itismyskillmarket 1.3.40 → 1.3.41

package/dist/{chunk-VRXNOGLL.js → chunk-XQ653HCI.js}

@@ -1596,6 +1596,222 @@ async function adminAccess(skillId, level) {
 `);
 }
 
+// src/commands/config.ts
+import path11 from "path";
+import fs12 from "fs-extra";
+import os9 from "os";
+var CONFIG_DEFINITIONS = [
+  {
+    key: "npmScope",
+    envVar: "SKM_NPM_SCOPE",
+    defaultValue: "@itismyskillmarket",
+    description: "Primary npm scope for publishing and lookup"
+  },
+  {
+    key: "npmScopeFallback",
+    envVar: "SKM_NPM_SCOPE_FALLBACK",
+    defaultValue: "@wanxuchen",
+    description: "Fallback npm scope (backward compatibility)"
+  },
+  {
+    key: "npmRegistry",
+    envVar: "SKM_NPM_REGISTRY",
+    defaultValue: "https://registry.npmjs.org",
+    description: "npm registry URL (mirror/proxy support)"
+  },
+  {
+    key: "npmScopes",
+    envVar: "SKM_NPM_SCOPES",
+    defaultValue: "@itismyskillmarket,@wanxuchen,@thisisskillmarket,@this-is-skillmarket,@skillmarket",
+    description: "Comma-separated list of npm scopes to search"
+  },
+  {
+    key: "skmUrl",
+    envVar: "SKM_URL",
+    defaultValue: "https://www.npmjs.com/package/@itismyskillmarket",
+    description: "Base URL for skill links (publish output)"
+  }
+];
+function getConfigPath() {
+  return path11.join(os9.homedir(), ".skillmarket", "config.json");
+}
+async function readConfigFile() {
+  try {
+    const configPath = getConfigPath();
+    if (await fs12.pathExists(configPath)) {
+      const data = await fs12.readJson(configPath);
+      const valid = {};
+      for (const def of CONFIG_DEFINITIONS) {
+        if (data[def.key] !== void 0) {
+          valid[def.key] = String(data[def.key]);
+        }
+      }
+      return valid;
+    }
+  } catch {
+  }
+  return {};
+}
+async function writeConfigFile(updates) {
+  const configPath = getConfigPath();
+  await fs12.ensureDir(path11.dirname(configPath));
+  let existing = {};
+  try {
+    if (await fs12.pathExists(configPath)) {
+      existing = await fs12.readJson(configPath);
+    }
+  } catch {
+  }
+  const merged = { ...existing, ...updates };
+  for (const key of Object.keys(merged)) {
+    if (merged[key] === void 0) {
+      delete merged[key];
+    }
+  }
+  await fs12.writeJson(configPath, merged, { spaces: 2 });
+  return merged;
+}
+async function removeConfigKeys(keys) {
+  const configPath = getConfigPath();
+  if (!await fs12.pathExists(configPath)) return;
+  try {
+    const existing = await fs12.readJson(configPath);
+    for (const key of keys) {
+      delete existing[key];
+    }
+    await fs12.writeJson(configPath, existing, { spaces: 2 });
+  } catch {
+  }
+}
+async function removeConfigFile() {
+  const configPath = getConfigPath();
+  if (await fs12.pathExists(configPath)) {
+    await fs12.remove(configPath);
+  }
+}
+async function getAllConfig() {
+  const fileConfig2 = await readConfigFile();
+  return CONFIG_DEFINITIONS.map((def) => {
+    const envValue = process.env[def.envVar];
+    if (envValue !== void 0) {
+      return {
+        ...def,
+        value: envValue,
+        source: "env"
+      };
+    }
+    const fileValue = fileConfig2[def.key];
+    if (fileValue !== void 0) {
+      return {
+        ...def,
+        value: fileValue,
+        source: "file"
+      };
+    }
+    return {
+      ...def,
+      value: def.defaultValue,
+      source: "default"
+    };
+  });
+}
+async function getConfig(key) {
+  const all = await getAllConfig();
+  return all.find((c) => c.key === key) || null;
+}
+async function listConfig() {
+  const entries = await getAllConfig();
+  console.log("\n\u{1F527} SkillMarket Configuration\n");
+  const maxKeyLen = Math.max(...entries.map((e) => e.key.length));
+  for (const entry of entries) {
+    const key = entry.key.padEnd(maxKeyLen + 2);
+    const sourceBadge = getSourceBadge(entry.source);
+    console.log(`  ${sourceBadge}  ${key}${entry.value}`);
+  }
+  console.log("");
+  console.log("  \u6765\u6E90: \u{1F535} \u73AF\u5883\u53D8\u91CF  \u{1F7E2} \u914D\u7F6E\u6587\u4EF6  \u26AA \u9ED8\u8BA4\u503C");
+  console.log("  \u914D\u7F6E\u6587\u4EF6: " + getConfigPath());
+  console.log("");
+  console.log("  \u7528\u6CD5:");
+  console.log("    skm config get <key>      \u67E5\u770B\u914D\u7F6E\u503C");
+  console.log("    skm config set <key> <v>  \u8BBE\u7F6E\u914D\u7F6E\u503C");
+  console.log("    skm config reset <key>    \u91CD\u7F6E\u4E3A\u9ED8\u8BA4\u503C");
+  console.log("    skm config reset --all    \u5168\u90E8\u91CD\u7F6E");
+  console.log("");
+}
