duclaw-cli 1.9.7 → 1.9.9

package/dist/bundle.js

@@ -30242,7 +30242,7 @@ function printHelp() {
 `);
 }
 function printVersion() {
-  console.log(`duclaw-cli v${true ? "1.9.7" : "unknown"}`);
+  console.log(`duclaw-cli v${true ? "1.9.9" : "unknown"}`);
 }
 function getDuclawTemplate() {
   return {
@@ -41782,9 +41782,9 @@ var imageUnderstand = {
 };
 
 // src/skill/SkillRegistry.ts
-var import_fs11 = require("fs");
+var import_fs13 = require("fs");
 var import_os3 = require("os");
-var import_path16 = __toESM(require("path"));
+var import_path18 = __toESM(require("path"));
 
 // src/runtime/paths.ts
 var import_fs10 = require("fs");
@@ -41813,33 +41813,608 @@ var resolveCoreRoot = () => {
       return candidate;
     }
   }
-  return candidates[0];
+  return candidates[0];
+};
+var resolveWebDistRoot = () => {
+  const coreRoot = resolveCoreRoot();
+  const candidates = [
+    import_path15.default.join(coreRoot, "dist", "web"),
+    import_path15.default.join(coreRoot, "web", "dist")
+  ];
+  for (const candidate of candidates) {
+    if ((0, import_fs10.existsSync)(import_path15.default.join(candidate, "index.html"))) {
+      return candidate;
+    }
+  }
+  return candidates[0];
+};
+
+// src/department/Department.ts
+var import_path16 = __toESM(require("path"));
+var import_fs11 = require("fs");
+var legacyMigrationChecked = false;
+var getDepartmentBaseDir = () => {
+  return import_path16.default.join(getDuclawHomeDir(), "department");
+};
+var getLegacyTeamBaseDir = () => {
+  return import_path16.default.join(getDuclawHomeDir(), "team");
+};
+var getDepartmentWorkSpaceDir = (departmentName) => {
+  return import_path16.default.join(getDepartmentBaseDir(), "workspace", departmentName);
+};
+var getLegacyTeamWorkSpaceDir = (teamName) => {
+  return import_path16.default.join(getLegacyTeamBaseDir(), "workspace", teamName);
+};
+var getDepartmentJsonPath = (departmentName) => {
+  return import_path16.default.join(getDepartmentWorkSpaceDir(departmentName), "department.json");
+};
+var getLegacyTeamJsonPath = (teamName) => {
+  return import_path16.default.join(getLegacyTeamWorkSpaceDir(teamName), "team.json");
+};
+var mapLegacyRole = (role) => {
+  return role === "team_manager" ? "department_head" : "executor";
+};
+var mapLegacyDepartment = (legacy) => {
+  const departmentMembers = (legacy.teamMembers ?? []).map((member) => ({
+    id: member.id,
+    name: member.name,
+    departmentId: legacy.id,
+    mailBoxId: member.mailBoxId,
+    workspaceId: member.workspaceId,
+    role: mapLegacyRole(member.role),
+    focusOn: member.focusOn
+  }));
+  const headMemberId = legacy.managerMemberId ?? departmentMembers.find((member) => member.role === "department_head")?.id;
+  return {
+    id: legacy.id,
+    name: legacy.name,
+    sourceGoalId: legacy.goalId,
+    charter: legacy.goalId ? `Legacy department migrated from team goal ${legacy.goalId}.` : "Legacy department migrated from team data.",
+    workpath: legacy.workpath,
+    headMemberId,
+    departmentMembers
+  };
+};
+var migrateLegacyTeamsToDepartments = () => {
+  if (legacyMigrationChecked) return;
+  legacyMigrationChecked = true;
+  const legacyWorkspaceDir = import_path16.default.join(getLegacyTeamBaseDir(), "workspace");
+  if (!(0, import_fs11.existsSync)(legacyWorkspaceDir)) return;
+  for (const legacyName of (0, import_fs11.readdirSync)(legacyWorkspaceDir)) {
+    const legacyJsonPath = getLegacyTeamJsonPath(legacyName);
+    if (!(0, import_fs11.existsSync)(legacyJsonPath)) continue;
+    const departmentJsonPath = getDepartmentJsonPath(legacyName);
+    if ((0, import_fs11.existsSync)(departmentJsonPath)) continue;
+    try {
+      const legacy = JSON.parse((0, import_fs11.readFileSync)(legacyJsonPath, "utf-8"));
+      const department = mapLegacyDepartment(legacy);
+      (0, import_fs11.mkdirSync)(getDepartmentWorkSpaceDir(department.name), { recursive: true });
+      (0, import_fs11.writeFileSync)(departmentJsonPath, JSON.stringify(department, null, "	"), "utf-8");
+    } catch (err) {
+      console.warn(`[department] Failed to migrate legacy team ${legacyName}: ${err.message}`);
+    }
+  }
+};
+var createDepartment = (departmentDefinition) => {
+  if (!departmentDefinition) throw new Error(`[createDepartment] departmentDefinition\u4E0D\u80FD\u4E3A\u7A7A`);
+  const departmentPath = getDepartmentWorkSpaceDir(departmentDefinition.name);
+  (0, import_fs11.mkdirSync)(departmentPath, { recursive: true });
+  (0, import_fs11.writeFileSync)(getDepartmentJsonPath(departmentDefinition.name), JSON.stringify(departmentDefinition, null, "	"), "utf-8");
+  return departmentDefinition;
+};
+var getDepartment = (name) => {
+  migrateLegacyTeamsToDepartments();
+  const departmentJsonPath = getDepartmentJsonPath(name);
+  if (!(0, import_fs11.existsSync)(departmentJsonPath)) return null;
+  const text2 = (0, import_fs11.readFileSync)(departmentJsonPath, "utf-8");
+  return JSON.parse(text2);
+};
+var listDepartments = () => {
+  migrateLegacyTeamsToDepartments();
+  const workspaceDir = import_path16.default.join(getDepartmentBaseDir(), "workspace");
+  if (!(0, import_fs11.existsSync)(workspaceDir)) return [];
+  const departments = [];
+  for (const departmentName of (0, import_fs11.readdirSync)(workspaceDir)) {
+    const department = getDepartment(departmentName);
+    if (department) departments.push(department);
+  }
+  return departments;
+};
+var getDepartmentById = (id) => {
+  const department = listDepartments().find((item) => item.id === id);
+  return department ?? null;
+};
+var deleteDepartment = (name) => {
+  if (!(0, import_fs11.existsSync)(getDepartmentJsonPath(name))) {
+    throw new Error(`[deleteDepartment] \u4E0D\u5B58\u5728\u5BF9\u5E94\u7684\u90E8\u95E8 ${name} \u7684 department.json \u6587\u4EF6`);
+  }
+  (0, import_fs11.rmSync)(getDepartmentJsonPath(name));
+};
+
+// src/department/learning.ts
+var import_node_fs4 = require("node:fs");
+var import_node_path13 = __toESM(require("node:path"));
+var import_node_crypto4 = require("node:crypto");
+
+// src/department/DepartmentMember.ts
+var import_fs12 = require("fs");
+var import_path17 = __toESM(require("path"));
+
+// src/department/workspace/workspace.ts
+var db = createSqliteDB();
+var getWorkspaceId = (departmentName, memberName) => {
+  return `${departmentName}::${memberName}`;
+};
+var createWorkspace = (workspace) => {
+  const stmt = db.prepare(`INSERT INTO workspace (id, team_name, teammate_name, team_workpath) VALUES (?, ?, ?, ?) `);
+  stmt.run(
+    workspace.id,
+    workspace.departmentName,
+    workspace.memberName,
+    workspace.departmentWorkPath
+  );
+};
+var deleteWorkspace = (workspaceId) => {
+  const stmt = db.prepare(`delete from workspace where id = ?`);
+  stmt.run(workspaceId);
+};
+
+// src/department/DepartmentMember.ts
+var createDepartmentMember = (departmentMemberDefinition) => {
+  if (!departmentMemberDefinition) throw new Error(`[createDepartmentMember] departmentMemberDefinition\u4E0D\u80FD\u4E3A\u7A7A`);
+  const { name, departmentId, workspaceId } = departmentMemberDefinition;
+  const department = getDepartmentById(departmentId);
+  if (!department) throw new Error(`[createDepartmentMember] \u627E\u4E0D\u5230\u5BF9\u5E94\u7684 department: ${departmentId}`);
+  const memberPath = import_path17.default.join(getDepartmentWorkSpaceDir(department.name), name);
+  (0, import_fs12.mkdirSync)(memberPath, { recursive: true });
+  const workspace = {
+    id: getWorkspaceId(department.name, departmentMemberDefinition.name),
+    departmentName: department.name,
+    memberName: name,
+    departmentWorkPath: memberPath
+  };
+  createWorkspace(workspace);
+  if (!department.departmentMembers) {
+    department.departmentMembers = [];
+  }
+  if (department.departmentMembers.some((member) => member.id === departmentMemberDefinition.id || member.name === departmentMemberDefinition.name)) {
+    throw new Error(`[createDepartmentMember] \u90E8\u95E8 ${department.name} \u5DF2\u5B58\u5728\u540C\u540D\u6216\u540C id \u6210\u5458: ${departmentMemberDefinition.name}/${departmentMemberDefinition.id}`);
+  }
+  if (departmentMemberDefinition.role === "department_head") {
+    const existingHead = department.headMemberId ? department.departmentMembers.find((member) => member.id === department.headMemberId) : department.departmentMembers.find((member) => member.role === "department_head");
+    if (existingHead) {
+      throw new Error(`[createDepartmentMember] \u90E8\u95E8 ${department.name} \u5DF2\u5B58\u5728 Department Head: ${existingHead.name}`);
+    }
+    department.headMemberId = departmentMemberDefinition.id;
+  }
+  department.departmentMembers.push(departmentMemberDefinition);
+  (0, import_fs12.writeFileSync)(getDepartmentJsonPath(department.name), JSON.stringify(department, null, "	"), "utf-8");
+  return departmentMemberDefinition;
+};
+var listDepartmentMembers = (departmentName) => {
+  const departmentJsonPath = getDepartmentJsonPath(departmentName);
+  if (!(0, import_fs12.existsSync)(departmentJsonPath)) return [];
+  const text2 = (0, import_fs12.readFileSync)(departmentJsonPath, "utf-8");
+  const department = JSON.parse(text2);
+  if (!department) throw new Error(`[listDepartmentMembers] \u627E\u4E0D\u5230\u5BF9\u5E94\u7684 department: ${departmentName}`);
+  return department.departmentMembers ?? [];
+};
+var getDepartmentMember = (departmentName, departmentMemberId) => {
+  const members = listDepartmentMembers(departmentName);
+  return members.find((member) => member.id === departmentMemberId) || null;
+};
+var getDepartmentMemberByName = (departmentName, departmentMemberName) => {
+  const members = listDepartmentMembers(departmentName);
+  return members.find((member) => member.name === departmentMemberName) || null;
+};
+var getDepartmentMemberByMailboxId = (mailboxId) => {
+  const [departmentName, memberName] = mailboxId.split("::");
+  if (!departmentName || !memberName) return null;
+  return getDepartmentMemberByName(departmentName, memberName);
+};
+var getDepartmentMemberById = (memberId) => {
+  for (const department of listDepartments()) {
+    const targetMember = department.departmentMembers.find((member) => member.id === memberId);
+    if (targetMember) return targetMember;
+  }
+  return null;
+};
+var deleteDepartmentMemberById = (departmentName, memberId) => {
+  const department = getDepartment(departmentName);
+  if (!department) throw new Error(`[deleteDepartmentMemberById] \u627E\u4E0D\u5230\u5BF9\u5E94\u7684 department: ${departmentName}`);
+  const memberIdx = department.departmentMembers.findIndex((member) => member.id === memberId);
+  if (memberIdx === -1) {
+    throw new Error(`[deleteDepartmentMemberById] \u627E\u4E0D\u5230\u5BF9\u5E94 id \u7684 department member: ${memberId}`);
+  }
+  const workspaceId = department.departmentMembers[memberIdx].workspaceId;
+  if (department.headMemberId === memberId) {
+    delete department.headMemberId;
+  }
+  department.departmentMembers = department.departmentMembers.filter((_, index) => index !== memberIdx);
+  (0, import_fs12.writeFileSync)(getDepartmentJsonPath(departmentName), JSON.stringify(department, null, "	"), "utf-8");
+  deleteWorkspace(workspaceId);
+};
+
+// src/skill/SkillValidator.ts
+var import_node_fs3 = require("node:fs");
+var import_node_path12 = __toESM(require("node:path"));
+var SKILL_NAME_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/;
+var REQUIRED_SECTIONS = [
+  /(^|\n)##\s+(when to use|何时使用|trigger|triggers)\b/i,
+  /(^|\n)##\s+(steps|workflow|procedure|执行步骤|工作流)\b/i
+];
+var stripYamlQuotes = (value) => {
+  const trimmed = value.trim();
+  if (trimmed.startsWith(`"`) && trimmed.endsWith(`"`) || trimmed.startsWith(`'`) && trimmed.endsWith(`'`)) {
+    return trimmed.slice(1, -1).trim();
+  }
+  return trimmed;
+};
+var addError = (errors, code, message) => {
+  errors.push({ code, message });
+};
+var addWarning = (warnings, code, message) => {
+  warnings.push({ code, message });
+};
+var isValidSkillName = (name) => {
+  return SKILL_NAME_PATTERN.test(name) && !name.includes(`--`);
+};
+var assertSafeSkillTarget = (rootDir, skillName) => {
+  if (!isValidSkillName(skillName)) {
+    throw new Error(`Invalid skill name "${skillName}". Use lowercase letters, digits, and single hyphens only.`);
+  }
+  const root = import_node_path12.default.resolve(rootDir);
+  const target = import_node_path12.default.resolve(root, skillName);
+  if (target !== import_node_path12.default.join(root, skillName) || !target.startsWith(root + import_node_path12.default.sep)) {
+    throw new Error(`Invalid skill install target for "${skillName}".`);
+  }
+  return target;
+};
+var parseSkillDocument = (skillMd) => {
+  const fmMatch = skillMd.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
+  if (!fmMatch) return null;
+  const frontmatter = {};
+  for (const rawLine of fmMatch[1].split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line || line.startsWith(`#`)) continue;
+    const match2 = line.match(/^([A-Za-z0-9_-]+):\s*(.*)$/);
+    if (!match2) {
+      frontmatter[`__invalid__${Object.keys(frontmatter).length}`] = line;
+      continue;
+    }
+    frontmatter[match2[1]] = stripYamlQuotes(match2[2]);
+  }
+  return {
+    name: frontmatter.name ?? ``,
+    description: frontmatter.description ?? ``,
+    body: skillMd.slice(fmMatch[0].length).trim(),
+    frontmatter
+  };
+};
+var validateSkillDocument = (input) => {
+  const errors = [];
+  const warnings = [];
+  const skillMd = input.skillMd;
+  if (!skillMd || !skillMd.trim()) {
+    addError(errors, `empty_skill_md`, `SKILL.md content is required.`);
