bailian-cli 1.13.0 → 1.14.0

package/README.md

@@ -24,7 +24,7 @@ _Built for AI Agents. Every command works as a structured tool call._
 
 Equip your AI Agent out-of-the-box with these capabilities, composable across complex tasks:
 
-- **Text chat** — Qwen3.7-max: major gains in agentic coding, frontend coding, and vibe coding
+- **Text chat** — Qwen3.8-max: major gains in agentic coding, frontend coding, and vibe coding
 - **Multimodal (Omni)** — Full omni-modal support across text + image + audio + video
 - **Image generation & editing** — Qwen-Image 2.0: pro text rendering, photorealism, strong semantic adherence, multi-image composition
 - **Video generation & editing** — happyhorse-1.1 series: text-/image-/reference-to-video and natural-language video editing (up to 9-image reference)
@@ -77,11 +77,17 @@ No timeline scrubbing. No frame-by-frame editing. Just one sentence → one vide
 ## Installation
 
 ```bash
+# Recommended — no Node required
+curl -fsSL https://bailian.aliyun.com/cli/install.sh | bash
+
+# Windows (PowerShell)
+irm https://bailian.aliyun.com/cli/install.ps1 | iex
+
+# Node users / developers (Node.js >= 18.17)
 npm install -g bailian-cli
-npx skills add modelstudioai/cli --all -g
 ```
 
-> Requires Node.js >= 18.17.
+> Binary install does not require Node.js. `npm install -g` remains fully supported.
 
 ## Quick Start
 
@@ -210,8 +216,9 @@ bl config set --key base_url --value https://dashscope-us.aliyuncs.com
 bl config set --key default_text_model --value qwen-turbo
 bl config set --key timeout --value 600
 
-# Self-update to latest version
+# Self-update to latest or a specific version
 bl update
+bl update --to 0.1.14
 ```
 
 Config file location: `~/.bailian/config.json`

package/README.zh.md

@@ -24,7 +24,7 @@ _专为 AI Agent 打造，每个命令均可作为结构化工具调用。_
 
 让您的 AI Agent 开箱即具备以下能力，并可在复杂任务中自动组合调用：
 
-- **文本对话** — Qwen3.7-max：Agentic coding、前端编程、Vibe coding 等能力显著增强
+- **文本对话** — Qwen3.8-max：Agentic coding、前端编程、Vibe coding 等能力显著增强
 - **全模态对话** — 文本 + 图像 + 音频 + 视频全模态支持
 - **图像生成与编辑** — Qwen-Image 2.0：专业文字渲染、真实质感、强语义遵循、多图合成
 - **视频生成与编辑** — happyhorse-1.1 系列，支持文生 / 图生 / 参考生（最多 9 张图参考）/ 自然语言视频编辑
@@ -75,11 +75,17 @@ _专为 AI Agent 打造，每个命令均可作为结构化工具调用。_
 ## 安装
 
 ```bash
+# 推荐 — 无需本机 Node.js
+curl -fsSL https://bailian.aliyun.com/cli/install.sh | bash
+
+# Windows（PowerShell）
+irm https://bailian.aliyun.com/cli/install.ps1 | iex
+
+# Node 用户 / 开发者（需要 Node.js >= 18.17）
 npm install -g bailian-cli
-npx skills add modelstudioai/cli --all -g
 ```
 
-> 需要预先安装 Node.js >= 18.17。
+> 二进制安装不依赖 Node.js。`npm install -g` 长期保留。
 
 ## 快速开始
 
@@ -210,6 +216,9 @@ bl config set --key timeout --value 600
 
 # 自更新到最新版本
 bl update
+
+# 安装指定版本
+bl update --to 0.1.14
 ```
 
