nodus-wechat 0.5.2 → 0.6.1

package/README.md

@@ -14,8 +14,10 @@ npx nodus-wechat
 npx nodus-wechat setup
 npx nodus-wechat setup --install-hermes
 npx nodus-wechat install-hermes
+npx nodus-wechat install-openilink
 npx nodus-wechat doctor
 npx nodus-wechat start
+npx nodus-wechat start --docker
 npx nodus-wechat status
 npx nodus-wechat logs
 npx nodus-wechat stop
@@ -35,18 +37,22 @@ npx nodus-wechat setup \
 The default gateway base URL is `https://api.nodus.sbs/`.
 Use `--install-hermes` or `install-hermes` to run the official Hermes installer
 with `--skip-setup` and the same Hermes home used by this CLI.
+Use `install-openilink` to install the native OpeniLink Hub CLI (`oih`) through
+the official OpeniLink installer.
 
 ## Current behavior
 
 - Creates local configuration at `~/.nodus-wechat/config.json`.
 - Can install Hermes Agent CLI through the official NousResearch installer.
+- Can install OpeniLink Hub native CLI through the official OpeniLink installer.
 - Installs the OpeniLink + webhook POC runtime at `~/.nodus-wechat/runtime`.
 - Writes Hermes common settings to `~/.hermes/config.yaml`.
 - Writes the AstraGate key to `~/.hermes/.env` as `ASTRAGATE_API_KEY`.
 - Writes runtime `.env`, Docker Compose, webhook server, helper scripts, and the OpeniLink reply plugin.
 - Stores gateway base URL, api key, model, Hermes paths, OpeniLink origin, webhook port, and runtime path.
-- Checks Node.js, local configuration, Hermes files, runtime files, Docker Compose availability, Hermes CLI availability, and WeChat app detection with `doctor`.
-- Starts/stops the local runtime through Docker Compose.
+- Checks Node.js, local configuration, Hermes files, runtime files, Python, OpeniLink CLI, optional Docker Compose availability, Hermes CLI availability, and WeChat app detection with `doctor`.
+- Starts/stops the local runtime with native local processes by default.
+- Keeps Docker Compose available only when `--docker` is passed.
 - Removes Nodus WeChat config/runtime files with `uninstall --yes`.
 - Cleans Nodus WeChat config/runtime plus generated Hermes settings with `clean --yes`.
 
@@ -69,7 +75,7 @@ the config generated by this CLI.
 
 ## Current non-goals
 
-- Does not run a third-party installer unless `--install-hermes` or `install-hermes` is explicitly requested.
+- Does not run a third-party installer unless `--install-hermes`, `install-hermes`, or `install-openilink` is explicitly requested.
 - Does not automate, inject into, read, or control WeChat directly.
 - Does not start a daemon, LaunchAgent, or background worker outside Docker Compose.
 - Does not redeem real CDKs or mutate sub2api accounts; the bundled webhook keeps the existing dry-run POC boundary.
@@ -106,3 +112,7 @@ npm publish
 
 The package is configured for public npm access. If npm reports `E401`, run
 `npm login` first.
+
+For npm Trusted Publishing, push this package to GitHub and configure npm to
+trust the workflow at `.github/workflows/publish.yml`. The workflow publishes
+with OIDC and does not need an `NPM_TOKEN` secret.

package/bin/nodus-wechat.js

@@ -3,11 +3,12 @@
 "use strict";
 
 const fs = require("node:fs");
+const http = require("node:http");
 const os = require("node:os");
 const path = require("node:path");
 const childProcess = require("node:child_process");
 
