@nocobase/cli 2.1.2 → 2.1.4-rc.1

package/bin/early-locale.js

@@ -0,0 +1,89 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+export function normalizeEarlyCliLocale(value) {
+  const normalized = String(value ?? '')
+    .trim()
+    .replace(/\..*$/, '')
+    .replace(/_/g, '-')
+    .toLowerCase();
+
+  if (normalized === 'zh' || normalized.startsWith('zh-')) {
+    return 'zh-CN';
+  }
+
+  if (normalized === 'en' || normalized.startsWith('en-')) {
+    return 'en-US';
+  }
+
+  return undefined;
+}
+
+function readConfiguredEarlyCliLocale() {
+  try {
+    const cliHomeRoot = String(process.env.NB_CLI_ROOT ?? '').trim() || os.homedir();
+    const configPath = path.join(cliHomeRoot, '.nocobase', 'config.json');
+    const content = fs.readFileSync(configPath, 'utf8');
+    const parsed = JSON.parse(content);
+    return normalizeEarlyCliLocale(parsed?.settings?.locale);
+  } catch {
+    return undefined;
+  }
+}
+
+export function detectEarlyCliLocale() {
+  const candidates = [
+    process.env.NB_LOCALE,
+    readConfiguredEarlyCliLocale(),
+    process.env.LC_ALL,
+    process.env.LC_MESSAGES,
+    process.env.LANG,
+    Intl.DateTimeFormat().resolvedOptions().locale,
+  ];
+
+  for (const candidate of candidates) {
+    const locale = normalizeEarlyCliLocale(candidate);
+    if (locale) {
+      return locale;
+    }
+  }
+
+  return 'en-US';
+}
+
+function getEarlyLocalePathValue(input, key) {
+  let current = input;
+  for (const part of key.split('.')) {
+    if (!current || typeof current !== 'object' || !Object.prototype.hasOwnProperty.call(current, part)) {
+      return undefined;
+    }
+    current = current[part];
+  }
+  return typeof current === 'string' ? current : undefined;
+}
+
+function readEarlyLocaleMessages(locale) {
+  const moduleDir = path.dirname(fileURLToPath(import.meta.url));
+  const packageRoot = path.resolve(moduleDir, '..');
+  const localePaths = [
+    path.join(packageRoot, 'src', 'locale', `${locale}.json`),
+    path.join(packageRoot, 'dist', 'locale', `${locale}.json`),
+  ];
+
+  for (const localePath of localePaths) {
+    try {
+      return JSON.parse(fs.readFileSync(localePath, 'utf8'));
+    } catch {
+      // Try the next runtime layout.
+    }
+  }
+
+  return undefined;
+}
+
+export function translateEarlyCli(key, fallback, locale = detectEarlyCliLocale()) {
+  const messages = readEarlyLocaleMessages(locale);
+  return getEarlyLocalePathValue(messages, key) ?? fallback;
+}

package/bin/run.js

@@ -8,6 +8,7 @@ import pc from 'picocolors';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { formatUnsupportedNodeVersionMessage, isSupportedNodeVersion } from './node-version.js';
 import { normalizeNodeOptions, normalizeSessionEnv } from './session-env.js';
+import { ensureWindowsAdministrator } from './windows-admin.js';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const requireFromCli = createRequire(import.meta.url);
@@ -27,6 +28,8 @@ if (!isSupportedNodeVersion()) {
 normalizeSessionEnv();
 normalizeNodeOptions();
 
+ensureWindowsAdministrator();
+
 /**
  * In the monorepo, plain `node` cannot load `.ts`. Re-exec once with `--import <tsx>`
  * (same effect as a dedicated dev entry with `#!/usr/bin/env -S node --import tsx`).

package/bin/windows-admin.js

@@ -0,0 +1,60 @@
+import { spawnSync } from 'node:child_process';
+import pc from 'picocolors';
+import { detectEarlyCliLocale, translateEarlyCli } from './early-locale.js';
+
+const windowsAdministratorCheckScript = [
+  '$identity = [Security.Principal.WindowsIdentity]::GetCurrent();',
+  '$principal = New-Object Security.Principal.WindowsPrincipal($identity);',
+  'if ($principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { exit 0 }',
+  'exit 1',
+].join(' ');
+
+export function formatWindowsAdministratorRequiredMessage() {
+  const locale = detectEarlyCliLocale();
+  const message = translateEarlyCli(
+    'entry.windowsAdministratorRequired.message',
+    'NocoBase CLI must be run as Administrator on Windows.',
+    locale,
+  );
+  const hint = translateEarlyCli(
+    'entry.windowsAdministratorRequired.hint',
+    'Open your terminal as Administrator, then run the command again.',
+    locale,
+  );
+
+  return [message, hint].join('\n');
+}
+
+function isWindowsAdministrator() {
+  for (const command of ['pwsh.exe', 'powershell.exe']) {
+    const result = spawnSync(
+      command,
+      ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command', windowsAdministratorCheckScript],
+      {
+        stdio: 'ignore',
+        windowsHide: true,
+      },
+    );
+
+    if (result.error?.code === 'ENOENT') {
+      continue;
+    }
+
+    return result.status === 0;
+  }
+
+  return false;
+}
+
+export function ensureWindowsAdministrator() {
+  if (process.platform !== 'win32' || process.env.NB_CLI_WINDOWS_ADMIN_CHECKED === '1') {
+    return;
+  }
+
+  if (!isWindowsAdministrator()) {
+    console.error(pc.red(formatWindowsAdministratorRequiredMessage()));
+    process.exit(1);
+  }
+
+  process.env.NB_CLI_WINDOWS_ADMIN_CHECKED = '1';
+}

