rainskills 0.1.34 → 0.1.35

package/README.md

@@ -247,7 +247,7 @@ node ~/.rainbond/lib/rainskills/bin/rainskills.js platform install --onboarding-
 
 Rainskills 会在用户下一次发起业务动作时，由本地运行时立即返回环境查询结果，并另行启动后台任务静默检查更新。更新只跟随 npm `latest` 指向的正式版。当前版本是 RC 或其他预发布版本时不会查询、不会自动升级；npm 上的新 RC 版本也不参与正式版自动升级。
 
-发现更高的正式版后，后台任务只委托到经过校验的精确版本，例如 `rainskills@0.1.34`，不会执行浮动的 `@latest` 业务代码。新版本原子刷新已经安装的 Rainskills Skills；当前业务继续使用启动时已经加载的版本，最迟从下一条新任务开始使用新版。npm 超时、版本检查失败、安装位置不安全或文件迁移失败时会保留旧版本，且不会阻塞或改变当前操作。
+发现更高的正式版后，后台任务只委托到经过校验的精确版本，例如 `rainskills@0.1.35`，不会执行浮动的 `@latest` 业务代码。新版本原子刷新已经安装的 Rainskills Skills；当前业务继续使用启动时已经加载的版本，最迟从下一条新任务开始使用新版。npm 超时、版本检查失败、安装位置不安全或文件迁移失败时会保留旧版本，且不会阻塞或改变当前操作。
 
 升级只更新 Rainskills 自身，不触发 Rainbond 安装、运行环境选择、登录授权或重新对接，也不会新增 Agent MCP 配置。更新内容仅包括 Skills 和本地 CLI。原始业务操作会继续执行；只有该业务操作本身需要运行环境时，才按既有门禁检查当前连接。可用连接直接复用，401 只重新授权一次，403 立即停止，从未连接过运行环境时才进入环境选择。
 

package/SKILL.md

@@ -54,7 +54,7 @@ Hermes Agent 中必须使用 `terminal` 以 `background=true` 启动授权命令
 
 DeepSeek Harness 和 WorkBuddy 也必须保持原命令附着直到退出；如果宿主把长命令转成持久终端或后台任务，只能轮询该原始命令句柄，不得另起 `runtime status` 推测授权结果。WorkBuddy 安装后若当前任务的 Skill 清单尚未刷新，在下一条业务动作前先刷新 Skill 列表或新建任务，不得退回内置 Sites 代替 Rainbond 部署。
 
-Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.34`）：
+Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.35`）：
 
 - 状态：执行 `runtime status --json`。
 - 首次连接：执行 `runtime connect <target> --saas` 或 `runtime connect <target> --rainbond-url <Console origin>`。

package/bin/rainskills-tools.js

@@ -474,7 +474,7 @@ function createBridgeTelemetry(config) {
 }
 
 async function executeWithUsageTelemetry(command, config) {
-  const tracksUsage = command.command === "read" || command.command === "call";
+  const tracksUsage = commandTracksBusinessUsage(command);
   const telemetry = tracksUsage ? createBridgeTelemetry(config) : null;
   if (telemetry) await telemetry.flushPending(3).catch(() => {});
   try {
@@ -499,6 +499,10 @@ async function executeWithUsageTelemetry(command, config) {
   }
 }
 
+function commandTracksBusinessUsage(command) {
+  return command?.command === "read" || command?.command === "call";
+}
+
 function loadSkillBinding(config, skillId, rootSkillId) {
   const target = skillManifestPath(config);
   let manifest;
@@ -1451,6 +1455,7 @@ module.exports = {
   CATALOG_TTL_MS,
   CLI_VERSION,
   loadConfig,
+  commandTracksBusinessUsage,
   executePackageUpload,
   packageUploadEnvironment,
   parseCommand,

