ali-skills 0.0.24 → 0.0.26

package/node_modules/@ali/cli-skills/dist/cli.mjs

@@ -916,29 +916,32 @@ const agents = {
 			return existsSync(claudeHome);
 		}
 	},
+	codex: {
+		name: "codex",
+		displayName: "Codex",
+		skillsDir: ".codex/skills",
+		globalSkillsDir: join(codexHome, "skills"),
+		supportsSharedAgentsDir: true,
+		detectInstalled: async () => {
+			return existsSync(codexHome) || existsSync("/etc/codex");
+		}
+	},
 	cursor: {
 		name: "cursor",
 		displayName: "Cursor",
-		skillsDir: ".agents/skills",
+		skillsDir: ".cursor/skills",
 		globalSkillsDir: join(home, ".cursor/skills"),
+		supportsSharedAgentsDir: true,
 		detectInstalled: async () => {
 			return existsSync(join(home, ".cursor"));
 		}
 	},
-	"aone-copilot": {
-		name: "aone-copilot",
-		displayName: "Aone Copilot",
-		skillsDir: ".agents/skills",
-		globalSkillsDir: join(configHome, "agents/skills"),
-		detectInstalled: async () => {
-			return existsSync(join(home, ".aone-copilot"));
-		}
-	},
 	qoder: {
 		name: "qoder",
 		displayName: "Qoder",
-		skillsDir: ".agents/skills",
-		globalSkillsDir: join(home, ".agents/skills"),
+		skillsDir: ".qoder/skills",
+		globalSkillsDir: join(home, ".qoder/skills"),
+		supportsSharedAgentsDir: true,
 		detectInstalled: async () => {
 			return existsSync(join(home, ".qoder"));
 		}
@@ -952,94 +955,90 @@ const agents = {
 			return existsSync(join(home, ".qoderwork"));
 		}
 	},
-	"qwen-code": {
-		name: "qwen-code",
-		displayName: "Qwen Code",
-		skillsDir: ".qwen/skills",
-		globalSkillsDir: join(home, ".qwen/skills"),
+	openclaw: {
+		name: "openclaw",
+		displayName: "OpenClaw",
+		skillsDir: "skills",
+		globalSkillsDir: getOpenClawGlobalSkillsDir(),
 		detectInstalled: async () => {
-			return existsSync(join(home, ".qwen"));
+			return existsSync(join(home, ".openclaw")) || existsSync(join(home, ".clawdbot")) || existsSync(join(home, ".moltbot"));
 		}
 	},
-	"iflow-cli": {
-		name: "iflow-cli",
-		displayName: "iFlow CLI",
-		skillsDir: ".iflow/skills",
-		globalSkillsDir: join(home, ".iflow/skills"),
+	"aone-copilot": {
+		name: "aone-copilot",
+		displayName: "Aone Copilot",
+		skillsDir: ".aone_copilot/skills",
+		globalSkillsDir: join(home, ".aone_copilot/skills"),
+		supportsSharedAgentsDir: true,
 		detectInstalled: async () => {
-			return existsSync(join(home, ".iflow"));
+			return existsSync(join(home, ".aone-copilot"));
 		}
 	},
 	"github-copilot": {
 		name: "github-copilot",
 		displayName: "GitHub Copilot",
-		skillsDir: ".agents/skills",
+		skillsDir: ".github/skills",
 		globalSkillsDir: join(home, ".copilot/skills"),
+		supportsSharedAgentsDir: true,
 		detectInstalled: async () => {
 			return existsSync(join(home, ".copilot"));
 		}
 	},
-	codex: {
-		name: "codex",
-		displayName: "Codex",
-		skillsDir: ".agents/skills",
-		globalSkillsDir: join(codexHome, "skills"),
-		detectInstalled: async () => {
-			return existsSync(codexHome) || existsSync("/etc/codex");
-		}
-	},
 	opencode: {
 		name: "opencode",
 		displayName: "OpenCode",
-		skillsDir: ".agents/skills",
+		skillsDir: ".opencode/skills",
 		globalSkillsDir: join(configHome, "opencode/skills"),
+		supportsSharedAgentsDir: true,
 		detectInstalled: async () => {
 			return existsSync(join(configHome, "opencode"));
 		}
 	},
-	openclaw: {
-		name: "openclaw",
-		displayName: "OpenClaw",
-		skillsDir: "skills",
-		globalSkillsDir: getOpenClawGlobalSkillsDir(),
-		detectInstalled: async () => {
-			return existsSync(join(home, ".openclaw")) || existsSync(join(home, ".clawdbot")) || existsSync(join(home, ".moltbot"));
-		}
-	},
 	"gemini-cli": {
 		name: "gemini-cli",
 		displayName: "Gemini CLI",
-		skillsDir: ".agents/skills",
+		skillsDir: ".gemini/skills",
 		globalSkillsDir: join(home, ".gemini/skills"),
+		supportsSharedAgentsDir: true,
 		detectInstalled: async () => {
 			return existsSync(join(home, ".gemini"));
 		}
 	},
-	antigravity: {
-		name: "antigravity",
-		displayName: "Antigravity",
-		skillsDir: ".agent/skills",
-		globalSkillsDir: join(home, ".gemini/antigravity/skills"),
+	"qwen-code": {
+		name: "qwen-code",
+		displayName: "Qwen Code",
+		skillsDir: ".qwen/skills",
+		globalSkillsDir: join(home, ".qwen/skills"),
 		detectInstalled: async () => {
-			return existsSync(join(home, ".gemini/antigravity"));
+			return existsSync(join(home, ".qwen"));
 		}
 	},
-	cline: {
-		name: "cline",
-		displayName: "Cline",
-		skillsDir: ".agents/skills",
-		globalSkillsDir: join(home, ".agents", "skills"),
+	"kimi-cli": {
+		name: "kimi-cli",
+		displayName: "Kimi Code CLI",
+		skillsDir: ".kimi/skills",
+		globalSkillsDir: join(home, ".kimi/skills"),
+		supportsSharedAgentsDir: true,
 		detectInstalled: async () => {
-			return existsSync(join(home, ".cline"));
+			return existsSync(join(home, ".kimi"));
 		}
 	},
-	continue: {
-		name: "continue",
-		displayName: "Continue",
-		skillsDir: ".continue/skills",
-		globalSkillsDir: join(home, ".continue/skills"),
+	"iflow-cli": {
+		name: "iflow-cli",
+		displayName: "iFlow CLI",
+		skillsDir: ".iflow/skills",
+		globalSkillsDir: join(home, ".iflow/skills"),
 		detectInstalled: async () => {
-			return existsSync(join(process.cwd(), ".continue")) || existsSync(join(home, ".continue"));
+			return existsSync(join(home, ".iflow"));
+		}
+	},
+	antigravity: {
+		name: "antigravity",
+		displayName: "Antigravity",
+		skillsDir: ".agent/skills",
+		globalSkillsDir: join(home, ".gemini/antigravity/skills"),
+		detectInstalled: async () => {
+			return existsSync(join(home, ".gemini/antigravity"));
 		}
 	},
 	"kiro-cli": {
@@ -1060,13 +1059,23 @@ const agents = {
 			return existsSync(join(home, ".codeium/windsurf"));
 		}
 	},
-	"kimi-cli": {
-		name: "kimi-cli",
-		displayName: "Kimi Code CLI",
-		skillsDir: ".agents/skills",
-		globalSkillsDir: join(home, ".config/agents/skills"),
+	cline: {
+		name: "cline",
+		displayName: "Cline",
+		skillsDir: ".cline/skills",
+		globalSkillsDir: join(home, ".cline", "skills"),
+		supportsSharedAgentsDir: true,
 		detectInstalled: async () => {
-			return existsSync(join(home, ".kimi"));
+			return existsSync(join(home, ".cline"));
+		}
+	},
+	continue: {
+		name: "continue",
+		displayName: "Continue",
+		skillsDir: ".continue/skills",
+		globalSkillsDir: join(home, ".continue/skills"),
+		detectInstalled: async () => {
+			return existsSync(join(process.cwd(), ".continue")) || existsSync(join(home, ".continue"));
 		}
 	},
 	trae: {
@@ -1099,8 +1108,9 @@ const agents = {
 	warp: {
 		name: "warp",
 		displayName: "Warp",
-		skillsDir: ".agents/skills",
-		globalSkillsDir: join(home, ".agents/skills"),
+		skillsDir: ".warp/skills",
+		globalSkillsDir: join(home, ".warp/skills"),
+		supportsSharedAgentsDir: true,
 		detectInstalled: async () => {
 			return existsSync(join(home, ".warp"));
 		}
@@ -1128,6 +1138,7 @@ const agents = {
 		displayName: "Amp",
 		skillsDir: ".agents/skills",
 		globalSkillsDir: join(configHome, "agents/skills"),
+		supportsSharedAgentsDir: true,
 		detectInstalled: async () => {
 			return existsSync(join(configHome, "amp"));
 		}
@@ -1272,6 +1283,7 @@ const agents = {
 		displayName: "Replit",
 		skillsDir: ".agents/skills",
 		globalSkillsDir: join(configHome, "agents/skills"),
+		supportsSharedAgentsDir: true,
 		showInUniversalList: false,
