rainskills 0.1.27 → 0.1.29

package/README.md

@@ -1,6 +1,6 @@
 # Rainskills
 
-Rainskills 是一组面向应用识别、部署、排障和交付的 AI Skills，支持 Codex、Claude Code 和 Pi Agent。用户在市场中只会看到一个 `Rainskills` 产品，安装后 10 个 `rainbond-*` Skill 仍会独立触发。
+Rainskills 是一组面向应用识别、部署、排障和交付的 AI Skills，支持 Codex、Claude Code、Pi Agent、DeepSeek Harness 和 WorkBuddy。用户在市场中只会看到一个 `Rainskills` 产品，安装后 11 个 `rainbond-*` Skill 仍会独立触发。
 
 ## 安装
 
@@ -41,7 +41,23 @@ Claude Code：
 /reload-plugins
 ```
 
-安装流程支持 Codex、Claude Code 和 Pi Agent；Pi 与其他 Agent 共用同一组 Skills 和本地 Rainskills CLI，不再提供单独的 Pi MCP adapter。macOS、Linux 和 WSL 不支持 OpenClaw 安装。不要手工复制 Skill、拼接凭据或修改 Agent 配置。
+DeepSeek Harness：
+
+```bash
+npx --yes rainskills dsh
+```
+
+默认安装到 `${DSH_HOME:-~/.dsh}/skills`。DeepSeek Harness 使用原生 Skill catalog 和 `skill` loader 加载，不配置客户端 MCP。
+
+WorkBuddy：
+
+```bash
+npx --yes rainskills workbuddy
+```
+
+默认安装到 `${WORKBUDDY_CONFIG_DIR:-~/.workbuddy-ai}/skills`。如果安装发生在一个已经打开的 WorkBuddy 任务中，先刷新 Skill 列表或新建任务；部署时明确指定 Rainbond/Rainskills，或让项目保留 `rainbond.app.json`、`.rainbond/local.json` 标记，以避免被内置 Sites 路由抢占。
+
+安装流程支持 Codex、Claude Code、Pi Agent、DeepSeek Harness 和 WorkBuddy；所有 Agent 共用同一组 Skills 和本地 Rainskills CLI，不提供单独的客户端 MCP adapter。macOS、Linux 和 WSL 不支持 OpenClaw 安装。不要手工复制 Skill、拼接凭据或修改 Agent 配置。
 
 ## 安装完成时用户会看到什么
 
@@ -223,7 +239,7 @@ node ~/.rainbond/lib/rainskills/bin/rainskills.js platform install --onboarding-
 
 Rainskills 会在用户下一次发起业务动作时，由本地运行时立即返回环境查询结果，并另行启动后台任务静默检查更新。更新只跟随 npm `latest` 指向的正式版。当前版本是 RC 或其他预发布版本时不会查询、不会自动升级；npm 上的新 RC 版本也不参与正式版自动升级。
 
-发现更高的正式版后，后台任务只委托到经过校验的精确版本，例如 `rainskills@0.1.27`，不会执行浮动的 `@latest` 业务代码。新版本原子刷新已经安装的 Rainskills Skills；当前业务继续使用启动时已经加载的版本，最迟从下一条新任务开始使用新版。npm 超时、版本检查失败、安装位置不安全或文件迁移失败时会保留旧版本，且不会阻塞或改变当前操作。
+发现更高的正式版后，后台任务只委托到经过校验的精确版本，例如 `rainskills@0.1.29`，不会执行浮动的 `@latest` 业务代码。新版本原子刷新已经安装的 Rainskills Skills；当前业务继续使用启动时已经加载的版本，最迟从下一条新任务开始使用新版。npm 超时、版本检查失败、安装位置不安全或文件迁移失败时会保留旧版本，且不会阻塞或改变当前操作。
 
 升级只更新 Rainskills 自身，不触发 Rainbond 安装、运行环境选择、登录授权或重新对接，也不会新增 Agent MCP 配置。更新内容仅包括 Skills 和本地 CLI。原始业务操作会继续执行；只有该业务操作本身需要运行环境时，才按既有门禁检查当前连接。可用连接直接复用，401 只重新授权一次，403 立即停止，从未连接过运行环境时才进入环境选择。
 

package/SKILL.md

@@ -9,7 +9,7 @@ This is the single marketplace entry for the complete Rainskills product. The in
 
 ## Initialize
 
-1. Detect the current host client and map it to exactly one supported installer target: Codex=`codex`, Claude Code=`claude`, or Pi Agent=`pi`. All three use the same installed Skills and protected local Rainskills CLI; Pi has no separate MCP adapter or generated extension. The macOS, Linux, and WSL installer intentionally does not support OpenClaw; report that limitation instead of invoking an unsupported target. Do not ask the user which supported client they are currently using. If the host cannot be determined reliably, omit the target and let the installer ask.
+1. Detect the current host client and map it to exactly one supported installer target: Codex=`codex`, Claude Code=`claude`, Pi Agent=`pi`, DeepSeek Harness=`dsh`, or WorkBuddy=`workbuddy`. All five use the same installed Skills and protected local Rainskills CLI; Pi and DeepSeek Harness have no separate MCP adapter or generated extension. DeepSeek Harness installs to `$DSH_HOME/skills` (default `~/.dsh/skills`). WorkBuddy installs to `$WORKBUDDY_CONFIG_DIR/skills` (default `~/.workbuddy-ai/skills`). The macOS, Linux, and WSL installer intentionally does not support OpenClaw; report that limitation instead of invoking an unsupported target. Do not ask the user which supported client they are currently using. If the host cannot be determined reliably, omit the target and let the installer ask.
 2. Resolve the directory containing this `SKILL.md`. On native Windows, if the adjacent `bin/rainskills.js` exists, run it by absolute path with the detected target in an attached interactive terminal: `node <skill-directory>/bin/rainskills.js <target>`. On macOS, Linux, or WSL, if the adjacent `install.sh` exists, run `bash <skill-directory>/install.sh <target>` the same way. Do not replace the installer with manual file copies.
 3. Keep stdin, stdout, and stderr attached. When `RAINSKILLS_USER_INPUT_REQUIRED` appears, pause for that installer choice. If the installer emits `rainskills.next-action.v1`, execute only its fixed `argv` through the same launcher; never evaluate output as a shell command. If the adjacent `bin/rainskills.js` exists, use it for fixed next actions; otherwise use the same versioned npm package fallback described below.
 4. Stay attached until every independent Skill is installed. Do not select, connect, or configure an application runtime during installation. In the user-facing response, output only the fixed completion message below.
