gamekit777 0.1.3 → 0.1.6

package/studio/src/api.ts

@@ -93,6 +93,17 @@ export function createApi(engine: Engine): (req: IncomingMessage, res: ServerRes
     return undefined;
   });
 
+  /* 游戏包：dist/ 里的文件清单与字节，页面用浏览器身份传到平台 */
+  on('GET', '/bundle', () => engine.bundleFiles());
+  on('GET', '/bundle/file', (req, res) => {
+    const path = new URL(req.url!, 'http://x').searchParams.get('path') ?? '';
+    const bytes = engine.bundleFile(path);
+    if (!bytes) { json(res, 404, { error: `dist/ 里没有 ${path}` }); return undefined; }
+    res.writeHead(200, { 'Content-Type': 'application/octet-stream', 'Access-Control-Allow-Origin': '*' });
+    res.end(bytes);
+    return undefined;
+  });
+
   /* 长任务 */
   on('GET', '/jobs', () => engine.jobs.list());
   on('GET', '/jobs/:id', (_r, res, p) => {
@@ -111,16 +122,18 @@ export function createApi(engine: Engine): (req: IncomingMessage, res: ServerRes
   on('POST', '/cases/bless', (_r, _s, _p, body) => ({ blessed: engine.cases.bless((body as { updates: never[] }).updates) }));
   on('DELETE', '/cases/:id', (_r, _s, p) => ({ removed: engine.cases.remove(p.id!) }));
 
-  /* 发布 */
+  /* 动画库：列表 / 详情（源码 + NOTES + 预览用的绝对路径）/ 复制进游戏 / 手动同步 */
+  on('GET', '/assets', () => ({ entries: engine.assets.list(), syncedAt: engine.assets.syncedAt }));
+  on('GET', '/assets/:name', (_r, _s, p) => engine.assets.show(p.name!));
+  on('POST', '/assets/:name/use', (_r, _s, p, body) => engine.assets.use(p.name!, { force: !!(body as { force?: boolean } | null)?.force }));
+  on('POST', '/assets/sync', async () => ({ result: await engine.assets.sync(), entries: engine.assets.list() }));
+
+  /* 发布：node 侧一键跑完（身份是反代抄下来的站点 cookie），页面只发起和看进度 */
   on('GET', '/publish', () => engine.publishRequests());
+  on('GET', '/publish/preflight', () => engine.publishPreflight(null));
   on('POST', '/publish/request', (_r, _s, _p, body) => {
     const b = (body ?? {}) as { modes?: unknown; note?: string };
-    return engine.requestPublish(list(b.modes), b.note ?? null, 'page');
-  });
-  on('POST', '/publish/:id', (_r, res, p, body) => {
-    const r = engine.updatePublish(p.id!, body as never);
-    if (!r) { json(res, 404, { error: `没有发布请求 ${p.id}` }); return undefined; }
-    return r;
+    return engine.publish(list(b.modes), { note: b.note ?? null, from: 'page' });
   });
 
