@misaka-net/misakanet-setup 0.5.0 → 0.5.2

package/README.md

@@ -9,7 +9,7 @@ npx @misaka-net/misakanet-setup
 ```
 
 Then **close and reopen the assistant window** (the new MCP server loads on restart) and ask
-something with an error in it, e.g. "pip install timeout 是什么原因" — it should search the
+a distinctive fragment of an error, e.g. "switch vision model" or "tool call permission denied" — it should search the
 knowledge base on its own instead of guessing.
 
 ## What it installs, and why all three
@@ -34,6 +34,9 @@ npx @misaka-net/misakanet-setup --no-register # read-only, no anonymous token
 npx @misaka-net/misakanet-setup --upgrade     # same as installing the latest (the command is idempotent)
                                              # re-running also *refreshes* an older hook (the previous copy
                                              # is kept as ~/.misakanet-agent/hook.mjs.misakanet.bak)
+npx @misaka-net/misakanet-setup --report      # this machine's state as YAML, safe to paste in public
+                                             # (token value never printed, home paths written as ~;
+                                             #  two blank fields are yours to fill — see the bounty)
 npx @misaka-net/misakanet-setup --voice       # opt-in: a cue when a search hits, another when it misses
                                              # (Claude Code: a PostToolUse hook; mute later with MISAKANET_VOICE=0)
 npx @misaka-net/misakanet-setup --uninstall   # remove exactly what it added

package/bin/misakanet-setup.mjs

@@ -103,7 +103,7 @@ function readText(path) {
  * meant to prevent is now caught in CI instead, by a test that binds this literal to the
  * manifest — a failing test is a better place for that than a request header.
  */
-const VERSION = '0.5.0';
+const VERSION = '0.5.2';
 
 function backup(path) {
   if (DRY || !readText(path)) return;
@@ -466,7 +466,17 @@ async function installClaude(hookPath, bearer) {
           need('语音钩子：找到了播放器但没有找到音频文件 → 重装一次 npx 包即可（其它功能不受影响）');
         }
       }
-      const post = settings.hooks.PostToolUse || [];
+      let post = settings.hooks.PostToolUse || [];
+      // Upgrade path: 0.4.2 shipped this entry *without* a matcher, which never fires. Treat a
+      // matcher-less entry of ours as stale rather than "already installed", or re-running the
+      // installer would leave a hook that stays silent forever (the exact failure this release
+      // is about).
+      const stale = post.filter((e) => JSON.stringify(e).includes('voice-hook') && e.matcher !== '*');
+      if (stale.length) {
+        post = post.filter((e) => !stale.includes(e));
+        settings.hooks.PostToolUse = post;
+        changed = true;
+      }
       if (!JSON.stringify(post).includes('voice-hook')) {
         // `matcher: '*'` is load-bearing, not cosmetic: measured on 2026-09-16, a PostToolUse
         // entry **without** a matcher never fired in this host, while the same command with
@@ -583,7 +593,16 @@ const STATE_VERSION_FILE = 'version';
  * hit is a lesson about that very failure, and tests/test_onboarding_example.py keeps it that
  * way offline (plus a check that this literal is not duplicated back into the messages).
  */
-const ONBOARDING_QUERY = 'pip install timeout';
+// Three examples, not one, and all three are *distinctive fragments* rather than sentences.
+//
+// Two lessons are baked in here. A single narrow example (the old "pip install timeout") made the
+// corpus look one topic deep, so a new user's first impression undersold it. And the natural-language
+// form of a question ("如何切换识图模型") returns nothing at all, because the corpus is indexed by
+// error text and keywords — the same thing the rules block tells the agent to send. So these teach
+// the usage while they demonstrate the value, and every one of them is checked offline by
+// tests/test_onboarding_example.py: it fails if a new user's first hit is not a lesson about the
+// question we told them to ask.
+const ONBOARDING_QUERIES = ["switch vision model", "context window exceeded", "tool call permission denied"];
 const REGISTRY_LATEST = process.env.MISAKANET_REGISTRY_URL
   || 'https://registry.npmjs.org/@misaka-net%2fmisakanet-setup/latest';
 
@@ -865,6 +884,9 @@ async function installOpenclaw(bearer) {
   ok(`OpenClaw：注册 MCP（streamable-http）→ ${cfg}`);
 }
 
+// The last endpoint probe, recorded so `--report` can print it without probing twice.
