rainskills 0.1.44 → 0.1.45

package/SKILL.md

@@ -18,6 +18,8 @@ If the adjacent installer is missing, check the local Node.js version before cho
 
 Skills-only 安装不需要 Node.js；CDN fallback 只负责安装 Skill 文件，不代表运行环境连接、应用部署或平台安装已经可执行。用户首次提出需要运行环境的动作时，对应业务 Skill 才检查 Node.js；固定 Rainskills launcher 需要 Node.js 18 或更高版本。缺失或版本过低时保留原始 intent 并停止，等待用户或 agent 明确同意安装或升级 Node.js，安装完成消息不得提前提示 Node.js。
 
+WorkBuddy 中安装、更新和修复必须以前台附着方式启动，不得主动设置后台执行、使用 `&` 或 `nohup`。需要访问 `~/.rainbond` 或确认批量删除时，通过宿主的正常授权流程处理；发生权限或 `SAFE_DELETE_BULK_CONFIRM_REQUIRED` 错误时，先处理授权，不得重复启动后台重试或拆分删除来规避守卫。宿主自动返回持久句柄时继续等待原句柄；安装失败时保留 `[rainskills-cli]` 阶段和原始错误，不能仅凭 Skill 已复制就报告完整安装成功。安装验证成功后的 `[rainskills-cli][cleanup]` 提示表示临时文件待清理，不等于安装失败。
+
 执行优化：同一会话内只检查一次 Node.js 和运行环境状态；仅在 Node.js、Rainskills 或唯一运行环境发生变化后失效。固定 launcher 和 argv 已在本 Skill 中，禁止读取、搜索或探测 `rainskills.js`，也禁止执行 `npm root -g`。
 
 ## Completion Message
@@ -54,7 +56,7 @@ Hermes Agent 中必须使用 `terminal` 以 `background=true` 启动授权命令
 
 DeepSeek Harness 和 WorkBuddy 也必须保持原命令附着直到退出；如果宿主把长命令转成持久终端或后台任务，只能轮询该原始命令句柄，不得另起 `runtime status` 推测授权结果。WorkBuddy 安装后若当前任务的 Skill 清单尚未刷新，在下一条业务动作前先刷新 Skill 列表或新建任务，不得退回内置 Sites 代替 Rainbond 部署。
 
-Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.44`）：
+Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.45`）：
 
 - 状态：执行 `runtime status --json`。
 - 首次连接：执行 `runtime connect <target> --saas` 或 `runtime connect <target> --rainbond-url <Console origin>`。

package/install.sh

@@ -1165,7 +1165,7 @@ install_local_cli() {
   local installer="$SCRIPT_DIR/scripts/install-local-cli.mjs"
   [[ -f "$installer" ]] || die "Rainskills 本地 CLI 安装器缺失。"
   node "$installer" --source-root "$SCRIPT_DIR" --home "$HOME" >/dev/null \
-    || die "Rainskills 本地 CLI 安装失败。"
+    || die "Rainskills 本地 CLI 刷新未完成，请查看上方 [rainskills-cli] 阶段和原始错误；目录访问或删除确认被拒绝时，请在前台取得宿主授权后重试。"
 }
 
 copy_skill() {

package/marketplace/rainskills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.44",
+  "version": "0.1.45",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",

package/marketplace/rainskills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.44",
+  "version": "0.1.45",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",

package/marketplace/rainskills/skills/rainskills/SKILL.md

@@ -14,10 +14,12 @@ This is the single marketplace entry for the complete Rainskills product. The in
 3. Keep stdin, stdout, and stderr attached. When `RAINSKILLS_USER_INPUT_REQUIRED` appears, pause for that installer choice. If the installer emits `rainskills.next-action.v1`, execute only its fixed `argv` through the same launcher; never evaluate output as a shell command. If the adjacent `bin/rainskills.js` exists, use it for fixed next actions; otherwise use the same versioned npm package fallback described below.
 4. Stay attached until every independent Skill is installed. Do not select, connect, or configure an application runtime during installation. In the user-facing response, output only the fixed completion message below.
 
