## 中文
内网环境显式使用 Office skill 校验含 `docProps/core.xml` 的文件时，Schema 仍引用远程 Dublin
Core XSD；Windows 默认 GBK 读取中文 UTF-8 XML 也会报错。本修改让 docx/pptx/xlsx 独立携带完整本地
Schema 闭包，并按 XML 编码声明读取文件，保留完整校验。
- 三个 Office skill 分别随包加入 Dublin Core 三份 XSD，复用本地
xml.xsd，补齐来源、原始摘要、许可与适配说明。
- 修正两个 Microsoft XSD 的 ST_String 类型引用，以及 presentation-forge 编辑器脚本路径。
- 市场版本 1.5.11；docx 1.0.4、pptx 1.0.5、xlsx 1.0.4、presentation-forge
0.1.1，同步目录元数据。
- 新增定向回归：遍历所有内置技能的 XSD，拒绝远程依赖并离线编译；模拟 GBK 校验中文 XML，确认非法 Word 节点仍被拒绝。
验证：126 份 XSD 离线编译、2 项回归通过；i18n/catalog 校验均为 0 errors / 105 既有
warnings；translate --check 与 git diff --check 通过。README
两种语言同步。工作树、路径、Git 元数据与发布正文隐私检查通过。
Windows x64 dev 10.0.181 已通过产品 prepare-static 准备随包依赖，并真实调用
Skill(docx)：创建、全校验、解包编辑、重新打包、再全校验均退出 0，两次校验各 18 valid / 0 skipped / 0
errors。该实验禁用 pip/npm 依赖索引，保留模型连接；不等同于正式包或全机断网验收。辅助 Grep
有一次旧参数错误，改正后成功；Python 缓存污染安装摘要另列真机测试跟踪。主仓 market.zip 尚未刷新，源 PR 合并后需通过
sync-market 纳入产品。
## English
Office validation in an intranet deployment still depended on remote
Dublin Core schemas, and reading Chinese UTF-8 XML with the Windows GBK
default could fail. Each Office skill now includes its local schema
dependency closure, and validators read XML as bytes so its declared
encoding is respected without weakening validation.
This also fixes two Microsoft schema type references and the
presentation-forge editor script path. Market version becomes 1.5.11;
skill versions become docx 1.0.4, pptx 1.0.5, xlsx 1.0.4 and
presentation-forge 0.1.1. Vendored schemas include attribution,
licensing, original hashes and adaptation notes.
Validation: 126 schemas compile offline; both targeted regression tests
pass, including GBK input and invalid-node rejection. Catalog/i18n
checks pass with 105 existing warnings each; translation freshness and
whitespace checks pass. Bilingual README and publication privacy checks
are complete.
The actual Windows x64 dev session passed explicit docx loading,
creation, full validation, editing, repacking and revalidation using
product-prepared dependencies. Dependency indexes were disabled while
model connectivity remained available. Packaged/cross-platform testing
and the observed Python-cache installation-digest drift remain
follow-ups. The product bootstrap ZIP will require sync-market after
this source PR merges.
真机测试与剩余验收 / Hardware testing and remaining acceptance:
https://github.com/desirecore/desirecore/issues/4819
---------
Co-authored-by: Johnson <yeslee1126@gmail.com>
通用助手源仓 PR #2 已发布 1.0.1 的透明头像。本 PR 给 system/repository/listing-only
展示条目增加相同的自包含 `assets/avatar.webp` 与
`avatar.image.path`，更新版本、目录日期和双语更新日志；离线或尚未加载本地 Agent 的市场也能取图，保留字符/渐变回落。
验证：i18n、严格 catalog metadata
完整覆盖、翻译新鲜度均通过（零错误、105条既有警告）；头像与源仓字节一致，512×512、真实alpha，现有运行时透明策略通过。完整公开工作树与协作元数据扫描及语义核读通过，零敏感匹配。主仓
market.zip 后续由正式同步脚本生成，不手改ZIP。
General Assistant source PR #2 published its transparent avatar in
1.0.1. This adds the same self-contained image and avatar reference to
the system/repository/listing-only market entry, updates its
version/catalog date and bilingual changelog, and retains the
character/gradient fallback.