-const VERSION = "0.5.2";
+const VERSION = "0.6.1";
 const DEFAULT_BASE_URL = "https://api.nodus.sbs/";
 const DEFAULT_MODEL = "gpt-5.5";
 const DEFAULT_OPENILINK_ORIGIN = "http://localhost:9800";
@@ -40,21 +41,24 @@ Usage:
                       [--openilink-rp-id <id>] [--webhook-port <port>]
                       [--webhook-token <token>] [--install-hermes]
   nodus-wechat install-hermes
+  nodus-wechat install-openilink
   nodus-wechat doctor
-  nodus-wechat start
-  nodus-wechat status
-  nodus-wechat logs
-  nodus-wechat stop
+  nodus-wechat start [--docker]
+  nodus-wechat status [--docker]
+  nodus-wechat logs [--docker]
+  nodus-wechat stop [--docker]
   nodus-wechat uninstall --yes
   nodus-wechat clean --yes
 
 Commands:
   setup           Create or update local configuration and runtime files. This is the default.
   install-hermes  Install Hermes Agent CLI with the official installer.
+  install-openilink
+                  Install OpeniLink Hub native CLI with the official installer.
   doctor          Check local prerequisites and configuration.
-  start           Start the local OpeniLink + webhook runtime with Docker Compose.
-  status          Show Docker Compose service status.
-  logs            Follow webhook logs.
+  start           Start OpeniLink + webhook with local processes by default.
+  status          Show local process status.
+  logs            Follow local runtime logs.
   stop            Stop the local runtime.
   uninstall       Remove Nodus WeChat config and runtime files.
   clean           Stop runtime if possible, then remove Nodus WeChat files and generated Hermes settings.
@@ -74,7 +78,7 @@ function parseArgs(argv) {
     }
 
     const key = item.slice(2);
-    if (key === "help" || key === "yes" || key === "install-hermes") {
+    if (key === "help" || key === "yes" || key === "install-hermes" || key === "docker") {
       result[key] = true;
       continue;
     }
@@ -235,6 +239,13 @@ function hermesInstallCommand() {
   );
 }
 
+function openiLinkInstallCommand() {
+  return (
+    process.env.NODUS_WECHAT_OPENILINK_INSTALL_COMMAND ||
+    "curl -fsSL https://raw.githubusercontent.com/openilink/openilink-hub/main/install.sh | sh"
+  );
+}
+
 function runHermesInstaller(hermesDir) {
   const args = ["--skip-setup", "--hermes-home", hermesDir];
   const command = `${hermesInstallCommand()} ${args.map(shellQuote).join(" ")}`;
@@ -365,7 +376,8 @@ function setup(options) {
   console.log(`Model: ${config.agent.model}`);
   console.log(`OpeniLink Hub: ${config.openilink.publicOrigin}`);
   console.log(`Webhook URL for OpeniLink: http://poc-webhook:${config.webhook.port}/webhook`);
-  console.log("Run `nodus-wechat start` to start the local runtime.");
+  console.log("Runtime mode: host process by default; Docker is used only with `--docker`.");
+  console.log("Run `nodus-wechat start` to start the local host runtime.");
 }
 
 function installHermes() {
@@ -378,6 +390,21 @@ function installHermes() {
   return 0;
 }
 
+function installOpeniLink() {
+  const result = childProcess.spawnSync(openiLinkInstallCommand(), {
+    shell: true,
+    stdio: "inherit",
+  });
+  if (result.error) {
+    throw result.error;
+  }
+  if (result.status !== 0) {
+    throw new Error(`OpeniLink installer failed with exit code ${result.status}`);
+  }
+  console.log("OpeniLink installer completed. Run `nodus-wechat start`.");
+  return 0;
+}
+
 function doctor() {
   let ok = true;
   const major = Number.parseInt(process.versions.node.split(".")[0], 10);
@@ -417,11 +444,24 @@ function doctor() {
       ok = false;
       console.log(`runtime: missing (${config.runtime?.dir || path.join(configHome(), "runtime")})`);
     }
+    const python = commandPath("python3") || commandPath("python");
+    if (python) {
+      console.log(`python: ok (${python})`);
+    } else {
+      ok = false;
+      console.log("python: failed (needed for local webhook runtime)");
+    }
+    const oih = commandPath("oih");
+    if (oih) {
+      console.log(`openilink cli: ok (${oih})`);
+    } else {
+      console.log("openilink cli: missing (run `nodus-wechat install-openilink`)");
+    }
     const docker = dockerComposeAvailable();
     if (docker.ok) {
-      console.log(`docker compose: ok (${docker.version})`);
+      console.log(`docker compose: ok (${docker.version}; optional with --docker)`);
     } else {
-      console.log("docker compose: missing (needed for `nodus-wechat start`)");
+      console.log("docker compose: missing (optional; only needed for `--docker`)");
     }
     console.log(`openilink: ${config.openilink?.publicOrigin || DEFAULT_OPENILINK_ORIGIN}`);
     console.log(`webhook: http://127.0.0.1:${config.webhook?.port || DEFAULT_WEBHOOK_PORT}/health`);
@@ -469,6 +509,116 @@ function dockerComposeAvailable() {
   };
 }
 
