@manturhub/cli 0.8.0 → 0.8.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ManturHub
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -42,8 +42,8 @@ CLI 会在付费调用前按算子实时 schema 校验未知字段、必填项
 | `manturhub run <算子ID> --json-file params.json` | 从文件读取参数，适合长提示词和自动化 |
 | `manturhub upload <本地文件>` | 流式上传图片、音频或视频并输出公网 URL |
 | `manturhub status <poll_url>` | 查询 `run --no-wait` 返回的异步任务 |
-| `manturhub balance [--json]` | 查询余额及人民币等值（1 馒头 = ¥0.1） |
-| `manturhub skill ls [--json]` / `skill add <slug> --client codex` | 浏览和安装业务 Skill |
+| `manturhub balance [--json]` | 查询余额及美元等值（1 馒头 = $0.01 USD） |
+| `manturhub skill ls [--json]` / `skill add <slug> [--client codex]` | 浏览和安装业务 Skill；默认自动识别 Agent |
 | `manturhub recipe [关键词]` / `recipe get <ID>` | 搜索并查看已验证配方 |
 | `manturhub suite ls [--json]` / `suite install <slug>` | 安装多角色 Agent 套件，不复制 API Key |
 | `manturhub init` | 给当前项目写入 Agent 使用引导 |

package/bin/cli.js

@@ -1,7 +1,6 @@
 #!/usr/bin/env node
 import { getBaseUrl, saveConfig, loadConfig } from "../lib/config.js";
 import { apiFetch, pollJob } from "../lib/api.js";
-import { runMcpBridge } from "../lib/mcp.js";
 import { runInit } from "../lib/setup.js";
 import { skillLs, skillAdd } from "../lib/skill-install.js";
 import { suiteLs, suiteInstall } from "../lib/suite-install.js";
@@ -79,9 +78,9 @@ function assertRunControlFlags(tokens) {
   }
 }
 
-function rmbFor(dumplings) {
+function usdFor(dumplings) {
   const value = Number(dumplings);
-  return Number.isFinite(value) ? `¥${(value * 0.1).toFixed(2)} RMB` : "-";
+  return Number.isFinite(value) ? `$${(value * 0.01).toFixed(2)} USD` : "-";
 }
 
 const HELP = `manturhub — ManturHub 算子广场 CLI  v${VERSION}
@@ -101,7 +100,7 @@ const HELP = `manturhub — ManturHub 算子广场 CLI  v${VERSION}
   manturhub init                      装「ManturHub 使用 skill」+ 写 agent 引导（推荐：让 agent 会用算子）
   manturhub skill ls                  列出平台 Skill（业务成品流程，如爆款复刻）
   manturhub skill add <slug> [--client claude-code|codex|all]
-                                      安装 Skill 到指定 Agent
+                                      自动识别 Agent 并安装 Skill（可显式指定）
   manturhub suite ls                  列出 Agent 套件（多角色团队工作区，给 Agent 配一整个团队）
   manturhub suite install <slug>      安装套件为工作目录 ./<slug>/（不复制 API Key）
   manturhub recipe [关键词] [--cat x] 搜配方（已验证创作的效果+可复现参数；分类 video/image/script）
@@ -159,7 +158,7 @@ async function main() {
         cfg.key = key;
         saveConfig(cfg);
         console.log(
-          `✓ Key 已验证并保存。账号: ${r.json.email || "-"}   余额: ${rmbFor(r.json.balance)}（${r.json.balance ?? "-"} 馒头）`
+          `✓ Key 已验证并保存。账号: ${r.json.email || "-"}   余额: ${usdFor(r.json.balance)}（${r.json.balance ?? "-"} 馒头）`
         );
       } else {
         console.error(`Key 验证失败（HTTP ${r.status}），未修改本地配置。请确认 key 是否正确、是否已激活。`);
@@ -168,11 +167,6 @@ async function main() {
       break;
     }
 
