@workclaw/cli 1.0.320 → 1.0.322

package/dist/{index-CzXh8eTR.js → index-ZySzMX4-.js}

@@ -3,47 +3,41 @@ import path, { resolve, dirname } from "node:path";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
 import { Command } from "commander";
-import { exec, execSync } from "node:child_process";
 import boxen from "boxen";
 import chalk from "chalk";
 import inquirer from "inquirer";
+import { Debug } from "@mingto/debug";
+import { execSync, exec } from "node:child_process";
 import semver from "semver";
 import { z as z$1 } from "zod";
 import fs from "node:fs/promises";
-import tar from "tar";
 import ora from "ora";
+import tar from "tar";
 import axios from "axios";
-let isDebug = false;
-function setDebug(debug) {
-  isDebug = debug;
-}
-function debugLog(...args) {
-  if (isDebug) {
-    console.log(chalk.gray(`[DEBUG]`), ...args);
+import os from "node:os";
+import crypto from "node:crypto";
+const debug = new Debug();
+function setDebug(enabled) {
+  if (enabled) {
+    debug.enable();
+  } else {
+    debug.disable();
   }
 }
-function validateOpenclawPath(openclawPath) {
-  debugLog(`[路径验证] 开始验证路径: ${openclawPath}`);
-  if (!path.isAbsolute(openclawPath)) {
-    debugLog(`[路径验证] 失败: 路径不是绝对路径`);
-    throw new Error(`路径必须是绝对路径，当前输入: ${openclawPath}`);
-  }
-  const invalidChars = /[<>"|?*]/.test(openclawPath);
-  if (invalidChars) {
-    debugLog(`[路径验证] 失败: 路径包含特殊字符`);
-    throw new Error('路径不能包含特殊字符: < > " | ? *');
-  }
-  debugLog(`[路径验证] 通过: ${openclawPath}`);
+function debugLog(...args) {
 }
-const ipv4Schema = z$1.ipv4({
-  message: "请输入正确的 IP 地址格式，例如: 192.168.1.100"
-});
 const ERROR_CODES$1 = {
-  APP_KEY_REQUIRED: "APP_KEY_REQUIRED",
-  APP_SECRET_REQUIRED: "APP_SECRET_REQUIRED",
+  PHONE_REQUIRED: "PHONE_REQUIRED",
+  USER_PASS_REQUIRED: "USER_PASS_REQUIRED",
+  LOGIN_FAILED: "LOGIN_FAILED",
+  GET_BOUND_CONFIG_FAILED: "GET_BOUND_CONFIG_FAILED",
   NODE_VERSION_LOW: "NODE_VERSION_LOW",
+  NODE_NOT_FOUND: "NODE_NOT_FOUND",
   NPM_NOT_FOUND: "NPM_NOT_FOUND",
   NPM_INSTALL_FAILED: "NPM_INSTALL_FAILED",
+  CONFIG_WRITE_FAILED: "CONFIG_WRITE_FAILED",
+  HTTP_ERROR: "HTTP_ERROR",
+  NETWORK_ERROR: "NETWORK_ERROR",
   INVALID_OPENCLAW_PATH: "INVALID_OPENCLAW_PATH",
   INVALID_ARGUMENT: "INVALID_ARGUMENT"
 };
@@ -54,6 +48,64 @@ let AppError$1 = class AppError extends Error {
     this.name = "AppError";
   }
 };
+function checkEnv() {
+  const nodeVersion = execSync("node --version", { stdio: "pipe" }).toString().trim();
+  if (!semver.gte(nodeVersion, "18.0.0")) {
+    throw new AppError$1(ERROR_CODES$1.NODE_VERSION_LOW, `Node.js 版本需要 >= 18.0.0，当前版本: ${nodeVersion}`);
+  }
+  try {
+    const npmVersion = execSync("npm --version", { stdio: "pipe" }).toString().trim();
+    debugLog(`[环境检查] npm 版本: ${npmVersion}`);
+    debugLog("[环境检查] npm 检测通过");
+  } catch {
+    throw new AppError$1(ERROR_CODES$1.NPM_NOT_FOUND, "未检测到 npm，请先安装 Node.js 和 npm");
+  }
+}
+const EnvironmentSchema = z$1.enum(["test", "prod", "custom"], {
+  message: "环境类型必须是 test、prod 或 custom"
+});
+const ipv4Schema = z$1.ipv4({
+  message: "请输入正确的 IP 地址格式，例如: 192.168.1.100"
+});
+const phoneSchema = z$1.string().regex(/^1[3-9]\d{9}$/, {
+  message: "请输入正确的手机号码"
+});
+const userPassSchema = z$1.string().min(1, {
+  message: "用户密码不能为空"
+});
+const appKeySchema = z$1.string().min(1, {
+  message: "AppKey 不能为空"
+});
+const appSecretSchema = z$1.string().min(1, {
+  message: "AppSecret 不能为空"
+});
+const absolutePathSchema = z$1.string().refine(
+  (value) => {
+    return path.isAbsolute(value);
+  },
+  {
+    message: "路径必须是绝对路径"
+  }
+);
+const windowsPathSchema = z$1.string().refine(
+  (value) => !/[<>"|?*]/.test(value),
+  {
+    message: '路径不能包含特殊字符: < > " | ? *'
+  }
+);
+const openclawPathSchema = absolutePathSchema.and(windowsPathSchema);
+const pluginVersionSchema = z$1.string().optional();
+const wsUrlSchema = z$1.string().url({
+  message: "请输入有效的 WebSocket URL"
+}).optional();
+z$1.boolean();
+function validateOpenclawPath(openclawPath) {
+  const result = openclawPathSchema.safeParse(openclawPath);
+  if (!result.success) {
+    debugLog(`[路径验证] 失败: ${result.error.issues[0].message}`);
+    throw new Error(result.error.issues[0].message);
+  }
+}
 const CONFIG = {
   PLUGIN_NAME: "openclaw-workclaw",
   DEFAULT_BASE_URL: "https://workbrain.cn/backend-api",
@@ -116,6 +168,20 @@ function getConfig(env, customIp) {
   }
   return CONFIG;
 }
+const ERROR_CODES = {
+  APP_KEY_REQUIRED: "APP_KEY_REQUIRED",
+  APP_SECRET_REQUIRED: "APP_SECRET_REQUIRED",
+  NPM_INSTALL_FAILED: "NPM_INSTALL_FAILED",
+  INVALID_OPENCLAW_PATH: "INVALID_OPENCLAW_PATH",
+  INVALID_ARGUMENT: "INVALID_ARGUMENT"
+};
+class AppError2 extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "AppError";