Validation: i18n, complete strict catalog metadata and translation
freshness pass with zero errors and 105 existing warnings. The image is
byte-identical to the source avatar, is 512×512 with genuine alpha, and
passes the runtime transparency policy. Full public-tree and
collaboration metadata scanning and semantic review passed. The client
market ZIP will be generated only by the official sync script.
Source: https://github.com/desirecore/agent-general-assistant/pull/2
## 中文
新增通用助手的双语展示条目，主文件明确声明 system/repository，sidecar 使用
listing-only。市场展示内置状态，更新复用 Agent 仓库合并；客户端负责离线安装与默认手动多会话。
独立公开源仓库：[agent-general-assistant](https://github.com/desirecore/agent-general-assistant)，初始内容已通过
PR #1 合入 main。客户端实现：desirecore/desirecore#4814。
验证：i18n 与 catalog metadata 均 0 errors（105
条既有条目警告），翻译新鲜度与公开内容检查通过；客户端已从真实 main 生成种子，真实 bundle verification 通过。
## English
Add the bilingual General Assistant listing with explicit
system/repository policies and listing-only availability. The client
owns offline provisioning and manual multi-session defaults; updates use
the agent repository merge flow.
The public source repository is available on main. Client integration:
desirecore/desirecore#4814. i18n/catalog validation passed with 0 errors
and 105 existing warnings, alongside translation freshness and
publication checks. The real main-based seed and bundle verification
passed.
外部 Chrome 调试端口关闭时，原技能要求用户手动输入命令，无法完成一句话启动并操作的流程。
本更新声明受工具审批的 BrowserExternalLaunch：使用客户端检测到的原生可执行文件与独立 Profile，验真 CDP
后打开网页；成功后高级交互使用预置解释器。Probe
保持只读，拒绝审批不启动，端口冲突和启动失败如实报告。浏览器本身仍需单独安装。旧客户端未提供启动工具时保留只展示的手动备用方式。
主仓实现见 desirecore/desirecore#4811。中英正文、参考材料、版本元数据和翻译摘要同步。校验 0
错误；已有治理警告未改。新公开内容与路径采用通用产品术语，私有测试目录与用户身份不进入提交。
The skill uses an approved native browser-launch tool when advertised by
the client, followed by verified CDP and the bundled interpreter for
advanced interaction. Older builds retain a display-only manual
fallback. Browser installation and site sign-in remain operator
prerequisites. Metadata validation and translation freshness checks
pass.
团队仓库能力补齐后，manage-teams 的原有说明仍要求用户在 UI 配置远程，并缺少安装、升级与发布重试入口。同步中英文动作和流程、修正
set_member_source 自动解析语义，将技能增版为 1.4.0；最低客户端 10.0.178，旧客户端不应加载新增动作。
Updates the bilingual manage-teams contract for all team repository
actions, remote destination configuration, exact release tags and
same-version retries, complete archiving and protected member updates.
Bumps the Skill to 1.4.0 with a 10.0.178 client floor so older tool ABIs
cannot load the new actions.
Validation: i18n/schema/catalog checks passed with 105 pre-existing
governance/provenance warnings; reviewed human translations and
refreshed their source hash. New content uses generic roles and
examples. No customer, tenant, credential or runtime fixture data is
introduced.
Related: desirecore/desirecore#1490. Client implementation:
https://github.com/desirecore/desirecore/pull/4362. Do not infer release
availability from this Skill PR.
The authorized alternative pre-publication check passed: full working
tree including hidden files, changed paths, branch and commit metadata,
and this PR text were scanned for credential shapes and manually
reviewed for customer-neutral content. No private token list was
supplied or recorded.
## 变更 / Changes
mail-operations 1.0.6 → 1.1.0：补充客户端新增的「标记为垃圾邮件 / 不是垃圾邮件」接口。
Adds the client's new mark-as-junk / not-junk endpoints to
mail-operations (1.0.6 → 1.1.0).
- 「单封邮件操作」表新增两行：Gmail、IMAP 用 `POST …/{id}/spam`、`…/not-spam`，Outlook 用
`POST /outlook/message/spam?id=`、`…/not-spam?id=`。
Two rows in the single-message table.
- 补充使用说明：返回 `result: {id, folder}`；Outlook、IMAP 移动后 `id` 会变；IMAP
没有垃圾邮件文件夹时返回 409
`imap_spam_folder_not_found`，不要重试；「不是垃圾邮件」一次一封；移回收件箱不触发规则。
Usage notes: new id after Outlook/IMAP moves, 409 when an IMAP account
has no junk folder, Not junk one at a time, no rule re-trigger.
- `market.required_client_version` 与 sidecar 的
`compatibility.requiredClientVersion` 同步改为
`10.0.178`。内置技能同步会按它拦截，旧客户端继续使用 1.0.6，不会拿到调用后返回 404 的接口说明。
Client gate raised to 10.0.178 so older clients keep 1.0.6.
- 中文是源语言；英文译文（`translated_by: human`）已人工同步，`source_hash` 用
`translate.py` 的 `compute_source_hash` 重新计算。
zh-CN source and human en-US translation updated together; `source_hash`
recomputed with the repository's own function.
## 合并时机 / Merge timing
客户端实现在 desirecore/desirecore#4205，它依赖 desirecore/desirecore#4195。**请在
#4205 合入、确认随 10.0.178 发布之后再合并本 PR。** 如果实际发布的版本号不是 10.0.178，先把两处
`required_client_version` 改成实际版本再合并。合并后，客户端仓库需要运行 `npm run sync-market`
刷新内置的 `market.zip`。
The client side is desirecore/desirecore#4205 (depends on #4195). Merge
this after #4205 lands and ships in 10.0.178; adjust both version gates
if the release number differs. Afterwards regenerate the client's
bundled `market.zip` with `npm run sync-market`.
## 校验 / Checks
- `validate-i18n.py`：0 error，123 warning（与改动前相同；mail-operations 的两条
license / review evidence 警告原来就有）。
- `validate_catalog_metadata.py --require-complete`：0 error。
- `translate.py --check skills/mail-operations`：en-US 为
human-locked，与源一致。
-
公开信息检查：改动内容只有通用的接口说明，不含任何租户、客户或合作方信息。**未用私有敏感词清单做全量扫描**：本次没有拿到这份清单，合并前请维护者补跑一次。
Public-information review: generic API text only. The private-token scan
was not run because the token list was not available; please run it
before merging.
Upstream health checks could select a different branch ending in `main`,
index internal skills or lowercase reference documents, treat a valid
pinned path as broken after an upstream move, and close the tracking
issue while unpinned or unknown entries remained. Resolve exact refs and
tracked filenames, compare the installed snapshot, and drive issue
decisions from structured results.
Refresh 26 reviewed pointers, pin DingTalk and Matt Pocock collections,
remove the deleted merge-conflict skill, and add the six new public
children with reviewed translations. Synchronize sidecars, observed
release facts, license evidence and external dependency disclosures.
Identical-tree Agent pins and their versions remain unchanged. The
per-entry review is recorded in
`docs/upstream-health-189-remediation.md`.
Validation: 99 unit tests pass; all nine pinned collections reproduce;
catalog/i18n and translation-freshness checks pass; online health checks
all 41 external entries with zero broken, actionable or unknown results.
Existing catalog warnings decrease from 123 to 105 with no new warning
groups. Python/workflow shell syntax and whitespace checks pass.
Closes#189.
## 变更说明 / Description
加载 workforce-optimization 后，隐藏工具 OptimizationEngineCatalog 和
OptimizationEvidenceLedger 仍不可发现，因为 provides.tools 遗漏了它们。本 PR
补齐共用声明，将技能版本提升至 2.9.1，并同步目录 sidecar 的版本与更新日期。中英文正文均不变，共用 frontmatter
对两种语言同时生效。
Loading workforce-optimization leaves OptimizationEngineCatalog and
OptimizationEvidenceLedger unavailable because its provides.tools
declaration omits these hidden tools. Add both declarations, bump the
skill to 2.9.1, and keep the catalog sidecar aligned. Both localized
bodies share this metadata and remain unchanged. Existing external
solver prerequisites and licensing disclosures remain applicable.
## 验证 / Validation
- 隔离 Electron dev：补声明前 EngineCatalog 为
notFound；补声明并刷新、加载技能后，两工具均可发现，EngineCatalog 实际执行成功。EvidenceLedger
仅验证发现，执行由客户端夹具覆盖。
- Isolated Electron dev: EngineCatalog changed from notFound to
discoverable and executable after the declaration update; EvidenceLedger
discovery was verified without writing ledger data.
- Skill i18n validation and strict complete catalog validation: 0
errors, 123 existing metadata warnings.
- Translation freshness check for workforce-optimization: current; both
bodies unchanged.
- git diff --check passed. Changes and collaboration text contain only
reusable tool identifiers and catalog metadata; no private runtime
evidence is included.
此 PR 仅更新 Market 源数据；客户端 bootstrap ZIP 未手工修改。/ This updates Market source
data only; client bootstrap archives are not hand-edited.
Co-authored-by: Yige <a@wyr.me>
## 中文
启用两支审查团队的中英文完整介绍与隐私说明，保留微信支付上游原始版本 `1.0`，市场版本更新为 `1.5.9`。
解决标书介绍与最新 main 的冲突，保留成员默认收纳说明和用户选择优先的行为。同步条目与 canonical 目录的本地化描述，补齐模型服务配置、可用性、处理授权、条款与费用责任，以及前提不满足时停止相关外部调用的规则。
标书团队 `0.2.3` 引用已合并的 [上游 #7](https://github.com/desirecore-agent/biao-shu-lian-he-shen-cha/pull/7)，合同团队 `0.1.40` 引用已合并的 [上游 #51](https://github.com/desirecore-agent/contract-review-team/pull/51)。source、provenance 与 reviewedRef 对齐；成员版本、头像与 `requiredClientVersion: 10.0.178` 保持一致。
本地化字段和原始版本格式所依赖的 desirecore/desirecore#3183 已包含于正式 [v10.0.177](https://github.com/desirecore/desirecore/releases/tag/v10.0.177)。团队自身的 10.0.178 安装要求继续有效。Schema 保持闭集，并明确记录两个分支的本地扩展来源。
验证：84 个市场单元测试通过；完整目录与 i18n、翻译及生成合集新鲜度检查通过，0 错误、123 个既有告警。新增测试覆盖两种 Schema 分支的字段边界和未知属性拒绝。上游静态检查与 11 项收集器回归通过；18 次真实模型回合包含 15 个前提缺失的停止案例和 3 个全部前提确认的正向案例。模型回合验证请求意图和停止信号，未执行完整 Agent Service、市场安装、真实合同或 DOCX 验收。
此前审查意见已处理；Copilot 账户审查额度用尽，最终改动采用人工复核，并遵循仓库已有的检查门禁。
## English
Enable localized full descriptions and privacy disclosures for both review teams, preserve WeChat Pay's original release identifier `1.0`, and advance the Market to `1.5.9`.
Resolve the tender-description conflict against current main while retaining nested member display and user preference precedence. Align entry and canonical localized descriptions, disclose model-service prerequisites and operator responsibilities, and stop affected external calls when prerequisites fail.
Point Tender `0.2.3` and Contract `0.1.40` to the merged revisions from [upstream #7](https://github.com/desirecore-agent/biao-shu-lian-he-shen-cha/pull/7) and [upstream #51](https://github.com/desirecore-agent/contract-review-team/pull/51), keeping source, provenance and reviewed refs aligned. Preserve members, avatars and the separate `10.0.178` installation requirement. The catalog-format dependency shipped in stable v10.0.177; the closed schema documents its deliberate local i18n extension.
Validation: 84 Market unit tests and full catalog/i18n, translation and collection freshness checks pass; zero errors and 123 existing warnings. Upstream static checks and 11 collector regressions pass. Eighteen live model turns include 15 blocked prerequisite cases and three positive controls with all prerequisites confirmed. These turns check request intent and stopping signals; full Agent Service integration, marketplace installation, real-contract acceptance and DOCX acceptance were not performed.
Earlier review findings are addressed. Copilot's account quota is exhausted, so final changes received manual review under the repository's existing check policy.
desirecore/desirecore#3899 把 BrowserAct 的 21 个开发者工具类动作拆到独立工具 BrowserDevtools，它不随本技能注入。技能在工具表后说明：需要时先 DiscoverTools(query="select:BrowserDevtools") 加载，参数与 BrowserAct 相同；查不到说明客户端早于拆分，同样的 action 与参数在 BrowserAct 上调用。写法不依赖客户端版本，所以不设 required_client_version，也不把 BrowserDevtools 加进 provides.tools。
references/browser-tools.md 新增 BrowserDevtools 一节，cdp.raw 的已知边界、错误处理与调用链路同步更新。技能版本 3.4.5，sidecar 的 release.version 与 catalogUpdatedAt 同步，i18n source_hash 重算。
English: Point web-access's developer-tool actions at BrowserDevtools, the
tool split out of BrowserAct in desirecore/desirecore#3899. The skill loads
it on demand through DiscoverTools and falls back to the same action on
BrowserAct for clients that predate the split, so no client version floor
is needed. Bump to 3.4.5 with synced sidecar metadata and a recomputed i18n
source hash.
验证 / Validation: i18n validation and catalog metadata checks report zero
errors (existing repository warnings remain); translation freshness check
passes.
更新标书联合审查与合同审查团队的已审核发布指针，分别对应 0.2.2 和 0.1.39，并补充成员默认收纳、用户显示偏好优先的说明。
两条 entry 与目录元数据统一要求 DesireCore 10.0.178 或更新且支持 `team.json.memberDisplay`
的客户端。目录可提前发布；10.0.177（包括仍标为该版本的开发构建）会在市场安装前提示升级。该版本下限不表示兼容客户端已经发布。
同时将 Market 版本提升到 1.5.8，更新目录日期及两个 Agent
管理技能的目录更新时间。成员名册、成员锁版本和头像映射保持与上游发布一致。
验证：完整目录和 i18n 校验零错误、无新增警告；翻译新鲜度检查通过；最新团队配置通过当前 schema 校验，旧版 schema
拒绝该字段；安装版本门控确认拦截 10.0.177。
English: Update the reviewed Tender Review Team and Contract Review Team
pointers to 0.2.2 and 0.1.39. Document the nested member display default
and explicit user preferences. Set the client installation floor to
10.0.178 with memberDisplay support so older clients receive an upgrade
notice before importing incompatible manifests. This floor does not
claim that a compatible release is already available. Bump the catalog
to 1.5.8 and correct catalog timestamps. Catalog, localization,
source-manifest and version-gate checks pass with no new warnings.
## Summary
Publish transparent portraits for both marketplace teams and all 11
roster members. Team cards use the supervisor portrait; a separate
`member-avatars.v1.json` sidecar supplies member images without changing
the strict `entry.json` member contract accepted by older clients. The
two catalog pointers now reference the merged team releases and their
updated member locks.
为市场中的两个团队和全部 11 位成员发布透明人像。团队卡片复用组长形象，成员图片由独立 sidecar
提供，旧客户端仍可读取原有团队条目。团队指针更新至已合并的团队版本与成员锁文件。
## Validation
- Catalog metadata validation: 0 errors (123 existing warnings)
- i18n validation: 0 errors (123 existing warnings)
- Translation freshness: passed
- Image assets: all 11 member portraits and 2 team portraits are
transparent WebP files
The catalog previously showed opaque icons or text fallbacks for the
seven digital employees, and source-pointer installs could still get
different avatars. This updates every catalog card to a 512×512
transparent portrait, bumps the listed releases, and pins the six source
repositories to commits that include the matching AgentFS avatar.
Validation: `validate_catalog_metadata.py --require-complete` (0
errors), `validate-i18n.py` (0 errors), and `translate.py --check`. All
seven WebP files have an alpha channel with fully transparent pixels and
are below 50 KB each.
## Summary / 摘要
- Add a pinned Market pointer for the upstream `browser-use/video-use`
skill, with English and Chinese discovery text.
- Add catalog metadata for its MIT license, source provenance,
Python/ffmpeg prerequisites, and ElevenLabs Scribe API key and
usage-cost requirement.
- Keep the listing discovery-only until installation and governance
review are completed.
- Add the entry to Market statistics. No upstream skill code is
vendored.
- 新增固定到上游提交的 `browser-use/video-use` 市场入口及中英文介绍。
- 补充 MIT 许可、来源、Python/ffmpeg 前置条件，以及 ElevenLabs Scribe 密钥和可能产生的 API 费用。
- 完成安装与治理审查前，条目标记为仅供发现。
- 更新 Market 条目统计，不复制上游技能代码。
## Validation / 校验
- `uv run scripts/i18n/validate-i18n.py skills/video-use` — passed with
0 errors (existing catalog warnings remain).