package/dist/commands/app/destroy.js

@@ -143,6 +143,7 @@ export default class AppDestroy extends Command {
         }
         announceTargetEnv(runtime.envName);
         try {
+            const retryCommand = `nb env remove ${runtime.envName} --purge --force`;
             if (runtime.kind === 'docker') {
                 startTask(`Removing Docker app container for "${runtime.envName}"...`);
                 const state = await removeDockerContainerIfExists(runtime.containerName, {
@@ -192,7 +193,7 @@ export default class AppDestroy extends Command {
                     const localAppPath = resolveManagedLocalAppPath(runtime);
                     if (localAppPath && removesManagedLocalAppFiles) {
                         startTask(`Removing managed local app files for "${runtime.envName}"...`);
-                        await removePathIfExists(localAppPath, `managed app files for "${runtime.envName}"`);
+                        await removePathIfExists(localAppPath, `managed app files for "${runtime.envName}"`, { retryCommand });
                         succeedTask(`Managed local app files removed for "${runtime.envName}".`);
                     }
                     else {
@@ -206,13 +207,13 @@ export default class AppDestroy extends Command {
                 ];
                 startTask(`Removing proxy entry files for "${runtime.envName}"...`);
                 for (const proxyEntryDir of proxyEntryDirs) {
-                    await removePathIfExists(proxyEntryDir, `proxy entry files for "${runtime.envName}"`);
+                    await removePathIfExists(proxyEntryDir, `proxy entry files for "${runtime.envName}"`, { retryCommand });
                 }
                 succeedTask(`Proxy entry files removed for "${runtime.envName}".`);
                 const configuredStoragePath = resolveConfiguredStoragePath(runtime.env.config);
                 if (configuredStoragePath) {
                     startTask(`Removing storage data for "${runtime.envName}"...`);
-                    await removePathIfExists(configuredStoragePath, `storage data for "${runtime.envName}"`);
+                    await removePathIfExists(configuredStoragePath, `storage data for "${runtime.envName}"`, { retryCommand });
                     succeedTask(`Storage data removed for "${runtime.envName}".`);
                 }
                 else {

package/dist/commands/app/shared.js

@@ -25,10 +25,54 @@ function assertSafeRemovalPath(target, label) {
         throw new Error(`Refusing to remove ${label} at "${resolved}" because it is too broad.`);
     }
 }
-export async function removePathIfExists(target, label) {
+function getErrorCode(error) {
+    if (!(error instanceof Error)) {
+        return undefined;
+    }
+    const { code } = error;
+    return typeof code === 'string' ? code : undefined;
+}
+function isPermissionDeniedError(error) {
+    const code = getErrorCode(error);
+    return code === 'EACCES' || code === 'EPERM';
+}
+function formatOriginalError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    const code = getErrorCode(error);
+    return code && !message.includes(code) ? `${code}: ${message}` : message;
+}
+function quoteShellValue(value) {
+    return `"${value.replace(/(["\\$`])/g, '\\$1')}"`;
+}
+function formatPermissionDeniedRemovalError(target, label, error, options) {
+    const retryLines = os.platform() === 'win32' ? [] : [`  sudo chown -R "$(id -u):$(id -g)" ${quoteShellValue(target)}`];
+    if (options.retryCommand) {
+        retryLines.push(`  ${options.retryCommand}`);
+    }
+    return [
+        `Failed to remove ${label} at "${target}".`,
+        'The current user cannot delete one or more files under this path. Files may have been created by a Docker container running as root.',
+        '',
+        retryLines.length > 0
+            ? 'Fix ownership or permissions, then retry:'
+            : 'Fix ownership or permissions, then retry the command.',
+        ...retryLines,
+        '',
+        `Original error: ${formatOriginalError(error)}`,
+    ].join('\n');
+}
+export async function removePathIfExists(target, label, options = {}) {
     const resolved = path.resolve(target);
     assertSafeRemovalPath(resolved, label);
-    await fsp.rm(resolved, { recursive: true, force: true });
+    try {
+        await fsp.rm(resolved, { recursive: true, force: true });
+    }
+    catch (error) {
+        if (isPermissionDeniedError(error)) {
+            throw new Error(formatPermissionDeniedRemovalError(resolved, label, error, options));
+        }
+        throw error;
+    }
 }
 function isMissingDockerContainerError(error) {
     const message = error instanceof Error ? error.message : String(error);
@@ -116,7 +160,9 @@ export function managedDockerNetworkName(runtime) {
     return runtime.dockerNetworkName?.trim() || runtime.workspaceName?.trim() || undefined;
 }
 export function resolveManagedLocalAppPath(runtime) {
-    return resolveConfiguredAppPath(runtime.env.config) || runtime.projectRoot || resolveConfiguredPath(runtime.env.config.appRootPath);
+    return (resolveConfiguredAppPath(runtime.env.config) ||
+        runtime.projectRoot ||
+        resolveConfiguredPath(runtime.env.config.appRootPath));
 }
 export function shouldRemoveManagedLocalAppFiles(runtime) {
     return runtime.source === 'npm' || runtime.source === 'git' || runtime.source === 'local';

package/dist/commands/examples/prompts-stages.js

@@ -109,8 +109,8 @@ export default class PromptsStages extends Command {
                 values: presetValues,
                 pageTitle: 'nb prompts-stages — Web UI',
                 documentHeading: 'nb prompts-stages — `stages` demo',
-                onServerStart: ({ host, port, url }) => {
-                    this.log(`Local Web UI (multi-stage) ready — ${url} (listening on ${host}:${port}). Submit the form in the browser to continue.`);
+                onServerStart: ({ listenHost, port, url }) => {
+                    this.log(`Local Web UI (multi-stage) ready — ${url} (listening on ${listenHost}:${port}). Submit the form in the browser to continue.`);
                 },
                 onOpenBrowserError: (url, err) => {
                     this.log(`Open this URL in a browser: ${url} (${err instanceof Error ? err.message : String(err)})`);