+function commandPath(name) {
+  const result = childProcess.spawnSync("/bin/sh", ["-c", `command -v ${shellQuote(name)}`], {
+    encoding: "utf8",
+  });
+  if (result.error || result.status !== 0) {
+    return null;
+  }
+  return result.stdout.trim() || null;
+}
+
+function runtimePath(config, name) {
+  return path.join(config.runtime.dir, name);
+}
+
+function pidPath(config, name) {
+  return runtimePath(config, `.nodus-${name}.pid`);
+}
+
+function logPath(config, name) {
+  return runtimePath(config, `${name}.log`);
+}
+
+function readPid(filePath) {
+  if (!fs.existsSync(filePath)) {
+    return null;
+  }
+  const pid = Number.parseInt(fs.readFileSync(filePath, "utf8"), 10);
+  return Number.isInteger(pid) && pid > 0 ? pid : null;
+}
+
+function processRunning(pid) {
+  if (!pid) {
+    return false;
+  }
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (_error) {
+    return false;
+  }
+}
+
+function startManagedProcess(config, name, command, args, env) {
+  const filePath = pidPath(config, name);
+  const existingPid = readPid(filePath);
+  if (processRunning(existingPid)) {
+    console.log(`${name}: already running (pid ${existingPid})`);
+    return 0;
+  }
+
+  fs.mkdirSync(config.runtime.dir, { recursive: true, mode: 0o700 });
+  const out = fs.openSync(logPath(config, name), "a");
+  const child = childProcess.spawn(command, args, {
+    cwd: config.runtime.dir,
+    env,
+    detached: true,
+    stdio: ["ignore", out, out],
+  });
+  child.unref();
+  fs.writeFileSync(filePath, `${child.pid}\n`, { mode: 0o600 });
+  console.log(`${name}: started (pid ${child.pid}, log ${logPath(config, name)})`);
+  return 0;
+}
+
+function stopManagedProcess(config, name) {
+  const filePath = pidPath(config, name);
+  const pid = readPid(filePath);
+  if (!processRunning(pid)) {
+    fs.rmSync(filePath, { force: true });
+    console.log(`${name}: stopped`);
+    return 0;
+  }
+
+  try {
+    process.kill(-pid, "SIGTERM");
+  } catch (_error) {
+    process.kill(pid, "SIGTERM");
+  }
+  fs.rmSync(filePath, { force: true });
+  console.log(`${name}: stopped (pid ${pid})`);
+  return 0;
+}
+
+function localRuntimeEnv(config) {
+  const env = parseDotEnv(path.join(config.runtime.dir, ".env"));
+  return {
+    ...process.env,
+    ...env,
+    LISTEN: `:${config.openilink?.port || DEFAULT_OPENILINK_PORT}`,
+    RP_ORIGIN: config.openilink?.publicOrigin || DEFAULT_OPENILINK_ORIGIN,
+    RP_ID: config.openilink?.rpId || DEFAULT_OPENILINK_RP_ID,
+    POC_WEBHOOK_BIND: config.webhook?.bind || "127.0.0.1",
+    POC_WEBHOOK_PORT: String(config.webhook?.port || DEFAULT_WEBHOOK_PORT),
+  };
+}
+
+function httpGet(url, timeoutMs = 1200) {
+  return new Promise((resolve) => {
+    const request = http.get(url, { timeout: timeoutMs }, (response) => {
+      response.resume();
+      response.on("end", () => resolve({ ok: response.statusCode >= 200 && response.statusCode < 500, statusCode: response.statusCode }));
+    });
+    request.on("timeout", () => {
+      request.destroy();
+      resolve({ ok: false });
+    });
+    request.on("error", () => resolve({ ok: false }));
+  });
+}
+
 function loadRuntimeConfig() {
   if (!fs.existsSync(configPath())) {
     console.error(`Config missing: ${configPath()}`);
@@ -511,7 +661,7 @@ function runDockerCompose(config, args, stdio = "inherit") {
   return result.status || 0;
 }
 
-function start() {
+function startDocker() {
   const config = loadRuntimeConfig();
   if (!config) {
     return 1;
@@ -520,7 +670,39 @@ function start() {
   return runDockerCompose(config, ["up", "-d"]);
 }
 
-function status() {
+function startLocal() {
+  const config = loadRuntimeConfig();
+  if (!config) {
+    return 1;
+  }
+
+  const python = commandPath("python3") || commandPath("python");
+  if (!python) {
+    console.error("Python is required for the local webhook runtime.");
+    return 1;
+  }
+
+  const oih = commandPath("oih");
+  if (!oih) {
+    console.error("OpeniLink Hub CLI `oih` is not installed.");
+    console.error("Run: nodus-wechat install-openilink");
+    return 1;
+  }
+
+  const env = localRuntimeEnv(config);
+  const webhookPath = path.join(config.runtime.dir, "poc-webhook", "server.py");
+  startManagedProcess(config, "webhook", python, [webhookPath], env);
+  startManagedProcess(config, "openilink", oih, [], env);
+  console.log(`OpeniLink Hub: ${config.openilink?.publicOrigin || DEFAULT_OPENILINK_ORIGIN}`);
+  console.log(`Webhook health: http://127.0.0.1:${config.webhook?.port || DEFAULT_WEBHOOK_PORT}/health`);
+  return 0;
+}
+
+function start(options) {
+  return options.docker ? startDocker() : startLocal();
+}
+
+function statusDocker() {
   const config = loadRuntimeConfig();
   if (!config) {
     return 1;
@@ -529,7 +711,26 @@ function status() {
   return runDockerCompose(config, ["ps"]);
 }
 
-function logs() {
+async function statusLocal() {
+  const config = loadRuntimeConfig();
+  if (!config) {
+    return 1;
+  }
+
+  for (const name of ["openilink", "webhook"]) {
+    const pid = readPid(pidPath(config, name));
+    console.log(`${name}: ${processRunning(pid) ? `running (pid ${pid})` : "stopped"}`);
+  }
+  const health = await httpGet(`http://127.0.0.1:${config.webhook?.port || DEFAULT_WEBHOOK_PORT}/health`);
+  console.log(`webhook health: ${health.ok ? `ok (${health.statusCode})` : "unreachable"}`);
+  return 0;
+}
+
+function status(options) {
+  return options.docker ? statusDocker() : statusLocal();
+}
+
+function logsDocker() {
   const config = loadRuntimeConfig();
   if (!config) {
     return 1;
@@ -538,7 +739,36 @@ function logs() {
   return runDockerCompose(config, ["logs", "-f", "poc-webhook"]);
 }
 
-function stop() {
+function logsLocal() {
+  const config = loadRuntimeConfig();
+  if (!config) {
+    return 1;
+  }
+
+  const files = ["openilink", "webhook"].map((name) => logPath(config, name)).filter((filePath) => fs.existsSync(filePath));
+  if (files.length === 0) {
+    console.error("No local runtime logs found.");
+    return 1;
+  }
+
+  const tail = commandPath("tail");
+  if (!tail) {
+    for (const filePath of files) {
+      console.log(`==> ${filePath} <==`);
+      console.log(fs.readFileSync(filePath, "utf8"));
+    }
+    return 0;
+  }
+
+  const result = childProcess.spawnSync(tail, ["-f", ...files], { stdio: "inherit" });
+  return result.status || 0;
+}
+
+function logs(options) {
+  return options.docker ? logsDocker() : logsLocal();
+}
+
+function stopDocker() {
   const config = loadRuntimeConfig();
   if (!config) {
     return 1;
@@ -547,6 +777,21 @@ function stop() {
   return runDockerCompose(config, ["down"]);
 }
 
