@clack-platform/cli 0.3.0 → 0.3.2

package/README.md

@@ -183,7 +183,7 @@ ZIP에 `clack.content.json` 또는 `.clack/`가 있으면 업로드 전에 선
 
 `content update`는 제목·설명·종류·썸네일·메타데이터·태그를 서버 PATCH와 같은 규칙으로 수정합니다(`--title`, `--description`, `--kind`, `--thumbnail-id <썸네일 작업 ID|none>`, `--metadata-mode single|localized`, `--metadata-lang ko|en|none`, `--localized-metadata '<JSON>'|none`, `--tags 쉼표목록`). 지정한 필드만 바뀌고 `--tags`·`--localized-metadata`는 통째 교체됩니다. 단일 메타데이터 모드에서는 제목을 비우면 「제목 없는 콘텐츠」로 표시되고, 언어별(`localized`) 모드에서는 빈 제목을 서버가 거부합니다(400). 썸네일 작업 ID는 `POST /v4/creator/thumbnails` 등으로 발급하며 CLI에는 썸네일 업로드 명령이 없어 보통 `none`(기본 이미지로 되돌리기)만 씁니다. 언어별 메타데이터·태그는 서버 게이트가 켜진 환경에서만 쓸 수 있습니다. 인트로 저장은 개인 액세스 토큰으로 할 수 없어 크리에이터 센터에서만 합니다.
 
-`content info-version <콘텐츠-UUID> <버전-UUID>`는 승인·반려된 버전의 번들을 재사용해 바뀐 콘텐츠 정보만 담은 새 초안 버전을 만듭니다(새로 만들면 201, 이미 있던 초안이면 200이며 응답의 `created`로 구분). 새 버전은 앱 확인과 심사를 다시 받아야 합니다. 서버 게이트가 꺼진 환경에서는 `CONTENT_INFO_VERSION_DISABLED`(409)가 반환되며 `clack content config`의 `info_version.enabled`로 확인할 수 있습니다.
+`content info-version <콘텐츠-UUID> <버전-UUID>`는 승인·반려된 버전의 번들을 재사용해 바뀐 콘텐츠 정보만 담은 새 초안 버전을 만듭니다(새로 만들면 201, 같은 정보의 미게시 버전(초안·심사 중·승인 미게시)이 있으면 200이며 응답의 `created`로 구분). 새 버전은 앱 확인과 심사를 다시 받아야 합니다. 서버 게이트가 꺼진 환경에서는 `CONTENT_INFO_VERSION_DISABLED`(409)가 반환되며 `clack content config`의 `info_version.enabled`로 확인할 수 있습니다.
 
 ```bash
 clack content update --env dev <콘텐츠-UUID> --title "새 제목" --tags 여행,사진
@@ -357,6 +357,8 @@ clack page status PAGE_ID
 - 업로드: `{"action":"upload","session_id":"UUID","field":"plates","item_index":0,"file":"./portrait.png"}`. 응답 자산 ID를 `plates[0].asset_id`로 저장한다.
 - 견적: `{"action":"quote","session_id":"UUID"}`. 생성은 `action:"image"` 또는 `"image-batch"`, `form_revision`·`asset_slot`·`approved_price_cash`·`idempotency_key`와 `item_index` 또는 `item_indexes`를 보낸다. 같은 요청의 재시도에는 같은 키를 사용한다.
 - 가져오기: `{"action":"import","session_id":"UUID","field":"portrait_source","content_id":"UUID","revision":0}`. 본인 콘텐츠에서 매니페스트가 내보내도록 선언한 값만 복사한다.
+- 종료(CLI 0.3.1 이상): `clack authoring complete <세션-UUID> --env dev` 또는 `clack authoring abandon <세션-UUID> --env dev --yes`. JSON 입력은 `{"action":"complete","session_id":"UUID"}`·`{"action":"abandon","session_id":"UUID"}`이며 포기는 비대화형에서 `--yes`가 필요하다. 로컬 MCP는 같은 action을 사용하고 abandon에 `confirm:true`를 지정한다.
