openxiangda 1.0.178 → 1.0.180

package/lib/cli.js

@@ -67,6 +67,7 @@ const {
 const {
   buildWorkspaceReleaseCommands,
   buildWorkspaceReleaseSteps,
+  commandFromArgs,
   normalizeReleaseTargets,
   releasePlanHash,
 } = require('./release-plan');
@@ -126,6 +127,19 @@ const {
   renderResourceExplain,
 } = require('./design-gates');
 const { buildDesignReview, renderDesignReview } = require('./design-review');
+const {
+  bindEnvironmentTarget,
+  buildCandidateBundle,
+  normalizeEnvironmentKind,
+  readCandidate,
+  readJsonInput,
+  releaseExecutionPath,
+  resolveManagedStateBinding,
+  resolveEnvironmentTarget,
+  saveCandidate,
+  sha256Canonical,
+} = require('./application-environments');
+const { startDeveloperCenter } = require('./developer-center');
 const {
   describeOpenApiOperation,
   listOpenApiOperations,
@@ -229,7 +243,9 @@ async function mainImpl(argv) {
   if (command === 'open-api') return openApi(rest);
   if (command === 'design') return design(rest);
   if (command === 'sdd') return sdd(rest);
+  if (command === 'environment') return environment(rest);
   if (command === 'release') return release(rest);
+  if (command === 'studio') return studio(rest);
   if (command === 'task') return task(rest);
   if (command === 'workspace') return workspace(rest);
   if (command === 'app') return app(rest);
@@ -278,7 +294,9 @@ Usage:
   openxiangda open-api credential list|get|create|update|rotate-secret [id] [--profile name] [--show-secret] [--yes] [--json]
   openxiangda design gates|template|review [--topic code] [--json]
   openxiangda sdd init|migrate|propose|quick|bundle|approve|status|context|verify|sync|archive [change] [--change id] [--json]
+  openxiangda environment init|attach|bind|list|status|diff|use [preproduction|production] [--logical-app code] [--environment target] [--json]
   openxiangda release publish|begin|status|integration-status|renew|end [--change id] [--profile name] [--watch] [--json]
+  openxiangda release candidate|deploy|test|promote|rollback [--candidate id] [--environment target] [--json]
   openxiangda task status --change <id> [--profile name] [--watch] [--json]
   openxiangda release backend-head|backend-list|backend-detail|backend-diff|backend-rollback|backend-abort|backend-retry [releaseId] [--profile name] [--json]
   openxiangda release app-capture|app-head|app-list|app-detail|app-diff|app-prepare|app-verify|app-activate|app-finalize|app-rollback|app-abort [releaseId] [--staged-resources-json <JSON|file>] [--activate-staged-children] [--profile name] [--json]
@@ -344,6 +362,7 @@ Usage:
   openxiangda skill install [--agent codex|claude|qoder|dual] [--dest <skills-dir>] [--force] [--dry-run] [--json]
   openxiangda skill status [--agent codex|claude|qoder|dual] [--dest <skills-dir>] [--json]
   openxiangda skill bootstrap [<dir>] [--force] [--dry-run] [--json]
+  openxiangda studio [--no-open] [--port 0]
 
 OpenXiangda 应用开发使用普通用户登录 token，不需要 AK/SK；外部后端集成使用 open-api skill 与 AK/SK。
 所有直接配置写入必须携带 --change <id>，或先执行 release begin --change <id>；dry-run、schema-plan、validate、query/invoke 等只读/数据面命令不会获取发布租约。
@@ -366,6 +385,7 @@ const SUBCOMMAND_BOOLEAN_FLAGS = new Set([
   '--legacy-form-bundle',
   '--no-activate',
   '--no-build',
+  '--no-open',
   '--no-runtime-aliases',
   '--prune',
   '--publish',
@@ -375,6 +395,7 @@ const SUBCOMMAND_BOOLEAN_FLAGS = new Set([
   '--resources',
   '--skip-resources',
   '--show-secret',
+  '--confirm-production',
   '--stage-only',
   '--strict',
   '--sdd-bypass',
@@ -1031,8 +1052,8 @@ function releaseExecutionDir(changeId) {
   );
 }
 
-function releaseExecutionFile(changeId) {
-  return path.join(releaseExecutionDir(changeId), 'execution.json');
+function releaseExecutionFile(changeId, deploymentId) {
+  return releaseExecutionPath(changeId, deploymentId, process.cwd());
 }
 
 function directPublishReceiptFile(changeId) {
@@ -1048,8 +1069,8 @@ function writePrivateJsonAtomic(file, value) {
   fs.renameSync(tempFile, file);
 }
 
-function readReleaseExecution(changeId) {
-  const file = releaseExecutionFile(changeId);
+function readReleaseExecution(changeId, deploymentId) {
+  const file = releaseExecutionFile(changeId, deploymentId);
   if (!fs.existsSync(file)) return null;
   try {
     return JSON.parse(fs.readFileSync(file, 'utf8'));
@@ -1141,6 +1162,7 @@ function releaseExecutionContextFromBegin(result, target, changeId) {
     appType: target.appType,
     profile: target.profileName,
     changeId,
+    deploymentId: target.deploymentId || null,
     leaseId: String(value.leaseId),
     baselineId: value.baselineId ? String(value.baselineId) : null,
     clientSessionId: String(value.clientSessionId),
@@ -1406,8 +1428,42 @@ async function endReleaseWithoutLocalLease(
   };
 }
 
