@xdxer/dingtalk-agent 0.1.4 → 0.1.5-beta.10

package/skills/platforms/multica-dingtalk/{multica-external → dta-ops-multica}/scripts/multica_ext.py

@@ -313,15 +313,33 @@ def cmd_runtime_create_fc(ctx: Ctx, args: argparse.Namespace) -> None:
         # The server resolves template_id against id, template, or name;
         # id is best-effort and may be absent.
         ref = lambda t: t.get("id") or t.get("template") or t.get("name")  # noqa: E731
-        if len(templates) > 1:
+        status_of = lambda t: str(t.get("status") or "").lower()  # noqa: E731
+        # waiting 等未就绪状态选了也建不起来；status 字段缺失时保守放行（Observed 字段）。
+        usable = [t for t in templates if not status_of(t) or status_of(t) == "ready"]
+        if not usable:
             fail(
-                "multiple templates available, pass --template-id: "
-                + ", ".join(f"{ref(t)} ({t.get('name') or t.get('template')})" for t in templates)
+                "no ready FC-E2B templates (all "
+                + ", ".join(f"{ref(t)}={status_of(t) or 'unknown'}" for t in templates)
+                + ")"
             )
-        template_id = ref(templates[0])
+        if len(usable) > 1:
+            newest = max(usable, key=lambda t: str(t.get("created_at") or ""))
+            fail(
+                "multiple ready templates, pass --template-id: "
+                + ", ".join(
+                    f"{ref(t)} ({t.get('name') or t.get('template')}, "
+                    f"{status_of(t) or 'unknown'}, created {t.get('created_at') or '?'})"
+                    for t in sorted(usable, key=lambda t: str(t.get("created_at") or ""), reverse=True)
+                )
+                + f"; component_versions 通常完全相同，选最新 ready 即可（推荐 {ref(newest)}）"
+            )
+        template_id = ref(usable[0])
         if not template_id:
             fail("template list entry has no usable identifier")
-        note(f"using template {template_id} ({templates[0].get('name') or templates[0].get('template')})")
+        note(
+            f"using template {template_id} ({usable[0].get('name') or usable[0].get('template')}, "
+            f"{status_of(usable[0]) or 'unknown'})"
+        )
     body: Dict[str, Any] = {"template_id": template_id}
     for flag in ("name", "provider", "visibility"):
         value = getattr(args, flag, None)
@@ -397,7 +415,15 @@ def cmd_dingtalk_bind(ctx: Ctx, args: argparse.Namespace) -> None:
         "robot_code": args.robot_code or args.client_id,
         "allow_unbound": args.allow_unbound,
     }
-    out(api(ctx, "POST", f"/api/workspaces/{ws_id}/dingtalk/install/manual", body=body))
+    res = api(ctx, "POST", f"/api/workspaces/{ws_id}/dingtalk/install/manual", body=body)
+    if not args.allow_unbound:
+        note(
+            "allow_unbound=false: senders whose DingTalk account is NOT bound to Multica "
+            "(including the robot owner) only get a binding prompt when they @ the robot. "
+            "For acceptance/customer-facing use, either run dingtalk-account-begin first or "
+            "re-bind with --allow-unbound (upsert; installation id unchanged)."
+        )
+    out(res)
 
 
 def cmd_dingtalk_begin(ctx: Ctx, args: argparse.Namespace) -> None:
@@ -450,7 +476,9 @@ def cmd_dingtalk_account_begin(ctx: Ctx, args: argparse.Namespace) -> None:
         ctx,
         "POST",
         f"/api/workspaces/{ws_id}/dingtalk/account-bindings/begin",
-        body={"agent_id": args.agent},
+        # Server enforces binding_mode (400 invalid_binding_mode without it): message-only
+        # identity mapping vs delegated identity. Wire contract: begin reads it from the BODY.
+        body={"agent_id": args.agent, "binding_mode": args.binding_mode},
     )
     note(f"scan to bind account: {res.get('qr_code_url')}")
     out(res)
@@ -463,7 +491,14 @@ def cmd_dingtalk_account_list(ctx: Ctx, args: argparse.Namespace) -> None:
 
 def cmd_dingtalk_account_unbind(ctx: Ctx, args: argparse.Namespace) -> None:
     ws_id = resolve_workspace_id(ctx)
-    api(ctx, "DELETE", f"/api/workspaces/{ws_id}/dingtalk/account-bindings/{args.installation}")
+    # Wire contract asymmetry (verified live): unbind reads binding_mode from the QUERY
+    # string; putting it in the DELETE body still returns 400 invalid_binding_mode.
+    api(
+        ctx,
+        "DELETE",
+        f"/api/workspaces/{ws_id}/dingtalk/account-bindings/{args.installation}"
+        f"?binding_mode={urllib.parse.quote(args.binding_mode)}",
+    )
     out({"unbound": True})
 
 
@@ -544,16 +579,115 @@ def cmd_task_snapshot(ctx: Ctx, args: argparse.Namespace) -> None:
     out(api(ctx, "GET", "/api/agent-task-snapshot", ws_header=True))
 