package/dist/commands/examples/prompts-test.js

@@ -139,8 +139,8 @@ export default class PromptsTest extends Command {
                 values: presetValues,
                 pageTitle: 'nb prompts-test — UI',
                 documentHeading: 'nb prompts-test',
-                onServerStart: ({ host, port, url }) => {
-                    this.log(`Local Web UI ready — ${url} (listening on ${host}:${port}). Submit the form in the browser to continue.`);
+                onServerStart: ({ listenHost, port, url }) => {
+                    this.log(`Local Web UI ready — ${url} (listening on ${listenHost}:${port}). Submit the form in the browser to continue.`);
                 },
                 onOpenBrowserError: (url, err) => {
                     this.log(`Open this URL in a browser: ${url} (${err instanceof Error ? err.message : String(err)})`);

package/dist/commands/init.js

@@ -471,7 +471,7 @@ Prompt modes:
             default: false,
         }),
         'ui-host': Flags.string({
-            description: 'Host for the local --ui setup server (default: 127.0.0.1)',
+            description: 'Browser-accessible host for the --ui setup page URL (default: 127.0.0.1)',
         }),
         'ui-port': Flags.integer({
             description: 'Port for the local --ui setup server; 0 lets the OS choose an available port',

package/dist/commands/license/activate.js

@@ -143,11 +143,14 @@ export default class LicenseActivate extends Command {
         const validation = await validateLicenseKey(runtime, resolvedKey);
         const ok = !validation.keyStatus && validation.envMatch && validation.domainMatch && validation.licenseStatus === 'active';
         const licenseKeyPath = ok ? await saveLicenseKey(runtime, resolvedKey) : resolveLicenseKeyFile(runtime);
+        const shouldResolveInstanceId = Boolean(interactiveKeyFlowInstanceId || ok || (flags.json && !validation.keyStatus));
         const payload = {
             ok,
             env: runtime.envName,
             kind: runtime.kind,
-            instanceId: interactiveKeyFlowInstanceId ?? (await ensureInstanceId(runtime)),
+            instanceId: shouldResolveInstanceId
+                ? interactiveKeyFlowInstanceId ?? (await ensureInstanceId(runtime))
+                : undefined,
             mode: 'key',
             key: redactLicenseKey(resolvedKey),
             keyFile: keyFile || undefined,

package/dist/commands/license/shared.js

@@ -10,8 +10,8 @@ import { Flags } from '@oclif/core';
 import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { getEnvAsync, getInstanceIdAsync, keyDecrypt } from '@nocobase/license-kit';
-import { checkExternalDbConnection, readExternalDbConnectionConfig, } from "../../lib/db-connection-check.js";
-import { DEFAULT_DOCKER_REGISTRY, DEFAULT_DOCKER_VERSION, resolveDockerImageRef, } from "../../lib/docker-image.js";
+import { checkExternalDbConnection, readExternalDbConnectionConfig } from "../../lib/db-connection-check.js";
+import { DEFAULT_DOCKER_REGISTRY, DEFAULT_DOCKER_VERSION, resolveDockerImageRef } from "../../lib/docker-image.js";
 import { formatMissingManagedAppEnvMessage, resolveManagedAppRuntime } from '../../lib/app-runtime.js';
 import { buildRuntimeEnvVars } from '../../lib/runtime-env-vars.js';
 import { resolveLicensePkgUrlFromConfig } from '../../lib/cli-config.js';
@@ -102,12 +102,7 @@ function buildDockerLicenseDbFlagArgs(envVars) {
     ];
 }
 async function runDockerLicenseJsonCommand(runtime, commandArgs) {
-    const args = [
-        'run',
-        '--rm',
-        '--network',
-        runtime.dockerNetworkName || runtime.workspaceName,
-    ];
+    const args = ['run', '--rm', '--network', runtime.dockerNetworkName || runtime.workspaceName];
     const dockerPlatform = normalizeDockerPlatform(runtime.env.config?.dockerPlatform);
     if (dockerPlatform) {
         args.push('--platform', dockerPlatform);
@@ -193,11 +188,11 @@ export async function generateValidatedInstanceIdFromEnvVars(envVars) {
 }
 async function generateInstanceIdForDockerRuntime(runtime) {
     const envVars = await buildRuntimeEnvVars(runtime);
-    const payload = await runDockerLicenseJsonCommand(runtime, [
+    const payload = (await runDockerLicenseJsonCommand(runtime, [
         'license',
         'generate-id',
         ...buildDockerLicenseDbFlagArgs(envVars),
-    ]);
+    ]));
     const instanceId = trimValue(payload.instanceId);
     if (!instanceId) {
         throw new Error('Docker instance ID generation did not return an instance ID.');
@@ -337,7 +332,7 @@ export async function getLicenseStatus(keyData) {
             }),
             signal: controller.signal,
         });
-        const payload = await response.json();
+        const payload = (await response.json());
         return payload?.data?.status === 'active' ? 'active' : 'invalid';
     }
     catch {
@@ -356,6 +351,22 @@ export async function validateLicenseKey(runtime, key) {
     catch {
         keyStatus = 'invalid';
     }
+    if (keyStatus) {
+        const currentDomain = appUrl(runtime);
+        return {
+            current: {
+                env: undefined,
+                domain: currentDomain ? new URL(currentDomain).host : '',
+            },
+            keyData,
+            keyStatus,
+            dbMatch: false,
+            sysMatch: false,
+            envMatch: false,
+            domainMatch: false,
+            licenseStatus: 'invalid',
+        };
+    }
     const currentEnv = await getCurrentLicenseEnv(runtime);
     const currentDomain = appUrl(runtime);
     const dbMatch = isDbMatch(currentEnv, keyData);
@@ -391,7 +402,7 @@ export async function resolveLicenseServiceUrl(value) {
     return (await resolveLicensePkgUrl(value)).replace(/\/+$/, '');
 }
 export async function resolveLicensePkgUrl(value) {
-    const normalized = String(value ?? '').trim() || await resolveLicensePkgUrlFromConfig();
+    const normalized = String(value ?? '').trim() || (await resolveLicensePkgUrlFromConfig());
     return normalized.replace(/\/+$/, '') + '/';
 }
 function shouldRedactOutputKey(key) {
@@ -414,9 +425,7 @@ export function sanitizeLicenseOutput(value) {
     if (value && typeof value === 'object') {
         return Object.fromEntries(Object.entries(value).map(([key, nestedValue]) => [
             key,
-            shouldRedactOutputKey(key)
-                ? redactOutputValue(String(nestedValue ?? ''))
-                : sanitizeLicenseOutput(nestedValue),
+            shouldRedactOutputKey(key) ? redactOutputValue(String(nestedValue ?? '')) : sanitizeLicenseOutput(nestedValue),
         ]));
     }
     return value;

