@arcships/morula-runtime 0.1.0-alpha.18 → 0.1.0-alpha.19

package/dist/morula.js

@@ -704,8 +704,8 @@ function page(ok, message) {
 }
 
 // ../morula-cli-core/dist/build-env.js
-var BUILD_VERSION = "0.1.0-alpha.18";
-var BUILD_ID = "20260930091135.016ba78e";
+var BUILD_VERSION = "0.1.0-alpha.19";
+var BUILD_ID = "20261010070134.5226cb13";
 var BUILD_CONTEXTS = {
   "local": "http://localhost:8080/api",
   "test": "https://morula.basecastle.com/api",
@@ -1261,6 +1261,28 @@ function requiredKey(key) {
   return normalized;
 }
 
+// ../morula-api-client/dist/observability.js
+var ObservabilityApi = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  /** 任务面运行环境（任务凭证；不要传空间） */
+  taskEnv(taskId, query = {}) {
+    return this.client.get(`/agent-tasks/${encodeURIComponent(requiredId7(taskId, "task id"))}/observability/env`, query);
+  }
+  /** 用户面运行环境（`--space <spaceId>`） */
+  spaceEnv(spaceId, query = {}) {
+    return this.client.get(`/spaces/${encodeURIComponent(requiredId7(spaceId, "space id"))}/observability/env`, query);
+  }
+};
+function requiredId7(id, label) {
+  const normalized = id.trim();
+  if (!normalized)
+    throw new TypeError(`${label} is required`);
+  return normalized;
+}
+
 // ../morula-api-client/dist/repo.js
 var RepoApi = class {
   client;
@@ -1269,14 +1291,14 @@ var RepoApi = class {
   }
   /** 目录清单（path 缺省 = 仓库根） */
   files(spaceId, query = {}) {
-    return this.client.get(`/spaces/${encodeURIComponent(requiredId7(spaceId))}/repo/files`, query);
+    return this.client.get(`/spaces/${encodeURIComponent(requiredId8(spaceId))}/repo/files`, query);
   }
   /** 单文件内容（path 必填） */
   read(spaceId, query) {
-    return this.client.get(`/spaces/${encodeURIComponent(requiredId7(spaceId))}/repo/file`, query);
+    return this.client.get(`/spaces/${encodeURIComponent(requiredId8(spaceId))}/repo/file`, query);
   }
 };
-function requiredId7(id) {
+function requiredId8(id) {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError("space id is required");
@@ -1293,13 +1315,13 @@ var ReportApi = class {
     return this.client.post("/agent-reports", input);
   }
   get(id) {
-    return this.client.get(`/agent-reports/${encodeURIComponent(requiredId8(id))}`);
+    return this.client.get(`/agent-reports/${encodeURIComponent(requiredId9(id))}`);
   }
   listByAutopilot(autopilotId, query = {}) {
-    return this.client.get(`/agent-autopilots/${encodeURIComponent(requiredId8(autopilotId, "autopilot"))}/reports`, { ...query });
+    return this.client.get(`/agent-autopilots/${encodeURIComponent(requiredId9(autopilotId, "autopilot"))}/reports`, { ...query });
   }
 };
-function requiredId8(id, label = "report") {
+function requiredId9(id, label = "report") {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError(`${label} id is required`);
@@ -1316,19 +1338,19 @@ var SpaceMemberApi = class {
     return this.client.get("/space-members", { spaceId, ...query });
   }
   get(id) {
-    return this.client.get(`/space-members/${encodeURIComponent(requiredId9(id))}`);
+    return this.client.get(`/space-members/${encodeURIComponent(requiredId10(id))}`);
   }
   create(input) {
     return this.client.post("/space-members", input);
   }
   update(id, input) {
-    return this.client.patch(`/space-members/${encodeURIComponent(requiredId9(id))}`, input);
+    return this.client.patch(`/space-members/${encodeURIComponent(requiredId10(id))}`, input);
   }
   delete(id) {
-    return this.client.delete(`/space-members/${encodeURIComponent(requiredId9(id))}`);
+    return this.client.delete(`/space-members/${encodeURIComponent(requiredId10(id))}`);