+function getSourceBadge(source) {
+  switch (source) {
+    case "env":
+      return "\u{1F535}";
+    case "file":
+      return "\u{1F7E2}";
+    case "default":
+      return "\u26AA";
+  }
+}
+async function getConfigValue(key) {
+  const entry = await getConfig(key);
+  if (!entry) {
+    console.error(`\u274C Unknown config key: "${key}"`);
+    console.log(`   Valid keys: ${CONFIG_DEFINITIONS.map((d) => d.key).join(", ")}`);
+    process.exit(1);
+  }
+  console.log(`
+\u{1F527} ${entry.key}`);
+  console.log(`   Value:       ${entry.value}`);
+  console.log(`   Source:      ${entry.source}`);
+  console.log(`   Env var:     ${entry.envVar}`);
+  console.log(`   Default:     ${entry.defaultValue}`);
+  console.log(`   Description: ${entry.description}`);
+  console.log("");
+}
+async function setConfigValue(key, value) {
+  const def = CONFIG_DEFINITIONS.find((d) => d.key === key);
+  if (!def) {
+    console.error(`\u274C Unknown config key: "${key}"`);
+    console.log(`   Valid keys: ${CONFIG_DEFINITIONS.map((d) => d.key).join(", ")}`);
+    process.exit(1);
+  }
+  await writeConfigFile({ [key]: value });
+  console.log(`
+\u2705 ${key} set to "${value}"`);
+  console.log(`   Stored in: ${getConfigPath()}`);
+  console.log("");
+  if (process.env[def.envVar] !== void 0) {
+    console.log(`   \u26A0\uFE0F  Currently overridden by environment variable ${def.envVar}=${process.env[def.envVar]}`);
+    console.log(`   To use the config file value, unset the environment variable.`);
+    console.log("");
+  }
+}
+async function resetConfig(key, all = false) {
+  if (all) {
+    await removeConfigFile();
+    console.log("\n\u2705 All configuration reset to defaults.");
+    console.log(`   Removed: ${getConfigPath()}`);
+    console.log("");
+    return;
+  }
+  if (key) {
+    const def = CONFIG_DEFINITIONS.find((d) => d.key === key);
+    if (!def) {
+      console.error(`\u274C Unknown config key: "${key}"`);
+      console.log(`   Valid keys: ${CONFIG_DEFINITIONS.map((d) => d.key).join(", ")}`);
+      process.exit(1);
+    }
+    await removeConfigKeys([key]);
+    const sourceNow = process.env[def.envVar] ? "env" : "default";
+    console.log(`
+\u2705 ${key} reset to ${sourceNow === "env" ? "environment variable" : "default"} value.`);
+    console.log(`   Effective value: "${sourceNow === "env" ? process.env[def.envVar] : def.defaultValue}"`);
+    console.log("");
+    return;
+  }
+  console.log("\n\u{1F527} Usage: skm config reset <key>");
+  console.log("         skm config reset --all");
+  console.log(`   Valid keys: ${CONFIG_DEFINITIONS.map((d) => d.key).join(", ")}`);
+  console.log("");
+}
+
 // src/commands/ui.ts
 var MAX_UPLOAD_SIZE = 50 * 1024 * 1024;
 var __filename = fileURLToPath2(import.meta.url);
@@ -1661,7 +1877,8 @@ function parseBody(req) {
 }
 var API_ROUTES = {
   GET: {},
-  POST: {}
+  POST: {},
+  DELETE: {}
 };
 API_ROUTES.GET["/api/skills"] = async (_req, res, url) => {
   try {
@@ -1873,6 +2090,40 @@ API_ROUTES.GET["/api/config"] = async (_req, res, _url) => {
     skillScopes: SKILL_SCOPES
   });
 };
+API_ROUTES.GET["/api/github-token"] = async (_req, res, _url) => {
+  try {
+    const config = await readConfigFile();
+    const token = config.githubToken || "";
+    jsonResponse(res, 200, {
+      hasToken: !!token,
+      tokenPrefix: token ? token.substring(0, 6) + "\u2026" : ""
+    });
+  } catch (err) {
+    jsonResponse(res, 500, { error: String(err) });
+  }
+};
+API_ROUTES.POST["/api/github-token"] = async (req, res, _url) => {
+  try {
+    const body = await parseBody(req);
+    const token = String(body.token || "").trim();
+    if (!token) {
+      jsonResponse(res, 400, { error: "Token is required" });
+      return;
+    }
+    await writeConfigFile({ githubToken: token });
+    jsonResponse(res, 200, { success: true, message: "GitHub token saved successfully" });
+  } catch (err) {
+    jsonResponse(res, 500, { error: String(err) });
+  }
+};
+API_ROUTES.DELETE["/api/github-token"] = async (_req, res, _url) => {
+  try {
+    await removeConfigKeys(["githubToken"]);
+    jsonResponse(res, 200, { success: true, message: "GitHub token removed successfully" });
+  } catch (err) {
+    jsonResponse(res, 500, { error: String(err) });
+  }
+};
 API_ROUTES.POST["/api/install"] = async (req, res, _url) => {
   try {
     const body = await parseBody(req);
@@ -2345,5 +2596,9 @@ export {
   adminOwnerAdd,
   adminOwnerRemove,
   adminAccess,
+  listConfig,
+  getConfigValue,
+  setConfigValue,
+  resetConfig,
   startGuiServer
 };

