bfi-cli 0.1.89 → 0.1.92

package/README.md

@@ -0,0 +1,40 @@
+# BFI CLI：技能包与可选插件
+
+技能安装沿用 skills.sh 衍生安装器。技能包默认仍是技能的组合；插件导入、编辑、发布在同一个包的可选插件能力中管理，两者的内容和版本独立。
+
+## 默认安装技能
+
+```sh
+bfi package install @team/kit --agent claude-code
+```
+
+默认不会安装 Hook、MCP 或原生插件。包内来源保留完整 `@namespace/skill`，不同空间的同名技能使用来源 hash 派生的独立安装目录，原始 SKILL.md 不改写；不再按裸 slug 合并。
+
+旧安装记录不会静默迁移或批量删除；无法证明归属或没有确认卸载成功时保留记录并提示。独立 `bfi add` 的命名不因此改变。
+
+## 明确选择插件
+
+```sh
+bfi package install @team/kit --as plugin --agent claude-code --version 1.0.0 --plan
+bfi package install @team/kit --as plugin --agent claude-code --version 1.0.0 --export ./kit-1.0.0.zip
+bfi package install ./kit.tgz --as plugin --agent codex --root bundle --version 1.0.0 --plan
+bfi package list --as plugin --scope project
+```
+
+- 当前 Claude Code、Codex、ZCode、CodeBuddy、Qwen Code 均为 **EXPORT_ONLY**。尚未取得完整运行时/安装归属证据，不执行原生安装或静默退回只装技能。
+- `--plan` 只给计划/阻断原因；`--export` 原样导出归档，不计作安装。目标文件必须不存在，扩展名与源格式一致。
+- 市场来源必须写完整名称 `@namespace/package`，不要求用户输入数据库 ID。未指定版本时只解析一次可见 stable；没有 stable 则要求明确版本，不猜 latest。
+- 本地支持 zip/tgz/tar.gz，多根必须用 `--root` 选择；保留全部原始文件、执行位和未知字段，不自动转换各宿主格式。缺原生版本时可用 `--version` 描述本地导出身份，但不会改源文件或绕过市场正式发布的版本校验。
+- `--scope project` 为默认；`--scope user`（或 `-g`）显式选择用户范围。插件独立使用 `.bfi/plugin-lock.json`，不与旧技能锁混用。
+- 未知安装结果保留 PREPARED 并阻止盲目重试；更新/卸载必须证明精确来源、宿主、范围、版本及安装归属。
+
+服务器插件功能默认开启；显式设置 `PACKAGE_PLUGIN_ENABLED=false` 时仍可使用既有技能包，但插件市场操作不可用。本地原始包计划/导出不等于服务器发布。
+
+## 开发验证
+
+```sh
+pnpm exec vitest run src/commands/package.test.ts src/commands/package-plugin.test.ts src/lib/plugin src/test-utils.test.ts
+pnpm build
+```
+
+官方样本用例需显式 `SKILLHUB_PLUGIN_FIXTURES`；不要为测试使用生产数据源或真实 Agent 用户配置。CLI 子进程测试工具使用临时 HOME 和环境白名单。完整限制、继承的失败用例、数据库发布门禁及本次测试事故见 `../docs/testing/package-plugin-release-checklist.md`。

package/dist/_chunks/agents2.mjs

@@ -1,8 +1,17 @@
+import { loadGlobalConfig } from "./config.mjs";
 import { agents } from "./agents.mjs";
-import { loadGlobalConfig } from "../cli.mjs";
 import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
+function parseCapabilities(json) {
+	if (!json) return null;
+	try {
+		const parsed = JSON.parse(json);
+		return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+	} catch {
+		return null;
+	}
+}
 const CACHE_FILE = path.join(os.homedir(), ".bfi", "agents-cache.json");
 function makeDetectInstalled(globalSkillsDir) {
 	return async () => {
@@ -45,9 +54,14 @@ function mapToAgentConfig(a) {
 		skillsDir: a.skillsDir,
 		globalSkillsDir: gsd,
 		sortOrder: typeof a.sortOrder === "number" ? a.sortOrder : 0,
+		capabilities: mapCapabilities(a),
 		detectInstalled: makeDetectInstalled(gsd)
 	};
 }
+function mapCapabilities(agent) {
+	if (typeof agent.capabilitiesJson === "string") return parseCapabilities(agent.capabilitiesJson) ?? void 0;
+	return agent.capabilities ?? void 0;
+}
 function mapCustomEntry(name, entry) {
 	const gsd = expandTilde(entry.globalSkillsDir || void 0);
 	return {

package/dist/_chunks/config.mjs

@@ -0,0 +1,141 @@
+import { __exportAll } from "./rolldown-runtime.mjs";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+var config_exports = /* @__PURE__ */ __exportAll({
