@getnote/cli 1.5.7 → 1.5.10

package/README.md

@@ -44,6 +44,16 @@ allowBuilds:
 
 然后重新执行 `pnpm install`。也可以直接从 [Releases](https://github.com/iswalle/getnote-cli/releases) 下载对应平台的二进制文件并放入 `$PATH`。
 
+### 安装机制说明
+
+从 v1.5.10 起，npm 包**内置所有平台的二进制文件**（macOS/Linux/Windows，x64/ARM64），安装时**不再依赖 GitHub**。
+
+安装时由 postinstall 从 npm 包内的 prebuilt/ 目录复制当前平台二进制，不会访问 GitHub。
+
+**中国大陆用户**：只需配置 npm Registry 镜像（例如 npmmirror），即可获取完整 npm 包；不需要额外配置二进制下载地址。
+
+**包大小**：压缩后 ~22MB，解压后 ~55MB（包含 6 个平台二进制）。
+
 ---
 
 ## 使用要求
@@ -138,8 +148,9 @@ getnote search "产品设计" --kb vnrOAaGY
 
 **场景 3：管理知识库**
 ```bash
-# 列出所有知识库
+# 列出默认知识库；特殊类型使用 --scope
 getnote kbs
+getnote kbs --scope BOOKSPACE
 
 # 查看某个知识库的笔记
 getnote kb vnrOAaGY --all
@@ -280,7 +291,8 @@ getnote tag list <note_id>           查看笔记的所有标签
 ### 知识库
 
 ```
-getnote kbs                          列出所有可访问知识库（DEFAULT / BOOKSPACE / CUSTOMER / TEAMSPACE）
+getnote kbs                          列出 DEFAULT 知识库
+  --scope <scope>                    指定 DEFAULT / BOOKSPACE / CUSTOMER / TEAMSPACE
 
 getnote kb <topic_id>                知识库内的笔记
   --limit <n>
@@ -300,7 +312,9 @@ getnote kb directory-delete <topic_id> <id> --yes    删除空文件夹
 getnote kb blogger-follow <topic_id> <抖音链接>      订阅抖音博主
 getnote kb live-follow <topic_id> <url>              订阅得到直播课，直播结束后 AI 摘要自动入库
 
-getnote kbs-sub                                      获取我订阅的知识库列表
+getnote kbs [--scope DEFAULT]                        获取我创建/管理的知识库，默认只返回 DEFAULT
+getnote kbs-sub [--scope DEFAULT]                    获取我订阅的知识库，默认只返回 DEFAULT
+# --scope 可选：DEFAULT、CUSTOMER、BOOKSPACE、TEAMSPACE
 ```
 
 常用目录命令提供短别名，旧命令继续兼容：
@@ -392,6 +406,7 @@ $ getnote search "工作日志" --limit 7 -o json
 
 | 日期 | 版本 | 新能力 | 适合怎么用 |
 |------|------|--------|------------|
+| 2026-09-02 | **v1.5.8** | 1. `kbs` 与 `kbs-sub` 默认只返回 `DEFAULT` 知识库<br>2. 新增 `--scope`，可按 `CUSTOMER`、`BOOKSPACE`、`TEAMSPACE` 精确读取<br>3. 订阅列表不再混入自己创建的知识库 | 避免书籍库和自有库挤占订阅列表分页；需要特殊知识库时显式选择 scope |
 | 2026-08-19 | **v1.5.6** | 1. `getnote update` 默认升级 CLI、同步五个领域 Skill 并运行诊断<br>2. capabilities 2.2 提供机器可读的安装、更新、验证与平台托管边界<br>3. 移除失效的 `install.sh` 引导 | 用户只说“安装”或“更新”即可，AI Agent 无需让用户选择内部组件，并能按统一成功条件完成验收 |
 | 2026-08-19 | **v1.5.5** | 1. 一键安装自动识别本机 AI Agent，并按平台显示安装结果<br>2. 新增 GitHub Copilot、Gemini CLI、Windsurf、OpenCode 和 Cline 自动安装<br>3. OpenClaw（小龙虾）和 QClaw 仅在检测到时提供 ClawHub 确认入口<br>4. 保留 `SKILLS` 品牌开场，隐藏底层安装术语<br>5. `doctor` 按平台真实目录检查 Skill 状态 | 用户只需运行一次安装命令；AI 能根据结构化结果判断安装状态并给出明确修复动作 |
 | 2026-08-17 | **v1.5.3** | 1. `doctor` 新增稳定问题码、阻断级别、修复动作、平台 Skill 状态和在线/离线就绪语义<br>2. 诊断失败提供可靠退出码，JSON 保持单一、可解析<br>3. npm 与独立二进制采用匹配的升级路径，Release 下载增加 SHA-256 校验<br>4. WorkBuddy Skills 整套预检并支持失败回滚<br>5. 严格校验输出格式与多余参数 | 让技术用户和 AI 都能准确判断环境是否真正可用，并根据结构化结果完成修复；同时避免版本分裂、半安装和未校验更新包 |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getnote/cli",
-  "version": "1.5.7",
+  "version": "1.5.10",
   "description": "CLI tool for 得到大脑（Get笔记） — manage notes and knowledge bases from the terminal",
   "keywords": [
     "getnote",
@@ -11,21 +11,24 @@
   "homepage": "https://github.com/iswalle/getnote-cli",
   "repository": {
     "type": "git",
-    "url": "https://github.com/iswalle/getnote-cli.git"
+    "url": "git+https://github.com/iswalle/getnote-cli.git"
   },
   "license": "MIT",
   "bin": {
-    "getnote": "./bin/getnote.js",
-    "gnote": "./bin/getnote.js"
+    "getnote": "bin/getnote.js",
+    "gnote": "bin/getnote.js"
   },
   "scripts": {
