openxiangda 1.0.173 → 1.0.174

package/README.md

@@ -94,6 +94,8 @@ Architecture-class requests are plan-gated by default. For new apps, complex pag
 
 Risk is tiered. Read-only/docs/tests are L0. Narrow reversible fixes are L1 and use `sdd quick`; L2/L3 retain explicit approval and exact structured coverage. SDD is streamlined by default: incomplete task/evidence/spec prose warns but does not block. Workspaces that intentionally require prose completion may set `strictDocumentation: true`. Actual argv, exact scope, mainline identity, lease, CAS, destructive operations, Secrets, and Root App atomic activation remain hard gates.
 
+L1 quick records are generated in a compact form and should not be expanded into design essays. Mainline bundles may keep `<profile>` in reviewed command templates; `release publish --profile <name>` binds the real profile to actual argv without rewriting tracked SDD. React SPA page codes remain logical coverage and activate through one Runtime child. `release app-head` returns a compact summary by default; add `--full` for the complete manifest.
+
 Every concurrent task uses its own Git worktree/branch and development change. The mainline release coordinator bundles selected approved changes after merge; dependency impact outside the approved scope is reported as a warning rather than silently widening a small release. Live commands still require canonical exact selectors, and app-wide/delete operations need explicit authority.
 
 Before confirmation, agents may read, inspect, snapshot, dry-run, ask questions, and output/write the architecture document. They must not edit source files, mutate platform resources, publish, deploy, send notifications, or call live write/delete endpoints.

package/lib/cli.js

@@ -949,6 +949,60 @@ function summarizeReleaseStepResult(result) {
   };
 }
 
+function releaseExecutionContextFromBegin(result, target, changeId) {
+  const value =
+    result && typeof result === 'object' && !Array.isArray(result)
+      ? result
+      : {};
+  const releaseSourceRevision =
+    value.releaseSourceRevision &&
+    typeof value.releaseSourceRevision === 'object' &&
+    !Array.isArray(value.releaseSourceRevision)
+      ? value.releaseSourceRevision
+      : null;
+  if (
+    !value.leaseId ||
+    !value.clientSessionId ||
+    !releaseSourceRevision?.baseCommit
+  ) {
+    return null;
+  }
+  return {
+    appType: target.appType,
+    profile: target.profileName,
+    changeId,
+    leaseId: String(value.leaseId),
+    baselineId: value.baselineId ? String(value.baselineId) : null,
+    clientSessionId: String(value.clientSessionId),
+    releaseSourceRevision,
+    capturedAt: new Date().toISOString(),
+  };
+}
+
+function isDefinitelyPreWriteReleaseError(error) {
+  const code = String(error?.code || '');
+  if (new Set([
+    'RELEASE_PUBLISH_REVISION_CHANGED',
+    'RELEASE_SOURCE_DIRTY',
+    'RELEASE_SOURCE_BRANCH_REQUIRED',
+    'RELEASE_SOURCE_MAINLINE_REQUIRED',
+    'RELEASE_SOURCE_MAINLINE_NOT_PUSHED',
+    'RELEASE_SOURCE_BEHIND_MAIN',
+    'RELEASE_GIT_AUTH_REQUIRED',
+    'RELEASE_MAIN_BRANCH_UNRESOLVED',
+    'RELEASE_MAIN_REF_UNVERIFIED',
+    'SDD_PREPUBLISH_FAILED',
+    'PUBLISH_CONTEXT_REQUIRED',
+    'APP_RELEASE_STAGED_SCOPE_REQUIRED',
+    'APP_RELEASE_STAGED_SCOPE_MISMATCH',
+  ]).has(code)) {
+    return true;
+  }
+  return /^(?:SDD_|RELEASE_(?:SOURCE|GIT|MAINLINE|MAIN_BRANCH|MAIN_REF)|RUNTIME_(?:SOURCE|BUILD|PACKAGE|DEPENDENCY))/.test(
+    code
+  );
+}
+
 function parseChildJsonOutput(stdout) {
   const text = String(stdout || '').trim();
   if (!text) return null;
@@ -1061,6 +1115,138 @@ async function waitForPublishLeaseAvailability(config, target, flags = {}) {
   }
 }
 