-If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.44 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
+If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.45 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
 
 Skills-only 安装不需要 Node.js；CDN fallback 只负责安装 Skill 文件，不代表运行环境连接、应用部署或平台安装已经可执行。用户首次提出需要运行环境的动作时，对应业务 Skill 才检查 Node.js；固定 Rainskills launcher 需要 Node.js 18 或更高版本。缺失或版本过低时保留原始 intent 并停止，等待用户或 agent 明确同意安装或升级 Node.js，安装完成消息不得提前提示 Node.js。
 
+WorkBuddy 中安装、更新和修复必须以前台附着方式启动，不得主动设置后台执行、使用 `&` 或 `nohup`。需要访问 `~/.rainbond` 或确认批量删除时，通过宿主的正常授权流程处理；发生权限或 `SAFE_DELETE_BULK_CONFIRM_REQUIRED` 错误时，先处理授权，不得重复启动后台重试或拆分删除来规避守卫。宿主自动返回持久句柄时继续等待原句柄；安装失败时保留 `[rainskills-cli]` 阶段和原始错误，不能仅凭 Skill 已复制就报告完整安装成功。安装验证成功后的 `[rainskills-cli][cleanup]` 提示表示临时文件待清理，不等于安装失败。
+
 执行优化：同一会话内只检查一次 Node.js 和运行环境状态；仅在 Node.js、Rainskills 或唯一运行环境发生变化后失效。固定 launcher 和 argv 已在本 Skill 中，禁止读取、搜索或探测 `rainskills.js`，也禁止执行 `npm root -g`。
 
 ## Completion Message
@@ -54,7 +56,7 @@ Hermes Agent 中必须使用 `terminal` 以 `background=true` 启动授权命令
 
 DeepSeek Harness 和 WorkBuddy 也必须保持原命令附着直到退出；如果宿主把长命令转成持久终端或后台任务，只能轮询该原始命令句柄，不得另起 `runtime status` 推测授权结果。WorkBuddy 安装后若当前任务的 Skill 清单尚未刷新，在下一条业务动作前先刷新 Skill 列表或新建任务，不得退回内置 Sites 代替 Rainbond 部署。
 
-Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.44`）：
+Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.45`）：
 
 - 状态：执行 `runtime status --json`。
 - 首次连接：执行 `runtime connect <target> --saas` 或 `runtime connect <target> --rainbond-url <Console origin>`。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.44",
+  "version": "0.1.45",
   "description": "Agent Skills for deploying, troubleshooting, and verifying applications on Rainbond from Codex, Claude Code, and other AI coding agents",
   "license": "Apache-2.0",
   "homepage": "https://www.rainbond.com/rainskills",

package/rainbond-ai-assistant/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 407be69c4a1e05267351de92bea3bd86de25e214da29ccab0161cf03995010b4 -->
+<!-- source-sha256: af4e6cce256157708266a81546a2d5f833e7a07ee5cb2cb2cb792e6c3d02569a -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -46,7 +46,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-app-assistant/references/generated/runtime-gate.md

@@ -1,12 +1,12 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: a5776748a0eea260fdab887e06ab14e942104a91af58376b6074a16bfaa8c3a8 -->
+<!-- source-sha256: 25d0104745440047b3af7fbb816ce2e09d38028d4aca5cc3c274bfd72691851d -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
 
 本机只允许连接一个 Rainbond 运行环境。当前 Skill 在本会话第一次调用 Rainbond 前，执行固定 launcher 的 `runtime status --json`。只有命令退出码为 0、`state=connected` 且 `usable=true` 时才继续。不得配置或直接调用客户端 MCP，不得枚举环境、读取凭据、创建业务 operation，或生成运行环境 ID、业务 operation ID 与 intent JSON。
 
-运行状态的 `package_version` 必须与下方 JSON contract 完全一致；缺失或不一致时先执行固定版本 `rainskills@0.1.44` 的更新/修复流程。不得在版本错配时继续业务调用。
+运行状态的 `package_version` 必须与下方 JSON contract 完全一致；缺失或不一致时先执行固定版本 `rainskills@0.1.45` 的更新/修复流程。不得在版本错配时继续业务调用。
 
 没有可用运行环境时，严格按下方 overlay 的 `missing_runtime_mode` 进入对应的 Runtime Routing；不得扩大可选环境范围。连接和重新授权必须使用浏览器 Device Flow，不复用 Shell 中缓存的 JWT；Device Flow 不依赖 stdin TTY，必须保持进程附着直到完成。新凭据只有通过 live probe 后才可覆盖唯一运行环境。CLI 返回 401 时，只读调用可在 `runtime reconnect` 成功后重试一次；写调用不得自动重放，必须先查询平台真实状态。403 直接停止，不重新授权。
 
