openclaw-yunjia-cli 0.0.1

package/cli.mjs

@@ -0,0 +1,1045 @@
+#!/usr/bin/env node
+
+import { execSync, spawnSync } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import readline from "node:readline";
+import {
+  COMPAT_MATRIX,
+  findCompatEntry,
+  formatRange,
+} from "./lib/compat.mjs";
+
+const PLUGIN_SPEC = "openclaw-inspur-yunjia";
+const CHANNEL_ID = "openclaw-inspur-yunjia";
+const CHANNEL_KEY = "openclaw-inspur-yunjia";
+
+// ── openclaw 路径配置 ──────────────────────────────────────────────────────────
+// 尝试从常见位置找到 openclaw
+function resolveOpenclawPath() {
+  // 检查 PATH 环境变量中是否有 openclaw
+  const pathDirs = (process.env.PATH || "").split(":");
+  for (const dir of pathDirs) {
+    const openclawPath = path.join(dir, "openclaw");
+    try {
+      fs.accessSync(openclawPath, fs.constants.X_OK);
+      return openclawPath;
+    } catch {}
+  }
+
+  // 常见位置
+  const commonPaths = [
+    "/Users/til/code/openclaw/openclaw/dist/index.js",
+    path.join(os.homedir(), "code/openclaw/openclaw/dist/index.js"),
+  ];
+
+  for (const p of commonPaths) {
+    if (fs.existsSync(p)) {
+      return p;
+    }
+  }
+
+  return "openclaw";
+}
+
+const OPENCLAW_CMD = resolveOpenclawPath();
+
+// ── 云加服务端 API 配置 ─────────────────────────────────────────────────────
+// 二维码绑定流程的 API 地址，根据部署环境配置
+// 优先使用环境变量 YUNJIA_BINDING_API_BASE，其次使用命令行参数 --api-base
+// 开发环境可设置为 http://localhost:3210
+const DEFAULT_BINDING_API_BASE = process.env.NODE_ENV === "development"
+  ? "http://localhost:3210"
+  : "http://8.145.41.158:3210";
+
+// ── Verbose mode ────────────────────────────────────────────────────────────
+
+const verbose = process.argv.includes("--verbose") || process.argv.includes("-v");
+
+// 从 argv 中移除 flags，保留命令和位置参数
+function stripFlags(argv) {
+  const result = [];
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    // 跳过已知 flags
+    if (a === "--verbose" || a === "-v") continue;
+    // 跳过 --api-base/--server 及其值
+    if (a === "--api-base" || a === "--server") {
+      i++; // 跳过下一个参数（值）
+      continue;
+    }
+    // 跳过 --dev-package 及其值
+    if (a === "--dev-package") {
+      i++; // 跳过下一个参数（值）
+      continue;
+    }
+    result.push(a);
+  }
+  return result;
+}
+const cleanArgv = stripFlags(process.argv.slice(2));
+
+// 从环境变量或命令行参数读取绑定服务地址
+// 环境变量: YUNJIA_BINDING_API_BASE
+// 命令行参数: --api-base <url> 或 --server <url>
+function resolveBindingApiBase() {
+  // 优先命令行参数（从原始 argv 读取，不是 cleanArgv）
+  const args = process.argv.slice(2);
+  for (let i = 0; i < args.length - 1; i++) {
+    if (args[i] === "--api-base" || args[i] === "--server") {
+      return args[i + 1];
+    }
+  }
+  // 其次环境变量
+  return process.env.YUNJIA_BINDING_API_BASE || DEFAULT_BINDING_API_BASE;
+}
+
+// 从命令行参数读取本地开发包路径
+// 命令行参数: --dev-package <path>
+function resolveDevPackagePath() {
+  const args = process.argv.slice(2);
+  for (let i = 0; i < args.length - 1; i++) {
+    if (args[i] === "--dev-package") {
+      const pkgPath = args[i + 1];
+      // 转换为绝对路径
+      const absolutePath = path.resolve(pkgPath);
+      // 验证路径存在
+      if (fs.existsSync(absolutePath)) {
+        const pkgJsonPath = path.join(absolutePath, "package.json");
+        if (fs.existsSync(pkgJsonPath)) {
+          return absolutePath;
+        }
+      }
+      warn(`警告: 开发包路径不存在或不是有效的包目录: ${absolutePath}`);
+      return null;
+    }
+  }
+  return null;
+}
+
+// ── 时间配置（与服务端保持一致）────────────────────────────────────────────────────
+const QR_EXPIRE_SECONDS = 60;           // 二维码有效期（秒）
+const SCANNED_CONFIRM_TIMEOUT_SEC = 60; // 扫码后等待确认的超时时间（秒）
+const MAX_POLL_RETRIES = 3;              // 短轮询模式最大重试次数
+const POLL_INTERVAL_MS = 5000;           // 短轮询间隔（毫秒）
+
+function log(msg) {
+  if (verbose) console.log(`\x1b[36m${msg}\x1b[0m`);
+}
+
+function logAlways(msg) {
+  console.log(`\x1b[36m${msg}\x1b[0m`);
+}
+
+function error(msg) {
+  console.error(`\x1b[31m${msg}\x1b[0m`);
+}
+
