@ttmg/cli 0.4.6-agent-beta.1 → 0.4.6-agent-beta.2

package/README.md

@@ -29,6 +29,16 @@ npm install @ttmg/cli --save-dev
 
 #### Login 登录
 
+To open an existing Vibe task in the system browser, use the `pageUrl` from its
+`waiting_authorization` event: `ttmg auth open --page-url <pageUrl> --format json`.
+Keep the upload process running; this command creates no task and reports only
+`open_requested`, not authorization success. It runs on the CLI computer.
+
+Skill 如需手动打开网页授权，读取上传进程 `waiting_authorization` 事件的 `pageUrl`，
+执行 `ttmg auth open --page-url <pageUrl> --format json`。保持原上传进程运行；
+新命令在 CLI 所在电脑打开系统浏览器，不新建任务，`open_requested` 不代表授权成功。
+该功能需使用包含新命令的本地构建；已发布旧版不会因此自动增加命令。
+
 The experimental `upload --vibe` local prototype does not require platform login.
 Use `ttmg upload --vibe --mock` for the integration trial. No environment setup:
 task creation/polling use the built-in PPE lane; authorization and uploads are
@@ -369,12 +379,17 @@ specified with `--evidence-dir`. Screenshot output prints the saved file path;
 use `--output <path>` for a custom destination. Log follow ends after 30 seconds
 by default without stopping preview; the owner terminal streams logs until you
 stop preview with Ctrl+C. Both logs and screenshots require a compatible client.
+Keep custom evidence outside the project or under its root `.ttmg` directory;
+other in-project destinations fail before the session starts. CLI state is
+excluded from game builds, package-size checks and directory uploads.
 快捷命令自动找到当前工程（含子目录）唯一的运行中真机预览会话；多个会话时列出
 候选，需用 `--session <session-id>` 明确选择，不会自动连接任意设备。
 自定义证据目录使用 `--sessions-dir <path>`，可以指定会话集合目录或启动时的
 `--evidence-dir`。截图完成后输出本地保存路径，支持 `--output <path>`。
 `logs --follow` 默认读取 30 秒后退出，不停止预览；主终端持续输出日志，Ctrl+C
 停止预览。日志和截图均需要客户端支持对应协议。
+自定义证据目录须位于工程外或工程根目录的 `.ttmg` 下；其他工程内目录会在启动前
+被拒绝。CLI 状态目录不进入游戏构建、包体积检查和目录上传。
 
 For automation, use `dev logs --format json`, `dev logs --follow --format ndjson`,
 or `dev screenshot --format json`. Successful results reuse the existing

package/dist/index.js

@@ -38,6 +38,7 @@ var https = require('https');
 var dns = require('dns');
 var boxen = require('boxen');
 var semver = require('semver');
+var path$1 = require('node:path');
 var glob = require('glob');
 var got = require('got');
 var ttmgPack = require('ttmg-pack');
@@ -45,7 +46,6 @@ var expressStaticGzip = require('express-static-gzip');
 var fileUpload = require('express-fileupload');
 var crypto$1 = require('node:crypto');
 var fs$1 = require('node:fs');
-var path$1 = require('node:path');
 var zlib = require('zlib');
 var promises$1 = require('fs/promises');
 var os$1 = require('node:os');
@@ -80,9 +80,9 @@ var http__namespace = /*#__PURE__*/_interopNamespaceDefault(http);
 var net__namespace = /*#__PURE__*/_interopNamespaceDefault(net);
 var require$$1__namespace = /*#__PURE__*/_interopNamespaceDefault(require$$1$1);
 var dns__namespace = /*#__PURE__*/_interopNamespaceDefault(dns);
+var path__namespace$1 = /*#__PURE__*/_interopNamespaceDefault(path$1);
 var glob__namespace = /*#__PURE__*/_interopNamespaceDefault(glob);
 var fs__namespace$1 = /*#__PURE__*/_interopNamespaceDefault(fs$1);
-var path__namespace$1 = /*#__PURE__*/_interopNamespaceDefault(path$1);
 
