reskill 1.5.0 → 1.7.0

package/dist/cli/commands/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsFpC,eAAO,MAAM,YAAY,SAOH,CAAC;AAEvB,eAAe,YAAY,CAAC"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0FpC,eAAO,MAAM,YAAY,SAOH,CAAC;AAEvB,eAAe,YAAY,CAAC"}

package/dist/cli/commands/whoami.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/whoami.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmEpC,eAAO,MAAM,aAAa,SAMH,CAAC;AAExB,eAAe,aAAa,CAAC"}
+{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/whoami.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoEpC,eAAO,MAAM,aAAa,SAMH,CAAC;AAExB,eAAe,aAAa,CAAC"}

package/dist/cli/index.js

@@ -437,12 +437,39 @@ var external_node_fs_ = __webpack_require__("node:fs");
  * Hardcoded registry to scope mapping
  * TODO: Replace with dynamic fetching from /api/registry/info
  */ const REGISTRY_SCOPE_MAP = {
+    // rush-app (private registry, new)
+    'https://rush-test.zhenguanyu.com': '@kanyun',
+    'https://rush.zhenguanyu.com': '@kanyun',
+    // reskill-app (private registry, legacy)
     'https://reskill-test.zhenguanyu.com': '@kanyun',
-    'https://reskill-test.zhenguanyu.com/': '@kanyun',
     // Local development
-    'http://localhost:3000': '@kanyun',
-    'http://localhost:3000/': '@kanyun'
+    'http://localhost:3000': '@kanyun'
 };
+/**
+ * Registry API prefix mapping
+ *
+ * rush-app hosts reskill APIs under /api/reskill/ prefix.
+ * Default for unlisted registries: '/api'
+ */ const REGISTRY_API_PREFIX = {
+    'https://rush-test.zhenguanyu.com': '/api/reskill',
+    'https://rush.zhenguanyu.com': '/api/reskill',
+    'http://localhost:3000': '/api/reskill'
+};
+/**
+ * Get the API path prefix for a given registry URL
+ *
+ * @param registryUrl - Registry URL
+ * @returns API prefix string (e.g., '/api' or '/api/reskill')
+ *
+ * @example
+ * getApiPrefix('https://rush-test.zhenguanyu.com') // '/api/reskill'
+ * getApiPrefix('https://reskill.info') // '/api'
+ * getApiPrefix('https://unknown.com') // '/api'
+ */ function getApiPrefix(registryUrl) {
+    if (!registryUrl) return '/api';
+    const normalized = registryUrl.endsWith('/') ? registryUrl.slice(0, -1) : registryUrl;
+    return REGISTRY_API_PREFIX[normalized] || '/api';
+}
 /**
  * Get the scope for a given registry URL
  *
@@ -450,7 +477,7 @@ var external_node_fs_ = __webpack_require__("node:fs");
  * @returns Scope string (e.g., "@kanyun") or null if not found
  *
  * @example
- * getScopeForRegistry('https://reskill-test.zhenguanyu.com') // '@kanyun'
+ * getScopeForRegistry('https://rush-test.zhenguanyu.com') // '@kanyun'
  * getScopeForRegistry('https://unknown.com') // null
  */ function getScopeForRegistry(registry) {
     if (!registry) return null;
@@ -468,8 +495,8 @@ var external_node_fs_ = __webpack_require__("node:fs");
  * @returns Registry URL (with trailing slash) or null if not found
  *
  * @example
- * getRegistryForScope('@kanyun') // 'https://reskill-test.zhenguanyu.com/'
- * getRegistryForScope('kanyun') // 'https://reskill-test.zhenguanyu.com/'
+ * getRegistryForScope('@kanyun') // 'https://rush-test.zhenguanyu.com/'
+ * getRegistryForScope('kanyun') // 'https://rush-test.zhenguanyu.com/'
  * getRegistryForScope('@unknown') // null
  * getRegistryForScope('@mycompany', { '@mycompany': 'https://my.registry.com/' }) // 'https://my.registry.com/'
  */ function getRegistryForScope(scope, customRegistries) {
@@ -499,8 +526,8 @@ var external_node_fs_ = __webpack_require__("node:fs");
  * @throws Error if scope is provided but not found in the registry map
  *
  * @example
- * getRegistryUrl('@kanyun') // 'https://reskill-test.zhenguanyu.com/'
- * getRegistryUrl('kanyun') // 'https://reskill-test.zhenguanyu.com/'
+ * getRegistryUrl('@kanyun') // 'https://rush-test.zhenguanyu.com/'
+ * getRegistryUrl('kanyun') // 'https://rush-test.zhenguanyu.com/'
  * getRegistryUrl(null) // 'https://reskill.info/'
  * getRegistryUrl('') // 'https://reskill.info/'
  * getRegistryUrl('@unknown') // throws Error
@@ -2684,6 +2711,15 @@ class RegistryClient {
         this.config = config;
     }
     /**
+   * Get API base URL (registry + apiPrefix)
+   *
+   * @returns Base URL for API calls, e.g., 'https://example.com/api' or 'https://rush.com/api/reskill'