+- 완료·포기는 폼(template) 세션만 PAT로 가능하다. 에디터·지침형 스킬의 생성·종료는 403 `SESSION_REQUIRED`이므로 센터에서 작업한다. 본인 세션이 없으면 404 `AUTHORING_NOT_FOUND`다. complete는 현재 revision을 package한 뒤 가능하며(409 `AUTHORING_NOT_PACKAGED`), 종료 재호출은 409 `AUTHORING_SESSION_LOCKED`다. 종료 응답의 `data.status`를 확인한다. 포기해도 기존 콘텐츠는 유지되며 게시·심사는 별도다. 응답 유실 때는 get으로 상태를 조회하고 변경 요청을 자동 재시도하지 않는다.
 - AI 채우기는 `fill-quote` → `fill` → `fill-status`, 자산 목록은 `assets`, 이미지 작업 조회는 `tool`, 폼 검증은 `validate`를 사용한다.
 
 `image_list` 값은 `[{"asset_id":"UUID","scene":"장면","pose":"구도","mood":"분위기","aspect":"1:1"}]`이며 한 번에 최대 8장, 콘텐츠당 최대 24장을 사용한다. 스킬의 `max_calls`와 플랫폼 설정 중 작은 한도를 적용한다. 참조 이미지 생성은 공급자 검증 전 비활성이며 현재 외모·화풍·팔레트 텍스트로 동일성을 안내한다.

package/dist/cli.js

@@ -28,12 +28,40 @@ var CliError = class extends Error {
     return 1;
   }
 };
+function describeDetails(details) {
+  if (!details || typeof details !== "object" || Array.isArray(details)) return [];
+  const d = details;
+  const text = (v) => typeof v === "string" && v ? v.replace(/[\p{C}]/gu, "").slice(0, 160) : typeof v === "number" || typeof v === "boolean" ? String(v) : void 0;
+  const lines = [];
+  const reason = text(d.reason);
+  if (reason) lines.push(`\uC0AC\uC720: ${reason}`);
+  const file = text(d.file);
+  if (file) lines.push(`\uD30C\uC77C: ${file}`);
+  if (Array.isArray(d.issues)) {
+    for (const issue of d.issues.slice(0, 5)) {
+      if (!issue || typeof issue !== "object") continue;
+      const i = issue;
+      const parts = [["\uD30C\uC77C", i.file], ["\uC704\uCE58", i.pointer], ["\uADDC\uCE59", i.rule], ["\uAC12", i.param]].flatMap(([label, v]) => {
+        const t = text(v);
+        return t ? [`${label}=${t}`] : [];
+      });
+      if (parts.length) lines.push(`\uBB38\uC81C: ${parts.join(" ")}`);
+    }
+  }
+  const expected = text(d.expected);
+  const actual = text(d.actual);
+  if (expected !== void 0 || actual !== void 0) lines.push(`\uAE30\uB300: ${expected ?? "-"} / \uC2E4\uC81C: ${actual ?? "-"}`);
+  return lines;
+}
 function apiError(status, body, retryAfter) {
   const value2 = body && typeof body === "object" ? body : {};
   const code = typeof value2.code === "string" ? value2.code : `HTTP_${status}`;
   let message = typeof value2.message === "string" ? value2.message : `\uC694\uCCAD\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4 (${status}).`;
   if (status === 401 && code === "SERVER_KEY_INVALID") message += " \uC13C\uD130\uC5D0\uC11C \uC11C\uBC84 \uD0A4 \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uAC70\uB098 \uC0C8\uB85C \uBC1C\uAE09\xB7\uD68C\uC804\uD558\uC138\uC694.";
   else if (status === 401) message += " clack login\uC73C\uB85C \uB2E4\uC2DC \uC5F0\uACB0\uD558\uC138\uC694.";
+  if (code === "SESSION_REQUIRED") message += " \uC5D0\uB514\uD130\xB7\uC9C0\uCE68\uD615 \uC2A4\uD0AC\uC740 \uD06C\uB9AC\uC5D0\uC774\uD130 \uC13C\uD130\uC5D0\uC11C \uC791\uC5C5\uD558\uC138\uC694. \uD3FC \uC138\uC158\uB9CC PAT\uB85C \uB9CC\uB4E4\uACE0 \uB05D\uB0BC \uC218 \uC788\uC2B5\uB2C8\uB2E4.";
+  if (code === "AUTHORING_NOT_PACKAGED") message += " JSON action:package\uB97C clack authoring --input <\uD30C\uC77C>\uB85C \uC2E4\uD589\uD55C \uB4A4 authoring complete <\uC138\uC158-ID>\uB97C \uC2E4\uD589\uD558\uC138\uC694.";
