@ryantest/openclaw-qqbot 1.6.7-beta.2 → 1.6.7-beta.20

package/scripts/upgrade-via-npm.sh

@@ -18,15 +18,58 @@
 
 set -eo pipefail
 
-# 异常退出时清理临时文件（防止泄露或残留）
+# 确保 cwd 是一个存在的目录。
+# 当从 gateway 进程 fork 时，继承的 cwd 可能已被删除（如旧插件目录被 mv/rm），
+# 导致 openclaw CLI 启动时 process.cwd() 报 ENOENT: uv_cwd 错误。
+cd "$HOME" 2>/dev/null || cd / 2>/dev/null || true
+
+# 异常退出时清理临时文件并回滚（防止泄露或残留）
+INSTALL_COMPLETED=false  # 标记 install 是否已完成（用于区分正常退出和异常退出）
 cleanup_on_exit() {
+    local exit_code=$?
+
+    # 异常退出时同步临时配置中的 install 记录回真实配置
     if [ -n "$TEMP_CONFIG_FILE" ] && [ -f "$TEMP_CONFIG_FILE" ]; then
+        # 尝试同步 install 记录（即使异常退出也要保留）
+        node -e "
+          try {
+            const fs = require('fs');
+            const tmp = JSON.parse(fs.readFileSync('$TEMP_CONFIG_FILE', 'utf8'));
+            const real = JSON.parse(fs.readFileSync('$CONFIG_FILE', 'utf8'));
+            if (tmp.plugins && tmp.plugins.installs) {
+              if (!real.plugins) real.plugins = {};
+              real.plugins.installs = { ...(real.plugins.installs || {}), ...tmp.plugins.installs };
+            }
+            if (tmp.plugins && tmp.plugins.entries) {
+              if (!real.plugins) real.plugins = {};
+              real.plugins.entries = { ...(real.plugins.entries || {}), ...tmp.plugins.entries };
+            }
+            fs.writeFileSync('$CONFIG_FILE', JSON.stringify(real, null, 4) + '\n');
+          } catch {}
+        " 2>/dev/null || true
         rm -f "$TEMP_CONFIG_FILE" 2>/dev/null || true
     fi
-    # 异常退出时清理本次备份目录（正常流程中备份已被删除或回滚，这里是兜底）
-    if [ -n "$BACKUP_DIR" ] && [ -d "$BACKUP_DIR" ]; then
+
+    # 异常退出且 install 未完成时，回滚备份目录（而非删除）
+    if [ "$INSTALL_COMPLETED" != "true" ] && [ -n "$BACKUP_DIR" ] && [ -d "$BACKUP_DIR" ]; then
+        if [ ! -d "$EXTENSIONS_DIR/$PLUGIN_ID" ] || [ ! -f "$EXTENSIONS_DIR/$PLUGIN_ID/package.json" ]; then
+            # 插件目录不存在或不完整，回滚
+            rm -rf "$EXTENSIONS_DIR/$PLUGIN_ID" 2>/dev/null || true
+            mv "$BACKUP_DIR/$PLUGIN_ID" "$EXTENSIONS_DIR/$PLUGIN_ID" 2>/dev/null || \
+            mv "$BACKUP_DIR"/* "$EXTENSIONS_DIR/$PLUGIN_ID" 2>/dev/null || true
+            echo "  ↩️  [cleanup] 异常退出，已回滚到旧版本"
+        else
+            # 插件目录完整，清理备份
+            rm -rf "$BACKUP_DIR" 2>/dev/null || true
+        fi
+    elif [ "$INSTALL_COMPLETED" = "true" ] && [ -n "$BACKUP_DIR" ] && [ -d "$BACKUP_DIR" ]; then
+        # 正常完成，清理备份
         rm -rf "$BACKUP_DIR" 2>/dev/null || true
     fi
+
+    # 清理 openclaw install 可能残留的暂存目录（extensions 和 /tmp 中都可能存在）
+    find "${EXTENSIONS_DIR:-/dev/null}" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
+    find "${TMPDIR:-/tmp}" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
 }
 trap cleanup_on_exit EXIT
 
