@open-dy/vibecoding-cli 0.1.6-beta.1 → 0.1.6-beta.2

package/README.md

@@ -16,7 +16,7 @@ vibecoding verify --target taro --auto-start --full
 - `taro`：Taro 主应用、Server，以及项目中存在时的 OpenCard。
 - `opencard`：独立 OpenCard 项目。
 
-主要命令：`dev`、`build`、`lint`、`verify`、`pack`、`docs`、`turbo`、`init-mysql-db`，以及 `validate feed-card|routes|empty|opencard-structure|package-size`。
+主要命令：`dev`、`build`、`lint`、`verify`、`pack`、`docs`、`turbo`、`init-mysql-db`，以及 `validate feed-card|routes|empty|opencard-structure`。
 
 完整 SDK API 文档随 SDK npm 包和 Skill 交付，优先按 `${SKILL_DIR}/sdk-docs/versions.json` 核对版本，再查对应端的 `llms.txt`。`vibecoding docs --target taro`（OpenCard 使用 `--target opencard`，可指定 `--cwd <工程目录>`）只读定位实际安装的 SDK，输出 JSON：依赖键、版本、包位置、包内文档索引及公开类型路径。`ready` 表示包内存在文档索引；`docs-missing` 表示已安装的包没有内置索引，继续查 Skill 文档，版本不一致或信息不足时按 `exports` / `types` 查公开入口。业务导入使用 `imports`，npm 别名以依赖键为前缀，不能换成包的 `name`。包尚不可用时最多等待 `--timeout` 秒（默认 90），超时返回 `SDK_NOT_INSTALLED`，应检查工程安装结果。命令不会安装、重建 SDK 或启动服务。
 
@@ -40,7 +40,7 @@ CLI 内置 Schema 与通用小程序模板支持可选 `BgMusicUrl`；填写时
 
 服务包仅包含 `dist`、生成的 `Dockerfile`、`package.json`、`run.sh` 以及可选的 `sql`、`scripts`。生成 Dockerfile 时按原脚本规则为每条 `COPY package.json` 追加存在的目录，项目源文件不改写。构建/zip 失败保留退出码，临时目录在失败时也会清理。
 
-`verify` 的静态阶段在构建通过后，校验主工程 `server.zip` 的文件数（阈值 `1000`，超限失败），不生成 ZIP 或计算服务端压缩包大小。随后对 tt 产物跑 `tma project-size`：落地页 `dist-tt`，存在 OpenCard 时再查 `opencard/dist`，独立 `--target opencard` 查该工程 `dist`。限额为总包 16MB。`tma` 不在 PATH 时安装 `tt-ide-cli@0.1.34`。单独复检用 `vibecoding validate package-size --target taro`，要求产物已存在；`--json` 输出判定结果，`--tma <path>` 指定二进制。标准 CLI 模板与打包共享黑名单：任意层级过滤依赖、缓存、测试目录、环境文件和私钥，保留其余业务资源。自定义 `scripts/pack.sh` 支持 `REQUIRED_SERVER_PATHS` / `SERVER_PACK_EXCLUDES` / `SERVER_PACK_EXCLUDE_GLOBS`，兼容旧的 `REQUIRED_SERVER_INCLUDES` / `OPTIONAL_SERVER_INCLUDES`；脚本缺失或无法解析、服务目录或必需文件缺失均失败。`pack` 对普通和封闭域服务应用同一规则，并重写各自的 `.dockerignore`，使 ZIP 与镜像包含相同资源。静态检查不等待 dev 的安装成功日志；自动启动预览后仍等待安装与端口就绪。
+`verify` 的静态阶段在构建通过后，校验主工程 `server.zip` 的文件数（阈值 `1000`，超限失败），不生成 ZIP 或计算压缩包大小。标准 CLI 模板与打包共享黑名单：任意层级过滤依赖、缓存、测试目录、环境文件和私钥，保留其余业务资源。自定义 `scripts/pack.sh` 支持 `REQUIRED_SERVER_PATHS` / `SERVER_PACK_EXCLUDES` / `SERVER_PACK_EXCLUDE_GLOBS`，兼容旧的 `REQUIRED_SERVER_INCLUDES` / `OPTIONAL_SERVER_INCLUDES`；脚本缺失或无法解析、服务目录或必需文件缺失均失败。`pack` 对普通和封闭域服务应用同一规则，并重写各自的 `.dockerignore`，使 ZIP 与镜像包含相同资源。静态检查不等待 dev 的安装成功日志；自动启动预览后仍等待安装与端口就绪。
 
