dingtalk-misc

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

长尾产品集合 Skill（dingtalk-misc）

Long-tail Product Collection Skill (dingtalk-misc)

执行前路由

Pre-Execution Routing

本文件只负责产品路由。先由下表确定唯一产品：单一、清晰的 Attendance、Report、Sheet 或 Dev 任务直接读取对应 reference（内含该任务所需的最小执行契约）；其它产品先读取

dingtalk-shared

，再读取唯一产品 reference。仅在实际触发认证、profile、确认或错误恢复时补读一份精确 shared reference，不做冷启动预读。

同一请求同时出现日报、周报或简报名称与审批人、抄送人、审批路径、审批单等审批意图时，审批意图优先，统一路由 OA 并读取

oa.md

；本次任务不得执行

dws report

。OA 中没有同名模板也不能降级提交 Report，只能交付 OA 搜索结果或请求消歧。只有用户明确要求提交钉钉日志，且没有审批流语义时，才路由 Report。

Attendance 任务直接按产品索引读取一份最匹配的

attendance*.md

，不要重复预读

dingtalk-shared

。只有出现跨产品编排、profile/认证问题、未知全局错误或 Reference 明确指向 shared 时，才按需读取 shared 对应内容。

This file is only responsible for product routing. First use the table below to determine the unique product: for a single, clear Attendance, Report, Sheet, or Dev task, read the corresponding reference directly (it contains the minimal execution contract required for that task); for other products, read

dingtalk-shared

first, then read the unique product reference. Only read one precise shared reference when authentication, profile, confirmation, or error recovery is actually triggered; do not cold-start pre-read.

When the same request contains daily/weekly/briefing report names together with approval intent such as approvers, CC recipients, approval paths, or approval forms, the approval intent takes precedence: route uniformly to OA and read

oa.md

; this task must not execute

dws report

. Even if OA has no template with the same name, do not downgrade to submitting a Report; only deliver OA search results or ask for disambiguation. Only route to Report when the user explicitly asks to submit DingTalk logs and there is no approval-flow semantics.

For Attendance tasks, directly read the best-matching

attendance*.md

according to the product index; do not repeatedly pre-read

dingtalk-shared

. Read the corresponding shared content on demand only when cross-product orchestration, profile/auth issues, unknown global errors, or a Reference explicitly points to shared.

