tuyoo-devflow 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,44 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+
+## [Unreleased]
+
+### Changed
+
+- Jenkins 白名单检查更新为按协议检查端口：
+  - `http://` 仅检查 `80`
+  - `https://` 仅检查 `443`
+  - 始终检查 `50000`
+- 工具策略更新：Java 版本要求从 11+ 提升为 OpenJDK 21+。
+- Java 安装实现调整为 OpenJDK 发行版（macOS / Windows / Linux）。
+- Java 检查逻辑收紧：仅接受 OpenJDK 发行版，非 OpenJDK 即使版本满足也判定失败。
+- 增加 Git / Java / Miniconda 缺失时的自动安装引导与执行流程。
+- `doctor` 命令优化为无参数交互流程：先展示系统信息与检查结果，再按勾选项安装缺失工具。
+- 自动安装流程增加详细实时日志与心跳提示，便于判断安装进度和卡点。
+- `install` 在 conda 环境准备后新增 `conda activate` 可用性检测，并支持一键执行 `conda init`。
+- `install` 检测到 `pytuyoo-pipeline` conda 环境已存在时，默认跳过仓库 clone/依赖安装，并提供“继续执行完整同步”的交互确认。
+- `install` 新增 Agent 启动命令本地临时缓存；二次执行默认复用并可选择修改。
+- 生成策略改为直接写入完整 `java -jar agent.jar ...` 到 `start_jenkins_agent.sh/.bat`，不再依赖 `profile.json`。
+- Linux `install` 安装 systemd 后改为 `systemctl enable --now`，安装完成即启动。
+- macOS 安装策略升级为生成 `LaunchAgent plist` 并使用 `launchctl`（`gui/<uid>` + `Aqua`）管理，以支持 GUI 会话权限。
+- GitLab Token 改为仅用于本次 clone，不再持久化保存；clone 后自动重置 remote 为无凭据地址。
+- Jenkins secret 存储策略简化为明文写入启动脚本（不再依赖 keyring）。
+- 项目命名升级为 `Tuyoo DevFlow`：npm 包名改为 `tuyoo-devflow`，CLI 命令改为 `tdf`。
+
+## [0.1.0] - 2026-04-10
+
+### Added
+
+- Initialize `tuyoo-devflow` (Tuyoo DevFlow CLI) with TypeScript + React + Ink CLI architecture.
+- Add `agent doctor` for platform/network/tooling pre-checks.
+- Add `agent install` for parsing agent commands, preparing conda env, and generating startup artifacts.
+- Add cross-platform startup generators:
+  - Linux systemd service + startup script
+  - macOS shell startup script
+  - Windows bat startup script
+- Add secure secret management with keychain/keyring via `keytar`.
+- Add test coverage for command parsing, whitelist targets, and generators.
+- Add release-ready packaging and CI/CD workflows.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,150 @@
+# Tuyoo DevFlow CLI
+
+`Tuyoo DevFlow` 是面向 TuyooGame 研发流程的 CLI 工具集，一期聚焦 Jenkins Agent 安装主流程。
+
+## 功能范围（一期）
+
+- 跨平台支持：`macOS`、`Windows`、`Linux`
+- 前置检查：系统约束、白名单连通性、工具与版本
+- Jenkins 端口检查策略：
+  - Jenkins URL 为 `http://` 时仅检查 `80`
+  - Jenkins URL 为 `https://` 时仅检查 `443`
+  - 始终检查 Jenkins `50000`（JNLP）
+- 依赖准备：`Miniconda` + `pytuyoo-pipeline` 虚拟环境
+- Agent 产物：
+  - Linux 生成 `systemd` 服务（优先自动安装并立即启动）
+  - macOS 生成 `LaunchAgent plist` 并通过 `launchctl` 管理（GUI/Aqua 会话）
+  - Windows 生成 `start_jenkins_agent.bat`
+- 安全策略：
+  - Jenkins `secret` 明文写入启动脚本（按简化流程）
+  - GitLab `token` 仅用于本次 clone，完成后不持久化保存
+  - clone 完成后会重置 git remote，清理凭据 URL
+  - 不在日志明文落盘
+
+## 环境要求
+
+- Node.js `>= 20`
+- Java `>= 21`（OpenJDK 21+）
+- Git `>= 2.30`
+- Miniconda（`conda` 命令可用）
+- Linux 额外要求：
+  - 系统必须是 `rocky9*`
+  - 必须存在 `tywork` 用户
+  - 建议 `root` 或 `tywork` 身份执行
+
+## 安装与开发
+
+```bash
+npm install
+npm run build
+```
+
+本地调试：
+
+```bash
+npm run dev -- --help
+```
+
+## 命令说明
+
+检查模式（只读）：
+
+```bash
+tdf agent doctor
+```
+
+进入后会自动进入交互式页面：
+
+- 先展示当前系统信息
+- 再执行 doctor 检查并输出结果
+- 若存在缺失工具，提供可勾选的自动安装项
+
+安装模式：
+
+```bash
+tdf agent install
+```
+
+当检测到 Git/Java/Miniconda 缺失或版本不满足时，`install` 会引导自动安装：
+
+- Git：安装最新版本
+- Java：安装 OpenJDK 21+（若检测到非 OpenJDK 发行版也会判定失败并引导替换）
+- Miniconda：macOS 可选 `Homebrew` 或 `curl + bash`，Linux 默认 `curl + bash`
+- 自动安装时会实时输出子进程日志，并每 15 秒输出“仍在安装中”状态提示
+- conda 环境准备完成后会自动检测 `conda activate` 能力，若未初始化会醒目提示并自动执行 `conda init`
+
+安装时会提示输入：
+
+1. `curl -sO .../jnlpJars/agent.jar`
+2. `java -jar agent.jar ...`
+3. GitLab 用户名 / Token（仅在需要重新 clone/安装依赖时询问；Token 仅用于本次 clone，不持久化保存）
+
+命令缓存机制：
+
+- 首次输入的两行 Agent 命令会保存到本地临时文件
