bfi-cli 0.1.98 → 0.1.100

package/dist/cli.mjs

@@ -4,7 +4,7 @@ import { isCancel } from "./_chunks/libs/@clack/core.mjs";
 import { cancel, confirm, groupMultiselect, intro, log, multiselect as multiselect$1, note, outro, select, spinner } from "./_chunks/libs/@clack/prompts.mjs";
 import { require_picocolors } from "./_chunks/libs/picocolors.mjs";
 import { addSkillToLocalLock, addSkillToLock, computeSkillFolderHash, discoverSkills, dismissPrompt, filterSkills, getAllLockedSkills, getGitHubToken, getLastSelectedAgents, getSkillDisplayName, getSkillFromLock, isPromptDismissed, parseFrontmatter, parseSkillMd, readLocalLock, readSkillLock, removeSkillFromLock, sanitizeMetadata, saveSelectedAgents, stripTerminalEscapes } from "./_chunks/skills.mjs";
-import { PluginRegistryClient } from "./_chunks/registry-client.mjs";
+import { PluginRegistryClient, parsePackageIntent } from "./_chunks/intent.mjs";
 import { loadGlobalConfig, loadLockfile, loadProjectConfig, resolveConfig, saveGlobalConfig, saveLockfile, setConfigValue } from "./_chunks/config.mjs";
 import { esm_default } from "./_chunks/libs/simple-git.mjs";
 import { EVE_SUBAGENTS_DIR, agents, detectInstalledAgents, getEveSubagents, getNonUniversalAgents, getUniversalAgents, getVisibleUniversalAgents, isUniversalAgent } from "./_chunks/agents.mjs";
@@ -451,8 +451,10 @@ async function searchMultiselect(options) {
 			}
 			if (key.name === "space") {
 				const item = filtered[cursor];
-				if (item) if (selected.has(item.value)) selected.delete(item.value);
-				else selected.add(item.value);
+				if (item) {
+					if (selected.has(item.value)) selected.delete(item.value);
+					else selected.add(item.value);
+				}
 				render();
 				return;
 			}
@@ -473,6 +475,46 @@ async function searchMultiselect(options) {
 		render();
 	});
 }
+function getCapabilities(version) {
+	return {
+		schemaVersion: 1,
+		version,
+		capabilities: [
+			"skill-install-v1",
+			"content-plan-v1",
+			"collection-bundle-v1",
+			"collection-mcp-v1",
+			"scope-selection-v1",
+			"plugin-plan-v1",
+			"plugin-export-v1",
+			"plugin-handoff-v1"
+		]
+	};
+}
+function installationArgumentError(args) {
+	const command = ["skills", "skill"].includes(args[0] ?? "") ? args.slice(1) : args;
+	const isPackageInstall = ["package", "pkg"].includes(command[0] ?? "") && ["install", "i"].includes(command[1] ?? "");
+	if (!isPackageInstall && ![
+		"add",
+		"a",
+		"i",
+		"install"
+	].includes(command[0] ?? "")) return;
+	if (isPackageInstall) try {
+		if (parsePackageIntent(command.slice(1)).mode === "plugin") return;
+	} catch {
+		return "安装参数或模式无效；插件参数必须使用明确的 --as plugin，尚未支持的技能参数不会执行。";
+	}
+	const reserved = [
+		"--content-plan",
+		"--scope",
+		"--from-archive",
+		"--input-env",
+		"--skills-only"
+	];
+	const found = command.find((argument) => reserved.includes(argument.split("=")[0]));
+	if (found) return `当前版本尚未支持 ${found.split("=")[0]}；完整内容计划安装将在后续阶段开放。现有安装不会静默忽略此参数。`;
+}
 var api_exports = /* @__PURE__ */ __exportAll({ SkillHubAPI: () => SkillHubAPI });
 var SkillHubAPI = class {
 	registry;
@@ -512,12 +554,14 @@ var SkillHubAPI = class {
 		if (url.protocol === "https:") requestOptions.rejectUnauthorized = this.rejectUnauthorized;
 		let bodyStr;
 		let bodyBuf;
-		if (options.body !== void 0) if (options.body instanceof Buffer) bodyBuf = options.body;
-		else if (typeof options.body === "string") bodyStr = options.body;
-		else if (typeof FormData !== "undefined" && options.body instanceof FormData) return this.fetchRequest(url, requestOptions, options.body);
-		else {
-			requestOptions.headers["Content-Type"] = "application/json";
-			bodyStr = JSON.stringify(options.body);
+		if (options.body !== void 0) {
+			if (options.body instanceof Buffer) bodyBuf = options.body;
+			else if (typeof options.body === "string") bodyStr = options.body;
+			else if (typeof FormData !== "undefined" && options.body instanceof FormData) return this.fetchRequest(url, requestOptions, options.body);
+			else {
+				requestOptions.headers["Content-Type"] = "application/json";
+				bodyStr = JSON.stringify(options.body);
+			}
 		}
 		return new Promise((resolve, reject) => {
 			const req = (url.protocol === "https:" ? https : http).request(url, requestOptions, (res) => {
@@ -674,7 +718,7 @@ var SkillHubAPI = class {
 		return body.data || body;
 	}
 	async getPackage(namespace, slug) {
-		const body = (await this.request("GET", `/namespaces/${namespace}/packages/${slug}`)).body;
+		const body = (await this.request("GET", `/namespaces/${namespace}/packages/${slug}`, { headers: { "X-BFI-Capabilities": getCapabilities("").capabilities.join(",") } })).body;
 		return body.data || body;
 	}
 	async listComponentFiles(namespace, slug, componentId) {
@@ -866,7 +910,12 @@ var SkillHubAPI = class {
 					try {
 						const parsed = JSON.parse(data);
 						if (res.statusCode && res.statusCode >= 200 && res.statusCode < 300) resolve(parsed);
-						else reject(new Error(parsed.msg || parsed.message || `HTTP ${res.statusCode}`));
+						else {
+							const error = new Error(parsed.msg || parsed.message || `HTTP ${res.statusCode}`);
+							error.status = res.statusCode;
+							error.body = parsed;
+							reject(error);
+						}
 					} catch {
 						reject(new Error(data || `HTTP ${res.statusCode}`));