- `uv run scripts/catalog/validate_catalog_metadata.py
--require-complete` — passed with 0 errors.
- `uv run scripts/i18n/translate.py --check` — passed.
- `git diff --check` — passed.
## 中文
补齐已有 owner 与已锁定上游内容可证明的许可证、技能类型和收录版本。保留 Anthropic Source Available
和其他附加条件，不把所有内容统一标为 MIT，不提升 listing-only 的安装准入。
README 保留最新的双语结构及以 manifest 为准的数量口径，增加静态目录不存访问量、下载量、评分或 Stars 的边界。
发布兼容性：**本 PR 不包含**两支团队新增的本地化字段，也不包含微信支付 `latestVersion:
1.0`；旧客户端会拒绝这些新字段，另以待发布 PR 保留，等匹配客户端发布后再合并。
验证：47 项目录校验测试、19 项 i18n 测试、5 项合集生成测试通过；完整目录/i18n/翻译新鲜度检查通过，6
个固定来源合集的生成检查通过，2 个浮动来源按既有规则明确跳过。发现并修复了生成器在 Windows 使用反斜杠造成的误报：输出改为 POSIX
路径，比较规则不放宽、不重写合集数据。
## English
Fill only license, type and listed-release facts supported by existing
owners or pinned upstream content. Preserve custom license restrictions
and acquisition eligibility. Keep the current bilingual README and
manifest-derived inventory; do not author usage analytics.
This PR deliberately excludes localized team fields and the two-part
WeChat Pay version that older clients reject. Those changes remain
pending a compatible client release.
Validation passes: 47 catalog-validator tests, 19 i18n tests, five
collection-generator tests, complete catalog and translation checks, and
generated inventory checks for six pinned collections. Two mutable
sources remain explicitly skipped. Fix Windows-generated path separators
without weakening comparison or changing declared children.
Split the market documentation into synchronized English and Simplified Chinese READMEs. Expand getting started, catalog contracts, localization, contribution and validation guidance, security boundaries, and licensing. Replace stale inventory snapshots with authoritative references.
Update the published team pointer to the reviewed team revision that
locks Lead and Evidence 0.1.1. Preview wording remains until
clean-install end-to-end acceptance is complete.
---------
Co-authored-by: yige <yige@yigedeMacBook-Neo.local>
## 变更 / Changes
新增 Control 1.4.0 中英文市场安装指南及 README 应用入口，指向真正的应用数据源
desirecore/registry；同步 registering-services / using-services 到 1.0.4，明确
native-app 的对外 MCP 不可注册为内部服务。
Add bilingual marketplace documentation and update both service skills
without duplicating an App as an MCP service. Fixed native application
listing and lifecycle live in Registry; open-source implementation lives
in desirecore-agent/desirecore-cdp-mcp.
## 兼容 / Compatibility
Requires native-app-aware desktop (catalog minimum 10.0.169) and
app-install-manager >=1.4.0. Catalog publication does not upgrade the
desktop or Agent.
## 验证 / Verification
- i18n/catalog validation: 0 errors, 129 existing governance/freshness
warnings retained.
- scoped translation hash check: both skills up to date; no model API
invoked by checks.
- git diff --check passed; unrelated market entries preserved.
## Why\nPublish the intake-gate scope fix through the official market
pointer.\n\n## Changes\n- point team entry and catalog metadata to team
release 0.1.36\n- update contract-intake member to 1.0.6\n- preserve
tracked DOCX, parallel risk/jurisdiction, and human-review
disclosures\n\n## Validation\n- validate_catalog_metadata.py
--require-complete (0 errors, pre-existing warnings only)\n- python -m
unittest scripts.catalog.test_validate_catalog_metadata (47 passed)\n-
git diff --check
## Why
The published contract review team must reconcile redline delivery state
after `ExportRedlineDocument` succeeds.
## What changed
- publish team 0.1.34 at upstream ref 92cb41f
- update Lead pointer to 1.0.20 at cf11ca6
- keep source-pointer-only distribution and existing governance metadata
## Validation
- uv run scripts/i18n/validate-i18n.py
- uv run scripts/catalog/test_validate_catalog_metadata.py (47 passed)
- uv run scripts/catalog/validate_catalog_metadata.py (0 errors;
existing warnings)
- uv run scripts/i18n/translate.py --check
## Why
Publish the lead tool-permission fix so newly installed contract-review
teams can pass `ExportRedlineDocument` through the orchestrator to the
independent reviewer.
## What changed
- Point the official team entry at team commit
`948f61c6c2d9ea101023e66c6a8261288d2cfab7`.
- Publish version 0.1.33 and lead member version 1.0.19.
## Validation
- Team source `npm run check:gates` passed before this market update.
- Entry diff reviewed and source ref is a 40-character commit SHA.
## Why
Publish the corrected contract review team release after the newcomer
run found stale coverage matrix state.
## Change
- Team 0.1.32 points to team merge
`821f999b087c9a740b3b209963f5f123a3cc694d`.
- Lead member 1.0.18 is listed in the catalog.
## Validation
- `git diff --check`
This release publishes contract-review-team 0.1.28 from immutable team
commit f088da9eb61d084470e8ede578e73c8cd65b57cb.
Changes:
- Lock Lead 1.0.16 with bounded O0→O4 orchestration and receipt/matrix
synchronization.
- Lock jurisdiction-auditor 1.3.0 and risk-scanner 1.1.0 with one-turn
bounded evidence loops.
- Preserve existing intake, clause-extractor 1.1.0, and reporter
members.
- Update both entry and catalog metadata to the same full team commit
SHA.
Validation: contract-review-team npm run check:gates passes; market
validate and translate checks pass on this PR.
## Why
The contract review team now uses the merged `clause-extractor` 1.1.0
bounded checkpoint workflow. The official market entry still pointed at
team release 0.1.26 and clause-extractor 1.0.6.
## Change
- Publish team version 0.1.27.
- Point the source ref to merged team commit
`cb25d73a0dfbfc319df6eac2d254b3dbcc790e6e`.
- Update the member projection to clause-extractor 1.1.0.
## 变更说明 / What this changes
新增官方 Agent 条目「MiMo 模型余量检测」，以不可变 source pointer 形态收录，内容仓库为
`desirecore-agent/mimo-model-quota-monitor`。
- `agents/mimo-model-quota-monitor/entry.json` 指向已发布提交
`911c0a226346a8157f07d5218207f16e32ea82e0`。
-
`agents/mimo-model-quota-monitor/catalog-metadata.v1.json`：provenance、MIT
许可证证据、合规审查（`reviewedRef` 与内容 ref 一致），`availability: installable`。
- `requiredClientVersion: 10.0.156`：依赖该版本起的调度完成判据、调度权限上限与内嵌浏览器操作记录修复。
- `manifest.json`：Agent 计数与更新日期。
Agent 做什么：按计划（默认每小时）读取小米 MiMo 开放平台 Token Plan 余量，结构化写入 `latest.json`
与每轮一份历史文件，在余量偏低、消耗过快、即将重置或登录失效时提醒。只读、不执行命令；遇到验证码或短信验证时停下请人处理；登录凭据只经
DesireCore 加密凭据存储的占位符注入。
Adds the official "MiMo model quota monitor" Agent as an immutable
source pointer to `desirecore-agent/mimo-model-quota-monitor` at commit
`911c0a226346a8157f07d5218207f16e32ea82e0`, with a bilingual catalog
sidecar (provenance, MIT license evidence, compliance review with
`reviewedRef` equal to the content ref, `availability: installable`) and
`requiredClientVersion: 10.0.156`. The Agent reads the Xiaomi MiMo Token
Plan quota on a schedule, writes structured results, and alerts on low
quota, fast burn, upcoming reset or an expired login. It is read-only,
runs no shell commands, stops for CAPTCHA or SMS verification, and
receives credentials only through DesireCore's encrypted credential
placeholders.
## 校验 / Validation
- `uv run --quiet scripts/catalog/validate_catalog_metadata.py
--require-complete`：0 error（既有条目的 warning 未变）。
- 条目目录内所有 40
位十六进制值只有一个，即上面的提交号（`source.ref`、`provenance.content.ref`、`governance.compliance.reviewedRef`
三处一致）。
- 内容仓库：`agent.json` 通过 agentConfigSchema；`SKILL.md` frontmatter 通过技能
Schema；`HEARTBEAT.md` 被判为实质为空（心跳不会白调模型）；结果与账号 Schema 用样例和反例校验，共 19 项通过。
- 内容仓库共两个提交（首版 + SOP 失败分支表更新），不含账号标识、手机号或凭据。Git 提交元数据中的维护者邮箱是 DesireCore
组织所有公开提交一致使用的公开身份邮箱。
`validate_catalog_metadata.py --require-complete` reports 0 errors; the
entry directory contains exactly one 40-hex value, the pinned commit, in
all three places; the content repository passes agent config, skill
frontmatter, heartbeat and result/account schema checks (19 checks) and
has two commits (initial release plus the SOP failure-branch update)
without account identifiers or credentials.
## 真机验证 / Real-device verification
在 DesireCore dev 构建（10.0.156 之后的 dev，含
#2863/#2865/#2869）上安装本提交的内容，智能路由旗舰档，两个账号各一个每小时定时巡检，连续观察四轮：
| 轮次 | 结果 | 说明 |
|---|---|---|
| 账号 2 · 20:30 | ok | 经接口取到数据，`latest.json` 与本轮 history 文件通过
`result.schema.json`，history 先写、关闭会话、`latest.json` 最后写 |
| 账号 1 · 21:00 | blocked（`platform_unavailable`） |
本机网络间歇断连期间内置浏览器开不了会话；如实落盘，未新建浏览器环境、未反复填表，首轮不提醒 |
| 账号 2 · 21:30 | 失败 | 同一次断网里浏览器开不了会话，且 AI 审批上游持续 502，写 `latest.json`
被拒；平台按完成判据续跑一次后记为失败（已写入使用说明「已知限制」） |
| 账号 1 · 22:00 | blocked，已提醒 | 连续第二轮 `platform_unavailable`，按告警规则
`notify=true`、告警项 `blocked:platform_unavailable` |
四轮都没有执行任何命令，没有非预期工具调用，没有写出 `mimo-quota/` 与平台 Plan 目录以外的文件；每轮的结果文件都通过
Schema 校验。浏览器宿主把导航失败统一报成 `BROWSER_HOST_EXECUTION_FAILED` 的问题已在主仓 #2871
修复（10.0.157 起提供 `BROWSER_NAVIGATION_*` 闭集错误码），本提交的 SOP
失败分支表已随之更新：网络类失败按码重试一次、页面跳转顶替（ABORTED）先看停留页再分流、越出授权范围（ORIGIN_NOT_GRANTED
/ SCHEME_DENIED）不新建 space。旧客户端上这些码不会出现，条目行为退回原有兜底，不受影响。
Installed this commit's content on a DesireCore dev build (dev after
10.0.156, including #2863/#2865/#2869) with smart routing at the
flagship tier and one hourly schedule per account, and observed four
runs. Account 2 at 20:30 read the data through the API; `latest.json`
and the per-run history file passed `result.schema.json`, with history
written first, the session closed, and `latest.json` written last.
During a local network outage, account 1 at 21:00 could not open a
browser session and recorded `blocked` / `platform_unavailable` without
creating environments or retrying the login, and without notifying on
the first round; account 2 at 21:30 hit the same outage plus sustained
502s from the AI approval upstream, so its `latest.json` write was
denied and the run was recorded as failed after one platform
continuation (now listed under known limitations); account 1 at 22:00
was the second consecutive `platform_unavailable` and notified with
`blocked:platform_unavailable`. No run executed a command, called an
unexpected tool, or wrote outside `mimo-quota/` and the platform Plan
directory, and every result file passed schema validation. The browser
host reporting all navigation failures as
`BROWSER_HOST_EXECUTION_FAILED` was fixed in the main repository in
#2871 (closed-set `BROWSER_NAVIGATION_*` codes from 10.0.157), and the
SOP in this commit was updated accordingly: network-class failures retry
once by code, a navigation replaced by a page jump (ABORTED) inspects
the landed page before branching, and out-of-grant targets
(ORIGIN_NOT_GRANTED / SCHEME_DENIED) never create a new space. On older
clients these codes simply do not appear and the entry falls back to the
previous behavior.
Pin the reviewed Entry patch prompted by a real Qwen consultation:
distinguish full tender documents from a notice/invitation and describe
useful outcomes without defect-free assurance. Catalog validation
passed; team member pins are unchanged.
Co-authored-by: yige <yige@yigedeMacBook-Neo.local>
