@remixmate/cli 0.9.71 → 0.9.73

package/dist/skill-schema.js

@@ -1,194 +1 @@
-/**
- * Single source of truth for skill.json shape + validation.
- *
- * Imported directly by `registry.ts` (runtime loader) and — via the compiled
- * `dist/skill-schema.js` — by `scripts/build-manifest.mjs` and `scripts/smoke.mjs`.
- * Previously each of those reimplemented `normalizeEntry` and its own subset of
- * field checks, so "valid at build" ≠ "loadable at runtime". Centralizing here
- * means one definition of a well-formed skill.
- *
- * Error policy is the caller's choice: `validateSkillJson` returns a list of
- * human-readable problems (empty = OK). The runtime loader skips + warns;
- * the build treats them as fatal.
- */
-export const CATEGORY_VALUES = ['authoring', 'consuming', 'asset', 'meta'];
-export const AUTH_VALUES = ['required', 'optional', 'none'];
-/**
- * Resolve a skill's auth mode, defaulting for records that predate the field.
- *
- * The default is derived from `envVars` rather than hardcoded to `'required'`:
- * a skill that never declared PRIV_TOKEN cannot possibly need a credential, and
- * defaulting it to `required` would make a purely local skill (web-screenshot)
- * pop a browser. Every skill shipped in this package declares `auth` explicitly,
- * so this only covers externally supplied skill dirs (SKILL_BASE_DIR).
- */
-export function resolveAuthMode(raw) {
-    if (raw.auth)
-        return raw.auth;
-    return raw.envVars?.includes('PRIV_TOKEN') ? 'required' : 'none';
-}
-export const TIER_VALUES = ['atomic', 'orchestration', 'tool'];
-export const REQUIRED_SKILL_JSON_FIELDS = ['name', 'tier', 'title', 'description'];
-/**
- * Resolve the dispatcher entry. A missing `entry` falls back to the legacy
- * top-level `scriptPath`, treated as `{ type: 'python', scriptPath }` so older
- * skills keep working untouched. Returns null when neither is present.
- */
-export function normalizeEntry(raw) {
-    if (raw.entry)
-        return raw.entry;
-    if (raw.scriptPath)
-        return { type: 'python', scriptPath: raw.scriptPath };
-    return null;
-}
-/** `parameters.properties` 的键；非对象 / 无 properties 时返回空数组。 */
-function parameterKeys(parameters) {
-    if (!parameters || typeof parameters !== 'object')
-        return [];
-    const props = parameters.properties;
-    if (!props || typeof props !== 'object')
-        return [];
-    return Object.keys(props);
-}
-/** `parameters.required`；缺失或格式不对时返回空数组。 */
-function requiredKeys(parameters) {
-    if (!parameters || typeof parameters !== 'object')
-        return [];
-    const req = parameters.required;
-    return Array.isArray(req) ? req.filter((k) => typeof k === 'string') : [];
-}
-/**
- * 把 `ui` 声明补全成三个互斥的完整分桶。没声明 `ui` 时按 required 推导。
- *
- * **未提及的字段一律落进 advanced**：新增参数时最坏是多折一层，而不是消失。
- * 返回 null 表示这个 skill 没有可填的参数（不该弹表单）。
- */
-export function resolveUiHints(raw) {
-    const keys = parameterKeys(raw.parameters);
-    if (keys.length === 0)
-        return null;
-    if (!raw.ui) {
-        const required = new Set(requiredKeys(raw.parameters));
-        return {
-            primary: keys.filter((k) => required.has(k)),
-            advanced: keys.filter((k) => !required.has(k)),
-            hidden: [],
-        };
-    }
-    const declared = raw.ui;
-    const keySet = new Set(keys);
-    // 只保留真实存在的字段：schema 删了某个参数但 ui 忘了同步时，
-    // 不至于让下游渲染出一个没有定义的表单项。
-    const keep = (list) => (list ?? []).filter((k) => keySet.has(k));
-    const primary = keep(declared.primary);
-    const advanced = keep(declared.advanced);
-    const hidden = keep(declared.hidden);
-    const mentioned = new Set([...primary, ...advanced, ...hidden]);
-    return {
-        primary,
-        advanced: [...advanced, ...keys.filter((k) => !mentioned.has(k))],
-        hidden,
-    };
-}
-/**
- * `ui` 分级的自检。三条规则，每条都对应一种"表单看起来正常但填不出东西"的坏状态。
- */
-function validateUiHints(raw) {
-    if (raw.ui == null)
-        return [];
-    const errors = [];
-    if (typeof raw.ui !== 'object' || Array.isArray(raw.ui)) {
-        return ['skill.json.ui must be an object with primary / advanced / hidden arrays'];
-    }
-    const keys = new Set(parameterKeys(raw.parameters));
-    const seen = new Map(); // 字段 → 首次出现的桶
-    for (const bucket of ['primary', 'advanced', 'hidden']) {
-        const list = raw.ui[bucket];
-        if (list == null)
-            continue;
-        if (!Array.isArray(list) || list.some((k) => typeof k !== 'string' || k === '')) {
-            errors.push(`skill.json.ui.${bucket} must be an array of non-empty parameter names`);
-            continue;
-        }
-        for (const key of list) {
-            // 引用了不存在的参数：多半是 schema 改名后 ui 没跟着改。
-            if (!keys.has(key)) {
-                errors.push(`skill.json.ui.${bucket} references unknown parameter '${key}'`);
-            }
-            const first = seen.get(key);
-            if (first) {
-                errors.push(`skill.json.ui lists '${key}' in both '${first}' and '${bucket}'`);
-            }
-            else {
-                seen.set(key, bucket);
-            }
-        }
-    }
-    // 必填字段被藏起来 = 表单永远填不完整，且没有任何提示。
-    for (const key of requiredKeys(raw.parameters)) {
-        if (raw.ui.hidden?.includes(key)) {
-            errors.push(`skill.json.ui.hidden contains required parameter '${key}' — it could never be filled`);
-        }
-    }
-    return errors;
-}
-/**
- * Validate a parsed skill.json against the directory it lives in. Returns an
- * array of problem strings; an empty array means the record is well-formed.