     "postinstall": "node scripts/postinstall.js",
-    "test": "node --test scripts/postinstall.test.js"
+    "test": "node --test scripts/postinstall.test.js",
+    "prepare-package": "bash scripts/prepare-package.sh",
+    "prepack": "bash scripts/prepare-package.sh"
   },
   "files": [
     "bin/getnote.js",
     "scripts/",
     "skills/",
+    "prebuilt/",
     "README.md"
   ]
 }

package/scripts/postinstall.js

@@ -1,160 +1,60 @@
 #!/usr/bin/env node
-// postinstall.js — downloads the getnote binary for the current platform.
-
+// Install the platform binary bundled in this npm package.
+// Installation is local-only; no network request is made here.
 'use strict';
 
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-const https = require('https');
-const crypto = require('crypto');
-const { spawnSync } = require('child_process');
-
-const pkg = require('../package.json');
-const VERSION = pkg.version;
-const REPO = 'iswalle/getnote-cli';
-
-function getPlatform() {
-  const platform = os.platform();
-  const arch = os.arch();
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { spawnSync } = require('node:child_process');
+const { version } = require('../package.json');
 
-  const platformMap = { darwin: 'darwin', linux: 'linux', win32: 'windows' };
-  const archMap = { x64: 'amd64', arm64: 'arm64' };
+const platformNames = { darwin: 'darwin', linux: 'linux', win32: 'windows' };
+const archNames = { x64: 'amd64', arm64: 'arm64' };
 
-  const p = platformMap[platform];
-  const a = archMap[arch];
-  if (!p || !a) throw new Error(`Unsupported platform: ${platform}/${arch}`);
-  return { platform: p, arch: a };
+function getPlatform(platform = os.platform(), arch = os.arch()) {
+  const name = platformNames[platform];
+  const cpu = archNames[arch];
+  if (!name || !cpu) throw new Error(`Unsupported platform: ${platform}/${arch}`);
+  return { platform: name, arch: cpu };
 }
 
 function getBinaryName(platform) {
   return platform.platform === 'windows' ? 'getnote.exe' : 'getnote';
 }
 
-function getDownloadURL(platform) {
-  const ext = platform.platform === 'windows' ? '.zip' : '.tar.gz';
-  const asset = `getnote-cli_${VERSION}_${platform.platform}_${platform.arch}${ext}`;
-  return `https://github.com/${REPO}/releases/download/v${VERSION}/${asset}`;
-}
-
-function getWindowsExtractArgs(archivePath, destinationPath) {
-  return [
-    '-NoProfile',
-    '-Command',
-    '& { Expand-Archive -LiteralPath $args[0] -DestinationPath $args[1] -Force }',
-    archivePath,
-    destinationPath,
-  ];
+function getPrebuiltPath(platform) {
+  return path.join(__dirname, '..', 'prebuilt', `${platform.platform}-${platform.arch}`, getBinaryName(platform));
 }
 
-async function installArchive({
-  platform,
-  binDir,
-  binaryName,
-  binaryPath,
-  url,
-  tmpFile,
-  downloadFn = download,
-  verifyChecksumFn = verifyChecksum,
-  runFn = run,
-  chmodFn = fs.chmodSync,
-  unlinkFn = fs.unlinkSync,
-}) {
-  try {
-    await downloadFn(url, tmpFile);
-    await verifyChecksumFn(url, path.basename(url), tmpFile);
-    if (platform.platform === 'windows') {
-      runFn('powershell', getWindowsExtractArgs(tmpFile, binDir));
-    } else {
-      runFn('tar', ['-xzf', tmpFile, '-C', binDir, binaryName]);
-    }
-
-    chmodFn(binaryPath, 0o755);
-    console.log(`getnote installed at ${binaryPath}`);
-  } finally {
-    try { unlinkFn(tmpFile); } catch (_) {}