+  }
+}
 function getHomeDir$1() {
   return process$1.env.HOME || process$1.env.USERPROFILE || "";
 }
@@ -134,12 +200,20 @@ function execAsync$1(command, options) {
 function deepMerge$1(target, source) {
   const result = { ...target };
   for (const key in source) {
-    const sourceValue = source[key];
-    const targetValue = target[key];
-    if (sourceValue !== void 0 && sourceValue !== null && typeof sourceValue === "object" && !Array.isArray(sourceValue) && typeof targetValue === "object" && targetValue !== null && !Array.isArray(targetValue)) {
-      result[key] = deepMerge$1(targetValue, sourceValue);
-    } else if (sourceValue !== void 0) {
-      result[key] = sourceValue;
+    if (Object.prototype.hasOwnProperty.call(source, key)) {
+      const sourceValue = source[key];
+      const targetValue = target[key];
+      if (Array.isArray(sourceValue) && Array.isArray(targetValue)) {
+        const mergedArray = [.../* @__PURE__ */ new Set([...targetValue, ...sourceValue])];
+        result[key] = mergedArray;
+      } else if (sourceValue !== void 0 && sourceValue !== null && typeof sourceValue === "object" && !Array.isArray(sourceValue) && typeof targetValue === "object" && targetValue !== null && !Array.isArray(targetValue)) {
+        result[key] = deepMerge$1(
+          targetValue,
+          sourceValue
+        );
+      } else if (sourceValue !== void 0) {
+        result[key] = sourceValue;
+      }
     }
   }
   return result;
@@ -152,25 +226,21 @@ class BoxInstaller {
   spinner;
   prefixText = "";
   validateConfig() {
-    debugLog("[验证配置] 检查 appKey 和 appSecret...");
     if (!this.config.appKey) {
-      throw new AppError$1(ERROR_CODES$1.APP_KEY_REQUIRED, "AppKey 不能为空，请使用 --app-key 参数");
+      throw new AppError2(ERROR_CODES.APP_KEY_REQUIRED, "AppKey 不能为空，请使用 --app-key 参数");
     }
     if (!this.config.appSecret) {
-      throw new AppError$1(ERROR_CODES$1.APP_SECRET_REQUIRED, "AppSecret 不能为空，请使用 --app-secret 参数");
+      throw new AppError2(ERROR_CODES.APP_SECRET_REQUIRED, "AppSecret 不能为空，请使用 --app-secret 参数");
     }
     if (this.config.env === "custom") {
-      debugLog("[验证配置] 检查自定义环境 IP...");
       if (!this.config.customIp) {
-        throw new AppError$1(ERROR_CODES$1.INVALID_ARGUMENT, "自定义环境必须提供 --customIp 参数");
+        throw new AppError2(ERROR_CODES.INVALID_ARGUMENT, "自定义环境必须提供 --customIp 参数");
       }
       const result = ipv4Schema.safeParse(this.config.customIp);
       if (!result.success) {
-        throw new AppError$1(ERROR_CODES$1.INVALID_ARGUMENT, result.error.issues[0].message);
+        throw new AppError2(ERROR_CODES.INVALID_ARGUMENT, result.error.issues[0].message);
       }
-      debugLog("[验证配置] 自定义环境 IP 验证通过");
     }
-    debugLog("[验证配置] 配置检查通过");
   }
   getPaths() {
     const env = this.config.env || "test";
@@ -183,7 +253,7 @@ class BoxInstaller {
         validateOpenclawPath(this.config.openclawPath);
         debugLog("[路径验证] 通过");
       } catch (error) {
-        throw new AppError$1(ERROR_CODES$1.INVALID_OPENCLAW_PATH, error.message);
+        throw new AppError2(ERROR_CODES.INVALID_OPENCLAW_PATH, error.message);
       }
       baseDir = this.config.openclawPath;
     } else {
@@ -207,7 +277,6 @@ class BoxInstaller {
   updateSpinner(text) {
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan(text);
-    debugLog(`[Spinner] ${text}`);
   }
   getPrefixText() {
     return this.prefixText;
@@ -238,7 +307,6 @@ class BoxInstaller {
     }
   }
   async doCleanOldFiles(paths) {
-    debugLog("[清理旧版本] 开始清理旧版本...");
     this.prefixText += chalk.green(`  ✓ 开始清理旧版本
 `);
     this.updateSpinner("正在清理旧版本...");
@@ -250,7 +318,6 @@ class BoxInstaller {
 `);
       debugLog("[清理旧版本] 旧版本清理成功");
     } catch {
-      debugLog("[清理旧版本] 无旧版本需要清理");
       this.prefixText += chalk.green(`  ✓ 无旧版本需要清理
 `);
     }
@@ -258,30 +325,24 @@ class BoxInstaller {
       await fs.access(paths.temp);
       await fs.rm(paths.temp, { recursive: true, force: true });
     } catch {
-      debugLog("[清理旧版本] 无临时目录需要清理");
     }
   }
   async doDownloadFromNpm() {
     const paths = this.getPaths();
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在准备安装目录...");
-    debugLog("[下载插件] 创建扩展目录...");
     await fs.mkdir(paths.extensions, { recursive: true });
     debugLog(`[下载插件] 扩展目录: ${paths.extensions}`);
     const tempDir = path.join(paths.temp, `install-${Date.now()}`);
-    debugLog(`[下载插件] 创建临时目录: ${tempDir}`);
     await fs.mkdir(tempDir, { recursive: true });
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在下载插件...");
-    debugLog("[下载插件] 执行 npm pack 下载源码包");
-    debugLog(`[下载插件] 工作目录: ${tempDir}`);
     const maxRetries = 3;
