@remixmate/cli 0.9.28 → 0.9.29

package/dist/diagnostics.d.ts

@@ -0,0 +1,4 @@
+export declare function traceHeaders(): Record<string, string>;
+export declare function cleanDiagnosticText(value: string): string;
+/** Opt-in line framing for hosts; stdout is exclusively the existing skill protocol. */
+export declare function diagnostic(exitCode: number, durationMs: number, error?: unknown): void;

package/dist/diagnostics.js

@@ -0,0 +1,39 @@
+import { randomBytes, randomUUID } from 'node:crypto';
+export function traceHeaders() {
+    const parent = process.env.AB_TRACEPARENT ?? '';
+    const match = /^00-([a-f0-9]{32})-([a-f0-9]{16})-[a-f0-9]{2}$/.exec(parent);
+    const trace = match && !/^0+$/.test(match[1]) && !/^0+$/.test(match[2]) ? match[1] : randomBytes(16).toString('hex');
+    const header = `00-${trace}-${randomBytes(8).toString('hex')}-01`;
+    process.env.AB_TRACEPARENT = header;
+    process.env.AB_OPERATION_ID ||= randomUUID();
+    return { traceparent: header };
+}
+export function cleanDiagnosticText(value) {
+    let text = value.replace(/https?:\/\/[^\s"'<>]+/g, raw => {
+        try {
+            const url = new URL(raw);
+            return url.origin + url.pathname;
+        }
+        catch {
+            return '[url]';
+        }
+    }).replace(/(Bearer\s+|(?:token|secret|password|api[_-]?key)\s*[=:]\s*)[^\s,;}]+/gi, '$1[redacted]');
+    for (const [key, secret] of Object.entries(process.env)) {
+        if (/TOKEN|SECRET|PASSWORD|API_KEY/i.test(key) && secret && secret.length >= 6)
+            text = text.split(secret).join('[redacted]');
+    }
+    return Buffer.from(text).subarray(0, 2048).toString('utf8');
+}
+/** Opt-in line framing for hosts; stdout is exclusively the existing skill protocol. */
+export function diagnostic(exitCode, durationMs, error) {
+    if (process.env.AB_DIAGNOSTICS !== '1')
+        return;
+    traceHeaders();
+    const outcome = exitCode === 0 ? 'success' : exitCode === 130 ? 'cancelled' : [2, 3, 4].includes(exitCode) ? 'rejected' : 'failure';
+    const record = { schema_version: 1, timestamp: new Date().toISOString(), service: 'remixmate-cli', environment: process.env.APP_ENV ?? 'dev',
+        level: outcome === 'failure' ? 'error' : 'info', event: 'cli.execution.completed', message: 'CLI execution completed', outcome,
+        trace_id: process.env.AB_TRACEPARENT?.split('-')[1], operation_id: process.env.AB_OPERATION_ID,
+        duration_ms: durationMs, attributes: { exit_code: exitCode },
+        error: error instanceof Error ? { type: error.name, message: cleanDiagnosticText(error.message), stack: cleanDiagnosticText(error.stack ?? '') } : undefined };
+    process.stderr.write('__diagnostic_v1__ ' + JSON.stringify(record) + '\n');
+}

package/dist/http.js

@@ -18,6 +18,7 @@
  *   3. process.env.MM_BACKEND_API_URL   — ab-agent's convention (back-compat)
  *   4. https://api.remixmate.com/api    — production default (zero-config)
  */
+import { traceHeaders, cleanDiagnosticText } from './diagnostics.js';
 import { recordBilling } from './billing.js';
 import { resolvePrivToken, NOT_AUTHENTICATED_HINT } from './auth/resolve.js';
 import { attemptAutoLogin } from './auth/auto-login.js';
@@ -73,7 +74,7 @@ function buildHeaders(ctx, extra) {
         headers['x-invoke-agent'] = ctx.agentName;
     if (ctx.conversationId)
         headers['x-conversation-id'] = ctx.conversationId;
-    return { ...headers, ...extra };
+    return { ...headers, ...extra, ...traceHeaders() };
 }
 /**
  * POST JSON to ab-api and return the parsed business payload.
@@ -110,16 +111,16 @@ export async function mmPost(ctx, pathOrUrl, body, opts = {}) {
             throw new SkillError(`${NOT_AUTHENTICATED_HINT}\n   （后端返回 HTTP ${resp.status}）`, EXIT.NOT_AUTHENTICATED);
         }
         if (resp.status >= 500) {
-            throw new SkillError(`❌ API request failed (HTTP ${resp.status}): ${text}`, EXIT.BACKEND_UNREACHABLE);
+            throw new SkillError(`❌ API request failed (HTTP ${resp.status}): [response omitted]`, EXIT.BACKEND_UNREACHABLE);
         }
-        throw new SkillError(`❌ API request failed (HTTP ${resp.status}): ${text}`);
+        throw new SkillError(`❌ API request failed (HTTP ${resp.status}): [response omitted]`);
     }
     let parsed;
     try {
         parsed = JSON.parse(text);
     }
     catch {
-        throw new SkillError(`❌ failed to parse response, body is not JSON: ${text.slice(0, 200)}`);
+        throw new SkillError(`❌ failed to parse response, body is not JSON: [response omitted]`);
     }
     // Before the code check: a charged response is always code=0 today, but a
     // partial-failure envelope that still billed must not lose its billing line.
@@ -130,7 +131,7 @@ export async function mmPost(ctx, pathOrUrl, body, opts = {}) {
         if (parsed.code === 401 || parsed.code === 403) {
             throw new SkillError(`${NOT_AUTHENTICATED_HINT}\n   （后端返回 code=${parsed.code}${parsed.msg ? `: ${parsed.msg}` : ''}）`, EXIT.NOT_AUTHENTICATED);
         }
-        throw new SkillError(`❌ API returned a business error: ${parsed.msg ?? 'unknown error'} (code=${parsed.code})`);
+        throw new SkillError(`❌ API returned a business error: ${cleanDiagnosticText(parsed.msg ?? 'unknown error')} (code=${parsed.code})`);
     }
     return parsed.data ?? undefined;
 }

package/dist/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "version": "0.9.28",
-  "generatedAt": "2026-09-13T13:40:09.148Z",
+  "version": "0.9.29",
+  "generatedAt": "2026-09-14T08:49:05.207Z",
   "skills": [
     {
       "id": "export-jianying",

package/dist/runner.js

@@ -9,6 +9,7 @@
  *
  * Resolves to the child process's exit code so cli.ts can propagate it.
  */
+import { diagnostic, cleanDiagnosticText, traceHeaders } from './diagnostics.js';
 import { spawn } from 'node:child_process';
 import path from 'node:path';
 import { findSkill, SKILLS_DIR } from './registry.js';
@@ -24,9 +25,14 @@ function tokenFlag(args) {
     return typeof value === 'string' ? value : undefined;
 }
 export async function runSkill(skillName, opts) {
+    const started = performance.now();
+    let exitCode = EXIT.ERROR;
+    let failure;
+    traceHeaders();
     const skill = findSkill(skillName, opts.baseDir ?? SKILLS_DIR);
     if (!skill) {
         process.stderr.write(`❌ skill not found: ${skillName}\n`);
+        diagnostic(EXIT.USAGE, performance.now() - started);
         return EXIT.USAGE;
     }
     try {
@@ -40,24 +46,26 @@ export async function runSkill(skillName, opts) {
             case 'python':
                 // Python children talk to ab-api themselves and print their own billing
                 // footer; nothing was charged through this process.
-                return await runPython(skill, opts.rawArgs, auth);
+                return exitCode = await runPython(skill, opts.rawArgs, auth);
             case 'http':
             case 'builtin':
-                return await runHandler(skill, opts.parsedArgs, auth);
+                return exitCode = await runHandler(skill, opts.parsedArgs, auth);
         }
     }
     catch (err) {
+        failure = err;
         if (err instanceof SkillError) {
-            process.stderr.write(err.message + '\n');
-            return err.exitCode;
+            process.stderr.write(cleanDiagnosticText(err.message) + '\n');
+            return exitCode = err.exitCode;
         }
-        process.stderr.write(`❌ unexpected error: ${err.message}\n`);
+        process.stderr.write(`❌ unexpected error: ${cleanDiagnosticText(err.stack ?? err.message)}\n`);
         return EXIT.ERROR;
     }
     finally {
         // In `finally` because a run can fail *after* a billed step (e.g. the image
         // generated and was charged, then the upload timed out) — spend gets
         // reported either way. No-ops when nothing was charged.
+        diagnostic(exitCode, performance.now() - started, failure);
         emitBillingFooter();
     }
 }
@@ -140,7 +148,7 @@ async function applyTakeContext(skill, opts, auth) {
             `(project ${take.projectId}${take.attempt ? `, attempt ${take.attempt}` : ''})\n`);
     }
     catch (err) {
-        process.stderr.write(`⚠️  无法归属本次产物（内容仍会正常生成，但不会出现在项目里）: ${err.message}\n`);
+        process.stderr.write(`⚠️  无法归属本次产物（内容仍会正常生成，但不会出现在项目里）: ${cleanDiagnosticText(err.message)}\n`);
     }
 }
 async function runPython(skill, rawArgs, auth) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remixmate/cli",
-  "version": "0.9.28",
+  "version": "0.9.29",
   "description": "AI media generation skills for Claude Code / Codex — 12 skills covering image, video, voice, digital human, web screenshot, web recording, script, template registry, rendering, Jianying export, and video deconstruction.",
   "type": "module",
   "main": "dist/index.js",

package/skills/render-video/scripts/remote_renderer_client.py

@@ -34,6 +34,9 @@ import urllib.error
 import urllib.parse
 import urllib.request
 from typing import Callable, Optional
+from pathlib import Path
+sys.path.insert(0, str(Path(__file__).resolve().parents[2] / "template-registry" / "scripts"))
+from log_diagnostics import trace_headers
 