 配置文件位置：`~/.bailian/config.json`

package/dist/bailian.mjs

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
 
-import{createCli as e}from"bailian-cli-runtime";import{advisorRecommend as t,appCall as n,appList as r,authGenerateAccessToken as i,authLogin as a,authLogout as o,authStatus as s,configAgent as c,configList as l,configSet as u,configShow as d,configUi as f,configUse as p,consoleCall as m,datasetDelete as h,datasetGet as g,datasetList as _,datasetUpload as v,datasetValidate as y,deployAudioCreate as b,deployDelete as x,deployGet as S,deployImageCreate as C,deployList as w,deployModels as T,deployScale as E,deployTextCreate as D,deployUpdate as O,fileUpload as k,finetuneAudioCreate as A,finetuneCancel as j,finetuneCapability as M,finetuneCheckpoints as N,finetuneDelete as P,finetuneExport as F,finetuneGet as I,finetuneImageCreate as L,finetuneList as R,finetuneLogs as z,finetuneTextCreate as B,finetuneWatch as V,imageEdit as H,imageGenerate as U,knowledgeChat as W,knowledgeRetrieve as G,knowledgeSearch as K,managedAgentApply as q,managedAgentDestroy as J,managedAgentInit as Y,managedAgentPlan as X,managedAgentSessionCreate as Z,managedAgentSessionDelete as Q,managedAgentSessionEvents as $,managedAgentSessionGet as ee,managedAgentSessionList as te,managedAgentSessionRun as ne,managedAgentSessionSend as re,managedAgentSkillList as ie,managedAgentStateImport as ae,managedAgentStateList as oe,managedAgentStateRm as se,managedAgentStateShow as ce,managedAgentValidate as le,mcpCall as ue,mcpList as de,mcpTools as fe,memoryAdd as pe,memoryDelete as me,memoryList as he,memoryProfileCreate as ge,memoryProfileGet as _e,memorySearch as ve,memoryUpdate as ye,modelList as be,pipelineRun as xe,pipelineValidate as Se,pluginInstall as Ce,pluginLink as we,pluginList as Te,pluginRemove as Ee,quotaCheck as De,quotaHistory as Oe,quotaList as ke,quotaRequest as Ae,searchWeb as je,speechRecognize as Me,speechSynthesize as Ne,textChat as Pe,textOmni as Fe,tokenPlanAddMember as Ie,tokenPlanAssignSeats as Le,tokenPlanCreateKey as Re,tokenPlanListSeats as ze,update as Be,usageFree as Ve,usageFreetier as He,usageStats as Ue,usageSummary as We,videoDownload as Ge,videoEdit as Ke,videoGenerate as qe,videoRef as Je,videoTaskGet as Ye,visionDescribe as Xe,workspaceInit as Ze,workspaceList as Qe}from"bailian-cli-commands";e({"auth login":a,"auth status":s,"auth logout":o,"auth generate-access-token":i,"text chat":Pe,omni:Fe,"image generate":U,"image edit":H,"video generate":qe,"video edit":Ke,"video ref":Je,"video task get":Ye,"video download":Ge,"vision describe":Xe,"config show":d,"config set":u,"config list":l,"config use":p,"config ui":f,"config agent":c,update:Be,"app call":n,"app list":r,"memory add":pe,"memory search":ve,"memory list":he,"memory update":ye,"memory delete":me,"memory profile create":ge,"memory profile get":_e,"knowledge retrieve":G,"knowledge search":K,"knowledge chat":W,"mcp call":ue,"mcp list":de,"mcp tools":fe,"search web":je,"speech synthesize":Ne,"speech recognize":Me,"file upload":k,"console call":m,"usage free":Ve,"usage freetier":He,"usage stats":Ue,"usage summary":We,"pipeline run":xe,"pipeline validate":Se,"advisor recommend":t,"model list":be,"workspace list":Qe,"quota list":ke,"quota request":Ae,"quota history":Oe,"quota check":De,"dataset upload":v,"dataset list":_,"dataset get":g,"dataset delete":h,"dataset validate":y,"finetune text create":B,"finetune audio create":A,"finetune image create":L,"finetune list":R,"finetune get":I,"finetune cancel":j,"finetune delete":P,"finetune logs":z,"finetune checkpoints":N,"finetune export":F,"finetune watch":V,"finetune capability":M,"deploy text create":D,"deploy audio create":b,"deploy image create":C,"deploy list":w,"deploy get":S,"deploy