@ttmg/cli 0.4.6-vibe-beta.15 → 0.4.6-vibe-beta.17

package/dist/index.js

@@ -7241,8 +7241,8 @@ const messages = {
         'cli.command.login.password': 'Developer account password (implicit mode)',
         'cli.command.logout.desc': 'Logout and clear local user data',
         'cli.command.auth.desc': 'Inspect local authentication state',
-        'cli.command.auth.open.desc': 'Open an existing Vibe task authorization page in the system browser',
-        'cli.command.upload.vibeWeb': 'Authorize in the browser, then upload to PPE (--vibe; no Mock or --no-open)',
+        'cli.command.auth.open.desc': 'Reopen the local QR page for an existing Vibe task',
+        'cli.command.upload.vibeWeb': 'Disabled; use --vibe and scan with TikTok on your phone',
         'cli.command.game.desc': 'Inspect game metadata supported by the platform',
         'cli.command.game.categories.desc': 'List game categories and subcategories with gameplay descriptions (offline, read-only)',
         'cli.command.game.categories.category': 'Filter by an exact category value, e.g. Puzzle',
@@ -7252,23 +7252,26 @@ const messages = {
         'cli.command.upload.vibeDescription': 'Optional game description (--vibe); default: Discover the fun of TikTok Mini Games.',
         'cli.command.upload.vibeSubcategory': 'Optional subcategory belonging to --category; omit both to keep Other/Other (--vibe)',
         'cli.command.upload.vibeWebGuide': `
-Vibe web upload (real PPE trial):
-  ttmg upload --vibe --web --dir ./game --title "My game" --icon ./avatar.png --format ndjson
+Vibe QR upload (real PPE trial):
+  ttmg upload --vibe --dir ./game --title "My game" --icon ./avatar.png --format ndjson
   Use --package ./game.zip instead of --dir for an existing ZIP.
   Collect only title and icon; the CLI fills other app_info fields with PPE trial defaults.
   Skill may pass --description "Game description"; otherwise use "Discover the fun of TikTok Mini Games." (legacy metadata-file descriptions are preserved).
   Skill may query ttmg game categories --format json and pass --category Puzzle --subcategory Physics together.
   Omit both to keep Other/Other (or the legacy metadata-file classification). Invalid pairs fail before task creation.
   prepared and terminal events expose the submitted classification and its source.
-  Keep this process running. At waiting_authorization, complete authorization in the system browser on the CLI computer.
-  pageUrl is the local binding/progress page. To reopen authorization, execute the returned authorizationOpenCommand.
+  Keep this process running. At waiting_authorization, scan the QR on pageUrl with TikTok on your phone.
+  pageUrl is the local QR/progress page on the CLI computer. Reopen it with authorizationOpenCommand.
   The CLI polls and uploads avatar, app_info and package automatically after authorization. Do not start a second upload.
+  After upload, waiting_preview keeps polling the same task until previewUrl is available; pageUrl then shows the game preview QR.
+  Preview ready: previewReady=true and qrPurpose=game_preview. A preview timeout preserves uploaded=true; check the task, do not reupload.
   Real success: terminal=true, status=uploaded, uploaded=true, simulation=false. On failure, read errorCode and nextAction.
-  --web opens the browser for every output format. --mock is a separate simulation mode.
+  The local QR page opens for every output format; --no-open disables automatic opening.
+  The page displays the submitted title, icon, description, category and subcategory.
   Upload completion is not review approval or production release. See bundled vibe-upload.md and ttmg capabilities --format json.
 `,
         'cli.command.auth.open.pageUrl': 'Local pageUrl returned by the running Vibe upload command',
-        'cli.command.auth.open.requested': 'Browser open requested. Complete authorization there; the existing upload process continues polling.',
+        'cli.command.auth.open.requested': 'QR page open requested. Scan with TikTok on your phone; the existing upload process continues polling.',
         'cli.command.auth.open.invalidPage': 'Pass the local pageUrl from the running Vibe upload command, not the platform URL.',
         'cli.command.auth.open.unavailable': 'Authorization page is unavailable, expired, or no longer waiting. Check the existing upload process; no new task was created.',
         'cli.command.auth.open.invalidFormat': 'Use text, json, or ndjson output.',
@@ -7467,9 +7470,9 @@ Vibe web upload (real PPE trial):
         'cli.command.upload.dir': 'Game project directory (default: current directory)',
         'cli.command.upload.preview': 'Wait for platform processing and output the preview payload',
         'cli.command.upload.servePreviewPage': 'Serve a temporary local preview page with test-account and preview QR codes',
-        'cli.command.upload.noOpen': 'Do not open the local preview page in the default browser',
+        'cli.command.upload.noOpen': 'Do not automatically open the local preview or Vibe QR page',
         'cli.command.upload.format': 'Output format: text | json | ndjson',
-        'cli.command.upload.vibe': 'Binding and upload: collect only title and icon; CLI fills other fields with PPE trial defaults (schema v2)',
+        'cli.command.upload.vibe': 'Scan with TikTok and upload: provide title and icon; CLI fills other fields with PPE trial defaults (schema v2)',
         'cli.command.upload.vibeTitle': 'Game title supplied by the Skill (--vibe)',
         'cli.command.upload.vibeAppInfo': 'Legacy metadata file compatibility; not needed for current uploads and must not be requested from users',
         'cli.command.upload.vibeIcon': 'Local PNG/JPEG/WebP selected by the user (--vibe)',
@@ -7688,8 +7691,8 @@ Vibe web upload (real PPE trial):
         'cli.command.login.password': '开发者账号密码（implicit 模式）',
         'cli.command.logout.desc': '退出登录并清除本地用户信息',
         'cli.command.auth.desc': '查看本地登录状态',
-        'cli.command.auth.open.desc': '在系统浏览器打开已有 Vibe 任务的授权页',
-        'cli.command.upload.vibeWeb': '网页授权就绪后自动上传到 PPE（--vibe；不能与 Mock 或 --no-open 同用）',
+        'cli.command.auth.open.desc': '重新打开已有 Vibe 任务的本地二维码页',
+        'cli.command.upload.vibeWeb': '已关闭；使用 --vibe 并在手机 TikTok 中扫码授权',
         'cli.command.game.desc': '查询平台支持的游戏资料',
         'cli.command.game.categories.desc': '查询游戏类型、子类型及玩法说明（离线、只读）',
         'cli.command.game.categories.category': '按类型的精确值筛选，例如 Puzzle',
@@ -7699,23 +7702,26 @@ Vibe web upload (real PPE trial):
         'cli.command.upload.vibeDescription': '可选游戏描述（--vibe）；默认值：Discover the fun of TikTok Mini Games.',
         'cli.command.upload.vibeSubcategory': '所属类型的可选子类型；两者均不传保留 Other/Other（--vibe）',
         'cli.command.upload.vibeWebGuide': `
-Vibe 网页上传（真实 PPE 试用）：
-  ttmg upload --vibe --web --dir ./game --title "游戏名称" --icon ./avatar.png --format ndjson
+Vibe 扫码上传（真实 PPE 试用）：
+  ttmg upload --vibe --dir ./game --title "游戏名称" --icon ./avatar.png --format ndjson
   已有 ZIP 时，用 --package ./game.zip 替换 --dir。
   只收集标题和头像；其他 app_info 字段由 CLI 使用 PPE 试用默认值补齐。
   Skill 可传 --description "游戏描述"；省略时使用 Discover the fun of TikTok Mini Games.（旧资料文件中的描述保留）。
   Skill 可先查 ttmg game categories --format json，再成对传入 --category Puzzle --subcategory Physics。
   两者均不传保留 Other/Other（旧资料文件调用保留文件分类）；无效组合在创建任务前报错。
   prepared 和终态事件返回最终 classification 及其来源。
-  保持原进程运行。在 waiting_authorization 阶段，在 CLI 所在电脑的系统浏览器完成授权。
-  pageUrl 是本机绑定／进度页；重新打开授权页时，执行返回的 authorizationOpenCommand。
+  保持原进程运行。在 waiting_authorization 阶段，使用手机 TikTok 扫描 pageUrl 页面中的二维码。
+  pageUrl 是 CLI 所在电脑的二维码／进度页；重新打开时，执行返回的 authorizationOpenCommand。
   CLI 负责轮询，授权后自动上传 avatar、app_info、package，不再启动第二次上传。
+  上传后进入 waiting_preview，继续查询同一任务；拿到 previewUrl 后，原 pageUrl 页面展示游戏预览二维码。
