@itpay/cli 2.1.34 → 2.1.41

package/dist/src/main.js

@@ -1,13 +1,9 @@
-import { agentAuth } from "./state/account_auth.js";
-import { registerSell } from "./sell/commands.js";
-import { readFileSync as readWorkflowInputFile, statSync as statWorkflowInputFile } from "node:fs";
-import { runServicesRun } from "./commands/services.js";
 // V3 CLI entrypoint. Each command maps 1:1 to a route family in
 // services/backend/internal/httpapi/handlers/*.go. Commands only
 // orchestrate; HTTP and rendering live in src/client and src/render.
 import { Command } from "commander";
-import { BackendOverrideError, CLI_VERSION, cliDistribution, loadConfig, cartSessionPath, newBackendClient } from "./state/config.js";
-import { DeviceAuthority, DeviceAuthorizationError, DeviceLockBusyError, DeviceStateError } from "./state/device_authority.js";
+import { BackendOverrideError, API_CONTRACT_REVISION, CLI_VERSION, cliDistribution, loadConfig, cartSessionPath, newBackendClient } from "./state/config.js";
+import { DeviceAuthority, DeviceAuthorizationError, DeviceStateError } from "./state/device_authority.js";
 import { CartSession } from "./state/cart_session.js";
 import { defaultHostForAgentType, normalizeHost, validateContext } from "./state/client_context.js";
 import { HttpError } from "./client/http.js";
@@ -25,11 +21,11 @@ import { runCancelRefund, runGetRefund, runListRefunds, runRefund, runWatchRefun
 import { runCartAdd, runCartAddQuoteServer, runCartAddServer, runCartAbandonServer, runCartClear, runCartNext, runCartRemove, runCartRemoveServer, runCartShow, runCartShowServer, } from "./commands/cart.js";
 import { CommandContractError, errorRecoveryActions, printErrorRecovery, writeCommandEnvelope } from "./commands/guidance.js";
 import { runDocsList, runDocsShow, runDocsSearch } from "./commands/docs.js";
-import { INSTALL_AGENT_TYPES, runInstall } from "./commands/install.js";
+import { runInstall } from "./commands/install.js";
 import { runSkillShow } from "./commands/skill.js";
 import { runNext } from "./commands/next.js";
 import { runVaultAccess, runVaultList, runVaultRead } from "./commands/vault.js";
-import { collectOption, parseKeyValueList, runServicesAction, runServicesCheckout, runServicesEvents, runServicesGet, runServicesInvoke, runServicesList, runServicesNext, runServicesPage, runServicesReadResult, runServicesQuote, runServicesStart, } from "./commands/services.js";
+import { collectOption, parseKeyValueList, runServicesAction, runServicesCheckout, runServicesEvents, runServicesGet, runServicesInvoke, runServicesList, runServicesNext, runServicesReadResult, runServicesQuote, runServicesStart, } from "./commands/services.js";
 const program = new Command();
 program
     .name("itpay")
@@ -116,7 +112,6 @@ function reportCLIError(error, contract) {
     const backendOverrideError = error instanceof BackendOverrideError ? error : undefined;
     const deviceError = error instanceof DeviceAuthorizationError ? error : undefined;
     const stateError = error instanceof DeviceStateError ? error : undefined;
-    const lockError = error instanceof DeviceLockBusyError ? error : undefined;
     const transportError = error instanceof HttpTransportError ? error : undefined;
     const httpRecovery = errorRecoveryActions(error).map((action) => ({
         command: action.command,
@@ -128,9 +123,6 @@ function reportCLIError(error, contract) {
         error.code === "client_compatibility_headers_required" ||
         error.code === "platform_release_unavailable" ||
         (error.status === 404 && error.code === "unknown_error"));
-    const requiredCLIVersion = incompatible && error instanceof HttpError && /^\d+\.\d+\.\d+$/.test(error.payload?.minimum_cli_version ?? "")
-        ? error.payload.minimum_cli_version
-        : undefined;
     const backendInternal = error instanceof HttpError && error.status === 500 && error.code === "internal_error";
     const providerConnectionUnavailable = error instanceof HttpError && error.code === "provider_connection_unavailable";
     const providerTemporary = error instanceof HttpError && error.code === "provider_temporarily_unavailable";
@@ -138,48 +130,37 @@ function reportCLIError(error, contract) {
     const providerInputRejected = error instanceof HttpError && error.code === "provider_input_rejected";
     const providerContractMismatch = error instanceof HttpError && error.code === "provider_contract_mismatch";
     const capabilityInputInvalid = error instanceof HttpError && error.code === "capability_input_invalid";
