rainskills 0.1.4 → 0.1.6

package/README.md

@@ -72,7 +72,7 @@ Rainskills 安装完成，下一条消息即可直接使用。
 固定 launcher 来自当前 `package.json` 版本：
 
 ```json
-["npx", "--yes", "rainskills@0.1.4"]
+["npx", "--yes", "rainskills@0.1.6"]
 ```
 
 所有调用都把 launcher 与参数合并成 argv 数组后直接执行；不得使用 `rainskills@latest`，不得把参数拼成 shell 字符串。
@@ -192,21 +192,21 @@ Windows 本地安装是预览能力，也可以改选 Linux 服务器。它要
 
 ```bash
 # 本地单机
-npx --yes rainskills@0.1.4 platform install --onboarding-id <id> \
+npx --yes rainskills@0.1.6 platform install --onboarding-id <id> \
   --location local --mode single-node
 
 # Linux 服务器单机
-npx --yes rainskills@0.1.4 platform install --onboarding-id <id> \
+npx --yes rainskills@0.1.6 platform install --onboarding-id <id> \
   --location server --mode single-node --ssh <user@host>
 
 # 服务器主机集群（自动生成受保护示例文件）
-npx --yes rainskills@0.1.4 platform install --onboarding-id <id> \
+npx --yes rainskills@0.1.6 platform install --onboarding-id <id> \
   --location server --mode host-cluster
 
 # 已有高级 ROI cluster.yaml 才追加：--cluster-config <path>
 
 # 已有 Kubernetes
-npx --yes rainskills@0.1.4 platform install --onboarding-id <id> \
+npx --yes rainskills@0.1.6 platform install --onboarding-id <id> \
   --location server --mode existing-kubernetes \
   --kubeconfig <path> --kube-context <name> --chart-version <version>
 ```

package/SKILL.md

@@ -38,7 +38,7 @@ Rainskills 安装完成，下一条消息即可直接使用。
 
 ## Manage Runtime Environments
 
-环境是全局列表，不是项目绑定。本地状态命令必须定位已安装的同级 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后通过 `node` 以 argv 数组执行；不得为了查询本地环境访问 npm。只有连接或安装环境时才使用与当前技能包一致的固定 launcher `npx --yes rainskills@0.1.4`。
+环境是全局列表，不是项目绑定。本地状态命令必须定位已安装的同级 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后通过 `node` 以 argv 数组执行；不得为了查询本地环境访问 npm。只有连接或安装环境时才使用与当前技能包一致的固定 launcher `npx --yes rainskills@0.1.6`。
 
 - 列表：用本地 launcher 执行 `environment list --json`，只展示名称、类型、状态、是否默认和最近验证时间。
 - 重命名：用本地 launcher 执行 `environment rename --environment-id <uuid> --name <name>`。

package/bin/rainskills.js

@@ -1046,6 +1046,7 @@ async function runAutoUpdatePhase(args, {
   platform = process.platform,
   packageRoot = path.resolve(__dirname, ".."),
   checkForUpdate,
+  acquireArtifact,
   synchronizeSkills,
   updateState,
   delegate,
@@ -1087,6 +1088,7 @@ async function runAutoUpdatePhase(args, {
     }
   }
   let lease = null;
+  let artifact = null;
   try {
     if (autoUpdate.isStableVersion(currentVersion) && autoUpdate.isSafeAutoUpdateEntry(args)) {
       lease = getState().acquireLease?.() || null;
@@ -1101,15 +1103,27 @@ async function runAutoUpdatePhase(args, {
       env,
       home,
       platform,
+      ...(activeOperationDetector ? { activeOperationDetector } : {}),
       ...(state ? { updateState: state } : {}),
     });
     if (decision.action !== "delegate") {
       return { handled: false, reason: decision.reason };
     }
-    const invocation = autoUpdate.buildStableUpdateInvocation(decision.version, args, { platform });
+    artifact = await (acquireArtifact || autoUpdate.acquireStableUpdateArtifact)(decision, {
+      home,
+      platform,
+    });
+    const detectActive = activeOperationDetector
+      || (() => autoUpdate.hasActiveOperation({ home, platform }));
+    if (detectActive()) return { handled: false, reason: "active-operation" };
+    const invocation = autoUpdate.buildStableUpdateInvocation(decision, args, {
+      platform,
+      artifactPath: artifact.path,
+    });
     const environment = autoUpdate.buildStableUpdateEnvironment(env, {
       fromVersion: currentVersion,
       targetVersion: decision.version,
+      registry: decision.registry,
     });
     let result;
     try {
@@ -1132,6 +1146,7 @@ async function runAutoUpdatePhase(args, {
       signal: result.signal || null,
     };
   } finally {
+    try { artifact?.cleanup(); } catch { /* protected cleanup is best effort */ }
     lease?.release();
   }
 }

package/marketplace/rainskills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",

package/marketplace/rainskills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",

package/marketplace/rainskills/skills/rainskills/SKILL.md

@@ -14,7 +14,7 @@ This is the single marketplace entry for the complete Rainskills product. The in
 3. Keep stdin, stdout, and stderr attached. When `RAINSKILLS_USER_INPUT_REQUIRED` appears, pause for that installer choice. If the installer emits `rainskills.next-action.v1`, execute only its fixed `argv` through the same launcher; never evaluate output as a shell command. If the adjacent `bin/rainskills.js` exists, use it for fixed next actions; otherwise use the same versioned npm package fallback described below.
 4. Stay attached until every independent Skill is installed. Do not select, connect, or configure an application runtime during installation. In the user-facing response, output only the fixed completion message below.
 
-If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.4 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
+If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.6 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
 
 Skills-only 安装不需要 Node.js；CDN fallback 只负责安装 Skill 文件，不代表运行环境连接、应用部署或平台安装已经可执行。用户首次提出需要运行环境的动作时，对应业务 Skill 才检查 Node.js；固定 Rainskills launcher 需要 Node.js 18 或更高版本。缺失或版本过低时保留原始 intent 并停止，等待用户或 agent 明确同意安装或升级 Node.js，安装完成消息不得提前提示 Node.js。
 
@@ -38,7 +38,7 @@ Rainskills 安装完成，下一条消息即可直接使用。
 
 ## Manage Runtime Environments
 
-环境是全局列表，不是项目绑定。本地状态命令必须定位已安装的同级 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后通过 `node` 以 argv 数组执行；不得为了查询本地环境访问 npm。只有连接或安装环境时才使用与当前技能包一致的固定 launcher `npx --yes rainskills@0.1.4`。
+环境是全局列表，不是项目绑定。本地状态命令必须定位已安装的同级 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后通过 `node` 以 argv 数组执行；不得为了查询本地环境访问 npm。只有连接或安装环境时才使用与当前技能包一致的固定 launcher `npx --yes rainskills@0.1.6`。
 
