rainskills 0.1.46 → 0.1.47

package/README.md

@@ -15,7 +15,8 @@ DeepSeek Harness、WorkBuddy 和 Hermes Agent 能够继续完成应用部署、
 [产品介绍](https://www.rainbond.com/rainskills) ·
 [安装与使用](https://www.rainbond.com/docs/ai/rainskills) ·
 [视频教程](https://www.rainbond.com/videos/rainskills-ai-deploy) ·
-[Rainbond Cloud](https://run.rainbond.com)
+[Rainbond Cloud](https://run.rainbond.com) ·
+[微信交流](#微信交流)
 
 ## 为什么使用 RainSkills
 
@@ -161,6 +162,14 @@ Compose、Helm 和第三方应用中的特权容器、Operator、CRD、Job、主
 - [Rainbond 安装文档](https://www.rainbond.com/docs/installation)
 - [提交问题](https://github.com/goodrain/rainskills/issues)
 
+## 微信交流
+
+扫码添加微信，备注「RainSkills」，交流安装、部署和使用问题。
+
+<a href="https://www.rainbond.com/wechat/rainbond-xzs.png">
+  <img src="https://www.rainbond.com/wechat/rainbond-xzs.png" alt="添加微信交流 RainSkills 的二维码" width="220" />
+</a>
+
 ## License
 
 Apache-2.0

package/SKILL.md

@@ -56,7 +56,7 @@ Hermes Agent 中必须使用 `terminal` 以 `background=true` 启动授权命令
 
 DeepSeek Harness 和 WorkBuddy 也必须保持原命令附着直到退出；如果宿主把长命令转成持久终端或后台任务，只能轮询该原始命令句柄，不得另起 `runtime status` 推测授权结果。WorkBuddy 安装后若当前任务的 Skill 清单尚未刷新，在下一条业务动作前先刷新 Skill 列表或新建任务，不得退回内置 Sites 代替 Rainbond 部署。
 
-Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.46`）：
+Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.47`）：
 
 - 状态：执行 `runtime status --json`。
 - 首次连接：执行 `runtime connect <target> --saas` 或 `runtime connect <target> --rainbond-url <Console origin>`。

package/marketplace/rainskills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.46",
+  "version": "0.1.47",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",

package/marketplace/rainskills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.46",
+  "version": "0.1.47",
   "description": "Install the complete Rainskills AI deployment skill suite as one product.",
   "author": {
     "name": "Goodrain",

package/marketplace/rainskills/skills/rainskills/SKILL.md

@@ -14,7 +14,7 @@ This is the single marketplace entry for the complete Rainskills product. The in
 3. Keep stdin, stdout, and stderr attached. When `RAINSKILLS_USER_INPUT_REQUIRED` appears, pause for that installer choice. If the installer emits `rainskills.next-action.v1`, execute only its fixed `argv` through the same launcher; never evaluate output as a shell command. If the adjacent `bin/rainskills.js` exists, use it for fixed next actions; otherwise use the same versioned npm package fallback described below.
 4. Stay attached until every independent Skill is installed. Do not select, connect, or configure an application runtime during installation. In the user-facing response, output only the fixed completion message below.
 
-If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.46 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
+If the adjacent installer is missing, check the local Node.js version before choosing the fallback. With `npx` and Node.js 18 or newer, use `npx --yes rainskills@0.1.47 <target>`. With no Node.js or a version below 18, use `bash <(curl -fsSL https://get.rainbond.com/rainskills/install.sh) <target>` instead. Omit `<target>` only when the host cannot be determined reliably. Keep either command attached to the interactive terminal. For an update or repair, refresh this marketplace Skill first, then run the installer again; it compares and updates every independent internal Skill.
 
