@ttmg/cli 0.4.6-vibe-beta.14 → 0.4.6-vibe-beta.15

package/README.md

@@ -9,6 +9,10 @@ Vibe real web authorization and upload: use `--web` with the title, local icon a
 
 #### Installation 安装
 
+`0.4.6-vibe-beta.15`：Vibe 上传支持 Skill 传入 `--description "游戏描述"`。省略时默认使用 `Discover the fun of TikTok Mini Games.`；旧 `--app-info` 文件中的描述继续保留。详见 [Quick Start 与描述参数](vibe-upload.md)。
+
+`0.4.6-vibe-beta.15`: Vibe upload accepts `--description "Game description"` from a Skill. When omitted, it uses `Discover the fun of TikTok Mini Games.` or preserves the description from a legacy `--app-info` file. See [Quick Start and description usage](vibe-upload.md).
+
 `0.4.6-vibe-beta.14` 支持分类查询与可选上传分类参数。Skill 可用 `ttmg game categories --format json` 查询，再向 Vibe 上传传入 `--category Puzzle --subcategory Physics`。两个参数都省略时保留 Other/Other；详见 [分类用法](vibe-upload.md)。
 
 `0.4.6-vibe-beta.14` supports category discovery and optional upload classification. Query `ttmg game categories --format json`, then pass `--category Puzzle --subcategory Physics` to Vibe upload. Omitting both preserves Other/Other. See [category usage](vibe-upload.md).
@@ -30,7 +34,7 @@ For Agent and Monetization workflows, the published beta is:
 Agent、商业化流程的已发布 beta 为：
 
 ```bash
-npm install -g @ttmg/cli@0.4.6-agent-beta.2
+npm install -g @ttmg/cli@0.4.6-agent-beta.3
 ttmg --version
 ttmg capabilities --format json
 ```
@@ -237,9 +241,70 @@ ttmg dev session stop <SESSION_ID> --format json
 
 ### Wasm prepare and split / Wasm 准备与分包
 
+#### Platform collection commands (agent-beta.3) / 平台采集命令
+
+Install `0.4.6-agent-beta.3` and check `commands.wasmCollect` in `ttmg capabilities`.
+The CLI uses its own `ttmg login` session; do not pass or read Cookie values in
+Agent prompts, arguments or local HTTP requests. No running DevTool server is required.
+
+```bash
+ttmg wasm prepare --input original.wasm.br --output .ttmg/wasm/prepared --format json
+# Use prepare's input.wasmMd5 for <MD5> and configure the instrumented game
+# to report that same original MD5 and Client Key.
+ttmg wasm collect start --client-key <CLIENT_KEY> --wasm-md5 <MD5> --format json
+# Integrate the prepared copy, scan, clear device storage and play the game.
+ttmg wasm collect export --client-key <CLIENT_KEY> --wasm-md5 <MD5> \
+  --input original.wasm.br --output .ttmg/wasm/collection.json --format json
+ttmg wasm split --input original.wasm.br --collection .ttmg/wasm/collection.json --output .ttmg/wasm/split --format json
+```
+
+Run these examples at the game project root. Keep collection and temporary
+artifacts outside the project or under its root `.ttmg`; an ordinary JSON file
+in game assets can be included in future builds and uploads.
+`start` opens or resumes a window and preserves existing IDs by default.
+`--reset` clears platform collection for this game and MD5; it does not clear
+phone storage. On an uncertain start or timeout, retry without `--reset`.
+`export` reads a union snapshot without closing the window. It needs the original
+Wasm, validates the collection MD5 against its file bytes or uncompressed bytes,
+and writes schema 1 with the uncompressed `wasmSha256`, `funcIds` and `bootFuncIds`.
+Read the file at the returned `collection.path`. Existing files are rejected;
+use a new output name for each snapshot. Credentials and raw API responses are
+omitted even with `--verbose`.
+
+Only `start` writes platform state. `export` only reads collection and writes a
+local file. Neither command changes Unity files or clears device storage.
+Platform requests default to 30 seconds (`--timeout`, 1–300). Missing or expired
+login returns `WASM_AUTH_REQUIRED`; empty collection returns `WASM_COLLECTION_EMPTY`;
+an unmatched original returns `WASM_COLLECTION_MISMATCH`. No file is published on
+these failures. A nonempty collection does not prove gameplay coverage.
+The commands reuse the existing platform request environment; local fixture
+tests do not establish real platform or device acceptance.
+
+安装 `0.4.6-agent-beta.3`，通过 `ttmg capabilities` 中的 `commands.wasmCollect` 确认支持。
+CLI 内部复用 `ttmg login` 登录态，无需运行 DevTool 本地服务，Agent 不读取或传递 Cookie。
+按上方命令执行：prepare → 开采集窗口 → 接入插桩副本并扫码、清存储、玩游戏 → export → split。
+`<MD5>` 使用 prepare 返回的 `input.wasmMd5`，插桩游戏须上报相同的原始 MD5 和 Client Key。
+
+示例在游戏工程根目录执行。采集文件和临时产物应放工程外或根目录 `.ttmg` 下；
+放在普通游戏资源目录的 JSON 会参与后续构建和上传。
+`start` 默认保留已有函数 ID；只有 `--reset` 清空平台上此游戏、此 MD5 的历史采集，
+不会清理手机存储。超时或不确定是否成功时，不带 `--reset` 重试。
+`export` 读取当前合集快照，不关闭采集窗口；必须提供原始 Wasm，命令校验文件字节或
+解压后字节的 MD5，再写入 schema 1、解压后原始 `wasmSha256`、`funcIds` 和 `bootFuncIds`。
+从返回的 `collection.path` 读取文件；已有文件不覆盖，每轮快照使用新文件名。
+即使开启 `--verbose`，也不输出登录凭证或原始接口响应。
+
+仅 `start` 写平台状态；`export` 只读平台并写本地文件。两者均不写回 Unity 工程或清理手机存储。
+请求默认超时 30 秒，`--timeout` 范围为 1–300 秒。未登录或登录过期返回 `WASM_AUTH_REQUIRED`，
+空采集返回 `WASM_COLLECTION_EMPTY`，原始文件不匹配返回 `WASM_COLLECTION_MISMATCH`；
+这些失败不会生成采集文件。非空结果不等于玩法覆盖完整。
+命令沿用现有平台请求环境；本地模拟测试不代表真实平台或真机验收。
+
+#### Local artifacts / 本地产物
+
 ```bash
-ttmg wasm prepare --input original.wasm.br --output prepared --format json
-ttmg wasm split --input original.wasm.br --collection collection.json --output split --format json
+ttmg wasm prepare --input original.wasm.br --output .ttmg/wasm/prepared --format json
+ttmg wasm split --input original.wasm.br --collection .ttmg/wasm/collection.json --output .ttmg/wasm/split --format json
 ```
 
 These experimental commands create artifacts in a new directory; they do not

package/dist/index.js

@@ -6780,11 +6780,11 @@ function printApiResponseLog(title, result) {
         ['Return Value', result.data],
     ]);
 }
-async function request({ url, method, data, headers, params, logRequestBody = true, signal, }) {
+async function request({ url, method, data, headers, params, logRequestBody = true, logApiCalls = true, signal, }) {
     const config = getTTMGRC();
     const cookie = sanitizeCookieHeader(config?.cookie);
     const proxyConfig = getAxiosProxyConfig();
-    if (isVerboseEnabled()) {
+    if (isVerboseEnabled() && logApiCalls) {
         printApiRequestLog({
             url,
             method,
@@ -6811,7 +6811,7 @@ async function request({ url, method, data, headers, params, logRequestBody = tr
             },
             ...proxyConfig,
         });
-        if (isVerboseEnabled()) {
+        if (isVerboseEnabled() && logApiCalls) {
             printApiResponseLog('API Response', {
                 status: res?.status,
                 logid: res?.headers['x-tt-logid'],
@@ -6839,7 +6839,7 @@ async function request({ url, method, data, headers, params, logRequestBody = tr
                 NetworkCode: axiosError.code,
                 NetworkMessage: axiosError.message,
             };
-        if (isVerboseEnabled()) {
+        if (isVerboseEnabled() && logApiCalls) {
             printApiResponseLog('API Error', {
                 status: axiosError.response?.status,
                 logid: axiosError.response?.headers['x-tt-logid'],
@@ -7210,6 +7210,16 @@ const messages = {
     'en-US': {
         'cli.command.wasm.desc': 'Prepare or split Wasm into a separate output directory',
         'cli.command.wasm.prepare': 'Instrument original Wasm for function collection',
+        'cli.command.wasm.collect': 'Manage platform function collection using the local CLI login',
+        'cli.command.wasm.collect.start': 'Open or resume a collection window; preserve existing IDs unless --reset is set',
+        'cli.command.wasm.collect.export': 'Export collected IDs to an identity-matched collection.json file',
+        'cli.command.wasm.collect.clientKey': 'Client Key for the game being collected',
+        'cli.command.wasm.collect.md5': 'Original Wasm collection MD5 used by the instrumented game',
+        'cli.command.wasm.collect.timeout': 'Platform request deadline: 1–300 seconds',
+        'cli.command.wasm.collect.reset': 'Clear historical function IDs for this game and Wasm before collecting',
+        'cli.command.wasm.collect.output': 'New collection JSON file (never overwrite)',
+        'wasm.collect.succeeded': 'Wasm collection command completed.',
+        'wasm.collect.failed': 'Wasm collection command failed.',
         'cli.command.wasm.split': 'Split original Wasm using an identity-matched collection',
         'cli.command.wasm.input': 'Original .wasm or Brotli .wasm.br file',
         'cli.command.wasm.output': 'New output directory (never overwrite)',
@@ -7239,12 +7249,14 @@ const messages = {
         'cli.command.game.categories.unknown': 'Unknown category. Run ttmg game categories --format json for valid values.',
         'cli.command.game.categories.invalidFormat': 'Use text, json, or ndjson output.',
         'cli.command.upload.vibeCategory': 'Optional game category; provide with --subcategory (--vibe). Query ttmg game categories --format json',
+        'cli.command.upload.vibeDescription': 'Optional game description (--vibe); default: Discover the fun of TikTok Mini Games.',
         'cli.command.upload.vibeSubcategory': 'Optional subcategory belonging to --category; omit both to keep Other/Other (--vibe)',
         'cli.command.upload.vibeWebGuide': `
 Vibe web upload (real PPE trial):
   ttmg upload --vibe --web --dir ./game --title "My game" --icon ./avatar.png --format ndjson
   Use --package ./game.zip instead of --dir for an existing ZIP.
   Collect only title and icon; the CLI fills other app_info fields with PPE trial defaults.
+  Skill may pass --description "Game description"; otherwise use "Discover the fun of TikTok Mini Games." (legacy metadata-file descriptions are preserved).
   Skill may query ttmg game categories --format json and pass --category Puzzle --subcategory Physics together.
   Omit both to keep Other/Other (or the legacy metadata-file classification). Invalid pairs fail before task creation.
   prepared and terminal events expose the submitted classification and its source.
@@ -7645,6 +7657,16 @@ Vibe web upload (real PPE trial):
     'zh-CN': {
         'cli.command.wasm.desc': '准备或分包 Wasm，产物写入独立目录',
         'cli.command.wasm.prepare': '对原始 Wasm 插桩，用于函数采集',
+        'cli.command.wasm.collect': '复用 CLI 本机登录态管理平台函数采集',
+        'cli.command.wasm.collect.start': '开启或恢复采集窗口；未指定 --reset 时保留已有函数 ID',
+        'cli.command.wasm.collect.export': '导出函数 ID，生成与原始 Wasm 匹配的 collection.json',
+        'cli.command.wasm.collect.clientKey': '采集游戏的 Client Key',
+        'cli.command.wasm.collect.md5': '插桩游戏上报使用的原始 Wasm 采集 MD5',
+        'cli.command.wasm.collect.timeout': '平台请求超时：1–300 秒',
+        'cli.command.wasm.collect.reset': '清空此游戏、此 Wasm 的历史函数 ID，再开始采集',
+        'cli.command.wasm.collect.output': '新的采集 JSON 文件（不覆盖已有文件）',
+        'wasm.collect.succeeded': 'Wasm 采集命令已完成。',
+        'wasm.collect.failed': 'Wasm 采集命令失败。',
         'cli.command.wasm.split': '使用与原始 Wasm 匹配的采集数据分包',
         'cli.command.wasm.input': '原始 .wasm 或 Brotli .wasm.br 文件',
         'cli.command.wasm.output': '新的输出目录（不覆盖已有内容）',
@@ -7674,12 +7696,14 @@ Vibe web upload (real PPE trial):
         'cli.command.game.categories.unknown': '类型不存在。使用 ttmg game categories --format json 查询有效值。',
         'cli.command.game.categories.invalidFormat': '输出格式请使用 text、json 或 ndjson。',
         'cli.command.upload.vibeCategory': '可选游戏类型，须与 --subcategory 同传（--vibe）；用 ttmg game categories --format json 查询',
+        'cli.command.upload.vibeDescription': '可选游戏描述（--vibe）；默认值：Discover the fun of TikTok Mini Games.',
         'cli.command.upload.vibeSubcategory': '所属类型的可选子类型；两者均不传保留 Other/Other（--vibe）',
         'cli.command.upload.vibeWebGuide': `
 Vibe 网页上传（真实 PPE 试用）：
   ttmg upload --vibe --web --dir ./game --title "游戏名称" --icon ./avatar.png --format ndjson
   已有 ZIP 时，用 --package ./game.zip 替换 --dir。
   只收集标题和头像；其他 app_info 字段由 CLI 使用 PPE 试用默认值补齐。
+  Skill 可传 --description "游戏描述"；省略时使用 Discover the fun of TikTok Mini Games.（旧资料文件中的描述保留）。
   Skill 可先查 ttmg game categories --format json，再成对传入 --category Puzzle --subcategory Physics。
   两者均不传保留 Other/Other（旧资料文件调用保留文件分类）；无效组合在创建任务前报错。
   prepared 和终态事件返回最终 classification 及其来源。
@@ -16352,7 +16376,7 @@ async function authStatus(options = {}) {
     return result;
 }
 
-var version = "0.4.6-vibe-beta.14";
+var version = "0.4.6-vibe-beta.15";
 var engines = {
 	node: ">=20.19.1 <21 || >=22"
 };
@@ -16362,13 +16386,15 @@ var pkg = {
 };
 
 // Skill-facing v2 contract. Backend credentials never cross this boundary.
