@xiashe/cli 0.1.32 → 0.1.34

package/README.md

@@ -50,11 +50,11 @@ Production defaults:
 
 `xiashe payment` is the shell-capable Agent path for Alipay AI Pay. It delegates only to the official local `alipay-bot` supplied by `@alipay/agent-payment`; it does not implement or expose `Payment-Needed` / `Payment-Proof` itself.
 
-- `xiashe payment bridge-info` checks that the official buyer CLI can run and exposes the buyer-pay/status command contract required by the bridge. It does not check wallet authorization, merchant activation, or whether a transaction can be created. `payment doctor` remains a manual wallet-status diagnostic only.
-- `xiashe payment pay` requests the resource once, saves its exact 402 request in a private local file, and passes that file plus the current Agent business-session ID to the official buyer CLI. It requires an HTTPS AI-Collect resource URL, a visible purchase-purpose summary, and `--confirm`. After confirmation it resolves a valid current host session only from its own local process; `--session-id` remains an optional explicit adapter override. It never generates, prints, or persists a replacement session ID. If no valid host session is available, it returns `host_session_unavailable` and does not invoke the wallet.
+- `xiashe payment bridge-info` checks that the official buyer CLI can run and reports the non-sensitive availability of the `xiashe.payment-host.v1` host-session contract. It does not check wallet authorization, merchant activation, or whether a transaction can be created. `payment doctor` remains a manual wallet-status diagnostic only.
+- `xiashe payment pay` requests the resource once, saves its exact 402 request in a private local file, and passes that file plus the current Agent business-session ID to the official buyer CLI. It requires an HTTPS AI-Collect resource URL, a visible purchase-purpose summary, and `--confirm`. The Agent host must inject its real current task or conversation ID only into that foreground child process as `XIASHE_HOST_BUSINESS_SESSION` under `xiashe.payment-host.v1`. The command does not accept `--session-id`, never generates, prints, persists, or sends a replacement session ID to XiaShe. If no valid host session is available, it returns `host_session_unavailable`; if an override is supplied, it returns `host_session_override_forbidden`; neither result invokes the wallet.
 - `xiashe payment status` resumes the same local attempt with its official query credential and returns a normalized status only. If Alipay support provides the documented 32-digit `outShakeNo` (with `8282` in positions 11–14, sometimes called a business order number), use `--out-shake-no` or `--business-no` for one read-only status query; it is validated, never stored, and cannot create a payment or acknowledge fulfillment. No wallet protocol payload or proof is printed. A QR or confirmation image is exposed only as `officialMedia` when the official wallet emitted that image in the same invocation; the bridge never generates one itself.
 - `xiashe payment preflight` requests the seller resource once and validates the public field shape of its 402 bill without opening a wallet or creating a trade. It does not prove that Alipay accepts the seller signature, service binding, or merchant activation. `xiashe payment diagnose` is read-only. It reports the last stored safe diagnosis for that local attempt, including allow-listed official error/sub-codes, message, and request/trace identifiers when present, without contacting Alipay, replaying the resource, or exposing its local query credential.
 
 An Agent must never add `--confirm` before the user has explicitly agreed to the displayed purpose. If the wallet is unavailable, obtain permission before running the official `@alipay/agent-payment` setup, then run `payment doctor` again.
 
-For a clean Codex Task, the XiaShe MCP response provides a version-pinned ephemeral command such as `npx -y @xiashe/cli@0.1.32 payment bridge-info`. No global `xiashe` installation is required for that path. Do not run preflight before requesting payment confirmation: it is a read-only diagnostic only. After explicit confirmation, run the supplied payment and status commands exactly as supplied in the foreground. The Agent must inspect bridge JSON instead of suppressing output or guessing status from shell text. Failed attempts include a redacted `diagnosis` object and `userVisible` next step; do not replace them with a generic payment-failed message.
+For a clean Codex Task, the XiaShe MCP response provides a version-pinned ephemeral command such as `npx -y @xiashe/cli@0.1.34 payment bridge-info`. No global `xiashe` installation is required for that path. Do not run preflight before requesting payment confirmation: it is a read-only diagnostic only. After explicit confirmation, ordinary hosts inject `XIASHE_HOST_BUSINESS_SESSION` only into the supplied payment command’s foreground child process. Codex Node REPL uses the private MCP response’s stdin-only adapter because its spawned child does not inherit request metadata. The Agent must inspect bridge JSON instead of suppressing output or guessing status from shell text. Failed attempts include a redacted `diagnosis` object and `userVisible` next step; do not replace them with a generic payment-failed message.