package/bin/rainskills.js

@@ -252,6 +252,7 @@ async function runBuiltin(args, {
   credentialEnvironment = process.env,
   credentialPersister,
   connectedCredentialReader,
+  resultTelemetryFactory,
 } = {}) {
   const getSingleRuntimeStore = () => singleRuntimeStore || require(
     "../rainbond-platform-installer/scripts/single-runtime.js"
@@ -445,6 +446,27 @@ async function runBuiltin(args, {
       intent: null,
       operation_id: operationId,
     };
+    const resultTelemetry = (() => {
+      try {
+        const factory = resultTelemetryFactory || require(
+          "../rainbond-platform-installer/scripts/result-telemetry.js"
+        ).createResultTelemetry;
+        return factory({
+          agentType: options.targetClient,
+          packageVersion: require("../package.json").version,
+        });
+      } catch {
+        return null;
+      }
+    })();
+    const reportRuntimeConnection = async (status, details) => {
+      try {
+        const result = resultTelemetry?.recordRuntimeConnect?.(status, details);
+        await result?.delivery?.catch(() => false);
+      } catch {
+        // Telemetry must never change authorization or connection behavior.
+      }
+    };
     manager.startConnecting(connection, { replaceExisting: true });
     try {
       const invocation = runtimeConnectionInvocation(options, inspection.origin);
@@ -490,15 +512,30 @@ async function runBuiltin(args, {
         manager.abortConnecting(connection);
       }
       write(`${JSON.stringify(runtimeConnectRetryAction(options, inspection.origin))}\n`);
+      await reportRuntimeConnection("failed", {
+        environment_kind: connection.environment_kind,
+        error_stage: "authorization",
+        error_code: "authorization_failed",
+      });
       throw error;
     }
     let storedRuntime = getSingleRuntimeStore().read();
     if (!storedRuntime || storedRuntime.console_origin !== inspection.origin) {
       if (!connectedCredentialReader) {
+        await reportRuntimeConnection("failed", {
+          environment_kind: connection.environment_kind,
+          error_stage: "verification",
+          error_code: "verification_failed",
+        });
         throw new Error("runtime connect 未写入唯一运行环境凭据");
       }
       const credential = await connectedCredentialReader(inspection.origin);
       if (!credential || credential.origin !== inspection.origin) {
+        await reportRuntimeConnection("failed", {
+          environment_kind: connection.environment_kind,
+          error_stage: "verification",
+          error_code: "verification_failed",
+        });
         throw new Error("运行环境凭据与已验证 Console origin 不匹配");
       }
       getSingleRuntimeStore().write({
@@ -510,8 +547,16 @@ async function runBuiltin(args, {
       storedRuntime = getSingleRuntimeStore().read();
     }
     if (!storedRuntime || storedRuntime.console_origin !== inspection.origin) {
+      await reportRuntimeConnection("failed", {
+        environment_kind: connection.environment_kind,
+        error_stage: "verification",
+        error_code: "verification_failed",
+      });
       throw new Error("唯一运行环境凭据与已连接 Console origin 不匹配");
     }
+    await reportRuntimeConnection("success", {
+      environment_kind: connection.environment_kind,
+    });
     write(`${JSON.stringify({
       schema: "rainskills.runtime-connect-result.v1",
       state: "connected",

package/install.sh

@@ -423,6 +423,14 @@ rainskills_v2_execution_environment() {
   fi
 }
 
+rainskills_v2_environment_kind() {
+  case "$DEPLOYMENT_MODE_INPUT" in
+    saas) printf 'saas\n' ;;
+    self-hosted) printf 'private\n' ;;
+    *) return 1 ;;
+  esac
+}
+
 rainskills_v2_error_stage() {
   case "${RAINSKILLS_INSTALL_FAILURE_STAGE:-install}" in
     bootstrap) printf 'preflight\n' ;;
@@ -453,6 +461,7 @@ report_rainskills_v2_event() {
   local agent="${3:-}"
   local error_stage="${4:-}"
   local error_code="${5:-}"
+  local environment_kind="${6:-}"
   rainskills_v2_enabled || return 0
   [[ -n "${RAINSKILLS_TELEMETRY_INSTALLATION_ID:-}" ]] || return 0
   command -v curl >/dev/null 2>&1 || return 0
@@ -474,6 +483,7 @@ report_rainskills_v2_event() {
       "$status" \
       "$error_stage" \
       "$error_code" \
+      "$environment_kind" \
       "$telemetry_dir" <<'PY'
 import datetime
 import json
@@ -483,10 +493,10 @@ import time
 import uuid
 