+- 再次执行 `install` 时会询问是否修改（默认不修改，直接复用继续）
+
+启动 Agent：
+
+```bash
+# Linux
+bash <workDir>/start_jenkins_agent.sh
+
+# macOS（推荐）
+launchctl print gui/$(id -u)/<service-name>
+
+# Windows
+<workDir>\\start_jenkins_agent.bat
+```
+
+## 生成产物
+
+- Linux：
+  - `${workDir}/start_jenkins_agent.sh`
+  - 若具备权限，安装 `/etc/systemd/system/<service>.service` 并执行 `systemctl enable --now`
+  - 若无权限，回落写到 `${workDir}/<service>.service` 并提示手动安装 + 启动
+- macOS：
+  - `${workDir}/start_jenkins_agent.sh`
+  - `~/Library/LaunchAgents/<service>.plist`
+  - 自动执行 `launchctl bootout/bootstrap/kickstart`，注册到 `gui/<uid>`（Aqua）
+  - 若自动安装失败，回落写到 `${workDir}/<service>.plist` 并提示手动安装命令
+- Windows：`${workDir}/start_jenkins_agent.bat`
+- 启动脚本直接包含完整 `java -jar agent.jar ...` 命令（含 Jenkins secret）
+
+## 测试
+
+```bash
+npm test
+```
+
+发布前自检：
+
+```bash
+npm run verify
+npm run pack:dry
+```
+
+已覆盖：
+
+- Jenkins 启动命令解析（`-url` / `-jnlpUrl`）
+- 脚本与 systemd/launchd 生成
+- 白名单目标构造
+
+## 常见问题
+
+- Linux 无法自动安装 systemd：按提示执行 `sudo cp ...` 与 `systemctl daemon-reload`。
+- macOS 首次运行可能触发系统权限弹窗（如辅助功能/屏幕录制等），请在图形会话中按提示授权。
+- 白名单检查失败：优先确认 DNS、代理、防火墙与内网访问策略。
+
+## CI / 发布
+
+- GitHub Actions
+  - CI：`.github/workflows/ci.yml`
+  - 发布：`.github/workflows/publish.yml`（tag `v*` 或手动触发）
+  - Secret：`NPM_TOKEN`
+- GitLab CI
+  - CI + 发布：`.gitlab-ci.yml`
+  - 规则：tag 命中 `vX.Y.Z` 时执行 `npm publish`
+  - Variable：`NPM_TOKEN`
+
+详细发布步骤见 `RELEASING.md`。

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+import { createRequire } from "node:module";
+import { Command } from "commander";
+import { registerAgentCommand } from "./commands/agent/index.js";
+import { safeErrorMessage } from "./core/log/redact.js";
+const require = createRequire(import.meta.url);
+const pkg = require("../package.json");
+async function bootstrap() {
+    const program = new Command();
+    program
+        .name("tdf")
+        .description("Tuyoo DevFlow CLI 工具集")
+        .version(pkg.version, "-V, --version", "输出版本号");
+    registerAgentCommand(program);
+    await program.parseAsync(process.argv);
+}
+bootstrap().catch((error) => {
+    process.exitCode = 1;
+    console.error(`命令执行失败: ${safeErrorMessage(error)}`);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;AAE9D,KAAK,UAAU,SAAS;IACtB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,KAAK,CAAC;SACX,WAAW,CAAC,uBAAuB,CAAC;SACpC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAElD,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACrB,OAAO,CAAC,KAAK,CAAC,WAAW,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC"}

package/dist/commands/agent/doctor.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare function registerDoctorCommand(agentCommand: Command): void;

package/dist/commands/agent/doctor.js

@@ -0,0 +1,70 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { input } from "@inquirer/prompts";
+import { getCurrentUsername, getSupportedPlatform } from "../../core/platform.js";
+import { safeErrorMessage } from "../../core/log/redact.js";
+import { guideAndInstallMissingTools } from "../../core/precheck/autoInstall.js";
+import { checkRequiredTools } from "../../core/precheck/tools.js";
+import { collectSystemInfoResults } from "../../core/precheck/systemInfo.js";
+import { CheckReport } from "../../ui/CheckReport.js";
+import { renderOnce } from "../../ui/renderOnce.js";
+import { getFailedToolChecks, hasLinuxOrNetworkFailure, printCheckSummary, runDoctorChecks, } from "./shared.js";
+export function registerDoctorCommand(agentCommand) {
+    agentCommand
+        .command("doctor")
