bfi-cli 0.1.91 → 0.1.93

package/dist/_chunks/skills.mjs

@@ -322,13 +322,14 @@ async function parseSkillMd(skillMdPath, options) {
 		const { data } = parseFrontmatter(content);
 		if (!data.name || !data.description) return null;
 		if (typeof data.name !== "string" || typeof data.description !== "string") return null;
-		if (data.metadata?.internal === true && !shouldInstallInternalSkills() && !options?.includeInternal) return null;
+		const metadata = data.metadata;
+		if (metadata?.internal === true && !shouldInstallInternalSkills() && !options?.includeInternal) return null;
 		return {
 			name: sanitizeMetadata(data.name),
 			description: sanitizeMetadata(data.description),
 			path: dirname(skillMdPath),
 			rawContent: content,
-			metadata: data.metadata
+			metadata
 		};
 	} catch {
 		return null;

package/dist/cli.mjs

@@ -5,7 +5,7 @@ import { cancel, confirm, groupMultiselect, intro, log, multiselect as multisele
 import { require_picocolors } from "./_chunks/libs/picocolors.mjs";
 import { addSkillToLocalLock, addSkillToLock, computeSkillFolderHash, discoverSkills, dismissPrompt, filterSkills, getAllLockedSkills, getGitHubToken, getLastSelectedAgents, getSkillDisplayName, getSkillFromLock, isPromptDismissed, parseFrontmatter, parseSkillMd, readLocalLock, readSkillLock, removeSkillFromLock, sanitizeMetadata, saveSelectedAgents, stripTerminalEscapes } from "./_chunks/skills.mjs";
 import { PluginRegistryClient } from "./_chunks/registry-client.mjs";
-import { loadGlobalConfig, loadLockfile, loadProjectConfig, resolveConfig, saveGlobalConfig as saveGlobalConfig$1, saveLockfile, setConfigValue } from "./_chunks/config.mjs";
+import { loadGlobalConfig, loadLockfile, loadProjectConfig, resolveConfig, saveGlobalConfig, saveLockfile, setConfigValue } from "./_chunks/config.mjs";
 import { esm_default } from "./_chunks/libs/simple-git.mjs";
 import { EVE_SUBAGENTS_DIR, agents, detectInstalledAgents, getEveSubagents, getNonUniversalAgents, getUniversalAgents, getVisibleUniversalAgents, isUniversalAgent } from "./_chunks/agents.mjs";
 import { packageSkillName } from "./_chunks/package-skill-identity.mjs";
@@ -170,7 +170,7 @@ function parseSource(input) {
 		const [, owner, repo, ref, subpath] = githubTreeWithPathMatch;
 		return {
 			type: "github",
-			url: `${GIT_URL}/${owner}/${repo}.git`,
+			url: `https://github.com/${owner}/${repo}.git`,
 			ref: ref || fragmentRef,
 			subpath: subpath ? sanitizeSubpath(subpath) : subpath
 		};
@@ -180,7 +180,7 @@ function parseSource(input) {
 		const [, owner, repo, ref] = githubTreeMatch;
 		return {
 			type: "github",
-			url: `${GIT_URL}/${owner}/${repo}.git`,
+			url: `https://github.com/${owner}/${repo}.git`,
 			ref: ref || fragmentRef
 		};
 	}
@@ -928,7 +928,9 @@ async function extractZip(zipPath, targetDir) {
 	return new Promise((resolve, reject) => {
 		const chunks = [];
 		const readStream = fs.createReadStream(zipPath);
-		readStream.on("data", (chunk) => chunks.push(chunk));
+		readStream.on("data", (chunk) => {
+			chunks.push(chunk);
+		});
 		readStream.on("end", () => {
 			const buffer = Buffer.concat(chunks);
 			try {
@@ -1153,14 +1155,15 @@ function isAuthFailure(message) {
 	return message.includes("Authentication failed") || message.includes("could not read Username") || message.includes("Permission denied") || message.includes("Repository not found") || message.includes("requested URL returned error: 403") || isGitHubSsoAuthError(message);
 }
 function createGitClient(extraEnv) {
+	const env = {};
+	for (const [k, v] of Object.entries({
+		...process.env,
+		GIT_TERMINAL_PROMPT: "0",
+		GIT_LFS_SKIP_SMUDGE: "1",
+		...extraEnv
+	})) if (v !== void 0) env[k] = v;
 	return esm_default({
 		timeout: { block: CLONE_TIMEOUT_MS },
-		env: {
-			...process.env,
-			GIT_TERMINAL_PROMPT: "0",
-			GIT_LFS_SKIP_SMUDGE: "1",
-			...extraEnv
-		},
 		config: [
 			"filter.lfs.required=false",
 			"filter.lfs.smudge=",
@@ -1168,7 +1171,7 @@ function createGitClient(extraEnv) {
 			"filter.lfs.process="
 		],
 		unsafe: { allowUnsafeFilter: true }
-	});
+	}).env(env);
 }
 async function resetTempDir(dir) {
 	await rm(dir, {
@@ -4008,7 +4011,7 @@ async function runAdd(args, options = {}) {
 		if (successful.length > 0 && installGlobally && (normalizedSource || parsed.type === "skillhub")) {
 			const successfulSkillNames = new Set(successful.map((r) => r.skill));
 			let cachedTree;
-			if (parsed.type === "github" && !blobResult) cachedTree = await fetchRepoTree(normalizedSource, parsed.ref, getGitHubToken);
+			if (parsed.type === "github" && !blobResult && normalizedSource) cachedTree = await fetchRepoTree(normalizedSource, parsed.ref, getGitHubToken);
 			for (const skill of selectedSkills) {
 				const skillDisplayName = getSkillDisplayName(skill);
 				if (successfulSkillNames.has(skillDisplayName)) try {
@@ -5825,7 +5828,7 @@ async function runLogin(args, globalOpts) {
 			name: String(userInfo.displayName || userInfo.name || ""),
 			handle: String(userInfo.handle || "")
 		};
-		saveGlobalConfig$1(config);
+		saveGlobalConfig(config);
 		console.log(`✓ 已登录为 ${userInfo.displayName || userInfo.name || "Unknown"}`);
 		console.log(`  注册中心：${registry}`);
 	} catch (error) {
@@ -5838,7 +5841,7 @@ async function runLogout() {
 	if (config?.token) {
 		delete config.token;
 		delete config.user;
-		saveGlobalConfig$1(config);
+		saveGlobalConfig(config);
 		console.log("✓ 已登出");
 	} else console.log("未登录。");
 }
@@ -7159,7 +7162,6 @@ async function handleInstall(args, api, globalOpts) {
 		console.error(`${RED$1}获取包信息失败：${error.message}${RESET$3}`);
 		process.exit(1);
 	}
-	if (pkgInfo.kind === "PLUGIN") throw new Error("这是完整插件，不是技能组合；请使用 --as plugin --agent <目标Agent> 安装，插件可能包含 MCP 和 Hooks。");
 	const skills = pkgInfo.skills || [];
 	if (skills.length === 0) {
 		console.log(`${YELLOW$1}包中没有可独立安装的技能。${RESET$3}`);
@@ -7482,9 +7484,7 @@ async function handleUpdate(args, api, globalOpts) {
 	console.log(`${DIM$3}正在更新 ${packagesToUpdate.length} 个包...${RESET$3}`);
 	for (const pkg of packagesToUpdate) try {
 		const pkgInfo = await api.getPackage(pkg.namespace, pkg.slug);
-		const info = pkgInfo.data || pkgInfo;
-		if (info.kind === "PLUGIN") throw new Error("这是完整插件，请使用 --as plugin --agent <目标Agent> 更新；不会按技能组合安装。");
-		const skills = info.skills || [];
+		const skills = (pkgInfo.data || pkgInfo).skills || [];
 		console.log(`  ${DIM$3}更新 @${pkg.namespace}/${pkg.slug}（${skills.length} 个技能）...${RESET$3}`);
 		for (const skill of skills) {
 			const skillRef = skill.namespace ? `@${skill.namespace}/${skill.slug}` : skill.slug;
@@ -7828,7 +7828,7 @@ async function runInstall(args, globalOpts) {
 	if (failedCount > 0) console.log(`${YELLOW}⚠ ${failedCount} 项恢复失败${RESET$1}`);
 	console.log();
 }
-const YMC_DEFAULT_BASE = process.env.BFI_YMC_BASE || "http://172.20.35.178:8901/bficli/api/v2";
+const YMC_DEFAULT_BASE = process.env.BFI_YMC_BASE || "https://bfi.yyuap.com/bfi-api/bficli/api/v2";
 var YmcApi = class {
 	baseUrl;
 	token;
@@ -7960,11 +7960,15 @@ var YmcApi = class {
 		};
 	}
 };
+function flagNameOf(token) {
+	const eq = token.indexOf("=");
+	return eq === -1 ? token : token.slice(0, eq);
+}
 function opt(args, ...names) {
 	for (const name of names) {
 		const idx = args.indexOf(name);
 		if (idx !== -1 && idx + 1 < args.length) return args[idx + 1];
-		const eq = args.find((a) => a.startsWith(`${name}=`));
+		const eq = args.find((a) => a.includes("=") && flagNameOf(a) === name);
 		if (eq) return eq.slice(name.length + 1);
 	}
 }
@@ -8018,6 +8022,180 @@ function timeError(t) {
 	if (!TIME_RE.test(t)) return `时间简写无效：收到 '${t}'\n合法格式：<N><单位>，单位 m(分)/h(时)/d(天)/w(周)，如 10m/2h/3d/4w\n精确窗口：--start-time "yyyy-MM-dd HH:mm:ss" --end-time 同格式（北京时间）`;
 	return null;
 }
+const COMMON_FLAGS = [
+	"--json",
+	"--dry-run",
+	"--help",
+	"-h",
+	"--token",
+	"--registry",
+	"--namespace"
+];
+const F_ENV = [
+	"-e",
+	"--env",
+	"--env-name"
+];
+const F_TIME = ["-t", "--time"];
+const F_RANGE = [
+	"-t",
+	"--time",
+	"--start-time",
+	"--end-time"
+];
+const ALLOWED_FLAGS = {
+	status: [],
+	trace: [...F_ENV, "--ts"],
+	chain: [...F_ENV, "--ts"],
+	"sls-raw": [
+		...F_ENV,
+		...F_RANGE,
+		"--days",
+		"--line",
+		"--offset"
+	],
+	"sls-grep": [
+		...F_ENV,
+		...F_TIME,
+		"--group-by",
+		"--line",
+		"--app"
+	],
+	"sls-logs": [...F_ENV, "--ts"],
+	slowsql: [
+		...F_ENV,
+		...F_RANGE,
+		"--sql-str",
+		"--md5",
+		"--trace-id",
+		"--app",
+		"--no-profiler",
+		"--page",
+		"--page-size"
+	],
+	slowcall: [
+		...F_ENV,
+		...F_RANGE,
+		"--trace-id",
+		"--app",
+		"--method",
+		"--profiler",
+		"--min-cost",
+		"--page",
+		"--page-size"
+	],
+	exceptions: [
+		...F_ENV,
+		...F_RANGE,
+		"--app"
+	],
+	alerts: [
+		...F_ENV,
+		...F_RANGE,
+		"--level",
+		"--page-size"
+	],
+	"url-stats": [
+		...F_ENV,
+		...F_RANGE,
+		"--app"
+	],
+	ingress: [
+		...F_ENV,
+		...F_RANGE,
+		"--app",
+		"--exact",
+		"--size",
+		"--trace-id",
+		"--uri"
+	],
+	"dump-list": [
+		...F_ENV,
+		...F_RANGE,
+		"--app",
+		"--type"
+	],
+	cases: [
+		"--type",
+		"--finger",
+		"--service",
+		"--kw",
+		"--limit",
+		"--file",
+		"--env",
+		"--confidence",
+		"--title"
+	],
+	wiki: [
+		"--limit",
+		"--source",
+		"--titles"
+	],
+	callstat: [
+		...F_ENV,
+		...F_RANGE,
+		"--page",
+		"--page-size"
+	],
+	sqlstat: [
+		...F_ENV,
+		...F_RANGE,
+		"--page",
+		"--page-size"
+	],
+	events: [
+		...F_ENV,
+		"--app",
+		"--start-time",
+		"--end-time",
+		"--histogram",
+		"--page",
+		"--page-size",
+		"--pipeline",
+		"--type"
+	],
+	"log-url": [
+		...F_ENV,
+		"--app",
+		"--filter-app",
+		"--type"
+	],
+	"sample-list": [...F_ENV, ...F_RANGE],
+	rca: [
+		...F_ENV,
+		...F_RANGE,
+		"--app",
+		"--app-code"
+	],
+	"bpr-download": [
+		...F_ENV,
+		"--out",
+		"-o"
+	],
+	"tool-download": [
+		...F_ENV,
+		"--out",
+		"-o"
+	],
+	call: [
+		...F_ENV,
+		...F_RANGE,
+		"--data",
+		"--timeout"
+	]
+};
+function assertKnownFlags(sub, rest) {
+	const allowed = /* @__PURE__ */ new Set([...COMMON_FLAGS, ...ALLOWED_FLAGS[sub] ?? []]);
+	for (const a of rest) {
+		if (!a.startsWith("-")) continue;
+		const key = flagNameOf(a);
+		if (allowed.has(key)) continue;
+		console.error(`未知参数：${key}（bfi ymc ${sub} 不支持）`);
+		console.error(`本命令支持：${[...allowed].join(" / ")}`);
+		console.error(`查看用法：bfi ymc help ${sub}`);
+		process.exit(1);
+	}
+}
 function requireEnv(args) {
 	const env = opt(args, "-e", "--env", "--env-name");
 	const err = envError(env);
@@ -8089,6 +8267,7 @@ async function runYmc(args, globalOpts) {
 		printCommandHelp(sub);
 		return;
 	}
+	if (ALLOWED_FLAGS[sub]) assertKnownFlags(sub, rest);
 	if (!dryRun) requireToken(api);
 	switch (sub) {
 		case "status":
@@ -8197,14 +8376,18 @@ async function runYmc(args, globalOpts) {
 		case "sls-grep": {
 			const kw = positionals(rest)[0];
 			if (!kw) {
-				console.error("用法：bfi ymc sls-grep \"<关键词>\" -e <env> [-t time] [--group-by applicationName|message|requestURL]");
+				console.error("用法：bfi ymc sls-grep \"<关键词>\" -e <env> [-t time] [--app <appCode>] [--group-by applicationName|message|requestURL]");
 				console.error("例：bfi ymc sls-grep \"ClassCastException\" -e daily -t 3d");
+				console.error("⚠️ 关键词按「整值」匹配：类名/全限定异常名必须整串加引号");
+				console.error("   （\"java.lang.OutOfMemoryError\" 命中；简写 \"OutOfMemoryError\" 恒 0 且不报错）——sls-discipline §3");
 				console.error("⚠️ 输出为聚合统计行（每组计数，计数上限 100，可能被封顶）——非明细。");
 				console.error("   需要真实条数/明细/精确时间窗时改用 sls-raw + GROUP BY + --start-time/--end-time");
 				process.exit(1);
 			}
 			const groupBy = opt(rest, "--group-by") || "applicationName";
-			const query = `"${kw.replace(/"/g, "")}" | SELECT ${groupBy}, count(*) AS count GROUP BY ${groupBy} ORDER BY count DESC`;
+			const safe = kw.replace(/"/g, "");
+			const app = opt(rest, "--app");
+			const query = `${app ? `applicationname: ${app} AND "${safe}"` : `"${safe}"`} | SELECT ${groupBy}, count(*) AS count GROUP BY ${groupBy} ORDER BY count DESC`;
 			emit(await api.call("sls/raw", {
 				query,
 				...requireEnv(rest),
@@ -8634,7 +8817,7 @@ async function runYmc(args, globalOpts) {
 			if (!route) {
 				console.error("用法：bfi ymc call <route> -e <env> [--data '{\"k\":\"v\"}'] [--timeout 秒] [-t time | --start-time <s> --end-time <e>]");
 				console.error("route 例：warningCall/warningSql/exceptionHistory/bpr/list/alert/detail/uba/query/tool/list/environment ...");
-				console.error("完整清单见 http://172.20.35.178:8901/docs");
+				console.error("完整清单见 https://bfi.yyuap.com/bfi-api/docs");
 				process.exit(1);
 			}
 			let extra;
@@ -8692,8 +8875,11 @@ const HELP = {
     bfi ymc sls-raw 'applicationname: yonbip-scm-scmmp AND "unaudit" | SELECT traceid, time LIMIT 10' -e core3 -t 1d
   注意：业务关键词检索必须 applicationname: 限定目标服务（共享路径 URL 全平台都有）；
   traceid/spanid 检索例外（全局唯一）。非索引字段（logger/requesturl）不能进检索语法，只能在 SELECT 里引用。`,
-	"sls-grep": `bfi ymc sls-grep "<关键词>" -e <env> -t <time> [--json]
-  SLS 全文检索聚合（每组计数精确不封顶；组数上限 500——实测 2026-09-17：计数不受限，仅组数受 SLS 默认 LIMIT 约束，服务端已放宽）。`,
+	"sls-grep": `bfi ymc sls-grep "<关键词>" -e <env> -t <time> [--app <appCode>] [--group-by <字段>] [--json]
+  SLS 全文检索聚合（每组计数精确不封顶；组数上限 500——实测 2026-09-17：计数不受限，仅组数受 SLS 默认 LIMIT 约束，服务端已放宽）。
+  ⚠️ 关键词按「整值」匹配：类名/全限定异常名必须整串加引号
+     （"java.lang.OutOfMemoryError" 命中；简写 "OutOfMemoryError" 恒 0 命中且不报错）——sls-discipline §3
+  --app <appCode>  裸微服务名，前置 applicationname 限定（不限服务的检索会命中不相干服务）`,
 	slowsql: `bfi ymc slowsql -t <time> -e <env> [--sql-str <表名或片段>] [--md5 <指纹>] [--trace-id <id>] [--app <appCode>] [--no-profiler] [--page N] [--page-size N] [--json]
   慢 SQL 告警明细（耗时降序；摘要含 服务/耗时/行数/SQL 前段/指纹/调用栈首帧）。
   参数：
@@ -8775,11 +8961,15 @@ const HELP = {
   输出默认取文件名部分（monitor/xx.html → xx.html）。`,
 	call: `bfi ymc call <route> -e <env> [--data '<json>'] [-t <time> | --start-time <s> --end-time <e>] [--timeout <秒>] [--json]
   通用透传：覆盖全部注册表端点（warningCall/warningSql/exceptionHistory/bpr/list/alert/detail/tool/list/app/history/environment/uba/query ...）。
-  完整清单与参数声明：curl http://172.20.35.178:8901/openapi.json 或 /docs（Swagger UI）。
+  完整清单与参数声明：curl https://bfi.yyuap.com/bfi-api/openapi.json 或 /docs（Swagger UI）。
   时间参数（-t/--start-time/--end-time）由服务端按端点 time_fields 展开为 beginTs/endTs 等——
   禁止在 --data JSON 里手传 start/end/start_time（数字 422、字符串被忽略返回空）。
-  ⚠️ app/history、jvm/history 等资源端点的 appId 必须带环境前缀（如 stage-dc-core1-<appCode>，
-  可用 bfi ymc call app/list --data '{"keyword":"<appCode>"}' 查得）；CLI 的 --app 参数则传裸名。
+  ⚠️ app/history、jvm/history 等资源端点的 appId 必须带环境前缀（如 stage-dc-core1-<appCode>）
+  —— 由环境别名**直接推导**：appId = <env 对应的前缀>-<appCode>（core1→stage-dc-core1-、
+  core4→online-dc-core4-），无需查接口。
+  ⛔ 不要用 bfi ymc call app/list 查 appCode：该端点无查询参数、不支持 keyword 过滤
+  （传了被上游静默忽略，只返回本用户可访问的应用，非全量目录）。
+  CLI 的 --app 参数则传裸 appCode。
   数据可能为空（覆盖不全）——一次空即换通道，不做参数变体重试。
   示例：
     bfi ymc call warningCallstat --data '{"curAppCode":"yonbip-scm-scmmp","page":1,"pageSize":10}' -e core3 -t 1h

package/dist/mcp-codesearch/main.mjs

@@ -54,9 +54,9 @@ var BcsRemote = class {
 			name: "bfi-codesearch-mcp",
 			version: "0.1.0"
 		});
-		const transport = new StreamableHTTPClientTransport(this.url, {
+		const transport = new StreamableHTTPClientTransport(new URL(this.url), {
 			requestInit: { headers: { Authorization: `Bearer ${token}` } },
-			fetchImpl: this.fetchImpl
+			...this.fetchImpl ? { fetch: this.fetchImpl } : {}
 		});
 		try {
 			await client.connect(transport);
@@ -91,7 +91,7 @@ function loadGlobalConfig() {
 	return null;
 }
 function resolveApiBase() {
-	return process.env.BFI_API_BASE || "http://172.20.35.178:8901";
+	return process.env.BFI_API_BASE || "https://bfi.yyuap.com/bfi-api";
 }
 function resolveToken() {
 	if (process.env.BFI_TOKEN) return process.env.BFI_TOKEN;

package/dist/mcp-db/main.mjs

@@ -151,7 +151,7 @@ function loadGlobalConfig() {
 	return null;
 }
 function resolveApiBase() {
-	return process.env.BFI_API_BASE || "http://172.20.35.178:8901";
+	return process.env.BFI_API_BASE || "https://bfi.yyuap.com/bfi-api";
 }
 function resolveToken() {
 	if (process.env.BFI_TOKEN) return process.env.BFI_TOKEN;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bfi-cli",
-  "version": "0.1.91",
+  "version": "0.1.93",
   "description": "用友大业财BFI统一命令行工具，支持技能，技能包，元数据，UI元数据等",
   "type": "module",
   "bin": {
@@ -18,7 +18,7 @@
     "build": "obuild",
     "dev": "node src/cli.ts",
     "test": "vitest",
-    "type-check": "tsc --noEmit",
+    "type-check": "tsc -p tsconfig.check.json",
     "format": "prettier --write \"src/**/*.ts\"",
     "format:check": "prettier --check \"src/**/*.ts\"",
     "prepublishOnly": "npm run build"