+    return { ok: false, errors, warnings };
+  }
+  const parsed = parseSkillDocument(skillMd);
+  if (!parsed) {
+    addError(errors, `missing_frontmatter`, `SKILL.md must start with YAML frontmatter delimited by "---".`);
+    return { ok: false, errors, warnings };
+  }
+  const invalidFrontmatterLines = Object.keys(parsed.frontmatter).filter((key) => key.startsWith(`__invalid__`));
+  if (invalidFrontmatterLines.length > 0) {
+    addError(errors, `invalid_frontmatter`, `Frontmatter must contain simple "key: value" lines.`);
+  }
+  if (!parsed.name) {
+    addError(errors, `missing_name`, `Frontmatter field "name" is required.`);
+  } else if (!isValidSkillName(parsed.name)) {
+    addError(errors, `invalid_name`, `Skill name "${parsed.name}" must be kebab-case, under 64 characters, and path-safe.`);
+  }
+  if (!parsed.description) {
+    addError(errors, `missing_description`, `Frontmatter field "description" is required.`);
+  } else if (parsed.description.length > 500) {
+    addWarning(warnings, `long_description`, `Skill description is long; keep trigger metadata concise.`);
+  }
+  if (input.skillName && parsed.name && input.skillName !== parsed.name) {
+    addError(errors, `name_mismatch`, `Input skillName "${input.skillName}" must match frontmatter name "${parsed.name}".`);
+  }
+  if (input.description && parsed.description && input.description !== parsed.description) {
+    addError(errors, `description_mismatch`, `Input description must match frontmatter description.`);
+  }
+  if (!parsed.body) {
+    addError(errors, `empty_body`, `SKILL.md body is required.`);
+  } else {
+    if (!/(^|\n)#\s+\S/.test(parsed.body)) {
+      addWarning(warnings, `missing_title`, `Skill body should start with a Markdown H1 title.`);
+    }
+    for (const sectionPattern of REQUIRED_SECTIONS) {
+      if (!sectionPattern.test(parsed.body)) {
+        addWarning(warnings, `missing_recommended_section`, `Skill body should include when-to-use and execution workflow sections.`);
+        break;
+      }
+    }
+  }
+  if (input.baseDir) {
+    const normalizedBase = import_node_path12.default.resolve(input.baseDir);
+    for (const match2 of parsed.body.matchAll(/\]\(([^)]+)\)/g)) {
+      const href = match2[1].trim();
+      if (!href || /^[a-z][a-z0-9+.-]*:/i.test(href) || href.startsWith(`#`)) continue;
+      const target = import_node_path12.default.resolve(normalizedBase, href.split(`#`)[0]);
+      if (!target.startsWith(normalizedBase + import_node_path12.default.sep) && target !== normalizedBase) {
+        addError(errors, `unsafe_reference`, `Relative link "${href}" escapes the skill directory.`);
+      } else if (!(0, import_node_fs3.existsSync)(target)) {
+        addError(errors, `missing_reference`, `Relative link "${href}" does not exist in the skill directory.`);
+      }
+    }
+  }
+  return {
+    ok: errors.length === 0,
+    skill: parsed,
+    errors,
+    warnings
+  };
+};
+var mergeIssues = (target, source) => {
+  target.errors.push(...source.errors);
+  target.warnings.push(...source.warnings);
+};
+var validateScriptsDirectory = (skillDir, warnings) => {
+  const scriptsDir = import_node_path12.default.join(skillDir, `scripts`);
+  if (!(0, import_node_fs3.existsSync)(scriptsDir)) return;
+  const entries = (0, import_node_fs3.readdirSync)(scriptsDir, { withFileTypes: true }).filter((entry) => entry.isFile());
+  if (entries.length === 0) {
+    addWarning(warnings, `empty_scripts_dir`, `scripts/ exists but contains no files.`);
+  }
+};
+var validateSkillDirectory = (skillDir, options = {}) => {
+  const errors = [];
+  const warnings = [];
+  const normalizedSkillDir = import_node_path12.default.resolve(skillDir);
+  const skillMdPath = import_node_path12.default.join(normalizedSkillDir, `SKILL.md`);
+  if (!(0, import_node_fs3.existsSync)(normalizedSkillDir) || !(0, import_node_fs3.statSync)(normalizedSkillDir).isDirectory()) {
+    addError(errors, `missing_skill_dir`, `Skill directory does not exist: ${normalizedSkillDir}`);
+    return { ok: false, errors, warnings, skillDir: normalizedSkillDir, skillMdPath };
+  }
+  if (!(0, import_node_fs3.existsSync)(skillMdPath) || !(0, import_node_fs3.statSync)(skillMdPath).isFile()) {
+    addError(errors, `missing_skill_md`, `Skill directory must contain SKILL.md.`);
+    return { ok: false, errors, warnings, skillDir: normalizedSkillDir, skillMdPath };
+  }
+  const raw2 = (0, import_node_fs3.readFileSync)(skillMdPath, `utf-8`);
+  const documentResult = validateSkillDocument({
+    skillName: options.expectedName ?? import_node_path12.default.basename(normalizedSkillDir),
+    skillMd: raw2,
+    baseDir: normalizedSkillDir
+  });
+  mergeIssues({ errors, warnings }, documentResult);
+  validateScriptsDirectory(normalizedSkillDir, warnings);
+  return {
+    ok: errors.length === 0,
+    skill: documentResult.skill,
+    errors,
+    warnings,
+    skillDir: normalizedSkillDir,
+    skillMdPath
+  };
+};
+var smokeTestSkillDirectory = (skillDir, options = {}) => {
+  const directoryResult = validateSkillDirectory(skillDir, options);
+  const errors = [...directoryResult.errors];
+  const warnings = [...directoryResult.warnings];
+  let detail;
+  if (directoryResult.ok && directoryResult.skill) {
+    detail = `Base directory for this skill: ${directoryResult.skillDir}
+
+${directoryResult.skill.body}`;
+    if (!detail.includes(directoryResult.skillDir)) {
+      addError(errors, `smoke_missing_base_dir`, `Skill detail does not include its base directory.`);
+    }
+    if (!detail.includes(directoryResult.skill.body)) {
+      addError(errors, `smoke_missing_body`, `Skill detail does not include the SKILL.md body.`);
+    }
+    if (detail.length < 80) {
+      addWarning(warnings, `smoke_short_detail`, `Skill detail is unusually short.`);
+    }
+  }
+  return {
+    ...directoryResult,
+    ok: errors.length === 0,
+    errors,
+    warnings,
+    detail
+  };
+};
+var formatSkillValidationIssues = (result) => {
+  const lines = [
+    ...result.errors.map((issue) => `- [${issue.code}] ${issue.message}`),
+    ...result.warnings.map((issue) => `- [warning:${issue.code}] ${issue.message}`)
+  ];
+  return lines.join(`
+`);
+};
+
+// src/department/learning.ts
+var ensureDir = (dir) => (0, import_node_fs4.mkdirSync)(dir, { recursive: true });
+var readJsonArray = (filePath) => {
+  if (!(0, import_node_fs4.existsSync)(filePath)) return [];
+  return JSON.parse((0, import_node_fs4.readFileSync)(filePath, "utf-8"));
+};
+var writeJsonArray = (filePath, records) => {
+  ensureDir(import_node_path13.default.dirname(filePath));
+  (0, import_node_fs4.writeFileSync)(filePath, JSON.stringify(records, null, "	"), "utf-8");
+};
+var departmentMemoryPath = (departmentName) => {
+  return import_node_path13.default.join(getDepartmentWorkSpaceDir(departmentName), "department-memory.json");
+};
+var departmentSkillPath = (departmentName) => {
+  return import_node_path13.default.join(getDepartmentWorkSpaceDir(departmentName), "department-skills.json");
+};
+var departmentSkillDir = (departmentName, skillName) => {
+  return assertSafeSkillTarget(import_node_path13.default.join(getDepartmentWorkSpaceDir(departmentName), "skills"), skillName);
+};
+var proposalsPath = () => {
+  return import_node_path13.default.join(getDepartmentBaseDir(), "department-proposals.json");
+};
+var getDepartmentNameForHead = (request) => {
+  const mailboxId = request?.departmentAgentId;
+  if (!mailboxId) return null;
+  const member = getDepartmentMemberByMailboxId(mailboxId);
+  if (!member || member.role !== "department_head") return null;
+  const [departmentName] = mailboxId.split("::");
+  return departmentName || null;
+};
+var listDepartmentMemories = (departmentName) => {
+  return readJsonArray(departmentMemoryPath(departmentName)).sort((a, b) => b.updatedAt - a.updatedAt);
+};
+var createDepartmentMemory = (departmentName, input) => {
+  const now = Date.now();
+  const memory = {
+    id: (0, import_node_crypto4.randomUUID)().slice(0, 8),
+    departmentName,
+    title: input.title,
+    content: input.content,
+    sourceMailboxId: input.sourceMailboxId,
+    createdAt: now,
+    updatedAt: now
+  };
+  const records = listDepartmentMemories(departmentName);
+  records.push(memory);
+  writeJsonArray(departmentMemoryPath(departmentName), records);
+  return memory;
+};
+var updateDepartmentMemory = (departmentName, id, patch) => {
+  const records = listDepartmentMemories(departmentName);
+  const idx = records.findIndex((record) => record.id === id);
+  if (idx < 0) return null;
+  records[idx] = {
+    ...records[idx],
+    ...patch.title !== void 0 ? { title: patch.title } : {},
+    ...patch.content !== void 0 ? { content: patch.content } : {},
+    updatedAt: Date.now()
+  };
+  writeJsonArray(departmentMemoryPath(departmentName), records);
+  return records[idx];
+};
+var deleteDepartmentMemory = (departmentName, id) => {
+  const records = listDepartmentMemories(departmentName);
+  const target = records.find((record) => record.id === id) ?? null;
+  writeJsonArray(departmentMemoryPath(departmentName), records.filter((record) => record.id !== id));
+  return target;
+};
+var listDepartmentSkills = (departmentName) => {
+  return readJsonArray(departmentSkillPath(departmentName)).sort((a, b) => b.updatedAt - a.updatedAt);
+};
+var proposeDepartmentSkill = (departmentName, input) => {
+  const validation = validateSkillDocument({
+    skillName: input.skillName,
+    description: input.description,
+    skillMd: input.skillMd
+  });
+  if (!validation.ok) {
+    throw new Error(`[departmentSkill] Skill \u8349\u7A3F\u6821\u9A8C\u5931\u8D25\uFF1A
+${formatSkillValidationIssues(validation)}`);
+  }
+  const records = listDepartmentSkills(departmentName);
+  if (records.some((record) => record.skillName === input.skillName && record.status !== "dropped")) {
+    return null;
+  }
+  const now = Date.now();
+  const skill = {
+    id: (0, import_node_crypto4.randomUUID)().slice(0, 8),
+    departmentName,
+    skillName: input.skillName,
+    description: input.description,
+    skillMd: input.skillMd,
+    status: "pending",
+    createdByMailboxId: input.createdByMailboxId,
+    createdAt: now,
+    updatedAt: now
+  };
+  records.push(skill);
+  writeJsonArray(departmentSkillPath(departmentName), records);
+  return skill;
+};
+var keepDepartmentSkill = (departmentName, id) => {
+  const records = listDepartmentSkills(departmentName);
+  const idx = records.findIndex((record) => record.id === id);
+  if (idx < 0) return null;
+  records[idx] = { ...records[idx], status: "active", updatedAt: Date.now() };
+  const skillDir = departmentSkillDir(departmentName, records[idx].skillName);
+  const validation = validateSkillDocument({
+    skillName: records[idx].skillName,
+    description: records[idx].description,
+    skillMd: records[idx].skillMd,
+    baseDir: skillDir
+  });
+  if (!validation.ok) {
+    throw new Error(`[departmentSkill] Skill \u8349\u7A3F\u6821\u9A8C\u5931\u8D25\uFF0C\u62D2\u7EDD\u4FDD\u7559\uFF1A
+${formatSkillValidationIssues(validation)}`);
+  }
+  ensureDir(skillDir);
+  (0, import_node_fs4.writeFileSync)(import_node_path13.default.join(skillDir, "SKILL.md"), records[idx].skillMd, "utf-8");
+  const smokeTest = smokeTestSkillDirectory(skillDir, { expectedName: records[idx].skillName });
+  if (!smokeTest.ok) {
+    throw new Error(`[departmentSkill] Skill smoke test \u5931\u8D25\uFF1A
+${formatSkillValidationIssues(smokeTest)}`);
+  }
+  writeJsonArray(departmentSkillPath(departmentName), records);
+  return records[idx];
 };
-var resolveWebDistRoot = () => {
-  const coreRoot = resolveCoreRoot();
-  const candidates = [
-    import_path15.default.join(coreRoot, "dist", "web"),
-    import_path15.default.join(coreRoot, "web", "dist")
-  ];
-  for (const candidate of candidates) {
-    if ((0, import_fs10.existsSync)(import_path15.default.join(candidate, "index.html"))) {
-      return candidate;
-    }
-  }
-  return candidates[0];
+var dropDepartmentSkill = (departmentName, id) => {
+  const records = listDepartmentSkills(departmentName);
+  const idx = records.findIndex((record) => record.id === id);
+  if (idx < 0) return null;
+  records[idx] = { ...records[idx], status: "dropped", updatedAt: Date.now() };
+  writeJsonArray(departmentSkillPath(departmentName), records);
+  return records[idx];
+};
+var createDepartmentProposal = (input) => {
+  const records = readJsonArray(proposalsPath());
+  const proposal = {
+    ...input,
+    id: (0, import_node_crypto4.randomUUID)().slice(0, 8),
+    status: "pending",
+    createdAt: Date.now()
+  };
+  records.push(proposal);
+  writeJsonArray(proposalsPath(), records);
+  return proposal;
+};
+var buildDepartmentLearningContext = (departmentName) => {
+  if (!departmentName) return "";
+  const memories = listDepartmentMemories(departmentName);
+  const activeSkills = listDepartmentSkills(departmentName).filter((skill) => skill.status === "active");
+  if (memories.length === 0 && activeSkills.length === 0) return "";
+  const memoryLines = memories.map(
+    (memory) => `  - [id=${memory.id}] ${memory.title}
+    ${memory.content.replace(/\n/g, "\n    ")}`
+  ).join("\n");
+  const skillLines = activeSkills.map(
+    (skill) => `  - ${skill.skillName}: ${skill.description}`
+  ).join("\n");
+  return [
+    `<department-learning-context department="${departmentName}">`,
+    memories.length > 0 ? `Department memories:
+${memoryLines}` : "",
+    activeSkills.length > 0 ? `Department skills:
+${skillLines}` : "",
+    `</department-learning-context>`
+  ].filter(Boolean).join("\n");
 };
 