+function decorateEnvironmentReleaseSteps(steps, target, flags = {}) {
+  if (!target.environmentId || !target.targetName) return steps;
+  const deploymentId = readStringFlag(flags, 'deployment-id');
+  for (const step of steps) {
+    step.args.push('--environment', target.targetName);
+    if (deploymentId) step.args.push('--deployment-id', deploymentId);
+    if (step.id === 'app-finalize') {
+      for (const [flag, value] of [
+        ['--environment-id', target.environmentId],
+        ['--candidate-id', readStringFlag(flags, 'candidate-id')],
+      ]) {
+        if (value) step.args.push(flag, value);
+      }
+      const stagedIndex = step.args.indexOf('--staged-resources-json');
+      if (stagedIndex >= 0 && deploymentId) {
+        step.args[stagedIndex + 1] = path
+          .relative(
+            process.cwd(),
+            stagedResourcesFileForChange(changeIdFromStep(step), deploymentId)
+          )
+          .replace(/\\/g, '/');
+      }
+    }
+    step.command = commandFromArgs(step.args);
+  }
+  return steps;
+}
+
+function changeIdFromStep(step) {
+  const index = step.args.indexOf('--change');
+  return index >= 0 ? step.args[index + 1] : 'change';
+}
+
 async function publishWorkspaceRelease(config, target, flags = {}) {
   const changeId = readStringFlag(flags, 'change');
+  const deploymentId = readStringFlag(flags, 'deployment-id') || null;
   if (!changeId) {
     fail('用法: openxiangda release publish --change <id> --profile <name>');
   }
@@ -1432,6 +1488,7 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
     target.profileName,
     changeId
   );
+  decorateEnvironmentReleaseSteps(steps, target, flags);
   const releaseScope = getSddChangeScope({
     cwd: process.cwd(),
     configText: readWorkspaceConfigText(),
@@ -1503,7 +1560,7 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
   const plannedSourceRevision = prepareReleaseSourceRevision({
     cwd: process.cwd(),
   });
-  const existing = readReleaseExecution(changeId);
+  const existing = readReleaseExecution(changeId, deploymentId);
   if (
     existing &&
     (existing.planHash !== planHash ||
@@ -1533,6 +1590,7 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
     appType: target.appType,
     profile: target.profileName,
     changeId,
+    ...(deploymentId ? { deploymentId } : {}),
     planHash,
     releaseSourceRevision: plannedSourceRevision,
     status: 'planned',
@@ -1543,7 +1601,9 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
     steps: [
       {
         id: 'lease-and-capture',
-        command: `openxiangda release begin --change ${changeId} --profile ${target.profileName} --freeze-app-capture`,
+        command: `openxiangda release begin --change ${changeId} --profile ${target.profileName}${
+          target.targetName ? ` --environment ${target.targetName}` : ''
+        } --freeze-app-capture`,
         status: 'pending',
       },
       ...steps.map(step => ({
@@ -1554,7 +1614,9 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
       })),
       {
         id: 'release-lease',
-        command: `openxiangda release end --change ${changeId} --profile ${target.profileName}`,
+        command: `openxiangda release end --change ${changeId} --profile ${target.profileName}${
+          target.targetName ? ` --environment ${target.targetName}` : ''
+        }`,
         status: 'pending',
       },
     ],
@@ -1571,14 +1633,17 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
       changeId,
       planHash,
       executionFile: path
-        .relative(process.cwd(), releaseExecutionFile(changeId))
+        .relative(process.cwd(), releaseExecutionFile(changeId, deploymentId))
         .replace(/\\/g, '/'),
       execution,
     };
   }
   execution.status = 'running';
   execution.updatedAt = new Date().toISOString();
-  writePrivateJsonAtomic(releaseExecutionFile(changeId), execution);
+  writePrivateJsonAtomic(
+    releaseExecutionFile(changeId, deploymentId),
+    execution
+  );
 
   const runnable = [
     {
@@ -1590,6 +1655,12 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
         changeId,
         '--profile',
         target.profileName,
+        ...(target.targetName
+          ? ['--environment', target.targetName]
+          : []),
+        ...(deploymentId
+          ? ['--deployment-id', deploymentId]
+          : []),
         '--freeze-app-capture',
       ],
     },
@@ -1603,6 +1674,12 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
         changeId,
         '--profile',
         target.profileName,
+        ...(target.targetName
+          ? ['--environment', target.targetName]
+          : []),
+        ...(deploymentId
+          ? ['--deployment-id', deploymentId]
+          : []),
       ],
     },
   ];
@@ -1616,7 +1693,10 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
       journalStep.status = 'running';
       journalStep.startedAt = new Date().toISOString();
       execution.updatedAt = journalStep.startedAt;
-      writePrivateJsonAtomic(releaseExecutionFile(changeId), execution);
+      writePrivateJsonAtomic(
+        releaseExecutionFile(changeId, deploymentId),
+        execution
+      );
       warn(`发布步骤开始: ${step.id}`);
       const result = await runOpenXiangdaInProcess(step.args);
       journalStep.status = 'completed';
@@ -1638,12 +1718,18 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
       }
       if (step.stagedKind) execution.stagedWriteOccurred = true;
       execution.updatedAt = journalStep.completedAt;
-      writePrivateJsonAtomic(releaseExecutionFile(changeId), execution);
+      writePrivateJsonAtomic(
+        releaseExecutionFile(changeId, deploymentId),
+        execution
+      );
     }
     execution.status = 'completed';
     execution.completedAt = new Date().toISOString();
     execution.updatedAt = execution.completedAt;
-    writePrivateJsonAtomic(releaseExecutionFile(changeId), execution);
+    writePrivateJsonAtomic(
+      releaseExecutionFile(changeId, deploymentId),
+      execution
+    );
     return {
       completed: true,
       resumed: Boolean(existing),
@@ -1652,7 +1738,7 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
       changeId,
       planHash,
       executionFile: path
-        .relative(process.cwd(), releaseExecutionFile(changeId))
+        .relative(process.cwd(), releaseExecutionFile(changeId, deploymentId))
         .replace(/\\/g, '/'),
       execution,
     };
@@ -1684,7 +1770,10 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
       writeAttempted: execution.writeAttempted,
     });
     execution.updatedAt = new Date().toISOString();
-    writePrivateJsonAtomic(releaseExecutionFile(changeId), execution);
+    writePrivateJsonAtomic(
+      releaseExecutionFile(changeId, deploymentId),
+      execution
+    );
     if (!execution.writeAttempted) {
       try {
         await runOpenXiangdaInProcess(
@@ -1695,6 +1784,12 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
             changeId,
             '--profile',
             target.profileName,
+            ...(target.targetName
+              ? ['--environment', target.targetName]
+              : []),
+            ...(deploymentId
+              ? ['--deployment-id', deploymentId]
+              : []),
           ],
           { quiet: true }
         );
@@ -1706,12 +1801,873 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
   }
 }
 