+  previewReady=true 且 qrPurpose=game_preview 表示可扫码预览；等待超时仍保留 uploaded=true，请核对任务，不要重传。
   真实成功：terminal=true、status=uploaded、uploaded=true、simulation=false。失败时读取 errorCode 和 nextAction。
-  --web 在所有输出格式下都会打开浏览器；--mock 是独立的模拟模式。
+  所有输出格式都会打开本地二维码页；--no-open 可关闭自动打开。
+  页面展示本次提交的标题、头像、描述、类型和子类型。
   上传完成不代表审核通过或正式上线。详见包内 vibe-upload.md 和 ttmg capabilities --format json。
 `,
         'cli.command.auth.open.pageUrl': '正在运行的 Vibe 上传命令返回的本地 pageUrl',
-        'cli.command.auth.open.requested': '已请求浏览器打开授权页。请在页面完成授权，原上传进程继续轮询。',
+        'cli.command.auth.open.requested': '已请求打开二维码页。请用手机 TikTok 扫码授权，原上传进程继续轮询。',
         'cli.command.auth.open.invalidPage': '请传入正在运行的 Vibe 上传命令返回的本地 pageUrl，不是平台授权链接。',
         'cli.command.auth.open.unavailable': '授权页不可用、已过期或已不在等待授权。请查看原上传进程状态；未新建任务。',
         'cli.command.auth.open.invalidFormat': '输出格式请使用 text、json 或 ndjson。',
@@ -7914,9 +7920,9 @@ Vibe 网页上传（真实 PPE 试用）：
         'cli.command.upload.dir': '小游戏项目根目录（默认为当前目录）',
         'cli.command.upload.preview': '等待平台处理并输出预览二维码原始内容',
         'cli.command.upload.servePreviewPage': '启动包含测试账号与预览二维码的临时本地页面',
-        'cli.command.upload.noOpen': '不使用默认浏览器打开本地预览页面',
+        'cli.command.upload.noOpen': '不自动打开本地预览页面或 Vibe 二维码页',
         'cli.command.upload.format': '输出格式：text | json | ndjson',
-        'cli.command.upload.vibe': '绑定上传：只收集标题和头像，CLI 自动补齐其他字段的 PPE 试用默认值（schema v2）',
+        'cli.command.upload.vibe': 'TikTok 扫码上传：只收集标题和头像，CLI 自动补齐其他字段的 PPE 试用默认值（schema v2）',
         'cli.command.upload.vibeAppInfo': '仅兼容旧资料文件；当前上传无需此参数，不应向用户索要',
         'cli.command.upload.vibeTitle': 'Skill 提供的游戏标题（--vibe）',
         'cli.command.upload.vibeIcon': '用户指定的本地 PNG/JPEG/WebP 图片（--vibe）',
@@ -16376,7 +16382,7 @@ async function authStatus(options = {}) {
     return result;
 }
 
-var version = "0.4.6-vibe-beta.15";
+var version = "0.4.6-vibe-beta.17";
 var engines = {
 	node: ">=20.19.1 <21 || >=22"
 };
@@ -17136,7 +17142,7 @@ function getCapabilities() {
                 networkRequired: false,
             },
             vibeUpload: {
-                command: 'ttmg upload --vibe --web --dir <gameDir> --title <title> --icon <iconPath> --format ndjson',
+                command: 'ttmg upload --vibe --dir <gameDir> --title <title> --icon <iconPath> --format ndjson',
                 mockCommand: 'ttmg upload --vibe --mock --dir <gameDir> --title <title> --icon <iconPath> --format ndjson',
                 guide: 'vibe-upload.md',
                 option: '--vibe',
@@ -17159,7 +17165,7 @@ function getCapabilities() {
                     host: 'developers.tiktok.com',
                     taskCreation: true,
                     statusPolling: true,
-                    authorizationScheme: 'aweme://webview?url=<encoded landing_url>',
+                    authorizationScheme: 'landing_url',
                     uploadEnabled: true,
                 },
                 terminalSuccess: 'uploaded',
@@ -17186,7 +17192,27 @@ function getCapabilities() {
                     legacyAppInfo: 'preserved-when-options-omitted; explicit-pair-overrides-category-fields',
                     resultField: 'classification',
                 },
-                webAuthorization: { option: '--web', backend: 'ppe', defaultLane: 'ppe_op_vc', simulation: false, opensSystemBrowser: true, continuesPolling: true, formatIndependent: true, conflictsWith: ['--mock', '--mock-scenario', '--vibe-api', '--no-open'], mockBehaviorUnchanged: true, materialUploadEnabled: true },
+                webAuthorization: { option: '--web', available: false, errorCode: 'VIBE_WEB_DISABLED', replacement: '--vibe', materialUploadEnabled: false },
+                qrAuthorization: {
+                    command: 'ttmg upload --vibe --dir <gameDir> --title <title> --icon <iconPath> --format ndjson',
+                    defaultWithoutWeb: true,
+                    backend: 'ppe',
+                    defaultLane: 'ppe_op_vc',
+                    requiresEnvironmentConfiguration: false,
+                    simulation: false,
+                    opensLocalQrPage: true,
+                    formatIndependent: true,
+                    disablePageOpenOption: '--no-open',
+                    pageUrlField: 'pageUrl',
+                    authorizationMode: 'qr',
+                    nextAction: 'scan_qr',
+                    userAction: 'Open pageUrl on the CLI computer and scan the authorization QR with TikTok on the phone',
+                    continuesPolling: true,
+                    materialUploadEnabled: true,
+                    phoneAuthorizationVerified: true,
+                    authorizationQrPayload: 'landing_url',
+                    pageMetadata: ['title', 'icon', 'description', 'category', 'subcategory'],
+                },
                 skillWorkflow: {
                     preferredFormat: 'ndjson',
                     packageAlternative: '--package <zipPath> replaces --dir <gameDir>',
@@ -17195,7 +17221,7 @@ function getCapabilities() {
                     uploadOwner: 'cli',
                     waitingAuthorization: {
                         status: 'waiting_authorization',
-                        userAction: 'complete authorization in the system browser on the CLI computer',
+                        userAction: 'Open pageUrl on the CLI computer and scan the QR with TikTok on the phone',
                         pageUrlField: 'pageUrl',
                         pageUrlPurpose: 'local binding and upload progress page',
                         reopenCommandField: 'authorizationOpenCommand',
@@ -17242,10 +17268,21 @@ function getCapabilities() {
                 provisionalHttpAdapter: 'loopback-only',
                 httpContract: 'minis-import-task',
                 authorizationQr: true,
-                previewQr: false,
+                previewQr: true,
+                preview: {
+                    taskEndpoint: 'get_minis_import_task_detail_for_agent',
+                    waitingStatus: 'waiting_preview',
+                    resultFields: ['previewUrl', 'previewReady', 'clientKey', 'appId', 'codeAssetId', 'minisCenterHistoryId'],
+                    readiness: 'nonempty-valid-preview-url',
+                    qrPurpose: 'game_preview',
+                    sameTask: true,
+                    timeout: 'shared-operation-timeout',
+                    failurePreservesUploaded: true,
+                    deviceRunVerified: false,
+                },
                 realAuthorizationVerified: true,
                 realUploadVerified: true,
-                verificationScope: { backend: 'ppe', assets: 'test-fixtures', date: '2026-09-15', production: false },
+                verificationScope: { backend: 'ppe', authorizationMode: 'qr', assets: 'test-fixtures', date: '2026-09-16', production: false },
                 autoUploadAfterAuthorization: true,
                 boundedPolling: true,
                 cancellation: true,
@@ -17263,7 +17300,7 @@ function getCapabilities() {
                 requiresRunningUpload: true,
                 createsTask: false,
                 outputContainsLandingCredentials: false,
-                target: 'system-browser',
+                target: 'local-qr-page',
                 successStatus: 'open_requested',
                 provesAuthorization: false,
             },
@@ -18001,7 +18038,7 @@ withVerboseOption(program
     .option('--serve-preview-page', t('cli.command.upload.servePreviewPage'))
     .option('--no-open', t('cli.command.upload.noOpen'))
     .option('--vibe', t('cli.command.upload.vibe'))
-    .option('--web', t('cli.command.upload.vibeWeb'))
+    .addOption(new commander.Option('--web', t('cli.command.upload.vibeWeb')).hideHelp())
     // Vibe v2 backend selection (including opt-in ppe-mock) stays outside the Skill workflow.
