qtcloud-devops-cli 0.1.0__tar.gz

qtcloud_devops_cli-0.1.0/PKG-INFO

@@ -0,0 +1,7 @@
+Metadata-Version: 2.4
+Name: qtcloud-devops-cli
+Version: 0.1.0
+Summary: DevOps CLI — 发布管理
+Requires-Python: >=3.12
+Requires-Dist: typer
+Requires-Dist: pydantic-settings

qtcloud_devops_cli-0.1.0/README.md

@@ -0,0 +1,65 @@
+# qtcloud-devops-cli
+
+DevOps CLI — 发布管理、契约检查与工作流自动化。
+
+## 安装
+
+```bash
+cd apps/qtcloud-devops
+pip install -e src/cli
+```
+
+依赖：Python 3.12+，包管理器 uv。
+
+## 项目结构
+
+```
+src/cli/
+├── app/
+│   ├── __init__.py
+│   ├── cli.py          # Typer CLI 入口
+│   ├── config.py       # pydantic-settings 配置
+│   ├── contract.py     # 契约加载与查询
+│   └── release.py      # 发布 Release 逻辑
+├── tests/
+│   ├── __init__.py
+│   ├── conftest.py
+│   ├── test_cli_commands.py
+│   ├── test_release.py
+│   └── test_contract.py
+├── pyproject.toml
+├── AGENTS.md
+├── CHANGELOG.md
+├── ROADMAP.md
+└── .gitignore
+```
+
+## 用法
+
+```bash
+# 标签 + GitHub Release
+qtcloud-devops release --version v0.1.0
+
+# 仅标签
+qtcloud-devops release --version v0.1.0 --tag-only
+
+# 仅为已有标签补 GitHub Release
+qtcloud-devops release --version v0.1.0 --release-only
+
+# 仅预检查
+qtcloud-devops release --version v0.1.0 --dry-run
+```
+
+## 发布流程
+
+1. **更新版本号** → 改 `pyproject.toml`
+2. **写 CHANGELOG** → 更新 `CHANGELOG.md`
+3. **提交** → `chore: bump qtcloud-devops-cli to vX.Y.Z`
+4. **打 tag** → `cli/vX.Y.Z`
+5. **推送** → CI 自动发布
+
+## 命名约定
+
+- 包名（PyPI）: `qtcloud-devops-cli`
+- 导入名: `app.*`
+- 仓库 tag 前缀: `cli/`

qtcloud_devops_cli-0.1.0/app/cli.py

@@ -0,0 +1,57 @@
+#!/usr/bin/env python3
+"""qtcloud-devops-cli — DevOps 发布管理命令行工具。
+
+基于 devops-release 技能，提供预检查、发布前确认、执行发布、验证、回滚的全流程自动化。
+
+用法:
+    qtcloud-devops release --version v0.1.0                   # 标签 + GitHub Release
+    qtcloud-devops release --version v0.1.0 --tag-only        # 仅创建 Git 标签
+    qtcloud-devops release --version v0.1.0 --release-only    # 仅创建 GitHub Release
+    qtcloud-devops release --version v0.1.0 --dry-run         # 仅检查
+    qtcloud-devops release --version v0.1.0 -y                # 跳过确认
+"""
+
+import typer
+
+app = typer.Typer()
+
+
+@app.callback()
+def main_callback() -> None: ...
+
+
+@app.command()
+def release(
+    version: str = typer.Option(..., "--version", "-V", help="版本号（如 v0.1.0）"),
+    changelog: str = typer.Option(
+        "CHANGELOG.md", "--changelog", help="CHANGELOG.md 路径"
+    ),
+    dry_run: bool = typer.Option(False, "--dry-run", help="仅检查，不执行"),
+    tag_only: bool = typer.Option(
+        False, "--tag-only", help="仅创建 Git 标签（默认行为，显式声明意图）"
+    ),
+    release_only: bool = typer.Option(
+        False, "--release-only", help="仅创建 GitHub Release，跳过 Git 标签"
+    ),
+    yes: bool = typer.Option(False, "--yes", "-y", help="跳过确认提示，直接发布"),
+):
+    """发布 Release。
+
+    默认行为：创建 Git 标签并推送 + GitHub Release（仓库从 git remote 自动检测）。
+    --tag-only：仅打标签，跳过 GitHub Release。
+    --release-only：仅为已有标签创建 GitHub Release（跳过标签创建）。
+    """
+    from pathlib import Path
+
+    from app.release import run
+
+    code = run(version, Path(changelog), dry_run, tag_only, release_only, yes)
+    raise typer.Exit(code=code)
+
+
+def main():
+    return app()
+
+
+if __name__ == "__main__":  # pragma: no cover
+    exit(main())

