@wwkit/opm 1.0.13 → 1.0.15

package/src/cli/groups/ping.js

@@ -18,6 +18,9 @@ import { getActiveProxy, getActiveRegistry, getConfig } from '../../config.js'
 
 const shell = new Shell()
 
+// 跨平台 null device（curl -o 丢弃输出体）
+const NULL_DEV = process.platform === 'win32' ? 'NUL' : '/dev/null'
+
 /**
  * 从 URL 或 deb 行中提取主机名和端口（用于 ping 目标）
  * @param {string} url
@@ -46,6 +49,15 @@ function isUrl(addr) {
   return /^https?:\/\//i.test(addr)
 }
 
+// HTTP 状态码 → 可达性判断：2xx/3xx 视为可达，allowlist 中的状态码
+// 虽非成功响应但证明服务器已响应（如 404 表示主机/代理存活，
+// 429 表示临时限流，服务器实际存活）
+const REACHABLE_ALLOWLIST = [404, 429]
+
+function httpReachable(httpCode) {
+  return (httpCode >= 200 && httpCode < 400) || REACHABLE_ALLOWLIST.includes(httpCode)
+}
+
 /**
  * 获取所有含 registry 配置的工具名列表
  * @returns {string[]}
@@ -77,19 +89,30 @@ function checkByPing(host, count) {
       ? ['-n', String(count), '-w', '2000', host]
       : ['-c', String(count), '-W', '2', host]
 
-    const child = spawn('ping', args, { stdio: ['pipe', 'pipe', 'pipe'] })
+    let child
+    try {
+      child = spawn('ping', args, { stdio: ['pipe', 'pipe', 'pipe'], shell: true })
+    } catch {
+      resolve({
+        reachable: false, sent: count, received: 0, loss: count,
+        lossPercent: 100, rttMin: '', rttAvg: '', rttMax: '', raw: 'ping command failed to execute',
+      })
+      return
+    }
     let stdout = ''
     let stderr = ''
     child.stdout.on('data', (d) => { stdout += d })
     child.stderr.on('data', (d) => { stderr += d })
-    child.on('close', () => {
+    child.on('close', (code) => {
       const raw = stdout + stderr
       let received = 0
       let rttMin = ''
       let rttAvg = ''
       let rttMax = ''
 
+      // English: "1 packets received" / Chinese: "已接收 = 1"
       const recvMatch = raw.match(/(\d+)\s+packets?\s+received/)
+        || raw.match(/(\d+)\s*已接收/)
       if (recvMatch) received = parseInt(recvMatch[1], 10)
 
       if (!isWin) {
@@ -100,7 +123,10 @@ function checkByPing(host, count) {
           rttMax = rttMatch[3]
         }
       } else {
+        // English: "Minimum = 28ms, Maximum = 28ms, Average = 28ms"
+        // Chinese: "最小 = 28ms，最大 = 28ms，平均 = 28ms"
         const msMatch = raw.match(/Minimum\s*=\s*(\d+)ms.*?Maximum\s*=\s*(\d+)ms.*?Average\s*=\s*(\d+)ms/s)
+          || raw.match(/最小\s*=\s*(\d+)ms.*?最大\s*=\s*(\d+)ms.*?平均\s*=\s*(\d+)ms/s)
         if (msMatch) {
           rttMin = msMatch[1]
           rttAvg = msMatch[3]
@@ -108,8 +134,12 @@ function checkByPing(host, count) {
         }
       }
 
