@playcraft/cli 0.1.53-beta → 0.1.54

package/dist/utils/agent-api-client.js

@@ -1,13 +1,8 @@
 import { readFileSync, existsSync } from 'fs';
-import { dirname, join } from 'path';
+import { join } from 'path';
 import { homedir } from 'os';
 import { loadGlobalConfig } from '../config.js';
 import { DEFAULT_PLAYCRAFT_CLOUD_BASE } from '../commands/login.js';
-import { AGENT_TOOL_OPERATION_PROTOCOL, AGENT_TOOL_OPERATION_HEADERS, AGENT_TOOL_OPERATION_CAPABILITIES_PATH, } from '@playcraft/common/agent-tools';
-import { beginToolOperation } from './tool-operation-journal.js';
-import { businessEndpoint } from './environment-endpoints.js';
-import { redactDiagnosticText } from './error-diagnostics.js';
-import { AccountActivationError, parseErrorPayload, pendingAccountActivationError, } from '../auth/account-activation.js';
 /**
  * 判断 token 是否为用户 PAT（Personal Access Token）。
  * PAT 以 "playcraft_pat_" 开头；沙箱 JWT 为三段式 base64。
@@ -20,8 +15,8 @@ function isPatToken(token) {
  * or from the CLI after `playcraft login`.
  *
  * 凭证解析优先级：
- *   API URL : PLAYCRAFT_API_URL → sandbox global .playcraft.json → project .playcraft.json → ~/.playcraft/config.json → DEFAULT_PLAYCRAFT_CLOUD_BASE
- *   Token   : PLAYCRAFT_SANDBOX_TOKEN → sandbox global .playcraft.json → project .playcraft.json → ~/.playcraft/config.json token (PAT)
+ *   API URL : PLAYCRAFT_API_URL → .playcraft.json → ~/.playcraft/config.json → DEFAULT_PLAYCRAFT_CLOUD_BASE
+ *   Token   : PLAYCRAFT_SANDBOX_TOKEN → .playcraft.json token → ~/.playcraft/config.json token (PAT)
  *
  * 鉴权 header 自动选择：
  *   - 沙箱 JWT (非 PAT) → X-Sandbox-Token: <token>（后端 @SandboxToken 路由的沙箱分支）
@@ -30,7 +25,7 @@ function isPatToken(token) {
 export class AgentApiClient {
     apiUrl;
     token;
-    credentialFile;
+    isPat;
     playcraftEnv;
     constructor() {
         const localConfig = AgentApiClient.loadLocalConfig();
@@ -41,7 +36,7 @@ export class AgentApiClient {
             globalConfig.backendUrl ||
             globalConfig.url ||
             DEFAULT_PLAYCRAFT_CLOUD_BASE).replace(/\/+$/, '');
-        // Token: 环境变量 → 沙箱全局配置 → 项目配置 → 用户登录配置
+        // Token: 沙箱 token 环境变量 → 本地 .playcraft.json → 全局 login 配置（PAT）
         const token = process.env.PLAYCRAFT_SANDBOX_TOKEN ||
             localConfig.token ||
             globalConfig.token ||
@@ -52,149 +47,43 @@ export class AgentApiClient {
         }
         this.apiUrl = apiUrl;
         this.token = token;
-        this.credentialFile = localConfig.credentialFile;
-        this.playcraftEnv = (process.env.PLAYCRAFT_ENV || localConfig.env || '').trim();
+        this.isPat = isPatToken(token);
+        this.playcraftEnv = (process.env.PLAYCRAFT_ENV ||
+            localConfig.env ||
+            '').trim();
     }
     /** 根据 token 类型构造鉴权 headers */
     authHeaders() {
-        let token = this.token;
-        // Polling commands can outlive a credential: read the atomically refreshed file per request.
