@open-dy/vibecoding-cli 0.1.5 → 0.1.6-beta.1

package/README.md

@@ -16,7 +16,7 @@ vibecoding verify --target taro --auto-start --full
 - `taro`：Taro 主应用、Server，以及项目中存在时的 OpenCard。
 - `opencard`：独立 OpenCard 项目。
 
-主要命令：`dev`、`build`、`lint`、`verify`、`pack`、`docs`、`turbo`、`init-mysql-db`，以及 `validate feed-card|routes|empty|opencard-structure`。
+主要命令：`dev`、`build`、`lint`、`verify`、`pack`、`docs`、`turbo`、`init-mysql-db`，以及 `validate feed-card|routes|empty|opencard-structure|package-size`。
 
 完整 SDK API 文档随 SDK npm 包和 Skill 交付，优先按 `${SKILL_DIR}/sdk-docs/versions.json` 核对版本，再查对应端的 `llms.txt`。`vibecoding docs --target taro`（OpenCard 使用 `--target opencard`，可指定 `--cwd <工程目录>`）只读定位实际安装的 SDK，输出 JSON：依赖键、版本、包位置、包内文档索引及公开类型路径。`ready` 表示包内存在文档索引；`docs-missing` 表示已安装的包没有内置索引，继续查 Skill 文档，版本不一致或信息不足时按 `exports` / `types` 查公开入口。业务导入使用 `imports`，npm 别名以依赖键为前缀，不能换成包的 `name`。包尚不可用时最多等待 `--timeout` 秒（默认 90），超时返回 `SDK_NOT_INSTALLED`，应检查工程安装结果。命令不会安装、重建 SDK 或启动服务。
 
@@ -40,7 +40,7 @@ CLI 内置 Schema 与通用小程序模板支持可选 `BgMusicUrl`；填写时
 
 服务包仅包含 `dist`、生成的 `Dockerfile`、`package.json`、`run.sh` 以及可选的 `sql`、`scripts`。生成 Dockerfile 时按原脚本规则为每条 `COPY package.json` 追加存在的目录，项目源文件不改写。构建/zip 失败保留退出码，临时目录在失败时也会清理。
 
-`verify` 的静态阶段在构建通过后，校验主工程 `server.zip` 的文件数（阈值 `1000`，超限失败），不生成 ZIP 或计算压缩包大小。标准 CLI 模板与打包共享黑名单：任意层级过滤依赖、缓存、测试目录、环境文件和私钥，保留其余业务资源。自定义 `scripts/pack.sh` 支持 `REQUIRED_SERVER_PATHS` / `SERVER_PACK_EXCLUDES` / `SERVER_PACK_EXCLUDE_GLOBS`，兼容旧的 `REQUIRED_SERVER_INCLUDES` / `OPTIONAL_SERVER_INCLUDES`；脚本缺失或无法解析、服务目录或必需文件缺失均失败。`pack` 对普通和封闭域服务应用同一规则，并重写各自的 `.dockerignore`，使 ZIP 与镜像包含相同资源。静态检查不等待 dev 的安装成功日志；自动启动预览后仍等待安装与端口就绪。
+`verify` 的静态阶段在构建通过后，校验主工程 `server.zip` 的文件数（阈值 `1000`，超限失败），不生成 ZIP 或计算服务端压缩包大小。随后对 tt 产物跑 `tma project-size`：落地页 `dist-tt`，存在 OpenCard 时再查 `opencard/dist`，独立 `--target opencard` 查该工程 `dist`。限额为总包 16MB。`tma` 不在 PATH 时安装 `tt-ide-cli@0.1.34`。单独复检用 `vibecoding validate package-size --target taro`，要求产物已存在；`--json` 输出判定结果，`--tma <path>` 指定二进制。标准 CLI 模板与打包共享黑名单：任意层级过滤依赖、缓存、测试目录、环境文件和私钥，保留其余业务资源。自定义 `scripts/pack.sh` 支持 `REQUIRED_SERVER_PATHS` / `SERVER_PACK_EXCLUDES` / `SERVER_PACK_EXCLUDE_GLOBS`，兼容旧的 `REQUIRED_SERVER_INCLUDES` / `OPTIONAL_SERVER_INCLUDES`；脚本缺失或无法解析、服务目录或必需文件缺失均失败。`pack` 对普通和封闭域服务应用同一规则，并重写各自的 `.dockerignore`，使 ZIP 与镜像包含相同资源。静态检查不等待 dev 的安装成功日志；自动启动预览后仍等待安装与端口就绪。
 
