siluzan-cso-cli 1.1.9-beta.2 → 1.1.9-beta.3

package/README.md

@@ -50,7 +50,7 @@ siluzan-cso init -d /path/to/skills  # 写入自定义目录
 siluzan-cso init --force             # 强制覆盖已存在文件
 ```
 
-> **注意**：当前为测试版（1.1.9-beta.2），供内部测试使用。正式发布后安装命令将改为 `npm install -g siluzan-cso-cli`。
+> **注意**：当前为测试版（1.1.9-beta.3），供内部测试使用。正式发布后安装命令将改为 `npm install -g siluzan-cso-cli`。
 
 | 助手 | 建议 `--ai` |
 |------|-------------|

package/dist/index.js

@@ -1977,54 +1977,76 @@ async function getSkillFiles(skillDir, apiBaseUrl) {
 
 // src/commands/init.ts
 var __dirname = path2.dirname(fileURLToPath(import.meta.url));
-var TARGET_DIRS = {
-  cursor: (cwd) => path2.join(cwd, ".cursor", "skills", "siluzan-platform"),
-  claude: (cwd) => path2.join(cwd, ".claude", "skills", "siluzan-platform"),
-  /** OpenClaw 工作区技能目录，见 https://docs.openclaw.ai/skills */
-  "openclaw-workspace": (cwd) => path2.join(cwd, "skills", "siluzan-platform"),
-  "openclaw-global": (_cwd, home) => path2.join(home, ".openclaw", "skills", "siluzan-platform"),
-  /** WorkBuddy (CodeBuddy) 项目级技能目录 */
-  "workbuddy-workspace": (cwd) => path2.join(cwd, ".workbuddy", "skills", "siluzan-platform"),
-  /** WorkBuddy (CodeBuddy) 用户级技能目录（全局可用） */
-  "workbuddy-global": (_cwd, home) => path2.join(home, ".workbuddy", "skills", "siluzan-platform")
+var SKILL_DIR_NAME = "siluzan-platform";
+var PROJECT_DIRS = {
+  agents: (cwd) => path2.join(cwd, ".agents", "skills", SKILL_DIR_NAME),
+  cursor: (cwd) => path2.join(cwd, ".cursor", "skills", SKILL_DIR_NAME),
+  claude: (cwd) => path2.join(cwd, ".claude", "skills", SKILL_DIR_NAME),
+  windsurf: (cwd) => path2.join(cwd, ".windsurf", "skills", SKILL_DIR_NAME),
+  gemini: (cwd) => path2.join(cwd, ".gemini", "skills", SKILL_DIR_NAME),
+  codex: (cwd) => path2.join(cwd, ".codex", "skills", SKILL_DIR_NAME),
+  opencode: (cwd) => path2.join(cwd, ".opencode", "skills", SKILL_DIR_NAME),
+  kilo: (cwd) => path2.join(cwd, ".kilo", "skills", SKILL_DIR_NAME),
+  openclaw: (cwd) => path2.join(cwd, "skills", SKILL_DIR_NAME),
+  workbuddy: (cwd) => path2.join(cwd, ".workbuddy", "skills", SKILL_DIR_NAME)
 };
+var GLOBAL_DIRS = {
+  agents: (home) => path2.join(home, ".agents", "skills", SKILL_DIR_NAME),
+  cursor: (home) => path2.join(home, ".cursor", "skills", SKILL_DIR_NAME),
+  claude: (home) => path2.join(home, ".claude", "skills", SKILL_DIR_NAME),
+  windsurf: (home) => path2.join(home, ".codeium", "windsurf", "skills", SKILL_DIR_NAME),
+  gemini: (home) => path2.join(home, ".gemini", "skills", SKILL_DIR_NAME),
+  codex: (home) => path2.join(home, ".codex", "skills", SKILL_DIR_NAME),
+  opencode: (home) => path2.join(home, ".config", "opencode", "skills", SKILL_DIR_NAME),
