ali-skills 0.0.21 → 0.0.22

package/node_modules/@ali/cli-skills/dist/cli.mjs

@@ -10,9 +10,9 @@ import "./_chunks/libs/extend-shallow.mjs";
 import "./_chunks/libs/esprima.mjs";
 import { t as xdgConfig } from "./_chunks/libs/xdg-basedir.mjs";
 import { execSync, spawn } from "child_process";
-import { createWriteStream, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { createWriteStream, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";
 import { basename, dirname, isAbsolute, join, normalize, relative, resolve, sep } from "path";
-import { homedir, platform, tmpdir } from "os";
+import { homedir, platform as platform$1, tmpdir } from "os";
 import { createHash } from "crypto";
 import { URL as URL$1, fileURLToPath } from "url";
 import * as readline from "readline";
@@ -552,12 +552,12 @@ async function getSkillLastCommitAuthor(projectId, filePath, token) {
 const ENV_URLS = {
 	local: "http://localhost:3000/api/skills",
 	daily: "https://next-ai-base.fn.taobao.net/api/skills",
-	pre: "https://next-ai-base.pre-fn.alibaba-inc.com/api/skills",
-	prod: "https://next-ai-base.fn.alibaba-inc.com/api/skills"
+	pre: "https://pre-ali-skills.alibaba-inc.com/api/skills",
+	prod: "https://ali-skills.alibaba-inc.com/api/skills"
 };
 function resolveSkillsApiBaseUrl() {
 	const env = process.env.SKILLS_API_URL?.trim();
-	if (!env) return ENV_URLS.pre;
+	if (!env) return ENV_URLS.prod;
 	if (env in ENV_URLS) return ENV_URLS[env];
 	return env.replace(/\/+$/, "");
 }
@@ -1383,7 +1383,7 @@ async function createSymlink(target, linkPath) {
 		}
 		const linkDir = dirname(linkPath);
 		await mkdir(linkDir, { recursive: true });
-		await symlink(relative(await resolveParentSymlinks(linkDir), target), linkPath, platform() === "win32" ? "junction" : void 0);
+		await symlink(relative(await resolveParentSymlinks(linkDir), target), linkPath, platform$1() === "win32" ? "junction" : void 0);
 		return true;
 	} catch {
 		return false;
@@ -2205,7 +2205,7 @@ function logSkillParseFailures(failures) {
 		if (f.hint) M.message(import_picocolors.default.yellow(`  提示: ${f.hint}`));
 	}
 }
-var version$1 = "2.0.21";
+var version$1 = "2.0.22";
 const isCancelled$1 = (value) => typeof value === "symbol";
 function redactSensitiveText(text) {
 	return text.replace(/(https?:\/\/)([^/\s:@]+)(?::([^@/\s]*))?@/gi, "$1").replace(/([?&](?:private_token|access_token|token|api_key|access_key|secret|password)=)[^&\s]+/gi, "$1***");
@@ -3393,8 +3393,7 @@ const DIM$5 = "\x1B[38;5;102m";
 const TEXT$4 = "\x1B[38;5;145m";
 const CYAN$1 = "\x1B[36m";
 const YELLOW$5 = "\x1B[33m";
-const SKILLS_API_URL = process.env.SKILLS_API_URL;
-const SEARCH_ENDPOINT = SKILLS_API_URL ? `${SKILLS_API_URL.replace(/\/+$/, "")}/search` : "https://next-ai-base.pre-fn.alibaba-inc.com/api/skills/search";
+const SEARCH_ENDPOINT = `${SKILLS_API_BASE_URL}/search`;
 function formatInstalls(count) {
 	if (!count || count <= 0) return "";
 	if (count >= 1e6) return `${(count / 1e6).toFixed(1).replace(/\.0$/, "")}M installs`;
@@ -4297,7 +4296,7 @@ function detectRepoInfo() {
 	}
 }
 async function zipSkillDirectory(skillPath, outputPath) {
-	const archive = (await import("./_chunks/libs/archiver.mjs").then((n) => /* @__PURE__ */ __toESM(n.t(), 1))).default("zip", { zlib: { level: 9 } });
+	const archive = (await import("archiver")).default("zip", { zlib: { level: 9 } });
 	const output = createWriteStream(outputPath);
 	return new Promise((resolve, reject) => {
 		output.on("close", resolve);
@@ -4546,19 +4545,15 @@ function safeWriteFile(path, data) {
 }
 function readConfig() {
 	try {
-		if (!existsSync(CONFIG_FILE)) return {
-			version: 1,
-			gatewayUrl: getGatewayUrl(),
-			defaultTimeout: 3e4
-		};
+		if (!existsSync(CONFIG_FILE)) return { version: 1 };
 		const content = readFileSync(CONFIG_FILE, "utf-8");
-		return JSON.parse(content);
-	} catch {
+		const parsed = JSON.parse(content);
 		return {
-			version: 1,
-			gatewayUrl: getGatewayUrl(),
-			defaultTimeout: 3e4
+			version: parsed.version ?? 1,
+			platforms: parsed.platforms ?? {}
 		};
+	} catch {
+		return { version: 1 };
 	}
 }
 function saveConfig(config) {
@@ -4581,12 +4576,9 @@ function saveAuth(auth) {
 	safeWriteFile(AUTH_FILE, JSON.stringify(data, null, 2));
 }
 function removeAuth() {
-	try {
-		if (existsSync(AUTH_FILE)) {
-			const { unlinkSync } = __require("fs");
-			unlinkSync(AUTH_FILE);
-		}
-	} catch {}
+	if (!existsSync(AUTH_FILE)) return;
+	unlinkSync(AUTH_FILE);
+	if (existsSync(AUTH_FILE)) throw new Error(`Failed to remove auth file: ${AUTH_FILE}`);
 }
 function isAuthExpired(auth) {
 	return Date.now() >= auth.expiresAt - 10080 * 60 * 1e3;
@@ -4595,25 +4587,101 @@ function getPrivateToken() {
 	return readAuth()?.privateToken || null;
 }
 function getGatewayUrl() {
-	const envUrl = process.env.SKILLS_API_URL || process.env.ALI_GATEWAY_URL;
-	if (envUrl) switch (envUrl.toLowerCase()) {
-		case "local": return "http://localhost:3000";
-		case "daily": return "https://next-ai-base.pre-fn.alibaba-inc.com";
-		case "pre": return "https://ali-skills.pre.alibaba-inc.com";
-		case "prod": return "https://ali-skills.alibaba-inc.com";
-		default: return envUrl;
-	}
-	return "https://ali-skills.alibaba-inc.com";
+	return SKILLS_API_BASE_URL.replace(/\/+$/, "").replace(/\/api\/skills$/i, "");
 }
 function getConfigFilePath() {
 	return CONFIG_FILE;
 }
+function hasYuqueCredentials(data) {
+	if (!data) return false;
+	if (data.privateToken?.trim()) return true;
+	return Object.values(data.groups ?? {}).some((g) => g.privateToken?.trim());
+}
+function getYuquePrivateTokenForRequest(config) {
+	return resolveYuqueTokenAndGroup(config)?.token ?? null;
+}
+function resolveYuqueTokenAndGroup(config) {
+	const yuque = config.platforms?.yuque;
+	if (!yuque) return null;
+	const tryGroup = process.env.ALI_SKILLS_YUQUE_GROUP?.trim() || yuque.defaultGroup?.trim();
+	if (tryGroup) {
+		const t = yuque.groups?.[tryGroup]?.privateToken?.trim();
+		if (t) return {
+			group: tryGroup,
+			token: t
+		};
+	}
+	const entries = Object.entries(yuque.groups ?? {}).filter(([, v]) => v.privateToken?.trim());
+	const legacy = yuque.privateToken?.trim();
+	if (entries.length === 1) {
+		const [g, v] = entries[0];
+		return {
+			group: g,
+			token: v.privateToken.trim()
+		};
+	}
+	if (legacy && entries.length === 0) return { token: legacy };
+	if (legacy) return { token: legacy };
+	if (entries.length > 1) return null;
+	return null;
+}
+const YUQUE_TOKEN_BASE = "https://aliyuque.antfin.com";
+function getYuqueGroupTokenDocUrl(teamSlug) {
+	return `${YUQUE_TOKEN_BASE}/${encodeURIComponent(teamSlug)}/settings/tokens`;
+}
 function setPlatformToken(platform, data) {
 	const config = readConfig();
 	if (!config.platforms) config.platforms = {};
 	config.platforms[platform] = data;
 	saveConfig(config);
 }
+function setYuqueGroupAccessToken(teamSlug, token) {
+	const config = readConfig();
+	if (!config.platforms) config.platforms = {};
+	const prev = config.platforms.yuque ?? {};
+	const groups = {
+		...prev.groups ?? {},
+		[teamSlug]: { privateToken: token }
+	};
+	config.platforms.yuque = {
+		...prev,
+		groups,
+		defaultGroup: teamSlug
+	};
+	saveConfig(config);
+}
+function setYuqueDefaultGroup(teamSlug) {
+	const config = readConfig();
+	const yuque = config.platforms?.yuque;
+	if (!yuque?.groups?.[teamSlug]?.privateToken?.trim()) return;
+	if (!config.platforms) config.platforms = {};
+	config.platforms.yuque = {
+		...yuque,
+		defaultGroup: teamSlug
+	};
+	saveConfig(config);
+}
+function removeYuqueGroup(teamSlug) {
+	const config = readConfig();
+	const yuque = config.platforms?.yuque;
+	if (!yuque?.groups?.[teamSlug]) return;
+	const groups = { ...yuque.groups };
+	delete groups[teamSlug];
+	const remainingKeys = Object.keys(groups);
+	if (remainingKeys.length === 0) {
+		if (yuque.privateToken?.trim()) config.platforms.yuque = { privateToken: yuque.privateToken };
+		else delete config.platforms.yuque;
+		saveConfig(config);
+		return;
+	}
+	const defaultGroup = yuque.defaultGroup === teamSlug ? remainingKeys[0] : yuque.defaultGroup && remainingKeys.includes(yuque.defaultGroup) ? yuque.defaultGroup : remainingKeys[0];
+	config.platforms.yuque = {
+		...yuque,
+		groups,
+		defaultGroup
+	};
+	saveConfig(config);
+}
 function removePlatformToken(platform) {
 	const config = readConfig();
 	if (config.platforms && config.platforms[platform]) {
@@ -4621,11 +4689,93 @@ function removePlatformToken(platform) {
 		saveConfig(config);
 	}
 }
+const PLATFORMS = {
+	code: {
+		name: "Code (GitLab)",
+		host: "code.alibaba-inc.com",
+		aliases: ["gitlab", "git"],
+		authType: "private_token",
+		tokenHeaderName: "PRIVATE-TOKEN",
+		tokenDocUrl: "https://code.alibaba-inc.com/profile/account"
+	},
+	yuque: {
+		name: "语雀",
+		host: "aliyuque.antfin.com",
+		aliases: ["yuque"],
+		authType: "private_token",
+		tokenHeaderName: "X-Auth-Token",
+		tokenDocUrl: "https://aliyuque.antfin.com/settings/tokens"
+	},
+	o2: {
+		name: "O2 平台",
+		host: "o2.alibaba-inc.com",
+		authType: "app_code+buc",
+		appCode: process.env.O2_APP_CODE || "SYKcE5kklxmOS7Z2XatNn"
+	},
+	aone: {
+		name: "Aone",
+		host: "aone.alibaba-inc.com",
+		authType: "buc_sso_refresh",
+		ssoType: "refresh_token"
+	}
+};
+function detectPlatformWithKey(hostname) {
+	for (const [key, config] of Object.entries(PLATFORMS)) {
+		if (config.host === hostname) return {
+			key,
+			config
+		};
+		if (config.aliases?.some((alias) => hostname.includes(alias))) return {
+			key,
+			config
+		};
+	}
+	for (const [key, config] of Object.entries(PLATFORMS)) if (hostname.endsWith(config.host) || hostname === config.host) return {