-        if (this.credentialFile && !process.env.PLAYCRAFT_SANDBOX_TOKEN) {
-            try {
-                token = JSON.parse(readFileSync(this.credentialFile, 'utf8')).token || token;
-            }
-            catch { /* Keep the last credential if a local file is temporarily unavailable. */ }
-        }
-        const headers = isPatToken(token)
-            ? { Authorization: `Bearer ${token}` }
-            : { 'X-Sandbox-Token': token };
+        const headers = this.isPat
+            ? { Authorization: `Bearer ${this.token}` }
+            : { 'X-Sandbox-Token': this.token };
         if (this.playcraftEnv) {
             headers['playcraft-env'] = this.playcraftEnv;
         }
         return headers;
     }
-    /** Deployment-relative pathname under /api/agent/tools (path may omit leading slash). */
+    /** Absolute pathname under /api/agent/tools (path may omit leading slash). */
     toolsRequestUrl(path) {
         const p = path.startsWith('/') ? path : `/${path}`;
-        return businessEndpoint(this.apiUrl, `/api/agent/tools${p}`);
+        return new URL(`/api/agent/tools${p}`, this.apiUrl);
     }
-    async post(path, body, options) {
-        const url = this.toolsRequestUrl(path);
-        const serializedBody = JSON.stringify(body);
-        if (serializedBody === undefined)
-            throw new Error('Tool request body is required');
-        const recoverId = options?.requestId ?? process.env.PLAYCRAFT_TOOL_REQUEST_ID;
-        const operation = beginToolOperation(url.pathname, serializedBody, recoverId, {
-            newRequest: options?.newRequest ?? process.env.PLAYCRAFT_TOOL_NEW_REQUEST === '1',
+    async post(path, body) {
+        const url = this.toolsRequestUrl(path).href;
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                ...this.authHeaders(),
+            },
+            body: JSON.stringify(body),
         });
-        const unknownOutcome = `Tool request ${operation.requestId}: the outcome is unknown. Rerun the same command to ` +
-            `continue this request: it returns the result if the request finished, or finishes it if ` +
-            `the tool can be safely redone; it never starts a second operation. Record: ${operation.file}.`;
-        try {
-            try {
-                await options?.onPrepared?.({ requestId: operation.requestId, file: operation.file });
-            }
-            catch {
-                operation.reject();
-                throw new ToolRequestError('Tool request preparation failed; no operation was sent');
-            }
-            const capabilityResponse = await fetch(this.toolsRequestUrl(AGENT_TOOL_OPERATION_CAPABILITIES_PATH), {
-                headers: this.authHeaders(),
-                redirect: 'error',
-                signal: options?.signal
-                    ? AbortSignal.any([options.signal, AbortSignal.timeout(30_000)])
-                    : AbortSignal.timeout(30_000),
-            });
-            if (!capabilityResponse.ok) {
-                if (capabilityResponse.status === 403) {
-                    const pending = pendingAccountActivationError(403, parseErrorPayload(await capabilityResponse.clone().text().catch(() => '')));
-                    if (pending) {
-                        if (operation.createdNew && !operation.settledOnly)
-                            operation.reject();
-                        throw pending;
-                    }
-                }
-                await capabilityResponse.body?.cancel();
-                throw new ToolRequestError(`Business tool protocol unavailable (${capabilityResponse.status}); no operation was sent`);
-            }
-            const capabilities = (await capabilityResponse.json());
-            if (capabilities.protocol !== AGENT_TOOL_OPERATION_PROTOCOL ||
-                capabilities.settledOnly !== true)
-                throw new ToolRequestError('Business tool protocol is incompatible; no operation was sent');
-            const res = await fetch(url, {
-                method: 'POST',
-                redirect: 'error',
-                signal: options?.signal
-                    ? AbortSignal.any([options.signal, AbortSignal.timeout(30 * 60_000)])
-                    : AbortSignal.timeout(30 * 60_000),
-                headers: {
-                    'Content-Type': 'application/json',
-                    ...this.authHeaders(),
-                    [AGENT_TOOL_OPERATION_HEADERS.protocol]: AGENT_TOOL_OPERATION_PROTOCOL,
-                    [AGENT_TOOL_OPERATION_HEADERS.requestId]: operation.requestId,
-                    ...(operation.settledOnly ? { [AGENT_TOOL_OPERATION_HEADERS.settledOnly]: 'true' } : {}),
-                },
-                body: serializedBody,
-            });
-            if (res.headers.get(AGENT_TOOL_OPERATION_HEADERS.protocol) !== AGENT_TOOL_OPERATION_PROTOCOL ||
-                res.headers.get(AGENT_TOOL_OPERATION_HEADERS.requestId) !== operation.requestId) {
-                const text = await res.text().catch(() => res.statusText);
-                if (res.status === 403) {
-                    const pending = pendingAccountActivationError(403, parseErrorPayload(text));
-                    if (pending) {
-                        if (operation.createdNew && !operation.settledOnly)
-                            operation.reject();
-                        throw pending;
-                    }
-                }
-                // Possibly an instance that ignores identities: a rerun may only read the receipt.
