@pippit-dev/cli 1.0.43 → 1.0.45

package/checksums.txt

@@ -1,6 +1,6 @@
-e7ee32acef1c0a16912c46500ae7f15c46d920953792d1012886fac7e6424b2e  pippit-tool-cli-1.0.43-darwin-amd64.tar.gz
-57e4df86eaa244cd9845eb966299c8c2e1186f74495da0c16f0b378fb4bc5125  pippit-tool-cli-1.0.43-darwin-arm64.tar.gz
-21823c7a675ebcaadebe2ddbfa0324b9e939220d4dd74d5d5d4546f5e6938060  pippit-tool-cli-1.0.43-linux-amd64.tar.gz
-e387bc8eaeafa430a9a594ed1cc381964953b598875b520a6d009a12aec9d619  pippit-tool-cli-1.0.43-linux-arm64.tar.gz
-4569d389a20c75f0485ecc24ad5034308a818f294886dabdf07b2804e915f3a2  pippit-tool-cli-1.0.43-windows-amd64.zip
-078fb4fb09353a58095e1370668884664aad1760ae065983bb23abfdcd9939d1  pippit-tool-cli-1.0.43-windows-arm64.zip
+3802437e93dcd395df47e4e735a8a4b958528f76ea64d672cd3fa3cb719fd163  pippit-tool-cli-1.0.45-darwin-amd64.tar.gz
+b80b030e77b0fbdffb0b05c8a38fdc5c939d01ca69cb1ab6d2c0bd0c1e236892  pippit-tool-cli-1.0.45-darwin-arm64.tar.gz
+33095e1ceec2220ea1b79abfa56948dd5d237c1831ab2437c8af064d00db7c99  pippit-tool-cli-1.0.45-linux-amd64.tar.gz
+85a91aeae7b9ea1324a8aee1be576fad12297cecdfe2828851147d50f4dbc177  pippit-tool-cli-1.0.45-linux-arm64.tar.gz
+e93240dbc814104ea278197aff983c2491089be1b9fe55f216007b1a612c7f93  pippit-tool-cli-1.0.45-windows-amd64.zip
+d5f196ea5b5f466911573a1177702ad00f27da153d2f29b5b1e65cd60f7f5100  pippit-tool-cli-1.0.45-windows-arm64.zip

package/cmd/auth/auth_test.go

@@ -75,7 +75,7 @@ func (manager *fakeAuthManager) CredentialScope(context.Context) (string, error)
 
 func TestLoginCommandPrintsMetadataWithoutAccessKey(t *testing.T) {
 	const accessKey = "must-never-be-printed"
-	const loginURL = "https://xyq.jianying.com/cli/pippit-tool-login?callback=http%3A%2F%2F127.0.0.1%3A1234&random_secret_key=one-time-secret"
+	const loginURL = "https://www.xiaoyunque.com/cli/pippit-tool-login?callback=http%3A%2F%2F127.0.0.1%3A1234&random_secret_key=one-time-secret"
 	expiresAt := time.Now().Add(time.Hour).Unix()
 	manager := &fakeAuthManager{credential: &internal_auth.Credential{
 		AccessKey: accessKey, UID: "123", CredentialScope: "device-scope", ExpiredAt: expiresAt,

