIds`；内容匹配只是发现证据，不能替代 Frame 分配后的详情读取。
+`amp_tool_workspace_discover` 以一棵结构树返回获准项目、宿主组件、skill、knowledge 与 protocol。文件节点带模块分类（`service`、`tool`、`controller`、`route`、`repository`、`model`、`config`、`test`、`middleware`、`component`、`util`）、扩展名与有界内容匹配。宿主通过 `HostCatalog` 登记项目与插件/服务/工具，通过 `SkillRegistry`、`KnowledgeRegistry`、`ProtocolRegistry` 登记可复用指令、知识条目与协议元数据。发现只暴露 skill/knowledge/protocol 元数据，不返回指令或正文；注册中心按 ID 提供完整条目。发现是只读的，不会扩大 `projectIds`；内容匹配只是发现证据，不能替代 Frame 分配后的详情读取。
+
+这些 registry 是各自领域的宿主目录，不要求每个概念都复制成同构 registry。Ability、cognition、progress 等若已有运行时状态、策略或事件模型，应由现有领域模块维护；需要统一枚举时增加只读 catalog/discovery 投影即可。Agent 默认只读正式目录；可选的登记工作流应先创建带来源、版本和提案状态的候选项，再经宿主权限校验、人工审核与审计后发布，不授予模型直接改写已生效条目的能力。
 
 ## 快速开始
 
@@ -85,7 +87,7 @@ import { ToolIds, parseId } from "attention-manifest-protocol/naming";
 
 `npm run build:lib` 重新构建 `lib/`，发布前由 `prepublishOnly` 自动执行。该构建只编译库代码，Vite 演示入口（`src/main.ts`）不在其中。
 
-专项检查可直接运行对应的 camelCase 工具，例如 `node tools/workspaceAgentCheck.ts`、`node tools/workspaceProjectCheck.ts`、`node tools/workspaceDiffCheck.ts`、`node tools/workspaceReactiveDiffCheck.ts`、`node tools/discoverCheck.ts` 与 `node tools/discoverAgentCheck.ts`。`verify` 执行完整验证链和两份类型检查。评测输入/结果以 JSON 保存在 [docs/eval](docs/eval/) 与 [docs/probes](docs/probes/)，夹具与录制探针不等同于独立的人类研究或生产质量证明。
+专项检查为 `npm run workspace-agent-check`、`workspace-project-check`、`workspace-diff-check`、`workspace-reactive-diff-check` 与 `workspace-*-boundary-check` 系列、`workspace-context-check`、`document-context-check`、`tex-context-check`、`governance-check`、`assignment-check`、`interaction-binding-check`、`discover-check`、`discover-agent-check`、`typecheck` 与 `typecheck:tools`。`verify` 执行完整验证链和两份类型检查。评测输入/结果以 JSON 保存在 [docs/eval](docs/eval/) 与 [docs/probes](docs/probes/)，夹具与录制探针不等同于独立的人类研究或生产质量证明。
 
 ## Agent 工具
 
@@ -116,20 +118,20 @@ import { ToolIds, parseId } from "attention-manifest-protocol/naming";
 
 ### 文件系统工具
 
-`amp_tool_file_*` 绑定一个已认证 Session；令牌不出现在工具参数里。除 `write` 外全部只读。
+`amp_tool_filesystem_*` 绑定一个已认证 Session；令牌不出现在工具参数里。除 `write` 外全部只读。
 
