chore(portable): 回归纯开源 — 移除指纹/自动开户/崩溃上报

去掉不适合开源的商业逻辑，保持一个纯粹的开源 U 盘工具：

- 删除设备指纹 (fingerprint.mjs)、虾盘云自动开户 (bootstrap-xiapan.mjs /
  xiapan-client.mjs)、自动崩溃上报 (report-bug.mjs)，portable 和 Electron 两份都删
- 启动脚本去掉绑定指纹调用 + 全部 --auto 自动上报；保留 bonjour 禁用与括号转义
- config-server 删掉 /api/xiapan/* 和 /api/report-bug 端点
- Config.html：虾盘云改为普通「首选」卡片，强调中转站 / 国内外全部大模型，
  和其它 provider 一样需用户自填 Key（去 u-claw.org/cloud.html 注册），不再自动开户
- 报 Bug 表单改为指向 GitHub Issue，不再上传日志
- README / release notes / CLAUDE.md 文案改为「选模型填 Key，不绑定设备、不打指纹、不上传数据」
- OPENCLAW_VERSION 跟进最新龙虾版本 2026.6.6 → 2026.6.8

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

portable/lib/bootstrap-xiapan.mjs

@@ -1,188 +0,0 @@
-// Bootstrap: ensure data/.openclaw/openclaw.json contains the uclaw-cloud provider
-// pointing to the device-bound apiKey derived from the local fingerprint.
-//
-// Idempotent: if the provider already exists with the correct apiKey, do nothing.
-// If it exists but the apiKey differs (USB swapped, machine changed), leave the
-// existing entry alone and log a hint — never overwrite user data silently.
-
-import { existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { getFingerprint } from './fingerprint.mjs';
-import { buildApiKey, provisionApiKey } from './xiapan-client.mjs';
-
-const PROVIDER_ID = 'uclaw-cloud';
-
-// Mirror ClawX commercial schema: keep models[] empty and steer model selection
-// via agents.defaults.model.primary + fallbacks. OpenClaw 2026.4.x accepts both
-// shapes, but the empty-models form lets the runtime auto-discover model ids
-// from /v1/models without us hard-coding a list that drifts from the backend.
-const DEFAULT_PROVIDER_TEMPLATE = {
-  baseUrl: 'https://api.u-claw.org/v1',
-  api: 'openai-completions',
-  models: [],
-};
-
-const DEFAULT_PRIMARY_MODEL = `${PROVIDER_ID}/deepseek-v4-flash`;
-const DEFAULT_FALLBACK_MODELS = [
-  `${PROVIDER_ID}/deepseek-chat`,
-  `${PROVIDER_ID}/qwen-plus`,
-  `${PROVIDER_ID}/qwen-turbo`,
-];
-
-function readJsonSafe(filePath) {
-  if (!existsSync(filePath)) return null;
-  try {
-    const raw = readFileSync(filePath, 'utf8');
-    return JSON.parse(raw);
-  } catch (err) {
-    process.stderr.write(`[bootstrap-xiapan] Cannot parse ${filePath}: ${err.message}\n`);
-    return null;
-  }
-}
-
-function writeJson(filePath, data) {
-  writeFileSync(filePath, JSON.stringify(data, null, 2) + '\n', 'utf8');
-}
-
-function ensureModelsContainer(config) {
-  if (!config.models || typeof config.models !== 'object') {
-    config.models = { mode: 'merge', providers: {} };
-  }
-  if (!config.models.mode) config.models.mode = 'merge';
-  if (!config.models.providers || typeof config.models.providers !== 'object') {
-    config.models.providers = {};
-  }
-  return config.models.providers;
-}
-
-// Set agents.defaults.model.primary to uclaw-cloud only when the user has not
-// configured a primary model already. If they've picked a different provider
-// (e.g. DeepSeek BYOK), leave their choice untouched.
