fix(dianping/shop): correct in-browser name and reviews extraction

The merged adapter had two silent in-browser bugs that the mocked-evaluate
unit tests don't catch — only live verify against www.dianping.com surfaces
them:

1. Shop name returned `undefined`. The fallback parsed `document.title` with
   an ASCII-bracket split (`/[\\[\\]]/`) but dianping wraps the name in
   full-width brackets `【芈重山老火锅(五道口店)】...`. Switch to a `【...】`
   regex so the title fallback actually fires.

2. Reviews returned `5` instead of `21241`. The headText was whitespace-
   collapsed to `★★★★★4.821241条...`, fusing the rating and review digits;
   a head-wide `/\d+条/` then captured `4.821241` and rounded to `5`. Read
   the dedicated `.reviews / .review-num` element ("21241条") instead, with
   a `.review-title` "评价(<n>)" fallback.

.github/workflows/ci.yml

@@ -50,6 +50,14 @@ jobs:
             exit 1
           fi
 
+      # Guard: listing-class commands must surface an id-shaped column so their
+      # rows round-trip into the site's detail-class command. Without this, an
+      # agent has to re-search by title or scrape URLs to follow up on a row.
+      # See docs/conventions/listing-detail-id-pairing.md.
+      - name: Check listing↔detail id pairing
+        if: runner.os == 'Linux'
+        run: npm run check:listing-id-pairing
+
   # ── Unit tests (vitest shard) ──
   # PR: ubuntu + Node 22 only (fast feedback, 2 jobs).
   # Push to main/dev: full matrix for cross-platform/cross-version coverage (12 jobs).

.github/workflows/release.yml

@@ -26,6 +26,17 @@ jobs:
       - name: Type check
         run: npx tsc --noEmit
 
+      # Build before the manifest drift gate: adapter modules import
+      # @jackwener/opencli/* through package exports, which resolve to dist/.
+      # A fresh release checkout has no dist/ until the full build runs.
+      - name: Build package and verify cli-manifest.json is up-to-date
+        run: |
+          npm run build
+          if ! git diff --exit-code -- cli-manifest.json; then
+            echo "::error::cli-manifest.json drift detected at release time. Run 'npm run build' locally and commit the result before tagging."
+            exit 1
+          fi
+
       - name: Install extension dependencies
         run: npm ci
         working-directory: extension
@@ -40,7 +51,7 @@ jobs:
 
       - name: Create extension ZIP
         run: |
-          EXT_VERSION=$(node -p "require('./extension/package.json').version")
+          EXT_VERSION=$(jq -r .version extension/package.json)
           cd extension-package
           zip -r ../opencli-extension-v${EXT_VERSION}.zip .
 

CHANGELOG.md

@@ -4,6 +4,8 @@
 
 ### Features
 
+* **observation** — add trace artifact primitives, `browser console`, `browser network --since/--follow/--failed`, and adapter `--trace=retain-on-failure` for failure-retained browser evidence.
+* **autofix** — retire `OPENCLI_DIAGNOSTIC`; adapter repair now uses `--trace retain-on-failure`, trace `summary.md`, and error-envelope trace metadata.
 * **browser** — `bind` attaches `bound:*` workspaces to user-owned Chrome tabs without taking over window lifecycle; `sessions` reports `idleMsRemaining: null` for bound workspaces because they do not schedule idle close timers. ([#1169](https://github.com/jackwener/opencli/issues/1169), [#929](https://github.com/jackwener/opencli/issues/929))
 * **browser lifecycle** — owned browser workspaces now lease tabs inside a shared dedicated automation container instead of owning one Chrome window per workspace; lease state is persisted for MV3 service-worker reconciliation and idle cleanup is backed by alarms.
 * **web read** — make page extraction render-aware: same-origin iframe content is merged into the Markdown source, `--wait-for` can wait inside main/iframe documents, `--wait-until networkidle` waits for captured requests to settle, and `--diagnose` reports frames, empty containers, and API-like XHRs for shell/AJAX pages.

README.md

@@ -21,7 +21,7 @@ It also works as a **CLI hub** for local tools such as `gh`, `docker`, and other
 - **Desktop App Control** — Drive Electron apps (Cursor, Codex, ChatGPT, Notion, etc.) directly from the terminal via CDP.
 - **Browser Automation for AI Agents** — Install the `opencli-adapter-author` skill, and your AI agent can operate any website: navigate, click, type, extract, screenshot — all through your logged-in Chrome session.
 - **Multi-profile Browser Bridge** — Install the extension in each Chrome profile you want to use, then route commands with `--profile`, `OPENCLI_PROFILE`, or `opencli profile use`.
-- **Website → CLI** — Turn any website into a deterministic CLI: 90+ pre-built adapters, or write your own with the `opencli-adapter-author` skill + `opencli browser verify`.
+- **Website → CLI** — Turn any website into a deterministic CLI: 100+ site surfaces are already registered, or write your own with the `opencli-adapter-author` skill + `opencli browser verify`.
 - **Account-safe** — Reuses Chrome/Chromium logged-in state; your credentials never leave the browser.
 - **AI Agent ready** — One skill takes you from site recon through API discovery, field decoding, adapter writing, and verification.
 - **CLI Hub** — Discover, auto-install, and passthrough commands to any external CLI (gh, docker, obsidian, etc).
@@ -34,7 +34,10 @@ It also works as a **CLI hub** for local tools such as `gh`, `docker`, and other
 
 ### 1. Install OpenCLI
 
+OpenCLI requires **Node.js >= 21**.
+
 ```bash
+node --version
 npm install -g @jackwener/opencli
 ```
 
@@ -86,6 +89,18 @@ Use OpenCLI directly when you want a reliable command instead of a live browser
 - `opencli external register mycli` exposes a local CLI through the same discovery surface.
 - `opencli doctor` helps diagnose browser connectivity.
 
+## Extending OpenCLI
+
+If you want to add your own commands, start with the [Extending OpenCLI guide](./docs/guide/extending-opencli.md). README keeps this short; the guide covers the directory layout, source-control model, and install commands.
+
+| Need | Recommended path |
+|------|------------------|
+| Keep personal website commands in your own Git repo | `opencli plugin create` + `opencli plugin install file://...` |
+| Quickly draft a private local adapter | `opencli browser init <site>/<command>` in `~/.opencli/clis/` |
+| Modify an official adapter locally | `opencli adapter eject <site>` + `opencli adapter reset <site>` |
+| Publish or install third-party commands | `opencli plugin install github:user/repo` |
+| Wrap an existing local binary | `opencli external register <name>` |
+
 ## For AI Agents
 
 OpenCLI's browser commands are designed to be used by AI Agents — not run manually. Install skills into your AI agent (Claude Code, Cursor, etc.), and the agent operates websites on your behalf using your logged-in Chrome session.
@@ -159,7 +174,7 @@ When the site you need is not yet covered, use the `opencli-adapter-author` skil
 2. Discover the right endpoint — network inspection, initial state, bundle search, token trace, or interceptor fallback.
 3. Decide the auth strategy — `PUBLIC` / `COOKIE` / `HEADER` / `INTERCEPT`.
 4. Decode response fields and design output columns.
-5. `opencli browser init <site>/<name>` → write adapter → `opencli browser verify <site>/<name>`.
+5. `opencli browser analyze <url>` for one-shot recon, then `opencli browser init <site>/<name>` → write adapter → `opencli browser verify <site>/<name>`.
 6. Persist site knowledge to `~/.opencli/sites/<site>/` so the next adapter for the same site is faster.
 
 ### CLI Hub and desktop adapters
@@ -171,7 +186,8 @@ OpenCLI is not only for websites. It can also:
 
 ## Prerequisites
 
-- **Node.js**: >= 21.0.0 (or **Bun** >= 1.0)
+- **Node.js**: >= 21.0.0 (required for the standard npm install path)
+- **Bun**: >= 1.0 (optional alternative runtime)
 - **Chrome or Chromium** running and logged into the target site for browser-backed commands
 
 > **Important**: Browser-backed commands reuse your Chrome/Chromium login session. If you get empty data or permission-like failures, first confirm the site is already open and authenticated in Chrome/Chromium.
@@ -189,7 +205,6 @@ OpenCLI is not only for websites. It can also:
 | `OPENCLI_CDP_ENDPOINT` | — | Chrome DevTools Protocol endpoint for remote browser or Electron apps |
 | `OPENCLI_CDP_TARGET` | — | Filter CDP targets by URL substring (e.g. `detail.1688.com`) |
 | `OPENCLI_VERBOSE` | `false` | Enable verbose logging (`-v` flag also works) |
-| `OPENCLI_DIAGNOSTIC` | `false` | Set to `1` to capture structured diagnostic context on failures |
 | `DEBUG_SNAPSHOT` | — | Set to `1` for DOM snapshot debug output |
 
 `--focus` works for both `opencli browser *` and browser-backed adapter commands. `--live` is mainly for adapter commands: browser subcommands already keep the automation lease open until you run `opencli browser close` or the idle timeout expires.
@@ -245,6 +260,7 @@ To load the source Browser Bridge extension:
 | **1688** | `search` `item` `assets` `download` `store` |
 | **gitee** | `trending` `search` `user` |
 | **gemini** | `new` `ask` `image` `deep-research` `deep-research-result` |
+| **claude** | `ask` `send` `new` `status` `read` `history` `detail` |
 | **yuanbao** | `new` `ask` |
 | **notebooklm** | `status` `list` `open` `current` `get` `history` `summary` `note-list` `notes-get` `source-list` `source-get` `source-fulltext` `source-guide` |
 | **spotify** | `auth` `status` `play` `pause` `next` `prev` `volume` `search` `queue` `shuffle` `repeat` |
@@ -261,7 +277,7 @@ To load the source Browser Bridge extension:
 | **hackernews** | `top` `new` `best` `ask` `show` `jobs` `search` `user` |
 | **xiaoyuzhou** | `auth*` `podcast*` `podcast-episodes*` `episode*` `download*` `transcript*` |
 
-90+ adapters in total — **[→ see all supported sites & commands](./docs/adapters/index.md)**
+100+ site surfaces in total — **[→ see all supported sites & commands](./docs/adapters/index.md)**
 
 `*` `opencli xiaoyuzhou podcast`, `podcast-episodes`, `episode`, `download`, and `transcript` require local Xiaoyuzhou credentials in `~/.opencli/xiaoyuzhou.json`.
 