package/dist/commands/self/check.js

@@ -20,7 +20,7 @@ export default class SelfCheck extends Command {
     static flags = {
         channel: Flags.string({
             description: 'Release channel to compare against. Defaults to the current CLI channel.',
-            options: ['auto', 'latest', 'beta', 'alpha'],
+            options: ['auto', 'latest', 'test', 'beta', 'alpha'],
             default: 'auto',
         }),
         json: Flags.boolean({

package/dist/commands/self/update.js

@@ -31,12 +31,12 @@ export default class SelfUpdate extends Command {
         '<%= config.bin %> <%= command.id %>',
         '<%= config.bin %> <%= command.id %> --yes',
         '<%= config.bin %> <%= command.id %> --skills',
-        '<%= config.bin %> <%= command.id %> --channel alpha --json',
+        '<%= config.bin %> <%= command.id %> --channel test --json',
     ];
     static flags = {
         channel: Flags.string({
             description: 'Release channel to update to. Defaults to the current CLI channel.',
-            options: ['auto', 'latest', 'beta', 'alpha'],
+            options: ['auto', 'latest', 'test', 'beta', 'alpha'],
             default: 'auto',
         }),
         yes: Flags.boolean({

package/dist/commands/skills/check.js

@@ -12,10 +12,7 @@ import { printInfo, renderTable } from '../../lib/ui.js';
 export default class SkillsCheck extends Command {
     static summary = 'Check the globally installed NocoBase AI coding skills';
     static description = 'Inspect the global NocoBase AI coding skills and report whether they are managed by the CLI and whether an update is available.';
-    static examples = [
-        '<%= config.bin %> <%= command.id %>',
-        '<%= config.bin %> <%= command.id %> --json',
-    ];
+    static examples = ['<%= config.bin %> <%= command.id %>', '<%= config.bin %> <%= command.id %> --json'];
     static flags = {
         json: Flags.boolean({
             description: 'Output the result as JSON',
@@ -25,6 +22,7 @@ export default class SkillsCheck extends Command {
     async run() {
         const { flags } = await this.parse(SkillsCheck);
         const status = await inspectSkillsStatus();
+        const displaySkillNames = status.packageSkillNames.length ? status.packageSkillNames : status.installedSkillNames;
         if (flags.json) {
             this.log(JSON.stringify({
                 ok: true,
@@ -35,6 +33,7 @@ export default class SkillsCheck extends Command {
                 managedByNb: status.managedByNb,
                 sourcePackage: status.sourcePackage,
                 npmPackageName: status.npmPackageName,
+                packageSkillNames: status.packageSkillNames,
                 installedSkillNames: status.installedSkillNames,
                 installedVersion: status.installedVersion,
                 latestVersion: status.latestVersion,
@@ -50,7 +49,7 @@ export default class SkillsCheck extends Command {
             ['Skills home', status.globalRoot],
             ['Installed', status.installed ? 'yes' : 'no'],
             ['Managed by nb', status.managedByNb ? 'yes' : 'no'],
-            ['Installed skills', status.installedSkillNames.length ? status.installedSkillNames.join(', ') : '(none)'],
+            ['Installed skills', displaySkillNames.length ? displaySkillNames.join(', ') : '(none)'],
             ['Installed version', status.installedVersion ?? '(unknown)'],
             ['Latest version', status.latestVersion ?? '(unknown)'],
             ['Update available', status.updateAvailable === null ? 'unknown' : status.updateAvailable ? 'yes' : 'no'],

package/dist/commands/skills/install.js

@@ -16,6 +16,7 @@ export default class SkillsInstall extends Command {
     static examples = [
         '<%= config.bin %> <%= command.id %>',
         '<%= config.bin %> <%= command.id %> --yes',
+        '<%= config.bin %> <%= command.id %> --version 1.0.4',
         '<%= config.bin %> <%= command.id %> --json',
     ];
     static flags = {
@@ -32,6 +33,9 @@ export default class SkillsInstall extends Command {
             description: 'Show detailed install output',
             default: false,
         }),
+        version: Flags.string({
+            description: 'Install a specific @nocobase/skills version',
+        }),
     };
     async run() {
         const { flags } = await this.parse(SkillsInstall);
@@ -52,6 +56,7 @@ export default class SkillsInstall extends Command {
             }
         }
         const result = await installNocoBaseSkills({
+            targetVersion: flags.version,
             verbose: flags.verbose,
         });
         if (flags.json) {

