@alipay/alipay-aipay 1.8.1 → 1.8.3

package/skill/references/normal/json/policy-rules.json

@@ -1 +1 @@
-{"schemaVersion":1,"rules":[{"policyId":"P-MCP-CONTRACT-FROZEN","scope":"all","severity":"critical","text":"只用当前 Skill 已验证的 MCP 脚本契约；禁止推断、改名或尝试近似方法。","runtimeText":"仅用已验证脚本；禁推断或尝试近似方法。"},{"policyId":"P-AUTH-BEFORE-ONBOARDING","scope":"onboarding","severity":"critical","text":"登录、scope 和 MCC 校验通过前，禁止 onboarding 查询或写入。","runtimeText":"登录/scope/MCC 未通过前禁查询和写入。"},{"policyId":"P-SIGNING-WRITE","scope":"onboarding.signing","severity":"critical","text":"签约材料校验通过后直接提交，不增加确认；缺失或非法时禁止提交。"},{"policyId":"P-SERVICE-WRITE","scope":"onboarding.service","severity":"critical","text":"服务创建摘要送达后直接创建；服务修改须取得绑定当前脱敏摘要的明确确认。"},{"policyId":"P-APPLICATION-WRITE","scope":"onboarding.application","severity":"critical","text":"完整新建材料或非空候选后的明确“新建”已构成创建确认；快照未变时不追加确认，公钥确认后直接提审。"},{"policyId":"P-WRITE-UNKNOWN","scope":"onboarding.write","severity":"critical","text":"非幂等写入结果不明时只读核验；仍无法确认则进入 UNKNOWN，禁止重试写入。"},{"policyId":"P-PARTIAL-RESULT","scope":"onboarding","severity":"critical","text":"签约、服务、应用分支独立记录，失败不回滚或覆盖其他成功结果。"},{"policyId":"P-MATERIAL-CATEGORY","scope":"onboarding.materials","severity":"required","text":"每轮只展示一个材料类别；同类一次收齐，已提供材料不得重复索取。"},{"policyId":"P-KEY-NO-PRIVATE","scope":"onboarding.application","severity":"critical","text":"禁止请求、处理、保存或输出生产私钥，也不提供密钥生成命令。"},{"policyId":"P-KEY-PUBLIC-USER","scope":"onboarding.application","severity":"critical","text":"应用公钥只能由用户提供；缺少时禁止 createKeyConfirmPage，也不得补全、改写或添加 PEM 头尾。"},{"policyId":"P-AUTH-URL","scope":"onboarding.authorization","severity":"critical","text":"授权链接只由 auth.sh 构造并校验固定域名、路径和参数；禁用 verification_url。"},{"policyId":"P-KEY-URL","scope":"onboarding.application","severity":"critical","text":"公钥确认只展示 createKeyConfirmPage 返回并校验的裸 URL；禁止二维码链接和 alipays://。"},{"policyId":"P-AUTH-URL-AUTO-OPEN","scope":"onboarding.authorization","severity":"critical","text":"授权 URL 交付后调用受控 opener；失败时保留同一裸 URL 和复制兜底。"},{"policyId":"P-KEY-URL-AUTO-OPEN","scope":"onboarding.application","severity":"critical","text":"公钥 URL 交付后调用受控 opener；失败时保留同一裸 URL 和复制兜底。"},{"policyId":"P-KEY-TOOL-DOWNLOAD","scope":"onboarding.application","severity":"critical","text":"新建 WEBAPP 或 MOBILEAPP IOS|ANDROID|ALL 在首次等待或写入前必须展示 https://opendocs.alipay.com/isv/02kipk；HarmonyOS 除外。仅空候选且缺公钥时自动下载，非空候选只在用户要求时下载；只下载，不安装、启动或生成密钥。"},{"policyId":"P-A2M-SANDBOX","scope":"integration.aipay","severity":"critical","text":"AI 按量付费沙箱 serviceId 固定为 api_mock_service_id，SDK 使用沙箱网关；生产网关和真实 serviceId 只用于正式配置。","runtimeText":"A2M 沙箱固定 api_mock_service_id 与沙箱网关；生产值仅用于正式配置。"},{"policyId":"P-A2M-SUCCESS","scope":"integration.aipay","severity":"critical","text":"自动联调只有在 HTTP 200、非空可归属资源、无明确业务失败且适用 Payment-Validation 有效时通过。","runtimeText":"联调仅在 HTTP 200、资源可归属、无业务失败且适用回执有效时通过。"},{"policyId":"P-SANDBOX-CREDENTIAL-EXCEPTION","scope":"integration.sandbox","severity":"critical","text":"Unix/macOS/Linux 只允许快速沙箱实际返回且已校验的买家登录/支付密码在沙箱摘要和付款体验中经 stdin 临时渲染。Windows 手工沙箱允许用户在 sandbox.windows.manual_setup 后提供当前沙箱应用的 APPID、支付宝公钥、应用公钥、与当前开发语言匹配的应用私钥和沙箱账号信息；Agent 只能将其用于已确认目标项目的受保护配置，不得在回复、摘要、普通日志或业务状态中复述或另存原文。两类例外均不得扩展到生产环境账号、应用私钥或密码。","runtimeText":"仅登记且已校验的快速沙箱或 Windows 手工沙箱资料可按 flow 用于受保护项目；禁复述、另存或扩展到生产值。"},{"policyId":"P-SENSITIVE-STATE","scope":"all","severity":"critical","text":"用户公钥仅用于当前 app key/verify-key/verify-key-and-audit 调用，禁止在回复、摘要、普通日志、跨会话状态或宽权限临时文件中复述或保存；除登记的沙箱例外外，私钥、token、Payment-Proof、签名串、完整支付表单和未脱敏响应同样不得进入这些位置；临时 URL 仅可由登记动作校验后在该动作正文展示。","runtimeText":"公钥限当前 app 调用且禁复述/保存；敏感值禁入回复/摘要/日志/状态/宽权限文件；临时 URL 仅由登记动作展示。"},{"policyId":"P-PROJECT-PROTECT","scope":"integration","severity":"critical","text":"不得清空、覆盖或删除用户既有项目；只在已确认目标路径和范围内做必要修改。","runtimeText":"禁清空/覆盖/删除既有项目；仅改已确认路径和范围。"},{"policyId":"P-CUSTOMER-OUTPUT-EXCLUSIVE","scope":"all","severity":"critical","text":"登记 runner/script 的 stdout 是唯一对客正文，禁止增删改写；阻塞消息送达后立即等待用户。","runtimeText":"登记 stdout 原文是唯一正文；阻塞送达后立即等待。"},{"policyId":"P-ONBOARDING-CONTROL-CHANNEL","scope":"onboarding","severity":"critical","text":"剔除 ALIPAY_AIPAY_INTERNAL 内部行后再处理 stdout；内部行禁止对客，正文为空时直接转移。","runtimeText":"内部行禁对客；正文为空按唯一终态转移。"},{"policyId":"P-AUTH-PAGE-DELIVERY-BARRIER","scope":"onboarding.authorization","severity":"critical","text":"`auth.page` stdout 必须先独立送达，再 opener 和有限轮询；不得合并 pending 或收口，也不等待确认。"},{"policyId":"P-KEY-PAGE-DELIVERY-BARRIER","scope":"onboarding.application","severity":"critical","text":"`application.key.page` stdout 必须先独立送达，再 opener 和有限轮询；不得合并 pending 或收口，也不等待确认。"},{"policyId":"P-DETERMINISTIC-HANDOFF","scope":"all","severity":"critical","text":"只执行 flow 动作处登记命令并按唯一终态立即转移；禁止追加命令重复解析，失败只走登记恢复。","runtimeText":"仅执行登记命令并按唯一终态转移；禁追加解析；失败只走登记恢复。"}],"officialUrls":{"aipaySite":"https://aipay.alipay.com/","aipaySkillSite":"https://aipay.alipay.com/?from=alipay-aipay-skill","merchantPlatform":"https://b.alipay.com/page/portal/home","openPlatform":"https://open.alipay.com/","openPlatformHome":"https://open.alipay.com","technicalSupport":"https://opensupport.alipay.com/support/intelligent-services?form=payskill","keyToolManual":"https://opendocs.alipay.com/isv/02kipk","keyToolMac":"https://ideservice.alipay.com/ide/getPluginUrl.htm?clientType=assistant&platform=mac&channelType=WEB","keyToolWindows":"https://ideservice.alipay.com/ide/getPluginUrl.htm?clientType=assistant&platform=win&channelType=WEB","androidSandboxAlipay":"https://mdn.alipayobjects.com/sandboxsys/afts/img/_itHRrdOD9oAAAAAAAAAAAAADgSLAQBr/original","sandboxToolFallback":"https://open.alipay.com/develop/sandbox/tool","sandboxGateway":"https://openapi-sandbox.dl.alipaydev.com/gateway.do","productionGateway":"https://openapi.alipay.com/gateway.do","openPlatformPaySkill":"https://open.alipay.com?form=payskill","traditionalPaymentSkill":"https://github.com/alipay/ai/tree/main/skills","dingtalkSupportGroupQr":"https://mdn.alipayobjects.com/huamei_5fajmi/afts/img/MlFpRKmYyLIAAAAARJAAAAgADlahAQFr/original","wecomCommunityGroupQr":"https://mdn.alipayobjects.com/huamei_5fajmi/afts/img/Cz0TTZVO7_4AAAAAQDAAAAgADlahAQFr/fmt.webp"},"authorizationProducts":[{"productName":"AI 按量付费","salesCode":"I1080300001000160457","scope":"app:all,machine_pay:write,agmnt:write"},{"productName":"AI 网页应用收款","salesCode":"I1080300001000041203","scope":"app:all,fast_instant_trade_pay:write"},{"productName":"AI 移动应用收款","salesCode":"I1080300001000041313","scope":"app:all,auth_alipay_apppay:write"}],"temporaryUrlAllowlist":{"authorization":{"host":"aipay.alipay.com","path":"/cli-auth","requiredQueryParams":["deviceCode","productCode","mccCode"],"optionalQueryParams":["platform"]},"publicKeyConfirmation":[{"host":"aipay.alipay.com","path":"/public-key-confirm","requiredQueryParams":["keyConfirmToken"],"optionalQueryParams":[]},{"host":"open.alipay.com","path":"/ai/ai-resource-center/public-key-confirm","requiredQueryParams":["keyConfirmToken"],"optionalQueryParams":[]}],"windowsOnboardingRedirect":{"host":"aipay.alipay.com","path":"/","requiredQueryParams":["from","reason","platform_id"],"optionalQueryParams":[]}}}