package/dist/electron-entry.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   startGuiServer
-} from "./chunk-VRXNOGLL.js";
+} from "./chunk-XQ653HCI.js";
 export {
   startGuiServer
 };

package/dist/index.js

@@ -21,20 +21,24 @@ import {
   fetchSkillPackage,
   getAdapterByPlatform,
   getAllAdapters,
+  getConfigValue,
   getInstalledSkills,
   getPlatformLinksDir,
   getSkillsDir,
   installSkill,
   isSkillInstalled,
+  listConfig,
   loadRegistry,
   publishSkill,
+  resetConfig,
   saveRegistry,
   searchSkillmarketPackages,
+  setConfigValue,
   startGuiServer,
   uninstallAll,
   uninstallSkill,
   updateSkill
-} from "./chunk-VRXNOGLL.js";
+} from "./chunk-XQ653HCI.js";
 
 // src/cli.ts
 import { Command } from "commander";
@@ -303,13 +307,13 @@ function parseGitHubUrl(input) {
       const repo = match[2].replace(/\.git$/, "");
       const branch = match[3] || "main";
       const commitOrPath = match[4] || match[3];
-      const path5 = match[4] || void 0;
+      const path4 = match[4] || void 0;
       return {
         owner,
         repo,
         branch: commitOrPath && !commitOrPath.includes("/") ? commitOrPath : branch,
         commit: commitOrPath?.match(/^[0-9a-f]{40}$/) ? commitOrPath : void 0,
-        path: path5
+        path: path4
       };
     }
   }
@@ -641,222 +645,6 @@ async function verifySkill(skillName) {
   }
 }
 