-function ensureAgentsDefaults(config) {
-  if (!config.agents || typeof config.agents !== 'object') {
-    config.agents = {};
-  }
-  if (!config.agents.defaults || typeof config.agents.defaults !== 'object') {
-    config.agents.defaults = {};
-  }
-  const defaults = config.agents.defaults;
-  if (!defaults.model || typeof defaults.model !== 'object') {
-    defaults.model = {};
-  }
-  let changed = false;
-  if (!defaults.model.primary) {
-    defaults.model.primary = DEFAULT_PRIMARY_MODEL;
-    changed = true;
-  }
-  if (!Array.isArray(defaults.model.fallbacks) || defaults.model.fallbacks.length === 0) {
-    defaults.model.fallbacks = [...DEFAULT_FALLBACK_MODELS];
-    changed = true;
-  }
-  return changed;
-}
-
-export async function bootstrapXiapan({ configPath, appRoot, log = console } = {}) {
-  if (!configPath) {
-    throw new Error('bootstrapXiapan: configPath is required.');
-  }
-  const root = appRoot || process.cwd();
-
-  let fingerprintInfo;
-  try {
-    fingerprintInfo = await getFingerprint(root);
-  } catch (err) {
-    log.warn?.(`[bootstrap-xiapan] Fingerprint detection failed: ${err.message}`);
-    return { ok: false, reason: 'fingerprint-failed' };
-  }
-
-  const config = readJsonSafe(configPath) || { gateway: { mode: 'local', auth: { token: 'uclaw' } } };
-  const providers = ensureModelsContainer(config);
-  const existing = providers[PROVIDER_ID];
-
-  // 幂等：配置里已有 uclaw-cloud apiKey → 保持不动，不再打网络 provision。
-  // （后端 provision 本身也按 deviceId 幂等，但客户端先短路可避免每次启动都请求。）
-  if (existing && typeof existing === 'object' && existing.apiKey) {
-    const changedDefaults = ensureAgentsDefaults(config);
-    if (changedDefaults) {
-      writeJson(configPath, config);
-      log.info?.('[bootstrap-xiapan] Added agents.defaults to existing config');
-    }
-    return {
-      ok: true,
-      action: changedDefaults ? 'agents-defaults-added' : 'noop',
-      source: fingerprintInfo.source,
-      apiKey: existing.apiKey,
-    };
-  }
-
-  // 首启（配置里还没有 cloud key）：静默开户。把指纹送到虾盘云后台自动开一个带
-  // 试用额度的 token。成功 → 用后端真正注册过的 key（可直接聊天，解决 Invalid token）。
-  // 失败（离线/后端不可达）→ 回退到指纹派生 key，至少配置不空、不阻塞启动。
-  let apiKey = buildApiKey(fingerprintInfo.fingerprint);
-  let provisioned = false;
-  try {
-    const prov = await provisionApiKey(fingerprintInfo.fingerprint, { source: 'uclaw-portable' });
-    if (prov.ok && prov.apiKey) {
-      apiKey = prov.apiKey;
-      provisioned = true;
-      log.info?.(`[bootstrap-xiapan] Provisioned cloud token (reused=${prov.reused})`);
-    } else {
-      log.info?.(`[bootstrap-xiapan] Provision skipped (${prov.reason}); using fingerprint key`);
-    }
-  } catch (err) {
-    log.info?.(`[bootstrap-xiapan] Provision failed (${err.message}); using fingerprint key`);
-  }
-
-  providers[PROVIDER_ID] = {
-    ...DEFAULT_PROVIDER_TEMPLATE,
-    ...(existing && typeof existing === 'object' ? existing : {}),
-    baseUrl: existing?.baseUrl || DEFAULT_PROVIDER_TEMPLATE.baseUrl,
-    api: existing?.api || DEFAULT_PROVIDER_TEMPLATE.api,
-    apiKey,
-    models: existing?.models ?? DEFAULT_PROVIDER_TEMPLATE.models,
-  };
-  ensureAgentsDefaults(config);
-
-  writeJson(configPath, config);
-  log.info?.(
-    `[bootstrap-xiapan] Wrote uclaw-cloud provider (source=${fingerprintInfo.source}, `
-    + `provisioned=${provisioned}, key=${apiKey.slice(0, 12)}…)`,
-  );
-  return {
-    ok: true,
-    action: 'created',
-    provisioned,
-    source: fingerprintInfo.source,
-    apiKey,
-  };
-}
-
-// CLI:
-//   node bootstrap-xiapan.mjs <config-path>
-//   env UCLAW_CONFIG_PATH=... node bootstrap-xiapan.mjs
-import { pathToFileURL } from 'node:url';
-const isMain = (() => {
-  try {
-    if (!process.argv[1]) return false;
-    return import.meta.url === pathToFileURL(process.argv[1]).href;
-  } catch {
-    return false;
-  }
-})();
-
-if (isMain) {
-  const configPath = process.argv[2] || process.env.UCLAW_CONFIG_PATH;
-  if (!configPath) {
-    process.stderr.write('Usage: node bootstrap-xiapan.mjs <openclaw.json path>\n');
-    process.exit(2);
-  }
-  const appRoot = process.env.UCLAW_APP_ROOT || resolve(configPath, '../../..');
-  bootstrapXiapan({ configPath, appRoot })
-    .then((res) => {
-      process.stdout.write(`${JSON.stringify(res)}\n`);
-    })
-    .catch((err) => {
-      process.stderr.write(`bootstrap-xiapan error: ${err.message}\n`);
-      process.exit(1);
-    });
-}

portable/lib/fingerprint.mjs

@@ -1,359 +0,0 @@
-// Cross-platform device fingerprint for U-Claw / Xiapan Cloud apiKey binding.