+  if (code === "AUTHORING_SESSION_LOCKED") message += " JSON action:get\uC744 clack authoring --input <\uD30C\uC77C>\uB85C \uC2E4\uD589\uD574 \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uC138\uC694. \uC774\uBBF8 \uC885\uB8CC\uB41C \uC138\uC158\uC740 \uB2E4\uC2DC \uD3B8\uC9D1\uD558\uAC70\uB098 \uC885\uB8CC\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.";
   if (code === "IDENTITY_VERIFICATION_REQUIRED") message += " \uC571\uC5D0\uC11C \uBCF8\uC778\uC778\uC99D\uC744 \uC644\uB8CC\uD558\uC138\uC694.";
   if (code === "SCOPE_DENIED") message += " \uD544\uC694\uD55C \uAD8C\uD55C\uC73C\uB85C \uD1A0\uD070\uC744 \uB2E4\uC2DC \uBC1C\uAE09\uD558\uC138\uC694.";
   if (code === "SKILL_VERSION_MAJOR_REQUIRED") {
@@ -44,6 +72,9 @@ function apiError(status, body, retryAfter) {
   if (code === "CONTENT_METADATA_EXTRAS_DISABLED") message += " \uC774 \uD658\uACBD\uC5D0\uC11C\uB294 \uC5B8\uC5B4\uBCC4 \uBA54\uD0C0\uB370\uC774\uD130\xB7\uD0DC\uADF8\uB97C \uC544\uC9C1 \uC4F8 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.";
   if (status === 423 || code === "USER_BANNED") message += " \uACC4\uC815 \uC81C\uD55C \uC0C1\uD0DC\uB97C \uC571\uC5D0\uC11C \uD655\uC778\uD558\uC138\uC694.";
   if (status === 503 && code.endsWith("DISABLED")) message += " \uD604\uC7AC \uC678\uBD80 \uB3C4\uAD6C \uC811\uADFC\uC774 \uC77C\uC2DC \uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4.";
+  const located = describeDetails(value2.details);
+  if (located.length) message += `
+${located.map((line) => `  ${line}`).join("\n")}`;
   const raw = Number(value2.retry_after ?? retryAfter);
   const retry = Number.isFinite(raw) && raw > 0 ? Math.ceil(raw) : void 0;
   return new CliError(message, code, status, retry);
@@ -153,7 +184,7 @@ function redact(value2) {
 // package.json
 var package_default = {
   name: "@clack-platform/cli",
-  version: "0.3.0",
+  version: "0.3.2",
   description: "\uD074\uB799 \uACC4\uC815\uC758 \uC0C1\uD488\xB7\uCF58\uD150\uCE20\xB7\uD504\uB85C\uD544\uC744 \uAD00\uB9AC\uD558\uB294 CLI",
   type: "module",
   bin: {
@@ -580,7 +611,9 @@ var authoringInput = z2.discriminatedUnion("action", [
   z2.strictObject({ action: z2.literal("tool"), ...session, call_id: z2.uuid() }),
   z2.strictObject({ action: z2.literal("fill"), ...session, revision: revision2, fields: z2.array(field).max(60).optional(), instruction: z2.string().max(4e3).optional(), tier: z2.enum(["economy", "performance"]).optional() }),
   z2.strictObject({ action: z2.literal("fill-status"), ...session, job_id: z2.uuid() }),
-  z2.strictObject({ action: z2.literal("package"), ...session, revision: revision2 })
+  z2.strictObject({ action: z2.literal("package"), ...session, revision: revision2 }),
+  z2.strictObject({ action: z2.literal("complete"), ...session }),
+  z2.strictObject({ action: z2.literal("abandon"), ...session, confirm: z2.boolean().optional() })
 ]);
 async function authoringRequest(client, raw, surface = "cli") {
   const result = authoringInput.safeParse(raw);
@@ -592,6 +625,9 @@ async function authoringRequest(client, raw, surface = "cli") {
     return client.request("POST", base2, { body: { ...body2, surface } });