+function installFromPrebuilt(platform, binDir) {
+  const source = getPrebuiltPath(platform);
+  const destination = path.join(binDir, getBinaryName(platform));
+  if (!fs.existsSync(source)) {
+    throw new Error(`Bundled binary is missing: ${path.relative(path.join(__dirname, '..'), source)}. Install a newer @getnote/cli package.`);
   }
+  fs.mkdirSync(binDir, { recursive: true });
+  fs.copyFileSync(source, destination);
+  if (platform.platform !== 'windows') fs.chmodSync(destination, 0o755);
+  console.log(`getnote v${version} installed from the npm package`);
 }
 
-async function main() {
+function main() {
   const platform = getPlatform();
   const binDir = path.join(__dirname, '..', 'bin');
-  const binaryName = getBinaryName(platform);
-  const binaryPath = path.join(binDir, binaryName);
-  const url = getDownloadURL(platform);
-  const tmpFile = path.join(os.tmpdir(), `getnote-download-${Date.now()}`);
-
-  // Skip download if binary already matches current version
+  const binaryPath = path.join(binDir, getBinaryName(platform));
   if (fs.existsSync(binaryPath)) {
-    try {
-      const result = spawnSync(binaryPath, ['version'], { encoding: 'utf8' });
-      const fallback = result.status === 0 ? result : spawnSync(binaryPath, ['--version'], { encoding: 'utf8' });
-      const out = (fallback.stdout || '').trim();
-      if (out.includes(VERSION)) {
-        console.log(`getnote v${VERSION} already installed, skipping download.`);
-        return;
-      }
-    } catch (_) { /* binary exists but can't run (wrong arch etc.), re-download */ }
-  }
-
-  console.log(`Downloading getnote v${VERSION} for ${platform.platform}/${platform.arch}...`);
-  console.log(`URL: ${url}`);
-
-  fs.mkdirSync(binDir, { recursive: true });
-
-  await installArchive({ platform, binDir, binaryName, binaryPath, url, tmpFile });
-}
-
-function run(command, args) {
-  const result = spawnSync(command, args, { stdio: 'inherit' });
-  if (result.error) throw result.error;
-  if (result.status !== 0) throw new Error(`${command} exited with status ${result.status}`);
-}
-
-function download(url, destination, redirects = 0) {
-  if (redirects > 5) return Promise.reject(new Error('Too many redirects'));
-  return new Promise((resolve, reject) => {
-    const request = https.get(url, { headers: { 'User-Agent': '@getnote/cli installer' } }, response => {
-      if (response.statusCode >= 300 && response.statusCode < 400 && response.headers.location) {
-        response.resume();
-        return resolve(download(new URL(response.headers.location, url).toString(), destination, redirects + 1));
-      }
-      if (response.statusCode !== 200) {
-        response.resume();
-        return reject(new Error(`HTTP ${response.statusCode}: ${url}`));
-      }
-      const output = fs.createWriteStream(destination, { mode: 0o600 });
-      response.pipe(output);
-      output.on('finish', () => output.close(resolve));
-      output.on('error', reject);
-    });
-    request.on('error', reject);
-  });
-}
-
-async function verifyChecksum(assetURL, assetName, archivePath) {
-  const checksumPath = `${archivePath}.checksums`;
-  try {
-    await download(new URL('checksums.txt', assetURL).toString(), checksumPath);
-    const line = fs.readFileSync(checksumPath, 'utf8').split(/\r?\n/).find(value => {
-      const fields = value.trim().split(/\s+/);
