openclaw-weiyuan-init 1.0.79 → 1.0.81

package/lib/commands.js

@@ -53,7 +53,7 @@ const DEFAULT_SKILL_TSCONFIG = {
 };
 
 const DEFAULT_FIXED_MESSAGES = {
-  sceneA: "【微元协作】✨ 已为你接入微元系统～\n让协作自然发生，Let collaboration happen naturally 💫\n💡 对话框输入「查看帮助」即可查看使用指南",
+  sceneA: "【微元协作】✨ 已为你接入微元系统～\n让协作自然发生，Let collaboration happen naturally 💫",
   sceneB: "【微元协作】✨ 已为你接入微元系统～  并已加入对应项目~\n项目ID：{projectId}\n\n让协作自然发生，Let collaboration happen naturally 💫",
   sceneC: "【微元协作】✨ 已加入对应项目~\n项目ID：{projectId}\n\n让协作自然发生，Let collaboration happen naturally 💫"
 };
@@ -86,6 +86,52 @@ function renderFixedMessage(template, vars = {}) {
   return String(template).replace(/\{(\w+)\}/g, (_, k) => (vars[k] !== undefined ? String(vars[k]) : ""));
 }
 
+function printReleaseNotes(notes) {
+  if (!notes) return;
+  const lines = Array.isArray(notes.changes) ? notes.changes.filter(Boolean).slice(0, 8) : [];
+  if (!notes.summary && lines.length === 0) return;
+  const versionText = notes.version ? `v${notes.version}` : "最新版本";
+  console.log(chalk.cyan(`\n📦 ${versionText} 变更说明`));
+  if (notes.summary) console.log(chalk.white(`- ${notes.summary}`));
+  for (const item of lines) {
+    if (notes.summary && item === notes.summary) continue;
+    console.log(chalk.gray(`- ${item}`));
+  }
+}
+
+async function persistReleaseNotes(weiyuanPath, notes) {
+  const notesDir = path.join(weiyuanPath, 'release-notes');
+  const latestPath = path.join(notesDir, 'latest.json');
+  const ttlDays = 30;
+  const now = Date.now();
+  const expiresAt = new Date(now + ttlDays * 24 * 60 * 60 * 1000).toISOString();
+  await fs.ensureDir(notesDir);
+  if (notes && typeof notes === 'object') {
+    const payload = {
+      ...notes,
+      fetchedAt: new Date(now).toISOString(),
+      expiresAt
+    };
+    await fs.writeJson(latestPath, payload, { spaces: 2 });
+  } else if (await fs.pathExists(latestPath)) {
+    try {
+      const existing = await fs.readJson(latestPath);
+      const exp = Date.parse(String(existing && existing.expiresAt ? existing.expiresAt : ''));
+      if (!Number.isFinite(exp) || exp <= now) {
+        await fs.remove(latestPath);
+      }
+    } catch (_) {
+      await fs.remove(latestPath);
+    }
+  }
+  const files = await fs.readdir(notesDir);
+  for (const name of files) {
+    if (name === 'latest.json') continue;
+    if (!name.toLowerCase().endsWith('.json')) continue;
+    await fs.remove(path.join(notesDir, name));
+  }
+}
+
 function resolveWorkspacePath(workspaceOption) {
   const raw = (workspaceOption || DEFAULT_CONFIG.workspaceName).trim();
   const target = path.isAbsolute(raw) ? raw : path.join(process.cwd(), raw);
@@ -339,10 +385,11 @@ async function runInit(options) {
       spinner
     });
     spinner.succeed(`下载源: ${source.downloadUrl}`);
+    printReleaseNotes(source.releaseNotes);
 
     spinner = ora('下载 weiyuan skill...').start();
     const zipPath = path.join(weiyuanPath, source.zipFilename);
-    const downloadSuccess = await downloadFile(source.downloadUrl, zipPath, spinner);
+    const downloadSuccess = await downloadFile(source.downloadUrl, zipPath, spinner, source.sha256 || '');
     if (!downloadSuccess) {
       spinner.fail('下载失败');
       throw new Error('下载失败');
@@ -362,6 +409,7 @@ async function runInit(options) {
     spinner = ora('清理临时文件...').start();
     try {
       await fs.remove(zipPath);
+      await persistReleaseNotes(weiyuanPath, source.releaseNotes || null);
       spinner.succeed('清理完成');
     } catch (error) {
       spinner.warn('清理失败，可手动删除');