+function success(msg) {
+  console.log(`\x1b[32m${msg}\x1b[0m`);
+}
+
+function warn(msg) {
+  console.log(`\x1b[33m${msg}\x1b[0m`);
+}
+
+function run(cmd, { silent = true } = {}) {
+  const stdio = silent ? ["pipe", "pipe", "pipe"] : "inherit";
+  const result = spawnSync(cmd, { shell: true, stdio });
+  if (result.status !== 0) {
+    const err = new Error(`Command failed with exit code ${result.status}: ${cmd}`);
+    err.stderr = silent ? (result.stderr || "").toString() : "";
+    throw err;
+  }
+  return silent ? (result.stdout || "").toString().trim() : "";
+}
+
+function which(bin) {
+  // 使用 command -v 替代 which，因为 zsh 中 which 对别名返回非零退出码
+  const cmd = process.platform === "win32" ? `where ${bin}` : `command -v ${bin}`;
+  try {
+    const result = execSync(cmd, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    // command -v 对 alias 返回别名字符串，不是路径
+    // 如果返回包含空格/=，说明是 alias，尝试通过 PATH 查找
+    if (result.includes(" ") || result.startsWith(bin + "=")) {
+      const pathCmd = process.platform === "win32" ? `where ${bin}` : `echo $PATH | tr ':' '\\n' | while read dir; do [ -x "$dir/${bin}" ] && echo "$dir/${bin}" && break; done`;
+      try {
+        const pathResult = execSync(pathCmd, { shell: true, encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+        return pathResult || null;
+      } catch {
+        // 直接调用检查
+        try {
+          execSync(`"${result}" --version`, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
+          return result;
+        } catch {
+          return null;
+        }
+      }
+    }
+    return result || null;
+  } catch {
+    return null;
+  }
+}
+
+function createRL() {
+  return readline.createInterface({ input: process.stdin, output: process.stdout });
+}
+
+function prompt(rl, text) {
+  return new Promise((resolve) => {
+    rl.question(text, (answer) => resolve(answer.trim()));
+  });
+}
+
+// ── version detection ───────────────────────────────────────────────────────
+
+function getOpenclawVersion() {
+  try {
+    const raw = run(`${OPENCLAW_CMD} --version`);
+    const match = raw.match(/(\d+\.\d+\.\d+)/);
+    return match ? match[1] : null;
+  } catch {
+    return null;
+  }
+}
+
+function selectPluginTag(openclawVersion) {
+  const entry = findCompatEntry(openclawVersion);
+  if (entry) return entry;
+  error(`当前 OpenClaw 版本 ${openclawVersion} 不在任何已知兼容范围内`);
+  console.log("\n  已知兼容矩阵:");
+  for (const e of COMPAT_MATRIX) {
+    console.log(`    ${e.label}  →  OpenClaw ${formatRange(e.openclawRange)}`);
+  }
+  console.log();
+  return null;
+}
+
+// ── symlink ──────────────────────────────────────────────────────────────────
+
+function resolveHostOpenclawRoot() {
+  const bin = which("openclaw");
+  if (!bin) return null;
+  try {
+    const real = fs.realpathSync(bin);
+    let dir = path.dirname(real);
+    for (let i = 0; i < 6; i++) {
+      try {
+        const pkg = JSON.parse(fs.readFileSync(path.join(dir, "package.json"), "utf-8"));
+        if (pkg.name === "openclaw") return dir;
+      } catch {}
+      const parent = path.dirname(dir);
+      if (parent === dir) break;
+      dir = parent;
+    }
+  } catch {}
+  return null;
+}
+
+function resolvePluginExtDir() {
+  const stateDir = process.env.OPENCLAW_STATE_DIR || path.join(os.homedir(), ".openclaw");
+  return path.join(stateDir, "extensions", CHANNEL_ID);
+}
+
+function ensureOpenclawSymlink() {
+  const hostRoot = resolveHostOpenclawRoot();
+  if (!hostRoot) {
+    log("无法定位宿主 openclaw 包根目录，跳过 symlink 创建");
+    return;
+  }
+  const pluginDir = resolvePluginExtDir();
+  if (!fs.existsSync(pluginDir)) return;
+  const nmDir = path.join(pluginDir, "node_modules");
+  const linkPath = path.join(nmDir, "openclaw");
+  try {
+    const existing = fs.readlinkSync(linkPath);
+    if (fs.realpathSync(existing) === fs.realpathSync(hostRoot)) {
+      log("openclaw symlink 已存在且正确");
+      return;
+    }
