7418andClaude Opus 4.6
99c4931b12
三层质量保障闭环： package.json: - 新增 typecheck / test:unit / test:smoke / test:e2e / test / prepare 脚本 - 新增 lint-staged 配置（仅对暂存 .ts/.tsx 文件运行 eslint --fix） - 新增 devDependencies: husky, lint-staged, tsx .husky/pre-commit: - 依次执行 lint-staged → tsc --noEmit → 单元测试 - 任一步骤失败即阻止提交 src/__tests__/e2e/smoke.spec.ts: - 5 个 Playwright @smoke 测试覆盖核心路由 (/, /chat, /plugins, /plugins/mcp, /settings) - 检查 HTTP 状态、Next.js 错误覆盖层、标题、console 错误 - 复用已有 helpers (goToChat, goToPlugins, goToMCP, goToSettings, collectConsoleErrors, filterCriticalErrors) .github/workflows/build.yml: - 新增 lint-test job (ubuntu-latest): lint → typecheck → unit tests - 新增 pull_request 触发器 - 三个 build job 添加 needs: [lint-test]，lint-test 失败则不构建 - lint 步骤暂设 continue-on-error（存量 4 个 lint error 待修复） CLAUDE.md: - 新增"自检命令"区块，说明 test / test:smoke / test:e2e 用途 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
299 lines
8.9 KiB
YAML
299 lines
8.9 KiB
YAML
name: Build & Package
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
platform:
|
|
description: "Target platform"
|
|
required: true
|
|
default: "all"
|
|
type: choice
|
|
options:
|
|
- all
|
|
- windows
|
|
- macos
|
|
- linux
|
|
pull_request:
|
|
branches: [main]
|
|
push:
|
|
tags:
|
|
- "v*"
|
|
|
|
permissions:
|
|
contents: write
|
|
|
|
jobs:
|
|
lint-test:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 20
|
|
cache: npm
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Lint
|
|
# TODO: fix 4 existing lint errors then remove continue-on-error
|
|
continue-on-error: true
|
|
run: npm run lint
|
|
|
|
- name: Typecheck
|
|
run: npm run typecheck
|
|
|
|
- name: Unit tests
|
|
run: npm run test:unit
|
|
|
|
build-windows:
|
|
needs: [lint-test]
|
|
if: ${{ github.event_name == 'push' || inputs.platform == 'all' || inputs.platform == 'windows' }}
|
|
runs-on: windows-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 20
|
|
cache: npm
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Build Electron app
|
|
run: npm run electron:build
|
|
|
|
- name: Package for Windows
|
|
run: npx electron-builder --win --config electron-builder.yml --publish never
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: build-windows
|
|
path: |
|
|
release/*.exe
|
|
retention-days: 3
|
|
|
|
build-macos:
|
|
needs: [lint-test]
|
|
if: ${{ github.event_name == 'push' || inputs.platform == 'all' || inputs.platform == 'macos' }}
|
|
runs-on: macos-latest
|
|
env:
|
|
HAS_CERT: ${{ secrets.MAC_CERT_P12_BASE64 != '' && 'true' || 'false' }}
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 20
|
|
cache: npm
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Build Electron app
|
|
run: npm run electron:build
|
|
|
|
- name: Decode signing certificate
|
|
env:
|
|
MAC_CERT_P12_BASE64: ${{ secrets.MAC_CERT_P12_BASE64 }}
|
|
MAC_CERT_PASSWORD: ${{ secrets.MAC_CERT_PASSWORD }}
|
|
run: |
|
|
if [ "${HAS_CERT}" != "true" ]; then
|
|
echo "::error::Missing signing certificate (MAC_CERT_P12_BASE64 secret not set)"
|
|
exit 1
|
|
fi
|
|
printf '%s' "$MAC_CERT_P12_BASE64" | tr -d '\r\n' | base64 --decode > /tmp/cert.p12
|
|
openssl pkcs12 -in /tmp/cert.p12 -passin pass:"$MAC_CERT_PASSWORD" -noout
|
|
echo "Certificate decoded and validated"
|
|
|
|
- name: Package for macOS (x64 + arm64, sign only)
|
|
timeout-minutes: 15
|
|
env:
|
|
CSC_LINK: /tmp/cert.p12
|
|
CSC_KEY_PASSWORD: ${{ secrets.MAC_CERT_PASSWORD }}
|
|
run: npx electron-builder --mac --config electron-builder.yml --publish never
|
|
|
|
- name: Verify code signature
|
|
run: |
|
|
APPS=$(find release -name "CodePilot.app" -maxdepth 3)
|
|
if [ -z "$APPS" ]; then
|
|
echo "::error::No CodePilot.app found after build"
|
|
exit 1
|
|
fi
|
|
|
|
FAILED=0
|
|
while IFS= read -r APP_PATH; do
|
|
echo "========== Verifying: $APP_PATH =========="
|
|
codesign -dv --verbose=4 "$APP_PATH" 2>&1 | tee /tmp/codesign-info.txt || true
|
|
|
|
if ! grep -q 'Authority=Developer ID Application' /tmp/codesign-info.txt; then
|
|
echo "::error::$APP_PATH is NOT signed with Developer ID Application"
|
|
FAILED=1
|
|
continue
|
|
fi
|
|
|
|
if ! grep -q 'TeamIdentifier=K9X599X9Q2' /tmp/codesign-info.txt; then
|
|
echo "::error::$APP_PATH has unexpected TeamIdentifier"
|
|
FAILED=1
|
|
continue
|
|
fi
|
|
|
|
codesign --verify --deep --strict --verbose=4 "$APP_PATH"
|
|
echo "✓ $APP_PATH passed all checks"
|
|
done <<< "$APPS"
|
|
|
|
if [ "$FAILED" -ne 0 ]; then
|
|
echo "::error::One or more .app bundles failed signature verification"
|
|
exit 1
|
|
fi
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: build-macos
|
|
path: |
|
|
release/*.dmg
|
|
release/*.zip
|
|
retention-days: 3
|
|
|
|
build-linux:
|
|
needs: [lint-test]
|
|
if: ${{ github.event_name == 'push' || inputs.platform == 'all' || inputs.platform == 'linux' }}
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
arch: [x64, arm64]
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 20
|
|
cache: npm
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Build Electron app
|
|
run: npm run electron:build
|
|
|
|
- name: Package for Linux (${{ matrix.arch }})
|
|
run: npx electron-builder --linux --${{ matrix.arch }} --config electron-builder.yml --publish never
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: build-linux-${{ matrix.arch }}
|
|
path: |
|
|
release/*.AppImage
|
|
release/*.deb
|
|
release/*.rpm
|
|
retention-days: 3
|
|
|
|
release:
|
|
if: ${{ always() && github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && !contains(needs.*.result, 'cancelled') }}
|
|
needs: [build-windows, build-macos, build-linux]
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Download all artifacts
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
path: artifacts
|
|
merge-multiple: true
|
|
|
|
- name: List artifacts
|
|
run: find artifacts -type f | sort
|
|
|
|
- name: Get version and previous tag
|
|
id: meta
|
|
run: |
|
|
VERSION=${GITHUB_REF_NAME#v}
|
|
echo "version=$VERSION" >> "$GITHUB_OUTPUT"
|
|
PREV_TAG=$(git tag --sort=-creatordate | grep '^v' | sed -n '2p' || echo "")
|
|
echo "prev_tag=$PREV_TAG" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Generate changelog
|
|
id: changelog
|
|
run: |
|
|
PREV_TAG="${{ steps.meta.outputs.prev_tag }}"
|
|
if [ -n "$PREV_TAG" ]; then
|
|
RANGE="${PREV_TAG}..HEAD"
|
|
else
|
|
RANGE="HEAD"
|
|
fi
|
|
{
|
|
echo "changelog<<CHANGELOG_EOF"
|
|
git log "$RANGE" --pretty=format:'| `%h` | %s |'
|
|
echo ""
|
|
echo "CHANGELOG_EOF"
|
|
} >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Create release and upload assets
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
VERSION="${{ steps.meta.outputs.version }}"
|
|
PREV_TAG="${{ steps.meta.outputs.prev_tag }}"
|
|
|
|
cat > release-notes.md << 'NOTES_EOF'
|
|
## Downloads
|
|
|
|
**Windows**
|
|
- **CodePilot Setup ${{ steps.meta.outputs.version }}.exe** — Windows installer (x64 + arm64)
|
|
|
|
**macOS**
|
|
- **CodePilot-${{ steps.meta.outputs.version }}-arm64.dmg** — macOS Apple Silicon (M1/M2/M3/M4)
|
|
- **CodePilot-${{ steps.meta.outputs.version }}-x64.dmg** — macOS Intel
|
|
|
|
**Linux**
|
|
- **AppImage / deb / rpm** — x64 and arm64
|
|
|
|
## Installation
|
|
|
|
**Windows**: Download the exe installer, double-click to install.
|
|
|
|
**macOS**:
|
|
1. Download the DMG for your chip architecture
|
|
2. Open the DMG, drag CodePilot into Applications
|
|
3. If you see a security prompt on first launch, go to **System Settings > Privacy & Security** and click "Open Anyway"
|
|
4. Configure your Anthropic API Key in Settings
|
|
|
|
**Linux**: Run the AppImage directly, or install via deb/rpm package.
|
|
|
|
## Requirements
|
|
|
|
- Windows 10+ / macOS 12.0+ / Linux (glibc 2.31+)
|
|
- Anthropic API Key or `ANTHROPIC_API_KEY` environment variable
|
|
- Claude Code CLI recommended for code features
|
|
|
|
## Changelog
|
|
NOTES_EOF
|
|
|
|
if [ -n "$PREV_TAG" ]; then
|
|
echo "" >> release-notes.md
|
|
echo "| Commit | Description |" >> release-notes.md
|
|
echo "|--------|-------------|" >> release-notes.md
|
|
cat >> release-notes.md << 'CHANGELOG_INLINE_EOF'
|
|
${{ steps.changelog.outputs.changelog }}
|
|
CHANGELOG_INLINE_EOF
|
|
fi
|
|
|
|
# Collect release files: installers only (no blockmap / update metadata)
|
|
FILES=()
|
|
while IFS= read -r f; do
|
|
FILES+=("$f")
|
|
done < <(find artifacts -type f \( -name "*.dmg" -o -name "*.zip" -o -name "*.exe" -o -name "*.AppImage" -o -name "*.deb" -o -name "*.rpm" \) | sort)
|
|
|
|
gh release create "${GITHUB_REF_NAME}" \
|
|
--title "CodePilot v${VERSION}" \
|
|
--notes-file release-notes.md \
|
|
--latest \
|
|
"${FILES[@]}"
|