 浏览器验收优先使用 `agent-browser-real`，不可用时使用 `agent-browser`。浏览器命令只在验收阶段查找；CDP / 浏览器基础设施失败会报告 `infra_browser` 和 `runtime_status=unverified`，继续以非零退出码结束，页面与业务错误仍按实际错误判定。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-dy/vibecoding-cli",
-  "version": "0.1.5",
+  "version": "0.1.6-beta.1",
   "description": "Command orchestration, validation and packaging for Douyin vibecoding Taro and OpenCard projects.",
   "type": "module",
   "bin": {
@@ -24,7 +24,8 @@
     "bin",
     "src",
     "assets",
-    "README.md"
+    "README.md",
+    "release-provenance.json"
   ],
   "scripts": {
     "ci:check": "pnpm run build && pnpm run test",
@@ -42,8 +43,8 @@
     "ajv": "^8.18.0"
   },
   "peerDependencies": {
-    "@open-dy/vibecoding-sdk-taro": "^0.1.0",
-    "@open-dy/vibecoding-sdk-opencard": "0.1.4"
+    "@open-dy/vibecoding-sdk-taro": "0.1.0-beta.0",
+    "@open-dy/vibecoding-sdk-opencard": "0.1.3-beta.0"
   },
   "peerDependenciesMeta": {
     "@open-dy/vibecoding-sdk-taro": {
@@ -59,7 +60,7 @@
   "license": "UNLICENSED",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
-    "tag": "latest",
+    "tag": "beta",
     "access": "public"
   }
 }

package/release-provenance.json

@@ -0,0 +1,15 @@
+{
+  "schema": 1,
+  "producer": "vibecoding-cli",
+  "packageName": "@open-dy/vibecoding-cli",
+  "version": "0.1.6-beta.1",
+  "source": {
+    "digest": "sha256-ff1ee2d57d7028ec10a7b6e38ff6fa605a076d665d8667ee0c168564b3f7d57e",
+    "files": 88
+  },
+  "payload": "sha256-fdb8c0900115ffe7138745c6b71545dca209f4a2053a881de779fe2da78f1912",
+  "toolchain": {
+    "node": "v22.23.1",
+    "packageManager": null
+  }
+}

package/src/cli.mjs

@@ -20,7 +20,7 @@ Commands:
   build                  Build the selected target
   lint                   Type-check, lint and validate source structure
   verify                 Run static and/or runtime verification
-  validate <name>        Run feed-card, routes, empty or opencard-structure
+  validate <name>        Run feed-card, routes, empty, opencard-structure or package-size
   init-mysql-db          Initialize the Taro server database
   pack                   Build deployment archives
   docs                   Locate the selected project's installed SDK reference
@@ -41,7 +41,9 @@ Options:
   --ports-only           Verify listening ports only
   --auto-start           Start dev once when verify finds missing ports
   --timeout <seconds>    Dev startup / docs dependency wait timeout (default: 90)
-  --frontend-url <url>   Override the primary runtime-check URL`
+  --frontend-url <url>   Override the primary runtime-check URL
+  --json                 Emit JSON from validate package-size
+  --tma <path>           Use an explicit tma binary for package-size`
 
 function assertNoExtra(positionals, count, command) {
   if (positionals.length > count) throw new UsageError(`Unexpected argument for ${command}: ${positionals[count]}`)
@@ -101,7 +103,10 @@ export async function main(argv = process.argv.slice(2)) {
     case 'init-mysql-db': assertNoExtra(positionals, 1, command); return runDatabaseInit(context)
     case 'validate':
       assertNoExtra(positionals, 2, command)
-      return runValidate(context, positionals[1])
+      return runValidate(context, positionals[1], {
+        json: Boolean(flags.json),
+        tmaBin: flags.tma,
+      })
     default: throw new UsageError(`Unknown command: ${command}\n\n${HELP}`)
   }
 }

package/src/commands/validate.mjs

@@ -2,9 +2,10 @@ import { UsageError } from '../core/errors.mjs'
 import { validateFeedCard } from '../validators/feed-card.mjs'
 import { validateNonEmptyTaro } from '../validators/empty-project.mjs'
 import { validateOpenCardStructure } from '../validators/opencard-structure.mjs'
+import { validatePackageSize } from '../validators/package-size.mjs'
 import { validateRoutes } from '../validators/routes.mjs'
 