@@ -391,10 +407,10 @@ Before writing any adapter code, read the [`opencli-adapter-author` skill](./ski
 - Recon the site and pick a pattern (SPA / SSR / JSONP / Token / Streaming).
 - Discover the right endpoint via `opencli browser network`, `eval`, or the interceptor fallback.
 - Decide auth strategy (`PUBLIC` / `COOKIE` / `HEADER` / `INTERCEPT`).
-- Decode response fields, design columns, scaffold with `opencli browser init`.
+- Run `opencli browser analyze <url>` for one-shot recon, decode response fields, design columns, scaffold with `opencli browser init`.
 - Verify with `opencli browser verify <site>/<name>` before shipping.
 
-Adapters you write outside the repo live at `~/.opencli/clis/<site>/<name>.js`. Site knowledge (endpoints, field maps, fixtures) accumulates in `~/.opencli/sites/<site>/` so the next adapter for the same site starts from context instead of zero.
+For long-lived personal commands that should live in your own Git repo, use a local plugin instead; see [Extending OpenCLI](./docs/guide/extending-opencli.md). Quick private adapters can still live at `~/.opencli/clis/<site>/<name>.js`. Site knowledge (endpoints, field maps, fixtures) accumulates in `~/.opencli/sites/<site>/` so the next adapter for the same site starts from context instead of zero.
 
 ## Testing
 
@@ -405,7 +421,7 @@ See **[TESTING.md](./TESTING.md)** for how to run and write tests.
 - **"Extension not connected"** — Ensure the Browser Bridge extension is installed from the [Chrome Web Store](https://chromewebstore.google.com/detail/opencli/ildkmabpimmkaediidaifkhjpohdnifk) and **enabled** in `chrome://extensions`.
 - **"attach failed: Cannot access a chrome-extension:// URL"** — Another extension may be interfering. Try disabling other extensions temporarily.
 - **Empty data or 'Unauthorized' error** — Your Chrome/Chromium login session may have expired. Navigate to the target site and log in again.
-- **Node API errors** — Ensure Node.js >= 21. Some features require `node:util` styleText (stable in Node 21+).
+- **Node API errors / missing `fetch` / startup crash on old Node** — OpenCLI requires **Node.js >= 21**. Run `node --version`, upgrade Node if needed, then retry.
 - **Daemon issues** — Check status: `curl localhost:19825/status` · View logs: `curl localhost:19825/logs`
 
 ## Star History

README.zh-CN.md

@@ -10,7 +10,7 @@
 
 OpenCLI 可以用同一套 CLI 做三类事情：
 
-- **直接使用现成适配器**：B站、知乎、小红书、Twitter/X、Reddit、HackerNews 等 [90+ 站点](#内置命令) 开箱即用。
+- **直接使用现成适配器**：B站、知乎、小红书、Twitter/X、Reddit、HackerNews 等 [100+ 站点](#内置命令) 开箱即用。
 - **让 AI Agent 操作任意网站**：在你的 AI Agent（Claude Code、Cursor 等）中安装 `opencli-adapter-author` skill，Agent 就能用你的已登录浏览器导航、点击、输入、提取任意网页内容。
 - **把新网站写成 CLI**：用 `opencli browser` 原语 + `opencli-adapter-author` skill，从站点侦察、API 发现、字段解码到 `opencli browser verify` 一条龙。
 
@@ -20,7 +20,7 @@ OpenCLI 可以用同一套 CLI 做三类事情：
 
 - **桌面应用控制** — 通过 CDP 直接在终端驱动 Electron 应用（Cursor、Codex、ChatGPT、Notion 等）。
 - **AI Agent 浏览器自动化** — 安装 `opencli-adapter-author` skill，你的 AI Agent 就能操作任意网站：导航、点击、输入、提取、截图——全部通过你的已登录 Chrome 会话完成。
-- **网站 → CLI** — 把任何网站变成确定性 CLI：90+ 内置适配器，或用 `opencli-adapter-author` skill + `opencli browser verify` 自己写。
+- **网站 → CLI** — 把任何网站变成确定性 CLI：100+ 站点能力已注册，或用 `opencli-adapter-author` skill + `opencli browser verify` 自己写。
 - **账号安全** — 复用 Chrome/Chromium 登录态，凭证永远不会离开浏览器。
 - **面向 AI Agent** — 一个 skill 带你走完站点侦察、API 发现、字段解码、适配器编写、验证的全流程。
 - **CLI 枢纽** — 统一发现、自动安装、纯透传任何外部 CLI（gh、docker、obsidian 等）。
@@ -31,7 +31,10 @@ OpenCLI 可以用同一套 CLI 做三类事情：
 
 ### 1. 安装 OpenCLI
 
+OpenCLI 要求 **Node.js >= 21**。
+
 ```bash
+node --version
 npm install -g @jackwener/opencli
 ```
 
@@ -67,9 +70,21 @@ opencli bilibili hot --limit 5
 
 - `opencli list` 查看当前所有命令
 - `opencli <site> <command>` 调用内置或生成好的适配器
-- `opencli register mycli` 把本地 CLI 接入同一发现入口
+- `opencli external register mycli` 把本地 CLI 接入同一发现入口
 - `opencli doctor` 处理浏览器连通性问题
 
+## 扩展 OpenCLI
+
+如果你想新增自己的命令，先看 [扩展 OpenCLI](./docs/zh/guide/extending-opencli.md)。README 只保留入口；目录结构、源码管理方式和安装命令放在文档里。
+
+| 需求 | 推荐路径 |
+|------|----------|
+| 把个人网站命令放在自己的 Git repo | `opencli plugin create` + `opencli plugin install file://...` |
+| 快速写一个本机私人 adapter | `opencli browser init <site>/<command>`，放在 `~/.opencli/clis/` |
+| 本地修改官方 adapter | `opencli adapter eject <site>` + `opencli adapter reset <site>` |
+| 发布或安装第三方命令 | `opencli plugin install github:user/repo` |
+| 包装已有本机 binary | `opencli external register <name>` |
+
 ## 给 AI Agent
 
 OpenCLI 的 browser 命令是给 AI Agent 用的——不是手动执行的。把 skill 安装到你的 AI Agent（Claude Code、Cursor 等）中，Agent 就能用你的已登录 Chrome 会话替你操作网站。
@@ -143,7 +158,7 @@ Agent 在内部自动处理所有 `opencli browser` 命令——你只需用自
 2. 发现目标 endpoint——network 精读、initial state、bundle 搜索、token 溯源，或 interceptor 兜底
 3. 定认证策略——`PUBLIC` / `COOKIE` / `HEADER` / `INTERCEPT`
 4. 字段解码 + 设计输出列
-5. `opencli browser init <site>/<name>` → 写适配器 → `opencli browser verify <site>/<name>`
+5. `opencli browser analyze <url>` 一步侦察，再 `opencli browser init <site>/<name>` → 写适配器 → `opencli browser verify <site>/<name>`
 6. 把站点知识沉到 `~/.opencli/sites/<site>/`，下次写同站点的其他命令直接吃缓存
 
 ### CLI 枢纽与桌面端适配器
@@ -155,7 +170,8 @@ OpenCLI 不只是网站 CLI，还可以：
 
 ## 前置要求
 
-- **Node.js**: >= 21.0.0
+- **Node.js**: >= 21.0.0（标准 npm 安装路径要求）
+- **Bun**: >= 1.0（可选替代运行时）
 - 浏览器型命令需要 Chrome 或 Chromium 处于运行中，并已登录目标网站
 