-    case "mcp": {
-      await runMcpBridge({ scope: getFlag("scope", "manturhub") });
-      break;
-    }
-
     case "init": {
       runInit();
       break;
@@ -279,7 +273,7 @@ async function main() {
         );
       } else {
         console.log(`${r.json.operatorId || op}: ${r.json.formula || "详见算子页"}`);
-        if (r.json.floor !== undefined) console.log(`最低扣费: ${rmbFor(r.json.floor)}（${r.json.floor} 馒头）`);
+        if (r.json.floor !== undefined) console.log(`最低扣费: ${usdFor(r.json.floor)}（${r.json.floor} 馒头）`);
       }
       break;
     }
@@ -452,8 +446,8 @@ async function main() {
       }
       console.log(
         hasFlag("json")
-          ? JSON.stringify({ ...r.json, balance_rmb: Number(r.json.balance) * 0.1 }, null, 2)
-          : `余额: ${rmbFor(r.json.balance)}（${r.json.balance ?? "-"} 馒头）   账号: ${r.json.email || "-"}`
+          ? JSON.stringify({ ...r.json, balance_usd: Number(r.json.balance) * 0.01 }, null, 2)
+          : `余额: ${usdFor(r.json.balance)}（${r.json.balance ?? "-"} 馒头）   账号: ${r.json.email || "-"}`
       );
       break;
     }
@@ -475,7 +469,7 @@ async function main() {
           console.error(error.message);
           process.exit(1);
         }
-        await skillAdd(args[2], getFlag("client", "claude-code"));
+        await skillAdd(args[2], getFlag("client"));
       }
       else {
         console.error("用法: manturhub skill ls   |   manturhub skill add <slug> [--client claude-code|codex|all]");

package/lib/agent-target.js

@@ -0,0 +1,88 @@
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { createInterface } from "node:readline/promises";
+import { determineAgent } from "@vercel/detect-agent";
+
+const SUPPORTED_CLIENTS = new Set(["claude", "claude-code", "codex", "all"]);
+
+export function normalizeClient(client) {
+  if (client === undefined || client === null || client === "") return null;
+  if (!SUPPORTED_CLIENTS.has(client)) {
+    throw new Error("不支持的 client。可用值: claude-code | codex | all");
+  }
+  return client === "claude" ? "claude-code" : client;
+}
+
+export function clientForAgentName(name) {
+  if (name === "claude" || name === "cowork") return "claude-code";
+  if (name === "codex") return "codex";
+  return null;
+}
+
+export function detectInstalledClients({ home = homedir(), exists = existsSync } = {}) {
+  const clients = [];
+  if (exists(join(home, ".claude"))) clients.push("claude-code");
+  if (exists(join(home, ".codex")) || exists("/etc/codex")) clients.push("codex");
+  return clients;
+}
+
+function displayClient(client) {
+  if (client === "all") return "Claude Code、Codex";
+  return client === "codex" ? "Codex" : "Claude Code";
+}
+
+async function promptForClient(input, output, installedClients) {
+  const detected = installedClients.length
+    ? `\n检测到: ${installedClients.map(displayClient).join("、")}`
+    : "";
+  output.write(`${detected}\n请选择 Skill 安装目标:\n  1) Codex\n  2) Claude Code\n  3) 两者\n`);
+  const rl = createInterface({ input, output });
+  try {
+    const answer = (await rl.question("请输入 1 / 2 / 3: ")).trim();
+    if (answer === "1") return "codex";
+    if (answer === "2") return "claude-code";
+    if (answer === "3") return "all";
+    throw new Error("已取消：请输入 1、2 或 3，或使用 --client 明确指定。");
+  } finally {
+    rl.close();
+  }
+}
+
+export async function resolveSkillClient(
+  client,
+  {
+    detectAgent = determineAgent,
+    installedClients,
+    input = process.stdin,
+    output = process.stdout,
+  } = {}
+) {
+  const explicit = normalizeClient(client);
+  if (explicit) return { client: explicit, detected: false };
+
+  const agent = await detectAgent();
+  const runtimeClient = agent.isAgent ? clientForAgentName(agent.agent?.name) : null;
+  if (runtimeClient) return { client: runtimeClient, detected: true };
+
+  const installed = installedClients ?? detectInstalledClients();
+  if (installed.length === 1) return { client: installed[0], detected: true };
+
+  if (input.isTTY && output.isTTY) {
+    return {
+      client: await promptForClient(input, output, installed),
+      detected: false,
+    };
+  }
+
+  if (installed.length > 1) {
+    throw new Error(
+      "检测到 Claude Code 和 Codex，但当前无法交互选择。请加 --client codex、--client claude-code 或 --client all。"
+    );
+  }
+  throw new Error(
+    "未识别到 Codex 或 Claude Code。请在 Agent 内重试，或加 --client codex|claude-code|all。"
+  );
+}
+
+export { displayClient };