-                operation.requireReceipt();
-                const reason = responseErrorReason(text) || redactDiagnosticText(res.statusText);
-                throw new Error(`Server response ${res.status}${reason ? `: ${reason}` : ''}; ` +
-                    'Business did not acknowledge a durable receipt; outcome remains unconfirmed');
-            }
-            if (!res.ok) {
-                const text = await res.text().catch(() => res.statusText);
-                const pending = pendingAccountActivationError(res.status, parseErrorPayload(text));
-                if (pending)
-                    throw pending;
-                const code = errorCode(text);
-                if (res.status === 409 && code === 'business_operation_in_progress')
-                    throw new ToolRequestError(`API 409: ${text}\nTool request ${operation.requestId} is still running. Rerun the ` +
-                        'same command later to get its result.');
-                if (res.status === 409 && code === 'business_operation_requires_reconciliation')
-                    throw new ToolRequestError(recoverId !== undefined
-                        ? // A receipt query never runs the request, even for a tool that can be safely redone.
-                            `API 409: ${text}\nTool request ${operation.requestId} has no settled result yet. ` +
-                                'Rerun the same command without PLAYCRAFT_TOOL_REQUEST_ID: a tool that can be ' +
-                                'safely redone continues this request; any other tool then needs reconciliation.'
-                        : `API 409: ${text}\nTool request ${operation.requestId} needs reconciliation: its ` +
-                            'outcome is unknown, and rerunning the same command will not run it again. Only ' +
-                            'after confirming it had no effect, rerun with PLAYCRAFT_TOOL_NEW_REQUEST=1 to ' +
-                            'start a new operation.');
-                if (res.status >= 400 && res.status < 500) {
-                    // The request itself was refused and not carried out: a rerun is a new operation.
-                    operation.reject();
-                    throw new ToolRequestError(`API ${res.status}: ${text}`);
-                }
-                throw new Error(`API ${res.status}: ${text}`);
-            }
-            const result = (await res.json());
-            operation.complete();
-            return result;
-        }
-        catch (error) {
-            if (error instanceof ToolRequestError || error instanceof AccountActivationError)
-                throw error;
-            throw new Error(`${error instanceof Error ? error.message : String(error)}\n${operation.settledOnly
-                ? `Tool request ${operation.requestId}; record: ${operation.file}. Its settled result is not available yet.`
-                : unknownOutcome}`, { cause: error });
-        }
-        finally {
-            operation.release();
+        if (!res.ok) {
+            const text = await res.text().catch(() => res.statusText);
+            throw new Error(`API ${res.status}: ${text}`);
         }
+        return res.json();
     }
-    async get(path, params, options) {
+    async get(path, params) {
         const url = this.toolsRequestUrl(path);
         if (params) {
             for (const [k, v] of Object.entries(params)) {
@@ -204,66 +93,27 @@ export class AgentApiClient {
         }
         const res = await fetch(url, {
             headers: this.authHeaders(),
-            redirect: 'error',
-            signal: options?.signal ?? AbortSignal.timeout(30_000),
         });
         if (!res.ok) {