   return (req, res, next) => {

package/studio/src/assets.ts

@@ -0,0 +1,160 @@
+/* 资源库（动画 + 套路）在创作者机器上的那一半：后台拉、按哈希存、给页面预览、给 AI 查看、复制进游戏。
+ *
+ * 内容按内容寻址存在 ~/.gamekit/assets/<hash>/，跨项目共用、永不失效；index.json 的本地副本是目录。
+ * 拉下来的每个文件都按目录里的 sha256 核一遍，对不上就不落盘——目录走 TLS 从平台来，文件的完整性挂在它上面。
+ * 游戏用它是**复制**不是依赖：库里删一条，已经复制进游戏的副本照常构建。
+ * 两种条目只在 use() 上分叉：动画是一个文件，套路是一个目录（Demo 和范例不进游戏）。 */
+import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { Sha256 } from 'gamekit777/sdk/hash';
+import {
+  ASSET_INDEX_PATH, AssetIndex, assetCopyFiles, assetFilePath, assetPreviewFile, assetTargetDir,
+  type AssetIndexEntry, type AssetKind,
+} from 'gamekit777/protocol';
+
+export const assetsDir = (): string => process.env.GAMEKIT_ASSETS_DIR ?? join(homedir(), '.gamekit', 'assets');
+
+export interface AssetSyncResult { added: string[]; removed: string[]; total: number; at: number }
+
+export interface AssetShown {
+  entry: AssetIndexEntry;
+  notes: string;
+  /** 除 asset.json / NOTES.md 之外的全部文件正文，按目录顺序。动画就一个，套路是机制 + Demo + 范例 */
+  files: { path: string; text: string; copied: boolean }[];
+  /** 预览要挂的组件（动画本身 / 套路的 Demo）的绝对路径，页面用 /@fs 让 vite 现场编译 */
+  previewPath: string;
+  /** 复制进游戏后落在哪（相对游戏目录） */
+  target: string;
+}
+
+export interface UseResult { path: string; written: boolean; reason?: string; files: string[] }
+
+export class AssetStore {
+  readonly dir: string;
+  #index: AssetIndex | null = null;
+  #syncedAt = 0;
+  #syncing: Promise<AssetSyncResult | null> | null = null;
+
+  constructor(readonly backendUrl: string, readonly gameDir: string, private readonly onChange: (r: AssetSyncResult) => void, dir = assetsDir()) {
+    this.dir = dir;
+    mkdirSync(dir, { recursive: true });
+    this.#index = this.#readLocal();
+  }
+
+  get syncedAt(): number { return this.#syncedAt; }
+
+  #readLocal(): AssetIndex | null {
+    try { return AssetIndex.parse(JSON.parse(readFileSync(join(this.dir, 'index.json'), 'utf8'))); }
+    catch { return null; }
+  }
+
+  list(kind?: AssetKind): AssetIndexEntry[] {
+    const all = this.#index?.entries ?? [];
+    return kind ? all.filter((e) => e.kind === kind) : all;
+  }
+
+  get(name: string): AssetIndexEntry | null { return this.list().find((e) => e.name === name) ?? null; }
+
+  filePath(entry: AssetIndexEntry, path: string): string { return join(this.dir, entry.hash, path); }
+
+  /** 后台拉一次。并发调用共用同一次；失败（离线、平台没发过库）返回 null，本地目录照旧可用 */
+  sync(): Promise<AssetSyncResult | null> {
+    if (this.#syncing) return this.#syncing;
+    this.#syncing = this.#sync().finally(() => { this.#syncing = null; });
+    return this.#syncing;
+  }
+
+  async #sync(): Promise<AssetSyncResult | null> {
+    let remote: AssetIndex;
+    try {
+      const r = await fetch(`${this.backendUrl}${ASSET_INDEX_PATH}`);
+      if (!r.ok) return null;
+      remote = AssetIndex.parse(await r.json());
+    } catch { return null; }
+
+    const before = new Map(this.list().map((e) => [e.name, e.hash]));
+    const added: string[] = [];
+    for (const e of remote.entries) {
+      if (this.#complete(e)) { if (before.get(e.name) !== e.hash) added.push(e.name); continue; }
+      const tmp = join(this.dir, `.${e.hash}.part`);
+      rmSync(tmp, { recursive: true, force: true });
+      for (const f of e.files) {
+        const r = await fetch(`${this.backendUrl}${assetFilePath(e.hash, f.path)}`);
+        if (!r.ok) throw new Error(`拉 ${e.name}/${f.path} 失败：${r.status}`);
+        const bytes = new Uint8Array(await r.arrayBuffer());
+        const got = new Sha256().update(bytes).hex();
+        if (got !== f.sha256) throw new Error(`${e.name}/${f.path} 的 sha256 对不上目录（${got.slice(0, 8)} ≠ ${f.sha256.slice(0, 8)}），不落盘`);
+        mkdirSync(dirname(join(tmp, f.path)), { recursive: true });
+        writeFileSync(join(tmp, f.path), bytes);
+      }
+      rmSync(join(this.dir, e.hash), { recursive: true, force: true });
+      // 整条文件齐了再改名到位：vite 看到的目录要么完整要么没有
+      renameDir(tmp, join(this.dir, e.hash));
+      added.push(e.name);
+    }
+    const names = new Set(remote.entries.map((e) => e.name));
+    const removed = [...before.keys()].filter((n) => !names.has(n));
+
+    writeFileSync(join(this.dir, 'index.json'), `${JSON.stringify(remote, null, 2)}\n`);
+    this.#index = remote;
+    this.#syncedAt = Date.now();
+    const result = { added, removed, total: remote.entries.length, at: this.#syncedAt };
+    if (added.length || removed.length) this.onChange(result);
+    return result;
+  }
+
+  #complete(e: AssetIndexEntry): boolean {
+    const d = join(this.dir, e.hash);
+    if (!existsSync(d)) return false;
+    const have = new Set(readdirSync(d));
+    return e.files.every((f) => have.has(f.path));
+  }
+
+  show(name: string): AssetShown {
+    const entry = this.get(name);
+    if (!entry) throw new Error(`资源库里没有 ${name}。有的是：${this.list().map((e) => `${e.name}（${e.kind}）`).join('、') || '（空，先等后台同步或检查后端）'}`);
+    const read = (p: string): string => readFileSync(this.filePath(entry, p), 'utf8');
+    const paths = entry.files.map((f) => f.path);
+    const copied = new Set(assetCopyFiles(entry, paths));
+    return {
+      entry, notes: read('NOTES.md'),
+      files: paths.filter((p) => p !== 'asset.json' && p !== 'NOTES.md').map((p) => ({ path: p, text: read(p), copied: copied.has(p) })),
+      previewPath: this.filePath(entry, assetPreviewFile(entry)),
+      target: entry.kind === 'animation' ? `${assetTargetDir('animation')}/${entry.component}` : `${assetTargetDir('pattern')}/${entry.name}/`,
+    };
+  }
+
+  /**
+   * 复制进游戏，每个文件头注来源与哈希。
+   * 动画 → src/animations/<Component>.svelte；套路 → src/patterns/<name>/ 下的机制文件（Demo、范例不进）。
+   * 目标已有且内容不同时拒绝，除非 force——那是创作者改过的副本，不能静默覆盖
+   */
+  use(name: string, o: { force?: boolean } = {}): UseResult {
+    const s = this.show(name);
+    const e = s.entry;
+    const tag = `来自 GameKit 资源库 ${e.kind === 'animation' ? 'animations' : 'patterns'}/${e.name}@${e.hash.slice(0, 12)}。这是你的副本，随意改；库更新不会动它`;
+    const header = (p: string): string => p.endsWith('.svelte') ? `<!-- ${tag} -->\n` : p.endsWith('.ts') ? `// ${tag}\n` : '';
+    const destDir = e.kind === 'animation' ? join(this.gameDir, assetTargetDir('animation')) : join(this.gameDir, assetTargetDir('pattern'), e.name);
+    const plan = s.files.filter((f) => f.copied).map((f) => ({ path: f.path, dest: join(destDir, f.path), content: header(f.path) + f.text }));
+    const shownPath = e.kind === 'animation' ? plan[0]!.dest : destDir;
+
+    const existing = plan.filter((f) => existsSync(f.dest));
+    if (existing.length === plan.length && existing.every((f) => readFileSync(f.dest, 'utf8') === f.content)) {
+      return { path: shownPath, written: false, reason: '已有同一份', files: plan.map((f) => f.path) };
+    }
+    const changed = existing.filter((f) => readFileSync(f.dest, 'utf8') !== f.content);
+    if (changed.length && !o.force) {
+      return { path: shownPath, written: false, reason: `已有同名文件且内容不同（你改过？）：${changed.map((f) => f.path).join('、')}。确定要覆盖就 force`, files: plan.map((f) => f.path) };
+    }
+    mkdirSync(destDir, { recursive: true });
+    for (const f of plan) writeFileSync(f.dest, f.content);
+    return { path: shownPath, written: true, files: plan.map((f) => f.path) };
+  }
+}
+
+function renameDir(from: string, to: string): void {
+  // 同一目录下 rename 不会跨设备；万一失败就复制再删
+  try { renameSync(from, to); }
+  catch { cpSync(from, to, { recursive: true }); rmSync(from, { recursive: true, force: true }); }
+}

package/studio/src/bus.ts

@@ -14,7 +14,8 @@ export type BusEvent =
   | { t: 'cmd'; id: string; cmd: unknown }
   | { t: 'cases'; changed: true }
   | { t: 'build'; artifacts: unknown }
-  | { t: 'publish'; request: unknown };
+  | { t: 'publish'; request: unknown }
+  | { t: 'assets'; added: string[]; removed: string[]; total: number };
 
 interface Waiter { resolve: (v: unknown) => void; reject: (e: Error) => void; timer: ReturnType<typeof setTimeout> }
 

package/studio/src/engine.ts

@@ -2,7 +2,9 @@
  *
  * 状态只有两处：长任务（Jobs）和总线（Bus）。游戏本身的状态在 Game 里按指纹缓存，
  * 预览的状态在浏览器里，node 侧只留一份最近上报的快照给 AI 读。 */
-import { join } from 'node:path';
+import { existsSync, readFileSync, readdirSync, statSync, writeFileSync } from 'node:fs';
+import { join, relative } from 'node:path';
+import { Sha256 } from 'gamekit777/sdk/hash';
 import type { Segment } from 'gamekit777/weights';
 import { Bus } from './bus.ts';
 import { buildMode, groupsSummary, listArtifacts, readArtifactBytes, sampleMode, type Artifact, type BuildModeOptions } from './build.ts';
@@ -10,8 +12,14 @@ import { CaseStore, captureCase, runCases, type CaseRecord, type RunCasesOptions
 import { Game, type Config } from './game.ts';
 import { Jobs, type Job } from './jobs.ts';
 import { probe, type ProbeOptions, type ProbeResult } from './probe.ts';
+import { AssetStore, type AssetSyncResult } from './assets.ts';
+import { hasSession, saveSession, sessionFile } from './session.ts';
 import { runSolve, type Targets } from './solver.ts';
 import { runTask, type TaskName, type TaskResult } from './tasks.ts';
+import { createClient, type GameKitClient } from 'gamekit777/client';
+import { fileCookieStore } from 'gamekit777/client/node';
+import { ASSET_INDEX_PATH, GameKitError } from 'gamekit777/protocol';
+import { uploadTables, type UploadTable } from 'gamekit777/publish/upload-core';
 
 export interface PreviewState {
   connected: boolean;
@@ -26,24 +34,55 @@ export interface PreviewState {
   updatedAt: number;
 }
 
+/** 一次发布的记录。页面的「发布」面板按它显示历史与进度 */
 export interface PublishRequest {
   id: string;
+  jobId: string;
   modes: string[] | null;
   note: string | null;
   from: 'mcp' | 'page';
   createdAt: number;
-  status: 'awaiting-approval' | 'running' | 'published' | 'rejected' | 'failed';
+  status: 'running' | 'published' | 'failed';
   progress: string[];
-  result: unknown;
+  result: PublishResult | null;
   error: string | null;
 }
 
+export interface PublishResult {
+  gameId: string;
+  slug: string;
+  verifiedRtpPpm: number | null;
+  /** 这次新发布的 mode。已生效的被跳过，不在这里 */
+  modes: string[];
+  bundle: string | null;
+  playUrl: string;
+}
+
+export interface PublishPreflight {
+  ok: boolean;
+  issues: string[];
+  warnings: string[];
+  artifacts: { mode: string; computedRtpPpm: number; rows: number }[];
+  session: boolean;
+  remote: {
+    user: string | null;
+    gameId: string | null;
+    game: { id: string; slug: string; status: string; liveModes: string[] } | null;
+    /** 这次会真正发布的 mode（去掉已生效的） */
+    willPublish: string[];
+  } | null;
+}
+
 export class Engine {
   readonly game: Game;
   readonly bus = new Bus();
   readonly jobs: Jobs;
   readonly cases: CaseStore;
   readonly urls: { studio: string; preview: string; backend: string; site: string };
+  /** node 侧记住的站点身份（反代从页面的 /v1/me 抄来的 cookie），MCP 发布用 */
+  readonly sessionPath: string;
+  /** 平台资源库（动画 + 套路）在本机的副本：后台拉、给页面预览、给 AI 查看、复制进游戏 */
+  readonly assets: AssetStore;
   preview: PreviewState = {
     connected: false, config: null, mode: null, bet: null, balance: null,
     status: null, lastError: null, recent: [], consoleErrors: [], updatedAt: 0,
@@ -54,6 +93,11 @@ export class Engine {
   constructor(gameDir: string, urls: Engine['urls']) {
     this.game = new Game(gameDir);
     this.urls = urls;
+    this.sessionPath = sessionFile(urls.backend);
+    this.assets = new AssetStore(urls.backend, gameDir, (r: AssetSyncResult) => {
+      this.bus.emit({ t: 'assets', added: r.added, removed: r.removed, total: r.total });
+      this.bus.log('info', `资源库同步：${r.total} 条${r.added.length ? `，新增/更新 ${r.added.join('、')}` : ''}${r.removed.length ? `，移除 ${r.removed.join('、')}` : ''}`);
+    });
     this.#lastFingerprint = this.game.fingerprint;
     this.jobs = new Jobs((job, msg) => this.bus.emit({ t: 'job', id: job.id, kind: job.kind, status: job.status, msg }));
     this.cases = new CaseStore(gameDir, () => this.bus.emit({ t: 'cases', changed: true }));
@@ -72,7 +116,8 @@ export class Engine {
     gameDir: string; fingerprint: string; packageName: string;
     snapshot: Awaited<ReturnType<Game['snapshot']>>;
     urls: Engine['urls']; previewConnected: boolean; artifacts: Artifact[]; cases: number;
-    caseFile: string;
+    caseFile: string; gameId: string | null; session: boolean;
+    assets: { count: number; syncedAt: number; dir: string };
   }> {
     this.touch();
     return {
@@ -81,9 +126,18 @@ export class Engine {
       previewConnected: this.bus.previewConnected,
       artifacts: listArtifacts(this.game), cases: this.cases.list().length,
       caseFile: this.cases.path,
+      gameId: this.meta().gameId, session: this.sessionPresent(),
+      assets: { count: this.assets.list().length, syncedAt: this.assets.syncedAt, dir: this.assets.dir },
     };
   }
 
