bfi-cli 0.1.97 → 0.1.99

package/dist/cli.mjs

@@ -451,10 +451,8 @@ async function searchMultiselect(options) {
 			}
 			if (key.name === "space") {
 				const item = filtered[cursor];
-				if (item) {
-					if (selected.has(item.value)) selected.delete(item.value);
-					else selected.add(item.value);
-				}
+				if (item) if (selected.has(item.value)) selected.delete(item.value);
+				else selected.add(item.value);
 				render();
 				return;
 			}
@@ -514,14 +512,12 @@ var SkillHubAPI = class {
 		if (url.protocol === "https:") requestOptions.rejectUnauthorized = this.rejectUnauthorized;
 		let bodyStr;
 		let bodyBuf;
-		if (options.body !== void 0) {
-			if (options.body instanceof Buffer) bodyBuf = options.body;
-			else if (typeof options.body === "string") bodyStr = options.body;
-			else if (typeof FormData !== "undefined" && options.body instanceof FormData) return this.fetchRequest(url, requestOptions, options.body);
-			else {
-				requestOptions.headers["Content-Type"] = "application/json";
-				bodyStr = JSON.stringify(options.body);
-			}
+		if (options.body !== void 0) if (options.body instanceof Buffer) bodyBuf = options.body;
+		else if (typeof options.body === "string") bodyStr = options.body;
+		else if (typeof FormData !== "undefined" && options.body instanceof FormData) return this.fetchRequest(url, requestOptions, options.body);
+		else {
+			requestOptions.headers["Content-Type"] = "application/json";
+			bodyStr = JSON.stringify(options.body);
 		}
 		return new Promise((resolve, reject) => {
 			const req = (url.protocol === "https:" ? https : http).request(url, requestOptions, (res) => {
@@ -870,7 +866,12 @@ var SkillHubAPI = class {
 					try {
 						const parsed = JSON.parse(data);
 						if (res.statusCode && res.statusCode >= 200 && res.statusCode < 300) resolve(parsed);
-						else reject(new Error(parsed.msg || parsed.message || `HTTP ${res.statusCode}`));
+						else {
+							const error = new Error(parsed.msg || parsed.message || `HTTP ${res.statusCode}`);
+							error.status = res.statusCode;
+							error.body = parsed;
+							reject(error);
+						}
 					} catch {
 						reject(new Error(data || `HTTP ${res.statusCode}`));
 					}
@@ -1300,12 +1301,10 @@ async function isDirEntryOrSymlinkToDir(entry, entryPath) {
 	}
 }
 function getCanonicalSkillsDir(global, cwd) {
-	const baseDir = global ? homedir() : cwd || process.cwd();
-	return join(baseDir, AGENTS_DIR, SKILLS_SUBDIR);
+	return join(global ? homedir() : cwd || process.cwd(), AGENTS_DIR, SKILLS_SUBDIR);
 }
 function getEveSubagentSkillsDir(subagent, cwd) {
-	const baseDir = cwd || process.cwd();
-	return join(baseDir, EVE_SUBAGENTS_DIR, sanitizeName(subagent), "skills");
+	return join(cwd || process.cwd(), EVE_SUBAGENTS_DIR, sanitizeName(subagent), "skills");
 }
 function getAgentBaseDir(agentType, global, cwd, eveSubagent) {
 	if (isUniversalAgent(agentType)) return getCanonicalSkillsDir(global, cwd);
@@ -1383,8 +1382,7 @@ async function resolveParentSymlinks(path) {
 	const dir = dirname(resolved);
 	const base = basename(resolved);
 	try {
-		const realDir = await realpath(dir);
-		return join(realDir, base);
+		return join(await realpath(dir), base);
 	} catch {
 		return resolved;
 	}
@@ -1408,8 +1406,7 @@ async function createSymlink(target, linkPath) {
 		}
 		const linkDir = dirname(linkPath);
 		await mkdir(linkDir, { recursive: true });
-		const realLinkDir = await resolveParentSymlinks(linkDir);
-		const relativePath = relative(realLinkDir, target);
+		const relativePath = relative(await resolveParentSymlinks(linkDir), target);
 		const symlinkType = platform() === "win32" ? "junction" : void 0;
 		await symlink(symlinkType === "junction" ? resolvedTarget : relativePath, linkPath, symlinkType);
 		return true;
@@ -1478,8 +1475,7 @@ async function installSkillForAgent(skill, agentType, options = {}) {
 			mode: "symlink"
 		};
 		if (!isGlobal && !isUniversalAgent(agentType)) {
-			const agentRootDir = join(cwd, agents[agentType].skillsDir.split("/")[0]);
-			if (!existsSync(agentRootDir) && agentType !== "claude-code") return {
+			if (!existsSync(join(cwd, agents[agentType].skillsDir.split("/")[0])) && agentType !== "claude-code") return {
 				success: true,
 				path: canonicalDir,
 				canonicalPath: canonicalDir,
@@ -1553,8 +1549,7 @@ async function copyDirectory(src, dest, agentType) {
 				dereference: true,
 				recursive: true
 			});
-			const sourceStats = await stat(srcPath);
-			await chmod(destPath, sourceStats.mode & 511);
+			await chmod(destPath, (await stat(srcPath)).mode & 511);
 		} catch (err) {
 			if (err instanceof Error && "code" in err && err.code === "ENOENT" && entry.isSymbolicLink()) console.warn(`Skipping broken symlink: ${srcPath}`);
 			else throw err;
@@ -1771,8 +1766,7 @@ async function installBlobSkillForAgent(skill, agentType, options = {}) {
 			mode: "symlink"
 		};
 		if (!isGlobal && !isUniversalAgent(agentType)) {
-			const agentRootDir = join(cwd, agents[agentType].skillsDir.split("/")[0]);
-			if (!existsSync(agentRootDir)) return {
+			if (!existsSync(join(cwd, agents[agentType].skillsDir.split("/")[0]))) return {
 				success: true,
 				path: canonicalDir,
 				canonicalPath: canonicalDir,
@@ -2000,7 +1994,7 @@ var ProviderRegistryImpl = class {
 };
 new ProviderRegistryImpl();
 const DISCOVERY_SCHEMA_V2 = "https://schemas.agentskills.io/discovery/0.2.0/schema.json";
-const MAX_ARCHIVE_UNPACKED_BYTES = 52428800;
+const MAX_ARCHIVE_UNPACKED_BYTES = 50 * 1024 * 1024;
 const MAX_ARCHIVE_FILES = 1e3;
 var WellKnownProvider = class {
 	id = "well-known";
@@ -3153,23 +3147,22 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 		const installedAgents = await detectInstalledAgents();
 		const totalAgents = Object.keys(agents).length;
 		spinner.stop(`${totalAgents} agents`);
-		if (installedAgents.length === 0) {
-			if (options.yes) {
-				targetAgents = validAgents;
-				log.info("正在安装到全部 Agent");
-			} else {
-				log.info("请选择要安装技能的 Agent");
-				const selected = await promptForAgents("请选择要安装到的 Agent：", Object.entries(agents).map(([key, config]) => ({
-					value: key,
-					label: config.displayName
-				})));
-				if (isCancel(selected)) {
-					cancel("安装已取消");
-					process.exit(0);
-				}
-				targetAgents = selected;
+		if (installedAgents.length === 0) if (options.yes) {
+			targetAgents = validAgents;
+			log.info("正在安装到全部 Agent");
+		} else {
+			log.info("请选择要安装技能的 Agent");
+			const selected = await promptForAgents("请选择要安装到的 Agent：", Object.entries(agents).map(([key, config]) => ({
+				value: key,
+				label: config.displayName
+			})));
+			if (isCancel(selected)) {
+				cancel("安装已取消");
+				process.exit(0);
 			}
-		} else if (installedAgents.length === 1 || options.yes) {
+			targetAgents = selected;
+		}
+		else if (installedAgents.length === 1 || options.yes) {
 			targetAgents = ensureUniversalAgents(installedAgents);
 			if (installedAgents.length === 1) {
 				const firstAgent = installedAgents[0];
@@ -3404,14 +3397,13 @@ async function installFromSkillHub(parsed, options, spinner) {
 			slug = hit.slug;
 			log.info(`自动选择：${import_picocolors.default.cyan(`@${namespace}/${slug}`)} — ${hit.description || hit.name}`);
 		} else {
-			const choices = hits.map((h, idx) => ({
-				value: idx,
-				label: `@${h.namespace}/${h.slug}`,
-				hint: h.description || h.name
-			}));
 			const idx = await select({
 				message: "匹配到多个技能 — 请选择一个",
-				options: choices
+				options: hits.map((h, idx) => ({
+					value: idx,
+					label: `@${h.namespace}/${h.slug}`,
+					hint: h.description || h.name
+				}))
 			});
 			if (isCancel(idx)) {
 				cancel("安装已取消");
@@ -3438,8 +3430,7 @@ async function installFromSkillHub(parsed, options, spinner) {
 	}
 	const meta = metadata;
 	spinner.stop(`Skill: ${import_picocolors.default.cyan(`@${namespace}/${slug}`)}${meta.description ? ` — ${import_picocolors.default.dim(meta.description)}` : ""}`);
-	const tmpRoot = tmpdir();
-	tempDir = join(tmpRoot, `.skillhub-skillshub-${canonicalSlug.replace(/[/:@]/g, "-")}-${Date.now()}`);
+	tempDir = join(tmpdir(), `.skillhub-skillshub-${canonicalSlug.replace(/[/:@]/g, "-")}-${Date.now()}`);
 	mkdirSync(tempDir, { recursive: true });
 	const zipPath = join(tempDir, "skill.zip");
 	spinner.start("正在下载技能...");
@@ -3775,24 +3766,23 @@ async function runAdd(args, options = {}) {
 					}
 					targetAgents = selected;
 				}
-			} else if (installedAgents.length === 0) {
-				if (options.yes) {
-					targetAgents = validAgents;
-					log.info("正在安装到全部 Agent");
-				} else {
-					log.info("请选择要安装技能的 Agent");
-					const selected = await promptForAgents("请选择要安装到的 Agent：", Object.entries(agents).filter(([key]) => key !== "eve").map(([key, config]) => ({
-						value: key,
-						label: config.displayName
-					})));
-					if (isCancel(selected)) {
-						cancel("安装已取消");
-						await cleanup(tempDir);
-						process.exit(0);
-					}
-					targetAgents = selected;
+			} else if (installedAgents.length === 0) if (options.yes) {
+				targetAgents = validAgents;
+				log.info("正在安装到全部 Agent");
+			} else {
+				log.info("请选择要安装技能的 Agent");
+				const selected = await promptForAgents("请选择要安装到的 Agent：", Object.entries(agents).filter(([key]) => key !== "eve").map(([key, config]) => ({
+					value: key,
+					label: config.displayName
+				})));
+				if (isCancel(selected)) {
+					cancel("安装已取消");
+					await cleanup(tempDir);
+					process.exit(0);
 				}
-			} else if (installedAgents.length === 1 || options.yes) {
+				targetAgents = selected;
+			}
+			else if (installedAgents.length === 1 || options.yes) {
 				targetAgents = ensureUniversalAgents(installedAgents);
 				if (installedAgents.length === 1) {
 					const firstAgent = installedAgents[0];
@@ -3814,18 +3804,17 @@ async function runAdd(args, options = {}) {
 			const availableSubagents = getEveSubagents(process.cwd());
 			if (options.subagent && options.subagent.length > 0) eveSubagentTargets = options.subagent.map((s) => s === "root" || s === "." ? void 0 : s);
 			else if (availableSubagents.length > 0 && !options.yes) {
-				const subagentChoices = [{
-					value: "",
-					label: "根 Agent",
-					hint: "agent/skills"
-				}, ...availableSubagents.map((name) => ({
-					value: name,
-					label: name,
-					hint: `agent/subagents/${name}/skills`
-				}))];
 				const selectedSubagents = await multiselect$1({
 					message: "Eve 技能安装位置？",
-					options: subagentChoices,
+					options: [{
+						value: "",
+						label: "根 Agent",
+						hint: "agent/skills"
+					}, ...availableSubagents.map((name) => ({
+						value: name,
+						label: name,
+						hint: `agent/subagents/${name}/skills`
+					}))],
 					initialValues: [""],
 					required: true
 				});
@@ -4003,11 +3992,9 @@ async function runAdd(args, options = {}) {
 		const normalizedSource = getOwnerRepo(parsed);
 		const lockSource = getLockSource(parsed.url, normalizedSource);
 		const projectLockSourceUrl = getProjectLockSourceUrl(parsed.type, parsed.url);
-		if (normalizedSource) {
-			if (parseOwnerRepo(normalizedSource)) {
-				if (await repoPrivacyPromise === false) selectedSkills.map((s) => s.name).join(","), targetAgents.join(","), { ...installGlobally && { global: "1" } }, JSON.stringify(skillFiles), options.metadata;
-			} else selectedSkills.map((s) => s.name).join(","), targetAgents.join(","), { ...installGlobally && { global: "1" } }, JSON.stringify(skillFiles), options.metadata;
-		}
+		if (normalizedSource) if (parseOwnerRepo(normalizedSource)) {
+			if (await repoPrivacyPromise === false) selectedSkills.map((s) => s.name).join(","), targetAgents.join(","), { ...installGlobally && { global: "1" } }, JSON.stringify(skillFiles), options.metadata;
+		} else selectedSkills.map((s) => s.name).join(","), targetAgents.join(","), { ...installGlobally && { global: "1" } }, JSON.stringify(skillFiles), options.metadata;
 		if (successful.length > 0 && installGlobally && (normalizedSource || parsed.type === "skillhub")) {
 			const successfulSkillNames = new Set(successful.map((r) => r.skill));
 			let cachedTree;
@@ -4024,8 +4011,7 @@ async function runAdd(args, options = {}) {
 						const hash = getSkillFolderHashFromTree(cachedTree, skillPathValue);
 						if (hash) skillFolderHash = hash;
 					} else if (skillPathValue && tempDir) {
-						const skillDir = join(tempDir, dirname(skillPathValue));
-						const hash = await computeSkillFolderHash(skillDir);
+						const hash = await computeSkillFolderHash(join(tempDir, dirname(skillPathValue)));
 						if (hash) skillFolderHash = hash;
 					}
 					await addSkillToLock(skill.name, {
@@ -4069,13 +4055,11 @@ async function runAdd(args, options = {}) {
 				const skillResults = bySkill.get(r.skill) || [];
 				skillResults.push(r);
 				bySkill.set(r.skill, skillResults);
-				if (skillResults.length === 1) {
-					if (r.pluginName) {
-						const group = r.pluginName;
-						if (!groupedResults[group]) groupedResults[group] = [];
-						groupedResults[group].push(r);
-					} else ungroupedResults.push(r);
-				}
+				if (skillResults.length === 1) if (r.pluginName) {
+					const group = r.pluginName;
+					if (!groupedResults[group]) groupedResults[group] = [];
+					groupedResults[group].push(r);
+				} else ungroupedResults.push(r);
 			}
 			const skillCount = bySkill.size;
 			const symlinkFailures = successful.filter((r) => r.mode === "symlink" && r.symlinkFailed);
@@ -4771,15 +4755,12 @@ async function removeCommand(skillNames, options) {
 		}
 		const remainingAgents = (await detectInstalledAgents()).filter((a) => !targetAgents.includes(a));
 		let isStillUsed = false;
-		for (const agentKey of remainingAgents) {
-			const path = getInstallPath(skillName, agentKey, {
-				global: isGlobal,
-				cwd
-			});
-			if (await lstat(path).catch(() => null)) {
-				isStillUsed = true;
-				break;
-			}
+		for (const agentKey of remainingAgents) if (await lstat(getInstallPath(skillName, agentKey, {
+			global: isGlobal,
+			cwd
+		})).catch(() => null)) {
+			isStillUsed = true;
+			break;
 		}
 		if (!isStillUsed) await rm(canonicalPath, {
 			recursive: true,
@@ -4919,14 +4900,12 @@ function parseUpdateOptions(args) {
 }
 function hasProjectSkills(cwd) {
 	const dir = cwd || process.cwd();
-	const lockPath = join(dir, "skills-lock.json");
-	if (existsSync(lockPath)) return true;
+	if (existsSync(join(dir, "skills-lock.json"))) return true;
 	const skillsDir = join(dir, ".agents", "skills");
 	try {
 		const entries = readdirSync(skillsDir, { withFileTypes: true });
 		for (const entry of entries) if (entry.isDirectory()) {
-			const skillMd = join(skillsDir, entry.name, "SKILL.md");
-			if (existsSync(skillMd)) return true;
+			if (existsSync(join(skillsDir, entry.name, "SKILL.md"))) return true;
 		}
 	} catch {}
 	return false;
@@ -5350,8 +5329,7 @@ async function updateProjectSkills(options = {}) {
 		try {
 			tempDir = await cloneRepo(sourceUrl, ref);
 			const discoveredPaths = (await discoverSkills(tempDir)).map((s) => {
-				const relPath = relative(tempDir, s.path);
-				return join(relPath, "SKILL.md").split(sep).join("/");
+				return join(relative(tempDir, s.path), "SKILL.md").split(sep).join("/");
 			});
 			deletedSkills = await checkAndPromptForDeletions(source, allLockedForSource, localLock.skills, false, options, discoveredPaths);
 		} catch (error) {
@@ -5810,12 +5788,8 @@ function fail(message) {
 }
 var UseCommandError = class extends Error {};
 async function runLogin(args, globalOpts) {
-	const token = getOptionValue$3(args, "--token");
+	const token = getOptionValue$3(args, "--token") || await promptForToken();
 	const { registry } = resolveConfig(globalOpts);
-	if (!token) {
-		console.error("用法：bfi auth login --token <token>");
-		process.exit(1);
-	}
 	const api = new SkillHubAPI(registry, token);
 	try {
 		const response = await api.whoami();
@@ -5848,7 +5822,7 @@ async function runLogout() {
 async function runWhoami(globalOpts) {
 	const { registry, token } = resolveConfig(globalOpts);
 	if (!token) {
-		console.error("未认证。运行：bfi auth login --token <token>");
+		console.error("未认证。运行：bfi auth login（在隐藏提示中输入 Token）");
 		process.exit(1);
 	}
 	const response = await new SkillHubAPI(registry, token).whoami();
@@ -5889,6 +5863,47 @@ async function runWhoami(globalOpts) {
 	}
 	console.log();
 }
+function promptForToken() {
+	const input = process.stdin;
+	if (!input.isTTY || typeof input.setRawMode !== "function") throw new Error("请在交互式终端运行 `bfi auth login`，Token 将以隐藏方式输入。");
+	process.stderr.write("请输入 SkillHub Token（输入内容隐藏）: ");
+	return new Promise((resolve, reject) => {
+		let token = "";
+		let finished = false;
+		const wasRaw = input.isRaw;
+		const cleanup = () => {
+			if (finished) return;
+			finished = true;
+			input.off("data", onData);
+			input.setRawMode(Boolean(wasRaw));
+			input.pause();
+			process.stderr.write("\n");
+		};
+		const onData = (chunk) => {
+			for (const character of chunk.toString("utf8")) {
+				const code = character.charCodeAt(0);
+				if (code === 3 || code === 4) {
+					cleanup();
+					reject(/* @__PURE__ */ new Error("登录已取消。"));
+					return;
+				}
+				if (character === "\r" || character === "\n") {
+					cleanup();
+					const value = token.trim();
+					if (value) resolve(value);
+					else reject(/* @__PURE__ */ new Error("Token 不能为空。"));
+					return;
+				}
+				if (code === 8 || code === 127) token = token.slice(0, -1);
+				else if (code >= 32 && code <= 126) token += character;
+			}
+		};
+		input.setRawMode(true);
+		input.setEncoding("utf8");
+		input.resume();
+		input.on("data", onData);
+	});
+}
 function getOptionValue$3(args, flag) {
 	const idx = args.indexOf(flag);
 	return idx !== -1 && args[idx + 1] ? args[idx + 1] : void 0;
@@ -6285,8 +6300,8 @@ const DIM$5 = "\x1B[38;5;102m";
 const TEXT$4 = "\x1B[38;5;145m";
 function formatFileSize(bytes) {
 	if (bytes < 1024) return `${bytes} B`;
-	if (bytes < 1048576) return `${(bytes / 1024).toFixed(1)} KB`;
-	return `${(bytes / 1048576).toFixed(1)} MB`;
+	if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+	return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
 }
 async function runDocs(args, globalOpts) {
 	switch (args[0]) {
@@ -6550,8 +6565,7 @@ async function publishFromDir(positionalArgs, api, namespace, visibility) {
 		console.log("需要包含 frontmatter（name, description）的 SKILL.md 文件。");
 		process.exit(1);
 	}
-	const skillMdContent = fs.readFileSync(skillMdPath, "utf-8");
-	const { data: frontmatter } = parseFrontmatter(skillMdContent);
+	const { data: frontmatter } = parseFrontmatter(fs.readFileSync(skillMdPath, "utf-8"));
 	const skillName = frontmatter.name || path$1.basename(resolvedDir);
 	console.log(`${DIM$4}正在从目录发布技能...${RESET$4}`);
 	console.log(`  ${BOLD$2}名称：${RESET$4}        ${TEXT$3}${skillName}${RESET$4}`);
@@ -6569,7 +6583,7 @@ async function publishFromDir(positionalArgs, api, namespace, visibility) {
 		if (res.slug) console.log(`  ${BOLD$2}Slug：${RESET$4} ${TEXT$3}${res.slug}${RESET$4}`);
 		if (res.url) console.log(`  ${BOLD$2}URL：${RESET$4}  ${TEXT$3}${res.url}${RESET$4}`);
 	} catch (error) {
-		console.error(`  ${RED$2}发布失败：${error.message}${RESET$4}`);
+		printPublishFailure(error, api.registry);
 		process.exit(1);
 	}
 	console.log();
@@ -6598,8 +6612,7 @@ async function publishFromZip(positionalArgs, api, namespace, visibility) {
 		}
 		const skillDir = path$1.dirname(skillMdPath);
 		console.log(`  ${GREEN$3}在 ${path$1.relative(tmpDir, skillDir) || "."} 中找到 SKILL.md${RESET$4}`);
-		const skillMdContent = fs.readFileSync(skillMdPath, "utf-8");
-		const { data: frontmatter } = parseFrontmatter(skillMdContent);
+		const { data: frontmatter } = parseFrontmatter(fs.readFileSync(skillMdPath, "utf-8"));
 		const skillName = frontmatter.name || path$1.basename(skillDir);
 		console.log(`  ${BOLD$2}名称：${RESET$4}        ${TEXT$3}${skillName}${RESET$4}`);
 		console.log(`  ${BOLD$2}命名空间：${RESET$4}   ${TEXT$3}${namespace}${RESET$4}`);
@@ -6614,7 +6627,7 @@ async function publishFromZip(positionalArgs, api, namespace, visibility) {
 		if (res.slug) console.log(`  ${BOLD$2}Slug：${RESET$4} ${TEXT$3}${res.slug}${RESET$4}`);
 		if (res.url) console.log(`  ${BOLD$2}URL：${RESET$4}  ${TEXT$3}${res.url}${RESET$4}`);
 	} catch (error) {
-		if (error.message && !error.message.includes("Publish failed")) console.error(`  ${RED$2}错误：${error.message}${RESET$4}`);
+		if (error.message && !error.message.includes("Publish failed")) printPublishFailure(error, api.registry);
 		process.exit(1);
 	} finally {
 		try {
@@ -6724,7 +6737,7 @@ async function publishFromGit(positionalArgs, api, namespace, visibility, yes, b
 			console.log(`  ${GREEN$3}✓ 已发布：${namespace}--${res.slug || skill.name}${RESET$4}`);
 			successCount++;
 		} catch (error) {
-			console.error(`  ${RED$2}✗ ${skill.name}：${error.message}${RESET$4}`);
+			printPublishFailure(error, api.registry, `✗ ${skill.name}：`);
 		}
 	}
 	console.log(`\n${GREEN$3}发布完成：${successCount}/${selectedSkills.length} 个技能${RESET$4}`);
@@ -6733,6 +6746,17 @@ async function publishFromGit(positionalArgs, api, namespace, visibility, yes, b
 		await cleanupTempDir(tmpDir);
 	} catch {}
 }
+function printPublishFailure(error, registry, label = "发布失败：") {
+	const requiredScope = error?.body?.data?.requiredScope;
+	if (error?.status === 403 && typeof requiredScope === "string" && requiredScope) {
+		const settingsUrl = `${registry}/dashboard/tokens`;
+		console.error(`  ${RED$2}${label}当前 API Token 缺少「${requiredScope}」权限。${RESET$4}`);
+		console.error(`  ${DIM$4}修复：打开 ${settingsUrl} 新建 Token 并勾选「技能发布」，${RESET$4}`);
+		console.error(`  ${DIM$4}然后执行 bfi auth login --token <新 Token> 后重试。${RESET$4}`);
+		return;
+	}
+	console.error(`  ${RED$2}${label}${error.message}${RESET$4}`);
+}
 function getOptionValue$1(args, flag) {
 	const idx = args.indexOf(flag);
 	return idx !== -1 && idx < args.length - 1 ? args[idx + 1] : void 0;
@@ -6769,8 +6793,8 @@ function findSkillMd(dir) {
 }
 function formatSize(bytes) {
 	if (bytes < 1024) return `${bytes} B`;
-	if (bytes < 1048576) return `${(bytes / 1024).toFixed(1)} KB`;
-	return `${(bytes / 1048576).toFixed(1)} MB`;
+	if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+	return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
 }
 function truncate(text, maxLen) {
 	if (text.length <= maxLen) return text;
@@ -7055,8 +7079,7 @@ function printPackageHelp() {
 	console.log();
 }
 async function handleLocalList(args, globalOpts) {
-	const cwd = getWorkdir(globalOpts, args);
-	const lock = loadLockfile(cwd);
+	const lock = loadLockfile(getWorkdir(globalOpts, args));
 	args.includes("-g") || args.includes("--global");
 	const pkgs = lock.packages || {};
 	const entries = Object.entries(pkgs);
@@ -7253,18 +7276,17 @@ async function handleInstall(args, api, globalOpts) {
 		if (targetAgents.includes("eve")) {
 			const availableSubagents = getEveSubagents(process.cwd());
 			if (availableSubagents.length > 0) {
-				const subagentChoices = [{
-					value: "",
-					label: "根 Agent",
-					hint: "agent/skills"
-				}, ...availableSubagents.map((name) => ({
-					value: name,
-					label: name,
-					hint: `agent/subagents/${name}/skills`
-				}))];
 				const selectedSubagents = await multiselect$1({
 					message: "Eve 技能安装位置？",
-					options: subagentChoices,
+					options: [{
+						value: "",
+						label: "根 Agent",
+						hint: "agent/skills"
+					}, ...availableSubagents.map((name) => ({
+						value: name,
+						label: name,
+						hint: `agent/subagents/${name}/skills`
+					}))],
 					initialValues: [""],
 					required: true
 				});
@@ -7459,8 +7481,7 @@ async function handleUninstall(args, globalOpts) {
 }
 async function handleUpdate(args, api, globalOpts) {
 	const pkgRef = args[0];
-	const cwd = getWorkdir(globalOpts, args);
-	const lock = loadLockfile(cwd);
+	const lock = loadLockfile(getWorkdir(globalOpts, args));
 	let packagesToUpdate = [];
 	const pkgs = lock.packages || {};
 	if (pkgRef) {
@@ -9751,7 +9772,7 @@ ${BOLD}bfi — 用友大业财BFI统一命令行工具${RESET}
 ${BOLD}Usage:${RESET} bfi <command> [options]
 
 ${BOLD}━━━ 认证 ━━━${RESET}
-  auth login --token <token>    登录 SkillHub
+  auth login [--token <token>]  登录 SkillHub（不带参数时隐藏输入 Token）
   auth logout                   登出
   auth whoami                   查看当前用户
 
@@ -9826,7 +9847,7 @@ ${BOLD}━━━ 技能引用格式 ━━━${RESET}
   owner/repo            从 GitHub 安装
 
 ${BOLD}━━━ 示例 ━━━${RESET}
-  ${DIM}$ bfi auth login --token sk-xxx${RESET}
+  ${DIM}$ bfi auth login${RESET}
   ${DIM}$ bfi skills search react${RESET}
   ${DIM}$ bfi skills add @myteam/db-explore${RESET}
   ${DIM}$ bfi skills add vercel-labs/agent-skills --skill pr-review${RESET}
@@ -9880,7 +9901,7 @@ function runInit(args) {
 		return;
 	}
 	if (hasName) mkdirSync(skillDir, { recursive: true });
-	const skillContent = `---
+	writeFileSync(skillFile, `---
 name: ${skillName}
 description: A brief description of what this skill does
 ---
@@ -9898,8 +9919,7 @@ Describe when this skill should be used.
 1. First step
 2. Second step
 3. Additional steps as needed
-`;
-	writeFileSync(skillFile, skillContent);
+`);
 	console.log(`${TEXT}已初始化技能：${DIM}${skillName}${RESET}`);
 	console.log();
 	console.log(`${DIM}已创建：${RESET}`);

package/dist/mcp-codesearch/main.d.mts

@@ -1 +1 @@
-export {}
+export { };

package/dist/mcp-codesearch/main.mjs

@@ -3,6 +3,7 @@ import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { CallToolRequestSchema, CallToolResultSchema, ListToolsRequestSchema, ListToolsResultSchema } from "@modelcontextprotocol/sdk/types.js";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import JSONbig from "json-bigint";
 import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
@@ -90,6 +91,7 @@ function loadGlobalConfig() {
 	}
 	return null;
 }
+JSONbig({ storeAsString: true });
 function resolveApiBase() {
 	return process.env.BFI_API_BASE || "https://bfi.yyuap.com/bfi-api";
 }

package/dist/mcp-db/main.d.mts

@@ -1 +1 @@
-export {}
+export { };

package/dist/mcp-db/main.mjs

@@ -2,6 +2,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
 import mysql from "mysql2/promise";
+import JSONbig from "json-bigint";
 import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
@@ -98,7 +99,9 @@ async function directExecute(dsn, sql, maxRows = DEFAULT_MAX_ROWS) {
 	try {
 		conn = await mysql.createConnection({
 			uri: dsn,
-			connectTimeout: 8e3
+			connectTimeout: 8e3,
+			supportBigNumbers: true,
+			bigNumberStrings: true
 		});
 	} catch (e) {
 		return {
@@ -150,6 +153,7 @@ function loadGlobalConfig() {
 	}
 	return null;
 }
+const JSONBigString = JSONbig({ storeAsString: true });
 function resolveApiBase() {
 	return process.env.BFI_API_BASE || "https://bfi.yyuap.com/bfi-api";
 }
@@ -185,7 +189,13 @@ async function post(path, payload, fetchImpl = fetch) {
 		throw new RestError("upstream_unreachable", `bfi-api（${resolveApiBase()}）不可达：${e instanceof Error ? e.message : String(e)}`);
 	}
 	if (resp.status === 401) throw new RestError("unauthorized", "v2 token 无效或过期：请重新 `bfi auth login --token <token>`");
-	const body = await resp.json().catch(() => ({}));
+	const rawText = await resp.text().catch(() => "");
+	let body = {};
+	try {
+		body = JSONBigString.parse(rawText);
+	} catch {
+		body = {};
+	}
 	if (body.code === 0) return body.data;
 	throw new RestError(body.data?.error_kind || "upstream_error", body.msg || "bfi-api 返回错误");
 }

package/dist/mcp-weknora/main.d.mts

@@ -1 +1 @@
-export {}
+export { };

package/dist/mcp-weknora/main.mjs

@@ -3,6 +3,7 @@ import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { CallToolRequestSchema, CallToolResultSchema, ListToolsRequestSchema, ListToolsResultSchema } from "@modelcontextprotocol/sdk/types.js";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import JSONbig from "json-bigint";
 import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
@@ -87,6 +88,7 @@ function loadGlobalConfig() {
 	}
 	return null;
 }
+JSONbig({ storeAsString: true });
 function resolveToken() {
 	if (process.env.BFI_TOKEN) return process.env.BFI_TOKEN;
 	return loadGlobalConfig()?.token ?? null;