@chbo297/infoflow 2026.5.7-beta.1 → 2026.5.7-beta.3

package/README.md

@@ -37,18 +37,50 @@ bash scripts/deploy.sh
 BAIDU_NPM_REGISTRY=http://registry.npm.baidu-int.com bash scripts/deploy.sh
 ```
 
+### 首次安装（推荐命令）
+
+首次在机器上安装时，推荐使用以下两种方式。
+
+方式 A：通过独立 tools 包安装并部署（推荐，支持 `update` 子命令）
+
+```bash
+# 正式版（latest）
+npx -y @chbo297/infoflow-openclaw-tools update --version 2026.5.6 --registry https://registry.npmjs.org
+
+# Beta 版（示例）
+npx -y @chbo297/infoflow-openclaw-tools@beta update --version 2026.5.7-beta.2 --registry https://registry.npmjs.org
+```
+
+方式 B：通过 OpenClaw 插件命令安装
+
+```bash
+# 正式版
+openclaw plugins install @chbo297/infoflow@2026.5.6
+
+# Beta 版（示例）
+openclaw plugins install @chbo297/infoflow@2026.5.7-beta.2
+```
+
+安装后建议检查插件状态：
+
+```bash
+openclaw plugins list
+openclaw plugins inspect infoflow
+```
+
 ### 通过 npx 一键更新安装
 
-发布到 npm 后，可直接通过 `npx` 安装/升级到指定版本：
+发布到 npm 后，可直接通过独立 tools 包执行安装/升级：
 
