dsh-plugin-yapi 1.4.0 → 1.4.3

package/README.md

@@ -43,12 +43,13 @@ dsh plugin --profile desktop add dsh-plugin-yapi
 打开 DSH → 左侧 **YAPI** → 右上角 **账号设置**，填写：
 
 - YAPI 地址（如 `https://yapi.example.com`，带 `http://` 或 `https://`）
+- 登录方式：**普通登录** / **LDAP**（选 LDAP 前确认 YAPI 服务端已开启 LDAP）
 - 账号 / 密码
 
-点「测试并保存」，验证通过后生效。
+点「测试并保存」，验证通过后生效。普通登录走 `/api/user/login`，LDAP 走 `/api/user/login_by_ldap`。
 
-- 账号保存在 `~/.dsh/dsh-plugin-yapi.json`（权限 `0600`），不会进入仓库。
-- 也支持环境变量 `YAPI_BASE_URL` / `YAPI_EMAIL` / `YAPI_PASSWORD`。
+- 账号保存在 `~/.dsh/dsh-plugin-yapi.json`（权限 `0600`），不会进入仓库；`authType` 为 `normal` 或 `ldap`。
+- 也支持环境变量 `YAPI_BASE_URL` / `YAPI_EMAIL` / `YAPI_PASSWORD` / `YAPI_AUTH_TYPE`（`ldap` 时用 LDAP 登录）。
 - 搜索需要项目 ID；打开一个文档后会自动跟随该文档所属项目。
 - 插件**没有内置任何 YAPI 地址**，必须自己配置。
 
@@ -66,21 +67,28 @@ CLI 是零依赖 Node 脚本，不需要 DSH。直接命令行安装：
 
 ```bash
 npm install -g dsh-plugin-yapi
-yapi-doc install-skill
+yapi-sync
 yapi-doc <doc-id>
 ```
 
-- `install-skill` 默认把 `SKILL.md` 和 CLI 装到 `~/.agents/skills/yapi-doc`；支持 `SKILL.md` 的 agent 可直接读取。
+- `yapi-sync` 和 `yapi-doc` 一样是独立命令：一次把 **`yapi-doc` 和 `yapi-sync` 两个 skill**同步到所有检测到的工具。
+- 自动检测 Trae、WorkBuddy、Qoder CN、GitHub Copilot、CodeBuddy、Claude Code、Cursor、Gemini CLI、Amp、OpenCode、Codex/通用 Agent Skills、DSH 等目录；`--dir` 可追加自定义 skills 根目录。
+- 同步完重启对应应用，技能列表里会出现 `yapi-doc` 和 `yapi-sync`。
+
+```bash
+yapi-sync
+yapi-sync --dry-run                 # 只显示会写到哪些目录
+yapi-sync --dir <skills根目录>      # 追加自定义目录
+```
+
+- `yapi-doc sync-skills` 是 `yapi-sync` 的别名，仍然可用。
 - 如果 npm 暂时不可用，也可以 `npm install -g github:jinshan3690/dsh-plugin-yapi`。
-- **一键同步到所有已检测到的工具**：
+- 只装 `yapi-doc`（不装 `yapi-sync`）时用：
 
   ```bash
-  yapi-doc sync-skills
-  yapi-doc sync-skills --dry-run   # 只显示会写到哪些目录
+  yapi-doc install-skill
   ```
 
-  会自动检测 Trae、WorkBuddy、Qoder CN、GitHub Copilot、CodeBuddy、Claude Code、Cursor、Gemini CLI、Amp、OpenCode、Codex/通用 Agent Skills、DSH 等目录；`--dir` 可追加自定义目录。同步完重启对应应用。
-
 - 也可以单独指定目录：
 
   ```bash
@@ -107,6 +115,7 @@ yapi-doc <doc-id>
   export YAPI_BASE_URL='https://yapi.example.com'
   export YAPI_EMAIL='you@example.com'
   export YAPI_PASSWORD='your-password'
+  export YAPI_AUTH_TYPE='normal'   # 或 ldap
   ```
 
