@remixmate/cli 0.9.34 → 0.9.36

package/dist/diagnostics.d.ts

@@ -1,4 +1,24 @@
 export declare function traceHeaders(): Record<string, string>;
-export declare function cleanDiagnosticText(value: string): string;
+/**
+ * Redact a string for anything that leaves this process (diagnostic lines,
+ * execution traces).
+ *
+ * Kept in lockstep with ab-agent's `lib/telemetry.cleanText` — the two feed the
+ * same `media_chat_turn_trace` table, and a table whose rows were sanitized by
+ * two different rulesets is a table nobody can reason about. ANSI stripping,
+ * e-mail and phone redaction were added here to close that gap.
+ *
+ * `max` caps the result in BYTES, keeping the head. Callers that need the tail
+ * (a command's decisive line is its last one) slice before calling.
+ */
+export declare function cleanDiagnosticText(value: string, max?: number): string;
+/**
+ * Exit code → the outcome vocabulary of the logging contract.
+ *
+ * Exported because the execution trace (project/trace.ts) reports the same
+ * verdict for the same run: two mappings would let a run be `failure` in the
+ * diagnostic line and `success` in the database.
+ */
+export declare function outcomeOf(exitCode: number): 'success' | 'cancelled' | 'rejected' | 'failure';
 /** Opt-in line framing for hosts; stdout is exclusively the existing skill protocol. */
 export declare function diagnostic(exitCode: number, durationMs: number, error?: unknown): void;

package/dist/diagnostics.js

@@ -8,8 +8,22 @@ export function traceHeaders() {
     process.env.AB_OPERATION_ID ||= randomUUID();
     return { traceparent: header };
 }
-export function cleanDiagnosticText(value) {
-    let text = value.replace(/https?:\/\/[^\s"'<>]+/g, raw => {
+/**
+ * Redact a string for anything that leaves this process (diagnostic lines,
+ * execution traces).
+ *
+ * Kept in lockstep with ab-agent's `lib/telemetry.cleanText` — the two feed the
+ * same `media_chat_turn_trace` table, and a table whose rows were sanitized by
+ * two different rulesets is a table nobody can reason about. ANSI stripping,
+ * e-mail and phone redaction were added here to close that gap.
+ *
+ * `max` caps the result in BYTES, keeping the head. Callers that need the tail
+ * (a command's decisive line is its last one) slice before calling.
+ */
+export function cleanDiagnosticText(value, max = 2048) {
+    let text = value
+        .replace(/\x1b\[[0-9;]*m/g, '')
+        .replace(/https?:\/\/[^\s"'<>]+/g, raw => {
         try {
             const url = new URL(raw);
             return url.origin + url.pathname;
@@ -17,19 +31,36 @@ export function cleanDiagnosticText(value) {
         catch {
             return '[url]';
         }
-    }).replace(/(Bearer\s+|(?:token|secret|password|api[_-]?key)\s*[=:]\s*)[^\s,;}]+/gi, '$1[redacted]');
+    })
+        .replace(/(Bearer\s+|(?:token|secret|password|api[_-]?key)\s*[=:]\s*)[^\s,;}]+/gi, '$1[redacted]')
+        .replace(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/gi, '[email]')
+        .replace(/\b1[3-9]\d{9}\b/g, '[phone]');
     for (const [key, secret] of Object.entries(process.env)) {
         if (/TOKEN|SECRET|PASSWORD|API_KEY/i.test(key) && secret && secret.length >= 6)
             text = text.split(secret).join('[redacted]');
     }
-    return Buffer.from(text).subarray(0, 2048).toString('utf8');
+    return Buffer.from(text).subarray(0, max).toString('utf8');
+}
+/**
+ * Exit code → the outcome vocabulary of the logging contract.
+ *
+ * Exported because the execution trace (project/trace.ts) reports the same
+ * verdict for the same run: two mappings would let a run be `failure` in the
+ * diagnostic line and `success` in the database.
+ */
+export function outcomeOf(exitCode) {
+    if (exitCode === 0)
+        return 'success';
+    if (exitCode === 130)
+        return 'cancelled';
+    return [2, 3, 4].includes(exitCode) ? 'rejected' : 'failure';
 }
 /** Opt-in line framing for hosts; stdout is exclusively the existing skill protocol. */
 export function diagnostic(exitCode, durationMs, error) {
     if (process.env.AB_DIAGNOSTICS !== '1')
         return;
     traceHeaders();
-    const outcome = exitCode === 0 ? 'success' : exitCode === 130 ? 'cancelled' : [2, 3, 4].includes(exitCode) ? 'rejected' : 'failure';
+    const outcome = outcomeOf(exitCode);
     const record = { schema_version: 1, timestamp: new Date().toISOString(), service: 'remixmate-cli', environment: process.env.APP_ENV ?? 'dev',
         level: outcome === 'failure' ? 'error' : 'info', event: 'cli.execution.completed', message: 'CLI execution completed', outcome,
         trace_id: process.env.AB_TRACEPARENT?.split('-')[1], operation_id: process.env.AB_OPERATION_ID,

package/dist/http.d.ts

@@ -16,7 +16,7 @@
  *   1. opts.apiBaseUrl                  — caller override
  *   2. process.env.MM_API_BASE_URL      — process env (point at local/staging here)
  *   3. process.env.MM_BACKEND_API_URL   — ab-agent's convention (back-compat)
- *   4. https://api.remixmate.com/api    — production default (zero-config)
+ *   4. https://api.remixmate.ai/api    — production default (zero-config)
  */
 import { type Billing } from './billing.js';
 export { SkillError, EXIT } from './errors.js';

package/dist/http.js

@@ -16,14 +16,14 @@
  *   1. opts.apiBaseUrl                  — caller override
  *   2. process.env.MM_API_BASE_URL      — process env (point at local/staging here)
  *   3. process.env.MM_BACKEND_API_URL   — ab-agent's convention (back-compat)
- *   4. https://api.remixmate.com/api    — production default (zero-config)
+ *   4. https://api.remixmate.ai/api    — production default (zero-config)
  */
 import { traceHeaders, cleanDiagnosticText } from './diagnostics.js';
 import { recordBilling } from './billing.js';
 import { resolvePrivToken, NOT_AUTHENTICATED_HINT } from './auth/resolve.js';
 import { attemptAutoLogin } from './auth/auto-login.js';
 import { EXIT, SkillError } from './errors.js';
-const DEFAULT_API_BASE_URL = 'https://api.remixmate.com/api';
+const DEFAULT_API_BASE_URL = 'https://api.remixmate.ai/api';
 // Re-exported so the many `import { SkillError } from '../http.js'` call sites
 // stay valid; the definition moved to errors.ts to break an import cycle with
 // the auth gateway (see errors.ts).

