teamai-cli 0.17.3 → 0.17.4

package/dist/index.js

@@ -139,13 +139,19 @@ var init_logger = __esm({
 var types_exports = {};
 __export(types_exports, {
   CONTRIBUTE_BASE_THRESHOLD: () => CONTRIBUTE_BASE_THRESHOLD,
+  CONTRIBUTE_CORRECTION_WEIGHT: () => CONTRIBUTE_CORRECTION_WEIGHT,
+  CONTRIBUTE_DIVERSITY_BONUS_MAX: () => CONTRIBUTE_DIVERSITY_BONUS_MAX,
   CONTRIBUTE_FASTPATH_TTL_MS: () => CONTRIBUTE_FASTPATH_TTL_MS,
   CONTRIBUTE_GIT_COMMIT_DOWNWEIGHT: () => CONTRIBUTE_GIT_COMMIT_DOWNWEIGHT,
+  CONTRIBUTE_INTERRUPT_WEIGHT: () => CONTRIBUTE_INTERRUPT_WEIGHT,
   CONTRIBUTE_KNOWLEDGE_GAP_BONUS: () => CONTRIBUTE_KNOWLEDGE_GAP_BONUS,
   CONTRIBUTE_LOW_QUALITY_BONUS: () => CONTRIBUTE_LOW_QUALITY_BONUS,
   CONTRIBUTE_LOW_QUALITY_THRESHOLD: () => CONTRIBUTE_LOW_QUALITY_THRESHOLD,
+  CONTRIBUTE_REJECT_WEIGHT: () => CONTRIBUTE_REJECT_WEIGHT,
   CONTRIBUTE_SESSIONS_DIR: () => CONTRIBUTE_SESSIONS_DIR,
+  CONTRIBUTE_SKILL_BONUS: () => CONTRIBUTE_SKILL_BONUS,
   CONTRIBUTE_SMART_THRESHOLD: () => CONTRIBUTE_SMART_THRESHOLD,
+  CONTRIBUTE_TOOLERROR_TIERS: () => CONTRIBUTE_TOOLERROR_TIERS,
   CORRECTION_KEYWORDS: () => CORRECTION_KEYWORDS,
   CORRECTION_WINDOW_MS: () => CORRECTION_WINDOW_MS,
   CultureCompanySchema: () => CultureCompanySchema,
@@ -283,7 +289,7 @@ function getPushignorePath() {
 function areTeamHooksDisabled() {
   return process.env.TEAMAI_HOOKS_DISABLED === "1" || process.env.TEAMAI_HOOKS_DISABLED === "true";
 }
-var ToolPathsSchema, ScopeEnum, SharingConfigSchema, SourceConfigSchema, SOURCE_PULL_TTL_MS, TEAMAI_SOURCES_DIR, TeamaiConfigSchema, MemberConfigSchema, LocalConfigSchema, StateSchema, TEAMAI_HOME, TEAMAI_CONFIG_PATH, TEAMAI_STATE_PATH, TEAMAI_TOKEN_PATH, TEAMAI_UPDATE_LOCK_PATH, RESOURCE_TYPES, TEAMAI_RULES_START, TEAMAI_RULES_END, TEAMAI_HOOK_DESCRIPTION_PREFIX, TEAMAI_CUSTOM_HOOK_PREFIX, TEAMAI_ENV_START, TEAMAI_ENV_END, TEAMAI_CULTURE_START, TEAMAI_CULTURE_END, TEAMAI_CLAUDEMD_START, TEAMAI_CLAUDEMD_END, TEAMAI_RECALL_RULES_START, TEAMAI_RECALL_RULES_END, SKILL_NAME_REGEX, TEAMAI_USAGE_PATH, TEAMAI_KNOWN_SKILLS_PATH, TEAMAI_PUSHIGNORE_PATH, TEAMAI_SESSIONS_DIR, UsageEventSchema, DASHBOARD_EVENTS_DIR, DASHBOARD_EVENTS_PATH, DASHBOARD_DEFAULT_PORT, DASHBOARD_IDLE_TIMEOUT_MS, DASHBOARD_STALE_TIMEOUT_MS, DASHBOARD_COMPACTION_THRESHOLD, DASHBOARD_STOPPED_DISPLAY_MS, DASHBOARD_PID_CHECK_INTERVAL_MS, CORRECTION_WINDOW_MS, CORRECTION_KEYWORDS, INTERVENTION_SCAN_MAX_BYTES, TRANSCRIPT_INTERRUPT_PREFIX, TRANSCRIPT_SYSTEM_PREFIXES, TRANSCRIPT_REJECT_MARKERS, CONTRIBUTE_BASE_THRESHOLD, CONTRIBUTE_SMART_THRESHOLD, CONTRIBUTE_FASTPATH_TTL_MS, CONTRIBUTE_KNOWLEDGE_GAP_BONUS, CONTRIBUTE_LOW_QUALITY_BONUS, CONTRIBUTE_LOW_QUALITY_THRESHOLD, CONTRIBUTE_GIT_COMMIT_DOWNWEIGHT, CONTRIBUTE_SESSIONS_DIR, SEARCH_INDEX_VERSION, LEARNINGS_LOCAL_DIR, SEARCH_INDEX_PATH, VOTES_LOCAL_DIR, CultureCompanySchema, CultureTeamSchema, CultureFrontmatterSchema;
+var ToolPathsSchema, ScopeEnum, SharingConfigSchema, SourceConfigSchema, SOURCE_PULL_TTL_MS, TEAMAI_SOURCES_DIR, TeamaiConfigSchema, MemberConfigSchema, LocalConfigSchema, StateSchema, TEAMAI_HOME, TEAMAI_CONFIG_PATH, TEAMAI_STATE_PATH, TEAMAI_TOKEN_PATH, TEAMAI_UPDATE_LOCK_PATH, RESOURCE_TYPES, TEAMAI_RULES_START, TEAMAI_RULES_END, TEAMAI_HOOK_DESCRIPTION_PREFIX, TEAMAI_CUSTOM_HOOK_PREFIX, TEAMAI_ENV_START, TEAMAI_ENV_END, TEAMAI_CULTURE_START, TEAMAI_CULTURE_END, TEAMAI_CLAUDEMD_START, TEAMAI_CLAUDEMD_END, TEAMAI_RECALL_RULES_START, TEAMAI_RECALL_RULES_END, SKILL_NAME_REGEX, TEAMAI_USAGE_PATH, TEAMAI_KNOWN_SKILLS_PATH, TEAMAI_PUSHIGNORE_PATH, TEAMAI_SESSIONS_DIR, UsageEventSchema, DASHBOARD_EVENTS_DIR, DASHBOARD_EVENTS_PATH, DASHBOARD_DEFAULT_PORT, DASHBOARD_IDLE_TIMEOUT_MS, DASHBOARD_STALE_TIMEOUT_MS, DASHBOARD_COMPACTION_THRESHOLD, DASHBOARD_STOPPED_DISPLAY_MS, DASHBOARD_PID_CHECK_INTERVAL_MS, CORRECTION_WINDOW_MS, CORRECTION_KEYWORDS, INTERVENTION_SCAN_MAX_BYTES, TRANSCRIPT_INTERRUPT_PREFIX, TRANSCRIPT_SYSTEM_PREFIXES, TRANSCRIPT_REJECT_MARKERS, CONTRIBUTE_BASE_THRESHOLD, CONTRIBUTE_SMART_THRESHOLD, CONTRIBUTE_INTERRUPT_WEIGHT, CONTRIBUTE_REJECT_WEIGHT, CONTRIBUTE_CORRECTION_WEIGHT, CONTRIBUTE_TOOLERROR_TIERS, CONTRIBUTE_SKILL_BONUS, CONTRIBUTE_DIVERSITY_BONUS_MAX, CONTRIBUTE_FASTPATH_TTL_MS, CONTRIBUTE_KNOWLEDGE_GAP_BONUS, CONTRIBUTE_LOW_QUALITY_BONUS, CONTRIBUTE_LOW_QUALITY_THRESHOLD, CONTRIBUTE_GIT_COMMIT_DOWNWEIGHT, CONTRIBUTE_SESSIONS_DIR, SEARCH_INDEX_VERSION, LEARNINGS_LOCAL_DIR, SEARCH_INDEX_PATH, VOTES_LOCAL_DIR, CultureCompanySchema, CultureTeamSchema, CultureFrontmatterSchema;
 var init_types = __esm({
   "src/types.ts"() {
     "use strict";
@@ -386,6 +392,8 @@ var init_types = __esm({
       projectRoot: z.string().optional(),
       /** Tags the user has subscribed to. If empty/undefined, pull all resources. */
       subscribedTags: z.array(z.string()).optional(),
+      /** Skills to exclude from local sync (per-user, does not affect team repo). */
+      excludedSkills: z.array(z.string()).optional(),
       /** User-level override for recall feature. When set, takes precedence over team config. */
       recallEnabled: z.boolean().optional(),
       /** When set, only inject hooks into these agents. Additive across multiple init --agent runs. */
@@ -470,7 +478,17 @@ var init_types = __esm({
       "doesn't want to proceed with this tool use"
     ];
     CONTRIBUTE_BASE_THRESHOLD = 15;
-    CONTRIBUTE_SMART_THRESHOLD = 35;
+    CONTRIBUTE_SMART_THRESHOLD = 20;
+    CONTRIBUTE_INTERRUPT_WEIGHT = 20;
+    CONTRIBUTE_REJECT_WEIGHT = 20;
+    CONTRIBUTE_CORRECTION_WEIGHT = 20;
+    CONTRIBUTE_TOOLERROR_TIERS = [
+      { min: 8, points: 25 },
+      { min: 5, points: 18 },
+      { min: 3, points: 10 }
+    ];
+    CONTRIBUTE_SKILL_BONUS = 5;
+    CONTRIBUTE_DIVERSITY_BONUS_MAX = 5;
     CONTRIBUTE_FASTPATH_TTL_MS = 5 * 60 * 1e3;
     CONTRIBUTE_KNOWLEDGE_GAP_BONUS = 20;
     CONTRIBUTE_LOW_QUALITY_BONUS = 10;
@@ -1908,15 +1926,18 @@ teamai recall "<\u5173\u952E\u8BCD1> <\u5173\u952E\u8BCD2> ..."
 
 \u4ECE\u4EFB\u52A1\u63CF\u8FF0\u4E2D\u63D0\u53D6 3-6 \u4E2A\u9AD8\u4FE1\u53F7\u5173\u952E\u8BCD\u8FDB\u884C\u68C0\u7D22\u3002
 
-### \u68C0\u7D22\u540E\u8981\u6C42
+### \u68C0\u7D22\u540E\u8981\u6C42\uFF08\u7528\u4E8E\u8BC4\u4F30\u77E5\u8BC6\u88AB\u91C7\u7EB3\u60C5\u51B5\uFF0C\u8BF7\u52A1\u5FC5\u6267\u884C\uFF09
 
-\u5B8C\u6210\u4EFB\u52A1\u540E\uFF0C\u5728\u6700\u7EC8\u56DE\u590D\u4E2D\u58F0\u660E\u5B9E\u9645\u5F15\u7528\u4E86\u54EA\u4E9B\u77E5\u8BC6\u6761\u76EE\uFF1A
+teamai-recall subagent \u7684\u8FD4\u56DE\u91CC\u5DF2\u5217\u51FA\u672C\u6B21\u68C0\u7D22\u5230\u7684\u5019\u9009 doc-id\uFF08\u89C1\u5176 recalled-doc-ids \u5217\u8868\uFF09\u3002
+\u4F60**\u4E0D\u9700\u8981\u51ED\u8BB0\u5FC6\u91CD\u5EFA\u5217\u8868**\u2014\u2014\u53EA\u9700\u5728**\u6700\u7EC8\u56DE\u590D\u672B\u5C3E**\u8FFD\u52A0\u4E0B\u9762\u8FD9\u884C\uFF0C
+\u4ECE\u5019\u9009\u91CC**\u4FDD\u7559\u4F60\u5B9E\u9645\u7528\u5230\u7684**\uFF08\u7167\u6284\u4E86\u547D\u4EE4\u3001\u6216\u6982\u5FF5\u4E0A\u53C2\u8003\u4E86\uFF0C\u90FD\u7B97\u7528\u5230\uFF09\uFF0C\u5220\u6389\u6CA1\u7528\u5230\u7684\uFF1A
 
 \`\`\`
-<!-- teamai:referenced-doc-ids: [doc-id-1, doc-id-2] -->
+<!-- teamai:referenced-doc-ids: [\u4F60\u5B9E\u9645\u7528\u5230\u7684-doc-id] -->
 \`\`\`
 
-\u5982\u65E0\u76F8\u5173\u547D\u4E2D\u5219\u58F0\u660E\u7A7A\u5217\u8868\uFF1A\`<!-- teamai:referenced-doc-ids: [] -->\`
+\u4E00\u4E2A\u90FD\u6CA1\u7528\u5230\u5C31\u7559\u7A7A\uFF1A\`<!-- teamai:referenced-doc-ids: [] -->\`\u3002
+\u82E5\u76F4\u63A5\u7528 \`teamai recall\` \u547D\u4EE4\uFF08\u672A\u8D70 subagent\uFF09\uFF0C\u4ECE\u53EC\u56DE\u7ED3\u679C\u7684 File \u8DEF\u5F84\u63A8\u51FA doc-id \u81EA\u884C\u586B\u5165\u3002
 `;
   }
 });
@@ -3393,7 +3414,10 @@ var init_pid_monitor = __esm({
 function normalizeToolName(name) {
   return IDE_TO_CLI[name] ?? name;
 }
-var IDE_TO_CLI;
+function normalizeAgentType(name) {
+  return AGENT_TYPE_ALIASES[name] ?? name;
+}
+var IDE_TO_CLI, AGENT_TYPE_ALIASES;
 var init_tool_names = __esm({
   "src/utils/tool-names.ts"() {
     "use strict";
@@ -3408,6 +3432,79 @@ var init_tool_names = __esm({
       read_file: "Read",
       task: "Task"
     };
+    AGENT_TYPE_ALIASES = {
+      tcodex: "codex",
+      "codex-internal": "codex",
+      tclaude: "claude",
+      "claude-internal": "claude"
+    };
+  }
+});
+
+// src/utils/redact.ts
+function collectEnvSecrets(env = process.env) {
+  const secrets = {};
+  for (const [name, value] of Object.entries(env)) {
+    if (typeof value !== "string" || value.length < MIN_ENV_VALUE_LENGTH) continue;
+    const upper = name.toUpperCase();
+    if (SECRET_KEY_HINTS.some((hint) => upper.includes(hint))) {
+      secrets[name] = value;
+    }
+  }
+  return secrets;
+}
+function redact(text, options = {}) {
+  if (!text) return text;
+  let out = text;
+  const envSecrets = options.envSecrets ?? {};
+  const entries = Object.entries(envSecrets).sort((a, b) => b[1].length - a[1].length);
+  for (const [label, value] of entries) {
+    if (value && out.includes(value)) {
+      out = out.split(value).join(PLACEHOLDER(label));
+    }
+  }
+  if (options.patterns !== false) {
+    for (const [label, pattern] of SECRET_PATTERNS) {
+      out = out.replace(pattern, () => PLACEHOLDER(label));
+    }
+    out = out.replace(KV_PATTERN, (_m, key, sep) => key + sep + PLACEHOLDER("kv"));
+    out = out.replace(BEARER_PATTERN, (_m, scheme) => scheme + PLACEHOLDER("authz"));
+    out = out.replace(
+      CONNECTION_STRING_PATTERN,
+      (_m, prefix, _pw, at) => prefix + PLACEHOLDER("conn") + at
+    );
+  }
+  return out;
+}
+function redactWithEnv(text, env = process.env) {
+  return redact(text, { envSecrets: collectEnvSecrets(env) });
+}
+var PLACEHOLDER, SECRET_KEY_HINTS, MIN_ENV_VALUE_LENGTH, SECRET_PATTERNS, KV_PATTERN, BEARER_PATTERN, CONNECTION_STRING_PATTERN;
+var init_redact = __esm({
+  "src/utils/redact.ts"() {
+    "use strict";
+    PLACEHOLDER = (label) => `<REDACTED:${label}>`;
+    SECRET_KEY_HINTS = ["TOKEN", "SECRET", "KEY", "PASSWORD", "PASSWD", "_PAT", "CREDENTIAL"];
+    MIN_ENV_VALUE_LENGTH = 8;
+    SECRET_PATTERNS = [
+      ["pem", /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]*PRIVATE KEY-----/g],
+      ["anthropic", /\bsk-ant-[A-Za-z0-9_-]{20,}/g],
+      ["openai", /\bsk-(?:proj-)?[A-Za-z0-9_-]{20,}/g],
+      ["gh_pat", /\bgithub_pat_[A-Za-z0-9_]{22,}/g],
+      ["gh_tok", /\bgh[pousr]_[A-Za-z0-9]{20,}/g],
+      ["aws", /\b(?:AKIA|ASIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA)[0-9A-Z]{16}\b/g],
+      ["slack", /\bxox[baprs]-[A-Za-z0-9-]{10,}/g],
+      ["slackhook", /https:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9/]{20,}/g],
+      ["google", /\bAIza[0-9A-Za-z_-]{35}\b/g],
+      ["gcp_oauth", /\bya29\.[0-9A-Za-z_-]{20,}/g],
+      ["stripe", /\b[rs]k_(?:live|test)_[A-Za-z0-9]{16,}/g],
+      ["jwt", /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g],
+      ["sendgrid", /\bSG\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}/g],
+      ["provider", /\b(?:xai-|gsk_|pplx-|sk-or-v1-|hf_|dop_v1_|glpat-|npm_|shpat_|tfp_|nvapi-|r8_)[A-Za-z0-9_-]{16,}/g]
+    ];
+    KV_PATTERN = /(secret|token|api[_-]?key|access[_-]?key|client[_-]?secret|password|passwd|auth[_-]?token|private[_-]?key)(["']?\s*[:=]\s*["']?)([A-Za-z0-9._\-/+=]{16,})/gi;
+    BEARER_PATTERN = /\b(bearer\s+)([A-Za-z0-9._-]{16,})/gi;
+    CONNECTION_STRING_PATTERN = /([a-zA-Z][a-zA-Z0-9+.-]*:\/\/[^\s:/@]+:)([^\s/@]{6,})(@)/g;
   }
 });
 
@@ -3463,7 +3560,7 @@ async function readLastAssistantOutput(transcriptPath) {
         } catch {
         }
       }
-      return lastAssistantText.slice(0, STOPPED_OUTPUT_MAX_CHARS);
+      return redactWithEnv(lastAssistantText).slice(0, STOPPED_OUTPUT_MAX_CHARS);
     } finally {
       await fh.close();
     }
@@ -3475,6 +3572,7 @@ async function readLastAssistantOutput(transcriptPath) {
 async function scanTranscriptStop(transcriptPath) {
   let interrupt = 0;
   let toolReject = 0;
+  let toolError = 0;
   let prompts = 0;
   const tokens = emptyTokenUsage();
   const countedUsageKeys = /* @__PURE__ */ new Set();
@@ -3484,10 +3582,10 @@ async function scanTranscriptStop(transcriptPath) {
   }
   try {
     const stat6 = await fs7.promises.stat(transcriptPath);
-    if (stat6.size === 0) return { interrupt, toolReject, tokens, prompts };
+    if (stat6.size === 0) return { interrupt, toolReject, toolError, tokens, prompts };
     if (stat6.size > INTERVENTION_SCAN_MAX_BYTES) {
       log.warn(`dashboard: transcript too large to scan (${stat6.size} bytes)`);
-      return { interrupt, toolReject, tokens, prompts };
+      return { interrupt, toolReject, toolError, tokens, prompts };
     }
     const rl = readline.createInterface({
       input: fs7.createReadStream(transcriptPath, { encoding: "utf-8" }),
@@ -3538,6 +3636,8 @@ async function scanTranscriptStop(transcriptPath) {
           const text = typeof item.content === "string" ? item.content : Array.isArray(item.content) ? item.content.map((c) => typeof c?.text === "string" ? c.text : "").join(" ") : "";
           if (TRANSCRIPT_REJECT_MARKERS.some((m) => text.includes(m))) {
             toolReject++;
+          } else {
+            toolError++;
           }
         }
       }
@@ -3546,7 +3646,7 @@ async function scanTranscriptStop(transcriptPath) {
   } catch (e) {
     log.warn(`dashboard: failed to scan transcript: ${e.message}`);
   }
-  return { interrupt, toolReject, tokens, prompts };
+  return { interrupt, toolReject, toolError, tokens, prompts };
 }
 async function readCodebuddyIndexOnce(transcriptPath) {
   try {
@@ -3563,7 +3663,7 @@ async function readCodebuddyIndexOnce(transcriptPath) {
       tokens.output += toNum(usage.outputTokens);
     }
     const prompts = Array.isArray(data.messages) ? data.messages.filter((m) => m?.role === "user").length : 0;
-    return { interrupt: 0, toolReject: 0, tokens, prompts };
+    return { interrupt: 0, toolReject: 0, toolError: 0, tokens, prompts };
   } catch (e) {
     log.warn(`dashboard: failed to scan CodeBuddy index: ${e.message}`);
     return null;
@@ -3590,8 +3690,8 @@ function toNum(v) {
   return typeof v === "number" && Number.isFinite(v) && v > 0 ? v : 0;
 }
 async function countInterventions(transcriptPath) {
-  const { interrupt, toolReject } = await scanTranscriptStop(transcriptPath);
-  return { interrupt, toolReject };
+  const { interrupt, toolReject, toolError } = await scanTranscriptStop(transcriptPath);
+  return { interrupt, toolReject, toolError };
 }
 function isCorrectionPrompt(text) {
   if (!text) return false;
@@ -3664,8 +3764,12 @@ async function parseHookEvent(raw, tool) {
       event.stoppedOutput = output;
     }
     const scan = await scanTranscriptStop(hookData.transcript_path);
-    if (scan.interrupt > 0 || scan.toolReject > 0) {
-      event.interventions = { interrupt: scan.interrupt, toolReject: scan.toolReject };
+    if (scan.interrupt > 0 || scan.toolReject > 0 || scan.toolError > 0) {
+      event.interventions = {
+        interrupt: scan.interrupt,
+        toolReject: scan.toolReject,
+        toolError: scan.toolError
+      };
     }
     if (scan.tokens.input > 0 || scan.tokens.output > 0 || scan.tokens.cacheRead > 0 || scan.tokens.cacheCreation > 0) {
       event.tokens = scan.tokens;
@@ -3896,6 +4000,7 @@ var init_dashboard_collector = __esm({
     init_fs();
     init_pid_monitor();
     init_tool_names();
+    init_redact();
     init_types();
     TRANSCRIPT_TAIL_BYTES = 10240;
     STOPPED_OUTPUT_MAX_CHARS = 500;
@@ -4159,6 +4264,145 @@ var init_http_log = __esm({
   }
 });
 
+// src/plugin-lifecycle.ts
+function makeReadyState(d, deps) {
+  return {
+    slug: d.slug,
+    version: d.version,
+    ready: true,
+    installedAt: new Date(deps.now()).toISOString(),
+    uninstallCmd: d.uninstallCmd,
+    lastAttemptAt: void 0,
+    lastError: void 0
+  };
+}
+async function reconcilePlugins(desired, deps) {
+  const local = await deps.readPlugins();
+  const desiredSlugs = new Set(desired.map((d) => d.slug));
+  for (const d of desired) {
+    const e = local[d.slug];
+    try {
+      if (!e || !e.ready) {
+        if (e?.lastAttemptAt && deps.now() - Date.parse(e.lastAttemptAt) < FAILURE_COOLDOWN_MS) {
+          deps.log.debug(`plugin ${d.slug}: in failure cooldown, skip`);
+          continue;
+        }
+        deps.log.debug(`plugin ${d.slug}: installing${d.version ? " version " + d.version : ""}`);
+        await deps.execCommand(d.installCmd, INSTALL_TIMEOUT_MS);
+        await deps.execCommand(d.runCmd, RUN_TIMEOUT_MS);
+        await deps.mutatePlugins((m) => {
+          m[d.slug] = makeReadyState(d, deps);
+        });
+        deps.log.debug(`plugin ${d.slug}: installed and setup complete`);
+      } else if (d.version !== void 0 && e.version !== d.version) {
+        deps.log.debug(`plugin ${d.slug}: updating ${e.version ?? "(unknown)"} -> ${d.version}`);
+        await deps.execCommand(d.updateCmd ?? d.installCmd, UPDATE_TIMEOUT_MS);
+        await deps.execCommand(d.runCmd, RUN_TIMEOUT_MS);
+        await deps.mutatePlugins((m) => {
+          m[d.slug] = makeReadyState(d, deps);
+        });
+        deps.log.debug(`plugin ${d.slug}: updated to version ${d.version}`);
+      }
+    } catch (err) {
+      const msg = err.message;
+      deps.log.warn(`plugin ${d.slug} reconcile failed: ${msg}`);
+      await deps.mutatePlugins((m) => {
+        const prev = m[d.slug];
+        const base = prev ?? {
+          slug: d.slug,
+          version: d.version,
+          ready: false,
+          uninstallCmd: d.uninstallCmd
+        };
+        if (!prev || !prev.ready) {
+          base.ready = false;
+        }
+        base.lastAttemptAt = new Date(deps.now()).toISOString();
+        base.lastError = msg;
+        m[d.slug] = base;
+      });
+    }
+  }
+  for (const slug of Object.keys(local)) {
+    if (desiredSlugs.has(slug)) continue;
+    const e = local[slug];
+    try {
+      deps.log.debug(`plugin ${slug}: uninstalling (removed from desired list)`);
+      await deps.execCommand(e.uninstallCmd, UNINSTALL_TIMEOUT_MS);
+      await deps.mutatePlugins((m) => {
+        delete m[slug];
+      });
+      deps.log.debug(`plugin ${slug}: uninstalled`);
+    } catch (err) {
+      deps.log.warn(`plugin ${slug} uninstall failed: ${err.message}`);
+    }
+  }
+}
+async function teardownAllPlugins(deps) {
+  const plugins = await deps.readPlugins();
+  for (const [slug, state] of Object.entries(plugins)) {
+    try {
+      deps.log.debug(`plugin ${slug}: tearing down`);
+      await deps.execCommand(state.uninstallCmd, UNINSTALL_TIMEOUT_MS);
+      await deps.mutatePlugins((m) => {
+        delete m[slug];
+      });
+      deps.log.debug(`plugin ${slug}: torn down`);
+    } catch (err) {
+      deps.log.warn(`plugin ${slug} teardown failed: ${err.message}`);
+    }
+  }
+}
+function parseGetConfig(resp) {
+  const vars = {};
+  const plugins = [];
+  if (!resp || typeof resp !== "object") return { vars, plugins };
+  for (const [key, section] of Object.entries(resp)) {
+    if (!section || typeof section !== "object") continue;
+    const s = section;
+    const isStr = (v) => typeof v === "string" && v.length > 0;
+    if (!isStr(s["install_cmd"]) || !isStr(s["run_cmd"]) || !isStr(s["uninstall_cmd"])) continue;
+    for (const f of ["endpoint", "topic_id", "secret_id", "secret_key", "user_name"]) {
+      if (isStr(s[f])) vars[f] = s[f];
+    }
+    if (typeof s["user_id"] === "number") vars["user_id"] = String(s["user_id"]);
+    else if (isStr(s["user_id"])) vars["user_id"] = s["user_id"];
+    plugins.push({
+      slug: key,
+      version: isStr(s["version"]) ? s["version"] : void 0,
+      installCmd: s["install_cmd"],
+      updateCmd: isStr(s["update_cmd"]) ? s["update_cmd"] : void 0,
+      uninstallCmd: s["uninstall_cmd"],
+      runCmd: s["run_cmd"]
+    });
+  }
+  return { vars, plugins };
+}
+function substituteVars(cmd, vars) {
+  return cmd.replace(
+    /\$\{([a-zA-Z_][a-zA-Z0-9_]*)\}/g,
+    (match, key) => key in vars ? vars[key] : match
+  );
+}
+function unresolvedPlaceholders(cmd) {
+  const found = /* @__PURE__ */ new Set();
+  for (const match of cmd.matchAll(/\$\{([a-zA-Z_][a-zA-Z0-9_]*)\}/g)) {
+    found.add(match[1]);
+  }
+  return [...found];
+}
+var INSTALL_TIMEOUT_MS, UPDATE_TIMEOUT_MS, UNINSTALL_TIMEOUT_MS, RUN_TIMEOUT_MS, FAILURE_COOLDOWN_MS;
+var init_plugin_lifecycle = __esm({
+  "src/plugin-lifecycle.ts"() {
+    "use strict";
+    INSTALL_TIMEOUT_MS = 5 * 60 * 1e3;
+    UPDATE_TIMEOUT_MS = 5 * 60 * 1e3;
+    UNINSTALL_TIMEOUT_MS = 5 * 60 * 1e3;
+    RUN_TIMEOUT_MS = 60 * 1e3;
+    FAILURE_COOLDOWN_MS = 10 * 60 * 1e3;
+  }
+});
+
 // src/utils/prompt.ts
 var prompt_exports = {};
 __export(prompt_exports, {
@@ -4284,17 +4528,21 @@ var init_claudemd = __esm({
 // src/local-agent.ts
 var local_agent_exports = {};
 __export(local_agent_exports, {
+  DEFAULT_ROUTES: () => DEFAULT_ROUTES,
   bindCurrentProject: () => bindCurrentProject,
-  bindWorkspaceToGroup: () => bindWorkspaceToGroup,
+  bindWorkspaceToProject: () => bindWorkspaceToProject,
   buildReportPayload: () => buildReportPayload,
   describeLocalAgent: () => describeLocalAgent,
-  fetchUserGroups: () => fetchUserGroups,
+  fetchUserProjects: () => fetchUserProjects,
   initLocalAgentHttp: () => initLocalAgentHttp,
   loadLocalAgentConfig: () => loadLocalAgentConfig,
   pullLocalAgentForCwd: () => pullLocalAgentForCwd,
   removeLocalAgentHttp: () => removeLocalAgentHttp,
   reportAndSyncFromHook: () => reportAndSyncFromHook,
   reportAndSyncLocalAgent: () => reportAndSyncLocalAgent,
+  resolveRoute: () => resolveRoute,
+  runPluginReconcileWorker: () => runPluginReconcileWorker,
+  teardownLocalAgentPlugins: () => teardownLocalAgentPlugins,
   writeTokenFile: () => writeTokenFile
 });
 import fs10 from "fs";
@@ -4335,6 +4583,15 @@ function compileClaudemdBlock(contents) {
 function normalizeEndpoint(endpoint) {
   return endpoint.trim().replace(/\/+$/, "");
 }
+function normalizeRoute(route) {
+  const trimmed = route.trim();
+  return trimmed.startsWith("/") ? trimmed : `/${trimmed}`;
+}
+function resolveRoute(config, name) {
+  const override = config.routes?.[name];
+  if (override && override.trim()) return normalizeRoute(override);
+  return DEFAULT_ROUTES[name];
+}
 function resolveAgentInstallPath(agentType) {
   const home = process.env.HOME ?? "";
   const skillsRel = createLocalAgentTeamConfig("").toolPaths[agentType]?.skills;
@@ -4364,6 +4621,46 @@ async function loadManifest() {
 async function saveManifest(manifest) {
   await writeJson(getManifestPath(), manifest);
 }
+function getPluginStatePath() {
+  return path18.join(getLocalAgentHome(), "plugins.json");
+}
+async function readPluginState() {
+  return await readJson(getPluginStatePath()) ?? {};
+}
+async function withPluginStateLock(mutate) {
+  const statePath = getPluginStatePath();
+  const lockPath = `${statePath}.lock`;
+  await ensureDir(path18.dirname(lockPath));
+  const deadline = Date.now() + 5e3;
+  let acquired = false;
+  while (Date.now() <= deadline) {
+    try {
+      const fd = await fs10.promises.open(lockPath, "wx");
+      await fd.close();
+      acquired = true;
+      break;
+    } catch (e) {
+      if (e.code !== "EEXIST") throw e;
+      try {
+        const st = await fs10.promises.stat(lockPath);
+        if (Date.now() - st.mtimeMs > 3e4) {
+          await fs10.promises.rm(lockPath, { force: true });
+          continue;
+        }
+      } catch {
+      }
+      await new Promise((r) => setTimeout(r, 50));
+    }
+  }
+  if (!acquired) throw new Error("could not acquire plugin-state lock");
+  try {
+    const m = await readPluginState();
+    mutate(m);
+    await writeJson(statePath, m);
+  } finally {
+    await fs10.promises.rm(lockPath, { force: true });
+  }
+}
 function getManifestScope(manifest, scope, workspacePath) {
   const key = scopeKey(scope, workspacePath);
   manifest.scopes[key] ??= emptyManifestScope();
@@ -4372,11 +4669,17 @@ function getManifestScope(manifest, scope, workspacePath) {
 async function loadLocalAgentConfig() {
   const fileConfig = await readJson(getConfigPath2());
   if (fileConfig?.endpoint) {
-    return {
+    const config = {
       ...fileConfig,
       endpoint: normalizeEndpoint(fileConfig.endpoint),
       workspaceBindings: fileConfig.workspaceBindings ?? {}
     };
+    for (const [wsPath, binding] of Object.entries(config.workspaceBindings)) {
+      if ("groupId" in binding && !("projectId" in binding)) {
+        delete config.workspaceBindings[wsPath];
+      }
+    }
+    return config;
   }
   const envEndpoint = process.env.TEAMAI_HTTP_ENDPOINT ?? process.env.TEAMAI_ENDPOINT ?? process.env.TEAMAI_API_BASE_URL;
   if (!envEndpoint) return null;
@@ -4439,9 +4742,9 @@ function authHeaders(config, json = true) {
   }
   return headers;
 }
-async function localAgentFetch(config, tag, route, init2) {
+async function localAgentFetch(config, tag, route, init2, opts) {
   const method = init2?.method ?? "GET";
-  const url = `${config.endpoint}${route}`;
+  const url = `${config.endpoint}${resolveRoute(config, route)}`;
   const headers = {
     ...authHeaders(config, init2?.body !== void 0),
     ...init2?.headers ?? {}
@@ -4457,7 +4760,7 @@ async function localAgentFetch(config, tag, route, init2) {
       body = text;
     }
   }
-  logHttpResponse(tag, method, url, response.status, response.statusText, body);
+  logHttpResponse(tag, method, url, response.status, response.statusText, opts?.redactResponseLog ? "<redacted>" : body);
   if (!response.ok) {
     const message = typeof body === "object" && body && "error" in body ? String(body.error) : text || `${response.status} ${response.statusText}`;
     throw new Error(message);
@@ -4475,14 +4778,173 @@ async function appendErrorLog(entry) {
   } catch {
   }
 }
-async function fetchUserGroups(config) {
+async function fetchUserProjects(config) {
   const response = await localAgentFetch(
     config,
     localAgentTag({}),
-    "/api/user-groups/mine",
+    "projects",
     { method: "GET" }
   );
-  return response.groups ?? [];
+  return response.projects ?? [];
+}
+function redactSecrets(s) {
+  const names = "secret[_-]?(?:key|id)|api[_-]?key|access[_-]?token|token|password|passwd|pwd";
+  return s.replace(new RegExp(`(--(?:${names})[= ]+)\\S+`, "gi"), "$1***").replace(new RegExp(`((?:${names})"?\\s*[:=]\\s*"?)[^"\\s,}]+`, "gi"), "$1***").replace(/(bearer\s+)[\w.\-]+/gi, "$1***");
+}
+async function execPluginCommand(cmd, timeoutMs) {
+  const { spawn: spawn3 } = await import("child_process");
+  await new Promise((resolve, reject) => {
+    const child = process.platform === "win32" ? spawn3("cmd", ["/c", cmd], { windowsHide: true, stdio: ["ignore", "ignore", "pipe"] }) : spawn3("/bin/sh", ["-lc", cmd], { stdio: ["ignore", "ignore", "pipe"] });
+    let stderr = "";
+    let settled = false;
+    let timer;
+    child.stderr?.on("data", (d) => {
+      stderr += d.toString();
+      if (stderr.length > 8192) stderr = stderr.slice(-8192);
+    });
+    const detachStderr = () => {
+      child.stderr?.removeAllListeners("data");
+      child.stderr?.resume();
+      child.stderr?.unref?.();
+    };
+    const finish = (fn) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      detachStderr();
+      child.unref();
+      fn();
+    };
+    timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      finish(() => reject(new Error(`command timed out after ${timeoutMs}ms`)));
+    }, timeoutMs);
+    child.on("error", (e) => finish(() => reject(e)));
+    child.on(
+      "exit",
+      (code, signal) => finish(() => {
+        if (signal) return reject(new Error(`command killed by ${signal}`));
+        if (code === 0) return resolve();
+        const tail = stderr ? " :: " + redactSecrets(stderr.slice(0, 200).trim()) : "";
+        reject(new Error(`command failed (exit ${code})${tail}`));
+      })
+    );
+  });
+}
+async function fetchPluginConfig(config, tag) {
+  return localAgentFetch(config, tag, "getConfig", { method: "GET" }, { redactResponseLog: true });
+}
+function getPluginPullStatePath() {
+  return path18.join(getLocalAgentHome(), "plugin-pull.json");
+}
+function buildReconcileDeps(config, tag) {
+  return {
+    readPlugins: () => readPluginState(),
+    mutatePlugins: (fn) => withPluginStateLock(fn),
+    execCommand: (cmd, t) => execPluginCommand(cmd, t),
+    now: () => Date.now(),
+    log: {
+      debug: (msg) => log.debug(`${tag} ${msg}`),
+      // The reconcile worker runs detached (stdio: 'ignore'), so console-only log.warn
+      // output is discarded. Mirror warnings to debug.log so failures are traceable.
+      warn: (msg) => {
+        log.warn(`${tag} ${msg}`);
+        log.debug(`${tag} WARN: ${msg}`);
+      }
+    }
+  };
+}
+async function maybeReconcilePlugins(context) {
+  try {
+    const state = await readJson(getPluginPullStatePath()) ?? {};
+    const now = Date.now();
+    if (state.lastPullAt && now - state.lastPullAt < PLUGIN_PULL_INTERVAL_MS) return;
+    if (state.lastFailAt && now - state.lastFailAt < PLUGIN_FAIL_BACKOFF_MS) return;
+    const tool = context.tool ?? "workbuddy";
+    const localAgentId = `${tool}-${resolveLocalAgentId(context)}`;
+    const { spawn: spawn3 } = await import("child_process");
+    if (!process.argv[1]) {
+      log.debug("[local-agent] plugin reconcile: no CLI entrypoint (argv[1]), skipping");
+      return;
+    }
+    const child = spawn3(
+      process.execPath,
+      [process.argv[1], "source", "reconcile-plugins"],
+      { detached: true, stdio: "ignore", env: { ...process.env, TEAMAI_PLUGIN_LOCAL_AGENT_ID: localAgentId } }
+    );
+    child.unref();
+  } catch (e) {
+    log.debug(`[local-agent] plugin reconcile spawn skipped: ${e.message}`);
+  }
+}
+async function runPluginReconcileWorker() {
+  const config = await loadLocalAgentConfig();
+  if (!config) return;
+  const lockPath = path18.join(getLocalAgentHome(), "plugin-reconcile.lock");
+  await ensureDir(path18.dirname(lockPath));
+  let acquired = false;
+  try {
+    try {
+      const fd = await fs10.promises.open(lockPath, "wx");
+      await fd.close();
+      acquired = true;
+    } catch (e) {
+      if (e.code !== "EEXIST") throw e;
+      try {
+        const st = await fs10.promises.stat(lockPath);
+        if (Date.now() - st.mtimeMs > 30 * 60 * 1e3) {
+          await fs10.promises.rm(lockPath, { force: true });
+          const fd = await fs10.promises.open(lockPath, "wx");
+          await fd.close();
+          acquired = true;
+        }
+      } catch {
+      }
+      if (!acquired) return;
+    }
+    const tag = "[local-agent] [plugin-reconcile]";
+    const statePath = getPluginPullStatePath();
+    try {
+      const resp = await fetchPluginConfig(config, tag);
+      const { vars, plugins } = parseGetConfig(resp);
+      const declaredSlugs = plugins.length ? ` [${plugins.map((p) => p.slug).join(", ")}]` : "";
+      log.debug(`${tag} get-config: ${plugins.length} plugin(s) declared${declaredSlugs}`);
+      const laid = process.env.TEAMAI_PLUGIN_LOCAL_AGENT_ID;
+      if (!laid) log.debug(tag + " no local_agent_id in env; plugins needing it will be skipped");
+      const allVars = { ...vars, ...laid ? { local_agent_id: laid } : {} };
+      const resolved = [];
+      for (const p of plugins) {
+        const rp = {
+          ...p,
+          installCmd: substituteVars(p.installCmd, allVars),
+          updateCmd: p.updateCmd ? substituteVars(p.updateCmd, allVars) : void 0,
+          uninstallCmd: substituteVars(p.uninstallCmd, allVars),
+          runCmd: substituteVars(p.runCmd, allVars)
+        };
+        const missing = [.../* @__PURE__ */ new Set([
+          ...unresolvedPlaceholders(rp.installCmd),
+          ...unresolvedPlaceholders(rp.runCmd),
+          ...unresolvedPlaceholders(rp.uninstallCmd),
+          ...rp.updateCmd ? unresolvedPlaceholders(rp.updateCmd) : []
+        ])];
+        if (missing.length) {
+          log.warn(`${tag} plugin ${p.slug}: unresolved placeholders [${missing.join(",")}], skipping`);
+          log.debug(`${tag} WARN: plugin ${p.slug}: unresolved placeholders [${missing.join(",")}], skipping`);
+          continue;
+        }
+        resolved.push(rp);
+      }
+      await reconcilePlugins(resolved, buildReconcileDeps(config, tag));
+      log.debug(`${tag} reconcile complete (${resolved.length} plugin(s) processed)`);
+      await writeJson(statePath, { lastPullAt: Date.now() });
+    } catch (e) {
+      const prev = await readJson(statePath) ?? {};
+      await writeJson(statePath, { ...prev, lastFailAt: Date.now() });
+      log.debug(`${tag} reconcile failed: ${e.message}`);
+    }
+  } finally {
+    if (acquired) await fs10.promises.rm(lockPath, { force: true });
+  }
 }
 async function askViaTty(prompt) {
   if (process.stdin.isTTY) {
@@ -4514,69 +4976,67 @@ async function askViaTty(prompt) {
     }
   }
 }
-async function promptForGroupBinding(workspacePath, groups) {
-  if (groups.length === 0) return null;
+async function promptForProjectBinding(workspacePath, projects) {
+  if (projects.length === 0) return null;
   log.debug(`local-agent: workspace not bound: ${workspacePath}`);
-  const answer = await askViaTty("\u662F\u5426\u7ED1\u5B9A\u5230\u4E00\u4E2A\u7EC4\u7EC7\uFF1F[y/N] ");
+  const answer = await askViaTty("\u662F\u5426\u7ED1\u5B9A\u5230\u4E00\u4E2A\u9879\u76EE\uFF1F[y/N] ");
   if (!answer || answer.toLowerCase() !== "y") return null;
-  if (groups.length === 1) return groups[0];
-  log.info("\u53EF\u7528\u7EC4\u7EC7:");
-  groups.forEach((group, index2) => {
-    const suffix = group.is_primary ? " (\u9ED8\u8BA4)" : "";
-    log.info(`  ${index2 + 1}. ${group.name}${suffix} [id=${group.id}]`);
+  if (projects.length === 1) return projects[0];
+  log.info("\u53EF\u7528\u9879\u76EE:");
+  projects.forEach((project, index2) => {
+    const desc = project.description ? ` - ${project.description}` : "";
+    log.info(`  ${index2 + 1}. ${project.name}${desc} [id=${project.id}]`);
   });
-  const primary = groups.find((group) => group.is_primary) ?? groups[0];
-  const defaultIndex = groups.indexOf(primary) + 1;
-  const selection = await askViaTty(`\u9009\u62E9\u7EC4\u7EC7\u7F16\u53F7\uFF08\u9ED8\u8BA4 ${defaultIndex}\uFF0C0 \u8DF3\u8FC7\uFF09: `);
+  const selection = await askViaTty(`\u9009\u62E9\u9879\u76EE\u7F16\u53F7\uFF081-${projects.length}\uFF0C0 \u8DF3\u8FC7\uFF09: `);
   if (selection === null || selection === "0") return null;
-  const index = selection ? Number.parseInt(selection, 10) : defaultIndex;
-  if (Number.isNaN(index) || index < 1 || index > groups.length) return null;
-  return groups[index - 1];
+  const index = selection ? Number.parseInt(selection, 10) : 0;
+  if (Number.isNaN(index) || index < 1 || index > projects.length) return null;
+  return projects[index - 1];
 }
-async function bindWorkspaceToGroup(workspacePath, groupId) {
+async function bindWorkspaceToProject(workspacePath, projectId) {
   const config = await loadLocalAgentConfig();
   if (!config) {
     throw new Error("HTTP local agent is not initialized. Run `teamai init --http <ENDPOINT> --token <API_TOKEN>` first.");
   }
-  const groups = await fetchUserGroups(config);
-  const group = groupId ? groups.find((item) => item.id === groupId) : await promptForGroupBinding(workspacePath, groups);
-  if (!group) return null;
+  const projects = await fetchUserProjects(config);
+  const project = projectId ? projects.find((item) => item.id === projectId) : await promptForProjectBinding(workspacePath, projects);
+  if (!project) return null;
   const binding = {
-    groupId: group.id,
-    groupName: group.name,
+    projectId: project.id,
+    projectName: project.name,
     boundAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   config.workspaceBindings[workspacePath] = binding;
   await saveLocalAgentConfig(config);
-  log.success(`\u5DF2\u5C06\u9879\u76EE\u7ED1\u5B9A\u5230\u7EC4\u7EC7\uFF1A${group.name} [id=${group.id}]`);
+  log.success(`\u5DF2\u5C06\u5DE5\u4F5C\u533A\u7ED1\u5B9A\u5230\u9879\u76EE\uFF1A${project.name} [id=${project.id}]`);
   return binding;
 }
 async function ensureWorkspaceBinding(config, workspacePath) {
   if (config.workspaceBindings[workspacePath]) return;
-  let groups;
+  let projects;
   try {
-    groups = await fetchUserGroups(config);
+    projects = await fetchUserProjects(config);
   } catch (e) {
-    log.debug(`local-agent: failed to load user groups: ${e.message}`);
+    log.debug(`local-agent: failed to load user projects: ${e.message}`);
     return;
   }
-  if (groups.length === 0) return;
-  const group = await promptForGroupBinding(workspacePath, groups);
-  if (group) {
+  if (projects.length === 0) return;
+  const project = await promptForProjectBinding(workspacePath, projects);
+  if (project) {
     config.workspaceBindings[workspacePath] = {
-      groupId: group.id,
-      groupName: group.name,
+      projectId: project.id,
+      projectName: project.name,
       boundAt: (/* @__PURE__ */ new Date()).toISOString()
     };
     await saveLocalAgentConfig(config);
     return;
   }
-  const groupList = groups.map((g) => `${g.name} (id=${g.id})`).join(", ");
+  const projectList = projects.map((p) => `${p.name} (id=${p.id})`).join(", ");
   const context = [
-    "[teamai] \u5F53\u524D\u9879\u76EE\u5C1A\u672A\u7ED1\u5B9A\u7EC4\u7EC7\uFF0C\u65E0\u6CD5\u63A5\u6536\u7EC4\u7EC7\u4E0B\u53D1\u7684 skills/rules/claudemd \u8D44\u6E90\u3002",
-    `\u53EF\u7528\u7EC4\u7EC7: ${groupList}`,
+    "[teamai] \u5F53\u524D\u5DE5\u4F5C\u533A\u5C1A\u672A\u7ED1\u5B9A\u9879\u76EE\uFF0C\u65E0\u6CD5\u63A5\u6536\u9879\u76EE\u4E0B\u53D1\u7684 skills/rules/claudemd \u8D44\u6E90\u3002",
+    `\u53EF\u7528\u9879\u76EE: ${projectList}`,
     `\u8BF7\u63D0\u793A\u7528\u6237\u8FD0\u884C: teamai bind-project`,
-    `\u6216\u6307\u5B9A\u7EC4\u7EC7: teamai bind-project --group-id <id>`
+    `\u6216\u6307\u5B9A\u9879\u76EE: teamai bind-project --project-id <id>`
   ].join("\n");
   const hookOutput = JSON.stringify({
     hookSpecificOutput: {
@@ -4598,21 +5058,21 @@ async function emitBindingHint(config, workspacePath) {
     fs10.writeFileSync(hintMarker, "");
   } catch {
   }
-  let groups;
+  let projects;
   try {
-    groups = await fetchUserGroups(config);
+    projects = await fetchUserProjects(config);
   } catch {
     return;
   }
-  if (groups.length === 0) return;
-  const skipNum = groups.length + 1;
-  const choices = groups.map((g, i) => `${i + 1}. \u7ED1\u5B9A\u5230\u300C${g.name}\u300D\u7EC4\u7EC7`);
-  const actions = groups.map((g, i) => `- \u7528\u6237\u56DE\u590D ${i + 1} \u2192 \u6267\u884C \`teamai bind-project --group-id ${g.id}\`\uFF0C\u5B8C\u6210\u540E\u56DE\u590D"\u7ED1\u5B9A\u5B8C\u6210\uFF0C\u8BF7\u5F00\u65B0\u4F1A\u8BDD\u751F\u6548"`);
+  if (projects.length === 0) return;
+  const skipNum = projects.length + 1;
+  const choices = projects.map((p, i) => `${i + 1}. \u7ED1\u5B9A\u5230\u300C${p.name}\u300D\u9879\u76EE`);
+  const actions = projects.map((p, i) => `- \u7528\u6237\u56DE\u590D ${i + 1} \u2192 \u6267\u884C \`teamai bind-project --project-id ${p.id}\`\uFF0C\u5B8C\u6210\u540E\u56DE\u590D"\u7ED1\u5B9A\u5B8C\u6210\uFF0C\u8BF7\u5F00\u65B0\u4F1A\u8BDD\u751F\u6548"`);
   const context = [
-    "[ClawPro\u7EC4\u7EC7 \u7ED1\u5B9A\u63D0\u793A] \u4F60\u5FC5\u987B\u539F\u6837\u5C55\u793A\u4E0B\u9762\u7684\u9009\u9879\u5217\u8868\uFF0C\u4E0D\u5F97\u4FEE\u6539\u7F16\u53F7\u6216\u5185\u5BB9\u3002\u7B49\u7528\u6237\u56DE\u590D\u6570\u5B57\u540E\u6267\u884C\u5BF9\u5E94\u547D\u4EE4\u3002",
+    "[ClawPro\u9879\u76EE \u7ED1\u5B9A\u63D0\u793A] \u4F60\u5FC5\u987B\u539F\u6837\u5C55\u793A\u4E0B\u9762\u7684\u9009\u9879\u5217\u8868\uFF0C\u4E0D\u5F97\u4FEE\u6539\u7F16\u53F7\u6216\u5185\u5BB9\u3002\u7B49\u7528\u6237\u56DE\u590D\u6570\u5B57\u540E\u6267\u884C\u5BF9\u5E94\u547D\u4EE4\u3002",
     "",
     "---",
-    "\u5F53\u524D\u9879\u76EE\u672A\u7ED1\u5B9AClawPro\u7EC4\u7EC7\u3002\u7ED1\u5B9A\u540E\u53EF\u540C\u6B65\u56E2\u961F skills/rules\u3002\u8BF7\u56DE\u590D\u6570\u5B57\u9009\u62E9\uFF1A",
+    "\u5F53\u524D\u5DE5\u4F5C\u533A\u672A\u7ED1\u5B9AClawPro\u9879\u76EE\u3002\u7ED1\u5B9A\u540E\u53EF\u540C\u6B65\u56E2\u961F skills/rules\u3002\u8BF7\u56DE\u590D\u6570\u5B57\u9009\u62E9\uFF1A",
     "",
     ...choices,
     `${skipNum}. \u4E0D\u7ED1\u5B9A\uFF0C\u4EE5\u540E\u4E5F\u4E0D\u518D\u63D0\u793A`,
@@ -4706,7 +5166,7 @@ async function buildReportPayload(config, context) {
   };
   const userScope = await scanScope(process.env.HOME ?? "");
   const payload = {
-    agent_type: tool,
+    agent_type: normalizeAgentType(tool),
     agent_version: await getAgentVersion(tool),
     local_agent_id: resolveLocalAgentId(context),
     host_name: os3.hostname(),
@@ -4729,8 +5189,8 @@ async function buildReportPayload(config, context) {
       {
         path: workspacePath,
         name: path18.basename(workspacePath),
-        ide_type: tool,
-        group_id: binding?.groupId,
+        ide_type: normalizeAgentType(tool),
+        project_id: binding?.projectId,
         skills: wsScope.skills,
         rules: wsScope.rules
       }
@@ -4742,7 +5202,7 @@ async function buildSyncPayload(config, context) {
   const workspacePath = await resolveWorkspacePath(context.cwd);
   const binding = workspacePath ? config.workspaceBindings[workspacePath] : void 0;
   const payload = {
-    agent_type: context.tool ?? "workbuddy",
+    agent_type: normalizeAgentType(context.tool ?? "workbuddy"),
     local_agent_id: resolveLocalAgentId(context),
     status: context.status ?? "running"
   };
@@ -4751,8 +5211,8 @@ async function buildSyncPayload(config, context) {
       {
         path: workspacePath,
         name: path18.basename(workspacePath),
-        ide_type: context.tool ?? "workbuddy",
-        group_id: binding?.groupId
+        ide_type: normalizeAgentType(context.tool ?? "workbuddy"),
+        project_id: binding?.projectId
       }
     ];
   }
@@ -5036,7 +5496,7 @@ async function removeClaudeMdSection(filePath, startMarker, endMarker) {
   await writeFile(filePath, (before + after).trimEnd() + "\n");
 }
 async function ackCommand(config, tag, command, status2, version2, error) {
-  await localAgentFetch(config, tag, "/api/local-agent/commands/ack", {
+  await localAgentFetch(config, tag, "ack", {
     method: "POST",
     body: JSON.stringify({
       id: command.id,
@@ -5098,9 +5558,12 @@ async function reportAndSyncLocalAgent(context) {
   }
   const tag = localAgentTag(context);
   log.debug(`${tag} run: endpoint=${config.endpoint}`);
+  if (context.event?.type === "session_start") {
+    await maybeReconcilePlugins(context);
+  }
   try {
     const reportPayload = await buildReportPayload(config, context);
-    await localAgentFetch(config, tag, "/api/local-agent/report", {
+    await localAgentFetch(config, tag, "report", {
       method: "POST",
       body: JSON.stringify(reportPayload)
     });
@@ -5109,7 +5572,7 @@ async function reportAndSyncLocalAgent(context) {
     const syncResponse = await localAgentFetch(
       config,
       tag,
-      "/api/local-agent/sync",
+      "sync",
       { method: "POST", body: JSON.stringify(syncPayload) }
     );
     const commands = syncResponse.commands ?? [];
@@ -5183,7 +5646,7 @@ async function pullLocalAgentForCwd(context) {
 async function describeLocalAgent() {
   const config = await loadLocalAgentConfig();
   if (!config) return null;
-  const boundGroups = Object.entries(config.workspaceBindings).filter(([, b]) => b.groupId !== 0).map(([workspacePath, b]) => ({ path: workspacePath, groupName: b.groupName, groupId: b.groupId }));
+  const boundProjects = Object.entries(config.workspaceBindings).filter(([, b]) => b.projectId !== 0).map(([workspacePath, b]) => ({ path: workspacePath, projectName: b.projectName, projectId: b.projectId }));
   const manifest = await loadManifest();
   const counts = { skills: 0, rules: 0, claudemd: 0 };
   for (const scope of Object.values(manifest.scopes)) {
@@ -5191,7 +5654,7 @@ async function describeLocalAgent() {
     counts.rules += Object.keys(scope.rules ?? {}).length;
     counts.claudemd += Object.keys(scope.claudemd ?? {}).length;
   }
-  return { endpoint: config.endpoint, boundGroups, resourceCounts: counts };
+  return { endpoint: config.endpoint, boundProjects, resourceCounts: counts };
 }
 function parseScopeKey(key) {
   if (key.startsWith("project:")) {
@@ -5199,12 +5662,26 @@ function parseScopeKey(key) {
   }
   return { scope: key === "instance" ? "instance" : "user" };
 }
+async function teardownLocalAgentPlugins() {
+  try {
+    const config = await loadLocalAgentConfig();
+    if (!config) return;
+    await teardownAllPlugins(buildReconcileDeps(config, "[local-agent] [uninstall]"));
+  } catch (e) {
+    log.warn(`[local-agent] plugin teardown failed: ${e instanceof Error ? e.message : String(e)}`);
+  }
+}
 async function removeLocalAgentHttp() {
   const config = await loadLocalAgentConfig();
   if (!config) {
     log.info("No HTTP source configured \u2014 nothing to remove.");
     return;
   }
+  try {
+    await teardownAllPlugins(buildReconcileDeps(config, "[local-agent] [uninstall]"));
+  } catch (e) {
+    log.warn(`[local-agent] plugin teardown failed: ${e.message}`);
+  }
   const kinds = ["skill", "rule", "claudemd"];
   const manifest = await loadManifest();
   for (const [key, scopeManifest] of Object.entries(manifest.scopes)) {
@@ -5232,17 +5709,17 @@ async function bindCurrentProject(options) {
     if (!config) {
       throw new Error("Local agent not initialized. Run `teamai init --http` first.");
     }
-    config.workspaceBindings[workspacePath] = { groupId: 0, groupName: "__skipped__", boundAt: (/* @__PURE__ */ new Date()).toISOString() };
+    config.workspaceBindings[workspacePath] = { projectId: 0, projectName: "__skipped__", boundAt: (/* @__PURE__ */ new Date()).toISOString() };
     await saveLocalAgentConfig(config);
-    log.info(`\u5DF2\u8DF3\u8FC7\u7ED1\u5B9A\uFF0C\u4EE5\u540E\u4E0D\u518D\u63D0\u793A\u6B64\u9879\u76EE\u3002`);
+    log.info(`\u5DF2\u8DF3\u8FC7\u7ED1\u5B9A\uFF0C\u4EE5\u540E\u4E0D\u518D\u63D0\u793A\u6B64\u5DE5\u4F5C\u533A\u3002`);
     return;
   }
-  const binding = await bindWorkspaceToGroup(workspacePath, options?.groupId);
+  const binding = await bindWorkspaceToProject(workspacePath, options?.projectId);
   if (!binding) {
     log.info("\u672A\u7ED1\u5B9A\u9879\u76EE\u3002");
   }
 }
-var execFileAsync, LOCAL_AGENT_DIR, CONFIG_FILE, MANIFEST_FILE, REPORTER_ERROR_LOG, ZIP_MAGIC;
+var execFileAsync, LOCAL_AGENT_DIR, CONFIG_FILE, MANIFEST_FILE, REPORTER_ERROR_LOG, DEFAULT_ROUTES, PLUGIN_PULL_INTERVAL_MS, PLUGIN_FAIL_BACKOFF_MS, ZIP_MAGIC;
 var init_local_agent = __esm({
   "src/local-agent.ts"() {
     "use strict";
@@ -5256,13 +5733,24 @@ var init_local_agent = __esm({
     init_machine_id();
     init_builtin_rules();
     init_path_safety();
+    init_tool_names();
     init_http_log();
+    init_plugin_lifecycle();
     init_types();
     execFileAsync = promisify(execFile2);
     LOCAL_AGENT_DIR = "local-agent";
     CONFIG_FILE = "config.json";
     MANIFEST_FILE = "manifest.json";
     REPORTER_ERROR_LOG = "reporter/errors.jsonl";
+    DEFAULT_ROUTES = {
+      projects: "/api/projects/mine",
+      report: "/api/local-agent/report",
+      sync: "/api/local-agent/sync",
+      ack: "/api/local-agent/commands/ack",
+      getConfig: "/api/local-agent/get-config"
+    };
+    PLUGIN_PULL_INTERVAL_MS = 12 * 60 * 60 * 1e3;
+    PLUGIN_FAIL_BACKOFF_MS = 60 * 60 * 1e3;
     ZIP_MAGIC = Buffer.from([80, 75, 3, 4]);
   }
 });
@@ -5436,8 +5924,8 @@ async function sourceList() {
     log.info("HTTP source (report/sync/ack):");
     log.info(`  ${httpSource.endpoint}`);
     log.dim(`    ${skills} skill(s), ${rules} rule(s), ${claudemd} claude.md`);
-    for (const g of httpSource.boundGroups) {
-      log.dim(`    bound: ${g.groupName ?? g.groupId} \u2014 ${g.path}`);
+    for (const p of httpSource.boundProjects) {
+      log.dim(`    bound: ${p.projectName ?? p.projectId} \u2014 ${p.path}`);
     }
   }
 }
@@ -7737,6 +8225,7 @@ __export(git_exports, {
   getHeadRev: () => getHeadRev,
   getRepoStatus: () => getRepoStatus,
   initRepo: () => initRepo,
+  isMetadataOnlyDiff: () => isMetadataOnlyDiff,
   pullRepo: () => pullRepo,
   pushRepoBranch: () => pushRepoBranch,
   pushRepoDirectly: () => pushRepoDirectly,
@@ -7862,6 +8351,26 @@ async function autoPushViaMR(repoPath, message, files, teamConfig, localConfig)
     return null;
   }
 }
+function isMetadataOnlyDiff(diff) {
+  if (!diff.trim()) return true;
+  const METADATA_PATTERNS = [
+    /^\s*"?lastUpdated"?\s*[:=]/i,
+    /^\s*"?lastScan"?\s*[:=]/i,
+    /^\s*"?syncedAt"?\s*[:=]/i,
+    /^\s*"?generatedAt"?\s*[:=]/i,
+    /^\s*"?updatedAt"?\s*[:=]/i
+  ];
+  const lines = diff.split("\n");
+  for (const line of lines) {
+    if (!line.startsWith("+") && !line.startsWith("-")) continue;
+    if (line.startsWith("---") || line.startsWith("+++")) continue;
+    const content = line.slice(1);
+    if (!content.trim()) continue;
+    const isMetadata = METADATA_PATTERNS.some((pat) => pat.test(content));
+    if (!isMetadata) return false;
+  }
+  return true;
+}
 async function pushRepoBranch(localPath, message, files, branchName) {
   const git = createGit2(localPath);
   await git.checkoutLocalBranch(branchName);
@@ -7874,6 +8383,14 @@ async function pushRepoBranch(localPath, message, files, branchName) {
     await git.deleteLocalBranch(branchName, true);
     return false;
   }
+  const diffOutput = await git.diff(["--cached", "--unified=0"]);
+  if (isMetadataOnlyDiff(diffOutput)) {
+    const defaultBranch = await getDefaultBranch(localPath);
+    log.debug(`Only metadata/timestamp changes detected, switching back to ${defaultBranch}`);
+    await git.checkout(defaultBranch);
+    await git.deleteLocalBranch(branchName, true);
+    return false;
+  }
   await git.commit(message);
   await git.push(["-u", "origin", branchName]);
   return true;
@@ -10754,6 +11271,7 @@ async function pullForScope(localConfig, options) {
   }
   const tagsConfig = await loadTagsConfig(localConfig.repo.localPath);
   const subscribedTags = localConfig.subscribedTags;
+  const excludedSkills = new Set(localConfig.excludedSkills ?? []);
   const resourceTypes = ["skills", "rules", "docs", "env", "agents"];
   let totalSynced = 0;
   let desiredSkillNames = null;
@@ -10795,6 +11313,9 @@ async function pullForScope(localConfig, options) {
         if (!merged.has(item.name)) merged.set(item.name, item);
       }
       items = [...merged.values()];
+      if (excludedSkills.size > 0) {
+        items = items.filter((item) => !excludedSkills.has(item.name));
+      }
       desiredSkillNames = new Set(items.map((i) => i.name));
       knownRepoSkillNames = new Set(allTeamSkills.map((i) => i.name));
     } else {
@@ -10903,6 +11424,19 @@ async function pullForScope(localConfig, options) {
         await remove(skillDir);
         log.debug(`Removed excluded skill ${dir} from ${tool}`);
       }
+      if (excludedSkills.size > 0) {
+        for (const namespace of localDirs) {
+          const namespaceDir = path39.join(skillsDir, namespace);
+          if (await pathExists(path39.join(namespaceDir, "SKILL.md"))) continue;
+          for (const skillName of await listDirs(namespaceDir)) {
+            if (!excludedSkills.has(skillName) || BUILTIN_SKILL_NAMES.has(skillName)) continue;
+            const nestedSkillDir = path39.join(namespaceDir, skillName);
+            if (!await pathExists(path39.join(nestedSkillDir, "SKILL.md"))) continue;
+            await remove(nestedSkillDir);
+            log.debug(`Removed excluded skill ${namespace}/${skillName} from ${tool}`);
+          }
+        }
+      }
     }
   }
   if (totalSynced === 0) {
@@ -11978,6 +12512,79 @@ var init_skill_cmd = __esm({
   }
 });
 
+// src/exclude.ts
+var exclude_exports = {};
+__export(exclude_exports, {
+  excludeAdd: () => excludeAdd,
+  excludeList: () => excludeList,
+  excludeRemove: () => excludeRemove
+});
+async function resolveExcludeScope() {
+  const projectConfig = await detectProjectConfig();
+  return projectConfig ?? (await requireInit()).localConfig;
+}
+async function saveExcludeScopeConfig(localConfig) {
+  if (localConfig.scope === "project") {
+    await saveLocalConfigForScope(localConfig, "project", localConfig.projectRoot);
+  } else {
+    await saveLocalConfig(localConfig);
+  }
+  try {
+    const state = await loadStateForScope(localConfig.scope, localConfig.projectRoot);
+    state.lastPullRev = null;
+    await saveStateForScope(state, localConfig.scope, localConfig.projectRoot);
+  } catch {
+  }
+}
+async function excludeList(_options) {
+  const config = await resolveExcludeScope();
+  const excludedSkills = config.excludedSkills ?? [];
+  if (excludedSkills.length === 0) {
+    log.info("No excluded skills. (pull syncs all role skills)");
+    return;
+  }
+  log.info(`Excluded skills (${excludedSkills.length}):`);
+  for (const skill of excludedSkills) log.dim(`  ${skill}`);
+}
+async function excludeAdd(skills, _options) {
+  const config = await resolveExcludeScope();
+  const existing = new Set(config.excludedSkills ?? []);
+  const added = skills.filter((skill) => {
+    if (existing.has(skill)) return false;
+    existing.add(skill);
+    return true;
+  });
+  if (added.length === 0) {
+    log.info("Already excluded.");
+    return;
+  }
+  await saveExcludeScopeConfig({ ...config, excludedSkills: [...existing].sort() });
+  log.success(`Excluded: ${added.join(", ")}`);
+  log.dim("Run `teamai pull` to remove them from local AI tools.");
+}
+async function excludeRemove(skills, _options) {
+  const config = await resolveExcludeScope();
+  const existing = new Set(config.excludedSkills ?? []);
+  const removed = skills.filter((skill) => existing.delete(skill));
+  if (removed.length === 0) {
+    log.info("None of those skills were excluded.");
+    return;
+  }
+  await saveExcludeScopeConfig({
+    ...config,
+    excludedSkills: existing.size > 0 ? [...existing].sort() : void 0
+  });
+  log.success(`Removed from exclude list: ${removed.join(", ")}`);
+  log.dim("Run `teamai pull` to sync them again.");
+}
+var init_exclude = __esm({
+  "src/exclude.ts"() {
+    "use strict";
+    init_config();
+    init_logger();
+  }
+});
+
 // src/members.ts
 var members_exports = {};
 __export(members_exports, {
@@ -13183,6 +13790,7 @@ async function buildRemovalPlan(localConfig, teamConfig) {
     claudeMdFiles: [],
     skillDirs: [],
     ruleFiles: [],
+    agentFiles: [],
     shellProfile: null,
     docsDir: null,
     teamaiHome,
@@ -13192,7 +13800,9 @@ async function buildRemovalPlan(localConfig, teamConfig) {
   };
   const repoPath = localConfig.repo.localPath;
   const teamSkillNames = await collectTeamSkillNames(repoPath);
+  for (const name of BUILTIN_SKILL_NAMES) teamSkillNames.add(name);
   const teamRuleNames = await collectTeamRuleNames(repoPath);
+  for (const name of BUILTIN_RULE_NAMES) teamRuleNames.add(name);
   const localAgentManifestPath = path47.join(
     process.env.HOME ?? "",
     ".teamai",
@@ -13249,13 +13859,23 @@ async function buildRemovalPlan(localConfig, teamConfig) {
         for (const file of files) {
           if (!file.endsWith(".md")) continue;
           const ruleName = file.replace(/\.md$/, "");
-          if (EXCLUDED_RULE_NAMES.has(ruleName)) continue;
           if (teamRuleNames.has(ruleName)) {
             plan.ruleFiles.push(path47.join(rulesDir, file));
           }
         }
       }
     }
+    if (toolPath.agents) {
+      const agentsDir = path47.join(baseDir, toolPath.agents);
+      if (await pathExists(agentsDir)) {
+        for (const name of BUILTIN_AGENT_NAMES) {
+          const agentFile = path47.join(agentsDir, `${name}.md`);
+          if (await pathExists(agentFile)) {
+            plan.agentFiles.push(agentFile);
+          }
+        }
+      }
+    }
   }
   const shellProfilePath = teamConfig.sharing.env.shellProfilePath ? expandHome(teamConfig.sharing.env.shellProfilePath) : detectShellProfile();
   if (shellProfilePath) {
@@ -13277,7 +13897,7 @@ async function buildRemovalPlan(localConfig, teamConfig) {
   return plan;
 }
 function isPlanEmpty(plan) {
-  return plan.hookFiles.length === 0 && plan.openclawHookDirs.length === 0 && plan.claudeMdFiles.length === 0 && plan.skillDirs.length === 0 && plan.ruleFiles.length === 0 && plan.shellProfile === null && plan.docsDir === null && !plan.teamaiHomeExists;
+  return plan.hookFiles.length === 0 && plan.openclawHookDirs.length === 0 && plan.claudeMdFiles.length === 0 && plan.skillDirs.length === 0 && plan.ruleFiles.length === 0 && plan.agentFiles.length === 0 && plan.shellProfile === null && plan.docsDir === null && !plan.teamaiHomeExists;
 }
 function printSummary(plan) {
   const cn = plan.scope === "project" ? "\u9879\u76EE\u7EA7" : "\u7528\u6237\u7EA7";
@@ -13314,6 +13934,10 @@ function printSummary(plan) {
     console.log(`   Rules (${plan.ruleFiles.length} \u4E2A\u6587\u4EF6)`);
     console.log("");
   }
+  if (plan.agentFiles.length > 0) {
+    console.log(`   Agents (${plan.agentFiles.length} \u4E2A\u6587\u4EF6)`);
+    console.log("");
+  }
   if (plan.shellProfile) {
     console.log("   Shell profile \u73AF\u5883\u53D8\u91CF\u5757:");
     console.log(`     ${plan.shellProfile}`);
@@ -13330,6 +13954,14 @@ function printSummary(plan) {
     console.log("");
   }
 }
+async function teardownPlugins() {
+  try {
+    const { teardownLocalAgentPlugins: teardownLocalAgentPlugins2 } = await Promise.resolve().then(() => (init_local_agent(), local_agent_exports));
+    await teardownLocalAgentPlugins2();
+  } catch (e) {
+    log.warn(`plugin teardown failed: ${e instanceof Error ? e.message : String(e)}`);
+  }
+}
 async function executeRemoval(plan) {
   for (const { path: settingsPath, tool } of plan.hookFiles) {
     try {
@@ -13388,6 +14020,16 @@ async function executeRemoval(plan) {
   if (plan.ruleFiles.length > 0) {
     log.success(`\u79FB\u9664\u4E86 ${plan.ruleFiles.length} \u4E2A rule \u6587\u4EF6`);
   }
+  for (const agentFile of plan.agentFiles) {
+    try {
+      await remove(agentFile);
+    } catch (e) {
+      log.warn(`\u79FB\u9664 agent \u5931\u8D25 ${agentFile}: ${e.message}`);
+    }
+  }
+  if (plan.agentFiles.length > 0) {
+    log.success(`\u79FB\u9664\u4E86 ${plan.agentFiles.length} \u4E2A agent \u6587\u4EF6`);
+  }
   if (plan.shellProfile) {
     try {
       const content = await readFileSafe(plan.shellProfile);
@@ -13414,6 +14056,7 @@ async function executeRemoval(plan) {
     }
   }
   if (plan.teamaiHomeExists) {
+    await teardownPlugins();
     try {
       await remove(plan.teamaiHome);
       log.success(`\u79FB\u9664 ${plan.teamaiHome}/`);
@@ -13480,6 +14123,7 @@ async function uninstall(opts) {
       }
     }
     try {
+      await teardownPlugins();
       await remove(home);
       log.success(`\u79FB\u9664 ${home}/`);
       log.success("teamai \u5378\u8F7D\u5B8C\u6210");
@@ -13497,6 +14141,8 @@ var init_uninstall = __esm({
     init_openclaw_hooks();
     init_types();
     init_builtin_rules();
+    init_builtin_agents();
+    init_builtin_skills();
     init_fs();
     init_logger();
     init_prompt();
@@ -14887,11 +15533,16 @@ async function cleanupStaleSessions(dir, currentSessionId) {
     }
   }
 }
-function computeSmartScore(events) {
+function toolErrorPoints(toolError) {
+  for (const tier of CONTRIBUTE_TOOLERROR_TIERS) {
+    if (toolError >= tier.min) return tier.points;
+  }
+  return 0;
+}
+function computeSmartScore(events, friction) {
   if (events.length === 0) return 0;
   const toolNames = /* @__PURE__ */ new Set();
   let hasSkills = false;
-  let hasErrors = false;
   let totalToolCalls = 0;
   for (const event of events) {
     if (event.type === "tool_use" && event.toolName) {
@@ -14901,36 +15552,20 @@ function computeSmartScore(events) {
         hasSkills = true;
       }
     }
-    if (event.type === "prompt_submit" && event.promptSummary) {
-      const lower = event.promptSummary.toLowerCase();
-      if (lower.includes("error") || lower.includes("fix") || lower.includes("bug") || lower.includes("fail") || lower.includes("retry")) {
-        hasErrors = true;
-      }
-    }
   }
   let score = 0;
-  if (totalToolCalls >= 20) {
-    score += Math.min(25, Math.round((totalToolCalls - 20) / 60 * 20) + 5);
-  }
-  if (totalToolCalls > 0) {
-    const diversity = toolNames.size / Math.min(totalToolCalls, 10);
-    score += Math.min(Math.round(diversity * 20), 20);
+  if (friction) {
+    score += friction.interrupt * CONTRIBUTE_INTERRUPT_WEIGHT;
+    score += friction.toolReject * CONTRIBUTE_REJECT_WEIGHT;
+    score += friction.correction * CONTRIBUTE_CORRECTION_WEIGHT;
+    score += toolErrorPoints(friction.toolError);
   }
   if (hasSkills) {
-    score += 10;
-  }
-  if (hasErrors) {
-    score += 10;
+    score += CONTRIBUTE_SKILL_BONUS;
   }
-  if (events.length >= 2) {
-    const first = new Date(events[0].timestamp).getTime();
-    const last = new Date(events[events.length - 1].timestamp).getTime();
-    const durationMin = (last - first) / (1e3 * 60);
-    if (durationMin > 30) {
-      score += 20;
-    } else if (durationMin > 15) {
-      score += 10;
-    }
+  if (totalToolCalls > 0) {
+    const diversity = toolNames.size / Math.min(totalToolCalls, 10);
+    score += Math.min(Math.round(diversity * CONTRIBUTE_DIVERSITY_BONUS_MAX), CONTRIBUTE_DIVERSITY_BONUS_MAX);
   }
   return score;
 }
@@ -14995,19 +15630,33 @@ function countToolUseEvents(events) {
 function countUniqueTools(events) {
   return new Set(events.filter((e) => e.toolName).map((e) => e.toolName)).size;
 }
-function buildHint(totalToolCalls, uniqueTools, isKnowledgeGap) {
-  if (isKnowledgeGap) {
-    return [
-      `[teamai] \u672C\u6B21 session \u6D89\u53CA\u77E5\u8BC6\u5E93\u5C1A\u672A\u8986\u76D6\u7684\u9886\u57DF\uFF08${totalToolCalls} \u6B21\u5DE5\u5177\u8C03\u7528\uFF0C${uniqueTools} \u79CD\u4E0D\u540C\u5DE5\u5177\uFF09\u3002`,
-      `\u5EFA\u8BAE\u8FD0\u884C /teamai-share-learnings \u5C06\u672C\u6B21\u7ECF\u9A8C\u603B\u7ED3\u5206\u4EAB\u7ED9\u56E2\u961F\uFF0C\u5E2E\u52A9\u586B\u8865\u77E5\u8BC6\u5E93\u7A7A\u767D\u3002`,
-      `\u4E0B\u6B21\u9047\u5230\u7C7B\u4F3C\u4EFB\u52A1\u65F6\uFF0C\u56E2\u961F\u6210\u5458\u5C06\u76F4\u63A5\u53D7\u76CA\u4E8E\u60A8\u7684\u7ECF\u9A8C\u3002`
-    ].join("");
+function extractFriction(events, sessionId) {
+  let interrupt = 0;
+  let toolReject = 0;
+  let toolError = 0;
+  for (const e of events) {
+    if (e.type === "stop" && e.interventions) {
+      interrupt = e.interventions.interrupt;
+      toolReject = e.interventions.toolReject;
+      toolError = e.interventions.toolError ?? 0;
+    }
   }
-  return [
-    `[teamai] \u672C\u6B21 session \u5185\u5BB9\u4E30\u5BCC\uFF08${totalToolCalls} \u6B21\u5DE5\u5177\u8C03\u7528\uFF0C${uniqueTools} \u79CD\u4E0D\u540C\u5DE5\u5177\uFF09\u3002`,
+  const correction = aggregateSessionMetrics(events).get(sessionId)?.correction ?? 0;
+  return { interrupt, toolReject, correction, toolError };
+}
+function buildHint(totalToolCalls, uniqueTools, isKnowledgeGap) {
+  const body = isKnowledgeGap ? [
+    `[teamai] \u672C\u6B21 session \u6D89\u53CA\u77E5\u8BC6\u5E93\u5C1A\u672A\u8986\u76D6\u7684\u9886\u57DF\uFF0C\u4E14\u8FC7\u7A0B\u4E2D\u7ECF\u5386\u4E86\u591A\u6B21\u8C03\u6574\uFF08${totalToolCalls} \u6B21\u5DE5\u5177\u8C03\u7528\uFF0C${uniqueTools} \u79CD\u4E0D\u540C\u5DE5\u5177\uFF09\u3002`,
+    `\u5EFA\u8BAE\u8FD0\u884C /teamai-share-learnings \u5C06\u672C\u6B21\u7ECF\u9A8C\u603B\u7ED3\u5206\u4EAB\u7ED9\u56E2\u961F\uFF0C\u5E2E\u52A9\u586B\u8865\u77E5\u8BC6\u5E93\u7A7A\u767D\u3002`,
+    `\u4E0B\u6B21\u9047\u5230\u7C7B\u4F3C\u4EFB\u52A1\u65F6\uFF0C\u56E2\u961F\u6210\u5458\u5C06\u76F4\u63A5\u53D7\u76CA\u4E8E\u60A8\u7684\u7ECF\u9A8C\u3002`
+  ].join("") : [
+    `[teamai] \u672C\u6B21 session \u8FC7\u7A0B\u4E2D\u51FA\u73B0\u4E86\u8F83\u591A\u7EA0\u504F\u6216\u5DE5\u5177\u91CD\u8BD5\uFF0C\u5F88\u53EF\u80FD\u8E29\u5230\u4E86\u503C\u5F97\u8BB0\u5F55\u7684\u5751\uFF08${totalToolCalls} \u6B21\u5DE5\u5177\u8C03\u7528\uFF0C${uniqueTools} \u79CD\u4E0D\u540C\u5DE5\u5177\uFF09\u3002`,
     `\u5EFA\u8BAE\u8FD0\u884C /teamai-share-learnings \u603B\u7ED3\u672C\u6B21 session \u7684\u7ECF\u9A8C\u5E76\u5206\u4EAB\u7ED9\u56E2\u961F\u3002`,
     `\u603B\u7ED3\u6587\u6863\u5C06\u4FDD\u5B58\u5230\u56E2\u961F\u4ED3\u5E93\u7684 learnings/ \u76EE\u5F55\u3002`
   ].join("");
+  return `Print the following message verbatim to the user (do NOT paraphrase, summarize, or explain its origin):
+
+${body}`;
 }
 async function contributeCheckForSession(sessionId, cwd) {
   const state = await readContributeState(sessionId);
@@ -15040,14 +15689,17 @@ async function contributeCheckForSession(sessionId, cwd) {
   } else {
     const allEvents = await readEvents();
     const sessionEvents = allEvents.filter((e) => e.sessionId === sessionId);
-    score = computeSmartScore(sessionEvents);
+    const friction = extractFriction(sessionEvents, sessionId);
+    score = computeSmartScore(sessionEvents, friction);
     toolCount = countToolUseEvents(sessionEvents);
     uniqueTools = countUniqueTools(sessionEvents);
     needsPersist = true;
     if (sessionEvents.length > 0) {
       sessionStartIso = sessionEvents[0].timestamp;
     }
-    log.debug(`contribute-check: session ${sessionId.slice(0, 16)} smart score = ${score} (threshold: ${CONTRIBUTE_SMART_THRESHOLD})`);
+    log.debug(
+      `contribute-check: session ${sessionId.slice(0, 16)} friction score = ${score} (interrupt=${friction.interrupt}, reject=${friction.toolReject}, correction=${friction.correction}, toolError=${friction.toolError}, threshold=${CONTRIBUTE_SMART_THRESHOLD})`
+    );
   }
   const phase2 = applyPhase2Adjustments(score, sessionId, cwd, sessionStartIso);
   score = phase2.score;
@@ -15058,7 +15710,7 @@ async function contributeCheckForSession(sessionId, cwd) {
       `contribute-check: phase2 adjustments applied (gap=${isKnowledgeGap}, commit=${hasGitCommit}, adjusted=${score})`
     );
   }
-  const willHint = score >= CONTRIBUTE_SMART_THRESHOLD;
+  const willHint = score >= CONTRIBUTE_SMART_THRESHOLD && toolCount >= CONTRIBUTE_BASE_THRESHOLD;
   if (needsPersist || willHint) {
     const latest = await readContributeState(sessionId);
     const updated = {
@@ -15138,7 +15790,9 @@ async function parseTranscriptForVotes(transcriptPath) {
   });
   for await (const line of rl) {
     const trimmed = line.trim();
-    if (!trimmed || !trimmed.includes('"assistant"')) continue;
+    if (!trimmed) continue;
+    extractRecalledDocIdsFromComment(trimmed, recalledSet);
+    if (!trimmed.includes('"assistant"')) continue;
     let entry;
     try {
       entry = JSON.parse(trimmed);
@@ -15161,6 +15815,19 @@ async function parseTranscriptForVotes(transcriptPath) {
     referencedDocIds: [...referencedSet]
   };
 }
+function isValidDocId(docId) {
+  return docId.length > 0 && !/[<>]/.test(docId) && docId !== "...";
+}
+function extractRecalledDocIdsFromComment(text, out) {
+  const pattern = /<!--\s*teamai:recalled-doc-ids:\s*\[([^\]]*)\]\s*-->/g;
+  let match;
+  while ((match = pattern.exec(text)) !== null) {
+    for (const item of match[1].split(",")) {
+      const docId = item.trim().replace(/^['"]|['"]$/g, "");
+      if (isValidDocId(docId)) out.add(docId);
+    }
+  }
+}
 function extractRecalledDocIds(text, out) {
   const START = "--- [teamai:recall:start] ---";
   const END = "--- [teamai:recall:end] ---";
@@ -15177,7 +15844,7 @@ function extractRecalledDocIds(text, out) {
     while ((match = filePattern.exec(region)) !== null) {
       const filePath = match[1].trim();
       const docId = path53.basename(filePath).replace(/\.md$/i, "");
-      out.add(docId);
+      if (isValidDocId(docId)) out.add(docId);
     }
     searchFrom = endIdx + END.length;
   }
@@ -15189,7 +15856,7 @@ function extractReferencedDocIds(text, out) {
     const raw = match[1];
     for (const item of raw.split(",")) {
       const docId = item.trim().replace(/^['"]|['"]$/g, "");
-      if (docId) out.add(docId);
+      if (isValidDocId(docId)) out.add(docId);
     }
   }
 }
@@ -15568,9 +16235,9 @@ function buildHandlerRegistry() {
