siluzan-cso-cli 1.1.8 → 1.1.9-beta.3

package/README.md

@@ -2,6 +2,36 @@
 
 当用户发来本页面的 **URL** 时，请按顺序协助用户完成安装。
 
+## 0. 安全与透明性说明
+
+本 Skill 是 **instruction-only**（纯指令型），不包含可执行代码文件。它通过指导 AI 助手调用 `siluzan-cso` CLI 来操作丝路赞内容发布平台。
+
+### 运行时依赖
+| 项目 | 说明 |
+|------|------|
+| **Node.js 18+** | CLI 运行时 |
+| **npm 8+** 或 **pnpm** | 安装 CLI 全局包 |
+| **siluzan-cso** CLI | 由 `npm install -g siluzan-cso-cli` 安装 |
+| **ffmpeg**（可选） | `extract-cover` 命令截取视频封面帧 |
+
+### 凭据与网络
+| 项目 | 说明 |
+|------|------|
+| API Key / Token | 存储在 `~/.siluzan/config.json`，用于所有 API 调用鉴权 |
+| CSO API | `api.siluzan.com`（生产）/ `api-ci.siluzan.com`（测试） |
+| 前端页面 | `cso.siluzan.com`（授权回调等浏览器操作） |
+| 版本检查 | `registry.npmjs.org` |
+
+### 可选环境变量
+| 变量 | 说明 |
+|------|------|
+| `SILUZAN_AUTH_TOKEN` | 从环境变量读取 Token（优先级高于 config.json，CI/CD 推荐） |
+
+### 可执行的操作范围
+- **只读**：查询媒体账号、运营报表、发布任务状态、人设列表、RAG 知识库检索等
+- **写入**（需用户确认）：上传素材、提交发布任务、创建/更新账号分组、生成 AI 内容规划
+- **本地文件操作**：`extract-cover` 截取视频帧输出图片；`init` 将 Skill 文件写入 AI 助手目录
+
 ## 1. 环境
 
 - Node.js **18+**
@@ -12,7 +42,7 @@
 在**用户的目标项目根目录**执行（根据用户使用的助手选择 `--ai`）：
 
 ```bash
-npm install -g siluzan-cso-cli
+npm install -g siluzan-cso-cli@beta
 siluzan-cso init --ai cursor         # 写入 Cursor（默认）
 siluzan-cso init --ai cursor,claude  # 同时写入多个平台
 siluzan-cso init --ai all            # 写入所有支持的平台
@@ -20,6 +50,7 @@ siluzan-cso init -d /path/to/skills  # 写入自定义目录
 siluzan-cso init --force             # 强制覆盖已存在文件
 ```
 
+> **注意**：当前为测试版（1.1.9-beta.3），供内部测试使用。正式发布后安装命令将改为 `npm install -g siluzan-cso-cli`。
 
 | 助手 | 建议 `--ai` |
 |------|-------------|

package/dist/index.js

@@ -342,8 +342,8 @@ var require_semver = __commonJS({
       }
       // preminor will bump the version up to the next minor release, and immediately
       // down to pre-release. premajor and prepatch work the same way.
-      inc(release2, identifier, identifierBase) {
-        if (release2.startsWith("pre")) {
+      inc(release, identifier, identifierBase) {
+        if (release.startsWith("pre")) {
           if (!identifier && identifierBase === false) {
             throw new Error("invalid increment argument: identifier is empty");
           }
@@ -354,7 +354,7 @@ var require_semver = __commonJS({
             }
           }
         }
-        switch (release2) {
+        switch (release) {
           case "premajor":
             this.prerelease.length = 0;
             this.patch = 0;
@@ -445,7 +445,7 @@ var require_semver = __commonJS({
             break;
           }
           default:
-            throw new Error(`invalid increment argument: ${release2}`);
+            throw new Error(`invalid increment argument: ${release}`);
         }
         this.raw = this.format();
         if (this.build.length) {
@@ -511,7 +511,7 @@ var require_inc = __commonJS({
   "../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/inc.js"(exports, module) {
     "use strict";
     var SemVer = require_semver();
-    var inc = (version, release2, options, identifier, identifierBase) => {
+    var inc = (version, release, options, identifier, identifierBase) => {
       if (typeof options === "string") {
         identifierBase = identifier;
         identifier = options;
@@ -521,7 +521,7 @@ var require_inc = __commonJS({
         return new SemVer(
           version instanceof SemVer ? version.version : version,
           options
-        ).inc(release2, identifier, identifierBase).version;
+        ).inc(release, identifier, identifierBase).version;
       } catch (er) {
         return null;
       }
@@ -1939,11 +1939,11 @@ var require_semver2 = __commonJS({
 import { Command, Option } from "commander";
 
 // src/config/defaults.ts
-var BUILD_ENV = "production";
-var DEFAULT_API_BASE = "https://api.siluzan.com";
-var DEFAULT_CSO_BASE = "https://cso.siluzan.com";
-var DEFAULT_WEB_BASE = "https://www.siluzan.com";
-var DEFAULT_AGENT_BASE = "https://agent.mysiluzan.com";
+var BUILD_ENV = "test";
+var DEFAULT_API_BASE = "https://api-ci.siluzan.com";
+var DEFAULT_CSO_BASE = "https://cso-ci.siluzan.com";
+var DEFAULT_WEB_BASE = "https://www-ci.siluzan.com";
+var DEFAULT_AGENT_BASE = "https://agent-ci.mysiluzan.com";
 
 // src/commands/init.ts
 import * as fs2 from "fs/promises";
@@ -1977,54 +1977,76 @@ async function getSkillFiles(skillDir, apiBaseUrl) {
 