+function environmentSetApiPath(code, suffix = '') {
+  const base = '/openxiangda-api/v1/environment-sets';
+  return code
+    ? `${base}/${encodeURIComponent(code)}${suffix}`
+    : base;
+}
+
+function defaultEnvironmentSideEffectPolicy(kind) {
+  return kind === 'production'
+    ? {
+        notifications: 'real',
+        organizationWrites: 'explicit_capability_only',
+        scheduledAutomations: 'enabled',
+        externalWrites: 'configured',
+        payments: 'configured',
+        publicIndexing: 'configured',
+        environmentBanner: false,
+      }
+    : {
+        notifications: 'tester_allowlist',
+        notificationAllowlist: [],
+        organizationWrites: 'deny',
+        scheduledAutomations: 'disabled',
+        externalWrites: 'allowlist',
+        payments: 'deny',
+        publicIndexing: 'deny',
+        environmentBanner: true,
+      };
+}
+
+function saveEnvironmentWorkspaceState(state, setDetail, environmentDetail, input) {
+  state.logicalApp = {
+    id: setDetail.id,
+    code: setDetail.code,
+    name: setDetail.name,
+    sourceRepositoryId: setDetail.sourceRepositoryId,
+    updatedAt: new Date().toISOString(),
+  };
+  const legacyBound = state.profiles?.[input.profile];
+  const seedResources =
+    legacyBound?.appType === environmentDetail.appType
+      ? legacyBound.resources
+      : undefined;
+  const bound = bindEnvironmentTarget(state, {
+    targetName: input.targetName,
+    profile: input.profile,
+    environmentId: environmentDetail.id,
+    kind: environmentDetail.kind,
+    appType: environmentDetail.appType,
+    displayName: environmentDetail.displayName,
+    publicOrigin: environmentDetail.publicOrigin,
+    sideEffectPolicy: environmentDetail.sideEffectPolicy,
+    seedResources,
+  });
+  ensureResourceBuckets(bound);
+  saveProjectState(state);
+  return bound;
+}
+
+async function environment(args) {
+  const { subcommand, rest } = parseSubcommandArgs(args);
+  const { flags, positional } = parseArgs(rest);
+  if (wantsSubcommandHelp(subcommand, flags)) {
+    print([
+      '用法: openxiangda environment init --logical-app <code> --name <name> --kind preproduction --app-type APP_XXX [--target name] [--profile name]',
+      '      openxiangda environment attach --logical-app <code> [--preproduction-target name] [--production-target name] [--profile name]',
+      '      openxiangda environment bind preproduction|production --app-type APP_XXX [--target name] [--profile name]',
+      '      openxiangda environment list|status|diff [--logical-app code] [--profile name] [--json]',
+      '      openxiangda environment use <target|preproduction|production>',
+    ].join('\n'));
+    return;
+  }
+  const config = loadConfig();
+  const state = loadProjectState();
+
+  if (subcommand === 'use') {
+    const selected = resolveEnvironmentTarget(
+      state,
+      positional[0] || flags.environment || flags.target
+    );
+    state.currentTarget = selected.targetName;
+    saveProjectState(state);
+    const result = {
+      currentTarget: selected.targetName,
+      kind: selected.binding.kind,
+      appType: selected.binding.appType,
+    };
+    if (flags.json) return writeJson(result);
+    print(
+      `当前环境 target: ${result.currentTarget} (${result.kind}, ${result.appType})`
+    );
+    return;
+  }
+
+  if (subcommand === 'list') {
+    const profileName = flags.profile || config.currentProfile;
+    const data = await requestWithAuth(
+      config,
+      profileName,
+      environmentSetApiPath()
+    );
+    if (flags.json) return writeJson(data);
+    print(JSON.stringify(data, null, 2));
+    return;
+  }
+
+  if (subcommand === 'init') {
+    const code = readStringFlag(flags, 'logical-app');
+    const name = readStringFlag(flags, 'name');
+    const kind = normalizeEnvironmentKind(
+      flags.kind || positional[0] || 'preproduction'
+    );
+    const appType = readStringFlag(flags, 'app-type');
+    const profileName = flags.profile || config.currentProfile;
+    if (!code || !name || !appType || !profileName) {
+      fail(
+        'environment init 必须提供 --logical-app、--name、--app-type 和 --profile'
+      );
+    }
+    const profile = getProfile(config, profileName);
+    const sourceBase = readGitSourceBase(process.cwd(), 'HEAD');
+    const sourceRepositoryId =
+      readStringFlag(flags, 'source-repository-id') ||
+      sourceBase.repositoryId ||
+      sourceBase.repo;
+    const sideEffectPolicy = flags['side-effect-policy-json']
+      ? readJsonInput(
+          flags['side-effect-policy-json'],
+          'side-effect-policy-json'
+        )
+      : defaultEnvironmentSideEffectPolicy(kind);
+    const data = await requestWithAuth(
+      config,
+      profile.profileName,
+      environmentSetApiPath(),
+      {
+        method: 'POST',
+        body: {
+          code,
+          name,
+          sourceRepositoryId,
+          initialEnvironment: {
+            kind,
+            appType,
+            displayName: flags['display-name'],
+            publicOrigin: flags['public-origin'],
+            sideEffectPolicy,
+          },
+        },
+      }
+    );
+    const environmentDetail = (data.environments || []).find(
+      item => item.kind === kind
+    );
+    if (!environmentDetail) {
+      fail('平台创建环境组成功，但响应缺少初始 environment');
+    }
+    const bound = saveEnvironmentWorkspaceState(
+      state,
+      data,
+      environmentDetail,
+      {
+        targetName: flags.target || flags.environment || kind,
+        profile: profile.profileName,
+      }
+    );
+    const result = { logicalApp: state.logicalApp, target: bound };
+    if (flags.json) return writeJson(result);
+    print(
+      `应用环境组已创建: ${state.logicalApp.code}; ${bound.targetName}=${bound.appType}`
+    );
+    return;
+  }
+
+  if (subcommand === 'attach') {
+    const code = readStringFlag(flags, 'logical-app');
+    const profileName = flags.profile || config.currentProfile;
+    if (!code || !profileName) {
+      fail('environment attach 必须提供 --logical-app 和 --profile');
+    }
+    const profile = getProfile(config, profileName);
+    const setDetail = await requestWithAuth(
+      config,
+      profile.profileName,
+      environmentSetApiPath(code)
+    );
+    const environments = setDetail.environments || [];
+    if (environments.length === 0) {
+      fail(`应用环境组没有可绑定环境: ${code}`);
+    }
+    const targets = [];
+    for (const environmentDetail of environments) {
+      const targetName =
+        flags[`${environmentDetail.kind}-target`] ||
+        environmentDetail.kind;
+      targets.push(
+        saveEnvironmentWorkspaceState(
+          state,
+          setDetail,
+          environmentDetail,
+          {
+            targetName,
+            profile: profile.profileName,
+          }
+        )
+      );
+    }
+    const result = { logicalApp: state.logicalApp, targets };
+    if (flags.json) return writeJson(result);
+    print(
+      `应用环境组已接入: ${state.logicalApp.code}; ${targets
+        .map(target => `${target.targetName}=${target.appType}`)
+        .join(', ')}`
+    );
+    return;
+  }
+
+  const code =
+    readStringFlag(flags, 'logical-app') || state.logicalApp?.code;
+  if (!code) {
+    fail('当前工作区未登记 logical app，请先执行 openxiangda environment init');
+  }
+  const selectedProfile =
+    flags.profile ||
+    Object.values(state.targets || {})[0]?.profile ||
+    config.currentProfile;
+
+  if (subcommand === 'bind') {
+    const kind = normalizeEnvironmentKind(positional[0] || flags.kind);
+    const appType = readStringFlag(flags, 'app-type');
+    if (!appType) fail('environment bind 必须提供 --app-type');
+    const profile = getProfile(config, selectedProfile);
+    const sideEffectPolicy = flags['side-effect-policy-json']
+      ? readJsonInput(
+          flags['side-effect-policy-json'],
+          'side-effect-policy-json'
+        )
+      : defaultEnvironmentSideEffectPolicy(kind);
+    const environmentDetail = await requestWithAuth(
+      config,
+      profile.profileName,
+      environmentSetApiPath(code, '/environments'),
+      {
+        method: 'POST',
+        body: {
+          kind,
+          appType,
+          displayName: flags['display-name'],
+          publicOrigin: flags['public-origin'],
+          sideEffectPolicy,
+        },
+      }
+    );
+    const setDetail = await requestWithAuth(
+      config,
+      profile.profileName,
+      environmentSetApiPath(code)
+    );
+    const bound = saveEnvironmentWorkspaceState(
+      state,
+      setDetail,
+      environmentDetail,
+      {
+        targetName: flags.target || flags.environment || kind,
+        profile: profile.profileName,
+      }
+    );
+    if (flags.json) return writeJson(bound);
+    print(`应用环境已绑定: ${bound.targetName}=${bound.appType}`);
+    return;
+  }
+
+  if (subcommand === 'status' || subcommand === 'diff') {
+    const data = await requestWithAuth(
+      config,
+      selectedProfile,
+      environmentSetApiPath(code, '/status')
+    );
+    const result =
+      subcommand === 'diff'
+        ? buildEnvironmentStatusDiff(data)
+        : data;
+    if (flags.json) return writeJson(result);
+    print(JSON.stringify(result, null, 2));
+    return;
+  }
+
+  fail('用法: openxiangda environment init|attach|bind|list|status|diff|use');
+}
+
+function buildEnvironmentStatusDiff(status) {
+  const environments = status?.environments || [];
+  const preproduction = environments.find(
+    item => item.kind === 'preproduction'
+  );
+  const production = environments.find(item => item.kind === 'production');
+  return {
+    logicalApp: {
+      id: status?.id || null,
+      code: status?.code || null,
+      name: status?.name || null,
+    },
+    preproduction: preproduction || null,
+    production: production || null,
+    drift: {
+      sameAppRelease:
+        Boolean(preproduction?.heads?.appReleaseId) &&
+        preproduction?.heads?.appReleaseId ===
+          production?.heads?.appReleaseId,
+      candidate:
+        preproduction?.latestDeployment?.candidateId || null,
+      promotedCandidate:
+        production?.latestDeployment?.candidateId || null,
+      promotionReady:
+        preproduction?.latestDeployment?.status === 'succeeded' &&
+        preproduction?.latestDeployment?.candidateId !== null &&
+        preproduction?.latestDeployment?.candidateId !== undefined,
+    },
+  };
+}
+
+function readStudioGit(args) {
+  const result = spawnSync('git', args, {
+    cwd: process.cwd(),
+    encoding: 'utf8',
+  });
+  return result.status === 0 ? String(result.stdout || '').trim() : '';
+}
+
+async function studio(args) {
+  const { flags } = parseArgs(args);
+  const config = loadConfig();
+  const initialState = loadProjectState();
+  if (!initialState.logicalApp?.code) {
+    fail(
+      'Developer Center 需要环境管理工作区；请先执行 openxiangda environment init'
+    );
+  }
+  const getStatus = async () => {
+    const state = loadProjectState();
+    const selected = resolveEnvironmentTarget(
+      state,
+      state.currentTarget || 'preproduction'
+    );
+    const remote = await requestWithAuth(
+      config,
+      selected.binding.profile,
+      environmentSetApiPath(state.logicalApp.code, '/status')
+    );
+    const porcelain = readStudioGit([
+      'status',
+      '--porcelain',
+      '--untracked-files=all',
+    ]);
+    return {
+      workspace: process.cwd(),
+      logicalApp: state.logicalApp,
+      currentTarget: state.currentTarget,
+      targets: state.targets,
+      git: {
+        branch: readStudioGit(['branch', '--show-current']),
+        commit: readStudioGit(['rev-parse', 'HEAD']),
+        clean: !porcelain,
+        changes: porcelain ? porcelain.split(/\r?\n/).slice(0, 50) : [],
+      },
+      openxiangdaVersion: CURRENT_VERSION,
+      remote,
+    };
+  };
+  const runAction = async body => {
+    const state = loadProjectState();
+    const action = String(body?.action || '').trim();
+    const value = String(body?.value || '').trim();
+    const details = String(body?.details || '').trim();
+    const pre = resolveEnvironmentTarget(state, 'preproduction');
+    const production =
+      action === 'promote' || action === 'rollback'
+        ? resolveEnvironmentTarget(state, 'production')
+        : null;
+    if (action === 'candidate') {
+      if (!value) throw new Error('请输入 OpenSpec changeId');
+      return await runOpenXiangdaInProcess([
+        'release',
+        'candidate',
+        '--change',
+        value,
+        '--environment',
+        pre.targetName,
+      ]);
+    }
+    if (action === 'deploy') {
+      if (!value) throw new Error('请输入 candidateId');
+      return await runOpenXiangdaInProcess([
+        'release',
+        'deploy',
+        '--candidate',
+        value,
+        '--environment',
+        pre.targetName,
+      ]);
+    }
+    if (action === 'test') {
+      if (!details) throw new Error('请输入测试证据 JSON');
+      return await runOpenXiangdaInProcess([
+        'release',
+        'test',
+        ...(value ? ['--deployment', value] : []),
+        '--evidence-json',
+        details,
+        '--environment',
+        pre.targetName,
+      ]);
+    }
+    if (action === 'promote') {
+      if (!body?.confirmProduction) {
+        throw new Error('production action requires explicit confirmation');
+      }
+      if (!value) throw new Error('请输入 candidateId');
+      return await runOpenXiangdaInProcess([
+        'release',
+        'promote',
+        '--candidate',
+        value,
+        '--environment',
+        production.targetName,
+        '--confirm-production',
+      ]);
+    }
+    if (action === 'rollback') {
+      if (!body?.confirmProduction) {
+        throw new Error('production action requires explicit confirmation');
+      }
+      if (!value || details.length < 8) {
+        throw new Error('请输入目标 AppReleaseId 和至少 8 个字符的回退原因');
+      }
+      return await runOpenXiangdaInProcess([
+        'release',
+        'rollback',
+        '--to',
+        value,
+        '--reason',
+        details,
+        '--environment',
+        production.targetName,
+        '--confirm-production',
+      ]);
+    }
+    throw new Error(`未注册的 Developer Center 操作: ${action}`);
+  };
+  const port = flags.port === undefined ? 0 : Number(flags.port);
+  if (!Number.isInteger(port) || port < 0 || port > 65535) {
+    fail('studio --port 必须是 0-65535 的整数');
+  }
+  const center = await startDeveloperCenter({ port, getStatus, runAction });
+  if (!flags['no-open']) openBrowser(center.url);
+  const publicUrl = center.url.replace(/\?.*$/, '');
+  print(
+    flags['no-open']
+      ? `OpenXiangda Developer Center: ${center.url}`
+      : `OpenXiangda Developer Center 已启动: ${publicUrl}`
+  );
+}
+
+function requireLogicalApplication(target) {
+  const logicalApp = target.logicalApp || target.state?.logicalApp;
+  if (!logicalApp?.code || !logicalApp?.id) {
+    fail(
+      '当前工作区尚未登记 logical app；请先执行 openxiangda environment init'
+    );
+  }
+  return logicalApp;
+}
+
+function applicationDeploymentApiPath(logicalAppCode, deploymentId, action) {
+  const suffix = deploymentId
+    ? `/deployments/${encodeURIComponent(deploymentId)}${
+        action ? `/${action}` : ''
+      }`
+    : '/deployments';
+  return environmentSetApiPath(logicalAppCode, suffix);
+}
+
+function rememberTargetDeployment(target, deployment) {
+  target.bound.lastDeploymentId = deployment.id;
+  target.bound.lastCandidateId = deployment.candidateId || null;
+  target.bound.lastDeploymentStatus = deployment.status;
+  target.bound.updatedAt = new Date().toISOString();
+  saveProjectState(target.state);
+}
+
+function assertLocalCandidate(candidate) {
+  if (
+    !candidate?.id ||
+    !candidate?.candidateHash ||
+    !candidate?.sourceBundleManifest ||
+    sha256Canonical(candidate.sourceBundleManifest) !== candidate.candidateHash
+  ) {
+    fail('LOCAL_CANDIDATE_INVALID: 本地 candidate 文件缺失或哈希不一致');
+  }
+  assertReleaseSourceRevisionStable(candidate.sourceRevision, {
+    cwd: process.cwd(),
+  });
+  return candidate;
+}
+
+async function createApplicationCandidate(config, target, flags, positional) {
+  const logicalApp = requireLogicalApplication(target);
+  const changeId =
+    readStringFlag(flags, 'change') || positional[0];
+  if (!changeId) {
+    fail('用法: openxiangda release candidate --change <id>');
+  }
+  prepareReleaseSourceRevision({ cwd: process.cwd() });
+  const sourceRevision = readGitSourceBase(process.cwd(), 'HEAD');
+  if (
+    logicalApp.sourceRepositoryId !==
+    (sourceRevision.repositoryId || sourceRevision.repo)
+  ) {
+    fail(
+      'CANDIDATE_REPOSITORY_MISMATCH: 当前 Git 仓库与 logical app 权威仓库不一致'
+    );
+  }
+  const plan = buildWorkspaceReleasePlan({
+    changed: true,
+    since: flags.since,
+    profile: target.profileName,
+    skipSdd: true,
+    changeId,
+    expandDependencies: Boolean(flags['expand-dependencies']),
+  });
+  if (plan.errors.length > 0) {
+    fail(
+      `RELEASE_PLAN_INVALID: ${plan.errors
+        .map(error => error.message || error.name)
+        .join('; ')}`
+    );
+  }
+  const verification = verifySddChange({
+    cwd: process.cwd(),
+    changeId,
+    releasePlan: plan,
+    writeMetadata: false,
+    stage: 'prepublish',
+  });
+  if (!verification.passed) {
+    fail(
+      `SDD_PREPUBLISH_FAILED: ${verification.errors
+        .map(error => error.message)
+        .join('; ')}`
+    );
+  }
+  const testPlan = flags['test-plan-json']
+    ? readJsonInput(flags['test-plan-json'], 'test-plan-json')
+    : undefined;
+  const bundle = buildCandidateBundle({
+    cwd: process.cwd(),
+    logicalAppCode: logicalApp.code,
+    changeId,
+    sourceRevision,
+    runtimeMode: plan.workspace.runtimeMode,
+    targets: plan.activationTargets,
+    files: plan.changedFiles,
+    testPlan,
+    openxiangdaVersion: CURRENT_VERSION,
+  });
+  const data = await requestWithAuth(
+    config,
+    target.profileName,
+    environmentSetApiPath(logicalApp.code, '/candidates'),
+    {
+      method: 'POST',
+      body: {
+        candidateHash: bundle.candidateHash,
+        changeId,
+        sourceRepositoryId: logicalApp.sourceRepositoryId,
+        sourceRevision,
+        sourceBundleManifest: bundle.sourceBundleManifest,
+        runtimeArtifactHash: null,
+        runtimeArtifactLocator: null,
+        testPlanHash: bundle.testPlanHash,
+        openxiangdaVersion: CURRENT_VERSION,
+      },
+    }
+  );
+  const localCandidate = {
+    ...data,
+    logicalAppCode: logicalApp.code,
+    sourceRevision,
+    sourceBundleManifest: bundle.sourceBundleManifest,
+    testPlan: bundle.testPlan,
+    releasePlan: plan,
+    savedAt: new Date().toISOString(),
+  };
+  const file = saveCandidate(localCandidate);
+  return {
+    candidate: localCandidate,
+    candidateFile: path.relative(process.cwd(), file).replace(/\\/g, '/'),
+  };
+}
+
+async function markApplicationDeploymentFailed(
+  config,
+  target,
+  logicalAppCode,
+  deploymentId,
+  error
+) {
+  try {
+    await requestWithAuth(
+      config,
+      target.profileName,
+      applicationDeploymentApiPath(
+        logicalAppCode,
+        deploymentId,
+        'fail'
+      ),
+      {
+        method: 'POST',
+        body: {
+          code: error?.code || 'OPENXIANGDA_DEPLOYMENT_FAILED',
+          message: maskText(error?.message || String(error)).slice(0, 2000),
+          details: {
+            command: 'openxiangda release',
+            recordedAt: new Date().toISOString(),
+          },
+        },
+      }
+    );
+  } catch (recordError) {
+    warn(
+      `部署失败记录未写入平台: ${maskText(recordError?.message || recordError)}`
+    );
+  }
+}
+
+async function deployApplicationCandidate(