+  /** 启动后在后台拉一次资源库，不阻塞任何东西；失败只记日志 */
+  syncAssetsInBackground(): void {
+    void this.assets.sync().then((r) => {
+      if (r === null) this.bus.log('warn', `资源库拉不到（${this.urls.backend}${ASSET_INDEX_PATH}）。离线或平台还没发过库；本地已有的照常可用`);
+    }).catch((e: unknown) => this.bus.log('error', `资源库同步失败：${e instanceof Error ? e.message : String(e)}`));
+  }
+
   /* ── 探测 / 采样 / 求解 / 建表 ── */
 
   probe(o: ProbeOptions = {}): Job<ProbeResult> {
@@ -175,6 +229,30 @@ export class Engine {
     return runCases(this.game, this.cases, o);
   }
 
+  /* ── 游戏包：vite build 的产物。页面拿它连表一起传 ── */
+
+  bundleFiles(): { path: string; bytes: number; sha256: string }[] {
+    const dist = join(this.game.dir, 'dist');
+    if (!existsSync(join(dist, 'index.js'))) return [];
+    const out: { path: string; bytes: number; sha256: string }[] = [];
+    const walk = (d: string): void => {
+      for (const n of readdirSync(d).sort()) {
+        const p = join(d, n);
+        if (statSync(p).isDirectory()) walk(p);
+        else { const b = readFileSync(p); out.push({ path: relative(dist, p).split('\\').join('/'), bytes: b.length, sha256: new Sha256().update(new Uint8Array(b)).hex() }); }
+      }
+    };
+    walk(dist);
+    return out;
+  }
+
+  bundleFile(path: string): Uint8Array | null {
+    const dist = join(this.game.dir, 'dist');
+    const full = join(dist, path);
+    if (!full.startsWith(dist) || !existsSync(full) || statSync(full).isDirectory()) return null;
+    return new Uint8Array(readFileSync(full));
+  }
+
   /* ── 预览 ── */
 
   reportPreview(state: Partial<PreviewState>): void {
@@ -187,24 +265,165 @@ export class Engine {
     return this.bus.command<T>(cmd, timeoutMs);
   }
 