 - 列表：用本地 launcher 执行 `environment list --json`，只展示名称、类型、状态、是否默认和最近验证时间。
 - 重命名：用本地 launcher 执行 `environment rename --environment-id <uuid> --name <name>`。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Interactive Rainbond skill installer for Codex and Claude Code",
   "license": "Apache-2.0",
   "homepage": "https://github.com/goodrain/rainskills#readme",

package/pi/rainskills-mcp.ts

@@ -15500,7 +15500,7 @@ function serializeMessage(message) {
 // package.json
 var package_default = {
   name: "rainskills",
-  version: "0.1.4",
+  version: "0.1.6",
   description: "Interactive Rainbond skill installer for Codex and Claude Code",
   license: "Apache-2.0",
   homepage: "https://github.com/goodrain/rainskills#readme",

package/rainbond-app-assistant/SKILL.md

@@ -98,7 +98,7 @@ description: "Use whenever a user asks to deploy, run, deliver, publish, inspect
 
   第一步检查 Node.js 是否存在且主版本不低于 18。Node.js 缺失或低于 18 时，只说明“Rainskills 执行组件需要 Node.js 18 或更高版本”并停止：不选择运行环境，不调用 MCP，不猜测替代命令。只有用户或 agent 明确同意后才安装或升级 Node.js，再从同一原始 intent 继续。
 
-  固定 launcher 是 `["npx", "--yes", "rainskills@0.1.4"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止使用 `rainskills@latest`，禁止拼接或执行 shell 字符串。
+  固定 launcher 是 `["npx", "--yes", "rainskills@0.1.6"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止使用 `rainskills@latest`，禁止拼接或执行 shell 字符串。
 
   本地 launcher 必须从当前 Skill 所在目录的同级目录定位 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后使用 `["node", "<绝对路径>"]` 执行。`environment list`、`operation begin`、`operation complete` 和 `runtime message` 只能使用本地 launcher；本地 launcher 只读取已安装文件和本机受保护状态，不得访问 npm 或其它网络。只有用户选定连接或安装运行环境后，才使用上面的固定 npx launcher。
 
@@ -106,7 +106,7 @@ description: "Use whenever a user asks to deploy, run, deliver, publish, inspect
   ```json
   {
     "schema": "rainskills.skill-runtime-contract.v1",
-    "launcher": ["npx", "--yes", "rainskills@0.1.4"],
+    "launcher": ["npx", "--yes", "rainskills@0.1.6"],
     "local_launcher": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js"],
     "local_argv": {
       "environment-list": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "environment", "list", "--json"],
@@ -126,9 +126,9 @@ description: "Use whenever a user asks to deploy, run, deliver, publish, inspect
       "existing": ["saas", "private-existing"]
     },
     "connect_argv": {
-      "saas": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
-      "private-existing": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"],
-      "install-private": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--install-private", "--location", "<private-location>", "--intent-json", "<intent-json>"]
+      "saas": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
+      "private-existing": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"],
+      "install-private": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--install-private", "--location", "<private-location>", "--intent-json", "<intent-json>"]
     }
   }
   ```

package/rainbond-app-version-assistant/SKILL.md

@@ -14,7 +14,7 @@ description: "Use when a user explicitly asks for an existing Rainbond app versi
 
 第一步检查 Node.js 是否存在且主版本不低于 18。Node.js 缺失或低于 18 时，只说明“Rainskills 执行组件需要 Node.js 18 或更高版本”并停止：不选择运行环境，不调用 MCP，不猜测替代命令。只有用户或 agent 明确同意后才安装或升级 Node.js，再从同一原始 intent 继续。
 
-固定 launcher 是 `["npx", "--yes", "rainskills@0.1.4"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
+固定 launcher 是 `["npx", "--yes", "rainskills@0.1.6"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
 
 本地 launcher 必须从当前 Skill 所在目录的同级目录定位 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后使用 `["node", "<绝对路径>"]` 执行。`environment list`、`operation begin`、`operation complete` 和 `runtime message` 只能使用本地 launcher；本地 launcher 只读取已安装文件和本机受保护状态，不得访问 npm 或其它网络。只有用户选定连接运行环境后，才使用上面的固定 npx launcher。
 
@@ -22,7 +22,7 @@ description: "Use when a user explicitly asks for an existing Rainbond app versi
 ```json
 {
   "schema": "rainskills.skill-runtime-contract.v1",
-  "launcher": ["npx", "--yes", "rainskills@0.1.4"],
+  "launcher": ["npx", "--yes", "rainskills@0.1.6"],
   "local_launcher": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js"],
   "local_argv": {
     "environment-list": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "environment", "list", "--json"],
@@ -37,8 +37,8 @@ description: "Use when a user explicitly asks for an existing Rainbond app versi
   },
   "routes": {"existing": ["saas", "private-existing"]},
   "connect_argv": {
-    "saas": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
-    "private-existing": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"]
+    "saas": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
+    "private-existing": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"]
   }
 }
 ```

package/rainbond-delivery-verifier/SKILL.md

@@ -46,7 +46,7 @@ description: "Use only when the user explicitly asks for final delivery or acces
 
 第一步检查 Node.js 是否存在且主版本不低于 18。Node.js 缺失或低于 18 时，只说明“Rainskills 执行组件需要 Node.js 18 或更高版本”并停止：不选择运行环境，不调用 MCP，不猜测替代命令。只有用户或 agent 明确同意后才安装或升级 Node.js，再从同一原始 intent 继续。
 
-固定 launcher 是 `["npx", "--yes", "rainskills@0.1.4"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
+固定 launcher 是 `["npx", "--yes", "rainskills@0.1.6"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
 
 本地 launcher 必须从当前 Skill 所在目录的同级目录定位 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后使用 `["node", "<绝对路径>"]` 执行。`environment list`、`operation begin`、`operation complete` 和 `runtime message` 只能使用本地 launcher；本地 launcher 只读取已安装文件和本机受保护状态，不得访问 npm 或其它网络。只有用户选定连接运行环境后，才使用上面的固定 npx launcher。
 
@@ -54,7 +54,7 @@ description: "Use only when the user explicitly asks for final delivery or acces
 ```json
 {
   "schema": "rainskills.skill-runtime-contract.v1",
-  "launcher": ["npx", "--yes", "rainskills@0.1.4"],
+  "launcher": ["npx", "--yes", "rainskills@0.1.6"],
   "local_launcher": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js"],
   "local_argv": {
     "environment-list": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "environment", "list", "--json"],
@@ -67,8 +67,8 @@ description: "Use only when the user explicitly asks for final delivery or acces
   },
   "routes": {"existing": ["saas", "private-existing"]},
   "connect_argv": {
-    "saas": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
-    "private-existing": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"]
+    "saas": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
+    "private-existing": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"]
   }
 }
 ```

package/rainbond-env-sync/SKILL.md

@@ -14,7 +14,7 @@ description: "Use when a user explicitly asks to sync non-sensitive preview or p
 