-    const deviceKeyResettable = Boolean(deviceError && (deviceError.code === "agent_device_key_rotated" ||
-        deviceError.code === "agent_device_key_conflict"));
-    const deviceRecovery = deviceError ? [
-        {
+    const deviceRecovery = deviceError ? [{
             command: "itpay skill show itpay --json",
             reason: "读取 ItPay 身份边界；该错误需要用户或运营恢复 Backend 登记，不能通过换类型或删除本地身份绕过",
-        },
-    ] : [];
+        }] : [];
     const stateRecovery = stateError ? [{
             command: "itpay skill show itpay --json",
             reason: "读取 Device 状态边界；修复当前 Host 的持久写权限后重试原命令",
         }] : [];
-    const lockRecovery = lockError ? [{
-            command: "itpay device repair-lock --json",
-            reason: "检查锁持有者；只回收已退出进程留下的锁，不改变设备身份",
-        }] : [];
     const authorizationInstruction = stateError
-        ? `当前运行环境无法写入 owner-only Device 状态；受阻路径 ${stateError.blockedPath ?? "~/.itpay-v3"}，操作 ${stateError.operation}（${stateError.causeCode}）。保持同一 Node、CLI 和 Agent Type，修复该路径持久写权限后重试原命令；不要手工创建 lock、删除 identity、随意更换 HOME 或换运行时。`
-        : lockError
-            ? "另一个进程仍在更新本地身份。执行 recovery 检查；若持有者仍活跃，等待后继续原任务，不要删除锁或重建身份。"
-            : error instanceof HttpError && error.code === "agent_device_session_required"
-                ? "CLI 已自动续期并重试同一请求一次，仍被拒绝；停止重试，不要切换 Agent Type 或旋转身份。"
-                : deviceError?.code === "agent_device_revoked"
-                    ? "Backend 已撤销当前 Device 登记；CLI 没有自动创建替代身份。停止重试并请用户或运营恢复登记。"
-                    : deviceError?.enrollmentFailed && deviceError.status === 500
-                        ? "服务端未能完成设备登记；保持原密钥和Agent Type，说明系统故障，待服务端恢复后继续原任务。不要重置身份。"
-                        : deviceKeyResettable
-                            ? "服务端拒绝当前设备私钥登记（轮换或冲突）。停止自动恢复；换钥会放弃旧身份，旧执行访问不会迁移。仅用户或运营明确决定放弃旧身份后，按 device reset-key 帮助执行。"
-                            : deviceError
-                                ? "Device 身份验证失败；停止重试，不要切换 Agent Type、删除状态或旋转私钥。"
-                                : undefined;
-    if (contract || commandError || backendOverrideError || lockError || stateError) {
+        ? "当前运行环境无法写入 owner-only Device 状态；请保持同一 Node、CLI 和 Agent Type，在允许持久写入 ~/.itpay-v3 的执行环境中重试。不要手工创建 lock、删除 identity 或换运行时碰运气。"
+        : error instanceof HttpError && error.code === "agent_device_session_required"
+            ? "CLI 已自动续期并重试同一请求一次，仍被拒绝；停止重试，不要切换 Agent Type 或旋转身份。"
+            : deviceError?.code === "agent_device_revoked"
+                ? "Backend 已撤销当前 Device 登记；CLI 没有自动创建替代身份。停止重试并请用户或运营恢复登记。"
+                : deviceError
+                    ? "Device 身份验证失败；停止重试，不要切换 Agent Type、删除状态或旋转私钥。"
+                    : undefined;
+    if (contract || commandError || backendOverrideError) {
         writeCommandEnvelope({
             status: "error",
             error: {
-                code: incompatible ? "backend_contract_incompatible" : backendOverrideError?.code ?? commandError?.code ?? (error instanceof HttpError ? error.code : transportError?.code ?? stateError?.code ?? lockError?.code ?? deviceError?.code ?? contract?.code ?? "command_failed"),
+                code: incompatible ? "backend_contract_incompatible" : backendOverrideError?.code ?? commandError?.code ?? (error instanceof HttpError ? error.code : transportError?.code ?? stateError?.code ?? deviceError?.code ?? contract?.code ?? "command_failed"),
                 message: error instanceof Error ? error.message : String(error),
             },
-            ...(commandError?.result ? { result: commandError.result } : requiredCLIVersion ? {
+            ...(incompatible && error instanceof HttpError ? {
                 result: {
                     current_cli_version: CLI_VERSION,
-                    required_cli_version: requiredCLIVersion,
+                    current_api_contract_revision: API_CONTRACT_REVISION,
+                    platform_api_contract_revision: error.payload?.api_contract_revision ?? null,
+                    minimum_cli_version: error.payload?.minimum_cli_version ?? null,
+                    maximum_cli_major: error.payload?.maximum_cli_major ?? null,
                 },
             } : transportError ? {
                 result: {
@@ -199,9 +180,7 @@ function reportCLIError(error, contract) {
                 },
             } : {}),
             instruction: incompatible
-                ? requiredCLIVersion
-                    ? distributionUpgradeInstruction()
-                    : "告诉用户 ItPay 当前版本信息无法验证，因此本次服务不能安全继续。停止所有 ItPay 和 npm 操作；不要转述技术错误、猜版本、切换 Agent Type 或删除 Device 身份。"