 浏览器验收优先使用 `agent-browser-real`，不可用时使用 `agent-browser`。浏览器命令只在验收阶段查找；CDP / 浏览器基础设施失败会报告 `infra_browser` 和 `runtime_status=unverified`，继续以非零退出码结束，页面与业务错误仍按实际错误判定。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-dy/vibecoding-cli",
-  "version": "0.1.6-beta.1",
+  "version": "0.1.6-beta.2",
   "description": "Command orchestration, validation and packaging for Douyin vibecoding Taro and OpenCard projects.",
   "type": "module",
   "bin": {

package/release-provenance.json

@@ -2,14 +2,14 @@
   "schema": 1,
   "producer": "vibecoding-cli",
   "packageName": "@open-dy/vibecoding-cli",
-  "version": "0.1.6-beta.1",
+  "version": "0.1.6-beta.2",
   "source": {
-    "digest": "sha256-ff1ee2d57d7028ec10a7b6e38ff6fa605a076d665d8667ee0c168564b3f7d57e",
-    "files": 88
+    "digest": "sha256-587b165dbeeaa840e46a80b55f9137550dda6aa5d3b61eb3e3873e1706a3bddb",
+    "files": 87
   },
-  "payload": "sha256-fdb8c0900115ffe7138745c6b71545dca209f4a2053a881de779fe2da78f1912",
+  "payload": "sha256-4d87c25460989e6e84c14028f28268c0002b3badb3f71003510c5ba0a15ca1e0",
   "toolchain": {
-    "node": "v22.23.1",
+    "node": "v22.22.3",
     "packageManager": null
   }
 }

package/src/cli.mjs

@@ -20,7 +20,7 @@ Commands:
   build                  Build the selected target
   lint                   Type-check, lint and validate source structure
   verify                 Run static and/or runtime verification
-  validate <name>        Run feed-card, routes, empty, opencard-structure or package-size
+  validate <name>        Run feed-card, routes, empty or opencard-structure
   init-mysql-db          Initialize the Taro server database
   pack                   Build deployment archives
   docs                   Locate the selected project's installed SDK reference
@@ -41,9 +41,7 @@ Options:
   --ports-only           Verify listening ports only
   --auto-start           Start dev once when verify finds missing ports
   --timeout <seconds>    Dev startup / docs dependency wait timeout (default: 90)
-  --frontend-url <url>   Override the primary runtime-check URL
-  --json                 Emit JSON from validate package-size
-  --tma <path>           Use an explicit tma binary for package-size`
+  --frontend-url <url>   Override the primary runtime-check URL`
 
 function assertNoExtra(positionals, count, command) {
   if (positionals.length > count) throw new UsageError(`Unexpected argument for ${command}: ${positionals[count]}`)
@@ -103,10 +101,7 @@ export async function main(argv = process.argv.slice(2)) {
     case 'init-mysql-db': assertNoExtra(positionals, 1, command); return runDatabaseInit(context)
     case 'validate':
       assertNoExtra(positionals, 2, command)
-      return runValidate(context, positionals[1], {
-        json: Boolean(flags.json),
-        tmaBin: flags.tma,
-      })
+      return runValidate(context, positionals[1])
     default: throw new UsageError(`Unknown command: ${command}\n\n${HELP}`)
   }
 }

package/src/commands/validate.mjs

@@ -2,10 +2,9 @@ import { UsageError } from '../core/errors.mjs'
 import { validateFeedCard } from '../validators/feed-card.mjs'
 import { validateNonEmptyTaro } from '../validators/empty-project.mjs'
 import { validateOpenCardStructure } from '../validators/opencard-structure.mjs'
-import { validatePackageSize } from '../validators/package-size.mjs'
 import { validateRoutes } from '../validators/routes.mjs'
 
