@alipay/alipay-aipay 1.5.1 → 1.5.2

package/skill/references/normal/scripts/render_customer_message.mjs

@@ -554,126 +554,126 @@ function validateVariantInputShape(messageId, variantName, variables) {
 
 const managedEntrypoints = {
   'product.unsupported': {
-    command: 'node scripts/integration_message_runner.mjs product-unsupported --product-name <产品名>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" integration-message product-unsupported --product-name <产品名>',
     reason: '不支持产品拒绝引导必须由 runner 接收产品名后托管输出，禁止 jq/printf 管道直调 renderer。'
   },
   'product.clarify': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs product-clarify，或代码开发上下文执行 node ../normal/scripts/integration_message_runner.mjs product-clarify',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message product-clarify，或代码开发上下文使用同一入口执行 integration-message product-clarify',
     reason: '产品澄清属于通用托管消息，禁止用 printf/renderer 管道直接输出。'
   },
   'onboarding.enterprise.unsupported': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs enterprise-unsupported --variant <ONBOARDING_ONLY|FULL_PROCESS>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message enterprise-unsupported --variant <ONBOARDING_ONLY|FULL_PROCESS>',
     reason: '企业账号停止分支必须由 Onboarding runner 输出，禁止空 JSON 管道直调 renderer。'
   },
   'onboarding.windows.redirect': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs platform-entry',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message platform-entry',
     reason: 'Windows 产品开通入口必须由 runner 根据真实运行平台确定；非 Windows 不得输出该消息。'
   },
   'integration.start.confirm': {
-    command: 'node ../normal/scripts/integration_message_runner.mjs start-confirm --product-type <aipay|webpay|apppay> --project-path <absPath> --project-selection <CURRENT_PROJECT|OTHER_PROJECT|PREPARED_NEW_PROJECT> --language <language> --framework <framework>',
-    reason: '代码开发启动确认必须绑定 runner 同一次项目扫描的项目来源、代码状态和其他支付产品，禁止手写项目扫描事实。'
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" integration-message start-confirm --product-type <aipay|webpay|apppay> --project-path <absPath> --project-selection <CURRENT_PROJECT|OTHER_PROJECT|PREPARED_NEW_PROJECT> --language <language> --framework <framework>',
+    reason: '代码开发启动方案必须绑定 runner 同一次项目扫描的项目来源、代码状态和其他支付产品，禁止手写项目扫描事实。'
   },
   'integration.checklist.result': {
-    command: 'node ../normal/scripts/integration_message_runner.mjs checklist-result --variant <AIPAY|WEBPAY|APPPAY> --project-path <absPath> --scope-receipt <receipt> --overall-result <result> --failed-items <items> --manual-items <items> ...',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" integration-message checklist-result --variant <AIPAY|WEBPAY|APPPAY> --project-path <absPath> --scope-receipt <receipt> --overall-result <result> --failed-items <items> --manual-items <items> ...',
     reason: '最终 checklist 结论必须由 runner 统一接收最终证据并调用 renderer，同一次代码开发只输出一次。'
   },
   'integration.project_candidates.select': {
-    command: 'node ../normal/scripts/integration_message_runner.mjs locate-projects --base-path <absDir> --search-input <current|relativeSubdir|absDir> --format message',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" integration-message locate-projects --base-path <absDir> --search-input <current|relativeSubdir|absDir> --format message',
     reason: '项目候选目录必须由 runner 轻量定位项目标记后统一输出，禁止手写候选列表或扫描整个大目录。'
   },
   'onboarding.mcc.clarify': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs mcc-clarify --product-type <aipay|webpay|apppay>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message mcc-clarify --product-type <aipay|webpay|apppay>',
     reason: '产品已明确但用户尚未提供 MCC/经营描述时由 runner 绑定产品名称，禁止手写经营类目补问；检索无匹配时不得回到本消息。'
   },
   'onboarding.mcc.no_match': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs mcc-candidates --query <business-description> --product-type <aipay|webpay|apppay>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message mcc-candidates --query <business-description> --product-type <aipay|webpay|apppay>',
     reason: '用户已经提供经营描述但当前 MCC 表无确定匹配时，由 runner 输出独立恢复路径，禁止重新渲染初始 mcc-clarify 形成循环。'
   },
   'onboarding.mcc.candidates': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs mcc-candidates --query <business-description> --product-type <aipay|webpay|apppay>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message mcc-candidates --query <business-description> --product-type <aipay|webpay|apppay>',
     reason: '产品已明确且 MCC 存在多个相似候选时由 runner 绑定本地 MCC 表生成候选事实，禁止手写候选表。'
   },
   'onboarding.discovery.summary': {