+  kilo: (home) => path2.join(home, ".kilo", "skills", SKILL_DIR_NAME),
+  openclaw: (home) => path2.join(home, ".openclaw", "skills", SKILL_DIR_NAME),
+  workbuddy: (home) => path2.join(home, ".workbuddy", "skills", SKILL_DIR_NAME)
+};
+var ALL_PLATFORM_KEYS = Object.keys(PROJECT_DIRS);
 function parseTargets(raw) {
   const normalized = raw.trim().toLowerCase();
   if (normalized === "all") {
-    return [
-      "cursor",
-      "claude",
-      "openclaw-workspace",
-      "openclaw-global",
-      "workbuddy-workspace",
-      "workbuddy-global"
-    ];
+    return ALL_PLATFORM_KEYS.map((k) => ({ keys: [k], isGlobal: false }));
   }
-  const parts = normalized.split(",").map((s) => s.trim()).map((p) => {
-    if (p === "openclaw") return "openclaw-workspace";
-    if (p === "workbuddy") return "workbuddy-workspace";
-    return p;
-  });
-  const allowed = [
-    "cursor",
-    "claude",
-    "openclaw-workspace",
-    "openclaw-global",
-    "workbuddy-workspace",
-    "workbuddy-global"
-  ];
-  const result = [];
+  const parts = normalized.split(",").map((s) => s.trim());
+  const results = [];
+  const seen = /* @__PURE__ */ new Set();
   for (const p of parts) {
-    if (!allowed.includes(p)) {
+    let key = p;
+    let isGlobal = false;
+    if (p === "openclaw-workspace") {
+      key = "openclaw";
+      isGlobal = false;
+    } else if (p === "openclaw-global") {
+      key = "openclaw";
+      isGlobal = true;
+    } else if (p === "openclaw") {
+      key = "openclaw";
+      isGlobal = false;
+    } else if (p === "workbuddy-workspace") {
+      key = "workbuddy";
+      isGlobal = false;
+    } else if (p === "workbuddy-global") {
+      key = "workbuddy";
+      isGlobal = true;
+    } else if (p === "workbuddy") {
+      key = "workbuddy";
+      isGlobal = false;
+    }
+    if (!ALL_PLATFORM_KEYS.includes(key)) {
       console.error(
-        `\u672A\u77E5\u5E73\u53F0: ${p}\u3002\u53EF\u9009: cursor, claude, openclaw-workspace, openclaw-global, workbuddy-workspace, workbuddy-global, all`
+        `\u672A\u77E5\u5E73\u53F0: ${p}\u3002\u53EF\u9009: ${ALL_PLATFORM_KEYS.join(", ")}, openclaw-workspace, openclaw-global, workbuddy-workspace, workbuddy-global, all`
       );
       process.exitCode = 1;
       return [];
     }
-    result.push(p);
+    const uid = `${key}:${isGlobal}`;
+    if (!seen.has(uid)) {
+      seen.add(uid);
+      results.push({ keys: [key], isGlobal });
+    }
   }
-  return [...new Set(result)];
+  return results;
 }
 function skillRoot() {
   return path2.join(__dirname, "skill");
@@ -2084,16 +2106,30 @@ async function runInit(options) {
     if (anyWritten) {