 (event_type, installation_id, attempt_id, package_version, action, agent,
- os_type, os_arch, execution_environment, status, error_stage, error_code,
+ os_type, os_arch, execution_environment, status, error_stage, error_code, environment_kind,
  telemetry_dir) = sys.argv[1:]
 event = {
-    "schema": "rainskills.telemetry-event.v2",
+    "schema": "rainskills.telemetry-event.v3" if event_type == "runtime_connect_result" else "rainskills.telemetry-event.v2",
     "event_id": str(uuid.uuid4()),
     "event_type": event_type,
     "installation_id": installation_id,
@@ -505,6 +515,8 @@ if event_type == "install_result":
     })
 elif event_type == "agent_config_result":
     event.update({"agent_type": agent, "status": status})
+elif event_type == "runtime_connect_result":
+    event.update({"agent_type": agent, "environment_kind": environment_kind, "status": status})
 if status == "failed":
     event["error_stage"] = error_stage
     event["error_code"] = error_code
@@ -555,6 +567,27 @@ PY
   ) &
 }
 
+report_rainskills_runtime_connect_result() {
+  local status="$1"
+  local environment_kind
+  environment_kind="$(rainskills_v2_environment_kind 2>/dev/null || true)"
+  [[ -n "$environment_kind" ]] || return 0
+  report_rainskills_v2_event \
+    "runtime_connect_result" \
+    "$status" \
+    "$RAINSKILLS_INSTALL_CLIENT" \
+    "$([[ "$status" == "failed" ]] && rainskills_v2_error_stage || true)" \
+    "$([[ "$status" == "failed" ]] && rainskills_v2_error_code || true)" \
+    "$environment_kind"
+}
+
+report_rainskills_runtime_connect_failure_if_applicable() {
+  [[ "$ACTION" != "connect" ]] || return 0
+  case "$RAINSKILLS_INSTALL_FAILURE_STAGE" in
+    authorization|verification) report_rainskills_runtime_connect_result "failed" ;;
+  esac
+}
+
 record_rainskills_v2_configured_agent() {
   local agent
   agent="$(rainskills_v2_agent "$1")"
@@ -938,6 +971,7 @@ report_unhandled_rainskills_installation_failure() {
         "${BASH_SUBSHELL:-0}" -eq 0 && \
         "$RAINSKILLS_V2_TERMINAL_REPORTED" -eq 0 ]]; then
     RAINSKILLS_V2_TERMINAL_REPORTED=1
+    report_rainskills_runtime_connect_failure_if_applicable
     if [[ -n "$RAINSKILLS_V2_CURRENT_AGENT" ]]; then
       report_rainskills_v2_event \
         "agent_config_result" \
@@ -1037,6 +1071,7 @@ handle_installer_exit() {
 die() {
   if [[ "${BASH_SUBSHELL:-0}" -eq 0 && "$RAINSKILLS_V2_TERMINAL_REPORTED" -eq 0 ]]; then
     RAINSKILLS_V2_TERMINAL_REPORTED=1
+    report_rainskills_runtime_connect_failure_if_applicable
     if [[ -n "$RAINSKILLS_V2_CURRENT_AGENT" ]]; then
       report_rainskills_v2_event \
         "agent_config_result" \
@@ -2914,6 +2949,7 @@ do_refresh() {
 
   export RAINBOND_JWT="$token"
   write_token_file "$token" "$base_url"
+  report_rainskills_runtime_connect_result "success"
   set_rainskills_failure_context "configuration" "cli_configuration_failed"
   report_rainskills_lifecycle_event "configure_cli" "install_cli" "configure_cli" "started"
   install_local_cli
@@ -2999,6 +3035,7 @@ configure_runtime_connection() {
       || die "runtime connect 凭据安全写入失败。"
   else
     write_token_file "$token" "$base_url"
+    report_rainskills_runtime_connect_result "success"
   fi
 