+      // Use exit code as primary signal (language-independent);
+      // regex-based received count as secondary fallback
+      const reachable = code === 0 || received > 0
+
       resolve({
-        reachable: received > 0,
+        reachable,
         sent: count,
         received,
         loss: count - received,
@@ -137,10 +167,19 @@ function checkByPing(host, count) {
  */
 function checkByCurl(url, proxy) {
   return new Promise((resolve) => {
-    const args = ['-k', '-L', '-s', '-o', '/dev/null', '-w', '%{http_code} %{time_total}', '--connect-timeout', '2', '--max-time', '5']
+    const args = ['-k', '-L', '-s', '-o', NULL_DEV, '-w', '%{http_code} %{time_total}', '--connect-timeout', '2', '--max-time', '5']
     if (proxy) args.push('-x', proxy)
     args.push(url)
-    const child = spawn('curl', args, { stdio: ['pipe', 'pipe', 'pipe'] })
+    let child
+    try {
+      child = spawn('curl', args, { stdio: ['pipe', 'pipe', 'pipe'], shell: true })
+    } catch {
+      resolve({
+        reachable: false, sent: 1, received: 0, loss: 1,
+        lossPercent: 100, rttMin: '', rttAvg: '', rttMax: '', raw: 'curl failed to execute',
+      })
+      return
+    }
     let stdout = ''
     let stderr = ''
     child.stdout.on('data', (d) => { stdout += d })
@@ -150,8 +189,7 @@ function checkByCurl(url, proxy) {
       const httpCode = parseInt(parts[0], 10) || 0
       const timeTotal = parseFloat(parts[1]) || 0
       const proxyAuthRequired = httpCode === 407
-      const allowlist = [404]
-      const reachable = (httpCode >= 200 && httpCode < 400) || allowlist.includes(httpCode)
+      const reachable = httpReachable(httpCode)
       const rttMs = reachable ? String(Math.round(timeTotal * 1000)) : ''
       resolve({
         reachable,
@@ -183,18 +221,31 @@ function checkByCurl(url, proxy) {
  */
 function checkByWget(url, proxy) {
   return new Promise((resolve) => {
-    const args = ['-q', '--spider', '--timeout=5']
+    const args = ['-q', '--spider', '-S', '--timeout=5']
     if (proxy) {
       args.push('-e', `use_proxy=yes`, '-e', `https_proxy=${proxy}`, '-e', `http_proxy=${proxy}`)
     }
     args.push(url)
-    const child = spawn('wget', args, { stdio: ['pipe', 'pipe', 'pipe'] })
+    let child
+    try {
+      child = spawn('wget', args, { stdio: ['pipe', 'pipe', 'pipe'], shell: true })
+    } catch {
+      resolve({
+        reachable: false, sent: 1, received: 0, loss: 1,
+        lossPercent: 100, rttMin: '', rttAvg: '', rttMax: '', raw: 'wget failed to execute',
+      })
+      return
+    }
     let stdout = ''
     let stderr = ''
     child.stdout.on('data', (d) => { stdout += d })
     child.stderr.on('data', (d) => { stderr += d })
     child.on('close', (code) => {
-      const reachable = code === 0
+      // -S 输出响应头，从中提取 HTTP 状态码（wget 退出码无法区分 404/网络错误）
+      const httpMatch = stderr.match(/HTTP\/\S+\s+(\d{3})/)
+        || stderr.match(/awaiting response\.\.\.\s*(\d{3})/)
+      const httpCode = httpMatch ? parseInt(httpMatch[1], 10) : 0
+      const reachable = httpCode ? httpReachable(httpCode) : code === 0
       resolve({
         reachable,
         sent: 1,
@@ -204,7 +255,7 @@ function checkByWget(url, proxy) {
         rttMin: '',
         rttAvg: '',
         rttMax: '',
-        raw: stderr.trim() || (reachable ? 'OK' : 'Failed'),
+        raw: httpCode ? `HTTP ${httpCode}` : (stderr.trim() || (reachable ? 'OK' : 'Failed')),
       })
     })
     child.on('error', () => {
@@ -225,6 +276,7 @@ function checkByWget(url, proxy) {
  * @returns {Promise<object>}
  */
 async function checkReachability(address, tool, count, proxy) {
+  console.log(`  [CHECK] ${tool}` + (proxy ? ` via proxy ${proxy}` : '') + ` → ${address}`)
   if (tool === 'ping') {
     let host = address
     if (isUrl(address)) {
@@ -250,7 +302,7 @@ async function checkReachability(address, tool, count, proxy) {
   return { reachable: false, sent: 0, received: 0, loss: 0, lossPercent: 0, rttMin: '', rttAvg: '', rttMax: '', raw: 'No tool available' }
 }
 
-export { checkReachability, extractHostPort }
+export { checkReachability, extractHostPort, httpReachable }
 
 export class PingGroup {
   constructor() {
@@ -277,12 +329,9 @@ export class PingGroup {
     const n = (isNaN(count) || count < 1) ? 4 : count
     const detail = !!(parsed.flags.d || parsed.flags.detail)
 
-    let proxy = ''
-    if ('p' in parsed.flags || 'proxy' in parsed.flags) {
-      let raw = parsed.flags.proxy || parsed.flags.p || ''
-      if (raw === 'true') raw = ''
-      proxy = raw || getActiveProxy()
-    }
+    let proxy = parsed.flags.proxy || parsed.flags.p || ''
+    if (proxy === 'true') proxy = ''
+    if (!proxy) proxy = getActiveProxy()
 
     if (target === 'proxy') {
       return this._pingProxy(n, detail, tool)
@@ -297,7 +346,8 @@ export class PingGroup {
     }
 
     if (proxy) {
-      const usable = await this._checkProxyUsable(proxy, tool, n)
+      const testUrl = isUrl(target) ? target : undefined
+      const usable = await this._checkProxyUsable(proxy, tool, n, testUrl)
       if (!usable.ok) {
         console.error(`[opm] Proxy not usable: ${usable.reason}`)
         process.exit(1)
@@ -310,12 +360,16 @@ export class PingGroup {
   }
 
   /**
-   * 检查代理是否可用：通过代理访问 npm active registry 测试
+   * 检查代理是否可用：通过代理访问指定 URL 测试
+   * @param {string} proxyUrl - 代理地址
+   * @param {string} tool - 检测工具
+   * @param {number} count - ping 包数量
+   * @param {string} [testUrl] - 测试 URL（默认 npm active registry）
    * @returns {{ ok: boolean, reason: string }}
    */
-  async _checkProxyUsable(proxyUrl, tool, count) {
-    const testUrl = getActiveRegistry('npm')
-    const result = await checkReachability(testUrl, tool, count, proxyUrl)
+  async _checkProxyUsable(proxyUrl, tool, count, testUrl) {
+    const url = testUrl || getActiveRegistry('npm')
+    const result = await checkReachability(url, tool, count, proxyUrl)
     if (result.proxyAuthRequired) {
       return { ok: false, reason: 'authentication required (HTTP 407)' }
     }
@@ -355,7 +409,13 @@ export class PingGroup {
     const tools = getRegistryTools()
 
     if (proxy) {
-      const usable = await this._checkProxyUsable(proxy, tool, 1)
+      // 用首个可用 registry URL 作为代理可用性测试目标（而非硬编码 npm）
+      let testUrl = ''
+      for (const t of tools) {
+        const u = getActiveRegistry(t)
+        if (u) { testUrl = u; break }
+      }
+      const usable = await this._checkProxyUsable(proxy, tool, 1, testUrl)
       if (!usable.ok) {
         console.error(`[opm] Proxy not usable: ${usable.reason}`)
         process.exit(1)
@@ -438,11 +498,12 @@ Actions:
 
 Options:
   -c, --count <n>          Number of packets to send (ping only; default: 4)
-  -p, --proxy <url>        Record proxy used for the check (informational)
+  -p, --proxy <url>        Proxy address for the check (overrides config proxy.active;
+                           routes curl/wget requests through the proxy and pre-validates usability)
   -d, --detail             Output full JSON details (default: compact [{tool, address, proxy, reachable}])
   -h, --help               Show this help
 
-Tool detection: ping > curl > wget (auto-detected)
+Tool detection: curl > wget > ping (auto-detected)
 
 Output:
   default (no -d)          [{ "tool": "npm", "address": "https://...", "proxy": "", "reachable": true }]

package/src/cli/index.js

@@ -21,6 +21,7 @@ import { EnsureGroup } from './groups/ensure.js'
 import { PingGroup } from './groups/ping.js'
 import { ProcGroup } from './groups/proc.js'
 import { OverlayGroup } from './groups/overlay.js'
+import { EnvGroup } from './groups/env.js'
 import { FtpGroup } from '../tools/ftp/index.js'
 import { GitGroup } from '../tools/git/index.js'
 import { ShareGroup } from '../tools/share/index.js'
@@ -66,6 +67,7 @@ const GROUPS = {
   ping: new PingGroup(),
   proc: new ProcGroup(),
   overlay: new OverlayGroup(),
+  env: new EnvGroup(),
 }
 
 class CLI {

package/src/harnesses/opencode/index.js

@@ -39,21 +39,22 @@ function findConfigFile() {
 
 /**
  * 获取 env 变量当前值
- * 优先级：系统环境变量 > opm config opencode.env
+ * 优先级：opm config opencode.env > 系统环境变量
+ * 用户在配置文件中设置的值优先，无需手动管理环境变量。
  * @returns {Record<string, string>}
  */
 function getEnvVars() {
   const cfgEnv = (getConfig().opencode?.env) || {}
   const result = {}
   for (const key of ENV_VARS) {
-    result[key] = process.env[key] || cfgEnv[key] || ''
+    result[key] = cfgEnv[key] || process.env[key] || ''
   }
   return result
 }
 
