bfi-cli 0.1.103 → 0.1.104

package/README.md

@@ -15,27 +15,33 @@ bfi package install @team/kit --agent claude-code
 ## 明确选择插件
 
 ```sh
-bfi skills package install @team/kit --as plugin --version 1.0.0
-bfi package install @team/kit --as plugin --agent claude-code --version 1.0.0 --plan
-bfi package install @team/kit --as plugin --agent claude-code --version 1.0.0 --export ./kit-1.0.0.zip
-bfi package install @team/kit --as plugin --agent claude-code --scope user --version 1.0.0 --prepare-native ./kit-1.0.0-native
-bfi package install ./kit.tgz --as plugin --agent codex --root bundle --version 1.0.0 --plan
+# 下载并校验默认安装版本（= 最新发布版），不安装
+bfi skills package download @team/kit --as plugin -o ./kit.zip
+bfi skills package download @team/kit --as plugin --format tgz -o ./kit.tgz
+bfi skills package download @team/kit --as plugin --format tar.gz -o ./kit.tar.gz
+
+# 生成版本化原生目录并更新本地市场索引；由用户执行输出中的宿主命令
+bfi skills package prepare @team/kit --as plugin --agent claude-code --dir ./kit-handoff
+
+# 按默认版本重新下载/交接，不依赖安装记录
+bfi skills package update @team/kit --as plugin --agent claude-code --dir ./kit-handoff
+
+# 把命名空间注册为 Claude Code 市场（写入 ~/.claude/settings.json，headersHelper 使用 bfi 登录态）
+bfi skills package marketplace add global
+
+# 本地归档
+bfi package prepare ./kit.tgz --as plugin --agent codex --root bundle --dir ./kit-handoff
 bfi package list --as plugin --scope project
 ```
 
-- Claude Code **2.1.251** 的已验证组件开放受控原生注册；仍须满足精确发布版本的服务端授权、宿主/adapter 版本和 LOAD 证据。没有这些证据时不会安装。Codex **0.136.0** 仅开放原生技能型插件的人工交接；ZCode、CodeBuddy、Qwen Code 未实测，只导出并明确提示待适配。详见 [插件验证矩阵](PLUGIN-VALIDATION.md)。
-- 通用安装命令不必指定 Agent 和范围，CLI 会在交互终端中询问；非交互调用必须显式选择，`--yes` 不会代选。不支持的宿主或组件仍明确停止，不降级成技能安装。
-- `--plan` 只给计划/阻断原因；`--export` 原样导出归档，不计作安装。目标文件必须不存在，扩展名与源格式一致。
-- `--prepare-native <新目录>` 生成完整原始插件目录及独立市场索引，输出真实宿主命令；不注册宿主、不执行 Hooks、不创建 bfi 安装归属。只在宿主版本、作用域及全部必要组件受支持时生成。审阅后由用户确认执行；安装后保留该目录。人工交接的更新/卸载由原生宿主管理。
-- `--plan` 返回 READY 后，去掉 `--plan` 并确认可原生注册；非交互需显式 `--yes`。结果 REGISTERED 仅表示注册和文件归属已核对，需重启宿主检查所有组件，不能视为运行功能验证通过。
-- 市场来源必须写完整名称 `@namespace/package`，不要求用户输入数据库 ID。未指定版本时只解析一次可见 stable；没有 stable 则要求明确版本，不猜 latest。
-- 本地支持 zip/tgz/tar.gz，多根必须用 `--root` 选择；保留全部原始文件、执行位和未知字段，不自动转换各宿主格式。缺原生版本时可用 `--version` 描述本地导出身份，但不会改源文件或绕过市场正式发布的版本校验。
-- 原生安装/卸载/交接要求明确范围：`--scope user`（或 `-g`）/ `--scope project`；交互终端省略时询问，非交互或 `--yes` 不能代选。只读计划/导出/列表省略时按项目范围查看。插件独立使用 `.bfi/plugin-lock.json`，不与旧技能锁混用。
-- 未知安装结果保留 PREPARED 并阻止盲目重试；更新/卸载必须证明精确来源、宿主、范围、版本及安装归属。
-- 同一已安装内容重复安装不重复写入；原生版本更新暂不自动替换，提示 NATIVE_UPDATE_REQUIRES_USER 并保留旧版。卸载保留数据、市场索引及原始目录；重装使用新的独立市场，不覆盖保留目录。明确的同名预检冲突记录 FAILED，可解决后重试；原生命令结果不明才保留 PREPARED。
-- 所有路径都先执行归档安全检查。疑似凭据、非法路径、缺失关键组件或不支持的格式会停止，不能为导出或安装绕过，也不会自动降级成技能安装。
-
-服务器插件功能默认开启；显式设置 `PACKAGE_PLUGIN_ENABLED=false` 时仍可使用既有技能包，但插件市场操作不可用。本地原始包计划/导出不等于服务器发布。
+- 版本默认取「默认安装版本」，即最近一次发布；无需 `--version`。没有默认版本时才要求显式版本，不猜 latest。
+- Claude Code **2.1.251** 与 Codex **0.136.0** 已实现适配器，但原生自动注册仍受服务端能力与运行时 LOAD 证据门禁；不满足时使用 `download` / `prepare`，不会降级成技能安装。ZCode、CodeBuddy、Qwen Code 只导出/交接。
+- `download` 不要求 `--agent`，只导出并校验归档；支持 `--format zip|tgz|tar.gz`（默认按输出扩展名或 zip）。zip 校验归档摘要，tar 格式校验 treeDigest 与逐文件摘要；目标文件必须不存在。
+- `prepare` 生成 `versions/<version>/plugin` 与市场索引（`.claude-plugin/marketplace.json` 或 `.agents/plugins/marketplace.json`），更新时原子改写索引指向新版本；不注册宿主、不执行 Hooks、不创建安装归属。
+- `update`、`download`、`prepare` 均不以安装记录为前提；记录只用于原生注册的归属校验与卸载。
+- 市场来源必须写完整名称 `@namespace/package`；跨来源凭据不转发。
+- 原生安装/卸载要求明确范围：`--scope user`（或 `-g`）/ `--scope project`；交互终端省略时询问，非交互或 `--yes` 不能代选。
+- 未知安装结果保留 PREPARED 并阻止盲目重试；卸载保留数据与市场索引。
 
 ## 独立 MCP 安装与测试
 

package/dist/_chunks/command.mjs

@@ -4,9 +4,8 @@ import { inspectPluginArchive } from "./intent.mjs";
 import { loadGlobalConfig, loadProjectConfig, resolveConfig } from "./config.mjs";
 import { agents, detectInstalledAgents, setAgents } from "./agents.mjs";
 import { builtinCommands, normalizeConfig, variables } from "./model.mjs";
-import { SkillHubAPI, checkPath, getAgentBaseDir, planInstall, readConfig, readDocument, serversIn, targetFor, writeConfig } from "../cli.mjs";
 import { canonical, hash, stableManifest, verifyPlan } from "./digest.mjs";
-import { InstallationClient, credentialForRegistry, registryUrl } from "./client.mjs";
+import { InstallationClient, SkillHubAPI, checkPath, credentialForRegistry, getAgentBaseDir, planInstall, readConfig, readDocument, registryUrl, serversIn, targetFor, writeConfig } from "../cli.mjs";
 import { resolveAgents } from "./agents2.mjs";
 import { assertWritable, atomicPrivate, checkpoint, fingerprint, operationRoot, ownershipDigest, pathKey, readReceipt, receipts, safeDirectory, treeFingerprint, withInstallationLock } from "./receipt.mjs";
 import { randomUUID } from "node:crypto";