- */
-export function validateSkillJson(raw, skillId) {
-    const errors = [];
-    for (const field of REQUIRED_SKILL_JSON_FIELDS) {
-        const value = raw[field];
-        if (value == null || value === '')
-            errors.push(`skill.json missing required field '${field}'`);
-    }
-    if (raw.tier != null && !TIER_VALUES.includes(raw.tier)) {
-        errors.push(`skill.json.tier must be one of ${TIER_VALUES.join(' | ')}, got '${raw.tier}'`);
-    }
-    if (raw.category != null && !CATEGORY_VALUES.includes(raw.category)) {
-        errors.push(`skill.json.category must be one of ${CATEGORY_VALUES.join(' | ')}, got '${raw.category}'`);
-    }
-    if (raw.auth != null && !AUTH_VALUES.includes(raw.auth)) {
-        errors.push(`skill.json.auth must be one of ${AUTH_VALUES.join(' | ')}, got '${raw.auth}'`);
-    }
-    if (raw.createsTake != null && typeof raw.createsTake !== 'boolean') {
-        errors.push(`skill.json.createsTake must be a boolean, got '${String(raw.createsTake)}'`);
-    }
-    if (raw.joinsTake != null && typeof raw.joinsTake !== 'boolean') {
-        errors.push(`skill.json.joinsTake must be a boolean, got '${String(raw.joinsTake)}'`);
-    }
-    if (raw.createsTakeUnless != null) {
-        if (!Array.isArray(raw.createsTakeUnless) ||
-            raw.createsTakeUnless.some((f) => typeof f !== 'string' || f === '')) {
-            errors.push("skill.json.createsTakeUnless must be an array of non-empty argv keys");
-        }
-        else if (raw.createsTake !== true) {
-            // It only ever downgrades createsTake; on any other skill it would read as
-            // working while doing nothing.
-            errors.push("skill.json.createsTakeUnless requires createsTake=true");
-        }
-        else if (raw.createsTakeUnless.some((f) => f.includes('-'))) {
-            // argv.ts hands the dispatcher snake_case keys, so `--resolve-only`
-            // arrives as `resolve_only`. A kebab entry would silently never match.
-            errors.push("skill.json.createsTakeUnless entries must be snake_case argv keys (e.g. 'resolve_only', not 'resolve-only')");
-        }
-    }
-    if (raw.createsTake === true && raw.joinsTake === true) {
-        errors.push("skill.json cannot set both 'createsTake' and 'joinsTake' — createsTake already implies joining");
-    }
-    // Attribution means calling ab-api as a specific user. An `auth: none` skill
-    // never touches the backend and produces no server-side file, so there is
-    // nothing to attribute — the flag would be dead config that reads as working.