package/dist/commands/skills/update.js

@@ -8,7 +8,7 @@
  */
 import { Command, Flags } from '@oclif/core';
 import { confirm } from "../../lib/inquirer.js";
-import { setVerboseMode } from '../../lib/ui.js';
+import { setVerboseMode, startTask, stopTask } from '../../lib/ui.js';
 import { updateNocoBaseSkills } from '../../lib/skills-manager.js';
 export default class SkillsUpdate extends Command {
     static summary = 'Update the globally installed NocoBase AI coding skills';
@@ -16,6 +16,7 @@ export default class SkillsUpdate extends Command {
     static examples = [
         '<%= config.bin %> <%= command.id %>',
         '<%= config.bin %> <%= command.id %> --yes',
+        '<%= config.bin %> <%= command.id %> --version 1.0.4',
         '<%= config.bin %> <%= command.id %> --json',
     ];
     static flags = {
@@ -32,6 +33,9 @@ export default class SkillsUpdate extends Command {
             description: 'Show detailed update output',
             default: false,
         }),
+        version: Flags.string({
+            description: 'Sync to a specific @nocobase/skills version',
+        }),
     };
     async run() {
         const { flags } = await this.parse(SkillsUpdate);
@@ -51,8 +55,19 @@ export default class SkillsUpdate extends Command {
                 return;
             }
         }
+        const shouldShowLoading = !flags.json && !flags.verbose;
+        if (shouldShowLoading) {
+            startTask(flags.version
+                ? `Syncing NocoBase AI coding skills to ${flags.version}...`
+                : 'Updating NocoBase AI coding skills...');
+        }
         const result = await updateNocoBaseSkills({
+            targetVersion: flags.version,
             verbose: flags.verbose,
+        }).finally(() => {
+            if (shouldShowLoading) {
+                stopTask();
+            }
         });
         if (flags.json) {
             this.log(JSON.stringify({
@@ -80,8 +95,6 @@ export default class SkillsUpdate extends Command {
                 : 'NocoBase AI coding skills are up to date.');
             return;
         }
-        this.log(flags.verbose
-            ? 'Updated the global NocoBase AI coding skills.'
-            : 'Updated NocoBase AI coding skills globally.');
+        this.log(flags.verbose ? 'Updated the global NocoBase AI coding skills.' : 'Updated NocoBase AI coding skills globally.');
     }
 }

package/dist/lib/api-command-compat.js

@@ -114,12 +114,22 @@ function compareWithOperator(version, operator, expected) {
 }
 function normalizeAppByChannelComparableVersion(version) {
     const normalized = String(version ?? '').trim();
-    const match = normalized.match(/^(\d+\.\d+\.\d+)-(alpha|beta|rc)(?:\.(\d+))?(?:\..+)?$/);
+    const match = normalized.match(/^(\d+\.\d+\.\d+)(?:-([0-9A-Za-z-.]+))?$/);
     if (!match) {
         return normalized;
     }
-    const [, base, channel, sequence] = match;
-    return sequence ? `${base}-${channel}.${sequence}` : `${base}-${channel}`;
+    const [, base, prerelease] = match;
+    if (!prerelease) {
+        return base;
+    }
+    const [channel, sequence] = prerelease.split('.');
+    if ((channel === 'alpha' || channel === 'beta') && sequence && /^\d+$/.test(sequence)) {
+        return `${base}-${channel}.${sequence}`;
+    }
+    if (channel === 'alpha' || channel === 'beta') {
+        return `${base}-${channel}`;
+    }
+    return base;
 }
 function normalizeAppByChannelCondition(condition) {
     if (!condition) {
@@ -134,6 +144,42 @@ function normalizeAppByChannelCondition(condition) {
     }
     return normalized;
 }
+function compareAppByChannelVersions(version, expected) {
+    const comparableVersion = normalizeAppByChannelComparableVersion(version);
+    const comparableExpected = normalizeAppByChannelComparableVersion(expected);
+    if (comparableVersion === comparableExpected ||
+        comparableVersion.startsWith(`${comparableExpected}.`) ||
+        comparableVersion.startsWith(`${comparableExpected}-`)) {
+        return 0;
+    }
+    return compareVersions(comparableVersion, comparableExpected);
+}
+function compareAppByChannelWithOperator(version, operator, expected) {
+    const compared = compareAppByChannelVersions(version, expected);
+    switch (operator) {
+        case 'eq':
+            return compared === 0;
+        case 'gt':
+            return compared > 0;
+        case 'gte':
+            return compared >= 0;
+        case 'lt':
+            return compared < 0;
+        case 'lte':
+            return compared <= 0;
+        default:
+            return false;
+    }
+}
+function matchesAppByChannelVersionCondition(version, condition) {
+    if (!condition) {
+        return true;
+    }
+    return ['eq', 'gt', 'gte', 'lt', 'lte'].every((operator) => {
+        const expected = condition[operator];
+        return expected ? compareAppByChannelWithOperator(version, operator, expected) : true;
+    });
+}
 function matchesVersionCondition(version, condition) {
     if (!condition) {
         return true;
@@ -168,10 +214,7 @@ function resolveAppChannel(version) {
     if (channel === 'beta') {
         return 'beta';
     }
-    if (channel === 'rc') {
-        return 'rc';
-    }
-    return 'unknownPrerelease';
+    return 'stable';
 }
 function evaluateAppByChannelCondition(version, condition) {
     if (!condition) {
@@ -208,7 +251,7 @@ function evaluateAppByChannelCondition(version, condition) {
     const comparableVersion = normalizeAppByChannelComparableVersion(version);
     const comparableCondition = normalizeAppByChannelCondition(channelCondition);
     return {
-        result: matchesVersionCondition(comparableVersion, comparableCondition) ? 'match' : 'mismatch',
+        result: matchesAppByChannelVersionCondition(comparableVersion, comparableCondition) ? 'match' : 'mismatch',
         channel,
         condition: channelCondition,
     };