@@ -63,6 +106,7 @@ print_usage() {
         echo "  upgrade-via-npm.sh --self-version               # 升级到当前仓库版本"
     fi
     echo ""
+    echo "  --pkg <scope/name>    指定 npm 包名（如 ryantest/openclaw-qqbot）"
     echo "  --appid <appid>       QQ机器人 appid（首次安装时必填）"
     echo "  --secret <secret>     QQ机器人 secret（首次安装时必填）"
     echo ""
@@ -76,22 +120,17 @@ while [[ $# -gt 0 ]]; do
     case "$1" in
         --tag)
             [ -z "$2" ] && echo "❌ --tag 需要参数" && exit 1
-            _ver="${2#v}"  # 去掉 v 前缀（npm 版本号不带 v）
-            TARGET_VERSION="$_ver"
-            INSTALL_SRC="${PKG_NAME}@$_ver"
+            TARGET_VERSION="${2#v}"  # 去掉 v 前缀（npm 版本号不带 v）
             shift 2
             ;;
         --version)
             [ -z "$2" ] && echo "❌ --version 需要参数" && exit 1
-            _ver="${2#v}"  # 去掉 v 前缀（npm 版本号不带 v）
-            TARGET_VERSION="$_ver"
-            INSTALL_SRC="${PKG_NAME}@$_ver"
+            TARGET_VERSION="${2#v}"  # 去掉 v 前缀（npm 版本号不带 v）
             shift 2
             ;;
         --self-version)
             [ -z "$LOCAL_VERSION" ] && echo "❌ 无法从 package.json 读取版本" && exit 1
             TARGET_VERSION="$LOCAL_VERSION"
-            INSTALL_SRC="${PKG_NAME}@${LOCAL_VERSION}"
             shift 1
             ;;
         --appid)
@@ -104,6 +143,14 @@ while [[ $# -gt 0 ]]; do
             SECRET="$2"
             shift 2
             ;;
+        --pkg)
+            [ -z "$2" ] && echo "❌ --pkg 需要参数" && exit 1
+            _pkg="$2"
+            # 支持 "scope/name" 自动补 @
+            if [[ "$_pkg" != @* ]]; then _pkg="@$_pkg"; fi
+            PKG_NAME="$_pkg"
+            shift 2
+            ;;
         --no-restart)
             NO_RESTART=true
             shift 1
@@ -115,7 +162,12 @@ while [[ $# -gt 0 ]]; do
         *) echo "未知选项: $1"; print_usage; exit 1 ;;
     esac
 done
-INSTALL_SRC="${INSTALL_SRC:-${PKG_NAME}@latest}"
+# 参数解析完毕后统一拼接 INSTALL_SRC（确保 --pkg 无论在 --version 前后都能生效）
+if [ -n "$TARGET_VERSION" ]; then
+    INSTALL_SRC="${PKG_NAME}@${TARGET_VERSION}"
+else
+    INSTALL_SRC="${PKG_NAME}@latest"
+fi
 
 # 环境变量 fallback
 APPID="${APPID:-$QQBOT_APPID}"
@@ -171,30 +223,46 @@ echo "[1/4] 安装/升级插件..."
 #       环境变量让 plugins install/update 使用临时配置，真实配置文件不受影响。
 CONFIG_FILE="$HOME/.$CMD/$CMD.json"
 TEMP_CONFIG_FILE=""
-HAS_QQBOT_CHANNEL=false
+NEEDS_TEMP_CONFIG=false
 
 if [ -f "$CONFIG_FILE" ]; then
-    HAS_QQBOT_CHANNEL="$(node -e "
+    NEEDS_TEMP_CONFIG="$(node -e "
       try {
         const fs = require('fs');
         const cfg = JSON.parse(fs.readFileSync('$CONFIG_FILE', 'utf8'));
-        if (cfg.channels && cfg.channels.qqbot) process.stdout.write('true');
+        const hasChannel = !!(cfg.channels && cfg.channels.qqbot);
+        const hasAllow = Array.isArray(cfg.plugins?.allow) && cfg.plugins.allow.includes('$PLUGIN_ID');
+        const hasEntry = !!(cfg.plugins?.entries?.['$PLUGIN_ID']);
+        if (hasChannel || hasAllow || hasEntry) process.stdout.write('true');
       } catch {}
     " 2>/dev/null || true)"
 