package/lib/downloader.js

@@ -1,73 +1,125 @@
-const axios = require('axios');
-const fs = require('fs-extra');
-
-function trimSlash(url) {
-  return String(url || '').replace(/\/+$/, '');
-}
-
-function toZipFilename(downloadUrl) {
-  const clean = String(downloadUrl || '').split('?')[0].split('#')[0];
-  const parts = clean.split('/');
-  return parts[parts.length - 1] || 'weiyuan-openclaw-skill.zip';
-}
-
-async function resolvePackageSource({ downloadUrl, upgradeBaseUrl, spinner = null }) {
-  if (downloadUrl) {
-    return { downloadUrl, zipFilename: toZipFilename(downloadUrl), version: null, from: 'download_url' };
-  }
-
-  const base = trimSlash(upgradeBaseUrl);
-  const latestUrl = `${base}/LATEST_SKILL_VERSION.txt`;
-  const latestResp = await axios.get(latestUrl, { timeout: 10000 });
-  const version = String(latestResp.data || '').trim();
-  if (!version) {
-    throw new Error('empty_latest_version');
-  }
-  const zipFilename = `weiyuan-openclaw-skill-v${version}.zip`;
-  const resolvedDownloadUrl = `${base}/${zipFilename}`;
-  if (spinner) {
-    spinner.text = `已解析最新版本: v${version}`;
-  }
-  return { downloadUrl: resolvedDownloadUrl, zipFilename, version, from: 'latest_version' };
-}
-
-async function downloadFile(url, outputPath, spinner = null) {
-  try {
-    const response = await axios({
-      method: 'GET',
-      url: url,
-      responseType: 'stream',
-      timeout: 60000,
-      maxContentLength: Infinity,
-      maxBodyLength: Infinity
-    });
-
-    const totalLength = parseInt(response.headers['content-length'], 10);
-    let downloadedLength = 0;
-
-    const writer = fs.createWriteStream(outputPath);
-
-    response.data.on('data', (chunk) => {
-      downloadedLength += chunk.length;
-      if (spinner && totalLength) {
-        const percent = (downloadedLength / totalLength * 100).toFixed(1);
-        spinner.text = `下载中... ${percent}% (${(downloadedLength / 1024 / 1024).toFixed(1)}MB / ${(totalLength / 1024 / 1024).toFixed(1)}MB)`;
-      }
-    });
-
-    response.data.pipe(writer);
-
-    return new Promise((resolve, reject) => {
-      writer.on('finish', () => resolve(true));
-      writer.on('error', reject);
-      response.data.on('error', reject);
-    });
-  } catch (error) {
-    if (spinner) {
-      spinner.text = `下载失败: ${error.message}`;
-    }
-    return false;
-  }
-}
-
-module.exports = { downloadFile, resolvePackageSource };
+const axios = require('axios');
+const fs = require('fs-extra');
+const crypto = require('crypto');
+
+function trimSlash(url) {
+  return String(url || '').replace(/\/+$/, '');
+}
+
+function toZipFilename(downloadUrl) {
+  const clean = String(downloadUrl || '').split('?')[0].split('#')[0];
+  const parts = clean.split('/');
+  return parts[parts.length - 1] || 'weiyuan-openclaw-skill.zip';
+}
+
+async function fetchLatestReleaseNotes(base, nonce) {
+  const notesUrl = `${base}/RELEASE_NOTES_LATEST.json?nocache=${nonce}`;
+  try {
+    const resp = await axios.get(notesUrl, { timeout: 8000 });
+    const payload = resp.data || {};
+    const version = String(payload.version || '').trim();
+    const summary = String(payload.summary || '').trim();
+    const changes = Array.isArray(payload.changes) ? payload.changes.map((x) => String(x || '').trim()).filter(Boolean) : [];
+    if (!version && !summary && changes.length === 0) return null;
+    return {
+      version,
+      summary,
+      changes,
+      releasedAt: String(payload.releasedAt || '').trim()
+    };
+  } catch (_e) {
+    return null;
+  }
+}
+
+async function resolvePackageSource({ downloadUrl, upgradeBaseUrl, spinner = null }) {
+  if (downloadUrl) {