package/dist/lib/prompt-web-ui.js

@@ -19,7 +19,8 @@ export const PWC_FORM_META_STEP = '_pwcStep';
 /** Form POST JSON meta field: current field key when validating a single field. */
 export const PWC_FORM_META_FIELD = '_pwcField';
 const DEFAULT_TIMEOUT_MS = 30 * 60 * 1000;
-const DEFAULT_HOST = '127.0.0.1';
+const DEFAULT_PUBLIC_HOST = '127.0.0.1';
+const LISTEN_HOST = '0.0.0.0';
 function resolveUiText(text, locale, fallback = '') {
     return resolveLocalizedText(text, { locale, fallback });
 }
@@ -705,7 +706,7 @@ function runPromptCatalogWebUIImpl(options) {
     const initialShow = reflowWebFormState(merged, Object.fromEntries(Object.entries(formDefaults).map(([k, v]) => [k, v])), userSeed).show;
     const submitPath = options.submitPath ?? DEFAULT_SUBMIT;
     const reflowPath = options.reflowPath ?? DEFAULT_REFLOW;
-    const host = options.host ?? DEFAULT_HOST;
+    const publicHost = options.host ?? DEFAULT_PUBLIC_HOST;
     const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
     const pageTitle = resolveUiText(options.pageTitle, locale, t('promptCatalog.web.pageTitle'));
     const h1 = resolveUiText(options.documentHeading, locale, t('promptCatalog.web.documentHeading'));
@@ -753,7 +754,7 @@ function runPromptCatalogWebUIImpl(options) {
             }
         };
         const servePage = (port) => {
-            const base = `http://${host}:${port}`;
+            const base = `http://${publicHost}:${port}`;
             const formInner = buildPwcFormHtml(catalog, formDefaults, initialShow, pwcStepDefs, 0, pwcNSteps, locale, uiText);
             const wizardClientJson = JSON.stringify({ n: pwcNSteps, stepDefs: pwcStepDefs });
             const pwcValStepUrl = pwcNSteps > 1 ? JSON.stringify(base + resolveValidateStepPath) : 'null';
@@ -2071,11 +2072,6 @@ function runPromptCatalogWebUIImpl(options) {
             return page;
         };
         server = createServer((req, res) => {
-            if (!req.socket.remoteAddress ||
-                !['127.0.0.1', '::1', '::ffff:127.0.0.1'].includes(req.socket.remoteAddress)) {
-                res.writeHead(403).end();
-                return;
-            }
             if (req.method === 'GET' && (req.url === '/' || req.url === '')) {
                 const addr = server?.address();
                 const port = typeof addr === 'object' && addr ? Number(addr.port) : 0;
@@ -2212,15 +2208,15 @@ function runPromptCatalogWebUIImpl(options) {
             }
             res.writeHead(404).end();
         });
-        server.listen(options.port ?? 0, host, () => {
+        server.listen(options.port ?? 0, LISTEN_HOST, () => {
             const addr = server?.address();
             if (typeof addr !== 'object' || !addr) {
                 rejectAndClose(new Error('Failed to bind HTTP server'));
                 return;
             }
             const port = addr.port;
-            const startUrl = `http://${host}:${port}/`;
-            options.onServerStart?.({ host, port, url: startUrl });
+            const startUrl = `http://${publicHost}:${port}/`;
+            options.onServerStart?.({ host: publicHost, listenHost: LISTEN_HOST, port, url: startUrl });
             const onOpenBrowserError = options.onOpenBrowserError ?? ((u, err) => console.warn(String(err), u));
             try {
                 openUrlInDefaultBrowser(startUrl, onOpenBrowserError);

package/dist/lib/self-manager.js

@@ -97,6 +97,9 @@ function detectChannel(currentVersion) {
     if (/-beta(?:[.-]|$)/i.test(currentVersion)) {
         return 'beta';
     }
+    if (/-test(?:[.-]|$)/i.test(currentVersion)) {
+        return 'test';
+    }
     return 'latest';
 }
 function readCurrentVersion(packageRoot) {