+  config,
+  target,
+  candidate,
+  options = {}
+) {
+  const logicalApp = requireLogicalApplication(target);
+  assertLocalCandidate(candidate);
+  const kind = options.kind || 'deploy';
+  const body = {
+    kind,
+    targetEnvironmentId: target.environmentId,
+    ...(options.sourceEnvironmentId
+      ? { sourceEnvironmentId: options.sourceEnvironmentId }
+      : {}),
+    ...(kind === 'rollback'
+      ? { rollbackTargetReleaseId: options.rollbackTargetReleaseId }
+      : { candidateId: candidate.id }),
+  };
+  const deployment = await requestWithAuth(
+    config,
+    target.profileName,
+    applicationDeploymentApiPath(logicalApp.code),
+    { method: 'POST', body }
+  );
+  rememberTargetDeployment(target, deployment);
+  try {
+    const published = await publishWorkspaceRelease(config, target, {
+      ...options.flags,
+      change: candidate.changeId,
+      environment: target.targetName,
+      'candidate-id': candidate.id,
+      'deployment-id': deployment.id,
+    });
+    const detail = await requestWithAuth(
+      config,
+      target.profileName,
+      applicationDeploymentApiPath(logicalApp.code, deployment.id)
+    );
+    rememberTargetDeployment(target, detail);
+    return { deployment: detail, published };
+  } catch (error) {
+    await markApplicationDeploymentFailed(
+      config,
+      target,
+      logicalApp.code,
+      deployment.id,
+      error
+    );
+    throw error;
+  }
+}
+
+function buildBoundDeploymentEvidence(input, target, deployment, candidate) {
+  const source = input || {};
+  const finishedAt = source.finishedAt || new Date().toISOString();
+  const finishedAtMs = Date.parse(finishedAt);
+  if (!Number.isFinite(finishedAtMs)) {
+    fail('测试证据 finishedAt 无效');
+  }
+  const validUntil =
+    source.validUntil ||
+    new Date(finishedAtMs + 24 * 60 * 60 * 1000).toISOString();
+  return {
+    ...source,
+    schemaVersion: 1,
+    deploymentId: deployment.id,
+    candidateId: candidate?.id || null,
+    candidateHash: candidate?.candidateHash || null,
+    testPlanHash: candidate?.testPlanHash || null,
+    environmentId: target.environmentId,
+    environmentKind: target.environmentKind,
+    appType: target.appType,
+    appReleaseId: deployment.targetAppReleaseId,
+    outcome: source.outcome || 'passed',
+    startedAt: source.startedAt || finishedAt,
+    finishedAt,
+    validUntil,
+  };
+}
+
+async function runApplicationEnvironmentReleaseCommand(
+  config,
+  target,
+  subcommand,
+  positional,
+  flags
+) {
+  const logicalApp = requireLogicalApplication(target);
+  if (subcommand === 'candidate') {
+    return await createApplicationCandidate(
+      config,
+      target,
+      flags,
+      positional
+    );
+  }
+
+  const candidateId =
+    readStringFlag(flags, 'candidate') ||
+    readStringFlag(flags, 'candidate-id') ||
+    positional[0] ||
+    target.bound.lastCandidateId;
+  if (subcommand === 'deploy') {
+    if (target.environmentKind !== 'preproduction') {
+      fail('release deploy 只允许目标为 preproduction');
+    }
+    if (!candidateId) fail('release deploy 必须提供 --candidate');
+    return await deployApplicationCandidate(
+      config,
+      target,
+      readCandidate(candidateId),
+      { kind: 'deploy', flags }
+    );
+  }
+
+  if (subcommand === 'promote') {
+    if (target.environmentKind !== 'production') {
+      fail(
+        'release promote 必须使用 --environment production（或对应 production target）'
+      );
+    }
+    if (!flags['confirm-production']) {
+      fail('正式晋级必须显式提供 --confirm-production');
+    }
+    if (!candidateId) fail('release promote 必须提供 --candidate');
+    const source = resolveEnvironmentTarget(target.state, 'preproduction');
+    return await deployApplicationCandidate(
+      config,
+      target,
+      readCandidate(candidateId),
+      {
+        kind: 'promotion',
+        sourceEnvironmentId: source.binding.environmentId,
+        flags,
+      }
+    );
+  }
+
+  if (subcommand === 'test') {
+    const deploymentId =
+      readStringFlag(flags, 'deployment') ||
+      readStringFlag(flags, 'deployment-id') ||
+      target.bound.lastDeploymentId;
+    if (!deploymentId || !flags['evidence-json']) {
+      fail(
+        'release test 必须提供 --deployment <id>（首次可省略）和 --evidence-json <JSON|file>'
+      );
+    }
+    const deployment = await requestWithAuth(
+      config,
+      target.profileName,
+      applicationDeploymentApiPath(logicalApp.code, deploymentId)
+    );
+    const candidate = deployment.candidateId
+      ? readCandidate(deployment.candidateId)
+      : null;
+    const evidence = buildBoundDeploymentEvidence(
+      readJsonInput(flags['evidence-json'], 'evidence-json'),
+      target,
+      deployment,
+      candidate
+    );
+    const completed = await requestWithAuth(
+      config,
+      target.profileName,
+      applicationDeploymentApiPath(logicalApp.code, deploymentId, 'complete'),
+      {
+        method: 'POST',
+        body: {
+          evidenceSummary: evidence,
+          evidenceHash: sha256Canonical(evidence),
+        },
+      }
+    );
+    rememberTargetDeployment(target, completed);
+    return { deployment: completed, evidence };
+  }
+
+  if (subcommand === 'rollback') {
+    if (target.environmentKind !== 'production') {
+      fail('release rollback 只允许 production target');
+    }
+    if (!flags['confirm-production']) {
+      fail('正式回退必须显式提供 --confirm-production');
+    }
+    const rollbackTargetReleaseId =
+      readStringFlag(flags, 'to') ||
+      readStringFlag(flags, 'release-id') ||
+      positional[0];
+    const reason = readStringFlag(flags, 'reason');
+    if (!rollbackTargetReleaseId || reason.length < 8) {
+      fail(
+        'release rollback 必须提供 --to <AppReleaseId> 和至少 8 个字符的 --reason'
+      );
+    }
+    const deployment = await requestWithAuth(
+      config,
+      target.profileName,
+      applicationDeploymentApiPath(logicalApp.code),
+      {
+        method: 'POST',
+        body: {
+          kind: 'rollback',
+          targetEnvironmentId: target.environmentId,
+          rollbackTargetReleaseId,
+        },
+      }
+    );
+    rememberTargetDeployment(target, deployment);
+    return {
+      deployment,
+      prepared: true,
+      automaticActivation: false,
+      reason:
+        '总 AppRelease 回退记录已冻结；各历史子 Release 仍需生成新的审计式 rollback Release 后再原子激活，CLI 不会直接重激活旧行。',
+      nextStep: `openxiangda release app-rollback ${rollbackTargetReleaseId} --change rollback-${deployment.id} --reason ${JSON.stringify(
+        reason
+      )} --environment ${target.targetName}`,
+    };
+  }
+
+  fail(`未知应用环境 Release 命令: ${subcommand}`);
+}
+
 async function release(args) {
   const { subcommand, rest } = parseSubcommandArgs(args);
   const { flags, positional } = parseArgs(rest);
   if (wantsSubcommandHelp(subcommand, flags)) {
     print([
       '用法: openxiangda release publish|begin|status|explain|integration-status|renew|end [--change id] [--profile name] [--json]',
+      '      openxiangda release candidate|deploy|test|promote|rollback [--candidate id] [--environment target] [--confirm-production] [--json]',
       '      openxiangda release backend-head|backend-list|backend-detail|backend-diff|backend-rollback|backend-abort|backend-retry [releaseId] [--profile name] [--json]',
       '      openxiangda release app-capture|app-head|app-list|app-detail|app-diff|app-post-commit|app-retry|app-prepare|app-verify|app-activate|app-finalize|app-rollback|app-abort [releaseId] [--staged-resources-json <JSON|file>] [--activate-staged-children] [--profile name] [--json]',
       '常用流程:',
@@ -1748,6 +2704,22 @@ async function release(args) {
     flags.profile || config.currentProfile,
     flags
   );
+  if (
+    ['candidate', 'deploy', 'test', 'promote', 'rollback'].includes(
+      subcommand
+    )
+  ) {
+    const result = await runApplicationEnvironmentReleaseCommand(
+      config,
+      target,
+      subcommand,
+      positional,
+      flags
+    );
+    if (flags.json) return writeJson(result);
+    print(JSON.stringify(result, null, 2));
+    return;
+  }
   if (String(subcommand || '').startsWith('backend-')) {
     return await runBackendReleaseCommand(
       config,
@@ -1767,6 +2739,16 @@ async function release(args) {
     );
   }
   if (subcommand === 'publish') {
+    if (target.environmentKind === 'production') {
+      fail(
+        'PRODUCTION_PROMOTION_REQUIRED: production target 禁止 release publish；请使用 release promote --candidate <id> --environment production --confirm-production'
+      );
+    }
+    if (target.environmentKind === 'preproduction') {
+      fail(
+        'PREPRODUCTION_DEPLOYMENT_REQUIRED: 环境管理工作区请使用 release candidate + release deploy，确保候选和 deployment 可追踪'
+      );
+    }
     const result = await publishWorkspaceRelease(config, target, flags);
     if (flags.json) return writeJson(result);
     print(
@@ -1783,7 +2765,10 @@ async function release(args) {
     if (!changeId) {
       fail('用法: openxiangda release explain --change <id> [--json]');
     }
-    const execution = readReleaseExecution(changeId);
+    const execution = readReleaseExecution(
+      changeId,
+      readStringFlag(flags, 'deployment-id')
+    );
     const result = {
       changeId,
       execution,
@@ -1821,7 +2806,12 @@ async function release(args) {
       readStringFlag(flags, 'change') ||
       local?.changeId ||
       baseline?.changeId;
-    const execution = changeId ? readReleaseExecution(changeId) : null;
+    const execution = changeId
+      ? readReleaseExecution(
+          changeId,
+          readStringFlag(flags, 'deployment-id')
+        )
+      : null;
     const result = {
       remote,
       local,
@@ -2672,8 +3662,9 @@ async function fetchAppReleaseCapture(config, target, flags = {}) {
   return clonePlainJson(capture);
 }
 
-function releaseSessionFile(changeId) {
-  return path.join(releaseExecutionDir(changeId), 'release-session.json');
+function releaseSessionFile(changeId, deploymentId) {
+  const executionFile = releaseExecutionFile(changeId, deploymentId);
+  return path.join(path.dirname(executionFile), 'release-session.json');
 }
 
 function saveFrozenAppReleaseCapture(
@@ -2683,12 +3674,13 @@ function saveFrozenAppReleaseCapture(
   lease,
   capture
 ) {
-  const file = releaseSessionFile(changeId);
+  const file = releaseSessionFile(changeId, target.deploymentId);
   writePrivateJsonAtomic(file, {
     schemaVersion: 'openxiangda_release_session_v1',
     appType: target.appType,
     profile: target.profileName,
     changeId,
+    deploymentId: target.deploymentId || null,
     baselineId: baseline?.baselineId || baseline?.id || null,
     leaseId: lease?.leaseId || lease?.id || null,
     sourceRevision: baseline?.releaseSourceRevision || null,
@@ -2701,7 +3693,10 @@ function saveFrozenAppReleaseCapture(
 function readFrozenAppReleaseCapture(target, flags = {}) {
   const changeId = readStringFlag(flags, 'change');
   if (!changeId) return null;
-  const file = releaseSessionFile(changeId);
+  const file = releaseSessionFile(
+    changeId,
+    readStringFlag(flags, 'deployment-id') || target.deploymentId
+  );
   if (!fs.existsSync(file)) return null;
   let session;
   try {
@@ -2713,7 +3708,9 @@ function readFrozenAppReleaseCapture(target, flags = {}) {
     session?.schemaVersion !== 'openxiangda_release_session_v1' ||
     session?.appType !== target.appType ||
     session?.profile !== target.profileName ||
-    session?.changeId !== changeId
+    session?.changeId !== changeId ||
+    (session?.deploymentId || null) !==
+      (readStringFlag(flags, 'deployment-id') || target.deploymentId || null)
   ) {
     fail(
       'RELEASE_SESSION_CONTEXT_MISMATCH: 冻结的 App capture 与当前 app/profile/change 不一致'
@@ -2869,22 +3866,25 @@ function readStagedAppReleaseResources(flags = {}) {
   );
 }
 