 Skills-only 安装不需要 Node.js；CDN fallback 只负责安装 Skill 文件，不代表运行环境连接、应用部署或平台安装已经可执行。用户首次提出需要运行环境的动作时，对应业务 Skill 才检查 Node.js；固定 Rainskills launcher 需要 Node.js 18 或更高版本。缺失或版本过低时保留原始 intent 并停止，等待用户或 agent 明确同意安装或升级 Node.js，安装完成消息不得提前提示 Node.js。
 
@@ -56,7 +56,7 @@ Hermes Agent 中必须使用 `terminal` 以 `background=true` 启动授权命令
 
 DeepSeek Harness 和 WorkBuddy 也必须保持原命令附着直到退出；如果宿主把长命令转成持久终端或后台任务，只能轮询该原始命令句柄，不得另起 `runtime status` 推测授权结果。WorkBuddy 安装后若当前任务的 Skill 清单尚未刷新，在下一条业务动作前先刷新 Skill 列表或新建任务，不得退回内置 Sites 代替 Rainbond 部署。
 
-Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.46`）：
+Rainskills 只保存一个全局运行环境，不维护环境列表、名称、默认值或环境 ID。使用固定 launcher `node <home>/.rainbond/lib/rainskills/bin/rainskills.js`（运行包版本 `rainskills@0.1.47`）：
 
 - 状态：执行 `runtime status --json`。
 - 首次连接：执行 `runtime connect <target> --saas` 或 `runtime connect <target> --rainbond-url <Console origin>`。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rainskills",
-  "version": "0.1.46",
+  "version": "0.1.47",
   "description": "Agent Skills for deploying, troubleshooting, and verifying applications on Rainbond from Codex, Claude Code, and other AI coding agents",
   "license": "Apache-2.0",
   "homepage": "https://www.rainbond.com/rainskills",

package/rainbond-ai-assistant/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 66eacc1cce9b19faed97865175e483eb46d1172e0d28b8e56274487a8d560a8a -->
+<!-- source-sha256: 93f81735a2b3675d035966ad237b7c035770375b6a4c068ce8a196a189667371 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -48,7 +48,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-app-assistant/references/generated/runtime-gate.md

@@ -1,12 +1,12 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: a6cd0d2a363379bdd6a42a512d8ae1dccddee05d6077d5cdf66270b4916aadef -->
+<!-- source-sha256: 5be7e59399345293898319a817284aed82158de668484672bdedd1237436b61b -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
 
 本机只允许连接一个 Rainbond 运行环境。当前 Skill 在本会话第一次调用 Rainbond 前，执行固定 launcher 的 `runtime status --json`。只有命令退出码为 0、`state=connected` 且 `usable=true` 时才继续。不得配置或直接调用客户端 MCP，不得枚举环境、读取凭据、创建自定义业务 operation，或生成运行环境 ID、业务 operation ID 与 intent JSON。固定 batch/recipe 请求和 CLI 返回的 confirmation_id 属于受保护调用协议，不是模型自建业务工作流。
 
-运行状态的 `package_version` 必须与下方 JSON contract 完全一致；缺失或不一致时先执行固定版本 `rainskills@0.1.46` 的更新/修复流程。不得在版本错配时继续业务调用。
+运行状态的 `package_version` 必须与下方 JSON contract 完全一致；缺失或不一致时先执行固定版本 `rainskills@0.1.47` 的更新/修复流程。不得在版本错配时继续业务调用。
 
 如果 integrity.status=failed 或 repair_required=true，停止业务调用并修复相同版本的本地安装；不得将缺模块当作 API 参数错误排查或绕过兼容入口。
 
@@ -47,7 +47,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-app-assistant/references/phases/topology-selection.md

@@ -34,7 +34,7 @@
 
     **持久化方案**：
     1. 用 `rainbond_manage_component_storage(operation=create_volume, volume_type=share-file, volume_path=<官方数据目录>)` 在服务的数据目录挂 RWX 共享文件存储（stateless 组件能挂）
-    2. 然后 `rainbond_operate_app(action=deploy)` — **先挂存储再 deploy**，顺序不能反
+    2. 然后应用配置：**首次部署**用 `rainbond_operate_app(action=deploy)`；组件**已在运行时**只改存储/配置要用 `action=upgrade`（deploy 会重新构建，upgrade 只做滚动更新）— 顺序不能反
     3. **禁止**用 `volume_type=local`（local 强制要求 stateful，平台会 HTTP 400 拒绝）
 
