@whyshu/argent-engine 0.0.0-stage → 0.6.0

package/engine/configs/_migration-plan.proposed.json

@@ -0,0 +1,899 @@
+{
+  "_doc": "18 项迁移计划（未生效）。批 3 只读前置的机读产物 —— 由 docs/配置-18项迁移计划-2026-10-09.md 逐项对应的结构化副本。⛔ 本文件不改任何读取行为；它只是给批 3 实现消费的计划。取值口径：todayChain = configs/*.json 里的声明（'旧优先级'）；readers = 真读点（不含白名单/注释/日志/校验名单）；envInProduction = 客户机 huangwei@10.126.126.1 的只读实测结果（只记存在性/长度，⛔ 不含任何值）。",
+  "_survey": {
+    "date": "2026-10-09",
+    "gitHead": "2e02ba5",
+    "readerSha256_16": "core/lib/config-catalog.mjs=26fe694a466b8980",
+    "catalogSha256_16": {
+      "configs/account.json": "3e80bf3bedec835e",
+      "configs/notify.json": "1dc3588bc991f3e3",
+      "configs/host.json": "8288b112b3221135",
+      "configs/advanced.json": "b6cef3120fe33bee",
+      "configs/hr.json": "48357e567dad8036",
+      "verticals/mercadolibre/config.json": "85e592d700383b9b"
+    },
+    "readPointSha256_16": {
+      "scripts/daily-report.mjs": "c90bf74666a14f1b",
+      "scripts/telemetry.py": "c0362ae50638f63b",
+      "plugins/argent-core/src/index.js": "f7c885db527793b2"
+    },
+    "customer": {
+      "host": "huangwei@10.126.126.1",
+      "hostname": "huangweideMac-mini.local",
+      "dataDir": "/Users/huangwei/.dsh/argent",
+      "access": "read-only (no writes, no restarts, no remote files created)",
+      "envFilesPresent": ["daily-report.env", "fulfillment.env", "wenyao.env", "ziniao-webdriver.env"],
+      "canonicalEnvDirPresent": false,
+      "note": "~/.dsh/argent/verticals/mercadolibre/ 存在但**无 env/ 子目录** ⇒ 规范 env 路径尚不存在，4 个 env 文件全在旧平铺位",
+      "launchdEnvKeys": ["ARGENT_LICENSE_ENFORCE", "ARGENT_LICENSE_GATE_FORCE", "ARGENT_PY", "PATH"],
+      "configJsonKeysPresent": ["feishuAppId", "feishuAppSecret", "apiKey", "feishuBaseUrl", "feishuChatId", "fflUser", "fflPass", "xhInvoiceUser", "xhInvoicePass", "telemetryOptIn", "telemetryConsent", "mlDailyAlertChatId", "mlDailyAlertProfile", "mlDailyTime"],
+      "configJsonKeysAbsent": ["updateChannel", "mlDailyChatId", "mlDailyProfile", "mlDailyWebhook", "mlDailyTopN", "mlRestockLeadDays", "mlRestockBufferDays", "mlDailyStoreCount", "role"],
+      "instanceTokenFile": { "present": true, "size": 897 },
+      "rolesJson": { "present": true, "presets": 13, "has_hr_office": true }
+    }
+  },
+  "_blockers": [
+    {
+      "id": "B1-envfile-layer-unreachable",
+      "severity": "high",
+      "what": "读取器 resolveOne() 的 ② 层（env 文件）带门：只在 binding.kind==='envfile' 或 item.source==='envfile' 时才查（core/lib/config-catalog.mjs:575）。",
+      "consequence": "source:json 的项**永远读不到 env 文件**；18 项里 13 项是 json 源，其中 9 项（notify.daily.* 5 + ml.daily.* 4）今天的 env 回落正落在 daily-report.env。直接做 A ⇒ 这 9 项静默丢掉 env 文件回落。",
+      "evidence": "夹具实测：notify.daily.chat_id → missing；notify.daily.profile → missing（客户机今天分别取到 daily-report.env 的 ML_DAILY_CHAT_ID / LARK_PROFILE）",
+      "neededBefore": ["notify.daily.chat_id", "notify.daily.profile", "notify.daily.webhook", "ml.daily.hour", "ml.daily.top_n", "ml.daily.restock_lead_days", "ml.daily.restock_buffer_days"]
+    },
+    {
+      "id": "B2-env-name-mismatch",
+      "severity": "high",
+      "what": "多项的规范 env 名（envNameOf(key)）与今天代码实际读的 env 名**完全不同**，且 13 项都没声明 binding.env。",
+      "pairs": [
+        ["notify.daily.chat_id", "ML_DAILY_CHAT_ID", "NOTIFY_DAILY_CHAT_ID"],
+        ["notify.daily.profile", "LARK_PROFILE", "NOTIFY_DAILY_PROFILE"],
+        ["notify.daily.webhook", "FEISHU_WEBHOOK_URL", "NOTIFY_DAILY_WEBHOOK"],
+        ["notify.daily.alert_chat_id", "ML_DAILY_ALERT_CHAT_ID", "NOTIFY_DAILY_ALERT_CHAT_ID"],
+        ["notify.daily.alert_profile", "ML_DAILY_ALERT_PROFILE", "NOTIFY_DAILY_ALERT_PROFILE"],
+        ["ml.daily.hour", "REPORT_TIME", "ML_DAILY_HOUR"],
+        ["ml.daily.top_n", "TOP_N", "ML_DAILY_TOP_N"],
+        ["ml.daily.restock_lead_days", "RESTOCK_LEAD_DAYS", "ML_RESTOCK_LEAD_DAYS"],
+        ["ml.daily.restock_buffer_days", "RESTOCK_BUFFER_DAYS", "ML_RESTOCK_BUFFER_DAYS"],
+        ["account.feishu.app_id", "(无 env 读取)", "ACCOUNT_FEISHU_APP_ID"],
+        ["account.feishu.app_secret", "(无 env 读取)", "ACCOUNT_FEISHU_APP_SECRET"],
+        ["account.carrier.user", "(无 env 读取)", "ACCOUNT_CARRIER_USER"],
+        ["account.carrier.password", "(无 env 读取)", "ACCOUNT_CARRIER_PASSWORD"],
+        ["host.telemetry.instance_token", "ARGENT_INSTANCE_TOKEN", "HOST_TELEMETRY_INSTANCE_TOKEN"]
+      ],
+      "consequence": "直接 A 会静默丢弃既有 env 键（'配了等于没配'）。每一项都必须**显式声明 binding.env**（取今天的名字）或一次性改名并同步 init-ml.sh 模板 + 客户机 env 文件（生产变更，需单独批准）。",
+      "format": ["key", "todayEnvName", "canonicalEnvName"]
+    },
+    {
+      "id": "B3-declaration-factually-wrong",
+      "severity": "medium",
+      "what": "三项的 todayChain/声明与代码事实不符（不是'要迁移'，是'登记要改正'）。",
+      "cases": [
+        {
+          "key": "notify.daily.alert_chat_id",
+          "declared": ["json", "env"],
+          "actual": ["env", "json"],
+          "proof": ["scripts/daily-report.mjs:1006"],
+          "fix": "改 todayChain 为 [env,json]（代码零改动，提示自然消失 —— 不是'删提示'）"
