@zhuoyuezs/ml-platform 0.1.4 → 0.1.6

package/CI-ARTIFACT.md

@@ -0,0 +1,21 @@
+# CI npm artifact
+
+每次 `dev`/`main` 分支更新、合并请求或从 GitLab UI 手动运行的 Pipeline 都会生成完整的
+`@zhuoyuezs/ml-platform` tarball。
+GitLab pipeline 的 `npm:ml-platform-release` job 会将 `business-client-js` 放入正式包的
+`runtime/business-client`，并上传已验收的 `.tgz` 与 `.sha256` 文件。
+
+创建与 `npm/ml-platform/package.json` 版本一致的 SemVer tag（例如 `v0.1.5`）后，
+同一个已验收归档会自动发布到 npmjs。发布 job 需要在 GitLab CI/CD Variables 中配置
+受保护且 masked 的 `NPM_TOKEN`；普通分支、手动 Pipeline 和 Merge Request 不会发布 npm。
+
+下载 artifact 后只需要 Node.js 18+：
+
+```bash
+sha256sum -c zhuoyuezs-ml-platform-*.tgz.sha256
+npm install --global ./zhuoyuezs-ml-platform-*.tgz
+ml-platform version
+```
+
+运行已安装的 CLI 不需要 Python、`uv`、Git 仓库或平台源码。`uv` 只在 CI 构建阶段用于
+执行现有的 release staging 脚本。

