@yosai/cli 0.2.1-test.12 → 0.2.1-test.14

package/README.md

@@ -58,6 +58,7 @@ yos skill install      # 安装 9 个内置 Skill（总入口 + 领域 + 安装
 - 环境变量（均优先于配置文件，适合 CI/容器场景）：`YOS_API_KEY` 访问令牌、`YOS_ENV` 服务环境（prod / test / dev）
 - 版本检查：命令执行前会检查对应通道最新版（后台进程查询、结果缓存 10 分钟），落后时以 stderr 提示「请先执行 yos update 升级再继续任务」；升级通道自动跟随服务环境（测试环境跟 test 通道）。CLI 不静默安装，升级由用户或 Agent 按提示显式执行
 - 服务环境（测试/开发用）：`yos login --env test` 切到测试环境，`--env dev` 指向本机开发服务（http://localhost:8080）
+- 托管模式（YOS 客户端内置 CLI 专用）：`YOS_MANAGED=1` 时安装、升级、登录与 Skill 由客户端统一管理——不做版本检查与升级提示，拒绝 `update` / `install` / `login` / `skill install`，令牌只认客户端注入的 `YOS_API_KEY`（不读配置文件），`doctor` 跳过配置文件与 Skill 检查；客户端应同时以 `YOS_CONFIG_DIR` 指向自身私有目录，与用户自行安装的 CLI 配置隔离
 
 ## 故障排查
 

package/dist/cli.js

@@ -1,6 +1,7 @@
 import { parseArgs } from 'node:util';
 import { DOMAIN_META } from './domain-commands.js';
 import { CliError, EXIT, UsageError } from './errors.js';
+import { isBlockedInManaged, isManaged, MANAGED_HINT } from './managed.js';
 import { print, printErr, renderRows } from './output.js';
 import { handleUpdateNotice } from './update-notice.js';
 const registry = [];
@@ -17,7 +18,7 @@ export function renderHelp() {
         '  0. yos <领域> --help             按领域浏览能力（kb / docs / retrieve / support / transcript）',
         '  1. yos tool list                 动态发现全部工具（领域命令未覆盖时）',
         '  2. 领域命令未覆盖的场景用 yos tool schema / tool call 兜底',
-        '  3. yos skill install             安装内置 Skill，接入本机 AI 助手（Claude Code / Cursor / Qoder 等）',
+        ...(isManaged() ? [] : ['  3. yos skill install             安装内置 Skill，接入本机 AI 助手（Claude Code / Cursor / Qoder 等）']),
         '',
         '约定:',
         '  - 输出默认人类可读；--json 输出结构化结果（工具返回原文在 text 字段内）',
@@ -28,6 +29,7 @@ export function renderHelp() {
         '  YOS_API_KEY     访问令牌',
         '  YOS_ENV         服务环境（prod / test / dev；缺省生产）',
         '  YOS_CONFIG_DIR  配置目录（缺省 ~/.config/yos）',
+        '  YOS_MANAGED     托管模式（=1 时由 YOS 客户端托管，用户无需设置）',
         '',
         '示例:',
         '  yos doctor',
@@ -39,8 +41,9 @@ export function renderHelp() {
         '  yos docs download NDxxxx --out ./报告.pdf',
         '',
     ];
+    const visible = registry.filter((command) => !isBlockedInManaged(command.name));
     for (const group of GROUP_ORDER) {
-        const commands = registry.filter((command) => command.group === group);
+        const commands = visible.filter((command) => command.group === group);
         if (commands.length === 0) {
             continue;
         }
@@ -48,7 +51,7 @@ export function renderHelp() {
         lines.push(indentRows(renderRows(commands.map((command) => [command.name, command.description]))));
         lines.push('');
     }
-    const ungrouped = registry.filter((command) => !command.group);
+    const ungrouped = visible.filter((command) => !command.group);
     if (ungrouped.length > 0) {
         lines.push(indentRows(renderRows(ungrouped.map((command) => [command.name, command.description]))));
         lines.push('');
@@ -167,6 +170,11 @@ export async function dispatch(argv) {
         return EXIT.USAGE;
     }
     const { command, rest } = matched;
+    if (isBlockedInManaged(command.name)) {
+        printErr(`错误: 内置 CLI 不支持 yos ${command.name}`);
+        printErr(`提示: ${MANAGED_HINT}，无需也不能自行执行`);
+        return EXIT.USAGE;
+    }
     if (rest.includes('--help') || rest.includes('-h')) {
         print(renderCommandHelp(command));
         return EXIT.OK;