 		detectInstalled: async () => {
 			return existsSync(join(process.cwd(), ".replit"));
@@ -1300,6 +1312,7 @@ const agents = {
 		displayName: "Universal",
 		skillsDir: ".agents/skills",
 		globalSkillsDir: join(configHome, "agents/skills"),
+		supportsSharedAgentsDir: true,
 		showInUniversalList: false,
 		detectInstalled: async () => false
 	}
@@ -1311,18 +1324,18 @@ async function detectInstalledAgents() {
 	})))).filter((r) => r.installed).map((r) => r.type);
 }
 function getUniversalAgents() {
-	return Object.entries(agents).filter(([_, config]) => config.skillsDir === ".agents/skills" && config.showInUniversalList !== false).map(([type]) => type);
+	return Object.entries(agents).filter(([, config]) => config.supportsSharedAgentsDir === true && config.showInUniversalList !== false).map(([type]) => type);
 }
 function getNonUniversalAgents() {
-	return Object.entries(agents).filter(([_, config]) => config.skillsDir !== ".agents/skills").map(([type]) => type);
+	return Object.entries(agents).filter(([, config]) => config.supportsSharedAgentsDir !== true).map(([type]) => type);
 }
 function isUniversalAgent(type) {
-	return agents[type].skillsDir === ".agents/skills";
+	return agents[type].supportsSharedAgentsDir === true;
 }
 const AGENTS_DIR$2 = ".agents";
 const SKILLS_SUBDIR = "skills";
 function sanitizeName(name) {
-	return name.toLowerCase().replace(/[^a-z0-9._]+/g, "-").replace(/^[.\-]+|[.\-]+$/g, "").substring(0, 255) || "unnamed-skill";
+	return name.toLowerCase().replace(/[^a-z0-9._]+/g, "-").replace(/^[.-]+|[.-]+$/g, "").substring(0, 255) || "unnamed-skill";
 }
 function isPathSafe(basePath, targetPath) {
 	const normalizedBase = normalize(resolve(basePath));
@@ -1332,6 +1345,27 @@ function isPathSafe(basePath, targetPath) {
 function getCanonicalSkillsDir(global, cwd) {
 	return join(global ? homedir() : cwd || process.cwd(), AGENTS_DIR$2, SKILLS_SUBDIR);
 }
+function isSharedDir(path) {
+	return path === ".agents/skills" || path === "agents/skills";
+}
+function hasPrivateSkillsDir(agentType, global) {
+	const agent = agents[agentType];
+	if (global) {
+		if (!agent.globalSkillsDir) return false;
+		return !agent.globalSkillsDir.endsWith("/.agents/skills") && !agent.globalSkillsDir.endsWith("/agents/skills");
+	}
+	return !isSharedDir(agent.skillsDir);
+}
+function getIsolatedStoreBase(global, cwd) {
+	return join(global ? homedir() : cwd || process.cwd(), ".skills-store", SKILLS_SUBDIR);
+}
+function getIsolatedStorePath(skillName, options = {}) {
+	const sanitized = sanitizeName(skillName);
+	const storeBase = getIsolatedStoreBase(options.global ?? false, options.cwd);
+	const storePath = join(storeBase, sanitized);
+	if (!isPathSafe(storeBase, storePath)) throw new Error("Invalid skill name: potential path traversal detected");
+	return storePath;
+}
 function getAgentBaseDir(agentType, global, cwd) {
 	if (isUniversalAgent(agentType)) return getCanonicalSkillsDir(global, cwd);
 	const agent = agents[agentType];
@@ -1342,6 +1376,17 @@ function getAgentBaseDir(agentType, global, cwd) {
 	}
 	return join(baseDir, agent.skillsDir);
 }
+function getAgentPrivateBaseDir(agentType, global, cwd) {
+	const agent = agents[agentType];
+	const baseDir = global ? homedir() : cwd || process.cwd();
+	if (global) {
+		if (!agent.globalSkillsDir) return getCanonicalSkillsDir(global, cwd);
+		if (hasPrivateSkillsDir(agentType, true)) return agent.globalSkillsDir;
+		return getCanonicalSkillsDir(global, cwd);
+	}
+	if (hasPrivateSkillsDir(agentType, false)) return join(baseDir, agent.skillsDir);
+	return getCanonicalSkillsDir(global, cwd);
+}
 function resolveSymlinkTarget(linkPath, linkTarget) {
 	return resolve(dirname(linkPath), linkTarget);
 }
@@ -1402,9 +1447,11 @@ async function installSkillForAgent(skill, agentType, options = {}) {
 	const skillName = sanitizeName(skill.name || basename(skill.path));
 	const canonicalBase = getCanonicalSkillsDir(isGlobal, cwd);
 	const canonicalDir = join(canonicalBase, skillName);
-	const agentBase = getAgentBaseDir(agentType, isGlobal, cwd);
-	const agentDir = join(agentBase, skillName);
+	const isolatedStoreBase = getIsolatedStoreBase(isGlobal, cwd);
+	const isolatedStoreDir = join(isolatedStoreBase, skillName);
 	const installMode = options.mode ?? "symlink";
+	const agentBase = installMode === "symlink-isolated" || installMode === "copy-isolated" ? getAgentPrivateBaseDir(agentType, isGlobal, cwd) : getAgentBaseDir(agentType, isGlobal, cwd);
+	const agentDir = join(agentBase, skillName);
 	if (!isPathSafe(canonicalBase, canonicalDir)) return {
 		success: false,
 		path: agentDir,
@@ -1417,14 +1464,58 @@ async function installSkillForAgent(skill, agentType, options = {}) {
 		mode: installMode,
 		error: "Invalid skill name: potential path traversal detected"
 	};
+	if (!isPathSafe(isolatedStoreBase, isolatedStoreDir)) return {
+		success: false,
+		path: agentDir,
+		mode: installMode,
+		error: "Invalid skill name: potential path traversal detected"
+	};
 	try {
 		if (installMode === "copy") {
+			const targetDir = join(isUniversalAgent(agentType) ? getCanonicalSkillsDir(isGlobal, cwd) : getAgentBaseDir(agentType, isGlobal, cwd), skillName);
+			const sharedFallbackUsed = isUniversalAgent(agentType) && !hasPrivateSkillsDir(agentType, isGlobal);
+			await cleanAndCreateDirectory(targetDir);
+			await copyDirectory(skill.path, targetDir);
+			return {
+				success: true,
+				path: targetDir,
+				mode: "copy",
+				sharedFallbackUsed
+			};
+		}
+		if (installMode === "copy-isolated") {
+			const sharedFallbackUsed = !hasPrivateSkillsDir(agentType, isGlobal);
 			await cleanAndCreateDirectory(agentDir);
 			await copyDirectory(skill.path, agentDir);
 			return {
 				success: true,
 				path: agentDir,
-				mode: "copy"
+				mode: "copy-isolated",
+				sharedFallbackUsed
+			};
+		}
+		if (installMode === "symlink-isolated") {
+			const sharedFallbackUsed = !hasPrivateSkillsDir(agentType, isGlobal);
+			await cleanAndCreateDirectory(isolatedStoreDir);
+			await copyDirectory(skill.path, isolatedStoreDir);
+			if (!await createSymlink(isolatedStoreDir, agentDir)) {
+				await cleanAndCreateDirectory(agentDir);
+				await copyDirectory(skill.path, agentDir);
+				return {
+					success: true,
+					path: agentDir,
+					canonicalPath: isolatedStoreDir,
+					mode: "symlink-isolated",
+					symlinkFailed: true,
+					sharedFallbackUsed
+				};
+			}
+			return {
+				success: true,
+				path: agentDir,
+				canonicalPath: isolatedStoreDir,
+				mode: "symlink-isolated",
+				sharedFallbackUsed
 			};
 		}
 		await cleanAndCreateDirectory(canonicalDir);
@@ -1506,8 +1597,6 @@ async function isSkillInstalled(skillName, agentType, options = {}) {
 	}
 }
 function getInstallPath(skillName, agentType, options = {}) {
-	agents[agentType];
-	options.cwd || process.cwd();
 	const sanitized = sanitizeName(skillName);
 	const targetBase = getAgentBaseDir(agentType, options.global ?? false, options.cwd);
 	const installPath = join(targetBase, sanitized);
@@ -1535,7 +1624,9 @@ async function installWellKnownSkillForAgent(skill, agentType, options = {}) {
 	const skillName = sanitizeName(skill.installName);
 	const canonicalBase = getCanonicalSkillsDir(isGlobal, cwd);
 	const canonicalDir = join(canonicalBase, skillName);