package/dist/lib/skills-manager.js

@@ -154,10 +154,13 @@ export async function listGlobalSkills(options = {}) {
 export async function listProjectSkills(options = {}) {
     return await listGlobalSkills(options);
 }
-function pickInstalledNocoBaseSkillNames(installedSkills, state) {
+function pickInstalledNocoBaseSkillNames(installedSkills, state, sourceSkillNames = []) {
     const installedNames = new Set(installedSkills.map((skill) => String(skill.name ?? '').trim()).filter(Boolean));
-    if (state?.skillNames?.length) {
-        return state.skillNames.filter((name) => installedNames.has(name)).sort();
+    const managedNames = new Set([...sourceSkillNames, ...(state?.skillNames ?? [])]);
+    if (managedNames.size > 0) {
+        return Array.from(managedNames)
+            .filter((name) => installedNames.has(name))
+            .sort();
     }
     return Array.from(installedNames)
         .filter((name) => name.startsWith(NOCOBASE_SKILLS_NAME_PREFIX))
@@ -194,6 +197,31 @@ async function readCachedSkillsVersion(cacheRoot) {
         return undefined;
     }
 }
+async function readCachedPackageSkillNames(globalRoot) {
+    const skillsDir = path.join(getCachedSkillsPackageDir(getSkillsCacheRoot(globalRoot)), 'skills');
+    try {
+        const entries = await fsp.readdir(skillsDir, { withFileTypes: true });
+        const skillNames = await Promise.all(entries
+            .filter((entry) => entry.isDirectory())
+            .map(async (entry) => {
+            const skillName = entry.name.trim();
+            if (!skillName) {
+                return undefined;
+            }
+            try {
+                await fsp.access(path.join(skillsDir, skillName, 'SKILL.md'));
+                return skillName;
+            }
+            catch {
+                return undefined;
+            }
+        }));
+        return skillNames.filter((name) => Boolean(name)).sort();
+    }
+    catch {
+        return [];
+    }
+}
 async function resolvePackedSkillsTarball(packRoot) {
     const entries = await fsp.readdir(packRoot, { withFileTypes: true });
     const tarballs = entries
@@ -279,14 +307,16 @@ async function prepareLocalSkillsPackage(globalRoot, options = {}, targetVersion
 export async function inspectSkillsStatus(options = {}) {
     const globalRoot = resolveSkillsRoot(options);
     const stateFile = getManagedSkillsStateFile(globalRoot);
-    const [installedSkills, managedState] = await Promise.all([
+    const [installedSkills, managedState, cachedSkillNames] = await Promise.all([
         listGlobalSkills({
             globalRoot,
             commandOutputFn: options.commandOutputFn,
         }),
         readManagedSkillsState(globalRoot),
+        readCachedPackageSkillNames(globalRoot),
     ]);
-    const installedSkillNames = pickInstalledNocoBaseSkillNames(installedSkills, managedState);
+    const installedSkillNames = pickInstalledNocoBaseSkillNames(installedSkills, managedState, cachedSkillNames);
+    const packageSkillNames = cachedSkillNames;
     const managedByNb = managedState?.packageName === NOCOBASE_SKILLS_PACKAGE_NAME;
     let latestVersion;
     let registryError;
@@ -312,6 +342,7 @@ export async function inspectSkillsStatus(options = {}) {
         managedByNb,
         sourcePackage: managedState?.sourcePackage ?? NOCOBASE_SKILLS_SOURCE,
         npmPackageName: managedState?.packageName ?? NOCOBASE_SKILLS_PACKAGE_NAME,
+        packageSkillNames,
         installedSkillNames,
         latestVersion,
         installedVersion,
@@ -321,13 +352,18 @@ export async function inspectSkillsStatus(options = {}) {
         registryError,
     };
 }
-async function persistManagedSkillsState(globalRoot, options = {}) {
-    const installedSkills = await listGlobalSkills({
-        globalRoot,
-        commandOutputFn: options.commandOutputFn,
-    });
-    const managedState = await readManagedSkillsState(globalRoot);
-    const installedSkillNames = pickInstalledNocoBaseSkillNames(installedSkills, managedState);
+async function persistManagedSkillsState(globalRoot, options = {}, installedVersion) {
+    const [installedSkills, managedState, cachedSkillNames] = await Promise.all([
+        listGlobalSkills({
+            globalRoot,
+            commandOutputFn: options.commandOutputFn,
+        }),
+        readManagedSkillsState(globalRoot),
+        readCachedPackageSkillNames(globalRoot),
+    ]);
+    const installedSkillNames = pickInstalledNocoBaseSkillNames(installedSkills, managedState, cachedSkillNames);
+    const packageSkillNames = cachedSkillNames.length ? cachedSkillNames : installedSkillNames;
+    const cachedVersion = await readCachedSkillsVersion(getSkillsCacheRoot(globalRoot));
     const published = await readPublishedSkillsVersion({
         globalRoot,
         commandOutputFn: options.commandOutputFn,
@@ -338,8 +374,8 @@ async function persistManagedSkillsState(globalRoot, options = {}) {
         sourcePackage: NOCOBASE_SKILLS_SOURCE,
         installedAt: managedState?.installedAt ?? now,
         updatedAt: now,
-        installedVersion: published.version,
-        skillNames: installedSkillNames,
+        installedVersion: installedVersion ?? cachedVersion ?? published.version,
+        skillNames: packageSkillNames,
     });
     return await inspectSkillsStatus({
         globalRoot,
@@ -349,7 +385,7 @@ async function persistManagedSkillsState(globalRoot, options = {}) {
 async function reinstallManagedSkills(globalRoot, options = {}, targetVersion) {
     const prepared = await prepareLocalSkillsPackage(globalRoot, options, targetVersion);
     try {
-        await (options.runFn ?? run)('npx', ['-y', 'skills', 'add', prepared.packageDir, '-g', '-y'], {
+        await (options.runFn ?? run)('npx', ['-y', 'skills', 'add', prepared.packageDir, '-g', '-y', '--skill', '*'], {
             cwd: globalRoot,
             stdio: options.verbose ? 'inherit' : 'ignore',
             errorName: 'skills add',