 async function openUrl(url) {
     const { launch } = await import('chrome-launcher');
@@ -7231,6 +7231,13 @@ const messages = {
         'cli.command.login.password': 'Developer account password (implicit mode)',
         'cli.command.logout.desc': 'Logout and clear local user data',
         'cli.command.auth.desc': 'Inspect local authentication state',
+        'cli.command.auth.open.desc': 'Open an existing Vibe task authorization page in the system browser',
+        'cli.command.auth.open.pageUrl': 'Local pageUrl returned by the running Vibe upload command',
+        'cli.command.auth.open.requested': 'Browser open requested. Complete authorization there; the existing upload process continues polling.',
+        'cli.command.auth.open.invalidPage': 'Pass the local pageUrl from the running Vibe upload command, not the platform URL.',
+        'cli.command.auth.open.unavailable': 'Authorization page is unavailable, expired, or no longer waiting. Check the existing upload process; no new task was created.',
+        'cli.command.auth.open.invalidFormat': 'Use text, json, or ndjson output.',
+        'cli.command.auth.open.failed': 'Could not open the system browser. Retry this command on the CLI computer.',
         'cli.command.auth.status.desc': 'Return whether the local developer session is reusable',
         'cli.command.auth.status.format': 'Output format: text | json',
         'cli.command.auth.status.requireAuth': 'Exit non-zero when no reusable local session exists',
@@ -7258,7 +7265,8 @@ const messages = {
         'cli.command.dev.format': 'Session output format: text | json',
         'cli.command.dev.events': 'Lifecycle event stream: none | ndjson',
         'cli.command.dev.noOpen': 'Do not automatically open the IDE or scan page',
-        'cli.command.dev.evidenceDir': 'Session evidence output directory',
+        'cli.command.dev.evidenceDir': 'Session evidence output directory (outside the project or under its .ttmg directory)',
+        'dev.evidence.unsafeDirectory': 'Keep session evidence outside the game project or under its root .ttmg directory so it cannot enter game packages.',
         'dev.logs.recordModeRequired': '--record-logs requires --mode client-preview.',
         'dev.logs.archiveFailed': 'Local log recording stopped [DEV_LOG_ARCHIVE_WRITE_FAILED]. Live debugging is still available.',
         'cli.command.dev.recordLogs': 'Save redacted Runtime logs locally (client-preview only; bounded retention)',
@@ -7635,6 +7643,13 @@ const messages = {
         'cli.command.login.password': '开发者账号密码（implicit 模式）',
         'cli.command.logout.desc': '退出登录并清除本地用户信息',
         'cli.command.auth.desc': '查看本地登录状态',
+        'cli.command.auth.open.desc': '在系统浏览器打开已有 Vibe 任务的授权页',
+        'cli.command.auth.open.pageUrl': '正在运行的 Vibe 上传命令返回的本地 pageUrl',
+        'cli.command.auth.open.requested': '已请求浏览器打开授权页。请在页面完成授权，原上传进程继续轮询。',
+        'cli.command.auth.open.invalidPage': '请传入正在运行的 Vibe 上传命令返回的本地 pageUrl，不是平台授权链接。',
+        'cli.command.auth.open.unavailable': '授权页不可用、已过期或已不在等待授权。请查看原上传进程状态；未新建任务。',
+        'cli.command.auth.open.invalidFormat': '输出格式请使用 text、json 或 ndjson。',
+        'cli.command.auth.open.failed': '无法打开系统浏览器，请在 CLI 所在电脑重试此命令。',
         'cli.command.auth.status.desc': '返回本地开发者会话是否可复用',
         'cli.command.auth.status.format': '输出格式：text | json',
         'cli.command.auth.status.requireAuth': '没有可复用本地会话时以非零状态退出',
@@ -7662,7 +7677,8 @@ const messages = {
         'cli.command.dev.format': '会话输出格式：text | json',
         'cli.command.dev.events': '生命周期事件流：none | ndjson',
         'cli.command.dev.noOpen': '不自动打开 IDE 或扫码网页',
-        'cli.command.dev.evidenceDir': '会话证据输出目录',
+        'cli.command.dev.evidenceDir': '会话证据输出目录（工程外或工程根目录的 .ttmg 下）',
+        'dev.evidence.unsafeDirectory': '请将会话证据放在游戏工程外，或工程根目录的 .ttmg 下，避免日志、截图和构建输出进入游戏包。',
         'dev.logs.recordModeRequired': '--record-logs 仅支持 --mode client-preview。',
         'dev.logs.archiveFailed': '本地日志留存失败 [DEV_LOG_ARCHIVE_WRITE_FAILED]，已停止留存；实时调试仍可继续。',
         'cli.command.dev.recordLogs': '将脱敏后的 Runtime 日志保存在本地（仅 client-preview，有容量上限）',
@@ -8606,6 +8622,8 @@ const zipCwdToBuffer = (customIgnores = [], targetDir = process.cwd()) => {
         // 推到设备，体积虚胖外，host 在 fallback 路径下还可能错误命中未插桩 wasm。
         // 同时保留裸名 `TTMG_TEMP_DIR` 以兜底空目录场景。
         const defaultIgnores = [
+            '.ttmg',
+            '.ttmg/**',
             'node_modules/**',
             '.git/**',
             '.agents/**',
@@ -16288,7 +16306,7 @@ async function authStatus(options = {}) {
     return result;
 }
 
