@ttmg/cli 0.4.6-vibe-beta.14 → 0.4.6-vibe-beta.15

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ttmg/cli",
-  "version": "0.4.6-vibe-beta.14",
+  "version": "0.4.6-vibe-beta.15",
   "description": "TikTok Mini Game Command Line Tool",
   "license": "ISC",
   "bin": {
@@ -48,7 +48,7 @@
     "test:check-ai": "node scripts/run-ts-test.js src/commands/native/check/ai.test.ts",
     "test:build-structured": "node scripts/run-ts-test.js src/commands/native/build/build.test.ts",
     "test:doctor": "node scripts/run-ts-test.js src/commands/native/doctor/doctor.test.ts",
-    "test:wasm": "node scripts/run-ts-test.js src/commands/native/wasm/wasm.test.ts && node scripts/acceptance-fixture.test.js",
+    "test:wasm": "node scripts/run-ts-test.js src/commands/native/wasm/wasm.test.ts && node scripts/run-ts-test.js src/commands/native/wasm/collect.test.ts && node scripts/acceptance-fixture.test.js",
     "test:agent-contract": "npm run test:login && npm run test:auth && npm run test:capabilities && npm run test:test-account && npm run test:upload-preview && npm run test:preview-page && npm run test:check && npm run test:check-ai && npm run test:build-structured && npm run test:doctor && npm run test:wasm && npm run test:dev-session && npm run test:dev-session-command && npm run test:dev-runtime-event && npm run test:dev-runtime-client && npm run test:dev-session-control && npm run test:dev-runtime-session-follow && npm run test:dev-client-preview-orchestrator && npm run test:dev-watch-change && npm run test:network && npm run test:vibe && npx tsc --noEmit && npm run build && npm run test:vibe-process && npm run test:preview-page-process && npm run test:preview-page-detached && npm run verify:dist-version && npm run verify:agent-contract",
     "test:agent-contract:full": "npm run test:agent-contract && npm run test:dev-default-process && npm run test:dev-game-ready-process && npm run test:dev-client-preview-control-process && node scripts/dev-workflow-smoke.js",
     "publish:beta": "npm publish --registry=https://registry.npmjs.org/ --access public --tag beta",

package/dist/scripts/verify-agent-contract.js

@@ -404,6 +404,8 @@ assert.match(uploadHelp.stdout, /--vibe --web --dir/);
 assert.match(uploadHelp.stdout, /authorizationOpenCommand/);
 assert.match(uploadHelp.stdout, /simulation=false/);
 assert.match(uploadHelp.stdout, /--category <category>/);
+assert.match(uploadHelp.stdout, /--description <description>/);
+assert.match(uploadHelp.stdout, /Discover the fun of TikTok Mini Games\./);
 assert.match(uploadHelp.stdout, /--subcategory <subcategory>/);
 assert.match(uploadHelp.stdout, /--preview\b/);
 assert.match(uploadHelp.stdout, /--serve-preview-page\b/);
@@ -451,6 +453,17 @@ const wasmSmoke = spawnSync(process.execPath, [path.join(cliRoot, 'scripts/wasm-
 });
 assertExit(wasmSmoke, 0, 'Wasm built-artifact process smoke');
 console.log(wasmSmoke.stdout.trim());
+for (const operation of ['start', 'export']) {
+  assertExit(runWithoutWasmBinding(['wasm', 'collect', operation, '--help']), 0, `collect ${operation} help without binding`);
+  const invalid = runCli(['wasm', 'collect', operation, '--format', 'json']);
+  assertExit(invalid, 1, `collect ${operation} missing input`);
+  assert.equal(parseSingleJson(invalid, `collect ${operation}`).errorCode, 'WASM_COLLECT_INVALID_OPTIONS');
+}
+const collectSmoke = spawnSync(process.execPath, [path.join(cliRoot, 'scripts/wasm-collect-smoke.js')], {
+  cwd: cliRoot, encoding: 'utf8', timeout: 60000,
+});
+assertExit(collectSmoke, 0, 'Wasm collection built-artifact process smoke');
+console.log(collectSmoke.stdout.trim());
 const captureHelp = runCli(['dev', 'capture', '--help']);
 assertExit(captureHelp, 0, 'capture help');
 assert.match(captureHelp.stdout, /--timeout/);