+		key,
+		config
+	};
+	return null;
+}
+function getPlatform(key) {
+	if (PLATFORMS[key]) return PLATFORMS[key];
+	for (const [, config] of Object.entries(PLATFORMS)) if (config.aliases?.includes(key)) return config;
+	return null;
+}
+function listPlatforms() {
+	return Object.entries(PLATFORMS).map(([key, config]) => ({
+		key,
+		config
+	}));
+}
 const DIM$3 = "\x1B[38;5;102m";
 const TEXT$3 = "\x1B[38;5;145m";
 const RESET$3 = "\x1B[0m";
 const GREEN$2 = "\x1B[32m";
 const YELLOW$3 = "\x1B[33m";
+const RED$3 = "\x1B[31m";
+const STATUS_PLATFORM_KEYS = [
+	"code",
+	"yuque",
+	"o2"
+];
+function isGatewayDebugEnabled() {
+	const v = process.env.ALI_SKILLS_DEBUG_GATEWAY ?? process.env.DEBUG;
+	if (!v) return false;
+	const normalized = v.trim().toLowerCase();
+	return normalized !== "" && normalized !== "0" && normalized !== "false" && normalized !== "off";
+}
+function gatewayDebugLog(message) {
+	if (!isGatewayDebugEnabled()) return;
+	console.log(`${DIM$3}[gateway-debug]${RESET$3} ${message}`);
+}
+function displayWidth(str) {
+	let width = 0;
+	for (const char of str) width += char.charCodeAt(0) > 127 ? 2 : 1;
+	return width;
+}
+function printJson(payload, pretty = false) {
+	console.log(JSON.stringify(payload, null, pretty ? 2 : 0));
+}
 function startLocalServer() {
 	return new Promise((resolve) => {
 		let resolveCallback;
@@ -4656,27 +4806,136 @@ function startLocalServer() {
 				res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
 				res.end(`
           <html>
-            <head><meta charset='UTF-8'><title>登录成功</title>
+            <head><meta charset='UTF-8'><title>Ali Skills 登录成功</title>
               <style>
-                body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; text-align: center; padding: 50px; background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); color: white; min-height: 100vh; margin: 0; display: flex; flex-direction: column; justify-content: center; align-items: center; }
-                .card { background: rgba(255, 255, 255, 0.95); padding: 40px; border-radius: 16px; box-shadow: 0 20px 60px rgba(0,0,0,0.3); color: #333; max-width: 400px; }
-                h1 { margin: 0 0 16px 0; color: #52c41a; }
-                .icon { font-size: 64px; margin-bottom: 16px; }
-                .user-info { background: #f6ffed; border: 1px solid #b7eb8f; border-radius: 8px; padding: 16px; margin: 16px 0; text-align: left; }
-                .user-info p { margin: 8px 0; }
-                .hint { color: #666; font-size: 14px; margin-top: 24px; }
+                :root {
+                  --bg: #f7f7f8;
+                  --panel: #ffffff;
+                  --text: #4b5563;
+                  --muted: #9ca3af;
+                  --line: #e5e7eb;
+                  --ok: #16a34a;
+                }
+                * { box-sizing: border-box; }
+                body {
+                  margin: 0;
+                  min-height: 100vh;
+                  display: flex;
+                  align-items: center;
+                  justify-content: center;
+                  padding: 16px;
+                  font-family: Inter, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'PingFang SC', 'Hiragino Sans GB', 'Microsoft YaHei', sans-serif;
+                  color: var(--text);
+                  background: var(--bg);
+                }
+                .card {
+                  width: 100%;
+                  max-width: 384px;
+                  background: var(--panel);
+                  border: 1px solid var(--line);
+                  border-radius: 12px;
+                  box-shadow: 0 1px 2px rgba(0, 0, 0, 0.05);
+                  padding: 24px;
+                  text-align: center;
+                }
+                .brand {
+                  font-size: 11px;
+                  letter-spacing: 0.14em;
+                  text-transform: uppercase;
+                  color: #9ca3af;
+                  margin-bottom: 14px;
+                  font-weight: 600;
+                }
+                .status {
+                  display: grid;
+                  grid-template-columns: 16px auto 16px;
+                  align-items: center;
+                  justify-content: center;
+                  column-gap: 5px;
+                  margin-top: 14px;
+                }
+                .icon {
+                  width: 16px;
+                  height: 16px;
+                  display: inline-flex;
+                  align-items: center;
+                  justify-content: center;
+                  border-radius: 999px;
+                  border: 1px solid #86efac;
+                  background: #f0fdf4;
+                  color: var(--ok);
+                  font-size: 10px;
+                  line-height: 1;
+                }
+                .title {
+                  margin: 0;
+                  color: var(--ok);
+                  font-size: 16px;
+                  font-weight: 600;
+                  line-height: 1.5;
+                  text-align: center;
+                }
+                .status-spacer {
+                  width: 16px;
+                  height: 16px;
+                  visibility: hidden;
+                }
+                .desc {
+                  margin: 10px auto 0;
+                  max-width: 320px;
+                  font-size: 12px;
+                  line-height: 1.7;
+                  color: var(--muted);
+                }
+                .user-info {
+                  background: #f9fafb;
+                  border: 1px solid var(--line);
+                  border-radius: 12px;
+                  padding: 14px 16px;
+                  margin: 16px 0 14px 0;
+                  text-align: left;
+                }
+                .row {
+                  display: grid;
+                  grid-template-columns: 52px 1fr;
+                  gap: 8px;
+                  margin: 8px 0;
+                  font-size: 13px;
+                }
+                .label { color: #6b7280; }
+                .value { color: #111827; font-weight: 500; word-break: break-word; }
+                .hint {
+                  margin: 0;
+                  font-size: 12px;
+                  color: #6b7280;
+                  text-align: center;
+                }
               </style>
             </head>
             <body>
               <div class="card">
-                <div class="icon">✓</div>
-                <h1>登录成功</h1>
+                <div class="brand">Ali Skills CLI</div>
+                <div class="status">
+                  <span class="icon">✓</span>
+                  <h1 class="title">登录授权成功</h1>
+                  <span class="status-spacer" aria-hidden="true"></span>
+                </div>
+                <p class="desc">已完成 BUC 登录与 CLI 授权，身份凭证已保存到本机</p>
                 <div class="user-info">
-                  <p><strong>姓名:</strong> ${name}</p>
-                  <p><strong>账号:</strong> ${account}</p>
-                  <p><strong>工号:</strong> ${empId}</p>
+                  <div class="row">
+                    <span class="label">姓名</span>
+                    <span class="value">${name}</span>
+                  </div>
+                  <div class="row">
+                    <span class="label">账号</span>
+                    <span class="value">${account}</span>
+                  </div>
+                  <div class="row">
+                    <span class="label">工号</span>
+                    <span class="value">${empId}</span>
+                  </div>
                 </div>
-                <p class="hint">您可以关闭此页面并返回 CLI</p>
+                <p class="hint">你可以关闭此页面并返回终端继续使用</p>
               </div>
             </body>
           </html>
@@ -4715,7 +4974,8 @@ function openBrowser$2(url) {
 async function login() {
 	const existingAuth = readAuth();
 	if (existingAuth && !isAuthExpired(existingAuth)) {
-		console.log(`${TEXT$3}您已经登录为: ${existingAuth.name} (${existingAuth.account})${RESET$3}`);
+		console.log(`${YELLOW$3}! 您已经登录为: ${existingAuth.name} (${existingAuth.account})${RESET$3}`);
+		console.log();
 		console.log(`${DIM$3}如需重新登录，请先执行: npx ali-skills logout${RESET$3}`);
 		return;
 	}
@@ -4735,10 +4995,12 @@ async function login() {
 			empId,
 			account,
 			name,
+			gatewayUrl,
 			privateToken,
 			ssoRefreshToken,
-			expiresAt: expiresAt * 1e3,
-			gatewayUrl
+			ssoRefreshTokenFetchedAt: ssoRefreshToken ? Date.now() : void 0,
+			ssoRefreshTokenLastCheckedAt: ssoRefreshToken ? Date.now() : void 0,
+			expiresAt: expiresAt * 1e3
 		});
 		console.log();
 		console.log(`${GREEN$2}✓ 登录成功！${RESET$3}`);
@@ -4750,19 +5012,256 @@ async function login() {
 		throw error;
 	}
 }
-async function logout() {
-	if (!readAuth()) {
+async function logout(platformInput, yuqueGroup, clearAll) {
+	if (platformInput) {
+		const platform = resolvePlatformByInput(platformInput);
+		if (!platform) {
+			console.error(`${RED$3}不支持的平台: ${platformInput}${RESET$3}`);
+			console.log(`${DIM$3}可用平台: ${STATUS_PLATFORM_KEYS.join(", ")}${RESET$3}`);
+			process.exit(1);
+		}
+		if (platform.key === "yuque") {
+			if (clearAll) {
+				if (!hasYuqueCredentials(readConfig().platforms?.yuque)) {
+					console.log(`${DIM$3}${platform.config.name} 未配置 Token${RESET$3}`);
+					return;
+				}
+				removePlatformToken(platform.key);
+				console.log(`${GREEN$2}✓ 已清除 ${platform.config.name} 的全部 Token 配置${RESET$3}`);
+				return;
+			}
+			if (!yuqueGroup) {
+				const yuque = readConfig().platforms?.yuque;
+				const groups = Object.entries(yuque?.groups ?? {}).filter(([, e]) => e.privateToken?.trim()).map(([group]) => group);
