openxiangda 1.0.174 → 1.0.175

package/README.md

@@ -94,7 +94,7 @@ Architecture-class requests are plan-gated by default. For new apps, complex pag
 
 Risk is tiered. Read-only/docs/tests are L0. Narrow reversible fixes are L1 and use `sdd quick`; L2/L3 retain explicit approval and exact structured coverage. SDD is streamlined by default: incomplete task/evidence/spec prose warns but does not block. Workspaces that intentionally require prose completion may set `strictDocumentation: true`. Actual argv, exact scope, mainline identity, lease, CAS, destructive operations, Secrets, and Root App atomic activation remain hard gates.
 
-L1 quick records are generated in a compact form and should not be expanded into design essays. Mainline bundles may keep `<profile>` in reviewed command templates; `release publish --profile <name>` binds the real profile to actual argv without rewriting tracked SDD. React SPA page codes remain logical coverage and activate through one Runtime child. `release app-head` returns a compact summary by default; add `--full` for the complete manifest.
+L1 quick records are generated in a compact form and should not be expanded into design essays. Mainline bundles may keep `<profile>` in reviewed command templates; `release publish --profile <name>` binds the real profile to actual argv without rewriting tracked SDD. React SPA page codes remain logical coverage and activate through one Runtime child. `release app-head` and `runtime releases` return compact summaries by default; add `--full` for the complete manifest.
 
 Every concurrent task uses its own Git worktree/branch and development change. The mainline release coordinator bundles selected approved changes after merge; dependency impact outside the approved scope is reported as a warning rather than silently widening a small release. Live commands still require canonical exact selectors, and app-wide/delete operations need explicit authority.
 

package/lib/cli.js

@@ -1623,10 +1623,14 @@ async function release(args) {
     const baseline = getStoredChangeBaseline(target, {
       access: 'reconciliation-read',
     });
-    const sourceRevision = baseline?.releaseSourceRevision;
+    const changeId = positional[0] || readStringFlag(flags, 'change');
+    const recovered = readReleaseRecoveryContext(target, changeId);
+    const sourceRevision =
+      baseline?.releaseSourceRevision ||
+      recovered?.context?.releaseSourceRevision;
     if (!sourceRevision) {
       fail(
-        'RELEASE_SOURCE_LINEAGE_REQUIRED: 当前 release 没有冻结的 releaseSourceRevision，不能证明发布提交已回到权威主分支'
+        'RELEASE_SOURCE_LINEAGE_REQUIRED: 当前 release 没有冻结的 releaseSourceRevision；发布已结束时请同时传入 --change <id>，以便从私有执行日志恢复主线证据'
       );
     }
     const result = inspectReleaseSourceIntegration(
@@ -3101,7 +3105,17 @@ async function runAppReleaseCommand(
     let stateReconcileWarning = null;
     try {
       const appHead = await loadRuntimeHeadApp(config, target);
-      saveRuntimeHeadState(target, appHead);
+      const stagedRuntime = stagedResources?.find(
+        resource => resource.kind === 'RuntimeRelease'
+      );
+      saveRuntimeHeadState(target, appHead, {
+        id:
+          stagedRuntime?.identity?.releaseId ||
+          stagedRuntime?.releaseId ||
+          null,
+        buildId: stagedRuntime?.metadata?.buildId || null,
+        assetBaseUrl: stagedRuntime?.metadata?.assetBaseUrl || null,
+      });
     } catch (error) {
       stateReconcileWarning = {
         component: 'RuntimeStateReadback',
@@ -9953,11 +9967,11 @@ async function runtime(args) {
   const { flags, positional } = parseArgs(rest);
   if (wantsSubcommandHelp(subcommand, flags)) {
     print([
-      '用法: openxiangda runtime deploy|releases|activate [--profile name] [--json]',
+      '用法: openxiangda runtime deploy|releases [--full]|activate [--profile name] [--json]',
       '常用流程:',
       '  npm run build',
       '  openxiangda runtime deploy --no-activate --change <change> --profile <name> --json',
-      '  openxiangda runtime releases --profile <name>',
+      '  openxiangda runtime releases --profile <name> [--full]',
       '说明:',
       '  - deploy 上传当前工作区 dist/ 并激活 React SPA runtime release。',
       '  - 默认 --upload-mode auto；multipart 上传遇到 403 时自动切换到平台内置对象存储直传。',
@@ -9984,8 +9998,9 @@ async function runtime(args) {
       target.profileName,
       `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/runtime/releases`
     );
-    if (flags.json) return writeJson(data);
-    print(JSON.stringify(data, null, 2));
+    const output = flags.full ? data : summarizeRuntimeReleaseList(data);
+    if (flags.json) return writeJson(output);
+    print(JSON.stringify(output, null, 2));
     return;
   }
 
@@ -10298,6 +10313,7 @@ async function runtime(args) {
     const runtimeContentHash = String(data?.contentHash || '')
       .trim()
       .toLowerCase();
+    const releaseAssetBaseUrl = data?.assetBaseUrl || assetBaseUrl;
     const stagedResource = flags['no-activate']
       ? stripUndefinedValues({
           kind: 'RuntimeRelease',
@@ -10311,6 +10327,7 @@ async function runtime(args) {
           metadata: {
             buildId: data?.buildId || buildId,
             releaseStatus: data?.status || 'staged',
+            assetBaseUrl: releaseAssetBaseUrl,
           },
         })
       : null;
@@ -10335,7 +10352,6 @@ async function runtime(args) {
             target
           )
         : null;
-    const releaseAssetBaseUrl = data?.assetBaseUrl || assetBaseUrl;
     const result = {
       appType: target.appType,
       buildId,
@@ -10381,7 +10397,7 @@ async function runtime(args) {
     }
   }
 
-  fail('用法: openxiangda runtime deploy|releases|activate [--profile name]');
+  fail('用法: openxiangda runtime deploy|releases [--full]|activate [--profile name]');
 }
 
 async function loadRuntimeHeadApp(config, target) {
@@ -10568,9 +10584,11 @@ async function uploadRuntimeDistFilesStaged(options) {
     async file => {
       const uploaded = await uploadRuntimeDistFile(options, file);
       completed += 1;
-      printRuntimeProgress(
-        `runtime file uploaded [${completed}/${files.length}] ${file.path} ${formatBytes(file.size)} traceId=${options.traceId}`
-      );
+      if (shouldReportRuntimeUploadProgress(completed, files.length)) {
+        printRuntimeProgress(
+          `runtime file uploaded [${completed}/${files.length}] ${file.path} ${formatBytes(file.size)} traceId=${options.traceId}`
+        );
+      }
       return uploaded;
     }
   );
@@ -10625,9 +10643,11 @@ async function uploadRuntimeDistFilesOssDirect(options) {
       );
       const uploaded = await uploadRuntimeDistFileToSignedUrl(options, file, uploadInfo);
       completed += 1;
-      printRuntimeProgress(
-        `runtime ${formatRuntimeStorageProvider(storageProvider)} file uploaded [${completed}/${files.length}] ${file.path} ${formatBytes(file.size)} traceId=${options.traceId}`
-      );
+      if (shouldReportRuntimeUploadProgress(completed, files.length)) {
+        printRuntimeProgress(
+          `runtime ${formatRuntimeStorageProvider(storageProvider)} file uploaded [${completed}/${files.length}] ${file.path} ${formatBytes(file.size)} traceId=${options.traceId}`
+        );
+      }
       return { ...uploaded, storageProvider };
     }
   );
@@ -10889,21 +10909,71 @@ function saveRuntimeReleaseState(target, release) {
   saveProjectState(target.state);
 }
 
-function saveRuntimeHeadState(target, app) {
+function saveRuntimeHeadState(target, app, fallbackRelease = {}) {
   const activeReleaseId =
-    app?.activeRuntimeReleaseId || app?.activeRuntime?.releaseId || null;
+    app?.activeRuntimeReleaseId ||
+    app?.activeRuntime?.releaseId ||
+    fallbackRelease?.id ||
+    fallbackRelease?.releaseId ||
+    null;
   const activeBuildId =
-    app?.activeRuntimeBuildId || app?.activeRuntime?.buildId || null;
+    app?.activeRuntimeBuildId ||
+    app?.activeRuntime?.buildId ||
+    fallbackRelease?.buildId ||
+    null;
   if (!activeReleaseId && !activeBuildId) return false;
   saveRuntimeReleaseState(target, {
     id: activeReleaseId,
     buildId: activeBuildId,
     assetBaseUrl:
-      app?.runtimeAssetBaseUrl || app?.activeRuntime?.assetBaseUrl || null,
+      app?.runtimeAssetBaseUrl ||
+      app?.activeRuntime?.assetBaseUrl ||
+      fallbackRelease?.assetBaseUrl ||
+      null,
   });
   return true;
 }
 
+function summarizeRuntimeReleaseList(data) {
+  const items = Array.isArray(data)
+    ? data
+    : Array.isArray(data?.items)
+      ? data.items
+      : [];
+  const summarized = items.map(item =>
+    stripUndefinedValues({
+      id: item?.id,
+      version: item?.version,
+      buildId: item?.buildId,
+      status: item?.status,
+      storageProvider: item?.storageProvider,
+      fileCount: item?.fileCount,
+      sizeBytes: item?.sizeBytes,
+      contentHash: item?.contentHash,
+      sourceRevision: item?.sourceRevision,
+      parentReleaseId: item?.parentReleaseId,
+      parentSourceRevision: item?.parentSourceRevision,
+      lineageBypassReason: item?.lineageBypassReason,
+      lineageBootstrap: item?.lineageBootstrap,
+      releaseNotes: item?.releaseNotes,
+      createdAt: item?.createdAt,
+      activatedAt: item?.activatedAt,
+    })
+  );
+  return Array.isArray(data)
+    ? summarized
+    : {
+        ...(data && typeof data === 'object' ? data : {}),
+        items: summarized,
+      };
+}
+
+function shouldReportRuntimeUploadProgress(completed, total) {
+  if (total <= 10) return true;
+  const interval = Math.max(1, Math.ceil(total / 10));
+  return completed === 1 || completed === total || completed % interval === 0;
+}
+
 function formatBytes(value) {
   const bytes = Number(value || 0);
   if (bytes < 1024) return `${bytes}B`;
@@ -14350,7 +14420,7 @@ async function tryBuildFunctionSourcesWithLegacyWorkspaceBuilder(
 
   let usedLegacyBuilder = false;
   for (const sourceInfo of sourceInfos) {
-    const result = runWorkspaceJsCodeBuild(
+    const result = runLegacyWorkspaceJsCodeBuild(
       workspaceRoot,
       sourceInfo.scriptCode,
       sourceInfo.sourceKind
@@ -21237,6 +21307,27 @@ function runWorkspaceJsCodeBuild(workspaceRoot, resolvedScriptCode, sourceKind)
   );
 }
 
+function runLegacyWorkspaceJsCodeBuild(
+  workspaceRoot,
+  resolvedScriptCode,
+  sourceKind
+) {
+  return spawnSync(
+    'pnpm',
+    [
+      'build-js-code',
+      '--script',
+      resolvedScriptCode,
+      '--source',
+      sourceKind,
+    ],
+    {
+      cwd: workspaceRoot,
+      encoding: 'utf8',
+    }
+  );
+}
+
 function isUnsupportedFunctionsBuildScript(result) {
   const output = `${result.stdout || ''}\n${result.stderr || ''}`;
   return (

package/openxiangda-skills/SKILL.md

@@ -91,7 +91,7 @@ openxiangda release publish --change <release-change> --profile <name>
 
 `release publish` is the default promotion entrypoint. It verifies without rewriting reviewed `change.json`/`release.json`, waits for the app lease, freezes the App capture after ownership is acquired, executes deterministic exact staged steps, resumes from `.openxiangda/releases/<change>/execution.json`, atomically finalizes, verifies mainline integration, and releases the lease. `release begin` and child commands remain recovery/diagnostic primitives.
 
-Reviewed bundle commands may retain `<profile>` as a template. The explicit real `release publish --profile <name>` value is bound to actual child argv without rewriting tracked SDD. React SPA page codes are logical coverage targets and activate through one Runtime child; they do not require PageRelease. `release app-head` is compact by default; use `--full` only when the complete manifest is required.
+Reviewed bundle commands may retain `<profile>` as a template. The explicit real `release publish --profile <name>` value is bound to actual child argv without rewriting tracked SDD. React SPA page codes are logical coverage targets and activate through one Runtime child; they do not require PageRelease. `release app-head` and `runtime releases` are compact by default; use `--full` only when the complete manifest is required.
 
 `release begin --change` freezes a clean committed `HEAD` only when the current branch is the authoritative default `main`/`master` and its commit exactly equals the live remote tip. Before any live write, the CLI preflights the complete target set and rejects source changes during the release. A feature worktree or unpushed main receives `RELEASE_SOURCE_MAINLINE_REQUIRED` / `RELEASE_SOURCE_MAINLINE_NOT_PUSHED`; merge, test, push, and start the one mainline release instead of forcing it. Optional `.git` remote suffix differences are aliases of the same repository; genuinely different remotes still fail closed.
 

package/openxiangda-skills/skills/openxiangda-core/SKILL.md

@@ -98,7 +98,7 @@ Reviewed bundle commands may retain `<profile>` as a template. The explicit real
 
 `runtime deploy --no-activate` uploads an immutable preview release from a clean committed mainline `HEAD`. It reads a narrow Runtime head instead of the full app snapshot. Before acquiring a lease, the CLI confirms `package.json#scripts.build` and existing dependencies; it uses `npm run build` to execute the declared script so pnpm worktree symlinks do not trigger a reinstall. Immutable Git-base artifact hashes are cached under the Git common directory. `release begin` requires local main/master and the live remote default tip to be identical, so `integration-status` is already satisfied after activation and `release end` does not wait for a later merge.
 
-`release app-head` returns a compact head/resource-count summary by default. Use `--full` only when the complete manifest is required.
+`release app-head` and `runtime releases` return compact summaries by default. Use `--full` only when the complete manifest is required.
 
 `resource plan`, `resource publish`, and `runtime deploy` report coarse phases on stderr and emit a heartbeat after 15 seconds without completion. JSON stdout stays machine-readable and includes `timings`; use it to identify whether time is spent in plan, preflight, build, upload, write, or activate instead of rerunning an opaque command.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "1.0.174",
+  "version": "1.0.175",
   "description": "OpenXiangda CLI, workspace build tools, runtime SDK, and form components.",
   "private": false,
   "bin": {