@blod-nm/1kuan-act-01-cli 0.1.3 → 0.1.5

package/README.md

@@ -22,7 +22,7 @@ act-01 config test
 
 Stored at `~/.config/act-01/config.json` (0600, atomic write). `apiKey` can also come from the `ACT01_API_KEY` environment variable. Never pass it as a CLI argument.
 
-No local config? Generate a transfer string with the bundled [config helper](./config-helper.html) (runs locally in the browser), then:
+No local config? Ask the team for a `config-helper.html` (a single local HTML page) to generate a transfer string, then:
 
 ```bash
 act-01 config import "act01w.v1.xxxx"   # prompts for the passphrase used at generation
@@ -30,15 +30,27 @@ act-01 config import "act01w.v1.xxxx"   # prompts for the passphrase used at gen
 
 Transfer strings are AES-256-GCM encrypted; the passphrase never travels with the string.
 
+## One-shot setup
+
+```bash
+ACT01_EXPORT_PASS="<passphrase>" act-01 setup --install ~/.claude/skills "<config-string>"
+```
+
+Installs the skill doc, imports the config, and prints the balance in one command
+(passphrase via env; config string also accepted on stdin or `ACT01_IMPORT_STRING`).
+`--install <dir>` writes `<dir>/act-01-ops/SKILL.md`.
+
 ## Operations
 
 ```bash
-act-01 create --mode random --total 10000 --count 50 --per-user 2 --min 100 --max 500
+act-01 redpacket check  --mode random --total 10000 --count 50 --per-user 2 --min 100 --max 500
+act-01 redpacket create --mode random --total 10000 --count 50 --per-user 2 --min 100 --max 500 --yes
 ```
 
 - Amounts are integer units, no conversion
 - Pre-flight balance check runs before execution; insufficient balance is rejected locally
 - Interactive confirm card lists every parameter before the atomic database function call
+- `create` is non-interactive only with `--yes` (otherwise it asks for confirmation)
 - `--dry-run` prints the function call without executing; `--json` for machine output
 
 ## MCP (AI client integration)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blod-nm/1kuan-act-01-cli",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "type": "module",
   "description": "Internal operations CLI: invoke preset database functions via a gateway. Zero dependencies, MCP (stdio) support.",
   "license": "MIT",
@@ -14,7 +14,6 @@
   "files": [
     "bin",
     "src",
-    "config-helper.html",
     "README.md"
   ],
   "scripts": {
@@ -26,7 +25,7 @@
     "build:all": "bun run build:js && bun run build:bin:all"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=18.3"
   },
   "keywords": [
     "cli",

package/src/main.js

@@ -3,6 +3,7 @@
  */
 
 import { parseArgs } from 'node:util'
+import { mkdirSync, writeFileSync } from 'node:fs'
 import { VERSION } from './version.js'
 import { join } from 'node:path'
 import { configPath, expandPath, loadConfig, saveConfig, decodeConfigString, encryptConfig } from './store.js'
@@ -23,8 +24,9 @@ const USAGE = `act-01 —— operations CLI(invoke preset database functions)
   config test                    连接测试(SELECT 1,验证 envId/apiKey)
   config export                  导出加密配置串(口令交互输入或 ACT01_EXPORT_PASS)
   config import <串|--stdin> [--pass <口令>]  导入配置串(加密串需口令;自动识别 三种格式)
