Feat/anonymous

README.md

@@ -4,7 +4,7 @@ Official AI Agent Skills for developing and deploying projects on [EdgeOne Maker
 
 ## Installation
 
-### Option A — `npx skills` (Claude Code / Cursor / Codex / CodeBuddy CLI 等)
+### Option A — `npx skills` (Claude Code / Cursor / Codex / CodeBuddy CLI etc.)
 
 ```bash
 npx skills add TencentEdgeOne/edgeone-makers-tools

_meta.json

@@ -2,7 +2,7 @@
   "ownerId": "442102",
   "publishedAt": 1781766512723,
   "slug": "edgeone-makers-tools",
-  "version": "2.0.0",
+  "version": "2.3.1",
   "files": [
     "skills/edgeone-makers-tools/SKILL.md",
     "skills/edgeone-makers-tools/references/makers-agents/SKILL.md",
@@ -33,6 +33,7 @@
     "skills/edgeone-makers-tools/references/makers-cloud-functions/references/python-functions.md",
     "skills/edgeone-makers-tools/references/makers-cloud-functions/references/troubleshooting.md",
     "skills/edgeone-makers-tools/references/makers-deploy/SKILL.md",
+    "skills/edgeone-makers-tools/references/makers-deploy/references/anonymous-deploy.md",
     "skills/edgeone-makers-tools/references/makers-deploy/references/command-reference.md",
     "skills/edgeone-makers-tools/references/makers-edge-functions/SKILL.md",
     "skills/edgeone-makers-tools/references/makers-env-adaption/SKILL.md",

codex/makers-cli.md

@@ -5,7 +5,7 @@ description: >-
   Use when running edgeone CLI commands for dev, build, deploy, env management.
 metadata:
   author: edgeone
-  version: "1.0.0"
+  version: "1.2.1"
 ---
 
 # EdgeOne Makers CLI Reference
@@ -28,6 +28,9 @@ Verify: `edgeone -v`
 | `edgeone makers deploy -n <name>` | Deploy as a new project |
 | `edgeone makers deploy -t <token>` | Deploy with API token (CI/headless) |
 | `edgeone makers deploy -e preview` | Deploy to preview environment |
+| `edgeone makers deploy --anonymous --json` | Deploy without login; claim later (CLI ≥ 1.6.29) |
+| `edgeone makers deploy --anonymous --site china\|global --json` | Anonymous deploy to a specific site (omit `--site` to auto-detect by IP) |
+| `edgeone makers claim --sid <token>` | Claim an anonymously-deployed project (requires login) |
 | `edgeone makers link` | Link local project to remote EdgeOne project |
 | `edgeone makers env pull` | Pull remote env vars to local `.env` |
 | `edgeone makers env set <KEY> <VALUE>` | Set a remote environment variable |
@@ -36,8 +39,11 @@ Verify: `edgeone -v`
 | `edgeone login` | Login (browser-based) |
 | `edgeone login --site china` | Login to China site |
 | `edgeone login --site global` | Login to Global site |
+| `edgeone login --claim --local --json` | Background listener: prints the login+claim link for an anonymous deploy, then auto-links the claimed project |
 | `edgeone whoami` | Check current login status |
 
+> Anonymous deploy and `claim` require CLI `>= 1.6.29` (the general CLI floor is `1.6.0`). The claim parameter is `--sid` (the anonymous token); `-t` is the account API token — they are different credentials. Tell the user the link expires in 60 minutes; never show the raw `expiresAt`. The claim link you present comes from `edgeone login --claim` (`claimLoginUrl`), not the bare `claimUrl` in the deploy JSON. Details: [makers-deploy/references/anonymous-deploy.md](../makers-deploy/references/anonymous-deploy.md).
+
 ## Environment Variable
 
 Before any `edgeone` command, set:

codex/makers-env-adaption.md

@@ -17,7 +17,7 @@ validate:
     message: "Use 127.0.0.1, not localhost — in the sandbox localhost resolves to ::1 and yields false 404s."
 metadata:
   author: edgeone
-  version: "1.1.1"
+  version: "1.4.2"
 ---
 
 # Runtime Environment Adaptation Guide
@@ -295,6 +295,7 @@ If the project named by `--name` does not exist remotely, the `link` command cre
 | Framework/package | Minimum version | Reason |
 |---------|---------|------|
 | EdgeOne CLI | >= 1.6.7 | Non-interactive fixes, whoami fail-fast, --json support |
+| EdgeOne CLI (anonymous deploy / `claim` only) | >= 1.6.29 | `--anonymous` and `claim` do not exist below this |
 | Next.js | 16.x | The framework adapter tracks new versions |
 | @edgeone/pages-blob | >= 0.0.14 | Older versions have known bugs |
 
@@ -307,3 +308,24 @@ Use `create-next-app@latest` rather than manually pinning an older version.
 WorkBuddy's right-side preview panel does NOT render `window.alert()` / `window.confirm()` / `window.prompt()`. The call returns immediately without user interaction, so any handler gated on `if (confirm("Delete?"))` silently no-ops (a delete button appears to do nothing). The same page works fine in the user's real Chrome / Safari.
 