+   */ getApiBase() {
+        const prefix = this.config.apiPrefix || '/api';
+        const registry = this.config.registry.endsWith('/') ? this.config.registry.slice(0, -1) : this.config.registry;
+        return `${registry}${prefix}`;
+    }
+    /**
    * Get authorization headers
    */ getAuthHeaders() {
         const headers = {
@@ -2696,7 +2732,7 @@ class RegistryClient {
     /**
    * Get current user info (whoami)
    */ async whoami() {
-        const url = `${this.config.registry}/api/auth/me`;
+        const url = `${this.getApiBase()}/auth/me`;
         const response = await fetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
@@ -2706,6 +2742,24 @@ class RegistryClient {
         return data;
     }
     /**
+   * CLI login - verify token and get user info
+   *
+   * Calls POST /api/auth/login-cli to validate the token and retrieve user information.
+   * This is the preferred method for CLI authentication.
+   *
+   * @returns User information if authentication succeeds
+   * @throws RegistryError if authentication fails
+   */ async loginCli() {
+        const url = `${this.getApiBase()}/auth/login-cli`;
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: this.getAuthHeaders()
+        });
+        const data = await response.json();
+        if (!response.ok) throw new RegistryError(data.error || `Login failed: ${response.status}`, response.status, data);
+        return data;
+    }
+    /**
    * Create tarball from skill files
    *
    * @param skillPath - Path to the skill directory
@@ -2752,7 +2806,7 @@ class RegistryClient {
    * @returns Skill 基本信息
    * @throws RegistryError 如果 skill 不存在或请求失败
    */ async getSkillInfo(skillName) {
-        const url = `${this.config.registry}/api/skills/${encodeURIComponent(skillName)}`;
+        const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}`;
         const response = await fetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
@@ -2786,7 +2840,7 @@ class RegistryClient {
         // 如果是 semver 版本号，直接返回
         if (/^\d+\.\d+\.\d+/.test(version)) return version;
         // 否则视为 tag，需要查询 dist-tags
-        const url = `${this.config.registry}/api/skills/${encodeURIComponent(skillName)}`;
+        const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}`;
         const response = await fetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
@@ -2821,15 +2875,34 @@ class RegistryClient {
    * @example
    * const { tarball, integrity } = await client.downloadSkill('@kanyun/test-skill', '1.0.0');
    */ async downloadSkill(skillName, version) {
-        const url = `${this.config.registry}/api/skills/${encodeURIComponent(skillName)}/versions/${version}/download`;
+        const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}/versions/${version}/download`;
+        // Use redirect: 'manual' to capture x-integrity header from 302 responses.
+        // The registry returns a 302 redirect to OSS with the integrity header,
+        // which would be lost if fetch auto-follows the redirect.
         const response = await fetch(url, {
             method: 'GET',
-            headers: this.getAuthHeaders()
+            headers: this.getAuthHeaders(),
+            redirect: 'manual'
         });
+        // Handle 302 redirect (registry → OSS signed URL)
+        if (301 === response.status || 302 === response.status) {
+            const integrity = response.headers.get('x-integrity') || '';
+            const location = response.headers.get('location');
+            if (!location) throw new RegistryError('Missing redirect location in download response', response.status);
+            const downloadResponse = await fetch(location);
+            if (!downloadResponse.ok) throw new RegistryError(`Download from storage failed: ${downloadResponse.status}`, downloadResponse.status);
+            const arrayBuffer = await downloadResponse.arrayBuffer();
+            const tarball = Buffer.from(arrayBuffer);
+            return {
+                tarball,
+                integrity
+            };
+        }
         if (!response.ok) {
             const data = await response.json();
             throw new RegistryError(data.error || `Download failed: ${response.status}`, response.status, data);