+function readReleaseRecoveryContext(target, changeId) {
+  if (!changeId) return null;
+  const execution = readReleaseExecution(changeId);
+  const context = execution?.releaseContext;
+  if (!context || typeof context !== 'object' || Array.isArray(context)) {
+    return null;
+  }
+  if (
+    context.appType !== target.appType ||
+    context.profile !== target.profileName ||
+    context.changeId !== changeId ||
+    !context.leaseId ||
+    !context.clientSessionId ||
+    !context.releaseSourceRevision
+  ) {
+    return null;
+  }
+  return { execution, context };
+}
+
+function remoteLeaseOwnedByRecovery(remote, recovery) {
+  if (!remote?.active || !recovery) return false;
+  const holder = remote.holder;
+  const holderIsSelf =
+    holder === 'self' ||
+    holder?.self === true ||
+    holder?.clientSessionId === recovery.clientSessionId;
+  return Boolean(
+    holderIsSelf &&
+      String(remote.leaseId || '') === String(recovery.leaseId) &&
+      String(remote.changeId || '') === String(recovery.changeId)
+  );
+}
+
+async function endReleaseWithoutLocalLease(
+  config,
+  target,
+  flags,
+  baseline
+) {
+  const changeId = readStringFlag(flags, 'change');
+  const recovered = readReleaseRecoveryContext(target, changeId);
+  const recovery = recovered?.context || null;
+  const clientSessionId =
+    recovery?.clientSessionId ||
+    baseline?.clientSessionId ||
+    createPublishClientSessionId();
+  const remote = await fetchPublishLeaseStatus(
+    config,
+    target,
+    clientSessionId
+  );
+  const sourceRevision =
+    baseline?.releaseSourceRevision ||
+    recovery?.releaseSourceRevision ||
+    null;
+
+  if (remote?.active) {
+    if (!recovery) {
+      fail(
+        `PUBLISH_LEASE_RECOVERY_REQUIRED: 远端仍有活动发布租约 ${remote.leaseId || '-'}；本地状态缺失，禁止误报 inactive。请使用原 change 的私有 execution.json 恢复，或等待租约过期后只读核对`
+      );
+    }
+    if (!remoteLeaseOwnedByRecovery(remote, recovery)) {
+      fail(
+        'PUBLISH_LEASE_RECOVERY_MISMATCH: 远端活动租约不属于当前 change/session；未释放任何租约'
+      );
+    }
+    const integration = assertReleaseSourceIntegrated(sourceRevision, {
+      cwd: process.cwd(),
+    });
+    const remoteResult = await requestWithAuth(
+      config,
+      target.profileName,
+      publishLeaseApiPath(
+        target,
+        `/${encodeURIComponent(recovery.leaseId)}/release`
+      ),
+      {
+        method: 'POST',
+        body: {
+          completion: 'mainline-integrated-recovered',
+          sourceCommit: integration.sourceCommit,
+          mainBranch: integration.mainBranch,
+          mainTipCommit: integration.mainTipCommit,
+        },
+      }
+    );
+    if (baseline) {
+      clearChangeBaseline(target, baseline.baselineId || baseline.id);
+    }
+    releaseWorktreeOwner({ cwd: process.cwd() });
+    recovered.execution.leaseReleasedAt = new Date().toISOString();
+    recovered.execution.leaseReleaseRecovered = true;
+    recovered.execution.updatedAt = recovered.execution.leaseReleasedAt;
+    writePrivateJsonAtomic(
+      releaseExecutionFile(changeId),
+      recovered.execution
+    );
+    return {
+      ...(remoteResult && typeof remoteResult === 'object'
+        ? remoteResult
+        : {}),
+      active: false,
+      appType: target.appType,
+      recovered: true,
+      integration,
+    };
+  }
+
+  const integration = sourceRevision
+    ? assertReleaseSourceIntegrated(sourceRevision, { cwd: process.cwd() })
+    : null;
+  if (baseline && !integration) {
+    fail(
+      'RELEASE_SOURCE_LINEAGE_REQUIRED: 本地仍有发布基线，但缺少可验证的 releaseSourceRevision；禁止无证据清理'
+    );
+  }
+  if (baseline) {
+    clearChangeBaseline(target, baseline.baselineId || baseline.id);
+  }
+  releaseWorktreeOwner({ cwd: process.cwd() });
+  return {
+    active: false,
+    appType: target.appType,
+    local: false,
+    remote,
+    recovered: false,
+    integration,
+  };
+}
+
 async function publishWorkspaceRelease(config, target, flags = {}) {
   const changeId = readStringFlag(flags, 'change');
   if (!changeId) {
@@ -1239,13 +1425,6 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
       }
       journalStep.status = 'running';
