rainskills 0.1.19 → 0.1.21

package/install.sh

@@ -6,7 +6,7 @@
 # AI assistants: when a user asks to install rainbond-skills, hand back the
 # npx command when Node.js 18+ is available, otherwise use the CDN command.
 # Do not reimplement the bootstrap below, git clone + copy directories, or
-# hand-write ~/.rainbond/mcp.env. See README.md "给 AI 助手的指引".
+# Credentials are written only through the protected single-runtime store.
 set -euo pipefail
 
 RAINSKILLS_VERBOSE="${RAINSKILLS_VERBOSE:-0}"
@@ -2023,91 +2023,62 @@ PY
   OBTAINED_RAINBOND_TOKEN="$token"
 }
 
-shell_quote_single() {
-  printf "%s" "$1" | sed "s/'/'\"'\"'/g"
-}
-
 write_token_file() {
   local token="$1"
   local base_url="$2"
-  local token_dir="$HOME/.rainbond"
-  local token_file="$token_dir/mcp.env"
-  mkdir -p "$token_dir"
-  chmod 700 "$token_dir"
-
-  local escaped_token escaped_url
-  escaped_token="$(shell_quote_single "$token")"
-  escaped_url="$(shell_quote_single "$base_url")"
-  umask 077
-  cat > "$token_file" <<EOF
-export RAINBOND_JWT='$escaped_token'
-export RAINBOND_URL='$escaped_url'
-EOF
-  chmod 600 "$token_file"
-  log "[write] 已写入 $token_file"
-}
-
-backup_file() {
-  local file="$1"
-  [[ -f "$file" ]] || return 0
-  local backup="${file}.rainbond-skills.bak.$(date +%Y%m%d%H%M%S)"
-  cp "$file" "$backup"
-  log "[backup] 已备份 $backup"
-}
-
-update_managed_block() {
-  local file="$1"
-  local begin_marker="$2"
-  local end_marker="$3"
-  local block_body="$4"
-  local tmp
-  tmp="$(mktemp)"
-
-  mkdir -p "$(dirname "$file")"
-  touch "$file"
-
-  awk -v begin="$begin_marker" -v end="$end_marker" '
-    $0 == begin {skip = 1; next}
-    $0 == end {skip = 0; next}
-    !skip {print}
-  ' "$file" > "$tmp"
-
-  if [[ -s "$tmp" ]]; then
-    printf '\n' >> "$tmp"
-  fi
-  printf '%s\n%s\n%s\n' "$begin_marker" "$block_body" "$end_marker" >> "$tmp"
-  mv "$tmp" "$file"
-}
-
-detect_shell_rc_file() {
-  local shell_name
-  shell_name="$(basename "${SHELL:-zsh}")"
-
-  case "$shell_name" in
-    zsh)
-      printf '%s\n' "$HOME/.zshrc"
-      ;;
-    bash)
-      printf '%s\n' "$HOME/.bashrc"
-      ;;
-    *)
-      printf '%s\n' "$HOME/.profile"
-      ;;
-  esac
-}
-
-configure_shell_autoload() {
-  local token_file="$HOME/.rainbond/mcp.env"
-  local rc_file
-  rc_file="$(detect_shell_rc_file)"
-  local begin_marker="# >>> rainbond skills mcp >>>"
-  local end_marker="# <<< rainbond skills mcp <<<"
-  local block='[ -f "$HOME/.rainbond/mcp.env" ] && source "$HOME/.rainbond/mcp.env"'
+  local kind="private"
+  if [[ "$base_url" == "$SAAS_DEFAULT_URL" ]]; then
+    kind="saas"
+  fi
+  local allow_insecure_http="false"
+  [[ "$base_url" == http://* ]] && allow_insecure_http="true"
+  RAINBOND_JWT="$token" RAINBOND_URL="$base_url" RAINSKILLS_RUNTIME_KIND="$kind" \
+    RAINSKILLS_ALLOW_INSECURE_HTTP="$allow_insecure_http" python3 - "$HOME" <<'PY' \
+    || die "Rainbond 单运行环境凭据写入失败。"
+import datetime
+import json
+import os
+import pathlib
+import secrets
+import sys
 