-  /* ── 发布：node 侧只管排队和记录，上传由页面用浏览器身份做 ── */
+  /* ── 发布：node 侧一键跑完，不等人点。身份是反代从页面抄下来的那份站点 cookie ── */
+
+  rememberSession(cookieHeader: string): void { saveSession(this.sessionPath, cookieHeader); }
+  sessionPresent(): boolean { return hasSession(this.sessionPath); }
+
+  /** game.meta.json：游戏在平台上的身份是里面的 gameId（第一次发布后由这里写回），不是名字 */
+  meta(): { path: string; data: Record<string, unknown> | null; gameId: string | null } {
+    const path = join(this.game.dir, 'game.meta.json');
+    try {
+      const data = JSON.parse(readFileSync(path, 'utf8')) as Record<string, unknown>;
+      return { path, data, gameId: typeof data.gameId === 'string' && data.gameId ? data.gameId : null };
+    } catch { return { path, data: null, gameId: null }; }
+  }
+
+  #client(): GameKitClient {
+    return createClient({
+      baseUrl: this.urls.backend, cookies: 'manual', cookieStore: fileCookieStore(this.sessionPath),
+      headers: { origin: new URL(this.urls.backend).origin },
+    });
+  }
+
+  #noSession(): Error {
+    return new Error(`node 侧还没有站点身份。在浏览器打开 ${this.urls.studio}，连接一次身份（没身份会自动跳到站点授权），之后 MCP 就能直接发布`);
+  }
 
-  requestPublish(modes: string[] | null, note: string | null, from: PublishRequest['from']): PublishRequest {
-    const req: PublishRequest = {
-      id: `p${Date.now().toString(36)}`, modes, note, from, createdAt: Date.now(),
-      status: 'awaiting-approval', progress: [], result: null, error: null,
+  async publishPreflight(modes: string[] | null): Promise<PublishPreflight> {
+    this.touch();
+    const snap = await this.game.snapshot();
+    const all = listArtifacts(this.game);
+    const arts = modes ? all.filter((t) => modes.includes(t.mode)) : all;
+    const declared = Math.round(snap.spec.rtp * 1e6);
+    const issues: string[] = [];
+    const warnings: string[] = [];
+    if (arts.length === 0) issues.push('当前指纹下没有任何已建的表——先 build_table');
+    const missing = snap.spec.modes.filter((m) => !arts.some((t) => t.mode === m.name)).map((m) => m.name);
+    if (missing.length && !modes) issues.push(`这些 mode 还没建表：${missing.join('、')}`);
+    if (modes) for (const m of modes) if (!all.some((t) => t.mode === m)) issues.push(`mode ${m} 没有已建的表`);
+    const lowest = arts.reduce<number | null>((m, t) => (m === null || t.computedRtpPpm < m ? t.computedRtpPpm : m), null);
+    if (lowest !== null && lowest + 100 < declared) issues.push(`游戏声明 RTP ${declared} ppm，但最低的表只有 ${lowest} ppm——大厅里的声明不能高于任何一个 mode 实际能给的，发布会被拒`);
+
+    const meta = this.meta();
+    let remote: PublishPreflight['remote'] = null;
+    const session = this.sessionPresent();
+    if (!session) {
+      issues.push(this.#noSession().message);
+    } else {
+      const api = this.#client();
+      try {
+        const me = await api.session.me();
+        let game: NonNullable<PublishPreflight['remote']>['game'] = null;
+        let willPublish = arts.map((t) => t.mode);
+        if (meta.gameId) {
+          const g = await api.games.get(meta.gameId).catch((e: unknown) => {
+            issues.push(e instanceof GameKitError && e.code === 'NOT_FOUND'
+              ? `game.meta.json 的 gameId ${meta.gameId} 在平台上不存在——删掉这个字段会新建`
+              : `取游戏 ${meta.gameId} 失败：${e instanceof Error ? e.message : String(e)}`);
+            return null;
+          });
+          if (g) {
+            if (g.ownerId !== me.user.id) issues.push(`游戏 ${g.id}（${g.slug}）归另一个账号`);
+            if (g.status === 'published' && g.slug !== snap.spec.slug) issues.push(`已发布为 "${g.slug}"，slug 不能改成 "${snap.spec.slug}"`);
+            const live = g.modes.map((m) => m.mode);
+            willPublish = willPublish.filter((m) => !live.includes(m));
+            if (willPublish.length === 0) warnings.push('所有选中的 mode 都已生效：这次只会更新客户端包');
+            game = { id: g.id, slug: g.slug, status: g.status, liveModes: live };
+          }
+        } else {
+          const mine = await api.games.list({ status: 'all', owner: 'me', limit: 50 });
+          const dup = mine.items.find((g) => g.slug === snap.spec.slug);
+          if (dup) issues.push(`你已经有一个 slug 为 "${snap.spec.slug}" 的游戏（${dup.id}）。同一个项目就把它写进 game.meta.json 的 gameId；另一个项目就改 id`);
+        }
+        const taken = (await api.games.list({ status: 'published', limit: 50 })).items.find((g) => g.slug === snap.spec.slug && g.id !== meta.gameId);
+        if (taken) issues.push(`slug "${snap.spec.slug}" 已有别的已发布游戏在用（${taken.id}），发布会被拒。改 game.meta.json 的 id`);
+        remote = { user: me.user.id, gameId: meta.gameId, game, willPublish };
+      } catch (e) {
+        issues.push(`记住的身份已失效（${e instanceof Error ? e.message : String(e)}）。在 studio 页面重新连接一次`);
+      }
+    }
+    return {
+      ok: issues.length === 0, issues, warnings, session, remote,
+      artifacts: arts.map((t) => ({ mode: t.mode, computedRtpPpm: t.computedRtpPpm, rows: t.rowCount })),
     };
-    this.#publish.set(req.id, req);
-    this.bus.emit({ t: 'publish', request: req });
-    return req;
   }
 