     **需要 stateful + local volume（高 IOPS 数据库）的唯一路径**：通过 `rainbond_install_app_model` 从应用市场安装预配置的 stateful 模板。镜像/源码模式做不到这件事，不要假装能做。

package/rainbond-app-version-assistant/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: a62cbdd4cb2982dcb7b4bb69a520c58587a03ce683e8a3753c144a221ba3f9a2 -->
+<!-- source-sha256: 853010671a62a371cc9d4374024c1af573b0d531ad94385a3b5c5421201a1103 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -46,7 +46,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-delivery-verifier/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 103da691520dc6f6f754495bf5c61dad7c9685899dec944c9c4831eafad1e358 -->
+<!-- source-sha256: 22b768acbfa20399c095ee952f61f8cb2a8ae14ba25aaddb548b0a835b9e30df -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -47,7 +47,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-env-sync/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: e260f8269e0fd04cfefdcd694bb8ab469a9bab0889cc1a0f92b389ee76b53e2a -->
+<!-- source-sha256: e3242005579b3f87c9deabbbac6378e137371fc64833c49a165229ee633bd7ea -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -47,7 +47,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-fullstack-bootstrap/modules/30-creation-rules.md

@@ -35,6 +35,8 @@ Call `rainbond_create_component_from_image` with `is_deploy=false`. Reuse the re
 
 Do not accept the Console default `is_deploy=true` and then deploy the same component again after configuration. If an existing component was already deployed successfully, port and outer-access changes synchronize through the Console/Region APIs; do not rebuild it merely to apply those changes.
 
+If the component is already running and you are only changing envs, dependencies, storage, probes, or connection envs, apply the change with `rainbond_operate_app(action=upgrade)` instead of `deploy` — `deploy` rebuilds from source or image, while `upgrade` applies saved configuration through a rolling update.
+
 ## 2b. Deployment-plan readiness for multi-component image topologies
 
 Before any mutating Rainbond Tool call for a multi-component image deployment, build a short `DeploymentPlanReadiness` mentally and stop if it is not ready.

package/rainbond-fullstack-bootstrap/modules/35-runtime-topology-rules.md

@@ -48,7 +48,7 @@ For services not in this list, recall the documented data directory from the ima
 
 **Rules**:
 - inspect existing component storage before deploying the stateful-service component
-- if no durable storage is already mounted at the data directory, use `rainbond_manage_component_storage(operation=create_volume, volume_name=<short-name>, volume_type=share-file, volume_path=<data-dir>)` **before** `rainbond_operate_app(action=deploy)`
+- if no durable storage is already mounted at the data directory, use `rainbond_manage_component_storage(operation=create_volume, volume_name=<short-name>, volume_type=share-file, volume_path=<data-dir>)` **before** applying it — use `rainbond_operate_app(action=upgrade)` for an already-running component, and `action=deploy` only when this is the component's first deployment or a rebuild is actually required
 - prefer the smallest durable storage binding accepted by the platform; do not invent a storage class, PVC name, host path, reclaim policy, or data-retention guarantee
 - if the storage Tool call fails or the platform does not expose a usable storage provider, do not silently ignore it; report missing persistence as a bootstrap caveat or blocker depending on user intent
 - if no stateful service component is present, no persistence check is required

package/rainbond-fullstack-bootstrap/references/generated/runtime-gate.md

@@ -1,12 +1,12 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: b1cc4e1820904668fae44e6417e628f222a06edc5c0ce484f41662ce88128454 -->
+<!-- source-sha256: 2c0b21970071bb63fa3f01f6c2bf631cdf1c39e8ddb5bd0c6184e3972bf8355a -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
 
 本机只允许连接一个 Rainbond 运行环境。当前 Skill 在本会话第一次调用 Rainbond 前，执行固定 launcher 的 `runtime status --json`。只有命令退出码为 0、`state=connected` 且 `usable=true` 时才继续。不得配置或直接调用客户端 MCP，不得枚举环境、读取凭据、创建自定义业务 operation，或生成运行环境 ID、业务 operation ID 与 intent JSON。固定 batch/recipe 请求和 CLI 返回的 confirmation_id 属于受保护调用协议，不是模型自建业务工作流。
 