package/dist/commands/doctor.js

@@ -2,6 +2,7 @@ import { register } from '../cli.js';
 import { loadConfig, maskKey, resolveEnv, resolveKey } from '../config.js';
 import { DEFAULT_ENV, endpointOfEnv, envLabel } from '../endpoints.js';
 import { CliError, EXIT } from '../errors.js';
+import { isManaged } from '../managed.js';
 import { formatIdentity, OpenApisClient } from '../openapis-client.js';
 import { print, printJson } from '../output.js';
 import { readPackageMeta } from '../npm-meta.js';
@@ -18,11 +19,10 @@ register({
         const config = loadConfig();
         const env = resolveEnv(config);
         const endpoint = endpointOfEnv(env);
-        checks.push({
-            name: '配置文件',
-            ok: config !== null,
-            detail: config ? '已找到' : '未找到，请执行 yos login',
-        });
+        const managed = isManaged();
+        checks.push(managed
+            ? { name: '运行模式', ok: true, detail: '客户端托管（令牌与环境由 YOS 客户端注入）' }
+            : { name: '配置文件', ok: config !== null, detail: config ? '已找到' : '未找到，请执行 yos login' });
         if (env !== DEFAULT_ENV) {
             checks.push({
                 name: '服务环境',
@@ -54,11 +54,13 @@ register({
             }
         }
         const skillDirs = config?.installedSkillDirs ?? [];
-        checks.push({
-            name: 'Skill 安装',
-            ok: skillDirs.length > 0,
-            detail: skillDirs.length > 0 ? skillDirs.join(', ') : '尚未安装，执行 yos skill install',
-        });
+        if (!managed) {
+            checks.push({
+                name: 'Skill 安装',
+                ok: skillDirs.length > 0,
+                detail: skillDirs.length > 0 ? skillDirs.join(', ') : '尚未安装，执行 yos skill install',
+            });
+        }
         const meta = readPackageMeta();
         const envNote = env === DEFAULT_ENV ? '' : `（环境=${envLabel(env)}）`;
         checks.push({
@@ -66,12 +68,14 @@ register({
             ok: meta !== null,
             detail: meta ? `${meta.version}${envNote}` : 'unknown（未找到 package.json）',
         });
-        const state = loadVersionState();
-        checks.push({
-            name: 'Skill 同步',
-            ok: meta !== null && state?.version === meta.version && skillDirs.length > 0,
-            detail: skillSyncDetail(meta, state, skillDirs),
-        });
+        if (!managed) {
+            const state = loadVersionState();
+            checks.push({
+                name: 'Skill 同步',
+                ok: meta !== null && state?.version === meta.version && skillDirs.length > 0,
+                detail: skillSyncDetail(meta, state, skillDirs),
+            });
+        }
         if (flags.json) {
             printJson({ checks });
         }

package/dist/commands/kb.js

@@ -10,7 +10,7 @@ import { decideSingleFileUpload, findSubtreeChildren, uploadDirectory, walkLocal
 const CONFLICT_POLICIES = ['skip', 'rename'];
 register({
     name: 'kb upload',
-    description: '上传本地文件或整个目录到知识库（目录递归镜像文件夹，multipart 直传，单文件 ≤20MB）',
+    description: '上传本地文件或整个目录到知识库（目录递归镜像文件夹；≤20MB 直传，更大文件自动分片上传）',
     usage: 'yos kb upload <本地文件或目录> --kb <kb_code> [--dir <parent_code>] [--on-conflict <skip|rename>] [--json]',
     group: '知识库 kb',
     risk: 'write',
@@ -82,25 +82,17 @@ async function uploadSingle(deps, filePath, kbCode, dirCode, onConflict, json) {
         return EXIT.OK;
     }
     const finalName = decision.finalName;
-    try {
-        const result = await deps.uploadFile(filePath, kbCode, dirCode, finalName);
-        if (json) {
-            printJson(result);
-        }
-        else if (finalName === name) {
-            print(`已上传：${result.fileName}（${result.fileSize} 字节）→ 节点 ${result.nodeCode}`);
-        }
-        else {
-            print(`已改名上传：${name} → ${result.fileName}（${result.fileSize} 字节）→ 节点 ${result.nodeCode}`);
-        }
-        return EXIT.OK;
+    const result = await deps.uploadFile(filePath, kbCode, dirCode, finalName);
+    if (json) {
+        printJson(result);
     }
-    catch (e) {
-        if (e instanceof BusinessError && e.message.includes('超过 20MB')) {
-            throw new BusinessError(e.message, '更大文件请先在客户端上传后共享，或拆分为多个文件');
-        }
-        throw e;
+    else if (finalName === name) {
+        print(`已上传：${result.fileName}（${result.fileSize} 字节）→ 节点 ${result.nodeCode}`);
+    }
+    else {
+        print(`已改名上传：${name} → ${result.fileName}（${result.fileSize} 字节）→ 节点 ${result.nodeCode}`);
     }
+    return EXIT.OK;
 }
 async function uploadDir(deps, localRoot, kbCode, dirCode, onConflict, json) {
     const { exitCode, aborted, summary } = await uploadDirectory(deps, { localRoot, kbCode, dirCode, onConflict });

package/dist/config.js

@@ -3,6 +3,7 @@ import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { channelOfEnv, DEFAULT_ENV, endpointOfEnv } from './endpoints.js';
 import { UsageError } from './errors.js';
+import { isManaged } from './managed.js';
 export function configDir() {
     return process.env.YOS_CONFIG_DIR ?? join(homedir(), '.config', 'yos');
 }
@@ -32,6 +33,9 @@ export function resolveKey(config) {
     if (fromEnv) {
         return fromEnv;
     }
+    if (isManaged()) {
+        throw new UsageError('未注入访问令牌', '内置 CLI 的令牌由 YOS 客户端注入 YOS_API_KEY，请重新登录 YOS 客户端');
+    }
     if (config?.apiKey) {
         return config.apiKey;
     }

package/dist/errors.js

@@ -1,3 +1,4 @@
+import { isManaged } from './managed.js';
 export const EXIT = {
     OK: 0,
     BUSINESS: 1,
@@ -33,11 +34,15 @@ export class NetworkError extends CliError {
 }
 export class AuthError extends CliError {
     constructor(message) {
-        super(message, EXIT.AUTH, '请执行 `yos login` 重新配置访问令牌');
+        super(message, EXIT.AUTH, isManaged()
+            ? '内置 CLI 的令牌由 YOS 客户端注入，请重新登录 YOS 客户端'
+            : '请执行 `yos login` 重新配置访问令牌');
     }
 }
 export class UpgradeError extends CliError {
     constructor(message, hint) {
-        super(message, EXIT.UPGRADE, hint ?? '执行 `yos update` 升级后重试');
+        super(message, EXIT.UPGRADE, isManaged()
+            ? '请升级 YOS 客户端后重试'
+            : hint ?? '执行 `yos update` 升级后重试');
     }
 }

