openxiangda 1.0.231 → 1.0.232

package/lib/workspace-init.js

@@ -183,32 +183,16 @@ function buildNextSteps(targetDir, installedDependencies, bound, runtime) {
   }
   const profileArg = bound ? bound.profile : '<name>';
   steps.push(`openxiangda env --profile ${profileArg}`);
-  steps.push('初始化并 push 权威 <main-branch>；此 canonical 检出以后只用于集成和发布');
   steps.push(
-    `git worktree add ../${path.basename(targetDir)}-<change> -b codex/<change> origin/<main-branch>`
+    '完成应用开发后运行 openxiangda check --environment preproduction'
   );
-  steps.push(`cd ../${path.basename(targetDir)}-<change>`);
-  steps.push('openxiangda sdd propose <change>');
-  steps.push('完成开发、测试、approve 并提交 codex/<change>，不要从 feature worktree 发布');
+  steps.push('openxiangda deploy preproduction --json');
   steps.push(
-    `cd ${targetDir} && git merge --no-ff codex/<change> && git push origin <main-branch>`
+    '从预发结果复制 packageDigest，然后运行 openxiangda deploy production --package <packageDigest>'
   );
   steps.push(
-    'openxiangda sdd bundle <release-change> --changes <change-a,change-b>'
+    '失败时运行 openxiangda status <runId>，修复外部原因后运行 openxiangda retry <runId>'
   );
-  steps.push(
-    'git add openspec/changes/<release-change> && git commit -m "chore: prepare <release-change>" && git push origin <main-branch>'
-  );
-  steps.push(
-    runtime === 'react-spa'
-      ? `openxiangda runtime deploy --no-activate --change <release-change> --profile ${profileArg}`
-      : `openxiangda workspace publish --dry-run --only <exact-codes> --change <release-change> --profile ${profileArg}`
-  );
-  steps.push(
-    `原子激活后运行 openxiangda release integration-status --change <release-change> --profile ${profileArg} --check，再运行 openxiangda release end --change <release-change> --profile ${profileArg}`
-  );
-  steps.push('openxiangda workspace cleanup');
-  steps.push('确认所有目标均为 SAFE 后运行 openxiangda workspace cleanup --apply');
   return steps;
 }
 

package/openxiangda-skills/SKILL.md

@@ -3,13 +3,33 @@ name: openxiangda
 description: "Use OpenXiangda for private low-code platform work: app workspaces, forms, pages, resources, functions, automations, workflows, permissions, publishing, deployment, diagnosis, profiles, and the openxiangda CLI."
 ---
 
-<!-- OpenXiangda-Policy-Version: 4 -->
+<!-- OpenXiangda-Policy-Version: 5 -->
 # OpenXiangda
 
 OpenXiangda connects an AI coding workspace to the private low-code platform through a normal-user profile and `/openxiangda-api/v1`. External backends using AK/SK are a separate `openxiangda-open-api` flow.
 
 This file is a router and safety card. Read only the one or two subskills selected below; do not load every OpenXiangda reference into the same turn.
 
+## Delivery V2 is the normal release path
+
+When `app-workspace.config.ts` declares `deliveryVersion: 2`, all later V1 SDD,
+Git-mainline, candidate/ship, `--change`, and `--only` release rules are
+compatibility notes only. Do not assemble a V2 release from low-level commands.
+
+```bash
+openxiangda check --environment preproduction
+openxiangda deploy preproduction --json
+openxiangda deploy production --package <packageDigest> --json
+openxiangda status <runId> --json
+openxiangda retry <runId> --json
+openxiangda rollback production --to <appReleaseId> --json
+```
+
+The V2 compiler derives the exact desired-state delta, excludes secrets, builds
+Runtime once, uploads content-addressed layers, and creates a server-persisted
+ReleaseRun. Production consumes the sealed preproduction package without a
+rebuild. Keep the `runId`; failures preserve successful checkpoints.
+
 ## Keep the agent loop small
 
 - Start with one broad CodeGraph exploration that names the complete flow or feature. Use at most one focused follow-up when the first result explicitly omits a required symbol; do not repeat overlapping surveys.

package/openxiangda-skills/skills/openxiangda-core/SKILL.md

@@ -7,6 +7,23 @@ description: Core OpenXiangda CLI workflow for profiles, login, workspace state,
 
 Use this skill for login/profile/state questions and any plan, publish, deploy, or release operation. It intentionally contains only release-critical rules; load domain skills for forms, pages, permissions, Functions, Automation, or Workflow behavior.
 
+## Delivery V2
+
+If `app-workspace.config.ts` declares `deliveryVersion: 2`, this section
+overrides the V1 release material below. The normal flow has no SDD, Git clean,
+mainline ancestry, explicit change id, `--only`, candidate, or ship gate:
+
+```bash
+openxiangda check --environment preproduction
+openxiangda deploy preproduction --json
+openxiangda deploy production --package <packageDigest> --json
+```
+
+Use `openxiangda status <runId>` and `openxiangda retry <runId>` for a failed or
+interrupted run. Use `openxiangda rollback <environment> --to <appReleaseId>`
+for rollback. Never ask the AI to choose or sequence low-level
+`workspace/resource/runtime/app-finalize` commands for a V2 release.
+
 ## Resolve the boundary
 
 Before a write or release, establish all four values:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "1.0.231",
+  "version": "1.0.232",
   "description": "OpenXiangda CLI, workspace build tools, runtime SDK, and form components.",
   "private": false,
   "bin": {
@@ -68,7 +68,7 @@
     "source:admin-list": "node scripts/sync-admin-list-source.mjs",
     "check": "node --check bin/openxiangda.js && node --check lib/*.js && node --check packages/sdk/src/build-source/src/cli.mjs && node --check packages/sdk/src/build-source/scripts/*.mjs && node --check packages/sdk/src/build-source/scripts/utils/*.mjs",
     "test": "npm run test:fast",
-    "test:fast": "npm run check && node scripts/http-proxy-smoke.mjs && node scripts/form-export-cli-smoke.mjs && node scripts/open-api-cli-smoke.mjs && node scripts/release-plan-smoke.mjs && node scripts/typed-resource-plan-smoke.mjs && node scripts/integration-bundle-smoke.mjs && node scripts/content-cache-smoke.mjs && node scripts/dependency-capsule-smoke.mjs && node scripts/sdd-stages-smoke.mjs && node scripts/environment-swap-cli-smoke.mjs && node scripts/environment-policy-cli-smoke.mjs",
+    "test:fast": "npm run check && node scripts/delivery-v2-package-smoke.mjs && node scripts/delivery-v2-executor-smoke.mjs && node scripts/http-proxy-smoke.mjs && node scripts/form-export-cli-smoke.mjs && node scripts/open-api-cli-smoke.mjs && node scripts/release-plan-smoke.mjs && node scripts/typed-resource-plan-smoke.mjs && node scripts/integration-bundle-smoke.mjs && node scripts/content-cache-smoke.mjs && node scripts/dependency-capsule-smoke.mjs && node scripts/sdd-stages-smoke.mjs && node scripts/environment-swap-cli-smoke.mjs && node scripts/environment-policy-cli-smoke.mjs",
     "test:changed": "npm run check && node scripts/run-test-suite.mjs --changed --evidence",
     "test:contract": "npm run check && node scripts/run-test-suite.mjs --contract --evidence",
     "test:release": "npm run check && node scripts/run-test-suite.mjs --release --evidence",
@@ -108,6 +108,8 @@
     "test:release-telemetry": "node scripts/release-telemetry-smoke.mjs",
     "test:release-explain": "node scripts/release-explain-smoke.mjs",
     "test:release-error-classification": "node scripts/release-error-classification-smoke.mjs",
+    "test:delivery-v2-package": "node scripts/delivery-v2-package-smoke.mjs",
+    "test:delivery-v2-executor": "node scripts/delivery-v2-executor-smoke.mjs",
     "test:task-status": "node scripts/task-status-smoke.mjs",
     "test:policy": "node scripts/policy-smoke.mjs",
     "test:release-plan": "node scripts/release-plan-smoke.mjs",