       journalStep.startedAt = new Date().toISOString();
-      if (
-        step.id !== 'lease-and-capture' &&
-        step.id !== 'release-lease' &&
-        step.writes !== false
-      ) {
-        execution.writeAttempted = true;
-      }
       execution.updatedAt = journalStep.startedAt;
       writePrivateJsonAtomic(releaseExecutionFile(changeId), execution);
       warn(`发布步骤开始: ${step.id}`);
@@ -1253,6 +1432,20 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
       journalStep.status = 'completed';
       journalStep.completedAt = new Date().toISOString();
       journalStep.result = summarizeReleaseStepResult(result);
+      if (step.id === 'lease-and-capture') {
+        execution.releaseContext = releaseExecutionContextFromBegin(
+          result,
+          target,
+          changeId
+        );
+      }
+      if (
+        step.id !== 'lease-and-capture' &&
+        step.id !== 'release-lease' &&
+        step.writes !== false
+      ) {
+        execution.writeAttempted = true;
+      }
       if (step.stagedKind) execution.stagedWriteOccurred = true;
       execution.updatedAt = journalStep.completedAt;
       writePrivateJsonAtomic(releaseExecutionFile(changeId), execution);
@@ -1282,6 +1475,18 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
         code: error.code || 'RELEASE_STEP_FAILED',
         message: maskText(error.message).slice(0, 1000),
       };
+      const runningDefinition = runnable.find(
+        step => step.id === runningStep.id
+      );
+      if (
+        runningDefinition &&
+        runningDefinition.id !== 'lease-and-capture' &&
+        runningDefinition.id !== 'release-lease' &&
+        runningDefinition.writes !== false &&
+        !isDefinitelyPreWriteReleaseError(error)
+      ) {
+        execution.writeAttempted = true;
+      }
     }
     execution.status = execution.stagedWriteOccurred
       ? 'staged-resumable'
@@ -1332,6 +1537,7 @@ async function release(args) {
       '  openxiangda release app-finalize --change <id> --staged-resources-json <JSON|file> --profile <name>',
       '说明:',
       '  - publish 默认等待租约并按私有执行日志恢复；上次写结果不确定时必须只读核对后显式 --resume-after-review。',
+      '  - app-head 默认只输出紧凑 head 摘要；需要完整 manifest 时显式追加 --full。',
       '  - begin 获取应用级单写者 promotion lease；不同工作区仍可并行开发和验证。',
       '  - 带 --change 的 resource/runtime 写命令在没有本地 lease 时会自动 begin，并在后续命令复用。',
       '  - 子 Runtime/Page/Backend/Form Release 默认先 stage；app-finalize 用 --staged-resources-json 覆盖 capture 中的 changed children，并在同一事务中原子激活。',
@@ -1599,34 +1805,22 @@ async function release(args) {
       return;
     }
     if (!leaseIdFromArgs) assertLocalPublishLeaseOwnership(stored);
-    assertOrClaimWorktreeOwner({
-      cwd: process.cwd(),
-      changeId: stored?.changeId || readStringFlag(flags, 'change') || 'unscoped-publish',
-    });
     const leaseId = leaseIdFromArgs || stored?.leaseId;
     if (!leaseId) {
-      const integration = baseline?.releaseSourceRevision
-        ? assertReleaseSourceIntegrated(baseline.releaseSourceRevision, {
-            cwd: process.cwd(),
-          })
-        : null;
-      if (baseline && !integration) {
-        fail(
-          'RELEASE_SOURCE_LINEAGE_REQUIRED: 本地仍有发布基线，但缺少可验证的 releaseSourceRevision；禁止无证据清理'
-        );
-      }
-      const result = {
-        active: false,
-        appType: target.appType,
-        local: false,
-        integration,
-      };
-      if (baseline) clearChangeBaseline(target, baseline.baselineId);
-      releaseWorktreeOwner({ cwd: process.cwd() });
+      const result = await endReleaseWithoutLocalLease(
+        config,
+        target,
+        flags,
+        baseline
+      );
       if (flags.json) return writeJson(result);
       print(`当前工作区没有活动发布租约: ${target.appType}`);
       return;
     }
+    assertOrClaimWorktreeOwner({
+      cwd: process.cwd(),
+      changeId: stored?.changeId || readStringFlag(flags, 'change') || 'unscoped-publish',
+    });
     const integration = assertReleaseSourceIntegrated(
       baseline?.releaseSourceRevision,
       { cwd: process.cwd() }
@@ -2427,8 +2621,15 @@ function changedAppReleaseResources(detailResources, captureResources) {
 }
 
