@zhuoyuezs/ml-platform 0.2.2-alpha.3 → 0.2.2-alpha.5

package/DEVELOPMENT.md

@@ -10,7 +10,7 @@
 - Skill 直接调用正式命令 `ml-platform`，不嵌入 CLI runtime。
 - 正式 npm 包只有 `@zhuoyuezs/ml-platform`，正式 bin 只有 `ml-platform`。
 - `business-client-js/src-ts/` 是 business CLI 的唯一 TypeScript 源码，`src/` 是供 Node.js 和
-  release payload 使用的编译输出；仓库 `skills/` 下三个受支持 Skill 是各自唯一源码。
+  release payload 使用的编译输出；仓库 `skills/` 下四个受支持 Skill 是各自唯一源码。
 - `npx @zhuoyuezs/ml-platform@<version> install` 是面向用户的统一安装入口；默认目标是 Codex
   用户级 Skill，不要求额外安装参数。
 - 管理命令默认输出简洁结果；Agent 和 CI 显式使用 `--json` 获取稳定结构化输出。
@@ -31,6 +31,7 @@ business-client-js/
 └── src/                          generated Node.js runtime
 npm/ml-platform/src/               TypeScript installer and dispatcher source
 skills/feature-management/
+skills/data-source-exploration/
 skills/model-lifecycle-management/
 skills/model-deployment-management/
 npm/ml-platform/

package/README.md

@@ -1,7 +1,8 @@
 # ML Platform
 
-ML Platform 的 TypeScript CLI（编译为 Node.js JavaScript runtime）、`feature-management`、`model-lifecycle-management` 与
-`model-deployment-management` Agent Skill。CLI 与 Skill 由同一个 npm
+ML Platform 的 TypeScript CLI（编译为 Node.js JavaScript runtime）、`feature-management`、
+`data-source-exploration`、`model-lifecycle-management` 与 `model-deployment-management`
+Agent Skill。CLI 与 Skill 由同一个 npm
 release 安装和升级，运行时不需要 Python 或 `uv`。
 
 ## 环境要求
@@ -18,7 +19,7 @@ release 安装和升级，运行时不需要 Python 或 `uv`。
 npx @zhuoyuezs/ml-platform@latest install
 ```
 
-这条命令不需要额外参数。默认安装持久化的 `ml-platform` 命令，并将三个 Skill 安装到
+这条命令不需要额外参数。默认安装持久化的 `ml-platform` 命令，并将四个 Skill 安装到
 `~/.codex/skills/`，供当前用户的 Codex 使用。安装后重启终端和 Agent 会话。
 
 只在当前项目使用 Skill 时，在项目根目录运行：
@@ -94,6 +95,7 @@ Skill。`status --json` 中 `installed_release` 是当前 scope 的 Skill releas
 
 ```bash
 ml-platform list-parameters
+ml-platform list-datasource-connections
 ml-platform list-datasets --project <project>
 ml-platform get-dataset <dataset_id> <dataset_version> --project <project>
 ml-platform resolve-dataset <dataset_id> <dataset_version> --project <project>
@@ -129,8 +131,8 @@ npx --yes --registry=https://registry.npmjs.org/ \
 ## 包内容
 
 - 一份由 TypeScript 编译的 business CLI；
-- 三份纯 Skill：`feature-management`、`model-lifecycle-management` 与
-  `model-deployment-management`；
+- 四份纯 Skill：`feature-management`、`data-source-exploration`、
+  `model-lifecycle-management` 与 `model-deployment-management`；
 - 显式安装、升级、状态、校验和回滚逻辑。
 