-      return fields.length === 2 && fields[1].replace(/^\*/, '') === assetName;
-    });
-    if (!line) throw new Error(`Checksum for ${assetName} is missing`);
-    const expected = line.trim().split(/\s+/)[0].toLowerCase();
-    if (!/^[a-f0-9]{64}$/.test(expected)) throw new Error(`Checksum for ${assetName} is invalid`);
-    const actual = crypto.createHash('sha256').update(fs.readFileSync(archivePath)).digest('hex');
-    if (actual !== expected) throw new Error(`Checksum mismatch for ${assetName}`);
-  } finally {
-    try { fs.unlinkSync(checksumPath); } catch (_) {}
+    const result = spawnSync(binaryPath, ['version'], { encoding: 'utf8' });
+    if (result.status === 0 && (result.stdout || '').includes(version)) return;
   }
+  installFromPrebuilt(platform, binDir);
 }
 
 if (require.main === module) {
-  main().catch(err => {
-    console.error('Failed to install getnote:', err.message);
+  try { main(); } catch (error) {
+    console.error(`Failed to install getnote: ${error.message}`);
     process.exitCode = 1;
-  });
+  }
 }
 
-module.exports = { getWindowsExtractArgs, installArchive };
+module.exports = { getPlatform, getBinaryName, getPrebuiltPath, installFromPrebuilt };

package/scripts/postinstall.test.js

@@ -1,37 +1,15 @@
 'use strict';
-
 const assert = require('node:assert/strict');
 const test = require('node:test');
+const { getPlatform, getBinaryName, getPrebuiltPath } = require('./postinstall');
 
-const { getWindowsExtractArgs, installArchive } = require('./postinstall');
-
-test('Windows extraction invokes Expand-Archive inside a script block', () => {
-  assert.deepEqual(getWindowsExtractArgs('C:\\Temp\\getnote.zip', 'C:\\Program Files\\getnote'), [
-    '-NoProfile',
-    '-Command',
-    '& { Expand-Archive -LiteralPath $args[0] -DestinationPath $args[1] -Force }',
-    'C:\\Temp\\getnote.zip',
-    'C:\\Program Files\\getnote',
-  ]);
+test('maps Windows architectures to bundled executable paths', () => {
+  assert.deepEqual(getPlatform('win32', 'x64'), { platform: 'windows', arch: 'amd64' });
+  assert.deepEqual(getPlatform('win32', 'arm64'), { platform: 'windows', arch: 'arm64' });
+  assert.equal(getBinaryName({ platform: 'windows' }), 'getnote.exe');
+  assert.match(getPrebuiltPath({ platform: 'windows', arch: 'amd64' }), /prebuilt[\\/]windows-amd64[\\/]getnote\.exe$/);
 });
 
-test('temporary archive is removed when installation fails', async () => {
-  const removed = [];
-  await assert.rejects(
-    installArchive({
-      platform: { platform: 'windows', arch: 'amd64' },
-      binDir: 'C:\\getnote\\bin',
-      binaryName: 'getnote.exe',
-      binaryPath: 'C:\\getnote\\bin\\getnote.exe',
-      url: 'https://example.invalid/getnote.zip',
-      tmpFile: 'C:\\Temp\\getnote-download.zip',
-      downloadFn: async () => { throw new Error('download failed'); },
-      verifyChecksumFn: async () => {},
-      runFn: () => {},
-      chmodFn: () => {},
-      unlinkFn: file => removed.push(file),
-    }),
-    /download failed/,
-  );
-  assert.deepEqual(removed, ['C:\\Temp\\getnote-download.zip']);
+test('uses a package-local binary path', () => {
+  assert.doesNotMatch(getPrebuiltPath({ platform: 'windows', arch: 'amd64' }), /^https?:/);
 });

package/scripts/prepare-package.sh

@@ -0,0 +1,51 @@
+#!/usr/bin/env bash
+# Build every supported binary into the npm package's prebuilt/ directory.