       installedEntries.push({ target: "custom", cwd: "", dir: destDir });
     }
+  } else if (options.global) {
+    for (const key of ALL_PLATFORM_KEYS) {
+      const destDir = GLOBAL_DIRS[key](home);
+      console.log(`[${key} global] \u2192 ${destDir}`);
+      const anyWritten = await writeSkillFilesToDir(destDir, skillFiles, options.force);
+      if (anyWritten) {
+        installedEntries.push({ target: `${key}-global`, cwd: "" });
+      }
+    }
   } else {
     const targets = parseTargets(options.aiTargets);
     if (targets.length === 0) return;
-    for (const target of targets) {
-      const destDir = TARGET_DIRS[target](options.cwd, home);
-      console.log(`[${target}] \u2192 ${destDir}`);
-      const anyWritten = await writeSkillFilesToDir(destDir, skillFiles, options.force);
-      if (anyWritten) {
-        const isGlobal = target === "openclaw-global" || target === "workbuddy-global";
-        installedEntries.push({ target, cwd: isGlobal ? "" : options.cwd });
+    for (const entry of targets) {
+      for (const key of entry.keys) {
+        const destDir = entry.isGlobal ? GLOBAL_DIRS[key](home) : PROJECT_DIRS[key](options.cwd);
+        const label = entry.isGlobal ? `${key} global` : key;
+        console.log(`[${label}] \u2192 ${destDir}`);
+        const anyWritten = await writeSkillFilesToDir(destDir, skillFiles, options.force);
+        if (anyWritten) {
+          installedEntries.push({
+            target: entry.isGlobal ? `${key}-global` : key,
+            cwd: entry.isGlobal ? "" : options.cwd
+          });
+        }
       }
     }
   }
@@ -2101,18 +2137,8 @@ async function runInit(options) {
     saveInstalledTargets(installedEntries);
   }
   console.log("\n\u4E0B\u4E00\u6B65\uFF1A");
-  console.log(
-    "1. \u9996\u6B21\u4F7F\u7528\u8BF7\u8FD0\u884C\uFF1Asiluzan-cso login  \uFF08\u5F15\u5BFC\u6CE8\u518C/\u767B\u5F55\u5E76\u4FDD\u5B58 Token\uFF09"
-  );
-  console.log(
-    "2. \u540E\u7EED\u5347\u7EA7\u8FD0\u884C\uFF1Asiluzan-cso update  \uFF08\u81EA\u52A8\u66F4\u65B0 CLI \u4E0E skill \u6587\u4EF6\uFF09"
-  );
-  console.log(
-    "3. OpenClaw \u5168\u5C40\u6280\u80FD\u82E5\u672A\u751F\u6548\uFF0C\u8BF7\u5728 ~/.openclaw/openclaw.json \u7684 skills.load.extraDirs \u4E2D\u52A0\u5165\u6280\u80FD\u7236\u76EE\u5F55\u3002"
-  );
-  console.log(
-    "4. WorkBuddy \u6280\u80FD\u5B89\u88C5\u540E\u91CD\u542F WorkBuddy \u5373\u53EF\u751F\u6548\uFF08~/.workbuddy/skills/ \u6216\u9879\u76EE .workbuddy/skills/\uFF09\u3002"
-  );
+  console.log("1. \u9996\u6B21\u4F7F\u7528\u8BF7\u8FD0\u884C\uFF1Asiluzan-cso login  \uFF08\u5F15\u5BFC\u6CE8\u518C/\u767B\u5F55\u5E76\u4FDD\u5B58 Token\uFF09");