 					}
@@ -1296,10 +1345,12 @@ async function isDirEntryOrSymlinkToDir(entry, entryPath) {
 	}
 }
 function getCanonicalSkillsDir(global, cwd) {
-	return join(global ? homedir() : cwd || process.cwd(), AGENTS_DIR, SKILLS_SUBDIR);
+	const baseDir = global ? homedir() : cwd || process.cwd();
+	return join(baseDir, AGENTS_DIR, SKILLS_SUBDIR);
 }
 function getEveSubagentSkillsDir(subagent, cwd) {
-	return join(cwd || process.cwd(), EVE_SUBAGENTS_DIR, sanitizeName(subagent), "skills");
+	const baseDir = cwd || process.cwd();
+	return join(baseDir, EVE_SUBAGENTS_DIR, sanitizeName(subagent), "skills");
 }
 function getAgentBaseDir(agentType, global, cwd, eveSubagent) {
 	if (isUniversalAgent(agentType)) return getCanonicalSkillsDir(global, cwd);
@@ -1377,7 +1428,8 @@ async function resolveParentSymlinks(path) {
 	const dir = dirname(resolved);
 	const base = basename(resolved);
 	try {
-		return join(await realpath(dir), base);
+		const realDir = await realpath(dir);
+		return join(realDir, base);
 	} catch {
 		return resolved;
 	}
@@ -1401,7 +1453,8 @@ async function createSymlink(target, linkPath) {
 		}
 		const linkDir = dirname(linkPath);
 		await mkdir(linkDir, { recursive: true });
-		const relativePath = relative(await resolveParentSymlinks(linkDir), target);
+		const realLinkDir = await resolveParentSymlinks(linkDir);
+		const relativePath = relative(realLinkDir, target);
 		const symlinkType = platform() === "win32" ? "junction" : void 0;
 		await symlink(symlinkType === "junction" ? resolvedTarget : relativePath, linkPath, symlinkType);
 		return true;
@@ -1426,6 +1479,8 @@ async function installSkillForAgent(skill, agentType, options = {}) {
 	const canonicalDir = join(canonicalBase, skillName);
 	const agentBase = getAgentBaseDir(agentType, isGlobal, cwd, eveSubagent);
 	const agentDir = join(agentBase, skillName);
+	const { assertLegacyUnmanaged } = await import("./_chunks/ownership.mjs");
+	await assertLegacyUnmanaged([canonicalDir, agentDir]);
 	if (!isPathSafe$1(canonicalBase, canonicalDir)) return {
 		success: false,
 		path: agentDir,
@@ -1470,7 +1525,8 @@ async function installSkillForAgent(skill, agentType, options = {}) {
 			mode: "symlink"
 		};
 		if (!isGlobal && !isUniversalAgent(agentType)) {
-			if (!existsSync(join(cwd, agents[agentType].skillsDir.split("/")[0])) && agentType !== "claude-code") return {
+			const agentRootDir = join(cwd, agents[agentType].skillsDir.split("/")[0]);
+			if (!existsSync(agentRootDir) && agentType !== "claude-code") return {
 				success: true,
 				path: canonicalDir,
 				canonicalPath: canonicalDir,
@@ -1544,7 +1600,8 @@ async function copyDirectory(src, dest, agentType) {
 				dereference: true,
 				recursive: true
 			});
-			await chmod(destPath, (await stat(srcPath)).mode & 511);
+			const sourceStats = await stat(srcPath);
+			await chmod(destPath, sourceStats.mode & 511);
 		} catch (err) {
 			if (err instanceof Error && "code" in err && err.code === "ENOENT" && entry.isSymbolicLink()) console.warn(`Skipping broken symlink: ${srcPath}`);
 			else throw err;
@@ -1761,7 +1818,8 @@ async function installBlobSkillForAgent(skill, agentType, options = {}) {
 			mode: "symlink"
 		};
 		if (!isGlobal && !isUniversalAgent(agentType)) {
-			if (!existsSync(join(cwd, agents[agentType].skillsDir.split("/")[0]))) return {
+			const agentRootDir = join(cwd, agents[agentType].skillsDir.split("/")[0]);
+			if (!existsSync(agentRootDir)) return {
 				success: true,
 				path: canonicalDir,
 				canonicalPath: canonicalDir,
@@ -1989,7 +2047,7 @@ var ProviderRegistryImpl = class {
 };
 new ProviderRegistryImpl();
 const DISCOVERY_SCHEMA_V2 = "https://schemas.agentskills.io/discovery/0.2.0/schema.json";
-const MAX_ARCHIVE_UNPACKED_BYTES = 50 * 1024 * 1024;
+const MAX_ARCHIVE_UNPACKED_BYTES = 52428800;
 const MAX_ARCHIVE_FILES = 1e3;
 var WellKnownProvider = class {
 	id = "well-known";
@@ -3142,22 +3200,23 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 		const installedAgents = await detectInstalledAgents();
 		const totalAgents = Object.keys(agents).length;
 		spinner.stop(`${totalAgents} agents`);
-		if (installedAgents.length === 0) if (options.yes) {
-			targetAgents = validAgents;
-			log.info("正在安装到全部 Agent");
-		} else {
-			log.info("请选择要安装技能的 Agent");
-			const selected = await promptForAgents("请选择要安装到的 Agent：", Object.entries(agents).map(([key, config]) => ({
-				value: key,
-				label: config.displayName
-			})));
-			if (isCancel(selected)) {
-				cancel("安装已取消");
-				process.exit(0);
+		if (installedAgents.length === 0) {
+			if (options.yes) {
+				targetAgents = validAgents;
+				log.info("正在安装到全部 Agent");
+			} else {
+				log.info("请选择要安装技能的 Agent");
+				const selected = await promptForAgents("请选择要安装到的 Agent：", Object.entries(agents).map(([key, config]) => ({
+					value: key,
+					label: config.displayName
+				})));
+				if (isCancel(selected)) {
+					cancel("安装已取消");
+					process.exit(0);
+				}
+				targetAgents = selected;
 			}
-			targetAgents = selected;
-		}
-		else if (installedAgents.length === 1 || options.yes) {
+		} else if (installedAgents.length === 1 || options.yes) {
 			targetAgents = ensureUniversalAgents(installedAgents);
 			if (installedAgents.length === 1) {
 				const firstAgent = installedAgents[0];
@@ -3392,13 +3451,14 @@ async function installFromSkillHub(parsed, options, spinner) {
 			slug = hit.slug;
 			log.info(`自动选择：${import_picocolors.default.cyan(`@${namespace}/${slug}`)} — ${hit.description || hit.name}`);
 		} else {
+			const choices = hits.map((h, idx) => ({
+				value: idx,
+				label: `@${h.namespace}/${h.slug}`,
+				hint: h.description || h.name
+			}));
 			const idx = await select({
 				message: "匹配到多个技能 — 请选择一个",
-				options: hits.map((h, idx) => ({
-					value: idx,
-					label: `@${h.namespace}/${h.slug}`,
-					hint: h.description || h.name
-				}))
+				options: choices
 			});
 			if (isCancel(idx)) {
 				cancel("安装已取消");
@@ -3425,7 +3485,8 @@ async function installFromSkillHub(parsed, options, spinner) {
 	}
 	const meta = metadata;
 	spinner.stop(`Skill: ${import_picocolors.default.cyan(`@${namespace}/${slug}`)}${meta.description ? ` — ${import_picocolors.default.dim(meta.description)}` : ""}`);
-	tempDir = join(tmpdir(), `.skillhub-skillshub-${canonicalSlug.replace(/[/:@]/g, "-")}-${Date.now()}`);
+	const tmpRoot = tmpdir();
+	tempDir = join(tmpRoot, `.skillhub-skillshub-${canonicalSlug.replace(/[/:@]/g, "-")}-${Date.now()}`);
 	mkdirSync(tempDir, { recursive: true });
 	const zipPath = join(tempDir, "skill.zip");
 	spinner.start("正在下载技能...");
@@ -3761,23 +3822,24 @@ async function runAdd(args, options = {}) {
 					}
 					targetAgents = selected;
 				}
-			} else if (installedAgents.length === 0) if (options.yes) {
-				targetAgents = validAgents;
-				log.info("正在安装到全部 Agent");
-			} else {
-				log.info("请选择要安装技能的 Agent");
-				const selected = await promptForAgents("请选择要安装到的 Agent：", Object.entries(agents).filter(([key]) => key !== "eve").map(([key, config]) => ({
-					value: key,
-					label: config.displayName
-				})));
-				if (isCancel(selected)) {
-					cancel("安装已取消");
-					await cleanup(tempDir);
-					process.exit(0);
+			} else if (installedAgents.length === 0) {
+				if (options.yes) {
+					targetAgents = validAgents;
+					log.info("正在安装到全部 Agent");
+				} else {
+					log.info("请选择要安装技能的 Agent");
+					const selected = await promptForAgents("请选择要安装到的 Agent：", Object.entries(agents).filter(([key]) => key !== "eve").map(([key, config]) => ({
+						value: key,
+						label: config.displayName
+					})));
+					if (isCancel(selected)) {
+						cancel("安装已取消");
+						await cleanup(tempDir);
+						process.exit(0);
+					}
+					targetAgents = selected;
 				}
-				targetAgents = selected;
-			}
-			else if (installedAgents.length === 1 || options.yes) {
+			} else if (installedAgents.length === 1 || options.yes) {
 				targetAgents = ensureUniversalAgents(installedAgents);
 				if (installedAgents.length === 1) {
 					const firstAgent = installedAgents[0];
@@ -3799,17 +3861,18 @@ async function runAdd(args, options = {}) {
 			const availableSubagents = getEveSubagents(process.cwd());
 			if (options.subagent && options.subagent.length > 0) eveSubagentTargets = options.subagent.map((s) => s === "root" || s === "." ? void 0 : s);
 			else if (availableSubagents.length > 0 && !options.yes) {
+				const subagentChoices = [{
+					value: "",
+					label: "根 Agent",
+					hint: "agent/skills"
+				}, ...availableSubagents.map((name) => ({
+					value: name,
+					label: name,
+					hint: `agent/subagents/${name}/skills`
+				}))];
 				const selectedSubagents = await multiselect$1({
 					message: "Eve 技能安装位置？",
-					options: [{
-						value: "",
-						label: "根 Agent",
-						hint: "agent/skills"
-					}, ...availableSubagents.map((name) => ({
-						value: name,
-						label: name,
-						hint: `agent/subagents/${name}/skills`
-					}))],
+					options: subagentChoices,
 					initialValues: [""],
 					required: true
 				});
@@ -3987,9 +4050,11 @@ async function runAdd(args, options = {}) {
 		const normalizedSource = getOwnerRepo(parsed);
 		const lockSource = getLockSource(parsed.url, normalizedSource);
 		const projectLockSourceUrl = getProjectLockSourceUrl(parsed.type, parsed.url);
-		if (normalizedSource) if (parseOwnerRepo(normalizedSource)) {
-			if (await repoPrivacyPromise === false) selectedSkills.map((s) => s.name).join(","), targetAgents.join(","), { ...installGlobally && { global: "1" } }, JSON.stringify(skillFiles), options.metadata;
-		} else selectedSkills.map((s) => s.name).join(","), targetAgents.join(","), { ...installGlobally && { global: "1" } }, JSON.stringify(skillFiles), options.metadata;
+		if (normalizedSource) {
+			if (parseOwnerRepo(normalizedSource)) {
+				if (await repoPrivacyPromise === false) selectedSkills.map((s) => s.name).join(","), targetAgents.join(","), { ...installGlobally && { global: "1" } }, JSON.stringify(skillFiles), options.metadata;
+			} else selectedSkills.map((s) => s.name).join(","), targetAgents.join(","), { ...installGlobally && { global: "1" } }, JSON.stringify(skillFiles), options.metadata;
+		}
 		if (successful.length > 0 && installGlobally && (normalizedSource || parsed.type === "skillhub")) {
 			const successfulSkillNames = new Set(successful.map((r) => r.skill));
 			let cachedTree;
@@ -4006,7 +4071,8 @@ async function runAdd(args, options = {}) {
 						const hash = getSkillFolderHashFromTree(cachedTree, skillPathValue);
 						if (hash) skillFolderHash = hash;
 					} else if (skillPathValue && tempDir) {
-						const hash = await computeSkillFolderHash(join(tempDir, dirname(skillPathValue)));
+						const skillDir = join(tempDir, dirname(skillPathValue));
+						const hash = await computeSkillFolderHash(skillDir);
 						if (hash) skillFolderHash = hash;
 					}
 					await addSkillToLock(skill.name, {
@@ -4050,11 +4116,13 @@ async function runAdd(args, options = {}) {
 				const skillResults = bySkill.get(r.skill) || [];
 				skillResults.push(r);
 				bySkill.set(r.skill, skillResults);
-				if (skillResults.length === 1) if (r.pluginName) {
-					const group = r.pluginName;
-					if (!groupedResults[group]) groupedResults[group] = [];
-					groupedResults[group].push(r);
-				} else ungroupedResults.push(r);
+				if (skillResults.length === 1) {
+					if (r.pluginName) {
+						const group = r.pluginName;
+						if (!groupedResults[group]) groupedResults[group] = [];
+						groupedResults[group].push(r);
+					} else ungroupedResults.push(r);
+				}
 			}
 			const skillCount = bySkill.size;
 			const symlinkFailures = successful.filter((r) => r.mode === "symlink" && r.symlinkFailed);
@@ -4704,6 +4772,14 @@ async function removeCommand(skillNames, options) {
 		targetAgents = Object.keys(agents);
 		spinner$2.stop(`Targeting ${targetAgents.length} potential agent(s)`);
 	}
+	const { assertLegacyUnmanaged } = await import("./_chunks/ownership.mjs");
+	await assertLegacyUnmanaged(selectedSkills.flatMap((skill) => [getCanonicalPath(skill, {
+		global: isGlobal,
+		cwd
+	}), ...targetAgents.map((agent) => getInstallPath(skill, agent, {
+		global: isGlobal,
+		cwd
+	}))]));
 	if (!options.yes) {
 		console.log();
 		log.info("要卸载的技能：");
@@ -4750,12 +4826,15 @@ async function removeCommand(skillNames, options) {
 		}
 		const remainingAgents = (await detectInstalledAgents()).filter((a) => !targetAgents.includes(a));
 		let isStillUsed = false;
-		for (const agentKey of remainingAgents) if (await lstat(getInstallPath(skillName, agentKey, {
-			global: isGlobal,
-			cwd
-		})).catch(() => null)) {
-			isStillUsed = true;
-			break;
+		for (const agentKey of remainingAgents) {
+			const path = getInstallPath(skillName, agentKey, {
+				global: isGlobal,
+				cwd
+			});
+			if (await lstat(path).catch(() => null)) {
+				isStillUsed = true;
+				break;
+			}
 		}
 		if (!isStillUsed) await rm(canonicalPath, {
 			recursive: true,
@@ -4895,12 +4974,14 @@ function parseUpdateOptions(args) {
 }
 function hasProjectSkills(cwd) {
 	const dir = cwd || process.cwd();
-	if (existsSync(join(dir, "skills-lock.json"))) return true;
+	const lockPath = join(dir, "skills-lock.json");
+	if (existsSync(lockPath)) return true;
 	const skillsDir = join(dir, ".agents", "skills");
 	try {
 		const entries = readdirSync(skillsDir, { withFileTypes: true });
 		for (const entry of entries) if (entry.isDirectory()) {
-			if (existsSync(join(skillsDir, entry.name, "SKILL.md"))) return true;
+			const skillMd = join(skillsDir, entry.name, "SKILL.md");
+			if (existsSync(skillMd)) return true;
 		}
 	} catch {}
 	return false;
@@ -5324,7 +5405,8 @@ async function updateProjectSkills(options = {}) {
 		try {
 			tempDir = await cloneRepo(sourceUrl, ref);
 			const discoveredPaths = (await discoverSkills(tempDir)).map((s) => {
-				return join(relative(tempDir, s.path), "SKILL.md").split(sep).join("/");
+				const relPath = relative(tempDir, s.path);
+				return join(relPath, "SKILL.md").split(sep).join("/");
 			});
 			deletedSkills = await checkAndPromptForDeletions(source, allLockedForSource, localLock.skills, false, options, discoveredPaths);
 		} catch (error) {
@@ -5783,12 +5865,8 @@ function fail(message) {
 }
 var UseCommandError = class extends Error {};
 async function runLogin(args, globalOpts) {
-	const token = getOptionValue$3(args, "--token");
+	const token = getOptionValue$3(args, "--token") || await promptForToken();
 	const { registry } = resolveConfig(globalOpts);
-	if (!token) {
-		console.error("用法：bfi auth login --token <token>");
-		process.exit(1);
-	}
 	const api = new SkillHubAPI(registry, token);
 	try {
 		const response = await api.whoami();
@@ -5821,7 +5899,7 @@ async function runLogout() {
 async function runWhoami(globalOpts) {
 	const { registry, token } = resolveConfig(globalOpts);
 	if (!token) {
-		console.error("未认证。运行：bfi auth login --token <token>");
+		console.error("未认证。运行：bfi auth login（在隐藏提示中输入 Token）");
 		process.exit(1);
 	}
 	const response = await new SkillHubAPI(registry, token).whoami();
@@ -5862,6 +5940,47 @@ async function runWhoami(globalOpts) {
 	}
 	console.log();
 }
+function promptForToken() {
+	const input = process.stdin;
+	if (!input.isTTY || typeof input.setRawMode !== "function") throw new Error("请在交互式终端运行 `bfi auth login`，Token 将以隐藏方式输入。");
+	process.stderr.write("请输入 SkillHub Token（输入内容隐藏）: ");
+	return new Promise((resolve, reject) => {
+		let token = "";
+		let finished = false;
+		const wasRaw = input.isRaw;
+		const cleanup = () => {
+			if (finished) return;
+			finished = true;
+			input.off("data", onData);
+			input.setRawMode(Boolean(wasRaw));
+			input.pause();
+			process.stderr.write("\n");
+		};
+		const onData = (chunk) => {
+			for (const character of chunk.toString("utf8")) {
+				const code = character.charCodeAt(0);
+				if (code === 3 || code === 4) {
+					cleanup();
+					reject(/* @__PURE__ */ new Error("登录已取消。"));
+					return;
+				}
+				if (character === "\r" || character === "\n") {
+					cleanup();
+					const value = token.trim();
+					if (value) resolve(value);
+					else reject(/* @__PURE__ */ new Error("Token 不能为空。"));
+					return;
+				}
+				if (code === 8 || code === 127) token = token.slice(0, -1);
+				else if (code >= 32 && code <= 126) token += character;
+			}
+		};
+		input.setRawMode(true);
+		input.setEncoding("utf8");
+		input.resume();
+		input.on("data", onData);
+	});
+}
 function getOptionValue$3(args, flag) {
 	const idx = args.indexOf(flag);
 	return idx !== -1 && args[idx + 1] ? args[idx + 1] : void 0;
@@ -6258,8 +6377,8 @@ const DIM$5 = "\x1B[38;5;102m";
 const TEXT$4 = "\x1B[38;5;145m";
 function formatFileSize(bytes) {
 	if (bytes < 1024) return `${bytes} B`;
-	if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
-	return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+	if (bytes < 1048576) return `${(bytes / 1024).toFixed(1)} KB`;
+	return `${(bytes / 1048576).toFixed(1)} MB`;
 }
 async function runDocs(args, globalOpts) {
 	switch (args[0]) {
@@ -6523,7 +6642,8 @@ async function publishFromDir(positionalArgs, api, namespace, visibility) {
 		console.log("需要包含 frontmatter（name, description）的 SKILL.md 文件。");
 		process.exit(1);
 	}
-	const { data: frontmatter } = parseFrontmatter(fs.readFileSync(skillMdPath, "utf-8"));
+	const skillMdContent = fs.readFileSync(skillMdPath, "utf-8");
+	const { data: frontmatter } = parseFrontmatter(skillMdContent);
 	const skillName = frontmatter.name || path$1.basename(resolvedDir);
 	console.log(`${DIM$4}正在从目录发布技能...${RESET$4}`);
 	console.log(`  ${BOLD$2}名称：${RESET$4}        ${TEXT$3}${skillName}${RESET$4}`);
@@ -6541,7 +6661,7 @@ async function publishFromDir(positionalArgs, api, namespace, visibility) {
 		if (res.slug) console.log(`  ${BOLD$2}Slug：${RESET$4} ${TEXT$3}${res.slug}${RESET$4}`);
 		if (res.url) console.log(`  ${BOLD$2}URL：${RESET$4}  ${TEXT$3}${res.url}${RESET$4}`);
 	} catch (error) {
-		console.error(`  ${RED$2}发布失败：${error.message}${RESET$4}`);
+		printPublishFailure(error, api.registry);
 		process.exit(1);
 	}
 	console.log();
@@ -6570,7 +6690,8 @@ async function publishFromZip(positionalArgs, api, namespace, visibility) {
 		}
 		const skillDir = path$1.dirname(skillMdPath);
 		console.log(`  ${GREEN$3}在 ${path$1.relative(tmpDir, skillDir) || "."} 中找到 SKILL.md${RESET$4}`);
-		const { data: frontmatter } = parseFrontmatter(fs.readFileSync(skillMdPath, "utf-8"));
+		const skillMdContent = fs.readFileSync(skillMdPath, "utf-8");
+		const { data: frontmatter } = parseFrontmatter(skillMdContent);
 		const skillName = frontmatter.name || path$1.basename(skillDir);
 		console.log(`  ${BOLD$2}名称：${RESET$4}        ${TEXT$3}${skillName}${RESET$4}`);
 		console.log(`  ${BOLD$2}命名空间：${RESET$4}   ${TEXT$3}${namespace}${RESET$4}`);
@@ -6585,7 +6706,7 @@ async function publishFromZip(positionalArgs, api, namespace, visibility) {
 		if (res.slug) console.log(`  ${BOLD$2}Slug：${RESET$4} ${TEXT$3}${res.slug}${RESET$4}`);
 		if (res.url) console.log(`  ${BOLD$2}URL：${RESET$4}  ${TEXT$3}${res.url}${RESET$4}`);
 	} catch (error) {
-		if (error.message && !error.message.includes("Publish failed")) console.error(`  ${RED$2}错误：${error.message}${RESET$4}`);
+		if (error.message && !error.message.includes("Publish failed")) printPublishFailure(error, api.registry);
 		process.exit(1);
 	} finally {
 		try {
@@ -6695,7 +6816,7 @@ async function publishFromGit(positionalArgs, api, namespace, visibility, yes, b
 			console.log(`  ${GREEN$3}✓ 已发布：${namespace}--${res.slug || skill.name}${RESET$4}`);
 			successCount++;
 		} catch (error) {
-			console.error(`  ${RED$2}✗ ${skill.name}：${error.message}${RESET$4}`);
+			printPublishFailure(error, api.registry, `✗ ${skill.name}：`);
 		}
 	}
 	console.log(`\n${GREEN$3}发布完成：${successCount}/${selectedSkills.length} 个技能${RESET$4}`);
@@ -6704,6 +6825,17 @@ async function publishFromGit(positionalArgs, api, namespace, visibility, yes, b
 		await cleanupTempDir(tmpDir);
 	} catch {}
 }
+function printPublishFailure(error, registry, label = "发布失败：") {
+	const requiredScope = error?.body?.data?.requiredScope;
+	if (error?.status === 403 && typeof requiredScope === "string" && requiredScope) {
+		const settingsUrl = `${registry}/dashboard/tokens`;
+		console.error(`  ${RED$2}${label}当前 API Token 缺少「${requiredScope}」权限。${RESET$4}`);
+		console.error(`  ${DIM$4}修复：打开 ${settingsUrl} 新建 Token 并勾选「技能发布」，${RESET$4}`);
+		console.error(`  ${DIM$4}然后执行 bfi auth login --token <新 Token> 后重试。${RESET$4}`);
+		return;
+	}
+	console.error(`  ${RED$2}${label}${error.message}${RESET$4}`);
+}
 function getOptionValue$1(args, flag) {
 	const idx = args.indexOf(flag);
 	return idx !== -1 && idx < args.length - 1 ? args[idx + 1] : void 0;
@@ -6740,8 +6872,8 @@ function findSkillMd(dir) {
 }
 function formatSize(bytes) {
 	if (bytes < 1024) return `${bytes} B`;
-	if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
-	return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+	if (bytes < 1048576) return `${(bytes / 1024).toFixed(1)} KB`;
+	return `${(bytes / 1048576).toFixed(1)} MB`;
 }
 function truncate(text, maxLen) {
 	if (text.length <= maxLen) return text;
@@ -6830,107 +6962,6 @@ function maybePrintAnalyticsNotice(env = process.env) {
 		console.log();
 	} catch {}
 }
-const pluginTargets = [
-	"claude-code",
-	"codex",
-	"zcode",
-	"codebuddy",
-	"qwen-code"
-];
-const isPluginArchive = (value) => /\.(zip|tgz|tar\.gz)$/iu.test(value);
-const isPluginVersion = (value) => /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:-(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/u.test(value);
-function parsePackageIntent(args) {
-	const output = [...args];
-	let mode = "skills";
-	const occurrences = args.filter((value) => value === "--as" || value.startsWith("--as="));
-	if (occurrences.length) {
-		const index = output.indexOf("--as");
-		const requested = output[index + 1];
-		if (occurrences.length !== 1 || index < 0 || !["skills", "plugin"].includes(requested ?? "")) throw new Error("Use --as skills or --as plugin exactly once; upgrade bfi if this option is unavailable");
-		mode = requested;
-		output.splice(index, 2);
-	}
-	if (mode === "skills" && (output.some((value) => [
-		"--plan",
-		"--export",
-		"--scope",
-		"--root",
-		"--operation"
-	].includes(value) || /^(--plan|--export|--scope|--root|--operation)=/u.test(value)) || isPluginArchive(output[1] ?? ""))) throw new Error("Plugin archives and plugin options require explicit --as plugin; no skills were installed");
-	return {
-		mode,
-		args: output
-	};
-}
-function parsePluginArguments(args) {
-	const command = {
-		install: "install",
-		i: "install",
-		update: "update",
-		up: "update",
-		uninstall: "uninstall",
-		rm: "uninstall",
-		list: "list",
-		ls: "list"
-	}[args[0] ?? ""];
-	if (!command) throw new Error("Plugin intent supports install, update, uninstall and list");
-	const result = {
-		command,
-		scope: "project",
-		planOnly: false,
-		json: false
-	};
-	const seen = /* @__PURE__ */ new Set();
-	const values = /* @__PURE__ */ new Set([
-		"--agent",
-		"--version",
-		"--scope",
-		"--root",
-		"--export",
-		"--operation",
-		"--registry",
-		"--token",
-		"--namespace"
-	]);
-	for (let index = 1; index < args.length; index++) {
-		const option = args[index];
-		if (!option.startsWith("-")) {
-			if (result.source) throw new Error("Specify exactly one plugin source");
-			result.source = option;
-			continue;
-		}
-		const flag = option === "-g" ? "--global" : option === "-y" ? "--yes" : option;
-		if (seen.has(flag)) throw new Error(`Duplicate plugin option: ${flag}`);
-		seen.add(flag);
-		if (values.has(flag)) {
-			const value = args[++index];
-			if (value === void 0 || value.startsWith("-") || /[\u0000-\u001f\u007f]/u.test(value)) throw new Error(`Missing or invalid value for ${flag}`);
-			if (flag === "--agent") {
-				if (!pluginTargets.includes(value)) throw new Error("Unknown native plugin target");
-				result.agent = value;
-			} else if (flag === "--version") {
-				if (!isPluginVersion(value)) throw new Error("Plugin version must be exact SemVer, not latest or a range");
-				result.version = value;
-			} else if (flag === "--scope") {
-				if (!["project", "user"].includes(value)) throw new Error("Plugin scope must be project or user");
-				result.scope = value;
-			} else if (flag === "--root") result.root = value;
-			else if (flag === "--export") result.exportPath = value;
-			else if (flag === "--operation") result.operationId = value;
-		} else if (flag === "--global") result.scope = "user";
-		else if (flag === "--plan") result.planOnly = true;
-		else if (flag === "--json") result.json = true;
-		else if (flag !== "--yes") throw new Error(`Unknown plugin option: ${flag}; upgrade bfi if needed`);
-	}
-	if (seen.has("--scope") && seen.has("--global")) throw new Error("Use --scope or --global, not both");
-	if (command !== "list" && !result.agent) throw new Error("Full plugin operations require an explicit --agent");
-	if (command !== "list" && !result.source && !(command === "uninstall" && result.operationId)) throw new Error("Specify @namespace/package or a local zip/tgz path");
-	if (result.source && !/^@[^/\s]+\/[^/\s]+$/u.test(result.source) && !isPluginArchive(result.source)) throw new Error("Use a namespace-qualified @namespace/package reference or local archive");
-	if (result.planOnly && result.exportPath) throw new Error("Plan and export are separate operations");
-	if (result.root !== void 0 && !isPluginArchive(result.source ?? "") || result.operationId && command !== "uninstall" || (result.exportPath || result.root !== void 0) && command !== "install") throw new Error("Plugin option is invalid for this operation");
-	if (command === "list" && (result.source || result.version || result.planOnly || result.exportPath || result.operationId)) throw new Error("Invalid plugin list options");
-	return result;
-}
 var package_exports = /* @__PURE__ */ __exportAll({ runPackage: () => runPackage });
 const RESET$3 = "\x1B[0m";
 const BOLD$1 = "\x1B[1m";
@@ -7012,7 +7043,7 @@ function printPackageHelp() {
 	console.log(`${BOLD$1}选项：${RESET$3}`);
 	console.log(`  --namespace <ns>   目标命名空间`);
 	console.log(`  --agent <a>        目标 agent（如 claude-code、codex）`);
-	console.log(`  --as skills|plugin 默认 skills；完整插件必须显式 --as plugin --agent <a>`);
+	console.log(`  --as skills|plugin 默认 skills；完整插件必须显式 --as plugin，未指定 Agent/范围时交互选择`);
 	console.log(`  --version <v>      插件固定版本；省略只解析显式 stable，不回退 latest`);
 	console.log(`  --plan             插件模式只读计划，不写配置或安装记录`);
 	console.log(`  --export <archive> 插件模式校验后导出原始制品，不安装、不覆盖文件`);
@@ -7026,15 +7057,28 @@ function printPackageHelp() {
 	console.log();
 }
 async function handleLocalList(args, globalOpts) {
-	const lock = loadLockfile(getWorkdir(globalOpts, args));
+	const cwd = getWorkdir(globalOpts, args);
+	const lock = loadLockfile(cwd);
 	args.includes("-g") || args.includes("--global");
 	const pkgs = lock.packages || {};
 	const entries = Object.entries(pkgs);
-	if (args.includes("--json")) {
-		console.log(JSON.stringify(Object.values(pkgs), null, 2));
+	const json = args.includes("--json");
+	const { receipts } = await import("./_chunks/receipt.mjs");
+	const installed = (await receipts()).filter((record) => record.plan.kind === "COLLECTION");
+	if (json) {
+		console.log(JSON.stringify([...Object.values(pkgs), ...installed.map((record) => ({
+			ref: record.plan.ref,
+			registry: record.plan.registry,
+			state: record.state,
+			operation: record.id,
+			destination: record.destination,
+			skills: record.plan.skills.length,
+			mcps: record.plan.mcps.length
+		}))], null, 2));
 		return;
 	}
-	if (entries.length === 0) {
+	for (const record of installed) console.log(`${record.plan.ref} · ${record.state} · ${record.destination.agents.join(", ")} · ${record.destination.scope} · ${record.plan.skills.length} 技能 + ${record.plan.mcps.length} MCP · ${record.id}`);
+	if (entries.length === 0 && installed.length === 0) {
 		console.log("没有已安装的包。");
 		console.log(`使用 ${DIM$3}bfi skills package install <ref>${RESET$3} 安装包。`);
 		return;
@@ -7223,17 +7267,18 @@ async function handleInstall(args, api, globalOpts) {
 		if (targetAgents.includes("eve")) {
 			const availableSubagents = getEveSubagents(process.cwd());
 			if (availableSubagents.length > 0) {
+				const subagentChoices = [{
+					value: "",
+					label: "根 Agent",
+					hint: "agent/skills"
+				}, ...availableSubagents.map((name) => ({
+					value: name,
+					label: name,
+					hint: `agent/subagents/${name}/skills`
+				}))];
 				const selectedSubagents = await multiselect$1({
 					message: "Eve 技能安装位置？",
-					options: [{
-						value: "",
-						label: "根 Agent",
-						hint: "agent/skills"
-					}, ...availableSubagents.map((name) => ({
-						value: name,
-						label: name,
-						hint: `agent/subagents/${name}/skills`
-					}))],
+					options: subagentChoices,
 					initialValues: [""],
 					required: true
 				});
@@ -7428,7 +7473,8 @@ async function handleUninstall(args, globalOpts) {
 }
 async function handleUpdate(args, api, globalOpts) {
 	const pkgRef = args[0];
-	const lock = loadLockfile(getWorkdir(globalOpts, args));
+	const cwd = getWorkdir(globalOpts, args);
+	const lock = loadLockfile(cwd);
 	let packagesToUpdate = [];
 	const pkgs = lock.packages || {};
 	if (pkgRef) {
@@ -8761,7 +8807,6 @@ async function runYmc(args, globalOpts) {
 			break;
 		}
 		default: {
-			if (sub === "cases" || sub.startsWith("cases")) console.error("案例库已迁移 WeKnora：检索/归档改用 weknora-bfi MCP 工具（kb_search / kb_archive_case）。");
 			console.error(`未知子命令：${sub}`);
 			const hint = SUBCOMMAND_HINTS[sub];
 			if (hint) console.error(`提示：${hint}`);
@@ -8797,7 +8842,7 @@ const HELP = {
                           禁止 * | SELECT * WHERE 字段=... （WHERE 全扫描必超时）
     -t <time>             时间简写 10m/2h/3d/4w（默认无时间=服务端超大窗兜底，会命中数天前记录，务必显式指定）
     --start-time/--end-time  精确窗口 yyyy-MM-dd HH:mm:ss 北京时间（优先于 -t）
-    --days N              按天数回溯（旧参数，等价 -t Nd）
+    --days N              按天数回溯（等价 -t Nd）
     --line N              返回行数上限
   示例：
     bfi ymc sls-raw 'traceid: abc | SELECT * LIMIT 200' -e daily -t 1d
@@ -8831,8 +8876,8 @@ const HELP = {
     --app                 服务维度过滤（裸 appCode）
     --method              按调用方法过滤
     --min-cost <ms>       最小耗时过滤（body.costTime=[ms, 999999]）
-    （无 --profiler）      历史参数已移除映射——上游 enableProfiler 是"仅返回有 CPU 采样
-                          记录"的过滤器，实测任何组合均空集。CPU 热点走 dump-list。
+    --profiler            透传上游 enableProfiler（仅返回有 CPU 采样记录的调用）；
+                          该过滤器常返回空集，常规取证勿带，CPU 热点走 dump-list。
   示例：
     bfi ymc slowcall -t 1d --trace-id abc -e core3                 # 链路分层分解（跨服务根因链必用）
     bfi ymc slowcall -t 4w --app yonbip-scm-pu -e pre              # 服务慢调用趋势`,
@@ -8857,12 +8902,6 @@ const HELP = {
     --size N              返回条数（默认 100，最大 5000）`,
 	"dump-list": `bfi ymc dump-list -t <time> -e <env> [--app <appCode>] [--type profiler|heap|...] [--json]
   诊断文件列表（火焰图/JVM dump；CPU 热点取数的正确入口）。`,
-	cases: `bfi ymc cases <search|show|upload|index> [参数]
-  KEDB 案例库（内部诊断先验第一源）。
-    search [--type <t>] [--finger "<指纹>"] [--service <svc>] [--kw "<关键词>"] [--limit N]
-    show <case_id>
-    upload --file <报告.html> [--type slow-req] [--finger "词1,词2"] [--env] [--service]
-    index                 案例库索引重建`,
 	wiki: `bfi ymc wiki <search|show> [参数]
   知识库统一检索（confluence + jira + 文库 ecfile 三源——诊断先验的外部源，勿只查其一）。
     search "<关键词>" [--source confluence|jira|ecfile] [--limit N] [--titles]
@@ -8929,7 +8968,7 @@ bfi ymc — 观测查询（v2 API：YMC/Kibana/SLS/trace）
   sls-grep "<关键词>" -e <env>  SLS 全文检索聚合（异常历史分布取证）
   slowsql  -t <time> [-e] [--sql-str] [--md5] [--trace-id] [--app] [--no-profiler]
   slowcall -t <time> [-e] [--trace-id] [--app] [--method] [--min-cost ms]
-           [--profiler]  # ⚠️ 采样过滤器实测常为空集，常规取证勿带
+           [--profiler]  # ⚠️ 采样过滤器常为空集，常规取证勿带
   exceptions -t <time> [-e] [--app]
   alerts -t <time> [-e] [--level error|warn|info]
   url-stats </uri> -t <time> -e <env> [--app <service_name>]
@@ -8941,7 +8980,6 @@ bfi ymc — 观测查询（v2 API：YMC/Kibana/SLS/trace）
   callstat / sqlstat          慢调用/慢SQL 统计版聚合
   rca <...>                   官方智能诊断 RCA（长耗时）
   bpr-download <pk>           BPR 报告下载
-  cases <search|show|upload|index>  案例库（KEDB）
   wiki search "<kw>" [--source] [--titles]  知识库统一检索（wiki/jira/文库）
   wiki show <id> [--source]         知识条目全文
   call <route> -e <env> [--data '<json>']   通用透传（全部注册表端点）
@@ -9719,7 +9757,7 @@ ${BOLD}bfi — 用友大业财BFI统一命令行工具${RESET}
 ${BOLD}Usage:${RESET} bfi <command> [options]
 
 ${BOLD}━━━ 认证 ━━━${RESET}
-  auth login --token <token>    登录 SkillHub
+  auth login [--token <token>]  登录 SkillHub（不带参数时隐藏输入 Token）
   auth logout                   登出
   auth whoami                   查看当前用户
 
@@ -9749,11 +9787,12 @@ ${BOLD}━━━ 技能包管理 ━━━${RESET}
   skills package list [--namespace <ns>]      列出技能包
   skills package info <ref>                   查看包详情
   skills package create <slug> [--name] [--description]  创建包
-  skills package add <pkg> <skill...>         添加技能到包
-  skills package remove <pkg> <skill...>      从包移除技能
+  skills package add-skills <pkg> <skill...>  添加技能到包
+  skills package remove-skills <pkg> <skill...>  从包移除技能
   skills package install <ref> [--agent <a>]  安装技能组合（默认，不安装插件组件）
     --as plugin     显式完整插件模式；支持本地 zip/tgz，不兼容时不会降级安装
     --plan          只读校验安装计划；--export <archive> 仅导出，不安装
+    --prepare-native <dir>  准备完整原生目录和市场索引，审阅后交给宿主安装；不注册、不转技能
     --agent <a>      目标 agent（如 claude-code、codex、zcode）
     --global         安装到主目录（跨项目可用）
 
@@ -9762,6 +9801,12 @@ ${BOLD}━━━ 文档 ━━━${RESET}
   docs list             列出文档
   docs info <id>        查看文档详情
 
+${BOLD}━━━ MCP ━━━${RESET}
+  mcp search / info               查询独立 MCP 市场
+  mcp install <name...> --agent <agent>  保留已有配置，安装选定 MCP
+  mcp list / remove / test --agent <agent>  管理或验证 MCP
+  mcp --help                      参数、支持范围与安全说明
+
 ${BOLD}━━━ 观测查询（ymc）━━━${RESET}
   ymc status                       登录会话状态
   ymc trace <trace_id> -e <env>    traceId 三源合一（SLS+链路+ingress）
@@ -9778,6 +9823,7 @@ ${BOLD}━━━ DB 取证辅助（db）━━━${RESET}
                                     ytenant_id 条件且分库未知时，先定位再连）
 
 ${BOLD}━━━ 配置 ━━━${RESET}
+  capabilities --json  只读查询此构建已实现的安装能力（不联网、不修改配置）
   config get [key]      查看配置
   config set <key> <value> [--global]  设置配置
 
@@ -9794,7 +9840,7 @@ ${BOLD}━━━ 技能引用格式 ━━━${RESET}
   owner/repo            从 GitHub 安装
 
 ${BOLD}━━━ 示例 ━━━${RESET}
-  ${DIM}$ bfi auth login --token sk-xxx${RESET}
+  ${DIM}$ bfi auth login${RESET}
   ${DIM}$ bfi skills search react${RESET}
   ${DIM}$ bfi skills add @myteam/db-explore${RESET}
   ${DIM}$ bfi skills add vercel-labs/agent-skills --skill pr-review${RESET}
@@ -9848,7 +9894,7 @@ function runInit(args) {
 		return;
 	}
 	if (hasName) mkdirSync(skillDir, { recursive: true });
-	writeFileSync(skillFile, `---
+	const skillContent = `---
 name: ${skillName}
 description: A brief description of what this skill does
 ---
@@ -9866,7 +9912,8 @@ Describe when this skill should be used.
 1. First step
 2. Second step
 3. Additional steps as needed
-`);
+`;
+	writeFileSync(skillFile, skillContent);
 	console.log(`${TEXT}已初始化技能：${DIM}${skillName}${RESET}`);
 	console.log();
 	console.log(`${DIM}已创建：${RESET}`);
@@ -10024,6 +10071,45 @@ async function main() {
 	}
 	const command = args[0];
 	const restArgs = args.slice(1);
+	if (command === "capabilities") {
+		if (restArgs.some((argument) => argument !== "--json")) {
+			console.error("用法：bfi capabilities [--json]");
+			process.exitCode = 1;
+			return;
+		}
+		console.log(JSON.stringify(getCapabilities(VERSION), null, 2));
+		return;
+	}
+	const { dispatchInstallation } = await import("./_chunks/command.mjs");
+	if (await dispatchInstallation(args)) return;
+	const installationError = installationArgumentError(args);
+	if (installationError) {
+		console.error(installationError);
+		process.exitCode = 1;
+		return;
+	}
+	if (command === "mcp") {
+		const { runMcp } = await import("./_chunks/mcp.mjs");
+		await runMcp(restArgs);
+		return;
+	}
+	const packageRoute = ["skills", "skill"].includes(command) ? restArgs : args;
+	if (["package", "pkg"].includes(packageRoute[0] ?? "") && packageRoute.some((argument) => argument === "--as" || argument.startsWith("--as="))) {
+		const intent = parsePackageIntent(packageRoute.slice(1));
+		if (intent.mode === "plugin") {
+			const pluginOpts = {
+				workdir: process.cwd(),
+				version: VERSION
+			};
+			for (const name of ["registry", "token"]) {
+				const index = args.indexOf(`--${name}`);
+				if (index >= 0) pluginOpts[name] = args[index + 1];
+			}
+			const { runPluginPackage } = await import("./_chunks/package-plugin.mjs");
+			await runPluginPackage(intent.args, pluginOpts);
+			return;
+		}
+	}
 	try {
 		const { maybePrintAnalyticsNotice } = await Promise.resolve().then(() => analytics_exports);
 		maybePrintAnalyticsNotice();
@@ -10175,4 +10261,4 @@ main().catch((e) => {
 	console.error(`✗ ${e?.message || e}`);
 	process.exit(1);
 });
-export { isPluginArchive, isPluginVersion, parsePluginArguments };
+export { SkillHubAPI, getAgentBaseDir };