@lumi-ai-lab/harness-data 0.0.4 → 0.0.6

package/src/commands/update.js

@@ -4,10 +4,12 @@ import { confirm } from "../lib/prompt.js";
 import { findWorkspaceDir, readUserState, writeState } from "../lib/paths.js";
 import { run } from "../lib/exec.js";
 import { installToolsFromManifest, manifestDigest, readManifest } from "../lib/manifest.js";
-import { behindCount, currentCommit, dirtyPaths, submoduleCommit, submodulePointerChanged, submoduleRemoteBehind } from "../lib/git.js";
 import { packageVersion } from "../lib/package.js";
+import { platformKey } from "../lib/platform.js";
+import { githubToken, latestRelease } from "../lib/github.js";
+import { buildAndCheck, installRuntimeBundle, printDoctorSummary } from "./install.js";
 import { collectDoctor } from "./doctor.js";
-import { normalizeGitProtocol, repoProtocol, repoUrl, runGitWithProtocol, syncWikisSubmodule } from "../lib/git-auth.js";
+import { action, blank, header, ok, shortSha, skip, step, warn } from "../lib/log.js";
 
 async function npmLatest() {
   try {
@@ -20,139 +22,220 @@ async function npmLatest() {
   }
 }
 
-async function remoteManifest(workspace) {
-  const upstream = (await run("git", ["rev-parse", "--abbrev-ref", "--symbolic-full-name", "@{u}"], { cwd: workspace, allowFailure: true })).stdout.trim();
-  if (!upstream) return null;
-  const result = await run("git", ["show", `${upstream}:bootstrap/cli-manifest.json`], { cwd: workspace, allowFailure: true });
-  if (result.code !== 0 || !result.stdout.trim()) return null;
-  try {
-    return JSON.parse(result.stdout);
-  } catch {
-    return null;
-  }
+function archiveSuffix(url) {
+  if (url.endsWith(".zip")) return "zip";
+  if (url.endsWith(".tar.gz")) return "tar.gz";
+  return "";
 }
 
-function versionChanged(current, latest) {
-  return latest && latest !== current;
+function toolAssetName(tool, tag, key) {
+  const current = tool.platforms?.[key]?.url || "";
+  const suffix = archiveSuffix(current) || (key.startsWith("windows-") ? "zip" : "tar.gz");
+  return `${tool.binary}-${tag}-${key}.${suffix}`;
 }
 
-export async function checkUpdates(workspace, gitOptions = {}) {
-  const manifestPath = path.join(workspace, "bootstrap", "cli-manifest.json");
-  const currentInstaller = packageVersion();
-  const latestInstaller = await npmLatest();
-  const mainBehind = await behindCount(workspace, gitOptions);
-  const wikisBehind = await submoduleRemoteBehind(workspace, "wikis", gitOptions);
-  const manifest = fs.existsSync(manifestPath) ? readManifest(manifestPath) : { tools: [] };
-  const digest = manifestDigest(manifest);
-  const remote = await remoteManifest(workspace);
-  const remoteDigest = remote ? manifestDigest(remote) : "";
-  const state = readUserState();
-  const updates = {
-    installer: { current: currentInstaller, latest: latestInstaller, update: versionChanged(currentInstaller, latestInstaller) },
-    mainRepo: { behind: mainBehind, update: mainBehind > 0 },
-    wikis: { remoteBehind: wikisBehind, pointerChanged: await submodulePointerChanged(workspace), update: wikisBehind > 0 },
-    cli: {
-      digest,
-      remoteDigest,
-      previousDigest: state.manifestSha256 || "",
-      update: Boolean((state.manifestSha256 && state.manifestSha256 !== digest) || (remoteDigest && remoteDigest !== digest)),
-      tools: manifest.tools || [],
-      remoteTools: remote?.tools || []
-    }
+function releaseAsset(release, name) {
+  return (release.assets || []).find((asset) => asset.name === name);
+}
+
+function oneToolManifest(manifest, tool, tag, asset, key) {
+  return {
+    ...manifest,
+    tools: [{
+      ...tool,
+      version: tag,
+      platforms: {
+        [key]: {
+          url: asset.browser_download_url || `https://github.com/${tool.repo}/releases/download/${tag}/${asset.name}`,
+          sha256: ""
+        }
+      }
+    }]
   };
-  updates.wikis.update = updates.wikis.update || updates.wikis.pointerChanged;
-  updates.hasUpdates = updates.installer.update || updates.mainRepo.update || updates.wikis.update || updates.cli.update;
-  return updates;
 }
 