+  console.log("2. \u540E\u7EED\u5347\u7EA7\u8FD0\u884C\uFF1Asiluzan-cso update  \uFF08\u81EA\u52A8\u66F4\u65B0 CLI \u4E0E skill \u6587\u4EF6\uFF09");
 }
 
 // src/commands/login.ts
@@ -2712,7 +2738,7 @@ function loadConfig(tokenArg) {
   const authToken = tokenArg ?? process.env.SILUZAN_AUTH_TOKEN ?? shared.authToken ?? "";
   if (!apiKey && !authToken) {
     console.error(
-      "\n\u274C \u672A\u627E\u5230\u8BA4\u8BC1\u51ED\u636E\u3002\n\n   \u65B9\u5F0F\u4E00\uFF08\u63A8\u8350\uFF09\uFF1AAPI Key\n     \u5728\u4E1D\u8DEF\u8D5E\u300C\u8BBE\u7F6E \u2192 API Key \u7BA1\u7406\u300D\u521B\u5EFA API Key\uFF0C\u7136\u540E\u8FD0\u884C\uFF1A\n     siluzan-cso login --api-key <YOUR_API_KEY>\n\n   \u65B9\u5F0F\u4E8C\uFF1AJWT Token\n     siluzan-cso login\n"
+      "\n\u274C \u672A\u627E\u5230\u8BA4\u8BC1\u51ED\u636E\u3002\n\n   \u65B9\u5F0F\u4E00\uFF08\u63A8\u8350\uFF09\uFF1AAPI Key\n     \u5728\u4E1D\u8DEF\u8D5E\u300C\u8BBE\u7F6E \u2192 API Key \u7BA1\u7406\u300D\u521B\u5EFA API Key\uFF0C\u7136\u540E\u8FD0\u884C\uFF1A\n     siluzan-cso login --api-key <YOUR_API_KEY>\n\n   \u65B9\u5F0F\u4E8C\uFF1A\u73AF\u5883\u53D8\u91CF\uFF08CI/CD \u63A8\u8350\uFF09\n     export SILUZAN_API_KEY=<YOUR_API_KEY>\n     # \u6216 export SILUZAN_AUTH_TOKEN=<YOUR_TOKEN>\n\n   \u65B9\u5F0F\u4E09\uFF1AJWT Token\n     siluzan-cso login\n"
     );
     process.exit(1);
   }
@@ -2737,7 +2763,7 @@ function loadConfig(tokenArg) {
 \u274C agentBaseUrl \u4E0D\u5408\u6CD5\uFF1A${agentErr}`);
     process.exit(1);
   }
-  return { apiBaseUrl, csoBaseUrl, agentBaseUrl, authToken, apiKey, dataPermission: shared.dataPermission };
+  return { apiBaseUrl, csoBaseUrl, agentBaseUrl, authToken, apiKey, dataPermission: process.env.SILUZAN_DATA_PERMISSION ?? shared.dataPermission };
 }
 function apiFetch2(url, config, options = {}, verbose = false) {
   return apiFetch(url, config, options, verbose);
@@ -6216,7 +6242,11 @@ ${header}${body}`);
 import * as fs10 from "fs";
 function cmdConfigShow() {
   const shared = readSharedConfig();
-  if (!shared.authToken && !shared.apiKey) {
+  const envApiKey = process.env.SILUZAN_API_KEY;
+  const envAuthToken = process.env.SILUZAN_AUTH_TOKEN;
+  const effectiveApiKey = envApiKey ?? shared.apiKey ?? "";
+  const effectiveAuthToken = envAuthToken ?? shared.authToken ?? "";
+  if (!effectiveApiKey && !effectiveAuthToken) {
     console.log(
       `
 \u5C1A\u672A\u914D\u7F6E\u51ED\u636E\u3002
@@ -6226,25 +6256,34 @@ function cmdConfigShow() {
 
    \u6CE8\u518C\u767B\u5F55\u540E\u8FD0\u884C\u4EE5\u4E0B\u4EFB\u4E00\u547D\u4EE4\u5B8C\u6210\u914D\u7F6E\uFF1A
    siluzan-cso login              \uFF08\u4F7F\u7528 API Key \u6216 Token \u767B\u5F55\uFF09
+