+const VIBE_DEFAULT_DESCRIPTION = 'Discover the fun of TikTok Mini Games.';
 const VIBE_INPUT_REQUIREMENTS = {
     requiredUserInputs: ['title', 'icon'],
     codeSource: ['dir', 'package'],
     additionalMetadataSource: 'cli-defaults',
     defaultMetadataProfile: 'ppe-trial',
     requestAdditionalMetadata: false,
-    optionalSkillInputs: ['category', 'subcategory'],
+    optionalSkillInputs: ['category', 'subcategory', 'description'],
+    defaultDescription: VIBE_DEFAULT_DESCRIPTION,
     categoryQuery: 'ttmg game categories --format json',
     categoryPairRequiredWhenProvided: true,
     defaultCategory: { category: 'Other', subcategory: 'Other' },
@@ -16963,9 +16989,10 @@ var categories = /*#__PURE__*/Object.freeze({
 
 // Current PPE trial defaults: the owner-approved metadata used by the successful
 // real upload fixture on 2026-09-14, with owner-specified legal URLs updated on
-// 2026-09-15. This is not a production metadata profile.
+// 2026-09-15 and the owner-approved brand description on 2026-09-16.
+// This is not a production metadata profile.
 const VIBE_PPE_DEFAULT_APP_INFO = Object.freeze({
-    description: 'DevTool PPE integration test fixture. Not a production game.',
+    description: VIBE_DEFAULT_DESCRIPTION,
     category: 'Other',
     subcategory: 'Other',
     terms_of_service: 'https://www.tiktok.com',
@@ -16979,6 +17006,14 @@ const requiredStrings = [
     'description', 'category', 'subcategory', 'terms_of_service', 'privacy_policy',
 ];
 const optionalStrings = ['apple_team_id', 'contact_email', 'region', 'min_sdk_version'];
+function applyVibeDescription(description, appInfo) {
+    if (description === undefined)
+        return appInfo;
+    if (typeof description !== 'string' || !description.trim() ||
+        [...description].some(char => /^[\uD800-\uDFFF]$/.test(char)))
+        throw new VibeError('VIBE_INVALID_DESCRIPTION');
+    return { ...(appInfo || VIBE_PPE_DEFAULT_APP_INFO), description: description.trim() };
+}
 function applyVibeCategory(options, appInfo) {
     if (options.category === undefined && options.subcategory === undefined)
         return appInfo;
@@ -17133,6 +17168,15 @@ function getCapabilities() {
                 sourceProjectIdentity: '.ttmg/vibe-project.json',
                 metadataInputs: ['title', 'icon', 'dir|package'],
                 inputRequirements: VIBE_INPUT_REQUIREMENTS,
+                description: {
+                    option: '--description',
+                    required: false,
+                    default: VIBE_PPE_DEFAULT_APP_INFO.description,
+                    precedence: ['argument', 'legacy-app-info', 'default'],
+                    invalidInput: 'reject-before-task-creation',
+                    resultField: 'description',
+                    sourceField: 'descriptionSource',
+                },
                 classification: {
                     queryCommand: 'ttmg game categories --format json',
                     options: ['--category', '--subcategory'],
@@ -17270,6 +17314,20 @@ function getCapabilities() {
                 projectIntegration: false,
                 platformWrite: false,
             },
+            wasmCollect: {
+                available: true,
+                experimental: true,
+                authentication: 'local_cli_login',
+                credentialOutput: false,
+                nativeBindingRequired: false,
+                platformVerified: false,
+                outputFormats: ['text', 'json'],
+                start: { command: 'ttmg wasm collect start', platformWrite: true,
+                    resetDefault: false, resetOption: '--reset', automaticRetry: false },
+                export: { command: 'ttmg wasm collect export', platformWrite: false,
+                    collectionSchemaVersion: '1', originalInputRequired: true,
+                    outputPathField: 'collection.path', overwrite: false, strategy: 'union' },
+            },
             dev: {
                 command: 'ttmg dev --format json --no-open',
                 eventsCommand: 'ttmg dev --events ndjson --no-open',