-// Output: { source: 'usb' | 'disk' | 'mac' | 'linux' | 'seed' | 'test', fingerprint: '<64-hex>' }
-//
-// Order of preference:
-//   Windows: USB drive (when running from a USB volume) -> system disk -> seed file
-//   Mac:     Hardware UUID + boot volume UUID            -> seed file
-//   Linux:   /etc/machine-id + lsblk SERIAL of root      -> seed file
-//
-// Adapted from v2/u-clawx-openclaw-dev/electron/utils/{license,disk-fingerprint}.ts
-// but simplified: no Ed25519 signing, no .license file, just a stable hash.
-
-import { execFile } from 'node:child_process';
-import { createHash, randomBytes } from 'node:crypto';
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { homedir, platform } from 'node:os';
-import { dirname, parse, relative, resolve, sep } from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { promisify } from 'node:util';
-
-const execFileAsync = promisify(execFile);
-
-const POWERSHELL_CANDIDATES = [
-  'powershell.exe',
-  'powershell',
-  'C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe',
-  'C:\\Windows\\Sysnative\\WindowsPowerShell\\v1.0\\powershell.exe',
-  'pwsh.exe',
-];
-
-const TEST_FINGERPRINT_SOURCE = 'TEST:UCLAW_DEVELOPMENT_FIXED_FINGERPRINT';
-
-function sha256Hex(input) {
-  return createHash('sha256').update(input).digest('hex');
-}
-
-function shouldUseTestFingerprint() {
-  return (
-    process.env.UCLAW_SKIP_FINGERPRINT === '1'
-    || process.env.OPENCLAW_SKIP_USB_CHECK === '1'
-    || process.env.CLAWX_SKIP_USB_CHECK === '1'
-  );
-}
-
-function readEnvOverride() {
-  const override = (process.env.UCLAW_FINGERPRINT_OVERRIDE || '').trim();
-  if (!override || !/^[0-9a-f]{64}$/i.test(override)) return null;
-  return { source: 'test', fingerprint: override.toLowerCase() };
-}
-
-function getSeedPath(appRoot) {
-  if (process.env.UCLAW_SEED_PATH) {
-    return resolve(process.env.UCLAW_SEED_PATH);
-  }
-  const home = homedir();
-  if (home) return resolve(home, '.uclaw', '.usb_seed');
-  return resolve(appRoot, '.usb_seed');
-}
-
-function readOrCreateSeedFingerprint(appRoot) {
-  const seedPath = getSeedPath(appRoot);
-  let seedHex;
-  if (existsSync(seedPath)) {
-    seedHex = readFileSync(seedPath, 'utf8').trim();
-  }
-  if (!seedHex || !/^[0-9a-f]{64}$/i.test(seedHex)) {
-    seedHex = randomBytes(32).toString('hex');
-    mkdirSync(dirname(seedPath), { recursive: true });
-    writeFileSync(seedPath, seedHex + '\n', 'utf8');
-  }
-  return { source: 'seed', fingerprint: seedHex.toLowerCase() };
-}
-
-async function runPowerShell(script) {
-  const wrapped = `$OutputEncoding = [Console]::OutputEncoding = [System.Text.Encoding]::UTF8; ${script}`;
-  let lastError = null;
-  for (const candidate of POWERSHELL_CANDIDATES) {
-    try {
-      const { stdout } = await execFileAsync(candidate, ['-NoProfile', '-Command', wrapped], {
-        windowsHide: true,
-        encoding: 'utf8',
-        maxBuffer: 1024 * 1024,
-      });
-      return stdout;
-    } catch (err) {
-      if (err && err.code === 'ENOENT') continue;
-      lastError = err;
-    }
-  }
-  throw lastError || new Error('PowerShell is not available on this system.');
-}
-
-function normalizeSerial(value) {
-  if (!value) return '';
-  return String(value).trim().replace(/[\s.]+$/g, '').replace(/\s+/g, '').toUpperCase();
-}
-
-function getDriveDepth(targetDir) {
-  const parsed = parse(resolve(targetDir));
-  if (!parsed.root) return null;
-  const rel = relative(parsed.root, resolve(targetDir));
-  const depth = rel.split(sep).map((s) => s.trim()).filter(Boolean).length;
-  return { driveRoot: parsed.root.replace(/[\\/]$/, '').toUpperCase(), depth };
-}
-
-async function tryWindowsUsbFingerprint(appRoot) {
-  const drive = getDriveDepth(appRoot);
-  if (!drive) return null;