qtcloud_devops_cli-0.1.0/app/config.py

@@ -0,0 +1,8 @@
+from pydantic_settings import BaseSettings
+
+
+class Settings(BaseSettings):
+    model_config = {"env_prefix": "QTCLOUD_DEVOPS_"}
+
+
+settings = Settings()

qtcloud_devops_cli-0.1.0/app/release.py

@@ -0,0 +1,253 @@
+import re
+import subprocess
+from pathlib import Path
+from typing import Optional
+
+
+def get_remote_repo() -> Optional[str]:
+    """从 git remote 解析 owner/name。"""
+    result = subprocess.run(
+        ["git", "remote", "get-url", "origin"],
+        capture_output=True,
+        text=True,
+    )
+    if result.returncode != 0:
+        return None
+    url = result.stdout.strip()
+    m = re.search(r"github\.com[/:]([^/]+/[^/]+?)(?:\.git)?$", url)
+    if m:
+        return m.group(1)
+    return None
+
+
+def precheck(version: str, changelog: Path, release_only: bool = False) -> list[str]:
+    errors = []
+
+    if not re.match(
+        r"^(v[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?|[a-zA-Z0-9_.-]+/v[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?)$",
+        version,
+    ):
+        errors.append(f"版本号格式错误: {version}")
+
+    if changelog.exists():
+        content = changelog.read_text(encoding="utf-8")
+        ver = version.split("/v", 1)[1] if "/v" in version else version.lstrip("v")
+        if f"## [{ver}]" not in content:
+            errors.append(f"CHANGELOG.md 未找到 {ver} 版本记录")
+    else:
+        errors.append(f"CHANGELOG.md 不存在: {changelog}")
+
+    if release_only:
+        result = subprocess.run(
+            ["git", "tag", "-l"],
+            capture_output=True,
+            text=True,
+        )
+        existing_tags = result.stdout.strip().split("\n")
+        if version not in existing_tags:
+            errors.append(f"标签不存在: {version}（--release-only 需要标签已存在）")
+
+    result = subprocess.run(
+        ["git", "status", "--porcelain"],
+        capture_output=True,
+        text=True,
+    )
+    if result.stdout.strip():
+        errors.append("工作区有未提交的变更")
+
+    result = subprocess.run(
+        ["git", "rev-parse", "--abbrev-ref", "HEAD"],
+        capture_output=True,
+        text=True,
+    )
+    branch = result.stdout.strip()
+    if not branch.startswith(("main", "master", "release/")):
+        errors.append(
+            f"不在可发布分支上 (当前: {branch})，请切换到 main/master/release/*"
+        )
+
+    return errors
+
+
+def extract_notes(version: str, changelog: Path) -> Optional[str]:
+    ver = version.split("/v", 1)[1] if "/v" in version else version.lstrip("v")
+    content = changelog.read_text(encoding="utf-8")
+    lines = content.split("\n")
+    capture = False
+    notes: list[str] = []
+    for line in lines:
+        if line.startswith(f"## [{ver}]"):
+            capture = True
+            continue
+        if capture:
+            if line.startswith("## ["):
+                break
+            notes.append(line)
+    text = "\n".join(notes).strip()
+    return text if text else None
+
+
+def confirm_release(version: str, notes: Optional[str], yes: bool = False) -> bool:
+    """🧠 AI 介入点：展示检查摘要并等待用户确认"""
+    print(f"\n发布版本: {version}")
+    print()
+    print("检查结果:")
+    print("  ✓ 预检查全部通过")
+    print()
+    print("Release Notes 预览:")
+    print(notes or "(空)")
+    print()
+
+    if yes:
+        return True
+
+    try:
+        response = input("确认发布? (y/N): ").strip().lower()
+        return response in ("y", "yes")
+    except (EOFError, KeyboardInterrupt):
+        return False
+
+
+def create_tag(version: str) -> bool:
+    result = subprocess.run(
+        ["git", "tag", version],
+        capture_output=True,
+        text=True,
+    )
+    if result.returncode != 0:
+        print(f"创建标签失败: {result.stderr.strip()}")
+        return False
+    return True
+
+
+def push_tag(version: str) -> bool:
+    result = subprocess.run(
+        ["git", "push", "origin", version],
+        capture_output=True,
+        text=True,
+    )
+    if result.returncode != 0:
+        print(f"推送标签失败: {result.stderr.strip()}")
+        return False
+    return True
+
+
+def create_release(version: str, notes: str, repo: str) -> bool:
+    result = subprocess.run(
+        [
+            "gh",
+            "release",
+            "create",
+            version,
+            "--title",
+            version,
+            "--notes",
+            notes,
+            "--repo",
+            repo,
+        ],
+        capture_output=True,
+        text=True,
+    )
+    if result.returncode != 0:
+        print(f"创建 Release 失败: {result.stderr.strip()}")
+        return False
+    return True
+
+
+def verify_release(version: str, repo: str) -> bool:
+    """🤖 规则：发布后验证"""
+    result = subprocess.run(
+        ["gh", "release", "view", version, "--repo", repo],
+        capture_output=True,
+        text=True,
+    )
+    if result.returncode != 0:
+        print(f"⚠ 验证 Release 失败: {result.stderr.strip()}")
+        return False
+    print(result.stdout.strip())
+    return True
+
+
+def rollback_tag(version: str) -> None:
+    """🧠 AI 介入点：标签已推送但后续失败时回滚"""
+    subprocess.run(["git", "tag", "-d", version], capture_output=True)
+    subprocess.run(
+        ["git", "push", "origin", "--delete", version],
+        capture_output=True,
+        text=True,
+    )
+    print(f"↻ 标签 {version} 已回滚")
+
+
+def run(
+    version: str,
+    changelog: Optional[Path] = None,
+    dry_run: bool = False,
+    tag_only: bool = False,
+    release_only: bool = False,
+    yes: bool = False,
+):
+    changelog = changelog or Path.cwd() / "CHANGELOG.md"
+
+    if tag_only and release_only:
+        print("错误: --tag-only 和 --release-only 不能同时使用")
+        return 1
+
+    # --- 预检查 ---
+    errors = precheck(version, changelog, release_only=release_only)
+    if errors:
+        print("预检查失败:")
+        for err in errors:
+            print(f"  ✗ {err}")
+        return 1
+
+    notes = extract_notes(version, changelog)
+    print(f"\n=== Release Notes 预览 ===")
+    print(notes or "(空)")
+    print("=========================\n")
+
+    if dry_run:
+        print("✓ 预检查通过 (dry-run 模式，不执行)")
+        return 0
+
+    # --- 发布前确认 ---
+    if not confirm_release(version, notes, yes=yes):
+        print("已取消发布")
+        return 0
+
+    # --- 执行发布 ---
+    tag_created = False
+
+    if not release_only:
+        result = subprocess.run(
+            ["git", "tag", "-l"],
+            capture_output=True, text=True,
+        )
+        tag_exists = version in result.stdout.strip().split("\n")
+        if tag_exists:
+            print(f"→ 标签 {version} 已存在，跳过 tag 创建")
+        else:
+            if not create_tag(version):
+                return 1
+            if not push_tag(version):
+                rollback_tag(version)
+                return 1
+            tag_created = True
+            print(f"✓ 标签 {version} 已创建并推送")
+
+    if not tag_only:
+        repo = get_remote_repo()
+        if not repo:
+            print("错误: 无法从 git remote 解析 GitHub 仓库")
+            if tag_created:
+                rollback_tag(version)
+            return 1
+        if not create_release(version, notes or "", repo):
+            if tag_created:
+                rollback_tag(version)
+            return 1
+        print(f"✓ GitHub Release {version} 已创建")
+        print(f"  https://github.com/{repo}/releases/tag/{version}")
+
+    return 0

qtcloud_devops_cli-0.1.0/pyproject.toml

@@ -0,0 +1,26 @@
+[build-system]
+requires = ["setuptools>=64"]
+build-backend = "setuptools.build_meta"
+
+[tool.setuptools.packages.find]
+include = ["app*"]
+exclude = ["tests*"]
+
+[project]
+name = "qtcloud-devops-cli"
+version = "0.1.0"
+description = "DevOps CLI — 发布管理"
+requires-python = ">=3.12"
+dependencies = [
+    "typer",
+    "pydantic-settings",
+]
+
+[project.scripts]
+qtcloud-devops = "app.cli:main"
+
+[dependency-groups]
+dev = [
+    "pytest>=9.0.3",
+    "pytest-cov>=7.1.0",
+]

qtcloud_devops_cli-0.1.0/qtcloud_devops_cli.egg-info/PKG-INFO

@@ -0,0 +1,7 @@
+Metadata-Version: 2.4
+Name: qtcloud-devops-cli
+Version: 0.1.0
+Summary: DevOps CLI — 发布管理
+Requires-Python: >=3.12
+Requires-Dist: typer
+Requires-Dist: pydantic-settings

qtcloud_devops_cli-0.1.0/qtcloud_devops_cli.egg-info/SOURCES.txt

@@ -0,0 +1,15 @@
+README.md
+pyproject.toml
+app/__init__.py
+app/cli.py
+app/config.py
+app/release.py
+qtcloud_devops_cli.egg-info/PKG-INFO
+qtcloud_devops_cli.egg-info/SOURCES.txt
+qtcloud_devops_cli.egg-info/dependency_links.txt
+qtcloud_devops_cli.egg-info/entry_points.txt
+qtcloud_devops_cli.egg-info/requires.txt
+qtcloud_devops_cli.egg-info/top_level.txt
+tests/test_cli_commands.py
+tests/test_config.py
+tests/test_release.py

qtcloud_devops_cli-0.1.0/qtcloud_devops_cli.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

qtcloud_devops_cli-0.1.0/qtcloud_devops_cli.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+qtcloud-devops = app.cli:main

qtcloud_devops_cli-0.1.0/qtcloud_devops_cli.egg-info/requires.txt

@@ -0,0 +1,2 @@
+typer
+pydantic-settings

qtcloud_devops_cli-0.1.0/qtcloud_devops_cli.egg-info/top_level.txt

@@ -0,0 +1 @@
+app

qtcloud_devops_cli-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

qtcloud_devops_cli-0.1.0/tests/test_cli_commands.py

@@ -0,0 +1,62 @@
+from pathlib import Path
+from unittest.mock import MagicMock
+from typer.testing import CliRunner
+from app.cli import app
+
+runner = CliRunner()
+
+
+def test_help():
+    result = runner.invoke(app, ["--help"])
+    assert result.exit_code == 0
+    assert "release" in result.stdout
+
+
+def test_release_help():
+    result = runner.invoke(app, ["release", "--help"])
+    assert result.exit_code == 0
+    assert "--version" in result.stdout
+
+
+def test_release_invalid_version():
+    result = runner.invoke(app, ["release", "--version", "invalid"])
+    assert result.exit_code != 0
+
+
+def test_release_dry_run(monkeypatch):
+    changelog = Path("/tmp/test_release_dry_run_CHANGELOG.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+
+    def mock_run(cmd, **kw):
+        if cmd == ["git", "rev-parse", "--abbrev-ref", "HEAD"]:
+            return MagicMock(returncode=0, stdout="main\n")
+        return MagicMock(returncode=0, stdout="")
+    monkeypatch.setattr("app.release.subprocess.run", mock_run)
+    result = runner.invoke(app, [
+        "release", "--version", "v0.1.0",
+        "--changelog", str(changelog), "--dry-run",
+    ])
+    assert result.exit_code == 0
+    changelog.unlink()
+
+
+def test_main_help(monkeypatch):
+    from app.cli import main
+    monkeypatch.setattr("sys.argv", ["app.cli", "--help"])
+    try:
+        main()
+    except SystemExit as e:
+        assert e.code == 0
+
+
+def test_main_module_entry():
+    import subprocess
+    import sys
+    root = Path(__file__).resolve().parent.parent
+    result = subprocess.run(
+        [sys.executable, "-m", "app.cli", "--help"],
+        capture_output=True, text=True,
+        cwd=str(root),
+    )
+    assert result.returncode == 0
+    assert "release" in result.stdout

qtcloud_devops_cli-0.1.0/tests/test_config.py

@@ -0,0 +1,12 @@
+from pydantic_settings import BaseSettings
+from app.config import Settings, settings
+
+
+def test_settings_is_basemodel():
+    assert isinstance(settings, BaseSettings)
+
+
+def test_settings_env_prefix(monkeypatch):
+    monkeypatch.setenv("QTCLOUD_DEVOPS_FOO", "bar")
+    s = Settings()
+    assert hasattr(s, "model_config")