-// src/commands/config.ts
-import path4 from "path";
-import fs4 from "fs-extra";
-import os from "os";
-var CONFIG_DEFINITIONS = [
-  {
-    key: "npmScope",
-    envVar: "SKM_NPM_SCOPE",
-    defaultValue: "@itismyskillmarket",
-    description: "Primary npm scope for publishing and lookup"
-  },
-  {
-    key: "npmScopeFallback",
-    envVar: "SKM_NPM_SCOPE_FALLBACK",
-    defaultValue: "@wanxuchen",
-    description: "Fallback npm scope (backward compatibility)"
-  },
-  {
-    key: "npmRegistry",
-    envVar: "SKM_NPM_REGISTRY",
-    defaultValue: "https://registry.npmjs.org",
-    description: "npm registry URL (mirror/proxy support)"
-  },
-  {
-    key: "npmScopes",
-    envVar: "SKM_NPM_SCOPES",
-    defaultValue: "@itismyskillmarket,@wanxuchen,@thisisskillmarket,@this-is-skillmarket,@skillmarket",
-    description: "Comma-separated list of npm scopes to search"
-  },
-  {
-    key: "skmUrl",
-    envVar: "SKM_URL",
-    defaultValue: "https://www.npmjs.com/package/@itismyskillmarket",
-    description: "Base URL for skill links (publish output)"
-  }
-];
-function getConfigPath() {
-  return path4.join(os.homedir(), ".skillmarket", "config.json");
-}
-async function readConfigFile() {
-  try {
-    const configPath = getConfigPath();
-    if (await fs4.pathExists(configPath)) {
-      const data = await fs4.readJson(configPath);
-      const valid = {};
-      for (const def of CONFIG_DEFINITIONS) {
-        if (data[def.key] !== void 0) {
-          valid[def.key] = String(data[def.key]);
-        }
-      }
-      return valid;
-    }
-  } catch {
-  }
-  return {};
-}
-async function writeConfigFile(updates) {
-  const configPath = getConfigPath();
-  await fs4.ensureDir(path4.dirname(configPath));
-  let existing = {};
-  try {
-    if (await fs4.pathExists(configPath)) {
-      existing = await fs4.readJson(configPath);
-    }
-  } catch {
-  }
-  const merged = { ...existing, ...updates };
-  for (const key of Object.keys(merged)) {
-    if (merged[key] === void 0) {
-      delete merged[key];
-    }
-  }
-  await fs4.writeJson(configPath, merged, { spaces: 2 });
-  return merged;
-}
-async function removeConfigKeys(keys) {
-  const configPath = getConfigPath();
-  if (!await fs4.pathExists(configPath)) return;
-  try {
-    const existing = await fs4.readJson(configPath);
-    for (const key of keys) {
-      delete existing[key];
-    }
-    await fs4.writeJson(configPath, existing, { spaces: 2 });
-  } catch {
-  }
-}
-async function removeConfigFile() {
-  const configPath = getConfigPath();
-  if (await fs4.pathExists(configPath)) {
-    await fs4.remove(configPath);
-  }
-}
-async function getAllConfig() {
-  const fileConfig = await readConfigFile();
-  return CONFIG_DEFINITIONS.map((def) => {
-    const envValue = process.env[def.envVar];
-    if (envValue !== void 0) {
-      return {
-        ...def,
-        value: envValue,
-        source: "env"
-      };
-    }
-    const fileValue = fileConfig[def.key];
-    if (fileValue !== void 0) {
-      return {
-        ...def,
-        value: fileValue,
-        source: "file"
-      };
-    }
-    return {
-      ...def,
-      value: def.defaultValue,
-      source: "default"
-    };
-  });
-}
-async function getConfig(key) {
-  const all = await getAllConfig();
-  return all.find((c) => c.key === key) || null;
-}
-async function listConfig() {
-  const entries = await getAllConfig();
-  console.log("\n\u{1F527} SkillMarket Configuration\n");
-  const maxKeyLen = Math.max(...entries.map((e) => e.key.length));
-  for (const entry of entries) {