 // src/skill/SkillRegistry.ts
 var getProjectSkillsPath = () => {
   const projectRoot = findProjectRoot();
-  return projectRoot ? (0, import_path16.join)(projectRoot, "skills") : null;
+  return projectRoot ? (0, import_path18.join)(projectRoot, "skills") : null;
 };
 var getSkillPaths = () => {
   const paths = [];
   const seenPaths = /* @__PURE__ */ new Set();
   const pushPath = (candidate) => {
-    if (!(0, import_fs11.existsSync)(candidate) || !(0, import_fs11.statSync)(candidate).isDirectory()) return;
-    const normalized = import_path16.default.resolve(candidate);
+    if (!(0, import_fs13.existsSync)(candidate) || !(0, import_fs13.statSync)(candidate).isDirectory()) return;
+    const normalized = import_path18.default.resolve(candidate);
     if (seenPaths.has(normalized)) return;
     seenPaths.add(normalized);
     paths.push(normalized);
@@ -41848,16 +42423,16 @@ var getSkillPaths = () => {
   if (projectSkillsPath) {
     pushPath(projectSkillsPath);
   }
-  pushPath((0, import_path16.join)((0, import_os3.homedir)(), ".duclaw", "skills"));
-  pushPath((0, import_path16.join)((0, import_os3.homedir)(), ".agents", "skills"));
+  pushPath((0, import_path18.join)((0, import_os3.homedir)(), ".duclaw", "skills"));
+  pushPath((0, import_path18.join)((0, import_os3.homedir)(), ".agents", "skills"));
   return paths;
 };
 var getDirectories = (dirPath) => {
-  return (0, import_fs11.readdirSync)(dirPath).filter((name) => (0, import_fs11.statSync)((0, import_path16.join)(dirPath, name)).isDirectory());
+  return (0, import_fs13.readdirSync)(dirPath).filter((name) => (0, import_fs13.statSync)((0, import_path18.join)(dirPath, name)).isDirectory());
 };
-var parseSkill = (mdPath, skillDir) => {
-  if (!(0, import_fs11.existsSync)(mdPath)) return null;
-  const raw2 = (0, import_fs11.readFileSync)(mdPath, "utf-8");
+var parseSkill = (mdPath, skillDir, options = {}) => {
+  if (!(0, import_fs13.existsSync)(mdPath)) return null;
+  const raw2 = (0, import_fs13.readFileSync)(mdPath, "utf-8");
   let name = "";
   let description = "";
   let body = raw2;
@@ -41873,18 +42448,22 @@ var parseSkill = (mdPath, skillDir) => {
     }
   }
   if (!name) {
-    name = import_path16.default.basename(import_path16.default.dirname(mdPath));
+    name = import_path18.default.basename(import_path18.default.dirname(mdPath));
   }
   if (!description && body) {
     description = body.split("\n")[0].replace(/^#+\s*/, "").trim();
   }
+  const normalizedSkillDir = import_path18.default.resolve(skillDir);
   const projectSkillsPath = getProjectSkillsPath();
-  const normalizedSkillDir = import_path16.default.resolve(skillDir);
-  const deletable = projectSkillsPath ? normalizedSkillDir === import_path16.default.resolve(projectSkillsPath, import_path16.default.basename(normalizedSkillDir)) && normalizedSkillDir.startsWith(import_path16.default.resolve(projectSkillsPath) + import_path16.default.sep) : false;
+  const isProjectSkill = projectSkillsPath ? normalizedSkillDir === import_path18.default.resolve(projectSkillsPath, import_path18.default.basename(normalizedSkillDir)) && normalizedSkillDir.startsWith(import_path18.default.resolve(projectSkillsPath) + import_path18.default.sep) : false;
+  const scope = options.scope ?? (isProjectSkill ? "project" : "global");
+  const deletable = options.deletable ?? (scope === "project" && isProjectSkill);
   return {
     name,
     description,
     baseDir: skillDir,
+    scope,
+    departmentName: options.departmentName,
     deletable,
     getDetail: () => {
       let content = body.replace(/<Skill目录>/g, skillDir).replace(/\$\{CLAUDE_SKILL_DIR\}/g, skillDir);
@@ -41894,16 +42473,35 @@ ${content}`;
     }
   };
 };
+var loadDepartmentSkills = (seen) => {
+  const skills = [];
+  for (const department of listDepartments()) {
+    const activeSkills = listDepartmentSkills(department.name).filter((skill) => skill.status === "active");
+    for (const departmentSkill of activeSkills) {
+      if (seen.has(departmentSkill.skillName)) continue;
+      const skillDir = (0, import_path18.join)(getDepartmentWorkSpaceDir(department.name), "skills", departmentSkill.skillName);
+      const skill = parseSkill((0, import_path18.join)(skillDir, "SKILL.md"), skillDir, {
+        scope: "department",
+        departmentName: department.name,
+        deletable: false
+      });
+      if (skill) {
+        seen.add(skill.name);
+        skills.push(skill);
+      }
+    }
+  }
+  return skills;
+};
 var loadSkill = () => {
   const skillPaths = getSkillPaths();
-  if (skillPaths.length === 0) return [];
   const seen = /* @__PURE__ */ new Set();
   const skills = [];
   for (const skillPath of skillPaths) {
     const dirs = getDirectories(skillPath);
     for (const skillName of dirs) {
-      const eachSkillPath = (0, import_path16.join)(skillPath, skillName);
-      const eachSkillMdPath = (0, import_path16.join)(eachSkillPath, "SKILL.md");
+      const eachSkillPath = (0, import_path18.join)(skillPath, skillName);
+      const eachSkillMdPath = (0, import_path18.join)(eachSkillPath, "SKILL.md");
       const skill = parseSkill(eachSkillMdPath, eachSkillPath);
       if (skill && !seen.has(skill.name)) {
         seen.add(skill.name);
@@ -41911,13 +42509,14 @@ var loadSkill = () => {
       }
     }
   }
+  skills.push(...loadDepartmentSkills(seen));
   return skills;
 };
 var deleteSkill = (name) => {
   const skills = loadSkill();
   const skill = skills.find((s) => s.name === name);
   if (!skill || !skill.deletable) return false;
-  (0, import_fs11.rmSync)(skill.baseDir, { recursive: true, force: false });
+  (0, import_fs13.rmSync)(skill.baseDir, { recursive: true, force: false });
   return true;
 };
 var SkillRegistry_default = loadSkill;
@@ -42204,10 +42803,10 @@ var goalDelete = {
 };
 