package/lib/archive.js

@@ -11,6 +11,7 @@ import { basename, join, posix } from "node:path";
 import { tmpdir } from "node:os";
 
 const MAX_FILES = 2000;
+const MAX_UNPACKED_BYTES = 500 * 1024 * 1024;
 
 export function validateSlug(slug, label = "ID") {
   if (!slug || !/^[a-z0-9][a-z0-9._-]*$/i.test(slug)) {
@@ -21,24 +22,28 @@ export function validateSlug(slug, label = "ID") {
 
 function listArchive(zipPath) {
   const commands = [
-    {
-      command: "tar",
-      list: ["-tf", zipPath],
-      verbose: ["-tvf", zipPath],
-      extract: (dest) => ["-xf", zipPath, "-C", dest],
-    },
     {
       command: "unzip",
       list: ["-Z1", zipPath],
       verbose: ["-Z", "-l", zipPath],
+      summary: ["-Z", "-t", zipPath],
       extract: (dest) => ["-o", "-q", zipPath, "-d", dest],
     },
+    {
+      command: "tar",
+      list: ["-tf", zipPath],
+      verbose: ["-tvf", zipPath],
+      extract: (dest) => ["-xf", zipPath, "-C", dest],
+    },
   ];
   for (const tool of commands) {
     try {
       const output = execFileSync(tool.command, tool.list, { encoding: "utf8" });
       const verbose = execFileSync(tool.command, tool.verbose, { encoding: "utf8" });
-      return { tool, entries: output.split(/\r?\n/).filter(Boolean), verbose };
+      const summary = tool.summary
+        ? execFileSync(tool.command, tool.summary, { encoding: "utf8" })
+        : "";
+      return { tool, entries: output.split(/\r?\n/).filter(Boolean), verbose, summary };
     } catch {
       // Try the next installed extractor.
     }
@@ -46,9 +51,31 @@ function listArchive(zipPath) {
   throw new Error("解压失败（需系统 tar 或 unzip 命令）");
 }
 
-export function validateArchiveEntries(entries, verbose = "") {
+function declaredUnpackedBytes(tool, verbose, summary) {
+  if (tool.command === "unzip") {
+    const match = summary.match(/([\d,]+)\s+bytes? uncompressed/i);
+    return match ? Number(match[1].replaceAll(",", "")) : Number.NaN;
+  }
+  let total = 0;
+  for (const line of verbose.split(/\r?\n/).filter(Boolean)) {
+    const bsd = line.match(/^\S+\s+\d+\s+\S+\s+\S+\s+(\d+)\s+/);
+    const gnu = line.match(/^\S+\s+\S+\s+(\d+)\s+/);
+    const size = Number((bsd || gnu)?.[1]);
+    if (!Number.isFinite(size)) return Number.NaN;
+    total += size;
+  }
+  return total;
+}
+
+export function validateArchiveEntries(entries, verbose = "", unpackedBytes = 0) {
   if (!entries.length) throw new Error("安装包为空");
   if (entries.length > MAX_FILES) throw new Error(`安装包文件过多（最多 ${MAX_FILES} 个）`);
+  if (!Number.isFinite(unpackedBytes) || unpackedBytes < 0) {
+    throw new Error("无法确认安装包解压后大小");
+  }
+  if (unpackedBytes > MAX_UNPACKED_BYTES) {
+    throw new Error(`安装包解压后过大（最大 ${MAX_UNPACKED_BYTES / 1024 / 1024} MB）`);
+  }
   if (/^\s*[lh][rwx-]{9}\s/m.test(verbose)) {
     throw new Error("安装包不得包含符号链接或硬链接");
   }
@@ -57,6 +84,7 @@ export function validateArchiveEntries(entries, verbose = "") {
     const normalized = posix.normalize(name);
     if (
       name.includes("\0") ||
+      /[\x00-\x1f\x7f]/.test(name) ||
       name.startsWith("/") ||
       /^[a-z]:\//i.test(name) ||
       normalized === ".." ||
@@ -67,23 +95,48 @@ export function validateArchiveEntries(entries, verbose = "") {
   }
 }
 