-var version = "0.4.6-agent-beta.1";
+var version = "0.4.6-agent-beta.2";
 var engines = {
 	node: ">=20.19.1 <21 || >=22"
 };
@@ -16380,6 +16398,18 @@ function getCapabilities() {
                 available: true,
                 platformWrite: false,
             },
+            vibeAuthOpen: {
+                command: 'ttmg auth open --page-url <pageUrl> --format json',
+                available: true,
+                schemaVersion: '1',
+                platformWrite: false,
+                requiresRunningUpload: true,
+                createsTask: false,
+                outputContainsLandingCredentials: false,
+                target: 'system-browser',
+                successStatus: 'open_requested',
+                provesAuthorization: false,
+            },
             loginImplicit: {
                 command: 'ttmg login --implicit',
                 available: true,
@@ -16511,6 +16541,8 @@ function getCapabilities() {
                     verifiedOnDevice: false,
                 },
                 sessionLogs: {
+                    evidenceDirectoryLocations: ['outside-project', 'project-root-.ttmg'],
+                    unsafeEvidenceDirectoryError: 'DEV_EVIDENCE_DIRECTORY_UNSAFE',
                     sources: ['live', 'archive'],
                     defaultSource: 'live',
                     runtimeSessionOption: '--runtime-session',
@@ -17054,6 +17086,13 @@ withVerboseOption(program.command('logout').description(t('cli.command.logout.de
     await logout();
 });
 const authCmd = program.command('auth').description(t('cli.command.auth.desc'));
+withVerboseOption(authCmd.command('open')
+    .description(t('cli.command.auth.open.desc'))
+    .option('--page-url <url>', t('cli.command.auth.open.pageUrl'))
+    .option('--format <format>', t('cli.command.upload.format'), 'text')).action(async (cmd) => {
+    const { vibeAuthOpen } = await Promise.resolve().then(function () { return authOpen; });
+    await vibeAuthOpen(cmd);
+});
 withVerboseOption(authCmd
     .command('status')
     .description(t('cli.command.auth.status.desc'))
@@ -17539,6 +17578,115 @@ class VibeError extends Error {
     }
 }
 