     let lastError = "";
     let tarballPath = "";
     for (let i = 1; i <= maxRetries; i++) {
       this.spinner.prefixText = this.prefixText;
       this.spinner.text = chalk.cyan(`正在下载 (${i}/${maxRetries})...`);
-      debugLog(`[下载插件] 第 ${i} 次尝试下载 tarball...`);
       try {
         const packageName = this.getPackageName();
         debugLog(`[下载插件] 下载包名: ${packageName}`);
@@ -297,16 +358,14 @@ class BoxInstaller {
         break;
       } catch (error) {
         lastError = error.message || "未知错误";
-        debugLog(`[下载插件] 第 ${i} 次尝试失败: ${lastError}`);
         if (i < maxRetries) {
           this.spinner.text = chalk.cyan(`下载失败，3秒后重试...`);
-          debugLog("[下载插件] 等待 3 秒后重试...");
           await new Promise((resolve2) => setTimeout(resolve2, 3e3));
         }
       }
     }
     if (!tarballPath || !await fs.access(tarballPath).then(() => true).catch(() => false)) {
-      throw new AppError$1(ERROR_CODES$1.NPM_INSTALL_FAILED, `tarball 下载失败: ${lastError}`);
+      throw new AppError2(ERROR_CODES.NPM_INSTALL_FAILED, `tarball 下载失败: ${lastError}`);
     }
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在解压插件...");
@@ -321,17 +380,15 @@ class BoxInstaller {
       });
       debugLog("[下载插件] tarball 解压成功");
     } catch (error) {
-      throw new AppError$1(ERROR_CODES$1.NPM_INSTALL_FAILED, `tarball 解压失败: ${error.message}`);
+      throw new AppError2(ERROR_CODES.NPM_INSTALL_FAILED, `tarball 解压失败: ${error.message}`);
     }
     const pluginPath = path.join(paths.target, "package.json");
     const pluginExists = await fs.access(pluginPath).then(() => true).catch(() => false);
     if (!pluginExists) {
-      throw new AppError$1(ERROR_CODES$1.NPM_INSTALL_FAILED, "插件解压后未找到 package.json");
+      throw new AppError2(ERROR_CODES.NPM_INSTALL_FAILED, "插件解压后未找到 package.json");
     }
-    debugLog("[下载插件] 插件解压成功");
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在安装依赖...");
-    debugLog("[下载插件] 执行 npm install 安装生产环境依赖");
     try {
       await execAsync$1("npm install --omit=dev --ignore-scripts --quiet", {
         cwd: paths.target,
@@ -340,11 +397,7 @@ class BoxInstaller {
       debugLog("[下载插件] npm install 执行成功");
     } catch (error) {
       const errorMsg = error.message || "";
-      if (errorMsg.includes("npm warn") || errorMsg.includes("deprecated")) {
-        debugLog("[下载插件] npm install 有警告但可能成功，继续流程");
-      } else {
-        debugLog(`[下载插件] npm install 失败: ${errorMsg}`);
-      }
+      if (errorMsg.includes("npm warn") || errorMsg.includes("deprecated")) ;
     }
     this.prefixText += chalk.green(`  ✓ 插件安装完成
 `);
@@ -352,11 +405,9 @@ class BoxInstaller {
       await fs.rm(tempDir, { recursive: true, force: true });
       debugLog("[下载插件] 清理临时目录完成");
     } catch {
-      debugLog("[下载插件] 清理临时目录失败（忽略）");
     }
   }
   async doUpdateConfig(paths) {
-    debugLog("[更新配置] 开始更新配置...");
     this.prefixText += chalk.green(`  ✓ 开始更新配置
 `);
     this.updateSpinner("正在生成配置...");
@@ -366,9 +417,8 @@ class BoxInstaller {
       originalConfig = JSON.parse(content);
       debugLog("[更新配置] 读取原有配置成功");
     } catch {
-      debugLog("[更新配置] 无原有配置");
     }
-    const config = getConfig(this.config.env);
+    const config = getConfig(this.config.env || "test", this.config.customIp);
     const newConfig = {
       // diagnostics: 诊断配置
       diagnostics: {
@@ -385,7 +435,7 @@ class BoxInstaller {
       // models: 模型配置
       models: {
         // 配置合并模式：'merge' 合并 | 'replace' 替换
-        mode: "merge",
+        mode: "replace",
         providers: {
           "siliconflow-minimax": {
             // 模型 API 基础地址
@@ -503,8 +553,6 @@ class BoxInstaller {
         "openclaw-workclaw": {
           // 启用通道
           enabled: true,
-          // 连接模式：'websocket' | 'http'
-          connectionMode: "websocket",
           // 应用密钥
           appKey: this.config.appKey,
           // 应用密钥
@@ -589,6 +637,9 @@ class BoxInstaller {
       },
       // plugins: 插件配置
       plugins: {
+        load: {
+          paths: [paths.extensions]
+        },
         allow: [config.PLUGIN_NAME],
         installs: {
           [config.PLUGIN_NAME]: {
@@ -604,36 +655,16 @@ class BoxInstaller {
     };
     const finalConfig = deepMerge$1(originalConfig, newConfig);
     this.updateSpinner("正在写入配置...");
-    debugLog("[更新配置] 写入配置文件...");
     await fs.writeFile(paths.config, JSON.stringify(finalConfig, null, 2), "utf-8");
     this.prefixText += chalk.green(`  ✓ 配置文件更新成功
 `);
     debugLog(`[更新配置] 配置文件写入成功: ${paths.config}`);
   }
 }
-function checkEnv$1() {
-  debugLog("[环境检查] 检测 Node.js 版本...");
-  const nodeVersion = execSync("node --version", { stdio: "pipe" }).toString().trim();