+        },
+        {
+          "key": "notify.daily.alert_profile",
+          "declared": ["json", "env"],
+          "actual": ["env", "json"],
+          "proof": ["scripts/daily-report.mjs:1007", "scripts/feishu-card.mjs:174", "scripts/feishu-card.mjs:177", "scripts/flow_preflight.py:277", "scripts/flow_preflight.py:280"],
+          "fix": "改 todayChain 为 [env,json]"
+        },
+        {
+          "key": "host.telemetry.instance_token",
+          "declared": ["machine", "env"],
+          "actual": ["env", "machine"],
+          "proof": ["scripts/telemetry.py:206-212"],
+          "fix": "改 todayChain 为 [env,machine] + 修 binding（加 field:'token'）"
+        }
+      ]
+    },
+    {
+      "id": "B4-binding-defects",
+      "severity": "high",
+      "what": "两条声明的 binding 本身读不出正确的值。",
+      "cases": [
+        {
+          "key": "host.telemetry.instance_token",
+          "defect": "binding 缺 field ⇒ 规范读取器把整个 JSON 信封当标量，实测报「期望标量，实际拿到 object（binding 的 field 写错了？）」⇒ 落在 missing",
+          "impact": "客户机有 instance-token.json（897 B）却显示「未配置」",
+          "fix": "binding.field = 'token'",
+          "acceptance": "修后 describe().configured 由 false → true"
+        },
+        {
+          "key": "account.ziniao.api_key",
+          "defect": "binding 指向 config.json#apiKey，但该字段在代码里是**问述账号令牌**（7 处 config.apiKey || process.env.WHYSHU_API_KEY）；真正的紫鸟 Key 读在 plugins/argent-core/src/index.js:1405-1413（~/.ziniao-cli/config.json#profiles.<cur>.apiKey），面板 hint 明写「不入 config.json」",
+          "impact": "设置页「紫鸟 API Key」与目录项指向两个不同文件；按现状 A 会把问述令牌误当紫鸟 Key",
+          "fix": "改 binding 指向 ~/.ziniao-cli/config.json（需扩展 schema 支持数据目录外文件），或把本项降级为只读存在性",
+          "doNot": "⛔ 不要按现状做 A"
+        }
+      ]
+    },
+    {
+      "id": "B5-reader-order-conflicts",
+      "severity": "medium",
+      "what": "同一 key 的多个读取点顺序相反（todayChain 是一项一条，无法表达）。",
+      "cases": [
+        { "key": "notify.daily.chat_id", "jsonFirst": ["scripts/daily-report.mjs:985"], "envFirst": ["scripts/feishu-card.mjs:173", "scripts/flow_preflight.py:274"] },
+        { "key": "notify.daily.profile", "jsonFirst": ["scripts/daily-report.mjs:986"], "envFirst": ["scripts/flow_preflight.py:273", "scripts/feishu-card.mjs:174"], "quirk": "scripts/feishu-card.mjs:174 的 config 回落读的是 **alert** profile（疑似缺陷，建议单独记 issue，⛔ 不在本批改）" }
+      ],
+      "consequence": "迁移必须**逐读取点**确认，不能只按声明改一处。"
+    }
+  ],
+  "_decisionPoints": [
+    { "id": "D1-schema-fallbacks", "question": "json 源项要不要支持 env 文件回落？（阻塞 9 项）", "options": ["① 声明加 binding.fallbacks（推荐：显式、可门禁）", "② 放开读取器 ② 层的门（改动小、语义变宽）", "③ 另立 envfile 声明项（不动 schema，但一个语义两行声明）"], "blocks": ["B1-envfile-layer-unreachable"] },
+    { "id": "D2-env-name-strategy", "question": "env 名取今天的名字（显式声明 binding.env）还是一次性改成规范名？", "recommend": "先取今天的名字（保住既有覆盖），规范名只作文档别名", "blocks": ["B2-env-name-mismatch"] },
+    { "id": "D3-push-target", "question": "notify.daily.chat_id / profile 翻转会改生产推送目标与身份，是否接受？", "recommend": "先双写（config.json 与 env 同时有值）再切换读取方", "requiresUserApproval": true },
+    { "id": "D4-ziniao-binding", "question": "account.ziniao.api_key 的 binding 怎么修？", "requiresUserApproval": true },
+    { "id": "D5-telemetry-semantics", "question": "advanced.telemetry.opt_in 是否确认选 B（隐私同意 + TELEMETRY_DISABLE 反向硬关，不要 env 覆盖）？", "recommend": "B", "requiresUserApproval": true },
+    { "id": "D6-instance-token", "question": "host.telemetry.instance_token 是否确认 B + 修 field:'token'？ARGENT_INSTANCE_TOKEN 是否登记为运维/测试逃生阀？", "recommend": "B + 修 field + 登记逃生阀", "requiresUserApproval": true },
+    { "id": "D7-update-channel", "question": "advanced.update.channel 补读者（--check-update 读通道）还是如实标注'暂不生效'？", "requiresUserApproval": true },
+    { "id": "D8-hr-retired", "question": "hr.office.role（hr-office 角色 2026-10-04 已退役、preset 是墓碑）是否保留该目录项？", "requiresUserApproval": true }
+  ],
+  "_unlistedHazards": [
+    {
+      "id": "H1-notify.feishu.chat_id",
+      "severity": "medium",
+      "what": "唯一「source:json 且无 todayChain」的项（configs/notify.json 首项，绑定 config.json#feishuChatId），代码实际 env 优先且 env 名是 FULL_INTERNAL_CHAT_ID（规范名应为 NOTIFY_FEISHU_CHAT_ID）",
+      "proof": ["scripts/feishu-card.mjs:176"],
+      "why": "与 18 项同一形态，却因未写 todayChain 而在设置页**一句提示都没有** ⇒ 静默隐患",
+      "suggest": "补 todayChain:[env,json]（与代码一致、不产生提示）或与 18 项同批盘查"
+    },
+    {
+      "id": "H2-evidence-tokens-blind",
+      "severity": "medium",
+      "what": "门禁 evidenceTokens() 只用 binding.env/file/field 作'被读证据'候选（scripts/check-config-catalog.mjs:172-185），看不见'今日 env 名'",
+      "consequence": "迁移后 ML_DAILY_CHAT_ID / TOP_N / REPORT_TIME / LARK_PROFILE / ARGENT_INSTANCE_TOKEN 等读取点对门禁不可见",
+      "suggest": "在 todayChain 旁登记 todayEnvName，供门禁消费"
+    },
+    {
+      "id": "H3-canonical-env-path-absent",
+      "severity": "medium",
+      "what": "客户机 ~/.dsh/argent/verticals/mercadolibre/ 无 env/ 子目录，4 个 env 文件全在旧平铺位",
+      "consequence": "现状能读到（读取器 ② 层规范路径优先、旧平铺兜底）；但任何'搬到规范路径'的动作必须同时确认所有读取者都走同一条兜底",
+      "suggest": "搬文件前先查 scripts/invoice_lip_runner.py、scripts/orchestrator.py 的 _profile_from_deploy 等非读取器调用方"
+    },
+    {
+      "id": "H4-apikey-second-slot",
+      "severity": "medium",
+      "what": "config.json#apiKey 是问述令牌的**第二个存储槽**（与 whyshu.env#WHYSHU_API_KEY 并存），被 7+ 处读取；目录里**没有**任何项把它声明为问述令牌（唯一命中的项却声称它是紫鸟 Key）",
+      "proof": ["plugins/argent-core/src/index.js:339", "plugins/argent-core/src/index.js:573", "plugins/argent-core/src/index.js:600", "plugins/argent-core/src/index.js:869", "plugins/argent-core/src/index.js:895", "plugins/argent-core/src/index.js:2632", "plugins/argent-core/src/index.js:3056", "scripts/telemetry.py:137-144", "scripts/invoice_lip_runner.py:618-625", "scripts/check-model-auth.py:177-182"],
+      "suggest": "或补一条 account.whyshu.api_key_json 之类的声明，或把该槽登记为 account.whyshu.api_key 的 envfile→json 回落"
+    }
+  ],
+  "items": [
+    {
+      "key": "account.feishu.app_id",
+      "todayChain": ["json"],
+      "group": "json",
+      "category": "账号",
+      "readers": [
+        "plugins/argent-core/src/index.js:1428",
+        "plugins/argent-core/src/index.js:2829",
+        "plugins/argent-gateway/src/index.js:213",
+        "plugins/argent-gateway/src/index.js:223"
+      ],
+      "readersExcluded": ["plugins/argent-core/src/index.js:1477", "plugins/argent-core/src/index.js:1486", "plugins/argent-core/src/index.js:1487"],
+      "readersExcludedWhy": "只读刚提交的 patch，非存量配置",
+      "todayEnvName": null,
+      "canonicalEnvName": "ACCOUNT_FEISHU_APP_ID",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": true,
+      "activeValueSourceToday": "json",
+      "recommend": "A",
+      "behaviorChange": "none",
+      "behaviorChangeDetail": "客户机 env 无值 ⇒ 两链同取 config.json#feishuAppId。仅当有人设了同名 env 才改变。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页 POST /api/argent-state/config（白名单 argent-core:81/:150；面板 verticals/mercadolibre/manifest.json:80-92）",
+      "regression": [
+        "设置页「飞书应用 App ID」保存→读回",
+        "POST /api/argent-state/feishu-test",
+        "gateway 启动日志的 Bot 配置行"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "env 名策略（D2）：规范名 ACCOUNT_FEISHU_APP_ID 今天无人读；若要兼容 lark-cli 的 LARK_APP_ID 需另行决定",
+      "priority": 2,
+      "risk": "low"
+    },
+    {
+      "key": "account.feishu.app_secret",
+      "todayChain": ["json"],
+      "group": "json",
+      "category": "账号",
+      "readers": [
+        "plugins/argent-core/src/index.js:1436",
+        "plugins/argent-core/src/index.js:1438",
+        "plugins/argent-core/src/index.js:2830",
+        "plugins/argent-gateway/src/index.js:214",
+        "plugins/argent-gateway/src/index.js:233"
+      ],
+      "todayEnvName": null,
+      "canonicalEnvName": "ACCOUNT_FEISHU_APP_SECRET",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": true,
+      "activeValueSourceToday": "json",
+      "recommend": "A",
+      "behaviorChange": "none",
+      "behaviorChangeDetail": "客户机 env 无值 ⇒ 不变。密钥项经 env 优先注入后可不再明文落 config.json。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页同上（secret；SECRET_KEYS 名单 argent-core:249）",
+      "regression": [
+        "掩码回显（describe() 永不回值）",
+        "feishu-test 仍能取到",
+        "重启后 gateway 仍能起 Bot"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "env 名策略（D2）",
+      "priority": 2,
+      "risk": "low"
+    },
+    {
+      "key": "account.ziniao.api_key",
+      "todayChain": ["json"],
+      "group": "json",
+      "category": "账号",
+      "readers": [
+        "plugins/argent-core/src/index.js:339",
+        "plugins/argent-core/src/index.js:573",
+        "plugins/argent-core/src/index.js:600",
+        "plugins/argent-core/src/index.js:869",
+        "plugins/argent-core/src/index.js:895",
+        "plugins/argent-core/src/index.js:2632",
+        "plugins/argent-core/src/index.js:3056",
+        "scripts/telemetry.py:137-144",
+        "scripts/invoice_lip_runner.py:618-625",
+        "scripts/check-model-auth.py:177-182"
+      ],
+      "readersNote": "以上读取点读的 config.json#apiKey 在代码里是**问述账号令牌**（config.apiKey || process.env.WHYSHU_API_KEY），不是紫鸟 Key。真正的紫鸟 Key 读在 plugins/argent-core/src/index.js:1405-1413（~/.ziniao-cli/config.json#profiles.<cur>.apiKey），写入在 scripts/init-ml.sh:256/:266，探测在 :134/:137/:141。",
+      "todayEnvName": "WHYSHU_API_KEY",
+      "canonicalEnvName": "ACCOUNT_ZINIAO_API_KEY",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": true,
+      "jsonNote": "config.json#apiKey 存在（❰已设置❱，len=191）—— 但那是问述令牌",
+      "activeValueSourceToday": "json",
+      "recommend": "B",
+      "recommendNote": "⛔ 不是普通 B：先修**绑定**。建议改 binding 指向 ~/.ziniao-cli/config.json（需扩展 schema 支持数据目录外文件），或把本项降级为只读存在性。⛔ 不要按现状做 A。",
+      "behaviorChange": "changes-if-env-set",
+      "behaviorChangeDetail": "按现状 A：configured 会随**问述令牌**有无而变，与设置页「紫鸟 API Key」显示（读 ~/.ziniao-cli）互相矛盾。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页「紫鸟 API Key」实际走 POST /api/argent-state/ziniao-key → ~/.ziniao-cli/config.json（manifest.json:154-158，hint 明写「不入 config.json」）——写的是错的那个键",
+      "regression": [
+        "设置页「紫鸟 API Key：已配置」与 ziniao-cli config show 一致",
+        "构造「有 config.json#apiKey 但无 ziniao 配置」夹具 ⇒ 必须报未配置",
+        "问述令牌相关读取点零改动（git diff 断言）"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D4：绑定改法需用户拍板（涉及数据目录外文件的 schema 扩展）",
+      "priority": 6,
+      "risk": "high"
+    },
+    {
+      "key": "account.carrier.user",
+      "todayChain": ["json"],
+      "group": "json",
+      "category": "账号",
+      "readers": ["scripts/invoice_runner.py:93"],
+      "todayEnvName": null,
+      "canonicalEnvName": "ACCOUNT_CARRIER_USER",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": true,
+      "activeValueSourceToday": "json",
+      "recommend": "A",
+      "behaviorChange": "none",
+      "behaviorChangeDetail": "客户机 env 无值 ⇒ 不变。A 后可部署期注入门户账号。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（白名单 argent-core:81；面板 manifest.json:351-362）",
+      "regression": [
+        "xzh 发票 load_creds() 取到非空",
+        "invoice_stageb.login_xinhang() 不因凭据缺失早退"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "env 名策略（D2）",
+      "priority": 2,
+      "risk": "low"
+    },
+    {
+      "key": "account.carrier.password",
+      "todayChain": ["json"],
+      "group": "json",
+      "category": "账号",
+      "readers": ["scripts/invoice_runner.py:93", "scripts/invoice_stageb.py:45"],
+      "todayEnvName": null,
+      "canonicalEnvName": "ACCOUNT_CARRIER_PASSWORD",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": true,
+      "activeValueSourceToday": "json",
+      "recommend": "A",
+      "behaviorChange": "none",
+      "behaviorChangeDetail": "客户机 env 无值 ⇒ 不变。A 后门户密码可只住 env/credentials。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（secret；SECRET_KEYS:249）",
+      "regression": [
+        "掩码不回显",
+        "invoice_stageb 登录路径",
+        "写前备份/写后读回的既有守卫"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "env 名策略（D2）",
+      "priority": 2,
+      "risk": "low"
+    },
+    {
+      "key": "advanced.telemetry.opt_in",
+      "todayChain": ["json"],
+      "group": "json",
+      "category": "高级与诊断",
+      "readers": [
+        "scripts/telemetry.py:276-295",
+        "scripts/orchestrator.py:520-548",
+        "plugins/argent-core/src/index.js:457",
+        "plugins/argent-core/src/index.js:484",
+        "plugins/argent-core/src/index.js:1467"
+      ],
+      "readersNote": "telemetry.enabled() 是**唯一判定来源**；orchestrator._telemetry_opt_in() 委托它；consumers scripts/telemetry.py:604/:675/:764-766",
+      "todayEnvName": "TELEMETRY_DISABLE",
+      "todayEnvSemantics": "反向硬关（压过一切，含显式同意；没有任何 env 能'打开'上报）",
+      "canonicalEnvName": "ADVANCED_TELEMETRY_OPT_IN",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": true,
+      "activeValueSourceToday": "json",
+      "recommend": "B",
+      "recommendRationale": "隐私同意项：必须由单一显式落点（config.json，用户可见开关）独占；TELEMETRY_DISABLE 是反向硬关，不能映射成普通 env 覆盖层。A 会把硬关降级为可覆盖 ⇒ 隐私语义倒退。",
+      "behaviorChange": "none",
+      "behaviorChangeDetail": "不变；且'不变'正是要点。附带：todayChain 漏登记了 TELEMETRY_DISABLE 这个 env 层（登记不全，非优先级错）。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": true,
+      "writerNote": "设置页（advanced.json editable:true）+ 安装器同意步 install-argent.mjs:1116-1129 + argent-core saveConfig；env 层仅 TELEMETRY_DISABLE（硬关）",
+      "regression": [
+        "scripts/tests/telemetry-consent.test.mjs",
+        "scripts/tests/telemetry-instance-token.test.mjs 的「令牌 ≠ 同意」",
+        "orchestrator._telemetry_opt_in() 与 telemetry_enabled() 夹具对拍同判",
+        "关闭后队列清空（config-set-off / settings-off）"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D5：确认选 B 并登记 TELEMETRY_DISABLE 硬关",
+      "priority": 5,
+      "risk": "medium"
+    },
+    {
+      "key": "advanced.update.channel",
+      "todayChain": ["json"],
+      "group": "json",
+      "category": "高级与诊断",
+      "readers": [],
+      "readersNote": "⛔ 全仓 0 个读取点。唯一出现处 = 白名单 plugins/argent-core/src/index.js:81 + 声明 configs/advanced.json:50。",
+      "todayEnvName": null,
+      "canonicalEnvName": "ADVANCED_UPDATE_CHANNEL",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": false,
+      "activeValueSourceToday": "default",
+      "recommend": "B",
+      "recommendRationale": "无读者 ⇒ 翻转无意义。要么补读者（--check-update 读通道），要么如实标注'暂不生效'。",
+      "behaviorChange": "none",
+      "behaviorChangeDetail": "今天就没有任何代码读它。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页可写（advanced.json editable:true + kind:json ⇒ writeTargetOf 返回 config.json#updateChannel）—— 典型的'可写没人读'",
+      "regression": [
+        "若补读者：install-argent.mjs --check-update 的通道选择 + --json 输出",
+        "若只读展示：设置页不得声称'影响检查更新'"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D7：补读者 vs 如实标注",
+      "priority": 1,
+      "risk": "low"
+    },
+    {
+      "key": "hr.office.role",
+      "todayChain": ["json"],
+      "group": "json",
+      "category": "人事(HR)",
+      "bindingNote": "binding = {kind:json, file:roles.json, field:'presets.hr-office'}（configs/hr.json:20-21）",
+      "readers": [