 | 工具 | 用途 |
 | --- | --- |
-| `amp_tool_file_session` | 当前身份、根、权限、剩余 TTL 与配额 |
-| `amp_tool_file_file` | 返回一个 File/Directory 节点；`depth`/`offset`/`limit` 控制子树与分页 |
-| `amp_tool_file_directory` | 平铺列出一级子节点 |
-| `amp_tool_file_read` | 按 1-based 行号读取文本页；返回指纹、字符集与下一页行号 |
-| `amp_tool_file_write` | 原子写入；create/overwrite/upsert/append、CAS、dry-run |
-| `amp_tool_file_outline` | 结构化大纲；支持 `query`/`startLine`/`endLine` 过滤 |
-| `amp_tool_file_import` | 出边/入边/两向导入关系 |
-| `amp_tool_file_export` | 导出符号、签名与 re-export 边 |
-| `amp_tool_file_dependency` | 环、拓扑序、依赖/被依赖闭包 |
-| `amp_tool_file_ast` | 无损语法树：每个非空白 token、声明/块/标签层级、UTF-8 字节与行范围；只读，不执行 |
+| `amp_tool_filesystem_session` | 当前身份、根、权限、剩余 TTL 与配额 |
+| `amp_tool_filesystem_file` | 返回一个 File/Directory 节点；`depth`/`offset`/`limit` 控制子树与分页 |
+| `amp_tool_filesystem_directory` | 平铺列出一级子节点 |
+| `amp_tool_filesystem_read` | 按 1-based 行号读取文本页；返回指纹、字符集与下一页行号 |
+| `amp_tool_filesystem_write` | 原子写入；create/overwrite/upsert/append、CAS、dry-run |
+| `amp_tool_filesystem_outline` | 结构化大纲；支持 `query`/`startLine`/`endLine` 过滤 |
+| `amp_tool_filesystem_import` | 出边/入边/两向导入关系 |
+| `amp_tool_filesystem_export` | 导出符号、签名与 re-export 边 |
+| `amp_tool_filesystem_dependency` | 环、拓扑序、依赖/被依赖闭包 |
+| `amp_tool_filesystem_ast` | 无损语法树：每个非空白 token、声明/块/标签层级、UTF-8 字节与行范围；只读，不执行 |
 
 全局变体为 `amp_tool_globalfs_*`，由 [src/global/filesystem.ts](src/global/filesystem.ts) 做命名适配；它不扩大任何根或权限。
 大纲节点带 `isFile`/`isDirectory`/`file?`/`directory?`/`path`（如 `add.py#add`）与 `range`（UTF-8 字节 + 1-based 行，bigint；JSON 中为十进制字符串）。策略覆盖代码、Vue、项目清单、Markdown/TeX/纯文本、CSS/SCSS/Sass、HTML、XML/OPML 与 Office；Office 文件由 `office.ts` 解析 DOCX/XLSX/PPTX，DOC/XLS/PPT/PUB/ACCDB 为 CFB best-effort。
@@ -154,8 +156,8 @@ await diff.run({ path: "src/new.ts", before: "" });
 ### MCP stdio 接入
 
 ```sh
-node tools/workspaceAgentDemo.ts
-node tools/workspaceAgentServer.ts --config .cache/workspace-agent.local
+npm run workspace-agent-demo
+npm run workspace-agent -- --config .cache/workspace-agent.local
 ```
 
 真实 MCP 客户端应直接启动 Node，避免包管理器提示混入协议 stdout。将以下绝对路径替换为实际项目目录：
@@ -220,11 +222,13 @@ Frame、快照、ContentStore 与后备执行器由宿主提供；将 `tools` /
 | [src/naming](src/naming/) | 冻结的 ID 表、ID 文法、兼容别名与 catalog 摘要 |
 | [src/context](src/context/) | Context 生命周期、树/图投影、CAS、工作区事实、上下文装配与 agent 服务 |
 | [src/session](src/session/) | 身份、令牌、TTL、上下文隔离、fork/revoke/rotate |
+| [src/skill](src/skill/) | 可复用 agent skill 注册、校验、查询与隔离副本 |
+| [src/knowledge](src/knowledge/) | 带来源元数据的 knowledge 注册、校验、查询与隔离副本 |
+| [src/protocol](src/protocol/) | 线上协议契约、通道，以及宿主维护的协议元数据注册中心 |
 | [src/file](src/file/) | File/Directory 树、元数据、分页读、原子写、会话运行时/服务、模块图与 ZIP/CFB 容器 |
 | [src/syntax](src/syntax/) | 字符集检测/编解码、字节/行索引、语法注册表与无损只读语法树 |
 | [src/outline](src/outline/) | 代码/文档大纲、范围与标签索引、关键字/策略注册表、React/Shell/SQL/Visual Basic 策略与 Office 解析 |
 | [src/hook](src/hook/) | 面向 agent 的组合 hooks 与运行记录 |
-| [src/protocol](src/protocol/) | 线上契约：信封、A2A、通道与 `amp_protocol_workspace` 接口 |
 | [src/module](src/module/) | 模型/工具端口、MCP 适配器与执行策略 |
 | [src/runtime](src/runtime/) | agent 回合、工具循环与治理接入 |
 | [src/governance](src/governance/) | 清单、凭据、预算、工作流、签名与审计 |

