mal-updater（恶意更新程序）

MAL-Updater

Treat {baseDir} as the skill root. This repository is the skill package.

Core model

• Keep business logic in the repo-local Python CLI.
• Keep runtime state outside the skill tree under the workspace runtime root .MAL-Updater/ unless the operator explicitly overrides paths.
• Do not assume host-specific absolute paths, IPs, or preexisting local copies under ~/.openclaw/workspace/skills/.
• For new installs or portability audits, start with bootstrap-audit before doing any live auth or sync work.
• Prefer the long-lived user-systemd daemon over timers or OpenClaw cron for unattended operation.

Bootstrap / onboarding workflow

1. cd {baseDir}
2. Run PYTHONPATH=src python3 -m mal_updater.cli bootstrap-audit
3. Read {baseDir}/references/bootstrap-onboarding.md
4. Use the audit output to:

- verify required binaries - check whether provider-specific optional transport/runtime extras are missing - confirm the external runtime layout under .MAL-Updater/ - identify which user-provided secrets/app settings are still missing for MAL and any enabled source providers - verify the secrets location is outside version control and suitable for restrictive local permissions - decide whether the repo-owned user-systemd daemon can be installed on this host

1. If bootstrap is incomplete, guide the user through the missing steps instead of pretending install is finished.
2. Prompt for provider credentials only when the workflow reaches that provider's bootstrap step; do not request Crunchyroll or HIDIVE secrets preemptively if the user has not chosen or enabled that provider yet.

How to access backend data / operator surfaces

For the most common operator/data tasks, use the repo-local CLI from {baseDir}:

Read-only inspection

• PYTHONPATH=src python3 -m mal_updater.cli status
• PYTHONPATH=src python3 -m mal_updater.cli bootstrap-audit
• PYTHONPATH=src python3 -m mal_updater.cli service-status
• PYTHONPATH=src python3 -m mal_updater.cli service-run-once
• PYTHONPATH=src python3 -m mal_updater.cli health-check --format summary

Recommendations / recommendation-related data

• PYTHONPATH=src python3 -m mal_updater.cli recommend --limit 20
• PYTHONPATH=src python3 -m mal_updater.cli recommend --limit 20 --flat
• PYTHONPATH=src python3 -m mal_updater.cli recommend-refresh-metadata

Review queue / mapping triage

• PYTHONPATH=src python3 -m mal_updater.cli list-review-queue --summary
• PYTHONPATH=src python3 -m mal_updater.cli review-queue-next --issue-type mapping_review
• PYTHONPATH=src python3 -m mal_updater.cli review-queue-worklist --issue-type mapping_review --limit 5
• PYTHONPATH=src python3 -m mal_updater.cli list-mappings

Sync planning / guarded execution

• PYTHONPATH=src python3 -m mal_updater.cli dry-run-sync --provider all --limit 20 --approved-mappings-only
• PYTHONPATH=src python3 -m mal_updater.cli apply-sync --limit 0 --exact-approved-only --execute
• PYTHONPATH=src python3 -m mal_updater.cli provider-fetch-snapshot --provider crunchyroll --out .MAL-Updater/cache/live-crunchyroll-snapshot.json --ingest
• PYTHONPATH=src python3 -m mal_updater.cli provider-fetch-snapshot --provider hidive --out .MAL-Updater/cache/live-hidive-snapshot.json --ingest

Operational workflow

Prefer read-only inspection before live writes.

Read-only first:

• status
• bootstrap-audit
• health-check
• service-status
• service-run-once
• list-mappings
• list-review-queue --summary
• dry-run-sync
• recommend

Treat these as state-changing:

• mal-auth-login
• mal-refresh
• provider-auth-login --provider crunchyroll
• provider-auth-login --provider hidive
• provider-fetch-snapshot --provider <provider> --ingest
• apply-sync --execute
• scripts/install_user_systemd_units.sh
• install-service
• restart-service

High-value references

• Read {baseDir}/references/bootstrap-onboarding.md for install/onboarding/bootstrap expectations.
• Read {baseDir}/references/cli-recipes.md for copy/paste command patterns.
• Read {baseDir}/references/data-surfaces.md for a concise map of which backend commands expose recommendations, review-queue state, service/runtime state, and guarded sync surfaces.

Guardrails

• Keep sync behavior conservative; do not invent broader write scope than the CLI already supports.
• Prefer dry-run-sync before apply-sync --execute unless the task explicitly asks for a live apply.
• Treat Crunchyroll auth/fetch instability as real residue; document it plainly.
• Treat staged provider credentials and long-lived tokens as sensitive local files; keep them out of version control and prefer restrictive local permissions.
• When a host cannot satisfy the unattended daemon path, say so clearly instead of silently skipping service setup.
• Recommend manual review before enabling unattended daemon operation on a host that matters.
• Keep outputs short and actionable: counts, blockers, next command, and whether user input is needed.