+  setup <串|--stdin> [--install <技能根目录>]  一条命令:装技能 + 导配置 + 查余额
   mcp                            启动 MCP 服务(stdio;接入 Claude 等 AI 客户端)
-  skill                          输出 agent 技能文档(--install <dir> 写入)
+  skill                          输出 agent 技能文档(--install <技能根目录> 装成 <root>/act-01-ops/SKILL.md)
   balance                        account balance
   redpacket create               create a record(pre-flight balance check, atomic deduct)
   redpacket check                validate params(side-effect free)
@@ -150,6 +152,23 @@ async function cmdConfig(argv) {
     throw err
   }
 
+  if (sub === 'test') {
+    const config = loadConfig()
+    const apikey = resolveApikey(config, undefined)
+    if (!config.envId || !apikey) {
+      const err = new Error('配置不完整:先 config set envId 和 apiKey')
+      err.exitCode = 2
+      throw err
+    }
+    const r = await execPgsql(config, apikey, 'SELECT 1 AS ok')
+    if (!r.ok) {
+      console.error(`error: 连接测试失败 (${r.message})`)
+      return 1
+    }
+    console.log('连接测试通过(SELECT 1)')
+    return 0
+  }
+
   if (sub === 'export') {
     const config = loadConfig()
     if (!config.envId || !config.apiKey) {
@@ -317,6 +336,15 @@ function normalizeFromValues(values) {
 
 /* ---------- skill ---------- */
 
+/** 把 SKILL.md 装到 <root>/<SKILL_NAME>/SKILL.md(目录式,匹配主流 agent 技能布局) */
+function installSkill(root) {
+  const dir = join(expandPath(root), SKILL_NAME)
+  mkdirSync(dir, { recursive: true, mode: 0o755 })
+  const file = join(dir, 'SKILL.md')
+  writeFileSync(file, SKILL_MD)
+  return file
+}
+
 async function cmdSkill(argv) {
   const { values, positionals } = parseArgs({
     strict: false,
@@ -332,13 +360,9 @@ async function cmdSkill(argv) {
   }
 
   if (values.install) {
-    const { mkdirSync, writeFileSync } = await import('node:fs')
-    const dir = expandPath(values.install)
-    mkdirSync(dir, { recursive: true, mode: 0o755 })
-    const file = join(dir, 'SKILL.md')
-    writeFileSync(file, SKILL_MD)
+    const file = installSkill(values.install)
     console.log(`SKILL.md 已写入: ${file}`)
-    console.error('hint: 把该目录加入你的 agent 技能路径')
+    console.error(`hint: 已装成 <技能根目录>/${SKILL_NAME}/SKILL.md;根目录指你的 agent 扫描的那个 skills 目录`)
     return 0
   }
 
@@ -346,6 +370,72 @@ async function cmdSkill(argv) {
   return 0
 }
 
+/* ---------- setup(一条命令:装技能 + 导配置 + 查余额) ---------- */
+
+/** 解析配置串(明文/加密)、写盘;返回 { envId, apiKey } */
+function importConfig(body, passFlag) {
+  const decoded = decodeConfigString(body)
+  let cfg = decoded.config
+  if (decoded.encrypted) {
+    const pass = passFlag ?? process.env.ACT01_EXPORT_PASS
+    if (!pass) {
+      const err = new Error('加密串需要口令:用 ACT01_EXPORT_PASS 环境变量或 --pass 传入')
+      err.exitCode = 2
+      throw err
+    }
+    cfg = decoded.decode(pass)
+  }
+  if (!cfg.envId || !cfg.apiKey) {
+    const err = new Error('配置串内容不完整(缺 envId 或 apiKey)')
+    err.exitCode = 2
+    throw err
+  }
+  saveConfig({ envId: cfg.envId, apiKey: cfg.apiKey })
+  return cfg
+}
+
+async function cmdSetup(argv) {
+  const { values, positionals } = parseArgs({
+    strict: false,
+    allowPositionals: true,
+    args: argv,