+                ? "当前 CLI 与 Backend 合约不兼容或无法核验。minimum_cli_version 仅是协议门槛，不是已验证的推荐安装包。停止本轮，请维护方提供与当前 Backend 配套的制品；不要猜版本、降级、切换 Agent Type 或删除 Device 身份。"
                 : backendInternal
                     ? "告诉用户 ItPay 当前暂时无法完成这项服务并停止。不要转述内部错误、重试、修改身份、创建替代服务或进入任何付费路径。"
                     : providerConnectionUnavailable
@@ -215,26 +194,25 @@ function reportCLIError(error, contract) {
                                     : providerRejected
                                         ? "告诉用户数据来源没有接受本次请求，但没有说明是输入错误，并按 result.quota 说明额度状态，然后停止。不要转述内部错误、修改输入、重试或创建新查询。"
                                         : capabilityInputInvalid
-                                            ? "Agent按当前合同模板修正字段和JSON层级，保留用户原始需求，继续同一次服务。不要让用户修技术输入，只有真实业务歧义才询问。"
+                                            ? "告诉用户当前输入不完整或格式不正确；数据来源尚未调用，额度没有变化。不要转述技术错误或原样重试；用户提供修正信息后继续同一次服务。"
                                             : transportError
-                                                ? transportError.attempts > 1
-                                                    ? "临时网络故障；CLI 已仅对可安全重放的操作完成有限自动重试，但仍未获得完整响应。按 recovery 查询同一资源的权威状态；不要创建替代 Checkout、Execution、Payment 或 Refund。"
-                                                    : "网络在完整响应前中断；当前写操作没有安全重放合同，因此 CLI 未自动重试。按 recovery 查询权威状态；不要原样重放或创建替代 Checkout、Execution、Payment 或 Refund。"
+                                                ? contract?.initialization
+                                                    ? "本轮初始化检查未完成；CLI 已结束有限的网络尝试，尚未确认后端或设备就绪。结束本轮，网络恢复后可重新检查；不要继续登录或业务操作。"
+                                                    : transportError.attempts > 1
+                                                        ? "临时网络故障；CLI 已仅对可安全重放的操作完成有限自动重试，但仍未获得完整响应。按 recovery 查询同一资源的权威状态；不要创建替代 Checkout、Execution、Payment 或 Refund。"
+                                                        : "网络在完整响应前中断；当前写操作没有安全重放合同，因此 CLI 未自动重试。按 recovery 查询权威状态；不要原样重放或创建替代 Checkout、Execution、Payment 或 Refund。"
                                                 : backendOverrideError
-                                                    ? "移除 ITPAY_BACKEND_URL 使用正式环境，或按当前测试目标准确设置为 https://sandbox.itpay.ai 或 https://dev.itpay.ai。不要通过切换环境规避当前错误。"
+                                                    ? "移除 ITPAY_BACKEND_URL 使用正式环境，或准确设置为 https://dev.itpay.ai。"
                                                     : commandError?.instruction ?? authorizationInstruction ?? contract?.instruction ?? "检查命令参数后重试。",
             next: null,
-            ...(commandError?.interaction ? { interaction: commandError.interaction } : {}),
-            recovery: incompatible
-                ? requiredCLIVersion
-                    ? [distributionUpgradeAction(requiredCLIVersion)]
-                    : []
+            recovery: incompatible || (transportError && contract?.initialization)
+                ? []
                 : backendInternal || providerConnectionUnavailable || providerTemporary || providerInputRejected || providerContractMismatch || providerRejected || capabilityInputInvalid
                     ? []
-                    : backendOverrideError ? [] : commandError?.recovery ?? (stateError ? stateRecovery : lockError ? lockRecovery : deviceError ? deviceRecovery : identityRecovery ? httpRecovery : contract?.recovery ?? []),
+                    : backendOverrideError ? [] : commandError?.recovery ?? (stateError ? stateRecovery : deviceError ? deviceRecovery : identityRecovery ? httpRecovery : contract?.recovery ?? []),
         }, {
-            ...(contract?.jsonOutput !== undefined ? { jsonOutput: contract.jsonOutput } : backendOverrideError || lockError || stateError ? { jsonOutput: process.argv.includes("--json") } : {}),
-            output: (text) => { process.stdout.write(text); },
+            ...(contract?.jsonOutput !== undefined ? { jsonOutput: contract.jsonOutput } : backendOverrideError ? { jsonOutput: process.argv.includes("--json") } : {}),
+            output: (text) => { process.stderr.write(text); },
         });
         process.exitCode = 1;
         return;
@@ -275,14 +253,8 @@ function distributionUpgradeAction(version) {
                 reason: `更新包含 ItPay CLI ${version} 的 Kimi plugin`,
             };
         default:
-            return { command: `npm install -g @itpay/cli@${version}`, reason: "安装 Backend 指定的兼容 CLI 版本" };
-    }
-}
-function distributionUpgradeInstruction() {
-    if (cliDistribution() === "npm") {