package/dist/checksums.txt

@@ -1,6 +1,6 @@
-e7ee32acef1c0a16912c46500ae7f15c46d920953792d1012886fac7e6424b2e  pippit-tool-cli-1.0.43-darwin-amd64.tar.gz
-57e4df86eaa244cd9845eb966299c8c2e1186f74495da0c16f0b378fb4bc5125  pippit-tool-cli-1.0.43-darwin-arm64.tar.gz
-21823c7a675ebcaadebe2ddbfa0324b9e939220d4dd74d5d5d4546f5e6938060  pippit-tool-cli-1.0.43-linux-amd64.tar.gz
-e387bc8eaeafa430a9a594ed1cc381964953b598875b520a6d009a12aec9d619  pippit-tool-cli-1.0.43-linux-arm64.tar.gz
-4569d389a20c75f0485ecc24ad5034308a818f294886dabdf07b2804e915f3a2  pippit-tool-cli-1.0.43-windows-amd64.zip
-078fb4fb09353a58095e1370668884664aad1760ae065983bb23abfdcd9939d1  pippit-tool-cli-1.0.43-windows-arm64.zip
+3802437e93dcd395df47e4e735a8a4b958528f76ea64d672cd3fa3cb719fd163  pippit-tool-cli-1.0.45-darwin-amd64.tar.gz
+b80b030e77b0fbdffb0b05c8a38fdc5c939d01ca69cb1ab6d2c0bd0c1e236892  pippit-tool-cli-1.0.45-darwin-arm64.tar.gz
+33095e1ceec2220ea1b79abfa56948dd5d237c1831ab2437c8af064d00db7c99  pippit-tool-cli-1.0.45-linux-amd64.tar.gz
+85a91aeae7b9ea1324a8aee1be576fad12297cecdfe2828851147d50f4dbc177  pippit-tool-cli-1.0.45-linux-arm64.tar.gz
+e93240dbc814104ea278197aff983c2491089be1b9fe55f216007b1a612c7f93  pippit-tool-cli-1.0.45-windows-amd64.zip
+d5f196ea5b5f466911573a1177702ad00f27da153d2f29b5b1e65cd60f7f5100  pippit-tool-cli-1.0.45-windows-arm64.zip

package/internal/auth/auth_test.go

@@ -96,7 +96,7 @@ func (s *memoryCredentialStore) Delete(ctx context.Context) error {
 }
 
