@my-life-buddies/cli 0.24.1-dev.0 → 0.24.1-dev.1

package/README.md

@@ -4,7 +4,7 @@
 
 这份说明按一次开发过程展开：登记搭子，准备工程，在本地预览，然后上传程序包。所有搭子统一使用 `@my-life-buddies/buddy-runtime`，业务能力通过 Prompt、`src/buddy-options.mjs` 和 Tool 实现。
 
-新建工程统一查询公共 npm dev 最新 Runtime，并写入准确版本与锁文件，不提供版本选择；查询或锁文件生成失败时停止，不回退旧版本。版本策略与联调范围见 [Runtime 集成说明](../../docs/runtime-integration.md)。
+空白工程模板不预置 Runtime 依赖或版本。新建工程统一查询公共 npm dev 最新 Runtime，并写入准确版本与锁文件，不提供版本选择；查询或锁文件生成失败时停止，不回退旧版本。版本策略与联调范围见 [Runtime 集成说明](../../docs/runtime-integration.md)。
 
 ## 准备 CLI 和平台地址
 
@@ -90,7 +90,7 @@ npm run release -- --publish # 显式发布当前 dev 分支到 npm dev
 
 `dev` 构建 `@my-life-buddies/cli@dev`，只包含 `buddy-cli-sit` 命令。版本必须是 `x.y.z-dev.N`；发布校验拒绝 latest 标签。main 用同一个包名发布 `latest` 正式版本，提供 `buddy-cli`；两个版本必须分目录安装才能共存，同一目录中安装会互相替换。Core 和 Preview 保留 monorepo 开发边界并标记为 `private`，构建时合入 CLI 的内部模块；Preview 页面和工程模板资源进入 CLI 包；Creator 与 Avatar Skill 使用时独立加载。安装不会请求 `@buddy/cli-core` 或 `@buddy/preview`。第三方运行依赖按正常 npm dependencies 安装，构建工具 esbuild 不进入安装依赖。根工作区标记为 `private`。
 
-版本维护：每批修改 CLI 发布内容时递增一次版本，默认 patch；根包和内部工作区版本、依赖引用、锁文件一起更新。Agent 工程自己的项目版本独立。升级 Runtime 时同步模板依赖与模板锁文件，并运行独立安装验收。
+版本维护：每批修改 CLI 发布内容时递增一次版本，默认 patch；根包和内部工作区版本、依赖引用、锁文件一起更新。Agent 工程自己的项目版本独立。Runtime 版本由创建时动态查询并锁定；发布前验证真实 Runtime 的动态解析和独立安装，不向空白模板写入基准版本。
 
 SIT CLI 固定连接 SIT `https://buddies.sit.dots.chat`，无需配置地址：
 

package/dist/bin/core.js

@@ -179,8 +179,8 @@ async function validateRuntimeDatasets(projectRoot, requirements = []) {
 }
 
 // packages/cli-core/src/init/scaffold.ts
-import { lstat as lstat6, mkdir as mkdir6, open as open3, readFile as readFile8, rename as rename6, rmdir as rmdir2, unlink as unlink4 } from "node:fs/promises";
-import { resolve as resolve4 } from "node:path";
+import { lstat as lstat6, mkdir as mkdir6, open as open3, readFile as readFile10, rename as rename6, rmdir as rmdir2, unlink as unlink4 } from "node:fs/promises";
+import { resolve as resolve5 } from "node:path";
 import { randomUUID as randomUUID4 } from "node:crypto";
 
 // packages/cli-core/src/config/index.ts
@@ -1248,52 +1248,175 @@ var MODEL_IDS = Object.freeze([
 ]);
 var DEFAULT_MODEL_ID = "kimi-k2.6";
 
+// packages/cli-core/src/config/runtime-policy.ts
+import { readFile as readFile8, realpath as realpath3 } from "node:fs/promises";
+import { createRequire as createRequire2 } from "node:module";
+import { resolve as resolve4 } from "node:path";
+
+// packages/cli-core/src/config/runtime-update.ts
+import { readFile as readFile7 } from "node:fs/promises";
+import { join as join7 } from "node:path";
+async function projectRuntimeVersion(root) {
+  try {
+    return runtimeDependencyVersion(JSON.parse(await readFile7(join7(root, "package.json"), "utf8")));
+  } catch (cause) {
+    if (cause.code === "ENOENT") return void 0;
+    throw cause;
+  }
+}
+function compareVersions(left, right) {
+  const parts = (value) => {
+    const [core, ...suffix] = value.split("-");
+    return { core: core.split(".").map(BigInt), pre: suffix.length ? suffix.join("-").split(".") : [] };
+  };
+  const a = parts(left), b = parts(right);
+  for (let i = 0; i < 3; i++) if (a.core[i] !== b.core[i]) return a.core[i] < b.core[i] ? -1 : 1;
+  if (!a.pre.length || !b.pre.length) return a.pre.length === b.pre.length ? 0 : a.pre.length ? -1 : 1;
+  for (let i = 0; i < Math.max(a.pre.length, b.pre.length); i++) {
+    const x = a.pre[i], y = b.pre[i];
+    if (x === y) continue;
+    if (x === void 0 || y === void 0) return x === void 0 ? -1 : 1;
+    const nx = /^\d+$/.test(x), ny = /^\d+$/.test(y);
+    if (nx && ny) return BigInt(x) < BigInt(y) ? -1 : 1;
+    if (nx !== ny) return nx ? -1 : 1;
+    return x < y ? -1 : 1;
+  }
+  return 0;
+}
+async function runtimeVersionStatus(project, latest) {
+  const current = project ? await projectRuntimeVersion(project) : void 0;
+  let versionStatus;
+  if (!project) versionStatus = "no_project";
+  else if (!current) versionStatus = "unconfigured";
+  else if (current === latest) versionStatus = "current";
+  else versionStatus = compareVersions(current, latest) < 0 ? "update_available" : "project_ahead";
+  return {
+    projectRuntimeVersion: current ?? null,
+    latestRuntimeVersion: latest,
+    versionStatus,
+    adaptationRequired: versionStatus !== "no_project" && versionStatus !== "current"
+  };
+}
+function reportRuntimeVersion(status, report) {
+  if (status.versionStatus === "no_project") return;
+  report(`Runtime \u7248\u672C\uFF1A\u5DE5\u7A0B ${status.projectRuntimeVersion ?? "\u672A\u9501\u5B9A\u51C6\u786E\u7248\u672C"}\uFF0Cnpm dev \u6700\u65B0 ${status.latestRuntimeVersion}\u3002`);
+  if (status.adaptationRequired) {
+    report("\u8BF7\u7531\u4F60\u6216\u5F00\u53D1 Agent \u66F4\u65B0\u4F9D\u8D56\u5E76\u9002\u914D\uFF1A\u68C0\u67E5\u65B0\u7248 Runtime \u7684\u542F\u52A8\u53C2\u6570\u3001\u6A21\u578B\u3001datasets\u3001\u5DE5\u5177\u53CA Hook\uFF0C\u5B8C\u6210\u9002\u914D\u540E\u9A8C\u8BC1 DEV\u3002CLI \u672A\u4FEE\u6539\u5DE5\u7A0B\u4F9D\u8D56\u6216\u914D\u7F6E\uFF1BDEV \u542F\u52A8\u3001\u81EA\u52A8\u91CD\u8F7D\u548C push \u5FC5\u987B\u901A\u8FC7\u6700\u65B0 Runtime \u68C0\u67E5\u3002");
+    report(`\u5728\u5DE5\u7A0B\u6839\u76EE\u5F55\u6267\u884C\uFF1Anpm install --save-exact ${BUDDY_RUNTIME_PACKAGE}@${status.latestRuntimeVersion} --registry=${RUNTIME_REGISTRY} --@my-life-buddies:registry=${RUNTIME_REGISTRY}`);
+  }
+}
+async function checkRuntimeUpdate(root, report, options = {}) {
+  options.signal?.throwIfAborted();
+  try {
+    const latest = await latestRuntimeVersion(options);
+    reportRuntimeVersion(await runtimeVersionStatus(root, latest), report);
+    options.signal?.throwIfAborted();
+    return;
+  } catch (cause) {
+    options.signal?.throwIfAborted();
+    report(`\u65E0\u6CD5\u68C0\u67E5 Runtime \u66F4\u65B0\uFF1A${cause instanceof Error ? cause.message : String(cause)}\u3002\u672C\u6B21\u672A\u786E\u8BA4 npm dev \u6700\u65B0\u7248\u672C\uFF1B\u53EF\u7EE7\u7EED\u67E5\u770B\u6216\u4FEE\u6539\u5DE5\u7A0B\uFF0CDEV \u542F\u52A8\u548C push \u4F1A\u53E6\u884C\u4E25\u683C\u68C0\u67E5\u3002`);
+  }
+}
+
+// packages/cli-core/src/config/runtime-policy.ts
+var RuntimeRequirementError = class extends Error {
+  constructor(code2, message, options) {
+    super(message, options);
+    this.code = code2;
+    this.name = "RuntimeRequirementError";
+  }
+  code;
+};
+function assertRequiredRuntime(actual, expected) {
+  if (actual === expected) return;
+  throw new RuntimeRequirementError(
+    "RUNTIME_VERSION_MISMATCH",
+    `\u5DF2\u963B\u6B62\u8FD0\u884C\u6216\u4E0A\u4F20\uFF1A\u5DE5\u7A0B Runtime ${actual ?? "\u672A\u9501\u5B9A\u51C6\u786E\u7248\u672C"}\uFF0Cnpm dev \u6700\u65B0\u7248\u672C ${expected}\u3002\u5FC5\u987B\u4F7F\u7528\u5B8C\u5168\u4E00\u81F4\u7684\u7248\u672C\u3002
+\u8BF7\u7531\u4F60\u6216\u5F00\u53D1 Agent \u66F4\u65B0\u4F9D\u8D56\u548C\u9501\u6587\u4EF6\uFF0C\u9002\u914D\u542F\u52A8\u53C2\u6570\u3001\u6A21\u578B\u3001datasets\u3001\u5DE5\u5177\u53CA Hook \u540E\u91CD\u8BD5\u3002
+npm install --save-exact ${BUDDY_RUNTIME_PACKAGE}@${expected} --registry=${RUNTIME_REGISTRY} --@my-life-buddies:registry=${RUNTIME_REGISTRY}`
+  );
+}
+function assertNpmRuntimeLock(contents, expected) {
+  const lock = JSON.parse(contents);
+  const installed2 = lock.lockfileVersion === 1 ? lock.dependencies?.[BUDDY_RUNTIME_PACKAGE] : lock.packages?.[`node_modules/${BUDDY_RUNTIME_PACKAGE}`];
+  if (installed2?.version !== expected || lock.lockfileVersion !== 1 && runtimeDependencyVersion(lock.packages?.[""]) !== expected) {
+    throw new RuntimeRequirementError("RUNTIME_DEPENDENCY_INVALID", `package-lock.json \u7684 Runtime \u4E0E\u8981\u6C42\u7684 ${expected} \u4E0D\u4E00\u81F4\u3002\u8BF7\u66F4\u65B0\u9501\u6587\u4EF6\u5E76\u91CD\u65B0\u5B89\u88C5\u4F9D\u8D56\u540E\u91CD\u8BD5\u3002`);
+  }
+}
+async function requireProjectRuntime(root, options = {}) {
+  const declared = await projectRuntimeVersion(root);
+  if (!declared) throw new RuntimeRequirementError("RUNTIME_DEPENDENCY_INVALID", "\u5DE5\u7A0B\u5FC5\u987B\u5728 package.json \u58F0\u660E npm dev \u6700\u65B0 Runtime \u7684\u51C6\u786E\u7248\u672C\uFF0C\u5E76\u5B89\u88C5\u4F9D\u8D56\u548C\u9501\u6587\u4EF6\uFF1B\u4E0D\u80FD\u4F7F\u7528 dev\u3001latest \u6216\u7248\u672C\u8303\u56F4\u4F5C\u4E3A\u5DE5\u7A0B\u4F9D\u8D56\u3002");
+  let expected;
+  try {
+    expected = await latestRuntimeVersion(options);
+  } catch (cause) {
+    options.signal?.throwIfAborted();
+    throw new RuntimeRequirementError("RUNTIME_CHECK_FAILED", `\u65E0\u6CD5\u786E\u8BA4 npm dev \u6700\u65B0 Runtime\uFF0C\u5DF2\u963B\u6B62\u8FD0\u884C\u6216\u4E0A\u4F20\uFF1A${cause instanceof Error ? cause.message : String(cause)}\u3002\u8BF7\u6062\u590D\u8FDE\u63A5\u540E\u91CD\u8BD5\u3002`, { cause });
+  }
+  try {
+    assertRequiredRuntime(await projectRuntimeVersion(root), expected);
+    const installedPath = await realpath3(resolve4(root, "node_modules", BUDDY_RUNTIME_PACKAGE, "package.json"));
+    const fromProject = createRequire2(resolve4(root, "package.json")).resolve(`${BUDDY_RUNTIME_PACKAGE}/package.json`);
+    if (await realpath3(fromProject) !== installedPath) throw new Error("Runtime \u5FC5\u987B\u5B89\u88C5\u5728\u5F53\u524D\u5DE5\u7A0B\u4E2D");
+    const installed2 = JSON.parse(await readFile8(installedPath, "utf8"));
+    if (installed2.version !== expected) throw new Error(`Runtime \u5B9E\u9645\u5B89\u88C5 ${installed2.version}\uFF0C\u8981\u6C42 ${expected}`);
+    let lock;
+    try {
+      lock = await readFile8(resolve4(root, "package-lock.json"), "utf8");
+    } catch (cause) {
+      if (cause.code !== "ENOENT") throw cause;
+    }
+    if (lock !== void 0) assertNpmRuntimeLock(lock, expected);
+    options.signal?.throwIfAborted();
+    return expected;
+  } catch (cause) {
+    options.signal?.throwIfAborted();
+    if (cause instanceof RuntimeRequirementError) throw cause;
+    throw new RuntimeRequirementError("RUNTIME_DEPENDENCY_INVALID", `Runtime \u4F9D\u8D56\u6821\u9A8C\u5931\u8D25\uFF1A${cause instanceof Error ? cause.message : String(cause)}\u3002\u8BF7\u66F4\u65B0\u4F9D\u8D56\u53CA\u9501\u6587\u4EF6\u5E76\u5B89\u88C5\uFF1Bnpm \u5DE5\u7A0B\u53EF\u8FD0\u884C npm ci\u3002`, { cause });
+  }
+}
+
 // packages/cli-core/src/init/runtime-template.ts
 import { execFile as execFile3 } from "node:child_process";
-import { mkdtemp as mkdtemp3, readFile as readFile7, rm as rm3, writeFile as writeFile5 } from "node:fs/promises";
+import { mkdtemp as mkdtemp3, readFile as readFile9, rm as rm3, writeFile as writeFile5 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { join as join7 } from "node:path";
+import { join as join8 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 var execute3 = promisify3(execFile3);
 async function latestRuntimeTemplate(template, options) {
-  const bundledVersion = runtimeDependencyVersion(JSON.parse(template.packageJson));
-  if (!bundledVersion) throw new Error("CLI \u5DE5\u7A0B\u6A21\u677F\u7F3A\u5C11 Runtime \u7684\u51C6\u786E\u7248\u672C");
   let temporaryRoot;
   try {
     options.signal?.throwIfAborted();
     options.report("\u6B63\u5728\u67E5\u8BE2\u516C\u5171 npm dev \u7684\u6700\u65B0 Runtime\u2026");
     const version = await latestRuntimeVersion(options);
-    let result = template;
-    if (version !== bundledVersion) {
-      temporaryRoot = await mkdtemp3(join7(tmpdir(), "buddy-runtime-template-"));
-      await writeFile5(join7(temporaryRoot, "package.json"), template.packageJson);
-      await writeFile5(join7(temporaryRoot, "package-lock.json"), template.packageLock);
-      const userConfig = join7(temporaryRoot, ".npmrc");
-      await writeFile5(userConfig, `registry=${RUNTIME_REGISTRY}
+    temporaryRoot = await mkdtemp3(join8(tmpdir(), "buddy-runtime-template-"));
+    await writeFile5(join8(temporaryRoot, "package.json"), template.packageJson);
+    await writeFile5(join8(temporaryRoot, "package-lock.json"), template.packageLock);
+    const userConfig = join8(temporaryRoot, ".npmrc");
+    await writeFile5(userConfig, `registry=${RUNTIME_REGISTRY}
 `);
-      options.report(`\u6B63\u5728\u4E3A Runtime ${version} \u751F\u6210\u4F9D\u8D56\u9501\u6587\u4EF6\u2026`);
-      const runNpm = options.runNpm ?? ((args, settings) => execute3("npm", args, { ...settings, encoding: "utf8", maxBuffer: 4 * 1024 * 1024 }));
-      await runNpm([
-        "install",
-        "--package-lock-only",
-        "--save-exact",
-        `${BUDDY_RUNTIME_PACKAGE}@${version}`,
-        "--ignore-scripts",
-        "--no-audit",
-        "--no-fund",
-        "--engine-strict",
-        `--registry=${RUNTIME_REGISTRY}`,
-        `--@my-life-buddies:registry=${RUNTIME_REGISTRY}`,
-        `--userconfig=${userConfig}`,
-        "--prefer-online",
-        "--fetch-retries=0",
-        "--fetch-timeout=20000"
-      ], { cwd: temporaryRoot, signal: options.signal, timeout: 6e4 });
-      result = {
-        packageJson: await readFile7(join7(temporaryRoot, "package.json"), "utf8"),
-        packageLock: await readFile7(join7(temporaryRoot, "package-lock.json"), "utf8")
-      };
-    }
+    options.report(`\u6B63\u5728\u4E3A Runtime ${version} \u751F\u6210\u4F9D\u8D56\u9501\u6587\u4EF6\u2026`);
+    const runNpm = options.runNpm ?? ((args, settings) => execute3("npm", args, { ...settings, encoding: "utf8", maxBuffer: 4 * 1024 * 1024 }));
+    await runNpm([
+      "install",
+      "--package-lock-only",
+      "--save-exact",
+      `${BUDDY_RUNTIME_PACKAGE}@${version}`,
+      "--ignore-scripts",
+      "--no-audit",
+      "--no-fund",
+      "--engine-strict",
+      `--registry=${RUNTIME_REGISTRY}`,
+      `--@my-life-buddies:registry=${RUNTIME_REGISTRY}`,
+      `--userconfig=${userConfig}`,
+      "--prefer-online",
+      "--fetch-retries=0",
+      "--fetch-timeout=20000"
+    ], { cwd: temporaryRoot, signal: options.signal, timeout: 6e4 });
+    const result = {
+      packageJson: await readFile9(join8(temporaryRoot, "package.json"), "utf8"),
+      packageLock: await readFile9(join8(temporaryRoot, "package-lock.json"), "utf8")
+    };
     const pkg = JSON.parse(result.packageJson);
     const lock = JSON.parse(result.packageLock);
     const locked = lock.packages?.[`node_modules/${BUDDY_RUNTIME_PACKAGE}`];
@@ -1306,7 +1429,7 @@ async function latestRuntimeTemplate(template, options) {
   } catch (cause) {
     if (options.signal?.aborted) throw new Error("Runtime \u7248\u672C\u67E5\u8BE2\u5DF2\u53D6\u6D88");
     const reason = cause instanceof Error && !cause.message.includes("Command failed") ? cause.message : "npm \u672A\u5B8C\u6210\u9501\u6587\u4EF6\u751F\u6210";
-    throw new Error(`\u672A\u80FD\u9501\u5B9A\u6700\u65B0 dev Runtime\uFF1A${reason}\u3002\u5DF2\u505C\u6B62\u751F\u6210\u5DE5\u7A0B\u4F9D\u8D56\uFF0C\u8BF7\u4FEE\u590D\u540E\u91CD\u8BD5\uFF1B\u4E0D\u4F1A\u56DE\u9000\u5230\u5185\u7F6E\u65E7\u7248\u672C\u3002`, { cause });
+    throw new Error(`\u672A\u80FD\u9501\u5B9A\u6700\u65B0 dev Runtime\uFF1A${reason}\u3002\u5DF2\u505C\u6B62\u751F\u6210\u5DE5\u7A0B\u4F9D\u8D56\uFF0C\u8BF7\u4FEE\u590D\u540E\u91CD\u8BD5\uFF1B\u4E0D\u4F1A\u4F7F\u7528\u9884\u7F6E\u6216\u7F13\u5B58\u7684\u65E7\u7248\u672C\u3002`, { cause });
   } finally {
     if (temporaryRoot) await rm3(temporaryRoot, { recursive: true, force: true });
   }
@@ -1398,15 +1521,15 @@ try {
 `;
 }
 async function scaffoldPlatformAgent(projectRoot, name, options = {}) {
-  const path = resolve4(projectRoot, BUDDY_PLATFORM_AGENT_ENTRY);
-  const packagePath = resolve4(projectRoot, BUDDY_PLATFORM_PACKAGE_JSON);
+  const path = resolve5(projectRoot, BUDDY_PLATFORM_AGENT_ENTRY);
+  const packagePath = resolve5(projectRoot, BUDDY_PLATFORM_PACKAGE_JSON);
   if (!(await lstat6(packagePath)).isFile()) throw new Error("package.json \u5FC5\u987B\u662F\u666E\u901A\u6587\u4EF6");
-  const originalPackage = await readFile8(packagePath, "utf8");
+  const originalPackage = await readFile10(packagePath, "utf8");