             const text = await res.text().catch(() => res.statusText);
-            const pending = pendingAccountActivationError(res.status, parseErrorPayload(text));
-            if (pending)
-                throw pending;
             throw new Error(`API ${res.status}: ${text}`);
         }
         return res.json();
     }
-    /** Stream only to the authenticated, same-service video upload endpoint. */
-    async putVideoMedia(path, body, headers, signal) {
-        if (!/^\/video-media\/[a-f0-9-]{36}\/content\?/.test(path))
-            throw new Error('invalid_video_upload_target');
-        const url = this.toolsRequestUrl(path);
-        const keys = [...url.searchParams.keys()].sort();
-        if (keys.join(',') !== 'expires,signature,workspaceId')
-            throw new Error('invalid_video_upload_target');
-        const allowed = new Set(['content-type', 'content-md5', 'content-length']);
-        if (Object.keys(headers).some(key => !allowed.has(key.toLowerCase())))
-            throw new Error('invalid_video_upload_headers');
-        const response = await fetch(url, {
-            method: 'PUT', redirect: 'error', signal,
-            headers: { ...headers, ...this.authHeaders() },
-            body: body,
-            duplex: 'half',
-        });
-        if (!response.ok) {
-            const text = await response.text().catch(() => response.statusText);
-            const pending = pendingAccountActivationError(response.status, parseErrorPayload(text));
-            if (pending)
-                throw pending;
-            const reason = responseErrorReason(text) || redactDiagnosticText(response.statusText);
-            throw new Error(`video_upload_failed:${response.status}${reason ? `: ${reason}` : ''}`);
-        }
-        await response.body?.cancel();
-    }
     /**
      * 按顺序搜索本地 .playcraft.json 文件（沙箱内或项目目录）。
      * 与全局 login 配置（~/.playcraft/config.json）不同，前者专用于沙箱 token。
      */
     static loadLocalConfig() {
-        const ancestors = [];
-        for (let directory = process.cwd();; directory = dirname(directory)) {
-            ancestors.push(join(directory, '.playcraft.json'));
-            if (dirname(directory) === directory)
-                break;
-        }
         const searchPaths = [
-            process.env.PLAYCRAFT_SANDBOX_CONFIG_PATH || '/workspaces/.playcraft.json',
-            ...ancestors,
+            join(process.cwd(), '.playcraft.json'),
             '/project/.playcraft.json',
             join(homedir(), '.playcraft.json'),
         ];
         for (const p of searchPaths) {
             if (existsSync(p)) {
                 try {
-                    return { ...JSON.parse(readFileSync(p, 'utf-8')), credentialFile: p };
+                    return JSON.parse(readFileSync(p, 'utf-8'));
                 }
                 catch {
                     continue;
@@ -273,33 +123,3 @@ export class AgentApiClient {
         return { apiUrl: '', token: '' };
     }
 }
-/** A failure whose meaning is settled; no recovery hint applies. */
-class ToolRequestError extends Error {
-}
-function responseErrorReason(text) {
-    const payload = parseErrorPayload(text);
-    const readable = (value, depth = 0) => {
-        if (typeof value === 'string')
-            return value;
-        if (Array.isArray(value))
-            return value.filter(item => typeof item === 'string').join('; ');
-        if (!value || typeof value !== 'object' || depth > 2)
-            return '';
-        const fields = value;
-        const message = readable(fields.message, depth + 1) || readable(fields.reason, depth + 1) ||
-            readable(fields.detail, depth + 1) || readable(fields.error, depth + 1);
