@validflow/ccneed-cli 0.1.5 → 0.1.6

package/INSTALL.md

@@ -17,6 +17,8 @@ npx @validflow/ccneed-cli@latest install --agent codex
 
 Requires Node.js 22.14+ and npm. The installer places `ccneed` in npm's global command directory, which must be on the Agent's PATH. A local install does not automatically make it available inside a remote sandbox. The installer does not read CCNeed account data, create tasks, or change Agent security settings.
 
+If GitHub downloads require a proxy, set `HTTPS_PROXY` (or `HTTP_PROXY`) in the terminal before installing. The binary downloader honors these variables and `NO_PROXY`, including their lowercase forms; no machine-specific proxy address is built into the package.
+
 `@latest` is npm's current stable release; replace it with an exact version if reproducibility matters. The installer globally installs that exact CLI and Skill version. Selected hosts receive links to the one installed Skill directory:
 
 | Host | Current-user Skill path |

package/checksums.json

@@ -1,12 +1,12 @@
 {
-  "version": "0.1.5",
+  "version": "0.1.6",
   "assets": {
-    "ccneed-0.1.5-linux-amd64": "3f59d9bf14e51f378097f899f9fed6799fa67bc9b78b3dd5702230fdbc72c628",
-    "ccneed-0.1.5-linux-arm64": "9bc4876e9caa85ff7b4f862c4d9d9300b4f4f415c4eb7dd69e8a65810f23122e",
-    "ccneed-0.1.5-darwin-amd64": "5bc5a388c470f96b803c923e1b8c89e4360cb6c42e426c028d4686a73b65c58c",
-    "ccneed-0.1.5-darwin-arm64": "63a0eaf4e442144260534118b629122f425db011140e7fe00985f3221d4be33b",
-    "ccneed-0.1.5-windows-amd64.exe": "e05fd6c1b7fd575bf8241146a7dbe83ff02247ed6e3d4a7c928865752b6c0f5b",
-    "ccneed-0.1.5-windows-arm64.exe": "047b8dd4270ba655f83e5783ea72c7900a9999c038a1cf8247712524f09e3c1d"
+    "ccneed-0.1.6-linux-amd64": "7f9f2657720f6199793cc9a5c647891ae4946f7f597934bfbf259beb9fd9284a",
+    "ccneed-0.1.6-linux-arm64": "5caf91d3c22b211275354ca744f3250d8a941cf250b1733deeec33ebe9e00f36",
+    "ccneed-0.1.6-darwin-amd64": "77e7b8fc5f881194837831b79614ba6fdce40ab181d0fd2fff501bb201fb49ce",
+    "ccneed-0.1.6-darwin-arm64": "dd3055ea6c7b928b3d73538c1758448f7ae7905cac73e3180def671eaaa3c235",
+    "ccneed-0.1.6-windows-amd64.exe": "c2705edd83a7d3d4b01748f10d5d01bdac9757213085f869ab83b5947c9c59f9",
+    "ccneed-0.1.6-windows-arm64.exe": "4c1192b2277933290c287082d52176d01ec8529d71588149452d425c56a424ac"
   },
   "skill_sha256": "b72d69b63ee8772ef3a8cbe30c3eaa02cd32702ff9c47a75f656250cbdee4d0f"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@validflow/ccneed-cli",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "private": false,
   "description": "CCNeed cloud agent command-line integration",
   "license": "MIT",
@@ -8,6 +8,9 @@
   "engines": {
     "node": ">=22.14.0"
   },
+  "dependencies": {
+    "undici": "7.30.1"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/validflow/ccneed-cli.git"

package/scripts/npm/install.mjs

@@ -4,10 +4,12 @@ import { pipeline } from 'node:stream/promises';
 import { createHash, randomUUID } from 'node:crypto';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { dirname, resolve, join } from 'node:path';
+import { EnvHttpProxyAgent } from 'undici';
 
 const versionPattern = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:-rc\.(0|[1-9][0-9]*))?$/;
 const hosts = new Set(['github.com', 'release-assets.githubusercontent.com', 'objects.githubusercontent.com']);
 export const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '../..');
+let downloadDispatcher;
 
 /** assetName 将受支持的平台映射到精确版本的二进制名称。
  * Args:
@@ -29,7 +31,7 @@ export function assetName(version, platform, arch) {
 
 /** downloadAsset 下载公开 GitHub 产物，限制重定向来源、响应大小和总耗时。
  * Args:
- *   address: 安装器生成的固定 Release 下载地址，不来自服务端用户输入。
+ *   address: 安装器生成的固定 Release 下载地址；代理来自用户既有 HTTP_PROXY、HTTPS_PROXY 和 NO_PROXY 配置。
  * Returns:
  *   共享下载超时的响应流；安装器在写入时限制为 64 MiB。
  * Errors:
@@ -40,7 +42,13 @@ export async function downloadAsset(address) {
   let url = new URL(address);
   for (let hop = 0; hop < 4; hop++) {
     if (url.protocol !== 'https:' || url.username || url.password || url.port || !hosts.has(url.hostname)) throw new Error('Untrusted release redirect');
-    const response = await fetch(url, { redirect: 'manual', signal });
+    downloadDispatcher ??= new EnvHttpProxyAgent();
+    let response;
+    try {
+      response = await fetch(url, { redirect: 'manual', signal, dispatcher: downloadDispatcher });
+    } catch {
+      throw new Error('Release download failed. Check HTTPS_PROXY/HTTP_PROXY settings and access to GitHub.');
+    }
     if ([301, 302, 303, 307, 308].includes(response.status)) {
       await response.body?.cancel();
       const location = response.headers.get('location');