@@ -45,7 +45,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-app-version-assistant/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 0207d062ca886a2af80e400a85489eda888379f1bffe23d1fdc30ca7de3698d7 -->
+<!-- source-sha256: c1ecff8cab7e7b71d85bace2465c54c9fd93a2c2676d1be5cf751a49553e2c44 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -44,7 +44,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-delivery-verifier/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 7b579e60e98ccb039e5bb1b17bebbd0b4f19441159a5ef7bfc4d5ddc36bfb97a -->
+<!-- source-sha256: 26e83b529d67597d2e57692140c14f93619ca1efd2a837f290210dcb76376745 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -45,7 +45,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-env-sync/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: e324c222832c1fa91a7205587d637a77cdfcc28cc8b075608b179a0fbac992ef -->
+<!-- source-sha256: 1de9f116eba7833fb91c2353fd4d259be7eabcd120c6a5b8d5e68acb0ed6cccd -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -45,7 +45,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-fullstack-bootstrap/references/generated/runtime-gate.md

@@ -1,12 +1,12 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: af604e84211aa7dc20a033117bd0d39720d7cace979068864f473cd2c79aa7fa -->
+<!-- source-sha256: 8da03d34dfa7f4e5f021de3b74e4b929756c77497ffbfd82db9a4e918d2298cd -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
 
 本机只允许连接一个 Rainbond 运行环境。当前 Skill 在本会话第一次调用 Rainbond 前，执行固定 launcher 的 `runtime status --json`。只有命令退出码为 0、`state=connected` 且 `usable=true` 时才继续。不得配置或直接调用客户端 MCP，不得枚举环境、读取凭据、创建业务 operation，或生成运行环境 ID、业务 operation ID 与 intent JSON。
 
-运行状态的 `package_version` 必须与下方 JSON contract 完全一致；缺失或不一致时先执行固定版本 `rainskills@0.1.44` 的更新/修复流程。不得在版本错配时继续业务调用。
+运行状态的 `package_version` 必须与下方 JSON contract 完全一致；缺失或不一致时先执行固定版本 `rainskills@0.1.45` 的更新/修复流程。不得在版本错配时继续业务调用。
 
 没有可用运行环境时，严格按下方 overlay 的 `missing_runtime_mode` 进入对应的 Runtime Routing；不得扩大可选环境范围。连接和重新授权必须使用浏览器 Device Flow，不复用 Shell 中缓存的 JWT；Device Flow 不依赖 stdin TTY，必须保持进程附着直到完成。新凭据只有通过 live probe 后才可覆盖唯一运行环境。CLI 返回 401 时，只读调用可在 `runtime reconnect` 成功后重试一次；写调用不得自动重放，必须先查询平台真实状态。403 直接停止，不重新授权。
 
@@ -45,7 +45,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-fullstack-troubleshooter/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 705856e35a6691b7295b8fec2e4bc6a9aa5f806a462cbfb5c91dda530b692183 -->
+<!-- source-sha256: 4b6a1e5e9fbcd279fc9d50727b24f877d4f760a35cab179f9a6af1a3623b4bca -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -45,7 +45,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-opensource-app-deploy/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: e7f02f9aa92464bf47e7f92126e6075b1f88616093e64aefb953ee814166444f -->
+<!-- source-sha256: 8a5fd3a36879552fb183ec31edc5db34cfc22bc091d7e5434ab01206c053caf2 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -45,7 +45,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-platform-installer/SKILL.md

@@ -32,7 +32,7 @@ Do not use it to deploy an application to an existing Rainbond. Route those requ
 ## Workflow
 
