buildify-cli 1.0.0__tar.gz → 1.2.0__tar.gz

{buildify_cli-1.0.0 → buildify_cli-1.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: buildify-cli
-Version: 1.0.0
+Version: 1.2.0
 Summary: CLI for the Buildify open API: discover bundle nodes, author and test workflows (machine Bearer auth)
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -65,8 +65,8 @@ interactive prompt. `config set-key api_key` still updates the current profile,
 | — | `health`, `version`, `help` |
 | `key` | `test` |
 | `bundle` | `list`, `nodes`, `node-properties`, `node-relations`, `doc`, `cred-types`, `cred-properties` |
-| `project` | `list`, `create`, `get`, `credentials`, `create-credential`, `workers` |
-| `workflow` | `list`, `create`, `get-draft`, `save-draft`, `validate`, `test-run`, `cancel-test`, `deploy`, `published`, `deployment` |
+| `project` | `list`, `create`, `get`, `update`, `delete`, `credentials`, `create-credential`, `update-credential`, `delete-credential`, `credential-workflows`, `workers` |
+| `workflow` | `list`, `create`, `get-draft`, `save-draft`, `validate`, `test-run`, `cancel-test`, `deploy`, `published`, `deployments`, `deployment`, `versions`, `get-version` |
 | `config` | `init`, `set-key`, `add-profile`, `use`, `profiles`, `remove-profile`, `show` |
 
 Every command accepts `--json` for a single-line envelope

{buildify_cli-1.0.0 → buildify_cli-1.2.0}/README.md

@@ -52,8 +52,8 @@ interactive prompt. `config set-key api_key` still updates the current profile,
 | — | `health`, `version`, `help` |
 | `key` | `test` |
 | `bundle` | `list`, `nodes`, `node-properties`, `node-relations`, `doc`, `cred-types`, `cred-properties` |
-| `project` | `list`, `create`, `get`, `credentials`, `create-credential`, `workers` |
-| `workflow` | `list`, `create`, `get-draft`, `save-draft`, `validate`, `test-run`, `cancel-test`, `deploy`, `published`, `deployment` |
+| `project` | `list`, `create`, `get`, `update`, `delete`, `credentials`, `create-credential`, `update-credential`, `delete-credential`, `credential-workflows`, `workers` |
+| `workflow` | `list`, `create`, `get-draft`, `save-draft`, `validate`, `test-run`, `cancel-test`, `deploy`, `published`, `deployments`, `deployment`, `versions`, `get-version` |
 | `config` | `init`, `set-key`, `add-profile`, `use`, `profiles`, `remove-profile`, `show` |
 
 Every command accepts `--json` for a single-line envelope

{buildify_cli-1.0.0 → buildify_cli-1.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "buildify-cli"
-version = "1.0.0"
+version = "1.2.0"
 description = "CLI for the Buildify open API: discover bundle nodes, author and test workflows (machine Bearer auth)"
 readme = "README.md"
 requires-python = ">=3.10"

buildify_cli-1.2.0/src/buildify_cli/__init__.py

@@ -0,0 +1 @@
+__version__ = "1.2.0"

{buildify_cli-1.0.0 → buildify_cli-1.2.0}/src/buildify_cli/cli.py

@@ -47,7 +47,12 @@ from buildify_cli.credential_form import (
     prompt_payload,
 )
 from buildify_cli.output import human_err, is_tty, print_json
-from buildify_cli.publish_view import format_publish_report, is_publish_payload
+from buildify_cli.publish_view import (
+    format_deployment_records,
+    format_publish_report,
+    format_version_records,
+    is_publish_payload,
+)
 
 app = typer.Typer(
     help="Buildify open API CLI: discover nodes, author workflows, validate, test run and deploy.",
@@ -60,9 +65,10 @@ app = typer.Typer(
         "  health           GET /openapi/v1/health (no key)\n"
         "  key test         Validate the configured key\n"
         "  bundle           Bundle / node discovery: list, nodes, node-properties, node-relations, doc, cred-types, cred-properties\n"
-        "  project          list, create, get, credentials, create-credential, workers\n"
+        "  project          list, create, get, update, delete, credentials, create-credential,\n"
+        "                   update-credential, delete-credential, credential-workflows, workers\n"
         "  workflow         list, create, get-draft, save-draft, validate, test-run, cancel-test,\n"
-        "                   deploy, published, deployment\n"
+        "                   deploy, published, deployments, deployment, versions, get-version\n"
         "  config           Manage the [openapi] section of ~/.buildifyrc\n"
         "  version          Print CLI version\n"
         "  help             Markdown reference on stdout (for AI/agents)\n\n"
@@ -248,6 +254,15 @@ def _emit_network_error(ctx: typer.Context, exc: BaseException) -> int:
     return ec.NETWORK
 
 
+def _show_page(ctx: typer.Context, data: Any, formatter) -> None:
+    """Pretty-print a page for humans; `--json` keeps the server payload."""
+    if _cfg(ctx).json_output:
+        print_json(ok=True, code=200, msg="ok", http_status=200, data=data)
+    else:
+        typer.echo(formatter(data))
+    raise typer.Exit(ec.OK)
+
+
 def _call(ctx: typer.Context, fn, *args, **kwargs) -> None:
     """Run one client call and exit with the mapped code."""
     try:
@@ -435,6 +450,7 @@ project_app = typer.Typer(help="Projects, credentials and workers.")
 app.add_typer(project_app, name="project")
 
 _OPT_PROJECT = typer.Option(..., "--project", "-p", help="Project public id (proj_...).")
+_OPT_CREDENTIALS = typer.Option(..., "--credentials", help="Credential public id (cred_...).")
 
 
 @project_app.command("list")
@@ -462,6 +478,25 @@ def cmd_project_get(ctx: typer.Context, project: str = _OPT_PROJECT) -> None:
         _call(ctx, c.project_get, project)
 
 
+@project_app.command("update")
+def cmd_project_update(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    name: str = typer.Option(..., "--name", "-n", help="New project name."),
+    remark: Optional[str] = typer.Option(None, "--remark", help="New description. Omit to keep the current one."),
+) -> None:
+    """Rename a project or change its description."""
+    with _client(ctx) as c:
+        _call(ctx, c.project_update, project, name, remark)
+
+
+@project_app.command("delete")
+def cmd_project_delete(ctx: typer.Context, project: str = _OPT_PROJECT) -> None:
+    """Delete a project that has no workflows. Confirm with the user first."""
+    with _client(ctx) as c:
+        _call(ctx, c.project_delete, project)
+
+
 @project_app.command("credentials")
 def cmd_project_credentials(
     ctx: typer.Context,
@@ -596,6 +631,101 @@ def cmd_project_create_credential(
         )
 
 
+@project_app.command("update-credential")
+def cmd_project_update_credential(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    credentials: str = _OPT_CREDENTIALS,
+    label: Optional[str] = typer.Option(None, "--label", help="New display name. Omit to keep the current one."),
+    description: Optional[str] = typer.Option(
+        None, "--description", help="New remark. Pass an empty string to clear it. Omit to keep the current one."
+    ),
+    bundle_version: Optional[str] = typer.Option(
+        None, "--bundle-version", "-V", help="Bind another version of the same bundle. Omit to keep the current one."
+    ),
+    data_inline: Optional[str] = typer.Option(
+        None,
+        "--data",
+        help="JSON object of form fields. Insecure in argv; prefer --file - / stdin.",
+    ),
+    file: Optional[Path] = typer.Option(
+        None,
+        "--file",
+        "-f",
+        help="JSON file of form fields to merge, or '-' for stdin. Omit to keep stored secrets.",
+    ),
+    yes: bool = typer.Option(False, "--yes", "-y", help="Skip the TTY confirmation prompt."),
+) -> None:
+    """Update a credential's label, remark, bundle version, or form data.
+
+    Omitted fields stay as they are. Secrets are never printed. Masked or blank secret fields
+    keep the stored value. Confirm with the user before running.
+    """
+    if data_inline:
+        human_err("warning: --data is visible in process lists and shell history; prefer --file -")
+    data: Optional[dict[str, Any]] = None
+    if data_inline is not None or file is not None:
+        parsed = _read_json_arg(ctx, data_inline, file, what="credential data")
+        if not isinstance(parsed, dict):
+            raise _fail_local(ctx, "credential data must be a JSON object")
+        data = parsed
+    if label is None and description is None and bundle_version is None and data is None:
+        raise _fail_local(ctx, "至少提供 --label、--description、--bundle-version 或 --file 之一")
+    if label is not None and not label.strip():
+        raise _fail_local(ctx, "label 不能为空")
+    if _can_prompt_for_key(ctx) and not yes:
+        human_err("即将更新访问凭证，请确认：")
+        human_err(f"  credentials：{credentials}")
+        if label is not None:
+            human_err(f"  label：{label}")
+        if description is not None:
+            human_err(f"  description：{description if description else '（清空）'}")
+        if bundle_version is not None:
+            human_err(f"  bundleVersion：{bundle_version}")
+        if data is not None:
+            human_err(f"  参数键：{', '.join(data) or '（空）'}（值已隐藏）")
+        if not typer.confirm("确认更新？", default=False, err=True):
+            raise _fail_local(ctx, "已取消更新", ec.LOCAL_VALIDATION)
+    with _client(ctx) as c:
+        _call(
+            ctx,
+            c.project_update_credential,
+            project,
+            credentials,
+            label=label.strip() if label is not None else None,
+            description=description,
+            bundle_version=bundle_version,
+            data=data,
+        )
+
+
+@project_app.command("delete-credential")
+def cmd_project_delete_credential(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    credentials: str = _OPT_CREDENTIALS,
+) -> None:
+    """Soft-delete a credential that no workflow references. Confirm with the user first.
+
+    HTTP 409 when a flow still references it.
+    """
+    with _client(ctx) as c:
+        _call(ctx, c.project_delete_credential, project, credentials)
+
+
+@project_app.command("credential-workflows")
+def cmd_project_credential_workflows(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    credentials: str = _OPT_CREDENTIALS,
+    page: int = typer.Option(1, "--page", min=1, help="Page number, starting at 1."),
+    page_size: int = typer.Option(10, "--page-size", min=1, max=100, help="Page size, at most 100."),
+) -> None:
+    """Workflows that reference a credential. No secrets. Requires credentials view."""
+    with _client(ctx) as c:
+        _call(ctx, c.project_credential_workflows, project, credentials, page=page, page_size=page_size)
+
+
 def _prompt_credential_data(fields: list[dict[str, Any]]) -> dict[str, Any]:
     values: dict[str, Any] = {}
     if not fields:
@@ -688,6 +818,74 @@ def cmd_flow_create(
         _call(ctx, c.flow_create, project, workflow_name=name, worker_ids=list(worker), remark=remark)
 
 
+_OPT_WORKERS = typer.Option(
+    ..., "--worker", help="Worker public id; repeat for multiple. See `buildify project workers`."
+)
+
+
+@flow_app.command("update")
+def cmd_flow_update(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    flow: str = _OPT_FLOW,
+    name: str = typer.Option(..., "--name", "-n", help="New workflow name."),
+    remark: Optional[str] = typer.Option(None, "--remark", help="New description. Omit to keep the current one."),
+) -> None:
+    """Rename a workflow or change its description."""
+    with _client(ctx) as c:
+        _call(ctx, c.flow_update, project, flow, workflow_name=name, remark=remark)
+
+
+@flow_app.command("delete")
+def cmd_flow_delete(ctx: typer.Context, project: str = _OPT_PROJECT, flow: str = _OPT_FLOW) -> None:
+    """Delete a workflow that has no bound servers. Confirm with the user first."""
+    with _client(ctx) as c:
+        _call(ctx, c.flow_delete, project, flow)
+
+
+@flow_app.command("workers")
+def cmd_flow_workers(ctx: typer.Context, project: str = _OPT_PROJECT, flow: str = _OPT_FLOW) -> None:
+    """Servers bound to a workflow, including ones waiting to be removed."""
+    with _client(ctx) as c:
+        _call(ctx, c.flow_workers, project, flow)
+
+
+@flow_app.command("assign-workers")
+def cmd_flow_assign_workers(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    flow: str = _OPT_FLOW,
+    worker: list[str] = _OPT_WORKERS,
+) -> None:
+    """Bind extra servers. A published flow is deployed to the new servers."""
+    with _client(ctx) as c:
+        _call(ctx, c.flow_assign_workers, project, flow, list(worker))
+
+
+@flow_app.command("unassign-workers")
+def cmd_flow_unassign_workers(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    flow: str = _OPT_FLOW,
+    worker: list[str] = _OPT_WORKERS,
+) -> None:
+    """Unbind servers. A published flow is undeployed and removed after the server confirms."""
+    with _client(ctx) as c:
+        _call(ctx, c.flow_unassign_workers, project, flow, list(worker))
+
+
+@flow_app.command("force-unassign-workers")
+def cmd_flow_force_unassign_workers(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    flow: str = _OPT_FLOW,
+    worker: list[str] = _OPT_WORKERS,
+) -> None:
+    """Drop server bindings immediately. Use when the server is gone or a normal unassign is stuck."""
+    with _client(ctx) as c:
+        _call(ctx, c.flow_force_unassign_workers, project, flow, list(worker))
+
+
 @flow_app.command("get-draft")
 def cmd_flow_get_draft(ctx: typer.Context, project: str = _OPT_PROJECT, flow: str = _OPT_FLOW) -> None:
     """Draft canvas JSON plus the optimistic-lock `version` needed to save it back."""
@@ -901,6 +1099,35 @@ def cmd_flow_published(ctx: typer.Context, project: str = _OPT_PROJECT, flow: st
         _call(ctx, c.flow_published, project, flow)
 
 
+@flow_app.command("deployments")
+def cmd_flow_deployments(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    flow: str = _OPT_FLOW,
+    deployment: Optional[str] = typer.Option(
+        None, "--deployment", "-d", help="Only this deployment public id (deploy_...)."
+    ),
+    page: int = typer.Option(1, "--page", min=1, help="Page number, starting at 1."),
+    page_size: int = typer.Option(10, "--page-size", min=1, max=100, help="Page size, at most 100."),
+    begin: Optional[str] = typer.Option(None, "--begin", help="Created at or after, yyyy-MM-dd HH:mm:ss."),
+    end: Optional[str] = typer.Option(None, "--end", help="Created at or before, yyyy-MM-dd HH:mm:ss."),
+) -> None:
+    """List deployment records for a flow (newest first). Requires view_deployment."""
+    with _client(ctx) as c:
+        data = _fetch(
+            ctx,
+            c.flow_deployments,
+            project,
+            flow,
+            deployment_id=deployment,
+            page=page,
+            page_size=page_size,
+            begin_time=begin,
+            end_time=end,
+        )
+        _show_page(ctx, data, format_deployment_records)
+
+
 @flow_app.command("deployment")
 def cmd_flow_deployment(
     ctx: typer.Context,
@@ -908,11 +1135,37 @@ def cmd_flow_deployment(
     flow: str = _OPT_FLOW,
     deployment: str = typer.Option(..., "--deployment", "-d", help="Deployment public id (deploy_...)."),
 ) -> None:
-    """One deployment's overall status and per-server result."""
+    """One deployment record: counts, per-server tasks, and the publish summary."""
     with _client(ctx) as c:
         _call(ctx, c.flow_deployment, project, flow, deployment)
 
 
+@flow_app.command("versions")
+def cmd_flow_versions(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    flow: str = _OPT_FLOW,
+    page: int = typer.Option(1, "--page", min=1, help="Page number, starting at 1."),
+    page_size: int = typer.Option(10, "--page-size", min=1, max=100, help="Page size, at most 100."),
+) -> None:
+    """List historical versions (newest first), including the draft. Requires view_version."""
+    with _client(ctx) as c:
+        data = _fetch(ctx, c.flow_versions, project, flow, page=page, page_size=page_size)
+        _show_page(ctx, data, format_version_records)
+
+
+@flow_app.command("get-version")
+def cmd_flow_get_version(
+    ctx: typer.Context,
+    project: str = _OPT_PROJECT,
+    flow: str = _OPT_FLOW,
+    version_id: str = typer.Option(..., "--version-id", help="Version public id (v-...)."),
+) -> None:
+    """Canvas JSON of one historical version. Read-only; not a draft lock. Requires view_version."""
+    with _client(ctx) as c:
+        _call(ctx, c.flow_version, project, flow, version_id)
+
+
 # --- config ---
 config_app = typer.Typer(help="Write/read the openapi section of ~/.buildifyrc (overridden by env at runtime).")
 app.add_typer(config_app, name="config")

{buildify_cli-1.0.0 → buildify_cli-1.2.0}/src/buildify_cli/client.py

@@ -116,6 +116,15 @@ class OpenApiClient:
     def project_get(self, project_id: str) -> tuple[int, Any]:
         return self._get(f"{API_PREFIX}/projects/{project_id}")
 
+    def project_update(self, project_id: str, name: str, remark: Optional[str]) -> tuple[int, Any]:
+        payload: dict[str, Any] = {"projectName": name}
+        if remark is not None:
+            payload["remark"] = remark
+        return self._post(f"{API_PREFIX}/projects/{project_id}", payload)
+
+    def project_delete(self, project_id: str) -> tuple[int, Any]:
+        return self._delete(f"{API_PREFIX}/projects/{project_id}")
+
     def project_credentials(self, project_id: str, bundle_name: Optional[str] = None) -> tuple[int, Any]:
         return self._get(
             f"{API_PREFIX}/projects/{project_id}/credentials",
@@ -147,6 +156,43 @@ class OpenApiClient:
             payload["description"] = description
         return self._post(f"{API_PREFIX}/projects/{project_id}/credentials", payload)
 
+    def project_update_credential(
+        self,
+        project_id: str,
+        credentials_id: str,
+        *,
+        label: Optional[str] = None,
+        description: Optional[str] = None,
+        bundle_version: Optional[str] = None,
+        data: Optional[dict[str, Any]] = None,
+    ) -> tuple[int, Any]:
+        payload: dict[str, Any] = {}
+        if label is not None:
+            payload["label"] = label
+        if description is not None:
+            payload["description"] = description
+        if bundle_version is not None:
+            payload["bundleVersion"] = bundle_version
+        if data is not None:
+            payload["data"] = data
+        return self._post(f"{API_PREFIX}/projects/{project_id}/credentials/{credentials_id}", payload)
+
+    def project_delete_credential(self, project_id: str, credentials_id: str) -> tuple[int, Any]:
+        return self._delete(f"{API_PREFIX}/projects/{project_id}/credentials/{credentials_id}")
+
+    def project_credential_workflows(
+        self,
+        project_id: str,
+        credentials_id: str,
+        *,
+        page: int = 1,
+        page_size: int = 10,
+    ) -> tuple[int, Any]:
+        return self._get(
+            f"{API_PREFIX}/projects/{project_id}/credentials/{credentials_id}/workflows",
+            {"page": page, "pageSize": page_size},
+        )
+
     def project_workers(self, project_id: str, online_only: bool = False) -> tuple[int, Any]:
         return self._get(
             f"{API_PREFIX}/projects/{project_id}/workers",
@@ -171,6 +217,43 @@ class OpenApiClient:
             {"workflowName": workflow_name, "workerIds": worker_ids, "remark": remark},
         )
 
+    def flow_update(
+        self,
+        project_id: str,
+        workflow_id: str,
+        *,
+        workflow_name: str,
+        remark: Optional[str],
+    ) -> tuple[int, Any]:
+        payload: dict[str, Any] = {"workflowName": workflow_name}
+        if remark is not None:
+            payload["remark"] = remark
+        return self._post(f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}/settings", payload)
+
+    def flow_delete(self, project_id: str, workflow_id: str) -> tuple[int, Any]:
+        return self._delete(f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}")
+
+    def flow_workers(self, project_id: str, workflow_id: str) -> tuple[int, Any]:
+        return self._get(f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}/workers")
+
+    def flow_assign_workers(self, project_id: str, workflow_id: str, worker_ids: list[str]) -> tuple[int, Any]:
+        return self._post(
+            f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}/assign_workers",
+            {"workerIds": worker_ids},
+        )
+
+    def flow_unassign_workers(self, project_id: str, workflow_id: str, worker_ids: list[str]) -> tuple[int, Any]:
+        return self._post(
+            f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}/unassign_workers",
+            {"workerIds": worker_ids},
+        )
+
+    def flow_force_unassign_workers(self, project_id: str, workflow_id: str, worker_ids: list[str]) -> tuple[int, Any]:
+        return self._post(
+            f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}/force_unassign_workers",
+            {"workerIds": worker_ids},
+        )
+
     def flow_get_draft(self, project_id: str, workflow_id: str) -> tuple[int, Any]:
         return self._get(f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}/draft")
 
@@ -250,6 +333,46 @@ class OpenApiClient:
     def flow_published(self, project_id: str, workflow_id: str) -> tuple[int, Any]:
         return self._get(f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}/published")
 
+    def flow_deployments(
+        self,
+        project_id: str,
+        workflow_id: str,
+        *,
+        deployment_id: Optional[str] = None,
+        page: Optional[int] = None,
+        page_size: Optional[int] = None,
+        begin_time: Optional[str] = None,
+        end_time: Optional[str] = None,
+    ) -> tuple[int, Any]:
+        return self._get(
+            f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}/deployments",
+            {
+                "deploymentId": deployment_id,
+                "page": page,
+                "pageSize": page_size,
+                "beginTime": begin_time,
+                "endTime": end_time,
+            },
+        )
+
+    def flow_versions(
+        self,
+        project_id: str,
+        workflow_id: str,
+        *,
+        page: Optional[int] = None,
+        page_size: Optional[int] = None,
+    ) -> tuple[int, Any]:
+        return self._get(
+            f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}/versions",
+            {"page": page, "pageSize": page_size},
+        )
+
+    def flow_version(self, project_id: str, workflow_id: str, version_id: str) -> tuple[int, Any]:
+        return self._get(
+            f"{API_PREFIX}/projects/{project_id}/workflows/{workflow_id}/versions/{version_id}"
+        )
+
     def flow_deployment(
         self,
         project_id: str,

{buildify_cli-1.0.0 → buildify_cli-1.2.0}/src/buildify_cli/config.py

@@ -22,8 +22,8 @@ ENV_JSON = "BUILDIFY_OPENAPI_JSON"
 # Set to 1/true/yes to never prompt for a missing key (CI / non-interactive).
 ENV_NO_PROMPT = "BUILDIFY_OPENAPI_NO_PROMPT"
 
-# ~/.buildifyrc 与 buildify-publish 共用；开放 API 的配置放在独立 section 下，
-# 避免两套密钥（发布 / 编排）互相覆盖。
+# ~/.buildifyrc 与 buildify-publish 共用。开放 API 在 [openapi]，发布配置在 [publish]，
+# 两套密钥不会互相覆盖。
 RC_SECTION = "openapi"
 
 RC_KEYS = frozenset({"base_url", "api_key"})

{buildify_cli-1.0.0 → buildify_cli-1.2.0}/src/buildify_cli/publish_view.py

@@ -1,5 +1,6 @@
 from __future__ import annotations
 
+import json
 from typing import Any, Optional
 
 _STATUS_ICON = {
@@ -106,6 +107,76 @@ def format_publish_report(payload: dict[str, Any]) -> str:
     return "\n".join(lines).rstrip() + "\n"
 
 
+def format_deployment_records(page: Any) -> str:
+    """Markdown table for a deployment-record page."""
+    if not isinstance(page, dict):
+        return json.dumps(page, ensure_ascii=False, indent=2) + "\n"
+    rows = page.get("data") if isinstance(page.get("data"), list) else []
+    lines = [
+        _page_heading(page, len(rows)),
+        "",
+        "| 部署 | 版本 | 状态 | 成功 | 失败 | 警告 | 时间 | 来源 |",
+        "| --- | --- | --- | --- | --- | --- | --- | --- |",
+    ]
+    if not rows:
+        lines.append("| — | — | — | — | — | — | — | — |")
+    for row in rows:
+        if not isinstance(row, dict):
+            continue
+        status = _status_key(row.get("deployStatus"))
+        icon = row.get("deployStatusIcon") or _STATUS_ICON.get(status, "⏳")
+        label = row.get("deployStatusLabel") or _STATUS_LABEL.get(status, "待部署")
+        lines.append(
+            f"| `{_cell(row.get('deploymentId'))}` | `{_cell(row.get('versionName'))}` | "
+            f"{icon} {label} | {row.get('successCount', 0)} | {row.get('failCount', 0)} | "
+            f"{row.get('warningCount', 0)} | {_cell(row.get('createdAt'))} | {_source(row)} |"
+        )
+    return "\n".join(lines).rstrip() + "\n"
+
+
+def format_version_records(page: Any) -> str:
+    """Markdown table for a workflow version page."""
+    if not isinstance(page, dict):
+        return json.dumps(page, ensure_ascii=False, indent=2) + "\n"
+    rows = page.get("data") if isinstance(page.get("data"), list) else []
+    lines = [
+        _page_heading(page, len(rows)),
+        "",
+        "| 版本 | 名称 | 草稿 | 运行中 | 说明 | 更新时间 | 来源 |",
+        "| --- | --- | --- | --- | --- | --- | --- |",
+    ]
+    if not rows:
+        lines.append("| — | — | — | — | — | — | — |")
+    for row in rows:
+        if not isinstance(row, dict):
+            continue
+        lines.append(
+            f"| `{_cell(row.get('versionId'))}` | `{_cell(row.get('versionName'))}` | "
+            f"{_yes(row.get('isDraft'))} | {_yes(row.get('isRunning'))} | {_cell(row.get('remark'))} | "
+            f"{_cell(row.get('updatedAt') or row.get('createdAt'))} | {_source(row)} |"
+        )
+    return "\n".join(lines).rstrip() + "\n"
+
+
+def _page_heading(page: dict[str, Any], shown: int) -> str:
+    total = page.get("total", shown)
+    current = page.get("page", 1)
+    pages = page.get("totalPages", 1)
+    return f"共 {total} 条，第 {current} / {pages} 页"
+
+
+def _yes(value: Any) -> str:
+    return "是" if value is True else "否"
+
+
+def _source(row: dict[str, Any]) -> str:
+    source = row.get("source") or "—"
+    key_name = row.get("sourceKeyName")
+    if key_name:
+        return _cell(f"{source} · {key_name}")
+    return _cell(source)
+
+
 def _status_key(value: Any) -> str:
     if value is None:
         return "pending"

{buildify_cli-1.0.0 → buildify_cli-1.2.0}/src/buildify_cli/usage.md

@@ -8,6 +8,12 @@ and docs, reference existing credentials, then create / validate / test run / de
 **Auth:** `Authorization: Bearer <keyId>.<secret>`. Keys are **issued and revoked in the console**
 (workspace settings → Open API keys), not via this CLI. One key is bound to exactly one workspace;
 every command below is implicitly scoped to it. The plaintext is shown **only once** at creation.
+A key may also be limited to scopes and projects. Scope values are the console permission codes
+(`project:workflow:view`, `project:workflow:view_deployment`, `project:workflow:view_version`,
+`project:workflow:deploy`, …). `*` is every capability; `project:*` and
+`project:workflow:*` follow the console matcher (`project.*` is the same as `project:*`). HTTP 403
+(`缺少权限: …`) means the key is valid but lacks that capability; it is not an invalid key (that stays
+401). A project outside the key's allowlist is 404 `项目不存在`.
 
 If no key is configured:
 
@@ -55,7 +61,7 @@ the user confirms project, name/label and form values. Publish with `workflow de
 
 **Config file:** `~/.buildifyrc`, section `[openapi]`: `base_url`, legacy `api_key`, `current`, and
 `profiles.<name>` (`api_key`, cached `tenant_id` / `key_name` / `key_prefix`). File mode `600`.
-Shared with `buildify-publish`, which uses the top-level keys — the two do not collide.
+Shared with `buildify-publish`, which keeps its host and keys under `[publish]` — the two sections do not collide.
 
 **Precedence:** `--api-key` / `BUILDIFY_OPENAPI_API_KEY` > `--profile` / `BUILDIFY_OPENAPI_PROFILE` >
 `.buildify-workspace` > `[openapi].current` > the only saved key > `profile_required` or `missing_api_key`.
@@ -88,17 +94,31 @@ All paths are under `/openapi/v1`.
 | `bundle cred-types` | GET | `/bundles/credentials/types` |
 | `bundle cred-properties` | GET | `/bundles/credentials/properties` |
 | `project list` / `create` / `get` | GET / POST / GET | `/projects[...]` |
+| `project update` | POST | `/projects/{id}` |
+| `project delete` | DELETE | `/projects/{id}` |
 | `project credentials` | GET | `/projects/{id}/credentials` |
 | `project create-credential` | POST | `/projects/{id}/credentials` |
+| `project update-credential` | POST | `/projects/{id}/credentials/{credentialsId}` |
+| `project delete-credential` | DELETE | `/projects/{id}/credentials/{credentialsId}` |
+| `project credential-workflows` | GET | `/projects/{id}/credentials/{credentialsId}/workflows` |
 | `project workers` | GET | `/projects/{id}/workers` |
 | `workflow list` / `create` | GET / POST | `/projects/{id}/workflows` |
+| `workflow update` | POST | `/projects/{id}/workflows/{wid}/settings` |
+| `workflow workers` | GET | `/projects/{id}/workflows/{wid}/workers` |
+| `workflow assign-workers` | POST | `/projects/{id}/workflows/{wid}/assign_workers` |
+| `workflow unassign-workers` | POST | `/projects/{id}/workflows/{wid}/unassign_workers` |
+| `workflow force-unassign-workers` | POST | `/projects/{id}/workflows/{wid}/force_unassign_workers` |
+| `workflow delete` | DELETE | `/projects/{id}/workflows/{wid}` |
 | `workflow get-draft` / `save-draft` | GET / POST | `/projects/{id}/workflows/{wid}/draft` |
 | `workflow validate` | POST | `/projects/{id}/workflows/validate` |
 | `workflow test-run` | POST | `/projects/{id}/workflows/test_runs` |
 | `workflow cancel-test` | POST | `/projects/{id}/workflows/test_runs/{executionId}/cancel` |
 | `workflow deploy` | POST | `/projects/{id}/workflows/{wid}/deploy` |
 | `workflow published` | GET | `/projects/{id}/workflows/{wid}/published` |
+| `workflow deployments` | GET | `/projects/{id}/workflows/{wid}/deployments` |
 | `workflow deployment` | GET | `/projects/{id}/workflows/{wid}/deployments/{deployId}` |
+| `workflow versions` | GET | `/projects/{id}/workflows/{wid}/versions` |
+| `workflow get-version` | GET | `/projects/{id}/workflows/{wid}/versions/{versionId}` |
 
 ## Typical session
 
@@ -140,6 +160,19 @@ buildify --json workflow deploy     -p proj_xxx -w wf_xxx --worker wk_xxx \
 
 `--file -` reads JSON from stdin (flow canvas or credential `data`).
 
+## Changing projects, servers, and deleting flows
+
+Ask the user before any of these. They change where a flow runs or remove data.
+
+- `project update -p ID -n "新名称" [--remark 简介]` renames a project. Omit `--remark` to keep the current description.
+- `project delete -p ID` deletes a project only when it has no workflows (otherwise HTTP 409).
+- `workflow update -p ID -w WF -n "新名称" [--remark 简介]` renames a workflow.
+- `workflow workers -p ID -w WF` lists servers bound to the flow. `deleteStatus` `0` is bound, `1` is waiting for the server to finish removal.
+- `workflow assign-workers -p ID -w WF --worker wk_…` adds servers. Repeat `--worker` for more than one. If the flow is already published, the current published version is deployed to the new servers (`needDeploy: true`, `deploymentId`). Servers already bound are skipped. A server still waiting to be removed returns HTTP 409.
+- `workflow unassign-workers` starts removal. Unpublished flows drop the binding immediately. Published flows set `deleteStatus` to `1` and send `UNDEPLOY`; the binding row stays until the server confirms.
+- `workflow force-unassign-workers` drops the binding immediately and writes a sync log so an offline server drops the flow on its next sync. Use it when the server is gone or a normal unassign is stuck.
+- `workflow delete -p ID -w WF` deletes the flow only when no server is bound, including ones still waiting to be removed (otherwise HTTP 409).
+
 ## project create-credential
 
 Requires `--project`. Also pass `--bundle` and `--type`. If `--name` / `--label` / credential
@@ -154,6 +187,16 @@ Requires `--project`. Also pass `--bundle` and `--type`. If `--name` / `--label`
 Response is metadata only (`name` / `label` / `type` / `credentialsId`). Duplicate
 `bundle+type+name` in the same project returns HTTP 409.
 
+`project credentials` includes `credentialsId` for the commands below. Secrets are never returned.
+
+## project update-credential / delete-credential / credential-workflows
+
+Ask the user before update or delete.
+
+- `project update-credential -p ID --credentials cred_…` changes label, remark, bundle version, or form data. Pass at least one of `--label`, `--description`, `--bundle-version`, `--file`. Omitted fields stay unchanged. An empty `--description` clears the remark. `--file -` merges form fields; masked or blank secret fields keep the stored value. Secrets are never printed. A TTY asks for confirmation unless `--yes`; `--json` does not prompt.
+- `project delete-credential -p ID --credentials cred_…` soft-deletes a credential. HTTP 409 when a workflow still references it.
+- `project credential-workflows -p ID --credentials cred_… [--page 1] [--page-size 10]` lists workflows that use the credential. No secrets. Same view permission as `project credentials`.
+
 ## Version conflicts on save-draft
 
 `workflow save-draft` reads the current draft to obtain the optimistic-lock `version` unless you pass
@@ -166,7 +209,7 @@ rather than retrying blindly.
 Checks, in this order: canvas structure, node existence in the workspace, `data.parameters`
 against each node's `properties_json`, `edges[].data.relations[].name` against the source node's
 `relations_json` (or the source node's custom `data.relations` for MCP), `data.credentials`
-against the project's credentials, graph shape (trigger present, orphan nodes, cycles),
+against the project's credentials, graph shape (trigger present, orphan nodes),
 and WARNINGs if catalog `icon` is missing on a node or an edge relation is missing `label` /
 custom `icon`/`_id`.
 
