@hcmai/cli 0.3.6 → 0.3.8

package/dist/index.js

@@ -523,8 +523,8 @@ var init_TerminalRenderer = __esm({
         }
       }
       /** 来源行（仅子代理触发，agentPath ≥2 段时显示 `↑ 来自 a › b`，对齐 Web）。 */
-      originLine(path9) {
-        const segs = path9.split(".").filter(Boolean);
+      originLine(path10) {
+        const segs = path10.split(".").filter(Boolean);
         if (segs.length < 2) return "";
         const names = segs.map((k) => agentDisplayName(k));
         return chalk.gray(`  \u2191 \u6765\u81EA ${names.join(" \u203A ")}`) + "\n";
@@ -1706,8 +1706,8 @@ function agentLabel(agentId) {
   if (/^[0-9a-f]{8}-[0-9a-f-]{27}$/i.test(agentId)) return `agent \u2026${agentId.slice(-4)}`;
   return agentDisplayName(agentId);
 }
-function originLine(path9) {
-  const segs = (path9 ?? "").split(".").filter(Boolean);
+function originLine(path10) {
+  const segs = (path10 ?? "").split(".").filter(Boolean);
   if (segs.length < 2) return null;
   return `\u6765\u81EA ${segs.map((k) => agentDisplayName(k)).join(" \u203A ")}`;
 }
@@ -1940,10 +1940,10 @@ __export(readline_exports, {
 import * as readline2 from "readline";
 function readLineFromStdin(prompt = "") {
   const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     rl.question(prompt, (answer) => {
       rl.close();
-      resolve3(answer);
+      resolve4(answer);
     });
   });
 }
@@ -1992,15 +1992,15 @@ import {
 import * as readline from "readline";
 async function promptText(question) {
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     rl.question(question, (ans) => {
       rl.close();
-      resolve3(ans.trim());
+      resolve4(ans.trim());
     });
   });
 }
 async function promptSecret(question) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     process.stdout.write(question);
     const stdin = process.stdin;
     stdin.setRawMode?.(true);
@@ -2014,7 +2014,7 @@ async function promptSecret(question) {
           stdin.pause();
           stdin.removeListener("data", onData);
           process.stdout.write("\n");
-          resolve3(buf);
+          resolve4(buf);
           return;
         }
         if (ch === "") process.exit(130);
@@ -2286,9 +2286,9 @@ async function loginCommand(args) {
   } catch (e) {
     const err = e;
     if (err.isAxiosError) {
-      const { fromAxiosError: fromAxiosError19 } = await import("@hcmai/sdk");
+      const { fromAxiosError: fromAxiosError20 } = await import("@hcmai/sdk");
       exitWithError(
-        fromAxiosError19(
+        fromAxiosError20(
           e,
           envName
         )
@@ -3059,8 +3059,8 @@ import {
   formatObject as formatObject7,
   fromAxiosError as fromAxiosError8
 } from "@hcmai/sdk";
-function collectYmlFiles(path9) {
-  if (statSync(path9).isFile()) return [path9];
+function collectYmlFiles(path10) {
+  if (statSync(path10).isFile()) return [path10];
   const out = [];
   const walk = (dir) => {
     for (const name of readdirSync(dir).sort()) {
@@ -3069,7 +3069,7 @@ function collectYmlFiles(path9) {
       else if (full.endsWith(".yml") || full.endsWith(".yaml")) out.push(full);
     }
   };
-  walk(path9);
+  walk(path10);
   return out.sort();
 }
 var DRY_RUN_CLIENT = {
@@ -3077,9 +3077,9 @@ var DRY_RUN_CLIENT = {
   create: async () => ({ id: "" }),
   update: async () => ({})
 };
-async function importCommand(path9, args) {
+async function importCommand(path10, args) {
   try {
-    const files = collectYmlFiles(path9);
+    const files = collectYmlFiles(path10);
     const fixtures = files.map(
       (f) => parseFixture(readFileSync2(f, "utf8"), relative(process.cwd(), f))
     );
@@ -3622,11 +3622,11 @@ async function chatCommand(prompt, args) {
           lastConversationId: handle.conversationId,