 第一步检查 Node.js 是否存在且主版本不低于 18。Node.js 缺失或低于 18 时，只说明“Rainskills 执行组件需要 Node.js 18 或更高版本”并停止：不选择运行环境，不调用 MCP，不猜测替代命令。只有用户或 agent 明确同意后才安装或升级 Node.js，再从同一原始 intent 继续。
 
-固定 launcher 是 `["npx", "--yes", "rainskills@0.1.4"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
+固定 launcher 是 `["npx", "--yes", "rainskills@0.1.6"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
 
 本地 launcher 必须从当前 Skill 所在目录的同级目录定位 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后使用 `["node", "<绝对路径>"]` 执行。`environment list`、`operation begin`、`operation complete` 和 `runtime message` 只能使用本地 launcher；本地 launcher 只读取已安装文件和本机受保护状态，不得访问 npm 或其它网络。只有用户选定连接运行环境后，才使用上面的固定 npx launcher。
 
@@ -22,7 +22,7 @@ description: "Use when a user explicitly asks to sync non-sensitive preview or p
 ```json
 {
   "schema": "rainskills.skill-runtime-contract.v1",
-  "launcher": ["npx", "--yes", "rainskills@0.1.4"],
+  "launcher": ["npx", "--yes", "rainskills@0.1.6"],
   "local_launcher": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js"],
   "local_argv": {
     "environment-list": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "environment", "list", "--json"],
@@ -35,8 +35,8 @@ description: "Use when a user explicitly asks to sync non-sensitive preview or p
   },
   "routes": {"existing": ["saas", "private-existing"]},
   "connect_argv": {
-    "saas": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
-    "private-existing": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"]
+    "saas": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
+    "private-existing": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"]
   }
 }
 ```

package/rainbond-fullstack-bootstrap/SKILL.md

@@ -14,7 +14,7 @@ description: "Use only when the user explicitly asks to create the Rainbond app
 
 第一步检查 Node.js 是否存在且主版本不低于 18。Node.js 缺失或低于 18 时，只说明“Rainskills 执行组件需要 Node.js 18 或更高版本”并停止：不选择运行环境，不调用 MCP，不猜测替代命令。只有用户或 agent 明确同意后才安装或升级 Node.js，再从同一原始 intent 继续。
 
-固定 launcher 是 `["npx", "--yes", "rainskills@0.1.4"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
+固定 launcher 是 `["npx", "--yes", "rainskills@0.1.6"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
 
 本地 launcher 必须从当前 Skill 所在目录的同级目录定位 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后使用 `["node", "<绝对路径>"]` 执行。`environment list`、`operation begin`、`operation complete` 和 `runtime message` 只能使用本地 launcher；本地 launcher 只读取已安装文件和本机受保护状态，不得访问 npm 或其它网络。只有用户选定连接或安装运行环境后，才使用上面的固定 npx launcher。
 
@@ -22,7 +22,7 @@ description: "Use only when the user explicitly asks to create the Rainbond app
 ```json
 {
   "schema": "rainskills.skill-runtime-contract.v1",
-  "launcher": ["npx", "--yes", "rainskills@0.1.4"],
+  "launcher": ["npx", "--yes", "rainskills@0.1.6"],
   "local_launcher": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js"],
   "local_argv": {
     "environment-list": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "environment", "list", "--json"],
@@ -42,9 +42,9 @@ description: "Use only when the user explicitly asks to create the Rainbond app
     "existing": ["saas", "private-existing"]
   },
   "connect_argv": {
-    "saas": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
-    "private-existing": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"],
-    "install-private": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--install-private", "--location", "<private-location>", "--intent-json", "<intent-json>"]
+    "saas": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
+    "private-existing": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"],
+    "install-private": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--install-private", "--location", "<private-location>", "--intent-json", "<intent-json>"]
   }
 }
 ```

package/rainbond-fullstack-troubleshooter/SKILL.md

@@ -46,7 +46,7 @@ description: "Use only when the user explicitly asks for a bounded build, runtim
 
 第一步检查 Node.js 是否存在且主版本不低于 18。Node.js 缺失或低于 18 时，只说明“Rainskills 执行组件需要 Node.js 18 或更高版本”并停止：不选择运行环境，不调用 MCP，不猜测替代命令。只有用户或 agent 明确同意后才安装或升级 Node.js，再从同一原始 intent 继续。
 
-固定 launcher 是 `["npx", "--yes", "rainskills@0.1.4"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
+固定 launcher 是 `["npx", "--yes", "rainskills@0.1.6"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
 
 本地 launcher 必须从当前 Skill 所在目录的同级目录定位 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后使用 `["node", "<绝对路径>"]` 执行。`environment list`、`operation begin`、`operation complete` 和 `runtime message` 只能使用本地 launcher；本地 launcher 只读取已安装文件和本机受保护状态，不得访问 npm 或其它网络。只有用户选定连接运行环境后，才使用上面的固定 npx launcher。
 
@@ -54,7 +54,7 @@ description: "Use only when the user explicitly asks for a bounded build, runtim
 ```json
 {
   "schema": "rainskills.skill-runtime-contract.v1",
-  "launcher": ["npx", "--yes", "rainskills@0.1.4"],
+  "launcher": ["npx", "--yes", "rainskills@0.1.6"],
   "local_launcher": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js"],
   "local_argv": {
     "environment-list": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "environment", "list", "--json"],
@@ -67,8 +67,8 @@ description: "Use only when the user explicitly asks for a bounded build, runtim
   },
   "routes": {"existing": ["saas", "private-existing"]},
   "connect_argv": {
-    "saas": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
-    "private-existing": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"]
+    "saas": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
+    "private-existing": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"]
   }
 }
 ```

package/rainbond-platform-installer/SKILL.md

@@ -31,7 +31,7 @@ Do not use it to deploy an application to an existing Rainbond. Route those requ
 ## Workflow
 
 1. Read [installation-policy.md](references/installation-policy.md).
-2. Use the package-version launcher `["npx", "--yes", "rainskills@0.1.4"]`; its version must equal this package's `package.json`. For a Rainskills marker, first validate schema `rainskills.next-action.v1`, action, onboarding id, and the bounded `argv` array, then append that array to the launcher. Never use `latest` or evaluate a shell string from output.
+2. Use the package-version launcher `["npx", "--yes", "rainskills@0.1.6"]`; its version must equal this package's `package.json`. For a Rainskills marker, first validate schema `rainskills.next-action.v1`, action, onboarding id, and the bounded `argv` array, then append that array to the launcher. Never use `latest` or evaluate a shell string from output.
 3. 在任何平台安装命令之前，先执行 launcher + `["runtime", "message", "--id", "private-deployment-location"]`，并原样输出固定的三项部署位置消息。选择 1 后执行带 `["--location", "local", "--mode", "single-node"]` 的 `platform install`；选择 2 后执行带 `["--location", "server"]` 的 `platform install`，由 helper 继续显示固定的服务器类型消息；选择 3 后执行 launcher + `["runtime", "message", "--id", "private-console-origin"]` 并进入已有环境连接，不得执行 `platform install`。若是没有原始业务 intent 的直接平台安装请求，已有环境连接使用受限 `{"type":"environment-add"}` intent。
 4. Let the helper perform one read-only preflight against the already selected local or remote target, then show resources, blockers, and applicable host changes. Never invoke `platform install` without an explicit `--location`; the helper must not ask for the deployment location again.
 5. Obtain explicit confirmation before sending `y` to the waiting process or rerunning the exact command with `--yes`.