 // src/commands/init.ts
 var __dirname = path2.dirname(fileURLToPath(import.meta.url));
-var TARGET_DIRS = {
-  cursor: (cwd) => path2.join(cwd, ".cursor", "skills", "siluzan-platform"),
-  claude: (cwd) => path2.join(cwd, ".claude", "skills", "siluzan-platform"),
-  /** OpenClaw 工作区技能目录，见 https://docs.openclaw.ai/skills */
-  "openclaw-workspace": (cwd) => path2.join(cwd, "skills", "siluzan-platform"),
-  "openclaw-global": (_cwd, home) => path2.join(home, ".openclaw", "skills", "siluzan-platform"),
-  /** WorkBuddy (CodeBuddy) 项目级技能目录 */
-  "workbuddy-workspace": (cwd) => path2.join(cwd, ".workbuddy", "skills", "siluzan-platform"),
-  /** WorkBuddy (CodeBuddy) 用户级技能目录（全局可用） */
-  "workbuddy-global": (_cwd, home) => path2.join(home, ".workbuddy", "skills", "siluzan-platform")
+var SKILL_DIR_NAME = "siluzan-platform";
+var PROJECT_DIRS = {
+  agents: (cwd) => path2.join(cwd, ".agents", "skills", SKILL_DIR_NAME),
+  cursor: (cwd) => path2.join(cwd, ".cursor", "skills", SKILL_DIR_NAME),
+  claude: (cwd) => path2.join(cwd, ".claude", "skills", SKILL_DIR_NAME),
+  windsurf: (cwd) => path2.join(cwd, ".windsurf", "skills", SKILL_DIR_NAME),
+  gemini: (cwd) => path2.join(cwd, ".gemini", "skills", SKILL_DIR_NAME),
+  codex: (cwd) => path2.join(cwd, ".codex", "skills", SKILL_DIR_NAME),
+  opencode: (cwd) => path2.join(cwd, ".opencode", "skills", SKILL_DIR_NAME),
+  kilo: (cwd) => path2.join(cwd, ".kilo", "skills", SKILL_DIR_NAME),
+  openclaw: (cwd) => path2.join(cwd, "skills", SKILL_DIR_NAME),
+  workbuddy: (cwd) => path2.join(cwd, ".workbuddy", "skills", SKILL_DIR_NAME)
 };
+var GLOBAL_DIRS = {
+  agents: (home) => path2.join(home, ".agents", "skills", SKILL_DIR_NAME),
+  cursor: (home) => path2.join(home, ".cursor", "skills", SKILL_DIR_NAME),
+  claude: (home) => path2.join(home, ".claude", "skills", SKILL_DIR_NAME),
+  windsurf: (home) => path2.join(home, ".codeium", "windsurf", "skills", SKILL_DIR_NAME),
+  gemini: (home) => path2.join(home, ".gemini", "skills", SKILL_DIR_NAME),
+  codex: (home) => path2.join(home, ".codex", "skills", SKILL_DIR_NAME),
+  opencode: (home) => path2.join(home, ".config", "opencode", "skills", SKILL_DIR_NAME),
+  kilo: (home) => path2.join(home, ".kilo", "skills", SKILL_DIR_NAME),
+  openclaw: (home) => path2.join(home, ".openclaw", "skills", SKILL_DIR_NAME),
+  workbuddy: (home) => path2.join(home, ".workbuddy", "skills", SKILL_DIR_NAME)
+};
+var ALL_PLATFORM_KEYS = Object.keys(PROJECT_DIRS);
 function parseTargets(raw) {
   const normalized = raw.trim().toLowerCase();
   if (normalized === "all") {
-    return [
-      "cursor",
-      "claude",
-      "openclaw-workspace",
-      "openclaw-global",
-      "workbuddy-workspace",
-      "workbuddy-global"
-    ];
+    return ALL_PLATFORM_KEYS.map((k) => ({ keys: [k], isGlobal: false }));
   }
-  const parts = normalized.split(",").map((s) => s.trim()).map((p) => {
-    if (p === "openclaw") return "openclaw-workspace";
-    if (p === "workbuddy") return "workbuddy-workspace";
-    return p;
-  });
-  const allowed = [
-    "cursor",
-    "claude",
-    "openclaw-workspace",
-    "openclaw-global",
-    "workbuddy-workspace",
-    "workbuddy-global"
-  ];
-  const result = [];
+  const parts = normalized.split(",").map((s) => s.trim());
+  const results = [];
+  const seen = /* @__PURE__ */ new Set();
   for (const p of parts) {
-    if (!allowed.includes(p)) {
+    let key = p;
+    let isGlobal = false;
+    if (p === "openclaw-workspace") {
+      key = "openclaw";
+      isGlobal = false;
+    } else if (p === "openclaw-global") {
+      key = "openclaw";
+      isGlobal = true;
+    } else if (p === "openclaw") {
+      key = "openclaw";
+      isGlobal = false;
+    } else if (p === "workbuddy-workspace") {
+      key = "workbuddy";
+      isGlobal = false;
+    } else if (p === "workbuddy-global") {
+      key = "workbuddy";
+      isGlobal = true;
+    } else if (p === "workbuddy") {
+      key = "workbuddy";
+      isGlobal = false;
+    }
+    if (!ALL_PLATFORM_KEYS.includes(key)) {
       console.error(
-        `\u672A\u77E5\u5E73\u53F0: ${p}\u3002\u53EF\u9009: cursor, claude, openclaw-workspace, openclaw-global, workbuddy-workspace, workbuddy-global, all`
+        `\u672A\u77E5\u5E73\u53F0: ${p}\u3002\u53EF\u9009: ${ALL_PLATFORM_KEYS.join(", ")}, openclaw-workspace, openclaw-global, workbuddy-workspace, workbuddy-global, all`
       );
       process.exitCode = 1;
       return [];
     }
-    result.push(p);
+    const uid = `${key}:${isGlobal}`;
+    if (!seen.has(uid)) {
+      seen.add(uid);
+      results.push({ keys: [key], isGlobal });
+    }
   }
-  return [...new Set(result)];
+  return results;
 }
 function skillRoot() {
   return path2.join(__dirname, "skill");
@@ -2084,16 +2106,30 @@ async function runInit(options) {
     if (anyWritten) {
       installedEntries.push({ target: "custom", cwd: "", dir: destDir });
     }
+  } else if (options.global) {
+    for (const key of ALL_PLATFORM_KEYS) {
+      const destDir = GLOBAL_DIRS[key](home);
+      console.log(`[${key} global] \u2192 ${destDir}`);
+      const anyWritten = await writeSkillFilesToDir(destDir, skillFiles, options.force);
+      if (anyWritten) {
+        installedEntries.push({ target: `${key}-global`, cwd: "" });
+      }
+    }
   } else {
     const targets = parseTargets(options.aiTargets);
     if (targets.length === 0) return;
-    for (const target of targets) {
-      const destDir = TARGET_DIRS[target](options.cwd, home);
-      console.log(`[${target}] \u2192 ${destDir}`);
-      const anyWritten = await writeSkillFilesToDir(destDir, skillFiles, options.force);
-      if (anyWritten) {
-        const isGlobal = target === "openclaw-global" || target === "workbuddy-global";
-        installedEntries.push({ target, cwd: isGlobal ? "" : options.cwd });
+    for (const entry of targets) {
+      for (const key of entry.keys) {
+        const destDir = entry.isGlobal ? GLOBAL_DIRS[key](home) : PROJECT_DIRS[key](options.cwd);
+        const label = entry.isGlobal ? `${key} global` : key;
+        console.log(`[${label}] \u2192 ${destDir}`);
+        const anyWritten = await writeSkillFilesToDir(destDir, skillFiles, options.force);
+        if (anyWritten) {
+          installedEntries.push({
+            target: entry.isGlobal ? `${key}-global` : key,
+            cwd: entry.isGlobal ? "" : options.cwd
+          });
+        }
       }
     }
   }
@@ -2101,18 +2137,8 @@ async function runInit(options) {
     saveInstalledTargets(installedEntries);
   }
   console.log("\n\u4E0B\u4E00\u6B65\uFF1A");
-  console.log(
-    "1. \u9996\u6B21\u4F7F\u7528\u8BF7\u8FD0\u884C\uFF1Asiluzan-cso login  \uFF08\u5F15\u5BFC\u6CE8\u518C/\u767B\u5F55\u5E76\u4FDD\u5B58 Token\uFF09"
-  );
-  console.log(
-    "2. \u540E\u7EED\u5347\u7EA7\u8FD0\u884C\uFF1Asiluzan-cso update  \uFF08\u81EA\u52A8\u66F4\u65B0 CLI \u4E0E skill \u6587\u4EF6\uFF09"
-  );
-  console.log(
-    "3. OpenClaw \u5168\u5C40\u6280\u80FD\u82E5\u672A\u751F\u6548\uFF0C\u8BF7\u5728 ~/.openclaw/openclaw.json \u7684 skills.load.extraDirs \u4E2D\u52A0\u5165\u6280\u80FD\u7236\u76EE\u5F55\u3002"
-  );
-  console.log(
-    "4. WorkBuddy \u6280\u80FD\u5B89\u88C5\u540E\u91CD\u542F WorkBuddy \u5373\u53EF\u751F\u6548\uFF08~/.workbuddy/skills/ \u6216\u9879\u76EE .workbuddy/skills/\uFF09\u3002"
-  );
+  console.log("1. \u9996\u6B21\u4F7F\u7528\u8BF7\u8FD0\u884C\uFF1Asiluzan-cso login  \uFF08\u5F15\u5BFC\u6CE8\u518C/\u767B\u5F55\u5E76\u4FDD\u5B58 Token\uFF09");
+  console.log("2. \u540E\u7EED\u5347\u7EA7\u8FD0\u884C\uFF1Asiluzan-cso update  \uFF08\u81EA\u52A8\u66F4\u65B0 CLI \u4E0E skill \u6587\u4EF6\uFF09");
 }
 
 // src/commands/login.ts
@@ -2129,7 +2155,6 @@ import { randomUUID as _randomUUID } from "crypto";
 import * as fs22 from "fs";
 import * as path22 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import * as os22 from "os";
 var SILUZAN_DIR = path3.join(os2.homedir(), ".siluzan");
 var CONFIG_FILE = path3.join(SILUZAN_DIR, "config.json");
 function readStr(raw, key) {
@@ -2210,21 +2235,33 @@ function validateBaseUrl(raw) {
   }
   return null;
 }
+var DEFAULT_TIMEOUT_MS = 10 * 60 * 1e3;
+var MAX_RESPONSE_BYTES = 50 * 1024 * 1024;
 function rawRequest(url, options) {
   return new Promise((resolve6, reject) => {
     const parsed = new URL(url);
     const transport = parsed.protocol === "https:" ? https : http;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const maxBytes = options.maxResponseBytes ?? MAX_RESPONSE_BYTES;
     const reqOpts = {
       hostname: parsed.hostname,
       port: parsed.port || (parsed.protocol === "https:" ? 443 : 80),
       path: parsed.pathname + parsed.search,
       method: options.method ?? "GET",
-      headers: options.headers
+      headers: options.headers,
+      timeout: timeoutMs || void 0
     };
     const req = transport.request(reqOpts, (res) => {
       let data = "";
+      let byteLen = 0;
       res.setEncoding("utf8");
       res.on("data", (chunk) => {
+        byteLen += Buffer.byteLength(chunk, "utf8");
+        if (maxBytes && byteLen > maxBytes) {
+          res.destroy();
+          reject(new Error(`\u54CD\u5E94\u4F53\u8D85\u8FC7\u4E0A\u9650\uFF08${(maxBytes / 1024 / 1024).toFixed(0)} MB\uFF09\uFF0C\u5DF2\u4E2D\u65AD\u8FDE\u63A5`));
+          return;
+        }
         data += chunk;
       });
       res.on("end", () => {
@@ -2237,6 +2274,10 @@ function rawRequest(url, options) {
         resolve6({ status: res.statusCode ?? 0, text: data, headers });
       });
     });
+    req.on("timeout", () => {
+      req.destroy();
+      reject(new Error(`\u8BF7\u6C42\u8D85\u65F6\uFF08${(timeoutMs / 1e3).toFixed(0)} \u79D2\uFF09\uFF1A${options.method ?? "GET"} ${url}`));
+    });
     req.on("error", reject);
     if (options.body) req.write(options.body);
     req.end();
@@ -2332,140 +2373,29 @@ async function fetchNpmVersion(pkgName, tag, timeoutMs = 4e3) {
     return null;
   }
 }
-var DEFAULT_SENTRY_DSN = "https://bafcf42aab6fe7b485310619ae041b5e@o4510436169285632.ingest.us.sentry.io/4511103054708736";
-function isSentryDisabled() {
-  return process.env.SILUZAN_SENTRY_DISABLED === "1" || process.env.SILUZAN_SENTRY_DISABLED === "true";
-}
-function getDsn() {
-  return process.env.SILUZAN_SENTRY_DSN?.trim() || DEFAULT_SENTRY_DSN;
-}
-var cliMeta = { name: "siluzan-cli", version: "unknown" };
-var cliInvocation = "";
-function setSiluzanCliInvocation(redactedCommandLine) {
-  cliInvocation = redactedCommandLine;
-}
-function redactCliArgvForSentry(argv) {
-  const args = argv.slice(2);
-  const redactNext = /* @__PURE__ */ new Set(["-t", "--token", "--api-key", "--password"]);
-  const out = [];
-  for (let i = 0; i < args.length; i++) {
-    const a = args[i];
-    if (redactNext.has(a)) {
-      out.push(a, "***");
-      i++;
-      continue;
-    }
-    const eq = a.indexOf("=");
-    if (eq > 0) {
-      const key = a.slice(0, eq).toLowerCase();
-      if (key === "--token" || key === "--api-key" || key === "--password") {
-        out.push(`${a.slice(0, eq)}=***`);
-        continue;
-      }
-    }
-    if (/^-t[^-]/.test(a) && a.length > 3) {
-      out.push("-t***");
-      continue;
-    }
-    out.push(a);
-  }
-  return out.join(" ");
-}
-function setSiluzanCliMeta(name, version) {
-  cliMeta = { name, version };
-  if (sentryReady) {
-    void import("@sentry/node").then((Sentry) => {
-      Sentry.setTag("cli", name);
-      Sentry.setTag("cli_version", version);
-    }).catch(() => {
-    });
-  }
-}
-var sentryReady = false;
-var sentryInitPromise = null;
-var flushHookRegistered = false;
-function buildRuntimeContext() {
-  const platform = process.platform;
-  const osName = platform === "win32" ? "Windows" : platform === "darwin" ? "macOS" : "Linux";
-  return {
-    os: {
-      name: osName,
-      version: os22.release(),
-      // 内核版本，如 10.0.26100（Win11）、24.3.0（macOS）
-      arch: process.arch
-      // x64 / arm64
-    },
-    runtime: {
-      node_version: process.version,
-      // v18.x.x / v20.x.x
-      timezone: Intl.DateTimeFormat().resolvedOptions().timeZone
-    }
-  };
-}
-async function ensureSentryInitialized(requestUrl) {
-  const dsn = getDsn();
-  if (!dsn || isSentryDisabled()) return false;
-  if (sentryReady) return true;
-  if (!sentryInitPromise) {
-    sentryInitPromise = (async () => {
-      const Sentry = await import("@sentry/node");
-      const envOverride = process.env.SILUZAN_SENTRY_ENV?.trim();
-      const environment = envOverride || (inferSiluzanRuntimeEnvironment(requestUrl) === "test" ? "test" : "production");
-      Sentry.init({
-        dsn,
-        environment,
-        sendDefaultPii: true,
-        tracesSampleRate: 0
-      });
-      const ctx = buildRuntimeContext();
-      Sentry.setContext("os", ctx.os);
-      Sentry.setContext("runtime", ctx.runtime);
-      Sentry.setTag("cli", cliMeta.name);
-      Sentry.setTag("cli_version", cliMeta.version);
-      if (!flushHookRegistered) {
-        flushHookRegistered = true;
-        process.once("beforeExit", () => {
-          void Sentry.flush(2e3).catch(() => {
-          });
-        });
-      }
-      sentryReady = true;
-    })();
-  }
-  await sentryInitPromise;
-  return sentryReady;
-}
-function deriveMainApiOriginFromRequestUrl(requestUrl) {
+function deriveMainApiOrigin(apiBase) {
   try {
-    const u = new URL(requestUrl);
+    const u = new URL(apiBase);
     const host = u.hostname.toLowerCase();
-    if (!host.endsWith("siluzan.com")) return null;
+    if (!host.endsWith("siluzan.com")) {
+      return apiBase.includes("-ci") ? "https://api-ci.siluzan.com" : "https://api.siluzan.com";
+    }
     if (host.startsWith("tso-api")) {
       return `${u.protocol}//${host.replace(/^tso-api/, "api")}`;
     }
     if (host === "api.siluzan.com" || host === "api-ci.siluzan.com") {
       return `${u.protocol}//${host}`;
     }
-    return null;
-  } catch {
-    return null;
-  }
-}
-function inferSiluzanRuntimeEnvironment(requestUrl) {
-  try {
-    const host = new URL(requestUrl).hostname.toLowerCase();
-    return host.includes("-ci") ? "test" : "production";
+    return apiBase.includes("-ci") ? "https://api-ci.siluzan.com" : "https://api.siluzan.com";
   } catch {
-    return "production";
+    return apiBase.includes("-ci") ? "https://api-ci.siluzan.com" : "https://api.siluzan.com";
   }
 }
-function cacheKeyForUser(mainOrigin, config) {
-  const cred = config.apiKey ? `k:${config.apiKey}` : `t:${config.authToken}`;
-  return `${mainOrigin}\0${cred}`;
+function pickStr(obj, key) {
+  const v = obj[key];
+  return typeof v === "string" && v.trim() ? v.trim() : void 0;
 }
-var userContextDone = /* @__PURE__ */ new Set();
-var userContextInflight = /* @__PURE__ */ new Map();
-function pickCompanyIdFromMe(data) {
+function pickCompanyId(data) {
   const direct = pickStr(data, "companyId") ?? pickStr(data, "companyID") ?? pickStr(data, "CompanyId");
   if (direct) return direct;
   const ci = data["companyInfo"];
@@ -2482,40 +2412,15 @@ function parseMeResponse(text) {
     const id = pickStr(data, "entityId") ?? pickStr(data, "id") ?? pickStr(data, "userId") ?? pickStr(data, "accountId");
     const email = pickStr(data, "email");
     const username = pickStr(data, "userName") ?? pickStr(data, "username") ?? pickStr(data, "name") ?? pickStr(data, "phone");
-    const companyId = pickCompanyIdFromMe(data);
+    const companyId = pickCompanyId(data);
     if (!id && !email && !username && !companyId) return null;
     return { id, email, username, companyId };
   } catch {
     return null;
   }
 }
-function pickStr(obj, key) {
-  const v = obj[key];
-  return typeof v === "string" && v.trim() ? v.trim() : void 0;
-}
-async function fetchAndSetUser(mainOrigin, config) {
-  const meUrl = `${mainOrigin.replace(/\/$/, "")}/query/account/me`;
-  const authHeaders = config.apiKey ? { "x-api-key": config.apiKey } : { Authorization: `Bearer ${config.authToken}` };
-  const res = await rawRequest(meUrl, {
-    method: "GET",
-    headers: {
-      "Content-Type": "application/json",
-      "Accept-Language": "zh-CN",
-      ...authHeaders
-    }
-  });
-  if (res.status < 200 || res.status >= 300) return;
-  const parsed = parseMeResponse(res.text);
-  if (!parsed) return;
-  const Sentry = await import("@sentry/node");
-  const user = {};
-  if (parsed.id) user.id = parsed.id;
-  if (parsed.email) user.email = parsed.email;
-  if (parsed.username) user.username = parsed.username;
-  Sentry.setUser(user);
-}
 async function fetchSiluzanCurrentUser(apiBase, config) {
-  const mainOrigin = deriveMainApiOriginFromRequestUrl(apiBase) ?? (apiBase.includes("-ci") ? "https://api-ci.siluzan.com" : "https://api.siluzan.com");
+  const mainOrigin = deriveMainApiOrigin(apiBase);
   const meUrl = `${mainOrigin.replace(/\/$/, "")}/query/account/me`;
   const authHeaders = config.apiKey ? { "x-api-key": config.apiKey } : { Authorization: `Bearer ${config.authToken}` };
   try {
@@ -2540,38 +2445,6 @@ async function fetchSiluzanCurrentUser(apiBase, config) {
     return null;
   }
 }
-function scheduleUserContext(mainOrigin, config) {
-  const key = cacheKeyForUser(mainOrigin, config);
-  if (userContextDone.has(key)) return;
-  let p = userContextInflight.get(key);
-  if (!p) {
-    p = (async () => {
-      try {
-        await fetchAndSetUser(mainOrigin, config);
-      } catch {
-      } finally {
-        userContextInflight.delete(key);
-        userContextDone.add(key);
-      }
-    })();
-    userContextInflight.set(key, p);
-  }
-}
-function refreshSiluzanUser(apiBase, config) {
-  if (isSentryDisabled()) return;
-  void (async () => {
-    try {
-      const ok = await ensureSentryInitialized(apiBase);
-      if (!ok) return;
-      const mainOrigin = deriveMainApiOriginFromRequestUrl(apiBase) ?? (apiBase.includes("-ci") ? "https://api-ci.siluzan.com" : "https://api.siluzan.com");
-      const key = cacheKeyForUser(mainOrigin, config);
-      userContextDone.delete(key);
-      userContextInflight.delete(key);
-      scheduleUserContext(mainOrigin, config);
-    } catch {
-    }
-  })();
-}
 
