feat: skills - emit auto-tmux remote metadata

skills/auto-tmux/scripts/README.md

@@ -17,7 +17,7 @@
 - [`swarm-report-pack.sh`](./swarm-report-pack.sh) - 聚合 board、依赖图、时间线、阻塞清单、分配建议和 JSONL 导出。
 - [`swarm-assign.sh`](./swarm-assign.sh) - 根据 ready tasks 和 worker pane 生成只读分配建议。
 - [`swarm-health.sh`](./swarm-health.sh) - 汇总 doctor、topology、scan、validate、metrics、board 和 assign。
-- [`remote-readonly.sh`](./remote-readonly.sh) - 通过 SSH 只读采集远端 tmux 拓扑和 pane 输出。
+- [`remote-readonly.sh`](./remote-readonly.sh) - 通过 SSH 只读采集远端 tmux 拓扑、pane 输出和 `metadata.jsonl`。
 - [`record-summary.sh`](./record-summary.sh) - 汇总 `record start` 产生的 pane 日志，生成复盘摘要。
 - [`completion.bash`](./completion.bash) - Bash completion，补全 `auto-tmux.sh` 和 `swarm-state.sh` 子命令。
 - [`safety-check.sh`](./safety-check.sh) - 发送、粘贴或分发前检查危险命令、敏感信息和过大 payload。
@@ -95,6 +95,7 @@ skills/auto-tmux/scripts/swarm-health.sh --session ai-hub --swarm-dir /tmp/ai_sw
 
 # 只读采集远端 tmux 证据
 skills/auto-tmux/scripts/remote-readonly.sh --host user@example.com --session ai-hub --out /tmp/auto-tmux-remote --dry-run
+# 真实采集后输出 index.md、remote-tmux.txt 和 metadata.jsonl
 
 # 汇总 pane 录制日志
 skills/auto-tmux/scripts/record-summary.sh --dir /tmp/auto-tmux-records --out /tmp/auto-tmux-record-summary.md

skills/auto-tmux/scripts/remote-readonly.sh

@@ -15,6 +15,10 @@ Defaults:
 
 This script is read-only. It runs tmux list/capture commands on the remote host.
 It never sends keys and never mutates remote tmux state.
+Outputs:
+  - remote-tmux.txt: redacted tmux topology and pane output
+  - metadata.jsonl: machine-readable evidence metadata
+  - index.md: human-readable evidence index
 EOF
 }
 
@@ -71,6 +75,16 @@ redact() {
     -e 's/(sk-[A-Za-z0-9_-]{12,})/<redacted-openai-key>/g'
 }
 
+json_escape() {
+  local value="$1"
+  value="${value//\\/\\\\}"
+  value="${value//\"/\\\"}"
+  value="${value//$'\n'/\\n}"
+  value="${value//$'\r'/\\r}"
+  value="${value//$'\t'/\\t}"
+  printf '%s' "$value"
+}
+
 remote_script='
 set -e
 session_filter="$1"
@@ -103,18 +117,33 @@ if [[ "$dry_run" == "1" ]]; then
 fi
 
 mkdir -p "$out_dir"
+created_at="$(date -Is)"
 ssh "$host" "bash -s" -- "$session" "$lines" <<EOF | redact > "$out_dir/remote-tmux.txt"
 $remote_script
 EOF
 
+evidence_file="$out_dir/remote-tmux.txt"
+evidence_bytes="$(wc -c < "$evidence_file" | tr -d '[:space:]')"
+evidence_lines="$(wc -l < "$evidence_file" | tr -d '[:space:]')"
+if command -v sha256sum >/dev/null 2>&1; then
+  evidence_sha256="$(sha256sum "$evidence_file" | awk '{print $1}')"
+else
+  evidence_sha256=""
+fi
+
+cat > "$out_dir/metadata.jsonl" <<EOF
+{"type":"remote-readonly","created_at":"$(json_escape "$created_at")","host":"$(json_escape "$host")","session":"$(json_escape "${session:-<all>}")","lines":$lines,"evidence_file":"remote-tmux.txt","evidence_bytes":$evidence_bytes,"evidence_lines":$evidence_lines,"evidence_sha256":"$(json_escape "$evidence_sha256")","read_only":true,"redacted":true}
+EOF
+
 cat > "$out_dir/index.md" <<EOF
 # auto-tmux Remote Readonly
 