-function printUpdateSummary(updates) {
-  console.log("Update summary:");
-  console.log(`installer: ${updates.installer.current}${updates.installer.latest ? ` -> ${updates.installer.latest}` : " (latest unavailable)"}`);
-  console.log(`main repo: ${updates.mainRepo.behind} commits behind`);
-  console.log(`wikis: ${updates.wikis.remoteBehind} commits behind remote${updates.wikis.pointerChanged ? ", submodule pointer changed" : ""}`);
-  console.log(`CLI manifest: ${updates.cli.update ? "changed" : "unchanged or first check"}`);
-  const remoteByName = new Map(updates.cli.remoteTools.map((tool) => [tool.name, tool]));
-  for (const tool of updates.cli.tools) {
-    const remote = remoteByName.get(tool.name);
-    const target = remote && remote.version !== tool.version ? ` -> ${remote.version}` : "";
-    console.log(`  ${tool.name} ${tool.version}${target}`);
+async function maybeUpdateTool(runtimeDir, manifest, tool, options, state) {
+  const key = platformKey();
+  const release = await latestRelease(tool.repo, options);
+  const tag = release.tag_name;
+  const assetName = toolAssetName(tool, tag, key);
+  const asset = releaseAsset(release, assetName);
+  if (!asset) {
+    warn(`${tool.name} 最新 release 缺少 ${assetName}，已跳过`);
+    return null;
+  }
+  const current = state.tools?.[tool.name] || {};
+  const tagChanged = current.version && current.version !== tag;
+  const firstInstall = !current.version;
+  if (!tagChanged && !firstInstall) {
+    ok(`${tool.name} 已是最新 ${tag}`);
+    return null;
   }
+  action(`发现更新：${tool.name} ${current.version || "unknown"} -> ${tag}`);
+  if (!(await confirm(`是否更新 ${tool.name}？`, { defaultNo: true }))) {
+    skip(tool.name);
+    options.skippedUpdates?.push(`${tool.name} ${tag}`);
+    return null;
+  }
+  const updatedManifest = oneToolManifest(manifest, tool, tag, asset, key);
+  const installed = await installToolsFromManifest(runtimeDir, path.join(runtimeDir, ".bootstrap-cache", `${tool.name}-manifest.json`), {
+    ...options,
+    manifestOverride: updatedManifest
+  });
+  const result = installed.installedTools?.[tool.name] || { version: tag, asset: assetName };
+  ok(`${tool.name} 已更新到 ${tag}`);
+  return result;
 }
 