-export async function runValidate(context, validator, options = {}) {
+export async function runValidate(context, validator) {
   switch (validator) {
     case 'feed-card':
       validateFeedCard(context)
@@ -19,11 +18,9 @@ export async function runValidate(context, validator, options = {}) {
     case 'opencard-structure':
       validateOpenCardStructure(context)
       return
-    case 'package-size':
-      return validatePackageSize(context, options)
     default:
       throw new UsageError(
-        `Unknown validator: ${validator || '<missing>'}\nAvailable validators: feed-card, routes, empty, opencard-structure, package-size`,
+        `Unknown validator: ${validator || '<missing>'}\nAvailable validators: feed-card, routes, empty, opencard-structure`,
       )
   }
 }

package/src/commands/verify.mjs

@@ -13,7 +13,6 @@ import { runBuild } from './build.mjs'
 import { runDatabaseInit } from './db.mjs'
 import { runLint } from './lint.mjs'
 import { validateServerArtifactFileCount } from '../validators/server-artifact.mjs'
-import { validatePackageSize } from '../validators/package-size.mjs'
 
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms))
 const devLauncher = fileURLToPath(new URL('../../bin/vibecoding', import.meta.url))
@@ -49,7 +48,6 @@ async function runStatic(context) {
       packScriptPath: path.join(context.root, 'scripts/pack.sh'),
     })
   }
-  await validatePackageSize(context)
 }
 
 export function startDevDetached(context, spawnProcess = spawn) {
@@ -550,7 +548,7 @@ export function isBrowserInfrastructureError(error) {
 async function browserCheck(root, url, label) {
   if (packageUses(root, '@open-dy/threejs')) {
     console.log(`[vibecoding:verify] ${label}: skipping browser runtime check for @open-dy/threejs`)
-    return
+    return { skipped: true }
   }
   parseHttpUrl(url, label)
   const session = process.env.AGENT_BROWSER_SESSION || `vibecoding-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`
@@ -606,6 +604,7 @@ async function browserCheck(root, url, label) {
       console.log(`[vibecoding:verify] browser cleanup failed: ${error.message}`)
     })
   }
+  return { skipped: false }
 }
 
 export function resolveFrontendUrl(context, options = {}, env = process.env) {
@@ -625,19 +624,43 @@ export async function runVerify(context, options = {}) {
   options = { timeoutSeconds: 90, ...options, full }
   const frontendUrl = resolveFrontendUrl(context, options)
   parseHttpUrl(frontendUrl, 'frontend')
-  if (full || options.staticOnly) await runStatic(context)
-  if (options.staticOnly) return
+  if (full || options.staticOnly) {
+    console.log('[verify] === static ===')
+    await runStatic(context)
+    console.log('[verify] Static phase passed (all parallel tasks OK).')
+  }
+  if (options.staticOnly) {
+    console.log('[verify] --static-only: done.')
+    return
+  }
 
+  console.log('[verify] === dynamic: ports ===')
   await verifyPorts(context, options, frontendUrl)
-  if (options.portsOnly) return
-  if (full && context.target === 'taro') await verifyFeedApi(context)
+  console.log(`[verify] Ports ready: ${targetPorts(context, frontendUrl, full).map(({ label, port }) => `${label}:${port}`).join(', ')}.`)
+  if (options.portsOnly) {
+    console.log('[verify] --ports-only: done.')
+    console.log('[verify] All checks passed.')
+    return
+  }
+  if (full && context.target === 'taro') {
+    console.log('[verify] === dynamic: feed API (/api/dy_card/data) ===')
+    const result = await verifyFeedApi(context)
+    console.log(result.skipped
+      ? '[verify] No feed/feed-card.json; skipping /api/dy_card/data probe.'
+      : '[verify] /api/dy_card/data probe OK (success=true).')
+  }
+  console.log('[verify] === dynamic: browser runtime ===')
   if (context.target === 'taro' &&
       existsSync(path.resolve(context.root, '../sar_game/package.json'))) {
     console.log('[vibecoding:verify] SAR game project detected; skipping browser runtime checks')
+    console.log('[verify] All checks passed.')
     return
   }
-  await browserCheck(context.root, frontendUrl, context.target)
+  const mainRuntime = await browserCheck(context.root, frontendUrl, context.target)
+  if (!mainRuntime.skipped) console.log(`[verify] No runtime issues at ${new URL(frontendUrl).href}.`)
   if (context.target === 'taro' && context.hasOpenCard) {
-    await browserCheck(context.opencardRoot, 'http://localhost:10087/', 'opencard')
+    const cardRuntime = await browserCheck(context.opencardRoot, 'http://localhost:10087/', 'opencard')
+    if (!cardRuntime.skipped) console.log('[verify] No runtime issues at http://localhost:10087/.')
   }
+  console.log('[verify] All checks passed.')
 }