     .option('--title <title>', t('cli.command.upload.vibeTitle'))
     .option('--description <description>', t('cli.command.upload.vibeDescription'))
@@ -18555,7 +18592,7 @@ async function executeVibeAuthOpen(options, deps = { open: openVibeBrowser }) {
         const url = authorizationOpenUrl(options.pageUrl);
         await checkAuthorizationPage(url);
         try {
-            await deps.open(url);
+            await deps.open(options.pageUrl);
         }
         catch {
             throw new VibeError('VIBE_BROWSER_OPEN_FAILED');
@@ -18596,7 +18633,7 @@ var authOpen = /*#__PURE__*/Object.freeze({
 const prefix = '/bff/app_info/minis_import/';
 const MINIS_IMPORT_PATHS = {
     create: `${prefix}create_minis_import_task_for_agent/`,
-    status: `${prefix}get_minis_import_task_status_for_agent/`,
+    status: `${prefix}get_minis_import_task_detail_for_agent/`,
     icon: `${prefix}upload_minis_import_app_icon_for_agent/`,
     info: `${prefix}submit_minis_import_info_for_agent/`,
     package: `${prefix}upload_minis_import_package_for_agent/`,
@@ -18655,6 +18692,31 @@ function createBackend(mode, transport) {
     });
     return {
         mode,
+        async getTaskDetail(task, signal) {
+            const data = await call({ method: 'GET', path: MINIS_IMPORT_PATHS.status,
+                data: credentials(task), signal });
+            const raw = status(data.status);
+            if (raw === 8)
+                throw new VibeError('VIBE_AUTH_EXPIRED');
+            if (raw === 7)
+                throw new VibeError('VIBE_TASK_FAILED');
+            if (data.ready_for_input !== undefined && typeof data.ready_for_input !== 'boolean')
+                throw new VibeError('VIBE_INVALID_RESPONSE');
+            const detail = { statusRaw: raw, readyForInput: data.ready_for_input === true };
+            for (const [wire, field] of [['app_id', 'appId'], ['code_asset_id', 'codeAssetId'],
+                ['minis_center_history_id', 'minisCenterHistoryId']]) {
+                if (data[wire] !== undefined && data[wire] !== '')
+                    detail[field] = taskId(data[wire]);
+            }
+            if (data.client_key !== undefined && data.client_key !== '') {
+                if (!nonempty(data.client_key))
+                    throw new VibeError('VIBE_INVALID_RESPONSE');
+                detail.clientKey = data.client_key;
+            }
+            if (data.preview_url !== undefined && data.preview_url !== '')
+                detail.previewUrl = safeWebUrl(data.preview_url);
+            return detail;
+        },
         async createTask(input, signal) {
             const data = await call({
                 method: 'POST',
@@ -18785,6 +18847,7 @@ function createPpeMockBackend(lane, adapter, scenario = 'success') {
     };
     return {
         mode: 'ppe-mock',
+        getTaskDetail: (task, signal) => real.getTaskDetail(task, signal),
         uploadAvailable: true,
         dispose: () => real.dispose?.(),
         async createTask(input, signal) {
@@ -18970,8 +19033,9 @@ function createMockBackend(scenario = 'success') {
 }
 
 function createAuthorizationScheme(landingUrl) {
-    // Encode the entire landing URL once so its token/query stays inside the WebView.
-    return `aweme://webview?url=${encodeURIComponent(safeWebUrl(landingUrl))}`;
+    // QR and browser authorization use the same backend-provided landing URL.
+    // Preserve its query exactly; do not wrap it in an app scheme or re-encode it.
+    return safeWebUrl(landingUrl);
 }
 
 const DEV_PORT = 3000;
@@ -19257,20 +19321,53 @@ async function prepareVibeInput(options, onPackaging, signal, deps = { check: ex
 }
 
 const vibePageStyles = `
-[data-phase="failed"] .pending-symbol{background:#fff1ef;color:#b84c3a;font-size:26px;font-weight:600}
-:root{font-family:Inter,-apple-system,BlinkMacSystemFont,"Segoe UI","PingFang SC","Microsoft YaHei",sans-serif;color:#202329;background:#f5f6f8;font-synthesis:none;text-rendering:optimizeLegibility;-webkit-font-smoothing:antialiased}
-*{box-sizing:border-box}body{margin:0;min-height:100vh;min-height:100svh;display:flex;align-items:center;justify-content:center;padding:28px 16px;font-size:14px;line-height:1.5}
-.shell{width:100%;max-width:424px}.brand{display:flex;align-items:center;gap:9px;margin:0 4px 18px}.brand-mark{width:25px;height:25px;display:grid;place-items:center;background:#202329;color:#fff;border-radius:7px}.brand-name{font-size:14px;font-weight:650;letter-spacing:-.3px}.brand-tool{font-size:12px;color:#8b909a;border-left:1px solid #daddE3;padding-left:9px;margin-left:1px}.mock-badge{margin-left:auto;font-size:10px;line-height:20px;padding:0 7px;border:1px solid #dfe2e7;border-radius:5px;color:#707783;letter-spacing:.03em}
-.card{background:#fff;border:1px solid #e5e7eb;border-radius:20px;padding:26px 28px 24px;box-shadow:0 4px 8px #19223c03,0 16px 40px #19223c05}.steps{display:flex;align-items:center;gap:9px;margin:0 0 25px;padding:0;list-style:none}.step{display:flex;align-items:center;gap:6px;font-size:11px;color:#9298a2;white-space:nowrap}.step:after{content:"";height:1px;width:27px;margin-left:3px;background:#e9ebef}.step:last-child:after{display:none}.step-number{height:18px;min-width:18px;border-radius:50%;border:1px solid #e2e5e9;display:grid;place-items:center;font-size:10px}.step.active{color:#272c34;font-weight:600}.step.active .step-number{background:#272c34;color:white;border-color:#272c34}.step.done{color:#537565}.step.done .step-number{background:#edf6f0;color:#287c54;border-color:#edf6f0}
-.heading{text-align:center}h1{font-size:24px;font-weight:650;line-height:1.35;letter-spacing:-.7px;margin:0 0 9px}.subtitle{color:#777e88;font-size:13px;line-height:1.75;margin:0 auto;max-width:330px;overflow-wrap:anywhere}.qr-area{display:flex;flex-direction:column;align-items:center;margin-top:22px}.qr-frame{background:white;border:1px solid #eceef1;border-radius:15px;padding:10px;width:214px;height:214px;box-shadow:0 3px 12px #20232904}.qr-frame img{width:192px;height:192px;display:block;max-width:100%}.qr-caption{font-size:11px;color:#8c929b;margin:10px 0 0}.status{display:flex;justify-content:center;align-items:center;gap:7px;font-size:12px;color:#6d7580;margin:15px 0 0}.status.complete{color:#2d7b58}.spinner{height:12px;width:12px;border:1.5px solid #d8dce2;border-top-color:#747f8e;border-radius:50%;animation:turn 1s linear infinite;flex-shrink:0}.success-icon{height:14px;width:14px;display:inline-flex;align-items:center;justify-content:center}