@@ -48,7 +48,9 @@ Rainskills 安装完成，下一条消息即可直接使用。
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
-Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.27`）：
+DeepSeek Harness 和 WorkBuddy 也必须保持原命令附着直到退出；如果宿主把长命令转成持久终端或后台任务，只能轮询该原始命令句柄，不得另起 `runtime status` 推测授权结果。WorkBuddy 安装后若当前任务的 Skill 清单尚未刷新，在下一条业务动作前先刷新 Skill 列表或新建任务，不得退回内置 Sites 代替 Rainbond 部署。
+
+Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.29`）：
 
 - 状态：执行 `runtime status --json`。
 - 首次连接：执行 `runtime connect <target> --saas` 或 `runtime connect <target> --rainbond-url <Console origin>`。

package/bin/rainskills.js

@@ -13,6 +13,9 @@ const {
 const {
   renderCatalogUserMessage,
 } = require("../rainbond-platform-installer/scripts/user-message.js");
+const {
+  isHostTarget,
+} = require("../rainbond-platform-installer/scripts/host-targets.js");
 
 const AUTO_UPDATE_FALLBACK_EXIT_CODE = 75;
 const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
@@ -67,7 +70,7 @@ function parseRuntimeAssertConnectArgs(args) {
     throw new Error("runtime connect 内部门禁参数无效");
   }
   if (!UUID_PATTERN.test(args[3] || "")) throw new Error("runtime connect operation 无效");
-  if (!["codex", "claude", "pi", "all"].includes(args[5])) throw new Error("runtime connect target 无效");
+  if (!isHostTarget(args[5])) throw new Error("runtime connect target 无效");
   if (!["saas", "private"].includes(args[7])) throw new Error("runtime connect environment kind 无效");
   return {
     operationId: args[3],
@@ -95,8 +98,8 @@ function parseRuntimeConnectArgs(args) {
     throw new Error("不是 runtime connect 命令");
   }
   const targetClient = args[2];
-  if (!["codex", "claude", "pi", "all"].includes(targetClient)) {
-    throw new Error("runtime connect 需要固定目标 codex、claude、pi 或 all");
+  if (!isHostTarget(targetClient)) {
+    throw new Error("runtime connect 需要固定的受支持宿主目标");
   }
   let environmentChoice = "";
   let rainbondUrl = "";
@@ -319,7 +322,7 @@ async function runBuiltin(args, {
     return true;
   }
   if (args[0] === "runtime" && args[1] === "reconnect") {
-    if (args.length !== 3 || !["codex", "claude", "pi", "all"].includes(args[2])) {
+    if (args.length !== 3 || !isHostTarget(args[2])) {
       throw new Error("runtime reconnect 参数无效");
     }
     const current = getSingleRuntimeStore().read();

package/install.sh

@@ -205,6 +205,8 @@ Usage:
   ./install.sh claude
   ./install.sh codex
   ./install.sh pi
+  ./install.sh dsh
+  ./install.sh workbuddy
   ./install.sh all
   ./install.sh --dest <path>
   ./install.sh all --saas
@@ -216,7 +218,9 @@ Options:
   claude                 Install and configure Claude Code
   codex                  Install and configure Codex
   pi                     Install and configure Pi Agent
-  all                    Install and configure Codex, Claude Code, and Pi Agent
+  dsh                    Install and configure DeepSeek Harness
+  workbuddy              Install and configure WorkBuddy
+  all                    Install and configure all supported agents
   refresh                Re-run browser login and refresh the protected CLI credential
   --dest PATH            Install skills to a custom directory only
   --force                Overwrite existing installed skills
@@ -240,6 +244,8 @@ Environment:
   RAINBOND_PASSWORD      Legacy: Rainbond login password for non-interactive runs
   RAINBOND_LOGIN_TIMEOUT Browser login timeout in seconds (default 600)
   RAINSKILLS_NO_BROWSER  Set to 1 to print the authorization URL without opening it
+  DSH_HOME               DeepSeek Harness home (default: ~/.dsh)
+  WORKBUDDY_CONFIG_DIR   WorkBuddy config home (default: ~/.workbuddy-ai)
 EOF
 }
 
@@ -298,6 +304,12 @@ rainskills_install_client_for_target() {
     pi)
       printf 'pi\n'
       ;;
+    dsh)
+      printf 'deepseek_harness\n'
+      ;;
+    workbuddy)
+      printf 'workbuddy\n'
+      ;;
     all)
       printf 'all\n'
       ;;
@@ -461,7 +473,7 @@ event = {
     "platform": platform,
     "control_mode": control_mode,
     "target": target,
-    "client": client if client in {"codex", "claude_code", "pi", "all", "both", "unknown"} else "unknown",
+    "client": client if client in {"codex", "claude_code", "pi", "deepseek_harness", "workbuddy", "all", "both", "unknown"} else "unknown",
     "eid": eid or None,
     "phase": None,
     "lifecycle_phase": phase,
@@ -518,7 +530,7 @@ initialize_rainskills_installation_reporting() {
       connect)
         RAINSKILLS_INSTALL_ACTION="connect"
         ;;
-      codex|claude|pi|all)
+      codex|claude|pi|dsh|workbuddy|all)
         target="$arg"
         ;;
     esac
@@ -816,12 +828,12 @@ parse_args() {
         ACTION="connect"
         shift
         ;;
-      claude|codex|pi|all)
+      claude|codex|pi|dsh|workbuddy|all)
         TARGET="$1"
         shift
         ;;
       openclaw)
-        die "macOS/Linux 安装器不再支持 OpenClaw，请使用 Codex、Claude Code 或 Pi Agent。"
+        die "macOS/Linux 安装器不再支持 OpenClaw，请使用 Codex、Claude Code、Pi Agent、DeepSeek Harness 或 WorkBuddy。"
         ;;
       --dest)
         [[ $# -ge 2 ]] || die "--dest 需要一个路径值"
@@ -909,7 +921,7 @@ assert_internal_connect_entry() {
   local target="" environment_kind="" console_origin="" mode=""
   while [[ $# -gt 0 ]]; do
     case "$1" in
-      codex|claude|pi|all)
+      codex|claude|pi|dsh|workbuddy|all)
         [[ -z "$target" ]] || return 1
         target="$1"
         shift
@@ -1015,10 +1027,12 @@ resolve_target() {
   log "  1) Codex"
   log "  2) Claude Code"
   log "  3) Pi Agent"
-  log "  4) 全部"
+  log "  4) DeepSeek Harness"
+  log "  5) WorkBuddy"
+  log "  6) 全部"
 
   while true; do
-    printf '请输入选项 [1-4]: '
+    printf '请输入选项 [1-6]: '
     read -r choice
     case "$choice" in
       1)
@@ -1033,12 +1047,20 @@ resolve_target() {
         TARGET="pi"
         return 0
         ;;
-      4|"")
+      4)
+        TARGET="dsh"
+        return 0
+        ;;
+      5)
+        TARGET="workbuddy"
+        return 0
+        ;;
+      6|"")
         TARGET="all"
         return 0
         ;;
       *)
-        log "请输入 1、2、3 或 4。"
+        log "请输入 1、2、3、4、5 或 6。"
         ;;
     esac
   done
@@ -1060,10 +1082,18 @@ collect_destinations() {
       pi)
         destinations+=("$HOME/.pi/agent/skills")
         ;;
+      dsh)
+        destinations+=("${DSH_HOME:-$HOME/.dsh}/skills")
+        ;;
+      workbuddy)
+        destinations+=("${WORKBUDDY_CONFIG_DIR:-$HOME/.workbuddy-ai}/skills")
+        ;;
       all)
         destinations+=("$HOME/.claude/skills")
         destinations+=("$HOME/.codex/skills")
         destinations+=("$HOME/.pi/agent/skills")
+        destinations+=("${DSH_HOME:-$HOME/.dsh}/skills")
+        destinations+=("${WORKBUDDY_CONFIG_DIR:-$HOME/.workbuddy-ai}/skills")
         ;;
       *)
         die "未知安装目标：$TARGET"

package/marketplace/rainskills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.27",
+  "version": "0.1.29",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",
@@ -13,6 +13,8 @@
     "rainbond",
     "codex",
     "claude-code",
+    "deepseek-harness",
+    "workbuddy",
     "skills",
     "installer"
   ]

package/marketplace/rainskills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.27",
+  "version": "0.1.29",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",
@@ -13,6 +13,8 @@
     "rainbond",
     "codex",
     "claude-code",
+    "deepseek-harness",
+    "workbuddy",
     "skills",
     "installer"
   ],

package/marketplace/rainskills/skills/rainskills/SKILL.md

@@ -9,12 +9,12 @@ This is the single marketplace entry for the complete Rainskills product. The in
 
 ## Initialize
 
-1. Detect the current host client and map it to exactly one supported installer target: Codex=`codex`, Claude Code=`claude`, or Pi Agent=`pi`. All three use the same installed Skills and protected local Rainskills CLI; Pi has no separate MCP adapter or generated extension. The macOS, Linux, and WSL installer intentionally does not support OpenClaw; report that limitation instead of invoking an unsupported target. Do not ask the user which supported client they are currently using. If the host cannot be determined reliably, omit the target and let the installer ask.
+1. Detect the current host client and map it to exactly one supported installer target: Codex=`codex`, Claude Code=`claude`, Pi Agent=`pi`, DeepSeek Harness=`dsh`, or WorkBuddy=`workbuddy`. All five use the same installed Skills and protected local Rainskills CLI; Pi and DeepSeek Harness have no separate MCP adapter or generated extension. DeepSeek Harness installs to `$DSH_HOME/skills` (default `~/.dsh/skills`). WorkBuddy installs to `$WORKBUDDY_CONFIG_DIR/skills` (default `~/.workbuddy-ai/skills`). The macOS, Linux, and WSL installer intentionally does not support OpenClaw; report that limitation instead of invoking an unsupported target. Do not ask the user which supported client they are currently using. If the host cannot be determined reliably, omit the target and let the installer ask.
 2. Resolve the directory containing this `SKILL.md`. On native Windows, if the adjacent `bin/rainskills.js` exists, run it by absolute path with the detected target in an attached interactive terminal: `node <skill-directory>/bin/rainskills.js <target>`. On macOS, Linux, or WSL, if the adjacent `install.sh` exists, run `bash <skill-directory>/install.sh <target>` the same way. Do not replace the installer with manual file copies.
 3. Keep stdin, stdout, and stderr attached. When `RAINSKILLS_USER_INPUT_REQUIRED` appears, pause for that installer choice. If the installer emits `rainskills.next-action.v1`, execute only its fixed `argv` through the same launcher; never evaluate output as a shell command. If the adjacent `bin/rainskills.js` exists, use it for fixed next actions; otherwise use the same versioned npm package fallback described below.
 4. Stay attached until every independent Skill is installed. Do not select, connect, or configure an application runtime during installation. In the user-facing response, output only the fixed completion message below.
 
-If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.27 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
+If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.29 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
 
 Skills-only 安装不需要 Node.js；CDN fallback 只负责安装 Skill 文件，不代表运行环境连接、应用部署或平台安装已经可执行。用户首次提出需要运行环境的动作时，对应业务 Skill 才检查 Node.js；固定 Rainskills launcher 需要 Node.js 18 或更高版本。缺失或版本过低时保留原始 intent 并停止，等待用户或 agent 明确同意安装或升级 Node.js，安装完成消息不得提前提示 Node.js。
 
@@ -48,7 +48,9 @@ Rainskills 安装完成，下一条消息即可直接使用。
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
-Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.27`）：
+DeepSeek Harness 和 WorkBuddy 也必须保持原命令附着直到退出；如果宿主把长命令转成持久终端或后台任务，只能轮询该原始命令句柄，不得另起 `runtime status` 推测授权结果。WorkBuddy 安装后若当前任务的 Skill 清单尚未刷新，在下一条业务动作前先刷新 Skill 列表或新建任务，不得退回内置 Sites 代替 Rainbond 部署。
+
+Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.29`）：
 
 - 状态：执行 `runtime status --json`。
 - 首次连接：执行 `runtime connect <target> --saas` 或 `runtime connect <target> --rainbond-url <Console origin>`。

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "rainskills",
-  "version": "0.1.27",
-  "description": "Interactive Rainbond skill installer for Codex, Claude Code, and Pi Agent",
+  "version": "0.1.29",
+  "description": "Interactive Rainbond skill installer for Codex, Claude Code, Pi Agent, DeepSeek Harness, and WorkBuddy",
   "license": "Apache-2.0",
   "homepage": "https://github.com/goodrain/rainskills#readme",
   "bugs": {
@@ -15,6 +15,8 @@
     "rainbond",
     "codex",
     "claude-code",
+    "deepseek-harness",
+    "workbuddy",
     "skills",
     "installer"
   ],
@@ -65,7 +67,7 @@
     "test:runtime-version": "node --test tests/runtime-version-sync.test.js",
     "test:runtime-contracts": "node scripts/sync-runtime-contracts.mjs --check",
     "test:auto-update": "node --test tests/auto-update.test.js",
-    "test:launcher": "node --test tests/console-origin.test.js tests/local-cli-installer.test.js tests/npx-launcher.test.js tests/runtime-state.test.js tests/single-runtime.test.js tests/single-runtime-cli.test.js tests/single-runtime-launcher.test.js tests/skill-manifest-builder.test.js",
+    "test:launcher": "node --test tests/console-origin.test.js tests/host-targets.test.js tests/local-cli-installer.test.js tests/npx-launcher.test.js tests/runtime-state.test.js tests/single-runtime.test.js tests/single-runtime-cli.test.js tests/single-runtime-launcher.test.js tests/skill-manifest-builder.test.js",
     "test:api-bridge": "node --test tests/api-bridge.test.js",
     "test:console-contract": "python3 tests/console_tool_contract_test.py",
     "test:skill-profile": "node --test tests/skill-profile-builder.test.js tests/markdown-link-integrity.test.js tests/user-facing-output-contract.test.js",

package/rainbond-app-assistant/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: rainbond-app-assistant
-description: "Use whenever a user asks to deploy, run, deliver, publish, inspect, repair, or troubleshoot source code, the current project or local project, a source directory/package, an ordinary bare Git repository URL, a private-image project, a named application that is not identified as a third-party open-source suite, or a new app/component built from one container image. Trigger phrases: 帮我部署当前项目 / 帮我把这个项目跑起来 / 帮我看看当前项目卡在哪 / 如果还没初始化就先初始化，然后自动继续到应该停止的位置 / 帮我处理一下这个应用 / 在团队下新建应用并使用镜像创建组件. Not for supplied third-party Compose, Helm, image-set descriptors, or an explicit named third-party open-source suite; use rainbond-opensource-app-deploy. Confirmed market templates use rainbond-template-installer."