 function assertAppReleaseActualGate(target, flags, scope, command) {
+  const runtimeMode = getWorkspaceRuntimeModeFromConfig(
+    readWorkspaceConfigText()
+  );
+  const normalized = normalizeReleaseTargets(
+    scope.targets || {},
+    runtimeMode
+  );
   assertSddReleaseGate(
-    buildExplicitSddReleasePlan(scope.targets, {
+    buildExplicitSddReleasePlan(normalized.activationTargets, {
       files: scope.changedFiles || [],
       commands: [command],
       changeId: scope.changeId,
@@ -2596,6 +2797,70 @@ async function activateAppReleaseDetail(
   );
 }
 
+function summarizeAppReleaseHead(data) {
+  const value =
+    data && typeof data === 'object' && !Array.isArray(data) ? data : {};
+  const release =
+    value.release &&
+    typeof value.release === 'object' &&
+    !Array.isArray(value.release)
+      ? value.release
+      : {};
+  const manifest =
+    release.manifestJson &&
+    typeof release.manifestJson === 'object'
+      ? release.manifestJson
+      : value.manifestJson &&
+          typeof value.manifestJson === 'object'
+        ? value.manifestJson
+        : {};
+  const resources = Array.isArray(manifest.resources)
+    ? manifest.resources
+    : Array.isArray(value.resources)
+      ? value.resources
+      : [];
+  const resourcesByKind = Object.fromEntries(
+    Array.from(
+      resources.reduce((counts, resource) => {
+        const kind = String(resource?.kind || 'Unknown');
+        counts.set(kind, (counts.get(kind) || 0) + 1);
+        return counts;
+      }, new Map())
+    ).sort(([left], [right]) => left.localeCompare(right))
+  );
+  const compactRelease = {};
+  for (const key of [
+    'id',
+    'status',
+    'parentReleaseId',
+    'manifestHash',
+    'verificationHash',
+    'protocolVersion',
+    'createdAt',
+    'updatedAt',
+    'activatedAt',
+  ]) {
+    if (release[key] !== undefined) compactRelease[key] = release[key];
+  }
+  return {
+    appType: value.appType,
+    activeAppReleaseId:
+      value.activeAppReleaseId || release.id || null,
+    ...(value.activeRuntimeReleaseId
+      ? { activeRuntimeReleaseId: value.activeRuntimeReleaseId }
+      : {}),
+    ...(value.activePageReleaseId
+      ? { activePageReleaseId: value.activePageReleaseId }
+      : {}),
+    ...(value.activeBackendReleaseId
+      ? { activeBackendReleaseId: value.activeBackendReleaseId }
+      : {}),
+    release: compactRelease,
+    resourceCount: resources.length,
+    resourcesByKind,
+  };
+}
+
 async function runAppReleaseCommand(
   config,
   target,
@@ -2613,6 +2878,7 @@ async function runAppReleaseCommand(
       target.profileName,
       appReleaseApiPath(target, '/head')
     );
+    if (!flags.full) data = summarizeAppReleaseHead(data);
   } else if (subcommand === 'app-list') {
     data = await requestWithAuth(
       config,