     { event: "session-start", matcher: "*", handler: mrHintHandler, timeoutMs: MR_HINT_TIMEOUT_MS },
     { event: "session-start", matcher: "*", handler: localAgentHandler, timeoutMs: LOCAL_AGENT_TIMEOUT_MS },
     // ─── Stop ─────────────────────────────────────────
-    { event: "stop", matcher: "*", handler: updateHandler, timeoutMs: UPDATE_TIMEOUT_MS },
-    { event: "stop", matcher: "*", handler: contributeCheckHandler, timeoutMs: CONTRIBUTE_CHECK_TIMEOUT_MS },
+    { event: "stop", matcher: "*", handler: updateHandler, timeoutMs: UPDATE_TIMEOUT_MS2 },
     { event: "stop", matcher: "*", handler: votesSyncHandler, timeoutMs: VOTES_SYNC_TIMEOUT_MS },
+    { event: "stop", matcher: "*", handler: contributeCheckHandler, timeoutMs: CONTRIBUTE_CHECK_TIMEOUT_MS },
     { event: "stop", matcher: "*", handler: dashboardReportHandler, timeoutMs: DASHBOARD_TIMEOUT_MS },
     { event: "stop", matcher: "*", handler: localAgentHandler, timeoutMs: LOCAL_AGENT_TIMEOUT_MS },
     // ─── PostToolUse ──────────────────────────────────
@@ -15584,14 +16251,14 @@ function buildHandlerRegistry() {
     { event: "prompt-submit", matcher: "*", handler: localAgentHandler, timeoutMs: LOCAL_AGENT_TIMEOUT_MS }
   ];
 }
-var PULL_TIMEOUT_MS, UPDATE_TIMEOUT_MS, TRACK_TIMEOUT_MS, DASHBOARD_TIMEOUT_MS, CONTRIBUTE_CHECK_TIMEOUT_MS, VOTES_SYNC_TIMEOUT_MS, TODOWRITE_HINT_TIMEOUT_MS, MR_HINT_TIMEOUT_MS, LOCAL_AGENT_TIMEOUT_MS, pullHandler, updateHandler, dashboardReportHandler, trackHandler, trackSlashHandler, contributeCheckHandler, votesSyncHandler, todowriteHintHandler, mrHintHandler, localAgentHandler;
+var PULL_TIMEOUT_MS, UPDATE_TIMEOUT_MS2, TRACK_TIMEOUT_MS, DASHBOARD_TIMEOUT_MS, CONTRIBUTE_CHECK_TIMEOUT_MS, VOTES_SYNC_TIMEOUT_MS, TODOWRITE_HINT_TIMEOUT_MS, MR_HINT_TIMEOUT_MS, LOCAL_AGENT_TIMEOUT_MS, pullHandler, updateHandler, dashboardReportHandler, trackHandler, trackSlashHandler, contributeCheckHandler, votesSyncHandler, todowriteHintHandler, mrHintHandler, localAgentHandler;
 var init_hook_handlers = __esm({
   "src/hook-handlers.ts"() {
     "use strict";
     init_session_id();
     init_tool_names();
     PULL_TIMEOUT_MS = 6e4;
-    UPDATE_TIMEOUT_MS = 1e4;
+    UPDATE_TIMEOUT_MS2 = 1e4;
     TRACK_TIMEOUT_MS = 5e3;
     DASHBOARD_TIMEOUT_MS = 5e3;
     CONTRIBUTE_CHECK_TIMEOUT_MS = 1e4;
@@ -15689,7 +16356,7 @@ var init_hook_handlers = __esm({
     };
     votesSyncHandler = {
       name: "votes-sync",
-      async execute(stdin) {
+      async execute(stdin, tool) {
         if (process.env.TEAMAI_RECALL_DISABLED === "1") return null;
         const transcriptPath = typeof stdin.transcript_path === "string" ? stdin.transcript_path : null;
         if (!transcriptPath) return null;
@@ -15699,7 +16366,7 @@ var init_hook_handlers = __esm({
           const { requireInit: requireInit3 } = await Promise.resolve().then(() => (init_config(), config_exports));
           const voteData = await parseTranscriptForVotes2(transcriptPath);
           const { localConfig } = await requireInit3();
-          const { VOTES_LOCAL_DIR: VOTES_LOCAL_DIR2 } = await Promise.resolve().then(() => (init_types(), types_exports));
+          const { VOTES_LOCAL_DIR: VOTES_LOCAL_DIR2, TEAMAI_SESSIONS_DIR: TEAMAI_SESSIONS_DIR2 } = await Promise.resolve().then(() => (init_types(), types_exports));
           const votesDir = VOTES_LOCAL_DIR2;
           const votePath = path56.join(votesDir, `${localConfig.username}.yaml`);
           if (voteData.referencedDocIds.length > 0) {
@@ -15707,6 +16374,52 @@ var init_hook_handlers = __esm({
           }
           await syncVotesToTeam2(localConfig.repo.localPath, localConfig.username, votesDir).catch(() => {
           });
+          const sessionId = deriveSessionId(stdin, { includeCwd: true });
+          const recalled = voteData.recalledDocIds;
+          const declared = voteData.referencedDocIds;
+          let nudged = false;
+          if (recalled.length > 0 && declared.length === 0) {
+            const fsp = await import("fs/promises");
+            const safeId = sessionId.replace(/[^a-zA-Z0-9_.-]/g, "_");
+            const marker = path56.join(TEAMAI_SESSIONS_DIR2, `${safeId}-adoption-nudged`);
+            let already = false;
+            try {
+              await fsp.access(marker);
+              already = true;
+            } catch {
+              already = false;
+            }
+            if (!already) {
+              try {
+                const { ensureDir: ensureDir3 } = await Promise.resolve().then(() => (init_fs(), fs_exports));
+                await ensureDir3(TEAMAI_SESSIONS_DIR2);
+                await fsp.writeFile(marker, "");
+                nudged = true;
+              } catch {
+              }
+            }
+          }
+          if (process.env.TEAMAI_ADOPTION_EVAL_LOG) {
+            try {
+              const { appendFile } = await import("fs/promises");
+              await appendFile(
+                process.env.TEAMAI_ADOPTION_EVAL_LOG,
+                JSON.stringify({
+                  ts: (/* @__PURE__ */ new Date()).toISOString(),
+                  sessionId,
+                  recalled: recalled.length,
+                  declared: declared.length,
+                  nudged
+                }) + "\n"
+              );
+            } catch {
+            }
+          }
+          if (nudged) {
+            const { formatStopHookOutput: formatStopHookOutput2 } = await Promise.resolve().then(() => (init_hook_output(), hook_output_exports));
+            const msg = `\u4F60\u672C\u6B21\u901A\u8FC7 teamai \u53EC\u56DE\u4E86\u56E2\u961F\u77E5\u8BC6\uFF08\u5019\u9009 doc-id\uFF1A${recalled.join(", ")}\uFF09\u3002\u7ED3\u675F\u524D\u8BF7\u5728\u56DE\u590D\u672B\u5C3E\u58F0\u660E\u4F60\u5B9E\u9645\u7528\u5230\u7684\u6761\u76EE\uFF1A<!-- teamai:referenced-doc-ids: [\u7528\u5230\u7684doc-id] -->\uFF1B\u6CA1\u7528\u5230\u5C31\u7559\u7A7A []\u3002`;
+            return formatStopHookOutput2(msg, tool ?? "claude");
+          }
         } catch {
         }
         return null;
@@ -27579,6 +28292,26 @@ skillCmd.command("show <name>").description("Show skill metadata: source / contr
   const { skillShow: skillShow2 } = await Promise.resolve().then(() => (init_skill_cmd(), skill_cmd_exports));
   await skillShow2(name, { ...globalOpts, ...cmdOpts });
 });
+var excludeCmd = skillCmd.command("exclude").description("Manage per-user skill exclusion (skip sync without affecting team repo)").action(async () => {
+  const globalOpts = program.opts();
+  const { excludeList: excludeList2 } = await Promise.resolve().then(() => (init_exclude(), exclude_exports));
+  await excludeList2(globalOpts);
+});
+excludeCmd.command("list").description("List excluded skills").action(async () => {
+  const globalOpts = program.opts();
+  const { excludeList: excludeList2 } = await Promise.resolve().then(() => (init_exclude(), exclude_exports));
+  await excludeList2(globalOpts);
+});
+excludeCmd.command("add <skills...>").description("Add skill(s) to the exclude list").action(async (skills) => {
+  const globalOpts = program.opts();
+  const { excludeAdd: excludeAdd2 } = await Promise.resolve().then(() => (init_exclude(), exclude_exports));
+  await excludeAdd2(skills, globalOpts);
+});
+excludeCmd.command("remove <skills...>").description("Remove skill(s) from the exclude list").action(async (skills) => {
+  const globalOpts = program.opts();
+  const { excludeRemove: excludeRemove2 } = await Promise.resolve().then(() => (init_exclude(), exclude_exports));
+  await excludeRemove2(skills, globalOpts);
+});
 var membersCmd = program.command("members").description("Manage team members").action(async () => {
   const globalOpts = program.opts();
   const { listMembers: listMembers2 } = await Promise.resolve().then(() => (init_members(), members_exports));
@@ -27701,6 +28434,10 @@ sourceCmd.command("remove-http").description("Remove the HTTP source and clean u
   const { sourceRemoveHttp: sourceRemoveHttp2 } = await Promise.resolve().then(() => (init_source(), source_exports));
   await sourceRemoveHttp2(globalOpts);
 });
+sourceCmd.command("reconcile-plugins", { hidden: true }).description("Run plugin reconcile worker (called internally by session_start hook)").action(async () => {
+  const { runPluginReconcileWorker: runPluginReconcileWorker2 } = await Promise.resolve().then(() => (init_local_agent(), local_agent_exports));
+  await runPluginReconcileWorker2();
+});
 sourceCmd.command("list").description("List all configured sources").action(async () => {
   const { sourceList: sourceList2 } = await Promise.resolve().then(() => (init_source(), source_exports));
   await sourceList2();
@@ -27795,10 +28532,10 @@ program.command("hook-dispatch <event>").description("Unified hook dispatcher \u
   const { hookDispatchCli: hookDispatchCli2 } = await Promise.resolve().then(() => (init_hook_dispatch_cli(), hook_dispatch_cli_exports));
   await hookDispatchCli2(event, cmdOpts.tool ?? "claude", cmdOpts.matcher ?? "*");
 });
-program.command("bind-project").description("Bind the current project to a ClawPro organization/group for HTTP local-agent sync").option("--group-id <id>", "Group ID from /user-groups/mine").option("--skip", "Mark current project as skipped (never prompt again)").action(async (cmdOpts) => {
+program.command("bind-project").description("Bind the current workspace to a ClawPro project for HTTP local-agent sync").option("--project-id <id>", "Project ID from /projects/mine").option("--skip", "Mark current workspace as skipped (never prompt again)").action(async (cmdOpts) => {
   const { bindCurrentProject: bindCurrentProject2 } = await Promise.resolve().then(() => (init_local_agent(), local_agent_exports));
   await bindCurrentProject2({
-    groupId: cmdOpts.groupId ? Number.parseInt(cmdOpts.groupId, 10) : void 0,
+    projectId: cmdOpts.projectId ? Number.parseInt(cmdOpts.projectId, 10) : void 0,
     skip: !!cmdOpts.skip
   });
 });