@simonyea/holysheep-cli 2.0.5 → 2.0.6

package/README.md

@@ -134,21 +134,32 @@ hs web --aionui
 2. `<cli>/src/webui/vendor/aionui/` (developer checkout — not shipped to npm)
 3. `HOLYSHEEP_AIONUI_RUNTIME_URL` env var (advanced escape hatch — downloads + SHA256-verifies into `~/.holysheep/aionui-runtime/`)
 
-**Install the runtime yourself** (npm-only users — we do NOT ship a 154 MB bundle):
+**Install the runtime — one-command** (recommended — 21 MB prebuilt, HolySheep-auth-ready):
+
+```bash
+export HOLYSHEEP_AIONUI_RUNTIME_URL=https://mail.holysheep.ai/app/cli/aionui-runtime-v1.9.17-holysheep.tar.gz
+export HOLYSHEEP_AIONUI_RUNTIME_SHA256=d75adcea3c57c85f64b5db96d18c593f20ad150888f47283dc2da0a440fb652c
+hs web --aionui --setup-runtime
+```
+
+The fetcher downloads to `~/.holysheep/aionui-runtime/`, verifies SHA256, extracts `dist-server/` + `out/` + `package.json`, boots AionUi, and opens your browser at the bootstrap redirect (auto-logged-in with your HS API key). Runs macOS / Linux. Windows support depends on `bun` availability.
+
+**Alternative — build from AionUi source** (advanced):
 
 ```bash
-# Build from AionUi source
 git clone https://github.com/iOfficeAI/AionUi.git ~/AionUi
 cd ~/AionUi && bun install && bun run build:renderer:web && bun run build:server
 mkdir -p ~/.holysheep/aionui-runtime
 cp -R ~/AionUi/{dist-server,out,package.json} ~/.holysheep/aionui-runtime/
 hs web --aionui
 ```
+Note: upstream AionUi's `/login` still expects `{ username, password }`; the legacy wrapper path handles that via an auto-provisioned bridge admin in `~/.holysheep/aionui-bridge.json` (0600).
 
 **Recovery / advanced**
 
 - `/login` is still reachable at `http://127.0.0.1:9876/login` for direct apiKey entry.
-- To rotate credentials: `rm -rf ~/.holysheep/aionui-runtime && hs web --aionui` (or edit `~/.holysheep/config.json`).
+- To rotate credentials: `rm -rf ~/.holysheep/aionui-runtime && hs web --aionui --setup-runtime` (or edit `~/.holysheep/config.json`).
+- Startup logs showing `[AionUi] Could not find builtin src/process/resources/...` are harmless — the prebuilt tarball ships only `dist-server/` + `out/` (not the source tree), so template assistants/skills load from built-in fallbacks instead. The UI works fully; only the "source-tree" assistant templates are unavailable.
 
 ---
 
@@ -268,22 +279,33 @@ hs web --aionui
 2. `<cli>/src/webui/vendor/aionui/`（开发者本地仓库 —— npm 包不携带）
 3. `HOLYSHEEP_AIONUI_RUNTIME_URL` 环境变量（高级逃生口 —— 下载 + SHA256 校验后写入 `~/.holysheep/aionui-runtime/`）
 
-**本地安装 runtime**（npm 用户 —— 我们**不**把 154 MB 塞进包里）：
+**安装 runtime —— 一条命令**（推荐，21 MB 预编译包，内置 HolySheep Key 登录）：
+
+```bash
+export HOLYSHEEP_AIONUI_RUNTIME_URL=https://mail.holysheep.ai/app/cli/aionui-runtime-v1.9.17-holysheep.tar.gz
+export HOLYSHEEP_AIONUI_RUNTIME_SHA256=d75adcea3c57c85f64b5db96d18c593f20ad150888f47283dc2da0a440fb652c
+hs web --aionui --setup-runtime
+```
+
+fetcher 会下载到 `~/.holysheep/aionui-runtime/`，校验 SHA256，解压 `dist-server/ + out/ + package.json`，启动 AionUi，然后直接把浏览器带到 bootstrap 重定向（用你的 HS API Key 自动登录）。macOS / Linux 都行，Windows 视 `bun` 支持情况而定。
+
+**备用方案 —— 从 AionUi 源码构建**（高级用户）：
 
 ```bash
-# 从 AionUi 源码构建
 git clone https://github.com/iOfficeAI/AionUi.git ~/AionUi
 cd ~/AionUi && bun install && bun run build:renderer:web && bun run build:server
 mkdir -p ~/.holysheep/aionui-runtime
 cp -R ~/AionUi/{dist-server,out,package.json} ~/.holysheep/aionui-runtime/
 hs web --aionui
 ```
+注意：上游 AionUi 的 `/login` 仍然是账号密码模式；wrapper 会自动走 legacy 路径，在 `~/.holysheep/aionui-bridge.json` (0600) 建一个桥接管理员账号，不影响使用。
 
 **恢复 / 高级**
 
 - `/login` 仍可直接访问：`http://127.0.0.1:9876/login`，里面可以手动粘 HS API Key 再登录。
-- 要重置：`rm -rf ~/.holysheep/aionui-runtime && hs web --aionui`，或直接编辑 `~/.holysheep/config.json`。
+- 要重置：`rm -rf ~/.holysheep/aionui-runtime && hs web --aionui --setup-runtime`，或直接编辑 `~/.holysheep/config.json`。
 - runtime 缺失时：`hs web --aionui` 会打印清晰的安装指引并自动回退到 legacy WebUI，不会静默失败。
+- 启动日志里 `[AionUi] Could not find builtin src/process/resources/...` 是已知噪音 —— 预编译 tarball 只带 `dist-server/` 和 `out/`，不含源码目录，所以模板 assistants/skills 会走内置 fallback。界面完全可用，只是少几个"源码级"模板。
 
 不设置该环境变量时 `hs web` 走 legacy WebUI，**不会再打印任何黄色警告**。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@simonyea/holysheep-cli",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Claude Code/Cursor/Cline API relay for China — ¥1=$1, WeChat/Alipay payment, no credit card, no VPN. One command setup for all AI coding tools.",
   "scripts": {
     "test": "node tests/droid.test.js && node tests/workspace-store.test.js",

package/src/webui/aionui-wrapper.js

@@ -51,6 +51,16 @@ const UPSTREAM_CONNECT_TIMEOUT_MS = 30_000
 // Bootstrap token store — Map<token, { createdAt, used }>
 const bootstrapTokens = new Map()
 
+// Periodic GC so idle wrappers don't grow memory unboundedly. .unref() so the
+// timer doesn't block process exit on SIGINT. No-op if TTL-cleanup already
+// happened via the lazy path in pruneExpiredTokens().
+let tokenCleanupInterval = null
+function startTokenCleanup() {
+  if (tokenCleanupInterval) return
+  tokenCleanupInterval = setInterval(() => pruneExpiredTokens(), 60_000)
+  if (typeof tokenCleanupInterval.unref === 'function') tokenCleanupInterval.unref()
+}
+
 // Cached AionUi session cookie obtained by internal /login. Refreshed lazily.
 let cachedAionUiCookie = null
 let cachedAionUiCookieAt = 0
@@ -610,6 +620,7 @@ async function startWrapper({ port, runtimeDir, runtimeVersion, runtimeSource, b
     server.listen(port, '127.0.0.1', resolve)
   })
   log(`wrapper listening on http://127.0.0.1:${port}`)
+  startTokenCleanup()
 
   return {
     server,