-    command: 'node ../normal/scripts/onboarding_discovery_runner.mjs run --product-type <aipay|webpay|apppay> --sales-code <SALES_CODE>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-discovery run --product-type <aipay|webpay|apppay> --sales-code <SALES_CODE>',
     reason: '该 runner 执行本轮适用查询、校验原始脚本事实、输出唯一 DISCOVERY_RESULT envelope，并在同一次 stdout 生成摘要；禁止单独重放摘要。'
   },
   'onboarding.plan.confirm': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs mcc-resolve-plan --query <经营描述|MCC编码|MCC名称> --product-type <aipay|webpay|apppay>，或已持有唯一 MCC 事实时执行 plan-confirm --product-type <...> --mcc-code <...> --mcc-name <...> --mcc-qualification <...>',
-    reason: '方案确认必须由 runner 绑定本轮唯一 MCC 事实和产品变体生成，避免 Agent 用 jq/printf/管道手写 renderer 输入。'
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message mcc-resolve-plan --query <经营描述|MCC编码|MCC名称> --product-type <aipay|webpay|apppay>，或已持有唯一 MCC 事实时使用同一入口执行 onboarding-message plan-confirm --product-type <...> --mcc-code <...> --mcc-name <...> --mcc-qualification <...>',
+    reason: '方案展示必须由 runner 绑定本轮唯一 MCC 事实和产品变体生成，避免 Agent 用 jq/printf/管道手写 renderer 输入。'
   },
   'materials.category.collect': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs material-collect --category <signing|service|application> --state <INITIAL|PARTIAL|INVALID|APP_MOBILE_INITIAL> --product-type <aipay|webpay|apppay> [--missing-fields <字段列表>]',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message material-collect --category <signing|service|application> --state <INITIAL|PARTIAL|INVALID|APP_MOBILE_INITIAL> --product-type <aipay|webpay|apppay> [--missing-fields <字段列表>]',
     reason: '运行时禁止手写 categoryName/currentStatus/missingFields；runner 会归一化“签约资料”“AI 网页应用收款签约截图”“mobilePlatform”等常见别名后再调用 renderer。'
   },
   'service.create.summary': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs service-create-summary --service-name <name> --service-description <desc> --service-url <url> --service-pricing <amount> --service-schema <json>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message service-create-summary --service-name <name> --service-description <desc> --service-url <url> --service-pricing <amount> --service-schema <json>',
     reason: '服务创建摘要必须由 runner 接收已校验五项资料后托管输出，禁止 jq/printf 管道直调 renderer。'
   },
   'onboarding.write.confirm': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs service-update-confirm --session-summary <summary> --subject-summary <summary> --service-id <id> --service-name <name> --service-description <desc> --service-url <url> --service-pricing <amount> --service-schema <json>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message service-update-confirm --session-summary <summary> --subject-summary <summary> --service-id <id> --service-name <name> --service-description <desc> --service-url <url> --service-pricing <amount> --service-schema <json>',
     reason: '服务修改确认必须由 runner 固定产品和动作，只绑定当前服务修改摘要，禁止 Agent 自行拼 actionTypes。'
   },
   'signing.operation.result': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs signing-result --actual-status <status> [--fee-display <fee>] --next-action <action>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message signing-result --actual-status <status> [--fee-display <fee>] --next-action <action>',
     reason: '签约分支结果必须由 Onboarding runner 输出，避免直调 renderer 或手写状态。'
   },
   'service.operation.result': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs service-result --service-id <id> --actual-result <result>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message service-result --service-id <id> --actual-result <result>',
     reason: '服务分支结果必须由 Onboarding runner 输出，避免直调 renderer 或手写状态。'
   },
   'application.harmony.manual_create': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs application-harmony-manual-create',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message application-harmony-manual-create',
     reason: 'HarmonyOS 移动应用边界必须由 Onboarding runner 输出，禁止空 JSON 管道直调 renderer。'
   },
   'application.reuse.no_key': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs application-reuse-no-key --app-id <appId>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message application-reuse-no-key --app-id <appId>',
     reason: '复用应用缺公钥提示必须由 runner 绑定当前完整 appId 后输出。'
   },
   'application.operation.result': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs application-result --app-id <id> --actual-status <status> --next-action <action>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message application-result --app-id <id> --actual-status <status> --next-action <action>',
