@lingjingai/lj-awb-cli-pre 0.4.0 → 0.4.6

package/README.md

@@ -63,6 +63,18 @@ lj-awb auth verify
 
 可用 `LINGJING_AWB_SKILL_INSTALL_DIR` 指定单一安装目录；如果传入的是以 `skills` 结尾的根目录，安装器会自动追加 `lj-awb`。也可用 `LINGJING_AWB_SKIP_SKILL_INSTALL=1` 跳过 skill 安装。
 
+只分发 skill 也可以作为完整入口：`skills/lj-awb/scripts/resolve-lj-awb-cmd.sh` 会在首次使用时检查 `lj-awb`，缺失或版本低于 `skills/lj-awb/compat.json` 的 `minCliVersion` 时自动执行：
+
+```bash
+npm install -g @lingjingai/lj-awb-cli@<minCliVersion>
+```
+
+预发环境可在 bootstrap 前设置：
+
+```bash
+export LINGJING_AWB_CLI_PACKAGE=@lingjingai/lj-awb-cli-pre
+```
+
 源码运行：
 
 ```bash
@@ -75,8 +87,37 @@ packages/awb-cli/bin/lj-awb auth status
 
 macOS 本地 wrapper `packages/awb-cli/bin/lj-awb` 会自动补充 Node 证书链，适合直接调试 HTTPS 平台接口。
 
+自动更新检查默认每天最多访问一次 npm registry，并会在源码 checkout、CI 或设置 `LINGJING_AWB_DISABLE_UPDATE_CHECK=1` / `AWB_DISABLE_UPDATE_CHECK=1` 时跳过。调试时可用 `LINGJING_AWB_UPDATE_CHECK=force` 强制检查。
+
 ## 认证
 
+### 浏览器授权登录（推荐）
+
+不需要手动复制 access key，直接登录：
+
+```bash
+lj-awb auth login
+```
+
+CLI 会创建登录任务、展示授权链接，等你在浏览器登录并确认授权后，自动拿到 access key 并保存到本地。命令默认阻塞轮询，最长约 10 分钟。
+
+AI agent / 无法实时查看命令输出的场景，分两步走（避免阻塞）：
+
+```bash
+lj-awb auth login --no-wait --json     # 返回 flowId / verifyUrl，把链接给用户去授权
+lj-awb auth login --flow-id <flowId>   # 用户授权后续轮询，拿到并保存 access key
+```
+
+> 不要重复执行不带 `--flow-id` 的 login，否则会生成新的 flowId 导致旧授权链接失效。
+
+退出登录（清除本地 access key）：
+
+```bash
+lj-awb auth logout
+```
+
+### 直接使用 access key
+
 保存 access key 到本地认证文件：
 
 ```bash
@@ -110,6 +151,8 @@ lj-awb account info
 ```bash
 lj-awb doctor
 lj-awb doctor --verify
+lj-awb update --check
+lj-awb update
 lj-awb schema --brief -f json
 lj-awb schema -f json
 lj-awb schema --domain create -f json
@@ -159,6 +202,8 @@ lj-awb doctor --verify
 
 `auth status` 只检查本地是否配置 access key；`auth verify` 会联网校验 key 是否远端有效。`doctor` 默认只做本地检查；追加 `--verify` 后会联网校验 access key、当前用户和项目组。精确 `schema` 返回每个命令的 `options[].key`，Agent 应使用这些 key 生成 CLI 参数，而不是解析自然语言 help。
 
+`lj-awb` 在普通命令结束后会做非阻塞更新检查；如果有新版本，JSON 输出会在 `meta._notice.update` 里带上更新提示。Skill / Agent 看到这个提示后，应在完成当前任务后告诉用户当前版本和最新版本，并建议或直接运行 `lj-awb update`。真正安装更新只走显式 `lj-awb update`，`--check` 只检查不安装。
+
 `schema` 还包含面向 Agent 的执行约束：
 
 - `requiredOptions`：必须提供的参数 key。

package/build/_shared.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { spawnSync } from 'node:child_process';
-import { cpSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { cpSync, mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
@@ -19,13 +20,16 @@ export function run(command, args, options = {}) {
   process.stderr.write(`$ ${[command, ...args].join(' ')}\n`);
   const result = spawnSync(command, args, {
     cwd: options.cwd || repoRoot,
+    env: options.env ? { ...process.env, ...options.env } : process.env,
     stdio: 'inherit',
   });
   if (result.error) {
+    options.beforeExit?.();
     process.stderr.write(`${result.error.message}\n`);
     process.exit(1);
   }
   if (result.status !== 0) {
+    options.beforeExit?.();
     process.exit(result.status || 1);
   }
 }
@@ -33,11 +37,53 @@ export function run(command, args, options = {}) {
 export function capture(command, args, options = {}) {
   return spawnSync(command, args, {
     cwd: options.cwd || repoRoot,
+    env: options.env ? { ...process.env, ...options.env } : process.env,
     encoding: 'utf8',
     stdio: ['inherit', 'pipe', 'pipe'],
   });
 }
 
+export function createNpmPublishAuthConfig(registry) {