-    if ((raw.createsTake === true || raw.joinsTake === true) && resolveAuthMode(raw) === 'none') {
-        errors.push("skill.json declares createsTake/joinsTake but auth='none' — a purely local skill has nothing to attribute");
-    }
-    errors.push(...validateUiHints(raw));
-    if (raw.name && raw.name !== skillId) {
-        errors.push(`skill.json.name='${raw.name}' does not match directory name '${skillId}'`);
-    }
-    if (!normalizeEntry(raw)) {
-        errors.push("skill.json missing 'entry' (or legacy 'scriptPath')");
-    }
-    return errors;
-}
+var m=Object.defineProperty;var r=(e,n)=>m(e,"name",{value:n,configurable:!0});const f=["authoring","consuming","asset","meta"],p=["required","optional","none"];function j(e){return e.auth?e.auth:e.envVars?.includes("PRIV_TOKEN")?"required":"none"}r(j,"resolveAuthMode");const k=["atomic","orchestration","tool"],T=["name","tier","title","description"];function g(e){return e.entry?e.entry:e.scriptPath?{type:"python",scriptPath:e.scriptPath}:null}r(g,"normalizeEntry");function d(e){if(!e||typeof e!="object")return[];const n=e.properties;return!n||typeof n!="object"?[]:Object.keys(n)}r(d,"parameterKeys");function y(e){if(!e||typeof e!="object")return[];const n=e.required;return Array.isArray(n)?n.filter(t=>typeof t=="string"):[]}r(y,"requiredKeys");function v(e){const n=d(e.parameters);if(n.length===0)return null;if(!e.ui){const u=new Set(y(e.parameters));return{primary:n.filter(c=>u.has(c)),advanced:n.filter(c=>!u.has(c)),hidden:[]}}const t=e.ui,i=new Set(n),s=r(u=>(u??[]).filter(c=>i.has(c)),"keep"),l=s(t.primary),o=s(t.advanced),a=s(t.hidden),h=new Set([...l,...o,...a]);return{primary:l,advanced:[...o,...n.filter(u=>!h.has(u))],hidden:a}}r(v,"resolveUiHints");function b(e){if(e.ui==null)return[];const n=[];if(typeof e.ui!="object"||Array.isArray(e.ui))return["skill.json.ui must be an object with primary / advanced / hidden arrays"];const t=new Set(d(e.parameters)),i=new Map;for(const s of["primary","advanced","hidden"]){const l=e.ui[s];if(l!=null){if(!Array.isArray(l)||l.some(o=>typeof o!="string"||o==="")){n.push(`skill.json.ui.${s} must be an array of non-empty parameter names`);continue}for(const o of l){t.has(o)||n.push(`skill.json.ui.${s} references unknown parameter '${o}'`);const a=i.get(o);a?n.push(`skill.json.ui lists '${o}' in both '${a}' and '${s}'`):i.set(o,s)}}}for(const s of y(e.parameters))e.ui.hidden?.includes(s)&&n.push(`skill.json.ui.hidden contains required parameter '${s}' — it could never be filled`);return n}r(b,"validateUiHints");function A(e,n){const t=[];for(const i of T){const s=e[i];(s==null||s==="")&&t.push(`skill.json missing required field '${i}'`)}return e.tier!=null&&!k.includes(e.tier)&&t.push(`skill.json.tier must be one of ${k.join(" | ")}, got '${e.tier}'`),e.category!=null&&!f.includes(e.category)&&t.push(`skill.json.category must be one of ${f.join(" | ")}, got '${e.category}'`),e.auth!=null&&!p.includes(e.auth)&&t.push(`skill.json.auth must be one of ${p.join(" | ")}, got '${e.auth}'`),e.createsTake!=null&&typeof e.createsTake!="boolean"&&t.push(`skill.json.createsTake must be a boolean, got '${String(e.createsTake)}'`),e.joinsTake!=null&&typeof e.joinsTake!="boolean"&&t.push(`skill.json.joinsTake must be a boolean, got '${String(e.joinsTake)}'`),e.createsTakeUnless!=null&&(!Array.isArray(e.createsTakeUnless)||e.createsTakeUnless.some(i=>typeof i!="string"||i==="")?t.push("skill.json.createsTakeUnless must be an array of non-empty argv keys"):e.createsTake!==!0?t.push("skill.json.createsTakeUnless requires createsTake=true"):e.createsTakeUnless.some(i=>i.includes("-"))&&t.push("skill.json.createsTakeUnless entries must be snake_case argv keys (e.g. 'resolve_only', not 'resolve-only')")),e.createsTake===!0&&e.joinsTake===!0&&t.push("skill.json cannot set both 'createsTake' and 'joinsTake' — createsTake already implies joining"),(e.createsTake===!0||e.joinsTake===!0)&&j(e)==="none"&&t.push("skill.json declares createsTake/joinsTake but auth='none' — a purely local skill has nothing to attribute"),t.push(...b(e)),e.name&&e.name!==n&&t.push(`skill.json.name='${e.name}' does not match directory name '${n}'`),g(e)||t.push("skill.json missing 'entry' (or legacy 'scriptPath')"),t}r(A,"validateSkillJson");export{p as AUTH_VALUES,f as CATEGORY_VALUES,T as REQUIRED_SKILL_JSON_FIELDS,k as TIER_VALUES,g as normalizeEntry,j as resolveAuthMode,v as resolveUiHints,A as validateSkillJson};

package/dist/template/args.js

@@ -1,69 +1 @@
-/**
- * Strict argv parser for `remixmate template <sub>`.
- *
- * Unlike src/argv.ts (which is permissive because skill flags are forwarded to
- * Python), these subcommands own their whole surface, so an unknown flag or a
- * stray positional is a usage error (exit 2) rather than something silently
- * ignored — `publish --nmae X` must not publish under the default name.