@@ -232,7 +275,18 @@ Without `--json`, `workflow deploy` / `published` / `deployment` print Markdown
 （项目 / 服务器 / 凭证；凭证表含 `name` 与 `label`，不含节点表）。
 With `--json`, agents should render the same tables (see buildify-flow-dev skill).
 
-`workflow published` is the live snapshot after deploy. `workflow deployment -d deploy_…` is one attempt.
+`workflow published` is the live snapshot after deploy. `workflow deployment -d deploy_…` is one attempt:
+counts (`successCount` includes warnings), per-server `items`, and the same `summary` tables.
+
+`workflow deployments` lists records newest first. Needs scope `project:workflow:view_deployment`.
+`--page` / `--page-size` (max 100), optional `--deployment deploy_…`, and `--begin` / `--end`
+(`yyyy-MM-dd HH:mm:ss`, quote the space). Without `--json` it prints a table; `--json` returns the
+page (`total`, `page`, `pageSize`, `data`, `hasNext`).
+
+`workflow versions` lists historical versions newest first, including the current draft (`isDraft`)
+and any version still bound to a server (`isRunning`). Needs `project:workflow:view_version`.
+`workflow get-version --version-id v-…` returns that version's canvas (`workflowJson`). It is
+read-only and does not return the draft optimistic-lock `version`.
 
 ## JSON output schema
 

{buildify_cli-1.0.0 → buildify_cli-1.2.0}/src/buildify_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: buildify-cli
-Version: 1.0.0
+Version: 1.2.0
 Summary: CLI for the Buildify open API: discover bundle nodes, author and test workflows (machine Bearer auth)
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -65,8 +65,8 @@ interactive prompt. `config set-key api_key` still updates the current profile,
 | — | `health`, `version`, `help` |
 | `key` | `test` |
 | `bundle` | `list`, `nodes`, `node-properties`, `node-relations`, `doc`, `cred-types`, `cred-properties` |
-| `project` | `list`, `create`, `get`, `credentials`, `create-credential`, `workers` |
-| `workflow` | `list`, `create`, `get-draft`, `save-draft`, `validate`, `test-run`, `cancel-test`, `deploy`, `published`, `deployment` |
+| `project` | `list`, `create`, `get`, `update`, `delete`, `credentials`, `create-credential`, `update-credential`, `delete-credential`, `credential-workflows`, `workers` |
+| `workflow` | `list`, `create`, `get-draft`, `save-draft`, `validate`, `test-run`, `cancel-test`, `deploy`, `published`, `deployments`, `deployment`, `versions`, `get-version` |
 | `config` | `init`, `set-key`, `add-profile`, `use`, `profiles`, `remove-profile`, `show` |
 
 Every command accepts `--json` for a single-line envelope

{buildify_cli-1.0.0 → buildify_cli-1.2.0}/src/buildify_cli.egg-info/SOURCES.txt

@@ -17,4 +17,5 @@ src/buildify_cli.egg-info/entry_points.txt
 src/buildify_cli.egg-info/requires.txt
 src/buildify_cli.egg-info/top_level.txt
 tests/test_auth_config.py
-tests/test_credential_form.py
+tests/test_credential_form.py
+tests/test_history_view.py

buildify_cli-1.2.0/tests/test_history_view.py

@@ -0,0 +1,57 @@
+from buildify_cli.publish_view import format_deployment_records, format_version_records
+
+
+def test_deployment_records_table_includes_counts_and_empty_page():
+    text = format_deployment_records(
+        {
+            "total": 1,
+            "page": 1,
+            "totalPages": 1,
+            "data": [
+                {
+                    "deploymentId": "deploy_abc",
+                    "versionName": "v1",
+                    "deployStatus": "failed",
+                    "deployStatusIcon": "❌",
+                    "deployStatusLabel": "失败",
+                    "successCount": 1,
+                    "failCount": 2,
+                    "warningCount": 0,
+                    "createdAt": "2026-11-01 10:00:00",
+                    "source": "api",
+                    "sourceKeyName": "ci",
+                }
+            ],
+        }
+    )
+    assert "共 1 条" in text
+    assert "deploy_abc" in text
+    assert "❌ 失败" in text
+    assert "api · ci" in text
+
+    empty = format_deployment_records({"total": 0, "page": 1, "totalPages": 0, "data": []})
+    assert "共 0 条" in empty
+
+
+def test_version_records_mark_draft_and_running():
+    text = format_version_records(
+        {
+            "total": 1,
+            "page": 1,
+            "totalPages": 1,
+            "data": [
+                {
+                    "versionId": "v-abc",
+                    "versionName": "draft",
+                    "isDraft": True,
+                    "isRunning": False,
+                    "remark": "note",
+                    "updatedAt": "2026-11-01 10:00:00",
+                    "source": "console",
+                }
+            ],
+        }
+    )
+    assert "v-abc" in text
+    assert "| 是 | 否 |" in text
+    assert "console" in text

buildify_cli-1.0.0/src/buildify_cli/__init__.py

@@ -1 +0,0 @@
-__version__ = "1.0.0"