-  // Only attempt USB fingerprint when running from a drive root or first-level subfolder
-  if (drive.depth > 2) return null;
-  const driveLetter = drive.driveRoot.endsWith(':') ? drive.driveRoot : `${drive.driveRoot}:`;
-
-  const driveMappingScript = [
-    `$p = Get-WmiObject -Query "ASSOCIATORS OF {Win32_LogicalDisk.DeviceID='${driveLetter}'} WHERE AssocClass=Win32_LogicalDiskToPartition"`,
-    '$p0 = if ($p -is [System.Array]) { $p[0] } else { $p }',
-    '$d = if ($p0) { Get-WmiObject -Query "ASSOCIATORS OF {Win32_DiskPartition.DeviceID=\'$($p0.DeviceID)\'} WHERE AssocClass=Win32_DiskDriveToDiskPartition" } else { $null }',
-    '$d0 = if ($d -is [System.Array]) { $d[0] } else { $d }',
-    "if ($d0) { $d0.PNPDeviceID } else { '' }",
-  ].join('; ');
-
-  let targetPnpId = '';
-  try {
-    targetPnpId = (await runPowerShell(driveMappingScript)).trim().toUpperCase();
-  } catch {
-    targetPnpId = '';
-  }
-
-  let rawDiskJson;
-  try {
-    rawDiskJson = await runPowerShell(
-      'Get-WmiObject Win32_DiskDrive | Select-Object Model, SerialNumber, PNPDeviceID | ConvertTo-Json -Compress',
-    );
-  } catch {
-    return null;
-  }
-
-  let disks;
-  try {
-    const parsed = JSON.parse(rawDiskJson.trim() || '[]');
-    disks = Array.isArray(parsed) ? parsed : [parsed];
-  } catch {
-    return null;
-  }
-  if (!disks.length) return null;
-
-  const exactMatch = targetPnpId
-    ? disks.find((d) => (d.PNPDeviceID || '').toUpperCase() === targetPnpId)
-    : null;
-
-  const usbDisk = exactMatch || disks.find((d) => {
-    const pnp = (d.PNPDeviceID || '').toUpperCase();
-    return pnp.includes('USB') || pnp.includes('USBSTOR');
-  });
-
-  if (!usbDisk) return null;
-
-  const model = (usbDisk.Model || 'Unknown').trim();
-  const serial = (usbDisk.SerialNumber || 'Unknown').trim();
-  const pnp = (usbDisk.PNPDeviceID || 'Unknown').trim();
-  return {
-    source: 'usb',
-    fingerprint: sha256Hex(`${model}:${serial}:${pnp}`),
-  };
-}
-
-async function tryWindowsDiskFingerprint() {
-  let physicalDiskInfo = null;
-  try {
-    const physicalScript = [
-      "$systemDrive = ($env:SystemDrive -replace ':','')",
-      "if (-not $systemDrive) { $systemDrive = 'C' }",
-      '$disk = Get-Partition -DriveLetter $systemDrive -ErrorAction SilentlyContinue | Get-Disk -ErrorAction SilentlyContinue | Select-Object -First 1',
-      'if (-not $disk) { return }',
-      '$pd = Get-PhysicalDisk -DeviceNumber $disk.Number -ErrorAction SilentlyContinue | Select-Object -First 1',
-      'if (-not $pd) { return }',
-      '[pscustomobject]@{ Serial = $pd.SerialNumber; Model = $pd.FriendlyName; BusType = $pd.BusType } | ConvertTo-Json -Compress',
-    ].join('; ');
-    const raw = (await runPowerShell(physicalScript)).trim();
-    if (raw) physicalDiskInfo = JSON.parse(raw);
-  } catch {
-    physicalDiskInfo = null;
-  }
-
-  if (!physicalDiskInfo) {
-    try {
-      const win32Script = [
-        "$systemDrive = $env:SystemDrive -replace ':',''",
-        "if (-not $systemDrive) { $systemDrive = 'C' }",
-        '$letter = "$systemDrive`:"',
-        "$lp = Get-WmiObject -Query \"ASSOCIATORS OF {Win32_LogicalDisk.DeviceID='$letter'} WHERE AssocClass=Win32_LogicalDiskToPartition\"",
-        '$lp0 = if ($lp -is [System.Array]) { $lp[0] } else { $lp }',
-        'if (-not $lp0) { return }',
-        "$dd = Get-WmiObject -Query \"ASSOCIATORS OF {Win32_DiskPartition.DeviceID='$($lp0.DeviceID)'} WHERE AssocClass=Win32_DiskDriveToDiskPartition\"",
-        '$dd0 = if ($dd -is [System.Array]) { $dd[0] } else { $dd }',
-        'if (-not $dd0) { return }',
-        '[pscustomobject]@{ Serial = $dd0.SerialNumber; Model = $dd0.Model; BusType = $dd0.InterfaceType } | ConvertTo-Json -Compress',
-      ].join('; ');
-      const raw = (await runPowerShell(win32Script)).trim();