-        const code = typeof fields.code === 'string' ? fields.code : '';
-        return code && message && code !== message ? `${code}: ${message}` : message || code;
-    };
-    // Select diagnostic fields instead of printing the response object and its other data.
-    return redactDiagnosticText(payload === undefined ? text : readable(payload)).slice(0, 2_000);
-}
-function errorCode(text) {
-    try {
-        const message = JSON.parse(text).message;
-        return typeof message === 'string' ? message : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}

package/dist/utils/playcraft-http-client.js

@@ -1,7 +1,6 @@
 import { randomUUID } from 'node:crypto';
 import { loadGlobalConfig } from '../config.js';
 import { DEFAULT_PLAYCRAFT_CLOUD_BASE } from '../commands/login.js';
-import { pendingAccountActivationError } from '../auth/account-activation.js';
 export class PlayCraftApiError extends Error {
     code;
     status;
@@ -96,20 +95,19 @@ export class PlayCraftHttpClient {
                 }
                 if (!response.ok) {
                     const error = payload?.error;
-                    const pending = pendingAccountActivationError(response.status, payload);
-                    const code = pending?.code ?? (typeof error?.code === 'string' ? error.code : statusCode(response.status));
-                    const message = pending?.message ?? (typeof error?.message === 'string'
+                    const code = typeof error?.code === 'string' ? error.code : statusCode(response.status);
+                    const message = typeof error?.message === 'string'
                         ? error.message
                         : typeof payload?.message === 'string'
                             ? payload.message
                             : typeof payload === 'string'
                                 ? payload
-                                : response.statusText || 'PlayCraft request failed');
+                                : response.statusText || 'PlayCraft request failed';
                     throw new PlayCraftApiError({
                         code,
                         message,
                         status: response.status,
-                        details: pending ? { loginCommand: 'playcraft login --activate' } : error?.details ?? payload,
+                        details: error?.details ?? payload,
                         retryable: response.status >= 500,
                     });
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@playcraft/cli",
-  "version": "0.1.53-beta",
+  "version": "0.1.54",
   "private": false,
   "type": "module",
   "engines": {
@@ -14,18 +14,16 @@
     "dist",
     "templates",
     "project-template",
-    "project-template-v2",
     "engine-packs",
     "project-templates",
     "REMIX.md",
-    "SKILLS_REGISTRY.md",
     "README.md"
   ],
   "scripts": {
     "dev": "tsc -w",
-    "build": "node scripts/generate-video-skills.mjs && node scripts/generate-preview-runtime.mjs && tsc",
+    "build": "tsc",
     "start": "node dist/index.js",
-    "test": "pnpm build && vitest run",
+    "test": "vitest run",
     "test:agent": "node scripts/run-agent-tests.mjs --list",
     "test:agent:designer": "node scripts/run-agent-tests.mjs game-designer",
     "test:agent:developer": "node scripts/run-agent-tests.mjs developer",
@@ -37,10 +35,6 @@
     "test:agent:gate": "node scripts/run-agent-tests.mjs gate",
     "test:agent:vlm": "node scripts/run-agent-tests.mjs vlm",
     "test:agent:stop": "node scripts/run-agent-tests.mjs stop",
-    "generate:platform-skills": "node scripts/generate-platform-skills.mjs",