-  updatePublish(id: string, patch: Partial<PublishRequest>): PublishRequest | null {
-    const req = this.#publish.get(id);
-    if (!req) return null;
-    Object.assign(req, patch);
-    this.bus.emit({ t: 'publish', request: req });
-    return req;
+  publish(modes: string[] | null, o: { note?: string | null; from: PublishRequest['from'] }): Job<PublishResult> {
+    this.touch();
+    const rec: PublishRequest = {
+      id: `p${Date.now().toString(36)}`, jobId: '', modes, note: o.note ?? null, from: o.from, createdAt: Date.now(),
+      status: 'running', progress: [], result: null, error: null,
+    };
+    this.#publish.set(rec.id, rec);
+    const emit = (): void => this.bus.emit({ t: 'publish', request: rec });
+    const job = this.jobs.start('publish', async (say0) => {
+      const say = (m: string): void => { say0(m); rec.progress.push(m); emit(); };
+      try {
+        const r = await this.#runPublish(modes, say);
+        rec.status = 'published'; rec.result = r; emit();
+        return r;
+      } catch (e) {
+        rec.status = 'failed'; rec.error = e instanceof Error ? e.message : String(e); emit();
+        throw e;
+      }
+    });
+    rec.jobId = job.id;
+    emit();
+    return job;
+  }
+
+  async #runPublish(modes: string[] | null, say: (m: string) => void): Promise<PublishResult> {
+    if (!this.sessionPresent()) throw this.#noSession();
+    const api = this.#client();
+    const me = await api.session.me().catch(() => {
+      throw new Error('记住的身份已失效（会话过期或在站点上退出了）。在 studio 页面重新连接一次');
+    });
+    say(`身份 ${me.user.isAnonymous ? '游客' : me.user.name ?? '玩家'} ${me.user.id.slice(0, 8)}…`);
+
+    const snap = await this.game.snapshot();
+    const all = listArtifacts(this.game);
+    const arts = modes ? all.filter((t) => modes.includes(t.mode)) : all;
+    if (arts.length === 0) throw new Error('当前指纹下没有已建的表——先 build_table');
+    const missing = (modes ?? []).filter((m) => !arts.some((t) => t.mode === m));
+    if (missing.length) throw new Error(`这些 mode 没有已建的表：${missing.join('、')}`);
+
+    /* 包：vite build 的产物。表是数学，包是演出，站点两样都要 */
+    say('构建游戏包（bun run build）…');
+    const built = await runTask(this.game.dir, 'build');
+    if (!built.ok) throw new Error(`vite build 失败：${built.issues.join('；') || built.output.split('\n').slice(-15).join('\n')}`);
+    const files = this.bundleFiles();
+    if (!files.length) throw new Error('dist/ 里没有 index.js——构建没产出游戏包');
+    const bundle = files.map((f) => ({ path: f.path, bytes: this.bundleFile(f.path)! }));
+    say(`游戏包 ${bundle.length} 个文件，${(bundle.reduce((n, f) => n + f.bytes.length, 0) / 1024).toFixed(0)} KB`);
+
+    /* 表：主进程没有游戏代码，赔率行从 worker 拿好带进去 */
+    const tables: UploadTable[] = [];
+    for (const a of arts) {
+      const mode = snap.spec.modes.find((m) => m.name === a.mode);
+      if (!mode) throw new Error(`产物里有 mode ${a.mode}，但当前清单里没有——重新 build_table`);
+      const { table, books } = readArtifactBytes(a);
+      tables.push({
+        mode: a.mode, bytes: table, contentHash: a.contentHash, rowCount: a.rowCount, betCostCenti: a.betCostCenti,
+        books, verdict: { computedRtpPpm: a.computedRtpPpm }, paytable: await this.game.paytable(mode.config),
+      });
+    }
+
+    const meta = this.meta();
+    const r = await uploadTables(snap.spec, tables, {
+      client: api, gameId: meta.gameId, bundle, publishModes: modes ?? undefined, onProgress: say,
+    });
+    if (meta.gameId !== r.game.id) {
+      writeFileSync(meta.path, `${JSON.stringify({ ...(meta.data ?? {}), gameId: r.game.id }, null, 2)}\n`);
+      say(`gameId ${r.game.id} 已写进 game.meta.json——之后发布都认它，改名只改 id/title`);
+    }
+    const out: PublishResult = {
+      gameId: r.game.id, slug: r.game.slug, verifiedRtpPpm: r.game.verifiedRtpPpm,
+      modes: r.tables.map((t) => t.mode), bundle: r.game.bundle?.hash ?? null,
+      playUrl: `${this.urls.site}/#/play/${r.game.slug}`,
+    };
+    say(`✅ 已发布 ${out.slug}：${out.playUrl}`);
+    return out;
   }
 