+        "plugins/argent-gateway/src/index.js:395-399",
+        "plugins/argent-gateway/src/index.js:383",
+        "scripts/flow_preflight.py:293",
+        "scripts/check-role-mapping.mjs:276",
+        "scripts/check-role-mapping.mjs:325",
+        "scripts/check-role-mapping.mjs:363",
+        "scripts/customer-readiness.sh:61"
+      ],
+      "todayEnvName": null,
+      "canonicalEnvName": "HR_OFFICE_ROLE",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": true,
+      "jsonNote": "客户机 roles.json 存在，presets=13，含 hr-office",
+      "activeValueSourceToday": "json",
+      "recommend": "B",
+      "recommendRationale": "机器事实：角色→preset 映射由 check-role-mapping.mjs --write 生成的 roles.json 独占，本就无 env 层 ⇒ 两链同值，提示属误报。",
+      "behaviorChange": "none",
+      "behaviorChangeDetail": "无 env 层 ⇒ 翻转不改变任何取值。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "node scripts/check-role-mapping.mjs --write（roles.json 唯一生成器）+ scripts/customer-config-migrate.mjs",
+      "regression": [
+        "node scripts/check-role-mapping.mjs（roles.json 与角色集一致）",
+        "gateway 重启后日志出现「roles.json 已应用 N 个角色映射」",
+        "⚠️ hr-office 2026-10-04 已退役（gateway.json 无该行，preset 是墓碑）"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D8：退役角色的目录项是否保留",
+      "priority": 1,
+      "risk": "medium"
+    },
+    {
+      "key": "notify.daily.chat_id",
+      "todayChain": ["json", "env"],
+      "group": "json→env",
+      "category": "通知与投递",
+      "readers": [
+        "scripts/daily-report.mjs:985",
+        "scripts/feishu-card.mjs:173",
+        "scripts/flow_preflight.py:274"
+      ],
+      "readerOrders": {
+        "scripts/daily-report.mjs:985": "json-first（pick() 定义在 scripts/daily-report.mjs:902；env = {...daily-report.env, ...process.env}，:1291）",
+        "scripts/feishu-card.mjs:173": "env-first",
+        "scripts/flow_preflight.py:274": "env-first"
+      },
+      "todayEnvName": "ML_DAILY_CHAT_ID",
+      "canonicalEnvName": "NOTIFY_DAILY_CHAT_ID",
+      "envInProduction": false,
+      "envInProcessEnv": false,
+      "envFileInProduction": true,
+      "envFileWhere": "daily-report.env",
+      "jsonInProduction": false,
+      "activeValueSourceToday": "envfile",
+      "activeValueSourceTodayDetail": "daily-report.env#ML_DAILY_CHAT_ID（客户机 config.json#mlDailyChatId 不存在）",
+      "recommend": "A",
+      "recommendRationale": "部署期最常改的落点；客户机现状正是'env 文件有值 / json 无值'，与声明相反。",
+      "behaviorChange": "changes-if-env-set",
+      "behaviorChangeDetail": "⛔ 客户机上**会变**：A 后规范读取器取到 **missing**（夹具实测）⇒ 日报失去推送目标（scripts/daily-report.mjs:989 抛「未配置推送通道」）。必须先落地 D1（env 文件回落）与 D2（显式声明 binding.env: ML_DAILY_CHAT_ID）。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（CONFIG_KEYS:81、校验:131；面板 manifest.json:412-424）；env 层无写入器（argent-env-write.mjs 只收 binding.kind=envfile 的项与面板 env 字段），env 文件由 init-ml.sh:1360 起的一次性模板生成",
+      "regression": [
+        "客户机 node scripts/daily-report.mjs --dry-run --force（不推送）确认 chat_id 来源与值同改前",
+        "python3 scripts/flow_preflight.py --flow daily-report 的 push 项须 ok 且群 id 前缀一致",
+        "回滚演练：清掉 config.json 的值 ⇒ 必须仍能取到 env 文件的值"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D1 + D2 + D3：直接 A 会让客户机日报丢推送目标",
+      "priority": 4,
+      "risk": "high"
+    },
+    {
+      "key": "notify.daily.profile",
+      "todayChain": ["json", "env"],
+      "group": "json→env",
+      "category": "通知与投递",
+      "readers": [
+        "scripts/daily-report.mjs:986",
+        "scripts/flow_preflight.py:273",
+        "scripts/feishu-card.mjs:174"
+      ],
+      "readerOrders": {
+        "scripts/daily-report.mjs:986": "json-first（默认常量 scripts/daily-report.mjs:922）",
+        "scripts/flow_preflight.py:273": "env-first",
+        "scripts/feishu-card.mjs:174": "env-first；且 config 回落读的是 mlDailyAlertProfile（疑似缺陷）"
+      },
+      "todayEnvName": "LARK_PROFILE",
+      "canonicalEnvName": "NOTIFY_DAILY_PROFILE",
+      "envInProduction": false,
+      "envInProcessEnv": false,
+      "envFileInProduction": true,
+      "envFileWhere": "daily-report.env, fulfillment.env",
+      "jsonInProduction": false,
+      "activeValueSourceToday": "envfile",
+      "recommend": "A",
+      "behaviorChange": "changes-if-env-set",
+      "behaviorChangeDetail": "⛔ 客户机上**会变**：A 后 **missing**（夹具实测）⇒ 回落到代码默认 ml-daily，而客户机实际用 LARK_PROFILE 指定的 Bot 身份 ⇒ 可能换身份发或发不出。",
+      "nameConflict": "LARK_PROFILE 已被 notify.flow.lark_profile 声明为 fulfillment.env#LARK_PROFILE（configs/notify.json:160-177）—— 同一 env 名两个项 + 两种语义",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（日报面板）；env 层无写入器",
+      "regression": [
+        "同 notify.daily.chat_id",
+        "推送日志里 lark-cli --profile <X> 必须是客户机实际在群内的那个",
+        "flow_preflight 的「推送身份可用」须 ok"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D1 + D2 + D3 + LARK_PROFILE 同名冲突归属",
+      "priority": 4,
+      "risk": "high"
+    },
+    {
+      "key": "notify.daily.webhook",
+      "todayChain": ["json", "env"],
+      "group": "json→env",
+      "category": "通知与投递",