 常用参数：
@@ -124,8 +133,8 @@ yapi-doc <doc-id> --json          # 结构化输出
 - `--json`：输出 `{ ok, data }` 结构化 JSON。
 - `--project <id>`：`--search` 必填。
 
-**DSH 用户**不需要上面的 npm 安装：插件已自动注册 skill，CLI 在
-`~/.dsh/profiles/desktop/node_modules/.bin/yapi-doc`。
+**DSH 用户**不需要上面的 npm 安装：插件会自动注册 `yapi-doc` 和 `yapi-sync` 两个 skill；CLI 在
+`~/.dsh/profiles/desktop/node_modules/.bin/yapi-doc` 和 `.../.bin/yapi-sync`。
 
 ## 更新 / 卸载
 

package/bin/yapi-sync.mjs

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+/** Top-level alias for `yapi-doc sync-skills`. */
+process.argv.splice(2, 0, 'sync-skills')
+await import('../skills/yapi-doc/yapi-doc.mjs')

package/client.js

@@ -710,8 +710,8 @@ window.__ModuleLoader__.load({
       '.yapi-modal-state{padding:8px 10px;border:1px solid var(--yapi-line);border-radius:8px;background:var(--yapi-surface);font-size:12px;color:var(--yapi-text-2)}',
       '.yapi-formrow{display:flex;flex-direction:column;gap:5px}',
       '.yapi-formrow label{font-size:11.5px;font-weight:600;color:var(--yapi-text-3)}',
-      '.yapi-formrow input{width:100%;box-sizing:border-box;border:1px solid var(--yapi-line);border-radius:8px;background:var(--yapi-surface-2);color:inherit;font-family:inherit;font-size:13px;padding:8px 10px;outline:0}',
-      '.yapi-formrow input:focus{border-color:var(--yapi-accent)}',
+      '.yapi-formrow input,.yapi-formrow select{width:100%;box-sizing:border-box;border:1px solid var(--yapi-line);border-radius:8px;background:var(--yapi-surface-2);color:inherit;font-family:inherit;font-size:13px;padding:8px 10px;outline:0}',
+      '.yapi-formrow input:focus,.yapi-formrow select:focus{border-color:var(--yapi-accent)}',
       '.yapi-formhint{font-size:11.5px;line-height:1.6;color:var(--yapi-text-3)}',
       '.yapi-modal-error{border:1px solid rgba(220,38,38,.22);border-radius:8px;background:rgba(220,38,38,.07);padding:8px 10px;font-size:12px;line-height:1.55;color:var(--dsw-alias-state-error-primary,#dc2626);word-break:break-word}',
       '.yapi-copymodal{max-width:520px}',
@@ -1155,7 +1155,7 @@ window.__ModuleLoader__.load({
       })
       const [account, setAccount] = useState(null)
       const [accountOpen, setAccountOpen] = useState(false)
-      const [accountForm, setAccountForm] = useState({ baseUrl: '', email: '', password: '' })
+      const [accountForm, setAccountForm] = useState({ baseUrl: '', email: '', password: '', authType: 'normal' })
       const [accountSaving, setAccountSaving] = useState(false)
       const [accountError, setAccountError] = useState('')
 
@@ -1462,7 +1462,7 @@ window.__ModuleLoader__.load({
               throw new Error((payload && payload.error && payload.error.message) || '读取账号设置失败')
             }
             setAccount(payload)
-            setAccountForm({ baseUrl: payload.baseUrl || '', email: payload.email || '', password: '' })
+            setAccountForm({ baseUrl: payload.baseUrl || '', email: payload.email || '', password: '', authType: payload.authType || 'normal' })
           })
           .catch(function (error) {
             setAccountError((error && error.message) || String(error))
@@ -1487,7 +1487,7 @@ window.__ModuleLoader__.load({
             if (!payload) throw new Error('宿主返回了非 JSON 响应')
             if (!payload.ok) throw new Error((payload.error && payload.error.message) || '保存失败')
             setAccount(payload)
-            setAccountForm({ baseUrl: payload.baseUrl || '', email: payload.email || '', password: '' })
+            setAccountForm({ baseUrl: payload.baseUrl || '', email: payload.email || '', password: '', authType: payload.authType || 'normal' })
             setAccountOpen(false)
             showToast('账号已保存并登录成功')
             if (activeId !== null) fetchDoc(activeId)
@@ -2362,6 +2362,22 @@ window.__ModuleLoader__.load({
                         },
                       }),
                     ),
+                    h(
+                      'div',
+                      { className: 'yapi-formrow' },
+                      h('label', null, '登录方式'),
+                      h(
+                        'select',
+                        {
+                          value: accountForm.authType || 'normal',
+                          onChange: function (event) {
+                            updateAccountForm({ authType: event.target.value })
+                          },
+                        },
+                        h('option', { value: 'normal' }, '普通登录'),
+                        h('option', { value: 'ldap' }, 'LDAP'),
+                      ),
+                    ),
                     h(
                       'div',
                       { className: 'yapi-formrow' },
@@ -2393,7 +2409,7 @@ window.__ModuleLoader__.load({
                     h(
                       'div',
                       { className: 'yapi-formhint' },
-                      '点击「测试并保存」后，插件会先用这组账号真实登录 YAPI；成功后才写入 ' +
+                      '普通登录使用 YAPI 账号密码；LDAP 使用 LDAP 账号密码（需 YAPI 服务端开启 LDAP）。点击「测试并保存」后，插件会先用这组账号真实登录 YAPI；成功后才写入 ' +
                         ((account && account.configFile) || '~/.dsh/dsh-plugin-yapi.json') +
                         '（权限 0600）。密码只保存在 Host 端，不会回传页面。',
                     ),

package/index.js

@@ -91,56 +91,85 @@ function harnessHome() {
 /** Location of the optional credential file written by the installer. */
 export const CONFIG_FILE = join(harnessHome(), 'dsh-plugin-yapi.json')
 
-const BUNDLED_SKILL_NAME = 'yapi-doc'
 const BUNDLED_SKILL_PROVIDER = 'yapi-doc-plugin'
-const BUNDLED_SKILL_DESCRIPTION =
-  'Read a YAPI interface document by ID, full URL, or path keyword. Use when a task needs an API method, path, headers, parameters, request body, response fields, or response example. The bundled CLI reads the local YAPI account and prints Markdown in one command.'
-const BUNDLED_SKILL_WHEN =
-  'The user mentions YAPI, an interface document ID (for example 10001), an API path, or asks for the request or response fields of an API.'
+const BUNDLED_SKILLS = [
+  {
+    name: 'yapi-doc',
+    dir: 'yapi-doc',
+    description:
+      'Read a YAPI interface document by ID, full URL, or path keyword. Use when a task needs an API method, path, headers, parameters, request body, response fields, or response example. The bundled CLI reads the local YAPI account and prints Markdown in one command.',
+    whenToUse:
+      'The user mentions YAPI, an interface document ID (for example 10001), an API path, or asks for the request or response fields of an API.',
+  },
+  {
+    name: 'yapi-sync',
+    dir: 'yapi-sync',
+    description:
+      'Sync the yapi-doc and yapi-sync skills into every detected AI tool (Trae, WorkBuddy, Qoder CN, GitHub Copilot, CodeBuddy, Codex/Agent Skills, DSH, Claude Code, Cursor, Gemini CLI, Amp, OpenCode and more). Use when the user asks to install, update, or sync the YAPI skill across tools.',
+    whenToUse:
+      'The user asks to install, update, or sync the YAPI skill or CLI across local AI tools.',
+  },
+]
+
+/** Packaged skills whose user-level copy is absent. */
+function bundledSkillDefs() {
+  return BUNDLED_SKILLS.map(function (skill) {
+    return Object.assign({}, skill, {
+      skillDir: join(HERE, 'skills', skill.dir),
+      skillPath: join(HERE, 'skills', skill.dir, 'SKILL.md'),
+    })
+  }).filter(function (skill) {
+    return (
+      existsSync(skill.skillPath) &&
+      !existsSync(join(harnessHome(), 'skills', skill.name, 'SKILL.md'))
+    )
+  })
+}
 
