@ttmg/cli 0.4.6-vibe-beta.15 → 0.4.6-vibe-beta.16

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ttmg/cli",
-  "version": "0.4.6-vibe-beta.15",
+  "version": "0.4.6-vibe-beta.16",
   "description": "TikTok Mini Game Command Line Tool",
   "license": "ISC",
   "bin": {

package/dist/scripts/verify-agent-contract.js

@@ -133,7 +133,8 @@ assert.equal(categoryCatalog.platformWrite, false);
 assert.equal(categoryCatalog.categoryCount, 12);
 assert.equal(categoryCatalog.subcategoryCount, 114);
 assert.equal(capabilities.commands.gameCategories.catalogVersion, categoryCatalog.catalogVersion);
-assert.match(capabilities.commands.vibeUpload.command, /--vibe --web/);
+assert.match(capabilities.commands.vibeUpload.command, /--vibe --dir/);
+assert.equal(capabilities.commands.vibeUpload.webAuthorization.available, false);
 assert.equal(capabilities.commands.vibeUpload.skillWorkflow.keepUploadProcessRunning, true);
 assert.equal(capabilities.commands.vibeUpload.skillWorkflow.realUploadSuccess.simulation, false);
 assert.equal(capabilities.commands.vibeUpload.appInfoFields.defaultedByCli.includes('privacy_policy'), true);
@@ -400,7 +401,7 @@ const uploadHelp = runCli(['upload', '--help']);
 assert.doesNotMatch(uploadHelp.stdout, /--app-info/);
 assert.match(uploadHelp.stdout.replace(/\s+/g, ' '), /only title and icon|只收集标题和头像/);
 assertExit(uploadHelp, 0, 'upload help');
-assert.match(uploadHelp.stdout, /--vibe --web --dir/);
+assert.match(uploadHelp.stdout, /--vibe --dir/);
 assert.match(uploadHelp.stdout, /authorizationOpenCommand/);
 assert.match(uploadHelp.stdout, /simulation=false/);
 assert.match(uploadHelp.stdout, /--category <category>/);

package/dist/scripts/vibe-upload-smoke.js

@@ -145,10 +145,10 @@ async function main() {
   }
   const launches = fs.readFileSync(browserReceipt, 'utf8').trim().split('\n').map(JSON.parse);
   assert.equal(launches.length, 2);
-  assert.ok(launches.every(item => item.args.includes(ready.url + '/authorize')));
+  assert.ok(launches.every(item => item.args.includes(ready.url)));
   const redirect = await fetch(ready.url + '/authorize', {redirect: 'manual'});
-  assert.equal(redirect.headers.get('location'), landing);
-  assert.equal(redirect.status, 302);
+  assert.equal(redirect.headers.get('location'), null);
+  assert.equal(redirect.status, 410);
   rendered = workerMessage(message => message.type === 'rendered' && message.id === 2);
   authWorker.send({type: 'render', id: 2, html: '<h1>Complete</h1>'});
   await rendered;
@@ -389,7 +389,7 @@ async function main() {
 