 // src/tools/tools/department/DepartmentCreate.ts
-var import_node_crypto8 = require("node:crypto");
+var import_node_crypto9 = require("node:crypto");
 
 // src/department/mailbox/mailbox.ts
-var import_node_crypto7 = require("node:crypto");
+var import_node_crypto8 = require("node:crypto");
 
 // src/agent/interruptRegistry.ts
 var registry = /* @__PURE__ */ new Map();
@@ -42258,7 +42857,7 @@ var drainInterrupts = (userId) => {
 };
 
 // src/agent/events.ts
-var import_node_crypto4 = require("node:crypto");
+var import_node_crypto5 = require("node:crypto");
 var rowToEvent = (row) => ({
   id: row.id,
   userId: row.userId,
@@ -42275,7 +42874,7 @@ var rowToEvent = (row) => ({
 var recordAgentEvent = (input) => {
   const db3 = createSqliteDB();
   const now = Date.now();
-  const id = `evt_${(0, import_node_crypto4.randomUUID)().slice(0, 12)}`;
+  const id = `evt_${(0, import_node_crypto5.randomUUID)().slice(0, 12)}`;
   const payloadJson = JSON.stringify(input.payload);
   db3.prepare(`
         INSERT INTO agent_events (
@@ -42406,7 +43005,7 @@ ${ceoFollowupInstruction}
 };
 
 // src/department/mailbox/events.ts
-var import_node_crypto5 = require("node:crypto");
+var import_node_crypto6 = require("node:crypto");
 var parseDetail = (detailJson) => {
   if (!detailJson) return void 0;
   try {
@@ -42447,7 +43046,7 @@ var mapMailboxEventRow = (row) => {
 var recordMailboxEvent = (input) => {
   const db3 = createSqliteDB();
   const event = {
-    id: (0, import_node_crypto5.randomUUID)().slice(0, 12),
+    id: (0, import_node_crypto6.randomUUID)().slice(0, 12),
     messageId: input.messageId,
     mailboxId: input.mailboxId,
     actorMailboxId: input.actorMailboxId,
@@ -42516,222 +43115,21 @@ var listMailboxEvents = (params) => {
             m.send_time as sendTime,
             m.status as status,
             m.origin_user_id as originUserId,
-            m.origin_platform as originPlatform,
-            m.thread_id as threadId,
-            m.parent_message_id as parentMessageId
-         FROM mailbox_events e
-         LEFT JOIN mailbox m ON m.id = e.message_id
-         WHERE e.mailbox_id = ? OR e.actor_mailbox_id = ? OR e.counterpart_mailbox_id = ?
-         ORDER BY e.created_at DESC
-         LIMIT ?`
-  );
-  const rows = stmt.all(params.mailboxId, params.mailboxId, params.mailboxId, limit);
-  return rows.map(mapMailboxEventRow);
-};
-
-// src/department/DepartmentMember.ts
-var import_fs13 = require("fs");
-var import_path18 = __toESM(require("path"));
-
-// src/department/Department.ts
-var import_path17 = __toESM(require("path"));
-var import_fs12 = require("fs");
-var legacyMigrationChecked = false;
-var getDepartmentBaseDir = () => {
-  return import_path17.default.join(getDuclawHomeDir(), "department");
-};
-var getLegacyTeamBaseDir = () => {
-  return import_path17.default.join(getDuclawHomeDir(), "team");
-};
-var getDepartmentWorkSpaceDir = (departmentName) => {
-  return import_path17.default.join(getDepartmentBaseDir(), "workspace", departmentName);
-};
-var getLegacyTeamWorkSpaceDir = (teamName) => {
-  return import_path17.default.join(getLegacyTeamBaseDir(), "workspace", teamName);
-};
-var getDepartmentJsonPath = (departmentName) => {
-  return import_path17.default.join(getDepartmentWorkSpaceDir(departmentName), "department.json");
-};
-var getLegacyTeamJsonPath = (teamName) => {
-  return import_path17.default.join(getLegacyTeamWorkSpaceDir(teamName), "team.json");
-};
-var mapLegacyRole = (role) => {
-  return role === "team_manager" ? "department_head" : "executor";
-};
-var mapLegacyDepartment = (legacy) => {
-  const departmentMembers = (legacy.teamMembers ?? []).map((member) => ({
-    id: member.id,
-    name: member.name,
-    departmentId: legacy.id,
-    mailBoxId: member.mailBoxId,
-    workspaceId: member.workspaceId,
-    role: mapLegacyRole(member.role),
-    focusOn: member.focusOn
-  }));
-  const headMemberId = legacy.managerMemberId ?? departmentMembers.find((member) => member.role === "department_head")?.id;
-  return {
-    id: legacy.id,
-    name: legacy.name,
-    sourceGoalId: legacy.goalId,
-    charter: legacy.goalId ? `Legacy department migrated from team goal ${legacy.goalId}.` : "Legacy department migrated from team data.",
-    workpath: legacy.workpath,
-    headMemberId,
-    departmentMembers
-  };
-};
-var migrateLegacyTeamsToDepartments = () => {
-  if (legacyMigrationChecked) return;
-  legacyMigrationChecked = true;
-  const legacyWorkspaceDir = import_path17.default.join(getLegacyTeamBaseDir(), "workspace");
-  if (!(0, import_fs12.existsSync)(legacyWorkspaceDir)) return;
-  for (const legacyName of (0, import_fs12.readdirSync)(legacyWorkspaceDir)) {
-    const legacyJsonPath = getLegacyTeamJsonPath(legacyName);
-    if (!(0, import_fs12.existsSync)(legacyJsonPath)) continue;
-    const departmentJsonPath = getDepartmentJsonPath(legacyName);
-    if ((0, import_fs12.existsSync)(departmentJsonPath)) continue;
-    try {
-      const legacy = JSON.parse((0, import_fs12.readFileSync)(legacyJsonPath, "utf-8"));
-      const department = mapLegacyDepartment(legacy);
-      (0, import_fs12.mkdirSync)(getDepartmentWorkSpaceDir(department.name), { recursive: true });
-      (0, import_fs12.writeFileSync)(departmentJsonPath, JSON.stringify(department, null, "	"), "utf-8");
-    } catch (err) {
-      console.warn(`[department] Failed to migrate legacy team ${legacyName}: ${err.message}`);
-    }
-  }
-};
-var createDepartment = (departmentDefinition) => {
-  if (!departmentDefinition) throw new Error(`[createDepartment] departmentDefinition\u4E0D\u80FD\u4E3A\u7A7A`);
-  const departmentPath = getDepartmentWorkSpaceDir(departmentDefinition.name);
-  (0, import_fs12.mkdirSync)(departmentPath, { recursive: true });
-  (0, import_fs12.writeFileSync)(getDepartmentJsonPath(departmentDefinition.name), JSON.stringify(departmentDefinition, null, "	"), "utf-8");
-  return departmentDefinition;
-};
-var getDepartment = (name) => {
-  migrateLegacyTeamsToDepartments();
-  const departmentJsonPath = getDepartmentJsonPath(name);
-  if (!(0, import_fs12.existsSync)(departmentJsonPath)) return null;
-  const text2 = (0, import_fs12.readFileSync)(departmentJsonPath, "utf-8");
-  return JSON.parse(text2);
-};
-var listDepartments = () => {
-  migrateLegacyTeamsToDepartments();
-  const workspaceDir = import_path17.default.join(getDepartmentBaseDir(), "workspace");
-  if (!(0, import_fs12.existsSync)(workspaceDir)) return [];
-  const departments = [];
-  for (const departmentName of (0, import_fs12.readdirSync)(workspaceDir)) {
-    const department = getDepartment(departmentName);
-    if (department) departments.push(department);
-  }
-  return departments;
-};
-var getDepartmentById = (id) => {
-  const department = listDepartments().find((item) => item.id === id);
-  return department ?? null;
-};
-var deleteDepartment = (name) => {
-  if (!(0, import_fs12.existsSync)(getDepartmentJsonPath(name))) {
-    throw new Error(`[deleteDepartment] \u4E0D\u5B58\u5728\u5BF9\u5E94\u7684\u90E8\u95E8 ${name} \u7684 department.json \u6587\u4EF6`);
-  }
-  (0, import_fs12.rmSync)(getDepartmentJsonPath(name));
-};
-
-// src/department/workspace/workspace.ts
-var db = createSqliteDB();
-var getWorkspaceId = (departmentName, memberName) => {
-  return `${departmentName}::${memberName}`;
-};
-var createWorkspace = (workspace) => {
-  const stmt = db.prepare(`INSERT INTO workspace (id, team_name, teammate_name, team_workpath) VALUES (?, ?, ?, ?) `);
-  stmt.run(
-    workspace.id,
-    workspace.departmentName,
-    workspace.memberName,
-    workspace.departmentWorkPath
-  );
-};
-var deleteWorkspace = (workspaceId) => {
-  const stmt = db.prepare(`delete from workspace where id = ?`);
-  stmt.run(workspaceId);
-};
-
-// src/department/DepartmentMember.ts
-var createDepartmentMember = (departmentMemberDefinition) => {
-  if (!departmentMemberDefinition) throw new Error(`[createDepartmentMember] departmentMemberDefinition\u4E0D\u80FD\u4E3A\u7A7A`);
-  const { name, departmentId, workspaceId } = departmentMemberDefinition;
-  const department = getDepartmentById(departmentId);
-  if (!department) throw new Error(`[createDepartmentMember] \u627E\u4E0D\u5230\u5BF9\u5E94\u7684 department: ${departmentId}`);
-  const memberPath = import_path18.default.join(getDepartmentWorkSpaceDir(department.name), name);
-  (0, import_fs13.mkdirSync)(memberPath, { recursive: true });
-  const workspace = {
-    id: getWorkspaceId(department.name, departmentMemberDefinition.name),
-    departmentName: department.name,
-    memberName: name,
-    departmentWorkPath: memberPath
-  };
-  createWorkspace(workspace);
-  if (!department.departmentMembers) {
-    department.departmentMembers = [];
-  }
-  if (department.departmentMembers.some((member) => member.id === departmentMemberDefinition.id || member.name === departmentMemberDefinition.name)) {
-    throw new Error(`[createDepartmentMember] \u90E8\u95E8 ${department.name} \u5DF2\u5B58\u5728\u540C\u540D\u6216\u540C id \u6210\u5458: ${departmentMemberDefinition.name}/${departmentMemberDefinition.id}`);
-  }
-  if (departmentMemberDefinition.role === "department_head") {
-    const existingHead = department.headMemberId ? department.departmentMembers.find((member) => member.id === department.headMemberId) : department.departmentMembers.find((member) => member.role === "department_head");
-    if (existingHead) {
-      throw new Error(`[createDepartmentMember] \u90E8\u95E8 ${department.name} \u5DF2\u5B58\u5728 Department Head: ${existingHead.name}`);
-    }
-    department.headMemberId = departmentMemberDefinition.id;
-  }
-  department.departmentMembers.push(departmentMemberDefinition);
-  (0, import_fs13.writeFileSync)(getDepartmentJsonPath(department.name), JSON.stringify(department, null, "	"), "utf-8");
-  return departmentMemberDefinition;
-};
-var listDepartmentMembers = (departmentName) => {
-  const departmentJsonPath = getDepartmentJsonPath(departmentName);
-  if (!(0, import_fs13.existsSync)(departmentJsonPath)) return [];
-  const text2 = (0, import_fs13.readFileSync)(departmentJsonPath, "utf-8");
-  const department = JSON.parse(text2);
-  if (!department) throw new Error(`[listDepartmentMembers] \u627E\u4E0D\u5230\u5BF9\u5E94\u7684 department: ${departmentName}`);
-  return department.departmentMembers ?? [];
-};
-var getDepartmentMember = (departmentName, departmentMemberId) => {
-  const members = listDepartmentMembers(departmentName);
-  return members.find((member) => member.id === departmentMemberId) || null;
-};
-var getDepartmentMemberByName = (departmentName, departmentMemberName) => {
-  const members = listDepartmentMembers(departmentName);
-  return members.find((member) => member.name === departmentMemberName) || null;
-};
-var getDepartmentMemberByMailboxId = (mailboxId) => {
-  const [departmentName, memberName] = mailboxId.split("::");
-  if (!departmentName || !memberName) return null;
-  return getDepartmentMemberByName(departmentName, memberName);
-};
-var getDepartmentMemberById = (memberId) => {
-  for (const department of listDepartments()) {
-    const targetMember = department.departmentMembers.find((member) => member.id === memberId);
-    if (targetMember) return targetMember;
-  }
-  return null;
-};
-var deleteDepartmentMemberById = (departmentName, memberId) => {
-  const department = getDepartment(departmentName);
-  if (!department) throw new Error(`[deleteDepartmentMemberById] \u627E\u4E0D\u5230\u5BF9\u5E94\u7684 department: ${departmentName}`);
-  const memberIdx = department.departmentMembers.findIndex((member) => member.id === memberId);
-  if (memberIdx === -1) {
-    throw new Error(`[deleteDepartmentMemberById] \u627E\u4E0D\u5230\u5BF9\u5E94 id \u7684 department member: ${memberId}`);
-  }
-  const workspaceId = department.departmentMembers[memberIdx].workspaceId;
-  if (department.headMemberId === memberId) {
-    delete department.headMemberId;
-  }
-  department.departmentMembers = department.departmentMembers.filter((_, index) => index !== memberIdx);
-  (0, import_fs13.writeFileSync)(getDepartmentJsonPath(departmentName), JSON.stringify(department, null, "	"), "utf-8");
-  deleteWorkspace(workspaceId);
+            m.origin_platform as originPlatform,
+            m.thread_id as threadId,
+            m.parent_message_id as parentMessageId
+         FROM mailbox_events e
+         LEFT JOIN mailbox m ON m.id = e.message_id
+         WHERE e.mailbox_id = ? OR e.actor_mailbox_id = ? OR e.counterpart_mailbox_id = ?
+         ORDER BY e.created_at DESC
+         LIMIT ?`
+  );
+  const rows = stmt.all(params.mailboxId, params.mailboxId, params.mailboxId, limit);
+  return rows.map(mapMailboxEventRow);
 };
 