+				if (groups.length === 0) {
+					if (yuque?.privateToken?.trim()) {
+						removePlatformToken(platform.key);
+						console.log(`${GREEN$2}✓ 已清除 ${platform.config.name} 的 Token 配置${RESET$3}`);
+						return;
+					}
+					console.log(`${DIM$3}${platform.config.name} 未配置 Token${RESET$3}`);
+					return;
+				}
+				const selected = await fe({
+					message: "请选择要清除的语雀团队 Token（可多选）",
+					options: groups.map((g) => ({
+						value: g,
+						label: g
+					})),
+					required: false
+				});
+				if (pD(selected)) {
+					console.log(`${DIM$3}已取消${RESET$3}`);
+					return;
+				}
+				if (selected.length === 0) {
+					console.log(`${DIM$3}未选择任何团队，已取消${RESET$3}`);
+					return;
+				}
+				for (const group of selected) removeYuqueGroup(group);
+				console.log(`${GREEN$2}✓ 已清除 ${platform.config.name} 团队 Token: ${selected.join(", ")}${RESET$3}`);
+				const remaining = Object.keys(readConfig().platforms?.yuque?.groups ?? {});
+				if (remaining.length > 0) console.log(`${DIM$3}剩余团队: ${remaining.join(", ")}${RESET$3}`);
+				console.log(`${DIM$3}如需清除全部，请执行: npx ali-skills logout yuque --all${RESET$3}`);
+				return;
+			}
+			if (!hasYuqueCredentials(readConfig().platforms?.yuque)) {
+				console.log(`${DIM$3}${platform.config.name} 未配置 Token${RESET$3}`);
+				return;
+			}
+			const g = yuqueGroup.trim();
+			if (!(readConfig().platforms?.yuque)?.groups?.[g]?.privateToken?.trim()) {
+				console.log(`${DIM$3}${platform.config.name} 团队 ${g} 未配置 Group Access Token${RESET$3}`);
+				return;
+			}
+			removeYuqueGroup(g);
+			console.log(`${GREEN$2}✓ 已清除 ${platform.config.name} 团队 ${g} 的 Token${RESET$3}`);
+			return;
+		}
+		if (platform.key === "o2") {
+			const gatewayAuth = readAuth();
+			const bucLoggedIn = Boolean(gatewayAuth) && !isAuthExpired(gatewayAuth);
+			console.log(`${TEXT$3}${platform.config.name} 使用内置服务调用身份，无独立平台 Token${RESET$3}`);
+			console.log(`  BUC 登录态: ${bucLoggedIn ? `${GREEN$2}已登录${RESET$3}` : `${YELLOW$3}未登录${RESET$3}`}`);
+			console.log(`${DIM$3}如需退出 BUC 登录态，请执行: npx ali-skills logout${RESET$3}`);
+			return;
+		}
+		const token = readConfig().platforms?.[platform.key]?.privateToken;
+		if (!token || !token.trim()) {
+			console.log(`${DIM$3}${platform.config.name} 未配置 Private Token${RESET$3}`);
+			return;
+		}
+		removePlatformToken(platform.key);
+		console.log(`${GREEN$2}✓ 已清除 ${platform.config.name} 的 Private Token 配置${RESET$3}`);
+		return;
+	}
+	const auth = readAuth();
+	if (!auth) {
 		console.log(`${DIM$3}您尚未登录${RESET$3}`);
 		return;
 	}
-	removeAuth();
-	console.log(`${GREEN$2}✓ 已登出${RESET$3}`);
+	try {
+		try {
+			const revokeUrl = `${getGatewayUrl()}/api/gateway/revoke`;
+			const revokeRes = await fetch(revokeUrl, {
+				method: "POST",
+				headers: { "X-Private-Token": auth.privateToken }
+			});
+			if (revokeRes.ok) console.log(`${GREEN$2}✓ 已撤销当前网关会话${RESET$3}`);
+			else if (revokeRes.status === 404) console.log(`${DIM$3}服务端暂不支持撤销网关会话，继续本机登出${RESET$3}`);
+			else console.log(`${YELLOW$3}⚠️ 撤销网关会话失败，继续本机登出${RESET$3}`);
+		} catch {
+			console.log(`${YELLOW$3}⚠️ 撤销网关会话失败，继续本机登出${RESET$3}`);
+		}
+		removeAuth();
+		console.log(`${GREEN$2}✓ 已登出${RESET$3}`);
+	} catch (error) {
+		console.error(`${RED$3}登出失败: ${error.message}${RESET$3}`);
+		process.exit(1);
+	}
 }
-async function status() {
+function resolvePlatformByInput(platformInput) {
+	const canonicalize = (key) => {
+		if (STATUS_PLATFORM_KEYS.includes(key)) return key;
+		return null;
+	};
+	const getStatusPlatform = (key) => listPlatforms().find((item) => item.key === key) ?? null;
+	const exact = listPlatforms().find(({ key }) => key === platformInput);
+	if (exact) {
+		const canonical = canonicalize(exact.key);
+		return canonical ? getStatusPlatform(canonical) : null;
+	}
+	const byAlias = listPlatforms().find(({ config }) => config.aliases?.includes(platformInput));
+	if (byAlias) {
+		const canonical = canonicalize(byAlias.key);
+		return canonical ? getStatusPlatform(canonical) : null;
+	}
+	const config = getPlatform(platformInput);
+	if (!config) return null;
+	const matched = listPlatforms().find(({ config: c }) => c === config);
+	if (!matched) return null;
+	const canonical = canonicalize(matched.key);
+	return canonical ? getStatusPlatform(canonical) : null;
+}
+function printSinglePlatformStatus(platformInput, isLoggedIn) {
+	const platform = resolvePlatformByInput(platformInput);
+	if (!platform) {
+		console.error(`${RED$3}不支持的平台: ${platformInput}${RESET$3}`);
+		console.log(`${DIM$3}可用平台: ${STATUS_PLATFORM_KEYS.join(", ")}${RESET$3}`);
+		process.exit(1);
+	}
+	const config = readConfig();
+	const yuque = platform.key === "yuque" ? config.platforms?.yuque : void 0;
+	const isBuiltinServiceIdentity = platform.key === "o2";
+	const hasPrivateToken = platform.key === "yuque" ? hasYuqueCredentials(yuque) : isBuiltinServiceIdentity || Boolean(config.platforms?.[platform.key]?.privateToken?.trim());
+	console.log(`${TEXT$3}平台状态: ${platform.config.name}${RESET$3}`);
+	if (platform.key === "yuque") {
+		const groupCount = yuque?.groups ? Object.keys(yuque.groups).length : 0;
+		const line = groupCount > 0 ? `  Group Access Token: ${hasPrivateToken ? `${GREEN$2}已配置${RESET$3}` : `${YELLOW$3}未配置${RESET$3}`} ${DIM$3}(${groupCount} 团队)${RESET$3}` : `  Token: ${hasPrivateToken ? `${GREEN$2}已配置${RESET$3}` : `${YELLOW$3}未配置${RESET$3}`}`;
+		console.log(line);
+		if (yuque?.defaultGroup) console.log(`${DIM$3}  默认团队: ${yuque.defaultGroup}${RESET$3}`);
+	} else if (isBuiltinServiceIdentity) console.log(`  Token: ${GREEN$2}无需配置（走内置服务调用身份）${RESET$3}`);
+	else console.log(`  Private Token: ${hasPrivateToken ? `${GREEN$2}已配置${RESET$3}` : `${YELLOW$3}未配置${RESET$3}`}`);
+	if (!hasPrivateToken && !isBuiltinServiceIdentity) console.log(`${DIM$3}  配置命令: npx ali-skills login ${platform.key}${RESET$3}`);
+	if (platform.config.authType !== "private_token") console.log(`  BUC 登录: ${isLoggedIn ? `${GREEN$2}已登录${RESET$3}` : `${YELLOW$3}未登录${RESET$3}`}`);
+}
+function printYuqueGroupStatus(group) {
+	const yuque = readConfig().platforms?.yuque;
+	const token = yuque?.groups?.[group]?.privateToken?.trim() ?? "";
+	const hasToken = Boolean(token);
+	const isDefault = yuque?.defaultGroup === group;
+	console.log(`${TEXT$3}语雀团队状态: ${group}${RESET$3}`);
+	console.log(`  Group Access Token: ${hasToken ? `${GREEN$2}已配置${RESET$3}` : `${YELLOW$3}未配置${RESET$3}`}`);
+	if (isDefault) console.log(`  默认团队: ${GREEN$2}是${RESET$3}`);
+	else if (yuque?.defaultGroup) console.log(`${DIM$3}  当前默认团队: ${yuque.defaultGroup}${RESET$3}`);
+	if (!hasToken) console.log(`${DIM$3}  配置命令: npx ali-skills login yuque ${group}${RESET$3}`);
+}
+function printAllPlatformStatuses(isLoggedIn) {
+	const config = readConfig();
+	const platforms = listPlatforms().filter(({ key }) => STATUS_PLATFORM_KEYS.includes(key));
+	const maxKeyWidth = Math.max(...platforms.map(({ key }) => displayWidth(key)));
+	const maxNameWidth = Math.max(...platforms.map(({ config: p }) => displayWidth(p.name)));
+	console.log();
+	console.log(`${TEXT$3}平台凭证状态:${RESET$3}`);
+	for (const { key, config: platform } of platforms) {
+		const yuque = key === "yuque" ? config.platforms?.yuque : void 0;
+		const isBuiltinServiceIdentity = key === "o2";
+		const hasPrivateToken = key === "yuque" ? hasYuqueCredentials(yuque) : isBuiltinServiceIdentity || Boolean(config.platforms?.[key]?.privateToken?.trim());
+		const groupCount = key === "yuque" && yuque?.groups ? Object.keys(yuque.groups).length : 0;
+		let statusText = isBuiltinServiceIdentity ? `${GREEN$2}Token 无需配置（走内置服务调用身份）${RESET$3}` : hasPrivateToken ? key === "yuque" && groupCount > 0 ? `${GREEN$2}Group Token 已配置${RESET$3} ${DIM$3}(${groupCount} 团队)${RESET$3}` : `${GREEN$2}Private Token 已配置${RESET$3}` : key === "yuque" ? `${YELLOW$3}Token 未配置${RESET$3}` : `${YELLOW$3}Private Token 未配置${RESET$3}`;
+		if (platform.authType !== "private_token") statusText += isLoggedIn ? ` ${DIM$3}(BUC 已登录)${RESET$3}` : ` ${DIM$3}(BUC 未登录)${RESET$3}`;
+		const keyPadding = " ".repeat(maxKeyWidth - displayWidth(key) + 2);
+		const namePadding = " ".repeat(maxNameWidth - displayWidth(platform.name) + 2);
+		console.log(`  ${key}${keyPadding}${platform.name}${namePadding}${statusText}`);
+	}
+}
+async function status(args = {}) {
+	const { platform: targetPlatform, yuqueGroup, showAll = false, prettyJson = false, showPrivateToken = false } = args;
 	const auth = readAuth();
+	if (showPrivateToken && !targetPlatform) {
+		if (showAll) {
+			console.error(`${RED$3}--show/-s 与 --all 同用时需指定平台，例如: npx ali-skills status yuque -s --all${RESET$3}`);
+			process.exit(1);
+		}
+		if (!auth) {
+			console.error(`${RED$3}未登录网关，请执行: npx ali-skills login${RESET$3}`);
+			process.exit(1);
+		}
+		printJson(auth, prettyJson);
+		return;
+	}
+	if (targetPlatform && showPrivateToken) {
+		const platform = resolvePlatformByInput(targetPlatform);
+		if (!platform) {
+			console.error(`${RED$3}不支持的平台: ${targetPlatform}${RESET$3}`);
+			console.log(`${DIM$3}可用平台: ${STATUS_PLATFORM_KEYS.join(", ")}${RESET$3}`);
+			process.exit(1);
+		}
+		if (platform.key === "yuque") {
+			const yuque = readConfig().platforms?.yuque;
+			if (!yuque) {
+				console.error(`${RED$3}未配置语雀 Token，请执行: npx ali-skills login yuque${RESET$3}`);
+				process.exit(1);
+			}
+			if (yuqueGroup) {
+				const token = yuque.groups?.[yuqueGroup]?.privateToken?.trim();
+				if (!token) {
+					console.error(`${RED$3}语雀团队 ${yuqueGroup} 未配置 Group Access Token${RESET$3}`);
+					console.log(`${DIM$3}可先执行: npx ali-skills login yuque ${yuqueGroup}${RESET$3}`);
+					process.exit(1);
+				}
+				printJson({
+					privateToken: token,