+  const tokenSource = ['NPM_PUBLISH_TOKEN', 'NPM_TOKEN', 'NODE_AUTH_TOKEN']
+    .find((name) => process.env[name]?.trim());
+  if (!tokenSource) {
+    return {
+      env: {},
+      cleanup() {},
+      tokenSource: null,
+    };
+  }
+
+  const token = process.env[tokenSource].trim();
+  const normalizedRegistry = registry.endsWith('/') ? registry : `${registry}/`;
+  const registryUrl = new URL(normalizedRegistry);
+  const registryPath = registryUrl.pathname.endsWith('/') ? registryUrl.pathname : `${registryUrl.pathname}/`;
+  const npmrcDir = mkdtempSync(path.join(os.tmpdir(), 'lj-awb-npm-'));
+  const npmrcPath = path.join(npmrcDir, '.npmrc');
+  writeFileSync(
+    npmrcPath,
+    [
+      `registry=${normalizedRegistry}`,
+      `//${registryUrl.host}${registryPath}:_authToken=${token}`,
+      'strict-ssl=false',
+      'always-auth=true',
+      '',
+    ].join('\n'),
+    { mode: 0o600 },
+  );
+
+  return {
+    env: {
+      NPM_CONFIG_USERCONFIG: npmrcPath,
+      NPM_CONFIG_REGISTRY: normalizedRegistry,
+    },
+    cleanup() {
+      rmSync(npmrcDir, { recursive: true, force: true });
+    },
+    tokenSource,
+  };
+}
+
 export function packageFilePaths(cwd = repoRoot) {
   const result = capture('npm', ['pack', '--dry-run', '--json'], { cwd });
   if (result.error) {
@@ -101,12 +147,13 @@ export function packTarball(stageDir) {
   return path.join(stageDir, tarball);
 }
 
-export function ensureLoggedIn(registry) {
-  const result = capture('npm', ['whoami', `--registry=${registry}`]);
+export function ensureLoggedIn(registry, options = {}) {
+  const result = capture('npm', ['whoami', `--registry=${registry}`], { env: options.env });
   if (result.status === 0) {
     process.stderr.write(`npm user: ${result.stdout.trim()}\n`);
     return;
   }
+  options.beforeExit?.();
   process.stderr.write([
     `npm is not logged in for ${registry}.`,
     `Run: npm login --registry=${registry}`,
@@ -115,14 +162,16 @@ export function ensureLoggedIn(registry) {
   process.exit(1);
 }
 
-export function ensureVersionNotPublished({ name, version, registry }) {
+export function ensureVersionNotPublished({ name, version, registry }, options = {}) {
   const spec = `${name}@${version}`;
-  const result = capture('npm', ['view', spec, 'version', `--registry=${registry}`]);
+  const result = capture('npm', ['view', spec, 'version', `--registry=${registry}`], { env: options.env });
   if (result.status === 0) {
+    options.beforeExit?.();
     process.stderr.write(`${spec} already exists on npm. Bump the version before publishing.\n`);
     process.exit(1);
   }
   if (!/E404|404 Not Found|Not found/i.test(`${result.stderr}\n${result.stdout}`)) {
+    options.beforeExit?.();
     process.stderr.write(`Could not verify whether ${spec} exists on npm.\n`);
     process.stderr.write(result.stderr || result.stdout || '');
     process.exit(1);

package/build/prod.mjs

@@ -2,6 +2,7 @@
 import { readFileSync } from 'node:fs';
 import path from 'node:path';
 import {
+  createNpmPublishAuthConfig,
   ensureLoggedIn,
   ensureVersionNotPublished,
   findArgValue,
@@ -33,14 +34,21 @@ function ensureProductionDefaultApiOrigin() {
 ensureProductionDefaultApiOrigin();
 
 process.stderr.write(`Preparing ${pkg.name}@${pkg.version} for npm ${dryRun ? 'dry-run' : 'publish'} with default API origin ${PROD_API_ORIGIN}.\n`);
+const publishAuth = createNpmPublishAuthConfig(registry);