package/lib/context/workspaceService.d.ts

@@ -1,5 +1,8 @@
 import type { Frame } from "../frame/frame.js";
 import { HostCatalog } from "../discover/host.js";
+import type { KnowledgeRegistry } from "../knowledge/registry.js";
+import type { ProtocolRegistry } from "../protocol/registry.js";
+import type { SkillRegistry } from "../skill/registry.js";
 import type { ToolCatalog } from "../naming/index.js";
 import type { WorkspaceErrorCode, WorkspaceProjectAction, WorkspaceResponse, WorkspaceToolDefinition } from "../protocol/workspace.js";
 import type { Receipt } from "../receipt/receipt.js";
@@ -116,6 +119,9 @@ export interface WorkspaceServiceOptions {
      * components are filtered against `projectIds` before discovery sees them.
      */
     host?: HostCatalog;
+    skills?: SkillRegistry;
+    knowledge?: KnowledgeRegistry;
+    protocols?: ProtocolRegistry;
 }
 export declare class WorkspaceAgentService {
     private readonly agentId;
@@ -127,6 +133,9 @@ export declare class WorkspaceAgentService {
     private readonly roots;
     private readonly definitions;
     private readonly host;
+    private readonly skills?;
+    private readonly knowledge?;
+    private readonly protocols?;
     private readonly projectIds;
     private readonly store;
     private readonly writer?;

package/lib/context/workspaceService.js

@@ -468,6 +468,9 @@ export class WorkspaceAgentService {
     roots;
     definitions = workspaceToolDefinitions();
     host;
+    skills;
+    knowledge;
+    protocols;
     projectIds;
     store;
     writer;
@@ -493,6 +496,9 @@ export class WorkspaceAgentService {
         }
         this.agentId = options.agentId;
         this.host = options.host ?? new HostCatalog();
+        this.skills = options.skills;
+        this.knowledge = options.knowledge;
+        this.protocols = options.protocols;
         this.projectIds = new Set(options.projectIds);
         this.writer = options.writer;
         this.runner = options.runner;
@@ -824,6 +830,9 @@ export class WorkspaceAgentService {
             projects,
             components,
             builtIn: this.builtInComponents(),
+            ...(this.skills === (void 0) ? {} : { skills: this.skills }),
+            ...(this.knowledge === (void 0) ? {} : { knowledge: this.knowledge }),
+            ...(this.protocols === (void 0) ? {} : { protocols: this.protocols }),
             query,
             contentOf: (entity) => {
                 if (entity.detailRef === (void 0)) {

package/lib/discover/kinds.d.ts

@@ -8,7 +8,7 @@ export declare const ModuleKinds: readonly ["service", "tool", "controller", "ro
 export type ModuleKind = (typeof ModuleKinds)[number];
 export declare const ComponentKinds: readonly ["plugin", "service", "tool", "module"];
 export type ComponentKind = (typeof ComponentKinds)[number];
-export declare const DiscoveryScopes: readonly ["all", "projects", "host"];
+export declare const DiscoveryScopes: readonly ["all", "projects", "host", "skills", "knowledge", "protocols"];
 export type DiscoveryScope = (typeof DiscoveryScopes)[number];
 export declare const ComponentStatuses: readonly ["active", "disabled", "deprecated"];
 export type ComponentStatus = (typeof ComponentStatuses)[number];

package/lib/discover/kinds.js

@@ -19,5 +19,5 @@ export const ModuleKinds = [
     "unknown",
 ];
 export const ComponentKinds = ["plugin", "service", "tool", "module"];
-export const DiscoveryScopes = ["all", "projects", "host"];
+export const DiscoveryScopes = ["all", "projects", "host", "skills", "knowledge", "protocols"];
 export const ComponentStatuses = ["active", "disabled", "deprecated"];