@helix3/helix-cli 0.1.21-helix3.404 → 0.1.21-helix3.405

package/README.md

@@ -54,7 +54,8 @@ The token is stored in `~/.helix/credentials.json` (mode `600`). It's sent as
 | `helix continuum make-item --package-id <id> --package-version <v> --manifest-cid <cid> --content-rating <rating> [--offer marketplace\|world --price-lix <n>]` | Project one exact sealed Package Version into an Item, with an optional first offer. |
 | `helix continuum publish-owned-item <item-id> --package-id <id> --package-version <v> --manifest-cid <cid> --content-rating <rating> --accept-rating-attestation` | Publish an existing personal Item from its unchanged public sealed Package pin. Offers are separate. |
 | `helix vehicle audio-check <dir\|package.json\|item-id> [--json]` | Proves every sound the runtime will select resolves, is PCM WAV and is audible (pre-publish on local files, or read-back on a published item). |
-| `helix vehicle addon check <dir> [--json]` | Add-on fit gate for local source and host compatibility. |
+| `helix vehicle addon check <dir> [--json]` | Add-on fit gate for local source and host compatibility, including the web customizer's meshless guard (`ADDON_CUSTOMIZER_REFUSES`: a part with no `model.glb` must be a verified tune-only/sound-only definition). |
+| `helix vehicle addon check --item <addOnId>... / --host <vehicleId>... [--json]` | Published mode (public reads, no sign-in): reads each add-on Item's exact Package pin and runs exactly what the web customizer runs; `--host` checks every add-on on the car's rail. Exit `1` = the customizer would refuse a part, with its message. |
 | `helix item list-slots [--json]` | Print the Character-Creator vocabulary a wearable declares: the cosmetic slot tags, and the genders. |
 
 | `helix item distribution create\|list\|update\|disable …` | Manage Marketplace/World Claim or Buy routes without republishing the item or paying another publish fee. |

package/dist/index.js

@@ -839,16 +839,46 @@ vehicleAddOnCommand
     .description('Prove an add-on will fit and land where it should BEFORE paying for it: the local fits/ops contract, the model\'s helixMeshFrame anchoring '
     + '(a socket-frame part centred on its mount), per host — a vehicle, wheel origins at the hubs, hide targets present, hide grants on the board — '
     + 'tunable paths the part requires exposed on the host surface, the backend\'s own fit dry run (POST /universal-items/validate-fit: how many '
-    + 'hosts it actually fits), and — for tune ops — the DRIVE EFFECT on each host, measured with the live runtime\'s own physics and add-on fold '
+    + 'hosts it actually fits), the web customizer\'s meshless guard on the exact definition publish would seal (a part with no model.glb must be a verified '
+    + 'tune-only/sound-only definition, or the customizer refuses to equip it: ADDON_CUSTOMIZER_REFUSES), and — for tune ops — the DRIVE EFFECT on each host, measured with the live runtime\'s own physics and add-on fold '
     + '(0-100, top speed, quarter mile, skidpad g and roll, full- and part-pedal stops, handbrake), each op judged on a figure it can move; an op '
     + 'that changes nothing or cancels another is reported. Directory: addon.json { title, fits, ops, ... } + model.glb (none for a tune-only part: '
-    + 'ECU, gearbox, brakes, sway bars, coilovers, tyre compound — every op a tune). Exit 0 = fits every named host and does something')
-    .argument('<dir>', 'the add-on directory')
+    + 'ECU, gearbox, brakes, sway bars, coilovers, tyre compound — every op a tune). Exit 0 = fits every named host and does something. '
+    + 'PUBLISHED mode (no directory, public reads, no sign-in): --item <addOnItemId> (repeatable) reads the Item\'s exact Package pin, the public manifest and, for a meshless part, '
+    + 'its root, and runs exactly what the web customizer runs; --host <vehicleItemId> does that for every add-on on the car\'s rail. Exit 1 = the customizer would refuse a part, with its message')
+    .argument('[dir]', 'the add-on directory (omit with --item / --host)')
     .option('--glb <file>', 'the add-on model, when the directory holds more than one .glb')
     .option('--no-measure', 'skip the drive-effect measurement (it downloads the live runtime and runs its physics, ~1-5 s per host)')
+    .option('--item <id>', 'PUBLISHED mode: an add-on Item id to check the way the web customizer reads it (repeatable)', (value, previous) => [...previous, value], [])
+    .option('--host <id>', 'PUBLISHED mode: a vehicle Item id; checks every add-on on its rail (repeatable)', (value, previous) => [...previous, value], [])
+    .option('--api-url <url>', 'platform API base URL for --item / --host', config_1.DEFAULT_API_URL)
     .option('--json', 'print the machine-readable report')
     .action(async (dir, opts) => {
     try {
+        if (opts.item.length || opts.host.length) {
+            if (dir)
+                throw new Error('pass either an add-on directory or --item/--host, not both');
+            const published = await Promise.resolve().then(() => __importStar(require('./vehicle/addonPublished')));
+            const deps = { api: published.publicRequester(opts.apiUrl), apiUrl: opts.apiUrl.replace(/\/$/, '') };
+            const verdicts = [];
+            for (const id of opts.item)
+                verdicts.push(await published.checkPublishedAddOn(id, deps));
+            const hosts = [];
+            for (const id of opts.host)
+                hosts.push(await published.checkHostAddOns(id, deps));
+            const ok = verdicts.every((v) => v.ok) && hosts.every((h) => h.ok && !h.truncated);
+            printVehicleJsonOr(opts.json, { ok, items: verdicts, hosts }, () => {
+                for (const v of verdicts)
+                    console.log(published.formatPublishedVerdict(v));
+                for (const h of hosts)
+                    console.log(published.formatHostAddOns(h));
+            });
+            if (!ok)
+                process.exitCode = 1;
+            return;
+        }
+        if (!dir)
+            throw new Error('name an add-on directory, or --item <addOnItemId> / --host <vehicleItemId> to check published add-ons');
         const addon = await Promise.resolve().then(() => __importStar(require('./vehicle/addon')));
         const creds = requireAuth();
         const report = await addon.checkAddOn(addon.readAddOnDir(dir, { glb: opts.glb }), creds, {