-async function updateProtocol(workspace, options) {
-  const requested = normalizeGitProtocol(options.gitProtocol);
-  if (requested !== "auto") return requested;
+async function updateWikis(runtimeDir, options, state) {
+  const wikisDir = path.join(runtimeDir, "wikis");
+  if (!githubToken(options) && state.installMode !== "github-token") {
+    skip("harness-data-wikis 为本地路径模式，请手动检查");
+    return null;
+  }
+  if (!fs.existsSync(path.join(wikisDir, ".git"))) {
+    skip("harness-data-wikis 不是 git checkout");
+    return null;
+  }
+  await run("git", ["-C", wikisDir, "fetch", "origin"]);
+  const local = (await run("git", ["-C", wikisDir, "rev-parse", "HEAD"])).stdout.trim();
+  const remote = (await run("git", ["-C", wikisDir, "rev-parse", "origin/HEAD"], { allowFailure: true })).stdout.trim();
+  if (!remote || local === remote) {
+    ok(`harness-data-wikis 已是最新 ${shortSha(local)}`);
+    return null;
+  }
+  action(`发现更新：harness-data-wikis ${shortSha(local)} -> ${shortSha(remote)}`);
+  if (!(await confirm("是否更新 harness-data-wikis？", { defaultNo: true }))) {
+    skip("harness-data-wikis");
+    options.skippedUpdates?.push(`harness-data-wikis ${shortSha(remote)}`);
+    return null;
+  }
+  await run("git", ["-C", wikisDir, "pull", "--ff-only"]);
+  const commit = (await run("git", ["-C", wikisDir, "rev-parse", "HEAD"])).stdout.trim();
+  ok(`harness-data-wikis 已更新到 ${shortSha(commit)}`);
+  return { commit };
+}
+
+export async function checkUpdates(workspace, options = {}) {
   const state = readUserState();
-  return state.gitProtocol || await repoProtocol(workspace) || "ssh";
+  const latestInstaller = await npmLatest();
+  return {
+    installer: { current: packageVersion(), latest: latestInstaller, update: Boolean(latestInstaller && latestInstaller !== packageVersion()) },
+    state,
+    hasUpdates: Boolean(latestInstaller && latestInstaller !== packageVersion())
+  };
 }
 