-      if (raw) physicalDiskInfo = JSON.parse(raw);
-    } catch {
-      physicalDiskInfo = null;
-    }
-  }
-  if (!physicalDiskInfo) return null;
-
-  let boardSerial = 'NoBoard';
-  try {
-    const raw = await runPowerShell('(Get-CimInstance Win32_BaseBoard | Select-Object -First 1).SerialNumber');
-    boardSerial = normalizeSerial(raw) || 'NoBoard';
-  } catch {
-    // keep default
-  }
-
-  const diskSerial = normalizeSerial(physicalDiskInfo.Serial);
-  const diskModel = (physicalDiskInfo.Model || 'Unknown').toString().trim();
-  return {
-    source: 'disk',
-    fingerprint: sha256Hex(`DISK:${diskSerial}:${diskModel}:${boardSerial}`),
-  };
-}
-
-async function tryMacFingerprint() {
-  let hardwareUuid = '';
-  try {
-    const { stdout } = await execFileAsync('/usr/sbin/system_profiler', ['SPHardwareDataType'], {
-      encoding: 'utf8',
-      maxBuffer: 1024 * 1024,
-    });
-    const match = stdout.match(/Hardware UUID:\s*([0-9A-F-]+)/i);
-    if (match) hardwareUuid = match[1].trim().toUpperCase();
-  } catch {
-    hardwareUuid = '';
-  }
-
-  let bootVolumeUuid = '';
-  try {
-    const { stdout } = await execFileAsync('/usr/sbin/diskutil', ['info', '/'], {
-      encoding: 'utf8',
-      maxBuffer: 1024 * 1024,
-    });
-    const match = stdout.match(/Volume UUID:\s*([0-9A-F-]+)/i);
-    if (match) bootVolumeUuid = match[1].trim().toUpperCase();
-  } catch {
-    bootVolumeUuid = '';
-  }
-
-  if (!hardwareUuid && !bootVolumeUuid) return null;
-  return {
-    source: 'mac',
-    fingerprint: sha256Hex(`MAC:${hardwareUuid}:${bootVolumeUuid}`),
-  };
-}
-
-async function tryLinuxFingerprint() {
-  let machineId = '';
-  for (const path of ['/etc/machine-id', '/var/lib/dbus/machine-id']) {
-    try {
-      machineId = readFileSync(path, 'utf8').trim();
-      if (machineId) break;
-    } catch {
-      // try next
-    }
-  }
-
-  let rootSerial = '';
-  try {
-    const { stdout } = await execFileAsync('/bin/lsblk', ['-no', 'SERIAL,MOUNTPOINT'], {
-      encoding: 'utf8',
-      maxBuffer: 1024 * 1024,
-    });
-    for (const line of stdout.split('\n')) {
-      const parts = line.trim().split(/\s+/);
-      if (parts.length >= 2 && parts[1] === '/') {
-        rootSerial = parts[0];
-        break;
-      }
-    }
-  } catch {
-    rootSerial = '';
-  }
-
-  if (!machineId && !rootSerial) return null;
-  return {
-    source: 'linux',
-    fingerprint: sha256Hex(`LINUX:${machineId}:${rootSerial}`),
-  };
-}
-
-let cachedPromise = null;
-
-export async function getFingerprint(appRoot) {
-  if (cachedPromise) return cachedPromise;
-  cachedPromise = computeFingerprint(appRoot || process.cwd()).catch((err) => {
-    cachedPromise = null;
-    throw err;
-  });
-  return cachedPromise;
-}
-
-async function computeFingerprint(appRoot) {
-  const override = readEnvOverride();
-  if (override) return override;
-
-  if (shouldUseTestFingerprint()) {
-    return { source: 'test', fingerprint: sha256Hex(TEST_FINGERPRINT_SOURCE) };
-  }
-
-  const plat = platform();
-
-  if (plat === 'win32') {
-    const usb = await tryWindowsUsbFingerprint(appRoot).catch(() => null);
-    if (usb) return usb;
-    const disk = await tryWindowsDiskFingerprint().catch(() => null);
-    if (disk) return disk;
-    return readOrCreateSeedFingerprint(appRoot);
-  }
-
-  if (plat === 'darwin') {
-    const mac = await tryMacFingerprint().catch(() => null);
-    if (mac) return mac;
-    return readOrCreateSeedFingerprint(appRoot);
-  }
-
-  if (plat === 'linux') {
-    const linux = await tryLinuxFingerprint().catch(() => null);
-    if (linux) return linux;
-    return readOrCreateSeedFingerprint(appRoot);
-  }
-
-  return readOrCreateSeedFingerprint(appRoot);
-}
-
-// CLI entrypoint: prints JSON when run directly.