   }
   const path = `${base2}/${input.session_id}`;
+  if (input.action === "complete" || input.action === "abandon") {
+    return client.request("POST", `${path}/complete`, { body: { outcome: input.action === "complete" ? "completed" : "abandoned" } });
+  }
   if (input.action === "get") return client.request("GET", path);
   if (input.action === "assets") return client.request("GET", `${path}/assets`);
   if (input.action === "quote") return client.request("GET", `${path}/tools/image.generate/quote`);
@@ -620,16 +656,27 @@ async function authoringRequest(client, raw, surface = "cli") {
   return client.request(action === "save" ? "PATCH" : "POST", `${path}/${action === "save" ? "form" : action}`, { body });
 }
 function registerAuthoringCommands(program2, runtime2) {
-  runtime2.action(program2.command("authoring").description("\uACF5\uAC1C \uC2A4\uD0AC\uB85C \uC81C\uC791\xB7\uC790\uC0B0 \uC5C5\uB85C\uB4DC\xB7\uC774\uBBF8\uC9C0 \uC0DD\uC131\xB7\uD328\uD0A4\uC9D5 (creator-content:write)").requiredOption("--input <file>", "action\uACFC \uC694\uCCAD \uAC12\uC774 \uC788\uB294 JSON \uD30C\uC77C"), async (ctx, _args, opts) => {
-    const input = await readPlatformBodyFile(opts.input);
+  const command = program2.command("authoring").description("\uC2A4\uD0AC \uC81C\uC791\xB7\uD328\uD0A4\uC9D5\xB7\uD3FC \uC138\uC158 \uC644\uB8CC/\uD3EC\uAE30 (creator-content:write)").option("--input <file>", "action\uACFC \uC694\uCCAD \uAC12\uC774 \uC788\uB294 JSON \uD30C\uC77C").addHelpText("after", "\n\uD3FC \uC138\uC158\uB9CC PAT\uB85C \uC644\uB8CC\xB7\uD3EC\uAE30\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4. \uC5D0\uB514\uD130\xB7\uC9C0\uCE68\uD615\uC740 \uC13C\uD130\uC5D0\uC11C \uC791\uC5C5\uD558\uC138\uC694.\ncomplete\uB294 \uD604\uC7AC revision\uC744 package\uD55C \uB4A4 \uC0AC\uC6A9\uD569\uB2C8\uB2E4. \uC885\uB8CC \uC7AC\uD638\uCD9C\uC740 AUTHORING_SESSION_LOCKED\uC785\uB2C8\uB2E4.");
+  const run = async (ctx, raw) => {
+    const parsed = authoringInput.safeParse(raw);
+    if (!parsed.success) throw new CliError("\uC81C\uC791 \uC791\uC5C5 \uC785\uB825 \uD615\uC2DD\uC744 \uD655\uC778\uD558\uC138\uC694.", "VALIDATION_ERROR");
     if (ctx.options.dryRun) {
-      const parsed = authoringInput.safeParse(input);
-      if (!parsed.success) throw new CliError("\uC81C\uC791 \uC791\uC5C5 \uC785\uB825 \uD615\uC2DD\uC744 \uD655\uC778\uD558\uC138\uC694.");
       ctx.output({ dry_run: true, input: parsed.data });
       return;
     }
-    ctx.output(await authoringRequest(ctx.api, input));
+    if (parsed.data.action === "abandon") await ctx.confirm(`\uC81C\uC791 \uC138\uC158 ${parsed.data.session_id}\uC744 \uD3EC\uAE30\uD569\uB2C8\uB2E4. \uC774\uD6C4 \uD3B8\uC9D1\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uAE30\uC874 \uCF58\uD150\uCE20\uB294 \uC720\uC9C0\uB429\uB2C8\uB2E4.`);
+    ctx.output(await authoringRequest(ctx.api, parsed.data));
+  };
+  runtime2.action(command, async (ctx, _args, opts) => {
+    if (!opts.input) throw new CliError("--input <file> \uB610\uB294 complete/abandon <session-id>\uB97C \uC9C0\uC815\uD558\uC138\uC694.");
+    await run(ctx, await readPlatformBodyFile(opts.input));
   });
+  for (const action of ["complete", "abandon"]) {
+    runtime2.action(command.command(`${action} <session-id>`).description(action === "complete" ? "\uD604\uC7AC \uD328\uD0A4\uC9D5\uB41C \uD3FC \uC138\uC158\uC744 \uC644\uC131 \uC0C1\uD0DC\uB85C \uC885\uB8CC" : "\uD3FC \uC138\uC158 \uD3EC\uAE30 (\uBE44\uB300\uD654\uD615 \uC2E4\uD589\uC740 --yes \uD544\uC694)"), async (ctx, args, opts) => {
+      if (opts.input) throw new CliError("\uD558\uC704 \uBA85\uB839\uACFC --input\uC744 \uD568\uAED8 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+      await run(ctx, { action, session_id: args[0] });
+    });
+  }
 }
 
 // src/cli.ts
@@ -2458,6 +2505,16 @@ function inspectIntroSemantics(skill, form, slots, fail2) {
     if (!field2 || field2["x-clack-visibility"] !== "public") fail2(`/output/intro/${key}`, "\uACF5\uAC1C \uBB38\uC790\uC5F4(text\xB7textarea) \uD3FC \uD544\uB4DC\uB97C \uAC00\uB9AC\uCF1C\uC57C \uD569\uB2C8\uB2E4.");
     else if (field2.maxLength > max) fail2(`/output/intro/${key}`, `\uAC00\uB9AC\uD0A4\uB294 \uD3FC \uD544\uB4DC\uC758 \uCD5C\uB300 \uAE38\uC774\uAC00 ${max}\uC790 \uC774\uD558\uC5EC\uC57C \uD569\uB2C8\uB2E4.`);
   }
+  let sectionLength = 0;
+  for (const [key, name2] of Object.entries(intro.sections ?? {})) {
+    const field2 = textField(name2);
+    if (!field2 || field2["x-clack-visibility"] !== "public") fail2(`/output/intro/sections/${key}`, "\uC18C\uAC1C \uC139\uC158\uC740 \uACF5\uAC1C \uBB38\uC790\uC5F4(text\xB7textarea) \uD3FC \uD544\uB4DC\uB9CC \uAC00\uB9AC\uD0AC \uC218 \uC788\uC2B5\uB2C8\uB2E4.");
+    else {
+      if (field2.maxLength > 2e3) fail2(`/output/intro/sections/${key}`, "\uC18C\uAC1C \uC139\uC158\uC758 \uCD5C\uB300 \uAE38\uC774\uB294 2,000\uC790\uC785\uB2C8\uB2E4.");
+      sectionLength += field2.maxLength;
+    }
+  }
+  if (sectionLength > 6e3) fail2("/output/intro/sections", "\uC18C\uAC1C \uC139\uC158\uC758 \uCD5C\uB300 \uAE38\uC774 \uD569\uACC4\uB294 6,000\uC790\uC785\uB2C8\uB2E4.");
   const fallback = intro.description_fallback ?? [];
   let composed = 0;
   for (const name2 of fallback) {
@@ -3812,6 +3869,37 @@ var clack_skill_v1_schema_default = {
               minItems: 1,
               maxItems: 8,
               uniqueItems: true
+            },
+            sections: {
+              type: "object",
+              additionalProperties: false,
+              description: "\uACF5\uAC1C \uBB38\uC790\uC5F4 \uD3FC \uD544\uB4DC\uB97C \uC18C\uAC1C \uC139\uC158\uC5D0 \uB9E4\uD551\uD569\uB2C8\uB2E4. \uD56D\uBAA9\uBCC4 \uCD5C\uB300 2,000\uC790, \uC120\uC5B8\uB41C \uD544\uB4DC \uCD5C\uB300 \uAE38\uC774 \uD569\uACC4 6,000\uC790\uC785\uB2C8\uB2E4.",
+              properties: {
+                how_to: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                },
+                notice: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                },
+                character: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                },
+                setting: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                },
+                relationship: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                },