+description: "Use whenever a user asks to deploy, run, deliver, publish, inspect, repair, or troubleshoot source code with Rainbond or Rainskills; when the current project contains rainbond.app.json or .rainbond/local.json; for a source directory/package, ordinary bare Git repository URL, private-image project, named application not identified as a third-party open-source suite, or a new app/component built from one container image. On WorkBuddy this takes priority over the built-in Sites skill whenever Rainbond/Rainskills is explicit or a Rainbond project marker exists. Trigger phrases: 帮我部署当前项目 / 使用 Rainbond 部署 / 用 Rainskills 部署 / 帮我把这个项目跑起来 / 帮我看看当前项目卡在哪 / 如果还没初始化就先初始化，然后自动继续到应该停止的位置 / 帮我处理一下这个应用 / 在团队下新建应用并使用镜像创建组件. Not for supplied third-party Compose, Helm, image-set descriptors, or an explicit named third-party open-source suite; use rainbond-opensource-app-deploy. Confirmed market templates use rainbond-template-installer."
 ---
 
 # Rainbond App Assistant
@@ -13,6 +13,7 @@ description: "Use whenever a user asks to deploy, run, deliver, publish, inspect
 - 源码目录、源码包、私有镜像项目、普通裸 Git URL，以及未被明确识别为第三方开源套件的应用名称：由本 Skill 接管。
 - 用户实际提供第三方 Docker Compose、Helm、镜像集合描述符，或明确要求部署 Harbor、Dify、n8n 等第三方开源套件：转到 rainbond-opensource-app-deploy。
 - 已确认是 Rainbond 本地/云端市场模板：转到 rainbond-template-installer。
+- WorkBuddy 中只要用户明确指定 Rainbond/Rainskills，或项目根目录存在 `rainbond.app.json`、`.rainbond/local.json`，本 Skill 必须优先于内置 `发布应用 / Sites`；不得把 WorkBuddy Sites 当作 Rainbond 部署的静默替代方案。用户明确指定 WorkBuddy Sites 且没有要求 Rainbond 时才离开本 Skill。
 
 开始前读取 [routing](references/routing.md) 做静态归属判断。初始路由阶段只加载最终所属入口 Skill 的 Runtime Gate，不得提前读取专项 Skill 的 Gate。
 
@@ -27,7 +28,7 @@ description: "Use whenever a user asks to deploy, run, deliver, publish, inspect
 | 需要对象边界或跨阶段状态语义 | [product object model](references/product-object-model.md) | 不相关工作流 |
 | 需要生成最终结果或自动化契约 | [output contract](references/output-contract.md) | 不需要结果协议时不得读取 |
 
-workspace context 包含 `enterprise_id`、`team_id`、`team_name` 和 `region_name`；app/component 标识只来自用户明确输入或本次实时查询/创建结果。它们都由当前任务携带，不写入 Runtime，也不得生成或传递 CLI 业务 operation ID、运行环境 ID 或 intent JSON。
+workspace context 包含 `enterprise_id`、`team_id`、`team_name` 和 `region_name`；`team_id` 可作为内部调用参数继续使用，但不得复制到用户可见的过程消息或最终结果中。app/component 标识只来自用户明确输入或本次实时查询/创建结果。它们都由当前任务携带，不写入 Runtime，也不得生成或传递 CLI 业务 operation ID、运行环境 ID 或 intent JSON。
 
 ## Runtime Gate
 
@@ -58,6 +59,7 @@ workspace context 包含 `enterprise_id`、`team_id`、`team_name` 和 `region_n
 - 成功：说明项目、运行环境、工作空间、应用、真实 Rainbond 页面/访问地址及本轮实际完成操作；无法确认的字段省略，禁止猜测。
 - 未完成：输出“部署失败。”、一句直接原因；仅在确有安全可执行方案时增加“解决办法”。
 - 默认不得展示内部对象、状态枚举、Skill/工具名、YAML、JSON 或英文编排标题。
+- 过程消息和最终结果中的工作空间一律用 `team_name` 展示，可连同 `region_name` 写成“工作空间 / 集群”；除非用户明确要求调试原始数据，不展示 `team_id`。
 - 用户明确要求结构化结果或自动化契约时，读取 [output contract](references/output-contract.md)，不得自行发明字段、枚举或状态。
 
 ## 停止条件

package/rainbond-app-assistant/references/runtime-gate.md

@@ -13,14 +13,16 @@ Canonical progressive-loading contract: `rainskills.skill-runtime-contract.v1`.
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
-`context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
+固定 contract 中的 `<target>` 必须替换为当前宿主：Codex=`codex`、Claude Code=`claude`、Pi Agent=`pi`、DeepSeek Harness=`dsh`、WorkBuddy=`workbuddy`。DeepSeek Harness 和 WorkBuddy 若返回持久终端或后台任务句柄，只轮询该原始句柄直到进程退出，不另起状态命令推测完成。
+
+`context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；其中 `team_id` 是后续平台调用的内部参数，不得复制到用户可见的过程消息或最终结果中。用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
 
 `required` 只声明要解析的维度，企业 ID 始终来自当前登录身份。用户明确给出的 team/region 必须放进 `hints` 做精确匹配；不得把企业名、team 名或选择对象作为顶层 `enterprise` / `workspace` 字段传入。多候选时只展示 CLI 返回的 label；用户选择后再次执行同一个无状态 `context resolve`，通过 `selection.option_id` 让 CLI 重新查询并验证当前候选，不写本地 context 状态。
 
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.27",
+  "package_version": "rainskills@0.1.29",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-app-assistant/references/workflow-rules.md

@@ -529,7 +529,7 @@
     反例（来自真实回归 case `cs_1779149681822_3u`，2026-05-19）：模型从 `rainbond_get_component_summary` 响应的 `recent_events` 段看到形如 `{"ID": 17740, "event_id": "...", "opt_type": "build-service"}`，直接把 `17740` 当成 `event_id` 传给 `rainbond_get_component_build_logs`，工具返回 `items: []`（找不到该 UUID 的日志）。正确做法：从同一 `recent_events[i].event_id` 字段取出 UUID 字符串，或调 `rainbond_get_component_events` 重查。
 35. **会话内部叙述纪律 + 内部 preflight 工具不要主动调**。下列四类是"内部会话状态"，对用户**无信息量**，禁止外漏到 assistant 可见消息：
     - **专项 Skill 手册加载过程**：这是当前任务的内部准备。不要说"我先加载 bootstrap 手册"、"手册已加载"或"skill ready"；读完直接进入下一个真实工具调用。
-    - **`rainbond_get_current_user`**：不得由 Agent 单独调用。`enterprise_id`、`team_id`、`team_name` 和 `region_name` 统一由受保护的 `context resolve` 命令无状态解析并由当前任务携带；只有 CLI 明确返回需要选择时才询问用户。
+    - **`rainbond_get_current_user`**：不得由 Agent 单独调用。`enterprise_id`、`team_id`、`team_name` 和 `region_name` 统一由受保护的 `context resolve` 命令无状态解析并由当前任务携带；`team_id` 可继续用于后续平台调用，但不得在过程消息或最终报告中展示。只有 CLI 明确返回需要选择时才询问用户，并且只展示名称标签。
     - **`rainbond_query_components` 同入参重复轮询**：服务端 30s 内的同 args 调用会走缓存；你**不要**在每个新 user turn 开头都"先查一下组件列表"。只有本次调用使用的 `enterprise_id`、`app_id` 和查询条件均未变化，且没有新的平台动作时，才可复用 priorTurnMessages 里的最近结果。
     - **规则推理过程 / Rainbond Tool 内部限制 / 分类决策叙述**：你内部基于哪条 Iron Law / hard rule / 推断信号做的决策、具体 Tool 签名 / 字段限制、对组件 / 服务的分类判断（"ClickHouse 是公认的列式分析数据库"这类），都属于内部状态，对用户**无信息量**。
 

package/rainbond-app-version-assistant/SKILL.md

@@ -25,6 +25,8 @@ description: "Use when a user explicitly asks for an existing Rainbond app versi
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