package/packages/sdk/dist/build/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/build/index.ts"],"sourcesContent":["export type CssIsolation = 'namespace' | 'shadow' | 'none';\nexport type WorkspaceRuntimeMode = 'legacy' | 'react-spa';\n\nexport interface AppWorkspaceConfig {\n  appType?: string;\n  appName?: string;\n  runtimeMode?: WorkspaceRuntimeMode;\n  platformUrl?: string;\n  servicePrefix?: string;\n  appKey?: string;\n  appSecret?: string;\n  userId?: string;\n  version?: string;\n  buildId?: string;\n  oss?: {\n    region?: string;\n    bucket?: string;\n    accessKeyId?: string;\n    accessKeySecret?: string;\n    pathPrefix?: string;\n    corsOrigins?: string[];\n    skipCors?: boolean;\n  };\n  defaults?: {\n    protocolVersion?: string;\n    frameworkVersion?: string;\n    cssIsolation?: CssIsolation;\n    formMenuParentId?: string;\n    formMenuIcon?: string;\n    pageMenuParentId?: string;\n    pageMenuIcon?: string;\n    formBuilderVersion?: string;\n  };\n  forms?: { dir?: string; publishLegacyBundle?: boolean };\n  pages?: { dir?: string };\n  governance?: {\n    sdd?: {\n      enabled?: boolean;\n      strictHighRisk?: boolean;\n      strictDocumentation?: boolean;\n      path?: string;\n    };\n  };\n}\n\nexport function defineAppWorkspaceConfig<T extends AppWorkspaceConfig>(config: T): T {\n  return config;\n}\n\nconst DEFAULT_NAMESPACE_PREFIX = '.sy-app-workspace';\n\nfunction splitCssSelectors(selector: string) {\n  const selectors: string[] = [];\n  let depth = 0;\n  let quote = '';\n  let current = '';\n  for (const char of selector) {\n    if (quote) {\n      current += char;\n      if (char === quote) quote = '';\n      continue;\n    }\n    if (char === '\"' || char === \"'\") {\n      quote = char;\n      current += char;\n      continue;\n    }\n    if (char === '(' || char === '[') depth += 1;\n    if (char === ')' || char === ']') depth -= 1;\n    if (char === ',' && depth === 0) {\n      selectors.push(current.trim());\n      current = '';\n      continue;\n    }\n    current += char;\n  }\n  if (current.trim()) selectors.push(current.trim());\n  return selectors;\n}\n\nfunction shouldSkipNamespace(selector: string, prefix: string) {\n  if (!selector || selector.includes(prefix)) return true;\n  if (/^(html|body|:root)(\\b|:|\\[|$)/.test(selector)) return true;\n  if (/^(@|from\\b|to\\b|\\d+%)/.test(selector)) return true;\n  if (/^\\.(ant|sy-ant|anticon|adm)-/.test(selector)) return true;\n  return false;\n}\n\nfunction createAntdSelectorAlias(selector: string) {\n  const aliased = selector\n    .replace(/(^|[^A-Za-z0-9_-])\\.ant-/g, '$1.sy-ant-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon-/g, '$1.sy-anticon-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon(?=$|[^A-Za-z0-9_-])/g, '$1.sy-anticon');\n  return aliased === selector ? null : aliased;\n}\n\nexport function createOpenXiangdaNamespaceCssPlugin(\n  prefix = DEFAULT_NAMESPACE_PREFIX,\n) {\n  return {\n    postcssPlugin: 'openxiangda-namespace-css',\n    Rule(rule: { selector?: string; parent?: any }) {\n      if (!rule.selector) return;\n      let parent = rule.parent;\n      while (parent) {\n        if (parent.type === 'atrule' && /keyframes$/i.test(parent.name)) {\n          return;\n        }\n        parent = parent.parent;\n      }\n      rule.selector = Array.from(\n        new Set(\n          splitCssSelectors(rule.selector).flatMap((selector) => {\n            const scopedSelector = shouldSkipNamespace(selector, prefix)\n              ? selector\n              : `${prefix} ${selector}`;\n            const antdAlias = createAntdSelectorAlias(scopedSelector);\n            return antdAlias ? [scopedSelector, antdAlias] : [scopedSelector];\n          }),\n        ),\n      ).join(', ');\n    },\n  };\n}\n\n(createOpenXiangdaNamespaceCssPlugin as any).postcss = true;\n\nexport const createNamespaceCssPlugin = createOpenXiangdaNamespaceCssPlugin;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6CO,SAAS,yBAAuD,QAAc;AACnF,SAAO;AACT;AAEA,IAAM,2BAA2B;AAEjC,SAAS,kBAAkB,UAAkB;AAC3C,QAAM,YAAsB,CAAC;AAC7B,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,aAAW,QAAQ,UAAU;AAC3B,QAAI,OAAO;AACT,iBAAW;AACX,UAAI,SAAS,MAAO,SAAQ;AAC5B;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR,iBAAW;AACX;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,UAAU,GAAG;AAC/B,gBAAU,KAAK,QAAQ,KAAK,CAAC;AAC7B,gBAAU;AACV;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,QAAQ,KAAK,EAAG,WAAU,KAAK,QAAQ,KAAK,CAAC;AACjD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAkB,QAAgB;AAC7D,MAAI,CAAC,YAAY,SAAS,SAAS,MAAM,EAAG,QAAO;AACnD,MAAI,gCAAgC,KAAK,QAAQ,EAAG,QAAO;AAC3D,MAAI,wBAAwB,KAAK,QAAQ,EAAG,QAAO;AACnD,MAAI,+BAA+B,KAAK,QAAQ,EAAG,QAAO;AAC1D,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAkB;AACjD,QAAM,UAAU,SACb,QAAQ,6BAA6B,YAAY,EACjD,QAAQ,iCAAiC,gBAAgB,EACzD,QAAQ,oDAAoD,eAAe;AAC9E,SAAO,YAAY,WAAW,OAAO;AACvC;AAEO,SAAS,oCACd,SAAS,0BACT;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,KAAK,MAA2C;AAC9C,UAAI,CAAC,KAAK,SAAU;AACpB,UAAI,SAAS,KAAK;AAClB,aAAO,QAAQ;AACb,YAAI,OAAO,SAAS,YAAY,cAAc,KAAK,OAAO,IAAI,GAAG;AAC/D;AAAA,QACF;AACA,iBAAS,OAAO;AAAA,MAClB;AACA,WAAK,WAAW,MAAM;AAAA,QACpB,IAAI;AAAA,UACF,kBAAkB,KAAK,QAAQ,EAAE,QAAQ,CAAC,aAAa;AACrD,kBAAM,iBAAiB,oBAAoB,UAAU,MAAM,IACvD,WACA,GAAG,MAAM,IAAI,QAAQ;AACzB,kBAAM,YAAY,wBAAwB,cAAc;AACxD,mBAAO,YAAY,CAAC,gBAAgB,SAAS,IAAI,CAAC,cAAc;AAAA,UAClE,CAAC;AAAA,QACH;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACF;AAEC,oCAA4C,UAAU;AAEhD,IAAM,2BAA2B;","names":[]}