package/lib/release-mainline.js

@@ -264,6 +264,12 @@ function resolveRemoteMainline({ cwd, remoteName }) {
       `远端 ${remoteName} 同时存在 main 与 master 且无法读取 remote HEAD；请先修复远端默认分支 HEAD`
     );
   }
+  if (isGitAuthenticationError(remoteHead.stderr)) {
+    throw releaseMainlineError(
+      'RELEASE_GIT_AUTH_REQUIRED',
+      `无法认证权威远端 ${remoteName}。请先解锁系统钥匙串或配置可用的 Git credential helper，并确认 \`git ls-remote --symref ${remoteName} HEAD\` 可成功执行；发布会在获取平台租约前停止，不会留下远端发布状态`
+    );
+  }
   const detail = remoteHead.stderr
     ? `: ${sanitizeGitError(remoteHead.stderr)}`
     : '';
@@ -273,6 +279,12 @@ function resolveRemoteMainline({ cwd, remoteName }) {
   );
 }
 
+function isGitAuthenticationError(value) {
+  return /(?:authentication failed|could not read (?:username|password)|terminal prompts? disabled|credential|keychain|access denied|http basic: access denied|response:\s*(?:401|403)|returned error:\s*(?:401|403))/i.test(
+    String(value || '')
+  );
+}
+
 function readRemoteBranchTip(cwd, remoteName, branchName, options = {}) {
   const result = readGit(
     cwd,
@@ -577,6 +589,7 @@ module.exports = {
   assertReleaseSourceIntegrated,
   assertReleaseSourceRevisionStable,
   inspectReleaseSourceIntegration,
+  isGitAuthenticationError,
   prepareReleaseSourceRevision,
   resolveAuthoritativeMainline,
 };

package/lib/sdd.js

@@ -115,9 +115,12 @@ function readJsonFile(file, fallback = null) {
   }
 }
 
-function writeJsonFile(file, value) {
+function writeJsonFile(file, value, options = {}) {
   ensureDir(path.dirname(file));
-  fs.writeFileSync(file, `${JSON.stringify(value, null, 2)}\n`);
+  fs.writeFileSync(
+    file,
+    `${JSON.stringify(value, null, options.compact ? 0 : 2)}\n`
+  );
 }
 
 function extractSddBlock(configText) {
@@ -578,6 +581,15 @@ function formatAffectedList(items) {
 }
 
 function createProposalContent(meta) {
+  if (meta.changeMode === 'quick') {
+    return [
+      `# Quick Change: ${meta.title}`,
+      '',
+      `User intent and approval are recorded in \`${CHANGE_META_FILE}\`.`,
+      `Exact resource/file scope is recorded in \`${COVERAGE_FILE}\`; no additional proposal prose is required.`,
+      '',
+    ].join('\n');
+  }
   return `# Proposal: ${meta.title}
 
 ## Intent
@@ -606,6 +618,14 @@ Deliver "${meta.title}" as one focused OpenXiangda application change.
 }
 
 function createDesignContent(meta) {
+  if (meta.changeMode === 'quick') {
+    return [
+      '# Design',
+      '',
+      'L1 exact-scope change; implementation stays inside coverage.json and uses the generated atomic release plan.',
+      '',
+    ].join('\n');
+  }
   return `# Design: ${meta.title}
 
 ## OpenXiangda Resource Impact
@@ -640,22 +660,19 @@ function createTasksContent(meta = {}) {
       '',
       '## Implementation',
       '',
-      '- [x] Record exact L1 scope and explicit approval basis',
-      '- [ ] Implement the focused change',
+      '- [ ] Implement the exact covered change',
       '',
       '## Prepublish',
       '',
-      '- [ ] Record implementation checks and dry-run evidence',
-      '- [ ] Confirm the exact release plan',
+      '- [ ] Run the focused check and confirm the generated release plan',
       '',
       '## Postpublish',
       '',
-      '- [ ] Record publish/deploy result',
-      '- [ ] Merge/fast-forward the frozen release SHA and push the authoritative default branch',
+      '- [ ] Record atomic publish and mainline integration status',
       '',
       '## Archive',
       '',
-      '- [ ] Confirm the released change is ready to archive',
+      '- [ ] Archive the released change',
       '',
     ].join('\n');
   }
@@ -686,7 +703,21 @@ function createTasksContent(meta = {}) {
   ].join('\n');
 }
 
-function createEvidenceContent() {
+function createEvidenceContent(meta = {}) {
+  if (meta.changeMode === 'quick') {
+    return [
+      '# Evidence',
+      '',
+      '## Verification',
+      '',
+      '- [ ] Record the focused check result',
+      '',
+      '## Release',
+      '',
+      '- [ ] Record the atomic publish result',
+      '',
+    ].join('\n');
+  }
   return [
     '# Evidence',
     '',
@@ -708,6 +739,22 @@ function createEvidenceContent() {
 }
 
 function createDeltaSpecContent(meta, domain) {
+  if (meta.changeMode === 'quick') {
+    return [
+      `# ${domain} Delta Spec`,
+      '',
+      '## ADDED Requirements',
+      '',
+      `### Requirement: ${meta.title}`,
+      'The application SHALL preserve existing behavior except for the exact approved L1 scope.',
+      '',
+      '#### Scenario: Focused change',
+      '- **Given** the existing application behavior',
+      `- **When** ${meta.title} is applied`,
+      '- **Then** only the covered target changes and unrelated behavior remains unchanged',
+      '',
+    ].join('\n');
+  }
   return `# ${domain} Delta Spec
 
 ## ADDED Requirements
@@ -807,13 +854,16 @@ function proposeSddChange(options = {}) {
   const meta = createChangeMetadata(changeId, options);
   const coverage = createCoverageManifest(meta, domain);
   const release = createReleaseManifest(meta);
-  writeJsonFile(path.join(changeDir, CHANGE_META_FILE), meta);
-  writeJsonFile(path.join(changeDir, COVERAGE_FILE), coverage);
-  writeJsonFile(path.join(changeDir, RELEASE_FILE), release);
+  const jsonWriteOptions = {
+    compact: meta.changeMode === 'quick',
+  };
+  writeJsonFile(path.join(changeDir, CHANGE_META_FILE), meta, jsonWriteOptions);
+  writeJsonFile(path.join(changeDir, COVERAGE_FILE), coverage, jsonWriteOptions);
+  writeJsonFile(path.join(changeDir, RELEASE_FILE), release, jsonWriteOptions);
   fs.writeFileSync(path.join(changeDir, 'proposal.md'), createProposalContent(meta));
   fs.writeFileSync(path.join(changeDir, 'design.md'), createDesignContent(meta));
   fs.writeFileSync(path.join(changeDir, 'tasks.md'), createTasksContent(meta));
-  fs.writeFileSync(path.join(changeDir, 'evidence.md'), createEvidenceContent());
+  fs.writeFileSync(path.join(changeDir, 'evidence.md'), createEvidenceContent(meta));
   fs.writeFileSync(
     path.join(changeDir, 'specs', domain, 'spec.md'),
     createDeltaSpecContent(meta, domain)
@@ -1024,7 +1074,9 @@ function approveSddChange(options = {}) {
     ...(options.approvalBasis ? { approvalBasis: options.approvalBasis } : {}),
     updatedAt: nowIso(),
   };
-  writeJsonFile(loaded.metaFile, meta);
+  writeJsonFile(loaded.metaFile, meta, {
+    compact: meta.changeMode === 'quick',
+  });
   return {
     schemaVersion: meta.schemaVersion,
     change: meta,
@@ -2052,6 +2104,7 @@ function validateReleaseManifest(
   }
   if (
     !legacyMode &&
+    !options.actualExecution &&
     Array.isArray(release.commands) &&
     release.commands.length > 0
   ) {

package/openxiangda-skills/SKILL.md

@@ -60,6 +60,8 @@ openxiangda sdd quick <change> --kind copy --pages <page> --files <file> --summa
 
 Function quick changes require the complete `--risk-json` assessment; Automation, Workflow, schema, permissions, auth/public access, migrations, destructive and cross-resource changes cannot use quick mode. Before release run `--stage prepublish`; use `postpublish` only after promotion and `archive` only when all evidence exists.
 
+Quick changes use compact generated JSON/prose. Do not expand them into proposal/design essays; implement the exact covered code, run the focused check, and let the mainline bundle own final atomic promotion.
+
 Keep development lightweight: structured approval plus exact resource/file scope are authoritative. By default, unfinished tasks/evidence/spec prose produces warnings at every stage and does not block release; set `strictDocumentation: true` only for a workspace that intentionally wants prose as a gate. Actual publish argv, mainline identity, CAS, lease, destructive scope, and atomic activation remain hard gates.
 