   publishRequests(): PublishRequest[] { return [...this.#publish.values()].sort((a, b) => b.createdAt - a.createdAt); }

package/studio/src/game-vite.ts

@@ -17,6 +17,8 @@ export interface GameServerOptions {
   /** 平台后端，/v1 反代到它。页面同源登录之后，发布用的就是浏览器里的这份身份 */
   backendUrl: string;
   engine: Engine;
+  /** 页面的身份连上时（GET /v1/me 200）收到它带的 cookie 头。node 侧记下来，MCP 发布用 */
+  onSession?: (cookieHeader: string) => void;
   /** stdio 模式下 stdout 是 MCP 协议，vite 的一切输出都得走 stderr */
   quiet?: boolean;
 }
@@ -46,6 +48,8 @@ function allowList(o: GameServerOptions): string[] {
     o.studioRoot, searchForWorkspaceRoot(o.studioRoot),
   ]);
   try { list.add(realpathSync(join(o.studioRoot, 'node_modules', 'gamekit777'))); } catch { /* 没装就算了 */ }
+  // 资源库的本机副本：页面用 /@fs 让 vite 现场编译预览
+  list.add(o.engine.assets.dir);
   return [...list];
 }
 
@@ -62,7 +66,7 @@ function stderrLogger(): Logger {
  *             创作者机器上的 127.0.0.1:随机端口不可能预先写进 TRUSTED_ORIGINS
  * 这么做不削弱 CSRF 防护：能打到这个反代的只有同源的 studio 页面本身。
  */
-function proxyRule(backendUrl: string): ProxyOptions {
+function proxyRule(backendUrl: string, onSession?: (cookieHeader: string) => void): ProxyOptions {
   const origin = new URL(backendUrl).origin;
   return {
     target: backendUrl,
@@ -72,6 +76,11 @@ function proxyRule(backendUrl: string): ProxyOptions {
         if (req.getHeader('origin')) req.setHeader('origin', origin);
         req.removeHeader('referer');
       });
+      /* 页面的身份连上了（GET /v1/me 200），把它带的 cookie 抄给 node 侧——MCP 发布用的就是这份 */
+      proxy.on('proxyRes', (res, req) => {
+        const cookie = req.headers.cookie;
+        if (onSession && cookie && res.statusCode === 200 && (req.url ?? '').split('?')[0] === '/v1/me') onSession(cookie);
+      });
     },
   };
 }
@@ -118,7 +127,7 @@ export async function startGameServer(o: GameServerOptions): Promise<ViteDevServ
       fs: { allow: allowList(o) },
       /* 同源代理到平台后端：cookie 才带得上。发布时用的就是这份身份 */
       proxy: {
-        '/v1': proxyRule(o.backendUrl),
+        '/v1': proxyRule(o.backendUrl, o.onSession),
         '/api': proxyRule(o.backendUrl),
       },
     },