   const projectPackage = parseBuddyProjectManifest(originalPackage);
   const isIdentityDraft = Object.keys(projectPackage).every((key) => key === "buddyId");
   const hasAlternateLockfile = (await Promise.all(["pnpm-lock.yaml", "yarn.lock"].map(async (name2) => {
     try {
-      if (!(await lstat6(resolve4(projectRoot, name2))).isFile()) {
+      if (!(await lstat6(resolve5(projectRoot, name2))).isFile()) {
         throw new TypeError(`\u4F9D\u8D56\u9501\u6587\u4EF6\u5FC5\u987B\u662F\u666E\u901A\u6587\u4EF6\uFF1A${name2}`);
       }
       return true;
@@ -1417,19 +1540,19 @@ async function scaffoldPlatformAgent(projectRoot, name, options = {}) {
   }))).some(Boolean);
   const files = [
     { path, content: platformAgentTemplate(name) },
-    { path: resolve4(projectRoot, BUDDY_PLATFORM_FACTORY_ENTRY), content: platformFactoryTemplate(options.model) },
-    { path: resolve4(projectRoot, BUDDY_PLATFORM_PACKAGE_JSON), content: await readFile8(new URL("../../resources/agent-template/package.json", import.meta.url), "utf8") },
-    ...hasAlternateLockfile ? [] : [{ path: resolve4(projectRoot, BUDDY_PLATFORM_PACKAGE_LOCK), content: await readFile8(new URL("../../resources/agent-template/package-lock.json", import.meta.url), "utf8") }],
-    { path: resolve4(projectRoot, BUDDY_PLATFORM_START_ENTRY), content: platformStartTemplate() },
-    { path: resolve4(projectRoot, "data-access.json"), content: '{\n  "requirements": []\n}\n' },
-    { path: resolve4(projectRoot, ".gitignore"), content: "node_modules/\n/.env\n" },
-    { path: resolve4(projectRoot, ".env.example"), content: "# \u642D\u5B50\u8EAB\u4EFD\u7531 package.json \u9876\u5C42\u7684 buddyId \u63D0\u4F9B\u3002\n# \u9996\u6B21\u8FD0\u884C buddy-cli-sit dev \u6216\u5728\u540E\u53F0\u542F\u52A8 DEV \u65F6\uFF0CCLI \u4F1A\u51C6\u5907 .env\u3002\nBUDDY_TOKEN=\n# CLI \u81EA\u52A8\u5199\u5165 SIT \u7684 MLB_GATEWAY_URL\uFF0C\u4F9B Runtime \u4F7F\u7528\uFF1B\u65E0\u9700\u624B\u52A8\u8BBE\u7F6E\u3002\n# SIT CLI \u4E0D\u652F\u6301\u901A\u8FC7\u73AF\u5883\u53D8\u91CF\u6216 .env \u5207\u6362\u5E73\u53F0\u3002\n" }
+    { path: resolve5(projectRoot, BUDDY_PLATFORM_FACTORY_ENTRY), content: platformFactoryTemplate(options.model) },
+    { path: resolve5(projectRoot, BUDDY_PLATFORM_PACKAGE_JSON), content: await readFile10(new URL("../../resources/agent-template/package.json", import.meta.url), "utf8") },
+    ...hasAlternateLockfile ? [] : [{ path: resolve5(projectRoot, BUDDY_PLATFORM_PACKAGE_LOCK), content: await readFile10(new URL("../../resources/agent-template/package-lock.json", import.meta.url), "utf8") }],
+    { path: resolve5(projectRoot, BUDDY_PLATFORM_START_ENTRY), content: platformStartTemplate() },
+    { path: resolve5(projectRoot, "data-access.json"), content: '{\n  "requirements": []\n}\n' },
+    { path: resolve5(projectRoot, ".gitignore"), content: "node_modules/\n/.env\n" },
+    { path: resolve5(projectRoot, ".env.example"), content: "# \u642D\u5B50\u8EAB\u4EFD\u7531 package.json \u9876\u5C42\u7684 buddyId \u63D0\u4F9B\u3002\n# \u9996\u6B21\u8FD0\u884C buddy-cli-sit dev \u6216\u5728\u540E\u53F0\u542F\u52A8 DEV \u65F6\uFF0CCLI \u4F1A\u51C6\u5907 .env\u3002\nBUDDY_TOKEN=\n# CLI \u81EA\u52A8\u5199\u5165 SIT \u7684 MLB_GATEWAY_URL\uFF0C\u4F9B Runtime \u4F7F\u7528\uFF1B\u65E0\u9700\u624B\u52A8\u8BBE\u7F6E\u3002\n# SIT CLI \u4E0D\u652F\u6301\u901A\u8FC7\u73AF\u5883\u53D8\u91CF\u6216 .env \u5207\u6362\u5E73\u53F0\u3002\n" }
   ];
   const handles = [];
   const createdDirectories = [];
   try {
     for (const directory of PLATFORM_DIRECTORIES) {
-      const directoryPath = resolve4(projectRoot, directory);
+      const directoryPath = resolve5(projectRoot, directory);
       try {
         await mkdir6(directoryPath, { mode: 448 });
         createdDirectories.push(directoryPath);
@@ -1450,20 +1573,28 @@ async function scaffoldPlatformAgent(projectRoot, name, options = {}) {
         }
       }
     }