-function stagedResourcesFileForChange(changeId) {
+function stagedResourcesFileForChange(changeId, deploymentId) {
   const normalized = String(changeId || '').trim();
   if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(normalized)) {
     fail('APP_RELEASE_STAGED_RESOURCES_CHANGE_INVALID: 自动聚合 staged resources 需要有效 --change');
   }
-  return path.join(
+  const base = path.join(
     process.cwd(),
     '.openxiangda',
     'releases',
-    normalized,
+    normalized
+  );
+  return path.join(
+    deploymentId ? path.join(base, String(deploymentId)) : base,
     'staged-resources.json'
   );
 }
 
-function stagedResourcesContextFileForChange(changeId) {
-  return stagedResourcesFileForChange(changeId).replace(
+function stagedResourcesContextFileForChange(changeId, deploymentId) {
+  return stagedResourcesFileForChange(changeId, deploymentId).replace(
     /staged-resources\.json$/,
     'staged-resources.context.json'
   );
@@ -2902,14 +3902,23 @@ function currentStagedResourcesContext(target, changeId) {
     appType: target.appType,
     profile: target.profileName,
     changeId,
+    deploymentId: target.deploymentId || null,
     baselineId: baseline.baselineId,
     clientSessionId: baseline.clientSessionId || null,
   };
 }
 
-function writeStagedResourcesFiles(changeId, resources, context) {
-  const file = stagedResourcesFileForChange(changeId);
-  const contextFile = stagedResourcesContextFileForChange(changeId);
+function writeStagedResourcesFiles(
+  changeId,
+  resources,
+  context,
+  deploymentId
+) {
+  const file = stagedResourcesFileForChange(changeId, deploymentId);
+  const contextFile = stagedResourcesContextFileForChange(
+    changeId,
+    deploymentId
+  );
   fs.mkdirSync(path.dirname(file), { recursive: true });
   for (const [targetFile, value] of [
     [file, resources],
@@ -2926,17 +3935,29 @@ function writeStagedResourcesFiles(changeId, resources, context) {
 
 function initializeStagedAppReleaseResources(target, changeId) {
   const context = currentStagedResourcesContext(target, changeId);
-  return writeStagedResourcesFiles(changeId, [], {
-    ...context,
-    initializedAt: new Date().toISOString(),
-  });
+  return writeStagedResourcesFiles(
+    changeId,
+    [],
+    {
+      ...context,
+      initializedAt: new Date().toISOString(),
+    },
+    target.deploymentId
+  );
 }
 
 function assertStagedResourcesContext(target, changeId) {
   const expected = currentStagedResourcesContext(target, changeId);
-  const contextFile = stagedResourcesContextFileForChange(changeId);
+  const contextFile = stagedResourcesContextFileForChange(
+    changeId,
+    target.deploymentId
+  );
   if (!fs.existsSync(contextFile)) {
-    if (!fs.existsSync(stagedResourcesFileForChange(changeId))) {
+    if (
+      !fs.existsSync(
+        stagedResourcesFileForChange(changeId, target.deploymentId)
+      )
+    ) {
       initializeStagedAppReleaseResources(target, changeId);
     }
   }
@@ -2951,6 +3972,7 @@ function assertStagedResourcesContext(target, changeId) {
     'appType',
     'profile',
     'changeId',
+    'deploymentId',
     'baselineId',
     'clientSessionId',
   ]) {
@@ -2971,7 +3993,7 @@ function recordStagedAppReleaseResources(
   if (!changeId || !Array.isArray(resources) || resources.length === 0) {
     return null;
   }
-  const file = stagedResourcesFileForChange(changeId);
+  const file = stagedResourcesFileForChange(changeId, target.deploymentId);
   const context = assertStagedResourcesContext(target, changeId);
   let existing = [];
   if (fs.existsSync(file)) {
@@ -2991,7 +4013,12 @@ function recordStagedAppReleaseResources(
     const rightKey = describeAppReleaseResource(right, 0, 'stagedResources').stableKey;
     return leftKey.localeCompare(rightKey);
   });
-  return writeStagedResourcesFiles(changeId, output, context);
+  return writeStagedResourcesFiles(
+    changeId,
+    output,
+    context,
+    target.deploymentId
+  );
 }
 
