gamekit777 0.1.0 → 0.1.1

package/README.md

@@ -14,7 +14,7 @@
 ## 开始
 
 ```sh
-bunx gamekit777 new my-game "我的游戏"     # 一个能跑的抛硬币 + bun install
+bunx gamekit777 new                        # 一个能跑的抛硬币（my-game）+ bun install；名字改 game.meta.json
 cd my-game
 bun run dev                                # 参考平台：本地表模型，就地建表、抽行、restore 还原
 ```

package/client/index.ts

@@ -15,6 +15,9 @@ import {
   GKLT1_HEADER_BYTES, GKLT1_ROW_BYTES,
   GameKitError,
   type ListGamesQuery, type ListRoundsQuery,
+  PAIR_CLAIM_PATH, PAIR_START_PATH,
+  type PairClaimResult as TPairClaimResult, PairClaimResult,
+  type PairStartResult as TPairStartResult, PairStartResult,
   MAX_BOOKS_PER_CHUNK,
   type PlaceBet, type PublishGame,
   type RotateResult as TRotateResult, RotateResult,
@@ -153,6 +156,14 @@ export function createClient(opts: ClientOptions) {
         http.request({ method: 'GET', path: '/v1/me', schema: SessionView }),
     },
 
+    /** studio 配对：站点签 code，studio 拿 code 换一个同一用户的会话（cookie 落在 studio 的 origin） */
+    pair: {
+      start: (): Promise<TPairStartResult> =>
+        http.request({ method: 'POST', path: PAIR_START_PATH, json: {}, schema: PairStartResult }),
+      claim: (code: string): Promise<TPairClaimResult> =>
+        http.request({ method: 'POST', path: PAIR_CLAIM_PATH, json: { code }, schema: PairClaimResult }),
+    },
+
     games: {
       create: (body: CreateGame): Promise<TGame> =>
         http.request({ method: 'POST', path: '/v1/games', json: body, schema: Game }),

package/create-game/template/CLAUDE.md.tmpl

@@ -24,6 +24,9 @@ studio/cases.jsonl   case 库（进版本控制），studio 维护
 
 **没有** `publish.ts`、`src/rules/index.ts`、`meta`、版本号。看到教程里有这些就是旧结构，忽略。
 
+**改名**：只改 `game.meta.json` 的 `id`（小写短横线，同时是平台上的 slug、产物目录名、CSS 命名空间）和 `title`，
+`game.ts` 从那里读。`package.json` 的 `name` 随意。已经发布过的 slug 不能改——那是另一个游戏。
+
 ## 清单：`game.ts`
 
 ```ts

package/create-game/template/game.ts.tmpl

@@ -12,6 +12,7 @@
    逻辑侧三个必填：schema 说有哪些参数，round 说结果怎么算，paytable 说赔多少。
    normalize / validate / modeOf 不用写——它们由 schema 和 modes 推导。 */
 import { createRng, defineGame, normalizeBySchema, type RoundInput, type RoundResult } from 'gamekit777/sdk';
+import meta from './game.meta.json' with { type: 'json' };
 import { HOUSE_EDGE, MULT } from './src/rules/const.ts';
 import { restore } from './src/rules/restore.ts';
 import { schema } from './src/rules/schema.ts';
@@ -44,8 +45,9 @@ export function round(input: RoundInput<__PASCAL__Config>): RoundResult<__PASCAL
 }
 
 export default defineGame<__PASCAL__Config, __PASCAL__Outcome>({
-  slug: '__ID__',
-  title: '__TITLE__',
+  // 名字只在 game.meta.json 里改：slug 同时是大厅里的 id、产物目录名和 CSS 命名空间
+  slug: meta.id,
+  title: meta.title,
   description: '押正面还是反面。',
   rtp: HOUSE_EDGE,
   sims: 100_000,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gamekit777",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "type": "module",
   "bin": {
     "gamekit777": "./studio/cli.ts"

package/protocol/index.ts

@@ -7,3 +7,4 @@ export * from './rounds.ts';
 export * from './seeds.ts';
 export * from './session.ts';
 export * from './verify.ts';
+export * from './pair.ts';

package/protocol/pair.ts

@@ -0,0 +1,32 @@
+/* studio 配对：站点把当前身份借给本机 studio。