-	const agentBase = getAgentBaseDir(agentType, isGlobal, cwd);
+	const isolatedStoreBase = getIsolatedStoreBase(isGlobal, cwd);
+	const isolatedStoreDir = join(isolatedStoreBase, skillName);
+	const agentBase = installMode === "symlink-isolated" || installMode === "copy-isolated" ? getAgentPrivateBaseDir(agentType, isGlobal, cwd) : getAgentBaseDir(agentType, isGlobal, cwd);
 	const agentDir = join(agentBase, skillName);
 	if (!isPathSafe(canonicalBase, canonicalDir)) return {
 		success: false,
@@ -1549,6 +1640,12 @@ async function installWellKnownSkillForAgent(skill, agentType, options = {}) {
 		mode: installMode,
 		error: "Invalid skill name: potential path traversal detected"
 	};
+	if (!isPathSafe(isolatedStoreBase, isolatedStoreDir)) return {
+		success: false,
+		path: agentDir,
+		mode: installMode,
+		error: "Invalid skill name: potential path traversal detected"
+	};
 	async function writeSkillFiles(targetDir) {
 		for (const [filePath, content] of skill.files) {
 			const fullPath = join(targetDir, filePath);
@@ -1560,12 +1657,50 @@ async function installWellKnownSkillForAgent(skill, agentType, options = {}) {
 	}
 	try {
 		if (installMode === "copy") {
+			const targetDir = join(isUniversalAgent(agentType) ? getCanonicalSkillsDir(isGlobal, cwd) : getAgentBaseDir(agentType, isGlobal, cwd), skillName);
+			const sharedFallbackUsed = isUniversalAgent(agentType) && !hasPrivateSkillsDir(agentType, isGlobal);
+			await cleanAndCreateDirectory(targetDir);
+			await writeSkillFiles(targetDir);
+			return {
+				success: true,
+				path: targetDir,
+				mode: "copy",
+				sharedFallbackUsed
+			};
+		}
+		if (installMode === "copy-isolated") {
+			const sharedFallbackUsed = !hasPrivateSkillsDir(agentType, isGlobal);
 			await cleanAndCreateDirectory(agentDir);
 			await writeSkillFiles(agentDir);
 			return {
 				success: true,
 				path: agentDir,
-				mode: "copy"
+				mode: "copy-isolated",
+				sharedFallbackUsed
+			};
+		}
+		if (installMode === "symlink-isolated") {
+			const sharedFallbackUsed = !hasPrivateSkillsDir(agentType, isGlobal);
+			await cleanAndCreateDirectory(isolatedStoreDir);
+			await writeSkillFiles(isolatedStoreDir);
+			if (!await createSymlink(isolatedStoreDir, agentDir)) {
+				await cleanAndCreateDirectory(agentDir);
+				await writeSkillFiles(agentDir);
+				return {
+					success: true,
+					path: agentDir,
+					canonicalPath: isolatedStoreDir,
+					mode: "symlink-isolated",
+					symlinkFailed: true,
+					sharedFallbackUsed
+				};
+			}
+			return {
+				success: true,
+				path: agentDir,
+				canonicalPath: isolatedStoreDir,
+				mode: "symlink-isolated",
+				sharedFallbackUsed
 			};
 		}
 		await cleanAndCreateDirectory(canonicalDir);
@@ -1631,7 +1766,7 @@ async function listInstalledSkills(options = {}) {
 	for (const scope of scopes) try {
 		const entries = await readdir(scope.path, { withFileTypes: true });
 		for (const entry of entries) {
-			if (!entry.isDirectory()) continue;
+			if (!entry.isDirectory() && !entry.isSymbolicLink()) continue;
 			const skillDir = join(scope.path, entry.name);
 			const skillMdPath = join(skillDir, "SKILL.md");
 			try {
@@ -1667,7 +1802,7 @@ async function listInstalledSkills(options = {}) {
 				const possibleNames = Array.from(new Set([
 					entry.name,
 					sanitizedSkillName,
-					skill.name.toLowerCase().replace(/\s+/g, "-").replace(/[\/\\:\0]/g, "")
+					skill.name.toLowerCase().replace(/\s+/g, "-").replace(/[/\\:\0]/g, "")
 				]));
 				for (const possibleName of possibleNames) {
 					const agentSkillDir = join(agentBase, possibleName);
@@ -2205,7 +2340,7 @@ function logSkillParseFailures(failures) {
 		if (f.hint) M.message(import_picocolors.default.yellow(`  提示: ${f.hint}`));
 	}
 }
-var version$1 = "2.0.24";
+var version$1 = "2.0.27";
 const isCancelled$1 = (value) => typeof value === "symbol";
 function redactSensitiveText(text) {
 	return text.replace(/(https?:\/\/)([^/\s:@]+)(?::([^@/\s]*))?@/gi, "$1").replace(/([?&](?:private_token|access_token|token|api_key|access_key|secret|password)=)[^&\s]+/gi, "$1***");
@@ -2272,42 +2407,54 @@ function formatList$1(items, maxShow = 5) {
 	const remaining = items.length - maxShow;
 	return `${shown.join(", ")} +${remaining} more`;
 }
-function splitAgentsByType(agentTypes) {
-	const universal = [];
-	const symlinked = [];
-	for (const a of agentTypes) if (isUniversalAgent(a)) universal.push(agents[a].displayName);
-	else symlinked.push(agents[a].displayName);
-	return {
-		universal,
-		symlinked
-	};
-}
-function buildAgentSummaryLines(targetAgents, installMode) {
-	const lines = [];
-	const { universal, symlinked } = splitAgentsByType(targetAgents);
-	if (installMode === "symlink") {
-		if (universal.length > 0) lines.push(`  ${import_picocolors.default.green("universal:")} ${formatList$1(universal)}`);
-		if (symlinked.length > 0) lines.push(`  ${import_picocolors.default.dim("symlink →")} ${formatList$1(symlinked)}`);
-	} else {
-		const allNames = targetAgents.map((a) => agents[a].displayName);
-		lines.push(`  ${import_picocolors.default.dim("copy →")} ${formatList$1(allNames)}`);
-	}
-	return lines;
+function getEntityPath(skillName, installMode, global, cwd) {
+	if (installMode === "symlink-isolated" || installMode === "copy-isolated") return join(global ? homedir() : cwd, ".skills-store", "skills", skillName);
+	return getCanonicalPath(skillName, {
+		global,
+		cwd
+	});
 }
-function ensureUniversalAgents(targetAgents) {
-	const universalAgents = getUniversalAgents();
-	const result = [...targetAgents];
-	for (const ua of universalAgents) if (!result.includes(ua)) result.push(ua);
-	return result;
+function getInstallMethodOptions() {
+	return [
+		{
+			value: "symlink",
+			label: "Symlink",
+			hint: "拷贝技能到公认目录 .agents/skills【实现 agent 间共享】+ 软链到不支持公认目录的 agent 的私有目录"
+		},
+		{
+			value: "symlink-isolated",
+			label: "Symlink & Isolated",
+			hint: "拷贝技能到隔离目录 .skills-store + 软链到各 agent 的私有目录【实现 agent 间的技能独享】"
+		},
+		{
+			value: "copy",
+			label: "Copy",
+			hint: "拷贝技能到公认目录 .agents/skills【实现 agent 间共享】，不支持公认目录的 agent 会拷贝到其私有目录"
+		},
+		{
+			value: "copy-isolated",
+			label: "Copy & Isolated",
+			hint: "拷贝技能到各 agent 的私有目录，不写入共享目录【实现 agent 间的技能独享】"
+		}
+	];
 }
-function buildResultLines(results, targetAgents) {
+function buildAgentSummaryLines(targetAgents, installMode) {
+	const allNames = targetAgents.map((a) => agents[a].displayName);
+	return [`  ${import_picocolors.default.dim(`${{
+		symlink: "symlink(shared)",
+		copy: "copy(shared)",
+		"symlink-isolated": "symlink(isolated)",
+		"copy-isolated": "copy(isolated)"
+	}[installMode]} →`)} ${formatList$1(allNames)}`];
+}
+function buildResultLines(results) {
 	const lines = [];
-	const { universal } = splitAgentsByType(targetAgents);
-	const successfulSymlinks = results.filter((r) => !r.symlinkFailed && !universal.includes(r.agent)).map((r) => r.agent);
-	const failedSymlinks = results.filter((r) => r.symlinkFailed).map((r) => r.agent);
-	if (universal.length > 0) lines.push(`  ${import_picocolors.default.green("universal:")} ${formatList$1(universal)}`);
-	if (successfulSymlinks.length > 0) lines.push(`  ${import_picocolors.default.dim("symlinked:")} ${formatList$1(successfulSymlinks)}`);