-//   node fingerprint.mjs        -> {"source":"...","fingerprint":"..."}
-//   node fingerprint.mjs apiKey -> sk-<fingerprint>
-const isMain = (() => {
-  try {
-    if (!process.argv[1]) return false;
-    return import.meta.url === pathToFileURL(process.argv[1]).href;
-  } catch {
-    return false;
-  }
-})();
-
-if (isMain) {
-  const appRoot = process.env.UCLAW_APP_ROOT || process.cwd();
-  getFingerprint(appRoot)
-    .then((result) => {
-      const arg = process.argv[2];
-      if (arg === 'apiKey') {
-        process.stdout.write(`sk-${result.fingerprint}\n`);
-      } else {
-        process.stdout.write(`${JSON.stringify(result)}\n`);
-      }
-    })
-    .catch((err) => {
-      process.stderr.write(`fingerprint error: ${err && err.message ? err.message : err}\n`);
-      process.exit(1);
-    });
-}

portable/lib/report-bug.mjs

@@ -1,207 +0,0 @@
-// Bug 上报客户端（便携版）
-//
-// 流程：
-//   1. 算设备指纹 -> sk-uc- apiKey（用来在服务器侧关联同一台设备的多条上报）
-//   2. 收集 openclaw 版本号、设备类型、系统信息、最近日志（gzip+base64）
-//   3. POST 到 https://api.u-claw.org/recharge/bug/submit
-//
-// 设计原则（对齐 check-update.mjs）：
-//   - 静默失败：上报失败只 console.error，绝不影响 OpenClaw 主流程
-//   - 异步：调用方应 detach 跑（Windows-Start.bat 用 start /B），不阻塞启动
-//   - 无第三方依赖：fetch + node:zlib 都是内置
-//
-// 两种用法：
-//   手动（网页一键，由 config-server 转发）：import { submitBugReport } from './report-bug.mjs'
-//   自动（崩溃）：node lib/report-bug.mjs --auto --title "gateway-start-failed" [--log <文件>]
-
-import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
-import { gzipSync } from 'node:zlib';
-import { resolve, join } from 'node:path';
-import { platform, release, arch, tmpdir } from 'node:os';
-import { pathToFileURL } from 'node:url';
-
-import { getFingerprint } from './fingerprint.mjs';
-import { buildApiKey } from './xiapan-client.mjs';
-
-const DEFAULT_API_BASE = 'https://api.u-claw.org/v1';
-const REQUEST_TIMEOUT_MS = 10_000;
-const MAX_LOG_BYTES = 256 * 1024; // 只取日志尾部 256KB，避免上报体过大
-
-function log(level, msg) {
-  const stream = level === 'error' ? process.stderr : process.stdout;
-  stream.write(`[report-bug] ${msg}\n`);
-}
-
-// API base 默认带 /v1（虾盘云 API 中转），bug 上报走独立的 /bug 路径，所以去掉尾部 /v1。
-// 例：https://api.u-claw.org/v1 -> https://api.u-claw.org/bug/submit
-function getSubmitUrl() {
-  const base = (process.env.UCLAW_CLOUD_API_BASE || DEFAULT_API_BASE).replace(/\/+$/, '');
-  const root = base.replace(/\/v1$/, '');
-  return `${root}/bug/submit`;
-}
-
-async function fetchWithTimeout(url, init) {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
-  try {
-    return await fetch(url, { ...init, signal: controller.signal });
-  } finally {
-    clearTimeout(timer);
-  }
-}
-
-// 读 OPENCLAW_VERSION：优先环境变量，再找盘内文件
-function readOpenclawVersion(appRoot) {
-  if (process.env.OPENCLAW_VERSION) return process.env.OPENCLAW_VERSION.trim();
-  const candidates = [
-    process.env.UCLAW_VERSION_FILE,
-    appRoot && resolve(appRoot, 'OPENCLAW_VERSION'),
-    appRoot && resolve(appRoot, '..', 'OPENCLAW_VERSION'),
-  ].filter(Boolean);
-  for (const p of candidates) {
-    try {
-      if (existsSync(p)) {
-        const v = readFileSync(p, 'utf8').trim();
-        if (v) return v;
-      }
-    } catch { /* 静默 */ }
-  }
-  return null;
-}
-
-function collectSystemInfo() {
-  return JSON.stringify({
-    platform: platform(),
-    arch: arch(),
-    osRelease: release(),
-    node: process.version,
-    time: new Date().toISOString(),
-  });
-}
-
-// 读最近一份 openclaw 日志的尾部，gzip+base64。失败返回 null。
-// 日志默认在 %LOCALAPPDATA%\Temp\openclaw\ 或 $TMPDIR/openclaw/，文件名形如 openclaw-{date}.log
-function collectLogsB64(explicitLogPath) {
-  try {
-    let logFile = null;
-    if (explicitLogPath && existsSync(explicitLogPath)) {
-      logFile = explicitLogPath;
-    } else {
-      const logDir = process.env.OPENCLAW_LOG_DIR || join(tmpdir(), 'openclaw');
-      if (existsSync(logDir)) {
-        const logs = readdirSync(logDir)
-          .filter((f) => /\.log$/i.test(f))