 // src/department/mailbox/ceoFollowup.ts
-var import_node_crypto6 = require("node:crypto");
+var import_node_crypto7 = require("node:crypto");
 var rowToFollowup = (row) => ({
   id: row.id,
   sourceMessageId: row.sourceMessageId,
@@ -42778,7 +43176,7 @@ var enqueueCeoFollowupFromMailbox = (message) => {
   if (!message.originUserId || !message.originPlatform) return null;
   const db3 = createSqliteDB();
   const now = Date.now();
-  const id = `cfu_${(0, import_node_crypto6.randomUUID)().slice(0, 12)}`;
+  const id = `cfu_${(0, import_node_crypto7.randomUUID)().slice(0, 12)}`;
   db3.prepare(`
         INSERT INTO ceo_followups (
             id,
@@ -43108,7 +43506,7 @@ var recordMailboxReceivedAgentEvent = (msg) => {
 };
 var sendMessage2 = (fromMailboxId, toMailboxId, content, options) => {
   const db3 = createSqliteDB();
-  const id = (0, import_node_crypto7.randomUUID)().slice(0, 8);
+  const id = (0, import_node_crypto8.randomUUID)().slice(0, 8);
   const threadId = options?.threadId || id;
   const workItemContext = resolveWorkItemContext(fromMailboxId, toMailboxId, id, options);
   const stmt = db3.prepare(`insert into mailbox (
@@ -43251,7 +43649,7 @@ var departmentCreate = {
       return `[departmentCreate] \u4E0D\u5B58\u5728 id=${sourceGoalId} \u7684\u76EE\u6807`;
     }
     let departmentDefinition = {
-      id: (0, import_node_crypto8.randomUUID)().slice(0, 8),
+      id: (0, import_node_crypto9.randomUUID)().slice(0, 8),
       name,
       charter,
       sourceGoalId,
@@ -43518,7 +43916,7 @@ var departmentList = {
 };
 
 // src/tools/tools/department/DepartmentMemberCreate.ts
-var import_node_crypto9 = require("node:crypto");
+var import_node_crypto10 = require("node:crypto");
 var DESCRIPTION24 = `
 \u521B\u5EFA\u90E8\u95E8\u6210\u5458\u3002
 