@@ -360,23 +396,50 @@ async function reinstallManagedSkills(globalRoot, options = {}, targetVersion) {
         await prepared.cleanup();
     }
 }
+function pickObsoleteManagedSkillNames(installedSkillNames, packageSkillNames) {
+    if (!packageSkillNames.length) {
+        return [];
+    }
+    const packageSkillNameSet = new Set(packageSkillNames);
+    return installedSkillNames.filter((skillName) => !packageSkillNameSet.has(skillName)).sort();
+}
+async function removeObsoleteManagedSkills(globalRoot, installedSkillNames, options = {}) {
+    const packageSkillNames = await readCachedPackageSkillNames(globalRoot);
+    const obsoleteSkillNames = pickObsoleteManagedSkillNames(installedSkillNames, packageSkillNames);
+    for (const skillName of obsoleteSkillNames) {
+        await (options.runFn ?? run)('npx', ['-y', 'skills', 'remove', skillName, '-g', '-y'], {
+            cwd: globalRoot,
+            stdio: options.verbose ? 'inherit' : 'ignore',
+            errorName: 'skills remove',
+        });
+    }
+}
 export async function installNocoBaseSkills(options = {}) {
     const globalRoot = resolveSkillsRoot(options);
     const status = await inspectSkillsStatus({
         globalRoot,
         commandOutputFn: options.commandOutputFn,
     });
-    if (status.installed) {
+    const cachedSkillNames = await readCachedPackageSkillNames(globalRoot);
+    const missingCachedSkillNames = cachedSkillNames.filter((name) => !status.installedSkillNames.includes(name));
+    const obsoleteSkillNames = pickObsoleteManagedSkillNames(status.installedSkillNames, cachedSkillNames);
+    const targetVersion = String(options.targetVersion ?? '').trim() || undefined;
+    const targetVersionMatches = !targetVersion || status.installedVersion === targetVersion;
+    if (status.installed && targetVersionMatches && missingCachedSkillNames.length === 0 && obsoleteSkillNames.length === 0) {
         return {
             action: 'noop',
             status,
         };
     }
     await ensureSkillsWorkspaceRoot(globalRoot);
-    await reinstallManagedSkills(globalRoot, options, status.latestVersion);
+    if (!status.installed || !targetVersionMatches || missingCachedSkillNames.length > 0) {
+        const installVersion = targetVersion ?? status.latestVersion;
+        await reinstallManagedSkills(globalRoot, options, installVersion);
+    }
+    await removeObsoleteManagedSkills(globalRoot, status.installedSkillNames, options);
     return {
         action: 'installed',
-        status: await persistManagedSkillsState(globalRoot, options),
+        status: await persistManagedSkillsState(globalRoot, options, targetVersion),
     };
 }
 export async function updateNocoBaseSkills(options = {}) {
@@ -385,6 +448,10 @@ export async function updateNocoBaseSkills(options = {}) {
         globalRoot,
         commandOutputFn: options.commandOutputFn,
     });
+    const cachedSkillNames = await readCachedPackageSkillNames(globalRoot);
+    const missingCachedSkillNames = cachedSkillNames.filter((name) => !status.installedSkillNames.includes(name));
+    const obsoleteSkillNames = pickObsoleteManagedSkillNames(status.installedSkillNames, cachedSkillNames);
+    const targetVersion = String(options.targetVersion ?? '').trim() || undefined;
     if (!status.installed) {
         return {
             action: 'noop',
@@ -393,8 +460,11 @@ export async function updateNocoBaseSkills(options = {}) {
         };
     }
     if (status.managedByNb &&
+        !targetVersion &&
         status.latestVersion &&
         status.installedVersion &&
+        missingCachedSkillNames.length === 0 &&
+        obsoleteSkillNames.length === 0 &&
         compareVersions(status.latestVersion, status.installedVersion) <= 0) {
         return {
             action: 'noop',
@@ -402,10 +472,24 @@ export async function updateNocoBaseSkills(options = {}) {
             status,
         };
     }
-    await reinstallManagedSkills(globalRoot, options, status.latestVersion);
+    if (targetVersion &&
+        status.installedVersion === targetVersion &&
+        missingCachedSkillNames.length === 0 &&
+        obsoleteSkillNames.length === 0) {
+        return {
+            action: 'noop',
+            reason: 'up-to-date',
+            status,
+        };
+    }
+    if (!targetVersion || status.installedVersion !== targetVersion || missingCachedSkillNames.length > 0) {
+        const installVersion = targetVersion ?? status.latestVersion;
+        await reinstallManagedSkills(globalRoot, options, installVersion);
+    }
+    await removeObsoleteManagedSkills(globalRoot, status.installedSkillNames, options);
     return {
         action: 'updated',
-        status: await persistManagedSkillsState(globalRoot, options),
+        status: await persistManagedSkillsState(globalRoot, options, targetVersion),
     };
 }
 export async function removeNocoBaseSkills(options = {}) {

package/dist/locale/en-US.json

@@ -1,4 +1,10 @@
 {
+  "entry": {
+    "windowsAdministratorRequired": {
+      "message": "NocoBase CLI must be run as Administrator on Windows.",
+      "hint": "Open your terminal as Administrator, then run the command again."
+    }
+  },
   "promptCatalog": {
     "common": {
       "cancelled": "Cancelled.",

package/dist/locale/zh-CN.json

@@ -1,4 +1,10 @@
 {
+  "entry": {
+    "windowsAdministratorRequired": {
+      "message": "Windows 上运行 NocoBase CLI 必须使用管理员模式。",
+      "hint": "请以管理员身份打开终端，然后重新执行命令。"
+    }
+  },
   "promptCatalog": {
     "common": {
       "cancelled": "已取消。",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nocobase/cli",
-  "version": "2.1.2",
+  "version": "2.1.4-rc.1",
   "description": "NocoBase Command Line Tool",
   "type": "module",
   "main": "dist/generated/command-registry.js",
@@ -142,6 +142,5 @@
   "repository": {
     "type": "git",
     "url": "git+https://github.com/nocobase/nocobase.git"
-  },
-  "gitHead": "e1b28561425c5c34ff3bc6ae1f81c66b72f02872"
+  }
 }