 // src/commands/login.ts
 async function runLogin(opts = {}) {
@@ -2582,7 +2455,6 @@ async function runLogin(opts = {}) {
       process.exit(1);
     }
     writeSharedConfig({ authToken: token });
-    refreshSiluzanUser(DEFAULT_API_BASE, { authToken: token });
     console.log(`
 \u2705 Token \u5DF2\u4FDD\u5B58\uFF08${maskSecret(token)}\uFF09`);
     console.log(`   \u914D\u7F6E\u6587\u4EF6\uFF1A${CONFIG_FILE}`);
@@ -2597,7 +2469,6 @@ async function runLogin(opts = {}) {
       process.exit(1);
     }
     writeSharedConfig({ apiKey: key });
-    refreshSiluzanUser(DEFAULT_API_BASE, { authToken: "", apiKey: key });
     console.log(`
 \u2705 API Key \u5DF2\u4FDD\u5B58\uFF08${maskSecret(key)}\uFF09`);
     console.log(`   \u914D\u7F6E\u6587\u4EF6\uFF1A${CONFIG_FILE}`);
@@ -2638,7 +2509,6 @@ async function runLogin(opts = {}) {
     process.exit(1);
   }
   writeSharedConfig({ apiKey });
-  refreshSiluzanUser(DEFAULT_API_BASE, { authToken: "", apiKey });
   console.log(`
 \u2705 API Key \u5DF2\u4FDD\u5B58\uFF08${maskSecret(apiKey)}\uFF09`);
   console.log(`   \u914D\u7F6E\u6587\u4EF6\uFF1A${CONFIG_FILE}`);
@@ -2823,6 +2693,7 @@ async function runUpdate(options) {
   }
   console.log(`
 \u{1F504} \u6B63\u5728\u66F4\u65B0 ${targets.length} \u5904 skill \u5B89\u88C5\u4F4D\u7F6E \u2026`);
+  let failCount = 0;
   for (const entry of targets) {
     const label = entry.target === "custom" ? entry.dir ?? "unknown" : entry.target;
     const cwd = entry.cwd || os4.homedir();
@@ -2846,9 +2717,16 @@ async function runUpdate(options) {
         });
       }
     } catch (e) {
+      failCount++;
       console.error(`  \u274C \u66F4\u65B0\u5931\u8D25\uFF1A${e.message}`);
     }
   }
+  if (failCount > 0) {
+    console.error(`
+\u26A0\uFE0F  ${targets.length} \u5904\u5B89\u88C5\u4F4D\u7F6E\u4E2D\u6709 ${failCount} \u5904\u66F4\u65B0\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u4E0A\u65B9\u9519\u8BEF\u4FE1\u606F\u3002`);
+    console.log("   \u5982\u679C AI \u52A9\u624B\u6B63\u5728\u8FD0\u884C\uFF0C\u5EFA\u8BAE\u91CD\u542F\u4EE5\u4F7F\u5DF2\u6210\u529F\u7684 skill \u6587\u4EF6\u751F\u6548\u3002\n");
+    process.exit(1);
+  }
   console.log("\n\u2705 \u5168\u90E8 skill \u6587\u4EF6\u5DF2\u5237\u65B0\u3002");
   console.log("   \u5982\u679C AI \u52A9\u624B\u6B63\u5728\u8FD0\u884C\uFF0C\u5EFA\u8BAE\u91CD\u542F\u4EE5\u4F7F\u65B0 skill \u6587\u4EF6\u751F\u6548\u3002\n");
 }
@@ -2860,7 +2738,7 @@ function loadConfig(tokenArg) {
   const authToken = tokenArg ?? process.env.SILUZAN_AUTH_TOKEN ?? shared.authToken ?? "";
   if (!apiKey && !authToken) {
     console.error(
-      "\n\u274C \u672A\u627E\u5230\u8BA4\u8BC1\u51ED\u636E\u3002\n\n   \u65B9\u5F0F\u4E00\uFF08\u63A8\u8350\uFF09\uFF1AAPI Key\n     \u5728\u4E1D\u8DEF\u8D5E\u300C\u8BBE\u7F6E \u2192 API Key \u7BA1\u7406\u300D\u521B\u5EFA API Key\uFF0C\u7136\u540E\u8FD0\u884C\uFF1A\n     siluzan-cso login --api-key <YOUR_API_KEY>\n\n   \u65B9\u5F0F\u4E8C\uFF1AJWT Token\n     siluzan-cso login\n"
+      "\n\u274C \u672A\u627E\u5230\u8BA4\u8BC1\u51ED\u636E\u3002\n\n   \u65B9\u5F0F\u4E00\uFF08\u63A8\u8350\uFF09\uFF1AAPI Key\n     \u5728\u4E1D\u8DEF\u8D5E\u300C\u8BBE\u7F6E \u2192 API Key \u7BA1\u7406\u300D\u521B\u5EFA API Key\uFF0C\u7136\u540E\u8FD0\u884C\uFF1A\n     siluzan-cso login --api-key <YOUR_API_KEY>\n\n   \u65B9\u5F0F\u4E8C\uFF1A\u73AF\u5883\u53D8\u91CF\uFF08CI/CD \u63A8\u8350\uFF09\n     export SILUZAN_API_KEY=<YOUR_API_KEY>\n     # \u6216 export SILUZAN_AUTH_TOKEN=<YOUR_TOKEN>\n\n   \u65B9\u5F0F\u4E09\uFF1AJWT Token\n     siluzan-cso login\n"
     );
     process.exit(1);
   }
@@ -2885,8 +2763,7 @@ function loadConfig(tokenArg) {
 \u274C agentBaseUrl \u4E0D\u5408\u6CD5\uFF1A${agentErr}`);
     process.exit(1);
   }
-  setSiluzanCliMeta("siluzan-cso", getCurrentVersion2());
-  return { apiBaseUrl, csoBaseUrl, agentBaseUrl, authToken, apiKey, dataPermission: shared.dataPermission };
+  return { apiBaseUrl, csoBaseUrl, agentBaseUrl, authToken, apiKey, dataPermission: process.env.SILUZAN_DATA_PERMISSION ?? shared.dataPermission };
 }
 function apiFetch2(url, config, options = {}, verbose = false) {
   return apiFetch(url, config, options, verbose);
@@ -3045,8 +2922,7 @@ async function runListAccounts(options) {
       mediaCustomerName: a.mediaCustomerName,
       mediaAccountState: a.mediaAccountState ?? "",
       invalidOAuthToken: a.invalidOAuthToken ?? false,
-      // 优先使用 expiresOn（OAuth Token 实际到期时间），fallback 到 tokenTime
-      expiresOn: a.expiresOn ?? a.tokenTime ?? null,
+      expiresOn: a.expiresOn ?? null,
       lastAuthorizationTime: a.lastAuthorizationTime ?? null,
       totalActiveTaskCount: a.totalActiveTaskCount ?? 0,
       ownerInfo: a.ownerInfo ?? [],
@@ -3091,7 +2967,7 @@ async function runListAccounts(options) {
     { key: "commentCount", header: "\u8BC4\u8BBA\u6570" },
     { key: "diggCount", header: "\u83B7\u8D5E\u6570" },
     { key: "lastAuthTime", header: "\u4E0A\u6B21\u6388\u6743" },
-    { key: "tokenExpiry", header: "Token\u5230\u671F" },
+    { key: "expiresOn", header: "Token\u5230\u671F" },
     { key: "owners", header: "\u8D1F\u8D23\u4EBA" }
   ];
   for (const [platform, accounts] of groups) {
@@ -3110,7 +2986,7 @@ async function runListAccounts(options) {
         commentCount: formatCount(ov?.commentCount),
         diggCount: formatCount(ov?.diggCount),
         lastAuthTime: formatDate(a.lastAuthorizationTime),
-        tokenExpiry: formatDate(a.expiresOn ?? a.tokenTime),
+        expiresOn: formatDate(a.expiresOn),
         owners: formatOwners(a.ownerInfo)
       };
     });
@@ -6366,7 +6242,11 @@ ${header}${body}`);
 import * as fs10 from "fs";
 function cmdConfigShow() {
   const shared = readSharedConfig();
-  if (!shared.authToken && !shared.apiKey) {
+  const envApiKey = process.env.SILUZAN_API_KEY;
+  const envAuthToken = process.env.SILUZAN_AUTH_TOKEN;
+  const effectiveApiKey = envApiKey ?? shared.apiKey ?? "";
+  const effectiveAuthToken = envAuthToken ?? shared.authToken ?? "";
+  if (!effectiveApiKey && !effectiveAuthToken) {
     console.log(
       `
 \u5C1A\u672A\u914D\u7F6E\u51ED\u636E\u3002
@@ -6376,25 +6256,34 @@ function cmdConfigShow() {
 
    \u6CE8\u518C\u767B\u5F55\u540E\u8FD0\u884C\u4EE5\u4E0B\u4EFB\u4E00\u547D\u4EE4\u5B8C\u6210\u914D\u7F6E\uFF1A
    siluzan-cso login              \uFF08\u4F7F\u7528 API Key \u6216 Token \u767B\u5F55\uFF09
+
+   \u4E5F\u53EF\u901A\u8FC7\u73AF\u5883\u53D8\u91CF\u4F20\u5165\uFF08CI/CD \u63A8\u8350\uFF09\uFF1A
+   export SILUZAN_API_KEY=<YOUR_API_KEY>
+   export SILUZAN_AUTH_TOKEN=<YOUR_TOKEN>
 `
     );
     return;
   }
   const apiBaseUrl = process.env.SILUZAN_CSO_API_BASE ?? DEFAULT_API_BASE;
   const csoBaseUrl = DEFAULT_CSO_BASE;
-  const apiKey = shared.apiKey ?? "";
-  console.log("\n\u5F53\u524D\u914D\u7F6E\uFF08~/.siluzan/config.json\uFF09\uFF1A");
+  console.log("\n\u5F53\u524D\u914D\u7F6E\uFF1A");
   console.log(`  apiBaseUrl : ${apiBaseUrl}`);
   console.log(`  csoBaseUrl : ${csoBaseUrl}`);
-  if (apiKey) {
-    console.log(`  apiKey     : ${maskSecret(apiKey)}  \u2190 \u5F53\u524D\u751F\u6548\uFF08X-Api-Key \u9274\u6743\uFF09`);
+  if (effectiveApiKey) {
+    const src = envApiKey ? "env:SILUZAN_API_KEY" : "config.json";
+    const active = "  \u2190 \u5F53\u524D\u751F\u6548\uFF08X-Api-Key \u9274\u6743\uFF09";
+    console.log(`  apiKey     : ${maskSecret(effectiveApiKey)}  [${src}]${active}`);
   }
-  if (shared.authToken) {
-    const note = apiKey ? "  \uFF08\u5DF2\u88AB apiKey \u8986\u76D6\uFF09" : "  \u2190 \u5F53\u524D\u751F\u6548\uFF08Bearer \u9274\u6743\uFF09";
-    console.log(`  authToken  : ${maskSecret(shared.authToken)}${note}`);
+  if (effectiveAuthToken) {
+    const src = envAuthToken ? "env:SILUZAN_AUTH_TOKEN" : "config.json";
+    const note = effectiveApiKey ? "  \uFF08\u5DF2\u88AB apiKey \u8986\u76D6\uFF09" : "  \u2190 \u5F53\u524D\u751F\u6548\uFF08Bearer \u9274\u6743\uFF09";
+    console.log(`  authToken  : ${maskSecret(effectiveAuthToken)}  [${src}]${note}`);
   }
   console.log(`
 \u914D\u7F6E\u6587\u4EF6\u4F4D\u7F6E\uFF1A${CONFIG_FILE}`);
+  if (envApiKey || envAuthToken) {
+    console.log("  \u2139\uFE0F  \u90E8\u5206\u51ED\u636E\u6765\u81EA\u73AF\u5883\u53D8\u91CF\uFF0C\u4F18\u5148\u7EA7\u9AD8\u4E8E config.json\u3002");
+  }
   if (process.platform !== "win32") {
     console.log("  \u26A0\uFE0F  Token \u660E\u6587\u5B58\u50A8\uFF0C\u8BF7\u786E\u4FDD\u6587\u4EF6\u6743\u9650\u4E3A 600\uFF0C\u4E14\u4E0D\u8981\u63D0\u4EA4\u81F3\u4EE3\u7801\u4ED3\u5E93\u6216\u7F51\u76D8\u3002");
   }
@@ -6421,11 +6310,21 @@ function cmdConfigClear() {
 }
 
 // src/index.ts
+process.on("uncaughtException", (err) => {
+  console.error(`
+\u274C \u672A\u6355\u83B7\u7684\u5F02\u5E38\uFF1A${err.message}`);
+  if (process.argv.includes("--verbose")) console.error(err.stack);
+  process.exit(1);
+});
+process.on("unhandledRejection", (reason) => {
+  const msg = reason instanceof Error ? reason.message : String(reason);
+  console.error(`
+\u274C \u672A\u5904\u7406\u7684\u5F02\u6B65\u9519\u8BEF\uFF1A${msg}`);
+  if (process.argv.includes("--verbose") && reason instanceof Error) console.error(reason.stack);
+  process.exit(1);
+});
 var program = new Command();
 program.name("siluzan-cso").description("Siluzan \u5E73\u53F0 Skill \u5DE5\u5177\uFF1A\u521D\u59CB\u5316\u3001\u8D26\u53F7\u67E5\u8BE2\u3001\u4E0A\u4F20\u3001\u56FE\u6587/\u89C6\u9891\u53D1\u5E03").version(getCurrentVersion2());
-program.hook("preAction", () => {
-  setSiluzanCliInvocation(redactCliArgvForSentry(process.argv));
-});
 var configCmd = program.command("config").description("\u67E5\u770B\u6216\u8BBE\u7F6E Siluzan \u8BA4\u8BC1\u914D\u7F6E\uFF08~/.siluzan/config.json\uFF09");
 configCmd.command("show").description("\u5C55\u793A\u5F53\u524D\u5DF2\u4FDD\u5B58\u7684\u914D\u7F6E\uFF08Token \u8131\u654F\u663E\u793A\uFF09").action(() => cmdConfigShow());
 configCmd.command("set").description("\u4FDD\u5B58\u914D\u7F6E\u5230 ~/.siluzan/config.json\uFF0C\u540E\u7EED\u547D\u4EE4\u81EA\u52A8\u8BFB\u53D6").option("--api-key <key>", "API Key\uFF08\u63A8\u8350\uFF0C\u4E0E siluzan-tso \u5171\u7528\uFF0C\u4F18\u5148\u7EA7\u9AD8\u4E8E token\uFF09").option("-t, --token <token>", "\u7528\u6237 Auth Token\uFF08JWT\uFF09").action((opts) => {
@@ -6438,18 +6337,19 @@ program.command("login").description("\u5F15\u5BFC\u5B8C\u6210 Siluzan \u8D26\u5
 program.command("update").description("\u68C0\u67E5\u5E76\u66F4\u65B0 siluzan-cso-cli \u81F3\u6700\u65B0\u7248\u672C\uFF0C\u540C\u6B65\u5237\u65B0\u6240\u6709\u5DF2\u5B89\u88C5\u7684 skill \u6587\u4EF6").option("--force", "\u8DF3\u8FC7\u7248\u672C\u6BD4\u8F83\uFF0C\u5F3A\u5236\u91CD\u65B0\u5B89\u88C5\u5E76\u5237\u65B0 skill \u6587\u4EF6", false).option("--skip-init", "\u4EC5\u66F4\u65B0 CLI\uFF0C\u4E0D\u91CD\u65B0\u521D\u59CB\u5316 skill \u6587\u4EF6", false).action(async (opts) => {
   await runUpdate({ force: opts.force, skipInit: opts.skipInit });
 });
-program.command("init").description("\u5C06 Skill \u6587\u4EF6\u5199\u5165\u6307\u5B9A AI \u52A9\u624B\u76EE\u5F55\uFF08--ai \u9009\u62E9\u9884\u8BBE\u5E73\u53F0\uFF0C\u6216 --dir \u6307\u5B9A\u4EFB\u610F\u76EE\u5F55\uFF09").option(
+program.command("init").description("\u5C06 Skill \u6587\u4EF6\u5199\u5165 AI \u52A9\u624B\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5199\u5165\u6240\u6709\u5E73\u53F0\u7684\u9879\u76EE\u7EA7\u76EE\u5F55\uFF0C--global \u5199\u5165\u5168\u5C40\u76EE\u5F55\uFF09").option(
   "-a, --ai <targets>",
-  "\u76EE\u6807\u5E73\u53F0\uFF0C\u9017\u53F7\u5206\u9694\uFF1Acursor,claude,openclaw-workspace,openclaw-global,workbuddy-workspace,workbuddy-global,all",
-  "cursor"
+  "\u76EE\u6807\u5E73\u53F0\uFF0C\u9017\u53F7\u5206\u9694\uFF1Acursor,claude,agents,windsurf,gemini,codex,opencode,kilo,openclaw,workbuddy,all",
+  "all"
 ).option(
   "-d, --dir <path>",
-  "\u5C06 Skill \u6587\u4EF6\u76F4\u63A5\u5199\u5165\u6307\u5B9A\u76EE\u5F55\uFF08\u7EDD\u5BF9\u6216\u76F8\u5BF9\u8DEF\u5F84\uFF09\uFF0C\u4E0E --ai \u4E92\u65A5\uFF0C\u4F18\u5148\u7EA7\u66F4\u9AD8"
-).option("-f, --force", "\u8986\u76D6\u5DF2\u5B58\u5728\u7684 Skill \u6587\u4EF6", false).action(async (opts) => {
+  "\u5C06 Skill \u6587\u4EF6\u76F4\u63A5\u5199\u5165\u6307\u5B9A\u76EE\u5F55\uFF08\u7EDD\u5BF9\u6216\u76F8\u5BF9\u8DEF\u5F84\uFF09\uFF0C\u4E0E --ai/--global \u4E92\u65A5\uFF0C\u4F18\u5148\u7EA7\u66F4\u9AD8"
+).option("-g, --global", "\u5199\u5165\u6240\u6709\u5E73\u53F0\u7684\u5168\u5C40 skill \u76EE\u5F55\uFF08~/.xxx/skills/\uFF09", false).option("-f, --force", "\u8986\u76D6\u5DF2\u5B58\u5728\u7684 Skill \u6587\u4EF6", false).action(async (opts) => {
   await runInit({
     cwd: process.cwd(),
     aiTargets: opts.ai,
     dir: opts.dir,
+    global: Boolean(opts.global),
     force: Boolean(opts.force),
     apiBaseUrl: DEFAULT_API_BASE
   });

package/dist/skill/SKILL.md

@@ -9,6 +9,27 @@ compatibility: Requires siluzan-cso-cli installed and authenticated via `siluzan
 