package/dist/_chunks/intent.mjs

@@ -572,8 +572,9 @@ var PluginRegistryClient = class {
 	async release(namespace, slug, version) {
 		return this.json(`${this.base(namespace, slug)}/plugin/releases/${segment(version)}`);
 	}
-	async download(namespace, slug, version, maximum = pluginArchiveLimits.compressedBytes) {
-		return this.bytes(`${this.base(namespace, slug)}/plugin/releases/${segment(version)}/download`, maximum);
+	async download(namespace, slug, version, format = "zip", maximum = pluginArchiveLimits.compressedBytes) {
+		const suffix = format === "zip" ? "" : `?format=${encodeURIComponent(format)}`;
+		return this.bytes(`${this.base(namespace, slug)}/plugin/releases/${segment(version)}/download${suffix}`, maximum);
 	}
 };
 const pluginTargets = [
@@ -600,10 +601,13 @@ function parsePackageIntent(args) {
 		"--plan",
 		"--export",
 		"--prepare-native",
+		"--dir",
+		"--output",
+		"--format",
 		"--scope",
 		"--root",
 		"--operation"
-	].includes(value) || /^(--plan|--export|--prepare-native|--scope|--root|--operation)=/u.test(value)) || isPluginArchive(output[1] ?? ""))) throw new Error("Plugin archives and plugin options require explicit --as plugin; no skills were installed");
+	].includes(value) || /^(--plan|--export|--prepare-native|--dir|--output|--format|--scope|--root|--operation)=/u.test(value)) || isPluginArchive(output[1] ?? ""))) throw new Error("Plugin archives and plugin options require explicit --as plugin; no skills were installed");
 	return {
 		mode,
 		args: output
@@ -615,12 +619,17 @@ function parsePluginArguments(args) {
 		i: "install",
 		update: "update",
 		up: "update",
+		download: "download",
+		dl: "download",
+		export: "download",
+		prepare: "prepare",
+		handoff: "prepare",
 		uninstall: "uninstall",
 		rm: "uninstall",
 		list: "list",
 		ls: "list"
 	}[args[0] ?? ""];
-	if (!command) throw new Error("Plugin intent supports install, update, uninstall and list");
+	if (!command) throw new Error("Plugin intent supports install, update, download, prepare, uninstall and list");
 	const result = {
 		command,
 		scope: "project",
@@ -634,7 +643,10 @@ function parsePluginArguments(args) {
 		"--scope",
 		"--root",
 		"--export",
+		"--output",
+		"--format",
 		"--prepare-native",
+		"--dir",
 		"--operation",
 		"--registry",
 		"--token",
@@ -663,9 +675,16 @@ function parsePluginArguments(args) {
 				if (!["project", "user"].includes(value)) throw new Error("Plugin scope must be project or user");
 				result.scope = value;
 			} else if (flag === "--root") result.root = value;
-			else if (flag === "--export") result.exportPath = value;
-			else if (flag === "--prepare-native") result.preparePath = value;
-			else if (flag === "--operation") result.operationId = value;
+			else if (flag === "--export" || flag === "--output") result.exportPath = value;
+			else if (flag === "--prepare-native" || flag === "--dir") result.preparePath = value;
+			else if (flag === "--format") {
+				if (![
+					"zip",
+					"tgz",
+					"tar.gz"
+				].includes(value)) throw new Error("Plugin archive format must be zip, tgz or tar.gz");
+				result.format = value;
+			} else if (flag === "--operation") result.operationId = value;
 		} else if (flag === "--global") result.scope = "user";
 		else if (flag === "--plan") result.planOnly = true;
 		else if (flag === "--json") result.json = true;
@@ -677,9 +696,21 @@ function parsePluginArguments(args) {
 	if (command !== "list" && !result.source && !(command === "uninstall" && result.operationId)) throw new Error("Specify @namespace/package or a local zip/tgz path");
 	if (result.source && !/^@[^/\s]+\/[^/\s]+$/u.test(result.source) && !isPluginArchive(result.source)) throw new Error("Use a namespace-qualified @namespace/package reference or local archive");
 	if (result.planOnly && result.exportPath) throw new Error("Plan and export are separate operations");
-	if (result.preparePath && (result.planOnly || result.exportPath || command !== "install")) throw new Error("Native handoff, plan and export are separate install operations");
-	if (result.root !== void 0 && !isPluginArchive(result.source ?? "") || result.operationId && command !== "uninstall" || (result.exportPath || result.root !== void 0) && command !== "install") throw new Error("Plugin option is invalid for this operation");
-	if (command === "list" && (result.source || result.version || result.planOnly || result.exportPath || result.operationId)) throw new Error("Invalid plugin list options");
+	if (result.planOnly && command !== "install") throw new Error("--plan is only available for plugin install");
+	if (result.preparePath && result.exportPath) throw new Error("Download and native handoff are separate operations");
+	if (command === "download" && (result.planOnly || result.preparePath)) throw new Error("Download only supports --output; use prepare for native handoff");
+	if (command === "prepare" && !result.agent) throw new Error("AGENT_REQUIRED: native handoff needs --agent claude-code or --agent codex");
+	if ((result.exportPath || result.preparePath) && ![
+		"install",
+		"update",
+		"download",
+		"prepare"
+	].includes(command)) throw new Error("Plugin option is invalid for this operation");
+	if (result.root !== void 0 && !isPluginArchive(result.source ?? "")) throw new Error("--root only applies to local plugin archives");
+	if (result.operationId && command !== "uninstall") throw new Error("--operation is only valid for uninstall");
+	if (command === "list" && (result.source || result.version || result.planOnly || result.exportPath || result.preparePath || result.operationId)) throw new Error("Invalid plugin list options");
+	if (command === "prepare" && result.planOnly) throw new Error("Plan and native handoff are separate operations");
+	if (result.format && !(command === "download" || result.exportPath)) throw new Error("--format requires download or --export");
 	return result;
 }
 export { PluginInstallRecords, PluginRegistryClient, inspectPluginArchive, isPluginArchive, isPluginVersion, materializePluginTree, normalizeRegistry, parsePackageIntent, parsePluginArguments, pluginArchiveLimits, pluginInstallKey, pluginSlotKey, pluginTargets, selectPluginRoot, sha256, treeDigest };