+# Uses npm naming convention (x64 instead of amd64) for consistency.
+set -euo pipefail
+
+VERSION="${1:-$(node -p "require('./package.json').version")}"
+VERSION="${VERSION% }"
+ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+cd "$ROOT"
+
+echo "==> Preparing package for version ${VERSION}"
+echo "==> Cleaning prebuilt directory..."
+rm -rf prebuilt
+
+echo "==> Creating platform directories..."
+mkdir -p prebuilt/darwin-amd64 prebuilt/darwin-arm64 prebuilt/linux-amd64 prebuilt/linux-arm64 prebuilt/windows-amd64 prebuilt/windows-arm64
+
+LDFLAGS="-s -w -X github.com/iswalle/getnote-cli/internal/version.Version=${VERSION}"
+
+echo "==> Building binaries..."
+echo "  - macOS x64..."
+GOOS=darwin GOARCH=amd64 go build -ldflags "$LDFLAGS" -o prebuilt/darwin-amd64/getnote .
+
+echo "  - macOS ARM64..."
+GOOS=darwin GOARCH=arm64 go build -ldflags "$LDFLAGS" -o prebuilt/darwin-arm64/getnote .
+
+echo "  - Linux x64..."
+GOOS=linux GOARCH=amd64 go build -ldflags "$LDFLAGS" -o prebuilt/linux-amd64/getnote .
+
+echo "  - Linux ARM64..."
+GOOS=linux GOARCH=arm64 go build -ldflags "$LDFLAGS" -o prebuilt/linux-arm64/getnote .
+
+echo "  - Windows x64..."
+GOOS=windows GOARCH=amd64 go build -ldflags "$LDFLAGS" -o prebuilt/windows-amd64/getnote.exe .
+
+echo "  - Windows ARM64..."
+GOOS=windows GOARCH=arm64 go build -ldflags "$LDFLAGS" -o prebuilt/windows-arm64/getnote.exe .
+
+echo "==> Verifying prebuilt binaries..."
+find prebuilt -type f -exec ls -lh {} \; | awk '{print $5, $9}'
+
+TOTAL_SIZE=$(du -sh prebuilt | awk '{print $1}')
+echo "==> Total prebuilt size: ${TOTAL_SIZE}"
+
+echo "==> Package preparation complete!"