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
         });
-        await new Promise((resolve3) => {
+        await new Promise((resolve4) => {
           if (process.stdout.writableNeedDrain) {
-            process.stdout.once("drain", resolve3);
+            process.stdout.once("drain", resolve4);
           } else {
-            resolve3();
+            resolve4();
           }
         });
         process.exit(0);
@@ -3693,11 +3693,11 @@ async function chatCommand(prompt, args) {
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
         });
         process.removeListener("SIGINT", sigintHandler);
-        await new Promise((resolve3) => {
+        await new Promise((resolve4) => {
           if (process.stdout.writableNeedDrain) {
-            process.stdout.once("drain", resolve3);
+            process.stdout.once("drain", resolve4);
           } else {
-            resolve3();
+            resolve4();
           }
         });
         process.exit(result2.status === "interrupted" ? 130 : 0);
@@ -5380,11 +5380,11 @@ function preparedFile(filePath, content, mode) {
 }
 async function sha256File(file) {
   const hash = createHash3("sha256");
-  await new Promise((resolve3, reject) => {
+  await new Promise((resolve4, reject) => {
     const stream = createReadStream(file);
     stream.on("data", (chunk) => hash.update(chunk));
     stream.on("error", reject);
-    stream.on("end", resolve3);
+    stream.on("end", resolve4);
   });
   return hash.digest("hex");
 }
@@ -6729,17 +6729,17 @@ async function metaListCommand(args) {
     fail4(e, args);
   }
 }
-async function metaGetCommand(path9, args) {
+async function metaGetCommand(path10, args) {
   try {
     const c = await client2(args);
-    const content = await getTenantMeta(c.raw(), path9);
+    const content = await getTenantMeta(c.raw(), path10);
     process.stdout.write(content.endsWith("\n") ? content : content + "\n");
     process.exit(0);
   } catch (e) {
     fail4(e, args);
   }
 }
-async function metaSetCommand(path9, args) {
+async function metaSetCommand(path10, args) {
   try {
     if (!args.file) {
       throw new CliError20({
@@ -6747,16 +6747,16 @@ async function metaSetCommand(path9, args) {
         message: "--file <path> \u5FC5\u586B\uFF08\u4ECE\u6587\u4EF6\u8BFB\u53D6 meta \u539F\u6587\uFF1B\u7528 - \u8868\u793A stdin\uFF09"
       });
     }
-    const content = args.file === "-" ? await new Promise((resolve3, reject) => {
+    const content = args.file === "-" ? await new Promise((resolve4, reject) => {
       let buf = "";
       process.stdin.setEncoding("utf8");
       process.stdin.on("data", (d) => buf += d);
-      process.stdin.on("end", () => resolve3(buf));
+      process.stdin.on("end", () => resolve4(buf));
       process.stdin.on("error", reject);
     }) : await fsp3.readFile(args.file, "utf8");
     if (args.dryRun) {
       process.stdout.write(
-        `[dry-run] \u5C06\u5199\u5165 ${path9}\uFF08${Buffer.byteLength(content)} B\uFF09\u2014\u2014\u672A\u5B9E\u9645\u5199\u5165
+        `[dry-run] \u5C06\u5199\u5165 ${path10}\uFF08${Buffer.byteLength(content)} B\uFF09\u2014\u2014\u672A\u5B9E\u9645\u5199\u5165
 ---
 ${content}
 `
@@ -6764,10 +6764,10 @@ ${content}
       process.exit(0);
     }
     const c = await client2(args);
-    const result2 = await saveTenantMeta(c.raw(), path9, content);
+    const result2 = await saveTenantMeta(c.raw(), path10, content);
     const fmt = args.output ?? "json";
     if (fmt !== "json") {
-      process.stdout.write(`\u2705 \u5DF2\u5199\u5165 ${path9}
+      process.stdout.write(`\u2705 \u5DF2\u5199\u5165 ${path10}
    \u8BB0\u5F97\u6E05\u7F13\u5B58\uFF1Ahcm cache clear-meta <Model>
 `);
     }
@@ -6778,19 +6778,19 @@ ${content}
