@yosai/cli 0.2.1-test.13 → 0.2.1-test.14

package/README.md

@@ -58,6 +58,7 @@ yos skill install      # 安装 9 个内置 Skill（总入口 + 领域 + 安装
 - 环境变量（均优先于配置文件，适合 CI/容器场景）：`YOS_API_KEY` 访问令牌、`YOS_ENV` 服务环境（prod / test / dev）
 - 版本检查：命令执行前会检查对应通道最新版（后台进程查询、结果缓存 10 分钟），落后时以 stderr 提示「请先执行 yos update 升级再继续任务」；升级通道自动跟随服务环境（测试环境跟 test 通道）。CLI 不静默安装，升级由用户或 Agent 按提示显式执行
 - 服务环境（测试/开发用）：`yos login --env test` 切到测试环境，`--env dev` 指向本机开发服务（http://localhost:8080）
+- 托管模式（YOS 客户端内置 CLI 专用）：`YOS_MANAGED=1` 时安装、升级、登录与 Skill 由客户端统一管理——不做版本检查与升级提示，拒绝 `update` / `install` / `login` / `skill install`，令牌只认客户端注入的 `YOS_API_KEY`（不读配置文件），`doctor` 跳过配置文件与 Skill 检查；客户端应同时以 `YOS_CONFIG_DIR` 指向自身私有目录，与用户自行安装的 CLI 配置隔离
 
 ## 故障排查
 

package/dist/cli.js

@@ -1,6 +1,7 @@
 import { parseArgs } from 'node:util';
 import { DOMAIN_META } from './domain-commands.js';
 import { CliError, EXIT, UsageError } from './errors.js';
+import { isBlockedInManaged, isManaged, MANAGED_HINT } from './managed.js';
 import { print, printErr, renderRows } from './output.js';
 import { handleUpdateNotice } from './update-notice.js';
 const registry = [];
@@ -17,7 +18,7 @@ export function renderHelp() {
         '  0. yos <领域> --help             按领域浏览能力（kb / docs / retrieve / support / transcript）',
         '  1. yos tool list                 动态发现全部工具（领域命令未覆盖时）',
         '  2. 领域命令未覆盖的场景用 yos tool schema / tool call 兜底',
-        '  3. yos skill install             安装内置 Skill，接入本机 AI 助手（Claude Code / Cursor / Qoder 等）',
+        ...(isManaged() ? [] : ['  3. yos skill install             安装内置 Skill，接入本机 AI 助手（Claude Code / Cursor / Qoder 等）']),
         '',
         '约定:',
         '  - 输出默认人类可读；--json 输出结构化结果（工具返回原文在 text 字段内）',
@@ -28,6 +29,7 @@ export function renderHelp() {
         '  YOS_API_KEY     访问令牌',
         '  YOS_ENV         服务环境（prod / test / dev；缺省生产）',
         '  YOS_CONFIG_DIR  配置目录（缺省 ~/.config/yos）',
+        '  YOS_MANAGED     托管模式（=1 时由 YOS 客户端托管，用户无需设置）',
         '',
         '示例:',
         '  yos doctor',
@@ -39,8 +41,9 @@ export function renderHelp() {
         '  yos docs download NDxxxx --out ./报告.pdf',
         '',
     ];
+    const visible = registry.filter((command) => !isBlockedInManaged(command.name));
     for (const group of GROUP_ORDER) {
-        const commands = registry.filter((command) => command.group === group);
+        const commands = visible.filter((command) => command.group === group);
         if (commands.length === 0) {
             continue;
         }
@@ -48,7 +51,7 @@ export function renderHelp() {
         lines.push(indentRows(renderRows(commands.map((command) => [command.name, command.description]))));
         lines.push('');
     }
-    const ungrouped = registry.filter((command) => !command.group);
+    const ungrouped = visible.filter((command) => !command.group);
     if (ungrouped.length > 0) {
         lines.push(indentRows(renderRows(ungrouped.map((command) => [command.name, command.description]))));
         lines.push('');
@@ -167,6 +170,11 @@ export async function dispatch(argv) {
         return EXIT.USAGE;
     }
     const { command, rest } = matched;
+    if (isBlockedInManaged(command.name)) {
+        printErr(`错误: 内置 CLI 不支持 yos ${command.name}`);
+        printErr(`提示: ${MANAGED_HINT}，无需也不能自行执行`);
+        return EXIT.USAGE;
+    }
     if (rest.includes('--help') || rest.includes('-h')) {
         print(renderCommandHelp(command));
         return EXIT.OK;

