@ybbapp/push-cli 0.0.1-alpha.0 → 0.0.2-alpha.0

package/README.md

@@ -1,77 +1,38 @@
 # push-cli
 
-`push-cli` 是供 Agent 低成本接入 Lark 群聊机器人的单向消息推送参考实现。它只通过自定义机器人 webhook 发送消息，不接收事件、不提供回调、消息读取或其他 Lark API 能力。
+向 Lark 群聊机器人单向发送 Markdown 消息的 CLI。只使用自定义机器人 webhook，不读取消息或提供其他 Lark API。
 
-仓库根目录是 Go CLI 参考实现；`skills/lark-push/` 是可单独安装的 Agent Skill，包含操作说明和示例。CLI 仅调用群聊自定义机器人 webhook 推送消息，不提供其他 Lark API。
+## 安装
 
-可用 GitHub CLI 安装：
+需要 Node.js 18 或更新版本。
 
 ```sh
-gh skill install ybbapp/push-cli lark-push
-```
-
-也可以把 `skills/lark-push/` 复制到 Agent 支持的 skills 目录。Skill 提供操作说明和示例；`push-cli` 可执行文件及本地 webhook 配置需要另行准备。构建命令：
-
-```sh
-go build -o push-cli ./cmd
-```
-
-## 分发和安装
-
-发布 tag 会构建并分发 npm 包、GitHub Release 二进制和 GHCR Docker 镜像。npm 包是推荐入口；它第一次运行时会按当前 OS/CPU 下载对应 Release 二进制并校验 SHA-256。
-
-alpha 版本：
-
-```sh
-npx --yes @ybbapp/push-cli@alpha --version
+npm install --global @ybbapp/push-cli@alpha
 ```
 
-直接下载 Release 二进制：
+也可以一次性运行：
 
 ```sh
-gh release download alpha-0.0.1 \
-  --repo ybbapp/push-cli \
-  --pattern 'push-cli-alpha-0.0.1-*-*.tar.gz'
+npx --yes @ybbapp/push-cli@alpha lark send --title '每日市场报告' --markdown '报告正文'
 ```
 
-Docker 镜像支持 Linux 多架构：
-
-```sh
-docker run --rm --env LARK_WEBHOOK_URL \
-  ghcr.io/ybbapp/push-cli:alpha \
-  lark send --title '每日市场报告' --markdown '报告正文'
-```
-
-首次引导：npm 要求包先存在，才能配置 Trusted Publisher。仓库公开后，先推送 `alpha-0.0.1` 生成公开 Release，再从该版本源码目录手动运行一次 `npm publish --access public --tag alpha`（使用 npm 交互式登录；该版本是 `0.0.1-alpha.0`）。包存在后，在 npm 包的 **Settings → Trusted publishing** 绑定 GitHub Actions：owner `ybbapp`、repository `push-cli`、workflow filename `release.yml`，并允许 `npm publish`。之后每次推送 `alpha-*` 或 `v*` tag，workflow 使用 OIDC 发布，不需要保存 npm token。包尚未创建时，workflow 会跳过 npm job，但仍会发布 GitHub Release 和 GHCR 镜像。
-
-首次向 GHCR 发布后，需要在 GitHub Packages 的 `push-cli` 镜像设置中将可见性改为 Public，公开后 Docker 用户才能匿名拉取。
-
 ## 配置和使用
 
-推荐通过环境变量注入 webhook。也可以在当前工作目录放置 `.env`，或使用 `--env` 指定文件。`.env` 不应提交到仓库。
+设置群聊机器人的 webhook：
 
 ```sh
-export LARK_WEBHOOK_URL='https://open.larksuite.com/open-apis/bot/v2/hook/REPLACE_WITH_YOUR_TOKEN'
+export LARK_WEBHOOK_URL='https://open.larksuite.com/open-apis/bot/v2/hook/你的机器人密钥'
 ```
 
 发送 Markdown：
 
 ```sh
+push-cli lark send --title '每日市场报告' --markdown '报告正文'
 push-cli lark send --title '每日市场报告' --file report.md
-cat report.md | push-cli lark send --title '每日市场报告'
 ```
 
-附带图表发送示例（在仓库根目录运行）：
+也可以通过 `--chart-file` 附加原生图表；仓库内的 [Lark skill](skills/lark-push/SKILL.md) 提供 Agent 调用说明和示例。安装 skill：
 
 ```sh
-push-cli lark send \
-  --title 'NVDA 行情' \
-  --markdown 'NVDA 收盘价走势' \
-  --chart-file skills/lark-push/examples/nvda-line-chart.json
+gh skill install ybbapp/push-cli lark-push
 ```
-
-## 版本和平台
-
-首个 Git tag `alpha-0.0.1` 对应 npm SemVer `0.0.1-alpha.0`，发布到 npm 的 `alpha` dist-tag；GitHub Release 与 Docker tag 保留 `alpha-0.0.1`，并更新 Docker `alpha` tag。
-
-原生二进制支持 macOS amd64/arm64、Linux amd64/arm64/riscv64、Windows amd64/arm64。Docker 镜像支持 Linux amd64/arm64/riscv64。