   set_rainskills_failure_context "configuration" "cli_configuration_failed"

package/marketplace/rainskills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.34",
+  "version": "0.1.35",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",

package/marketplace/rainskills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.34",
+  "version": "0.1.35",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",

package/marketplace/rainskills/skills/rainskills/SKILL.md

@@ -14,7 +14,7 @@ This is the single marketplace entry for the complete Rainskills product. The in
 3. Keep stdin, stdout, and stderr attached. When `RAINSKILLS_USER_INPUT_REQUIRED` appears, pause for that installer choice. If the installer emits `rainskills.next-action.v1`, execute only its fixed `argv` through the same launcher; never evaluate output as a shell command. If the adjacent `bin/rainskills.js` exists, use it for fixed next actions; otherwise use the same versioned npm package fallback described below.
 4. Stay attached until every independent Skill is installed. Do not select, connect, or configure an application runtime during installation. In the user-facing response, output only the fixed completion message below.
 
-If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.34 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
+If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.35 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
 
 Skills-only 安装不需要 Node.js；CDN fallback 只负责安装 Skill 文件，不代表运行环境连接、应用部署或平台安装已经可执行。用户首次提出需要运行环境的动作时，对应业务 Skill 才检查 Node.js；固定 Rainskills launcher 需要 Node.js 18 或更高版本。缺失或版本过低时保留原始 intent 并停止，等待用户或 agent 明确同意安装或升级 Node.js，安装完成消息不得提前提示 Node.js。
 
@@ -54,7 +54,7 @@ Hermes Agent 中必须使用 `terminal` 以 `background=true` 启动授权命令
 
 DeepSeek Harness 和 WorkBuddy 也必须保持原命令附着直到退出；如果宿主把长命令转成持久终端或后台任务，只能轮询该原始命令句柄，不得另起 `runtime status` 推测授权结果。WorkBuddy 安装后若当前任务的 Skill 清单尚未刷新，在下一条业务动作前先刷新 Skill 列表或新建任务，不得退回内置 Sites 代替 Rainbond 部署。
 
-Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.34`）：
+Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.35`）：
 
 - 状态：执行 `runtime status --json`。
 - 首次连接：执行 `runtime connect <target> --saas` 或 `runtime connect <target> --rainbond-url <Console origin>`。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.34",
+  "version": "0.1.35",
   "description": "Interactive Rainbond skill installer for Codex, Claude Code, Pi Agent, DeepSeek Harness, WorkBuddy, and Hermes Agent",
   "license": "Apache-2.0",
   "homepage": "https://github.com/goodrain/rainskills#readme",

package/rainbond-app-assistant/references/runtime-gate.md

@@ -5,7 +5,7 @@ Canonical progressive-loading contract: `rainskills.skill-runtime-contract.v1`.
 <!-- rainskills-runtime-gate:start -->
 ## 单运行环境 CLI 门禁（最高优先级）
 
-本机只允许连接一个 Rainbond 运行环境。当前 Skill 在本会话第一次调用 Rainbond 前，执行固定 launcher 的 `runtime status --json`。返回 `connected` 且 `usable=true`，并且 `package_version` 与本 Skill JSON contract 的 `package_version` 完全一致后，所有查询和变更才可通过本地 `~/.rainbond/bin/rainskills-tools.js` 执行。缺少或不一致时必须先执行当前固定版本 `rainskills@0.1.34` 的更新/修复流程并重新取得一致状态；不得在版本错配时继续业务调用。不得配置或直接调用客户端 MCP，不得执行环境枚举或业务 operation 生命周期命令，也不得生成或传递运行环境 ID、业务 operation ID 或 intent JSON。
+本机只允许连接一个 Rainbond 运行环境。当前 Skill 在本会话第一次调用 Rainbond 前，执行固定 launcher 的 `runtime status --json`。返回 `connected` 且 `usable=true`，并且 `package_version` 与本 Skill JSON contract 的 `package_version` 完全一致后，所有查询和变更才可通过本地 `~/.rainbond/bin/rainskills-tools.js` 执行。缺少或不一致时必须先执行当前固定版本 `rainskills@0.1.35` 的更新/修复流程并重新取得一致状态；不得在版本错配时继续业务调用。不得配置或直接调用客户端 MCP，不得执行环境枚举或业务 operation 生命周期命令，也不得生成或传递运行环境 ID、业务 operation ID 或 intent JSON。
 