- */
-import { EXIT, SkillError } from '../errors.js';
-/** Flags every subcommand accepts. */
-export const COMMON_FLAGS = {
-    json: 'bool',
-    help: 'bool',
-    token: 'string',
-    'api-base-url': 'string',
-};
-export function usageError(message) {
-    return new SkillError(`❌ ${message}`, EXIT.USAGE);
-}
-export function parseTemplateArgs(argv, spec, opts) {
-    const all = { ...COMMON_FLAGS, ...spec };
-    const positionals = [];
-    const flags = {};
-    for (let i = 0; i < argv.length; i++) {
-        const token = argv[i];
-        if (token === '-h') {
-            flags.help = true;
-            continue;
-        }
-        if (!token.startsWith('--')) {
-            positionals.push(token);
-            continue;
-        }
-        const eq = token.indexOf('=');
-        const name = token.slice(2, eq > 0 ? eq : undefined);
-        const kind = all[name];
-        if (!kind)
-            throw usageError(`未知参数: --${name}`);
-        if (kind === 'bool') {
-            if (eq > 0)
-                throw usageError(`--${name} 不接受取值`);
-            flags[name] = true;
-            continue;
-        }
-        const value = eq > 0 ? token.slice(eq + 1) : argv[++i];
-        if (value === undefined || (eq < 0 && value.startsWith('--'))) {
-            throw usageError(`--${name} 需要一个取值`);
-        }
-        flags[name] = value;
-    }
-    if (!flags.help && positionals.length > opts.maxPositionals) {
-        throw usageError(`多余的参数: ${positionals.slice(opts.maxPositionals).join(' ')}`);
-    }
-    return { positionals, flags };
-}
-export function flagString(flags, name) {
-    const v = flags[name];
-    return typeof v === 'string' ? v : undefined;
-}
-/** Parse a positive number flag; usage error on anything else. */
-export function flagNumber(flags, name) {
-    const raw = flagString(flags, name);
-    if (raw === undefined)
-        return undefined;
-    const n = Number(raw);
-    if (!Number.isFinite(n) || n <= 0)
-        throw usageError(`--${name} 必须是正数，收到 '${raw}'`);
-    return n;
-}
+var d=Object.defineProperty;var f=(n,e)=>d(n,"name",{value:e,configurable:!0});import{EXIT as g,SkillError as m}from"../errors.js";const x={json:"bool",help:"bool",token:"string","api-base-url":"string"};function l(n){return new m(`❌ ${n}`,g.USAGE)}f(l,"usageError");function k(n,e,t){const s={...x,...e},c=[],u={};for(let a=0;a<n.length;a++){const o=n[a];if(o==="-h"){u.help=!0;continue}if(!o.startsWith("--")){c.push(o);continue}const i=o.indexOf("="),r=o.slice(2,i>0?i:void 0),p=s[r];if(!p)throw l(`未知参数: --${r}`);if(p==="bool"){if(i>0)throw l(`--${r} 不接受取值`);u[r]=!0;continue}const h=i>0?o.slice(i+1):n[++a];if(h===void 0||i<0&&h.startsWith("--"))throw l(`--${r} 需要一个取值`);u[r]=h}if(!u.help&&c.length>t.maxPositionals)throw l(`多余的参数: ${c.slice(t.maxPositionals).join(" ")}`);return{positionals:c,flags:u}}f(k,"parseTemplateArgs");function b(n,e){const t=n[e];return typeof t=="string"?t:void 0}f(b,"flagString");function E(n,e){const t=b(n,e);if(t===void 0)return;const s=Number(t);if(!Number.isFinite(s)||s<=0)throw l(`--${e} 必须是正数，收到 '${t}'`);return s}f(E,"flagNumber");export{x as COMMON_FLAGS,E as flagNumber,b as flagString,k as parseTemplateArgs,l as usageError};

package/dist/template/check.js

@@ -1,30 +1,2 @@
-/**
- * `remixmate template check [name] [--json] [--no-write]`
- *
- * Pure orchestration: the validation itself lives in the starter
- * (`.remixmate/check/index.mjs`, K3), synced from the same schema / security
- * policy sources the platform uses. The cli never carries its own copy — that
- * would be the drift requirement 5.2 exists to prevent.