package/dist/install.d.ts

@@ -37,6 +37,7 @@ export declare function detectHosts(): Host[];
  * 完全看不到它，只会以为这个 CLI 不支持 —— 正是这次 WorkBuddy 的翻车方式。
  */
 export declare function projectOnlyHosts(): HostId[];
+export declare function packageVersion(): string;
 export declare function installUsage(): void;
 export declare function uninstallUsage(): void;
 export declare function runInstall(argv: string[]): number;

package/dist/install.js

@@ -147,7 +147,7 @@ export function detectHosts() {
 export function projectOnlyHosts() {
     return HOST_IDS.filter((id) => isInstalled(id) && !spec(id).userDirName);
 }
-function packageVersion() {
+export function packageVersion() {
     try {
         const raw = readFileSync(path.join(PKG_ROOT, 'package.json'), 'utf-8');
         return JSON.parse(raw).version ?? 'unknown';

package/dist/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "version": "0.9.34",
-  "generatedAt": "2026-09-16T14:16:15.526Z",
+  "version": "0.9.36",
+  "generatedAt": "2026-09-20T05:40:23.517Z",
   "skills": [
     {
       "id": "export-jianying",

package/dist/project/take.d.ts

@@ -23,6 +23,10 @@ export interface EnsuredTake {
     projectId: string;
     created: boolean;
     attempt: number;
+    /** The grouping key this take was resolved under — reused as the trace's session id. */
+    sessionKey: string;
+    /** Provenance label of the host we're running inside ('' when unknown). */
+    host: string;
 }
 /**
  * Look up the take for the current grouping key without creating anything.

package/dist/project/take.js

@@ -62,6 +62,8 @@ export async function findTake(ctx) {
         projectId: res.projectId ?? '',
         created: false,
         attempt: res.attempt ?? 0,
+        sessionKey: takeKey.key,
+        host: takeKey.host,
     };
 }
 /**
@@ -98,5 +100,7 @@ export async function ensureTake(ctx, opts) {
         projectId,
         created: res.created,
         attempt: res.attempt,
+        sessionKey: takeKey.key,
+        host: takeKey.host,
     };
 }

package/dist/project/trace.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Execution-trace self-reporting — tell the backend what this invocation
+ * actually did, so a locally-run pipeline is not a blind spot.
+ *
+ * Why this exists: the cloud agent records every tool call, its arguments AND
+ * its result into `media_chat_turn_trace` (ab-agent/src/trace-persist.ts). The
+ * local path records nothing — a take created from codex / claude code has an
+ * empty conversation, zero tool calls and zero credits in the analytics tables,
+ * so every session-level metric silently excludes it.
+ *
+ * What we can honestly report and what we cannot: the CLI is a child process
+ * spawned once per skill call. It never sees the user's prompt or the host's
+ * reply — those live in the host's own transcript. So this module reports the
+ * one thing it genuinely observes: the invocation itself.
+ *
+ * See docs/cli-session-record-design.md §5.
+ */
+import { type HttpContext } from '../http.js';
+import type { ParsedArgs } from '../argv.js';
+import type { EnsuredTake } from './take.js';
+export interface TraceOptions {
+    skillName: string;
+    args: ParsedArgs;
+    take: EnsuredTake;
+    ctx: HttpContext;
+}
+/**
+ * Whether this invocation should report at all.
+ *
+ * The rule is deliberately narrow: report only when THIS process resolved the
+ * take. Everything else is already covered by someone else —
+ *   - under the cloud agent, CONVERSATION_ID arrives pre-set and ab-agent's own
+ *     TurnTracer already recorded the very same call;
+ *   - a nested `gen-image` spawned by prepare-video-assets inherits its
+ *     parent's CONVERSATION_ID, and the parent's row already covers it.
+ * Since runner.ts only builds a tracer after resolving a take itself, this
+ * function just honours the kill switch.
+ */
+export declare function tracingEnabled(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Collects one invocation's evidence and posts it as a single turn.
+ *
+ * Lifecycle (runner.ts): `begin()` → output flows through the tap → `finish()`
+ * in a finally block. Every failure mode ends in a warning on stderr: a lost
+ * trace row must never cost the user a render they already paid for.
+ */
+export declare class InvocationTrace {
+    private readonly opts;
+    private chunks;
+    private restore;
+    private flushed;
+    private constructor();
+    /** Returns null when tracing is off — callers can then skip output capture entirely. */
+    static begin(opts: TraceOptions): InvocationTrace | null;
+    /**
+     * Tap both output streams.
+     *
+     * One tap covers both dispatch paths: in-process handlers write here
+     * directly, and the Python child's piped output is re-emitted through the
+     * same `write` (see runner.ts). Restored in finish().
+     */
+    installCapture(): void;
+    /** Feed captured output. Keeps a bounded tail — the decisive line is the last one. */
+    absorb(chunk: unknown): void;
+    /**
+     * Emit the turn. Idempotent; never throws.
+     *
+     * `error` is the dispatcher's caught exception when there is one — a Python
+     * child that exits non-zero gives us no exception, only its output, which is
+     * exactly why the tail buffer exists.
+     */
+    finish(exitCode: number, durationMs: number, error?: unknown): Promise<void>;
+}
+/**
+ * Flags → a trace-safe object.
+ *
+ * Credentials are dropped outright; long strings are cut to their opening
+ * because an argument like `--prompt` is *content*, and this table is evidence,
+ * not an archive of what the user wrote.
+ */
+export declare function sanitiseArgs(args: ParsedArgs): Record<string, unknown>;
+/**
+ * Captured output → the tail we store.
+ *
+ * Two transformations before truncating, both about spending the 16KB on
+ * things a human would read:
+ *   - progress lines are the machine protocol — one fat JSON object per phase,
+ *     marked by a `__progress__` field (progress.ts, and the same shape from the
+ *     Python skills). Their payload is noise here, but WHICH PHASE a failed run
+ *     reached is the single most useful fact about it, so the line collapses to
+ *     its phase name instead of being dropped.
+ *   - `__diagnostic_v1__` lines are our own structured log of this very run;
+ *     keeping them would store the same verdict twice.
+ *
+ * Then keeps the TAIL, unlike ab-agent's head-first cleanText: a command's
+ * verdict — the error, or the URL it produced — is its last line.
+ */
+export declare function condense(raw: string): string;