         }
+        // Direct response (no redirect) - read tarball and integrity directly
         const arrayBuffer = await response.arrayBuffer();
         const tarball = Buffer.from(arrayBuffer);
         const integrity = response.headers.get('x-integrity') || '';
@@ -2879,7 +2952,7 @@ class RegistryClient {
     /**
    * Publish a skill to the registry
    */ async publish(skillName, payload, skillPath, options = {}) {
-        const url = `${this.config.registry}/api/skills/publish`;
+        const url = `${this.getApiBase()}/skills/publish`;
         // 提取短名称作为 tarball 顶层目录（不含 scope 前缀）
         const shortName = getShortName(skillName);
         // Create tarball with short name as top-level directory
@@ -3157,7 +3230,8 @@ class RegistryResolver {
         const registryUrl = getRegistryUrl(parsed.scope);
         // 3. 创建 client 并解析版本
         const client = new RegistryClient({
-            registry: registryUrl
+            registry: registryUrl,
+            apiPrefix: getApiPrefix(registryUrl)
         });
         const version = await client.resolveVersion(parsed.fullName, parsed.version);
         // 4. 下载 tarball
@@ -4022,7 +4096,8 @@ class RegistryResolver {
         const parsed = parseSkillIdentifier(ref);
         const registryUrl = getRegistryUrl(parsed.scope);
         const client = new RegistryClient({
-            registry: registryUrl
+            registry: registryUrl,
+            apiPrefix: getApiPrefix(registryUrl)
         });
         // 新增：先查询 skill 信息获取 source_type
         let skillInfo;
@@ -4163,7 +4238,8 @@ class RegistryResolver {
     /**
    * 安装 Local Folder 模式发布的 skill
    *
-   * 通过 Registry 的 /api/skills/:name/download API 下载 tarball
+   * 通过 Registry 的 {apiPrefix}/skills/:name/download API 下载 tarball
+   * (apiPrefix 根据 registry 不同而不同，如 /api 或 /api/reskill)
    */ async installFromRegistryLocal(_skillInfo, parsed, targetAgents, options = {}) {
         const registryUrl = getRegistryUrl(parsed.scope);
         // 构造下载 URL（通过 Registry API）
@@ -5987,23 +6063,25 @@ async function loginAction(options) {
  */ async function loginWithToken(token, registry, authManager) {
     logger_logger.log(`Verifying token with ${registry}...`);
     logger_logger.newline();
-    // Verify token by calling whoami
+    // Verify token by calling login-cli endpoint
     const client = new RegistryClient({
         registry,
-        token
+        token,
+        apiPrefix: getApiPrefix(registry)
     });
     try {
-        const response = await client.whoami();
+        const response = await client.loginCli();
         if (!response.success || !response.user) {
             logger_logger.error(response.error || 'Token verification failed');
             process.exit(1);
         }
-        // Save token with handle (use user.handle, not user.id)
-        authManager.setToken(token, registry, void 0, response.user.handle);
+        // Save token with handle and email
+        authManager.setToken(token, registry, response.user.email, response.user.handle);
         logger_logger.log('✓ Token verified and saved!');
         logger_logger.newline();
         logger_logger.log(`  Handle: @${response.user.handle}`);
         logger_logger.log(`  Username: ${response.user.id}`);
+        if (response.user.email) logger_logger.log(`  Email: ${response.user.email}`);
         logger_logger.log(`  Registry: ${registry}`);
         logger_logger.newline();
         logger_logger.log(`Token saved to ${authManager.getConfigPath()}`);
@@ -7106,7 +7184,8 @@ async function publishAction(skillPath, options) {
         logger_logger.log(`Publishing to ${registry}...`);
         const client = new RegistryClient({
             registry,
-            token
+            token,
+            apiPrefix: getApiPrefix(registry)
         });
         try {
             // Get skill name from SKILL.md (primary source per agentskills.io spec)
@@ -7284,7 +7363,8 @@ async function whoamiAction(options) {
     // Verify with server
     const client = new RegistryClient({
         registry,
-        token
+        token,
+        apiPrefix: getApiPrefix(registry)
     });
     try {
         const response = await client.whoami();