-	if (failedSymlinks.length > 0) lines.push(`  ${import_picocolors.default.yellow("copied:")} ${formatList$1(failedSymlinks)}`);
+	const symlinked = results.filter((r) => !r.symlinkFailed).map((r) => r.agent);
+	const copied = results.filter((r) => r.symlinkFailed).map((r) => r.agent);
+	const sharedFallback = results.filter((r) => r.sharedFallbackUsed).map((r) => r.agent);
+	if (symlinked.length > 0) lines.push(`  ${import_picocolors.default.dim("symlinked:")} ${formatList$1(symlinked)}`);
+	if (copied.length > 0) lines.push(`  ${import_picocolors.default.yellow("copied:")} ${formatList$1(copied)}`);
+	if (sharedFallback.length > 0) lines.push(`  ${import_picocolors.default.yellow("shared fallback:")} ${formatList$1(sharedFallback)}`);
 	return lines;
 }
 function multiselect(opts) {
@@ -2323,57 +2470,79 @@ async function promptForAgents(message, choices) {
 		lastSelected = await getLastSelectedAgents();
 	} catch {}
 	const validAgents = choices.map((c) => c.value);
-	const defaultValues = [
-		"claude-code",
-		"opencode",
-		"codex"
-	].filter((a) => validAgents.includes(a));
 	let initialValues = [];
 	if (lastSelected && lastSelected.length > 0) initialValues = lastSelected.filter((a) => validAgents.includes(a));
-	if (initialValues.length === 0) initialValues = defaultValues;
-	const selected = await searchMultiselect({
-		message,
-		items: choices,
-		initialSelected: initialValues,
-		required: true
-	});
-	if (!isCancelled$1(selected)) try {
-		await saveSelectedAgents(selected);
-	} catch {}
-	return selected;
+	let needsReselect = true;
+	while (needsReselect) {
+		const selected = await searchMultiselect({
+			message,
+			items: choices,
+			initialSelected: initialValues,
+			required: true
+		});
+		if (isCancelled$1(selected)) return selected;
+		if (selected.length === 0) {
+			M.warn("请至少选择一个 agent");
+			continue;
+		}
+		try {
+			await saveSelectedAgents(selected);
+		} catch {}
+		needsReselect = false;
+		return selected;
+	}
+	return [];
 }
 async function selectAgentsInteractive(options) {
 	const supportsGlobalFilter = (a) => !options.global || agents[a].globalSkillsDir;
-	const universalAgents = getUniversalAgents().filter(supportsGlobalFilter);
-	const otherAgents = getNonUniversalAgents().filter(supportsGlobalFilter);
-	const universalSection = {
-		title: "Universal (.agents/skills)",
-		items: universalAgents.map((a) => ({
+	const availableAgents = Object.keys(agents).filter(supportsGlobalFilter);
+	const choices = availableAgents.map((a) => {
+		const targetDir = options.global ? agents[a].globalSkillsDir : agents[a].skillsDir;
+		const sharedSupport = agents[a].supportsSharedAgentsDir ? ", supports .agents/skills" : "";
+		return {
 			value: a,
-			label: agents[a].displayName
-		}))
-	};
-	const otherChoices = otherAgents.map((a) => ({
-		value: a,
-		label: agents[a].displayName,
-		hint: options.global ? agents[a].globalSkillsDir : agents[a].skillsDir
-	}));
+			label: agents[a].displayName,
+			hint: `${targetDir}${sharedSupport}`
+		};
+	});
 	let lastSelected;
 	try {
 		lastSelected = await getLastSelectedAgents();
 	} catch {}
-	const selected = await searchMultiselect({
-		message: "Which agents do you want to install to?",
-		items: otherChoices,
-		initialSelected: lastSelected ? lastSelected.filter((a) => otherAgents.includes(a) && !universalAgents.includes(a)) : [],
-		lockedSection: universalSection
-	});
-	if (!isCancelled$1(selected)) try {
-		await saveSelectedAgents(selected);
-	} catch {}
-	return selected;
+	const initialSelected = lastSelected ? lastSelected.filter((a) => availableAgents.includes(a)) : [];
+	let needsReselect = true;
+	while (needsReselect) {
+		const selected = await searchMultiselect({
+			message: "Which agents do you want to install to?",
+			items: choices,
+			initialSelected
+		});
+		if (isCancelled$1(selected)) return selected;
+		if (selected.length === 0) {
+			M.warn("请至少选择一个 agent");
+			continue;
+		}
+		try {
+			await saveSelectedAgents(selected);
+		} catch {}
+		needsReselect = false;
+		return selected;
+	}
+	return [];
 }
 setVersion(version$1);
+function isCiEnvironment() {
+	if (process.env.CI) return true;
+	if (process.env.GITHUB_ACTIONS) return true;
+	if (process.env.GITLAB_CI) return true;
+	if (process.env.BUILDKITE) return true;
+	if (process.env.JENKINS_URL) return true;
+	return false;
+}
+function resolveInstallMode(options) {
+	if (options.installMode) return options.installMode;
+	return options.copy ? "copy" : "symlink";
+}
 async function handleWellKnownSkills(source, url, options, spinner) {
 	spinner.start("Discovering skills from well-known endpoint...");
 	const skills = await wellKnownProvider.fetchAllSkills(url);
@@ -2447,7 +2616,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 			M.info(`Valid agents: ${validAgents.join(", ")}`);
 			process.exit(1);
 		}
-		targetAgents = ensureUniversalAgents(options.agent);
+		targetAgents = options.agent;
 	} else {
 		spinner.start("Loading agents...");
 		const installedAgents = await detectInstalledAgents();
@@ -2469,7 +2638,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 			targetAgents = selected;
 		}
 		else if (installedAgents.length === 1 || options.yes) {
-			targetAgents = ensureUniversalAgents(installedAgents);
+			targetAgents = installedAgents;
 			if (installedAgents.length === 1) {
 				const firstAgent = installedAgents[0];
 				M.info(`Installing to: ${import_picocolors.default.cyan(agents[firstAgent].displayName)}`);
@@ -2504,19 +2673,11 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 		}
 		installGlobally = scope;
 	}
-	let installMode = options.copy ? "copy" : "symlink";
-	if (!options.copy && !options.yes) {
+	let installMode = resolveInstallMode(options);
+	if (!options.installMode && !options.copy && !options.yes) {
 		const modeChoice = await ve({
 			message: "Installation method",
-			options: [{
-				value: "symlink",
-				label: "Symlink (Recommended)",
-				hint: "Single source of truth, easy updates"
-			}, {
-				value: "copy",
-				label: "Copy to all agents",
-				hint: "Independent copies for each agent"
-			}]
+			options: getInstallMethodOptions()
 		});
 		if (pD(modeChoice)) {
 			xe("Installation cancelled");
@@ -2538,7 +2699,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 	}
 	for (const skill of selectedSkills) {
 		if (summaryLines.length > 0) summaryLines.push("");
-		const shortCanonical = shortenPath$2(getCanonicalPath(skill.installName, { global: installGlobally }), cwd);
+		const shortCanonical = shortenPath$2(getEntityPath(skill.installName, installMode, installGlobally, cwd), cwd);
 		summaryLines.push(`${import_picocolors.default.cyan(shortCanonical)}`);
 		summaryLines.push(...buildAgentSummaryLines(targetAgents, installMode));
 		if (skill.files.size > 1) summaryLines.push(`  ${import_picocolors.default.dim("files:")} ${skill.files.size}`);
@@ -2557,7 +2718,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 	}
 	spinner.start("Installing skills...");
 	const results = [];
-	const effectiveAgents = installMode === "copy" ? targetAgents.filter((a, i, arr) => arr.findIndex((b) => agents[b].skillsDir === agents[a].skillsDir) === i) : targetAgents;