-  backup_file "$rc_file"
-  update_managed_block "$rc_file" "$begin_marker" "$end_marker" "$block"
-  ACTIVE_SHELL_RC="$rc_file"
-  log "[update] 已更新 $rc_file"
+home = pathlib.Path(sys.argv[1]).resolve()
+directory = home / ".rainbond" / "rainskills"
+target = directory / "single-runtime-v1.json"
+directory.mkdir(parents=True, exist_ok=True, mode=0o700)
+os.chmod(directory, 0o700)
+now = datetime.datetime.now(datetime.timezone.utc).isoformat(timespec="milliseconds").replace("+00:00", "Z")
+created_at = now
+if target.exists():
+    with target.open("r", encoding="utf-8") as stream:
+        current = json.load(stream)
+    if isinstance(current.get("created_at"), str):
+        created_at = current["created_at"]
+payload = {
+    "schema": "rainskills.single-runtime.v1",
+    "version": 1,
+    "console_origin": os.environ["RAINBOND_URL"],
+    "kind": os.environ["RAINSKILLS_RUNTIME_KIND"],
+    "token": os.environ["RAINBOND_JWT"],
+    "allow_insecure_http": os.environ["RAINSKILLS_ALLOW_INSECURE_HTTP"] == "true",
+    "created_at": created_at,
+    "updated_at": now,
+}
+temporary = directory / (".single-runtime-v1.json." + secrets.token_hex(8))
+descriptor = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
+try:
+    with os.fdopen(descriptor, "w", encoding="utf-8") as stream:
+        json.dump(payload, stream, ensure_ascii=False, indent=2)
+        stream.write("\n")
+        stream.flush()
+        os.fsync(stream.fileno())
+    os.replace(temporary, target)
+    os.chmod(target, 0o600)
+finally:
+    if temporary.exists():
+        temporary.unlink()
+PY
+  log "[write] 已写入受保护的单运行环境凭据"
 }
 
 validate_mcp_connectivity() {
@@ -2378,7 +2349,7 @@ obtain_rainbond_token() {
         die "--token 提供的值不是合法的 JWT（应形如 xxx.yyy.zzz）。"
       fi
       warn "RAINBOND_JWT 不是合法的 JWT（应形如 xxx.yyy.zzz）；忽略并改走浏览器登录。"
-      warn "如果你的当前 shell 还在加载旧的 ~/.rainbond/mcp.env，请先执行：unset RAINBOND_JWT"
+      warn "检测到无效的 RAINBOND_JWT；将忽略并重新登录。"
       RAINBOND_TOKEN_INPUT=""
     elif [[ "$RAINBOND_TOKEN_FROM_FLAG" -eq 1 ]]; then
       check_reusable_token_or_clear "--token 提供的 Rainbond JWT" || true
@@ -2444,14 +2415,19 @@ obtain_rainbond_token() {
 }
 
 read_cached_rainbond_url() {
-  local mcp_env="$HOME/.rainbond/mcp.env"
-  [[ -f "$mcp_env" ]] || return 1
-  (
-    set +u
-    # shellcheck disable=SC1090
-    . "$mcp_env"
-    printf '%s\n' "${RAINBOND_URL:-}"
-  )
+  local runtime_file="$HOME/.rainbond/rainskills/single-runtime-v1.json"
+  [[ -f "$runtime_file" ]] || return 1
+  python3 - "$runtime_file" <<'PY'
+import json
+import sys
+
+with open(sys.argv[1], "r", encoding="utf-8") as stream:
+    payload = json.load(stream)
+origin = payload.get("console_origin")
+if not isinstance(origin, str) or not origin:
+    raise SystemExit(1)
+print(origin)
+PY
 }
 
 do_refresh() {
@@ -2471,7 +2447,7 @@ do_refresh() {
     cached_url="$(read_cached_rainbond_url 2>/dev/null || true)"
     if [[ -n "$cached_url" ]]; then
       RAINBOND_URL_INPUT="$cached_url"
-      log "[refresh] 使用 ~/.rainbond/mcp.env 中已记录的地址：$cached_url"
+      log "[refresh] 使用单运行环境中已记录的地址：$cached_url"
     fi
   fi
 