 func TestBrowserFlowUsesDedicatedPageAndStrictBoundCallback(t *testing.T) {
-	authURL, _ := url.Parse(config.DefaultBaseURL)
+	authURL, _ := url.Parse(config.DefaultAuthBaseURL)
 	deviceID, _ := randomEncoded(bytes.NewReader(bytes.Repeat([]byte{0x21}, deviceIDBytes)), deviceIDBytes)
 	flow, err := startBrowserFlow(
 		authURL, bytes.NewReader(bytes.Repeat([]byte{0x42}, 2*randomBindingBytes)),
@@ -111,7 +111,7 @@ func TestBrowserFlowUsesDedicatedPageAndStrictBoundCallback(t *testing.T) {
 	if err != nil {
 		t.Fatal(err)
 	}
-	if loginURL.Scheme+"://"+loginURL.Host != config.DefaultBaseURL || loginURL.Path != loginPagePath {
+	if loginURL.Scheme+"://"+loginURL.Host != config.DefaultAuthBaseURL || loginURL.Path != loginPagePath {
 		t.Fatalf("login URL target = %s://%s%s", loginURL.Scheme, loginURL.Host, loginURL.Path)
 	}
 	query := loginURL.Query()
@@ -152,30 +152,30 @@ func TestBrowserFlowUsesDedicatedPageAndStrictBoundCallback(t *testing.T) {
 	}
 	wrongSecret := payload
 	wrongSecret.RandomSecretKey = "wrong-secret"
-	if status := sendCallback(t, callbackURL, config.DefaultBaseURL, wrongSecret); status != http.StatusBadRequest {
+	if status := sendCallback(t, callbackURL, config.DefaultAuthBaseURL, wrongSecret); status != http.StatusBadRequest {
 		t.Fatalf("wrong secret status = %d", status)
 	}
-	if status := postRawCallback(t, callbackURL, config.DefaultBaseURL, `{"type":"access_key","unknown":true}`); status != http.StatusBadRequest {
+	if status := postRawCallback(t, callbackURL, config.DefaultAuthBaseURL, `{"type":"access_key","unknown":true}`); status != http.StatusBadRequest {
 		t.Fatalf("unknown field status = %d", status)
 	}
-	if status := sendCallback(t, callbackURL+"&state=duplicate", config.DefaultBaseURL, payload); status != http.StatusBadRequest {
+	if status := sendCallback(t, callbackURL+"&state=duplicate", config.DefaultAuthBaseURL, payload); status != http.StatusBadRequest {
 		t.Fatalf("duplicate state status = %d", status)
 	}
-	if status := sendCallback(t, callbackURL+"&unexpected=value", config.DefaultBaseURL, payload); status != http.StatusBadRequest {
+	if status := sendCallback(t, callbackURL+"&unexpected=value", config.DefaultAuthBaseURL, payload); status != http.StatusBadRequest {
 		t.Fatalf("unexpected transport query status = %d", status)
 	}
-	if status := sendPreflight(t, callbackURL, config.DefaultBaseURL); status != http.StatusNoContent {
+	if status := sendPreflight(t, callbackURL, config.DefaultAuthBaseURL); status != http.StatusNoContent {
 		t.Fatalf("preflight status = %d", status)
 	}
 	securityRuntimeCallback := callbackURL + "&a_bogus=signed-request&msToken=transport-token"
-	if status := sendCallback(t, securityRuntimeCallback, config.DefaultBaseURL, payload); status != http.StatusOK {
+	if status := sendCallback(t, securityRuntimeCallback, config.DefaultAuthBaseURL, payload); status != http.StatusOK {
 		t.Fatalf("security-runtime callback status = %d", status)
 	}
 	got, err := flow.wait(context.Background())
 	if err != nil || got.AccessKey != payload.AccessKey || got.UID != payload.UID || got.TokenID != payload.TokenID {
 		t.Fatalf("callback payload = %#v, %v", credentialPayloadWithoutSecret(got), err)
 	}
-	if status := sendCallback(t, callbackURL, config.DefaultBaseURL, payload); status != http.StatusConflict {
+	if status := sendCallback(t, callbackURL, config.DefaultAuthBaseURL, payload); status != http.StatusConflict {
 		t.Fatalf("replayed callback status = %d", status)
 	}
 }
@@ -185,6 +185,7 @@ func TestManagerLoginStoresPageIssuedCredentialWithoutServerExchange(t *testing.
 	store := &memoryCredentialStore{}
 	cfg := config.Load()
 	cfg.AccessKey = ""
+	cfg.BaseURL = "https://untrusted.invalid"
 	manager := NewManager(
 		cfg,
 		WithCredentialStore(store),
@@ -204,6 +205,9 @@ func TestManagerLoginStoresPageIssuedCredentialWithoutServerExchange(t *testing.
 			if parseErr != nil {
 				return parseErr
 			}
+			if loginURL.Scheme != "https" || loginURL.Host != "www.xiaoyunque.com" {
+				t.Errorf("login origin = %s://%s, want https://www.xiaoyunque.com", loginURL.Scheme, loginURL.Host)
+			}
 			if loginURL.Path != loginPagePath || loginURL.Query().Get("force") != "" {
 				return fmt.Errorf("unexpected login URL")
 			}
@@ -218,7 +222,7 @@ func TestManagerLoginStoresPageIssuedCredentialWithoutServerExchange(t *testing.
 				Source:          loginSource,
 				CallbackURL:     loginURL.Query().Get("callback"),
 			}
-			if status := sendCallback(t, payload.CallbackURL, config.DefaultBaseURL, payload); status != http.StatusOK {
+			if status := sendCallback(t, payload.CallbackURL, loginURL.Scheme+"://"+loginURL.Host, payload); status != http.StatusOK {
 				return fmt.Errorf("callback status %d", status)
 			}
 			return nil
@@ -273,7 +277,7 @@ func TestManagerWaitsForCallbackWhenBrowserOpenFails(t *testing.T) {
 				Source:          loginSource,
 				CallbackURL:     loginURL.Query().Get("callback"),
 			}
-			if status := sendCallback(t, payload.CallbackURL, config.DefaultBaseURL, payload); status != http.StatusOK {
+			if status := sendCallback(t, payload.CallbackURL, config.DefaultAuthBaseURL, payload); status != http.StatusOK {
 				return fmt.Errorf("callback status %d", status)
 			}
 			return errors.New("browser opener unavailable")
@@ -347,7 +351,7 @@ func TestManagerReauthenticationPinsAccountAndRequiresRotation(t *testing.T) {
 }
 
 func TestBrowserFlowRequiresExpectedAccountForForceAndNeverUsesRawUID(t *testing.T) {
-	authURL, _ := url.Parse(config.DefaultBaseURL)
+	authURL, _ := url.Parse(config.DefaultAuthBaseURL)
 	deviceID, _ := randomEncoded(bytes.NewReader(bytes.Repeat([]byte{0x22}, deviceIDBytes)), deviceIDBytes)
 	if _, err := startBrowserFlow(
 		authURL, bytes.NewReader(bytes.Repeat([]byte{0x42}, 2*randomBindingBytes)),
@@ -378,7 +382,7 @@ func TestBrowserFlowRequiresExpectedAccountForForceAndNeverUsesRawUID(t *testing
 }
 
 func TestBrowserFlowSendsStoredTokenIDOnNormalLogin(t *testing.T) {
-	authURL, _ := url.Parse(config.DefaultBaseURL)
+	authURL, _ := url.Parse(config.DefaultAuthBaseURL)
 	deviceID, _ := randomEncoded(bytes.NewReader(bytes.Repeat([]byte{0x23}, deviceIDBytes)), deviceIDBytes)
 	flow, err := startBrowserFlow(
 		authURL, bytes.NewReader(bytes.Repeat([]byte{0x44}, 2*randomBindingBytes)),
@@ -398,7 +402,7 @@ func TestBrowserFlowSendsStoredTokenIDOnNormalLogin(t *testing.T) {
 }
 
 func TestBrowserFlowAllowsLogoutIdentityTokenWithoutAccountBinding(t *testing.T) {
-	authURL, _ := url.Parse(config.DefaultBaseURL)
+	authURL, _ := url.Parse(config.DefaultAuthBaseURL)
 	deviceID, _ := randomEncoded(bytes.NewReader(bytes.Repeat([]byte{0x24}, deviceIDBytes)), deviceIDBytes)
 	flow, err := startBrowserFlow(
 		authURL, bytes.NewReader(bytes.Repeat([]byte{0x45}, 2*randomBindingBytes)),
@@ -464,7 +468,7 @@ func TestManagerDerivesExpectedAccountFromDurableScope(t *testing.T) {
 				Source:          loginSource,
 				CallbackURL:     loginURL.Query().Get("callback"),
 			}
-			if status := sendCallback(t, payload.CallbackURL, config.DefaultBaseURL, payload); status != http.StatusOK {
+			if status := sendCallback(t, payload.CallbackURL, config.DefaultAuthBaseURL, payload); status != http.StatusOK {
 				return fmt.Errorf("callback status %d", status)
 			}
 			return nil
@@ -488,7 +492,7 @@ func TestResolveStatusLogoutAndAuthOrigin(t *testing.T) {
 	cfg.AccessKey = " env-ak "
 	cfg.BaseURL = "https://untrusted.invalid"
 	manager := NewManager(cfg, WithCredentialStore(store), withClockForTest(func() time.Time { return fixedNow }))
-	if manager.authBaseURL.String() != config.DefaultBaseURL {
+	if manager.authBaseURL.String() != config.DefaultAuthBaseURL {
 		t.Fatalf("browser login followed runtime business base URL: %q", manager.authBaseURL)
 	}
 	if key, err := manager.ResolveAccessKey(context.Background()); err != nil || key != "env-ak" {
@@ -738,7 +742,7 @@ func callbackOpener(t *testing.T, expiry time.Time, uid, tokenID, accessKey stri
 			Source:          loginSource,
 			CallbackURL:     loginURL.Query().Get("callback"),
 		}
-		if status := sendCallback(t, payload.CallbackURL, config.DefaultBaseURL, payload); status != http.StatusOK {
+		if status := sendCallback(t, payload.CallbackURL, config.DefaultAuthBaseURL, payload); status != http.StatusOK {
 			return fmt.Errorf("callback status %d", status)
 		}
 		return nil