+	const effectiveAgents = installMode === "copy" || installMode === "copy-isolated" ? targetAgents.filter((a, i, arr) => arr.findIndex((b) => agents[b].skillsDir === agents[a].skillsDir) === i) : targetAgents;
 	for (const skill of selectedSkills) for (const agent of effectiveAgents) {
 		const result = await installWellKnownSkillForAgent(skill, agent, {
 			global: installGlobally,
@@ -2627,12 +2788,13 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 			bySkill.set(r.skill, skillResults);
 		}
 		const skillCount = bySkill.size;
-		const symlinkFailures = successful.filter((r) => r.mode === "symlink" && r.symlinkFailed);
+		const symlinkFailures = successful.filter((r) => (r.mode === "symlink" || r.mode === "symlink-isolated") && r.symlinkFailed);
 		const copiedAgents = symlinkFailures.map((r) => r.agent);
+		const sharedFallbackAgents = successful.filter((r) => r.sharedFallbackUsed).map((r) => r.agent);
 		const resultLines = [];
 		for (const [skillName, skillResults] of bySkill) {
 			const firstResult = skillResults[0];
-			if (firstResult.mode === "copy") {
+			if (firstResult.mode === "copy" || firstResult.mode === "copy-isolated") {
 				resultLines.push(`${import_picocolors.default.green("✓")} ${skillName} ${import_picocolors.default.dim("(copied)")}`);
 				for (const r of skillResults) {
 					const shortPath = shortenPath$2(r.path, cwd);
@@ -2643,7 +2805,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 					const shortPath = shortenPath$2(firstResult.canonicalPath, cwd);
 					resultLines.push(`${import_picocolors.default.green("✓")} ${shortPath}`);
 				} else resultLines.push(`${import_picocolors.default.green("✓")} ${skillName}`);
-				resultLines.push(...buildResultLines(skillResults, targetAgents));
+				resultLines.push(...buildResultLines(skillResults));
 			}
 		}
 		const title = import_picocolors.default.green(`Installed ${skillCount} skill${skillCount !== 1 ? "s" : ""}`);
@@ -2652,6 +2814,10 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 			M.warn(import_picocolors.default.yellow(`Symlinks failed for: ${formatList$1(copiedAgents)}`));
 			M.message(import_picocolors.default.dim("  Files were copied instead. On Windows, enable Developer Mode for symlink support."));
 		}
+		if (sharedFallbackAgents.length > 0) {
+			M.warn(import_picocolors.default.bgYellow(import_picocolors.default.black(" FALLBACK ")) + " " + import_picocolors.default.yellow(`No private skills dir for: ${formatList$1(sharedFallbackAgents)}`));
+			M.message(import_picocolors.default.dim("  Installed to shared .agents/skills for compatibility"));
+		}
 	}
 	if (failed.length > 0) {
 		console.log();
@@ -2665,6 +2831,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 async function runAdd(args, options = {}) {
 	const source = args[0];
 	let installTipShown = false;
+	const ciMode = options.ci ?? isCiEnvironment();
 	const showInstallTip = () => {
 		if (installTipShown) return;
 		M.message(import_picocolors.default.dim("Tip: use the --yes (-y) and --global (-g) flags to install without prompts."));
@@ -2682,6 +2849,7 @@ async function runAdd(args, options = {}) {
 		console.log();
 		process.exit(1);
 	}
+	if (ciMode && !options.yes) options.yes = true;
 	if (options.all) {
 		options.skill = ["*"];
 		options.agent = ["*"];
@@ -2947,7 +3115,7 @@ async function runAdd(args, options = {}) {
 				await cleanup(tempDir);
 				process.exit(1);
 			}
-			targetAgents = ensureUniversalAgents(options.agent);
+			targetAgents = options.agent;
 		} else {
 			spinner.start("Loading agents...");
 			const installedAgents = await detectInstalledAgents();
@@ -2970,7 +3138,7 @@ async function runAdd(args, options = {}) {
 				targetAgents = selected;
 			}
 			else if (installedAgents.length === 1 || options.yes) {
-				targetAgents = ensureUniversalAgents(installedAgents);
+				targetAgents = installedAgents;
 				if (installedAgents.length === 1) {
 					const firstAgent = installedAgents[0];
 					M.info(`Installing to: ${import_picocolors.default.cyan(agents[firstAgent].displayName)}`);
@@ -3007,19 +3175,11 @@ async function runAdd(args, options = {}) {
 			}
 			installGlobally = scope;
 		}
-		let installMode = options.copy ? "copy" : "symlink";
-		if (!options.copy && !options.yes) {
+		let installMode = resolveInstallMode(options);
+		if (!options.installMode && !options.copy && !options.yes) {
 			const modeChoice = await ve({
 				message: "Installation method",
-				options: [{
-					value: "symlink",
-					label: "Symlink (Recommended)",
-					hint: "Single source of truth, easy updates"
-				}, {
-					value: "copy",
-					label: "Copy to all agents",
-					hint: "Independent copies for each agent"
-				}]
+				options: getInstallMethodOptions()
 			});
 			if (pD(modeChoice)) {
 				xe("Installation cancelled");
@@ -3050,7 +3210,7 @@ async function runAdd(args, options = {}) {
 		const printSkillSummary = (skills) => {
 			for (const skill of skills) {
 				if (summaryLines.length > 0) summaryLines.push("");
-				const shortCanonical = shortenPath$2(getCanonicalPath(skill.name, { global: installGlobally }), cwd);
+				const shortCanonical = shortenPath$2(getEntityPath(skill.name, installMode, installGlobally, cwd), cwd);
 				summaryLines.push(`${import_picocolors.default.cyan(shortCanonical)}`);
 				summaryLines.push(...buildAgentSummaryLines(targetAgents, installMode));
 				const skillOverwrites = overwriteStatus.get(skill.name);
@@ -3094,7 +3254,7 @@ async function runAdd(args, options = {}) {
 		}
 		spinner.start("Installing skills...");
 		const results = [];
-		const effectiveAgents = installMode === "copy" ? targetAgents.filter((a, i, arr) => arr.findIndex((b) => agents[b].skillsDir === agents[a].skillsDir) === i) : targetAgents;
+		const effectiveAgents = installMode === "copy" || installMode === "copy-isolated" ? targetAgents.filter((a, i, arr) => arr.findIndex((b) => agents[b].skillsDir === agents[a].skillsDir) === i) : targetAgents;
 		for (const skill of selectedSkills) for (const agent of effectiveAgents) {
 			const result = await installSkillForAgent(skill, agent, {
 				global: installGlobally,
@@ -3264,14 +3424,15 @@ async function runAdd(args, options = {}) {
 				} else ungroupedResults.push(r);
 			}
 			const skillCount = bySkill.size;
-			const symlinkFailures = successful.filter((r) => r.mode === "symlink" && r.symlinkFailed);
+			const symlinkFailures = successful.filter((r) => (r.mode === "symlink" || r.mode === "symlink-isolated") && r.symlinkFailed);
 			const copiedAgents = symlinkFailures.map((r) => r.agent);
+			const sharedFallbackAgents = successful.filter((r) => r.sharedFallbackUsed).map((r) => r.agent);
 			const resultLines = [];
 			const printSkillResults = (entries) => {
 				for (const entry of entries) {
 					const skillResults = bySkill.get(entry.skill) || [];
 					const firstResult = skillResults[0];
-					if (firstResult.mode === "copy") {
+					if (firstResult.mode === "copy" || firstResult.mode === "copy-isolated") {
 						resultLines.push(`${import_picocolors.default.green("✓")} ${entry.skill} ${import_picocolors.default.dim("(copied)")}`);
 						for (const r of skillResults) {
 							const shortPath = shortenPath$2(r.path, cwd);
@@ -3282,7 +3443,7 @@ async function runAdd(args, options = {}) {
 							const shortPath = shortenPath$2(firstResult.canonicalPath, cwd);