-  debugLog(`[环境检查] Node.js 版本: ${nodeVersion}`);
-  if (!semver.gte(nodeVersion, "18.0.0")) {
-    throw new AppError$1(ERROR_CODES$1.NODE_VERSION_LOW, `Node.js 版本需要 >= 18.0.0，当前版本: ${nodeVersion}`);
-  }
-  debugLog("[环境检查] Node.js 版本检查通过");
-  debugLog("[环境检查] 检测 npm...");
-  try {
-    const npmVersion = execSync("npm --version", { stdio: "pipe" }).toString().trim();
-    debugLog(`[环境检查] npm 版本: ${npmVersion}`);
-    debugLog("[环境检查] npm 检测通过");
-  } catch {
-    throw new AppError$1(ERROR_CODES$1.NPM_NOT_FOUND, "未检测到 npm，请先安装 Node.js 和 npm");
-  }
-}
 async function createBoxCommand(options) {
   setDebug(!!options.debug);
-  debugLog("[盒子安装] 开始处理...");
   debugLog(`[盒子安装] 参数: env=${options.env}, appKey=${options.appKey ? "***" : "未提供"}, customIp=${options.customIp}, debug=${options.debug}`);
-  checkEnv$1();
-  debugLog("[盒子安装] 环境检查通过");
+  checkEnv();
   try {
     let env = options.env;
     let appKey = options.appKey;
@@ -663,8 +694,9 @@ async function createBoxCommand(options) {
         name: "appKey",
         message: chalk.cyan("请输入 AppKey:"),
         validate: (value) => {
-          if (!value || value.trim() === "") {
-            return chalk.red("AppKey 不能为空");
+          const result = appKeySchema.safeParse(value);
+          if (!result.success) {
+            return chalk.red(result.error.issues[0].message);
           }
           return true;
         }
@@ -679,8 +711,9 @@ async function createBoxCommand(options) {
         name: "appSecret",
         message: chalk.cyan("请输入 AppSecret:"),
         validate: (value) => {
-          if (!value || value.trim() === "") {
-            return chalk.red("AppSecret 不能为空");
+          const result = appSecretSchema.safeParse(value);
+          if (!result.success) {
+            return chalk.red(result.error.issues[0].message);
           }
           return true;
         }
@@ -765,31 +798,10 @@ async function createBoxCommand(options) {
 function registerCommands$1(program2) {
   program2.command("box").description("盒子设备安装（无需登录）").option("-e, --env <env>", "环境 (test/prod/custom)").option("--app-key <appKey>", "App Key").option("--app-secret <appSecret>", "App Secret").option("--customIp <ip>", "自定义后端 IP（仅 custom 环境生效）").option("--ws-url <url>", "自定义 WebSocket URL（仅 custom 环境生效，默认自动生成）").option("--plugin-version <plugin-version>", "插件版本号（默认最新版）").option("--openclaw-path <path>", "OpenClaw 安装目录路径（默认 ~/.openclaw）").option("--debug", "开启调试日志").action(createBoxCommand);
 }
-const ERROR_CODES = {
-  PHONE_REQUIRED: "PHONE_REQUIRED",
-  USER_PASS_REQUIRED: "USER_PASS_REQUIRED",
-  LOGIN_FAILED: "LOGIN_FAILED",
-  GET_BOUND_CONFIG_FAILED: "GET_BOUND_CONFIG_FAILED",
-  NODE_VERSION_LOW: "NODE_VERSION_LOW",
-  NODE_NOT_FOUND: "NODE_NOT_FOUND",
-  NPM_NOT_FOUND: "NPM_NOT_FOUND",
-  NPM_INSTALL_FAILED: "NPM_INSTALL_FAILED",
-  CONFIG_WRITE_FAILED: "CONFIG_WRITE_FAILED",
-  HTTP_ERROR: "HTTP_ERROR",
-  NETWORK_ERROR: "NETWORK_ERROR",
-  INVALID_OPENCLAW_PATH: "INVALID_OPENCLAW_PATH",
-  INVALID_ARGUMENT: "INVALID_ARGUMENT"
-};
-class AppError2 extends Error {
-  constructor(code, message) {
-    super(message);
-    this.code = code;
-    this.name = "AppError";
-  }
-}
-function createHttpClient() {
+function createHttpClient(baseURL) {
   return axios.create({
-    timeout: 1e4,
+    baseURL,
+    timeout: 3e4,
     headers: {
       "Content-Type": "application/json"
     }
@@ -797,7 +809,6 @@ function createHttpClient() {
 }
 async function httpPost(url, data, config) {
   const client = createHttpClient();
-  debugLog(`[HTTP POST] 请求地址: ${url}`);
   debugLog(`[HTTP POST] 请求参数: ${JSON.stringify(data)}`);
   debugLog(`[HTTP POST] 请求头: ${JSON.stringify(config?.headers || {})}`);
   try {
@@ -816,28 +827,23 @@ async function httpPost(url, data, config) {
       debugLog(`[HTTP POST] 响应状态文本: ${axiosError.response.statusText}`);
       debugLog(`[HTTP POST] 响应数据: ${JSON.stringify(responseData)}`);
       if (typeof responseData === "string") {
-        throw new AppError2(ERROR_CODES.HTTP_ERROR, `请求失败 (${axiosError.response.status}): ${responseData}`);
+        throw new AppError$1(ERROR_CODES$1.HTTP_ERROR, `请求失败 (${axiosError.response.status}): ${responseData}`);
       } else if (responseData && typeof responseData === "object" && "message" in responseData) {
-        throw new AppError2(ERROR_CODES.HTTP_ERROR, `请求失败 (${axiosError.response.status}): ${responseData.message}`);
+        throw new AppError$1(ERROR_CODES$1.HTTP_ERROR, `请求失败 (${axiosError.response.status}): ${responseData.message}`);
       } else {
-        throw new AppError2(ERROR_CODES.HTTP_ERROR, `请求失败 (${axiosError.response.status}): ${axiosError.response.statusText}`);