   }
 };
-function requiredId9(id) {
+function requiredId10(id) {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError("space member id is required");
@@ -1345,19 +1367,19 @@ var SpaceApi = class {
     return this.client.get("/spaces", query);
   }
   get(id) {
-    return this.client.get(`/spaces/${encodeURIComponent(requiredId10(id))}`);
+    return this.client.get(`/spaces/${encodeURIComponent(requiredId11(id))}`);
   }
   create(input) {
     return this.client.post("/spaces", input);
   }
   update(id, input) {
-    return this.client.patch(`/spaces/${encodeURIComponent(requiredId10(id))}`, input);
+    return this.client.patch(`/spaces/${encodeURIComponent(requiredId11(id))}`, input);
   }
   delete(id) {
-    return this.client.delete(`/spaces/${encodeURIComponent(requiredId10(id))}`);
+    return this.client.delete(`/spaces/${encodeURIComponent(requiredId11(id))}`);
   }
 };
-function requiredId10(id) {
+function requiredId11(id) {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError("space id is required");
@@ -1372,14 +1394,14 @@ var StewardApi = class {
   }
   /** 管家信息（未接管的空间返回 null） */
   get(projectId) {
-    return this.client.get(`/stewards/projects/${encodeURIComponent(requiredId11(projectId))}`);
+    return this.client.get(`/stewards/projects/${encodeURIComponent(requiredId12(projectId))}`);
   }
   /** 派单：建任务并派发（目标状态由 state 决定，backlog 不派发执行） */
   dispatch(projectId, input) {
-    return this.client.post(`/stewards/projects/${encodeURIComponent(requiredId11(projectId))}/dispatch`, input);
+    return this.client.post(`/stewards/projects/${encodeURIComponent(requiredId12(projectId))}/dispatch`, input);
   }
 };
-function requiredId11(id) {
+function requiredId12(id) {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError("project id is required");
@@ -1396,16 +1418,16 @@ var TaskApi = class {
     return this.client.get("/objects", query);
   }
   get(id) {
-    return this.client.get(`/objects/${encodeURIComponent(requiredId12(id))}`);
+    return this.client.get(`/objects/${encodeURIComponent(requiredId13(id))}`);
   }
   create(input) {
     return this.client.post("/objects", input);
   }
   update(id, input) {
-    return this.client.patch(`/objects/${encodeURIComponent(requiredId12(id))}`, input);
+    return this.client.patch(`/objects/${encodeURIComponent(requiredId13(id))}`, input);
   }
   delete(id) {
-    return this.client.delete(`/objects/${encodeURIComponent(requiredId12(id))}`);
+    return this.client.delete(`/objects/${encodeURIComponent(requiredId13(id))}`);
   }
   /** 查询空间字段模板（字段 key → id 映射、options） */
   getSchemaFields(spaceId) {
@@ -1434,7 +1456,7 @@ var TaskApi = class {
     return this.client.delete(`/object-field-values`, { objectId, schemaFieldId });
   }
 };
-function requiredId12(id) {
+function requiredId13(id) {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError("task id is required");
@@ -1467,6 +1489,7 @@ var MorulaClient = class {
   dashboard;
   documents;
   objectMeta;
+  observability;
   reports;
   repos;
   tasks;
@@ -1485,6 +1508,7 @@ var MorulaClient = class {
     this.dashboard = new DashboardApi(this.http);
     this.documents = new DocumentApi(this.http);
     this.objectMeta = new ObjectMetaApi(this.http);
+    this.observability = new ObservabilityApi(this.http);
     this.reports = new ReportApi(this.http);
     this.repos = new RepoApi(this.http);
     this.tasks = new TaskApi(this.http);
@@ -1498,6 +1522,17 @@ function createMorulaClient(options) {
   return new MorulaClient(options);
 }
 