产品索引表

Product Index Table

触发关键词	一句话范围	命令前缀	详细参考
OA / 审批 / 待处理审批 / 同意 / 拒绝 / 撤销 / 已发起审批 / 发起审批 / 审批附件	OA 审批查询与处理；创建和附件按需加载专项说明	`dws oa`	先读核心 oa.md；发起审批再读 oa-create.md；附件操作再读 oa-attachments.md
法务 / 智能合同 / 合同台账 / 合同归档 / 合同项目 / 相对方 / 合同账款	智能合同台账、导入、起草、归档、项目、相对方与账款管理	`dws contract`	contract.md
考勤 / 打卡 / 班次 / 考勤组 / 排班 / 考勤报表 / 假期余额	考勤记录、规则与配置、排班、报表、假期	`dws attendance`	日常查询/规则/设置：attendance.md；排班导入或排班表导出：attendance-schedule.md；考勤 Excel/报表导出：attendance-report.md；假期/余额：attendance-vacation.md
直播 / 我的直播 / 直播列表	直播列表与直播记录查询	`dws live`	live.md
DING / 紧急通知 / 电话DING / 短信DING / 必达消息	DING 紧急消息（应用内/短信/电话），个人DING	`dws ding`	ding.md
开放平台应用 / 企业内部应用 / 应用状态或删除条件 / 应用管理成员 / 应用权限 / 应用版本或版本历史 / agentId / clientId / 应用机器人配置 / 机器人消息模式或在线状态 / 本机机器人连接器 / Stream连接 / 版本发布 / connect / MCP 服务开发 / MCP 工具发布 / MCP 凭证 / OpenAPI或Swagger或Postman或curl转MCP / 接口给Agent用 / 已发布MCP调用	开放平台企业内部应用，以及 MCP 服务、工具、鉴权、凭证、协作者和发布后动态调用	`dws dev` / `dws dev mcp` / `dws mcp published`	按下方「Dev 直达规则」读取一个 `references/dev/*.md` ；意图不明时才读 dev-index.md
DEAP 数字员工 / 数字员工 / 人设 / 群感知 / DSH 接入	兼容路由；完整自然语言编排只由独立 `dingtalk-tag` skill 维护	`dws dingtalk-tag`	切换 `dingtalk-tag`
目标管理 / 战略解码 / 经营合约字段 / 计分卡 / OKR / 目标规则周期 / 个人目标 / 目标模板 / 周月报规则统计 / 按时迟交未提交 / 跟催	Agoal 目标管理与经营目标跟进	`dws agoal`	agoal.md
日报 / 周报 / 月报 / 写日志 / 收件箱日志 / 发件箱日志	日志（日报/周报/月报）查询与按模版提交	`dws report` （别名 `dws log` ）	report.md
电子表格 / 工作表 / 单元格读写 / 公式 / 超链接 / 浮动图片	电子表格创建/读写/公式/超链接/浮动图片/导出	`dws sheet`	sheet.md
开放平台文档 / API文档 / 接口文档 / 接口报错	开放平台开发文档搜索	`dws devdoc`	devdoc.md
未封装 OpenAPI / llms.txt / dws api / Raw API / API 逃生舱	官方 llms.txt 分层发现，仅对企业内部应用 App Token 服务端 API 生成并确认 Raw 调用	`dws api`	openapi-explorer.md
白板 / 独立白板 / 文档内嵌白板 / 画布 / OpenNodes / 白板节点 / SVG 预渲染	带内容创建、本地 SVG 预渲染、读取、写前 diff 预览和更新独立或文档内嵌白板；没有 `partId` 时默认独立白板	`dws whiteboard`	whiteboard.md
招聘 / 职位 / JD / 在招职位 / 创建职位 / 职位详情	钉钉招聘职位的查询、详情与创建	`dws recruit`	recruit.md
搜索技能 / 找技能 / 安装技能 / 技能市场 / 安装 DWS mono 或 multi skill	DWS 技能市场搜索、下载、安装与内置技能部署	`dws skill`	skill.md
人才池 / 储备干部池 / 员工档案 / 职业历程 / 绩效记录 / 员工标签 / 组织大脑 / 人才搜索	组织大脑：人才池、员工档案专项模块与结构化人才搜索	`dws hrbrain`	hrbrain.md
原生 Markdown / `.md` 原文 / Markdown 版本比较 / 本地草稿 diff / 覆盖 Markdown / 局部替换 Markdown / Markdown 评论	原生 `.md` 文件读取、创建、版本或草稿对比、全量覆盖、局部替换与评论列表	`dws markdown`	markdown.md
原生 HTML / `.html` 文件 / 新建 HTML 页面 / 上传 HTML 文件 / 读取 HTML 原文 / 覆盖 HTML / 局部替换 HTML	原生 `.html` / `.htm` 文件读取、创建、全量覆盖与局部替换（钉盘或文档空间）	`dws html`	html.md
PAT 授权 / 行为权限 / scope 授权 / 一次性授权 / 会话授权 / 永久授权 / 授权浏览器策略	PAT 行为授权与本地浏览器策略	`dws pat`	pat.md
切换组织 / 换组织 / 跨组织 / 多组织 / profile / 看登录了哪些组织	多组织 / profile 管理与跨组织取数	`dws profile` / `dws auth` / `--profile`	profile.md
宜搭 / AI应用脚本 / 财务辅助脚本（未产品化）	无稳定命令面；仅仓库内辅助脚本	（非默认路由）	unsupported-scripts.md