+    fs.unlinkSync(linkPath);
+  } catch {}
+  fs.mkdirSync(nmDir, { recursive: true });
+  fs.symlinkSync(hostRoot, linkPath);
+  log(`已创建 symlink: node_modules/openclaw → ${hostRoot}`);
+}
+
+// ── config management ────────────────────────────────────────────────────────
+
+function getConfigPath() {
+  const stateDir = process.env.OPENCLAW_STATE_DIR || path.join(os.homedir(), ".openclaw");
+  return path.join(stateDir, "openclaw.json");
+}
+
+function readConfig() {
+  const cfgPath = getConfigPath();
+  if (!fs.existsSync(cfgPath)) return {};
+  return JSON.parse(fs.readFileSync(cfgPath, "utf-8"));
+}
+
+function writeConfig(config) {
+  const cfgPath = getConfigPath();
+  config.meta = config.meta || {};
+  config.meta.lastTouchedAt = new Date().toISOString();
+  fs.writeFileSync(cfgPath, JSON.stringify(config, null, 2));
+}
+
+/**
+ * 将绑定结果写入 openclaw 配置。
+ * 根据时序图步骤 9-10：服务端返回 botId + botSecret + 绑定用户信息。
+ */
+function addAccountFromBinding({ botId, botSecret, userId, userName, enterprise, baseChatUrl, accountId = "default" }) {
+  const config = readConfig();
+  if (!config.channels) config.channels = {};
+  const yunjia = config.channels[CHANNEL_KEY] || {};
+  config.channels[CHANNEL_KEY] = yunjia;
+
+  if (accountId === "default") {
+    yunjia.botId = botId;
+    yunjia.botSecret = botSecret;
+    if (enterprise) yunjia.enterprise = enterprise;
+    yunjia.enabled = true;
+    if (userId) yunjia.userId = String(userId);
+    if (userName) yunjia.userName = userName;
+    yunjia.passport = {
+      baseUrl: process.env.YUNJIA_BASE_URL || "https://id.inspuronline.com",
+      clientSecret: process.env.YUNJIA_CLIENT_SECRET || "66dea8c2-9a8b-41f6-8e70-fada47b3e104",
+      clientId: process.env.YUNJIA_CLIENT_ID || "com.inspur.ecm.client.openclaw",
+      ...(baseChatUrl && { baseChatUrl }),
+    };
+  } else {
+    if (!yunjia.accounts) yunjia.accounts = {};
+    yunjia.accounts[accountId] = {
+      botId,
+      botSecret,
+      ...(enterprise && { enterprise }),
+      enabled: true,
+      ...(userId && { userId: String(userId) }),
+      ...(userName && { userName }),
+      passport: {
+        baseUrl: process.env.YUNJIA_BASE_URL || "https://id.inspuronline.com",
+        clientSecret: process.env.YUNJIA_CLIENT_SECRET || "66dea8c2-9a8b-41f6-8e70-fada47b3e104",
+        clientId: process.env.YUNJIA_CLIENT_ID || "com.inspur.ecm.client.openclaw",
+        ...(baseChatUrl && { baseChatUrl }),
+      },
+    };
+    if (!yunjia.defaultAccount) yunjia.defaultAccount = accountId;
+  }
+
+  writeConfig(config);
+}
+
+// ── QR 码绑定流程（时序图核心） ─────────────────────────────────────────────
+
+/**
+ * 步骤 1: CLI → 云加服务端 — 请求二维码
+ * 服务端生成绑定ID（过期时间 60 秒），返回二维码链接
+ */
+async function requestQRCode(apiBase) {
+  const url = `${apiBase}/api/v1/binding/qrcode`;
+  try {
+    const resp = await fetch(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ expire_seconds: QR_EXPIRE_SECONDS }),
+    });
+    if (!resp.ok) {
+      const text = await resp.text();
+      throw new Error(`请求二维码失败 (${resp.status}): ${text}`);
+    }
+    return await resp.json();
+    // 返回: { binding_id, qrcode_url, expire_seconds, expire_at }
+  } catch (e) {
+    if (e instanceof TypeError && e.message.includes("fetch")) {
+      throw new Error(`无法连接绑定服务 (${apiBase})，请确认服务已启动`);
+    }
+    throw new Error(`请求二维码失败: ${e.message}`);
+  }
+}
+
+/**
+ * 步骤 4: CLI → 云加服务端 — HTTP 阻塞等待用户绑定
+ * 时序图注明：用户绑定成功前，重试 3 次，3 次后未绑定成功则放弃本次绑定，进程结束
+ *
+ * 使用 SSE (Server-Sent Events) 接收服务端推送的事件
+ *
+ * 返回值：
+ * - { status: "bound", ... } - 绑定成功
+ * - null - 过期或超时（通过 errorReason 字段区分具体原因）
+ * - { status: "scanned", timeout_seconds: N } - 已扫码，等待确认（含超时时间，已废弃，现在内部处理）
+ */
+async function pollBindingResult(apiBase, bindingId, maxRetries = MAX_POLL_RETRIES) {
+  // 使用 SSE (Server-Sent Events) 接收推送
+  const sseUrl = `${apiBase}/api/v1/binding/${bindingId}/result?stream=true`;
+
+  try {