 不包含 Codex CLI、Python business-client wheel、Agent Host、平台服务端、模型训练或 Kubernetes

package/checksums.json

@@ -2,28 +2,28 @@
   "files": [
     {
       "path": "runtime/business-client/README.md",
-      "sha256": "sha256:30d921fabf5bc0339eda60169a1865f6007807b1d9a8d3e646b42f68cd563240",
-      "size_bytes": 8125
+      "sha256": "sha256:c263ebe1591d38d90fb68227f42c6de43014a05e98b736d2e3363e19545676d9",
+      "size_bytes": 8779
     },
     {
       "path": "runtime/business-client/package-lock.json",
-      "sha256": "sha256:1e364f51be2b6df7ab5f27b72aa04cb499d9d191a321ab669bba011555e659e7",
+      "sha256": "sha256:ebc31820ae0d2985879efd87ba4b0d8843e44a175d4c9e1dc557737893f8bdae",
       "size_bytes": 1628
     },
     {
       "path": "runtime/business-client/package.json",
-      "sha256": "sha256:45545a61753cc889a1d578266634f0720423895e0693fa4911e0fdd3c0957f69",
+      "sha256": "sha256:4685ca172b5b23bd5de53bcccbd7f7412df281eff67533d72d1b598c63a28b47",
       "size_bytes": 671
     },
     {
       "path": "runtime/business-client/src/catalog.js",
-      "sha256": "sha256:9ace0708c04aed8876e8d5b8eba9241f32e98757ca19d14fb00c30ba2de662cf",
-      "size_bytes": 58679
+      "sha256": "sha256:369259ccfef1b079acf616eca1dc0040dda61cfb4b69941d0fcca30a658cd549",
+      "size_bytes": 58749
     },
     {
       "path": "runtime/business-client/src/cli.js",
-      "sha256": "sha256:7ddd434c1e8ee64d8a6de9005e4f6b440197eafab021071b9e4a8af340d4e23a",
-      "size_bytes": 57877
+      "sha256": "sha256:739be8665f611802d9196ba84566578fbfc6544c6907af165edbaf115d9d1998",
+      "size_bytes": 62651
     },
     {
       "path": "runtime/business-client/src/config.js",
@@ -32,13 +32,23 @@
     },
     {
       "path": "runtime/business-client/src/http.js",
-      "sha256": "sha256:4ae9e9ec10a74f36ed19ca7a63b0ba58a34cedea13ed95131ef1d07cd7d9e674",
-      "size_bytes": 17176
+      "sha256": "sha256:3c8b40b0da0bb87c95f1367f540cd08a7ec28e0d5fe8e52a0367fecb5ae4094c",
+      "size_bytes": 18763
+    },
+    {
+      "path": "skills/data-source-exploration/SKILL.md",
+      "sha256": "sha256:3b609d61f3c73da3657ce2e6bb4d1eff95a90e4ac5e5445b8513536438b26b0b",
+      "size_bytes": 3853
+    },
+    {
+      "path": "skills/data-source-exploration/agents/openai.yaml",
+      "sha256": "sha256:5c7f7d497ad7738c672b8ee906d514284a2f2583a854f8fa487708a75836256f",
+      "size_bytes": 299
     },
     {
       "path": "skills/feature-management/SKILL.md",
-      "sha256": "sha256:88898ea83ff339512d5512537db485a2764420abb67afceb9dd090cc780c00e0",
-      "size_bytes": 33021
+      "sha256": "sha256:309d2ae292113f99bd17b6865b87bbe793809c88005458f477fa1e80c41b1523",
+      "size_bytes": 33334
     },
     {
       "path": "skills/feature-management/agents/openai.yaml",
@@ -87,8 +97,8 @@
     },
     {
       "path": "skills/feature-management/assets/catalog-template/parameters/example_temperature.v1.json",
-      "sha256": "sha256:28c7d3576c4b7e94c1e9db7f95f26d83ee2e10dc9f81ec6223f4fbd9b2f5eeda",
-      "size_bytes": 1488
+      "sha256": "sha256:b7e25965b0dc2d65a935b67d5f10d1192ad550ba90bae25d550bfdb5736b0d2d",
+      "size_bytes": 1523
     },
     {
       "path": "skills/feature-management/references/commands.md",
@@ -97,8 +107,8 @@
     },
     {
       "path": "skills/feature-management/references/contracts.md",
-      "sha256": "sha256:ef582d4ee9ade16de2a5f97b8bf9546969b6f2859eb020986bf25952993df402",
-      "size_bytes": 30483
+      "sha256": "sha256:a9f6c8d6c8b1220a26a282f3ff73db54c6359372df02c322159087507ca0318d",
+      "size_bytes": 30894
     },
     {
       "path": "skills/feature-management/references/operator-authoring.md",
@@ -142,8 +152,8 @@
     },
     {
       "path": "skills/model-lifecycle-management/SKILL.md",
-      "sha256": "sha256:4ea40815d73b3a470b2572874dcad63640cbdd53d3c10293d7a5ce8621a13b96",
-      "size_bytes": 4272
+      "sha256": "sha256:1f2174fac7f82e7539c781b1c7bc4164a8adc393acb33b3b2165408b25600135",
+      "size_bytes": 4888
     },
     {
       "path": "skills/model-lifecycle-management/agents/openai.yaml",
@@ -152,8 +162,8 @@
     },
     {
       "path": "skills/model-lifecycle-management/references/discovery.md",
-      "sha256": "sha256:184472a79fb217dd8c74dffab20e75285b0c8f69207dc593ae3099b8a2b6d6d5",
-      "size_bytes": 5381
+      "sha256": "sha256:ad4623e84b8d972357497a55df0aed84be5ada59ef197f6a217f19ce97821195",
+      "size_bytes": 5789
     },
     {
       "path": "skills/model-lifecycle-management/references/evaluation.md",
@@ -167,13 +177,18 @@
     },
     {
       "path": "skills/model-lifecycle-management/references/training-contracts.md",
-      "sha256": "sha256:4cecf5f90464640d063ca721fded1c27b46bb79daa0f67c78a8fb6b0e3e60b3b",
-      "size_bytes": 14747
+      "sha256": "sha256:26ca0f0b8bc212bd30ea69b0a0afc169554681a16317ebb054d9147ae9c0587a",
+      "size_bytes": 14994
     },
     {
       "path": "skills/model-lifecycle-management/references/training.md",
-      "sha256": "sha256:97de7894da24a07b4146d6de5e00a0cf17166654fb219a145f35adff5e8a7f99",
-      "size_bytes": 7980
+      "sha256": "sha256:ae87837e5c315aa0fc9c02575213e1fd293f192ed43a1c68e9f8d08407becc48",
+      "size_bytes": 8235
+    },
+    {
+      "path": "skills/model-lifecycle-management/references/zero-shot-inference.md",
+      "sha256": "sha256:4ea224be54a7b0fc7754bdaa41df0f3b14c56f5134afc3951e91e59844108f90",
+      "size_bytes": 2350
     }
   ],
   "schema_version": "data_platform.ml_platform_checksums/v1"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhuoyuezs/ml-platform",
-  "version": "0.2.2-alpha.3",
+  "version": "0.2.2-alpha.5",
   "description": "ML 数据平台 business CLI 与 Agent Skills 管理工具",
   "bin": {
     "ml-platform": "scripts/main.js"