package/dist/_chunks/package-plugin.mjs

@@ -2,10 +2,10 @@ import { isCancel } from "./libs/@clack/core.mjs";
 import { confirm, select } from "./libs/@clack/prompts.mjs";
 import { PluginInstallRecords, PluginRegistryClient, inspectPluginArchive, isPluginArchive, isPluginVersion, materializePluginTree, normalizeRegistry, parsePluginArguments, pluginArchiveLimits, pluginInstallKey, pluginSlotKey, pluginTargets, selectPluginRoot, sha256, treeDigest } from "./intent.mjs";
 import { loadGlobalConfig, loadProjectConfig, resolveConfig } from "./config.mjs";
-import { credentialForRegistry } from "./client.mjs";
+import { credentialForRegistry } from "../cli.mjs";
 import { randomUUID } from "node:crypto";
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
-import { lstat, mkdir, open, readFile, readdir, realpath, writeFile } from "node:fs/promises";
+import { lstat, mkdir, open, readFile, readdir, realpath, rename, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { z } from "zod";
 import { execFile } from "node:child_process";
@@ -139,9 +139,9 @@ function nativeRequirements(tree, target) {
 	}
 	return [...requirements].sort();
 }
-const nativeNamePattern = /^[a-z][a-z0-9-]{0,63}$/u;
-const cwdFor = (identity) => identity.projectPath ?? homedir();
-const marketName = (identity, digest, directory) => `bfi-${pluginInstallKey(identity).slice(0, 20)}-${digest.slice(0, 12)}-${sha256(Buffer.from(directory)).slice(0, 12)}`;
+const nativeNamePattern$1 = /^[a-z][a-z0-9-]{0,63}$/u;
+const cwdFor$1 = (identity) => identity.projectPath ?? homedir();
+const marketName$1 = (identity, digest, directory) => `bfi-${pluginInstallKey(identity).slice(0, 20)}-${digest.slice(0, 12)}-${sha256(Buffer.from(directory)).slice(0, 12)}`;
 async function nativeDirectoryDigest(directory) {
 	const files = [];
 	let bytes = 0, entries = 0;
@@ -176,9 +176,9 @@ async function nativeList(runner, cwd, markets = false) {
 	if (!Array.isArray(result) || result.some((item) => !item || typeof item !== "object" || Array.isArray(item))) throw new Error("NATIVE_LIST_INVALID");
 	return result;
 }
-function contextValues(context) {
-	if (!context.nativeName || !nativeNamePattern.test(context.nativeName) || !/^[a-f0-9]{64}$/u.test(context.treeDigest ?? "") || basename(context.artifactDirectory) !== "plugin") throw new Error("NATIVE_CONTEXT_INVALID");
-	const market = marketName(context.identity, context.treeDigest, context.artifactDirectory);
+function contextValues$1(context) {
+	if (!context.nativeName || !nativeNamePattern$1.test(context.nativeName) || !/^[a-f0-9]{64}$/u.test(context.treeDigest ?? "") || basename(context.artifactDirectory) !== "plugin") throw new Error("NATIVE_CONTEXT_INVALID");
+	const market = marketName$1(context.identity, context.treeDigest, context.artifactDirectory);
 	return {
 		market,
 		selector: `${context.nativeName}@${market}`,
@@ -197,7 +197,7 @@ function contextValues(context) {
 async function recordValues(record) {
 	if (await nativeDirectoryDigest(record.artifactDirectory) !== record.treeDigest) throw new Error("NATIVE_CONTENT_CHANGED");
 	const manifest = JSON.parse(await readFile(join(record.artifactDirectory, ".claude-plugin/plugin.json"), "utf8"));
-	return contextValues({
+	return contextValues$1({
 		...record,
 		nativeName: manifest.name
 	});
@@ -233,7 +233,7 @@ const claudeAdapter = {
 		}
 	},
 	plan(context) {
-		const values = contextValues(context);
+		const values = contextValues$1(context);
 		return [{
 			command: "claude",
 			args: [
@@ -257,21 +257,21 @@ const claudeAdapter = {
 	},
 	async preflight(plan, runner) {
 		if (!plan.artifactDirectory) throw new Error("NATIVE_CONTEXT_INVALID");
-		const values = contextValues({
+		const values = contextValues$1({
 			...plan,
 			artifactDirectory: plan.artifactDirectory
 		});
-		const cwd = cwdFor(plan.identity);
+		const cwd = cwdFor$1(plan.identity);
 		if ((await nativeList(runner, cwd)).some((item) => typeof item.id !== "string" || item.id.split("@")[0] === plan.nativeName)) throw new Error("NATIVE_NAME_CONFLICT");
 		if ((await nativeList(runner, cwd, true)).some((item) => item.name === values.market)) throw new Error("NATIVE_MARKET_CONFLICT");
 	},
 	async install(plan, runner) {
 		if (!plan.artifactDirectory) throw new Error("NATIVE_CONTEXT_INVALID");
-		const values = contextValues({
+		const values = contextValues$1({
 			...plan,
 			artifactDirectory: plan.artifactDirectory
 		});
-		const cwd = cwdFor(plan.identity);
+		const cwd = cwdFor$1(plan.identity);
 		await this.preflight(plan, runner);
 		if (await nativeDirectoryDigest(plan.artifactDirectory) !== plan.treeDigest) throw new Error("NATIVE_CONTENT_CHANGED");
 		const nativeManifest = JSON.parse(await readFile(join(plan.artifactDirectory, ".claude-plugin/plugin.json"), "utf8"));
@@ -288,7 +288,7 @@ const claudeAdapter = {
 	},
 	async verify(record, runner) {
 		try {
-			const values = await recordValues(record), cwd = cwdFor(record.identity);
+			const values = await recordValues(record), cwd = cwdFor$1(record.identity);
 			const index = JSON.parse(await readFile(join(values.directory, ".claude-plugin/marketplace.json"), "utf8"));
 			if (JSON.stringify(index) !== JSON.stringify(values.manifest)) throw new Error("NATIVE_INDEX_CHANGED");
 			const market = (await nativeList(runner, cwd, true)).filter((item) => item.name === values.market);
@@ -309,7 +309,7 @@ const claudeAdapter = {
 		}
 	},
 	async uninstall(record, runner) {
-		const values = await recordValues(record), cwd = cwdFor(record.identity);
+		const values = await recordValues(record), cwd = cwdFor$1(record.identity);
 		await runner({
 			command: "claude",
 			args: [
@@ -324,7 +324,7 @@ const claudeAdapter = {
 	},
 	async verifyAbsent(record, runner) {
 		const values = await recordValues(record);
-		return !(await nativeList(runner, cwdFor(record.identity))).some((item) => item.id === values.selector && item.scope === record.identity.scope && (record.identity.scope === "user" || item.projectPath === record.identity.projectPath));
+		return !(await nativeList(runner, cwdFor$1(record.identity))).some((item) => item.id === values.selector && item.scope === record.identity.scope && (record.identity.scope === "user" || item.projectPath === record.identity.projectPath));
 	}
 };
 const codexRequirements = [
@@ -336,26 +336,75 @@ const codexRequirements = [
 	"executable-assets"
 ];
 async function prepareNativeHandoff(input) {
-	const { tree, target, scope, hostVersion, version } = input;
+	const { tree, target, scope, hostVersion, version, market } = input;
 	if (target !== "claude-code" && target !== "codex") throw new Error("NATIVE_HOST_UNVERIFIED");
 	if (hostVersion !== (target === "claude-code" ? "2.1.251" : "0.136.0")) throw new Error("HOST_VERSION_UNVERIFIED");
 	if (target === "codex" && scope !== "user") throw new Error("SCOPE_UNSUPPORTED");
+	if (!/^bfi-[a-f0-9]{24}$/u.test(market)) throw new Error("MARKET_NAME_INVALID");
 	const supported = target === "claude-code" ? claudeAdapter.capabilities : codexRequirements;
 	const missing = nativeRequirements(tree, target).filter((requirement) => !supported.includes(requirement));
 	if (missing.length) throw new Error(`NATIVE_COMPONENTS_UNSUPPORTED: ${missing.join(", ")}; original files retained; no skills fallback`);
 	const manifest = tree.manifests.find((item) => item.root === "" && item.format === (target === "claude-code" ? "CLAUDE" : "CODEX"));
 	if (!manifest?.name || !/^[a-z][a-z0-9-]{0,63}$/u.test(manifest.name) || !isPluginVersion(version) || manifest.version && manifest.version !== version) throw new Error("NATIVE_MANIFEST_UNSUPPORTED");
-	const destination = resolve(input.directory);
-	const directory = join(await realpath(dirname(destination)), destination.slice(dirname(destination).length + 1));
-	const market = `bfi-${target}-${tree.treeDigest.slice(0, 24)}`;
+	const requested = resolve(input.directory);
+	await mkdir(dirname(requested), {
+		recursive: true,
+		mode: 448
+	});
+	const root = join(await realpath(dirname(requested)), requested.slice(dirname(requested).length + 1));
+	await mkdir(root, {
+		recursive: true,
+		mode: 448
+	});
+	const pluginDirectory = join(root, "versions", version, "plugin");
+	const existing = await nativeDirectoryDigest(pluginDirectory).catch(() => null);
+	if (existing === null) {
+		await mkdir(join(root, "versions", version), {
+			recursive: true,
+			mode: 448
+		});
+		await materializePluginTree(tree, pluginDirectory);
+	} else if (existing !== tree.treeDigest) throw new Error("NATIVE_VERSION_CONTENT_CONFLICT: this version directory already contains different content; choose another --dir");
+	const indexDirectory = join(root, target === "claude-code" ? ".claude-plugin" : ".agents/plugins");
+	await mkdir(indexDirectory, {
+		recursive: true,
+		mode: 448
+	});
+	const indexFile = join(indexDirectory, "marketplace.json");
+	const source = `./versions/${version}/plugin`;
+	const entry = target === "claude-code" ? {
+		name: manifest.name,
+		version,
+		source
+	} : {
+		name: manifest.name,
+		version,
+		source: {
+			source: "local",
+			path: source
+		},
+		policy: { installation: "AVAILABLE" }
+	};
+	const previous = await readFile(indexFile, "utf8").then(JSON.parse).catch(() => null);
+	if (previous && previous.name !== market) throw new Error("MARKET_DIRECTORY_CONFLICT: this directory holds a different marketplace");
+	const plugins = Array.isArray(previous?.plugins) ? previous.plugins : [];
+	const index = {
+		...previous ?? {},
+		name: market,
+		owner: { name: "bfi" },
+		plugins: [...plugins.filter((item) => item?.name !== manifest.name), entry]
+	};
+	const temporary = `${indexFile}.${process.pid}.tmp`;
+	await writeFile(temporary, JSON.stringify(index, null, 2) + "\n", { mode: 384 });
+	await rename(temporary, indexFile);
 	const selector = `${manifest.name}@${market}`;
-	const commands = target === "claude-code" ? [{
+	const installCommands = target === "claude-code" ? [{
 		command: "claude",
 		args: [
 			"plugin",
 			"marketplace",
 			"add",
-			directory,
+			root,
 			"--scope",
 			scope
 		]
@@ -374,7 +423,40 @@ async function prepareNativeHandoff(input) {
 			"plugin",
 			"marketplace",
 			"add",
-			directory
+			root
+		]
+	}, {
+		command: "codex",
+		args: [
+			"plugin",
+			"add",
+			selector
+		]
+	}];
+	const updateCommands = target === "claude-code" ? [{
+		command: "claude",
+		args: [
+			"plugin",
+			"marketplace",
+			"update",
+			market
+		]
+	}, {
+		command: "claude",
+		args: [
+			"plugin",
+			"update",
+			selector,
+			"--scope",
+			scope
+		]
+	}] : [{
+		command: "codex",
+		args: [
+			"plugin",
+			"marketplace",
+			"add",
+			root
 		]
 	}, {
 		command: "codex",
@@ -384,45 +466,208 @@ async function prepareNativeHandoff(input) {
 			selector
 		]
 	}];
-	await mkdir(directory, { mode: 448 });
-	await materializePluginTree(tree, join(directory, "plugin"));
-	const indexDirectory = join(directory, target === "claude-code" ? ".claude-plugin" : ".agents/plugins");
-	await mkdir(indexDirectory, {
-		recursive: true,
-		mode: 448
-	});
-	const index = target === "claude-code" ? {
-		name: market,
-		owner: { name: "bfi" },
-		plugins: [{
-			name: manifest.name,
-			version,
-			source: "./plugin"
-		}]
-	} : {
-		name: market,
-		plugins: [{
-			name: manifest.name,
-			source: {
-				source: "local",
-				path: "./plugin"
-			}
-		}]
-	};
-	await writeFile(join(indexDirectory, "marketplace.json"), JSON.stringify(index, null, 2) + "\n", {
-		flag: "wx",
-		mode: 384
-	});
 	return {
 		state: "PREPARED_FOR_REVIEW",
-		directory,
+		directory: root,
+		market,
+		selector,
+		version,
+		pluginDirectory,
 		treeDigest: tree.treeDigest,
 		registered: false,
 		loaded: false,
-		commands,
-		instructions: "Review all plugin code and native-name conflicts first. Execute from the intended project only after user confirmation. Do not bypass trust. Keep this directory while installed. List/registration success is not runtime LOAD; restart the host and check all components. Use the native host for updates/removal; this handoff does not create bfi installation ownership."
+		commands: input.update ? updateCommands : installCommands,
+		installCommands,
+		updateCommands,
+		instructions: "Review all plugin code and native-name conflicts first. Execute from the intended project only after user confirmation. Do not bypass trust. Keep this directory while installed. List/registration success is not runtime LOAD; restart the host and check all components."
 	};
 }
+const nativeNamePattern = /^[a-z][a-z0-9-]{0,63}$/u;
+const scope = "user";
+const cwdFor = (identity) => identity.projectPath ?? homedir();
+const codexHome = () => process.env.CODEX_HOME?.trim() || join(homedir(), ".codex");
+const marketName = (identity, digest, directory) => `bfi-${pluginInstallKey(identity).slice(0, 20)}-${digest.slice(0, 12)}-${sha256(Buffer.from(directory)).slice(0, 12)}`;
+async function installedSelector(record) {
+	return record.installationId ?? null;
+}
+async function listed(runner, cwd) {
+	return (await runner({
+		command: "codex",
+		args: ["plugin", "list"]
+	}, { cwd })).stdout;
+}
+function contextValues(context) {
+	if (!context.nativeName || !nativeNamePattern.test(context.nativeName) || !/^[a-f0-9]{64}$/u.test(context.treeDigest ?? "")) throw new Error("NATIVE_CONTEXT_INVALID");
+	const market = marketName(context.identity, context.treeDigest, context.artifactDirectory);
+	return {
+		market,
+		directory: dirname(context.artifactDirectory),
+		selector: `${context.nativeName}@${market}`,
+		manifest: {
+			name: market,
+			interface: { displayName: `bfi ${context.nativeName}` },
+			plugins: [{
+				name: context.nativeName,
+				version: context.identity.version,
+				source: {
+					source: "local",
+					path: "./plugin"
+				},
+				policy: { installation: "AVAILABLE" }
+			}]
+		}
+	};
+}
+const codexAdapter = {
+	targetAgent: "codex",
+	version: "codex-public-v1",
+	hostVersions: ["0.136.0"],
+	scopes: [scope],
+	capabilities: [
+		"native-plugin",
+		"manifest:CODEX",
+		"manifest-field:skills",
+		"component:skills",
+		"component:agent-metadata",
+		"executable-assets"
+	],
+	async detect(runner, cwd) {
+		try {
+			return /^codex(?:-cli)? (\d+\.\d+\.\d+)\s*$/u.exec((await runner({
+				command: "codex",
+				args: ["--version"]
+			}, { cwd })).stdout)?.[1] ?? null;
+		} catch {
+			return null;
+		}
+	},
+	plan(context) {
+		const values = contextValues(context);
+		return [{
+			command: "codex",
+			args: [
+				"plugin",
+				"marketplace",
+				"add",
+				values.directory
+			]
+		}, {
+			command: "codex",
+			args: [
+				"plugin",
+				"add",
+				values.selector
+			]
+		}];
+	},
+	async preflight(plan, runner) {
+		if (!plan.artifactDirectory) throw new Error("NATIVE_CONTEXT_INVALID");
+		const values = contextValues({
+			...plan,
+			artifactDirectory: plan.artifactDirectory
+		});
+		const cwd = cwdFor(plan.identity);
+		if ((await runner({
+			command: "codex",
+			args: [
+				"plugin",
+				"marketplace",
+				"list"
+			]
+		}, { cwd })).stdout.split("\n").some((line) => line.trim().startsWith(values.market))) throw new Error("NATIVE_MARKET_CONFLICT");
+		if ((await listed(runner, cwd)).split("\n").some((line) => line.trim().startsWith(`${plan.nativeName}@`))) throw new Error("NATIVE_NAME_CONFLICT");
+	},
+	async install(plan, runner) {
+		if (!plan.artifactDirectory) throw new Error("NATIVE_CONTEXT_INVALID");
+		const values = contextValues({
+			...plan,
+			artifactDirectory: plan.artifactDirectory
+		});
+		const cwd = cwdFor(plan.identity);
+		await this.preflight(plan, runner);
+		if (await nativeDirectoryDigest(plan.artifactDirectory) !== plan.treeDigest) throw new Error("NATIVE_CONTENT_CHANGED");
+		const indexDirectory = join(values.directory, ".agents", "plugins");
+		await mkdir(indexDirectory, {
+			recursive: true,
+			mode: 448
+		});
+		await writeFile(join(indexDirectory, "marketplace.json"), JSON.stringify(values.manifest, null, 2) + "\n", {
+			flag: "wx",
+			mode: 384
+		});
+		for (const invocation of this.plan({
+			...plan,
+			artifactDirectory: plan.artifactDirectory
+		})) await runner(invocation, { cwd });
+	},
+	async verify(record, runner) {
+		try {
+			const selector = await installedSelector(record);
+			if (!selector) return {
+				verified: false,
+				installationId: "",
+				treeDigest: ""
+			};
+			const [nativeName, market] = selector.split("@");
+			if (!nativeName || !market) return {
+				verified: false,
+				installationId: "",
+				treeDigest: ""
+			};
+			if (!enabled(await readFile(join(codexHome(), "config.toml"), "utf8"), selector)) return {
+				verified: false,
+				installationId: "",
+				treeDigest: ""
+			};
+			const entry = (await listed(runner, cwdFor(record.identity))).split("\n").find((line) => line.trim().startsWith(selector));
+			if (!entry || !/installed(?:,\s*enabled)?/u.test(entry)) return {
+				verified: false,
+				installationId: "",
+				treeDigest: ""
+			};
+			const digest = await nativeDirectoryDigest(join(codexHome(), "plugins", "cache", market, nativeName, record.identity.version));
+			return {
+				verified: digest === record.treeDigest,
+				installationId: selector,
+				treeDigest: digest
+			};
+		} catch {
+			return {
+				verified: false,
+				installationId: "",
+				treeDigest: ""
+			};
+		}
+	},
+	async uninstall(record, runner) {
+		const selector = await installedSelector(record);
+		if (!selector) throw new Error("NATIVE_CONTEXT_INVALID");
+		await runner({
+			command: "codex",
+			args: [
+				"plugin",
+				"remove",
+				selector
+			]
+		}, { cwd: cwdFor(record.identity) });
+	},
+	async verifyAbsent(record, runner) {
+		const selector = await installedSelector(record);
+		if (!selector) return false;
+		return !(await listed(runner, cwdFor(record.identity)).catch(() => "")).split("\n").some((line) => line.trim().startsWith(selector));
+	}
+};
+function enabled(config, selector) {
