feishu-codex-console 1.0.0-beta.6 → 1.0.0-beta.8

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes are recorded here. Versions follow Semantic Versioning while the public API stabilizes.
 
+## 1.0.0-beta.8 - 2026-07-18
+
+### Fixed
+
+- The installed CLI now supports the standard `--help`/`-h` and `--version`/`-v` aliases instead of treating them as options with missing values.
+
+## 1.0.0-beta.7 - 2026-07-17
+
+### Changed
+
+- npm releases now use GitHub OIDC trusted publishing with job-scoped permissions and no long-lived repository token; prerelease tags create correctly marked GitHub prereleases.
+
 ## 1.0.0-beta.6 - 2026-07-17
 
 ### Fixed

package/docs/INSTALLATION.md

@@ -194,13 +194,13 @@ npx feishu-codex-console migrate --from /absolute/path/to/old/feishu-codex-bridg
 
 ## 维护者发布
 
-每次推送 `v<package version>` 标签时，Release workflow 会重新运行类型检查、测试、生产构建和 tarball 干净安装测试，然后使用 npm provenance 发布并创建 GitHub Release。
+每次推送 `v<package version>` 标签时，Release workflow 会重新运行类型检查、测试、生产构建和 tarball 干净安装测试，然后通过 GitHub OIDC 可信发布生成 npm provenance，并创建 GitHub Release。
 
 仓库需要配置：
 
 - GitHub Environment：`npm`，建议要求维护者审批。
-- Environment secret：`NPM_TOKEN`。
-- npm 账号开启双因素认证，并使用适合 CI 的 granular access token。
+- npm 包的 Trusted Publisher：GitHub Actions、仓库 `LeoChaseYoung/feishu-codex-console`、工作流 `release.yml`、Environment `npm`，仅允许 `npm publish`。
+- npm 账号开启双因素认证；仓库和 Environment 不保存长期 `NPM_TOKEN`。
 
 标签必须与 `package.json` 完全一致，例如 `1.0.0-beta.4` 对应 `v1.0.0-beta.4`。
 

package/docs/RELEASE_CHECKLIST.md

@@ -12,7 +12,7 @@
 - [ ] tarball 能初始化运行手册且绝不覆盖已有目录，并完成一次不带 `--yes` 的只读升级预览。
 - [ ] `version --json` 与兼容矩阵中的 Codex、lark-cli、配置、状态和 SQLite 版本一致。
 - [ ] `npm run release:check -- v<version>` 通过。
-- [ ] npm 发布使用 provenance，预发布版本进入 `next` dist-tag。
+- [ ] npm 发布通过 GitHub OIDC Trusted Publisher 生成 provenance，仓库和 Environment 中不存在长期 `NPM_TOKEN`，预发布版本进入 `next` dist-tag。
 
 这些门禁由 CI 和 Release workflow 执行；任一平台失败都不会进入 npm publish。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "feishu-codex-console",
-  "version": "1.0.0-beta.6",
+  "version": "1.0.0-beta.8",
   "description": "A reliable Feishu control plane for local Codex projects, sessions, approvals, and live Card 2.0 tasks.",
   "private": false,
   "license": "MIT",

package/scripts/cli.mjs

@@ -33,7 +33,15 @@ import { initializeRunbookTemplate } from "./runbook-template.mjs";
 
 const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const args = process.argv.slice(2);
-const command = args[0] && !args[0].startsWith("-") ? args.shift() : "help";
+const commandToken = args[0];
+const shorthandCommand =
+  commandToken === "--help" || commandToken === "-h"
+    ? "help"
+    : commandToken === "--version" || commandToken === "-v"
+      ? "version"
+      : undefined;
+if (shorthandCommand) args.shift();
+const command = shorthandCommand ?? (args[0] && !args[0].startsWith("-") ? args.shift() : "help");
 const flags = parseFlags(args);
 
 try {

package/scripts/package-smoke.mjs

@@ -31,10 +31,20 @@ try {
   await access(compatibilityCli);
   run(cli, ["help"], installDir);
   run(compatibilityCli, ["help"], installDir);
+  const helpAlias = run(cli, ["--help"], installDir);
+  if (!helpAlias.includes("用法：")) {
+    throw new Error("Installed CLI did not expose help through --help.");
+  }
+  run(compatibilityCli, ["-h"], installDir);
   const versionInfo = JSON.parse(run(cli, ["version", "--json"], installDir));
   if (versionInfo.product !== "feishu-codex-console" || !versionInfo.version) {
     throw new Error("Installed CLI did not expose version and compatibility metadata.");
   }
+  const versionAlias = run(cli, ["--version"], installDir);
+  if (!versionAlias.includes(`feishu-codex-console ${versionInfo.version}`)) {
+    throw new Error("Installed CLI did not expose its version through --version.");
+  }
+  run(compatibilityCli, ["-v"], installDir);
   runExpectFailure(
     cli,
     [
@@ -116,7 +126,7 @@ try {
     if (configMode !== 0o600) throw new Error(`Config mode is ${configMode.toString(8)}, expected 600.`);
     if (dataMode !== 0o700) throw new Error(`Data mode is ${dataMode.toString(8)}, expected 700.`);
   }
-  console.log("Package smoke test passed: packed, installed, resumed, initialized runbooks, and previewed a safe upgrade.");
+  console.log("Package smoke test passed: packed, installed, verified CLI aliases, resumed, initialized runbooks, and previewed a safe upgrade.");
 } finally {
   await rm(sandbox, { recursive: true, force: true });
   if (archive) await rm(path.join(packageRoot, archive), { force: true });