+        .description("进入交互式 doctor 页面并执行检查")
+        .action(async () => {
+        try {
+            const platform = getSupportedPlatform();
+            const username = getCurrentUsername();
+            const systemInfo = collectSystemInfoResults(platform, username);
+            await renderOnce(_jsx(CheckReport, { title: "\u5F53\u524D\u7CFB\u7EDF\u4FE1\u606F", results: systemInfo }));
+            const jenkinsUrl = await input({
+                message: "请输入 Jenkins URL（例如 http://jenkins.example.com/）",
+                validate(value) {
+                    try {
+                        new URL(value);
+                        return true;
+                    }
+                    catch {
+                        return "URL 格式不正确";
+                    }
+                },
+            });
+            let checks = await runDoctorChecks(platform, jenkinsUrl);
+            await printCheckSummary(checks);
+            if (hasLinuxOrNetworkFailure(checks)) {
+                process.exitCode = 1;
+                console.error("系统/网络前置检查未通过，请修复后重试。");
+                return;
+            }
+            const failedToolChecks = getFailedToolChecks(checks);
+            if (failedToolChecks.length > 0) {
+                const installResult = await guideAndInstallMissingTools(platform, failedToolChecks);
+                if (installResult.selected.length === 0) {
+                    process.exitCode = 1;
+                    console.error("你未选择任何工具进行修复，doctor 未通过。");
+                    return;
+                }
+                const toolChecksAfterInstall = await checkRequiredTools(platform);
+                await renderOnce(_jsx(CheckReport, { title: "\u5DE5\u5177\u590D\u68C0\u7ED3\u679C", results: toolChecksAfterInstall }));
+                if (toolChecksAfterInstall.some((item) => item.status === "fail")) {
+                    process.exitCode = 1;
+                    console.error("工具自动安装后仍有失败项，请手动修复。");
+                    return;
+                }
+                checks = await runDoctorChecks(platform, jenkinsUrl);
+            }
+            if (hasLinuxOrNetworkFailure(checks)) {
+                process.exitCode = 1;
+                console.error("复检发现系统/网络检查失败，请修复后重试。");
+                return;
+            }
+            console.log("前置检查全部通过。");
+        }
+        catch (error) {
+            process.exitCode = 1;
+            console.error(`doctor 执行失败: ${safeErrorMessage(error)}`);
+        }
+    });
+}
+//# sourceMappingURL=doctor.js.map

package/dist/commands/agent/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../src/commands/agent/doctor.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,qBAAqB,CAAC,YAAqB;IACzD,YAAY;SACT,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAChE,MAAM,UAAU,CAAC,KAAC,WAAW,IAAC,KAAK,EAAC,sCAAQ,EAAC,OAAO,EAAE,UAAU,GAAI,CAAC,CAAC;YAEtE,MAAM,UAAU,GACd,MAAM,KAAK,CAAC;gBACV,OAAO,EAAE,iDAAiD;gBAC1D,QAAQ,CAAC,KAAK;oBACZ,IAAI,CAAC;wBACH,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;wBACf,OAAO,IAAI,CAAC;oBACd,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,WAAW,CAAC;oBACrB,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;YAEL,IAAI,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACzD,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAEhC,IAAI,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YAED,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;gBACpF,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;oBACrB,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBAED,MAAM,sBAAsB,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;gBAClE,MAAM,UAAU,CAAC,KAAC,WAAW,IAAC,KAAK,EAAC,sCAAQ,EAAC,OAAO,EAAE,sBAAsB,GAAI,CAAC,CAAC;gBAClF,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;oBAClE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;oBACrB,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBACrC,OAAO;gBACT,CAAC;gBAED,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,gBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/agent/index.