package/dist/core/registry-client.d.ts

@@ -8,6 +8,8 @@ import type { PublishPayload } from './publisher.js';
 export interface RegistryConfig {
     registry: string;
     token?: string;
+    /** API path prefix, e.g., '/api' (default) or '/api/reskill' for rush-app */
+    apiPrefix?: string;
 }
 export interface PublishRequest {
     name: string;
@@ -39,6 +41,15 @@ export interface WhoamiResponse {
         handle: string;
     };
 }
+export interface LoginCliResponse {
+    success: boolean;
+    error?: string;
+    user?: {
+        id: string;
+        handle: string;
+        email?: string;
+    };
+}
 export interface SkillMetadataResponse {
     name: string;
     'dist-tags': Record<string, string>;
@@ -57,6 +68,12 @@ export declare class RegistryError extends Error {
 export declare class RegistryClient {
     private config;
     constructor(config: RegistryConfig);
+    /**
+     * Get API base URL (registry + apiPrefix)
+     *
+     * @returns Base URL for API calls, e.g., 'https://example.com/api' or 'https://rush.com/api/reskill'
+     */
+    private getApiBase;
     /**
      * Get authorization headers
      */
@@ -65,6 +82,16 @@ export declare class RegistryClient {
      * Get current user info (whoami)
      */
     whoami(): Promise<WhoamiResponse>;
+    /**
+     * CLI login - verify token and get user info
+     *
+     * Calls POST /api/auth/login-cli to validate the token and retrieve user information.
+     * This is the preferred method for CLI authentication.
+     *
+     * @returns User information if authentication succeeds
+     * @throws RegistryError if authentication fails
+     */
+    loginCli(): Promise<LoginCliResponse>;
     /**
      * Create tarball from skill files
      *

package/dist/core/registry-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../src/core/registry-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMrD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpC,SAAgB,QAAQ,CAAC,EAAE,OAAO,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO;CAMrE;AAMD,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAiB;gBAEnB,MAAM,EAAE,cAAc;IAIlC;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAqBvC;;;;;;;OAOG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4C5F;;;;;;;OAOG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAoCzD;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuD/E;;;;;;;;;;OAUG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IA4BhF;;;;;;;;OAQG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAKlD;;;;;;;;;;OAUG;IACH,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO;IAsB3E;;OAEG;IACG,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAO,GAC7B,OAAO,CAAC,eAAe,CAAC;CAiE5B;AAED,eAAe,cAAc,CAAC"}
+{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../src/core/registry-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMrD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpC,SAAgB,QAAQ,CAAC,EAAE,OAAO,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO;CAMrE;AAMD,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAiB;gBAEnB,MAAM,EAAE,cAAc;IAIlC;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAQlB;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAqBvC;;;;;;;;OAQG;IACG,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAqB3C;;;;;;;OAOG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4C5F;;;;;;;OAOG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAoCzD;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuD/E;;;;;;;;;;OAUG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAuDhF;;;;;;;;OAQG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAKlD;;;;;;;;;;OAUG;IACH,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO;IAsB3E;;OAEG;IACG,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAO,GAC7B,OAAO,CAAC,eAAe,CAAC;CAiE5B;AAED,eAAe,cAAc,CAAC"}

package/dist/core/registry-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-resolver.d.ts","sourceRoot":"","sources":["../../src/core/registry-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAGL,KAAK,qBAAqB,EAE3B,MAAM,4BAA4B,CAAC;AAQpC,MAAM,WAAW,qBAAqB;IACpC,8BAA8B;IAC9B,MAAM,EAAE,qBAAqB,CAAC;IAC9B,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,qBAAa,gBAAgB;IAC3B;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAwC1C;;;;;;;;;;OAUG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA+B1D;;;;;;OAMG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAWjE"}
+{"version":3,"file":"registry-resolver.d.ts","sourceRoot":"","sources":["../../src/core/registry-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAIL,KAAK,qBAAqB,EAE3B,MAAM,4BAA4B,CAAC;AAQpC,MAAM,WAAW,qBAAqB;IACpC,8BAA8B;IAC9B,MAAM,EAAE,qBAAqB,CAAC;IAC9B,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,qBAAa,gBAAgB;IAC3B;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAwC1C;;;;;;;;;;OAUG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA+B1D;;;;;;OAMG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAWjE"}

package/dist/core/skill-manager.d.ts

@@ -178,7 +178,8 @@ export declare class SkillManager {
     /**
      * 安装 Local Folder 模式发布的 skill
      *
-     * 通过 Registry 的 /api/skills/:name/download API 下载 tarball
+     * 通过 Registry 的 {apiPrefix}/skills/:name/download API 下载 tarball
+     * (apiPrefix 根据 registry 不同而不同，如 /api 或 /api/reskill)
      */
     private installFromRegistryLocal;
     /**