package/dist/project/trace.js

@@ -0,0 +1,278 @@
+/**
+ * Execution-trace self-reporting — tell the backend what this invocation
+ * actually did, so a locally-run pipeline is not a blind spot.
+ *
+ * Why this exists: the cloud agent records every tool call, its arguments AND
+ * its result into `media_chat_turn_trace` (ab-agent/src/trace-persist.ts). The
+ * local path records nothing — a take created from codex / claude code has an
+ * empty conversation, zero tool calls and zero credits in the analytics tables,
+ * so every session-level metric silently excludes it.
+ *
+ * What we can honestly report and what we cannot: the CLI is a child process
+ * spawned once per skill call. It never sees the user's prompt or the host's
+ * reply — those live in the host's own transcript. So this module reports the
+ * one thing it genuinely observes: the invocation itself.
+ *
+ * See docs/cli-session-record-design.md §5.
+ */
+import os from 'node:os';
+import { cleanDiagnosticText, outcomeOf } from '../diagnostics.js';
+import { billingSummary } from '../billing.js';
+import { packageVersion } from '../install.js';
+import { mmPost } from '../http.js';
+/** Same ceiling ab-agent uses for a tool result — one table, one limit. */
+const TOOL_RESULT_MAX = 16 * 1024;
+/** Raw bytes held before trimming. Generous: trimming is the tail, cleaning is cheap. */
+const RAW_CAPTURE_MAX = 64 * 1024;
+/** Per-argument ceiling. Prompts and narration bodies are content, not evidence. */
+const ARG_VALUE_MAX = 512;
+/** `error_summary` is varchar(1024). */
+const ERROR_SUMMARY_MAX = 1024;
+const FLUSH_TIMEOUT_MS = 10_000;
+const SENSITIVE_KEY = /token|secret|password|api[_-]?key|authorization/i;
+/**
+ * Whether this invocation should report at all.
+ *
+ * The rule is deliberately narrow: report only when THIS process resolved the
+ * take. Everything else is already covered by someone else —
+ *   - under the cloud agent, CONVERSATION_ID arrives pre-set and ab-agent's own
+ *     TurnTracer already recorded the very same call;
+ *   - a nested `gen-image` spawned by prepare-video-assets inherits its
+ *     parent's CONVERSATION_ID, and the parent's row already covers it.
+ * Since runner.ts only builds a tracer after resolving a take itself, this
+ * function just honours the kill switch.
+ */
+export function tracingEnabled(env = process.env) {
+    return (env.REMIXMATE_TRACE ?? '').trim() !== '0';
+}
+/**
+ * Collects one invocation's evidence and posts it as a single turn.
+ *
+ * Lifecycle (runner.ts): `begin()` → output flows through the tap → `finish()`
+ * in a finally block. Every failure mode ends in a warning on stderr: a lost
+ * trace row must never cost the user a render they already paid for.
+ */
+export class InvocationTrace {
+    opts;
+    chunks = '';
+    restore = null;
+    flushed = false;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    /** Returns null when tracing is off — callers can then skip output capture entirely. */
+    static begin(opts) {
+        if (!tracingEnabled())
+            return null;
+        if (!opts.take.conversationId)
+            return null;
+        return new InvocationTrace(opts);
+    }
+    /**
+     * Tap both output streams.
+     *
+     * One tap covers both dispatch paths: in-process handlers write here
+     * directly, and the Python child's piped output is re-emitted through the
+     * same `write` (see runner.ts). Restored in finish().
+     */
+    installCapture() {
+        if (this.restore)
+            return;
+        const out = process.stdout.write.bind(process.stdout);
+        const err = process.stderr.write.bind(process.stderr);
+        const tap = (original) => ((chunk, ...rest) => {
+            this.absorb(chunk);
+            return original(chunk, ...rest);
+        });
+        process.stdout.write = tap(out);
+        process.stderr.write = tap(err);
+        this.restore = () => {
+            process.stdout.write = out;
+            process.stderr.write = err;
+        };
+    }
+    /** Feed captured output. Keeps a bounded tail — the decisive line is the last one. */
+    absorb(chunk) {
+        try {
+            const text = typeof chunk === 'string'
+                ? chunk
+                : chunk instanceof Uint8Array
+                    ? Buffer.from(chunk).toString('utf8')
+                    : '';
+            if (!text)
+                return;
+            this.chunks += text;
+            if (this.chunks.length > RAW_CAPTURE_MAX * 2) {
+                this.chunks = this.chunks.slice(-RAW_CAPTURE_MAX);
+            }
+        }
+        catch {
+            // Capturing must never break the thing being captured.
+        }
+    }
+    /**
+     * Emit the turn. Idempotent; never throws.
+     *
+     * `error` is the dispatcher's caught exception when there is one — a Python
+     * child that exits non-zero gives us no exception, only its output, which is
+     * exactly why the tail buffer exists.
+     */
+    async finish(exitCode, durationMs, error) {
+        this.restore?.();
+        this.restore = null;
+        if (this.flushed)
+            return;
+        this.flushed = true;
+        const { skillName, args, take, ctx } = this.opts;
+        const output = condense(this.chunks);
+        const outcome = outcomeOf(exitCode);
+        const isError = exitCode !== 0;
+        const rows = [];
+        let stepSeq = 0;
+        // One env row per take, not per call: it describes the toolchain, and the
+        // toolchain does not change between two calls of the same pipeline.
+        if (take.created) {
+            rows.push({ sessionId: take.sessionKey, stepSeq: stepSeq++, kind: 'env', env: envSnapshot(take) });