+    log(`等待用户扫码绑定（SSE，二维码有效期 ${QR_EXPIRE_SECONDS}s）...`);
+    log(`SSE URL: ${sseUrl}`);
+    const resp = await fetch(sseUrl);
+
+    if (!resp.ok) {
+      const text = await resp.text();
+      throw new Error(`SSE 连接失败 (${resp.status}): ${text}`);
+    }
+
+    // 检查响应头是否是 SSE
+    const contentType = resp.headers.get("content-type");
+    log(`SSE Content-Type: ${contentType}`);
+
+    // 如果不是 SSE 响应（比如状态已经是 bound），直接解析 JSON
+    if (!contentType || !contentType.includes("text/event-stream")) {
+      log(`收到非 SSE 响应，直接解析 JSON`);
+      const data = await resp.json();
+      log(`收到数据: ${JSON.stringify(data)}`);
+      if (data.status === "bound") return data;
+      if (data.status === "scanned") return { status: "scanned", timeout_seconds: data.timeout_seconds || SCANNED_CONFIRM_TIMEOUT_SEC };
+      if (data.status === "expired") {
+        const reason = data.reason === "confirm_timeout" ? "确认超时" : data.reason === "timeout" ? "操作超时" : "二维码过期";
+        return { status: "expired", reason: data.reason || "qr_expired", message: reason };
+      }
+      return data;
+    }
+
+    // 读取 SSE 流
+    const reader = resp.body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = "";
+    let scannedTimeout = null;
+    let eventCount = 0;
+    let scannedAt = null;  // 记录扫码时间，用于客户端超时检查
+    const clientTimeoutMs = (SCANNED_CONFIRM_TIMEOUT_SEC + 10) * 1000; // 客户端超时（多给10秒缓冲）
+
+    while (true) {
+      // 客户端超时检查：如果已扫码且超过客户端超时时间，主动返回超时
+      if (scannedAt && Date.now() - scannedAt > clientTimeoutMs) {
+        log(`客户端超时检查: 扫码后已过 ${clientTimeoutMs}ms，主动返回确认超时`);
+        return { status: "expired", reason: "confirm_timeout", message: "确认超时" };
+      }
+
+      const { done, value } = await reader.read();
+      if (done) {
+        log(`SSE 连接关闭，共收到 ${eventCount} 个事件`);
+        break;
+      }
+
+      const chunk = decoder.decode(value, { stream: true });
+      buffer += chunk;
+      log(`收到 SSE 数据块 (${value.length} bytes)`);
+
+      // 处理 SSE 消息（格式: data: {...}\n\n）
+      const lines = buffer.split("\n");
+      buffer = lines.pop() || ""; // 保留未完成的行
+
+      for (const line of lines) {
+        if (line.startsWith("data: ")) {
+          eventCount++;
+          try {
+            const data = JSON.parse(line.slice(6));
+            log(`收到事件: ${data.status}${data.reason ? ` (${data.reason})` : ''}`);
+            if (data.status === "bound") {
+              log(`完整数据: ${JSON.stringify(data)}`);
+            }
+
+            if (data.status === "bound") return data;
+            if (data.status === "scanned") {
+              scannedTimeout = data.timeout_seconds || SCANNED_CONFIRM_TIMEOUT_SEC;
+              scannedAt = Date.now();  // 记录扫码时间
+              log(`用户已扫码，等待确认（超时 ${scannedTimeout}s）...`);
+              // 不返回！继续 SSE 连接等待 bound 事件
+              // 在控制台显示提示（非 verbose 模式也显示）
+              console.log(`\n✅ 用户已扫码！请在 ${scannedTimeout} 秒内完成确认...\n`);
+            }
+            if (data.status === "expired") {
+              const reason = data.reason === "confirm_timeout" ? "确认超时" : data.reason === "timeout" ? "操作超时" : "二维码过期";
+              log(`绑定过期: ${reason}`);
+              // 返回包含错误信息的对象
+              return { status: "expired", reason: data.reason || "qr_expired", message: reason };
+            }
+          } catch (e) {
+            log(`解析 SSE 消息失败: ${e.message}`);
+          }
+        }
+      }
+    }
+
+    // 连接关闭但没有收到最终状态
+    log(`SSE 连接异常关闭，未收到最终状态`);
+    return null;
+  } catch (e) {
+    log(`SSE 连接失败: ${e.message}，降级为轮询模式...`);
+
+    // 降级：短轮询模式（重试 maxRetries 次）
+    const url = `${apiBase}/api/v1/binding/${bindingId}/result`;
+
+    for (let i = 0; i < maxRetries; i++) {
+      if (verbose) {
+        process.stdout.write(`  ⏳ 等待用户扫码绑定... (${i + 1}/${maxRetries})\r`);
+      }
+
+      try {
+        const resp = await fetch(url);
+        if (!resp.ok) {
+          const text = await resp.text();