+   接口挂在 better-auth 下（/api/auth/pair/*），因为建会话、写 cookie 是它的事。 */
+import { z } from 'zod';
+
+export const PairStartResult = z.object({
+  /** 一次性、60 秒有效 */
+  code: z.string().min(32).max(128),
+  expiresAt: z.int(),
+});
+export type PairStartResult = z.infer<typeof PairStartResult>;
+
+export const PairClaim = z.object({ code: z.string().min(32).max(128) });
+export type PairClaim = z.infer<typeof PairClaim>;
+
+export const PairClaimResult = z.object({
+  user: z.object({ id: z.string(), name: z.string().nullable(), isAnonymous: z.boolean() }),
+});
+export type PairClaimResult = z.infer<typeof PairClaimResult>;
+
+export const PAIR_START_PATH = '/api/auth/pair/start';
+export const PAIR_CLAIM_PATH = '/api/auth/pair/claim';
+
+/**
+ * 授权只能回到回环地址：studio 是本机进程。站点和 studio 两边都用这一个判断——
+ * 任何网页都能把人带到 #/connect，能拿走身份的只有本机。
+ */
+export function isLoopbackUrl(raw: string): boolean {
+  try {
+    const u = new URL(raw);
+    return u.protocol === 'http:' && ['127.0.0.1', 'localhost', '[::1]'].includes(u.hostname);
+  } catch { return false; }
+}

package/studio/app/App.svelte

@@ -7,6 +7,7 @@
   import { ensureHostFonts } from 'gamekit777/dev-host';
   import { api, type Info } from './lib/api.ts';
   import { bus } from './lib/bus.svelte.ts';
+  import { identity } from './lib/identity.svelte.ts';
   import PreviewPanel from './panels/PreviewPanel.svelte';
   import TuningPanel from './panels/TuningPanel.svelte';
   import TablePanel from './panels/TablePanel.svelte';
@@ -26,7 +27,11 @@
   let err = $state<string | null>(null);
   const refresh = async () => { try { info = await api.info(); err = null; } catch (e) { err = e instanceof Error ? e.message : String(e); } };
 
-  onMount(() => { ensureHostFonts(); bus.connect(); void refresh(); });
+  /* 先拿 info（里面有站点地址），再验身份：没有 cookie 就整页跳去站点借，带 code 回来时 boot 会先换会话 */
+  onMount(() => {
+    ensureHostFonts(); bus.connect();
+    void refresh().then(() => { if (info) void identity.boot(info.urls.site); });
+  });
   $effect(() => { void bus.fingerprint; void bus.buildVersion; void refresh(); });
 
   const name = $derived(info ? info.snapshot.spec.title : '…');
@@ -44,6 +49,7 @@
     <span class="chip" class:on={bus.preview?.connected}>预览 {bus.preview?.connected ? '已连' : '未连'}</span>
     <span class="chip" class:on={bus.connected}>总线 {bus.connected ? '已连' : '断开'}</span>
     {#if running}<span class="chip busy">{running} 个任务运行中</span>{/if}
+    {#if identity.me}<span class="chip on" title={identity.me.user.id}>{identity.me.user.isAnonymous ? '游客' : identity.me.user.name ?? '玩家'} {identity.me.user.id.slice(0, 6)}…</span>{/if}
   {/if}
   {#if err}<span class="chip bad">{err}</span>{/if}
   <div class="grow"></div>
@@ -64,7 +70,15 @@
 
   <!-- 右：编辑区，拉满剩余宽度 -->
   <section class="editor">
-    {#if info}
+    {#if identity.phase === 'redirecting' || identity.phase === 'claiming'}
+      <p class="dim">{identity.phase === 'claiming' ? '正在用站点签发的授权码建立会话…' : `没有身份，正在跳到 ${info?.urls.site ?? '站点'} 借一个…`}</p>
+    {:else if identity.phase === 'error'}
+      <div class="card">
+        <h2>身份没接上</h2>
+        <p class="bad">{identity.error}</p>
+        <div><button class="pri" onclick={() => info && identity.redirect(info.urls.site)}>再去站点授权一次</button></div>