+        }
+        rows.push({
+            sessionId: take.sessionKey,
+            stepSeq: stepSeq++,
+            kind: 'tool_call',
+            toolName: `cli__${skillName.replace(/-/g, '_')}`,
+            toolUseId: (process.env.AB_OPERATION_ID ?? '').slice(0, 64),
+            toolInput: sanitiseArgs(args),
+            toolResult: output || '[no output captured]',
+            isError,
+            durationMs: Math.round(durationMs),
+        });
+        rows.push({
+            sessionId: take.sessionKey,
+            stepSeq: stepSeq++,
+            kind: 'turn_result',
+            outcome,
+            errorSummary: isError ? summariseError(error, output) : '',
+            credits: billingSummary()?.credits ?? 0,
+        });
+        try {
+            await mmPost(ctx, `/chat/conversation/${encodeURIComponent(take.conversationId)}/trace`, 
+            // appendTurn: the server allocates turn_seq. N unrelated processes
+            // cannot number themselves, and cli-project-binding §5.1 already ruled
+            // out keeping local state. Older backends ignore the field and every
+            // row lands on turn 0 — still ordered, just ungrouped.
+            { appendTurn: true, traces: rows }, { timeoutMs: FLUSH_TIMEOUT_MS });
+        }
+        catch (err) {
+            process.stderr.write(`⚠️  执行轨迹未能上报（不影响本次产物）: ${cleanDiagnosticText(err.message, 256)}\n`);
+        }
+    }
+}
+/** Which rung of the grouping ladder produced this key (cli-project-binding §5.1). */
+function keySource(key) {
+    if (key.startsWith('custom:'))
+        return 'env-override';
+    if (key.startsWith('job:'))
+        return 'render-job';
+    return 'host';
+}
+/**
+ * What this take was produced by. Mirrors ab-agent's envSnapshot() in purpose:
+ * answer "which version started failing" without storing anything large.
+ */
+function envSnapshot(take) {
+    return {
+        // The discriminator every cross-channel metric needs — a CLI "turn" is one
+        // skill call, a cloud turn is a whole user request. Never compare blindly.
+        channel: 'cli',
+        cli_version: packageVersion(),
+        host: take.host || 'unknown',
+        take_key_source: keySource(take.sessionKey),
+        node: process.version,
+        platform: `${os.platform()}-${os.arch()}`,
+    };
+}
+/**
+ * Flags → a trace-safe object.
+ *
+ * Credentials are dropped outright; long strings are cut to their opening
+ * because an argument like `--prompt` is *content*, and this table is evidence,
+ * not an archive of what the user wrote.
+ */
+export function sanitiseArgs(args) {
+    const out = {};
+    for (const [key, value] of Object.entries(args).slice(0, 40)) {
+        if (SENSITIVE_KEY.test(key)) {
+            out[key] = '[redacted]';
+            continue;
+        }
+        if (typeof value === 'boolean') {
+            out[key] = value;
+            continue;
+        }
+        if (Array.isArray(value)) {
+            out[key] = value.slice(0, 20).map((v) => cleanDiagnosticText(String(v), ARG_VALUE_MAX));
+            continue;
+        }
+        out[key] = cleanDiagnosticText(String(value), ARG_VALUE_MAX);
+    }
+    return out;
+}
+/**
+ * Captured output → the tail we store.
+ *
+ * Two transformations before truncating, both about spending the 16KB on
+ * things a human would read:
+ *   - progress lines are the machine protocol — one fat JSON object per phase,
+ *     marked by a `__progress__` field (progress.ts, and the same shape from the
+ *     Python skills). Their payload is noise here, but WHICH PHASE a failed run
+ *     reached is the single most useful fact about it, so the line collapses to
+ *     its phase name instead of being dropped.
+ *   - `__diagnostic_v1__` lines are our own structured log of this very run;
+ *     keeping them would store the same verdict twice.
+ *
+ * Then keeps the TAIL, unlike ab-agent's head-first cleanText: a command's
+ * verdict — the error, or the URL it produced — is its last line.
+ */
+export function condense(raw) {
+    if (!raw)
+        return '';
+    const compacted = raw
+        .split('\n')
+        .map((line) => {
+        const trimmed = line.trim();
+        if (trimmed.startsWith('__diagnostic_v1__'))
+            return null;
+        if (!trimmed.startsWith('{') || !trimmed.includes('"__progress__"'))
+            return line;
+        try {
+            const phase = JSON.parse(trimmed).phase;
+            return typeof phase === 'string' ? `· phase=${phase}` : '· progress';
+        }
+        catch {
+            return '· progress';
+        }
+    })
+        .filter((line) => line !== null)
+        .join('\n')
+        .trim();
+    // Slice the tail before cleaning: cleanDiagnosticText truncates head-first.
+    const tail = compacted.length > TOOL_RESULT_MAX ? compacted.slice(-TOOL_RESULT_MAX) : compacted;
+    return cleanDiagnosticText(tail, TOOL_RESULT_MAX);
+}
+/**
+ * The one-line verdict.
+ *
+ * A thrown SkillError carries it directly. A Python child does not throw — it
+ * just exits non-zero, so fall back to the last line it printed, which is where
+ * argparse errors, tracebacks and our own ❌ messages end up.
+ */
+function summariseError(error, output) {
+    if (error instanceof Error && error.message) {
+        return cleanDiagnosticText(error.message, ERROR_SUMMARY_MAX);
+    }
+    const lastLine = output
+        .split('\n')
+        .map((l) => l.trim())
+        .filter((l) => l && !l.startsWith('· phase='))
+        .pop();
+    return lastLine ? cleanDiagnosticText(lastLine, ERROR_SUMMARY_MAX) : '';
+}