-    const key = entry.key.padEnd(maxKeyLen + 2);
-    const sourceBadge = getSourceBadge(entry.source);
-    console.log(`  ${sourceBadge}  ${key}${entry.value}`);
-  }
-  console.log("");
-  console.log("  \u6765\u6E90: \u{1F535} \u73AF\u5883\u53D8\u91CF  \u{1F7E2} \u914D\u7F6E\u6587\u4EF6  \u26AA \u9ED8\u8BA4\u503C");
-  console.log("  \u914D\u7F6E\u6587\u4EF6: " + getConfigPath());
-  console.log("");
-  console.log("  \u7528\u6CD5:");
-  console.log("    skm config get <key>      \u67E5\u770B\u914D\u7F6E\u503C");
-  console.log("    skm config set <key> <v>  \u8BBE\u7F6E\u914D\u7F6E\u503C");
-  console.log("    skm config reset <key>    \u91CD\u7F6E\u4E3A\u9ED8\u8BA4\u503C");
-  console.log("    skm config reset --all    \u5168\u90E8\u91CD\u7F6E");
-  console.log("");
-}
-function getSourceBadge(source) {
-  switch (source) {
-    case "env":
-      return "\u{1F535}";
-    case "file":
-      return "\u{1F7E2}";
-    case "default":
-      return "\u26AA";
-  }
-}
-async function getConfigValue(key) {
-  const entry = await getConfig(key);
-  if (!entry) {
-    console.error(`\u274C Unknown config key: "${key}"`);
-    console.log(`   Valid keys: ${CONFIG_DEFINITIONS.map((d) => d.key).join(", ")}`);
-    process.exit(1);
-  }
-  console.log(`
-\u{1F527} ${entry.key}`);
-  console.log(`   Value:       ${entry.value}`);
-  console.log(`   Source:      ${entry.source}`);
-  console.log(`   Env var:     ${entry.envVar}`);
-  console.log(`   Default:     ${entry.defaultValue}`);
-  console.log(`   Description: ${entry.description}`);
-  console.log("");
-}
-async function setConfigValue(key, value) {
-  const def = CONFIG_DEFINITIONS.find((d) => d.key === key);
-  if (!def) {
-    console.error(`\u274C Unknown config key: "${key}"`);
-    console.log(`   Valid keys: ${CONFIG_DEFINITIONS.map((d) => d.key).join(", ")}`);
-    process.exit(1);
-  }
-  await writeConfigFile({ [key]: value });
-  console.log(`
-\u2705 ${key} set to "${value}"`);
-  console.log(`   Stored in: ${getConfigPath()}`);
-  console.log("");
-  if (process.env[def.envVar] !== void 0) {
-    console.log(`   \u26A0\uFE0F  Currently overridden by environment variable ${def.envVar}=${process.env[def.envVar]}`);
-    console.log(`   To use the config file value, unset the environment variable.`);
-    console.log("");
-  }
-}
-async function resetConfig(key, all = false) {
-  if (all) {
-    await removeConfigFile();
-    console.log("\n\u2705 All configuration reset to defaults.");
-    console.log(`   Removed: ${getConfigPath()}`);
-    console.log("");
-    return;
-  }
-  if (key) {
-    const def = CONFIG_DEFINITIONS.find((d) => d.key === key);
-    if (!def) {
-      console.error(`\u274C Unknown config key: "${key}"`);
-      console.log(`   Valid keys: ${CONFIG_DEFINITIONS.map((d) => d.key).join(", ")}`);
-      process.exit(1);
-    }
-    await removeConfigKeys([key]);
-    const sourceNow = process.env[def.envVar] ? "env" : "default";
-    console.log(`
-\u2705 ${key} reset to ${sourceNow === "env" ? "environment variable" : "default"} value.`);
-    console.log(`   Effective value: "${sourceNow === "env" ? process.env[def.envVar] : def.defaultValue}"`);
-    console.log("");
-    return;
-  }
-  console.log("\n\u{1F527} Usage: skm config reset <key>");
-  console.log("         skm config reset --all");
-  console.log(`   Valid keys: ${CONFIG_DEFINITIONS.map((d) => d.key).join(", ")}`);
-  console.log("");
-}
-
 // src/cli.ts
 var __filename2 = fileURLToPath2(import.meta.url);
 var __dirname2 = dirname(__filename2);

package/gui/app.js

@@ -248,6 +248,24 @@ const translations = {
 
     // 通用错误
     'error.generic': 'Error',
+
+    // GitHub Token
+    'token.title': '🔑 GitHub Token',
+    'token.desc': 'Used to create GitHub Releases and other operations from the desktop app.',
+    'token.checking': 'Checking...',
+    'token.active': '✅ Token set ({prefix})',
+    'token.inactive': '❌ Token not set',
+    'token.checkFailed': '⚠️ Check failed: {error}',
+    'token.placeholder': 'Enter GitHub Personal Access Token (ghp_... / gho_...)',
+    'token.placeholderOverride': 'Enter new Token to override current value...',
+    'token.save': '💾 Save',
+    'token.remove': '🗑 Remove',
+    'token.hint': 'Token is stored in',
+    'token.saved': '✅ GitHub Token saved',
+    'token.removed': '✅ GitHub Token removed',
+    'token.saveFailed': 'Save failed: {error}',
+    'token.removeFailed': 'Remove failed: {error}',
+    'token.inputRequired': 'Please enter a GitHub Token',
   },
   
   zh: {
@@ -476,6 +494,24 @@ const translations = {
 
     // 通用错误
     'error.generic': '错误',
+
+    // GitHub Token
+    'token.title': '🔑 GitHub Token',
+    'token.desc': '用于从桌面软件直接创建 GitHub Release 等操作。',
+    'token.checking': '检查中...',
+    'token.active': '✅ Token 已设置 ({prefix})',
+    'token.inactive': '❌ 未设置 Token',
+    'token.checkFailed': '⚠️ 检查失败: {error}',
+    'token.placeholder': '输入 GitHub Personal Access Token (ghp_... / gho_...)',
+    'token.placeholderOverride': '输入新 Token 以覆盖当前值...',
+    'token.save': '💾 保存',
+    'token.remove': '🗑 移除',
+    'token.hint': 'Token 保存在',
+    'token.saved': '✅ GitHub Token 已保存',
+    'token.removed': '✅ GitHub Token 已移除',
+    'token.saveFailed': '保存失败: {error}',
+    'token.removeFailed': '移除失败: {error}',
+    'token.inputRequired': '请输入 GitHub Token',
   }
 };
 
@@ -634,6 +670,25 @@ function applyI18nToStaticElements() {
   if (uploadActionBoth) uploadActionBoth.innerHTML = t('upload.actionBoth');
   if (uploadActionDiscard) uploadActionDiscard.innerHTML = t('upload.actionDiscard');
   if (uploadProgressText) uploadProgressText.textContent = t('upload.processing');
+
+  // GitHub Token 静态文本
+  const tokenTitle = document.getElementById('token-section-title');
+  const tokenDesc = document.getElementById('token-section-desc');
+  const tokenHint = document.getElementById('token-section-hint');
+  const tokenSaveBtn = document.getElementById('token-save-btn');
+  const tokenRemoveBtn = document.getElementById('token-remove-btn');
+  const tokenInput = document.getElementById('token-input');
+
+  if (tokenTitle) tokenTitle.textContent = t('token.title');
+  if (tokenDesc) tokenDesc.textContent = t('token.desc');
+  if (tokenHint) tokenHint.textContent = t('token.hint');
+  if (tokenSaveBtn) tokenSaveBtn.textContent = t('token.save');
+  if (tokenRemoveBtn) tokenRemoveBtn.textContent = t('token.remove');
+  if (tokenInput && !tokenInput.value) {
+    // Only update placeholder when input is empty
+    const hasToken = document.getElementById('token-indicator')?.classList.contains('token-active');
+    tokenInput.placeholder = hasToken ? t('token.placeholderOverride') : t('token.placeholder');
+  }
 }
 