+// Only the backend-owned authorization page can be a browser redirect target.
+// Never return its import_token to Skill stdout or put it in a CLI argument.
+function browserLandingUrl(value) {
+    if (typeof value !== 'string' || value.length > 16384 || /[\r\n]/.test(value))
+        return;
+    try {
+        const url = new URL(value);
+        if (url.origin !== 'https://developers.tiktok.com' || url.username || url.password || url.hash ||
+            url.pathname !== '/portal_h5/minis_import' ||
+            url.searchParams.getAll('task_id').length !== 1 ||
+            url.searchParams.getAll('import_token').length !== 1 ||
+            !/^\d{1,19}$/.test(url.searchParams.get('task_id') || '') ||
+            !url.searchParams.get('import_token'))
+            return;
+        return url.href;
+    }
+    catch {
+        return;
+    }
+}
+function authorizationOpenUrl(pageUrl) {
+    try {
+        if (typeof pageUrl !== 'string')
+            throw new Error();
+        const url = new URL(pageUrl);
+        if (url.protocol !== 'http:' || url.hostname !== '127.0.0.1' || !url.port ||
+            url.username || url.password || url.search || url.hash ||
+            !/^\/[a-f0-9]{48}$/.test(url.pathname))
+            throw new Error();
+        return `${url.origin}${url.pathname}/authorize`;
+    }
+    catch {
+        throw new VibeError('VIBE_INVALID_PAGE_URL');
+    }
+}
+function checkAuthorizationPage(url) {
+    return new Promise((resolve, reject) => {
+        // HEAD never follows the redirect or requests the platform. The browser GET
+        // rechecks readiness, covering state changes between the probe and opening.
+        const req = http.request(url, { method: 'HEAD' }, res => {
+            res.resume();
+            if (res.statusCode === 204 && res.headers['x-ttmg-authorization'] === 'ready')
+                resolve();
+            else
+                reject(new VibeError('VIBE_AUTH_PAGE_UNAVAILABLE'));
+        });
+        const timer = setTimeout(() => req.destroy(new Error('timeout')), 5000);
+        req.once('close', () => clearTimeout(timer));
+        req.once('error', () => reject(new VibeError('VIBE_AUTH_PAGE_UNAVAILABLE')));
+        req.end();
+    });
+}
+async function executeVibeAuthOpen(options, deps = { open: async (url) => {
+        const child = await (await import('open')).default(url);
+        return new Promise((resolve, reject) => {
+            child.once('error', reject);
+            if (child.pid)
+                resolve(child);
+            else
+                child.once('spawn', () => resolve(child));
+        });
+    } }) {
+    const result = {
+        schemaVersion: '1', command: 'auth open', operationId: `auth_open_${crypto.randomUUID()}`,
+        status: 'failed', platformWrite: false, browserOpenRequested: false,
+        errorCode: null, error: null,
+    };
+    try {
+        if (!['text', 'json', 'ndjson'].includes(options.format || 'text'))
+            throw new VibeError('VIBE_INVALID_FORMAT');
+        const url = authorizationOpenUrl(options.pageUrl);
+        await checkAuthorizationPage(url);
+        try {
+            await deps.open(url);
+        }
+        catch {
+            throw new VibeError('VIBE_BROWSER_OPEN_FAILED');
+        }
+        result.status = 'open_requested';
+        result.browserOpenRequested = true;
+    }
+    catch (error) {
+        result.errorCode = error instanceof VibeError ? error.code : 'VIBE_BROWSER_OPEN_FAILED';
+        const key = result.errorCode === 'VIBE_INVALID_PAGE_URL' ? 'invalidPage'
+            : result.errorCode === 'VIBE_AUTH_PAGE_UNAVAILABLE' ? 'unavailable'
+                : result.errorCode === 'VIBE_INVALID_FORMAT' ? 'invalidFormat' : 'failed';
+        result.error = t(`cli.command.auth.open.${key}`);
+    }
+    return result;
+}
+async function vibeAuthOpen(options) {
+    const result = await executeVibeAuthOpen(options);
+    if (options.format === 'json' || options.format === 'ndjson')
+        console.log(JSON.stringify(result));
+    else
+        console.log(result.error || t('cli.command.auth.open.requested'));
+    if (result.errorCode)
+        process.exitCode = 1;
+    return result;
+}
+
+var authOpen = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    authorizationOpenUrl: authorizationOpenUrl,
+    browserLandingUrl: browserLandingUrl,
+    executeVibeAuthOpen: executeVibeAuthOpen,
+    vibeAuthOpen: vibeAuthOpen
+});
+
 // BFF IDL: feat-minis-import. PPE task creation/polling only; no production adapter.
 const prefix = '/bff/app_info/minis_import/';
 const MINIS_IMPORT_PATHS = {
@@ -18427,9 +18575,27 @@ async function renderVibePage(input) {
 async function createVibePageServer() {
     const route = `/${crypto.randomBytes(24).toString('hex')}`;
     let html = 'Starting…';
+    let landingUrl;
     const server = http.createServer((req, res) => {
         const address = server.address();
         const host = address && typeof address !== 'string' ? `127.0.0.1:${address.port}` : '';