-function rejectLinks(dir) {
+function inspectExtracted(dir, state = { files: 0, bytes: 0 }) {
   for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    if (/[\x00-\x1f\x7f]/.test(entry.name)) {
+      throw new Error(`安装包包含不安全文件名: ${JSON.stringify(entry.name)}`);
+    }
     const path = join(dir, entry.name);
     const stat = lstatSync(path);
     if (stat.isSymbolicLink()) throw new Error(`安装包不得包含符号链接: ${entry.name}`);
-    if (stat.isDirectory()) rejectLinks(path);
+    if (stat.isDirectory()) inspectExtracted(path, state);
+    else if (stat.isFile()) {
+      state.files++;
+      state.bytes += stat.size;
+      if (state.files > MAX_FILES) throw new Error(`安装包文件过多（最多 ${MAX_FILES} 个）`);
+      if (state.bytes > MAX_UNPACKED_BYTES) {
+        throw new Error(`安装包解压后过大（最大 ${MAX_UNPACKED_BYTES / 1024 / 1024} MB）`);
+      }
+    } else {
+      throw new Error(`安装包包含不支持的文件类型: ${entry.name}`);
+    }
+  }
+  return state;
+}
+
+function rejectDestinationLinks(dir) {
+  if (!lstatSync(dir).isDirectory()) throw new Error(`安装目标不是目录: ${dir}`);
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    const path = join(dir, entry.name);
+    const stat = lstatSync(path);
+    if (stat.isSymbolicLink()) throw new Error(`安装目标包含符号链接: ${path}`);
+    if (stat.isDirectory()) rejectDestinationLinks(path);
   }
 }
 
 export function extractZipSafely(zipPath, dest) {
-  const { tool, entries, verbose } = listArchive(zipPath);
-  validateArchiveEntries(entries, verbose);
+  const { tool, entries, verbose, summary } = listArchive(zipPath);
+  validateArchiveEntries(entries, verbose, declaredUnpackedBytes(tool, verbose, summary));
   const staging = mkdtempSync(join(tmpdir(), "manturhub-extract-"));
   try {
     execFileSync(tool.command, tool.extract(staging), { stdio: ["ignore", "ignore", "ignore"] });
-    rejectLinks(staging);
+    inspectExtracted(staging);
     mkdirSync(dest, { recursive: true });
+    rejectDestinationLinks(dest);
     for (const entry of readdirSync(staging)) {
       cpSync(join(staging, entry), join(dest, basename(entry)), { recursive: true, force: true });
     }

package/lib/config.js

@@ -42,9 +42,24 @@ export function getKey() {
   return process.env.MANTURHUB_KEY || loadConfig().key || null;
 }
 
