fix(cli): prevent silent VP-mode crash by adding uncaughtException handler and error visibility

.aoneci/npm-publish.yml

@@ -0,0 +1,180 @@
+# .aoneci/workflows/npm-publish.yml
+# 发布 npm 包到 anpm
+#
+# 版本策略：
+#   - main 分支 + release_mode=true：x.y.z-dataworks.N + dist-tag=latest（正式版）
+#   - 其他所有情况：              x.y.z-beta.N     + dist-tag=beta（预发布版）
+#   - 版本号自动查询 registry 递增 N
+#
+# 流程：
+#   1. npm ci          — 安装依赖
+#   2. npm run build   — tsc 编译所有 workspace 包
+#   3. npm run bundle  — esbuild 首次打包 CLI（使用 package.json 原始版本）
+#   4. publish-packages.js:
+#      a. 写入 .npmrc 认证
+#      b. auto-version → 更新所有 package.json 版本号
+#      c. re-bundle    → 重新 esbuild 打包（使用新版本号，嵌入 CLI_VERSION）
+#      d. npm publish --workspaces → 发布所有非 private 包
+#   5. 打包 bundle tarball 并上传 OSS
+#      - latest 发布更新 latest/dataworks 指针
+#      - beta 发布更新 beta 指针
+
+name: 'NPM Publish'
+
+# 仅手动触发，避免误发布。在 Aone CI 平台手动选择分支和参数执行。
+# 默认 dry-run，真实发布需手动关闭。
+
+params:
+  dry_run:
+    description: '是否 dry-run（勾选=仅模拟，不勾选=真实发布）'
+    type: boolean
+    default: true
+  release_mode:
+    description: '正式版发布（仅 main 分支生效，开启后发布 dataworks + latest）'
+    type: boolean
+    default: false
+
+jobs:
+  npm-build-publish:
+    runs-on:
+      - 32-128Gi
+    name: 'Build & Publish'
+    image: alios-8u
+    envs:
+      BOOTSTRAP_TOKEN: ${{secrets.BOOTSTRAP_TOKEN}}
+      OSS_UPLOAD_TARGETS: "public finance"
+    steps:
+      - uses: checkout
+      - uses: setup-env
+        inputs:
+          node-version: '22'
+          tnpm-version: '10'
+          python-version: '3.10'
+          rust-toolchain-version: stable
+          tnpm-cache: true
+
+      - name: 'Install dependencies'
+        run: 'npm ci'
+
+      - name: 'Build project (tsc)'
+        run: 'npm run build'
+
+      - name: 'Run tests'
+        run: |
+          # Root `npm run test` runs workspaces in parallel, which makes AoneCI
+          # failure logs hard to locate. Run publish checks sequentially so the
+          # first failing package is visible in the job output.
+          set -e
+          npm -w packages/cli run test -- \
+            --testTimeout=30000 \
+            --hookTimeout=30000
+          npm -w packages/core run test -- \
+            --testTimeout=30000
+          npm -w packages/sdk-typescript run test
+          npm -w packages/vscode-ide-companion run test
+
+      - name: 'Bundle CLI (esbuild)'
+        run: 'npm run bundle'
+
+      - name: 'Verify bundle'
+        run: |
+          echo "=== dist/cli.js ==="
+          ls -lh dist/cli.js
+          echo ""
+          echo "=== dist/ structure ==="
+          ls dist/
+
+      - name: 'Publish packages'
+        run: |
+          # 仅 main 分支 + release_mode=true 才发正式版，其他一律 beta
+          if [ "${{git.branch}}" = "main" ] && [ "${{ params.release_mode }}" = "true" ]; then
+            PUBLISH_TAG="latest"
+            PUBLISH_PRE_ID="dataworks"
+          else
+            PUBLISH_TAG="beta"
+            PUBLISH_PRE_ID="beta"
+          fi
+          echo "Branch: ${{git.branch}} release_mode=${{params.release_mode}} → tag=$PUBLISH_TAG, pre_id=$PUBLISH_PRE_ID"
+          ARGS="--token ${{ secrets.inner_npm_publish_token }} --tag $PUBLISH_TAG --pre-id $PUBLISH_PRE_ID --auto-version"
+          [ "${{ params.dry_run }}" = "true" ] && ARGS="$ARGS --dry-run"
+          node scripts/publish-packages.js $ARGS
+
+      - name: 'Verify published CLI package'
+        run: |
+          DRY_RUN="${{ params.dry_run }}"
+          if [ "$DRY_RUN" = "true" ]; then
+            echo "Skipped (dry-run mode)"
+            exit 0
+          fi
+          sleep 5
+          echo "=== @alife/dataworks-qwen-code ==="
+          npm view @alife/dataworks-qwen-code --registry=https://registry.anpm.alibaba-inc.com/ --json 2>&1 | node -e "