+固定 contract 中的 `<target>` 必须替换为当前宿主：Codex=`codex`、Claude Code=`claude`、Pi Agent=`pi`、DeepSeek Harness=`dsh`、WorkBuddy=`workbuddy`。DeepSeek Harness 和 WorkBuddy 若返回持久终端或后台任务句柄，只轮询该原始句柄直到进程退出，不另起状态命令推测完成。
+
 `context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
 
 `required` 只声明要解析的维度，企业 ID 始终来自当前登录身份。用户明确给出的 team/region 必须放进 `hints` 做精确匹配；不得把企业名、team 名或选择对象作为顶层 `enterprise` / `workspace` 字段传入。多候选时只展示 CLI 返回的 label；用户选择后再次执行同一个无状态 `context resolve`，通过 `selection.option_id` 让 CLI 重新查询并验证当前候选，不写本地 context 状态。
@@ -32,7 +34,7 @@ Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id`
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.27",
+  "package_version": "rainskills@0.1.29",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-delivery-verifier/SKILL.md

@@ -48,6 +48,8 @@ description: "Use only when the user explicitly asks for final delivery or acces
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
+固定 contract 中的 `<target>` 必须替换为当前宿主：Codex=`codex`、Claude Code=`claude`、Pi Agent=`pi`、DeepSeek Harness=`dsh`、WorkBuddy=`workbuddy`。DeepSeek Harness 和 WorkBuddy 若返回持久终端或后台任务句柄，只轮询该原始句柄直到进程退出，不另起状态命令推测完成。
+
 `context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
 
 `required` 只声明要解析的维度，企业 ID 始终来自当前登录身份。用户明确给出的 team/region 必须放进 `hints` 做精确匹配；不得把企业名、team 名或选择对象作为顶层 `enterprise` / `workspace` 字段传入。多候选时只展示 CLI 返回的 label；用户选择后再次执行同一个无状态 `context resolve`，通过 `selection.option_id` 让 CLI 重新查询并验证当前候选，不写本地 context 状态。
@@ -55,7 +57,7 @@ Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id`
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.27",
+  "package_version": "rainskills@0.1.29",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-env-sync/SKILL.md

@@ -25,6 +25,8 @@ description: "Use when a user explicitly asks to sync non-sensitive preview or p
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
+固定 contract 中的 `<target>` 必须替换为当前宿主：Codex=`codex`、Claude Code=`claude`、Pi Agent=`pi`、DeepSeek Harness=`dsh`、WorkBuddy=`workbuddy`。DeepSeek Harness 和 WorkBuddy 若返回持久终端或后台任务句柄，只轮询该原始句柄直到进程退出，不另起状态命令推测完成。
+
 `context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
 
 `required` 只声明要解析的维度，企业 ID 始终来自当前登录身份。用户明确给出的 team/region 必须放进 `hints` 做精确匹配；不得把企业名、team 名或选择对象作为顶层 `enterprise` / `workspace` 字段传入。多候选时只展示 CLI 返回的 label；用户选择后再次执行同一个无状态 `context resolve`，通过 `selection.option_id` 让 CLI 重新查询并验证当前候选，不写本地 context 状态。
@@ -32,7 +34,7 @@ Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id`
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.27",
+  "package_version": "rainskills@0.1.29",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-fullstack-bootstrap/SKILL.md

@@ -25,6 +25,8 @@ description: "Use only when the user explicitly asks to create the Rainbond app
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
+固定 contract 中的 `<target>` 必须替换为当前宿主：Codex=`codex`、Claude Code=`claude`、Pi Agent=`pi`、DeepSeek Harness=`dsh`、WorkBuddy=`workbuddy`。DeepSeek Harness 和 WorkBuddy 若返回持久终端或后台任务句柄，只轮询该原始句柄直到进程退出，不另起状态命令推测完成。
+
 `context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
 
 `required` 只声明要解析的维度，企业 ID 始终来自当前登录身份。用户明确给出的 team/region 必须放进 `hints` 做精确匹配；不得把企业名、team 名或选择对象作为顶层 `enterprise` / `workspace` 字段传入。多候选时只展示 CLI 返回的 label；用户选择后再次执行同一个无状态 `context resolve`，通过 `selection.option_id` 让 CLI 重新查询并验证当前候选，不写本地 context 状态。
@@ -32,7 +34,7 @@ Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id`
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.27",
+  "package_version": "rainskills@0.1.29",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-fullstack-troubleshooter/SKILL.md

@@ -48,6 +48,8 @@ description: "Use only when the user explicitly asks for a bounded build, runtim
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
+固定 contract 中的 `<target>` 必须替换为当前宿主：Codex=`codex`、Claude Code=`claude`、Pi Agent=`pi`、DeepSeek Harness=`dsh`、WorkBuddy=`workbuddy`。DeepSeek Harness 和 WorkBuddy 若返回持久终端或后台任务句柄，只轮询该原始句柄直到进程退出，不另起状态命令推测完成。
+
 `context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
 
 `required` 只声明要解析的维度，企业 ID 始终来自当前登录身份。用户明确给出的 team/region 必须放进 `hints` 做精确匹配；不得把企业名、team 名或选择对象作为顶层 `enterprise` / `workspace` 字段传入。多候选时只展示 CLI 返回的 label；用户选择后再次执行同一个无状态 `context resolve`，通过 `selection.option_id` 让 CLI 重新查询并验证当前候选，不写本地 context 状态。
@@ -55,7 +57,7 @@ Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id`
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.27",
+  "package_version": "rainskills@0.1.29",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-opensource-app-deploy/SKILL.md

@@ -30,7 +30,7 @@ description: "Use when the user supplies a third-party Docker Compose file/conte
 | workspace context 已解析，需要建模、部署、排障或交付 app/component | 读取 [deployment workflow](references/deployment-workflow.md) |
 | 新鲜证据命中已知部署故障模式 | 再读取 [failure-mode playbook](references/failure-mode-playbook.md) |
 
-正确顺序是：先验证官方部署清单，再加载 Runtime Gate。这里只允许加载本 Skill 的 Gate。workspace context 包含 `enterprise_id`、`team_id`、`team_name` 和 `region_name`；app/component 标识只来自用户明确输入或本次实时查询/创建结果。它们都由当前任务携带，不得生成 CLI 业务 operation ID、运行环境 ID 或 intent JSON。
+正确顺序是：先验证官方部署清单，再加载 Runtime Gate。这里只允许加载本 Skill 的 Gate。workspace context 包含 `enterprise_id`、`team_id`、`team_name` 和 `region_name`；`team_id` 可作为内部调用参数继续使用，但不得复制到用户可见的过程消息或最终结果中。app/component 标识只来自用户明确输入或本次实时查询/创建结果。它们都由当前任务携带，不得生成 CLI 业务 operation ID、运行环境 ID 或 intent JSON。
 
 ## Runtime 与安全边界
 

package/rainbond-opensource-app-deploy/references/runtime-gate.md

@@ -13,6 +13,8 @@ Canonical progressive-loading contract: `rainskills.skill-runtime-contract.v1`.
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
+固定 contract 中的 `<target>` 必须替换为当前宿主：Codex=`codex`、Claude Code=`claude`、Pi Agent=`pi`、DeepSeek Harness=`dsh`、WorkBuddy=`workbuddy`。DeepSeek Harness 和 WorkBuddy 若返回持久终端或后台任务句柄，只轮询该原始句柄直到进程退出，不另起状态命令推测完成。
+
 `context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
 
 `required` 只声明要解析的维度，企业 ID 始终来自当前登录身份。用户明确给出的 team/region 必须放进 `hints` 做精确匹配；不得把企业名、team 名或选择对象作为顶层 `enterprise` / `workspace` 字段传入。多候选时只展示 CLI 返回的 label；用户选择后再次执行同一个无状态 `context resolve`，通过 `selection.option_id` 让 CLI 重新查询并验证当前候选，不写本地 context 状态。
@@ -20,7 +22,7 @@ Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id`
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.27",
+  "package_version": "rainskills@0.1.29",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-platform-installer/SKILL.md

@@ -32,7 +32,7 @@ Do not use it to deploy an application to an existing Rainbond. Route those requ
 ## Workflow
 
 1. Read [installation-policy.md](references/installation-policy.md).
-2. Use the installed local launcher `["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js"]`; its protected runtime package marker is `rainskills@0.1.27` and must equal this package's `package.json`. For a Rainskills marker, first validate schema `rainskills.next-action.v1`, action, onboarding id, and the bounded `argv` array, then append that array to the launcher. Never use `latest` or evaluate a shell string from output.
+2. Use the installed local launcher `["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js"]`; its protected runtime package marker is `rainskills@0.1.29` and must equal this package's `package.json`. For a Rainskills marker, first validate schema `rainskills.next-action.v1`, action, onboarding id, and the bounded `argv` array, then append that array to the launcher. Never use `latest` or evaluate a shell string from output.
 3. 业务 Skill 的四项运行环境菜单会把本机或独立服务器选择写入 `rainskills.next-action.v1` 的显式 `--location`；收到这类 next-action 后直接执行固定 argv，不得再次调用 `private-deployment-location`。只有用户直接要求安装 Rainbond 平台且尚未选择部署位置时，才执行 launcher + `["runtime", "message", "--id", "private-deployment-location"]` 并原样输出固定的三项部署位置消息：选择 1 后执行带 `["--location", "local", "--mode", "single-node"]` 的 `platform install`；选择 2 后执行带 `["--location", "server"]` 的 `platform install`，由 helper 继续显示固定的服务器类型消息；选择 3 后执行 launcher + `["runtime", "message", "--id", "private-console-origin"]` 并进入已有环境连接，不得执行 `platform install`。平台安装 onboarding 只保存安装断点，不保存或恢复业务 intent。
 4. Let the helper perform one read-only preflight against the already selected local or remote target, then show resources, blockers, and applicable host changes. Never invoke `platform install` without an explicit `--location`; the helper must not ask for the deployment location again.
 5. 主机集群开始前必须获得 explicit confirmation，并使用受限 AI 交接：首次调用在固定安装 argv 后追加 `--agent-handoff`，记录该子进程会话；用户确认后，使用相同固定 argv 追加 `--agent-handoff --yes` 一次。不得向等待进程写入 `y`、不得启动第二个竞争安装、不得 `kill` 安装进程，也不得让用户复制完整安装或恢复命令。用户取消时，仅使用同一 argv 追加 `--agent-handoff --cancel`；它只能清除匹配的待确认状态，不能建立 SSH 连接或修改服务器。

package/rainbond-platform-installer/scripts/auto-update.js

@@ -8,6 +8,10 @@ const path = require("node:path");
 const tls = require("node:tls");
 
 const { createSecureStateStore } = require("./secure-state.js");
+const {
+  destinationsForHostTarget,
+  isHostTarget,
+} = require("./host-targets.js");
 
 const OFFICIAL_LATEST_URL = "https://registry.npmjs.org/rainskills/latest";
 const OFFICIAL_REGISTRY = "https://registry.npmjs.org/";
@@ -735,7 +739,7 @@ function buildStableUpdateEnvironment(source, { fromVersion, targetVersion, regi
   };
 }
 
-function resolveInstallDestinations(args, home = os.homedir()) {
+function resolveInstallDestinations(args, home = os.homedir(), env = process.env) {
   if (
     !Array.isArray(args)
     || args.includes("--help")
@@ -745,21 +749,14 @@ function resolveInstallDestinations(args, home = os.homedir()) {
   let target = "all";
   let customDestination = "";
   for (let index = 0; index < args.length; index += 1) {
-    if (["codex", "claude", "pi", "all"].includes(args[index])) target = args[index];
+    if (isHostTarget(args[index])) target = args[index];
     if (args[index] === "--dest" && typeof args[index + 1] === "string") {
       customDestination = path.resolve(args[index + 1]);
       index += 1;
     }
   }
   if (customDestination) return [customDestination];
-  if (target === "codex") return [path.join(home, ".codex", "skills")];
-  if (target === "claude") return [path.join(home, ".claude", "skills")];
-  if (target === "pi") return [path.join(home, ".pi", "agent", "skills")];
-  return [
-    path.join(home, ".claude", "skills"),
-    path.join(home, ".codex", "skills"),
-    path.join(home, ".pi", "agent", "skills"),
-  ];
+  return destinationsForHostTarget(target, home, env);
 }
 
 function recordSkillInstallDestinations(args, {

package/rainbond-platform-installer/scripts/host-targets.js

@@ -0,0 +1,61 @@
+"use strict";
+
+const path = require("node:path");
+
+const HOST_TARGETS = Object.freeze([
+  "codex",
+  "claude",
+  "pi",
+  "dsh",
+  "workbuddy",
+  "all",
+]);
+const HOST_TARGET_SET = new Set(HOST_TARGETS);
+
+function isHostTarget(value) {
+  return HOST_TARGET_SET.has(value);
+}
+
+function telemetryClientForTarget(target) {
+  if (target === "claude") return "claude_code";
+  if (target === "dsh") return "deepseek_harness";
+  if (isHostTarget(target)) return target;
+  return "unknown";
+}
+
+function dshSkillsDirectory(home, env = process.env) {
+  const dshHome = typeof env.DSH_HOME === "string" && env.DSH_HOME.trim()
+    ? env.DSH_HOME.trim()
+    : path.join(home, ".dsh");
+  return path.join(path.resolve(dshHome), "skills");
+}
+
+function workBuddySkillsDirectory(home, env = process.env) {
+  const configHome = typeof env.WORKBUDDY_CONFIG_DIR === "string"
