feat: 海外化改造（新加坡市场）—— 阶段 0-3

按 U-Claw-海外化改造方案.md 与 范围决策记录.md 实施。这是 fork，不回上游：
海外版删掉的正是上游的中国市场默认值。

阶段 0 地基
- 下载源全部改国际：脚本/CI 61 处 + lockfile 880 条 npmmirror URL 归零
  （lockfile 那 880 条是 npm 的 resolved 字段，脚本层参数化根本绕不过它）
- 移除 install.ps1 里三个第三方 GitHub 加速代理，bundle 改直连 + SHA256 校验
  （原来只检查"文件大于 1MB"就解压运行）
- 技能内容与分发分离：skills/manifest.json 单一来源，install.sh 1170→658 行、
  install.ps1 721→546 行，两者技能内容归零
  实测原来是三份不一致：skills-cn 完整、install.sh 约 40%、install.ps1 约 17%，
  且 7 个通用技能只有 U 盘版有 —— 一键安装的用户一个能用的技能都没有
- Node 版本三种（v22.14/16/22.1）统一，新建 NODE_VERSION 单一来源
- Config 页三份合一。portable/Config.html 用根相对路径调 API 却只从 file:// 打开，
  保存功能已静默失效两个月；现缩为 120 行重定向壳
- 测试接入 CI（此前 node --test 无人运行，所有断言形同虚设）

阶段 1 双语可用
- 浏览器侧 i18n：JSON 为源、生成经典 script（file:// 下 fetch 本地 JSON 被拦）
  语言跟盘走不跟机器走：启动器写 data/.openclaw/locale.js
- 8 处硬编码 lang="zh-CN" 归零，data-i18n 覆盖 213 处，词条 en/zh 各 279 条
- B3 单框 Key：12 张模型卡 → 一个输入框，前缀识别 provider，
  服务端 /api/test-key 发 1-token 请求实测，错误映射成人话
  Key 填错到得知：从"直到对话失败"降到 ≤1 秒
- 区域格式 SG：DD/MM/YYYY、12 小时、S$、Asia/Singapore
  （ICU 在 en-SG 下把 SGD 渲染成裸 $，与美元无法区分，故自行拼 S$）
- README 内容分叉而非翻译，§1.3 证据清单逐条清零

阶段 2 降门槛
- 启动逻辑上移 lib/start.mjs：Windows-Start.bat 220→28 行、
  Mac-Start.command 235→33 行
  修掉 Mac 侧两个 bug：控制台端口硬编码 18788（回落时打开死页）、
  微信插件从未在 Mac 上安装
- U 盘根目录 23 → 3 个可点文件，其余进 advanced/
- 首启向导：语言 → 用途（7 角色，manifest 驱动）→ 密钥，答过不再问
- 三档界面，Simple 档隐藏一切技术名词
- 自动自愈：启动失败先自查自修，修不好导出脱敏诊断包
  （Doctor 从"用户要知道去点的工具"变成后台机制）

阶段 3 技能库
- 19 个英文技能，planned 归零。sg-weather / sg-transport 的端点均实测过
- SkillHub 从 56 张手写第三方卡片改为 manifest 生成：703→125 行，中文归零

其他
- origin.json 收拢所有运行时地址，tests/origin.test.mjs 保证迁移不会漏
- portable/ 下用户可见中文归零（由断言保证）
- 82 项测试

未验证（本机无 Windows / 无 pwsh）：
- install.ps1、setup.ps1 约 210 行改动从未经 PowerShell 解析器
- 完整启动路径仅在假 node + 假 openclaw 上冒烟
- 8 个 .bat 的盘根推导仅静态断言
详见 U盘实测清单.md

受阻：
- 隐藏黑窗口 —— 需代码签名证书（.vbs 已被 Windows 弃用，替代方案都要签名）
- 场景卡 —— OpenClaw 上游 Dashboard 无预填 prompt 接口
- 官网 36 条 —— 上游 2026-04-14 拆到私有仓库，无权限

portable/config-server/server.js

@@ -404,6 +404,133 @@ const server = http.createServer((req, res) => {
     return;
   }
 