-运行状态的 `package_version` 必须与下方 JSON contract 完全一致；缺失或不一致时先执行固定版本 `rainskills@0.1.46` 的更新/修复流程。不得在版本错配时继续业务调用。
+运行状态的 `package_version` 必须与下方 JSON contract 完全一致；缺失或不一致时先执行固定版本 `rainskills@0.1.47` 的更新/修复流程。不得在版本错配时继续业务调用。
 
 如果 integrity.status=failed 或 repair_required=true，停止业务调用并修复相同版本的本地安装；不得将缺模块当作 API 参数错误排查或绕过兼容入口。
 
@@ -47,7 +47,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-fullstack-bootstrap/references/quick-reference.md

@@ -2,6 +2,14 @@
 
 Use this file for low-frequency reminders. Do not treat it as the source of truth for execution logic.
 
+## Operation semantics (upgrade vs deploy vs restart)
+
+- `rainbond_operate_app(action=upgrade)` applies already-saved configuration (env, dependency, storage, probe, connection env, ports) to running instances through a rolling update. It does not rebuild.
+- `rainbond_operate_app(action=deploy)` rebuilds from source or image and then deploys. Use it for the first deployment, or when the code or image actually changed.
+- `rainbond_operate_app(action=restart)` only recreates instances: it neither rebuilds nor applies pending configuration changes.
+- `rainbond_build_component` is the creation-step build, not a configuration-update mechanism.
+- A 409 "operation too frequent" response means the previous async event is still running. Wait for its terminal state (bounded) instead of retrying immediately; the platform releases the guard after 3 minutes.
+
 ## Common Mistakes
 
 - creating duplicate components instead of checking existing ones first

package/rainbond-fullstack-troubleshooter/references/diagnosis-workflow.md

@@ -4,6 +4,13 @@ Load this reference for evidence collection, operation anchoring, bounded repair
 
 For a build, restart, or redeploy that needs repeated status reads, invoke protected `poll` once. The CLI owns the bounded loop and returns only state transitions, final state, blocker, retryability, attempts, and elapsed time; unchanged states never enter model context.
 
+## Operation and status vocabulary
+
+- Apply a repaired env / dependency / storage / probe / connection-env change with `rainbond_operate_app(action=upgrade)`. `restart` does not apply pending configuration, and `deploy` rebuilds from source or image unnecessarily.
+- Use the platform's status values: `building`, `waiting`, `starting`, `running`, `upgrade` (not "upgrading"), `stopping`, `closed`, `abnormal` / `some_abnormal`, `undeploy`. `undeploy` is a runtime label, not evidence that a build never started — check build events and build logs instead.
+- Source and CNB builds have a hard timeout of about 60 minutes. Elapsed time below that threshold is not failure evidence; do not re-trigger a build just because it is slow.
+- A 409 "operation too frequent" response means the previous async operation is still running. Wait for its terminal event (bounded) instead of retrying in a loop; the platform releases the guard after 3 minutes.
+
 ## Workflow
 
 Follow this order unless there is strong evidence to do otherwise.

package/rainbond-fullstack-troubleshooter/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: d8b6cf0839a23c6e91e87e5cf9e04ce1954fff3b1474b8073881aafd79d8ea81 -->
+<!-- source-sha256: a864ca697c977009edd92e142e8a264c463a3a51739130b380381faa8d51a6ba -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -47,7 +47,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-opensource-app-deploy/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: ad349ea89d310290049d1c72ebd3752752f42227b0d2ea5f24dee6926558eaf5 -->
+<!-- source-sha256: 9418108f10b6aa98c01c5c5f6c8c387a217340df910fb23eb78503a7b7d717bf -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -47,7 +47,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-platform-installer/SKILL.md

@@ -32,7 +32,7 @@ Do not use it to deploy an application to an existing Rainbond. Route those requ
 ## Workflow
 