-.game{display:flex;align-items:center;gap:11px;margin-top:24px;padding:12px;background:#f7f8fa;border-radius:11px}.game-icon{height:32px;width:32px;display:grid;place-items:center;background:#eceff3;border:1px solid #e4e7ed;border-radius:9px;color:#707b8b;flex-shrink:0}.game-text{min-width:0}.game-label{font-size:10px;color:#9298a2;margin:0 0 1px}.game-title{margin:0;font-size:13px;font-weight:550;white-space:nowrap;text-overflow:ellipsis;overflow:hidden}.footer{text-align:center;color:#8a919d;font-size:11px;margin:15px 0 0;line-height:1.7}.footer .dot{display:inline-block;height:5px;width:5px;border-radius:50%;background:#c1995e;vertical-align:middle;margin-right:5px}
-.upload-area{height:268px;display:flex;align-items:center;justify-content:center;flex-direction:column;gap:20px}.upload-symbol{display:grid;place-items:center;height:52px;width:52px;border-radius:16px;background:#f1f4f7;color:#64748b}.percentage{font-size:42px;line-height:1;letter-spacing:-2px;font-variant-numeric:tabular-nums;font-weight:550}.percentage span{font-size:19px;letter-spacing:0;color:#858e9d;padding-left:3px}.progress-wrap{width:100%}progress{display:block;width:100%;height:5px;border:none;border-radius:20px;overflow:hidden;background:#e9edf1;accent-color:#4c6378}progress::-webkit-progress-bar{background:#edf0f4;border-radius:20px}progress::-webkit-progress-value{background:#4c6378;border-radius:20px}progress::-moz-progress-bar{background:#4c6378;border-radius:20px}.transfer-label{text-align:center;font-size:11px;color:#8b939f;margin:8px 0 0}.pending-symbol{display:grid;place-items:center;height:64px;width:64px;border-radius:50%;background:#eef6f1;color:#38805b}
-.game{margin:20px 0;padding:12px 14px}.game-icon,.game-avatar{width:44px;height:44px;border-radius:10px;flex-shrink:0}.game-avatar{object-fit:cover;background:#eceff3;border:1px solid #e4e7ed}.game-label{font-size:11px;color:#717985}.game-title{font-size:15px;font-weight:600}.scan-action{font-size:15px;font-weight:600;margin:0 0 6px}.subtitle{color:#656e7b;font-size:12px}.qr-area{margin-top:18px}.footer{color:#727b89}
-@keyframes turn{to{transform:rotate(360deg)}}@media(prefers-reduced-motion:reduce){.spinner{animation:none}}@media(max-width:420px){body{padding:20px 14px}.card{padding:24px 20px 21px;border-radius:17px}h1{font-size:22px}.brand{margin-bottom:14px}.steps{gap:7px;justify-content:center}.step:after{width:20px}}@media(max-height:700px){body{align-items:flex-start;padding-top:20px;padding-bottom:20px}}`;
+
+:root{font-family:Inter,-apple-system,BlinkMacSystemFont,"Segoe UI","PingFang SC","Microsoft YaHei",sans-serif;color:#24282f;background:#fff;font-synthesis:none;text-rendering:optimizeLegibility;-webkit-font-smoothing:antialiased}
+*{box-sizing:border-box}
+body{margin:0;min-height:100vh;min-height:100svh;display:flex;align-items:center;justify-content:center;padding:64px 24px;font-size:14px;line-height:1.5}
+.shell{position:relative;width:100%;max-width:400px}
+.steps{display:flex;align-items:center;justify-content:center;gap:10px;margin:0 0 24px;padding:0;list-style:none}
+.step{display:flex;align-items:center;gap:6px;font-size:11px;color:#9298a2;white-space:nowrap}
+.step:after{content:"";height:1px;width:25px;margin-left:4px;background:#e9ebef}.step:last-child:after{display:none}
+.step-number{height:18px;min-width:18px;border-radius:50%;border:1px solid #e2e5e9;display:grid;place-items:center;font-size:10px}
+.step.active{color:#272c34;font-weight:600}.step.active .step-number{background:#272c34;color:#fff;border-color:#272c34}
+.step.done{color:#537565}.step.done .step-number{background:#edf6f0;color:#287c54;border-color:#edf6f0}
+.heading{text-align:center}h1{font-size:26px;font-weight:650;line-height:1.35;letter-spacing:-.6px;margin:0 0 10px}
+.subtitle{color:#7a818c;font-size:12px;line-height:1.7;margin:0;overflow-wrap:anywhere}
+.game{margin:24px 0 0;padding-top:20px;border-top:1px solid #eceef1;text-align:center}
+.game-summary{display:flex;align-items:center;justify-content:center;gap:12px}.game-title{max-width:100%;margin:0;font-size:15px;font-weight:600;overflow-wrap:anywhere;min-width:0}
+.game-icon,.game-avatar{width:44px;height:44px;border-radius:10px;flex-shrink:0;background:#f0f2f5}.game-avatar{object-fit:cover}.game-icon{display:grid;place-items:center;color:#707b8b}
+.game-details{margin:16px 0 0;font-size:13px}.game-details>div:first-child,.game-categories>div{display:flex;align-items:baseline;justify-content:center;gap:8px}.game-details dt{flex-shrink:0;font-size:11px;color:#9298a2;margin:0}.game-details dd{min-width:0;margin:0;text-align:left;overflow-wrap:anywhere}
+.game-description{white-space:pre-wrap;line-height:1.65}.game-categories{display:grid;grid-template-columns:1fr;gap:16px;margin-top:16px}
+.scan-action{text-align:center;font-size:13px;font-weight:500;margin:26px 0 10px}.qr-area{display:flex;justify-content:center}.qr-frame{padding:8px;width:208px;height:208px}.qr-frame img{display:block;width:192px;height:192px;max-width:100%}
+.upload-area{display:flex;align-items:center;flex-direction:column;gap:16px;padding-top:26px}.percentage{font-size:34px;line-height:1;font-variant-numeric:tabular-nums;font-weight:550}.percentage span{font-size:16px;color:#858e9d;padding-left:3px}
+.progress-wrap{width:100%}progress{display:block;width:100%;height:4px;border:none;border-radius:20px;overflow:hidden;background:#edf0f4;accent-color:#4c6378}progress::-webkit-progress-bar{background:#edf0f4;border-radius:20px}progress::-webkit-progress-value{background:#4c6378;border-radius:20px}progress::-moz-progress-bar{background:#4c6378;border-radius:20px}.transfer-label{text-align:center;font-size:11px;color:#8b939f;margin:8px 0 0}
+.footer{text-align:center;font-size:10px;line-height:1.7;color:#a0a5ae;margin:24px 0 0}.footer .dot{display:inline-block;height:5px;width:5px;border-radius:50%;background:#c1995e;vertical-align:middle;margin-right:5px}.mock-badge{width:fit-content;margin:0 0 10px auto;font-size:10px;padding:2px 7px;border:1px solid #dfe2e7;border-radius:5px;color:#707783}
+@media(max-width:380px){body{padding-left:20px;padding-right:20px}.steps{gap:7px}.step:after{width:16px;margin-left:1px}h1{font-size:24px}}
+`;
 
 const VIBE_PAGE_WORKER = '__vibe-page-server';
 // Includes the base64 form of the locally validated image (up to 10 MiB).
 const VIBE_PAGE_HTML_LIMIT = 16 * 1024 * 1024;
+const pageUpdates = `(() => {
+  let etag;
+  const terminal = () => ['complete', 'preview', 'failed'].includes(document.querySelector('main')?.dataset.phase);
+  async function refresh() {
+    if (terminal()) return;
+    try {
+      const response = await fetch(location.pathname, {cache: 'no-store', headers: etag ? {'If-None-Match': etag} : {}});
+      if (response.ok) {
+        etag = response.headers.get('etag');
+        const next = new DOMParser().parseFromString(await response.text(), 'text/html');
+        const current = document.querySelector('main'), updated = next.querySelector('main');
+        if (current && updated && current.outerHTML !== updated.outerHTML) current.replaceWith(updated);
+        document.title = next.title;
+      }
+    } catch { /* Keep the current page readable during a temporary connection failure. */ }
+    if (!terminal()) setTimeout(refresh, 2000);
+  }
+  if (!terminal()) setTimeout(refresh, 2000);
+})();`;
 const escape = (s) => s.replace(/[&<>"']/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
 async function renderVibePage(input) {
     const zh = input.language !== 'en-US';
@@ -19280,7 +19377,6 @@ async function renderVibePage(input) {
         ? {
             steps: ['扫码授权', '上传游戏', '完成'],
             mock: input.hybrid ? 'PPE + Mock' : '模拟',
-            game: '当前游戏',
             gameIcon: '游戏头像',
             bindingTitle: '上传到 TikTok',
             bindingAction: input.hybrid ? '真实授权二维码 · 混合联调' : '使用 TikTok 扫描二维码',
@@ -19293,7 +19389,6 @@ async function renderVibePage(input) {
             uploadingTitle: '正在上传小游戏',
             uploadingSubtitle: input.simulation ? '正在模拟授权后的上传流程，不会上传游戏内容。' : '授权已完成，正在上传本次游戏内容。',
             uploadLabel: input.simulation ? '模拟上传进度' : '上传进度',
-            uploadStatus: '正在上传游戏，请稍候',
             completeTitle: input.simulation ? '模拟上传完成' : '上传完成',
             completeSubtitle: input.simulation
                 ? '绑定和上传流程模拟完成，未向 TikTok 上传游戏。'
@@ -19307,7 +19402,6 @@ async function renderVibePage(input) {
         : {
             steps: ['Authorize', 'Upload', 'Done'],
             mock: input.hybrid ? 'PPE + Mock' : 'MOCK',
-            game: 'YOUR GAME',
             gameIcon: 'Game icon',
             bindingTitle: 'Upload to TikTok',
             bindingAction: input.hybrid ? 'Real authorization QR · integration demo' : 'Scan the QR code with TikTok',
@@ -19324,7 +19418,6 @@ async function renderVibePage(input) {
             uploadLabel: input.simulation
                 ? 'Simulated upload progress'
                 : 'Upload progress',
-            uploadStatus: 'Uploading your game. Please wait.',
             completeTitle: input.simulation ? 'Simulated upload complete' : 'Upload complete',
             completeSubtitle: input.simulation
                 ? 'Binding and upload simulation complete. Nothing was uploaded to TikTok.'
@@ -19350,78 +19443,77 @@ async function renderVibePage(input) {
         /^data:image\/(?:png|jpeg|webp);base64,[A-Za-z0-9+/]+=*$/.test(input.iconDataUrl)
         ? `<img class="game-avatar" width="44" height="44" alt="${copy.gameIcon}" src="${input.iconDataUrl}">`
         : '<span class="game-icon" aria-hidden="true"><svg width="22" height="22" viewBox="0 0 24 24" fill="none"><path d="M7 7h10c2 0 3 2 3 4l1 5c.4 2-1 3-2.5 2l-3-2h-7l-3 2C4 19 2.6 18 3 16l1-5c0-2 1-4 3-4Z" stroke="currentColor" stroke-width="1.4" stroke-linejoin="round"/><path d="M8 10v4m-2-2h4m6-1h.01M18 13h.01" stroke="currentColor" stroke-width="1.6" stroke-linecap="round"/></svg></span>';
-    const game = `<div class="game">${icon}<div class="game-text"><p class="game-label">${copy.game}</p><p class="game-title" title="${escape(input.title)}">${escape(input.title)}</p></div></div>`;
+    const game = `<div class="game"><div class="game-summary">${icon}<p class="game-title">${escape(input.title)}</p></div><dl class="game-details"><div><dt>${zh ? '描述' : 'Description'}</dt><dd class="game-description">${escape(input.description ?? VIBE_PPE_DEFAULT_APP_INFO.description)}</dd></div><div class="game-categories"><div><dt>${zh ? '类型' : 'Category'}</dt><dd>${escape(input.category ?? VIBE_PPE_DEFAULT_APP_INFO.category)}</dd></div><div><dt>${zh ? '子类型' : 'Subcategory'}</dt><dd>${escape(input.subcategory ?? VIBE_PPE_DEFAULT_APP_INFO.subcategory)}</dd></div></div></dl></div>`;
     const checkIcon = '<svg width="12" height="12" viewBox="0 0 16 16" fill="none" aria-hidden="true"><path d="m3 8 3 3 7-7" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"/></svg>';
-    const title = phase === 'binding'
-        ? copy.bindingTitle
-        : phase === 'uploading'
-            ? copy.uploadingTitle
-            : phase === 'failed'
-                ? copy.failedTitle
-                : copy.completeTitle;
-    const subtitle = phase === 'binding'
-        ? copy.bindingSubtitle
-        : phase === 'uploading'
-            ? copy.uploadingSubtitle
-            : phase === 'failed'
-                ? escape(input.message)
-                : copy.completeSubtitle;
-    const qr = phase === 'binding' && !input.web && input.qrUrl
+    const title = phase === 'waiting_preview' ? (zh ? '正在准备预览' : 'Preparing preview')
+        : phase === 'preview' ? (zh ? '扫码预览游戏' : 'Scan to preview')
+            : phase === 'binding'
+                ? copy.bindingTitle
+                : phase === 'uploading'
+                    ? copy.uploadingTitle
+                    : phase === 'failed'
+                        ? copy.failedTitle
+                        : copy.completeTitle;
+    const subtitle = phase === 'waiting_preview' ? (zh ? '游戏内容已上传，预览就绪后会自动显示二维码。' : 'Game content uploaded. The preview QR will appear when ready.')
+        : phase === 'preview' ? (zh ? '上传完成，使用手机 TikTok 扫描下方二维码。' : 'Upload complete. Scan the QR below with TikTok on your phone.')