package/dist/core/skill-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-manager.d.ts","sourceRoot":"","sources":["../../src/core/skill-manager.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAa,MAAM,mBAAmB,CAAC;AAanF,OAAO,EACL,KAAK,SAAS,EAIf,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAAa,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKhD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAc;IAC9B,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,QAAQ,CAAU;gBAEd,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB;IAc/D;;OAEG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,cAAc,IAAI,MAAM;IAIxB;;;;;OAKG;IACH,aAAa,IAAI,MAAM;IAOvB;;;;;;OAMG;IACH,qBAAqB,IAAI,MAAM;IAM/B;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IA0BlC;;OAEG;IACH,OAAO,CAAC,YAAY;IAIpB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAoB/B;;OAEG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQjF;;OAEG;YACW,cAAc;IAuF5B;;OAEG;YACW,eAAe;IAwF7B;;OAEG;IACG,UAAU,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAgBzE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IA2BhC;;;;;;OAMG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IAY7D;;OAEG;IACG,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAwDtD;;;;OAIG;IACH,IAAI,IAAI,cAAc,EAAE;IA0DxB;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAuBjC;;;;OAIG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAgBtD;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG;QACrB,SAAS,EAAE,cAAc,GAAG,IAAI,CAAC;QACjC,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;KAC5B;IAQD;;OAEG;IACG,aAAa,IAAI,OAAO,CAC5B,KAAK,CAAC;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,OAAO,CAAC;KAC1B,CAAC,CACH;IAmED;;;;;;OAMG;IACG,eAAe,CACnB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,SAAS,EAAE,EACzB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC;QACT,KAAK,EAAE,cAAc,CAAC;QACtB,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;KACxC,CAAC;IAYF;;OAEG;YACW,sBAAsB;IA2FpC;;OAEG;YACW,uBAAuB;IA4FrC;;;;;;;OAOG;YACW,2BAA2B;IA0JzC;;;;;;;OAOG;YACW,uBAAuB;IA+CrC;;;;OAIG;YACW,wBAAwB;IAsBtC;;;;;;;OAOG;IACG,sBAAsB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAWpD;;OAEG;IACH,qBAAqB,IAAI,WAAW;IAQpC;;OAEG;IACH,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG;QAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE;IAenF;;OAEG;IACH,gBAAgB,IAAI,SAAS,EAAE;IAI/B;;OAEG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC;CAyBtF;AAED,eAAe,YAAY,CAAC"}
+{"version":3,"file":"skill-manager.d.ts","sourceRoot":"","sources":["../../src/core/skill-manager.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAa,MAAM,mBAAmB,CAAC;AAanF,OAAO,EACL,KAAK,SAAS,EAIf,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAAa,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKhD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAc;IAC9B,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,QAAQ,CAAU;gBAEd,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB;IAc/D;;OAEG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,cAAc,IAAI,MAAM;IAIxB;;;;;OAKG;IACH,aAAa,IAAI,MAAM;IAOvB;;;;;;OAMG;IACH,qBAAqB,IAAI,MAAM;IAM/B;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IA0BlC;;OAEG;IACH,OAAO,CAAC,YAAY;IAIpB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAoB/B;;OAEG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQjF;;OAEG;YACW,cAAc;IAuF5B;;OAEG;YACW,eAAe;IAwF7B;;OAEG;IACG,UAAU,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAgBzE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IA2BhC;;;;;;OAMG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IAY7D;;OAEG;IACG,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAwDtD;;;;OAIG;IACH,IAAI,IAAI,cAAc,EAAE;IA0DxB;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAuBjC;;;;OAIG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAgBtD;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG;QACrB,SAAS,EAAE,cAAc,GAAG,IAAI,CAAC;QACjC,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;KAC5B;IAQD;;OAEG;IACG,aAAa,IAAI,OAAO,CAC5B,KAAK,CAAC;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,OAAO,CAAC;KAC1B,CAAC,CACH;IAmED;;;;;;OAMG;IACG,eAAe,CACnB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,SAAS,EAAE,EACzB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC;QACT,KAAK,EAAE,cAAc,CAAC;QACtB,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;KACxC,CAAC;IAYF;;OAEG;YACW,sBAAsB;IA2FpC;;OAEG;YACW,uBAAuB;IA4FrC;;;;;;;OAOG;YACW,2BAA2B;IA0JzC;;;;;;;OAOG;YACW,uBAAuB;IA+CrC;;;;;OAKG;YACW,wBAAwB;IAsBtC;;;;;;;OAOG;IACG,sBAAsB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAWpD;;OAEG;IACH,qBAAqB,IAAI,WAAW;IAQpC;;OAEG;IACH,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG;QAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE;IAenF;;OAEG;IACH,gBAAgB,IAAI,SAAS,EAAE;IAI/B;;OAEG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC;CAyBtF;AAED,eAAe,YAAY,CAAC"}