package/dist/scripts/vibe-upload-smoke.js

@@ -31,6 +31,7 @@ let webMode = false;
 let webPolls = 0;
 let webFailureEndpoint;
 let expectedWebCategory = { category: 'Other', subcategory: 'Other' };
+let expectedWebDescription = 'Discover the fun of TikTok Mini Games.';
 const env = {
   ...process.env,
   HOME: temp,
@@ -194,7 +195,7 @@ async function main() {
         assert.equal(info.app_info.icon_uri, 'web-icon-receipt');
         assert.equal(info.app_info.app_name, input[input.indexOf('--title') + 1]);
         assert.deepEqual(info.app_info, {
-          description: 'DevTool PPE integration test fixture. Not a production game.',
+          description: expectedWebDescription,
           ...expectedWebCategory,
           terms_of_service: 'https://www.tiktok.com',
           privacy_policy: 'https://www.tiktok.com',
@@ -265,6 +266,19 @@ async function main() {
   assert.equal(events(completeDry)[0].classification.category, 'Casual');
   assert.equal(events(completeDry)[0].classification.subcategory, 'Puzzle');
   assert.equal(events(completeDry)[0].classification.source, 'app-info');
+  assert.equal(events(completeDry)[0].description, 'Process contract fixture');
+  assert.equal(events(completeDry)[0].descriptionSource, 'app-info');
+  const describedDry = await run([...input, '--description', '  Stack cats 🐈  ', '--dry-run', '--format', 'json']);
+  assert.equal(describedDry.code, 0, describedDry.stderr);
+  assert.equal(events(describedDry)[0].description, 'Stack cats 🐈');
+  assert.equal(events(describedDry)[0].descriptionSource, 'arguments');
+  assert.equal(events(describedDry)[0].classification.source, 'defaults');
+  assert.equal(events(describedDry)[0].platformWrite, false);
+  const descriptionOverrideDry = await run([...input, '--app-info', appInfoPath, '--description', 'New description', '--dry-run', '--format', 'json']);
+  assert.equal(descriptionOverrideDry.code, 0, descriptionOverrideDry.stderr);
+  assert.equal(events(descriptionOverrideDry)[0].description, 'New description');
+  assert.equal(events(descriptionOverrideDry)[0].descriptionSource, 'arguments');
+  assert.equal(events(descriptionOverrideDry)[0].classification.source, 'app-info');
   const overrideDry = await run([...input, '--app-info', appInfoPath, '--category', 'Puzzle', '--subcategory', 'Physics', '--dry-run', '--format', 'json']);
   assert.equal(overrideDry.code, 0, overrideDry.stderr);
   assert.equal(events(overrideDry)[0].classification.category, 'Puzzle');
@@ -380,6 +394,8 @@ async function main() {
   assert.equal(events(legacyWeb)[0].errorCode, 'VIBE_OPTION_REQUIRES_VIBE');
   assert.equal(requests.length, beforeWeb);
   for (const [args, code] of [
+    [['--description', ''], 'VIBE_INVALID_DESCRIPTION'],
+    [['--description', '  \n  '], 'VIBE_INVALID_DESCRIPTION'],
     [['--category', 'Puzzle'], 'VIBE_CATEGORY_PAIR_REQUIRED'],
     [['--subcategory', 'Physics'], 'VIBE_CATEGORY_PAIR_REQUIRED'],
     [['--category', 'Other', '--subcategory', 'Physics'], 'VIBE_INVALID_CATEGORY'],
@@ -394,14 +410,17 @@ async function main() {
     assert.equal(result.taskId, undefined);
     assert.equal(result.pageUrl, undefined);
   }
-  assert.equal(requests.length, beforeWeb, 'Invalid classification must not create tasks or upload');