package/internal/auth/loopback_origins_test.go

@@ -16,7 +16,7 @@ import (
 
 func newOriginTestFlow(t *testing.T) (*browserFlow, accessKeyPayload) {
 	t.Helper()
-	authURL, _ := url.Parse(config.DefaultBaseURL)
+	authURL, _ := url.Parse(config.DefaultAuthBaseURL)
 	deviceID, _ := randomEncoded(bytes.NewReader(bytes.Repeat([]byte{0x21}, deviceIDBytes)), deviceIDBytes)
 	flow, err := startBrowserFlow(authURL, bytes.NewReader(bytes.Repeat([]byte{0x42}, 2*randomBindingBytes)), deviceID, "", "", false)
 	if err != nil {

package/internal/auth/manager.go

@@ -46,7 +46,7 @@ func WithCredentialStore(store CredentialStore) ManagerOption {
 // API configuration does not affect the browser identity origin.
 func NewManager(cfg *config.Config, options ...ManagerOption) *Manager {
 	serviceName := config.DefaultAuthStoreServiceName
-	authBaseURL, _ := url.Parse(config.DefaultBaseURL)
+	authBaseURL, _ := url.Parse(config.DefaultAuthBaseURL)
 	manager := &Manager{
 		localCredentialsEnabled: true,
 		cfg:                     cfg,

package/internal/common/upload_file.go

@@ -94,12 +94,12 @@ func UploadFile(ctx context.Context, opts UploadFileOptions, runner *Runner) (*U
 		if resp.Errmsg == "" {
 			resp.Errmsg = "未知错误"
 		}
-		return nil, fmt.Errorf("上传文件请求返回失败: ret=%s errmsg=%s", resp.Ret, resp.Errmsg)
+		return nil, NewLogIDError(fmt.Sprintf("上传文件请求返回失败: ret=%s errmsg=%s", resp.Ret, resp.Errmsg), resp.LogID)
 	}
 
 	assetID := strings.TrimSpace(resp.Data.PippitAssetID)
 	if assetID == "" {
-		return nil, fmt.Errorf("上传文件响应缺少 pippit_asset_id")
+		return nil, NewLogIDError("上传文件响应缺少 pippit_asset_id", resp.LogID)
 	}
 
 	return &UploadFileResult{

package/internal/config/config.go

@@ -13,6 +13,7 @@ import (
 
 const (
 	DefaultBaseURL               = "https://xyq.jianying.com"
+	DefaultAuthBaseURL           = "https://www.xiaoyunque.com"
 	DefaultHTTPTimeout           = 30 * time.Minute
 	DefaultAuthTTL               = 30 * time.Second
 	DefaultAuthStoreServiceName  = "pippit-cli"

package/internal/generate_image/generate_image.go

@@ -60,7 +60,7 @@ func Run(ctx context.Context, opts *Options, runner *common.Runner) (*common.Sub
 
 	imageAssetIDs, err := uploadImageList(ctx, opts.ImagePaths, runner)
 	if err != nil {
-		return nil, fmt.Errorf("上传图片失败: %w", err)
+		return nil, err
 	}
 
 	body := buildSubmitRunBody(opts, modelKey, imageAssetIDs)
@@ -128,14 +128,14 @@ func SupportedRatioUsage() string {
 
 func uploadImageList(ctx context.Context, paths []string, runner *common.Runner) ([]string, error) {
 	assetIDs := make([]string, 0, len(paths))
-	for _, path := range paths {
+	for i, path := range paths {
 		expanded, err := common.ExpandPath(path)
 		if err != nil {
-			return nil, err
+			return nil, fmt.Errorf("第%d张参考图片 %q 路径解析失败: %w", i+1, filepath.Base(path), err)
 		}
 		result, err := common.UploadFile(ctx, common.UploadFileOptions{Path: expanded}, runner)
 		if err != nil {
-			return nil, err
+			return nil, fmt.Errorf("第%d张参考图片 %q 上传失败: %w", i+1, filepath.Base(path), err)
 		}
 		assetIDs = append(assetIDs, result.AssetID)
 	}

package/internal/generate_video/generate_video.go

@@ -45,17 +45,17 @@ func Run(ctx context.Context, opts *Options, runner *common.Runner) (*Result, er
 		return nil, err
 	}
 
