@alipay/alipay-aipay 1.6.8-beta1 → 1.6.8-beta2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alipay/alipay-aipay",
-  "version": "1.6.8-beta1",
+  "version": "1.6.8-beta2",
   "description": "支付宝 AI 付接入 Skill 安装包 - 优先安装 Agent Skill，并在 macOS/Linux 后台准备用户级 CLI 工具",
   "type": "module",
   "bin": {

package/skill/VERSION

@@ -1 +1 @@
-1.6.8-beta1
+1.6.8-beta2

package/skill/references/integration/modules/scripts/sandbox_config.sh

@@ -1,5 +1,8 @@
 #!/bin/bash
 
+# Sensitive sandbox fields are held in shell variables below; never inherit
+# caller tracing into the parsing and persistence path.
+set +x
 set -u
 
 MODE="${1:-}"
@@ -237,6 +240,19 @@ render_summary() {
   printf '%s' '{}' | node "$RENDERER" sandbox.environment.reminder --variant DEFAULT || return 1
 }
 
+render_create_failure() {
+  local error_code trace_id
+  error_code=$(printf '%s' "$business" | jq -r '
+    if (.errorCode? | type) == "string" and (.errorCode | test("^[A-Za-z0-9_.:-]{1,80}$"))
+    then .errorCode else "UNKNOWN" end
+  ' 2>/dev/null) || error_code="UNKNOWN"
+  trace_id=$(printf '%s' "$business" | jq -r '
+    if (.traceId? | type) == "string" and (.traceId | test("^[A-Za-z0-9_.:-]{1,128}$"))
+    then .traceId else "未返回" end
+  ' 2>/dev/null) || trace_id="未返回"
+  printf 'SANDBOX_ERROR:%s traceId=%s\n' "$error_code" "$trace_id" >&2
+}
+
 if [ "$MODE" = "create" ]; then
   command -v alipay-cli >/dev/null 2>&1 || { echo "SANDBOX_ERROR:缺少 alipay-cli" >&2; exit 1; }
   { [ ! -e "$CONFIG_PATH" ] && [ ! -L "$CONFIG_PATH" ]; } || { echo "SANDBOX_ERROR:配置文件已存在或为不安全符号链接，禁止重复创建或覆盖" >&2; exit 1; }
@@ -289,7 +305,7 @@ if [ "$MODE" = "create" ]; then
     if [ -n "$text" ]; then business=$(printf '%s' "$text" | jq -c . 2>/dev/null) || { echo "SANDBOX_ERROR:重试 content[0].text 非法" >&2; exit 1; }; else business="$outer"; fi
   fi
   [ "$(echo "$business" | jq -r '.success // false')" = "true" ] || {
-    echo "$business" | jq -r '"SANDBOX_ERROR:"+(.errorCode//"UNKNOWN"|tostring)+" "+(.msg//.resultMsg//"快速沙箱创建失败")+" traceId="+(.traceId//"未返回"|tostring)' >&2
+    render_create_failure
     exit 1
   }
   data=$(echo "$business" | jq -c '.data // null') || exit 1

package/skill/references/normal/scripts/onboarding_message_runner.mjs

@@ -247,7 +247,9 @@ const mccSelectionReceiptPrefix = 'AIPAY_MCC_SELECTION_V1.';
 const ignoredMccQueryTokens = new Set([
   '服务', '企业', '个人', '提供', '适用', '用于', '平台', '项目', '申请', '商家', '公司',
   '互联', '联网', '互联网', '在线', '用品', '收费', '缴费', '费用', '适用于', '经营',
-  '业务', '相关', '主体', '从事'
+  '业务', '相关', '主体', '从事', '网站', '网页', '购买', '买票', '购票', '票务', '售票',
+  '预约', '预定', '退票', '支付', '付款', '收款', '下单', '订单', '交易', '销售', '售卖',
+  '商品', '产品'
 ]);
 
 function activeMccRunId(env = process.env) {

package/skill/references/onboarding/modules/scripts/mcc.sh

@@ -833,10 +833,16 @@ run_resolve_plan() {
     if [ "$match_type" = "NONE" ] \
       && [ "$semantic_status" != "DYNAMIC_CATALOG_CODE_NOT_FOUND" ] \
       && [ "$semantic_status" != "DYNAMIC_CATALOG_CODE_AMBIGUOUS" ]; then
-      retry_input_id="${input_id:-__NO_INPUT_ID__}"
-      next_retry_count="$(claim_mcc_semantic_retry \
-        "$product_type" "$sales_code" "$query" "$retry_input_id" "$resolved_semantic_terms" 2>/dev/null)"
-      retry_rc=$?
+      if [ -n "$input_id" ]; then
+        retry_input_id="$input_id"
+        next_retry_count="$(claim_mcc_semantic_retry \
+          "$product_type" "$sales_code" "$query" "$retry_input_id" "$resolved_semantic_terms" 2>/dev/null)"
+        retry_rc=$?
+      else
+        # A retry without a message identity cannot be bound to one user input.
+        # Keep the bounded retry contract closed instead of sharing a placeholder.
+        retry_rc=2
+      fi
       if [ "$retry_rc" -eq 0 ]; then
         if [ "$semantic_terms_json" = "[]" ]; then
           retry_reason="MISSING_SEMANTIC_TERMS"