-    const packageFile = files.find((file) => file.path === resolve4(projectRoot, BUDDY_PLATFORM_PACKAGE_JSON));
-    const lockFile = files.find((file) => file.path === resolve4(projectRoot, BUDDY_PLATFORM_PACKAGE_LOCK));
+    const packageFile = files.find((file) => file.path === resolve5(projectRoot, BUDDY_PLATFORM_PACKAGE_JSON));
+    const lockFile = files.find((file) => file.path === resolve5(projectRoot, BUDDY_PLATFORM_PACKAGE_LOCK));
     packageFile.content = JSON.stringify({ ...JSON.parse(packageFile.content), buddyId: projectPackage.buddyId }, null, 2) + "\n";
-    if (options.resolveDependencies && isIdentityDraft && lockFile && handles.some((file) => file.path === lockFile.path)) {
-      const template = await options.resolveDependencies({ packageJson: packageFile.content, packageLock: lockFile.content });
+    if (isIdentityDraft) {
+      const resolveDependencies = options.resolveDependencies ?? ((template2) => latestRuntimeTemplate(template2, { report() {
+      } }));
+      const template = await resolveDependencies({
+        packageJson: packageFile.content,
+        packageLock: lockFile?.content ?? await readFile10(new URL("../../resources/agent-template/package-lock.json", import.meta.url), "utf8")
+      });
       if (parseBuddyProjectManifest(template.packageJson).buddyId !== projectPackage.buddyId) {
         throw new Error("\u4F9D\u8D56\u89E3\u6790\u6539\u53D8\u4E86 package.json.buddyId\uFF0C\u5DF2\u505C\u6B62\u8865\u9F50\u5DE5\u7A0B");
       }
+      const version = runtimeDependencyVersion(JSON.parse(template.packageJson));
+      if (!version) throw new Error("\u4F9D\u8D56\u89E3\u6790\u672A\u8FD4\u56DE Runtime \u7684\u51C6\u786E\u7248\u672C\uFF0C\u5DF2\u505C\u6B62\u8865\u9F50\u5DE5\u7A0B");
+      assertNpmRuntimeLock(template.packageLock, version);
       packageFile.content = template.packageJson;
-      lockFile.content = template.packageLock;
+      if (lockFile) lockFile.content = template.packageLock;
     }
     if (lockFile && (isIdentityDraft || handles.some((file) => file.path === lockFile.path))) {
-      const packageContents = isIdentityDraft ? packageFile.content : await readFile8(packageFile.path, "utf8");
-      const lockContents = handles.some((file) => file.path === lockFile.path) ? lockFile.content : await readFile8(lockFile.path, "utf8");
+      const packageContents = isIdentityDraft ? packageFile.content : await readFile10(packageFile.path, "utf8");
+      const lockContents = handles.some((file) => file.path === lockFile.path) ? lockFile.content : await readFile10(lockFile.path, "utf8");
       const declared = JSON.parse(packageContents).dependencies ?? {};
       const locked = JSON.parse(lockContents).packages?.[""]?.dependencies ?? {};
       if (JSON.stringify(Object.entries(declared).sort()) !== JSON.stringify(Object.entries(locked).sort())) {
@@ -1482,7 +1613,7 @@ async function scaffoldPlatformAgent(projectRoot, name, options = {}) {
         await handle.writeFile(packageFile.content, "utf8");
         await handle.sync();
         await handle.close();
-        if (!(await lstat6(packagePath)).isFile() || await readFile8(packagePath, "utf8") !== originalPackage) {
+        if (!(await lstat6(packagePath)).isFile() || await readFile10(packagePath, "utf8") !== originalPackage) {
           throw new Error("\u8865\u9F50\u5DE5\u7A0B\u65F6 package.json \u5DF2\u6539\u53D8\uFF0C\u8BF7\u91CD\u8BD5");
         }
         await rename6(temporary, packagePath);
@@ -1509,136 +1640,6 @@ async function scaffoldPlatformAgent(projectRoot, name, options = {}) {
 // packages/cli-core/src/init/runtime-version.ts
 import { readFile as readFile11 } from "node:fs/promises";
 import { join as join9 } from "node:path";
-
-// packages/cli-core/src/config/runtime-policy.ts
-import { readFile as readFile10, realpath as realpath3 } from "node:fs/promises";
-import { createRequire as createRequire2 } from "node:module";
-import { resolve as resolve5 } from "node:path";