- */
-import path from 'node:path';
-import { CHECK_ENTRY } from './constants.js';
-import { requireProjectRoot, staleRulesHint } from './project.js';
-import { runProcess } from './proc.js';
-/** Run the starter's check script; resolves to its exit code (0 ok / 1 issues / 2 usage). */
-export async function runCheck(opts = {}) {
-    const root = requireProjectRoot(opts.cwd);
-    // 规则比 cli 对应的 starter 旧：提示 upgrade（stderr，不影响 --json 的最后一行）。
-    // 只提示不阻断 —— 服务端渲染前还会再扫一遍，旧规则最多让问题晚一点暴露。
-    const hint = staleRulesHint(root);
-    if (hint)
-        process.stderr.write(hint + '\n');
-    const args = [path.join(root, CHECK_ENTRY)];
-    if (opts.name)
-        args.push(opts.name);
-    if (opts.json)
-        args.push('--json');
-    if (opts.noWrite)
-        args.push('--no-write');
-    const res = await runProcess(process.execPath, args, { cwd: root, stdio: opts.stdio ?? 'inherit' });
-    return res.code;
-}
+var n=Object.defineProperty;var i=(r,o)=>n(r,"name",{value:o,configurable:!0});import s from"node:path";import{CHECK_ENTRY as c}from"./constants.js";import{requireProjectRoot as m,staleRulesHint as a}from"./project.js";import{runProcess as f}from"./proc.js";async function C(r={}){const o=m(r.cwd),t=a(o);t&&process.stderr.write(t+`
+`);const e=[s.join(o,c)];return r.name&&e.push(r.name),r.json&&e.push("--json"),r.noWrite&&e.push("--no-write"),(await f(process.execPath,e,{cwd:o,stdio:r.stdio??"inherit"})).code}i(C,"runCheck");export{C as runCheck};

package/dist/template/commands.js

@@ -1,163 +1,34 @@
-/**
- * `remixmate template <init|check|preview|publish|list>` dispatcher.
- *
- * Exit codes follow the cli contract (errors.ts): 2 usage, 4 credentials,
- * 5 backend unreachable; `check` propagates the starter script's own code.
- * With --json a failure also ends stdout with `{"ok":false,...}` so hosts
- * parsing the last line always get an object.
- */
-import { cleanDiagnosticText } from '../diagnostics.js';
-import { EXIT, SkillError } from '../errors.js';
-import { flagNumber, flagString, parseTemplateArgs, usageError } from './args.js';
-import { runCheck } from './check.js';
-import { runUpgrade } from './upgrade.js';
-import { STARTER_PACKAGE, STARTER_VERSION } from './constants.js';
-import { runInit } from './init.js';
-import { runList } from './list.js';
-import { runPreview } from './preview.js';
-import { runPublish } from './publish.js';
-export const TEMPLATE_VERB = 'template';
-export const TEMPLATE_SUBCOMMANDS = ['init', 'check', 'preview', 'publish', 'list', 'upgrade'];
-export const SUB_SPECS = {
-    init: {
-        flags: { force: 'bool', 'skip-install': 'bool' },
-        maxPositionals: 1,
-        usage: 'remixmate template init <dir> [--force] [--skip-install] [--json]\n' +
-            `  从 ${STARTER_PACKAGE}@${STARTER_VERSION} 创建模板工程并安装依赖（无需登录）。\n` +
-            '  目标目录非空时拒绝，除非 --force。--skip-install 只解压不执行 npm install。\n',
-    },
-    check: {
-        flags: { 'no-write': 'bool' },
-        maxPositionals: 1,
-        usage: 'remixmate template check [name] [--json] [--no-write]\n' +
-            '  在模板工程内运行本地校验（类型、schema、安全策略、props 契约、core 导出）。\n' +
-            '  不传 name 校验 templates/ 下全部模板；默认刷新 coreVersion/coreExports，--no-write 只检查。\n',
-    },
-    preview: {
-        flags: { 'props-json': 'string', 'duration-sec': 'string', 'composition-id': 'string', 'timeout-sec': 'string' },
-        maxPositionals: 1,
-        usage: 'remixmate template preview <name> [--props-json JSON] [--duration-sec N] [--composition-id ID] [--timeout-sec N] [--json]\n' +
-            '  先 check，再把模板提交到远程渲染器出预览 mp4（需登录）。\n' +
-            '  样例数据取自模板的 dsl-example.json，可用 --props-json 覆盖（传数组 = 每个元素一页）。\n' +
-            '  预览上限：长边 1280、短边 720、总时长 60 秒。\n',
-    },
-    publish: {
-        flags: { name: 'string', 'dry-run': 'bool' },
-        maxPositionals: 1,
-        usage: 'remixmate template publish <name> [--name <displayName>] [--dry-run] [--json]\n' +
-            '  先 check 与 core 预检，再发布为你的私有模板（需登录）。\n' +