+{"schemaVersion":1,"rules":[{"policyId":"P-MCP-CONTRACT-FROZEN","scope":"all","severity":"critical","text":"只用当前 Skill 已验证的 MCP 脚本契约；禁止推断、改名或尝试近似方法。","runtimeText":"仅用已验证脚本；禁推断或尝试近似方法。"},{"policyId":"P-AUTH-BEFORE-ONBOARDING","scope":"onboarding","severity":"critical","text":"登录、scope 和 MCC 校验通过前，禁止 onboarding 查询或写入。","runtimeText":"登录/scope/MCC 未通过前禁查询和写入。"},{"policyId":"P-SIGNING-WRITE","scope":"onboarding.signing","severity":"critical","text":"签约材料校验通过后直接提交，不增加确认；缺失或非法时禁止提交。"},{"policyId":"P-SERVICE-WRITE","scope":"onboarding.service","severity":"critical","text":"服务创建摘要送达后直接创建；服务修改须取得绑定当前脱敏摘要的明确确认。"},{"policyId":"P-APPLICATION-WRITE","scope":"onboarding.application","severity":"critical","text":"完整新建材料或非空候选后的明确“新建”已构成创建确认；快照未变时不追加确认，公钥确认后直接提审。"},{"policyId":"P-WRITE-UNKNOWN","scope":"onboarding.write","severity":"critical","text":"非幂等写入结果不明时只读核验；仍无法确认则进入 UNKNOWN，禁止重试写入。"},{"policyId":"P-PARTIAL-RESULT","scope":"onboarding","severity":"critical","text":"签约、服务、应用分支独立记录，失败不回滚或覆盖其他成功结果。"},{"policyId":"P-MATERIAL-CATEGORY","scope":"onboarding.materials","severity":"required","text":"每轮只展示一个材料类别；同类一次收齐，已提供材料不得重复索取。"},{"policyId":"P-KEY-NO-PRIVATE","scope":"onboarding.application","severity":"critical","text":"禁止请求、处理、保存或输出生产私钥，也不提供密钥生成命令。"},{"policyId":"P-KEY-PUBLIC-USER","scope":"onboarding.application","severity":"critical","text":"应用公钥只能由用户提供；缺少时禁止 createKeyConfirmPage，也不得补全、改写或添加 PEM 头尾。"},{"policyId":"P-AUTH-URL","scope":"onboarding.authorization","severity":"critical","text":"授权链接只由 auth.sh 构造并校验固定域名、路径和参数；禁用 verification_url。"},{"policyId":"P-KEY-URL","scope":"onboarding.application","severity":"critical","text":"公钥确认只展示 createKeyConfirmPage 返回并校验的裸 URL；禁止二维码链接和 alipays://。"},{"policyId":"P-AUTH-URL-AUTO-OPEN","scope":"onboarding.authorization","severity":"critical","text":"授权 URL 交付后调用受控 opener；失败时保留同一裸 URL 和复制兜底。"},{"policyId":"P-KEY-URL-AUTO-OPEN","scope":"onboarding.application","severity":"critical","text":"公钥 URL 交付后调用受控 opener；失败时保留同一裸 URL 和复制兜底。"},{"policyId":"P-KEY-TOOL-DOWNLOAD","scope":"onboarding.application","severity":"critical","text":"新建 WEBAPP 或 MOBILEAPP IOS|ANDROID|ALL 在首次等待或写入前必须展示 https://opendocs.alipay.com/isv/02kipk；HarmonyOS 除外。仅空候选且缺公钥时自动下载，非空候选只在用户要求时下载；只下载，不安装、启动或生成密钥。"},{"policyId":"P-A2M-SANDBOX","scope":"integration.aipay","severity":"critical","text":"AI 按量付费沙箱 serviceId 固定为 api_mock_service_id，SDK 使用沙箱网关；生产网关和真实 serviceId 只用于正式配置。","runtimeText":"A2M 沙箱固定 api_mock_service_id 与沙箱网关；生产值仅用于正式配置。"},{"policyId":"P-A2M-SUCCESS","scope":"integration.aipay","severity":"critical","text":"自动联调只有在 HTTP 200、非空可归属资源、无明确业务失败且适用 Payment-Validation 有效时通过。","runtimeText":"联调仅在 HTTP 200、资源可归属、无业务失败且适用回执有效时通过。"},{"policyId":"P-SANDBOX-CREDENTIAL-EXCEPTION","scope":"integration.sandbox","severity":"critical","text":"Unix/macOS/Linux 只允许快速沙箱实际返回且已校验的买家登录/支付密码在沙箱摘要和付款体验中经 stdin 临时渲染。Windows 手工沙箱允许用户在 sandbox.windows.manual_setup 后提供当前沙箱应用的 APPID、支付宝公钥、应用公钥、与当前开发语言匹配的应用私钥和沙箱账号信息；Agent 只能将其用于已确认目标项目的受保护配置，不得在普通日志或业务状态中复述或另存原文；除 AI 网页应用收款的登记沙箱摘要及最终三项买家配置外，不得在回复或摘要中复述原文。两类例外均不得扩展到生产环境账号、应用私钥或密码。 最终收口仅 AI 网页应用收款可从当前会话已校验且已交付的登记摘要展示沙箱买家测试账号、登录密码和支付密码三项，密码明文展示（含 Windows）；按量付费及 APP 支付不展示最终沙箱配置区块；不得扩展到其他凭据、原始配置或生产信息。","runtimeText":"仅登记且已校验的快速沙箱或 Windows 手工沙箱资料可按 flow 用于受保护项目；快速沙箱买家密码按既有登记消息展示，Windows 仅网页收款登记摘要可明文展示；最终收口仅网页收款三项买家信息；其他原文禁复述、另存或扩展到生产值。"},{"policyId":"P-SENSITIVE-STATE","scope":"all","severity":"critical","text":"用户公钥仅用于当前 app key/verify-key/verify-key-and-audit 调用，禁止在回复、摘要、普通日志、跨会话状态或宽权限临时文件中复述或保存；除登记的沙箱例外外，私钥、token、Payment-Proof、签名串、完整支付表单和未脱敏响应同样不得进入这些位置；临时 URL 仅可由登记动作校验后在该动作正文展示。","runtimeText":"公钥限当前 app 调用且禁复述/保存；敏感值禁入回复/摘要/日志/状态/宽权限文件；临时 URL 仅由登记动作展示。"},{"policyId":"P-PROJECT-PROTECT","scope":"integration","severity":"critical","text":"不得清空、覆盖或删除用户既有项目；只在已确认目标路径和范围内做必要修改。","runtimeText":"禁清空/覆盖/删除既有项目；仅改已确认路径和范围。"},{"policyId":"P-CUSTOMER-OUTPUT-EXCLUSIVE","scope":"all","severity":"critical","text":"登记 runner/script 的 stdout 是唯一对客正文，禁止增删改写；阻塞消息送达后立即等待用户。","runtimeText":"登记 stdout 原文是唯一正文；阻塞送达后立即等待。"},{"policyId":"P-ONBOARDING-CONTROL-CHANNEL","scope":"onboarding","severity":"critical","text":"剔除 ALIPAY_AIPAY_INTERNAL 内部行后再处理 stdout；内部行禁止对客，正文为空时直接转移。","runtimeText":"内部行禁对客；正文为空按唯一终态转移。"},{"policyId":"P-AUTH-PAGE-DELIVERY-BARRIER","scope":"onboarding.authorization","severity":"critical","text":"`auth.page` stdout 必须先独立送达，再 opener 和有限轮询；不得合并 pending 或收口，也不等待确认。"},{"policyId":"P-KEY-PAGE-DELIVERY-BARRIER","scope":"onboarding.application","severity":"critical","text":"`application.key.page` stdout 必须先独立送达，再 opener 和有限轮询；不得合并 pending 或收口，也不等待确认。"},{"policyId":"P-DETERMINISTIC-HANDOFF","scope":"all","severity":"critical","text":"只执行 flow 动作处登记命令并按唯一终态立即转移；禁止追加命令重复解析，失败只走登记恢复。","runtimeText":"仅执行登记命令并按唯一终态转移；禁追加解析；失败只走登记恢复。"}],"officialUrls":{"aipaySite":"https://aipay.alipay.com/","aipaySkillSite":"https://aipay.alipay.com/?from=alipay-aipay-skill","merchantPlatform":"https://b.alipay.com/page/portal/home","openPlatform":"https://open.alipay.com/","openPlatformHome":"https://open.alipay.com","technicalSupport":"https://opensupport.alipay.com/support/intelligent-services?form=payskill","keyToolManual":"https://opendocs.alipay.com/isv/02kipk","keyToolMac":"https://ideservice.alipay.com/ide/getPluginUrl.htm?clientType=assistant&platform=mac&channelType=WEB","keyToolWindows":"https://ideservice.alipay.com/ide/getPluginUrl.htm?clientType=assistant&platform=win&channelType=WEB","androidSandboxAlipay":"https://mdn.alipayobjects.com/sandboxsys/afts/img/_itHRrdOD9oAAAAAAAAAAAAADgSLAQBr/original","sandboxToolFallback":"https://open.alipay.com/develop/sandbox/tool","sandboxGateway":"https://openapi-sandbox.dl.alipaydev.com/gateway.do","productionGateway":"https://openapi.alipay.com/gateway.do","openPlatformPaySkill":"https://open.alipay.com?form=payskill","traditionalPaymentSkill":"https://github.com/alipay/ai/tree/main/skills","dingtalkSupportGroupQr":"https://mdn.alipayobjects.com/huamei_5fajmi/afts/img/MlFpRKmYyLIAAAAARJAAAAgADlahAQFr/original","wecomCommunityGroupQr":"https://mdn.alipayobjects.com/huamei_5fajmi/afts/img/Cz0TTZVO7_4AAAAAQDAAAAgADlahAQFr/fmt.webp"},"authorizationProducts":[{"productName":"AI 按量付费","salesCode":"I1080300001000160457","scope":"app:all,machine_pay:write,agmnt:write"},{"productName":"AI 网页应用收款","salesCode":"I1080300001000041203","scope":"app:all,fast_instant_trade_pay:write"},{"productName":"AI 移动应用收款","salesCode":"I1080300001000041313","scope":"app:all,auth_alipay_apppay:write"}],"temporaryUrlAllowlist":{"authorization":{"host":"aipay.alipay.com","path":"/cli-auth","requiredQueryParams":["deviceCode","productCode","mccCode"],"optionalQueryParams":["platform"]},"publicKeyConfirmation":[{"host":"aipay.alipay.com","path":"/public-key-confirm","requiredQueryParams":["keyConfirmToken"],"optionalQueryParams":[]},{"host":"open.alipay.com","path":"/ai/ai-resource-center/public-key-confirm","requiredQueryParams":["keyConfirmToken"],"optionalQueryParams":[]}],"windowsOnboardingRedirect":{"host":"aipay.alipay.com","path":"/","requiredQueryParams":["from","reason","platform_id"],"optionalQueryParams":[]}}}

