ali-skills 0.0.13 → 0.0.15

package/node_modules/@ali/cli-skills/dist/cli.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { r as __toESM } from "./_chunks/rolldown-runtime.mjs";
+import { n as __require, r as __toESM } from "./_chunks/rolldown-runtime.mjs";
 import { l as pD, u as require_picocolors } from "./_chunks/libs/@clack/core.mjs";
-import { a as Y, c as ve, i as Se, l as xe, n as M, o as be, r as Me, s as fe, t as Ie, u as ye } from "./_chunks/libs/@clack/prompts.mjs";
+import { a as Y, c as ge, d as ye, i as Se, l as ve, n as M, o as be, r as Me, s as fe, t as Ie, u as xe } from "./_chunks/libs/@clack/prompts.mjs";
 import "./_chunks/libs/@kwsites/file-exists.mjs";
 import "./_chunks/libs/@kwsites/promise-deferred.mjs";
 import { t as esm_default } from "./_chunks/libs/simple-git.mjs";
@@ -9,15 +9,16 @@ import { t as require_gray_matter } from "./_chunks/libs/gray-matter.mjs";
 import "./_chunks/libs/extend-shallow.mjs";
 import "./_chunks/libs/esprima.mjs";
 import { t as xdgConfig } from "./_chunks/libs/xdg-basedir.mjs";
-import { execSync, spawn, spawnSync } from "child_process";
+import { execSync, spawn } from "child_process";
 import { createWriteStream, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { basename, dirname, isAbsolute, join, normalize, relative, resolve, sep } from "path";
 import { homedir, platform, tmpdir } from "os";
 import { createHash } from "crypto";
-import { fileURLToPath } from "url";
+import { URL as URL$1, fileURLToPath } from "url";
 import * as readline from "readline";
 import { Writable } from "stream";
 import { access, cp, lstat, mkdir, mkdtemp, readFile, readdir, readlink, realpath, rm, stat, symlink, writeFile } from "fs/promises";
+import * as http from "http";
 var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
 function getOwnerRepo(parsed) {
 	if (parsed.type === "local") return null;
@@ -162,6 +163,16 @@ function parseSource(input) {
 			ref
 		};
 	}
+	const internalRepoWithSubpathMatch = input.match(/^(https?:\/\/(?:[^@/]+@)?(?:code|gitlab)\.alibaba-inc\.com)\/([^/]+)\/([^/]+)\/(.+)$/);
+	if (internalRepoWithSubpathMatch) {
+		const [, host, owner, repo, subpath] = internalRepoWithSubpathMatch;
+		if (!owner || !repo) throw new Error(`Invalid internal URL format: ${input}`);
+		return {
+			type: "internal",
+			url: `${host.replace("gitlab.alibaba-inc.com", "code.alibaba-inc.com")}/${owner}/${repo.replace(/\.git$/, "")}.git`,
+			subpath: sanitizeSubpath(subpath)
+		};
+	}
 	if (isInternalUrl(input)) return {
 		type: "internal",
 		url: input.replace(/\bgitlab\.alibaba-inc\.com\b/g, "code.alibaba-inc.com")
@@ -1977,6 +1988,26 @@ async function fetchSkillFolderHash(ownerRepo, skillPath, token) {
 	}
 	return null;
 }
+async function fetchAliInternalCommitHash(source, skillPath = "", token) {
+	const branches = ["main", "master"];
+	const privateToken = token || process.env.GITLAB_PRIVATE_TOKEN || process.env.CODE_ALIBABA_TOKEN || GITLAB_ACCOUNT.token;
+	for (const branch of branches) try {
+		let url = `https://code.alibaba-inc.com/api/v4/projects/${encodeURIComponent(source)}/repository/commits?ref_name=${branch}&per_page=1`;
+		if (skillPath) url += `&path=${encodeURIComponent(skillPath)}`;
+		const headers = {
+			Accept: "application/json",
+			"User-Agent": "skills-cli",
+			"Private-Token": privateToken
+		};
+		const response = await fetch(url, { headers });
+		if (!response.ok) continue;
+		const data = await response.json();
+		if (data && data.length > 0) return data[0].id;
+	} catch {
+		continue;
+	}
+	return null;
+}
 async function addSkillToLock(skillName, entry) {
 	const lock = await readSkillLock$1();
 	const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -2101,7 +2132,7 @@ function logSkillParseFailures(failures) {
 		if (f.hint) M.message(import_picocolors.default.yellow(`  提示: ${f.hint}`));
 	}
 }
-var version$1 = "2.0.13";
+var version$1 = "2.0.15";
 const isCancelled$1 = (value) => typeof value === "symbol";
 async function isSourcePrivate(source) {
 	const ownerRepo = parseOwnerRepo(source);
@@ -2641,7 +2672,8 @@ async function runAdd(args, options = {}) {
 		} else {
 			spinner.start("Cloning repository...");
 			try {
-				tempDir = await cloneRepo(parsed.url, parsed.ref);
+				const ref = parsed.ref === "HEAD" ? void 0 : parsed.ref;
+				tempDir = await cloneRepo(parsed.url, ref);
 				skillsDir = tempDir;
 				spinner.stop("Repository cloned");
 			} catch (cloneError) {
@@ -3108,11 +3140,25 @@ async function runAdd(args, options = {}) {
 				const skillDisplayName = getSkillDisplayName(skill);
 				if (successfulSkillNames.has(skillDisplayName)) try {
 					const computedHash = await computeSkillFolderHash(skill.path);
-					await addSkillToLocalLock(skill.name, {
+					const skillFilePath = skillFiles[skill.name];
+					const lockEntry = {
 						source: lockSource || parsed.url,
 						sourceType: effectiveSourceType,
 						computedHash
-					}, cwd);
+					};
+					if (effectiveSourceType === "github" && skillFilePath && normalizedSource) {
+						const folderHash = await fetchSkillFolderHash(normalizedSource, skillFilePath, getGitHubToken());
+						if (folderHash) lockEntry.skillFolderHash = folderHash;
+						lockEntry.skillPath = skillFilePath.replace(/\/?SKILL\.md$/i, "").replace(/\/+$/, "");
+					}
+					if (effectiveSourceType === "internal") {
+						const source = normalizedSource || getOwnerRepo(parsed) || parsed.url;
+						const skillFolder = skillFilePath ? skillFilePath.replace(/\/?SKILL\.md$/i, "").replace(/\/+$/, "") : "";
+						const commitHash = await fetchAliInternalCommitHash(source, skillFolder, null);
+						if (commitHash) lockEntry.commitHash = commitHash;
+						lockEntry.skillPath = skillFolder;
+					}
+					await addSkillToLocalLock(skill.name, lockEntry, cwd);
 				} catch {}
 			}
 		}
@@ -3254,12 +3300,12 @@ function parseAddOptions(args) {
 		options
 	};
 }
-const RESET$2 = "\x1B[0m";
+const RESET$5 = "\x1B[0m";
 const BOLD$2 = "\x1B[1m";
-const DIM$2 = "\x1B[38;5;102m";
-const TEXT$1 = "\x1B[38;5;145m";
+const DIM$5 = "\x1B[38;5;102m";
+const TEXT$4 = "\x1B[38;5;145m";
 const CYAN$1 = "\x1B[36m";
-const YELLOW$1 = "\x1B[33m";
+const YELLOW$4 = "\x1B[33m";
 const SKILLS_API_URL = process.env.SKILLS_API_URL;
 const SEARCH_ENDPOINT = SKILLS_API_URL ? `${SKILLS_API_URL.replace(/\/+$/, "")}/search` : "https://next-ai-base.pre-fn.alibaba-inc.com/api/skills/search";
 function formatInstalls(count) {
@@ -3313,29 +3359,29 @@ async function runSearchPrompt(initialQuery = "") {
 		if (lastRenderedLines > 0) process.stdout.write(MOVE_UP(lastRenderedLines) + MOVE_TO_COL(1));
 		process.stdout.write(CLEAR_DOWN);
 		const lines = [];
-		const cursor = `${BOLD$2}_${RESET$2}`;
-		lines.push(`${TEXT$1}Search skills:${RESET$2} ${query}${cursor}`);
+		const cursor = `${BOLD$2}_${RESET$5}`;
+		lines.push(`${TEXT$4}Search skills:${RESET$5} ${query}${cursor}`);
 		lines.push("");
-		if (!query || query.length < 2) lines.push(`${DIM$2}Start typing to search (min 2 chars)${RESET$2}`);
-		else if (results.length === 0 && loading) lines.push(`${DIM$2}Searching...${RESET$2}`);
-		else if (results.length === 0) lines.push(`${DIM$2}No skills found${RESET$2}`);
+		if (!query || query.length < 2) lines.push(`${DIM$5}Start typing to search (min 2 chars)${RESET$5}`);
+		else if (results.length === 0 && loading) lines.push(`${DIM$5}Searching...${RESET$5}`);
+		else if (results.length === 0) lines.push(`${DIM$5}No skills found${RESET$5}`);
 		else {
 			const visible = results.slice(0, 8);
 			for (let i = 0; i < visible.length; i++) {
 				const skill = visible[i];
 				const isSelected = i === selectedIndex;
-				const arrow = isSelected ? `${BOLD$2}>${RESET$2}` : " ";
-				const name = isSelected ? `${BOLD$2}${skill.name}${RESET$2}` : `${TEXT$1}${skill.name}${RESET$2}`;
-				const source = skill.source ? ` ${DIM$2}${skill.source}${RESET$2}` : "";
+				const arrow = isSelected ? `${BOLD$2}>${RESET$5}` : " ";
+				const name = isSelected ? `${BOLD$2}${skill.name}${RESET$5}` : `${TEXT$4}${skill.name}${RESET$5}`;
+				const source = skill.source ? ` ${DIM$5}${skill.source}${RESET$5}` : "";
 				const installs = formatInstalls(skill.installs);
-				const installsBadge = installs ? ` ${CYAN$1}${installs}${RESET$2}` : "";
-				const githubBadge = skill.sourceType === "github" ? ` ${YELLOW$1}GitHub${RESET$2}` : "";
-				const loadingIndicator = loading && i === 0 ? ` ${DIM$2}...${RESET$2}` : "";
+				const installsBadge = installs ? ` ${CYAN$1}${installs}${RESET$5}` : "";
+				const githubBadge = skill.sourceType === "github" ? ` ${YELLOW$4}GitHub${RESET$5}` : "";
+				const loadingIndicator = loading && i === 0 ? ` ${DIM$5}...${RESET$5}` : "";
 				lines.push(`  ${arrow} ${name}${source}${githubBadge}${installsBadge}${loadingIndicator}`);
 			}
 		}
 		lines.push("");
-		lines.push(`${DIM$2}up/down navigate | enter select | esc cancel${RESET$2}`);
+		lines.push(`${DIM$5}up/down navigate | enter select | esc cancel${RESET$5}`);
 		for (const line of lines) process.stdout.write(line + "\n");
 		lastRenderedLines = lines.length;
 	}
@@ -3419,9 +3465,9 @@ async function runSearchPrompt(initialQuery = "") {
 async function runFind(args) {
 	const query = args.join(" ");
 	const isNonInteractive = !process.stdin.isTTY;
-	const agentTip = `${DIM$2}Tip: if running in a coding agent, follow these steps:${RESET$2}
-${DIM$2}  1) npx @ali/cli-skills find [query]${RESET$2}
-${DIM$2}  2) npx @ali/cli-skills add <owner/repo@skill>${RESET$2}`;
+	const agentTip = `${DIM$5}Tip: if running in a coding agent, follow these steps:${RESET$5}
+${DIM$5}  1) npx @ali/cli-skills find [query]${RESET$5}
+${DIM$5}  2) npx @ali/cli-skills add <owner/repo@skill>${RESET$5}`;
 	if (query) {
 		const results = await searchSkillsAPI(query);
 		track({
@@ -3430,18 +3476,18 @@ ${DIM$2}  2) npx @ali/cli-skills add <owner/repo@skill>${RESET$2}`;
 			resultCount: String(results.length)
 		});
 		if (results.length === 0) {
-			console.log(`${DIM$2}No skills found for "${query}"${RESET$2}`);
+			console.log(`${DIM$5}No skills found for "${query}"${RESET$5}`);
 			return;
 		}
-		console.log(`${DIM$2}Install with${RESET$2} npx ali-skills add <owner/repo>`);
+		console.log(`${DIM$5}Install with${RESET$5} npx ali-skills add <owner/repo>`);
 		console.log();
 		for (const skill of results.slice(0, 6)) {
 			const pkg = skill.source || skill.slug;
 			const installs = formatInstalls(skill.installs);
-			const githubBadge = skill.sourceType === "github" ? ` ${YELLOW$1}GitHub${RESET$2}` : "";
-			console.log(`${TEXT$1}${pkg}@${skill.name}${RESET$2}${githubBadge}${installs ? ` ${CYAN$1}${installs}${RESET$2}` : ""}`);
+			const githubBadge = skill.sourceType === "github" ? ` ${YELLOW$4}GitHub${RESET$5}` : "";
+			console.log(`${TEXT$4}${pkg}@${skill.name}${RESET$5}${githubBadge}${installs ? ` ${CYAN$1}${installs}${RESET$5}` : ""}`);
 			const skillUrl = buildSkillUrl(skill);
-			console.log(`${DIM$2}└ ${skillUrl}${RESET$2}`);
+			console.log(`${DIM$5}└ ${skillUrl}${RESET$5}`);
 			console.log();
 		}
 		return;
@@ -3458,14 +3504,14 @@ ${DIM$2}  2) npx @ali/cli-skills add <owner/repo@skill>${RESET$2}`;
 		interactive: "1"
 	});
 	if (!selected) {
-		console.log(`${DIM$2}Search cancelled${RESET$2}`);
+		console.log(`${DIM$5}Search cancelled${RESET$5}`);
 		console.log();
 		return;
 	}
 	const pkg = selected.source || selected.slug;
 	const skillName = selected.name;
 	console.log();
-	console.log(`${TEXT$1}Installing ${BOLD$2}${skillName}${RESET$2} from ${DIM$2}${pkg}${RESET$2}...`);
+	console.log(`${TEXT$4}Installing ${BOLD$2}${skillName}${RESET$5} from ${DIM$5}${pkg}${RESET$5}...`);
 	console.log();
 	const { source, options } = parseAddOptions([
 		pkg,
@@ -3475,7 +3521,7 @@ ${DIM$2}  2) npx @ali/cli-skills add <owner/repo@skill>${RESET$2}`;
 	await runAdd(source, options);
 	console.log();
 	const skillUrl = buildSkillUrl(selected);
-	console.log(`${DIM$2}View the skill at${RESET$2} ${TEXT$1}${skillUrl}${RESET$2}`);
+	console.log(`${DIM$5}View the skill at${RESET$5} ${TEXT$4}${skillUrl}${RESET$5}`);
 	console.log();
 }
 const isCancelled = (value) => typeof value === "symbol";
@@ -3813,11 +3859,11 @@ async function runInstallFromLock(args) {
 		}
 	}
 }
-const RESET$1 = "\x1B[0m";
+const RESET$4 = "\x1B[0m";
 const BOLD$1 = "\x1B[1m";
-const DIM$1 = "\x1B[38;5;102m";
+const DIM$4 = "\x1B[38;5;102m";
 const CYAN = "\x1B[36m";
-const YELLOW = "\x1B[33m";
+const YELLOW$3 = "\x1B[33m";
 function shortenPath(fullPath, cwd) {
 	const home = homedir();
 	if (fullPath.startsWith(home)) return fullPath.replace(home, "~");
@@ -3851,8 +3897,8 @@ async function runList(args) {
 		const validAgents = Object.keys(agents);
 		const invalidAgents = options.agent.filter((a) => !validAgents.includes(a));
 		if (invalidAgents.length > 0) {
-			console.log(`${YELLOW}Invalid agents: ${invalidAgents.join(", ")}${RESET$1}`);
-			console.log(`${DIM$1}Valid agents: ${validAgents.join(", ")}${RESET$1}`);
+			console.log(`${YELLOW$3}Invalid agents: ${invalidAgents.join(", ")}${RESET$4}`);
+			console.log(`${DIM$4}Valid agents: ${validAgents.join(", ")}${RESET$4}`);
 			process.exit(1);
 		}
 		agentFilter = options.agent;
@@ -3879,20 +3925,20 @@ async function runList(args) {
 			console.log("[]");
 			return;
 		}
-		console.log(`${DIM$1}No ${scopeLabel.toLowerCase()} skills found.${RESET$1}`);
-		if (scope) console.log(`${DIM$1}Try listing project skills without -g${RESET$1}`);
-		else console.log(`${DIM$1}Try listing global skills with -g${RESET$1}`);
+		console.log(`${DIM$4}No ${scopeLabel.toLowerCase()} skills found.${RESET$4}`);
+		if (scope) console.log(`${DIM$4}Try listing project skills without -g${RESET$4}`);
+		else console.log(`${DIM$4}Try listing global skills with -g${RESET$4}`);
 		return;
 	}
 	function printSkill(skill, indent = false) {
 		const prefix = indent ? "  " : "";
 		const shortPath = shortenPath(skill.canonicalPath, cwd);
 		const agentNames = skill.agents.map((a) => agents[a].displayName);
-		const agentInfo = skill.agents.length > 0 ? formatList(agentNames) : `${YELLOW}not linked${RESET$1}`;
-		console.log(`${prefix}${CYAN}${skill.name}${RESET$1} ${DIM$1}${shortPath}${RESET$1}`);
-		console.log(`${prefix}  ${DIM$1}Agents:${RESET$1} ${agentInfo}`);
+		const agentInfo = skill.agents.length > 0 ? formatList(agentNames) : `${YELLOW$3}not linked${RESET$4}`;
+		console.log(`${prefix}${CYAN}${skill.name}${RESET$4} ${DIM$4}${shortPath}${RESET$4}`);
+		console.log(`${prefix}  ${DIM$4}Agents:${RESET$4} ${agentInfo}`);
 	}
-	console.log(`${BOLD$1}${scopeLabel} Skills${RESET$1}`);
+	console.log(`${BOLD$1}${scopeLabel} Skills${RESET$4}`);
 	console.log();
 	const groupedSkills = {};
 	const ungroupedSkills = [];
@@ -3908,13 +3954,13 @@ async function runList(args) {
 		const sortedGroups = Object.keys(groupedSkills).sort();
 		for (const group of sortedGroups) {
 			const title = group.split("-").map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(" ");
-			console.log(`${BOLD$1}${title}${RESET$1}`);
+			console.log(`${BOLD$1}${title}${RESET$4}`);
 			const skills = groupedSkills[group];
 			if (skills) for (const skill of skills) printSkill(skill, true);
 			console.log();
 		}
 		if (ungroupedSkills.length > 0) {
-			console.log(`${BOLD$1}General${RESET$1}`);
+			console.log(`${BOLD$1}General${RESET$4}`);
 			for (const skill of ungroupedSkills) printSkill(skill, true);
 			console.log();
 		}
@@ -4397,6 +4443,758 @@ function parsePublishOptions(args) {
 	}
 	return { options };
 }
+const CONFIG_DIR = join(homedir(), ".ali-skills");
+const CONFIG_FILE = join(CONFIG_DIR, "config.json");
+const AUTH_FILE = join(CONFIG_DIR, "auth.json");
+function ensureConfigDir() {
+	if (!existsSync(CONFIG_DIR)) mkdirSync(CONFIG_DIR, {
+		recursive: true,
+		mode: 448
+	});
+}
+function safeWriteFile(path, data) {
+	ensureConfigDir();
+	writeFileSync(path, data, { mode: 384 });
+}
+function readConfig() {
+	try {
+		if (!existsSync(CONFIG_FILE)) return {
+			version: 1,
+			gatewayUrl: getGatewayUrl(),
+			defaultTimeout: 3e4
+		};
+		const content = readFileSync(CONFIG_FILE, "utf-8");
+		return JSON.parse(content);
+	} catch {
+		return {
+			version: 1,
+			gatewayUrl: getGatewayUrl(),
+			defaultTimeout: 3e4
+		};
+	}
+}
+function saveConfig(config) {
+	safeWriteFile(CONFIG_FILE, JSON.stringify(config, null, 2));
+}
+function readAuth() {
+	try {
+		if (!existsSync(AUTH_FILE)) return null;
+		const content = readFileSync(AUTH_FILE, "utf-8");
+		return JSON.parse(content);
+	} catch {
+		return null;
+	}
+}
+function saveAuth(auth) {
+	const data = {
+		version: 1,
+		...auth
+	};
+	safeWriteFile(AUTH_FILE, JSON.stringify(data, null, 2));
+}
+function removeAuth() {
+	try {
+		if (existsSync(AUTH_FILE)) {
+			const { unlinkSync } = __require("fs");
+			unlinkSync(AUTH_FILE);
+		}
+	} catch {}
+}
+function isAuthExpired(auth) {
+	return Date.now() >= auth.expiresAt - 10080 * 60 * 1e3;
+}
+function getPrivateToken() {
+	return readAuth()?.privateToken || null;
+}
+function getGatewayUrl() {
+	const envUrl = process.env.SKILLS_API_URL || process.env.ALI_GATEWAY_URL;
+	if (envUrl) switch (envUrl.toLowerCase()) {
+		case "local": return "http://localhost:3000";
+		case "daily": return "https://next-ai-base.pre-fn.alibaba-inc.com";
+		case "pre": return "https://ali-skills.pre.alibaba-inc.com";
+		case "prod": return "https://ali-skills.alibaba-inc.com";
+		default: return envUrl;
+	}
+	return "https://ali-skills.alibaba-inc.com";
+}
+function getConfigFilePath() {
+	return CONFIG_FILE;
+}
+function setPlatformToken(platform, data) {
+	const config = readConfig();
+	if (!config.platforms) config.platforms = {};
+	config.platforms[platform] = data;
+	saveConfig(config);
+}
+function removePlatformToken(platform) {
+	const config = readConfig();
+	if (config.platforms && config.platforms[platform]) {
+		delete config.platforms[platform];
+		saveConfig(config);
+	}
+}
+const DIM$3 = "\x1B[38;5;102m";
+const TEXT$3 = "\x1B[38;5;145m";
+const RESET$3 = "\x1B[0m";
+const GREEN$2 = "\x1B[32m";
+const YELLOW$2 = "\x1B[33m";
+function startLocalServer() {
+	return new Promise((resolve) => {
+		let resolveCallback;
+		const callbackPromise = new Promise((resolve) => {
+			resolveCallback = resolve;
+		});
+		const server = http.createServer((req, res) => {
+			const url = new URL$1(req.url || "/", `http://localhost`);
+			if (url.pathname === "/callback") {
+				const empId = url.searchParams.get("emp_id") || "";
+				const account = url.searchParams.get("account") || "";