 DEFAULT_API_BASE_URL = "https://api-render.remixmate.com"
 API_BASE_URL = (
@@ -87,6 +90,7 @@ def _build_headers(private_token: str, content_type: str = "application/json", c
         headers["x-invoke-agent"] = AGENT_NAME
     if conversation_id:
         headers["x-conversation-id"] = conversation_id
+    headers.update(trace_headers())
     return headers
 
 

package/skills/render-video/version.json

@@ -2,6 +2,6 @@
   "skillName": "render-video",
   "repoName": "agent-skill-media-maker",
   "skillId": "473",
-  "version": "V20",
+  "version": "V21",
   "skillDescription": "Final-render skill: loads a persisted RenderPlan by `job_id` and drives the Remotion engine to produce the final video.\n\nUse this skill as soon as the user mentions any of these intents (after assets are already prepared):\n- Render the video, composite the video, export the video\n- Turn the prepared assets into the final clip\n- Render with Remotion\n\nPrerequisite: assets must already be generated via `prepare_video_assets`. This skill never resolves or regenerates assets — pass it a `job_id` from a previous `prepare_video_assets` call.\n\n⚠️ Stop-and-confirm gate: never call this skill until the user has explicitly confirmed the assets prepared by `prepare_video_assets`. If those assets were prepared in the current turn and the user has not replied since, stop and ask instead of rendering."
 }

package/skills/template-registry/scripts/log_diagnostics.py

@@ -0,0 +1,32 @@
+"""Portable stdlib-only context and opt-in stderr diagnostics; never writes stdout."""
+import json
+import os
+import re
+import secrets
+import sys
+import time
+import uuid
+from datetime import datetime, timezone
+
+_started = time.monotonic()
+
+def trace_headers():
+    match = re.fullmatch(r'00-([a-f0-9]{32})-([a-f0-9]{16})-[a-f0-9]{2}', os.getenv('AB_TRACEPARENT', ''))
+    tid = match[1] if match and match[1] != '0'*32 and match[2] != '0'*16 else secrets.token_hex(16)
+    parent = f'00-{tid}-{secrets.token_hex(8)}-01'
+    os.environ['AB_TRACEPARENT'] = parent
+    os.environ.setdefault('AB_OPERATION_ID', str(uuid.uuid4()))
+    return {'traceparent': parent}
+
+def diagnostic(exit_code, kind='none', service='remixmate-studio-cli'):
+    if os.getenv('AB_DIAGNOSTICS') != '1':
+        return
+    trace_headers()
+    outcome = 'success' if exit_code == 0 else 'failure' if exit_code == 2 else 'rejected'
+    record = dict(schema_version=1, timestamp=datetime.now(timezone.utc).isoformat().replace('+00:00', 'Z'),
+        level='error' if outcome == 'failure' else 'info', service=service, environment=os.getenv('APP_ENV', 'dev'),
+        event='cli.execution.completed', message='CLI execution completed', outcome=outcome,
+        duration_ms=(time.monotonic()-_started)*1000, trace_id=os.environ['AB_TRACEPARENT'].split('-')[1],
+        operation_id=os.environ['AB_OPERATION_ID'], attributes={'exit_code': exit_code, 'error_kind': kind if re.fullmatch('[a-z_]{1,80}', str(kind)) else 'unknown'})
+    sys.stderr.write('__diagnostic_v1__ ' + json.dumps(record, ensure_ascii=False) + '\n')
+    sys.stderr.flush()

package/skills/template-registry/scripts/render_job_client.py

@@ -11,6 +11,7 @@ gen_jianying_draft.py 使用。
          两个变量语义相同，保留回退是为兼容只配了其中一个的部署环境。
 """
 
+from log_diagnostics import trace_headers
 import json
 import os
 import sys
@@ -34,6 +35,7 @@ def _make_headers(priv_token: str) -> dict:
     agent_name = os.environ.get("AGENT_NAME", "")
     if agent_name:
         headers["x-invoke-agent"] = agent_name
+    headers.update(trace_headers())
     return headers
 
 

package/skills/template-registry/version.json

@@ -2,6 +2,6 @@
   "skillName": "template-registry",
   "repoName": "agent-skill-media-maker",
   "skillId": "475",
-  "version": "V13",
+  "version": "V14",
   "skillDescription": "Video-template registry skill. Stores every video-template definition and lists the available templates (templateId / name / aspect ratio / style tags).\n\nUse this skill as soon as the user mentions any of these intents:\n- View available templates / list every template\n\nNote: DSL→TemplateBinding is no longer a separate exposed step — once prepare_video_assets receives a template_id it builds the binding internally."
 }