package/bin/xiashe.mjs

@@ -51,18 +51,20 @@ const EXIT_RUNTIME = 5;
 const COMMAND_NAME = process.env.XIASHE_CLI_NAME || 'xiashe';
 const PRODUCT_NAME = process.env.XIASHE_PRODUCT_NAME || (COMMAND_NAME === 'agentpie' ? 'AgentPie' : 'XiaShe');
 const PRODUCT_ENV = COMMAND_NAME === 'agentpie' ? 'global' : 'cn';
-// A payment business session is host-owned.  Keep the allowlist deliberately
-// narrow: this CLI may consume a current Task/session identifier from its own
-// process, but it must never manufacture, print, or persist one.
-const HOST_BUSINESS_SESSION_ENV_NAMES = Object.freeze([
-  'XIASHE_HOST_BUSINESS_SESSION',
-  'AGENT_HOST_BUSINESS_SESSION',
-  'AGENT_SESSION_ID',
-  'CODEX_THREAD_ID',
-  'OPENAI_THREAD_ID',
-  'AGENT_THREAD_ID',
-  'THREAD_ID',
-  'CONVERSATION_ID'
+// xiashe.payment-host.v1 is the portable contract between an Agent host and
+// this CLI. A host injects its *current* business session only into the
+// foreground payment subprocess. The value never enters MCP, XiaShe APIs,
+// local state, stdout, or a model-visible command argument.
+const PAYMENT_HOST_CONTRACT_VERSION = 'xiashe.payment-host.v1';
+const PAYMENT_HOST_SESSION_ENV = 'XIASHE_HOST_BUSINESS_SESSION';
+const PAYMENT_HOST_STDIN_FLAG = 'host-session-stdin';
+const PAYMENT_HOST_STDIN_MAX_BYTES = 256;
+// These are compatibility adapters for known OpenAI/Codex hosts while their
+// runtimes adopt the portable environment contract. Unknown host variables
+// are deliberately not guessed: other Agents must inject the standard name.
+const PAYMENT_HOST_COMPATIBILITY_PROVIDERS = Object.freeze([
+  { environmentName: 'CODEX_THREAD_ID', provider: 'codex_current_task' },
+  { environmentName: 'OPENAI_THREAD_ID', provider: 'openai_current_thread' }
 ]);
 const HOST_BUSINESS_SESSION_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{7,191}$/;
 
@@ -117,7 +119,7 @@ Usage:
 
   ${c} payment bridge-info|doctor
   ${c} payment preflight --resource-url <https-url>
-  ${c} payment pay --resource-url <https-url> --intent-summary <text> [--session-id <active-agent-session>] --confirm [--wallet-timeout-ms <ms>]
+  ${c} payment pay --resource-url <https-url> --intent-summary <text> --confirm [--wallet-timeout-ms <ms>]
   ${c} payment status --resource-url <https-url> [--out-shake-no <32-digit-8282>|--business-no <32-digit-8282>]
   ${c} payment diagnose --resource-url <https-url>
   ${c} payment support-report --resource-url <https-url>
@@ -265,26 +267,77 @@ function requireArg(value, label) {
   return value;
 }
 
-function resolvePaymentBusinessSession(flags) {
-  const explicitValue = flags['session-id'] ?? flags.sessionId;
-  if (explicitValue !== undefined) {
-    if (explicitValue === true || !String(explicitValue).trim()) {
-      fail('Missing value for --session-id.', EXIT_USAGE);
+function hostSessionContractStatus(resolution = null) {
+  return {
+    protocolVersion: PAYMENT_HOST_CONTRACT_VERSION,
+    requiredEnvironment: PAYMENT_HOST_SESSION_ENV,
+    resolution: resolution
+      ? { available: true, provider: resolution.provider }
+      : { available: false, provider: null },
+    sessionValueExposed: false,
+    sessionValuePersisted: false,
+    sessionValueSentToXiaShe: false
+  };
+}
+
+async function readPaymentBusinessSessionFromStdin() {
+  return await new Promise((resolve) => {
+    let received = '';
+    let settled = false;
+    const finish = (value = null) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeout);
+      process.stdin.pause();
+      resolve(value);
+    };
+    const timeout = setTimeout(() => finish(null), 5_000);
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('data', (chunk) => {
+      received += chunk;
+      if (Buffer.byteLength(received, 'utf8') > PAYMENT_HOST_STDIN_MAX_BYTES) {
+        finish(null);
+      }
+    });
+    process.stdin.once('end', () => finish(received.trim()));
+    process.stdin.once('error', () => finish(null));
+    process.stdin.resume();
+  });
+}
+
+async function resolvePaymentBusinessSession(flags) {
+  // A model-visible command-line session is not an acceptable trust boundary.
+  // Hosts that cannot inject the standard environment must implement the v1
+  // adapter rather than asking a user or model to provide a replacement.
+  if (flags['session-id'] !== undefined || flags.sessionId !== undefined) {
+    return { error: 'host_session_override_forbidden' };
+  }
+  if (flags[PAYMENT_HOST_STDIN_FLAG] !== undefined) {
+    if (flags[PAYMENT_HOST_STDIN_FLAG] !== true) {
+      return { error: 'host_session_override_forbidden' };
+    }
+    const candidate = await readPaymentBusinessSessionFromStdin();
+    if (HOST_BUSINESS_SESSION_PATTERN.test(String(candidate || '').trim())) {
+      return {
+        sessionId: String(candidate).trim(),
+        provider: 'codex_node_repl_request_metadata'
+      };
     }
-    // Preserve the official SDK's validation and error reporting for an
-    // explicit caller-provided value. This is still useful for compatible
-    // hosts that expose a session through their own runtime adapter.
+    return null;
+  }
+  const standardCandidate = String(process.env[PAYMENT_HOST_SESSION_ENV] || '').trim();
+  if (HOST_BUSINESS_SESSION_PATTERN.test(standardCandidate)) {
     return {
-      sessionId: String(explicitValue).trim(),
-      source: 'explicit_argument'
+      sessionId: standardCandidate,
+      provider: 'standard_host_environment'
     };
   }
-  for (const environmentName of HOST_BUSINESS_SESSION_ENV_NAMES) {
-    const candidate = String(process.env[environmentName] || '').trim();
+  for (const compatibilityProvider of PAYMENT_HOST_COMPATIBILITY_PROVIDERS) {
+    const candidate = String(process.env[compatibilityProvider.environmentName] || '').trim();
     if (HOST_BUSINESS_SESSION_PATTERN.test(candidate)) {
       return {
         sessionId: candidate,
-        source: 'current_host_environment'
+        provider: compatibilityProvider.provider
       };
     }
   }
@@ -301,8 +354,26 @@ function hostBusinessSessionUnavailableResult() {
       code: 'host_business_session_unavailable',
       stage: 'host_session_resolution'
     },
+    hostSessionContract: hostSessionContractStatus(),
     userVisible: '当前 Agent 未提供可用的任务会话标识，尚未发起支付宝付款。',
-    nextStep: '请在能向本地付款 CLI 提供当前任务 sessionId、threadId 或 conversationId 的 Agent 环境中重试；不要手工创建或粘贴替代值。'
+    nextStep: `请让当前 Agent 宿主仅为本次付款子进程注入 ${PAYMENT_HOST_SESSION_ENV}（${PAYMENT_HOST_CONTRACT_VERSION}）；不要手工创建、粘贴或让模型传入替代值。`
+  };
+}
+
+async function hostBusinessSessionOverrideForbiddenResult() {
+  const hostResolution = await resolvePaymentBusinessSession({});
+  return {
+    ok: false,
+    status: 'host_session_override_forbidden',
+    failureCode: 'HOST_SESSION_OVERRIDE_FORBIDDEN',
+    walletInvoked: false,
+    diagnosis: {
+      code: 'host_session_override_forbidden',
+      stage: 'host_session_resolution'
+    },
+    hostSessionContract: hostSessionContractStatus(hostResolution?.error ? null : hostResolution),
+    userVisible: '付款命令不接受模型或用户提供的业务会话标识，尚未发起支付宝付款。',
+    nextStep: `请让当前 Agent 宿主按 ${PAYMENT_HOST_CONTRACT_VERSION} 私有注入 ${PAYMENT_HOST_SESSION_ENV}，然后原样重试 payCommand。`
   };
 }
 
@@ -1239,7 +1310,11 @@ async function cmdPayment(sub, args, global) {
   const flags = parseFlags(args);
   if (sub === 'bridge-info' || sub === 'bridge' || sub === 'prepare') {
     const result = await getAlipayWalletBridgeInfo({ timeoutMs: global.timeoutMs });
-    print(result, global);
+    const businessSession = await resolvePaymentBusinessSession({});
+    print({
+      ...result,
+      hostSessionContract: hostSessionContractStatus(businessSession?.error ? null : businessSession)
+    }, global);
     return;
   }
   const walletTimeoutValue = flags['wallet-timeout-ms'] ?? flags.walletTimeoutMs ?? (global.timeoutMsExplicit ? global.timeoutMs : undefined);
@@ -1263,7 +1338,12 @@ async function cmdPayment(sub, args, global) {
   if (sub === 'pay') {
     const resourceUrl = requireArg(flags['resource-url'] || flags.resourceUrl || flags.r, '--resource-url');
     const intentSummary = requireArg(flags['intent-summary'] || flags.intentSummary || flags.i, '--intent-summary');
-    const businessSession = resolvePaymentBusinessSession(flags);
+    const businessSession = await resolvePaymentBusinessSession(flags);
+    if (businessSession?.error === 'host_session_override_forbidden') {
+      print(await hostBusinessSessionOverrideForbiddenResult(), global);
+      process.exitCode = EXIT_RUNTIME;
+      return;
+    }
     if (!businessSession) {
       print(hostBusinessSessionUnavailableResult(), global);
       process.exitCode = EXIT_RUNTIME;
@@ -1278,11 +1358,8 @@ async function cmdPayment(sub, args, global) {
     print({
       ...result,
       // This confirms resolution occurred without exposing the identifier or
-      // the environment variable that contained it.
-      hostBusinessSession: {
-        resolved: true,
-        source: businessSession.source
-      }
+      // the source environment variable that contained it.
+      hostSessionContract: hostSessionContractStatus(businessSession)
     }, global);
     return;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiashe/cli",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "type": "module",
   "bin": {
     "xiashe": "bin/xiashe.mjs"
@@ -10,7 +10,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@xiashe/sdk": "0.1.32"
+    "@xiashe/sdk": "0.1.34"
   },
   "engines": {
     "node": ">=20"