+function stopLocal() {
+  const config = loadRuntimeConfig();
+  if (!config) {
+    return 1;
+  }
+
+  stopManagedProcess(config, "webhook");
+  stopManagedProcess(config, "openilink");
+  return 0;
+}
+
+function stop(options) {
+  return options.docker ? stopDocker() : stopLocal();
+}
+
 function uninstall(options) {
   if (!options.yes) {
     console.error("Refusing to uninstall without --yes.");
@@ -597,6 +842,9 @@ function clean(options) {
 
   const config = fs.existsSync(configPath()) ? readConfig() : null;
   if (config) {
+    for (const name of ["webhook", "openilink"]) {
+      stopManagedProcess({ ...config, runtime: { ...config.runtime, dir: config.runtime?.dir || path.join(configHome(), "runtime") } }, name);
+    }
     const docker = dockerComposeAvailable();
     if (docker.ok && config.runtime?.dir && fs.existsSync(path.join(config.runtime.dir, "docker-compose.yml"))) {
       runDockerCompose(config, ["down"], "pipe");
@@ -613,7 +861,7 @@ function clean(options) {
   return 0;
 }
 
-function main() {
+async function main() {
   let args;
   try {
     args = parseArgs(process.argv.slice(2));
@@ -638,24 +886,28 @@ function main() {
       return installHermes();
     }
 
+    if (command === "install-openilink") {
+      return installOpeniLink();
+    }
+
     if (command === "doctor") {
       return doctor();
     }
 
     if (command === "start") {
-      return start();
+      return start(args);
     }
 
     if (command === "status") {
-      return status();
+      return await status(args);
     }
 
     if (command === "logs") {
-      return logs();
+      return logs(args);
     }
 
     if (command === "stop") {
-      return stop();
+      return stop(args);
     }
 
     if (command === "uninstall") {
@@ -675,4 +927,11 @@ function main() {
   return 1;
 }
 
-process.exitCode = main();
+main()
+  .then((code) => {
+    process.exitCode = code;
+  })
+  .catch((error) => {
+    console.error(error.message);
+    process.exitCode = 1;
+  });

package/package.json

@@ -1,9 +1,13 @@
 {
   "name": "nodus-wechat",
-  "version": "0.5.2",
+  "version": "0.6.1",
   "description": "CLI installer for Nodus WeChat, Hermes, and the local OpeniLink webhook runtime.",
   "license": "MIT",
   "private": false,
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/zyaireleo/nodus-wechat.git"
+  },
   "bin": {
     "nodus-wechat": "bin/nodus-wechat.js"
   },

package/templates/wechat-agent-poc/poc-webhook/server.py

@@ -115,4 +115,6 @@ class Handler(BaseHTTPRequestHandler):
 
 
 if __name__ == "__main__":
-    HTTPServer(("0.0.0.0", 9811), Handler).serve_forever()
+    bind = os.environ.get("POC_WEBHOOK_BIND", "127.0.0.1")
+    port = int(os.environ.get("POC_WEBHOOK_PORT", "9811"))
+    HTTPServer((bind, port), Handler).serve_forever()

package/templates/wechat-agent-poc/scripts/logs.sh

@@ -2,4 +2,4 @@
 set -euo pipefail
 
 cd "$(dirname "$0")/.."
-docker compose logs -f poc-webhook
+tail -f openilink.log webhook.log