package/release.json

@@ -13,8 +13,8 @@
     "entrypoint": "src/cli.js",
     "name": "ml-platform",
     "path": "runtime/business-client",
-    "sha256": "sha256:ceb3fdabf57044a5bf8d54baf04ab10327cb896e4eaff3897c18e08e96e5336a",
-    "version": "0.8.2"
+    "sha256": "sha256:ff1b5f6de8111ac9dea00701afadbb6e47cc14937fa78b958ec8a3b777a4ecb9",
+    "version": "0.8.3"
   },
   "policy_sha256": "sha256:02fbde0134696b78c0c365d6e0b76c9814227208da5b2b3d4e5dbd82dc4a3606",
   "public_schema_versions": [
@@ -25,7 +25,7 @@
     "ml_data_platform.feature_set/v1",
     "ml_data_platform.dataset_manifest/v1"
   ],
-  "release_version": "0.2.2-alpha.3",
+  "release_version": "0.2.2-alpha.5",
   "runtime_requirements": {
     "node": ">=18",
     "os": [
@@ -35,24 +35,30 @@
   },
   "schema_version": "data_platform.ml_platform_release/v2",
   "skills": {
+    "data-source-exploration": {
+      "path": "skills/data-source-exploration",
+      "requires_cli": ">=0.8.3 <0.9.0",
+      "revision": "0.2.2-alpha.5",
+      "sha256": "sha256:ae3cfc88f8f3f46a5b7e0179d850b2216bc37275f34679dbea1ff2ba99875a96"
+    },
     "feature-management": {
       "path": "skills/feature-management",
-      "requires_cli": ">=0.8.2 <0.9.0",
-      "revision": "0.2.2-alpha.3",
-      "sha256": "sha256:d32f0306f129d7bf76eb037fe239c84dd3c29c64b61600799d6e40320784bb10"
+      "requires_cli": ">=0.8.3 <0.9.0",
+      "revision": "0.2.2-alpha.5",
+      "sha256": "sha256:63e3bc337bc4cc4cdd38bfdd99ff9d8fd6c7d57d24aec1b7f70101ce38b1f599"
     },
     "model-deployment-management": {
       "path": "skills/model-deployment-management",
-      "requires_cli": ">=0.8.2 <0.9.0",
-      "revision": "0.2.2-alpha.3",
+      "requires_cli": ">=0.8.3 <0.9.0",
+      "revision": "0.2.2-alpha.5",
       "sha256": "sha256:e7d87c272a0dcc028ea628d5e36f5b7e52ed27cb9c1bc17ea76527478e28b46d"
     },
     "model-lifecycle-management": {
       "path": "skills/model-lifecycle-management",
-      "requires_cli": ">=0.8.2 <0.9.0",
-      "revision": "0.2.2-alpha.3",
-      "sha256": "sha256:ec6ebb2587fd7acd024def75a8c0e9cd94b6cdd8ee6df439609291b496751b91"
+      "requires_cli": ">=0.8.3 <0.9.0",
+      "revision": "0.2.2-alpha.5",
+      "sha256": "sha256:13f94cb0928d15a83b8bb10195dc3a83c28c4bb7723bc8a35e262b6c1ba46b0d"
     }
   },
-  "source_commit": "e713953153439c28680b60b56f57d3b9679ff49a"
+  "source_commit": "90c4934f435a97b21428bad189f85a9a0d5dc643"
 }