 > **重要**：浏览器型命令直接复用你的 Chrome/Chromium 登录态。如果拿到空数据或出现权限类失败，先确认目标站点已经在浏览器里打开并完成登录。
@@ -172,7 +188,6 @@ OpenCLI 不只是网站 CLI，还可以：
 | `OPENCLI_CDP_ENDPOINT` | — | Chrome DevTools Protocol 端点，用于远程浏览器或 Electron 应用 |
 | `OPENCLI_CDP_TARGET` | — | 按 URL 子串过滤 CDP target（如 `detail.1688.com`） |
 | `OPENCLI_VERBOSE` | `false` | 启用详细日志（`-v` 也可以） |
-| `OPENCLI_DIAGNOSTIC` | `false` | 设为 `1` 时在失败时输出结构化诊断上下文 |
 | `DEBUG_SNAPSHOT` | — | 设为 `1` 输出 DOM 快照调试信息 |
 
 `--focus` 同时适用于 `opencli browser *` 和浏览器型 adapter 命令。`--live` 主要是给 adapter 命令用的：`browser` 子命令本来就会一直保留 automation window，直到你手动执行 `opencli browser close` 或等空闲超时。
@@ -256,6 +271,7 @@ npm link
 | **devto** | `top` `tag` `user` | 公开 |
 | **dictionary** | `search` `synonyms` `examples` | 公开 |
 | **arxiv** | `search` `paper` | 公开 |
+| **openreview** | `search` `venue` `paper` `reviews` | 公开 |
 | **paperreview** | `submit` `review` `feedback` | 公开 |
 | **wikipedia** | `search` `summary` `random` `trending` | 公开 |
 | **hackernews** | `top` `new` `best` `ask` `show` `jobs` `search` `user` | 公共 API |
@@ -285,13 +301,14 @@ npm link
 | **1688** | `search` `item` `assets` `download` `store` | 浏览器 |
 | **gitee** | `trending` `search` `user` | 公开 / 浏览器 |
 | **gemini** | `new` `ask` `image` `deep-research` `deep-research-result` | 浏览器 |
+| **claude** | `ask` `send` `new` `status` `read` `history` `detail` | 浏览器 |
 | **spotify** | `auth` `status` `play` `pause` `next` `prev` `volume` `search` `queue` `shuffle` `repeat` | OAuth API |
 | **notebooklm** | `status` `list` `open` `current` `get` `history` `summary` `note-list` `notes-get` `source-list` `source-get` `source-fulltext` `source-guide` | 浏览器 |
 | **36kr** | `news` `hot` `search` `article` | 公开 / 浏览器 |
 | **imdb** | `search` `title` `top` `trending` `person` `reviews` | 公开 |
 | **producthunt** | `posts` `today` `hot` `browse` | 公开 / 浏览器 |
 | **instagram** | `explore` `profile` `search` `user` `followers` `following` `follow` `unfollow` `like` `unlike` `comment` `save` `unsave` `saved` | 浏览器 |
-| **lobsters** | `hot` `newest` `active` `tag` | 公开 |
+| **lobsters** | `hot` `newest` `active` `tag` `read` | 公开 |
 | **medium** | `feed` `search` `user` | 浏览器 |
 | **sinablog** | `hot` `search` `article` `user` | 浏览器 |
 | **substack** | `feed` `search` `publication` | 浏览器 |
@@ -302,7 +319,7 @@ npm link
 | **douyin** | `videos` `publish` `drafts` `draft` `delete` `stats` `profile` `update` `hashtag` `location` `activities` `collections` | 浏览器 |
 | **yuanbao** | `new` `ask` | 浏览器 |
 
-90+ 适配器 — **[→ 查看完整命令列表](./docs/adapters/index.md)**
+100+ 站点能力 — **[→ 查看完整命令列表](./docs/adapters/index.md)**
 
 `*` `opencli xiaoyuzhou podcast`、`podcast-episodes`、`episode`、`download`、`transcript` 需要本地小宇宙凭证：`~/.opencli/xiaoyuzhou.json`。
 
@@ -489,7 +506,7 @@ opencli plugin uninstall my-tool                            # 卸载
 - 侦察站点，选定 pattern（SPA / SSR / JSONP / Token / Streaming）
 - 用 `opencli browser network`、`eval`、interceptor 等找到目标 endpoint
 - 定认证策略（`PUBLIC` / `COOKIE` / `HEADER` / `INTERCEPT`）
-- 字段解码、设计 columns、`opencli browser init` 生成骨架
+- 先用 `opencli browser analyze <url>` 一步侦察，再字段解码、设计 columns、`opencli browser init` 生成骨架
 - 交付前用 `opencli browser verify <site>/<name>` 验证
 
 在仓库外写的私有适配器放到 `~/.opencli/clis/<site>/<name>.js`；每个站点的 endpoint、字段映射、抓包样本会累积在 `~/.opencli/sites/<site>/`，下次写同站点的其他命令可以直接复用。
@@ -502,8 +519,8 @@ opencli plugin uninstall my-tool                            # 卸载
   - 其他 Chrome/Chromium 扩展（如 youmind、New Tab Override 或 AI 助手类扩展）可能产生冲突。请尝试**暂时禁用其他扩展**后重试。
 - **返回空数据，或者报错 "Unauthorized"**
   - Chrome/Chromium 里的登录态可能已经过期。请打开当前页面，在新标签页重新手工登录或刷新该页面。
-- **Node API 错误 (如 parseArgs, fs 等)**
-  - 确保 Node.js 版本 `>= 21`（`node:util` 的 `styleText` 需要 Node 21+）。
+- **Node API 错误 / 缺少 `fetch` / 旧 Node 启动即崩**
+  - OpenCLI 要求 **Node.js >= 21**。先执行 `node --version`，如果版本过低先升级，再重试命令。
 - **Daemon 问题**
   - 检查 daemon 状态：`curl localhost:19825/status`
   - 查看扩展日志：`curl localhost:19825/logs`

cases/README.md

@@ -0,0 +1,9 @@
+# Use Cases
+
+Real-world examples of how people use OpenCLI.
+
+## Contributing
+
+Want to share your use case? Submit a PR that adds a new `.md` file to this directory.
+
+Each file is one use case — describe what you wanted to do, which commands you used, and the result.

clis/1688/assets.js

@@ -183,6 +183,7 @@ export async function extractAssetsForInput(page, input) {
 cli({
     site: '1688',
     name: 'assets',
+    access: 'read',
     description: '列出 1688 商品页可提取的图片/视频素材',
     domain: 'www.1688.com',
     strategy: Strategy.COOKIE,

clis/1688/download.js

@@ -42,6 +42,7 @@ function toDownloadItems(offerId, assets) {
 cli({
     site: '1688',
     name: 'download',
+    access: 'read',
     description: '批量下载 1688 商品页可提取的图片和视频素材',
     domain: 'www.1688.com',
     strategy: Strategy.COOKIE,

clis/1688/item.js

@@ -156,6 +156,7 @@ async function readItemPayload(page, itemUrl) {
 cli({
     site: '1688',
     name: 'item',
+    access: 'read',
     description: '1688 商品详情（公开商品字段、价格阶梯、卖家基础信息）',
     domain: 'www.1688.com',
     strategy: Strategy.COOKIE,

clis/1688/search.js

@@ -275,6 +275,7 @@ async function collectSearchRows(page, query, limit) {
 cli({
     site: '1688',
     name: 'search',
+    access: 'read',
     description: '1688 商品搜索（结果候选、卖家链接、价格/MOQ/销量文本）',
     domain: 'www.1688.com',
     strategy: Strategy.COOKIE,
@@ -293,7 +294,7 @@ cli({
             help: `结果数量上限（默认 ${SEARCH_LIMIT_DEFAULT}，最大 ${SEARCH_LIMIT_MAX}）`,
         },
     ],
-    columns: ['rank', 'title', 'price_text', 'moq_text', 'seller_name', 'location'],
+    columns: ['rank', 'offer_id', 'title', 'item_url', 'price_text', 'moq_text', 'seller_name', 'member_id', 'location'],
     func: async (page, kwargs) => {
         const query = String(kwargs.query ?? '');
         const limit = parseSearchLimit(kwargs.limit);

clis/1688/store.js

@@ -167,6 +167,7 @@ function hasAnyEvidence(storePayload, contactPayload, seed) {
 cli({
     site: '1688',
     name: 'store',
+    access: 'read',
     description: '1688 店铺/供应商公开信息（联系方式、主营、入驻年限、公开服务信号）',
     domain: 'www.1688.com',
     strategy: Strategy.COOKIE,

clis/36kr/article.js

@@ -13,6 +13,7 @@ function parseArticleId(input) {
 cli({
     site: '36kr',
     name: 'article',
+    access: 'read',
     description: '获取36氪文章正文内容',
     domain: 'www.36kr.com',
     strategy: Strategy.INTERCEPT,

clis/36kr/hot.js

@@ -26,6 +26,7 @@ function buildHotListUrl(listType, date = new Date()) {
 cli({
     site: '36kr',
     name: 'hot',
+    access: 'read',
     description: '36氪热榜 — trending articles (renqi/zonghe/shoucang/catalog)',
     domain: 'www.36kr.com',
     strategy: Strategy.PUBLIC,