 /**
- * Register the packaged `yapi-doc` skill when the plugin was installed by
- * `dsh plugin add` (no `~/.dsh/skills` copy present). The installer path still
- * wins because the user skill root ranks above this bundled provider.
+ * Register packaged `yapi-doc` / `yapi-sync` skills when the plugin was
+ * installed by `dsh plugin add` (no `~/.dsh/skills` copy present). The user
+ * skill root still wins because it ranks above this bundled provider.
  * @param {any} ctx - DSH host context (must carry the `skills` service).
  */
 function registerBundledSkill(ctx) {
-  const skillDir = join(HERE, 'skills', 'yapi-doc')
-  const skillPath = join(skillDir, 'SKILL.md')
-  if (!existsSync(skillPath)) return
-  const userSkill = join(harnessHome(), 'skills', BUNDLED_SKILL_NAME, 'SKILL.md')
-  if (existsSync(userSkill)) return
+  const defs = bundledSkillDefs()
+  if (defs.length === 0) return
 
   ctx.skills.registerProvider(function () {
     return {
       name: BUNDLED_SKILL_PROVIDER,
       async list() {
-        return [
-          {
-            name: BUNDLED_SKILL_NAME,
-            description: BUNDLED_SKILL_DESCRIPTION,
-            whenToUse: BUNDLED_SKILL_WHEN,
+        return defs.map(function (skill) {
+          return {
+            name: skill.name,
+            description: skill.description,
+            whenToUse: skill.whenToUse,
             source: 'bundled',
             provider: BUNDLED_SKILL_PROVIDER,
+            invocation: { modelInvocable: true, userInvocable: true },
             rank: 1000,
-            path: skillPath,
-          },
-        ]
+            path: skill.skillPath,
+          }
+        })
       },
       async get(candidate) {
-        if (!candidate || candidate.name !== BUNDLED_SKILL_NAME) return undefined
-        const raw = await readFile(skillPath, 'utf8')
+        const skill = defs.find(function (item) {
+          return item.name === (candidate && candidate.name)
+        })
+        if (skill === undefined) return undefined
+        const raw = await readFile(skill.skillPath, 'utf8')
         const body = raw.replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/u, '').trim()
-        const content = body.split('$HOME/.dsh/skills/yapi-doc').join(skillDir)
+        const content = body.split('$HOME/.dsh/skills/yapi-doc').join(join(HERE, 'skills', 'yapi-doc'))
         return {
-          name: BUNDLED_SKILL_NAME,
-          description: BUNDLED_SKILL_DESCRIPTION,
-          whenToUse: BUNDLED_SKILL_WHEN,
+          name: skill.name,
+          description: skill.description,
+          whenToUse: skill.whenToUse,
           invocation: { modelInvocable: true, userInvocable: true },
           source: 'bundled',
           provider: BUNDLED_SKILL_PROVIDER,
-          resourceBase: { kind: 'directory', path: skillDir },
-          path: skillPath,
+          resourceBase: { kind: 'directory', path: skill.skillDir },
+          path: skill.skillPath,
           content,
         }
       },
@@ -163,11 +192,16 @@ function readStoredConfig() {
   }
 }
 