+        throw new AppError$1(ERROR_CODES$1.HTTP_ERROR, `请求失败 (${axiosError.response.status}): ${axiosError.response.statusText}`);
       }
     } else if (axiosError.request) {
-      debugLog(`[HTTP POST] 未收到响应`);
       debugLog(`[HTTP POST] 错误信息: ${axiosError.message}`);
-      throw new AppError2(ERROR_CODES.NETWORK_ERROR, `网络错误: ${axiosError.message}`);
+      throw new AppError$1(ERROR_CODES$1.NETWORK_ERROR, `网络错误: ${axiosError.message}`);
     } else {
-      debugLog(`[HTTP POST] 请求配置错误`);
       debugLog(`[HTTP POST] 错误信息: ${axiosError.message}`);
-      throw new AppError2(ERROR_CODES.HTTP_ERROR, `请求配置错误: ${axiosError.message}`);
+      throw new AppError$1(ERROR_CODES$1.HTTP_ERROR, `请求配置错误: ${axiosError.message}`);
     }
   }
 }
 async function login(phone, password, config) {
   const url = `${config.API.TUZAI_BASE_URL}/user/login/pass`;
-  debugLog("[登录] 开始登录...");
-  debugLog(`[登录] 请求地址: ${url}`);
-  debugLog(`[登录] 请求参数: phone=${phone}, password=***`);
   try {
     const response = await httpPost(url, {
       phone,
@@ -850,25 +856,22 @@ async function login(phone, password, config) {
       return data.data.token;
     }
     debugLog("[登录] 登录失败");
-    throw new AppError2(ERROR_CODES.LOGIN_FAILED, data.message || "登录失败");
+    throw new AppError$1(ERROR_CODES$1.LOGIN_FAILED, data.message || "登录失败");
   } catch (error) {
-    if (error instanceof AppError2) {
+    if (error instanceof AppError$1) {
       throw error;
     }
     debugLog(`[登录] 发生错误: ${error.message}`);
-    throw new AppError2(ERROR_CODES.LOGIN_FAILED, error.message);
+    throw new AppError$1(ERROR_CODES$1.LOGIN_FAILED, error.message);
   }
 }
-async function fetchBoundConfig(token, phone, config) {
+async function fetchBoundConfig(token, phone, localCode, config) {
   const url = `${config.API.TUZAI_BASE_URL}/work-bot/local/bound/init`;
-  debugLog("[获取绑定配置] 开始获取绑定配置...");
-  debugLog(`[获取绑定配置] 请求地址: ${url}`);
-  debugLog(`[获取绑定配置] 请求参数: phone=${phone}, localCode=001`);
   debugLog(`[获取绑定配置] 请求头: Authorization=${token.substring(0, 20)}...`);
   try {
     const response = await httpPost(url, {
       phone,
-      localCode: "001"
+      localCode
     }, {
       headers: {
         Authorization: token
@@ -894,20 +897,48 @@ async function fetchBoundConfig(token, phone, config) {
       debugLog(`[获取绑定配置] modelApiBaseUrl: ${boundConfig.modelApiBaseUrl || "undefined"}`);
       if (!boundConfig.appKey || !boundConfig.appSecret || !boundConfig.agentId) {
         debugLog("[获取绑定配置] 缺少必要字段");
-        throw new AppError2(ERROR_CODES.GET_BOUND_CONFIG_FAILED, "获取绑定配置失败：缺少必要字段");
+        throw new AppError$1(ERROR_CODES$1.GET_BOUND_CONFIG_FAILED, "获取绑定配置失败：缺少必要字段");
       }
       return boundConfig;
     }
     debugLog("[获取绑定配置] 获取绑定配置失败");
-    throw new AppError2(ERROR_CODES.GET_BOUND_CONFIG_FAILED, data.message || data.msg || "获取绑定配置失败");
+    throw new AppError$1(ERROR_CODES$1.GET_BOUND_CONFIG_FAILED, data.message || data.msg || "获取绑定配置失败");
   } catch (error) {
-    if (error instanceof AppError2) {
+    if (error instanceof AppError$1) {
       throw error;
     }
     debugLog(`[获取绑定配置] 发生错误: ${error.message}`);
-    throw new AppError2(ERROR_CODES.GET_BOUND_CONFIG_FAILED, error.message);
+    throw new AppError$1(ERROR_CODES$1.GET_BOUND_CONFIG_FAILED, error.message);
   }
 }
+const LocalInstallerConfigSchema = z$1.object({
+  env: EnvironmentSchema.optional(),
+  customIp: ipv4Schema.optional(),
+  wsUrl: wsUrlSchema,
+  phone: phoneSchema,
+  userPass: userPassSchema,
+  pluginVersion: pluginVersionSchema,
+  openclawPath: openclawPathSchema.optional()
+}).refine(
+  (data) => {
+    if (data.env === "custom") {
+      return data.customIp !== void 0 && data.customIp !== "";
+    }
+    return true;
+  },
+  {
+    message: "自定义环境必须提供 customIp",
+    path: ["customIp"]
+  }
+);
+z$1.object({
+  appKey: z$1.string(),
+  appSecret: z$1.string(),
+  userId: z$1.string().optional(),
+  agentId: z$1.string(),
+  modelApiKey: z$1.string().optional(),
+  modelApiBaseUrl: z$1.string().optional()
+});
 var BI_RM = "0123456789abcdefghijklmnopqrstuvwxyz";
 function int2char(n) {
   return BI_RM.charAt(n);
@@ -4798,6 +4829,29 @@ function rsaEncrypt(txt) {
   const result = encrypt.encrypt(txt);
   return result || null;
 }
+function generateMachineId() {
+  const info = [
+    os.hostname(),
+    // 主机名
+    os.platform(),
+    // 平台
+    os.arch(),
+    // 架构
+    os.totalmem(),
+    // 总内存
+    os.cpus().length,
+    // CPU 核数
+    os.cpus()[0]?.model || "",
+    // CPU 型号
+    os.release()
+    // 系统版本
+  ].join("|");
+  const hash = crypto.createHash("sha256").update(info).digest("hex");
+  return hash.substring(0, 16).toUpperCase();
+}
+function buildLocalCode(phone, machineId) {