package/runtime/business-client/README.md

@@ -117,6 +117,21 @@ ml-platform predict-model /absolute/path/to/request.json \
   --serving-url https://storage-forecast.example
 ```
 
+同步零样本预测使用平台控制面提供的模型名称入口，不要求用户传入 `project`、合同版本或普通
+请求的 `release_id`：
+
+```bash
+ml-platform list-foundation-models
+ml-platform get-foundation-model chronos2_forecaster
+ml-platform predict-foundation chronos2_forecaster /absolute/path/to/request.json
+ml-platform predict-foundation-csv chronos2_forecaster /absolute/path/to/input.csv \
+  --schema /absolute/path/to/schema.json \
+  --forecast /absolute/path/to/forecast.json
+```
+
+`--release-id` 仅用于精确回放。零样本请求是同步、有界的 JSON 或 multipart CSV，不创建预测任务
+或结果资源。
+
 训练历史必须使用各个历史 cutoff 当时可取得的天气预报，不得以事后实测天气替代。
 
 Parameter、Feature、FeatureSet 的删除命令执行软删除，并支持带 actor、reason 和幂等键的

package/runtime/business-client/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@zhuoyuezs/ml-platform-business-client",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@zhuoyuezs/ml-platform-business-client",
-      "version": "0.8.2",
+      "version": "0.8.3",
       "license": "UNLICENSED",
       "bin": {
         "ml-platform": "src/cli.js"

package/runtime/business-client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhuoyuezs/ml-platform-business-client",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "private": true,
   "description": "JavaScript implementation of the ML Platform business client",
   "bin": {

package/runtime/business-client/src/catalog.js

@@ -126,7 +126,7 @@ function normalizeSource(value, label) {
         throw new Error(`${label} uses unsupported field 'parameters'; use 'params'`);
     if (source.mode === "sql" && typeof source.sql === "string" && source.sql.trimEnd().endsWith(";"))
         throw new Error(`SQL ${label}.sql must not end with a semicolon`);
-    return { adapter: pythonString(defaultIfAbsent(source, "adapter", "synthetic")), mode: choice(defaultIfAbsent(source, "mode", "direct_column"), ["direct_column", "sql", "derived"], `${label} mode`), source_metric: optionalString(source.source_metric, "source_metric"), source_group: optionalString(source.source_group, "source_group"), measurement: optionalString(source.measurement, "measurement"), field: optionalString(source.field, "field"), tags: stringMap(defaultIfAbsent(source, "tags", {}), `${label} tags`), schema: optionalString(aliasIfAbsent(source, "schema", "schema_name"), "schema"), table: optionalString(source.table, "table"), time_column: optionalString(source.time_column, "time_column"), value_column: optionalString(source.value_column, "value_column"), metric_name_column: optionalString(source.metric_name_column, "metric_name_column"), metric_name: optionalString(source.metric_name, "metric_name"), unit_column: optionalString(source.unit_column, "unit_column"), unit: optionalString(aliasIfAbsent(source, "unit", "source_unit"), "source unit"), filters: stringMap(defaultIfAbsent(source, "filters", {}), `${label} filters`), sql: optionalString(source.sql, "source sql"), params: object(defaultIfAbsent(source, "params", {}), `${label} params`) };
+    return { adapter: pythonString(defaultIfAbsent(source, "adapter", "synthetic")), connection_id: optionalString(source.connection_id, "connection_id"), mode: choice(defaultIfAbsent(source, "mode", "direct_column"), ["direct_column", "sql", "derived"], `${label} mode`), source_metric: optionalString(source.source_metric, "source_metric"), source_group: optionalString(source.source_group, "source_group"), measurement: optionalString(source.measurement, "measurement"), field: optionalString(source.field, "field"), tags: stringMap(defaultIfAbsent(source, "tags", {}), `${label} tags`), schema: optionalString(aliasIfAbsent(source, "schema", "schema_name"), "schema"), table: optionalString(source.table, "table"), time_column: optionalString(source.time_column, "time_column"), value_column: optionalString(source.value_column, "value_column"), metric_name_column: optionalString(source.metric_name_column, "metric_name_column"), metric_name: optionalString(source.metric_name, "metric_name"), unit_column: optionalString(source.unit_column, "unit_column"), unit: optionalString(aliasIfAbsent(source, "unit", "source_unit"), "source unit"), filters: stringMap(defaultIfAbsent(source, "filters", {}), `${label} filters`), sql: optionalString(source.sql, "source sql"), params: object(defaultIfAbsent(source, "params", {}), `${label} params`) };
 }
 function normalizeParameter(payload) {
     const source = normalizeSource(payload.source, "parameter source");

package/runtime/business-client/src/cli.js

@@ -13,7 +13,10 @@ const BUSINESS_COMMANDS = new Set([
     "get-model-runtime-release", "get-training-run", "get-model-artifact", "get-executable-package",
     "validate-training-job", "validate-model-package",
     "version", "create-project", "list-projects", "get-project", "delete-project",
-    "configure", "show-config", "health", "list-parameters", "list-operators", "list-features",
+    "configure", "show-config", "health",
+    "list-datasource-connections", "list-datasource-namespaces", "list-datasource-objects",
+    "list-datasource-fields", "query-datasource-object",
+    "list-parameters", "list-operators", "list-features",
     "list-feature-sets", "list-datasets", "get-dataset", "list-jobs", "resolve-manifest",
     "resolve-dataset", "build-dataset", "build-registered-dataset",
     "get-parameter", "get-feature", "get-feature-set", "get-operator",
@@ -26,6 +29,7 @@ const BUSINESS_COMMANDS = new Set([
     "add-dataset", "update-dataset", "delete-dataset", "list-dataset-artifacts",
     "register-operator", "show-operator-specs", "delete-operator", "run-operator",
     "get-job", "wait-job", "retry-job", "cancel-job", "get-dataset-artifact", "download-dataset-artifact", "fetch-inference-data", "fetch-inference-context", "predict-model", "apply",
+    "list-foundation-models", "get-foundation-model", "predict-foundation", "predict-foundation-csv",
     "list-system-models", "get-system-model", "register-training-run", "validate-training-run", "submit-training-job", "get-training-job", "retry-training-job", "cancel-training-job",
     "register-evaluation-config", "get-evaluation-config", "register-metric-definition", "get-metric-definition",
     "register-executable-package", "verify-executable-package", "publish-executable-package",
@@ -49,6 +53,11 @@ const COMMAND_USAGE = {
     configure: "configure --api-url URL",
     "show-config": "show-config",
     health: "health",
+    "list-datasource-connections": "list-datasource-connections [--limit N] [--cursor CURSOR]",
+    "list-datasource-namespaces": "list-datasource-namespaces CONNECTION_ID [--limit N] [--cursor CURSOR]",
+    "list-datasource-objects": "list-datasource-objects CONNECTION_ID NAMESPACE_ID [--limit N] [--cursor CURSOR]",
+    "list-datasource-fields": "list-datasource-fields CONNECTION_ID OBJECT_ID [--limit N] [--cursor CURSOR]",
+    "query-datasource-object": "query-datasource-object CONNECTION_ID OBJECT_ID SPEC_JSON [--cursor CURSOR]",
     "create-project": "create-project NAME [--display-name TEXT] [--description TEXT] [--owner OWNER]",
     "list-projects": "list-projects",
     "get-project": "get-project NAME",
@@ -106,6 +115,10 @@ const COMMAND_USAGE = {
     "fetch-inference-data": "fetch-inference-data MANIFEST --cutoff-time TIMESTAMP [--max-workers N] [--max-source-lag-hours HOURS] [--no-validate-freshness] [--allow-missing]",
     "fetch-inference-context": "fetch-inference-context REQUEST_JSON",
     "predict-model": "predict-model REQUEST_JSON --serving-url URL",
+    "list-foundation-models": "list-foundation-models",
+    "get-foundation-model": "get-foundation-model NAME",