     fail4(e, args);
   }
 }
-async function metaDeleteCommand(path9, args) {
+async function metaDeleteCommand(path10, args) {
   try {
     if (!args.yes) {
-      const ok = await promptConfirm(`\u5C06\u5220\u9664\u5143\u6570\u636E ${path9}\uFF0C\u6B64\u64CD\u4F5C\u4E0D\u53EF\u9006\u3002\u7EE7\u7EED\uFF1F`);
+      const ok = await promptConfirm(`\u5C06\u5220\u9664\u5143\u6570\u636E ${path10}\uFF0C\u6B64\u64CD\u4F5C\u4E0D\u53EF\u9006\u3002\u7EE7\u7EED\uFF1F`);
       if (!ok) {
         process.stderr.write("\u5DF2\u53D6\u6D88\n");
         process.exit(1);
       }
     }
     const c = await client2(args);
-    const result2 = await deleteTenantMeta(c.raw(), path9);
+    const result2 = await deleteTenantMeta(c.raw(), path10);
     const fmt = args.output ?? "json";
-    if (fmt !== "json") process.stdout.write(`\u{1F5D1}\uFE0F  \u5DF2\u5220\u9664 ${path9}
+    if (fmt !== "json") process.stdout.write(`\u{1F5D1}\uFE0F  \u5DF2\u5220\u9664 ${path10}
 `);
     process.stdout.write(formatObject16(result2, { format: fmt }) + "\n");
     process.exit(0);
@@ -8644,12 +8644,123 @@ async function deliveryDoctorCommand(args) {
   }
 }
 
+// src/commands/delivery-recon.ts
+init_auth_guard();
+init_exit();
+import {
+  HcmClient as HcmClient19,
+  ReconLayout,
+  ROUND_EXIT_CODES,
+  computeReconSourceKey,
+  formatObject as formatObject20,
+  fromAxiosError as fromAxiosError18,
+  httpProbe as httpProbe2,
+  inspectRound,
+  renderRound,
+  runRecon
+} from "@hcmai/sdk";
+var DEFAULT_CAPABILITIES2 = "default";
+async function deliveryReconCommand(args) {
+  try {
+    const ctx = await getActiveAuthContextFromCli(args);
+    const client3 = HcmClient19.fromAuthContext(ctx);
+    const probe = httpProbe2(client3.raw(), args.capabilities ?? DEFAULT_CAPABILITIES2);
+    const sourceKey = await computeReconSourceKey(probe);
+    const layout = new ReconLayout(args.out ?? ".", ctx.tenantId, sourceKey);
+    const summary = await runRecon(probe, layout, {
+      state: args.state ?? "",
+      onlyModel: args.model ?? null,
+      identity: ctx.tenantId ? { requestedTenantId: ctx.tenantId } : null
+    });
+    process.stdout.write(formatObject20(summary, { format: args.output ?? "json" }) + "\n");
+  } catch (e) {
+    const err = e;
+    if (err?.isAxiosError) exitWithError(fromAxiosError18(err, args.env));
+    exitWithError(e);
+    process.exit(1);
+  }
+}
+async function deliveryReconRoundCommand(args) {
+  let code;
+  try {
+    const result2 = inspectRound(args.dir ?? ".");
+    const fmt = args.output ?? "json";
+    if (fmt !== "json") process.stdout.write(renderRound(result2));
+    process.stdout.write(formatObject20(result2, { format: fmt }) + "\n");
+    code = ROUND_EXIT_CODES[result2.state];
+  } catch (e) {
+    exitWithError(e);
+    code = 1;
+  }
+  process.exit(code);
+}
+
+// src/commands/delivery-gate0.ts
+init_exit();
+import {
+  baselineRoundPremise,
+  checkPremise,
+  CHANNELS,
+  deriveAclass,
+  exitCode as gate0ExitCode,
+  formatObject as formatObject21,
+  inspectRound as inspectRound2,
+  loadProtocolFacts,
+  scan
+} from "@hcmai/sdk";
+import * as path8 from "path";
+function renderGate0(result2, skillRoot) {
+  const where = skillRoot ? `\uFF08${path8.resolve(skillRoot)}\uFF09` : "";
+  const lines = [
+    `\u626B\u63CF\u9762${where}\uFF1A${result2.scanned.length} \u4E2A\u6587\u4EF6\uFF1B\u5224\u7EA2 ${result2.red.length} \u6761\uFF1B\u7F3A\u53E3\u653E\u884C ${result2.gaps.length} \u6761\u3002`
+  ];
+  for (const channel of CHANNELS) {
+    const rows = result2.channels[channel];
+    lines.push(`  [${channel}] ${rows.length} \u6761`);
+    for (const red of rows) lines.push(`    - (${red.reason}) ${red.message}`);
+  }