-            '  首次发布生成 templateKey 并写入 templates/<name>/.remixmate.json，之后重复发布即更新。\n',
-    },
-    list: {
-        flags: {},
-        maxPositionals: 0,
-        usage: 'remixmate template list [--json]\n  列出你发布的私有模板（需登录）。\n',
-    },
-    upgrade: {
-        flags: { 'dry-run': 'bool', 'with-docs': 'bool', force: 'bool' },
-        maxPositionals: 0,
-        usage: 'remixmate template upgrade [--dry-run] [--with-docs] [--force] [--json]\n' +
-            `  把工程的本地校验规则（.remixmate/）更新到 ${STARTER_PACKAGE}@${STARTER_VERSION}（无需登录）。\n` +
-            '  不改动 templates/、src/、examples/、package.json；--with-docs 同时刷新 AGENTS.md / CLAUDE.md（旧文件存为 *.orig）。\n',
-    },
-};
-export function templateUsage() {
-    return ('Usage: remixmate template <command> [options]\n\n' +
-        'Commands:\n' +
-        '  init <dir>         创建模板工程（无需登录）\n' +
-        '  check [name]       本地校验（无需登录）\n' +
-        '  preview <name>     远程渲染预览 mp4\n' +
-        '  publish <name>     发布为私有模板\n' +
-        '  list               列出我的私有模板\n' +
-        '  upgrade            更新工程的本地校验规则（无需登录）\n\n' +
-        'Common options: --json  --token <PrivToken>  --api-base-url <url>\n' +
-        '环境变量：AB_RENDER_URL（渲染服务地址）、REMIXMATE_STARTER_TARBALL（init 使用本地 starter 包）\n' +
-        '运行 remixmate template <command> --help 查看子命令说明。\n');
-}
-export function parseTemplateCommand(argv) {
-    const [sub, ...rest] = argv;
-    if (!sub || sub === '--help' || sub === '-h' || sub === 'help') {
-        return { sub: 'help', args: { positionals: [], flags: {} } };
-    }
-    if (!TEMPLATE_SUBCOMMANDS.includes(sub)) {
-        throw usageError(`未知子命令: template ${sub}（可选：${TEMPLATE_SUBCOMMANDS.join(' | ')}）`);
-    }
-    const spec = SUB_SPECS[sub];
-    return { sub: sub, args: parseTemplateArgs(rest, spec.flags, { maxPositionals: spec.maxPositionals }) };
-}
-async function dispatch(sub, args) {
-    const { flags, positionals } = args;
-    const json = flags.json === true;
-    const token = flagString(flags, 'token');
-    const apiBaseUrl = flagString(flags, 'api-base-url');
-    switch (sub) {
-        case 'init':
-            if (!positionals[0])
-                throw usageError('缺少目标目录：remixmate template init <dir>');
-            await runInit({ dir: positionals[0], force: flags.force === true, json, skipInstall: flags['skip-install'] === true });
-            return EXIT.OK;
-        case 'check':
-            return runCheck({ name: positionals[0], json, noWrite: flags['no-write'] === true });
-        case 'preview':
-            await runPreview({
-                name: positionals[0],
-                propsJson: flagString(flags, 'props-json'),
-                durationSec: flagNumber(flags, 'duration-sec'),
-                compositionId: flagString(flags, 'composition-id'),
-                timeoutSec: flagNumber(flags, 'timeout-sec'),
-                json,
-                token,
-                apiBaseUrl,
-            });
-            return EXIT.OK;
-        case 'publish':
-            await runPublish({
-                name: positionals[0],
-                displayName: flagString(flags, 'name'),
-                dryRun: flags['dry-run'] === true,
-                json,
-                token,
-                apiBaseUrl,
-            });
-            return EXIT.OK;
-        case 'list':
-            await runList({ json, token, apiBaseUrl });
-            return EXIT.OK;
-        case 'upgrade':
-            await runUpgrade({
-                dryRun: flags['dry-run'] === true,
-                withDocs: flags['with-docs'] === true,
-                force: flags.force === true,
-                json,
-            });
-            return EXIT.OK;
-    }
-}
-export async function runTemplateCommand(argv) {
-    const json = argv.includes('--json');
-    let sub;
-    try {
-        const parsed = parseTemplateCommand(argv);
-        sub = parsed.sub;
-        if (sub === 'help') {
-            process.stdout.write(templateUsage());
-            return EXIT.OK;
-        }
-        if (parsed.args.flags.help) {
