feihong-code 7.5.0 → 8.0.0

package/.github/workflows/release.yml

@@ -1,200 +1,203 @@
-# 飞虹 Code 发布工作流
-# 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
-#
-# 触发条件：
-#   1. 推送 v* 标签（如 v1.0.0）→ 自动发布 npm 包 + Docker 镜像 + GitHub Release
-#   2. 手动触发（workflow_dispatch）→ 可指定版本号
-#
-# 所需 Secrets：
-#   - NPM_TOKEN: npm 发布令牌
-#   - DOCKERHUB_USERNAME: Docker Hub 用户名
-#   - DOCKERHUB_TOKEN: Docker Hub 访问令牌
-#   - GH_TOKEN: GitHub Token（自动注入，无需手动配置）
-
-name: Release
-
-on:
-  push:
-    tags:
-      - 'v*'
-  workflow_dispatch:
-    inputs:
-      version:
-        description: '发布版本号（如 1.0.0）'
-        required: true
-        default: 'patch'
-
-env:
-  NODE_VERSION: '20'
-  IMAGE_NAME: feihong-code
-
-jobs:
-  # ---------- 1. 版本号准备 ----------
-  version:
-    name: 准备版本号
-    runs-on: ubuntu-latest
-    outputs:
-      version: ${{ steps.get_version.outputs.version }}
-      tag: ${{ steps.get_version.outputs.tag }}
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: 获取版本号
-        id: get_version
-        run: |
-          if [[ "${{ github.ref }}" == refs/tags/v* ]]; then
-            VERSION=${GITHUB_REF_NAME#v}
-          else
-            if [[ "${{ github.event.inputs.version }}" == "patch" ]]; then
-              VERSION=$(npm version patch --no-git-tag-version | sed 's/v//')
-            elif [[ "${{ github.event.inputs.version }}" == "minor" ]]; then
-              VERSION=$(npm version minor --no-git-tag-version | sed 's/v//')
-            elif [[ "${{ github.event.inputs.version }}" == "major" ]]; then
-              VERSION=$(npm version major --no-git-tag-version | sed 's/v//')
-            else
-              VERSION=${{ github.event.inputs.version }}
-            fi
-          fi
-          echo "version=$VERSION" >> $GITHUB_OUTPUT
-          echo "tag=v$VERSION" >> $GITHUB_OUTPUT
-          echo "发布版本: v$VERSION"
-
-  # ---------- 2. 构建与测试（复用 CI 逻辑） ----------
-  build:
-    name: 构建与测试
-    needs: version
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          registry-url: 'https://registry.npmjs.org'
-      - run: npm install
-      - name: 类型检查
-        run: npm run typecheck
-      - name: 编译构建
-        run: npm run build
-      - name: 前端资源打包
-        run: node scripts/copy-web.cjs
-      - name: CLI 可用性验证
-        run: node dist/cli/index.js --version
-      - name: P7-5 安全 CI（npm audit + CycloneDX SBOM）
-        run: npm run security || (echo "⚠️ npm audit 网络不可达按跳过处理" && exit 0)
-      - name: P7-5 综合冒烟门禁（本地回归）
-        run: |
-          node dist/cli/index.js serve --port 8099 > /tmp/fh-serve.log 2>&1 &
-          SERVER_PID=$!
-          READY=0
-          for i in $(seq 1 40); do
-            if curl -sf http://127.0.0.1:8099/api/health >/dev/null 2>&1; then READY=1; break; fi
-            sleep 1
-          done
-          if [ "$READY" != "1" ]; then
-            echo "❌ 测试服务 40s 内未就绪，serve 日志："
-            cat /tmp/fh-serve.log || true
-            kill $SERVER_PID 2>/dev/null || true
-            exit 1
-          fi
-          node scripts/_smoke-full.mjs
-          EXIT_CODE=$?