 
+# dta completion-predicate 标记的唯一 parser（issue #40）。
+# 与 TS 侧 schedule-plan.ts 的 COMPLETION_PREDICATE_MARKER 是同一正则的镜像——
+# 改任一侧必须同步另一侧；两套各自手写的 parser 静默分叉正是注册表要消灭的事故。
+PREDICATE_MARKER_RE = re.compile(
+    r"^\[dta-completion-predicate\] ([a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?)$"
+)
+
+
+def parse_predicate_marker(description: str) -> Dict[str, Any]:
+    """0 枚 → none；1 枚（或多枚一致）→ id；多枚不一致 → conflict；行首出现 marker
+    前缀但 id 空/非法 → malformed（issue #45：意图已表达，折成 none 会静默跳过
+    整个回读校验——fail-open）。响亮，不挑选、不降级。"""
+    ids: List[str] = []
+    raws: List[str] = []
+    for line in (description or "").splitlines():
+        if not line.startswith("[dta-completion-predicate]"):
+            continue
+        m = PREDICATE_MARKER_RE.match(line)
+        if m:
+            ids.append(m.group(1))
+        else:
+            raws.append(line)
+    if raws:
+        return {"kind": "malformed", "raws": raws}
+    if not ids:
+        return {"kind": "none"}
+    unique = sorted(set(ids))
+    if len(unique) == 1:
+        return {"kind": "id", "id": unique[0]}
+    return {"kind": "conflict", "ids": unique}
+
+
+def load_predicate_registry(manifest_path: str) -> Dict[str, Any]:
+    """读 dingtalk-agent.json 顶层 predicates——与声明侧同一份文件、同一批 id，
+    不另建第二份判据源。"""
+    try:
+        with open(manifest_path, "r", encoding="utf-8") as f:
+            manifest = json.load(f)
+    except OSError as e:
+        fail(f"manifest 读不到: {manifest_path} ({e})")
+    except json.JSONDecodeError as e:
+        fail(f"manifest 不是合法 JSON: {manifest_path} ({e})")
+    predicates = manifest.get("predicates")
+    if predicates is None:
+        fail(f"manifest 未声明 predicates 注册表: {manifest_path}")
+    if not isinstance(predicates, dict):
+        fail("manifest 的 predicates 必须是 object")
+    return predicates
+
+
+LOCAL_COMMANDS = {"predicate-resolve"}
+
+
+def cmd_predicate_resolve(ctx: Optional[Ctx], args: argparse.Namespace) -> None:
+    """运行时路径：拿到 autopilot description（或直接给 id）→ 在同一份 manifest
+    注册表里解析出判据正文。未注册 / marker 缺失 / 冲突都非零退出——判据解析
+    失败时这一拍不能假装知道怎么算完成。"""
+    predicates = load_predicate_registry(args.manifest)
+    if args.id:
+        pid = args.id
+        source = "flag"
+    else:
+        parsed = parse_predicate_marker(args.description or "")
+        if parsed["kind"] == "none":
+            fail("description 里没有 [dta-completion-predicate] 标记")
+        if parsed["kind"] == "conflict":
+            fail(f"description 里有多枚不一致的 predicate 标记: {parsed['ids']}")
+        if parsed["kind"] == "malformed":
+            fail(f"description 的 predicate 标记格式非法: {parsed['raws']}")
+        pid = parsed["id"]
+        source = "description-marker"
+    entry = predicates.get(pid)
+    if entry is None:
+        fail(f"predicate:{pid} 未在 manifest 注册表登记（registered={sorted(predicates)}）")
+    out({"id": pid, "resolvedFrom": source, "predicate": entry})
+
+
+def _annotate_predicate_ref(autopilot: Any) -> Any:
+    """对账消费面：把 description 里解析出的判据标记贴在对象旁，漂移在 list/get 就可见。"""
+    if isinstance(autopilot, dict) and "description" in autopilot:
+        parsed = parse_predicate_marker(str(autopilot.get("description") or ""))
+        if parsed["kind"] != "none":
+            autopilot["predicateRef"] = parsed
+    return autopilot
+
+
 def cmd_autopilot_list(ctx: Ctx, args: argparse.Namespace) -> None:
     query = f"?status={args.status}" if args.status else ""
-    out(api(ctx, "GET", f"/api/autopilots{query}", ws_header=True))
+    result = api(ctx, "GET", f"/api/autopilots{query}", ws_header=True)
+    if isinstance(result, list):
+        result = [_annotate_predicate_ref(item) for item in result]
+    out(result)
 
 
 def cmd_autopilot_get(ctx: Ctx, args: argparse.Namespace) -> None:
-    out(api(ctx, "GET", f"/api/autopilots/{args.autopilot}", ws_header=True))
+    out(_annotate_predicate_ref(api(ctx, "GET", f"/api/autopilots/{args.autopilot}", ws_header=True)))
 
