@kscs-inc/cli 0.3.6 → 0.4.1

package/README.md

@@ -5,15 +5,15 @@
 ## 安装
 
 ```sh
-npx @kscs-inc/cli@0.3.6 install
+npx @kscs-inc/cli@0.4.1 install
 # 国内镜像（同步可能延迟）
-npx --registry=https://registry.npmmirror.com @kscs-inc/cli@0.3.6 install
+npx --registry=https://registry.npmmirror.com @kscs-inc/cli@0.4.1 install
 # 或全局安装入口后显式安装客户端
-npm install -g @kscs-inc/cli@0.3.6
+npm install -g @kscs-inc/cli@0.4.1
 kscs install
 ```
 
-旧kscs命令可能优先于npm入口，首次推荐npx；使用官网指引核对实际路径，不使用sudo覆盖。安装默认个人模式，团队用 --mode team --config /既有私有目录/team.json；不得把秘密写在命令中。默认按当前模式、系统和架构选择包：正式优先，没有正式目标时使用已签名映射中的试用目标并明确提示；试用不自动升级。可用 --channel stable 或 --channel trial 严格指定通道，缺目标时报错；网络、签名或摘要错误不会切换通道。
+旧kscs命令可能优先于npm入口，首次推荐npx；使用官网指引核对实际路径，不使用sudo覆盖。安装默认个人模式，团队用 --mode team --config /既有私有目录/team.json；不得把秘密写在命令中。默认按当前模式、系统和架构选择包：只安装正式目标，入口与客户端版本一致。可用 --channel stable 显式选择正式通道；缺目标时报错，不回退到试用。网络、签名或摘要错误不会切换通道。
 
 ## 验证与使用
 
@@ -23,10 +23,10 @@ kscs auth login
 kscs products list
 ```
 
-安装成功不代表已登录或有业务权限。终端未识别命令时新开终端，或使用回执给出的绝对入口。
+安装成功不代表已登录或有业务权限。安装后可直接使用回执给出的带引号绝对入口，无需重开终端；要在当前终端使用kscs短命令，复制执行回执中的激活语句。命令登记不等于当前终端PATH已经刷新。
 
 ## 安全与更新
 
-入口版本0.3.6固定对应发行目标，验证Ed25519签名及SHA256后调用同一安装事务。客户端自带Node，后续使用kscs update check/status/apply；npm仅更新入口。npm uninstall -g @kscs-inc/cli只删除npm入口，不删除实际客户端、配置和Skill。业务请求直接到公司CLI服务，不经过npm或镜像。
+入口版本0.4.1固定对应发行目标，验证Ed25519签名及SHA256后调用同一安装事务。客户端自带Node，后续使用kscs update check/status/apply；npm仅更新入口。npm uninstall -g @kscs-inc/cli只删除npm入口，不删除实际客户端、配置和Skill。业务请求直接到公司CLI服务，不经过npm或镜像。
 
 如安装中断，保留原客户端与身份，按中文错误提示恢复；不关闭TLS或签名校验。镜像不可用时从npm官方源重试或使用官网安装方式。内联第三方代码许可见THIRD-PARTY-NOTICES.txt。

package/bin/kscs.mjs

@@ -32,9 +32,9 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// node_modules/.pnpm/pend@1.2.0/node_modules/pend/index.js
+// ../../../../../旷世传声/code/kscs-cli/code/node_modules/.pnpm/pend@1.2.0/node_modules/pend/index.js
 var require_pend = __commonJS({
-  "node_modules/.pnpm/pend@1.2.0/node_modules/pend/index.js"(exports, module) {
+  "../../../../../\u65F7\u4E16\u4F20\u58F0/code/kscs-cli/code/node_modules/.pnpm/pend@1.2.0/node_modules/pend/index.js"(exports, module) {
     module.exports = Pend;
     function Pend() {
       this.pending = 0;
@@ -87,9 +87,9 @@ var require_pend = __commonJS({
   }
 });
 
-// node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/fd-slicer.js
+// ../../../../../旷世传声/code/kscs-cli/code/node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/fd-slicer.js
 var require_fd_slicer = __commonJS({
-  "node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/fd-slicer.js"(exports) {
+  "../../../../../\u65F7\u4E16\u4F20\u58F0/code/kscs-cli/code/node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/fd-slicer.js"(exports) {
     var fs = __require("fs");
     var util = __require("util");
     var stream = __require("stream");
@@ -244,9 +244,9 @@ var require_fd_slicer = __commonJS({
   }
 });
 
-// node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/crc32.js
+// ../../../../../旷世传声/code/kscs-cli/code/node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/crc32.js
 var require_crc32 = __commonJS({
-  "node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/crc32.js"(exports, module) {
+  "../../../../../\u65F7\u4E16\u4F20\u58F0/code/kscs-cli/code/node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/crc32.js"(exports, module) {
     var CRC_TABLE = new Int32Array([
       0,
       1996959894,
@@ -516,9 +516,9 @@ var require_crc32 = __commonJS({
   }
 });
 
-// node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/index.js