+	GLOBAL_CONFIG_DIR: () => GLOBAL_CONFIG_DIR,
+	GLOBAL_CONFIG_FILE: () => GLOBAL_CONFIG_FILE,
+	LOCK_FILE: () => LOCK_FILE,
+	PROJECT_CONFIG_FILE: () => PROJECT_CONFIG_FILE,
+	getConfigValue: () => getConfigValue,
+	loadGlobalConfig: () => loadGlobalConfig,
+	loadLockfile: () => loadLockfile,
+	loadProjectConfig: () => loadProjectConfig,
+	resolveConfig: () => resolveConfig,
+	saveGlobalConfig: () => saveGlobalConfig,
+	saveLockfile: () => saveLockfile,
+	saveProjectConfig: () => saveProjectConfig,
+	setConfigValue: () => setConfigValue
+});
+const GLOBAL_CONFIG_DIR = path.join(os.homedir(), ".bfi");
+const GLOBAL_CONFIG_FILE = path.join(GLOBAL_CONFIG_DIR, "config.json");
+const PROJECT_CONFIG_FILE = ".bfirc";
+const LOCK_FILE_DIR = ".bfi";
+const LOCK_FILE = path.join(LOCK_FILE_DIR, "lock.json");
+function resolveConfig(globalOpts = {}) {
+	return {
+		registry: getConfigValue("registry", globalOpts) || "https://bfi.yyuap.com:811",
+		token: getConfigValue("token", globalOpts) || null,
+		namespace: getConfigValue("namespace", globalOpts) || "global",
+		ide: getConfigValue("ide", globalOpts) || null
+	};
+}
+function loadGlobalConfig() {
+	try {
+		if (fs.existsSync(GLOBAL_CONFIG_FILE)) {
+			const content = fs.readFileSync(GLOBAL_CONFIG_FILE, "utf8");
+			return JSON.parse(content);
+		}
+	} catch (error) {
+		console.warn(`Warning: Failed to load global config: ${error.message}`);
+	}
+	return null;
+}
+function saveGlobalConfig(config) {
+	try {
+		if (!fs.existsSync(GLOBAL_CONFIG_DIR)) fs.mkdirSync(GLOBAL_CONFIG_DIR, {
+			recursive: true,
+			mode: 448
+		});
+		const content = JSON.stringify(config, null, 2);
+		fs.writeFileSync(GLOBAL_CONFIG_FILE, content, { mode: 384 });
+		return true;
+	} catch (error) {
+		throw new Error(`Failed to save global config: ${error.message}`);
+	}
+}
+function loadProjectConfig(workdir) {
+	try {
+		const configPath = path.join(workdir, PROJECT_CONFIG_FILE);
+		if (fs.existsSync(configPath)) {
+			const content = fs.readFileSync(configPath, "utf8");
+			return JSON.parse(content);
+		}
+	} catch (error) {
+		console.warn(`Warning: Failed to load project config: ${error.message}`);
+	}
+	return null;
+}
+function saveProjectConfig(workdir, config) {
+	try {
+		const configPath = path.join(workdir, PROJECT_CONFIG_FILE);
+		const content = JSON.stringify(config, null, 2);
+		fs.writeFileSync(configPath, content);
+		return true;
+	} catch (error) {
+		throw new Error(`Failed to save project config: ${error.message}`);
+	}
+}
+function loadLockfile(workdir) {
+	try {
+		const lockPath = path.join(workdir, LOCK_FILE);
+		if (fs.existsSync(lockPath)) {
+			const content = fs.readFileSync(lockPath, "utf8");
+			return JSON.parse(content);
+		}
+	} catch (error) {
+		console.warn(`Warning: Failed to load lockfile: ${error.message}`);
+	}
+	return {
+		version: 1,
+		skills: {},
+		packages: {}
+	};
+}
+function saveLockfile(workdir, lock) {
+	try {
+		const lockDir = path.join(workdir, LOCK_FILE_DIR);
+		if (!fs.existsSync(lockDir)) fs.mkdirSync(lockDir, { recursive: true });
+		const lockPath = path.join(workdir, LOCK_FILE);