+echo ""
+echo "Next steps:"
+echo "  1. Test with: npm pack --dry-run"
+echo "  2. Verify with: tar -tzf getnote-cli-${VERSION}.tgz | grep prebuilt"
+echo "  3. Test install: npm install -g ./getnote-cli-${VERSION}.tgz"
+echo "  4. Publish with: npm publish"

package/scripts/test-local-install.js

@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+// Test local installation without network access
+
+const { execSync } = require('child_process');
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+
+const VERSION = require('../package.json').version;
+const tmpDir = path.join(os.tmpdir(), `getnote-test-${Date.now()}`);
+
+console.log('==> Testing local installation...');
+console.log(`Version: ${VERSION}`);
+console.log(`Test directory: ${tmpDir}`);
+console.log('');
+
+// Create test environment
+fs.mkdirSync(tmpDir, { recursive: true });
+
+try {
+  // Pack the package
+  console.log('1. Creating package tarball...');
+  const tarball = path.resolve(`getnote-cli-${VERSION}.tgz`);
+  
+  if (!fs.existsSync(tarball)) {
+    console.error(`✗ Tarball not found: ${tarball}`);
+    console.error('  Run: npm pack');
+    process.exit(1);
+  }
+  
+  console.log(`   ✓ Found: ${tarball}`);
+  
+  // Install globally in test directory
+  console.log('');
+  console.log('2. Installing package...');
+  
+  const npmPrefix = path.join(tmpDir, 'npm-global');
+  fs.mkdirSync(npmPrefix, { recursive: true });
+  
+  execSync(`npm install --prefix "${npmPrefix}" "${tarball}"`, {
+    stdio: 'inherit',
+    env: { 
+      ...process.env,
+      npm_config_offline: 'true',  // Force offline mode
+      npm_config_prefer_offline: 'true'
+    }
+  });
+  
+  console.log('   ✓ Package installed');
+  
+  // Verify binary exists
+  console.log('');
+  console.log('3. Verifying installation...');
+  
+  const platform = os.platform();
+  const binaryName = platform === 'win32' ? 'getnote.exe' : 'getnote';
+  const binaryPath = path.join(
+    npmPrefix,
+    'node_modules',
+    '@getnote',
+    'cli',
+    'bin',
+    binaryName
+  );
+  
+  if (!fs.existsSync(binaryPath)) {
+    console.error(`   ✗ Binary not found: ${binaryPath}`);
+    process.exit(1);
+  }
+  
+  console.log(`   ✓ Binary exists: ${binaryPath}`);
+  
+  // Test binary execution
+  const result = execSync(`"${binaryPath}" --version`, { encoding: 'utf8' });
+  console.log(`   ✓ Binary runs: ${result.trim()}`);
+  
+  if (!result.includes(VERSION)) {
+    console.error(`   ✗ Version mismatch: expected ${VERSION}, got ${result.trim()}`);
+    process.exit(1);
+  }
+  
+  console.log('');
+  console.log('==> ✓ All tests passed!');
+  console.log('');
+  console.log('Installation succeeded without network access.');
+  console.log('The package includes all platform binaries and does not depend on GitHub.');
+  
+} catch (err) {
+  console.error('');
+  console.error('==> ✗ Test failed:');
+  console.error(err.message);
+  process.exit(1);
+} finally {
+  // Cleanup
+  console.log('');
+  console.log('Cleaning up...');
+  fs.rmSync(tmpDir, { recursive: true, force: true });