+  return `${phone}-${machineId}`;
+}
 function getHomeDir() {
   return process$1.env.HOME || process$1.env.USERPROFILE || "";
 }
@@ -4816,12 +4870,20 @@ function execAsync(command, options) {
 function deepMerge(target, source) {
   const result = { ...target };
   for (const key in source) {
-    const sourceValue = source[key];
-    const targetValue = target[key];
-    if (sourceValue !== void 0 && sourceValue !== null && typeof sourceValue === "object" && !Array.isArray(sourceValue) && typeof targetValue === "object" && targetValue !== null && !Array.isArray(targetValue)) {
-      result[key] = deepMerge(targetValue, sourceValue);
-    } else if (sourceValue !== void 0) {
-      result[key] = sourceValue;
+    if (Object.prototype.hasOwnProperty.call(source, key)) {
+      const sourceValue = source[key];
+      const targetValue = target[key];
+      if (Array.isArray(sourceValue) && Array.isArray(targetValue)) {
+        const mergedArray = [.../* @__PURE__ */ new Set([...targetValue, ...sourceValue])];
+        result[key] = mergedArray;
+      } else if (sourceValue !== void 0 && sourceValue !== null && typeof sourceValue === "object" && !Array.isArray(sourceValue) && typeof targetValue === "object" && targetValue !== null && !Array.isArray(targetValue)) {
+        result[key] = deepMerge(
+          targetValue,
+          sourceValue
+        );
+      } else if (sourceValue !== void 0) {
+        result[key] = sourceValue;
+      }
     }
   }
   return result;
@@ -4831,38 +4893,32 @@ class LocalInstaller {
   prefixText = "";
   config;
   envConfig;
+  /**
+   * 构造函数
+   */
   constructor(config) {
     this.config = config;
     const env = this.config.env || "test";
     this.envConfig = getConfig(env, this.config.customIp);
     this.spinner = ora({ color: "cyan" }).start();
   }
+  /**
+   * 验证安装配置
+   */
   validateConfig() {
-    debugLog("[验证配置] 检查手机号码和密码...");
-    if (!this.config.phone) {
-      throw new AppError2(ERROR_CODES.PHONE_REQUIRED, "手机号码不能为空，请使用 --phone 参数");
-    }
-    if (!this.config.userPass) {
-      throw new AppError2(ERROR_CODES.USER_PASS_REQUIRED, "用户密码不能为空，请使用 --user-pass 参数");
-    }
-    if (this.config.env === "custom") {
-      debugLog("[验证配置] 检查自定义环境 IP...");
-      if (!this.config.customIp) {
-        throw new AppError2(ERROR_CODES.INVALID_ARGUMENT, "自定义环境必须提供 --custom-ip 参数");
-      }
-      const result = ipv4Schema.safeParse(this.config.customIp);
-      if (!result.success) {
-        throw new AppError2(ERROR_CODES.INVALID_ARGUMENT, result.error.issues[0].message);
-      }
-      debugLog("[验证配置] 自定义环境 IP 验证通过");
+    const result = LocalInstallerConfigSchema.safeParse(this.config);
+    if (!result.success) {
+      debugLog(`[验证配置] 验证失败: ${result.error.issues[0].message}`);
+      throw new AppError$1(ERROR_CODES$1.INVALID_ARGUMENT, result.error.issues[0].message);
     }
-    debugLog("[验证配置] 配置验证通过");
   }
+  /**
+   * 执行安装流程
+   */
   async install() {
     try {
       debugLog("[安装开始]");
       this.validateConfig();
-      const env = this.config.env || "test";
       let baseDir;
       if (this.config.openclawPath) {
         debugLog(`[路径验证] 验证自定义路径: ${this.config.openclawPath}`);
@@ -4870,7 +4926,7 @@ class LocalInstaller {
           validateOpenclawPath(this.config.openclawPath);
           debugLog("[路径验证] 通过");
         } catch (error) {
-          throw new AppError2(ERROR_CODES.INVALID_OPENCLAW_PATH, error.message);
+          throw new AppError$1(ERROR_CODES$1.INVALID_OPENCLAW_PATH, error.message);
         }
         baseDir = this.config.openclawPath;
       } else {
@@ -4890,8 +4946,12 @@ class LocalInstaller {
       debugLog(`[路径配置] target=${paths.target}`);
       debugLog(`[路径配置] config=${paths.config}`);
       debugLog(`[路径配置] workspace=${paths.workspace}`);
+      const machineId = generateMachineId();
+      const localCode = buildLocalCode(this.config.phone, machineId);
+      debugLog(`[机器码] machineId=${machineId}`);
+      debugLog(`[机器码] localCode=${localCode}`);
       const token = await this.doLogin();
-      const boundConfig = await this.doFetchBoundConfig(token);
+      const boundConfig = await this.doFetchBoundConfig(token, localCode);
       await this.doCleanOldFiles(paths.target);
       await this.doDownloadFromNpm(paths);
       await this.doUpdateConfig(paths, boundConfig);
@@ -4907,47 +4967,55 @@ class LocalInstaller {
       throw error;
     }
   }
+  /**
+   * 获取前缀文本（用于显示安装进度）
+   */
   getPrefixText() {
     return this.prefixText;
   }
+  /**
+   * 获取完整的 npm 包名（包含版本号）
+   */
   getPackageName() {
     if (this.config.pluginVersion) {
       return `${PLUGIN_PACKAGE_NAME}@${this.config.pluginVersion}`;