+{"version":3,"sources":["../../src/build/index.ts"],"sourcesContent":["export type CssIsolation = 'namespace' | 'shadow' | 'none';\nexport type WorkspaceRuntimeMode = 'legacy' | 'react-spa';\n\nexport interface AppWorkspaceConfig {\n  deliveryVersion?: 2;\n  appType?: string;\n  appName?: string;\n  runtimeMode?: WorkspaceRuntimeMode;\n  platformUrl?: string;\n  servicePrefix?: string;\n  appKey?: string;\n  appSecret?: string;\n  userId?: string;\n  version?: string;\n  buildId?: string;\n  oss?: {\n    region?: string;\n    bucket?: string;\n    accessKeyId?: string;\n    accessKeySecret?: string;\n    pathPrefix?: string;\n    corsOrigins?: string[];\n    skipCors?: boolean;\n  };\n  defaults?: {\n    protocolVersion?: string;\n    frameworkVersion?: string;\n    cssIsolation?: CssIsolation;\n    formMenuParentId?: string;\n    formMenuIcon?: string;\n    pageMenuParentId?: string;\n    pageMenuIcon?: string;\n    formBuilderVersion?: string;\n  };\n  forms?: { dir?: string; publishLegacyBundle?: boolean };\n  pages?: { dir?: string };\n  governance?: {\n    sdd?: {\n      enabled?: boolean;\n      strictHighRisk?: boolean;\n      strictDocumentation?: boolean;\n      path?: string;\n    };\n  };\n}\n\nexport function defineAppWorkspaceConfig<T extends AppWorkspaceConfig>(config: T): T {\n  return config;\n}\n\nconst DEFAULT_NAMESPACE_PREFIX = '.sy-app-workspace';\n\nfunction splitCssSelectors(selector: string) {\n  const selectors: string[] = [];\n  let depth = 0;\n  let quote = '';\n  let current = '';\n  for (const char of selector) {\n    if (quote) {\n      current += char;\n      if (char === quote) quote = '';\n      continue;\n    }\n    if (char === '\"' || char === \"'\") {\n      quote = char;\n      current += char;\n      continue;\n    }\n    if (char === '(' || char === '[') depth += 1;\n    if (char === ')' || char === ']') depth -= 1;\n    if (char === ',' && depth === 0) {\n      selectors.push(current.trim());\n      current = '';\n      continue;\n    }\n    current += char;\n  }\n  if (current.trim()) selectors.push(current.trim());\n  return selectors;\n}\n\nfunction shouldSkipNamespace(selector: string, prefix: string) {\n  if (!selector || selector.includes(prefix)) return true;\n  if (/^(html|body|:root)(\\b|:|\\[|$)/.test(selector)) return true;\n  if (/^(@|from\\b|to\\b|\\d+%)/.test(selector)) return true;\n  if (/^\\.(ant|sy-ant|anticon|adm)-/.test(selector)) return true;\n  return false;\n}\n\nfunction createAntdSelectorAlias(selector: string) {\n  const aliased = selector\n    .replace(/(^|[^A-Za-z0-9_-])\\.ant-/g, '$1.sy-ant-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon-/g, '$1.sy-anticon-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon(?=$|[^A-Za-z0-9_-])/g, '$1.sy-anticon');\n  return aliased === selector ? null : aliased;\n}\n\nexport function createOpenXiangdaNamespaceCssPlugin(\n  prefix = DEFAULT_NAMESPACE_PREFIX,\n) {\n  return {\n    postcssPlugin: 'openxiangda-namespace-css',\n    Rule(rule: { selector?: string; parent?: any }) {\n      if (!rule.selector) return;\n      let parent = rule.parent;\n      while (parent) {\n        if (parent.type === 'atrule' && /keyframes$/i.test(parent.name)) {\n          return;\n        }\n        parent = parent.parent;\n      }\n      rule.selector = Array.from(\n        new Set(\n          splitCssSelectors(rule.selector).flatMap((selector) => {\n            const scopedSelector = shouldSkipNamespace(selector, prefix)\n              ? selector\n              : `${prefix} ${selector}`;\n            const antdAlias = createAntdSelectorAlias(scopedSelector);\n            return antdAlias ? [scopedSelector, antdAlias] : [scopedSelector];\n          }),\n        ),\n      ).join(', ');\n    },\n  };\n}\n\n(createOpenXiangdaNamespaceCssPlugin as any).postcss = true;\n\nexport const createNamespaceCssPlugin = createOpenXiangdaNamespaceCssPlugin;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA8CO,SAAS,yBAAuD,QAAc;AACnF,SAAO;AACT;AAEA,IAAM,2BAA2B;AAEjC,SAAS,kBAAkB,UAAkB;AAC3C,QAAM,YAAsB,CAAC;AAC7B,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,aAAW,QAAQ,UAAU;AAC3B,QAAI,OAAO;AACT,iBAAW;AACX,UAAI,SAAS,MAAO,SAAQ;AAC5B;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR,iBAAW;AACX;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,UAAU,GAAG;AAC/B,gBAAU,KAAK,QAAQ,KAAK,CAAC;AAC7B,gBAAU;AACV;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,QAAQ,KAAK,EAAG,WAAU,KAAK,QAAQ,KAAK,CAAC;AACjD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAkB,QAAgB;AAC7D,MAAI,CAAC,YAAY,SAAS,SAAS,MAAM,EAAG,QAAO;AACnD,MAAI,gCAAgC,KAAK,QAAQ,EAAG,QAAO;AAC3D,MAAI,wBAAwB,KAAK,QAAQ,EAAG,QAAO;AACnD,MAAI,+BAA+B,KAAK,QAAQ,EAAG,QAAO;AAC1D,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAkB;AACjD,QAAM,UAAU,SACb,QAAQ,6BAA6B,YAAY,EACjD,QAAQ,iCAAiC,gBAAgB,EACzD,QAAQ,oDAAoD,eAAe;AAC9E,SAAO,YAAY,WAAW,OAAO;AACvC;AAEO,SAAS,oCACd,SAAS,0BACT;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,KAAK,MAA2C;AAC9C,UAAI,CAAC,KAAK,SAAU;AACpB,UAAI,SAAS,KAAK;AAClB,aAAO,QAAQ;AACb,YAAI,OAAO,SAAS,YAAY,cAAc,KAAK,OAAO,IAAI,GAAG;AAC/D;AAAA,QACF;AACA,iBAAS,OAAO;AAAA,MAClB;AACA,WAAK,WAAW,MAAM;AAAA,QACpB,IAAI;AAAA,UACF,kBAAkB,KAAK,QAAQ,EAAE,QAAQ,CAAC,aAAa;AACrD,kBAAM,iBAAiB,oBAAoB,UAAU,MAAM,IACvD,WACA,GAAG,MAAM,IAAI,QAAQ;AACzB,kBAAM,YAAY,wBAAwB,cAAc;AACxD,mBAAO,YAAY,CAAC,gBAAgB,SAAS,IAAI,CAAC,cAAc;AAAA,UAClE,CAAC;AAAA,QACH;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACF;AAEC,oCAA4C,UAAU;AAEhD,IAAM,2BAA2B;","names":[]}