Trigger Keywords	One-sentence Scope	Command Prefix	Detailed Reference
OA / approval / pending approval / approve / reject / revoke / initiated approval / start approval / approval attachments	OA approval query and handling; load create and attachment special instructions on demand	`dws oa`	Read core oa.md first; then read oa-create.md when initiating approval; then read oa-attachments.md for attachment operations
legal / smart contract / contract ledger / contract archive / contract project / counterparty / contract payments	Smart contract ledger, import, draft, archive, project, counterparty, and payment management	`dws contract`	contract.md
attendance / clock-in / shift / attendance group / scheduling / attendance report / leave balance	Attendance records, rules and configuration, scheduling, reports, and leave	`dws attendance`	Daily query/rules/settings: attendance.md; schedule import or schedule export: attendance-schedule.md; attendance Excel/report export: attendance-report.md; leave/balance: attendance-vacation.md
live / my live / live list	Live list and live record query	`dws live`	live.md
DING / urgent notification / phone DING / SMS DING / must-reach message	DING urgent messages (in-app/SMS/phone), personal DING	`dws ding`	ding.md
Open Platform app / enterprise internal app / app status or deletion conditions / app member management / app permissions / app version or version history / agentId / clientId / app robot configuration / robot message mode or online status / local robot connector / Stream connection / version release / connect / MCP service development / MCP tool publishing / MCP credentials / OpenAPI or Swagger or Postman or curl to MCP / expose API to Agent / published MCP invocation	Open Platform enterprise internal apps, and MCP services, tools, auth, credentials, collaborators, and dynamic invocation after publishing	`dws dev` / `dws dev mcp` / `dws mcp published`	Read one `references/dev/*.md` according to the Dev Direct Routing Rules below; read dev-index.md only when intent is unclear
DEAP digital employee / digital employee / persona / group awareness / DSH access	Compatibility routing; full natural-language orchestration is maintained only by the standalone `dingtalk-tag` skill	`dws dingtalk-tag`	Switch to `dingtalk-tag`
goal management / strategy decoding / business contract fields / scorecard / OKR / goal rule period / personal goals / goal templates / weekly-monthly report rule statistics / on-time late missing / follow-up	Agoal goal management and business goal follow-up	`dws agoal`	agoal.md
daily report / weekly report / monthly report / write log / inbox logs / sent logs	Log (daily/weekly/monthly report) query and template-based submission	`dws report` (alias `dws log` )	report.md
spreadsheet / worksheet / cell read-write / formula / hyperlink / floating image	Spreadsheet create/read-write/formula/hyperlink/floating image/export	`dws sheet`	sheet.md
Open Platform docs / API docs / interface docs / interface error	Open Platform developer documentation search	`dws devdoc`	devdoc.md
unwrapped OpenAPI / llms.txt / dws api / Raw API / API escape hatch	Official llms.txt tiered discovery; only generates and confirms Raw calls against enterprise internal app App Token server-side APIs	`dws api`	openapi-explorer.md
whiteboard / standalone whiteboard / doc-embedded whiteboard / canvas / OpenNodes / whiteboard nodes / SVG pre-render	Create with content, local SVG pre-render, read, pre-write diff preview, and update standalone or doc-embedded whiteboards; defaults to standalone whiteboard when no `partId` is present	`dws whiteboard`	whiteboard.md
recruiting / position / JD / open positions / create position / position details	DingTalk recruiting position query, details, and creation	`dws recruit`	recruit.md
search skills / find skills / install skills / skill marketplace / install DWS mono or multi skill	DWS skill marketplace search, download, install, and built-in skill deployment	`dws skill`	skill.md
talent pool / reserve cadre pool / employee profile / career history / performance records / employee tags / Organization Brain / talent search	Organization Brain: talent pool, employee profile specialized modules, and structured talent search	`dws hrbrain`	hrbrain.md
native Markdown / `.md` source / Markdown version comparison / local draft diff / overwrite Markdown / partial replace Markdown / Markdown comments	Native `.md` file read, create, version or draft comparison, full overwrite, partial replace, and comment list	`dws markdown`	markdown.md
native HTML / `.html` files / create HTML page / upload HTML file / read HTML source / overwrite HTML / partial replace HTML	Native `.html` / `.htm` file read, create, full overwrite, and partial replace (DingTalk Drive or document space)	`dws html`	html.md
PAT authorization / behavior permissions / scope authorization / one-time authorization / session authorization / permanent authorization / authorization browser policy	PAT behavior authorization and local browser policy	`dws pat`	pat.md
switch organization / change organization / cross-organization / multi-organization / profile / view which organizations are logged in	Multi-organization / profile management and cross-organization data retrieval	`dws profile` / `dws auth` / `--profile`	profile.md
Yida / AI app scripts / finance helper scripts (not productized)	No stable command surface; only helper scripts in the repo	(non-default route)	unsupported-scripts.md