+// ../morula-cli-core/dist/context.js
+function rawText(text) {
+  return { kind: "raw-text", text };
+}
+function rawTextOf(value) {
+  if (typeof value !== "object" || value === null)
+    return null;
+  const candidate = value;
+  return candidate.kind === "raw-text" && typeof candidate.text === "string" ? candidate.text : null;
+}
+
 // ../morula-cli-core/dist/help.js
 var HELP_SCHEMA_VERSION = 1;
 function actionUsage(action) {
@@ -1923,7 +1958,8 @@ async function run(argv, deps = {}) {
       clientCaps: CLI_CAPABILITIES.join(",")
     });
     const result = await handler({ parsed, client, store, runtime, env, err, setExitCode });
-    out(JSON.stringify(result, null, 2));
+    const raw = rawTextOf(result);
+    out(raw ?? JSON.stringify(result, null, 2));
     return requestedExit ?? EXIT.OK;
   } catch (error) {
     if (error instanceof CliError || error instanceof MorulaApiError) {
@@ -2993,6 +3029,101 @@ async function tryLocalPrepare(taskId, repoFullName) {
   }
 }
 
+// ../morula-cli/src/commands/obs.ts
+var OBS_FLAGS = ["source", "space"];
+var OBS_USAGE = "usage: morula obs env [--source <name|id>] [--space <spaceId>] [--json]";
+async function obsCommand(context) {
+  if (!context.runtime.token) {
+    throw new CliError("UNAUTHENTICATED", EXIT.UNAUTHENTICATED, "\u8BF7\u5148\u8FD0\u884C morula auth login", false, {
+      hint: "morula auth login"
+    });
+  }
+  const { action, flags } = context.parsed;
+  rejectUnknownFlags(flags, [...OBS_FLAGS]);
+  if (action !== "env")
+    throw usage(OBS_USAGE);
+  return obsEnv(context);
+}
+async function obsEnv(context) {
+  const { flags } = context.parsed;
+  const source = flagString(flags, "source")?.trim() || void 0;
+  const face = await resolveFace2(context);
+  const view = await fetchEnv(context, face, source);
+  if (view.server === null || view.token === null)
+    context.setExitCode(EXIT.NOT_FOUND);
+  return flagBoolean(flags, "json") ? view : rawText(renderEnvScript(view));
+}
+async function resolveFace2(context) {
+  const spaceId = flagString(context.parsed.flags, "space")?.trim();
+  const taskId = await resolveTaskId(context);
+  if (spaceId && taskId) {
+    throw usage(`--space \u4E0E\u4EFB\u52A1\u9762\u4E92\u65A5\uFF0C\u53EA\u80FD\u7ED9\u4E00\u4E2A\uFF08${OBS_USAGE}\uFF09`, {
+      hint: "\u7528\u6237\u8EAB\u4EFD\u8BF7\u5728\u4EFB\u52A1\u5DE5\u4F5C\u533A\u5916\u8FD0\u884C\uFF08\u6216\u5148 unset MORULA_TASK_ID\uFF09"
+    });
+  }
+  if (spaceId)
+    return { kind: "space", spaceId };
+  if (taskId)
+    return { kind: "task", taskId };
+  throw usage(`morula obs env \u9700\u8981\u8EAB\u4EFD\u9762\uFF1A\u4EFB\u52A1\u9762\uFF08MORULA_TASK_ID / .morula/checkout.json\uFF09\u6216\u7528\u6237\u9762\uFF08--space <spaceId>\uFF09`, {
+    hint: "morula obs env --space <spaceId>  # \u7528\u6237\u8EAB\u4EFD\uFF1B\u6216\u5728\u4EFB\u52A1\u5DE5\u4F5C\u533A\u5185\u8FD0\u884C"
+  });
+}
+async function fetchEnv(context, face, source) {
+  const query = source ? { source } : {};
+  try {
+    return face.kind === "space" ? await context.client.observability.spaceEnv(face.spaceId, query) : await context.client.observability.taskEnv(face.taskId, query);
+  } catch (error) {
+    throw withEnvHint(error, face, source);
+  }
+}
+function withEnvHint(error, face, source) {
+  if (!(error instanceof MorulaApiError))
+    return error;
+  if (error.status === 401) {
+    return new CliError("UNAUTHENTICATED", EXIT.UNAUTHENTICATED, `\u6362\u53D6\u53EF\u89C2\u6D4B\u6027\u8FD0\u884C\u73AF\u5883\u5931\u8D25\uFF1A${error.message}`, false, {
+      hint: face.kind === "space" ? "morula auth login" : "\u672C\u4EFB\u52A1\u7684\u51ED\u8BC1\u5DF2\u5931\u6548\uFF1A\u786E\u8BA4\u4EFB\u52A1\u4ECD\u5728\u6267\u884C\u4E2D\uFF0C\u6216\u6539\u7528 --space <spaceId> \u4EE5\u7528\u6237\u8EAB\u4EFD\u6362\u53D6"
+    });
+  }
+  if (error.status === 403) {
+    return new CliError("FORBIDDEN", EXIT.FORBIDDEN, `\u6362\u53D6\u53EF\u89C2\u6D4B\u6027\u8FD0\u884C\u73AF\u5883\u5931\u8D25\uFF1A${error.message}`, false, {
+      hint: face.kind === "space" ? `\u786E\u8BA4 --space ${face.spaceId} \u662F\u5F53\u524D\u8EAB\u4EFD\u6709\u6743\u9650\u7684\u7A7A\u95F4` : "\u672C\u4EFB\u52A1\u7684\u51ED\u8BC1\u65E0\u6743\u8BBF\u95EE\u8BE5\u7A7A\u95F4\u7684\u53EF\u89C2\u6D4B\u6027\u6570\u636E\u6E90\uFF1A\u8054\u7CFB\u7A7A\u95F4\u7BA1\u7406\u5458\u6838\u5BF9\u914D\u7F6E"