-- created_at: \`$(date -Is)\`
+- created_at: \`$created_at\`
 - host: \`$host\`
 - session: \`${session:-<all>}\`
 - lines: \`$lines\`
 - evidence: [remote-tmux.txt](./remote-tmux.txt)
+- metadata: [metadata.jsonl](./metadata.jsonl)
 EOF
 
 printf 'remote readonly evidence written: %s\n' "$out_dir"

skills/auto-tmux/scripts/validate-auto-tmux.sh

@@ -76,6 +76,27 @@ run_gate() {
   fi
 }
 
+test_remote_readonly_package() {
+  local tmp_dir fake_bin out_dir
+  tmp_dir="$(mktemp -d)"
+  fake_bin="$tmp_dir/bin"
+  out_dir="$tmp_dir/out"
+  mkdir -p "$fake_bin"
+  cat > "$fake_bin/ssh" <<'EOF'
+#!/usr/bin/env bash
+cat >/dev/null
+printf 'session: ai-hub windows=1 attached=0\n'
+printf '===== [ai-hub:0.0] =====\n'
+printf 'OPENAI_API_KEY=sk-testsecret000000\n'
+EOF
+  chmod +x "$fake_bin/ssh"
+  PATH="$fake_bin:$PATH" "$script_dir/remote-readonly.sh" --host example.com --session ai-hub --out "$out_dir" >/dev/null
+  grep -Fq 'metadata.jsonl' "$out_dir/index.md"
+  grep -Fq '"read_only":true' "$out_dir/metadata.jsonl"
+  grep -Fq '<redacted-openai-key>' "$out_dir/remote-tmux.txt"
+  rm -rf "$tmp_dir"
+}
+
 scripts=(
   "$script_dir/auto-tmux.sh"
   "$script_dir/swarm-state.sh"
@@ -121,6 +142,7 @@ run_gate "swarm-assign help" "$script_dir/swarm-assign.sh" --help
 run_gate "swarm-health help" "$script_dir/swarm-health.sh" --help
 run_gate "remote-readonly help" "$script_dir/remote-readonly.sh" --help
 run_gate "remote-readonly dry-run" "$script_dir/remote-readonly.sh" --host example.com --dry-run
+run_gate "remote-readonly package with fake ssh" test_remote_readonly_package
 run_gate "record-summary help" "$script_dir/record-summary.sh" --help
 run_gate "safety-check help" "$script_dir/safety-check.sh" --help
 run_gate "safety-check clean text" "$script_dir/safety-check.sh" --text "make test"
@@ -157,6 +179,7 @@ require_contains "$skill_dir/references/README.md" "safety-policy.md"
 require_contains "$skill_dir/references/README.md" "session-safety.md"
 require_contains "$skill_dir/references/session-safety.md" "remote-readonly.sh"
 require_contains "$skill_dir/references/session-safety.md" "远程默认只读"
+require_contains "$skill_dir/references/session-safety.md" "metadata.jsonl"
 require_contains "$script_dir/README.md" "validate-auto-tmux.sh"
 require_contains "$script_dir/README.md" "swarm-dispatch.sh"
 require_contains "$script_dir/README.md" "swarm-watch.sh"
@@ -170,6 +193,7 @@ require_contains "$script_dir/README.md" "swarm-report-pack.sh"
 require_contains "$script_dir/README.md" "swarm-assign.sh"
 require_contains "$script_dir/README.md" "swarm-health.sh"
 require_contains "$script_dir/README.md" "remote-readonly.sh"
+require_contains "$script_dir/README.md" "metadata.jsonl"
 require_contains "$script_dir/README.md" "record-summary.sh"
 require_contains "$script_dir/README.md" "completion.bash"
 require_contains "$script_dir/README.md" "safety-check.sh"