openclaw-weixin 3.0.0 → 3.0.1

package/CHANGELOG.md

@@ -6,6 +6,19 @@
 
 ## [未发布]
 
+## [3.0.1] - 2026-08-02
+
+### 变更
+
+- 将 npm 发布绑定到受保护的 `npm-publish` environment；自动检查全部通过后需由
+  仓库管理员审批，且 OIDC 发布权限仅授予审批后的发布 job。
+- npmjs 发布成功后由同一工作流同步发布 GitHub Packages 镜像
+  `@newfuture/openclaw-weixin`，再创建使用中英文变更日志说明的 GitHub Release；
+  重试时会分别跳过已存在的包版本并补齐缺失目标；包括 registry 为空的情况，前一
+  仓库版本尚未完成镜像时不会发布后续 GitHub Packages 版本。
+- 将最低支持的 OpenClaw 宿主扩展至 `2026.6.1`，保留 `2026.7.1` 作为常规开发
+  基线，并增加最低宿主版本的完整 CI 构建与测试。
+
 ## [3.0.0] - 2026-07-31
 
 ### 新增

package/CHANGELOG_EN.md

@@ -6,6 +6,22 @@ This project follows the [Keep a Changelog](https://keepachangelog.com/) format.
 
 ## [Unreleased]
 
+## [3.0.1] - 2026-08-02
+
+### Changed
+
+- Bound npm publishing to the protected `npm-publish` environment, requiring a
+  repository administrator's approval after automated validation and granting
+  OIDC publish permission only to the approved job.
+- Made the same workflow mirror each npmjs release to GitHub Packages as
+  `@newfuture/openclaw-weixin`, then create a GitHub Release from the bilingual
+  changelogs; retries skip existing package versions and reconcile missing
+  destinations; publication remains blocked, including when the registry is
+  empty, until the preceding repository release reaches GitHub Packages.
+- Expanded the minimum supported OpenClaw host to `2026.6.1`, retained
+  `2026.7.1` as the normal development baseline, and added a full minimum-host
+  CI build and test.
+
 ## [3.0.0] - 2026-07-31
 
 ### Added

package/README.md

@@ -7,25 +7,19 @@
 
 ## 安装或替换
 
-需要 [OpenClaw](https://docs.openclaw.ai/install) `>=2026.7.1`。请使用运行
+需要 [OpenClaw](https://docs.openclaw.ai/install) `>=2026.6.1`。请使用运行
 OpenClaw 的同一用户，并在同一环境中执行。
 
 **命令行——一行安装或替换：**
 
+> 提示：**不要**先卸载 `@tencent-weixin/openclaw-weixin`；直接原位替换通常会保留现有配置和登录状态。
+
 ```bash
 openclaw plugins install npm:openclaw-weixin --force
 ```
 
 <details>
-<summary>替换腾讯官方插件？先看这里</summary>
-
-> **警告：**不要先卸载 `@tencent-weixin/openclaw-weixin` 或重新扫码。直接执行
-> 上面的命令；原位替换通常会保留现有配置和登录状态。
-
-</details>
-
-<details>
-<summary>绑定微信账号</summary>
+<summary>绑定微信账号（全新安装）</summary>
 
 如需将微信账号绑定到当前 OpenClaw，请启用插件并开始扫码绑定：
 
@@ -39,7 +33,7 @@ openclaw channels login --channel openclaw-weixin
 </details>
 
 <details>
-<summary>重载并检查</summary>
+<summary>重载检查</summary>
 
 确保正在运行的 Gateway 已重载插件。必要时重启承载 OpenClaw 的服务、容器或
 Pod，然后执行：
@@ -53,34 +47,34 @@ openclaw channels status --probe
 
 </details>
 
-### 通过 Agent 安装
 
-OpenClaw `>=2026.7.2-beta.1` 时，如果已设置 `commands.plugins: true`，并且你是
-owner/admin，直接发送：
+### 提示词自动安装
+
+将下面的提示词直接发送 OpenClaw Agent，用于安全安装或原位替换插件：
 
 ```text
-/plugins install npm:openclaw-weixin --force
+请在不改变现有配置和登录状态的前提下，安装或原位替换 `openclaw-weixin`：
+1. 先确认 `openclaw --version` 不低于 2026.6.1。
+2. 我信任 npm 来源 `openclaw-weixin`。执行
+   `openclaw plugins install npm:openclaw-weixin --force`，不要先卸载。
+3. 仅在 `openclaw plugins list` 显示已停用时启用插件。不要主动重启 Gateway 或发起
+   扫码登录；安装可能使启用了配置重载的受管 Gateway 自动重启。若已自动重启，执行
+   `openclaw channels status --probe`；否则询问是否重启 Gateway。
+4. 只报告结果；若未登录过微信，提示我手动运行
+   `openclaw channels login --channel openclaw-weixin` 扫码绑定微信。
 ```
 