 							resultLines.push(`${import_picocolors.default.green("✓")} ${shortPath}`);
 						} else resultLines.push(`${import_picocolors.default.green("✓")} ${entry.skill}`);
-						resultLines.push(...buildResultLines(skillResults, targetAgents));
+						resultLines.push(...buildResultLines(skillResults));
 					}
 				}
 			};
@@ -3306,6 +3467,10 @@ async function runAdd(args, options = {}) {
 				M.warn(import_picocolors.default.yellow(`Symlinks failed for: ${formatList$1(copiedAgents)}`));
 				M.message(import_picocolors.default.dim("  Files were copied instead. On Windows, enable Developer Mode for symlink support."));
 			}
+			if (sharedFallbackAgents.length > 0) {
+				M.warn(import_picocolors.default.bgYellow(import_picocolors.default.black(" FALLBACK ")) + " " + import_picocolors.default.yellow(`No private skills dir for: ${formatList$1(sharedFallbackAgents)}`));
+				M.message(import_picocolors.default.dim("  Installed to shared .agents/skills for compatibility"));
+			}
 		}
 		if (failed.length > 0) {
 			console.log();
@@ -3347,6 +3512,12 @@ async function promptForFindSkills(options, targetAgents) {
 function parseAddOptions(args) {
 	const options = {};
 	const source = [];
+	const installModes = [
+		"symlink",
+		"copy",
+		"symlink-isolated",
+		"copy-isolated"
+	];
 	for (let i = 0; i < args.length; i++) {
 		const arg = args[i];
 		if (arg === "-g" || arg === "--global") options.global = true;
@@ -3380,7 +3551,13 @@ function parseAddOptions(args) {
 			options.branch = args[i];
 		} else if (arg === "--full-depth") options.fullDepth = true;
 		else if (arg === "--copy") options.copy = true;
-		else if (arg && !arg.startsWith("-")) source.push(arg);
+		else if (arg === "--ci") options.ci = true;
+		else if (arg === "--install-mode") {
+			i++;
+			const mode = args[i];
+			if (!mode || !installModes.includes(mode)) throw new Error(`Invalid value for --install-mode: ${mode ?? "(empty)"} (expected: symlink, copy, symlink-isolated, copy-isolated)`);
+			options.installMode = mode;
+		} else if (arg && !arg.startsWith("-")) source.push(arg);
 	}
 	return {
 		source,
@@ -4140,6 +4317,10 @@ async function removeCommand(skillNames, options) {
 			global: isGlobal,
 			cwd
 		});
+		const isolatedStorePath = getIsolatedStorePath(skillName, {
+			global: isGlobal,
+			cwd
+		});
 		for (const agentKey of targetAgents) {
 			const agent = agents[agentKey];
 			const skillPath = getInstallPath(skillName, agentKey, {
@@ -4171,10 +4352,16 @@ async function removeCommand(skillNames, options) {
 			isStillUsed = true;
 			break;
 		}
-		if (!isStillUsed) await rm(canonicalPath, {
-			recursive: true,
-			force: true
-		});
+		if (!isStillUsed) {
+			await rm(canonicalPath, {
+				recursive: true,
+				force: true
+			});
+			await rm(isolatedStorePath, {
+				recursive: true,
+				force: true
+			});
+		}
 		const lockEntry = isGlobal ? await getSkillFromLock(skillName) : null;
 		const effectiveSource = lockEntry?.source || "local";
 		const effectiveSourceType = lockEntry?.sourceType || "local";
@@ -4559,6 +4746,10 @@ function readConfig() {
 function saveConfig(config) {
 	safeWriteFile(CONFIG_FILE, JSON.stringify(config, null, 2));
 }
+function getSsoRefreshCookieTtlMs() {
+	const sec = Number(process.env.ALI_SKILLS_SSO_REFRESH_COOKIE_TTL_SECONDS?.trim() || process.env.BUC_SSO_REFRESH_COOKIE_TTL_SECONDS?.trim() || "7200");
+	return (Number.isFinite(sec) && sec > 0 ? sec : 7200) * 1e3;
+}
 function readAuth() {
 	try {
 		if (!existsSync(AUTH_FILE)) return null;
@@ -4790,6 +4981,9 @@ function startLocalServer() {
 				const name = url.searchParams.get("name") || "";
 				const privateToken = url.searchParams.get("private_token") || "";
 				const ssoRefreshToken = url.searchParams.get("sso_refresh_token") || "";
+				const ssoRtExpRaw = url.searchParams.get("sso_refresh_token_expires_at") || "";
+				const ssoRtExpSec = parseInt(ssoRtExpRaw, 10);
+				const ssoRefreshTokenExpiresAtMs = ssoRefreshToken && ssoRtExpRaw !== "" && Number.isFinite(ssoRtExpSec) && ssoRtExpSec > 0 ? ssoRtExpSec * 1e3 : void 0;
 				const expiresAt = url.searchParams.get("expires_at") || "0";
 				if (!empId || !privateToken) {
 					res.writeHead(400, { "Content-Type": "text/html" });
@@ -4946,6 +5140,7 @@ function startLocalServer() {
 					name,
 					privateToken,
 					ssoRefreshToken,
+					ssoRefreshTokenExpiresAtMs,
 					expiresAt: parseInt(expiresAt, 10)
 				});
 				setTimeout(() => server.close(), 1e3);
@@ -4971,13 +5166,51 @@ function openBrowser$2(url) {
 		stdio: "ignore"
 	});
 }
-async function login() {
-	const existingAuth = readAuth();
-	if (existingAuth && !isAuthExpired(existingAuth)) {
-		console.log(`${YELLOW$3}! 您已经登录为: ${existingAuth.name} (${existingAuth.account})${RESET$3}`);
-		console.log();
-		console.log(`${DIM$3}如需重新登录，请先执行: npx ali-skills logout${RESET$3}`);
-		return;
+async function revokeGatewaySessionIfPossible(auth) {
+	try {
+		const revokeUrl = `${auth.gatewayUrl || getGatewayUrl()}/api/gateway/revoke`;
+		const revokeRes = await fetch(revokeUrl, {
+			method: "POST",
+			headers: { "X-Private-Token": auth.privateToken }
+		});
+		if (revokeRes.ok) console.log(`${GREEN$2}✓ 已撤销当前网关会话${RESET$3}`);
+		else if (revokeRes.status === 404) console.log(`${DIM$3}服务端暂不支持撤销网关会话，继续本机登出${RESET$3}`);
+		else console.log(`${YELLOW$3}⚠️ 撤销网关会话失败，继续本机登出${RESET$3}`);
+	} catch {
+		console.log(`${YELLOW$3}⚠️ 撤销网关会话失败，继续本机登出${RESET$3}`);
+	}
+}
+function getEffectiveSsoRefreshCookieExpiresAtMs(auth) {
+	if (!auth.ssoRefreshToken?.trim()) return null;
+	if (typeof auth.ssoRefreshTokenExpiresAt === "number" && auth.ssoRefreshTokenExpiresAt > 0) return auth.ssoRefreshTokenExpiresAt;
+	if (typeof auth.ssoRefreshTokenFetchedAt === "number" && auth.ssoRefreshTokenFetchedAt > 0) return auth.ssoRefreshTokenFetchedAt + getSsoRefreshCookieTtlMs();
+	return null;
+}
+function exitIfSsoRefreshCookieExpired(auth, opts) {
+	const exp = getEffectiveSsoRefreshCookieExpiresAtMs(auth);
+	if (exp === null) return;
+	if (Date.now() < exp) return;
+	if (!opts?.quiet) {
+		console.error(`${YELLOW$3}SSO_REFRESH_TOKEN 已超过预估有效期，根域 cookie 直连会鉴权失败${RESET$3}`);
+		console.log(`${DIM$3}请执行: npx ali-skills login --reauth${RESET$3}`);
+	}
+	process.exit(1);
+}
+async function login(options) {
+	if (options?.reauth) {
+		const auth = readAuth();
+		if (auth) {
+			await revokeGatewaySessionIfPossible(auth);
+			removeAuth();
+		}
+	} else {
+		const existingAuth = readAuth();
+		if (existingAuth && !isAuthExpired(existingAuth)) {
+			console.log(`${YELLOW$3}! 您已经登录为: ${existingAuth.name} (${existingAuth.account})${RESET$3}`);
+			console.log();
+			console.log(`${DIM$3}如需重新登录，请执行: npx ali-skills login --reauth${RESET$3}`);
+			return;
+		}
 	}
 	console.log(`${TEXT$3}正在启动本地服务...${RESET$3}`);
 	const { port, waitForCallback, close } = await startLocalServer();
@@ -4990,7 +5223,9 @@ async function login() {
 	openBrowser$2(loginUrl);
 	console.log(`${TEXT$3}等待授权完成...${RESET$3}`);
 	try {
-		const { empId, account, name, privateToken, ssoRefreshToken, expiresAt } = await waitForCallback();
+		const { empId, account, name, privateToken, ssoRefreshToken, ssoRefreshTokenExpiresAtMs, expiresAt } = await waitForCallback();
+		let ssoRtExpStored;
+		if (ssoRefreshToken) ssoRtExpStored = ssoRefreshTokenExpiresAtMs ?? Date.now() + getSsoRefreshCookieTtlMs();