 1. Read [installation-policy.md](references/installation-policy.md).
-2. Use the installed local launcher `["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js"]`; its protected runtime package marker is `rainskills@0.1.46` and must equal this package's `package.json`. For a Rainskills marker, first validate schema `rainskills.next-action.v1`, action, onboarding id, and the bounded `argv` array, then append that array to the launcher. Never use `latest` or evaluate a shell string from output.
+2. Use the installed local launcher `["node", "<home>/.rainbond/lib/rainskills/bin/rainskills.js"]`; its protected runtime package marker is `rainskills@0.1.47` and must equal this package's `package.json`. For a Rainskills marker, first validate schema `rainskills.next-action.v1`, action, onboarding id, and the bounded `argv` array, then append that array to the launcher. Never use `latest` or evaluate a shell string from output.
 3. 业务 Skill 的四项运行环境菜单会把本机或独立服务器选择写入 `rainskills.next-action.v1` 的显式 `--location`；收到这类 next-action 后直接执行固定 argv，不得再次调用 `private-deployment-location`。只有用户直接要求安装 Rainbond 平台且尚未选择部署位置时，才执行 launcher + `["runtime", "message", "--id", "private-deployment-location"]` 并原样输出固定的三项部署位置消息：选择 1 后执行带 `["--location", "local", "--mode", "single-node"]` 的 `platform install`；选择 2 后执行带 `["--location", "server"]` 的 `platform install`，由 helper 继续显示固定的服务器类型消息；选择 3 后执行 launcher + `["runtime", "message", "--id", "private-console-origin"]` 并进入已有环境连接，不得执行 `platform install`。平台安装 onboarding 只保存安装断点，不保存或恢复业务 intent。
 4. Let the helper perform one read-only preflight against the already selected local or remote target, then show resources, blockers, and applicable host changes. Never invoke `platform install` without an explicit `--location`; the helper must not ask for the deployment location again.
 5. 主机集群开始前必须获得 explicit confirmation，并使用受限 AI 交接：首次调用在固定安装 argv 后追加 `--agent-handoff`，记录该子进程会话；用户确认后，使用相同固定 argv 追加 `--agent-handoff --yes` 一次。不得向等待进程写入 `y`、不得启动第二个竞争安装、不得 `kill` 安装进程，也不得让用户复制完整安装或恢复命令。用户取消时，仅使用同一 argv 追加 `--agent-handoff --cancel`；它只能清除匹配的待确认状态，不能建立 SSH 连接或修改服务器。

package/rainbond-platform-installer/scripts/installed-version.js

@@ -1,5 +1,5 @@
 "use strict";
 
 module.exports = Object.freeze({
-  version: "0.1.46",
+  version: "0.1.47",
 });

package/rainbond-platform-plugin-manager/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 25b8cea9ba6079659aa6942cd018be040ff757d8475d9235f129a34392b436b6 -->
+<!-- source-sha256: 6aaea2d5aaa7bf141ff4005d47af8e0b0eee98f457281329b42405e7bf382f68 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -47,7 +47,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-platform-query/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 65f87ea03854274e395134ad086b90aa2f05580e94263400c1917bc6279b7609 -->
+<!-- source-sha256: 4060efcceb17e539cd58b2d845e3ec12b0691fca1b254e7430675b048748fc44 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -47,7 +47,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-project-init/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: f2db011c8f43aa8531dfcc58e20af527d1e8396cc52801410c0cfb7101c50351 -->
+<!-- source-sha256: ff434f13cc5569e15c42133361f86f874f4bbbb94930dd77e8bef9cbdb298ae4 -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -47,7 +47,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",

package/rainbond-template-installer/references/generated/runtime-gate.md

@@ -1,5 +1,5 @@
 <!-- generated-by: scripts/sync-runtime-contracts.mjs -->
-<!-- source-sha256: 23fbd176cae29b97571b67a6c775ba4d260c68a77ca4421699037e7eed2036fd -->
+<!-- source-sha256: 91a56ac8810eb619f15f34e298f5e3f54373878737ac65324151347995bb9f2d -->
 <!-- profile: cli -->
 <!-- rainskills-runtime-gate:start -->
 # 单运行环境 CLI 门禁（生成文件）
@@ -47,7 +47,7 @@ Hermes Agent 使用 `terminal` 且 `background=true` 启动授权，随后只对
 ```json
 {
   "schema": "rainskills.single-runtime-contract.v1",
-  "package_version": "rainskills@0.1.46",
+  "package_version": "rainskills@0.1.47",
   "runtime_status": [
     "node",
     "<home>/.rainbond/lib/rainskills/bin/rainskills.js",