-    "verify:platform-skills": "node scripts/generate-platform-skills.mjs --check",
-    "generate:video-skills": "node scripts/generate-video-skills.mjs",
-    "verify:video-skills": "node scripts/generate-video-skills.mjs --check && node --test scripts/generate-video-skills.test.mjs",
     "verify:agent-stop": "node scripts/verify-agent-stop.mjs",
     "verify-sprite-overlay": "node scripts/verify-sprite-overlay.mjs",
     "link": "node scripts/bump-local.js && pnpm build && npm link",
@@ -51,9 +45,8 @@
     "@gltf-transform/core": "^4.3.0",
     "@gltf-transform/extensions": "^4.3.0",
     "@gltf-transform/functions": "^4.3.0",
-    "@playcraft/build": "0.1.53-beta",
-    "@playcraft/common": "0.1.53-beta",
-    "better-sqlite3-pinned": "npm:better-sqlite3@13.0.3",
+    "@playcraft/build": "^0.1.54",
+    "@playcraft/common": "^0.1.54",
     "chokidar": "^4.0.3",
     "commander": "^13.1.0",
     "cors": "^2.8.6",
@@ -69,10 +62,8 @@
     "json5": "^2.2.3",
     "latest-version": "^7.0.0",
     "music-metadata": "^11.12.3",
-    "node-pty": "1.0.0",
     "ora": "^8.2.0",
     "picocolors": "^1.1.1",
-    "playwright-core": "1.52.0",
     "sharp": "^0.34.5",
     "update-notifier": "^7.3.1",
     "ws": "^8.19.0",
@@ -88,7 +79,6 @@
     "@types/sharp": "^0.32.0",
     "@types/update-notifier": "^6.0.8",
     "@types/ws": "^8.18.1",
-    "esbuild": "^0.28.1",
     "typescript": "^5.9.3",
     "vitest": "^3.2.4"
   }

package/SKILLS_REGISTRY.md

@@ -1,149 +0,0 @@
-# 远程技能管理
-
-`playcraft skills registry` 管理已部署注册表中的技能、不可变版本和发行审核。它与现有离线 `skills list/match/read`、项目 `skills project` 命令并存。服务端需要提供 `/api/agent/skill-registry/managed` 路由。
-
-网页管理复用现有技能控制台的“发布与更新”页签：系统管理入口为 `/admin/system?tab=agentSkills`，技能工作台入口为 `/agent/skills?view=management`。不新增 Skills 一级导航，旧 `/skills` 仅保留兼容重定向。
-
-2026-10-15 已在当前开发配置指定的目标数据库执行并验证 0186 和 [0187_add_skill_scope_governance.sql](../backend-business-server/drizzle/migrations/0187_add_skill_scope_governance.sql)。其他环境启用前仍须应用对应迁移，并部署配套服务与客户端。本次目标数据库升级不代表生产已上线或命令包已发行。
-
-## 登录与目标环境
-
-```bash
-playcraft login --url 'https://playcraft.example.com/__env/test-a'
-playcraft skills registry list --scope private --json
-```
-
-命令复用登录保存的 PAT (Personal Access Token, 个人访问令牌)。所有命令支持 `--url`、`--token`、`--json`、`--scope private|team|platform` 和 `--team <teamId>`。环境地址顺序为 `--url`、`PLAYCRAFT_API_URL`、`PLAYCRAFT_URL`、已保存地址、默认云端。令牌优先使用 `--token` 或 `PLAYCRAFT_TOKEN`，否则仅使用该环境保存的凭据。环境路径前缀完整保留，向其他环境不会自动发送原环境令牌。
-
-`private` 是默认范围；`team` 必须明确传入 `--team`，其他范围不能携带 `--team`。`--json` 成功时只输出一个结果对象，运行错误时只输出一个 `error` 对象并以非零状态退出。未知参数或缺少必填参数由命令解析器报告到标准错误。
-
-## 查询与下载
-
-```bash
-playcraft skills registry list --scope private --query video --limit 20 --json
-playcraft skills registry list --scope team --team '<teamId>' --cursor '<nextCursor>' --json
-playcraft skills registry list --scope platform --json
-playcraft skills registry info author/video-helper@1.2.0 --files --json
-playcraft skills registry info author/video-helper --versions --json
-playcraft skills registry pull author/video-helper@1.2.0 --out ./downloaded-skill --json
-```
-
-`list` 支持关键词、1–100 条分页和返回的 `nextCursor`；不会自动取完所有页面。`info` 默认省略正文与文件清单，`--files` 返回文件清单，`--versions` 返回可访问版本。查询与下载可省略版本，此时先解析所选发行范围的当前版本，再按其精确版本标识下载。
-
-`pull` 同时验证元数据、响应头和压缩包的 SHA-256 (Secure Hash Algorithm 256-bit, 256 位安全散列算法) 摘要。包内已声明的 `skillRef/version` 必须匹配；历史制品可缺少声明，仍按服务端精确版本与摘要校验，不重写原制品。内容先写入临时目录，校验完成后原子落地；目标须不存在或为空，路径不能包含符号链接。拉取不会执行资源中的脚本，不修改项目声明、锁或运行时绑定。`.playcraft-skill.json` 保存环境、身份、版本和摘要，不含凭据；再次打包时自动排除。
-
-## 上传与发布
-
-技能目录必须包含非空 `SKILL.md`，可包含 `manifest.json`、`references/`、`scripts/`、`assets/` 等完整资源。`manifest.json` 可直接声明 `skillRef/version`；否则通过参数明确提供。标识必须是小写 `namespace/slug`，以字母或数字开头，允许连字符和下划线，slug 还允许点号。版本目前支持无前导零的精确 `x.y.z`，最多 32 字符；不支持预发行、构建后缀、`latest` 或版本范围。