+    });
+  }
+  if (error.status === 404) {
+    return new CliError(
+      "OBS_SOURCE_NOT_FOUND",
+      EXIT.NOT_FOUND,
+      source ? `--source ${source} \u5728\u672C\u7A7A\u95F4\u4E0D\u5B58\u5728\uFF1A${error.message}` : `\u672C\u7A7A\u95F4\u6CA1\u6709\u53EF\u7528\u7684\u53EF\u89C2\u6D4B\u6027\u6570\u636E\u6E90\uFF1A${error.message}`,
+      false,
+      { hint: "morula obs env --json  # \u4E0D\u5E26 --source \u7528\u9ED8\u8BA4\u6E90\u6362\u53D6\uFF1Bcontext.sources \u5217\u51FA\u672C\u7A7A\u95F4\u5168\u90E8\u53EF\u7528\u6E90" }
+    );
+  }
+  return error;
+}
+function renderEnvScript(view) {
+  if (view.server === null || view.token === null) {
+    const lines2 = view.notice ? commentLines(view.notice) : ["# \u672C\u7A7A\u95F4\u6CA1\u6709\u53EF\u7528\u7684\u53EF\u89C2\u6D4B\u6027\u6570\u636E\u6E90\uFF08\u672A\u914D\u7F6E\uFF0C\u6216\u5168\u90E8\u5DF2\u505C\u7528\uFF09"];
+    lines2.push("# \u914D\u7F6E\u597D\u6570\u636E\u6E90\u540E\u91CD\u65B0\u6267\u884C\uFF1Amorula obs env");
+    return lines2.join("\n");
+  }
+  const lines = [`# \u4EE4\u724C 30 \u5206\u949F\u540E\u8FC7\u671F${view.expiresAt ? `\uFF08${view.expiresAt}\uFF09` : ""}\uFF1B\u6362\u6E90\u8BF7\u52A0 --source <name|id>`];
+  if (view.notice)
+    lines.push(...commentLines(view.notice));
+  lines.push(`export GRAFANA_SERVER=${shellQuote(view.server)}`);
+  lines.push(`export GRAFANA_TOKEN=${shellQuote(view.token)}`);
+  const orgId = view.context?.orgId;
+  if (orgId !== void 0 && orgId !== null)
+    lines.push(`export GRAFANA_ORG_ID=${shellQuote(String(orgId))}`);
+  return lines.join("\n");
+}
+function shellQuote(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+function commentLines(text) {
+  return text.split("\n").map((line) => `# ${line}`.trimEnd());
+}
+
 // ../morula-cli/src/commands/report.ts
 import { readFile as readFile2 } from "node:fs/promises";
 async function reportCommand(context) {
@@ -3550,12 +3681,12 @@ var SPEC = {
         },
         {
           action: "create",
-          summary: "create an autopilot (--executor is a runtime key; the server currently only accepts `dim`)",
+          summary: "create an autopilot (--executor is a runtime key from the built-in catalog or one your tenant has reported)",
           flags: [
             { name: "space", type: "string", valueHint: "<id>", description: "\u5F52\u5C5E\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true },
             { name: "name", type: "string", valueHint: "<text>", description: "\u540D\u79F0\uFF08\u540C\u79DF\u6237\u552F\u4E00\uFF0C\u5FC5\u586B\uFF09", required: true },
             { name: "runbook", type: "string", valueHint: "<text>", description: "Runbook\uFF1A\u6BCF\u6B21\u89E6\u53D1\u7ED9\u8FD0\u884C\u65F6\u7684\u76EE\u6807/\u80CC\u666F/\u6B65\u9AA4\uFF08\u5FC5\u586B\uFF09", required: true },
-            { name: "executor", type: "string", valueHint: "<key>", description: "\u6267\u884C\u8005\u8FD0\u884C\u65F6 key\uFF08\u5FC5\u586B\uFF1B\u5F53\u524D\u4EC5 dim\uFF09", required: true },
+            { name: "executor", type: "string", valueHint: "<key>", description: "\u6267\u884C\u8005\u8FD0\u884C\u65F6 key\uFF08\u5FC5\u586B\uFF1B\u5185\u7F6E dim / claude / codex \u6216\u672C\u79DF\u6237\u5DF2\u4E0A\u62A5\u7684 provider\uFF09", required: true },
             { name: "description", type: "string", valueHint: "<text>", description: "\u63CF\u8FF0" },
             { name: "cron", type: "string", valueHint: "<expr>", description: "cron \u8868\u8FBE\u5F0F\uFF085 \u5B57\u6BB5\uFF09\uFF1B\u7F3A\u7701 = \u4EC5 webhook \u89E6\u53D1" },
             { name: "vcs-connection", type: "string", valueHint: "<id>", description: "\u9650\u5B9A\u4ED3\u5E93\u8FDE\u63A5\uFF08\u7F3A\u7701\u4E0D\u9650\uFF09" }
@@ -4004,6 +4135,33 @@ var SPEC = {
         "\u670D\u52A1\u7AEF\u4E1A\u52A1\u5931\u8D25\u662F HTTP 200 + `{ ok:false, code, message }`\uFF1ACI_JOB_NOT_FOUND / CI_RUN_NOT_FOUND / TASK_NOT_FOUND / OBJECT_NOT_FOUND \u2192 exit 3\uFF1BCAPABILITY_UNSUPPORTED / NO_CONNECTION / \u5176\u4F59 \u2192 exit 1"
       ]
     },
+    {
+      resource: "obs",