+   \u4E5F\u53EF\u901A\u8FC7\u73AF\u5883\u53D8\u91CF\u4F20\u5165\uFF08CI/CD \u63A8\u8350\uFF09\uFF1A
+   export SILUZAN_API_KEY=<YOUR_API_KEY>
+   export SILUZAN_AUTH_TOKEN=<YOUR_TOKEN>
 `
     );
     return;
   }
   const apiBaseUrl = process.env.SILUZAN_CSO_API_BASE ?? DEFAULT_API_BASE;
   const csoBaseUrl = DEFAULT_CSO_BASE;
-  const apiKey = shared.apiKey ?? "";
-  console.log("\n\u5F53\u524D\u914D\u7F6E\uFF08~/.siluzan/config.json\uFF09\uFF1A");
+  console.log("\n\u5F53\u524D\u914D\u7F6E\uFF1A");
   console.log(`  apiBaseUrl : ${apiBaseUrl}`);
   console.log(`  csoBaseUrl : ${csoBaseUrl}`);
-  if (apiKey) {
-    console.log(`  apiKey     : ${maskSecret(apiKey)}  \u2190 \u5F53\u524D\u751F\u6548\uFF08X-Api-Key \u9274\u6743\uFF09`);
+  if (effectiveApiKey) {
+    const src = envApiKey ? "env:SILUZAN_API_KEY" : "config.json";
+    const active = "  \u2190 \u5F53\u524D\u751F\u6548\uFF08X-Api-Key \u9274\u6743\uFF09";
+    console.log(`  apiKey     : ${maskSecret(effectiveApiKey)}  [${src}]${active}`);
   }
-  if (shared.authToken) {
-    const note = apiKey ? "  \uFF08\u5DF2\u88AB apiKey \u8986\u76D6\uFF09" : "  \u2190 \u5F53\u524D\u751F\u6548\uFF08Bearer \u9274\u6743\uFF09";
-    console.log(`  authToken  : ${maskSecret(shared.authToken)}${note}`);
+  if (effectiveAuthToken) {
+    const src = envAuthToken ? "env:SILUZAN_AUTH_TOKEN" : "config.json";
+    const note = effectiveApiKey ? "  \uFF08\u5DF2\u88AB apiKey \u8986\u76D6\uFF09" : "  \u2190 \u5F53\u524D\u751F\u6548\uFF08Bearer \u9274\u6743\uFF09";
+    console.log(`  authToken  : ${maskSecret(effectiveAuthToken)}  [${src}]${note}`);
   }
   console.log(`
 \u914D\u7F6E\u6587\u4EF6\u4F4D\u7F6E\uFF1A${CONFIG_FILE}`);
+  if (envApiKey || envAuthToken) {
+    console.log("  \u2139\uFE0F  \u90E8\u5206\u51ED\u636E\u6765\u81EA\u73AF\u5883\u53D8\u91CF\uFF0C\u4F18\u5148\u7EA7\u9AD8\u4E8E config.json\u3002");
+  }
   if (process.platform !== "win32") {
     console.log("  \u26A0\uFE0F  Token \u660E\u6587\u5B58\u50A8\uFF0C\u8BF7\u786E\u4FDD\u6587\u4EF6\u6743\u9650\u4E3A 600\uFF0C\u4E14\u4E0D\u8981\u63D0\u4EA4\u81F3\u4EE3\u7801\u4ED3\u5E93\u6216\u7F51\u76D8\u3002");
   }
@@ -6298,18 +6337,19 @@ program.command("login").description("\u5F15\u5BFC\u5B8C\u6210 Siluzan \u8D26\u5
 program.command("update").description("\u68C0\u67E5\u5E76\u66F4\u65B0 siluzan-cso-cli \u81F3\u6700\u65B0\u7248\u672C\uFF0C\u540C\u6B65\u5237\u65B0\u6240\u6709\u5DF2\u5B89\u88C5\u7684 skill \u6587\u4EF6").option("--force", "\u8DF3\u8FC7\u7248\u672C\u6BD4\u8F83\uFF0C\u5F3A\u5236\u91CD\u65B0\u5B89\u88C5\u5E76\u5237\u65B0 skill \u6587\u4EF6", false).option("--skip-init", "\u4EC5\u66F4\u65B0 CLI\uFF0C\u4E0D\u91CD\u65B0\u521D\u59CB\u5316 skill \u6587\u4EF6", false).action(async (opts) => {