-export async function runValidate(context, validator) {
+export async function runValidate(context, validator, options = {}) {
   switch (validator) {
     case 'feed-card':
       validateFeedCard(context)
@@ -18,9 +19,11 @@ export async function runValidate(context, validator) {
     case 'opencard-structure':
       validateOpenCardStructure(context)
       return
+    case 'package-size':
+      return validatePackageSize(context, options)
     default:
       throw new UsageError(
-        `Unknown validator: ${validator || '<missing>'}\nAvailable validators: feed-card, routes, empty, opencard-structure`,
+        `Unknown validator: ${validator || '<missing>'}\nAvailable validators: feed-card, routes, empty, opencard-structure, package-size`,
       )
   }
 }

package/src/commands/verify.mjs

@@ -13,6 +13,7 @@ import { runBuild } from './build.mjs'
 import { runDatabaseInit } from './db.mjs'
 import { runLint } from './lint.mjs'
 import { validateServerArtifactFileCount } from '../validators/server-artifact.mjs'
+import { validatePackageSize } from '../validators/package-size.mjs'
 
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms))
 const devLauncher = fileURLToPath(new URL('../../bin/vibecoding', import.meta.url))
@@ -48,6 +49,7 @@ async function runStatic(context) {
       packScriptPath: path.join(context.root, 'scripts/pack.sh'),
     })
   }
+  await validatePackageSize(context)
 }
 
 export function startDevDetached(context, spawnProcess = spawn) {

package/src/core/args.mjs

@@ -9,10 +9,11 @@ const BOOLEAN_FLAGS = new Set([
   'skip-install',
   'skip-root-install',
   'incremental',
+  'json',
   'help',
 ])
 
-const VALUE_FLAGS = new Set(['target', 'cwd', 'timeout', 'frontend-url', 'scope'])
+const VALUE_FLAGS = new Set(['target', 'cwd', 'timeout', 'frontend-url', 'scope', 'tma'])
 
 export function parseArgs(argv) {
   const positionals = []