+    && env.WORKBUDDY_CONFIG_DIR.trim()
+    ? env.WORKBUDDY_CONFIG_DIR.trim()
+    : path.join(home, ".workbuddy-ai");
+  return path.join(path.resolve(configHome), "skills");
+}
+
+function destinationsForHostTarget(target, home, env = process.env) {
+  const destinations = {
+    claude: path.join(home, ".claude", "skills"),
+    codex: path.join(home, ".codex", "skills"),
+    pi: path.join(home, ".pi", "agent", "skills"),
+    dsh: dshSkillsDirectory(home, env),
+    workbuddy: workBuddySkillsDirectory(home, env),
+  };
+  if (target === "all") return Object.values(destinations);
+  if (Object.hasOwn(destinations, target)) return [destinations[target]];
+  throw new Error(`未知安装目标：${target}`);
+}
+
+module.exports = {
+  HOST_TARGETS,
+  destinationsForHostTarget,
+  dshSkillsDirectory,
+  isHostTarget,
+  telemetryClientForTarget,
+  workBuddySkillsDirectory,
+};

package/rainbond-platform-installer/scripts/installed-version.js

@@ -1,5 +1,5 @@
 "use strict";
 
 module.exports = Object.freeze({
-  version: "0.1.27",
+  version: "0.1.29",
 });

package/rainbond-platform-installer/scripts/platform-installer.js

@@ -30,6 +30,7 @@ const {
   verifyRecoveryBundle,
 } = require("./windows-platform.js");
 const { createLifecycleTelemetry } = require("./telemetry.js");
+const { isHostTarget } = require("./host-targets.js");
 const { installHostCluster } = require("./host-cluster-installer.js");
 const { installExistingKubernetes } = require("./existing-kubernetes-installer.js");
 
@@ -249,7 +250,7 @@ function readOnboardingState(filePath, expectedOperationId, stateStore = secureS
   if (!UUID_PATTERN.test(state.operation_id || "")) {
     throw new Error("状态文件中的 operation_id 无效");
   }
-  if (!["codex", "claude", "pi", "all"].includes(state.target)) {
+  if (!isHostTarget(state.target)) {
     throw new Error("状态文件中的安装目标无效");
   }
   if (state.deployment_mode !== "self-hosted") {

package/rainbond-platform-installer/scripts/runtime-state.js

@@ -7,12 +7,13 @@ const { isDeepStrictEqual } = require("node:util");
 
 const { createSecureStateStore } = require("./secure-state.js");
 const { validateMcp } = require("./windows-client-config.js");
+const { HOST_TARGETS } = require("./host-targets.js");
 
 const RUNTIME_SCHEMA = "rainskills.runtime-connection.v1";
 const STATUS_SCHEMA = "rainskills.runtime-status.v1";
 const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 const STATES = new Set(["not_started", "connecting", "connected"]);
-const TARGET_CLIENTS = new Set(["codex", "claude", "pi", "all"]);
+const TARGET_CLIENTS = new Set(HOST_TARGETS);
 const ENVIRONMENT_KINDS = new Set(["saas", "private"]);
 const RUNTIME_STATE_LOCK_ID = "cf1c1a85-63e7-45f8-9dd5-20ea1d511c48";
 const STATE_FIELDS = new Set([

package/rainbond-platform-installer/scripts/telemetry.js

@@ -8,7 +8,9 @@ const path = require("node:path");
 const DEFAULT_REPORT_URL = "https://log.rainbond.com/api/rainskills/lifecycle-events";
 const DEFAULT_LEGACY_REPORT_URL = "https://log.rainbond.com/api/rainskills/installations";
 const SCHEMA = "rainskills.lifecycle-event.v1";
-const CLIENTS = new Set(["codex", "claude_code", "both", "unknown"]);
+const CLIENTS = new Set([
+  "codex", "claude_code", "pi", "deepseek_harness", "workbuddy", "all", "both", "unknown",
+]);
 const PLATFORMS = new Set(["darwin", "linux", "win32"]);
 const CONTROL_MODES = new Set(["posix", "wsl", "windows-native"]);
 const TARGETS = new Set(["local-linux", "local-macos", "local-windows", "remote-linux"]);

package/rainbond-platform-installer/scripts/windows-onboarding.js

@@ -18,6 +18,11 @@ const {
 } = require("./windows-auth.js");
 const { validateMcp } = require("./windows-client-config.js");
 const { createLifecycleTelemetry } = require("./telemetry.js");
+const {
+  destinationsForHostTarget,
+  isHostTarget,
+  telemetryClientForTarget,
+} = require("./host-targets.js");
 
 const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 const CONTROL_MODES = new Set(["windows-native", "wsl", "posix"]);
@@ -82,7 +87,7 @@ function parseWindowsInstallerArgs(argv) {
 
   for (let index = 0; index < argv.length; index += 1) {
     const argument = argv[index];
-    if (["codex", "claude", "pi", "all"].includes(argument)) {
+    if (isHostTarget(argument)) {
       options.target = argument;
     } else if (argument === "--dest") {
       options.customDest = requireValue(argv, index, argument);
@@ -117,18 +122,8 @@ function parseWindowsInstallerArgs(argv) {
   return options;
 }
 
-function destinationsForTarget(target, home) {
-  if (target === "codex") return [path.join(home, ".codex", "skills")];
-  if (target === "claude") return [path.join(home, ".claude", "skills")];
-  if (target === "pi") return [path.join(home, ".pi", "agent", "skills")];
-  if (target === "all") {
-    return [
-      path.join(home, ".claude", "skills"),
-      path.join(home, ".codex", "skills"),
-      path.join(home, ".pi", "agent", "skills"),
-    ];
-  }
-  throw new Error(`未知安装目标：${target}`);
+function destinationsForTarget(target, home, env = process.env) {
+  return destinationsForHostTarget(target, home, env);
 }
 
 function validateSkillDirectory(directory) {
@@ -294,7 +289,7 @@ function createOnboardingCheckpoint({
   stateStore,
 }) {
   if (!UUID_PATTERN.test(operationId)) throw new Error("operation id 不是有效的 UUID");
-  if (!["codex", "claude", "pi", "all"].includes(target)) throw new Error("安装目标无效");
+  if (!isHostTarget(target)) throw new Error("安装目标无效");
   const controlDistro = validateControl(control);
   const store = stateStore || (
     process.platform === "win32"
@@ -367,7 +362,7 @@ async function authorizeAndConfigure({
       platform: "win32",
       control_mode: process.env.RAINSKILLS_TELEMETRY_CONTROL_MODE || "windows-native",
       target: process.env.RAINSKILLS_TELEMETRY_TARGET || "local-windows",