+  assert.equal(requests.length, beforeWeb, 'Invalid metadata must not create tasks or upload');
   webMode = true;
   for (const format of ['json', 'ndjson']) {
+    expectedWebDescription = format === 'json' ? 'Discover the fun of TikTok Mini Games.' : 'Stack cats on a rooftop 🐈';
+    const descriptionArgs = format === 'json' ? [] : ['--description', expectedWebDescription];
     expectedWebCategory = format === 'json' ? {category: 'Other', subcategory: 'Other'} : {category: 'Puzzle', subcategory: 'Physics'};
     const categoryArgs = format === 'json' ? [] : ['--category', 'Puzzle', '--subcategory', 'Physics'];
     const receipt = path.join(temp, `upload-web-${format}.ndjson`);
     const requestStart = requests.length;
-    const web = await run([...input.filter(v => v !== '--no-open'), '--web', ...categoryArgs, '--format', format, '--poll-interval', '0.2'], async event => {
+    const web = await run([...input.filter(v => v !== '--no-open'), '--web', ...categoryArgs, ...descriptionArgs, '--format', format, '--poll-interval', '0.2'], async event => {
+      if (event.status === 'prepared') assert.equal(event.description, expectedWebDescription);
       if (event.status === 'prepared') assert.deepEqual(
         {category: event.classification.category, subcategory: event.classification.subcategory},
         expectedWebCategory);
@@ -437,6 +456,8 @@ async function main() {
       { category: output.at(-1).classification.category, subcategory: output.at(-1).classification.subcategory },
       expectedWebCategory);
     assert.equal(output.at(-1).classification.source, format === 'json' ? 'defaults' : 'arguments');
+    assert.equal(output.at(-1).description, expectedWebDescription);
+    assert.equal(output.at(-1).descriptionSource, format === 'json' ? 'defaults' : 'arguments');
     assert.equal(output.at(-1).taskStatusRaw, 3);
     assert.equal(output.filter(e => e.terminal).length, 1);
     assert.equal(webPolls, 5, 'Only true backend readiness unlocks authorization');
@@ -451,6 +472,7 @@ async function main() {
     assert.doesNotMatch(JSON.stringify(opens) + web.stdout + web.stderr, /process-test-secret|import_token|web-icon-receipt|web-package-receipt|aweme:\/\//);
   }
   expectedWebCategory = {category: 'Other', subcategory: 'Other'};
+  expectedWebDescription = 'Discover the fun of TikTok Mini Games.';
   webFailureEndpoint = '/bff/app_info/minis_import/submit_minis_import_info_for_agent/';
   const failedStart = requests.length;
   const webUploadFailure = await run([...input.filter(v => v !== '--no-open'), '--web', '--format', 'json'], undefined, {
@@ -588,6 +610,9 @@ async function main() {
   assert.equal(badMode.code, 1);
   assert.equal(events(badMode)[0].errorCode, 'VIBE_OPTION_REQUIRES_VIBE');
   const badCategoryMode = await run(['upload', '--category', 'Puzzle', '--subcategory', 'Physics', '--format', 'json']);
+  const badDescriptionMode = await run(['upload', '--description', 'Game description', '--format', 'json']);
+  assert.equal(badDescriptionMode.code, 1);
+  assert.equal(events(badDescriptionMode)[0].errorCode, 'VIBE_OPTION_REQUIRES_VIBE');
   assert.equal(events(badCategoryMode)[0].errorCode, 'VIBE_OPTION_REQUIRES_VIBE');
   const beforeCatalog = requests.length;
   const catalog = await run(['game', 'categories', '--format', 'json']);