package/templates/wechat-agent-poc/scripts/start.sh

@@ -7,5 +7,51 @@ if [ ! -f .env ]; then
   cp .env.example .env
 fi
 
-docker compose up -d
-docker compose ps
+set -a
+. ./.env
+set +a
+
+if ! command -v oih >/dev/null 2>&1; then
+  echo "OpeniLink Hub CLI 'oih' is not installed. Run: npx nodus-wechat install-openilink" >&2
+  exit 1
+fi
+
+PYTHON_BIN="${PYTHON_BIN:-}"
+if [ -z "$PYTHON_BIN" ]; then
+  if command -v python3 >/dev/null 2>&1; then
+    PYTHON_BIN=python3
+  elif command -v python >/dev/null 2>&1; then
+    PYTHON_BIN=python
+  else
+    echo "Python is required for the local webhook runtime." >&2
+    exit 1
+  fi
+fi
+
+OPENILINK_PID=".nodus-openilink.pid"
+WEBHOOK_PID=".nodus-webhook.pid"
+
+if [ -f "$WEBHOOK_PID" ] && kill -0 "$(cat "$WEBHOOK_PID")" >/dev/null 2>&1; then
+  echo "webhook: already running (pid $(cat "$WEBHOOK_PID"))"
+else
+  POC_WEBHOOK_BIND="${POC_WEBHOOK_BIND:-127.0.0.1}" \
+  POC_WEBHOOK_PORT="${POC_WEBHOOK_PORT:-9811}" \
+  POC_WEBHOOK_TOKEN="${POC_WEBHOOK_TOKEN:-}" \
+    "$PYTHON_BIN" poc-webhook/server.py >>webhook.log 2>&1 &
+  echo $! >"$WEBHOOK_PID"
+  echo "webhook: started (pid $(cat "$WEBHOOK_PID"))"
+fi
+
+if [ -f "$OPENILINK_PID" ] && kill -0 "$(cat "$OPENILINK_PID")" >/dev/null 2>&1; then
+  echo "openilink: already running (pid $(cat "$OPENILINK_PID"))"
+else
+  LISTEN=":${OPENILINK_PORT:-9800}" \
+  RP_ORIGIN="${OPENILINK_PUBLIC_ORIGIN:-http://localhost:9800}" \
+  RP_ID="${OPENILINK_RP_ID:-localhost}" \
+    oih >>openilink.log 2>&1 &
+  echo $! >"$OPENILINK_PID"
+  echo "openilink: started (pid $(cat "$OPENILINK_PID"))"
+fi
+
+echo "OpeniLink Hub: ${OPENILINK_PUBLIC_ORIGIN:-http://localhost:9800}"
+echo "Webhook health: http://127.0.0.1:${POC_WEBHOOK_PORT:-9811}/health"

package/templates/wechat-agent-poc/scripts/status.sh

@@ -3,8 +3,21 @@ set -euo pipefail
 
 cd "$(dirname "$0")/.."
 
-docker compose ps
+for name in openilink webhook; do
+  pid_file=".nodus-${name}.pid"
+  if [ -f "$pid_file" ] && kill -0 "$(cat "$pid_file")" >/dev/null 2>&1; then
+    echo "$name: running (pid $(cat "$pid_file"))"
+  else
+    echo "$name: stopped"
+  fi
+done
+
+if [ -f .env ]; then
+  set -a
+  . ./.env
+  set +a
+fi
 printf "\nWebhook health:\n"
 curl -fsS "http://127.0.0.1:${POC_WEBHOOK_PORT:-9811}/health" || true
 printf "\n\nRecent webhook logs:\n"
-docker compose logs --tail=80 poc-webhook
+tail -n 80 webhook.log 2>/dev/null || true

package/templates/wechat-agent-poc/scripts/stop.sh

@@ -2,4 +2,13 @@
 set -euo pipefail
 
 cd "$(dirname "$0")/.."
-docker compose down
+for name in webhook openilink; do
+  pid_file=".nodus-${name}.pid"
+  if [ -f "$pid_file" ] && kill -0 "$(cat "$pid_file")" >/dev/null 2>&1; then
+    kill "$(cat "$pid_file")" || true
+    echo "$name: stopped (pid $(cat "$pid_file"))"
+  else
+    echo "$name: stopped"
+  fi
+  rm -f "$pid_file"
+done