@alipay/alipay-aipay 1.6.5-beta → 1.6.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alipay/alipay-aipay",
-  "version": "1.6.5-beta",
+  "version": "1.6.5",
   "description": "支付宝 AI 付 Skill 安装包 - 优先安装 Agent Skill，并在 macOS/Linux 后台准备用户级 CLI 工具",
   "type": "module",
   "bin": {

package/skill/VERSION

@@ -1 +1 @@
-1.6.5-beta
+1.6.5

package/skill/references/normal/scripts/onboarding_message_runner.mjs

@@ -588,8 +588,10 @@ function renderApplicationCandidates(applicationType, applicationCandidates, sel
   if (applicationCandidates.length === 0) return facts;
   const selectionVariant = `${onlineCount === 0 ? 'PENDING' : 'ONLINE'}_${applicationType === 'WEBAPP' ? 'WEB' : 'MOBILE'}_OR_NEW`;
   const selection = renderMessage('application.candidate.select', selectionVariant, {});
-  if (selectionState === 'initial') return `${facts}\n\n${selection}`;
-  return `${facts}\n\n${renderMessage('application.candidate.invalid', 'DEFAULT', {})}\n\n${selection}`;
+  const message = selectionState === 'initial'
+    ? `${facts}\n\n${selection}`
+    : `${facts}\n\n${renderMessage('application.candidate.invalid', 'DEFAULT', {})}\n\n${selection}`;
+  return message;
 }
 
 async function runApplicationCandidates(args) {
@@ -605,7 +607,10 @@ async function runApplicationCandidates(args) {
   if (selectionState === 'invalid' && applicationCandidates.length === 0) {
     throw new Error('应用候选为空时不得使用 invalid 选择状态');
   }
-  return renderApplicationCandidates(applicationType, applicationCandidates, selectionState);
+  const message = renderApplicationCandidates(applicationType, applicationCandidates, selectionState);
+  return applicationCandidates.length === 0
+    ? message
+    : requireCustomerMessageDelivery('application.candidate.select', message);
 }
 
 async function runServiceCandidates(args) {

package/skill/references/normal/scripts/telemetry.mjs

@@ -364,15 +364,16 @@ function outboxFilename(event) {
 
 function writeOutboxRecord(event, env = process.env) {
   try {
-    if (!event) return '';
+    const normalizedEvent = normalizeMetricEvent(event);
+    if (!normalizedEvent) return '';
     const dir = outboxDir(env);
     ensurePrivateDir(dir);
-    const filename = outboxFilename(event);
+    const filename = outboxFilename(normalizedEvent);
     const finalPath = path.join(dir, filename);
     if (!writePrivateJson(finalPath, {
       schema_ver: 1,
       created_at: Date.now(),
-      event
+      event: normalizedEvent
     })) return '';
     pruneOutbox(env);
     return finalPath;
@@ -658,21 +659,23 @@ function writeMetricEventMarker(event, stream) {
 }
 
 export function emitMetricEvent(event, { env = process.env, stream = process.stderr, upload = true } = {}) {
-  if (!telemetryEnabled(env) || !event) return false;
-  writeMetricEventMarker(event, stream);
+  if (!telemetryEnabled(env)) return false;
+  const normalizedEvent = normalizeMetricEvent(event);
+  if (!normalizedEvent) return false;
+  writeMetricEventMarker(normalizedEvent, stream);
   if (!upload) return true;
   if (telemetryCaptureOnly(env)) {
-    if (writeOutboxRecord(event, env)) return true;
+    if (writeOutboxRecord(normalizedEvent, env)) return true;
     recordLocalTelemetryFailure('LOCAL_OUTBOX_WRITE_FAILED', 'outbox write failed', env);
     return false;
   }
   if (!telemetryUploadEnabled(env)) return true;
-  const queuedFile = writeOutboxRecord(event, env);
+  const queuedFile = writeOutboxRecord(normalizedEvent, env);
   if (!queuedFile) {
     recordLocalTelemetryFailure('LOCAL_OUTBOX_WRITE_FAILED', 'outbox write failed', env);
     return false;
   }
-  scheduleQueuedSyncLogUpload(event, queuedFile, env);
+  scheduleQueuedSyncLogUpload(normalizedEvent, queuedFile, env);
   return true;
 }
 

package/skill/references/onboarding/flow.md

@@ -266,7 +266,7 @@ Step 5 直接使用对应 phase 的完整命令；仅出现脚本异常、需要
 
 Step 3.1 通常已在同一次 stdout 展示三分支摘要；网站支付和 APP 支付的服务市场固定为“无需处理”，查询失败显示“查询失败”。本地权限未恢复时没有摘要，只消费最新失败 envelope，禁止补写或重放。进入本阶段后只消费同一 `DISCOVERY_RESULT`，不得再次调用 `discovery-summary`、手写或重复输出摘要。
 
-轮到服务或应用时，只有 `query_status=SUCCESS` 且 `candidates` 为数组，才用以下 runner 基于同一快照生成候选事实和选择提示；stdout 是唯一正文，禁止提前展示、手工拼表、压缩、拆分或改写：
+轮到服务或应用时，只有 `query_status=SUCCESS` 且 `candidates` 为数组，才用以下 runner 基于同一快照生成候选事实和选择提示；stdout 是唯一正文，禁止提前展示、手工拼表、压缩、拆分或改写。应用候选存在上线或未上线记录时，runner 必须产生且仅产生一个 `CUSTOMER_MESSAGE_DELIVERY_REQUIRED=application.candidate.select`；命令后的下一动作先将 stdout 原文送达，不得添加标题、提示、风险说明、前后缀或改写，然后立即等待用户选择：
 
 ```bash
 # 仅按量付费，轮到服务类别时
@@ -280,7 +280,7 @@ node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message appl
 node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" onboarding-message application-candidates --application-type "$APPLICATION_TYPE" --candidates-json "$APP_CANDIDATES_JSON" --selection-state invalid
 ```
 
-只有成功分支的实际 `candidates.length === 0` 才直接进入新建资料；非空时发送 runner stdout 并等待选择。`QUERY_FAILED`、候选缺失或类型非法均阻断该分支，禁止候选 runner、创建资料和写动作，不影响其他成功分支。
+只有成功分支的实际 `candidates.length === 0` 才直接进入新建资料；非空时必须校验唯一交付 marker、原文送达 runner stdout 并等待选择。缺少、重复或错误 marker 时不得手写替代消息。`QUERY_FAILED`、候选缺失或类型非法均阻断该分支，禁止候选 runner、创建资料和写动作，不影响其他成功分支。
 
 服务候选非空时，`新建` 可同条附五项资料；应用候选非空时可同条提交 `新建` 和完整应用材料。缺失或错误时保留新建意图并只补对应项；无效选择执行同类别 `invalid` 命令，原文送达后等待，禁止写操作。空候选禁用默认或猜值。
 
@@ -458,7 +458,7 @@ node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" app audit --product-typ
 | 内部终态 | 自动转移（每类恢复最多一次） |
 |---|---|
 | `APPLICATION_RECHECK_RESULT=UNCHANGED` | 继续组合写入 |
-| `CHANGED_EMPTY|CHANGED_NONEMPTY` | 零写入送达新事实；空候选以新快照和原材料同回合重跑，非空等待重选 |
+| `CHANGED_EMPTY|CHANGED_NONEMPTY` | 零写入送达新事实；空候选以新快照和原材料同回合重跑，非空凭 marker 等待重选 |
 | `APPLICATION_COMBINATION_RESULT=CONTRACT_ERROR|SNAPSHOT_REFRESH_REQUIRED|PREWRITE_FAILED` | 依次为：用已确认事实重构（真实缺料才补料）、执行下方列表和候选消息（空则继续，非空重选）、原样重试组合命令 |
 | `KEY_NOT_STARTED`，或创建 `SUCCESS` + `APP_ID` 且无 `KEY_PAGE_RESULT` | 创建已完成且公钥页未调用；按该 `APP_ID` 独立执行一次 `app key` |
 | 创建 `FAILED` | 禁止重放，停止设钥 |

package/skill/references/onboarding/modules/scripts/app.sh

@@ -990,6 +990,7 @@ app_create_from_snapshot() {
       emit_control_field "APPLICATION_TYPE" "$APP_APPLICATION_TYPE" || exit 1
       [ -s "$CHILD_STDOUT" ] || fail_application_combination PREWRITE_FAILED
       copy_captured_output "$CHILD_STDOUT"
+      [ "$RECHECK_RESULT" != CHANGED_NONEMPTY ] || emit_control "CUSTOMER_MESSAGE_DELIVERY_REQUIRED=application.candidate.select"
       emit_control "APPLICATION_RECHECK_RESULT=$RECHECK_RESULT"
       exit 0
       ;;