package/dist/scripts/wasm-collect-smoke.js

@@ -0,0 +1,78 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const http = require('node:http');
+const { spawn } = require('node:child_process');
+const root = fs.mkdtempSync(path.join(os.tmpdir(), 'ttmg-collect-process-'));
+const entry = path.resolve(__dirname, '../dist/index.js');
+const preload = path.resolve(__dirname, 'wasm-collect-test-preload.cjs');
+const input = path.join(root, 'original.wasm');
+const wasm = Buffer.from('0061736d010000000105016000017f0304030000000404017000030707010372756e00000909010041000b030001020a1003040010010b0400412a0b040041070b', 'hex');
+fs.writeFileSync(input, wasm);
+const md5 = crypto.createHash('md5').update(wasm).digest('hex');
+const rc = path.join(root, 'rc.json');
+const secret = 'sessionid=TEST_ONLY_COLLECT_SECRET';
+fs.writeFileSync(rc, JSON.stringify({ cookie: secret }));
+let mode = 'success'; const calls = [];
+const server = http.createServer(async (req, res) => {
+  let body = ''; for await (const b of req) body += b;
+  calls.push({ url: req.url, method: req.method, body: body ? JSON.parse(body) : null, cookie: req.headers.cookie });
+  res.setHeader('content-type', 'application/json');
+  const data = mode === 'auth' ? { code: -401, message: secret }
+    : req.url.includes('/start') ? { code: 0, collect_state: 'open', cookie: secret }
+      : { code: 0, func_ids: [1, 0, 1], boot_func_ids: [0], cookie: secret };
+  res.end(JSON.stringify(data));
+});
+async function run(args) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(process.execPath, ['-r', preload, entry, ...args], { cwd: root,
+      env: { ...process.env, TTMGRC_PATH: rc, TTMG_COLLECT_TEST_PORT: String(server.address().port),
+        HTTP_PROXY: '', HTTPS_PROXY: '', ALL_PROXY: '', http_proxy: '', https_proxy: '', all_proxy: '',
+        NO_COLOR: '1', FORCE_COLOR: '0' } });
+    let stdout = '', stderr = '';
+    child.stdout.on('data', b => stdout += b); child.stderr.on('data', b => stderr += b);
+    const timer = setTimeout(() => { child.kill('SIGKILL'); reject(Error('CLI timeout')); }, 15000);
+    child.on('error', reject); child.on('close', code => { clearTimeout(timer); resolve({ code, stdout, stderr }); });
+  });
+}
+function result(r, code = 0) {
+  assert.equal(r.code, code, r.stderr || r.stdout);
+  assert.equal(r.stdout.trim().split('\n').length, 1, r.stdout);
+  assert.equal((r.stdout+r.stderr).includes(secret), false);
+  return JSON.parse(r.stdout);
+}
+(async () => {
+  await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
+  const args = ['--client-key','fixture','--wasm-md5',md5,'--format','json'];
+  const a = result(await run(['wasm','collect','start', ...args, '--verbose']));
+  assert.equal(a.collectState,'open'); assert.equal(calls[0].cookie,secret);
+  assert.equal(calls[0].body.reset,false);
+  result(await run(['wasm','collect','start',...args,'--reset']));
+  assert.equal(calls[1].body.reset,true);
+  const beforeDefault = calls.length;
+  const defaultJson = result(await run(['--verbose', 'wasm','collect','start','--client-key','fixture','--wasm-md5',md5]));
+  assert.equal(defaultJson.collectState,'open');assert.equal(calls.length,beforeDefault+1);
+  const output=path.join(root,'collection.json');
+  const exported=result(await run(['wasm','collect','export',...args,'--input',input,'--output',output,'--verbose']));
+  assert.equal(exported.collection.path,output);assert.equal(calls[3].method,'GET');
+  assert.equal(calls[3].cookie,secret);assert.match(calls[3].url,/strategy=union/);
+  const collection=JSON.parse(fs.readFileSync(output,'utf8'));
+  assert.deepEqual(collection.funcIds,[0,1]);assert.deepEqual(collection.bootFuncIds,[0]);
+  assert.equal(fs.readFileSync(output,'utf8').includes(secret),false);
+  const split=result(await run(['wasm','split','--input',input,'--collection',output,
+    '--output',path.join(root,'split'),'--dry-run','--format','json']));
+  assert.equal(split.status,'ready');
+  mode='auth';
+  assert.equal(result(await run(['wasm','collect','start',...args,'--verbose']),1).errorCode,'WASM_AUTH_REQUIRED');
+  const count=calls.length;fs.writeFileSync(rc,'{}');
+  assert.equal(result(await run(['wasm','collect','start',...args]),1).errorCode,'WASM_AUTH_REQUIRED');
+  assert.equal(calls.length,count);
+  const unknown=await run(['wasm','collect','export',...args,'--reset']);assert.notEqual(unknown.code,0);
+  assert.equal(calls.length,count);
+  assert.deepEqual(fs.readFileSync(input),wasm);
+  console.log('Wasm collect process contract passed: local login transport, reset, export-to-split, clean verbose output; fixture only');
+})().catch(e => { console.error(e); process.exitCode=1; }).finally(() => {
+  server.closeAllConnections();server.close();fs.rmSync(root,{recursive:true,force:true});
+});