models":T,"deploy scale":E,"deploy update":O,"deploy delete":x,"token-plan list-seats":ze,"token-plan create-key":Re,"token-plan assign-seats":Le,"token-plan add-member":Ie,"workspace init":Ze,"plugin install":Ce,"plugin link":we,"plugin list":Te,"plugin remove":Ee,"managed-agent init":Y,"managed-agent validate":le,"managed-agent plan":X,"managed-agent apply":q,"managed-agent destroy":J,"managed-agent state list":oe,"managed-agent state show":ce,"managed-agent state rm":se,"managed-agent state import":ae,"managed-agent session create":Z,"managed-agent session list":te,"managed-agent session get":ee,"managed-agent session delete":Q,"managed-agent session run":ne,"managed-agent session send":re,"managed-agent session events":$,"managed-agent skill-list":ie},{binName:`bl`,version:`1.13.0`,clientName:`bailian-cli`,npmPackage:`bailian-cli`,quickStartTasks:[`Help me generate a set of Amazon e-commerce main images for baseball caps (white background + lifestyle shots + model wear shots)`,`Help me generate a 3-minute humorous crosstalk audio clip`,`Help me generate a Little Red Riding Hood picture-book PDF (with illustrations)`,`Help me analyze this video and write a Xiaohongshu-style post`],commandPacks:{supported:{"@ali/bailian-plugin-agent":{commandPrefixes:[`agent`],credentialAccess:[`apiKey`]},"@ali/bailian-plugin-inner-console-call":{commandPrefixes:[`inner-console`]}}}}).run();export{};
+import{createCli as e}from"bailian-cli-runtime";import{advisorRecommend as t,appCall as n,appList as r,authGenerateAccessToken as i,authLogin as a,authLogout as o,authStatus as s,configAgent as c,configList as l,configSet as u,configShow as d,configUi as f,configUse as p,consoleCall as m,datasetDelete as h,datasetGet as g,datasetList as _,datasetUpload as v,datasetValidate as y,deployAudioCreate as b,deployDelete as x,deployGet as S,deployImageCreate as C,deployList as w,deployModels as T,deployScale as E,deployTextCreate as D,deployUpdate as O,fileUpload as k,finetuneAudioCreate as A,finetuneCancel as j,finetuneCapability as M,finetuneCheckpoints as N,finetuneDelete as P,finetuneExport as F,finetuneGet as I,finetuneImageCreate as L,finetuneList as R,finetuneLogs as z,finetuneTextCreate as B,finetuneWatch as V,imageEdit as H,imageGenerate as U,knowledgeChat as W,knowledgeRetrieve as G,knowledgeSearch as K,managedAgentApply as q,managedAgentDestroy as J,managedAgentInit as Y,managedAgentPlan as X,managedAgentSessionCreate as Z,managedAgentSessionDelete as Q,managedAgentSessionEvents as $,managedAgentSessionGet as ee,managedAgentSessionList as te,managedAgentSessionRun as ne,managedAgentSessionSend as re,managedAgentSkillList as ie,managedAgentStateImport as ae,managedAgentStateList as oe,managedAgentStateRm as se,managedAgentStateShow as ce,managedAgentValidate as le,mcpCall as ue,mcpList as de,mcpTools as fe,memoryAdd as pe,memoryDelete as me,memoryList as he,memoryProfileCreate as ge,memoryProfileGet as _e,memorySearch as ve,memoryUpdate as ye,modelList as be,pipelineRun as xe,pipelineValidate as Se,pluginInstall as Ce,pluginLink as we,pluginList as Te,pluginRemove as Ee,quotaCheck as De,quotaHistory as Oe,quotaList as ke,quotaRequest as Ae,searchWeb as je,skillAdd as Me,skillList as Ne,skillRemove as Pe,skillUpdate as Fe,speechRecognize as Ie,speechSynthesize as Le,textChat as Re,textOmni as ze,tokenPlanAddMember as Be,tokenPlanAssignSeats as Ve,tokenPlanCreateKey as He,tokenPlanListSeats as Ue,update as We,usageFree as Ge,usageFreetier as Ke,usageStats as qe,usageSummary as Je,videoDownload as Ye,videoEdit as Xe,videoGenerate as Ze,videoRef as Qe,videoTaskGet as $e,visionDescribe as et,workspaceInit as tt,workspaceList as nt}from"bailian-cli-commands";e({"auth login":a,"auth status":s,"auth logout":o,"auth generate-access-token":i,"text