dsh-workbuddy2api-hub 0.0.0-stage → 1.0.7

package/scripts/mock-hub.mjs

@@ -0,0 +1,493 @@
+#!/usr/bin/env node
+/**
+ * workbuddy2api-hub 的本地替身，只实现本插件用到的那几个接口。
+ *
+ * 为什么要有个 mock：真实 hub 是个 Python 服务（`wb_proxy.py`，`Server: wb-proxy/x.y.z`），
+ * 测试里既不能假设它开着，也不能让它 5 次/60 秒的登录限流把跑测试的人锁掉。这里按
+ * 实测到的响应形状伪造一份，于是「地址错了 / 密码错了 / 被限流 / 没 API Key / 没有模型」
+ * 这些分支都能在 CI 里稳定复现。
+ *
+ * 用法：
+ *   node scripts/mock-hub.mjs --port 8799
+ *   node scripts/mock-hub.mjs --fail-auth        # 密码永远不对（401）
+ *   node scripts/mock-hub.mjs --no-api-key       # 面板里没有可用 API Key
+ *   node scripts/mock-hub.mjs --empty            # 模型列表为空
+ *   node scripts/mock-hub.mjs --slow 3000        # 每个请求延迟 3 秒（测超时）
+ *   node scripts/mock-hub.mjs --no-panel-auth    # 面板不要求密码
+ */
+
+import { createServer } from 'node:http'
+
+/**
+ * 解析命令行参数。
+ * @param argv - `process.argv.slice(2)`。
+ * @returns 选项对象。
+ */
+function parseArgs(argv) {
+  const options = {
+    port: 8799,
+    password: 'admin',
+    failAuth: false,
+    noApiKey: false,
+    empty: false,
+    noPanelAuth: false,
+    slowMs: 0,
+    quiet: false,
+    apiKey: 'mock-api-key-0001',
+  }
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--port') options.port = Number(argv[(index += 1)]) || options.port
+    else if (arg === '--password') options.password = argv[(index += 1)] ?? options.password
+    else if (arg === '--fail-auth') options.failAuth = true
+    else if (arg === '--no-api-key') options.noApiKey = true
+    else if (arg === '--empty') options.empty = true
+    else if (arg === '--no-panel-auth') options.noPanelAuth = true
+    else if (arg === '--slow') options.slowMs = Number(argv[(index += 1)]) || 0
+    else if (arg === '--quiet') options.quiet = true
+  }
+  return options
+}
+
+/** 与真实 hub 一致的模型条目形状（`/v1/models` 的 data 元素）。 */
+function modelList() {
+  return [
+    {
+      id: 'hy4-preview',
+      object: 'model',
+      owned_by: 'workbuddy',
+      name: 'Hy4 preview',
+      description: 'Mock flagship model',
+      capabilities: { vision: true, tool_calls: true, reasoning: true },
+      supports_vision: true,
+      supports_images: true,
+      supports_tool_calls: true,
+      supports_reasoning: true,
+      input_modalities: ['text', 'image'],
+      context_length: 960000,
+      max_input_tokens: 960000,
+      max_output_tokens: 64000,
+      max_completion_tokens: 64000,
+      context_windows: [300000, 600000, 960000],
+      reasoning_efforts: ['high'],
+      reasoning_default_effort: 'high',
+      reasoning_can_disable: false,
+      always_reasoning: true,
+      credits: 'x0.29',
+      vendor: 'j',
+    },
+    {
+      id: 'hy3',
+      object: 'model',
+      name: 'Hy3',
+      capabilities: { vision: true, tool_calls: true, reasoning: true },
+      supports_images: true,
+      supports_tool_calls: true,
+      supports_reasoning: true,
+      context_length: 192000,
+      max_output_tokens: 64000,
+      reasoning_efforts: ['low', 'high'],
+      reasoning_default_effort: 'high',
+      reasoning_can_disable: true,
+      credits: 'x0.15',
+      vendor: 'j',
+    },
+    {
+      id: 'deepseek-v4.1-flash',
+      object: 'model',
+      name: 'DeepSeek V4.1 Flash',
+      capabilities: { vision: false, tool_calls: true, reasoning: false },
+      supports_images: false,
+      supports_tool_calls: true,
+      supports_reasoning: false,
+      input_modalities: ['text'],
+      context_length: 1000000,
+      max_output_tokens: 32000,
+      credits: 'x0.08',
+      vendor: 'deepseek',
+    },
+  ]
+}
+
+/**
+ * 本周一 00:00 的本地时间戳串（与真实 hub 的 `range=week` 口径一致：