package/packages/sdk/dist/build/index.d.mts

@@ -1,6 +1,7 @@
 type CssIsolation = 'namespace' | 'shadow' | 'none';
 type WorkspaceRuntimeMode = 'legacy' | 'react-spa';
 interface AppWorkspaceConfig {
+    deliveryVersion?: 2;
     appType?: string;
     appName?: string;
     runtimeMode?: WorkspaceRuntimeMode;

package/packages/sdk/dist/build/index.d.ts

@@ -1,6 +1,7 @@
 type CssIsolation = 'namespace' | 'shadow' | 'none';
 type WorkspaceRuntimeMode = 'legacy' | 'react-spa';
 interface AppWorkspaceConfig {
+    deliveryVersion?: 2;
     appType?: string;
     appName?: string;
     runtimeMode?: WorkspaceRuntimeMode;

package/packages/sdk/dist/build/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/build/index.ts"],"sourcesContent":["export type CssIsolation = 'namespace' | 'shadow' | 'none';\nexport type WorkspaceRuntimeMode = 'legacy' | 'react-spa';\n\nexport interface AppWorkspaceConfig {\n  appType?: string;\n  appName?: string;\n  runtimeMode?: WorkspaceRuntimeMode;\n  platformUrl?: string;\n  servicePrefix?: string;\n  appKey?: string;\n  appSecret?: string;\n  userId?: string;\n  version?: string;\n  buildId?: string;\n  oss?: {\n    region?: string;\n    bucket?: string;\n    accessKeyId?: string;\n    accessKeySecret?: string;\n    pathPrefix?: string;\n    corsOrigins?: string[];\n    skipCors?: boolean;\n  };\n  defaults?: {\n    protocolVersion?: string;\n    frameworkVersion?: string;\n    cssIsolation?: CssIsolation;\n    formMenuParentId?: string;\n    formMenuIcon?: string;\n    pageMenuParentId?: string;\n    pageMenuIcon?: string;\n    formBuilderVersion?: string;\n  };\n  forms?: { dir?: string; publishLegacyBundle?: boolean };\n  pages?: { dir?: string };\n  governance?: {\n    sdd?: {\n      enabled?: boolean;\n      strictHighRisk?: boolean;\n      strictDocumentation?: boolean;\n      path?: string;\n    };\n  };\n}\n\nexport function defineAppWorkspaceConfig<T extends AppWorkspaceConfig>(config: T): T {\n  return config;\n}\n\nconst DEFAULT_NAMESPACE_PREFIX = '.sy-app-workspace';\n\nfunction splitCssSelectors(selector: string) {\n  const selectors: string[] = [];\n  let depth = 0;\n  let quote = '';\n  let current = '';\n  for (const char of selector) {\n    if (quote) {\n      current += char;\n      if (char === quote) quote = '';\n      continue;\n    }\n    if (char === '\"' || char === \"'\") {\n      quote = char;\n      current += char;\n      continue;\n    }\n    if (char === '(' || char === '[') depth += 1;\n    if (char === ')' || char === ']') depth -= 1;\n    if (char === ',' && depth === 0) {\n      selectors.push(current.trim());\n      current = '';\n      continue;\n    }\n    current += char;\n  }\n  if (current.trim()) selectors.push(current.trim());\n  return selectors;\n}\n\nfunction shouldSkipNamespace(selector: string, prefix: string) {\n  if (!selector || selector.includes(prefix)) return true;\n  if (/^(html|body|:root)(\\b|:|\\[|$)/.test(selector)) return true;\n  if (/^(@|from\\b|to\\b|\\d+%)/.test(selector)) return true;\n  if (/^\\.(ant|sy-ant|anticon|adm)-/.test(selector)) return true;\n  return false;\n}\n\nfunction createAntdSelectorAlias(selector: string) {\n  const aliased = selector\n    .replace(/(^|[^A-Za-z0-9_-])\\.ant-/g, '$1.sy-ant-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon-/g, '$1.sy-anticon-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon(?=$|[^A-Za-z0-9_-])/g, '$1.sy-anticon');\n  return aliased === selector ? null : aliased;\n}\n\nexport function createOpenXiangdaNamespaceCssPlugin(\n  prefix = DEFAULT_NAMESPACE_PREFIX,\n) {\n  return {\n    postcssPlugin: 'openxiangda-namespace-css',\n    Rule(rule: { selector?: string; parent?: any }) {\n      if (!rule.selector) return;\n      let parent = rule.parent;\n      while (parent) {\n        if (parent.type === 'atrule' && /keyframes$/i.test(parent.name)) {\n          return;\n        }\n        parent = parent.parent;\n      }\n      rule.selector = Array.from(\n        new Set(\n          splitCssSelectors(rule.selector).flatMap((selector) => {\n            const scopedSelector = shouldSkipNamespace(selector, prefix)\n              ? selector\n              : `${prefix} ${selector}`;\n            const antdAlias = createAntdSelectorAlias(scopedSelector);\n            return antdAlias ? [scopedSelector, antdAlias] : [scopedSelector];\n          }),\n        ),\n      ).join(', ');\n    },\n  };\n}\n\n(createOpenXiangdaNamespaceCssPlugin as any).postcss = true;\n\nexport const createNamespaceCssPlugin = createOpenXiangdaNamespaceCssPlugin;\n"],"mappings":";AA6CO,SAAS,yBAAuD,QAAc;AACnF,SAAO;AACT;AAEA,IAAM,2BAA2B;AAEjC,SAAS,kBAAkB,UAAkB;AAC3C,QAAM,YAAsB,CAAC;AAC7B,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,aAAW,QAAQ,UAAU;AAC3B,QAAI,OAAO;AACT,iBAAW;AACX,UAAI,SAAS,MAAO,SAAQ;AAC5B;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR,iBAAW;AACX;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,UAAU,GAAG;AAC/B,gBAAU,KAAK,QAAQ,KAAK,CAAC;AAC7B,gBAAU;AACV;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,QAAQ,KAAK,EAAG,WAAU,KAAK,QAAQ,KAAK,CAAC;AACjD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAkB,QAAgB;AAC7D,MAAI,CAAC,YAAY,SAAS,SAAS,MAAM,EAAG,QAAO;AACnD,MAAI,gCAAgC,KAAK,QAAQ,EAAG,QAAO;AAC3D,MAAI,wBAAwB,KAAK,QAAQ,EAAG,QAAO;AACnD,MAAI,+BAA+B,KAAK,QAAQ,EAAG,QAAO;AAC1D,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAkB;AACjD,QAAM,UAAU,SACb,QAAQ,6BAA6B,YAAY,EACjD,QAAQ,iCAAiC,gBAAgB,EACzD,QAAQ,oDAAoD,eAAe;AAC9E,SAAO,YAAY,WAAW,OAAO;AACvC;AAEO,SAAS,oCACd,SAAS,0BACT;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,KAAK,MAA2C;AAC9C,UAAI,CAAC,KAAK,SAAU;AACpB,UAAI,SAAS,KAAK;AAClB,aAAO,QAAQ;AACb,YAAI,OAAO,SAAS,YAAY,cAAc,KAAK,OAAO,IAAI,GAAG;AAC/D;AAAA,QACF;AACA,iBAAS,OAAO;AAAA,MAClB;AACA,WAAK,WAAW,MAAM;AAAA,QACpB,IAAI;AAAA,UACF,kBAAkB,KAAK,QAAQ,EAAE,QAAQ,CAAC,aAAa;AACrD,kBAAM,iBAAiB,oBAAoB,UAAU,MAAM,IACvD,WACA,GAAG,MAAM,IAAI,QAAQ;AACzB,kBAAM,YAAY,wBAAwB,cAAc;AACxD,mBAAO,YAAY,CAAC,gBAAgB,SAAS,IAAI,CAAC,cAAc;AAAA,UAClE,CAAC;AAAA,QACH;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACF;AAEC,oCAA4C,UAAU;AAEhD,IAAM,2BAA2B;","names":[]}