+    "predict-foundation": "predict-foundation NAME REQUEST_JSON [--release-id ID]",
+    "predict-foundation-csv": "predict-foundation-csv NAME CSV_FILE --schema SCHEMA_JSON --forecast FORECAST_JSON [--release-id ID]",
     "list-system-models": "list-system-models",
     "get-system-model": "get-system-model NAME VERSION [--project PROJECT]",
     "register-training-run": "register-training-run RUN_JSON",
@@ -238,6 +251,13 @@ function readObject(file) {
 }
 function readDataset(file) { return normalizeDataset(readObject(file)); }
 function readSpec(file) { return readObject(file); }
+function datasourcePageParams(rest) {
+    const rawLimit = take(rest, "--limit");
+    const limit = rawLimit === undefined ? 100 : integer(rawLimit, "--limit");
+    if (limit < 1 || limit > 500)
+        throw new Error("--limit must be between 1 and 500");
+    return { limit, cursor: take(rest, "--cursor") };
+}
 function datasetEndpoint(project, datasetId, datasetVersion) {
     return `/datasets/${encodeURIComponent(project)}/${encodeURIComponent(datasetId)}/${encodeURIComponent(datasetVersion)}`;
 }
@@ -382,6 +402,32 @@ async function runBusinessCli(argv) {
     }
     else if (options.command === "health")
         result = await client(options).get("/health");
+    else if (options.command === "list-datasource-connections") {
+        result = await client(options).get("/datasource-connections", datasourcePageParams(rest));
+    }
+    else if (options.command === "list-datasource-namespaces") {
+        const connectionId = positional(rest, "connection id");
+        result = await client(options).get(`/datasource-connections/${encodeURIComponent(connectionId)}/namespaces`, datasourcePageParams(rest));
+    }
+    else if (options.command === "list-datasource-objects") {
+        const connectionId = positional(rest, "connection id");
+        const namespaceId = positional(rest, "namespace id");
+        result = await client(options).get(`/datasource-connections/${encodeURIComponent(connectionId)}/namespaces/${encodeURIComponent(namespaceId)}/objects`, datasourcePageParams(rest));
+    }
+    else if (options.command === "list-datasource-fields") {
+        const connectionId = positional(rest, "connection id");
+        const objectId = positional(rest, "object id");
+        result = await client(options).get(`/datasource-connections/${encodeURIComponent(connectionId)}/objects/${encodeURIComponent(objectId)}/fields`, datasourcePageParams(rest));
+    }
+    else if (options.command === "query-datasource-object") {
+        const connectionId = positional(rest, "connection id");
+        const objectId = positional(rest, "object id");
+        const spec = readSpec(positional(rest, "query spec JSON"));
+        const cursor = take(rest, "--cursor");
+        if (cursor !== undefined)
+            spec.cursor = cursor;
+        result = await client(options).post(`/datasource-connections/${encodeURIComponent(connectionId)}/objects/${encodeURIComponent(objectId)}/query`, spec);
+    }
     else if (options.command === "create-project") {
         const name = positional(rest, "project name");
         result = await client(options).post("/projects", { schema_version: "ml_data_platform.project/v1", name, display_name: take(rest, "--display-name", name), description: take(rest, "--description", ""), owner: take(rest, "--owner", "demo") });
@@ -679,6 +725,33 @@ async function runBusinessCli(argv) {
             throw new Error("--serving-url is required");
         result = await new PlatformApiClient(servingUrl, options.timeout).post("/v1/inference", request);
     }
+    else if (options.command === "list-foundation-models") {
+        result = await client(options).get("/foundation-models");
+    }
+    else if (options.command === "get-foundation-model") {
+        const name = positional(rest, "foundation model name");
+        result = await client(options).get(`/foundation-models/${encodeURIComponent(name)}`);
+    }
+    else if (options.command === "predict-foundation") {
+        const name = positional(rest, "foundation model name");
+        const request = readSpec(positional(rest, "request JSON"));
+        const releaseId = take(rest, "--release-id");
+        const headers = releaseId ? { "X-ITSMP-Foundation-Release": releaseId } : {};
+        result = await client(options).postWithHeaders(`/foundation-models/${encodeURIComponent(name)}/predict`, request, headers);
+    }
+    else if (options.command === "predict-foundation-csv") {
+        const name = positional(rest, "foundation model name");
+        const csvFile = positional(rest, "CSV file");
+        const schemaFile = take(rest, "--schema");
+        const forecastFile = take(rest, "--forecast");
+        if (!schemaFile)
+            throw new Error("--schema is required");
+        if (!forecastFile)
+            throw new Error("--forecast is required");
+        const releaseId = take(rest, "--release-id");
+        const headers = releaseId ? { "X-ITSMP-Foundation-Release": releaseId } : {};
+        result = await client(options).uploadFoundationCsv(`/foundation-models/${encodeURIComponent(name)}/predict-file`, readSpec(schemaFile), readSpec(forecastFile), csvFile, headers);
+    }
     else if (options.command === "list-deployment-targets") {
         result = await client(options).get("/deployment-targets");
     }

package/runtime/business-client/src/http.js

@@ -22,10 +22,11 @@ class PlatformApiClient {
         }
         return url;
     }
-    async request(method, endpoint, { params, payload, body, contentType } = {}) {
+    async request(method, endpoint, { params, payload, body, contentType, requestHeaders } = {}) {
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), this.timeoutMs);
         const headers = { Accept: "application/json" };
+        Object.assign(headers, requestHeaders || {});
         let requestBody = body;
         if (payload !== undefined) {
             headers["Content-Type"] = "application/json";
@@ -59,8 +60,32 @@ class PlatformApiClient {
     }
     get(endpoint, params) { return this.request("GET", endpoint, { params }); }
     post(endpoint, payload, params) { return this.request("POST", endpoint, { payload, params }); }
+    postWithHeaders(endpoint, payload, requestHeaders) { return this.request("POST", endpoint, { payload, requestHeaders }); }
     put(endpoint, payload, params) { return this.request("PUT", endpoint, { payload, params }); }
     delete(endpoint, params) { return this.request("DELETE", endpoint, { params }); }
+    uploadFoundationCsv(endpoint, schema, forecast, filePath, requestHeaders = {}) {
+        const resolved = path.resolve(expandHome(filePath));
+        if (!fs.existsSync(resolved) || !fs.statSync(resolved).isFile())
+            throw new Error(`CSV file not found: ${resolved}`);
+        const boundary = `itsmp-${Date.now().toString(16)}-${Math.random().toString(16).slice(2)}`;
+        const parts = [];
+        const field = (name, value, contentType) => {
+            parts.push(Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="${name}"\r\nContent-Type: ${contentType}\r\n\r\n`));
+            parts.push(Buffer.from(value));
+            parts.push(Buffer.from("\r\n"));
+        };
+        field("schema", JSON.stringify(schema), "application/json");
+        field("forecast", JSON.stringify(forecast), "application/json");
+        const filename = path.basename(resolved).replace(/["\r\n]/g, "_");
+        parts.push(Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="file"; filename="${filename}"\r\nContent-Type: text/csv\r\n\r\n`));
+        parts.push(fs.readFileSync(resolved));
+        parts.push(Buffer.from(`\r\n--${boundary}--\r\n`));