 export async function updateCommand(options = {}) {
-  const workspace = findWorkspaceDir(options.dir);
-  if (!fs.existsSync(workspace)) throw new Error(`workspace does not exist: ${workspace}`);
-  const mainDirty = await dirtyPaths(workspace);
-  const wikisDirty = fs.existsSync(path.join(workspace, "wikis")) ? await dirtyPaths(path.join(workspace, "wikis")) : [];
-  if (mainDirty.length || wikisDirty.length) {
-    console.error("Dirty worktree detected; update will not overwrite local changes.");
-    for (const line of mainDirty) console.error(`main: ${line}`);
-    for (const line of wikisDirty) console.error(`wikis: ${line}`);
-    process.exitCode = 1;
-    return;
+  const runtimeDir = findWorkspaceDir(options.dir);
+  if (!fs.existsSync(runtimeDir)) throw new Error(`runtime directory does not exist: ${runtimeDir}`);
+  const key = platformKey();
+  header("Harness Data 更新器", packageVersion(), [
+    `运行目录：${runtimeDir}`,
+    `平台：${key}`
+  ]);
+  const state = readUserState();
+  const manifestPath = path.join(runtimeDir, "bootstrap", "cli-manifest.json");
+  const manifest = readManifest(manifestPath);
+  let changed = false;
+  let runtimeTag = state.runtimeTag || "";
+  const nextTools = { ...(state.tools || {}) };
+  const applied = [];
+  const skipped = [];
+  const trackingOptions = { ...options, skippedUpdates: skipped };
+
+  step(1, 6, "检查 installer");
+  const latestInstaller = await npmLatest();
+  if (latestInstaller && latestInstaller !== packageVersion()) {
+    warn(`installer 有新版本 ${packageVersion()} -> ${latestInstaller}`);
+    action("请重新执行：npx @lumi-ai-lab/harness-data@latest update");
+  } else {
+    ok(`installer 已是最新 ${packageVersion()}`);
   }
-  const gitProtocol = await updateProtocol(workspace, options);
-  await syncWikisSubmodule(workspace, gitProtocol);
-  const originUrl = await repoUrl(workspace);
-  const updates = await checkUpdates(workspace, { ...options, gitProtocol });
-  printUpdateSummary(updates);
-  if (options.check) {
-    writeState(workspace, {
-      mainCommit: await currentCommit(workspace),
-      wikisCommit: await submoduleCommit(workspace),
-      manifestSha256: updates.cli.digest,
-      packageVersion: packageVersion(),
-      lastCheckAt: new Date().toISOString(),
-      gitProtocol,
-      repoUrl: originUrl
-    });
-    return updates;
+  blank();
+
+  step(2, 6, "检查 runtime bundle");
+  const runtimeRelease = await latestRelease("lumi-ai-lab/harness-data", options);
+  if (state.runtimeTag && state.runtimeTag !== runtimeRelease.tag_name) {
+    action(`发现更新：runtime bundle ${state.runtimeTag} -> ${runtimeRelease.tag_name}`);
+    if (await confirm("是否更新 runtime bundle？", { defaultNo: true })) {
+      const bundle = await installRuntimeBundle(runtimeDir, { ...trackingOptions, force: true });
+      runtimeTag = bundle.tag || runtimeRelease.tag_name;
+      changed = true;
+      applied.push(`runtime bundle ${runtimeTag}`);
+    } else {
+      skip("runtime bundle");
+      skipped.push(`runtime bundle ${runtimeRelease.tag_name}`);
+    }
+  } else {
+    ok(`runtime bundle 已是最新 ${state.runtimeTag || runtimeRelease.tag_name}`);
   }
-  if (!updates.hasUpdates) {
-    console.log("No repository or wikis updates detected.");
-    writeState(workspace, {
-      mainCommit: await currentCommit(workspace),
-      wikisCommit: await submoduleCommit(workspace),
-      manifestSha256: updates.cli.digest,
-      packageVersion: packageVersion(),
-      lastCheckAt: new Date().toISOString(),
-      gitProtocol,
-      repoUrl: originUrl
-    });
-    return updates;
+  blank();
+
+  step(3, 6, "检查 CLI 工具");
+  for (const tool of manifest.tools || []) {
+    if (state.installMode === "local-path" && tool.name !== "data-harness-cli") {
+      skip(`${tool.name} 为本地路径模式，请手动检查`);
+      continue;
+    }
+    const installed = await maybeUpdateTool(runtimeDir, manifest, tool, trackingOptions, state);
+    if (installed) {
+      nextTools[tool.name] = installed;
+      changed = true;
+      applied.push(`${tool.name} ${installed.version || ""}`.trim());
+    }
+  }
+  blank();
+
+  step(4, 6, "检查 Wikis 知识库");
+  const wikis = await updateWikis(runtimeDir, trackingOptions, state);
+  if (wikis) {
+    changed = true;
+    applied.push(`harness-data-wikis ${shortSha(wikis.commit)}`);
   }
-  if (!(await confirm(`Apply updates to ${workspace}?`, { yes: options.yes, defaultNo: true }))) throw new Error("update cancelled");
-  if (updates.mainRepo.update) {
-    await runGitWithProtocol(gitProtocol, ["pull", "--ff-only"], { ...options, cwd: workspace, stdio: "inherit" });
+  blank();
+
+  step(5, 6, "构建 Wikis 索引");
+  if (changed) {
+    await buildAndCheck(runtimeDir, trackingOptions);
+  } else {
+    skip("没有组件更新");
   }
-  if (updates.wikis.update || updates.mainRepo.update) {
-    if (!(await confirm("Update wikis submodule? This can change Agent behavior.", { yes: options.yes, defaultNo: true }))) {
-      console.warn("warning: wikis update skipped");
-    } else {
-      await syncWikisSubmodule(workspace, gitProtocol);
-      await runGitWithProtocol(gitProtocol, ["submodule", "update", "--init", "--recursive", "--remote", "wikis"], { ...options, cwd: workspace, stdio: "inherit" });
+  blank();
+
+  step(6, 6, "安装校验");
+  if (changed) {
+    const doctor = await collectDoctor(runtimeDir, trackingOptions);
+    printDoctorSummary(doctor);
+    if (doctor.checks.some((check) => !check.ok)) throw new Error("doctor failed; update is incomplete");
+    writeState(runtimeDir, {
+      ...state,
+      runtimeTag,
+      tools: nextTools,
+      manifestSha256: manifestDigest(manifest),
+      lastCheckAt: new Date().toISOString()
+    });
+    blank();
+    console.log(`更新完成：${runtimeDir}`);
+    if (applied.length) {
+      console.log("");
+      console.log("已更新：");
+      for (const item of applied) console.log(`- ${item}`);
+    }
+    if (skipped.length) {
+      console.log("");
+      console.log("已跳过：");
+      for (const item of skipped) console.log(`- ${item}`);
+    }
+  } else {
+    skip("没有组件更新");
+    writeState(runtimeDir, { ...state, lastCheckAt: new Date().toISOString() });
+    blank();
+    console.log(skipped.length ? "没有应用任何更新。" : "没有发现需要更新的内容。");
+    if (skipped.length) {
+      console.log("");
+      console.log("已跳过：");
+      for (const item of skipped) console.log(`- ${item}`);
     }
   }
-  await installToolsFromManifest(workspace, path.join(workspace, "bootstrap", "cli-manifest.json"), options);
-  await run(path.join(workspace, "bin", "data-harness-cli"), ["wikis", "build-index"], { cwd: workspace, stdio: "inherit" });
-  const doctor = await collectDoctor(workspace, options);
-  for (const check of doctor.checks) console.log(`${check.ok ? "PASS" : "FAIL"} ${check.name}`);
-  if (doctor.checks.some((check) => !check.ok)) throw new Error("doctor failed after update");
-  writeState(workspace, {
-    mainCommit: await currentCommit(workspace),
-    wikisCommit: await submoduleCommit(workspace),
-    manifestSha256: updates.cli.digest,
-    packageVersion: packageVersion(),
-    lastCheckAt: new Date().toISOString(),
-    gitProtocol,
-    repoUrl: originUrl
-  });
-  console.log(`Harness Data updated: ${workspace}`);
 }

package/src/commands/version.js

@@ -1,18 +1,18 @@
 import fs from "node:fs";
 import path from "node:path";
-import { findWorkspaceDir } from "../lib/paths.js";
-import { currentCommit, submoduleCommit } from "../lib/git.js";
+import { findWorkspaceDir, readUserState } from "../lib/paths.js";
 import { readManifest } from "../lib/manifest.js";
 import { packageVersion } from "../lib/package.js";
 
 export async function versionCommand(options = {}) {
   const workspace = findWorkspaceDir(options.dir);
   const manifestPath = path.join(workspace, "bootstrap", "cli-manifest.json");
+  const state = readUserState();
   const result = {
     installer: packageVersion(),
-    workspace,
-    mainCommit: fs.existsSync(workspace) ? await currentCommit(workspace) : "",
-    wikisCommit: fs.existsSync(workspace) ? await submoduleCommit(workspace) : "",
+    runtime: workspace,
+    runtimeTag: state.runtimeTag || "",
+    installMode: state.installMode || "",
     tools: []
   };
   if (fs.existsSync(manifestPath)) {
@@ -26,9 +26,9 @@ export async function versionCommand(options = {}) {
     console.log(JSON.stringify(result, null, 2));
   } else {
     console.log(`installer ${result.installer}`);
-    console.log(`workspace ${result.workspace}`);
-    if (result.mainCommit) console.log(`main ${result.mainCommit}`);
-    if (result.wikisCommit) console.log(`wikis ${result.wikisCommit}`);
+    console.log(`runtime ${result.runtime}`);
+    if (result.runtimeTag) console.log(`runtime bundle ${result.runtimeTag}`);
+    if (result.installMode) console.log(`install mode ${result.installMode}`);
     for (const tool of result.tools) console.log(`${tool.name} ${tool.version}`);
   }
   return result;

package/src/lib/config.js

@@ -1,5 +1,6 @@
 import fs from "node:fs";
 import path from "node:path";
+import { binaryName } from "./platform.js";
 
 export function writeLocalConfig(workspace, options = {}) {
   const configDir = path.join(workspace, "config");
@@ -9,7 +10,7 @@ export function writeLocalConfig(workspace, options = {}) {
   if ((fs.existsSync(harness) || fs.existsSync(env)) && !options.overwrite) {
     throw new Error("local config already exists; rerun interactively and confirm overwrite or remove the files");
   }
-  const bin = (name) => path.join(workspace, "bin", name).replaceAll("\\", "/");
+  const bin = (name) => path.join(workspace, "bin", binaryName(name)).replaceAll("\\", "/");
   fs.writeFileSync(harness, `paths:\n  spec: wikis/spec\n  playbooks: wikis/playbooks\n  templates: wikis/templates\n\ncli:\n  qdm_cmr_cli: ${bin("qdm-cmr-cli")}\n  qdm_indicators_cli: ${bin("qdm-indicators-cli")}\n  qdm_cas_cli: ${bin("cas-cli")}\n`);
   fs.writeFileSync(env, `export QDM_CMR_CLI="${bin("qdm-cmr-cli")}"\nexport QDM_INDICATORS_CLI="${bin("qdm-indicators-cli")}"\nexport QDM_CAS_CLI="${bin("cas-cli")}"\n`);
 }
@@ -29,9 +30,9 @@ export function validateCasConfigDir(dir) {
 
 export function linkAgents(workspace, agent) {
   const pairs = [];
-  if (agent === "claude" || agent === "both" || agent === "all") pairs.push([".agents/claude", ".claude"]);
-  if (agent === "codex" || agent === "both" || agent === "all") pairs.push([".agents/codex", ".codex"]);
-  if (agent === "pi" || agent === "all") pairs.push([".agents/pi", ".pi"]);
+  if (agent === "claude" || agent === "all") pairs.push(["agents/claude", ".claude"]);
+  if (agent === "codex" || agent === "all") pairs.push(["agents/codex", ".codex"]);
+  if (agent === "pi" || agent === "all") pairs.push(["agents/pi", ".pi"]);
   for (const [sourceRel, targetRel] of pairs) {
     const source = path.join(workspace, sourceRel);
     const target = path.join(workspace, targetRel);

package/src/lib/exec.js

@@ -4,7 +4,7 @@ export function run(command, args = [], options = {}) {
   return new Promise((resolve, reject) => {
     const child = spawn(command, args, {
       cwd: options.cwd,
-      env: { ...process.env, ...(options.env || {}) },
+      env: { ...process.env, GH_NO_UPDATE_NOTIFIER: "1", ...(options.env || {}) },
       shell: options.shell || false,
       stdio: options.stdio || "pipe"
     });

package/src/lib/git-auth.js

@@ -40,21 +40,17 @@ function httpsFailureMessage() {
   return [
     "HTTPS access to the private GitHub repositories failed.",
     "Fix by configuring a GitHub SSH key, running gh auth login, enabling Git Credential Manager,",
-    "or passing --github-token-env GITHUB_TOKEN with a token stored in that environment variable."
+    "or passing --github-token TOKEN."
   ].join(" ");
 }
 
 function tokenEnvName(options = {}) {
-  const name = options.githubTokenEnv;
-  if (!name) return "";
-  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) throw new Error("--github-token-env must be a valid environment variable name");
-  if (!process.env[name]) throw new Error(`environment variable ${name} is empty or unset`);
-  return name;
+  return options.githubToken || process.env.GITHUB_TOKEN || "";
 }
 
 async function withHttpsAuthEnv(options, callback) {
-  const name = tokenEnvName(options);
-  if (!name) return callback({ GIT_TERMINAL_PROMPT: "0" });
+  const token = tokenEnvName(options);
+  if (!token) return callback({ GIT_TERMINAL_PROMPT: "0" });
 