-
-// packages/cli-core/src/config/runtime-update.ts
-import { readFile as readFile9 } from "node:fs/promises";
-import { join as join8 } from "node:path";
-async function projectRuntimeVersion(root) {
-  try {
-    return runtimeDependencyVersion(JSON.parse(await readFile9(join8(root, "package.json"), "utf8")));
-  } catch (cause) {
-    if (cause.code === "ENOENT") return void 0;
-    throw cause;
-  }
-}
-function compareVersions(left, right) {
-  const parts = (value) => {
-    const [core, ...suffix] = value.split("-");
-    return { core: core.split(".").map(BigInt), pre: suffix.length ? suffix.join("-").split(".") : [] };
-  };
-  const a = parts(left), b = parts(right);
-  for (let i = 0; i < 3; i++) if (a.core[i] !== b.core[i]) return a.core[i] < b.core[i] ? -1 : 1;
-  if (!a.pre.length || !b.pre.length) return a.pre.length === b.pre.length ? 0 : a.pre.length ? -1 : 1;
-  for (let i = 0; i < Math.max(a.pre.length, b.pre.length); i++) {
-    const x = a.pre[i], y = b.pre[i];
-    if (x === y) continue;
-    if (x === void 0 || y === void 0) return x === void 0 ? -1 : 1;
-    const nx = /^\d+$/.test(x), ny = /^\d+$/.test(y);
-    if (nx && ny) return BigInt(x) < BigInt(y) ? -1 : 1;
-    if (nx !== ny) return nx ? -1 : 1;
-    return x < y ? -1 : 1;
-  }
-  return 0;
-}
-async function runtimeVersionStatus(project, latest) {
-  const current = project ? await projectRuntimeVersion(project) : void 0;
-  let versionStatus;
-  if (!project) versionStatus = "no_project";
-  else if (!current) versionStatus = "unconfigured";
-  else if (current === latest) versionStatus = "current";
-  else versionStatus = compareVersions(current, latest) < 0 ? "update_available" : "project_ahead";
-  return {
-    projectRuntimeVersion: current ?? null,
-    latestRuntimeVersion: latest,
-    versionStatus,
-    adaptationRequired: versionStatus !== "no_project" && versionStatus !== "current"
-  };
-}
-function reportRuntimeVersion(status, report) {
-  if (status.versionStatus === "no_project") return;
-  report(`Runtime \u7248\u672C\uFF1A\u5DE5\u7A0B ${status.projectRuntimeVersion ?? "\u672A\u9501\u5B9A\u51C6\u786E\u7248\u672C"}\uFF0Cnpm dev \u6700\u65B0 ${status.latestRuntimeVersion}\u3002`);
-  if (status.adaptationRequired) {
-    report("\u8BF7\u7531\u4F60\u6216\u5F00\u53D1 Agent \u66F4\u65B0\u4F9D\u8D56\u5E76\u9002\u914D\uFF1A\u68C0\u67E5\u65B0\u7248 Runtime \u7684\u542F\u52A8\u53C2\u6570\u3001\u6A21\u578B\u3001datasets\u3001\u5DE5\u5177\u53CA Hook\uFF0C\u5B8C\u6210\u9002\u914D\u540E\u9A8C\u8BC1 DEV\u3002CLI \u672A\u4FEE\u6539\u5DE5\u7A0B\u4F9D\u8D56\u6216\u914D\u7F6E\uFF1BDEV \u542F\u52A8\u3001\u81EA\u52A8\u91CD\u8F7D\u548C push \u5FC5\u987B\u901A\u8FC7\u6700\u65B0 Runtime \u68C0\u67E5\u3002");
-    report(`\u5728\u5DE5\u7A0B\u6839\u76EE\u5F55\u6267\u884C\uFF1Anpm install --save-exact ${BUDDY_RUNTIME_PACKAGE}@${status.latestRuntimeVersion} --registry=${RUNTIME_REGISTRY} --@my-life-buddies:registry=${RUNTIME_REGISTRY}`);
-  }
-}
-async function checkRuntimeUpdate(root, report, options = {}) {
-  options.signal?.throwIfAborted();
-  try {
-    const latest = await latestRuntimeVersion(options);
-    reportRuntimeVersion(await runtimeVersionStatus(root, latest), report);
-    options.signal?.throwIfAborted();
-    return;
-  } catch (cause) {
-    options.signal?.throwIfAborted();
-    report(`\u65E0\u6CD5\u68C0\u67E5 Runtime \u66F4\u65B0\uFF1A${cause instanceof Error ? cause.message : String(cause)}\u3002\u672C\u6B21\u672A\u786E\u8BA4 npm dev \u6700\u65B0\u7248\u672C\uFF1B\u53EF\u7EE7\u7EED\u67E5\u770B\u6216\u4FEE\u6539\u5DE5\u7A0B\uFF0CDEV \u542F\u52A8\u548C push \u4F1A\u53E6\u884C\u4E25\u683C\u68C0\u67E5\u3002`);
-  }
-}
-
-// packages/cli-core/src/config/runtime-policy.ts
-var RuntimeRequirementError = class extends Error {
-  constructor(code2, message, options) {
-    super(message, options);
-    this.code = code2;
-    this.name = "RuntimeRequirementError";
-  }
-  code;
-};