+function validateBaseUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error(`ManturHub 网关地址不合法: ${value}`);
+  }
+  const loopback = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]";
+  if (url.protocol !== "https:" && !(url.protocol === "http:" && loopback)) {
+    throw new Error("MANTURHUB_BASE 必须使用 HTTPS（仅 localhost/127.0.0.1/::1 可使用 HTTP）");
+  }
+  if (url.username || url.password) throw new Error("MANTURHUB_BASE 不得包含用户名或密码");
+  return url.href.replace(/\/$/, "");
+}
+
 export function getBaseUrl() {
-  if (process.env.MANTURHUB_BASE) return process.env.MANTURHUB_BASE.replace(/\/$/, "");
+  if (process.env.MANTURHUB_BASE) return validateBaseUrl(process.env.MANTURHUB_BASE);
   const storedBase = loadConfig().baseUrl?.replace(/\/$/, "");
-  if (storedBase && !LEGACY_DEFAULT_BASES.has(storedBase)) return storedBase;
+  if (storedBase && !LEGACY_DEFAULT_BASES.has(storedBase)) return validateBaseUrl(storedBase);
   return DEFAULT_BASE;
 }

package/lib/download.js

@@ -0,0 +1,45 @@
+import { createWriteStream, rmSync } from "node:fs";
+import { Readable, Transform } from "node:stream";
+import { pipeline } from "node:stream/promises";
+
+export const MAX_PACKAGE_BYTES = 100 * 1024 * 1024;
+
+export function assertSecureDownloadUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error("下载重定向地址不合法");
+  }
+  const loopback = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]";
+  if (url.protocol !== "https:" && !(url.protocol === "http:" && loopback)) {
+    throw new Error("安装包下载地址必须使用 HTTPS");
+  }
+  return url.href;
+}
+
+export async function downloadResponseToFile(response, target, maxBytes = MAX_PACKAGE_BYTES) {
+  if (!response.ok) throw new Error(`安装包下载失败（HTTP ${response.status}）`);
+  if (!response.body) throw new Error("安装包响应为空");
+  const declared = Number(response.headers.get("content-length"));
+  if (Number.isFinite(declared) && declared > maxBytes) {
+    await response.body.cancel();
+    throw new Error(`安装包过大（最大 ${Math.floor(maxBytes / 1024 / 1024)} MB）`);
+  }
+
+  let received = 0;
+  const limit = new Transform({
+    transform(chunk, _encoding, callback) {
+      received += chunk.length;
+      if (received > maxBytes) callback(new Error(`安装包过大（最大 ${Math.floor(maxBytes / 1024 / 1024)} MB）`));
+      else callback(null, chunk);
+    },
+  });
+  try {
+    await pipeline(Readable.fromWeb(response.body), limit, createWriteStream(target, { flags: "wx" }));
+    return received;
+  } catch (error) {
+    rmSync(target, { force: true });
+    throw error;
+  }
+}

package/lib/skill-install.js

@@ -1,9 +1,11 @@
 import { homedir, tmpdir } from "node:os";
 import { join } from "node:path";
-import { writeFileSync, rmSync } from "node:fs";
+import { mkdtempSync, rmSync } from "node:fs";
 import { getKey, getBaseUrl } from "./config.js";
 import { extractZipSafely, validateSlug } from "./archive.js";
 import { apiFetch } from "./api.js";
+import { assertSecureDownloadUrl, downloadResponseToFile } from "./download.js";
+import { displayClient, resolveSkillClient } from "./agent-target.js";
 
 // `manturhub skill ls` — 列出平台上线 Skill（公开元数据，无需 key；
 // 配了 key 则带上——管理员租户的 key 能看到 admin 专属 Skill）。
@@ -33,11 +35,11 @@ export async function skillLs({ json = false } = {}) {
     const ver = s.version ? `v${s.version}` : "";
     console.log(`  ${slug} ${s.name || ""}   ${cat} ${ver}`.trimEnd());
   }
-  console.log(`\n用 \`manturhub skill add <slug> --client claude-code|codex|all\` 安装到指定 Agent。`);
+  console.log(`\n用 \`manturhub skill add <slug>\` 自动识别 Agent；也可用 \`--client\` 明确指定。`);
 }
 