package/dist/scripts/wasm-collect-test-preload.cjs

@@ -0,0 +1,13 @@
+// Test-only transport: credentials and platform responses are synthetic.
+const assert = require('node:assert/strict');
+const https = require('node:https');
+const http = require('node:http');
+const port = Number(process.env.TTMG_COLLECT_TEST_PORT);
+assert.ok(Number.isInteger(port) && port > 0 && port < 65536);
+https.request = (options, callback) => {
+  assert.equal(options.hostname, 'developers.tiktok.com');
+  assert.match(options.path, /^\/api\/wasm-collect\/v1\/(start|export)(\?|$)/);
+  return http.request({ ...options, protocol: 'http:', hostname: '127.0.0.1', host: undefined,
+    port, agent: undefined, servername: undefined }, callback);
+};
+https.get = (options, callback) => { const req = https.request(options, callback); req.end(); return req; };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ttmg/cli",
-  "version": "0.4.6-vibe-beta.14",
+  "version": "0.4.6-vibe-beta.15",
   "description": "TikTok Mini Game Command Line Tool",
   "license": "ISC",
   "bin": {
@@ -48,7 +48,7 @@
     "test:check-ai": "node scripts/run-ts-test.js src/commands/native/check/ai.test.ts",
     "test:build-structured": "node scripts/run-ts-test.js src/commands/native/build/build.test.ts",
     "test:doctor": "node scripts/run-ts-test.js src/commands/native/doctor/doctor.test.ts",
-    "test:wasm": "node scripts/run-ts-test.js src/commands/native/wasm/wasm.test.ts && node scripts/acceptance-fixture.test.js",
+    "test:wasm": "node scripts/run-ts-test.js src/commands/native/wasm/wasm.test.ts && node scripts/run-ts-test.js src/commands/native/wasm/collect.test.ts && node scripts/acceptance-fixture.test.js",
     "test:agent-contract": "npm run test:login && npm run test:auth && npm run test:capabilities && npm run test:test-account && npm run test:upload-preview && npm run test:preview-page && npm run test:check && npm run test:check-ai && npm run test:build-structured && npm run test:doctor && npm run test:wasm && npm run test:dev-session && npm run test:dev-session-command && npm run test:dev-runtime-event && npm run test:dev-runtime-client && npm run test:dev-session-control && npm run test:dev-runtime-session-follow && npm run test:dev-client-preview-orchestrator && npm run test:dev-watch-change && npm run test:network && npm run test:vibe && npx tsc --noEmit && npm run build && npm run test:vibe-process && npm run test:preview-page-process && npm run test:preview-page-detached && npm run verify:dist-version && npm run verify:agent-contract",
     "test:agent-contract:full": "npm run test:agent-contract && npm run test:dev-default-process && npm run test:dev-game-ready-process && npm run test:dev-client-preview-control-process && node scripts/dev-workflow-smoke.js",
     "publish:beta": "npm publish --registry=https://registry.npmjs.org/ --access public --tag beta",