+      </div>
+    {:else if info}
       {#if tab === 'preview'}<PreviewPanel {info} />{/if}
       {#if tab === 'tuning'}<TuningPanel {info} />{/if}
       {#if tab === 'table'}<TablePanel {info} />{/if}

package/studio/app/lib/identity.svelte.ts

@@ -0,0 +1,55 @@
+/* studio 页面的身份：始终是**站点上的那个人**，不在这里另建。
+ *
+ * 页面对 /v1 的请求同源，cookie 落在 127.0.0.1 下；第一次没有 cookie 时把整个窗口
+ * 跳到站点的 #/connect 借身份，站点签一个一次性 code 带回 /__studio/connect，这里拿 code
+ * 经反代换一个同一用户的新会话。之后发布、下注都用这份 cookie。 */
+import type { SessionView } from 'gamekit777/protocol';
+import { client } from './upload.ts';
+
+export type IdentityPhase = 'checking' | 'ok' | 'redirecting' | 'claiming' | 'error';
+
+class Identity {
+  phase = $state<IdentityPhase>('checking');
+  me = $state<SessionView | null>(null);
+  error = $state<string | null>(null);
+
+  connectUrl(site: string): string {
+    const back = `${location.origin}/__studio/connect`;
+    return `${site.replace(/\/+$/, '')}/#/connect?return=${encodeURIComponent(back)}`;
+  }
+
+  /** 页面启动：/__studio/connect 带 code 就先换会话，然后一律 GET /v1/me */
+  async boot(site: string): Promise<void> {
+    const code = new URLSearchParams(location.search).get('code');
+    if (location.pathname.endsWith('/connect') && code) {
+      this.phase = 'claiming';
+      try {
+        await client.pair.claim(code);
+        // 去掉地址栏里的 code：刷新不该再换一次（code 已作废，会报错）
+        history.replaceState(null, '', '/__studio/');
+      } catch (e) {
+        this.phase = 'error';
+        this.error = `换会话失败：${e instanceof Error ? e.message : String(e)}`;
+        return;
+      }
+    }
+    try {
+      this.me = await client.session.me();
+      this.phase = 'ok';
+    } catch {
+      this.redirect(site);
+    }
+  }
+
+  redirect(site: string): void {
+    this.phase = 'redirecting';
+    location.href = this.connectUrl(site);
+  }
+
+  async refresh(): Promise<void> {
+    try { this.me = await client.session.me(); this.phase = 'ok'; }
+    catch (e) { this.me = null; this.error = e instanceof Error ? e.message : String(e); }
+  }
+}
+
+export const identity = new Identity();

package/studio/app/panels/PublishPanel.svelte

@@ -1,18 +1,17 @@
 <script lang="ts">
-  /* 发布：身份是这个页面上登录的人（/v1 同源反代，cookie 由浏览器带）。
+  /* 发布：身份是从站点借来的那个人（见 lib/identity.svelte.ts；/v1 同源反代，cookie 由浏览器带）。
      node 侧只排队和记录；MCP 发起的请求也落在这里，作者点确认才真传。发布不可逆。 */
   import { onMount } from 'svelte';
   import type { GameModule } from 'gamekit777/sdk';
-  import type { SessionView } from 'gamekit777/protocol';
   import game from 'virtual:studio/game';
   import { api, type Info } from '../lib/api.ts';
   import { bus } from '../lib/bus.svelte.ts';
-  import { client, planFromArtifacts, runUpload } from '../lib/upload.ts';
+  import { identity } from '../lib/identity.svelte.ts';
+  import { planFromArtifacts, runUpload } from '../lib/upload.ts';
 
   let { info }: { info: Info } = $props();
   const spec = $derived(info.snapshot.spec);
-  let me = $state<SessionView | null>(null);
-  let meErr = $state<string | null>(null);
+  const me = $derived(identity.me);
   let note = $state('');
   let running = $state<string | null>(null);
   let log = $state<string[]>([]);
@@ -20,15 +19,7 @@