+ * `_local_midnight(days_back=tm_wday)`，即日历周、周一起算，不是「近 7 天」）。
+ */
+function weekStartStamp() {
+  const now = new Date()
+  const monday = new Date(now.getFullYear(), now.getMonth(), now.getDate() - ((now.getDay() + 6) % 7))
+  const pad = (value) => String(value).padStart(2, '0')
+  return `${monday.getFullYear()}-${pad(monday.getMonth() + 1)}-${pad(monday.getDate())} 00:00:00`
+}
+
+/**
+ * 起一个 HTTP 服务。
+ * @param options - {@link parseArgs} 的结果。
+ * @returns node http server。
+ */
+export function createMockHub(options = {}) {
+  const config = { port: 0, password: 'admin', apiKey: 'mock-api-key-0001', ...options }
+  const state = {
+    models: config.empty === true ? [] : modelList(),
+    apiKeyPresent: config.noApiKey !== true,
+    balance: 3712.57,
+    /** 面板 Token → 签发时间。 */
+    tokens: new Map(),
+    /** 失败登录时间戳，用来模拟 5 次/60 秒的限流。 */
+    failures: [],
+  }
+
+  const server = createServer((request, response) => {
+    const delay = Number(config.slowMs) || 0
+    const run = () => handle(request, response, config, state)
+    if (delay > 0) setTimeout(run, delay)
+    else run()
+  })
+
+  server.on('clientError', (_error, socket) => {
+    // 客户端提前断开（比如插件超时 abort）不该把 mock 弄挂。
+    try {
+      socket.destroy()
+    } catch {
+      // 已经关了。
+    }
+  })
+
+  return server
+}
+
+/** 写 JSON 响应。 */
+function send(response, status, payload, headers = {}) {
+  const text = JSON.stringify(payload)
+  response.writeHead(status, { 'content-type': 'application/json; charset=utf-8', ...headers })
+  response.end(text)
+}
+
+/** 读请求体。 */
+async function readBody(request) {
+  const chunks = []
+  for await (const chunk of request) chunks.push(chunk)
+  if (chunks.length === 0) return {}
+  try {
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'))
+  } catch {
+    return {}
+  }
+}
+
+/**
+ * 一个请求的完整处理。
+ * @param request - node http 请求。
+ * @param response - node http 响应。
+ * @param config - 配置。
+ * @param state - 可变状态（测试可以改它来模拟 hub 侧变化）。
+ */
+async function handle(request, response, config, state) {
+  const url = new URL(request.url ?? '/', 'http://localhost')
+  const path = url.pathname
+  const method = (request.method ?? 'GET').toUpperCase()
+
+  /* -------------------------- mock 控制接口 -------------------------- */
+
+  if (path === '/mock/state') {
+    send(response, 200, {
+      models: state.models.map((model) => model.id),
+      apiKeyPresent: state.apiKeyPresent,
+      balance: state.balance,
+      tokens: state.tokens.size,
+    })
+    return
+  }
+  if (path === '/mock/reset') {
+    state.models = config.empty === true ? [] : modelList()
+    state.apiKeyPresent = config.noApiKey !== true
+    state.balance = 3712.57
+    state.tokens.clear()
+    state.failures.length = 0
+    send(response, 200, { ok: true })
+    return
+  }
+  if (path === '/mock/models/remove') {
+    const id = url.searchParams.get('id') ?? ''
+    state.models = state.models.filter((model) => model.id !== id)
+    send(response, 200, { ok: true, models: state.models.map((model) => model.id) })
+    return
+  }
+  if (path === '/mock/models/add') {
+    const id = url.searchParams.get('id') ?? 'mock-new-model'
+    state.models.push({
+      id,
+      object: 'model',
+      name: id,
+      supports_images: false,
+      supports_tool_calls: true,
+      supports_reasoning: false,
+      input_modalities: ['text'],
+      context_length: 128000,
+      max_output_tokens: 16000,
+      credits: 'x0.5',
+    })
+    send(response, 200, { ok: true, models: state.models.map((model) => model.id) })
+    return
+  }
+  if (path === '/mock/credits') {