package/rainbond-platform-installer/scripts/auto-update-worker.js

@@ -9,18 +9,8 @@ const { version: installedVersion } = require("./installed-version.js");
 
 const UPDATE_ENTRY = Object.freeze(["runtime", "status", "--json"]);
 const DEFAULT_DELEGATE_TIMEOUT_MS = 30_000;
-const SAFE_ENVIRONMENT_KEYS = Object.freeze([
-  "HOME", "USERPROFILE", "PATH", "Path", "SystemRoot", "ComSpec",
-  "TMPDIR", "TMP", "TEMP", "LANG", "LC_ALL", "HTTP_PROXY",
-  "HTTPS_PROXY", "NO_PROXY", "http_proxy", "https_proxy", "no_proxy",
-]);
-
 function backgroundUpdateEnvironment(source = process.env) {
-  const result = {};
-  for (const key of SAFE_ENVIRONMENT_KEYS) {
-    if (typeof source[key] === "string") result[key] = source[key];
-  }
-  return result;
+  return autoUpdate.sanitizeAutoUpdateEnvironment(source);
 }
 
 function terminateChild(child, platform, signal = "SIGTERM") {
@@ -87,6 +77,7 @@ async function runBackgroundAutoUpdate({
   platform = process.platform,
   updateState = autoUpdate.createAutoUpdateState({ home, platform }),
   checkForUpdate = autoUpdate.checkForStableUpdate,
+  acquireArtifact = autoUpdate.acquireStableUpdateArtifact,
   activeOperationDetector = () => autoUpdate.hasActiveOperation({ home, platform }),
   runDelegated = (invocation, environment) => runBoundedChild(
     invocation,
@@ -95,6 +86,7 @@ async function runBackgroundAutoUpdate({
   ),
 } = {}) {
   let lease;
+  let artifact;
   try {
     lease = updateState.acquireLease?.() || null;
   } catch {
@@ -111,17 +103,17 @@ async function runBackgroundAutoUpdate({
       updateState,
     });
     if (decision.action !== "delegate") return decision;
-    if (activeOperationDetector()) {
-      return { action: "continue", reason: "active-operation" };
-    }
+    artifact = await acquireArtifact(decision, { home, platform });
+    if (activeOperationDetector()) return { action: "continue", reason: "active-operation" };
     const invocation = autoUpdate.buildStableUpdateInvocation(
-      decision.version,
+      decision,
       UPDATE_ENTRY,
-      { platform }
+      { platform, artifactPath: artifact.path }
     );
     const environment = autoUpdate.buildStableUpdateEnvironment(env, {
       fromVersion: currentVersion,
       targetVersion: decision.version,
+      registry: decision.registry,
     });
     const result = await runDelegated(invocation, environment);
     if (result.code !== 0 || result.signal) {
@@ -133,6 +125,7 @@ async function runBackgroundAutoUpdate({
     try { updateState.recordFailure?.(); } catch { /* best effort */ }
     return { action: "continue", reason: "update-failed" };
   } finally {
+    try { artifact?.cleanup(); } catch { /* protected cleanup is best effort */ }
     lease?.release();
   }
 }

package/rainbond-platform-installer/scripts/auto-update.js

@@ -5,16 +5,41 @@ const fs = require("node:fs");
 const https = require("node:https");
 const os = require("node:os");
 const path = require("node:path");
+const tls = require("node:tls");
 
 const { createSecureStateStore } = require("./secure-state.js");
 
 const OFFICIAL_LATEST_URL = "https://registry.npmjs.org/rainskills/latest";
 const OFFICIAL_REGISTRY = "https://registry.npmjs.org/";
+const MIRROR_REGISTRY = "https://registry.npmmirror.com/";
+const REGISTRY_SOURCES = Object.freeze({
+  official: Object.freeze({
+    name: "official",
+    registry: OFFICIAL_REGISTRY,
+    latestUrl: OFFICIAL_LATEST_URL,
+    tarballOrigin: OFFICIAL_REGISTRY,
+  }),
+  mirror: Object.freeze({
+    name: "mirror",
+    registry: MIRROR_REGISTRY,
+    latestUrl: `${MIRROR_REGISTRY}rainskills/latest`,
+    tarballOrigin: "https://cdn.npmmirror.com/",
+  }),
+});
 const UPDATE_STATE_SCHEMA = "rainskills.auto-update.v1";
 const UPDATE_STATE_VERSION = 1;
 const UPDATE_OPERATION_ID = "b53d72d4-5e88-4aae-9a9d-8305142d0262";
 const DEFAULT_CHECK_TTL_MS = 24 * 60 * 60 * 1000;
 const MAX_METADATA_BYTES = 64 * 1024;
+const MAX_TARBALL_BYTES = 16 * 1024 * 1024;
+const METADATA_TIMEOUT_MS = 3000;
+const TARBALL_TIMEOUT_MS = 15_000;
+const INTERNAL_TIMEOUT_CODE = "RAINSKILLS_REQUEST_TIMEOUT";
+const PROTOCOL_ERROR_CODE = "RAINSKILLS_PROTOCOL_ERROR";
+const METADATA_FALLBACK_ERROR_CODES = Object.freeze([
+  "ENOTFOUND", "EAI_AGAIN", "ECONNREFUSED", "ECONNRESET", "ETIMEDOUT",
+  "EHOSTUNREACH", "ENETUNREACH",
+]);
 const STABLE_VERSION_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
 const SAFE_ENTRY = Object.freeze(["runtime", "status", "--json"]);
 const DEFAULT_AGENT_ROOTS = Object.freeze([
@@ -22,6 +47,23 @@ const DEFAULT_AGENT_ROOTS = Object.freeze([
   [".claude", "skills"],
   [".agents", "skills"],
 ]);
+const AUTO_UPDATE_ENVIRONMENT_KEYS = Object.freeze([
+  "HOME", "USERPROFILE", "PATH", "Path", "SystemRoot", "ComSpec",
+  "TMPDIR", "TMP", "TEMP", "LANG", "LC_ALL",
+  "HTTP_PROXY", "HTTPS_PROXY", "NO_PROXY", "http_proxy", "https_proxy", "no_proxy",
+]);
+
+function protocolError(message) {
+  const error = new Error(message);
+  error.code = PROTOCOL_ERROR_CODE;
+  return error;
+}
+
+function timeoutError(label) {
+  const error = new Error(`${label}请求超时`);
+  error.code = INTERNAL_TIMEOUT_CODE;
+  return error;
+}
 
 function isStableVersion(value) {
   return typeof value === "string" && STABLE_VERSION_PATTERN.test(value);
@@ -48,36 +90,85 @@ function isSafeAutoUpdateEntry(args) {
     && args.every((value, index) => value === SAFE_ENTRY[index]);
 }
 