     }
     return PLUGIN_PACKAGE_NAME;
   }
+  /**
+   * 执行用户登录
+   */
   async doLogin() {
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在验证账号...");
     debugLog(`[用户登录] 手机号: ${this.config.phone}`);
-    debugLog("[用户登录] RSA 加密密码...");
     const encryptedPassword = rsaEncrypt(this.config.userPass);
     if (!encryptedPassword) {
-      throw new AppError2(ERROR_CODES.LOGIN_FAILED, "密码加密失败");
+      throw new AppError$1(ERROR_CODES$1.LOGIN_FAILED, "密码加密失败");
     }
-    debugLog("[用户登录] 密码加密成功");
-    debugLog("[用户登录] 调用登录接口...");
     const token = await login(this.config.phone, encryptedPassword, this.envConfig);
     this.prefixText += chalk.green(`  ✓ 账号验证成功
 `);
-    debugLog("[用户登录] 登录成功");
     return token;
   }
-  async doFetchBoundConfig(token) {
+  /**
+   * 获取绑定配置
+   */
+  async doFetchBoundConfig(token, localCode) {
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在获取绑定信息...");
-    debugLog("[获取配置] 调用绑定配置接口...");
-    const boundConfig = await fetchBoundConfig(token, this.config.phone, this.envConfig);
+    const boundConfig = await fetchBoundConfig(token, this.config.phone, localCode, this.envConfig);
     debugLog(`[获取配置] agentId=${boundConfig.agentId}, appKey=${boundConfig.appKey?.slice(0, 8)}...`);
     this.prefixText += chalk.green(`  ✓ 绑定信息获取成功
 `);
-    debugLog("[获取配置] 获取成功");
     return boundConfig;
   }
+  /**
+   * 清理旧版本文件
+   */
   async doCleanOldFiles(targetPath) {
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在检查已安装版本...");
-    debugLog(`[清理旧版本] 检查目录: ${targetPath}`);
     try {
       await fs.access(targetPath);
       this.spinner.text = chalk.cyan("正在清理旧文件...");
@@ -4959,29 +5027,26 @@ class LocalInstaller {
     } catch {
       this.prefixText += chalk.green(`  ✓ 无旧版本需要清理
 `);
-      debugLog("[清理旧版本] 未发现旧版本");
     }
   }
+  /**
+   * 从 npm 下载并安装插件
+   */
   async doDownloadFromNpm(paths) {
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在准备安装目录...");
-    debugLog("[下载插件] 创建扩展目录...");
     await fs.mkdir(paths.extensions, { recursive: true });
     debugLog(`[下载插件] 扩展目录: ${paths.extensions}`);
     const tempDir = path.join(paths.temp, `install-${Date.now()}`);
-    debugLog(`[下载插件] 创建临时目录: ${tempDir}`);
     await fs.mkdir(tempDir, { recursive: true });
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在下载插件...");
-    debugLog("[下载插件] 执行 npm pack 下载源码包");
-    debugLog(`[下载插件] 工作目录: ${tempDir}`);
     const maxRetries = 3;
     let lastError = "";
     let tarballPath = "";
     for (let i = 1; i <= maxRetries; i++) {
       this.spinner.prefixText = this.prefixText;
       this.spinner.text = chalk.cyan(`正在下载 (${i}/${maxRetries})...`);
-      debugLog(`[下载插件] 第 ${i} 次尝试下载 tarball...`);
       try {
         const packageName = this.getPackageName();
         debugLog(`[下载插件] 下载包名: ${packageName}`);
@@ -4997,16 +5062,14 @@ class LocalInstaller {
         break;
       } catch (error) {
         lastError = error.message || "未知错误";
-        debugLog(`[下载插件] 第 ${i} 次尝试失败: ${lastError}`);
         if (i < maxRetries) {
           this.spinner.text = chalk.cyan(`下载失败，3秒后重试...`);
-          debugLog("[下载插件] 等待 3 秒后重试...");
           await new Promise((resolve2) => setTimeout(resolve2, 3e3));
         }
       }
     }
     if (!tarballPath || !await fs.access(tarballPath).then(() => true).catch(() => false)) {
-      throw new AppError2(ERROR_CODES.NPM_INSTALL_FAILED, `tarball 下载失败: ${lastError}`);
+      throw new AppError$1(ERROR_CODES$1.NPM_INSTALL_FAILED, `tarball 下载失败: ${lastError}`);
     }
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在解压插件...");
@@ -5021,17 +5084,15 @@ class LocalInstaller {
       });
       debugLog("[下载插件] tarball 解压成功");
     } catch (error) {
-      throw new AppError2(ERROR_CODES.NPM_INSTALL_FAILED, `tarball 解压失败: ${error.message}`);
+      throw new AppError$1(ERROR_CODES$1.NPM_INSTALL_FAILED, `tarball 解压失败: ${error.message}`);
     }
     const pluginPath = path.join(paths.target, "package.json");
     const pluginExists = await fs.access(pluginPath).then(() => true).catch(() => false);
     if (!pluginExists) {
-      throw new AppError2(ERROR_CODES.NPM_INSTALL_FAILED, "插件解压后未找到 package.json");
+      throw new AppError$1(ERROR_CODES$1.NPM_INSTALL_FAILED, "插件解压后未找到 package.json");
     }
-    debugLog("[下载插件] 插件解压成功");
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在安装依赖...");
-    debugLog("[下载插件] 执行 npm install 安装生产环境依赖");
     try {
       await execAsync("npm install --omit=dev --ignore-scripts --quiet", {
         cwd: paths.target,
@@ -5039,11 +5100,10 @@ class LocalInstaller {
       });
       debugLog("[下载插件] npm install 执行成功");
     } catch (error) {
-      const errorMsg = error.message || "";