+let lastProbe = { reachable: false, tools: 0 };
+
 async function verify() {
   let allOk = true;
   // Handshake, not a search. `tools/list` proves the endpoint speaks MCP and answers, and it
@@ -875,6 +897,7 @@ async function verify() {
   // network was broken (found 2026-09-15 by running the agent chain test on this machine).
   const probe = await mcpRequest('tools/list', {}, 6000, probeEndpoint());
   const tools = Array.isArray(probe?.tools) ? probe.tools : [];
+  lastProbe = { reachable: tools.length > 0, tools: tools.length };
   if (tools.length) {
     ok(`端点可达：${ENDPOINT}（MCP 握手成功，${tools.length} 个工具）`);
   } else if (probe && (probe.error || probe.protocolVersion || probe.serverInfo)) {
@@ -1113,6 +1136,88 @@ function uninstall() {
   }
 }
 
+/**
+ * `--report`: this machine's state as YAML, safe to paste into a public issue.
+ *
+ * Why it exists: the bounty that asks strangers' machines to run the installer also asks them to
+ * report back — and a report that a human has to assemble by hand is (a) rarely sent and (b)
+ * usually containing their token. So the tool prints its own evidence, redacted by construction,
+ * and leaves only the two things it cannot know (which tools the *agent* sees, and a line of
+ * live-call evidence) as empty fields for the reporter to fill.
+ *
+ * Invariants: the token value never appears (only present/absent); every home path is written as
+ * `~`; no hostname, no IP, no user name. `redact()` is deliberately blunt and applied to every
+ * string, including the messages assembled by the checks.
+ */
+function redact(value) {
+  return String(value)
+    .split(HOME).join('~')
+    .replace(/mcp_[A-Za-z0-9_-]{8,}/g, '<REDACTED>')
+    .replace(/sk-[A-Za-z0-9_-]{8,}/g, '<REDACTED>')
+    .replace(/Bearer [A-Za-z0-9_.-]{8,}/gi, 'Bearer <REDACTED>');
+}
+
+function voiceStatus() {
+  try {
+    const settings = readJson(join(HOME, '.claude', 'settings.json'), null);
+    const buckets = settings?.hooks?.PostToolUse;
+    if (!Array.isArray(buckets)) return 'absent';
+    const ours = buckets.filter((entry) => JSON.stringify(entry).includes('voice-hook'));
+    if (!ours.length) return 'absent';
+    return ours.some((entry) => entry.matcher === '*') ? 'on' : 'stale';
+  } catch {
+    return 'unknown';
+  }
+}
+
+function platformName() {
+  if (process.platform === 'win32') return 'windows';
+  if (process.platform === 'darwin') return 'macos';
+  if (process.env.WSL_DISTRO_NAME || process.env.WSL_INTEROP) return 'wsl2';
+  return process.platform; // linux
+}
+
+function distroName() {
+  try {
+    const release = readFileSync('/etc/os-release', 'utf8');
+    const id = release.match(/^ID="?([a-z0-9._-]+)"?$/m);
+    return id ? id[1] : 'unknown';
+  } catch {
+    return 'n/a';
+  }
+}
+
+async function report() {
+  const allOk = await verify();
+  const agents = AGENTS.filter((agent) => detect(agent));
+  const token = existsSync(join(stateDir(), 'token'));
+  const lines = [
+    '# MisakaNet setup report — safe to paste in public; the two empty fields at the end are',
+    '# for you to fill (they are the only parts this tool cannot know).',
+    'schema: misakanet-setup-report/1',
+    `setup-version: ${VERSION}`,
+    `os: ${platformName()}`,
+    `distro: ${distroName()}`,
+    `arch: ${process.arch}`,
+    `node: ${process.version}`,
+    `detected-agents: [${agents.join(', ')}]`,
+    `verify: ${allOk ? 'READY' : 'NOT READY'}`,
+    `endpoint-reachable: ${lastProbe.reachable}`,
+    `endpoint-tools: ${lastProbe.tools}`,
+    `token: ${token ? 'present' : 'absent'}`,
+    `hook: ${existsSync(join(stateDir(), 'hook.mjs')) ? 'present' : 'absent'}`,
+    `voice: ${voiceStatus()}`,
+    `open-items: ${manual.length}`,
+    ...(manual.length
+      ? ['open-items-detail:', ...manual.map((m) => `  - ${redact(m)}`)]
+      : []),
+    '# Fill these two in (see the bounty for how):',
+    'tools-visible: {}          # e.g. {codex: 7} — from `codex mcp list` / `codewhale mcp tools`',
+    'live-call-evidence: ""     # one line your agent printed when it called misakanet_search',
+  ];
+  console.log(lines.join('\n'));
+}
+
 // ── main ─────────────────────────────────────────────────────────────
 function render() {
   const out = [];
@@ -1122,9 +1227,15 @@ function render() {
   return out.join('\n');
 }
 
-const mode = has('--uninstall') ? 'uninstall' : (has('--verify') ? 'verify' : 'install');
-console.log(`MisakaNet 安装程序（npx 版）${DRY ? '（--dry-run，不会写任何文件）' : ''}${has('--upgrade') ? '（--upgrade：与安装等价，覆盖安装即升级）' : ''}`);
-console.log(`家目录：${HOME}\n`);
+const mode = has('--uninstall') ? 'uninstall'
+  : (has('--report') ? 'report'
+  : (has('--verify') ? 'verify' : 'install'));
+if (mode !== 'report') {
+  // The banner names the home directory, which is exactly the kind of thing that gets pasted
+  // along with a report — so `--report` prints only the report.
+  console.log(`MisakaNet 安装程序（npx 版）${DRY ? '（--dry-run，不会写任何文件）' : ''}${has('--upgrade') ? '（--upgrade：与安装等价，覆盖安装即升级）' : ''}`);
+  console.log(`家目录：${HOME}\n`);
+}
 
 if (mode === 'uninstall') {
   uninstall();
@@ -1133,10 +1244,18 @@ if (mode === 'uninstall') {
   process.exit(0);
 }
 
+if (mode === 'report') {
+  // Reporting must work before an install too: a bot's first useful data point is often "this
+  // machine has no agent config at all". Exit 0 even when NOT READY — the report is evidence,
+  // not a gate.
+  await report();
+  process.exit(0);
+}
+
 if (mode === 'verify') {
   const allOk = await verify();
   console.log(render());
-  console.log(`\n结论：${allOk ? `READY —— 打开一个新会话，问它「${ONBOARDING_QUERY} 是什么原因」` : 'NOT READY —— 上面每条 ! 都给了修复动作'}`);
+  console.log(`\n结论：${allOk ? `READY —— 打开一个新会话，问它「${ONBOARDING_QUERIES[0]}」这类带报错原文的片段` : 'NOT READY —— 上面每条 ! 都给了修复动作'}`);
   process.exit(allOk ? 0 : 1);
 }
 
@@ -1165,6 +1284,6 @@ console.log(render());
 console.log(`
 接下来：
   1) **把这个助手窗口关掉再打开一次**（新功能要重开会话才生效）
-  2) 随便问一句带报错的：「${ONBOARDING_QUERY} 是什么原因」——它应该先去查经验库
+  2) 随便挑一句带报错原文的片段问它（例如「${ONBOARDING_QUERIES[0]}」「${ONBOARDING_QUERIES[1]}」「${ONBOARDING_QUERIES[2]}」）——它应该先去查经验库
   3) 想确认状态：npx @misaka-net/misakanet-setup --verify
   4) 想关掉：npx @misaka-net/misakanet-setup --uninstall`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misaka-net/misakanet-setup",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "One-command setup: teach your Claude Code / Codex / Hermes / OpenClaw / codewhale to search MisakaNet failure lessons before repeating a mistake, and to distil the session at a checkpoint.",
   "bin": {
     "misakanet-setup": "bin/misakanet-setup.mjs"