 		saveAuth({
 			empId,
 			account,
@@ -5000,13 +5235,19 @@ async function login() {
 			ssoRefreshToken,
 			ssoRefreshTokenFetchedAt: ssoRefreshToken ? Date.now() : void 0,
 			ssoRefreshTokenLastCheckedAt: ssoRefreshToken ? Date.now() : void 0,
+			ssoRefreshTokenExpiresAt: ssoRtExpStored,
 			expiresAt: expiresAt * 1e3
 		});
 		console.log();
 		console.log(`${GREEN$2}✓ 登录成功！${RESET$3}`);
 		console.log(`${TEXT$3}欢迎: ${name} (${account})${RESET$3}`);
 		console.log(`${DIM$3}Token 有效期至: ${(/* @__PURE__ */ new Date(expiresAt * 1e3)).toLocaleDateString()}${RESET$3}`);
-		if (!ssoRefreshToken) console.log(`${DIM$3}注意: SSO_REFRESH_TOKEN 未获取，需要时将从服务端获取${RESET$3}`);
+		if (ssoRefreshToken && ssoRtExpStored) console.log(`${DIM$3}SSO_REFRESH 预估过期: ${new Date(ssoRtExpStored).toLocaleString()}${RESET$3}`);
+		if (!ssoRefreshToken) {
+			console.log();
+			console.log(`${YELLOW$3}⚠ SSO_REFRESH_TOKEN 获取异常：本次授权回调未携带该凭证，网关代理等依赖 SSO Cookie 的能力可能不可用${RESET$3}`);
+			console.log(`${DIM$3}可尝试：在网页端（https://ali-skills.alibaba-inc.com）退出平台登录后重新执行 login 命令。同时请将此问题反馈给本工具开发者处理，感谢！${RESET$3}`);
+		}
 	} catch (error) {
 		close();
 		throw error;
@@ -5101,18 +5342,7 @@ async function logout(platformInput, yuqueGroup, clearAll) {
 		return;
 	}
 	try {
-		try {
-			const revokeUrl = `${getGatewayUrl()}/api/gateway/revoke`;
-			const revokeRes = await fetch(revokeUrl, {
-				method: "POST",
-				headers: { "X-Private-Token": auth.privateToken }
-			});
-			if (revokeRes.ok) console.log(`${GREEN$2}✓ 已撤销当前网关会话${RESET$3}`);
-			else if (revokeRes.status === 404) console.log(`${DIM$3}服务端暂不支持撤销网关会话，继续本机登出${RESET$3}`);
-			else console.log(`${YELLOW$3}⚠️ 撤销网关会话失败，继续本机登出${RESET$3}`);
-		} catch {
-			console.log(`${YELLOW$3}⚠️ 撤销网关会话失败，继续本机登出${RESET$3}`);
-		}
+		await revokeGatewaySessionIfPossible(auth);
 		removeAuth();
 		console.log(`${GREEN$2}✓ 已登出${RESET$3}`);
 	} catch (error) {
@@ -5272,6 +5502,11 @@ async function status(args = {}) {
 	console.log(`  工号: ${auth.empId}`);
 	console.log(`  网关: ${getGatewayUrl()}`);
 	console.log(`  SSO_REFRESH_TOKEN: ${auth.ssoRefreshToken ? `${GREEN$2}已缓存${RESET$3}` : `${YELLOW$3}未缓存${RESET$3}`}`);
+	const ssoRtExp = getEffectiveSsoRefreshCookieExpiresAtMs(auth);
+	if (auth.ssoRefreshToken && ssoRtExp) {
+		const rtDead = Date.now() >= ssoRtExp;
+		console.log(`  SSO_REFRESH 预估过期: ${new Date(ssoRtExp).toLocaleString()}${rtDead ? ` ${YELLOW$3}(已过期)${RESET$3}` : ""}`);
+	} else if (auth.ssoRefreshToken) console.log(`  SSO_REFRESH 预估过期: ${YELLOW$3}未知${RESET$3} ${DIM$3}(可 login --reauth 重新写入)${RESET$3}`);
 	if (expired) {
 		console.log(`  Token: ${YELLOW$3}即将过期${RESET$3}`);
 		console.log(`${TEXT$3}建议重新登录: npx ali-skills login${RESET$3}`);
@@ -5300,13 +5535,14 @@ async function ensureSsoRefreshToken() {
 		});
 		if (response.status === 200) {
 			const data = await response.json();
+			const mergedRtExp = typeof data.ssoRefreshTokenExpiresAt === "number" && data.ssoRefreshTokenExpiresAt > 0 ? data.ssoRefreshTokenExpiresAt : Date.now() + getSsoRefreshCookieTtlMs();
 			saveAuth({
 				...auth,
 				gatewayUrl: auth.gatewayUrl || getGatewayUrl(),
 				ssoRefreshToken: data.ssoRefreshToken,
 				ssoRefreshTokenFetchedAt: Date.now(),
 				ssoRefreshTokenLastCheckedAt: Date.now(),
-				ssoRefreshTokenExpiresAt: data.ssoRefreshTokenExpiresAt
+				ssoRefreshTokenExpiresAt: mergedRtExp
 			});
 			console.log(`${DIM$3}已从服务端获取 SSO_REFRESH_TOKEN${RESET$3}`);
 			return data.ssoRefreshToken;
@@ -5607,6 +5843,13 @@ async function sendDirectRequest(targetUrl, platform, token, options) {
 	if (!response.ok) process.exit(1);
 }
 async function sendSsoCookieDirectRequest(targetUrl, options) {
+	const printReauthAndRetryHint = (location, forceStderr = false) => {
+		const log = forceStderr ? console.error : console.log;
+		log(`${YELLOW$2}检测到被重定向到登录页，当前 SSO_REFRESH_TOKEN 很可能已失效${RESET$2}`);
+		if (location) log(`${DIM$2}Location: ${location}${RESET$2}`);
+		log(`${TEXT$2}请先执行: npx ali-skills login --reauth（刷新 SSO_REFRESH_TOKEN）${RESET$2}`);
+		log(`${TEXT$2}刷新后请重新发起当前请求${RESET$2}`);
+	};
 	let ssoRefreshToken = null;
 	try {
 		await ensureLogin();
@@ -5624,6 +5867,8 @@ async function sendSsoCookieDirectRequest(targetUrl, options) {
 		console.log(`${TEXT$2}建议执行: npx ali-skills login${RESET$2}`);
 		process.exit(1);
 	}
+	const authForRt = readAuth();
+	if (authForRt) exitIfSsoRefreshCookieExpired(authForRt, { quiet: options.quiet });
 	const requestHeaders = {
 		"User-Agent": "ali-skills-cli/1.0",
 		Cookie: `SSO_REFRESH_TOKEN=${ssoRefreshToken}`
@@ -5643,7 +5888,7 @@ async function sendSsoCookieDirectRequest(targetUrl, options) {
 	const controller = new AbortController();
 	const timeout = options.timeout || 3e4;
 	const timeoutId = setTimeout(() => controller.abort(), timeout);
-	const { response, responseBody } = await fetchWithRedirects(targetUrl, options.method.toUpperCase(), requestHeaders, body, timeout, options.quiet);
+	const { response, responseBody, loginRedirectUrl } = await fetchWithRedirects(targetUrl, options.method.toUpperCase(), requestHeaders, body, timeout, options.quiet, { stopOnAlibabaLoginRedirect: true });
 	clearTimeout(timeoutId);
 	if (!options.quiet) {
 		const statusColor = response.ok ? GREEN$1 : RED$2;
@@ -5655,7 +5900,15 @@ async function sendSsoCookieDirectRequest(targetUrl, options) {
 			console.log(`${DIM$2}  2. 目标服务未启用该认证链路${RESET$2}`);
 			console.log(`${DIM$2}  3. 当前账号在目标系统无访问权限${RESET$2}`);
 			console.log(`${TEXT$2}建议: 重新登录后重试，或联系目标系统确认登录态策略${RESET$2}`);
-		}
+		} else if (loginRedirectUrl) printReauthAndRetryHint(loginRedirectUrl);
+	}
+	if (options.includeHeaders) {
+		console.log();
+		console.log(`${TEXT$2}Response Headers:${RESET$2}`);
+		response.headers.forEach((value, key) => {
+			console.log(`  ${key}: ${value}`);
+		});
+		console.log();
 	}
 	let outputBody = responseBody;
 	if (!options.raw && options.pretty !== false) try {
@@ -5666,7 +5919,14 @@ async function sendSsoCookieDirectRequest(targetUrl, options) {
 		const { writeFileSync } = __require("fs");
 		writeFileSync(options.output, outputBody);
 		console.log(`${GREEN$1}✓ 已保存到 ${options.output}${RESET$2}`);
-	} else console.log(outputBody);
+	} else {
+		if (options.quiet && !response.ok && outputBody.trim().length === 0 && (loginRedirectUrl || response.headers.get("location"))) {
+			const location = loginRedirectUrl || response.headers.get("location") || "(empty)";
+			console.error(`HTTP ${response.status} ${response.statusText} (Location: ${location})`);
+			printReauthAndRetryHint(location, true);
+		}
+		console.log(outputBody);
+	}
 	if (!response.ok) process.exit(1);
 }
 async function sendSsoTicketDirectRequest(targetUrl, options) {
@@ -5771,7 +6031,7 @@ async function sendPlainDirectRequest(targetUrl, options, allowSsoCookieFallback
 	} else console.log(outputBody);
 	if (!response.ok) process.exit(1);
 }
-async function fetchWithRedirects(initialUrl, method, headers, body, timeout, quiet) {
+async function fetchWithRedirects(initialUrl, method, headers, body, timeout, quiet, opts) {
 	const controller = new AbortController();
 	const timeoutId = setTimeout(() => controller.abort(), timeout);
 	let currentUrl = initialUrl;
@@ -5799,7 +6059,15 @@ async function fetchWithRedirects(initialUrl, method, headers, body, timeout, qu