+{"version":3,"sources":["../../src/build/index.ts"],"sourcesContent":["export type CssIsolation = 'namespace' | 'shadow' | 'none';\nexport type WorkspaceRuntimeMode = 'legacy' | 'react-spa';\n\nexport interface AppWorkspaceConfig {\n  deliveryVersion?: 2;\n  appType?: string;\n  appName?: string;\n  runtimeMode?: WorkspaceRuntimeMode;\n  platformUrl?: string;\n  servicePrefix?: string;\n  appKey?: string;\n  appSecret?: string;\n  userId?: string;\n  version?: string;\n  buildId?: string;\n  oss?: {\n    region?: string;\n    bucket?: string;\n    accessKeyId?: string;\n    accessKeySecret?: string;\n    pathPrefix?: string;\n    corsOrigins?: string[];\n    skipCors?: boolean;\n  };\n  defaults?: {\n    protocolVersion?: string;\n    frameworkVersion?: string;\n    cssIsolation?: CssIsolation;\n    formMenuParentId?: string;\n    formMenuIcon?: string;\n    pageMenuParentId?: string;\n    pageMenuIcon?: string;\n    formBuilderVersion?: string;\n  };\n  forms?: { dir?: string; publishLegacyBundle?: boolean };\n  pages?: { dir?: string };\n  governance?: {\n    sdd?: {\n      enabled?: boolean;\n      strictHighRisk?: boolean;\n      strictDocumentation?: boolean;\n      path?: string;\n    };\n  };\n}\n\nexport function defineAppWorkspaceConfig<T extends AppWorkspaceConfig>(config: T): T {\n  return config;\n}\n\nconst DEFAULT_NAMESPACE_PREFIX = '.sy-app-workspace';\n\nfunction splitCssSelectors(selector: string) {\n  const selectors: string[] = [];\n  let depth = 0;\n  let quote = '';\n  let current = '';\n  for (const char of selector) {\n    if (quote) {\n      current += char;\n      if (char === quote) quote = '';\n      continue;\n    }\n    if (char === '\"' || char === \"'\") {\n      quote = char;\n      current += char;\n      continue;\n    }\n    if (char === '(' || char === '[') depth += 1;\n    if (char === ')' || char === ']') depth -= 1;\n    if (char === ',' && depth === 0) {\n      selectors.push(current.trim());\n      current = '';\n      continue;\n    }\n    current += char;\n  }\n  if (current.trim()) selectors.push(current.trim());\n  return selectors;\n}\n\nfunction shouldSkipNamespace(selector: string, prefix: string) {\n  if (!selector || selector.includes(prefix)) return true;\n  if (/^(html|body|:root)(\\b|:|\\[|$)/.test(selector)) return true;\n  if (/^(@|from\\b|to\\b|\\d+%)/.test(selector)) return true;\n  if (/^\\.(ant|sy-ant|anticon|adm)-/.test(selector)) return true;\n  return false;\n}\n\nfunction createAntdSelectorAlias(selector: string) {\n  const aliased = selector\n    .replace(/(^|[^A-Za-z0-9_-])\\.ant-/g, '$1.sy-ant-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon-/g, '$1.sy-anticon-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon(?=$|[^A-Za-z0-9_-])/g, '$1.sy-anticon');\n  return aliased === selector ? null : aliased;\n}\n\nexport function createOpenXiangdaNamespaceCssPlugin(\n  prefix = DEFAULT_NAMESPACE_PREFIX,\n) {\n  return {\n    postcssPlugin: 'openxiangda-namespace-css',\n    Rule(rule: { selector?: string; parent?: any }) {\n      if (!rule.selector) return;\n      let parent = rule.parent;\n      while (parent) {\n        if (parent.type === 'atrule' && /keyframes$/i.test(parent.name)) {\n          return;\n        }\n        parent = parent.parent;\n      }\n      rule.selector = Array.from(\n        new Set(\n          splitCssSelectors(rule.selector).flatMap((selector) => {\n            const scopedSelector = shouldSkipNamespace(selector, prefix)\n              ? selector\n              : `${prefix} ${selector}`;\n            const antdAlias = createAntdSelectorAlias(scopedSelector);\n            return antdAlias ? [scopedSelector, antdAlias] : [scopedSelector];\n          }),\n        ),\n      ).join(', ');\n    },\n  };\n}\n\n(createOpenXiangdaNamespaceCssPlugin as any).postcss = true;\n\nexport const createNamespaceCssPlugin = createOpenXiangdaNamespaceCssPlugin;\n"],"mappings":";AA8CO,SAAS,yBAAuD,QAAc;AACnF,SAAO;AACT;AAEA,IAAM,2BAA2B;AAEjC,SAAS,kBAAkB,UAAkB;AAC3C,QAAM,YAAsB,CAAC;AAC7B,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,aAAW,QAAQ,UAAU;AAC3B,QAAI,OAAO;AACT,iBAAW;AACX,UAAI,SAAS,MAAO,SAAQ;AAC5B;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR,iBAAW;AACX;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,UAAU,GAAG;AAC/B,gBAAU,KAAK,QAAQ,KAAK,CAAC;AAC7B,gBAAU;AACV;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,QAAQ,KAAK,EAAG,WAAU,KAAK,QAAQ,KAAK,CAAC;AACjD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAkB,QAAgB;AAC7D,MAAI,CAAC,YAAY,SAAS,SAAS,MAAM,EAAG,QAAO;AACnD,MAAI,gCAAgC,KAAK,QAAQ,EAAG,QAAO;AAC3D,MAAI,wBAAwB,KAAK,QAAQ,EAAG,QAAO;AACnD,MAAI,+BAA+B,KAAK,QAAQ,EAAG,QAAO;AAC1D,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAkB;AACjD,QAAM,UAAU,SACb,QAAQ,6BAA6B,YAAY,EACjD,QAAQ,iCAAiC,gBAAgB,EACzD,QAAQ,oDAAoD,eAAe;AAC9E,SAAO,YAAY,WAAW,OAAO;AACvC;AAEO,SAAS,oCACd,SAAS,0BACT;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,KAAK,MAA2C;AAC9C,UAAI,CAAC,KAAK,SAAU;AACpB,UAAI,SAAS,KAAK;AAClB,aAAO,QAAQ;AACb,YAAI,OAAO,SAAS,YAAY,cAAc,KAAK,OAAO,IAAI,GAAG;AAC/D;AAAA,QACF;AACA,iBAAS,OAAO;AAAA,MAClB;AACA,WAAK,WAAW,MAAM;AAAA,QACpB,IAAI;AAAA,UACF,kBAAkB,KAAK,QAAQ,EAAE,QAAQ,CAAC,aAAa;AACrD,kBAAM,iBAAiB,oBAAoB,UAAU,MAAM,IACvD,WACA,GAAG,MAAM,IAAI,QAAQ;AACzB,kBAAM,YAAY,wBAAwB,cAAc;AACxD,mBAAO,YAAY,CAAC,gBAAgB,SAAS,IAAI,CAAC,cAAc;AAAA,UAClE,CAAC;AAAA,QACH;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACF;AAEC,oCAA4C,UAAU;AAEhD,IAAM,2BAA2B;","names":[]}