-        return "当前 CLI 与 Backend 合约不兼容。停止所有 ItPay 业务命令；只执行 recovery.command，将 @itpay/cli 更新到 Backend 指定的精确版本。安装完成后确认 itpay --version 与 result.required_cli_version 完全一致，再重新运行 readyz。不要安装 latest、猜测版本、切换 Agent Type 或删除 Device 身份。";
+            return { command: `npm install -g @itpay/cli@${version}`, reason: "恢复当前 CLI 版本的完整安装包" };
     }
-    return "当前平台 bundle 与 Backend 合约不兼容。停止所有 ItPay 业务命令；只执行 recovery.command，更新平台 Skill/plugin 后启动新会话，确认 itpay --version 与 result.required_cli_version 完全一致，再重新运行 readyz。不要运行 npm、猜测版本、切换 Agent Type 或删除 Device 身份。";
 }
 program
     .command("readyz")
@@ -301,61 +273,37 @@ program
         reportCLIError(error, {
             jsonOutput: Boolean(options.json),
             code: "backend_unavailable",
+            initialization: true,
             instruction: `当前官方 Backend ${config.baseURL} 不可用；恢复前不要继续下单，也不要切换环境。`,
-            recovery: [
-                { command: "itpay readyz", reason: "重试当前官方 Backend 的可用性检查" },
-            ],
+            recovery: [],
         });
     }
 });
-const authCmd = program.command("auth").description("Log in and bind this enrolled Agent to your ItPay account");
-for (const action of ["login", "status"]) {
-    authCmd.command(action).option("--json", "output JSON").action(async (options) => {
-        const config = loadConfig();
-        try {
-            const result = await agentAuth(action, config.baseURL, newBackendClient(config));
-            // AUTH06: auth output goes through the same envelope renderer as every
-            // other command — next/recovery keep Agent Type + Backend qualification
-            // and non-JSON output is human-readable instead of a raw JSON dump.
-            const envelope = {
-                status: String(result.status ?? "error"),
-                result: (result.result ?? Object.fromEntries(Object.entries(result).filter(([key]) => !["status", "instruction", "next", "recovery", "handoff"].includes(key)))),
-                ...(result.handoff ? { handoff: result.handoff } : {}),
-                instruction: typeof result.instruction === "string" ? result.instruction : "按返回状态继续。",
-                next: (result.next ?? null),
-                recovery: (result.recovery ?? []),
-            };
-            writeCommandEnvelope(envelope, { jsonOutput: Boolean(options.json) });
-        }
-        catch (error) {
-            reportCLIError(error, { jsonOutput: Boolean(options.json), code: "account_login_failed", instruction: "完成官方网页登录后重试 itpay auth status；不要清除设备登记。" });
-        }
-    });
-}
 // --- device ---------------------------------------------------------------
 const deviceCmd = program.command("device").description("Recover the current official Backend registration after an operator-confirmed reset");
-deviceCmd
-    .command("repair-lock")
-    .description("Safely inspect and recover a local Device identity lock left by an exited process")
+deviceCmd.command("status")
+    .description("Verify this device with the current Backend; account binding is not queried")
     .option("--json", "output JSON instead of terminal text")
-    .action((options) => {
+    .action(async (options) => {
+    const config = loadConfig();
     try {
-        const config = loadConfig();
-        const status = new DeviceAuthority({
+        await requirePlatformCompatibility(newBackendClient(config));
+        const authority = new DeviceAuthority({
             baseURL: config.baseURL,
             ...(config.agentType ? { requestedAgentType: config.agentType } : {}),
-            compatibilityHeaders: {},
-        }).repairLock();
+            compatibilityHeaders: { "X-ItPay-CLI-Version": CLI_VERSION, "X-ItPay-Contract-Revision": API_CONTRACT_REVISION },
+        });
+        const verified = await authority.status();
         writeCommandEnvelope({
-            status: status === "recovered" ? "device_lock_recovered" : status === "active" ? "device_lock_active" : "device_lock_absent",
-            result: { lock_status: status, device_identity_preserved: true },
-            instruction: status === "active" ? "本地身份正由存活进程更新；稍后继续原任务。" : "本地锁无需进一步处理；继续原任务。",
+            status: "device_ready",
+            result: { ...verified, backend_url: config.baseURL, account_binding: "unavailable" },
+            instruction: "当前 Backend 已验证设备身份。此版本不查询账号绑定，不能据此认定已登录或未登录；无需在安装阶段登录，不自动开始业务。首次检查可登记设备，后续复用同一身份。",
             next: null,
             recovery: [],
-        }, { jsonOutput: Boolean(options.json), plainResult: [`lock: ${status}`, "device_identity: preserved"] });