package/DEVELOPMENT.md

@@ -14,7 +14,8 @@
   用户级 Skill，不要求额外安装参数。
 - 管理命令默认输出简洁结果；Agent 和 CI 显式使用 `--json` 获取稳定结构化输出。
 - npm `postinstall` 不得修改 Agent Skills 目录。
-- Python business client 只保留为迁移 oracle，不进入 release。
+- Python business client 与迁移 oracle 已删除；release builder 继续防御性排除 Python
+  runtime、wheel 和旧 wrapper，npm 包只携带 JavaScript CLI 与纯 Skill payload。
 - Codex CLI 不重新打包；当前只支持唯一自研 Host。
 - builder 使用 Python，因此开发构建命令仍通过 `uv run ...` 启动；最终 npm 包和用户侧
   `ml-platform` 运行时只依赖 Node.js，不依赖 Python 或 `uv`。
@@ -48,7 +49,7 @@ package/
 └── DEVELOPMENT.md
 ```
 
-严格 `files` allowlist 必须排除 `node_modules`、测试 oracle、旧 wheel、Skill runtime、旧 wrapper、
+严格 `files` allowlist 必须排除 `node_modules`、旧 wheel、Skill runtime、旧 wrapper、
 Host 副本、日志、会话数据、attic、凭证和实验文件。
 
 最终发布单元是 builder 生成并通过 smoke test 的 `.tgz`，不是 `dist/package/` 目录。目录只用于
@@ -61,24 +62,25 @@ Host 副本、日志、会话数据、attic、凭证和实验文件。
 
 ### Step 1：完成 business-client-js 迁移（已完成）
 
-- 补齐全部 Python CLI 命令和参数契约；
+- 完成原 Python CLI 命令和参数契约到 JavaScript 的迁移；
 - 对齐 JSON stdout、stderr 和退出码；
 - 补齐数值参数、子命令 help、路径展开和 HTTP 错误测试；
 - 已注册 Dataset 支持 `get-dataset`、`resolve-dataset` 和
   `build-registered-dataset` API-first 流程，不依赖本地 Manifest；
 - Catalog 规范化保留 `project`，Registry 只读元数据与可发布契约分离，目标 project
   不一致时在访问 Registry 前失败；
-- 扩大 Catalog normalization differential tests；
+- 扩大 Catalog normalization 与 OpenAPI contract tests；
 - 完成 Job、Artifact、inference 和 Operator upload 负向测试；
 - 删除正式运行路径中的旧产品名兼容；
 - 独立执行 `npm pack --json --dry-run` 机器可读清单校验、clean install 和 CLI smoke test。
 
-完成标准：Python 只剩 oracle 作用，正式 CLI 不需要 Python、`uv` 或第三方 npm runtime 依赖。
+完成标准：正式 CLI 不需要 Python、`uv` 或第三方 npm runtime 依赖，旧 Python client 可删除。
 
 ### Step 2：重建纯 feature-management Skill（已完成）
 
 - 保留 `SKILL.md`、`agents/`、`references/` 和 `assets/catalog-template/`；
-- 删除 `runtime/business-client-js/`、`assets/wheels/`、Skill installer 和 CLI launcher；
+- npm staging 时排除 `assets/wheels/`、Skill installer 和 CLI launcher；这些旧 Python
+  runtime/installer/zip 交付物随后已从仓库彻底删除，staging 排除逻辑保留为防御性边界。
 - 所有命令示例改为直接调用 `ml-platform`；
 - 明确 CLI 是外部 prerequisite，并提供 `ml-platform --help` 自省路径；
 - 更新 `agents/openai.yaml`；
@@ -134,7 +136,7 @@ Host 副本、日志、会话数据、attic、凭证和实验文件。
 
 - `git diff --check -- npm business-client-js skills/feature-management agent_poc/codex-host`；
 - JS business-client tests；
-- Python oracle tests；
+- JavaScript OpenAPI contract 与 Catalog tests；
 - Skill validator 和 forward tests；
 - npm installer tests；
 - release builder；
@@ -146,8 +148,9 @@ Host 副本、日志、会话数据、attic、凭证和实验文件。
 - Codex project/user scope 和显式 Skills 目录；
 - 最终归档敏感文件和重复 client 检查。
 
-完成标准：同一个不可变 `.tgz` 通过全部验收，并作为唯一允许发布的输入。没有明确发布授权时，
-仍不执行 npmjs 或其他外部发布。
+完成标准：同一个不可变 `.tgz` 通过全部验收，并作为唯一允许发布的输入。GitLab CI 仅在
+SemVer tag（`vX.Y.Z` 或 `X.Y.Z`）与 `package.json.version` 一致、且配置了 `NPM_TOKEN` 时
+自动执行 npmjs 发布；dev、main 和 Merge Request pipeline 只生成并保存 artifact。
 
 ## 4. package.json
 
@@ -260,9 +263,10 @@ npx @zhuoyuezs/ml-platform@<version> install
 - 不执行 GitHub Release 或其他未授权的外部发布；
 - candidate 验证后不得用相同版本重新构建不同内容。
 
-当前允许使用 npm 账号 2FA 完成人工发布。后续迁移到受控 CI 时，优先使用 npm Trusted
-Publishing 和 OIDC，并在受支持的公开 CI 环境执行 `npm publish --provenance`。本地登录不能
-替代 CI provenance，未建立可信发布工作流前不得宣称包具有对应来源证明。
+受控 GitLab CI 使用 masked/protected 的 `NPM_TOKEN` 临时配置 npm auth，并发布 builder 生成的
+同一个 `.tgz`；token 不写入仓库或归档。本地登录不能替代 CI provenance，当前 token 发布也不
+宣称包具有 provenance 来源证明。后续可迁移到 npm Trusted Publishing 和 OIDC，并在受支持的
+公开 CI 环境执行 `npm publish --provenance`。
 
 ## 9. 参考与取舍
 

package/README.md

@@ -120,7 +120,7 @@ npx --yes --registry=https://registry.npmjs.org/ \
 ## 包内容
 
 - 一份 JavaScript business CLI；
-- 一份纯 `feature-management` Skill；
+- 两份纯 Skill：`feature-management` 与 `model-lifecycle-management`；
 - 显式安装、升级、状态、校验和回滚逻辑。
 
 不包含 Codex CLI、Python business-client wheel、Agent Host、平台服务端、模型训练或 Kubernetes

package/checksums.json

@@ -2,28 +2,28 @@
   "files": [
     {
       "path": "runtime/business-client/README.md",
-      "sha256": "sha256:4bca6d490a0ac3de54accb8f9f43003cdfb0c187bcf1acefea48728b16001e94",
-      "size_bytes": 1233
+      "sha256": "sha256:b12f30609c756ac4473723df434e6b1055f8713b7acfc3278b091b52288f6347",
+      "size_bytes": 2459
     },
     {
       "path": "runtime/business-client/package-lock.json",
-      "sha256": "sha256:a253eb945f8666779adfbf9e7009c539b450746298f145bbe4d0b2ca5f4cbe35",
+      "sha256": "sha256:d5e7102ec51df3192ae901908f36cf0380aba5a0421b9824877403ab034d6740",
       "size_bytes": 381
     },
     {
       "path": "runtime/business-client/package.json",
-      "sha256": "sha256:bf29516fcbd162fe051f6ea142bd604dead0be99c461bc184a59e7c526766aa4",
-      "size_bytes": 426
+      "sha256": "sha256:9e815ffe0487eb216447f4a4b31d248fe37392e08f0fd4bae2aba9c4f4285547",
+      "size_bytes": 501
     },
     {
       "path": "runtime/business-client/src/catalog.js",
-      "sha256": "sha256:afc2ba28eee2d1dcd833a2e5c4ac923421dc60302b31bf985aa638849bbf3d36",
-      "size_bytes": 54246
+      "sha256": "sha256:8dcc4c4baff7f292a6fb09d6f82693b5ce7da16b9f0a9e03b22e1f18e893240f",
+      "size_bytes": 53659
     },
     {
       "path": "runtime/business-client/src/cli.js",
-      "sha256": "sha256:db25cecb760a2b94ac1433c1d04ab70b429825e78dd1168e72688d8b9a8556be",
-      "size_bytes": 25911
+      "sha256": "sha256:ec2b5366dff1da0e56738e2ba39284701940e6a4574e11529d77aed8e4fe0d61",
+      "size_bytes": 41201
     },
     {
       "path": "runtime/business-client/src/config.js",
@@ -32,13 +32,13 @@
     },
     {
       "path": "runtime/business-client/src/http.js",
-      "sha256": "sha256:95ac9342c09605966f055dde2ac5cd67fdf28e8bc877e2233e3c48077ffdd729",
-      "size_bytes": 12429
+      "sha256": "sha256:e515b39f19e7b5e7d6c2388e9cf2d8e2c9fd18b585bb53bd4f8eeeb7412af81c",
+      "size_bytes": 15192
     },
     {
       "path": "skills/feature-management/SKILL.md",
-      "sha256": "sha256:69842537b8df63e58630ca0581575f29f6ec9e97d22c9c2c30b1575270161f6e",
-      "size_bytes": 28100
+      "sha256": "sha256:ba725b6be2d0f8e4d741d3a6f96e64657112c15935f8e9fd2818cd0b17380816",
+      "size_bytes": 30428
     },
     {
       "path": "skills/feature-management/agents/openai.yaml",
@@ -92,8 +92,8 @@
     },
     {
       "path": "skills/feature-management/references/commands.md",
-      "sha256": "sha256:c20ccf9ad8d505a1880a7e35773edb5040bbbcfeba3a64316e3148a6e337bdc2",
-      "size_bytes": 11546
+      "sha256": "sha256:c748f1877f6d2ac1f6ecc29e45cd270997cbd35b498a190decddb66c74b840ab",
+      "size_bytes": 13751
     },
     {
       "path": "skills/feature-management/references/contracts.md",
@@ -107,8 +107,33 @@
     },
     {
       "path": "skills/feature-management/references/platform-capability-guide.md",
-      "sha256": "sha256:fb606c3637891dab462d5b94004b60a3b8f02eb178aef589716f968c3b87cd5e",
-      "size_bytes": 2627
+      "sha256": "sha256:40d0f43a30688c5852ef09203ec35b4dc2c6b9db4bc7dd26dfae52e12d10e9ee",
+      "size_bytes": 4257
+    },
+    {
+      "path": "skills/model-lifecycle-management/SKILL.md",
+      "sha256": "sha256:5827d5e2ae6bc4561150e7c2e435a6ed657688d48aeab202ec9cf3a9b8f5e8e6",
+      "size_bytes": 2790
+    },
+    {
+      "path": "skills/model-lifecycle-management/agents/openai.yaml",
+      "sha256": "sha256:37857849a8baa6b06b6d5d07ae6036080239356fcccd36f77bbdc52c1dfa283f",
+      "size_bytes": 249
+    },
+    {
+      "path": "skills/model-lifecycle-management/references/evaluation.md",
+      "sha256": "sha256:0139e5fc79beeab84fb31792bdac37c3331676e1f591c57390ecc6336873dcc9",
+      "size_bytes": 1797
+    },
+    {
+      "path": "skills/model-lifecycle-management/references/packaging.md",
+      "sha256": "sha256:c987d4095f23a1f18ba55effb14f946e0f4cdcb661d7af28af560cc8f72d8b2c",
+      "size_bytes": 1101
+    },
+    {
+      "path": "skills/model-lifecycle-management/references/training.md",
+      "sha256": "sha256:84426c5cfbc60db1ea8b1692f270da82e16700b057af7dd826907acfb3b12e3f",
+      "size_bytes": 1125
     }
   ],
   "schema_version": "data_platform.ml_platform_checksums/v1"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhuoyuezs/ml-platform",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "ML 数据平台 business CLI 与 Agent Skills 管理工具",
   "bin": {
     "ml-platform": "scripts/main.js"
@@ -13,10 +13,13 @@
     "release.json",
     "checksums.json",
     "README.md",
-    "DEVELOPMENT.md"
+    "DEVELOPMENT.md",
+    "CI-ARTIFACT.md"
   ],
   "scripts": {
-    "test": "node --test test/*.test.js"
+    "test": "node --test test/*.test.js",
+    "api:check": "node ../../scripts/check_api_contract.js",
+    "pack": "npm pack"
   },
   "engines": {
     "node": ">=18"

package/release.json

@@ -13,8 +13,8 @@
     "entrypoint": "src/cli.js",
     "name": "ml-platform",
     "path": "runtime/business-client",
-    "sha256": "sha256:bf935c8c82aa508c26afa4f76dc94dd3d9e23c6e2bb33d797190d548a0c98249",
-    "version": "0.6.0"
+    "sha256": "sha256:28a74ef7e721f3de925384b249588a435c11b6995df92e3be96209682ca81041",
+    "version": "0.7.0"
   },
   "policy_sha256": "sha256:02fbde0134696b78c0c365d6e0b76c9814227208da5b2b3d4e5dbd82dc4a3606",
   "public_schema_versions": [
@@ -25,7 +25,7 @@
     "ml_data_platform.feature_set/v1",
     "ml_data_platform.dataset_manifest/v1"
   ],
-  "release_version": "0.1.4",
+  "release_version": "0.1.6",
   "runtime_requirements": {
     "node": ">=18",
     "os": [
@@ -37,10 +37,16 @@
   "skills": {
     "feature-management": {
       "path": "skills/feature-management",
-      "requires_cli": ">=0.6.0 <0.7.0",
-      "revision": "0.1.4",
-      "sha256": "sha256:0ae088bcfbb4b9a0fcfa22752bd978b2a34ab033d63af4ebb4f641d3c2ac65fd"
+      "requires_cli": ">=0.7.0 <0.8.0",
+      "revision": "0.1.6",
+      "sha256": "sha256:15131c1303b143373e4b8671301f5b884013a1906a44cfc85dd6f93f43c5d8c8"
+    },
+    "model-lifecycle-management": {
+      "path": "skills/model-lifecycle-management",
+      "requires_cli": ">=0.7.0 <0.8.0",
+      "revision": "0.1.6",
+      "sha256": "sha256:4107926beb85882c38333310e951a4a4cfcdcf946875359a7b5c1a55fb406347"
     }
   },
-  "source_commit": "2f92b97d658f16ebc6f2081b07a56365aeced649"
+  "source_commit": "d3e7aa1256c18453ba59f2a624b4cdc6dbbf9421"
 }

package/runtime/business-client/README.md

@@ -1,6 +1,7 @@
 # Business Client JS
 
-`business-client/` 的 JavaScript 迁移实现。Python client 目前仅作为迁移期 parity oracle；
+工业时序智能建模平台唯一受支持的业务 CLI 与 API client 实现。客户端合同由平台
+OpenAPI 快照、JavaScript 单元测试和 npm 发布测试直接验证；
 本目录是业务 CLI 的唯一 JavaScript 实现源码，Skill 通过外部 `ml-platform` 命令调用它，
 不复制或内嵌本目录的 runtime。
 
@@ -25,3 +26,31 @@ ml-platform build-registered-dataset <dataset_id> <dataset_version> \
 
 `resolve-manifest` 和 `build-dataset <manifest.json>` 仍用于尚未注册的本地契约。Catalog
 normalizer 保留并校验非默认 `project`；`apply --project` 与 Catalog 内项目不一致时拒绝执行。
+
+Registry 资产详情和版本发现使用与 `dev` OpenAPI 一致的命令：
+
+```bash
+ml-platform get-parameter <name> <version> --project <project>
+ml-platform get-feature <name> <version> --project <project>
+ml-platform list-feature-versions <name> --project <project> --all
+ml-platform list-jobs --project <project> --status succeeded --all
+```
+
+平台资源生命周期与部署绑定的因果上下文读取也由同一 CLI 覆盖：
+
+```bash
+ml-platform list-parameter-references <name> <version> --project <project>
+ml-platform get-parameter-lifecycle <name> <version> --project <project>
+ml-platform fetch-inference-context /absolute/path/to/request.json
+```
+
+Parameter、Feature、FeatureSet 的删除命令执行软删除，并支持带 actor、reason 和幂等键的
+恢复；调用方应在任何变更前查询直接与传递引用。
+