+				const name = url.searchParams.get("name") || "";
+				const privateToken = url.searchParams.get("private_token") || "";
+				const ssoRefreshToken = url.searchParams.get("sso_refresh_token") || "";
+				const expiresAt = url.searchParams.get("expires_at") || "0";
+				if (!empId || !privateToken) {
+					res.writeHead(400, { "Content-Type": "text/html" });
+					res.end(`
+            <html>
+              <body style="font-family: sans-serif; text-align: center; padding: 50px;">
+                <h1 style="color: #ff4d4f;">登录失败</h1>
+                <p>缺少必要的参数</p>
+              </body>
+            </html>
+          `);
+					return;
+				}
+				res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+				res.end(`
+          <html>
+            <head><meta charset='UTF-8'><title>登录成功</title>
+              <style>
+                body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; text-align: center; padding: 50px; background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); color: white; min-height: 100vh; margin: 0; display: flex; flex-direction: column; justify-content: center; align-items: center; }
+                .card { background: rgba(255, 255, 255, 0.95); padding: 40px; border-radius: 16px; box-shadow: 0 20px 60px rgba(0,0,0,0.3); color: #333; max-width: 400px; }
+                h1 { margin: 0 0 16px 0; color: #52c41a; }
+                .icon { font-size: 64px; margin-bottom: 16px; }
+                .user-info { background: #f6ffed; border: 1px solid #b7eb8f; border-radius: 8px; padding: 16px; margin: 16px 0; text-align: left; }
+                .user-info p { margin: 8px 0; }
+                .hint { color: #666; font-size: 14px; margin-top: 24px; }
+              </style>
+            </head>
+            <body>
+              <div class="card">
+                <div class="icon">✓</div>
+                <h1>登录成功</h1>
+                <div class="user-info">
+                  <p><strong>姓名:</strong> ${name}</p>
+                  <p><strong>账号:</strong> ${account}</p>
+                  <p><strong>工号:</strong> ${empId}</p>
+                </div>
+                <p class="hint">您可以关闭此页面并返回 CLI</p>
+              </div>
+            </body>
+          </html>
+        `);
+				resolveCallback({
+					empId,
+					account,
+					name,
+					privateToken,
+					ssoRefreshToken,
+					expiresAt: parseInt(expiresAt, 10)
+				});
+				setTimeout(() => server.close(), 1e3);
+			} else {
+				res.writeHead(404);
+				res.end("Not Found");
+			}
+		});
+		server.listen(0, "localhost", () => {
+			const port = server.address().port;
+			resolve({
+				port,
+				waitForCallback: () => callbackPromise,
+				close: () => server.close()
+			});
+		});
+	});
+}
+function openBrowser$2(url) {
+	const platform = process.platform;
+	spawn(platform === "darwin" ? "open" : platform === "win32" ? "start" : "xdg-open", [url], {
+		detached: true,
+		stdio: "ignore"
+	});
+}
+async function login() {
+	const existingAuth = readAuth();
+	if (existingAuth && !isAuthExpired(existingAuth)) {
+		console.log(`${TEXT$3}您已经登录为: ${existingAuth.name} (${existingAuth.account})${RESET$3}`);
+		console.log(`${DIM$3}如需重新登录，请先执行: npx ali-skills logout${RESET$3}`);
+		return;
+	}
+	console.log(`${TEXT$3}正在启动本地服务...${RESET$3}`);
+	const { port, waitForCallback, close } = await startLocalServer();
+	const callbackUrl = `http://localhost:${port}/callback`;
+	const gatewayUrl = getGatewayUrl();
+	const loginUrl = `${gatewayUrl}/api/gateway/login?callback_url=${encodeURIComponent(callbackUrl)}&type=cli`;
+	console.log(`${TEXT$3}正在打开浏览器进行 BUC 授权...${RESET$3}`);
+	console.log(`${DIM$3}如果浏览器没有自动打开，请手动访问:${RESET$3}`);
+	console.log(`${DIM$3}${loginUrl}${RESET$3}`);
+	openBrowser$2(loginUrl);
+	console.log(`${TEXT$3}等待授权完成...${RESET$3}`);
+	try {
+		const { empId, account, name, privateToken, ssoRefreshToken, expiresAt } = await waitForCallback();
+		saveAuth({
+			empId,
+			account,
+			name,
+			privateToken,
+			ssoRefreshToken,
+			expiresAt: expiresAt * 1e3,
+			gatewayUrl
+		});
+		console.log();
+		console.log(`${GREEN$2}✓ 登录成功！${RESET$3}`);
+		console.log(`${TEXT$3}欢迎: ${name} (${account})${RESET$3}`);
+		console.log(`${DIM$3}Token 有效期至: ${(/* @__PURE__ */ new Date(expiresAt * 1e3)).toLocaleDateString()}${RESET$3}`);
+		if (!ssoRefreshToken) console.log(`${DIM$3}注意: SSO_REFRESH_TOKEN 未获取，需要时将从服务端获取${RESET$3}`);
+	} catch (error) {
+		close();
+		throw error;
+	}
+}
+async function logout() {
+	if (!readAuth()) {
+		console.log(`${DIM$3}您尚未登录${RESET$3}`);
+		return;
+	}
+	removeAuth();
+	console.log(`${GREEN$2}✓ 已登出${RESET$3}`);
+}
+async function status() {
+	const auth = readAuth();
+	if (!auth) {
+		console.log(`${DIM$3}您尚未登录${RESET$3}`);
+		console.log(`${TEXT$3}请执行: npx ali-skills login${RESET$3}`);
+		return;
+	}
+	const expired = isAuthExpired(auth);
+	const remaining = auth.expiresAt - Date.now();
+	const remainingDays = Math.max(0, Math.floor(remaining / (1440 * 60 * 1e3)));
+	console.log(`${TEXT$3}登录状态:${RESET$3}`);
+	console.log(`  用户: ${auth.name} (${auth.account})`);
+	console.log(`  工号: ${auth.empId}`);
+	console.log(`  网关: ${auth.gatewayUrl}`);
+	if (expired) {
+		console.log(`  Token: ${YELLOW$2}即将过期${RESET$3}`);
+		console.log(`${TEXT$3}建议重新登录: npx ali-skills login${RESET$3}`);
+	} else console.log(`  Token: ${GREEN$2}有效${RESET$3} (还剩 ${remainingDays} 天)`);
+}
+async function ensureLogin() {
+	const auth = readAuth();
+	if (!auth) throw new Error("未登录，请先执行: npx ali-skills login");
+	if (isAuthExpired(auth)) throw new Error("登录已过期，请重新执行: npx ali-skills login");
+	return {
+		privateToken: auth.privateToken,
+		ssoRefreshToken: auth.ssoRefreshToken
+	};
+}
+const PLATFORMS = {
+	code: {
+		name: "Code (GitLab)",
+		host: "code.alibaba-inc.com",
+		aliases: ["gitlab", "git"],
+		authType: "private_token",
+		tokenHeaderName: "PRIVATE-TOKEN",
+		tokenDocUrl: "https://code.alibaba-inc.com/profile/account"
+	},
+	yuque: {
+		name: "语雀",
+		host: "aliyuque.antfin.com",
+		aliases: ["yuque"],
+		authType: "private_token",
+		tokenHeaderName: "X-Auth-Token",
+		tokenDocUrl: "https://aliyuque.antfin.com/settings/tokens"
+	},
+	o2: {
+		name: "O2 平台",
+		host: "o2.alibaba-inc.com",
+		authType: "app_code+buc",
+		appCode: process.env.O2_APP_CODE || "SYKcE5kklxmOS7Z2XatNn"
+	},
+	o2open: {
+		name: "O2 开放接口",
+		host: "open.o2.alibaba-inc.com",
+		authType: "app_code",
+		appCode: process.env.O2_APP_CODE || "cli-skills"
+	},
+	aone: {
+		name: "Aone",
+		host: "aone.alibaba-inc.com",
+		authType: "buc_sso_refresh",
+		ssoType: "refresh_token"
+	},
+	aonedevops: {
+		name: "Aone DevOps",
+		host: "devops.alibaba-inc.com",
+		authType: "buc_sso_refresh",
+		ssoType: "refresh_token"
+	}
+};
+function detectPlatformWithKey(hostname) {
+	for (const [key, config] of Object.entries(PLATFORMS)) {
+		if (config.host === hostname) return {
+			key,
+			config
+		};
+		if (config.aliases?.some((alias) => hostname.includes(alias))) return {
+			key,
+			config
+		};
+	}
+	for (const [key, config] of Object.entries(PLATFORMS)) if (hostname.endsWith(config.host) || hostname === config.host) return {
+		key,
+		config
+	};
+	return null;
+}
+function getPlatform(key) {
+	if (PLATFORMS[key]) return PLATFORMS[key];
+	for (const [, config] of Object.entries(PLATFORMS)) if (config.aliases?.includes(key)) return config;
+	return null;
+}
+function listPlatforms() {
+	return Object.entries(PLATFORMS).map(([key, config]) => ({
+		key,
+		config
+	}));
+}
+const DIM$2 = "\x1B[38;5;102m";
+const TEXT$2 = "\x1B[38;5;145m";
+const RESET$2 = "\x1B[0m";
+const GREEN$1 = "\x1B[32m";
+const RED$1 = "\x1B[31m";
+const YELLOW$1 = "\x1B[33m";
+function openBrowser$1(url) {
+	const platform = process.platform;
+	spawn(platform === "darwin" ? "open" : platform === "win32" ? "start" : "xdg-open", [url], {
+		detached: true,
+		stdio: "ignore"
+	});
+}
+function detectAuthMode(platformKey, platform, hostname) {
+	if (platform.authType === "private_token") return "private_token";
+	if (platformKey === "o2" || platform.authType === "app_code+buc") return "app_code+buc";
+	if (platform.authType === "app_code") return "app_code";
+	if (hostname.endsWith(".alibaba-inc.com") || hostname === "alibaba-inc.com") return "sso_cookie";
+	return "sso_ticket";
+}
+function getAuthModeDescription(mode) {
+	switch (mode) {
+		case "private_token": return "Private Token";
+		case "app_code": return "App Code";
+		case "app_code+buc": return "App Code + BUC SSO";
+		case "sso_cookie": return "SSO Cookie (REFRESH_TOKEN)";
+		case "sso_ticket": return "SSO Ticket";
+		case "gateway": return "Gateway Proxy";
+		default: return "Auto";
+	}
+}
+function getPlatformPrivateToken(platformKey, explicitToken) {
+	if (explicitToken) return explicitToken;
+	const envVarName = `ALI_SKILLS_${platformKey.toUpperCase()}_TOKEN`;
+	const envToken = process.env[envVarName] || process.env[`${platformKey.toUpperCase()}_TOKEN`];
+	if (envToken) return envToken;
+	return readConfig().platforms?.[platformKey]?.privateToken || null;
+}
+async function promptConfigureToken(platformKey, platform) {
+	console.log();
+	console.log(`${YELLOW$1}⚠️  ${platform.name} 需要配置 Private Token${RESET$2}`);
+	if (platform.tokenDocUrl) console.log(`${DIM$2}Token 获取地址: ${platform.tokenDocUrl}${RESET$2}`);