+  console.log('Done.');
+}

package/skills/getnote-kb/SKILL.md

@@ -13,8 +13,8 @@ description: 查看和管理得到大脑的默认知识库、书籍、客户档
 
 | 意图 | 命令入口 |
 |---|---|
-| 自有/可管理知识库 | `getnote kbs` |
-| 我订阅的知识库 | `getnote kbs-sub` |
+| 自有/可管理知识库 | `getnote kbs --scope <scope>` |
+| 我订阅的知识库 | `getnote kbs-sub --scope <scope>` |
 | 知识库笔记 | `getnote kb <topic_id>` |
 | 新建个人知识库 | `getnote kb create` |
 | 加入笔记 | `getnote kb add` |
@@ -35,8 +35,8 @@ description: 查看和管理得到大脑的默认知识库、书籍、客户档
 
 ## 选择知识库和权限
 
-1. 用户问“我管理的/我的知识库”时执行 `getnote kbs -o json`；问“所有能访问的知识库”时还要执行 `getnote kbs-sub -o json`，分别标明自有/可管理与已订阅，按各自 `has_more` 翻完页，不能混成同一种权限。
-2. `getnote kbs` 必须保留接口实际返回的全部 Scope，例如 `DEFAULT`、`BOOKSPACE`、`CUSTOMER`、`TEAMSPACE`，不能只返回默认知识库，也不能虚构未返回的 Scope。
+1. `getnote kbs` 和 `getnote kbs-sub` 默认只查询 `DEFAULT`。用户明确要书籍、客户档案或团队知识库时，分别传 `--scope BOOKSPACE`、`--scope CUSTOMER`、`--scope TEAMSPACE`；不能把多个 Scope 混在同一分页结果里。
+2. 用户问“我管理的/我的知识库”时执行 `getnote kbs --scope <scope> -o json`；问“我订阅的知识库”时执行 `getnote kbs-sub --scope <scope> -o json`。订阅列表只包含他人创建且当前账号真实订阅的知识库，分别按 `has_more` 翻完页。
 3. 按名称和 `scope` 匹配；同名或用户意图不明确时让用户选择，不猜 `topic_id`。目标名称既可能是知识库也可能是文件夹时，先问清楚。
 4. 订阅知识库通常只读。若列表结果明确返回角色或可写标记，按真实字段判断；当前 CLI 契约未保证权限字段时，不得声称已经预检为 owner/admin，可在用户明确授权后尝试写入，并忠实处理权限失败。
 5. 普通成员写入失败时明确说明权限不足，不尝试绕过。当前不代替用户新建团队知识库。
@@ -59,8 +59,8 @@ description: 查看和管理得到大脑的默认知识库、书籍、客户档
 
 | 命令 | 成功结果必须包含 | 回复规则 |
 |---|---|---|
-| `getnote kbs -o json` | `success=true`、`data.topics[].topic_id/name/scope/stats`、`has_more/total` | 展示全部真实 Scope，不只展示默认知识库。 |
-| `getnote kbs-sub -o json` | `success=true`、`data.topics[].topic_id/name`、`has_more/total` | 订阅知识库通常只读，不能把它当作可写知识库。 |
+| `getnote kbs --scope <scope> -o json` | `success=true`、`data.topics[].topic_id/name/scope/stats`、`has_more/total` | 默认 scope 为 `DEFAULT`；特殊类型必须显式传 scope。 |
+| `getnote kbs-sub --scope <scope> -o json` | `success=true`、`data.topics[].topic_id/name/scope`、`has_more/total` | 只返回该 scope 下真实订阅的他人知识库，通常只读。 |
 | `getnote kb <topic_id> -o json` | `success=true`、`data.notes[].note_id/title/note_type`、`has_more/total` | 返回知识库内真实笔记；需要链接时再用 `note` 读取详情。 |
 | `getnote kb create <name> -o json` | `success=true`、`data?` | 仅创建个人知识库；不得在没有返回 ID 时虚构 `topic_id`。 |
 | `getnote kb add <topic_id> <note_id…> -o json` | `success=true`、`data?` | 最多 20 条；需要确认最终目录归属时重新读取目录。 |

package/skills/getnote-search/SKILL.md

@@ -16,7 +16,7 @@ description: 在得到大脑的全部笔记或指定知识库中按自然语言
 ## 执行步骤
 
 1. 用户没有指定知识库时，直接执行 `getnote search <query> --limit <1-10> -o json`。默认上限是 10，不能自行放大。
-2. 用户指定知识库名称时，先执行 `getnote kbs -o json`，用返回的真实 `topic_id` 和 `scope` 匹配；同名、多个团队知识库或意图不明确时必须让用户选择。
+2. 用户指定知识库名称时，先按其类型执行 `getnote kbs --scope <scope> -o json`；默认查 `DEFAULT`，书籍、客户档案和团队知识库分别使用 `BOOKSPACE`、`CUSTOMER`、`TEAMSPACE`。用返回的真实 `topic_id` 和 `scope` 匹配；同名或意图不明确时必须让用户选择。
 3. 已确认知识库后执行 `getnote search <query> --kb <topic_id> --limit <1-10> -o json`。
 4. 只从返回值读取标题、摘要、字符串 `note_id` 和真实 `note_url`。没有 `note_id/note_url` 的非笔记结果可以展示内容，但不能伪造“打开笔记”链接。
 5. 同一篇笔记可能因命中多个片段出现多次。面向用户列“几篇笔记”时必须按字符串 `note_id` 去重；若去重后不足用户要求的数量，可在上限 10 内增大 `--limit` 重搜，仍不足时如实返回实际数量。