@@ -2511,7 +2487,6 @@ do_refresh() {
 
   export RAINBOND_JWT="$token"
   write_token_file "$token" "$base_url"
-  configure_shell_autoload
   set_rainskills_failure_context "configuration" "cli_configuration_failed"
   report_rainskills_lifecycle_event "configure_cli" "install_cli" "configure_cli" "started"
   install_local_cli
@@ -2595,7 +2570,6 @@ configure_runtime_connection() {
       || die "runtime connect 凭据安全写入失败。"
   else
     write_token_file "$token" "$base_url"
-    configure_shell_autoload
   fi
 
   set_rainskills_failure_context "configuration" "cli_configuration_failed"

package/marketplace/rainskills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.19",
+  "version": "0.1.21",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",

package/marketplace/rainskills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.19",
+  "version": "0.1.21",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",

package/marketplace/rainskills/skills/rainskills/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: rainskills
-description: Use when a user asks to install, set up, initialize, update, repair, start using Rainskills, or list, add, rename, remove, reconnect, or change the default Rainskills runtime environment.
+description: Use when a user asks to install, set up, initialize, update, repair, start using Rainskills, or connect, reconnect, inspect, or replace the single Rainskills runtime.
 ---
 
 # Rainskills
@@ -14,11 +14,11 @@ This is the single marketplace entry for the complete Rainskills product. The in
 3. Keep stdin, stdout, and stderr attached. When `RAINSKILLS_USER_INPUT_REQUIRED` appears, pause for that installer choice. If the installer emits `rainskills.next-action.v1`, execute only its fixed `argv` through the same launcher; never evaluate output as a shell command. If the adjacent `bin/rainskills.js` exists, use it for fixed next actions; otherwise use the same versioned npm package fallback described below.
 4. Stay attached until every independent Skill is installed. Do not select, connect, or configure an application runtime during installation. In the user-facing response, output only the fixed completion message below.
 
-If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.19 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
+If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.21 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
 
 Skills-only 安装不需要 Node.js；CDN fallback 只负责安装 Skill 文件，不代表运行环境连接、应用部署或平台安装已经可执行。用户首次提出需要运行环境的动作时，对应业务 Skill 才检查 Node.js；固定 Rainskills launcher 需要 Node.js 18 或更高版本。缺失或版本过低时保留原始 intent 并停止，等待用户或 agent 明确同意安装或升级 Node.js，安装完成消息不得提前提示 Node.js。
 
-执行优化：同一会话内只检查一次 Node.js（首次使用本地 CLI 前）；仅在 Node.js 或 Rainskills 安装、升级，或 PATH 变更后失效。固定 launcher 和 argv 已在本 Skill 中，禁止读取、搜索或探测 `rainskills.js`，也禁止执行 `npm root -g`。每个新的业务操作仍需要刷新一次环境列表；带已有 `operation_id` 或 `onboarding-id` 的续接复用已绑定的环境 ID，不重复枚举环境。
+执行优化：同一会话内只检查一次 Node.js 和运行环境状态；仅在 Node.js、Rainskills 或唯一运行环境发生变化后失效。固定 launcher 和 argv 已在本 Skill 中，禁止读取、搜索或探测 `rainskills.js`，也禁止执行 `npm root -g`。
 
 ## Completion Message
 
@@ -38,18 +38,20 @@ Rainskills 安装完成，下一条消息即可直接使用。
 也可以直接告诉我你想部署什么应用。
 ```
 
-## Manage Runtime Environments
+## Manage the Single Runtime
 
 受限沙箱（包括 Codex）执行本地状态命令时，必须申请用户级受保护目录访问权限；在 Codex 中使用 `require_escalated`。不得修改 `~/.rainbond` 权限、复制受保护状态到工作区，或因沙箱权限错误建议重装。
 
 涉及浏览器或设备授权的 `runtime connect`，以及恢复/安装场景中的 `rainskills <target> --self-hosted`，必须在附加交互终端（TTY）中运行；在 Codex 中设置 `tty: true` 并保持进程附着直到授权完成。禁止通过非交互命令要求用户粘贴 JWT；非交互模式只可复用已存在的受保护凭据。
 
-环境是全局列表，不是项目绑定。本地状态命令必须定位已安装的同级 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后通过 `node` 以 argv 数组执行；不得为了查询本地环境访问 npm。只有连接或安装环境时才使用与当前技能包一致的固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.19`）。
+Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.21`）：
 
-- 列表：用本地 launcher 执行 `environment list --json`，只展示名称、类型、状态、是否默认和最近验证时间。
-- 重命名：用本地 launcher 执行 `environment rename --environment-id <uuid> --name <name>`。
-- 设为默认：用本地 launcher 执行 `environment set-default --environment-id <uuid>`。只影响之后未指定环境的新操作。
-- 删除：用本地 launcher 执行 `environment remove --environment-id <uuid>`；默认环境或活动操作使用中的环境必须先阻断。
-- 添加：新增环境时直接生成 operation UUID，以 `{"type":"environment-add"}` 执行 runtime connect。先原样展示 `runtime message --id add-environment-location`。选择云端环境时直接执行 `--saas` route；选择私有环境时立即原样展示 `runtime message --id private-deployment-location`，并与首次部署保持完全相同的路径：选择 1（部署到本机）执行 `--install-private --location local`，选择 2（部署到独立服务器）执行 `--install-private --location server`，选择 3（部署到已有 Rainbond）原样展示 `runtime message --id private-console-origin`，收到地址后执行 `--rainbond-url <已验证 Console origin>`。不得展示任何额外的接入方式中间步骤。授权成功后必须把 launcher 返回的 `user_message` 中完整环境列表原样展示给用户，再按用户要求重命名并执行 `operation complete --operation-id <uuid>`。第二个环境不得自动改成默认环境。不得先执行 `runtime status`，不得检查、迁移、备份、删除或修复旧的 `runtime-connection-v1.json`；旧 runtime 状态不是新增环境的前置条件，连接失败时只执行 launcher 返回的固定恢复 argv，不得自行设计恢复流程。
+- 状态：执行 `runtime status --json`。
+- 首次连接：执行 `runtime connect <target> --saas` 或 `runtime connect <target> --rainbond-url <Console origin>`。
+- 安装私有环境：执行 `runtime connect <target> --install-private --location local|server`。
+- 重新授权：执行 `runtime reconnect <target>`；必须进入浏览器 Device Flow，不复用 Shell 中缓存的 JWT。
+- 更换环境：明确告知用户会替换当前唯一环境；新授权和 live probe 成功后再覆盖凭据。
 
-用户在一次业务请求中明确指定运行环境时，只把该环境 ID 传给本次 `operation begin`；同一项目可以部署到任意多个环境和团队。明确“团队”表示环境内团队；明确“运行环境/平台”表示环境；裸名称同时匹配两者时必须询问，不能靠名称中是否含“环境”二字猜测。
+所有 Rainbond 查询和变更继续通过 `~/.rainbond/bin/rainskills-tools.js`。不得配置客户端 MCP，也不得恢复环境枚举、业务 operation 生命周期、环境 ID 或 intent 恢复协议。
+
+业务 CLI 默认只读取受保护的唯一运行环境文件，忽略 Shell 中遗留的 `RAINBOND_URL` / `RAINBOND_JWT`。CI 若要显式使用环境变量凭据，必须同时设置 `RAINSKILLS_CREDENTIAL_SOURCE=environment`。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.19",
+  "version": "0.1.21",
   "description": "Interactive Rainbond skill installer for Codex, Claude Code, and Pi Agent",
   "license": "Apache-2.0",
   "homepage": "https://github.com/goodrain/rainskills#readme",
@@ -64,7 +64,7 @@
     "test:runtime-version": "node --test tests/runtime-version-sync.test.js",
     "test:runtime-contracts": "node scripts/sync-runtime-contracts.mjs --check",
     "test:auto-update": "node --test tests/auto-update.test.js",
-    "test:launcher": "node --test tests/console-origin.test.js tests/environment-credentials.test.js tests/environment-registry.test.js tests/local-runtime-cli.test.js tests/local-cli-installer.test.js tests/npx-launcher.test.js tests/runtime-credentials.test.js tests/runtime-intents.test.js tests/runtime-operations.test.js tests/runtime-state.test.js tests/cli-only-transport.test.js tests/skill-manifest-builder.test.js",