+// ../../../../../旷世传声/code/kscs-cli/code/node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/index.js
 var require_yauzl = __commonJS({
-  "node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/index.js"(exports) {
+  "../../../../../\u65F7\u4E16\u4F20\u58F0/code/kscs-cli/code/node_modules/.pnpm/yauzl@3.4.0/node_modules/yauzl/index.js"(exports) {
     var fs = __require("fs");
     var zlib = __require("zlib");
     var fd_slicer = require_fd_slicer();
@@ -1379,6 +1379,115 @@ var require_yauzl = __commonJS({
 import { dirname as dirname2, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
 
+// cli/src/common/cli.error.ts
+var CliError = class extends Error {
+  constructor(code, message, nextAction = "FIX_INPUT", details, requestId, retryable = false, category) {
+    super(message);
+    this.code = code;
+    this.nextAction = nextAction;
+    this.details = details;
+    this.requestId = requestId;
+    this.retryable = retryable;
+    this.category = category;
+  }
+};
+
+// cli/src/common/cli-output.formatter.ts
+var CATEGORY_EXIT = {
+  /** 接口或业务拒绝。 */
+  api: 1,
+  /** 命令参数无效。 */
+  validation: 2,
+  /** 身份认证未完成。 */
+  authentication: 3,
+  /** 当前身份无权限。 */
+  authorization: 3,
+  /** 本机配置或客户端版本不满足要求。 */
+  config: 3,
+  /** 网络连接、传输或超时失败。 */
+  network: 4,
+  /** 客户端内部或响应契约异常。 */
+  internal: 5,
+  /** 执行策略拒绝。 */
+  policy: 6,
+  /** 执行前需要确认。 */
+  confirmation: 10
+};
+var ERROR_CATEGORY = {
+  INVALID_ARGUMENT: "validation",
+  IDEMPOTENCY_KEY_REQUIRED: "validation",
+  IDEMPOTENCY_CONFLICT: "validation",
+  AUTH_REQUIRED: "authentication",
+  SESSION_REVOKED: "authentication",
+  TOKEN_EXPIRED: "authentication",
+  CLI_SCOPE_DENIED: "authorization",
+  PRODUCT_PERMISSION_DENIED: "authorization",
+  RESULT_ACCESS_REVOKED: "authorization",
+  CONFIG_ERROR: "config",
+  ACCOUNT_MAPPING_REQUIRED: "config",
+  ACCOUNT_MAPPING_CONFLICT: "config",
+  CLIENT_UPGRADE_REQUIRED: "config",
+  ACTION_NOT_FOUND: "api",
+  ACTION_VERSION_CHANGED: "api",
+  ACTION_DISABLED: "api",
+  ACTION_UNAVAILABLE: "api",
+  OPERATION_LOOKUP_EXPIRED: "api",
+  RATE_LIMITED: "api",
+  UPSTREAM_ERROR: "api",
+  AUTH_DEPENDENCY_UNAVAILABLE: "api",
+  WRITE_REJECTED: "api",
+  OPERATION_LOOKUP_UNAVAILABLE: "api",
+  OUTCOME_UNKNOWN: "api",
+  NETWORK_ERROR: "network",
+  UPSTREAM_TIMEOUT: "network",
+  UPSTREAM_RESPONSE_INVALID: "internal",
+  INTERNAL_ERROR: "internal",
+  INSTALLATION_FAILED: "internal",
+  INSTALLATION_INCOMPLETE: "internal"
+};
+var HINTS = {
+  UPGRADE_CLIENT: "\u5148\u5347\u7EA7CLI\u548C\u968F\u5305Skill\u5E76\u6838\u5BF9\u7248\u672C\uFF0C\u518D\u7EE7\u7EED\u5C1A\u672A\u53D1\u9001\u7684\u4EFB\u52A1\uFF1B\u5DF2\u53D1\u9001\u5199\u5165\u53EA\u67E5\u8BE2\u539F\u7ED3\u679C\u3002",
+  FIX_INPUT: "\u6309 schema \u5B57\u6BB5\u8BF4\u660E\u4FEE\u6B63\u53C2\u6570\u3002",
+  LOGIN: "\u8BF7\u5458\u5DE5\u91CD\u65B0\u5B8C\u6210\u98DE\u4E66\u767B\u5F55\u6388\u6743\u3002",
+  REQUEST_PERMISSION: "\u7533\u8BF7\u6240\u9700 CLI \u6216\u539F\u4EA7\u54C1\u6743\u9650\u540E\u518D\u64CD\u4F5C\u3002",
+  LIST_ACTIONS: "\u91CD\u65B0\u67E5\u770B\u5F53\u524D\u6709\u6743\u4F7F\u7528\u7684\u80FD\u529B\u6E05\u5355\u3002",
+  DESCRIBE_ACTION: "\u91CD\u65B0\u8FD0\u884C kscs schema\uFF0C\u6309\u65B0\u5B9A\u4E49\u6838\u5BF9\u53C2\u6570\u3002",
+  STOP: "\u505C\u6B62\u672C\u6B21\u8C03\u7528\uFF0C\u6309\u4E1A\u52A1\u6216\u6743\u9650\u6D41\u7A0B\u5904\u7406\u3002",
+  RETRY_LATER: "\u7A0D\u540E\u6838\u5B9E\u72B6\u6001\uFF1B\u5199\u5165\u7ED3\u679C\u672A\u77E5\u65F6\u53EA\u67E5\u539F\u7ED3\u679C\u3002",