+                first_scene: {
+                  type: "string",
+                  pattern: "^[a-z][a-z0-9_-]{0,31}$"
+                }
+              }
             }
           }
         }
@@ -5116,6 +5204,7 @@ var clack_content_v1_schema_default = {
 var MAX_ZIP = 10 * 1024 * 1024;
 var MAX_EXPANDED = 30 * 1024 * 1024;
 var MAX_FILES2 = 500;
+var MAX_ZIP_ENTRIES = 2e3;
 var textDecoder2 = new TextDecoder("utf-8", { fatal: true });
 var ajv = new Ajv20202({ allErrors: true, strict: false });
 ajv.addSchema(clack_content_v1_schema_default);
@@ -5160,6 +5249,14 @@ function skillPathAllowed(path) {
   if (parts.includes("scripts") || /\.(?:sh|bash|zsh|fish|bat|cmd|ps1|exe|dll|so|dylib|wasm|py|rb|php|jar)$/i.test(path)) return false;
   return true;
 }
+function isArchiveMetadata(path) {
+  const parts = path.split("/");
+  const name2 = parts.at(-1) ?? "";
+  return parts[0] === "__MACOSX" || name2 === ".DS_Store" || name2.startsWith("._");
+}
+function unsafeArchivePath(path) {
+  return path.startsWith("/") || /[\p{Cc}]/u.test(path) || path.split("/").includes("..");
+}
 async function collectFiles(directory) {
   const files = {};
   let totalBytes = 0;
@@ -5167,6 +5264,7 @@ async function collectFiles(directory) {
     const entries = await readdir(join2(directory, relative), { withFileTypes: true });
     for (const entry of entries.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0)) {
       const path = relative ? `${relative}/${entry.name}` : entry.name;
+      if (isArchiveMetadata(path)) continue;
       if (!skillPathAllowed(path)) invalid2(`\uD5C8\uC6A9\uB418\uC9C0 \uC54A\uB294 \uD328\uD0A4\uC9C0 \uACBD\uB85C: ${path}`);
       if (entry.isSymbolicLink() || !(entry.isDirectory() || entry.isFile())) invalid2(`\uC77C\uBC18 \uD30C\uC77C\xB7\uD3F4\uB354\uB9CC \uD5C8\uC6A9\uB429\uB2C8\uB2E4: ${path}`);
       if (entry.isDirectory()) {
@@ -5185,22 +5283,47 @@ async function collectFiles(directory) {
 }
 function inspectZip(bytes2, expectedDirectory, hashMismatch) {
   if (!bytes2.length || bytes2.length > MAX_ZIP) invalid2("\uC2A4\uD0AC ZIP\uC740 \uBE44\uC5B4 \uC788\uC9C0 \uC54A\uC740 10 MiB \uC774\uD558 \uD30C\uC77C\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.");
+  const raw = [];
+  try {
+    unzipSync2(bytes2, { filter(entry) {
+      if (raw.length >= MAX_ZIP_ENTRIES) invalid2("ZIP \uD56D\uBAA9 \uC218\uAC00 2,000\uAC1C\uB97C \uCD08\uACFC\uD588\uC2B5\uB2C8\uB2E4.");
+      const dir = entry.name.endsWith("/");
+      raw.push({ name: dir ? entry.name.slice(0, -1) : entry.name, dir });
+      return false;
+    } });
+  } catch (error2) {
+    if (error2 instanceof CliError) throw error2;
+    return invalid2("ZIP \uAD6C\uC870\uB97C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+  }
+  for (const { name: name2 } of raw) if (unsafeArchivePath(name2)) invalid2(`\uD5C8\uC6A9\uB418\uC9C0 \uC54A\uB294 ZIP \uACBD\uB85C: ${name2.replace(new RegExp("\\p{C}", "gu"), "").slice(0, 160)}`);
+  const kept = raw.filter(({ name: name2 }) => !isArchiveMetadata(name2));
+  const keptFiles = kept.filter(({ dir }) => !dir);
+  if (keptFiles.length > MAX_FILES2) invalid2("\uC2A4\uD0AC \uD30C\uC77C \uC218\uAC00 500\uAC1C\uB97C \uCD08\uACFC\uD588\uC2B5\uB2C8\uB2E4.");