-            process.stdout.write('Usage: ' + SUB_SPECS[sub].usage);
-            return EXIT.OK;
-        }
-        return await dispatch(sub, parsed.args);
-    }
-    catch (err) {
-        const code = err instanceof SkillError ? err.exitCode : EXIT.ERROR;
-        const message = err instanceof SkillError ? err.message : `❌ unexpected error: ${err.stack ?? String(err)}`;
-        process.stderr.write(cleanDiagnosticText(message, 8192) + '\n');
-        if (code === EXIT.USAGE && sub && sub !== 'help')
-            process.stderr.write('Usage: ' + SUB_SPECS[sub].usage);
-        if (json) {
-            process.stdout.write(JSON.stringify({ ok: false, exitCode: code, error: cleanDiagnosticText(message.replace(/^❌\s*/, ''), 2048) }) + '\n');
-        }
-        return code;
-    }
-}
+var w=Object.defineProperty;var a=(o,r)=>w(o,"name",{value:r,configurable:!0});import{cleanDiagnosticText as l}from"../diagnostics.js";import{EXIT as n,SkillError as u}from"../errors.js";import{flagNumber as d,flagString as m,parseTemplateArgs as E,usageError as g}from"./args.js";import{runCheck as b}from"./check.js";import{runUpgrade as k}from"./upgrade.js";import{STARTER_PACKAGE as f,STARTER_VERSION as h}from"./constants.js";import{runInit as j}from"./init.js";import{runList as T}from"./list.js";import{runPreview as R}from"./preview.js";import{runPublish as S}from"./publish.js";const D="template",x=["init","check","preview","publish","list","upgrade"],c={init:{flags:{force:"bool","skip-install":"bool"},maxPositionals:1,usage:`remixmate template init <dir> [--force] [--skip-install] [--json]
+  从 ${f}@${h} 创建模板工程并安装依赖（无需登录）。
+  目标目录非空时拒绝，除非 --force。--skip-install 只解压不执行 npm install。
+`},check:{flags:{"no-write":"bool"},maxPositionals:1,usage:`remixmate template check [name] [--json] [--no-write]
+  在模板工程内运行本地校验（类型、schema、安全策略、props 契约、core 导出）。
+  不传 name 校验 templates/ 下全部模板；默认刷新 coreVersion/coreExports，--no-write 只检查。
+`},preview:{flags:{"props-json":"string","duration-sec":"string","composition-id":"string","timeout-sec":"string"},maxPositionals:1,usage:`remixmate template preview <name> [--props-json JSON] [--duration-sec N] [--composition-id ID] [--timeout-sec N] [--json]
+  先 check，再把模板提交到远程渲染器出预览 mp4（需登录）。
+  样例数据取自模板的 dsl-example.json，可用 --props-json 覆盖（传数组 = 每个元素一页）。
+  预览上限：长边 1280、短边 720、总时长 60 秒。
+`},publish:{flags:{name:"string","dry-run":"bool"},maxPositionals:1,usage:`remixmate template publish <name> [--name <displayName>] [--dry-run] [--json]
+  先 check 与 core 预检，再发布为你的私有模板（需登录）。
+  首次发布生成 templateKey 并写入 templates/<name>/.remixmate.json，之后重复发布即更新。
+`},list:{flags:{},maxPositionals:0,usage:`remixmate template list [--json]
+  列出你发布的私有模板（需登录）。
+`},upgrade:{flags:{"dry-run":"bool","with-docs":"bool",force:"bool"},maxPositionals:0,usage:`remixmate template upgrade [--dry-run] [--with-docs] [--force] [--json]
+  把工程的本地校验规则（.remixmate/）更新到 ${f}@${h}（无需登录）。
+  不改动 templates/、src/、examples/、package.json；--with-docs 同时刷新 AGENTS.md / CLAUDE.md（旧文件存为 *.orig）。
+`}};function A(){return`Usage: remixmate template <command> [options]
+
+Commands:
+  init <dir>         创建模板工程（无需登录）
+  check [name]       本地校验（无需登录）
+  preview <name>     远程渲染预览 mp4
+  publish <name>     发布为私有模板
+  list               列出我的私有模板
+  upgrade            更新工程的本地校验规则（无需登录）
+
+Common options: --json  --token <PrivToken>  --api-base-url <url>
+环境变量：AB_RENDER_URL（渲染服务地址）、REMIXMATE_STARTER_TARBALL（init 使用本地 starter 包）
+运行 remixmate template <command> --help 查看子命令说明。