 // -----------------------------------------------------------------------------
@@ -833,6 +888,23 @@ function initializeControls() {
      });
    }
 
+   // GitHub Token 管理
+   const tokenSaveBtn = document.getElementById('token-save-btn');
+   const tokenRemoveBtn = document.getElementById('token-remove-btn');
+   const tokenInput = document.getElementById('token-input');
+
+   if (tokenSaveBtn) {
+     tokenSaveBtn.addEventListener('click', saveGithubToken);
+   }
+   if (tokenRemoveBtn) {
+     tokenRemoveBtn.addEventListener('click', removeGithubToken);
+   }
+   if (tokenInput) {
+     tokenInput.addEventListener('keydown', (e) => {
+       if (e.key === 'Enter') saveGithubToken();
+     });
+   }
+
    // 语言切换
    const langSelect = document.getElementById('lang-select');
    if (langSelect) {
@@ -1160,8 +1232,10 @@ async function loadHelp() {
   container.innerHTML = `<div class="loading">${t('loading.generic')}</div>`;
 
   try {
-    const response = await fetch('/api/config');
-    const config = await response.json();
+    const [config] = await Promise.all([
+      fetch('/api/config').then(r => r.json()),
+      checkGithubToken(),
+    ]);
     renderHelp(config, container);
   } catch (err) {
     container.innerHTML = `<div class="loading">Error: ${err.message}</div>`;
@@ -1276,6 +1350,87 @@ skm config reset --all         # 全部恢复默认</pre>
   `;
 }
 
+// -----------------------------------------------------------------------------
+// GitHub Token 管理
+// -----------------------------------------------------------------------------
+
+async function checkGithubToken() {
+  try {
+    const response = await fetch('/api/github-token');
+    const data = await response.json();
+
+    const indicator = document.getElementById('token-indicator');
+    const statusText = document.getElementById('token-status-text');
+    const tokenInput = document.getElementById('token-input');
+    const removeBtn = document.getElementById('token-remove-btn');
+
+    if (data.hasToken) {
+      indicator.className = 'token-indicator token-active';
+      statusText.textContent = t('token.active', { prefix: data.tokenPrefix });
+      if (removeBtn) removeBtn.style.display = '';
+      if (tokenInput) tokenInput.placeholder = t('token.placeholderOverride');
+      // Re-apply i18n for button texts
+      const saveBtn = document.getElementById('token-save-btn');
+      const rmBtn = document.getElementById('token-remove-btn');
+      if (saveBtn) saveBtn.textContent = t('token.save');
+      if (rmBtn) rmBtn.textContent = t('token.remove');
+    } else {
+      indicator.className = 'token-indicator token-none';
+      statusText.textContent = t('token.inactive');
+      if (removeBtn) removeBtn.style.display = 'none';
+      if (tokenInput) tokenInput.placeholder = t('token.placeholder');
+    }
+  } catch (err) {
+    const statusText = document.getElementById('token-status-text');
+    if (statusText) statusText.textContent = t('token.checkFailed', { error: err.message });
+  }
+}
+
+async function saveGithubToken() {
+  const input = document.getElementById('token-input');
+  const token = input ? input.value.trim() : '';
+
+  if (!token) {
+    showToast(t('token.inputRequired'), 'error');
+    return;
+  }
+
+  try {
+    const response = await fetch('/api/github-token', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ token }),
+    });
+    const result = await response.json();
+    if (result.error) {
+      showToast(t('token.saveFailed', { error: result.error }), 'error');
+    } else {
+      showToast(t('token.saved'), 'success');
+      input.value = '';
+      checkGithubToken();
+    }
+  } catch (err) {
+    showToast(t('token.saveFailed', { error: err.message }), 'error');
+  }
+}
+
+async function removeGithubToken() {
+  try {
+    const response = await fetch('/api/github-token', {
+      method: 'DELETE',
+    });
+    const result = await response.json();
+    if (result.error) {
+      showToast(t('token.removeFailed', { error: result.error }), 'error');
+    } else {
+      showToast(t('token.removed'), 'success');
+      checkGithubToken();
+    }
+  } catch (err) {
+    showToast(t('token.removeFailed', { error: err.message }), 'error');
+  }
+}
+
 async function installSkill(skillId) {
   try {
     showToast(t('toast.installing', { skillId: skillId }), 'info');