-          kill $SERVER_PID 2>/dev/null || true
-          exit $EXIT_CODE
-      - name: P7-1 SWE-bench harness 链路冒烟（mock）
-        run: node dist/cli/index.js harness lite --limit 1 --mode mock || echo "⚠️ harness 需网络拉取数据集，失败不阻断（真实跑分见 docs/SWE_BENCH_REPORT.md）"
-      - name: 上传构建产物
-        uses: actions/upload-artifact@v4
-        with:
-          name: dist-${{ needs.version.outputs.version }}
-          path: dist/
-          retention-days: 30
-
-  # ---------- 3. 发布 npm 包 ----------
-  npm-publish:
-    name: 发布 npm 包
-    needs: [version, build]
-    runs-on: ubuntu-latest
-    if: github.event_name == 'push' || github.event.inputs.version != 'patch'
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          registry-url: 'https://registry.npmjs.org'
-      - name: 下载构建产物
-        uses: actions/download-artifact@v4
-        with:
-          name: dist-${{ needs.version.outputs.version }}
-          path: dist/
-      - name: 安装依赖（prepack build 需要）
-        run: npm ci
-      - name: 设置版本号
-        run: npm version ${{ needs.version.outputs.version }} --no-git-tag-version --allow-same-version
-      - name: 发布到 npm
-        run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-  # ---------- 4. 构建并推送 Docker 镜像 ----------
-  docker-publish:
-    name: 发布 Docker 镜像
-    needs: [version, build]
-    runs-on: ubuntu-latest
-    if: github.event_name == 'push' || github.event.inputs.version != 'patch'
-    steps:
-      - uses: actions/checkout@v4
-      - name: 设置 Docker Buildx
-        uses: docker/setup-buildx-action@v3
-      - name: 登录 Docker Hub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: 构建并推送镜像
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          push: true
-          tags: |
-            ${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:${{ needs.version.outputs.version }}
-            ${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:latest
-          cache-from: type=registry,ref=${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:buildcache
-          cache-to: type=registry,ref=${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:buildcache,mode=max
-
-  # ---------- 5. 创建 GitHub Release ----------
-  github-release:
-    name: 创建 GitHub Release
-    needs: [version, build, npm-publish, docker-publish]
-    runs-on: ubuntu-latest
-    if: github.event_name == 'push'
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: 生成变更日志
-        id: changelog
-        run: |
-          echo "## 飞虹 Code v${{ needs.version.outputs.version }}" > RELEASE_NOTES.md
-          echo "" >> RELEASE_NOTES.md
-          echo "### 发布说明" >> RELEASE_NOTES.md
-          echo "" >> RELEASE_NOTES.md
-          git log --pretty=format:"- %s (%h)" $(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo HEAD^)..HEAD >> RELEASE_NOTES.md 2>/dev/null || echo "- 首次发布" >> RELEASE_NOTES.md
-          echo "" >> RELEASE_NOTES.md
-          echo "### 安装方式" >> RELEASE_NOTES.md
-          echo "" >> RELEASE_NOTES.md
-          echo "\`\`\`bash" >> RELEASE_NOTES.md
-          echo "npm install -g feihong-code" >> RELEASE_NOTES.md
-          echo "# 或" >> RELEASE_NOTES.md
-          echo "docker pull ${{ secrets.DOCKERHUB_USERNAME }}/feihong-code:latest" >> RELEASE_NOTES.md
-          echo "\`\`\`" >> RELEASE_NOTES.md
-      - name: 创建 Release
-        uses: softprops/action-gh-release@v1
-        with:
-          tag_name: ${{ needs.version.outputs.tag }}
-          name: 飞虹 Code ${{ needs.version.outputs.tag }}
-          body_path: RELEASE_NOTES.md
-          draft: false
-          prerelease: false
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+# 飞虹 Code 发布工作流
+# 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+#
+# 触发条件：
+#   1. 推送 v* 标签（如 v1.0.0）→ 自动发布 npm 包 + Docker 镜像 + GitHub Release
+#   2. 手动触发（workflow_dispatch）→ 可指定版本号
+#
+# 所需 Secrets：
+#   - NPM_TOKEN: npm 发布令牌
+#   - DOCKERHUB_USERNAME: Docker Hub 用户名
+#   - DOCKERHUB_TOKEN: Docker Hub 访问令牌
+#   - GH_TOKEN: GitHub Token（自动注入，无需手动配置）
+
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      version:
+        description: '发布版本号（如 1.0.0）'
+        required: true
+        default: 'patch'
+
+permissions:
+  contents: write
+
+env:
+  NODE_VERSION: '20'
+  IMAGE_NAME: feihong-code
+
+jobs:
+  # ---------- 1. 版本号准备 ----------
+  version:
+    name: 准备版本号
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.get_version.outputs.version }}
+      tag: ${{ steps.get_version.outputs.tag }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: 获取版本号
+        id: get_version
+        run: |
+          if [[ "${{ github.ref }}" == refs/tags/v* ]]; then
+            VERSION=${GITHUB_REF_NAME#v}
+          else
+            if [[ "${{ github.event.inputs.version }}" == "patch" ]]; then
+              VERSION=$(npm version patch --no-git-tag-version | sed 's/v//')
+            elif [[ "${{ github.event.inputs.version }}" == "minor" ]]; then
+              VERSION=$(npm version minor --no-git-tag-version | sed 's/v//')
+            elif [[ "${{ github.event.inputs.version }}" == "major" ]]; then
+              VERSION=$(npm version major --no-git-tag-version | sed 's/v//')
+            else
+              VERSION=${{ github.event.inputs.version }}
+            fi
+          fi
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "tag=v$VERSION" >> $GITHUB_OUTPUT
+          echo "发布版本: v$VERSION"
+
+  # ---------- 2. 构建与测试（复用 CI 逻辑） ----------
+  build:
+    name: 构建与测试
+    needs: version
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          registry-url: 'https://registry.npmjs.org'
+      - run: npm install
+      - name: 类型检查
+        run: npm run typecheck
+      - name: 编译构建
+        run: npm run build
+      - name: 前端资源打包
+        run: node scripts/copy-web.cjs
+      - name: CLI 可用性验证
+        run: node dist/cli/index.js --version
+      - name: P7-5 安全 CI（npm audit + CycloneDX SBOM）
+        run: npm run security || (echo "⚠️ npm audit 网络不可达按跳过处理" && exit 0)
+      - name: P7-5 综合冒烟门禁（本地回归）
+        run: |
+          node dist/cli/index.js serve --port 8099 > /tmp/fh-serve.log 2>&1 &
+          SERVER_PID=$!
+          READY=0
+          for i in $(seq 1 40); do
+            if curl -sf http://127.0.0.1:8099/api/health >/dev/null 2>&1; then READY=1; break; fi
+            sleep 1
+          done
+          if [ "$READY" != "1" ]; then
+            echo "❌ 测试服务 40s 内未就绪，serve 日志："
+            cat /tmp/fh-serve.log || true
+            kill $SERVER_PID 2>/dev/null || true
+            exit 1
+          fi
+          node scripts/_smoke-full.mjs
+          EXIT_CODE=$?
+          kill $SERVER_PID 2>/dev/null || true
+          exit $EXIT_CODE
+      - name: P7-1 SWE-bench harness 链路冒烟（mock）
+        run: node dist/cli/index.js harness lite --limit 1 --mode mock || echo "⚠️ harness 需网络拉取数据集，失败不阻断（真实跑分见 docs/SWE_BENCH_REPORT.md）"
+      - name: 上传构建产物
+        uses: actions/upload-artifact@v7
+        with:
+          name: dist-${{ needs.version.outputs.version }}
+          path: dist/
+          retention-days: 30
+
+  # ---------- 3. 发布 npm 包 ----------
+  npm-publish:
+    name: 发布 npm 包
+    needs: [version, build]
+    runs-on: ubuntu-latest
+    if: github.event_name == 'push' || github.event.inputs.version != 'patch'
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          registry-url: 'https://registry.npmjs.org'
+      - name: 下载构建产物
+        uses: actions/download-artifact@v7
+        with:
+          name: dist-${{ needs.version.outputs.version }}
+          path: dist/
+      - name: 安装依赖（prepack build 需要）
+        run: npm ci
+      - name: 设置版本号
+        run: npm version ${{ needs.version.outputs.version }} --no-git-tag-version --allow-same-version
+      - name: 发布到 npm
+        run: npm publish --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+  # ---------- 4. 构建并推送 Docker 镜像 ----------
+  docker-publish:
+    name: 发布 Docker 镜像
+    needs: [version, build]
+    runs-on: ubuntu-latest
+    if: github.event_name == 'push' || github.event.inputs.version != 'patch'
+    steps:
+      - uses: actions/checkout@v4
+      - name: 设置 Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: 登录 Docker Hub
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: 构建并推送镜像
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          push: true
+          tags: |
+            ${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:${{ needs.version.outputs.version }}
+            ${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:latest
+          cache-from: type=registry,ref=${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:buildcache