+	const lines = config.split("\n");
+	const header = `[plugins."${selector}"]`;
+	const start = lines.findIndex((line) => line.trim() === header);
+	if (start < 0) return false;
+	for (const line of lines.slice(start + 1)) {
+		if (line.trim().startsWith("[")) break;
+		if (/^\s*enabled\s*=\s*true\s*$/u.test(line)) return true;
+	}
+	return false;
+}
 var targets = [
 	{
 		"id": "claude-code",
@@ -438,12 +683,12 @@ var targets = [
 	{
 		"id": "codex",
 		"name": "Codex",
-		"status": "EXPORT_ONLY",
+		"status": "NATIVE_GATED",
 		"versions": ["0.136.0"],
 		"scopes": ["user"],
 		"manifest": ".codex-plugin/plugin.json",
 		"docs": "https://learn.chatgpt.com/docs/plugins",
-		"reason": "已验证公开市场注册、安装和卸载接口；尚未满足自动安装的完整加载及归属验证门禁。项目级原生插件安装未验证。",
+		"reason": "适配器已按 0.136.0 的本地市场与 plugin add/remove/list 实现；仍需每个发布版本的运行时加载证据与服务端授权，项目级安装未验证。",
 		"manual": "仅原生 Codex 技能型插件可用 --prepare-native 生成完整目录和独立市场索引，再按输出执行 codex plugin marketplace add / plugin add。在 /plugins 检查实际启用；有 MCP、Hooks、Apps 或转换需求时停止，不把不支持的组件丢弃。"
 	},
 	{
@@ -480,7 +725,10 @@ var targets = [
 		"manual": "原生入口为 qwen extensions install；此处未验证隔离安装及组件保真，只导出。禁止自动把 Claude 插件转换成扩展或拆成技能。"
 	}
 ];
-const adapters = Object.freeze({ "claude-code": claudeAdapter });
+const adapters = Object.freeze({
+	"claude-code": claudeAdapter,
+	codex: codexAdapter
+});
 const reasons = {
 	"claude-code": ["EXACT_RELEASE_LOAD_EVIDENCE_REQUIRED", "SERVER_NATIVE_CAPABILITY_REQUIRED"],
 	codex: ["PUBLIC_INSTALL_VERIFIED", "EXACT_RUNTIME_LOAD_AND_OWNERSHIP_UNVERIFIED"],
@@ -663,6 +911,24 @@ async function uninstallNativePlugin(request) {
 }
 const exactId = z.string().regex(/^[1-9][0-9]*$/u);
 const digest = z.string().regex(/^[a-f0-9]{64}$/u);
+function baseName(source) {
+	if (source.startsWith("@")) return source.split("/")[1] ?? "plugin";
+	return basename(source).replace(/\.(?:zip|tgz|tar\.gz)$/iu, "");
+}
+function archiveFormat(path) {
+	if (/\.zip$/iu.test(path)) return "zip";
+	if (/\.tar\.gz$/iu.test(path)) return "tar.gz";
+	if (/\.tgz$/iu.test(path)) return "tgz";
+}
+function handoffMarket(identity) {
+	const source = identity.source.kind === "registry" ? `${identity.source.registry}|${identity.source.packageRef}` : identity.source.sourcePath;
+	return `bfi-${sha256(Buffer.from(JSON.stringify([
+		source,
+		identity.agent,
+		identity.scope,
+		identity.projectPath
+	]))).slice(0, 24)}`;
+}
 const releaseSchema = z.object({
 	id: exactId,
 	snapshotId: exactId,
@@ -770,7 +1036,7 @@ function matchingOperations(records, options, root, registry) {
 }
 async function runPluginPackage(args, globalOpts) {
 	const options = parsePluginArguments(args), cwd = await realpath(String(globalOpts.workdir ?? process.cwd()));
-	const chooseAgent = !options.agent && options.command !== "list";
+	const chooseAgent = !options.agent && options.command !== "list" && options.command !== "download" && !options.exportPath;
 	if (chooseAgent) {
 		if (options.json || options.confirmed || !process.stdin.isTTY || !process.stdout.isTTY) throw new Error("AGENT_REQUIRED: specify --agent; interactive installation will ask you to choose");
 		const agent = await select({
@@ -783,7 +1049,8 @@ async function runPluginPackage(args, globalOpts) {
 		if (isCancel(agent) || !pluginTargets.includes(agent)) throw new Error("NATIVE_CANCELLED");
 		options.agent = agent;
 	}
-	if (!options.scopeExplicit && options.command !== "list" && (chooseAgent || !options.planOnly && !options.exportPath)) {
+	if (!options.agent && (options.command === "download" || options.exportPath)) options.agent = "claude-code";
+	if (!options.scopeExplicit && options.command !== "list" && options.command !== "download" && (chooseAgent || !options.planOnly && !options.exportPath)) {
 		if (options.json || options.confirmed || !process.stdin.isTTY || !process.stdout.isTTY) throw new Error("SCOPE_REQUIRED: specify --scope user or --scope project; --yes does not choose a scope");
 		const scope = await select({
 			message: "选择插件安装范围",
@@ -844,8 +1111,14 @@ async function runPluginPackage(args, globalOpts) {
 	}
 	let archive, tree, identity, detail;
 	let serverCapability, archiveName = "plugin.zip", root = "";
-	const source = options.source;
-	if (isPluginArchive(source) && !source.startsWith("@")) {
+	const source = options.source, local = isPluginArchive(source) && !source.startsWith("@");
+	const exportRequested = options.command === "download" || Boolean(options.exportPath);
+	const localFormat = local ? archiveFormat(source) : void 0;
+	if (local && options.format && options.format !== localFormat) throw new Error("--format must match the local archive format");
+	if (options.format && !exportRequested) throw new Error("--format requires download or --export");
+	const format = exportRequested ? options.format ?? localFormat ?? archiveFormat(options.exportPath ?? "") ?? "zip" : "zip";
+	if (!local) archiveName = format === "zip" ? "plugin.zip" : format === "tar.gz" ? "plugin.tar.gz" : "plugin.tgz";
+	if (local) {
 		const sourcePath = await realpath(resolve(cwd, source));
 		archive = await readArchive(sourcePath);
 		archiveName = sourcePath;
@@ -907,13 +1180,12 @@ async function runPluginPackage(args, globalOpts) {
 			projectPath: options.scope === "project" ? cwd : null
 		};
 		serverCapability = summary.installCapabilities?.version === "1" ? summary.installCapabilities.targets.find((item) => item.targetAgent === agent && item.path === "native") : void 0;
-		archive = await registry.download(namespace, slug, version);
-		if (sha256(archive) !== detail.release.artifactSha256 || archive.length !== detail.release.artifactSize) throw new Error("Plugin archive digest/size integrity mismatch");
+		archive = await registry.download(namespace, slug, version, format);
+		if (format === "zip" && (sha256(archive) !== detail.release.artifactSha256 || archive.length !== detail.release.artifactSize)) throw new Error("Plugin archive digest/size integrity mismatch");
 		tree = await inspectPluginArchive(archive, archiveName);
 		if (tree.treeDigest !== detail.release.treeDigest) throw new Error("Plugin tree digest integrity mismatch");
 		checkFiles(detail, tree);
 	}
-	if (options.command === "update" && !records.read().active[pluginSlotKey(identity)]) throw new Error("This exact source/agent/scope is not installed; local changed-content archives are separate identities");
 	const artifactContainer = join(storeRoot, ".bfi", "plugin-artifacts", `${pluginInstallKey(identity)}-${randomUUID()}`);
 	const artifactDirectory = join(artifactContainer, "plugin");
 	const manifest = nativeManifestFormats[agent].map((format) => tree.manifests.find((item) => item.root === "" && item.format === format)).find(Boolean);
@@ -956,9 +1228,11 @@ async function runPluginPackage(args, globalOpts) {
 		}, null, 2));
 		return;
 	}
-	if (options.exportPath) {
-		const target = resolve(cwd, options.exportPath);
-		if (/\.zip$/iu.test(archiveName) !== /\.zip$/iu.test(target) || !isPluginArchive(target)) throw new Error("Export extension must match original archive format");
+	if (options.exportPath || options.command === "download") {
+		const suffix = format === "zip" ? ".zip" : format === "tar.gz" ? ".tar.gz" : ".tgz";
+		const target = resolve(cwd, options.exportPath ?? `${baseName(options.source)}-${identity.version}${suffix}`);
+		const targetFormat = archiveFormat(target);
+		if (!targetFormat || targetFormat === "zip" !== (format === "zip")) throw new Error("Export extension must match --format");
 		await writeFile(target, archive, {
 			flag: "wx",
 			mode: 384
@@ -966,17 +1240,18 @@ async function runPluginPackage(args, globalOpts) {
 		console.log(JSON.stringify({
 			state: "EXPORTED",
 			exported: target,
+			format,
+			version: identity.version,
 			archiveSha256: sha256(archive),
 			treeDigest: tree.treeDigest,
 			archiveRoot: root,
-			originalArchive: true,
 			installed: false,
 			registered: false,
 			loaded: false
 		}, null, 2));
 		return;
 	}
-	if (options.preparePath) {
+	if (options.preparePath || options.command === "prepare") {
 		if (detail.evidence.some((item) => item.targetAgent === agent && item.treeDigest === tree.treeDigest && (!item.hostVersion || item.hostVersion === hostVersion) && (item.result === "FAIL" || item.result === "UNSUPPORTED"))) throw new Error("COMPATIBILITY_CHECK_FAILED: native handoff blocked by recorded compatibility failure; complete export remains available");
 		if (plan.reasons.includes("CLI_UPGRADE_REQUIRED")) throw new Error("CLI_UPGRADE_REQUIRED");
 		console.log(JSON.stringify(await prepareNativeHandoff({
@@ -985,7 +1260,9 @@ async function runPluginPackage(args, globalOpts) {
 			scope: options.scope,
 			version: identity.version,
 			hostVersion,
-			directory: resolve(cwd, options.preparePath)
+			directory: resolve(cwd, options.preparePath ?? `${baseName(options.source)}-handoff`),
+			market: handoffMarket(identity),
+			update: options.command === "update"
 		}), null, 2));
 		return;
 	}