package/src/validators/package-size.mjs

@@ -0,0 +1,248 @@
+import { spawnSync } from 'node:child_process'
+import { accessSync, constants, existsSync, mkdirSync, statSync } from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { CliError } from '../core/errors.mjs'
+import { runCaptured } from '../core/runner.mjs'
+
+const MB = 1024 * 1024
+export const PACKAGE_SIZE_LIMITS = Object.freeze({
+  totalMax: 16 * MB,
+})
+export const TT_IDE_CLI_SPEC = 'tt-ide-cli@0.1.34'
+const INSTALL_TIMEOUT_MS = 180_000
+const TMA_TIMEOUT_MS = 60_000
+
+export function formatPackageBytes(bytes) {
+  const value = Number(bytes) || 0
+  if (value < 1024) return `${value} B`
+  if (value < MB) return `${(value / 1024).toFixed(1)} KB`
+  return `${(value / MB).toFixed(2)} MB`
+}
+
+export function extractJsonObject(text) {
+  const raw = String(text || '')
+  const start = raw.indexOf('{')
+  const end = raw.lastIndexOf('}')
+  if (start < 0 || end <= start) return null
+  return raw.slice(start, end + 1)
+}
+
+export function parseProjectSizeOutput(stdout, stderr = '') {
+  const combined = `${stdout || ''}\n${stderr || ''}`
+  if (/Bad Project Type/i.test(combined)) {
+    throw new CliError(
+      'tma project-size reported Bad Project Type: run it on tt build artifacts (dist-tt or opencard/dist), not source',
+    )
+  }
+  const jsonText = extractJsonObject(stdout) || extractJsonObject(stderr)
+  if (!jsonText) {
+    const preview = combined.replace(/\s+/g, ' ').trim().slice(0, 240)
+    throw new CliError(`Unable to parse tma project-size --json output${preview ? `: ${preview}` : ''}`)
+  }
+  let report
+  try {
+    report = JSON.parse(jsonText)
+  } catch {
+    throw new CliError(`Invalid tma project-size JSON: ${jsonText.slice(0, 240)}`)
+  }
+  if (!report || typeof report !== 'object' || typeof report.total !== 'number') {
+    throw new CliError(`tma project-size JSON is missing total: ${jsonText.slice(0, 240)}`)
+  }
+  return report
+}
+
+export function evaluateSizeReport(report, limits = PACKAGE_SIZE_LIMITS) {
+  const total = Number(report?.total) || 0
+  const failures = []
+  if (total > limits.totalMax) {
+    failures.push(`total package ${formatPackageBytes(total)} exceeds ${formatPackageBytes(limits.totalMax)}`)
+  }
+  return { ok: failures.length === 0, failures, total }
+}
+
+export function collectPackageSizeTargets(context) {
+  if (context.target === 'opencard') {
+    return [{
+      id: 'opencard',
+      label: 'OpenCard',
+      artifactRel: 'dist',
+      artifactDir: path.join(context.root, 'dist'),
+    }]
+  }
+  const targets = [{
+    id: 'landing-page',
+    label: 'landing page',
+    artifactRel: 'dist-tt',
+    artifactDir: path.join(context.root, 'dist-tt'),
+  }]
+  if (context.hasOpenCard && context.opencardRoot) {
+    targets.push({
+      id: 'interest-card',
+      label: 'interest card',
+      artifactRel: 'opencard/dist',
+      artifactDir: path.join(context.opencardRoot, 'dist'),
+    })
+  }
+  return targets
+}
+
+function findOnPath(name, env = process.env) {
+  const executableName = process.platform === 'win32' ? `${name}.cmd` : name
+  for (const directory of (env.PATH || '').split(path.delimiter)) {
+    const executable = path.resolve(directory || '.', executableName)
+    try {
+      accessSync(executable, constants.X_OK)
+      if (statSync(executable).isFile()) return executable
+    } catch {}
+  }
+  return ''
+}
+
+export function resolveCacheRoot(env = process.env) {
+  if (existsSync('/workspace')) {
+    const workspaceTmp = '/workspace/tmp'
+    mkdirSync(workspaceTmp, { recursive: true })
+    return workspaceTmp
+  }
+  return env.TMPDIR || os.tmpdir()
+}
+
+function resolveNpmBin() {
+  const sibling = path.join(path.dirname(process.execPath), process.platform === 'win32' ? 'npm.cmd' : 'npm')
+  if (existsSync(sibling)) return sibling
+  return findOnPath('npm') || 'npm'
+}
+
+export function resolveTmaBin(options = {}) {
+  if (options.tmaBin) {
+    if (!existsSync(options.tmaBin)) {
+      throw new CliError(`--tma path does not exist: ${options.tmaBin}`)
+    }
+    return options.tmaBin
+  }
+  const fromPath = findOnPath('tma', options.env)
+  if (fromPath) return fromPath
+
+  const cacheRoot = options.cacheRoot ?? resolveCacheRoot(options.env)
+  const prefix = path.join(cacheRoot, 'tt-ide-cli')
+  const bin = path.join(prefix, 'node_modules', '.bin', process.platform === 'win32' ? 'tma.cmd' : 'tma')
+  if (existsSync(bin)) return bin
+
+  mkdirSync(prefix, { recursive: true })