+            const j = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));
+            const tags = j['dist-tags'] || {};
+            for (const [tag, ver] of Object.entries(tags)) {
+              console.log(tag + ':', ver);
+            }
+          " || echo "View failed"
+
+      # ── OSS Bundle 发布 ──
+
+      - name: 'Resolve version & OSS policy'
+        run: |
+          VERSION=$(node -e "process.stdout.write(require('./package.json').version)")
+          mkdir -p /workspace
+          echo "${VERSION}" > /workspace/.resolved_version
+          date -u +%Y-%m-%dT%H:%M:%SZ > /workspace/.build_time
+          if [ "${{git.branch}}" = "main" ] && [ "${{ params.release_mode }}" = "true" ]; then
+            OSS_RELEASE_CHANNELS="dataworks"
+            SKIP_LATEST_POINTER=""
+          else
+            OSS_RELEASE_CHANNELS="beta"
+            SKIP_LATEST_POINTER="1"
+          fi
+          {
+            printf 'OSS_RELEASE_CHANNELS=%s\n' "${OSS_RELEASE_CHANNELS}"
+            printf 'SKIP_LATEST_POINTER=%s\n' "${SKIP_LATEST_POINTER}"
+            printf 'SKIP_METADATA=%s\n' ""
+            printf 'SKIP_ROOT_SCRIPTS=%s\n' ""
+          } > /workspace/.oss_policy.env
+          echo "version=${VERSION} channel=${OSS_RELEASE_CHANNELS}"
+
+      - name: 'Build bundle tarball'
+        run: |
+          # dist/ 已由 publish-packages.js 构建完成（含正确版本号）
+          # 直接打包为可部署的 tarball
+          # STANDALONE_DIR 和 ARTIFACT_DIR 必须与 prepare-artifact.sh 的查找路径一致
+          export ARCH="amd64"
+          export WORKSPACE_DIR="/workspace"
+          export SOURCE_DIR="."
+          export STANDALONE_DIR="/workspace/build/qwen-code"
+          export ARTIFACT_DIR="/workspace/build"
+          bash .aoneci/scripts/build-standalone-ci.sh
+
+      - name: 'Prepare artifact'
+        run: |
+          ARTIFACT_DIR="/workspace/artifact" \
+          ARCH="amd64" \
+          WORKSPACE_DIR="/workspace" \
+          SOURCE_DIR="." \
+          bash .aoneci/scripts/prepare-artifact.sh
+
+      - name: 'Upload to OSS'
+        run: |
+          DRY_RUN="${{ params.dry_run }}"
+          if [ "$DRY_RUN" = "true" ]; then
+            echo "Skipped (dry-run mode)"
+            exit 0
+          fi
+          set -a; source /workspace/.oss_policy.env; set +a
+          ARTIFACT_DIR="/workspace/artifact" \
+          ARCH="amd64" \
+          SOURCE_DIR="." \
+          WORKSPACE_DIR="/workspace" \
+          OSS_GROUP="alishu" \
+          OSS_PROJECT="qwen-code" \
+          SKIP_METADATA="${SKIP_METADATA:-}" \
+          SKIP_LATEST_POINTER="${SKIP_LATEST_POINTER:-}" \
+          SKIP_ROOT_SCRIPTS="${SKIP_ROOT_SCRIPTS:-}" \
+          OSS_RELEASE_CHANNELS="${OSS_RELEASE_CHANNELS:-}" \
+          bash .aoneci/scripts/upload-oss.sh

.aoneci/release-rollback.yml

@@ -0,0 +1,217 @@
+# .aoneci/release-rollback.yml
+# 回滚发布：将 OSS channel 指针回退到指定版本，并 deprecate 指定的 npm 包版本。
+#
+# 使用场景：
+#   - 发布了一个有问题的版本，需要让下游自动更新机制回退到旧版本
+#   - 废弃某个 npm 版本，安装时显示警告信息
+#
+# 操作：
+#   1. 将指定 channel（beta/dataworks/latest）的 metadata.json 回退到 rollback_to 版本
+#   2. （可选）npm deprecate 指定版本的所有非 private workspace 包
+#
+# 仅手动触发，需要明确确认。
+
+name: 'Release Rollback'
+
+params:
+  rollback_to:
+    description: '回退到的目标版本号（OSS 上必须已存在该版本的 metadata.json），如 0.15.11-dataworks.2'
+    type: string
+    required: true
+  channels:
+    description: '要回退的 channel（逗号分隔），如 beta 或 dataworks,latest'
+    type: string
+    default: 'beta'
+  deprecate_version:
+    description: '要废弃的 npm 版本号（留空则不执行 npm deprecate），如 0.17.0-beta.3'
+    type: string
+  deprecate_message:
+    description: 'npm deprecate 的警告信息'
+    type: string
+    default: 'This version has been rolled back. Please use an earlier version.'