+`}a(A,"templateUsage");function y(o){const[r,...e]=o;if(!r||r==="--help"||r==="-h"||r==="help")return{sub:"help",args:{positionals:[],flags:{}}};if(!x.includes(r))throw g(`未知子命令: template ${r}（可选：${x.join(" | ")}）`);const t=c[r];return{sub:r,args:E(e,t.flags,{maxPositionals:t.maxPositionals})}}a(y,"parseTemplateCommand");async function P(o,r){const{flags:e,positionals:t}=r,s=e.json===!0,i=m(e,"token"),p=m(e,"api-base-url");switch(o){case"init":if(!t[0])throw g("缺少目标目录：remixmate template init <dir>");return await j({dir:t[0],force:e.force===!0,json:s,skipInstall:e["skip-install"]===!0}),n.OK;case"check":return b({name:t[0],json:s,noWrite:e["no-write"]===!0});case"preview":return await R({name:t[0],propsJson:m(e,"props-json"),durationSec:d(e,"duration-sec"),compositionId:m(e,"composition-id"),timeoutSec:d(e,"timeout-sec"),json:s,token:i,apiBaseUrl:p}),n.OK;case"publish":return await S({name:t[0],displayName:m(e,"name"),dryRun:e["dry-run"]===!0,json:s,token:i,apiBaseUrl:p}),n.OK;case"list":return await T({json:s,token:i,apiBaseUrl:p}),n.OK;case"upgrade":return await k({dryRun:e["dry-run"]===!0,withDocs:e["with-docs"]===!0,force:e.force===!0,json:s}),n.OK}}a(P,"dispatch");async function M(o){const r=o.includes("--json");let e;try{const t=y(o);return e=t.sub,e==="help"?(process.stdout.write(A()),n.OK):t.args.flags.help?(process.stdout.write("Usage: "+c[e].usage),n.OK):await P(e,t.args)}catch(t){const s=t instanceof u?t.exitCode:n.ERROR,i=t instanceof u?t.message:`❌ unexpected error: ${t.stack??String(t)}`;return process.stderr.write(l(i,8192)+`
+`),s===n.USAGE&&e&&e!=="help"&&process.stderr.write("Usage: "+c[e].usage),r&&process.stdout.write(JSON.stringify({ok:!1,exitCode:s,error:l(i.replace(/^❌\s*/,""),2048)})+`
+`),s}}a(M,"runTemplateCommand");export{c as SUB_SPECS,x as TEMPLATE_SUBCOMMANDS,D as TEMPLATE_VERB,y as parseTemplateCommand,M as runTemplateCommand,A as templateUsage};

package/dist/template/constants.js

@@ -1,46 +1 @@
-/**
- * Contract constants for `remixmate template` (design §11 K1 / K5 / K6).
- *
- * STARTER_VERSION pins the exact starter release this cli was tested against.
- * Bumping it is a deliberate cli release, never a range — `init` must produce
- * the same project on every machine for a given cli version.
- */
-export const STARTER_PACKAGE = '@remixmate/template-starter';
-/**
- * 一个 starter 版本 = 一套本地校验规则版本（.remixmate/）。规则更新的发布顺序：
- * template-library `pnpm publish:sdk --publish` 发新 starter → 改这里 → cli 发版。
- * publish:sdk 会比对这个常量，对不上就拒发。
- */
-export const STARTER_VERSION = '0.2.0';
-/**
- * 工程里记录规则版本的文件（starter ≥0.2.0 构建时写入；`template upgrade` 也会写）。
- * 0.1.0 工程没有它，回落读 package.json 的 version（init 时整份复制自 starter）。
- */
-export const RULES_VERSION_FILE = '.remixmate/version.json';
-/** `template upgrade` 只替换这个目录；用户的 templates/、src/ 等一律不动。 */
-export const RULES_DIR = '.remixmate';
-/** `template upgrade --with-docs` 额外刷新的 agent 指南（旧文件备份为 *.orig）。 */
-export const DOC_FILES = ['AGENTS.md', 'CLAUDE.md'];
-/** Local tarball override (testing a starter before it is published). */
-export const STARTER_TARBALL_ENV = 'REMIXMATE_STARTER_TARBALL';
-/** Marker file that identifies a starter project root (K3). */
-export const CHECK_ENTRY = '.remixmate/check/index.mjs';
-/** Per-template identity file written by publish (K4). */
-export const IDENTITY_FILE = '.remixmate.json';
-export const DEFAULT_RENDER_BASE_URL = 'https://api-render.remixmate.ai';
-/** Draft preview limits enforced by ab-render /renderDraft (K5). */
-export const PREVIEW_MAX_LONG_EDGE = 1280;
-export const PREVIEW_MAX_SHORT_EDGE = 720;
-export const PREVIEW_MAX_SECONDS = 60;
-/**
- * Same list as template-library `publish-private.mjs` TAR_EXCLUDES. `dsl-example.json`
- * is deliberately kept: it is the reference DSL the registry ships with the template.
- */
-export const TAR_EXCLUDES = [
-    '__pycache__',
-    'node_modules',
-    'dist',
-    '.DS_Store',
-    '*.test.*',
-    '*.spec.*',
-];
+const t="@remixmate/template-starter",e="0.2.0",E=".remixmate/version.json",o=".remixmate",_=["AGENTS.md","CLAUDE.md"],r="REMIXMATE_STARTER_TARBALL",R=".remixmate/check/index.mjs",s=".remixmate.json",x="https://api-render.remixmate.ai",n=1280,A=720,c=60,p=["__pycache__","node_modules","dist",".DS_Store","*.test.*","*.spec.*"];export{R as CHECK_ENTRY,x as DEFAULT_RENDER_BASE_URL,_ as DOC_FILES,s as IDENTITY_FILE,n as PREVIEW_MAX_LONG_EDGE,c as PREVIEW_MAX_SECONDS,A as PREVIEW_MAX_SHORT_EDGE,o as RULES_DIR,E as RULES_VERSION_FILE,t as STARTER_PACKAGE,r as STARTER_TARBALL_ENV,e as STARTER_VERSION,p as TAR_EXCLUDES};