     reason: '应用分支结果必须由 Onboarding runner 输出，避免直调 renderer 或手写状态。'
   },
   'application.candidates.facts': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs application-candidates --application-type <WEBAPP|MOBILEAPP> --candidates-json <APP_CANDIDATES_JSON>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message application-candidates --application-type <WEBAPP|MOBILEAPP> --candidates-json <APP_CANDIDATES_JSON>',
     reason: '应用候选事实和适用选择提示必须由 runner 接收结构化候选数组并统一生成，禁止脚本或 Agent 拼接 Markdown 行。'
   },
   'application.candidate.select': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs application-candidates --application-type <WEBAPP|MOBILEAPP> --candidates-json <APP_CANDIDATES_JSON>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message application-candidates --application-type <WEBAPP|MOBILEAPP> --candidates-json <APP_CANDIDATES_JSON>',
     reason: '应用候选选择必须由 runner 绑定同一份结构化候选快照生成，禁止脚本或 Agent 单独调用。'
   },
   'service.candidates.facts': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs service-candidates --candidates-json <SERVICE_CANDIDATES_JSON>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message service-candidates --candidates-json <SERVICE_CANDIDATES_JSON>',
     reason: '服务候选事实和适用选择提示必须由 runner 接收结构化候选数组并统一生成，禁止脚本或 Agent 拼接 Markdown 行。'
   },
   'service.candidate.select': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs service-candidates --candidates-json <SERVICE_CANDIDATES_JSON>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message service-candidates --candidates-json <SERVICE_CANDIDATES_JSON>',
     reason: '服务候选选择必须由 runner 绑定同一份结构化候选快照生成，禁止脚本或 Agent 单独调用。'
   },
   'process.partial_result': {
-    command: 'node ../normal/scripts/onboarding_message_runner.mjs closeout --product-name <name> --process-result-title <title> --integration-result <result> --signing-result <result> --service-result <result> --application-result <result> --remaining-actions <actions> --next-flow-reminder <reminder>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message closeout --product-name <name> --process-result-title <title> --integration-result <result> --signing-result <result> --service-result <result> --application-result <result> --remaining-actions <actions> --next-flow-reminder <reminder>',
     reason: '产品开通 Step 6 最终收口必须由 runner 统一合并代码开发状态、产品开通分支状态、最近应用分支结果和上线前关键点；禁止 Agent 手写、缩写或删减 AI 网页应用收款限制引导。'
   },
   'sandbox.android.client': {
-    command: 'node ../normal/scripts/integration_message_runner.mjs sandbox-android-client',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" integration-message sandbox-android-client',
     reason: '沙箱支付宝 Android 下载说明必须由 Integration runner 输出，避免 Agent 为静态消息直调 renderer 或追加 shell 过滤。'
   },
   'auth.page': {
-    command: 'bash modules/scripts/auth.sh init --defer-open --scope <scope> --sales-code <code> --mcc-code <code> --product-name <name> --mcc-name <name>，页面 stdout 独立送达后执行 bash modules/scripts/auth.sh open ...',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" auth init --defer-open --scope <scope> --sales-code <code> --mcc-code <code> --product-name <name> --mcc-name <name>，页面 stdout 独立送达后使用同一入口执行 auth open ...',
     reason: '授权页必须由 auth.sh 绑定本次 CLI deviceCode、固定产品/MCC 上下文和 URL 白名单；受控 opener 必须在页面消息独立送达后执行，后续 auth.pending 不得合并到同一条对客回复。',
     allowedCallers: ['auth.sh']
   },
   'auth.pending': {
-    command: 'bash modules/scripts/auth.sh wait|confirm [--scope <scope> --sales-code <code> --mcc-code <code> --product-name <name> --mcc-name <name>]',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" auth wait|confirm [--scope <scope> --sales-code <code> --mcc-code <code> --product-name <name> --mcc-name <name>]',
     reason: '授权待完成状态只能来自 auth.sh 有限轮询耗尽或登记肯定回复后的单次实际查询。',
     allowedCallers: ['auth.sh']
   },
   'auth.expired': {
-    command: 'bash modules/scripts/auth.sh confirm [--scope <scope> --sales-code <code> --mcc-code <code> --product-name <name> --mcc-name <name>]',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" auth confirm [--scope <scope> --sales-code <code> --mcc-code <code> --product-name <name> --mcc-name <name>]',
     reason: '授权过期状态只能来自本轮 auth.sh confirm 对 CLI 授权状态的实际查询。',
     allowedCallers: ['auth.sh']
   },
   'auth.mismatch': {
-    command: 'bash modules/scripts/auth.sh mismatch --defer-open [--scope <scope> --sales-code <code> --mcc-code <code> --product-name <name> --mcc-name <name>]，页面 stdout 独立送达后执行 bash modules/scripts/auth.sh open ...',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" auth mismatch --defer-open [--scope <scope> --sales-code <code> --mcc-code <code> --product-name <name> --mcc-name <name>]，页面 stdout 独立送达后使用同一入口执行 auth open ...',