+  let prefix = "";
+  const top = keptFiles[0]?.name.split("/")[0];
+  if (top && keptFiles.every(({ name: name2 }) => name2.startsWith(`${top}/`))) {
+    const names = new Set(keptFiles.map(({ name: name2 }) => name2));
+    if (names.has(`${top}/SKILL.md`) && names.has(`${top}/clack.skill.json`)) prefix = `${top}/`;
+  }
   const seen = /* @__PURE__ */ new Set();
-  let entries = 0;
+  const wanted = /* @__PURE__ */ new Map();
+  for (const { name: name2, dir } of kept) {
+    if (dir && prefix && name2 === prefix.slice(0, -1)) continue;
+    const path = prefix && name2.startsWith(prefix) ? name2.slice(prefix.length) : name2;
+    if (!skillPathAllowed(path) || seen.has(path.toLowerCase())) invalid2(`\uD5C8\uC6A9\uB418\uC9C0 \uC54A\uB294 ZIP \uACBD\uB85C: ${path}`);
+    seen.add(path.toLowerCase());
+    if (!dir) wanted.set(name2, path);
+  }
   let totalBytes = 0;
-  let extracted;
+  const extracted = {};
   try {
-    extracted = unzipSync2(bytes2, { filter(entry) {
-      entries++;
-      if (entries > MAX_FILES2) invalid2("\uC2A4\uD0AC \uD30C\uC77C \uC218\uAC00 500\uAC1C\uB97C \uCD08\uACFC\uD588\uC2B5\uB2C8\uB2E4.");
-      const path = entry.name.endsWith("/") ? entry.name.slice(0, -1) : entry.name;
-      if (!skillPathAllowed(path) || seen.has(path.toLowerCase())) invalid2(`\uD5C8\uC6A9\uB418\uC9C0 \uC54A\uB294 ZIP \uACBD\uB85C: ${path}`);
-      seen.add(path.toLowerCase());
-      if (entry.name.endsWith("/")) return false;
+    const content = unzipSync2(bytes2, { filter(entry) {
+      if (!wanted.has(entry.name)) return false;
       totalBytes += entry.originalSize;
       if (totalBytes > MAX_EXPANDED) invalid2("\uC2A4\uD0AC \uC555\uCD95 \uD574\uC81C \uC6A9\uB7C9\uC774 30 MiB\uB97C \uCD08\uACFC\uD588\uC2B5\uB2C8\uB2E4.");
       return true;
     } });
+    for (const [name2, data] of Object.entries(content)) extracted[wanted.get(name2)] = data;
   } catch (error2) {
     if (error2 instanceof CliError) throw error2;
     return invalid2("ZIP \uAD6C\uC870\uB97C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
@@ -5443,11 +5566,12 @@ async function pushSkillVersion(client, prepared, skillId) {
     if (error2 instanceof CliError && error2.code === "SKILL_VERSION_MAJOR_REQUIRED") {
       throw new CliError(`${error2.message} (\uCDE8\uC18C: clack skill cancel ${resolvedSkillId} ${session2.version_id})`, error2.code, error2.status);
     }
-    if (error2 instanceof CliError) throw new CliError(
-      `${error2.message} \uC644\uB8CC \uC7AC\uC2DC\uB3C4: clack skill complete ${resolvedSkillId} ${session2.version_id}`,
-      error2.code,
-      error2.status
-    );
+    if (error2 instanceof CliError) {
+      const judged = error2.status >= 400 && error2.status < 500 && error2.status !== 429;
+      const hint = judged ? "\uD328\uD0A4\uC9C0\uB97C \uACE0\uCE5C \uB4A4 \uAC19\uC740 \uBC84\uC804\uC73C\uB85C \uB2E4\uC2DC clack skill push\uD558\uC138\uC694." : `\uC644\uB8CC \uC7AC\uC2DC\uB3C4: clack skill complete ${resolvedSkillId} ${session2.version_id}`;
+      throw new CliError(`${error2.message}
+${hint}`, error2.code, error2.status, error2.retryAfter);
