tsic-ainode 1.0.0

package/README.md

@@ -0,0 +1,74 @@
+# TSIC AINode Skill Installer
+
+為你的 AI 工具安裝 **AINode Dongle SSH 連線技能**，讓 Claude Code、Cursor、Codex、Gemini CLI、Antigravity 等 AI Agent 能自動偵測 AINODE USB Dongle 並安全連線到 AINode miniPC。
+
+## 安裝
+
+```bash
+npx tsic-ainode@latest
+```
+
+互動式安裝器會：
+1. 偵測你已安裝的 AI 工具
+2. 詢問語言（繁中 / English）
+3. 詢問安裝範圍（全域 / 目前專案）
+4. 安裝對應的 Skill 設定檔
+
+## 支援的 AI 工具
+
+| 工具 | 安裝位置（全域） | 安裝位置（專案） |
+|------|----------------|----------------|
+| Claude Code | `~/.claude/skills/tsic-ainode/SKILL.md` | 同左 |
+| Cursor | `~/.cursor/rules/tsic-ainode.mdc` | `.cursor/rules/tsic-ainode.mdc` |
+| OpenAI Codex CLI | `~/.codex/AGENTS.md` | `./AGENTS.md` |
+| Gemini CLI | `~/.gemini/GEMINI.md` | `./GEMINI.md` |
+| Antigravity | `~/.antigravity/AGENTS.md` | `./.antigravity/AGENTS.md` |
+
+## 使用方式
+
+安裝後，插入 **AINODE USB Dongle**，對你的 AI 工具說：
+
+- 「部署到 AINode」
+- 「連線 AINode」
+- 「把服務跑在 AINode 上」
+- "deploy to AINode"
+- "connect to AINode"
+
+AI Agent 會自動：
+1. 偵測 AINODE 磁碟（Windows: `E:\`、macOS: `/Volumes/AINODE`、Linux: `blkid -L AINODE`）
+2. 使用 Dongle 上的私鑰（`ID_ED255`）透過 `SSHCFG` 設定連線
+3. 執行部署、查詢日誌、管理 Docker 服務等操作
+
+## AINode Dongle 安全設計
+
+```
+Dongle Flash (加密)
+  [AES-128-CBC 加密私鑰]  ← 開機時解密到 RAM
+  [公鑰]                  ← 首次配對時寫入 AINode authorized_keys
+
+Dongle 磁碟 (AINODE, FAT12 64KB)
+  SSHCFG      ← SSH 設定（Host / HostName / Port）
+  ID_ED255    ← 私鑰（RAM，拔除即消失）
+  ID_ED255.PUB ← 公鑰
+  README.TXT
+```
+
+私鑰只存在 Dongle 的 RAM 中，拔除即無法連線 — 這是設計行為。
+
+## 即將推出
+
+- **MCP Server**：AINode 將提供 MCP 接入口，AI Agent 可直接查詢服務狀態、觸發部署
+- **AI 優化 REST API**：`http://192.168.1.100:8080/api/v1/` 結構化端點
+- **Skill 自動更新**：重新執行 `npx tsic-ainode@latest` 即可更新
+
+## 手動安裝（不用 npx）
+
+```bash
+git clone https://github.com/TSIC-tech/TSIC-AINode.git
+cd TSIC-AINode
+node bin/index.js
+```
+
+## License
+
+MIT