package/policy/openxiangda-policy.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "openxiangda_engineering_policy_v1",
-  "policyVersion": 4,
+  "policyVersion": 5,
   "risk": {
     "levels": ["L0", "L1", "L2", "L3"],
     "quickMaxLevel": "L1",
@@ -28,6 +28,13 @@
     "requireRemoteMainlineContainment": true
   },
   "release": {
+    "normalDeliveryVersion": 2,
+    "trustedDeveloperMode": true,
+    "normalCommands": ["check", "deploy", "status", "retry", "rollback"],
+    "productionConsumesSealedPackage": true,
+    "serverPersistedReleaseRun": true,
+    "v2RequiresSdd": false,
+    "v2RequiresGitMainline": false,
     "planAndVerifyAreReadOnly": true,
     "applicationEnvironmentMode": "candidate-preproduction-evidence-production",
     "candidateImmutable": true,

package/templates/openxiangda-react-spa/.cursor/rules/openxiangda.mdc

@@ -5,21 +5,22 @@ alwaysApply: true
 
 # OpenXiangda React SPA Rule
 
-This is an OpenXiangda React SPA workspace. See [AGENTS.md](mdc:AGENTS.md) for full guidance.
+This is an OpenXiangda React SPA workspace using Delivery V2. See [DELIVERY.md](mdc:DELIVERY.md) and [AGENTS.md](mdc:AGENTS.md). Low-level V1 resource/runtime commands are compatibility tools.
 
 ## Hard route
 
 | User says | Command |
 |---|---|
-| publish resources | `openxiangda resource publish <type> --only <codes> --profile <name> --change <change>` |
-| deploy frontend | `openxiangda runtime deploy --profile <name> --no-activate` |
-| formal promotion | managed app: `release candidate` → preproduction deploy/test → same-candidate `release promote --confirm-production` |
-| diff / plan | `openxiangda resource plan <type> --only <codes> --profile <name>` |
+| publish / deploy | `openxiangda check --environment preproduction` → `openxiangda deploy preproduction` |
+| formal promotion | `openxiangda deploy production --package <packageDigest>` |
+| status / retry | `openxiangda status <runId>` → `openxiangda retry <runId>` |
+| rollback | `openxiangda rollback production --to <appReleaseId>` |
 | diagnose | `openxiangda doctor --profile <name> --json` |
 | external backend Open API | `openxiangda-open-api` + `openxiangda open-api spec describe ...` |
 
 ## Always
 
+- Delivery V2 derives exact scope and does not require SDD, Git clean, `--change`, `--only`, candidate, or ship.
 - Writes and deploys must pass `--profile <name>` explicitly.
 - Architecture-class work is plan-gated: run `openxiangda design gates --topic <code> --json` and wait for confirmation.
 - Give every task an isolated worktree/branch and one explicit development change; feature worktrees never publish. Merge approved commits to the remote default branch, create one `sdd bundle <release-change> --changes ...`, commit/push it, then publish once from the synchronized clean main/master checkout.

package/templates/openxiangda-react-spa/.qoder/rules/openxiangda.md

@@ -5,22 +5,22 @@ alwaysApply: true
 
 # OpenXiangda React SPA Rule
 
-This is an OpenXiangda React SPA workspace. Read [AGENTS.md](AGENTS.md) for full guidance. New apps use `resource publish` plus `runtime deploy`; do not use classic workspace publish flows for frontend deployment.
+This is an OpenXiangda React SPA workspace using Delivery V2. Read [DELIVERY.md](DELIVERY.md) and [AGENTS.md](AGENTS.md). Low-level V1 resource/runtime commands are compatibility tools, not the normal release entrypoint.
 
 ## Hard route
 
 | 用户说 | 必用命令 |
 |---|---|
-| 发布资源 / publish resources | `openxiangda resource publish <type> --only <codes> --change <change> --profile <name>` |
-| 发布前端预览 / deploy preview | `openxiangda runtime deploy --profile <name> --no-activate --json` |
-| 正式 promotion | 环境托管应用：`release candidate` → 预发 deploy/test → 同 candidate `release promote --confirm-production` |
-| 完整部署 / deploy | 使用同一 change + 精确 `--only` 的显式命令；无范围 `pnpm deploy` 已停用 |
-| 资源计划 / diff | `openxiangda resource plan <type> --only <codes> --profile <name>` |
+| 发布 / 完整部署 | `openxiangda check --environment preproduction` → `openxiangda deploy preproduction` |
+| 正式 promotion | `openxiangda deploy production --package <packageDigest>` |
+| 状态 / 失败重试 | `openxiangda status <runId>` → `openxiangda retry <runId>` |
+| 回滚 | `openxiangda rollback production --to <appReleaseId>` |
 | 诊断 / 环境 | `openxiangda doctor --profile <name> --json` / `openxiangda env --profile <name>` |
 | 外部后端 / 三方系统开放接口 | `openxiangda-open-api` + `openxiangda open-api spec describe ...` |
 
 ## Always
 
+- Delivery V2 自动计算精确范围，不要求 SDD、Git clean、`--change`、`--only` 或 candidate/ship。
 - 发布和写平台资源必须显式传 `--profile <name>`。
 - 架构类需求先跑 `openxiangda design gates --topic <code> --json` 并等用户确认。
 - 每个任务使用独立 worktree/branch 和一个开发 change，但 feature worktree 不发布。批准提交先合并并 push 到远端默认主分支，再创建一个 `sdd bundle <release-change> --changes ...`，从同步且干净的 main/master 一次发布。

package/templates/openxiangda-react-spa/AGENTS.md

@@ -1,8 +1,12 @@
-<!-- OpenXiangda-Policy-Version: 4 -->
+<!-- OpenXiangda-Policy-Version: 5 -->
 # AGENTS.md — OpenXiangda React SPA 应用工作区
 
 本工作区是标准 React 18 + Vite + React Router 应用。默认模板只提供应用壳、账号菜单和一个首页，不是开发验证控制台。
 
+## Delivery V2（发布唯一入口）
+
+本工作区声明 `deliveryVersion: 2`，正常发布只使用 `openxiangda check`、`openxiangda deploy`、`openxiangda status`、`openxiangda retry`、`openxiangda rollback`，完整约定见 [DELIVERY.md](DELIVERY.md)。V2 自动计算资源范围并在服务端持久化 ReleaseRun，不要求 SDD、Git clean、主线 ancestry、`--change`、`--only` 或生产确认参数。本文后续出现的 `resource publish`、`runtime deploy`、`release publish/ship`、candidate、SDD/mainline 发布门禁均为 V1 底层兼容说明，不得用于 V2 正常发布。
+
 ## 开发原则
 