+        return this.request("POST", endpoint, {
+            body: Buffer.concat(parts),
+            contentType: `multipart/form-data; boundary=${boundary}`,
+            requestHeaders,
+        });
+    }
     uploadOperatorPackage(project, name, version, packagePath) {
         const resolved = path.resolve(expandHome(packagePath));
         if (!fs.existsSync(resolved) || !fs.statSync(resolved).isFile())

package/skills/data-source-exploration/SKILL.md

@@ -0,0 +1,90 @@
+---
+name: data-source-exploration
+description: Discover platform-configured PostgreSQL, MySQL, SQL Server, or InfluxDB objects and run bounded structured reads for local data and feature exploration. Use when an algorithm engineer wants to inspect visible databases, schemas, tables, measurements, fields, or limited rows before defining governed feature assets. Do not use for free-form SQL, bulk export, asset publication, dataset builds, or model training.
+---
+
+# Data Source Exploration
+
+Use the platform API through `ml-platform`; never connect to a business database directly and
+never request credentials. The platform exposes configured connections and their discoverable objects.
+
+## Establish The Target
+
+Before discovery, verify the installed client and server target:
+
+```bash
+command -v ml-platform
+ml-platform health
+```
+
+If the server target is missing or unhealthy, stop. Do not fall back to a DSN, database client, SQL,
+Flux, or a repository-local source adapter.
+
+## Discover Hierarchically
+
+Read one level at a time and preserve the returned opaque IDs:
+
+```bash
+ml-platform list-datasource-connections
+ml-platform list-datasource-namespaces <connection_id>
+ml-platform list-datasource-objects <connection_id> <namespace_id>
+ml-platform list-datasource-fields <connection_id> <object_id>
+```
+
+Follow `next_cursor` with `--cursor` until it is null when complete traversal is needed. Do not derive an
+ID from a database, schema, table, measurement, or field name. An absent object means it is unavailable
+or no longer present; do not probe alternate names.
+
+## Query One Object
+
+Create a `DatasourceQuerySpec` JSON in the user's workspace. Select only fields needed for the current
+question, use bounded time filters for time-series data, and start with a small `limit`:
+
+```json
+{
+  "schema_version": "ml_data_platform.datasource_query/v1",
+  "field_ids": ["fld_time", "fld_entity", "fld_value"],
+  "filters": [
+    {
+      "field_id": "fld_time",
+      "operator": "between",
+      "values": ["2026-09-01T00:00:00+08:00", "2026-09-02T00:00:00+08:00"]
+    }
+  ],
+  "order_by": [{"field_id": "fld_time", "direction": "asc"}],
+  "limit": 200,
+  "cursor": null
+}
+```
+
+Run it with:
+
+```bash
+ml-platform query-datasource-object \
+  <connection_id> <object_id> datasource-query.json
+```
+
+Supported filters are `eq`, `in`, `gt`, `gte`, `lt`, `lte`, `between`, and `is_null`. Only fields marked
+filterable or sortable may be used in those positions. InfluxDB reads require bounded `_time` start and
+end filters. For the next page, keep projection, filters, ordering, and `limit` unchanged and pass the
+returned cursor with `--cursor`.
+
+## Explore In The Workspace
+
+Analyze returned rows with local code such as pandas or DuckDB. Keep these outputs outside the platform
+repository unless the user explicitly asks for a repository-owned fixture. Record:
+
+- the connection, namespace, object, field IDs, query spec, `audit_ref`, and response hash;
+- observed facts such as dtypes, missingness, frequency, ranges, duplicates, and candidate entity/time keys;
+- hypotheses about business meaning, target suitability, leakage, transformations, and model features;
+- unresolved items that require a data owner or business owner to confirm.
+
+Do not present inferred semantics as facts. Query results are exploratory evidence, not training data and
+not a substitute for Parameter, Feature, FeatureSet, DatasetManifest, or DatasetArtifact.
+
+## Hand Off Confirmed Work
+
+After a human confirms source mapping, event time, entity keys, units, availability, quality rules, target,
+horizon, and feature formulas, use `$feature-management` to create governed assets and build a
+DatasetArtifact. Use `$model-lifecycle-management` only after that artifact exists. Exploration does not
+authorize publishing assets, building datasets, or submitting training jobs.

package/skills/data-source-exploration/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "数据源与特征探索"
+  short_description: "逐层发现已连接数据源并执行受限数据查询"
+  default_prompt: "使用 $data-source-exploration 从平台已连接数据源中发现可见库表字段，执行有限查询，并整理数据与特征假设。"

package/skills/feature-management/SKILL.md

@@ -259,7 +259,7 @@ unit, time/availability semantics and missing policy in the semantic review.
 Never infer a source table, column, measurement, tag, unit or timezone from a
 Parameter name.
 
-Create one stable, versioned source contract for each independently readable value. Keep credentials out of JSON. Use only supported direct adapters (`postgresql_direct`, `mysql_direct`, `sqlserver_direct`, and `influxdb_direct`) and explicit source identity. The server supplies database DSNs from managed Secrets; never add them to CLI arguments or Catalog JSON. Put source data validity in `quality_rules`; put dataset-specific transformations in preprocess Operators.
+Create one stable, versioned source contract for each independently readable value. Keep credentials out of JSON. Use only supported direct adapters (`postgresql_direct`, `mysql_direct`, `sqlserver_direct`, and `influxdb_direct`) and explicit source identity. For PostgreSQL, keep `source.adapter=postgresql_direct` and put the configured alias in `source.connection_id` (for example `postgresql_bf_monitoring`); never put the connection alias in `source.adapter`. The server supplies database DSNs from managed Secrets; never add them to CLI arguments or Catalog JSON. A missing `connection_id` on a historical PostgreSQL Parameter uses the compatibility default `postgresql`. Put source data validity in `quality_rules`; put dataset-specific transformations in preprocess Operators.
 
 When historical and live systems expose the same value, keep one Parameter and add an optional
 `online_source`. Batch/as-of reads always use `source`; realtime causal reads use `online_source`

package/skills/feature-management/assets/catalog-template/parameters/example_temperature.v1.json

@@ -9,6 +9,7 @@
   "expected_frequency": "1min",
   "source": {
     "adapter": "postgresql_direct",
+    "connection_id": "postgresql",
     "mode": "direct_column",
     "schema": "process_data",
     "table": "sensor_readings",

package/skills/feature-management/references/contracts.md

@@ -105,6 +105,7 @@ adapter；凭据不进入 JSON。Feature/Operator/FeatureSet 不需要复制一
 {
   "source": {
     "adapter": "postgresql_direct",
+    "connection_id": "postgresql_bf_monitoring",
     "schema": "process_data",
     "table": "pressure_history",
     "time_column": "event_time",
@@ -168,11 +169,16 @@ requires a new Parameter version and the affected reverse-dependency closure.
 
 PostgreSQL, MySQL, and SQL Server direct-column Parameters share this source
 shape. Set `adapter` to `postgresql_direct`, `mysql_direct`, or
-`sqlserver_direct`; keep database-specific DSNs in server-managed Secrets.
+`sqlserver_direct`; keep database-specific DSNs in server-managed Secrets. For
+PostgreSQL, use `connection_id` to select a configured connection alias, for
+example `postgresql_bf_monitoring`. `connection_id` is not an adapter name and
+must not replace `postgresql_direct`. If omitted on a historical PostgreSQL
+Parameter, the runtime uses the compatibility default connection `postgresql`.
 