+  if (result2.gaps.length > 0) {
+    lines.push(`  [gaps] ${result2.gaps.length} \u6761\uFF08\u4E0D\u9876 rc\uFF0C\u8BF7\u81EA\u5DF1\u770B\u4E00\u773C\uFF09`);
+    for (const gap of result2.gaps) lines.push(`    - (${gap.reason}) ${gap.why}`);
+  }
+  return `${lines.join("\n")}
+`;
+}
+async function deliveryGate0Command(args) {
+  let code;
+  try {
+    const skillRoot = args.skills ?? ".";
+    const reconDir = args.recon ?? ".";
+    const { aclass, problems: aclassProblems } = deriveAclass(reconDir, args.mapping ?? null);
+    const { facts, problems: factsProblems } = loadProtocolFacts();
+    const result2 = scan(skillRoot, aclass, facts, { aclassProblems, factsProblems });
+    const premise = checkPremise([
+      ...result2.premise,
+      ...baselineRoundPremise(inspectRound2(reconDir))
+    ]);
+    const merged = { ...result2, premise };
+    const fmt = args.output ?? "json";
+    if (fmt !== "json") process.stdout.write(renderGate0(merged, skillRoot));
+    process.stdout.write(`${formatObject21(merged, { format: fmt })}
+`);
+    for (const problem of premise) {
+      process.stderr.write(`\u{1F534} \u524D\u63D0\u4E0D\u6210\u7ACB\uFF08${problem.reason}\uFF09\uFF1A${problem.message}
+`);
+    }
+    code = gate0ExitCode(merged);
+  } catch (e) {
+    exitWithError(e);
+    code = 1;
+  }
+  process.exit(code);
+}
+
 // src/commands/delivery-execution.ts
 import { createHash as createHash7, randomBytes as secureRandomBytes } from "crypto";
 import { spawn } from "child_process";
 import { createReadStream as createReadStream2, promises as fs8 } from "fs";
-import path8 from "path";
-import { CliError as CliError22, CliErrorCode as CliErrorCode21, formatObject as formatObject20 } from "@hcmai/sdk";
+import path9 from "path";
+import { CliError as CliError22, CliErrorCode as CliErrorCode21, formatObject as formatObject22 } from "@hcmai/sdk";
 init_exit();
 var EXECUTION_CONTRACT_VERSION = "2026-08-29.controlled-v2";
 var DEFAULT_TTL_SECONDS = 15 * 60;
@@ -8689,9 +8800,9 @@ async function prepareDeliveryExecution(input) {
   };
   const planId = sha2567(canonicalJson(core)).slice(0, 24);
   const plan = { ...core, planId };
-  const plansDir = path8.join(project, ".hcm-delivery", "execution-plans");
+  const plansDir = path9.join(project, ".hcm-delivery", "execution-plans");
   await safeManagedDirectory(project, ".hcm-delivery/execution-plans", plansDir);
-  const planFile = path8.join(plansDir, `${planId}.json`);
+  const planFile = path9.join(plansDir, `${planId}.json`);
   try {
     await fs8.writeFile(planFile, `${JSON.stringify(plan, null, 2)}
 `, {
@@ -8710,7 +8821,7 @@ async function executeDeliveryPlan(input) {
   if (await readProjectMode(project) !== "controlled") {
     throw invalid4("\u9879\u76EE\u4E0D\u662F controlled\uFF0C\u4E0D\u80FD\u6267\u884C R2 \u8BA1\u5212");
   }
-  const planFile = path8.join(project, ".hcm-delivery", "execution-plans", `${input.planId}.json`);
+  const planFile = path9.join(project, ".hcm-delivery", "execution-plans", `${input.planId}.json`);
   const plan = await readPlan(project, planFile);
   if (plan.planId !== input.planId || computePlanId(plan) !== input.planId) {
     throw invalid4("\u6267\u884C\u8BA1\u5212\u5185\u5BB9\u4E0E planId \u6458\u8981\u4E0D\u4E00\u81F4");
@@ -8742,11 +8853,11 @@ async function executeDeliveryPlan(input) {
   await assertDocumentUnchanged(project, plan.documents.rollback, "\u56DE\u6EDA\u8BF4\u660E");
   await assertPayloadsUnchanged(project, plan.payloads);
   const evidenceDir = await bindEvidenceDirectory(project, plan.evidenceDir);
-  const receiptFile = path8.join(evidenceDir.absolute, `${plan.planId}.receipt.json`);
+  const receiptFile = path9.join(evidenceDir.absolute, `${plan.planId}.receipt.json`);