-          .map((f) => join(logDir, f))
-          .map((p) => ({ p, m: safeMtime(p) }))
-          .filter((x) => x.m > 0)
-          .sort((a, b) => b.m - a.m);
-        if (logs.length) logFile = logs[0].p;
-      }
-    }
-    if (!logFile) return null;
-
-    let raw = readFileSync(logFile);
-    if (raw.length > MAX_LOG_BYTES) raw = raw.subarray(raw.length - MAX_LOG_BYTES);
-    return gzipSync(raw).toString('base64');
-  } catch (err) {
-    log('error', `collect logs failed: ${err.message}`);
-    return null;
-  }
-}
-
-function safeMtime(p) {
-  try { return statSync(p).mtimeMs; } catch { return 0; }
-}
-
-/**
- * 上报一个 bug。所有现场信息（指纹/版本/系统/日志）由本函数自动补齐，
- * 调用方只需给 title（必填）和 description（可选）。
- *
- * @param {object} opts
- * @param {string} opts.title         必填，bug 标题
- * @param {string} [opts.description] 描述（用户填写或堆栈）
- * @param {string} [opts.appRoot]     便携版根目录，用于算指纹和找版本文件，默认 cwd
- * @param {string} [opts.logPath]     指定日志文件；不给则自动找最近的 openclaw 日志
- * @param {boolean}[opts.includeLogs] 是否附带日志，默认 true
- * @returns {Promise<{ok:boolean, id?:number, reason?:string}>}
- */
-export async function submitBugReport(opts = {}) {
-  const { title, description, appRoot, logPath, includeLogs = true } = opts;
-  if (!title || typeof title !== 'string' || title.trim().length < 3) {
-    return { ok: false, reason: 'title-required' };
-  }
-  const root = appRoot || process.cwd();
-
-  // 指纹失败不阻止上报，匿名提交即可
-  let api_key = null;
-  let device_source = null;
-  try {
-    const fp = await getFingerprint(root);
-    device_source = fp.source;
-    api_key = buildApiKey(fp.fingerprint);
-  } catch (err) {
-    log('error', `fingerprint failed (上报为匿名): ${err.message}`);
-  }
-
-  const payload = {
-    api_key,
-    device_source,
-    openclaw_version: readOpenclawVersion(root),
-    title: title.trim(),
-    description: description || null,
-    logs_b64: includeLogs ? collectLogsB64(logPath) : null,
-    system_info: collectSystemInfo(),
-  };
-
-  try {
-    const res = await fetchWithTimeout(getSubmitUrl(), {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify(payload),
-    });
-    const data = await res.json().catch(() => ({}));
-    if (!res.ok) {
-      log('error', `submit failed: HTTP ${res.status} ${data.error || ''}`);
-      return { ok: false, reason: data.error || `http-${res.status}` };
-    }
-    log('info', `submitted bug #${data.id}`);
-    return { ok: true, id: data.id };
-  } catch (err) {
-    log('error', `submit failed: ${err.message}`);
-    return { ok: false, reason: err.message };
-  }
-}
-
-// CLI 入口（自动崩溃上报用）：
-//   node report-bug.mjs --auto --title "gateway-start-failed" [--desc "..."] [--log <文件>] [--root <便携版根>]
-const isMain = (() => {
-  try {
-    if (!process.argv[1]) return false;
-    return import.meta.url === pathToFileURL(process.argv[1]).href;
-  } catch {
-    return false;
-  }
-})();
-
-if (isMain) {
-  const args = process.argv.slice(2);
-  const getArg = (name) => {
-    const i = args.indexOf(name);
-    return i >= 0 && i + 1 < args.length ? args[i + 1] : null;
-  };
-  const title = getArg('--title') || 'auto-report';
-  const description = getArg('--desc');
-  const logPath = getArg('--log');
-  const appRoot = getArg('--root') || process.env.UCLAW_APP_ROOT || process.cwd();
-
-  submitBugReport({ title, description, appRoot, logPath })
-    .then((res) => {
-      process.stdout.write(`${JSON.stringify(res)}\n`);
-      process.exit(res.ok ? 0 : 1);
-    })
-    .catch((err) => {
-      // 即便崩了也别让上报本身把启动脚本拖挂
-      process.stderr.write(`report-bug fatal: ${err && err.message ? err.message : err}\n`);
-      process.exit(1);
-    });
-}

portable/lib/xiapan-client.mjs

@@ -1,118 +0,0 @@
-// Xiapan Cloud (虾盘云) client for U-Claw open-source edition.
-// Provides only: apiKey derivation, balance lookup, recharge URL.
-// Intentionally does NOT call /recharge/activate — open-source users do not get free quota.