-// `manturhub skill add <slug>` — 下载并安全解压到指定 Agent 的用户级 skills 目录。
-export async function skillAdd(slug, client = "claude-code") {
+// `manturhub skill add <slug>` — 自动识别 Agent，下载并安全解压到用户级 skills 目录。
+export async function skillAdd(slug, client) {
   if (!slug) {
     console.error("用法: manturhub skill add <slug>   （先 `manturhub skill ls` 看可用 Skill）");
     process.exit(1);
@@ -48,6 +50,16 @@ export async function skillAdd(slug, client = "claude-code") {
     console.error(error.message);
     process.exit(1);
   }
+  let target;
+  try {
+    target = await resolveSkillClient(client);
+  } catch (error) {
+    console.error(error.message);
+    process.exit(1);
+  }
+  client = target.client;
+  if (target.detected) console.log(`✓ 已识别 Agent：${displayClient(client)}`);
+
   const key = getKey();
   if (!key) {
     console.error("下载 Skill 需 API Key。运行 `manturhub login`，或设置环境变量 MANTURHUB_KEY。");
@@ -76,53 +88,45 @@ export async function skillAdd(slug, client = "claude-code") {
     process.exit(1);
   }
 
-  let zipBuf;
+  let packageResponse;
   if (res.status >= 300 && res.status < 400) {
     const loc = res.headers.get("location");
     if (!loc) {
       console.error("下载重定向缺少 Location 头");
       process.exit(1);
     }
-    const zres = await fetch(loc, { signal: AbortSignal.timeout(120000) });
-    if (!zres.ok) {
-      console.error(`安装包下载失败（HTTP ${zres.status}）`);
+    try {
+      packageResponse = await fetch(assertSecureDownloadUrl(loc), { signal: AbortSignal.timeout(120000) });
+    } catch (error) {
+      console.error(`安装包下载失败: ${error.message}`);
       process.exit(1);
     }
-    zipBuf = Buffer.from(await zres.arrayBuffer());
   } else if (res.ok) {
-    zipBuf = Buffer.from(await res.arrayBuffer());
+    packageResponse = res;
   } else {
     console.error(`下载失败（HTTP ${res.status}）`);
     process.exit(1);
   }
-  if (zipBuf.length > 100 * 1024 * 1024) {
-    console.error("安装包过大（最大 100 MB）");
-    process.exit(1);
-  }
-
-  const supported = new Set(["claude", "claude-code", "codex", "all"]);
-  if (!supported.has(client)) {
-    console.error("不支持的 client。可用值: claude-code | codex | all");
-    process.exit(1);
-  }
   const destinations = [];
-  if (client === "claude" || client === "claude-code" || client === "all") {
+  if (client === "claude-code" || client === "all") {
     destinations.push(join(homedir(), ".claude", "skills", slug));
   }
   if (client === "codex" || client === "all") {
     destinations.push(join(homedir(), ".agents", "skills", slug));
   }
-  const tmp = join(tmpdir(), `manturhub-skill-${slug}-${process.pid}.zip`);
-  writeFileSync(tmp, zipBuf);
-  for (const dest of destinations) {
-    try {
+  const tempDir = mkdtempSync(join(tmpdir(), "manturhub-skill-"));
+  const tmp = join(tempDir, `${slug}.zip`);
+  try {
+    await downloadResponseToFile(packageResponse, tmp);
+    for (const dest of destinations) {
       extractZipSafely(tmp, dest);
-    } catch (error) {
-      console.error(`解压失败: ${error.message}。安装包已存到: ${tmp}`);
-      process.exit(1);
     }
+  } catch (error) {
+    console.error(`安装失败: ${error.message}`);
+    rmSync(tempDir, { recursive: true, force: true });
+    process.exit(1);
   }
-  rmSync(tmp, { force: true });
+  rmSync(tempDir, { recursive: true, force: true });
   for (const dest of destinations) console.log(`✓ 已安装 Skill「${slug}」→ ${dest}`);
-  console.log("  重启对应 Agent 后，用自然语言描述任务；Claude Code 也可用 /<slug> 触发。");
+  console.log("  重启对应 Agent 后，用自然语言描述任务即可使用。");
 }

