@qomicex/cli 0.1.3 → 0.1.5

package/dist/commands/publish.js

@@ -40,18 +40,25 @@ export async function publishCommand(opts = {}) {
     // 清掉旧签名文件，避免脏残留
     for (const k of ['signature.json', 'signature.cert.json'])
         delete entries[k];
-    // 3) 设备流登录
+    // 3) 认证：QOMICEX_API_KEY 存在则跳过设备流（CI 场景），否则设备流登录
     const api = opts.api ?? process.env.QOMICEX_STORE_API ?? DEFAULT_API_BASE;
-    info('==> 设备流登录');
-    const code = await requestDeviceCode(api);
-    info(`  请在浏览器打开（或扫码）并登录确认：`);
-    info(`  ${code.verificationUriComplete}`);
-    info(`  授权码: ${code.userCode}`);
-    const login = await pollDeviceLogin(api, code);
-    info(`✔ 登录成功：${login.user.username}`);
+    let token = '';
+    if (process.env.QOMICEX_API_KEY) {
+        info('==> 使用 API Key 认证（CI 模式）');
+    }
+    else {
+        info('==> 设备流登录');
+        const code = await requestDeviceCode(api);
+        info(`  请在浏览器打开（或扫码）并登录确认：`);
+        info(`  ${code.verificationUriComplete}`);
+        info(`  授权码: ${code.userCode}`);
+        const login = await pollDeviceLogin(api, code);
+        token = login.accessToken;
+        info(`✔ 登录成功：${login.user.username}`);
+    }
     // 4) 注册/刷新签名公钥，获取商店根钥签发的证书
     info('==> 注册签名公钥');
-    const keyRes = await registerDevKey(api, login.accessToken, publicKey);
+    const keyRes = await registerDevKey(api, token, publicKey);
     const certJson = JSON.stringify(keyRes.cert);
     info(`✔ 签名证书就绪（keyId: ${keyRes.keyId}）`);
     // 5) 签名
@@ -61,7 +68,7 @@ export async function publishCommand(opts = {}) {
     // 6) 查找/创建插件记录
     info('==> 确认插件记录');
     let pluginId = '';
-    const mine = await fetchMinePlugins(api, login.accessToken);
+    const mine = await fetchMinePlugins(api, token);
     const existing = mine.find((p) => p.slug === slug);
     if (existing) {
         pluginId = existing.id;
@@ -69,7 +76,7 @@ export async function publishCommand(opts = {}) {
     }
     else {
         try {
-            const created = await createPlugin(api, login.accessToken, {
+            const created = await createPlugin(api, token, {
                 slug,
                 name: String(manifest.name ?? slug),
                 description: String(manifest.description ?? ''),
@@ -80,7 +87,7 @@ export async function publishCommand(opts = {}) {
         }
         catch (e) {
             if (e instanceof StoreApiError && e.status === 409) {
-                const again = await fetchMinePlugins(api, login.accessToken);
+                const again = await fetchMinePlugins(api, token);
                 const found = again.find((p) => p.slug === slug);
                 if (!found)
                     throw e;
@@ -98,13 +105,13 @@ export async function publishCommand(opts = {}) {
     info(`  插件: ${slug}  v${version}`);
     info(`  keyId: ${keyRes.keyId}`);
     info(`  包体: ${signedBytes.length} 字节（已签名）`);
-    const ok = await confirm('确认发布到商店？', opts.yes ?? false);
+    const ok = await confirm('确认发布到商店？', opts.yes ?? !!process.env.QOMICEX_API_KEY);
     if (!ok) {
         warn('已取消发布');
         return;
     }
     info('==> 上传版本');
-    const result = await uploadVersion(api, login.accessToken, pluginId, signedBytes, opts.changelog);
+    const result = await uploadVersion(api, token, pluginId, signedBytes, opts.changelog);
     info(`✔ 上传完成：${slug} v${version}`);
     info(`  商店地址: ${api.replace('/api/v1', '')}`);
     if (typeof result === 'object' && result && 'status' in result) {

package/dist/index.js

@@ -54,13 +54,14 @@ qomicex v${VERSION} — Qomicex 插件生态 CLI
                                 manifest 合法性 + 权限最小化 + 长循环告警 + 签名检查
   qomicex bump <major|minor|patch> [--version <v>]
                                 递增 manifest.json 版本号（或 --version 直接指定）
-  qomicex publish [--key <k>] [--slug <s>] [--changelog <c>] [--api <url>] [--org-id <id>] [--package <f>] [--yes]
+  qomicex publish [--key <k>] [--slug <s>] [--changelog <c>] [--api <url>] [--org-id <id>] [--package <f>] [--skip-build] [--yes]
                                 设备流登录 → 注册签名公钥 → 签名 → 上传到商店
   qomicex --help | -h           显示帮助
   qomicex --version | -v        显示版本
 
 环境变量:
   QOMICEX_SIGN_KEY   签名私钥（PKCS#8 PEM 或 raw base64 seed），publish 必填
+  QOMICEX_API_KEY    商店 API Key（CI 模式下跳过设备流登录，自动确认上传）
   QOMICEX_STORE_API  商店 API base（默认 https://plugins.qomicex.top/api/v1）
 `;
 }
@@ -109,6 +110,7 @@ async function main() {
                     orgId: typeof options['org-id'] === 'string' ? options['org-id'] : undefined,
                     package: typeof options['package'] === 'string' ? options['package'] : undefined,
                     yes: options['yes'] === true,
+                    skipBuild: options['skip-build'] === true,
                 });
                 break;
             default:

package/dist/lib/store.js

@@ -13,7 +13,10 @@ export class StoreApiError extends Error {
 }
 async function request(base, path, init, token) {
     const headers = new Headers(init?.headers);
-    if (token)
+    const apiKey = process.env.QOMICEX_API_KEY;
+    if (apiKey)
+        headers.set('X-API-Key', apiKey);
+    else if (token)
         headers.set('Authorization', `Bearer ${token}`);
     let res;
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qomicex/cli",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "publishConfig": {
     "access": "public"
   },