@easysociable/cli 0.1.10 → 0.1.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easysociable/cli",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "Agent-first CLI for EasySociable: Content Engine, Template, Slideshow, and MCP",
   "type": "module",
   "license": "MIT",

package/skills/easysociable-content/SKILL.md

@@ -11,7 +11,7 @@ description: >
   Triggers: 推荐产品, 评测工具, compare tools, review an AI product
   — edit `recommendations/`; do not treat third-party subjects as owned Products.
   Triggers: 做成选题, 开一单, 出图
-  — follow engine CLAUDE.md (§ Topics / § Open a run / § PagePack).
+  — follow engine CLAUDE.md (§ Topics / § Open a run / § PagePack: Page Contracts → Media → Template Selection before templates).
   If no engine exists, copy/clone the Content Engine core (see Create below;
   `easysociable engine init` is optional offline scaffold). Then follow
   Content Engine/CLAUDE.md. Render handoff: easysociable-template (1 page) or
@@ -131,9 +131,9 @@ CLI republishes.
 | 扫需求选题 | **NEEDS.md** then Topics from `needs/` `status=captured` — **ask `generation_mode` first** |
 | 做成选题 / 生成 topic | engine **§ Topics** — explicit input; **ask `generation_mode` before write** |
 | 开一单 / 用 T-… 开一单 | engine **§ Open a run** (ask platform; multi → N runs) |
-| 1 page image | **easysociable-template** (after hard gate) |
-| 2+ pages on tiktok / instagram / linkedin / threads | **easysociable-slideshow** (after hard gate) |
-| x / xiaohongshu images | **easysociable-template** only (after hard gate) |
+| 1 page / `media_mode=single_visual` | **easysociable-template** (after hard gate) |
+| 2+ pages / `media_mode=multi_page_pack` (any platform, incl. X + `pack_hook`) | **easysociable-slideshow** (after hard gate + **ADR-0036 identity chain**: Studio login → API key → `easysociable auth login` → create) |
+| X / xiaohongshu text-only | No render skill — ship copy from the Run |
 