-function validateOfficialLatestMetadata(metadata) {
+function tarballUrlFor(source, version) {
+  if (source === REGISTRY_SOURCES.mirror) {
+    return `${source.tarballOrigin}packages/rainskills/${version}/rainskills-${version}.tgz`;
+  }
+  return `${source.tarballOrigin}rainskills/-/rainskills-${version}.tgz`;
+}
+
+function metadataTarballUrlFor(source, version) {
+  return `${source.registry}rainskills/-/rainskills-${version}.tgz`;
+}
+
+function sourceForRegistry(registry) {
+  return Object.values(REGISTRY_SOURCES).find((source) => source.registry === registry) || null;
+}
+
+function validateRegistryLatestMetadata(metadata, source) {
+  if (!Object.values(REGISTRY_SOURCES).includes(source)) {
+    throw protocolError("npm registry 来源无效");
+  }
   if (!metadata || typeof metadata !== "object" || Array.isArray(metadata)) {
-    throw new Error("npm latest metadata 无效");
+    throw protocolError("npm latest metadata 无效");
   }
   if (metadata.name !== "rainskills" || !isStableVersion(metadata.version)) {
-    throw new Error("npm latest 不是 Rainskills 正式版");
+    throw protocolError("npm latest 不是 Rainskills 正式版");
   }
-  const expectedTarball = `${OFFICIAL_REGISTRY}rainskills/-/rainskills-${metadata.version}.tgz`;
+  const expectedMetadataTarball = metadataTarballUrlFor(source, metadata.version);
+  const downloadTarball = tarballUrlFor(source, metadata.version);
   if (
     !metadata.dist
     || typeof metadata.dist !== "object"
     || typeof metadata.dist.integrity !== "string"
     || !/^sha512-[A-Za-z0-9+/]{86}==$/.test(metadata.dist.integrity)
-    || metadata.dist.tarball !== expectedTarball
+    || metadata.dist.tarball !== expectedMetadataTarball
   ) {
-    throw new Error("npm latest 制品来源或完整性信息无效");
+    throw protocolError("npm latest 制品来源或完整性信息无效");
   }
-  return { version: metadata.version };
+  return {
+    version: metadata.version,
+    registry: source.registry,
+    tarball: downloadTarball,
+    integrity: metadata.dist.integrity,
+  };
 }
 
-function fetchOfficialLatest({
+function validateOfficialLatestMetadata(metadata) {
+  return validateRegistryLatestMetadata(metadata, REGISTRY_SOURCES.official);
+}
+
+function validateContentLength(headers, maxBytes, { allowZero, label }) {
+  const raw = headers && headers["content-length"];
+  if (raw === undefined) return;
+  if (typeof raw !== "string" || !/^(0|[1-9]\d*)$/.test(raw)) {
+    throw protocolError(`${label} Content-Length 无效`);
+  }
+  const value = Number(raw);
+  if ((!allowZero && value === 0) || !Number.isSafeInteger(value) || value > maxBytes) {
+    throw protocolError(`${label} Content-Length 超出限制`);
+  }
+}
+
+function fixedHttpsOptions(headers) {
+  return {
+    headers,
+    rejectUnauthorized: true,
+    checkServerIdentity: tls.checkServerIdentity,
+    ca: tls.rootCertificates,
+  };
+}
+
+function fetchRegistryMetadata(source, {
   request = https.get,
-  timeoutMs = 3000,
+  timeoutMs = METADATA_TIMEOUT_MS,
   maxBytes = MAX_METADATA_BYTES,
 } = {}) {
   return new Promise((resolve, reject) => {
     let settled = false;
     let req;
     const deadline = setTimeout(() => {
-      req?.destroy(new Error("npm latest 请求超时"));
+      req?.destroy(timeoutError("npm latest "));
     }, timeoutMs);
     const finish = (error, value) => {
       if (settled) return;
@@ -86,12 +177,17 @@ function fetchOfficialLatest({
       if (error) reject(error);
       else resolve(value);
     };
-    req = request(OFFICIAL_LATEST_URL, {
-      headers: { accept: "application/json" },
-    }, (response) => {
+    req = request(source.latestUrl, fixedHttpsOptions({ accept: "application/json" }), (response) => {
       if (response.statusCode !== 200 || response.headers.location) {
         response.resume();
-        finish(new Error("npm latest 响应无效"));
+        finish(protocolError("npm latest 响应无效"));
+        return;
+      }
+      try {
+        validateContentLength(response.headers, maxBytes, { allowZero: true, label: "npm latest" });
+      } catch (error) {
+        response.resume();
+        finish(error);
         return;
       }
       let size = 0;
@@ -99,7 +195,7 @@ function fetchOfficialLatest({
       response.on("data", (chunk) => {
         size += chunk.length;
         if (size > maxBytes) {
-          req.destroy(new Error("npm latest 响应过大"));
+          req.destroy(protocolError("npm latest 响应过大"));
           return;
         }
         chunks.push(chunk);
@@ -108,17 +204,290 @@ function fetchOfficialLatest({
       response.once("end", () => {
         try {
           const metadata = JSON.parse(Buffer.concat(chunks).toString("utf8"));
-          finish(null, validateOfficialLatestMetadata(metadata));
+          finish(null, validateRegistryLatestMetadata(metadata, source));
+        } catch (error) {
+          finish(error.code ? error : protocolError("npm latest JSON 无效"));
+        }
+      });
+    });
+    req.setTimeout(timeoutMs, () => req.destroy(timeoutError("npm latest ")));
+    req.once("error", (error) => finish(error));
+  });
+}
+
+function fetchOfficialLatest(options = {}) {
+  return fetchRegistryMetadata(REGISTRY_SOURCES.official, options);
+}
+
+function isMetadataFallbackError(error) {
+  return error?.code === INTERNAL_TIMEOUT_CODE
+    || METADATA_FALLBACK_ERROR_CODES.includes(error?.code);
+}
+
+async function fetchLatestWithFallback({
+  fetchMetadata = fetchRegistryMetadata,
+  ...requestOptions
+} = {}) {
+  try {
+    return await fetchMetadata(REGISTRY_SOURCES.official, requestOptions);
+  } catch (error) {
+    if (!isMetadataFallbackError(error)) throw error;
+    return fetchMetadata(REGISTRY_SOURCES.mirror, requestOptions);
+  }
+}
+
+function validateUpdateDescriptor(descriptor) {
+  const source = sourceForRegistry(descriptor?.registry);
+  if (
+    !source
+    || !isStableVersion(descriptor?.version)
+    || descriptor.tarball !== tarballUrlFor(source, descriptor.version)
+    || typeof descriptor.integrity !== "string"
+    || !/^sha512-[A-Za-z0-9+/]{86}==$/.test(descriptor.integrity)
+  ) {
+    throw protocolError("自动升级制品描述无效");
+  }
+  return { ...descriptor };
+}
+
+function expectedIntegrityBytes(integrity) {
+  const bytes = Buffer.from(integrity.slice("sha512-".length), "base64");
+  if (bytes.length !== 64) throw protocolError("自动升级 SHA-512 integrity 无效");
+  return bytes;
+}
+
+function writeAllSync(fd, chunk) {
+  let offset = 0;
+  while (offset < chunk.length) {
+    offset += fs.writeSync(fd, chunk, offset, chunk.length - offset);
+  }
+}
+
+function hashOpenFile(fd, maxBytes = MAX_TARBALL_BYTES) {
+  const hash = crypto.createHash("sha512");
+  const buffer = Buffer.allocUnsafe(64 * 1024);
+  let size = 0;
+  let offset = 0;
+  for (;;) {
+    const count = fs.readSync(fd, buffer, 0, buffer.length, offset);
+    if (count === 0) break;
+    size += count;
+    if (size > maxBytes) throw protocolError("自动升级本地制品过大");
+    hash.update(buffer.subarray(0, count));
+    offset += count;
+  }
+  if (size === 0) throw protocolError("自动升级本地制品为空");
+  return { size, digest: hash.digest() };
+}
+
+function downloadTarballToDescriptor(descriptor, fd, {
+  request = https.get,
+  timeoutMs = TARBALL_TIMEOUT_MS,
+  maxBytes = MAX_TARBALL_BYTES,
+} = {}) {
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    let req;
+    let size = 0;
+    const hash = crypto.createHash("sha512");
+    const deadline = setTimeout(() => req?.destroy(timeoutError("npm tarball ")), timeoutMs);
+    const finish = (error, value) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(deadline);
+      if (error) reject(error);
+      else resolve(value);
+    };
+    req = request(descriptor.tarball, fixedHttpsOptions({ accept: "application/octet-stream" }), (response) => {
+      if (response.statusCode !== 200 || response.headers.location) {
+        response.resume();
+        finish(protocolError("npm tarball 响应无效"));
+        return;
+      }
+      try {
+        validateContentLength(response.headers, maxBytes, { allowZero: false, label: "npm tarball" });
+      } catch (error) {
+        response.resume();
+        finish(error);
+        return;
+      }
+      response.on("data", (chunk) => {
+        if (settled) return;
+        size += chunk.length;
+        if (size > maxBytes) {
+          req.destroy(protocolError("npm tarball 响应过大"));
+          return;
+        }
+        try {
+          writeAllSync(fd, chunk);
+          hash.update(chunk);
+        } catch (error) {
+          req.destroy(error);
+        }
+      });
+      response.once("error", (error) => finish(error));
+      response.once("end", () => {
+        if (size === 0) {
+          finish(protocolError("npm tarball 为空"));
+          return;
+        }
+        try {
+          const actual = hash.digest();
+          const expected = expectedIntegrityBytes(descriptor.integrity);
+          if (!crypto.timingSafeEqual(actual, expected)) {
+            throw protocolError("npm tarball SHA-512 integrity 不匹配");
+          }
+          finish(null, { size, digest: actual.toString("hex") });
         } catch (error) {
           finish(error);
         }
       });
     });
-    req.setTimeout(timeoutMs, () => req.destroy(new Error("npm latest 请求超时")));
+    req.setTimeout(timeoutMs, () => req.destroy(timeoutError("npm tarball ")));
     req.once("error", (error) => finish(error));
   });
 }
 