-
-const DEFAULT_API_BASE = 'https://api.u-claw.org/v1';
-const DEFAULT_RECHARGE_PAGE = 'https://u-claw.org/cloud.html';
-const QUOTA_PER_USD = 500_000; // 1 USD = 500k tokens (matches new-api convention)
-const REQUEST_TIMEOUT_MS = 10_000;
-
-// sk-uc- prefix marks keys generated by the u-claw open-source edition.
-// ClawX commercial keys use plain sk-<hash> and the cloud.html flow uses sk-xp-,
-// so the three namespaces never collide and the backend can audit by prefix.
-export function buildApiKey(fingerprint) {
-  if (!fingerprint || !/^[0-9a-f]{64}$/i.test(fingerprint)) {
-    throw new Error('Fingerprint must be 64-character hex.');
-  }
-  return `sk-uc-${fingerprint.toLowerCase()}`;
-}
-
-function getApiBase() {
-  return (process.env.UCLAW_CLOUD_API_BASE || DEFAULT_API_BASE).replace(/\/+$/, '');
-}
-
-function getRechargePage() {
-  return process.env.UCLAW_CLOUD_RECHARGE_PAGE || DEFAULT_RECHARGE_PAGE;
-}
-
-async function fetchWithTimeout(url, init) {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
-  try {
-    return await fetch(url, { ...init, signal: controller.signal });
-  } finally {
-    clearTimeout(timer);
-  }
-}
-
-export async function getBalance(apiKey) {
-  if (!apiKey) throw new Error('apiKey is required.');
-  const base = getApiBase();
-  const headers = { Authorization: `Bearer ${apiKey}` };
-
-  const [subRes, usageRes] = await Promise.all([
-    fetchWithTimeout(`${base}/dashboard/billing/subscription`, { headers }).catch(() => null),
-    fetchWithTimeout(
-      `${base}/dashboard/billing/usage?start_date=2020-01-01&end_date=${new Date().toISOString().slice(0, 10)}`,
-      { headers },
-    ).catch(() => null),
-  ]);
-
-  if (!subRes || !subRes.ok) {
-    return {
-      ok: false,
-      reason: subRes ? `subscription HTTP ${subRes.status}` : 'subscription request failed',
-      hardLimitUsd: 0,
-      usedUsd: 0,
-      remainingUsd: 0,
-      remainingTokens: 0,
-    };
-  }
-
-  const subscription = await subRes.json().catch(() => ({}));
-  let usedUsd = 0;
-  if (usageRes && usageRes.ok) {
-    const usage = await usageRes.json().catch(() => ({}));
-    // total_usage is in cents (USD * 100), per new-api convention
-    usedUsd = Number(usage.total_usage || 0) / 100;
-  }
-
-  const hardLimitUsd = Number(subscription.hard_limit_usd || 0);
-  const remainingUsd = Math.max(0, hardLimitUsd - usedUsd);
-  const remainingTokens = Math.round(remainingUsd * QUOTA_PER_USD);
-
-  return {
-    ok: true,
-    reason: null,
-    hardLimitUsd,
-    usedUsd,
-    remainingUsd,
-    remainingTokens,
-  };
-}
-
-export function getRechargeUrl(apiKey) {
-  if (!apiKey) throw new Error('apiKey is required.');
-  const page = getRechargePage();
-  const url = new URL(page);
-  url.searchParams.set('key', apiKey);
-  // Page already has #recharge anchor; preserve it
-  return `${url.toString()}#recharge`;
-}
-
-// 首启静默开户：把设备指纹送到虾盘云后台，自动创建一个 token 并附带试用额度。
-// 后端按 deviceId 幂等（同一台机器永远拿同一个 token，刷不出额度），不重启容器。
-// 返回 { ok, apiKey, reused } —— apiKey 是后端真正注册过的 key（可直接聊天）。
-// 失败时返回 { ok:false, reason }，调用方应回退到指纹派生 key（至少配置不空）。
-export async function provisionApiKey(fingerprint, { source = 'uclaw-portable' } = {}) {
-  if (!fingerprint || !/^[0-9a-f]{64}$/i.test(fingerprint)) {
-    return { ok: false, reason: 'bad-fingerprint' };
-  }
-  const base = getApiBase();              // https://api.u-claw.org/v1
-  const root = base.replace(/\/v1$/, ''); // https://api.u-claw.org
-  const url = `${root}/internal/token/provision`;
-  try {
-    const res = await fetchWithTimeout(url, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ deviceId: fingerprint.toLowerCase(), source }),
-    });
-    const data = await res.json().catch(() => ({}));
-    if (!res.ok || !data.success || !data.data || !data.data.apiKey) {
-      return { ok: false, reason: data.message || `http-${res.status}` };
-    }
-    return { ok: true, apiKey: data.data.apiKey, reused: !!data.reused };
-  } catch (err) {
-    return { ok: false, reason: err.message };
-  }
-}