   const reqs = $derived(Object.values(bus.publish).sort((a, b) => b.createdAt - a.createdAt));
   const pct = (ppm: number) => `${(ppm / 1e4).toFixed(4)}%`;
 
-  async function whoami() {
-    try { me = await client.session.me(); meErr = null; }
-    catch (e) { me = null; meErr = e instanceof Error ? e.message : String(e); }
-  }
-  async function anon() {
-    try { me = await client.session.bootstrap(); meErr = null; }
-    catch (e) { meErr = e instanceof Error ? e.message : String(e); }
-  }
-  onMount(() => { void whoami(); void api.publishList().then((l) => { for (const r of l) bus.publish = { ...bus.publish, [r.id]: r }; }); });
+  onMount(() => { void identity.refresh(); void api.publishList().then((l) => { for (const r of l) bus.publish = { ...bus.publish, [r.id]: r }; }); });
 
   const lowest = $derived(info.artifacts.reduce<number | null>((m, a) => (m === null || a.computedRtpPpm < m ? a.computedRtpPpm : m), null));
   const localIssues = $derived.by(() => {
@@ -68,11 +59,12 @@
   <div class="card">
     <h2>身份</h2>
     {#if me}
-      <p>{me.user.isAnonymous ? '匿名用户' : me.user.id} <span class="mono hint">{me.user.id.slice(0, 8)}…</span> · 余额 {me.wallet.balanceCents}</p>
-      <p class="hint">发布出来的游戏归这个身份。cookie 不分端口——它和 apps/web 在 localhost 上共享。</p>
+      <p>{me.user.isAnonymous ? '游客' : me.user.name ?? '玩家'} <span class="mono hint">{me.user.id.slice(0, 8)}…</span> · 余额 {me.wallet.balanceCents}</p>
+      <p class="hint">这就是你在 {info.urls.site} 上的身份，发布出来的游戏归它。{#if me.user.isAnonymous}匿名身份换浏览器就丢了——要长期用，先在站点上登录，再回来重新连接。{/if}</p>
+      <button class="sec" onclick={() => identity.redirect(info.urls.site)}>换个身份 / 重新连接</button>
     {:else}
-      <p class="hint">{meErr ?? '未登录'}</p>
-      <button class="sec" onclick={anon}>创建匿名会话</button>
+      <p class="hint">{identity.error ?? '没有身份'}</p>
+      <button class="sec" onclick={() => identity.redirect(info.urls.site)}>去站点授权</button>
     {/if}
   </div>
 

package/studio/bin.ts

@@ -32,8 +32,8 @@ try {
   process.exit(1);
 }
 
-const backendUrl = process.env.GAMEKIT_BASE_URL ?? 'http://127.0.0.1:8787';
-const placeholder = { studio: '', preview: '' };
+const backendUrl = cfg.backendUrl;
+const placeholder = { studio: '', preview: '', backend: cfg.backendUrl, site: cfg.siteUrl };
 const engine = new Engine(cfg.gameDir, placeholder);
 
 const server = await startGameServer({
@@ -54,6 +54,7 @@ GameKit Studio${mcpMode ? '（MCP over stdio）' : ''}
   页面    ${placeholder.studio}
   预览    ${placeholder.preview}
   后端    ${backendUrl}  →  /v1
+  站点    ${cfg.siteUrl}  （没有身份时去这里借）
 ${mcpMode ? '' : `
   接 AI：claude mcp add gamekit -- bunx gamekit777 studio
 `}`);

package/studio/cli.ts

@@ -1,16 +1,16 @@
 #!/usr/bin/env bun
 /* `gamekit777` 这个命令的入口：按子命令分派。
  *
- *   gamekit777 studio [dir] [--mcp|--no-mcp] [--game-port N]   起工作台（MCP 走 stdio）
- *   gamekit777 new <id> [标题] [--dest 目录]                     脚手架一个新游戏并装依赖
+ *   gamekit777 studio [dir] [--mcp|--no-mcp] [--game-port N] [--backend URL]   起工作台（MCP 走 stdio）
+ *   gamekit777 new                                             在当前目录脚手架一个新游戏（my-game）并装依赖；改名改 game.meta.json
  *
  * 只是薄薄一层分派，逻辑各在 bin.ts 和 src/scaffold.ts。 */
 const [sub, ...rest] = process.argv.slice(2);
 