 
 def cmd_autopilot_create(ctx: Ctx, args: argparse.Namespace) -> None:
+    # 本地能发现的问题必须在任何 API 调用之前拦下（issue #45）：create 非幂等，
+    # POST 之后才报错会留下孤儿 autopilot，还要 operator 事后收拾。
+    declared_marker = parse_predicate_marker(args.description or "")
+    if declared_marker["kind"] == "conflict":
+        fail(f"--description 里有多枚不一致的 predicate 标记: {declared_marker['ids']}（零写入拒绝）")
+    if declared_marker["kind"] == "malformed":
+        fail(
+            f"--description 的 predicate 标记格式非法: {declared_marker['raws']}"
+            "（需要独立一行 [dta-completion-predicate] <kebab-id>；零写入拒绝）"
+        )
     body: Dict[str, Any] = {
         "title": args.title,
         "assignee_id": args.agent,
@@ -564,7 +698,37 @@ def cmd_autopilot_create(ctx: Ctx, args: argparse.Namespace) -> None:
     if args.issue_title_template:
         body["issue_title_template"] = args.issue_title_template
     autopilot = api(ctx, "POST", "/api/autopilots", body=body, ws_header=True)
-    result: Dict[str, Any] = {"autopilot": autopilot}
+    # create 非幂等且响应可能只是请求回显——真相只能独立回读（issue #40）。
+    autopilot_id = autopilot.get("id")
+    if not autopilot_id:
+        fail("autopilot-create 响应缺 id，无法独立回读核对——不视为创建成功")
+    readback = api(ctx, "GET", f"/api/autopilots/{autopilot_id}", ws_header=True)
+    result: Dict[str, Any] = {"autopilot": autopilot, "readback": readback}
+    if declared_marker["kind"] == "id":
+        remote_marker = parse_predicate_marker(str(readback.get("description") or ""))
+        verified = remote_marker == declared_marker
+        reason = (
+            "" if verified
+            else "remote-marker-missing" if remote_marker["kind"] == "none"
+            else "remote-marker-conflict" if remote_marker["kind"] == "conflict"
+            else "remote-marker-malformed" if remote_marker["kind"] == "malformed"
+            else "remote-marker-mismatch"
+        )
+        result["predicateRef"] = {
+            "declared": declared_marker["id"],
+            "remote": remote_marker.get("id") or remote_marker.get("ids") or None,
+            "verified": verified,
+            **({"reason": reason} if reason else {}),
+        }
+        if not verified:
+            # fail-closed：平台丢弃/改写了判据标记，运行时将读不到声明的判据 ID。
+            # autopilot 已经建出来了（result 带回读证据），但不能当部署成功交差。
+            out(result)
+            fail(
+                f"autopilot {autopilot_id} 回读的 description 判据标记与声明不符"
+                f"（declared=predicate:{declared_marker['id']}, {reason}）——"
+                "请人工核对该 autopilot（必要时 autopilot-set-status --status paused）"
+            )
     if args.cron:
         trigger_body = {"kind": "schedule", "cron_expression": args.cron, "timezone": args.timezone}
         trigger = api(
@@ -675,6 +839,38 @@ def cmd_agent_check(ctx: Ctx, args: argparse.Namespace) -> None:
         json.dumps(account.get("dws_identity"), ensure_ascii=False) if account else "no account binding",
     )
 
+    # 基础设施健康 ≠ 用户可用：机器人未绑/账号 unbound 时用户发消息只会收到绑定引导、
+    # 不产生任何 Run，但没有一项是 "fail"。旧的单布尔 `healthy` 正是把这两层混成一团、
+    # 让 operator 看着全绿而用户侧完全不工作的祸根——按验收证据（P-01/M-06）拆开并移除。
+    infra_checks = {"agent", "runtime", "last_task", "recent_tasks"}
+    infrastructure_healthy = all(
+        c["status"] != "fail" for c in checks if c["check"] in infra_checks
+    )
+    robot_ok = bool(robot)
+    account_bound = bool(account and (account.get("dws_identity") or {}).get("status") == "bound")
+    user_ready = infrastructure_healthy and robot_ok and account_bound
+    reasons = [
+        f"{c['check']}: {c['detail']}"
+        for c in checks
+        if (c["check"] in infra_checks and c["status"] == "fail")
+        or (c["check"] in ("dingtalk_robot", "dingtalk_account") and c["status"] != "ok")
+    ]
+    if agent.get("archived_at"):
+        next_action = "agent restore（或重新部署）后再检查"
+    elif runtime_health in ("missing", "offline"):
+        next_action = "runtime-list 核对；必要时 runtime-create-fc --provider opencode 重建并迁移"
+    elif not robot_ok:
+        next_action = (
+            f"python3 multica_ext.py dingtalk-bind --agent {args.agent} "
+            "--client-id <AppKey> --client-secret-stdin（或 dingtalk-begin 扫码）"
+        )
+    elif not account_bound:
+        next_action = (
+            f"python3 multica_ext.py dingtalk-account-begin --agent {args.agent} "
+            "--binding-mode message（或重绑机器人加 --allow-unbound）"
+        )
+    else:
+        next_action = ""
     out({
         "agent": {k: agent.get(k) for k in ("id", "name", "status", "model", "runtime_id", "archived_at")},
         "runtime": {
@@ -683,7 +879,14 @@ def cmd_agent_check(ctx: Ctx, args: argparse.Namespace) -> None:
         },
         "tasks": {"active": len(active), "last_outcome_status": (last_outcome or {}).get("status")},
         "checks": checks,
-        "healthy": all(c["status"] != "fail" for c in checks),
+        "infrastructureHealthy": infrastructure_healthy,
+        "userReady": user_ready,
+        "reasons": reasons,
+        "nextAction": next_action,
+        "userReadyCaveat": (
+            "安装回读不含 effective allow_unbound（上游缺口 MUL-005）：若绑定时开启过 "
+            "allow_unbound，未绑定账号的发送者实际也能对话"
+        ),
         "warnings": sum(1 for c in checks if c["status"] == "warn"),
     })
 