+      summary: "observability runtime environment ONLY \u2014 this is not a query surface. It hands this machine the gateway entry (GRAFANA_SERVER) + a 30-minute, space-scoped, read-only token (GRAFANA_TOKEN) + minimal context (current source + every usable source of the space), so the agent queries line-side facts DIRECTLY with the runtime-managed engine (gcx) through the platform gateway; write paths are refused by the gateway with 403. The platform defines no query command surface: the engine owns the commands and the syntax (gcx --help / gcx commands). Task face by default (task credential, space inferred); --space <spaceId> for the user face",
+      actions: [
+        {
+          action: "env",
+          summary: "exchange the running environment. Default output is a shell export you can `eval` directly (GRAFANA_SERVER / GRAFANA_TOKEN / GRAFANA_ORG_ID); --json returns the raw response (server / token / expiresAt / context / notice). The env is issued PER SOURCE (server carries the sourceId), so switching sources or renewing the 30-minute token means calling this again with --source <name|id>. Nothing is written to disk (the token never touches a file)",
+          flags: [
+            { name: "source", type: "string", valueHint: "<name|id>", description: "\u6570\u636E\u6E90 name \u6216 id\uFF08\u7F3A\u7701\u7528\u7A7A\u95F4\u9ED8\u8BA4\u6E90\uFF1Benv \u6309\u6E90\u7B7E\u53D1\uFF0C\u6362\u6E90\u8BF7\u91CD\u65B0\u8C03\u7528\uFF09" },
+            { name: "space", type: "string", valueHint: "<spaceId>", description: "\u7A7A\u95F4 ID\uFF08\u7528\u6237\u8EAB\u4EFD\uFF1B\u7F3A\u7701\u8D70\u4EFB\u52A1\u9762\uFF0C\u7A7A\u95F4\u7531\u4EFB\u52A1\u51ED\u8BC1\u63A8\u65AD\uFF1B\u4E0E\u4EFB\u52A1\u9762\u4E92\u65A5\uFF09" },
+            { name: "json", type: "boolean", description: "\u8F93\u51FA\u8FD0\u884C\u73AF\u5883\u63A5\u53E3\u7684\u539F\u59CB\u54CD\u5E94 JSON\uFF08server / token / expiresAt / context / notice\uFF09\uFF0C\u800C\u4E0D\u662F\u53EF eval \u7684 shell export" }
+          ],
+          examples: ['eval "$(morula obs env)"', "morula obs env --source staging --json"],
+          writes: "none",
+          interactive: false,
+          idempotent: true,
+          emits: ["server", "token", "expiresAt", "context", "notice"]
+        }
+      ],
+      notes: [
+        "\u53EA\u4EA4\u4ED8\u8FD0\u884C\u73AF\u5883\uFF0C\u4E0D\u662F\u67E5\u8BE2\u547D\u4EE4\u9762\uFF1A\u67E5\u8BE2\u7531 agent \u76F4\u63A5\u7528\u53D7\u7BA1\u5F15\u64CE\uFF08`gcx`\uFF09\u53D1\u8D77\u2014\u2014\u547D\u4EE4\u4E0E\u8BED\u6CD5\u662F\u5F15\u64CE\u7684\u8FD0\u884C\u671F\u8D44\u4EA7\uFF08`gcx --help` / `gcx commands`\uFF09\uFF0C\u5E73\u53F0\u4E0D\u5217\u4E3E\u3001\u4E0D\u4EE3\u7406",
+        "\u53EA\u8BFB\u8FB9\u754C\u5728\u5E73\u53F0\u7F51\u5173\uFF08\u5199\u65B9\u6CD5\u4E00\u5F8B 403\uFF09\uFF0C\u4E0D\u5728 CLI\uFF1A\u672C resource \u6CA1\u6709\u5199\u64CD\u4F5C\uFF0C\u4E5F\u6CA1\u6709 raw / \u900F\u4F20\u5B50\u547D\u4EE4",
+        "**\u4E0D\u5199\u4EFB\u4F55\u6587\u4EF6**\u3001\u65E0\u526F\u4F5C\u7528\uFF1A\u4EE4\u724C\u53EA\u6253\u5370\uFF0C\u4E0D\u8FDB argv\u3001\u4E0D\u8FDB\u65E5\u5FD7\u3001\u4E0D\u843D\u76D8",
+        "\u6CA1\u6709\u53EF\u7528\u6E90\uFF08\u672A\u914D\u7F6E / \u5168\u90E8\u505C\u7528 / \u6CA1\u6709\u9ED8\u8BA4\u6E90 / \u6307\u5B9A\u6E90\u5DF2\u505C\u7528\uFF09\u2192 200 + `server` / `token` \u4E3A null + `notice`\uFF1A\u9ED8\u8BA4\u8F93\u51FA\u53EA\u7ED9\u6CE8\u91CA\uFF08\u4EBA\u8BDD + \u53EF\u6267\u884C\u4E0B\u4E00\u6B65\uFF09\uFF0C**\u9000\u51FA\u7801 3\uFF08not found\uFF09**",
+        "\u9000\u51FA\u7801\uFF1A\u7F3A\u8EAB\u4EFD\u9762 / \u4E24\u9762\u540C\u65F6\u7ED9 \u2192 2\uFF1B\u6CA1\u6709\u53EF\u7528\u8FD0\u884C\u73AF\u5883\u3001`--source` \u4E0D\u5B58\u5728 \u2192 3\uFF1B\u6362\u53D6 401 \u2192 4\uFF1B\u6362\u53D6 403 \u2192 5\uFF1B\u7F51\u7EDC / \u4E0A\u6E38 \u2192 7\uFF08\u90FD\u5E26\u53EF\u6267\u884C hint\uFF09"
+      ]
+    },
     {
       resource: "attachment",
       summary: "file attachments for objects / comments / chat messages (local file upload)",
@@ -4447,6 +4605,7 @@ var COMMANDS = {
   "dashboard": dashboardCommand,
   "document": documentCommand,
   "object-meta": objectMetaCommand,
+  "obs": obsCommand,
   "report": reportCommand,
   "repo": repoCommand,
   "review": reviewCommand,