+  CONTACT_SUPPORT: "\u63D0\u4F9B request_id \u6216\u539F\u64CD\u4F5C\u5B9A\u4F4D\uFF0C\u8BF7\u7EDF\u4E00 CLI \u6216\u4EA7\u54C1\u56E2\u961F\u6838\u5B9E\u3002",
+  REFRESH_AUTH: "\u4EC5\u5728\u660E\u786E\u4E1A\u52A1\u6267\u884C\u524D\u62D2\u7EDD\u65F6\u7EED\u671F\uFF0C\u5E76\u4FDD\u6301\u539F\u5E42\u7B49\u952E\u3002",
+  CHECK_OPERATION: "\u4F7F\u7528\u539F\u80FD\u529B\u3001\u539F\u7248\u672C\u548C\u539F\u5E42\u7B49\u952E\u67E5\u8BE2\u7ED3\u679C\uFF0C\u4E0D\u91CD\u53D1\u5199\u5165\u3002"
+};
+function diagnosticHint(error) {
+  if (error.code === "UPSTREAM_ERROR" && error.details?.failure_kind === "business_rejection")
+    return "\u8BF7\u4E1A\u52A1\u8D1F\u8D23\u4EBA\u5904\u7406\u4E0A\u8FF0\u539F\u56E0\u540E\u91CD\u65B0\u67E5\u8BE2\uFF1B\u91CD\u590D\u91CD\u8BD5\u6216\u91CD\u65B0\u767B\u5F55\u4E0D\u4F1A\u8865\u9F50\u4E1A\u52A1\u6570\u636E\u3002";
+  if (error.code === "UPSTREAM_RESPONSE_INVALID" && error.details?.failure_kind === "response_schema_mismatch")
+    return "\u8BF7\u63A5\u53E3\u63D0\u4F9B\u65B9\u4E0E\u63A5\u5165\u7EF4\u62A4\u65B9\u6838\u5BF9\u5B57\u6BB5\u7EA6\u5B9A\uFF1B\u672C\u6B21\u7ED3\u679C\u672A\u6210\u529F\u8FD4\u56DE\uFF0C\u4E0D\u53EF\u4F5C\u4E3A\u5B8C\u6574\u7ED3\u679C\u4F7F\u7528\u3002";
+  return void 0;
+}
+function failure(cause) {
+  const error = cause instanceof CliError ? cause : new CliError("INTERNAL_ERROR", "\u5BA2\u6237\u7AEF\u5904\u7406\u5931\u8D25\uFF0C\u8BF7\u8054\u7CFB\u652F\u6301\u4EBA\u5458\u3002", "CONTACT_SUPPORT");
+  const category = error.category ?? (Object.hasOwn(ERROR_CATEGORY, error.code) ? ERROR_CATEGORY[error.code] : "internal");
+  const exit = CATEGORY_EXIT[category];
+  const result = {
+    exit,
+    envelope: {
+      identity: "user",
+      ...error.requestId ? { request_id: error.requestId } : {},
+      error: {
+        type: category,
+        subtype: error.code,
+        message: error.message,
+        hint: error.details?.auth_context === "company_login" ? error.details.login_owner === "BOUND_EMPLOYEE" ? "\u7531\u56E2\u961F\u7ED1\u5B9A\u5458\u5DE5\u5728\u672C\u4EBA\u7535\u8111\u6267\u884C kscs auth company-login\uFF1B\u5176\u4ED6\u63D0\u95EE\u8005\u65E0\u9700\u767B\u5F55\u3002" : "\u6267\u884C kscs auth company-login --complete \u5B8C\u6210\u5DF2\u53D1\u8D77\u767B\u5F55\uFF0C\u6216\u7528 kscs auth company-login --no-wait \u83B7\u53D6\u5165\u53E3\uFF1B\u5B8C\u6210\u540E\u91CD\u65B0\u67E5\u8BE2\u3002" : diagnosticHint(error) ?? (Object.hasOwn(HINTS, error.nextAction) ? HINTS[error.nextAction] : HINTS.CONTACT_SUPPORT),
+        retryable: error.retryable,
+        next_action: error.nextAction,
+        ...error.details ? { details: error.details } : {}
+      }
+    }
+  };
+  return result;
+}
+
 // cli/src/common/config/release-trust.config.ts
 var RELEASE_TRUST = Object.freeze({
   /** 唯一信任根标识；未知标识拒绝，不接受远端下发公钥。 */
@@ -1391,11 +1500,19 @@ var NPM_PACKAGE_NAME = "@kscs-inc/cli";
 // cli/src/service/installation/npm-bootstrap.service.ts
 import { spawn } from "node:child_process";
 import { createHash as createHash3 } from "node:crypto";
-import { lstat as lstat2, mkdtemp, readFile, realpath as realpath2, rm } from "node:fs/promises";
+import { lstat as lstat2, mkdtemp, readFile, realpath as realpath2 } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join as join3, resolve as resolve2 } from "node:path";
 import { parseArgs } from "node:util";
 
+// cli/src/common/process-exit.ts
+import { constants } from "node:os";
+function childExitStatus(code, signal) {
+  if (code !== null) return code;
+  const number = signal ? constants.signals[signal] : void 0;