     reason: 'scope 或 MCC 不匹配必须由 auth.sh 执行 logout 与重新授权链路，不能只输出提示。',
     allowedCallers: ['auth.sh']
   },
@@ -703,22 +703,22 @@ const managedEntrypoints = {
     allowedCallers: ['error_handler.sh']
   },
   'application.key.page': {
-    command: 'bash modules/scripts/app.sh key --defer-open <appId> <publicKey>，页面 stdout 独立送达后执行 bash modules/scripts/app.sh open-key-page <appId>',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" app key --defer-open <appId> <publicKey>，页面 stdout 独立送达后使用同一入口执行 app open-key-page <appId>',
     reason: '公钥确认页必须由 app.sh 调用 createKeyConfirmPage 后校验官方 URL；受控 opener 必须在页面消息独立送达后执行，后续 application.key.pending 不得合并到同一条对客回复。',
     allowedCallers: ['app.sh']
   },
   'application.key.pending': {
-    command: 'bash modules/scripts/app.sh verify-key <appId> [publicKey] 或 verify-key-and-audit <appId> [publicKey]',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" app verify-key <appId> [publicKey] 或使用同一入口执行 app verify-key-and-audit <appId> [publicKey]',
     reason: '公钥确认超时提示只能来自 app.sh 完成有限次数的实际公钥状态查询后。',
     allowedCallers: ['app.sh']
   },
   'key_tool.download.result': {
-    command: 'bash modules/scripts/download_key_tool.sh [downloadDir]',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" key-tool [downloadDir]',
     reason: '密钥工具下载成功消息必须来自下载脚本的实际下载路径、跳转校验和安装包校验结果。',
     allowedCallers: ['download_key_tool.sh']
   },
   'key_tool.download.fallback': {
-    command: 'bash modules/scripts/download_key_tool.sh [downloadDir]',
+    command: 'node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" key-tool [downloadDir]',
     reason: '密钥工具下载失败或不支持时必须由下载脚本统一给出官方手动下载兜底。',
     allowedCallers: ['download_key_tool.sh']
   }
@@ -837,6 +837,9 @@ export function validateCatalog() {
   if (typeof inputHints.confirmInputHint !== 'string' || !inputHints.confirmInputHint) {
     errors.push('缺少统一确认输入提示');
   }
+  if (typeof inputHints.planAdjustmentHint !== 'string' || !inputHints.planAdjustmentHint) {
+    errors.push('缺少统一方案调整提示');
+  }
   if (typeof inputHints.authorizationCompletionInputHint !== 'string' || !inputHints.authorizationCompletionInputHint) {
     errors.push('缺少统一授权完成输入提示');
   }
@@ -870,11 +873,11 @@ export function validateCatalog() {
     if (message.blocking && allowedReplies.length > 0 && !['confirm', 'authorizationComplete', 'publicKeyConfirmationComplete', 'complete'].includes(message.inputHintType)) {
       errors.push(`${message.messageId}: 阻塞回复消息必须声明合法 inputHintType`);
     }
-    if (message.postRenderHintType !== undefined && message.postRenderHintType !== 'scanReturn') {
+    if (message.postRenderHintType !== undefined && !['planAdjustment', 'scanReturn'].includes(message.postRenderHintType)) {
       errors.push(`${message.messageId}: postRenderHintType 无效`);
     }
-    if (message.postRenderHintType === 'scanReturn' && (message.blocking || JSON.stringify(message.allowedReplies || []) !== '[]')) {
-      errors.push(`${message.messageId}: scanReturn 只允许用于非阻塞且无回复枚举的消息`);
+    if (message.postRenderHintType && (message.blocking || JSON.stringify(message.allowedReplies || []) !== '[]')) {
+      errors.push(`${message.messageId}: postRenderHintType 只允许用于非阻塞且无回复枚举的消息`);
     }
     for (const id of message.requiredPolicyIds || []) {
       if (!policyIds.has(id)) errors.push(`${message.messageId}: 未知 policyId ${id}`);
@@ -1247,9 +1250,15 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
     if (!hint) throw new Error(`缺少 ${hintKey}`);
     rendered = `${rendered}\n\n${hint}`;
   }
-  if (message.postRenderHintType === 'scanReturn') {
-    const hint = catalog.interactionPrompts?.scanReturnHint;
-    if (!hint) throw new Error('缺少 scanReturnHint');
+  if (message.postRenderHintType) {
+    const hintKeys = {
+      planAdjustment: 'planAdjustmentHint',
+      scanReturn: 'scanReturnHint'
+    };
+    const hintKey = hintKeys[message.postRenderHintType];
+    if (!hintKey) throw new Error(`${messageId} 的 postRenderHintType 非法`);
+    const hint = catalog.interactionPrompts?.[hintKey];
+    if (!hint) throw new Error(`缺少 ${hintKey}`);
     rendered = `${rendered}\n\n${hint}`;
   }
   emitMessageMetric(messageId, variantName, variables, telemetryContext);
@@ -1293,10 +1302,10 @@ async function readStdin() {
   return input.trim() ? JSON.parse(input) : {};
 }
 