package/skill/references/normal/scripts/flow_loader.mjs

@@ -160,6 +160,15 @@ export function loadFlowBundle(flow, phase, { productType } = {}) {
   if (flow === 'integration' && phase === 'checklist') {
     if (!productType) throw new Error('integration checklist phase 缺少 product-type');
     blocks.push(`## 当前产品适用校验清单\n\n${checklistForProduct(productType).markdown}`);
+    if (productType === 'webpay') {
+      const catalog = JSON.parse(fs.readFileSync(path.join(scriptDir, '../json/customer-messages.json'), 'utf8'));
+      const field = catalog.messages.find((message) => message.messageId === 'integration.checklist.result')
+        ?.variables.find((variable) => variable.name === 'webpayExperienceResult');
+      if (!Array.isArray(field?.values) || field.values.length !== 3 || field.values.some((value) => typeof value !== 'string')) {
+        throw new Error('网页收款 checklist 缺少合法体验结果枚举');
+      }
+      blocks.push(`## WEBPAY 结果参数精确枚举\n\nwebpayExperienceResult 仅接受以下原值，按步骤 6 实际证据选择，不改写：\n${field.values.map((value) => `- ${JSON.stringify(value)}`).join('\n')}`);
+    }
   }
   return [
     `<!-- ALIPAY_AIPAY_REFERENCE_BUNDLE flow=${flow} phase=${phase}; 仅供内部执行，禁止对客 -->`,