 ```json
 {
   "adapter": "postgresql_direct",
+  "connection_id": "postgresql_bf_monitoring",
   "mode": "direct_column",
   "schema": "process_data",
   "table": "sensor_readings",

package/skills/model-lifecycle-management/SKILL.md

@@ -18,6 +18,12 @@ Read [references/discovery.md](references/discovery.md) before locating existing
 resources or selecting runtime bindings. It also defines Job/package preflight
 and version-skew handling.
 
+Read [references/zero-shot-inference.md](references/zero-shot-inference.md) when
+the user wants synchronous zero-shot forecasting from JSON or CSV. This path
+uses the platform-owned `chronos2_forecaster` model name, not a public project
+or contract version, and does not create a TrainingRun, ModelArtifact,
+PredictionJob or prediction result record.
+
 ## Shared Gates
 
 Before training a model that will be evaluated, also read
@@ -38,6 +44,11 @@ evidence when deployment differs.
 - Do not register caller-computed evaluation results. Workers produce predictions, metrics, decisions, and summaries from frozen DatasetArtifact rowsets.
 - Keep credentials, registry secrets, Kubernetes details, and model binaries out of request JSON and reports.
 
+For zero-shot inference, the public identity is only `chronos2_forecaster`.
+Internal contract versions, canonical project keys, runtime bindings and
+historical aliases are resolved by the server. Do not construct a URL
+containing `v1`, `project` or `release_id`.
+
 Report immutable input identities, returned run/job/package IDs, status, validation or gate failures, and the next authorized action. Never claim deployment; it is outside this Skill.
 
 Route deployment validation, creation, rollout state, approval, promotion,

package/skills/model-lifecycle-management/references/discovery.md

@@ -28,6 +28,17 @@ it does not mean every model/device is approved by a release.
 `worker_dependencies_verified=false` explicitly means discovery has not tested
 imports, image pulls or model prediction in the Worker.
 
+For zero-shot model discovery, use the separate foundation-model endpoints:
+
+```bash
+ml-platform --profile server list-foundation-models
+ml-platform --profile server get-foundation-model chronos2_forecaster
+```
+
+These endpoints intentionally do not expose the SystemModel `project` or
+contract version. Do not use `get-system-model` or Runtime Release binding keys
+as the public zero-shot model identifier.
+
 ## Resource lookup and pagination
 
 ```bash

package/skills/model-lifecycle-management/references/training-contracts.md

@@ -11,7 +11,7 @@ Example forecasting sequence run:
 
 ```json
 {
-  "schema_version": "ml_data_platform.training_run/v3",
+  "schema_version": "ml_data_platform.training_run/v4",
   "run_id": "pressure_forecast_run_01",
   "experiment": "pressure_forecast",
   "task": {"kind": "forecasting", "objective": "regression"},
@@ -183,9 +183,12 @@ weather observations.
 