+	if (!await ye({
+		message: "是否现在配置?",
+		initialValue: true
+	})) {
+		console.log(`${DIM$2}已取消配置${RESET$2}`);
+		return null;
+	}
+	if (platform.tokenDocUrl) {
+		console.log(`${TEXT$2}正在打开浏览器...${RESET$2}`);
+		openBrowser$1(platform.tokenDocUrl);
+	}
+	const token = await ge({
+		message: `请输入 ${platform.name} 的 Private Token:`,
+		mask: "*"
+	});
+	if (pD(token) || !token) {
+		console.log(`${DIM$2}已取消配置${RESET$2}`);
+		return null;
+	}
+	setPlatformToken(platformKey, { privateToken: token });
+	console.log(`${GREEN$1}✓ ${platform.name} Token 已保存${RESET$2}`);
+	return token;
+}
+async function sendDirectRequest(targetUrl, platform, token, options) {
+	const requestHeaders = {
+		"User-Agent": "ali-skills-cli/1.0",
+		[platform.tokenHeaderName]: token
+	};
+	if (options.headers) Object.entries(options.headers).forEach(([key, value]) => {
+		if (key.toLowerCase() !== platform.tokenHeaderName?.toLowerCase()) requestHeaders[key] = value;
+	});
+	let body;
+	if (options.body) {
+		body = options.body;
+		if (!requestHeaders["Content-Type"]) requestHeaders["Content-Type"] = "application/json";
+	}
+	if (!options.quiet) {
+		console.log(`${DIM$2}${options.method.toUpperCase()} ${targetUrl}${RESET$2}`);
+		console.log(`${DIM$2}→ 直接请求 (Header: ${platform.tokenHeaderName})${RESET$2}`);
+	}
+	const controller = new AbortController();
+	const timeout = options.timeout || 3e4;
+	const timeoutId = setTimeout(() => controller.abort(), timeout);
+	const response = await fetch(targetUrl, {
+		method: options.method.toUpperCase(),
+		headers: requestHeaders,
+		body: body || void 0,
+		signal: controller.signal
+	});
+	clearTimeout(timeoutId);
+	const responseBody = await response.text();
+	if (!options.quiet) {
+		const statusColor = response.ok ? GREEN$1 : RED$1;
+		console.log(`${statusColor}${response.status} ${response.statusText}${RESET$2}`);
+		if (options.includeHeaders) {
+			console.log();
+			console.log(`${TEXT$2}Response Headers:${RESET$2}`);
+			response.headers.forEach((value, key) => {
+				console.log(`  ${key}: ${value}`);
+			});
+			console.log();
+		}
+	}
+	let outputBody = responseBody;
+	if (!options.raw && options.pretty !== false) try {
+		const json = JSON.parse(responseBody);
+		outputBody = JSON.stringify(json, null, 2);
+	} catch {}
+	if (options.output) {
+		const { writeFileSync } = __require("fs");
+		writeFileSync(options.output, outputBody);
+		console.log(`${GREEN$1}✓ 已保存到 ${options.output}${RESET$2}`);
+	} else console.log(outputBody);
+	if (!response.ok) process.exit(1);
+}
+async function sendGatewayRequest(targetUrl, platformKey, options, authMode = "gateway") {
+	let credentials;
+	try {
+		credentials = await ensureLogin();
+	} catch (error) {
+		console.error(`${RED$1}Error: ${error.message}${RESET$2}`);
+		process.exit(1);
+	}
+	const proxyUrl = `${getGatewayUrl()}/api/gateway/proxy`;
+	const requestHeaders = {
+		Authorization: `Bearer ${credentials.privateToken}`,
+		"X-Private-Token": credentials.privateToken,
+		"X-Target-Url": targetUrl,
+		"X-Target-Method": options.method.toUpperCase(),
+		"X-Platform": platformKey,
+		"X-Auth-Mode": authMode
+	};
+	if (options.headers) Object.entries(options.headers).forEach(([key, value]) => {
+		requestHeaders[key] = value;
+	});
+	let body;
+	if (options.body) {
+		body = options.body;
+		if (!requestHeaders["Content-Type"]) requestHeaders["Content-Type"] = "application/json";
+	}
+	if (!options.quiet) {
+		console.log(`${DIM$2}${options.method.toUpperCase()} ${targetUrl}${RESET$2}`);
+		console.log(`${DIM$2}→ Gateway: ${proxyUrl}${RESET$2}`);
+	}
+	const controller = new AbortController();
+	const timeout = options.timeout || 3e4;
+	const timeoutId = setTimeout(() => controller.abort(), timeout);
+	const response = await fetch(proxyUrl, {
+		method: "POST",
+		headers: requestHeaders,
+		body: body || void 0,
+		signal: controller.signal
+	});
+	clearTimeout(timeoutId);
+	if (response.status === 401) {
+		if ((await response.json().catch(() => ({
+			error: "Unauthorized",
+			code: "UNKNOWN"
+		}))).code === "INVALID_TOKEN") {
+			console.error(`${RED$1}Error: Token 已失效，请重新登录${RESET$2}`);
+			console.log(`${TEXT$2}执行: npx ali-skills login${RESET$2}`);
+			process.exit(1);
+		}
+	}
+	const responseBody = await response.text();
+	const requestId = response.headers.get("X-Gateway-Request-Id");
+	if (!options.quiet) {
+		const statusColor = response.ok ? GREEN$1 : RED$1;
+		console.log(`${statusColor}${response.status} ${response.statusText}${RESET$2}`);
+		if (requestId) console.log(`${DIM$2}Request ID: ${requestId}${RESET$2}`);
+		if (options.includeHeaders) {
+			console.log();
+			console.log(`${TEXT$2}Response Headers:${RESET$2}`);
+			response.headers.forEach((value, key) => {
+				console.log(`  ${key}: ${value}`);
+			});
+			console.log();
+		}
+	}
+	let outputBody = responseBody;
+	if (!options.raw && options.pretty !== false) try {
+		const json = JSON.parse(responseBody);
+		outputBody = JSON.stringify(json, null, 2);
+	} catch {}
+	if (options.output) {
+		const { writeFileSync } = __require("fs");
+		writeFileSync(options.output, outputBody);
+		console.log(`${GREEN$1}✓ 已保存到 ${options.output}${RESET$2}`);
+	} else console.log(outputBody);
+	if (!response.ok) process.exit(1);
+}
+async function proxyRequest(targetUrl, options) {
+	let url;
+	try {
+		url = new URL(targetUrl);
+	} catch {
+		console.error(`${RED$1}Error: 无效的 URL "${targetUrl}"${RESET$2}`);
+		process.exit(1);
+	}
+	const platformResult = detectPlatformWithKey(url.hostname);
+	if (!platformResult) {
+		console.error(`${RED$1}Error: 无法识别平台 "${url.hostname}"${RESET$2}`);
+		console.log(`${DIM$2}支持的平台:${RESET$2}`);
+		console.log(`${DIM$2}  - code.alibaba-inc.com (GitLab)${RESET$2}`);
+		console.log(`${DIM$2}  - aliyuque.antfin.com (语雀)${RESET$2}`);
+		console.log(`${DIM$2}  - o2.alibaba-inc.com${RESET$2}`);
+		console.log(`${DIM$2}  - aone.alibaba-inc.com${RESET$2}`);
+		process.exit(1);
+	}
+	const { key: platformKey, config: platform } = platformResult;
+	if (!options.quiet) console.log(`${DIM$2}平台: ${platform.name}${RESET$2}`);
+	const authMode = options.authMode === "auto" || !options.authMode ? detectAuthMode(platformKey, platform, url.hostname) : options.authMode;
+	if (!options.quiet && authMode !== "auto") console.log(`${DIM$2}认证方式: ${getAuthModeDescription(authMode)}${RESET$2}`);
+	try {
+		switch (authMode) {
+			case "private_token": {
+				let token = getPlatformPrivateToken(platformKey, options.token);
+				if (!token) {
+					token = await promptConfigureToken(platformKey, platform);
+					if (!token) {
+						console.error(`${RED$1}Error: ${platform.name} 需要配置 Private Token 才能访问${RESET$2}`);
+						console.log(`${DIM$2}您可以通过以下方式配置:${RESET$2}`);
+						console.log(`  1. 参数: --token <your_token>`);
+						console.log(`  2. 环境变量: ALI_SKILLS_${platformKey.toUpperCase()}_TOKEN=<your_token>`);
+						console.log(`  3. 配置文件: npx ali-skills gateway config --platform ${platformKey}`);
+						process.exit(1);
+					}
+				}
+				await sendDirectRequest(targetUrl, platform, token, options);
+				break;
+			}
+			case "app_code":
+			case "app_code+buc":
+			case "sso_cookie":
+			case "sso_ticket":
+			case "gateway":
+				await sendGatewayRequest(targetUrl, platformKey, options, authMode);
+				break;
+			default: if (platform.authType === "private_token") {
+				const token = getPlatformPrivateToken(platformKey, options.token);
+				if (token) await sendDirectRequest(targetUrl, platform, token, options);
+				else {
+					console.error(`${RED$1}Error: ${platform.name} 需要配置 Private Token${RESET$2}`);
+					console.log(`${DIM$2}您可以通过以下方式配置:${RESET$2}`);
+					console.log(`  1. 参数: --token <your_token>`);
+					console.log(`  2. 环境变量: ALI_SKILLS_${platformKey.toUpperCase()}_TOKEN=<your_token>`);
+					console.log(`  3. 配置文件: npx ali-skills gateway config --platform ${platformKey}`);
+					process.exit(1);
+				}
+			} else await sendGatewayRequest(targetUrl, platformKey, options, "gateway");
+		}
+	} catch (error) {
+		if (error instanceof Error) if (error.name === "AbortError") console.error(`${RED$1}Error: 请求超时${RESET$2}`);
+		else console.error(`${RED$1}Error: ${error.message}${RESET$2}`);
+		process.exit(1);
+	}
+}
+function readBodyFromFile(filePath) {
+	const { readFileSync, existsSync } = __require("fs");
+	const { resolve } = __require("path");
+	const fullPath = resolve(filePath);
+	if (!existsSync(fullPath)) throw new Error(`File not found: ${filePath}`);
+	return readFileSync(fullPath, "utf-8");
+}
+const DIM$1 = "\x1B[38;5;102m";
+const TEXT$1 = "\x1B[38;5;145m";
+const RESET$1 = "\x1B[0m";
+const GREEN = "\x1B[32m";
+const YELLOW = "\x1B[33m";
+const RED = "\x1B[31m";
+function showConfigHelp() {
+	console.log(`
+${TEXT$1}npx ali-skills config - 配置各平台访问凭证${RESET$1}
+
+${DIM$1}Usage:${RESET$1}
+  npx ali-skills config <platform>      配置指定平台的 token
+  npx ali-skills config --list          列出已配置的平台
+  npx ali-skills config --remove <p>    移除指定平台的配置
+
+${DIM$1}Supported Platforms:${RESET$1}`);
+	const platforms = listPlatforms();
+	const displayWidth = (str) => {
+		let width = 0;
+		for (const char of str) width += char.charCodeAt(0) > 127 ? 2 : 1;
+		return width;
+	};
+	const maxNameWidth = Math.max(...platforms.map(({ config }) => displayWidth(config.name)));
+	for (const { key, config } of platforms) {
+		const authType = config.authType === "private_token" ? "需配置 Token" : config.authType === "app_code" ? "内置凭证" : config.authType === "buc_sso_refresh" ? "需 BUC 登录" : "需 BUC 登录";
+		const namePadding = " ".repeat(15 - displayWidth(config.name) + maxNameWidth);
+		console.log(`  ${key.padEnd(12)} ${config.name}${namePadding} ${DIM$1}${authType}${RESET$1}`);
+	}
+	console.log(`
+${DIM$1}Examples:${RESET$1}
+  npx ali-skills config code
+  npx ali-skills config yuque
+  npx ali-skills config --list
+  npx ali-skills config --remove code
+`);
+}
+async function prompt(question, defaultValue) {
+	const rl = (await import("readline")).createInterface({
+		input: process.stdin,
+		output: process.stdout
+	});
+	return new Promise((resolve) => {
+		const fullQuestion = defaultValue ? `${question} (默认: ${defaultValue}): ` : `${question}: `;
+		rl.question(fullQuestion, (answer) => {
+			rl.close();
+			resolve(answer.trim() || defaultValue || "");
+		});
+	});
+}
+async function openBrowser(url) {
+	const { spawn } = await import("node:child_process");
+	const platform = process.platform;
+	spawn(platform === "darwin" ? "open" : platform === "win32" ? "start" : "xdg-open", [url], {
+		detached: true,
+		stdio: "ignore"
+	});
+}
+async function configurePlatform(platformKey) {
+	const platform = getPlatform(platformKey);
+	if (!platform) {
+		console.error(`${RED}Error: 不支持的平台 "${platformKey}"${RESET$1}`);
+		console.log(`${DIM$1}运行 'npx ali-skills config --list' 查看支持的平台${RESET$1}`);
+		process.exit(1);
+	}
+	console.log(`${TEXT$1}配置 ${platform.name}${RESET$1}`);
+	console.log(`${DIM$1}认证方式: ${platform.authType}${RESET$1}`);
+	switch (platform.authType) {
+		case "private_token":
+			await configurePrivateToken(platformKey, platform);
+			break;
+		case "app_code":
+			console.log(`${GREEN}✓ ${platform.name} 使用内置凭证，无需配置${RESET$1}`);
+			break;
+		case "app_code+buc":
+			console.log(`${YELLOW}! ${platform.name} 需要 BUC 登录${RESET$1}`);
+			console.log(`${DIM$1}请运行: npx ali-skills login${RESET$1}`);
+			break;
+		case "buc_sso_refresh":
+		case "buc_sso_ticket":
+			console.log(`${YELLOW}! ${platform.name} 需要 BUC 登录${RESET$1}`);
+			console.log(`${DIM$1}请运行: npx ali-skills login${RESET$1}`);
+			break;
+		default:
+			console.error(`${RED}Error: 未知的认证类型${RESET$1}`);
+			process.exit(1);
+	}
+}
+async function configurePrivateToken(platformKey, platform) {
+	if (!platform.tokenDocUrl) {
+		console.error(`${RED}Error: 未找到 ${platform.name} 的 token 文档地址${RESET$1}`);
+		process.exit(1);
+	}
+	console.log();
+	console.log(`${DIM$1}1. 正在打开 ${platform.name} Token 页面...${RESET$1}`);
+	console.log(`${DIM$1}   ${platform.tokenDocUrl}${RESET$1}`);
+	await openBrowser(platform.tokenDocUrl);
+	console.log();
+	console.log(`${DIM$1}2. 请在浏览器中创建 Access Token，然后复制到这里${RESET$1}`);
+	const token = await prompt("Access Token");
+	if (!token) {
+		console.error(`${RED}Error: Token 不能为空${RESET$1}`);
+		process.exit(1);
+	}
+	setPlatformToken(platformKey, { privateToken: token });
+	console.log();
+	console.log(`${GREEN}✓ ${platform.name} Token 已保存${RESET$1}`);
+	console.log(`${DIM$1}配置文件: ${getConfigFilePath()}${RESET$1}`);
+}
+function listConfigured() {
+	const config = readConfig();
+	const platforms = Object.entries(config.platforms);
+	if (platforms.length === 0) {
+		console.log(`${DIM$1}尚未配置任何平台${RESET$1}`);
+		console.log(`${TEXT$1}运行 'npx ali-skills config <platform>' 开始配置${RESET$1}`);
+		return;
+	}
+	console.log(`${TEXT$1}已配置的平台:${RESET$1}`);
+	for (const [key, token] of platforms) {
+		const name = getPlatform(key)?.name || key;
+		const hasToken = token.privateToken ? "✓" : "✗";
+		console.log(`  ${hasToken} ${name} (${key})`);
+	}
+}
+function removePlatform(platformKey) {
+	const name = getPlatform(platformKey)?.name || platformKey;
+	removePlatformToken(platformKey);
+	console.log(`${GREEN}✓ 已移除 ${name} 的配置${RESET$1}`);
+}
+async function runConfig(args) {
+	if (args.length === 0) {
+		showConfigHelp();
+		return;
+	}
+	const command = args[0];
+	switch (command) {
+		case "--help":
+		case "-h":
+			showConfigHelp();
+			break;
+		case "--list":
+		case "-l":
+			listConfigured();
+			break;
+		case "--remove":
+		case "-r": {
+			const platform = args[1];
+			if (!platform) {
+				console.error(`${RED}Error: 请指定要移除的平台${RESET$1}`);
+				process.exit(1);
+			}
+			removePlatform(platform);
+			break;
+		}
+		default: if (!command.startsWith("-")) await configurePlatform(command);
+		else {
+			console.error(`${RED}Error: 未知选项 "${command}"${RESET$1}`);
+			showConfigHelp();
+			process.exit(1);
+		}
+	}
+}
 const __dirname = dirname(fileURLToPath(import.meta.url));
 function getVersion() {
 	try {
@@ -4439,32 +5237,32 @@ function showBanner() {
 	console.log();
 	console.log(`${DIM}The open agent skills ecosystem${RESET}`);
 	console.log();
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx @ali/cli-skills add ${DIM}<package>${RESET}        ${DIM}Add a new skill${RESET}`);
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx @ali/cli-skills remove${RESET}               ${DIM}Remove installed skills${RESET}`);
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx @ali/cli-skills list${RESET}                 ${DIM}List installed skills${RESET}`);
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx @ali/cli-skills find ${DIM}[query]${RESET}         ${DIM}Search for skills${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx ali-skills add ${DIM}<package>${RESET}        ${DIM}Add a new skill${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx ali-skills remove${RESET}               ${DIM}Remove installed skills${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx ali-skills list${RESET}                 ${DIM}List installed skills${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx ali-skills find ${DIM}[query]${RESET}         ${DIM}Search for skills${RESET}`);
 	console.log();
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx @ali/cli-skills publish${RESET}              ${DIM}Publish skills to OSS${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx ali-skills publish${RESET}              ${DIM}Publish skills to OSS${RESET}`);
 	console.log();
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx @ali/cli-skills check${RESET}                ${DIM}Check for updates${RESET}`);
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx @ali/cli-skills update${RESET}               ${DIM}Update all skills${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx ali-skills check${RESET}                ${DIM}Check for updates${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx ali-skills update${RESET}               ${DIM}Update all skills${RESET}`);
 	console.log();
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx @ali/cli-skills experimental_install${RESET} ${DIM}Restore from skills-lock.json${RESET}`);
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx @ali/cli-skills init ${DIM}[name]${RESET}          ${DIM}Create a new skill${RESET}`);
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx @ali/cli-skills experimental_sync${RESET}    ${DIM}Sync skills from node_modules${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx ali-skills experimental_install${RESET} ${DIM}Restore from skills-lock.json${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx ali-skills init ${DIM}[name]${RESET}          ${DIM}Create a new skill${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx ali-skills experimental_sync${RESET}    ${DIM}Sync skills from node_modules${RESET}`);
 	console.log();
-	console.log(`${DIM}try:${RESET} npx @ali/cli-skills add vercel-labs/agent-skills`);
+	console.log(`${DIM}try:${RESET} npx ali-skills add group/project`);
 	console.log();
-	console.log(`Discover more skills at ${TEXT}https://skills.sh/${RESET}`);
+	console.log(`Discover more skills at ${TEXT}https://ali-skills.alibaba-inc.com/${RESET}`);
 	console.log();
 }
 function showHelp() {
 	console.log(`
-${BOLD}Usage:${RESET} cli-skills <command> [options]
+${BOLD}Usage:${RESET} ali-skills <command> [options]
 
 ${BOLD}Manage Skills:${RESET}
   add <package>        Add a skill package (alias: a)
-                       e.g. vercel-labs/agent-skills
+                       e.g. group/project
                             https://github.com/vercel-labs/agent-skills
   remove [skills]      Remove installed skills
   list, ls             List installed skills
@@ -4474,8 +5272,12 @@ ${BOLD}Publish:${RESET}
   publish [options]    Publish skills from current repo to OSS (alias: pub)
 
 ${BOLD}Updates:${RESET}
-  check                Check for available skill updates
-  update               Update all skills to latest versions
+  check                Check for available skill updates (project-level by default)
+  check -g             Check global skill updates
+  update               Update skills interactively (project-level by default)
+  update -g            Update global skills
+  update -y            Update all skills without prompting
+  update <skill>      Update specific skill(s)
 
 ${BOLD}Project:${RESET}
   experimental_install Restore skills from skills-lock.json
@@ -4514,32 +5316,32 @@ ${BOLD}Options:${RESET}