-
-首期上传接受 Markdown 技能包（`bundleType: "markdown"`），Atom 技能的查询与下载可用，上传管理尚未开放。正式发行还要求有效名称和描述，建议在 `SKILL.md` 的 frontmatter 中声明 `name` 与 `description`，或在清单中声明。平台发行还要求上传时通过 `--changelog` 提供变更说明，并完成平台评估与管理员审核。
-
-```bash
-# 只登记草稿，不发布
-playcraft skills registry push ./my-skill --ref author/video-helper --version 1.2.0 --json
-
-# 上传后发布到本人范围；本人发布与更新免管理员审核
-playcraft skills registry publish ./my-skill --ref author/video-helper --version 1.2.0 --scope private --json
-
-# 上传新版本，明确旧版本；先同步修改清单中的 version（若已声明）
-playcraft skills registry update author/video-helper --from ./my-skill --version 1.3.0 --base-version 1.2.0 --changelog 'Improve examples' --json
-playcraft skills registry publish author/video-helper@1.3.0 --scope private --json
-
-# 同一精确版本推广到团队或平台，不重新分配身份
-playcraft skills registry publish author/video-helper@1.3.0 --scope team --team '<teamId>' --json
-playcraft skills registry publish author/video-helper@1.3.0 --scope platform --json
-```
-
-目录打包仅在内存中补充缺失的清单字段，不改动源目录。显式参数与现有清单身份或版本冲突时拒绝上传。`publish <ref>@<version>` 只发布已上传版本，不能同时传入目录上传参数 `--ref`、`--version`、`--base-version` 或 `--changelog`。排除根目录 `.git`、`node_modules` 和拉取回执；其他文件按目录完整收录，发布前应确保目录只包含需要分享的技能资源。拒绝符号链接、硬链接、不安全路径及大小超限：最多 512 个文件，单文件 16 MiB (Mebibyte, 二进制兆字节)，内容总量与压缩包各 64 MiB。清单中的文件引用和显式摘要必须匹配实际文件。
-
-全平台同一 `skillRef@version` 唯一；同内容重传复用版本，改内容必须增加版本号。已有命名空间占用或所有权冲突不会转换为更新他人技能。平台保留标识和新建平台归属技能由服务端管理员权限控制，普通作者可先上传本人技能，再向平台发行提审。
-
-`push/update` 返回 `published: false`。`publish` 先检查当前发行指针，再携带该指针提交；并发发行变更由服务端拒绝。本人发行免审核；团队发行须目标团队管理员批准；平台发行须平台管理员批准。没有有效批准时，发布返回 `status: "review_pending"`、`published: false` 和审核标识。以返回字段为准，命令成功不代表已经发行。
-
-## 审核、历史与回滚
-
-```bash
-playcraft skills registry publish-check author/video-helper@1.3.0 --scope team --team '<teamId>' --json
-playcraft skills registry review submit author/video-helper@1.3.0 --scope team --team '<teamId>' --json
-playcraft skills registry review list --scope team --team '<teamId>' --json
-playcraft skills registry review approve '<reviewId>' --json
-playcraft skills registry review reject '<reviewId>' --reason 'Add usage examples' --json
-
-# 审核后显式发布相同版本、相同目标范围
-playcraft skills registry publish author/video-helper@1.3.0 --scope team --team '<teamId>' --json
-playcraft skills registry history author/video-helper --scope team --team '<teamId>' --json
-playcraft skills registry rollback author/video-helper@1.2.0 --scope team --team '<teamId>' --reason 'Regression in 1.3.0' --json
-```
-
-审核决定只批准或拒绝指定申请，不自动执行发布。审核授权与申请目标范围由服务端校验。`publish-check` 显示硬性问题、评估问题、审核要求和当前发行指针；检查通过仍可能因发布时权限或指针改变而失败。回滚只移动选定范围的发行指针，复用已有精确版本，仍受该范围授权、审核和并发检查约束，不重写旧项目锁。
-
-## 中断与恢复
-
-修改请求不自动重试。命令在发出请求前将请求键及 `pending` 状态写入 `~/.playcraft/registry-requests/`，收到明确结果后记录 `completed/rejected`；回执不保存令牌或技能内容。发布与回滚同时保存操作目标、精确版本、摘要和首次检查得到的发行指针。超时、断线或响应无法确认目标时保留 `pending`；相同环境、凭据和操作的重试复用原请求键及原发行指针，不重新检查后覆盖其他人后来发布的版本。已明确完成或拒绝后，再次执行属于新的操作，会重新检查并分配请求键。服务端精确版本、内容摘要及发行指针是最终事实来源。上传后发布中断时，也可运行 `info <ref>@<version>`、`publish-check` 和 `history` 核对，再继续精确版本发布。
-
-## 原生平台视频技能首次登记
-
-云工作区默认使用的两个引用是 `remix/playcraft-video-understanding` 和 `remix/playcraft-replica-validation`。它们必须通过 `platform push` 登记，服务端会创建 `kind=platform`、`source=platform` 的原生身份。普通 `push --scope platform` 创建的是托管工作区技能，不能替代这一入口。
-
-```bash
-playcraft skills registry platform push ./playcraft-video-understanding-1.0.1.tar.gz --changelog '更新视频理解指引与评估用例' --json
-playcraft skills registry platform push ./playcraft-replica-validation-1.0.1.tar.gz --changelog '更新复刻验收指引与评估用例' --json
-```
-
-`platform push <source>` 接受完整目录或已准备的压缩包。目录必须已含原生 `manifest.json`；命令保留其文件内容，不补充托管技能默认字段。已有压缩包原样发送，不重打包。可选的 `--ref`、`--version` 必须与清单一致；可用 `--evaluation-template <templateId>` 指定初始评估模板。原生入口当前仅接受上述两个引用，要求平台类型、单一 `sandbox-agent` surface、对齐的名称与版本、无 imports/relationships；服务端执行完整校验与摘要归一化，并返回最终 `artifactHash`。登记不会自动评估、审核或发布。