clis/36kr/news.js

@@ -5,6 +5,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: '36kr',
     name: 'news',
+    access: 'read',
     description: 'Latest tech/startup news from 36kr (36氪)',
     domain: 'www.36kr.com',
     strategy: Strategy.PUBLIC,

clis/36kr/search.js

@@ -8,6 +8,7 @@ import { CliError } from '@jackwener/opencli/errors';
 cli({
     site: '36kr',
     name: 'search',
+    access: 'read',
     description: '搜索36氪文章',
     domain: 'www.36kr.com',
     strategy: Strategy.PUBLIC,

clis/51job/company.js

@@ -13,6 +13,7 @@ import { JOBS_ORIGIN, requirePage, navigateTo, parseCompanyJobCard } from './uti
 cli({
     site: '51job',
     name: 'company',
+    access: 'read',
     description: '51job 公司简介 + 在招职位（按 encCoId）',
     domain: 'jobs.51job.com',
     strategy: Strategy.COOKIE,

clis/51job/detail.js

@@ -13,6 +13,7 @@ import { JOBS_ORIGIN, requirePage, navigateTo } from './utils.js';
 cli({
     site: '51job',
     name: 'detail',
+    access: 'read',
     description: '51job 职位详情（按 jobId）',
     domain: 'jobs.51job.com',
     strategy: Strategy.COOKIE,

clis/51job/hot.js

@@ -16,6 +16,7 @@ import {
 cli({
     site: '51job',
     name: 'hot',
+    access: 'read',
     description: '51job 推荐职位（按城市/行业/排序浏览）',
     domain: 'we.51job.com',
     strategy: Strategy.COOKIE,

clis/51job/search.js

@@ -20,6 +20,7 @@ import {
 cli({
     site: '51job',
     name: 'search',
+    access: 'read',
     description: '51job 前程无忧关键词职位搜索',
     domain: 'we.51job.com',
     strategy: Strategy.COOKIE,

clis/amazon/bestsellers.js

@@ -2,6 +2,7 @@ import { cli } from '@jackwener/opencli/registry';
 import { createRankingCliOptions } from './rankings.js';
 cli(createRankingCliOptions({
     commandName: 'bestsellers',
+    access: 'read',
     listType: 'bestsellers',
     description: 'Amazon Best Sellers pages for category candidate discovery',
 }));

clis/amazon/discussion.js

@@ -85,6 +85,7 @@ async function readDiscussionPayload(page, input, limit) {
 cli({
     site: 'amazon',
     name: 'discussion',
+    access: 'read',
     description: 'Amazon review summary and sample customer discussion from product review pages',
     domain: 'amazon.com',
     strategy: Strategy.COOKIE,

clis/amazon/movers-shakers.js

@@ -2,6 +2,7 @@ import { cli } from '@jackwener/opencli/registry';
 import { createRankingCliOptions } from './rankings.js';
 cli(createRankingCliOptions({
     commandName: 'movers-shakers',
+    access: 'read',
     listType: 'movers_shakers',
     description: 'Amazon Movers & Shakers pages for short-term growth signals',
 }));

clis/amazon/new-releases.js

@@ -2,6 +2,7 @@ import { cli } from '@jackwener/opencli/registry';
 import { createRankingCliOptions } from './rankings.js';
 cli(createRankingCliOptions({
     commandName: 'new-releases',
+    access: 'read',
     listType: 'new_releases',
     description: 'Amazon New Releases pages for early momentum discovery',
 }));

clis/amazon/offer.js

@@ -106,6 +106,7 @@ async function readOfferPayload(page, input) {
 cli({
     site: 'amazon',
     name: 'offer',
+    access: 'read',
     description: 'Amazon seller, buy box, and fulfillment facts from the product page',
     domain: 'amazon.com',
     strategy: Strategy.COOKIE,

clis/amazon/product.js

@@ -65,6 +65,7 @@ async function readProductPayload(page, input) {
 cli({
     site: 'amazon',
     name: 'product',
+    access: 'read',
     description: 'Amazon product page facts for candidate validation',
     domain: 'amazon.com',
     strategy: Strategy.COOKIE,

clis/amazon/rankings.js

@@ -142,6 +142,7 @@ export function createRankingCliOptions(definition) {
     return {
         site: 'amazon',
         name: definition.commandName,
+        access: definition.access ?? 'read',
         description: definition.description,
         domain: 'amazon.com',
         strategy: Strategy.COOKIE,

clis/amazon/search.js

@@ -49,6 +49,7 @@ async function readSearchPayload(page, query) {
 cli({
     site: 'amazon',
     name: 'search',
+    access: 'read',
     description: 'Amazon search results for product discovery and coarse filtering',
     domain: 'amazon.com',
     strategy: Strategy.COOKIE,

clis/antigravity/dump.js

@@ -3,6 +3,7 @@ import * as fs from 'node:fs';
 export const dumpCommand = cli({
     site: 'antigravity',
     name: 'dump',
+    access: 'read',
     description: 'Dump the DOM to help AI understand the UI',
     domain: 'localhost',
     strategy: Strategy.UI,

clis/antigravity/extract-code.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 export const extractCodeCommand = cli({
     site: 'antigravity',
     name: 'extract-code',
+    access: 'read',
     description: 'Extract multi-line code blocks from the current Antigravity conversation',
     domain: 'localhost',
     strategy: Strategy.UI,

clis/antigravity/model.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 export const modelCommand = cli({
     site: 'antigravity',
     name: 'model',
+    access: 'read',
     description: 'Switch the active LLM model in Antigravity',
     domain: 'localhost',
     strategy: Strategy.UI,

clis/antigravity/new.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 export const newCommand = cli({
     site: 'antigravity',
     name: 'new',
+    access: 'read',
     description: 'Start a new conversation / clear context in Antigravity',
     domain: 'localhost',
     strategy: Strategy.UI,

clis/antigravity/read.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 export const readCommand = cli({
     site: 'antigravity',
     name: 'read',
+    access: 'read',
     description: 'Read the latest chat messages from Antigravity AI',
     domain: 'localhost',
     strategy: Strategy.UI,

clis/antigravity/send.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 export const sendCommand = cli({
     site: 'antigravity',
     name: 'send',
+    access: 'write',
     description: 'Send a message to Antigravity AI via the internal Lexical editor',
     domain: 'localhost',
     strategy: Strategy.UI,

clis/antigravity/status.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 export const statusCommand = cli({
     site: 'antigravity',
     name: 'status',
+    access: 'read',
     description: 'Check Antigravity CDP connection and get current page state',
     domain: 'localhost',
     strategy: Strategy.UI,

clis/antigravity/watch.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 export const watchCommand = cli({
     site: 'antigravity',
     name: 'watch',
+    access: 'read',
     description: 'Stream new chat messages from Antigravity in real-time',
     domain: 'localhost',
     strategy: Strategy.UI,

clis/apple-podcasts/episodes.js

@@ -4,6 +4,7 @@ import { itunesFetch, formatDuration, formatDate } from './utils.js';
 cli({
     site: 'apple-podcasts',
     name: 'episodes',
+    access: 'read',
     description: 'List recent episodes of an Apple Podcast (use ID from search)',
     strategy: Strategy.PUBLIC,
     browser: false,

clis/apple-podcasts/search.js

@@ -4,6 +4,7 @@ import { itunesFetch } from './utils.js';
 cli({
     site: 'apple-podcasts',
     name: 'search',
+    access: 'read',
     description: 'Search Apple Podcasts',
     strategy: Strategy.PUBLIC,
     browser: false,

clis/apple-podcasts/top.js

@@ -6,6 +6,7 @@ const CHARTS_TIMEOUT_MS = 15_000;
 cli({
     site: 'apple-podcasts',
     name: 'top',
+    access: 'read',
     description: 'Top podcasts chart on Apple Podcasts',
     strategy: Strategy.PUBLIC,
     browser: false,

clis/arxiv/arxiv.test.js

@@ -0,0 +1,112 @@
+import { describe, expect, it } from 'vitest';
+import { getRegistry } from '@jackwener/opencli/registry';
+import { normalizeArxivCategory, normalizeArxivLimit, parseEntries } from './utils.js';
+import './paper.js';
+import './search.js';
+import './recent.js';
+
+const SAMPLE_ENTRY_XML = `<?xml version='1.0' encoding='UTF-8'?>
+<feed xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/"
+      xmlns:arxiv="http://arxiv.org/schemas/atom"
+      xmlns="http://www.w3.org/2005/Atom">
+  <entry>
+    <id>http://arxiv.org/abs/1706.03762v7</id>
+    <title>Attention Is All You Need &amp; Friends</title>
+    <updated>2023-08-02T00:41:18Z</updated>
+    <link href="https://arxiv.org/abs/1706.03762v7" rel="alternate" type="text/html"/>
+    <link href="https://arxiv.org/pdf/1706.03762v7" rel="related" type="application/pdf" title="pdf"/>
+    <summary>The dominant sequence transduction models are based on complex recurrent or convolutional neural networks. We propose a new simple network architecture, the Transformer, based solely on attention.</summary>
+    <category term="cs.CL" scheme="http://arxiv.org/schemas/atom"/>
+    <category term="cs.LG" scheme="http://arxiv.org/schemas/atom"/>
+    <published>2017-06-12T17:57:34Z</published>
+    <arxiv:comment>15 pages, 5 figures</arxiv:comment>
+    <arxiv:primary_category term="cs.CL"/>
+    <author><name>Ashish Vaswani</name></author>
+    <author><name>Noam Shazeer</name></author>
+    <author><name>Niki Parmar</name></author>
+    <author><name>Jakob Uszkoreit</name></author>
+    <author><name>Llion Jones</name></author>
+    <author><name>Aidan N. Gomez</name></author>
+    <author><name>Lukasz Kaiser</name></author>
+    <author><name>Illia Polosukhin</name></author>
+  </entry>
+</feed>`;
+
+describe('arxiv adapter', () => {
+  it('registers paper, search and recent commands with the expected columns', () => {
+    const paper = getRegistry().get('arxiv/paper');
+    const search = getRegistry().get('arxiv/search');
+    const recent = getRegistry().get('arxiv/recent');
+
+    expect(paper).toBeDefined();
+    expect(search).toBeDefined();
+    expect(recent).toBeDefined();
+
+    expect(paper.columns).toEqual([
+      'id', 'title', 'authors', 'published', 'updated',
+      'primary_category', 'categories', 'abstract', 'comment', 'pdf', 'url',
+    ]);
+    expect(search.columns).toEqual([
+      'id', 'title', 'authors', 'published', 'primary_category', 'url',
+    ]);
+    expect(recent.columns).toEqual([
+      'id', 'title', 'authors', 'published', 'primary_category', 'url',
+    ]);
+  });
+
+  it('parseEntries returns full abstract, all authors, pdf, primary category and comment', () => {
+    const [entry] = parseEntries(SAMPLE_ENTRY_XML);
+
+    expect(entry.id).toBe('1706.03762');
+    expect(entry.title).toBe('Attention Is All You Need & Friends');
+    // All 8 authors must be present — earlier impl truncated to 3.
+    expect(entry.authors.split(', ')).toHaveLength(8);
+    expect(entry.authors).toContain('Ashish Vaswani');
+    expect(entry.authors).toContain('Illia Polosukhin');
+    // Full abstract — earlier impl truncated at 200 chars.
+    expect(entry.abstract.length).toBeGreaterThan(140);
+    expect(entry.abstract.endsWith('...')).toBe(false);
+    expect(entry.abstract).toContain('attention');
+    expect(entry.published).toBe('2017-06-12');
+    expect(entry.updated).toBe('2023-08-02');
+    expect(entry.primary_category).toBe('cs.CL');
+    expect(entry.categories).toBe('cs.CL, cs.LG');
+    expect(entry.comment).toBe('15 pages, 5 figures');
+    expect(entry.pdf).toBe('https://arxiv.org/pdf/1706.03762v7');
+    expect(entry.url).toBe('https://arxiv.org/abs/1706.03762');
+  });
+
+  it('parseEntries returns an empty list for feeds with no entries', () => {
+    expect(parseEntries('<feed></feed>')).toEqual([]);
+  });
+
+  it('recent rejects malformed category strings', async () => {
+    const recent = getRegistry().get('arxiv/recent');
+    await expect(recent.func({ category: 'not a category', limit: 5 })).rejects.toMatchObject({
+      code: 'ARGUMENT',
+    });
+    await expect(recent.func({ category: '', limit: 5 })).rejects.toMatchObject({
+      code: 'ARGUMENT',
+    });
+  });
+
+  it('category validation accepts real arXiv archive and subcategory forms', () => {
+    expect(normalizeArxivCategory('cs.CL')).toBe('cs.CL');
+    expect(normalizeArxivCategory('math')).toBe('math');
+    expect(normalizeArxivCategory('physics.comp-ph')).toBe('physics.comp-ph');
+    expect(normalizeArxivCategory('physics.data-an')).toBe('physics.data-an');
+    expect(normalizeArxivCategory('cond-mat.soft')).toBe('cond-mat.soft');
+    expect(normalizeArxivCategory('q-bio.NC')).toBe('q-bio.NC');
+    expect(() => normalizeArxivCategory('not a category')).toThrow('Invalid arXiv category');
+    expect(() => normalizeArxivCategory('cs/CL')).toThrow('Invalid arXiv category');
+    expect(() => normalizeArxivCategory('')).toThrow('Invalid arXiv category');
+  });
+
+  it('limit validation rejects non-positive, non-integer and over-cap values', () => {
+    expect(normalizeArxivLimit(10, 5, 25)).toBe(10);
+    expect(normalizeArxivLimit(undefined, 5, 25)).toBe(5);
+    expect(() => normalizeArxivLimit(0, 5, 25)).toThrow('positive integer');
+    expect(() => normalizeArxivLimit(1.5, 5, 25)).toThrow('positive integer');
+    expect(() => normalizeArxivLimit(26, 5, 25)).toThrow('<= 25');
+  });
+});

clis/arxiv/paper.js

@@ -1,21 +1,22 @@
 import { cli, Strategy } from '@jackwener/opencli/registry';
-import { CliError } from '@jackwener/opencli/errors';
+import { EmptyResultError } from '@jackwener/opencli/errors';
 import { arxivFetch, parseEntries } from './utils.js';
 cli({
     site: 'arxiv',
     name: 'paper',
+    access: 'read',
     description: 'Get arXiv paper details by ID',
     strategy: Strategy.PUBLIC,
     browser: false,
     args: [
         { name: 'id', positional: true, required: true, help: 'arXiv paper ID (e.g. 1706.03762)' },
     ],
-    columns: ['id', 'title', 'authors', 'published', 'abstract', 'url'],
+    columns: ['id', 'title', 'authors', 'published', 'updated', 'primary_category', 'categories', 'abstract', 'comment', 'pdf', 'url'],
     func: async (args) => {
         const xml = await arxivFetch(`id_list=${encodeURIComponent(args.id)}`);
         const entries = parseEntries(xml);
         if (!entries.length)
-            throw new CliError('NOT_FOUND', `Paper ${args.id} not found`, 'Check the arXiv ID format, e.g. 1706.03762');
+            throw new EmptyResultError('arxiv paper', `Paper ${args.id} was not found. Check the arXiv ID format, e.g. 1706.03762`);
         return entries;
     },
 });

clis/arxiv/recent.js

@@ -0,0 +1,33 @@
+import { cli, Strategy } from '@jackwener/opencli/registry';
+import { EmptyResultError } from '@jackwener/opencli/errors';
+import { arxivFetch, normalizeArxivCategory, normalizeArxivLimit, parseEntries } from './utils.js';
+cli({
+    site: 'arxiv',
+    name: 'recent',
+    access: 'read',
+    description: 'List recent arXiv submissions in a category',
+    strategy: Strategy.PUBLIC,
+    browser: false,
+    args: [
+        { name: 'category', positional: true, required: true, help: 'arXiv category (e.g. cs.CL, cs.LG, math.PR, q-bio.NC)' },
+        { name: 'limit', type: 'int', default: 10, help: 'Max results (max 50)' },
+    ],
+    columns: ['id', 'title', 'authors', 'published', 'primary_category', 'url'],
+    func: async (args) => {
+        const category = normalizeArxivCategory(args.category);
+        const limit = normalizeArxivLimit(args.limit, 10, 50);
+        const query = encodeURIComponent(`cat:${category}`);
+        const xml = await arxivFetch(`search_query=${query}&max_results=${limit}&sortBy=submittedDate&sortOrder=descending`);
+        const entries = parseEntries(xml);
+        if (!entries.length)
+            throw new EmptyResultError('arxiv', `No recent papers in ${category}. Check the category name.`);
+        return entries.map(e => ({
+            id: e.id,
+            title: e.title,
+            authors: e.authors,
+            published: e.published,
+            primary_category: e.primary_category,
+            url: e.url,
+        }));
+    },
+});

clis/arxiv/search.js

@@ -1,9 +1,10 @@
 import { cli, Strategy } from '@jackwener/opencli/registry';
-import { CliError } from '@jackwener/opencli/errors';
-import { arxivFetch, parseEntries } from './utils.js';
+import { ArgumentError, EmptyResultError } from '@jackwener/opencli/errors';
+import { arxivFetch, normalizeArxivLimit, parseEntries } from './utils.js';
 cli({
     site: 'arxiv',
     name: 'search',
+    access: 'read',
     description: 'Search arXiv papers',
     strategy: Strategy.PUBLIC,
     browser: false,
@@ -11,14 +12,25 @@ cli({
         { name: 'query', positional: true, required: true, help: 'Search keyword (e.g. "attention is all you need")' },
         { name: 'limit', type: 'int', default: 10, help: 'Max results (max 25)' },
     ],
-    columns: ['id', 'title', 'authors', 'published', 'url'],
+    columns: ['id', 'title', 'authors', 'published', 'primary_category', 'url'],
     func: async (args) => {
-        const limit = Math.max(1, Math.min(Number(args.limit), 25));
-        const query = encodeURIComponent(`all:${args.query}`);
+        const queryText = String(args.query || '').trim();
+        if (!queryText) {
+            throw new ArgumentError('arxiv search query cannot be empty');
+        }
+        const limit = normalizeArxivLimit(args.limit, 10, 25);
+        const query = encodeURIComponent(`all:${queryText}`);
         const xml = await arxivFetch(`search_query=${query}&max_results=${limit}&sortBy=relevance`);
         const entries = parseEntries(xml);
         if (!entries.length)
-            throw new CliError('NOT_FOUND', 'No papers found', 'Try a different keyword');
-        return entries.map(e => ({ id: e.id, title: e.title, authors: e.authors, published: e.published, url: e.url }));
+            throw new EmptyResultError('arxiv', 'No papers found. Try a different keyword.');
+        return entries.map(e => ({
+            id: e.id,
+            title: e.title,
+            authors: e.authors,
+            published: e.published,
+            primary_category: e.primary_category,
+            url: e.url,
+        }));
     },
 });

clis/arxiv/utils.js

@@ -4,15 +4,44 @@
  * arXiv exposes a public Atom/XML API — no key required.
  * https://info.arxiv.org/help/api/index.html
  */
-import { CliError } from '@jackwener/opencli/errors';
+import { ArgumentError, CommandExecutionError } from '@jackwener/opencli/errors';
 export const ARXIV_BASE = 'https://export.arxiv.org/api/query';
+const ARXIV_CATEGORY_PATTERN = /^[a-z]+(?:-[a-z]+)*(?:\.[A-Za-z0-9]+(?:-[A-Za-z0-9]+)*)?$/;
 export async function arxivFetch(params) {
     const resp = await fetch(`${ARXIV_BASE}?${params}`);
     if (!resp.ok) {
-        throw new CliError('FETCH_ERROR', `arXiv API HTTP ${resp.status}`, 'Check your search term or paper ID');
+        throw new CommandExecutionError(`arXiv API HTTP ${resp.status}`, 'Check your search term or paper ID');
     }
     return resp.text();
 }
+export function normalizeArxivLimit(value, defaultValue, maxValue, label = 'limit') {
+    const raw = value ?? defaultValue;
+    const limit = Number(raw);
+    if (!Number.isInteger(limit) || limit <= 0) {
+        throw new ArgumentError(`arxiv ${label} must be a positive integer`);
+    }
+    if (limit > maxValue) {
+        throw new ArgumentError(`arxiv ${label} must be <= ${maxValue}`);
+    }
+    return limit;
+}
+export function normalizeArxivCategory(value) {
+    const category = String(value || '').trim();
+    if (!ARXIV_CATEGORY_PATTERN.test(category)) {
+        throw new ArgumentError(`Invalid arXiv category "${value}". Examples: cs.CL, cs.LG, math.PR, q-bio.NC, physics.comp-ph`);
+    }
+    return category;
+}
+/** Decode the small set of XML entities arXiv emits in text fields. */
+function decodeEntities(s) {
+    return s
+        .replace(/&amp;/g, '&')
+        .replace(/&lt;/g, '<')
+        .replace(/&gt;/g, '>')
+        .replace(/&quot;/g, '"')
+        .replace(/&apos;/g, "'")
+        .replace(/&#39;/g, "'");
+}
 /** Extract the text content of the first matching XML tag. */
 function extract(xml, tag) {
     const m = xml.match(new RegExp(`<${tag}[^>]*>([\\s\\S]*?)<\\/${tag}>`));
@@ -27,6 +56,34 @@ function extractAll(xml, tag) {
         results.push(m[1].trim());
     return results;
 }
+/** Extract the value of a named attribute from the first matching tag (open or self-closing). */
+function extractAttr(xml, tag, attr) {
+    const m = xml.match(new RegExp(`<${tag}\\b[^>]*?\\b${attr}="([^"]*)"`));
+    return m ? m[1] : '';
+}
+/** Extract all values of a named attribute across repeated tags. */
+function extractAllAttr(xml, tag, attr) {
+    const re = new RegExp(`<${tag}\\b[^>]*?\\b${attr}="([^"]*)"`, 'g');
+    const out = [];
+    let m;
+    while ((m = re.exec(xml)) !== null)
+        out.push(m[1]);
+    return out;
+}
+/** Find the href of the first <link> tag matching a given rel. */
+function findLinkHref(xml, rel) {
+    const re = /<link\b([^>]*)\/?>/g;
+    let m;
+    while ((m = re.exec(xml)) !== null) {
+        const attrs = m[1];
+        if (new RegExp(`\\brel="${rel}"`).test(attrs)) {
+            const h = attrs.match(/\bhref="([^"]*)"/);
+            if (h)
+                return h[1];
+        }
+    }
+    return '';
+}
 /** Parse Atom XML feed into structured entries. */
 export function parseEntries(xml) {
     const entryRe = /<entry>([\s\S]*?)<\/entry>/g;
@@ -36,12 +93,18 @@ export function parseEntries(xml) {
         const e = m[1];
         const rawId = extract(e, 'id');
         const arxivId = rawId.replace(/^https?:\/\/arxiv\.org\/abs\//, '').replace(/v\d+$/, '');
+        const pdf = findLinkHref(e, 'related') || `https://arxiv.org/pdf/${arxivId}`;
         entries.push({
             id: arxivId,
-            title: extract(e, 'title').replace(/\s+/g, ' '),
-            authors: extractAll(e, 'name').slice(0, 3).join(', '),
-            abstract: (() => { const s = extract(e, 'summary').replace(/\s+/g, ' '); return s.length > 200 ? s.slice(0, 200) + '...' : s; })(),
+            title: decodeEntities(extract(e, 'title').replace(/\s+/g, ' ')),
+            authors: decodeEntities(extractAll(e, 'name').join(', ')),
+            abstract: decodeEntities(extract(e, 'summary').replace(/\s+/g, ' ')),
             published: extract(e, 'published').slice(0, 10),
+            updated: extract(e, 'updated').slice(0, 10),
+            primary_category: extractAttr(e, 'arxiv:primary_category', 'term'),
+            categories: extractAllAttr(e, 'category', 'term').join(', '),
+            comment: decodeEntities(extract(e, 'arxiv:comment').replace(/\s+/g, ' ')),
+            pdf,
             url: `https://arxiv.org/abs/${arxivId}`,
         });
     }

clis/baidu-scholar/search.js

@@ -4,6 +4,7 @@ import { clampInt, requireNonEmptyQuery } from '../_shared/common.js';
 cli({
     site: 'baidu-scholar',
     name: 'search',
+    access: 'read',
     description: '百度学术搜索',
     domain: 'xueshu.baidu.com',
     strategy: Strategy.PUBLIC,

clis/band/bands.js

@@ -13,6 +13,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'band',
     name: 'bands',
+    access: 'read',
     description: 'List all Bands you belong to',
     domain: 'www.band.us',
     strategy: Strategy.COOKIE,

clis/band/mentions.js

@@ -1,4 +1,4 @@
-import { AuthRequiredError, EmptyResultError, SelectorError } from '@jackwener/opencli/errors';
+import { AuthRequiredError, EmptyResultError, selectorError } from '@jackwener/opencli/errors';
 import { cli, Strategy } from '@jackwener/opencli/registry';
 /**
  * band mentions — Show Band notifications where you were @mentioned.
@@ -12,6 +12,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'band',
     name: 'mentions',
+    access: 'read',
     description: 'Show Band notifications where you are @mentioned',
     domain: 'www.band.us',
     strategy: Strategy.INTERCEPT,
@@ -52,7 +53,7 @@ cli({
             await page.wait(0.5);
         }
         if (!bellReady) {
-            throw new SelectorError('button._btnWidgetIcon', 'Notification bell not found. The Band.us UI may have changed.');
+            throw selectorError('button._btnWidgetIcon', 'Notification bell not found. The Band.us UI may have changed.');
         }
         // Poll until a capture containing result_data.news arrives, up to maxSecs seconds.
         // getInterceptedRequests() clears the array on each call, so captures are accumulated
@@ -80,7 +81,7 @@ cli({
       return true;
     }`);
         if (!bellClicked) {
-            throw new SelectorError('button._btnWidgetIcon', 'Notification bell disappeared before click. The Band.us UI may have changed.');
+            throw selectorError('button._btnWidgetIcon', 'Notification bell disappeared before click. The Band.us UI may have changed.');
         }
         const requests = await waitForOneCapture();
         // Find the get_news response (has result_data.news); get_news_count responses do not.

clis/band/post.js

@@ -18,6 +18,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'band',
     name: 'post',
+    access: 'read',
     description: 'Export full content of a post including comments',
     domain: 'www.band.us',
     strategy: Strategy.COOKIE,

clis/band/posts.js

@@ -10,6 +10,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'band',
     name: 'posts',
+    access: 'read',
     description: 'List posts from a Band',
     domain: 'www.band.us',
     strategy: Strategy.COOKIE,

clis/barchart/flow.js

@@ -7,6 +7,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'barchart',
     name: 'flow',
+    access: 'read',
     description: 'Barchart unusual options activity / options flow',
     domain: 'www.barchart.com',
     strategy: Strategy.COOKIE,

clis/barchart/greeks.js

@@ -7,6 +7,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'barchart',
     name: 'greeks',
+    access: 'read',
     description: 'Barchart options greeks overview (IV, delta, gamma, theta, vega)',
     domain: 'www.barchart.com',
     strategy: Strategy.COOKIE,

clis/barchart/options.js

@@ -6,6 +6,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'barchart',
     name: 'options',
+    access: 'read',
     description: 'Barchart options chain with greeks, IV, volume, and open interest',
     domain: 'www.barchart.com',
     strategy: Strategy.COOKIE,

clis/barchart/quote.js

@@ -7,6 +7,7 @@ import { CommandExecutionError } from '@jackwener/opencli/errors';
 cli({
     site: 'barchart',
     name: 'quote',
+    access: 'read',
     description: 'Barchart stock quote with price, volume, and key metrics',
     domain: 'www.barchart.com',
     strategy: Strategy.COOKIE,

clis/bbc/news.js

@@ -5,6 +5,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'bbc',
     name: 'news',
+    access: 'read',
     description: 'BBC News headlines (RSS)',
     domain: 'www.bbc.com',
     strategy: Strategy.PUBLIC,

clis/bilibili/comments.js

@@ -7,6 +7,7 @@ import { apiGet, resolveBvid } from './utils.js';
 cli({
     site: 'bilibili',
     name: 'comments',
+    access: 'read',
     description: '获取 B站视频评论（使用官方 API + WBI 签名）',
     domain: 'www.bilibili.com',
     strategy: Strategy.COOKIE,

clis/bilibili/download.js

@@ -14,6 +14,7 @@ import { resolveBvid } from './utils.js';
 cli({
     site: 'bilibili',
     name: 'download',
+    access: 'read',
     description: '下载B站视频（需要 yt-dlp）',
     domain: 'www.bilibili.com',
     strategy: Strategy.COOKIE,

clis/bilibili/dynamic.js

@@ -3,6 +3,7 @@ import { apiGet } from './utils.js';
 cli({
     site: 'bilibili',
     name: 'dynamic',
+    access: 'read',
     description: 'Get Bilibili user dynamic feed',
     domain: 'www.bilibili.com',
     strategy: Strategy.COOKIE,

clis/bilibili/favorite.js

@@ -3,6 +3,7 @@ import { apiGet, payloadData, getSelfUid } from './utils.js';
 cli({
     site: 'bilibili',
     name: 'favorite',
+    access: 'write',
     description: '我的收藏夹',
     domain: 'www.bilibili.com',
     strategy: Strategy.COOKIE,

clis/bilibili/feed.js

@@ -65,6 +65,7 @@ function parseItem(item) {
 cli({
     site: 'bilibili',
     name: 'feed',
+    access: 'read',
     description: '动态时间线（不传 uid 查关注时间线，传 uid 查指定用户动态）',
     domain: 'www.bilibili.com',
     strategy: Strategy.COOKIE,
@@ -134,6 +135,7 @@ cli({
 cli({
     site: 'bilibili',
     name: 'feed-detail',
+    access: 'read',
     description: '查看 Bilibili 动态详情（支持充电专属内容）',
     domain: 'www.bilibili.com',
     strategy: Strategy.COOKIE,

clis/bilibili/following.js

@@ -4,6 +4,7 @@ import { fetchJson, getSelfUid, resolveUid } from './utils.js';
 cli({
     site: 'bilibili',
     name: 'following',
+    access: 'read',
     description: '获取 Bilibili 用户的关注列表',
     domain: 'www.bilibili.com',
     strategy: Strategy.COOKIE,

clis/bilibili/history.js

@@ -3,6 +3,7 @@ import { apiGet, payloadData } from './utils.js';
 cli({
     site: 'bilibili',
     name: 'history',
+    access: 'read',
     description: '我的观看历史',
     domain: 'www.bilibili.com',
     strategy: Strategy.COOKIE,

clis/bilibili/hot.js

@@ -2,12 +2,13 @@ import { cli } from '@jackwener/opencli/registry';
 cli({
     site: 'bilibili',
     name: 'hot',
+    access: 'read',
     description: 'B站热门视频',
     domain: 'www.bilibili.com',
     args: [
         { name: 'limit', type: 'int', default: 20, help: 'Number of videos' },
     ],
-    columns: ['rank', 'title', 'author', 'play', 'danmaku'],
+    columns: ['rank', 'title', 'author', 'play', 'danmaku', 'bvid', 'url'],
     pipeline: [
         { navigate: 'https://www.bilibili.com' },
         { evaluate: `(async () => {
@@ -20,6 +21,8 @@ cli({
     author: item.owner?.name,
     play: item.stat?.view,
     danmaku: item.stat?.danmaku,
+    bvid: item.bvid,
+    url: item.bvid ? 'https://www.bilibili.com/video/' + item.bvid : '',
   }));
 })()
 ` },
@@ -29,6 +32,8 @@ cli({
                 author: '${{ item.author }}',
                 play: '${{ item.play }}',
                 danmaku: '${{ item.danmaku }}',
+                bvid: '${{ item.bvid }}',
+                url: '${{ item.url }}',
             } },
         { limit: '${{ args.limit }}' },
     ],

clis/bilibili/hot.test.js

@@ -0,0 +1,17 @@
+import { describe, expect, it } from 'vitest';
+import { getRegistry } from '@jackwener/opencli/registry';
+import './hot.js';
+
+describe('bilibili hot adapter', () => {
+  const command = getRegistry().get('bilibili/hot');
+
+  it('registers bvid and url columns in the public hot-list shape', () => {
+    expect(command?.columns).toEqual(['rank', 'title', 'author', 'play', 'danmaku', 'bvid', 'url']);
+    expect(command?.pipeline?.[1]?.evaluate).toContain('bvid: item.bvid');
+    expect(command?.pipeline?.[1]?.evaluate).toContain("'https://www.bilibili.com/video/' + item.bvid");
+    expect(command?.pipeline?.[2]?.map).toMatchObject({
+      bvid: '${{ item.bvid }}',
+      url: '${{ item.url }}',
+    });
+  });
+});

clis/bilibili/me.js

@@ -1,7 +1,7 @@
 import { cli, Strategy } from '@jackwener/opencli/registry';
 import { apiGet, getSelfUid } from './utils.js';
 cli({
-    site: 'bilibili', name: 'me', description: 'My Bilibili profile info', domain: 'www.bilibili.com', strategy: Strategy.COOKIE,
+    site: 'bilibili', name: 'me', access: 'read', description: 'My Bilibili profile info', domain: 'www.bilibili.com', strategy: Strategy.COOKIE,
     args: [],
     columns: ['name', 'uid', 'level', 'coins', 'followers', 'following'],
     func: async (page) => {

clis/bilibili/ranking.js

@@ -3,6 +3,7 @@ import { apiGet } from './utils.js';
 cli({
     site: 'bilibili',
     name: 'ranking',
+    access: 'read',
     description: 'Get Bilibili video ranking board',
     domain: 'www.bilibili.com',
     strategy: Strategy.COOKIE,

clis/bilibili/search.js

@@ -1,7 +1,7 @@
 import { cli, Strategy } from '@jackwener/opencli/registry';
 import { apiGet, stripHtml } from './utils.js';
 cli({
-    site: 'bilibili', name: 'search', description: 'Search Bilibili videos or users', domain: 'www.bilibili.com', strategy: Strategy.COOKIE,
+    site: 'bilibili', name: 'search', access: 'read', description: 'Search Bilibili videos or users', domain: 'www.bilibili.com', strategy: Strategy.COOKIE,
     args: [
         { name: 'query', required: true, positional: true, help: 'Search keyword' },
         { name: 'type', default: 'video', help: 'video or user' },

clis/bilibili/subtitle.js

@@ -1,9 +1,10 @@
 import { cli, Strategy } from '@jackwener/opencli/registry';
-import { AuthRequiredError, CommandExecutionError, EmptyResultError, SelectorError } from '@jackwener/opencli/errors';
+import { AuthRequiredError, CommandExecutionError, EmptyResultError, selectorError } from '@jackwener/opencli/errors';
 import { apiGet, resolveBvid } from './utils.js';
 cli({
     site: 'bilibili',
     name: 'subtitle',
+    access: 'read',
     description: '获取 Bilibili 视频的字幕',
     strategy: Strategy.COOKIE,
     args: [
@@ -23,7 +24,7 @@ cli({
       return state?.videoData?.cid;
     })()`);
         if (!cid) {
-            throw new SelectorError('videoData.cid', '无法在页面中提取到当前视频的 CID，请检查页面是否正常加载。');
+            throw selectorError('videoData.cid', '无法在页面中提取到当前视频的 CID，请检查页面是否正常加载。');
         }
         // 3. 在 Node 端使用 apiGet 获取带 Wbi 签名的字幕列表
         // 之前纯靠 evaluate 里的 fetch 会失败，因为 B 站 /wbi/ 开头的接口强校验 w_rid，未签名直接被风控返回 403 HTML