+      "readers": [
+        "scripts/daily-report.mjs:988",
+        "plugins/argent-core/src/index.js:2793",
+        "plugins/argent-core/src/index.js:2798"
+      ],
+      "readerOrders": {
+        "scripts/daily-report.mjs:988": "json-first（降级通道）",
+        "plugins/argent-core/src/index.js:2793": "json-first",
+        "plugins/argent-core/src/index.js:2798": "再正则扫 daily-report.env 文本取 FEISHU_WEBHOOK_URL ⇒ json→envfile"
+      },
+      "todayEnvName": "FEISHU_WEBHOOK_URL",
+      "canonicalEnvName": "NOTIFY_DAILY_WEBHOOK",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": false,
+      "activeValueSourceToday": "missing",
+      "recommend": "B",
+      "recommendRationale": "已弃用项（docs/daily-report.md:14/:100 明写 KB-057 后设置页不再暴露）；不宜再给它 env 覆盖能力把弃用通道'复活'。",
+      "behaviorChange": "changes-if-env-set",
+      "behaviorChangeDetail": "客户机无变化（两链都空）。若他机 env 文件里有 FEISHU_WEBHOOK_URL，A 会忽略它 ⇒ 降级通道失效。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（CONFIG_KEYS:81；SECRET_KEYS:249）；init-ml.sh:1360 模板留空",
+      "regression": [
+        "POST /api/argent-state/daily-webhook-test 未配置时回可执行错误串",
+        "daily-report.mjs --dry-run 仅在无 chatId 时走 webhook 分支"
+      ],
+      "needsUserDecision": false,
+      "priority": 4,
+      "risk": "low"
+    },
+    {
+      "key": "notify.daily.alert_chat_id",
+      "todayChain": ["json", "env"],
+      "todayChainActual": ["env", "json"],
+      "group": "json→env",
+      "category": "通知与投递",
+      "readers": ["scripts/daily-report.mjs:1006"],
+      "readerOrders": { "scripts/daily-report.mjs:1006": "env-first（env.ML_DAILY_ALERT_CHAT_ID || cfg.mlDailyAlertChatId || 内部群常量 oc_8ce5…）" },
+      "todayEnvName": "ML_DAILY_ALERT_CHAT_ID",
+      "canonicalEnvName": "NOTIFY_DAILY_ALERT_CHAT_ID",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": true,
+      "jsonNote": "config.json#mlDailyAlertChatId = ❰已设置❱（len=35）",
+      "activeValueSourceToday": "json",
+      "recommend": "B",
+      "recommendRationale": "声明写反（§B3）：所有读取点都是 env 优先 ⇒ 真相是 [env,json]，与规范链首级一致。改声明后提示自然消失，**代码零改动** —— 不是'删提示'（有 1 个读取点为证）。",
+      "behaviorChange": "none",
+      "behaviorChangeDetail": "客户机 env 无值 ⇒ 两链都取 config 值（env 优先链的回落就是 config）。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（面板 manifest.json:491-503）",
+      "regression": [
+        "用夹具构造推送失败路径（⛔ 不在生产上制造失败）验证告警仍发到 mlDailyAlertChatId 指定的群",
+        "describe() 的 chainNote 变 null"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "承认声明写错（改声明）vs 反向改代码 —— 需用户拍板",
+      "priority": 1,
+      "risk": "low"
+    },
+    {
+      "key": "notify.daily.alert_profile",
+      "todayChain": ["json", "env"],
+      "todayChainActual": ["env", "json"],
+      "group": "json→env",
+      "category": "通知与投递",
+      "readers": [
+        "scripts/daily-report.mjs:1007",
+        "scripts/feishu-card.mjs:174",
+        "scripts/feishu-card.mjs:177",
+        "scripts/flow_preflight.py:277",
+        "scripts/flow_preflight.py:280"
+      ],
+      "readerOrders": {
+        "scripts/daily-report.mjs:1007": "env-first（默认常量 :930）",
+        "scripts/feishu-card.mjs:174": "env-first（config 作回落）",
+        "scripts/feishu-card.mjs:177": "env-first（config 作回落）",
+        "scripts/flow_preflight.py:277": "env-first（config 作回落）",
+        "scripts/flow_preflight.py:280": "config 作回落"
+      },
+      "todayEnvName": "ML_DAILY_ALERT_PROFILE",
+      "canonicalEnvName": "NOTIFY_DAILY_ALERT_PROFILE",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": true,
+      "jsonNote": "config.json#mlDailyAlertProfile = ❰已设置❱（len=20）",
+      "activeValueSourceToday": "json",
+      "recommend": "B",
+      "recommendRationale": "同 notify.daily.alert_chat_id：声明写反，5 个读取点为证。",
+      "behaviorChange": "none",
+      "behaviorChangeDetail": "客户机 env 无值 ⇒ 不变。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（面板 manifest.json:508-519）",
+      "regression": [
+        "同 notify.daily.alert_chat_id",
+        "feishu-card.mjs 的 internal/daily 两种 sink 的 profile 来源比对（:174 回落读 alert profile 疑似缺陷，建议单独记 issue，⛔ 不在本批改）"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "同 alert_chat_id",
+      "priority": 1,
+      "risk": "low"
+    },
+    {
+      "key": "ml.daily.hour",
+      "todayChain": ["json", "env", "default"],
+      "group": "json→env→default",
+      "category": "美客多·只读",
+      "readers": [
+        "scripts/daily-report.mjs:1308",
+        "scripts/daily-report.mjs:154",
+        "scripts/daily-report-inbox.py:88-108",
+        "scripts/customer-preflight.py:327-334"
+      ],
+      "readerOrders": {
+        "scripts/daily-report.mjs:1308": "json-first（pick(cfg,env,'mlDailyTime','REPORT_TIME','08:00')）",
+        "scripts/daily-report-inbox.py:88-108": "json → daily-report.env#REPORT_TIME → 进程 env REPORT_TIME → '08:00'（json-first）"
+      },
+      "todayEnvName": "REPORT_TIME",
+      "canonicalEnvName": "ML_DAILY_HOUR",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": true,