+  return typeof number === "number" ? 128 + number : 5;
+}
+
 // cli/src/common/client/installation-download.client.ts
 import { createHash as createHash2, randomUUID } from "node:crypto";
 import { createReadStream, createWriteStream } from "node:fs";
@@ -1457,7 +1574,7 @@ async function downloadResponse(url, allowLocal, timeoutMs) {
       response = await fetch(target, {
         redirect: "manual",
         signal,
-        headers: { "User-Agent": "kscs-node-installer/1" }
+        headers: { "User-Agent": "kscs-node-installer/1", "Cache-Control": "no-cache" }
       });
     } catch (error) {
       const cause = error instanceof Error ? error.cause : void 0;
@@ -1538,11 +1655,20 @@ async function downloadVerifiedRelease(url, limit, allowLocal = false, timeoutMs
 // cli/src/common/client/installation-archive.client.ts
 var import_yauzl = __toESM(require_yauzl(), 1);
 import { createWriteStream as createWriteStream2 } from "node:fs";
-import { chmod, lstat, mkdir, open as open2, readdir, realpath } from "node:fs/promises";
+import { chmod, lstat, mkdir, open as open2, readdir, realpath, rm } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
 import { pipeline as pipeline2 } from "node:stream/promises";
 var MAX_ARCHIVE_FILES = 3e4;
 var MAX_EXPANDED_BYTES = 1024 * 1024 * 1024;
+async function cleanupInstallationStaging(directory) {
+  try {
+    await rm(directory, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    process.stderr.write(`\u5B89\u88C5\u4E34\u65F6\u76EE\u5F55\u5F85\u6E05\u7406\uFF1A${directory}\uFF1B${message}
+`);
+  }
+}
 function validateArchivePath(name) {
   const parts = name.replace(/\/$/, "").split("/");
   if (!name || /[\\:\x00-\x1f]/.test(name) || parts.some(
@@ -1768,10 +1894,10 @@ async function readNpmRelease(directory) {
   const targets = value.targets.map((target) => {
     if (!target || typeof target !== "object") throw new Error("npm\u53D1\u884C\u76EE\u6807\u65E0\u6548");
     const item = target;
-    if (!INSTALL_MODES.includes(item.mode) || !INSTALL_PLATFORMS.includes(item.platform) || !INSTALL_ARCHITECTURES.includes(item.arch) || !["stable", "trial"].includes(String(item.channel)) || typeof item.manifest !== "string" || typeof item.manifest_sha256 !== "string" || !/^[a-f0-9]{64}$/.test(item.manifest_sha256) || typeof item.build_id !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,100}$/.test(item.build_id))
+    if (!INSTALL_MODES.includes(item.mode) || !INSTALL_PLATFORMS.includes(item.platform) || !INSTALL_ARCHITECTURES.includes(item.arch) || item.channel !== "stable" || typeof item.manifest !== "string" || typeof item.manifest_sha256 !== "string" || !/^[a-f0-9]{64}$/.test(item.manifest_sha256) || typeof item.build_id !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,100}$/.test(item.build_id))
       throw new Error("npm\u53D1\u884C\u76EE\u6807\u5B57\u6BB5\u65E0\u6548");
     const url = new URL(item.manifest);
-    if (url.origin !== "https://cli.xaweiju.com" || url.username || url.password || url.hash || url.search || !url.pathname.startsWith("/downloads/cli/node/") || !url.pathname.endsWith("/manifest.json"))
+    if (url.origin !== "https://cli.xaweiju.com" || url.username || url.password || url.hash || url.search || !url.pathname.startsWith("/downloads/cli/node/") || url.pathname.startsWith("/downloads/cli/node/trial/") || !url.pathname.endsWith("/manifest.json"))
       throw new Error("npm\u53D1\u884C\u76EE\u6807\u6765\u6E90\u65E0\u6548");
     const key = `${item.mode}/${item.platform}/${item.arch}/${item.channel}`;