+if (!dryRun && publishAuth.tokenSource) {
+  process.stderr.write(`Using npm publish token from ${publishAuth.tokenSource}; NPM_CONFIG_USERCONFIG points to an isolated temporary npmrc.\n`);
+}
 
 if (process.env.SKIP_CHECK !== '1') {
   run('npm', ['run', 'check:local']);
 }
 
-ensureVersionNotPublished({ name: pkg.name, version: pkg.version, registry });
+ensureVersionNotPublished(
+  { name: pkg.name, version: pkg.version, registry },
+  { env: publishAuth.env, beforeExit: publishAuth.cleanup },
+);
 if (!dryRun) {
-  ensureLoggedIn(registry);
+  ensureLoggedIn(registry, { env: publishAuth.env, beforeExit: publishAuth.cleanup });
 }
 
 run('npm', [
@@ -49,4 +57,5 @@ run('npm', [
   'public',
   `--registry=${registry}`,
   ...passthroughArgs,
-]);
+], { env: publishAuth.env, beforeExit: publishAuth.cleanup });
+publishAuth.cleanup();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lingjingai/lj-awb-cli-pre",
-  "version": "0.4.0",
+  "version": "0.4.6",
   "description": "Lingjing AWB CLI monorepo with shared core, standalone CLI, and agent skills (pre-release build pointing to https://animeworkbench-pre.lingjingai.cn)",
   "license": "MIT",
   "type": "module",
@@ -23,7 +23,7 @@
     "build:pre-publish": "node build/pre-publish.mjs",
     "build:prod": "node build/prod.mjs",
     "check": "npm run check:local && npm run check:real",
-    "check:local": "node --check install.mjs && node --check packages/awb-core/src/common.js && node --check packages/awb-core/src/api.js && node --check packages/awb-core/src/artifact.js && node --check packages/awb-core/src/auth.js && node --check packages/awb-core/src/output.js && node --check packages/awb-core/src/services.js && node --check packages/awb-core/src/commands.js && node --check packages/awb-core/src/standalone.js && sh -n packages/awb-cli/bin/lj-awb && node --check packages/awb-cli/bin/lj-awb.js && node --check build/build.mjs && node --check build/_shared.mjs && node --check build/pre.mjs && node --check build/pre-publish.mjs && node --check build/prod.mjs && node --check scripts/run-openapi-cli-examples-real.mjs && node --check scripts/validate-cli-schema.mjs && node --check scripts/validate-cli-output-contract.mjs && node --check scripts/validate-cli-command-coverage.mjs && node scripts/validate-skill-meta.mjs && node scripts/validate-cli-schema.mjs && node scripts/validate-cli-command-coverage.mjs",
+    "check:local": "node --check install.mjs && node --check packages/awb-core/src/common.js && node --check packages/awb-core/src/api.js && node --check packages/awb-core/src/artifact.js && node --check packages/awb-core/src/auth.js && node --check packages/awb-core/src/output.js && node --check packages/awb-core/src/update.js && node --check packages/awb-core/src/services.js && node --check packages/awb-core/src/commands.js && node --check packages/awb-core/src/standalone.js && sh -n packages/awb-cli/bin/lj-awb && bash -n skills/lj-awb/scripts/resolve-lj-awb-cmd.sh && node --check packages/awb-cli/bin/lj-awb.js && node --check build/build.mjs && node --check build/_shared.mjs && node --check build/pre.mjs && node --check build/pre-publish.mjs && node --check build/prod.mjs && node --check scripts/run-openapi-cli-examples-real.mjs && node --check scripts/validate-cli-schema.mjs && node --check scripts/validate-cli-output-contract.mjs && node --check scripts/validate-cli-command-coverage.mjs && node scripts/validate-skill-meta.mjs && node scripts/validate-cli-schema.mjs && node scripts/validate-cli-command-coverage.mjs",