+					group: yuqueGroup
+				}, prettyJson);
+				return;
+			}
+			printJson(yuque, prettyJson);
+			return;
+		}
+		const token = readConfig().platforms?.[platform.key]?.privateToken?.trim() ?? "";
+		if (!token) {
+			console.error(`${RED$3}未配置 Private Token，请执行: npx ali-skills login ${platform.key}${RESET$3}`);
+			process.exit(1);
+		}
+		printJson({ privateToken: token }, prettyJson);
+		return;
+	}
+	if (targetPlatform) {
+		if (targetPlatform === "yuque" && yuqueGroup) {
+			printYuqueGroupStatus(yuqueGroup);
+			return;
+		}
+		printSinglePlatformStatus(targetPlatform, Boolean(auth));
+		return;
+	}
 	if (!auth) {
 		console.log(`${DIM$3}您尚未登录${RESET$3}`);
 		console.log(`${TEXT$3}请执行: npx ali-skills login${RESET$3}`);
+		if (showAll) {
+			console.log();
+			printAllPlatformStatuses(false);
+		}
 		return;
 	}
 	const expired = isAuthExpired(auth);
@@ -4771,11 +5270,86 @@ async function status() {
 	console.log(`${TEXT$3}登录状态:${RESET$3}`);
 	console.log(`  用户: ${auth.name} (${auth.account})`);
 	console.log(`  工号: ${auth.empId}`);
-	console.log(`  网关: ${auth.gatewayUrl}`);
+	console.log(`  网关: ${getGatewayUrl()}`);
+	console.log(`  SSO_REFRESH_TOKEN: ${auth.ssoRefreshToken ? `${GREEN$2}已缓存${RESET$3}` : `${YELLOW$3}未缓存${RESET$3}`}`);
 	if (expired) {
 		console.log(`  Token: ${YELLOW$3}即将过期${RESET$3}`);
 		console.log(`${TEXT$3}建议重新登录: npx ali-skills login${RESET$3}`);
 	} else console.log(`  Token: ${GREEN$2}有效${RESET$3} (还剩 ${remainingDays} 天)`);
+	if (showAll) {
+		console.log();
+		printAllPlatformStatuses(true);
+	}
+}
+async function ensureSsoRefreshToken() {
+	const auth = readAuth();
+	if (!auth) throw new Error("未登录，请先执行: npx ali-skills login");
+	if (auth.ssoRefreshToken) {
+		saveAuth({
+			...auth,
+			gatewayUrl: auth.gatewayUrl || getGatewayUrl(),
+			ssoRefreshTokenLastCheckedAt: Date.now()
+		});
+		return auth.ssoRefreshToken;
+	}
+	const ssoTokenUrl = `${getGatewayUrl()}/api/gateway/sso-token`;
+	try {
+		const response = await fetch(ssoTokenUrl, {
+			method: "POST",
+			headers: { "X-Private-Token": auth.privateToken }
+		});
+		if (response.status === 200) {
+			const data = await response.json();
+			saveAuth({
+				...auth,
+				gatewayUrl: auth.gatewayUrl || getGatewayUrl(),
+				ssoRefreshToken: data.ssoRefreshToken,
+				ssoRefreshTokenFetchedAt: Date.now(),
+				ssoRefreshTokenLastCheckedAt: Date.now(),
+				ssoRefreshTokenExpiresAt: data.ssoRefreshTokenExpiresAt
+			});
+			console.log(`${DIM$3}已从服务端获取 SSO_REFRESH_TOKEN${RESET$3}`);
+			return data.ssoRefreshToken;
+		}
+		if (response.status === 404) {
+			console.log(`${YELLOW$3}⚠️ SSO_REFRESH_TOKEN 不可用${RESET$3}`);
+			console.log(`${DIM$3}提示: 请通过浏览器登录以获取 SSO_REFRESH_TOKEN${RESET$3}`);
+			return null;
+		}
+		const errorData = await response.json().catch(() => ({ error: "Unknown error" }));
+		console.error(`${RED$3}获取 SSO_REFRESH_TOKEN 失败: ${errorData.error}${RESET$3}`);
+		return null;
+	} catch (error) {
+		console.error(`${RED$3}获取 SSO_REFRESH_TOKEN 失败: ${error.message}${RESET$3}`);
+		return null;
+	}
+}
+async function ensureSsoTicket() {
+	const auth = readAuth();
+	if (!auth) throw new Error("未登录，请先执行: npx ali-skills login");
+	const ticketUrl = `${getGatewayUrl()}/api/gateway/sso-ticket`;
+	gatewayDebugLog(`request sso-ticket: ${ticketUrl}`);
+	try {
+		const response = await fetch(ticketUrl, {
+			method: "POST",
+			headers: { "X-Private-Token": auth.privateToken }
+		});
+		gatewayDebugLog(`sso-ticket response status: ${response.status}`);
+		if (response.ok) {
+			const data = await response.json();
+			const ticket = data.ssoTicket || data.sso_ticket || data.data?.ssoTicket || data.data?.sso_ticket || data.data?.ticket || "";
+			gatewayDebugLog(`sso-ticket success: ticket=${ticket ? "present" : "missing"}, ttl=${data.expiresInSeconds ?? "n/a"}, keys=${Object.keys(data).join(",")}`);
+			return ticket || null;
+		}
+		const errorData = await response.json().catch(() => ({ error: "Unknown error" }));
+		gatewayDebugLog(`sso-ticket failed: code=${errorData.code ?? "n/a"}, error=${errorData.error ?? "Unknown error"}`);
+		console.error(`${RED$3}获取 SSO_TICKET 失败: ${errorData.error || errorData.code || "Unknown error"}${RESET$3}`);
+		return null;
+	} catch (error) {
+		gatewayDebugLog(`sso-ticket fetch exception: ${error.message}`);
+		console.error(`${RED$3}获取 SSO_TICKET 失败: ${error.message}${RESET$3}`);
+		return null;
+	}
 }
 async function ensureLogin() {
 	const auth = readAuth();
@@ -4786,81 +5360,11 @@ async function ensureLogin() {
 		ssoRefreshToken: auth.ssoRefreshToken
 	};
 }
-const PLATFORMS = {
-	code: {
-		name: "Code (GitLab)",
-		host: "code.alibaba-inc.com",
-		aliases: ["gitlab", "git"],
-		authType: "private_token",
-		tokenHeaderName: "PRIVATE-TOKEN",
-		tokenDocUrl: "https://code.alibaba-inc.com/profile/account"
-	},
-	yuque: {
-		name: "语雀",
-		host: "aliyuque.antfin.com",
-		aliases: ["yuque"],
-		authType: "private_token",
-		tokenHeaderName: "X-Auth-Token",
-		tokenDocUrl: "https://aliyuque.antfin.com/settings/tokens"
-	},
-	o2: {
-		name: "O2 平台",
-		host: "o2.alibaba-inc.com",
-		authType: "app_code+buc",
-		appCode: process.env.O2_APP_CODE || "SYKcE5kklxmOS7Z2XatNn"
-	},
-	o2open: {
-		name: "O2 开放接口",
-		host: "open.o2.alibaba-inc.com",
-		authType: "app_code",
-		appCode: process.env.O2_APP_CODE || "cli-skills"
-	},
-	aone: {
-		name: "Aone",
-		host: "aone.alibaba-inc.com",
-		authType: "buc_sso_refresh",
-		ssoType: "refresh_token"
-	},
-	aonedevops: {
-		name: "Aone DevOps",
-		host: "devops.alibaba-inc.com",
-		authType: "buc_sso_refresh",
-		ssoType: "refresh_token"
-	}
-};
-function detectPlatformWithKey(hostname) {
-	for (const [key, config] of Object.entries(PLATFORMS)) {
-		if (config.host === hostname) return {
-			key,
-			config
-		};
-		if (config.aliases?.some((alias) => hostname.includes(alias))) return {
-			key,
-			config
-		};
-	}
-	for (const [key, config] of Object.entries(PLATFORMS)) if (hostname.endsWith(config.host) || hostname === config.host) return {
-		key,
-		config
-	};
-	return null;
-}
-function getPlatform(key) {
-	if (PLATFORMS[key]) return PLATFORMS[key];
-	for (const [, config] of Object.entries(PLATFORMS)) if (config.aliases?.includes(key)) return config;
-	return null;
-}
-function listPlatforms() {
-	return Object.entries(PLATFORMS).map(([key, config]) => ({
-		key,
-		config
-	}));
-}
 const DIM$2 = "\x1B[38;5;102m";
 const TEXT$2 = "\x1B[38;5;145m";
 const RESET$2 = "\x1B[0m";
 const GREEN$1 = "\x1B[32m";
-const RED$1 = "\x1B[31m";
+const RED$2 = "\x1B[31m";
 const YELLOW$2 = "\x1B[33m";
 function openBrowser$1(url) {
 	const platform = process.platform;
@@ -4871,33 +5375,144 @@ function openBrowser$1(url) {
 }
 function detectAuthMode(platformKey, platform, hostname) {
 	if (platform.authType === "private_token") return "private_token";
-	if (platformKey === "o2" || platform.authType === "app_code+buc") return "app_code+buc";
-	if (platform.authType === "app_code") return "app_code";
+	if (platformKey === "o2") return "auto";
 	if (hostname.endsWith(".alibaba-inc.com") || hostname === "alibaba-inc.com") return "sso_cookie";
 	return "sso_ticket";
 }
 function getAuthModeDescription(mode) {
 	switch (mode) {
 		case "private_token": return "Private Token";
-		case "app_code": return "App Code";
-		case "app_code+buc": return "App Code + BUC SSO";
 		case "sso_cookie": return "SSO Cookie (REFRESH_TOKEN)";
 		case "sso_ticket": return "SSO Ticket";
 		case "gateway": return "Gateway Proxy";
 		default: return "Auto";
 	}
 }
-function getPlatformPrivateToken(platformKey, explicitToken) {
+const O2_CREDENTIALS_BASE64 = "eyJhY2Nlc3NLZXlJZCI6IlNZS2NFNWtrbHhtT1M3WjJYYXRObiIsImFjY2Vzc0tleVNlY3JldCI6IjQ2NGNhYTc0MmNiYTk2NzFkZjM5NzJkYzdhNWI3MmQ1Nzk5ZTc2NTQyYzRiZGFjM2M3YTk5N2QzMDM3YTIyNzAifQ==";
+function getO2Credentials() {
+	const accessKeyId = process.env.O2_ACCESS_KEY_ID?.trim();
+	const accessKeySecret = process.env.O2_ACCESS_KEY_SECRET?.trim();
+	if (accessKeyId && accessKeySecret) return {
+		accessKeyId,
+		accessKeySecret
+	};
+	return JSON.parse(Buffer.from(O2_CREDENTIALS_BASE64, "base64").toString("utf-8"));
+}
+function getO2ApiEnv() {
+	const env = process.env.O2_API_ENV?.trim();
+	if (!env) return void 0;
+	return env;
+}
+function searchParamsToObject(searchParams) {
+	const out = {};
+	searchParams.forEach((value, key) => {
+		const prev = out[key];
+		if (prev === void 0) {
+			out[key] = value;
+			return;
+		}
+		out[key] = Array.isArray(prev) ? [...prev, value] : [prev, value];
+	});
+	return out;
+}
+function parseBodyAsJsonObject(body) {
+	if (!body) return {};
+	const parsed = JSON.parse(body);
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("O2 请求 body 仅支持 JSON 对象");
+	return parsed;
+}
+async function sendO2SdkRequest(targetUrl, options, withSsoTicket) {
+	const parsed = new URL(targetUrl);
+	const path = parsed.pathname;
+	const query = searchParamsToObject(parsed.searchParams);
+	const headers = { ...options.headers ?? {} };
+	if (withSsoTicket) {
+		const ssoTicket = await ensureSsoTicket();
+		if (!ssoTicket) throw new Error("无法获取 SSO_TICKET，请重新登录后重试");
+		headers.SSO_TICKET = ssoTicket;
+	}
+	let O2ClientCtor;
+	try {
+		const mod = await import("@ali/o2-open-client");
+		const defaultExport = mod.default;
+		O2ClientCtor = mod.O2Client ?? (typeof defaultExport === "function" ? defaultExport : defaultExport?.O2Client);
+		if (!O2ClientCtor) throw new Error("未找到 O2Client 导出");
+	} catch (error) {
+		throw new Error(`未安装 @ali/o2-open-client 或导入失败: ${error.message}`);
+	}
+	const { accessKeyId, accessKeySecret } = getO2Credentials();
+	const o2Env = getO2ApiEnv();
+	const client = new O2ClientCtor({
+		accessKeyId,
+		accessKeySecret,
+		...o2Env ? { env: o2Env } : {}
+	});
+	const method = options.method.toUpperCase();
+	const bodyObj = parseBodyAsJsonObject(options.body);
+	if (!options.quiet) {
+		console.log(`${DIM$2}${method} ${parsed.toString()}${RESET$2}`);
+		console.log(`${DIM$2}→ O2 SDK 直连${withSsoTicket ? " (携带 SSO_TICKET)" : ""}${RESET$2}`);
+		if (o2Env) console.log(`${DIM$2}→ O2 SDK Env: ${o2Env}${RESET$2}`);
+	}
+	let responseData;
+	switch (method) {
+		case "GET":
+			responseData = await client.get(path, query, headers);
+			break;
+		case "POST":
+			responseData = await client.post(path, query, bodyObj, headers);
+			break;
+		case "PUT":
+			responseData = await client.put(path, query, bodyObj, headers);
+			break;
+		case "DELETE":
+			responseData = await client.delete(path, query, headers);
+			break;
+		default: throw new Error(`O2 SDK 暂不支持该方法: ${method}`);
+	}
+	const outputBody = !options.raw && options.pretty !== false ? JSON.stringify(responseData, null, 2) : JSON.stringify(responseData);
+	if (options.output) {
+		const { writeFileSync } = await import("fs");
+		writeFileSync(options.output, outputBody);
+		if (!options.quiet) console.log(`${GREEN$1}✓ 已保存到 ${options.output}${RESET$2}`);
+	} else console.log(outputBody);
+}
+function tryExtractYuqueGroupFromUrl(targetUrl) {
+	try {
+		const u = new URL(targetUrl);
+		const scope = u.searchParams.get("scope")?.trim();
+		if (scope) {
+			const groupFromScope = scope.split("/")[0]?.trim();
+			if (groupFromScope && /^[a-zA-Z0-9_-]+$/.test(groupFromScope)) return groupFromScope;
+		}
+		return u.pathname.match(/^\/api\/v\d+\/repos\/([^/]+)\//i)?.[1]?.trim() || null;
+	} catch {
+		return null;
+	}
+}
+function getPlatformPrivateToken(platformKey, explicitToken, targetUrl) {
 	if (explicitToken) return explicitToken;
 	const envVarName = `ALI_SKILLS_${platformKey.toUpperCase()}_TOKEN`;
 	const envToken = process.env[envVarName] || process.env[`${platformKey.toUpperCase()}_TOKEN`];
 	if (envToken) return envToken;
-	return readConfig().platforms?.[platformKey]?.privateToken || null;
+	const config = readConfig();
+	if (platformKey === "yuque") {
+		const groupFromPath = targetUrl ? tryExtractYuqueGroupFromUrl(targetUrl) : null;
+		if (groupFromPath) {
+			const byPath = config.platforms?.yuque?.groups?.[groupFromPath]?.privateToken?.trim();
+			if (byPath) return byPath;
+		}
+		return getYuquePrivateTokenForRequest(config);
+	}
+	return config.platforms?.[platformKey]?.privateToken || null;
 }
 async function promptConfigureToken(platformKey, platform) {
 	console.log();
 	console.log(`${YELLOW$2}⚠️  ${platform.name} 需要配置 Private Token${RESET$2}`);
-	if (platform.tokenDocUrl) console.log(`${DIM$2}Token 获取地址: ${platform.tokenDocUrl}${RESET$2}`);
+	const yuqueCfg = platformKey === "yuque" ? readConfig().platforms?.yuque : void 0;
+	const yuqueTeamForDoc = platformKey === "yuque" ? yuqueCfg?.defaultGroup?.trim() || Object.keys(yuqueCfg?.groups ?? {})[0] : void 0;
+	const tokenDocUrlToOpen = platformKey === "yuque" ? yuqueTeamForDoc ? getYuqueGroupTokenDocUrl(yuqueTeamForDoc) : platform.tokenDocUrl : platform.tokenDocUrl;
+	if (tokenDocUrlToOpen) console.log(`${DIM$2}Token 获取地址: ${tokenDocUrlToOpen}${RESET$2}`);
 	if (!await ye({
 		message: "是否现在配置?",
 		initialValue: true
@@ -4905,9 +5520,9 @@ async function promptConfigureToken(platformKey, platform) {
 		console.log(`${DIM$2}已取消配置${RESET$2}`);
 		return null;
 	}
-	if (platform.tokenDocUrl) {
+	if (tokenDocUrlToOpen) {
 		console.log(`${TEXT$2}正在打开浏览器...${RESET$2}`);
-		openBrowser$1(platform.tokenDocUrl);
+		openBrowser$1(tokenDocUrlToOpen);
 	}
 	const token = await ge({
 		message: `请输入 ${platform.name} 的 Private Token:`,
@@ -4917,7 +5532,12 @@ async function promptConfigureToken(platformKey, platform) {
 		console.log(`${DIM$2}已取消配置${RESET$2}`);
 		return null;
 	}
-	setPlatformToken(platformKey, { privateToken: token });
+	if (platformKey === "yuque") {
+		const cfg = readConfig().platforms?.yuque;
+		const team = cfg?.defaultGroup?.trim() || (cfg?.groups ? Object.keys(cfg.groups).find((k) => cfg.groups?.[k]?.privateToken) : void 0);
+		if (team) setYuqueGroupAccessToken(team, token);
+		else setPlatformToken(platformKey, { privateToken: token });
+	} else setPlatformToken(platformKey, { privateToken: token });
 	console.log(`${GREEN$1}✓ ${platform.name} Token 已保存${RESET$2}`);
 	return token;
 }
@@ -4950,7 +5570,7 @@ async function sendDirectRequest(targetUrl, platform, token, options) {
 	clearTimeout(timeoutId);
 	const responseBody = await response.text();
 	if (!options.quiet) {
-		const statusColor = response.ok ? GREEN$1 : RED$1;
+		const statusColor = response.ok ? GREEN$1 : RED$2;
 		console.log(`${statusColor}${response.status} ${response.statusText}${RESET$2}`);
 		if (options.includeHeaders) {
 			console.log();
@@ -4973,12 +5593,82 @@ async function sendDirectRequest(targetUrl, platform, token, options) {
 	} else console.log(outputBody);
 	if (!response.ok) process.exit(1);
 }
+async function sendSsoCookieDirectRequest(targetUrl, options) {
+	let ssoRefreshToken = null;
+	try {
+		await ensureLogin();
+		ssoRefreshToken = await ensureSsoRefreshToken();
+	} catch (error) {
+		console.error(`${RED$2}Error: ${error.message}${RESET$2}`);
+		process.exit(1);
+	}
+	if (!ssoRefreshToken) {
+		console.error(`${RED$2}Error: 缺少 SSO_REFRESH_TOKEN，无法进行根域 cookie 直连${RESET$2}`);
+		console.log(`${DIM$2}可能原因:${RESET$2}`);
+		console.log(`${DIM$2}  1. 尚未通过 ali-skills 登录${RESET$2}`);
+		console.log(`${DIM$2}  2. 登录时未拿到根域 token${RESET$2}`);
+		console.log(`${DIM$2}  3. token 已失效${RESET$2}`);
+		console.log(`${TEXT$2}建议执行: npx ali-skills login${RESET$2}`);
+		process.exit(1);
+	}
+	const requestHeaders = {
+		"User-Agent": "ali-skills-cli/1.0",
+		Cookie: `SSO_REFRESH_TOKEN=${ssoRefreshToken}`
+	};
+	if (options.headers) Object.entries(options.headers).forEach(([key, value]) => {
+		if (key.toLowerCase() !== "cookie") requestHeaders[key] = value;
+	});
+	let body;
+	if (options.body) {
+		body = options.body;
+		if (!requestHeaders["Content-Type"]) requestHeaders["Content-Type"] = "application/json";
+	}
+	if (!options.quiet) {
+		console.log(`${DIM$2}${options.method.toUpperCase()} ${targetUrl}${RESET$2}`);
+		console.log(`${DIM$2}→ 直接请求 (Cookie: SSO_REFRESH_TOKEN)${RESET$2}`);
+	}
+	const controller = new AbortController();
+	const timeout = options.timeout || 3e4;
+	const timeoutId = setTimeout(() => controller.abort(), timeout);
+	const response = await fetch(targetUrl, {
+		method: options.method.toUpperCase(),
+		headers: requestHeaders,
+		body: body || void 0,
+		signal: controller.signal,
+		redirect: "manual"
+	});
+	clearTimeout(timeoutId);
+	const responseBody = await response.text();
+	if (!options.quiet) {
+		const statusColor = response.ok ? GREEN$1 : RED$2;
+		console.log(`${statusColor}${response.status} ${response.statusText}${RESET$2}`);
+		if (response.status === 401 || response.status === 403) {
+			console.log(`${YELLOW$2}根域 cookie 认证失败${RESET$2}`);
+			console.log(`${DIM$2}可能原因:${RESET$2}`);
+			console.log(`${DIM$2}  1. SSO_REFRESH_TOKEN 已过期或无效${RESET$2}`);
+			console.log(`${DIM$2}  2. 目标服务未启用该认证链路${RESET$2}`);
+			console.log(`${DIM$2}  3. 当前账号在目标系统无访问权限${RESET$2}`);
+			console.log(`${TEXT$2}建议: 重新登录后重试，或联系目标系统确认登录态策略${RESET$2}`);
+		}
+	}
+	let outputBody = responseBody;
+	if (!options.raw && options.pretty !== false) try {
+		const json = JSON.parse(responseBody);
+		outputBody = JSON.stringify(json, null, 2);
+	} catch {}
+	if (options.output) {
+		const { writeFileSync } = __require("fs");
+		writeFileSync(options.output, outputBody);
+		console.log(`${GREEN$1}✓ 已保存到 ${options.output}${RESET$2}`);
+	} else console.log(outputBody);
+	if (!response.ok) process.exit(1);
+}
 async function sendGatewayRequest(targetUrl, platformKey, options, authMode = "gateway") {
 	let credentials;
 	try {
 		credentials = await ensureLogin();
 	} catch (error) {
-		console.error(`${RED$1}Error: ${error.message}${RESET$2}`);
+		console.error(`${RED$2}Error: ${error.message}${RESET$2}`);
 		process.exit(1);
 	}
 	const proxyUrl = `${getGatewayUrl()}/api/gateway/proxy`;
@@ -5017,7 +5707,7 @@ async function sendGatewayRequest(targetUrl, platformKey, options, authMode = "g
 			error: "Unauthorized",
 			code: "UNKNOWN"
 		}))).code === "INVALID_TOKEN") {
-			console.error(`${RED$1}Error: Token 已失效，请重新登录${RESET$2}`);
+			console.error(`${RED$2}Error: Token 已失效，请重新登录${RESET$2}`);
 			console.log(`${TEXT$2}执行: npx ali-skills login${RESET$2}`);
 			process.exit(1);
 		}
@@ -5025,7 +5715,7 @@ async function sendGatewayRequest(targetUrl, platformKey, options, authMode = "g
 	const responseBody = await response.text();
 	const requestId = response.headers.get("X-Gateway-Request-Id");
 	if (!options.quiet) {
-		const statusColor = response.ok ? GREEN$1 : RED$1;
+		const statusColor = response.ok ? GREEN$1 : RED$2;
 		console.log(`${statusColor}${response.status} ${response.statusText}${RESET$2}`);
 		if (requestId) console.log(`${DIM$2}Request ID: ${requestId}${RESET$2}`);
 		if (options.includeHeaders) {
@@ -5054,12 +5744,13 @@ async function proxyRequest(targetUrl, options) {
 	try {
 		url = new URL(targetUrl);
 	} catch {
-		console.error(`${RED$1}Error: 无效的 URL "${targetUrl}"${RESET$2}`);
+		console.error(`${RED$2}Error: 无效的 URL "${targetUrl}"${RESET$2}`);
 		process.exit(1);
 	}
 	const platformResult = detectPlatformWithKey(url.hostname);
-	if (!platformResult) {
-		console.error(`${RED$1}Error: 无法识别平台 "${url.hostname}"${RESET$2}`);
+	const isAlibabaIncRootDomain = url.hostname.endsWith(".alibaba-inc.com") || url.hostname === "alibaba-inc.com";
+	if (!platformResult && !isAlibabaIncRootDomain) {
+		console.error(`${RED$2}Error: 无法识别平台 "${url.hostname}"${RESET$2}`);
 		console.log(`${DIM$2}支持的平台:${RESET$2}`);
 		console.log(`${DIM$2}  - code.alibaba-inc.com (GitLab)${RESET$2}`);
 		console.log(`${DIM$2}  - aliyuque.antfin.com (语雀)${RESET$2}`);
@@ -5067,51 +5758,70 @@ async function proxyRequest(targetUrl, options) {
 		console.log(`${DIM$2}  - aone.alibaba-inc.com${RESET$2}`);
 		process.exit(1);
 	}
-	const { key: platformKey, config: platform } = platformResult;
+	const platformKey = platformResult?.key || "alibaba-inc";
+	const platform = platformResult?.config || {
+		name: "Alibaba Inc Domain",
+		host: "alibaba-inc.com",
+		authType: "buc_sso_refresh",
+		ssoType: "refresh_token"
+	};
 	if (!options.quiet) console.log(`${DIM$2}平台: ${platform.name}${RESET$2}`);
 	const authMode = options.authMode === "auto" || !options.authMode ? detectAuthMode(platformKey, platform, url.hostname) : options.authMode;
 	if (!options.quiet && authMode !== "auto") console.log(`${DIM$2}认证方式: ${getAuthModeDescription(authMode)}${RESET$2}`);
 	try {
+		if (platformKey === "o2") {
+			if (authMode !== "auto" && authMode !== "sso_ticket") {
+				console.error(`${RED$2}Error: o2 仅支持 --auth auto 或 --auth sso_ticket${RESET$2}`);
+				process.exit(1);
+			}
+			await sendO2SdkRequest(targetUrl, options, authMode === "sso_ticket");
+			return;
+		}
 		switch (authMode) {
 			case "private_token": {
-				let token = getPlatformPrivateToken(platformKey, options.token);
+				let token = getPlatformPrivateToken(platformKey, options.token, targetUrl);
 				if (!token) {
 					token = await promptConfigureToken(platformKey, platform);
 					if (!token) {
-						console.error(`${RED$1}Error: ${platform.name} 需要配置 Private Token 才能访问${RESET$2}`);
+						console.error(`${RED$2}Error: ${platform.name} 需要配置 Private Token 才能访问${RESET$2}`);
 						console.log(`${DIM$2}您可以通过以下方式配置:${RESET$2}`);
-						console.log(`  1. 参数: --token <your_token>`);
-						console.log(`  2. 环境变量: ALI_SKILLS_${platformKey.toUpperCase()}_TOKEN=<your_token>`);
-						console.log(`  3. 配置文件: npx ali-skills gateway config --platform ${platformKey}`);
+						console.log(`${DIM$2}  【推荐】一次配置，持续使用:${RESET$2}`);
+						console.log(`    npx ali-skills login ${platformKey}`);
+						console.log(`${DIM$2}  【临时】请求时传入:${RESET$2}`);
+						console.log(`    环境变量: ALI_SKILLS_${platformKey.toUpperCase()}_TOKEN=<your_token>`);
+						console.log(`    参数: --token <your_token>`);
 						process.exit(1);
 					}
 				}
 				await sendDirectRequest(targetUrl, platform, token, options);
 				break;
 			}
-			case "app_code":
-			case "app_code+buc":
-			case "sso_cookie":
 			case "sso_ticket":
 			case "gateway":
 				await sendGatewayRequest(targetUrl, platformKey, options, authMode);
 				break;
+			case "sso_cookie":
+				await sendSsoCookieDirectRequest(targetUrl, options);
+				break;
 			default: if (platform.authType === "private_token") {
-				const token = getPlatformPrivateToken(platformKey, options.token);
+				const token = getPlatformPrivateToken(platformKey, options.token, targetUrl);
 				if (token) await sendDirectRequest(targetUrl, platform, token, options);
 				else {
-					console.error(`${RED$1}Error: ${platform.name} 需要配置 Private Token${RESET$2}`);
+					console.error(`${RED$2}Error: ${platform.name} 需要配置 Private Token${RESET$2}`);
 					console.log(`${DIM$2}您可以通过以下方式配置:${RESET$2}`);
-					console.log(`  1. 参数: --token <your_token>`);
-					console.log(`  2. 环境变量: ALI_SKILLS_${platformKey.toUpperCase()}_TOKEN=<your_token>`);
-					console.log(`  3. 配置文件: npx ali-skills gateway config --platform ${platformKey}`);
+					console.log(`${DIM$2}  【推荐】一次配置，持续使用:${RESET$2}`);
+					console.log(`    npx ali-skills login ${platformKey}`);
+					console.log(`${DIM$2}  【临时】请求时传入:${RESET$2}`);
+					console.log(`    环境变量: ALI_SKILLS_${platformKey.toUpperCase()}_TOKEN=<your_token>`);
+					console.log(`    参数: --token <your_token>`);
 					process.exit(1);
 				}
-			} else await sendGatewayRequest(targetUrl, platformKey, options, "gateway");
+			} else if (isAlibabaIncRootDomain) await sendSsoCookieDirectRequest(targetUrl, options);
+			else await sendGatewayRequest(targetUrl, platformKey, options, "sso_ticket");
 		}
 	} catch (error) {
-		if (error instanceof Error) if (error.name === "AbortError") console.error(`${RED$1}Error: 请求超时${RESET$2}`);
-		else console.error(`${RED$1}Error: ${error.message}${RESET$2}`);
+		if (error instanceof Error) if (error.name === "AbortError") console.error(`${RED$2}Error: 请求超时${RESET$2}`);
+		else console.error(`${RED$2}Error: ${error.message}${RESET$2}`);
 		process.exit(1);
 	}
 }
@@ -5127,47 +5837,43 @@ const TEXT$1 = "\x1B[38;5;145m";
 const RESET$1 = "\x1B[0m";
 const GREEN = "\x1B[32m";
 const YELLOW$1 = "\x1B[33m";
-const RED = "\x1B[31m";
-function showConfigHelp() {
-	console.log(`
-${TEXT$1}npx ali-skills config - 配置各平台访问凭证${RESET$1}
-
-${DIM$1}Usage:${RESET$1}
-  npx ali-skills config <platform>      配置指定平台的 token
-  npx ali-skills config --list          列出已配置的平台
-  npx ali-skills config --remove <p>    移除指定平台的配置
-
-${DIM$1}Supported Platforms:${RESET$1}`);
-	const platforms = listPlatforms();
-	const displayWidth = (str) => {
-		let width = 0;
-		for (const char of str) width += char.charCodeAt(0) > 127 ? 2 : 1;
-		return width;
-	};
-	const maxNameWidth = Math.max(...platforms.map(({ config }) => displayWidth(config.name)));
-	for (const { key, config } of platforms) {
-		const authType = config.authType === "private_token" ? "需配置 Token" : config.authType === "app_code" ? "内置凭证" : config.authType === "buc_sso_refresh" ? "需 BUC 登录" : "需 BUC 登录";
-		const namePadding = " ".repeat(15 - displayWidth(config.name) + maxNameWidth);
-		console.log(`  ${key.padEnd(12)} ${config.name}${namePadding} ${DIM$1}${authType}${RESET$1}`);
-	}
-	console.log(`
-${DIM$1}Examples:${RESET$1}
-  npx ali-skills config code
-  npx ali-skills config yuque
-  npx ali-skills config --list
-  npx ali-skills config --remove code
-`);
+const RED$1 = "\x1B[31m";
+function maskToken(token) {
+	if (token.length <= 4) return "****";
+	return `****${token.slice(-4)}`;
 }
-async function prompt(question, defaultValue) {
+const AVAILABLE_PLATFORMS = listPlatforms().map(({ key }) => key).join(", ");
+async function promptLine(question) {
 	const rl = (await import("readline")).createInterface({
 		input: process.stdin,
 		output: process.stdout
 	});
 	return new Promise((resolve) => {
-		const fullQuestion = defaultValue ? `${question} (默认: ${defaultValue}): ` : `${question}: `;
-		rl.question(fullQuestion, (answer) => {
+		rl.question(question, (answer) => {
 			rl.close();
-			resolve(answer.trim() || defaultValue || "");
+			resolve(answer.trim());
+		});
+	});
+}
+async function promptSecret(question) {
+	const rl = (await import("readline")).createInterface({
+		input: process.stdin,
+		output: process.stdout,
+		terminal: true
+	});
+	return new Promise((resolve) => {
+		const fullQuestion = `${question}: `;
+		const writable = rl;
+		process.stdout.write(fullQuestion);
+		writable._writeToOutput = (chunk) => {
+			if (chunk === "\r" || chunk === "\n" || chunk === "\r\n") return;
+			const visible = chunk.replace(/\u001b\[[0-9;]*[A-Za-z]/g, "").replace(/[\u0000-\u001f\u007f]/g, "");
+			if (visible.length > 0) process.stdout.write("*".repeat(visible.length));
+		};
+		rl.question("", (answer) => {
+			process.stdout.write("\n");
+			rl.close();
+			resolve(answer.trim());
 		});
 	});
 }
@@ -5179,109 +5885,185 @@ async function openBrowser(url) {
 		stdio: "ignore"
 	});
 }
-async function configurePlatform(platformKey) {
+async function configurePlatform(platformKey, yuqueGroupArg) {
 	const platform = getPlatform(platformKey);
 	if (!platform) {
-		console.error(`${RED}Error: 不支持的平台 "${platformKey}"${RESET$1}`);
-		console.log(`${DIM$1}运行 'npx ali-skills config --list' 查看支持的平台${RESET$1}`);
+		console.error(`${RED$1}Error: 不支持的平台 "${platformKey}"${RESET$1}`);
+		console.log(`${DIM$1}支持的平台: ${AVAILABLE_PLATFORMS}${RESET$1}`);
+		console.log(`${DIM$1}示例: npx ali-skills login code${RESET$1}`);
 		process.exit(1);
 	}
-	console.log(`${TEXT$1}配置 ${platform.name}${RESET$1}`);
-	console.log(`${DIM$1}认证方式: ${platform.authType}${RESET$1}`);
 	switch (platform.authType) {
 		case "private_token":
-			await configurePrivateToken(platformKey, platform);
+			if (platformKey === "yuque") await configureYuque(yuqueGroupArg);
+			else await configurePrivateToken(platformKey, platform);
 			break;
 		case "app_code":
+			console.log(`${TEXT$1}配置 ${platform.name}${RESET$1}`);
+			console.log(`${DIM$1}认证方式: ${platform.authType}${RESET$1}`);
 			console.log(`${GREEN}✓ ${platform.name} 使用内置凭证，无需配置${RESET$1}`);
 			break;
 		case "app_code+buc":
-			console.log(`${YELLOW$1}! ${platform.name} 需要 BUC 登录${RESET$1}`);
-			console.log(`${DIM$1}请运行: npx ali-skills login${RESET$1}`);
+			if (platformKey === "o2") showO2LoginStatus();
+			else {
+				console.log(`${TEXT$1}配置 ${platform.name}${RESET$1}`);
+				console.log(`${DIM$1}认证方式: ${platform.authType}${RESET$1}`);
+				console.log(`${YELLOW$1}! ${platform.name} 需要 BUC 登录${RESET$1}`);
+				console.log(`${DIM$1}请运行: npx ali-skills login${RESET$1}`);
+			}
 			break;
 		case "buc_sso_refresh":
 		case "buc_sso_ticket":
+			console.log(`${TEXT$1}配置 ${platform.name}${RESET$1}`);
+			console.log(`${DIM$1}认证方式: ${platform.authType}${RESET$1}`);
 			console.log(`${YELLOW$1}! ${platform.name} 需要 BUC 登录${RESET$1}`);