 1. Read [installation-policy.md](references/installation-policy.md).
-2. Use the installed local launcher `["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js"]`; its protected runtime package marker is `rainskills@0.1.44` and must equal this package's `package.json`. For a Rainskills marker, first validate schema `rainskills.next-action.v1`, action, onboarding id, and the bounded `argv` array, then append that array to the launcher. Never use `latest` or evaluate a shell string from output.
+2. Use the installed local launcher `["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js"]`; its protected runtime package marker is `rainskills@0.1.45` and must equal this package's `package.json`. For a Rainskills marker, first validate schema `rainskills.next-action.v1`, action, onboarding id, and the bounded `argv` array, then append that array to the launcher. Never use `latest` or evaluate a shell string from output.
 3. 业务 Skill 的四项运行环境菜单会把本机或独立服务器选择写入 `rainskills.next-action.v1` 的显式 `--location`；收到这类 next-action 后直接执行固定 argv，不得再次调用 `private-deployment-location`。只有用户直接要求安装 Rainbond 平台且尚未选择部署位置时，才执行 launcher + `["runtime", "message", "--id", "private-deployment-location"]` 并原样输出固定的三项部署位置消息：选择 1 后执行带 `["--location", "local", "--mode", "single-node"]` 的 `platform install`；选择 2 后执行带 `["--location", "server"]` 的 `platform install`，由 helper 继续显示固定的服务器类型消息；选择 3 后执行 launcher + `["runtime", "message", "--id", "private-console-origin"]` 并进入已有环境连接，不得执行 `platform install`。平台安装 onboarding 只保存安装断点，不保存或恢复业务 intent。
 4. Let the helper perform one read-only preflight against the already selected local or remote target, then show resources, blockers, and applicable host changes. Never invoke `platform install` without an explicit `--location`; the helper must not ask for the deployment location again.
 5. 主机集群开始前必须获得 explicit confirmation，并使用受限 AI 交接：首次调用在固定安装 argv 后追加 `--agent-handoff`，记录该子进程会话；用户确认后，使用相同固定 argv 追加 `--agent-handoff --yes` 一次。不得向等待进程写入 `y`、不得启动第二个竞争安装、不得 `kill` 安装进程，也不得让用户复制完整安装或恢复命令。用户取消时，仅使用同一 argv 追加 `--agent-handoff --cancel`；它只能清除匹配的待确认状态，不能建立 SSH 连接或修改服务器。

package/rainbond-platform-installer/scripts/installed-version.js

@@ -1,5 +1,5 @@
 "use strict";
 
 module.exports = Object.freeze({
-  version: "0.1.44",
+  version: "0.1.45",
 });

package/rainbond-platform-plugin-manager/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 6e8d3eb9fe4bbc9d07ce8318824b6b0f35cdd938bb90819e4f7a882b2231a432 -->
+<!-- source-sha256: dc5c47857833406978d2b76c11de816e365450e6944edca5f4e1c374e108ddb8 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -45,7 +45,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-platform-query/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 6680fe773d693223188f304b9c560d978d38fd015090bff55b806017be5ee165 -->
+<!-- source-sha256: 4146c5cf054762b12425ac5d613e8dbb51990d28d5934ef72d8e80d155a664e2 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -45,7 +45,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-project-init/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 7b78902f6a310444505373a91113a650031ee468dc3bd61c5bd7f70966878890 -->
+<!-- source-sha256: 239ace1f451950a0f152afeeec2c84f4c033c743e9dce8fcc340c41b7ffb6572 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -45,7 +45,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-template-installer/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 8776f14d0763a14a1ec01da5080e0131231b18133b10b274a38c5815564979e5 -->
+<!-- source-sha256: 5c06904861105c30dd21af55b36bf828f63f78712e665cdc8fff2d7978fc18d8 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -45,7 +45,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.44",
+  "package_version": "rainskills@0.1.45",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/scripts/build-skill-manifest.mjs

@@ -144,7 +144,7 @@ export function buildSkillManifest({ source_root: sourceRoot, output, revision }
   ].sort((left, right) => path.basename(left).localeCompare(path.basename(right)));
   if (skillDirectories.length === 0) throw new Error("no RainSkills Skill directories were found");
   for (const directory of skillDirectories) assertRegularDirectory(directory, "Skill directory");
-  assertOutputOutsideSkills(output, skillDirectories);
+  if (output !== undefined) assertOutputOutsideSkills(output, skillDirectories);
 
   const skills = skillDirectories.map((directory) => {
     const id = path.basename(directory);
@@ -176,7 +176,8 @@ export function buildSkillManifest({ source_root: sourceRoot, output, revision }
     source_revision: revision || null,
     skills,
   };
-  writePrivateJson(output, manifest);
+  // Installers can compare the complete expected manifest before creating staging.
+  if (output !== undefined) writePrivateJson(output, manifest);
   return manifest;
 }
 

package/scripts/install-local-cli.mjs

@@ -1,6 +1,5 @@
 #!/usr/bin/env node
 
-import crypto from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -54,58 +53,89 @@ function assertRegularPath(absolute, expected) {
   }
 }
 