+    "test:launcher": "node --test tests/console-origin.test.js tests/local-cli-installer.test.js tests/npx-launcher.test.js tests/runtime-state.test.js tests/single-runtime.test.js tests/single-runtime-cli.test.js tests/single-runtime-launcher.test.js tests/skill-manifest-builder.test.js",
     "test:api-bridge": "node --test tests/api-bridge.test.js",
     "test:console-contract": "python3 tests/console_tool_contract_test.py",
     "test:skill-profile": "node --test tests/skill-profile-builder.test.js tests/markdown-link-integrity.test.js",

package/rainbond-app-assistant/SKILL.md

@@ -88,153 +88,124 @@ description: "Use whenever a user asks to deploy, run, deliver, publish, inspect
   <!-- rainskills-user-result:end -->
 
 <!-- rainskills-runtime-gate:start -->
-## 运行环境门禁（最高优先级）
-
-### CLI 调用格式（强制）
-
-所有可变 `call` 都必须使用完整 argv：`call <tool> --input - --operation-id <uuid> --skill-id rainbond-app-assistant`。CLI 返回确认 ID 后，只能在同一 argv 末尾加入 `--confirm <confirmation-id>`；不得省略 `--skill-id`、猜测参数，或根据泛化错误反复重试。
-
-### 多运行环境操作契约
-
-  Node.js 前置检查通过后，每次用户业务请求都创建独立操作，不把项目绑定到任何环境、团队或应用。先执行本地 launcher + `["environment", "list", "--json"]`：用户明确说“运行环境/平台”时按环境名选择；明确说“团队”时表示默认环境中的团队；裸名称同时匹配环境和团队时必须让用户确认。未指定环境时使用全局默认环境；默认环境不可用时停止，禁止自动切换到其他环境。
-
-  生成新的 UUID，并执行本地 launcher + `["operation", "begin", "--operation-id", "<uuid>", "--intent-json", "<intent-json>"]`；用户明确指定已有环境时在 `--intent-json` 前加入 `["--environment-id", "<immutable-environment-id>"]`。保存返回的 `operation_id`，此后每个 Rainbond MCP 工具调用都必须在参数中加入 `rainskills_operation_id`。环境改名或修改全局默认值不能改变已开始操作的目标。同一项目可以在多个环境和团队分别部署，禁止写入或推断项目级默认环境。
-
-  每个 intent JSON 都必须显式包含顶层 `type`，下方 `required` 只表示除 `type` 外的业务字段要求，绝不表示可以传 `{}`。用户明确要求部署新应用时，最小 intent 是 `{"type":"deploy"}`；用户只给出 Harbor 这类应用名称、尚未提供来源描述符时，也必须先保留 `{"type":"deploy"}`，不得省略或延后补充 `type`。从首次构造开始复用同一份完整 intent JSON，依次传给 `operation begin`、`runtime connect` 和后续恢复；只在用户已明确提供且契约允许时增加字段，不得重新构造为不含 `type` 的对象。
-
-  第一步检查 Node.js 是否存在且主版本不低于 18。Node.js 缺失或低于 18 时，只说明“Rainskills 执行组件需要 Node.js 18 或更高版本”并停止：不选择运行环境，不调用 MCP，不猜测替代命令。只有用户或 agent 明确同意后才安装或升级 Node.js，再从同一原始 intent 继续。
-
-  固定 launcher 是 `["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js"]`；运行包版本标记为 `rainskills@0.1.19`，且必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止使用 `rainskills@latest`，禁止拼接或执行 shell 字符串。
-
-  本地 launcher 必须从当前 Skill 所在目录的同级目录定位 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后使用 `["node", "<绝对路径>"]` 执行。`environment list`、`operation begin`、`operation complete` 和 `runtime message` 只能使用本地 launcher；本地 launcher 只读取已安装文件和本机受保护状态，不得访问 npm 或其它网络。只有用户选定连接或安装运行环境后，才使用上面的固定本地 launcher。
-
-  所有 Rainbond 查询和变更必须通过本地 `~/.rainbond/bin/rainskills-tools.js` 执行，并绑定本次 operation ID。禁止 Agent 直接调用 Rainbond MCP，也不得启动本地 Rainskills MCP 服务；只允许执行 CLI 返回的结构化结果与确认续接 argv。
-
-  业务操作开始后，必须使用 runtime contract 的 `input_commands.context-resolve` 完整 argv 和配套 stdin。返回 `resolved` 时只使用该 operation 已保存的企业、工作空间和集群上下文；返回 `needs-selection` 时，把 CLI 返回的“工作空间 + 集群”组合选项一次性列给用户，不得逐项询问，也不得让用户提供 enterprise_id。用户选择后必须使用 `input_commands.context-select` 的完整 argv 和配套 stdin；选择成功后继续原操作，同一 operation 不再重复查询上下文。
-
-  只有 CLI 返回并通过校验的 `rainskills.next-action.v1` argv 才能执行续接。普通失败一律禁止自动重试：不得再次执行原命令，不得执行 `--help`、`sleep`、`rg`、`grep`，不得搜索 Rainskills 源码；同一 `operation complete` 最多执行一次。