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ybbapp/push-cli",
-  "version": "0.0.1-alpha.0",
-  "description": "Small Lark group-bot push CLI for agents",
+  "version": "0.0.2-alpha.0",
+  "description": "One-way messages to Lark group bots.",
   "license": "UNLICENSED",
   "repository": {
     "type": "git",

package/scripts/install.js

@@ -37,20 +37,28 @@ function assetName(tag, platform, arch) {
   return `push-cli-${tag}-${platform}-${arch}.${extension}`;
 }
 
-async function get(url, redirects = 0) {
-  const parsed = new URL(url);
-  if (!REDIRECT_HOSTS.has(parsed.hostname)) throw new Error(`unexpected download host: ${parsed.hostname}`);
-  const response = await fetch(url, { redirect: "manual" });
-  if ([301, 302, 303, 307, 308].includes(response.status)) {
-    if (redirects >= 3) throw new Error("too many redirects while downloading the release");
-    const location = response.headers.get("location");
-    if (!location) throw new Error("release download redirect has no location");
-    return get(new URL(location, url).toString(), redirects + 1);
+function download(url, destination) {
+  const initialHost = new URL(url).hostname;
+  if (!REDIRECT_HOSTS.has(initialHost)) throw new Error(`unexpected download host: ${initialHost}`);
+  const result = spawnSync("curl", [
+    "--fail", "--location", "--silent", "--show-error",
+    "--connect-timeout", "10", "--max-time", "120", "--max-redirs", "3",
+    "--proto", "=https", "--proto-redir", "=https",
+    "--output", destination, "--write-out", "%{url_effective}", url,
+  ], { encoding: "utf8", maxBuffer: 1024 * 1024 });
+  if (result.error) {
+    if (process.platform !== "win32") throw new Error("curl is required to download the push-cli binary");
+    const command = "$ErrorActionPreference='Stop'; $ProgressPreference='SilentlyContinue'; Invoke-WebRequest -UseBasicParsing -Uri $env:PUSH_CLI_URL -OutFile $env:PUSH_CLI_DEST";
+    const fallback = spawnSync("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", command], {
+      stdio: "ignore",
+      env: { ...process.env, PUSH_CLI_URL: url, PUSH_CLI_DEST: destination },
+    });
+    if (fallback.error || fallback.status !== 0) throw new Error("could not download the push-cli release asset");
+    return;
   }
-  if (!response.ok) throw new Error(`download failed (${response.status}): ${url}`);
-  const finalHost = new URL(response.url).hostname;
+  if (result.status !== 0) throw new Error(`release download failed (curl exit ${result.status})`);
+  const finalHost = new URL(result.stdout.trim()).hostname;
   if (!REDIRECT_HOSTS.has(finalHost)) throw new Error(`unexpected download host: ${finalHost}`);
-  return Buffer.from(await response.arrayBuffer());
 }
 
 function extract(archive, directory, platform) {
@@ -69,29 +77,27 @@ function extract(archive, directory, platform) {
   if (result.status !== 0) throw new Error("could not extract the release archive; install tar and retry");
 }
 
-async function ensureBinary() {
+function ensureBinary() {
   if (fs.existsSync(BINARY_PATH)) return BINARY_PATH;
 
   const { platform, arch } = target();
   const tag = releaseTag();
   const asset = assetName(tag, platform, arch);
   const base = `https://github.com/${OWNER}/${REPOSITORY}/releases/download/${encodeURIComponent(tag)}`;
-  const [archiveData, checksums] = await Promise.all([
-    get(`${base}/${asset}`),
-    get(`${base}/checksums.txt`),
-  ]);
-  const checksumLine = checksums.toString("utf8").split(/\r?\n/).find((line) => line.trim().endsWith(`  ${asset}`));
-  if (!checksumLine) throw new Error(`release checksums do not include ${asset}`);
-  const expected = checksumLine.trim().split(/\s+/)[0].toLowerCase();
-  const actual = crypto.createHash("sha256").update(archiveData).digest("hex");
-  if (!/^[a-f0-9]{64}$/.test(expected) || actual !== expected) {
-    throw new Error(`SHA-256 verification failed for ${asset}`);
-  }
-
   const temporary = fs.mkdtempSync(path.join(os.tmpdir(), "push-cli-"));
   try {
     const archivePath = path.join(temporary, asset);
-    fs.writeFileSync(archivePath, archiveData, { mode: 0o600 });
+    const checksumsPath = path.join(temporary, "checksums.txt");
+    download(`${base}/${asset}`, archivePath);
+    download(`${base}/checksums.txt`, checksumsPath);
+    const checksums = fs.readFileSync(checksumsPath, "utf8");
+    const checksumLine = checksums.split(/\r?\n/).find((line) => line.trim().endsWith(`  ${asset}`));
+    if (!checksumLine) throw new Error(`release checksums do not include ${asset}`);
+    const expected = checksumLine.trim().split(/\s+/)[0].toLowerCase();
+    const actual = crypto.createHash("sha256").update(fs.readFileSync(archivePath)).digest("hex");
+    if (!/^[a-f0-9]{64}$/.test(expected) || actual !== expected) {
+      throw new Error(`SHA-256 verification failed for ${asset}`);
+    }
     extract(archivePath, temporary, platform);
     const extracted = path.join(temporary, BINARY_NAME);
     if (!fs.existsSync(extracted)) throw new Error(`release archive does not contain ${BINARY_NAME}`);