@@ -936,11 +1139,19 @@ def build_parser() -> argparse.ArgumentParser:
     p = cmd(
         "runtime-create-fc",
         cmd_runtime_create_fc,
-        "Create an FC-E2B cloud runtime; picks the sole available template when --template-id is omitted",
+        "Create an FC-E2B cloud runtime (provider defaults to opencode); "
+        "picks the sole READY template when --template-id is omitted",
     )
     p.add_argument("--template-id", dest="template_id")
     p.add_argument("--name")
-    p.add_argument("--provider")
+    p.add_argument(
+        "--provider",
+        default="opencode",
+        help="runtime provider; defaults to opencode — the only provider dta's skill-loading "
+        "contract supports. The SERVER default is hermes, where workspace skills never load "
+        "(agents report 'Skill not found' with zero warning); pass --provider hermes only if "
+        "you explicitly want that",
+    )
     p.add_argument("--visibility", choices=["private", "public"])
 
     p = cmd("agent-list", cmd_agent_list, "List agents in the workspace")
@@ -984,7 +1195,14 @@ def build_parser() -> argparse.ArgumentParser:
     p.add_argument("--client-secret", dest="client_secret", help="DingTalk AppSecret (prefer stdin/env)")
     p.add_argument("--client-secret-stdin", dest="client_secret_stdin", action="store_true")
     p.add_argument("--client-secret-env", dest="client_secret_env", metavar="VAR")
-    p.add_argument("--allow-unbound", dest="allow_unbound", action="store_true")
+    p.add_argument(
+        "--allow-unbound",
+        dest="allow_unbound",
+        action="store_true",
+        help="serve senders whose DingTalk account is not bound to Multica "
+        "(connect-to-customers). WITHOUT this flag such senders — the robot owner "
+        "included — only receive a binding prompt",
+    )
 
     p = cmd(
         "dingtalk-begin",
@@ -1000,6 +1218,15 @@ def build_parser() -> argparse.ArgumentParser:
 
     p = cmd("dingtalk-account-begin", cmd_dingtalk_account_begin, "Start binding a personal DingTalk account to an agent")
     p.add_argument("--agent", required=True, help="agent uuid")
+    p.add_argument(
+        "--binding-mode",
+        dest="binding_mode",
+        choices=("message", "identity"),
+        default="message",
+        help="binding capability: message-only identity mapping (default), or delegated "
+        "DingTalk identity — identity grants a persistent execution identity, never pick "
+        "it silently for the user",
+    )
 
     cmd("dingtalk-account-list", cmd_dingtalk_account_list, "List personal DingTalk account bindings")
 
@@ -1009,6 +1236,14 @@ def build_parser() -> argparse.ArgumentParser:
         "Remove a personal DingTalk account binding (row kept as revoked for audit)",
     )
     p.add_argument("--installation", required=True, help="installation uuid")
+    p.add_argument(
+        "--binding-mode",
+        dest="binding_mode",
+        choices=("message", "identity"),
+        default="message",
+        help="binding capability to remove: message-only identity mapping (default) or "
+        "delegated DingTalk identity",
+    )
 
     p = cmd("agent-tasks", cmd_agent_tasks, "List an agent's task run history")
     p.add_argument("--agent", required=True, help="agent uuid")
@@ -1054,6 +1289,17 @@ def build_parser() -> argparse.ArgumentParser:
     p.add_argument("--timezone", default="Asia/Shanghai", help="IANA timezone for --cron")
     p.add_argument("--issue-title-template", dest="issue_title_template", help="only {{date}} token supported")
 
+    p = cmd(
+        "predicate-resolve",
+        cmd_predicate_resolve,
+        "Resolve a completion predicate against the project manifest registry "
+        "(runtime reads the SAME dingtalk-agent.json the declaration lives in)",
+    )
+    p.add_argument("--manifest", required=True, help="path to dingtalk-agent.json")
+    src_group = p.add_mutually_exclusive_group(required=True)
+    src_group.add_argument("--id", help="predicate id (skip marker parsing)")
+    src_group.add_argument("--description", help="autopilot description; the [dta-completion-predicate] marker is parsed out")
+
     p = cmd("autopilot-trigger", cmd_autopilot_trigger, "Run an autopilot once, now")
     p.add_argument("--autopilot", required=True, help="autopilot uuid")
 
@@ -1167,7 +1413,9 @@ def main() -> None:
     if not getattr(args, "command", None):
         parser.print_help(sys.stderr)
         sys.exit(0 if len(sys.argv) == 1 else 1)
-    ctx = build_ctx(args)
+    # 纯本地命令不做凭据解析：predicate-resolve 只读 manifest，跑在 runtime 沙箱里
+    # 时未必有（也不需要）平台凭据；强行 build_ctx 会让判据解析被登录问题挡死。
+    ctx = None if args.command in LOCAL_COMMANDS else build_ctx(args)
     try:
         args.func(ctx, args)
     except ApiError as e:

package/dist/src/map.js

@@ -1,157 +0,0 @@
-// Managed Agents Platform（MAP）注册表与工作区归属解析。
-//
-// 一个 Agent 工作区归属于至多一个托管平台；归属解析顺序固定：
-//   DTA_MAP 环境变量 > dingtalk-agent.json#map > .dingtalk-agent/map.json > 按 Provider 声明推断。
-// 平台相关的方法学不写进 CLI——它们随对应平台的 Skill 包分发，只在用户选择该平台时安装。
-// 平台命令（如 deploy/promote/observe）必须先通过归属门禁；coming-soon 平台一律 fail-closed。
-import { existsSync, lstatSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { dirname, join, parse, resolve } from 'node:path';
-import { findAgentProjectRoot } from './development-workspace.js';
-import { installGlobalSkill } from './skill-manager.js';
-export const MANAGED_AGENT_PLATFORMS = [
-    {
-        name: 'multica-dingtalk',
-        label: 'Multica (DingTalk)',
-        status: 'supported',
-        description: '钉钉 Multica 托管平台：受控部署、晋级与观测回流。',
-        skills: ['dingtalk-agent-deploy', 'dingtalk-agent-boot-multica'],
-        commands: ['deploy', 'promote', 'observe'],
-    },
-    {
-        name: 'deap',
-        label: 'DEAP',
-        status: 'coming-soon',
-        description: '敬请期待。',
-        skills: [],
-        commands: [],
-    },
-];
-export const MAP_FILE = '.dingtalk-agent/map.json';
-const PROJECT_FILE = 'dingtalk-agent.json';
-export function mapDefinition(name) {
-    return MANAGED_AGENT_PLATFORMS.find((item) => item.name === name) || null;
-}
-export function resolveMap(start = process.cwd(), env = process.env) {
-    const fromEnv = String(env.DTA_MAP || '').trim();
-    if (fromEnv)
-        return resolution(fromEnv, 'env', '');
-    const projectRoot = findAgentProjectRoot(start);
-    if (projectRoot) {
-        const manifestPath = join(projectRoot, PROJECT_FILE);
-        if (existsSync(manifestPath) && !lstatSync(manifestPath).isSymbolicLink()) {
-            const manifest = readJsonOrNull(manifestPath);
-            const declared = typeof manifest?.map === 'string' ? manifest.map.trim() : '';
-            if (declared)
-                return resolution(declared, 'project-manifest', manifestPath);
-        }
-    }
-    const mapPath = findUp(start, MAP_FILE);
-    if (mapPath) {
-        const stored = readJsonOrNull(mapPath);
-        const declared = typeof stored?.map === 'string' ? stored.map.trim() : '';
-        if (declared)
-            return resolution(declared, 'map-file', mapPath);
-    }
-    if (projectRoot) {
-        const manifest = readJsonOrNull(join(projectRoot, PROJECT_FILE));
-        const providers = Object.values(manifest?.workspaces || {})
-            .map((workspace) => workspace?.provider?.kind);
-        if (providers.includes('multica')) {
-            return resolution('multica-dingtalk', 'inferred', join(projectRoot, PROJECT_FILE));
-        }
-    }
-    return resolution(null, 'none', '');
-}
-export function useMap(start, name, options) {
-    const definition = mapDefinition(name);
-    if (!definition) {
-        throw new Error(`未知 managed agents platform: ${name}\n` +
-            `可用: ${MANAGED_AGENT_PLATFORMS.map((item) => `${item.name}（${statusLabel(item.status)}）`).join('、')}`);
-    }
-    if (definition.status !== 'supported') {
-        throw new Error(`${definition.label} 敬请期待——当前版本尚未开放该平台。`);
-    }
-    const projectRoot = findAgentProjectRoot(start);
-    let written;
-    if (projectRoot && existsSync(join(projectRoot, PROJECT_FILE))) {
-        const manifestPath = join(projectRoot, PROJECT_FILE);
-        if (lstatSync(manifestPath).isSymbolicLink()) {
-            throw new Error(`${PROJECT_FILE} 不能是符号链接`);
-        }
-        const manifest = readJsonOrNull(manifestPath);
-        if (!manifest || typeof manifest !== 'object') {
-            throw new Error(`${PROJECT_FILE} 不是合法 JSON，无法写入 map 归属`);
-        }
-        manifest.map = definition.name;
-        writeFileSync(manifestPath, JSON.stringify(manifest, null, 2) + '\n');
-        written = manifestPath;
-    }
-    else {
-        const target = join(resolve(start), MAP_FILE);
-        mkdirSync(dirname(target), { recursive: true });
-        writeFileSync(target, JSON.stringify({ $schema: 'dingtalk-agent/map@1', map: definition.name }, null, 2) + '\n');
-        written = target;
-    }
-    const skillInstalls = [];
-    if (options.installSkills !== false) {
-        for (const skill of definition.skills) {
-            skillInstalls.push(installGlobalSkill(options.packageRoot, {
-                name: skill, home: options.home, env: options.env,
-            }));
-        }
-    }
-    return { ...resolveMap(start, options.env || process.env), written, skillInstalls };
-}
-/** deploy/promote/observe 等平台命令的归属门禁：未归属、未知或 coming-soon 一律 fail-closed。 */
-export function requireSupportedMap(command, start = process.cwd(), env = process.env) {
-    const resolved = resolveMap(start, env);
-    if (!resolved.map) {
-        throw new Error(`当前工作区未声明 managed agents platform，无法执行 \`${command}\`。\n` +
-            '先运行 `dta map use multica-dingtalk`，或设置 DTA_MAP 环境变量。');
-    }
-    if (!resolved.definition) {
-        throw new Error(`工作区声明了未知 platform: ${resolved.map}（来源 ${resolved.source}）。\n` +
-            `可用: ${MANAGED_AGENT_PLATFORMS.map((item) => item.name).join('、')}`);
-    }
-    if (resolved.definition.status !== 'supported') {
-        throw new Error(`${resolved.definition.label} 敬请期待——\`${command}\` 尚未在该平台开放。`);
-    }
-    if (!resolved.definition.commands.includes(command)) {
-        throw new Error(`${resolved.definition.label} 不承接命令 \`${command}\`。`);
-    }
-    return resolved;
-}
-export function statusLabel(status) {
-    return status === 'supported' ? '已支持' : '敬请期待';
-}
-function resolution(name, source, file) {
-    return {
-        $schema: 'dingtalk-agent/map-resolution@1',
-        map: name,
-        source,
-        file,
-        definition: name ? mapDefinition(name) : null,
-        platforms: MANAGED_AGENT_PLATFORMS,
-    };
-}
-function readJsonOrNull(path) {
-    try {
-        return JSON.parse(readFileSync(path, 'utf8'));
-    }
-    catch {
-        return null;
-    }
-}
-function findUp(start, relativePath) {
-    let dir = resolve(start);
-    while (true) {
-        const candidate = join(dir, relativePath);
-        if (existsSync(candidate) && !lstatSync(candidate).isSymbolicLink())
-            return candidate;
-        const parent = dirname(dir);
-        if (parent === dir || dir === parse(dir).root)
-            return null;
-        dir = parent;
-    }
-}
-//# sourceMappingURL=map.js.map

package/dist/src/map.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"map.js","sourceRoot":"","sources":["../../src/map.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,oCAAoC;AACpC,yFAAyF;AACzF,oDAAoD;AACpD,wEAAwE;AAExE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AACjE,OAAO,EAAE,kBAAkB,EAA0B,MAAM,oBAAoB,CAAA;AAa/E,MAAM,CAAC,MAAM,uBAAuB,GAAoB;IACtD;QACE,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,+BAA+B;QAC5C,MAAM,EAAE,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;QAChE,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,OAAO;QACpB,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;KACb;CACF,CAAA;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,0BAA0B,CAAA;AAClD,MAAM,YAAY,GAAG,qBAAqB,CAAA;AAkB1C,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAA;AAC3E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,MAAyB,OAAO,CAAC,GAAG;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAChD,IAAI,OAAO;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IAElD,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QACpD,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1E,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC,CAAA;YAC7C,MAAM,QAAQ,GAAG,OAAO,QAAQ,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;YAC7E,IAAI,QAAQ;gBAAE,OAAO,UAAU,CAAC,QAAQ,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAA;QAC7E,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACvC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QACtC,MAAM,QAAQ,GAAG,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACzE,IAAI,QAAQ;YAAE,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAChE,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAA;QAChE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC;aACxD,GAAG,CAAC,CAAC,SAAc,EAAE,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;QACrD,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,OAAO,UAAU,CAAC,kBAAkB,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAA;QACpF,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;AACrC,CAAC;AASD,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,IAAY,EAAE,OAAsB;IACxE,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACtC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,IAAI;YACvC,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACtG,CAAA;IACH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,qBAAqB,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAC/C,IAAI,OAAe,CAAA;IACnB,IAAI,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QACpD,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,YAAY,UAAU,CAAC,CAAA;QAC5C,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC,CAAA;QAC7C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,YAAY,wBAAwB,CAAC,CAAA;QAC1D,CAAC;QACD,QAAQ,CAAC,GAAG,GAAG,UAAU,CAAC,IAAI,CAAA;QAC9B,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;QACrE,OAAO,GAAG,YAAY,CAAA;IACxB,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC7C,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAClC,EAAE,OAAO,EAAE,sBAAsB,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CACnE,GAAG,IAAI,CAAC,CAAA;QACT,OAAO,GAAG,MAAM,CAAA;IAClB,CAAC;IAED,MAAM,aAAa,GAAwB,EAAE,CAAA;IAC7C,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtC,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE;gBACzD,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG;aAClD,CAAC,CAAC,CAAA;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;AACrF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CACjC,OAAe,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,MAAyB,OAAO,CAAC,GAAG;IAE5E,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,OAAO;YACzD,sDAAsD,CACvD,CAAA;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,sBAAsB,QAAQ,CAAC,GAAG,OAAO,QAAQ,CAAC,MAAM,MAAM;YAC9D,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACpE,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,YAAY,OAAO,cAAc,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,YAAY,OAAO,KAAK,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAiB;IAC3C,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,IAAmB,EAAE,MAAiB,EAAE,IAAY;IACtE,OAAO;QACL,OAAO,EAAE,iCAAiC;QAC1C,GAAG,EAAE,IAAI;QACT,MAAM;QACN,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QAC7C,SAAS,EAAE,uBAAuB;KACnC,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AAC7E,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,YAAoB;IACjD,IAAI,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IACxB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;QACzC,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO,SAAS,CAAA;QACrF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG,IAAI,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QAC1D,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;AACH,CAAC","sourcesContent":["// Managed Agents Platform（MAP）注册表与工作区归属解析。\n//\n// 一个 Agent 工作区归属于至多一个托管平台；归属解析顺序固定：\n//   DTA_MAP 环境变量 > dingtalk-agent.json#map > .dingtalk-agent/map.json > 按 Provider 声明推断。\n// 平台相关的方法学不写进 CLI——它们随对应平台的 Skill 包分发，只在用户选择该平台时安装。\n// 平台命令（如 deploy/promote/observe）必须先通过归属门禁；coming-soon 平台一律 fail-closed。\n\nimport { existsSync, lstatSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'\nimport { dirname, join, parse, resolve } from 'node:path'\n\nimport { findAgentProjectRoot } from './development-workspace.js'\nimport { installGlobalSkill, type GlobalSkillStatus } from './skill-manager.js'\n\nexport type MapStatus = 'supported' | 'coming-soon'\n\nexport interface MapDefinition {\n  name: string\n  label: string\n  status: MapStatus\n  description: string\n  skills: string[]\n  commands: string[]\n}\n\nexport const MANAGED_AGENT_PLATFORMS: MapDefinition[] = [\n  {\n    name: 'multica-dingtalk',\n    label: 'Multica (DingTalk)',\n    status: 'supported',\n    description: '钉钉 Multica 托管平台：受控部署、晋级与观测回流。',\n    skills: ['dingtalk-agent-deploy', 'dingtalk-agent-boot-multica'],\n    commands: ['deploy', 'promote', 'observe'],\n  },\n  {\n    name: 'deap',\n    label: 'DEAP',\n    status: 'coming-soon',\n    description: '敬请期待。',\n    skills: [],\n    commands: [],\n  },\n]\n\nexport const MAP_FILE = '.dingtalk-agent/map.json'\nconst PROJECT_FILE = 'dingtalk-agent.json'\n\nexport type MapSource = 'env' | 'project-manifest' | 'map-file' | 'inferred' | 'none'\n\nexport interface MapResolution {\n  $schema: 'dingtalk-agent/map-resolution@1'\n  map: string | null\n  source: MapSource\n  file: string\n  definition: MapDefinition | null\n  platforms: MapDefinition[]\n}\n\nexport interface MapUseResult extends MapResolution {\n  written: string\n  skillInstalls: GlobalSkillStatus[]\n}\n\nexport function mapDefinition(name: string): MapDefinition | null {\n  return MANAGED_AGENT_PLATFORMS.find((item) => item.name === name) || null\n}\n\nexport function resolveMap(start = process.cwd(), env: NodeJS.ProcessEnv = process.env): MapResolution {\n  const fromEnv = String(env.DTA_MAP || '').trim()\n  if (fromEnv) return resolution(fromEnv, 'env', '')\n\n  const projectRoot = findAgentProjectRoot(start)\n  if (projectRoot) {\n    const manifestPath = join(projectRoot, PROJECT_FILE)\n    if (existsSync(manifestPath) && !lstatSync(manifestPath).isSymbolicLink()) {\n      const manifest = readJsonOrNull(manifestPath)\n      const declared = typeof manifest?.map === 'string' ? manifest.map.trim() : ''\n      if (declared) return resolution(declared, 'project-manifest', manifestPath)\n    }\n  }\n\n  const mapPath = findUp(start, MAP_FILE)\n  if (mapPath) {\n    const stored = readJsonOrNull(mapPath)\n    const declared = typeof stored?.map === 'string' ? stored.map.trim() : ''\n    if (declared) return resolution(declared, 'map-file', mapPath)\n  }\n\n  if (projectRoot) {\n    const manifest = readJsonOrNull(join(projectRoot, PROJECT_FILE))\n    const providers = Object.values(manifest?.workspaces || {})\n      .map((workspace: any) => workspace?.provider?.kind)\n    if (providers.includes('multica')) {\n      return resolution('multica-dingtalk', 'inferred', join(projectRoot, PROJECT_FILE))\n    }\n  }\n\n  return resolution(null, 'none', '')\n}\n\nexport interface MapUseOptions {\n  packageRoot: string\n  home?: string\n  env?: NodeJS.ProcessEnv\n  installSkills?: boolean\n}\n\nexport function useMap(start: string, name: string, options: MapUseOptions): MapUseResult {\n  const definition = mapDefinition(name)\n  if (!definition) {\n    throw new Error(\n      `未知 managed agents platform: ${name}\\n` +\n      `可用: ${MANAGED_AGENT_PLATFORMS.map((item) => `${item.name}（${statusLabel(item.status)}）`).join('、')}`,\n    )\n  }\n  if (definition.status !== 'supported') {\n    throw new Error(`${definition.label} 敬请期待——当前版本尚未开放该平台。`)\n  }\n\n  const projectRoot = findAgentProjectRoot(start)\n  let written: string\n  if (projectRoot && existsSync(join(projectRoot, PROJECT_FILE))) {\n    const manifestPath = join(projectRoot, PROJECT_FILE)\n    if (lstatSync(manifestPath).isSymbolicLink()) {\n      throw new Error(`${PROJECT_FILE} 不能是符号链接`)\n    }\n    const manifest = readJsonOrNull(manifestPath)\n    if (!manifest || typeof manifest !== 'object') {\n      throw new Error(`${PROJECT_FILE} 不是合法 JSON，无法写入 map 归属`)\n    }\n    manifest.map = definition.name\n    writeFileSync(manifestPath, JSON.stringify(manifest, null, 2) + '\\n')\n    written = manifestPath\n  } else {\n    const target = join(resolve(start), MAP_FILE)\n    mkdirSync(dirname(target), { recursive: true })\n    writeFileSync(target, JSON.stringify(\n      { $schema: 'dingtalk-agent/map@1', map: definition.name }, null, 2,\n    ) + '\\n')\n    written = target\n  }\n\n  const skillInstalls: GlobalSkillStatus[] = []\n  if (options.installSkills !== false) {\n    for (const skill of definition.skills) {\n      skillInstalls.push(installGlobalSkill(options.packageRoot, {\n        name: skill, home: options.home, env: options.env,\n      }))\n    }\n  }\n\n  return { ...resolveMap(start, options.env || process.env), written, skillInstalls }\n}\n\n/** deploy/promote/observe 等平台命令的归属门禁：未归属、未知或 coming-soon 一律 fail-closed。 */\nexport function requireSupportedMap(\n  command: string, start = process.cwd(), env: NodeJS.ProcessEnv = process.env,\n): MapResolution {\n  const resolved = resolveMap(start, env)\n  if (!resolved.map) {\n    throw new Error(\n      `当前工作区未声明 managed agents platform，无法执行 \\`${command}\\`。\\n` +\n      '先运行 `dta map use multica-dingtalk`，或设置 DTA_MAP 环境变量。',\n    )\n  }\n  if (!resolved.definition) {\n    throw new Error(\n      `工作区声明了未知 platform: ${resolved.map}（来源 ${resolved.source}）。\\n` +\n      `可用: ${MANAGED_AGENT_PLATFORMS.map((item) => item.name).join('、')}`,\n    )\n  }\n  if (resolved.definition.status !== 'supported') {\n    throw new Error(`${resolved.definition.label} 敬请期待——\\`${command}\\` 尚未在该平台开放。`)\n  }\n  if (!resolved.definition.commands.includes(command)) {\n    throw new Error(`${resolved.definition.label} 不承接命令 \\`${command}\\`。`)\n  }\n  return resolved\n}\n\nexport function statusLabel(status: MapStatus): string {\n  return status === 'supported' ? '已支持' : '敬请期待'\n}\n\nfunction resolution(name: string | null, source: MapSource, file: string): MapResolution {\n  return {\n    $schema: 'dingtalk-agent/map-resolution@1',\n    map: name,\n    source,\n    file,\n    definition: name ? mapDefinition(name) : null,\n    platforms: MANAGED_AGENT_PLATFORMS,\n  }\n}\n\nfunction readJsonOrNull(path: string): any {\n  try { return JSON.parse(readFileSync(path, 'utf8')) } catch { return null }\n}\n\nfunction findUp(start: string, relativePath: string): string | null {\n  let dir = resolve(start)\n  while (true) {\n    const candidate = join(dir, relativePath)\n    if (existsSync(candidate) && !lstatSync(candidate).isSymbolicLink()) return candidate\n    const parent = dirname(dir)\n    if (parent === dir || dir === parse(dir).root) return null\n    dir = parent\n  }\n}\n"]}

package/docs/SECOND-AGENT-ACCEPTANCE.md

@@ -1,62 +0,0 @@
-# 一小时复制第二个岗位 Agent
-
-## 结论
-
-第二个 Agent 不复制运行时，只复制一份 Agent kit 并替换四类绑定：`AGENTS.md`、Role Skills、Field/存储、DWS authority。事件监听不在本流程内；没有事件时 Agent 仍以 Direct/Mounted Session 正常工作，有可信事件时再进入同一个 Prepared Runtime。
-
-仓库提供两份已通过同一合同的实例：
-
-- `examples/agents/fde-coach`：FDE 教练；
-- `examples/agents/release-manager`：发布经理。
-
-两者共享 Basic Behavior、Invocation、Session/Run/Wait、双半闸门与 Receipt；Definition、Role Skill、Field、Session state、记忆和权限完全隔离。
-
-## 60 分钟执行表
-
-| 时间 | 开发者动作 | 验收标准 |
-|---|---|---|
-| 0–10 分钟 | 复制任一 example，改目录名 | 原 example 不被覆盖，新目录不含 `.dingtalk-agent` |
-| 10–20 分钟 | 改 `AGENTS.md` 的身份、服务对象、职责、交付与拒绝边界 | 另一个 Agent 能回答“我是谁、负责什么、不做什么” |
-| 20–30 分钟 | 新建/改名 `skills/<role>/SKILL.md` | 目录名等于 frontmatter `name`；只含岗位方法，不重复基础行为 |
-| 30–40 分钟 | 配置 Field、存储路由和 DWS authority | 使用可信 ID；不同 Agent 不共用 state root、业务 scope 或生产权限 |
-| 40–50 分钟 | 先 `dta bootstrap --json`，需要 Prepared Run 时再显式 `dta init` | Direct 默认 ready/partial 可解释；init 采用 `AGENTS.md` 并发现 Role Skill |
-| 50–60 分钟 | 跑合同/mock Lab，检查冻结快照和隔离 | 无可信 target 不外发；两个 Agent 的 Definition/Session/记忆/权限不串 |
-
-## 最小操作
-
-```bash
-cp -R examples/agents/release-manager /path/to/my-agent
-cd /path/to/my-agent
-
-# 先验证本体；这一步不要求 Workspace，也不产生钉钉副作用
-dta bootstrap --json
-
-# 只有需要可信事件和 Prepared Run 时才初始化一次
-dta init
-dta bootstrap --json
-```
-
-首次 `init` 会优先采用已有 `AGENTS.md`，发现 `skills/*/SKILL.md`，并保留已有 `fields/default/field.json`。初始化后新增 Skill 不会自动热启用：离线评审后把 Skill name 加入 `.dingtalk-agent/workspace.json#skills`，由新 Session 重新冻结。
-
-## 自动化验收
-
-```bash
-npm run typecheck
-npm run eval:contract
-```
-
-合同 42 会从两份 example 分别创建临时 Workspace，并检查：
-
-1. 初始化前 Direct bootstrap 可工作且没有可信 target；
-2. 初始化后 `AGENTS.md`、Role Skill 与显式 Field 被正确采用；
-3. 两个 Definition、DWS profile、Session ID 不同，共享 Basic Behavior hash；
-4. FDE 的 Task Checkpoint 与 Memory Candidate 在发布经理 state root 中不可见；
-5. 两者都通过同一 fake-DWS Lab 的 Action/Receipt/平台回读合同。
-
-2026-07-16 本地基线为 42/42，通过；双 Agent 合同自动执行约 2–3 秒。这个数字证明模板化装配和隔离可自动验证，不代表真实账号、专用群、AI 表格和钉钉文档已接通。真实 L4 仍需为每个 Agent 提供专用测试对象、allowlist 和明确 `--live --yes` 授权。
-
-## 验收边界
-
-- 通过：开发者只改本体、岗位 Skill、存储/Field/authority，即可得到第二个结构完整、状态隔离的 Agent；
-- 不包含：Webhook、定时器、personal-event listener 等触发端；
-- 不冒充：mock 平台可见不等于真实钉钉送达，真实写入必须另走 Lab L3/L4 晋级门禁。