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare function registerAgentCommand(program: Command): void;

package/dist/commands/agent/index.js

@@ -0,0 +1,8 @@
+import { registerDoctorCommand } from "./doctor.js";
+import { registerInstallCommand } from "./install.js";
+export function registerAgentCommand(program) {
+    const agentCommand = program.command("agent").description("Jenkins Agent 安装与运维命令");
+    registerDoctorCommand(agentCommand);
+    registerInstallCommand(agentCommand);
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/agent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/agent/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IACnF,qBAAqB,CAAC,YAAY,CAAC,CAAC;IACpC,sBAAsB,CAAC,YAAY,CAAC,CAAC;AACvC,CAAC"}

package/dist/commands/agent/install.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare function registerInstallCommand(agentCommand: Command): void;

package/dist/commands/agent/install.js

@@ -0,0 +1,300 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { confirm, input, password } from "@inquirer/prompts";
+import fs from "fs-extra";
+import path from "node:path";
+import { VERSION_POLICY } from "../../constants/versionPolicy.js";
+import { downloadAgentJar } from "../../core/jenkins/downloadAgentJar.js";
+import { buildJavaArgsFromParsed } from "../../core/jenkins/directLaunch.js";
+import { parseAgentCommand } from "../../core/jenkins/parseAgentCommand.js";
+import { safeErrorMessage } from "../../core/log/redact.js";
+import { getCurrentUsername, getDefaultPipelineRepoDir, getSupportedPlatform } from "../../core/platform.js";
+import { checkCondaEnvExists, inspectCondaActivateForShell, runCondaInitForShell, setupPytuyooPipelineEnv, } from "../../core/pipeline/setupPytuyooPipeline.js";
+import { guideAndInstallMissingTools } from "../../core/precheck/autoInstall.js";
+import { checkRequiredTools } from "../../core/precheck/tools.js";
+import { buildLinuxSystemdUnit, tryInstallSystemdService, writeLinuxStartupScript, } from "../../core/generator/linuxSystemd.js";
+import { resolveMacGuiUid, tryInstallMacLaunchAgent, } from "../../core/generator/macLaunchd.js";
+import { writeMacStartupScript } from "../../core/generator/macScript.js";
+import { writeWindowsStartupBat } from "../../core/generator/winBat.js";
+import { loadInstallCommandCache, saveInstallCommandCache, shouldPersistInstallCommandCache, } from "../../core/store/installCommandCache.js";
+import { renderOnce } from "../../ui/renderOnce.js";
+import { CheckReport } from "../../ui/CheckReport.js";
+import { getFailedToolChecks, hasLinuxOrNetworkFailure, printCheckSummary, runDoctorChecks, } from "./shared.js";
+function printAgentCommandInputGuide() {
+    console.log("");
+    console.log("步骤 1/5: 请输入 Jenkins Agent 启动命令");
+    console.log("需要两行命令（可从 Jenkins 节点页面复制）:");
+    console.log("  [第1行] curl 下载命令（macOS/Linux）:");
+    console.log("    curl -sO http://<jenkins-host>/jnlpJars/agent.jar");
+    console.log("  [第1行] curl 下载命令（Windows）:");
+    console.log("    curl.exe -sO http://<jenkins-host>/jnlpJars/agent.jar");
+    console.log("  [第2行] java 启动命令（支持 -url 或 -jnlpUrl）:");
+    console.log('    java -jar agent.jar -url http://<jenkins-host>/ -secret <secret> -name "<node>" -workDir "<workDir>"');
+    console.log("提示: 命令中的 secret 将明文写入启动脚本。");
+    console.log("");
+}
+function formatCacheTime(isoTime) {
+    if (!isoTime) {
+        return "未知时间";
+    }
+    const date = new Date(isoTime);
+    if (Number.isNaN(date.getTime())) {
+        return isoTime;
+    }
+    return date.toLocaleString();
+}
+function maskSecretInJavaCommand(command) {
+    return command.replace(/(-secret\s+)(?:"[^"]+"|'[^']+'|\S+)/gi, "$1***");
+}
+function sanitizeName(value) {
+    return value
+        .toLowerCase()
+        .replace(/[^a-z0-9_-]+/g, "-")
+        .replace(/-+/g, "-")
+        .replace(/^-|-$/g, "");
+}
+function defaultServiceName(nodeName) {
+    const base = sanitizeName(nodeName ?? "agent");
+    return `jenkins-agent-${base || "default"}`;
+}
+export function registerInstallCommand(agentCommand) {
+    agentCommand
+        .command("install")
+        .description("安装 Jenkins Agent 并生成启动脚本/服务")
+        .option("--curl-line <line>", "curl 下载命令行")
+        .option("--java-line <line>", "java 启动命令行")
+        .option("--gitlab-user <user>", "GitLab 用户名")
+        .option("--gitlab-token <token>", "GitLab Token（不建议命令行明文传入）")
+        .action(async (options) => {
+        try {
+            const platform = getSupportedPlatform();
+            const currentUser = getCurrentUsername();
+            if (platform === "linux" && currentUser !== "tywork" && currentUser !== "root") {
+                throw new Error("Linux 请使用 tywork 或 root 身份执行安装。");
+            }
+            const cachedCommands = await loadInstallCommandCache();
+            let curlLine = options.curlLine;
+            let javaLine = options.javaLine;
+            if (cachedCommands && (!curlLine || !javaLine)) {
+                console.log(`检测到本地临时缓存的 Agent 命令（更新时间: ${formatCacheTime(cachedCommands.updatedAt)}）。`);
+                console.log("缓存内容如下（敏感信息已脱敏）:");
+                console.log(`  [第1行] ${cachedCommands.curlLine}`);
+                console.log(`  [第2行] ${maskSecretInJavaCommand(cachedCommands.javaLine)}`);
+                const shouldModifyCachedCommand = await confirm({
+                    message: "是否需要修改命令？（默认不修改，直接继续下一步）",
+                    default: false,
+                });
+                if (!shouldModifyCachedCommand) {
+                    curlLine = curlLine ?? cachedCommands.curlLine;
+                    javaLine = javaLine ?? cachedCommands.javaLine;
+                    console.log("已使用本地缓存命令，继续执行。");
+                }
+            }
+            if (!curlLine || !javaLine) {
+                printAgentCommandInputGuide();
+            }
+            curlLine =
+                curlLine ??
+                    (await input({
+                        message: "请输入第1行：curl 下载 agent.jar 命令",
+                        default: cachedCommands?.curlLine,
+                        validate(value) {
+                            if (!value.includes("curl")) {
+                                return "命令需包含 curl 或 curl.exe";
+                            }
+                            if (!value.includes("agent.jar")) {
+                                return "命令需包含 agent.jar 下载地址";
+                            }
+                            return true;
+                        },
+                    }));
+            javaLine =
+                javaLine ??