chat":Re,omni:ze,"image generate":U,"image edit":H,"video generate":Ze,"video edit":Xe,"video ref":Qe,"video task get":$e,"video download":Ye,"vision describe":et,"config show":d,"config set":u,"config list":l,"config use":p,"config ui":f,"config agent":c,update:We,"app call":n,"app list":r,"memory add":pe,"memory search":ve,"memory list":he,"memory update":ye,"memory delete":me,"memory profile create":ge,"memory profile get":_e,"knowledge retrieve":G,"knowledge search":K,"knowledge chat":W,"mcp call":ue,"mcp list":de,"mcp tools":fe,"search web":je,"speech synthesize":Le,"speech recognize":Ie,"file upload":k,"console call":m,"usage free":Ge,"usage freetier":Ke,"usage stats":qe,"usage summary":Je,"pipeline run":xe,"pipeline validate":Se,"advisor recommend":t,"model list":be,"workspace list":nt,"quota list":ke,"quota request":Ae,"quota history":Oe,"quota check":De,"dataset upload":v,"dataset list":_,"dataset get":g,"dataset delete":h,"dataset validate":y,"finetune text create":B,"finetune audio create":A,"finetune image create":L,"finetune list":R,"finetune get":I,"finetune cancel":j,"finetune delete":P,"finetune logs":z,"finetune checkpoints":N,"finetune export":F,"finetune watch":V,"finetune capability":M,"deploy text create":D,"deploy audio create":b,"deploy image create":C,"deploy list":w,"deploy get":S,"deploy models":T,"deploy scale":E,"deploy update":O,"deploy delete":x,"token-plan list-seats":Ue,"token-plan create-key":He,"token-plan assign-seats":Ve,"token-plan add-member":Be,"workspace init":tt,"plugin install":Ce,"plugin link":we,"plugin list":Te,"plugin remove":Ee,"skill add":Me,"skill update":Fe,"skill remove":Pe,"skill list":Ne,"managed-agent init":Y,"managed-agent validate":le,"managed-agent plan":X,"managed-agent apply":q,"managed-agent destroy":J,"managed-agent state list":oe,"managed-agent state show":ce,"managed-agent state rm":se,"managed-agent state import":ae,"managed-agent session create":Z,"managed-agent session list":te,"managed-agent session get":ee,"managed-agent session delete":Q,"managed-agent session run":ne,"managed-agent session send":re,"managed-agent session events":$,"managed-agent skill-list":ie},{binName:`bl`,version:`1.14.0`,clientName:`bailian-cli`,npmPackage:`bailian-cli`,quickStartTasks:[`Help me generate a set of Amazon e-commerce main images for baseball caps (white background + lifestyle shots + model wear shots)`,`Help me generate a 3-minute humorous crosstalk audio clip`,`Help me generate a Little Red Riding Hood picture-book PDF (with illustrations)`,`Help me analyze this video and write a Xiaohongshu-style post`],commandPacks:{supported:{"@ali/bailian-plugin-agent":{commandPrefixes:[`agent`],credentialAccess:[`apiKey`]},"@ali/bailian-plugin-inner-console-call":{commandPrefixes:[`inner-console`]}}}}).run();export{};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bailian-cli",
-  "version": "1.13.0",
+  "version": "1.14.0",
   "description": "CLI for Aliyun Model Studio (DashScope) AI Platform.",
   "keywords": [
     "agent",
@@ -25,7 +25,8 @@
   },
   "files": [
     "dist",
-    "README.zh.md"
+    "README.zh.md",
+    "postinstall.js"
   ],
   "type": "module",
   "exports": {
@@ -36,9 +37,10 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "bailian-cli-commands": "1.13.0",
-    "bailian-cli-core": "1.13.0",
-    "bailian-cli-runtime": "1.13.0"
+    "tar-stream": "^3.2.0",
+    "bailian-cli-commands": "1.14.0",
+    "bailian-cli-runtime": "1.14.0",
+    "bailian-cli-core": "1.14.0"
   },
   "devDependencies": {
     "@clack/prompts": "^0.7.0",
@@ -62,6 +64,7 @@
     "build": "vp pack",
     "dev": "tsx src/main.ts",
     "test": "vp test",
-    "check": "vp check"
+    "check": "vp check",
+    "postinstall": "node postinstall.js"
   }
 }