-      client: target,
+      client: telemetryClientForTarget(target),
       action: "install",
     },
   });
@@ -450,7 +445,7 @@ async function authorizeAndConfigure({
     });
   }
 
-  if (!["codex", "claude", "pi", "all"].includes(target)) throw new Error("安装目标无效");
+  if (!isHostTarget(target)) throw new Error("安装目标无效");
   const cliUrl = `${baseUrl}/console/mcp/rainskills/api/query`;
   telemetry.record({
     lifecycle_phase: "configure_cli",
@@ -511,13 +506,24 @@ async function installLocalCli({ packageRoot, home }) {
 async function promptTarget() {
   const terminal = readline.createInterface({ input: stdin, output: stdout });
   try {
-    stdout.write("请选择要安装和配置的平台：\n  1) Codex\n  2) Claude Code\n  3) 两者都要\n");
+    stdout.write(
+      "请选择要安装和配置的平台：\n"
+      + "  1) Codex\n"
+      + "  2) Claude Code\n"
+      + "  3) Pi Agent\n"
+      + "  4) DeepSeek Harness\n"
+      + "  5) WorkBuddy\n"
+      + "  6) 全部\n"
+    );
     for (;;) {
-      const answer = (await terminal.question("请输入选项 [1-3]: ")).trim();
+      const answer = (await terminal.question("请输入选项 [1-6]: ")).trim();
       if (answer === "1") return "codex";
       if (answer === "2") return "claude";
-      if (answer === "" || answer === "3") return "all";
-      stdout.write("请输入 1、2 或 3。\n");
+      if (answer === "3") return "pi";
+      if (answer === "4") return "dsh";
+      if (answer === "5") return "workbuddy";
+      if (answer === "" || answer === "6") return "all";
+      stdout.write("请输入 1、2、3、4、5 或 6。\n");
     }
   } finally {
     terminal.close();
@@ -590,7 +596,7 @@ async function resolveDeployment(options, {
 }
 
 function usage() {
-  stdout.write("Usage: npx rainskills [codex|claude|pi|all] [options]\n");
+  stdout.write("Usage: npx rainskills [codex|claude|pi|dsh|workbuddy|all] [options]\n");
 }
 
 async function main(argv, dependencies = {}) {
@@ -600,6 +606,7 @@ async function main(argv, dependencies = {}) {
     return { status: "help" };
   }
   const home = dependencies.home || os.homedir();
+  const environment = dependencies.env || process.env;
   const packageRoot = dependencies.packageRoot || path.resolve(__dirname, "..", "..");
   const target = options.target || (
     options.nonInteractive || !stdin.isTTY
@@ -608,7 +615,7 @@ async function main(argv, dependencies = {}) {
   );
   const destinations = options.customDest
     ? [path.resolve(options.customDest)]
-    : destinationsForTarget(target, home);
+    : destinationsForTarget(target, home, environment);
   const skills = discoverSkills(packageRoot);
   const logger = dependencies.logger || ((message) => stdout.write(`${message}\n`));
   const detailLogger = options.verbose ? logger : () => {};

package/rainbond-platform-query/SKILL.md

@@ -16,6 +16,8 @@ description: Use for a user-requested, read-only Rainbond platform query about t
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
+固定 contract 中的 `<target>` 必须替换为当前宿主：Codex=`codex`、Claude Code=`claude`、Pi Agent=`pi`、DeepSeek Harness=`dsh`、WorkBuddy=`workbuddy`。DeepSeek Harness 和 WorkBuddy 若返回持久终端或后台任务句柄，只轮询该原始句柄直到进程退出，不另起状态命令推测完成。
+
 `context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
 
 `required` 只声明要解析的维度，企业 ID 始终来自当前登录身份。用户明确给出的 team/region 必须放进 `hints` 做精确匹配；不得把企业名、team 名或选择对象作为顶层 `enterprise` / `workspace` 字段传入。多候选时只展示 CLI 返回的 label；用户选择后再次执行同一个无状态 `context resolve`，通过 `selection.option_id` 让 CLI 重新查询并验证当前候选，不写本地 context 状态。
@@ -23,7 +25,7 @@ Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id`
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.27",
+  "package_version": "rainskills@0.1.29",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-project-init/SKILL.md

@@ -25,6 +25,8 @@ description: "Use only when the user explicitly asks to initialize or link a loc
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
+固定 contract 中的 `<target>` 必须替换为当前宿主：Codex=`codex`、Claude Code=`claude`、Pi Agent=`pi`、DeepSeek Harness=`dsh`、WorkBuddy=`workbuddy`。DeepSeek Harness 和 WorkBuddy 若返回持久终端或后台任务句柄，只轮询该原始句柄直到进程退出，不另起状态命令推测完成。
+
 `context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
 
 `required` 只声明要解析的维度，企业 ID 始终来自当前登录身份。用户明确给出的 team/region 必须放进 `hints` 做精确匹配；不得把企业名、team 名或选择对象作为顶层 `enterprise` / `workspace` 字段传入。多候选时只展示 CLI 返回的 label；用户选择后再次执行同一个无状态 `context resolve`，通过 `selection.option_id` 让 CLI 重新查询并验证当前候选，不写本地 context 状态。
@@ -32,7 +34,7 @@ Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id`
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.27",
+  "package_version": "rainskills@0.1.29",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-template-installer/SKILL.md

@@ -25,6 +25,8 @@ description: "Use when the user explicitly asks to install a local or cloud Rain
 
 Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id` 反复调用 `write_stdin`（空输入轮询），直到工具返回 `exit_code`。连接器输出 `[RAINSKILLS_AGENT_WAIT_REQUIRED:runtime-connect]` 后进入上述轮询；看到 `[RAINSKILLS_AGENT_WAIT_COMPLETE:runtime-connect]` 后仍须继续轮询，直到取得退出码和最终 JSON。
 
+固定 contract 中的 `<target>` 必须替换为当前宿主：Codex=`codex`、Claude Code=`claude`、Pi Agent=`pi`、DeepSeek Harness=`dsh`、WorkBuddy=`workbuddy`。DeepSeek Harness 和 WorkBuddy 若返回持久终端或后台任务句柄，只轮询该原始句柄直到进程退出，不另起状态命令推测完成。
+
 `context resolve` 是无状态调用：单一工作空间直接返回上下文，多个候选返回组合选项；用户选择后由当前任务直接携带 team/region 参数，不执行 `context select`，不写本地 operation。所有可变 `call` 仍需先取得 confirmation ID，再以完全相同的输入追加 `--confirm` 执行一次。
 
 `required` 只声明要解析的维度，企业 ID 始终来自当前登录身份。用户明确给出的 team/region 必须放进 `hints` 做精确匹配；不得把企业名、team 名或选择对象作为顶层 `enterprise` / `workspace` 字段传入。多候选时只展示 CLI 返回的 label；用户选择后再次执行同一个无状态 `context resolve`，通过 `selection.option_id` 让 CLI 重新查询并验证当前候选，不写本地 context 状态。
@@ -32,7 +34,7 @@ Codex 中命令工具一旦返回 `session_id`，必须立即对该 `session_id`
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.27",
+  "package_version": "rainskills@0.1.29",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",