package/skill/references/normal/scripts/integration_message_runner.mjs

@@ -750,9 +750,83 @@ export function inspectImplementation(variant, projectPath, snapshot = null) {
 
   findings.sort((left, right) => `${left.code}:${left.path || ''}:${left.line || 0}`
     .localeCompare(`${right.code}:${right.path || ''}:${right.line || 0}`));
+  for (const finding of findings) {
+    finding.id = crypto.createHash('sha256')
+      .update(JSON.stringify([variant, currentSnapshot.fingerprint, finding]))
+      .digest('hex');
+  }
   return { projectPath: canonicalPath, variant, findings };
 }
 
+function reviewedAuditFindings(audit, rawReview, snapshot) {
+  if (rawReview === undefined) return audit.findings.map((finding) => ({ ...finding, reviewDecision: 'UNREVIEWED' }));
+  if (typeof rawReview !== 'string' || rawReview.length > 65536) throw new Error('audit-review 必须是受控 JSON 数组');
+  let reviews;
+  try { reviews = JSON.parse(rawReview); } catch { throw new Error('audit-review 不是合法 JSON'); }
+  if (!Array.isArray(reviews)) throw new Error('audit-review 必须是 JSON 数组');
+  const findings = new Map(audit.findings.map((finding) => [finding.id, finding]));
+  const reviewedIds = new Set();
+  const decisions = new Map();
+  const excluded = new Set();
+  const sources = new Set(implementationSourceFiles(snapshot.canonicalPath, snapshot.sources, snapshot.contents));
+  for (const review of reviews) {
+    if (!review || typeof review !== 'object' || Array.isArray(review)
+      || Object.keys(review).some((key) => !['findingId', 'decision', 'evidence'].includes(key))
+      || !findings.has(review.findingId) || reviewedIds.has(review.findingId)) {
+      throw new Error('audit-review 必须逐项绑定当前产品和项目快照的唯一 findingId');
+    }
+    reviewedIds.add(review.findingId);
+    if (!['FALSE_POSITIVE', 'CONFIRMED', 'UNRESOLVED'].includes(review.decision)) {
+      throw new Error('audit-review decision 仅支持 FALSE_POSITIVE、CONFIRMED、UNRESOLVED');
+    }
+    decisions.set(review.findingId, review.decision);
+    if (!Array.isArray(review.evidence) || review.evidence.length === 0 || review.evidence.length > 20) {
+      throw new Error('audit-review 每项必须提供当前生产代码的定位和核对依据');
+    }
+    for (const evidence of review.evidence) {
+      if (!evidence || typeof evidence !== 'object' || Array.isArray(evidence)
+        || Object.keys(evidence).some((key) => !['path', 'line', 'reason'].includes(key))
+        || typeof evidence.path !== 'string' || !evidence.path || evidence.path.includes('\\')
+        || path.posix.isAbsolute(evidence.path) || path.win32.isAbsolute(evidence.path)
+        || evidence.path.split('/').some((part) => !part || part === '.' || part === '..')
+        || !Number.isInteger(evidence.line) || evidence.line < 1
+        || typeof evidence.reason !== 'string' || evidence.reason.trim().length < 12 || evidence.reason.length > 2000
+        || /[\u0000-\u001f\u007f]/u.test(evidence.reason)) {
+        throw new Error('audit-review evidence 必须包含规范化相对 path、有效 line 和具体单行 reason');
+      }
+      const file = path.resolve(snapshot.canonicalPath, evidence.path);
+      const source = snapshot.contents.get(file)?.toString('utf8');
+      const lines = source === undefined ? [] : stripSourceComments(source, path.extname(file).toLowerCase()).split(/\r?\n/u);
+      if (!sources.has(file) || !lines?.[evidence.line - 1]?.trim()) {
+        throw new Error('audit-review evidence 必须指向当前快照内非空的生产源码行');
+      }
+    }
+    // The runner validates the snapshot and locations; the Agent owns the code reasoning.
+    // Unreviewed, confirmed and unresolved findings remain blocking.
+    if (review.decision === 'FALSE_POSITIVE') excluded.add(review.findingId);
+  }
+  return audit.findings.filter((finding) => !excluded.has(finding.id))
+    .map((finding) => ({ ...finding, reviewDecision: decisions.get(finding.id) || 'UNREVIEWED' }));
+}
+
+function mergeAuditItems(failedItems, findings) {
+  let items = failedItems && failedItems !== '无' ? [failedItems] : [];
+  if (items[0]?.trim().startsWith('[')) {
+    try {
+      const parsed = JSON.parse(items[0]);
+      if (Array.isArray(parsed) && parsed.every((item) => typeof item === 'string')) items = parsed;
+    } catch { /* Preserve plain text. */ }
+  }
+  items = items.flatMap((item) => item.split('；')).map((item) => item.trim()).filter(Boolean);
+  for (const finding of findings) {
+    const location = finding.path ? `（${finding.path}${finding.line ? `:${finding.line}` : ''}）` : '';
+    const prefix = finding.reviewDecision === 'CONFIRMED' ? '' : '静态扫描疑点尚未排除：';
+    const item = `${prefix}${finding.message}${location}`;
+    if (!items.includes(item)) items.push(item);
+  }
+  return [...new Set(items)].join('；');
+}
+
 function scanProjectRoute(productType, projectPath, projectSelection) {
   if (!['aipay', 'webpay', 'apppay'].includes(productType)) {
     throw new Error('ROUTE_INSPECT_ERROR:productType 非法');
@@ -1255,18 +1329,20 @@ function runServiceNotReady(args) {
 
 function runSafetyCloseout(args) {
   const variant = required(args, 'variant');
-  if (!['AIPAY', 'WEBPAY', 'APPPAY'].includes(variant)) throw new Error('variant 非法，仅支持 AIPAY、WEBPAY、APPPAY');
-  return requireCustomerMessageDelivery('integration.safety.closeout', renderMessage('integration.safety.closeout', variant, {
-    acceptanceSummary: required(args, 'acceptance-summary')
-  }));
+  if (variant !== 'APPPAY') throw new Error('步骤 7 提醒仅适用于 APPPAY；AIPAY、WEBPAY 直接进入最终 checklist，上线提醒由最终 summary 输出');
+  return requireCustomerMessageDelivery('integration.safety.closeout', renderMessage('integration.safety.closeout', variant, {}));
 }
 