 没有运行环境时，让用户选择 Rainbond Cloud 或一个已有/新建的私有 Rainbond，并执行对应的 `runtime connect`。连接和重新授权必须进入浏览器 Device Flow，不复用 Shell 中缓存的 JWT；新凭据通过 live probe 后才覆盖唯一运行环境。CLI 返回 401 时，只读调用可在 `runtime reconnect` 成功后重试一次；写调用不得自动重放，必须先查询平台真实状态。403 直接停止，不重新授权。
 
@@ -26,7 +26,7 @@ Hermes Agent 执行带 `--input -` 的一次性业务命令时，使用 `termina
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.34",
+  "package_version": "rainskills@0.1.35",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-app-version-assistant/SKILL.md

@@ -38,7 +38,7 @@ Hermes Agent 执行带 `--input -` 的一次性业务命令时，使用 `termina
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.34",
+  "package_version": "rainskills@0.1.35",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-delivery-verifier/SKILL.md

@@ -61,7 +61,7 @@ Hermes Agent 执行带 `--input -` 的一次性业务命令时，使用 `termina
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.34",
+  "package_version": "rainskills@0.1.35",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-env-sync/SKILL.md

@@ -38,7 +38,7 @@ Hermes Agent 执行带 `--input -` 的一次性业务命令时，使用 `termina
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.34",
+  "package_version": "rainskills@0.1.35",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-fullstack-bootstrap/SKILL.md

@@ -17,7 +17,7 @@ description: "Use only when the user explicitly asks to create the Rainbond app
 <!-- rainskills-runtime-gate:start -->
 ## 单运行环境 CLI 门禁（最高优先级）
 
-本机只允许连接一个 Rainbond 运行环境。当前 Skill 在本会话第一次调用 Rainbond 前，执行固定 launcher 的 `runtime status --json`。返回 `connected` 且 `usable=true`，并且 `package_version` 与本 Skill JSON contract 的 `package_version` 完全一致后，所有查询和变更才可通过本地 `~/.rainbond/bin/rainskills-tools.js` 执行。缺少或不一致时必须先执行当前固定版本 `rainskills@0.1.34` 的更新/修复流程并重新取得一致状态；不得在版本错配时继续业务调用。不得配置或直接调用客户端 MCP，不得执行环境枚举或业务 operation 生命周期命令，也不得生成或传递运行环境 ID、业务 operation ID 或 intent JSON。
+本机只允许连接一个 Rainbond 运行环境。当前 Skill 在本会话第一次调用 Rainbond 前，执行固定 launcher 的 `runtime status --json`。返回 `connected` 且 `usable=true`，并且 `package_version` 与本 Skill JSON contract 的 `package_version` 完全一致后，所有查询和变更才可通过本地 `~/.rainbond/bin/rainskills-tools.js` 执行。缺少或不一致时必须先执行当前固定版本 `rainskills@0.1.35` 的更新/修复流程并重新取得一致状态；不得在版本错配时继续业务调用。不得配置或直接调用客户端 MCP，不得执行环境枚举或业务 operation 生命周期命令，也不得生成或传递运行环境 ID、业务 operation ID 或 intent JSON。
 
 没有运行环境时，让用户选择 Rainbond Cloud 或一个已有/新建的私有 Rainbond，并执行对应的 `runtime connect`。连接和重新授权必须进入浏览器 Device Flow，不复用 Shell 中缓存的 JWT；新凭据通过 live probe 后才覆盖唯一运行环境。CLI 返回 401 时，只读调用可在 `runtime reconnect` 成功后重试一次；写调用不得自动重放，必须先查询平台真实状态。403 直接停止，不重新授权。
 