+        if (req.url === `${route}/authorize` && req.headers.host === host &&
+            ['GET', 'HEAD'].includes(req.method || '') &&
+            (!req.headers.origin || req.headers.origin === `http://${host}`) &&
+            req.headers['sec-fetch-site'] !== 'cross-site') {
+            const headers = { 'Cache-Control': 'no-store', 'Referrer-Policy': 'no-referrer' };
+            if (!landingUrl) {
+                res.writeHead(410, { ...headers, 'Content-Type': 'text/plain; charset=utf-8' });
+                res.end('Authorization is no longer available. Return to the upload process.');
+            }
+            else if (req.method === 'HEAD') {
+                res.writeHead(204, { ...headers, 'X-TTMG-Authorization': 'ready' }).end();
+            }
+            else {
+                res.writeHead(302, { ...headers, Location: landingUrl }).end();
+            }
+            return;
+        }
         if (req.method !== 'GET' ||
             req.url !== route ||
             req.headers.host !== host) {
@@ -18452,8 +18618,9 @@ async function createVibePageServer() {
     const address = server.address();
     return {
         url: `http://127.0.0.1:${address.port}${route}`,
-        update: (value) => {
+        update: (value, authorization) => {
             html = value;
+            landingUrl = browserLandingUrl(authorization);
         },
         close: () => server.close(),
     };
@@ -18475,7 +18642,7 @@ async function runVibePageWorker() {
         if (message?.type === 'render' &&
             typeof message.html === 'string' &&
             message.html.length < VIBE_PAGE_HTML_LIMIT) {
-            server.update(message.html);
+            server.update(message.html, message.browserLandingUrl);
             process.send?.({ type: 'rendered', id: message.id });
         }
         if (message?.type === 'close') {
@@ -18523,7 +18690,8 @@ async function startVibePage() {
                 const html = await renderVibePage(input);
                 const current = ++id;
                 const ack = receive(m => m?.type === 'rendered' && m.id === current);
-                child.send({ type: 'render', id: current, html }, error => {
+                const landingUrl = input.phase === 'binding' ? browserLandingUrl(input.browserLandingUrl) : undefined;
+                child.send({ type: 'render', id: current, html, browserLandingUrl: landingUrl }, error => {
                     if (error)
                         child.emit('error', error);
                 });
@@ -18802,12 +18970,15 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
             simulation: result.simulation,
             message: bindingMessage,
             qrUrl: authorizationUrl,
+            browserLandingUrl: task.landingUrl,
             purpose: 'authorization_binding',
         });
         ensureActive();
         emit('waiting_authorization', {
             message: bindingMessage,
             pageUrl: page.url,
+            authorizationOpenCommand: browserLandingUrl(task.landingUrl)
+                ? `ttmg auth open --page-url ${page.url} --format json` : undefined,
             qrPurpose: 'authorization_binding',
             nextAction: result.simulation ? 'wait' : 'scan_qr',
             readyForInput: false,
@@ -19913,7 +20084,12 @@ async function watch(options = {}) {
         /**
          * 忽略 wasmcode/cache 目录
          */
-        ignored: /(^|[\/\\])(\.git|\.ttmg|node_modules|__TTMG_TEMP__)/,
+        ignored: file => {
+            if (/(^|[\/\\])(\.git|node_modules|__TTMG_TEMP__)/.test(file))
+                return true;
+            const relative = path$1.relative(process.cwd(), file);
+            return relative === '.ttmg' || relative.startsWith(`.ttmg${path$1.sep}`);
+        },
         ignoreInitial: true, // 忽略初始添加事件
         persistent: true,
         awaitWriteFinish: {
@@ -27737,7 +27913,7 @@ function requireOperationId(value) {
 async function snapshotProject(source, signal) {
     const directory = await fsp.mkdtemp(path$1.join(os$1.tmpdir(), 'ttmg-iteration-'));
     const hash = crypto$1.createHash('sha256');
-    const ignored = new Set(['.git', '.ttmg', 'node_modules', '__TTMG_TEMP__']);
+    const ignored = new Set(['.git', 'node_modules', '__TTMG_TEMP__']);
     const dispose = () => fs$1.rmSync(directory, { recursive: true, force: true });
     try {
         async function copy(relative) {
@@ -27746,7 +27922,7 @@ async function snapshotProject(source, signal) {
             });
             for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
                 signal?.throwIfAborted();
-                if (ignored.has(entry.name))
+                if (ignored.has(entry.name) || (!relative && entry.name === '.ttmg'))
                     continue;
                 const name = path$1.join(relative, entry.name);
                 if (entry.isSymbolicLink() || (!entry.isDirectory() && !entry.isFile()))
@@ -28047,6 +28223,24 @@ class PreviewWorkflow {
     }
 }
 
+function physicalPath(directory) {
+    const absolute = path$1.resolve(directory);
+    if (fs$1.existsSync(absolute))
+        return fs$1.realpathSync(absolute);
+    const parent = path$1.dirname(absolute);
+    if (parent === absolute)
+        return absolute;
+    return path$1.join(physicalPath(parent), path$1.basename(absolute));
+}
+// Packaging reserves only the project-root .ttmg directory. Never silently put
+// session output into an ordinary game asset directory (including via symlinks).
+function isSafeEvidenceDirectory(project, directory) {
+    const relative = path$1.relative(physicalPath(project), physicalPath(directory));
+    return path$1.isAbsolute(relative) || relative === '..' ||
+        relative.startsWith(`..${path$1.sep}`) || relative === '.ttmg' ||
+        relative.startsWith(`.ttmg${path$1.sep}`);
+}
+
 function normalizeMode(mode) {
     const value = (mode || 'default').toLowerCase();
     if (value !== 'default' && value !== 'client-preview') {
@@ -28116,6 +28310,17 @@ async function dev(options = {}) {
     }
     const humanPreview = mode === 'client-preview' && !structured;
     const managed = structured || humanPreview;
+    if (managed && !isSafeEvidenceDirectory(process.cwd(), options.evidenceDir || path$1.join('.ttmg', 'sessions'))) {
+        const failed = { schemaVersion: '1', command: 'dev', status: 'failed',
+            sessionId: null, platformWrite: false, errorCode: 'DEV_EVIDENCE_DIRECTORY_UNSAFE',
+            error: t('dev.evidence.unsafeDirectory') };
+        if (structured)
+            console.log(JSON.stringify(failed));
+        else
+            console.error(failed.error);
+        process.exitCode = 1;
+        return failed;
+    }
     const humanOutput = humanPreview ? new HumanPreviewOutput() : null;
     const scanPage = mode === 'client-preview' ? new ClientPreviewScanPage() : null;
     const timeoutMs = normalizeTimeout(options.timeout);
@@ -29993,6 +30198,8 @@ async function startBackgroundPreview(options) {
         const clientKey = options.clientKey?.trim();
         if (!clientKey)
             throw workflowError('DEV_ITERATION_INVALID_OPTIONS', 'Pass --client-key when starting a background preview.');
+        if (!isSafeEvidenceDirectory(process.cwd(), path$1.dirname(lock)))
+            throw workflowError('DEV_EVIDENCE_DIRECTORY_UNSAFE', 'The project .ttmg directory must not resolve to a game asset directory.');
         fs$1.mkdirSync(path$1.dirname(lock), { recursive: true });
         try {
             fs$1.mkdirSync(lock, { mode: 0o700 });