feat: prefer remote MCP OAuth installation
This commit is contained in:
@@ -87,18 +87,34 @@ try {
|
||||
if (!installer.startsWith("#!/usr/bin/env node\n") || /from ["']\.\//.test(installer)) throw new Error("首次安装器必须是无相对依赖的独立 Node 脚本");
|
||||
const install = readFileSync(join(releaseDir, "install.md"), "utf8");
|
||||
if (install.includes("{{") || !install.includes(`版本:\`${version}\``)
|
||||
|| !install.includes("唯一通用安装入口") || !install.includes("postInstall")
|
||||
|| !install.includes("onboarding.firstRun=true") || !install.includes("系统无需预装 Node.js")
|
||||
|| !install.includes("至少 10 分钟超时") || !install.includes("Git Bash")
|
||||
|| /--host|WorkBuddy|Codex|Claude/.test(install)) {
|
||||
throw new Error("install.md 版本、占位符或通用安装引导不正确");
|
||||
|| !install.includes(manifest.gatewayUrl) || !install.includes("Streamable HTTP") || !install.includes("OAuth")
|
||||
|| !install.includes("compat-install.md") || !install.includes("不要安装 Node.js、npm、本地 Bridge")
|
||||
|| /PowerShell|Git Bash|postInstall|loginCommand|npm install -g|--host|WorkBuddy|Codex|Claude/.test(install)) {
|
||||
throw new Error("install.md 不是有效的远程 MCP 优先安装引导");
|
||||
}
|
||||
const windowsBootstrap = readFileSync(join(releaseDir, artifactName(manifest.artifacts.bootstrapWindows, "bootstrapWindows")), "utf8");
|
||||
const compatibilityInstall = readFileSync(join(releaseDir, "compat-install.md"), "utf8");
|
||||
if (compatibilityInstall.includes("{{") || !compatibilityInstall.includes(`版本:\`${version}\``)
|
||||
|| !compatibilityInstall.includes("仅当当前 Agent 明确不支持远程 Streamable HTTP MCP 或标准 OAuth")
|
||||
|| !compatibilityInstall.includes("postInstall") || !compatibilityInstall.includes("onboarding.firstRun=true")
|
||||
|| !compatibilityInstall.includes("系统无需预装 Node.js") || !compatibilityInstall.includes("Git Bash")
|
||||
|| /TimeoutSec 300|--max-time 300|--timeout=300/.test(compatibilityInstall)
|
||||
|| /--host|WorkBuddy|Codex|Claude/.test(compatibilityInstall)) {
|
||||
throw new Error("compat-install.md 版本、占位符或兼容安装引导不正确");
|
||||
}
|
||||
const windowsBootstrapBytes = readFileSync(join(releaseDir, artifactName(manifest.artifacts.bootstrapWindows, "bootstrapWindows")));
|
||||
if (windowsBootstrapBytes[0] !== 0xef || windowsBootstrapBytes[1] !== 0xbb || windowsBootstrapBytes[2] !== 0xbf) {
|
||||
throw new Error("Windows PowerShell 引导缺少 UTF-8 BOM");
|
||||
}
|
||||
const windowsBootstrap = windowsBootstrapBytes.toString("utf8").replace(/^\uFEFF/, "");
|
||||
const posixBootstrapPath = join(releaseDir, artifactName(manifest.artifacts.bootstrapPosix, "bootstrapPosix"));
|
||||
const posixBootstrap = readFileSync(posixBootstrapPath, "utf8");
|
||||
if (windowsBootstrap.includes("{{") || posixBootstrap.includes("{{")
|
||||
|| !windowsBootstrap.includes("Save-DingDownload") || !windowsBootstrap.includes("Expand-Archive")
|
||||
|| !windowsBootstrap.includes("curl.exe") || !windowsBootstrap.includes("--max-time 90")
|
||||
|| !windowsBootstrap.includes(`-e "const [a,b]=process.versions.node.split('.').map(Number)`)
|
||||
|| windowsBootstrap.includes("TimeoutSec 300")
|
||||
|| !windowsBootstrap.includes("Write-DingProgress") || !posixBootstrap.includes("ding_progress")
|
||||
|| !posixBootstrap.includes("--max-time 90") || /--max-time 300|--timeout=300/.test(posixBootstrap)
|
||||
|| !posixBootstrap.startsWith("#!/bin/sh\nset -eu\n") || !posixBootstrap.includes("tar -xzf")
|
||||
|| /latest-v|npm install -g/.test(`${windowsBootstrap}\n${posixBootstrap}`)) {
|
||||
throw new Error("无 Node 安装引导无效或仍包含不安全的动态版本来源");
|
||||
|
||||
Reference in New Issue
Block a user