+            : phase === 'complete' && !input.simulation ? escape(input.message)
+                : phase === 'binding'
+                    ? copy.bindingSubtitle
+                    : phase === 'uploading'
+                        ? copy.uploadingSubtitle
+                        : phase === 'failed'
+                            ? escape(input.message)
+                            : copy.completeSubtitle;
+    const qr = (phase === 'binding' || phase === 'preview') && !input.web && input.qrUrl
         ? await QRCode.toDataURL(input.qrUrl, {
             width: 384,
             margin: 4,
             errorCorrectionLevel: 'M',
         })
         : '';
-    const purpose = copy.bindingCode;
+    const purpose = phase === 'preview' ? (zh ? '游戏预览二维码' : 'Game preview QR') : copy.bindingCode;
+    const done = phase === 'complete' || phase === 'preview';
     const progress = typeof input.progressPercent === 'number' &&
         Number.isFinite(input.progressPercent)
         ? Math.max(0, Math.min(100, Math.round(input.progressPercent)))
         : undefined;
-    const status = phase === 'binding'
-        ? copy.bindingStatus
-        : phase === 'uploading'
-            ? copy.uploadStatus
-            : phase === 'failed'
-                ? copy.failedTitle
-                : copy.accepted;
-    const content = phase === 'binding' && input.web
-        ? '<div class="upload-area"><span class="spinner" aria-hidden="true"></span></div>'
-        : qr
-            ? `<div class="qr-area"><div class="qr-frame"><img width="192" height="192" alt="${purpose}" src="${qr}"></div></div>`
-            : phase === 'uploading'
-                ? `<div class="upload-area"><div class="upload-symbol"><svg width="24" height="24" viewBox="0 0 24 24" fill="none" aria-hidden="true"><path d="M12 16V4m-4 4 4-4 4 4M5 15v5h14v-5" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round"/></svg></div>${progress !== undefined ? `<div class="percentage">${progress}<span>%</span></div><div class="progress-wrap"><progress aria-label="${copy.uploadLabel}" max="100" value="${progress}"></progress><p class="transfer-label">${copy.uploadLabel}</p></div>` : '<span class="spinner" aria-hidden="true"></span>'}</div>`
-                : `<div class="upload-area"><div class="pending-symbol">${phase === 'failed' ? '!' : checkIcon}</div></div>`;
-    return `<!doctype html><html lang="${zh ? 'zh-CN' : 'en'}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="refresh" content="2"><title>${escape(title)} · ${escape(input.title)}</title><style>${vibePageStyles}</style></head>
-<body><main class="shell" data-phase="${phase}"><header class="brand"><span class="brand-mark" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 20 20" fill="none"><path d="m7 5-4 5 4 5m6-10 4 5-4 5" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round"/></svg></span><span class="brand-name">TikTok Minis</span><span class="brand-tool">DevTool</span>${input.simulation ? `<span class="mock-badge">${copy.mock}</span>` : ''}</header>
-<section class="card" aria-labelledby="page-title">${phase === 'failed' ? '' : `<ol class="steps" aria-label="${zh ? '上传步骤' : 'Upload steps'}">${copy.steps.map((label, i) => `<li class="step ${i < step ? 'done' : i === step ? 'active' : ''}"${i === step ? ' aria-current="step"' : ''}><span class="step-number">${i < step ? checkIcon : i + 1}</span>${label}</li>`).join('')}</ol>`}
-<div class="heading"><h1 id="page-title">${title}</h1></div>${game}<div class="heading">${phase === 'binding' ? `<p class="scan-action">${copy.bindingAction}</p>` : ''}<p class="subtitle">${subtitle}</p></div>${content}
-<p class="status${phase === 'complete' ? ' complete' : ''}" role="status">${phase === 'complete' ? `<span class="success-icon">${checkIcon}</span>` : phase === 'failed' ? '' : '<span class="spinner" aria-hidden="true"></span>'}${status}</p>
+    const content = qr
+        ? `<div class="qr-area"><div class="qr-frame"><img width="192" height="192" alt="${purpose}" src="${qr}"></div></div>`
+        : phase === 'uploading' && progress !== undefined
+            ? `<div class="upload-area"><div class="percentage">${progress}<span>%</span></div><div class="progress-wrap"><progress aria-label="${copy.uploadLabel}" max="100" value="${progress}"></progress><p class="transfer-label">${copy.uploadLabel}</p></div></div>`
+            : '';
+    return `<!doctype html><html lang="${zh ? 'zh-CN' : 'en'}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escape(title)} · ${escape(input.title)}</title><style>${vibePageStyles}</style><script src="?updates" defer></script></head>
+<body><main class="shell" data-phase="${phase}">${input.simulation ? `<p class="mock-badge">${copy.mock}</p>` : ''}
+<section class="card" aria-labelledby="page-title">${phase === 'failed' ? '' : `<ol class="steps" aria-label="${zh ? '上传步骤' : 'Upload steps'}">${copy.steps.map((label, i) => `<li class="step ${done || i < step ? 'done' : i === step ? 'active' : ''}"${!done && i === step ? ' aria-current="step"' : ''}><span class="step-number">${done || i < step ? checkIcon : i + 1}</span>${label}</li>`).join('')}</ol>`}
+<div class="heading"><h1 id="page-title">${title}</h1><p class="subtitle" role="status">${subtitle}</p></div>${game}${phase === 'binding' ? `<p class="scan-action">${copy.bindingAction}</p>` : ''}${content}
 </section>
 <p class="footer">${input.simulation ? `<span class="dot" aria-hidden="true"></span>${copy.mockNote}` : copy.footer}</p></main></body></html>`;
 }
 async function createVibePageServer() {
     const route = `/${crypto.randomBytes(24).toString('hex')}`;
     let html = 'Starting…';
+    let etag = '';
     let landingUrl;
     const server = http.createServer((req, res) => {
         const address = server.address();
         const host = address && typeof address !== 'string' ? `127.0.0.1:${address.port}` : '';
+        if (req.method === 'GET' && req.url === `${route}?updates` && req.headers.host === host) {
+            res.writeHead(200, { 'Content-Type': 'text/javascript; charset=utf-8', 'Cache-Control': 'no-store', 'X-Content-Type-Options': 'nosniff' });
+            res.end(pageUpdates);
+            return;
+        }
         if (req.url === `${route}/authorize` && req.headers.host === host &&
             ['GET', 'HEAD'].includes(req.method || '') &&
             (!req.headers.origin || req.headers.origin === `http://${host}`) &&
             req.headers['sec-fetch-site'] !== 'cross-site') {
             const headers = { 'Cache-Control': 'no-store', 'Referrer-Policy': 'no-referrer' };
-            if (!landingUrl) {
+            if (!landingUrl || req.method === 'GET') {
                 res.writeHead(410, { ...headers, 'Content-Type': 'text/plain; charset=utf-8' });
-                res.end('Authorization is no longer available. Return to the upload process.');
+                res.end('Web authorization is disabled. Open the local QR page and scan with TikTok.');
             }
             else if (req.method === 'HEAD') {
                 res.writeHead(204, { ...headers, 'X-TTMG-Authorization': 'ready' }).end();
             }
-            else {
-                res.writeHead(302, { ...headers, Location: landingUrl }).end();
-            }
             return;
         }
         if (req.method !== 'GET' ||
@@ -19430,12 +19522,17 @@ async function createVibePageServer() {
             res.writeHead(404).end();
             return;
         }
+        if (etag && req.headers['if-none-match'] === etag) {
+            res.writeHead(304, { 'ETag': etag, 'Cache-Control': 'no-store' }).end();
+            return;
+        }
         res.writeHead(200, {
+            'ETag': etag,
             'Content-Type': 'text/html; charset=utf-8',
             'Cache-Control': 'no-store',
             'Referrer-Policy': 'no-referrer',
             'X-Content-Type-Options': 'nosniff',
-            'Content-Security-Policy': "default-src 'none'; img-src data:; style-src 'unsafe-inline'; frame-ancestors 'none'",
+            'Content-Security-Policy': "default-src 'none'; img-src data:; style-src 'unsafe-inline'; script-src 'self'; connect-src 'self'; frame-ancestors 'none'",
         });
         res.end(html);
     });
@@ -19448,6 +19545,7 @@ async function createVibePageServer() {
         url: `http://127.0.0.1:${address.port}${route}`,
         update: (value, authorization) => {
             html = value;
+            etag = '"' + crypto.createHash('sha256').update(value).digest('hex') + '"';
             landingUrl = browserLandingUrl(authorization);
         },
         close: () => server.close(),
@@ -19582,6 +19680,7 @@ const stageText = {
     ],
     uploading: ['授权完成，正在自动上传', 'Authorized; uploading automatically'],
     uploaded: ['上传完成', 'Upload complete'],
+    waiting_preview: ['上传完成，正在准备预览', 'Upload complete; preparing preview'],
     failed: [
         '本次操作失败，请根据错误码处理',
         'Operation failed; check the error code',
@@ -19649,11 +19748,13 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
     let timedOut = false;
     let page;
     let backend = deps.backend;
+    let task;
     let detached = false;
     let progressUpdates = Promise.resolve();
     let ppeLane;
     let ppeSelected = false;
     let hybridSelected = false;
+    let pageMetadata;
     let result = {
         schemaVersion: '2',
         command: 'upload',
@@ -19689,20 +19790,11 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
             throw new VibeError('VIBE_CANCELLED');
     };
     try {
-        // --mock is the stable trial entry: working steps use the built-in PPE lane,
-        // blocked steps remain simulated. No environment setup is required.