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), "harness-data-git-"));
   const askpass = path.join(dir, "askpass.sh");
@@ -62,7 +58,7 @@ async function withHttpsAuthEnv(options, callback) {
     "#!/bin/sh",
     "case \"$1\" in",
     "*Username*) printf '%s\\n' x-access-token ;;",
-    "*Password*) printenv \"$GITHUB_TOKEN_ENV_NAME\" ;;",
+    "*Password*) printf '%s\\n' \"$GITHUB_TOKEN_VALUE\" ;;",
     "*) printf '\\n' ;;",
     "esac",
     ""
@@ -71,7 +67,7 @@ async function withHttpsAuthEnv(options, callback) {
   try {
     return await callback({
       GIT_ASKPASS: askpass,
-      GITHUB_TOKEN_ENV_NAME: name,
+      GITHUB_TOKEN_VALUE: token,
       GIT_TERMINAL_PROMPT: "0"
     });
   } finally {

package/src/lib/github.js

@@ -0,0 +1,52 @@
+import fs from "node:fs";
+import path from "node:path";
+import { commandExists, run } from "./exec.js";
+import { download } from "./manifest.js";
+
+const userAgent = "harness-data-installer";
+
+export function githubToken(options = {}) {
+  return options.githubToken || process.env.GITHUB_TOKEN || "";
+}
+
+export async function hasGithubAuth(options = {}) {
+  if (githubToken(options)) return true;
+  if (!(await commandExists("gh"))) return false;
+  const result = await run("gh", ["auth", "status"], { allowFailure: true });
+  return result.code === 0;
+}
+
+export function githubHeaders(options = {}) {
+  const headers = { "User-Agent": userAgent };
+  const token = githubToken(options);
+  if (token) headers.Authorization = `Bearer ${token}`;
+  return headers;
+}
+
+export async function githubJson(url, options = {}) {
+  if (!githubToken(options) && await commandExists("gh")) {
+    const apiPath = new URL(url).pathname.replace(/^\/repos\//, "repos/");
+    const result = await run("gh", ["api", apiPath], { allowFailure: true });
+    if (result.code === 0 && result.stdout.trim()) return JSON.parse(result.stdout);
+  }
+  const tmp = path.join(fs.mkdtempSync(path.join(process.cwd(), ".github-api-")), "response.json");
+  try {
+    await download(url, tmp, githubHeaders(options));
+    return JSON.parse(fs.readFileSync(tmp, "utf8"));
+  } finally {
+    fs.rmSync(path.dirname(tmp), { recursive: true, force: true });
+  }
+}
+
+export async function latestRelease(repo, options = {}) {
+  return githubJson(`https://api.github.com/repos/${repo}/releases/latest`, options);
+}
+
+export function findReleaseAsset(release, name) {
+  return (release.assets || []).find((asset) => asset.name === name);
+}
+
+export async function downloadReleaseAsset(asset, file, options = {}) {
+  const headers = { ...githubHeaders(options), Accept: "application/octet-stream" };
+  await download(asset.url, file, headers);
+}

package/src/lib/log.js

@@ -0,0 +1,39 @@
+export function header(title, version, rows = []) {
+  console.log(`${title} ${version}`);
+  console.log("");
+  for (const row of rows) console.log(row);
+  if (rows.length) console.log("");
+}
+
+export function step(index, total, title) {
+  console.log(`[${index}/${total}] ${title}`);
+}
+
+export function ok(message) {
+  console.log(`通过：${message}`);
+}
+
+export function warn(message) {
+  console.warn(`提示：${message}`);
+}
+
+export function skip(message) {
+  console.log(`跳过：${message}`);
+}
+
+export function fail(message) {
+  console.log(`失败：${message}`);
+}
+
+export function action(message) {
+  console.log(message);
+}
+
+export function blank() {
+  console.log("");
+}
+
+export function shortSha(value) {
+  return value ? value.slice(0, 7) : "";
+}
+

package/src/lib/manifest.js

@@ -4,6 +4,7 @@ import https from "node:https";
 import path from "node:path";
 import { commandExists, run } from "./exec.js";
 import { platformKey } from "./platform.js";
+import { action, warn } from "./log.js";
 
 export function readManifest(file) {
   return JSON.parse(fs.readFileSync(file, "utf8"));
@@ -13,7 +14,7 @@ export function manifestDigest(manifest) {
   return crypto.createHash("sha256").update(JSON.stringify(manifest)).digest("hex");
 }
 