-    if [ "$HAS_QQBOT_CHANNEL" = "true" ]; then
+    if [ "$NEEDS_TEMP_CONFIG" = "true" ]; then
         TEMP_CONFIG_FILE="$(mktemp)"
         node -e "
           try {
             const fs = require('fs');
             const cfg = JSON.parse(fs.readFileSync('$CONFIG_FILE', 'utf8'));
-            delete cfg.channels.qqbot;
-            if (Object.keys(cfg.channels).length === 0) delete cfg.channels;
+            // 移除 channels.qqbot（插件自定义通道，校验时会 unknown channel id）
+            if (cfg.channels?.qqbot) {
+              delete cfg.channels.qqbot;
+              if (Object.keys(cfg.channels).length === 0) delete cfg.channels;
+            }
+            // 移除 plugins.allow 中的 openclaw-qqbot（插件目录被备份后校验找不到）
+            if (Array.isArray(cfg.plugins?.allow)) {
+              cfg.plugins.allow = cfg.plugins.allow.filter(p => p !== '$PLUGIN_ID');
+              if (cfg.plugins.allow.length === 0) delete cfg.plugins.allow;
+            }
+            // 移除 plugins.entries 中的 openclaw-qqbot（同理）
+            if (cfg.plugins?.entries?.['$PLUGIN_ID']) {
+              delete cfg.plugins.entries['$PLUGIN_ID'];
+              if (Object.keys(cfg.plugins.entries).length === 0) delete cfg.plugins.entries;
+            }
             fs.writeFileSync('$TEMP_CONFIG_FILE', JSON.stringify(cfg, null, 4) + '\n');
           } catch(e) { process.exit(1); }
         " 2>/dev/null
         if [ $? -eq 0 ]; then
-            echo "  [兼容] 创建临时配置副本（不含 channels.qqbot）以通过配置校验"
+            echo "  [兼容] 创建临时配置副本（不含 channels.qqbot / plugins.allow / plugins.entries）以通过配置校验"
             export OPENCLAW_CONFIG_PATH="$TEMP_CONFIG_FILE"
         else
             echo "  ⚠️  创建临时配置失败，继续使用原配置"
@@ -207,22 +275,32 @@ fi
 # plugins install/update 可能把 install 记录写入了临时配置，需要同步回真实配置
 restore_qqbot_channel() {
     if [ -n "$TEMP_CONFIG_FILE" ] && [ -f "$TEMP_CONFIG_FILE" ]; then
-        # 将临时配置中 plugins.installs 的变更同步回真实配置
+        # 将临时配置中 plugins.installs 和 plugins.entries 的变更同步回真实配置
         node -e "
           try {
             const fs = require('fs');
             const tmp = JSON.parse(fs.readFileSync('$TEMP_CONFIG_FILE', 'utf8'));
             const real = JSON.parse(fs.readFileSync('$CONFIG_FILE', 'utf8'));
+            let changed = false;
             if (tmp.plugins && tmp.plugins.installs) {
               if (!real.plugins) real.plugins = {};
               real.plugins.installs = { ...(real.plugins.installs || {}), ...tmp.plugins.installs };
+              changed = true;
+            }
+            // 同步 plugins.entries（openclaw plugins install 会写入 entries）
+            if (tmp.plugins && tmp.plugins.entries) {
+              if (!real.plugins) real.plugins = {};
+              real.plugins.entries = { ...(real.plugins.entries || {}), ...tmp.plugins.entries };
+              changed = true;
+            }
+            if (changed) {
               fs.writeFileSync('$CONFIG_FILE', JSON.stringify(real, null, 4) + '\n');
             }
           } catch {}
         " 2>/dev/null || true
         rm -f "$TEMP_CONFIG_FILE"
         unset OPENCLAW_CONFIG_PATH
-        echo "  [兼容] 已同步 install 记录并清理临时配置副本"
+        echo "  [兼容] 已同步 install/entries 记录并清理临时配置副本"
     fi
 }
 