-
-此入口要求具有平台管理权限的真实账号凭据；命令复用目标环境登录，不发送本地身份模拟请求头。服务端需已部署允许真实管理员个人访问令牌访问原生登记和评估接口的版本。
-
-## 真实评估
-
-评估会使用指定工作区的模型和配置，在服务端评估执行器中实际运行用例。命令不构造通过记录，也不调用内部执行步骤接口。评估队列、执行器、模型和证据存储均须可用。先明确目标环境、工作区以及精确 `ref@version`，再选择模板和模型：
-
-```bash
-playcraft skills registry evaluation templates list --json
-playcraft skills registry evaluation models --workspace '<workspaceId>' --json
-playcraft skills registry evaluation config get remix/playcraft-video-understanding@1.0.1 --scope platform --json
-```
-
-没有可用模板时，管理员可创建并启用模板：
-
-```bash
-playcraft skills registry evaluation templates create --input ./evaluation-template.json --json
-playcraft skills registry evaluation templates enable '<templateId>' --json
-# 停用模板会使相关发布检查不再接受该模板
-playcraft skills registry evaluation templates disable '<templateId>' --json
-```
-
-模板输入文件只接受 `{ "key": "...", "name": "...", "spec": { ... } }`。`spec` 使用现有评估模板字段：`executor`、`dockerImage`、`cloudTemplateId`、`nodeVersion`、`opencodeVersion`、`modelConfigId`、`graderVersion`、`caseTimeoutSeconds`、`runTimeoutSeconds`、`globalConcurrency`。填写实际运行镜像与工具版本；使用本地 Docker 时不要填写虚构的云模板标识。运行平台如何选择执行器由部署配置决定，命令不会自动切换。模板创建会分配新修订，**不保证请求键幂等**；若响应丢失，先用 `templates list` 核对，再决定是否重试。
-
-配置输入文件只接受 `{ "templateId": "...", "expectedRevision": 0, "spec": { ... } }`。`expectedRevision` 使用 `config get` 返回的修订号；`spec` 包含 `modelConfigId`、`caseTimeoutSeconds`、`cases`。用例结构及断言种类见 [共享评估类型](../common/src/skill-evaluation.ts)。填写有意义的真实提示词、输入文件、断言和必要的模型评审要求；服务端校验完整性、运行证据与发布条件。
-
-```bash
-playcraft skills registry evaluation config set remix/playcraft-video-understanding@1.0.1 --scope platform --input ./video-evaluation-config.json --json
-playcraft skills registry evaluation run remix/playcraft-video-understanding@1.0.1 --scope platform --workspace '<workspaceId>' --config '<configId>' --request-key 'video-1-0-1-run-001' --wait --timeout 1800 --interval 3 --json
-```
-
-`--config` 必须是保存返回的精确配置标识；工作区标识不要求是通用唯一标识符。请求键允许 8–128 位字母、数字、下划线或连字符；重新执行一次评估需新键，断线恢复同一次评估需复用原键及全部原参数。`--compare` 可同时评估当前稳定版作为基线。省略 `--wait` 时返回已创建评估；带 `--wait` 时只有 `phase=completed` 且 `verdict=passed` 才成功退出，失败或取消会返回包含评估记录的结构化错误并非零退出。
-
-```bash
-playcraft skills registry evaluation status '<runId>' --json
-playcraft skills registry evaluation runs remix/playcraft-video-understanding@1.0.1 --scope platform --workspace '<workspaceId>' --json
-playcraft skills registry evaluation wait '<runId>' --timeout 1800 --interval 3 --json
-playcraft skills registry evaluation evidence '<runId>' --case '<caseResultId>' --json
-playcraft skills registry evaluation cancel '<runId>' --json
-```
-
-`--case` 使用状态结果中的 `results[].id`，不是逻辑用例名 `normal/boundary/regression`。状态含用例结果和检查项；`evidence` 读取对应归档证据。轮询默认最多 600 秒、间隔 3 秒；超时只停止等待，不取消后台评估，也不自动重新发起。修改请求不自动重试；配置写入使用预期修订号，断线后先读取配置确认实际结果。
-
-## 同一原生版本的正式发布
-
-应用治理迁移后，原生平台身份也使用托管注册表的审核、检查和发布命令；不要调用旧发布接口。评估配置变化会使旧配置的审核和证据失效。完成真实评估后，对同一精确版本提交审核、查看证据并由有权限的管理员批准，然后发布：
-
-```bash
-playcraft skills registry review submit remix/playcraft-video-understanding@1.0.1 --scope platform --json
-playcraft skills registry review approve '<reviewId>' --json
-playcraft skills registry publish-check remix/playcraft-video-understanding@1.0.1 --scope platform --json
-playcraft skills registry publish remix/playcraft-video-understanding@1.0.1 --scope platform --json
-playcraft skills registry history remix/playcraft-video-understanding --scope platform --json
-```
-
-对 `remix/playcraft-replica-validation@1.0.1` 独立完成同样流程。检查必须没有硬性或评估问题；最终核对 `published: true`、返回的精确版本与摘要，以及发行历史。命令没有例外发布选项，不跳过真实评估或审核。这里描述的是操作流程，新增命令的自动测试通过不代表任一环境已完成真实评估或正式发布。工作区预览绑定仍不属于本命令组。