 # siluzan-cso
 
+
+---
+
+## 可执行的操作范围
+
+- **只读**：查询媒体账号列表、账号分组、运营报表、发布任务状态、人设列表、RAG 知识库检索、AI 内容规划详情
+- **写入**（需用户确认）：上传素材、提交发布任务、创建/更新账号分组、生成 AI 内容规划、站内信回复
+- **本地文件操作**：`extract-cover` 在本地截取视频帧并输出图片文件；`init` 将 Skill 文件写入 AI 助手目录
+
+---
+
+## 可选环境变量
+
+| 变量 | 说明 |
+|------|------|
+| `SILUZAN_API_KEY` | 从环境变量读取 API Key（优先级高于 config.json，CI/CD 推荐） |
+| `SILUZAN_AUTH_TOKEN` | 从环境变量读取 JWT Token（优先级高于 config.json） |
+| `SILUZAN_DATA_PERMISSION` | 从环境变量读取数据权限标识（优先级高于 config.json） |
+
+---
+
 ## 能力范围
 
 | 业务流程 | 手段 | 说明 |
@@ -37,10 +58,12 @@ compatibility: Requires siluzan-cso-cli installed and authenticated via `siluzan
 | `siluzan-cso task list/detail/item` | 查看任务状态 / 处理失败 / 重试 | `references/task.md` |
 | `siluzan-cso report fetch --media <平台>` | 运营报表（核心指标 / 视频排行 / 趋势） | `references/report.md` |
 | `siluzan-cso planning ...` | AI 内容规划：生成、监控、详情、导出 | `references/planning.md` |
-| —（网页端） | CSO 后台全部页面 URL（含测试/生产环境） | `references/web-pages.md` |
+| —（网页端） | CSO web端全部页面 URL | `references/web-pages.md` |
 
 ---
 
+
+
 ## 常见业务场景 → 阅读哪个文件
 
 | 用户在做什么 | 先阅读 |
@@ -95,14 +118,15 @@ account-group ──需要 mediaCustomerId──► list-accounts
 - **先查账号再操作**：对具体账号做操作前，先用 `list-accounts --name <名称> --media-type <平台>` 确认账号存在且 Token 有效。
 - **使用 `--json` 处理数据**：需要对返回结果做计算或筛选时，加 `--json` 再用 `node -e` 提取（`node -e "const d=require('fs').readFileSync('/dev/stdin','utf8'); ..."`）。
 - **不猜账号 ID**：`entityId` ≠ `mediaCustomerId`，两者均须从 `list-accounts --json` 获取，不可假设。
-- **严禁让用户执行命令**：除 `references/setup.md` 中的安装/登录命令外，所有 CLI 命令均由 AI 代替用户执行，禁止向用户透露任何命令行、参数或代码逻辑。
+- **命令透明性**：以简洁的方式向用户说明即将执行的操作意图（如「正在上传视频到素材库」「正在为您查询 YouTube 账号列表」），让用户了解操作进度。用户主动要求查看执行细节时，应如实提供完整命令。安装/登录/更新等一次性命令（见 `references/setup.md`）可直接展示给用户自行执行。
 - **操作后必须验证**：完成发布、上传、分组等写操作后，需通过对应的查询命令确认结果。
 
-### 必须遵守（违反将导致 skill 不可用）
-
-- 输出的任何内容（计划、总结、报告）中，**严禁出现 CLI 命令**（setup.md 相关命令除外）。
-- 每次执行前主动检查 CLI 版本，若需更新请先执行更新流程（详见 `references/setup.md`）。
+### 必须遵守
 
+- 主动更新（详情请读取 `references/setup.md`）。
+- **破坏性操作必须用户确认**：涉及写入/修改/删除的操作（发布、上传、分组变更等），执行前必须明确告知用户操作内容并获得确认。
+- **只读操作可自主执行**：查询类命令（`list-accounts`、`report fetch`、`task list`、`config show` 等）可直接执行，无需额外确认。
+- 禁止提供虚假信息，比如web端连接就必须确认 `references/web-pages.md` 中存在才能提供给用户
 ---
 
 ## 常见 HTTP 错误处理
@@ -123,6 +147,6 @@ account-group ──需要 mediaCustomerId──► list-accounts
 
 > 无对应 CLI 命令的模块，或需要引导用户在网页端查看数据时，查阅 `references/web-pages.md` 获取完整页面清单与链接。
 
-URL 格式：`https://www.siluzan.com/v3/foreign_trade/cso/{页面}`
+URL 格式：`https://www-ci.siluzan.com/v3/foreign_trade/cso/{页面}`
 
 常用页面：`task`（任务管理）· `postVideo`（发布页）· `ManageAccounts`（账号管理）· `planning`（AI 内容规划）· `table`（绩效报表）· `Workdata`（作品数据）

package/dist/skill/_meta.json

@@ -1,5 +1,21 @@
 {
   "slug": "siluzan-cso",
-  "version": "1.1.8",
-  "publishedAt": 1775724298669
+  "version": "1.1.9-beta.3",
+  "publishedAt": 1776246656610,
+  "homepage": "https://www.siluzan.com",
+  "source": "https://dev.azure.com/jack4it/Sammamish/_git/siluzan-skill",
+  "requiredBinaries": [
+    "node",
+    "npm"
+  ],
+  "optionalBinaries": [
+    "ffmpeg"
+  ],
+  "requiredEnv": [],
+  "optionalEnv": [
+    "SILUZAN_AUTH_TOKEN"
+  ],
+  "configPaths": [
+    "~/.siluzan/config.json"
+  ]
 }

package/dist/skill/references/publish.md

@@ -199,7 +199,7 @@ siluzan-cso publish -c publish-config.json
 
 > 查询发布状态、处理失败项 → 参见 `references/task.md`
 
-前往 CSO 任务管理页面查看进度：`https://www.siluzan.com/v3/foreign_trade/cso/task`
+前往 CSO 任务管理页面查看进度：`https://www-ci.siluzan.com/v3/foreign_trade/cso/task`
 
 ---
 

package/dist/skill/references/setup.md

@@ -3,10 +3,10 @@
 ## 安装 CLI
 
 ```bash
-npm install -g siluzan-cso-cli
+npm install -g siluzan-cso-cli@beta
 ```
 
-环境要求：Node.js 24+
+环境要求：Node.js 18+
 
 ---
 
@@ -44,12 +44,28 @@ siluzan-cso config set --token <Token>     # 备用：设置 JWT Token
 
 > **⚠️ 不要使用 `config set --token <token>` 的方式。** 该方式会将 Token 明文写入 shell history（`~/.bash_history`、`~/.zsh_history`、PowerShell 历史），存在凭证泄露风险。推荐使用 `siluzan-cso login` 交互式输入。
 
-API Key 获取入口：`https://cso.siluzan.com/v3/foreign_trade/settings/apiKeyManagement`
+API Key 获取入口：`https://cso-ci.siluzan.com/v3/foreign_trade/settings/apiKeyManagement`
 
-**Token 读取优先级（由高到低）：**
-1. 环境变量 `SILUZAN_AUTH_TOKEN`（CI/CD 推荐）
-2. `~/.siluzan/config.json` → `authToken`（`login` 写入此处）
-3. 命令行 `--token <token>`（仅紧急临时用，用后立即轮换）
+### 通过环境变量传入凭据（CI/CD 推荐）
+
+无需写入 config.json，直接通过环境变量传入：
+
+```bash
+export SILUZAN_API_KEY=<YOUR_API_KEY>       # API Key（推荐）
+# 或
+export SILUZAN_AUTH_TOKEN=<YOUR_TOKEN>      # JWT Token
+```
+
+环境变量优先级高于 config.json，适合 CI/CD、Docker 容器、自动化脚本等场景。可通过 `siluzan-cso config show` 确认当前生效的凭据来源。
+
+**凭据读取优先级（由高到低）：**
+
+| 凭据类型 | 优先级 |
+|---------|--------|
+| API Key | `SILUZAN_API_KEY` 环境变量 → `config.json` → `apiKey` |
+| JWT Token | `--token` CLI 参数 → `SILUZAN_AUTH_TOKEN` 环境变量 → `config.json` → `authToken` |
+
+> API Key 鉴权优先级高于 JWT Token，两者同时存在时使用 API Key。
 