@@ -43584,7 +43982,7 @@ var departmentMemberCreate = {
       }
     }
     let departmentMember = {
-      id: (0, import_node_crypto9.randomUUID)().slice(0, 8),
+      id: (0, import_node_crypto10.randomUUID)().slice(0, 8),
       name,
       departmentId: department.id,
       mailBoxId: getMailBoxId(department.name, name),
@@ -43714,437 +44112,63 @@ var checkDepartmentReplies = {
     type: `object`,
     properties: {
       from_member: {
-        type: `string`,
-        description: `\u53EF\u9009\uFF1A\u53EA\u67E5\u770B\u6307\u5B9A mailboxId \u7684\u56DE\u4FE1\uFF0C\u4E0D\u586B\u5219\u67E5\u770B\u6240\u6709\u56DE\u4FE1`
-      }
-    },
-    required: []
-  },
-  async execute(input) {
-    const db3 = createSqliteDB();
-    const fromMember = input.from_member;
-    let msgs;
-    if (fromMember) {
-      const stmt = db3.prepare(
-        `SELECT id, to_mailbox_id as toMailboxId, from_mailbox_id as fromMailboxId, content, send_time as sendTime, status
-                 FROM mailbox
-                 WHERE to_mailbox_id = 'manager' AND from_mailbox_id = ? AND status in ('pending', 'processing')
-                 ORDER BY send_time ASC`
-      );
-      msgs = stmt.all(fromMember);
-    } else {
-      const stmt = db3.prepare(
-        `SELECT id, to_mailbox_id as toMailboxId, from_mailbox_id as fromMailboxId, content, send_time as sendTime, status
-                 FROM mailbox
-                 WHERE to_mailbox_id = 'manager' AND status in ('pending', 'processing')
-                 ORDER BY send_time ASC`
-      );
-      msgs = stmt.all();
-    }
-    if (msgs.length === 0) {
-      return [
-        `[checkDepartmentReplies] \u56E2\u961F\u8FD9\u4F1A\u513F\u8FD8\u6CA1\u56DE\u4FE1\uFF0C\u591A\u534A\u662F\u8D1F\u8D23\u4EBA\u4ECD\u5728\u5904\u7406\uFF0C\u8FC7\u4F1A\u513F\u518D\u6765\u770B\u3002`,
-        ``,
-        `\u51E0\u53E5\u63D0\u9192\uFF1A`,
-        `- \u8FD9\u4E0D\u4EE3\u8868\u8981\u4F60\u4EB2\u81EA\u4E0B\u573A read/bash/\u6D4B\u8BD5/\u6539\u4EE3\u7801\u2014\u2014\u56E2\u961F\u6CA1\u56DE\uFF0C\u4E0D\u662F\u4F60\u8BE5\u63A5\u624B\u7684\u4FE1\u53F7\u3002`,
-        `- \u8001\u677F\u8981\u662F\u6B63\u7B49\u7740\uFF0C\u5148\u7528 send_message \u5982\u5B9E\u8DDF\u4ED6\u8BF4\u4E00\u53E5\u201C\u8D1F\u8D23\u4EBA\u8FD8\u5728\u5904\u7406\uFF0C\u6211\u62FF\u5230\u7ED3\u679C\u5C31\u540C\u6B65\u201D\u3002`,
-        `- \u5982\u679C\u4EFB\u52A1\u521A\u6D3E\u51FA\u53BB\uFF0C\u4E0D\u8981\u5728\u540C\u4E00\u8F6E\u9A6C\u4E0A\u50AC\u529E\uFF1B\u7ED9\u8D1F\u8D23\u4EBA\u5408\u7406\u5904\u7406\u65F6\u95F4\u3002`,
-        `- \u5DF2\u7ECF\u7B49\u4E86\u4E00\u9635\u3001\u8001\u677F\u53C8\u8FFD\u95EE\uFF0C\u6216\u53D1\u73B0\u660E\u786E\u98CE\u9669\u65F6\uFF0C\u518D\u7528 mailbox_followup \u6216 department_communicate \u53BB\u95EE\u5BF9\u5E94 Department Head \u771F\u5B9E\u8FDB\u5C55\u3001\u5361\u5728\u54EA\u3001\u5927\u6982\u4EC0\u4E48\u65F6\u5019\u597D\u3002`,
-        `- \u522B\u5728\u8FD9\u4E00\u8F6E\u91CC\u53CD\u590D\u7A7A\u67E5 check_department_replies\uFF1B\u7B49\u56E2\u961F\u56DE\u4FE1\u3001\u8001\u677F\u8FFD\u95EE\u6216\u50AC\u529E\u6709\u4E86\u56DE\u97F3\uFF0C\u518D\u6765\u770B\u3002`
-      ].join("\n");
-    }
-    const updateStmt = db3.prepare(`UPDATE mailbox SET status = 'read' WHERE id = ?`);
-    for (const msg of msgs) {
-      updateStmt.run(msg.id);
-    }
-    const replies = msgs.map((msg, i) => {
-      const time = new Date(msg.sendTime).toLocaleString("zh-CN", { timeZone: "Asia/Shanghai" });
-      return `--- \u56DE\u4FE1 ${i + 1} ---
-id: ${msg.id}
-\u6765\u81EA: ${msg.fromMailboxId}
-\u65F6\u95F4: ${time}
-\u72B6\u6001: ${msg.status}
-\u5185\u5BB9:
-${msg.content}`;
-    }).join("\n\n");
-    return `[checkDepartmentReplies] \u6536\u5230 ${msgs.length} \u6761\u90E8\u95E8\u56DE\u4FE1\uFF1A
-
-${replies}`;
-  }
-};
-
-// src/department/learning.ts
-var import_node_fs4 = require("node:fs");
-var import_node_path13 = __toESM(require("node:path"));
-var import_node_crypto10 = require("node:crypto");
-
-// src/skill/SkillValidator.ts
-var import_node_fs3 = require("node:fs");
-var import_node_path12 = __toESM(require("node:path"));
-var SKILL_NAME_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/;
-var REQUIRED_SECTIONS = [
-  /(^|\n)##\s+(when to use|何时使用|trigger|triggers)\b/i,
-  /(^|\n)##\s+(steps|workflow|procedure|执行步骤|工作流)\b/i
-];
-var stripYamlQuotes = (value) => {
-  const trimmed = value.trim();
-  if (trimmed.startsWith(`"`) && trimmed.endsWith(`"`) || trimmed.startsWith(`'`) && trimmed.endsWith(`'`)) {
-    return trimmed.slice(1, -1).trim();
-  }
-  return trimmed;
-};
-var addError = (errors, code, message) => {
-  errors.push({ code, message });
-};
-var addWarning = (warnings, code, message) => {
-  warnings.push({ code, message });
-};
-var isValidSkillName = (name) => {
-  return SKILL_NAME_PATTERN.test(name) && !name.includes(`--`);
-};
-var assertSafeSkillTarget = (rootDir, skillName) => {
-  if (!isValidSkillName(skillName)) {
-    throw new Error(`Invalid skill name "${skillName}". Use lowercase letters, digits, and single hyphens only.`);
-  }
-  const root = import_node_path12.default.resolve(rootDir);
-  const target = import_node_path12.default.resolve(root, skillName);
-  if (target !== import_node_path12.default.join(root, skillName) || !target.startsWith(root + import_node_path12.default.sep)) {
-    throw new Error(`Invalid skill install target for "${skillName}".`);
-  }
-  return target;
-};
-var parseSkillDocument = (skillMd) => {
-  const fmMatch = skillMd.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
-  if (!fmMatch) return null;
-  const frontmatter = {};
-  for (const rawLine of fmMatch[1].split(/\r?\n/)) {
-    const line = rawLine.trim();
-    if (!line || line.startsWith(`#`)) continue;
-    const match2 = line.match(/^([A-Za-z0-9_-]+):\s*(.*)$/);
-    if (!match2) {
-      frontmatter[`__invalid__${Object.keys(frontmatter).length}`] = line;
-      continue;
-    }
-    frontmatter[match2[1]] = stripYamlQuotes(match2[2]);
-  }
-  return {
-    name: frontmatter.name ?? ``,
-    description: frontmatter.description ?? ``,
-    body: skillMd.slice(fmMatch[0].length).trim(),
-    frontmatter
-  };
-};
-var validateSkillDocument = (input) => {
-  const errors = [];
-  const warnings = [];
-  const skillMd = input.skillMd;
-  if (!skillMd || !skillMd.trim()) {
-    addError(errors, `empty_skill_md`, `SKILL.md content is required.`);
-    return { ok: false, errors, warnings };
-  }
-  const parsed = parseSkillDocument(skillMd);
-  if (!parsed) {
-    addError(errors, `missing_frontmatter`, `SKILL.md must start with YAML frontmatter delimited by "---".`);
-    return { ok: false, errors, warnings };
-  }
-  const invalidFrontmatterLines = Object.keys(parsed.frontmatter).filter((key) => key.startsWith(`__invalid__`));
-  if (invalidFrontmatterLines.length > 0) {
-    addError(errors, `invalid_frontmatter`, `Frontmatter must contain simple "key: value" lines.`);
-  }
-  if (!parsed.name) {
-    addError(errors, `missing_name`, `Frontmatter field "name" is required.`);
-  } else if (!isValidSkillName(parsed.name)) {
-    addError(errors, `invalid_name`, `Skill name "${parsed.name}" must be kebab-case, under 64 characters, and path-safe.`);
-  }
-  if (!parsed.description) {
-    addError(errors, `missing_description`, `Frontmatter field "description" is required.`);
-  } else if (parsed.description.length > 500) {
-    addWarning(warnings, `long_description`, `Skill description is long; keep trigger metadata concise.`);
-  }
-  if (input.skillName && parsed.name && input.skillName !== parsed.name) {
-    addError(errors, `name_mismatch`, `Input skillName "${input.skillName}" must match frontmatter name "${parsed.name}".`);
-  }
-  if (input.description && parsed.description && input.description !== parsed.description) {
-    addError(errors, `description_mismatch`, `Input description must match frontmatter description.`);
-  }
-  if (!parsed.body) {
-    addError(errors, `empty_body`, `SKILL.md body is required.`);
-  } else {
-    if (!/(^|\n)#\s+\S/.test(parsed.body)) {
-      addWarning(warnings, `missing_title`, `Skill body should start with a Markdown H1 title.`);
-    }
-    for (const sectionPattern of REQUIRED_SECTIONS) {
-      if (!sectionPattern.test(parsed.body)) {
-        addWarning(warnings, `missing_recommended_section`, `Skill body should include when-to-use and execution workflow sections.`);
-        break;
-      }
-    }
-  }
-  if (input.baseDir) {
-    const normalizedBase = import_node_path12.default.resolve(input.baseDir);
-    for (const match2 of parsed.body.matchAll(/\]\(([^)]+)\)/g)) {
-      const href = match2[1].trim();
-      if (!href || /^[a-z][a-z0-9+.-]*:/i.test(href) || href.startsWith(`#`)) continue;
-      const target = import_node_path12.default.resolve(normalizedBase, href.split(`#`)[0]);
-      if (!target.startsWith(normalizedBase + import_node_path12.default.sep) && target !== normalizedBase) {
-        addError(errors, `unsafe_reference`, `Relative link "${href}" escapes the skill directory.`);
-      } else if (!(0, import_node_fs3.existsSync)(target)) {
-        addError(errors, `missing_reference`, `Relative link "${href}" does not exist in the skill directory.`);
-      }
-    }
-  }
-  return {
-    ok: errors.length === 0,
-    skill: parsed,
-    errors,
-    warnings
-  };
-};
-var mergeIssues = (target, source) => {
-  target.errors.push(...source.errors);
-  target.warnings.push(...source.warnings);
-};
-var validateScriptsDirectory = (skillDir, warnings) => {
-  const scriptsDir = import_node_path12.default.join(skillDir, `scripts`);
-  if (!(0, import_node_fs3.existsSync)(scriptsDir)) return;
-  const entries = (0, import_node_fs3.readdirSync)(scriptsDir, { withFileTypes: true }).filter((entry) => entry.isFile());
-  if (entries.length === 0) {
-    addWarning(warnings, `empty_scripts_dir`, `scripts/ exists but contains no files.`);
-  }
-};
-var validateSkillDirectory = (skillDir, options = {}) => {
-  const errors = [];
-  const warnings = [];
-  const normalizedSkillDir = import_node_path12.default.resolve(skillDir);
-  const skillMdPath = import_node_path12.default.join(normalizedSkillDir, `SKILL.md`);
-  if (!(0, import_node_fs3.existsSync)(normalizedSkillDir) || !(0, import_node_fs3.statSync)(normalizedSkillDir).isDirectory()) {
-    addError(errors, `missing_skill_dir`, `Skill directory does not exist: ${normalizedSkillDir}`);
-    return { ok: false, errors, warnings, skillDir: normalizedSkillDir, skillMdPath };
-  }
-  if (!(0, import_node_fs3.existsSync)(skillMdPath) || !(0, import_node_fs3.statSync)(skillMdPath).isFile()) {
-    addError(errors, `missing_skill_md`, `Skill directory must contain SKILL.md.`);
-    return { ok: false, errors, warnings, skillDir: normalizedSkillDir, skillMdPath };
-  }
-  const raw2 = (0, import_node_fs3.readFileSync)(skillMdPath, `utf-8`);
-  const documentResult = validateSkillDocument({
-    skillName: options.expectedName ?? import_node_path12.default.basename(normalizedSkillDir),
-    skillMd: raw2,
-    baseDir: normalizedSkillDir
-  });
-  mergeIssues({ errors, warnings }, documentResult);
-  validateScriptsDirectory(normalizedSkillDir, warnings);
-  return {
-    ok: errors.length === 0,
-    skill: documentResult.skill,
-    errors,
-    warnings,
-    skillDir: normalizedSkillDir,
-    skillMdPath
-  };
-};
-var smokeTestSkillDirectory = (skillDir, options = {}) => {
-  const directoryResult = validateSkillDirectory(skillDir, options);
-  const errors = [...directoryResult.errors];
-  const warnings = [...directoryResult.warnings];
-  let detail;
-  if (directoryResult.ok && directoryResult.skill) {
-    detail = `Base directory for this skill: ${directoryResult.skillDir}
-
-${directoryResult.skill.body}`;
-    if (!detail.includes(directoryResult.skillDir)) {
-      addError(errors, `smoke_missing_base_dir`, `Skill detail does not include its base directory.`);
+        type: `string`,
+        description: `\u53EF\u9009\uFF1A\u53EA\u67E5\u770B\u6307\u5B9A mailboxId \u7684\u56DE\u4FE1\uFF0C\u4E0D\u586B\u5219\u67E5\u770B\u6240\u6709\u56DE\u4FE1`
+      }
+    },
+    required: []
+  },
+  async execute(input) {
+    const db3 = createSqliteDB();
+    const fromMember = input.from_member;
+    let msgs;
+    if (fromMember) {
+      const stmt = db3.prepare(
+        `SELECT id, to_mailbox_id as toMailboxId, from_mailbox_id as fromMailboxId, content, send_time as sendTime, status
+                 FROM mailbox
+                 WHERE to_mailbox_id = 'manager' AND from_mailbox_id = ? AND status in ('pending', 'processing')
+                 ORDER BY send_time ASC`
+      );
+      msgs = stmt.all(fromMember);
+    } else {
+      const stmt = db3.prepare(
+        `SELECT id, to_mailbox_id as toMailboxId, from_mailbox_id as fromMailboxId, content, send_time as sendTime, status
+                 FROM mailbox
+                 WHERE to_mailbox_id = 'manager' AND status in ('pending', 'processing')
+                 ORDER BY send_time ASC`
+      );
+      msgs = stmt.all();
     }
-    if (!detail.includes(directoryResult.skill.body)) {
-      addError(errors, `smoke_missing_body`, `Skill detail does not include the SKILL.md body.`);
+    if (msgs.length === 0) {
+      return [
+        `[checkDepartmentReplies] \u56E2\u961F\u8FD9\u4F1A\u513F\u8FD8\u6CA1\u56DE\u4FE1\uFF0C\u591A\u534A\u662F\u8D1F\u8D23\u4EBA\u4ECD\u5728\u5904\u7406\uFF0C\u8FC7\u4F1A\u513F\u518D\u6765\u770B\u3002`,
+        ``,
+        `\u51E0\u53E5\u63D0\u9192\uFF1A`,
+        `- \u8FD9\u4E0D\u4EE3\u8868\u8981\u4F60\u4EB2\u81EA\u4E0B\u573A read/bash/\u6D4B\u8BD5/\u6539\u4EE3\u7801\u2014\u2014\u56E2\u961F\u6CA1\u56DE\uFF0C\u4E0D\u662F\u4F60\u8BE5\u63A5\u624B\u7684\u4FE1\u53F7\u3002`,
+        `- \u8001\u677F\u8981\u662F\u6B63\u7B49\u7740\uFF0C\u5148\u7528 send_message \u5982\u5B9E\u8DDF\u4ED6\u8BF4\u4E00\u53E5\u201C\u8D1F\u8D23\u4EBA\u8FD8\u5728\u5904\u7406\uFF0C\u6211\u62FF\u5230\u7ED3\u679C\u5C31\u540C\u6B65\u201D\u3002`,
+        `- \u5982\u679C\u4EFB\u52A1\u521A\u6D3E\u51FA\u53BB\uFF0C\u4E0D\u8981\u5728\u540C\u4E00\u8F6E\u9A6C\u4E0A\u50AC\u529E\uFF1B\u7ED9\u8D1F\u8D23\u4EBA\u5408\u7406\u5904\u7406\u65F6\u95F4\u3002`,
+        `- \u5DF2\u7ECF\u7B49\u4E86\u4E00\u9635\u3001\u8001\u677F\u53C8\u8FFD\u95EE\uFF0C\u6216\u53D1\u73B0\u660E\u786E\u98CE\u9669\u65F6\uFF0C\u518D\u7528 mailbox_followup \u6216 department_communicate \u53BB\u95EE\u5BF9\u5E94 Department Head \u771F\u5B9E\u8FDB\u5C55\u3001\u5361\u5728\u54EA\u3001\u5927\u6982\u4EC0\u4E48\u65F6\u5019\u597D\u3002`,
+        `- \u522B\u5728\u8FD9\u4E00\u8F6E\u91CC\u53CD\u590D\u7A7A\u67E5 check_department_replies\uFF1B\u7B49\u56E2\u961F\u56DE\u4FE1\u3001\u8001\u677F\u8FFD\u95EE\u6216\u50AC\u529E\u6709\u4E86\u56DE\u97F3\uFF0C\u518D\u6765\u770B\u3002`
+      ].join("\n");
     }
-    if (detail.length < 80) {
-      addWarning(warnings, `smoke_short_detail`, `Skill detail is unusually short.`);
+    const updateStmt = db3.prepare(`UPDATE mailbox SET status = 'read' WHERE id = ?`);
+    for (const msg of msgs) {
+      updateStmt.run(msg.id);
     }
-  }
-  return {
-    ...directoryResult,
-    ok: errors.length === 0,
-    errors,
-    warnings,
-    detail
-  };
-};
-var formatSkillValidationIssues = (result) => {
-  const lines = [
-    ...result.errors.map((issue) => `- [${issue.code}] ${issue.message}`),
-    ...result.warnings.map((issue) => `- [warning:${issue.code}] ${issue.message}`)
-  ];
-  return lines.join(`
-`);
-};
+    const replies = msgs.map((msg, i) => {
+      const time = new Date(msg.sendTime).toLocaleString("zh-CN", { timeZone: "Asia/Shanghai" });
+      return `--- \u56DE\u4FE1 ${i + 1} ---
+id: ${msg.id}
+\u6765\u81EA: ${msg.fromMailboxId}
+\u65F6\u95F4: ${time}
+\u72B6\u6001: ${msg.status}
+\u5185\u5BB9:
+${msg.content}`;
+    }).join("\n\n");
+    return `[checkDepartmentReplies] \u6536\u5230 ${msgs.length} \u6761\u90E8\u95E8\u56DE\u4FE1\uFF1A
 