package/postinstall.js

@@ -0,0 +1,213 @@
+/**
+ * postinstall.js — Wiki data sync (layer 1: triggered by npm install)
+ *
+ * Runs automatically after npm/pnpm installs bailian-cli: unconditionally downloads the full Wiki data
+ * package and overwrites the local directory, ensuring data is in place the first time the user runs
+ * `bl advisor recommend`.
+ *
+ * Flow (unified skill publishing protocol: skills/index.json + one content-addressed object per skill):
+ *   1. Download skills/index.json from public-read OSS, get the bailian-docs-llm-wiki entry
+ *   2. Download skills/bailian-docs-llm-wiki/<entry.object> (sha256-<hex>.tar.br, brotli q6, ~2.3MB);
+ *      legacy fallback to skill.tar.br when the entry has no valid object field
+ *   3. Node built-in brotli decompress + tar-stream extract (per-entry path safety check) to same-volume temp dir
+ *   4. renameSync atomic swap into ~/.bailian/skills/bailian-docs-llm-wiki/
+ *   5. Write ~/.bailian/wiki-sync-state.json
+ *   6. Write ~/.bailian/skills/skill-lock.json record (same ledger as bl skill)
+ *
+ * Design constraints:
+ *   - Unconditional overwrite: every install fully replaces, no version comparison
+ *   - Silent failure: any step failure → console.warn → process.exit(0), never blocks install
+ *   - Standalone implementation: does not import bailian-cli-core, avoiding ESM path issues after bundling
+ *   - Depends on Node built-in modules + tar-stream (consistent with sync.ts / publisher skills-publish.mjs)
+ */
+import {
+  createWriteStream,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+  writeFileSync,
+} from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { Readable } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { createBrotliDecompress } from "node:zlib";
+import tar from "tar-stream";
+
+const REGISTRY_BASE_URL = "https://bailian-wiki.oss-cn-hangzhou.aliyuncs.com/skills";
+const WIKI_SKILL_NAME = "bailian-docs-llm-wiki";
+const CONFIG_DIR_NAME = ".bailian";
+const SKILL_DIR_NAME = "skills/bailian-docs-llm-wiki";
+const STATE_FILE_NAME = "wiki-sync-state.json";
+const INDEX_KEY = "index.json";
+/** Legacy fixed asset key (entries without a valid content-addressed object field) */
+const LEGACY_ASSET_NAME = "skill.tar.br";
+/** Same strict shape check as core registry.ts: only a valid object name may enter the URL */
+const OBJECT_FILE_RE = /^sha256-[0-9a-f]{64}\.tar\.br$/;
+
+const INDEX_TIMEOUT_MS = 3000;
+const DOWNLOAD_TIMEOUT_MS = 30000;
+
+function getConfigDir() {
+  if (process.env.BAILIAN_CONFIG_DIR) return process.env.BAILIAN_CONFIG_DIR;
+  return join(homedir(), CONFIG_DIR_NAME);
+}
+
+function getCatalogDir() {
+  return join(getConfigDir(), SKILL_DIR_NAME);
+}
+
+function getStatePath() {
+  return join(getConfigDir(), STATE_FILE_NAME);
+}
+
+function getSkillLockPath() {
+  return join(getConfigDir(), "skills", "skill-lock.json");
+}
+
+/**
+ * Record this sync in skill-lock.json (same ledger as bl skill; list shows installed).
+ * Semantics aligned with upsertSkillLockEntry in core/src/skills/lock.ts: shallow-merge with the existing
+ * entry, preserving fields like links written by bl skill add; rebuild as empty table if lock is corrupted/unrecognized.
+ * best-effort: failure does not affect data sync results.
+ */
+function upsertSkillLock(name, entry) {
+  try {
+    let lock = { version: 1, skills: {} };
+    try {
+      const parsed = JSON.parse(readFileSync(getSkillLockPath(), "utf-8"));
+      if (parsed?.version === 1 && parsed.skills && typeof parsed.skills === "object") {
+        lock = parsed;
+      }
+    } catch {
+      /* absent/corrupted → empty table */
+    }
+    lock.skills[name] = { ...lock.skills[name], ...entry };
+    mkdirSync(dirname(getSkillLockPath()), { recursive: true });
+    writeFileSync(getSkillLockPath(), JSON.stringify(lock, null, 2) + "\n");
+  } catch {
+    /* Bookkeeping failure does not block install; advisor-side sync will backfill */
+  }
+}
+
+async function fetchJson(url, timeoutMs) {
+  const res = await fetch(url, { signal: AbortSignal.timeout(timeoutMs) });
+  if (!res.ok) throw new Error(`HTTP ${res.status}`);
+  return res.json();
+}
+
+async function downloadBuffer(url) {
+  const res = await fetch(url, { signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS) });