 function runWindowsSandboxSummary(args) {
+  const productName = required(args, 'product-name');
   const environmentRows = required(args, 'environment-rows');
   const passwordSaveHint = '已写入本地配置文件，默认不在对话中展开';
   const lines = environmentRows.split('\n');
-  if (lines[2] !== `| 沙箱买家登录密码 | ${passwordSaveHint} |`
-      || lines[3] !== `| 沙箱买家支付密码 | ${passwordSaveHint} |`) {
+  if (productName === 'AI 网页应用收款' && lines.slice(2).some((line) => line.includes(passwordSaveHint))) {
+    throw new Error('网页收款沙箱摘要必须展示已校验的买家密码明文');
+  }
+  if (productName !== 'AI 网页应用收款' && (lines[2] !== `| 沙箱买家登录密码 | ${passwordSaveHint} |`
+      || lines[3] !== `| 沙箱买家支付密码 | ${passwordSaveHint} |`)) {
     throw new Error('Windows 沙箱摘要的两个密码行必须只使用固定本地保存提示');
   }
   const summary = renderMessage('sandbox.environment.summary', 'DEFAULT', {
@@ -1290,6 +1366,7 @@ function checklistInputFromArgs(args) {
     'overall-result': 'overallResult',
     'failed-items': 'failedItems',
     'manual-items': 'manualItems',
+    'sandbox-summary': 'sandboxSummary',
     'sandbox-result': 'sandboxResult',
     'webpay-experience-result': 'webpayExperienceResult',
     'sandbox-config-state': 'sandboxConfigState',
@@ -1343,26 +1420,21 @@ async function runChecklistResult(args) {
   }
   const input = checklistInputFromArgs(args) || await readStdin();
   const audit = inspectImplementation(variant, projectPath, snapshot);
-  if (audit.findings.length === 0 && finalizesAuditFindings) {
+  const findings = reviewedAuditFindings(audit, args['audit-review'], snapshot);
+  if (findings.length === 0 && finalizesAuditFindings) {
     throw new Error('finalize-audit-findings 仅用于收口实际 audit findings');
   }
-  if (audit.findings.length > 0) {
+  if (findings.length > 0) {
     if (args['finalize-audit-findings'] !== 'true') {
       process.stderr.write(`${internalPrefix}CHECKLIST_AUDIT=${JSON.stringify({
         state: 'REPAIR_REQUIRED',
-        findings: audit.findings
+        findings
       })}\n`);
       return null;
     }
-    const auditItems = audit.findings.map((finding) => {
-      const location = finding.path ? `（${finding.path}${finding.line ? `:${finding.line}` : ''}）` : '';
-      return `${finding.message}${location}`;
-    }).join('；');
     input.overallResult = '未通过';
     input.blockingDefectState = 'PRESENT';
-    input.failedItems = input.failedItems && input.failedItems !== '无'
-      ? `${input.failedItems}；${auditItems}`
-      : auditItems;
+    input.failedItems = mergeAuditItems(input.failedItems, findings);
     if (input.executionMode === '完整接入') {
       input.nextFlowReminder = '代码开发校验通过后将自动进入支付产品-产品开通；未通过时停留在代码开发。';
     }

package/skill/references/normal/scripts/onboarding_message_runner.mjs

@@ -1065,14 +1065,17 @@ async function runMaterialCollect(args) {
   }, { productType });
 }
 
-function renderApplicationCandidates(applicationType, applicationCandidates, selectionState = 'initial') {
+function renderApplicationCandidates(applicationType, applicationCandidates, selectionState = 'initial', includeIntro = selectionState === 'initial') {
   const onlineCount = applicationCandidates.filter((candidate) => candidate?.status === 'ON_LINE').length;
   const variant = applicationCandidates.length === 0
     ? 'EMPTY'
     : onlineCount === 0
       ? 'PENDING_ONLY'
       : 'ONLINE_WITH_OPTIONAL_PENDING';
-  const facts = renderMessage('application.candidates.facts', variant, { applicationType, applicationCandidates });
+  const candidateFacts = renderMessage('application.candidates.facts', variant, { applicationType, applicationCandidates });
+  const facts = includeIntro
+    ? `${renderMessage('application.configuration.intro', 'DEFAULT', {})}\n\n${candidateFacts}`
+    : candidateFacts;
   if (applicationCandidates.length === 0) return facts;
   const selectionVariant = `${onlineCount === 0 ? 'PENDING' : 'ONLINE'}_${applicationType === 'WEBAPP' ? 'WEB' : 'MOBILE'}_OR_NEW`;
   const selection = renderMessage('application.candidate.select', selectionVariant, {});
@@ -1168,8 +1171,8 @@ async function runApplicationRecheck(args) {
   const previousCanonical = canonicalCandidates(input.previousCandidates);
   const currentCanonical = canonicalCandidates(input.currentCandidates);
   // Rendering both snapshots applies the same content and sensitivity checks even on the silent path.
-  renderApplicationCandidates(applicationType, input.previousCandidates);
-  const output = renderApplicationCandidates(applicationType, input.currentCandidates);
+  renderApplicationCandidates(applicationType, input.previousCandidates, 'initial', false);
+  const output = renderApplicationCandidates(applicationType, input.currentCandidates, 'initial', false);
   if (previousCanonical === currentCanonical) {
     process.stderr.write(`${internalPrefix}APPLICATION_RECHECK_RESULT=UNCHANGED\n`);
     return '';
@@ -1237,10 +1240,11 @@ function closeoutInputFromArgs(args) {
   };
   const optionalMapping = {
     'sandbox-config-state': 'sandboxConfigState',
+    'sandbox-summary': 'sandboxSummary',
     'manual-verification-items': 'manualVerificationItems'
   };
   for (const [argName, fieldName] of Object.entries(optionalMapping)) {
-    if (Object.prototype.hasOwnProperty.call(args, argName)) input[fieldName] = required(args, argName);
+    if (Object.prototype.hasOwnProperty.call(args, argName)) input[fieldName] = argName === 'sandbox-summary' ? optional(args, argName) : required(args, argName);
   }
   return input;
 }

package/skill/references/normal/scripts/render_customer_message.mjs

@@ -18,7 +18,7 @@ const placeholderPattern = /\{\{([A-Za-z][A-Za-z0-9_]*)\}\}/g;
 const allowedVariableTypes = new Set([
   'applicationCandidates',
   'command', 'customerErrorDetails', 'customerErrorText', 'enum', 'enumList', 'existingPath', 'mccCode', 'officialTemporaryUrl', 'path',
-  'runtimeUrl', 'sandboxCredential', 'sandboxTableRows', 'serviceCandidates', 'mccCandidates', 'singleLine', 'string'
+  'runtimeUrl', 'sandboxCredential', 'sandboxTableRows', 'sandboxSummary', 'serviceCandidates', 'mccCandidates', 'singleLine', 'string'
 ]);
 
 function allowedVariableNames(definitions) {
@@ -547,6 +547,9 @@ function validateValue(definition, value, policy) {
     case 'sandboxCredential':
       if (value.length > 256 || /[\r\n]/.test(value)) throw new Error(`变量 ${definition.name} 不是合法沙箱凭据`);
       break;
+    case 'sandboxSummary':
+      if (value.length > 12000 || /[\u0000-\u0009\u000b-\u001f\u007f]/u.test(value)) throw new Error('沙箱摘要包含非法内容');
+      break;
     case 'sandboxTableRows':
       if (value.length > 4096 || !value.split('\n').every((line) => /^\| [^|]+ \| [^|]+ \|$/.test(line))) {
         throw new Error(`变量 ${definition.name} 不是合法沙箱摘要行`);
@@ -806,70 +809,137 @@ function validateWriteConfirmation(variantName, variables, normalized) {
   validateServicePayload(variables, normalized);
 }
 
+// Replay only the registered sandbox summary already delivered in this conversation.
+// No config contents, keys, commands or free-form Markdown are accepted here.
+function sandboxReplayBlock(original, productName, sandboxConfigState) {
+  // This optional display must never prevent delivery of the actual branch results.
+  try {
+    if (typeof original !== 'string' || !original || productName !== 'AI 网页应用收款') return '';
+    if (sandboxConfigState !== 'READY') return '';
+    const lines = original.trim().split('\n');
+    const configPath = lines[5]?.match(/^\| 配置文件目录 \| `([^`]+)` \|$/u)?.[1];
+    const environmentRows = lines.slice(6, 10).join('\n');
+    if (!configPath) throw new Error('必须复用本轮登记的完整沙箱摘要');
+    const input = { productName, configPath, environmentRows };
+    const summary = renderMessage('sandbox.environment.summary', 'DEFAULT', input);
+    const normalize = (text) => text.trim().replace(/\n{2,}/gu, '\n\n');
+    const valid = ['DEFAULT', 'WINDOWS'].some((variant) => {
+      const reminder = renderMessage('sandbox.environment.reminder', variant, {});
+      return normalize(original) === normalize(`${summary}\n\n${reminder}`)
+        || normalize(original) === normalize(`${summary}\n${reminder}`);
+    });
+    if (!valid) throw new Error('沙箱摘要不匹配登记正文，禁止改写或追加内容');
+    return renderMessage('sandbox.environment.summary', 'FINAL', input);
+  } catch {
+    return '';
+  }
+}
+
+function productionConfigSourceLines() {
+  return [
+    '1、确认上线条件：',
+    '- 前往支付宝 AI 付站点（https://aipay.alipay.com/?from=alipay-aipay-skill）→ 一站式接入，查看产品开通情况。',
+    '- 如本次流程新建支付宝应用，进入一站式接入 → 选择产品 → 密钥配置，确认新建的支付宝应用“已上线”；使用其他生产应用时，也需确认该应用已上线。',
+    '',
+    '2、生产环境的支付宝应用配置替换到项目中：',
+    '- 修改项目中的支付宝网关为 https://openapi.alipay.com/gateway.do。',
+    '- 把生产环境支付宝应用配置写入业务系统生产环境变量、受保护配置文件或密钥管理系统。',
+    '- appId、支付宝公钥、应用私钥需要配到项目中。应用私钥不要泄露、不要暴露给 Agent；应用公钥用于在支付宝侧配置，无需额外配到项目中。',
+    '- 确保应用公钥与应用私钥配对，appId、该应用公钥及对应的支付宝公钥与目标生产应用配置一致，不混用沙箱或其他应用的配置。',
+  ];
+}
+
 function productionSpecificLines(productName) {
   if (productName === 'AI 按量付费') {
     return [
-      '4. AI 按量付费 `serviceId`：把沙箱 `api_mock_service_id` 替换为真实 `serviceId`，`serviceId` 获取方式是：登录支付宝 AI 付站点（https://aipay.alipay.com/?from=alipay-aipay-skill） → 控制台 → 服务管理 → 复制审核已通过的目标服务 ID。',
-      '5. AI 按量付费商户标识：`seller_id`/`seller_unique_id` 填收款商户 PID/2088，PID 获取方式是：登录支付宝商家平台（https://b.alipay.com/page/portal/home） → 点击头像 → 复制账户名下方 2088 开头的商家 ID；`seller_app_id` 填生产 `appId`。',
-      '6. AI 按量付费验收：A2M 不使用 `notify_url`；上线前用生产应用私钥重新签名 402 账单，并验证 `Payment-Proof`、金额/订单/资源一致、`trade_no` 防重复履约和 `alipay.aipay.agent.fulfillment.confirm` 异步回执。'
-    ];
-  }
-  if (productName === 'AI 移动应用收款') {
-    return [
-      '4. AI 移动应用收款 `notify_url`：生成生产 `orderStr` 时传入商家已部署的公网 HTTPS `notify_url`；未传不会触发异步通知。',
-      '5. AI 移动应用收款验收：`notify_url` 完成验签，校验 `app_id`/`out_trade_no`/`total_amount`/`trade_status`，幂等处理并返回 `success`；支付结果以异步通知或 `alipay.trade.query` 补偿查询为准。客户端 SDK 使用服务端 `orderStr` 调起支付，客户端结果只做展示，不能作为付款成功依据。'
+      '', '3、AI 按量付费服务配置：',
+      '- 把沙箱 `api_mock_service_id` 替换为真实 `serviceId`。获取方式：登录支付宝 AI 付站点（https://aipay.alipay.com/?from=alipay-aipay-skill）→ 控制台 → 服务管理 → 复制审核已通过的目标服务 ID。',
+      '- `seller_id`/`seller_unique_id` 填收款商户 PID/2088，`seller_app_id` 填生产 `appId`。PID 获取方式：登录支付宝商家平台（https://b.alipay.com/page/portal/home）→ 点击头像 → 复制账户名下方 2088 开头的商家 ID。',
     ];
   }
+  const mobile = productName === 'AI 移动应用收款';
   return [
-    '4. AI 网页应用收款 `notify_url`：生产下单时传入商家已部署的公网 HTTPS `notify_url`；该地址是商家后端通知地址，不是支付宝生成的 URL。',
-    '5. AI 网页应用收款验收：`notify_url` 完成验签，校验 `app_id`/`out_trade_no`/`total_amount`/`trade_status`，幂等处理并返回 `success`；支付结果以异步通知或 `alipay.trade.query` 补偿查询为准，同步回跳或前台页面不能作为付款成功依据。',
-    '6. AI 网页应用收款限制：如需解除 AI 网页应用收款的收款限制，请前往 支付宝商家平台 - 签约管理 补全收款信息：https://b.alipay.com/page/ar-center/ar-manage'
+    '', `3、${productName}支付结果确认：`,
+    '- `notify_url` 用于商家服务端接收支付宝发来的支付结果异步通知，不是前端页面或支付宝生成的 URL。',
+    '- 如使用异步通知，下单时传入 `notify_url`；它应是商家已部署、支付宝服务端可通过公网访问的 HTTPS 通知接口地址。',
+    '- 如不配置 `notify_url`，不会触发该地址的异步通知；商家服务端需通过 `alipay.trade.query` 主动查单。',
+    mobile
+      ? '- 支付结果以验签通过的异步通知或服务端交易查询结果为准；APP 客户端支付结果不能单独作为付款成功依据。'
+      : '- 支付结果以验签通过的异步通知或 `alipay.trade.query` 查询结果为准；同步回跳或前台页面不能作为付款成功依据。',
+    '- 项目正式对客前，请完成生产环境支付验证。',
+    ...(mobile ? [] : ['', '4、AI 网页应用收款限制：', '- 如需解除 AI 网页应用收款的收款限制，请前往支付宝商家平台 → 签约管理补全收款信息：https://b.alipay.com/page/ar-center/ar-manage'])
   ];
 }
 
-function productionConfigSourceLines() {
-  return [
-    '1. 产品开通确认：前往支付宝 AI 付站点查看产品开通情况（https://aipay.alipay.com/?from=alipay-aipay-skill）。',
-    '2. 应用上线确认：前往支付宝 AI 付站点“一站式接入 → 选择产品 → 密钥配置”，确认目标支付宝应用“已上线”。',
-    '3. 替换项目中支付宝应用配置为生产：把生产环境的支付宝应用配置写入业务系统环境变量、受保护配置文件或密钥管理系统。确保 appId、应用私钥、支付宝公钥同属一套生产环境支付宝应用，同时修改项目中的支付宝网关为生产网关：https://openapi.alipay.com/gateway.do。'
-  ];
+function summaryItems(value) {
+  if (!value || value === '无') return [];
+  let items = [value];
+  if (value.trim().startsWith('[')) {
+    try {
+      const parsed = JSON.parse(value);
+      if (Array.isArray(parsed) && parsed.every((item) => typeof item === 'string')) items = parsed;
+    } catch { /* Preserve validated plain text. */ }
+  }
+  return [...new Set(items.flatMap((item) => item.split('；')).map((item) => item.trim()).filter(Boolean))];
+}
+
+// Completion inputs contain actual gaps only; reminders are delivered elsewhere.
+function validateChecklistItemClassification(variables, fields) {
+  const notifyReminders = new Set([
+    '公网 HTTPS notify_url 联调人工待验证：上线前配置公网通知地址并完成验签联调',
+    '公网 HTTPS notify_url 联调待部署后验证'
+  ]);
+  for (const field of fields) {
+    const value = variables[field];
+    const items = summaryItems(value);
+    if (value && value !== '无' && items.length === 0) {
+      throw new Error(`${field} 没有实际缺口时必须传“无”，不能使用空列表影响完成判定`);
+    }
+    for (const item of items) {
+      if (notifyReminders.has(item) || /^沙箱付款待用户体验(?:：.*)?$/u.test(item)) {
+        throw new Error(`${field} 只能包含实际缺口；通用通知地址提醒和可选沙箱付款体验不计入完成判定。请重新分类并按实际证据填写结果，不重跑已完成检查`);
+      }
+    }
+  }
 }
 
 function productionReadinessBlock(productName, context) {
   const statusLines = [];
-  if (!context.productBranchesComplete) {
+  if (context.integrationOnly) {
+    statusLines.push('- 本轮仅进行代码开发；上线前请确认生产配置并完成验证。');
+  } else if (!context.productBranchesComplete) {
     statusLines.push('- 还不能正式收款，产品签约、服务市场或应用发布仍有上表待办。');
   }
   if (context.integrationResult === '不在本轮执行范围') {
     statusLines.push('- 本轮只完成产品开通流程收口，不代表业务系统已经具备收款代码；先完成支付产品-代码开发、项目部署和生产参数验收。');
   } else if (context.integrationResult === '部分完成，沙箱配置待完成') {
-    statusLines.push('- 代码开发仍有沙箱配置缺口；可继续产品开通流程，但不能进入真实生产收款。');
+    statusLines.push('- 沙箱配置尚未完成，相关测试未执行；后续上线条件按生产配置和实际验证结果另行确认。');
   } else if (context.integrationResult === '部分完成，人工待验证') {
     statusLines.push('- 代码开发还有人工待验证项；完成后才能判断是否可进入真实生产上线。');
+  } else if (context.integrationResult === '未通过' && !(context.integrationOnly && context.failedItems && context.failedItems !== '无')) {
+    statusLines.push('- 代码开发仍有未完成项，请先按本轮校验结果修复。');
   }
-  if (statusLines.length > 0) {
-    return [
-      '【当前状态】',
-      ...statusLines,
-      '',
-      '【上线前有以下关键点】',
-      ...productionConfigSourceLines(),
-      ...productionSpecificLines(productName),
-      '',
-      '【提示】',
-      '- 如找不到配置替换位置，可以试试对 Agent 说：“我要上线了，帮我找一下项目里支付宝生产配置应该改哪些地方”。让 Agent 定位文件/变量名，但不要把生产应用私钥、账号密码、支付凭证或未脱敏通知内容直接发给 Agent。'
-    ].join('\n');
+  if (context.integrationOnly && context.failedItems && context.failedItems !== '无') {
+    statusLines.push(`- ${context.failedItems}`);
   }
+  const integrationGapAlreadyShown = context.productBranchesComplete && ['部分完成，人工待验证', '部分完成，沙箱配置待完成'].includes(context.integrationResult);
+  if (context.remainingActions && context.remainingActions !== '无' && !integrationGapAlreadyShown) {
+    statusLines.push(...summaryItems(context.remainingActions).map((item) => `- 下一步：${item}`));
+  }
+  if (statusLines.length === 0) {
+    statusLines.push('- 代码开发和产品开通流程已完成，但当前 Agent 没有替你切生产配置，也不会默认发起真实生产交易。');
+  }
+  const manualItems = summaryItems(context.manualVerificationItems);
+  const manualLines = manualItems.length
+    ? ['', '上线前请完成本轮尚未验证的项目：', ...manualItems.map((item) => `- ${item}`)]
+    : [];
   return [
-    '【当前状态】',
-    '- 代码开发和产品开通流程已完成，但当前 Agent 没有替你切生产配置，也不会默认发起真实生产交易。',
-    '',
-    '【上线前有以下关键点】',
-    ...productionConfigSourceLines(),
-    ...productionSpecificLines(productName),
-    '',
+    '【当前状态】', ...statusLines, '',
+    ...(context.sandboxBlock ? [context.sandboxBlock, ''] : []),
+    '【上线前有以下关键点】', '',
+    ...productionConfigSourceLines(), ...productionSpecificLines(productName), ...manualLines, '',
     '【提示】',
-    '- 如找不到配置替换位置，可以试试对 Agent 说：“我要上线了，帮我找一下项目里支付宝生产配置应该改哪些地方”。让 Agent 定位文件/变量名，但不要把生产应用私钥、账号密码、支付凭证或未脱敏通知内容直接发给 Agent。'
+    '- 如找不到项目上线前生产配置的替换位置，可以试试对 Agent 说：“我要上线了，帮我找一下项目里支付宝生产配置要改哪些地方”。让 Agent 帮助您定位文件/变量名，但不要把生产应用私钥、账号密码、支付凭证或未脱敏通知内容直接发给 Agent。'
   ].join('\n');
 }
 