package/dist/runner.js

@@ -19,6 +19,7 @@ import { authChildEnv, ensureAuth } from './auth/ensure.js';
 import { emitBillingFooter } from './billing.js';
 import { resolveHttpContext } from './http.js';
 import { ensureTake, findTake } from './project/take.js';
+import { InvocationTrace } from './project/trace.js';
 /** Read the token override accepted by both the TS handlers and the Python skills. */
 function tokenFlag(args) {
     const value = args.token ?? args.priv_token;
@@ -28,6 +29,7 @@ export async function runSkill(skillName, opts) {
     const started = performance.now();
     let exitCode = EXIT.ERROR;
     let failure;
+    let trace = null;
     traceHeaders();
     const skill = findSkill(skillName, opts.baseDir ?? SKILLS_DIR);
     if (!skill) {
@@ -41,25 +43,43 @@ export async function runSkill(skillName, opts) {
             apiBaseUrl: typeof opts.parsedArgs.api_base_url === 'string' ? opts.parsedArgs.api_base_url : undefined,
             flagToken: tokenFlag(opts.parsedArgs),
         });
-        await applyTakeContext(skill, opts, auth);
+        const attached = await applyTakeContext(skill, opts, auth);
+        if (attached) {
+            // Only a take THIS process resolved gets reported — see trace.ts for why
+            // the cloud path and nested pipeline children must stay silent.
+            trace = InvocationTrace.begin({
+                skillName: skill.name,
+                args: opts.parsedArgs,
+                take: attached.take,
+                ctx: attached.ctx,
+            });
+            trace?.installCapture();
+        }
         switch (skill.entry.type) {
             case 'python':
                 // Python children talk to ab-api themselves and print their own billing
                 // footer; nothing was charged through this process.
-                return exitCode = await runPython(skill, opts.rawArgs, auth);
+                exitCode = await runPython(skill, opts.rawArgs, auth, trace);
+                break;
             case 'http':
             case 'builtin':
-                return exitCode = await runHandler(skill, opts.parsedArgs, auth);
+                exitCode = await runHandler(skill, opts.parsedArgs, auth);
+                break;
         }
     }
     catch (err) {
         failure = err;
         if (err instanceof SkillError) {
             process.stderr.write(cleanDiagnosticText(err.message) + '\n');
-            return exitCode = err.exitCode;
+            exitCode = err.exitCode;
         }
-        process.stderr.write(`❌ unexpected error: ${cleanDiagnosticText(err.stack ?? err.message)}\n`);
-        return EXIT.ERROR;
+        else {
+            process.stderr.write(`❌ unexpected error: ${cleanDiagnosticText(err.stack ?? err.message)}\n`);
+            exitCode = EXIT.ERROR;
+        }
+        // Single exit point below: the trace flush in `finally` must run before the
+        // value leaves, and an `await` there defeats TS's reachability analysis on
+        // returns made from inside the try/catch.
     }
     finally {
         // In `finally` because a run can fail *after* a billed step (e.g. the image
@@ -67,7 +87,12 @@ export async function runSkill(skillName, opts) {
         // reported either way. No-ops when nothing was charged.
         diagnostic(exitCode, performance.now() - started, failure);
         emitBillingFooter();
+        // Last, so the billing footer is still inside the captured tail. Never
+        // throws and never changes the exit code — a lost trace row must not cost
+        // the user a render they already paid for.
+        await trace?.finish(exitCode, performance.now() - started, failure);
     }
+    return exitCode;
 }
 /**
  * Decide the take mode from the skill's declaration *and* what this particular
@@ -118,11 +143,11 @@ export function resolveTakeMode(skill, args) {
 async function applyTakeContext(skill, opts, auth) {
     const mode = resolveTakeMode(skill, opts.parsedArgs);
     if (mode === 'none')
-        return;
+        return null;
     if ((process.env.CONVERSATION_ID ?? '').trim())
-        return;
+        return null;
     if (!auth.token)
-        return;
+        return null;
     try {
         const ctx = await resolveHttpContext(skill.name, {
             apiBaseUrl: auth.apiBaseUrl,
@@ -142,16 +167,32 @@ async function applyTakeContext(skill, opts, auth) {
             take = await findTake(ctx);
         }
         if (!take)
-            return;
+            return null;
         process.env.CONVERSATION_ID = take.conversationId;
         process.stdout.write(`📁 take ${take.created ? 'created' : 'reused'}: ${take.videoProjectId} ` +
             `(project ${take.projectId}${take.attempt ? `, attempt ${take.attempt}` : ''})\n`);
+        return { take, ctx };
     }
     catch (err) {
         process.stderr.write(`⚠️  无法归属本次产物（内容仍会正常生成，但不会出现在项目里）: ${cleanDiagnosticText(err.message)}\n`);
+        return null;
     }
 }
-async function runPython(skill, rawArgs, auth) {
+/**
+ * Spawn the Python skill.
+ *
+ * `stdio: 'inherit'` is the default and stays the default: the child writes
+ * straight to the terminal, which is exactly what a CLI should do. It does mean
+ * the parent sees nothing, so a failed render can only ever be reported as
+ * "exit code 1" — for the most valuable step in the pipeline.
+ *
+ * So when (and only when) we are tracing, stdout/stderr are piped and re-emitted
+ * verbatim, which routes them through the capture tap. stdin stays inherited so
+ * interactive prompts still work. Resolving on `close` rather than `exit` in
+ * that mode matters: `exit` can fire while the last chunk is still in the pipe,
+ * which is precisely the chunk holding the error message.
+ */
+async function runPython(skill, rawArgs, auth, trace) {
     if (!skill.scriptAbsolutePath) {
         throw new SkillError(`skill ${skill.name} has entry.type=python but no scriptAbsolutePath`);
     }
@@ -159,10 +200,14 @@ async function runPython(skill, rawArgs, auth) {
     return await new Promise((resolve) => {
         const proc = spawn('python3', [skill.scriptAbsolutePath, ...rawArgs], {
             cwd,
-            stdio: 'inherit',
+            stdio: trace ? ['inherit', 'pipe', 'pipe'] : 'inherit',
             env: { ...process.env, ...authChildEnv(auth), PYTHONUNBUFFERED: '1' },
         });
-        proc.on('exit', (code) => resolve(code ?? EXIT.ERROR));
+        if (trace) {
+            proc.stdout?.on('data', (chunk) => process.stdout.write(chunk));
+            proc.stderr?.on('data', (chunk) => process.stderr.write(chunk));
+        }
+        proc.on(trace ? 'close' : 'exit', (code) => resolve(code ?? EXIT.ERROR));
         proc.on('error', (err) => {
             process.stderr.write(`❌ failed to spawn python3: ${err.message}\n`);
             resolve(EXIT.SPAWN_FAILED);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remixmate/cli",
-  "version": "0.9.34",
+  "version": "0.9.36",
   "description": "AI media generation skills for Claude Code / Codex — 12 skills covering image, video, voice, digital human, web screenshot, web recording, script, template registry, rendering, Jianying export, and video deconstruction.",
   "type": "module",
   "main": "dist/index.js",

package/skills/export-jianying/SKILL.md

@@ -37,7 +37,7 @@ There is no dedicated env file; the **process environment** variables of the cal
 | Env var | Description | Default |
 |---------|-------------|---------|
 | `PRIV_TOKEN` | Tianyan token; overridable with `--priv-token`. | (none) |
-| `MM_API_BASE_URL` | API root URL. | `https://api-agent.remixmate.com/api` |
+| `MM_API_BASE_URL` | API root URL. | `https://api-agent.remixmate.ai/api` |
 | `AGENT_NAME` | Optional, sent as the `x-invoke-agent` request header. | (none) |
 
 ## Steps

package/skills/export-jianying/scripts/gen_jianying_draft.py

@@ -13,7 +13,7 @@
   python gen_jianying_draft.py --title "测试" --scenes scenes.json --download -o draft.zip
 
 环境变量:
-  MM_API_BASE_URL                - 后端 API 地址（默认: https://api-agent.remixmate.com/api）
+  MM_API_BASE_URL                - 后端 API 地址（默认: https://api-agent.remixmate.ai/api）
   PRIV_TOKEN                     - PrivToken（优先读取；未配置时提示手动输入）
 """
 