+仓库中的 `api-spec/latest.json` 从 `origin/dev` 生成。同步或验证契约时运行：
+
+```bash
+uv run python scripts/generate_openapi_schema.py --ref origin/dev
+uv run python scripts/generate_openapi_schema.py --ref origin/dev --check
+npm run api:check --prefix business-client-js
+```

package/runtime/business-client/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@zhuoyuezs/ml-platform-business-client",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@zhuoyuezs/ml-platform-business-client",
-      "version": "0.6.0",
+      "version": "0.7.0",
       "license": "UNLICENSED",
       "bin": {
         "ml-platform": "src/cli.js"

package/runtime/business-client/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@zhuoyuezs/ml-platform-business-client",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "private": true,
-  "description": "JavaScript parity implementation of the ML Platform business client",
+  "description": "JavaScript implementation of the ML Platform business client",
   "bin": {
     "ml-platform": "src/cli.js"
   },
@@ -11,7 +11,9 @@
     "README.md"
   ],
   "scripts": {
-    "test": "node --test test/*.test.js"
+    "test": "node --test test/*.test.js",
+    "api:check": "node ../scripts/check_api_contract.js",
+    "pack": "npm pack"
   },
   "engines": {
     "node": ">=18"

package/runtime/business-client/src/catalog.js

@@ -58,7 +58,6 @@ function normalizeQualityRules(value) { exactKeys(value, ["valid_range", "allow_
 function normalizeCodeArtifact(value) { object(value, "operator code_artifact"); const sha256 = requiredString(value.sha256, "code_artifact sha256"); if (!wheelDigestPattern.test(sha256)) throw new Error("code_artifact sha256 is invalid"); const filename = requiredString(value.filename, "code_artifact filename"); if (path.basename(filename) !== filename || !wheelFilenamePattern.test(filename)) throw new Error("code_artifact filename is invalid"); if (!Number.isInteger(value.size_bytes) || value.size_bytes <= 0) throw new Error("code_artifact size_bytes must be a positive integer"); if (defaultIfAbsent(value, "format", "wheel") !== "wheel") throw new Error("code_artifact format must be wheel"); return { uri: requiredString(value.uri, "code_artifact uri"), sha256, format: "wheel", filename, size_bytes: value.size_bytes, python_version: optionalString(value.python_version, "code_artifact python_version"), dependency_lock_hash: optionalString(value.dependency_lock_hash, "code_artifact dependency_lock_hash") }; }
 
 function normalizeParameter(payload) {
-  exactKeys(payload, ["schema_version", "project", "name", "display_name", "version", "data_type", "unit", "expected_frequency", "source", "time_semantics", "availability_sla", "value_field", "quality_rules", "rounding", "owner"], ["name", "display_name", "version", "source"], "parameter");
   const source = object(payload.source, "parameter source");
   if (Object.prototype.hasOwnProperty.call(source, "parameters")) throw new Error("parameter source uses unsupported field 'parameters'; use 'params'");
   if (source.mode === "sql" && typeof source.sql === "string" && source.sql.trimEnd().endsWith(";")) throw new Error("SQL Parameter source.sql must not end with a semicolon");
@@ -66,7 +65,7 @@ function normalizeParameter(payload) {
   return { schema_version: pythonString(defaultIfAbsent(payload, "schema_version", "ml_data_platform.parameter/v1")), project: identifier(defaultIfAbsent(payload, "project", "default"), "parameter project"), name: identifier(payload.name, "parameter name"), display_name: requiredString(payload.display_name, "parameter display_name"), version: identifier(payload.version, "parameter version"), data_type: pythonString(defaultIfAbsent(payload, "data_type", "time_series")), unit: pythonString(defaultIfAbsent(payload, "unit", "")), expected_frequency: pythonString(defaultIfAbsent(payload, "expected_frequency", "10min")), source: { adapter: pythonString(defaultIfAbsent(source, "adapter", "synthetic")), mode: choice(defaultIfAbsent(source, "mode", "direct_column"), ["direct_column", "sql", "derived"], "parameter source mode"), source_metric: optionalString(source.source_metric, "source_metric"), source_group: optionalString(source.source_group, "source_group"), measurement: optionalString(source.measurement, "measurement"), field: optionalString(source.field, "field"), tags: stringMap(defaultIfAbsent(source, "tags", {}), "source tags"), schema: optionalString(aliasIfAbsent(source, "schema", "schema_name"), "schema"), table: optionalString(source.table, "table"), time_column: optionalString(source.time_column, "time_column"), value_column: optionalString(source.value_column, "value_column"), metric_name_column: optionalString(source.metric_name_column, "metric_name_column"), metric_name: optionalString(source.metric_name, "metric_name"), unit_column: optionalString(source.unit_column, "unit_column"), unit: optionalString(aliasIfAbsent(source, "unit", "source_unit"), "source unit"), filters: stringMap(defaultIfAbsent(source, "filters", {}), "source filters"), sql: optionalString(source.sql, "source sql"), params: object(defaultIfAbsent(source, "params", {}), "source params") }, time_semantics: { event_time_field: pythonString(defaultIfAbsent(time, "event_time_field", "event_time")), ingested_at_field: pythonString(defaultIfAbsent(time, "ingested_at_field", "ingested_at")), timezone: pythonString(defaultIfAbsent(time, "timezone", "Asia/Shanghai")), availability: normalizeAvailability(time.availability) }, availability_sla: normalizeAvailabilitySla(payload.availability_sla), value_field: pythonString(defaultIfAbsent(payload, "value_field", "value")), quality_rules: normalizeQualityRules(object(defaultIfAbsent(payload, "quality_rules", {}), "parameter quality_rules")), rounding: normalizeRounding(payload.rounding), owner: pythonString(defaultIfAbsent(payload, "owner", "demo")) };
 }
 
-function normalizeOperator(payload) { exactKeys(payload, ["schema_version", "project", "name", "version", "type", "function_hash", "entrypoint", "code_hash", "package_uri", "code_artifact", "input_schema", "output_schema", "config_schema", "runtime", "resources", "deterministic", "supports_batch", "supports_online", "owner"], ["name", "version"], "operator"); const artifact = payload.code_artifact == null ? null : normalizeCodeArtifact(payload.code_artifact); const normalized = { schema_version: pythonString(defaultIfAbsent(payload, "schema_version", "ml_data_platform.operator/v1")), project: identifier(defaultIfAbsent(payload, "project", "default"), "operator project"), name: identifier(payload.name, "operator name"), version: identifier(payload.version, "operator version"), type: choice(defaultIfAbsent(payload, "type", "standard"), ["standard", "custom_python", "spark_udf", "feature"], "operator type"), function_hash: pythonString(defaultIfAbsent(payload, "function_hash", "demo")), entrypoint: optionalString(payload.entrypoint, "operator entrypoint"), code_hash: optionalString(payload.code_hash, "operator code_hash"), package_uri: optionalString(payload.package_uri, "operator package_uri"), code_artifact: artifact, input_schema: object(defaultIfAbsent(payload, "input_schema", {}), "operator input_schema"), output_schema: object(defaultIfAbsent(payload, "output_schema", {}), "operator output_schema"), config_schema: object(defaultIfAbsent(payload, "config_schema", {}), "operator config_schema"), runtime: object(defaultIfAbsent(payload, "runtime", {}), "operator runtime"), resources: object(defaultIfAbsent(payload, "resources", {}), "operator resources"), deterministic: bool(defaultIfAbsent(payload, "deterministic", true), "operator deterministic"), supports_batch: bool(defaultIfAbsent(payload, "supports_batch", true), "operator supports_batch"), supports_online: bool(defaultIfAbsent(payload, "supports_online", false), "operator supports_online"), owner: pythonString(defaultIfAbsent(payload, "owner", "demo")) }; if (artifact && normalized.code_hash !== artifact.sha256) throw new Error("operator code_hash must equal code_artifact.sha256"); if (artifact && normalized.package_uri !== artifact.uri) throw new Error("operator package_uri must equal code_artifact.uri"); return normalized; }
+function normalizeOperator(payload) { object(payload, "operator"); const artifact = payload.code_artifact == null ? null : normalizeCodeArtifact(payload.code_artifact); const normalized = { schema_version: pythonString(defaultIfAbsent(payload, "schema_version", "ml_data_platform.operator/v1")), project: identifier(defaultIfAbsent(payload, "project", "default"), "operator project"), name: identifier(payload.name, "operator name"), version: identifier(payload.version, "operator version"), type: choice(defaultIfAbsent(payload, "type", "standard"), ["standard", "custom_python", "spark_udf", "feature"], "operator type"), function_hash: pythonString(defaultIfAbsent(payload, "function_hash", "demo")), entrypoint: optionalString(payload.entrypoint, "operator entrypoint"), code_hash: optionalString(payload.code_hash, "operator code_hash"), package_uri: optionalString(payload.package_uri, "operator package_uri"), code_artifact: artifact, input_schema: object(defaultIfAbsent(payload, "input_schema", {}), "operator input_schema"), output_schema: object(defaultIfAbsent(payload, "output_schema", {}), "operator output_schema"), config_schema: object(defaultIfAbsent(payload, "config_schema", {}), "operator config_schema"), runtime: object(defaultIfAbsent(payload, "runtime", {}), "operator runtime"), resources: object(defaultIfAbsent(payload, "resources", {}), "operator resources"), deterministic: bool(defaultIfAbsent(payload, "deterministic", true), "operator deterministic"), supports_batch: bool(defaultIfAbsent(payload, "supports_batch", true), "operator supports_batch"), supports_online: bool(defaultIfAbsent(payload, "supports_online", false), "operator supports_online"), owner: pythonString(defaultIfAbsent(payload, "owner", "demo")) }; if (artifact && normalized.code_hash !== artifact.sha256) throw new Error("operator code_hash must equal code_artifact.sha256"); if (artifact && normalized.package_uri !== artifact.uri) throw new Error("operator package_uri must equal code_artifact.uri"); return normalized; }
 function normalizeRegistryOperator(payload) { const value = object(payload, "operator"); if (!hasOwn(value, "deleted_at")) return normalizeOperator(value); const { deleted_at, ...contract } = value; void deleted_at; return normalizeOperator(contract); }
 function normalizeFeature(payload) { exactKeys(payload, ["schema_version", "project", "name", "version", "inputs", "operator", "operator_version", "config", "output_column", "output_dtype", "offline_online_supported", "owner", "description"], ["name", "version", "inputs", "operator", "operator_version", "output_column"], "feature"); const project = identifier(defaultIfAbsent(payload, "project", "default"), "feature project"); const inputs = objectList(payload.inputs, "feature inputs").map((item) => parameterRef(item, project)); if (!inputs.length) throw new Error("feature inputs must not be empty"); unique(inputs.map(parameterReferenceKey), "feature inputs"); if (typeof payload.output_column !== "string" || !outputColumnPattern.test(payload.output_column)) throw new Error("feature output_column is invalid"); return { schema_version: pythonString(defaultIfAbsent(payload, "schema_version", "ml_data_platform.feature/v1")), project, name: identifier(payload.name, "feature name"), version: identifier(payload.version, "feature version"), inputs, operator: identifier(payload.operator, "feature operator"), operator_version: identifier(payload.operator_version, "feature operator_version"), config: object(defaultIfAbsent(payload, "config", {}), "feature config"), output_column: payload.output_column, output_dtype: pythonString(defaultIfAbsent(payload, "output_dtype", "float64")), offline_online_supported: bool(defaultIfAbsent(payload, "offline_online_supported", true), "offline_online_supported"), owner: pythonString(defaultIfAbsent(payload, "owner", "demo")), description: pythonString(defaultIfAbsent(payload, "description", "")) }; }