package/vibe-upload.md

@@ -2,10 +2,17 @@
 
 ## 中文
 
-默认资料修复已在 `0.4.6-vibe-beta.11` 发布：CLI 自动补齐此前跑通的 PPE 试用资料，用户只提供标题和头像。beta.10 仅修改了输入提示，没有自动补齐字段，真实基础信息提交会被拒绝。
+适用版本：`0.4.6-vibe-beta.15`。用户只提供标题和头像；Skill 可选填描述与分类，其他应用资料由 CLI 自动补齐。
 
 本次范围：本地准备 → 授权绑定 → 上传头像 → 提交应用信息 → 上传代码包 → 上传完成。不包含预览、审核或正式发布。`--web` 使用真实 PPE 授权和上传；`--mock` 的授权与素材上传仍为模拟。网页授权后自动上传的修复已在 `0.4.6-vibe-beta.9` 发布；用户输入要求已在 `0.4.6-vibe-beta.10` 修正。
 
+### Quick Start
+
+1. 安装并检查 `ttmg --version`、`ttmg capabilities --format json`。
+2. Skill 根据实际玩法，用 `ttmg game categories --format json` 查询并选择分类；可生成描述并传 `--description`。未传时默认描述为 `Discover the fun of TikTok Mini Games.`，默认分类为 `Other/Other`。
+3. 执行下方 Web 上传命令并保持原进程运行，在自动打开的浏览器完成授权。需要核对描述和分类时，先用 `--dry-run --format json` 本地检查。
+4. 等待 `terminal=true`、`status=uploaded`、`uploaded=true`、`simulation=false` 和退出码 0，再报告上传完成。失败读取 `errorCode` 与 `nextAction`，不自动重传。
+
 ### Web 上传入口
 
 真实授权和上传使用 `--web`。安装 `vibe-beta` 标签对应的版本，再用 `ttmg --version` 核对实际执行版本。`beta` 是另一个发布标签，不能用它判断 Web 链路是否包含最新修复。无需设置 PPE 环境变量或预先执行 `ttmg login`；用户在本次浏览器授权页完成授权。
@@ -15,7 +22,7 @@ Skill 只引导开发者准备游戏名称、本地头像和工程，然后调
 Skill 固定调用：
 
 ```sh
-npm install -g @ttmg/cli@vibe-beta
+npm install -g @ttmg/cli@0.4.6-vibe-beta.15
 ttmg --version
 ttmg capabilities --format json
 ttmg upload --vibe --web --dir ./game --title "星环守卫" --icon ./avatar.png --format ndjson
@@ -39,6 +46,19 @@ ttmg upload --vibe --web --dir ./game --title "星环守卫" --icon ./avatar.png
 
 CLI 在 `app_info` 请求中自动带上 `description`、`category`、`subcategory`、`terms_of_service`、`privacy_policy`、`copyright_confirmation`、`contact_email`，再填入用户标题和真实上传头像 URI。默认资料标识为 `ppe-trial`；命令中没有这些参数，不代表请求里没传。能力查询的 `appInfoFields.defaultedByCli` 列出默认字段。
 
+### 可选游戏描述
+
+默认描述为 `Discover the fun of TikTok Mini Games.`，不包含游戏名称。Skill 可根据实际玩法生成描述并传入 `--description`，无需用户额外填写：
+
+```sh
+ttmg upload --vibe --web --dir ./game --title "My game" --icon ./avatar.png --description "Stack cats on a rooftop and keep the tower balanced." --format ndjson
+```
+
+- 优先级：`--description` > 旧 `--app-info` 文件中的描述 > 默认描述；只覆盖描述，其他字段保持原有规则。
+- 参数首尾空白会被去除；空白文本或无效 Unicode 返回 `VIBE_INVALID_DESCRIPTION`，不会创建任务或上传。
+- `prepared` 和后续终态返回 `description` 与 `descriptionSource`（`arguments / app-info / defaults`）；可用 `--dry-run` 检查。
+- 描述是可选 Skill 输入，省略仍可上传，不新增用户必填项。
+
 ### 查询并推荐游戏分类
 
 以下命令和参数从 `0.4.6-vibe-beta.14` 开始提供。查询离线执行，不登录、不创建任务、不写平台：
@@ -199,6 +219,13 @@ TTMG_VIBE_BACKEND=local-http TTMG_VIBE_API=http://127.0.0.1:3100 ttmg upload --v
 
 The default-metadata fix shipped in `0.4.6-vibe-beta.11`. The CLI fills the existing PPE trial metadata automatically; users provide only title and icon. Beta.10 changed input guidance without filling the fields, and its real app-info submission was rejected.
 
+### Quick Start
+
+1. Install, then check `ttmg --version` and `ttmg capabilities --format json`.
+2. The Skill queries `ttmg game categories --format json` and selects a pair from the actual gameplay. It may generate a description and pass `--description`. Omitting these options keeps `Discover the fun of TikTok Mini Games.` and `Other/Other`.
+3. Run the Web upload command below, keep the same process alive and authorize in the opened browser. To inspect description and classification first, use `--dry-run --format json` for local validation.
+4. Confirm `terminal=true`, `status=uploaded`, `uploaded=true`, `simulation=false` and exit code 0 before reporting upload completion. On failure, read `errorCode` and `nextAction`; do not automatically reupload.
+
 ### Web upload entry
 
 Scope: local preparation → authorization binding → avatar upload → app-info submission → package upload → **upload complete**. No preview, review or production release. `--web` uses real PPE authorization and uploads; `--mock` still simulates authorization and material uploads.
@@ -208,7 +235,7 @@ Automatic upload was fixed in `0.4.6-vibe-beta.9`; the user-input clarification
 Use `--web` for real authorization and upload. Install `vibe-beta` and check the executable with `ttmg --version`. The separate `beta` tag does not identify the latest Web fixes. No PPE environment variables or prior `ttmg login` are required; the user authorizes in the browser for this task.
 