 ## Render hard gate
 
@@ -145,7 +145,7 @@ On fail: **stay in this skill**. List missing files. Do not call template or sli
 easysociable engine validate --run <run-dir> --require-pack --require-knowledge
 ```
 
-Slideshow packs need an **Arc** line first. Do not default Cover → Point → Steps → Recap → CTA. Page 1 is not automatically `cover`. Handoff: **easysociable-slideshow** (`references/ARC.md`).
+Slideshow packs need an **Arc** line, then **Page Contracts** (no `templateId`), then Media, then Template Selection. Do not default Cover → Point → Steps → Recap → CTA. Page 1 is cover/hook class; later pages are not. Handoff: **easysociable-slideshow** (`references/ARC.md`). Validate with `python3 scripts/validate-pack.py`.
 
 ## Research (Needs)
 

package/skills/easysociable-slideshow/SKILL.md

@@ -25,8 +25,10 @@ Page order is the argument of **this pack**, not a catalog recipe.
    calls go through Gateway; never call Directus, R2, Stripe or private services.
 3. Choose a Brand (or Profile/Theme) and an explicit Page Template for every
    page. The server never silently chooses or replaces a Page Template.
-   Select by **platform + canvas + slotSummary + density**. `role` is a weak
-   retrieval tag, not sequence position.
+   Prefer templates already chosen on the Content Engine pack (**Template
+   Selection** after **Page Contracts**). Otherwise select by **platform +
+   canvas + slotSummary + density + layoutFamily**. `role` / `supportedRoles`
+   are weak retrieval tags, not sequence position.
 4. **Cover / hook placement (hard):** a template is cover/hook class when
    `supportedRoles` includes `cover` or `hook`. `pages[0]` must use one.
    Cover/hook class templates must not appear on any later page. Later pages
@@ -55,6 +57,15 @@ Page order is the argument of **this pack**, not a catalog recipe.
     **easysociable-content** / refuse create; list missing files. Do not add
     Gateway or MCP params. User must say **强制继续** / **force continue**
     to call Gateway.
+8c. **Identity chain (ADR-0036, hard):** before create, the CLI must be
+    logged in with the **user's Dashboard Workspace API key** (same account
+    that will open Studio). Refuse fixture `workspace_local` / local
+    `test-key` unless the user explicitly asked for a local fixture
+    (`--allow-local-fixture`). Order: Studio login → create API key →
+    `easysociable auth login --api-key <key>` → create Run → open
+    `studioUrl` while logged in as that user. If Studio shows “belongs to
+    another account”, recreate with the current key — do not invent
+    cross-workspace access.
 9. Preview is free. Free Download is 3 successful ZIPs per month and one
    platform. Paid Download is unmetered.
 10. **Forbidden default:** do not assemble Cover → Point → Steps → Recap → CTA
@@ -66,12 +77,14 @@ Page order is the argument of **this pack**, not a catalog recipe.
 ## Workflow
 
 1. Write one arc line (`references/ARC.md`). Do not skip this for a five-family fill-in.
-2. Validate the Pack and platform/page count.
+2. Validate Page Contracts / pack when present:
+   `python3 scripts/validate-pack.py runs/<slug>/pack.md` (in the Content Engine).
+   Refuse create if contracts are empty or contain `templateId`.
 3. Resolve or create the user's Brand through the unified CLI/MCP.
-4. List the published catalog. `pages[0]` must be cover/hook class
-   (`supportedRoles` includes `cover` or `hook`). Remaining pages: platform +
-   canvas + slot counts + density — not `beat name == family name`. Never
-   place a cover/hook class template after page 1.
+4. Prefer pack **Template Selection** ids. If re-listing the catalog, verify
+   hard filters and cover/hook placement; never place a cover/hook class
+   template after page 1. Record Layout Family evidence as `hypothesis` unless
+   comparable history supports `tested` / `supported`.
 5. List existing Runs when the Pack has a stable content slug:
 
    ```bash

package/skills/easysociable-slideshow/references/GATEWAY.md

@@ -14,3 +14,12 @@ GET  /v1/render-jobs/{jobId}/manifest
 
 There are no V1 publish, unpublish, public-piece or Slideshow-template routes.
 All requests use the account's unified credential and owner isolation.
+
+## Identity (ADR-0036)
+
+- Create and GET are **owner-scoped**. Same Workspace API key / Studio session
+  workspace that created the Run must open Studio.
+- Authenticated GET of another workspace's Run → `403 RUN_WRONG_WORKSPACE`
+  (not a silent 404).
+- Fixture `workspace_local` create is blocked under Directus persistence unless
+  `SLIDESHOW_ALLOW_FIXTURE_STUDIO=1`. See `docs/operations/studio-identity-chain.md`.

package/skills/easysociable-slideshow/workflows/CREATE_RUN.md

@@ -2,16 +2,24 @@
 
 1. Write one arc line (`references/ARC.md`). Forbidden default:
    Cover → Point → Steps → Recap → CTA.
-2. Build `content-pack.v1` from that argument. Page count follows the beats
-   (TikTok often 4–8), not the number of P0 families.
-3. Check platform hardMin/hardMax.
-4. List published Page Templates. `pages[0]` must be cover/hook class
-   (`supportedRoles` includes `cover` or `hook`). Do not use that class on
-   later pages. Remaining pages: platform + canvas + `slotSummary` + density.
-   `role` is a weak tag.
-5. If `contentSlug` already has a Run: update only when topology matches
+2. Prefer a Content Engine `pack.md` that already has **Page Contracts**,
+   **Media**, and **Template Selection** filled. If contracts are missing,
+   stop and hand back to **easysociable-content** — do not invent page
+   purposes from catalog family names.
+3. Build `content-pack.v1` from that argument. Page count follows the beats
+   (TikTok often 4–8), not the number of P0 families. Carry the chosen
+   `pageTemplateId`s from Template Selection (explicit — server must not
+   silent-replace).
+4. Check platform hardMin/hardMax.
+5. List published Page Templates only to **verify** hard filters still hold:
+   platform → canvas → slotSummary → density → page-position cover/hook.
+   Prefer ranking by Layout Family (`layoutFamily`) + history; `supportedRoles`
+   is a weak tag. `pages[0]` must be cover/hook class. Do not use that class on
+   later pages. Prefer families already recorded on linked W- judgments
+   (`fits` / `avoid` / `trial`) when comparable evidence exists.
+6. If `contentSlug` already has a Run: update only when topology matches
    (same page count and `pageTemplateId`s). Otherwise create a new Run.
-6. **Before** `create_run` / `slideshows create` (every create, not only the
+7. **Before** `create_run` / `slideshows create` (every create, not only the
    first Run): check the knowledge hard gate — Identity Role / What I build /
    Point of view have no `(fill)` and are non-empty; `boundaries.md` exists
    with Not covering and Never claim non-empty; if `needs/` exists, ≥3 `N-`
@@ -20,7 +28,14 @@
    Fail → hand back to **easysociable-content** / refuse create; list missing
    files. User must say **强制继续** / **force continue** to call Gateway.
    No new Gateway or MCP params.
-7. Call `create_run` / `slideshows create` through Gateway.
-8. Save `runId`, `studioUrl`, and `status=draft`.
-9. Do not call a Deck API, create a carousel template, or send a product
-   `pageSequence` / `arc` field.
+7b. **Identity chain (ADR-0036):** confirm CLI auth is the user's Dashboard
+    Workspace API key (not `workspace_local` / `test-key`). If needed:
+    Studio login → Dashboard create key →
+    `easysociable auth login --api-key <key>`. Refuse create on fixture
+    identity unless the user asked for `--allow-local-fixture`.
+8. Call `create_run` / `slideshows create` through Gateway with the explicit
+   template ids from the pack.
+9. Save `runId`, `studioUrl`, and `status=draft`. Tell the user to open
+   `studioUrl` **while logged into the same Studio account**.
+10. Do not call a Deck API, create a carousel template, or send a product
+    `pageSequence` / `arc` field.