 function normalizeFeatureSet(payload) { exactKeys(payload, ["schema_version", "project", "name", "version", "features", "owner", "description"], ["name", "version", "features"], "feature set"); const features = objectList(payload.features, "feature set features").map((item) => ref(item, "feature reference")); if (!features.length) throw new Error("feature_set features must not be empty"); unique(features.map(referenceKey), "feature_set features"); return { schema_version: pythonString(defaultIfAbsent(payload, "schema_version", "ml_data_platform.feature_set/v1")), project: identifier(defaultIfAbsent(payload, "project", "default"), "feature set project"), name: identifier(payload.name, "feature set name"), version: identifier(payload.version, "feature set version"), features, owner: pythonString(defaultIfAbsent(payload, "owner", "demo")), description: pythonString(defaultIfAbsent(payload, "description", "")) }; }

package/runtime/business-client/src/cli.js

@@ -14,10 +14,22 @@ const BUSINESS_COMMANDS = new Set([
   "configure", "show-config", "health", "list-parameters", "list-operators", "list-features",
   "list-feature-sets", "list-datasets", "get-dataset", "list-jobs", "resolve-manifest",
   "resolve-dataset", "build-dataset", "build-registered-dataset",
+  "get-parameter", "get-feature", "get-feature-set", "get-operator",
+  "delete-parameter", "delete-feature", "delete-feature-set",
+  "restore-parameter", "restore-feature", "restore-feature-set",
+  "get-parameter-lifecycle", "get-feature-lifecycle", "get-feature-set-lifecycle",
+  "list-parameter-references", "list-feature-references", "list-feature-set-references",
+  "list-parameter-versions", "list-feature-versions", "list-feature-set-versions", "list-operator-versions",
   "add-parameter", "add-feature", "add-feature-set", "add-operator", "publish-operator",
   "add-dataset", "update-dataset", "delete-dataset", "list-dataset-artifacts",
   "register-operator", "show-operator-specs", "delete-operator", "run-operator",
-  "get-job", "wait-job", "retry-job", "cancel-job", "get-dataset-artifact", "download-dataset-artifact", "fetch-inference-data", "apply",
+  "get-job", "wait-job", "retry-job", "cancel-job", "get-dataset-artifact", "download-dataset-artifact", "fetch-inference-data", "fetch-inference-context", "apply",
+  "register-trainer", "register-training-run", "validate-training-run", "submit-training-job", "get-training-job", "retry-training-job", "cancel-training-job",
+  "register-evaluation-config", "get-evaluation-config", "register-metric-definition", "get-metric-definition",
+  "register-executable-package", "verify-executable-package", "publish-executable-package",
+  "validate-evaluation-run", "submit-evaluation", "get-evaluation-run", "get-evaluation-job", "retry-evaluation-job", "cancel-evaluation-job", "list-evaluation-attempts",
+  "get-evaluation-result", "get-evaluation-result-metrics", "get-evaluation-result-artifacts", "summarize-evaluation-run", "get-evaluation-summary",
+  "create-model-package", "get-model-package", "cancel-model-package", "validate-model-artifact",
 ]);
 
 const COMMAND_USAGE = {
@@ -29,11 +41,31 @@ const COMMAND_USAGE = {
   "list-projects": "list-projects",
   "get-project": "get-project NAME",
   "delete-project": "delete-project NAME",
-  "list-parameters": "list-parameters [--project PROJECT] [-q QUERY] [--limit N] [--offset N]",
-  "list-operators": "list-operators [--project PROJECT] [-q QUERY] [--limit N] [--offset N]",
-  "list-features": "list-features [--project PROJECT] [-q QUERY] [--limit N] [--offset N]",
-  "list-feature-sets": "list-feature-sets [--project PROJECT] [-q QUERY] [--limit N] [--offset N]",
-  "list-datasets": "list-datasets [--project PROJECT] [-q QUERY] [--limit N] [--offset N] [--include-deleted]",
+  "list-parameters": "list-parameters [--project PROJECT] [--name NAME] [--version VERSION] [-q QUERY] [--limit N] [--offset N] [--all]",
+  "list-operators": "list-operators [--project PROJECT] [--name NAME] [--version VERSION] [-q QUERY] [--limit N] [--offset N] [--all]",
+  "list-features": "list-features [--project PROJECT] [--name NAME] [--version VERSION] [-q QUERY] [--limit N] [--offset N] [--all]",
+  "list-feature-sets": "list-feature-sets [--project PROJECT] [--name NAME] [--version VERSION] [-q QUERY] [--limit N] [--offset N] [--all]",
+  "list-datasets": "list-datasets [--project PROJECT] [--dataset-id ID] [--dataset-version VERSION] [-q QUERY] [--limit N] [--offset N] [--include-deleted] [--all]",
+  "get-parameter": "get-parameter NAME VERSION [--project PROJECT]",
+  "get-feature": "get-feature NAME VERSION [--project PROJECT]",
+  "get-feature-set": "get-feature-set NAME VERSION [--project PROJECT]",
+  "get-operator": "get-operator NAME VERSION [--project PROJECT]",
+  "delete-parameter": "delete-parameter NAME VERSION [--project PROJECT] [--actor ACTOR] [--reason TEXT] [--idempotency-key KEY]",
+  "delete-feature": "delete-feature NAME VERSION [--project PROJECT] [--actor ACTOR] [--reason TEXT] [--idempotency-key KEY]",
+  "delete-feature-set": "delete-feature-set NAME VERSION [--project PROJECT] [--actor ACTOR] [--reason TEXT] [--idempotency-key KEY]",
+  "restore-parameter": "restore-parameter NAME VERSION [--project PROJECT] [--actor ACTOR] [--reason TEXT] [--idempotency-key KEY]",
+  "restore-feature": "restore-feature NAME VERSION [--project PROJECT] [--actor ACTOR] [--reason TEXT] [--idempotency-key KEY]",
+  "restore-feature-set": "restore-feature-set NAME VERSION [--project PROJECT] [--actor ACTOR] [--reason TEXT] [--idempotency-key KEY]",
+  "get-parameter-lifecycle": "get-parameter-lifecycle NAME VERSION [--project PROJECT]",
+  "get-feature-lifecycle": "get-feature-lifecycle NAME VERSION [--project PROJECT]",
+  "get-feature-set-lifecycle": "get-feature-set-lifecycle NAME VERSION [--project PROJECT]",
+  "list-parameter-references": "list-parameter-references NAME VERSION [--project PROJECT] [--direct]",
+  "list-feature-references": "list-feature-references NAME VERSION [--project PROJECT] [--direct]",
+  "list-feature-set-references": "list-feature-set-references NAME VERSION [--project PROJECT] [--direct]",
+  "list-parameter-versions": "list-parameter-versions NAME [--project PROJECT] [--limit N] [--offset N] [--all]",
+  "list-feature-versions": "list-feature-versions NAME [--project PROJECT] [--limit N] [--offset N] [--all]",
+  "list-feature-set-versions": "list-feature-set-versions NAME [--project PROJECT] [--limit N] [--offset N] [--all]",
+  "list-operator-versions": "list-operator-versions NAME [--project PROJECT] [--limit N] [--offset N] [--all]",
   "add-parameter": "add-parameter SPEC_JSON",
   "add-feature": "add-feature SPEC_JSON",
   "add-feature-set": "add-feature-set SPEC_JSON",
@@ -44,7 +76,7 @@ const COMMAND_USAGE = {
   "delete-dataset": "delete-dataset DATASET_ID DATASET_VERSION [--project PROJECT]",
   "list-dataset-artifacts": "list-dataset-artifacts [--project PROJECT] [--dataset-id ID] [--dataset-version VERSION] [--include-deleted] [--limit N] [--offset N]",
   "get-dataset": "get-dataset DATASET_ID DATASET_VERSION [--project PROJECT] [--include-deleted]",
-  "list-jobs": "list-jobs [-q QUERY] [--limit N] [--offset N]",
+  "list-jobs": "list-jobs [filters] [-q QUERY] [--limit N] [--offset N] [--all]",
   "resolve-manifest": "resolve-manifest MANIFEST [--out PATH]",
   "resolve-dataset": "resolve-dataset DATASET_ID DATASET_VERSION [--project PROJECT] [--out PATH]",
   "build-dataset": "build-dataset MANIFEST [--engine chronon] [--source-mode direct] [--upload-chronon-metadata] [--partition-duration DURATION] [--max-parallelism N] [--no-resume] [--wait] [--poll-interval SECONDS] [--wait-timeout-seconds SECONDS]",
@@ -58,8 +90,39 @@ const COMMAND_USAGE = {
   "delete-operator": "delete-operator NAME VERSION [--project PROJECT]",
   "run-operator": "run-operator NAME VERSION [--project PROJECT] [--config JSON]",
   "get-dataset-artifact": "get-dataset-artifact DATASET_ID MANIFEST_HASH [--project PROJECT]",
-  "download-dataset-artifact": "download-dataset-artifact DATASET_ID MANIFEST_HASH [--project PROJECT] --out-dir PATH [--force]",
+  "download-dataset-artifact": "download-dataset-artifact DATASET_ID MANIFEST_HASH [--project PROJECT] --out-dir PATH [--file PATH] [--force]",
   "fetch-inference-data": "fetch-inference-data MANIFEST --cutoff-time TIMESTAMP [--max-workers N] [--max-source-lag-hours HOURS] [--no-validate-freshness] [--allow-missing]",
+  "fetch-inference-context": "fetch-inference-context REQUEST_JSON",
+  "register-trainer": "register-trainer DEFINITION_JSON",
+  "register-training-run": "register-training-run RUN_JSON",
+  "validate-training-run": "validate-training-run RUN_JSON",
+  "submit-training-job": "submit-training-job REQUEST_JSON",
+  "get-training-job": "get-training-job JOB_ID",
+  "retry-training-job": "retry-training-job JOB_ID",
+  "cancel-training-job": "cancel-training-job JOB_ID",
+  "register-evaluation-config": "register-evaluation-config CONFIG_JSON",
+  "get-evaluation-config": "get-evaluation-config NAME VERSION",
+  "register-metric-definition": "register-metric-definition DEFINITION_JSON",
+  "get-metric-definition": "get-metric-definition NAME VERSION",
+  "register-executable-package": "register-executable-package SPEC_JSON",
+  "verify-executable-package": "verify-executable-package NAME VERSION",
+  "publish-executable-package": "publish-executable-package NAME VERSION",
+  "validate-evaluation-run": "validate-evaluation-run REQUEST_JSON",
+  "submit-evaluation": "submit-evaluation REQUEST_JSON",
+  "get-evaluation-run": "get-evaluation-run RUN_ID",
+  "get-evaluation-job": "get-evaluation-job JOB_ID",
+  "retry-evaluation-job": "retry-evaluation-job JOB_ID",
+  "cancel-evaluation-job": "cancel-evaluation-job JOB_ID",
+  "list-evaluation-attempts": "list-evaluation-attempts JOB_ID",
+  "get-evaluation-result": "get-evaluation-result RESULT_ID",
+  "get-evaluation-result-metrics": "get-evaluation-result-metrics RESULT_ID",
+  "get-evaluation-result-artifacts": "get-evaluation-result-artifacts RESULT_ID",
+  "summarize-evaluation-run": "summarize-evaluation-run RUN_ID",
+  "get-evaluation-summary": "get-evaluation-summary SUMMARY_ID",
+  "create-model-package": "create-model-package REQUEST_JSON",
+  "get-model-package": "get-model-package PACKAGE_ID [--package-version VERSION]",
+  "cancel-model-package": "cancel-model-package PACKAGE_ID [--package-version VERSION]",
+  "validate-model-artifact": "validate-model-artifact ARTIFACT_ID",
   apply: "apply CATALOG_DIRECTORY [--dry-run] [--project PROJECT]",
 };
 
@@ -143,6 +206,17 @@ function datasetEndpoint(project, datasetId, datasetVersion) {