package/gui/index.html

@@ -82,6 +82,21 @@
         <div class="view-header">
           <h2>Help &amp; Configuration</h2>
         </div>
+        <!-- GitHub Token 管理 -->
+        <div class="help-token-section" id="help-token-section">
+          <h3 id="token-section-title">🔑 GitHub Token</h3>
+          <p class="help-token-desc" id="token-section-desc">用于从桌面软件直接创建 GitHub Release 等操作。</p>
+          <div class="help-token-status" id="token-status">
+            <span class="token-indicator token-unknown" id="token-indicator"></span>
+            <span id="token-status-text">检查中...</span>
+          </div>
+          <div class="help-token-input-row">
+            <input type="password" id="token-input" placeholder="输入 GitHub Personal Access Token (ghp_... / gho_...)" spellcheck="false">
+            <button id="token-save-btn" class="btn btn-success"></button>
+            <button id="token-remove-btn" class="btn btn-danger" style="display:none"></button>
+          </div>
+          <p class="help-token-hint"><span id="token-section-hint">Token 保存在</span> <code>~/.skillmarket/config.json</code>。</p>
+        </div>
         <div id="help-content"></div>
       </div>
 

package/gui/style.css

@@ -1171,3 +1171,88 @@ body {
   background: var(--bg-secondary);
   color: var(--text-secondary);
 }
+
+/* -----------------------------------------------------------------------------
+   GitHub Token 管理（Help 视图顶部）
+   ----------------------------------------------------------------------------- */
+
+.help-token-section {
+  background: var(--bg-secondary);
+  border: 1px solid var(--border-color);
+  border-radius: 10px;
+  padding: 20px 22px;
+  margin-bottom: 18px;
+}
+
+.help-token-section h3 {
+  color: var(--accent);
+  font-size: 1.05rem;
+  margin-bottom: 6px;
+}
+
+.help-token-desc {
+  color: var(--text-muted);
+  font-size: 0.82rem;
+  margin-bottom: 12px;
+}
+
+.help-token-status {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  margin-bottom: 10px;
+  font-size: 0.85rem;
+  color: var(--text-secondary);
+}
+
+.token-indicator {
+  width: 10px;
+  height: 10px;
+  border-radius: 50%;
+  display: inline-block;
+  flex-shrink: 0;
+}
+
+.token-indicator.token-unknown { background: var(--text-muted); }
+.token-indicator.token-active  { background: var(--success); }
+.token-indicator.token-none    { background: var(--danger); }
+
+.help-token-input-row {
+  display: flex;
+  gap: 8px;
+  align-items: center;
+}
+
+.help-token-input-row input {
+  flex: 1;
+  padding: 8px 12px;
+  background: var(--bg-primary);
+  border: 1px solid var(--border-color);
+  border-radius: 6px;
+  color: var(--text-secondary);
+  font-size: 0.85rem;
+  font-family: 'Menlo', 'Consolas', monospace;
+}
+
+.help-token-input-row input:focus {
+  outline: none;
+  border-color: var(--accent);
+}
+
+.help-token-input-row input::placeholder {
+  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+  color: var(--text-muted);
+}
+
+.help-token-hint {
+  color: var(--text-muted);
+  font-size: 0.75rem;
+  margin-top: 8px;
+}
+
+.help-token-hint code {
+  background: var(--bg-card);
+  padding: 1px 5px;
+  border-radius: 3px;
+  font-size: 0.72rem;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "itismyskillmarket",
-  "version": "1.3.40",
+  "version": "1.3.41",
   "description": "Cross-platform skill manager for AI coding tools",
   "type": "module",
   "bin": {