package/src/core/args.mjs

@@ -9,11 +9,10 @@ const BOOLEAN_FLAGS = new Set([
   'skip-install',
   'skip-root-install',
   'incremental',
-  'json',
   'help',
 ])
 
-const VALUE_FLAGS = new Set(['target', 'cwd', 'timeout', 'frontend-url', 'scope', 'tma'])
+const VALUE_FLAGS = new Set(['target', 'cwd', 'timeout', 'frontend-url', 'scope'])
 
 export function parseArgs(argv) {
   const positionals = []

package/src/validators/dependencies.mjs

@@ -22,7 +22,9 @@ export function validateDependencies(context) {
     const manifest = JSON.parse(readFileSync(path.join(root, 'package.json'), 'utf8'))
     for (const field of FIELDS) {
       for (const name of FORBIDDEN) {
-        if (manifest[field]?.[name]) issues.push(`${path.join(root, 'package.json')}: ${field}.${name}`)
+        if (manifest[field] && Object.hasOwn(manifest[field], name)) {
+          issues.push(`${path.join(root, 'package.json')}: ${field}.${name}`)
+        }
       }
     }
   }

package/src/validators/package-size.mjs

@@ -1,248 +0,0 @@
-import { spawnSync } from 'node:child_process'
-import { accessSync, constants, existsSync, mkdirSync, statSync } from 'node:fs'
-import os from 'node:os'
-import path from 'node:path'
-import { CliError } from '../core/errors.mjs'
-import { runCaptured } from '../core/runner.mjs'
-
-const MB = 1024 * 1024
-export const PACKAGE_SIZE_LIMITS = Object.freeze({
-  totalMax: 16 * MB,
-})
-export const TT_IDE_CLI_SPEC = 'tt-ide-cli@0.1.34'
-const INSTALL_TIMEOUT_MS = 180_000
-const TMA_TIMEOUT_MS = 60_000
-
-export function formatPackageBytes(bytes) {
-  const value = Number(bytes) || 0
-  if (value < 1024) return `${value} B`
-  if (value < MB) return `${(value / 1024).toFixed(1)} KB`
-  return `${(value / MB).toFixed(2)} MB`
-}
-
-export function extractJsonObject(text) {
-  const raw = String(text || '')
-  const start = raw.indexOf('{')
-  const end = raw.lastIndexOf('}')
-  if (start < 0 || end <= start) return null
-  return raw.slice(start, end + 1)
-}
-
-export function parseProjectSizeOutput(stdout, stderr = '') {
-  const combined = `${stdout || ''}\n${stderr || ''}`
-  if (/Bad Project Type/i.test(combined)) {
-    throw new CliError(
-      'tma project-size reported Bad Project Type: run it on tt build artifacts (dist-tt or opencard/dist), not source',
-    )
-  }
-  const jsonText = extractJsonObject(stdout) || extractJsonObject(stderr)
-  if (!jsonText) {
-    const preview = combined.replace(/\s+/g, ' ').trim().slice(0, 240)
-    throw new CliError(`Unable to parse tma project-size --json output${preview ? `: ${preview}` : ''}`)
-  }
-  let report
-  try {
-    report = JSON.parse(jsonText)
-  } catch {
-    throw new CliError(`Invalid tma project-size JSON: ${jsonText.slice(0, 240)}`)
-  }
-  if (!report || typeof report !== 'object' || typeof report.total !== 'number') {
-    throw new CliError(`tma project-size JSON is missing total: ${jsonText.slice(0, 240)}`)
-  }
-  return report
-}
-
-export function evaluateSizeReport(report, limits = PACKAGE_SIZE_LIMITS) {
-  const total = Number(report?.total) || 0
-  const failures = []
-  if (total > limits.totalMax) {
-    failures.push(`total package ${formatPackageBytes(total)} exceeds ${formatPackageBytes(limits.totalMax)}`)
-  }
-  return { ok: failures.length === 0, failures, total }
-}
-
-export function collectPackageSizeTargets(context) {