-
-  <!-- rainskills-runtime-contract:start -->
-  ```json
-  {
-    "schema": "rainskills.skill-runtime-contract.v1",
-    "package_version": "rainskills@0.1.19",
-    "launcher": ["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js"],
-    "local_launcher": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js"],
-    "local_argv": {
-      "environment-list": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "environment", "list", "--json"],
-      "operation-begin-default": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "operation", "begin", "--operation-id", "<uuid>", "--intent-json", "<intent-json>"],
-      "operation-begin-selected": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "operation", "begin", "--operation-id", "<uuid>", "--environment-id", "<environment-id>", "--intent-json", "<intent-json>"],
-      "operation-complete": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "operation", "complete", "--operation-id", "<uuid>"],
-      "runtime-message": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "runtime", "message", "--id", "<message-id>"]
-    },
-    "intents": {
-      "deploy": {
-        "type": "deploy",
-        "required": ["type"],
-        "optional": ["project_root", "source_kind", "source_url", "image_ref", "service_id"],
-        "enums": {
-          "source_kind": ["local", "git", "image", "package"]
-        },
-        "example": {
-          "type": "deploy"
-        }
-      },
-      "create": {
-        "type": "create",
-        "required": ["type"],
-        "optional": ["project_root", "source_kind", "source_url", "image_ref", "service_id"],
-        "enums": {
-          "source_kind": ["local", "git", "image", "package"]
-        },
-        "example": {
-          "type": "create"
-        }
-      },
-      "query": {
-        "type": "query",
-        "required": ["type", "operation"],
-        "optional": ["team_id", "app_id", "service_id"],
-        "enums": {
-          "operation": ["summary", "components", "events", "logs", "access"]
-        },
-        "example": {
-          "type": "query",
-          "operation": "summary",
-          "app_id": "app"
-        }
-      },
-      "troubleshoot": {
-        "type": "troubleshoot",
-        "required": ["type", "operation"],
-        "optional": ["team_id", "app_id", "service_id"],
-        "enums": {
-          "operation": ["auto", "build", "runtime", "access"]
-        },
-        "example": {
-          "type": "troubleshoot",
-          "operation": "build",
-          "app_id": "app"
-        }
-      },
-      "modify": {
-        "type": "modify",
-        "required": ["type", "team_id", "app_id", "operation"],
-        "optional": ["service_id"],
-        "enums": {
-          "operation": ["component-config", "build-source", "ports", "env", "storage", "dependency"]
-        },
-        "example": {
-          "type": "modify",
-          "team_id": "team",
-          "app_id": "app",
-          "operation": "env"
-        }
+## 单运行环境 CLI 门禁（最高优先级）
+
+本机只允许连接一个 Rainbond 运行环境。当前 Skill 在本会话第一次调用 Rainbond 前，执行固定 launcher 的 `runtime status --json`。返回 `connected` 且 `usable=true` 后，所有查询和变更直接通过本地 `~/.rainbond/bin/rainskills-tools.js` 执行。不得配置或直接调用客户端 MCP，不得执行环境枚举或业务 operation 生命周期命令，也不得生成或传递运行环境 ID、业务 operation ID 或 intent JSON。
+