package/dist/_chunks/receipt.mjs

@@ -1,5 +1,5 @@
-import { checkPath, readConfig } from "../cli.mjs";
 import { canonical, hash } from "./digest.mjs";
+import { checkPath, readConfig } from "../cli.mjs";
 import { randomUUID } from "node:crypto";
 import { constants, realpathSync } from "node:fs";
 import { dirname, join, parse, resolve } from "node:path";

package/dist/cli.mjs

@@ -4,12 +4,12 @@ import { isCancel } from "./_chunks/libs/@clack/core.mjs";
 import { cancel, confirm, groupMultiselect, intro, log, multiselect as multiselect$1, note, outro, password, select, spinner } from "./_chunks/libs/@clack/prompts.mjs";
 import { require_picocolors } from "./_chunks/libs/picocolors.mjs";
 import { addSkillToLocalLock, addSkillToLock, computeSkillFolderHash, discoverSkills, dismissPrompt, filterSkills, getAllLockedSkills, getGitHubToken, getLastSelectedAgents, getSkillDisplayName, getSkillFromLock, isPromptDismissed, parseFrontmatter, parseSkillMd, readLocalLock, readSkillLock, removeSkillFromLock, sanitizeMetadata, saveSelectedAgents, stripTerminalEscapes } from "./_chunks/skills.mjs";
-import { PluginRegistryClient, parsePackageIntent } from "./_chunks/intent.mjs";
+import { PluginRegistryClient, normalizeRegistry, parsePackageIntent } from "./_chunks/intent.mjs";
 import { loadGlobalConfig, loadLockfile, loadProjectConfig, resolveConfig, saveGlobalConfig, saveLockfile, setConfigValue } from "./_chunks/config.mjs";
 import { esm_default } from "./_chunks/libs/simple-git.mjs";
 import { EVE_SUBAGENTS_DIR, agents, detectInstalledAgents, getEveSubagents, getNonUniversalAgents, getUniversalAgents, getVisibleUniversalAgents, isUniversalAgent } from "./_chunks/agents.mjs";
-import { packageSkillName } from "./_chunks/package-skill-identity.mjs";
 import { entriesFromJson, mapStrings, normalizeConfig, object, resolveVariables, validName, variablePattern, variables } from "./_chunks/model.mjs";
+import { hash, verifyPlan } from "./_chunks/digest.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "fs";
 import { basename, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "path";
@@ -23,7 +23,7 @@ import * as readline from "readline";
 import { Writable } from "stream";
 import https from "node:https";
 import http from "node:http";
-import { lstat, mkdir, open, rename, unlink } from "node:fs/promises";
+import { lstat, mkdir, open, readFile, rename, unlink, writeFile } from "node:fs/promises";
 import zlib, { gunzipSync, inflateRawSync } from "node:zlib";
 import os$1, { homedir as homedir$1 } from "node:os";
 import { promisify } from "util";
@@ -3560,7 +3560,7 @@ async function installFromSkillHub(parsed, options, spinner) {
 		process.exit(1);
 	}
 	if (options.packageSkill) {
-		const { scopePackageSkill } = await import("./_chunks/package-skill-identity.mjs").then((n) => n.package_skill_identity_exports);
+		const { scopePackageSkill } = await Promise.resolve().then(() => package_skill_identity_exports);
 		try {
 			return {
 				skills: scopePackageSkill(skills, namespace, slug),
@@ -5514,7 +5514,20 @@ async function runUpdate(args = []) {
 		totalFail += failCount;
 		totalFound += foundCount;
 	}
-	if (options.skills && totalFound === 0) console.log(`${DIM$9}未找到匹配的已安装技能：${options.skills.join(", ")}${RESET$9}`);
+	if (options.skills && totalFound === 0) {
+		console.log(`${DIM$9}未找到安装记录，按首次安装重新获取：${options.skills.join(", ")}${RESET$9}`);
+		const { runAdd } = await Promise.resolve().then(() => add_exports);
+		for (const skill of options.skills) try {
+			await runAdd([skill], {
+				yes: true,
+				global: options.global || scope === "global"
+			});
+			totalSuccess += 1;
+		} catch (error) {
+			totalFail += 1;
+			console.log(`${DIM$9}✗ ${skill}：${error instanceof Error ? error.message : "安装失败"}${RESET$9}`);
+		}
+	}
 	console.log();
 	if (totalSuccess > 0) console.log(`${TEXT$7}✓ 已更新 ${totalSuccess} 个技能${RESET$9}`);
 	if (totalFail > 0) {
@@ -6984,6 +6997,162 @@ function maybePrintAnalyticsNotice(env = process.env) {
 		console.log();
 	} catch {}
 }
+function registryUrl(value) {
+	const url = new URL(value);
+	if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.search || url.hash) throw new Error("无效的 registry 地址。");
+	return url.toString().replace(/\/$/, "");
+}
+function credentialForRegistry(registry, config) {
+	return config?.token && registryUrl(registry) === registryUrl(config.registry ?? "https://bfi.yyuap.com:811") ? config.token : void 0;
+}
+async function readResponse(response, limit) {
+	const chunks = [];
+	let size = 0;
+	if (!response.body) throw new Error("服务返回空响应。");
+	const reader = response.body.getReader();
+	try {
+		while (true) {
+			const chunk = await reader.read();
+			if (chunk.done) break;
+			size += chunk.value.length;
+			if (size > limit) throw new Error("响应超过安全大小上限。");
+			chunks.push(chunk.value);
+		}
+	} finally {
+		await reader.cancel().catch(() => {});
+	}
+	return Buffer.concat(chunks);
+}
+var InstallationClient = class {
+	registry;
+	token;
+	fetcher;
+	constructor(registry, token, fetcher = fetch) {
+		this.registry = registryUrl(registry);
+		this.token = token;
+		this.fetcher = fetcher;
+	}
+	async request(path, method = "GET", body) {
+		const headers = { Accept: "application/json" };
+		if (this.token) headers.Authorization = `Bearer ${this.token}`;
+		if (method === "POST") {
+			headers["Content-Type"] = "application/json";
+			if (!this.token) {
+				const initial = await this.request("/api/web/mcps?size=1");
+				const cookie = initial.headers.get("set-cookie")?.match(/(?:^|,\s*)XSRF-TOKEN=([^;]+)/)?.[1];
+				await initial.body?.cancel();
+				if (!cookie) throw new Error("无法获取匿名 CSRF 凭据，请检查服务配置。");
+				headers.Cookie = `XSRF-TOKEN=${cookie}`;
+				headers["X-XSRF-TOKEN"] = decodeURIComponent(cookie);
+			}
+		}
+		let response;
+		try {
+			response = await this.fetcher(`${this.registry}${path}`, {
+				method,
+				headers,
+				body: body === void 0 ? void 0 : JSON.stringify(body),
+				redirect: "error",
+				signal: AbortSignal.timeout(12e4)
+			});
+		} catch {
+			throw new Error("网络连接失败或服务重定向；未转发登录凭据。");
+		}
+		if (response.status === 401) throw new Error("登录无效或需要登录，请运行 bfi auth login 后重试。");
+		if (response.status === 403) throw new Error("权限不足或 CSRF 校验失败；不会覆盖现有登录。");
+		if (response.status >= 300 && response.status < 400) throw new Error("不允许服务重定向。");
+		if (!response.ok) throw new Error(`安装服务请求失败（HTTP ${response.status}），请检查权限、计划有效期和服务版本。`);
+		return response;
+	}
+	async plan(response, kind, ref, id) {
+		const envelope = JSON.parse((await readResponse(response, 12 * 1024 ** 2)).toString("utf8"));
+		if (envelope.code !== 0) throw new Error("安装服务拒绝请求。");
+		const plan = verifyPlan(envelope.data);
+		if (registryUrl(plan.registry) !== this.registry || plan.kind !== kind || plan.ref !== ref || id && plan.id !== id) throw new Error("计划与请求来源或资源不匹配。");
+		if (Date.parse(plan.expiresAt) <= Date.now()) throw new Error("内容计划已过期，请重新确认最新内容。");
+		return plan;
+	}
+	async resolve(kind, ref) {
+		return this.plan(await this.request("/api/v1/installation-content-plans", "POST", {
+			kind,
+			ref
+		}), kind, ref);
+	}
+	async get(id, kind, ref) {
+		return this.plan(await this.request(`/api/v1/installation-content-plans/${encodeURIComponent(id)}`), kind, ref, id);