-  if (context.target === 'opencard') {
-    return [{
-      id: 'opencard',
-      label: 'OpenCard',
-      artifactRel: 'dist',
-      artifactDir: path.join(context.root, 'dist'),
-    }]
-  }
-  const targets = [{
-    id: 'landing-page',
-    label: 'landing page',
-    artifactRel: 'dist-tt',
-    artifactDir: path.join(context.root, 'dist-tt'),
-  }]
-  if (context.hasOpenCard && context.opencardRoot) {
-    targets.push({
-      id: 'interest-card',
-      label: 'interest card',
-      artifactRel: 'opencard/dist',
-      artifactDir: path.join(context.opencardRoot, 'dist'),
-    })
-  }
-  return targets
-}
-
-function findOnPath(name, env = process.env) {
-  const executableName = process.platform === 'win32' ? `${name}.cmd` : name
-  for (const directory of (env.PATH || '').split(path.delimiter)) {
-    const executable = path.resolve(directory || '.', executableName)
-    try {
-      accessSync(executable, constants.X_OK)
-      if (statSync(executable).isFile()) return executable
-    } catch {}
-  }
-  return ''
-}
-
-export function resolveCacheRoot(env = process.env) {
-  if (existsSync('/workspace')) {
-    const workspaceTmp = '/workspace/tmp'
-    mkdirSync(workspaceTmp, { recursive: true })
-    return workspaceTmp
-  }
-  return env.TMPDIR || os.tmpdir()
-}
-
-function resolveNpmBin() {
-  const sibling = path.join(path.dirname(process.execPath), process.platform === 'win32' ? 'npm.cmd' : 'npm')
-  if (existsSync(sibling)) return sibling
-  return findOnPath('npm') || 'npm'
-}
-
-export function resolveTmaBin(options = {}) {
-  if (options.tmaBin) {
-    if (!existsSync(options.tmaBin)) {
-      throw new CliError(`--tma path does not exist: ${options.tmaBin}`)
-    }
-    return options.tmaBin
-  }
-  const fromPath = findOnPath('tma', options.env)
-  if (fromPath) return fromPath
-
-  const cacheRoot = options.cacheRoot ?? resolveCacheRoot(options.env)
-  const prefix = path.join(cacheRoot, 'tt-ide-cli')
-  const bin = path.join(prefix, 'node_modules', '.bin', process.platform === 'win32' ? 'tma.cmd' : 'tma')
-  if (existsSync(bin)) return bin
-
-  mkdirSync(prefix, { recursive: true })
-  const npmCache = path.join(cacheRoot, 'npm-cache')
-  mkdirSync(npmCache, { recursive: true })
-  const env = {
-    ...process.env,
-    ...options.env,
-    npm_config_cache: npmCache,
-    npm_config_fund: 'false',
-    npm_config_audit: 'false',
-    npm_config_update_notifier: 'false',
-  }
-  const registries = [
-    env.NPM_CONFIG_REGISTRY,
-    env.npm_config_registry,
-    'https://bnpm.byted.org',
-    'https://registry.npmmirror.com/',
-  ].filter((value, index, list) => value && list.indexOf(value) === index)
-  const npmBin = resolveNpmBin()
-  const errors = []
-  const runCommand = options.runCommand ?? ((command, args, spawnOptions) => spawnSync(command, args, spawnOptions))
-  for (const registry of registries) {
-    const result = runCommand(npmBin, ['install', TT_IDE_CLI_SPEC, '--prefix', prefix, '--registry', registry], {
-      env,
-      encoding: 'utf8',
-      timeout: INSTALL_TIMEOUT_MS,
-    })
-    if ((result.status === 0) && existsSync(bin)) return bin
-    const detail = String(result.stderr || result.stdout || `exit ${result.status}`).trim().slice(0, 400)
-    errors.push(`${registry}: ${detail}`)
-  }
-  throw new CliError(
-    `Unable to install ${TT_IDE_CLI_SPEC} for tma project-size. Confirm npm registry access, or put tma on PATH / pass --tma.\n${errors.join('\n')}`,
-  )
-}
-
-function artifactReady(artifactDir) {
-  return existsSync(path.join(artifactDir, 'app.json')) && (
-    existsSync(path.join(artifactDir, 'app.js')) || existsSync(path.join(artifactDir, 'app.ts'))
-  )
-}
-
-async function defaultRunTma(tmaBin, artifactDir) {
-  return runCaptured(tmaBin, ['project-size', '--json', artifactDir], {
-    allowFailure: true,
-    timeoutMs: TMA_TIMEOUT_MS,
-    label: 'tma project-size',
-  })
-}
-
-/**
- * @desc 校验 tt 构建产物包体积，必须对 dist-tt / opencard/dist 执行，不能对源码目录执行。
- * @params {object} context CLI 工程上下文。
- * @params {object} [options] 可选 tma 路径、JSON 输出和测试注入。
- * @return {Promise<object>} 各产物的体积判定；超限或缺产物时抛出 CliError。
- * @example await validatePackageSize(context)
- */
-export async function validatePackageSize(context, options = {}) {
-  const targets = collectPackageSizeTargets(context)
-  const tmaBin = options.resolveTma
-    ? await options.resolveTma()
-    : resolveTmaBin({ tmaBin: options.tmaBin, env: options.env, runCommand: options.runCommand })
-  const runTma = options.runTma ?? defaultRunTma
-  const results = []
-
-  for (const target of targets) {
-    const entry = { id: target.id, label: target.label, artifact: target.artifactRel, ok: false }
-    try {
-      if (!existsSync(target.artifactDir)) {
-        throw new CliError(
-          `Missing tt artifact directory ${target.artifactRel}. Run pnpm build:tt (or pnpm verify) first.`,
-        )
-      }
-      if (!artifactReady(target.artifactDir)) {
-        throw new CliError(
-          `${target.artifactRel} is not a complete tt artifact (missing app.json / app.js). Do not run tma project-size on source or H5 dist.`,
-        )
-      }
-      const output = await runTma(tmaBin, target.artifactDir)
-      const report = parseProjectSizeOutput(output?.stdout, output?.stderr)
-      const evaluated = evaluateSizeReport(report)
-      entry.total = evaluated.total
-      entry.ok = evaluated.ok
-      if (!evaluated.ok) {
-        entry.failures = evaluated.failures
-        throw new CliError(evaluated.failures.join('; '))
-      }
-      console.log(
-        `[vibecoding:package-size] OK ${target.label}: ${formatPackageBytes(evaluated.total)} / ${formatPackageBytes(PACKAGE_SIZE_LIMITS.totalMax)}`,
-      )
-    } catch (error) {
-      entry.ok = false
-      entry.message = error instanceof Error ? error.message : String(error)
-      console.error(`[vibecoding:package-size] FAIL ${target.label}: ${entry.message}`)
-    }
-    results.push(entry)
-  }
-
-  const ok = results.length > 0 && results.every((item) => item.ok)
-  const payload = { ok, limits: PACKAGE_SIZE_LIMITS, tma: tmaBin, targets: results }
-  if (options.json) {
-    console.log(JSON.stringify({
-      ok: payload.ok,
-      limits: payload.limits,
-      targets: payload.targets,
-    }, null, 2))
-  }
-  if (!ok) {
-    const details = results
-      .filter((item) => !item.ok)
-      .map((item) => `${item.label} (${item.artifact}): ${item.message}`)
-      .join('\n')
-    throw new CliError(
-      `Package size check failed.\n${details}\nMove large images/audio/static assets to CDN, rebuild tt artifacts, then re-run.`,
-    )
-  }
-  return payload
-}