+        }, { jsonOutput: Boolean(options.json) });
     }
     catch (error) {
-        reportCLIError(error, { jsonOutput: Boolean(options.json), code: "device_lock_repair_failed", instruction: "本地锁无法安全检查；保留设备身份并联系维护者。" });
+        reportCLIError(error, { jsonOutput: Boolean(options.json), code: "device_status_unavailable", initialization: true, instruction: "本轮设备检查未完成；停止本轮，保留原身份，不自动发起登录。" });
     }
 });
 deviceCmd
@@ -410,56 +358,6 @@ deviceCmd
         });
     }
 });
-deviceCmd
-    .command("reset-key")
-    .description("Discard the local Ed25519 device key and all Backend registrations so the next command enrolls as a new device")
-    .option("--confirm-key-reset", "confirm that the current device key must be abandoned and a new identity created")
-    .option("--json", "output JSON instead of terminal text")
-    .action(async (options) => {
-    const config = loadConfig();
-    try {
-        if (!config.agentType || !INSTALL_AGENT_TYPES.some(type => type === config.agentType)) {
-            throw new CommandContractError("agent_type_required", "supported Agent Type required before key reset", "先按真实宿主配置正式支持的Agent Type；尚未修改本地密钥。", [{ command: "itpay install --json", reason: "读取当前宿主配置" }]);
-        }
-        if (!options.confirmKeyReset) {
-            throw new CommandContractError("key_reset_confirmation_required", "--confirm-key-reset is required", "仅在用户或运营明确决定放弃旧身份后使用；会丢弃本地私钥，旧执行访问不会迁移。internal_error 需服务端恢复，不能换钥。", [{ command: "itpay docs show identity-and-sessions --json", reason: "检查适用边界" }]);
-        }
-        const reset = await new DeviceAuthority({
-            baseURL: config.baseURL,
-            ...(config.agentType ? { requestedAgentType: config.agentType } : {}),
-            compatibilityHeaders: {},
-        }).resetDeviceKey();
-        writeCommandEnvelope({
-            status: "device_key_reset",
-            result: {
-                removed_backend_registrations: reset.removedBackends,
-                private_key_preserved: false,
-                server_side_device: "orphaned_under_previous_key",
-            },
-            instruction: "本地设备私钥已重置；下一次需要设备身份的命令会以全新 Ed25519 密钥重新登记；这不能恢复旧身份的订单或用于刷新额度。服务端旧设备记录保留为孤儿；如需清理请走运营流程。",
-            next: {
-                command: `itpay --agent-type ${config.agentType} services list --limit 1 --json`,
-                reason: "用无业务写入的签名请求完成新密钥的重新登记",
-            },
-            recovery: [],
-        }, {
-            jsonOutput: Boolean(options.json),
-            plainResult: [
-                `removed_backend_registrations: ${reset.removedBackends.join(", ") || "none"}`,
-                "private_key: rotated (previous key discarded)",
-                "server_side_device: orphaned under previous key",
-            ],
-        });
-    }
-    catch (error) {
-        reportCLIError(error, {
-            jsonOutput: Boolean(options.json),
-            code: "device_key_reset_failed",
-            instruction: "仅在确认要放弃当前设备私钥时使用；普通 session 失效或 revoked 不需要本命令。",
-            recovery: [{ command: "itpay docs show identity-and-sessions --json", reason: "检查 Device 恢复边界" }],
-        });
-    }
-});
 // --- skill ----------------------------------------------------------------
 const skillCmd = program.command("skill").description("Read complete packaged Agent skills");
 skillCmd
@@ -934,13 +832,6 @@ program
     .option("--id <checkout_id>")
     .option("--token <display_token>")
     .option("--locale <locale>", "payment card language: zh-CN|en", "zh-CN")
-    .option("--present <method>", "display once: auto|browser|image|link|none (JSON default plans only)")
-    .option("--no-open", "never open a browser window")
-    .option("--viewer <viewer>", "device the human is looking at: desktop|mobile|unknown")
-    .option("--relay-option <ref>", "server-issued contact option reference for message relay")
-    .option("--confirm-relay", "confirm the human explicitly consented to this relay send")
-    .option("--request-key <key>", "stable idempotency key for a relay request")
-    .option("--relay-status <relay_id>", "read a prior relay result; never resends")
     .option("--json", "output compact JSON")
     .action(async (options) => {
     const config = loadConfig();
@@ -958,22 +849,12 @@ program
         await runCheckoutPresentation(backend, {
             checkoutID,
             displayToken,
-            ...(snap.lastCheckoutID === checkoutID && snap.lastCheckoutURL
-                ? { savedCheckoutURL: snap.lastCheckoutURL }
-                : {}),
             host,