 > **若用户已配置过凭据，不要重复询问。** 先尝试直接运行命令；只有命令返回认证失败时，才引导用户重新执行 `siluzan-cso login`。
 
@@ -63,8 +79,8 @@ siluzan-cso config show
 输出示例：
 ```
   构建环境     : production
-  apiBaseUrl   : https://api.siluzan.com
-  csoBaseUrl   : https://cso.siluzan.com
+  apiBaseUrl   : https://api-ci.siluzan.com
+  csoBaseUrl   : https://cso-ci.siluzan.com
   apiKey       : abcd****1234
 ```
 

package/dist/skill/references/web-pages.md

@@ -1,7 +1,7 @@
 # web-pages — CSO 后台页面速查
 
 > 当需要引导用户前往网页端查看数据或执行操作时，使用本文件中的页面链接。
-> URL 格式：`https://www.siluzan.com/v3/foreign_trade/cso/{页面路径}`
+> URL 格式：`https://www-ci.siluzan.com/v3/foreign_trade/cso/{页面路径}`
 
 ---
 
@@ -11,9 +11,9 @@
 
 | 页面 | 完整链接 | 功能说明 |
 |------|----------|----------|
-| 账号管理 | `https://www.siluzan.com/v3/foreign_trade/cso/ManageAccounts` | 绑定/授权/查看媒体账号列表、账号状态、Token 到期时间 |
-| 账号分组 | `https://www.siluzan.com/v3/foreign_trade/cso/AccountGroup` | 新建分组、管理分组内账号 |
-| 重点账号 | `https://www.siluzan.com/v3/foreign_trade/cso/KeyAccounts` | 配置重点关注账号、数据备份 |
+| 账号管理 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/ManageAccounts` | 绑定/授权/查看媒体账号列表、账号状态、Token 到期时间 |
+| 账号分组 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/AccountGroup` | 新建分组、管理分组内账号 |
+| 重点账号 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/KeyAccounts` | 配置重点关注账号、数据备份 |
 
 
 ---
@@ -22,10 +22,10 @@
 
 | 页面 | 完整链接 | 功能说明 |
 |------|----------|----------|
-| 发布作品 | `https://www.siluzan.com/v3/foreign_trade/cso/postVideo?contentType=1` | 矩阵发布视频、图文、草稿管理、话题组 contentType=1 是视频，contentType=2是图文 |
+| 发布作品 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/postVideo?contentType=1` | 矩阵发布视频、图文、草稿管理、话题组 contentType=1 是视频，contentType=2是图文 |
 
-| 发布日历 | `https://www.siluzan.com/v3/foreign_trade/cso/publishCalendar` | 日历视图规划发布任务、创建/编辑发布任务 |
-| 营销日历 | `https://www.siluzan.com/v3/foreign_trade/cso/marketingCalendar` | 营销节点日历、跳转创建发布任务 |
+| 发布日历 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/publishCalendar` | 日历视图规划发布任务、创建/编辑发布任务 |
+| 营销日历 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/marketingCalendar` | 营销节点日历、跳转创建发布任务 |
 
 ---
 
@@ -33,10 +33,10 @@
 
 | 页面 | 完整链接 | 功能说明 |
 |------|----------|----------|
-| 任务列表 | `https://www.siluzan.com/v3/foreign_trade/cso/task` | 发布任务列表、状态筛选、任务详情抽屉 |
-| 视频管理 | `https://www.siluzan.com/v3/foreign_trade/cso/VideoMgr` | 已发布视频/图文列表、删除、重发、评论查看 |
-| 视频搬家 | `https://www.siluzan.com/v3/foreign_trade/cso/relocation` | 将视频搬运到其他平台 |
-| 搬家记录 | `https://www.siluzan.com/v3/foreign_trade/cso/MovingRecord` | 搬家任务列表与执行状态 |
+| 任务列表 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/task` | 发布任务列表、状态筛选、任务详情抽屉 |
+| 视频管理 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/VideoMgr` | 已发布视频/图文列表、删除、重发、评论查看 |
+| 视频搬家 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/relocation` | 将视频搬运到其他平台 |
+| 搬家记录 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/MovingRecord` | 搬家任务列表与执行状态 |
 
 ---
 
@@ -44,9 +44,9 @@
 
 | 页面 | 完整链接 | 功能说明 |
 |------|----------|----------|
-| 私信管理 | `https://www.siluzan.com/v3/foreign_trade/cso/letter` | 按渠道/时间查看与处理私信（多平台 Tab） |
-| 评论管理 | `https://www.siluzan.com/v3/foreign_trade/cso/comment` | 收到的评论列表、回复、账号组筛选 |
-| 智能互动 | `https://www.siluzan.com/v3/foreign_trade/cso/interaction` | 私信欢迎语、自动回复规则配置 |
+| 私信管理 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/letter` | 按渠道/时间查看与处理私信（多平台 Tab） |
+| 评论管理 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/comment` | 收到的评论列表、回复、账号组筛选 |
+| 智能互动 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/interaction` | 私信欢迎语、自动回复规则配置 |
 
 ---
 
@@ -54,9 +54,9 @@
 
 | 页面 | 完整链接 | 功能说明 |
 |------|----------|----------|
-| 作品数据 | `https://www.siluzan.com/v3/foreign_trade/cso/Workdata` | 作品维度统计、图表、明细（对应 CLI `report fetch`） |
-| 账户数据 | `https://www.siluzan.com/v3/foreign_trade/cso/accountdata` | 账户维度汇总数据、趋势图表 |
-| 绩效报表 | `https://www.siluzan.com/v3/foreign_trade/cso/table` | 多维度绩效报表、PDF 导出（对应 CLI `report fetch/records/download`） |
+| 作品数据 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/Workdata` | 作品维度统计、图表、明细（对应 CLI `report fetch`） |
+| 账户数据 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/accountdata` | 账户维度汇总数据、趋势图表 |
+| 绩效报表 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/table` | 多维度绩效报表、PDF 导出（对应 CLI `report fetch/records/download`） |
 
 ---
 
@@ -64,10 +64,10 @@
 
 | 页面 | 完整链接 | 功能说明 |
 |------|----------|----------|
-| 内容规划 | `https://www.siluzan.com/v3/foreign_trade/cso/planning` | AI 内容规划列表、生成规划、企业维度筛选（对应 CLI `planning`） |
-| 营销首页 | `https://www.siluzan.com/v3/foreign_trade/cso/ContentHome` | 工作台总览：账号数、视频数、最新评论与视频 |
+| 内容规划 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/planning` | AI 内容规划列表、生成规划、企业维度筛选（对应 CLI `planning`） |
+| 营销首页 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/ContentHome` | 工作台总览：账号数、视频数、最新评论与视频 |
 
-| 话题组 | `https://www.siluzan.com/v3/foreign_trade/cso/TopicGroup` | 话题组维护、话题内容管理 |
+| 话题组 | `https://www-ci.siluzan.com/v3/foreign_trade/cso/TopicGroup` | 话题组维护、话题内容管理 |
 
 
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "siluzan-cso-cli",
-  "version": "1.1.8",
+  "version": "1.1.9-beta.3",
   "description": "Siluzan platform AI Skill CLI — multi-platform content publishing (video/image-text) for Cursor, Claude Code, and OpenClaw.",
   "type": "module",
   "bin": {
@@ -24,13 +24,21 @@
     "content-publishing",
     "cli"
   ],
+  "homepage": "https://www.siluzan.com",
+  "repository": {
+    "type": "git",
+    "url": "https://dev.azure.com/jack4it/Sammamish/_git/siluzan-skill",
+    "directory": "cso-cli"
+  },
+  "bugs": {
+    "url": "https://dev.azure.com/jack4it/Sammamish/_git/siluzan-skill/issues"
+  },
   "license": "UNLICENSED",
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
     "@azure/storage-blob": "^12.31.0",
-    "@sentry/node": "9",
     "cli-table3": "^0.6.5",
     "commander": "^12.1.0",
     "image-size": "^2.0.2"
@@ -42,7 +50,7 @@
     "siluzan-cli-common": "1.0.0"
   },
   "engines": {
-    "node": ">=24"
+    "node": ">=18"
   },
   "scripts": {
     "postinstall": "node scripts/postinstall.mjs",