+          cache-to: type=registry,ref=${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:buildcache,mode=max
+
+  # ---------- 5. 创建 GitHub Release ----------
+  github-release:
+    name: 创建 GitHub Release
+    needs: [version, build, npm-publish, docker-publish]
+    runs-on: ubuntu-latest
+    if: github.event_name == 'push'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: 生成变更日志
+        id: changelog
+        run: |
+          echo "## 飞虹 Code v${{ needs.version.outputs.version }}" > RELEASE_NOTES.md
+          echo "" >> RELEASE_NOTES.md
+          echo "### 发布说明" >> RELEASE_NOTES.md
+          echo "" >> RELEASE_NOTES.md
+          git log --pretty=format:"- %s (%h)" $(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo HEAD^)..HEAD >> RELEASE_NOTES.md 2>/dev/null || echo "- 首次发布" >> RELEASE_NOTES.md
+          echo "" >> RELEASE_NOTES.md
+          echo "### 安装方式" >> RELEASE_NOTES.md
+          echo "" >> RELEASE_NOTES.md
+          echo "\`\`\`bash" >> RELEASE_NOTES.md
+          echo "npm install -g feihong-code" >> RELEASE_NOTES.md
+          echo "# 或" >> RELEASE_NOTES.md
+          echo "docker pull ${{ secrets.DOCKERHUB_USERNAME }}/feihong-code:latest" >> RELEASE_NOTES.md
+          echo "\`\`\`" >> RELEASE_NOTES.md
+      - name: 创建 Release
+        uses: softprops/action-gh-release@v3
+        with:
+          tag_name: ${{ needs.version.outputs.tag }}
+          name: 飞虹 Code ${{ needs.version.outputs.tag }}
+          body_path: RELEASE_NOTES.md
+          draft: false
+          prerelease: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

package/.github/workflows/swebench-real.yml

@@ -0,0 +1,84 @@
+name: SWE-bench 真实模型跑分
+
+# 在 GitHub 托管 runner 上运行（具备正常 GitHub 克隆 + Docker 能力），
+# 用真实模型（agnes-2.5-flash）生成 patch 并做真实测试验证。
+# 注意：本 workflow 需在仓库 Settings → Secrets 配置 AGNES_API_KEY。
+on:
+  workflow_dispatch:
+    inputs:
+      limit:
+        description: '实例数上限'
+        required: false
+        default: '2'
+      instances:
+        description: '实例清单路径'
+        required: false
+        default: 'bench/swe-bench-verified-sample.json'
+  # 可选：定时跑（UTC 18:00）
+  # schedule:
+  #   - cron: '0 18 * * *'
+
+jobs:
+  real-run:
+    runs-on: ubuntu-latest
+    timeout-minutes: 360
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - uses: actions/setup-python@v7
+        with:
+          python-version: '3.11'
+
+      - name: 安装 swebench（验证用）
+        run: pip install --quiet swebench
+
+      - name: 克隆实例仓库到 base_commit
+        run: |
+          python - <<'PY'
+          import json, subprocess, os
+          insts = json.load(open("${{ inputs.instances }}"))
+          os.makedirs("bench/real/work", exist_ok=True)
+          for i in insts[:int("${{ inputs.limit }}")]:
+              owner, name = i["repo"].split("/")
+              d = "bench/real/work/" + name
+              if not os.path.exists(d):
+                  subprocess.run(["git", "clone", "https://github.com/%s/%s.git" % (owner, name), d], check=True)
+              subprocess.run(["git", "-C", d, "checkout", "-q", i["base_commit"]], check=True)
+          print("仓库就绪")
+          PY
+
+      - name: 真实模型生成 patch
+        env:
+          AGNES_API_KEY: ${{ secrets.AGNES_API_KEY }}
+        run: node scripts/swebench-real.mjs --instances "${{ inputs.instances }}" --limit "${{ inputs.limit }}"
+
+      - name: 真实测试验证（env-reconstructed）
+        run: python bench/real/verify.py --instances "${{ inputs.instances }}" --limit "${{ inputs.limit }}"
+
+      - name: 上传结果
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: swebench-real-results
+          path: |
+            bench/real/patches/
+            bench/real/runs/
+            bench/real/summary.json
+            bench/real/verify_summary.json
+
+      - name: 输出汇总
+        if: always()
+        run: |
+          echo "## SWE-bench 真实跑分汇总" >> "$GITHUB_STEP_SUMMARY"
+          python - <<'PY'
+          import json
+          try:
+              s = json.load(open("bench/real/verify_summary.json"))
+              print("resolved: %d / %d" % (s.get("resolved",0), s.get("total",0)), file=open("$GITHUB_STEP_SUMMARY","a"))
+          except Exception as e:
+              print("无验证结果: %s" % e, file=open("$GITHUB_STEP_SUMMARY","a"))
+          PY