+		const content = JSON.stringify(lock, null, 2);
+		fs.writeFileSync(lockPath, content);
+		return true;
+	} catch (error) {
+		throw new Error(`Failed to save lockfile: ${error.message}`);
+	}
+}
+function getConfigValue(key, globalOpts = {}) {
+	const projectConfig = loadProjectConfig(globalOpts.workdir || process.cwd());
+	const globalConfig = loadGlobalConfig();
+	const configMap = {
+		registry: globalOpts.registry || projectConfig && projectConfig.registry || globalConfig && globalConfig.registry || null,
+		token: globalOpts.token || projectConfig && projectConfig.token || globalConfig && globalConfig.token || null,
+		namespace: globalOpts.namespace || projectConfig && projectConfig.namespace || globalConfig && globalConfig.defaultNamespace || "global",
+		ide: globalOpts.ide || projectConfig && projectConfig.ide || globalConfig && globalConfig.defaultIDE || null
+	};
+	return key ? configMap[key] : void 0;
+}
+function setConfigValue(key, value, isGlobal = false) {
+	if (isGlobal) {
+		const config = loadGlobalConfig() || { version: 1 };
+		const configKey = {
+			"registry": "registry",
+			"token": "token",
+			"default-namespace": "defaultNamespace",
+			"default-ide": "defaultIDE"
+		}[key] || key;
+		config[configKey] = value;
+		saveGlobalConfig(config);
+	} else {
+		const workdir = process.cwd();
+		const config = loadProjectConfig(workdir) || {};
+		const configKey = {
+			"registry": "registry",
+			"namespace": "namespace",
+			"ide": "ide"
+		}[key] || key;
+		config[configKey] = value;
+		saveProjectConfig(workdir, config);
+	}
+}
+export { config_exports, loadGlobalConfig, loadLockfile, loadProjectConfig, resolveConfig, saveGlobalConfig, saveLockfile, setConfigValue };

package/dist/_chunks/libs/@clack/core.mjs

@@ -1,8 +1,7 @@
 import { __commonJSMin } from "../../rolldown-runtime.mjs";
 import "node:util";
 import { stdin, stdout } from "node:process";
-import * as l from "node:readline";
-import l__default from "node:readline";
+import l__default, * as l from "node:readline";
 import { ReadStream } from "node:tty";
 const getCodePointsLength = (() => {
 	const SURROGATE_PAIR_RE = /[\uD800-\uDBFF][\uDC00-\uDFFF]/g;
@@ -359,6 +358,7 @@ const settings = {
 		error: "Something went wrong"
 	},
 	withGuide: true,
+	accessible: void 0,
 	date: {
 		monthNames: [...[
 			"January",
@@ -383,6 +383,12 @@ const settings = {
 		}
 	}
 };
+function isAccessible(n) {
+	if (n !== void 0) return n;
+	if (settings.accessible !== void 0) return settings.accessible;
+	const e = process.env.ACCESSIBLE;
+	return e !== void 0 && e !== "" && e !== "0" && e !== "false";
+}
 function isActionKey(n, e) {
 	if (typeof n == "string") return settings.aliases.get(n) === e;
 	for (const s of n) if (s !== void 0 && isActionKey(s, e)) return true;
@@ -410,7 +416,7 @@ function setRawMode(e, r) {
 	const o = e;
 	o.isTTY && o.setRawMode(r);
 }
-function block({ input: e = stdin, output: r = stdout, overwrite: o = true, hideCursor: t = true } = {}) {
+function block({ input: e = stdin, output: r = stdout, overwrite: o = true, hideCursor: n = true } = {}) {
 	const s = l.createInterface({