+    options: { install: { type: 'string' }, pass: { type: 'string' }, json: { type: 'boolean', short: 'j' } },
+  })
+
+  let body = positionals[0] ?? process.env.ACT01_IMPORT_STRING
+  if (!body && !process.stdin.isTTY) body = await readStdinText()
+  if (!body) {
+    const err = new Error('setup 需要 <配置串>(位置参数 / stdin / ACT01_IMPORT_STRING)')
+    err.exitCode = 2
+    throw err
+  }
+
+  const cfg = importConfig(body, str(values, 'pass'))
+  const skillPath = values.install ? installSkill(values.install) : null
+
+  const account = await execPgsql(cfg, resolveApikey(cfg, undefined), ACCOUNT_SQL)
+  const wallet =
+    account.ok && account.rows?.[0]?.data?.wallet && typeof account.rows[0].data.wallet === 'object'
+      ? account.rows[0].data.wallet
+      : {}
+  const points = account.ok ? Number(wallet.points || 0) : null
+  const label = account.ok ? String(wallet.label || 'account') : null
+
+  if (values.json === true) {
+    printJson({ ok: account.ok, envId: cfg.envId, apiKeySet: true, skillPath, balance: points, account: label, error: account.ok ? null : account.message })
+  } else {
+    console.log('setup 完成:')
+    console.log(skillPath ? `  技能: SKILL.md → ${skillPath}` : '  技能: (未装;加 --install <技能根目录>)')
+    console.log(`  配置: envId ${cfg.envId},apiKey 已打码写入 0600`)
+    if (account.ok) console.log(`  余额: ${points}(${label})`)
+    else {
+      console.error(`  余额: 查询失败 (${account.message})`)
+      return 1
+    }
+  }
+  return 0
+}
+
 /* ---------- redpacket check(零副作用参数校验) ---------- */
 
 async function cmdCheck(argv) {
@@ -527,6 +617,7 @@ export async function main(argv) {
     if (cmd === 'balance') return await cmdBalance(argv.slice(1))
     if (cmd === 'mcp') return await startMcp()
     if (cmd === 'skill') return await cmdSkill(argv.slice(1))
+    if (cmd === 'setup') return await cmdSetup(argv.slice(1))
     if (cmd === 'redpacket') {
       const sub = argv[1]
       if (sub === 'create') return await cmdCreate(argv.slice(2))

package/src/skill.js

@@ -23,6 +23,11 @@ const BODY = [
   '',
   '所有命令零依赖,Node >= 18。',
   '',
+  '## 一条命令装好(推荐)',
+  '',
+  B + 'act-01 setup "<配置串>" --install <技能根目录>' + B + ' —— 一次完成:装技能 + 导配置 + 查余额,',
+  '口令走 ' + B + 'ACT01_EXPORT_PASS' + B + ' 环境变量;配置串也可走 stdin 或 ' + B + 'ACT01_IMPORT_STRING' + B + '。',
+  '',
   '## 工具面',
   '',
   '| 途径 | 命令 / MCP 工具 | 副作用 |',
@@ -51,10 +56,21 @@ const BODY = [
   '2. **确认卡**:执行前列出全部参数,等用户确认',
   '3. **库函数原子扣减**:并发/余额竞争由数据库兜底,不会扣穿',
   '',
+  '## 日常最快路径(一句大白话 → 一次确认 → 执行)',
+  '',
+  '1. ' + B + 'act-01 redpacket check <flags>' + B + ' 拿校验结果(零副作用)',
+  '2. 把校验结果逐项复述给用户,等确认',
+  '3. 确认后执行:' + B + 'act-01 redpacket create <flags> --yes' + B + '(非交互必须带 ' + B + '--yes' + B + ')',
+  '',
+  '余额为 0 属正常:create 会被预检拦下,先让用户到运营台充值。',
+  '',
+  '> 更轻的日常形态(可选):' + B + 'act-01 mcp' + B + ' 接入支持 MCP 的客户端后,参数规格在工具 schema 里,',
+  '> 不必读本文档;客户端审批弹窗即"确认卡"。',
+  '',
   '## Agent 行为规则',
   '',
   '1. **先 check 后 create**:参数没把握时,先调 redpacket_check,拿到校验报告再执行',
-  '2. **create 前必须向用户确认参数**(mode/total/count/区间/群归属),MCP 客户端会弹审批',
+  '2. **create 前必须向用户确认参数**(mode/total/count/区间/群归属);确认后执行时,**非交互(非 TTY)必须带 --yes**,否则 CLI 会拒绝(MCP 客户端则弹审批)',
   '3. **结果转述只给摘要**:packet_no、余额变化;不要猜测或编造未返回的字段',