 /**
  * 在指定工作目录启动 opencode TUI
- * 自动注入有值的环境变量（系统 env > opm config）
+ * 自动注入有值的环境变量（opm config 优先，系统 env 回退）
  * @param {string} workDir - 工作目录
  * @param {string[]} [passThroughArgs=[]] - Extra args passed to opencode
  */

package/src/index.js

@@ -23,6 +23,7 @@ export { DockerGroup } from './cli/groups/docker.js'
 export { PingGroup } from './cli/groups/ping.js'
 export { ProcGroup } from './cli/groups/proc.js'
 export { OverlayGroup } from './cli/groups/overlay.js'
+export { EnvGroup, parseEnvBlocks, parseRegOutput, isValidEnvKey } from './cli/groups/env.js'
 export { FtpGroup } from './tools/ftp/index.js'
 export { GitGroup } from './tools/git/index.js'
 export { ShareGroup } from './tools/share/index.js'
@@ -62,7 +63,7 @@ export {
 } from './presets.js'
 export { PROXY_PRESETS } from './proxy-presets.js'
 export { output } from './formatter.js'
-export { downloadToFile, fetchText } from './managers/http.js'
+export { downloadToFile, fetchText } from '@wwkit/shared'
 export {
   getConfig, getSection, copyBuiltinConfig, getActiveRegistry, setActiveRegistry,
   getUserConfigDir, getUserConfigFile, getActiveProxy,

package/src/managers/brew.js

@@ -166,6 +166,7 @@ export class BrewManager extends PackageManager {
   _execInherit(args, opts = {}) {
     const result = spawnSync(this._brewBin(), args, {
       stdio: 'inherit',
+      shell: true,
       env: this._buildEnv(opts.proxy),
     })
     if (result.error) {

package/src/managers/bun.js

@@ -2,7 +2,7 @@
  * bun 包管理器实现
  *
  * Bun 是全栈 JS 工具链（runtime + 包管理器 + 打包器）。
- * 包管理命令通过 bun CLI 实现，源查询通过 HTTP 直接查 npm registry。
+ * 包管理命令通过 bun CLI 实现，源查询通过共享 fetchText 查 npm registry。
  * 镜像通过 BUN_CONFIG_REGISTRY 环境变量传递给 bun 命令。
  */
 
@@ -11,6 +11,7 @@ import fs from 'node:fs'
 import os from 'node:os'
 import path from 'node:path'
 import { PackageManager } from './base.js'
+import { fetchText } from '@wwkit/shared'
 import { getActiveRegistry, setActiveRegistry } from '../config.js'
 
 export class BunManager extends PackageManager {
@@ -108,52 +109,24 @@ export class BunManager extends PackageManager {
 
   /**
    * 通过 HTTP 查询 npm registry 获取包元数据
+   * 使用共享 fetchText（支持 HTTP/SOCKS5 代理隧道，与 pip/composer 一致）
    * @param {string} pkgName
    * @param {{ proxy?: string }} [opts]
    * @returns {Promise<object|null>}
    * @private
    */
   async _fetchRegistryMetadata(pkgName, opts = {}) {
-    const registry = getActiveRegistry('bun').replace(/\/$/, '')
+    const registry = (getActiveRegistry('bun') || 'https://registry.npmjs.org').replace(/\/$/, '')
     const url = `${registry}/${encodeURIComponent(pkgName).replace('%40', '@')}`
     try {
-      const { default: http } = await import('node:http')
-      const { default: https } = await import('node:https')
-      const client = url.startsWith('https') ? https : http
-      const proxyAgent = opts.proxy ? await this._getProxyAgent(opts.proxy) : null
-      return new Promise((resolve) => {
-        const req = client.get(url, { agent: proxyAgent }, (res) => {
-          let data = ''
-          res.on('data', (chunk) => (data += chunk))
-          res.on('end', () => {
-            try {
-              resolve(JSON.parse(data))
-            } catch {
-              resolve(null)
-            }
-          })
-        })
-        req.on('error', () => resolve(null))
-        req.setTimeout(15000, () => {
-          req.destroy()
-          resolve(null)
-        })
-      })
+      const text = await fetchText(url, { proxy: opts.proxy })
+      if (!text) return null
+      return JSON.parse(text)
     } catch {
       return null
     }
   }
 
-  /**
-   * 获取 proxy agent（简化实现，仅支持 http proxy）
-   * @param {string} proxy
-   * @returns {Promise<undefined>}
-   * @private
-   */
-  async _getProxyAgent(proxy) {
-    return undefined
-  }
-
   async getVersion() {
     try {
       const version = this._exec(['--version'], { allowNonZero: true }).trim()

package/src/managers/composer.js

@@ -14,7 +14,7 @@ import fs from 'node:fs'
 import os from 'node:os'
 import path from 'node:path'
 import { PackageManager } from './base.js'
-import { fetchText } from './http.js'
+import { fetchText } from '@wwkit/shared'
 import { getActiveRegistry, setActiveRegistry } from '../config.js'
 
 export class ComposerManager extends PackageManager {

package/src/managers/pip.js

@@ -9,7 +9,7 @@ import { execSync, spawnSync } from 'node:child_process'
 import path from 'node:path'
 import { URL } from 'node:url'
 import { PackageManager } from './base.js'
-import { fetchText } from './http.js'
+import { fetchText } from '@wwkit/shared'
 import { getActiveRegistry, setActiveRegistry } from '../config.js'
 
 export class PipManager extends PackageManager {

package/src/managers/proc.js

@@ -52,7 +52,13 @@ export async function getPortMap() {
   const args = shell.isWindows ? ['-ano'] : ['-tlnp']
 
   return new Promise((resolve) => {
-    const child = spawn(fallback, args, { stdio: ['pipe', 'pipe', 'pipe'] })
+    let child
+    try {
+      child = spawn(fallback, args, { stdio: ['pipe', 'pipe', 'pipe'], shell: true })
+    } catch {
+      resolve(map)
+      return
+    }
     let stdout = ''
     child.stdout.on('data', (d) => { stdout += d })
     child.on('close', () => {

package/src/tools/webwork/index.js

@@ -5,9 +5,9 @@
  * 由 blues-lib 提供的 ww init / ww init -u 全权处理，不再单独安装/检查。
  *
  * install 流程（5 步）：
- *   镜像检查(必查 npm/pip/cft + 按需 nvm/node/uv) → ensure node/python → 写 NPM/PIP/CFT_REGISTRY → 装 blues-lib → ww init
+ *   镜像检查(必查 npm/pip + 按需 nvm/node/uv) → ensure node/python → 写 NPM/PIP_REGISTRY/REGISTRY_PROXY → 装 blues-lib → ww init
  * upgrade 流程（4 步）：
- *   镜像检查(必查 npm/pip/cft) → 写 NPM/PIP/CFT_REGISTRY → pip 升级 blues-lib → ww init -u
+ *   镜像检查(必查 npm/pip) → 写 NPM/PIP_REGISTRY/REGISTRY_PROXY → pip 升级 blues-lib → ww init -u
  *
  * 命令: version / versions / installed / install / uninstall / upgrade / help
  */
@@ -184,8 +184,8 @@ export class WebworkGroup {
       console.log(`  → python ${env.python.provided} 已满足`)
     }
 
-    console.log('\n========== 步骤 3/5: 写入 NPM_REGISTRY / PIP_REGISTRY / CFT_REGISTRY ==========')
-    this._writeRegistryEnv()
+    console.log('\n========== 步骤 3/5: 写入 NPM_REGISTRY / PIP_REGISTRY / REGISTRY_PROXY ==========')
+    this._writeRegistryEnv(proxy)
 
     console.log('\n========== 步骤 4/5: 安装 blues-lib ==========')
     const blue = await this._installPipPackage('blues-lib', proxy)
@@ -196,7 +196,7 @@ export class WebworkGroup {
     }
 
     console.log('\n========== 步骤 5/5: ww init ==========')
-    execSync('ww init', { encoding: 'utf8', stdio: 'inherit' })
+    this._runWwInit('init')
 
     output({ action: 'install', env, ensured, bluesLib: blue, init: 'ww init' })
   }
@@ -207,32 +207,44 @@ export class WebworkGroup {
     console.log('\n========== 步骤 1/4: 镜像可达检查 ==========')
     await this._checkMirrors(proxy, null)
 