+    state.balance = Number(url.searchParams.get('balance') ?? '12.5')
+    send(response, 200, { ok: true, balance: state.balance })
+    return
+  }
+  if (path === '/mock/keys') {
+    state.apiKeyPresent = url.searchParams.get('present') !== '0'
+    send(response, 200, { ok: true, present: state.apiKeyPresent })
+    return
+  }
+
+  /* ----------------------------- 公开接口 ---------------------------- */
+
+  if (path === '/health') {
+    send(response, 200, {
+      ok: true,
+      realm: 'cn',
+      accounts: 2,
+      accounts_ready: 2,
+      // 真实 hub 的 /health 里这个字段恒为 true：它表达的是「/v1 需要 API Key」，
+      // 与「现在配了几个 Key」无关（实测 api_key_set:false 时它依然是 true）。
+      api_key_required: true,
+    })
+    return
+  }
+
+  if (path === '/panel/status') {
+    const presented = request.headers['x-panel-token']
+    send(response, 200, {
+      panel_password_required: config.noPanelAuth !== true,
+      panel_password_is_default: config.password === 'admin',
+      authenticated: typeof presented === 'string' && state.tokens.has(presented),
+      api_key_set: state.apiKeyPresent,
+    })
+    return
+  }
+
+  if (path === '/panel/login' && method === 'POST') {
+    if (config.failAuth === true) {
+      state.failures.push(Date.now())
+      send(response, 401, { ok: false, error: 'invalid panel password' })
+      return
+    }
+    const body = await readBody(request)
+    const now = Date.now()
+    // 真实 hub 的限流：60 秒内 5 次失败 → 429。先判限流再判密码，与实测一致。
+    state.failures = state.failures.filter((at) => now - at < 60000)
+    if (state.failures.length >= 5) {
+      const wait = Math.max(1, Math.ceil((60000 - (now - state.failures[0])) / 1000))
+      send(response, 429, { ok: false, error: `too many login attempts, please wait ${wait}s` })
+      return
+    }
+    if (typeof body.password !== 'string' || body.password !== config.password) {
+      state.failures.push(now)
+      send(response, 401, { ok: false, error: 'invalid panel password' })
+      return
+    }
+    const token = `mock-token-${state.tokens.size + 1}-${Math.random().toString(36).slice(2, 10)}`
+    state.tokens.set(token, now)
+    send(response, 200, { ok: true, token, using_default_password: config.password === 'admin' })
+    return
+  }
+
+  if (path === '/panel/logout' && method === 'POST') {
+    const token = String(request.headers['x-panel-token'] ?? '')
+    state.tokens.delete(token)
+    send(response, 200, { ok: true })
+    return
+  }
+
+  /* ------------------------------ 面板接口 --------------------------- */
+
+  const token = String(request.headers['x-panel-token'] ?? '')
+  const authenticated = config.noPanelAuth === true || state.tokens.has(token)
+  const bearer = String(request.headers.authorization ?? '').replace(/^Bearer\s+/i, '')
+
+  /**
+   * 需要鉴权的接口。真实 hub 的 `_key_ok()` 第一行是 `_panel_ok()`，
+   * 所以面板 Token 能过；`Authorization: Bearer` 只认 API Key。
+   */
+  const requireAccess = () => {
+    if (authenticated) return true
+    if (bearer !== '' && bearer === config.apiKey) return true
+    send(response, 401, { ok: false, error: 'panel password required' })
+    return false
+  }
+
+  if (path === '/v1/models') {
+    if (!requireAccess()) return
+    send(response, 200, { object: 'list', data: state.models })
+    return
+  }
+
+  if (path === '/v1/balance-summary') {
+    if (!requireAccess()) return
+    send(response, 200, {
+      balance: state.balance,
+      unit: 'credit',
+      realm: 'cn',
+      accounts_enabled: 2,
+      accounts_with_credit_data: 2,
+      updated_at: Date.now() / 1000,
+    })
+    return
+  }
+
+  if (path === '/v1/chat/completions') {
+    if (!requireAccess()) return
+    send(response, 200, {
+      id: 'mock-completion',
+      object: 'chat.completion',
+      choices: [{ index: 0, message: { role: 'assistant', content: 'pong' }, finish_reason: 'stop' }],
+      usage: { prompt_tokens: 1, completion_tokens: 1, total_tokens: 2 },
+    })
+    return
+  }
+
+  if (path === '/usage') {
+    if (!requireAccess()) return
+    // 真实 hub 只认 `range`（today/week/month，未知值=不过滤），`hours` 被忽略。
+    // mock 照着做：today 返今日子集、week 返本周子集、其余返全量，方便测试区分。
+    const range = String(url.searchParams.get('range') ?? '').trim().toLowerCase()
+    const today = range === 'today' || range === 'day' || range === '1d'
+    const week = range === 'week' || range === 'w'
+    const totals = today
+      ? { requests: 441, errors: 9, prompt_tokens: 42100000, completion_tokens: 380000,
+          reasoning_tokens: 210000, cached_tokens: 39000000, total_tokens: 42765524,
+          credit: 40.92, cost_cny: 6.2451 }
+      : week
+      ? { requests: 1207, errors: 21, prompt_tokens: 118300000, completion_tokens: 960000,
+          reasoning_tokens: 480000, cached_tokens: 112000000, total_tokens: 119260000,
+          credit: 118.44, cost_cny: 17.8802 }
+      : { requests: 1813, errors: 38, prompt_tokens: 187393318, completion_tokens: 1493328,
+          reasoning_tokens: 753366, cached_tokens: 179497887, total_tokens: 188886646,
+          credit: 405.25, cost_cny: 20.968 }
+    const byModel = today
+      ? {
+          'hy4-preview': { requests: 300, credit: 32.4, cost_cny: 4.6, total_tokens: 30000000 },
+          hy3: { requests: 141, credit: 8.52, cost_cny: 1.6451, total_tokens: 12765524 },
+        }
+      : week
+      ? {
+          'hy4-preview': { requests: 820, credit: 92.1, cost_cny: 13.9, total_tokens: 90000000 },
+          hy3: { requests: 387, credit: 26.34, cost_cny: 3.9802, total_tokens: 29260000 },
+        }
+      : {
+          'hy4-preview': { requests: 1200, credit: 300.5, cost_cny: 15.2, total_tokens: 150000000 },
+          hy3: { requests: 613, credit: 104.75, cost_cny: 5.768, total_tokens: 38886646 },
+        }
+    send(response, 200, {
+      ...totals,
+      started: Date.now() / 1000 - 3600,
+      since: today
+        ? new Date().toISOString().slice(0, 10) + ' 00:00:00'
+        : week
+        ? weekStartStamp()
+        : '2026-10-23 14:56:58',
+      by_model: byModel,
+    })
+    return
+  }
+
+  if (path === '/accounts') {
+    if (!requireAccess()) return
+    send(response, 200, {
+      accounts: [
+        {
+          uid: 'mock-uid-1',
+          nickname: '🐾',
+          domain: 'www.codebuddy.cn',
+          realm: 'cn',
+          platform: 'CLI',
+          product: 'workbuddy',
+          enabled: true,
+          tasksEnabled: true,
+          weight: 1,
+          disabledModels: [],
+          source: 'oauth',
+          expiresAt: Math.floor(Date.now() / 1000) + 27 * 86400,
+          expiresIn: '27 days',
+          tokenExpired: false,
+          needRelogin: false,
+          inCooldown: false,
+          credits: { remain: 1347.33, used: 665.67, size: 2013 },
+        },
+        {
+          uid: 'mock-uid-2',
+          nickname: 'second',
+          realm: 'cn',
+          platform: 'CLI',
+          enabled: true,
+          expiresAt: Math.floor(Date.now() / 1000) + 2 * 86400,
+          expiresIn: '2 days',
+          tokenExpired: false,
+          needRelogin: false,
+          inCooldown: false,
+          credits: { remain: 88.5 },
+        },
+      ],
+    })
+    return
+  }
+
+  if (path === '/settings') {
+    if (!requireAccess()) return