-        // Explicit command-line selection wins; real failures never fall back to mock.
-        if (options.web) {
-            if (options.mock || options.mockScenario || options.vibeApi || options.open === false)
-                throw new VibeError('VIBE_WEB_OPTION_CONFLICT');
-            ppeSelected = true;
-            ppeLane = process.env.TTMG_VIBE_PPE || 'ppe_op_vc';
-            if (!/^ppe_[a-zA-Z0-9_-]{1,64}$/.test(ppeLane))
-                throw new VibeError('VIBE_INVALID_PPE_ENV');
-            if (deps.backend && deps.backend.mode !== 'ppe')
-                throw new VibeError('VIBE_WEB_OPTION_CONFLICT');
-        }
-        else if (!options.mock && !options.vibeApi && process.env.TTMG_VIBE_BACKEND) {
+        if (options.web)
+            throw new VibeError('VIBE_WEB_DISABLED');
+        // Real QR uploads use the release-owned PPE route.
+        // Explicit test backends remain opt-in; real failures never fall back to them.
+        if (!options.mock && !options.vibeApi && process.env.TTMG_VIBE_BACKEND) {
             const configured = process.env.TTMG_VIBE_BACKEND;
             if (configured === 'mock')
                 options = { ...options, mock: true };
@@ -19720,6 +19812,12 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
             else
                 throw new VibeError('VIBE_BACKEND_NOT_CONFIGURED');
         }
+        else if (!options.mock && !options.vibeApi) {
+            ppeSelected = true;
+            ppeLane = process.env.TTMG_VIBE_PPE || 'ppe_op_vc';
+            if (!/^ppe_[a-zA-Z0-9_-]{1,64}$/.test(ppeLane))
+                throw new VibeError('VIBE_INVALID_PPE_ENV');
+        }
         if (!['text', 'json', 'ndjson'].includes(options.format || 'text'))
             throw new VibeError('VIBE_INVALID_FORMAT');
         if (options.clientKey ||
@@ -19779,16 +19877,22 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
         });
         if (options.dryRun)
             return result;
+        const submittedInfo = input.appInfo || VIBE_PPE_DEFAULT_APP_INFO;
+        pageMetadata = {
+            iconDataUrl: `data:${input.icon.contentType};base64,${input.icon.bytes.toString('base64')}`,
+            description: submittedInfo.description,
+            category: submittedInfo.category,
+            subcategory: submittedInfo.subcategory,
+        };
         const pageGame = {
             title: input.title,
-            iconDataUrl: `data:${input.icon.contentType};base64,${input.icon.bytes.toString('base64')}`,
+            ...pageMetadata,
             uploadAvailable: backend.uploadAvailable !== false,
             hybrid: backend.mode === 'ppe-mock',
-            web: !!options.web,
         };
         const sourceProjectId = deps.projectId(options);
         emit('creating_task', { platformWrite: backend.mode === 'ppe' || backend.mode === 'ppe-mock' });
-        const task = await backend.createTask({
+        task = await backend.createTask({
             source_type: 1,
             source_project_id: sourceProjectId,
             task_idempotency_id: result.operationId,
@@ -19796,8 +19900,6 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
         }, controller.signal);
         ensureActive();
         const authorizationUrl = createAuthorizationScheme(task.landingUrl);
-        if (options.web && !browserLandingUrl(task.landingUrl))
-            throw new VibeError('VIBE_INVALID_RESPONSE');
         const pollMs = seconds(options.pollInterval, task.pollIntervalSeconds);
         result = {
             ...result,
@@ -19806,33 +19908,30 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
         };
         page = await deps.startPage();
         ensureActive();
-        const bindingMessage = options.web
+        const bindingMessage = backend.mode === 'ppe-mock'
             ? (getCurrentLanguage() === 'zh-CN'
-                ? '请在浏览器完成真实授权，当前命令会继续查询绑定状态。'
-                : 'Complete real authorization in the browser; this command keeps polling the binding status.')
-            : backend.mode === 'ppe-mock'
-                ? (getCurrentLanguage() === 'zh-CN'
-                    ? '真实 PPE 任务和授权二维码；查询三次后模拟授权、上传，无需完成手机授权。'
-                    : 'Real PPE task and authorization QR. After three polls, authorization and upload are simulated; phone authorization is not required.')
-                : backend.uploadAvailable === false
-                    ? (getCurrentLanguage() === 'zh-CN' ? '请扫码完成真实 PPE 授权；上传尚未开放。' : 'Scan to authorize in PPE. Upload is not enabled yet.')
-                    : text('waiting_authorization', result.simulation);
+                ? '真实 PPE 任务和授权二维码；查询三次后模拟授权、上传，无需完成手机授权。'
+                : 'Real PPE task and authorization QR. After three polls, authorization and upload are simulated; phone authorization is not required.')
+            : backend.uploadAvailable === false
+                ? (getCurrentLanguage() === 'zh-CN' ? '请扫码完成真实 PPE 授权；上传尚未开放。' : 'Scan to authorize in PPE. Upload is not enabled yet.')
+                : text('waiting_authorization', result.simulation);
         await page.update({
             ...pageGame,
             language: getCurrentLanguage(),
             phase: 'binding',
             simulation: result.simulation,
             message: bindingMessage,
-            qrUrl: options.web ? undefined : authorizationUrl,
+            qrUrl: authorizationUrl,
             browserLandingUrl: task.landingUrl,
             purpose: 'authorization_binding',
         });
         ensureActive();
         let browserOpenRequested = false;
         let browserOpenErrorCode;
-        if (options.web) {
+        const opensRealPage = backend.mode === 'ppe' && options.open !== false;
+        if (opensRealPage) {
             try {
-                await deps.open(authorizationOpenUrl(page.url));
+                await deps.open(page.url);
                 browserOpenRequested = true;
             }
             catch {
@@ -19842,19 +19941,19 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
         }
         emit('waiting_authorization', {
             message: browserOpenErrorCode
-                ? (getCurrentLanguage() === 'zh-CN' ? '浏览器未能打开，请使用 authorizationOpenCommand 重试；当前任务仍在等待授权。' : 'Browser opening failed. Retry authorizationOpenCommand; this task is still waiting for authorization.')
+                ? (getCurrentLanguage() === 'zh-CN' ? '二维码页面未能打开，请在 CLI 所在电脑打开 pageUrl 并使用 TikTok 扫码；当前任务仍在等待授权。' : 'Could not open the QR page. Open pageUrl on the CLI computer and scan with TikTok; this task is still waiting for authorization.')