 Inspect `data_schema.json`, `resolved_manifest.json` and the feature Parquet via
 `download-dataset-artifact DATASET_ID MANIFEST_HASH --project PROJECT --out-dir DIR`
-(repeat `--file` for selective downloads). The FeatureSet reference must match
-the artifact; the full ordered FeatureSet determines model channels. There is
-no documented `data.features.columns` shortcut for choosing a subset.
+(repeat `--file` for selective downloads). In TrainingRun v4, the FeatureSet
+reference defines the ordered model inputs. It may be a registered exact-version
+subset of the DatasetArtifact's materialized FeatureSet, in its own order. The
+platform freezes both identities and the projected dependency contract in the
+TrainingJob and ModelArtifact. There is no `data.features.columns` shortcut:
+create a new immutable FeatureSet version for each distinct model input contract.
 
 `identity:v1` leaves labels unchanged. `difference` requires a baseline Feature
 in `required_inputs` and at least one `online_inputs` entry, which must be a
@@ -286,7 +289,7 @@ null Features or labels also skip samples. Candidate row counts therefore are
 not training/evaluation sample counts. Report the materialized population and
 coverage instead of assuming all Parquet rows were used.
 
-For `continuous_target_series`, TrainingRun v3 derives the fixed maximum
+For `continuous_target_series`, TrainingRun v4 derives the fixed maximum
 `prediction_length` as `data.temporal.horizon / data.temporal.frequency`; the
 horizon must be a positive exact multiple of the frequency. The target input
 must be a numeric, at-prediction Feature and the output label must be the sole

package/skills/model-lifecycle-management/references/training.md

@@ -21,7 +21,7 @@ FeatureSet order and evaluation runtime before the first Job. See
   `label_time - prediction_time`, and validate the complete TrainingRun before
   registration/submission. Validation may not catch undeclared plugin limits or
   missing dependencies in the eventual Worker.
-- For a continuous future trajectory, use TrainingRun v3. Use
+- For a continuous future trajectory, use TrainingRun v4. Use
   `continuous_target_series` for legacy v1 or
   `continuous_target_series_with_covariates` for v2. Its fixed maximum
   prediction length comes from temporal horizon divided by frequency; do not
@@ -75,7 +75,7 @@ ml-platform --profile server submit-training-job training-job-request.json
 ml-platform --profile server get-training-job <job-id>
 ```
 
-The TrainingRun binds immutable DatasetArtifact identities, DataSchema, ordered inputs, targets, InputAdapter, canonical SystemModel `v1`, reproducibility controls, and runtime identity. Job resolution freezes the SystemModel and approved runtime image as an internal TrainerDefinition snapshot. Validation proves compatibility only. Submit the run and Job separately after authorization and record spec hash and Job ID. Terminal success must expose a ModelArtifact ID; validate it before evaluation or packaging.
+The TrainingRun binds immutable DatasetArtifact identities, DataSchema, an ordered registered model FeatureSet, targets, InputAdapter, canonical SystemModel `v1`, reproducibility controls, and runtime identity. The model FeatureSet may be an exact-version subset of the Artifact's materialized FeatureSet; changing only the subset or order does not require rebuilding the wide DatasetArtifact. Job resolution freezes both FeatureSet identities, selected columns and projected lineage contract together with the SystemModel and approved runtime image. Validation proves compatibility only. Submit the run and Job separately after authorization and record spec hash and Job ID. Terminal success must expose a ModelArtifact ID; validate it before evaluation or packaging.
 
 ```bash
 ml-platform --profile server validate-model-artifact <artifact-id>

package/skills/model-lifecycle-management/references/zero-shot-inference.md

@@ -0,0 +1,67 @@
+# Synchronous zero-shot inference
+
+Use this workflow for platform-approved Chronos-2 forecasting without a
+TrainingRun or ModelArtifact. The public model identity is the name
+`chronos2_forecaster`; internal contract versions and runtime bindings are
+server-side compatibility details.
+
+## Discovery
+
+```bash
+ml-platform --profile server list-foundation-models
+ml-platform --profile server get-foundation-model chronos2_forecaster
+```
+
+The response contains the active `release_id`, checkpoint digest, Serving image
+digest and bounded input capabilities. Normal prediction does not require the
+caller to look up or submit that release ID.
+
+## JSON prediction
+
+The request contains `schema`, `records` and `forecast`. Column roles are
+explicit; the server does not infer target, timestamp or covariate columns from
+their names.
+
+```bash
+ml-platform --profile server predict-foundation \
+  chronos2_forecaster /absolute/path/to/request.json
+```
+
+The endpoint is `POST /foundation-models/chronos2_forecaster/predict`.
+
+## CSV prediction
+
+CSV uses the same schema and forecast JSON as the JSON path. The CLI sends one
+bounded multipart request and does not upload the file to object storage.
+
+```bash
+ml-platform --profile server predict-foundation-csv \
+  chronos2_forecaster /absolute/path/to/input.csv \
+  --schema /absolute/path/to/schema.json \
+  --forecast /absolute/path/to/forecast.json
+```
+
+The endpoint is `POST /foundation-models/chronos2_forecaster/predict-file`.
+JSON and CSV are normalized to the same canonical rows and should produce the
+same `input_hash` for equivalent input.
+
+## Exact replay
+
+Use `--release-id` only for replay or incident comparison:
+
+```bash
+ml-platform --profile server predict-foundation \
+  chronos2_forecaster /absolute/path/to/request.json \
+  --release-id chronos2-base-2026-08
+```
+
+The server validates that the release belongs to the named model and is
+eligible for replay. A normal request always resolves the active release.
+
+## Runtime boundary
+
+Foundation Serving is a long-running CPU workload. It loads and verifies the
+immutable checkpoint at startup and does not connect to PostgreSQL during a
+request. Synchronous requests are bounded by release byte, row, series,
+context, horizon and timeout limits. There is no JSONL, asynchronous task,
+PredictionRun or prediction-result persistence in this MVP.