-然后按上面的**重载并检查**操作。
+### 通过 Agent 命令安装
 
-### Shell Agent 提示词
-
-将下面的提示词直接发送给有 Shell 权限的 Agent，用于安全安装或原位替换插件。
-安装期间，启用了配置重载的受管 Gateway 可能自动重启；否则由你按 Agent 的提示重载，
-扫码仍由你完成：
+OpenClaw `>=2026.7.2-beta.1` 时，如果已设置 `commands.plugins: true`，并且你是
+owner/admin，直接发送：
 
 ```text
-请在不改变现有配置和登录状态的前提下，安装或原位替换 `openclaw-weixin`。先确认
-`openclaw --version` 不低于 2026.7.1。我信任 npm 来源 `openclaw-weixin`。执行
-`openclaw plugins install npm:openclaw-weixin --force`；不要先卸载，也不要查看
-或复制工作区、凭据及账号状态文件。仅在 `openclaw plugins list` 显示已停用时
-启用插件。不要主动重启 Gateway 或发起扫码登录；安装可能使启用了配置重载的受管
-Gateway 自动重启。若已自动重启，执行 `openclaw channels status --probe`；否则只
-告诉我需重载的实际 Gateway、服务、容器或 Pod，待我确认重载后再探测。只报告脱敏
-结果；若未登录，提示我手动扫码。
+/plugins install npm:openclaw-weixin --force
 ```
 
+然后按上面的**重载检查**操作。
+
 ## 多账号
 
 再次执行登录命令即可绑定其他微信账号：

package/README_EN.md

@@ -5,21 +5,23 @@
 Community-maintained distribution of
 [Tencent/openclaw-weixin](https://github.com/Tencent/openclaw-weixin) that
 connects OpenClaw with WeChat for a better messaging experience.
-Requires [OpenClaw](https://docs.openclaw.ai/install) `>=2026.7.1`.
 
 ## Install or Replace
 
+Requires [OpenClaw](https://docs.openclaw.ai/install) `>=2026.6.1`. Run commands
+as the same user and in the same environment as OpenClaw.
 
-### CLI — one-command install or replacement
+**CLI—one-command install or replacement:**
 
-> Run in the same user and environment as OpenClaw. Do not uninstall `@tencent-weixin/openclaw-weixin`.
+> Tip: **Do not** uninstall `@tencent-weixin/openclaw-weixin` first; replacing it
+> in place usually preserves the existing configuration and login state.
 
 ```bash
 openclaw plugins install npm:openclaw-weixin --force
 ```
 
 <details>
-<summary>Bind a WeChat account</summary>
+<summary>Bind a WeChat account (new installations)</summary>
 
 To bind a WeChat account to this OpenClaw instance, enable the plugin and start
 the QR flow:
@@ -34,7 +36,7 @@ The login command displays a QR code in the terminal.
 </details>
 
 <details>
-<summary>Reload and check</summary>
+<summary>Reload check</summary>
 
 Ensure the running Gateway has reloaded the plugin. If needed, restart the
 service, container, or pod that runs OpenClaw, then run:
@@ -49,38 +51,36 @@ the probe. If the probe reports no login, use the login command above.
 