                 : bindingMessage,
             pageUrl: page.url,
-            authorizationMode: options.web ? 'web' : 'qr',
-            ...(options.web ? { browserOpenRequested, browserOpenErrorCode } : {}),
+            authorizationMode: 'qr',
+            ...(backend.mode === 'ppe' ? { browserOpenRequested, browserOpenErrorCode } : {}),
             authorizationOpenCommand: browserLandingUrl(task.landingUrl)
                 ? `ttmg auth open --page-url ${page.url} --format json` : undefined,
-            qrPurpose: options.web ? undefined : 'authorization_binding',
-            nextAction: result.simulation ? 'wait' : options.web ? 'open_browser' : 'scan_qr',
+            qrPurpose: 'authorization_binding',
+            nextAction: result.simulation ? 'wait' : 'scan_qr',
             readyForInput: false,
         });
         // Opening a browser is presentation only and never gates token polling.
-        if (!options.web && (options.format || 'text') === 'text' && options.open !== false)
+        if (!opensRealPage && backend.mode !== 'ppe' && (options.format || 'text') === 'text' && options.open !== false)
             void deps.open(page.url).catch(() => { });
         while (true) {
             ensureActive();
@@ -19928,7 +20027,6 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
                 }
             }
         });
-        task.importToken = '';
         task.landingUrl = '';
         // A validated upload receipt is authoritative even if result-page rendering fails.
         result = { ...result, uploaded: true, ...(backend.mode === 'ppe-mock'
@@ -19937,20 +20035,48 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
         await progressUpdates;
         if (progressPageError)
             throw progressPageError;
+        if (!result.simulation) {
+            emit('waiting_preview', { previewReady: false, terminal: false, nextAction: 'wait',
+                qrPurpose: undefined, authorizationOpenCommand: undefined });
+            await page.update({ ...pageGame, language: getCurrentLanguage(), phase: 'waiting_preview',
+                simulation: false, message: text('waiting_preview') });
+            while (true) {
+                ensureActive();
+                const detail = await backend.getTaskDetail(task, controller.signal);
+                ensureActive();
+                const fields = { taskStatusRaw: detail.statusRaw,
+                    ...(detail.clientKey ? { clientKey: detail.clientKey } : {}),
+                    ...(detail.appId ? { appId: detail.appId } : {}),
+                    ...(detail.codeAssetId ? { codeAssetId: detail.codeAssetId } : {}),
+                    ...(detail.minisCenterHistoryId ? { minisCenterHistoryId: detail.minisCenterHistoryId } : {}) };
+                if (detail.previewUrl) {
+                    result = { ...result, ...fields, previewUrl: detail.previewUrl, previewReady: true };
+                    break;
+                }
+                if (Object.entries(fields).some(([key, value]) => result[key] !== value))
+                    emit('waiting_preview', fields);
+                await deps.sleep(pollMs, controller.signal);
+            }
+        }
         await page.update({
             ...pageGame,
             language: getCurrentLanguage(),
-            phase: 'complete',
+            phase: result.previewReady ? 'preview' : 'complete',
+            qrUrl: result.previewUrl,
+            purpose: result.previewReady ? 'game_preview' : undefined,
             simulation: result.simulation,
             message: text('uploaded', result.simulation),
         });
         page.detach();
         detached = true;
-        return emit('uploaded', { terminal: true, nextAction: 'none' });
+        return emit('uploaded', { terminal: true, nextAction: result.previewReady ? 'scan_qr' : 'none',
+            qrPurpose: result.previewReady ? 'game_preview' : undefined,
+            ...(result.previewReady ? { message: getCurrentLanguage() === 'zh-CN'
+                    ? '上传完成，请使用 TikTok 扫码预览游戏。' : 'Upload complete. Scan with TikTok to preview your game.' } : {}) });
     }
     catch (error) {
         const code = timedOut
-            ? 'VIBE_TIMEOUT'
+            ? result.uploaded ? 'VIBE_PREVIEW_TIMEOUT' : 'VIBE_TIMEOUT'
             : controller.signal.aborted
                 ? 'VIBE_CANCELLED'
                 : error instanceof VibeError
@@ -19965,7 +20091,6 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
             VIBE_CATEGORY_PAIR_REQUIRED: ['--category 和 --subcategory 必须同时提供；均不传时保留默认分类。使用 ttmg game categories --format json 查询。', 'Provide --category and --subcategory together, or omit both to keep the default. Query ttmg game categories --format json.'],
             VIBE_INVALID_CATEGORY: ['类型或子类型无效，或两者不匹配。使用 ttmg game categories --format json 查询有效组合。', 'Invalid category/subcategory pair. Query valid values with ttmg game categories --format json.'],
             VIBE_INVALID_DESCRIPTION: ['描述必须是非空的有效 Unicode 文本；省略 --description 可使用默认描述。', 'Description must be non-empty valid Unicode text; omit --description to use the default.'],
-            VIBE_WEB_OPTION_CONFLICT: ['--web 使用真实网页授权，不能与 --mock、--mock-scenario、--vibe-api 或 --no-open 同时使用。', '--web uses real browser authorization and cannot be combined with --mock, --mock-scenario, --vibe-api or --no-open.'],
             VIBE_AUTH_DENIED: [
                 '已取消授权，本次未上传。',
                 'Authorization cancelled. No upload was performed.',
@@ -19997,6 +20122,10 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
                 '请检查本地 ZIP 代码包。',
                 'Check the local ZIP package.',
             ],
+            VIBE_WEB_DISABLED: [
+                '网页授权已关闭。请移除 --web，使用 ttmg upload --vibe 并在手机 TikTok 中扫码授权。',
+                'Web authorization is disabled. Remove --web and use ttmg upload --vibe to scan with TikTok on your phone.',
+            ],
             VIBE_BACKEND_NOT_CONFIGURED: [
                 '尚未配置服务；本地模拟请使用 --mock。',
                 'No backend configured. Use --mock for local simulation.',
@@ -20036,16 +20165,17 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
         };
         const message = result.uploaded
             ? getCurrentLanguage() === 'zh-CN'
-                ? '上传已完成，但结果页面显示失败，请勿重复上传。'
-                : 'Upload completed, but the result page failed. Do not upload again.'
+                ? `游戏内容已上传，但${code === 'VIBE_PREVIEW_TIMEOUT' ? '等待预览超时' : code === 'VIBE_CANCELLED' ? '已停止等待预览' : '预览查询或页面显示未完成'}。请核对任务，请勿重复上传。`
+                : `Game content was uploaded, but ${code === 'VIBE_PREVIEW_TIMEOUT' ? 'preview polling timed out' : code === 'VIBE_CANCELLED' ? 'preview polling was cancelled' : 'preview lookup or display did not complete'}. Check the task; do not upload again.`
             : messages[code]?.[getCurrentLanguage() === 'zh-CN' ? 0 : 1] ||
                 text(status);
         controller.abort();
         await progressUpdates;
         // Remove the binding QR on failure too. Keep a readable terminal result page.
-        if (page && code !== 'VIBE_CANCELLED') {
+        if (page && (code !== 'VIBE_CANCELLED' || result.uploaded)) {
             try {
                 await page.update({
+                    ...pageMetadata,
                     title: result.title || '',
                     language: getCurrentLanguage(),
                     simulation: result.simulation,
@@ -20062,7 +20192,7 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
         }
         return emit(status, {
             terminal: true,
-            nextAction: result.uploaded || code === 'VIBE_CANCELLED'
+            nextAction: result.uploaded ? 'check_task' : code === 'VIBE_CANCELLED'
                 ? 'none'
                 : result.uploadAttempted ||
                     (result.taskId &&
@@ -20086,6 +20216,10 @@ async function executeVibeUpload(options, onEvent = () => { }, dependencies = {}
         });
     }
     finally {
+        if (task) {
+            task.importToken = '';
+            task.landingUrl = '';
+        }
         clearTimeout(timeout);
         externalSignal?.removeEventListener('abort', cancel);
         backend?.dispose?.();