   --version, -v     Show version number
 
 ${BOLD}Examples:${RESET}
-  ${DIM}$${RESET} cli-skills add vercel-labs/agent-skills
-  ${DIM}$${RESET} cli-skills add vercel-labs/agent-skills -g
-  ${DIM}$${RESET} cli-skills add vercel-labs/agent-skills --agent claude-code cursor
-  ${DIM}$${RESET} cli-skills add vercel-labs/agent-skills --skill pr-review commit
-  ${DIM}$${RESET} cli-skills remove                        ${DIM}# interactive remove${RESET}
-  ${DIM}$${RESET} cli-skills remove web-design             ${DIM}# remove by name${RESET}
-  ${DIM}$${RESET} cli-skills rm --global frontend-design
-  ${DIM}$${RESET} cli-skills list                          ${DIM}# list project skills${RESET}
-  ${DIM}$${RESET} cli-skills ls -g                         ${DIM}# list global skills${RESET}
-  ${DIM}$${RESET} cli-skills ls -a claude-code             ${DIM}# filter by agent${RESET}
-  ${DIM}$${RESET} cli-skills ls --json                      ${DIM}# JSON output${RESET}
-  ${DIM}$${RESET} cli-skills find                          ${DIM}# interactive search${RESET}
-  ${DIM}$${RESET} cli-skills find typescript               ${DIM}# search by keyword${RESET}
-  ${DIM}$${RESET} cli-skills check
-  ${DIM}$${RESET} cli-skills update
-  ${DIM}$${RESET} cli-skills experimental_install            ${DIM}# restore from skills-lock.json${RESET}
-  ${DIM}$${RESET} cli-skills init my-skill
-  ${DIM}$${RESET} cli-skills experimental_sync              ${DIM}# sync from node_modules${RESET}
-  ${DIM}$${RESET} cli-skills experimental_sync -y           ${DIM}# sync without prompts${RESET}
+  ${DIM}$${RESET} ali-skills add group/project
+  ${DIM}$${RESET} ali-skills add group/project -g
+  ${DIM}$${RESET} ali-skills add group/project --agent claude-code cursor
+  ${DIM}$${RESET} ali-skills add group/project --skill pr-review commit
+  ${DIM}$${RESET} ali-skills remove                        ${DIM}# interactive remove${RESET}
+  ${DIM}$${RESET} ali-skills remove web-design             ${DIM}# remove by name${RESET}
+  ${DIM}$${RESET} ali-skills rm --global frontend-design
+  ${DIM}$${RESET} ali-skills list                          ${DIM}# list project skills${RESET}
+  ${DIM}$${RESET} ali-skills ls -g                         ${DIM}# list global skills${RESET}
+  ${DIM}$${RESET} ali-skills ls -a claude-code             ${DIM}# filter by agent${RESET}
+  ${DIM}$${RESET} ali-skills ls --json                      ${DIM}# JSON output${RESET}
+  ${DIM}$${RESET} ali-skills find                          ${DIM}# interactive search${RESET}
+  ${DIM}$${RESET} ali-skills find typescript               ${DIM}# search by keyword${RESET}
+  ${DIM}$${RESET} ali-skills check
+  ${DIM}$${RESET} ali-skills update
+  ${DIM}$${RESET} ali-skills experimental_install            ${DIM}# restore from skills-lock.json${RESET}
+  ${DIM}$${RESET} ali-skills init my-skill
+  ${DIM}$${RESET} ali-skills experimental_sync              ${DIM}# sync from node_modules${RESET}
+  ${DIM}$${RESET} ali-skills experimental_sync -y           ${DIM}# sync without prompts${RESET}
 
-Discover more skills at ${TEXT}https://skills.sh/${RESET}
+Discover more skills at ${TEXT}https://ali-skills.alibaba-inc.com/${RESET}
 `);
 }
 function showRemoveHelp() {
 	console.log(`
-${BOLD}Usage:${RESET} cli-skills remove [skills...] [options]
+${BOLD}Usage:${RESET} ali-skills remove [skills...] [options]
 
 ${BOLD}Description:${RESET}
   Remove installed skills from agents. If no skill names are provided,
@@ -4556,17 +5358,159 @@ ${BOLD}Options:${RESET}
   --all              Shorthand for --skill '*' --agent '*' -y
 
 ${BOLD}Examples:${RESET}
-  ${DIM}$${RESET} cli-skills remove                           ${DIM}# interactive selection${RESET}
-  ${DIM}$${RESET} cli-skills remove my-skill                   ${DIM}# remove specific skill${RESET}
-  ${DIM}$${RESET} cli-skills remove skill1 skill2 -y           ${DIM}# remove multiple skills${RESET}
-  ${DIM}$${RESET} cli-skills remove --global my-skill          ${DIM}# remove from global scope${RESET}
-  ${DIM}$${RESET} cli-skills rm --agent claude-code my-skill   ${DIM}# remove from specific agent${RESET}
-  ${DIM}$${RESET} cli-skills remove --all                      ${DIM}# remove all skills${RESET}
-  ${DIM}$${RESET} cli-skills remove --skill '*' -a cursor      ${DIM}# remove all skills from cursor${RESET}
+  ${DIM}$${RESET} ali-skills remove                           ${DIM}# interactive selection${RESET}
+  ${DIM}$${RESET} ali-skills remove my-skill                   ${DIM}# remove specific skill${RESET}
+  ${DIM}$${RESET} ali-skills remove skill1 skill2 -y           ${DIM}# remove multiple skills${RESET}
+  ${DIM}$${RESET} ali-skills remove --global my-skill          ${DIM}# remove from global scope${RESET}
+  ${DIM}$${RESET} ali-skills rm --agent claude-code my-skill   ${DIM}# remove from specific agent${RESET}
+  ${DIM}$${RESET} ali-skills remove --all                      ${DIM}# remove all skills${RESET}
+  ${DIM}$${RESET} ali-skills remove --skill '*' -a cursor      ${DIM}# remove all skills from cursor${RESET}
+
+Discover more skills at ${TEXT}https://ali-skills.alibaba-inc.com/${RESET}
+`);
+}
+function showGatewayHelp() {
+	console.log(`
+${BOLD}Gateway Commands:${RESET}
+  login               Login to Gateway (BUC OAuth)
+  logout              Logout from Gateway
+  status              Show login status
+  request <url>       Send HTTP request via Gateway proxy
+  req <url>           Alias for request
+
+${BOLD}Config Commands:${RESET}
+  config <platform>   Configure platform token
+  config --list       List configured platforms
+  config --remove <p> Remove platform config
 
-Discover more skills at ${TEXT}https://skills.sh/${RESET}
+${BOLD}Request Options:${RESET}
+  -X, --method <method>   HTTP method (default: GET)
+  -b, --body <body>       Request body (JSON string or @file)
+  -h, --header <header>   Custom header (can be used multiple times)
+  -o, --output <file>     Save response to file
+  -i, --include-headers   Include response headers in output
+  -t, --timeout <ms>      Request timeout (default: 30000)
+  --pretty                Pretty print JSON output (default: true)
+  --raw                   Raw output without formatting
+  -q, --quiet             Quiet mode, only output response body
+
+${BOLD}Examples:${RESET}
+  ${DIM}$${RESET} ali-skills login
+  ${DIM}$${RESET} ali-skills config code
+  ${DIM}$${RESET} ali-skills config yuque
+  ${DIM}$${RESET} ali-skills req https://o2.alibaba-inc.com/api/v2/apps
+  ${DIM}$${RESET} ali-skills req https://code.alibaba-inc.com/api/v4/projects -X GET
+  ${DIM}$${RESET} ali-skills req https://aliyuque.antfin.com/api/v2/repos -o repos.json
+  ${DIM}$${RESET} ali-skills logout
 `);
 }
+function parseRequestOptions(args) {
+	let url = "";
+	const options = { method: "GET" };
+	const headers = {};
+	for (let i = 0; i < args.length; i++) {
+		const arg = args[i];
+		switch (arg) {
+			case "-m":
+			case "--method":
+				options.method = args[++i] || "GET";
+				break;
+			case "-b":
+			case "--body":
+				options.body = args[++i];
+				break;
+			case "-h":
+			case "--header": {
+				const header = args[++i];
+				if (header) {
+					const [key, ...valueParts] = header.split(":");
+					if (key && valueParts.length > 0) headers[key.trim()] = valueParts.join(":").trim();
+				}
+				break;
+			}
+			case "-o":
+			case "--output":
+				options.output = args[++i];
+				break;
+			case "-i":
+			case "--include-headers":
+				options.includeHeaders = true;
+				break;
+			case "-t":
+			case "--timeout":
+				options.timeout = parseInt(args[++i], 10);
+				break;
+			case "--pretty":
+				options.pretty = true;
+				break;
+			case "--raw":
+				options.raw = true;
+				break;
+			case "-q":
+			case "--quiet":
+				options.quiet = true;
+				break;
+			default:
+				if (!arg.startsWith("-") && !url) url = arg;
+				break;
+		}
+	}
+	if (Object.keys(headers).length > 0) options.headers = headers;
+	if (options.body?.startsWith("@")) options.body = readBodyFromFile(options.body.slice(1));
+	return {
+		url,
+		options
+	};
+}
+async function runGatewayCommand(args) {
+	if (args.length === 0) {
+		showGatewayHelp();
+		return;
+	}
+	const command = args[0];
+	const rest = args.slice(1);
+	switch (command) {
+		case "login":
+			showLogo();
+			console.log();
+			await login();
+			break;
+		case "logout":
+			await logout();
+			break;
+		case "status":
+			await status();
+			break;
+		case "token": {
+			const token = getPrivateToken();
+			if (token) console.log(token);
+			else {
+				console.error("Not logged in");
+				process.exit(1);
+			}
+			break;
+		}
+		case "request":
+		case "req": {
+			const { url, options } = parseRequestOptions(rest);
+			if (!url) {
+				console.error("Error: URL is required");
+				showGatewayHelp();
+				process.exit(1);
+			}
+			await proxyRequest(url, options);
+			break;
+		}
+		case "--help":
+		case "-h":
+			showGatewayHelp();
+			break;
+		default:
+			console.error(`Unknown gateway command: ${command}`);
+			showGatewayHelp();
+			process.exit(1);
+	}
+}
 function runInit(args) {
 	const cwd = process.cwd();
 	const skillName = args[0] || basename(cwd);
@@ -4608,10 +5552,10 @@ Describe when this skill should be used.