   await runUpdate({ force: opts.force, skipInit: opts.skipInit });
 });
-program.command("init").description("\u5C06 Skill \u6587\u4EF6\u5199\u5165\u6307\u5B9A AI \u52A9\u624B\u76EE\u5F55\uFF08--ai \u9009\u62E9\u9884\u8BBE\u5E73\u53F0\uFF0C\u6216 --dir \u6307\u5B9A\u4EFB\u610F\u76EE\u5F55\uFF09").option(
+program.command("init").description("\u5C06 Skill \u6587\u4EF6\u5199\u5165 AI \u52A9\u624B\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5199\u5165\u6240\u6709\u5E73\u53F0\u7684\u9879\u76EE\u7EA7\u76EE\u5F55\uFF0C--global \u5199\u5165\u5168\u5C40\u76EE\u5F55\uFF09").option(
   "-a, --ai <targets>",
-  "\u76EE\u6807\u5E73\u53F0\uFF0C\u9017\u53F7\u5206\u9694\uFF1Acursor,claude,openclaw-workspace,openclaw-global,workbuddy-workspace,workbuddy-global,all",
-  "cursor"
+  "\u76EE\u6807\u5E73\u53F0\uFF0C\u9017\u53F7\u5206\u9694\uFF1Acursor,claude,agents,windsurf,gemini,codex,opencode,kilo,openclaw,workbuddy,all",
+  "all"
 ).option(
   "-d, --dir <path>",
-  "\u5C06 Skill \u6587\u4EF6\u76F4\u63A5\u5199\u5165\u6307\u5B9A\u76EE\u5F55\uFF08\u7EDD\u5BF9\u6216\u76F8\u5BF9\u8DEF\u5F84\uFF09\uFF0C\u4E0E --ai \u4E92\u65A5\uFF0C\u4F18\u5148\u7EA7\u66F4\u9AD8"
-).option("-f, --force", "\u8986\u76D6\u5DF2\u5B58\u5728\u7684 Skill \u6587\u4EF6", false).action(async (opts) => {
+  "\u5C06 Skill \u6587\u4EF6\u76F4\u63A5\u5199\u5165\u6307\u5B9A\u76EE\u5F55\uFF08\u7EDD\u5BF9\u6216\u76F8\u5BF9\u8DEF\u5F84\uFF09\uFF0C\u4E0E --ai/--global \u4E92\u65A5\uFF0C\u4F18\u5148\u7EA7\u66F4\u9AD8"
+).option("-g, --global", "\u5199\u5165\u6240\u6709\u5E73\u53F0\u7684\u5168\u5C40 skill \u76EE\u5F55\uFF08~/.xxx/skills/\uFF09", false).option("-f, --force", "\u8986\u76D6\u5DF2\u5B58\u5728\u7684 Skill \u6587\u4EF6", false).action(async (opts) => {
   await runInit({
     cwd: process.cwd(),
     aiTargets: opts.ai,
     dir: opts.dir,
+    global: Boolean(opts.global),
     force: Boolean(opts.force),
     apiBaseUrl: DEFAULT_API_BASE
   });

package/dist/skill/SKILL.md

@@ -9,43 +9,6 @@ compatibility: Requires siluzan-cso-cli installed and authenticated via `siluzan
 
 # siluzan-cso
 
-## 前置条件与运行时依赖
-
-使用本 Skill 前，以下组件必须已安装并就绪：
-
-### 必需二进制 / 运行时
-| 依赖 | 最低版本 | 用途 |
-|------|---------|------|
-| **Node.js** | 18+ | CLI 执行运行时以及 `node -e` 数据过滤 |
-| **npm** 或 **pnpm** | npm 8+ / pnpm 8+ | 安装 `siluzan-cso-cli` 全局包 |
-| **siluzan-cso** CLI | 与 Skill 同版本 | 所有业务操作的执行入口（由 `npm install -g siluzan-cso-cli` 安装） |
-
-### 可选二进制
-| 依赖 | 用途 |
-|------|------|
-| **ffmpeg** | `extract-cover` 命令截取视频封面帧（未安装时该命令会报错提示） |
-
-### 凭据与配置文件
-| 项目 | 位置 | 说明 |
-|------|------|------|
-| API Key 或 Token | `~/.siluzan/config.json` 中的 `apiKey` 或 `authToken` 字段 | 用于所有 CSO API 调用的鉴权。API Key 在丝路赞控制台「个人设置 → API Key 管理」创建。**请勿将此文件提交到 Git。** |