@@ -30,7 +30,7 @@ import urllib.request
 import uuid
 import zipfile
 
-API_BASE_URL = os.environ.get("MM_API_BASE_URL", "https://api-agent.remixmate.com/api")
+API_BASE_URL = os.environ.get("MM_API_BASE_URL", "https://api-agent.remixmate.ai/api")
 PRIVATE_TOKEN = ""  # 在 main() 中通过 resolve_token() 初始化
 SKILL_NAME = "export-jianying"
 AGENT_NAME = os.environ.get("AGENT_NAME", "")

package/skills/gen-digital-human/SKILL.md

@@ -44,7 +44,7 @@ No skill-local env file — the executing process inherits the system environmen
 | Env var | Description | Default |
 |---------|-------------|---------|
 | `PRIV_TOKEN` | Tianyan token; `--priv-token` overrides | none |
-| `MM_API_BASE_URL` | API root; `--api-base-url` overrides | `https://api.remixmate.com/api` |
+| `MM_API_BASE_URL` | API root; `--api-base-url` overrides | `https://api.remixmate.ai/api` |
 | `AGENT_NAME` | Optional `x-invoke-agent` header | none |
 
 ## Operations

package/skills/gen-image/SKILL.md

@@ -52,7 +52,7 @@ No skill-local env file — the executing process inherits the system environmen
 |---------|-------------|---------|
 | `PRIV_TOKEN` | Tianyan token; `--priv-token` overrides | none |
 | `MM_IMAGE_MODEL` | Default model, as a `--model` value | backend default (`seedream`) |
-| `MM_API_BASE_URL` | API root; `--api-base-url` overrides | `https://api.remixmate.com/api` |
+| `MM_API_BASE_URL` | API root; `--api-base-url` overrides | `https://api.remixmate.ai/api` |
 | `AGENT_NAME` | Optional `x-invoke-agent` header | none |
 
 ## Operations

package/skills/gen-video/SKILL.md

@@ -93,7 +93,7 @@ No skill-local env file — the executing process inherits the system environmen
 |---------|-------------|---------|
 | `PRIV_TOKEN` | Tianyan token; `--priv-token` overrides | none |
 | `MM_VIDEO_MODEL` | Default model id or shortcut | catalog default (`seedance-mini`) |
-| `MM_API_BASE_URL` | API root; `--api-base-url` overrides | `https://api.remixmate.com/api` |
+| `MM_API_BASE_URL` | API root; `--api-base-url` overrides | `https://api.remixmate.ai/api` |
 | `AGENT_NAME` | Optional `x-invoke-agent` header | none |
 
 ## Operations

package/skills/gen-voice/SKILL.md

@@ -29,7 +29,7 @@ There is no skill-local env file — the executing process inherits the system e
 | Env var | Description | Default |
 |---------|-------------|---------|
 | `PRIV_TOKEN` | Tianyan token; `--priv-token` overrides | none |
-| `MM_API_BASE_URL` | API root; `--api-base-url` overrides | `https://api.remixmate.com/api` |
+| `MM_API_BASE_URL` | API root; `--api-base-url` overrides | `https://api.remixmate.ai/api` |
 | `AGENT_NAME` | Optional `x-invoke-agent` header | none |
 
 ## Operations

package/skills/prepare-video-assets/SKILL.md

@@ -64,8 +64,8 @@ The asset resolver invokes the following skills based on `AssetRef` declarations
 | Env var | Description | Default |
 |---------|-------------|---------|
 | `PRIV_TOKEN` | Tianyan token (needed for asset generation + DB persist). | (none) |
-| `MM_API_BASE_URL` | Asset-generation API root (ab-agent proxy). | `https://api-agent.remixmate.com/api` |
-| `MM_BACKEND_API_URL` | Backend API root (RenderPlan persistence). | `https://api.remixmate.com/api` |
+| `MM_API_BASE_URL` | Asset-generation API root (ab-agent proxy). | `https://api-agent.remixmate.ai/api` |
+| `MM_BACKEND_API_URL` | Backend API root (RenderPlan persistence). | `https://api.remixmate.ai/api` |
 | `ASSET_CACHE_DIR` | Asset cache directory. | `./.asset-cache/` |
 
 ## Canonical usage (inline DSL JSON, no temp files)

package/skills/render-video/SKILL.md

@@ -62,8 +62,8 @@ Rendering supports two modes:
 | Env var | Description | Default |
 |---------|-------------|---------|
 | `PRIV_TOKEN` | Tianyan token (needed to load the RenderPlan from the DB and to upload). | (none) |
-| `MM_BACKEND_API_URL` | Backend API root URL (RenderPlan / VOD lookups). | `https://api.remixmate.com/api` |
-| `REMOTION_RENDER_API_URL` | Remote renderer base URL (ab-render). Falls back to `RENDER_API_URL` (same value across skills). | `https://api-render.remixmate.com` |
+| `MM_BACKEND_API_URL` | Backend API root URL (RenderPlan / VOD lookups). | `https://api.remixmate.ai/api` |
+| `REMOTION_RENDER_API_URL` | Remote renderer base URL (ab-render). Falls back to `RENDER_API_URL` (same value across skills). | `https://api-render.remixmate.ai` |
 | `REMOTION_RENDER_MODE` | Default render mode (`remote` / `local`); CLI `--renderer` overrides it. | `remote` |
 | `REMOTION_OUTPUT_DIR` | Render output directory. | `./output/` |
 | `REMOTION_CONCURRENCY` | Local Remotion render concurrency. | `2` |
@@ -217,7 +217,7 @@ If the remote service is unreachable or auth fails, the script exits with a deta
 The Remotion render project lives at the monorepo root under `<monorepo-root>/remotion-renderer/` and is deployed as a **standalone HTTP service**. The client script in this skill only sends POST requests and does not participate in server-side code sync.
 
 - Server code + deployment docs: `<monorepo-root>/remotion-renderer/README.md`.
-- Production (default): the client uses `https://api-render.remixmate.com` when `REMOTION_RENDER_API_URL` is unset — no config needed.
+- Production (default): the client uses `https://api-render.remixmate.ai` when `REMOTION_RENDER_API_URL` is unset — no config needed.
 - Local debugging: in the renderer directory run `npm install && npm run server:dev`, then point the client at it with `REMOTION_RENDER_API_URL=http://localhost:3000`.
 