+async function acquireStableUpdateArtifact(descriptor, {
+  home = os.homedir(),
+  platform = process.platform,
+  stateStore = createDefaultStateStore(platform, home),
+  request = https.get,
+  randomBytes = crypto.randomBytes,
+} = {}) {
+  const validated = validateUpdateDescriptor(descriptor);
+  const directory = stateStore.ensurePrivateDirectory(
+    path.join(home, ".rainbond", "rainskills", "update-artifacts")
+  );
+  const digestPrefix = expectedIntegrityBytes(validated.integrity).toString("hex").slice(0, 16);
+  const finalPath = path.join(directory, `rainskills-${validated.version}-${digestPrefix}.tgz`);
+  if (fs.existsSync(finalPath)) {
+    stateStore.assertProtectedRegularFile(finalPath);
+    const noFollow = fs.constants.O_NOFOLLOW || 0;
+    const existingFd = fs.openSync(finalPath, fs.constants.O_RDONLY | noFollow);
+    let identity;
+    try {
+      identity = fs.fstatSync(existingFd);
+      const pathIdentity = fs.lstatSync(finalPath);
+      if (
+        pathIdentity.isSymbolicLink()
+        || !pathIdentity.isFile()
+        || pathIdentity.dev !== identity.dev
+        || pathIdentity.ino !== identity.ino
+      ) throw protocolError("自动升级既有制品身份发生变化");
+      const actual = hashOpenFile(existingFd);
+      if (!crypto.timingSafeEqual(actual.digest, expectedIntegrityBytes(validated.integrity))) {
+        throw protocolError("自动升级既有制品 SHA-512 integrity 不匹配");
+      }
+    } finally {
+      fs.closeSync(existingFd);
+    }
+    let cleaned = false;
+    return {
+      path: finalPath,
+      cleanup() {
+        if (cleaned) return;
+        cleaned = true;
+        try {
+          const current = fs.lstatSync(finalPath);
+          if (
+            !current.isSymbolicLink()
+            && current.isFile()
+            && current.dev === identity.dev
+            && current.ino === identity.ino
+          ) fs.unlinkSync(finalPath);
+        } catch (error) {
+          if (error.code !== "ENOENT") throw error;
+        }
+      },
+    };
+  }
+  const candidatePath = path.join(
+    directory,
+    `.rainskills-${validated.version}.${process.pid}.${randomBytes(6).toString("hex")}.candidate`
+  );
+  const noFollow = fs.constants.O_NOFOLLOW || 0;
+  let fd;
+  let published = false;
+  let identity;
+  try {
+    fd = fs.openSync(
+      candidatePath,
+      fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL | noFollow,
+      0o600
+    );
+    await downloadTarballToDescriptor(validated, fd, { request });
+    fs.fsyncSync(fd);
+    stateStore.protectRegularFile(candidatePath);
+    identity = fs.fstatSync(fd);
+    const candidateIdentity = fs.lstatSync(candidatePath);
+    if (
+      candidateIdentity.isSymbolicLink()
+      || !candidateIdentity.isFile()
+      || candidateIdentity.dev !== identity.dev
+      || candidateIdentity.ino !== identity.ino
+    ) {
+      throw protocolError("自动升级候选制品身份发生变化");
+    }
+    fs.linkSync(candidatePath, finalPath);
+    published = true;
+    stateStore.protectRegularFile(finalPath);
+    const finalIdentity = fs.lstatSync(finalPath);
+    if (
+      finalIdentity.isSymbolicLink()
+      || !finalIdentity.isFile()
+      || finalIdentity.dev !== identity.dev
+      || finalIdentity.ino !== identity.ino
+    ) {
+      throw protocolError("自动升级最终制品身份发生变化");
+    }
+    fs.unlinkSync(candidatePath);
+    if (platform !== "win32") {
+      const directoryFd = fs.openSync(directory, "r");
+      try { fs.fsyncSync(directoryFd); } finally { fs.closeSync(directoryFd); }
+    }
+    fs.closeSync(fd);
+    fd = undefined;
+    let cleaned = false;
+    return {
+      path: finalPath,
+      cleanup() {
+        if (cleaned) return;
+        cleaned = true;
+        try {
+          const current = fs.lstatSync(finalPath);
+          if (
+            !current.isSymbolicLink()
+            && current.isFile()
+            && current.dev === identity.dev
+            && current.ino === identity.ino
+          ) fs.unlinkSync(finalPath);
+        } catch (error) {
+          if (error.code !== "ENOENT") throw error;
+        }
+      },
+    };
+  } catch (error) {
+    if (fd !== undefined) fs.closeSync(fd);
+    for (const target of [candidatePath, ...(published ? [finalPath] : [])]) {
+      try { fs.unlinkSync(target); } catch (cleanupError) {
+        if (cleanupError.code !== "ENOENT") throw cleanupError;
+      }
+    }
+    throw error;
+  }
+}
+
+async function prepareStableUpdate({
+  fetchLatest = fetchLatestWithFallback,
+  acquireArtifact = acquireStableUpdateArtifact,
+  ...options
+} = {}) {
+  const descriptor = validateUpdateDescriptor(await fetchLatest(options));
+  const artifact = await acquireArtifact(descriptor, options);
+  return { descriptor, artifact };
+}
+
 function createDefaultStateStore(platform, home) {
   if (platform === "win32") {
     const { createWindowsSecureStateStore } = require("./windows-platform.js");
@@ -276,7 +645,7 @@ async function checkForStableUpdate({
   platform = process.platform,
   now = () => Date.now(),
   ttlMs = DEFAULT_CHECK_TTL_MS,
-  fetchLatest = fetchOfficialLatest,
+  fetchLatest = fetchLatestWithFallback,
   activeOperationDetector,
   updateState,
 } = {}) {
@@ -312,7 +681,9 @@ async function checkForStableUpdate({
     try { state.recordFailure?.(); } catch { /* best-effort only */ }
     return { action: "continue", reason: "check-failed" };
   }
-  if (!latest || !isStableVersion(latest.version)) {
+  try {
+    latest = validateUpdateDescriptor(latest);
+  } catch {
     try { state.recordCheck(null); } catch { /* best-effort only */ }
     return { action: "continue", reason: "invalid-latest" };
   }
@@ -320,28 +691,55 @@ async function checkForStableUpdate({
     try { state.recordCheck(latest.version); } catch { /* best-effort only */ }
     return { action: "continue", reason: "up-to-date" };
   }
-  return { action: "delegate", version: latest.version };
+  return { action: "delegate", ...latest };
 }
 