package/dist/managed.js

@@ -0,0 +1,9 @@
+export const MANAGED_ENV = 'YOS_MANAGED';
+const MANAGED_BLOCKED_COMMANDS = new Set(['update', 'install', 'login', 'skill install']);
+export const MANAGED_HINT = '内置 CLI 的安装、升级、登录与 Skill 由 YOS 客户端统一管理';
+export function isManaged() {
+    return process.env[MANAGED_ENV] === '1';
+}
+export function isBlockedInManaged(commandName) {
+    return isManaged() && MANAGED_BLOCKED_COMMANDS.has(commandName);
+}

package/dist/openapis-client.js

@@ -1,9 +1,11 @@
-import { readFile, stat } from 'node:fs/promises';
+import { open, readFile, stat } from 'node:fs/promises';
 import { basename } from 'node:path';
 import { envNoteOfEndpoint } from './endpoints.js';
 import { AuthError, BusinessError, NetworkError, UpgradeError } from './errors.js';
 import { getCliVersion } from './npm-meta.js';
-export const MAX_UPLOAD_SIZE_BYTES = 20 * 1024 * 1024;
+export const DIRECT_UPLOAD_THRESHOLD_BYTES = 20 * 1024 * 1024;
+const FALLBACK_PART_SIZE_BYTES = 5 * 1024 * 1024;
+const MAX_PART_SIZE_BYTES = 20 * 1024 * 1024;
 export const CLI_VERSION_HEADER = 'X-Yos-Cli-Version';
 export function formatIdentity(identity) {
     return identity.userName ? `${identity.userName}（${identity.userCode}）` : identity.userCode;
@@ -29,24 +31,29 @@ export class OpenApisClient {
         return this.request('/tool/call', { name, arguments: args });
     }
     async request(path, body) {
-        let response;
-        try {
-            response = await fetch(`${this.base}${path}`, {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'Authorization': `Bearer ${this.apiKey}`,
-                    [CLI_VERSION_HEADER]: getCliVersion(),
-                },
-                body: JSON.stringify(body ?? {}),
-            });
-        }
-        catch (e) {
-            throw new NetworkError(`无法连接 YOS 服务${envNoteOfBase(this.base)}，原因：${e.message}`);
-        }
-        return parseEnvelope(response);
+        return postJson(this.base, this.apiKey, path, body);
     }
 }
+function authHeaders(apiKey) {
+    return {
+        'Authorization': `Bearer ${apiKey}`,
+        [CLI_VERSION_HEADER]: getCliVersion(),
+    };
+}
+async function postJson(base, apiKey, path, body) {
+    let response;
+    try {
+        response = await fetch(`${base}${path}`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', ...authHeaders(apiKey) },
+            body: JSON.stringify(body ?? {}),
+        });
+    }
+    catch (e) {
+        throw new NetworkError(`无法连接 YOS 服务${envNoteOfBase(base)}，原因：${e.message}`);
+    }
+    return parseEnvelope(response);
+}
 function envNoteOfBase(base) {
     return envNoteOfEndpoint(base.replace(/\/open-apis$/, ''));
 }
@@ -110,12 +117,15 @@ export async function uploadKnowledgeFile(endpoint, apiKey, filePath, kbCode, pa
     catch {
         throw new BusinessError(`文件不存在或不可读：path=${filePath}`);
     }
-    if (fileSize > MAX_UPLOAD_SIZE_BYTES) {
-        throw new BusinessError(`文件超过 20MB 上限：size=${fileSize}，path=${filePath}`);
-    }
+    const uploadName = fileName ?? basename(filePath);
+    return fileSize <= DIRECT_UPLOAD_THRESHOLD_BYTES
+        ? directUpload(endpoint, apiKey, filePath, kbCode, parentCode, uploadName)
+        : partUpload(endpoint, apiKey, filePath, fileSize, kbCode, parentCode, uploadName);
+}
+async function directUpload(endpoint, apiKey, filePath, kbCode, parentCode, uploadName) {
     const content = await readFile(filePath);
     const form = new FormData();
-    form.append('file', new Blob([content]), fileName ?? basename(filePath));
+    form.append('file', new Blob([content]), uploadName);
     form.append('kb_code', kbCode);
     if (parentCode) {
         form.append('parent_code', parentCode);
@@ -124,7 +134,7 @@ export async function uploadKnowledgeFile(endpoint, apiKey, filePath, kbCode, pa
     try {
         response = await fetch(`${endpoint}/open-apis/knowledge/file_upload`, {
             method: 'POST',
-            headers: { 'Authorization': `Bearer ${apiKey}`, [CLI_VERSION_HEADER]: getCliVersion() },
+            headers: authHeaders(apiKey),
             body: form,
         });
     }
@@ -133,3 +143,74 @@ export async function uploadKnowledgeFile(endpoint, apiKey, filePath, kbCode, pa
     }
     return parseEnvelope(response);
 }
+async function partUpload(endpoint, apiKey, filePath, fileSize, kbCode, parentCode, uploadName) {
+    const handle = await open(filePath, 'r');
+    let uploadId;
+    try {
+        const init = await postJson(`${endpoint}/open-apis`, apiKey, '/knowledge/init_part_upload', { fileName: uploadName, fileSize, kbCode, parentCode });
+        if (!init.uploadId) {
+            throw new BusinessError('分片上传初始化失败：服务端未返回 uploadId');
+        }
+        uploadId = init.uploadId;
+        const partSize = normalizePartSize(init.partSize);
+        const parts = [];
+        let position = 0;
+        while (position < fileSize) {
+            const partNumber = parts.length + 1;
+            const length = Math.min(partSize, fileSize - position);
+            const buffer = Buffer.allocUnsafe(length);
+            const { bytesRead } = await handle.read(buffer, 0, length, position);
+            if (bytesRead === 0) {
+                throw new BusinessError(`读取本地文件提前结束：path=${filePath}，已读=${position}，总大小=${fileSize}`);
+            }
+            const part = await uploadKnowledgePart(endpoint, apiKey, init.uploadId, partNumber, buffer.subarray(0, bytesRead), uploadName);
+            if (!part.etag) {
+                throw new BusinessError(`分片上传响应缺少 etag：partNumber=${partNumber}`);
+            }
+            parts.push({ partNumber, etag: part.etag });
+            position += bytesRead;
+        }
+        return await postJson(`${endpoint}/open-apis`, apiKey, '/knowledge/complete_part_upload', { uploadId: init.uploadId, parts, kbCode, parentCode });
+    }
+    catch (e) {
+        if (uploadId) {
+            await abortPartUploadQuietly(endpoint, apiKey, uploadId);
+        }
+        throw e;
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function uploadKnowledgePart(endpoint, apiKey, uploadId, partNumber, chunk, uploadName) {
+    const form = new FormData();
+    form.append('file', new Blob([chunk]), `${uploadName}.part${partNumber}`);
+    form.append('upload_id', uploadId);
+    form.append('part_number', String(partNumber));
+    let response;
+    try {
+        response = await fetch(`${endpoint}/open-apis/knowledge/upload_part`, {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: form,
+        });
+    }
+    catch (e) {
+        throw new NetworkError(`无法连接 YOS 服务${envNoteOfEndpoint(endpoint)}，原因：${e.message}`);
+    }
+    return parseEnvelope(response);
+}
+async function abortPartUploadQuietly(endpoint, apiKey, uploadId) {
+    try {
+        const response = await fetch(`${endpoint}/open-apis/knowledge/abort_part_upload?upload_id=${encodeURIComponent(uploadId)}`, { method: 'POST', headers: authHeaders(apiKey) });
+        await parseEnvelope(response);
+    }
+    catch {
+    }
+}
+function normalizePartSize(raw) {
+    if (raw === undefined || !Number.isFinite(raw) || raw <= 0) {
+        return FALLBACK_PART_SIZE_BYTES;
+    }
+    return Math.min(Math.floor(raw), MAX_PART_SIZE_BYTES);
+}

package/dist/skills/yos/SKILL.md

@@ -67,7 +67,7 @@ yos retrieve read 'cortex://kb/KB20261009000001/doc/ND20261009000012:1-60'  #
 # 整理知识库
 yos docs tree KB20261009000001                            # 目录树（资源编码字段是 resourceCode）
 yos docs mkdir '会议纪要' --kb KB20261009000001             # 返回新节点编码
-yos kb upload ./报告.pdf --kb KB20261009000001             # 单文件上传（≤20MB，同名时按 --on-conflict 处理）
+yos kb upload ./报告.pdf --kb KB20261009000001             # 单文件上传（≤20MB 直传，更大自动分片；同名按 --on-conflict 处理）
 yos docs download ND20261009000012 --out ./归档/            # 取回上传的原文件（仅 docType=file）
 yos docs count ND20261009000012                            # 删除前查影响范围
 

package/dist/skills/yos-knowledge/SKILL.md

@@ -148,7 +148,8 @@ yos kb upload ./会议纪要 --kb KB20260921000001 --json                 # 结
 
 硬约束与注意点：
 
-- **单文件 ≤20MB**：`错误: 文件超过 20MB 上限：size=22020096，path=...` + `提示: 更大文件请先在客户端上传后共享，或拆分为多个文件`（exit 1）
+- **单文件大小按扩展名限制**：办公三件套（doc/docx/xls/xlsx/ppt/pptx）与 pdf ≤100MB，纯文本（txt/md/csv/html）与 json ≤10MB，图片（png/jpg/jpeg）≤20MB，其余扩展名 ≤20MB；超限 → `错误: 文件大小超出限制：fileName=xxx.csv，类型=csv，大小=12MB，上限=10MB`（exit 1）
+- **超过 20MB 自动分片**：CLI 自动完成初始化、逐片上传与完成登记，命令参数不变；中途失败会尽力取消上传并保留原始错误
 - **服务端不做任何同名去重**：落库节点名恒等于本次上传用的文件名，同名副本会真实堆积并放大 `retrieve grep` 的命中数。同名判定与 `rename` 的新名都由 CLI 侧完成，因此绕过 CLI 直传不会有这层保护
 - 目录上传自动跳过隐藏文件（如 `.DS_Store`），并自动创建缺失的子文件夹（单文件上传不会，需先 `docs mkdir`）
 - 支持类型（以服务端返回为准）：doc/docx/xls/xlsx/ppt/pptx/pdf/md/txt/json/csv/html/png/jpg/jpeg

package/dist/skills/yos-support/SKILL.md

@@ -108,7 +108,7 @@ yos support upgrade-log --start 2026-10-01 --end 2026-10-10   # 按发布日期
 ## 5. `support feedback '<内容>'` — 提交反馈（写操作）
 
 ```bash
-yos support feedback '知识库上传 20MB 以上的 PDF 会失败，希望支持大文件分片'
+yos support feedback '检索结果希望支持按部门筛选'
 yos support feedback -- '转写结果说话人识别不准，希望提供纠错入口'      # 内容以 - 开头时必须加 --
 ```
 

package/dist/update-notice.js

@@ -3,6 +3,7 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { configDir, loadConfig, resolveChannel } from './config.js';
+import { isManaged } from './managed.js';
 import { compareVersions, getCliVersion } from './npm-meta.js';
 import { printErr } from './output.js';
 export const CACHE_TTL_MS = 10 * 60 * 1000;
@@ -48,6 +49,9 @@ export function evaluateNotice(input) {
     return 'notify';
 }
 export function handleUpdateNotice(commandName) {
+    if (isManaged()) {
+        return;
+    }
     try {
         const channel = resolveChannel(loadConfig());
         if (channel === null) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yosai/cli",
-  "version": "0.2.1-test.12",
+  "version": "0.2.1-test.14",
   "description": "YOS 能力的 Agent 执行入口：工具调用、知识库管理与文件上传",
   "type": "module",
   "bin": {