 ## Credits

package/skills/render-video/scripts/_video_probe.py

@@ -61,7 +61,7 @@ def _query_duration_from_api(url: str) -> Optional[float]:
 
     api_base = os.environ.get(
         "MM_API_BASE_URL",
-        os.environ.get("MM_BACKEND_API_URL", "https://api.remixmate.com/api"),
+        os.environ.get("MM_BACKEND_API_URL", "https://api.remixmate.ai/api"),
     ).rstrip("/")
     if not api_base:
         return None

package/skills/render-video/scripts/_vod_polling.py

@@ -42,7 +42,7 @@ def poll_vod_playback_url(
     """
     api_base = os.environ.get(
         "MM_API_BASE_URL",
-        os.environ.get("MM_BACKEND_API_URL", "https://api.remixmate.com/api"),
+        os.environ.get("MM_BACKEND_API_URL", "https://api.remixmate.ai/api"),
     ).rstrip("/")
     url = f"{api_base}/file/get"
     headers = {

package/skills/render-video/scripts/remote_renderer_client.py

@@ -19,7 +19,7 @@
 Base URL 优先级：
   1. 调用方显式传入 base_url
   2. 环境变量 REMOTION_RENDER_API_URL（指向本地/staging 时在此覆盖）
-  3. 默认 https://api-render.remixmate.com（生产，零配置可用）
+  3. 默认 https://api-render.remixmate.ai（生产，零配置可用）
 
 本模块只负责 HTTP 层；调用方（render_video.py）负责把结果写回 render_plan。
 """
@@ -38,7 +38,7 @@ from pathlib import Path
 sys.path.insert(0, str(Path(__file__).resolve().parents[2] / "template-registry" / "scripts"))
 from log_diagnostics import trace_headers
 
-DEFAULT_API_BASE_URL = "https://api-render.remixmate.com"
+DEFAULT_API_BASE_URL = "https://api-render.remixmate.ai"
 API_BASE_URL = (
     os.environ.get("REMOTION_RENDER_API_URL")
     or os.environ.get("RENDER_API_URL")

package/skills/render-video/scripts/upload_video.py

@@ -13,7 +13,7 @@
   python3 upload_video.py --file output/video.mp4 --json-output
 
 环境变量:
-  MM_API_BASE_URL - API 根地址（默认 MM_API_BASE_URL 环境变量或 https://api-agent.remixmate.com/api）
+  MM_API_BASE_URL - API 根地址（默认 MM_API_BASE_URL 环境变量或 https://api-agent.remixmate.ai/api）
 
 注意:
   - `uploadMediaFile` 接口视频大小限制 ≤ 50MB，音频 ≤ 15MB
@@ -31,7 +31,7 @@ import urllib.parse
 import urllib.request
 import uuid
 
-DEFAULT_API_BASE_URL = "https://api-agent.remixmate.com/api"
+DEFAULT_API_BASE_URL = "https://api-agent.remixmate.ai/api"
 
 
 def _guess_content_type(file_path: str) -> str:
@@ -164,7 +164,7 @@ def main():
     parser.add_argument(
         "--api-base-url",
         default=None,
-        help="API root URL (defaults to MM_API_BASE_URL env var or https://api-agent.remixmate.com/api)",
+        help="API root URL (defaults to MM_API_BASE_URL env var or https://api-agent.remixmate.ai/api)",
     )
     parser.add_argument("--timeout", type=int, default=600, help="Upload timeout in seconds (default 600)")
     parser.add_argument("--json-output", action="store_true", help="Emit the full response as JSON on stdout")

package/skills/template-registry/README.md

@@ -9,7 +9,7 @@ CLI 暴露面是「列出可用模板」(`--list-templates`)。把 Video DSL 场
 | 来源 | 触发条件 | 适用场景 |
 |---|---|---|
 | 显式 `VIDEO_TEMPLATE_REGISTRY_URL`（ab-api 接口） | 环境变量非空 + `PRIV_TOKEN` 有效 | 指定后端 |
-| 派生默认 URL `<MM_API_BASE_URL>/remotionTemplate/registry` | `VIDEO_TEMPLATE_REGISTRY_URL` 未设置 | 默认（含独立安装 codex / `npm i -g`，默认 `https://api.remixmate.com/api`） |
+| 派生默认 URL `<MM_API_BASE_URL>/remotionTemplate/registry` | `VIDEO_TEMPLATE_REGISTRY_URL` 未设置 | 默认（含独立安装 codex / `npm i -g`，默认 `https://api.remixmate.ai/api`） |
 
 只从 ab-api 取数，是为了避免「本地文件 / monorepo 源码 / 数据库」多源并存导致的不一致——私有 / 多租户模板只存在于 ab-api，本地源永远不全。默认 URL **内置在 remixmate-cli 自身**（按 CLI 后端约定 `MM_API_BASE_URL` 推导），不再依赖 ab-agent 等宿主在 spawn 时注入，独立运行即可找到 registry。指向你自己的 ab-api 只需设 `MM_API_BASE_URL`（或直接设 `VIDEO_TEMPLATE_REGISTRY_URL`）并配置 `PRIV_TOKEN`。
 

package/skills/template-registry/SKILL.md

@@ -63,12 +63,12 @@ The skill itself only reads the registry; whether a token is needed depends on t
 | Env var | Description | Default |
 |---------|-------------|---------|
 | `VIDEO_TEMPLATE_REGISTRY_URL` | ab-api endpoint returning the registry (the single source of truth). | derived from `MM_API_BASE_URL` |
-| `MM_API_BASE_URL` | ab-api base URL the CLI talks to. When `VIDEO_TEMPLATE_REGISTRY_URL` is unset, the registry endpoint is derived as `<base>/remotionTemplate/registry`. | `https://api.remixmate.com/api` |
+| `MM_API_BASE_URL` | ab-api base URL the CLI talks to. When `VIDEO_TEMPLATE_REGISTRY_URL` is unset, the registry endpoint is derived as `<base>/remotionTemplate/registry`. | `https://api.remixmate.ai/api` |
 | `PRIV_TOKEN` | Sent as `X-Priv-Token` when hitting the registry endpoint. Falls back to `~/.config/remixmate/credentials.json`. | unset |
 | `VIDEO_TEMPLATE_REGISTRY_HTTP_METHOD` | `POST` (default) or `GET`. POST shape matches ab-api `{code,msg,data}`. | `POST` |
 
 Resolution (single source — see `scripts/registry_loader.py` for the canonical implementation):
-the registry is loaded **only** from the ab-api HTTP endpoint — explicit `VIDEO_TEMPLATE_REGISTRY_URL`, otherwise `<MM_API_BASE_URL>/remotionTemplate/registry` (default `https://api.remixmate.com/api/...`). There is no local-file / monorepo / PREFER_LOCAL fallback: those multi-source paths were removed to avoid registry skew (private/multi-tenant templates only exist on ab-api). On a transient HTTP failure the loader degrades to the on-disk cache of the same URL; with no cache it fails loud. A standalone install (Codex / `npm i -g`) just needs `MM_API_BASE_URL` (or `VIDEO_TEMPLATE_REGISTRY_URL`) pointed at your ab-api plus a valid `PRIV_TOKEN`.
+the registry is loaded **only** from the ab-api HTTP endpoint — explicit `VIDEO_TEMPLATE_REGISTRY_URL`, otherwise `<MM_API_BASE_URL>/remotionTemplate/registry` (default `https://api.remixmate.ai/api/...`). There is no local-file / monorepo / PREFER_LOCAL fallback: those multi-source paths were removed to avoid registry skew (private/multi-tenant templates only exist on ab-api). On a transient HTTP failure the loader degrades to the on-disk cache of the same URL; with no cache it fails loud. A standalone install (Codex / `npm i -g`) just needs `MM_API_BASE_URL` (or `VIDEO_TEMPLATE_REGISTRY_URL`) pointed at your ab-api plus a valid `PRIV_TOKEN`.
 