   if (await pathExists(receiptFile)) throw invalid4(`\u6267\u884C\u6536\u636E\u5DF2\u5B58\u5728\uFF0C\u62D2\u7EDD\u518D\u6B21\u6267\u884C\uFF1A${plan.planId}`);
-  const claimsDir = path8.join(project, ".hcm-delivery", "execution-claims");
+  const claimsDir = path9.join(project, ".hcm-delivery", "execution-claims");
   await safeManagedDirectory(project, ".hcm-delivery/execution-claims", claimsDir);
-  const claimFile = path8.join(claimsDir, `${plan.planId}.json`);
+  const claimFile = path9.join(claimsDir, `${plan.planId}.json`);
   try {
     await fs8.writeFile(
       claimFile,
@@ -8805,7 +8916,7 @@ async function deliveryPrepareCommand(argv, args) {
       evidenceDir: args.evidenceDir,
       ...ttlSeconds === void 0 ? {} : { ttlSeconds }
     });
-    process.stdout.write(formatObject20(plan, { format: args.output ?? "json" }) + "\n");
+    process.stdout.write(formatObject22(plan, { format: args.output ?? "json" }) + "\n");
   } catch (cause) {
     exitWithError(cause);
   }
@@ -8817,14 +8928,14 @@ async function deliveryExecuteCommand(planId, argv, args) {
       planId,
       argv
     });
-    process.stdout.write(formatObject20(receipt, { format: args.output ?? "json" }) + "\n");
+    process.stdout.write(formatObject22(receipt, { format: args.output ?? "json" }) + "\n");
     process.exitCode = receipt.exitCode;
   } catch (cause) {
     exitWithError(cause);
   }
 }
 async function readProjectMode(project) {
-  const file = path8.join(project, ".hcm-delivery", "project.yml");
+  const file = path9.join(project, ".hcm-delivery", "project.yml");
   const content = await readSafeFile(project, file, "\u9879\u76EE\u914D\u7F6E");
   const match = content.toString("utf8").match(
     /^deliveryMode:\s*(?:"(plan-only|controlled)"|'(plan-only|controlled)'|(plan-only|controlled))\s*$/m
@@ -8836,7 +8947,7 @@ async function readProjectMode(project) {
   return mode;
 }
 async function readChironLock(project) {
-  const file = path8.join(project, ".hcm-delivery", "chiron.lock.json");
+  const file = path9.join(project, ".hcm-delivery", "chiron.lock.json");
   const bytes = await readSafeFile(project, file, "Chiron \u9501");
   let parsed;
   try {
@@ -8853,7 +8964,7 @@ async function bindDocument(project, reference, label) {
   if (!(relative2.startsWith("work/") || relative2.startsWith("decisions/"))) {
     throw invalid4(`${label}\u5FC5\u987B\u4F4D\u4E8E\u9879\u76EE work/ \u6216 decisions/ \u4E0B`);
   }
-  const file = path8.join(project, relative2);
+  const file = path9.join(project, relative2);
   const bytes = await readSafeFile(project, file, label);
   return { path: relative2, sha256: sha2567(bytes) };
 }
@@ -8866,7 +8977,7 @@ async function bindEvidenceDirectory(project, reference) {
   if (!(relative2 === "evidence" || relative2.startsWith("evidence/"))) {
     throw invalid4("evidence \u76EE\u5F55\u5FC5\u987B\u4F4D\u4E8E\u9879\u76EE evidence/ \u4E0B");
   }
-  const absolute = path8.join(project, relative2);
+  const absolute = path9.join(project, relative2);
   await assertNoSymlinkComponents(project, relative2);
   const stat = await fs8.stat(absolute).catch((cause) => {
     throw invalid4(`evidence \u76EE\u5F55\u4E0D\u53EF\u7528\uFF1A${relative2}`, cause);
@@ -8987,7 +9098,7 @@ async function bindPayloadFiles(project, argv) {
 }
 async function bindPayloadFile(project, reference, label) {
   const relative2 = safeRelative(reference, label);
-  const file = path8.join(project, relative2);
+  const file = path9.join(project, relative2);
   const bytes = await readSafeFile(project, file, label);
   return { path: relative2, sha256: sha2567(bytes) };
 }
@@ -9030,7 +9141,7 @@ async function currentRuntimeIdentity() {