@@ -38,7 +38,7 @@ Hermes Agent 执行带 `--input -` 的一次性业务命令时，使用 `termina
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.34",
+  "package_version": "rainskills@0.1.35",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-fullstack-troubleshooter/SKILL.md

@@ -61,7 +61,7 @@ Hermes Agent 执行带 `--input -` 的一次性业务命令时，使用 `termina
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.34",
+  "package_version": "rainskills@0.1.35",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-opensource-app-deploy/references/runtime-gate.md

@@ -26,7 +26,7 @@ Hermes Agent 执行带 `--input -` 的一次性业务命令时，使用 `termina
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.34",
+  "package_version": "rainskills@0.1.35",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-platform-installer/SKILL.md

@@ -32,7 +32,7 @@ Do not use it to deploy an application to an existing Rainbond. Route those requ
 ## Workflow
 
 1. Read [installation-policy.md](references/installation-policy.md).
-2. Use the installed local launcher `["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js"]`; its protected runtime package marker is `rainskills@0.1.34` and must equal this package's `package.json`. For a Rainskills marker, first validate schema `rainskills.next-action.v1`, action, onboarding id, and the bounded `argv` array, then append that array to the launcher. Never use `latest` or evaluate a shell string from output.
+2. Use the installed local launcher `["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js"]`; its protected runtime package marker is `rainskills@0.1.35` and must equal this package's `package.json`. For a Rainskills marker, first validate schema `rainskills.next-action.v1`, action, onboarding id, and the bounded `argv` array, then append that array to the launcher. Never use `latest` or evaluate a shell string from output.
 3. 业务 Skill 的四项运行环境菜单会把本机或独立服务器选择写入 `rainskills.next-action.v1` 的显式 `--location`；收到这类 next-action 后直接执行固定 argv，不得再次调用 `private-deployment-location`。只有用户直接要求安装 Rainbond 平台且尚未选择部署位置时，才执行 launcher + `["runtime", "message", "--id", "private-deployment-location"]` 并原样输出固定的三项部署位置消息：选择 1 后执行带 `["--location", "local", "--mode", "single-node"]` 的 `platform install`；选择 2 后执行带 `["--location", "server"]` 的 `platform install`，由 helper 继续显示固定的服务器类型消息；选择 3 后执行 launcher + `["runtime", "message", "--id", "private-console-origin"]` 并进入已有环境连接，不得执行 `platform install`。平台安装 onboarding 只保存安装断点，不保存或恢复业务 intent。
 4. Let the helper perform one read-only preflight against the already selected local or remote target, then show resources, blockers, and applicable host changes. Never invoke `platform install` without an explicit `--location`; the helper must not ask for the deployment location again.
 5. 主机集群开始前必须获得 explicit confirmation，并使用受限 AI 交接：首次调用在固定安装 argv 后追加 `--agent-handoff`，记录该子进程会话；用户确认后，使用相同固定 argv 追加 `--agent-handoff --yes` 一次。不得向等待进程写入 `y`、不得启动第二个竞争安装、不得 `kill` 安装进程，也不得让用户复制完整安装或恢复命令。用户取消时，仅使用同一 argv 追加 `--agent-handoff --cancel`；它只能清除匹配的待确认状态，不能建立 SSH 连接或修改服务器。

package/rainbond-platform-installer/scripts/installed-version.js

@@ -1,5 +1,5 @@
 "use strict";
 
 module.exports = Object.freeze({
-  version: "0.1.34",
+  version: "0.1.35",
 });

package/rainbond-platform-installer/scripts/result-telemetry.js

@@ -6,9 +6,13 @@ const path = require("node:path");
 const { randomUUID: defaultRandomUUID } = require("node:crypto");
 
 const SCHEMA = "rainskills.telemetry-event.v2";
+const RUNTIME_CONNECT_SCHEMA = "rainskills.telemetry-event.v3";
 const DEFAULT_REPORT_URL = "https://log.rainbond.com/api/rainskills/events";
 const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 const AGENTS = new Set(["codex", "pi", "claude_code", "deepseek", "workbuddy", "hermes_agent", "other", "unknown"]);
+const RUNTIME_CONNECT_ERROR_CODES = new Set([
+  "authorization_failed", "verification_failed", "network_unreachable", "user_cancelled", "unknown",
+]);
 const MAX_PENDING_EVENTS = 100;
 const MAX_PENDING_AGE_MS = 7 * 24 * 60 * 60 * 1000;
 
