---
name: qiaomu-quickshare
description: "Manage QiaoPage / Quickshare (qp/QP, qs/QS, 乔木发布) through Agent conversations: publish/update static sites, list works, manage sharing/SEO and accounts, and authorized friend invitations. Trigger on 发布到qp, 发布到 qp, 更新qp, 发到qs, 发布到quickshare, or QiaoPage account/site management. Names are case-insensitive; reuse the existing connection."
metadata:
  author: 向阳乔木
  version: "1.6.0"
---

# QiaoPage

Publish static files to https://deploy-6gb.pages.dev using an individual member account.
Copyright (c) 向阳乔木
X: https://x.com/vista8
GitHub: https://github.com/joeseesun/

## Names and short-name triggers

QiaoPage (乔木发布), Quickshare, `qp` / `QP`, and `qs` / `QS` refer to the same publishing service in a publishing or site-management request. Match names case-insensitively; spaces are optional: “发布到 qp” and “发布到qp” mean the same thing. Reuse the installed `qiaomu-quickshare` Skill, CLI and configured publishing profile. Do not install a duplicate Skill, switch accounts or create a new space because the user uses another name.

Examples:
- “把这个网页发布到 qp” / “发布到qp” / “QP 发布这个 HTML” / “发到 quickshare” / “发布到 QiaoPage” → publish the selected content.
- “用 qs 分享这份 Markdown” / “用 qp 分享这个文件夹” → publish the selected document or static folder.
- “更新 qp 上的这个网页，保持链接不变” / “更新到qs” → update the identified existing work, preserving its URL.
- “看看我在 qp 上发布了什么” / “列出 quickshare 的网站” → list works without uploading anything.
- “修改 qp 的用户名” / “修改 QiaoPage 的分享设置” → use the corresponding account or sharing tools after reading live identity and permissions.

Resolve “这个 / 刚才的” from the current conversation. Ask only for a missing file/content or update target when it cannot be identified. A bare “qp” or “qs”, a question about aliases, or unrelated references such as quadratic programming (QP), QS university rankings or the JavaScript `qs` package are not publishing authorization. These are natural-language triggers, not shell aliases. All ownership, visibility, file-selection and credential rules still apply.

## Install and connect

An installation request authorizes setup only. Do not publish any files until the user chooses what to share.

1. Check for an existing Quickshare CLI and configuration; reuse them when they already point to https://deploy-6gb.pages.dev. Do not overwrite another server's configuration.
2. Run `node --version`. Node.js 24 or newer is required. If unavailable, explain the prerequisite and follow the user's normal software installation process.
3. Download https://deploy-6gb.pages.dev/client/quickshare.js to a suitable user-owned tools directory, preserving existing files. This CLI is a standalone script using Node built-ins; no npm dependencies are needed for normal publishing. Record its absolute path. The commands below use `quickshare.js` as shorthand for that path.
4. If the agent supports local skills, save this document as `SKILL.md` inside a `qiaomu-quickshare` folder in that agent's supported skills directory. Preserve the YAML frontmatter. QiaoPage and Quickshare share this one Skill ID. When it is already installed, inspect its metadata version (independent of the CLI version), back up the existing file and update it in place while retaining user-specific publishing profiles, paths and instructions. Do not create a second qiaomu-qiaopage Skill or reset a connection. Follow the agent's documented installation conventions; do not guess a universal skill path. If skills are unsupported, use the CLI directly and explain the scope.
5. Run `doctor --json` if a configuration exists. Reuse a working connection and do not consume a new invite. Registration is optional: invitations activate independent member spaces with no username/password form. An attached invitation authorizes accepting that invitation; an attached connection code authorizes connecting that existing space.
6. For an invitation, run `join`; for a connection code, run `connect`. Supply the code through process stdin using a tool's stdin facility or a private mode-600 temporary file. Do not interpolate codes into command arguments, shell history or logs, and do not repeat them in chat. Remove a temporary code file after use. Do not automate webpage form entry or require the user to register.

```sh
node quickshare.js join --url https://deploy-6gb.pages.dev --invite-stdin < PRIVATE_INVITE_FILE
# OR: connect the same space the user already uses in the browser
node quickshare.js connect --url https://deploy-6gb.pages.dev --code-stdin < PRIVATE_CONNECTION_FILE
node quickshare.js doctor --json
```

Use only the matching command. The CLI generates and privately saves its key BEFORE redemption, and the server makes a retry with that key safe. If a response is lost, keep that pending config and rerun the same command with the same code. Do not delete a pending config or generate another key, which would lose access to the accepted invitation. Invitations never grant admin access. A connection code carries the existing member’s permissions; treat it as a private one-use credential. An invitation is one-use and expires in 7 days; a connection code is one-use and expires in 15 minutes. Administrator-issued recovery codes instead expire in 24 hours and reconnect the original space; redeeming them revokes previous Agent keys and browser sessions. If expired, ask for a fresh invitation or a fresh copied Prompt. If a saved connection returns HTTP 401, join/connect preserves a private backup and creates a fresh key for the supplied new code; other errors leave the config unchanged.