package/dist/commands/doctor.js

@@ -2,6 +2,7 @@ import { register } from '../cli.js';
 import { loadConfig, maskKey, resolveEnv, resolveKey } from '../config.js';
 import { DEFAULT_ENV, endpointOfEnv, envLabel } from '../endpoints.js';
 import { CliError, EXIT } from '../errors.js';
+import { isManaged } from '../managed.js';
 import { formatIdentity, OpenApisClient } from '../openapis-client.js';
 import { print, printJson } from '../output.js';
 import { readPackageMeta } from '../npm-meta.js';
@@ -18,11 +19,10 @@ register({
         const config = loadConfig();
         const env = resolveEnv(config);
         const endpoint = endpointOfEnv(env);
-        checks.push({
-            name: '配置文件',
-            ok: config !== null,
-            detail: config ? '已找到' : '未找到，请执行 yos login',
-        });
+        const managed = isManaged();
+        checks.push(managed
+            ? { name: '运行模式', ok: true, detail: '客户端托管（令牌与环境由 YOS 客户端注入）' }
+            : { name: '配置文件', ok: config !== null, detail: config ? '已找到' : '未找到，请执行 yos login' });
         if (env !== DEFAULT_ENV) {
             checks.push({
                 name: '服务环境',
@@ -54,11 +54,13 @@ register({
             }
         }
         const skillDirs = config?.installedSkillDirs ?? [];
-        checks.push({
-            name: 'Skill 安装',
-            ok: skillDirs.length > 0,
-            detail: skillDirs.length > 0 ? skillDirs.join(', ') : '尚未安装，执行 yos skill install',
-        });
+        if (!managed) {
+            checks.push({
+                name: 'Skill 安装',
+                ok: skillDirs.length > 0,
+                detail: skillDirs.length > 0 ? skillDirs.join(', ') : '尚未安装，执行 yos skill install',
+            });
+        }
         const meta = readPackageMeta();
         const envNote = env === DEFAULT_ENV ? '' : `（环境=${envLabel(env)}）`;
         checks.push({
@@ -66,12 +68,14 @@ register({
             ok: meta !== null,
             detail: meta ? `${meta.version}${envNote}` : 'unknown（未找到 package.json）',
         });
-        const state = loadVersionState();
-        checks.push({
-            name: 'Skill 同步',
-            ok: meta !== null && state?.version === meta.version && skillDirs.length > 0,
-            detail: skillSyncDetail(meta, state, skillDirs),
-        });
+        if (!managed) {
+            const state = loadVersionState();
+            checks.push({
+                name: 'Skill 同步',
+                ok: meta !== null && state?.version === meta.version && skillDirs.length > 0,
+                detail: skillSyncDetail(meta, state, skillDirs),
+            });
+        }
         if (flags.json) {
             printJson({ checks });
         }

package/dist/config.js

@@ -3,6 +3,7 @@ import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { channelOfEnv, DEFAULT_ENV, endpointOfEnv } from './endpoints.js';
 import { UsageError } from './errors.js';
+import { isManaged } from './managed.js';
 export function configDir() {
     return process.env.YOS_CONFIG_DIR ?? join(homedir(), '.config', 'yos');
 }
@@ -32,6 +33,9 @@ export function resolveKey(config) {
     if (fromEnv) {
         return fromEnv;
     }
+    if (isManaged()) {
+        throw new UsageError('未注入访问令牌', '内置 CLI 的令牌由 YOS 客户端注入 YOS_API_KEY，请重新登录 YOS 客户端');
+    }
     if (config?.apiKey) {
         return config.apiKey;
     }

package/dist/errors.js

@@ -1,3 +1,4 @@
+import { isManaged } from './managed.js';
 export const EXIT = {
     OK: 0,
     BUSINESS: 1,
@@ -33,11 +34,15 @@ export class NetworkError extends CliError {
 }
 export class AuthError extends CliError {
     constructor(message) {
-        super(message, EXIT.AUTH, '请执行 `yos login` 重新配置访问令牌');
+        super(message, EXIT.AUTH, isManaged()
+            ? '内置 CLI 的令牌由 YOS 客户端注入，请重新登录 YOS 客户端'
+            : '请执行 `yos login` 重新配置访问令牌');
     }
 }
 export class UpgradeError extends CliError {
     constructor(message, hint) {
-        super(message, EXIT.UPGRADE, hint ?? '执行 `yos update` 升级后重试');
+        super(message, EXIT.UPGRADE, isManaged()
+            ? '请升级 YOS 客户端后重试'
+            : hint ?? '执行 `yos update` 升级后重试');
     }
 }

package/dist/managed.js

@@ -0,0 +1,9 @@
+export const MANAGED_ENV = 'YOS_MANAGED';
+const MANAGED_BLOCKED_COMMANDS = new Set(['update', 'install', 'login', 'skill install']);
+export const MANAGED_HINT = '内置 CLI 的安装、升级、登录与 Skill 由 YOS 客户端统一管理';
+export function isManaged() {
+    return process.env[MANAGED_ENV] === '1';
+}
+export function isBlockedInManaged(commandName) {
+    return isManaged() && MANAGED_BLOCKED_COMMANDS.has(commandName);
+}

package/dist/update-notice.js

@@ -3,6 +3,7 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { configDir, loadConfig, resolveChannel } from './config.js';
+import { isManaged } from './managed.js';
 import { compareVersions, getCliVersion } from './npm-meta.js';
 import { printErr } from './output.js';
 export const CACHE_TTL_MS = 10 * 60 * 1000;
@@ -48,6 +49,9 @@ export function evaluateNotice(input) {
     return 'notify';
 }
 export function handleUpdateNotice(commandName) {
+    if (isManaged()) {
+        return;
+    }
     try {
         const channel = resolveChannel(loadConfig());
         if (channel === null) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yosai/cli",
-  "version": "0.2.1-test.13",
+  "version": "0.2.1-test.14",
   "description": "YOS 能力的 Agent 执行入口：工具调用、知识库管理与文件上传",
   "type": "module",
   "bin": {