             ...(options.target ? { target: options.target } : {}),
             ...(config.agentType ? { agentType: config.agentType } : {}),
             baseURL: config.baseURL,
             locale: options.locale,
             jsonOutput: Boolean(options.json),
-            ...(options.present ? { present: options.present } : {}),
-            ...(options.noOpen ? { noOpen: true } : {}),
-            ...(options.viewer ? { viewer: options.viewer } : {}),
-            ...(options.relayOption ? { relayOption: options.relayOption } : {}),
-            ...(options.confirmRelay ? { confirmRelay: true } : {}),
-            ...(options.requestKey ? { requestKey: options.requestKey } : {}),
-            ...(options.relayStatus ? { relayStatus: options.relayStatus } : {}),
         });
     }
     catch (error) {
@@ -1349,98 +1230,7 @@ vault
     }
 });
 // --- service execution ----------------------------------------------------
-const WORKFLOW_INPUT_JSON_MAX_BYTES = 256 * 1024;
-function readInputJsonObject(file, code, recovery) {
-    let parsed;
-    try {
-        if (statWorkflowInputFile(file).size > WORKFLOW_INPUT_JSON_MAX_BYTES) {
-            throw new CommandContractError(code, `--input-json file exceeds ${WORKFLOW_INPUT_JSON_MAX_BYTES} bytes`, "输入文件过大；只提交服务端 input_schema 声明的字段。", recovery);
-        }
-        parsed = JSON.parse(readWorkflowInputFile(file, "utf8"));
-    }
-    catch (error) {
-        if (error instanceof CommandContractError)
-            throw error;
-        throw new CommandContractError(code, `--input-json is not readable valid JSON: ${error instanceof Error ? error.message : String(error)}`, "确认文件存在且为合法 JSON；按服务端 input_schema 字段填写。", recovery);
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        throw new CommandContractError(code, "--input-json must contain a JSON object", "确认输入必须是 JSON 对象；按服务端 input_schema 字段填写。", recovery);
-    }
-    return parsed;
-}
 const services = program.command("services").description("Generic V3 Service Execution commands");
-services
-    .command("run")
-    .description("Run a published service and present Checkout when payment is required")
-    .argument("<service_id>")
-    .option("--input-json <file>", "JSON object containing the service input")
-    .option("--execution <execution_id>", "resume the same execution")
-    .option("--timeout <seconds>", "maximum wait before returning current progress", Number, 120)
-    .option("--host <host>")
-    .option("--target <target>")
-    .option("--json", "output JSON")
-    .action(async (serviceID, options) => {
-    const config = loadConfig();
-    try {
-        const input = options.inputJson
-            ? readInputJsonObject(options.inputJson, "workflow_input_invalid", [
-                { command: `itpay services run ${serviceID} --json`, reason: "重新读取服务输入声明" },
-            ])
-            : undefined;
-        if (!Number.isFinite(options.timeout) || options.timeout < 0 || options.timeout > 600) {
-            throw new Error("timeout must be between 0 and 600 seconds");
-        }
-        await runServicesRun(newBackendClient(config), config, serviceID, input, {
-            ...(options.execution ? { executionID: options.execution } : {}),
-            jsonOutput: Boolean(options.json),
-            host: withHost(options.host, config.agentType, options.target),
-            ...(options.target ? { target: options.target } : {}),
-            timeoutSeconds: options.timeout,
-        });
-    }
-    catch (error) {
-        reportCLIError(error, {
-            jsonOutput: Boolean(options.json), code: "workflow_run_failed",
-            instruction: "本次操作失败；按已返回的具体原因和恢复动作处理。没有恢复动作时停止，不猜字段或重复创建购买。", recovery: [],
-        });
-    }
-});
-services
-    .command("page")
-    .description("Read one page of a saved service result set (same stored version, no re-query, no quota)")
-    .argument("<service_execution_id>")
-    .argument("<result_item_id>")
-    .option("--offset <offset>", "zero-based candidate offset", Number, 0)
-    .option("--cursor <cursor>", "opaque v2 page cursor (rcur_<offset>); takes precedence over --offset")
-    .option("--limit <limit>", "page size (1-20)", Number, 20)
-    .option("--json", "output JSON")
-    .action(async (serviceExecutionID, resultItemID, options) => {
-    const config = loadConfig();
-    const backend = newBackendClient(config);
-    try {
-        const cursorOffset = typeof options.cursor === "string" && /^rcur_\d+$/.test(options.cursor)