 const usage = (): never => {
   process.stderr.write(`用法：
-  gamekit777 studio [dir] [--mcp|--no-mcp] [--game-port N]
-  gamekit777 new <id> [标题] [--dest 目录]
+  gamekit777 studio [dir] [--mcp|--no-mcp] [--game-port N] [--backend URL]
+  gamekit777 new                               在当前目录生成 my-game（占了加序号）并装依赖；名字之后改 game.meta.json
 
 接 Claude Code：在游戏目录里
   claude mcp add gamekit -- bunx gamekit777 studio
@@ -25,13 +25,11 @@ switch (sub) {
     break;
   }
   case 'new': {
+    // 刻意不收参数：名字、标题都在生成后的 game.meta.json 里改，少一层「命令行参数 vs 配置文件」的分叉
+    if (rest.length > 0) usage();
     const { scaffold } = await import('./src/scaffold.ts');
-    const destAt = rest.indexOf('--dest');
-    const dest = destAt >= 0 ? rest.splice(destAt, 2)[1] : undefined;
-    const [id, title] = rest;
-    if (!id) usage();
     try {
-      const r = await scaffold({ id: id!, title, dest }, process.cwd());
+      const r = await scaffold({}, process.cwd());
       process.stdout.write(`✓ ${r.dest}\n\n${r.next.map((n) => `  ${n}`).join('\n')}\n\n  cd ${r.dest} && bunx gamekit777 studio\n`);
     } catch (e) {
       process.stderr.write(`✗ ${e instanceof Error ? e.message : String(e)}\n`);

package/studio/src/config.ts

@@ -13,18 +13,32 @@ export interface StudioConfig {
   studioRoot: string;
   /** 游戏 vite dev server 的端口 */
   gamePort: number;
+  /** 平台后端。/v1 /api 反代到这里，发布用的身份也落在这条链路上 */
+  backendUrl: string;
+  /** 平台站点。没有身份时跳去这里的 #/connect 借身份；线上和后端是同一个域名，仓库内是 5180 */
+  siteUrl: string;
 }
 
+/**
+ * 创作者装的是 npm 包，机器上没有本地后端，默认就该指到平台本身。
+ * 仓库内开发用 GAMEKIT_BASE_URL=http://127.0.0.1:8787（根 package.json 的 studio 脚本已带上）。
+ */
+export const DEFAULT_BACKEND_URL = 'https://rtp.citdot.com';
+
 const STUDIO_ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 
 export function loadConfig(argv: readonly string[]): StudioConfig {
   const rest = [...argv];
   let dir: string | undefined;
   let gamePort = 4301;
+  let backendUrl = process.env.GAMEKIT_BASE_URL ?? DEFAULT_BACKEND_URL;
+  let siteUrl = process.env.GAMEKIT_SITE_URL ?? '';
 
   while (rest.length > 0) {
     const k = rest.shift()!;
     if (k === '--game-port') gamePort = Number(rest.shift());
+    else if (k === '--backend') backendUrl = rest.shift() ?? backendUrl;
+    else if (k === '--site') siteUrl = rest.shift() ?? siteUrl;
     else if (k.startsWith('-')) throw new Error(`不认识的参数 ${k}`);
     else dir = k;
   }
@@ -35,5 +49,6 @@ export function loadConfig(argv: readonly string[]): StudioConfig {
       throw new Error(`${gameDir} 下没有 ${need}——这不像一个游戏目录。在游戏目录里启动，或把目录作为参数传进来`);
     }
   }
-  return { gameDir, studioRoot: STUDIO_ROOT, gamePort };
+  backendUrl = backendUrl.replace(/\/+$/, '');
+  return { gameDir, studioRoot: STUDIO_ROOT, gamePort, backendUrl, siteUrl: (siteUrl || backendUrl).replace(/\/+$/, '') };
 }

package/studio/src/engine.ts

@@ -43,7 +43,7 @@ export class Engine {
   readonly bus = new Bus();
   readonly jobs: Jobs;
   readonly cases: CaseStore;
-  readonly urls: { studio: string; preview: string };
+  readonly urls: { studio: string; preview: string; backend: string; site: string };
   preview: PreviewState = {
     connected: false, config: null, mode: null, bet: null, balance: null,
     status: null, lastError: null, recent: [], consoleErrors: [], updatedAt: 0,
@@ -51,7 +51,7 @@ export class Engine {
   #publish = new Map<string, PublishRequest>();
   #lastFingerprint: string;
 
-  constructor(gameDir: string, urls: { studio: string; preview: string }) {
+  constructor(gameDir: string, urls: Engine['urls']) {
     this.game = new Game(gameDir);
     this.urls = urls;
     this.#lastFingerprint = this.game.fingerprint;

package/studio/src/game-vite.ts

@@ -5,7 +5,7 @@
  * 不存在「studio 里演得好好的，真 build 出来不一样」的分叉空间。 */
 import { existsSync, readFileSync, realpathSync } from 'node:fs';
 import { join, resolve } from 'node:path';
-import { createLogger, createServer, searchForWorkspaceRoot, type Logger, type ViteDevServer } from 'vite';
+import { createLogger, createServer, searchForWorkspaceRoot, type Logger, type ProxyOptions, type ViteDevServer } from 'vite';
 import type { Engine } from './engine.ts';
 import { studioPlugin } from './studio-plugin.ts';
 
@@ -54,6 +54,27 @@ function stderrLogger(): Logger {
   return { ...base, info: w, warn: w, warnOnce: w, error: w, clearScreen: () => {} };
 }
 
+/**
+ * 反代到平台后端。两个头都要改写：
+ *   Host    → 平台域名。后端在 Cloudflare 后面按 Host 路由，带着 127.0.0.1:4301 过去会被拒
+ *   Origin  → 平台自己的 origin。better-auth 对建会话的 POST 做 Origin 校验，
+ *             创作者机器上的 127.0.0.1:随机端口不可能预先写进 TRUSTED_ORIGINS
+ * 这么做不削弱 CSRF 防护：能打到这个反代的只有同源的 studio 页面本身。
+ */
+function proxyRule(backendUrl: string): ProxyOptions {
+  const origin = new URL(backendUrl).origin;
+  return {
+    target: backendUrl,
+    changeOrigin: true,
+    configure(proxy) {
+      proxy.on('proxyReq', (req) => {
+        if (req.getHeader('origin')) req.setHeader('origin', origin);
+        req.removeHeader('referer');
+      });
+    },
+  };
+}
+
 export async function startGameServer(o: GameServerOptions): Promise<ViteDevServer> {
   const server = await createServer({
     root: o.gameDir,
@@ -75,8 +96,8 @@ export async function startGameServer(o: GameServerOptions): Promise<ViteDevServ
       fs: { allow: allowList(o) },
       /* 同源代理到平台后端：cookie 才带得上。发布时用的就是这份身份 */
       proxy: {
-        '/v1': { target: o.backendUrl, changeOrigin: false },
-        '/api': { target: o.backendUrl, changeOrigin: false },
+        '/v1': proxyRule(o.backendUrl),
+        '/api': proxyRule(o.backendUrl),
       },
     },
     /* 预览壳和游戏各自 import svelte，物理上可能是两份（studio 的和游戏的 node_modules）。

package/studio/src/mcp.ts

@@ -142,15 +142,11 @@ export function createMcpServer(engine: Engine): McpServer {
   });
 
   s.registerTool('scaffold', {
-    description: '在当前目录下新建一个游戏（一个能跑的抛硬币），写好 package.json 并 bun install。之后请在那个目录里重启 studio。',
-    inputSchema: {
-      id: z.string().describe('小写短横线形式，同时是包名、目录名和 CSS 命名空间'),
-      title: z.string().optional(),
-      dest: z.string().optional().describe('目标目录，默认 <cwd>/<id>'),
-    },
-  }, async (a) => {
+    description: '在当前目录下新建一个游戏（my-game，占了加序号；一个能跑的抛硬币），写好 package.json 并 bun install。名字之后改 game.meta.json。请在那个目录里重启 studio。',
+    inputSchema: {},
+  }, async () => {
     try {
-      const r = await scaffold({ id: a.id, title: a.title, dest: a.dest }, process.cwd());
+      const r = await scaffold({}, process.cwd());