package/bin/index.js

@@ -0,0 +1,299 @@
+#!/usr/bin/env node
+/**
+ * TSIC AINode Skill Installer
+ * Usage: npx tsic-ainode@latest
+ */
+
+'use strict';
+
+const fs   = require('fs');
+const path = require('path');
+const os   = require('os');
+const { execSync } = require('child_process');
+const readline = require('readline');
+
+// ---------------------------------------------------------------------------
+// Paths
+// ---------------------------------------------------------------------------
+const PKG_ROOT    = path.join(__dirname, '..');
+const LOCALES_DIR = path.join(PKG_ROOT, 'locales');
+const TMPL_DIR    = path.join(PKG_ROOT, 'templates');
+const HOME        = os.homedir();
+const CWD         = process.cwd();
+const IS_WIN      = process.platform === 'win32';
+
+// ---------------------------------------------------------------------------
+// i18n
+// ---------------------------------------------------------------------------
+let T = {};
+function loadLocale(lang) {
+  const file = path.join(LOCALES_DIR, `${lang}.json`);
+  const fallback = path.join(LOCALES_DIR, 'en.json');
+  try {
+    T = JSON.parse(fs.readFileSync(fs.existsSync(file) ? file : fallback, 'utf8'));
+  } catch {
+    T = {};
+  }
+}
+
+function t(key, fallback = key) {
+  return T[key] || fallback;
+}
+
+// ---------------------------------------------------------------------------
+// Detect OS locale
+// ---------------------------------------------------------------------------
+function detectLocale() {
+  const env = process.env.LANG || process.env.LC_ALL || process.env.LANGUAGE || '';
+  if (env.toLowerCase().includes('zh')) return 'zh-TW';
+  return 'en';
+}
+
+// ---------------------------------------------------------------------------
+// Tool definitions
+// ---------------------------------------------------------------------------
+const TOOLS = [
+  {
+    id:       'claude',
+    nameKey:  'tool_claude',
+    detect:   () => fs.existsSync(path.join(HOME, '.claude')),
+    install:  installClaude,
+  },
+  {
+    id:       'cursor',
+    nameKey:  'tool_cursor',
+    detect:   () => fs.existsSync(path.join(HOME, '.cursor')) ||
+                    fs.existsSync(path.join(CWD, '.cursor')),
+    install:  installCursor,
+  },
+  {
+    id:       'codex',
+    nameKey:  'tool_codex',
+    detect:   () => cmdExists('codex') || fs.existsSync(path.join(HOME, '.codex')),
+    install:  installCodex,
+  },
+  {
+    id:       'gemini',
+    nameKey:  'tool_gemini',
+    detect:   () => cmdExists('gemini') || fs.existsSync(path.join(HOME, '.gemini')),
+    install:  installGemini,
+  },
+  {
+    id:       'antigravity',
+    nameKey:  'tool_antigravity',
+    detect:   () => cmdExists('antigravity') ||
+                    fs.existsSync(path.join(HOME, '.antigravity')),
+    install:  installAntigravity,
+  },
+];
+
+function cmdExists(cmd) {
+  try {
+    execSync(IS_WIN ? `where ${cmd}` : `which ${cmd}`, { stdio: 'ignore' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Install functions
+// ---------------------------------------------------------------------------
+function copyTemplate(src, dest) {
+  fs.mkdirSync(path.dirname(dest), { recursive: true });
+  fs.copyFileSync(src, dest);
+}
+
+function appendToFile(src, dest) {
+  const tag    = '<!-- tsic-ainode -->';
+  const content = fs.readFileSync(src, 'utf8');
+  if (fs.existsSync(dest)) {
+    const existing = fs.readFileSync(dest, 'utf8');
+    if (existing.includes(tag)) return; // already installed
+    fs.appendFileSync(dest, `\n\n${tag}\n${content}`);
+  } else {
+    fs.mkdirSync(path.dirname(dest), { recursive: true });
+    fs.writeFileSync(dest, content);
+  }
+}
+
+function installClaude(scope) {
+  const dest = path.join(HOME, '.claude', 'skills', 'tsic-ainode', 'SKILL.md');
+  copyTemplate(path.join(TMPL_DIR, 'claude-code', 'SKILL.md'), dest);
+  return dest;
+}
+
+function installCursor(scope) {
+  const rulesDir = scope === 'global'
+    ? path.join(HOME, '.cursor', 'rules')
+    : path.join(CWD, '.cursor', 'rules');
+  const dest = path.join(rulesDir, 'tsic-ainode.mdc');
+  copyTemplate(path.join(TMPL_DIR, 'cursor', 'tsic-ainode.mdc'), dest);
+  return dest;
+}
+
+function installCodex(scope) {
+  const dest = scope === 'global'
+    ? path.join(HOME, '.codex', 'AGENTS.md')
+    : path.join(CWD, 'AGENTS.md');
+  appendToFile(path.join(TMPL_DIR, 'codex', 'AGENTS.md'), dest);
+  return dest;
+}
+
+function installGemini(scope) {
+  const dest = scope === 'global'
+    ? path.join(HOME, '.gemini', 'GEMINI.md')
+    : path.join(CWD, 'GEMINI.md');
+  appendToFile(path.join(TMPL_DIR, 'gemini-cli', 'GEMINI.md'), dest);
+  return dest;