 The CLI regenerates one canonical command set from structured coverage instead of asking agents to maintain two command copies. A single Function uses `resource publish function --only <code>`; qualified selectors are used only when Function and Automation are mixed. Generated React SPA plans use exact Form bundles, one Backend `--stage-only` command, Runtime `--no-activate`, and Root `app-finalize`. Actual argv is validated again at write time.
@@ -89,6 +91,8 @@ openxiangda release publish --change <release-change> --profile <name>
 
 `release publish` is the default promotion entrypoint. It verifies without rewriting reviewed `change.json`/`release.json`, waits for the app lease, freezes the App capture after ownership is acquired, executes deterministic exact staged steps, resumes from `.openxiangda/releases/<change>/execution.json`, atomically finalizes, verifies mainline integration, and releases the lease. `release begin` and child commands remain recovery/diagnostic primitives.
 
+Reviewed bundle commands may retain `<profile>` as a template. The explicit real `release publish --profile <name>` value is bound to actual child argv without rewriting tracked SDD. React SPA page codes are logical coverage targets and activate through one Runtime child; they do not require PageRelease. `release app-head` is compact by default; use `--full` only when the complete manifest is required.
+
 `release begin --change` freezes a clean committed `HEAD` only when the current branch is the authoritative default `main`/`master` and its commit exactly equals the live remote tip. Before any live write, the CLI preflights the complete target set and rejects source changes during the release. A feature worktree or unpushed main receives `RELEASE_SOURCE_MAINLINE_REQUIRED` / `RELEASE_SOURCE_MAINLINE_NOT_PUSHED`; merge, test, push, and start the one mainline release instead of forcing it. Optional `.git` remote suffix differences are aliases of the same repository; genuinely different remotes still fail closed.
 
 Because promotion begins from the already-pushed authoritative mainline, `release integration-status` should pass immediately after activation. Run it, then `release end`; no post-release branch merge is required.

package/openxiangda-skills/skills/openxiangda-core/SKILL.md

@@ -94,8 +94,12 @@ openxiangda release publish --change <release-change> --profile <name>
 
 `release publish` is the normal whole-app entrypoint: it verifies SDD without mutating reviewed files, waits for the promotion lease, freezes one App capture, stages the exact Form/Backend/Runtime children, resumes from a private execution journal, finalizes once, and releases the lease. Individual release commands are recovery/diagnostic primitives.
 
+Reviewed bundle commands may retain `<profile>` as a template. The explicit real `release publish --profile <name>` value is bound to actual child argv without rewriting tracked SDD. React SPA page codes remain logical coverage targets and activate through the single Runtime child; they do not require PageRelease. If local lease state disappears, `release end --change <id>` reconciles a self-owned remote lease from the private execution journal and never reports inactive while a remote lease is active.
+
 `runtime deploy --no-activate` uploads an immutable preview release from a clean committed mainline `HEAD`. It reads a narrow Runtime head instead of the full app snapshot. Before acquiring a lease, the CLI confirms `package.json#scripts.build` and existing dependencies; it uses `npm run build` to execute the declared script so pnpm worktree symlinks do not trigger a reinstall. Immutable Git-base artifact hashes are cached under the Git common directory. `release begin` requires local main/master and the live remote default tip to be identical, so `integration-status` is already satisfied after activation and `release end` does not wait for a later merge.
 
+`release app-head` returns a compact head/resource-count summary by default. Use `--full` only when the complete manifest is required.
+
 `resource plan`, `resource publish`, and `runtime deploy` report coarse phases on stderr and emit a heartbeat after 15 seconds without completion. JSON stdout stays machine-readable and includes `timings`; use it to identify whether time is spent in plan, preflight, build, upload, write, or activate instead of rerunning an opaque command.
 
 Use `--upload-mode legacy-json` only for an old platform that lacks staged uploads. Keep timeout/progress on stderr so `--json` stdout remains machine-readable.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "1.0.173",
+  "version": "1.0.174",
   "description": "OpenXiangda CLI, workspace build tools, runtime SDK, and form components.",
   "private": false,
   "bin": {