@@ -17861,6 +17919,8 @@ function getDesktopPath() {
 const program = new commander.Command();
 const isPreviewPageServerWorker = process.argv[2] === '__preview-page-server';
 const isVibePageServerWorker = process.argv[2] === '__vibe-page-server';
+const wasmArgumentIndex = process.argv.indexOf('wasm', 2);
+const isWasmCollectCommand = wasmArgumentIndex >= 2 && process.argv[wasmArgumentIndex + 1] === 'collect';
 const withVerboseOption = (command) => command.option('--verbose', t('cli.option.verbose'));
 const structuredFormatIndex = process.argv.indexOf('--format');
 const inlineStructuredFormat = process.argv.find(arg => arg.startsWith('--format='));
@@ -17871,6 +17931,7 @@ const structuredFormat = inlineStructuredFormat
         : '';
 if (!isPreviewPageServerWorker &&
     !isVibePageServerWorker &&
+    !(isWasmCollectCommand && !structuredFormat) &&
     structuredFormat !== 'json' &&
     structuredFormat !== 'ndjson' &&
     !process.argv.includes('--implicit')) {
@@ -17943,6 +18004,7 @@ withVerboseOption(program
     .option('--web', t('cli.command.upload.vibeWeb'))
     // Vibe v2 backend selection (including opt-in ppe-mock) stays outside the Skill workflow.
     .option('--title <title>', t('cli.command.upload.vibeTitle'))
+    .option('--description <description>', t('cli.command.upload.vibeDescription'))
     .option('--icon <path>', t('cli.command.upload.vibeIcon'))
     .option('--category <category>', t('cli.command.upload.vibeCategory'))
     .option('--subcategory <subcategory>', t('cli.command.upload.vibeSubcategory'))
@@ -17964,6 +18026,7 @@ withVerboseOption(program
     }
     if ([
         cmd.title,
+        cmd.description,
         cmd.icon,
         cmd.appInfo,
         cmd.category,
@@ -18310,6 +18373,25 @@ devSessionCmd
     });
 });
 const wasmCmd = program.command('wasm').description(t('cli.command.wasm.desc'));
+const collectCmd = wasmCmd.command('collect').description(t('cli.command.wasm.collect'));
+for (const operation of ['start', 'export']) {
+    const command = collectCmd.command(operation)
+        .description(t(operation === 'start' ? 'cli.command.wasm.collect.start' : 'cli.command.wasm.collect.export'))
+        .allowExcessArguments(false)
+        .option('--client-key <key>', t('cli.command.wasm.collect.clientKey'))
+        .option('--wasm-md5 <md5>', t('cli.command.wasm.collect.md5'))
+        .option('--timeout <seconds>', t('cli.command.wasm.collect.timeout'), '30')
+        .option('--format <format>', t('cli.command.wasm.format'), 'json');
+    if (operation === 'start')
+        command.option('--reset', t('cli.command.wasm.collect.reset'));
+    else
+        command.option('--input <path>', t('cli.command.wasm.input'))
+            .option('--output <path>', t('cli.command.wasm.collect.output'));
+    command.action(async (options) => {
+        const Native = await Promise.resolve().then(function () { return index; });
+        await Native.wasmCollectCommand(operation, options);
+    });
+}
 for (const operation of ['prepare', 'split']) {
     const command = wasmCmd.command(operation)
         .description(t(operation === 'prepare' ? 'cli.command.wasm.prepare' : 'cli.command.wasm.split'))
@@ -19126,7 +19208,7 @@ async function prepareVibeInput(options, onPackaging, signal, deps = { check: ex
     const title = options.title?.trim();
     if (!title)
         throw new VibeError('VIBE_TITLE_REQUIRED');
-    const appInfo = applyVibeCategory(options, readVibeAppInfo(options.appInfo));
+    const appInfo = applyVibeCategory(options, applyVibeDescription(options.description, readVibeAppInfo(options.appInfo)));
     if (options.package && options.dir)
         throw new VibeError('VIBE_INPUT_CONFLICT');
     const image = readFile(options.icon, VIBE_ICON_LIMIT, 'VIBE_INVALID_ICON');
@@ -19681,10 +19763,12 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
             terminal: !!options.dryRun,
             nextAction: options.dryRun ? 'none' : 'wait',
             title: input.title,