 function normalizeSatisfiedAppReleaseSelectors(values) {
@@ -3005,7 +4032,10 @@ function normalizeSatisfiedAppReleaseSelectors(values) {
 function recordSatisfiedAppReleaseSelectors(changeId, selectors, target) {
   const incoming = normalizeSatisfiedAppReleaseSelectors(selectors);
   if (!changeId || incoming.length === 0) return [];
-  const contextFile = stagedResourcesContextFileForChange(changeId);
+  const contextFile = stagedResourcesContextFileForChange(
+    changeId,
+    target.deploymentId
+  );
   const context = assertStagedResourcesContext(target, changeId);
   const satisfiedSelectors = normalizeSatisfiedAppReleaseSelectors([
     ...(context.satisfiedSelectors || []),
@@ -3353,12 +4383,21 @@ async function activateAppReleaseDetail(
             ? { activateStagedChildren: true }
             : {}),
           protocolVersion: options.protocolVersion,
+          ...(options.environmentControl || {}),
         })
       ),
     }
   );
 }
 
+function appReleaseEnvironmentControl(flags = {}) {
+  return stripUndefinedValues({
+    environmentId: readStringFlag(flags, 'environment-id') || undefined,
+    candidateId: readStringFlag(flags, 'candidate-id') || undefined,
+    deploymentId: readStringFlag(flags, 'deployment-id') || undefined,
+  });
+}
+
 function summarizeAppReleaseHead(data) {
   const value =
     data && typeof data === 'object' && !Array.isArray(data) ? data : {};
@@ -3611,6 +4650,7 @@ async function runAppReleaseCommand(
         activateStagedChildren:
           activatesStagedChildren,
         protocolVersion: protocolVersion || undefined,
+        environmentControl: appReleaseEnvironmentControl(flags),
       }
     );
   } else if (subcommand === 'app-finalize') {
@@ -3685,6 +4725,7 @@ async function runAppReleaseCommand(
       {
         activateStagedChildren: Boolean(stagedResources),
         protocolVersion,
+        environmentControl: appReleaseEnvironmentControl(flags),
       }
     );
     const healthWait = flags.wait
@@ -12027,7 +13068,9 @@ async function commands(args) {
       'open-api credential list|get|create|update|rotate-secret [id]',
       'design gates|template|review [--topic code]',
       'sdd init|migrate|propose|quick|bundle|approve|status|context|verify|sync|archive',
-      'release publish|begin|status|integration-status|renew|end|backend-head|backend-list|backend-detail|backend-diff|backend-rollback|backend-abort|backend-retry|app-capture|app-head|app-list|app-detail|app-diff|app-prepare|app-verify|app-activate|app-finalize|app-rollback|app-abort',
+      'environment init|attach|bind|list|status|diff|use',
+      'release candidate|deploy|test|promote|rollback|publish|begin|status|integration-status|renew|end|backend-head|backend-list|backend-detail|backend-diff|backend-rollback|backend-abort|backend-retry|app-capture|app-head|app-list|app-detail|app-diff|app-prepare|app-verify|app-activate|app-finalize|app-rollback|app-abort',
+      'studio [--no-open] [--port 0]',
       'env',
       'workspace init|bind|plan|check|publish [--app-name] [--changed|--since|--form|--page|--only|--dry-run|--force|--resources|--skip-resources|--prune]',
       'app list|create|snapshot',
@@ -12221,8 +13264,40 @@ function printSkillBootstrapReport(result) {
 }
 
 function getWorkspaceTarget(config, profileName, flags = {}) {
-  const resolved = getProfile(config, profileName);
   const state = loadProjectState();
+  const environmentSelector =
+    flags.environment || flags.target || state.currentTarget;
+  if (
+    environmentSelector &&
+    state.logicalApp &&
+    Object.keys(state.targets || {}).length > 0
+  ) {
+    const selected = resolveEnvironmentTarget(state, environmentSelector);
+    const targetProfileName = selected.binding.profile;
+    if (profileName && profileName !== targetProfileName) {
+      fail(
+        `target ${selected.targetName} 固定使用 profile ${targetProfileName}，不能改写为 ${profileName}`
+      );
+    }
+    const resolved = getProfile(config, targetProfileName);
+    if (!selected.binding.appType || !selected.binding.environmentId) {
+      fail(`target ${selected.targetName} 缺少 appType 或 environmentId`);
+    }
+    ensureResourceBuckets(selected.binding);
+    return {
+      profileName: resolved.profileName,
+      profile: resolved.profile,
+      state,
+      bound: selected.binding,
+      appType: selected.binding.appType,
+      targetName: selected.targetName,
+      environmentId: selected.binding.environmentId,
+      environmentKind: selected.binding.kind,
+      deploymentId: readStringFlag(flags, 'deployment-id') || null,
+      logicalApp: state.logicalApp,
+    };
+  }
+  const resolved = getProfile(config, profileName);
   const bound = state.profiles?.[resolved.profileName] || {};
   const appType = flags['app-type'] || bound.appType;
   if (!appType) {
@@ -13130,6 +14205,12 @@ function saveNotificationTypeConfigResource(target, configCode, configId, extra
 }
 
 function prepareStateResourceWrite(target) {
+  const managedBinding = resolveManagedStateBinding(target);
+  if (managedBinding) {
+    ensureResourceBuckets(managedBinding);
+    target.bound = managedBinding;
+    return managedBinding;
+  }
   target.state.profiles = target.state.profiles || {};
   target.state.profiles[target.profileName] = {
     ...target.bound,
@@ -13156,15 +14237,7 @@ function saveFormPermissionGroupResource(target, groupCode, groupId, extra = {})
 }
 
 function saveStateResource(target, bucket, code, value = {}, keys = Object.keys(value)) {
-  target.state.profiles = target.state.profiles || {};
-  target.state.profiles[target.profileName] = {
-    ...target.bound,
-    baseUrl: target.profile.baseUrl,
-    appType: target.appType,
-    updatedAt: new Date().toISOString(),
-  };
-  const nextBound = target.state.profiles[target.profileName];
-  ensureResourceBuckets(nextBound);
+  const nextBound = prepareStateResourceWrite(target);
   const previous = nextBound.resources[bucket]?.[code] || {};
   nextBound.resources[bucket] = nextBound.resources[bucket] || {};
   nextBound.resources[bucket][code] = {