-function assertRequiredRuntime(actual, expected) {
-  if (actual === expected) return;
-  throw new RuntimeRequirementError(
-    "RUNTIME_VERSION_MISMATCH",
-    `\u5DF2\u963B\u6B62\u8FD0\u884C\u6216\u4E0A\u4F20\uFF1A\u5DE5\u7A0B Runtime ${actual ?? "\u672A\u9501\u5B9A\u51C6\u786E\u7248\u672C"}\uFF0Cnpm dev \u6700\u65B0\u7248\u672C ${expected}\u3002\u5FC5\u987B\u4F7F\u7528\u5B8C\u5168\u4E00\u81F4\u7684\u7248\u672C\u3002
-\u8BF7\u7531\u4F60\u6216\u5F00\u53D1 Agent \u66F4\u65B0\u4F9D\u8D56\u548C\u9501\u6587\u4EF6\uFF0C\u9002\u914D\u542F\u52A8\u53C2\u6570\u3001\u6A21\u578B\u3001datasets\u3001\u5DE5\u5177\u53CA Hook \u540E\u91CD\u8BD5\u3002
-npm install --save-exact ${BUDDY_RUNTIME_PACKAGE}@${expected} --registry=${RUNTIME_REGISTRY} --@my-life-buddies:registry=${RUNTIME_REGISTRY}`
-  );
-}
-function assertNpmRuntimeLock(contents, expected) {
-  const lock = JSON.parse(contents);
-  const installed2 = lock.lockfileVersion === 1 ? lock.dependencies?.[BUDDY_RUNTIME_PACKAGE] : lock.packages?.[`node_modules/${BUDDY_RUNTIME_PACKAGE}`];
-  if (installed2?.version !== expected || lock.lockfileVersion !== 1 && runtimeDependencyVersion(lock.packages?.[""]) !== expected) {
-    throw new RuntimeRequirementError("RUNTIME_DEPENDENCY_INVALID", `package-lock.json \u7684 Runtime \u4E0E\u8981\u6C42\u7684 ${expected} \u4E0D\u4E00\u81F4\u3002\u8BF7\u66F4\u65B0\u9501\u6587\u4EF6\u5E76\u91CD\u65B0\u5B89\u88C5\u4F9D\u8D56\u540E\u91CD\u8BD5\u3002`);
-  }
-}
-async function requireProjectRuntime(root, options = {}) {
-  const declared = await projectRuntimeVersion(root);
-  if (!declared) throw new RuntimeRequirementError("RUNTIME_DEPENDENCY_INVALID", "\u5DE5\u7A0B\u5FC5\u987B\u5728 package.json \u58F0\u660E npm dev \u6700\u65B0 Runtime \u7684\u51C6\u786E\u7248\u672C\uFF0C\u5E76\u5B89\u88C5\u4F9D\u8D56\u548C\u9501\u6587\u4EF6\uFF1B\u4E0D\u80FD\u4F7F\u7528 dev\u3001latest \u6216\u7248\u672C\u8303\u56F4\u4F5C\u4E3A\u5DE5\u7A0B\u4F9D\u8D56\u3002");
-  let expected;
-  try {
-    expected = await latestRuntimeVersion(options);
-  } catch (cause) {
-    options.signal?.throwIfAborted();
-    throw new RuntimeRequirementError("RUNTIME_CHECK_FAILED", `\u65E0\u6CD5\u786E\u8BA4 npm dev \u6700\u65B0 Runtime\uFF0C\u5DF2\u963B\u6B62\u8FD0\u884C\u6216\u4E0A\u4F20\uFF1A${cause instanceof Error ? cause.message : String(cause)}\u3002\u8BF7\u6062\u590D\u8FDE\u63A5\u540E\u91CD\u8BD5\u3002`, { cause });
-  }
-  try {
-    assertRequiredRuntime(await projectRuntimeVersion(root), expected);
-    const installedPath = await realpath3(resolve5(root, "node_modules", BUDDY_RUNTIME_PACKAGE, "package.json"));
-    const fromProject = createRequire2(resolve5(root, "package.json")).resolve(`${BUDDY_RUNTIME_PACKAGE}/package.json`);
-    if (await realpath3(fromProject) !== installedPath) throw new Error("Runtime \u5FC5\u987B\u5B89\u88C5\u5728\u5F53\u524D\u5DE5\u7A0B\u4E2D");
-    const installed2 = JSON.parse(await readFile10(installedPath, "utf8"));
-    if (installed2.version !== expected) throw new Error(`Runtime \u5B9E\u9645\u5B89\u88C5 ${installed2.version}\uFF0C\u8981\u6C42 ${expected}`);
-    let lock;
-    try {
-      lock = await readFile10(resolve5(root, "package-lock.json"), "utf8");
-    } catch (cause) {
-      if (cause.code !== "ENOENT") throw cause;
-    }
-    if (lock !== void 0) assertNpmRuntimeLock(lock, expected);
-    options.signal?.throwIfAborted();
-    return expected;
-  } catch (cause) {
-    options.signal?.throwIfAborted();
-    if (cause instanceof RuntimeRequirementError) throw cause;
-    throw new RuntimeRequirementError("RUNTIME_DEPENDENCY_INVALID", `Runtime \u4F9D\u8D56\u6821\u9A8C\u5931\u8D25\uFF1A${cause instanceof Error ? cause.message : String(cause)}\u3002\u8BF7\u66F4\u65B0\u4F9D\u8D56\u53CA\u9501\u6587\u4EF6\u5E76\u5B89\u88C5\uFF1Bnpm \u5DE5\u7A0B\u53EF\u8FD0\u884C npm ci\u3002`, { cause });
-  }
-}
-
-// packages/cli-core/src/init/runtime-version.ts
 async function resolveInitRuntime(root, options = {}) {
   let latest;
   try {