+      "jsonNote": "config.json#mlDailyTime = 已设置（len=5）",
+      "activeValueSourceToday": "json",
+      "recommend": "A",
+      "behaviorChange": "changes-if-env-set",
+      "behaviorChangeDetail": "客户机不变（config 有值、env 无值 ⇒ 两链同取 00:05）。若他机 daily-report.env#REPORT_TIME 有值 ⇒ A 后会被忽略。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（日报面板）；init-ml.sh:1365 模板 REPORT_TIME=08:00",
+      "regression": [
+        "node scripts/daily-report.mjs --dry-run --force 打印的推送时刻仍 00:05",
+        "python3 scripts/daily-report-inbox.py 的 gate 结论与改前逐字一致",
+        "python3 scripts/customer-preflight.py 的 env.daily_time 项仍 ok"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D2 env 名策略（REPORT_TIME vs ML_DAILY_HOUR）",
+      "priority": 3,
+      "risk": "medium"
+    },
+    {
+      "key": "ml.daily.top_n",
+      "todayChain": ["json", "env", "default"],
+      "group": "json→env→default",
+      "category": "美客多·只读",
+      "readers": [
+        "scripts/daily-report.mjs:1228",
+        "scripts/daily-report.mjs:1265",
+        "scripts/daily-report.mjs:1314",
+        "scripts/daily-report.mjs:1386"
+      ],
+      "todayEnvName": "TOP_N",
+      "canonicalEnvName": "ML_DAILY_TOP_N",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": false,
+      "activeValueSourceToday": "default",
+      "activeValueSourceTodayDetail": "default 5（两侧都空）",
+      "recommend": "A",
+      "behaviorChange": "changes-if-env-set",
+      "behaviorChangeDetail": "客户机不变（默认 5）。若他机 TOP_N 有值 ⇒ A 后忽略。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（INT_KEYS 1–20 校验 argent-core:109）；init-ml.sh:1373 模板 TOP_N=5",
+      "regression": [
+        "--dry-run 的畅销榜条数仍 5",
+        "--mock <夹具> 渲染行数一致",
+        "INT_KEYS 越界仍被拒"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D2 env 名策略",
+      "priority": 3,
+      "risk": "low"
+    },
+    {
+      "key": "ml.daily.restock_lead_days",
+      "todayChain": ["json", "env", "default"],
+      "group": "json→env→default",
+      "category": "美客多·只读",
+      "readers": [
+        "scripts/daily-report.mjs:1229",
+        "scripts/daily-report.mjs:1266",
+        "scripts/daily-report.mjs:264",
+        "scripts/daily-report.mjs:545"
+      ],
+      "todayEnvName": "RESTOCK_LEAD_DAYS",
+      "canonicalEnvName": "ML_RESTOCK_LEAD_DAYS",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": false,
+      "activeValueSourceToday": "default",
+      "activeValueSourceTodayDetail": "default 15（阈值 = lead + buffer = 22）",
+      "recommend": "A",
+      "behaviorChange": "changes-if-env-set",
+      "behaviorChangeDetail": "客户机不变。若他机 RESTOCK_LEAD_DAYS 有值 ⇒ A 后忽略。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（INT_KEYS 0–90）；init-ml.sh:1368 模板 RESTOCK_LEAD_DAYS=15",
+      "regression": [
+        "--dry-run 的补货预警阈值仍 22 天",
+        "⛔ 必须与 ml.daily.restock_buffer_days 同批（阈值 = lead + buffer）",
+        "computeAlerts 字面量断言"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D2 env 名策略",
+      "priority": 3,
+      "risk": "low"
+    },
+    {
+      "key": "ml.daily.restock_buffer_days",
+      "todayChain": ["json", "env", "default"],
+      "group": "json→env→default",
+      "category": "美客多·只读",
+      "readers": ["scripts/daily-report.mjs:1230", "scripts/daily-report.mjs:1267"],
+      "todayEnvName": "RESTOCK_BUFFER_DAYS",
+      "canonicalEnvName": "ML_RESTOCK_BUFFER_DAYS",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "jsonInProduction": false,
+      "activeValueSourceToday": "default",
+      "activeValueSourceTodayDetail": "default 7（阈值 = lead + buffer = 22）",
+      "recommend": "A",
+      "behaviorChange": "changes-if-env-set",
+      "behaviorChangeDetail": "客户机不变。若他机 RESTOCK_BUFFER_DAYS 有值 ⇒ A 后忽略。",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "设置页（INT_KEYS 0–90）；init-ml.sh:1369 模板 RESTOCK_BUFFER_DAYS=7",
+      "regression": [
+        "同 ml.daily.restock_lead_days（同一条阈值断言）"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D2 env 名策略",
+      "priority": 3,
+      "risk": "low"
+    },
+    {
+      "key": "host.telemetry.instance_token",
+      "todayChain": ["machine", "env"],
+      "todayChainActual": ["env", "machine"],
+      "group": "machine→env",
+      "category": "宿主与机器",
+      "readers": [
+        "scripts/telemetry.py:206-208",
+        "scripts/telemetry.py:209-212",
+        "scripts/telemetry.py:252",
+        "scripts/telemetry.py:754"
+      ],
+      "readerOrders": { "scripts/telemetry.py:206-212": "env-first（ARGENT_INSTANCE_TOKEN → <数据目录>/instance-token.json），与声明相反" },
+      "todayEnvName": "ARGENT_INSTANCE_TOKEN",
+      "canonicalEnvName": "HOST_TELEMETRY_INSTANCE_TOKEN",
+      "envInProduction": false,
+      "envFileInProduction": false,
+      "machineInProduction": true,
+      "machineNote": "instance-token.json 存在（897 B）",
+      "activeValueSourceToday": "machine",
+      "recommend": "B",
+      "recommendRationale": "机器事实：令牌随机器走，由许可离线下发链路写入 scripts/install-license.mjs:412；ARGENT_INSTANCE_TOKEN 是运维/测试逃生阀，不是产品语义的'env 优先'。",