 - 架构类需求先运行 `openxiangda doctor --json` 和 `openxiangda design gates --topic <code> --json`。只有仍存在会改变实现方向的业务、安全或数据选择时才输出设计并等待确认；用户已经给出具体需求与验收标准时，直接记录结构化 SDD 范围并实现，不再写长篇设计或重复确认。

package/templates/openxiangda-react-spa/DELIVERY.md

@@ -0,0 +1,33 @@
+# OpenXiangda Delivery V2
+
+This workspace uses `deliveryVersion: 2`. Delivery V2 is desired-state based,
+content-addressed, resumable, and independent from Git/SDD cleanliness.
+
+Normal release commands are deliberately limited to:
+
+```bash
+openxiangda check --environment preproduction
+openxiangda deploy preproduction --json
+openxiangda deploy production --package <packageDigest> --json
+openxiangda status <runId> --json
+openxiangda retry <runId> --json
+openxiangda rollback production --to <appReleaseId> --json
+```
+
+Rules:
+
+- Do not assemble a release by choosing low-level `workspace publish`,
+  `resource publish`, `runtime deploy`, `release publish`, `release ship`, or
+  `app-finalize` commands. Delivery V2 owns that orchestration.
+- Do not add `--only`, `--change`, SDD bypass flags, Git-clean workarounds, or
+  production-confirmation flags. The package compiler derives the exact delta.
+- Preproduction compiles and uploads one immutable App Package. Production
+  deploys that exact `packageDigest` without rebuilding.
+- On failure, keep the `runId`. Read its compact structured status and use
+  `retry`; successful checkpoints are preserved.
+- Project `.env`, credentials, private keys, `.git`, `node_modules`, `dist`,
+  and generated `.openxiangda` state are never included in the authored source
+  layer. Runtime output is a separate immutable layer.
+
+Low-level V1 commands remain installed only for diagnostics and compatibility
+with old workspaces that do not declare `deliveryVersion: 2`.

package/templates/openxiangda-react-spa/app-workspace.config.ts

@@ -1,6 +1,7 @@
 import { defineAppWorkspaceConfig } from "openxiangda/build";
 
 export default defineAppWorkspaceConfig({
+  deliveryVersion: 2,
   appType: process.env.APP_TYPE || process.env.OPENXIANGDA_APP_TYPE || "APP_XXXXXXXXXXXXXXXX",
   appName: process.env.APP_NAME || "OpenXiangda React SPA",
   runtimeMode: "react-spa",
@@ -38,9 +39,8 @@ export default defineAppWorkspaceConfig({
   },
   governance: {
     sdd: {
-      enabled: process.env.OPENXIANGDA_SDD_ENABLED === "false" ? false : true,
-      strictHighRisk:
-        process.env.OPENXIANGDA_SDD_STRICT_HIGH_RISK === "false" ? false : true,
+      enabled: false,
+      strictHighRisk: false,
       strictDocumentation: false,
       documentationMode: 'structured',
       path: process.env.OPENXIANGDA_SDD_PATH || "openspec",

package/templates/sy-lowcode-app-workspace/.cursor/rules/openxiangda.mdc

@@ -11,7 +11,9 @@ This is a `sy-lowcode-app-workspace` managed by the `openxiangda` CLI. See [AGEN
 
 | User says | Skill | Command |
 |---|---|---|
-| publish / deploy / 发布 / 上线 / 部署 | `openxiangda-core` | `openxiangda workspace publish --profile <name>` (+ `--changed` / `--page` / `--form` / `--only`) |
+| publish / deploy / 发布 / 上线 / 部署 | `openxiangda-core` | `openxiangda check --environment preproduction` → `openxiangda deploy preproduction` |
+| production promotion | `openxiangda-core` | `openxiangda deploy production --package <packageDigest>` |
+| failed delivery / retry | `openxiangda-core` | `openxiangda status <runId>` → `openxiangda retry <runId>` |
 | create / scaffold app / 创建应用 / 初始化 | `openxiangda-app` | `openxiangda workspace init <dir> --profile <name> --app-name "..."` |
 | bind existing app / 绑定已有应用 | `openxiangda-app` | `openxiangda workspace bind --profile <name> --app-type APP_XXX` |
 | edit form / schema / 表单字段 / 表单页 | `openxiangda-form` | edit `src/forms/<code>/` → `workspace publish --form <code>` |
@@ -25,6 +27,7 @@ This is a `sy-lowcode-app-workspace` managed by the `openxiangda` CLI. See [AGEN
 
 ## Always
 
+- For `deliveryVersion: 2`, use only Delivery V2 commands. Later V1 SDD/mainline/`--only`/candidate/ship text is compatibility guidance and must not be mixed into V2.
 - Give every task an isolated worktree/branch and one development change; feature worktrees never publish. Merge approved commits to the remote default branch, create one `sdd bundle`, commit/push it, and publish once from synchronized clean main/master.
 - Close tasks from canonical main only. Review `openxiangda workspace cleanup`, then run `openxiangda workspace cleanup --apply` for that exact hashed `SAFE` plan; it revalidates managed worktrees under the owner lock, never picks up newly-safe entries, and never runs global `git worktree prune`. Review stale records separately.
 - L0 read-only/docs/tests need no SDD; L1 narrow reversible fixes record exact scope without a redundant second confirmation; schema, business Functions, Automation/Workflow, permissions, auth/public access, data writes, and runtime/config are L2/L3 full-SDD work. Live evidence/archive are post-release stages.

package/templates/sy-lowcode-app-workspace/.qoder/rules/openxiangda.md

@@ -11,7 +11,9 @@ This is a `sy-lowcode-app-workspace` managed by the `openxiangda` CLI. Read [AGE
 
 | 用户说 | 必用 skill | 必用命令 |
 |---|---|---|
-| 发布 / 上线 / 部署 / publish / deploy | `openxiangda-core` | `openxiangda workspace publish --profile <name>` (+`--changed` / `--page` / `--form` / `--only`) |
+| 发布 / 上线 / 部署 / publish / deploy | `openxiangda-core` | `openxiangda check --environment preproduction` → `openxiangda deploy preproduction` |
+| 晋级生产 | `openxiangda-core` | `openxiangda deploy production --package <packageDigest>` |
+| 发布失败 / 重试 | `openxiangda-core` | `openxiangda status <runId>` → `openxiangda retry <runId>` |
 | 创建 / 初始化应用 | `openxiangda-app` | `openxiangda workspace init <dir> --profile <name> --app-name "..."` |
 | 绑定已有应用 | `openxiangda-app` | `openxiangda workspace bind --profile <name> --app-type APP_XXX` |
 | 改表单字段 / schema / 表单页 | `openxiangda-form` | 编辑 `src/forms/<code>/` → `workspace publish --form <code>` |
@@ -25,6 +27,7 @@ This is a `sy-lowcode-app-workspace` managed by the `openxiangda` CLI. Read [AGE
 
 ## Always
 
+- `deliveryVersion: 2` 的正常发布只允许 Delivery V2 命令；后续 V1 SDD/mainline/`--only`/candidate/ship 内容仅作兼容说明，不得混入 V2。
 - 每个任务使用独立 worktree/branch 和一个开发 change，但 feature worktree 不发布。批准提交先合并并 push 到远端默认主分支，再创建一个 `sdd bundle`，从同步且干净的 main/master 一次发布。
 - 合并、push、发布和 `release end` 后，回到 canonical 主工作区先审阅 `openxiangda workspace cleanup`，再执行 `openxiangda workspace cleanup --apply` 应用精确哈希计划。CLI 在 owner lock 内复核，只删除已审阅的 managed `SAFE` 项，不顺带处理后来才安全的项，也不执行全局 `git worktree prune`；stale 记录单独人工审阅。
 - L0 只读/文档/测试无需 SDD；L1 窄小可逆改动记录精确范围且不重复确认；表单结构、业务函数、自动化/流程、权限、登录/公开访问、数据写入、runtime/config 等 L2/L3 走完整 SDD，live evidence/archive 放到发布后。

package/templates/sy-lowcode-app-workspace/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- OpenXiangda-Policy-Version: 4 -->
+<!-- OpenXiangda-Policy-Version: 5 -->
 # AGENTS.md — OpenXiangda 工作区 AI 强约束
 
 > 任何 AI（Qoder / Claude / Codex / Cursor / Copilot 等）在本工作区操作前 **必须先读完本文件**。
@@ -6,7 +6,9 @@
 
 ## 一句话原则
 
-**所有"发布 / 上线 / 部署 / publish / deploy / ship / release"请求，唯一正确入口是 `openxiangda workspace publish --profile <name>`，不要直接 `pnpm publish:all`。**
+**本工作区声明 `deliveryVersion: 2`。所有“发布 / 上线 / 部署 / publish / deploy / ship / release”请求只使用 `openxiangda check`、`openxiangda deploy`、`openxiangda status`、`openxiangda retry`、`openxiangda rollback`，完整约定见 [DELIVERY.md](DELIVERY.md)。**
+
+Delivery V2 自动从期望状态计算精确资源范围，封存内容寻址 App Package，并在服务端持久化 ReleaseRun 和检查点。它不要求 SDD、Git clean、主线 ancestry、`--change`、`--only` 或生产确认参数。本文后续出现的 `workspace publish`、`resource publish`、`runtime deploy`、`release publish/ship`、candidate、SDD/mainline 发布门禁均属于 V1 底层兼容说明，不得用于 V2 正常发布。
 
 **架构类需求先过设计门。** 新应用、复杂页面、登录注册、公开访问、权限数据范围、流程自动化、连接器/通知等需求，先 `openxiangda doctor --json` + `openxiangda design gates --topic <code> --json`。只有仍存在会改变实现方向的业务、安全或数据选择时才输出设计并等待确认；用户已经给出具体需求与验收标准时，直接记录结构化 SDD 范围并实现，不再写长篇设计或重复确认。
 
@@ -24,8 +26,9 @@
 
 | 用户说（中 / 英） | 用 skill | 第一条命令 |
 |---|---|---|
-| 发布 / 上线 / 部署 / publish / deploy | `openxiangda-core` | `openxiangda workspace publish --profile <name> --changed --dry-run` |
-| 只发布改动 / 增量 / 单页 / 单表 | `openxiangda-core` | `... --changed` / `--page <code>` / `--form <code>` / `--only pages/a,forms/b` |
+| 发布 / 上线 / 部署 / publish / deploy | `openxiangda-core` | `openxiangda check --environment preproduction` → `openxiangda deploy preproduction` |
+| 晋级生产 | `openxiangda-core` | `openxiangda deploy production --package <packageDigest>` |
+| 发布失败 / 断点续跑 | `openxiangda-core` | `openxiangda status <runId>` → `openxiangda retry <runId>` |
 | 创建应用 / 新建 app / 初始化工作区 | `openxiangda-app` | `openxiangda workspace init <dir> --profile <name> --app-name "..."` |
 | 绑定已有应用 | `openxiangda-app` | `openxiangda workspace bind --profile <name> --app-type APP_XXX` |
 | 创建 / 改表单字段、schema、表单页 | `openxiangda-form` | 编辑表单并声明 form-setting bundle → `resource publish form-setting --only <code>` 暂存；整应用由 `app-finalize` 激活 |

package/templates/sy-lowcode-app-workspace/DELIVERY.md

@@ -0,0 +1,33 @@
+# OpenXiangda Delivery V2
+
+This workspace uses `deliveryVersion: 2`. Delivery V2 is desired-state based,
+content-addressed, resumable, and independent from Git/SDD cleanliness.
+
+Normal release commands are deliberately limited to:
+
+```bash
+openxiangda check --environment preproduction
+openxiangda deploy preproduction --json
+openxiangda deploy production --package <packageDigest> --json
+openxiangda status <runId> --json
+openxiangda retry <runId> --json
+openxiangda rollback production --to <appReleaseId> --json
+```
+
+Rules:
+
+- Do not assemble a release by choosing low-level `workspace publish`,
+  `resource publish`, `runtime deploy`, `release publish`, `release ship`, or
+  `app-finalize` commands. Delivery V2 owns that orchestration.
+- Do not add `--only`, `--change`, SDD bypass flags, Git-clean workarounds, or
+  production-confirmation flags. The package compiler derives the exact delta.
+- Preproduction compiles and uploads one immutable App Package. Production
+  deploys that exact `packageDigest` without rebuilding.
+- On failure, keep the `runId`. Read its compact structured status and use
+  `retry`; successful checkpoints are preserved.
+- Project `.env`, credentials, private keys, `.git`, `node_modules`, `dist`,
+  and generated `.openxiangda` state are never included in the authored source
+  layer. Runtime output is a separate immutable layer.
+
+Low-level V1 commands remain installed only for diagnostics and compatibility
+with old workspaces that do not declare `deliveryVersion: 2`.

package/templates/sy-lowcode-app-workspace/app-workspace.config.ts

@@ -1,6 +1,7 @@
 import { defineAppWorkspaceConfig } from "openxiangda/build";
 
 export default defineAppWorkspaceConfig({
+  deliveryVersion: 2,
   appType: process.env.APP_TYPE || process.env.OPENXIANGDA_APP_TYPE || "APP_XXXXXXXXXXXXXXXX",
   appName: process.env.APP_NAME || "低代码应用",
   platformUrl: process.env.APP_PLATFORM_URL || process.env.OPENXIANGDA_BASE_URL || "http://yida.wisejob.cn/service",
@@ -39,9 +40,8 @@ export default defineAppWorkspaceConfig({
   },
   governance: {
     sdd: {
-      enabled: process.env.OPENXIANGDA_SDD_ENABLED === "false" ? false : true,
-      strictHighRisk:
-        process.env.OPENXIANGDA_SDD_STRICT_HIGH_RISK === "false" ? false : true,
+      enabled: false,
+      strictHighRisk: false,
       strictDocumentation: false,
       documentationMode: 'structured',
       path: process.env.OPENXIANGDA_SDD_PATH || "openspec",

package/templates/sy-lowcode-app-workspace/src/types/app-workspace.types.ts

@@ -1,4 +1,5 @@
 export interface AppWorkspaceConfig {
+  deliveryVersion: 2;
   appType: string;
   appName: string;
   runtimeMode?: "legacy" | "react-spa";