@oiioii/cli 0.1.5 → 0.1.7

package/README.md

@@ -13,8 +13,11 @@ human-readable output and a stable JSON envelope for AI agents and automation.
 | Command | Capability | Status |
 |---|---|---|
 | `auth login` | Browser authorization for terminal/Codex/WorkBuddy/Kimi/Claude Code/DeepSeek, or explicit API Key persistence | Implemented |
+| `auth status` | Check configured authentication without exposing the API Key | Implemented |
+| `auth logout` | Remove locally persisted authentication without exposing the API Key | Implemented |
 | `workspace create/set/current/rename` | Create, configure, inspect, and rename workspaces | Implemented |
 | `workspace assets list/download` | List workspace assets and download ready resources | Implemented |
+| `library list/search` | Query and search reusable role, scene, and item assets | Implemented |
 | `image text` | Text-to-image generation | Implemented |
 | `image edit` | Image-to-image editing | Implemented |
 | `video text` | Text-to-video generation | Implemented |
@@ -32,14 +35,14 @@ human-readable output and a stable JSON envelope for AI agents and automation.
 Important current limitations:
 
 - API keys are stored in `~/.oiioii/config.json` after `oiioii auth login`; the file is owner-readable only (`0600`).
-- Generation submits `submit_async_media_generation` and returns immediately with the authoritative backend `task_id` plus a `local_task_id`.
+- Generation submits `POST /v1/media/generations` by default and returns immediately with the authoritative backend `task_id` plus a `local_task_id`.
 - The backend task ID, workspace, media type, asset ID, progress, and terminal outputs are cached in the owner-only local task store.
-- `task status/wait` query `query_async_media_generation` for non-terminal cached tasks and accept either the backend or local task ID.
+- `task status/wait` query the stored task transport for non-terminal cached tasks and accept either the backend or local task ID.
 - If submission times out or disconnects before the backend task ID is received, the task remains `submitting`; `task retry <local_task_id>` resends the saved request with the original idempotency key.
 - REST metadata requests time out after 30 seconds; raw resource uploads/downloads use a 5-minute transfer timeout, and VOD transcode polling has a 10-minute overall deadline.
 - Image, video, and audio generation create local preview bundles after a queried task reaches a terminal state.
 - `inspect capabilities` is local metadata; `inspect models` requires authentication and queries the active backend.
-- Asset search/update/delete and style-library commands are not available. Workspace-scoped asset listing and download are available.
+- Asset-library update/delete and style-library commands are not available. Reusable asset query/search and workspace-scoped asset listing/download are available.
 
 ## Requirements
 
@@ -208,6 +211,23 @@ The CLI writes the API Key to `~/.oiioii/config.json` with file permissions
 `OIIOII_API_KEY` remains available as a temporary process override. A legacy
 `~/.oiioii/credentials.json` file, if present, is ignored.
 
+Check whether the current process is authenticated, or remove the locally
+persisted API Key:
+
+```bash
+oiioii auth status
+oiioii auth logout
+```
+
+Neither command prints the API Key. `auth status` exits with status `0` when an
+API Key is configured for the current process and `1` when unauthenticated. It identifies only whether
+the credential comes from local configuration or `OIIOII_API_KEY`. `auth logout`
+is idempotent and preserves unrelated settings such as the Base URL and active
+workspace. It cannot unset an inherited `OIIOII_API_KEY`; when that override is
+present, the command reports that effective authentication remains active. If
+the local config is unreadable, logout removes that unusable file so credential
+fragments cannot remain on disk.
+
 Remove an existing backend override and return to the default embedded in the
 current CLI build:
 
@@ -256,6 +276,18 @@ oiioii workspace assets download <asset_id> --output ./downloads --json
 identity to the asset's downloadable `uri`; loading, uploading, empty, failed,
 or URI-less assets fail before the download request.
 
+Query or search reusable library assets before generation:
+
+```bash
+oiioii library list role --limit 20 --json
+oiioii library search role "球球" --limit 20 --json
+oiioii library search scene "森林" --cursor '<next_cursor>' --json
+```
+
+Use the returned `asset_uri` with `--asset`, or bind a prompt mention explicitly
+with `--bind <name=asset-uri>`. Explicit bindings avoid silently selecting the
+wrong asset when the library contains duplicate display names.
+
 Workspace resolution order is:
 
 1. Root `--workspace <id>` option.
@@ -272,6 +304,11 @@ oiioii image text \
   --model seedream45 \
   --resolution 2K \
   --json
+
+oiioii image text \
+  --prompt "让@球球坐在窗边" \
+  --bind 球球=hogi://role_asset/<role_id> \
+  --json
 ```
 
 Image editing:
@@ -289,11 +326,11 @@ Current behavior:
 
 - Accepts `--model-id <id>` from `inspect models` for exact backend model
   selection, or `--model <key> --variant <variant>` as an alternative.
-- Calls `POST /mcp/genai/sse` with JSON-RPC `tools/call` and `submit_async_media_generation`.
+- Calls `POST /v1/media/generations` with Bearer authentication and an idempotency header.
 - Authenticates with `x-hogi-api-key`.
 - Requires an active workspace.
 - Returns after submission; use `task status` or `task wait` to query progress and terminal `hogi://image/...` output.
-- Image editing adapts the source URI to the async service's `referenceImages` contract.
+- Image editing sends the source URI through the structured `references` contract.
 - When image shape options are omitted, the CLI uses the exact selected model
   catalog row's first aspect ratio and resolution (falling back only when the
   catalog leaves those fields empty).
@@ -340,6 +377,13 @@ oiioii video generate \
   --duration 8 \
   --resolution 720p \
   --json
+
+oiioii video generate \
+  --prompt "小猫跳舞@球球" \
+  --bind 球球=hogi://role_asset/<role_id> \
+  --asset hogi://scene_asset/<scene_id> \
+  --model seedance25 \
+  --json
 ```
 
 When video duration, aspect ratio, or resolution is omitted, the CLI resolves
@@ -351,15 +395,20 @@ Current behavior:
 
 - Accepts `--model-id <id>` from `inspect models` for exact backend model
   selection, or `--model <key> --variant <variant>` as an alternative.
-- Calls `submit_async_media_generation` through `/mcp/genai/sse` with `x-hogi-api-key` authentication.
+- Calls `POST /v1/media/generations` with Bearer authentication.
 - Returns after submission; terminal video URI validation happens during `task status/wait`.
 - Text-to-video sends `prompt`, `duration`, `aspectRatio`, `resolution`, and
   `workspace_id`.
-- Model-specific `imageUrl`/`images` fields are validated locally, then adapted
-  to the async service's `referenceImages` field with `generateMode` preserved.
+- Model-specific reference fields are validated locally, then sent through the
+  structured OpenAPI `references` list with `generateMode` preserved.
 - `video generate` accepts zero or more `--image`, `--video`, and `--audio`
   references in the same request. `--mode auto` derives `text2Video` or
   `omni2Video`; frame semantics can be selected explicitly with `--mode`.
+- Seedance 2.5 omni requests accept `--task-type reference|edit|extend`.
+- `--asset` adds role/scene/item assets as visual references. `--bind` also
+  rewrites an exact `@name` occurrence to `[Role:<id>]`, `[Scene:<id>]`, or
+  `[Item:<id>]`. Workspace-asset references use OpenAPI so the backend can apply
+  visibility checks, main-image resolution, and Seedance role head-combo selection.
 - Reference fields, combinations, and limits are validated against an exact
   backend-tool contract before MCP submission. The current mixed-input matrix is:
   Seedance 2.0/2.5 (image + video + audio), MiniMax H3
@@ -414,17 +463,16 @@ unbounded automated loops, and do not retry failures blindly.
 
 ## Async Generation and Workspace Assets
 
-Image, video, and audio commands submit through:
+Image, video, and audio commands submit through OpenAPI by default:
 
 ```text
-POST /mcp/genai/sse
-method: tools/call
-name: submit_async_media_generation
+POST /v1/media/generations
+GET /v1/media/generations/:task_id
 ```
 
 The backend creates the loading workspace asset and returns its `assetId` and
-authoritative `taskId`. The CLI caches both IDs. `task status/wait` calls
-`query_async_media_generation`, reconciles progress/error/output into the local
+authoritative `taskId`. The CLI caches both IDs and the selected transport.
+`task status/wait` queries the same transport, reconciles progress/error/output into the local
 record, and creates the terminal preview bundle. The CLI does not issue a second
 `create_asset` call, which avoids duplicate workspace assets.
 
@@ -897,6 +945,10 @@ Environment variables:
 |---|---|
 | `OIIOII_CONFIG_DIR` | Override the local configuration directory |
 | `OIIOII_BASE_URL` | Override the backend URL at runtime |
+| `OIIOII_GENERATION_TRANSPORT` | Select `openapi` (default) or the `mcp` rollback transport |
+
+The MCP rollback transport preserves the legacy media-reference payload. Prompt
+references to role, scene, or item workspace assets require the default OpenAPI transport.
 | `OIIOII_WORKSPACE_ID` | Override the active workspace |
 | `OIIOII_BUILD_ENV` | Select `production`, `test`, or `local` while building |
 | `OIIOII_PRODUCTION_BASE_URL` | Optional override for the production build's canonical backend URL |