   '4. **失败处理**:错误信息是人话(余额不足/区间错误/整除错误),原样转告用户并给出修正建议;不要重试同参数的 create',
   '5. **金额单位**:内部整数单位,不要做 ×100 或 ÷100 的换算,除非用户明确要求',
@@ -73,10 +89,10 @@ const BODY = [
   '',
   '## 配置前置',
   '',
-  '目标机器需要云开发配置(envId + apiKey)。没有配置文件时,让用户用配套网页',
-  '(config-helper.html)生成加密配置串,然后:',
+  '目标机器需要云开发配置(envId + apiKey)。没有配置时,让用户给你一条加密配置串',
+  '(团队用生成页产出),一条命令装好:',
   '',
-  B + 'act-01 config import "配置串"' + B + '(会提示输入生成时的口令)',
+  B + 'ACT01_EXPORT_PASS="<口令>" act-01 setup --install <技能根目录> "<配置串>"' + B,
   '',
 ].join('\n')
 

package/src/version.js

@@ -3,4 +3,4 @@
  * (test/version.test.js 会断言两者一致,防止再漏升)。
  */
 
-export const VERSION = '0.1.3'
+export const VERSION = '0.1.5'

package/config-helper.html

@@ -1,220 +0,0 @@
-<!doctype html>
-<html lang="zh-CN">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>act-01 配置串生成器</title>
-<style>
-  :root { color-scheme: light dark; }
-  * { box-sizing: border-box; }
-  body {
-    margin: 0; padding: 24px;
-    font: 15px/1.65 -apple-system, 'PingFang SC', 'Microsoft YaHei', system-ui, sans-serif;
-    background: light-dark(#f6f4ef, #17151f); color: light-dark(#262233, #e8e5f0);
-    font-variant-numeric: tabular-nums; -webkit-font-smoothing: antialiased;
-  }
-  .wrap { max-width: 640px; margin: 0 auto; display: grid; gap: 20px; }
-  h1 { font-size: 20px; margin: 0 0 4px; letter-spacing: -0.01em; }
-  .sub { color: light-dark(#7a7490, #9a94b0); font-size: 13px; margin: 0; }
-  .card {
-    border: 2px solid light-dark(#413a5e, #cbc5e0); border-radius: 16px;
-    padding: 20px; background: light-dark(#fffdf8, #201d2b);
-    box-shadow: 5px 5px 0 light-dark(#413a5e, #0c0a12);
-  }
-  .card h2 { font-size: 15px; margin: 0 0 12px; }
-  label { display: block; font-size: 13px; font-weight: 600; margin: 0 0 4px; }
-  label .opt { font-weight: 400; opacity: .65; }
-  input[type=text], input[type=password] {
-    width: 100%; padding: 9px 12px; font: inherit; font-size: 14px;
-    border: 2px solid light-dark(#413a5e, #cbc5e0); border-radius: 10px;
-    background: light-dark(#fff, #262233); color: inherit; margin-bottom: 12px;
-  }
-  input:focus { outline: 2px solid light-dark(#7c5cff, #a78bfa); outline-offset: 1px; }
-  button {
-    padding: 9px 18px; font: inherit; font-size: 14px; font-weight: 600;
-    border: 2px solid light-dark(#413a5e, #cbc5e0); border-radius: 999px;
-    background: light-dark(#7c5cff, #a78bfa); color: light-dark(#fff, #1a1526);
-    box-shadow: 3px 3px 0 light-dark(#413a5e, #0c0a12); cursor: pointer;
-    transition: transform 120ms cubic-bezier(0.34,1.56,0.64,1), box-shadow 120ms;
-  }
-  button:active { transform: translate(2px,2px); box-shadow: 1px 1px 0 light-dark(#413a5e, #0c0a12); }
-  button.ghost { background: transparent; color: inherit; }
-  .out {
-    font-family: ui-monospace, 'SF Mono', Menlo, monospace; font-size: 12px;
-    word-break: break-all; padding: 10px 12px; border-radius: 10px;
-    background: light-dark(#fff, #262233);
-    border: 2px solid light-dark(#413a5e, #cbc5e0); min-height: 42px; white-space: pre-wrap;
-  }
-  .row { display: flex; gap: 10px; align-items: center; }
-  .row input { flex: 1; margin-bottom: 0; }
