@helix3/helix-cli 0.1.19-helix3.373 → 0.1.20-helix3.378

package/README.md

@@ -49,6 +49,7 @@ The token is stored in `~/.helix/credentials.json` (mode `600`). It's sent as
 | `helix vehicle preview [<dir-or-package.json>] [--glb <model.glb>] [--addon <dir>]… [--item <id>] [--tolerance-cm <cm>] [--out <dir>] [--proxy-item <id>] [--json]` | Render a vehicle that is **not published yet** headless in the real runtime (hosted test grounds, Try Now through a published proxy vehicle whose car is swapped for your package + GLB, served from disk; nothing uploaded or recorded) and measure it: body-origin height against the declared `groundToBodyOrigin` (the number that locks at first mint), wheels on their hubs, arch clearance, rolling radius vs `wheelRadius`, steering, doors, seats. Prints a numeric summary with PASS/FAIL per check and writes frames, a contact sheet, `bundle.json` and `preview.json`. Boards with the candidate's own seat ids. With `--addon <dir>` (repeatable) it previews unpublished vehicle **add-ons** instead: fits each to the candidate car or a published car and measures the drawn geometry in world space against its anchor (wheels within 1 cm of each hub, socket/host-framed parts at their mount, not at the car's origin; tune-only ops read back from the live tuning). Exit `0` pass, `1` fail, `2` could not measure. See [docs/vehicle-preview.md](docs/vehicle-preview.md). |
 | `helix continuum publish-glb <mesh.glb> --title <t> [--package-type asset\|character] [--offer marketplace\|world --price-lix <n> --content-rating <rating>]` | Seal a Package first; optional offer makes it ownable. See [Package-first GLB publication](#package-first-glb-publication). |
 | `helix continuum make-item --package-id <id> --package-version <v> --manifest-cid <cid> --content-rating <rating> [--offer marketplace\|world --price-lix <n>]` | Project one exact sealed Package Version into an Item, with an optional first offer. |
+| `helix continuum publish-owned-item <item-id> --package-id <id> --package-version <v> --manifest-cid <cid> --content-rating <rating> --accept-rating-attestation` | Publish an existing personal Item from its unchanged public sealed Package pin. Offers are separate. |
 | `helix vehicle audio-check <dir\|package.json\|item-id> [--json]` | Proves every sound the runtime will select resolves, is PCM WAV and is audible (pre-publish on local files, or read-back on a published item). |
 | `helix vehicle addon check <dir> [--json]` | Add-on fit gate for local source and host compatibility. |
 | `helix item list-slots [--json]` | Print the Character-Creator vocabulary a wearable declares: the cosmetic slot tags, and the genders. |
@@ -84,7 +85,7 @@ The token is stored in `~/.helix/credentials.json` (mode `600`). It's sent as
 | `helix world performance-report [bundle] [--scene <scene-v2.json>] [--package <package-version.json>] [--snapshot <inspect.json>] [--perf <receipt.json>]` | Analyze exact declared scene resources and existing reference-profile budgets, while keeping authored geometry/material/delivery estimates separate from supplied runtime claims. Prints actionable instancing, Palette, lighting, transfer, and visual-QA guidance; it never predicts FPS from static counts. |
 | `helix world scene-source inventory\|compile <helsinki\|bistro> <archive>` | Verify and safely inventory a known CC BY source archive, then compile deterministic local proxy/detail GLBs and an existing-schema Scene v2 package. |
 | `helix world scene-source publish <world-id> <package-dir> [--publish]` | Validate the Scene v2 package and print its multipart build receipt. Execution remains dry-run-only until backend private-pin entitlement lands; `--publish` currently fails closed, and access control never changes CC BY rights. |
-| `helix continuum publish-source-map\|publish-scratch\|publish-package\|publish-glb\|make-item` | Resume exact-CID object adoption/ingestion, Package lease/seal, optional explicitly authorized Listing, and WorldRelease publication through one creator-owned pipeline. |
+| `helix continuum publish-source-map\|publish-scratch\|publish-package\|publish-glb\|make-item\|publish-owned-item` | Resume exact-CID object adoption/ingestion, Package lease/seal, optional explicitly authorized Listing, and WorldRelease publication through one creator-owned pipeline. |
 | `helix continuum receipt <job-id>` | Read the sanitized durable receipt for a completed Continuum publication. |
 | `helix unreal init\|validate\|doctor\|package [project]` | Create and gate a shared-runtime or native-game publish manifest, check optional editor MCP, and assemble a local upload-shaped package. |
 | `helix unreal publish <candidate> --world <slug>` | Upload a **cooked** Unreal world to HELIX: verify the candidate, presign, upload every artifact, finalize, and promote it as the world's active build. |
@@ -632,6 +633,21 @@ Creating an Item without an active offer grants no creator copy. The same intent
 interrupted call. The backend derives specialized Item metadata from the sealed Package root;
 client supplied host, fit, operation and rider metadata is never trusted.
 