   return `/datasets/${encodeURIComponent(project)}/${encodeURIComponent(datasetId)}/${encodeURIComponent(datasetVersion)}`;
 }
 
+function lifecycleResource(command) {
+  if (command.includes("feature-set")) return "feature-sets";
+  if (command.includes("parameter")) return "parameters";
+  if (command.includes("feature")) return "features";
+  throw new Error(`unsupported lifecycle command: ${command}`);
+}
+
+function lifecycleEndpoint(resource, project, name, version, suffix = "") {
+  return `/registry/${resource}/${encodeURIComponent(project)}/${encodeURIComponent(name)}/${encodeURIComponent(version)}${suffix}`;
+}
+
 async function registeredDataset(api, project, datasetId, datasetVersion, includeDeleted = false) {
   const payload = await api.get(datasetEndpoint(project, datasetId, datasetVersion), { include_deleted: includeDeleted });
   if (!payload || typeof payload !== "object" || Array.isArray(payload)) throw new Error("registered dataset response must be a JSON object");
@@ -245,17 +319,55 @@ async function runBusinessCli(argv) {
   } else if (options.command === "get-dataset") {
     const datasetId = positional(rest, "dataset id"); const datasetVersion = positional(rest, "dataset version"); const project = take(rest, "--project", "default");
     result = await registeredDataset(client(options), project, datasetId, datasetVersion, boolean(rest, "--include-deleted"));
-  }
-  else if (options.command.startsWith("list-") && !["list-jobs", "list-dataset-artifacts"].includes(options.command)) {
+  } else if (["get-parameter", "get-feature", "get-feature-set", "get-operator"].includes(options.command)) {
+    const resource = options.command.slice(4);
+    const endpoint = resource === "feature-set" ? "feature-sets" : `${resource}s`;
+    const name = positional(rest, `${resource} name`);
+    const version = positional(rest, `${resource} version`);
+    const project = take(rest, "--project", "default");
+    result = await client(options).get(`/${endpoint}/${encodeURIComponent(project)}/${encodeURIComponent(name)}/${encodeURIComponent(version)}`);
+  } else if (/^delete-(parameter|feature|feature-set)$/.test(options.command)) {
+    const name = positional(rest, "resource name"); const version = positional(rest, "resource version"); const project = take(rest, "--project", "default");
+    result = await client(options).delete(lifecycleEndpoint(lifecycleResource(options.command), project, name, version), {
+      actor: take(rest, "--actor"), reason: take(rest, "--reason"), idempotency_key: take(rest, "--idempotency-key"),
+    });
+  } else if (/^restore-(parameter|feature|feature-set)$/.test(options.command)) {
+    const name = positional(rest, "resource name"); const version = positional(rest, "resource version"); const project = take(rest, "--project", "default");
+    result = await client(options).post(lifecycleEndpoint(lifecycleResource(options.command), project, name, version, "/restore"), {
+      actor: take(rest, "--actor") || "anonymous", reason: take(rest, "--reason", ""), idempotency_key: take(rest, "--idempotency-key"),
+    });
+  } else if (/^get-(parameter|feature|feature-set)-lifecycle$/.test(options.command)) {
+    const name = positional(rest, "resource name"); const version = positional(rest, "resource version"); const project = take(rest, "--project", "default");
+    result = await client(options).get(lifecycleEndpoint(lifecycleResource(options.command), project, name, version, "/lifecycle"));
+  } else if (/^list-(parameter|feature|feature-set)-references$/.test(options.command)) {
+    const name = positional(rest, "resource name"); const version = positional(rest, "resource version"); const project = take(rest, "--project", "default");
+    result = await client(options).get(lifecycleEndpoint(lifecycleResource(options.command), project, name, version, "/references"), { transitive: !boolean(rest, "--direct") });
+  } else if (["list-parameter-versions", "list-feature-versions", "list-feature-set-versions", "list-operator-versions"].includes(options.command)) {
+    const resource = options.command.replace(/^list-/, "").replace(/-versions$/, "");
+    const endpoint = resource === "feature-set" ? "feature-sets" : `${resource}s`;
+    const name = positional(rest, `${resource} name`);
+    const project = take(rest, "--project", "default");
+    const allPages = boolean(rest, "--all");
+    const rawLimit = take(rest, "--limit"); const rawOffset = take(rest, "--offset");
+    if (allPages && (rawLimit !== undefined || rawOffset !== undefined)) throw new Error("--all cannot be combined with --limit or --offset");
+    if (allPages) result = await fetchAll(client(options), `/${endpoint}/${encodeURIComponent(project)}/${encodeURIComponent(name)}`);
+    else { const limit = Number(rawLimit ?? 50); const offset = Number(rawOffset ?? 0); if (!Number.isInteger(limit) || limit < 1 || limit > 500) throw new Error("limit must be between 1 and 500"); if (!Number.isInteger(offset) || offset < 0) throw new Error("offset must be >= 0"); result = await client(options).get(`/${endpoint}/${encodeURIComponent(project)}/${encodeURIComponent(name)}`, { limit, offset }); }
+  } else if (options.command.startsWith("list-") && !["list-jobs", "list-dataset-artifacts"].includes(options.command)) {
     const endpoints = { "list-parameters": "/parameters", "list-operators": "/operators", "list-features": "/features", "list-feature-sets": "/feature-sets", "list-datasets": "/datasets" };
     const project = take(rest, "--project");
+    const name = take(rest, "--name"); const version = take(rest, "--version");
     const query = take(rest, "--q", take(rest, "-q")); const includeDeleted = options.command === "list-datasets" && boolean(rest, "--include-deleted"); const rawLimit = take(rest, "--limit"); const rawOffset = take(rest, "--offset");
-    if (rawLimit !== undefined || rawOffset !== undefined) { const limit = Number(rawLimit ?? 50); const offset = Number(rawOffset ?? 0); if (!Number.isInteger(limit) || limit < 1 || limit > 500) throw new Error("limit must be between 1 and 500"); if (!Number.isInteger(offset) || offset < 0) throw new Error("offset must be >= 0"); result = await client(options).get(endpoints[options.command], { q: query, limit, offset, project, include_deleted: includeDeleted }); }
-    else result = await fetchAll(client(options), endpoints[options.command], { q: query, project, include_deleted: includeDeleted });
+    const allPages = boolean(rest, "--all");
+    if (allPages && (rawLimit !== undefined || rawOffset !== undefined)) throw new Error("--all cannot be combined with --limit or --offset");
+    if (allPages) result = await fetchAll(client(options), endpoints[options.command], { q: query, project, name, version, include_deleted: includeDeleted });
+    else { const limit = Number(rawLimit ?? 50); const offset = Number(rawOffset ?? 0); if (!Number.isInteger(limit) || limit < 1 || limit > 500) throw new Error("limit must be between 1 and 500"); if (!Number.isInteger(offset) || offset < 0) throw new Error("offset must be >= 0"); result = await client(options).get(endpoints[options.command], { q: query, limit, offset, project, name, version, include_deleted: includeDeleted }); }
   } else if (options.command === "list-jobs") {
     const query = take(rest, "--q", take(rest, "-q")); const rawLimit = take(rest, "--limit"); const rawOffset = take(rest, "--offset");
-    if (rawLimit !== undefined || rawOffset !== undefined) { const limit = Number(rawLimit ?? 50); const offset = Number(rawOffset ?? 0); if (!Number.isInteger(limit) || limit < 1 || limit > 500) throw new Error("limit must be between 1 and 500"); if (!Number.isInteger(offset) || offset < 0) throw new Error("offset must be >= 0"); result = await client(options).get("/jobs", { q: query, limit, offset }); }
-    else result = await fetchAll(client(options), "/jobs", { q: query });
+    const filters = {}; for (const field of ["project", "dataset-id", "dataset-version", "manifest-hash", "status", "parent-job-id", "created-from", "created-to", "updated-from", "updated-to"]) filters[field.replaceAll("-", "_")] = take(rest, `--${field}`);
+    const allPages = boolean(rest, "--all");
+    if (allPages && (rawLimit !== undefined || rawOffset !== undefined)) throw new Error("--all cannot be combined with --limit or --offset");
+    if (allPages) result = await fetchAll(client(options), "/jobs", { q: query, ...filters });
+    else { const limit = Number(rawLimit ?? 50); const offset = Number(rawOffset ?? 0); if (!Number.isInteger(limit) || limit < 1 || limit > 500) throw new Error("limit must be between 1 and 500"); if (!Number.isInteger(offset) || offset < 0) throw new Error("offset must be >= 0"); result = await client(options).get("/jobs", { q: query, limit, offset, ...filters }); }
   }
   else if (options.command === "resolve-manifest") {
     const manifest = positional(rest, "manifest");
@@ -314,11 +426,49 @@ async function runBusinessCli(argv) {
   } else if (options.command === "download-dataset-artifact") {
     const dataset = positional(rest, "dataset id"); const hash = positional(rest, "manifest hash"); const project = take(rest, "--project", "default"); const outDir = take(rest, "--out-dir");
     if (!outDir) throw new Error("--out-dir is required");
-    result = await client(options).downloadDatasetArtifact(project, dataset, hash, resolvedPath(outDir), boolean(rest, "--force"));
+    const files = [];
+    while (rest.includes("--file")) files.push(take(rest, "--file"));
+    result = files.length
+      ? await client(options).downloadDatasetArtifactFiles(project, dataset, hash, files, resolvedPath(outDir), boolean(rest, "--force"))
+      : await client(options).downloadDatasetArtifact(project, dataset, hash, resolvedPath(outDir), boolean(rest, "--force"));
   } else if (options.command === "fetch-inference-data") {
     const manifest = positional(rest, "manifest"); const cutoffTime = take(rest, "--cutoff-time"); if (!cutoffTime) throw new Error("--cutoff-time is required");
     const realtime = {}; const maxWorkers = take(rest, "--max-workers"); const maxLag = take(rest, "--max-source-lag-hours"); if (maxWorkers !== undefined) { realtime.max_workers = integer(maxWorkers, "--max-workers"); if (realtime.max_workers < 1) throw new Error("--max-workers must be at least 1"); } if (maxLag !== undefined) { realtime.max_source_lag_hours = finiteNumber(maxLag, "--max-source-lag-hours"); if (realtime.max_source_lag_hours < 0) throw new Error("--max-source-lag-hours must be non-negative"); } if (boolean(rest, "--no-validate-freshness")) realtime.validate_freshness = false; if (boolean(rest, "--allow-missing")) realtime.allow_missing = true;
     const request = { manifest: readDataset(manifest), cutoff_time: cutoffTime }; if (Object.keys(realtime).length) request.realtime_fetch = realtime; result = await client(options).post("/inference-data/fetch", request);
+  } else if (options.command === "fetch-inference-context") {
+    result = await client(options).post("/inference-data/context", readSpec(positional(rest, "request JSON")));
+  } else if ({
+    "register-trainer": "/trainer-definitions", "register-training-run": "/training-runs", "validate-training-run": "/training-runs/validate",
+    "submit-training-job": "/training-jobs", "register-evaluation-config": "/evaluation-configs", "register-metric-definition": "/metric-definitions",