     "check:real": "node scripts/validate-cli-output-contract.mjs && node scripts/validate-openapi-cli-examples.mjs",
     "test:openapi-real": "node scripts/run-openapi-cli-examples-real.mjs",
     "smoke": "packages/awb-cli/bin/lj-awb --help && packages/awb-cli/bin/lj-awb auth status -f json && packages/awb-cli/bin/lj-awb system && packages/awb-cli/bin/lj-awb auth && packages/awb-cli/bin/lj-awb account && packages/awb-cli/bin/lj-awb project && packages/awb-cli/bin/lj-awb credits && packages/awb-cli/bin/lj-awb upload && packages/awb-cli/bin/lj-awb model && packages/awb-cli/bin/lj-awb create && packages/awb-cli/bin/lj-awb task && packages/awb-cli/bin/lj-awb artifact && packages/awb-cli/bin/lj-awb schema -f json >/dev/null",

package/packages/awb-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lingjingai/awb-cli-bin",
-  "version": "0.4.0",
+  "version": "0.4.6",
   "description": "Standalone CLI for Lingjing AWB",
   "private": true,
   "license": "MIT",
@@ -13,6 +13,6 @@
     "README.md"
   ],
   "dependencies": {
-    "@lingjingai/awb-core": "0.4.0"
+    "@lingjingai/awb-core": "0.4.6"
   }
 }

package/packages/awb-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lingjingai/awb-core",
-  "version": "0.4.0",
+  "version": "0.4.6",
   "description": "Shared core runtime for Lingjing AWB CLI",
   "license": "MIT",
   "type": "module",

package/packages/awb-core/src/api.js

@@ -109,6 +109,14 @@ export async function fetchUserInfo() {
   return await apiFetch('/api/anime/user/account/userInfo', { body: {} });
 }
 
+export async function createLoginFlow() {
+  return await apiFetch('/api/anime/user/cli/createLoginFlow', { body: {}, auth: false });
+}
+
+export async function queryLoginFlowStatus(flowId) {
+  return await apiFetch('/api/anime/user/cli/queryFlowStatus', { body: { flowId }, auth: false });
+}
+
 export async function fetchTeams() {
   return await apiFetch('/api/anime/user/group/getOwnGroupList', { body: {} });
 }
@@ -125,6 +133,15 @@ export async function fetchPoints() {
   return await apiFetch('/api/anime/member/benefits/queryGroupPoint', { body: {} });
 }
 
+export async function redeemCode(code) {
+  // 后端 redeemCode 的 code 是无注解 Spring 参数（按 query / form 绑定，不读 JSON body），
+  // 且必须带 userId / groupId 请求头（由 buildHeaders 从环境变量注入）。
+  return await apiFetch('/api/anime/member/redemption/redeemCode', {
+    method: 'POST',
+    query: { code },
+  });
+}
+
 export async function selectProjectGroup(projectGroupNo) {
   return await apiFetch('/api/anime/workbench/projectGroup/setLastProjectGroup', {
     body: { projectGroupNo },
@@ -230,6 +247,20 @@ export async function createVideoSubtitleRemovalTask(payload = {}) {
   return await apiFetch('/api/material/creation/videoSubtitleRemoval', { body: payload });
 }
 
+export async function fetchVideoSuperResolutionFee(payload = {}) {
+  return await apiFetch('/api/material/creation/videoUpResolutionCal', {
+    method: 'GET',
+    query: payload,
+  });
+}
+
+export async function createVideoSuperResolutionTask(payload = {}) {
+  return await apiFetch('/api/material/creation/videoUpResolution', {
+    method: 'POST',
+    query: payload,
+  });
+}
+
 export async function fetchTaskFeed(payload = {}) {
   return await apiFetch('/api/material/creation/task/feedPull', {
     query: payload,