 		input: e,
 		output: r,
@@ -418,49 +424,48 @@ function block({ input: e = stdin, output: r = stdout, overwrite: o = true, hide
 		tabSize: 1
 	});
 	l.emitKeypressEvents(e, s), e instanceof ReadStream && e.isTTY && e.setRawMode(true);
-	const n = (f, { name: a, sequence: p }) => {
+	const t = (f, { name: a, sequence: w }) => {
 		if (isActionKey([
 			String(f),
 			a,
-			p
+			w
 		], "cancel")) {
-			t && r.write(import_src.cursor.show), process.exit(0);
+			n && r.write(import_src.cursor.show), process.exit(0);
 			return;
 		}
 		if (!o) return;
 		const i = a === "return" ? 0 : -1, m = a === "return" ? -1 : 0;
 		l.moveCursor(r, i, m, () => {
 			l.clearLine(r, 1, () => {
-				e.once("keypress", n);
+				e.once("keypress", t);
 			});
 		});
 	};
-	return t && r.write(import_src.cursor.hide), e.once("keypress", n), () => {
-		e.off("keypress", n), t && r.write(import_src.cursor.show), e instanceof ReadStream && e.isTTY && !R && e.setRawMode(false), s.terminal = false, s.close();
+	return n && r.write(import_src.cursor.hide), e.once("keypress", t), () => {
+		e.off("keypress", t), n && r.write(import_src.cursor.show), e instanceof ReadStream && e.isTTY && !R && e.setRawMode(false), s.terminal = false, s.close();
 	};
 }
 const getColumns = (e) => "columns" in e && typeof e.columns == "number" ? e.columns : 80;
 const getRows = (e) => "rows" in e && typeof e.rows == "number" ? e.rows : 20;
-function wrapTextWithPrefix(e, r, o, t = o, s = o, n) {
+function wrapTextWithPrefix(e, r, o, n = o, s = o, t) {
 	return wrapAnsi(r, getColumns(e ?? stdout) - o.length, {
 		hard: true,
 		trim: false
 	}).split(`
 `).map((c, i, m) => {
-		const d = n ? n(c, i) : c;
-		return i === 0 ? `${t}${d}` : i === m.length - 1 ? `${s}${d}` : `${o}${d}`;
+		const d = t ? t(c, i) : c;
+		return i === 0 ? `${n}${d}` : i === m.length - 1 ? `${s}${d}` : `${o}${d}`;
 	}).join(`
 `);
 }
-function runValidation(e, n) {
+function runValidation(e, a) {
 	if ("~standard" in e) {
-		const a = e["~standard"].validate(n);
-		if (a instanceof Promise) throw new TypeError("Schema validation must be synchronous. Update `validate()` and remove any asynchronous logic.");
-		return a.issues?.at(0)?.message;
+		const n = e["~standard"].validate(a);
+		return n instanceof Promise ? n.then((r) => r.issues?.at(0)?.message) : n.issues?.at(0)?.message;
 	}
-	return e(n);
+	return e(a);
 }
-var V = class {
+var y = class {
 	input;
 	output;
 	_abortSignal;
@@ -475,9 +480,12 @@ var V = class {
 	error = "";
 	value;
 	userInput = "";
+	get accessible() {
+		return isAccessible(this.opts.accessible);
+	}
 	constructor(t, e = true) {
-		const { input: i = stdin, output: n = stdout, render: s, signal: r, ...o } = t;
-		this.opts = o, this.onKeypress = this.onKeypress.bind(this), this.close = this.close.bind(this), this.render = this.render.bind(this), this._render = s.bind(this), this._track = e, this._abortSignal = r, this.input = i, this.output = n;
+		const { input: i = stdin, output: s = stdout, render: r, signal: n, ...o } = t;