+    "register-executable-package": "/executable-packages", "validate-evaluation-run": "/evaluation-runs/validate", "submit-evaluation": "/evaluation-runs",
+    "create-model-package": "/model-packages",
+  }[options.command]) {
+    const endpoint = { "register-trainer": "/trainer-definitions", "register-training-run": "/training-runs", "validate-training-run": "/training-runs/validate", "submit-training-job": "/training-jobs", "register-evaluation-config": "/evaluation-configs", "register-metric-definition": "/metric-definitions", "register-executable-package": "/executable-packages", "validate-evaluation-run": "/evaluation-runs/validate", "submit-evaluation": "/evaluation-runs", "create-model-package": "/model-packages" }[options.command];
+    result = await client(options).post(endpoint, readSpec(positional(rest, "request JSON")));
+  } else if (/^(get|retry|cancel)-training-job$/.test(options.command)) {
+    const jobId = positional(rest, "training job id"); const endpoint = `/training-jobs/${encodeURIComponent(jobId)}`;
+    result = options.command === "get-training-job" ? await client(options).get(endpoint) : await client(options).post(`${endpoint}/${options.command.split("-")[0]}`);
+  } else if (/^(get|retry|cancel)-evaluation-job$/.test(options.command) || options.command === "list-evaluation-attempts") {
+    const jobId = positional(rest, "evaluation job id"); const endpoint = `/evaluation-jobs/${encodeURIComponent(jobId)}`;
+    if (options.command === "get-evaluation-job") result = await client(options).get(endpoint);
+    else if (options.command === "list-evaluation-attempts") result = await client(options).get(`${endpoint}/attempts`);
+    else result = await client(options).post(`${endpoint}/${options.command.split("-")[0]}`);
+  } else if (options.command === "get-evaluation-run") result = await client(options).get(`/evaluation-runs/${encodeURIComponent(positional(rest, "evaluation run id"))}`);
+  else if (options.command === "summarize-evaluation-run") result = await client(options).post(`/evaluation-runs/${encodeURIComponent(positional(rest, "evaluation run id"))}/summarize`);
+  else if (options.command === "get-evaluation-summary") result = await client(options).get(`/evaluation-summaries/${encodeURIComponent(positional(rest, "evaluation summary id"))}`);
+  else if (/^get-evaluation-result(?:-metrics|-artifacts)?$/.test(options.command)) {
+    const resultId = positional(rest, "evaluation result id"); const suffix = options.command.endsWith("-metrics") ? "/metrics" : options.command.endsWith("-artifacts") ? "/artifacts" : "";
+    result = await client(options).get(`/evaluation-results/${encodeURIComponent(resultId)}${suffix}`);
+  } else if (/^(get-evaluation-config|get-metric-definition)$/.test(options.command)) {
+    const name = positional(rest, "resource name"); const version = positional(rest, "resource version"); const base = options.command === "get-evaluation-config" ? "evaluation-configs" : "metric-definitions";
+    result = await client(options).get(`/${base}/${encodeURIComponent(name)}/${encodeURIComponent(version)}`);
+  } else if (/^(verify|publish)-executable-package$/.test(options.command)) {
+    const name = positional(rest, "package name"); const version = positional(rest, "package version"); const action = options.command.split("-")[0];
+    result = await client(options).post(`/executable-packages/${encodeURIComponent(name)}/${encodeURIComponent(version)}/${action}`);
+  } else if (options.command === "validate-model-artifact") result = await client(options).get(`/model-artifacts/${encodeURIComponent(positional(rest, "model artifact id"))}/validate`);
+  else if (/^(get|cancel)-model-package$/.test(options.command)) {
+    const packageId = positional(rest, "model package id"); const params = { package_version: take(rest, "--package-version") }; const endpoint = `/model-packages/${encodeURIComponent(packageId)}`;
+    result = options.command === "get-model-package" ? await client(options).get(endpoint, params) : await client(options).post(`${endpoint}/cancel`, undefined, params);
   } else if (options.command === "apply") {
     const directory = positional(rest, "catalog directory"); const dryRun = boolean(rest, "--dry-run"); const targetProject = take(rest, "--project");
     result = await applyCatalog(loadCatalog(resolvedPath(directory)), client(options), dryRun, targetProject);

package/runtime/business-client/src/http.js

@@ -95,6 +95,52 @@ class PlatformApiClient {
       fs.rmSync(temporaryDir, { recursive: true, force: true });
     }
   }
+
+  async downloadDatasetArtifactFiles(project, datasetId, manifestHash, relativePaths, outputDir, force = false) {
+    const files = [...new Set((relativePaths || []).map((value) => String(value)))];
+    if (!files.length) throw new Error("at least one artifact file is required");
+    for (const relative of files) {
+      const normalized = relative.replace(/\\/g, "/");
+      const parts = normalized.split("/");
+      if (!normalized || normalized.startsWith("/") || normalized.endsWith("/") || parts.includes("..")) {
+        throw new Error(`artifact path escapes output directory: ${JSON.stringify(relative)}`);
+      }
+    }
+    const targetRoot = path.resolve(expandHome(outputDir));
+    if (fs.existsSync(targetRoot) && fs.readdirSync(targetRoot).length) {
+      if (!force) throw new Error(`download output directory is not empty: ${targetRoot}`);
+      fs.rmSync(targetRoot, { recursive: true, force: true });
+    }
+    fs.mkdirSync(targetRoot, { recursive: true });
+    try {
+      for (const relative of files) {
+        const normalized = relative.replace(/\\/g, "/");
+        const parts = normalized.split("/");
+        const destination = path.resolve(targetRoot, ...parts);
+        if (!normalized || normalized.startsWith("/") || normalized.endsWith("/")
+          || parts.includes("..") || destination !== targetRoot && !destination.startsWith(`${targetRoot}${path.sep}`)) {
+          throw new Error(`artifact path escapes output directory: ${JSON.stringify(relative)}`);
+        }
+        fs.mkdirSync(path.dirname(destination), { recursive: true });
+        const endpoint = `/dataset-artifacts/${encodeURIComponent(project)}/${encodeURIComponent(datasetId)}/${encodeURIComponent(manifestHash)}/files/${parts.map(encodeURIComponent).join("/")}`;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+          const response = await fetch(this.url(endpoint), { headers: { Accept: "application/octet-stream" }, signal: controller.signal });
+          if (!response.ok) {
+            let detail = response.statusText;
+            try { detail = JSON.parse(await response.text())?.detail ?? detail; } catch (_) { /* status text */ }
+            throw new Error(`artifact file download failed: HTTP ${response.status}: ${detail}`);
+          }
+          fs.writeFileSync(destination, Buffer.from(await response.arrayBuffer()), { flag: "wx" });
+        } finally { clearTimeout(timer); }
+      }
+    } catch (error) {
+      fs.rmSync(targetRoot, { recursive: true, force: true });
+      throw error;
+    }
+    return { project, dataset_id: datasetId, manifest_hash: manifestHash, output_dir: targetRoot, file_count: files.length, files: files.sort() };
+  }
 }
 
 function contentLength(response) {

package/scripts/lib.js

@@ -152,19 +152,21 @@ function loadRelease(packageRoot = PACKAGE_ROOT) {
       || requirements.os.join(",") !== "darwin,linux") {
     throw new Error("release manifest 缺少有效 runtime requirements");
   }
-  const skill = release.skills && release.skills[SKILL_NAME];
-  if (!skill || skill.path !== `skills/${SKILL_NAME}` || !isSha256(skill.sha256)
-      || !isSemver(skill.revision) || typeof skill.requires_cli !== "string") {
+  const skills = release.skills;
+  const skill = skills && skills[SKILL_NAME];
+  if (!skill || Object.keys(skills).length < 1) {
     throw new Error("release manifest 缺少有效 Skill 信息");
   }
+  for (const [name, item] of Object.entries(skills)) {
+    if (item.path !== `skills/${name}` || !isSha256(item.sha256)
+        || !isSemver(item.revision) || typeof item.requires_cli !== "string") throw new Error("release manifest 缺少有效 Skill 信息");
+  }
   const cli = release.cli;
   if (!cli || cli.name !== CLI_NAME || cli.path !== "runtime/business-client"
       || !isSemver(cli.version) || !isSha256(cli.sha256) || cli.entrypoint !== "src/cli.js") {
     throw new Error("release manifest 缺少有效 JavaScript CLI 信息");
   }
-  if (!versionSatisfies(cli.version, skill.requires_cli)) {
-    throw new Error("Skill requires_cli 与 release CLI version 不兼容");
-  }
+  for (const item of Object.values(skills)) if (!versionSatisfies(cli.version, item.requires_cli)) throw new Error("Skill requires_cli 与 release CLI version 不兼容");
   return release;
 }
 
@@ -201,7 +203,7 @@ function verifyPackage(packageRoot = PACKAGE_ROOT) {
   }
 
   assertTopLevel(path.join(packageRoot, "runtime"), new Set(["business-client"]), "runtime");
-  assertTopLevel(path.join(packageRoot, "skills"), new Set([SKILL_NAME]), "skills");
+  assertTopLevel(path.join(packageRoot, "skills"), new Set(Object.keys(release.skills)), "skills");
   const skillRoot = resolveInside(packageRoot, release.skills[SKILL_NAME].path);
   const clientRoot = resolveInside(packageRoot, release.cli.path);
   assertTopLevel(skillRoot, SKILL_TOP_LEVEL, "Skill");
@@ -232,11 +234,18 @@ function verifyPackage(packageRoot = PACKAGE_ROOT) {
   if (treeDigest(skillRoot) !== release.skills[SKILL_NAME].sha256) {
     throw new Error("Skill 目录摘要与 release manifest 不一致");
   }
+  for (const [name, item] of Object.entries(release.skills)) {
+    const root = resolveInside(packageRoot, item.path);
+    const actual = new Set(fs.readdirSync(root));
+    if (!actual.has("SKILL.md") || !actual.has("agents") || [...actual].some((entry) => !SKILL_TOP_LEVEL.has(entry))) throw new Error(`Skill ${name} 目录结构无效`);
+    rejectForbiddenTree(root, `Skill ${name}`);
+    if (treeDigest(root) !== item.sha256) throw new Error(`Skill ${name} 目录摘要与 release manifest 不一致`);
+  }
   if (treeDigest(clientRoot) !== release.cli.sha256) {
     throw new Error("JavaScript CLI 摘要与 release manifest 不一致");
   }
   if (!fs.existsSync(expectedEntry)) throw new Error("JavaScript CLI 入口不存在");
-  return { release, skillRoot, clientRoot };
+  return { release, skillRoot, skillRoots: Object.fromEntries(Object.entries(release.skills).map(([name, item]) => [name, resolveInside(packageRoot, item.path)])), clientRoot };
 }
 
 function status(options = {}, packageRoot = PACKAGE_ROOT) {
@@ -516,6 +525,9 @@ function installLocked(options, packageRoot, verified, paths) {
   let hadShim = false;
   let legacyBackupPath = null;
   let legacyMoved = false;
+  const additionalSkills = Object.keys(verified.release.skills).filter((name) => name !== SKILL_NAME);
+  const additionalBackups = [];
+  const installedAdditional = [];
   try {
     stagePersistentInstall(stagedInstall, packageRoot, verified);
     fs.cpSync(verified.skillRoot, stagedSkill, { recursive: true, errorOnExist: true });
@@ -540,6 +552,17 @@ function installLocked(options, packageRoot, verified, paths) {
     }
     fs.renameSync(stagedSkill, paths.target);
     skillMoved = true;
+    for (const name of additionalSkills) {