-            ? Number(options.cursor.slice(5))
-            : undefined;
-        if (options.cursor !== undefined && cursorOffset === undefined) {
-            throw new CommandContractError("cursor_invalid", "--cursor must be an opaque rcur_<offset> token from a previous page response", "--cursor 需为上一页返回的 rcur_<offset> 不透明游标。", []);
-        }
-        await runServicesPage(backend, serviceExecutionID, resultItemID, {
-            offset: cursorOffset ?? options.offset,
-            limit: options.limit,
-            jsonOutput: Boolean(options.json),
-        });
-    }
-    catch (error) {
-        reportCLIError(error, {
-            jsonOutput: Boolean(options.json),
-            code: "service_page_failed",
-            instruction: "分页读取的是已保存的同版本结果；不要重新发起查询或新建 execution。",
-            recovery: [
-                { command: `itpay services next ${serviceExecutionID} --json`, reason: "读取当前结果页与合法动作" },
-            ],
-        });
-    }
-});
 services
     .command("start")
     .description("Start a contract-backed service execution")
@@ -1476,18 +1266,12 @@ services
     .argument("<service_execution_id>")
     .requiredOption("--capability <capability_id>")
     .option("--input <key=value>", "redacted input summary", collectOption, [])
-    .option("--input-json <file>", "JSON object containing the complete capability input")
     .option("--json", "output JSON")
     .action(async (serviceExecutionID, options) => {
     const config = loadConfig();
     const backend = newBackendClient(config);
     try {
-        const recovery = [{ command: `itpay services next ${serviceExecutionID} --json`, reason: "读取当前动作要求" }];
-        if (options.inputJson && options.input.length > 0) {
-            throw new CommandContractError("capability_input_invalid", "--input and --input-json cannot be combined", "嵌套输入用 --input-json <file>，扁平输入用 --input key=value，二选一；本次未调用供应商。", recovery);
-        }
-        const input = options.inputJson ? readInputJsonObject(options.inputJson, "capability_input_invalid", recovery) : parseKeyValueList(options.input);
-        await runServicesInvoke(backend, config, serviceExecutionID, options.capability, input, { jsonOutput: Boolean(options.json) });
+        await runServicesInvoke(backend, config, serviceExecutionID, options.capability, parseKeyValueList(options.input), { jsonOutput: Boolean(options.json) });
     }
     catch (error) {
         reportCLIError(error, {
@@ -1513,18 +1297,12 @@ services
     .option("--result-item <service_capability_result_item_id>")
     .option("--required-before <step>")
     .option("--input <key=value>", "action input snapshot", collectOption, [])
-    .option("--input-json <file>", "JSON object containing the full action input snapshot")
     .option("--json", "output JSON instead of terminal text")
     .action(async (serviceExecutionID, options) => {
     const config = loadConfig();
     const backend = newBackendClient(config);
     try {
-        const recovery = [{ command: `itpay services next ${serviceExecutionID} --json`, reason: "读取当前动作要求" }];
-        if (options.inputJson && options.input.length > 0) {
-            throw new CommandContractError("service_action_invalid", "--input and --input-json cannot be combined", "--input 与 --input-json 只能二选一：嵌套结构用 --input-json <file>，扁平键值用 --input key=value。", recovery);
-        }
-        const fileInput = options.inputJson ? readInputJsonObject(options.inputJson, "service_action_invalid", recovery) : {};
-        await runServicesAction(backend, serviceExecutionID, options.action, { ...fileInput, ...parseKeyValueList(options.input) }, {
+        await runServicesAction(backend, serviceExecutionID, options.action, parseKeyValueList(options.input), {
             ...(options.actorType ? { actorType: options.actorType } : {}),
             ...(options.actorId ? { actorID: options.actorId } : {}),
             ...(options.status ? { status: options.status } : {}),
@@ -1669,17 +1447,12 @@ services
     .command("next")
     .description("Show the next recommended agent action for a Service Execution")
     .argument("<service_execution_id>")
-    .option("--since-snapshot <snapshot_id>", "delta read: suppress the journey payload when unchanged")
-    .option("--timeout <seconds>", "wait up to 120 seconds for a useful result on this execution", (value) => Number(value))
     .option("--json", "output JSON instead of terminal text")
     .action(async (serviceExecutionID, options) => {
     const config = loadConfig();
     const backend = newBackendClient(config);