-function download(url, file, headers = {}) {
+export function download(url, file, headers = {}) {
   return new Promise((resolve, reject) => {
     const request = https.get(url, { headers }, (response) => {
       if ([301, 302, 307, 308].includes(response.statusCode) && response.headers.location) {
@@ -77,10 +78,7 @@ async function downloadPrivateWithGh(asset, file) {
 }
 
 function githubToken(options = {}) {
-  const name = options.githubTokenEnv;
-  if (!name) return "";
-  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) throw new Error("--github-token-env must be a valid environment variable name");
-  return process.env[name] || "";
+  return options.githubToken || process.env.GITHUB_TOKEN || "";
 }
 
 async function githubAssetApiUrl(asset, token) {
@@ -118,10 +116,9 @@ async function downloadAsset(tool, asset, file, options = {}) {
     await download(asset.url, file);
     return;
   }
-  console.log(`Downloading private ${tool.name} asset from ${tool.repo}`);
   if (await downloadPrivateWithGh(asset, file)) return;
   if (await downloadPrivateWithToken(asset, file, options)) return;
-  throw new Error(`private GitHub Release asset requires gh auth login or --github-token-env GITHUB_TOKEN: ${assetName(asset)}`);
+  throw new Error(`private GitHub Release asset requires gh auth login, GITHUB_TOKEN, or --github-token: ${assetName(asset)}`);
 }
 
 async function expectedSha256(tool, asset, options = {}) {
@@ -140,30 +137,40 @@ function fileSha256(file) {
 }
 
 export async function installToolsFromManifest(workspace, manifestPath, options = {}) {
-  const manifest = readManifest(manifestPath);
+  const manifest = options.manifestOverride || readManifest(manifestPath);
+  const only = options.tools ? new Set(options.tools) : null;
   const key = platformKey();
   const cacheDir = path.join(workspace, ".bootstrap-cache");
   const binDir = path.join(workspace, "bin");
   fs.mkdirSync(cacheDir, { recursive: true });
   fs.mkdirSync(binDir, { recursive: true });
+  const installedTools = {};
 
   for (const tool of manifest.tools || []) {
+    if (only && !only.has(tool.name)) continue;
     const asset = tool.platforms?.[key];
     if (!asset?.url) throw new Error(`manifest missing ${tool.name} asset for ${key}`);
     const archive = path.join(cacheDir, assetName(asset));
-    console.log(`Downloading ${tool.name} ${tool.version} (${key})`);
+    if (options.log !== false) action(`下载 ${tool.name} ${tool.version} (${key})`);
     await downloadAsset(tool, asset, archive, options);
     const sha = await expectedSha256(tool, asset, options);
-    if (sha && fileSha256(archive) !== sha) throw new Error(`${tool.name} sha256 mismatch`);
-    if (!sha) console.warn(`warning: ${tool.name} has no sha256; continuing without checksum`);
+    const actualSha = fileSha256(archive);
+    if (sha && actualSha !== sha) throw new Error(`${tool.name} sha256 mismatch`);
+    if (!sha) warn(`${tool.name} 未提供 sha256，已继续安装`);
     if (archive.endsWith(".zip")) {
-      await run("unzip", ["-o", archive, "-d", binDir], { stdio: "inherit" });
+      await run("unzip", ["-o", archive, "-d", binDir]);
     } else {
-      await run("tar", ["-xzf", archive, "-C", binDir], { stdio: "inherit" });
+      await run("tar", ["-xzf", archive, "-C", binDir]);
     }
     const binary = path.join(binDir, tool.binary);
     if (!fs.existsSync(binary)) throw new Error(`${tool.binary} was not extracted to bin/`);
     fs.chmodSync(binary, 0o755);
+    installedTools[tool.name] = {
+      version: tool.version || "",
+      asset: assetName(asset),
+      sha256: sha || actualSha
+    };
   }
+  Object.defineProperty(manifest, "installedTools", { value: installedTools, enumerable: false });
   return manifest;
 }