     if (keys.has(key)) throw new Error("npm\u53D1\u884C\u76EE\u6807\u91CD\u590D");
@@ -1809,7 +1935,7 @@ async function runNpmChild(command, argumentsList) {
     });
     child.once("exit", (code, signal) => {
       cleanup();
-      accept(code ?? (signal === "SIGINT" ? 130 : 143));
+      accept(childExitStatus(code, signal));
     });
   });
 }
@@ -1856,29 +1982,28 @@ async function installFromNpm(release, argv, onFormat) {
       "update-policy": { type: "string" },
       "no-path": { type: "boolean" },
       "verify-connection": { type: "boolean" },
+      "adopt-update-source": { type: "boolean" },
       json: { type: "boolean" },
       human: { type: "boolean" }
     }
   });
   onFormat?.(values.json === true);
   if (values.json && values.human) throw new Error("--json\u4E0E--human\u4E0D\u80FD\u540C\u65F6\u4F7F\u7528");
-  if (!INSTALL_MODES.includes(values.mode) || values.channel !== void 0 && !["stable", "trial"].includes(values.channel))
-    throw new Error("\u5B89\u88C5\u6A21\u5F0F\u6216\u901A\u9053\u65E0\u6548");
+  if (values["adopt-update-source"] && !values.channel)
+    throw new Error("\u8FC1\u79FB\u66F4\u65B0\u6E90\u5FC5\u987B\u663E\u5F0F\u9009\u62E9 --channel stable");
+  if (!INSTALL_MODES.includes(values.mode) || values.channel !== void 0 && values.channel !== "stable")
+    throw new Error("\u5B89\u88C5\u6A21\u5F0F\u6216\u901A\u9053\u65E0\u6548\uFF1B\u5F53\u524D\u5165\u53E3\u4EC5\u5B89\u88C5\u6B63\u5F0F\u7248\u672C\uFF08stable\uFF09");
   const arch = await nativeArchitecture();
   const matches = release.targets.filter(
     (target2) => target2.mode === values.mode && target2.platform === process.platform && target2.arch === arch
   );
   if (new Set(matches.map((target2) => target2.channel)).size !== matches.length)
     throw new Error("npm\u53D1\u884C\u76EE\u6807\u91CD\u590D\uFF0C\u505C\u6B62\u5B89\u88C5");
-  const target = values.channel ? matches.find((candidate) => candidate.channel === values.channel) : matches.find((candidate) => candidate.channel === "stable") ?? matches.find((candidate) => candidate.channel === "trial");
+  const target = matches.find((candidate) => candidate.channel === "stable");
   if (!target)
     throw new Error(
       values.channel ? `\u5F53\u524D\u5E73\u53F0\u5728\u6307\u5B9A\u901A\u9053 ${values.channel} \u6CA1\u6709\u53EF\u7528\u5B89\u88C5\u76EE\u6807\uFF1B\u4E0D\u4F1A\u81EA\u52A8\u5207\u6362\u901A\u9053\u3002` : "\u5F53\u524D\u5E73\u53F0\u6CA1\u6709\u53EF\u7528\u5B89\u88C5\u76EE\u6807\uFF0C\u8BF7\u6838\u5BF9\u5B89\u88C5\u6A21\u5F0F\u3001\u7CFB\u7EDF\u67B6\u6784\u4E0Enpm\u5165\u53E3\u7248\u672C\u3002"
     );
-  if (target.channel === "trial" && values["update-policy"] === "auto")
-    throw new Error("\u8BD5\u7528\u76EE\u6807\u7981\u6B62\u81EA\u52A8\u5347\u7EA7");
-  if (target.channel === "trial")
-    process.stderr.write("\u6CE8\u610F\uFF1A\u5F53\u524D\u76EE\u6807\u4E3A\u8BD5\u7528\u901A\u9053\uFF0C\u539F\u751F\u9A8C\u6536\u672A\u5B8C\u6210\uFF0C\u4E0D\u542F\u7528\u81EA\u52A8\u5347\u7EA7\u3002\n");
   const root = resolve2(values.root ?? defaultInstallRoot(target.mode));
   const previous = await readPrivateInstallationFile(root);
   process.stderr.write(
@@ -1892,6 +2017,8 @@ async function installFromNpm(release, argv, onFormat) {
   if (data.schema_version !== 1 || !Array.isArray(data.artifacts) || data.artifacts.length !== 1)
     throw new Error("\u56FA\u5B9A\u6E05\u5355\u5FC5\u987B\u53EA\u6709\u4E00\u4E2A\u76EE\u6807");
   const artifact = validateArtifact(data.artifacts[0]);
+  if (artifact.version !== release.version)