 **Rule**: for any confirmation, prompt, or notification in the page, use an **in-page custom modal** (a `<div>` overlay with buttons wired via JS). Do NOT rely on the browser's built-in `alert` / `confirm` / `prompt` — the code looks correct in code review, works when the user opens the deployed URL in their own browser, and is silently broken in the WorkBuddy preview during dev/verification.
+
+### 14. Never hand the user a command to run
+
+The user has **no terminal** in the WorkBuddy sandbox. Any command you print as an instruction is dead text — they cannot execute it, and a non-technical user cannot read it either.
+
+| Situation | Do this | Not this |
+|---|---|---|
+| Anonymous project needs claiming | Run `edgeone login --claim --local --json` in the background and present its `claimLoginUrl` as a clickable link; the listener auto-links the project when the user finishes claiming | ❌ Printing `edgeone makers claim --sid <token>`, or presenting the bare `claimUrl` from the deploy JSON (the CLI never learns the login state) |
+| The user needs to log in | Explain, then run `edgeone login --site <china\|global> --local` yourself | ❌ "Run `edgeone login` in your terminal" |
+| Something needs installing | Run it yourself in Bash | ❌ "Please run `npm install -g edgeone`" |
+
+You are the one with shell access — use it. Only ask the user to type something when it genuinely cannot be automated (e.g. completing a login in the browser window you opened), and say plainly what you need from them.
+
+### 14.1 Never let the key result get folded into a process message
+
+WorkBuddy can collapse content emitted in the same message as a running or just-finished Bash command into a collapsible process entry. When the user asks to deploy, the deploy URL and claim link must never land there — if they do, the user sees nothing.
+
+| Situation | Do this | Not this |
+|---|---|---|
+| A deploy just finished | Wait for the Bash call to fully return, then send the result (URL + claim link) **as its own message** | ❌ Emitting the result in the same message where the deploy ran, or attaching it to the command's stdout |
+| Running a long command | Report progress only in later messages, after the tool call returns | ❌ Writing "here is your URL" inside the same turn as the command output |

cursor/rules/makers-cli.mdc

@@ -5,7 +5,7 @@ description: >-
   Use when running edgeone CLI commands for dev, build, deploy, env management.
 metadata:
   author: edgeone
-  version: "1.0.0"
+  version: "1.2.1"
 ---
 
 # EdgeOne Makers CLI Reference
@@ -28,6 +28,9 @@ Verify: `edgeone -v`
 | `edgeone makers deploy -n <name>` | Deploy as a new project |
 | `edgeone makers deploy -t <token>` | Deploy with API token (CI/headless) |
 | `edgeone makers deploy -e preview` | Deploy to preview environment |
+| `edgeone makers deploy --anonymous --json` | Deploy without login; claim later (CLI ≥ 1.6.29) |
+| `edgeone makers deploy --anonymous --site china\|global --json` | Anonymous deploy to a specific site (omit `--site` to auto-detect by IP) |
+| `edgeone makers claim --sid <token>` | Claim an anonymously-deployed project (requires login) |
 | `edgeone makers link` | Link local project to remote EdgeOne project |
 | `edgeone makers env pull` | Pull remote env vars to local `.env` |
 | `edgeone makers env set <KEY> <VALUE>` | Set a remote environment variable |
@@ -36,8 +39,11 @@ Verify: `edgeone -v`
 | `edgeone login` | Login (browser-based) |
 | `edgeone login --site china` | Login to China site |
 | `edgeone login --site global` | Login to Global site |
+| `edgeone login --claim --local --json` | Background listener: prints the login+claim link for an anonymous deploy, then auto-links the claimed project |
 | `edgeone whoami` | Check current login status |
 
+> Anonymous deploy and `claim` require CLI `>= 1.6.29` (the general CLI floor is `1.6.0`). The claim parameter is `--sid` (the anonymous token); `-t` is the account API token — they are different credentials. Tell the user the link expires in 60 minutes; never show the raw `expiresAt`. The claim link you present comes from `edgeone login --claim` (`claimLoginUrl`), not the bare `claimUrl` in the deploy JSON. Details: [makers-deploy/references/anonymous-deploy.md](../makers-deploy/references/anonymous-deploy.md).
+
 ## Environment Variable
 
 Before any `edgeone` command, set: