fix: resolve all 19 Copilot review comments

- fix: 'bate' → 'beta' typo in skill.json, plugin.json, marketplace.json
- fix: skill.json version desc v10.4.6 → v10.5.0-beta.4
- fix: template.ts missing readFile import, platform path hardcoding
- fix: init.ts --ai all now routes to generateAllPlatformFiles
- fix: generate.ts command injection (execSync→spawnSync+argv)
- fix: extract.ts path injection (exec→execFile)
- fix: _sync_all.py filecmp shallow=False + --verify detects NEEDS SYNC
- fix: release.yml Windows paths on Linux runner
- fix: sync CLI assets after source changes

Co-Authored-By: Claude <noreply@anthropic.com

Author: JusterZhu

.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": ".NET auto-update skill suite — 7 skills for GeneralUpdate: scaffolding, UI, strategy, advanced, troubleshooting (50+ issues), migration, and security audit",
-    "version": "0.0.1-bate.1"
+    "version": "0.0.1-beta.1"
   },
   "plugins": [
     {
       "name": "generalupdate-skill",
       "source": "./",
-      "description": "Complete GeneralUpdate (.NET auto-update) integration skill suite. Generates dual-project scaffolding, full-state update UI (6 frameworks), 6 update strategies decision tree (Client-Server/OSS/Silent/Differential/CVP/Push), advanced extension points (Bowl crash daemon, IPC replacement, AOT), BM25-powered troubleshooting search (50+ known issues), v9.x→v10 migration guide, and 14-point security audit matrix. All templates target NuGet v10.4.6 stable API.",
-      "version": "0.0.1-bate.1",
+      "description": "Complete GeneralUpdate (.NET auto-update) integration skill suite. Generates dual-project scaffolding, full-state update UI (6 frameworks), 6 update strategies decision tree (Client-Server/OSS/Silent/Differential/CVP/Push), advanced extension points (Bowl crash daemon, IPC replacement, AOT), BM25-powered troubleshooting search (50+ known issues), v9.x→v10 migration guide, and 14-point security audit matrix. All templates target NuGet v10.5.0-beta.4.",
+      "version": "0.0.1-beta.1",
       "author": {
         "name": "JusterZhu"
       },

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "generalupdate-skill",
-  "description": "Complete .NET auto-update skill suite for GeneralUpdate. 7 skills covering: Bootstrap scaffolding, update UI (6 frameworks), 6 strategies (Client-Server/OSS/Silent/Differential/CVP/Push), advanced extension points (Bowl, IPC, AOT), 50+ known issues diagnosis with BM25 search engine, version migration, and security audit. All templates target NuGet v10.4.6 stable.",
-  "version": "0.0.1-bate.1",
+  "description": "Complete .NET auto-update skill suite for GeneralUpdate. 7 skills covering: Bootstrap scaffolding, update UI (6 frameworks), 6 strategies (Client-Server/OSS/Silent/Differential/CVP/Push), advanced extension points (Bowl, IPC, AOT), 50+ known issues diagnosis with BM25 search engine, version migration, and security audit. All templates target NuGet v10.5.0-beta.4.",
+  "version": "0.0.1-beta.1",
   "author": {
     "name": "JusterZhu"
   },

.claude/scripts/_sync_all.py

@@ -39,8 +39,13 @@ def sync_file(src: Path, dst: Path, apply: bool, dry_run: bool) -> str:
     if not src.exists():
         return f"⚠️  SOURCE MISSING: {src.relative_to(REPO_ROOT)}"
 
-    if dst.exists() and filecmp.cmp(src, dst) if src.is_file() else _dirs_equal(src, dst):
-        return f"✓  UP TO DATE: {src.relative_to(REPO_ROOT)}"
+    if dst.exists():
+        if src.is_file():
+            up_to_date = filecmp.cmp(src, dst, shallow=False)
+        else:
+            up_to_date = _dirs_equal(src, dst)
+        if up_to_date:
+            return f"✓  UP TO DATE: {src.relative_to(REPO_ROOT)}"
 
     if dry_run or not apply:
         return f"→  NEEDS SYNC: {src.relative_to(REPO_ROOT)}  →  {dst.relative_to(REPO_ROOT)}"
@@ -105,11 +110,11 @@ def main():
     for desc, status in statuses:
         print(f"  {status}")
 
