istarshine 1.2.2 → 1.2.4

package/bin/cli.js

@@ -17,7 +17,7 @@ const program = new Command();
 program
   .name('istarshine')
   .description('iStarshine Skills Hub CLI - 一键安装和管理 Skills')
-  .version('1.2.2');
+  .version('1.2.4');
 
 // install 子命令
 program

package/lib/install.js

@@ -5,8 +5,9 @@
  */
 
 import { fetch_json, download_file } from './api.js';
-import { readFileSync, mkdirSync, existsSync } from 'fs';
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'fs';
 import { join, resolve } from 'path';
+import { homedir } from 'os';
 import { extract_zip } from './zip.js';
 import { resolve_api_key } from './config.js';
 import { resolve_install_queue } from './deps.js';
@@ -80,7 +81,12 @@ async function install_single_skill(skill_name, options, auth_headers, chalk, in
     console.log(chalk.yellow(`  ⚠ ${auth_warning}`));
   }
 
-  // 5. 检查 SKILL.md 中的认证声明
+  // 5. 配置 openclaw.json 中该 skill 的 apiKey SecretRef 引用
+  if (api_key) {
+    setup_skill_entry(skill_name, chalk);
+  }
+
+  // 6. 检查 SKILL.md 中的认证声明
   check_skill_auth_declaration(target_dir, api_key, chalk);
 }
 
@@ -174,6 +180,39 @@ export async function install_skill(skill_name, options) {
   }
 }
 
+/**
+ * 在 openclaw.json 的 skills.entries 中配置该 skill 的 apiKey SecretRef 引用
+ * 仅写 entries，secrets 和 provider 由 config --api-key 负责
+ *
+ * @param {string} skill_name - skill 名称
+ * @param {object} chalk - chalk 实例
+ */
+function setup_skill_entry(skill_name, chalk) {
+  const config_path = join(homedir(), '.openclaw', 'openclaw.json');
+
+  if (!existsSync(config_path)) {
+    return;
+  }
+
+  try {
+    const config = JSON.parse(readFileSync(config_path, 'utf8'));
+
+    if (!config.skills) config.skills = {};
+    if (!config.skills.entries) config.skills.entries = {};
+    if (!config.skills.entries[skill_name]) config.skills.entries[skill_name] = {};
+    config.skills.entries[skill_name].apiKey = {
+      source: 'file',
+      provider: 'filemain',
+      id: '/skills/istarshine/apiKey'
+    };
+
+    writeFileSync(config_path, JSON.stringify(config, null, 2), 'utf8');
+    console.log(chalk.green('  ✔ skills.entries.' + skill_name + '.apiKey → SecretRef'));
+  } catch (err) {
+    console.log(chalk.yellow(`  ⚠ SecretRef entries 配置失败: ${err.message}`));
+  }
+}
+
 /**
  * 检查解压后的 SKILL.md 是否包含 api.auth 或 metadata.openclaw 声明
  * 如果包含且未配置 API Key，输出配置引导提示

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "istarshine",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "description": "iStarshine Skills Hub CLI - 一键安装和管理 Skills",
   "type": "module",
   "main": "index.js",