+          throw new Error(`轮询失败 (${resp.status}): ${text}`);
+        }
+        const data = await resp.json();
+
+        if (data.status === "bound") {
+          process.stdout.write("\x1b[K");
+          return data;
+        }
+
+        if (data.status === "scanned") {
+          process.stdout.write("\x1b[K");
+          return { status: "scanned", timeout_seconds: SCANNED_CONFIRM_TIMEOUT_SEC };
+        }
+
+        if (data.status === "expired") {
+          process.stdout.write("\x1b[K");
+          return { status: "expired", reason: data.reason || "qr_expired", message: "二维码过期" };
+        }
+      } catch (err) {
+        if (i === maxRetries - 1) throw err;
+      }
+
+      await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+    }
+
+    process.stdout.write("\x1b[K");
+    return null;
+  }
+}
+
+/**
+ * 在终端显示二维码
+ * @param {string} qrcodeUrl - 二维码 URL
+ * @param {boolean} attempt - 重试次数
+ */
+async function displayQR(qrcodeUrl, attempt = 1) {
+  // 重试时清屏，覆盖之前的二维码
+  if (attempt > 1) {
+    // ANSI 转义序列：清屏并移动光标到左上角
+    process.stdout.write('\x1b[2J\x1b[H');
+    warn(`二维码已过期，请扫描新的二维码（${attempt}/3）`);
+  }
+
+  try {
+    const QRCode = await import("qrcode");
+    console.log("请使用云加客户端扫描二维码绑定机器人身份");
+    console.log();
+    const qr = await QRCode.toString(qrcodeUrl, { type: "terminal", small: true, margin: 1 });
+    console.log(qr);
+    console.log(`或者使用云加客户端访问该地址进行绑定`);
+    console.log(`${qrcodeUrl}`);
+    return;
+  } catch {}
+
+  // qrcode 模块未安装，尝试系统 CLI
+  const qrBin = which("qrcode");
+  if (qrBin) {
+    try {
+      const out = run(`echo '${qrcodeUrl.replace(/'/g, "'\\''")}' | qrcode -t ANSIUTF8 -m 2`, { silent: true });
+      console.log(out);
+      return;
+    } catch {}
+  }
+
+  // 最终兜底：打印 URL
+  console.log();
+  console.log("使用云加客户端访问以下地址绑定");
+  console.log();
+  console.log(`  🔗 ${qrcodeUrl}`);
+}
+
+// ── 环境检查 ─────────────────────────────────────────────────────────────────
+
+/**
+ * 检查 OpenClaw 是否已安装，返回版本号或 null。
+ */
+function checkOpenclaw() {
+  // 首先尝试运行 openclaw --version，如果成功则表示已安装
+  const ver = getOpenclawVersion();
+  if (ver) return ver;
+  // 如果失败，再尝试 which 查找
+  if (!which("openclaw")) {
+    return null;
+  }
+  return getOpenclawVersion();
+}
+
+/**
+ * 检查 openclaw-inspur-yunjia 插件是否已安装。
+ */
+function checkPlugin() {
+  const stateDir = process.env.OPENCLAW_STATE_DIR || path.join(os.homedir(), ".openclaw");
+  const extDir = path.join(stateDir, "extensions");
+  
+  // 支持多个可能的目录名
+  const possibleDirs = [
+    "openclaw-inspur-yunjia",  // 当前配置中的 channel key
+    "inspur-yunjia",           // 插件安装的实际目录名
+  ];
+  
+  for (const dir of possibleDirs) {
+    const pluginDir = path.join(extDir, dir);
+    if (fs.existsSync(pluginDir)) {
+      return true;
+    }
+  }
+  return false;
+}
+
+/**
+ * 获取已安装插件版本号（从 package.json 读取）。
+ */
+function getPluginVersion() {
+  const stateDir = process.env.OPENCLAW_STATE_DIR || path.join(os.homedir(), ".openclaw");
+  const extDir = path.join(stateDir, "extensions");
+  
+  // 支持多个可能的目录名
+  const possibleDirs = [
+    "openclaw-inspur-yunjia",
+    "inspur-yunjia",
+  ];
+  
+  for (const dir of possibleDirs) {
+    const pkgPath = path.join(extDir, dir, "package.json");
+    try {
+      const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
+      return pkg.version || "unknown";
+    } catch {}
+  }
+  return null;
+}
+
+/**
+ * 执行环境检查，打印摘要。返回 { openclawVersion, pluginOk, pluginVersion }。
+ * 缺失项会打印提示信息但不会退出，由调用方决定。
+ */
+function checkEnvironment({ silent = false } = {}) {
+  const results = {
+    openclawVersion: null,
+    openclawOk: false,
+    pluginOk: false,
+    pluginVersion: null,
+  };
+
+  // 检查 Node.js
+  const nodeVer = process.versions.node;
+
+  // 检查 OpenClaw
+  const ocVer = checkOpenclaw();
+  if (ocVer) {
+    results.openclawVersion = ocVer;
+    results.openclawOk = true;
+  }
+
+  // 检查插件
+  if (checkPlugin()) {
+    results.pluginOk = true;