+    }
     throw error2;
   }
 }
@@ -5773,7 +5897,7 @@ function parsePat(schema, input, label) {
   return parsed.data;
 }
 var toolDefinitions = [
-  { name: "platform_authoring", description: "\uACF5\uAC1C \uC2A4\uD0AC \uC81C\uC791 \uC138\uC158\xB7\uD3FC\xB7\uC790\uC0B0\xB7\uC774\uBBF8\uC9C0 \uC0DD\uC131\xB7\uD328\uD0A4\uC9D5\uC744 \uCC98\uB9AC\uD569\uB2C8\uB2E4. \uC774\uBBF8\uC9C0 \uC0DD\uC131\uC5D0\uB294 \uACAC\uC801 \uC2B9\uC778 \uAC00\uACA9\uACFC \uBA71\uB4F1\uC131 \uD0A4\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. creator-content:write \uAD8C\uD55C\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.", inputSchema: { type: "object", ...z10.toJSONSchema(authoringInput) }, annotations: { readOnlyHint: false, destructiveHint: false } },
+  { name: "platform_authoring", description: "\uACF5\uAC1C \uC2A4\uD0AC \uC81C\uC791 \uC138\uC158\xB7\uD3FC\xB7\uC790\uC0B0\xB7\uC774\uBBF8\uC9C0 \uC0DD\uC131\xB7\uD328\uD0A4\uC9D5\xB7\uC644\uB8CC\xB7\uD3EC\uAE30\uB97C \uCC98\uB9AC\uD569\uB2C8\uB2E4. complete/abandon\uC740 \uD3FC \uC138\uC158 \uC804\uC6A9\uC774\uBA70 complete\uB294 \uD604\uC7AC revision \uD328\uD0A4\uC9D5, abandon\uC740 confirm:true\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. \uC5D0\uB514\uD130\xB7\uC9C0\uCE68\uD615\uC740 \uC13C\uD130\uC5D0\uC11C \uC791\uC5C5\uD569\uB2C8\uB2E4. \uC774\uBBF8\uC9C0 \uC0DD\uC131\uC5D0\uB294 \uACAC\uC801 \uC2B9\uC778 \uAC00\uACA9\uACFC \uBA71\uB4F1\uC131 \uD0A4\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. creator-content:write \uAD8C\uD55C\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.", inputSchema: { type: "object", ...z10.toJSONSchema(authoringInput) }, annotations: { readOnlyHint: false, destructiveHint: true } },
   {
     name: "platform_usage_get",
     description: "\uC11C\uBC84 \uD0A4\uAC00 \uC18D\uD55C \uCF58\uD150\uCE20\uC758 \uD50C\uB7AB\uD3FC \uC0AC\uC6A9\uB7C9\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4.",
@@ -5965,8 +6089,14 @@ var PlatformMcpServer = class {
     if (patDestructiveToolNames.has(name2) && (!isObject3(args) || args.confirm !== true)) {
       return { preview: true, confirmation_required: true, tool: name2, arguments: redact(args) };
     }
+    if (name2 === "platform_authoring") {
+      const input = parsePat(authoringInput, args, "\uC81C\uC791 \uC791\uC5C5 \uC785\uB825");
+      if (input.action === "abandon" && input.confirm !== true) {
+        return { preview: true, confirmation_required: true, tool: name2, arguments: redact(input) };
+      }
+      return authoringRequest(platformPatClient(this.settings, this.env), input, "mcp");
+    }
     const client = platformPatClient(this.settings, this.env);
-    if (name2 === "platform_authoring") return authoringRequest(client, args, "mcp");
     if (name2 === "platform_skill_list") {
       const { q } = parsePat(patSchemas.skillList, args, "\uC2A4\uD0AC \uBAA9\uB85D \uC870\uD68C \uC785\uB825");
       return client.request("GET", "/v4/skills", { query: { q } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clack-platform/cli",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "클랙 계정의 상품·콘텐츠·프로필을 관리하는 CLI",
   "type": "module",
   "bin": {