说明

Notes

命中数字员工时立即切换独立
```
dingtalk-tag
```
；本 skill 不保留重复参考文档。
命中产品后必须读取其
```
references/<product>.md
```
，不要只凭索引推测命令。Report 只读 report.md；Sheet 常见闭环只读 sheet.md，复杂任务按进入阶段顺序加载子 reference，每阶段最多一份、常规任务最多三份，禁止批量预读或重复读取。
Agoal / Report 边界：填写、提交或查询普通日报/周报/月报正文走 Report；规则级提交统计、按时/迟交/未提交人数、人员清单和跟催走 Agoal。出现“月报”不能单独判给 Report，必须结合“规则/统计/迟交/未提交/跟催”等业务词判断。
考勤例外：按索引表直接读取一份最匹配的
```
attendance*.md
```
；不要先读
```
attendance.md
```
再读排班、报表或假期专项 Reference。只有一个任务确实跨两个独立考勤域时，才加载第二份。
考勤性能优化只允许减少重复的 shared/Reference/Help/Schema 加载和重复远程查询；禁止为节省 token 省略用户要求的记录、业务字段、分页、失败项、warning 或写后验证。需要“全部/完整”结论时必须保留并检查 endpoint exhaustion/总数等完整性证据。
考勤命令路径、flag、约束和返回声明以当前 live Cobra/Contract/精确 leaf Schema 为权威；attendance Reference 只维护业务路由、能力边界和工作流。已知命令直接执行，确有不确定性时最多读取一次精确 compact leaf，避免复制命令全集造成信息漂移。
产品自己的局部意图消歧文档命名为
```
references/<product>-intent-guide.md
```
，不是共享的
```
references/intent-guide.md
```
。
各产品之间跨产品协作若指向本包内的其它产品，已在对应
```
references/<product>.md
```
里写成"见本包 references/X.md"，无需切换 skill；若指向 top10 独立产品（如
```
chat
```
/
```
aisearch
```
/
```
doc
```
），仍按
```
dingtalk-<product>
```
切换 skill。
```
scripts/
```
下 yida / finance /
```
aiapp_create_and_poll.py
```
等见 unsupported-scripts.md；默认不要当正式能力调用。
Dev 直达规则：应用状态、增删改查、能否删除→app.md；凭证→credentials.md；开放平台应用的管理成员/角色汇总→member.md，不是 Chat 群成员；权限→permission.md；安全配置→security.md；网页应用→webapp.md；机器人线上配置→robot.md；版本历史/待发布版本/发布→version.md；事件订阅→event.md；本机机器人连接器/Stream连接→connect.md；MCP→先读mcp.md，仅在进入对应阶段时再增量读取其 API 转换、映射、鉴权、表达式或故障定位子 reference，禁止一次性预读全集；明确跨两个以上 Dev 域→只先读recipes.md。单域任务只读一份；跨域也不要预读各专题，仅当真实响应出现本页未覆盖的特殊状态或字段时补读一份。无需先读
```
dingtalk-shared
```
、
```
devapp.md
```
或索引，禁止重复读取 Reference。
Dev 命令纪律：默认使用可审计的
```
dws dev ...
```
原子路径，不为发现 shortcut 调用
```
dws dev help
```
、子组 help 或
```
dws devapp +...
```
。应用按名称定位只有
```
dws dev app list --name
```
，没有
```