+    results.pluginVersion = getPluginVersion();
+  }
+
+  if (silent) return results;
+
+  console.log();
+  console.log("  🦞 环境检查");
+  console.log(`  Node.js      ${nodeVer.padEnd(24)}`);
+  console.log(`  OpenClaw     ${(results.openclawOk ? "✅ " + ocVer : "❌ 未安装").padEnd(27)}`);
+  console.log(`  云加插件     ${(results.pluginOk ? "✅ " + (results.pluginVersion || "已安装") : "❌ 未安装").padEnd(27)}`);
+  console.log();
+
+  return results;
+}
+
+/**
+ * 打印环境缺失项的修复提示，返回 false 表示有缺失项。
+ */
+function printEnvironmentHints(results) {
+  const hints = [];
+
+  if (!results.openclawOk) {
+    hints.push([
+      "OpenClaw 未安装",
+      "请先安装 OpenClaw：",
+      "  npm install -g openclaw",
+      "  详见 https://docs.openclaw.ai/install",
+    ]);
+  }
+
+  if (!results.pluginOk) {
+    hints.push([
+      "浪潮云加插件未安装",
+      "请先安装插件：",
+      `  openclaw plugins install ${PLUGIN_SPEC}`,
+      "或使用本工具安装并扫码绑定：",
+      `  npx -y @inspur-ccs/openclaw-inspur-yunjia-cli install`,
+    ]);
+  }
+
+  if (hints.length > 0) {
+    for (const [title, ...lines] of hints) {
+      error(title);
+      for (const line of lines) console.log(`  ${line}`);
+      console.log();
+    }
+    return false;
+  }
+
+  return true;
+}
+
+// ── commands ─────────────────────────────────────────────────────────────────
+
+async function install() {
+  const rl = createRL();
+
+  // ── 第一步：环境检查 ────────────────────────────────────────────
+  const env = checkEnvironment();
+
+  if (!env.openclawOk) {
+    error("OpenClaw 未安装，请先安装后再运行本工具。");
+    console.log("  npm install -g openclaw");
+    console.log("  详见 https://docs.openclaw.ai/install");
+    console.log();
+    log("安装 OpenClaw 后，重新运行以下命令即可自动安装插件并扫码绑定：");
+    console.log(`  npx -y @inspur-ccs/openclaw-inspur-yunjia-cli install`);
+    rl.close(); process.exit(1);
+  }
+
+  // 检查版本兼容性
+  const compat = selectPluginTag(env.openclawVersion);
+  if (!compat) { rl.close(); process.exit(1); }
+
+  // 检查插件是否已安装，未安装则自动安装
+  if (!env.pluginOk) {
+    // 检查是否使用本地开发包
+    const devPackagePath = resolveDevPackagePath();
+    let pluginInstallSpec;
+
+    if (devPackagePath) {
+      pluginInstallSpec = devPackagePath;
+      logAlways(`正在从本地路径安装开发包...`);
+      log(`开发包路径: ${devPackagePath}`);
+    } else {
+      pluginInstallSpec = `${PLUGIN_SPEC}@${compat.distTag}`;
+      logAlways(`正在自动安装插件 ${pluginInstallSpec} (${compat.label})...`);
+    }
+
+    try {
+      const installOut = run(`${OPENCLAW_CMD} plugins install "${pluginInstallSpec}"`);
+      if (installOut) log(installOut);
+    } catch (installErr) {
+      error("插件安装失败：");
+      if (installErr.stderr) console.error(installErr.stderr);
+      console.log(`  ${OPENCLAW_CMD} plugins install "${pluginInstallSpec}"`);
+      rl.close(); process.exit(1);
+    }
+
+    if (!checkPlugin()) {
+      error("插件安装命令执行完毕，但未检测到插件目录。请检查 OpenClaw 配置。");
+      rl.close(); process.exit(1);
+    }
+
+    ensureOpenclawSymlink();
+    const pluginVersion = getPluginVersion();
+    if (devPackagePath) {
+      success(`✅ 开发包安装成功 (路径: ${devPackagePath})`);
+    } else {
+      success(`✅ 插件安装成功 (v${pluginVersion})`);
+    }
+    console.log();
+  } else {
+    // 插件已安装，检查是否使用了 --dev-package
+    const devPackagePath = resolveDevPackagePath();
+    if (devPackagePath) {
+      warn(`插件已安装，但 --dev-package 指定了不同的开发包路径。`);
+      log(`当前插件版本: ${env.pluginVersion}`);
+      log(`指定的开发包: ${devPackagePath}`);
+      console.log();
+      const rl2 = createRL();
+      const reinstall = await prompt(rl2, "是否重新安装开发包？(y/N): ");
+      rl2.close();
+      if (reinstall.toLowerCase() === "y") {
+        try {
+          // 先卸载现有插件
+          log("正在卸载现有插件...");
+          run(`${OPENCLAW_CMD} plugins uninstall ${PLUGIN_SPEC}`, { silent: true });
+          // 安装开发包
+          log(`正在安装开发包: ${devPackagePath}`);
+          run(`${OPENCLAW_CMD} plugins install "${devPackagePath}"`);
+          ensureOpenclawSymlink();