-| csoBaseUrl | `~/.siluzan/config.json` 中的 `apiBaseUrl` | CSO 后端 API 地址，默认值由 CLI 构建时写入 |
-
-### 网络端点
-本 Skill 通过 CLI 访问以下远程服务：
-| 端点 | 用途 |
-|------|------|
-| `api.siluzan.com` / `api-ci.siluzan.com` | CSO 核心 API（账号管理、发布、素材、报表等） |
-| `cso.siluzan.com` / `cso-ci.siluzan.com` | CSO 前端页面（授权回调等浏览器操作） |
-| `www.siluzan.com` / `www-ci.siluzan.com` | 丝路赞主站（注册、API Key 管理） |
-| `registry.npmjs.org` | 版本更新检查 |
-
-### 可选环境变量
-| 变量 | 说明 |
-|------|------|
-| `SILUZAN_AUTH_TOKEN` | 从环境变量读取 Token（优先级高于 config.json，CI/CD 推荐） |
-
-如果上述依赖缺失，请先参照 `references/setup.md` 完成安装与配置。
 
 ---
 
@@ -57,6 +20,16 @@ compatibility: Requires siluzan-cso-cli installed and authenticated via `siluzan
 
 ---
 
+## 可选环境变量
+
+| 变量 | 说明 |
+|------|------|
+| `SILUZAN_API_KEY` | 从环境变量读取 API Key（优先级高于 config.json，CI/CD 推荐） |
+| `SILUZAN_AUTH_TOKEN` | 从环境变量读取 JWT Token（优先级高于 config.json） |
+| `SILUZAN_DATA_PERMISSION` | 从环境变量读取数据权限标识（优先级高于 config.json） |
+
+---
+
 ## 能力范围
 
 | 业务流程 | 手段 | 说明 |

package/dist/skill/_meta.json

@@ -1,7 +1,7 @@
 {
   "slug": "siluzan-cso",
-  "version": "1.1.9-beta.2",
-  "publishedAt": 1776070442759,
+  "version": "1.1.9-beta.3",
+  "publishedAt": 1776246656610,
   "homepage": "https://www.siluzan.com",
   "source": "https://dev.azure.com/jack4it/Sammamish/_git/siluzan-skill",
   "requiredBinaries": [

package/dist/skill/references/setup.md

@@ -46,10 +46,26 @@ siluzan-cso config set --token <Token>     # 备用：设置 JWT Token
 
 API Key 获取入口：`https://cso-ci.siluzan.com/v3/foreign_trade/settings/apiKeyManagement`
 
-**Token 读取优先级（由高到低）：**
-1. 环境变量 `SILUZAN_AUTH_TOKEN`（CI/CD 推荐）
-2. `~/.siluzan/config.json` → `authToken`（`login` 写入此处）
-3. 命令行 `--token <token>`（仅紧急临时用，用后立即轮换）
+### 通过环境变量传入凭据（CI/CD 推荐）
+
+无需写入 config.json，直接通过环境变量传入：
+
+```bash
+export SILUZAN_API_KEY=<YOUR_API_KEY>       # API Key（推荐）
+# 或
+export SILUZAN_AUTH_TOKEN=<YOUR_TOKEN>      # JWT Token
+```
+
+环境变量优先级高于 config.json，适合 CI/CD、Docker 容器、自动化脚本等场景。可通过 `siluzan-cso config show` 确认当前生效的凭据来源。
+
+**凭据读取优先级（由高到低）：**
+
+| 凭据类型 | 优先级 |
+|---------|--------|
+| API Key | `SILUZAN_API_KEY` 环境变量 → `config.json` → `apiKey` |
+| JWT Token | `--token` CLI 参数 → `SILUZAN_AUTH_TOKEN` 环境变量 → `config.json` → `authToken` |
+
+> API Key 鉴权优先级高于 JWT Token，两者同时存在时使用 API Key。
 
 > **若用户已配置过凭据，不要重复询问。** 先尝试直接运行命令；只有命令返回认证失败时，才引导用户重新执行 `siluzan-cso login`。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "siluzan-cso-cli",
-  "version": "1.1.9-beta.2",
+  "version": "1.1.9-beta.3",
   "description": "Siluzan platform AI Skill CLI — multi-platform content publishing (video/image-text) for Cursor, Claude Code, and OpenClaw.",
   "type": "module",
   "bin": {