   const beforeWeb = requests.length;
   const webConflict = await run([...input, '--web', '--mock', '--format', 'json']);
-  assert.equal(events(webConflict)[0].errorCode, 'VIBE_WEB_OPTION_CONFLICT');
+  assert.equal(events(webConflict)[0].errorCode, 'VIBE_WEB_DISABLED');
   const legacyWeb = await run(['upload', '--web', '--format', 'json']);
   assert.equal(events(legacyWeb)[0].errorCode, 'VIBE_OPTION_REQUIRES_VIBE');
   assert.equal(requests.length, beforeWeb);
@@ -402,7 +402,7 @@ async function main() {
     [['--category', 'Unknown', '--subcategory', 'Other'], 'VIBE_INVALID_CATEGORY'],
     [['--category', '', '--subcategory', ''], 'VIBE_INVALID_CATEGORY'],
   ]) {
-    const invalid = await run([...input.filter(v => v !== '--no-open'), '--web', ...args, '--format', 'json']);
+    const invalid = await run([...input, ...args, '--format', 'json']);
     assert.equal(invalid.code, 1);
     const result = events(invalid)[0];
     assert.equal(result.errorCode, code);
@@ -412,36 +412,46 @@ async function main() {
   }
   assert.equal(requests.length, beforeWeb, 'Invalid metadata must not create tasks or upload');
   webMode = true;
+  for (const authorizationMode of ['qr']) {
   for (const format of ['json', 'ndjson']) {
     expectedWebDescription = format === 'json' ? 'Discover the fun of TikTok Mini Games.' : 'Stack cats on a rooftop 🐈';
     const descriptionArgs = format === 'json' ? [] : ['--description', expectedWebDescription];
     expectedWebCategory = format === 'json' ? {category: 'Other', subcategory: 'Other'} : {category: 'Puzzle', subcategory: 'Physics'};
     const categoryArgs = format === 'json' ? [] : ['--category', 'Puzzle', '--subcategory', 'Physics'];
-    const receipt = path.join(temp, `upload-web-${format}.ndjson`);
+    const receipt = path.join(temp, `upload-${authorizationMode}-${format}.ndjson`);
     const requestStart = requests.length;
-    const web = await run([...input.filter(v => v !== '--no-open'), '--web', ...categoryArgs, ...descriptionArgs, '--format', format, '--poll-interval', '0.2'], async event => {
+    const web = await run([...input.filter(v => v !== '--no-open'), ...(authorizationMode === 'web' ? ['--web'] : []), ...categoryArgs, ...descriptionArgs, '--format', format, '--poll-interval', '0.2'], async event => {
       if (event.status === 'prepared') assert.equal(event.description, expectedWebDescription);
       if (event.status === 'prepared') assert.deepEqual(
         {category: event.classification.category, subcategory: event.classification.subcategory},
         expectedWebCategory);
       if (event.status === 'waiting_authorization') {
-        assert.equal(event.authorizationMode, 'web');
+        assert.equal(event.authorizationMode, authorizationMode);
         assert.equal(event.browserOpenRequested, true);
         assert.equal(event.simulation, false);
-        assert.equal(event.nextAction, 'open_browser');
-        assert.equal(event.qrPurpose, undefined);
+        assert.equal(event.nextAction, authorizationMode === 'web' ? 'open_browser' : 'scan_qr');
+        assert.equal(event.qrPurpose, authorizationMode === 'web' ? undefined : 'authorization_binding');
         const response = await fetch(event.pageUrl + '/authorize', {redirect: 'manual'});
-        assert.equal(response.status, 302);
-        assert.match(response.headers.get('location'), /^https:\/\/developers\.tiktok\.com\/portal_h5\/minis_import\?/);
+        assert.equal(response.status, 410);
+        assert.equal(response.headers.get('location'), null);
         const html = await (await fetch(event.pageUrl)).text();
-        assert.match(html, /Authorize in your browser/);
-        assert.doesNotMatch(html, /alt="Authorization QR"|Scan the QR code/);
+        assert.ok(html.includes(expectedWebDescription));
+        assert.ok(html.includes(expectedWebCategory.category));
+        assert.ok(html.includes(expectedWebCategory.subcategory));
+        assert.doesNotMatch(html, /<header class="brand"/);
+        if (authorizationMode === 'web') {
+          assert.match(html, /Authorize in your browser/);
+          assert.doesNotMatch(html, /alt="Authorization QR"|Scan the QR code/);
+        } else {
+          assert.match(html, /alt="Authorization QR"/);
+          assert.match(html, /data:image\/png;base64/);
+        }
       }
     }, {
       NODE_OPTIONS: env.NODE_OPTIONS + ' --require=' + path.join(__dirname, 'vibe-auth-open-test-preload.cjs'),
       TTMG_AUTH_OPEN_TEST_RECEIPT: receipt,
       // Explicit --web must not inherit an old Mock backend setting.
-      TTMG_VIBE_BACKEND: 'mock',
+      TTMG_VIBE_BACKEND: authorizationMode === 'web' ? 'mock' : '',
       TTMG_VIBE_TEST_RETAIN_UPLOAD_SOCKET: '1',
     });
     assert.equal(web.code, 0, web.stderr);
@@ -468,14 +478,17 @@ async function main() {
     if (format === 'json') assert.equal(output.length, 1);
     const opens = fs.readFileSync(receipt, 'utf8').trim().split('\n').map(line => JSON.parse(line));
     assert.equal(opens.length, 1);
-    assert.ok(opens[0].args.some(arg => /^http:\/\/127\.0\.0\.1:\d+\/[a-f0-9]{48}\/authorize$/.test(arg)));
+    assert.ok(opens[0].args.some(arg => (authorizationMode === 'web'
+      ? /^http:\/\/127\.0\.0\.1:\d+\/[a-f0-9]{48}\/authorize$/
+      : /^http:\/\/127\.0\.0\.1:\d+\/[a-f0-9]{48}$/).test(arg)));
     assert.doesNotMatch(JSON.stringify(opens) + web.stdout + web.stderr, /process-test-secret|import_token|web-icon-receipt|web-package-receipt|aweme:\/\//);
   }
+  }
   expectedWebCategory = {category: 'Other', subcategory: 'Other'};
   expectedWebDescription = 'Discover the fun of TikTok Mini Games.';
   webFailureEndpoint = '/bff/app_info/minis_import/submit_minis_import_info_for_agent/';
   const failedStart = requests.length;
-  const webUploadFailure = await run([...input.filter(v => v !== '--no-open'), '--web', '--format', 'json'], undefined, {
+  const webUploadFailure = await run([...input.filter(v => v !== '--no-open'), '--format', 'json'], undefined, {
     NODE_OPTIONS: env.NODE_OPTIONS + ' --require=' + path.join(__dirname, 'vibe-auth-open-test-preload.cjs'),
     TTMG_AUTH_OPEN_TEST_RECEIPT: path.join(temp, 'web-failure-open.ndjson'),
     TTMG_VIBE_TEST_RETAIN_UPLOAD_SOCKET: '1',
@@ -600,7 +613,9 @@ async function main() {
   assert.equal(events(projectRun)[0].status, 'prepared');
   assert.ok(events(projectRun)[0].packageSizeBytes > 0);
 
-  const missingBackend = await run([...input, '--format', 'json']);
+  const missingBackend = await run([...input, '--format', 'json'], undefined, {
+    TTMG_VIBE_BACKEND: 'unsupported',
+  });
   assert.equal(missingBackend.code, 1);
   assert.equal(
     events(missingBackend)[0].errorCode,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ttmg/cli",
-  "version": "0.4.6-vibe-beta.15",
+  "version": "0.4.6-vibe-beta.16",
   "description": "TikTok Mini Game Command Line Tool",
   "license": "ISC",
   "bin": {