 	console.log(`  2. Update the ${TEXT}name${RESET} and ${TEXT}description${RESET} in the frontmatter`);
 	console.log();
 	console.log(`${DIM}Publishing:${RESET}`);
-	console.log(`  ${DIM}GitHub:${RESET}  Push to a repo, then ${TEXT}npx @ali/cli-skills add <owner>/<repo>${RESET}`);
-	console.log(`  ${DIM}URL:${RESET}     Host the file, then ${TEXT}npx @ali/cli-skills add https://example.com/${displayPath}${RESET}`);
+	console.log(`  ${DIM}GitHub:${RESET}  Push to a repo, then ${TEXT}npx ali-skills add <owner>/<repo>${RESET}`);
+	console.log(`  ${DIM}URL:${RESET}     Host the file, then ${TEXT}npx ali-skills add https://example.com/${displayPath}${RESET}`);
 	console.log();
-	console.log(`Browse existing skills for inspiration at ${TEXT}https://skills.sh/${RESET}`);
+	console.log(`Browse existing skills for inspiration at ${TEXT}https://ali-skills.alibaba-inc.com/${RESET}`);
 	console.log();
 }
 const AGENTS_DIR = ".agents";
@@ -4650,31 +5594,11 @@ function getSkipReason(entry) {
 	if (!entry.skillPath) return "No skill path recorded";
 	return "No version tracking";
 }
-function printSkippedSkills(skipped) {
-	if (skipped.length === 0) return;
-	console.log();
-	console.log(`${DIM}${skipped.length} skill(s) cannot be checked automatically:${RESET}`);
-	for (const skill of skipped) {
-		console.log(`  ${TEXT}•${RESET} ${skill.name} ${DIM}(${skill.reason})${RESET}`);
-		console.log(`    ${DIM}To update: ${TEXT}npx @ali/cli-skills add ${skill.sourceUrl} -g -y${RESET}`);
-	}
-}
-async function runCheck(args = []) {
-	console.log(`${TEXT}Checking for skill updates...${RESET}`);
-	console.log();
-	const lock = readSkillLock();
-	const skillNames = Object.keys(lock.skills);
-	if (skillNames.length === 0) {
-		console.log(`${DIM}No skills tracked in lock file.${RESET}`);
-		console.log(`${DIM}Install skills with${RESET} ${TEXT}npx @ali/cli-skills add <package>${RESET}`);
-		return;
-	}
-	const token = getGitHubToken();
-	const skillsBySource = /* @__PURE__ */ new Map();
+async function checkSkillsForUpdates(skills, token) {
+	const updates = [];
+	const errors = [];
 	const skipped = [];
-	for (const skillName of skillNames) {
-		const entry = lock.skills[skillName];
-		if (!entry) continue;
+	for (const [skillName, entry] of Object.entries(skills)) {
 		if (!entry.skillFolderHash || !entry.skillPath) {
 			skipped.push({
 				name: skillName,
@@ -4683,84 +5607,260 @@ async function runCheck(args = []) {
 			});
 			continue;
 		}
-		const existing = skillsBySource.get(entry.source) || [];
-		existing.push({
-			name: skillName,
-			entry
-		});
-		skillsBySource.set(entry.source, existing);
-	}
-	const totalSkills = skillNames.length - skipped.length;
-	if (totalSkills === 0) {
-		console.log(`${DIM}No GitHub skills to check.${RESET}`);
-		printSkippedSkills(skipped);
-		return;
-	}
-	console.log(`${DIM}Checking ${totalSkills} skill(s) for updates...${RESET}`);
-	const updates = [];
-	const errors = [];
-	for (const [source, skills] of skillsBySource) for (const { name, entry } of skills) try {
-		const latestHash = await fetchSkillFolderHash(source, entry.skillPath, token);
-		if (!latestHash) {
+		try {
+			const latestHash = await fetchSkillFolderHash(entry.source, entry.skillPath, token);
+			if (!latestHash) {
+				errors.push({
+					name: skillName,
+					source: entry.source,
+					error: "Could not fetch from GitHub"
+				});
+				continue;
+			}
+			if (latestHash !== entry.skillFolderHash) updates.push({
+				name: skillName,
+				source: entry.source,
+				entry
+			});
+		} catch (err) {
 			errors.push({
-				name,
-				source,
-				error: "Could not fetch from GitHub"
+				name: skillName,
+				source: entry.source,
+				error: err instanceof Error ? err.message : "Unknown error"
 			});
-			continue;
 		}
-		if (latestHash !== entry.skillFolderHash) updates.push({
-			name,
-			source
-		});
-	} catch (err) {
-		errors.push({
-			name,
-			source,
-			error: err instanceof Error ? err.message : "Unknown error"
-		});
 	}
+	return {
+		updates,
+		errors,
+		skipped
+	};
+}
+async function runCheck(args = []) {
+	const isGlobal = args.includes("-g") || args.includes("--global");
+	console.log(`${TEXT}Checking for skill updates...${RESET}`);
 	console.log();
-	if (updates.length === 0) console.log(`${TEXT}✓ All skills are up to date${RESET}`);
-	else {
-		console.log(`${TEXT}${updates.length} update(s) available:${RESET}`);
-		console.log();
-		for (const update of updates) {
-			console.log(`  ${TEXT}↑${RESET} ${update.name}`);
-			console.log(`    ${DIM}source: ${update.source}${RESET}`);
+	const token = getGitHubToken();
+	let updates = [];
+	let skipped = [];
+	let skillCount = 0;
+	if (isGlobal) {
+		const globalLock = readSkillLock();
+		const globalSkillNames = Object.keys(globalLock.skills);
+		skillCount = globalSkillNames.length;
+		if (globalSkillNames.length === 0) {
+			console.log(`${DIM}No global skills found.${RESET}`);
+			console.log();
+			return;
+		}
+		console.log(`${BOLD}Global skills${RESET}`);
+		console.log(`${DIM}Checking ${globalSkillNames.length} skill(s)...${RESET}`);
+		const result = await checkSkillsForUpdates(globalLock.skills, token);
+		updates = result.updates;
+		result.errors;
+		skipped = result.skipped;
+		if (updates.length === 0) console.log(`${TEXT}  ✓ All global skills are up to date${RESET}`);
+		else {
+			console.log(`${TEXT}  ${updates.length} update(s) available:${RESET}`);
+			for (const update of updates) console.log(`    ${TEXT}↑${RESET} ${update.name} ${DIM}(${update.source})${RESET}`);
+		}
+		if (skipped.length > 0) {
+			console.log();
+			console.log(`${DIM}  ${skipped.length} skill(s) cannot be checked automatically:${RESET}`);
+			for (const skill of skipped) {
+				console.log(`    ${TEXT}•${RESET} ${skill.name} ${DIM}(${skill.reason})${RESET}`);
+				console.log(`      ${DIM}To update: ${TEXT}npx ali-skills add ${skill.sourceUrl} -g -y${RESET}`);
+			}
 		}
 		console.log();
-		console.log(`${DIM}Run${RESET} ${TEXT}npx @ali/cli-skills update${RESET} ${DIM}to update all skills${RESET}`);
-	}
-	if (errors.length > 0) {
+		if (updates.length > 0) {
+			console.log(`${TEXT}${updates.length} update(s) available${RESET}`);
+			console.log();
+			console.log(`${DIM}Run${RESET} ${TEXT}npx ali-skills update -g${RESET} ${DIM}to update all global skills${RESET}`);
+		}
+	} else {
+		const projectLock = await readLocalLock();
+		const projectSkillNames = Object.keys(projectLock.skills);
+		skillCount = projectSkillNames.length;
+		if (projectSkillNames.length === 0) {
+			console.log(`${DIM}No project-level skills found.${RESET}`);
+			console.log();
+			console.log(`${DIM}To check global skills, use:${RESET} ${TEXT}npx ali-skills check -g${RESET}`);
+			return;
+		}
+		console.log(`${BOLD}Project-level skills${RESET}`);
+		console.log(`${DIM}Checking ${projectSkillNames.length} skill(s)...${RESET}`);
+		for (const [skillName, entry] of Object.entries(projectLock.skills)) {
+			if (entry.sourceType === "internal") {
+				if (!entry.commitHash) {
+					skipped.push({
+						name: skillName,
+						reason: "Reinstall required to enable update checking (missing commit hash)",
+						sourceUrl: `https://code.alibaba-inc.com/${entry.source}`
+					});
+					continue;
+				}
+				const skillPath = (entry.skillPath || "").replace(/\/?SKILL\.md$/i, "");
+				const latestCommit = await fetchAliInternalCommitHash(entry.source, skillPath, null);
+				if (latestCommit === null) skipped.push({
+					name: skillName,
+					reason: "Ali internal repository (API authentication failed)",
+					sourceUrl: `https://code.alibaba-inc.com/${entry.source}`
+				});
+				else if (latestCommit !== entry.commitHash) updates.push({
+					name: skillName,
+					source: entry.source,
+					entry: {
+						source: entry.source,
+						sourceType: entry.sourceType,
+						sourceUrl: `https://code.alibaba-inc.com/${entry.source}`,
+						skillPath,
+						skillFolderHash: entry.computedHash,
+						installedAt: (/* @__PURE__ */ new Date()).toISOString(),
+						updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+					}
+				});
+				continue;
+			}
+			if (entry.sourceType === "github") {
+				if (!entry.skillFolderHash) {
+					skipped.push({
+						name: skillName,
+						reason: "Reinstall required to enable update checking (missing folder hash)",
+						sourceUrl: `https://github.com/${entry.source}`
+					});
+					continue;
+				}
+				const possiblePaths = entry.skillPath ? [entry.skillPath] : [`skills/${skillName}`, `skills/${skillName}/SKILL.md`];
+				let foundMatch = false;
+				for (const skillPath of possiblePaths) try {
+					const latestHash = await fetchSkillFolderHash(entry.source, skillPath, token);
+					if (latestHash === null) continue;
+					foundMatch = true;
+					if (latestHash !== entry.skillFolderHash) updates.push({
+						name: skillName,
+						source: entry.source,
+						entry: {
+							source: entry.source,
+							sourceType: entry.sourceType,
+							sourceUrl: `https://github.com/${entry.source}`,
+							skillPath,
+							skillFolderHash: entry.skillFolderHash,
+							installedAt: (/* @__PURE__ */ new Date()).toISOString(),
+							updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+						}
+					});
+					break;
+				} catch {
+					continue;
+				}
+				if (!foundMatch) skipped.push({
+					name: skillName,
+					reason: "Unable to verify (API failed for all possible paths)",
+					sourceUrl: `https://github.com/${entry.source}`
+				});
+			} else skipped.push({
+				name: skillName,
+				reason: `${entry.sourceType} source type not supported for update checking`,
+				sourceUrl: entry.source
+			});
+		}
+		if (updates.length === 0) console.log(`${TEXT}  ✓ All project skills are up to date${RESET}`);
+		else {
+			console.log(`${TEXT}  ${updates.length} update(s) available:${RESET}`);
+			for (const update of updates) console.log(`    ${TEXT}↑${RESET} ${update.name} ${DIM}(${update.source})${RESET}`);
+		}
+		if (skipped.length > 0) {
+			console.log();
+			console.log(`${DIM}  ${skipped.length} skill(s) cannot be checked automatically:${RESET}`);
+			for (const skill of skipped) console.log(`    ${TEXT}•${RESET} ${skill.name} ${DIM}(${skill.reason})${RESET}`);
+		}
 		console.log();
-		console.log(`${DIM}Could not check ${errors.length} skill(s) (may need reinstall)${RESET}`);
+		if (updates.length > 0) {
+			console.log(`${TEXT}${updates.length} update(s) available${RESET}`);
+			console.log();
+			console.log(`${DIM}Run${RESET} ${TEXT}npx ali-skills update${RESET} ${DIM}to update all project skills${RESET}`);