+            description: (input.appInfo || VIBE_PPE_DEFAULT_APP_INFO).description,
+            descriptionSource: options.description !== undefined ? 'arguments' : options.appInfo !== undefined ? 'app-info' : 'defaults',
             classification: {
                 category: (input.appInfo || VIBE_PPE_DEFAULT_APP_INFO).category,
                 subcategory: (input.appInfo || VIBE_PPE_DEFAULT_APP_INFO).subcategory,
-                source: options.category !== undefined ? 'arguments' : input.appInfo ? 'app-info' : 'defaults',
+                source: options.category !== undefined ? 'arguments' : options.appInfo !== undefined ? 'app-info' : 'defaults',
                 catalogVersion: GAME_CATEGORY_CATALOG_VERSION,
             },
             iconSizeBytes: input.icon.bytes.length,
@@ -19880,6 +19964,7 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
         const messages = {
             VIBE_CATEGORY_PAIR_REQUIRED: ['--category 和 --subcategory 必须同时提供；均不传时保留默认分类。使用 ttmg game categories --format json 查询。', 'Provide --category and --subcategory together, or omit both to keep the default. Query ttmg game categories --format json.'],
             VIBE_INVALID_CATEGORY: ['类型或子类型无效，或两者不匹配。使用 ttmg game categories --format json 查询有效组合。', 'Invalid category/subcategory pair. Query valid values with ttmg game categories --format json.'],
+            VIBE_INVALID_DESCRIPTION: ['描述必须是非空的有效 Unicode 文本；省略 --description 可使用默认描述。', 'Description must be non-empty valid Unicode text; omit --description to use the default.'],
             VIBE_WEB_OPTION_CONFLICT: ['--web 使用真实网页授权，不能与 --mock、--mock-scenario、--vibe-api 或 --no-open 同时使用。', '--web uses real browser authorization and cannot be combined with --mock, --mock-scenario, --vibe-api or --no-open.'],
             VIBE_AUTH_DENIED: [
                 '已取消授权，本次未上传。',
@@ -31195,12 +31280,17 @@ async function snapshotWasm(input, output) {
             callback(bytes > 512 * 1024 * 1024 ? fail('WASM_INPUT_INVALID', 'Expanded Wasm exceeds 512 MiB.') : null, chunk);
         } });
     const source = fs$1.createReadStream(input);
+    const fileMd5 = crypto$1.createHash('md5');
+    const identity = new node_stream.Transform({ transform(chunk, _encoding, callback) {
+            fileMd5.update(chunk);
+            callback(null, chunk);
+        } });
     const target = fs$1.createWriteStream(output, { flags: 'wx', mode: 0o600 });
     try {
         if (input.endsWith('.br'))
-            await promises$2.pipeline(source, zlib$1.createBrotliDecompress(), bound, target);
+            await promises$2.pipeline(source, identity, zlib$1.createBrotliDecompress(), bound, target);
         else
-            await promises$2.pipeline(source, bound, target);
+            await promises$2.pipeline(source, identity, bound, target);
     }
     catch (error) {
         throw fail(error.code === 'WASM_INPUT_INVALID' ? error.code : 'WASM_INPUT_INVALID', 'Could not read the original Wasm input.');
@@ -31217,7 +31307,11 @@ async function snapshotWasm(input, output) {
         throw fail('WASM_INPUT_INVALID', 'Expected a WebAssembly version 1 binary.');
     if (!WebAssembly.validate(await fsp.readFile(output)))
         throw fail('WASM_INPUT_INVALID', 'Original Wasm is invalid or unsupported by this Node.js WebAssembly engine.');
-    return { bytes, wasmSha256: await digest(output) };
+    const rawMd5 = crypto$1.createHash('md5');
+    for await (const chunk of fs$1.createReadStream(output))
+        rawMd5.update(chunk);
+    return { bytes, wasmSha256: await digest(output), wasmMd5: fileMd5.digest('hex'),
+        uncompressedWasmMd5: rawMd5.digest('hex') };
 }
 async function executeWasm(operation, options, dependencies = {}) {
     const base = { schemaVersion: '1', command: `wasm.${operation}`, operationId: `wasm_${crypto$1.randomUUID()}`,
@@ -31325,6 +31419,149 @@ async function wasmCommand(operation, options) {
     process.exitCode = result.status === 'failed' ? 1 : 0;
 }
 
+class CollectError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+const invalid = (code, message) => { throw new CollectError(code, message); };
+async function executeWasmCollect(operation, options, overrides = {}) {
+    const deps = { authenticated: () => Boolean(getCurrentUser()?.cookie), request, ...overrides };
+    const base = { schemaVersion: '1', command: `wasm.collect.${operation}`,
+        operationId: `wasm_collect_${crypto$1.randomUUID()}`, platformWrite: operation === 'start',
+        platformWriteAttempted: false, sourceModified: false };
+    let temporary;
+    let staging;
+    let timer;
+    try {
+        const timeout = Number(options.timeout ?? 30);
+        if (!['start', 'export'].includes(operation) || !['json', 'text'].includes(options.format || 'json') ||
+            !/^[A-Za-z0-9_-]{1,128}$/.test(options.clientKey || '') || !/^[a-fA-F0-9]{32}$/.test(options.wasmMd5 || '') ||
+            !Number.isInteger(timeout) || timeout < 1 || timeout > 300 ||
+            (options.reset !== undefined && typeof options.reset !== 'boolean') ||
+            (operation === 'export' && (!options.input || !options.output || options.reset !== undefined)) ||
+            (operation === 'start' && (options.input || options.output))) {
+            invalid('WASM_COLLECT_INVALID_OPTIONS', 'Provide client-key and wasm-md5; export also requires original input and a new output file. Timeout: 1–300 seconds.');
+        }
+        const clientKey = options.clientKey;
+        const wasmMd5 = options.wasmMd5.toLowerCase();
+        const output = options.output ? path$1.resolve(options.output) : undefined;
+        let source;
+        if (operation === 'export') {
+            // lstat detects dangling links as well as existing files. Never overwrite.
+            if (await fsp.lstat(output).catch((e) => { if (e.code !== 'ENOENT')
+                throw e; return null; }))
+                invalid('WASM_OUTPUT_EXISTS', 'Collection output already exists; choose a new file.');
+            temporary = await fsp.mkdtemp(path$1.join(os$1.tmpdir(), 'ttmg-collect-'));
+            try {
+                source = await snapshotWasm(path$1.resolve(options.input), path$1.join(temporary, 'original.wasm'));
+            }
+            catch {
+                return invalid('WASM_INPUT_INVALID', 'Expected a valid original Wasm or Brotli Wasm file.');
+            }
+            if (wasmMd5 !== source.wasmMd5 && wasmMd5 !== source.uncompressedWasmMd5)
+                invalid('WASM_COLLECTION_MISMATCH', 'Collection MD5 does not match this original Wasm (file bytes or uncompressed bytes).');
+        }
+        if (!deps.authenticated())
+            invalid('WASM_AUTH_REQUIRED', 'Run ttmg login on this machine before collecting or exporting.');
+        const controller = new AbortController();
+        const deadline = new Promise((_, reject) => {
+            timer = setTimeout(() => {
+                controller.abort();
+                reject(new CollectError('WASM_COLLECT_TIMEOUT', 'Platform request timed out. A start may have reached the server; retry without --reset to preserve collection.'));
+            }, timeout * 1000);
+        });
+        base.platformWriteAttempted = operation === 'start';
+        const response = await Promise.race([deps.request({
+                url: `${WASM_COLLECT_BASE_URL}/${operation === 'start' ? 'start' : 'export'}`,
+                method: operation === 'start' ? 'POST' : 'GET',
+                ...(operation === 'start'
+                    ? { data: { app_id: clientKey, wasm_md5: wasmMd5, reset: options.reset ?? false } }
+                    : { params: { app_id: clientKey, wasm_md5: wasmMd5, strategy: 'union' } }),
+                signal: controller.signal,
+                logRequestBody: false, logApiCalls: false,
+            }), deadline]);
+        clearTimeout(timer);
+        const code = response.error?.code ?? response.error?.StatusCode ?? response.data?.code;
+        const httpStatus = response.ctx?.httpStatusCode;
+        // Upstream bodies/errors are deliberately never included in output: they
+        // can contain credentials or gateway HTML, even with verbose enabled.