+/** YAPI login mode; unknown values fall back to the normal password login. */
+function normalizeAuthType(value) {
+  return String(value ?? '').trim().toLowerCase() === 'ldap' ? 'ldap' : 'normal'
+}
+
 /**
  * Atomically persist the account so the next start uses it. The temporary file
  * is created with 0600 before the rename, so the password is never briefly
  * readable by another user.
- * @param {{ baseUrl: string, email: string, password: string, timeoutMs: number }} settings - verified account.
+ * @param {{ baseUrl: string, email: string, password: string, authType: string, timeoutMs: number }} settings - verified account.
  */
 function writeConfigFile(settings) {
   const directory = dirname(CONFIG_FILE)
@@ -178,6 +212,7 @@ function writeConfigFile(settings) {
       baseUrl: settings.baseUrl,
       email: settings.email,
       password: settings.password,
+      authType: settings.authType,
       timeoutMs: settings.timeoutMs,
     },
     null,
@@ -194,7 +229,7 @@ function writeConfigFile(settings) {
  * (that path only accepts plain insert rows), while the file still carries the
  * account for a fresh start.
  * @param {Record<string, unknown>} config - loader-provided config.
- * @returns {{ baseUrl: string, email: string, password: string, timeoutMs: number }} settings.
+ * @returns {{ baseUrl: string, email: string, password: string, authType: string, timeoutMs: number }} settings.
  */
 function readConfig(config) {
   const row = config && typeof config === 'object' ? config : {}
@@ -205,6 +240,7 @@ function readConfig(config) {
     baseUrl: normalizeBaseUrl(row.baseUrl ?? env.YAPI_BASE_URL ?? stored.baseUrl ?? ''),
     email: String(row.email ?? env.YAPI_EMAIL ?? stored.email ?? '').trim(),
     password: String(row.password ?? env.YAPI_PASSWORD ?? stored.password ?? ''),
+    authType: normalizeAuthType(row.authType ?? env.YAPI_AUTH_TYPE ?? stored.authType ?? 'normal'),
     timeoutMs: Number.isFinite(timeout) && timeout >= 1000 ? Math.min(timeout, 120_000) : 20_000,
   }
 }
@@ -216,7 +252,7 @@ function readConfig(config) {
  * @returns {{ getJson: Function, ensureSession: Function, status: Function }} client face.
  */
 function createYapiClient(settings, logger) {
-  const { baseUrl, email, password, timeoutMs } = settings
+  const { baseUrl, email, password, authType, timeoutMs } = settings
   let cookie = ''
   let expiresAt = 0
   let pendingLogin = null
@@ -238,7 +274,8 @@ function createYapiClient(settings, logger) {
     }
     let response
     try {
-      response = await fetch(`${baseUrl}/api/user/login`, {
+      const loginPath = authType === 'ldap' ? '/api/user/login_by_ldap' : '/api/user/login'
+      response = await fetch(`${baseUrl}${loginPath}`, {
         method: 'POST',
         headers: { 'content-type': 'application/json', accept: 'application/json' },
         body: JSON.stringify({ email, password }),
@@ -367,6 +404,7 @@ export function apply(ctx, config = {}) {
     return {
       baseUrl: state.settings.baseUrl,
       email: state.settings.email,
+      authType: state.settings.authType,
       hasPassword: state.settings.password !== '',
       loggedIn: status.loggedIn,
       user: status.user ? { username: status.user.username ?? '', email: status.user.email ?? '' } : null,
@@ -510,7 +548,8 @@ export function apply(ctx, config = {}) {
       )
     }
 
-    const next = { baseUrl, email, password, timeoutMs: current.timeoutMs }
+    const authType = normalizeAuthType((body && body.authType) ?? current.authType ?? stored.authType ?? 'normal')
+    const next = { baseUrl, email, password, authType, timeoutMs: current.timeoutMs }
     const probe = createYapiClient(next, ctx.logger)
     try {
       await probe.ensureSession(true)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-yapi",
-  "version": "1.4.0",
+  "version": "1.4.3",
   "description": "YAPI 接口文档面板 for DeepSeek Harness：搜索、多标签、字段树、勾选复制，附带 yapi-doc skill 与零依赖 CLI。",
   "type": "module",
   "main": "index.js",
@@ -46,7 +46,8 @@
     "skills"
   ],
   "bin": {
-    "yapi-doc": "bin/yapi-doc.mjs"
+    "yapi-doc": "bin/yapi-doc.mjs",
+    "yapi-sync": "bin/yapi-sync.mjs"
   },
   "license": "MIT",
   "author": "jinshan3690",

package/skills/yapi-doc/SKILL.md

@@ -29,9 +29,11 @@ Windows 下把 `$HOME` 换成 `%USERPROFILE%`，路径为
 DSH 用户由插件自动注册，不需要执行本节。
 
 ```bash
-npm install -g github:jinshan3690/dsh-plugin-yapi
-yapi-doc sync-skills                   # 自动同步到检测到的 Trae / WorkBuddy / Qoder CN / Copilot / CodeBuddy / Agent Skills / DSH
-yapi-doc install-skill                 # 默认装到 ~/.agents/skills/yapi-doc
+npm install -g dsh-plugin-yapi
+yapi-sync                              # yapi-doc 和 yapi-sync 两个 skill 一起同步
+yapi-sync --dry-run                    # 只显示会写到哪些目录
+yapi-doc sync-skills                   # yapi-sync 的别名
+yapi-doc install-skill                 # 只装 yapi-doc，默认 ~/.agents/skills/yapi-doc
 yapi-doc install-skill --dir ~/.trae/skills/yapi-doc       # Trae
 yapi-doc install-skill --dir ~/.workbuddy/skills/yapi-doc  # WorkBuddy
 yapi-doc install-skill --dir <目录>    # 其他 agent 的 skills 目录
@@ -57,8 +59,8 @@ yapi-doc install-skill --dir <目录>    # 其他 agent 的 skills 目录
 
 ## 账号
 
-CLI 读取 `~/.dsh/dsh-plugin-yapi.json`（YAPI 面板 → 账号设置维护），也支持
-`YAPI_BASE_URL` / `YAPI_EMAIL` / `YAPI_PASSWORD` 环境变量。不需要额外配置。
+CLI 读取 `~/.dsh/dsh-plugin-yapi.json`（YAPI 面板 → 账号设置维护，`authType` 为 `normal` 或 `ldap`），也支持
+`YAPI_BASE_URL` / `YAPI_EMAIL` / `YAPI_PASSWORD` / `YAPI_AUTH_TYPE` 环境变量。不需要额外配置。
 
 ## 可移植性
 

package/skills/yapi-doc/yapi-doc.mjs

@@ -358,6 +358,16 @@ function installSkill(dirArg) {
   console.log('Run: node "' + join(target, 'yapi-doc.mjs') + '" <doc-id>')
 }
 
+function copySyncSkillTo(root) {
+  const sourceDir = join(dirname(fileURLToPath(import.meta.url)), '..', 'yapi-sync')
+  const source = join(sourceDir, 'SKILL.md')
+  if (!existsSync(source)) return undefined
+  const directory = join(root, 'yapi-sync')
+  mkdirSync(directory, { recursive: true })
+  copyFileSync(source, join(directory, 'SKILL.md'))
+  return directory
+}
+
 const HOME_AGENTS = [
   ['Trae', '.trae', '.trae/skills'],
   ['WorkBuddy', '.workbuddy', '.workbuddy/skills'],
@@ -400,24 +410,25 @@ function detectedSkillTargets(extraDirs) {
     }
   }
   for (const [label, detect, skills] of HOME_AGENTS) {
-    if (existsSync(join(home, detect))) add(label, join(home, skills, 'yapi-doc'))
+    if (existsSync(join(home, detect))) add(label, join(home, skills))
   }
-  add('Agent Skills（Codex / Cline / Zed / 通用）', join(home, '.agents', 'skills', 'yapi-doc'))
-  if (existsSync(DSH_HOME)) add('DSH', join(DSH_HOME, 'skills', 'yapi-doc'))
+  add('Agent Skills（Codex / Cline / Zed / 通用）', join(home, '.agents', 'skills'))
+  if (existsSync(DSH_HOME)) add('DSH', join(DSH_HOME, 'skills'))
   for (const dir of extraDirs) add('custom', dir)
   return targets
 }
 
 function syncSkills(extraDirs, dryRun) {
   const targets = detectedSkillTargets(extraDirs)
-  console.log('yapi-doc skill 同步：')
+  console.log('yapi-doc / yapi-sync skill 同步：')
   for (const item of targets) {
     if (dryRun) {
       console.log('  - ' + item.label + '  ' + item.dir)
       continue
     }
-    const target = copySkillTo(item.dir)
-    console.log('  ✓ ' + item.label + '  ' + target)
+    copySkillTo(join(item.dir, 'yapi-doc'))
+    copySyncSkillTo(item.dir)
+    console.log('  ✓ ' + item.label + '  ' + item.dir)
   }
   if (!dryRun) {
     console.log('')
@@ -442,6 +453,7 @@ function readSettings() {
     baseUrl: normalizeBaseUrl(env.YAPI_BASE_URL || stored.baseUrl),
     email: String(env.YAPI_EMAIL || stored.email || '').trim(),
     password: String(env.YAPI_PASSWORD || stored.password || ''),
+    authType: String(env.YAPI_AUTH_TYPE || stored.authType || 'normal').trim().toLowerCase() === 'ldap' ? 'ldap' : 'normal',
     timeoutMs: Number.isFinite(timeout) && timeout >= 1000 ? Math.min(timeout, 120000) : 20000,
   }
 }
@@ -463,7 +475,8 @@ async function createSession(settings) {
   async function login() {
     let response
     try {
-      response = await fetch(settings.baseUrl + '/api/user/login', {
+      const loginPath = settings.authType === 'ldap' ? '/api/user/login_by_ldap' : '/api/user/login'
+      response = await fetch(settings.baseUrl + loginPath, {
         method: 'POST',
         headers: { 'content-type': 'application/json', accept: 'application/json' },
         body: JSON.stringify({ email: settings.email, password: settings.password }),
@@ -659,7 +672,8 @@ function printHelp() {
 
 账号：
   读取 ${CONFIG_FILE}
-  或环境变量 YAPI_BASE_URL / YAPI_EMAIL / YAPI_PASSWORD
+  或环境变量 YAPI_BASE_URL / YAPI_EMAIL / YAPI_PASSWORD / YAPI_AUTH_TYPE
+  （YAPI_AUTH_TYPE=ldap 使用 LDAP 登录，默认普通登录）
 
 示例：
   yapi-doc 10001

package/skills/yapi-sync/SKILL.md

@@ -0,0 +1,20 @@
+---
+name: yapi-sync
+description: Sync the yapi-doc and yapi-sync skills into every detected AI tool (Trae, WorkBuddy, Qoder CN, GitHub Copilot, CodeBuddy, Codex/Agent Skills, DSH, Claude Code, Cursor, Gemini CLI, Amp, OpenCode and more). Use when the user asks to install, update, or sync the YAPI skill across tools.
+---
+
+# YAPI Skill 同步
+
+把 `yapi-doc` 和 `yapi-sync` 同步到本机已安装的 AI 工具。
+
+## 命令
+
+```bash
+yapi-sync
+yapi-sync --dry-run
+yapi-sync --dir <skills根目录>
+```
+
+- 自动检测 Trae、WorkBuddy、Qoder CN、GitHub Copilot、CodeBuddy、Codex/Cline/Zed/通用 Agent Skills、DSH 等。
+- 如果 `yapi-sync` 不在 PATH，用 `yapi-doc sync-skills`。
+- 同步完完全重启对应工具，技能列表里会出现 `yapi-doc` 和 `yapi-sync`。