package/dist/index.js

@@ -2398,12 +2398,39 @@ const installer_SKILLS_SUBDIR = 'skills';
  * Hardcoded registry to scope mapping
  * TODO: Replace with dynamic fetching from /api/registry/info
  */ const REGISTRY_SCOPE_MAP = {
+    // rush-app (private registry, new)
+    'https://rush-test.zhenguanyu.com': '@kanyun',
+    'https://rush.zhenguanyu.com': '@kanyun',
+    // reskill-app (private registry, legacy)
     'https://reskill-test.zhenguanyu.com': '@kanyun',
-    'https://reskill-test.zhenguanyu.com/': '@kanyun',
     // Local development
-    'http://localhost:3000': '@kanyun',
-    'http://localhost:3000/': '@kanyun'
+    'http://localhost:3000': '@kanyun'
 };
+/**
+ * Registry API prefix mapping
+ *
+ * rush-app hosts reskill APIs under /api/reskill/ prefix.
+ * Default for unlisted registries: '/api'
+ */ const REGISTRY_API_PREFIX = {
+    'https://rush-test.zhenguanyu.com': '/api/reskill',
+    'https://rush.zhenguanyu.com': '/api/reskill',
+    'http://localhost:3000': '/api/reskill'
+};
+/**
+ * Get the API path prefix for a given registry URL
+ *
+ * @param registryUrl - Registry URL
+ * @returns API prefix string (e.g., '/api' or '/api/reskill')
+ *
+ * @example
+ * getApiPrefix('https://rush-test.zhenguanyu.com') // '/api/reskill'
+ * getApiPrefix('https://reskill.info') // '/api'
+ * getApiPrefix('https://unknown.com') // '/api'
+ */ function getApiPrefix(registryUrl) {
+    if (!registryUrl) return '/api';
+    const normalized = registryUrl.endsWith('/') ? registryUrl.slice(0, -1) : registryUrl;
+    return REGISTRY_API_PREFIX[normalized] || '/api';
+}
 /**
  * Get the registry URL for a given scope (reverse lookup)
  *
@@ -2412,8 +2439,8 @@ const installer_SKILLS_SUBDIR = 'skills';
  * @returns Registry URL (with trailing slash) or null if not found
  *
  * @example
- * getRegistryForScope('@kanyun') // 'https://reskill-test.zhenguanyu.com/'
- * getRegistryForScope('kanyun') // 'https://reskill-test.zhenguanyu.com/'
+ * getRegistryForScope('@kanyun') // 'https://rush-test.zhenguanyu.com/'
+ * getRegistryForScope('kanyun') // 'https://rush-test.zhenguanyu.com/'
  * getRegistryForScope('@unknown') // null
  * getRegistryForScope('@mycompany', { '@mycompany': 'https://my.registry.com/' }) // 'https://my.registry.com/'
  */ function getRegistryForScope(scope, customRegistries) {
@@ -2443,8 +2470,8 @@ const installer_SKILLS_SUBDIR = 'skills';
  * @throws Error if scope is provided but not found in the registry map
  *
  * @example
- * getRegistryUrl('@kanyun') // 'https://reskill-test.zhenguanyu.com/'
- * getRegistryUrl('kanyun') // 'https://reskill-test.zhenguanyu.com/'
+ * getRegistryUrl('@kanyun') // 'https://rush-test.zhenguanyu.com/'
+ * getRegistryUrl('kanyun') // 'https://rush-test.zhenguanyu.com/'
  * getRegistryUrl(null) // 'https://reskill.info/'
  * getRegistryUrl('') // 'https://reskill.info/'
  * getRegistryUrl('@unknown') // throws Error
@@ -2581,6 +2608,15 @@ class RegistryClient {
         this.config = config;
     }
     /**
+   * Get API base URL (registry + apiPrefix)
+   *
+   * @returns Base URL for API calls, e.g., 'https://example.com/api' or 'https://rush.com/api/reskill'
+   */ getApiBase() {
+        const prefix = this.config.apiPrefix || '/api';
+        const registry = this.config.registry.endsWith('/') ? this.config.registry.slice(0, -1) : this.config.registry;
+        return `${registry}${prefix}`;
+    }
+    /**
    * Get authorization headers
    */ getAuthHeaders() {
         const headers = {
@@ -2593,7 +2629,7 @@ class RegistryClient {
     /**
    * Get current user info (whoami)
    */ async whoami() {
-        const url = `${this.config.registry}/api/auth/me`;
+        const url = `${this.getApiBase()}/auth/me`;
         const response = await fetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
@@ -2603,6 +2639,24 @@ class RegistryClient {
         return data;
     }
     /**
+   * CLI login - verify token and get user info
+   *
+   * Calls POST /api/auth/login-cli to validate the token and retrieve user information.
+   * This is the preferred method for CLI authentication.
+   *
+   * @returns User information if authentication succeeds
+   * @throws RegistryError if authentication fails
+   */ async loginCli() {
+        const url = `${this.getApiBase()}/auth/login-cli`;
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: this.getAuthHeaders()
+        });
+        const data = await response.json();
+        if (!response.ok) throw new RegistryError(data.error || `Login failed: ${response.status}`, response.status, data);
+        return data;
+    }
+    /**
    * Create tarball from skill files
    *
    * @param skillPath - Path to the skill directory