-// src/department/learning.ts
-var ensureDir = (dir) => (0, import_node_fs4.mkdirSync)(dir, { recursive: true });
-var readJsonArray = (filePath) => {
-  if (!(0, import_node_fs4.existsSync)(filePath)) return [];
-  return JSON.parse((0, import_node_fs4.readFileSync)(filePath, "utf-8"));
-};
-var writeJsonArray = (filePath, records) => {
-  ensureDir(import_node_path13.default.dirname(filePath));
-  (0, import_node_fs4.writeFileSync)(filePath, JSON.stringify(records, null, "	"), "utf-8");
-};
-var departmentMemoryPath = (departmentName) => {
-  return import_node_path13.default.join(getDepartmentWorkSpaceDir(departmentName), "department-memory.json");
-};
-var departmentSkillPath = (departmentName) => {
-  return import_node_path13.default.join(getDepartmentWorkSpaceDir(departmentName), "department-skills.json");
-};
-var departmentSkillDir = (departmentName, skillName) => {
-  return assertSafeSkillTarget(import_node_path13.default.join(getDepartmentWorkSpaceDir(departmentName), "skills"), skillName);
-};
-var proposalsPath = () => {
-  return import_node_path13.default.join(getDepartmentBaseDir(), "department-proposals.json");
-};
-var getDepartmentNameForHead = (request) => {
-  const mailboxId = request?.departmentAgentId;
-  if (!mailboxId) return null;
-  const member = getDepartmentMemberByMailboxId(mailboxId);
-  if (!member || member.role !== "department_head") return null;
-  const [departmentName] = mailboxId.split("::");
-  return departmentName || null;
-};
-var listDepartmentMemories = (departmentName) => {
-  return readJsonArray(departmentMemoryPath(departmentName)).sort((a, b) => b.updatedAt - a.updatedAt);
-};
-var createDepartmentMemory = (departmentName, input) => {
-  const now = Date.now();
-  const memory = {
-    id: (0, import_node_crypto10.randomUUID)().slice(0, 8),
-    departmentName,
-    title: input.title,
-    content: input.content,
-    sourceMailboxId: input.sourceMailboxId,
-    createdAt: now,
-    updatedAt: now
-  };
-  const records = listDepartmentMemories(departmentName);
-  records.push(memory);
-  writeJsonArray(departmentMemoryPath(departmentName), records);
-  return memory;
-};
-var updateDepartmentMemory = (departmentName, id, patch) => {
-  const records = listDepartmentMemories(departmentName);
-  const idx = records.findIndex((record) => record.id === id);
-  if (idx < 0) return null;
-  records[idx] = {
-    ...records[idx],
-    ...patch.title !== void 0 ? { title: patch.title } : {},
-    ...patch.content !== void 0 ? { content: patch.content } : {},
-    updatedAt: Date.now()
-  };
-  writeJsonArray(departmentMemoryPath(departmentName), records);
-  return records[idx];
-};
-var deleteDepartmentMemory = (departmentName, id) => {
-  const records = listDepartmentMemories(departmentName);
-  const target = records.find((record) => record.id === id) ?? null;
-  writeJsonArray(departmentMemoryPath(departmentName), records.filter((record) => record.id !== id));
-  return target;
-};
-var listDepartmentSkills = (departmentName) => {
-  return readJsonArray(departmentSkillPath(departmentName)).sort((a, b) => b.updatedAt - a.updatedAt);
-};
-var proposeDepartmentSkill = (departmentName, input) => {
-  const validation = validateSkillDocument({
-    skillName: input.skillName,
-    description: input.description,
-    skillMd: input.skillMd
-  });
-  if (!validation.ok) {
-    throw new Error(`[departmentSkill] Skill \u8349\u7A3F\u6821\u9A8C\u5931\u8D25\uFF1A
-${formatSkillValidationIssues(validation)}`);
-  }
-  const records = listDepartmentSkills(departmentName);
-  if (records.some((record) => record.skillName === input.skillName && record.status !== "dropped")) {
-    return null;
-  }
-  const now = Date.now();
-  const skill = {
-    id: (0, import_node_crypto10.randomUUID)().slice(0, 8),
-    departmentName,
-    skillName: input.skillName,
-    description: input.description,
-    skillMd: input.skillMd,
-    status: "pending",
-    createdByMailboxId: input.createdByMailboxId,
-    createdAt: now,
-    updatedAt: now
-  };
-  records.push(skill);
-  writeJsonArray(departmentSkillPath(departmentName), records);
-  return skill;
-};
-var keepDepartmentSkill = (departmentName, id) => {
-  const records = listDepartmentSkills(departmentName);
-  const idx = records.findIndex((record) => record.id === id);
-  if (idx < 0) return null;
-  records[idx] = { ...records[idx], status: "active", updatedAt: Date.now() };
-  const skillDir = departmentSkillDir(departmentName, records[idx].skillName);
-  const validation = validateSkillDocument({
-    skillName: records[idx].skillName,
-    description: records[idx].description,
-    skillMd: records[idx].skillMd,
-    baseDir: skillDir
-  });
-  if (!validation.ok) {
-    throw new Error(`[departmentSkill] Skill \u8349\u7A3F\u6821\u9A8C\u5931\u8D25\uFF0C\u62D2\u7EDD\u4FDD\u7559\uFF1A
-${formatSkillValidationIssues(validation)}`);
-  }
-  ensureDir(skillDir);
-  (0, import_node_fs4.writeFileSync)(import_node_path13.default.join(skillDir, "SKILL.md"), records[idx].skillMd, "utf-8");
-  const smokeTest = smokeTestSkillDirectory(skillDir, { expectedName: records[idx].skillName });
-  if (!smokeTest.ok) {
-    throw new Error(`[departmentSkill] Skill smoke test \u5931\u8D25\uFF1A
-${formatSkillValidationIssues(smokeTest)}`);
+${replies}`;
   }
-  writeJsonArray(departmentSkillPath(departmentName), records);
-  return records[idx];
-};
-var dropDepartmentSkill = (departmentName, id) => {
-  const records = listDepartmentSkills(departmentName);
-  const idx = records.findIndex((record) => record.id === id);
-  if (idx < 0) return null;
-  records[idx] = { ...records[idx], status: "dropped", updatedAt: Date.now() };
-  writeJsonArray(departmentSkillPath(departmentName), records);
-  return records[idx];
-};
-var createDepartmentProposal = (input) => {
-  const records = readJsonArray(proposalsPath());
-  const proposal = {
-    ...input,
-    id: (0, import_node_crypto10.randomUUID)().slice(0, 8),
-    status: "pending",
-    createdAt: Date.now()
-  };
-  records.push(proposal);
-  writeJsonArray(proposalsPath(), records);
-  return proposal;
-};
-var buildDepartmentLearningContext = (departmentName) => {
-  if (!departmentName) return "";
-  const memories = listDepartmentMemories(departmentName);
-  const activeSkills = listDepartmentSkills(departmentName).filter((skill) => skill.status === "active");
-  if (memories.length === 0 && activeSkills.length === 0) return "";
-  const memoryLines = memories.map(
-    (memory) => `  - [id=${memory.id}] ${memory.title}
-    ${memory.content.replace(/\n/g, "\n    ")}`
-  ).join("\n");
-  const skillLines = activeSkills.map(
-    (skill) => `  - ${skill.skillName}: ${skill.description}`
-  ).join("\n");
-  return [
-    `<department-learning-context department="${departmentName}">`,
-    memories.length > 0 ? `Department memories:
-${memoryLines}` : "",
-    activeSkills.length > 0 ? `Department skills:
-${skillLines}` : "",
-    `</department-learning-context>`
-  ].filter(Boolean).join("\n");
 };
 