clis/bilibili/user-videos.js

@@ -3,6 +3,7 @@ import { apiGet, payloadData, resolveUid } from './utils.js';
 cli({
     site: 'bilibili',
     name: 'user-videos',
+    access: 'read',
     description: '查看指定用户的投稿视频',
     domain: 'www.bilibili.com',
     strategy: Strategy.COOKIE,

clis/bilibili/video.js

@@ -5,6 +5,7 @@ import { apiGet, resolveBvid } from './utils.js';
 cli({
   site: 'bilibili',
   name: 'video',
+    access: 'read',
   description: 'Get Bilibili video metadata (title, author, duration, stats, etc.)',
   strategy: Strategy.COOKIE,
   args: [

clis/binance/asks.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'asks',
+    access: 'read',
   description: 'Order book ask prices for a trading pair',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/binance/depth.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'depth',
+    access: 'read',
   description: 'Order book bid and ask prices for a trading pair',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/binance/gainers.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'gainers',
+    access: 'read',
   description: 'Top gaining trading pairs by 24h price change',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/binance/klines.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'klines',
+    access: 'read',
   description: 'Candlestick/kline data for a trading pair',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/binance/losers.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'losers',
+    access: 'read',
   description: 'Top losing trading pairs by 24h price change',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/binance/pairs.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'pairs',
+    access: 'read',
   description: 'List active trading pairs on Binance',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/binance/price.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'price',
+    access: 'read',
   description: 'Quick price check for a trading pair',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/binance/prices.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'prices',
+    access: 'read',
   description: 'Latest prices for all trading pairs',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/binance/ticker.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'ticker',
+    access: 'read',
   description: '24h ticker statistics for top trading pairs by volume',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/binance/top.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'top',
+    access: 'read',
   description: 'Top trading pairs by 24h volume on Binance',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/binance/trades.js

@@ -3,6 +3,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
   site: 'binance',
   name: 'trades',
+    access: 'read',
   description: 'Recent trades for a trading pair',
   domain: 'data-api.binance.vision',
   strategy: Strategy.PUBLIC,

clis/bloomberg/businessweek.js

@@ -3,6 +3,7 @@ import { fetchBloombergFeed } from './utils.js';
 cli({
     site: 'bloomberg',
     name: 'businessweek',
+    access: 'read',
     description: 'Bloomberg Businessweek top stories (RSS)',
     domain: 'feeds.bloomberg.com',
     strategy: Strategy.PUBLIC,

clis/bloomberg/economics.js

@@ -3,6 +3,7 @@ import { fetchBloombergFeed } from './utils.js';
 cli({
     site: 'bloomberg',
     name: 'economics',
+    access: 'read',
     description: 'Bloomberg Economics top stories (RSS)',
     domain: 'feeds.bloomberg.com',
     strategy: Strategy.PUBLIC,

clis/bloomberg/feeds.js

@@ -3,6 +3,7 @@ import { BLOOMBERG_FEEDS } from './utils.js';
 cli({
     site: 'bloomberg',
     name: 'feeds',
+    access: 'read',
     description: 'List the Bloomberg RSS feed aliases used by the adapter',
     domain: 'feeds.bloomberg.com',
     strategy: Strategy.PUBLIC,

clis/bloomberg/industries.js

@@ -3,6 +3,7 @@ import { fetchBloombergFeed } from './utils.js';
 cli({
     site: 'bloomberg',
     name: 'industries',
+    access: 'read',
     description: 'Bloomberg Industries top stories (RSS)',
     domain: 'feeds.bloomberg.com',
     strategy: Strategy.PUBLIC,

clis/bloomberg/main.js

@@ -3,6 +3,7 @@ import { fetchBloombergFeed } from './utils.js';
 cli({
     site: 'bloomberg',
     name: 'main',
+    access: 'read',
     description: 'Bloomberg homepage top stories (RSS)',
     domain: 'feeds.bloomberg.com',
     strategy: Strategy.PUBLIC,

clis/bloomberg/markets.js

@@ -3,6 +3,7 @@ import { fetchBloombergFeed } from './utils.js';
 cli({
     site: 'bloomberg',
     name: 'markets',
+    access: 'read',
     description: 'Bloomberg Markets top stories (RSS)',
     domain: 'feeds.bloomberg.com',
     strategy: Strategy.PUBLIC,

clis/bloomberg/news.js

@@ -4,6 +4,7 @@ import { extractStoryMediaLinks, renderStoryBody, validateBloombergLink, } from
 cli({
     site: 'bloomberg',
     name: 'news',
+    access: 'read',
     description: 'Read a Bloomberg story/article page and return title, full content, and media links',
     domain: 'www.bloomberg.com',
     strategy: Strategy.COOKIE,

clis/bloomberg/opinions.js

@@ -3,6 +3,7 @@ import { fetchBloombergFeed } from './utils.js';
 cli({
     site: 'bloomberg',
     name: 'opinions',
+    access: 'read',
     description: 'Bloomberg Opinion top stories (RSS)',
     domain: 'feeds.bloomberg.com',
     strategy: Strategy.PUBLIC,

clis/bloomberg/politics.js

@@ -3,6 +3,7 @@ import { fetchBloombergFeed } from './utils.js';
 cli({
     site: 'bloomberg',
     name: 'politics',
+    access: 'read',
     description: 'Bloomberg Politics top stories (RSS)',
     domain: 'feeds.bloomberg.com',
     strategy: Strategy.PUBLIC,

clis/bloomberg/tech.js

@@ -3,6 +3,7 @@ import { fetchBloombergFeed } from './utils.js';
 cli({
     site: 'bloomberg',
     name: 'tech',
+    access: 'read',
     description: 'Bloomberg Tech top stories (RSS)',
     domain: 'feeds.bloomberg.com',
     strategy: Strategy.PUBLIC,

clis/bluesky/feeds.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'bluesky',
     name: 'feeds',
+    access: 'read',
     description: 'Popular Bluesky feed generators',
     domain: 'public.api.bsky.app',
     strategy: Strategy.PUBLIC,

clis/bluesky/followers.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'bluesky',
     name: 'followers',
+    access: 'read',
     description: 'List followers of a Bluesky user',
     domain: 'public.api.bsky.app',
     strategy: Strategy.PUBLIC,

clis/bluesky/following.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'bluesky',
     name: 'following',
+    access: 'read',
     description: 'List accounts a Bluesky user is following',
     domain: 'public.api.bsky.app',
     strategy: Strategy.PUBLIC,

clis/bluesky/profile.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'bluesky',
     name: 'profile',
+    access: 'read',
     description: 'Get Bluesky user profile info',
     domain: 'public.api.bsky.app',
     strategy: Strategy.PUBLIC,

clis/bluesky/search.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'bluesky',
     name: 'search',
+    access: 'read',
     description: 'Search Bluesky users',
     domain: 'public.api.bsky.app',
     strategy: Strategy.PUBLIC,

clis/bluesky/starter-packs.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'bluesky',
     name: 'starter-packs',
+    access: 'read',
     description: 'Get starter packs created by a Bluesky user',
     domain: 'public.api.bsky.app',
     strategy: Strategy.PUBLIC,

clis/bluesky/thread.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'bluesky',
     name: 'thread',
+    access: 'read',
     description: 'Get a Bluesky post thread with replies',
     domain: 'public.api.bsky.app',
     strategy: Strategy.PUBLIC,

clis/bluesky/trending.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'bluesky',
     name: 'trending',
+    access: 'read',
     description: 'Trending topics on Bluesky',
     domain: 'public.api.bsky.app',
     strategy: Strategy.PUBLIC,

clis/bluesky/user.js

@@ -2,6 +2,7 @@ import { cli, Strategy } from '@jackwener/opencli/registry';
 cli({
     site: 'bluesky',
     name: 'user',
+    access: 'read',
     description: 'Get recent posts from a Bluesky user',
     domain: 'public.api.bsky.app',
     strategy: Strategy.PUBLIC,
@@ -15,7 +16,7 @@ cli({
         },
         { name: 'limit', type: 'int', default: 20, help: 'Number of posts' },
     ],
-    columns: ['rank', 'text', 'likes', 'reposts', 'replies'],
+    columns: ['rank', 'uri', 'text', 'likes', 'reposts', 'replies'],
     pipeline: [
         { fetch: {
                 url: 'https://public.api.bsky.app/xrpc/app.bsky.feed.getAuthorFeed?actor=${{ args.handle }}&limit=${{ args.limit }}',
@@ -23,6 +24,7 @@ cli({
         { select: 'feed' },
         { map: {
                 rank: '${{ index + 1 }}',
+                uri: '${{ item.post.uri }}',
                 text: '${{ item.post.record.text }}',
                 likes: '${{ item.post.likeCount }}',
                 reposts: '${{ item.post.repostCount }}',

clis/boss/batchgreet.js

@@ -6,6 +6,7 @@ import { requirePage, navigateToChat, fetchRecommendList, clickCandidateInList,
 cli({
     site: 'boss',
     name: 'batchgreet',
+    access: 'write',
     description: 'BOSS直聘批量向推荐候选人发送招呼',
     domain: 'www.zhipin.com',
     strategy: Strategy.COOKIE,