dws dev app search
```
；现有应用的机器人名称、模式、状态用
```
dws dev app robot get
```
，不走
```
dws chat bot
```
；连接器是
```
dws dev connect ...
```
，不在
```
dws dev app
```
下。已知 leaf 直接执行；只有当前参数确有不确定性时才读取一次该 leaf 的 compact Schema，Schema 不可用时才调用一次精确 leaf
```
--help
```
。不要用 group help 探路。
Dev JSON 与分页：所有命令带
```
--format json
```
；
```
connect list/status
```
还必须带它们自己的
```
--json
```
，否则实际输出是表格。
```
app list
```
、
```
permission list
```
、
```
event list
```
、
```
version list
```
只接受游标分页：读取返回的
```
meta.pagination.endpoint_exhausted/next_token
```
，续页传
```
--cursor <next_token>
```
；禁止猜
```
--page
```
、
```
--page-num
```
，也不要从
```
data
```
中找旧版
```
hasMore/nextCursor
```
。
Dev 完成纪律：执行前记下用户要求的每个交付项；按依赖顺序执行，删除/停用等清理放到最后。用户最初请求写操作只授权 dry-run，不是看过预检后的正式确认。必须先展示 dry-run 的准确对象、动作、业务参数和影响，再取得用户对该预览的明确确认；随后只把同一命令的
```
--dry-run
```
换成
```
--yes
```
，目标或业务参数有任何变化都重新 dry-run、展示并确认。确认前不得发出非 dry-run 写调用；
```
--dry-run
```
不是完成。写后只做一次必要回读。相同业务错误且参数、状态均未改变时不要重试；仅在新证据实际改变命令、参数或状态后重试一次。最终逐项回答，空列表也明确写“暂无”，不要用大段原始 JSON 挤掉其它结果。
Devapp 跨域快路径：创建/清理应用加机器人、网页、成员等能力，首读
```
dev/recipes.md
```
即可，不再预读 app 或各专题。缺参才补精确段落；新建失败不能借用其它应用。确认后的续轮直接执行已确认且未变化的命令，完成必要回读后，同轮继续下一项 dry-run 并询问该项确认，不另问“是否继续”。复用 ID、回执和已读 reference；目标/参数变化仍重新预检确认。明确 STREAM 要传
```
--mode STREAM
```
，不建连接就不读 connect；明确不发布就不进入发布链。
DevDoc 搜索预算：明确的开发文档任务直接读 devdoc.md，无需冷启动预读 shared 或 Devapp。每个主题先原短语搜索；无结果或全不相关时，普通查找至多一次有依据的改写，再报告未命中。指定查询词和页数时不擅自替换或缩减；有返回不等于找到相关资料，禁止连续近义词或跨产品搜索碰运气。
OA 任务先读核心 oa.md。只有进入真实提单阶段才增量读取 oa-create.md，只有处理审批附件才增量读取 oa-attachments.md；不要为普通查询预读创建、控件、节点和附件全集。要求未来审批任务或实例发生变化时实时通知，切换独立的
```
dingtalk-event
```
。开放平台应用事件配置仍属于 DevApp，按 dev/event.md 执行，不要与个人实时事件混淆。
原生
```
.md
```
与在线富文本
```
adoc
```
、通用文件存储的边界见 markdown.md；原生
```
.html
```
/
```
.htm
```
文件读写见 html.md；跨组织 / profile 规则见 profile.md。
PAT 行为授权不是开放平台应用权限；后者见 dev/permission.md。