 </details>
 
-### Install Through an Agent via messages
+### Automatic Installation Prompt
 
-On OpenClaw `>=2026.7.2-beta.1`, if `commands.plugins: true` is set and you are
-an owner/admin, send this command to the chat:
+Send the following prompt directly to an OpenClaw Agent to safely install or
+replace the plugin in place:
 
 ```text
-/plugins install npm:openclaw-weixin --force
+Install or replace `openclaw-weixin` without changing the existing configuration
+or login state:
+1. Verify that `openclaw --version` is at least 2026.6.1.
+2. I trust the npm source `openclaw-weixin`. Run
+   `openclaw plugins install npm:openclaw-weixin --force`; do not uninstall first.
+3. Enable the plugin only if `openclaw plugins list` shows it disabled. Do not
+   restart the Gateway yourself or start QR login. Installation may automatically
+   restart a managed Gateway with config reload enabled. If it does, run
+   `openclaw channels status --probe`; otherwise, ask whether to restart the Gateway.
+4. Report only the result. If WeChat is not logged in, ask me to manually run
+   `openclaw channels login --channel openclaw-weixin` and scan the QR code.
 ```
 
-Then follow **Reload and check** above.
-
-### Shell Agent Prompt
+### Install Through an Agent Command
 
-Copy and send this prompt directly to an agent with Shell access. It safely
-installs or replaces the plugin in place. During installation, a managed Gateway
-with config reload enabled may restart automatically; otherwise, reload it when
-the agent asks. You still handle any QR scan:
+On OpenClaw `>=2026.7.2-beta.1`, if `commands.plugins: true` is set and you are
+an owner/admin, send:
 
 ```text
-Install or replace `openclaw-weixin` in place without changing its existing
-configuration or login state. Verify `openclaw --version` is at least 2026.7.1.
-I trust the npm source `openclaw-weixin`. Run
-`openclaw plugins install npm:openclaw-weixin --force`; do not uninstall first
-or inspect or copy workspace, credential, or account-state files. Enable the
-plugin only if `openclaw plugins list` shows it disabled. Do not restart the
-Gateway yourself or start QR login. Installation may automatically restart a
-managed Gateway with config reload enabled. If it does, run
-`openclaw channels status --probe`; otherwise, tell me which Gateway, service,
-container, or pod to reload and wait for my confirmation before probing. Report
-only redacted results. If not logged in, ask me to scan manually.
+/plugins install npm:openclaw-weixin --force
 ```
 
+Then follow **Reload check** above.
+
 ## Multiple Accounts
 
 Run the login command again to bind another WeChat account:

package/dist/src/compat.js

@@ -6,7 +6,7 @@
  * the supported range for this plugin version.
  */
 import { logger } from "./util/logger.js";
-export const SUPPORTED_HOST_MIN = "2026.7.1";
+export const SUPPORTED_HOST_MIN = "2026.6.1";
 /**
  * Parse an OpenClaw date version string (e.g. "2026.3.22") into components.
  * Returns null for unparseable strings.

package/docs/guide.md

@@ -82,7 +82,7 @@ openclaw plugins uninstall openclaw-weixin
 
 ## Troubleshooting
 
-### "requires OpenClaw >=2026.7.1" error
+### "requires OpenClaw >=2026.6.1" error
 
 Your OpenClaw version is too old for this plugin version. Check with:
 

package/docs/guide.zh_CN.md

@@ -74,7 +74,7 @@ openclaw plugins uninstall openclaw-weixin
 
 ## 故障排查
 
-### "requires OpenClaw >=2026.7.1" 报错
+### "requires OpenClaw >=2026.6.1" 报错
 
 你的 OpenClaw 版本太旧，不兼容当前插件版本。检查版本：
 

package/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "openclaw-weixin",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "channels": ["openclaw-weixin"],
   "channelConfigs": {
     "openclaw-weixin": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openclaw-weixin",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "Community-maintained OpenClaw WeChat channel plugin",
   "license": "MIT",
   "author": "Tencent",
@@ -33,7 +33,6 @@
     "README.zh_CN.md",
     "CHANGELOG.md",
     "CHANGELOG_EN.md",
-    "CHANGELOG.zh_CN.md",
     "LICENSE",
     "NOTICE"
   ],
@@ -65,7 +64,7 @@
     "qrcode-terminal": "0.12.0"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.7.1"
+    "openclaw": ">=2026.6.1"
   },
   "devDependencies": {
     "@biomejs/biome": "2.5.4",
@@ -103,7 +102,7 @@
     "install": {
       "npmSpec": "openclaw-weixin",
       "defaultChoice": "npm",
-      "minHostVersion": ">=2026.7.1"
+      "minHostVersion": ">=2026.6.1"
     }
   },
   "ilink_appid": "bot",

package/CHANGELOG.zh_CN.md

@@ -1,3 +0,0 @@
-# openclaw-weixin
-
-中文变更日志已移至 [CHANGELOG.md](./CHANGELOG.md)。