-  .hint { font-size: 12px; opacity: .65; margin: 6px 0 0; }
-  .err { color: light-dark(#c2334d, #ff8fa3); font-size: 13px; margin: 8px 0 0; }
-  .ok { color: light-dark(#0a7d55, #4ade80); font-size: 13px; margin: 8px 0 0; }
-  code {
-    font-family: ui-monospace, Menlo, monospace; font-size: 12px;
-    background: light-dark(#efece3, #262233); padding: 2px 6px; border-radius: 6px;
-  }
-  .toggle { display: flex; gap: 14px; font-size: 13px; margin-bottom: 12px; }
-</style>
-</head>
-<body>
-<div class="wrap">
-  <header>
-    <h1>🔑 act-01 配置串生成器</h1>
-    <p class="sub">填入云开发原始配置 → 生成加密传递串。全本地计算,无网络请求,无任何存储。</p>
-  </header>
-
-  <div class="card">
-    <h2>① 填入原始配置</h2>
-    <label>envId(环境 ID)</label>
-    <input id="envId" type="text" placeholder="cloud1-xxxxxx" autocomplete="off">
-
-    <label>apiKey(腾讯云开发 API Key,需管理员权限)</label>
-    <input id="apiKey" type="password" placeholder="act- 开头或平台管理生成" autocomplete="off">
-
-    <label>口令 <span class="opt">— 加密用,导入端必须输入同一个;不含在配置串里</span></label>
-    <div class="row">
-      <input id="pass" type="password" placeholder="自己定一个,别用弱口令" autocomplete="new-password">
-      <button class="ghost" id="genPass">随机生成</button>
-    </div>
-
-    <div class="toggle">
-      <label style="margin:0;font-weight:400"><input type="radio" name="mode" value="enc" checked> 加密串(需口令解密,推荐)</label>
-      <label style="margin:0;font-weight:400"><input type="radio" name="mode" value="plain"> 明文串(便捷,可读)</label>
-    </div>
-
-    <button id="gen">生成配置串</button>
-    <p class="err" id="err" hidden></p>
-  </div>
-
-  <div class="card" id="outCard" hidden>
-    <h2>② 配置串(复制发出去)</h2>
-    <div class="out" id="out"></div>
-    <div class="row" style="margin-top:10px">
-      <button id="copy">复制</button>
-      <span class="hint" style="align-self:center">目标机器执行:<code>act-01 config import --stdin &lt; 串文件</code>(口令会提示输入)</span>
-    </div>
-  </div>
-
-  <div class="card">
-    <h2>③ 校验(可选)</h2>
-    <label>粘贴配置串</label>
-    <input id="vStr" type="text" autocomplete="off" class="mono-out">
-    <label>口令</label>
-    <input id="vPass" type="password" autocomplete="off">
-    <button class="ghost" id="verify">解密校验</button>
-    <p class="err" id="vErr" hidden></p>
-    <p class="ok" id="vOk" hidden></p>
-  </div>
-</div>
-
-<script>
-const $ = (id) => document.getElementById(id)
-const enc = new TextEncoder()
-
-function b64url(bytes) {
-  let bin = ''
-  for (const b of bytes) bin += String.fromCharCode(b)
-  return btoa(bin).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '')
-}
-
-function b64urlDecode(text) {
-  const bin = atob(text.replace(/-/g, '+').replace(/_/g, '/'))
-  return Uint8Array.from(bin, (c) => c.charCodeAt(0))
-}
-
-async function deriveKey(pass, salt) {
-  const km = await crypto.subtle.importKey('raw', enc.encode(pass), 'PBKDF2', false, ['deriveKey'])
-  return crypto.subtle.deriveKey(
-    { name: 'PBKDF2', salt, iterations: 310_000, hash: 'SHA-256' },
-    km, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt'],
-  )
-}
-
-async function encryptWeb(obj, pass) {
-  const salt = crypto.getRandomValues(new Uint8Array(16))