-	imageAssetIDs, err := uploadMediaList(ctx, opts.ImagePaths, runner)
+	imageAssetIDs, err := uploadMediaList(ctx, "张参考图片", opts.ImagePaths, runner)
 	if err != nil {
-		return nil, fmt.Errorf("上传图片失败: %w", err)
+		return nil, err
 	}
-	videoAssetIDs, err := uploadMediaList(ctx, opts.VideoPaths, runner)
+	videoAssetIDs, err := uploadMediaList(ctx, "个参考视频", opts.VideoPaths, runner)
 	if err != nil {
-		return nil, fmt.Errorf("上传视频失败: %w", err)
+		return nil, err
 	}
-	audioAssetIDs, err := uploadMediaList(ctx, opts.AudioPaths, runner)
+	audioAssetIDs, err := uploadMediaList(ctx, "段参考音频", opts.AudioPaths, runner)
 	if err != nil {
-		return nil, fmt.Errorf("上传音频失败: %w", err)
+		return nil, err
 	}
 
 	body := buildSubmitRunBody(opts, imageAssetIDs, videoAssetIDs, audioAssetIDs)
@@ -99,16 +99,16 @@ func validateMediaExtensions(kind string, paths []string, allowed map[string]str
 	return nil
 }
 
-func uploadMediaList(ctx context.Context, paths []string, runner *common.Runner) ([]string, error) {
+func uploadMediaList(ctx context.Context, mediaLabel string, paths []string, runner *common.Runner) ([]string, error) {
 	assetIDs := make([]string, 0, len(paths))
-	for _, path := range paths {
+	for i, path := range paths {
 		expanded, err := common.ExpandPath(path)
 		if err != nil {
-			return nil, err
+			return nil, fmt.Errorf("第%d%s %q 路径解析失败: %w", i+1, mediaLabel, filepath.Base(path), err)
 		}
 		result, err := common.UploadFile(ctx, common.UploadFileOptions{Path: expanded}, runner)
 		if err != nil {
-			return nil, err
+			return nil, fmt.Errorf("第%d%s %q 上传失败: %w", i+1, mediaLabel, filepath.Base(path), err)
 		}
 		assetIDs = append(assetIDs, result.AssetID)
 	}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pippit-dev/cli",
-  "version": "1.0.43",
+  "version": "1.0.45",
   "description": "Pippit CLI",
   "bin": {
     "pippit-tool-cli": "scripts/run.js"

package/skills/xyq-nest-skill/SKILL.md

@@ -58,6 +58,8 @@ metadata:
 - 用户明确要求生成或处理，即可在该范围内执行；仅咨询用法、费用或方案时不提交。范围、必填信息或消耗 credits 的授权不明确时，先确认，不重复索要已给出的授权。
 - 提问优先使用宿主实际提供且当前模式允许的工具：Codex 的 `request_user_input` 或 `request_user_input_async`，WorkBuddy 的 `ask_user_question`；不可用时用普通聊天。需要答案时等待答复。
 - 素材参数接收本地文件路径，CLI 内部上传。远程链接不能冒充本地路径；缺少可访问文件时先解决素材获取。单文件必须小于 500 MB（500000000 字节）。
+- `generate-image` / `generate-video` 上传素材失败时，向用户说明 CLI 返回的素材类型、类型内序号、文件名、原始原因和可用的 LogID，并说明尚未提交生成任务。序号按同类型参数的传入顺序从 1 开始，不是所有附件的混合序号；只有服务端明确返回审核拒绝时才说明审核未通过，不能把网络、权限等失败都归为审核问题。
+- 上传遇到首个失败即停止，后续素材尚未上传，不能宣称它们审核通过。根据失败原因等待用户替换对应素材或解决问题，不自动删减素材、逐个重传排查或重新提交生成。旧 CLI 未返回文件定位时如实说明无法确定具体素材，不凭图片内容猜测。
 - 提交成功后立即展示真实 `web_thread_link`；未返回链接时如实说明，保留任务 ID。后续查询和下载失败不能触发重复生成。
 - 每个最终图片/视频都通过宿主文件交付或媒体渲染能力展示为真实附件或可预览媒体。URL、路径列表仅作补充；详细完成标准见共用交付流程。