+      "behaviorChange": "changes-if-env-set",
+      "behaviorChangeDetail": "⛔ 会变 —— 而且现在就已经是错的：binding 缺 field ⇒ 规范读取器把整个 JSON 信封当标量，实测报「期望标量，实际拿到 object（binding 的 field 写错了？）」⇒ 落在 missing；客户机明明有令牌却显示「未配置」。",
+      "bindingFix": { "field": "token" },
+      "bindingFixAcceptance": "修后 describe().configured 由 false → true",
+      "writerAtDeclaredLevel": true,
+      "writerAtEnvLevel": false,
+      "writerNote": "node scripts/install-license.mjs --instance-token-file <f>（0600 + 写前判归属/设备码/期限 + 幂等）",
+      "regression": [
+        "node scripts/tests/telemetry-instance-token.test.mjs（62 例）",
+        "python3 scripts/telemetry.py --status 的 credential.source=instance-token、header=x-instance-token",
+        "describe().configured 由 false → true"
+      ],
+      "needsUserDecision": true,
+      "decisionWhy": "D6：确认 B + 修 field；ARGENT_INSTANCE_TOKEN 是否登记为逃生阀",
+      "priority": 5,
+      "risk": "medium"
+    }
+  ],
+  "batches": [
+    {
+      "id": "3-1",
+      "title": "零行为变化·只改声明",
+      "items": ["notify.daily.alert_chat_id", "notify.daily.alert_profile", "advanced.update.channel", "hr.office.role"],
+      "why": "4 项都没有任何 env 值，翻转后取值逐字不变；其中 2 项是'改正写反的声明'（有读取点为证）",
+      "regression": [
+        "node scripts/check-config-catalog.mjs --strict 四道门禁全绿",
+        "node scripts/tests/config-gates.test.mjs",
+        "chainNote 项数由 18 → 14",
+        "这 4 项在客户机的取值与改前一致（只读 --list 输出逐字比对）"
+      ],
+      "risk": "low"
+    },
+    {
+      "id": "3-2",
+      "title": "账号面（无 env 值）",
+      "items": ["account.feishu.app_id", "account.feishu.app_secret", "account.carrier.user", "account.carrier.password"],
+      "why": "客户机这 4 项只有 config.json 有值、env 全空 ⇒ 翻转不改值；先用低风险项验证'显式声明 binding.env'的机制",
+      "regression": [
+        "设置页 4 个字段保存→读回（掩码不回明文）",
+        "POST /api/argent-state/feishu-test（桩化）",
+        "plugins/argent-gateway 启动日志仍打印 Bot 配置",
+        "xzh 发票 load_creds() 取到非空（不联网路径）"
+      ],
+      "risk": "low"
+    },
+    {
+      "id": "3-3",
+      "title": "日报数值旋钮（有 default）",
+      "items": ["ml.daily.hour", "ml.daily.top_n", "ml.daily.restock_lead_days", "ml.daily.restock_buffer_days"],
+      "why": "有 default ⇒ 最坏退到默认；客户机三项空、mlDailyTime 有值 ⇒ 预期零变化；restock 两项必须同批（阈值 = lead + buffer）",
+      "regression": [
+        "node scripts/daily-report.mjs --dry-run --force：推送时刻仍 00:05、畅销榜仍 5 条、补货阈值仍 22 天（逐字比对）",
+        "python3 scripts/daily-report-inbox.py 的 gate 同结论",
+        "python3 scripts/customer-preflight.py 的 env.daily_time 仍 ok",
+        "--mock <夹具> 渲染不回归"
+      ],
+      "risk": "medium"
+    },
+    {
+      "id": "3-4",
+      "title": "日报投递面（生产推送目标）",
+      "items": ["notify.daily.webhook", "notify.daily.chat_id", "notify.daily.profile"],
+      "why": "⛔ 本批会改变生效值；必须等 3-1~3-3 验证完迁移机制、D1/D2/D3 决策落地、且双写窗口开启后再做；弃用项 webhook 放最前（零风险）",
+      "regression": [
+        "客户机 node scripts/daily-report.mjs --dry-run --force（只打印不推送）确认 chat_id/profile 来源与值同改前",
+        "python3 scripts/flow_preflight.py --flow daily-report 的 push 项 ok、群 id 前缀一致",
+        "一次真实投递到测试群（需用户单独批准，⛔ 不直发客户群）",
+        "回滚演练：清掉 config.json 的值 ⇒ 必须仍能取到 env 文件的值"
+      ],
+      "risk": "high",
+      "requiresUserApproval": true
+    },
+    {
+      "id": "3-5",
+      "title": "隐私与机器事实",
+      "items": ["advanced.telemetry.opt_in", "host.telemetry.instance_token"],
+      "why": "语义最敏感（同意/凭证），且 instance_token 的 binding 当前读不出值 ⇒ 修复本身要单独验证；不涉及生产业务流，可与 3-4 解耦",
+      "regression": [
+        "node scripts/tests/telemetry-consent.test.mjs",
+        "node scripts/tests/telemetry-instance-token.test.mjs（62 例）",
+        "python3 scripts/telemetry.py --status 的 credential.source=instance-token、header=x-instance-token",
+        "instance_token 修 field 后 describe().configured 由 false→true",
+        "orchestrator._telemetry_opt_in() 与 telemetry_enabled() 夹具对拍同判"
+      ],
+      "risk": "medium"
+    },
+    {
+      "id": "3-6",
+      "title": "语义错绑（最后）",
+      "items": ["account.ziniao.api_key"],
+      "why": "唯一'改声明本身就要动 schema'的项，且影响设置页「紫鸟 API Key」的真假判断 ⇒ 放最后，前面各批的经验（schema 扩展、binding.field、证据闭合）都用得上",
+      "regression": [
+        "设置页「紫鸟 API Key：已配置/未配置」与 ziniao-cli config show、~/.ziniao-cli/config.json 存在性三处一致",
+        "目录项取值不得再受问述令牌影响（夹具：有 config.json#apiKey 但无 ziniao 配置 ⇒ 必须报未配置）",
+        "问述令牌相关 7 处读取点零改动（git diff 断言）"
+      ],
+      "risk": "high",
+      "requiresUserApproval": true
+    }
+  ],
+  "_commonRegression": [
+    "node scripts/check-config-catalog.mjs --strict",
+    "node scripts/tests/config-gates.test.mjs",
+    "node -e 'import(\"./core/lib/config-catalog.mjs\").then(m=>{const i=m.loadCatalog().items.filter(x=>m.chainNoteOf(x));console.log(i.length,i.map(x=>x.key).join(\",\"))})'"
+  ],
+  "_discipline": {
+    "readOnly": true,
+    "changedExistingFiles": false,
+    "customerMachineWrites": false,
+    "secretsInThisFile": false,
+    "note": "客户机只跑只读命令（ls/awk/python3 读取 + ps/plutil/launchctl print），未写未改未重启，未落任何远程文件（脚本经 stdin 管道执行）。"
+  }
+}