+  if (!res.ok) throw new Error(`HTTP ${res.status}`);
+  return Buffer.from(await res.arrayBuffer());
+}
+
+/** tar 条目路径必须是相对路径且不含 ..，防止 tar-slip 逃逸解包目录 */
+function isSafeEntryName(name) {
+  if (name.startsWith("/") || /^[a-zA-Z]:[\\/]/.test(name)) return false;
+  return !name.split("/").includes("..");
+}
+
+/** Brotli decompress + tar-stream extract into destDir (symmetric with publisher tar.pack()). */
+async function extractTarBr(tarBrBuffer, destDir) {
+  const extract = tar.extract();
+
+  extract.on("entry", (header, stream, next) => {
+    if (!isSafeEntryName(header.name)) {
+      // Same semantics as core skills/extract.ts: destroy so the pipeline rejects with this
+      // error; silence the entry stream to avoid its companion error becoming unhandled
+      stream.on("error", () => {});
+      stream.resume();
+      extract.destroy(new Error(`unsafe tar entry: ${header.name}`));
+      return;
+    }
+    const filePath = join(destDir, header.name);
+    if (header.type === "directory") {
+      mkdirSync(filePath, { recursive: true });
+      stream.resume();
+      stream.on("end", next);
+      return;
+    }
+    mkdirSync(dirname(filePath), { recursive: true });
+    const ws = createWriteStream(filePath);
+    stream.pipe(ws);
+    ws.on("finish", next);
+    ws.on("error", next);
+  });
+
+  await pipeline(Readable.from(tarBrBuffer), createBrotliDecompress(), extract);
+}
+
+/** Atomic swap: tmpDir (same volume) → catalogDir. */
+function atomicSwap(tmpDir, catalogDir) {
+  mkdirSync(dirname(catalogDir), { recursive: true });
+  const backup = `${catalogDir}.old-${Date.now()}`;
+  if (existsSync(catalogDir)) renameSync(catalogDir, backup);
+  try {
+    renameSync(tmpDir, catalogDir);
+  } catch (err) {
+    if (existsSync(backup) && !existsSync(catalogDir)) renameSync(backup, catalogDir);
+    throw err;
+  }
+  if (existsSync(backup)) rmSync(backup, { recursive: true, force: true });
+}
+
+async function main() {
+  // 1. Download skills/index.json and get the wiki entry
+  const index = await fetchJson(`${REGISTRY_BASE_URL}/${INDEX_KEY}`, INDEX_TIMEOUT_MS);
+  const entry = index?.skills?.[WIKI_SKILL_NAME];
+  if (!entry?.contentHash)
+    throw new Error("no bailian-docs-llm-wiki entry (or contentHash) in index.json");
+
+  // 2. Download the skill archive: content-addressed object first, legacy fixed key as fallback
+  const assetName =
+    entry.object && OBJECT_FILE_RE.test(entry.object) ? entry.object : LEGACY_ASSET_NAME;
+  const tarBuf = await downloadBuffer(`${REGISTRY_BASE_URL}/${WIKI_SKILL_NAME}/${assetName}`);
+
+  // 3. Extract to same-volume temp dir + atomic swap
+  const catalogDir = getCatalogDir();
+  const tmpDir = `${catalogDir}.tmp-${process.pid}-${Date.now()}`;
+  try {
+    mkdirSync(tmpDir, { recursive: true });
+    await extractTarBr(tarBuf, tmpDir);
+    atomicSwap(tmpDir, catalogDir);
+  } catch (err) {
+    if (existsSync(tmpDir)) rmSync(tmpDir, { recursive: true, force: true });
+    throw err;
+  }
+
+  // 4. Write state
+  try {
+    writeFileSync(
+      getStatePath(),
+      JSON.stringify({ lastChecked: Date.now(), contentHash: entry.contentHash }),
+    );
+  } catch {
+    /* state write failure has no impact: first recommend will re-check */
+  }
+
+  // 5. skill-lock.json record: wiki shares the same ledger as bl skill
+  upsertSkillLock(WIKI_SKILL_NAME, {
+    contentHash: entry.contentHash,
+    ...(entry.publishedAt ? { publishedAt: entry.publishedAt } : {}),
+    installedAt: new Date().toISOString(),
+    sourceType: "oss",
+    ...(entry.description ? { description: entry.description } : {}),
+  });
+
+  process.stdout.write(`bailian-cli: wiki data ready (${entry.publishedAt ?? "latest"})\n`);
+}
+
+main().catch((err) => {
+  // Unconditional pass-through: install-time network/permission issues should not block npm install;
+  // sync.ts will fall back to syncing on the first `bl advisor recommend`.
+  const msg = err instanceof Error ? err.message : String(err);
+  process.stderr.write(
+    `bailian-cli: wiki data pre-download skipped (${msg}); will sync automatically on first use.\n`,
+  );
+  // Force a success exit code so a download failure never fails `npm install`.
+  // eslint-disable-next-line unicorn/no-process-exit
+  process.exit(0);
+});