@@ -2649,7 +2703,7 @@ class RegistryClient {
    * @returns Skill 基本信息
    * @throws RegistryError 如果 skill 不存在或请求失败
    */ async getSkillInfo(skillName) {
-        const url = `${this.config.registry}/api/skills/${encodeURIComponent(skillName)}`;
+        const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}`;
         const response = await fetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
@@ -2683,7 +2737,7 @@ class RegistryClient {
         // 如果是 semver 版本号，直接返回
         if (/^\d+\.\d+\.\d+/.test(version)) return version;
         // 否则视为 tag，需要查询 dist-tags
-        const url = `${this.config.registry}/api/skills/${encodeURIComponent(skillName)}`;
+        const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}`;
         const response = await fetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
@@ -2718,15 +2772,34 @@ class RegistryClient {
    * @example
    * const { tarball, integrity } = await client.downloadSkill('@kanyun/test-skill', '1.0.0');
    */ async downloadSkill(skillName, version) {
-        const url = `${this.config.registry}/api/skills/${encodeURIComponent(skillName)}/versions/${version}/download`;
+        const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}/versions/${version}/download`;
+        // Use redirect: 'manual' to capture x-integrity header from 302 responses.
+        // The registry returns a 302 redirect to OSS with the integrity header,
+        // which would be lost if fetch auto-follows the redirect.
         const response = await fetch(url, {
             method: 'GET',
-            headers: this.getAuthHeaders()
+            headers: this.getAuthHeaders(),
+            redirect: 'manual'
         });
+        // Handle 302 redirect (registry → OSS signed URL)
+        if (301 === response.status || 302 === response.status) {
+            const integrity = response.headers.get('x-integrity') || '';
+            const location = response.headers.get('location');
+            if (!location) throw new RegistryError('Missing redirect location in download response', response.status);
+            const downloadResponse = await fetch(location);
+            if (!downloadResponse.ok) throw new RegistryError(`Download from storage failed: ${downloadResponse.status}`, downloadResponse.status);
+            const arrayBuffer = await downloadResponse.arrayBuffer();
+            const tarball = Buffer.from(arrayBuffer);
+            return {
+                tarball,
+                integrity
+            };
+        }
         if (!response.ok) {
             const data = await response.json();
             throw new RegistryError(data.error || `Download failed: ${response.status}`, response.status, data);
         }
+        // Direct response (no redirect) - read tarball and integrity directly
         const arrayBuffer = await response.arrayBuffer();
         const tarball = Buffer.from(arrayBuffer);
         const integrity = response.headers.get('x-integrity') || '';
@@ -2776,7 +2849,7 @@ class RegistryClient {
     /**
    * Publish a skill to the registry
    */ async publish(skillName, payload, skillPath, options = {}) {
-        const url = `${this.config.registry}/api/skills/publish`;
+        const url = `${this.getApiBase()}/skills/publish`;
         // 提取短名称作为 tarball 顶层目录（不含 scope 前缀）
         const shortName = getShortName(skillName);
         // Create tarball with short name as top-level directory
@@ -3120,7 +3193,8 @@ class RegistryResolver {
         const registryUrl = getRegistryUrl(parsed.scope);
         // 3. 创建 client 并解析版本
         const client = new RegistryClient({
-            registry: registryUrl
+            registry: registryUrl,
+            apiPrefix: getApiPrefix(registryUrl)
         });
         const version = await client.resolveVersion(parsed.fullName, parsed.version);
         // 4. 下载 tarball
@@ -4012,7 +4086,8 @@ class RegistryResolver {
         const parsed = parseSkillIdentifier(ref);
         const registryUrl = getRegistryUrl(parsed.scope);
         const client = new RegistryClient({
-            registry: registryUrl
+            registry: registryUrl,
+            apiPrefix: getApiPrefix(registryUrl)
         });
         // 新增：先查询 skill 信息获取 source_type
         let skillInfo;
@@ -4153,7 +4228,8 @@ class RegistryResolver {
     /**
    * 安装 Local Folder 模式发布的 skill
    *
-   * 通过 Registry 的 /api/skills/:name/download API 下载 tarball
+   * 通过 Registry 的 {apiPrefix}/skills/:name/download API 下载 tarball
+   * (apiPrefix 根据 registry 不同而不同，如 /api 或 /api/reskill)
    */ async installFromRegistryLocal(_skillInfo, parsed, targetAgents, options = {}) {
         const registryUrl = getRegistryUrl(parsed.scope);
         // 构造下载 URL（通过 Registry API）