 ```bash
-npm_config_registry=http://registry.npm.baidu-int.com npx -y @chbo297/infoflow update --version 2026.5.6
+npx -y @chbo297/infoflow-openclaw-tools update --version 2026.5.6 --registry https://registry.npmjs.org
 ```
 
 常用参数：
 
 - `--version <version>`: 指定安装版本（默认 `latest`）
-- `--registry <url>`: 指定 npm 源（默认读取 `npm_config_registry`，否则回退 `http://registry.npm.baidu-int.com`）
+- `--registry <url>`: 插件包下载源（默认 `https://registry.npmjs.org`）
+- `--baidu-registry <url>`: `@baidu/infoflow-sdk-nodejs` 下载源（默认读取 `npm_config_registry`，否则回退 `http://registry.npm.baidu-int.com`）
 - `--channel-id <id>`: 目标插件目录名（默认 `infoflow`，安装到 `~/.openclaw/extensions/<id>`）
 - `--dry-run`: 仅打印命令，不写入系统
 
@@ -56,6 +88,7 @@ npm_config_registry=http://registry.npm.baidu-int.com npx -y @chbo297/infoflow u
 
 - `npx ... update` 与 `bash scripts/deploy.sh` 复用同一套部署核心逻辑（依赖安装、websocket 依赖校验、构建、配置写入、按状态重启 gateway）。
 - 如果 gateway 未运行，脚本会跳过重启，仅完成插件安装与构建。
+- 插件包 `@chbo297/infoflow` 不再内置 `child_process` CLI，避免被 `openclaw plugins install` 的危险代码检测拦截。
 
 ### WebSocket 模式（可选）
 

package/package.json

@@ -1,12 +1,9 @@
 {
   "name": "@chbo297/infoflow",
-  "version": "2026.5.7-beta.1",
+  "version": "2026.5.7-beta.3",
   "description": "OpenClaw Infoflow (如流) channel plugin for Baidu enterprise messaging",
   "type": "module",
   "main": "dist/index.js",
-  "bin": {
-    "infoflow-openclaw": "dist/src/cli.js"
-  },
   "license": "MIT",
   "keywords": [
     "openclaw",
@@ -48,7 +45,7 @@
     }
   },
   "scripts": {
-    "build": "tsc -p tsconfig.build.json",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
     "typecheck": "tsc --noEmit",
     "test": "vitest run"
   },

package/dist/src/cli.js

@@ -1,157 +0,0 @@
-#!/usr/bin/env node
-import { mkdtempSync, readFileSync, rmSync } from "node:fs";
-import { homedir, tmpdir } from "node:os";
-import { dirname, join, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { spawnSync } from "node:child_process";
-const DEFAULT_REGISTRY = "http://registry.npm.baidu-int.com";
-function printHelp() {
-    console.log(`Usage:
-  npx -y @chbo297/infoflow update [options]
-
-Commands:
-  update                 Download and install/update Infoflow plugin
-
-Options:
-  --version <version>    Package version (default: latest)
-  --registry <url>       npm registry URL (default: npm_config_registry or ${DEFAULT_REGISTRY})
-  --channel-id <id>      OpenClaw channel/plugin id (default: infoflow)
-  --dry-run              Print commands without changing system
-  --source-dir <path>    Internal use: deploy directly from local source directory
-  -h, --help             Show help
-`);
-}
-function runOrFail(command, args, cwd, dryRun) {
-    const line = [command, ...args].join(" ");
-    console.log(`$ (${cwd}) ${line}`);
-    if (dryRun)
-        return;
-    const result = spawnSync(command, args, { cwd, stdio: "inherit" });
-    if (result.status !== 0) {
-        process.exit(result.status ?? 1);
-    }
-}
-function runAndCollect(command, args, cwd) {
-    const result = spawnSync(command, args, { cwd, encoding: "utf8" });
-    if (result.status !== 0) {
-        if (result.stdout)
-            process.stdout.write(result.stdout);
-        if (result.stderr)
-            process.stderr.write(result.stderr);
-        process.exit(result.status ?? 1);
-    }
-    return result.stdout ?? "";
-}
-function parseArgs(argv) {
-    const args = [...argv];
-    const command = args.shift() ?? "";
-    const options = {
-        version: "latest",
-        registry: process.env.npm_config_registry || DEFAULT_REGISTRY,
-        channelId: "infoflow",
-        dryRun: false,
-    };
-    for (let i = 0; i < args.length; i += 1) {
-        const value = args[i];
-        if (value === "--version")
-            options.version = args[++i] ?? options.version;
-        else if (value === "--registry")
-            options.registry = args[++i] ?? options.registry;
-        else if (value === "--channel-id")
-            options.channelId = args[++i] ?? options.channelId;
-        else if (value === "--source-dir")
-            options.sourceDir = args[++i];
-        else if (value === "--dry-run")
-            options.dryRun = true;
-        else if (value === "-h" || value === "--help") {
-            printHelp();
-            process.exit(0);
-        }
-        else {
-            console.error(`Unknown option: ${value}`);
-            printHelp();
-            process.exit(1);
-        }
-    }
-    return { command, options };
-}
-function installFromRegistry(options, packageName, pluginDir) {
-    const tempRoot = mkdtempSync(join(tmpdir(), "infoflow-update-"));
-    try {
-        const spec = `${packageName}@${options.version}`;
-        let tarball = "";
-        if (options.dryRun) {
-            console.log(`$ (${tempRoot}) npm pack ${spec} --registry ${options.registry} --json`);
-            tarball = "<generated-by-npm-pack>.tgz";
-        }
-        else {
-            const output = runAndCollect("npm", ["pack", spec, "--registry", options.registry, "--json"], tempRoot);
-            const parsed = JSON.parse(output);
-            tarball = parsed[0]?.filename ?? "";
-            if (!tarball) {
-                console.error("Unable to resolve packed tarball filename from npm pack output.");
-                process.exit(1);
-            }
-        }
-        runOrFail("tar", ["-xzf", tarball], tempRoot, options.dryRun);
-        runOrFail("mkdir", ["-p", pluginDir], tempRoot, options.dryRun);
-        runOrFail("rsync", ["-av", "--delete", `${join(tempRoot, "package")}/`, `${pluginDir}/`, "--exclude", "node_modules"], tempRoot, options.dryRun);
-    }
-    finally {
-        if (!options.dryRun)
-            rmSync(tempRoot, { recursive: true, force: true });
-    }
-}
-function installFromSource(options, pluginDir) {
-    const sourceDir = resolve(options.sourceDir);
-    runOrFail("mkdir", ["-p", pluginDir], sourceDir, options.dryRun);
-    runOrFail("rsync", [
-        "-av",
-        "--delete",
-        `${sourceDir}/`,
-        `${pluginDir}/`,
-        "--exclude",
-        "node_modules",
-        "--exclude",
-        "dist",
-        "--exclude",
-        ".git",
-    ], sourceDir, options.dryRun);
-}
-function main() {
-    const { command, options } = parseArgs(process.argv.slice(2));
-    if (!command) {
-        printHelp();
-        process.exit(0);
-    }
-    if (command !== "update") {
-        console.error(`Unknown command: ${command}`);
-        printHelp();
-        process.exit(1);
-    }
-    const filePath = fileURLToPath(import.meta.url);
-    const packageDir = resolve(dirname(filePath), "..", "..");
-    const pkg = JSON.parse(readFileSync(resolve(packageDir, "package.json"), "utf8"));
-    const packageName = pkg.name || "@chbo297/infoflow";
-    const pluginDir = resolve(process.env.HOME || homedir(), ".openclaw", "extensions", options.channelId);
-    if (options.sourceDir) {
-        installFromSource(options, pluginDir);
-    }
-    else {
-        installFromRegistry(options, packageName, pluginDir);
-    }
-    const commonScriptPath = join(pluginDir, "scripts", "lib", "deploy-common.sh");
-    runOrFail("bash", [
-        commonScriptPath,
-        "--plugin-dir",
-        pluginDir,
-        "--plugin-id",
-        options.channelId,
-        "--config-file",
-        resolve(process.env.HOME || homedir(), ".openclaw", "openclaw.json"),
-        "--baidu-registry",
-        options.registry,
-        ...(options.dryRun ? ["--dry-run"] : []),
-    ], pluginDir, options.dryRun);
-}
-main();