+        if ([401, -401].includes(Number(code)) || httpStatus === 401 ||
+            (Number(code) === -1 && /login|log.?in|登录|未登|auth/i.test(String(response.error?.message ?? response.error?.StatusMessage ?? response.data?.message ?? ''))))
+            invalid('WASM_AUTH_REQUIRED', 'Platform login expired. Run ttmg login and retry.');
+        if ([403, -403].includes(Number(code)) || httpStatus === 403)
+            invalid('WASM_COLLECT_FORBIDDEN', 'This account cannot access collection for this game.');
+        if (response.error || response.data?.code !== 0 || (httpStatus && (httpStatus < 200 || httpStatus >= 300)))
+            invalid('WASM_COLLECT_API_FAILED', 'Platform collection request failed; no collection file was written.');
+        if (operation === 'start') {
+            if (response.data.collect_state !== 'open')
+                invalid('WASM_COLLECT_INVALID_RESPONSE', 'Platform did not confirm an open collection window.');
+            return { ...base, status: 'succeeded', clientKey, wasmMd5, reset: options.reset ?? false,
+                collectState: 'open', nextAction: 'run_instrumented_game_and_collect', errorCode: null, error: null };
+        }
+        if (Array.isArray(response.data.func_ids) && response.data.func_ids.length === 0)
+            invalid('WASM_COLLECTION_EMPTY', 'No function IDs collected. Run the instrumented game and export again.');
+        let ids;
+        try {
+            ids = parseCollection({ schemaVersion: '1', wasmSha256: source.wasmSha256,
+                funcIds: response.data.func_ids, bootFuncIds: response.data.boot_func_ids }, source.wasmSha256);
+        }
+        catch {
+            return invalid('WASM_COLLECTION_INVALID', 'Platform returned invalid function IDs; no collection file was written.');
+        }
+        const collection = { schemaVersion: '1', wasmSha256: source.wasmSha256, ...ids,
+            clientKey, wasmMd5, strategy: 'union', exportedAt: new Date().toISOString() };
+        const bytes = Buffer.from(JSON.stringify(collection, null, 2) + '\n');
+        if (bytes.length > 32 * 1024 * 1024)
+            invalid('WASM_COLLECTION_INVALID', 'Collection JSON exceeds 32 MiB.');
+        await fsp.mkdir(path$1.dirname(output), { recursive: true });
+        staging = path$1.join(path$1.dirname(output), `.ttmg-collection-${crypto$1.randomUUID()}.tmp`);
+        await fsp.writeFile(staging, bytes, { flag: 'wx', mode: 0o600 });
+        // Publish a complete file atomically, with exclusive no-clobber semantics.
+        try {
+            await fsp.link(staging, output);
+        }
+        catch (e) {
+            if (e.code === 'EEXIST')
+                invalid('WASM_OUTPUT_EXISTS', 'Collection output already exists; choose a new file.');
+            throw e;
+        }
+        return { ...base, status: 'succeeded', clientKey, wasmMd5,
+            collection: { path: output, schemaVersion: '1', wasmSha256: source.wasmSha256,
+                funcCount: ids.funcIds.length, bootFuncCount: ids.bootFuncIds.length,
+                bytes: bytes.length, sha256: crypto$1.createHash('sha256').update(bytes).digest('hex') },
+            nextAction: 'split_with_collection', errorCode: null, error: null };
+    }
+    catch (error) {
+        const known = error instanceof CollectError;
+        return { ...base, status: 'failed', errorCode: known ? error.code : 'WASM_COLLECT_FAILED',
+            error: known ? error.message : 'Collection operation failed; check the original Wasm, output directory and connection.',
+            nextAction: known && error.code === 'WASM_AUTH_REQUIRED' ? 'login' : 'fix_and_retry' };
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+        if (staging)
+            await fsp.unlink(staging).catch(() => { });
+        if (temporary)
+            await fsp.rm(temporary, { recursive: true, force: true });
+    }
+}
+async function wasmCollectCommand(operation, options) {
+    const result = await executeWasmCollect(operation, options);
+    if ((options.format || 'json') === 'json')
+        console.log(JSON.stringify(result));
+    else {
+        console.log(t(result.status === 'failed' ? 'wasm.collect.failed' : 'wasm.collect.succeeded'));
+        if (result.error)
+            console.error(result.error);
+        if ('collection' in result)
+            console.log(result.collection.path);
+    }
+    process.exitCode = result.status === 'failed' ? 1 : 0;
+}
+
 const problem = (code, message) => Object.assign(new Error(message), { code });
 const MAX_BYTES = 64 * 1024 * 1024;
 // Export one finite Runtime interval. Sequence numbers are global, so gaps in
@@ -31528,6 +31765,7 @@ var index = /*#__PURE__*/Object.freeze({
     devSessionStopCommand: devSessionStopCommand,
     devWorkflowCommand: devWorkflowCommand,
     doctor: doctor,
+    wasmCollectCommand: wasmCollectCommand,
     wasmCommand: wasmCommand
 });
 //# sourceMappingURL=index.js.map