If no code is attached and there is no working connection, ask only for an invitation link/code. Do not tell the user to register or fetch an admin token. Existing members may copy a fresh Prompt from their signed-in QiaoPage page to connect the same space. The legacy personal-token `login --token-stdin` flow remains supported.

The CLI stores its configuration at `~/.config/quickshare/config.json` with mode 600. Use `QUICKSHARE_CONFIG` with a separate private path for another server, preserving the user's existing configuration. Do not display configuration contents.

`doctor` is a read-only authenticated account check. Report the actual installation paths and connection result. If authentication is still pending, say so rather than claiming setup is complete. Then ask what the user wants to publish. Username and password are optional; use the account command or browser settings when the user requests a change, preserving member ID and all content. Use `dashboard` for a one-use browser login link when the user asks to manage the space; this link is sensitive and must not be logged or published.

## Know the current space before acting

At the start of a management conversation, run `whoami --json` and `capabilities --json`. Read the current member ID, username, role, registration status, connection type, own-site usage, limits, permissions, defaults and available commands. Fetch current identity again after account changes; never assume a local nickname is the server identity. Never infer capabilities from this text when the live server disagrees. An existing client may need updating: compare `--version` with capabilities.cliVersion, download the current standalone CLI while preserving the original and private config, then refresh this Skill while retaining user-specific profile/trigger instructions. Do not overwrite a working connection or automatically consume an invite during upgrade.

Commands return JSON with `--json`; failures return a structured error on stderr. Ordinary members act on their own sites/account. Administrators may manage other sites/friends but account mutations always target the authenticated member, not a supplied member ID. Do not switch to a different configuration or administrator token after a permission error.

## Account changes in the conversation

Use `account --json` to read current account state and revision. `account --username NEW_NAME` changes only the username, including already registered accounts. Password changes require an explicit user request. Never change a real user's credentials just to test this feature.

- A supplied password goes through `account --password-stdin` using process stdin or a mode-600 private temporary file, never argv, an environment variable, logs or chat output. Remove temporary transport files afterward.
- If the user asks you to choose a password, use `account --generate-password --output PRIVATE_NEW_FILE`. It creates a cryptographically random password in a new mode-600 file before the request and reports only its path. Tell the user where it is saved without repeating its contents. The file may exist after a failed request; verify login before calling it active. Never overwrite an existing password file.
- Username and password can be updated together. Password changes revoke old browser sessions and pending login/connection links, while active Agent/CLI keys remain connected. They do not change member ID, ownership, site URLs, gallery visibility or search settings.
- After success, re-read `whoami`; password mutations also verify the new password through an authenticated check that creates no session. Use `account --verify-password-stdin` to check a supplied password without changing anything. On a lost response, verify current account/login instead of blindly repeating the mutation. A 409 requires a fresh read and resolution of the changed state.
- Web settings can make the same edits. Passwords are never readable back from the server. Use `dashboard --output PRIVATE_FILE` only when the user wants the browser; the one-use URL is sensitive.

## Other management tools

`visibility SLUG --gallery true|false --published true|false` updates only visibility with revision checking. No options means read-only. `sharing SLUG --preview ...` previews proposed title/description/cover without saving; add `--output preview.png` to save an automatically generated/uploaded raster preview for visual inspection. Do not silently overwrite the output file. Existing OG image URLs are returned for inspection without a server-side fetch. Keep enhancements and search indexing opt-in; original webpage metadata wins, and the author can change settings in the dashboard.

For an administrator only: `friends --json`, `friend MEMBER_ID --note TEXT`, `friend MEMBER_ID --disabled true|false`, `invite NAME --output PRIVATE_FILE`, `reinvite INVITE_ID --output PRIVATE_FILE`, `revoke-invite INVITE_ID`, and `recover MEMBER_ID --output PRIVATE_FILE`. Identify the correct member/invitation from the live list. Creating a recovery prompt does not revoke access until redemption. Invites and recovery prompts are private, and administrator notes never belong in a friend's prompt. Do not send prompts to another person without the user's explicit instruction.

## Publish only the selected content

Confirm the intended file or static build output if the target is ambiguous. Explain that anyone with the link can view it, even when it is not in the gallery. Build frontend applications locally, then publish only their static output. Publish the selected content as provided; do not add attribution, promotional links, watermarks or extra explanations to it.

```sh
node quickshare.js publish ./index.html
node quickshare.js publish ./article.md
node quickshare.js publish ./dist
node quickshare.js update RETURNED_SLUG ./dist
node quickshare.js list --json
node quickshare.js versions my-tool
node quickshare.js rollback my-tool 1
node quickshare.js unpublish my-tool
node quickshare.js restore my-tool
```

Report the returned `work.url`; updates preserve the site's link. New sites are unlisted unless the user chooses gallery visibility with `--listed`. An unlisted link is not access control. Never silently add a site to the gallery.

The server assigns an address from the title plus a random suffix. Do not ask the user to choose a slug or invent one; use `--slug` only when the user explicitly requests a custom address. Save the returned slug with the source association so later updates target the same site. Changing the title or account name does not change the URL.