Agent 使用 OpenNodes 带内容创建白板时，必须先执行

whiteboard render

，展示 SVG 和渲染提示后停止，等待用户明确确认当前版本才能创建；修改后重新渲染和确认。不得跳过预览直接创建，最初的创建请求及创建后回读不能替代预览确认。详见白板入口的创建流程；空白创建、直接套用模板和已有白板更新不由此规则扩展。

Agent 更新已有白板内容（追加、修改、删除、清空）必须先执行

whiteboard +diff

，展示差异和风险后停止，等待用户明确确认当前差异，再用同一 sourceDigest 执行

+update

；diff 失败或有 blocker 时不得写入。不得换原子 update 绕过，render、dry-run 和写后回读不能替代 diff。详见白板入口的更新流程。

When a digital employee match occurs, immediately switch to the standalone
```
dingtalk-tag
```
; this skill does not keep duplicate reference docs.
After matching a product, you must read its
```
references/<product>.md
```
; do not guess commands from the index alone. For Report, read only report.md; for common Sheet loops, read only sheet.md. For complex tasks, load child references in the order of the phase you enter; at most one reference per phase and at most three per normal task. Batch pre-reading or repeated reads are forbidden.
Agoal / Report boundary: Filling in, submitting, or querying the body of ordinary daily/weekly/monthly reports goes to Report; rule-level submission statistics, counts of on-time/late/missing, personnel lists, and follow-up go to Agoal. The mere presence of 'monthly report' cannot alone route to Report; judge together with business terms such as 'rule/statistics/late/missing/follow-up'.
Attendance exception: Directly read the best-matching
```
attendance*.md
```
per the index table; do not read
```
attendance.md
```
first and then the scheduling, report, or vacation-specific Reference. Load a second one only when a single task truly spans two independent attendance domains.
Attendance performance optimization may only reduce repeated shared/Reference/Help/Schema loads and repeated remote queries; it is forbidden to omit user-required records, business fields, pagination, failed items, warnings, or post-write verification to save tokens. When an 'all/complete' conclusion is required, you must retain and check completeness evidence such as endpoint exhaustion/total counts.
For attendance command paths, flags, constraints, and return declarations, the live Cobra/Contract/precise leaf Schema is authoritative; the attendance Reference only maintains business routing, capability boundaries, and workflows. Known commands are executed directly; when uncertainty truly exists, read one precise compact leaf at most once, avoiding duplication of the entire command set which causes information drift.
A product's own local intent-disambiguation doc is named
```
references/<product>-intent-guide.md
```
, not the shared
```
references/intent-guide.md
```
.
If cross-product collaboration among products points to another product within this package, it is already written in the corresponding
```
references/<product>.md
```
as 'see references/X.md in this package'; no skill switch is needed. If it points to a top-10 standalone product (such as
```
chat
```
/
```
aisearch
```
/
```
doc
```
), still switch skills via
```
dingtalk-<product>
```
.
For yida / finance /
```
aiapp_create_and_poll.py
```
under
```
scripts/
```
, see unsupported-scripts.md; do not call them as official capabilities by default.
Dev direct routing rules: app status, CRUD, deletability→app.md; credentials→credentials.md; Open Platform app member/role summary→member.md, not Chat group members; permissions→permission.md; security config→security.md; web app→webapp.md; robot online config→robot.md; version history/pending versions/release→version.md; event subscription→event.md; local robot connector/Stream connection→connect.md; MCP→read mcp.md first, then incrementally read its API conversion, mapping, auth, expression, or troubleshooting child references only when entering the corresponding stage; never pre-read the whole set at once. For a task that clearly spans more than two Dev domains→read only recipes.md first. Single-domain tasks read only one reference; cross-domain tasks also must not pre-read topic references, and only add one more when a real response contains a special status or field not covered in this document. No need to read
```
dingtalk-shared
```
,
```
devapp.md
```
, or the index first; repeated Reference reads are forbidden.
Dev command discipline: Use auditable
```
dws dev ...
```
atomic paths by default; do not call
```
dws dev help
```
, subgroup help, or
```
dws devapp +...
```
to discover shortcuts. Locating an app by name is only
```
dws dev app list --name
```
; there is no
```
dws dev app search
```
. For an existing app's robot name, mode, and status, use
```
dws dev app robot get
```
, not
```
dws chat bot
```
. Connectors are
```
dws dev connect ...
```
, not under
```
dws dev app
```
. Known leaves are executed directly; only when the current parameters are truly uncertain, read that leaf's compact Schema once, and only when Schema is unavailable call the precise leaf
```
--help
```
once. Do not use group help to explore.
Dev JSON and pagination: All commands use
```
--format json