package/dist/utils/registry-scope.d.ts

@@ -9,6 +9,18 @@
  * 用于无 scope 的 skill 安装
  */
 export declare const PUBLIC_REGISTRY = "https://reskill.info/";
+/**
+ * Get the API path prefix for a given registry URL
+ *
+ * @param registryUrl - Registry URL
+ * @returns API prefix string (e.g., '/api' or '/api/reskill')
+ *
+ * @example
+ * getApiPrefix('https://rush-test.zhenguanyu.com') // '/api/reskill'
+ * getApiPrefix('https://reskill.info') // '/api'
+ * getApiPrefix('https://unknown.com') // '/api'
+ */
+export declare function getApiPrefix(registryUrl: string): string;
 /**
  * Parsed skill name result
  */
@@ -41,7 +53,7 @@ export interface ParsedSkillIdentifier {
  * @returns Scope string (e.g., "@kanyun") or null if not found
  *
  * @example
- * getScopeForRegistry('https://reskill-test.zhenguanyu.com') // '@kanyun'
+ * getScopeForRegistry('https://rush-test.zhenguanyu.com') // '@kanyun'
  * getScopeForRegistry('https://unknown.com') // null
  */
 export declare function getScopeForRegistry(registry: string): string | null;
@@ -58,8 +70,8 @@ export type ScopeRegistries = Record<string, string>;
  * @returns Registry URL (with trailing slash) or null if not found
  *
  * @example
- * getRegistryForScope('@kanyun') // 'https://reskill-test.zhenguanyu.com/'
- * getRegistryForScope('kanyun') // 'https://reskill-test.zhenguanyu.com/'
+ * getRegistryForScope('@kanyun') // 'https://rush-test.zhenguanyu.com/'
+ * getRegistryForScope('kanyun') // 'https://rush-test.zhenguanyu.com/'
  * getRegistryForScope('@unknown') // null
  * getRegistryForScope('@mycompany', { '@mycompany': 'https://my.registry.com/' }) // 'https://my.registry.com/'
  */
@@ -76,8 +88,8 @@ export declare function getRegistryForScope(scope: string, customRegistries?: Sc
  * @throws Error if scope is provided but not found in the registry map
  *
  * @example
- * getRegistryUrl('@kanyun') // 'https://reskill-test.zhenguanyu.com/'
- * getRegistryUrl('kanyun') // 'https://reskill-test.zhenguanyu.com/'
+ * getRegistryUrl('@kanyun') // 'https://rush-test.zhenguanyu.com/'
+ * getRegistryUrl('kanyun') // 'https://rush-test.zhenguanyu.com/'
  * getRegistryUrl(null) // 'https://reskill.info/'
  * getRegistryUrl('') // 'https://reskill.info/'
  * getRegistryUrl('@unknown') // throws Error

package/dist/utils/registry-scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-scope.d.ts","sourceRoot":"","sources":["../../src/utils/registry-scope.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAcvD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAcnE;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAErD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,gBAAgB,CAAC,EAAE,eAAe,GACjC,MAAM,GAAG,IAAI,CAwBf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,gBAAgB,CAAC,EAAE,eAAe,GACjC,MAAM,CAgBR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAiBjE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAS7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,qBAAqB,CAwD9E"}
+{"version":3,"file":"registry-scope.d.ts","sourceRoot":"","sources":["../../src/utils/registry-scope.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,eAAe,0BAA0B,CAAC;AA8BvD;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAMxD;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAcnE;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAErD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,gBAAgB,CAAC,EAAE,eAAe,GACjC,MAAM,GAAG,IAAI,CAwBf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,gBAAgB,CAAC,EAAE,eAAe,GACjC,MAAM,CAgBR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAiBjE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAS7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,qBAAqB,CAwD9E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "reskill",
-  "version": "1.5.0",
+  "version": "1.7.0",
   "description": "AI Skills Package Manager - Git-based skills management for AI agents",
   "type": "module",
   "main": "./dist/index.js",