+		this.opts = o, this.onKeypress = this.onKeypress.bind(this), this.close = this.close.bind(this), this.render = this.render.bind(this), this._render = r.bind(this), this._track = e, this._abortSignal = n, this.input = i, this.output = s;
 	}
 	unsubscribe() {
 		this._subscribers.clear();
@@ -496,9 +504,9 @@ var V = class {
 		});
 	}
 	emit(t, ...e) {
-		const i = this._subscribers.get(t) ?? [], n = [];
-		for (const s of i) s.cb(...e), s.once && n.push(() => i.splice(i.indexOf(s), 1));
-		for (const s of n) s();
+		const i = this._subscribers.get(t) ?? [], s = [];
+		for (const r of i) r.cb(...e), r.once && s.push(() => i.splice(i.indexOf(r), 1));
+		for (const r of s) r();
 	}
 	prompt() {
 		return new Promise((t) => {
@@ -539,22 +547,25 @@ var V = class {
 			name: "u"
 		}), this._setUserInput("");
 	}
-	onKeypress(t, e) {
-		if (this._track && e.name !== "return" && (e.name && this._isActionKey(t, e) && this.rl?.write(null, {
-			ctrl: true,
-			name: "h"
-		}), this._cursor = this.rl?.cursor ?? 0, this._setUserInput(this.rl?.line)), this.state === "error" && (this.state = "active"), e?.name && (!this._track && settings.aliases.has(e.name) && this.emit("cursor", settings.aliases.get(e.name)), settings.actions.has(e.name) && this.emit("cursor", e.name)), t && (t.toLowerCase() === "y" || t.toLowerCase() === "n") && this.emit("confirm", t.toLowerCase() === "y"), this.emit("key", t, e), e?.name === "return" && this._shouldSubmit(t, e)) {
-			if (this.opts.validate) {
-				const i = runValidation(this.opts.validate, this.value);
-				i && (this.error = i instanceof Error ? i.message : i, this.state = "error", this.rl?.write(this.userInput));
+	async onKeypress(t, e) {
+		if (this.state !== "validating") {
+			if (this._track && e.name !== "return" && (e.name && this._isActionKey(t, e) && this.rl?.write(null, {
+				ctrl: true,
+				name: "h"
+			}), this._cursor = this.rl?.cursor ?? 0, this._setUserInput(this.rl?.line)), this.state === "error" && (this.state = "active"), e?.name && (!this._track && settings.aliases.has(e.name) && this.emit("cursor", settings.aliases.get(e.name)), settings.actions.has(e.name) && this.emit("cursor", e.name)), t && (t.toLowerCase() === "y" || t.toLowerCase() === "n") && this.emit("confirm", t.toLowerCase() === "y"), this.emit("key", t, e), e?.name === "return" && this._shouldSubmit(t, e)) {
+				if (this.opts.validate) {
+					const i = runValidation(this.opts.validate, this.value);
+					let s;
+					i instanceof Promise ? (this.state = "validating", this.render(), s = await i) : s = i, s && (this.error = s instanceof Error ? s.message : s, this.state = "error", this.rl?.write(this.userInput));
+				}
+				this.state !== "error" && (this.state = "submit");
 			}
-			this.state !== "error" && (this.state = "submit");
+			isActionKey([
+				t,
+				e?.name,
+				e?.sequence
+			], "cancel") && (this.state = "cancel"), (this.state === "submit" || this.state === "cancel") && this.emit("finalize"), this.render(), (this.state === "submit" || this.state === "cancel") && this.close();
 		}
-		isActionKey([
-			t,
-			e?.name,
-			e?.sequence
