@302ai/media-studio-cli 0.1.0 → 0.1.1-beta.1

package/README.md

@@ -42,10 +42,12 @@ name:
 ```bash
 msc chat "画一只猫" -r        # -r/--show-reasoning = 展示模型推理过程
 msc chat "hi" --json          # machine-readable output
-msc chat "hi" --session <id>  # 切换到指定会话并设为默认
+msc chat "hi" --session <id>  # 切换到已有会话（先校验存在）并设为默认
+msc chat "hi" --new           # 新建会话并设为默认（id 不复用）
 msc sessions                  # 列出所有会话（标记当前默认 `(current)`）
 msc sessions --json           # 机器可读的原始 JSON 数组
-msc sessions use <id>         # 纯本地切换默认会话（零请求、不校验）
+msc sessions use <id>         # 校验存在后切换默认会话
+msc sessions use --new        # 新建会话并设为默认
 msc skills                    # 列出技能库（--plaza 浏览技能广场）
 msc skills add <slug>          # 从广场安装技能（如 brainstorming，见 --plaza --json 的 slug）
 msc skills rm <command>       # 从技能库移除（-y/--yes 跳过确认）
@@ -79,10 +81,20 @@ whose browser can reach the loopback callback.
   loses a live session.
 - **Later chats** continue that session — upstream remembers the
   conversation by session id, so no history is resent.
-- If the session was deleted elsewhere, the CLI transparently provisions a
-  fresh one and continues — you are never stranded.
-- `--session <id>` switches to a specific session (including web-created
-  ones) and makes it the default, without provisioning.
+- If the current session is gone **before a turn produces any output**, the CLI
+  transparently provisions a fresh one and re-runs the turn — a first-turn
+  failure never strands you.
+- Once a turn has started producing output, a session failure is reported
+  instead: the partial result stands, nothing is re-run, and no replacement
+  session is created (a retry would replay output and re-dispatch tool calls or
+  generation tasks the first attempt may already have started).
+- `--session <id>` switches to an existing session (including web-created
+  ones) and makes it the default. The id is verified upstream first: a missing
+  id fails with a hint, it never provisions a different session behind your
+  back.
+- `--new` creates a fresh session with a newly generated id and makes it the
+  default for later runs. Ids are never reused or adopted: the CLI either uses
+  the id it generated or reports the refusal.
 
 Manual proof of continuity:
 
@@ -103,9 +115,22 @@ The CLI stores credentials and local settings in:
 - **Override**: `MEDIA_STUDIO_CONFIG_DIR=/path/to/dir`
 
 Key files:
-- `auth.json`: stores active platform credentials and user session metadata (permissions `0600`)
+- `auth.json`: stores active platform credentials and user session metadata (permissions `0600` on POSIX)
 - `config.json`: stores CLI client settings, including `lastSessionId` pointer
 
+`auth.json`'s `apiUrl` is only accepted when its host is on the CLI allowlist:
+the official hosts (which the rejection message lists) plus the local-dev
+hosts `localhost` / `127.0.0.1` / `::1`. A hand-edited URL outside that list is
+refused before any request is sent, and the CLI reports it as a rejected
+credential naming the URL — not as "not logged in", since the token itself may
+be fine. `msc login` rewrites the file with a server-supplied URL and is the
+fix; the refused URL is never used, and base-URL resolution falls back to the
+official default host.
+
+In `--json` mode the two auth states are distinguishable without reading the
+message: a rejected credential carries `"nextStep": "relogin"` (and its
+`guidance`), while no credential at all reports `status` and `message` only.
+
 ### Skills
 
 Discover what your account can reference, then reference it — the reference
@@ -317,8 +342,10 @@ msc chat "刚才的数字是几?"     # answers 42
 
 # Session management verification:
 msc sessions                  # shows session list with (current) marker
-msc chat "hi" --session <id>  # switch to specific session
-msc sessions use <id>         # switch default pointer locally
+msc chat "hi" --session <id>  # switch to an existing session
+msc chat "hi" --new           # start a new session
+msc sessions use <id>         # switch default pointer to an existing session
+msc sessions use --new        # create a new session and switch to it
 ```
 
 Without the local server, point at production with