@@ -311,21 +389,57 @@ if [ "$UPGRADE_OK" != "true" ]; then
     echo "  执行 install: $INSTALL_SRC"
 
     if $CMD plugins install "$INSTALL_SRC" --pin 2>&1; then
-        UPGRADE_OK=true
-        echo "  ✅ install 成功"
-        # install 成功，清理备份
-        if [ -n "$BACKUP_DIR" ] && [ -d "$BACKUP_DIR" ]; then
-            rm -rf "$BACKUP_DIR"
-            echo "  已清理旧版备份"
+        # install 返回 0，但需要验证插件目录是否真的存在且完整
+        if [ -d "$EXTENSIONS_DIR/$PLUGIN_ID" ] && [ -f "$EXTENSIONS_DIR/$PLUGIN_ID/package.json" ]; then
+            UPGRADE_OK=true
+            INSTALL_COMPLETED=true
+            echo "  ✅ install 成功"
+            # install 成功，清理备份
+            if [ -n "$BACKUP_DIR" ] && [ -d "$BACKUP_DIR" ]; then
+                rm -rf "$BACKUP_DIR"
+                echo "  已清理旧版备份"
+            fi
+            # 清理 openclaw CLI install 可能留下的额外 backup 目录（extensions 内遗留 + 新路径）
+            find "$EXTENSIONS_DIR" -maxdepth 1 -name ".openclaw-qqbot-backup-*" -exec rm -rf {} + 2>/dev/null || true
+            find "${EXTENSIONS_DIR:-/dev/null}" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
+            find "${TMPDIR:-/tmp}" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
+            find "${TMPDIR:-/tmp}" -maxdepth 1 -name ".qqbot-upgrade-backup-*" -exec rm -rf {} + 2>/dev/null || true
+        else
+            echo "  ❌ install 命令返回成功但插件目录不完整"
+            echo "  [诊断] 目录存在: $([ -d "$EXTENSIONS_DIR/$PLUGIN_ID" ] && echo '是' || echo '否')"
+            echo "  [诊断] package.json 存在: $([ -f "$EXTENSIONS_DIR/$PLUGIN_ID/package.json" ] && echo '是' || echo '否')"
+            # 清理可能残留的暂存目录（extensions 和 /tmp 中都可能存在）
+            find "${EXTENSIONS_DIR:-/dev/null}" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
+            find "${TMPDIR:-/tmp}" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
+            # 回滚
+            if [ -n "$BACKUP_DIR" ] && [ -d "$BACKUP_DIR" ]; then
+                rm -rf "$EXTENSIONS_DIR/$PLUGIN_ID" 2>/dev/null || true
+                # 备份目录内可能是 PLUGIN_ID 子目录或直接是内容
+                if [ -d "$BACKUP_DIR/$PLUGIN_ID" ]; then
+                    mv "$BACKUP_DIR/$PLUGIN_ID" "$EXTENSIONS_DIR/$PLUGIN_ID"
+                else
+                    mv "$BACKUP_DIR" "$EXTENSIONS_DIR/$PLUGIN_ID"
+                fi
+                echo "  ↩️  已回滚到旧版本"
+            fi
+            restore_qqbot_channel
+            echo "QQBOT_NEW_VERSION=unknown"
+            echo "QQBOT_REPORT=❌ QQBot 安装异常（目录不完整，已回滚），请重试或手动安装"
+            exit 1
         fi
-        # 清理 openclaw CLI install 可能留下的额外 backup 目录（extensions 内遗留 + 新路径）
-        find "$EXTENSIONS_DIR" -maxdepth 1 -name ".openclaw-qqbot-backup-*" -exec rm -rf {} + 2>/dev/null || true
-        find "${TMPDIR:-/tmp}" -maxdepth 1 -name ".qqbot-upgrade-backup-*" -exec rm -rf {} + 2>/dev/null || true
     else
         echo "  ❌ install 失败"
+        # 清理可能残留的暂存目录（extensions 和 /tmp 中都可能存在）
+        find "${EXTENSIONS_DIR:-/dev/null}" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
+        find "${TMPDIR:-/tmp}" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
         # 回滚：恢复旧目录
         if [ -n "$BACKUP_DIR" ] && [ -d "$BACKUP_DIR" ]; then
-            mv "$BACKUP_DIR" "$EXTENSIONS_DIR/$PLUGIN_ID"
+            rm -rf "$EXTENSIONS_DIR/$PLUGIN_ID" 2>/dev/null || true
+            if [ -d "$BACKUP_DIR/$PLUGIN_ID" ]; then
+                mv "$BACKUP_DIR/$PLUGIN_ID" "$EXTENSIONS_DIR/$PLUGIN_ID"
+            else
+                mv "$BACKUP_DIR" "$EXTENSIONS_DIR/$PLUGIN_ID"
+            fi
             echo "  ↩️  已回滚到旧版本"
         fi
         restore_qqbot_channel

package/scripts/upgrade-via-source.sh

@@ -262,8 +262,9 @@ if lsof -i :18789 -sTCP:LISTEN >/dev/null 2>&1; then
     sleep 1
 fi
 
-# 清理之前可能残留的 staging 目录
+# 清理之前可能残留的 staging 目录（extensions 和 /tmp 中都可能存在）
 find "$HOME/.openclaw/extensions/" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
+find "${TMPDIR:-/tmp}" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
 
 # ── 清空并重新构建 dist/ ──
 # openclaw plugins install . 只做文件复制，不执行 npm lifecycle scripts。
@@ -344,13 +345,13 @@ if [ ! -f "$_INSTALL_DIR/dist/index.js" ] || [ ! -f "$_INSTALL_DIR/preload.cjs"
             echo "请先解决安装问题后再运行此脚本。"
             # 恢复 channels.qqbot 后再退出
             if [ -n "$_QQBOT_CHANNEL_STASH" ] && [ -n "$_STASH_CFG" ] && [ -f "$_STASH_CFG" ]; then
-                node -e "
-                    const fs = require('fs');
-                    const cfg = JSON.parse(fs.readFileSync('$_STASH_CFG', 'utf8'));
+                _STASH="$_QQBOT_CHANNEL_STASH" _CFG="$_STASH_CFG" node -e '
+                    const fs = require("fs");
+                    const cfg = JSON.parse(fs.readFileSync(process.env._CFG, "utf8"));
                     if (!cfg.channels) cfg.channels = {};
-                    cfg.channels.qqbot = $_QQBOT_CHANNEL_STASH;
-                    fs.writeFileSync('$_STASH_CFG', JSON.stringify(cfg, null, 4) + '\n');
-                " 2>/dev/null || true
+                    cfg.channels.qqbot = JSON.parse(process.env._STASH);
+                    fs.writeFileSync(process.env._CFG, JSON.stringify(cfg, null, 4) + "\n");
+                ' 2>/dev/null || true
             fi
             exit 1
             ;;  
@@ -398,6 +399,7 @@ else
         echo ""
         echo "  尝试自动修复: 清理残留并重试安装..."
         find "$HOME/.openclaw/extensions/" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
+        find "${TMPDIR:-/tmp}" -maxdepth 1 -name ".openclaw-install-stage-*" -exec rm -rf {} + 2>/dev/null || true
         if openclaw plugins install . 2>&1 | tee -a "$INSTALL_LOG"; then
             for _candidate_name in openclaw-qqbot qqbot openclaw-qq; do
                 if [ -d "$HOME/.openclaw/extensions/$_candidate_name" ]; then
@@ -592,11 +594,11 @@ echo "[4/6] 准备机器人通道配置..."
 # 注意：channels.qqbot 已被暂存移除，所以从 _QQBOT_CHANNEL_STASH 读取
 CURRENT_QQBOT_TOKEN=""
 if [ -n "$_QQBOT_CHANNEL_STASH" ]; then
-    CURRENT_QQBOT_TOKEN=$(node -e "
-        const ch = $_QQBOT_CHANNEL_STASH;
+    CURRENT_QQBOT_TOKEN=$(_STASH="$_QQBOT_CHANNEL_STASH" node -e '
+        const ch = JSON.parse(process.env._STASH);
         if (ch.token) { process.stdout.write(ch.token); }
-        else if (ch.appId && ch.clientSecret) { process.stdout.write(ch.appId + ':' + ch.clientSecret); }
-    " 2>/dev/null || true)
+        else if (ch.appId && ch.clientSecret) { process.stdout.write(ch.appId + ":" + ch.clientSecret); }
+    ' 2>/dev/null || true)
 fi
 
 DESIRED_QQBOT_TOKEN=""
@@ -787,34 +789,39 @@ case "$start_choice" in
 
             if [ -n "$_target_cfg" ]; then
                 # 构建完整的 channels.qqbot 对象（合并暂存配置 + 新 token + markdown）
-                node -e "
-                    const fs = require('fs');
-                    const cfg = JSON.parse(fs.readFileSync('$_target_cfg', 'utf8'));
+                # 通过环境变量传递，避免 JSON 双引号在 node -e "..." 中被 shell 错误解析
+                _STASH="$_QQBOT_CHANNEL_STASH" \
+                _DESIRED="$DESIRED_QQBOT_TOKEN" \
+                _MD="$MARKDOWN_VALUE" \
+                _CFG="$_target_cfg" \
+                node -e '
+                    const fs = require("fs");
+                    const cfg = JSON.parse(fs.readFileSync(process.env._CFG, "utf8"));
                     if (!cfg.channels) cfg.channels = {};
 
                     // 从暂存恢复基础配置
-                    const stash = '$_QQBOT_CHANNEL_STASH';
+                    const stash = process.env._STASH;
                     if (stash) {
                         try { cfg.channels.qqbot = JSON.parse(stash); } catch {}
                     }
                     if (!cfg.channels.qqbot) cfg.channels.qqbot = {};
 
                     // 覆盖 token（如果有新值）
-                    const desired = '$DESIRED_QQBOT_TOKEN';
-                    if (desired && desired.includes(':')) {
-                        const [appId, ...rest] = desired.split(':');
+                    const desired = process.env._DESIRED;
+                    if (desired && desired.includes(":")) {
+                        const [appId, ...rest] = desired.split(":");
                         cfg.channels.qqbot.appId = appId;
-                        cfg.channels.qqbot.clientSecret = rest.join(':');
+                        cfg.channels.qqbot.clientSecret = rest.join(":");
                         delete cfg.channels.qqbot.token;
                     }
 
                     // 覆盖 markdown（如果有指定）
-                    const md = '$MARKDOWN_VALUE';
-                    if (md === 'true') cfg.channels.qqbot.markdownSupport = true;
-                    else if (md === 'false') cfg.channels.qqbot.markdownSupport = false;
+                    const md = process.env._MD;
+                    if (md === "true") cfg.channels.qqbot.markdownSupport = true;
+                    else if (md === "false") cfg.channels.qqbot.markdownSupport = false;
 
-                    fs.writeFileSync('$_target_cfg', JSON.stringify(cfg, null, 4) + '\n');
-                " 2>/dev/null || true
+                    fs.writeFileSync(process.env._CFG, JSON.stringify(cfg, null, 4) + "\n");
+                ' 2>&1 || echo "  ⚠️  配置写入失败"
                 echo "  ✅ 已恢复 channels.qqbot 配置（含 token/markdown）"
                 _need_reload=1
             fi
@@ -884,13 +891,13 @@ case "$start_choice" in
         # 注意：下次 gateway 启动可能因 "unknown channel id" 失败，
         # 需要用户手动 stop → 移除 channels.qqbot → start → 恢复
         if [ -n "$_QQBOT_CHANNEL_STASH" ] && [ -n "$_STASH_CFG" ] && [ -f "$_STASH_CFG" ]; then
-            node -e "
-                const fs = require('fs');
-                const cfg = JSON.parse(fs.readFileSync('$_STASH_CFG', 'utf8'));
+            _STASH="$_QQBOT_CHANNEL_STASH" _CFG="$_STASH_CFG" node -e '
+                const fs = require("fs");
+                const cfg = JSON.parse(fs.readFileSync(process.env._CFG, "utf8"));
                 if (!cfg.channels) cfg.channels = {};
-                cfg.channels.qqbot = $_QQBOT_CHANNEL_STASH;
-                fs.writeFileSync('$_STASH_CFG', JSON.stringify(cfg, null, 4) + '\n');
-            " 2>/dev/null || true
+                cfg.channels.qqbot = JSON.parse(process.env._STASH);
+                fs.writeFileSync(process.env._CFG, JSON.stringify(cfg, null, 4) + "\n");
+            ' 2>/dev/null || true
             echo "  已恢复 channels.qqbot 配置"
         fi
         echo ""

package/src/api.ts

@@ -137,7 +137,7 @@ async function doFetchToken(appId: string, clientSecret: string): Promise<string
   const requestHeaders = { "Content-Type": "application/json", "User-Agent": PLUGIN_USER_AGENT };
   
   // 打印请求信息（隐藏敏感信息）
-  console.log(`[qqbot-api:${appId}] >>> POST ${TOKEN_URL}`);
+  console.log(`[qqbot-api:${appId}] >>> POST ${TOKEN_URL} [secret: ${clientSecret.slice(0, 6)}...len=${clientSecret.length}]`);
 
   let response: Response;
   try {