+    send(response, 200, {
+      panel_password_is_default: config.password === 'admin',
+      api_key_set: state.apiKeyPresent,
+      api_keys: state.apiKeyPresent
+        ? [
+            {
+              id: 'mockkey01',
+              name: 'local',
+              masked: 'mock******0001',
+              enabled: true,
+              source: 'panel',
+              created_at: '2026/10/19 11:49',
+            },
+          ]
+        : [],
+      limits: {},
+    })
+    return
+  }
+
+  if (path === '/settings/reveal') {
+    if (!requireAccess()) return
+    const id = url.searchParams.get('id') ?? ''
+    if (id === '' || state.apiKeyPresent !== true) {
+      send(response, 404, { error: 'no such key' })
+      return
+    }
+    send(response, 200, { id, key: config.apiKey })
+    return
+  }
+
+  if (path === '/' || path === '/dashboard.html') {
+    response.writeHead(200, { 'content-type': 'text/html; charset=utf-8' })
+    response.end('<!doctype html><title>WorkBuddy 用量看板</title><p>mock dashboard</p>')
+    return
+  }
+
+  send(response, 404, { error: `no such endpoint: ${path}` })
+}
+
+/* -------------------------- 命令行入口 -------------------------- */
+
+if (import.meta.url === `file://${process.argv[1]?.replace(/\\/g, '/')}` || process.argv[1]?.endsWith('mock-hub.mjs')) {
+  const options = parseArgs(process.argv.slice(2))
+  const server = createMockHub(options)
+  server.listen(options.port, '127.0.0.1', () => {
+    if (options.quiet !== true) {
+      console.log(`mock-hub listening on http://127.0.0.1:${options.port} (pwd=${options.password})`)
+    }
+  })
+  const stop = () => server.close(() => process.exit(0))
+  process.on('SIGINT', stop)
+  process.on('SIGTERM', stop)
+}
+
+export { parseArgs, modelList }

package/scripts/release-notes.mjs

@@ -0,0 +1,53 @@
+#!/usr/bin/env node
+/**
+ * 从 CHANGELOG.md 抽出某个版本的正文，作为 GitHub Release 的说明。
+ *
+ *   node scripts/release-notes.mjs v1.0.6 > notes.md
+ *
+ * 找不到对应小节时不报错、也不编内容：打印一句「见 CHANGELOG.md」交差，
+ * 免得一个漏写的标题把整个发布流程卡死。
+ */
+import { readFileSync } from 'node:fs'
+
+const tag = process.argv[2] ?? ''
+const version = tag.replace(/^v/, '')
+
+if (version === '') {
+  console.error('用法：node scripts/release-notes.mjs <tag>')
+  process.exit(2)
+}
+
+const changelog = readFileSync(new URL('../CHANGELOG.md', import.meta.url), 'utf8')
+const lines = changelog.split(/\r?\n/)
+const start = lines.findIndex((line) => line.startsWith(`## [${version}]`))
+
+if (start === -1) {
+  console.error(`CHANGELOG.md 里没有 ${version} 的小节，Release 说明将只有安装提示。`)
+  console.log(`详见 [CHANGELOG.md](https://github.com/HimA6652/dsh-workbuddy2api-hub/blob/main/CHANGELOG.md)`)
+  process.exit(0)
+}
+
+let end = lines.findIndex((line, index) => index > start && line.startsWith('## '))
+if (end === -1) end = lines.length
+
+const body = lines.slice(start + 1, end).join('\n').trim()
+
+console.log(
+  [
+    body,
+    '',
+    '---',
+    '',
+    '**安装 / 升级**',
+    '',
+    '```bash',
+    'git clone https://github.com/HimA6652/dsh-workbuddy2api-hub.git',
+    'cd dsh-workbuddy2api-hub',
+    'node scripts/install-local.mjs   # 已装过就再跑一次，覆盖旧链接',
+    '```',
+    '',
+    '然后重启 DSH 桌面端。不需要 `npm install`，本包没有运行时依赖。',
+    '',
+    '升级前建议先 `npm run check`（确认仓库里没有混进凭据或本机路径）。',
+  ].join('\n'),
+)

package/scripts/release.mjs

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+/**
+ * 一条命令发版：改版本号 → 自检 → 测试 → 提交 → 打标签 → 推送。
+ * 推送标签后，.github/workflows/release.yml 会自动建 GitHub Release。
+ *
+ *   node scripts/release.mjs 1.0.7
+ *   node scripts/release.mjs 1.0.7 --dry-run     # 只跑到测试为止，不提交