-    console.log('\n========== 步骤 2/4: 写入 NPM_REGISTRY / PIP_REGISTRY / CFT_REGISTRY ==========')
-    this._writeRegistryEnv()
+    console.log('\n========== 步骤 2/4: 写入 NPM_REGISTRY / PIP_REGISTRY / REGISTRY_PROXY ==========')
+    this._writeRegistryEnv(proxy)
 
     console.log('\n========== 步骤 3/4: 升级 blues-lib ==========')
     const blue = await this._upgradePipPackage('blues-lib', proxy)
     console.log(`  ✓ blues-lib 升级完成`)
 
     console.log('\n========== 步骤 4/4: ww init -u ==========')
-    execSync('ww init -u', { encoding: 'utf8', stdio: 'inherit' })
+    this._runWwInit('init -u')
 
     output({ action: 'upgrade', bluesLib: blue, init: 'ww init -u' })
   }
 
   /**
-   * 将 NPM_REGISTRY / PIP_REGISTRY / CFT_REGISTRY 写入 shell profile（与 SELENIUM_CFT_DIR 同机制）
-   * blues-lib 的相关命令依赖镜像，写入后保持与 opm 配置一致
+   * 执行 ww init/init -u
+   * 镜像与代理配置通过 NPM_REGISTRY/PIP_REGISTRY/REGISTRY_PROXY 环境变量传递（见 _writeRegistryEnv）
+   * @param {string} action - 'init' 或 'init -u'
+   * @private
+   */
+  _runWwInit(action) {
+    execSync(`ww ${action}`, { encoding: 'utf8', stdio: 'inherit' })
+  }
+
+  /**
+   * 将 NPM_REGISTRY / PIP_REGISTRY / REGISTRY_PROXY 写入 shell profile，并同步到当前会话 env
+   * blues-lib 的相关命令依赖镜像，写入后保持与 opm 配置一致；代理同理，ww init 用同一机制读取
+   * @param {string} [proxy] - 代理地址（来自 -p/--proxy 或 opm 配置 proxy.active），空则跳过
    */
-  _writeRegistryEnv() {
+  _writeRegistryEnv(proxy = '') {
     const entries = [
       ['NPM_REGISTRY', getActiveRegistry('npm')],
       ['PIP_REGISTRY', getActiveRegistry('pip')],
-      ['CFT_REGISTRY', getActiveRegistry('cft')],
+      ['REGISTRY_PROXY', proxy],
     ]
     for (const [name, url] of entries) {
       if (!url) continue
       shell.setEnvVar(name, url)
+      process.env[name] = url
       console.log(`  [OK] ${name}=${url}`)
     }
   }
@@ -268,8 +280,9 @@ export class WebworkGroup {
 
   /**
    * 检查镜像可达性（HEAD 请求，不可达则抛错）
-   * 必查：npm / pip / cft（blues-lib 依赖，环境必然可用）
+   * 必查：npm / pip（blues-lib 依赖，环境必然可用）
    * 条件查：nvm + node（仅 env.node 不满足时）、uv（仅 env.python 不满足时）
+   * cft 不查：由 ww init 全权处理插件安装，不再单独检查。
    * @param {string} proxy
    * @param {{ node: { satisfied: boolean }, python: { satisfied: boolean } } | null} env
    *        null 表示不做条件检查（upgrade 场景，不装 runtime）
@@ -277,7 +290,7 @@ export class WebworkGroup {
   async _checkMirrors(proxy, env) {
     const tool = shell.getNetProbeTool()
     if (!tool) {
-      console.log('  [WARN] No network probe tool (ping/curl/wget), skipping mirror check')
+      console.log('  [WARN] No network probe tool (curl/wget/ping), skipping mirror check')
       return
     }
 
@@ -287,7 +300,6 @@ export class WebworkGroup {
     const checks = [
       { name: 'npm', url: getActiveRegistry('npm') },
       { name: 'pip', url: getActiveRegistry('pip') },
-      { name: 'cft', url: getActiveRegistry('cft') },
       ...(needNode ? [
         { name: 'nvm', url: getActiveRegistry('nvm') },
         { name: 'node', url: getActiveRegistry('node') },
@@ -318,7 +330,10 @@ export class WebworkGroup {
     }
 
     if (!allOk) {
-      throw new Error('Some mirrors unreachable, aborting. Check network or set proxy with -p')
+      const hint = proxy
+        ? `Proxy (${proxy}) was used for ${tool}-based checks. Ensure the proxy is working and mirrors are accessible through it.`
+        : `No proxy configured. If behind a proxy, set config proxy.active or use -p <url>. Current tool: ${tool}.`
+      throw new Error(`Some mirrors unreachable, aborting. ${hint}`)
     }
   }