+          success(`✅ 开发包安装成功`);
+        } catch (err) {
+          error(`安装失败: ${err.message}`);
+          rl.close(); process.exit(1);
+        }
+      }
+    }
+    success(`✅ 环境就绪 (OpenClaw ${env.openclawVersion}, 云加插件 ${env.pluginVersion})`);
+    console.log();
+  }
+
+  // ── 第二步：扫码绑定（重试 3 次） ──────────────────────────────
+  // 用户绑定成功前，重试 3 次，每次重试重新获取并展示二维码，重试结束后放弃本次绑定
+
+  const apiBase = resolveBindingApiBase();
+  log(`绑定服务地址: ${apiBase}`);
+
+  const MAX_RETRY = MAX_POLL_RETRIES;
+  let bindResult = null;
+  let bindingId = null;
+
+  for (let attempt = 1; attempt <= MAX_RETRY; attempt++) {
+    console.log();
+
+    log(`${new Date().toISOString()} 正在请求二维码...（第 ${attempt}/${MAX_RETRY} 次）`);
+    let qrResult;
+    try {
+      qrResult = await requestQRCode(apiBase);
+    } catch (e) {
+      error(`请求二维码失败: ${e.message}`);
+      if (attempt < MAX_RETRY) {
+        warn(`将在 3 秒后重试...`);
+        await new Promise((r) => setTimeout(r, 3000));
+        continue;
+      }
+      error("多次请求二维码失败，请检查绑定服务是否可用。");
+      console.log("  也可以使用手动模式添加账户：");
+      console.log("  npx -y @inspur-ccs/openclaw-inspur-yunjia-cli add-account");
+      rl.close(); process.exit(1);
+    }
+
+    bindingId = qrResult.binding_id;
+    log(`已获取二维码，绑定ID: ${bindingId}，有效期 ${QR_EXPIRE_SECONDS} 秒`);
+
+    // 展示二维码（重试时覆盖旧的）
+    await displayQR(qrResult.qrcode_url, attempt);
+
+    // 轮询等待用户绑定（内部会处理 scanned 和 bound 事件）
+    log(`等待用户扫码（${QR_EXPIRE_SECONDS}秒有效）...`);
+    try {
+      bindResult = await pollBindingResult(apiBase, bindingId);
+    } catch (e) {
+      error(`轮询绑定结果时发生错误: ${e.message}`);
+    }
+
+    // 检查结果
+    if (!bindResult) {
+      // 连接错误或没有返回值，继续重试
+      continue;
+    }
+
+    if (bindResult.status === "bound") {
+      // 绑定成功，退出循环
+      break;
+    }
+
+    if (bindResult.status === "expired") {
+      // 过期处理
+      if (bindResult.reason === "confirm_timeout") {
+        // 用户扫码后确认超时，这是最终失败，不再重试
+        console.log();
+        error(`❌ 用户确认超时！`);
+        console.log(`  用户已扫码但未在 ${SCANNED_CONFIRM_TIMEOUT_SEC} 秒内完成确认。`);
+        console.log();
+        console.log("  请重新运行安装命令:");
+        console.log("  npx -y @inspur-ccs/openclaw-inspur-yunjia-cli install");
+        rl.close();
+        process.exit(1);
+      } else {
+        // 二维码过期
+        if (attempt < MAX_RETRY) {
+          // 还有重试机会
+          warn(`⏱️  二维码已过期，正在生成新的二维码...（${attempt}/${MAX_RETRY}）`);
+          continue;
+        } else {
+          // 最后一次重试也过期了
+          console.log();
+          error(`❌ 二维码已过期！`);
+          console.log(`  已尝试 ${MAX_RETRY} 次扫码绑定，均超时。`);
+          console.log();
+          console.log("  请重新运行安装命令:");
+          console.log("  npx -y @inspur-ccs/openclaw-inspur-yunjia-cli install");
+          rl.close();
+          process.exit(1);
+        }
+      }
+    }
+
+    // 其他状态继续等待（比如 scanned）
+    // 但 pollBindingResult 内部已经处理了 scanned，不会返回
+  }
+
+  rl.close();
+
+  if (!bindResult || bindResult.status !== "bound") {
+    error(`绑定失败，放弃本次绑定。`);
+    console.log("  请稍后重新运行: npx -y @inspur-ccs/openclaw-inspur-yunjia-cli install");
+    process.exit(1);
+  }
+
+  // 9. 绑定成功 — 写入配置（时序图步骤 10）
+  const { bot_id, bot_secret, user_id, user_name, enterprise, chat_base_url } = bindResult;
+  console.log();
+  success("✅ 用户绑定成功！");
+  console.log();
+  log(`  👤 用户: ${user_name || user_id}`);
+  if (enterprise) log(`  🏢 企业: ${enterprise}`);
+  log(`  🤖 Bot ID: ${bot_id}`);
+
+  log("正在写入通道配置...");
+  addAccountFromBinding({ botId: bot_id, botSecret: bot_secret, userId: user_id, userName: user_name, enterprise, baseChatUrl: chat_base_url });
+
+  // 10. 重启 Gateway（时序图步骤 11）
+  logAlways("正在重启 OpenClaw Gateway...");
+  try {
+    run(`${OPENCLAW_CMD} gateway restart`, { silent: false });
+  } catch {
+    error("重启失败，可手动执行：");
+    console.log(`  ${OPENCLAW_CMD} gateway restart`);
+  }
+
+  console.log();
+  success("🎉 安装完成！浪潮云加通道已就绪。");