 async function runCurrentCliCommand(argv, cwd, streams) {
   const entry = process.argv[1];
   if (!entry) throw invalid4("\u65E0\u6CD5\u89E3\u6790\u5F53\u524D CLI entry");
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const child = spawn(process.execPath, [entry, ...argv], {
       cwd,
       env: process.env,
@@ -9047,7 +9158,7 @@ async function runCurrentCliCommand(argv, cwd, streams) {
       process.stderr.write(chunk);
     });
     child.once("error", reject);
-    child.once("close", (code, signal) => resolve3({ exitCode: code ?? (signal ? 1 : 0) }));
+    child.once("close", (code, signal) => resolve4({ exitCode: code ?? (signal ? 1 : 0) }));
   });
 }
 async function writeReceiptExclusive(target, receipt) {
@@ -9061,13 +9172,13 @@ async function writeReceiptExclusive(target, receipt) {
     });
     await fs8.link(temp, target);
   } catch (cause) {
-    throw invalid4(`\u6267\u884C\u6536\u636E\u5199\u5165\u5931\u8D25\u6216\u5DF2\u5B58\u5728\uFF1A${path8.basename(target)}`, cause);
+    throw invalid4(`\u6267\u884C\u6536\u636E\u5199\u5165\u5931\u8D25\u6216\u5DF2\u5B58\u5728\uFF1A${path9.basename(target)}`, cause);
   } finally {
     await fs8.unlink(temp).catch(() => void 0);
   }
 }
 async function safeManagedDirectory(project, relative2, absolute) {
-  await assertNoSymlinkComponents(project, path8.dirname(relative2));
+  await assertNoSymlinkComponents(project, path9.dirname(relative2));
   const existing = await fs8.lstat(absolute).catch(() => void 0);
   if (existing?.isSymbolicLink()) throw invalid4(`\u53D7\u7BA1\u76EE\u5F55\u4E0D\u80FD\u662F\u7B26\u53F7\u94FE\u63A5\uFF1A${relative2}`);
   if (existing && !existing.isDirectory()) throw invalid4(`\u53D7\u7BA1\u8DEF\u5F84\u4E0D\u662F\u76EE\u5F55\uFF1A${relative2}`);
@@ -9084,8 +9195,8 @@ async function pathExists(file) {
   );
 }
 async function readSafeFile(project, file, label) {
-  const relative2 = path8.relative(project, file).split(path8.sep).join("/");
-  if (relative2.startsWith("../") || path8.isAbsolute(relative2))
+  const relative2 = path9.relative(project, file).split(path9.sep).join("/");
+  if (relative2.startsWith("../") || path9.isAbsolute(relative2))
     throw invalid4(`${label}\u8DEF\u5F84\u9003\u9038\u9879\u76EE`);
   await assertNoSymlinkComponents(project, relative2);
   let stat;
@@ -9102,14 +9213,14 @@ async function assertNoSymlinkComponents(project, relative2) {
   const parts = relative2.split("/").filter(Boolean);
   let current = project;
   for (const part of parts) {
-    current = path8.join(current, part);
+    current = path9.join(current, part);
     const stat = await fs8.lstat(current).catch(() => void 0);
     if (stat?.isSymbolicLink()) throw invalid4(`\u8DEF\u5F84\u5305\u542B\u7B26\u53F7\u94FE\u63A5\uFF1A${relative2}`);
     if (!stat) break;
   }
 }
 async function realProject(requested) {
-  const absolute = path8.resolve(requested);
+  const absolute = path9.resolve(requested);
   let project;
   try {
     project = await fs8.realpath(absolute);
@@ -9121,10 +9232,10 @@ async function realProject(requested) {
   return project;
 }
 function safeRelative(reference, label) {
-  if (!reference || path8.isAbsolute(reference) || /[\r\n\0]/.test(reference)) {
+  if (!reference || path9.isAbsolute(reference) || /[\r\n\0]/.test(reference)) {
     throw invalid4(`${label}\u5FC5\u987B\u662F\u9879\u76EE\u5185\u76F8\u5BF9\u8DEF\u5F84`);
   }
-  const normalized = path8.normalize(reference).split(path8.sep).join("/");
+  const normalized = path9.normalize(reference).split(path9.sep).join("/");
   if (normalized === ".." || normalized.startsWith("../") || normalized === ".") {
     throw invalid4(`${label}\u8DEF\u5F84\u9003\u9038\u9879\u76EE`);
   }