-function inputJsonArg() {
-  const index = process.argv.indexOf('--input-json');
+function inputJsonArg(argv = process.argv) {
+  const index = argv.indexOf('--input-json');
   if (index < 0) return null;
-  const value = process.argv[index + 1];
+  const value = argv[index + 1];
   if (value === undefined || value.startsWith('--')) throw new Error('参数 --input-json 缺少取值');
   try {
     return JSON.parse(value);
@@ -1305,42 +1314,42 @@ function inputJsonArg() {
   }
 }
 
-async function main() {
-  if (process.argv.includes('--check-catalog')) {
+export async function runRenderCustomerMessageCli(argv = process.argv) {
+  if (argv.includes('--check-catalog')) {
     const errors = validateCatalog();
     if (errors.length) throw new Error(errors.join('\n'));
     console.log('customer message catalog: OK');
     return;
   }
-  if (process.argv.includes('--validate-authorization-context')) {
+  if (argv.includes('--validate-authorization-context')) {
     validateAuthorizationContext(await readStdin());
     console.log('authorization context: OK');
     return;
   }
-  if (process.argv.includes('--build-authorization-url')) {
+  if (argv.includes('--build-authorization-url')) {
     console.log(buildAuthorizationUrl(await readStdin()));
     return;
   }
-  if (process.argv.includes('--schema')) {
-    const schemaIndex = process.argv.indexOf('--schema');
-    const messageId = process.argv[2] === '--schema' ? process.argv[schemaIndex + 1] : process.argv[2];
-    const variantIndex = process.argv.indexOf('--variant');
-    const variant = variantIndex >= 0 ? process.argv[variantIndex + 1] : 'DEFAULT';
+  if (argv.includes('--schema')) {
+    const schemaIndex = argv.indexOf('--schema');
+    const messageId = argv[2] === '--schema' ? argv[schemaIndex + 1] : argv[2];
+    const variantIndex = argv.indexOf('--variant');
+    const variant = variantIndex >= 0 ? argv[variantIndex + 1] : 'DEFAULT';
     if (!messageId || messageId.startsWith('--')) throw new Error('用法: render_customer_message.mjs --schema <messageId> [--variant NAME]');
     console.log(JSON.stringify(getMessageSchema(messageId, variant), null, 2));
     return;
   }
-  const messageId = process.argv[2];
-  const variantIndex = process.argv.indexOf('--variant');
-  const variant = variantIndex >= 0 ? process.argv[variantIndex + 1] : 'DEFAULT';
+  const messageId = argv[2];
+  const variantIndex = argv.indexOf('--variant');
+  const variant = variantIndex >= 0 ? argv[variantIndex + 1] : 'DEFAULT';
   if (!messageId) throw new Error('用法: render_customer_message.mjs <messageId> [--variant NAME]');
   assertManagedCliAllowed(messageId);
-  const variables = inputJsonArg() ?? await readStdin();
+  const variables = inputJsonArg(argv) ?? await readStdin();
   console.log(renderMessageWithFallback(messageId, variant, variables));
 }
 
 if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-  main().catch((error) => {
+  runRenderCustomerMessageCli().catch((error) => {
     console.error('当前步骤的标准消息无法安全生成，已停止后续动作。请按 MESSAGE_RENDER_ERROR 的具体原因修正输入；若消息目录或脚本缺失，再检查 Skill 文件完整性。');
     console.error(`MESSAGE_RENDER_ERROR:${error.message}`);
     process.exitCode = 1;

package/skill/references/normal/scripts/runtime.mjs

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+
+import { spawnSync } from 'node:child_process';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+
+const scriptDir = path.dirname(fileURLToPath(import.meta.url));
+const referencesDir = path.resolve(scriptDir, '../..');
+const flowDirs = Object.freeze({
+  integration: path.join(referencesDir, 'integration'),
+  onboarding: path.join(referencesDir, 'onboarding')
+});
+
+const shellEntrypoints = Object.freeze({
+  sandbox: ['integration', 'sandbox_config.sh'],
+  auth: ['onboarding', 'auth.sh'],
+  'key-tool': ['onboarding', 'download_key_tool.sh'],
+  screenshots: ['onboarding', 'upload_screenshots.sh'],
+  sign: ['onboarding', 'ar_sign_apply.sh'],
+  service: ['onboarding', 'service.sh'],
+  app: ['onboarding', 'app.sh']
+});
+
+const nodeEntrypoints = Object.freeze({
+  telemetry: ['telemetry.mjs', 'runTelemetryCli'],
+  flow: ['flow_loader.mjs', 'runFlowCli'],
+  'onboarding-message': ['onboarding_message_runner.mjs', 'runOnboardingMessageCli'],
+  'integration-message': ['integration_message_runner.mjs', 'runIntegrationMessageCli'],
+  render: ['render_customer_message.mjs', 'runRenderCustomerMessageCli'],
+  reply: ['interaction_reply.mjs', 'runInteractionReplyCli'],
+  'integration-context': ['integration_context_runner.mjs', 'runIntegrationContextCli'],
+  'onboarding-discovery': ['onboarding_discovery_runner.mjs', 'runOnboardingDiscoveryCli'],
+  'onboarding-recovery': ['onboarding_recovery_runner.mjs', 'runOnboardingRecoveryCli']
+});
+
+export const runtimeDomains = Object.freeze([
+  'self-update',
+  ...Object.keys(nodeEntrypoints),
+  'env',
+  ...Object.keys(shellEntrypoints),
+  'a2m'
+]);
+
+function cliArgv(args) {
+  return [process.execPath, fileURLToPath(import.meta.url), ...args];
+}
+
+function runShell(script, cwd, args) {
+  const result = spawnSync('bash', [script, ...args], {
+    cwd,
+    env: process.env,
+    stdio: 'inherit',
+    shell: false
+  });
+  if (result.error) throw result.error;
+  process.exitCode = Number.isInteger(result.status) ? result.status : 1;
+}
+
+function shellPath(domain) {
+  const [flow, basename] = shellEntrypoints[domain];
+  const cwd = flowDirs[flow];
+  return [path.join(cwd, 'modules/scripts', basename), cwd];
+}
+
+function runtimeError(domain, error) {
+  const message = String(error?.message || error).replace(/[\r\n]/gu, ' ');
+  if (domain === 'self-update') return process.stderr.write('SELF_UPDATE:CHECK_FAILED\n');
+  if (domain === 'render') {
+    process.stderr.write('当前步骤的标准消息无法安全生成，已停止后续动作。请按 MESSAGE_RENDER_ERROR 的具体原因修正输入；若消息目录或脚本缺失，再检查 Skill 文件完整性。\n');
+    process.stderr.write(`MESSAGE_RENDER_ERROR:${message}\n`);
+    return;
+  }
+  const prefixes = {
+    flow: 'FLOW_LOADER_ERROR:',
+    'onboarding-message': 'ONBOARDING_MESSAGE_ERROR:',
+    'integration-message': 'INTEGRATION_MESSAGE_ERROR:',
+    reply: 'ALIPAY_AIPAY_INTERNAL:REPLY_VALIDATION_ERROR=',
+    'integration-context': 'ALIPAY_AIPAY_INTERNAL:INTEGRATION_CONTEXT_ERROR=',
+    'onboarding-discovery': 'ALIPAY_AIPAY_INTERNAL:DISCOVERY_RUNNER_ERROR=',
+    'onboarding-recovery': 'ALIPAY_AIPAY_INTERNAL:RECOVERY_RUNNER_ERROR=',
+    a2m: 'PYTHON_RUNNER_ERROR:'
+  };
+  process.stderr.write(`${prefixes[domain] || 'ALIPAY_AIPAY_INTERNAL:RUNTIME_ERROR='}${message}\n`);
+}
+
+async function dispatch(domain, args) {
+  if (shellEntrypoints[domain]) {
+    const [script, cwd] = shellPath(domain);
+    return runShell(script, cwd, args);
+  }
+  if (nodeEntrypoints[domain]) {
+    const [moduleName, exportName] = nodeEntrypoints[domain];
+    const result = await (await import(`./${moduleName}`))[exportName](cliArgv(args));
+    if (domain === 'telemetry') process.exitCode = result;
+    return;
+  }
+  if (domain === 'env') {
+    const { isWindowsPlatform } = await import('./platform_compat.mjs');
+    if (!isWindowsPlatform()) {
+      return runShell(path.join(scriptDir, 'alipay_cli_env.sh'), path.dirname(scriptDir), args);
+    }
+    const { runAlipayCliEnvCli } = await import('./alipay_cli_env.mjs');
+    return runAlipayCliEnvCli(cliArgv(args));
+  }
+  if (domain === 'self-update') {
+    const { runSelfUpdateCli } = await import('./self_update.mjs');
+    const outcome = runSelfUpdateCli(cliArgv(args));
+    const version = outcome.version ? `=${outcome.version.raw}` : '';
+    process.stderr.write(`SELF_UPDATE:${outcome.kind}${version}\n`);
+    return;
+  }
+  if (domain === 'a2m') {
+    const { runPythonScriptCli } = await import('./python_script_runner.mjs');
+    const script = path.join(flowDirs.integration, 'modules/scripts/local_402_sandbox_pay.py');
+    return runPythonScriptCli(cliArgv([script, ...args]));
+  }
+  throw new Error(`用法: runtime.mjs <${runtimeDomains.join('|')}> ...`);
+}
+
+export async function runRuntimeCli(argv = process.argv) {
+  const domain = argv[2] || '';
+  try {
+    await dispatch(domain, argv.slice(3));
+  } catch (error) {
+    runtimeError(domain, error);
+    process.exitCode = domain === 'self-update' ? 0 : 1;
+  }
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  runRuntimeCli();
+}

package/skill/references/normal/scripts/self_update.mjs

@@ -127,8 +127,8 @@ function reportOutcome(outcome) {
   process.stderr.write(`SELF_UPDATE:${outcome.kind}${version}\n`);
 }
 
-function main() {
-  const skillDir = parseArgs(process.argv);
+export function runSelfUpdateCli(argv = process.argv) {
+  const skillDir = parseArgs(argv);
   const local = readLocalVersion(skillDir);
 
   if (!local) {
@@ -153,8 +153,10 @@ function main() {
   return { kind: installed ? 'VERIFY_FAILED' : 'INSTALL_FAILED' };
 }
 
-try {
-  reportOutcome(main());
-} catch {
-  reportOutcome({ kind: 'CHECK_FAILED' });
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  try {
+    reportOutcome(runSelfUpdateCli());
+  } catch {
+    reportOutcome({ kind: 'CHECK_FAILED' });
+  }
 }

package/skill/references/normal/scripts/telemetry.mjs

@@ -449,7 +449,7 @@ export function emitStageMetricAsync(stage, context = {}, env = process.env) {
 export function emitMessageMetric(messageId, variantName, variables = {}, context = {}) {
   try {
     const event = messageMetricEvent(messageId, variantName, variables, context);
-    if (event?.stage === 'run.terminal' && telemetryEnabled()) updateExistingRunStateFromEvent(event);
+    if (event?.stage === 'run.terminal') updateExistingRunStateFromEvent(event);
     return emitMetricEvent(event, { stream: null });
   } catch {
     return false;
@@ -458,7 +458,6 @@ export function emitMessageMetric(messageId, variantName, variables = {}, contex
 
 export function emitTerminalMetric(context = {}) {
   try {
-    if (!telemetryEnabled()) return false;
     const event = stageMetricEvent('run.terminal', context);
     if (!event) return false;
     updateExistingRunStateFromEvent(event);
@@ -1251,6 +1250,32 @@ function emitTelemetryError(error) {
 export async function runTelemetryCli(argv = process.argv) {
   try {
     const { command, args } = parseCliArgs(argv);
+    if (command === 'start-run') {
+      assertCliArgs(args, new Set(['root-intent', 'product-type', 'run-id']), 0);
+      const state = createOrReuseRunState(args);
+      if (!writeRunState(state) && telemetryEnabled(process.env)) {
+        recordLocalTelemetryFailure('LOCAL_RUN_STATE_WRITE_FAILED', 'failed to write local telemetry run state');
+      }
+      if (telemetryEnabled(process.env)) {
+        const event = stageMetricEvent('run.intent_detected', {
+          runId: state.run_id,
+          rootIntent: state.root_intent,
+          productType: state.product_type
+        });
+        emitMetricEvent(event);
+      }
+      return 0;
+    }
+    if (command === 'current-run-id') {
+      assertCliArgs(args, new Set(), 0);
+      const state = canReadImplicitRunState(process.env) ? readRunState(process.env) : null;
+      if (state?.run_id) {
+        process.stderr.write(`${internalPrefix}RUN_ID=${state.run_id}\n`);
+      } else {
+        process.stderr.write(`${internalPrefix}RUN_ID_MISSING=true\n`);
+      }
+      return 0;
+    }
     if (command === 'upload-status' && args._.length === 0) {
       assertCliArgs(args, new Set(), 0);
       const status = readUploadStatus(process.env) || { schema_ver: 1, status: 'unknown' };
@@ -1280,30 +1305,6 @@ export async function runTelemetryCli(argv = process.argv) {
       return 0;
     }
     if (!telemetryEnabled(process.env)) return 0;
-    if (command === 'start-run') {
-      assertCliArgs(args, new Set(['root-intent', 'product-type', 'run-id']), 0);
-      const state = createOrReuseRunState(args);
-      if (!writeRunState(state)) {
-        recordLocalTelemetryFailure('LOCAL_RUN_STATE_WRITE_FAILED', 'failed to write local telemetry run state');
-      }
-      const event = stageMetricEvent('run.intent_detected', {
-        runId: state.run_id,
-        rootIntent: state.root_intent,
-        productType: state.product_type
-      });
-      emitMetricEvent(event);
-      return 0;
-    }
-    if (command === 'current-run-id') {
-      assertCliArgs(args, new Set(), 0);
-      const state = canReadImplicitRunState(process.env) ? readRunState(process.env) : null;
-      if (state?.run_id) {
-        process.stderr.write(`${internalPrefix}RUN_ID=${state.run_id}\n`);
-      } else {
-        process.stderr.write(`${internalPrefix}RUN_ID_MISSING=true\n`);
-      }
-      return 0;
-    }
     if (command !== 'stage' || args._.length !== 1) {
       emitTelemetryError(new Error('invalid telemetry arguments'));
       return 0;

package/skill/references/normal/self-update.md

@@ -3,10 +3,10 @@
 根 `SKILL.md` 是跨 Agent 的最小启动器。本次 Agent 对话首次使用 `alipay-aipay` 时，必须在读取 `references/runtime-entry.md`、flow、模块、消息目录或业务脚本前只检查一次版本。执行前把根 `SKILL.md` 所在目录解析为规范化绝对路径 `<SKILL_DIR>`，并在当前 Agent 上下文记录一次性事实 `ALIPAY_AIPAY_SELF_UPDATE_CHECKED=true`；不写文件、不跨对话保存，也不是业务进度。同一对话内后续根流程、确认、补材料、候选选择、错误恢复、中断后继续、重复读取本 Skill 和 Full Process 子流程衔接均不重查。`<SKILL_DIR>` 是执行时替换的路径占位符，固定命令为：
 
 ```text
-node "<SKILL_DIR>/references/normal/scripts/self_update.mjs" check --skill-dir "<SKILL_DIR>"
+node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" self-update check --skill-dir "<SKILL_DIR>"
 ```
 
-`<SKILL_DIR>` 必须是刚触发的本份 `SKILL.md` 所在目录，且该目录包含 `SKILL.md`、`VERSION` 和 `references/runtime-entry.md`；不得换成 Agent 启动目录、用户项目目录、用户 Home、npm 包源码根或另一份 Skill 副本。禁止把固定命令改写成 shell 变量赋值、命令替换或依赖 Bash、PowerShell、CMD 的专属语法。若执行器支持设置 workdir，也可以从本文所在目录 `references/normal/` 执行 `node scripts/self_update.mjs check`；两种写法必须绑定同一份当前 Skill。
+`<SKILL_DIR>` 必须是刚触发的本份 `SKILL.md` 所在目录，且该目录包含 `SKILL.md`、`VERSION` 和 `references/runtime-entry.md`；不得换成 Agent 启动目录、用户项目目录、用户 Home、npm 包源码根或另一份 Skill 副本。禁止把固定命令改写成 shell 变量赋值、命令替换、相对路径或依赖 Bash、PowerShell、CMD 的专属语法；只允许执行上方统一 runtime 单命令。
 