+	}
+	async artifact(plan) {
+		const response = await this.request(`/api/v1/installation-content-plans/${encodeURIComponent(plan.id)}/artifact`);
+		const bytes = await readResponse(response, 510 * 1024 ** 2);
+		if (response.headers.get("X-Archive-SHA256") !== hash(bytes)) throw new Error("下载归档摘要不匹配。");
+		return bytes;
+	}
+	async verifyAccount() {
+		if (!this.token) throw new Error("BFI MCP 需要本机登录态，请先运行 bfi auth login；不会把 Token 写进 MCP 配置。");
+		const response = await this.request("/api/v1/whoami");
+		let envelope;
+		try {
+			envelope = JSON.parse((await readResponse(response, 1048576)).toString("utf8"));
+		} catch {
+			throw new Error("本机 BFI 登录响应无效；未覆盖现有登录。");
+		}
+		if (!envelope || typeof envelope !== "object") throw new Error("本机 BFI 登录响应无效。");
+		if (envelope.code !== void 0 && envelope.code !== 0) throw new Error("本机 BFI 登录态验证失败。");
+		const data = envelope.data ?? envelope;
+		if (!data?.id && !data?.user?.id) throw new Error("本机 BFI 登录响应无效。");
+	}
+};
+function printArchiveHeaders(globalOpts) {
+	const { registry } = resolveConfig(globalOpts);
+	const token = typeof globalOpts.token === "string" ? globalOpts.token : credentialForRegistry(registry, loadGlobalConfig());
+	if (!token) throw new Error("BFI_TOKEN_REQUIRED: run bfi auth login first");
+	console.log(JSON.stringify({ Authorization: `Bearer ${token}` }));
+}
+async function addClaudeMarketplace(namespace, globalOpts) {
+	const { registry } = resolveConfig(globalOpts);
+	const base = normalizeRegistry(String(registry));
+	const url = `${base}/api/web/namespaces/${encodeURIComponent(namespace)}/plugin-marketplace.json`;
+	const market = `skillhub-${namespace}`;
+	const path = join$1(homedir$1(), ".claude", "settings.json");
+	const existing = await readFile(path, "utf8").then(JSON.parse).catch(() => ({}));
+	if (!existing || typeof existing !== "object" || Array.isArray(existing)) throw new Error("CLAUDE_SETTINGS_INVALID");
+	const known = { ...existing.extraKnownMarketplaces };
+	known[market] = { source: {
+		source: "url",
+		url,
+		headersHelper: `bfi skills package archive-headers --registry ${base}`
+	} };
+	existing.extraKnownMarketplaces = known;
+	await mkdir(dirname$1(path), {
+		recursive: true,
+		mode: 448
+	});
+	const temporary = `${path}.${process.pid}.tmp`;
+	await writeFile(temporary, JSON.stringify(existing, null, 2) + "\n", { mode: 384 });
+	await rename(temporary, path);
+	return {
+		market,
+		url,
+		settings: path,
+		next: `claude plugin install <plugin>@${market} --scope user`,
+		message: "Claude Code 将通过 headersHelper 使用 bfi 当前登录态读取市场和归档；安装后可用 claude plugin update 更新。"
+	};
+}
+var package_skill_identity_exports = /* @__PURE__ */ __exportAll({
+	packageSkillName: () => packageSkillName,
+	scopePackageSkill: () => scopePackageSkill
+});
+function packageSkillName(namespace, slug) {
+	if (!namespace || !slug) throw new Error("Namespace and slug are required");
+	return `bfi-skill-${createHash("sha256").update(JSON.stringify([namespace, slug])).digest("hex")}`;
+}
+function scopePackageSkill(skills, namespace, slug) {
+	if (skills.length !== 1) throw new Error("A package reference must resolve to exactly one skill");
+	return [{
+		...skills[0],
+		name: packageSkillName(namespace, slug)
+	}];
+}
 function checkNode(node) {
 	if (node.type === "object") {
 		const keys = (node.children ?? []).map((child) => String(child.children?.[0]?.value));
@@ -7536,6 +7705,12 @@ async function dispatchPackage(args, globalOpts) {
 		case "up":
 			await handleUpdate(args.slice(1), api, globalOpts);
 			break;
+		case "marketplace":
+			await handleMarketplace(args.slice(1), globalOpts);
+			break;
+		case "archive-headers":
+			printArchiveHeaders(globalOpts);
+			break;
 		case "search":
 			await handleSearch(args.slice(1), api, globalOpts);
 			break;
@@ -7788,11 +7963,11 @@ async function handleInstall(args, api, globalOpts) {
 		console.log(`${DIM$3}范围：${installGlobally ? "全局" : "项目"}  |  方式：${installMode === "symlink" ? "符号链接" : "复制"}${RESET$3}`);
 		console.log();
 	} else {
-		const spinner$2 = spinner();
-		spinner$2.start("正在加载 Agent...");
+		const spinner$1 = spinner();
+		spinner$1.start("正在加载 Agent...");
 		const installedAgents = await detectInstalledAgents();
 		const totalAgents = Object.keys(agents).length;
-		spinner$2.stop(`${totalAgents} agents`);
+		spinner$1.stop(`${totalAgents} agents`);
 		const skillNames = skills.map((s) => s.displayName || s.slug);
 		const skillSubject = skillNames.length <= 3 ? skillNames.map((n) => import_picocolors.default.cyan(n)).join(", ") : `${skills.length} 个技能`;
 		if (installedAgents.includes("eve")) {
@@ -7975,12 +8150,12 @@ async function handleInstall(args, api, globalOpts) {
 	try {
 		const archive = join(work, "package.zip");
 		const unpack = join(work, "content");
-		const spinner$1 = spinner();
-		spinner$1.start("正在下载组合包...");
+		const spinner$2 = spinner();
+		spinner$2.start("正在下载组合包...");
 		await api.downloadPackage(namespace, slug, archive);
-		spinner$1.message("正在解压组合包...");
+		spinner$2.message("正在解压组合包...");
 		await extractZip(archive, unpack);
-		spinner$1.stop("组合包已就绪，开始安装技能");
+		spinner$2.stop("组合包已就绪，开始安装技能");
 		const entries = await readdir(unpack, { withFileTypes: true });
 		if (entries.some((entry) => entry.isFile() && entry.name === "mcp.json")) mcpFile = join(unpack, "mcp.json");
 		const directories = entries.filter((entry) => entry.isDirectory());
@@ -8158,10 +8333,7 @@ async function handleUpdate(args, api, globalOpts) {
 	const pkgs = lock.packages || {};
 	if (pkgRef) {
 		const { namespace, slug } = parseSkillRef(pkgRef, globalOpts.namespace);
-		if (!pkgs[`@${namespace}/${slug}`]) {
-			console.log(`${YELLOW$1}包未安装：@${namespace}/${slug}${RESET$3}`);
-			return;
-		}
+		if (!pkgs[`@${namespace}/${slug}`]) console.log(`${DIM$3}未找到安装记录，按首次安装重新执行：@${namespace}/${slug}${RESET$3}`);
 		packagesToUpdate.push({
 			namespace,
 			slug
@@ -8196,6 +8368,12 @@ async function handleUpdate(args, api, globalOpts) {
 	}
 	console.log(`${GREEN$2}✓ 包更新完成${RESET$3}`);
 }
+async function handleMarketplace(args, globalOpts) {
+	const [action, namespace] = args;
+	if (action !== "add" || !namespace) throw new Error("用法：bfi skills package marketplace add <namespace>");
+	const result = await addClaudeMarketplace(namespace, globalOpts);
+	console.log(JSON.stringify(result, null, 2));
+}
 async function handleSearch(args, api, globalOpts) {
 	const query = args.filter((a) => !a.startsWith("--")).join(" ") || void 0;
 	const json = args.includes("--json");
@@ -10488,6 +10666,11 @@ ${BOLD}━━━ 技能包管理 ━━━${RESET}
     --prepare-native <dir>  准备完整原生目录和市场索引，审阅后交给宿主安装；不注册、不转技能
     --agent <a>      目标 agent（如 claude-code、codex、zcode）
     --global         安装到主目录（跨项目可用）
+  skills package download <ref> --as plugin [--output <file>] [--format zip|tgz|tar.gz]  下载并校验插件归档（不安装、不需要 --agent）
+  skills package prepare <ref> --as plugin --agent <a> [--dir <dir>]  生成版本化原生目录并更新市场索引
+  skills package update <ref> --as plugin [--agent <a>]  按默认安装版本重新下载/交接，不依赖安装记录
+  skills package marketplace add <namespace>  将命名空间注册为 Claude Code 市场（settings.json）
+  skills package archive-headers              输出 marketplace/归档所需的认证头（供 headersHelper 调用）
 