 			};
 			if (redirects >= MAX_REDIRECTS) throw new Error(`重定向次数超过上限(${MAX_REDIRECTS})`);
 			const nextUrl = new URL(location, currentUrl).toString();
-			if (new URL(nextUrl).hostname === "login.alibaba-inc.com") sawAlibabaLoginRedirect = true;
+			if (new URL(nextUrl).hostname === "login.alibaba-inc.com") {
+				sawAlibabaLoginRedirect = true;
+				if (opts?.stopOnAlibabaLoginRedirect) return {
+					response,
+					responseBody: await response.text(),
+					sawAlibabaLoginRedirect,
+					loginRedirectUrl: nextUrl
+				};
+			}
 			redirects += 1;
 			if (!quiet) console.log(`${DIM$2}↪ 重定向 ${redirects}: ${response.status} ${response.statusText} -> ${nextUrl}${RESET$2}`);
 			currentUrl = nextUrl;
@@ -6358,9 +6626,6 @@ ${BOLD}Manage Skills:${RESET}
   list, ls             List installed skills
   find [query]         Search for skills interactively
 
-${BOLD}Publish:${RESET}
-  publish [options]    Publish skills from current repo to OSS (alias: pub)
-
 ${BOLD}Updates:${RESET}
   check                Check for available skill updates (project-level by default)
   check -g             Check global skill updates
@@ -6371,9 +6636,7 @@ ${BOLD}Updates:${RESET}
   update <skill>       Update specific skill(s)
 
 ${BOLD}Project:${RESET}
-  experimental_install Restore skills from skills-lock.json
   init [name]          Initialize a skill (creates <name>/SKILL.md or ./SKILL.md)
-  experimental_sync    Sync skills from node_modules into agent directories
 
 ${BOLD}Gateway:${RESET}
   gateway              鉴权请求能力入口（login/logout/status/req）
@@ -6387,8 +6650,10 @@ ${BOLD}Add Options:${RESET}
   -s, --skill <skills>   Specify skill names to install (use '*' for all skills)
   -l, --list             List available skills in the repository without installing
   -y, --yes              Skip confirmation prompts
+  --ci                   Enable CI mode (auto non-interactive, implies --yes)
   --github               Force fetching from GitHub when using owner/repo shorthand
-  --copy                 Copy files instead of symlinking to agent directories
+  --install-mode <mode>  Install mode: symlink|copy|symlink-isolated|copy-isolated (default: symlink)
+  --copy                 Backward-compatible alias of --install-mode copy (recommended: use --install-mode)
   --all                  Shorthand for --skill '*' --agent '*' -y
   --full-depth           Search all subdirectories even when a root SKILL.md exists
 
@@ -6399,10 +6664,6 @@ ${BOLD}Remove Options:${RESET}
   -y, --yes              Skip confirmation prompts
   --all                  Shorthand for --skill '*' --agent '*' -y
   
-${BOLD}Experimental Sync Options:${RESET}
-  -a, --agent <agents>   Specify agents to install to (use '*' for all agents)
-  -y, --yes              Skip confirmation prompts
-
 ${BOLD}List Options:${RESET}
   -g, --global           List global skills (default: project)
   -a, --agent <agents>   Filter by specific agents
@@ -6412,14 +6673,12 @@ ${BOLD}Options:${RESET}
   --help, -h        Show this help message
   --version, -v     Show version number
 
-${BOLD}Debug:${RESET}
-  ALI_SKILLS_DEBUG_UPDATE=1  Print detailed logs for check/update diagnosis
-
 ${BOLD}Examples:${RESET}
   ${DIM}$${RESET} ali-skills add group/project
   ${DIM}$${RESET} ali-skills add group/project -g
   ${DIM}$${RESET} ali-skills add group/project --agent claude-code cursor
   ${DIM}$${RESET} ali-skills add group/project --skill pr-review commit
+  ${DIM}$${RESET} ali-skills add group/project --install-mode symlink-isolated
   ${DIM}$${RESET} ali-skills remove                        ${DIM}# interactive remove${RESET}
   ${DIM}$${RESET} ali-skills remove web-design             ${DIM}# remove by name${RESET}
   ${DIM}$${RESET} ali-skills rm --global frontend-design
@@ -6432,10 +6691,7 @@ ${BOLD}Examples:${RESET}
   ${DIM}$${RESET} ali-skills check
   ${DIM}$${RESET} ali-skills check web-design react-best-practices
   ${DIM}$${RESET} ali-skills update
-  ${DIM}$${RESET} ali-skills experimental_install            ${DIM}# restore from skills-lock.json${RESET}
   ${DIM}$${RESET} ali-skills init my-skill
-  ${DIM}$${RESET} ali-skills experimental_sync              ${DIM}# sync from node_modules${RESET}
-  ${DIM}$${RESET} ali-skills experimental_sync -y           ${DIM}# sync without prompts${RESET}
 
 Discover more skills at ${TEXT}https://ali-skills.alibaba-inc.com/${RESET}
 `);
@@ -6475,7 +6731,7 @@ function showGatewayHelp() {
 	const platformKeysForHelp = listPlatforms().filter((p) => p.key !== "aone").map((p) => p.key).join(", ");
 	console.log(`
 ${BOLD}Gateway Commands:${RESET}
-  login [platform]               Login to Gateway or configure platform token
+  login [--reauth] [platform]    Login to Gateway or configure platform token; --reauth 等价于先 logout 再登录
   logout [platform]              Logout BUC or clear platform token
   status [platform] [--all]      Show login status, single platform, or all platform statuses
   request [platform] <url|path>  Send HTTP request (supports platform + path shorthand)
@@ -6505,6 +6761,7 @@ ${BOLD}Request Options:${RESET}
 
 ${BOLD}Examples:${RESET}
   ${DIM}$${RESET} ali-skills login
+  ${DIM}$${RESET} ali-skills login --reauth
   ${DIM}$${RESET} ali-skills login code
   ${DIM}$${RESET} ali-skills login yuque
   ${DIM}$${RESET} ali-skills login yuque group
@@ -6768,6 +7025,16 @@ function parseLogoutArgs(args) {
 		clearAll
 	};
 }
+function stripReauthFlag(args) {
+	let reauth = false;
+	const rest = [];
+	for (const a of args) if (a === "--reauth") reauth = true;
+	else rest.push(a);
+	return {
+		reauth,
+		rest
+	};
+}
 async function runGatewayCommand(args) {
 	if (args.length === 0) {
 		showGatewayHelp();
@@ -6776,11 +7043,14 @@ async function runGatewayCommand(args) {
 	const command = args[0];
 	const rest = args.slice(1);
 	switch (command) {
-		case "login":
+		case "login": {
 			showLogo();
 			console.log();
-			await login();
+			const { reauth, rest: loginRest } = stripReauthFlag(rest);
+			if (loginRest.length > 0) await runPlatformLogin(loginRest);
+			else await login({ reauth });
 			break;
+		}
 		case "logout": {
 			const lo = parseLogoutArgs(rest);
 			await logout(lo.platform, lo.yuqueGroup, lo.clearAll);
@@ -7432,7 +7702,14 @@ async function main() {
 		case "a":
 		case "add": {
 			showLogo();
-			const { source: addSource, options: addOpts } = parseAddOptions(restArgs);
+			let addParsed;
+			try {
+				addParsed = parseAddOptions(restArgs);
+			} catch (error) {
+				console.error(error instanceof Error ? error.message : "Invalid add options");
+				process.exit(1);
+			}
+			const { source: addSource, options: addOpts } = addParsed;
 			await runAdd(addSource, addOpts);
 			break;
 		}
@@ -7467,10 +7744,12 @@ async function main() {
 		case "check":
 			await runCheck(restArgs);
 			break;
-		case "login":
-			if (restArgs.length > 0) await runPlatformLogin(restArgs);
-			else await login();
+		case "login": {
+			const { reauth, rest: loginRest } = stripReauthFlag(restArgs);
+			if (loginRest.length > 0) await runPlatformLogin(loginRest);
+			else await login({ reauth });
 			break;
+		}
 		case "logout": {
 			const lo = parseLogoutArgs(restArgs);
 			await logout(lo.platform, lo.yuqueGroup, lo.clearAll);