 结果与规则：
 

package/skill/references/normal/telemetry.md

@@ -5,21 +5,21 @@
 ## 运行契约
 
 - 固定 stage 枚举、Yuyan 字段和低敏维度以 `scripts/telemetry.mjs` 的 `approvedStages`、事件构造器和测试为准。
-- `start-run` 创建或复用 `run_id`；动作 runner/script 使用异步子进程记录 stage。缺少 run、遥测关闭、落盘失败、网络失败和非 2xx 都不得改变业务 stdout、退出语义或 flow 转移。
+- `start-run` 始终创建或复用当前流程 `run_id`；该私有 run context 是 alipay-cli `PLATFORM_ID` 和终态生命周期的运行事实，不依赖事件采集开关。动作 runner/script 在遥测开启时使用异步子进程记录 stage。缺少 run、遥测关闭、落盘失败、网络失败和非 2xx 都不得改变业务 stdout、退出语义或 flow 转移。
 - 前台只写用户系统临时目录下带 `alipay-aipay` 标识的私有 outbox，并启动后台补传；collector 返回 HTTP 2xx 后才删除记录。维护/测试进程不复用默认 run state，默认不远端上传。
-- `PLATFORM_ID` 必须等于当前 `run_id`；模型维度只读 `AIPAY_MODEL`，禁止读取用户项目通用 `MODEL` 推断。
+- `PLATFORM_ID` 必须等于当前流程 `run_id`，遥测开关不得令其缺失或改变；模型维度只读 `AIPAY_MODEL`，禁止读取用户项目通用 `MODEL` 推断。
 - 遥测内部行统一使用 `ALIPAY_AIPAY_INTERNAL:` 前缀，禁止对客。
 
 ## Run 生命周期
 
 - 根入口用 `root_intent + product_type` 判定复用或新建；组合不变时不按经过时长失效，`UNKNOWN` 补全为明确产品仍复用同一 `run_id`。只有明确换产品、切换根意图或已有 run 终态才重建；用户只说“重新开始/重新走流程/作废本轮流程”但组合没有变化时继续复用。
-- 若宿主提供 `COZE_PROJECT_ID`、`MEOO_PROJECT_ID`，或 `MIAODA` 环境下的 `VITE_APP_ID`/`PLATFORM_ID`，新建 run 直接使用该项目 ID。当前宿主项目 ID 与已有状态不兼容时静默跳过不兼容事件且不改写 run state。
+- 若宿主提供 `COZE_PROJECT_ID`、`MEOO_PROJECT_ID`，或 `MIAODA` 环境下的 `VITE_APP_ID`/`PLATFORM_ID`，新建 run 优先使用该项目 ID，不得被显式 run ID 或本地生成值覆盖。当前宿主项目 ID 与已有状态不兼容时静默跳过不兼容事件且不改写 run state。
 - `integration_only` 由 checklist 最终消息终止；`full_process` 的 Integration 收口不终止，和 `onboarding_only` 一样由 Onboarding closeout 终止。
-- 查看当前主键只使用 `current-run-id`，不得为查看而新建 run。业务脚本继续继承 `PLATFORM_ID=<run_id>`；Agent 不手写环境变量前缀或改写 MCP payload。
+- 查看当前主键只使用 `current-run-id`，不得为查看而新建 run。关闭遥测只停止 `METRIC_EVENT`、outbox、上传和 flush，不停止 run context 的创建、读取与终态记账；业务脚本继续继承 `PLATFORM_ID=<run_id>`。Agent 不手写环境变量前缀或改写 MCP payload。
 
 ## 诊断与补传
 
-`node scripts/telemetry.mjs upload-status` 只读取内部诊断状态。网络类失败且 outbox 有积压时，先执行 `node scripts/telemetry.mjs permissioned-flush-needed`；只有内部事实为 `PERMISSIONED_FLUSH_NEEDED=true` 时才申请一次可复用联网权限运行 `node scripts/telemetry.mjs flush-outbox`。同一 Agent 会话只请求一次；已取得权限后可在后续阶段旁路触发同一异步命令。`flush-outbox` 只启动后台补传并立即返回；用户拒绝、后台失败或非 2xx 都保留 outbox 并继续业务。collector HTTP 结果、失败或待重试结果不得作为业务转移或完成条件。
+`node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" telemetry upload-status` 只读取内部诊断状态。网络类失败且 outbox 有积压时，先执行 `node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" telemetry permissioned-flush-needed`；只有内部事实为 `PERMISSIONED_FLUSH_NEEDED=true` 时才申请一次可复用联网权限运行 `node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" telemetry flush-outbox`。同一 Agent 会话只请求一次；已取得权限后可在后续阶段旁路触发同一异步命令。`flush-outbox` 只启动后台补传并立即返回；用户拒绝、后台失败或非 2xx 都保留 outbox 并继续业务。collector HTTP 结果、失败或待重试结果不得作为业务转移或完成条件。
 
 ## 修改要求