+  const npmCache = path.join(cacheRoot, 'npm-cache')
+  mkdirSync(npmCache, { recursive: true })
+  const env = {
+    ...process.env,
+    ...options.env,
+    npm_config_cache: npmCache,
+    npm_config_fund: 'false',
+    npm_config_audit: 'false',
+    npm_config_update_notifier: 'false',
+  }
+  const registries = [
+    env.NPM_CONFIG_REGISTRY,
+    env.npm_config_registry,
+    'https://bnpm.byted.org',
+    'https://registry.npmmirror.com/',
+  ].filter((value, index, list) => value && list.indexOf(value) === index)
+  const npmBin = resolveNpmBin()
+  const errors = []
+  const runCommand = options.runCommand ?? ((command, args, spawnOptions) => spawnSync(command, args, spawnOptions))
+  for (const registry of registries) {
+    const result = runCommand(npmBin, ['install', TT_IDE_CLI_SPEC, '--prefix', prefix, '--registry', registry], {
+      env,
+      encoding: 'utf8',
+      timeout: INSTALL_TIMEOUT_MS,
+    })
+    if ((result.status === 0) && existsSync(bin)) return bin
+    const detail = String(result.stderr || result.stdout || `exit ${result.status}`).trim().slice(0, 400)
+    errors.push(`${registry}: ${detail}`)
+  }
+  throw new CliError(
+    `Unable to install ${TT_IDE_CLI_SPEC} for tma project-size. Confirm npm registry access, or put tma on PATH / pass --tma.\n${errors.join('\n')}`,
+  )
+}
+
+function artifactReady(artifactDir) {
+  return existsSync(path.join(artifactDir, 'app.json')) && (
+    existsSync(path.join(artifactDir, 'app.js')) || existsSync(path.join(artifactDir, 'app.ts'))
+  )
+}
+
+async function defaultRunTma(tmaBin, artifactDir) {
+  return runCaptured(tmaBin, ['project-size', '--json', artifactDir], {
+    allowFailure: true,
+    timeoutMs: TMA_TIMEOUT_MS,
+    label: 'tma project-size',
+  })
+}
+
+/**
+ * @desc 校验 tt 构建产物包体积，必须对 dist-tt / opencard/dist 执行，不能对源码目录执行。
+ * @params {object} context CLI 工程上下文。
+ * @params {object} [options] 可选 tma 路径、JSON 输出和测试注入。
+ * @return {Promise<object>} 各产物的体积判定；超限或缺产物时抛出 CliError。
+ * @example await validatePackageSize(context)
+ */
+export async function validatePackageSize(context, options = {}) {
+  const targets = collectPackageSizeTargets(context)
+  const tmaBin = options.resolveTma
+    ? await options.resolveTma()
+    : resolveTmaBin({ tmaBin: options.tmaBin, env: options.env, runCommand: options.runCommand })
+  const runTma = options.runTma ?? defaultRunTma
+  const results = []
+
+  for (const target of targets) {
+    const entry = { id: target.id, label: target.label, artifact: target.artifactRel, ok: false }
+    try {
+      if (!existsSync(target.artifactDir)) {
+        throw new CliError(
+          `Missing tt artifact directory ${target.artifactRel}. Run pnpm build:tt (or pnpm verify) first.`,
+        )
+      }
+      if (!artifactReady(target.artifactDir)) {
+        throw new CliError(
+          `${target.artifactRel} is not a complete tt artifact (missing app.json / app.js). Do not run tma project-size on source or H5 dist.`,
+        )
+      }
+      const output = await runTma(tmaBin, target.artifactDir)
+      const report = parseProjectSizeOutput(output?.stdout, output?.stderr)
+      const evaluated = evaluateSizeReport(report)
+      entry.total = evaluated.total
+      entry.ok = evaluated.ok
+      if (!evaluated.ok) {
+        entry.failures = evaluated.failures
+        throw new CliError(evaluated.failures.join('; '))
+      }
+      console.log(
+        `[vibecoding:package-size] OK ${target.label}: ${formatPackageBytes(evaluated.total)} / ${formatPackageBytes(PACKAGE_SIZE_LIMITS.totalMax)}`,
+      )
+    } catch (error) {
+      entry.ok = false
+      entry.message = error instanceof Error ? error.message : String(error)
+      console.error(`[vibecoding:package-size] FAIL ${target.label}: ${entry.message}`)
+    }
+    results.push(entry)
+  }
+
+  const ok = results.length > 0 && results.every((item) => item.ok)
+  const payload = { ok, limits: PACKAGE_SIZE_LIMITS, tma: tmaBin, targets: results }
+  if (options.json) {
+    console.log(JSON.stringify({
+      ok: payload.ok,
+      limits: payload.limits,
+      targets: payload.targets,
+    }, null, 2))
+  }
+  if (!ok) {
+    const details = results
+      .filter((item) => !item.ok)
+      .map((item) => `${item.label} (${item.artifact}): ${item.message}`)
+      .join('\n')
+    throw new CliError(
+      `Package size check failed.\n${details}\nMove large images/audio/static assets to CDN, rebuild tt artifacts, then re-run.`,
+    )
+  }
+  return payload
+}