-    if args.verify and not all_ok:
-        print("\n❌ Verify FAILED: some sources are missing")
-        sys.exit(1)
-
     if args.verify:
+        needs_sync = any(status.startswith("→") for _, status in statuses)
+        if not all_ok or needs_sync:
+            print("\n❌ Verify FAILED: sources are out of sync")
+            sys.exit(1)
         print("\n✅ Verify PASSED: all sources are in sync")
         sys.exit(0)
 

.github/workflows/release.yml

@@ -28,13 +28,8 @@ jobs:
         with:
           python-version: '3.12'
 
-      - name: Setup .NET
-        uses: actions/setup-dotnet@v5
-        with:
-          dotnet-version: '10.0.x'
-
       # ======================
-      # Validate everything first
+      # Validate before release
       # ======================
 
       - name: Validate — BM25 search
@@ -50,17 +45,6 @@ jobs:
             --project-name ReleaseTest --version 0.1.0.0 -o /tmp/release-verify
           grep -q "ReleaseTest.exe" /tmp/release-verify/Client/Integration.cs && echo "✅ Generator OK"
 
-      - name: Validate — Scaffold builds
-        run: |
-          $scaffoldDir = ".claude/skills/generalupdate-init/project-scaffold"
-          $testDir = "C:\tmp\release-verify-scaffold"
-          New-Item -ItemType Directory -Path $testDir -Force | Out-Null
-          Copy-Item "$scaffoldDir\*" $testDir
-          dotnet build "$testDir\ClientApp.csproj" 2>&1
-          if ($LASTEXITCODE -ne 0) { throw "Scaffold build failed" }
-          Write-Host "✅ Scaffold builds"
-        shell: pwsh
-
       # ======================
       # Build CLI
       # ======================

cli/assets/skills/generalupdate-advanced/SKILL.md

@@ -3,7 +3,7 @@ name: generalupdate-advanced
 description: |
   Reference guide for GeneralUpdate internal architecture — Pipeline, middleware,
   Strategy, Differential engine, Bowl crash monitor, FileTree, blacklist, and AOT.
-  Covers what is and isn't available in v10.4.6 stable release vs dev branch.
+  Covers all extension points available in v10.5.0-beta.4 including Pipeline, Hooks, Bowl, AOT, and DiffPipeline.
   Triggers on: "extension points", "custom hooks", "Bowl", "crash dump", "IPC",
   "named pipe", "shared memory", "custom strategy", "download pipeline",
   "SSL policy", "auth provider", "custom download", "extension management",
@@ -24,15 +24,17 @@ allowed-tools: "Read, Write, Edit, Glob"
 
 涵盖扩展点架构、Pipeline 管道、差分引擎、Bowl 崩溃守护、事件系统、文件系统工具等。
 
-> ⚠️ **API 版本说明**：本指南基于 **NuGet v10.4.6 稳定版**。
-> 以下功能在稳定版中**不存在**（但在开发分支 v10.5.0-beta.2 中已有）：
-> - `IUpdateHooks` 生命周期钩子
-> - `IProcessInfoProvider` IPC 替换接口
-> - `SilentPollOrchestrator` 静默轮询器
-> - `Option` 可编程配置系统（v10.4.6 仅使用 `Configinfo` 属性）
-> - `ISslValidationPolicy` SSL 策略接口
+> ⚠️ **API 版本说明**：本指南基于 **NuGet v10.5.0-beta.4**。
+> 以下功能在 v10.5.0-beta.4 中全部**可用**：
+> - ✅ `IUpdateHooks` 生命周期钩子（`Hooks<T>()`）
+> - ✅ `IStrategy` 自定义策略注入（`Strategy<T>()`）
+> - ✅ `SilentPollOrchestrator` 静默轮询器（`Option.Silent`）
+> - ✅ `Option` 可编程配置系统
+> - ✅ `ISslValidationPolicy` SSL 策略接口
+> - ✅ `IHttpAuthProvider` HTTP 认证提供者
+> - ✅ `DiffPipelineBuilder` 差分管道配置
 >
-> 各功能的可用性在文中已标注。
+> 各功能的命名空间和用法在文中已标注。
 
 ---
 
@@ -63,15 +65,14 @@ allowed-tools: "Read, Write, Edit, Glob"
 
 ---
 
-## 1. Pipeline 管道系统（v10.4.6 可用）
+## 1. Pipeline 管道系统（v10.5.0-beta.4 可用）
 
 GeneralUpdate 使用 Pipeline 管道模式处理更新包的校验、解压、补丁应用。
 
 ### PipelineBuilder API
 
 ```csharp
-using GeneralUpdate.Common.Internal.Pipeline;
-using GeneralUpdate.Common.Internal.Strategy;
+using GeneralUpdate.Core.Pipeline;
 
 // 创建管道上下文
 var context = new PipelineContext();
@@ -86,7 +87,7 @@ context.Add("PatchEnabled", true);
 await new PipelineBuilder(context)
     .UseMiddleware<HashMiddleware>()      // 哈希校验
     .UseMiddleware<CompressMiddleware>()  // 解压
-    .UseMiddleware<PatchMiddleware>()     // 差分补丁（需安装 Differential 包）
+    .UseMiddleware<PatchMiddleware>()     // 差分补丁
     .Build();
 ```
 
@@ -99,35 +100,31 @@ await new PipelineBuilder(context)
 
 ---
 
-## 2. 策略系统（v10.4.6 可用）
+## 2. 策略系统（v10.5.0-beta.4 可用）
 
-GeneralUpdate 内置三种平台策略，通过 `AbstractStrategy` 模板方法模式实现：
+GeneralUpdate 内置三种平台策略，通过 `IStrategy` 接口实现：
 
 | 策略 | 类名 | 平台 |
 |------|------|------|
 | Windows | `WindowsStrategy` | Windows |
 | Linux | `LinuxStrategy` | Linux |
 | OSS | `OSSStrategy` | 跨平台（对象存储） |
 
-> ⚠️ 稳定版**不支持**通过 `bootstrap.Strategy<T>()` 注入自定义策略。
-> 自定义策略需要继承 `AbstractStrategy` 并直接调用。
+> ✅ 支持通过 `bootstrap.Strategy&lt;T&gt;()` 注入自定义策略。
+> 自定义策略需要实现 `IStrategy` 接口。
 
 ---
 
-## 3. Bowl 崩溃守护（v10.4.6 存在但功能有限）
+## 3. Bowl 崩溃守护（v10.5.0-beta.4）
 
 Bowl 是一个崩溃监控组件，通过 `MonitorParameter` 配置。
 
-> ⚠️ **注意**：v10.4.6 的 Bowl 仅提供基础类型定义，`Bowl` 类没有公开的 `LaunchAsync` 方法。
-> 完整功能在开发分支（v10.5.0-beta.2）中。
-
-### MonitorParameter 配置
+### BowlContext 配置
 
 ```csharp
 using GeneralUpdate.Bowl;
-using GeneralUpdate.Bowl.Strategys;
 
-var param = new MonitorParameter
+var context = new BowlContext
 {
     ProcessNameOrId = "MyApp.exe",
     DumpFileName = "v1.0.0.0_fail.dmp",
@@ -136,22 +133,40 @@ var param = new MonitorParameter
     FailDirectory = @"C:\Program Files\MyApp\fail",
     BackupDirectory = @"C:\Program Files\MyApp\backup",
     WorkModel = "Upgrade",
+    TimeoutMs = 30_000,
+    AutoRestore = true,
+    OnCrash = async (info, ct) => Console.WriteLine($"Crash: {info.DumpFilePath}"),
 };
 
-// Bowl 实例（v10.4.6 无公开 LaunchAsync，此为占位）
 var bowl = new Bowl();
+var result = await bowl.LaunchAsync(context);
+Console.WriteLine($"Result: Success={result.Success}, Restored={result.Restored}");
 ```
 
-完整 Bowl 崩溃守护功能请关注 GeneralUpdate 后续版本。
+| 属性 | 类型 | 说明 | 默认值 |
+|------|------|------|--------|
+| `ProcessNameOrId` | string | 被监控的进程名或 PID | 必填 |
+| `TargetPath` | string | 应用安装根目录 | 必填 |
+| `DumpFileName` | string | Dump 文件名 | 必填 |
+| `FailFileName` | string | 故障报告文件名 | 必填 |
+| `FailDirectory` | string | 崩溃报告输出目录 | 必填 |
+| `BackupDirectory` | string | 备份目录 | 必填 |
+| `WorkModel` | string | "Upgrade" 或 "Normal" | "Upgrade" |
+| `TimeoutMs` | int | 监控超时(毫秒) | 30000 |
+| `AutoRestore` | bool | 崩溃后自动回滚 | false |
+| `DumpType` | DumpType | Mini / Full | Full |
+| `OnCrash` | delegate | 崩溃回调 | null |
+
+> ⚠️ Bowl 和 Core 不能同时引用（CS0433）。使用 Bowl 时**只引用 `GeneralUpdate.Bowl`**，它传递依赖 Core 的所有功能。
 
 ---
 
-## 4. EventManager 事件系统（v10.4.6 可用）
+## 4. EventManager 事件系统（v10.5.0-beta.4 可用）
 
 EventManager 是一个全局单例，提供事件的发布和订阅：
 
 ```csharp
-using GeneralUpdate.Common.Internal.Event;
+using GeneralUpdate.Core.Event;
 
 // 添加监听
 EventManager.Instance.AddListener((object? sender, UpdateInfoEventArgs e) =>
@@ -169,54 +184,79 @@ EventManager.Instance.Clear();
 EventManager.Instance.Dispose();
 ```
 
-> ⚠️ EventManager 是全局单例，`Dispose()` 后 `Instance` 仍然可访问（代码审计发现）。
+> ⚠️ EventManager 是全局单例，`Dispose()` 后 `Instance` 仍然可访问。
 
 ---
 
-## 5. 文件系统工具（v10.4.6 可用）
+## 5. 文件系统工具（v10.5.0-beta.4 可用）
 
 ### BlackList（黑名单）
 
-`Configinfo` 支持通过以下属性排除文件：
+`UpdateRequest` 支持通过以下属性排除文件：
 
 ```csharp
-var config = new Configinfo
+var config = new UpdateRequest
 {
     // ...
-    BlackFiles = new List<string> { "*.log", "*.tmp" },
-    BlackFormats = new List<string> { ".pdb", ".vshost.exe" },
-    SkipDirectorys = new List<string> { "logs", "cache", "temp" },
+    Files = new List<string> { "*.log", "*.tmp" },
+    Formats = new List<string> { ".pdb", ".vshost.exe" },
+    Directories = new List<string> { "logs", "cache", "temp" },
 };
 ```
 
+黑名单内部通过 `ToBlackPolicy()` 转换为 `BlackPolicy` 记录。
+
 ### FileTree（文件树对比）
 
 ```csharp
-using GeneralUpdate.Common.FileBasic;
+using GeneralUpdate.Core.FileSystem;
 
 var tree = new FileTree();
 var snapshot = tree.CreateSnapshot(@"C:\Program Files\MyApp");
-// 或从 StorageManager 获取比较结果
 ```
 
 ---
 
-## 6. 差分引擎（v10.4.6 可用，需安装 Differential 包）
+## 6. 差分引擎（v10.5.0-beta.4 可用，无需额外安装包）
 
-安装 `GeneralUpdate.Differential` 包后可用：
+差分类型已内嵌在 `GeneralUpdate.Core` 中，**无需额外**安装 `GeneralUpdate.Differential` 包。
+
+### DiffPipelineBuilder 方式（推荐）
 
 ```csharp
-// DifferentialCore 提供核心差分能力
-using GeneralUpdate.Differential;
+using GeneralUpdate.Core.Pipeline;
+
+var pipeline = new DiffPipelineBuilder()
+    .UseDiffer(new StreamingHdiffDiffer())     // 差分算法
+    .UseCleanMatcher(new DefaultCleanMatcher()) // 文件匹配器（服务端）
+    .UseDirtyMatcher(new DefaultDirtyMatcher()) // 文件匹配器（客户端）
+    .WithParallelism(4)
+    .WithStopOnFirstError(true)
+    .WithProgress(new Progress<DiffProgress>(p =>
+        Console.WriteLine($"[{p.Completed}/{p.Total}] {p.FileName}")))
+    .Build();
 
-// 清理模式（服务端）：对比新旧版本生成补丁
-await DifferentialCore.CleanAsync(srcDir, tgtDir, patchDir);
+// 服务端：生成补丁
+await pipeline.CleanAsync(oldDir, newDir, patchDir);
 
-// 脏模式（客户端）：应用补丁
-await DifferentialCore.DirtyAsync(installDir, patchDir);
+// 客户端：应用补丁
+await pipeline.DirtyAsync(appDir, patchDir);
+```
+
+### Bootstrap 集成方式
+
+```csharp
+new GeneralUpdateBootstrap()
+    .SetConfig(config)
+    .UseDiffPipeline(pipeline =>
+    {
+        pipeline.WithParallelism(2)
+                .WithStopOnFirstError(true);
+    })
+    .LaunchAsync();
 ```
 
-自定义匹配器（v10.4.6 可用）：
+### 自定义匹配器
 
 ```csharp
 using GeneralUpdate.Differential.Matchers;
@@ -230,7 +270,7 @@ var dirtyMatcher = new DefaultDirtyMatcher();  // 或实现 IDirtyMatcher
 
 ## 7. AOT / NativeAOT 兼容性
 
-GeneralUpdate.Core v10.4.6 支持 .NET Native AOT：
+GeneralUpdate.Core v10.5.0-beta.4 支持 .NET Native AOT（`net8.0` 和 `net10.0`）：
 
 ```xml
 <PropertyGroup>
@@ -242,10 +282,10 @@ GeneralUpdate.Core v10.4.6 支持 .NET Native AOT：
 JSON 序列化上下文（减少 AOT 大小）：
 
 ```csharp
-using GeneralUpdate.Common.Internal.JsonContext;
+using GeneralUpdate.Core.JsonContext;
 
 // 使用内置的 JsonSerializerContext
-// VersionRespJsonContext, PacketJsonContext, ProcessInfoJsonContext 等
+// VersionRespJsonContext, ProcessContractJsonContext, HttpParameterJsonContext 等
 ```
 
 ---
@@ -273,19 +313,19 @@ var result = GeneralDrivelution.InstallDriver(driverPath);
 
 | 主题 | 可用性 | 参考 |
 |------|--------|------|
-| Pipeline 管道 | ✅ v10.4.6 | `GeneralUpdate.Common.Internal.Pipeline` |
-| 策略系统 | ✅ v10.4.6 | `GeneralUpdate.Common.Internal.Strategy` |
-| FileTree | ✅ v10.4.6 | `GeneralUpdate.Common.FileBasic` |
-| BlackList | ✅ v10.4.6 | `Configinfo.BlackFiles` 等属性 |
-| 差分引擎 | ✅ 需 `GeneralUpdate.Differential` | `DifferentialCore` |
-| AOT | ✅ v10.4.6 | `JsonSerializerContext` 子类 |
-| EventManager | ✅ v10.4.6 | `GeneralUpdate.Common.Internal.Event` |
+| Pipeline 管道 | ✅ v10.5.0-beta.4 | `GeneralUpdate.Core.Pipeline` |
+| 策略系统 | ✅ v10.5.0-beta.4 | `GeneralUpdate.Core.Strategy` |
+| FileTree | ✅ v10.5.0-beta.4 | `GeneralUpdate.Core.FileSystem` |
+| BlackList | ✅ v10.5.0-beta.4 | `UpdateRequest.Files/Formats/Directories` → `ToBlackPolicy()` |
+| 差分引擎 | ✅ 内嵌 Core | `DiffPipelineBuilder` / `DiffPipeline` |
+| AOT | ✅ v10.5.0-beta.4 | `JsonSerializerContext` 子类 |
+| EventManager | ✅ v10.5.0-beta.4 | `GeneralUpdate.Core.Event` |
 | Bowl 崩溃守护 | ⚠️ 基础类型 | `GeneralUpdate.Bowl.Bowl` |
-| IUpdateHooks | ❌ v10.4.6 不支持 | 开发分支 v10.5.0-beta.2 中 |
-| 自定义 Strategy 注入 | ❌ v10.4.6 不支持 | 开发分支 v10.5.0-beta.2 中 |
-| IPC 替换接口 | ❌ v10.4.6 不支持 | 开发分支 v10.5.0-beta.2 中 |
-| SilentPollOrchestrator | ❌ v10.4.6 不支持 | 开发分支 v10.5.0-beta.2 中 |
-| Option 系统 | ❌ v10.4.6 不支持 | 仅 Configinfo 属性 |
+| IUpdateHooks | ✅ v10.5.0-beta.4 | `GeneralUpdate.Core.Hooks` — `Hooks<T>()` |
+| 自定义 Strategy 注入 | ✅ v10.5.0-beta.4 | `Strategy<T>()` |
+| IPC 替换接口 | ❌ 暂不支持 | 使用 NamedPipe 替代方案 |
+| SilentPollOrchestrator | ✅ v10.5.0-beta.4 | `Option.Silent` + `SetOption()` |
+| Option 系统 | ✅ v10.5.0-beta.4 | `SetOption<T>(Option<T>, T)` |
 
 ---