-function copyTree(source, destination) {
-  assertRegularPath(source, "directory");
-  fs.mkdirSync(destination, { recursive: true, mode: 0o700 });
-  for (const entry of fs.readdirSync(source, { withFileTypes: true })) {
-    const from = path.join(source, entry.name);
-    const to = path.join(destination, entry.name);
-    const info = fs.lstatSync(from);
-    if (info.isSymbolicLink()) throw new Error("runtime bundle cannot contain symbolic links");
-    if (info.isDirectory()) copyTree(from, to);
-    else if (info.isFile()) fs.copyFileSync(from, to, fs.constants.COPYFILE_EXCL);
-    else throw new Error("runtime bundle contains an unsupported file type");
+function lstatIfPresent(file) {
+  try { return fs.lstatSync(file); } catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw error;
   }
 }
 
-function replaceDirectory(staged, destination) {
-  const previous = `${destination}.previous.${process.pid}`;
-  fs.mkdirSync(path.dirname(destination), { recursive: true, mode: 0o700 });
-  if (fs.existsSync(destination)) fs.renameSync(destination, previous);
-  try {
-    fs.renameSync(staged, destination);
-  } catch (error) {
-    if (fs.existsSync(previous)) fs.renameSync(previous, destination);
-    throw error;
+// Capture bytes before replacing anything: source may itself be the installed CLI.
+function readTree(root, { privateDirectories = false } = {}) {
+  if (!lstatIfPresent(root)) return null;
+  const entries = new Map();
+  function visit(relative) {
+    const file = path.join(root, relative);
+    const info = fs.lstatSync(file);
+    if (info.isSymbolicLink()) throw new Error(`symbolic link is not allowed in CLI paths: ${file}`);
+    if (info.isDirectory()) {
+      entries.set(relative, { kind: "directory", mode: privateDirectories ? 0o700 : info.mode & 0o777 });
+      for (const name of fs.readdirSync(file).sort()) visit(path.join(relative, name));
+    } else if (info.isFile()) {
+      entries.set(relative, { kind: "file", mode: info.mode & 0o777, content: fs.readFileSync(file) });
+    } else throw new Error(`unsupported CLI file type: ${file}`);
   }
-  if (fs.existsSync(previous)) fs.rmSync(previous, { recursive: true, force: true });
+  visit("");
+  return entries;
+}
+
+function directoryTree() {
+  return new Map([["", { kind: "directory", mode: 0o700 }]]);
+}
+
+function fileTree(content, mode) {
+  return new Map([["", { kind: "file", mode, content: Buffer.from(content) }]]);
 }
 
-function installRuntimeBundle(source, stagedBundle) {
-  fs.mkdirSync(stagedBundle, { mode: 0o700 });
-  for (const directory of RUNTIME_BUNDLE_DIRECTORIES) {
-    copyTree(path.join(source, directory), path.join(stagedBundle, directory));
+function addSource(tree, source, relative, kind, mode) {
+  assertRegularPath(source, kind);
+  const entries = readTree(source, { privateDirectories: true });
+  if (mode !== undefined) entries.get("").mode = mode;
+  for (const [name, entry] of entries) tree.set(relative ? path.join(relative, name) : name, entry);
+}
+
+function treesEqual(expected, actual) {
+  if (!expected || !actual) return expected === actual;
+  if (expected.size !== actual.size) return false;
+  for (const [name, entry] of expected) {
+    const other = actual.get(name);
+    if (!other || other.kind !== entry.kind) return false;
+    // Windows ACL protection is not represented by POSIX mode bits.
+    if (process.platform !== "win32" && other.mode !== entry.mode) return false;
+    if (entry.kind === "file" && !entry.content.equals(other.content)) return false;
   }
-  for (const file of RUNTIME_BUNDLE_FILES) {
-    atomicCopy(path.join(source, file), path.join(stagedBundle, file), file === "install.sh" ? 0o700 : 0o600);
+  return true;
+}
+
+function writeTree(root, tree) {
+  for (const [relative, entry] of tree) {
+    const target = path.join(root, relative);
+    if (entry.kind === "directory") fs.mkdirSync(target, { mode: entry.mode });
+    else fs.writeFileSync(target, entry.content, { mode: entry.mode, flag: "wx" });
+    fs.chmodSync(target, entry.mode);
   }
-  const yamlPackage = requireFromInstaller.resolve("yaml/package.json", { paths: [source] });
-  copyTree(path.dirname(yamlPackage), path.join(stagedBundle, "node_modules", "yaml"));
 }
 
