bfi-cli 0.1.98 → 0.1.99

package/dist/cli.mjs

@@ -866,7 +866,12 @@ var SkillHubAPI = class {
 					try {
 						const parsed = JSON.parse(data);
 						if (res.statusCode && res.statusCode >= 200 && res.statusCode < 300) resolve(parsed);
-						else reject(new Error(parsed.msg || parsed.message || `HTTP ${res.statusCode}`));
+						else {
+							const error = new Error(parsed.msg || parsed.message || `HTTP ${res.statusCode}`);
+							error.status = res.statusCode;
+							error.body = parsed;
+							reject(error);
+						}
 					} catch {
 						reject(new Error(data || `HTTP ${res.statusCode}`));
 					}
@@ -5783,12 +5788,8 @@ function fail(message) {
 }
 var UseCommandError = class extends Error {};
 async function runLogin(args, globalOpts) {
-	const token = getOptionValue$3(args, "--token");
+	const token = getOptionValue$3(args, "--token") || await promptForToken();
 	const { registry } = resolveConfig(globalOpts);
-	if (!token) {
-		console.error("用法：bfi auth login --token <token>");
-		process.exit(1);
-	}
 	const api = new SkillHubAPI(registry, token);
 	try {
 		const response = await api.whoami();
@@ -5821,7 +5822,7 @@ async function runLogout() {
 async function runWhoami(globalOpts) {
 	const { registry, token } = resolveConfig(globalOpts);
 	if (!token) {
-		console.error("未认证。运行：bfi auth login --token <token>");
+		console.error("未认证。运行：bfi auth login（在隐藏提示中输入 Token）");
 		process.exit(1);
 	}
 	const response = await new SkillHubAPI(registry, token).whoami();
@@ -5862,6 +5863,47 @@ async function runWhoami(globalOpts) {
 	}
 	console.log();
 }
+function promptForToken() {
+	const input = process.stdin;
+	if (!input.isTTY || typeof input.setRawMode !== "function") throw new Error("请在交互式终端运行 `bfi auth login`，Token 将以隐藏方式输入。");
+	process.stderr.write("请输入 SkillHub Token（输入内容隐藏）: ");
+	return new Promise((resolve, reject) => {
+		let token = "";
+		let finished = false;
+		const wasRaw = input.isRaw;
+		const cleanup = () => {
+			if (finished) return;
+			finished = true;
+			input.off("data", onData);
+			input.setRawMode(Boolean(wasRaw));
+			input.pause();
+			process.stderr.write("\n");
+		};
+		const onData = (chunk) => {
+			for (const character of chunk.toString("utf8")) {
+				const code = character.charCodeAt(0);
+				if (code === 3 || code === 4) {
+					cleanup();
+					reject(/* @__PURE__ */ new Error("登录已取消。"));
+					return;
+				}
+				if (character === "\r" || character === "\n") {
+					cleanup();
+					const value = token.trim();
+					if (value) resolve(value);
+					else reject(/* @__PURE__ */ new Error("Token 不能为空。"));
+					return;
+				}
+				if (code === 8 || code === 127) token = token.slice(0, -1);
+				else if (code >= 32 && code <= 126) token += character;
+			}
+		};
+		input.setRawMode(true);
+		input.setEncoding("utf8");
+		input.resume();
+		input.on("data", onData);
+	});
+}
 function getOptionValue$3(args, flag) {
 	const idx = args.indexOf(flag);
 	return idx !== -1 && args[idx + 1] ? args[idx + 1] : void 0;
@@ -6541,7 +6583,7 @@ async function publishFromDir(positionalArgs, api, namespace, visibility) {
 		if (res.slug) console.log(`  ${BOLD$2}Slug：${RESET$4} ${TEXT$3}${res.slug}${RESET$4}`);
 		if (res.url) console.log(`  ${BOLD$2}URL：${RESET$4}  ${TEXT$3}${res.url}${RESET$4}`);
 	} catch (error) {
-		console.error(`  ${RED$2}发布失败：${error.message}${RESET$4}`);
+		printPublishFailure(error, api.registry);
 		process.exit(1);
 	}
 	console.log();
@@ -6585,7 +6627,7 @@ async function publishFromZip(positionalArgs, api, namespace, visibility) {
 		if (res.slug) console.log(`  ${BOLD$2}Slug：${RESET$4} ${TEXT$3}${res.slug}${RESET$4}`);
 		if (res.url) console.log(`  ${BOLD$2}URL：${RESET$4}  ${TEXT$3}${res.url}${RESET$4}`);
 	} catch (error) {
-		if (error.message && !error.message.includes("Publish failed")) console.error(`  ${RED$2}错误：${error.message}${RESET$4}`);
+		if (error.message && !error.message.includes("Publish failed")) printPublishFailure(error, api.registry);
 		process.exit(1);
 	} finally {
 		try {
@@ -6695,7 +6737,7 @@ async function publishFromGit(positionalArgs, api, namespace, visibility, yes, b
 			console.log(`  ${GREEN$3}✓ 已发布：${namespace}--${res.slug || skill.name}${RESET$4}`);
 			successCount++;
 		} catch (error) {
-			console.error(`  ${RED$2}✗ ${skill.name}：${error.message}${RESET$4}`);
+			printPublishFailure(error, api.registry, `✗ ${skill.name}：`);
 		}
 	}
 	console.log(`\n${GREEN$3}发布完成：${successCount}/${selectedSkills.length} 个技能${RESET$4}`);
@@ -6704,6 +6746,17 @@ async function publishFromGit(positionalArgs, api, namespace, visibility, yes, b
 		await cleanupTempDir(tmpDir);
 	} catch {}
 }
+function printPublishFailure(error, registry, label = "发布失败：") {
+	const requiredScope = error?.body?.data?.requiredScope;
+	if (error?.status === 403 && typeof requiredScope === "string" && requiredScope) {
+		const settingsUrl = `${registry}/dashboard/tokens`;
+		console.error(`  ${RED$2}${label}当前 API Token 缺少「${requiredScope}」权限。${RESET$4}`);
+		console.error(`  ${DIM$4}修复：打开 ${settingsUrl} 新建 Token 并勾选「技能发布」，${RESET$4}`);
+		console.error(`  ${DIM$4}然后执行 bfi auth login --token <新 Token> 后重试。${RESET$4}`);
+		return;
+	}
+	console.error(`  ${RED$2}${label}${error.message}${RESET$4}`);
+}
 function getOptionValue$1(args, flag) {
 	const idx = args.indexOf(flag);
 	return idx !== -1 && idx < args.length - 1 ? args[idx + 1] : void 0;
@@ -9719,7 +9772,7 @@ ${BOLD}bfi — 用友大业财BFI统一命令行工具${RESET}
 ${BOLD}Usage:${RESET} bfi <command> [options]
 
 ${BOLD}━━━ 认证 ━━━${RESET}
-  auth login --token <token>    登录 SkillHub
+  auth login [--token <token>]  登录 SkillHub（不带参数时隐藏输入 Token）
   auth logout                   登出
   auth whoami                   查看当前用户
 
@@ -9794,7 +9847,7 @@ ${BOLD}━━━ 技能引用格式 ━━━${RESET}
   owner/repo            从 GitHub 安装
 
 ${BOLD}━━━ 示例 ━━━${RESET}
-  ${DIM}$ bfi auth login --token sk-xxx${RESET}
+  ${DIM}$ bfi auth login${RESET}
   ${DIM}$ bfi skills search react${RESET}
   ${DIM}$ bfi skills add @myteam/db-explore${RESET}
   ${DIM}$ bfi skills add vercel-labs/agent-skills --skill pr-review${RESET}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bfi-cli",
-  "version": "0.1.98",
+  "version": "0.1.99",
   "description": "用友大业财BFI统一命令行工具，支持技能，技能包，元数据，UI元数据等",
   "type": "module",
   "bin": {