+没有运行环境时，让用户选择 Rainbond Cloud 或一个已有/新建的私有 Rainbond，并执行对应的 `runtime connect`。连接和重新授权必须进入浏览器 Device Flow，不复用 Shell 中缓存的 JWT；新凭据通过 live probe 后才覆盖唯一运行环境。CLI 返回 401 时，只读调用可在 `runtime reconnect` 成功后重试一次；写调用不得自动重放，必须先查询平台真实状态。403 直接停止，不重新授权。
+
+`context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
+
+```json
+{
+  "schema": "rainskills.single-runtime-contract.v1",
+  "package_version": "rainskills@0.1.21",
+  "runtime_status": [
+    "node",
+    "<home>/.rainbond/lib/rainskills/bin/rainskills.js",
+    "runtime",
+    "status",
+    "--json"
+  ],
+  "runtime_connect": {
+    "saas": [
+      "node",
+      "<home>/.rainbond/lib/rainskills/bin/rainskills.js",
+      "runtime",
+      "connect",
+      "<target>",
+      "--saas"
+    ],
+    "private_existing": [
+      "node",
+      "<home>/.rainbond/lib/rainskills/bin/rainskills.js",
+      "runtime",
+      "connect",
+      "<target>",
+      "--rainbond-url",
+      "<console-origin>"
+    ],
+    "install_private": [
+      "node",
+      "<home>/.rainbond/lib/rainskills/bin/rainskills.js",
+      "runtime",
+      "connect",
+      "<target>",
+      "--install-private",
+      "--location",
+      "<local-or-server>"
+    ],
+    "reconnect": [
+      "node",
+      "<home>/.rainbond/lib/rainskills/bin/rainskills.js",
+      "runtime",
+      "reconnect",
+      "<target>"
+    ]
+  },
+  "input_commands": {
+    "context_resolve": {
+      "argv": [
+        "node",
+        "<home>/.rainbond/bin/rainskills-tools.js",
+        "context",
+        "resolve",
+        "--input",
+        "-",
+        "--skill-id",
+        "rainbond-app-assistant"
+      ],
+      "stdin": {
+        "required": [
+          "enterprise",
+          "workspace"
+        ]
       }
     },
-    "routes": {
-      "new": ["saas", "private-existing", "install-private"],
-      "existing": ["saas", "private-existing"]
+    "read": {
+      "argv": [
+        "node",
+        "<home>/.rainbond/bin/rainskills-tools.js",
+        "read",
+        "<tool>",
+        "--input",
+        "-",
+        "--skill-id",
+        "rainbond-app-assistant"
+      ],
+      "stdin_schema_source": "tool-catalog"
     },
-    "connect_argv": {
-      "saas": ["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
-      "private-existing": ["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"],
-      "install-private": ["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js", "runtime", "connect", "<target>", "--install-private", "--location", "<private-location>", "--intent-json", "<intent-json>"]
+    "call": {
+      "argv": [
+        "node",
+        "<home>/.rainbond/bin/rainskills-tools.js",
+        "call",
+        "<tool>",
+        "--input",
+        "-",
+        "--skill-id",
+        "rainbond-app-assistant"
+      ],
+      "stdin_schema_source": "tool-catalog"
     },
-    "input_commands": {
-      "context-resolve": {
-        "argv": ["node", "<home>/.rainbond/bin/rainskills-tools.js", "context", "resolve", "--input", "-", "--operation-id", "<uuid>", "--skill-id", "rainbond-app-assistant"],
-        "stdin": {
-          "required": ["enterprise", "workspace"]
-        }
-      },
-      "context-select": {
-        "argv": ["node", "<home>/.rainbond/bin/rainskills-tools.js", "context", "select", "--input", "-", "--operation-id", "<uuid>", "--skill-id", "rainbond-app-assistant"],