 			console.log(`${DIM$1}请运行: npx ali-skills login${RESET$1}`);
 			break;
 		default:
-			console.error(`${RED}Error: 未知的认证类型${RESET$1}`);
+			console.error(`${RED$1}Error: 未知的认证类型${RESET$1}`);
 			process.exit(1);
 	}
 }
+function showO2LoginStatus() {
+	const auth = readAuth();
+	const isLoggedIn = Boolean(auth) && !isAuthExpired(auth);
+	console.log(`${TEXT$1}配置 O2 平台${RESET$1}`);
+	console.log(`${DIM$1}认证方式: 内置服务调用身份${RESET$1}`);
+	if (isLoggedIn) {
+		console.log(`${GREEN}✓ 当前 BUC 登录态有效${RESET$1}`);
+		console.log(`${DIM$1}调用需 BUC 的 O2 接口时，将自动换取 SSO_TICKET${RESET$1}`);
+		return;
+	}
+	console.log(`${YELLOW$1}! 当前未登录 BUC${RESET$1}`);
+	console.log(`${DIM$1}请先执行: npx ali-skills login${RESET$1}`);
+}
+function assertValidYuqueTeamSlug(raw) {
+	const slug = raw.trim();
+	if (!slug) {
+		console.error(`${RED$1}Error: 团队名称不能为空${RESET$1}`);
+		process.exit(1);
+	}
+	if (slug.length > 128 || /[/\s]/.test(slug) || slug.includes("..")) {
+		console.error(`${RED$1}Error: 团队名称不能包含空格、斜杠等非法字符${RESET$1}`);
+		process.exit(1);
+	}
+	if (!/^[a-zA-Z0-9_-]+$/.test(slug)) {
+		console.error(`${RED$1}Error: 团队名称仅允许字母、数字、连字符与下划线${RESET$1}`);
+		process.exit(1);
+	}
+	return slug;
+}
+async function configureYuque(groupArg) {
+	const platformName = "语雀";
+	console.log(`${TEXT$1}配置 ${platformName}${RESET$1}`);
+	console.log(`${DIM$1}认证方式: 团队 Group Access Token${RESET$1}`);
+	console.log();
+	const teamSlug = assertValidYuqueTeamSlug(groupArg ?? await promptLine(`${TEXT$1}请输入团队名称${RESET$1}（语雀 URL 中域名后的第一段，例如 ${DIM$1}fliggyfe-infra${RESET$1}）\n${DIM$1}>${RESET$1} `));
+	const existingGroupToken = readConfig().platforms?.yuque?.groups?.[teamSlug]?.privateToken?.trim();
+	if (existingGroupToken) {
+		setYuqueDefaultGroup(teamSlug);
+		console.log(`${YELLOW$1}! 团队 ${teamSlug} 已配置 Group Access Token：${maskToken(existingGroupToken)}${RESET$1}`);
+		console.log(`${DIM$1}如需重新配置，请先执行: npx ali-skills logout yuque ${teamSlug}${RESET$1}`);
+		console.log();
+		console.log(`${GREEN}✓ 已将默认分组切换为 ${teamSlug}${RESET$1}`);
+		return;
+	}
+	const docUrl = getYuqueGroupTokenDocUrl(teamSlug);
+	console.log(`${DIM$1}1. 正在打开团队 Token 页面...${RESET$1}`);
+	console.log(`${DIM$1}   ${docUrl}${RESET$1}`);
+	await openBrowser(docUrl);
+	console.log();
+	console.log(`${DIM$1}2. 在浏览器中创建 Group Access Token，将完整 token 粘贴到下方${RESET$1}`);
+	const token = await promptSecret("Group Access Token");
+	if (!token) {
+		console.error(`${RED$1}Error: Token 不能为空${RESET$1}`);
+		process.exit(1);
+	}
+	if (/\s/.test(token)) {
+		console.error(`${RED$1}Error: Token 中不能包含空格或换行，请重新粘贴${RESET$1}`);
+		process.exit(1);
+	}
+	const tail = token.slice(-4);
+	console.log(`${DIM$1}已读取 Group Access Token（长度 ${token.length}，尾号 ${tail}）${RESET$1}`);
+	setYuqueGroupAccessToken(teamSlug, token);
+	console.log();
+	console.log(`${GREEN}✓ ${platformName} 团队 ${teamSlug} 的 Token 已保存${RESET$1}`);
+	console.log(`${GREEN}✓ 已将默认分组切换为 ${teamSlug}${RESET$1}`);
+	console.log(`${DIM$1}配置文件: ${getConfigFilePath()}${RESET$1}`);
+}
 async function configurePrivateToken(platformKey, platform) {
 	if (!platform.tokenDocUrl) {
-		console.error(`${RED}Error: 未找到 ${platform.name} 的 token 文档地址${RESET$1}`);
+		console.error(`${RED$1}Error: 未找到 ${platform.name} 的 token 文档地址${RESET$1}`);
 		process.exit(1);
 	}
+	const existingToken = readConfig().platforms?.[platformKey]?.privateToken?.trim();
+	if (existingToken) {
+		const platformName = platform.name.includes("(") ? platform.name.split("(")[0]?.trim() || platform.name : platform.name;
+		console.log(`${YELLOW$1}! 您已经配置了 ${platformName} 平台的 Private Token：${maskToken(existingToken)}${RESET$1}`);
+		console.log();
+		console.log(`${DIM$1}如需重新配置，请先执行: npx ali-skills logout ${platformKey}${RESET$1}`);
+		return;
+	}
+	console.log(`${TEXT$1}配置 ${platform.name}${RESET$1}`);
+	console.log(`${DIM$1}认证方式: ${platform.authType}${RESET$1}`);
 	console.log();
 	console.log(`${DIM$1}1. 正在打开 ${platform.name} Token 页面...${RESET$1}`);
 	console.log(`${DIM$1}   ${platform.tokenDocUrl}${RESET$1}`);
 	await openBrowser(platform.tokenDocUrl);
 	console.log();
-	console.log(`${DIM$1}2. 请在浏览器中创建 Access Token，然后复制到这里${RESET$1}`);
-	const token = await prompt("Access Token");
+	console.log(`${DIM$1}2. 请在浏览器中创建 Private Token，然后复制到这里${RESET$1}`);
+	const token = await promptSecret("Private Token");
 	if (!token) {
-		console.error(`${RED}Error: Token 不能为空${RESET$1}`);
+		console.error(`${RED$1}Error: Token 不能为空${RESET$1}`);
 		process.exit(1);
 	}
+	if (/\s/.test(token)) {
+		console.error(`${RED$1}Error: Token 中不能包含空格或换行，请重新粘贴${RESET$1}`);
+		process.exit(1);
+	}
+	const tail = token.slice(-4);
+	console.log(`${DIM$1}已读取 Private Token（长度 ${token.length}，尾号 ${tail}）${RESET$1}`);
 	setPlatformToken(platformKey, { privateToken: token });
 	console.log();
 	console.log(`${GREEN}✓ ${platform.name} Token 已保存${RESET$1}`);
 	console.log(`${DIM$1}配置文件: ${getConfigFilePath()}${RESET$1}`);
 }
-function listConfigured() {
-	const config = readConfig();
-	const platforms = Object.entries(config.platforms);
-	if (platforms.length === 0) {
-		console.log(`${DIM$1}尚未配置任何平台${RESET$1}`);
-		console.log(`${TEXT$1}运行 'npx ali-skills config <platform>' 开始配置${RESET$1}`);
-		return;
+async function runPlatformLogin(platformArgs) {
+	if (platformArgs.length === 0) {
+		console.error(`${RED$1}Error: 请指定平台${RESET$1}`);
+		console.log(`${DIM$1}支持的平台: ${AVAILABLE_PLATFORMS}${RESET$1}`);
+		console.log(`${DIM$1}示例: npx ali-skills login code${RESET$1}`);
+		process.exit(1);
 	}
-	console.log(`${TEXT$1}已配置的平台:${RESET$1}`);
-	for (const [key, token] of platforms) {
-		const name = getPlatform(key)?.name || key;
-		const hasToken = token.privateToken ? "✓" : "✗";
-		console.log(`  ${hasToken} ${name} (${key})`);
+	const platform = platformArgs[0];
+	if (!platform) {
+		console.error(`${RED$1}Error: 请指定平台${RESET$1}`);
+		process.exit(1);
 	}
-}
-function removePlatform(platformKey) {
-	const name = getPlatform(platformKey)?.name || platformKey;
-	removePlatformToken(platformKey);
-	console.log(`${GREEN}✓ 已移除 ${name} 的配置${RESET$1}`);
-}
-async function runConfig(args) {
-	if (args.length === 0) {
-		showConfigHelp();
-		return;
+	if (platform.startsWith("-")) {
+		console.error(`${RED$1}Error: 未知选项 "${platform}"${RESET$1}`);
+		process.exit(1);
 	}
-	const command = args[0];
-	switch (command) {
-		case "--help":
-		case "-h":
-			showConfigHelp();
-			break;
-		case "--list":
-		case "-l":
-			listConfigured();
-			break;
-		case "--remove":
-		case "-r": {
-			const platform = args[1];
-			if (!platform) {
-				console.error(`${RED}Error: 请指定要移除的平台${RESET$1}`);
-				process.exit(1);
-			}
-			removePlatform(platform);
-			break;
-		}
-		default: if (!command.startsWith("-")) await configurePlatform(command);
-		else {
-			console.error(`${RED}Error: 未知选项 "${command}"${RESET$1}`);
-			showConfigHelp();
+	if (platformArgs.length > 1) {
+		const invalidOption = platformArgs.slice(1).find((arg) => arg.startsWith("-"));
+		if (invalidOption) {
+			if (invalidOption === "--force" || invalidOption === "-f") {
+				console.error(`${RED$1}Error: 不再支持 ${invalidOption}${RESET$1}`);
+				console.log(`${DIM$1}请先执行: npx ali-skills logout ${platform}，再重新配置${RESET$1}`);
+			} else console.error(`${RED$1}Error: 未知选项 "${invalidOption}"${RESET$1}`);
 			process.exit(1);
 		}
 	}
+	const extraArgs = platformArgs.slice(1).filter(Boolean);
+	if (platform !== "yuque" && extraArgs.length > 0) {
+		console.error(`${RED$1}Error: login ${platform} 不支持额外参数${RESET$1}`);
+		process.exit(1);
+	}
+	if (platform === "yuque" && extraArgs.length > 1) {
+		console.error(`${RED$1}Error: login yuque 仅支持一个团队参数，例如: npx ali-skills login yuque fliggy${RESET$1}`);
+		process.exit(1);
+	}
+	await configurePlatform(platform, platform === "yuque" ? extraArgs[0] : void 0);
 }
 function getUpdateComparisonStrategy(entry) {
 	if (entry.sourceType === "internal") return {
@@ -5309,6 +6091,7 @@ const BOLD = "\x1B[1m";
 const DIM = "\x1B[38;5;102m";
 const TEXT = "\x1B[38;5;145m";
 const YELLOW = "\x1B[33m";
+const RED = "\x1B[31m";
 function isTruthyEnv(value) {
 	if (!value) return false;
 	const normalized = value.trim().toLowerCase();
@@ -5396,6 +6179,12 @@ ${BOLD}Project:${RESET}
   init [name]          Initialize a skill (creates <name>/SKILL.md or ./SKILL.md)
   experimental_sync    Sync skills from node_modules into agent directories
 
+${BOLD}Gateway:${RESET}
+  gateway              鉴权请求能力入口（login/logout/status/req）
+                       支持 privateToken/accessKey 身份托管请求（code、yuque、o2）
+                       支持基于 BUC SSO 的鉴权请求（sso_cookie / sso_ticket）
+                       详细用法请执行: ali-skills gateway -h
+
 ${BOLD}Add Options:${RESET}
   -g, --global           Install skill globally (user-level) instead of project-level
   -a, --agent <agents>   Specify agents to install to (use '*' for all agents)
@@ -5486,23 +6275,30 @@ Discover more skills at ${TEXT}https://ali-skills.alibaba-inc.com/${RESET}
 `);
 }
 function showGatewayHelp() {
+	listPlatforms().map((p) => p.key).join(", ");
+	const platformKeysForHelp = listPlatforms().filter((p) => p.key !== "aone").map((p) => p.key).join(", ");
 	console.log(`
 ${BOLD}Gateway Commands:${RESET}
-  login               Login to Gateway (BUC OAuth)
-  logout              Logout from Gateway
-  status              Show login status
-  request <url>       Send HTTP request via Gateway proxy
-  req <url>           Alias for request
+  login [platform]               Login to Gateway or configure platform token
+  logout [platform]              Logout BUC or clear platform token
+  status [platform] [--all]      Show login status, single platform, or all platform statuses