package/dist/plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "morula-cli",
-  "version": "0.1.0-alpha.18",
+  "version": "0.1.0-alpha.19",
   "description": "Use Morula CLI task management from DimCode.",
   "interface": {
     "displayName": "Morula CLI",

package/dist/plugin/skills/morula-cli/references/commands.md

@@ -754,14 +754,14 @@ morula autopilot list --space <id>
 
 **用法**：`morula autopilot create [--space <id>] [--name <text>] [--runbook <text>] [--executor <key>] [--description <text>] [--cron <expr>] [--vcs-connection <id>]`
 
-create an autopilot (--executor is a runtime key; the server currently only accepts `dim`)
+create an autopilot (--executor is a runtime key from the built-in catalog or one your tenant has reported)
 
 | Flag | 类型 | 必填 | 取值 | 默认 | 说明 |
 |---|---|---|---|---|---|
 | `--space <id>` | string | 是 | - | - | 归属空间 ID（必填） |
 | `--name <text>` | string | 是 | - | - | 名称（同租户唯一，必填） |
 | `--runbook <text>` | string | 是 | - | - | Runbook：每次触发给运行时的目标/背景/步骤（必填） |
-| `--executor <key>` | string | 是 | - | - | 执行者运行时 key（必填；当前仅 dim） |
+| `--executor <key>` | string | 是 | - | - | 执行者运行时 key（必填；内置 dim / claude / codex 或本租户已上报的 provider） |
 | `--description <text>` | string | - | - | - | 描述 |
 | `--cron <expr>` | string | - | - | - | cron 表达式（5 字段）；缺省 = 仅 webhook 触发 |
 | `--vcs-connection <id>` | string | - | - | - | 限定仓库连接（缺省不限） |
@@ -1593,6 +1593,42 @@ morula ci retry --space <id> --job <jobId>
 
 ---
 
+## `morula obs`
+
+observability runtime environment ONLY — this is not a query surface. It hands this machine the gateway entry (GRAFANA_SERVER) + a 30-minute, space-scoped, read-only token (GRAFANA_TOKEN) + minimal context (current source + every usable source of the space), so the agent queries line-side facts DIRECTLY with the runtime-managed engine (gcx) through the platform gateway; write paths are refused by the gateway with 403. The platform defines no query command surface: the engine owns the commands and the syntax (gcx --help / gcx commands). Task face by default (task credential, space inferred); --space <spaceId> for the user face
+
+> 只交付运行环境，不是查询命令面：查询由 agent 直接用受管引擎（`gcx`）发起——命令与语法是引擎的运行期资产（`gcx --help` / `gcx commands`），平台不列举、不代理
+> 只读边界在平台网关（写方法一律 403），不在 CLI：本 resource 没有写操作，也没有 raw / 透传子命令
+> **不写任何文件**、无副作用：令牌只打印，不进 argv、不进日志、不落盘
+> 没有可用源（未配置 / 全部停用 / 没有默认源 / 指定源已停用）→ 200 + `server` / `token` 为 null + `notice`：默认输出只给注释（人话 + 可执行下一步），**退出码 3（not found）**
+> 退出码：缺身份面 / 两面同时给 → 2；没有可用运行环境、`--source` 不存在 → 3；换取 401 → 4；换取 403 → 5；网络 / 上游 → 7（都带可执行 hint）
+
+### `morula obs env`
+
+**用法**：`morula obs env [--source <name|id>] [--space <spaceId>] [--json]`
+
+exchange the running environment. Default output is a shell export you can `eval` directly (GRAFANA_SERVER / GRAFANA_TOKEN / GRAFANA_ORG_ID); --json returns the raw response (server / token / expiresAt / context / notice). The env is issued PER SOURCE (server carries the sourceId), so switching sources or renewing the 30-minute token means calling this again with --source <name|id>. Nothing is written to disk (the token never touches a file)
+
+| Flag | 类型 | 必填 | 取值 | 默认 | 说明 |
+|---|---|---|---|---|---|
+| `--source <name\|id>` | string | - | `name` `id` | - | 数据源 name 或 id（缺省用空间默认源；env 按源签发，换源请重新调用） |
+| `--space <spaceId>` | string | - | - | - | 空间 ID（用户身份；缺省走任务面，空间由任务凭证推断；与任务面互斥） |
+| `--json` | boolean | - | - | - | 输出运行环境接口的原始响应 JSON（server / token / expiresAt / context / notice），而不是可 eval 的 shell export |
+
+**示例**
+
+```bash
+eval "$(morula obs env)"
+morula obs env --source staging --json
+```
+
+> `writes: none` · `interactive: no` · `idempotent: yes` · `emits: server, token, expiresAt, context, notice`
+
+<!-- hand:start obs -->
+<!-- hand:end obs -->
+
+---
+
 ## `morula attachment`
 