+    return { downloadUrl, zipFilename: toZipFilename(downloadUrl), version: null, sha256: '', from: 'download_url', releaseNotes: null };
+  }
+
+  const base = trimSlash(upgradeBaseUrl);
+  const nonce = Date.now();
+  const releaseNotes = await fetchLatestReleaseNotes(base, nonce);
+  try {
+    const latestMetaUrl = `${base}/SKILL_LATEST.json?nocache=${nonce}`;
+    const latestMetaResp = await axios.get(latestMetaUrl, { timeout: 10000 });
+    const meta = latestMetaResp.data || {};
+    const version = String(meta.version || '').trim();
+    if (version) {
+      const zipFilename = String(meta.zipName || '').trim() || `weiyuan-openclaw-skill-v${version}.zip`;
+      const resolvedDownloadUrl = `${base}/${zipFilename}?nocache=${nonce}`;
+      const sha256 = String(meta.sha256 || '').trim().toLowerCase();
+      if (spinner) {
+        spinner.text = `已解析最新版本: v${version}`;
+      }
+      return { downloadUrl: resolvedDownloadUrl, zipFilename, version, sha256, from: 'latest_json', releaseNotes };
+    }
+  } catch (_e) {
+    // fallback to txt
+  }
+  const latestUrl = `${base}/LATEST_SKILL_VERSION.txt?nocache=${nonce}`;
+  const latestResp = await axios.get(latestUrl, { timeout: 10000 });
+  const version = String(latestResp.data || '').trim();
+  if (!version) throw new Error('empty_latest_version');
+  const zipFilename = `weiyuan-openclaw-skill-v${version}.zip`;
+  const resolvedDownloadUrl = `${base}/${zipFilename}?nocache=${nonce}`;
+  if (spinner) {
+    spinner.text = `已解析最新版本: v${version}`;
+  }
+  return { downloadUrl: resolvedDownloadUrl, zipFilename, version, sha256: '', from: 'latest_version', releaseNotes };
+}
+
+async function downloadFile(url, outputPath, spinner = null, expectedSha256 = '') {
+  try {
+    const response = await axios({
+      method: 'GET',
+      url: url,
+      responseType: 'stream',
+      timeout: 60000,
+      maxContentLength: Infinity,
+      maxBodyLength: Infinity
+    });
+
+    const totalLength = parseInt(response.headers['content-length'], 10);
+    let downloadedLength = 0;
+
+    const writer = fs.createWriteStream(outputPath);
+
+    response.data.on('data', (chunk) => {
+      downloadedLength += chunk.length;
+      if (spinner && totalLength) {
+        const percent = (downloadedLength / totalLength * 100).toFixed(1);
+        spinner.text = `下载中... ${percent}% (${(downloadedLength / 1024 / 1024).toFixed(1)}MB / ${(totalLength / 1024 / 1024).toFixed(1)}MB)`;
+      }
+    });
+
+    response.data.pipe(writer);
+
+    return new Promise((resolve, reject) => {
+      writer.on('finish', async () => {
+        try {
+          if (expectedSha256) {
+            const fileBuffer = await fs.readFile(outputPath);
+            const actualSha256 = crypto.createHash('sha256').update(fileBuffer).digest('hex').toLowerCase();
+            const expected = String(expectedSha256).toLowerCase();
+            if (actualSha256 !== expected) {
+              return reject(new Error(`skill_package_hash_mismatch expected=${expected} got=${actualSha256}`));
+            }
+          }
+          resolve(true);
+        } catch (hashErr) {
+          reject(hashErr);
+        }
+      });
+      writer.on('error', reject);
+      response.data.on('error', reject);
+    });
+  } catch (error) {
+    if (spinner) {
+      spinner.text = `下载失败: ${error.message}`;
+    }
+    return false;
+  }
+}
+
+module.exports = { downloadFile, resolvePackageSource };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openclaw-weiyuan-init",
-  "version": "1.0.79",
+  "version": "1.0.81",
   "description": "OpenClaw Weiyuan Skill 一键初始化工具",
   "main": "bin/cli.js",
   "bin": {