+  dry_run:
+    description: '勾选=仅模拟，不真正执行'
+    type: boolean
+    default: true
+
+jobs:
+  rollback:
+    runs-on:
+      - 4-8Gi
+    name: 'Rollback Release'
+    image: alios-8u
+    envs:
+      BOOTSTRAP_TOKEN: ${{secrets.BOOTSTRAP_TOKEN}}
+      OSS_UPLOAD_TARGETS: "public finance"
+    steps:
+      - uses: checkout
+      - uses: setup-env
+        inputs:
+          node-version: '22'
+
+      - name: 'Validate inputs'
+        run: |
+          ROLLBACK_TO="${{ params.rollback_to }}"
+          CHANNELS="${{ params.channels }}"
+          DRY_RUN="${{ params.dry_run }}"
+
+          if [ -z "$ROLLBACK_TO" ]; then
+            echo "❌ rollback_to 版本号不能为空"
+            exit 1
+          fi
+
+          echo "=== Rollback Plan ==="
+          echo "  Target version:     $ROLLBACK_TO"
+          echo "  Channels:           $CHANNELS"
+          echo "  Deprecate version:  ${{ params.deprecate_version }}"
+          echo "  Dry run:            $DRY_RUN"
+          echo ""
+
+      - name: 'Rollback OSS channel pointers'
+        run: |
+          set -euo pipefail
+
+          ROLLBACK_TO="${{ params.rollback_to }}"
+          CHANNELS="${{ params.channels }}"
+          DRY_RUN="${{ params.dry_run }}"
+
+          SCRIPT_DIR="${AONE_CI_SOURCE:-.}/.aoneci/scripts"
+          OSS_PROJECT_ROOT="public-datasets/aone-release/alishu/qwen-code"
+          OSS_PREFIX="${OSS_PROJECT_ROOT}/${ROLLBACK_TO}"
+
+          TMPDIR=$(mktemp -d)
+          trap 'rm -rf "${TMPDIR}"' EXIT
+
+          # shellcheck disable=SC1091
+          . "${SCRIPT_DIR}/oss-targets.sh"
+
+          CHANNEL_LIST=$(printf '%s' "${CHANNELS}" | tr ',[:space:]' '\n' | sed '/^$/d')
+          TARGETS="$(oss_upload_targets)"
+
+          printf '%s\n' "${TARGETS}" | while IFS= read -r TARGET; do
+            [ -n "${TARGET}" ] || continue
+            oss_configure_target "${TARGET}"
+
+            echo ""
+            echo "📋 [${OSS_TARGET}] 验证目标版本 ${ROLLBACK_TO} 的 metadata.json..."
+            METADATA_URL="oss://${OSS_BUCKET}/${OSS_PREFIX}/metadata.json"
+            TARGET_METADATA="${TMPDIR}/${OSS_TARGET}_metadata.json"
+            if ! ${OSSUTIL} stat "$METADATA_URL" &>/dev/null; then
+              echo "❌ [${OSS_TARGET}] 目标版本 ${ROLLBACK_TO} 的 metadata.json 不存在于 OSS"
+              echo "   路径: ${METADATA_URL}"
+              exit 1
+            fi
+
+            ${OSSUTIL} cp -f "$METADATA_URL" "${TARGET_METADATA}"
+            echo "✅ [${OSS_TARGET}] 目标版本 metadata.json:"
+            cat "${TARGET_METADATA}"
+            echo ""
+
+            for CHANNEL in ${CHANNEL_LIST}; do
+              case "${CHANNEL}" in
+                *[!A-Za-z0-9._-]*|.|..|"")
+                  echo "Invalid OSS release channel: ${CHANNEL}" >&2
+                  exit 1
+                  ;;
+              esac
+              CHANNEL_PATH="oss://${OSS_BUCKET}/${OSS_PROJECT_ROOT}/${CHANNEL}/metadata.json"
+
+              echo ""
+              echo "🔄 [${OSS_TARGET}] Channel: ${CHANNEL}"
+              echo "   当前指向:"
+              ${OSSUTIL} cp -f "$CHANNEL_PATH" "${TMPDIR}/current_${OSS_TARGET}_${CHANNEL}.json" 2>/dev/null || true
+              cat "${TMPDIR}/current_${OSS_TARGET}_${CHANNEL}.json" 2>/dev/null || echo "   (不存在)"
+
+              if [ "$DRY_RUN" = "true" ]; then
+                echo "   [DRY-RUN] 将回退到 ${ROLLBACK_TO}"
+                echo "   路径: ${CHANNEL_PATH}"
+              else
+                ${OSSUTIL} cp -f "${TARGET_METADATA}" "$CHANNEL_PATH"
+                echo "   ✅ 已回退到 ${ROLLBACK_TO}"
+              fi
+            done
+          done
+
+      - name: 'Deprecate npm version'
+        run: |
+          set -euo pipefail
+
+          DEPRECATE_VERSION="${{ params.deprecate_version }}"
+          DEPRECATE_MSG="${{ params.deprecate_message }}"
+          DRY_RUN="${{ params.dry_run }}"
+          REGISTRY="https://registry.anpm.alibaba-inc.com/"
+
+          if [ -z "$DEPRECATE_VERSION" ]; then
+            echo "⏭️  deprecate_version 为空，跳过 npm deprecate"
+            exit 0
+          fi
+
+          # 配置 npm auth
+          NPM_TOKEN="${{ secrets.inner_npm_publish_token }}"
+          echo "//registry.anpm.alibaba-inc.com/:_authToken=${NPM_TOKEN}" > ~/.npmrc
+
+          # 读取所有需要 deprecate 的包
+          PACKAGES=$(node -e "
+            const fs = require('fs');
+            const path = require('path');
+            const glob = require('glob') || { sync: () => [] };
+            const root = JSON.parse(fs.readFileSync('package.json', 'utf-8'));
+            const ws = root.workspaces || [];
+            const pkgs = [];
+            for (const pattern of ws) {
+              if (pattern.includes('*')) {
+                const base = pattern.split('*')[0];
+                if (!fs.existsSync(base)) continue;
+                for (const d of fs.readdirSync(base, { withFileTypes: true })) {
+                  if (!d.isDirectory()) continue;
+                  const p = path.join(base, d.name, 'package.json');
+                  if (fs.existsSync(p)) {
+                    const pkg = JSON.parse(fs.readFileSync(p, 'utf-8'));
+                    if (!pkg.private) pkgs.push(pkg.name);
+                  }
+                }
+              } else {
+                const p = path.join(pattern, 'package.json');
+                if (fs.existsSync(p)) {
+                  const pkg = JSON.parse(fs.readFileSync(p, 'utf-8'));
+                  if (!pkg.private) pkgs.push(pkg.name);
+                }
+              }
+            }
+            // root package
+            const rootPkg = JSON.parse(fs.readFileSync('package.json', 'utf-8'));
+            if (!rootPkg.private) pkgs.unshift(rootPkg.name);
+            console.log(JSON.stringify([...new Set(pkgs)]));
+          ")
+
+          echo "📦 要 deprecate 的包 (版本 ${DEPRECATE_VERSION}):"
+          echo "$PACKAGES" | node -e "JSON.parse(require('fs').readFileSync(0,'utf-8')).forEach(p => console.log('  - ' + p))"
+
+          echo ""
+          echo "$PACKAGES" | node -e "
+            const pkgs = JSON.parse(require('fs').readFileSync(0, 'utf-8'));
+            const { execSync } = require('child_process');
+            const version = '${DEPRECATE_VERSION}';
+            const msg = '${DEPRECATE_MSG}';
+            const dryRun = '${DRY_RUN}' === 'true';
+            const registry = '${REGISTRY}';
+
+            for (const pkg of pkgs) {
+              const spec = pkg + '@' + version;
+              if (dryRun) {
+                console.log('[DRY-RUN] npm deprecate ' + spec);
+              } else {
+                try {
+                  execSync('npm deprecate \"' + spec + '\" \"' + msg + '\" --registry ' + registry, {
+                    stdio: 'inherit',
+                  });
+                  console.log('✅ deprecated: ' + spec);
+                } catch (err) {
+                  console.error('⚠️  failed to deprecate ' + spec + ' (may not exist on registry, skipping)');
+                }
+              }
+            }
+          "
+
+          echo ""
+          echo "=== Rollback Complete ==="