-function atomicCopy(source, destination, mode) {
-  assertRegularPath(source, "file");
-  const parent = path.dirname(destination);
-  fs.mkdirSync(parent, { recursive: true, mode: 0o700 });
-  const temporary = path.join(parent, `.${path.basename(destination)}.${process.pid}.${crypto.randomBytes(6).toString("hex")}.tmp`);
-  try {
-    fs.copyFileSync(source, temporary, fs.constants.COPYFILE_EXCL);
-    fs.chmodSync(temporary, mode);
-    fs.renameSync(temporary, destination);
-    fs.chmodSync(destination, mode);
-  } catch (error) {
-    try { fs.rmSync(temporary, { force: true }); } catch { /* keep original error */ }
-    throw error;
+function assertDestinationParents(home, destination) {
+  const relative = path.relative(home, destination);
+  if (!relative || relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) {
+    throw new Error("CLI destination must be inside the selected home");
+  }
+  let current = home;
+  for (const segment of relative.split(path.sep).slice(0, -1)) {
+    current = path.join(current, segment);
+    const info = lstatIfPresent(current);
+    if (info && (info.isSymbolicLink() || !info.isDirectory())) {
+      throw new Error(`CLI destination parent must be a regular directory, not a symbolic link: ${current}`);
+    }
+  }
+}
+
+function ensurePrivateDirectory(directory) {
+  if (!lstatIfPresent(directory)) fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+  assertRegularPath(directory, "directory");
+  if (process.platform !== "win32" && (fs.statSync(directory).mode & 0o777) !== 0o700) {
+    fs.chmodSync(directory, 0o700);
   }
 }
 
@@ -119,19 +149,11 @@ function safeConfigFile(file) {
   }
 }
 
-function writeMigratedConfig(file, content) {
-  const temporary = `${file}.rainskills.${process.pid}.${crypto.randomBytes(5).toString("hex")}.tmp`;
-  const backup = `${file}.rainskills-backup`;
-  fs.copyFileSync(file, backup);
-  fs.chmodSync(backup, 0o600);
-  try {
-    fs.writeFileSync(temporary, content, { encoding: "utf8", flag: "wx", mode: 0o600 });
-    fs.renameSync(temporary, file);
-    fs.chmodSync(file, 0o600);
-  } catch (error) {
-    try { fs.rmSync(temporary, { force: true }); } catch { /* keep original error */ }
-    throw error;
-  }
+function migratedConfig(file, original, content) {
+  return [
+    { destination: `${file}.rainskills-backup`, tree: fileTree(original, 0o600) },
+    { destination: file, tree: fileTree(content, 0o600) },
+  ];
 }
 
 function isLegacyRainskillsMcp(server) {
@@ -146,7 +168,7 @@ function isLegacyRainskillsMcp(server) {
 
 function migrateCodex(home) {
   const file = path.join(home, ".codex", "config.toml");
-  if (!safeConfigFile(file)) return false;
+  if (!safeConfigFile(file)) return [];
   const source = fs.readFileSync(file, "utf8");
   const sections = source.split(/(?=^\s*\[[^\r\n]+\]\s*$)/m);
   const filtered = sections.filter((section) => {
@@ -157,54 +179,122 @@ function migrateCodex(home) {
       || !/["']serve["']/i.test(section);
   });
   const output = filtered.join("");
-  if (output === source) return false;
-  writeMigratedConfig(file, output);
-  return true;
+  if (output === source) return [];
+  return migratedConfig(file, source, output);
 }
 
 function migrateClaude(home) {
   const file = path.join(home, ".claude.json");
-  if (!safeConfigFile(file)) return false;
+  if (!safeConfigFile(file)) return [];
   const source = fs.readFileSync(file, "utf8");
   const payload = JSON.parse(source);
-  if (!isLegacyRainskillsMcp(payload?.mcpServers?.rainbond)) return false;
+  if (!isLegacyRainskillsMcp(payload?.mcpServers?.rainbond)) return [];
   delete payload.mcpServers.rainbond;
-  writeMigratedConfig(file, `${JSON.stringify(payload, null, 2)}\n`);
-  return true;
+  return migratedConfig(file, source, `${JSON.stringify(payload, null, 2)}\n`);
 }
 
-export function installLocalCli({ source_root: sourceRoot, home }) {
+export function installLocalCli({ source_root: sourceRoot, home, warn = (message) => process.stderr.write(`${message}\n`) }) {
   const source = path.resolve(sourceRoot);
   const targetHome = path.resolve(home);
-  assertRegularPath(source, "directory");
   const rainbondHome = path.join(targetHome, ".rainbond");
   const binDirectory = path.join(rainbondHome, "bin");
   const libDirectory = path.join(rainbondHome, "lib");
-  fs.mkdirSync(rainbondHome, { recursive: true, mode: 0o700 });
-  fs.chmodSync(rainbondHome, 0o700);
-  const staging = path.join(rainbondHome, `.cli-install.${process.pid}.${crypto.randomBytes(6).toString("hex")}`);
-  fs.mkdirSync(staging, { mode: 0o700 });
+  let staging;
+  let phase = "prepare";
+  let retainBackups = false;
+  const transactions = [];
+  const cleanupPending = [];
+  const warning = (message) => { try { warn(message); } catch { /* diagnostics cannot mask an install error */ } };
   try {
-    const stagedRuntime = path.join(staging, "rainbond-platform-installer", "scripts");
-    copyTree(path.join(source, "rainbond-platform-installer", "scripts"), stagedRuntime);
-    const stagedBundle = path.join(staging, "rainskills");
-    installRuntimeBundle(source, stagedBundle);
-    const runtimeTarget = path.join(libDirectory, "rainbond-platform-installer");
-    fs.mkdirSync(libDirectory, { recursive: true, mode: 0o700 });
-    replaceDirectory(path.join(staging, "rainbond-platform-installer"), runtimeTarget);
-    replaceDirectory(stagedBundle, path.join(libDirectory, "rainskills"));
-
-    const stagedManifest = path.join(staging, "rainskills-skill-manifest.json");
-    buildSkillManifest({ source_root: source, output: stagedManifest });
-    atomicCopy(path.join(source, "bin", "rainskills-tools.js"), path.join(binDirectory, "rainskills-tools.js"), 0o700);
-    atomicCopy(path.join(source, "bin", "delivery-probe.js"), path.join(binDirectory, "delivery-probe.js"), 0o600);
-    atomicCopy(stagedManifest, path.join(binDirectory, "rainskills-skill-manifest.json"), 0o600);
-    migrateCodex(targetHome);
-    migrateClaude(targetHome);
+    assertRegularPath(source, "directory");
+    const runtime = directoryTree();
+    addSource(runtime, path.join(source, "rainbond-platform-installer", "scripts"), "scripts", "directory");
+    const bundle = directoryTree();
+    for (const directory of RUNTIME_BUNDLE_DIRECTORIES) addSource(bundle, path.join(source, directory), directory, "directory");
+    for (const file of RUNTIME_BUNDLE_FILES) addSource(bundle, path.join(source, file), file, "file", file === "install.sh" ? 0o700 : 0o600);
+    bundle.set("node_modules", { kind: "directory", mode: 0o700 });
+    const yamlPackage = requireFromInstaller.resolve("yaml/package.json", { paths: [source] });
+    addSource(bundle, path.dirname(yamlPackage), path.join("node_modules", "yaml"), "directory");
+    const manifest = buildSkillManifest({ source_root: source });
+    const plan = [
+      { destination: path.join(libDirectory, "rainbond-platform-installer"), tree: runtime },
+      { destination: path.join(libDirectory, "rainskills"), tree: bundle },
+    ];
+    for (const [name, mode] of [["rainskills-tools.js", 0o700], ["delivery-probe.js", 0o600]]) {
+      const tree = new Map();
+      addSource(tree, path.join(source, "bin", name), "", "file", mode);
+      plan.push({ destination: path.join(binDirectory, name), tree });
+    }
+    plan.push({ destination: path.join(binDirectory, "rainskills-skill-manifest.json"), tree: fileTree(`${JSON.stringify(manifest, null, 2)}\n`, 0o600) });
+    plan.push(...migrateCodex(targetHome), ...migrateClaude(targetHome));
+    const changes = plan.filter((entry) => {
+      assertDestinationParents(targetHome, entry.destination);
+      entry.original = readTree(entry.destination);
+      return !treesEqual(entry.tree, entry.original);
+    });
+    for (const directory of [rainbondHome, libDirectory, binDirectory]) ensurePrivateDirectory(directory);
+    if (changes.length === 0) return { binDirectory, status: "unchanged", cleanupPending };
+
+    phase = "stage";
+    staging = fs.mkdtempSync(path.join(rainbondHome, `.cli-install.${process.pid}.`));
+    fs.chmodSync(staging, 0o700);
+    fs.mkdirSync(path.join(staging, "new"), { mode: 0o700 });
+    fs.mkdirSync(path.join(staging, "backup"), { mode: 0o700 });
+    for (const [index, entry] of changes.entries()) {
+      const staged = path.join(staging, "new", String(index));
+      const backup = path.join(staging, "backup", String(index));
+      writeTree(staged, entry.tree);
+      if (!treesEqual(entry.tree, readTree(staged))) throw new Error(`staged content mismatch: ${entry.destination}`);
+      transactions.push({ ...entry, staged, backup, backedUp: false, published: false });
+    }
+    fs.writeFileSync(path.join(staging, "transaction.json"), `${JSON.stringify({
+      schema: "rainskills.cli-install-recovery.v1",
+      entries: transactions.map(({ destination, staged, backup, original }) => ({
+        destination, staged, backup, hadOriginal: original !== null,
+      })),
+    }, null, 2)}\n`, { flag: "wx", mode: 0o600 });
+    phase = "replace";
+    for (const entry of transactions) {
+      assertDestinationParents(targetHome, entry.destination);
+      if (!treesEqual(entry.original, readTree(entry.destination))) {
+        throw new Error(`CLI destination changed during preparation: ${entry.destination}`);
+      }
+      if (lstatIfPresent(entry.destination)) {
+        fs.renameSync(entry.destination, entry.backup);
+        entry.backedUp = true;
+      }
+      fs.renameSync(entry.staged, entry.destination);
+      entry.published = true;
+    }
+    phase = "verify";
+    for (const entry of plan) {
+      if (!treesEqual(entry.tree, readTree(entry.destination))) throw new Error(`installed content mismatch: ${entry.destination}`);
+    }
+  } catch (error) {
+    const rollbackErrors = [];
+    for (const entry of [...transactions].reverse()) {
+      try {
+        if (entry.published) fs.renameSync(entry.destination, entry.staged);
+        if (entry.backedUp) fs.renameSync(entry.backup, entry.destination);
+      } catch (rollbackError) {
+        rollbackErrors.push(`${entry.destination}: ${rollbackError.message}`);
+      }
+    }
+    retainBackups = rollbackErrors.length > 0;
+    const recovery = retainBackups ? `; rollback incomplete; backups retained at ${staging}: ${rollbackErrors.join("; ")}` : "";
+    const failure = new Error(`[rainskills-cli][${phase}] ${error.message}${recovery}`, { cause: error });
+    failure.code = error.code || "RAINSKILLS_CLI_INSTALL_FAILED";
+    failure.phase = phase;
+    throw failure;
   } finally {
-    fs.rmSync(staging, { recursive: true, force: true });
+    if (staging && !retainBackups) {
+      try { fs.rmSync(staging, { recursive: true, force: true }); } catch (error) {
+        cleanupPending.push(staging);
+        warning(`[rainskills-cli][cleanup] 临时文件待清理，已保留 ${staging}: ${error.message}`);
+      }
+    }
   }
-  return { binDirectory };
+  return { binDirectory, status: "installed", cleanupPending };
 }
 
 if (path.resolve(process.argv[1] || "") === fileURLToPath(import.meta.url)) {