+  console.log();
+  console.log("  插件首次启动时会自动创建到用户的聊天频道并发送欢迎消息。");
+  console.log("  查看通道状态: openclaw channels list");
+  console.log("  添加更多账户: npx -y @inspur-ccs/openclaw-inspur-yunjia-cli add-account");
+}
+
+/**
+ * 手动添加账户模式（不走二维码流程，直接输入 botId/botSecret）
+ */
+async function addAccount() {
+  const rl = createRL();
+
+  // 环境检查
+  const env = checkEnvironment();
+
+  if (!env.openclawOk) {
+    error("OpenClaw 未安装，请先安装后再运行本工具。");
+    console.log("  npm install -g openclaw");
+    console.log("  详见 https://docs.openclaw.ai/install");
+    rl.close(); process.exit(1);
+  }
+
+  if (!env.pluginOk) {
+    error("浪潮云加插件尚未安装，请先运行：");
+    console.log(`  openclaw plugins install ${PLUGIN_SPEC}`);
+    console.log("  或使用: npx -y @inspur-ccs/openclaw-inspur-yunjia-cli install");
+    rl.close(); process.exit(1);
+  }
+
+  success(`环境就绪: OpenClaw ${env.openclawVersion}, 插件 v${env.pluginVersion}`);
+  console.log();
+
+  console.log();
+  log("手动添加浪潮云加账户：");
+  console.log();
+
+  const botId = await prompt(rl, "  🤖 Bot ID: ");
+  if (!botId) { error("Bot ID 不能为空"); rl.close(); process.exit(1); }
+
+  const botSecret = await prompt(rl, "  🔑 Bot Secret: ");
+  if (!botSecret) { error("Bot Secret 不能为空"); rl.close(); process.exit(1); }
+
+  const enterprise = await prompt(rl, "  🏢 企业名称/ID (可选，回车跳过): ") || undefined;
+  const accountId = (await prompt(rl, "  📋 账户 ID (可选，默认 'default'): ")) || "default";
+
+  rl.close();
+
+  addAccountFromBinding({ botId, botSecret, enterprise });
+  success(`✅ 账户 "${accountId}" 添加成功！`);
+
+  console.log();
+  logAlways("正在重启 OpenClaw Gateway...");
+  try {
+    run(`${OPENCLAW_CMD} gateway restart`, { silent: false });
+  } catch {
+    error("重启失败，可手动执行：");
+    console.log(`  ${OPENCLAW_CMD} gateway restart`);
+  }
+}
+
+function help() {
+  console.log(`
+  用法: npx -y @inspur-ccs/openclaw-inspur-yunjia-cli [选项] <命令>
+
+  选项:
+    -v, --verbose         显示详细日志输出
+    --dev-package <path>  使用本地开发包安装插件（仅用于 install 命令）
+    --server <url>        指定绑定服务地址
+    --api-base <url>      指定绑定服务地址（同 --server）
+
+  命令:
+    check         检查当前环境是否满足运行要求
+    install       安装插件并通过二维码扫码绑定云加账户
+    add-account   手动添加账户（直接输入 Bot ID / Bot Secret）
+    help          显示帮助信息
+
+  兼容矩阵:`);
+  for (const e of COMPAT_MATRIX) {
+    console.log(`    ${e.label.padEnd(28)} OpenClaw ${formatRange(e.openclawRange)}`);
+  }
+  console.log(`
+  安装流程（二维码扫码绑定）:
+    0. 环境检查（OpenClaw + 插件）
+    1. 向云加服务端请求二维码（含绑定ID，60秒有效）
+    2. 显示二维码，等待用户使用云加客户端扫码
+    3. 用户在云加客户端确认绑定
+    4. 服务端返回 bot 凭据和绑定用户信息
+    5. 写入配置并重启 Gateway
+    6. 插件首次启动时创建聊天频道并发送欢迎消息
+
+  示例:
+    # 检查环境
+    npx -y @inspur-ccs/openclaw-inspur-yunjia-cli check
+
+    # 首次安装（二维码扫码）
+    npx -y @inspur-ccs/openclaw-inspur-yunjia-cli install
+
+    # 使用本地开发包安装
+    npx -y @inspur-ccs/openclaw-inspur-yunjia-cli install --dev-package ../openclaw-inspur-yunjia
+
+    # 指定绑定服务地址
+    npx -y @inspur-ccs/openclaw-inspur-yunjia-cli install --server http://localhost:3210
+
+    # 组合使用（开发包 + 本地服务）
+    npx -y @inspur-ccs/openclaw-inspur-yunjia-cli install --dev-package ../openclaw-inspur-yunjia --server http://localhost:3210
+
+    # 手动添加账户
+    npx -y @inspur-ccs/openclaw-inspur-yunjia-cli add-account
+`);
+}
+
+// ── main ─────────────────────────────────────────────────────────────────────
+
+const command = cleanArgv[0];
+
+switch (command) {
+  case "check":
+    {
+      const env = checkEnvironment();
+      const ok = printEnvironmentHints(env);
+      process.exit(ok ? 0 : 1);
+    }
+    break;
+  case "install":
+    install().catch((e) => { error(e.message); process.exit(1); });
+    break;
+  case "add-account":
+    addAccount().catch((e) => { error(e.message); process.exit(1); });
+    break;
+  case "help":
+  case "--help":
+  case "-h":
+    help();
+    break;
+  default:
+    if (command) error(`未知命令: ${command}`);
+    help();
+    process.exit(command ? 1 : 0);
+}