-function buildStableUpdateInvocation(version, args, { platform = process.platform } = {}) {
-  if (!isStableVersion(version)) throw new Error("自动升级只能委托到正式版");
+function buildStableUpdateInvocation(descriptor, args, {
+  platform = process.platform,
+  artifactPath,
+} = {}) {
+  const validated = validateUpdateDescriptor(descriptor);
   if (!isSafeAutoUpdateEntry(args)) throw new Error("自动升级入口无效");
+  const isAbsoluteArtifact = platform === "win32"
+    ? path.win32.isAbsolute(artifactPath || "")
+    : path.isAbsolute(artifactPath || "");
+  if (typeof artifactPath !== "string" || !isAbsoluteArtifact) {
+    throw new Error("自动升级本地制品路径无效");
+  }
   return {
-    executable: platform === "win32" ? "npx.cmd" : "npx",
-    args: ["--yes", "--ignore-scripts", `rainskills@${version}`, ...args],
+    executable: platform === "win32" ? "npm.cmd" : "npm",
+    args: [
+      "exec",
+      "--yes",
+      "--ignore-scripts",
+      `--registry=${validated.registry}`,
+      `--package=${artifactPath}`,
+      "--",
+      "rainskills",
+      ...args,
+    ],
   };
 }
 
-function buildStableUpdateEnvironment(source, { fromVersion, targetVersion }) {
+function sanitizeAutoUpdateEnvironment(source = process.env) {
+  const environment = {};
+  for (const key of AUTO_UPDATE_ENVIRONMENT_KEYS) {
+    if (typeof source[key] === "string") environment[key] = source[key];
+  }
+  return environment;
+}
+
+function buildStableUpdateEnvironment(source, { fromVersion, targetVersion, registry }) {
   if (!isStableVersion(fromVersion) || !isStableVersion(targetVersion)) {
     throw new Error("自动升级环境只能绑定正式版");
   }
+  if (!sourceForRegistry(registry)) throw new Error("自动升级 registry 无效");
   return {
-    ...source,
+    ...sanitizeAutoUpdateEnvironment(source),
     RAINSKILLS_AUTO_UPDATE_HOP: "1",
     RAINSKILLS_AUTO_UPDATE_FROM: fromVersion,
     RAINSKILLS_AUTO_UPDATE_TARGET: targetVersion,
-    npm_config_registry: OFFICIAL_REGISTRY,
+    npm_config_registry: registry,
     npm_config_ignore_scripts: "true",
   };
 }
@@ -492,19 +890,35 @@ function synchronizeInstalledSkills({
 }
 
 module.exports = {
+  AUTO_UPDATE_ENVIRONMENT_KEYS,
   DEFAULT_CHECK_TTL_MS,
+  INTERNAL_TIMEOUT_CODE,
+  MAX_METADATA_BYTES,
+  MAX_TARBALL_BYTES,
+  METADATA_FALLBACK_ERROR_CODES,
+  METADATA_TIMEOUT_MS,
   OFFICIAL_LATEST_URL,
+  OFFICIAL_REGISTRY,
+  REGISTRY_SOURCES,
+  TARBALL_TIMEOUT_MS,
+  acquireStableUpdateArtifact,
   buildStableUpdateEnvironment,
   buildStableUpdateInvocation,
   checkForStableUpdate,
   compareStableVersions,
   createAutoUpdateState,
+  fetchLatestWithFallback,
   fetchOfficialLatest,
+  fetchRegistryMetadata,
   hasActiveOperation,
   isSafeAutoUpdateEntry,
   isStableVersion,
+  prepareStableUpdate,
   recordSkillInstallDestinations,
   resolveInstallDestinations,
+  sanitizeAutoUpdateEnvironment,
   synchronizeInstalledSkills,
+  validateRegistryLatestMetadata,
+  validateUpdateDescriptor,
   validateOfficialLatestMetadata,
 };

package/rainbond-platform-installer/scripts/installed-version.js

@@ -1,5 +1,5 @@
 "use strict";
 
 module.exports = Object.freeze({
-  version: "0.1.4",
+  version: "0.1.6",
 });

package/rainbond-platform-query/SKILL.md

@@ -14,7 +14,7 @@ Node.js 前置检查通过后，每次请求先执行本地 launcher + `["enviro
 
 第一步检查 Node.js 是否存在且主版本不低于 18。Node.js 缺失或低于 18 时，只说明“Rainskills 执行组件需要 Node.js 18 或更高版本”并停止：不选择运行环境，不调用 MCP，不猜测替代命令。只有用户或 agent 明确同意后才安装或升级 Node.js，再从同一原始 intent 继续。
 