@@ -9165,11 +9276,11 @@ function sha2567(value) {
 }
 async function sha256File2(file) {
   const hash = createHash7("sha256");
-  await new Promise((resolve3, reject) => {
+  await new Promise((resolve4, reject) => {
     const stream = createReadStream2(file);
     stream.on("data", (chunk) => hash.update(chunk));
     stream.on("error", reject);
-    stream.on("end", resolve3);
+    stream.on("end", resolve4);
   });
   return hash.digest("hex");
 }
@@ -9181,10 +9292,10 @@ function invalid4(message, cause) {
 init_auth_guard();
 init_exit();
 import {
-  HcmClient as HcmClient19,
+  HcmClient as HcmClient20,
   adminResetPassword,
-  formatObject as formatObject21,
-  fromAxiosError as fromAxiosError18,
+  formatObject as formatObject23,
+  fromAxiosError as fromAxiosError19,
   CliError as CliError23,
   CliErrorCode as CliErrorCode22
 } from "@hcmai/sdk";
@@ -9215,12 +9326,12 @@ async function userResetPasswordCommand(args) {
   try {
     const password = args.passwordStdin ? await readSecretFromStdin() : await promptPasswordTwice();
     const request = buildAdminResetPasswordRequest(args, password);
-    const client3 = HcmClient19.fromAuthContext(await getActiveAuthContextFromCli(args));
+    const client3 = HcmClient20.fromAuthContext(await getActiveAuthContextFromCli(args));
     const result2 = await adminResetPassword(client3.raw(), request);
-    process.stdout.write(formatObject21(result2, { format: args.output ?? "json" }) + "\n");
+    process.stdout.write(formatObject23(result2, { format: args.output ?? "json" }) + "\n");
   } catch (cause) {
     const err = cause;
-    if (err?.isAxiosError) exitWithError(fromAxiosError18(err, args.env));
+    if (err?.isAxiosError) exitWithError(fromAxiosError19(err, args.env));
     exitWithError(cause);
   }
 }
@@ -9278,6 +9389,19 @@ user.command("reset-password").description("\u7531 admin.system \u5B89\u5168\u91
 var delivery = program.command("delivery").description("\u987E\u95EE\u4EA4\u4ED8\uFF1A\u73B0\u573A\u63A2\u6D3B\u3001\u98CE\u9669\u8BC4\u4F30\u4E0E\u4E00\u6B21\u6027\u53D7\u63A7\u6267\u884C\u5408\u540C");
 delivery.command("assess").description("\u8BC4\u4F30\u4E00\u6B21 HCM CLI argv\uFF1BAction \u98CE\u63A7\u58F0\u660E\u8BFB\u53D6\u81EA\u76EE\u6807 Core\uFF0C\u7528 -- \u5206\u9694\u88AB\u8BC4\u4F30\u547D\u4EE4").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").allowUnknownOption(true).argument("<command...>", "\u88AB\u8BC4\u4F30\u7684 HCM \u5B50\u547D\u4EE4\u4E0E\u53C2\u6570\uFF0C\u4E0D\u5305\u542B hcm \u672C\u8EAB").action((command, opts) => deliveryAssessCommand(command, opts));
 delivery.command("doctor").description("\u56DB\u6761\u951A\u70B9\u63A2\u6D3B\uFF1A\u8FDE\u901A / \u6211\u662F\u8C01 / configAdmin / \u7AD9\u5728\u54EA\u4E00\u5C42").option("--env <name>", "\u76EE\u6807\u73AF\u5883\u522B\u540D").option("--as <identity>", "\u4E34\u65F6\u6362\u8EAB\u4EFD").option("--capabilities <s>", "\u722C\u53D6\u65F6\u58F0\u660E\u7684 capability \u4E32\uFF08\u4F1A\u968F\u56DB\u5143\u7EC4\u7559\u6863\uFF09").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").action((opts) => deliveryDoctorCommand(opts));
+var recon = delivery.command("recon").description("\u722C\u4E00\u4EFD\u53EF\u5E26\u8D70\u7684\u57FA\u7EBF\uFF1A\u6A21\u578B / \u5B57\u6BB5 / \u53EA\u8BFB\u95F8 / \u4F9D\u8D56\u56FE / \u7801\u8868 / \u53EF\u5199\u6027\u753B\u50CF").option("--env <name>", "\u76EE\u6807\u73AF\u5883\u522B\u540D").option("--as <identity>", "\u4E34\u65F6\u6362\u8EAB\u4EFD").option("--out <dir>", "\u4EA7\u7269\u6839\u76EE\u5F55\uFF08\u4EA7\u7269\u843D\u5728 <out>/recon/<\u79DF\u6237\u6BB5>/<\u6765\u6E90\u6BB5>\uFF09", ".").option("--state <s>", "\u53EA\u8BFB\u95F8\u7684 state\uFF08\u4EA7\u54C1\u91CC state \u4E0D\u53EF\u679A\u4E3E\uFF0C\u95F8\u7684\u8986\u76D6\u9762\u6C38\u8FDC\u662F state-scoped\uFF09").option("--model <key>", "\u5B9A\u5411\u91CD\u722C\uFF1A\u53EA\u91CD\u722C\u8FD9\u4E00\u4E2A\u6A21\u578B\uFF0C\u5176\u4F59\u6CBF\u7528\u4E0A\u4E00\u8F6E\u4EA7\u7269").option("--capabilities <s>", "\u722C\u53D6\u65F6\u58F0\u660E\u7684 capability \u4E32\uFF08\u4F1A\u968F\u56DB\u5143\u7EC4\u7559\u6863\uFF09").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").action((opts) => deliveryReconCommand(opts));