 // src/tools/tools/department/DepartmentLearning.ts
@@ -44508,6 +44532,7 @@ var MAX_SESSION_OUTPUT_LENGTH = 5e4;
 var DEFAULT_TIMEOUT_MS = 3e4;
 var DEFAULT_SESSION_TTL_MS = 30 * 60 * 1e3;
 var SHELL_CANDIDATES2 = ["/bin/sh", "/usr/bin/sh", "/bin/bash"];
+var DEFAULT_PROTECTED_PORTS = ["3100"];
 var sessions = /* @__PURE__ */ new Map();
 function findExecutableShell2() {
   for (const shell of SHELL_CANDIDATES2) {
@@ -44538,6 +44563,64 @@ function validateCwd(cwd) {
     return `[bash] \u9519\u8BEF: cwd \u4E0D\u53EF\u7528: ${cwd} (${err.message})`;
   }
 }
+function getProtectedPorts() {
+  const configured = process.env.DUCLAW_BASH_PROTECTED_PORTS ?? [process.env.KANBAN_PORT, process.env.PORT, ...DEFAULT_PROTECTED_PORTS].filter(Boolean).join(",");
+  return [...new Set(
+    configured.split(",").map((port) => port.trim()).filter((port) => /^\d{1,5}$/.test(port))
+  )];
+}
+function validateProtectedRuntimeCommand(command) {
+  const ports = getProtectedPorts();
+  if (ports.length === 0) return null;
+  for (const port of ports) {
+    const portRef = new RegExp(`(^|[^\\d])(:${port}|-${port}\\b|${port}/tcp\\b)`);
+    const targetsProtectedPort = portRef.test(command);
+    if (!targetsProtectedPort) continue;
+    const killsProcess = /\b(kill|pkill|killall|fuser)\b/.test(command) || /\blsof\b[\s\S]*\bxargs\b[\s\S]*\bkill\b/.test(command) || /\bss\b[\s\S]*\bxargs\b[\s\S]*\bkill\b/.test(command);
+    if (killsProcess) {
+      return [
+        `[bash] \u62D2\u7EDD\u6267\u884C: \u547D\u4EE4\u8BD5\u56FE\u6E05\u7406 Duclaw runtime \u4FDD\u7559\u7AEF\u53E3 ${port}\u3002`,
+        `\u8BE5\u7AEF\u53E3\u627F\u8F7D\u5F53\u524D\u667A\u80FD\u4F53\u7684 HTTP/gateway\uFF0C\u6740\u6389\u5B83\u4F1A\u5BFC\u81F4 iOS \u663E\u793A\u5DF2\u5173\u673A\u6216 502\u3002`,
+        `\u8BF7\u6362\u7528\u9879\u76EE\u81EA\u5DF1\u7684\u5F00\u53D1\u7AEF\u53E3\uFF08\u4F8B\u5982 3001/5173\uFF09\uFF0C\u4E0D\u8981\u5BF9 ${port} \u6267\u884C kill/lsof/fuser/pkill\u3002`
+      ].join("\n");
+    }
+  }
+  if (/\b(pkill|killall)\b[\s\S]*\b(node|tsx|pnpm|npm)\b/.test(command)) {
+    return [
+      `[bash] \u62D2\u7EDD\u6267\u884C: \u547D\u4EE4\u4F1A\u6309\u8FDB\u7A0B\u540D\u6279\u91CF\u7EC8\u6B62 Node/JS \u8FDB\u7A0B\u3002`,
+      `\u8FD9\u53EF\u80FD\u8BEF\u6740 Duclaw runtime\u3002\u8BF7\u53EA\u7EC8\u6B62\u660E\u786E\u5C5E\u4E8E\u5F53\u524D\u9879\u76EE\u7684 PID \u6216 session_id\u3002`
+    ].join("\n");
+  }
+  return null;
+}
+function listProtectedRuntimeProcesses() {
+  try {
+    const output = (0, import_node_child_process.execFileSync)("ps", ["-eo", "pid=,ppid=,args="], { encoding: "utf8" });
+    const currentPid = process.pid;
+    return output.split("\n").map((line) => line.trim().match(/^(\d+)\s+(\d+)\s+(.*)$/)).filter((match2) => Boolean(match2)).map((match2) => ({
+      pid: Number(match2[1]),
+      command: match2[3] ?? ""
+    })).filter(
+      (processInfo) => Number.isFinite(processInfo.pid) && processInfo.pid !== currentPid && (processInfo.command.includes("duclaw-cli start") || processInfo.command.includes("duclaw-worker"))
+    ).map(({ pid, command }) => ({ pid, command }));
+  } catch {
+    return [];
+  }
+}
+function validateProtectedRuntimePidCommand(command) {
+  if (!/\bkill\b/.test(command)) return null;
+  const protectedProcesses = listProtectedRuntimeProcesses();
+  for (const protectedProcess of protectedProcesses) {
+    const pidRef = new RegExp(`(^|[^\\d])${protectedProcess.pid}([^\\d]|$)`);
+    if (!pidRef.test(command)) continue;
+    return [
+      `[bash] \u62D2\u7EDD\u6267\u884C: \u547D\u4EE4\u8BD5\u56FE\u7EC8\u6B62 Duclaw runtime \u8FDB\u7A0B PID ${protectedProcess.pid}\u3002`,
+      `\u5339\u914D\u8FDB\u7A0B: ${protectedProcess.command}`,
+      `\u8BF7\u53EA\u7EC8\u6B62\u660E\u786E\u5C5E\u4E8E\u5F53\u524D\u9879\u76EE\u7684\u5F00\u53D1\u670D\u52A1 PID\uFF0C\u4E0D\u8981\u6740 duclaw-cli start \u6216 duclaw-worker\u3002`
+    ].join("\n");
+  }
+  return null;
+}
 function truncateOutput(output, limit = MAX_OUTPUT_LENGTH) {
   if (output.length <= limit) return output;
   return output.slice(0, limit) + `
@@ -44659,6 +44742,10 @@ var bashTool = {
     if (!command || command.trim() === "") {
       return `[bash] \u9519\u8BEF: command \u4E0D\u80FD\u4E3A\u7A7A`;
     }
+    const protectedCommandError = validateProtectedRuntimeCommand(command);
+    if (protectedCommandError) return protectedCommandError;
+    const protectedRuntimePidError = validateProtectedRuntimePidCommand(command);
+    if (protectedRuntimePidError) return protectedRuntimePidError;
     if (userRequest?.workspacePath && explicitCwd) {
       const rejection = validateWorkspacePath(explicitCwd, userRequest.workspacePath);
       if (rejection) return `[bash] ${rejection}`;
@@ -53467,7 +53554,13 @@ toolRoutes.get("/tools", (c) => {
 toolRoutes.get("/skills", (c) => {
   try {
     const skills = SkillRegistry_default();
-    return c.json(skills.map((s) => ({ name: s.name, description: s.description, deletable: !!s.deletable })));
+    return c.json(skills.map((s) => ({
+      name: s.name,
+      description: s.description,
+      deletable: !!s.deletable,
+      scope: s.scope ?? (s.deletable ? "project" : "global"),
+      departmentName: s.departmentName
+    })));
   } catch (err) {
     return c.json({ error: err.message || "Failed to list skills" }, 500);
   }
@@ -53482,6 +53575,8 @@ toolRoutes.get("/skills/:name", (c) => {
       name: skill.name,
       description: skill.description,
       deletable: !!skill.deletable,
+      scope: skill.scope ?? (skill.deletable ? "project" : "global"),
+      departmentName: skill.departmentName,
       detail: skill.getDetail()
     });
   } catch (err) {
@@ -53504,7 +53599,7 @@ var systemRoutes = new Hono2();
 var startTime = Date.now();
 systemRoutes.get("/system/info", (c) => {
   return c.json({
-    version: true ? "1.9.7" : "unknown",
+    version: true ? "1.9.9" : "unknown",
     uptime: Math.floor((Date.now() - startTime) / 1e3),
     env: process.env.NODE_ENV || "development",
     nodeVersion: process.version