@@ -1355,7 +1425,12 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
     }
     validateVariantInputShape(messageId, variantName, variables);
     for (const definition of message.variables) {
-      normalized[definition.name] = definition.derived ? '' : validateValue(definition, variables[definition.name], policy);
+      if (definition.name === 'sandboxSummary') {
+        try { normalized.sandboxSummary = validateValue(definition, variables.sandboxSummary, policy); }
+        catch { normalized.sandboxSummary = ''; }
+      } else {
+        normalized[definition.name] = definition.derived ? '' : validateValue(definition, variables[definition.name], policy);
+      }
     }
   } catch (error) {
     throw addManagedEntrypointHint(messageId, error);
@@ -1373,6 +1448,14 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
   if (messageId === 'onboarding.mcc.candidates') {
     normalized.candidateTable = mccCandidateTable(variantName, variables.mccCandidates, telemetryContext.productType);
   }
+  if (messageId === 'sandbox.environment.summary' && variantName === 'FINAL') {
+    if (variables.productName !== 'AI 网页应用收款') throw new Error('最终沙箱测试配置仅适用于 AI 网页应用收款');
+    const buyerRows = variables.environmentRows.split('\n').slice(1);
+    if (buyerRows.some((row) => row.includes('已写入本地配置文件，默认不在对话中展开'))) {
+      throw new Error('网页收款最终沙箱测试配置必须展示已校验的买家密码明文');
+    }
+    normalized.sandboxBuyerRows = buyerRows.join('\n');
+  }
   if (messageId === 'application.operation.result') {
     if (variantName === 'ALIPAY_PUBLIC_KEY_MANUAL_CONFIGURATION') {
       if (variables.actualStatus !== '需人工配置') {
@@ -1468,6 +1551,7 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
     }[variables.integrationStatus];
   }
   if (messageId === 'integration.checklist.result') {
+    validateChecklistItemClassification(variables, ['failedItems', 'manualItems']);
     const sandboxPending = variables.sandboxConfigState !== 'READY';
     const hasBlockingDefect = variables.blockingDefectState === 'PRESENT';
     if (variantName === 'AIPAY' && !variables.sandboxResult) throw new Error('AI 按量付费 checklist 缺少沙箱联调结果');
@@ -1494,8 +1578,8 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
     if (variables.overallResult === '未通过' && !hasFailedItems) {
       throw new Error('代码开发结果为未通过时必须列出未通过项');
     }
-    if (variables.overallResult === '通过' && hasBlockingDefect) {
-      throw new Error('代码开发通过时不得存在其他阻塞缺口');
+    if (hasBlockingDefect && variables.overallResult !== '未通过') {
+      throw new Error('存在代码、安全或必要依据阻塞缺口时，代码开发结果必须为未通过');
     }
     if (variables.overallResult !== '通过' && !sandboxPending && !hasBlockingDefect && !manualOnly) {
       throw new Error('沙箱已就绪且没有阻塞缺口时，非通过结果只能来自人工待验证项');
@@ -1521,9 +1605,22 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
     if (variantName === 'WEBPAY' && variables.overallResult === '通过' && variables.webpayExperienceResult === '未提供浏览器付款入口或完整操作指引，需先补齐') {
       throw new Error('AI 网页应用收款未交付付款入口时不得标记代码开发通过');
     }
-    if (manualOnly) {
-      normalized.failedItems = `人工待验证项未完成：${normalized.manualItems}`;
-    }
+    normalized.checklistDetails = variables.executionMode === '仅代码开发'
+      ? ''
+      : [
+        ...(hasFailedItems ? [`未完成项：${normalized.failedItems}`] : []),
+        ...(hasManualItems ? [`人工待验证：${normalized.manualItems}`] : [])
+      ].join('\n');
+    const productName = { AIPAY: 'AI 按量付费', WEBPAY: 'AI 网页应用收款', APPPAY: 'AI 移动应用收款' }[variantName];
+    normalized.launchGuidance = variables.executionMode === '仅代码开发'
+      ? productionReadinessBlock(productName, {
+        productBranchesComplete: false,
+        integrationOnly: true,
+        failedItems: variables.failedItems,
+        integrationResult: variables.overallResult === '通过' ? '已完成' : sandboxPending ? '部分完成，沙箱配置待完成' : hasBlockingDefect ? '未通过' : '部分完成，人工待验证',
+        manualVerificationItems: variables.manualItems,
+        sandboxBlock: sandboxReplayBlock(normalized.sandboxSummary, productName, variables.sandboxConfigState)
+      }) : '';
   }
   if (messageId === 'materials.category.collect') {
     const expectedStatus = {
@@ -1575,6 +1672,7 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
     normalized.specialQualificationHint = variables.specialQualificationHint || '';
   }
   if (messageId === 'process.partial_result') {
+    validateChecklistItemClassification(variables, ['remainingActions', 'manualVerificationItems']);
     const statusQueryHintDefinition = definitions.get('statusQueryHint');
     const statusQueryHint = statusQueryHintDefinition?.values?.[0];
     if (!statusQueryHintDefinition?.derived || !statusQueryHint) {
@@ -1597,12 +1695,10 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
     if (onboardingOnly) {
       if (variables.sandboxConfigState !== undefined) throw new Error('onboarding_only 禁止传入代码开发沙箱状态');
       if (hasManualVerificationItems) throw new Error('onboarding_only 禁止传入代码开发人工待验证项');
-      normalized.manualVerificationLine = '';
       normalized.sandboxRecoveryHint = '';
     } else if (variables.integrationResult === '已完成') {
       if (variables.sandboxConfigState !== 'READY') throw new Error('完整代码开发结果必须绑定 READY 沙箱状态');
       if (hasManualVerificationItems) throw new Error('代码开发已完成时禁止传入人工待验证项');
-      normalized.manualVerificationLine = '';
       normalized.sandboxRecoveryHint = '';
     } else if (variables.integrationResult === '部分完成，沙箱配置待完成') {
       if (hasManualVerificationItems) throw new Error('沙箱待配置结果不通过人工待验证项表达');
@@ -1612,11 +1708,9 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
       }[variables.sandboxConfigState];
       if (!normalized.sandboxRecoveryHint) throw new Error('沙箱待配置结果必须绑定 CREATE_PENDING 或 VERIFY_PENDING');
       if (variables.remainingActions === '无') throw new Error('沙箱待配置时必须保留剩余待办');
-      normalized.manualVerificationLine = '';
     } else if (variables.integrationResult === '部分完成，人工待验证') {
       if (variables.sandboxConfigState !== 'READY') throw new Error('人工待验证结果必须绑定 READY 沙箱状态');
       if (!hasManualVerificationItems) throw new Error('人工待验证结果必须列出人工待验证项');
-      normalized.manualVerificationLine = `人工待验证：${normalized.manualVerificationItems}`;
       normalized.sandboxRecoveryHint = '';
     } else {
       throw new Error('full_process 进入产品开通收口时只允许已完成、沙箱待配置或人工待验证');
@@ -1640,7 +1734,10 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
       !hasManualVerificationItems;
     normalized.productionReadinessBlock = productionReadinessBlock(variables.productName, {
       productBranchesComplete,
-      integrationResult: variables.integrationResult
+      remainingActions: normalized.remainingActions,
+      integrationResult: variables.integrationResult,
+      manualVerificationItems: variables.manualVerificationItems,
+      sandboxBlock: sandboxReplayBlock(onboardingOnly ? '' : normalized.sandboxSummary, variables.productName, variables.sandboxConfigState)
     });
     const declaresComplete = variables.processResultTitle === '支付产品-产品开通已完成';
     if (branchesComplete !== declaresComplete) {
@@ -1653,7 +1750,7 @@ export function renderMessage(messageId, variantName, variables, telemetryContex
   if (messageId === 'service.create.summary') validateServiceCreateSummary(variantName, variables, normalized);
   if (messageId === 'onboarding.write.confirm') validateWriteConfirmation(variantName, variables, normalized);
   let rendered = variant.templateLines.join('\n').replace(placeholderPattern, (_, name) => normalized[name]);
-  if (messageId === 'application.operation.result' || messageId === 'process.partial_result' || messageId === 'error.backend' || messageId === 'error.cli') {
+  if (messageId === 'application.operation.result' || messageId === 'process.partial_result' || messageId === 'integration.checklist.result' || messageId === 'sandbox.environment.summary' || messageId === 'error.backend' || messageId === 'error.cli') {
     rendered = normalizeProcessPartialResultSpacing(rendered);
   }
   if (message.blocking && allowedRepliesFor(catalog, message).length > 0) {