+An Item created with `make-item --personal` keeps its identity when published later. First make
+its Package public and confirm the current sealed pin, then attest its rating and publish that
+existing Item. Publishing opens no acquisition route or creator copy; create a Marketplace or
+World Distribution afterward when it should become available:
+
+```bash
+helix continuum publish-owned-item <item-uuid> --package-id <uuid> \
+  --package-version 1.0.0 --manifest-cid cid:sha256:<64-hex> \
+  --content-rating everyone --accept-rating-attestation --json
+```
+
+Use `--intent-id <uuidv4>` to retry an interrupted promotion safely. The server requires the
+Package to be public, sealed, current, owned by the creator, and pinned to that Item. A private
+Package cannot be promoted through this Item command.
+
 Existing Item reads, distributions, visual QA and Package Version moves remain available. The
 former Item-first authoring commands are retired from CLI discovery.
 Vehicle, add-on, locomotion and interactive definition authors must seal the appropriate Package

package/dist/index.js

@@ -696,6 +696,11 @@ function vehicleContinuumDeps() {
         };
     });
 }
+/** The drive-effect instrument for `vehicle addon check`: the live runtime's physics, loaded lazily on first use. */
+async function vehicleDriveMeasure(apiUrl) {
+    const drive = await Promise.resolve().then(() => __importStar(require('./vehicle/drive')));
+    return async (vehiclePackage, ops, slotType) => drive.judgeDriveEffect(await drive.loadDriveEngine(apiUrl), vehiclePackage, ops, slotType);
+}
 function printVehicleJsonOr(json, value, human) {
     if (json)
         console.log(JSON.stringify(value, (_k, v) => (v === Number.NEGATIVE_INFINITY ? '-Infinity' : v), 2));
@@ -749,10 +754,14 @@ vehicleAddOnCommand
     .command('check')
     .description('Prove an add-on will fit and land where it should BEFORE paying for it: the local fits/ops contract, the model\'s helixMeshFrame anchoring '
     + '(a socket-frame part centred on its mount), per host — a vehicle, wheel origins at the hubs, hide targets present, hide grants on the board — '
-    + 'and the backend\'s own fit dry run (POST /universal-items/validate-fit: how many hosts it actually fits). '
-    + 'Directory: addon.json { title, fits, ops, ... } + model.glb. Exit 0 = fits every named host')
+    + 'tunable paths the part requires exposed on the host surface, the backend\'s own fit dry run (POST /universal-items/validate-fit: how many '
+    + 'hosts it actually fits), and — for tune ops — the DRIVE EFFECT on each host, measured with the live runtime\'s own physics and add-on fold '
+    + '(0-100, top speed, quarter mile, skidpad g and roll, full- and part-pedal stops, handbrake), each op judged on a figure it can move; an op '
+    + 'that changes nothing or cancels another is reported. Directory: addon.json { title, fits, ops, ... } + model.glb (none for a tune-only part: '
+    + 'ECU, gearbox, brakes, sway bars, coilovers, tyre compound — every op a tune). Exit 0 = fits every named host and does something')
     .argument('<dir>', 'the add-on directory')
     .option('--glb <file>', 'the add-on model, when the directory holds more than one .glb')
+    .option('--no-measure', 'skip the drive-effect measurement (it downloads the live runtime and runs its physics, ~1-5 s per host)')
     .option('--json', 'print the machine-readable report')
     .action(async (dir, opts) => {
     try {
@@ -762,6 +771,7 @@ vehicleAddOnCommand
             api: lib_1.HelixApi.forCredentials(creds),
             onProgress: (m) => { if (!opts.json)
                 console.log(`· ${m}`); },
+            measureDrive: opts.measure === false ? undefined : await vehicleDriveMeasure(creds.apiUrl),
         });
         printVehicleJsonOr(opts.json, report, () => console.log(addon.formatAddOnReport(report)));
         if (!report.ok)
@@ -1758,6 +1768,7 @@ item