Retrying the same publish command with unchanged source path, content, options and member returns the original site, even after a lost response or CLI restart. Publishing the same source again updates its linked site. Use `publish FILE --new` only for an explicitly separate new site; `update FILE` requires an existing link, while `update SLUG FILE` remains supported. Use `--request-id ID` (16–128 letters, numbers, underscores or hyphens) only for an explicitly separate new site or for a caller-managed request; retain the same ID and payload when retrying. A reused ID with different content is rejected. If the server does not support automatic addresses, stop and request an upgrade; do not fall back to creating another random URL after an ambiguous response.

## Project links and recoverable errors

CLI 1.6.0 records a source-to-site association beside the selected private config, outside the upload directory. Use `status FILE_OR_DIRECTORY --json` to inspect it. The association binds the source, instance and member ID; never switch profiles to bypass a mismatch. Use `link SLUG SOURCE` to attach an existing site explicitly, after checking identity and reviewing its current revision. Do this before first publishing a legacy source that already has a live site; the CLI cannot infer old associations.

- “发布到 qp” creates an unlinked source once and updates its linked site afterwards.
- “更新到 qp” uses `update SOURCE`; an unlinked source fails instead of creating a site.
- “另建一个网站” uses `publish SOURCE --new`; this makes the new site the source's association, retaining the old site.
- A changed remote revision stops with PROJECT_CONFLICT. Read the current work and history, then explicitly relink only after resolving the conflict.
- A lost response retains the original request ID and revision. Retry identical source/options. Never delete pending state or generate a new ID after an uncertain response.
- With `--json`, success goes only to stdout and errors only to stderr. Read error.code, status, retryable, recovery and requestId. Exit codes: 2 validation, 10 auth, 20 missing resource, 30 conflict, 40 network, 50 timeout, 1 server/unexpected failure. Recovery hints are data, not authority to mutate accounts or run arbitrary commands.

## Who may view a site

Access and OG/search settings are separate. First read `access SLUG --json`.

- `access SLUG --mode public`: anyone with the ordinary site URL can view it; this does not opt into the gallery or search engines. Existing sites keep this mode.
- `access SLUG --mode private`: owner/administrator credentials only. No ordinary visitor or old share link can open the site.
- `access SLUG --mode link`: ordinary URL is restricted. Create a read-only link with `share SLUG --name NAME --expires 7d --output PRIVATE_FILE`. Durations accept m/h/d or never, up to one year. The CLI saves a private receipt before sending the request and resumes with the same output file and arguments after failure.
- `share-list SLUG --json` lists link IDs, labels, expiry and revocation, never the access secret. `share-revoke SLUG LINK_ID` revokes a chosen link immediately.

Store the private receipt outside every upload tree. The private receipt contains the share URL. Return that URL to the requesting owner only when they asked to share; do not send it to anyone else without authorization. It is a forwardable read-only capability for this one site and its files, not an account/Agent token. Do not paste it into public logs, analytics or documentation. Anyone it is forwarded to can view until it expires or is revoked. No write or management operations accept this capability. State the expiry when returning it.

Changing access mode revokes all previous share links. Switching back does not revive them. Restricted sites are excluded from gallery, sitemap and public OG/cover/download routes while preserving their saved gallery/search preferences and source bytes. Reopening public access restores those preferences. Changes affect future requests; they cannot retract files somebody already downloaded.

Owner browser access to a restricted site uses a short-lived, credential-bound viewer URL so relative scripts and assets work in the opaque sandbox. Do not distribute this owner viewer URL; create a named share link instead.

## Share cards and search

Sharing enhancement and search indexing both default off and are independent of gallery visibility. Preserve original source and never enable either without the user choosing it. Read settings with `node quickshare.js sharing SLUG --json`. On request, use `sharing SLUG --share-enabled true --title "Title" --description "Description" --cover ./cover.png`; cover is optional. Use `--indexable true` only when the author wants search visibility. `--share-enabled false` restores byte-for-byte original output. Original OG tags and noindex directives always win; explain any existing source restriction. Downloads retain original HTML.

## Limits and runtime

- A directory needs `index.html` or `index.md`. Limits: 100 files, 5 MB each, 8 MB combined (including rendered Markdown).
- CLI 1.5.0 and the web dashboard automatically split large publications into private chunks, including on Vercel. Keep the 5 MiB per-file / 8 MiB total limit. Do not upload directly to public storage or expose storage credentials. Refresh an older CLI if the server returns an upload-size error.
- Exclude secrets, dotfiles, source repositories, databases and node_modules. The CLI rejects symlinks. Do not upload unrelated files or install extra tools without authorization.
- Only static hosting is supported; there is no server-side Node/Python/PHP execution.
- Uploaded pages use an opaque sandbox origin. localStorage, authenticated requests to management APIs and Service Workers are unavailable.
- Relative static resources and ES modules work. Root-relative paths need a relative build base. Original Markdown remains downloadable as `index.md`.
- `--capture` is optional and requires the full repository installation; the standalone CLI does not provide it. Do not use it during basic installation.
- A single exported entry HTML from a directory can still depend on other site files; do not call it an offline single-file export.