 ## Steps
 

package/skills/template-registry/scripts/registry_loader.py

@@ -15,7 +15,7 @@
     1. 显式 VIDEO_TEMPLATE_REGISTRY_URL（若设置则直接用）
     2. 否则按 CLI 后端约定推导：
          <MM_API_BASE_URL>/remotionTemplate/registry
-       MM_API_BASE_URL 默认 https://api.remixmate.com/api（与 src/http.ts 一致），
+       MM_API_BASE_URL 默认 https://api.remixmate.ai/api（与 src/http.ts 一致），
        兼容 ab-agent 注入的 MM_BACKEND_API_URL。默认值内置在 CLI 自身，独立安装
        （codex / npm i -g）开箱即用，无需宿主在 spawn 时注入。
 
@@ -92,7 +92,7 @@ _CACHE_DIR = os.environ.get(
 
 
 # CLI 默认后端 base，与 remixmate-cli/src/http.ts 的 DEFAULT_API_BASE_URL 保持一致。
-_DEFAULT_API_BASE_URL = "https://api.remixmate.com/api"
+_DEFAULT_API_BASE_URL = "https://api.remixmate.ai/api"
 
 
 def _default_registry_url() -> str:
@@ -104,7 +104,7 @@ def _default_registry_url() -> str:
     base 解析顺序与 CLI / ab-agent 对齐：
       MM_API_BASE_URL（CLI ``src/http.ts`` 约定）
         → MM_BACKEND_API_URL（ab-agent 约定，向后兼容）
-        → https://api.remixmate.com/api（生产默认，零配置）
+        → https://api.remixmate.ai/api（生产默认，零配置）
     路径段固定为 ``/remotionTemplate/registry``（POST，返回 ``{code,msg,data}``）。
     """
     base = (

package/skills/template-registry/scripts/render_job_client.py

@@ -7,7 +7,7 @@ gen_jianying_draft.py 使用。
 
 认证方式: X-Priv-Token header（与其他 skill 脚本一致）
 接口地址: 优先读 MM_API_BASE_URL（executor 显式转发、全链路标准名），
-         回退 MM_BACKEND_API_URL，再回退默认 https://api.remixmate.com/api。
+         回退 MM_BACKEND_API_URL，再回退默认 https://api.remixmate.ai/api。
          两个变量语义相同，保留回退是为兼容只配了其中一个的部署环境。
 """
 
@@ -22,7 +22,7 @@ import urllib.request
 def _api_base() -> str:
     return os.environ.get(
         "MM_API_BASE_URL",
-        os.environ.get("MM_BACKEND_API_URL", "https://api.remixmate.com/api"),
+        os.environ.get("MM_BACKEND_API_URL", "https://api.remixmate.ai/api"),
     ).rstrip("/")
 
 

package/skills/video-parser/SKILL.md

@@ -30,7 +30,7 @@ No skill-local env file — the executing process inherits the system environmen
 
 | Env var | Description | Default |
 |---------|-------------|---------|
-| `RENDER_API_URL` | ab-render service base URL. Falls back to `REMOTION_RENDER_API_URL` (same value across skills), then the default. | `https://api-render.remixmate.com` |
+| `RENDER_API_URL` | ab-render service base URL. Falls back to `REMOTION_RENDER_API_URL` (same value across skills), then the default. | `https://api-render.remixmate.ai` |
 | `PRIV_TOKEN` | Tianyan token, sent as `X-Priv-Token`. | (none) |
 | `CONVERSATION_ID` | Optional, sent as `x-conversation-id` for file association. | (none) |
 

package/skills/video-parser/scripts/deconstruct_video.py

@@ -13,7 +13,7 @@
   python deconstruct_video.py --url "https://example.com/video.mp4" --json-output
 
 环境变量:
-  MM_API_BASE_URL  - 后端 API 地址（默认: https://api-agent.remixmate.com/api）
+  MM_API_BASE_URL  - 后端 API 地址（默认: https://api-agent.remixmate.ai/api）
   PRIV_TOKEN       - PrivToken 认证令牌
 """
 
@@ -27,7 +27,7 @@ import time
 import urllib.error
 import urllib.request
 
-API_BASE_URL = os.environ.get("MM_API_BASE_URL", "https://api-agent.remixmate.com/api")
+API_BASE_URL = os.environ.get("MM_API_BASE_URL", "https://api-agent.remixmate.ai/api")
 
 PRIVATE_TOKEN = ""  # 在 main() 中通过 resolve_token() 初始化
 SKILL_NAME = "video-parser"

package/skills/video-parser/scripts/parse_via_render.py

@@ -7,7 +7,7 @@
   POST $RENDER_API_URL/parseStatus  → { status, progress, result?, error? }
 
 必要环境变量（由 ab-agent 自动注入）：
-  RENDER_API_URL   ab-render 服务地址（默认 https://api-render.remixmate.com；指向本地/staging 时覆盖）
+  RENDER_API_URL   ab-render 服务地址（默认 https://api-render.remixmate.ai；指向本地/staging 时覆盖）
   PRIV_TOKEN       ab-api 私有 token
 
 可选环境变量：
@@ -27,7 +27,7 @@ import urllib.request
 RENDER_API_URL = (
     os.environ.get("RENDER_API_URL")
     or os.environ.get("REMOTION_RENDER_API_URL")
-    or "https://api-render.remixmate.com"
+    or "https://api-render.remixmate.ai"
 ).rstrip("/")
 PRIV_TOKEN = os.environ.get("PRIV_TOKEN", "")
 CONVERSATION_ID = os.environ.get("CONVERSATION_ID", "")

package/skills/web-screenshot/scripts/_media_upload.py

@@ -26,7 +26,7 @@ import urllib.request
 from pathlib import Path
 from typing import Callable, Optional
 
-DEFAULT_API_BASE_URL = "https://api-render.remixmate.com"
+DEFAULT_API_BASE_URL = "https://api-render.remixmate.ai"
 SKILL_NAME = "web-record"
 
 TERMINAL_SUCCESS = {"succeeded", "succeed", "completed"}