+			console.log(`${DIM}Run${RESET} ${TEXT}npx ali-skills update <skill-name>${RESET} ${DIM}to update specific skill${RESET}`);
+		}
 	}
-	printSkippedSkills(skipped);
 	track({
 		event: "check",
-		skillCount: String(totalSkills),
+		skillCount: String(skillCount),
 		updatesAvailable: String(updates.length)
 	});
 	console.log();
 }
-async function runUpdate() {
+async function runUpdate(args = []) {
+	const isGlobal = args.includes("-g") || args.includes("--global");
+	const yesFlag = args.includes("-y") || args.includes("--yes");
+	const skillArgs = args.filter((arg) => !arg.startsWith("-"));
 	console.log(`${TEXT}Checking for skill updates...${RESET}`);
 	console.log();
-	const lock = readSkillLock();
-	const skillNames = Object.keys(lock.skills);
+	const token = getGitHubToken();
+	let skillsToCheck = {};
+	let scopeLabel = "project";
+	if (isGlobal) {
+		skillsToCheck = readSkillLock().skills;
+		scopeLabel = "global";
+	} else {
+		const projectLock = await readLocalLock();
+		for (const [name, entry] of Object.entries(projectLock.skills)) {
+			let sourceUrl;
+			if (entry.sourceType === "github") sourceUrl = `https://github.com/${entry.source}`;
+			else if (entry.sourceType === "internal") sourceUrl = `https://code.alibaba-inc.com/${entry.source}`;
+			else sourceUrl = entry.source;
+			skillsToCheck[name] = {
+				source: entry.source,
+				sourceType: entry.sourceType,
+				sourceUrl,
+				skillPath: entry.skillPath || "",
+				skillFolderHash: entry.skillFolderHash || entry.computedHash,
+				installedAt: (/* @__PURE__ */ new Date()).toISOString(),
+				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+			};
+		}
+	}
+	const skillNames = Object.keys(skillsToCheck);
 	if (skillNames.length === 0) {
-		console.log(`${DIM}No skills tracked in lock file.${RESET}`);
-		console.log(`${DIM}Install skills with${RESET} ${TEXT}npx @ali/cli-skills add <package>${RESET}`);
+		console.log(`${DIM}No ${scopeLabel}-level skills found.${RESET}`);
+		console.log();
+		if (!isGlobal) console.log(`${DIM}To update global skills, use:${RESET} ${TEXT}npx ali-skills update -g${RESET}`);
 		return;
 	}
-	const token = getGitHubToken();
-	const updates = [];
+	const availableUpdates = [];
 	const skipped = [];
+	const projectLock = !isGlobal ? await readLocalLock() : null;
 	for (const skillName of skillNames) {
-		const entry = lock.skills[skillName];
+		const entry = skillsToCheck[skillName];
 		if (!entry) continue;
-		if (!entry.skillFolderHash || !entry.skillPath) {
+		if (entry.sourceType === "internal" && projectLock) {
+			const localEntry = projectLock.skills[skillName];
+			if (!localEntry?.commitHash) {
+				skipped.push({
+					name: skillName,
+					reason: "Reinstall required to enable update checking (missing commit hash)",
+					sourceUrl: entry.sourceUrl
+				});
+				continue;
+			}
+			try {
+				const skillPath = (localEntry.skillPath || "").replace(/\/?SKILL\.md$/i, "");
+				const latestCommit = await fetchAliInternalCommitHash(entry.source, skillPath, null);
+				if (latestCommit && latestCommit !== localEntry.commitHash) availableUpdates.push({
+					name: skillName,
+					source: entry.source,
+					entry
+				});
+			} catch {
+				skipped.push({
+					name: skillName,
+					reason: "Ali internal repository (API check failed)",
+					sourceUrl: entry.sourceUrl
+				});
+			}
+			continue;
+		}
+		if (!entry.skillFolderHash) {
 			skipped.push({
 				name: skillName,
 				reason: getSkipReason(entry),
@@ -4768,58 +5868,100 @@ async function runUpdate() {
 			});
 			continue;
 		}
+		if (entry.sourceType === "github") {
+			const possiblePaths = entry.skillPath ? [entry.skillPath] : [`skills/${skillName}`, `skills/${skillName}/SKILL.md`];
+			for (const skillPath of possiblePaths) try {
+				const latestHash = await fetchSkillFolderHash(entry.source, skillPath, token);
+				if (latestHash === null) continue;
+				if (latestHash !== entry.skillFolderHash) availableUpdates.push({
+					name: skillName,
+					source: entry.source,
+					entry
+				});
+				break;
+			} catch {
+				continue;
+			}
+			continue;
+		}
 		try {
-			const latestHash = await fetchSkillFolderHash(entry.source, entry.skillPath, token);
-			if (latestHash && latestHash !== entry.skillFolderHash) updates.push({
+			const latestHash = await fetchSkillFolderHash(entry.source, entry.skillPath || "", token);
+			if (latestHash && latestHash !== entry.skillFolderHash) availableUpdates.push({
 				name: skillName,
 				source: entry.source,
 				entry
 			});
 		} catch {}
 	}
-	if (skillNames.length - skipped.length === 0) {
-		console.log(`${DIM}No skills to check.${RESET}`);
-		printSkippedSkills(skipped);
+	if (availableUpdates.length === 0) {
+		console.log(`${TEXT}✓ All ${scopeLabel} skills are up to date${RESET}`);
+		console.log();
 		return;
 	}
-	if (updates.length === 0) {
-		console.log(`${TEXT}✓ All skills are up to date${RESET}`);
+	let selectedUpdates = [];
+	if (skillArgs.length > 0) {
+		const requestedSkills = skillArgs.map((s) => s.toLowerCase());
+		selectedUpdates = availableUpdates.filter((u) => requestedSkills.includes(u.name.toLowerCase()));
+		for (const reqSkill of skillArgs) {
+			const exists = skillNames.some((n) => n.toLowerCase() === reqSkill.toLowerCase());
+			const hasUpdate = availableUpdates.some((u) => u.name.toLowerCase() === reqSkill.toLowerCase());
+			if (!exists) console.log(`${DIM}Skill not found: ${reqSkill}${RESET}`);
+			else if (!hasUpdate) console.log(`${TEXT}✓ ${reqSkill} is already up to date${RESET}`);
+		}
+	} else if (yesFlag) selectedUpdates = availableUpdates;
+	else {
+		console.log(`${TEXT}Found ${availableUpdates.length} ${scopeLabel} skill update(s) available:${RESET}`);
 		console.log();
+		const selected = await fe({
+			message: "Select skills to update (space to select, enter to confirm):",
+			options: [{
+				value: "__ALL__",
+				label: `${import_picocolors.default.green("Update all")} (${availableUpdates.length} skill(s))`
+			}, ...availableUpdates.map((u) => ({
+				value: u.name,
+				label: `  ${u.name} ${DIM}(${u.source})${RESET}`
+			}))],
+			required: true
+		});
+		if (pD(selected)) {
+			Se(import_picocolors.default.yellow("Update cancelled."));
+			return;
+		}
+		const selectedArray = selected;
+		if (selectedArray.includes("__ALL__")) selectedUpdates = availableUpdates;
+		else selectedUpdates = availableUpdates.filter((u) => selectedArray.includes(u.name));
+	}
+	if (selectedUpdates.length === 0) {
+		console.log(`${DIM}No skills selected for update.${RESET}`);
 		return;
 	}
-	console.log(`${TEXT}Found ${updates.length} update(s)${RESET}`);
+	console.log();
+	console.log(`${TEXT}Updating ${selectedUpdates.length} ${scopeLabel} skill(s)...${RESET}`);
 	console.log();
 	let successCount = 0;
 	let failCount = 0;
-	for (const update of updates) {
+	for (const update of selectedUpdates) {
 		console.log(`${TEXT}Updating ${update.name}...${RESET}`);
-		let installUrl = update.entry.sourceUrl;
-		if (update.entry.skillPath) {
-			let skillFolder = update.entry.skillPath;
-			if (skillFolder.endsWith("/SKILL.md")) skillFolder = skillFolder.slice(0, -9);
-			else if (skillFolder.endsWith("SKILL.md")) skillFolder = skillFolder.slice(0, -8);
-			if (skillFolder.endsWith("/")) skillFolder = skillFolder.slice(0, -1);
-			installUrl = update.entry.sourceUrl.replace(/\.git$/, "").replace(/\/$/, "");
-			installUrl = `${installUrl}/tree/main/${skillFolder}`;
-		}
-		if (spawnSync("npx", [
-			"-y",
-			"@ali/cli-skills",
-			"add",
-			installUrl,
-			"-g",
-			"-y"
-		], {
-			stdio: [
-				"inherit",
-				"pipe",
-				"pipe"
-			],
-			shell: process.platform === "win32"
-		}).status === 0) {
+		let skillFolder = update.entry.skillPath || "";
+		if (skillFolder.endsWith("/SKILL.md")) skillFolder = skillFolder.slice(0, -9);
+		else if (skillFolder.endsWith("SKILL.md")) skillFolder = skillFolder.slice(0, -8);
+		if (skillFolder.endsWith("/")) skillFolder = skillFolder.slice(0, -1);
+		let sourceUrl = update.entry.sourceUrl || update.entry.source;
+		if (update.entry.sourceType === "internal" && !sourceUrl.startsWith("http") && !sourceUrl.startsWith("git@")) sourceUrl = `https://code.alibaba-inc.com/${sourceUrl}.git`;
+		else if (update.entry.sourceType === "github" && !sourceUrl.startsWith("http") && !sourceUrl.startsWith("git@")) sourceUrl = `https://github.com/${sourceUrl}.git`;
+		let installUrl;
+		if (skillFolder) {
+			installUrl = sourceUrl.replace(/\.git$/, "").replace(/\/$/, "");
+			installUrl = `${installUrl}/tree/HEAD/${skillFolder}`;
+		} else installUrl = sourceUrl;
+		try {
+			await runAdd([installUrl], {
+				yes: true,
+				global: isGlobal
+			});
 			successCount++;
 			console.log(`  ${TEXT}✓${RESET} Updated ${update.name}`);
-		} else {
+		} catch {
 			failCount++;
 			console.log(`  ${DIM}✗ Failed to update ${update.name}${RESET}`);
 		}
@@ -4829,7 +5971,7 @@ async function runUpdate() {
 	if (failCount > 0) console.log(`${DIM}Failed to update ${failCount} skill(s)${RESET}`);
 	track({
 		event: "update",
-		skillCount: String(updates.length),
+		skillCount: String(selectedUpdates.length),
 		successCount: String(successCount),
 		failCount: String(failCount)
 	});
@@ -4857,6 +5999,11 @@ async function main() {
 			console.log();
 			runInit(restArgs);
 			break;
+		case "config":
+			showLogo();
+			console.log();
+			await runConfig(restArgs);
+			break;
 		case "experimental_install":
 			showLogo();
 			await runInstallFromLock(restArgs);
@@ -4900,9 +6047,33 @@ async function main() {
 		case "check":
 			await runCheck(restArgs);
 			break;
+		case "login":
+			await login();
+			break;
+		case "logout":
+			await logout();
+			break;
+		case "status":
+			await status();
+			break;
+		case "req":
+		case "request": {
+			const { url, options } = parseRequestOptions(restArgs);
+			if (!url) {
+				console.error("Error: URL is required");
+				showGatewayHelp();
+				process.exit(1);
+			}
+			await proxyRequest(url, options);
+			break;
+		}
+		case "gateway":
+		case "gw":
+			await runGatewayCommand(restArgs);
+			break;
 		case "update":
 		case "upgrade":
-			await runUpdate();
+			await runUpdate(restArgs);
 			break;
 		case "--help":
 		case "-h":
@@ -4914,7 +6085,7 @@ async function main() {
 			break;
 		default:
 			console.log(`Unknown command: ${command}`);
-			console.log(`Run ${BOLD}cli-skills --help${RESET} for usage.`);
+			console.log(`Run ${BOLD}ali-skills --help${RESET} for usage.`);
 	}
 }
 main().then(async () => {