+  request [platform] <url|path>  Send HTTP request (supports platform + path shorthand)
+  req [platform] <url|path>      Alias for request, recommended
 
-${BOLD}Config Commands:${RESET}
-  config <platform>   Configure platform token
-  config --list       List configured platforms
-  config --remove <p> Remove platform config
+${BOLD}Yuque Commands:${RESET}
+  login yuque [group]                         Configure/switch specified Yuque group directly
+  logout yuque [group] [--all]                Choose one/many Yuque groups to clear, or clear all
+  status yuque [group] [--show|-s] [--pretty] Show Yuque group/all config JSON
+
+${BOLD}Platform Values:${RESET}
+  ${platformKeysForHelp}
 
 ${BOLD}Request Options:${RESET}
   -X, --method <method>   HTTP method (default: GET)
   -b, --body <body>       Request body (JSON string or @file)
   -h, --header <header>   Custom header (can be used multiple times)
+  --auth, --auth-mode <mode>  Auth mode: auto/private_token/sso_cookie/sso_ticket
+  --token <token>         Explicit token for private_token mode
   -o, --output <file>     Save response to file
   -i, --include-headers   Include response headers in output
   -t, --timeout <ms>      Request timeout (default: 30000)
@@ -5510,13 +6306,35 @@ ${BOLD}Request Options:${RESET}
   --raw                   Raw output without formatting
   -q, --quiet             Quiet mode, only output response body
 
+${BOLD}Environment:${RESET}
+  ALI_SKILLS_YUQUE_GROUP   Yuque team slug when multiple teams have tokens in config
+  O2_API_ENV               O2 SDK env override (default online; set pre for pre env)
+  ALI_SKILLS_DEBUG_GATEWAY Enable gateway auth debug logs (1/true/on)
+
 ${BOLD}Examples:${RESET}
   ${DIM}$${RESET} ali-skills login
-  ${DIM}$${RESET} ali-skills config code
-  ${DIM}$${RESET} ali-skills config yuque
-  ${DIM}$${RESET} ali-skills req https://o2.alibaba-inc.com/api/v2/apps
+  ${DIM}$${RESET} ali-skills login code
+  ${DIM}$${RESET} ali-skills login yuque
+  ${DIM}$${RESET} ali-skills login yuque fliggy
+  ${DIM}$${RESET} ali-skills status --all
+  ${DIM}$${RESET} ali-skills status code
+  ${DIM}$${RESET} ali-skills status -s
+  ${DIM}$${RESET} ali-skills status -s --pretty
+  ${DIM}$${RESET} ali-skills status code --show
+  ${DIM}$${RESET} ali-skills status yuque --show
+  ${DIM}$${RESET} ali-skills status yuque fliggy
+  ${DIM}$${RESET} ali-skills status yuque fliggy --show
+  ${DIM}$${RESET} ali-skills logout code
+  ${DIM}$${RESET} ali-skills logout yuque
+  ${DIM}$${RESET} ali-skills logout yuque my-team
+  ${DIM}$${RESET} ali-skills logout yuque --all
+  ${DIM}$${RESET} ali-skills req o2 /v1.0/work/apps
+  ${DIM}$${RESET} ali-skills req o2 /v1.0/work/aone/issues/search -X POST -b '{"keyword":"auth"}'
+  ${DIM}$${RESET} ali-skills req o2 /v1.0/work/issues/123 --auth sso_ticket
   ${DIM}$${RESET} ali-skills req https://code.alibaba-inc.com/api/v4/projects -X GET
-  ${DIM}$${RESET} ali-skills req https://aliyuque.antfin.com/api/v2/repos -o repos.json
+  ${DIM}$${RESET} ali-skills req https://yuque-api.antfin-inc.com/api/v2/repos -o repos.json
+  ${DIM}$${RESET} ali-skills req yuque "/api/v2/search?q=buc&type=doc"
+  ${DIM}$${RESET} ali-skills req yuque "/api/v2/search?q=buc&type=doc&scope=fliggyfe-infra"
   ${DIM}$${RESET} ali-skills logout
 `);
 }
@@ -5553,21 +6371,30 @@ function parseRequestOptions(args) {
 				options.includeHeaders = true;
 				break;
 			case "-t":
-			case "--timeout":
-				options.timeout = parseInt(args[++i], 10);
+			case "--timeout": {
+				const timeoutValue = args[++i];
+				if (timeoutValue) options.timeout = parseInt(timeoutValue, 10);
 				break;
+			}
 			case "--pretty":
 				options.pretty = true;
 				break;
 			case "--raw":
 				options.raw = true;
 				break;
+			case "--auth-mode":
+			case "--auth":
+				options.authMode = args[++i] ?? "auto";
+				break;
+			case "--token":
+				options.token = args[++i];
+				break;
 			case "-q":
 			case "--quiet":
 				options.quiet = true;
 				break;
 			default:
-				if (!arg.startsWith("-") && !url) url = arg;
+				if (arg && !arg.startsWith("-") && !url) url = arg;
 				break;
 		}
 	}
@@ -5578,6 +6405,105 @@ function parseRequestOptions(args) {
 		options
 	};
 }
+function expandRequestShorthand(args) {
+	if (args.length < 2) return args;
+	const platformArg = args[0];
+	const pathArg = args[1];
+	if (!platformArg || !pathArg) return args;
+	if (platformArg.startsWith("-") || pathArg.startsWith("-")) return args;
+	if (/^https?:\/\//i.test(pathArg)) return args;
+	const platform = listPlatforms().find(({ key, config }) => key === platformArg || config.aliases?.includes(platformArg));
+	if (!platform) return args;
+	const normalizedPath = pathArg.startsWith("/") ? pathArg : `/${pathArg}`;
+	return [`https://${platform.key === "yuque" ? "yuque-api.antfin-inc.com" : platform.config.host}${normalizedPath}`, ...args.slice(2)];
+}
+function parseStatusArgs(args) {
+	const showPrivateTokenFlags = new Set(["--show", "-s"]);
+	const positionals = [];
+	let showAll = false;
+	let showPrivateToken = false;
+	let prettyJson = false;
+	for (const raw of args) {
+		if (raw === "--all") {
+			showAll = true;
+			continue;
+		}
+		if (raw === "--pretty") {
+			prettyJson = true;
+			continue;
+		}
+		if (showPrivateTokenFlags.has(raw)) {
+			showPrivateToken = true;
+			continue;
+		}
+		if (raw.startsWith("-")) {
+			console.error(`Unknown option for status: ${raw}`);
+			process.exit(1);
+		}
+		positionals.push(raw);
+	}
+	if (positionals.length > 2) {
+		console.error(`${YELLOW}status 参数过多，期望: [--show|-s]、[platform]、[platform] [--show|-s]、[yuque] [group] [--show|-s] 或 --all${RESET}`);
+		process.exit(1);
+	}
+	const platform = positionals[0];
+	const yuqueGroup = positionals[1];
+	if (yuqueGroup) {
+		if (platform !== "yuque") {
+			console.error(`${RED}仅语雀支持第二个参数（group），例如: npx ali-skills status yuque fliggy --show${RESET}`);
+			process.exit(1);
+		}
+		if (showAll) {
+			console.error(`${RED}status yuque <group> 不能与 --all 同时使用${RESET}`);
+			process.exit(1);
+		}
+	}
+	return {
+		platform,
+		yuqueGroup,
+		showAll,
+		prettyJson,
+		showPrivateToken
+	};
+}
+function parseLogoutArgs(args) {
+	if (args.length === 0) return {};
+	const clearAll = args.includes("--all");
+	const bad = args.find((a) => a.startsWith("-") && a !== "--all");
+	if (bad) {
+		console.error(`Unknown option for logout: ${bad}`);
+		process.exit(1);
+	}
+	const [platform, maybeGroup, ...rest] = args.filter((a) => a !== "--all");
+	if (!platform) return {};
+	if (rest.length > 0) {
+		console.error(`${YELLOW}logout 参数过多${RESET}`);
+		process.exit(1);
+	}
+	if (clearAll && platform.toLowerCase() !== "yuque") {
+		console.error(`${RED}仅语雀支持 --all，例如: npx ali-skills logout yuque --all${RESET}`);
+		process.exit(1);
+	}
+	if (maybeGroup) {
+		if (platform.toLowerCase() !== "yuque") {
+			console.error(`${RED}仅语雀支持第二个参数（团队 slug），例如: npx ali-skills logout yuque my-team${RESET}`);
+			process.exit(1);
+		}
+		if (clearAll) {
+			console.error(`${RED}logout yuque <团队> 不能与 --all 同时使用${RESET}`);
+			process.exit(1);
+		}
+		return {
+			platform,
+			yuqueGroup: maybeGroup,
+			clearAll
+		};
+	}
+	return {
+		platform,
+		clearAll
+	};
+}
 async function runGatewayCommand(args) {
 	if (args.length === 0) {
 		showGatewayHelp();
@@ -5591,11 +6517,13 @@ async function runGatewayCommand(args) {
 			console.log();
 			await login();
 			break;
-		case "logout":
-			await logout();
+		case "logout": {
+			const lo = parseLogoutArgs(rest);
+			await logout(lo.platform, lo.yuqueGroup, lo.clearAll);
 			break;
+		}
 		case "status":
-			await status();
+			await status(parseStatusArgs(rest));
 			break;
 		case "token": {
 			const token = getPrivateToken();
@@ -5608,7 +6536,7 @@ async function runGatewayCommand(args) {
 		}
 		case "request":
 		case "req": {
-			const { url, options } = parseRequestOptions(rest);
+			const { url, options } = parseRequestOptions(expandRequestShorthand(rest));
 			if (!url) {
 				console.error("Error: URL is required");
 				showGatewayHelp();
@@ -6231,11 +7159,6 @@ async function main() {
 			console.log();
 			runInit(restArgs);
 			break;
-		case "config":
-			showLogo();
-			console.log();
-			await runConfig(restArgs);
-			break;
 		case "experimental_install":
 			showLogo();
 			await runInstallFromLock(restArgs);
@@ -6251,7 +7174,7 @@ async function main() {
 		}
 		case "remove":
 		case "rm":
-		case "r":
+		case "r": {
 			if (restArgs.includes("--help") || restArgs.includes("-h")) {
 				showRemoveHelp();
 				break;
@@ -6259,6 +7182,7 @@ async function main() {
 			const { skills, options: removeOptions } = parseRemoveOptions(restArgs);
 			await removeCommand(skills, removeOptions);
 			break;
+		}
 		case "experimental_sync": {
 			showLogo();
 			const { options: syncOptions } = parseSyncOptions(restArgs);
@@ -6280,17 +7204,20 @@ async function main() {
 			await runCheck(restArgs);
 			break;
 		case "login":
-			await login();
+			if (restArgs.length > 0) await runPlatformLogin(restArgs);
+			else await login();
 			break;
-		case "logout":
-			await logout();
+		case "logout": {
+			const lo = parseLogoutArgs(restArgs);
+			await logout(lo.platform, lo.yuqueGroup, lo.clearAll);
 			break;
+		}
 		case "status":
-			await status();
+			await status(parseStatusArgs(restArgs));
 			break;
 		case "req":
 		case "request": {
-			const { url, options } = parseRequestOptions(restArgs);
+			const { url, options } = parseRequestOptions(expandRequestShorthand(restArgs));
 			if (!url) {
 				console.error("Error: URL is required");
 				showGatewayHelp();