+ *   node scripts/release.mjs 1.0.7 --no-push     # 提交和打标签，但不推
+ *
+ * 前提：CHANGELOG.md 里已经写好 `## [1.0.7]` 那一节——正文就是 Release 说明，
+ * 这段必须人写（脚本不会替你编）。
+ */
+import { execFileSync } from 'node:child_process'
+import { readFileSync, writeFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { dirname, resolve } from 'node:path'
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const args = process.argv.slice(2)
+const version = (args[0] ?? '').replace(/^v/, '')
+const dryRun = args.includes('--dry-run')
+const noPush = args.includes('--no-push')
+
+function fail(message) {
+  console.error(`✖ ${message}`)
+  process.exit(1)
+}
+
+function run(command, commandArgs) {
+  console.log(`$ ${command} ${commandArgs.join(' ')}`)
+  execFileSync(command, commandArgs, { cwd: ROOT, stdio: 'inherit' })
+}
+
+function output(command, commandArgs) {
+  return execFileSync(command, commandArgs, { cwd: ROOT, encoding: 'utf8' }).trim()
+}
+
+// Windows 上 npm 是 .cmd 批处理，Node 20+ 不允许直接 execFile 它（会 ENOENT/EINVAL），
+// 得让 shell 去解析。只有 npm 走这条路，git / node 仍走 execFile。
+function runShell(command) {
+  console.log(`$ ${command}`)
+  execFileSync(command, { cwd: ROOT, stdio: 'inherit', shell: true })
+}
+
+if (!/^\d+\.\d+\.\d+$/.test(version)) fail('用法：node scripts/release.mjs <major.minor.patch> [--dry-run] [--no-push]')
+
+// 1. 版本说明必须先存在，否则发出去的 Release 是空的
+const changelog = readFileSync(resolve(ROOT, 'CHANGELOG.md'), 'utf8')
+if (!changelog.includes(`## [${version}]`)) {
+  fail(`CHANGELOG.md 里没有 "## [${version}]" 这一节，先把这版改了什么写进去`)
+}
+
+// 2. 工作区要干净，免得分不清哪些改动进了这一版
+const dirty = output('git', ['status', '--porcelain'])
+if (dirty !== '') fail(`工作区还有未提交的改动：\n${dirty}\n先提交或 stash，再发版`)
+
+const branch = output('git', ['rev-parse', '--abbrev-ref', 'HEAD'])
+if (branch !== 'main') fail(`当前分支是 ${branch}，发版要在 main 上`)
+
+// 3. 标签不能重名
+const tags = output('git', ['tag', '--list', `v${version}`])
+if (tags !== '') fail(`标签 v${version} 已经存在——改完 CHANGELOG 用新版本号，或者先 git tag -d v${version}`)
+
+// 4. 改版本号：package.json 与测试里的断言各一处
+const pkgPath = resolve(ROOT, 'package.json')
+const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'))
+const previous = pkg.version
+if (previous !== version) {
+  writeFileSync(pkgPath, `${JSON.stringify({ ...pkg, version }, null, 2)}\n`)
+
+  const hostTestPath = resolve(ROOT, 'tests/host.test.mjs')
+  const hostTest = readFileSync(hostTestPath, 'utf8')
+  const patched = hostTest.replace(/PLUGIN_VERSION, '\d+\.\d+\.\d+'/, `PLUGIN_VERSION, '${version}'`)
+  if (patched === hostTest) fail('tests/host.test.mjs 里没找到 PLUGIN_VERSION 断言，手动改一下再跑')
+  writeFileSync(hostTestPath, patched)
+  console.log(`✔ 版本 ${previous} → ${version}`)
+} else {
+  console.log(`✔ package.json 已经是 ${version}，只补标签`)
+}
+
+// 5. 自检 + 测试：坏版本不放行
+run('node', ['scripts/check-secrets.mjs'])
+run('node', ['scripts/release-notes.mjs', `v${version}`])
+runShell('npm test')
+
+if (dryRun) {
+  console.log('\n--dry-run：测试通过，但没提交、没打标签。工作区里的版本号改动自己决定留还是撤。')
+  process.exit(0)
+}
+
+// 6. 提交 + 打标签 + 推送
+run('git', ['add', '-A'])
+run('git', ['commit', '-m', `chore(release): v${version}`])
+run('git', ['tag', '-a', `v${version}`, '-m', `v${version}`])
+
+if (noPush) {
+  console.log(`\n--no-push：提交与标签 v${version} 已建好，推送请手动执行`)
+  console.log(`  git push && git push origin v${version}`)
+  process.exit(0)
+}
+
+run('git', ['push'])
+run('git', ['push', 'origin', `v${version}`])
+
+const repo = (pkg.repository?.url ?? 'https://github.com/HimA6652/dsh-workbuddy2api-hub.git').replace(/^git\+/, '').replace(/\.git$/, '')
+console.log(`\n✔ 已推送 v${version}。Release 由 Actions 自动创建，稍等半分钟：`)
+console.log(`  ${repo}/releases`)