mirror of
https://github.com/whyour/qinglong.git
synced 2026-09-28 09:02:12 +08:00
whyour
801a71d740
* feat(cli): add unified Commander CLI for QingLong 2.x * fix(cli): publish via npm and address security review feedback * ci(cli): package npm artifacts and remove evaluation collateral * test(cli): use a fixed shell fixture for log retention * refactor(cli): separate remote npm client from panel tools * feat(cli): cover active panel OpenAPI resources * docs(cli): unify authentication and skill guidance * refactor(cli): isolate internal commands and generate Commander help * refactor(cli): organize remote and internal modules by responsibility * ci(cli): publish verified npm archives from master * fix(cli): publish under the whyour npm scope * ci: use npm trusted publishing for both packages * docs: introduce the published CLI on the project homepage * fix(cli): preserve server log truncation and correct login hints * fix(cli): accept dashboard record request bodies * fix(cli): preserve stdin for local task execution * fix(cli): resolve task executables after changing directory * fix(cli): preserve shell function tasks and sanitize test failures * fix(cli): preserve shell hook state and resolve workdir after hooks * fix(cli): preserve cleanup across shared shell task timeouts * fix(cli): isolate shell control descriptors and reap timed-out descendants
116 lines
3.9 KiB
YAML
116 lines
3.9 KiB
YAML
name: CLI package
|
|
|
|
on:
|
|
pull_request:
|
|
paths:
|
|
- 'cli/**'
|
|
- 'shell/**'
|
|
- 'back/api/**'
|
|
- 'back/loaders/deps.ts'
|
|
- 'package.json'
|
|
- '.github/workflows/cli-package.yml'
|
|
push:
|
|
branches: [develop, master]
|
|
paths:
|
|
- 'cli/**'
|
|
- 'shell/**'
|
|
- 'back/api/**'
|
|
- 'back/loaders/deps.ts'
|
|
- 'package.json'
|
|
- '.github/workflows/cli-package.yml'
|
|
workflow_dispatch:
|
|
inputs:
|
|
publish:
|
|
description: Publish the verified CLI package (master only)
|
|
type: boolean
|
|
default: false
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: cli-package-${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
|
|
|
|
jobs:
|
|
package:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 15
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
node: ['22.12.0', '24']
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- uses: actions/setup-node@v6
|
|
with:
|
|
node-version: ${{ matrix.node }}
|
|
cache: npm
|
|
cache-dependency-path: cli/package-lock.json
|
|
- name: Install test interpreters and tools
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y --no-install-recommends bash ca-certificates curl git jq perl procps python3 unzip zip
|
|
npm install --global --ignore-scripts --no-audit --no-fund ts-node@10.9.2 typescript@5.2.2
|
|
- run: npm ci --prefix cli --no-audit --no-fund
|
|
- run: npm run check:cli
|
|
- run: npm run test:cli
|
|
- name: Verify offline package installation
|
|
env:
|
|
QL_CLI_PACKAGE_OUTPUT: ${{ runner.temp }}/cli-package
|
|
run: node cli/scripts/verify-package.cjs
|
|
- name: Upload verified npm archive
|
|
if: matrix.node == '24'
|
|
uses: actions/upload-artifact@v6
|
|
with:
|
|
name: qinglong-cli-${{ github.sha }}
|
|
path: ${{ runner.temp }}/cli-package/*.tgz
|
|
if-no-files-found: error
|
|
retention-days: 14
|
|
|
|
publish:
|
|
needs: package
|
|
if: >-
|
|
github.repository == 'whyour/qinglong' &&
|
|
github.ref == 'refs/heads/master' &&
|
|
(github.event_name == 'push' ||
|
|
(github.event_name == 'workflow_dispatch' && inputs.publish))
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 5
|
|
permissions:
|
|
contents: read
|
|
id-token: write
|
|
steps:
|
|
- uses: actions/setup-node@v6
|
|
with:
|
|
node-version: '24'
|
|
package-manager-cache: false
|
|
registry-url: https://registry.npmjs.org
|
|
- uses: actions/download-artifact@v7
|
|
with:
|
|
name: qinglong-cli-${{ github.sha }}
|
|
path: cli-package
|
|
- name: Publish verified npm archive
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
shopt -s nullglob
|
|
archives=(cli-package/*.tgz)
|
|
if [ "${#archives[@]}" -ne 1 ]; then
|
|
echo '::error::Expected exactly one verified CLI archive.'
|
|
exit 1
|
|
fi
|
|
archive="${archives[0]}"
|
|
metadata=$(tar -xOf "$archive" package/package.json)
|
|
name=$(jq -er '.name | select(. == "@whyour/qinglong-cli")' <<< "$metadata")
|
|
version=$(jq -er '.version | select(type == "string" and test("^[0-9]+\\.[0-9]+\\.[0-9]+$"))' <<< "$metadata")
|
|
if npm view "$name@$version" version --json --registry=https://registry.npmjs.org > version.json 2> version-error.log; then
|
|
jq -e --arg version "$version" '. == $version' version.json > /dev/null
|
|
echo "::notice::$name@$version is already published; bump cli/package.json and its lockfile to release changes."
|
|
exit 0
|
|
elif ! jq -e '.error.code == "E404"' version.json > /dev/null; then
|
|
echo '::error::Could not check the published CLI version; refusing to publish.'
|
|
exit 1
|
|
fi
|
|
npm publish "./$archive" --access public --tag latest --ignore-scripts --registry=https://registry.npmjs.org
|