@lark-project/meegle 1.0.8 → 1.0.9

package/CHANGELOG.md

@@ -8,6 +8,12 @@ versioned section on each npm release.
 
 ## [Unreleased]
 
+## [v1.0.9] - 2026-06-11
+
+### Added
+
+- `attachment +download` now performs an extra integrity check on the downloaded file and aborts — writing nothing to disk — when the file fails validation or cannot be verified. A failed check returns a `CLIENT_FILE_SIGN_MISMATCH` error and an unverifiable response returns `CLIENT_FILE_SIGN_UNVERIFIED`; both carry a retry hint.
+
 ## [v1.0.8] - 2026-06-09
 
 ### Added

package/README.md

@@ -474,6 +474,18 @@ meegle attachment +download "$URL" \
   --output ./local.pdf --overwrite
 ```
 
+**Integrity check (`+download`)**: `+download` performs an extra integrity check
+on each downloaded file and aborts — writing nothing — if the file fails
+validation or cannot be verified. On a failed check you get a
+`CLIENT_FILE_SIGN_MISMATCH` error (unverifiable response →
+`CLIENT_FILE_SIGN_UNVERIFIED`); both are transient, so just retry.
+
+**Custom headers / env routing**: any custom headers configured for the active
+profile are applied to the download GET as well as the preprocess call, so an
+environment-routing header pins the whole download to the same environment. Auth
+headers are stripped before the GET so the token never reaches the
+object-storage host.
+
 `+upload` returns a JSON object with the file token and metadata:
 
 ```json

package/README.zh-CN.md

@@ -468,6 +468,15 @@ meegle attachment +download "$URL" \
   --output ./local.pdf --overwrite
 ```
 
+**完整性校验（`+download`）**：`+download` 会对下载的文件做一次额外的完整性校验，
+若校验失败或无法校验则中止下载、不写任何文件。校验不通过时返回
+`CLIENT_FILE_SIGN_MISMATCH` 错误（无法校验时为 `CLIENT_FILE_SIGN_UNVERIFIED`）；
+两者都是临时问题，重试即可。
+
+**自定义头 / 环境路由**：当前 profile 配置的自定义头会同时作用于下载 GET 与预处理调用，
+从而用环境路由头把整条下载固定到同一环境。GET 前会剥掉 auth 相关头，
+确保 token 不会发到对象存储所在的主机。
+
 `+upload` 输出 JSON 对象，包含 file_token 与文件元信息：
 
 ```json

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-project/meegle",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "Agent-First CLI for Meegle (Lark Project)",
   "license": "MIT",
   "homepage": "https://github.com/larksuite/meegle-cli#readme",