```
;
```
connect list/status
```
must also carry their own
```
--json
```
, otherwise the actual output is a table.
```
app list
```
,
```
permission list
```
,
```
event list
```
,
```
version list
```
only accept cursor pagination: read the returned
```
meta.pagination.endpoint_exhausted/next_token
```
, and pass
```
--cursor <next_token>
```
for continuation pages; do not guess
```
--page
```
or
```
--page-num
```
, and do not look for the legacy
```
hasMore/nextCursor
```
in
```
data
```
.
Dev completion discipline: Before executing, write down every deliverable requested by the user; execute in dependency order, and put cleanup actions such as deletion/deactivation last. A user's initial request for write operations authorizes dry-run only, not a formal confirmation after seeing preflight. You must first show the exact objects, actions, business parameters, and impact of the dry-run, then obtain the user's explicit confirmation of that preview; afterward only replace the same command's
```
--dry-run
```
with
```
--yes
```
. If the target or business parameters change in any way, re-run dry-run, present, and confirm again. Do not issue non-dry-run write calls before confirmation;
```
--dry-run
```
is not completion. After writing, do only one necessary read-back. Do not retry the same business error when parameters and state are unchanged; retry once only after new evidence actually changes the command, parameters, or state. Finally answer item by item; for empty lists explicitly write 'none yet', and do not let large chunks of raw JSON crowd out other results.
Devapp cross-domain fast path: For creating/cleaning apps plus capabilities such as robot, web, and members, first read
```
dev/recipes.md
```
; do not pre-read app or topic references. Read the exact paragraph only when parameters are missing; a failed creation cannot borrow another app. In subsequent rounds after confirmation, directly execute the already-confirmed unchanged commands; after completing the necessary read-back, continue in the same round with the next dry-run and ask for that item's confirmation, without separately asking 'continue?'. Reuse IDs, receipts, and already-read references; if targets/parameters change, run preflight confirmation again. If STREAM is explicit, pass
```
--mode STREAM
```
; if no connection is created, do not read connect; if publishing is explicit not required, do not enter the release chain.
DevDoc search budget: For clear developer-documentation tasks, read devdoc.md directly; no need to cold-start pre-read shared or Devapp. For each topic, search the original phrase first; if there are no results or all are irrelevant, an ordinary lookup may make at most one grounded rephrase, then report the miss. Do not arbitrarily replace or reduce specified query terms and page counts; a response does not mean relevant information was found, and continuous synonym or cross-product searches to try your luck are forbidden.
For OA tasks, first read the core oa.md. Only when entering the actual submission stage, incrementally read oa-create.md; only when handling approval attachments, incrementally read oa-attachments.md; do not pre-read the full create, control, node, and attachment sets for ordinary queries. If real-time notification is required for future approval tasks or instance changes, switch to the standalone
```
dingtalk-event
```
. Open Platform app event configuration still belongs to DevApp; execute per dev/event.md, and do not confuse it with personal real-time events.
For the boundary between native
```
.md
```
and online rich-text
```
adoc
```
and general file storage, see markdown.md; for native
```
.html
```
/
```
.htm
```
file read/write, see html.md; for cross-organization / profile rules, see profile.md.
PAT behavior authorization is not Open Platform app permission; for the latter, see dev/permission.md.

When the Agent uses OpenNodes to create a whiteboard with content, it must first run

whiteboard render

, show the SVG and render notes, then stop and wait for the user to explicitly confirm the current version before creating; after modifications, re-render and confirm again. Do not skip the preview and create directly; the initial creation request and post-creation read-back cannot replace the preview confirmation. See the creation flow at the whiteboard entry; blank creation, directly applying a template, and updating an existing whiteboard are not covered by this rule.

When the Agent updates existing whiteboard content (append, modify, delete, clear), it must first run

whiteboard +diff

, show the diff and risks, then stop and wait for the user to explicitly confirm the current diff before using the same sourceDigest to run

+update

; when diff fails or has blockers, do not write. Do not bypass it with an atomic update; render, dry-run, and post-write read-back cannot replace the diff. See the update flow at the whiteboard entry.