-  const iv = crypto.getRandomValues(new Uint8Array(12))
-  const key = await deriveKey(pass, salt)
-  const ct = new Uint8Array(await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, key, enc.encode(JSON.stringify(obj))))
-  const packed = new Uint8Array(salt.length + iv.length + ct.length)
-  packed.set(salt, 0); packed.set(iv, salt.length); packed.set(ct, salt.length + iv.length)
-  return 'act01w.v1.' + b64url(packed)
-}
-
-async function decryptWeb(str, pass) {
-  const body = str.trim()
-  const data = b64urlDecode(body.slice(body.indexOf('.') + 1))
-  if (data.length < 44) throw new Error('配置串过短或已损坏')
-  const salt = data.slice(0, 16)
-  const iv = data.slice(16, 28)
-  const rest = data.slice(28)
-  const key = await deriveKey(pass, salt)
-  const pt = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, key, rest.slice(0, rest.length - 16))
-  return JSON.parse(new TextDecoder().decode(pt))
-}
-
-function collect() {
-  const envId = $('envId').value.trim()
-  const apiKey = $('apiKey').value.trim()
-  const pass = $('pass').value
-  if (!envId) throw new Error('envId 未填写')
-  if (!apiKey) throw new Error('apiKey 未填写')
-  if ($('pass').value && pass.length < 8) throw new Error('口令至少 8 位')
-  return { config: { envId, apiKey }, pass }
-}
-
-function showErr(id, msg) {
-  const el = $(id); el.hidden = !msg; el.textContent = msg || ''
-}
-
-$('genPass').addEventListener('click', () => {
-  const bytes = crypto.getRandomValues(new Uint8Array(18))
-  let bin = ''; for (const b of bytes) bin += String.fromCharCode(b)
-  $('pass').value = btoa(bin).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '')
-})
-
-$('gen').addEventListener('click', async () => {
-  showErr('err', '')
-  $('outCard').hidden = true
-  try {
-    const { config, pass } = collect()
-    const mode = document.querySelector('input[name=mode]:checked').value
-    let out
-    if (mode === 'enc') {
-      if (!pass) throw new Error('加密模式需要口令')
-      out = await encryptWeb(config, pass)
-    } else {
-      out = 'act01plain.' + b64url(enc.encode(JSON.stringify(config)))
-    }
-    $('out').textContent = out
-    $('outCard').hidden = false
-  } catch (e) {
-    showErr('err', e.message)
-  }
-})
-
-$('copy').addEventListener('click', async () => {
-  await navigator.clipboard.writeText($('out').textContent)
-  $('copy').textContent = '已复制 ✓'
-  setTimeout(() => ($('copy').textContent = '复制'), 1200)
-})
-
-$('verify').addEventListener('click', async () => {
-  showErr('vErr', ''); $('vOk').hidden = true
-  try {
-    const str = $('vStr').value.trim()
-    const pass = $('vPass').value
-    let cfg
-    if (str.startsWith('act01w.v1.')) cfg = await decryptWeb(str, pass)
-    else if (str.startsWith('act01.v1.')) throw new Error('这是 CLI scrypt 格式串,请用 act-01 CLI 解')
-    else if (str.startsWith('act01plain.')) cfg = JSON.parse(atob(str.slice('act01plain.'.length).replace(/-/g,'+').replace(/_/g,'/')))
-    else throw new Error('无法识别的串格式')
-    $('vOk').hidden = false
-    $('vOk').textContent = `✓ 解密成功:envId=${cfg.envId},apiKey=${cfg.apiKey.slice(0, 6)}…(不回显全文)`
-  } catch (e) {
-    showErr('vErr', e.message)
-  }
-})
-</script>
-</body>
-</html>