package/lib/suite-install.js

@@ -1,9 +1,10 @@
 import { join, resolve } from "node:path";
 import { tmpdir } from "node:os";
-import { writeFileSync, rmSync } from "node:fs";
+import { mkdtempSync, rmSync } from "node:fs";
 import { getKey, getBaseUrl } from "./config.js";
 import { extractZipSafely, validateSlug } from "./archive.js";
 import { apiFetch } from "./api.js";
+import { assertSecureDownloadUrl, downloadResponseToFile } from "./download.js";
 
 // #456 Agent 套件（团队版 Skill）：与 skill 共用 /api/v1/skills 元数据与下载端点，
 // 区别在安装形态——解压为当前目录下的工作目录（非用户级 skills）。API Key 继续由
@@ -82,40 +83,37 @@ export async function suiteInstall(slug, dirArg) {
     process.exit(1);
   }
 
-  let zipBuf;
+  let packageResponse;
   if (res.status >= 300 && res.status < 400) {
     const loc = res.headers.get("location");
     if (!loc) {
       console.error("下载重定向缺少 Location 头");
       process.exit(1);
     }
-    const zres = await fetch(loc, { signal: AbortSignal.timeout(120000) });
-    if (!zres.ok) {
-      console.error(`安装包下载失败（HTTP ${zres.status}）`);
+    try {
+      packageResponse = await fetch(assertSecureDownloadUrl(loc), { signal: AbortSignal.timeout(120000) });
+    } catch (error) {
+      console.error(`安装包下载失败: ${error.message}`);
       process.exit(1);
     }
-    zipBuf = Buffer.from(await zres.arrayBuffer());
   } else if (res.ok) {
-    zipBuf = Buffer.from(await res.arrayBuffer());
+    packageResponse = res;
   } else {
     console.error(`下载失败（HTTP ${res.status}）`);
     process.exit(1);
   }
-  if (zipBuf.length > 100 * 1024 * 1024) {
-    console.error("安装包过大（最大 100 MB）");
-    process.exit(1);
-  }
-
   const dest = resolve(dirArg || `./${slug}`);
-  const tmp = join(tmpdir(), `manturhub-suite-${slug}-${process.pid}.zip`);
-  writeFileSync(tmp, zipBuf);
+  const tempDir = mkdtempSync(join(tmpdir(), "manturhub-suite-"));
+  const tmp = join(tempDir, `${slug}.zip`);
   try {
+    await downloadResponseToFile(packageResponse, tmp);
     extractZipSafely(tmp, dest);
   } catch (error) {
-    console.error(`解压失败: ${error.message}。安装包已存到: ${tmp}`);
+    console.error(`安装失败: ${error.message}`);
+    rmSync(tempDir, { recursive: true, force: true });
     process.exit(1);
   }
-  rmSync(tmp, { force: true });
+  rmSync(tempDir, { recursive: true, force: true });
 
   console.log(`✓ 已安装套件「${slug}」→ ${dest}`);
   console.log("  API Key 继续安全保存在 ~/.manturhub/config.json，未复制到项目目录");

package/lib/update-check.js

@@ -18,7 +18,7 @@ function isNewer(latest, current) {
 }
 
 // 启动时调用：读本地缓存→落后则 stderr 提示；缓存超过一天→后台异步刷新（不阻塞本次）。
-// 永不抛错、永不写 stdout —— mcp 模式 stdout 是 JSON-RPC 流，绝不能污染。
+// 永不抛错、永不写 stdout，避免污染命令的机器可读输出。
 export function maybeNotifyUpdate(currentVersion) {
   if (process.env.MANTURHUB_DISABLE_UPDATE_CHECK === "1") return;
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@manturhub/cli",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "ManturHub 算子广场 CLI：通过 REST 发现和调用 AI 算子、浏览配方，并安装 Skill 与 Agent 套件",
   "type": "module",
   "bin": {
@@ -9,6 +9,9 @@
   "engines": {
     "node": ">=18"
   },
+  "dependencies": {
+    "@vercel/detect-agent": "^1.2.1"
+  },
   "scripts": {
     "test": "node --test",
     "prepack": "npm test"