     .option('--package-version <version>', 'render this version of the item\'s pinned package instead of the pin: a version move judged before the pointer moves (vehicles, avatars, add-ons, wearables)')
     .option('--vehicle-package <file>', 'with --package-version on a vehicle: the version move\'s vehicle package JSON, served by Try Now after server-side preparation')
     .option('--chrome <path>', 'Chromium executable (default: Playwright Chromium / Chrome for Testing, headless; the macOS system Chrome is refused)')
+    .option('--no-world-walk', 'skip the world walk (wearables, character add-ons, avatars: worn and walked in the test grounds, measured for holes and poke-through); also HELIX_VQA_WORLD_WALK=0')
     .option('--api-url <url>', 'platform API base URL')
     .option('--web-url <url>', 'website base URL (default: the site that serves --api-url)')
     .option('--json', 'print the outcome as JSON')
@@ -1881,6 +1892,7 @@ item
             packageVersion: opts.packageVersion?.trim() || null,
             vehiclePackage,
             chrome: opts.chrome,
+            worldWalk: opts.worldWalk,
             submit: opts.submit,
             localCritic: opts.localCritic,
             cliVersion: (0, lib_1.cliVersion)(),
@@ -4648,6 +4660,47 @@ continuum
         fail(error instanceof lib_1.ApiError ? error.render() : `✖ ${error instanceof Error ? error.message : String(error)}`);
     }
 });
+continuum
+    .command('publish-owned-item')
+    .description('Publish an existing personal Item from its exact sealed public Package pin; open offers separately')
+    .argument('<item-id>', 'existing Item UUID; identity is preserved')
+    .requiredOption('--package-id <uuid>', 'owned sealed Package UUID')
+    .requiredOption('--package-version <semver>', 'exact current sealed Package Version')
+    .requiredOption('--manifest-cid <cid>', 'exact immutable manifest CID')
+    .requiredOption('--content-rating <rating>', 'creator-attested rating: everyone, teen, mature or adult')
+    .option('--accept-rating-attestation', 'attest that the stated content rating is accurate')
+    .option('--intent-id <uuidv4>', 'stable UUIDv4 for safe retry after an interrupted request')
+    .option('--json', 'emit the unchanged Item and publication receipt')
+    .action(async (itemId, opts) => {
+    try {
+        if (opts.acceptRatingAttestation !== true)
+            throw new Error('--accept-rating-attestation is required to publish an Item');
+        if (!['everyone', 'teen', 'mature', 'adult'].includes(opts.contentRating))
+            throw new Error('--content-rating must be everyone, teen, mature or adult');
+        const creds = requireAuth();
+        const mismatch = (0, config_1.credsEnvMismatchWarning)(creds.apiUrl);
+        if (mismatch)
+            throw new Error(`Refusing to publish an Item:\n${mismatch}`);
+        const { publishOwnedItemFromPackage } = await Promise.resolve().then(() => __importStar(require('./publications')));
+        const receipt = await publishOwnedItemFromPackage({
+            itemId,
+            intentId: opts.intentId,
+            packagePin: { packageId: opts.packageId, version: opts.packageVersion, manifestCid: opts.manifestCid },
+            contentRating: opts.contentRating,
+            acceptRatingAttestation: true,
+        }, creds);
+        if (opts.json)
+            console.log(JSON.stringify(receipt, null, 2));
+        else {
+            console.log(`✔ Published existing Package-backed Item ${receipt.item.id}`);
+            console.log(`  package: ${receipt.item.packagePin.packageId}@${receipt.item.packagePin.version}`);
+            console.log('  offers: none opened; use helix item distribution create when ready');
+        }
+    }
+    catch (error) {
+        fail(error instanceof lib_1.ApiError ? error.render() : `✖ ${error instanceof Error ? error.message : String(error)}`);
+    }
+});
 continuum
     .command('publish-glb')
     .description('Seal a GLB as a Continuum Prop or Character Package; optionally open a Marketplace or World offer')