+                    (await input({
+                        message: "请输入第2行：java 启动 Agent 命令（需包含 -secret 与 -workDir）",
+                        default: cachedCommands?.javaLine,
+                        validate(value) {
+                            if (!value.includes("java")) {
+                                return "命令需包含 java";
+                            }
+                            if (!value.includes("-secret")) {
+                                return "命令需包含 -secret 参数";
+                            }
+                            if (!value.includes("-workDir")) {
+                                return "命令需包含 -workDir 参数";
+                            }
+                            if (!value.includes("-url") && !value.includes("-jnlpUrl")) {
+                                return "命令需包含 -url 或 -jnlpUrl 参数";
+                            }
+                            return true;
+                        },
+                    }));
+            console.log("步骤 2/5: 执行系统、网络与工具检查...");
+            const parsed = parseAgentCommand({ curlLine, javaLine });
+            const javaArgs = buildJavaArgsFromParsed(parsed);
+            const checks = await runDoctorChecks(platform, parsed.jenkinsBaseUrl);
+            await printCheckSummary(checks);
+            if (hasLinuxOrNetworkFailure(checks)) {
+                throw new Error("系统/网络前置检查未通过，安装中止。");
+            }
+            const failedToolChecks = getFailedToolChecks(checks);
+            if (failedToolChecks.length > 0) {
+                await guideAndInstallMissingTools(platform, failedToolChecks);
+                const toolChecksAfterInstall = await checkRequiredTools(platform);
+                await renderOnce(_jsx(CheckReport, { title: "\u5DE5\u5177\u590D\u68C0\u7ED3\u679C", results: toolChecksAfterInstall }));
+                const stillFail = toolChecksAfterInstall.some((item) => item.status === "fail");
+                if (stillFail) {
+                    throw new Error("工具自动安装后仍有检查项失败，请手动处理后重试。");
+                }
+            }
+            if (shouldPersistInstallCommandCache(curlLine, javaLine)) {
+                await saveInstallCommandCache(curlLine, javaLine);
+            }
+            console.log("步骤 3/5: 准备 GitLab 凭证与 conda 流水线环境...");
+            const repoDir = getDefaultPipelineRepoDir(platform);
+            const hasPipelineEnv = await checkCondaEnvExists({
+                platform,
+                envName: VERSION_POLICY.conda.envName,
+            });
+            let shouldSetupPipelineRepo = true;
+            if (hasPipelineEnv) {
+                console.log(`[步骤 3/5] 检测到 conda 环境 ${VERSION_POLICY.conda.envName} 已存在，默认无需重复 clone pytuyoo-pipeline。`);
+                shouldSetupPipelineRepo = await confirm({
+                    message: "如需重新 clone 仓库并执行 poetry install，请选择继续执行",
+                    default: false,
+                });
+                if (!shouldSetupPipelineRepo) {
+                    console.log("[步骤 3/5] 已按默认策略跳过 pytuyoo-pipeline 仓库与依赖安装。");
+                }
+            }
+            if (shouldSetupPipelineRepo) {
+                const gitlabUser = options.gitlabUser ??
+                    (await input({
+                        message: "请输入 GitLab 用户名",
+                        default: currentUser,
+                        validate(value) {
+                            return value.trim().length > 0 ? true : "用户名不能为空";
+                        },
+                    }));
+                const gitlabToken = options.gitlabToken ??