     try {
-        if (options.timeout !== undefined && (!Number.isInteger(options.timeout) || options.timeout < 0 || options.timeout > 120)) {
-            throw new Error("--timeout must be an integer from 0 to 120");
-        }
-        await runServicesNext(backend, serviceExecutionID, { jsonOutput: Boolean(options.json), sinceSnapshot: options.sinceSnapshot, timeoutSeconds: options.timeout });
+        await runServicesNext(backend, serviceExecutionID, { jsonOutput: Boolean(options.json) });
     }
     catch (error) {
         reportCLIError(error, {
@@ -1692,28 +1465,20 @@ services
 });
 services
     .command("read-result")
-    .description("Read saved railway results or human-granted service content")
+    .description("Read a human-granted service result for this agent")
     .argument("<service_execution_id>")
-    .option("--snapshot <snapshot_id>", "Smart: saved snapshot catalog; add --journey for a journey detail. Exact: saved station-pair rows without --snapshot")
-    .option("--journey <journey_id>", "rail.progressive.v2: journey id to read")
-    .option("--offset <offset>", "saved journey offset", Number, 0)
-    .option("--limit <limit>", "rows per page (1-20): Exact 20, Smart 3", Number)
-    .option("--all", "read every saved journey page")
     .option("--json", "output JSON instead of terminal text")
     .action(async (serviceExecutionID, options) => {
     const config = loadConfig();
     const backend = newBackendClient(config);
     try {
-        await runServicesReadResult(backend, serviceExecutionID, { jsonOutput: Boolean(options.json), snapshot: options.snapshot, journey: options.journey,
-            offset: options.offset, limit: options.limit, all: Boolean(options.all) });
+        await runServicesReadResult(backend, serviceExecutionID, { jsonOutput: Boolean(options.json) });
     }
     catch (error) {
         reportCLIError(error, {
             jsonOutput: Boolean(options.json),
-            code: error instanceof HttpError && error.code === "agent_access_denied" ? "agent_access_denied" : "service_result_read_failed",
-            instruction: error instanceof HttpError && error.code === "agent_access_denied"
-                ? "请用户在订单页面重新授权；不要使用开发者权限绕过授权或退款锁。"
-                : "读取同一服务的已保存结果；若快照已不可读，先查看该服务当前状态和有效动作。",
+            code: "agent_access_denied",
+            instruction: "请用户在订单页面重新授权；不要使用开发者权限绕过授权或退款锁。",
             recovery: [{ command: `itpay services next ${serviceExecutionID} --json`, reason: "检查交付模式和 grant 状态" }],
         });
     }
@@ -1747,7 +1512,6 @@ services
         });
     }
 });
-registerSell(program);
 program.parseAsync(process.argv).catch((error) => {
     reportCLIError(error);
 });

package/dist/src/render/markdown.js

@@ -24,6 +24,9 @@ export function buildAgentChatHandoff(plan) {
     if (plan.orderItems?.length) {
         lines.push(`项目：${plan.orderItems.map((item) => `${item.title} x${item.quantity}`).join("、")}`);
     }
+    if (plan.afterActionCommand) {
+        lines.push("", `付款后查询：\`${plan.afterActionCommand}\``);
+    }
     return {
         type: "send_payment_handoff",
         must_send_to_user: true,

package/dist/src/render/qr.js

@@ -20,7 +20,7 @@ export async function renderTerminalQR(url, format) {
     });
 }
 export async function writeLocalPNG(url) {
-    const dir = await fs.mkdtemp(path.join(process.env.ITPAY_STATE_DIR || os.tmpdir(), "itpay-v3-"));
+    const dir = await fs.mkdtemp(path.join(os.tmpdir(), "itpay-v3-"));
     const filePath = path.join(dir, `itpay-${randomUUID()}.png`);
     await QRCode.toFile(filePath, url, {
         type: "png",

package/dist/src/state/cart_session.js

@@ -55,12 +55,9 @@ export class CartSession {
             ...(this.state.lastDisplayToken ? { lastDisplayToken: this.state.lastDisplayToken } : {}),
             ...(this.state.lastCheckoutURL ? { lastCheckoutURL: this.state.lastCheckoutURL } : {}),
         };
-        const contents = JSON.stringify(toSave, null, 2);
-        if (existsSync(path) && readFileSync(path, "utf-8") === contents)
-            return;
         mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
         const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
-        writeFileSync(temporary, contents, { encoding: "utf-8", mode: 0o600 });
+        writeFileSync(temporary, JSON.stringify(toSave, null, 2), { encoding: "utf-8", mode: 0o600 });
         chmodSync(temporary, 0o600);
         renameSync(temporary, path);
         chmodSync(path, 0o600);