 ```sh
-npm install -g @ttmg/cli@vibe-beta
+npm install -g @ttmg/cli@0.4.6-vibe-beta.15
 ttmg --version
 ttmg capabilities --format json
 ttmg upload --vibe --web --dir ./game --title "My game" --icon ./avatar.png --format ndjson
@@ -230,6 +257,19 @@ The CLI submits `description`, `category`, `subcategory`, `terms_of_service`, `p
 
 Source checked on 2026-09-14: BFF enforces PNG/JPEG, 1024×1024, 5 MiB icons and a 100 MiB Native ZIP/uncompressed-size limit. Full local ZIP-content/uncompressed-size validation is not implemented. On 2026-09-15, a corrected build completed real PPE web authorization and icon, default app-info and package uploads with owned test fixtures. This does not cover every game, phone authorization or production.
 
+### Optional game description
+
+The default is `Discover the fun of TikTok Mini Games.`, without the game title. A Skill may generate a description from the actual gameplay and pass `--description` without asking the user for another field:
+
+```sh
+ttmg upload --vibe --web --dir ./game --title "My game" --icon ./avatar.png --description "Stack cats on a rooftop and keep the tower balanced." --format ndjson
+```
+
+- Precedence: `--description` > legacy `--app-info` description > default. Only the description is overridden; other metadata follows existing rules.
+- Leading and trailing whitespace is trimmed. Blank text or invalid Unicode returns `VIBE_INVALID_DESCRIPTION` before task creation or upload.
+- `prepared` and subsequent terminal events expose `description` and `descriptionSource` (`arguments / app-info / defaults`). Inspect them with `--dry-run`.
+- Description is an optional Skill input. Omitting it still permits upload and adds no required user input.
+
 ### Query and recommend game categories
 
 These commands and options are available from `0.4.6-vibe-beta.14`. Queries run offline without login, task creation or platform writes: