yingmi-skill-cli 0.0.6 → 0.0.8

package/README.md

@@ -52,6 +52,8 @@ yingmi-skill-cli mcp list
 yingmi-skill-cli mcp schema <toolName>
 yingmi-skill-cli mcp call <toolName> --input <json>
 
+yingmi-skill-cli remote-skill scope set --skills <skill1,skill2,...>
+yingmi-skill-cli remote-skill scope clear
 yingmi-skill-cli remote-skill list
 yingmi-skill-cli remote-skill enter <skillName>
 yingmi-skill-cli remote-skill exec --script <script>
@@ -113,6 +115,8 @@ yingmi-skill-cli mcp call getFundCampisiIndicator --input '{"fundCode":"000001",
 常用命令：
 
 ```bash
+yingmi-skill-cli remote-skill scope set --skills fund-analyzer,market-brief
+yingmi-skill-cli remote-skill scope clear
 yingmi-skill-cli remote-skill list
 yingmi-skill-cli remote-skill enter fund-analyzer
 yingmi-skill-cli remote-skill exec --script 'cat SKILL.md'
@@ -122,11 +126,14 @@ yingmi-skill-cli remote-skill exec --script-file ./scripts/run.sh
 
 行为约束：
 
+- `scope set --skills <a,b,c>`：设置本地 scope 白名单，限制 `remote-skill` 默认可见的 skill 范围
+- `scope clear`：清除本地 scope，恢复默认行为
 - `list`：调用远端 `/api/get-skills` 接口，使用本地 `apiKey` 作为请求头
-- `enter <skillName>`：每次都会重新调用远端 `/api/get-skill-by-name` 获取压缩包地址，下载并解压到 `~/.yingmi-skill-cli/skills/<skillName>` 后输出目录树，并把当前 skill 上下文写入本地配置
+- `list` 在配置了 scope 且与远端列表存在交集时，只返回交集；如果 scope 未配置或交集为空，则返回远端全量，避免返回空数组
+- `enter <skillName>`：会先基于当前可见 skill 列表做校验；通过后再调用远端 `/api/get-skill-by-name` 获取压缩包地址，下载并解压到 `~/.yingmi-skill-cli/skills/<skillName>` 后输出目录树，并把当前 skill 上下文写入本地配置
 - `exec --script/--script-file`：只能在最近一次成功 `enter` 后使用，建议先执行 `cat SKILL.md` 理解 skill 约定，再在当前 skill 目录执行入口脚本；执行结果输出状态、退出码、stdout 和 stderr，不额外回传本地工作目录路径
 - `remote-skill` 适合基金分析、组合诊断、财富规划、市场简报等场景任务；skill 内部可以继续调用多个 `mcp`
-- 远端服务地址默认读取 `https://stargate-staging.yingmi-inc.com/`，也可在 `~/.yingmi-skill-cli/config.json` 里手工设置 `remoteSkillServerBaseUrl`
+- 远端服务地址默认读取 `https://stargate-staging.yingmi-inc.com/`，也可在 `~/.yingmi-skill-cli/config.json` 里手工设置 `stargateBaseUrl`
 
 ### `help`
 
@@ -159,7 +166,7 @@ yingmi-skill-cli upgrade --check-only
 
 约束：
 
-- `--check-only` 只检查版本，不执行安装
+- `--check-only` 只检查版本，不执行安装；发现新版本时会在 stderr 输出可直接复制的 `npm install -g` 安装命令，并使用阿里云镜像
 - 真正执行升级前，应明确告知副作用
 - 非 TTY 场景下不能依赖确认交互
 
@@ -180,7 +187,7 @@ yingmi-skill-cli upgrade --check-only
 1. 先执行 `yingmi-skill-cli init setup`，让 CLI 进入可用状态。
 2. 如果要直接调用单个原子能力，先用 `yingmi-skill-cli mcp list` 浏览可用工具。
 3. 对于 `mcp`，继续用 `yingmi-skill-cli mcp schema <toolName>` 查看完整定义，再用 `yingmi-skill-cli mcp call <toolName>` 发起调用。
-4. 如果要完成基金分析、组合诊断、财富规划等场景任务，先用 `yingmi-skill-cli remote-skill list` 发现 skill，再用 `yingmi-skill-cli remote-skill enter <skillName>` 进入上下文，随后优先执行 `yingmi-skill-cli remote-skill exec --script 'cat SKILL.md'` 阅读说明，再按 skill 约定执行脚本。
+4. 如果要完成基金分析、组合诊断、财富规划等场景任务，可先用 `yingmi-skill-cli remote-skill scope set --skills <a,b,c>` 收敛默认 skill 范围，再用 `yingmi-skill-cli remote-skill list` 发现 skill，随后执行 `yingmi-skill-cli remote-skill enter <skillName>` 进入上下文，优先执行 `yingmi-skill-cli remote-skill exec --script 'cat SKILL.md'` 阅读说明，再按 skill 约定执行脚本。
 5. 需要查看帮助或升级时，分别使用 `help` 和 `upgrade`。
 
 ## 当前代码组织

package/bin/index.js

@@ -10,8 +10,8 @@ var axios = require('axios');
 var crypto = require('crypto');
 var child_process = require('child_process');
 
-var name = "yingmi-cli";
-var version = "0.0.6";
+var name = "yingmi-skill-cli";
+var version = "0.0.8";
 
 function fail(message) {
   console.error(message);
@@ -52,15 +52,15 @@ function registerHelpCommand(program) {
   \u67E5\u770B\u6839\u547D\u4EE4\u3001\u6A21\u5757\u547D\u4EE4\u6216\u6307\u5B9A\u5B50\u547D\u4EE4\u7684\u5E2E\u52A9\u4FE1\u606F\u3002
 
 \u793A\u4F8B:
-  yingmi-cli help
-  yingmi-cli help init
-  yingmi-cli help mcp
-  yingmi-cli help mcp call
-  yingmi-cli help remote-skill exec
+  yingmi-skill-cli help
+  yingmi-skill-cli help init
+  yingmi-skill-cli help mcp
+  yingmi-skill-cli help mcp call
+  yingmi-skill-cli help remote-skill exec
 
 \u8BF4\u660E:
   - help \u548C --help \u5171\u4EAB\u540C\u4E00\u5957\u547D\u4EE4\u5143\u6570\u636E
-  - \u4E0D\u786E\u5B9A\u8BE5\u770B\u54EA\u4E2A\u6A21\u5757\u65F6\uFF0C\u5148\u6267\u884C yingmi-cli help
+  - \u4E0D\u786E\u5B9A\u8BE5\u770B\u54EA\u4E2A\u6A21\u5757\u65F6\uFF0C\u5148\u6267\u884C yingmi-skill-cli help
   - \u4E0D\u786E\u5B9A\u8BE5\u7528 mcp \u8FD8\u662F remote-skill \u65F6\uFF0C\u5148\u770B\u5B83\u662F\u5728\u8C03\u7528\u5355\u4E2A\u80FD\u529B\uFF0C\u8FD8\u662F\u5728\u5B8C\u6210\u91D1\u878D\u573A\u666F\u4EFB\u52A1
   - \u5DF2\u77E5\u76EE\u6807\u6A21\u5757\u65F6\uFF0C\u4F18\u5148\u67E5\u770B\u66F4\u5177\u4F53\u7684\u5B50\u547D\u4EE4\u5E2E\u52A9
 `
@@ -81,7 +81,7 @@ ${prefix}
   });
 }
 
-const CONFIG_DIR = path.join(os.homedir(), ".yingmi-cli");
+const CONFIG_DIR = path.join(os.homedir(), ".yingmi-skill-cli");
 const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
 const SKILLS_DIR = path.join(CONFIG_DIR, "skills");
 const DEFAULT_QIEMAN_BASE_URL = "https://qieman.com";
@@ -100,7 +100,7 @@ function readConfig() {
   }
   const parsed = JSON.parse(content);
   if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-    throw new Error("\u914D\u7F6E\u6587\u4EF6\u683C\u5F0F\u975E\u6CD5\uFF0C\u8BF7\u68C0\u67E5 ~/.yingmi-cli/config.json");
+    throw new Error("\u914D\u7F6E\u6587\u4EF6\u683C\u5F0F\u975E\u6CD5\uFF0C\u8BF7\u68C0\u67E5 ~/.yingmi-skill-cli/config.json");
   }
   return parsed;
 }
@@ -143,6 +143,23 @@ function setCurrentRemoteSkillSession(session) {
   };
   writeConfig(nextConfig);
 }
+function getRemoteSkillScope() {
+  return readConfig().remoteSkillScope;
+}
+function setRemoteSkillScope(scope) {
+  const nextConfig = {
+    ...readConfig(),
+    remoteSkillScope: scope
+  };
+  writeConfig(nextConfig);
+}
+function clearRemoteSkillScope() {
+  const nextConfig = {
+    ...readConfig()
+  };
+  delete nextConfig.remoteSkillScope;
+  writeConfig(nextConfig);
+}
 function maskSecret(value) {
   if (!value) {
     return "(\u672A\u8BBE\u7F6E)";
@@ -247,7 +264,7 @@ function runInitDoctorChecks() {
         name: "api-key",
         status: "warning",
         message: "\u5C1A\u672A\u914D\u7F6E apiKey",
-        nextStep: "\u6267\u884C yingmi-cli init setup --api-key <your-api-key> \u6216\u9A8C\u8BC1\u7801\u521D\u59CB\u5316\u6D41\u7A0B"
+        nextStep: "\u6267\u884C yingmi-skill-cli init setup --api-key <your-api-key> \u6216\u9A8C\u8BC1\u7801\u521D\u59CB\u5316\u6D41\u7A0B"
       }
     );
     if (status.hasPendingSession && status.pendingPhone) {
@@ -255,7 +272,7 @@ function runInitDoctorChecks() {
         name: "pending-session",
         status: "warning",
         message: `\u5B58\u5728\u5F85\u5B8C\u6210\u7684\u9A8C\u8BC1\u7801\u767B\u5F55\u4E0A\u4E0B\u6587: ${status.pendingPhone}`,
-        nextStep: "\u6267\u884C yingmi-cli init setup --verify-code <\u9A8C\u8BC1\u7801> \u5B8C\u6210\u521D\u59CB\u5316"
+        nextStep: "\u6267\u884C yingmi-skill-cli init setup --verify-code <\u9A8C\u8BC1\u7801> \u5B8C\u6210\u521D\u59CB\u5316"
       });
     } else {
       checks.push({
@@ -269,7 +286,7 @@ function runInitDoctorChecks() {
       name: "config-read",
       status: "warning",
       message: `\u8BFB\u53D6\u914D\u7F6E\u5931\u8D25: ${getErrorMessage(error)}`,
-      nextStep: "\u68C0\u67E5 ~/.yingmi-cli/config.json \u683C\u5F0F\uFF0C\u5FC5\u8981\u65F6\u4FEE\u590D\u540E\u91CD\u8BD5"
+      nextStep: "\u68C0\u67E5 ~/.yingmi-skill-cli/config.json \u683C\u5F0F\uFF0C\u5FC5\u8981\u65F6\u4FEE\u590D\u540E\u91CD\u8BD5"
     });
   }
   return {
@@ -287,9 +304,9 @@ function getPendingSetupResult() {
     configFile: getConfigFilePath(),
     availableActions: ["--api-key <value>", "--phone <value>", "--verify-code <value>"],
     nextSteps: [
-      "yingmi-cli init setup --api-key <your-api-key>",
-      "yingmi-cli init setup --phone <your-phone>",
-      "yingmi-cli init setup --verify-code <\u9A8C\u8BC1\u7801>"
+      "yingmi-skill-cli init setup --api-key <your-api-key>",
+      "yingmi-skill-cli init setup --phone <your-phone>",
+      "yingmi-skill-cli init setup --verify-code <\u9A8C\u8BC1\u7801>"
     ]
   };
 }
@@ -339,7 +356,7 @@ const API_KEY_APPLICATION_PAYLOAD = {
 function createRequestId() {
   const hexTimestamp = Date.now().toString(16).toUpperCase();
   const randomSuffix = crypto.randomBytes(8).toString("hex").toUpperCase();
-  return `yingmi-cli.${hexTimestamp}${randomSuffix}`;
+  return `yingmi-skill-cli.${hexTimestamp}${randomSuffix}`;
 }
 function getHeaders(xSign, accessToken) {
   return {
@@ -379,7 +396,7 @@ async function prepareSmsSetup(phone) {
     configFile: getConfigFilePath(),
     pendingPhone: maskPhone(phone),
     cooldownSeconds: response.data.nextInSec ?? null,
-    nextStep: "yingmi-cli init setup --verify-code <\u9A8C\u8BC1\u7801>"
+    nextStep: "yingmi-skill-cli init setup --verify-code <\u9A8C\u8BC1\u7801>"
   };
 }
 
@@ -409,10 +426,14 @@ async function confirmSmsSetup(verifyCode) {
   validateVerifyCode(verifyCode);
   const session = getApiKeyApplySession();
   if (!session) {
-    throw new Error("\u672A\u627E\u5230\u9A8C\u8BC1\u7801\u767B\u5F55\u4E0A\u4E0B\u6587\uFF0C\u8BF7\u5148\u6267\u884C: yingmi-cli init setup --phone <\u624B\u673A\u53F7>");
+    throw new Error(
+      "\u672A\u627E\u5230\u9A8C\u8BC1\u7801\u767B\u5F55\u4E0A\u4E0B\u6587\uFF0C\u8BF7\u5148\u6267\u884C: yingmi-skill-cli init setup --phone <\u624B\u673A\u53F7>"
+    );
   }
   if (!session.accessToken && !session.prepareToken) {
-    throw new Error("\u7533\u8BF7\u4E0A\u4E0B\u6587\u7F3A\u5C11\u767B\u5F55 token\uFF0C\u8BF7\u91CD\u65B0\u6267\u884C: yingmi-cli init setup --phone <\u624B\u673A\u53F7>");
+    throw new Error(
+      "\u7533\u8BF7\u4E0A\u4E0B\u6587\u7F3A\u5C11\u767B\u5F55 token\uFF0C\u8BF7\u91CD\u65B0\u6267\u884C: yingmi-skill-cli init setup --phone <\u624B\u673A\u53F7>"
+    );
   }
   try {
     const qiemanPmdjBaseUrl = getQiemanPmdjBaseUrl();
@@ -483,7 +504,7 @@ async function confirmSmsSetup(verifyCode) {
         await refreshSessionXSignOnInvalidVerifyCode(session);
       } catch (refreshError) {
         throw new Error(
-          `\u9A8C\u8BC1\u7801\u6821\u9A8C\u5931\u8D25\uFF0C\u5237\u65B0 x-sign \u4E5F\u5931\u8D25\u4E86: ${getErrorMessage(refreshError)}\u3002\u8BF7\u91CD\u65B0\u6267\u884C: yingmi-cli init setup --phone <\u624B\u673A\u53F7>`
+          `\u9A8C\u8BC1\u7801\u6821\u9A8C\u5931\u8D25\uFF0C\u5237\u65B0 x-sign \u4E5F\u5931\u8D25\u4E86: ${getErrorMessage(refreshError)}\u3002\u8BF7\u91CD\u65B0\u6267\u884C: yingmi-skill-cli init setup --phone <\u624B\u673A\u53F7>`
         );
       }
     }
@@ -541,7 +562,7 @@ function registerDoctorCommand(initCommand) {
   \u8BCA\u65AD\u672C\u5730\u914D\u7F6E\u3001\u8FD0\u884C\u73AF\u5883\u548C\u521D\u59CB\u5316\u72B6\u6001\uFF0C\u5E2E\u52A9\u5B9A\u4F4D\u4E0D\u53EF\u7528\u539F\u56E0\u3002
 
 \u793A\u4F8B:
-  yingmi-cli init doctor
+  yingmi-skill-cli init doctor
 
 \u8BF4\u660E:
   - \u9002\u5408\u5728 init status \u8F93\u51FA\u5F02\u5E38\u65F6\u4F7F\u7528
@@ -562,10 +583,10 @@ function registerSetupCommand(initCommand) {
   3. \u5EFA\u8BAE\u4F18\u5148\u4F7F\u7528\u957F\u53C2\u6570\u540D\uFF0C\u4FBF\u4E8E\u811A\u672C\u548C Agent \u8C03\u7528
 
 \u793A\u4F8B:
-  yingmi-cli init setup
-  yingmi-cli init setup --api-key <value>
-  yingmi-cli init setup --phone <\u624B\u673A\u53F7>
-  yingmi-cli init setup --verify-code <\u9A8C\u8BC1\u7801>
+  yingmi-skill-cli init setup
+  yingmi-skill-cli init setup --api-key <value>
+  yingmi-skill-cli init setup --phone <\u624B\u673A\u53F7>
+  yingmi-skill-cli init setup --verify-code <\u9A8C\u8BC1\u7801>
 `
   ).action(async (options) => {
     try {
@@ -585,11 +606,11 @@ function registerStatusCommand(initCommand) {
   \u8F93\u51FA\u5F53\u524D\u521D\u59CB\u5316\u72B6\u6001\u6458\u8981\uFF0C\u4FBF\u4E8E\u786E\u8BA4 CLI \u662F\u5426\u5DF2\u53EF\u7528\u3002
 
 \u793A\u4F8B:
-  yingmi-cli init status
+  yingmi-skill-cli init status
 
 \u4E0B\u4E00\u6B65:
-  1. \u5982\u679C\u5C1A\u672A\u5B8C\u6210\u521D\u59CB\u5316\uFF0C\u6267\u884C yingmi-cli init setup
-  2. \u5982\u679C\u72B6\u6001\u5F02\u5E38\uFF0C\u6267\u884C yingmi-cli init doctor
+  1. \u5982\u679C\u5C1A\u672A\u5B8C\u6210\u521D\u59CB\u5316\uFF0C\u6267\u884C yingmi-skill-cli init setup
+  2. \u5982\u679C\u72B6\u6001\u5F02\u5E38\uFF0C\u6267\u884C yingmi-skill-cli init doctor
 `
   ).action(() => {
     console.log(JSON.stringify(getInitStatusSummary(), null, 2));
@@ -604,9 +625,9 @@ function registerInitCommand(program) {
   \u8BA9 CLI \u8FDB\u5165\u53EF\u7528\u72B6\u6001\uFF0C\u5E76\u68C0\u67E5\u5F53\u524D\u672C\u5730\u914D\u7F6E\u548C\u8FD0\u884C\u73AF\u5883\u3002
 
 \u63A8\u8350\u987A\u5E8F:
-  1. yingmi-cli init setup
-  2. yingmi-cli init status
-  3. \u9047\u5230\u95EE\u9898\u65F6\u6267\u884C yingmi-cli init doctor
+  1. yingmi-skill-cli init setup
+  2. yingmi-skill-cli init status
+  3. \u9047\u5230\u95EE\u9898\u65F6\u6267\u884C yingmi-skill-cli init doctor
 
 \u8BF4\u660E:
   - setup \u7528\u4E8E\u9996\u6B21\u521D\u59CB\u5316\u6216\u8865\u5168 API Key
@@ -652,7 +673,9 @@ function readJsonInput(input, inputFile) {
 function requireApiKey() {
   const { apiKey } = readConfig();
   if (!apiKey) {
-    fail("\u672A\u5B8C\u6210\u521D\u59CB\u5316\uFF0C\u8BF7\u5148\u6267\u884C: yingmi-cli init setup --phone <\u624B\u673A\u53F7> \u5B8C\u6210\u624B\u673A\u53F7\u9A8C\u8BC1\u7801\u521D\u59CB\u5316");
+    fail(
+      "\u672A\u5B8C\u6210\u521D\u59CB\u5316\uFF0C\u8BF7\u5148\u6267\u884C: yingmi-skill-cli init setup --phone <\u624B\u673A\u53F7> \u5B8C\u6210\u624B\u673A\u53F7\u9A8C\u8BC1\u7801\u521D\u59CB\u5316"
+    );
   }
   return apiKey;
 }
@@ -902,15 +925,15 @@ function registerCallCommand(mcpCommand) {
     "after",
     `
 \u8F93\u5165\u89C4\u5219:
-  1. \u5148\u6267\u884C yingmi-cli mcp schema <toolName> \u786E\u8BA4\u5B57\u6BB5\u540D\u548C requestBody
+  1. \u5148\u6267\u884C yingmi-skill-cli mcp schema <toolName> \u786E\u8BA4\u5B57\u6BB5\u540D\u548C requestBody
   2. path/query/header \u53C2\u6570\u53EF\u76F4\u63A5\u653E\u5728 JSON \u9876\u5C42\uFF0C\u4E5F\u53EF\u5206\u522B\u653E\u8FDB path/query/header
   3. body \u53EF\u663E\u5F0F\u653E\u5728 body \u5B57\u6BB5\uFF1B\u5982\u679C\u5DE5\u5177\u53EA\u6709 requestBody \u4E14\u6CA1\u6709\u5176\u5B83\u53C2\u6570\uFF0C\u4E5F\u53EF\u76F4\u63A5\u4F20 body \u5BF9\u8C61
   4. mcp call \u9002\u5408\u5355\u6B21\u539F\u5B50\u80FD\u529B\u8C03\u7528\uFF0C\u4E0D\u9002\u5408\u76F4\u63A5\u627F\u8F7D\u5B8C\u6574\u91D1\u878D\u573A\u666F\u5DE5\u4F5C\u6D41
 
 \u793A\u4F8B:
-  yingmi-cli mcp call GetCurrentTime
-  yingmi-cli mcp call GuessFundCode --input '{"fundNameOrCode":"\u6613\u65B9\u8FBE\u84DD\u7B79\u7CBE\u9009"}'
-  yingmi-cli mcp call <toolName> --input '{"query":{"pageNum":1},"body":{"keyword":"\u65B0\u80FD\u6E90"}}'
+  yingmi-skill-cli mcp call GetCurrentTime
+  yingmi-skill-cli mcp call GuessFundCode --input '{"fundNameOrCode":"\u6613\u65B9\u8FBE\u84DD\u7B79\u7CBE\u9009"}'
+  yingmi-skill-cli mcp call <toolName> --input '{"query":{"pageNum":1},"body":{"keyword":"\u65B0\u80FD\u6E90"}}'
 `
   ).action(async (toolName, options) => {
     const apiKey = requireApiKey();
@@ -972,8 +995,8 @@ function registerListCommand(mcpCommand) {
 
 \u4E0B\u4E00\u6B65:
   1. \u4ECE\u8F93\u51FA\u91CC\u6311\u4E00\u4E2A toolName
-  2. \u6267\u884C yingmi-cli mcp schema <toolName> \u67E5\u770B\u53C2\u6570\u548C\u54CD\u5E94\u7ED3\u6784
-  3. \u5982\u679C\u76EE\u6807\u5176\u5B9E\u662F\u57FA\u91D1\u5206\u6790\u3001\u7EC4\u5408\u8BCA\u65AD\u6216\u8D22\u5BCC\u89C4\u5212\u7B49\u5B8C\u6574\u573A\u666F\uFF0C\u6539\u770B yingmi-cli remote-skill list
+  2. \u6267\u884C yingmi-skill-cli mcp schema <toolName> \u67E5\u770B\u53C2\u6570\u548C\u54CD\u5E94\u7ED3\u6784
+  3. \u5982\u679C\u76EE\u6807\u5176\u5B9E\u662F\u57FA\u91D1\u5206\u6790\u3001\u7EC4\u5408\u8BCA\u65AD\u6216\u8D22\u5BCC\u89C4\u5212\u7B49\u5B8C\u6574\u573A\u666F\uFF0C\u6539\u770B yingmi-skill-cli remote-skill list
 `
   ).action(async () => {
     const apiKey = requireApiKey();
@@ -1003,11 +1026,11 @@ function registerSchemaCommand(mcpCommand) {
   0. schema \u9002\u5408\u5728\u4F60\u5DF2\u7ECF\u786E\u5B9A\u8981\u8C03\u7528\u67D0\u4E2A\u539F\u5B50\u80FD\u529B\u65F6\u4F7F\u7528
   1. \u5148\u770B parameters\uFF0C\u786E\u8BA4 path/query/header \u7684\u5B57\u6BB5\u540D
   2. \u518D\u770B requestBody\uFF0C\u786E\u8BA4 body \u662F\u5426\u5FC5\u586B
-  3. \u6700\u540E\u6267\u884C yingmi-cli mcp call <toolName> --input '<json>'
+  3. \u6700\u540E\u6267\u884C yingmi-skill-cli mcp call <toolName> --input '<json>'
 
 \u793A\u4F8B:
-  yingmi-cli mcp schema GetCurrentTime
-  yingmi-cli mcp schema GuessFundCode
+  yingmi-skill-cli mcp schema GetCurrentTime
+  yingmi-skill-cli mcp schema GuessFundCode
 `
   ).action(async (toolName) => {
     const apiKey = requireApiKey();
@@ -1043,9 +1066,9 @@ function registerMcpCommand(program) {
   \u6D4F\u89C8 MCP \u5DE5\u5177\u6458\u8981\uFF0C\u67E5\u770B\u5DE5\u5177 schema\uFF0C\u5E76\u53D1\u8D77\u5355\u6B21\u539F\u5B50\u80FD\u529B\u8C03\u7528\u3002
 
 \u63A8\u8350\u987A\u5E8F:
-  1. yingmi-cli mcp list
-  2. yingmi-cli mcp schema <toolName>
-  3. yingmi-cli mcp call <toolName> --input '<json>'
+  1. yingmi-skill-cli mcp list
+  2. yingmi-skill-cli mcp schema <toolName>
+  3. yingmi-skill-cli mcp call <toolName> --input '<json>'
 
 \u8BF4\u660E:
   - mcp \u9002\u5408\u5DF2\u77E5\u8981\u8C03\u7528\u54EA\u4E2A\u80FD\u529B\u3001\u5E76\u4E14\u80FD\u660E\u786E\u6784\u9020 JSON \u8F93\u5165\u7684\u573A\u666F
@@ -1054,8 +1077,8 @@ function registerMcpCommand(program) {
   - \u5982\u679C\u76EE\u6807\u662F\u5B8C\u6210\u57FA\u91D1\u5206\u6790\u3001\u7EC4\u5408\u8BCA\u65AD\u6216\u8D22\u5BCC\u89C4\u5212\u7B49\u573A\u666F\u4EFB\u52A1\uFF0C\u4F18\u5148\u67E5\u770B remote-skill
 
 \u6700\u5C0F\u6210\u529F\u793A\u4F8B:
-  yingmi-cli mcp schema GetCurrentTime
-  yingmi-cli mcp call GetCurrentTime
+  yingmi-skill-cli mcp schema GetCurrentTime
+  yingmi-skill-cli mcp call GetCurrentTime
 `
   );
   registerListCommand(mcpCommand);
@@ -1204,6 +1227,29 @@ async function prepareRemoteSkillContext(skillName, apiKey) {
   };
 }
 
+function parseRemoteSkillScopeInput(input) {
+  const normalizedSkills = (input ?? "").split(",").map((skillName) => skillName.trim()).filter(Boolean);
+  const deduplicatedSkills = Array.from(new Set(normalizedSkills));
+  deduplicatedSkills.forEach((skillName) => {
+    validateRemoteSkillName(skillName);
+  });
+  if (deduplicatedSkills.length === 0) {
+    throw new Error(
+      "--skills \u53C2\u6570\u975E\u6CD5\uFF0C\u8BF7\u63D0\u4F9B\u9017\u53F7\u5206\u9694\u7684 skill \u540D\u79F0\uFF0C\u4F8B\u5982 --skills fund-analyzer,market-brief"
+    );
+  }
+  return deduplicatedSkills;
+}
+function applyRemoteSkillScope(remoteSkills, configuredScope) {
+  const scopeSkills = configuredScope?.skills ?? [];
+  if (scopeSkills.length === 0) {
+    return remoteSkills;
+  }
+  const visibleSkillNames = new Set(scopeSkills);
+  const filteredSkills = remoteSkills.filter((skill) => visibleSkillNames.has(skill.name));
+  return filteredSkills.length > 0 ? filteredSkills : remoteSkills;
+}
+
 function formatWorkingDirectoryTree(rootDir) {
   const lines = ["."];
   const walk = (currentDir, prefix) => {
@@ -1244,6 +1290,10 @@ function readScriptInput(options) {
     throw new Error("\u8BFB\u53D6\u811A\u672C\u6587\u4EF6\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u8DEF\u5F84\u662F\u5426\u5B58\u5728\u4E14\u5F53\u524D\u7528\u6237\u6709\u8BFB\u53D6\u6743\u9650");
   }
 }
+async function resolveVisibleRemoteSkills(apiKey) {
+  const remoteSkills = await fetchRemoteSkillSummaries(apiKey);
+  return applyRemoteSkillScope(remoteSkills, getRemoteSkillScope());
+}
 function registerRemoteSkillCommand(program) {
   const remoteSkillCommand = program.command("remote-skill").description("\u67E5\u770B\u91D1\u878D\u573A\u666F skill\u3001\u8FDB\u5165\u4E0A\u4E0B\u6587\uFF0C\u5E76\u5728\u8BE5\u76EE\u5F55\u6267\u884C\u7EA6\u5B9A\u811A\u672C").addHelpText(
     "after",
@@ -1252,11 +1302,12 @@ function registerRemoteSkillCommand(program) {
   \u53D1\u73B0\u8FDC\u7AEF\u91D1\u878D\u573A\u666F skill\uFF0C\u8FDB\u5165\u67D0\u4E2A skill \u7684\u5DE5\u4F5C\u4E0A\u4E0B\u6587\uFF0C\u5E76\u6309 skill \u7EA6\u5B9A\u6267\u884C\u811A\u672C\u3002
 
 \u63A8\u8350\u987A\u5E8F:
-  1. yingmi-cli remote-skill list
-  2. yingmi-cli remote-skill enter <skillName>
-  3. yingmi-cli remote-skill exec --script 'cat SKILL.md'
-  4. \u6309 skill \u8BF4\u660E\u6267\u884C\u5B9E\u9645\u811A\u672C\uFF0C\u4F8B\u5982:
-     yingmi-cli remote-skill exec --script 'python main.py'
+  1. \u5982\u53EA\u60F3\u56F4\u7ED5\u56FA\u5B9A skill \u5DE5\u4F5C\uFF0C\u5148\u6267\u884C yingmi-skill-cli remote-skill scope set --skills <a,b,c>
+  2. yingmi-skill-cli remote-skill list
+  3. yingmi-skill-cli remote-skill enter <skillName>
+  4. yingmi-skill-cli remote-skill exec --script 'cat SKILL.md'
+  5. \u6309 skill \u8BF4\u660E\u6267\u884C\u5B9E\u9645\u811A\u672C\uFF0C\u4F8B\u5982:
+     yingmi-skill-cli remote-skill exec --script 'python main.py'
 
 \u6CE8\u610F:
   - remote-skill \u7528\u4E8E\u5B8C\u6210\u57FA\u91D1\u5206\u6790\u3001\u7EC4\u5408\u8BCA\u65AD\u3001\u8D22\u5BCC\u89C4\u5212\u3001\u5E02\u573A\u7B80\u62A5\u7B49\u573A\u666F\u4EFB\u52A1
@@ -1265,18 +1316,87 @@ function registerRemoteSkillCommand(program) {
   - \u5EFA\u8BAE\u4F18\u5148\u9605\u8BFB skill \u5185\u7684 SKILL.md\uFF0C\u518D\u6267\u884C\u7EA6\u5B9A\u5165\u53E3
 `
   );
-  remoteSkillCommand.command("list").description("\u5C55\u793A\u5F53\u524D\u652F\u6301\u7684\u91D1\u878D\u573A\u666F skill \u6458\u8981").addHelpText(
+  const scopeCommand = remoteSkillCommand.command("scope").description("\u8BBE\u7F6E\u6216\u6E05\u9664\u5F53\u524D remote-skill \u7684\u672C\u5730\u53EF\u89C1\u8303\u56F4").addHelpText(
     "after",
     `
+\u7528\u9014:
+  \u901A\u8FC7\u672C\u5730 scope \u9650\u5236 remote-skill \u9ED8\u8BA4\u53EF\u89C1\u7684 skill \u8303\u56F4\u3002
+
+\u793A\u4F8B:
+  yingmi-skill-cli remote-skill scope set --skills fund-analyzer,market-brief
+  yingmi-skill-cli remote-skill scope clear
+`
+  );
+  scopeCommand.command("set").description("\u8BBE\u7F6E\u5F53\u524D remote-skill \u7684\u672C\u5730 scope \u767D\u540D\u5355").requiredOption("--skills <skillNames>", "\u9017\u53F7\u5206\u9694\u7684 skill \u540D\u79F0\u5217\u8868").addHelpText(
+    "after",
+    `
+\u8BF4\u660E:
+  - --skills \u4F7F\u7528\u9017\u53F7\u5206\u9694\u591A\u4E2A skill \u540D\u79F0
+  - \u4F1A\u81EA\u52A8\u53BB\u91CD\u5E76\u6821\u9A8C skill \u540D\u79F0\u683C\u5F0F
+  - scope \u4E0E\u8FDC\u7AEF\u5217\u8868\u65E0\u4EA4\u96C6\u65F6\uFF0Clist \u548C enter \u4F1A\u81EA\u52A8\u56DE\u9000\u5230\u8FDC\u7AEF\u5168\u91CF
+
+\u793A\u4F8B:
+  yingmi-skill-cli remote-skill scope set --skills fund-analyzer,market-brief
+`
+  ).action((options) => {
+    try {
+      const skills = parseRemoteSkillScopeInput(options.skills);
+      setRemoteSkillScope({
+        skills,
+        updatedAt: Date.now()
+      });
+      console.log(
+        JSON.stringify(
+          {
+            enabled: true,
+            skills
+          },
+          null,
+          2
+        )
+      );
+    } catch (error) {
+      fail(error.message);
+    }
+  });
+  scopeCommand.command("clear").description("\u6E05\u9664\u5F53\u524D remote-skill \u7684\u672C\u5730 scope").addHelpText(
+    "after",
+    `
+\u8BF4\u660E:
+  \u6E05\u9664\u540E\uFF0Cremote-skill list \u548C remote-skill enter \u4F1A\u6062\u590D\u4E3A\u9ED8\u8BA4\u884C\u4E3A\u3002
+`
+  ).action(() => {
+    try {
+      clearRemoteSkillScope();
+      console.log(
+        JSON.stringify(
+          {
+            enabled: false
+          },
+          null,
+          2
+        )
+      );
+    } catch (error) {
+      fail(error.message);
+    }
+  });
+  remoteSkillCommand.command("list").description("\u5C55\u793A\u5F53\u524D\u53EF\u7528\u7684\u91D1\u878D\u573A\u666F skill \u6458\u8981").addHelpText(
+    "after",
+    `
+\u8BF4\u660E:
+  \u5982\u679C\u5DF2\u8BBE\u7F6E remote-skill scope\uFF0C\u4F18\u5148\u8FD4\u56DE scope \u5185\u4ECD\u7136\u53EF\u7528\u7684 skill\uFF1B
+  \u5F53 scope \u4E0E\u8FDC\u7AEF\u5217\u8868\u6CA1\u6709\u4EA4\u96C6\u65F6\uFF0C\u4F1A\u81EA\u52A8\u56DE\u9000\u4E3A\u8FDC\u7AEF\u5168\u91CF\uFF0C\u907F\u514D\u8FD4\u56DE\u7A7A\u6570\u7EC4\u3002
+
 \u4E0B\u4E00\u6B65:
   1. \u4ECE\u8F93\u51FA\u91CC\u6311\u4E00\u4E2A\u6700\u8D34\u8FD1\u5F53\u524D\u91D1\u878D\u573A\u666F\u4EFB\u52A1\u7684 skillName
-  2. \u6267\u884C yingmi-cli remote-skill enter <skillName>
-  3. \u518D\u6267\u884C yingmi-cli remote-skill exec --script 'cat SKILL.md'
+  2. \u6267\u884C yingmi-skill-cli remote-skill enter <skillName>
+  3. \u518D\u6267\u884C yingmi-skill-cli remote-skill exec --script 'cat SKILL.md'
 `
   ).action(async () => {
     try {
       const apiKey = requireApiKey();
-      const skills = await fetchRemoteSkillSummaries(apiKey);
+      const skills = await resolveVisibleRemoteSkills(apiKey);
       console.log(JSON.stringify(skills, null, 2));
     } catch (error) {
       fail(error.message);
@@ -1290,18 +1410,24 @@ function registerRemoteSkillCommand(program) {
   \u8FDB\u5165 skill \u9002\u5408\u4F60\u5DF2\u7ECF\u786E\u5B9A\u8981\u5B8C\u6210\u67D0\u4E2A\u91D1\u878D\u573A\u666F\u4EFB\u52A1\uFF0C\u800C\u4E0D\u662F\u53EA\u8C03\u7528\u5355\u4E2A mcp\u3002
 
 \u793A\u4F8B:
-  yingmi-cli remote-skill enter fund-analyst
+  yingmi-skill-cli remote-skill enter fund-analyst
 
 \u4E0B\u4E00\u6B65:
-  1. yingmi-cli remote-skill exec --script 'cat SKILL.md'
+  1. yingmi-skill-cli remote-skill exec --script 'cat SKILL.md'
   2. \u6309 skill \u6587\u6863\u8BF4\u660E\u6267\u884C\u5165\u53E3\u811A\u672C
 `
   ).action(async (skillName) => {
     try {
       const apiKey = requireApiKey();
-      const context = await prepareRemoteSkillContext(skillName, apiKey);
+      const normalizedSkillName = validateRemoteSkillName(skillName);
+      const visibleSkills = await resolveVisibleRemoteSkills(apiKey);
+      if (!visibleSkills.some((skill) => skill.name === normalizedSkillName)) {
+        fail(`\u672A\u627E\u5230 skill: ${normalizedSkillName}
+\u8BF7\u5148\u6267\u884C remote-skill list \u67E5\u770B\u5F53\u524D\u53EF\u7528 skill`);
+      }
+      const context = await prepareRemoteSkillContext(normalizedSkillName, apiKey);
       setCurrentRemoteSkillSession({
-        skillName,
+        skillName: normalizedSkillName,
         workingDirectory: context.workingDirectory
       });
       console.log(formatWorkingDirectoryTree(context.workingDirectory));
@@ -1319,9 +1445,9 @@ function registerRemoteSkillCommand(program) {
   4. \u5BF9\u4E8E Python skill\uFF0C\u4F18\u5148\u4F7F\u7528 python \u547D\u4EE4\u6267\u884C\u5165\u53E3\u811A\u672C
 
 \u793A\u4F8B:
-  yingmi-cli remote-skill exec --script 'cat SKILL.md'
-  yingmi-cli remote-skill exec --script 'python main.py'
-  yingmi-cli remote-skill exec --script-file ./scripts/run.sh
+  yingmi-skill-cli remote-skill exec --script 'cat SKILL.md'
+  yingmi-skill-cli remote-skill exec --script 'python main.py'
+  yingmi-skill-cli remote-skill exec --script-file ./scripts/run.sh
 `
   ).action(async (options) => {
     try {
@@ -1358,10 +1484,10 @@ function registerRemoteSkillCommand(program) {
   });
 }
 
-const REGISTRY_URL$1 = "https://registry.npmmirror.com";
+const REGISTRY_URL = "https://registry.npmmirror.com";
 async function fetchLatestVersion() {
   const response = await axios.get(
-    `${REGISTRY_URL$1}/${encodeURIComponent(name)}`,
+    `${REGISTRY_URL}/${encodeURIComponent(name)}`,
     {
       timeout: 1e4
     }
@@ -1373,26 +1499,26 @@ async function fetchLatestVersion() {
   return latestVersion;
 }
 
+const UPGRADE_REGISTRY_URL = "https://registry.npmmirror.com";
+const UPGRADE_INSTALL_ARGS = [
+  "install",
+  "-g",
+  `${name}@latest`,
+  `--registry=${UPGRADE_REGISTRY_URL}`,
+  "--prefer-online"
+];
+const UPGRADE_INSTALL_HINT_COMMAND = `npm ${UPGRADE_INSTALL_ARGS.join(" ")}`;
+
 async function installLatestVersion() {
   const npmCommand = process.platform === "win32" ? "npm.cmd" : "npm";
   await new Promise((resolve, reject) => {
-    const child = child_process.spawn(
-      npmCommand,
-      [
-        "install",
-        "-g",
-        `${name}@latest`,
-        "--registry=https://registry.npmmirror.com",
-        "--prefer-online"
-      ],
-      {
-        env: {
-          ...process.env,
-          PUPPETEER_SKIP_DOWNLOAD: "true"
-        },
-        stdio: "inherit"
-      }
-    );
+    const child = child_process.spawn(npmCommand, [...UPGRADE_INSTALL_ARGS], {
+      env: {
+        ...process.env,
+        PUPPETEER_SKIP_DOWNLOAD: "true"
+      },
+      stdio: "inherit"
+    });
     child.on("error", reject);
     child.on("exit", (code) => {
       if (code === 0) {
@@ -1429,23 +1555,20 @@ function isNewerVersion(latestVersion, currentVersion) {
   return false;
 }
 
-const REGISTRY_URL = "https://registry.npmmirror.com";
 async function checkAndUpdate(checkOnly = false) {
-  console.log("\u6B63\u5728\u68C0\u67E5\u66F4\u65B0...");
+  console.error("\u6B63\u5728\u68C0\u67E5\u66F4\u65B0...");
   const latestVersion = await fetchLatestVersion();
   if (!isNewerVersion(latestVersion, version)) {
-    console.log(`\u5F53\u524D\u5DF2\u662F\u6700\u65B0\u7248\u672C: ${version}`);
+    console.error(`\u5F53\u524D\u5DF2\u662F\u6700\u65B0\u7248\u672C: ${version}`);
     return;
   }
-  console.log(`\u53D1\u73B0\u65B0\u7248\u672C: ${version} -> ${latestVersion}`);
+  console.error(`\u53D1\u73B0\u65B0\u7248\u672C: ${version} -> ${latestVersion}`);
   if (checkOnly) {
-    console.log(
-      `\u53EF\u6267\u884C PUPPETEER_SKIP_DOWNLOAD=true npm install -g ${name}@latest --registry=${REGISTRY_URL} --prefer-online \u8FDB\u884C\u5347\u7EA7`
-    );
+    console.error(`\u53EF\u6267\u884C ${UPGRADE_INSTALL_HINT_COMMAND} \u8FDB\u884C\u5347\u7EA7`);
     return;
   }
   await installLatestVersion();
-  console.log(`\u5347\u7EA7\u5B8C\u6210\uFF0C\u5F53\u524D\u6700\u65B0\u7248\u672C: ${latestVersion}`);
+  console.error(`\u5347\u7EA7\u5B8C\u6210\uFF0C\u5F53\u524D\u6700\u65B0\u7248\u672C: ${latestVersion}`);
 }
 
 function registerUpgradeCommand(program) {
@@ -1456,11 +1579,11 @@ function registerUpgradeCommand(program) {
   \u68C0\u67E5 CLI \u662F\u5426\u6709\u65B0\u7248\u672C\uFF0C\u5E76\u5728\u9700\u8981\u65F6\u6267\u884C\u5347\u7EA7\u3002
 
 \u793A\u4F8B:
-  yingmi-cli upgrade --check-only
-  yingmi-cli upgrade
+  yingmi-skill-cli upgrade --check-only
+  yingmi-skill-cli upgrade
 
 \u8BF4\u660E:
-  - --check-only \u53EA\u68C0\u67E5\u7248\u672C\uFF0C\u4E0D\u6267\u884C\u5B89\u88C5
+  - --check-only \u53EA\u68C0\u67E5\u7248\u672C\uFF0C\u4E0D\u6267\u884C\u5B89\u88C5\uFF1B\u53D1\u73B0\u65B0\u7248\u672C\u65F6\u4F1A\u8F93\u51FA\u53EF\u590D\u5236\u7684 npm \u5B89\u88C5\u547D\u4EE4
   - \u771F\u6B63\u5347\u7EA7\u524D\u5E94\u660E\u786E\u4E86\u89E3\u526F\u4F5C\u7528
   - \u975E\u4EA4\u4E92\u73AF\u5883\u4E0B\u4E0D\u5E94\u4F9D\u8D56\u786E\u8BA4\u8F93\u5165
 `
@@ -1478,7 +1601,7 @@ function registerUpgradeCommand(program) {
 
 function createProgram() {
   const program = new commander.Command();
-  program.name("yingmi-cli").version(version);
+  program.name("yingmi-skill-cli").version(version);
   registerInitCommand(program);
   registerMcpCommand(program);
   registerRemoteSkillCommand(program);
@@ -1489,18 +1612,18 @@ function createProgram() {
     "after",
     `
 \u5E38\u89C1\u4EFB\u52A1:
-  \u9996\u6B21\u914D\u7F6E CLI                yingmi-cli help init
-  \u76F4\u63A5\u8C03\u7528\u539F\u5B50\u91D1\u878D\u80FD\u529B         yingmi-cli help mcp
-  \u5B8C\u6210\u57FA\u91D1\u6216\u8D22\u5BCC\u573A\u666F\u4EFB\u52A1       yingmi-cli help remote-skill
-  \u67E5\u770B\u67D0\u4E2A\u547D\u4EE4\u7684\u8BE6\u7EC6\u5E2E\u52A9       yingmi-cli help <command...>
-  \u68C0\u67E5\u6216\u5347\u7EA7\u7248\u672C              yingmi-cli help upgrade
+  \u9996\u6B21\u914D\u7F6E CLI                yingmi-skill-cli help init
+  \u76F4\u63A5\u8C03\u7528\u539F\u5B50\u91D1\u878D\u80FD\u529B         yingmi-skill-cli help mcp
+  \u5B8C\u6210\u57FA\u91D1\u6216\u8D22\u5BCC\u573A\u666F\u4EFB\u52A1       yingmi-skill-cli help remote-skill
+  \u67E5\u770B\u67D0\u4E2A\u547D\u4EE4\u7684\u8BE6\u7EC6\u5E2E\u52A9       yingmi-skill-cli help <command...>
+  \u68C0\u67E5\u6216\u5347\u7EA7\u7248\u672C              yingmi-skill-cli help upgrade
 
 \u5FEB\u901F\u5F00\u59CB:
-  1. yingmi-cli init setup
-  2. \u5982\u679C\u8981\u76F4\u63A5\u8C03\u7528\u5355\u4E2A\u80FD\u529B\uFF0C\u6267\u884C yingmi-cli mcp list
-  3. \u5982\u679C\u8981\u5B8C\u6210\u91D1\u878D\u573A\u666F\u4EFB\u52A1\uFF0C\u6267\u884C yingmi-cli remote-skill list
-  4. \u5BF9\u4E8E mcp\uFF0C\u7EE7\u7EED\u6267\u884C yingmi-cli mcp schema <toolName>
-  5. \u5BF9\u4E8E mcp\uFF0C\u6267\u884C yingmi-cli mcp call <toolName> --input '<json>'
+  1. yingmi-skill-cli init setup
+  2. \u5982\u679C\u8981\u76F4\u63A5\u8C03\u7528\u5355\u4E2A\u80FD\u529B\uFF0C\u6267\u884C yingmi-skill-cli mcp list
+  3. \u5982\u679C\u8981\u5B8C\u6210\u91D1\u878D\u573A\u666F\u4EFB\u52A1\uFF0C\u6267\u884C yingmi-skill-cli remote-skill list
+  4. \u5BF9\u4E8E mcp\uFF0C\u7EE7\u7EED\u6267\u884C yingmi-skill-cli mcp schema <toolName>
+  5. \u5BF9\u4E8E mcp\uFF0C\u6267\u884C yingmi-skill-cli mcp call <toolName> --input '<json>'
 
 \u534F\u8BAE\u63D0\u793A:
   - \u7ED3\u6784\u5316\u7ED3\u679C\u8F93\u51FA\u5230 stdout

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "yingmi-skill-cli",
-  "version": "0.0.6",
+  "version": "0.0.8",
   "author": "yingmi",
   "license": "MIT",
   "files": [
@@ -36,4 +36,4 @@
     "chalk": "^4",
     "commander": "*"
   }
-}
+}