 file attachments for objects / comments / chat messages (local file upload)

package/dist/plugin/skills/morula-platform/SKILL.md

@@ -0,0 +1,42 @@
+---
+name: morula-platform
+description: "Use when a Morula task needs platform interaction beyond the runtime brief — branch naming and PR/MR channel rules, checkout and multi-repo workspace, status and verdict protocols, in-run feedback, delivery and final-comment discipline, or live incident queries. Open only the reference your task needs (routing table inside); never read them all."
+user-invocable: false
+allowed-tools: Bash(morula *), Bash(git *), Bash(gh *)
+---
+
+> 本文件是随 CLI 插件分发的**文档副本**。daemon 执行任务时会按平台在任务工作区
+> `.agents/skills/morula-platform/` 注入**权威版本**（GitLab 任务会在 git-workflow.md 附带平台说明段，
+> 并按执行 CLI 写入原生发现路径），两者正文同源。命令细节以工作区内注入的那份与 `morula <resource> --help` 为准。
+
+# Morula 平台契约（morula-platform）
+
+本 SKILL 是 Morula 平台对本地智能体（daemon 执行的 AgentTask）的**操作手册入口**。
+分工：系统提示（runtime brief）管你的身份、目标与钥匙；工作区根 `AGENTS.md` 的
+「Morula 平台协作契约」段是**不变量与命令索引**（恒常生效，先读它）；本 SKILL 只做按域手册的路由。
+
+每份手册自包含、互不依赖。按任务需要打开对应的一份或几份（通常一两份），
+**不要**因为不确定就把全部手册读一遍。
+
+## Routing
+
+| 手册 | 任务涉及 |
+|---|---|
+| `.agents/skills/morula-platform/references/workspace.md` | 开工确认现场（git status / 分支现场）、工作区布局与主仓库物化、任务详情与评论获取、环境前置（依赖 / prisma generate）、本地服务端口隔离 |
+| `.agents/skills/morula-platform/references/git-workflow.md` | 分支命名与上报、`repo checkout` / `prepare` 语义、多仓库、推分支、建 PR/MR（含 GitLab 平台说明）、PR 关联与关单 |
+| `.agents/skills/morula-platform/references/task-protocols.md` | 状态流转（task state / assign）、分析任务 verdict、评审任务 submit、运行中反馈（inbox / 打断）、MR 巡检评论 |
+| `.agents/skills/morula-platform/references/delivery.md` | 最终总结评论纪律、`---FINAL---` 分隔符、attachment 文件回传、report 报告、交付物表述 |
+| `.agents/skills/morula-platform/references/observability.md` | 排查线上行为 / 故障：gcx 引擎、数据源选择、只读边界、结果纪律 |
+
+跨任务类型的通用约束（CLI-only、不碰凭据、结论先行、纯问答不建分支等）在 `AGENTS.md` 契约核心段，
+不在本表内重复。
+
+## 降级说明
+
+若 `skill` 工具按名加载本 SKILL 报 `Unknown skill`（发现范围不含项目级目录），直接读本文件与
+references 文件即可，**不要因为加载失败就跳过契约**。
+
+## References
+
+`.agents/skills/morula-platform/references/working-on-issues-source-map.md` —— 每条契约对应的服务端/CLI 实现位置（`file:line`），
+用于校准契约与实现一致。