-        "stdin": {
-          "selection_id": "<selection-id>",
-          "option_id": "<option-id>"
-        }
-      },
-      "read": {
-        "argv": ["node", "<home>/.rainbond/bin/rainskills-tools.js", "read", "<tool>", "--input", "-", "--operation-id", "<uuid>", "--skill-id", "rainbond-app-assistant"],
-        "stdin_schema_source": "tool-catalog"
-      },
-      "call": {
-        "argv": ["node", "<home>/.rainbond/bin/rainskills-tools.js", "call", "<tool>", "--input", "-", "--operation-id", "<uuid>", "--skill-id", "rainbond-app-assistant"],
-        "stdin_schema_source": "tool-catalog"
-      }
+    "call_confirm": {
+      "argv": [
+        "node",
+        "<home>/.rainbond/bin/rainskills-tools.js",
+        "call",
+        "<tool>",
+        "--input",
+        "-",
+        "--skill-id",
+        "rainbond-app-assistant",
+        "--confirm",
+        "<confirmation-id>"
+      ],
+      "stdin_schema_source": "same-confirmed-input"
     }
   }
-  ```
-  <!-- rainskills-runtime-contract:end -->
-
-  `deploy`/`create` 含 `service_id` 时属于 existing，否则属于 new；`query`、`troubleshoot`、`modify` 始终属于 existing。意图不明确时先澄清，不执行 connect。target 只允许 `codex`、`claude`、`pi`、`all`。连接前校验 intent，只执行其 scope 在契约中允许的完整 argv。只消费 schema 为 `rainskills.next-action.v1` 且完成字段校验后的 `argv` 数组。
-
-  连接或平台安装完成后，用固定 `onboarding-id` 执行 launcher + `["intent", "resume", "--onboarding-id", "<同一 onboarding-id>"]`，恢复原始 intent 和 `resume_step`，不得重新猜测动作。
-
-  同一条附着命令先输出 `runtime.device-authorization`、随后输出 schema 为 `rainskills.runtime-connect-result.v1` 且 `state=connected` 时，最终 connected 结果覆盖前面的等待授权消息。不得再次展示旧授权消息、不得等待用户回复“已授权”；必须在同一轮立即使用同一 `onboarding-id` 执行 `intent resume`。
-
-  业务 MCP 返回 401 时，先执行 launcher + `["runtime", "record-failure", "--onboarding-id", "<同一 onboarding-id>", "--step", "<当前固定步骤>", "--reason", "credential-expired"]`，再仅一次执行 launcher + `["runtime", "reconnect", "--onboarding-id", "<同一 onboarding-id>"]`，然后 resume 并只重试该步骤；第二次 401 立即停止。403 时执行 launcher + `["runtime", "record-failure", "--onboarding-id", "<同一 onboarding-id>", "--step", "<当前固定步骤>", "--reason", "permission-denied"]` 后停止，不得 reconnect、重新授权或自动重试，只说明缺少的权限。
+}
+```
 <!-- rainskills-runtime-gate:end -->
 
 受限沙箱（包括 Codex）执行本地状态命令时，必须申请用户级受保护目录访问权限；在 Codex 中使用 `require_escalated`。不得修改 `~/.rainbond` 权限、复制受保护状态到工作区，或因沙箱权限错误建议重装。
@@ -269,17 +240,11 @@ description: "Use whenever a user asks to deploy, run, deliver, publish, inspect
   请提示“请选择应用要运行的环境：”，并只显示：
 
   1) 云端环境（免费体验）
-  2) 私有环境（去对接）
-
-  用户选择私有环境后，立即执行本地 launcher + `["runtime", "message", "--id", "private-deployment-location"]`，并按同一消息协议原样输出块内正文：
-
-  请选择部署位置：
-
-  1、部署到本机
-  2、部署到独立服务器
-  3、部署到已有 Rainbond
+  2) 本机环境
+  3) 独立服务器
+  4) 已有 Rainbond
 
-  选择 1 时执行 `install-private` route，并在完整 argv 中使用 `["--location", "local"]`；选择 2 时执行 `install-private` route，并使用 `["--location", "server"]`；选择 3 时执行本地 launcher + `["runtime", "message", "--id", "private-console-origin"]`，收到地址后执行 `private-existing`。不得显示额外的接入方式中间步骤，不得在平台安装器中重复询问部署位置，也不得在环境准备完成前询问应用来源。
+  选择 1 时执行 `saas` route；选择 2 时执行 `install-private` route，并在完整 argv 中使用 `["--location", "local"]`；选择 3 时执行 `install-private` route，并使用 `["--location", "server"]`；选择 4 时执行本地 launcher + `["runtime", "message", "--id", "private-console-origin"]`，收到地址后执行 `private-existing`。不得显示“私有环境”或部署位置中间层，不得在平台安装器中重复询问部署位置，也不得在环境准备完成前询问应用来源。
 
   ### 已有应用