 ${BOLD}━━━ 文档 ━━━${RESET}
   docs upload <file>    上传文档
@@ -10954,4 +11137,4 @@ main().catch((e) => {
 	console.error(`✗ ${e?.message || e}`);
 	process.exit(1);
 });
-export { SkillHubAPI, agentIds, applyPlan, checkPath, decodeServer, getAgentBaseDir, loadTarget, planInstall, planRemove, readConfig, readDocument, serversIn, targetFor, writeConfig };
+export { InstallationClient, SkillHubAPI, agentIds, applyPlan, checkPath, credentialForRegistry, decodeServer, getAgentBaseDir, loadTarget, planInstall, planRemove, readConfig, readDocument, registryUrl, serversIn, targetFor, writeConfig };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bfi-cli",
-  "version": "0.1.103",
+  "version": "0.1.104",
   "description": "用友大业财BFI统一命令行工具，支持技能，技能包，元数据，UI元数据等",
   "type": "module",
   "bin": {

package/dist/_chunks/client.mjs

@@ -1,107 +0,0 @@
-import { hash, verifyPlan } from "./digest.mjs";
-function registryUrl(value) {
-	const url = new URL(value);
-	if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.search || url.hash) throw new Error("无效的 registry 地址。");
-	return url.toString().replace(/\/$/, "");
-}
-function credentialForRegistry(registry, config) {
-	return config?.token && registryUrl(registry) === registryUrl(config.registry ?? "https://bfi.yyuap.com:811") ? config.token : void 0;
-}
-async function readResponse(response, limit) {
-	const chunks = [];
-	let size = 0;
-	if (!response.body) throw new Error("服务返回空响应。");
-	const reader = response.body.getReader();
-	try {
-		while (true) {
-			const chunk = await reader.read();
-			if (chunk.done) break;
-			size += chunk.value.length;
-			if (size > limit) throw new Error("响应超过安全大小上限。");
-			chunks.push(chunk.value);
-		}
-	} finally {
-		await reader.cancel().catch(() => {});
-	}
-	return Buffer.concat(chunks);
-}
-var InstallationClient = class {
-	registry;
-	token;
-	fetcher;
-	constructor(registry, token, fetcher = fetch) {
-		this.registry = registryUrl(registry);
-		this.token = token;
-		this.fetcher = fetcher;
-	}
-	async request(path, method = "GET", body) {
-		const headers = { Accept: "application/json" };
-		if (this.token) headers.Authorization = `Bearer ${this.token}`;
-		if (method === "POST") {
-			headers["Content-Type"] = "application/json";
-			if (!this.token) {
-				const initial = await this.request("/api/web/mcps?size=1");
-				const cookie = initial.headers.get("set-cookie")?.match(/(?:^|,\s*)XSRF-TOKEN=([^;]+)/)?.[1];
-				await initial.body?.cancel();
-				if (!cookie) throw new Error("无法获取匿名 CSRF 凭据，请检查服务配置。");
-				headers.Cookie = `XSRF-TOKEN=${cookie}`;
-				headers["X-XSRF-TOKEN"] = decodeURIComponent(cookie);
-			}
-		}
-		let response;
-		try {
-			response = await this.fetcher(`${this.registry}${path}`, {
-				method,
-				headers,
-				body: body === void 0 ? void 0 : JSON.stringify(body),
-				redirect: "error",
-				signal: AbortSignal.timeout(12e4)
-			});
-		} catch {
-			throw new Error("网络连接失败或服务重定向；未转发登录凭据。");
-		}
-		if (response.status === 401) throw new Error("登录无效或需要登录，请运行 bfi auth login 后重试。");
-		if (response.status === 403) throw new Error("权限不足或 CSRF 校验失败；不会覆盖现有登录。");
-		if (response.status >= 300 && response.status < 400) throw new Error("不允许服务重定向。");
-		if (!response.ok) throw new Error(`安装服务请求失败（HTTP ${response.status}），请检查权限、计划有效期和服务版本。`);
-		return response;
-	}
-	async plan(response, kind, ref, id) {
-		const envelope = JSON.parse((await readResponse(response, 12 * 1024 ** 2)).toString("utf8"));
-		if (envelope.code !== 0) throw new Error("安装服务拒绝请求。");
-		const plan = verifyPlan(envelope.data);
-		if (registryUrl(plan.registry) !== this.registry || plan.kind !== kind || plan.ref !== ref || id && plan.id !== id) throw new Error("计划与请求来源或资源不匹配。");
-		if (Date.parse(plan.expiresAt) <= Date.now()) throw new Error("内容计划已过期，请重新确认最新内容。");
-		return plan;
-	}
-	async resolve(kind, ref) {
-		return this.plan(await this.request("/api/v1/installation-content-plans", "POST", {
-			kind,
-			ref
-		}), kind, ref);
-	}
-	async get(id, kind, ref) {
-		return this.plan(await this.request(`/api/v1/installation-content-plans/${encodeURIComponent(id)}`), kind, ref, id);
-	}
-	async artifact(plan) {
-		const response = await this.request(`/api/v1/installation-content-plans/${encodeURIComponent(plan.id)}/artifact`);
-		const bytes = await readResponse(response, 510 * 1024 ** 2);
-		if (response.headers.get("X-Archive-SHA256") !== hash(bytes)) throw new Error("下载归档摘要不匹配。");
-		return bytes;
-	}
-	async verifyAccount() {
-		if (!this.token) throw new Error("BFI MCP 需要本机登录态，请先运行 bfi auth login；不会把 Token 写进 MCP 配置。");
-		const response = await this.request("/api/v1/whoami");
-		let envelope;
-		try {
-			envelope = JSON.parse((await readResponse(response, 1048576)).toString("utf8"));
-		} catch {
-			throw new Error("本机 BFI 登录响应无效；未覆盖现有登录。");
-		}
-		if (!envelope || typeof envelope !== "object") throw new Error("本机 BFI 登录响应无效。");
-		if (envelope.code !== void 0 && envelope.code !== 0) throw new Error("本机 BFI 登录态验证失败。");
-		const data = envelope.data ?? envelope;
-		if (!data?.id && !data?.user?.id) throw new Error("本机 BFI 登录响应无效。");
-	}
-};
-export { InstallationClient, credentialForRegistry, registryUrl };

package/dist/_chunks/package-skill-identity.mjs

@@ -1,18 +0,0 @@
-import { __exportAll } from "./rolldown-runtime.mjs";
-import { createHash } from "node:crypto";
-var package_skill_identity_exports = /* @__PURE__ */ __exportAll({
-	packageSkillName: () => packageSkillName,
-	scopePackageSkill: () => scopePackageSkill
-});
-function packageSkillName(namespace, slug) {
-	if (!namespace || !slug) throw new Error("Namespace and slug are required");
-	return `bfi-skill-${createHash("sha256").update(JSON.stringify([namespace, slug])).digest("hex")}`;
-}
-function scopePackageSkill(skills, namespace, slug) {
-	if (skills.length !== 1) throw new Error("A package reference must resolve to exactly one skill");
-	return [{
-		...skills[0],
-		name: packageSkillName(namespace, slug)
-	}];
-}
-export { packageSkillName, package_skill_identity_exports };