+}
+
+function installAntigravity(scope) {
+  const dest = scope === 'global'
+    ? path.join(HOME, '.antigravity', 'AGENTS.md')
+    : path.join(CWD, '.antigravity', 'AGENTS.md');
+  appendToFile(path.join(TMPL_DIR, 'antigravity', 'AGENTS.md'), dest);
+  return dest;
+}
+
+// ---------------------------------------------------------------------------
+// Readline helpers
+// ---------------------------------------------------------------------------
+function createRL() {
+  return readline.createInterface({ input: process.stdin, output: process.stdout });
+}
+
+function ask(rl, question) {
+  return new Promise(resolve => rl.question(question, resolve));
+}
+
+function askChoice(rl, question, choices) {
+  return new Promise(resolve => {
+    const opts = choices.map((c, i) => `  ${i + 1}. ${c}`).join('\n');
+    rl.question(`${question}\n${opts}\n> `, ans => {
+      const idx = parseInt(ans.trim(), 10) - 1;
+      resolve(choices[Math.max(0, Math.min(idx, choices.length - 1))]);
+    });
+  });
+}
+
+async function askCheckbox(rl, question, items) {
+  console.log(`\n${question}`);
+  const selected = new Set(items.filter(i => i.detected).map(i => i.id));
+  items.forEach((item, i) => {
+    const check = selected.has(item.id) ? '◉' : '○';
+    const hint  = item.detected ? ' (detected)' : '';
+    console.log(`  ${i + 1}. ${check} ${item.label}${hint}`);
+  });
+  console.log('  (Enter numbers to toggle, e.g. "1 3", or Enter to confirm)');
+
+  while (true) {
+    const ans = await ask(rl, '> ');
+    if (ans.trim() === '') break;
+    ans.trim().split(/\s+/).forEach(n => {
+      const idx = parseInt(n, 10) - 1;
+      if (idx >= 0 && idx < items.length) {
+        const id = items[idx].id;
+        selected.has(id) ? selected.delete(id) : selected.add(id);
+      }
+    });
+    // redraw
+    items.forEach((item, i) => {
+      const check = selected.has(item.id) ? '◉' : '○';
+      process.stdout.write(`  ${i + 1}. ${check} ${item.label}\n`);
+    });
+    console.log('  (Enter to confirm, or toggle more)');
+  }
+  return items.filter(i => selected.has(i.id));
+}
+
+// ---------------------------------------------------------------------------
+// Main
+// ---------------------------------------------------------------------------
+async function main() {
+  // Load default locale first
+  let locale = detectLocale();
+  loadLocale(locale);
+
+  const rl = createRL();
+
+  // Banner
+  console.log('\n' + '─'.repeat(50));
+  console.log(` ${t('welcome')}`);
+  console.log(` ${t('welcome_sub')}`);
+  console.log('─'.repeat(50));
+
+  // Language selection
+  const langChoice = await askChoice(rl, `\n${t('lang_prompt')}`, [
+    '繁體中文 (zh-TW)',
+    'English (en)',
+  ]);
+  locale = langChoice.startsWith('繁') ? 'zh-TW' : 'en';
+  loadLocale(locale);
+
+  // Detect tools
+  const detectedIds = TOOLS.filter(t => t.detect()).map(t => t.id);
+  if (detectedIds.length > 0) {
+    console.log(`\n${T.detect_title}`);
+    detectedIds.forEach(id => {
+      const tool = TOOLS.find(t => t.id === id);
+      console.log(`  ✓ ${T[tool.nameKey] || tool.id}`);
+    });
+  } else {
+    console.log(`\n${T.detect_none}`);
+  }
+
+  // Choose tools
+  const toolItems = TOOLS.map(tool => ({
+    id:       tool.id,
+    label:    T[tool.nameKey] || tool.id,
+    detected: detectedIds.includes(tool.id),
+    install:  tool.install,
+  }));
+  const chosen = await askCheckbox(rl, T.tools_prompt, toolItems);
+
+  if (chosen.length === 0) {
+    console.log('\nNo tools selected. Exiting.');
+    rl.close();
+    return;
+  }
+
+  // Scope
+  const scopeChoice = await askChoice(rl, `\n${T.scope_prompt}`, [
+    T.scope_global,
+    T.scope_project,
+  ]);
+  const scope = scopeChoice === T.scope_global ? 'global' : 'project';
+
+  // Install
+  console.log(`\n${T.installing}`);
+  const results = [];
+  for (const tool of chosen) {
+    try {
+      const dest = tool.install(scope);
+      console.log(`  ${T.installed_ok}: ${tool.label}`);
+      console.log(`    → ${dest}`);
+      results.push({ tool, dest, ok: true });
+    } catch (err) {
+      console.error(`  ✗ ${T.err_write}: ${tool.label} — ${err.message}`);
+      results.push({ tool, ok: false });
+    }
+  }
+
+  // Done
+  console.log('\n' + '─'.repeat(50));
+  console.log(` ${T.done_title}`);
+  console.log('─'.repeat(50));
+  console.log(`\n${T.done_usage}`);
+  console.log(`  ${T.done_example_zh}`);
+  console.log(`  ${T.done_example_en}`);
+  console.log(`\n${T.done_docs} https://github.com/TSIC-tech/TSIC-AINode`);
+  console.log();
+
+  rl.close();
+}
+
+main().catch(err => {
+  console.error('Error:', err.message);
+  process.exit(1);
+});