       return out(`## ✅ 已生成 ${r.dest}\n\n${r.files} 个文件，依赖${r.installed ? '已装' : '未装'}。\n\n${r.next.map((n) => `- ${n}`).join('\n')}`, r);
     } catch (e) { return fail(e instanceof Error ? e.message : String(e)); }
   });

package/studio/src/scaffold.ts

@@ -7,8 +7,18 @@ import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { scaffoldGame, ID_PATTERN } from 'gamekit777/create-game';
 
+export const DEFAULT_ID = 'my-game';
+export const DEFAULT_TITLE = '我的游戏';
+
+/** 不给 id 就叫 my-game；占了就 my-game-2、my-game-3……创作者改名只需要动 slug 和目录名 */
+export function defaultId(cwd: string): string {
+  if (!existsSync(join(cwd, DEFAULT_ID))) return DEFAULT_ID;
+  for (let n = 2; ; n++) if (!existsSync(join(cwd, `${DEFAULT_ID}-${n}`))) return `${DEFAULT_ID}-${n}`;
+}
+
 export interface ScaffoldRequest {
-  id: string;
+  /** 不给就是 my-game（占了就加序号） */
+  id?: string;
   title?: string;
   /** 目标目录。默认 <cwd>/<id> */
   dest?: string;
@@ -61,9 +71,10 @@ function defaultSpec(dest: string): string {
 }
 
 export async function scaffold(req: ScaffoldRequest, cwd: string): Promise<ScaffoldResult> {
-  if (!ID_PATTERN.test(req.id)) throw new Error(`id "${req.id}" 要是小写短横线形式`);
-  const dest = req.dest ?? join(cwd, req.id);
-  const r = scaffoldGame({ id: req.id, title: req.title, dest, gamekitSpec: req.gamekitSpec ?? defaultSpec(dest) });
+  const id = req.id ?? defaultId(cwd);
+  if (!ID_PATTERN.test(id)) throw new Error(`id "${id}" 要是小写短横线形式`);
+  const dest = req.dest ?? join(cwd, id);
+  const r = scaffoldGame({ id, title: req.title ?? DEFAULT_TITLE, dest, gamekitSpec: req.gamekitSpec ?? defaultSpec(dest) });
 
   let installed = false, installOutput = '';
   if (!req.skipInstall) {
@@ -75,7 +86,7 @@ export async function scaffold(req: ScaffoldRequest, cwd: string): Promise<Scaff
   return {
     dest, files: r.files.length, installed, installOutput,
     next: [
-      `游戏在 ${dest}，是一个能跑的抛硬币。从能跑的东西开始改。`,
+      `游戏在 ${dest}，是一个能跑的抛硬币。从能跑的东西开始改；名字和标题在 game.meta.json 里改。`,
       `先读 ${join(dest, 'CLAUDE.md')}：清单字段、round() 的硬约束、modes/book/restore 怎么选、演出侧约定。`,
       '改 src/rules/ 下的纯逻辑（零 DOM、零自取随机），改 src/components/ 下的演出。',
       '已发布过的 mode 解码逻辑不能改，要改就换 slug；结果漂移由 studio/cases.jsonl 兜。',

package/studio/src/studio-plugin.ts

@@ -20,6 +20,8 @@ export interface StudioPluginOptions {
 export const VIRTUAL_GAME = 'virtual:studio/game';
 export const PREVIEW_PATH = '/__studio/preview.html';
 export const PAGE_PATH = '/__studio/';
+/** 站点授权完带 code 回到这里，页面拿 code 换会话 */
+export const CONNECT_PATH = '/__studio/connect';
 
 const page = (title: string, entry: string): string => `<!doctype html>
 <html lang="zh-CN">
@@ -52,7 +54,7 @@ export function studioPlugin(o: StudioPluginOptions): Plugin {
       server.middlewares.use((req, res, next) => {
         const path = req.url?.split('?')[0];
         const html = path === PREVIEW_PATH ? previewHtml
-          : path === PAGE_PATH || path === '/__studio' || path === '/__studio/index.html' ? appHtml
+          : path === PAGE_PATH || path === '/__studio' || path === '/__studio/index.html' || path === CONNECT_PATH ? appHtml
           : null;
         if (!html) return next();
         void server.transformIndexHtml(req.url!, html).then((out) => {