+      const target = path.join(paths.skillsDir, name);
+      const backup = path.join(paths.skillsDir, `.${name}.backup.${process.pid}.${Date.now()}`);
+      if (pathEntryExists(target)) {
+        if (!current?.skills?.[name] || current.skills[name].path !== target) throw new Error(`拒绝覆盖未托管 Skill: ${name}`);
+        fs.renameSync(target, backup);
+        additionalBackups.push({ target, backup });
+      }
+      fs.cpSync(verified.skillRoots[name], target, { recursive: true, errorOnExist: true });
+      installedAdditional.push(target);
+    }
     if (pathEntryExists(paths.shim)) {
       fs.renameSync(paths.shim, shimBackup);
       hadShim = true;
@@ -555,6 +578,7 @@ function installLocked(options, packageRoot, verified, paths) {
     removeOwnedDirectory(skillStaging, paths.skillsDir, `.${SKILL_NAME}.install.`);
     if (hadState) removeOwnedDirectory(stateBackup, paths.stateDir, ".backup.");
     if (hadSkill) removeOwnedDirectory(skillBackup, paths.skillsDir, `.${SKILL_NAME}.backup.`);
+    for (const { backup } of additionalBackups) fs.rmSync(backup, { recursive: true, force: true });
     if (hadShim) fs.rmSync(shimBackup, { force: true });
     const result = installationResult(
       options.migrateLegacy ? "migrated" : (current || (targetExists && !backingUpUnmanaged) ? "upgraded" : "installed"),
@@ -572,6 +596,8 @@ function installLocked(options, packageRoot, verified, paths) {
     if (hadShim && pathEntryExists(shimBackup)) fs.renameSync(shimBackup, paths.shim);
     if (skillMoved && pathEntryExists(paths.target)) removeOwnedDirectory(paths.target, paths.skillsDir, SKILL_NAME);
     if (hadSkill && pathEntryExists(skillBackup)) fs.renameSync(skillBackup, paths.target);
+    for (const target of installedAdditional.reverse()) fs.rmSync(target, { recursive: true, force: true });
+    for (const { target, backup } of additionalBackups.reverse()) if (pathEntryExists(backup)) fs.renameSync(backup, target);
     if (legacyMoved && legacyBackupPath && pathEntryExists(legacyBackupPath) && !pathEntryExists(paths.target)) {
       fs.renameSync(legacyBackupPath, paths.target);
     }
@@ -613,7 +639,7 @@ function stagePersistentInstall(target, packageRoot, verified) {
 }
 
 function buildInstallationRecord(paths, release) {
-  return {
+  const record = {
     schema_version: RECORD_SCHEMA,
     owner: { package: PACKAGE_NAME, installation_id: installationId(paths) },
     release_version: release.release_version,
@@ -637,11 +663,17 @@ function buildInstallationRecord(paths, release) {
     release_sha256: sha256File(path.join(paths.installRoot, "release.json")),
     policy_sha256: sha256File(path.join(paths.installRoot, "release-policy.json")),
   };
+  record.skills = Object.fromEntries(Object.entries(release.skills).map(([name, item]) => [name, {
+    name, revision: item.revision, requires_cli: item.requires_cli,
+    path: path.join(paths.skillsDir, name), sha256: item.sha256,
+  }]));
+  return record;
 }
 
 function assertInstalledState(paths, record, prewarm) {
   if (!digestEquals(paths.clientRoot, record.cli.sha256)) throw new Error("安装后的 CLI 摘要不匹配");
   if (!digestEquals(paths.target, record.skill.sha256)) throw new Error("安装后的 Skill 摘要不匹配");
+  for (const skill of Object.values(record.skills || {})) if (!digestEquals(skill.path, skill.sha256)) throw new Error(`安装后的 Skill 摘要不匹配: ${skill.name}`);
   if (sha256File(paths.shim) !== record.shim.sha256) throw new Error("安装后的 CLI shim 摘要不匹配");
   if (prewarm) assertRuntime(paths.dispatcher);
 }

package/skills/feature-management/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: feature-management
-description: Manage projects, versioned business feature assets, dataset rowsets and endpoint eligibility, and causal realtime feature reads through the deployed ML Platform API using the ml-platform CLI installed with the same release. Use when a business user asks an agent to manage an empty Project, define or change Parameter source contracts, author/package/register an Operator wheel, define single-column Features, order a FeatureSet, create a DatasetManifest or catalog, configure training/validation/test rowsets or abnormal-data endpoint exclusion, configure realtime freshness policy, run catalog dry-run/apply, build a dataset, fetch one inference row, or inspect an artifact without downloading the platform source repository. Do not use for model training, versioned Registry asset deletion, image builds, or Kubernetes deployment.
+description: Manage projects, versioned business feature assets and their lifecycle, dataset rowsets and endpoint eligibility, and causal realtime row or sequence-context reads through the deployed ML Platform API using the ml-platform CLI installed with the same release. Use when a business user asks an agent to manage an empty Project, define or change Parameter source contracts, author/package/register an Operator wheel, define single-column Features, order a FeatureSet, create a DatasetManifest or catalog, inspect references, soft-delete or restore a Parameter/Feature/FeatureSet version, configure training/validation/test rowsets or abnormal-data endpoint exclusion, configure realtime freshness policy, run catalog dry-run/apply, build a dataset, fetch inference data, or inspect an artifact without downloading the platform source repository. Do not use for model training, Operator/Dataset deletion, image builds, or Kubernetes deployment.
 ---
 
 # Feature Management
@@ -14,6 +14,34 @@ Operator ------> Feature -> FeatureSet -> DatasetManifest -> DatasetArtifact
 
 Treat `Recipe` and public `Feature.compute` as removed. Treat `computation_hash` as internal execution metadata, never as a business-managed asset.
 
+## Platform Role And Evidence Boundaries
+
+The ML Platform is a deterministic data-contract and data-delivery platform. It
+registers versioned source Parameters, runs approved deterministic Operators,
+orders single-column Features into FeatureSets, resolves DatasetManifests, and
+materializes batch DatasetArtifacts or serves one causal realtime inference row.
+It records versions, lineage, quality, missingness, freshness, and execution
+metadata so an algorithm project can consume data without owning source routing
+or cache details.
+
+It does not train, evaluate, or serve models; own complete business feature
+engineering; provision arbitrary source tables; or administer Kubernetes and
+platform services. Read
+[references/platform-capability-guide.md](references/platform-capability-guide.md)
+when the user needs the detailed platform boundary or evidence-level explanation.
+
+Keep these evidence rules active in every workflow:
+
+- Platform defaults and capabilities are not business evidence.
+- Dry-run, publish, resolve, build, metadata inspection, downloaded-file
+  inspection, and realtime fetch are separate evidence checkpoints; success at
+  one checkpoint does not imply success at the next.
+- `validation.ok=true` does not by itself prove source semantics, causal formula
+  correctness, Parquet contents, or numeric parity.
+- Dry-run, publish, and resolve may not detect a missing source relation. Do not
+  report source-backed success until build/fetch returns the required evidence,
+  and never rename a Parameter or remove fields merely to bypass a failed read.
+
 ## Load The Right Context
 
 1. Resolve the Skill root as the directory containing this `SKILL.md`.
@@ -89,6 +117,16 @@ Confirm:
 
 Separate preparation from mutation. Creating files and running local tests or `apply --dry-run` does not authorize publishing a wheel, changing the Registry, or submitting a build Job.
 
+Soft-delete and restore are separate Registry mutations. Before soft-deleting a
+Parameter, Feature, or FeatureSet version, inspect its lifecycle state and both
+direct and transitive references, report the affected immutable consumers, and
+obtain explicit authorization for the exact `project/name:version`. Supply an
+actor, reason, and stable idempotency key. Soft deletion preserves historical
+references and hashes but hides the version from normal discovery and prevents
+new consumers from binding it. Restore only after checking that all of the
+resource's own dependencies are active. Never describe these operations as
+physical deletion.
+
 A label such as "10-minute mean" confirms neither its input Parameter nor a
 complete formula. Before drafting an Operator or Feature, ask for the exact
 versioned input Parameter(s), or for an approved source contract from which

package/skills/feature-management/references/commands.md

@@ -10,8 +10,9 @@ Use the `ml-platform` executable installed on `PATH` by the same ML Platform rel
 4. Validate and publish a catalog
 5. Resolve and build a dataset
 6. Fetch realtime inference data
-7. Inspect and download an artifact
-8. Prohibited shortcuts
+7. Inspect and change Registry lifecycle state
+8. Inspect and download an artifact
+9. Prohibited shortcuts
 
 ## Select A Target
 
@@ -257,6 +258,57 @@ write parquet, or publish a DatasetArtifact. Treat HTTP `503` as retryable sourc
 freshness/missing-data failure and HTTP `400` as a contract error that requires a
 manifest or request change.
 
+For a deployment-bound row or full sequence context, prepare one JSON object
+containing `feature_retrieval`, `cutoff_time`, and `entity_keys`, then run:
+
+```bash
+ml-platform --profile server fetch-inference-context /tmp/inference-context.json
+```
+
+The `FeatureRetrievalSpec` must bind an existing inference-mode DatasetManifest
+by project, dataset id, version, and manifest hash; its FeatureSet and contract
+signature must match the resolved online contract. Context mode also fixes
+`context_length`, `frequency`, `context_end`, `stride`, input-adapter hash, and
+temporal-binding hash. Do not replace these immutable deployment bindings with
+ad-hoc CLI flags. As with row fetch, this operation writes no artifact.
+
+## Inspect And Change Registry Lifecycle State
+
+Lifecycle commands apply only to Parameter, Feature, and FeatureSet versions.
+Before a mutation, inspect the exact resource and its references:
+
+```bash
+ml-platform --profile server get-parameter-lifecycle <name> <version> --project <project>
+ml-platform --profile server list-parameter-references <name> <version> --project <project> --direct
+ml-platform --profile server list-parameter-references <name> <version> --project <project>
+```
+
+Equivalent `get-*-lifecycle` and `list-*-references` commands exist for
+`feature` and `feature-set`. The default reference query returns the transitive
+closure; `--direct` returns only immediate dependents.
+
+After explicit authorization for the exact resource, soft-delete it with
+auditable metadata:
+
+```bash
+ml-platform --profile server delete-parameter <name> <version> \
+  --project <project> --actor <actor> --reason '<reason>' \
+  --idempotency-key <stable-key>
+```
+
+Restore uses the same audit fields and is rejected if the resource's own
+dependencies are not active:
+
+```bash
+ml-platform --profile server restore-parameter <name> <version> \
+  --project <project> --actor <actor> --reason '<reason>' \
+  --idempotency-key <stable-key>
+```
+
+These operations never erase immutable specs, historical references, or
+contract hashes. Do not use the Operator or Dataset deletion commands as a
+substitute; they have separate lifecycle rules.
+
 ## Inspect And Download An Artifact
 
 ```bash
@@ -299,7 +351,7 @@ Use a structured Parquet reader for schema, row count, column order, and missing
 
 - Do not use `seed-demo v95` for business catalogs.
 - Do not call individual `add-*` commands when catalog `apply` is available for an end-to-end publication.
-- Do not use `delete-dataset`, `cancel-job`, or force overwrite operations unless separately requested.
+- Do not use any `delete-*`, `restore-*`, `cancel-job`, or force overwrite operation unless separately requested.
 - Do not build images, deploy Kubernetes, or change service configuration in this workflow.
 - Do not claim a successful publication from `--dry-run` output.
 - Do not claim Chronon compile/backfill from a successful first-phase Operator build.

package/skills/feature-management/references/platform-capability-guide.md

@@ -3,6 +3,35 @@
 Use this guide to explain what the platform can execute. It is not business
 evidence. A platform default never answers an unresolved business question.
 
+## Platform In One Paragraph
+
+The platform is a versioned data-contract, registry, execution, and delivery
+layer for algorithm projects. It turns confirmed source Parameters and approved
+deterministic Operators into ordered Features and reproducible DatasetManifests,
+then either materializes a batch DatasetArtifact or serves one causal realtime
+read. It owns source adapters, quality/missingness/freshness evidence, lineage,
+replay metadata, and Job execution; it does not own model training, model
+evaluation, model serving, source-table creation, or Kubernetes administration.
+
+The following distinctions are part of the platform contract:
+
+- A `Parameter` is a public source-data contract, not an arbitrary raw table or
+  a model feature.
+- An `Operator` is versioned executable code; a `Feature` is exactly one output
+  column; a `FeatureSet` is the consumer-visible column order.
+- A `DatasetManifest` is a versioned request for time range, read policy,
+  rowsets, missing/endpoint rules, prediction, and one FeatureSet.
+- A `DatasetArtifact` is an output of an authorized build, not evidence that the
+  source contract or business formula was semantically approved.
+- Realtime inference is a causal cutoff read. It must not run a batch build,
+  write Parquet, or publish a DatasetArtifact.
+
+Dry-run and registry resolution are structural evidence. They may not detect a
+missing source relation; source-backed success must be established by the build
+or realtime fetch response. Artifact metadata is separate from downloaded-file
+evidence: schema, column order, file hashes, and numeric parity require the
+complete files.
+
 ## Public Assets
 
 | Asset | Stores | Use when | Do not use for |

package/skills/model-lifecycle-management/SKILL.md

@@ -0,0 +1,27 @@
+---
+name: model-lifecycle-management
+description: Manage ITSMP model training, evaluation, and immutable model packaging through the deployed platform API. Use when a user asks to register a trainer, validate or submit a training run, inspect/retry/cancel training jobs, configure or run governed evaluation, inspect evaluation evidence, validate a ModelArtifact, or create and inspect a ModelPackage. Do not use for feature catalog authoring, dataset builds, model deployment, Kubernetes administration, or image release engineering.
+---
+
+# Model Lifecycle Management
+
+Use the `ml-platform` executable installed with the same npm release as this Skill. Verify `ml-platform version`, `ml-platform show-config`, and server health before API operations. Never use a platform source checkout or a second client runtime.
+
+```text
+DatasetArtifact -> TrainingRun -> TrainingJob -> ModelArtifact
+  -> EvaluationRun/Job -> EvaluationResult/Summary -> ModelPackage
+```
+
+Read [references/training.md](references/training.md) for training work, [references/evaluation.md](references/evaluation.md) for governed evaluation, and [references/packaging.md](references/packaging.md) for ModelArtifact validation and packaging. Read only the references required by the request.
+
+## Shared Gates
+
+- Establish exact immutable inputs, TrainerDefinition `v1`, runtime image digest, model inputs/targets, resources, evaluation policy, and package destination from authoritative contracts. Do not infer them from model names.
+- Validate, register, submit, retry, cancel, and package creation are separate actions. Read-only discovery and validation do not authorize mutation or workload submission.
+- Before submission, show the exact JSON path, immutable identities, expected workload, and target API. Obtain explicit authorization. Retry and cancel require separate authorization for the exact Job.
+- Never use `latest` image tags. During development TrainerDefinition stays at `v1`; rebinding it follows the reviewed release procedure and requires confirming no active Job references the old definition.
+- A succeeded Job is insufficient evidence. Training requires a valid ModelArtifact and signature; evaluation requires immutable Result/Summary evidence and coverage; packaging requires `READY`, an immutable image digest, manifest, and passing test report.
+- Do not register caller-computed evaluation results. Workers produce predictions, metrics, decisions, and summaries from frozen DatasetArtifact rowsets.
+- Keep credentials, registry secrets, Kubernetes details, and model binaries out of request JSON and reports.
+
+Report immutable input identities, returned run/job/package IDs, status, validation or gate failures, and the next authorized action. Never claim deployment; it is outside this Skill.

package/skills/model-lifecycle-management/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "模型训练、评估与打包"
+  short_description: "管理 ITSMP 模型训练、评估与不可变模型打包流程"
+  default_prompt: "使用 $model-lifecycle-management 管理模型训练、评估或打包流程。"

package/skills/model-lifecycle-management/references/evaluation.md

@@ -0,0 +1,33 @@
+# Evaluation Commands
+
+```bash
+ml-platform --profile server register-evaluation-config evaluation-config.json
+ml-platform --profile server register-metric-definition metric-definition.json
+ml-platform --profile server register-executable-package executable-package.json
+ml-platform --profile server verify-executable-package <name> <version>
+ml-platform --profile server publish-executable-package <name> <version>
+```
+
+Custom metric packages must be deterministic, digest-bound, network-restricted, verified, and separately authorized for publication.
+
+```bash
+ml-platform --profile server validate-evaluation-run evaluation-request.json
+ml-platform --profile server submit-evaluation evaluation-request.json
+ml-platform --profile server get-evaluation-run <run-id>
+ml-platform --profile server get-evaluation-job <job-id>
+ml-platform --profile server list-evaluation-attempts <job-id>
+ml-platform --profile server retry-evaluation-job <job-id>
+ml-platform --profile server cancel-evaluation-job <job-id>
+```
+
+An EvaluationRunRequest binds ModelArtifact(s), a frozen DatasetArtifact rowset, targets, EvaluationConfig, runtime identity, and optional baseline. Retry/cancel require separate authorization.
+
+```bash
+ml-platform --profile server get-evaluation-result <result-id>
+ml-platform --profile server get-evaluation-result-metrics <result-id>
+ml-platform --profile server get-evaluation-result-artifacts <result-id>
+ml-platform --profile server summarize-evaluation-run <run-id>
+ml-platform --profile server get-evaluation-summary <summary-id>
+```
+
+Report candidate, eligible, labeled and evaluable coverage; calculation space; slices; baseline identity; required decisions; runtime/package digests; and Result/Summary hashes. Exploratory or incomplete evidence is never a release gate pass.

package/skills/model-lifecycle-management/references/packaging.md

@@ -0,0 +1,17 @@
+# Model Packaging Commands
+
+```bash
+ml-platform --profile server validate-model-artifact <artifact-id>
+ml-platform --profile server create-model-package model-package-request.json
+ml-platform --profile server get-model-package <package-id> --package-version <version>
+```
+
+Confirm the ModelArtifact, signature, runtime, immutable base/builder/worker image digests, input modes, semantic package version, and destination repository. Creation submits a workload and needs separate authorization. Never put registry credentials in JSON.
+
+A deliverable package is `READY` and includes its remote image digest, immutable reference, manifest, signature and adapter hashes, runtime capabilities, and a passing test report for the same digest. Other states are not deliverable.
+
+```bash
+ml-platform --profile server cancel-model-package <package-id> --package-version <version>
+```
+
+Cancellation requires exact-package authorization. Do not rebuild an immutable failed version; correct inputs and create a new semantic package version. This Skill does not deploy images or write model-center delivery status.

package/skills/model-lifecycle-management/references/training.md

@@ -0,0 +1,19 @@
+# Training Commands
+
+```bash
+ml-platform --profile server register-trainer trainer-definition.json
+ml-platform --profile server validate-training-run training-run.json
+ml-platform --profile server register-training-run training-run.json
+ml-platform --profile server submit-training-job training-job-request.json
+ml-platform --profile server get-training-job <job-id>
+```
+
+The TrainingRun binds immutable DatasetArtifact identities, DataSchema, ordered inputs, targets, InputAdapter, TrainerDefinition `v1`, reproducibility controls, and runtime identity. Validation proves compatibility only. Submit the run and Job separately after authorization and record spec hash and Job ID. Terminal success must expose a ModelArtifact ID; validate it before evaluation or packaging.
+
+```bash
+ml-platform --profile server validate-model-artifact <artifact-id>
+ml-platform --profile server retry-training-job <job-id>
+ml-platform --profile server cancel-training-job <job-id>
+```
+
+Retry and cancellation require exact-Job authorization. Never change a run contract while retrying; create a new immutable run when semantic inputs change.