+  // API: what the first-run wizard offers, straight from the manifest.
+  if (req.url === '/api/personas' && req.method === 'GET') {
+    try {
+      const manifestPath = path.join(__dirname, '..', 'skills', 'manifest.json');
+      const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
+      const shipping = manifest.skills.filter((s) => s.status === 'shipping');
+      res.writeHead(200, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify(manifest.personas.map((p) => ({
+        ...p,
+        skills: shipping.filter((s) => (s.personas || []).includes(p.id)).map((s) => s.id),
+      }))));
+    } catch (err) {
+      res.writeHead(500, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify({ error: err.message }));
+    }
+    return;
+  }
+
+  // API: install the skills a persona needs. Runs the same installer the
+  // release build and the one-line installers use, so there is one code path.
+  if (req.url === '/api/install-skills' && req.method === 'POST') {
+    let body = '';
+    req.on('data', (chunk) => { body += chunk; if (body.length > 4096) req.destroy(); });
+    req.on('end', async () => {
+      const reply = (payload, status = 200) => {
+        res.writeHead(status, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify(payload));
+      };
+      let persona = 'general';
+      let locale = 'en';
+      try {
+        const parsed = JSON.parse(body || '{}');
+        if (parsed.persona) persona = String(parsed.persona);
+        if (parsed.locale) locale = String(parsed.locale);
+      } catch { /* fall back to the defaults */ }
+
+      const target = path.join(__dirname, '..', 'app', 'core', 'node_modules', 'openclaw', 'skills');
+      // On the drive the installer sits in lib/ next to us; in a source checkout
+      // it lives at the repo root. Same two-place lookup the setup scripts use.
+      const installer = [
+        path.join(__dirname, '..', 'lib', 'install-skills.mjs'),
+        path.join(__dirname, '..', '..', 'lib', 'install-skills.mjs'),
+      ].find((candidate) => fs.existsSync(candidate));
+      if (!installer) return reply({ ok: false, reason: 'installer-missing' });
+
+      try {
+        fs.mkdirSync(target, { recursive: true });
+        const { execFile } = require('child_process');
+        await new Promise((resolve, reject) => {
+          execFile(process.execPath,
+            [installer, '--target', target, '--locale', locale, '--persona', persona, '--json'],
+            { timeout: 30000 },
+            (err, stdout) => (err ? reject(err) : resolve(stdout)));
+        });
+        reply({ ok: true, persona });
+      } catch (err) {
+        // Skills are a bonus, not a gate: the wizard continues either way.
+        reply({ ok: false, reason: err.message });
+      }
+    });
+    return;
+  }
+
+  // API: Identify an API key and check that it actually works.
+  //
+  // Runs server-side on purpose: the browser cannot call most model endpoints
+  // cross-origin, and doing it here means the key never leaves this machine by
+  // any path the page controls. Sends the smallest possible completion (1 token)
+  // and maps the outcome to a message key the page translates -- users get
+  // "that key was not accepted, here is what to do", not "401 Unauthorized".
+  if (req.url === '/api/test-key' && req.method === 'POST') {
+    let body = '';
+    req.on('data', (chunk) => {
+      body += chunk;
+      // A key is short; anything large is not a key.
+      if (body.length > 8192) req.destroy();
+    });
+    req.on('end', async () => {
+      const reply = (payload, status = 200) => {
+        res.writeHead(status, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify(payload));
+      };
+
+      let parsed;
+      try { parsed = JSON.parse(body || '{}'); } catch { return reply({ ok: false, reason: 'key.err_unknown' }, 400); }
+
+      const apiKey = String(parsed.apiKey || '').trim();
+      if (!apiKey) return reply({ ok: false, reason: 'key.err_empty' });
+
+      const { detectProvider, classifyFailure } = await import('../lib/provider-detect.mjs');
+      const detected = detectProvider(apiKey);
+      const baseUrl = String(parsed.baseUrl || detected?.baseUrl || '').replace(/\/+$/, '');
+      const model = String(parsed.model || detected?.model || '');
+
+      if (!baseUrl || !model) {
+        return reply({ ok: false, provider: detected, reason: 'key.err_unrecognised' });
+      }
+
+      const startedAt = Date.now();
+      const controller = new AbortController();
+      const timer = setTimeout(() => controller.abort(), 15000);
+      try {
+        const response = await fetch(`${baseUrl}/chat/completions`, {
+          method: 'POST',
+          signal: controller.signal,
+          headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${apiKey}`,
+            // Anthropic's endpoint wants its own header; sending both is harmless.
+            'x-api-key': apiKey,
+            'anthropic-version': '2023-06-01',
+          },
+          body: JSON.stringify({ model, max_tokens: 1, messages: [{ role: 'user', content: 'hi' }] }),
+        });
+        if (!response.ok) {
+          return reply({ ok: false, provider: detected, status: response.status, reason: classifyFailure({ status: response.status }) });
+        }
+        return reply({ ok: true, provider: detected, baseUrl, model, latencyMs: Date.now() - startedAt });
+      } catch (err) {
+        return reply({ ok: false, provider: detected, reason: classifyFailure({ code: err?.cause?.code || err?.code || err?.name }) });
+      } finally {
+        clearTimeout(timer);
+      }
+    });
+    return;
+  }
+
   // API: Get config
   if (req.url === '/api/config' && req.method === 'GET') {
     try {
@@ -519,6 +646,25 @@ const server = http.createServer((req, res) => {
     return;
   }
 
+  // Serve the shared i18n runtime and the drive's locale from outside public/.
+  // Keeping one copy matters: the pages opened from file:// load these same
+  // files by relative path, and a second copy under public/ would drift.
+  if (req.url.startsWith('/lib/i18n/') || req.url === '/locale.js') {
+    const target = req.url === '/locale.js'
+      ? path.join(__dirname, '../data/.openclaw/locale.js')
+      : path.join(__dirname, '..', 'lib', 'i18n', path.basename(req.url));
+    if (fs.existsSync(target) && fs.statSync(target).isFile()) {
+      res.writeHead(200, { 'Content-Type': 'application/javascript; charset=utf-8' });
+      res.end(fs.readFileSync(target));
+    } else {
+      // locale.js is written by the launcher; before the first run it is absent
+      // and the page falls back to the browser language. Not an error.
+      res.writeHead(204);
+      res.end();
+    }
+    return;
+  }
+
   // Serve static files
   const filePath = req.url === '/'
     ? path.join(__dirname, 'public/index.html')