-固定 launcher 是 `["npx", "--yes", "rainskills@0.1.4"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
+固定 launcher 是 `["npx", "--yes", "rainskills@0.1.6"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
 
 本地 launcher 必须从当前 Skill 所在目录的同级目录定位 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后使用 `["node", "<绝对路径>"]` 执行。`environment list`、`operation begin`、`operation complete` 和 `runtime message` 只能使用本地 launcher；本地 launcher 只读取已安装文件和本机受保护状态，不得访问 npm 或其它网络。只有用户选定连接运行环境后，才使用上面的固定 npx launcher。
 
@@ -22,7 +22,7 @@ Node.js 前置检查通过后，每次请求先执行本地 launcher + `["enviro
 ```json
 {
   "schema": "rainskills.skill-runtime-contract.v1",
-  "launcher": ["npx", "--yes", "rainskills@0.1.4"],
+  "launcher": ["npx", "--yes", "rainskills@0.1.6"],
   "local_launcher": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js"],
   "local_argv": {
     "environment-list": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "environment", "list", "--json"],
@@ -35,8 +35,8 @@ Node.js 前置检查通过后，每次请求先执行本地 launcher + `["enviro
   },
   "routes": {"existing": ["saas", "private-existing"]},
   "connect_argv": {
-    "saas": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
-    "private-existing": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"]
+    "saas": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
+    "private-existing": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"]
   }
 }
 ```

package/rainbond-project-init/SKILL.md

@@ -14,7 +14,7 @@ description: "Use only when the user explicitly asks to initialize or link a loc
 
 第一步检查 Node.js 是否存在且主版本不低于 18。Node.js 缺失或低于 18 时，只说明“Rainskills 执行组件需要 Node.js 18 或更高版本”并停止：不选择运行环境，不调用 MCP，不猜测替代命令。只有用户或 agent 明确同意后才安装或升级 Node.js，再从同一原始 intent 继续。
 
-固定 launcher 是 `["npx", "--yes", "rainskills@0.1.4"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
+固定 launcher 是 `["npx", "--yes", "rainskills@0.1.6"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
 
 本地 launcher 必须从当前 Skill 所在目录的同级目录定位 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后使用 `["node", "<绝对路径>"]` 执行。`environment list`、`operation begin`、`operation complete` 和 `runtime message` 只能使用本地 launcher；本地 launcher 只读取已安装文件和本机受保护状态，不得访问 npm 或其它网络。只有用户选定连接或安装运行环境后，才使用上面的固定 npx launcher。
 
@@ -22,7 +22,7 @@ description: "Use only when the user explicitly asks to initialize or link a loc
 ```json
 {
   "schema": "rainskills.skill-runtime-contract.v1",
-  "launcher": ["npx", "--yes", "rainskills@0.1.4"],
+  "launcher": ["npx", "--yes", "rainskills@0.1.6"],
   "local_launcher": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js"],
   "local_argv": {
     "environment-list": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "environment", "list", "--json"],
@@ -35,9 +35,9 @@ description: "Use only when the user explicitly asks to initialize or link a loc
   },
   "routes": {"new": ["saas", "private-existing", "install-private"]},
   "connect_argv": {
-    "saas": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
-    "private-existing": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"],
-    "install-private": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--install-private", "--location", "<private-location>", "--intent-json", "<intent-json>"]
+    "saas": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
+    "private-existing": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"],
+    "install-private": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--install-private", "--location", "<private-location>", "--intent-json", "<intent-json>"]
   }
 }
 ```

package/rainbond-template-installer/SKILL.md

@@ -14,7 +14,7 @@ description: "Use when the user explicitly asks to install a local or cloud Rain
 
 第一步检查 Node.js 是否存在且主版本不低于 18。Node.js 缺失或低于 18 时，只说明“Rainskills 执行组件需要 Node.js 18 或更高版本”并停止：不选择运行环境，不调用 MCP，不猜测替代命令。只有用户或 agent 明确同意后才安装或升级 Node.js，再从同一原始 intent 继续。
 
-固定 launcher 是 `["npx", "--yes", "rainskills@0.1.4"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
+固定 launcher 是 `["npx", "--yes", "rainskills@0.1.6"]`；版本必须与本技能包 `package.json` 一致。把 launcher 与参数拼成 argv 数组直接执行，禁止 `rainskills@latest` 或执行 shell 字符串。
 
 本地 launcher 必须从当前 Skill 所在目录的同级目录定位 `rainbond-platform-installer/scripts/local-runtime.js`，解析为绝对路径后使用 `["node", "<绝对路径>"]` 执行。`environment list`、`operation begin`、`operation complete` 和 `runtime message` 只能使用本地 launcher；本地 launcher 只读取已安装文件和本机受保护状态，不得访问 npm 或其它网络。只有用户选定连接或安装运行环境后，才使用上面的固定 npx launcher。
 
@@ -22,7 +22,7 @@ description: "Use when the user explicitly asks to install a local or cloud Rain
 ```json
 {
   "schema": "rainskills.skill-runtime-contract.v1",
-  "launcher": ["npx", "--yes", "rainskills@0.1.4"],
+  "launcher": ["npx", "--yes", "rainskills@0.1.6"],
   "local_launcher": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js"],
   "local_argv": {
     "environment-list": ["node", "<installed-skills-root>/rainbond-platform-installer/scripts/local-runtime.js", "environment", "list", "--json"],
@@ -38,9 +38,9 @@ description: "Use when the user explicitly asks to install a local or cloud Rain
     "existing": ["saas", "private-existing"]
   },
   "connect_argv": {
-    "saas": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
-    "private-existing": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"],
-    "install-private": ["npx", "--yes", "rainskills@0.1.4", "runtime", "connect", "<target>", "--install-private", "--location", "<private-location>", "--intent-json", "<intent-json>"]
+    "saas": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--saas", "--intent-json", "<intent-json>"],
+    "private-existing": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--rainbond-url", "<rainbond-url>", "--intent-json", "<intent-json>"],
+    "install-private": ["npx", "--yes", "rainskills@0.1.6", "runtime", "connect", "<target>", "--install-private", "--location", "<private-location>", "--intent-json", "<intent-json>"]
   }
 }
 ```