-		], "cancel") && (this.state = "cancel"), (this.state === "submit" || this.state === "cancel") && this.emit("finalize"), this.render(), (this.state === "submit" || this.state === "cancel") && this.close();
 	}
 	close() {
 		this.input.unpipe(), this.input.removeListener("keypress", this.onKeypress), this.output.write(`
@@ -578,27 +589,27 @@ var V = class {
 			else {
 				const e = diffLines(this._prevFrame, t), i = getRows(this.output);
 				if (this.restoreCursor(), e) {
-					const n = Math.max(0, e.numLinesAfter - i), s = Math.max(0, e.numLinesBefore - i);
-					let r = e.lines.find((o) => o >= n);
-					if (r === void 0) {
+					const s = Math.max(0, e.numLinesAfter - i), r = Math.max(0, e.numLinesBefore - i);
+					let n = e.lines.find((o) => o >= s);
+					if (n === void 0) {
 						this._prevFrame = t;
 						return;
 					}
 					if (e.lines.length === 1) {
-						this.output.write(import_src.cursor.move(0, r - s)), this.output.write(import_src.erase.lines(1));
+						this.output.write(import_src.cursor.move(0, n - r)), this.output.write(import_src.erase.lines(1));
 						const o = t.split(`
 `);
-						this.output.write(o[r]), this._prevFrame = t, this.output.write(import_src.cursor.move(0, o.length - r - 1));
+						this.output.write(o[n]), this._prevFrame = t, this.output.write(import_src.cursor.move(0, o.length - n - 1));
 						return;
 					} else if (e.lines.length > 1) {
-						if (n < s) r = n;
+						if (s < r) n = s;
 						else {
-							const h = r - s;
+							const h = n - r;
 							h > 0 && this.output.write(import_src.cursor.move(0, h));
 						}
 						this.output.write(import_src.erase.down());
 						const f = t.split(`
-`).slice(r);
+`).slice(n);
 						this.output.write(f.join(`
 `)), this._prevFrame = t;
 						return;
@@ -610,7 +621,7 @@ var V = class {
 		}
 	}
 };
-var r = class extends V {
+var r = class extends y {
 	get cursor() {
 		return this.value ? 0 : 1;
 	}
@@ -627,7 +638,7 @@ var r = class extends V {
 		});
 	}
 };
-let u$2 = class u extends V {
+let u$2 = class u extends y {
 	options;
 	cursor = 0;
 	#t;
@@ -674,14 +685,12 @@ let u$2 = class u extends V {
 					!this.#t && s && (this.cursor = this.cursor === this.options.length - 1 ? 0 : this.cursor + 1);
 					break;
 				}
-				case "space":
-					this.toggleValue();
-					break;
+				case "space": this.toggleValue();
 			}
 		});
 	}
 };
-var a = class extends V {
+var a = class extends y {
 	options;
 	cursor = 0;
 	get _value() {
@@ -720,14 +729,12 @@ var a = class extends V {
 				case "right":
 					this.cursor = findCursor(this.cursor, 1, this.options);
 					break;
-				case "space":
-					this.toggleValue();
-					break;
+				case "space": this.toggleValue();
 			}
 		});
 	}
 };
-let n$1 = class n extends V {
+let n$1 = class n extends y {
 	options;
 	cursor = 0;
 	get _selectedValue() {
@@ -747,9 +754,7 @@ let n$1 = class n extends V {
 					this.cursor = findCursor(this.cursor, -1, this.options);
 					break;
 				case "down":
-				case "right":
-					this.cursor = findCursor(this.cursor, 1, this.options);
-					break;
+				case "right": this.cursor = findCursor(this.cursor, 1, this.options);
 			}
 			this.changeValue();
 		});