Upstream health checks could select a different branch ending in `main`,
index internal skills or lowercase reference documents, treat a valid
pinned path as broken after an upstream move, and close the tracking
issue while unpinned or unknown entries remained. Resolve exact refs and
tracked filenames, compare the installed snapshot, and drive issue
decisions from structured results.
Refresh 26 reviewed pointers, pin DingTalk and Matt Pocock collections,
remove the deleted merge-conflict skill, and add the six new public
children with reviewed translations. Synchronize sidecars, observed
release facts, license evidence and external dependency disclosures.
Identical-tree Agent pins and their versions remain unchanged. The
per-entry review is recorded in
`docs/upstream-health-189-remediation.md`.
Validation: 99 unit tests pass; all nine pinned collections reproduce;
catalog/i18n and translation-freshness checks pass; online health checks
all 41 external entries with zero broken, actionable or unknown results.
Existing catalog warnings decrease from 123 to 105 with no new warning
groups. Python/workflow shell syntax and whitespace checks pass.
Closes#189.
## 中文
启用两支审查团队的中英文完整介绍与隐私说明，保留微信支付上游原始版本 `1.0`，市场版本更新为 `1.5.9`。
解决标书介绍与最新 main 的冲突，保留成员默认收纳说明和用户选择优先的行为。同步条目与 canonical 目录的本地化描述，补齐模型服务配置、可用性、处理授权、条款与费用责任，以及前提不满足时停止相关外部调用的规则。
标书团队 `0.2.3` 引用已合并的 [上游 #7](https://github.com/desirecore-agent/biao-shu-lian-he-shen-cha/pull/7)，合同团队 `0.1.40` 引用已合并的 [上游 #51](https://github.com/desirecore-agent/contract-review-team/pull/51)。source、provenance 与 reviewedRef 对齐；成员版本、头像与 `requiredClientVersion: 10.0.178` 保持一致。
本地化字段和原始版本格式所依赖的 desirecore/desirecore#3183 已包含于正式 [v10.0.177](https://github.com/desirecore/desirecore/releases/tag/v10.0.177)。团队自身的 10.0.178 安装要求继续有效。Schema 保持闭集，并明确记录两个分支的本地扩展来源。
验证：84 个市场单元测试通过；完整目录与 i18n、翻译及生成合集新鲜度检查通过，0 错误、123 个既有告警。新增测试覆盖两种 Schema 分支的字段边界和未知属性拒绝。上游静态检查与 11 项收集器回归通过；18 次真实模型回合包含 15 个前提缺失的停止案例和 3 个全部前提确认的正向案例。模型回合验证请求意图和停止信号，未执行完整 Agent Service、市场安装、真实合同或 DOCX 验收。
此前审查意见已处理；Copilot 账户审查额度用尽，最终改动采用人工复核，并遵循仓库已有的检查门禁。
## English
Enable localized full descriptions and privacy disclosures for both review teams, preserve WeChat Pay's original release identifier `1.0`, and advance the Market to `1.5.9`.
Resolve the tender-description conflict against current main while retaining nested member display and user preference precedence. Align entry and canonical localized descriptions, disclose model-service prerequisites and operator responsibilities, and stop affected external calls when prerequisites fail.
Point Tender `0.2.3` and Contract `0.1.40` to the merged revisions from [upstream #7](https://github.com/desirecore-agent/biao-shu-lian-he-shen-cha/pull/7) and [upstream #51](https://github.com/desirecore-agent/contract-review-team/pull/51), keeping source, provenance and reviewed refs aligned. Preserve members, avatars and the separate `10.0.178` installation requirement. The catalog-format dependency shipped in stable v10.0.177; the closed schema documents its deliberate local i18n extension.
Validation: 84 Market unit tests and full catalog/i18n, translation and collection freshness checks pass; zero errors and 123 existing warnings. Upstream static checks and 11 collector regressions pass. Eighteen live model turns include 15 blocked prerequisite cases and three positive controls with all prerequisites confirmed. These turns check request intent and stopping signals; full Agent Service integration, marketplace installation, real-contract acceptance and DOCX acceptance were not performed.
Earlier review findings are addressed. Copilot's account quota is exhausted, so final changes received manual review under the repository's existing check policy.
## 中文
补齐已有 owner 与已锁定上游内容可证明的许可证、技能类型和收录版本。保留 Anthropic Source Available
和其他附加条件，不把所有内容统一标为 MIT，不提升 listing-only 的安装准入。
README 保留最新的双语结构及以 manifest 为准的数量口径，增加静态目录不存访问量、下载量、评分或 Stars 的边界。
发布兼容性：**本 PR 不包含**两支团队新增的本地化字段，也不包含微信支付 `latestVersion:
1.0`；旧客户端会拒绝这些新字段，另以待发布 PR 保留，等匹配客户端发布后再合并。
验证：47 项目录校验测试、19 项 i18n 测试、5 项合集生成测试通过；完整目录/i18n/翻译新鲜度检查通过，6
个固定来源合集的生成检查通过，2 个浮动来源按既有规则明确跳过。发现并修复了生成器在 Windows 使用反斜杠造成的误报：输出改为 POSIX
路径，比较规则不放宽、不重写合集数据。
## English
Fill only license, type and listed-release facts supported by existing
owners or pinned upstream content. Preserve custom license restrictions
and acquisition eligibility. Keep the current bilingual README and
manifest-derived inventory; do not author usage analytics.
This PR deliberately excludes localized team fields and the two-part
WeChat Pay version that older clients reject. Those changes remain
pending a compatible client release.
Validation passes: 47 catalog-validator tests, 19 i18n tests, five
collection-generator tests, complete catalog and translation checks, and
generated inventory checks for six pinned collections. Two mutable
sources remain explicitly skipped. Fix Windows-generated path separators
without weakening comparison or changing declared children.
## 问题 / Problem
`scripts/catalog/__pycache__/validate_catalog_metadata.cpython-314.pyc`（60KB）在
#118 被误提交进仓库。
它是跑仓库校验脚本时的就地产物，**会随 `defaults/market.zip` 分发给每一个客户端**，而且只对生成它的那个 Python
版本（3.14）有效——换个版本就是纯粹的死重量。
本仓库此前**没有 `.gitignore`**，所以这类产物每次都得靠人眼发现。
A Python bytecode artifact was accidentally committed in #118. It ships
to every client inside `defaults/market.zip` and is only valid for the
exact Python version that produced it. The repository had no
`.gitignore` at all, so nothing prevented it.
## 改动 / Changes
- 删除该 `.pyc`
- 新增 `.gitignore`：`__pycache__/`、`*.py[cod]`、`.DS_Store`
## 与主仓库那道闸门的关系 / Relation to the upstream guard
desirecore/desirecore#2602 已让 `sync-market`
在同步目录不干净时拒绝打包——今天正是它拦下了我本机跑校验产生的 `cpython-310.pyc`：
```
Error: [sync-market] 同步目录存在未提交内容，拒绝打包：
?? scripts/catalog/__pycache__/validate_catalog_metadata.cpython-310.pyc
```
但那道断言只看**未提交内容**，拦不住已经进了仓库的 `cpython-314.pyc`。两处配合才完整：`.gitignore`
防止它被提交，洁净断言防止未提交残留被打包。
## 验证 / Verification
- `validate_catalog_metadata.py --require-complete`：0 error，75 sidecars
- `validate-i18n.py`：0 error
- 新增 `.gitignore` 后重跑校验，新产生的字节码不再出现在 `git status` 中
Co-authored-by: yi-ge <jackyoncode@gmail.com>