@@ -135,7 +139,7 @@ function prunePending(directory, nowMs) {
 
 function buildEvent({ installationId, packageVersion, agentType, randomUUID, now }, input) {
   const event = {
-    schema: SCHEMA,
+    schema: input.event_type === "runtime_connect_result" ? RUNTIME_CONNECT_SCHEMA : SCHEMA,
     event_id: randomUUID(),
     event_type: input.event_type,
     installation_id: installationId,
@@ -144,10 +148,10 @@ function buildEvent({ installationId, packageVersion, agentType, randomUUID, now
   };
   const fields = [
     "install_attempt_id", "action", "agent_type", "os_type", "os_arch",
-    "execution_environment", "status", "error_stage", "error_code",
+    "execution_environment", "environment_kind", "status", "error_stage", "error_code",
   ];
   for (const field of fields) {
-    const usesDefaultAgent = ["first_use_result", "active_daily"].includes(input.event_type);
+    const usesDefaultAgent = ["runtime_connect_result", "first_use_result", "active_daily"].includes(input.event_type);
     const value = field === "agent_type"
       ? (input[field] || (usesDefaultAgent ? agentType : ""))
       : input[field];
@@ -239,10 +243,28 @@ function createResultTelemetry({
   }
 
   function recordActiveDaily() {
-    const activeDate = now().toISOString().slice(0, 10);
+    const activeDate = formatBeijingDate(now());
     return record({ event_type: "active_daily" }, `active:${resolvedAgent}:${activeDate}`);
   }
 
+  function recordRuntimeConnect(status, details = {}) {
+    if (!["success", "failed"].includes(status)) return skippedResult();
+    if (!["saas", "private"].includes(details.environment_kind)) return skippedResult();
+    if (status === "failed" && ![
+      "authorization", "verification",
+    ].includes(details.error_stage)) return skippedResult();
+    if (status === "failed" && !RUNTIME_CONNECT_ERROR_CODES.has(details.error_code)) return skippedResult();
+    return record({
+      event_type: "runtime_connect_result",
+      environment_kind: details.environment_kind,
+      status,
+      ...(status === "failed" ? {
+        error_stage: details.error_stage,
+        error_code: details.error_code,
+      } : {}),
+    }, `runtime-connect:${resolvedAgent}:${details.environment_kind}:${status}`);
+  }
+
   async function flushPending(limit = MAX_PENDING_EVENTS) {
     if (disabled) return;
     let files;
@@ -270,14 +292,21 @@ function createResultTelemetry({
     installationId: resolvedInstallationId,
     agentType: resolvedAgent,
     record,
+    recordRuntimeConnect,
     recordFirstUse,
     recordActiveDaily,
     flushPending,
   };
 }
 
+function formatBeijingDate(value) {
+  const shifted = new Date(value.getTime() + 8 * 60 * 60 * 1000);
+  return shifted.toISOString().slice(0, 10);
+}
+
 module.exports = {
   DEFAULT_REPORT_URL,
+  RUNTIME_CONNECT_SCHEMA,
   SCHEMA,
   createResultTelemetry,
   ensureInstallationId,

package/rainbond-platform-query/SKILL.md

@@ -29,7 +29,7 @@ Hermes Agent 执行带 `--input -` 的一次性业务命令时，使用 `termina
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.34",
+  "package_version": "rainskills@0.1.35",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-project-init/SKILL.md

@@ -38,7 +38,7 @@ Hermes Agent 执行带 `--input -` 的一次性业务命令时，使用 `termina
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.34",
+  "package_version": "rainskills@0.1.35",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-template-installer/SKILL.md

@@ -38,7 +38,7 @@ Hermes Agent 执行带 `--input -` 的一次性业务命令时，使用 `termina
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.34",
+  "package_version": "rainskills@0.1.35",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",