package/dist/plugin/skills/morula-platform/references/delivery.md

@@ -0,0 +1,60 @@
+# 交付纪律（评论 / 文件 / 报告）
+
+> 评论/附件/报告命令索引见 `AGENTS.md` 契约核心段。
+
+## 生成文件必须回传平台（智能体 → 平台）
+
+若你的交付物是**文件**（报告、文档、图表格、xlsx、图片、压缩包等），且用户需要在线查看/下载，**必须**用 `morula attachment upload` 把本机文件回传到平台，而不是在消息里给一个本地相对路径/文件名（用户打不开）：
+
+- **纯 Chat 会话任务（推荐）**：本任务不关联业务对象（task-context.md 无 objectId），**必须带 `--task <AgentTaskID>`**（AgentTask ID = `morula task get`（无参）返回的 `id`（或 task-context.md 开头的 UUID）），服务端据此把文件挂到本 Chat 会话消息：
+  ```bash
+  morula attachment upload <file> --task <AgentTaskID>
+  ```
+- **默认智能归并**（有绑定对象时）：不传目标参数，服务端自动决定——有任务绑定对象挂对象：
+  ```bash
+  morula attachment upload <file>
+  ```
+- **显式挂任务对象**（用户从任务/评论发起、任务有 objectId）：
+  ```bash
+  morula attachment upload <file> --object <objectId>
+  ```
+- **显式挂指定评论**：`morula attachment upload <file> --comment <commentId>`
+- **显式挂 Chat 会话消息**：`morula attachment upload <file> --ag-message --task <AgentTaskID>`
+
+**回传后**：命令输出 JSON，含 `downloadUrl` 与附件 `id`。在最终总结里**引用下载链接**（`http...` 或附件的可下载地址），并说明文件名即可——不要把本地绝对路径/相对文件名当交付物。<br>
+**文件类型不限**，单文件上限 20MB；超限需拆分或说明，不要硬传失败。
+
+## 自动化的信息类产出：用 `morula report create`
+
+当本任务是**自动化（定时/触发）派发**的，且你的产出是给人看的**信息类结果**（巡检/扫描结论、摘要、分析），用报告承载：
+
+```bash
+morula report create --title "<一句话标题>" --content "<Markdown 正文>"   # 正文长时用 --content-file <path>
+```
+
+- 报告落在**本次执行所属自动化的「报告」入口**（不在任务看板、不占任务编号），归属由平台自动绑定，不用传；
+- 一次执行可产出多份（一份报告一个主题）；**要建工单请用任务，不要把待办事项写进报告正文**；
+- 报告落库后创建者与订阅者会收到轻通知（只含标题与跳转）；
+- 不产出也没关系：任务终态时平台会用你的最终输出兜底落一份报告（但兜底不如你主动组织的内容清晰，信息类产出**优先主动产出**）。
+
+## 评论交付纪律（最终总结由你自己发布）
+
+- **最终总结评论由你自己发布**：任务收尾时执行
+  ```bash
+  morula comment add --object <objectId> --final --content <结论>
+  ```
+  作者=你（智能体身份）；评论触发任务时服务端会**自动把它挂到触发评论下**作为回复（无需自己查评论 ID）。
+  **完成后必须在任务评论区留下一条你自己的总结性评论（做了什么、结果、后续），再上报任务结果**——这是交付的一部分，一条评论都没发不算完成。服务端只在你一条评论都没发时才兜底代发。
+  `--final` 是防重标记（同一任务重复执行只保留一条总结，重试/重跑不会发第二条；重复发送被服务端拒绝是预期内的幂等保护），不是交付判据——收尾总结推荐带上。
+- **例外：评审任务不需要（也不应）发 final**——你的结论已经通过 `morula review submit` 机器协议上报，平台会据此写权威结论评论（✅ 通过 / 💬 非阻塞 / 🔁 未通过）；再发一条 final 总结会让同一结论在评论区**说两遍**（服务端也会拒绝评审任务的 final）。需要发 final 的是开发 / 修复 / 分析 / 问答 / 评论触发类任务——内容**用你自己的话写**，不要套模板。
+- **普通评论**（说明进展、@ 其他人或运行时）随时可发：
+  ```bash
+  morula comment add --object <objectId> --content <文本>
+  morula comment add --object <objectId> --content <文本> --mention-agent <stageExecutorId>   # @ 阶段运行时（触发该执行器在本任务上干活）
+  ```
+  chat 会话无 objectId 的任务（纯对话派发）不发评论——最终交付由 daemon 回填 assistant 消息。
+- **评论纪律：只写结论与事实**——做了什么、结果如何、用户需要知道的后续；**不写**思考过程、探索步骤、工具日志、终端输出、命令回显。用户只关心「做了什么、结果怎样」，不关心「怎么做的」。内容较多时用小标题/列表组织，结论先置顶。
+- **PR 汇报仅当「任务涉及代码改动」或「用户明确问到 PR/合并」时给出**；纯问答/调研类任务不要出现 PR/分支章节。
+- **任务结果文本同样只写结论**：上报的任务结果会被服务端用于缺失兜底与通知摘要——若结果里混入了中间过程（英文探索叙述、工具尝试记录、思考片段），**必须**在真正的总结之前插入独占一行的 `---FINAL---` 分隔符，服务端兜底时只保留它之后的内容（`---SUMMARY---` 同样兼容；不写时服务端退回「按总结类标题 / 水平线猜测」，猜不中会把过程文本一起兜底出去）。
+- **不要把本地绝对路径当交付物**：工作目录路径只属于执行它的机器，读者打不开；生成的文件**必须先回传平台**（见上「生成文件必须回传平台」），交付物用平台下载链接或仓库内相对路径。
+- 不要包含工具调试过程、内部日志、任何凭据或 token 信息。