-      if (errorMsg.includes("npm warn") || errorMsg.includes("deprecated")) {
-        debugLog("[下载插件] npm install 有警告但可能成功，继续流程");
-      } else {
-        debugLog(`[下载插件] npm install 失败: ${errorMsg}`);
+      const errorMsg = error instanceof Error ? error.message : String(error);
+      if (errorMsg.includes("npm warn") || errorMsg.includes("deprecated")) ;
+      else {
+        throw new AppError$1(ERROR_CODES$1.NPM_INSTALL_FAILED, `依赖安装失败: ${errorMsg}`);
       }
     }
     this.prefixText += chalk.green(`  ✓ 插件安装完成
@@ -5052,24 +5112,22 @@ class LocalInstaller {
       await fs.rm(tempDir, { recursive: true, force: true });
       debugLog("[下载插件] 清理临时下载目录完成");
     } catch {
-      debugLog("[下载插件] 清理临时下载目录失败（忽略）");
     }
   }
+  /**
+   * 更新配置文件
+   */
   async doUpdateConfig(paths, boundConfig) {
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在生成配置...");
-    debugLog("[更新配置] 创建目录...");
     await fs.mkdir(paths.home, { recursive: true });
     await fs.mkdir(paths.workspace, { recursive: true });
-    debugLog("[更新配置] 目录创建完成");
-    debugLog("[更新配置] 读取原有配置...");
     let originalConfig = {};
     try {
       const content = await fs.readFile(paths.config, "utf-8");
       originalConfig = JSON.parse(content);
       debugLog("[更新配置] 读取原有配置成功");
     } catch {
-      debugLog("[更新配置] 无原有配置");
     }
     const config = this.envConfig;
     const newConfig = {
@@ -5084,7 +5142,7 @@ class LocalInstaller {
       },
       // models: 模型配置
       models: {
-        mode: "merge",
+        mode: "replace",
         providers: {
           "siliconflow-minimax": {
             baseUrl: boundConfig.modelApiBaseUrl || config.MODEL_BASE_URL,
@@ -5164,7 +5222,6 @@ class LocalInstaller {
       channels: {
         "openclaw-workclaw": {
           enabled: true,
-          connectionMode: "websocket",
           appKey: boundConfig.appKey,
           appSecret: boundConfig.appSecret,
           baseUrl: this.config.customIp ? `http://${this.config.customIp}` : config.DEFAULT_BASE_URL,
@@ -5220,6 +5277,9 @@ class LocalInstaller {
       },
       // plugins: 插件配置
       plugins: {
+        load: {
+          paths: [paths.extensions]
+        },
         allow: [config.PLUGIN_NAME],
         installs: {
           [config.PLUGIN_NAME]: {
@@ -5236,36 +5296,16 @@ class LocalInstaller {
     const finalConfig = deepMerge(originalConfig, newConfig);
     this.spinner.prefixText = this.prefixText;
     this.spinner.text = chalk.cyan("正在写入配置...");
-    debugLog("[更新配置] 写入配置文件...");
     await fs.writeFile(paths.config, JSON.stringify(finalConfig, null, 2), "utf-8");
     this.prefixText += chalk.green(`  ✓ 配置更新完成
 `);
     debugLog(`[更新配置] 配置文件写入成功: ${paths.config}`);
   }
 }
-function checkEnv() {
-  debugLog("[环境检查] 检测 Node.js 版本...");
-  const nodeVersion = execSync("node --version", { stdio: "pipe" }).toString().trim();
-  debugLog(`[环境检查] Node.js 版本: ${nodeVersion}`);
-  if (!semver.gte(nodeVersion, "18.0.0")) {
-    throw new AppError2(ERROR_CODES.NODE_VERSION_LOW, `Node.js 版本需要 >= 18.0.0，当前版本: ${nodeVersion}`);
-  }
-  debugLog("[环境检查] Node.js 版本检查通过");
-  debugLog("[环境检查] 检测 npm...");
-  try {
-    const npmVersion = execSync("npm --version", { stdio: "pipe" }).toString().trim();
-    debugLog(`[环境检查] npm 版本: ${npmVersion}`);
-    debugLog("[环境检查] npm 检测通过");
-  } catch {
-    throw new AppError2(ERROR_CODES.NPM_NOT_FOUND, "未检测到 npm，请先安装 Node.js 和 npm");
-  }
-}
 async function createLocalCommand(options) {
   setDebug(!!options.debug);
-  debugLog("[初始化] 开始处理...");
   debugLog(`[初始化] 参数: env=${options.env}, phone=${options.phone}, customIp=${options.customIp}, debug=${options.debug}`);
   checkEnv();
-  debugLog("[初始化] 环境检查通过");
   try {
     let env = options.env;
     let phone = options.phone;
@@ -5298,8 +5338,9 @@ async function createLocalCommand(options) {
           if (!value || value.trim() === "") {
             return chalk.red("手机号码不能为空");
           }
-          if (!/^1[3-9]\d{9}$/.test(value)) {
-            return chalk.yellow("请输入正确的手机号码");
+          const result = phoneSchema.safeParse(value);
+          if (!result.success) {
+            return chalk.yellow(result.error.issues[0].message);
           }
           return true;
         }
@@ -5314,8 +5355,9 @@ async function createLocalCommand(options) {
         name: "userPass",
         message: chalk.cyan("请输入用户密码:"),
         validate: (value) => {
-          if (!value || value.trim() === "") {
-            return chalk.red("用户密码不能为空");
+          const result = userPassSchema.safeParse(value);
+          if (!result.success) {
+            return chalk.red(result.error.issues[0].message);
           }
           return true;
         }