package/locales/en.json

@@ -0,0 +1,26 @@
+{
+  "welcome": "🔐 TSIC AINode Skill Installer",
+  "welcome_sub": "Install AINode Dongle connection skills for your AI tools",
+  "lang_prompt": "Language / 語言:",
+  "detect_title": "Detected AI tools:",
+  "detect_none": "(No tools detected — showing all options)",
+  "tools_prompt": "Select tools to install (space to toggle, Enter to confirm):",
+  "scope_prompt": "Installation scope:",
+  "scope_global": "Global (~/.claude/skills, ~/.cursor/rules, etc.)",
+  "scope_project": "Current project folder (.cursor/rules, AGENTS.md, etc.)",
+  "installing": "Installing...",
+  "installed_ok": "✓ Installed",
+  "installed_skip": "- Skipped",
+  "done_title": "Installation complete!",
+  "done_usage": "Usage: insert the AINODE Dongle, then tell your AI tool:",
+  "done_example_zh": "「部署到 AINode」「連線 AINode」",
+  "done_example_en": "\"deploy to AINode\", \"connect to AINode\", \"run service on AINode\"",
+  "done_docs": "Docs:",
+  "err_node": "Node.js 16+ required",
+  "err_write": "Write failed",
+  "tool_claude": "Claude Code",
+  "tool_cursor": "Cursor",
+  "tool_codex":  "OpenAI Codex CLI",
+  "tool_gemini": "Gemini CLI",
+  "tool_antigravity": "Antigravity"
+}

package/locales/zh-TW.json

@@ -0,0 +1,26 @@
+{
+  "welcome": "🔐 TSIC AINode Skill 安裝器",
+  "welcome_sub": "為你的 AI 工具安裝 AINode Dongle 連線技能",
+  "lang_prompt": "語言 / Language:",
+  "detect_title": "偵測到以下 AI 工具：",
+  "detect_none": "（未偵測到任何工具，將顯示所有選項）",
+  "tools_prompt": "選擇要安裝的工具（空白鍵切換，Enter 確認）：",
+  "scope_prompt": "安裝範圍：",
+  "scope_global": "全域（~/.claude/skills、~/.cursor/rules 等）",
+  "scope_project": "目前專案資料夾（.cursor/rules、AGENTS.md 等）",
+  "installing": "安裝中...",
+  "installed_ok": "✓ 已安裝",
+  "installed_skip": "- 略過",
+  "done_title": "安裝完成！",
+  "done_usage": "使用方式：插入 AINODE Dongle 後，在你的 AI 工具中說：",
+  "done_example_zh": "「部署到 AINode」、「連線 AINode」、「把服務跑在 AINode 上」",
+  "done_example_en": "\"deploy to AINode\", \"connect to AINode\", \"run service on AINode\"",
+  "done_docs": "詳細說明：",
+  "err_node": "需要 Node.js 16 以上版本",
+  "err_write": "寫入失敗",
+  "tool_claude": "Claude Code",
+  "tool_cursor": "Cursor",
+  "tool_codex":  "OpenAI Codex CLI",
+  "tool_gemini": "Gemini CLI",
+  "tool_antigravity": "Antigravity"
+}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "tsic-ainode",
+  "version": "1.0.0",
+  "description": "TSIC AINode Skill installer — adds AINode SSH Dongle support to Claude Code, Cursor, Codex, Gemini CLI, and Antigravity",
+  "bin": {
+    "tsic-ainode": "bin/index.js"
+  },
+  "scripts": {
+    "start": "node bin/index.js"
+  },
+  "keywords": [
+    "ainode",
+    "tsic",
+    "ssh",
+    "dongle",
+    "claude-code",
+    "cursor",
+    "codex",
+    "gemini",
+    "skill",
+    "mcp"
+  ],
+  "author": "TSIC",
+  "license": "MIT",
+  "engines": {
+    "node": ">=16"
+  },
+  "files": [
+    "bin/",
+    "templates/",
+    "locales/"
+  ]
+}

package/templates/antigravity/AGENTS.md

@@ -0,0 +1,80 @@
+# TSIC AINode — Antigravity Agent Instructions
+
+## AINode Connection Context
+
+When working with this project, you may need to connect to a **TSIC AINode miniPC**
+(`192.168.1.100`) — a local edge server running Docker and Cloudflare Tunnel.
+
+Authentication is hardware-based: the **AINODE USB Security Dongle** contains the
+SSH private key in AES-128-CBC encrypted Flash. The key decrypts to RAM at boot;
+removing the Dongle immediately revokes access.
+
+## Detecting the Dongle
+
+```bash
+# Windows (PowerShell)
+(Get-WmiObject Win32_LogicalDisk | Where-Object { $_.VolumeName -eq "AINODE" }).DeviceID
+
+# macOS
+DONGLE=$(ls /Volumes | grep -x AINODE && echo /Volumes/AINODE || echo "")
+
+# Linux
+DONGLE=$(blkid -L AINODE 2>/dev/null | xargs -I{} findmnt -n -o TARGET {})
+```
+
+## Connecting
+
+```bash
+# With Dongle
+ssh -F "$DONGLE/SSHCFG" -i "$DONGLE/ID_ED255" AINode
+
+# Fallback (no Dongle)
+ssh AINode
+```
+
+## Service Deployment
+
+```bash
+# 1. Build archive
+tar -czf /tmp/service.tar.gz \
+  --exclude='.git' --exclude='node_modules' \
+  --exclude='__pycache__' --exclude='.env' .
+
+# 2. Transfer
+scp -F "$DONGLE/SSHCFG" -i "$DONGLE/ID_ED255" \
+  /tmp/service.tar.gz AINode:~/services/$(basename $PWD)/
+
+# 3. Deploy
+ssh -F "$DONGLE/SSHCFG" -i "$DONGLE/ID_ED255" AINode \
+  "cd ~/services/$(basename $PWD) && \
+   tar -xzf *.tar.gz && \
+   docker compose up -d --build && \
+   docker ps"
+```
+
+## Key Rules
+
+- Always detect Dongle **before** attempting SSH operations
+- Never copy or persist `ID_ED255` outside the Dongle
+- Ask the user before uploading `.env` files
+- If connection fails: check Dongle is mounted, not just plugged in
+
+## Future: MCP & AI Endpoints (Coming Soon)
+
+AINode is being extended with AI-native access interfaces:
+
+```
+MCP Server
+  Transport : SSH (no extra network exposure)
+  Auth      : AINODE Dongle key
+  Tools     : list_services, get_logs, deploy, get_metrics
+
+REST API (http://192.168.1.100:8080/api/v1/)
+  GET  /status
+  GET  /services
+  POST /deploy  { service, image, env }
+  GET  /logs/{service}?tail=100
+  WS   /logs/{service}/stream
+```
+
+These will be documented in future versions of this skill file.

package/templates/claude-code/SKILL.md

@@ -0,0 +1,139 @@
+---
+name: tsic-ainode
+description: 連線到 TSIC AINode miniPC 並管理服務。偵測 AINODE USB Security Dongle，透過 SSH 部署 Docker 服務、查詢日誌、設定 Cloudflare Tunnel。未來支援 MCP 端點與 AI 優化查詢接入口。觸發詞：「連線 AINode」「部署到 AINode」「AINode 上跑」「AINode ssh」「deploy to AINode」。
+---
+
+# TSIC AINode Skill
+
+透過 **AINODE USB Security Dongle** 安全連線到 AINode miniPC（192.168.1.100）。
+私鑰儲存在 Dongle 的加密 Flash 中，拔除 Dongle 即無法連線。
+
+---
+
+## Step 0：偵測 AINODE Dongle
+
+### Windows（PowerShell）
+```powershell
+Get-WmiObject Win32_LogicalDisk | Where-Object { $_.VolumeName -eq "AINODE" } | Select-Object DeviceID
+```
+
+### macOS
+```bash
+ls /Volumes/AINODE 2>/dev/null && echo found || echo not_found
+```
+
+### Linux
+```bash
+blkid -L AINODE 2>/dev/null || findmnt -l | grep AINODE | awk '{print $1}'
+```
+
+**找到 Dongle（卷標 AINODE）：**
+```
+DONGLE_PATH = <掛載路徑>          # e.g. E:\ (Windows) / /Volumes/AINODE (macOS)
+SSH_KEY     = {DONGLE_PATH}/ID_ED255
+SSH_CONFIG  = {DONGLE_PATH}/SSHCFG
+SSH_CMD     = ssh -F {SSH_CONFIG} -i {SSH_KEY} AINode
+SCP_CMD     = scp -F {SSH_CONFIG} -i {SSH_KEY}
+```
+
+**找不到 Dongle → Fallback：**
+```
+SSH_CMD = ssh AINode   # 使用 ~/.ssh/config 中的 AINode alias
+```
+
+---
+
+## Step 1：確認連線
+
+```bash
+{SSH_CMD} -o BatchMode=yes "echo ok && whoami && uptime"
+```
+
+若失敗：
+- 有 Dongle → 確認 Dongle 已掛載，`ID_ED255` 檔案存在
+- 無 Dongle → 確認 `~/.ssh/config` 有 `Host AINode` 設定
+
+---
+
+## Step 2：部署 Docker 服務
+
+```bash
+# 打包並上傳專案
+tar -czf /tmp/{service}.tar.gz --exclude='.git' --exclude='node_modules' --exclude='.env' .
+{SCP_CMD} /tmp/{service}.tar.gz AINode:~/services/{service}/
+
+# 解壓並啟動
+{SSH_CMD} "cd ~/services/{service} && tar -xzf {service}.tar.gz && docker compose up -d --build"
+
+# 確認狀態
+{SSH_CMD} "docker ps | grep {service}"
+```
+
+---
+
+## Step 3：常用操作
+
+```bash
+# 查看容器 log
+{SSH_CMD} "docker logs -f {service}"
+
+# 重新部署
+{SSH_CMD} "cd ~/services/{service} && docker compose up -d --build"
+
+# 停止服務
+{SSH_CMD} "docker compose -f ~/services/{service}/docker-compose.yml down"
+
+# 系統資源
+{SSH_CMD} "df -h && free -h && docker stats --no-stream"
+```
+
+---
+
+## Step 4：Cloudflare Tunnel（選用）
+
+```bash
+# 快速臨時 URL（測試用）
+{SSH_CMD} "nohup cloudflared tunnel --url http://localhost:{port} > ~/cf.log 2>&1 &"
+{SSH_CMD} "sleep 3 && grep -o 'https://[a-z0-9-]*\.trycloudflare\.com' ~/cf.log | head -1"
+```
+
+---
+
+## 【預留】AINode AI 接入口（即將推出）
+
+> 以下功能正在開發中，未來版本會在此 Skill 更新。
+
+### MCP Server
+```
+AINode 內建 MCP Server，AI Agent 可直接查詢：
+  - 服務狀態（Docker containers）
+  - 系統資源（CPU / RAM / Disk）
+  - 部署歷史
+  - 網路設定
+
+連線方式（待更新）：
+  mcp connect ainode --via-ssh --key {SSH_KEY}
+```
+
+### AI 優化 API 端點
+```
+未來將提供 REST / gRPC 端點，針對 AI Agent 查詢優化：
+  http://192.168.1.100:8080/api/v1/
+  - GET  /status          系統狀態快照
+  - GET  /services        所有 Docker 服務列表
+  - POST /deploy          觸發部署流程
+  - GET  /logs/{service}  結構化 log 輸出
+```
+
+---
+
+## AINode 規格參考
+
+| 項目 | 規格 |
+|------|------|
+| 主機 IP | 192.168.1.100 |
+| 連線方式 | RJ45 直連（LAN2）|
+| SSH Port | 22 |
+| 預設使用者 | 見 Dongle SSHCFG |
+| Docker | docker compose v2 |
+| Tunnel | cloudflared |

package/templates/codex/AGENTS.md

@@ -0,0 +1,80 @@
+# TSIC AINode — OpenAI Codex Agent Instructions
+
+## AINode Connection
+
+This project may interact with a **TSIC AINode miniPC** (192.168.1.100) via SSH.
+The AINode uses an **AINODE USB Security Dongle** for authentication — the private key
+lives on the Dongle's encrypted Flash and never exists as a plain file on disk.
+
+### Detect Dongle
+
+```bash
+# Windows
+(Get-WmiObject Win32_LogicalDisk | Where-Object {$_.VolumeName -eq "AINODE"}).DeviceID
+
+# macOS
+ls /Volumes/AINODE 2>/dev/null && echo "found" || echo "not_found"
+
+# Linux
+blkid -L AINODE 2>/dev/null
+```
+
+### SSH Commands
+
+```bash
+# With Dongle (preferred)
+DONGLE=/Volumes/AINODE          # macOS example; adjust per OS
+ssh -F "$DONGLE/SSHCFG" -i "$DONGLE/ID_ED255" AINode "<command>"
+
+# Without Dongle (fallback — requires ~/.ssh/config Host AINode entry)
+ssh AINode "<command>"
+```
+
+### Deploy a Service
+
+```bash
+# Package project
+tar -czf /tmp/app.tar.gz --exclude='.git' --exclude='node_modules' --exclude='.env' .
+
+# Upload
+scp -F "$DONGLE/SSHCFG" -i "$DONGLE/ID_ED255" /tmp/app.tar.gz AINode:~/services/app/
+
+# Start with Docker Compose
+ssh -F "$DONGLE/SSHCFG" -i "$DONGLE/ID_ED255" AINode \
+  "cd ~/services/app && tar -xzf app.tar.gz && docker compose up -d --build"
+```
+
+### Common Operations
+
+```bash
+# Check running services
+ssh [...] AINode "docker ps --format 'table {{.Names}}\t{{.Status}}\t{{.Ports}}'"
+
+# Tail logs
+ssh [...] AINode "docker logs -f <service> --tail 50"
+
+# System health
+ssh [...] AINode "df -h / && free -h"
+```
+
+## Security Notes
+
+- The private key (`ID_ED255`) is **only accessible when the Dongle is physically connected**.
+- Never attempt to copy or cache the private key file.
+- If the Dongle is not detected, fall back to `ssh AINode` (requires local SSH config).
+
+## Upcoming: MCP & AI Endpoints
+
+> These features are under development and will be available in a future AINode firmware update.
+
+```
+# MCP Server (coming soon)
+# AINode will expose an MCP server over SSH for AI agent integration
+# Capabilities: service status, deployment, log query, resource monitoring
+
+# REST API (coming soon)
+GET  http://192.168.1.100:8080/api/v1/status
+GET  http://192.168.1.100:8080/api/v1/services
+POST http://192.168.1.100:8080/api/v1/deploy
+GET  http://192.168.1.100:8080/api/v1/logs/{service}
+```

package/templates/cursor/tsic-ainode.mdc

@@ -0,0 +1,58 @@
+---
+description: TSIC AINode miniPC 連線與服務部署規則。當工作涉及「AINode」「部署服務」「Docker 部署」「SSH AINode」「TSIC」時套用此規則。自動偵測 AINODE USB Dongle 並使用 Dongle 私鑰連線。
+globs:
+alwaysApply: false
+---
+
+# TSIC AINode 連線規則
+
+## Dongle 偵測
+
+使用 AINode 前，先偵測 AINODE USB Dongle（FAT12 磁碟，卷標 `AINODE`）：
+
+```bash
+# Windows
+(Get-WmiObject Win32_LogicalDisk | Where-Object {$_.VolumeName -eq "AINODE"}).DeviceID
+
+# macOS / Linux
+ls /Volumes/AINODE 2>/dev/null || blkid -L AINODE 2>/dev/null
+```
+
+## SSH 連線
+
+```bash
+# 有 Dongle（優先）
+ssh -F {DONGLE_PATH}/SSHCFG -i {DONGLE_PATH}/ID_ED255 AINode
+
+# 無 Dongle（fallback）
+ssh AINode   # 需要 ~/.ssh/config 有 AINode alias
+```
+
+**AINode IP**: `192.168.1.100`，需 RJ45 直連。
+
+## 部署流程
+
+1. 偵測 Dongle → 取得 SSH_CMD
+2. 確認連線：`{SSH_CMD} "echo ok"`
+3. 上傳專案（排除 `.git`, `node_modules`, `.env`）
+4. 在 AINode 上執行 `docker compose up -d --build`
+5. 確認服務：`{SSH_CMD} "docker ps"`
+
+## 重要原則
+
+- **私鑰只在 Dongle 上**，不要嘗試從其他路徑載入
+- Dongle 拔除後無法連線，這是設計行為
+- `.env` 檔案需單獨詢問使用者是否上傳
+
+## 【預留】MCP 與 AI 接入口
+
+> 開發中，待 AINode 韌體更新後啟用。
+
+```
+# MCP Server（即將推出）
+mcp connect ainode --transport ssh --key {DONGLE_PATH}/ID_ED255
+
+# AI 優化端點（即將推出）
+http://192.168.1.100:8080/api/v1/status
+http://192.168.1.100:8080/api/v1/services
+```

package/templates/gemini-cli/GEMINI.md

@@ -0,0 +1,79 @@
+# TSIC AINode — Gemini CLI Context
+
+## Overview
+
+This workspace may connect to a **TSIC AINode miniPC** at `192.168.1.100`.
+Authentication uses the **AINODE USB Security Dongle** — a hardware key that stores
+the SSH private key in AES-encrypted Flash. The key is only readable while the Dongle
+is physically attached.
+
+## Dongle Detection
+
+Before any AINode operation, detect the Dongle:
+
+| OS | Command | Expected Output |
+|----|---------|-----------------|
+| Windows | `(Get-WmiObject Win32_LogicalDisk \| Where-Object {$_.VolumeName -eq "AINODE"}).DeviceID` | `E:` (or similar) |
+| macOS | `ls /Volumes/AINODE 2>/dev/null && echo found` | `found` |
+| Linux | `blkid -L AINODE 2>/dev/null` | `/dev/sdX` |
+
+Set `DONGLE_PATH` to the mount point: `E:\` / `/Volumes/AINODE` / `/media/user/AINODE`.
+
+## SSH Connection
+
+```bash
+# Dongle present
+ssh -F "${DONGLE_PATH}/SSHCFG" -i "${DONGLE_PATH}/ID_ED255" AINode
+
+# Dongle absent (fallback)
+ssh AINode   # requires Host AINode in ~/.ssh/config
+```
+
+## Deployment Workflow
+
+1. Detect Dongle → set `DONGLE_PATH`
+2. Test connectivity: `ssh -F ... AINode "echo ok"`
+3. Archive project: `tar -czf /tmp/svc.tar.gz --exclude='.git' --exclude='node_modules' .`
+4. Upload: `scp -F ... /tmp/svc.tar.gz AINode:~/services/<name>/`
+5. Deploy: `ssh -F ... AINode "cd ~/services/<name> && tar -xzf svc.tar.gz && docker compose up -d --build"`
+6. Verify: `ssh -F ... AINode "docker ps | grep <name>"`
+
+## Useful Commands
+
+```bash
+# Service logs
+ssh [...] AINode "docker logs -f <service>"
+
+# Resource usage
+ssh [...] AINode "docker stats --no-stream"
+
+# Disk space
+ssh [...] AINode "df -h /"
+
+# All running services
+ssh [...] AINode "docker compose ls"
+```
+
+## Upcoming Features
+
+> Under development — will be enabled in a future AINode update.
+
+### MCP Integration
+AINode will provide an MCP (Model Context Protocol) server accessible over SSH,
+allowing Gemini CLI and other AI agents to query AINode state directly:
+```
+# MCP server (coming soon)
+# Transport: SSH tunnel
+# Capabilities: service management, log streaming, resource monitoring, deployment
+```
+
+### AI-Optimized REST API
+```
+Base URL: http://192.168.1.100:8080/api/v1/
+
+GET  /status           — system snapshot (CPU, RAM, disk, uptime)
+GET  /services         — list all Docker services with health status
+POST /deploy           — trigger deployment pipeline
+GET  /logs/{service}   — structured, AI-friendly log output
+GET  /metrics          — Prometheus-compatible metrics
+```