+recon.command("round").description("\u96F6\u7F51\u7EDC\uFF1A\u8BFB\u4E00\u4EFD\u5DF2\u843D\u76D8\u7684\u57FA\u7EBF\uFF0C\u5224\u65AD\u5B83\u662F\u4E0D\u662F\u4E00\u8F6E\u5B8C\u6574\u8DD1\u51FA\u6765\u7684\uFF08complete/mixed/unknown\uFF09").option("--dir <dir>", "\u4EA7\u7269\u76EE\u5F55\uFF08<out>/recon/<\u79DF\u6237\u6BB5>/<\u6765\u6E90\u6BB5>\uFF09", ".").action(
+  (opts, cmd) => deliveryReconRoundCommand({
+    ...opts,
+    output: cmd.parent?.opts()?.output
+  })
+);
+delivery.command("gate0").description(
+  "\u96F6\u7F51\u7EDC\uFF1A\u626B\u4E00\u4EFD skill \u7684\u6B63\u6587\uFF0C\u628A\u73AF\u5883\u4E8B\u5B9E / \u672A\u767B\u8BB0\u7684\u534F\u8BAE\u5F62\u6001 / \u4EA7\u7269\u8DEF\u5F84\u6321\u5728\u6210\u7A3F\u4E4B\u5916"
+).requiredOption("--skills <dir>", "\u8981\u626B\u7684 skill \u6839\u76EE\u5F55\uFF08\u6B63\u6587 + references/ \u5168\u76EE\u5F55\uFF0C\u540C\u4E00\u5224\u636E\uFF09").option("--recon <dir>", "\u57FA\u7EBF\u4EA7\u7269\u76EE\u5F55\uFF08<out>/recon/<\u79DF\u6237\u6BB5>/<\u6765\u6E90\u6BB5>\uFF09", ".").option(
+  "--mapping <file>",
+  "\u987E\u95EE\u624B\u5199\u7684\u6620\u5C04\u5DE5\u4EF6\uFF08naturalKey \u8FD9\u4E00\u7C7B\u7684\u552F\u4E00\u6765\u6E90\uFF09\uFF1B\u4E0D\u7ED9 \u21D2 \u90A3\u4E00\u7C7B\u6052\u7EFF \u21D2 rc=2"
+).option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").action((opts) => deliveryGate0Command(opts));
 delivery.command("prepare").description("\u628A\u53D7\u652F\u6301\u7684 R2 argv \u4E0E\u9501\u3001\u8FD0\u884C\u65F6\u548C\u53D8\u66F4/\u56DE\u6EDA\u8BF4\u660E\u7ED1\u5B9A\u4E3A\u77ED\u65F6\u6267\u884C\u8BA1\u5212").requiredOption("--change-ref <file>", "\u9879\u76EE work/ \u6216 decisions/ \u4E0B\u7684\u53D8\u66F4\u8BF4\u660E").requiredOption("--rollback-ref <file>", "\u9879\u76EE work/ \u6216 decisions/ \u4E0B\u7684\u56DE\u6EDA\u8BF4\u660E").requiredOption("--evidence-dir <dir>", "\u9879\u76EE evidence/ \u4E0B\u7684\u6536\u636E\u76EE\u5F55").option("--project <dir>", "HCM \u987E\u95EE\u9879\u76EE\u6839\u76EE\u5F55", ".").option("--ttl-seconds <n>", "\u6709\u6548\u671F\u79D2\u6570\uFF0860-3600\uFF09", "900").option("--output <fmt>", "\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").allowUnknownOption(true).argument("<command...>", "\u88AB\u7ED1\u5B9A\u7684 R2 HCM \u5B50\u547D\u4EE4\u4E0E\u53C2\u6570\uFF0C\u4E0D\u5305\u542B hcm \u672C\u8EAB").action((command, opts) => deliveryPrepareCommand(command, opts));
 delivery.command("execute <planId>").description("\u9010\u6B21\u6279\u51C6\u540E\u6D88\u8D39\u77ED\u65F6\u8BA1\u5212\uFF0C\u5E76\u6267\u884C\u4E00\u6B21\u4E0E\u8BA1\u5212\u5B8C\u5168\u76F8\u540C\u7684 R2 argv").option("--project <dir>", "HCM \u987E\u95EE\u9879\u76EE\u6839\u76EE\u5F55", ".").option("--output <fmt>", "\u6536\u636E\u8F93\u51FA\u683C\u5F0F\uFF1Atable | json | yaml", "json").allowUnknownOption(true).argument("<command...>", "\u4E0E prepare \u5B8C\u5168\u76F8\u540C\u7684 R2 HCM \u5B50\u547D\u4EE4\u4E0E\u53C2\u6570").action((planId, command, opts) => deliveryExecuteCommand(planId, command, opts));
 program.command("query <Model>").description("\u67E5\u8BE2 Model \u5217\u8868\u6570\u636E\uFF08\u901A\u8FC7 ModelQueryDsl JSON \u8868\u8FBE\u8FC7\u6EE4/\u6392\u5E8F/\u5206\u9875\uFF09").option(