+                    (await password({
+                        message: "请输入 GitLab Token（仅用于本次 clone，完成后不会持久化保存）",
+                        mask: "*",
+                        validate(value) {
+                            return value.trim().length > 0 ? true : "Token 不能为空";
+                        },
+                    }));
+                await setupPytuyooPipelineEnv({
+                    platform,
+                    repoDir,
+                    gitlabUsername: gitlabUser,
+                    gitlabToken,
+                    logger(message) {
+                        console.log(`[步骤 3/5] ${message}`);
+                    },
+                });
+            }
+            const condaActivateStatus = await inspectCondaActivateForShell({
+                platform,
+                asUser: platform === "linux" ? "tywork" : undefined,
+                envName: VERSION_POLICY.conda.envName,
+            });
+            if (condaActivateStatus.supported) {
+                console.log(`[步骤 3/5] ${condaActivateStatus.detail}`);
+                if (condaActivateStatus.needsInit && condaActivateStatus.shellName) {
+                    console.log("[步骤 3/5] ========================================");
+                    console.log(`[步骤 3/5] 注意: 检测到手动 conda activate 可能失败，将自动执行 conda init ${condaActivateStatus.shellName}`);
+                    console.log("[步骤 3/5] ========================================");
+                    try {
+                        const afterInit = await runCondaInitForShell({
+                            platform,
+                            asUser: platform === "linux" ? "tywork" : undefined,
+                            logger(message) {
+                                console.log(`[步骤 3/5] ${message}`);
+                            },
+                        });
+                        console.log(`[步骤 3/5] ${afterInit.detail}`);
+                    }
+                    catch (error) {
+                        console.warn(`[步骤 3/5] conda init 自动执行失败: ${safeErrorMessage(error)}`);
+                        if (condaActivateStatus.manualInitCommand) {
+                            console.warn(`[步骤 3/5] 请手动执行: ${condaActivateStatus.manualInitCommand}，并重开终端后使用 conda activate ${VERSION_POLICY.conda.envName}`);
+                        }
+                    }
+                }
+            }
+            console.log("步骤 4/5: 生成 Agent 配置并下载 agent.jar...");
+            await fs.ensureDir(parsed.workDir);
+            const startupScriptPath = platform === "windows"
+                ? path.join(parsed.workDir, "start_jenkins_agent.bat")
+                : path.join(parsed.workDir, "start_jenkins_agent.sh");
+            const serviceName = platform === "windows" ? "" : defaultServiceName(parsed.nodeName);
+            const jarPath = path.join(parsed.workDir, "agent.jar");
+            await downloadAgentJar(parsed.jarDownloadUrl, jarPath);
+            let summaryLines = [];
+            if (platform === "linux") {
+                await writeLinuxStartupScript(startupScriptPath, parsed.workDir, javaArgs);
+                const installed = await tryInstallSystemdService({
+                    serviceName,
+                    serviceUser: "tywork",
+                    workDir: parsed.workDir,
+                    startupScriptPath,
+                    agentLabel: parsed.nodeName,
+                });
+                summaryLines = [
+                    `Conda 环境: ${VERSION_POLICY.conda.envName}`,
+                    `启动脚本（含明文 secret）: ${startupScriptPath}`,
+                    `服务文件: ${installed.unitPath}`,
+                    installed.hint,
+                ];
+                if (!installed.installed) {
+                    const fallbackContent = buildLinuxSystemdUnit({
+                        serviceName,
+                        serviceUser: "tywork",
+                        workDir: parsed.workDir,
+                        startupScriptPath,
+                        agentLabel: parsed.nodeName,
+                    });
+                    await fs.writeFile(path.join(parsed.workDir, "systemd.preview.txt"), fallbackContent, "utf8");
+                }
+            }
+            else if (platform === "macos") {
+                await writeMacStartupScript(startupScriptPath, parsed.workDir, javaArgs);
+                const guiUid = await resolveMacGuiUid();
+                const installed = await tryInstallMacLaunchAgent({
+                    serviceName,
+                    guiUid,
+                    workDir: parsed.workDir,
+                    startupScriptPath,
+                });
+                summaryLines = [
+                    `Conda 环境: ${VERSION_POLICY.conda.envName}`,
+                    `启动脚本（含明文 secret）: ${startupScriptPath}`,
+                    `launchd 配置: ${installed.plistPath}`,
+                    `服务标识: ${installed.serviceTarget}`,
+                    "会话类型: GUI (Aqua)，可触发图形权限请求",
+                    installed.hint,
+                ];
+            }
+            else {
+                await writeWindowsStartupBat(startupScriptPath, parsed.workDir, javaArgs);
+                summaryLines = [
+                    `Conda 环境: ${VERSION_POLICY.conda.envName}`,
+                    `启动脚本（含明文 secret）: ${startupScriptPath}`,
+                    `手动启动: ${startupScriptPath}`,
+                ];
+            }
+            console.log("步骤 5/5: 输出安装结果...");
+            await renderOnce(_jsx(CheckReport, { title: "\u5B89\u88C5\u5B8C\u6210", results: summaryLines.map((line, index) => ({
+                    name: `步骤 ${index + 1}`,
+                    status: "pass",
+                    detail: line,
+                })) }));
+            console.log("安装流程已完成。");
+        }
+        catch (error) {
+            process.exitCode = 1;
+            console.error(`install 执行失败: ${safeErrorMessage(error)}`);
+        }
+    });
+}
+//# sourceMappingURL=install.js.map