+    throw new Error("npm\u5165\u53E3\u4E0E\u5BA2\u6237\u7AEF\u7248\u672C\u4E0D\u4E00\u81F4\uFF0C\u505C\u6B62\u5B89\u88C5");
   if (artifact.build_id !== target.build_id || artifact.mode !== target.mode || artifact.platform !== target.platform || artifact.arch !== target.arch)
     throw new Error("npm\u76EE\u6807\u4E0E\u5236\u54C1\u8EAB\u4EFD\u4E0D\u4E00\u81F4");
   if (previous && Number(previous.release_sequence) > artifact.release_sequence)
@@ -1934,9 +2061,7 @@ async function installFromNpm(release, argv, onFormat) {
       installerArguments.push("--skill-dir", directory);
     if (values["no-path"]) installerArguments.push("--no-path");
     if (values["verify-connection"]) installerArguments.push("--verify-connection");
-    if (target.channel === "trial") {
-      installerArguments.push("--update-policy", "off");
-    }
+    if (values["adopt-update-source"]) installerArguments.push("--adopt-update-source");
     const status = await runNpmChild(
       join3(application, process.platform === "win32" ? "runtime/node.exe" : "runtime/node"),
       [join3(application, "dist/service/installation/install.entry.js"), ...installerArguments]
@@ -1947,7 +2072,7 @@ async function installFromNpm(release, argv, onFormat) {
       throw new Error("\u5B89\u88C5\u56DE\u6267\u4E0E\u76EE\u6807\u4E0D\u4E00\u81F4");
     return 0;
   } finally {
-    await rm(stage, { recursive: true, force: true });
+    await cleanupInstallationStaging(stage);
   }
 }
 async function forwardNpmCommand(argv) {
@@ -1966,8 +2091,7 @@ async function forwardNpmCommand(argv) {
   const application = await realpath2(
     process.platform === "win32" ? expectedApplication : join3(root, "current")
   );
-  if (application !== expectedApplication)
-    throw new Error("\u7248\u672C\u6307\u9488\u4E0E\u56DE\u6267\u4E0D\u4E00\u81F4");
+  if (application !== expectedApplication) throw new Error("\u7248\u672C\u6307\u9488\u4E0E\u56DE\u6267\u4E0D\u4E00\u81F4");
   return runNpmChild(
     join3(application, process.platform === "win32" ? "runtime/node.exe" : "runtime/node"),
     [join3(application, "dist/service/installation/update.entry.js"), "--root", root, "--", ...argv]
@@ -1988,9 +2112,11 @@ async function main() {
     process.stdout.write(
       `\u65F7\u4E16\u4F20\u58F0 CLI \u5B89\u88C5\u5165\u53E3
 
-\u7528\u6CD5\uFF1Anpx ${NPM_PACKAGE_NAME}@latest install [--mode personal|team] [--channel stable|trial]
+\u7528\u6CD5\uFF1Anpx ${NPM_PACKAGE_NAME}@latest install [--mode personal|team] [--channel stable]
 \u53EF\u9009\uFF1A--root \u79C1\u6709\u76EE\u5F55 --config \u5DF2\u6709\u914D\u7F6E --skill-dir \u6280\u80FD\u76EE\u5F55 --update-policy off|notify|auto --no-path
+\u8FC1\u79FB\u66F4\u65B0\u6E90\uFF1A--adopt-update-source\uFF08\u5FC5\u987B\u540C\u65F6\u6307\u5B9A --channel stable\uFF09
 
+\u9ED8\u8BA4\u5B89\u88C5\u5168\u90E8\u968F\u5305Skill\uFF1BAI\u987B\u6309\u56DE\u6267\u6838\u9A8C\u5BBF\u4E3B\u542F\u7528\u5E76\u8BFB\u53D6\u65B0\u7248SKILL.md\u3002
 \u5B89\u88C5\u540E\uFF1Akscs --version\uFF1Bkscs auth login\uFF1Bkscs products list
 \u65E0\u9700Python\u3001Java\u6216\u7F16\u8BD1\u5668\u3002\u6CA1\u6709Node\u8BF7\u8BBF\u95EE https://cli.xaweiju.com/install/
 \u5378\u8F7Dnpm\u5165\u53E3\u4E0D\u4F1A\u5220\u9664\u5B9E\u9645\u5BA2\u6237\u7AEF\u3001\u8EAB\u4EFD\u914D\u7F6E\u6216Skill\u3002
@@ -2009,10 +2135,9 @@ async function main() {
   });
 }
 void main().catch((error) => {
-  const message = error instanceof Error ? error.message : String(error);
-  process.stderr.write(
-    jsonOutput ? JSON.stringify({ installed: false, status: "installation_failed", message }) + "\n" : `\u5B89\u88C5\u5165\u53E3\u5931\u8D25\uFF1A${message}
-`
-  );
-  process.exitCode = 1;
+  const result = failure(error instanceof CliError ? error : new CliError("INSTALLATION_FAILED", error instanceof Error ? error.message : "\u5B89\u88C5\u5165\u53E3\u5931\u8D25", "CONTACT_SUPPORT"));
+  const errorOutput = result.envelope.error;
+  const message = errorOutput.message.replace(/[\u0000-\u001f\u007f-\u009f]/g, "");
+  process.stderr.write(jsonOutput ? JSON.stringify(result.envelope) + "\n" : "\u9519\u8BEF\uFF1A" + message + "\n");
+  process.exitCode = result.exit;
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kscs-inc/cli",
-  "version": "0.3.6",
+  "version": "0.4.1",
   "description": "旷世传声 CLI 官方安装入口：中文引导、签名校验、公司客户端安装。",
   "type": "module",
   "bin": {

package/release.json

@@ -1,79 +1,79 @@
 {
   "schema_version": 1,
   "name": "@kscs-inc/cli",
-  "version": "0.3.6",
+  "version": "0.4.1",
   "targets": [
     {
       "mode": "personal",
       "platform": "darwin",
-      "arch": "x64",
-      "channel": "stable",
-      "manifest": "https://cli.xaweiju.com/downloads/cli/node/20261025-094324-6a216831/manifest.json",
-      "manifest_sha256": "509dc77014d55a99f037ced9e468f537c7f3e1584ce9fba0590437221fb87204",
-      "build_id": "20261025-094324-6a216831"
-    },
-    {
-      "mode": "team",
-      "platform": "linux",
-      "arch": "x64",
+      "arch": "arm64",
       "channel": "stable",
-      "manifest": "https://cli.xaweiju.com/downloads/cli/node/20261025-094459-bffbfb5d/manifest.json",
-      "manifest_sha256": "71412b4b44a05135b3d9911c2c5dd9d99a430b57c8d011802b39cf623fbc3552",
-      "build_id": "20261025-094459-bffbfb5d"
+      "manifest": "https://cli.xaweiju.com/downloads/cli/node/20261027-200607-67ee0f6f/manifest.json",
+      "manifest_sha256": "739b2dd55cf48c500358f1e97aee7b682eee85d1becf045ff3dd85fed7b73ef1",
+      "build_id": "20261027-200607-67ee0f6f"
     },
     {
       "mode": "personal",
       "platform": "darwin",
-      "arch": "arm64",
-      "channel": "trial",
-      "manifest": "https://cli.xaweiju.com/downloads/cli/node/trial/20261025-094313-47d1ddfd/manifest.json",
-      "manifest_sha256": "6fd6d2aed977b9911e76619b06b30bde542a75a3b261e456c022c430e50b6caf",
-      "build_id": "20261025-094313-47d1ddfd"
+      "arch": "x64",
+      "channel": "stable",
+      "manifest": "https://cli.xaweiju.com/downloads/cli/node/20261027-200616-55978e1f/manifest.json",
+      "manifest_sha256": "dd5fd7992b5fced250f587538aef67cd34147537f62d702563e4d92d68465f1e",
+      "build_id": "20261027-200616-55978e1f"
     },
     {
       "mode": "personal",
       "platform": "linux",
       "arch": "arm64",
-      "channel": "trial",
-      "manifest": "https://cli.xaweiju.com/downloads/cli/node/trial/20261025-094340-4e3697dd/manifest.json",
-      "manifest_sha256": "a163360a975210639ae6b44752530ddcbad88c085e5c7c1101c7f396fd696fb7",
-      "build_id": "20261025-094340-4e3697dd"
+      "channel": "stable",
+      "manifest": "https://cli.xaweiju.com/downloads/cli/node/20261027-200628-61306d06/manifest.json",
+      "manifest_sha256": "69b6aaa8e191d09df66fbfa0764a1fd4abb38e17fbaf1e459f1be4575e6dd00d",
+      "build_id": "20261027-200628-61306d06"
     },
     {
       "mode": "personal",
       "platform": "linux",
       "arch": "x64",
-      "channel": "trial",
-      "manifest": "https://cli.xaweiju.com/downloads/cli/node/trial/20261025-094358-3996bdc3/manifest.json",
-      "manifest_sha256": "8e11b1749d968fcca2b0177654cb26ef07fe11a4b5dd5a8314cfce6ba33dfc7d",
-      "build_id": "20261025-094358-3996bdc3"
+      "channel": "stable",
+      "manifest": "https://cli.xaweiju.com/downloads/cli/node/20261027-200635-f73803cc/manifest.json",
+      "manifest_sha256": "fefa1b19056c1d279a3f7004ec1477011b411350763c4639161c2f9cd489a4b8",
+      "build_id": "20261027-200635-f73803cc"
     },
     {
       "mode": "personal",
       "platform": "win32",
       "arch": "arm64",
-      "channel": "trial",
-      "manifest": "https://cli.xaweiju.com/downloads/cli/node/trial/20261025-094414-cc841444/manifest.json",
-      "manifest_sha256": "d8a0388075fee005133c47c7b66ca0644280b6b27c3f4f67c1ae88917cd7e6b9",
-      "build_id": "20261025-094414-cc841444"
+      "channel": "stable",
+      "manifest": "https://cli.xaweiju.com/downloads/cli/node/20261027-200644-2c944a47/manifest.json",
+      "manifest_sha256": "6735363656121a178a0e47d11fecaa98c4b23d03057201115f6103afa85ad076",
+      "build_id": "20261027-200644-2c944a47"
     },
     {
       "mode": "personal",
       "platform": "win32",
       "arch": "x64",
-      "channel": "trial",
-      "manifest": "https://cli.xaweiju.com/downloads/cli/node/trial/20261025-094430-72e23d4c/manifest.json",
-      "manifest_sha256": "c0e4345068a4a88b05400fb015be6af4a9e0fe3cd94c664a9d8648e6703e08cc",
-      "build_id": "20261025-094430-72e23d4c"
+      "channel": "stable",
+      "manifest": "https://cli.xaweiju.com/downloads/cli/node/20261027-200718-eee9c4e8/manifest.json",
+      "manifest_sha256": "d5178c4772e9a42569fce61621a193d64aaaaf61cfb11d5c77b8489173ff3836",
+      "build_id": "20261027-200718-eee9c4e8"
     },
     {
       "mode": "team",
       "platform": "linux",
       "arch": "arm64",
-      "channel": "trial",
-      "manifest": "https://cli.xaweiju.com/downloads/cli/node/trial/20261025-094444-62377ef8/manifest.json",
-      "manifest_sha256": "23482fcd6de75844b428b9dd12277e4f6108b7ce6e4542f7d1c137b3f4edaf83",
-      "build_id": "20261025-094444-62377ef8"
+      "channel": "stable",
+      "manifest": "https://cli.xaweiju.com/downloads/cli/node/20261027-200747-64de97d9/manifest.json",
+      "manifest_sha256": "04a722770565d93b610a93d17f9a20292f294e88a77870be55d5569ed11ba747",
+      "build_id": "20261027-200747-64de97d9"
+    },
+    {
+      "mode": "team",
+      "platform": "linux",
+      "arch": "x64",
+      "channel": "stable",
+      "manifest": "https://cli.xaweiju.com/downloads/cli/node/20261027-200810-34e06280/manifest.json",
+      "manifest_sha256": "d5872df14ce2c52a60c10b0c10218c1164356e5ca1057e74df4a36db9185e2a5",
+      "build_id": "20261027-200810-34e06280"
     }
   ]
 }

package/release.signature.json

@@ -1 +1 @@
-{"algorithm":"Ed25519","key_id":"kscs-release-20261023","payload":"eyJzY2hlbWFfdmVyc2lvbiI6MSwicGF0aCI6Ii9kb3dubG9hZHMvY2xpL25vZGUvbnBtLzAuMy42L3JlbGVhc2UuanNvbiIsInNoYTI1NiI6ImNiYWIyZmNhMDJkZDQyNTMwNDc3NTcwMGVjNGUzN2Q5MDRkMWI5ZDUxYjJiNzAwMmU4MTc5ZDE3MzIxODM1ZWUiLCJpc3N1ZWRfYXQiOjE3OTI4OTYyODIsImV4cGlyZXNfYXQiOjE4MjQ0MzIyODJ9","signature":"evM2QJoVbi5wruyK7vRNTLqMgD90QUWZLrsuAIOlcSfPmn2VJC2UgtcOeWchUHWwhF9J3EuxbQbNlBWufHL6Aw=="}
+{"algorithm":"Ed25519","key_id":"kscs-release-20261023","payload":"eyJzY2hlbWFfdmVyc2lvbiI6MSwicGF0aCI6Ii9kb3dubG9hZHMvY2xpL25vZGUvbnBtLzAuNC4xL3JlbGVhc2UuanNvbiIsInNoYTI1NiI6IjU0MDAyMTVjZGEzMDg5ZWYzNWU5NjhiZDMwZjgyYWEyMDMyMTUzYjI4ZDZiNjU3MmRjZDU0MDA4NjIzMDMzNzciLCJpc3N1ZWRfYXQiOjE3OTMxMDY2OTAsImV4cGlyZXNfYXQiOjE4MjQ2NDI2OTB9","signature":"500yxN6pdj1m7Du5LtfGlGAkPSZi5xwIdc1uOZi3p3BPY4ryAeyQXYP6u8xm3SyRN7rNb8e3APhIn23fXjVQAg=="}