package/lib/mcp.js

@@ -1,108 +0,0 @@
-import { createInterface } from "node:readline";
-import { getKey, getBaseUrl } from "./config.js";
-
-// `manturhub mcp` — a stdio MCP server for clients (Claude Desktop / Codex /
-// Cursor …) that only speak stdio or whose remote-transport support is immature.
-//
-// It does NOT reimplement the MCP server: it relays each newline-delimited
-// JSON-RPC message from stdin to the remote ManturHub Streamable HTTP endpoint
-// (already standard-compliant) and writes the HTTP response back to stdout.
-// The remote handles initialize / tools/list / tools/call / scope. This is an
-// official, controlled equivalent of mcp-remote.
-export async function runMcpBridge({ scope = "manturhub" } = {}) {
-  const key = getKey();
-  if (!key) {
-    process.stderr.write(
-      "[manturhub legacy bridge] 未配置 API Key。运行 `manturhub login`，或设 MANTURHUB_KEY。\n"
-    );
-    process.exit(1);
-  }
-  const url = `${getBaseUrl()}/api/v1/mcp/${scope}/mcp`;
-  const rl = createInterface({ input: process.stdin });
-
-  // Track in-flight relays so we don't exit on stdin close while a fetch is
-  // still pending (real clients keep stdin open; piped input closes early).
-  let pending = 0;
-  let closed = false;
-  const maybeExit = () => {
-    if (closed && pending === 0) process.exit(0);
-  };
-
-  rl.on("line", (line) => {
-    const trimmed = line.trim();
-    if (!trimmed) return;
-    let msg;
-    try {
-      msg = JSON.parse(trimmed);
-    } catch {
-      return; // exactly one JSON value per line; ignore noise
-    }
-    pending++;
-    relay(url, key, msg).finally(() => {
-      pending--;
-      maybeExit();
-    });
-  });
-
-  rl.on("close", () => {
-    closed = true;
-    maybeExit();
-  });
-}
-
-async function relay(url, key, msg) {
-  try {
-    const res = await fetch(url, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Accept: "application/json, text/event-stream",
-        "x-api-key": key,
-        "MCP-Protocol-Version": "2025-06-18",
-      },
-      body: JSON.stringify(msg),
-    });
-
-    // 202 Accepted = notification/response acknowledged, no body to relay.
-    if (res.status === 202) return;
-
-    const ctype = res.headers.get("content-type") || "";
-    const text = await res.text();
-    if (!text) return;
-
-    if (ctype.includes("text/event-stream")) {
-      // Defensive: if the remote ever streams SSE, pull JSON-RPC from data: lines.
-      for (const evt of text.split(/\n\n/)) {
-        const data = evt
-          .split("\n")
-          .filter((l) => l.startsWith("data:"))
-          .map((l) => l.slice(5).trim())
-          .join("");
-        if (data) writeFrame(data);
-      }
-      return;
-    }
-
-    // Normal case: remote returns a single application/json JSON-RPC response.
-    writeFrame(text);
-  } catch (err) {
-    // Transport failure → return a JSON-RPC error for this id (requests only).
-    if (msg.id !== undefined && msg.id !== null) {
-      writeFrame(
-        JSON.stringify({
-          jsonrpc: "2.0",
-          id: msg.id,
-          error: {
-            code: -32603,
-            message: "manturhub bridge: " + (err?.message || "upstream error"),
-          },
-        })
-      );
-    }
-  }
-}
-
-// One JSON value per line (stdio framing). Collapse raw newlines so framing holds.
-function writeFrame(jsonText) {
-  process.stdout.write(jsonText.replace(/\r?\n/g, " ") + "\n");
-}