qtcloud_devops_cli-0.1.0/tests/test_release.py

@@ -0,0 +1,446 @@
+from pathlib import Path
+from unittest.mock import MagicMock
+
+from app.release import (
+    precheck, extract_notes, confirm_release,
+    create_tag, push_tag, create_release, verify_release,
+    rollback_tag, run, get_remote_repo,
+)
+
+
+def mock_subprocess(commands, default=None):
+    if default is None:
+        default = MagicMock(returncode=0, stdout="")
+    def _mock(cmd, **kw):
+        key = tuple(cmd)
+        if key in commands:
+            return commands[key]
+        return default
+    return _mock
+
+
+def git_precheck_ok():
+    return mock_subprocess({
+        ("git", "tag", "-l"): MagicMock(stdout=""),
+        ("git", "status", "--porcelain"): MagicMock(stdout=""),
+        ("git", "rev-parse", "--abbrev-ref", "HEAD"): MagicMock(stdout="main\n"),
+    })
+
+
+def test_precheck_invalid_version():
+    errors = precheck("invalid", Path("CHANGELOG.md"))
+    assert any("版本号格式错误" in e for e in errors)
+
+
+def test_precheck_changelog_not_found():
+    errors = precheck("v0.1.0", Path("/nonexistent/CHANGELOG.md"))
+    assert any("不存在" in e for e in errors)
+
+
+def test_precheck_default_does_not_check_tag_exists(monkeypatch):
+    """默认模式不检查标签是否存在"""
+    monkeypatch.setattr("app.release.subprocess.run", mock_subprocess({
+        ("git", "status", "--porcelain"): MagicMock(stdout=""),
+        ("git", "rev-parse", "--abbrev-ref", "HEAD"): MagicMock(stdout="main\n"),
+    }, default=MagicMock(returncode=0, stdout="")))
+    errors = precheck("v0.1.0", Path("/tmp/CHANGELOG.md"))
+    assert all("标签" not in e for e in errors)
+
+
+def test_precheck_dirty_workspace(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", mock_subprocess({
+        ("git", "tag", "-l"): MagicMock(stdout=""),
+        ("git", "status", "--porcelain"): MagicMock(stdout=" M CHANGELOG.md\n"),
+        ("git", "rev-parse", "--abbrev-ref", "HEAD"): MagicMock(stdout="main\n"),
+    }))
+    errors = precheck("v0.2.0", Path("/tmp/CHANGELOG.md"))
+    assert any("工作区有未提交的变更" in e for e in errors)
+
+
+def test_precheck_wrong_branch(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", mock_subprocess({
+        ("git", "tag", "-l"): MagicMock(stdout=""),
+        ("git", "status", "--porcelain"): MagicMock(stdout=""),
+        ("git", "rev-parse", "--abbrev-ref", "HEAD"): MagicMock(stdout="feature/foo\n"),
+    }))
+    errors = precheck("v0.2.0", Path("/tmp/CHANGELOG.md"))
+    assert any("不在可发布分支上" in e for e in errors)
+
+
+def test_precheck_no_changelog_content(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", git_precheck_ok())
+    changelog = Path("/tmp/test_precheck_no_content.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.2.0]\n\n内容\n")
+    errors = precheck("v9.9.9", changelog)
+    assert any("未找到" in e for e in errors)
+    changelog.unlink()
+
+
+def test_precheck_all_pass(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", git_precheck_ok())
+    changelog = Path("/tmp/test_precheck_pass.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.2.0]\n\n内容\n")
+    errors = precheck("v0.2.0", changelog)
+    assert len(errors) == 0
+    changelog.unlink()
+
+
+def test_extract_notes():
+    changelog = Path("/tmp/test_changelog.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0] - 2026-01-01\n\n初始版本。\n\n### Added\n\n- 功能 A\n- 功能 B\n")
+    notes = extract_notes("v0.1.0", changelog)
+    assert "功能 A" in notes
+    assert "功能 B" in notes
+    changelog.unlink()
+
+
+def test_extract_notes_multiple_sections():
+    changelog = Path("/tmp/test_changelog_multi.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.2.0] - 2026-02-01\n\n版本 0.2.0 内容。\n\n## [0.1.0] - 2026-01-01\n\n初始版本。\n\n### Added\n\n- 功能 A\n")
+    notes = extract_notes("v0.2.0", changelog)
+    assert "版本 0.2.0" in notes
+    assert "功能 A" not in notes
+    changelog.unlink()
+
+
+def test_extract_notes_not_found():
+    changelog = Path("/tmp/test_changelog_empty.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.2.0]\n\n其他版本\n")
+    notes = extract_notes("v9.9.9", changelog)
+    assert notes is None
+    changelog.unlink()
+
+
+def test_confirm_release_yes_flag():
+    assert confirm_release("v0.1.0", "some notes", yes=True) is True
+
+
+def test_confirm_release_no_input(monkeypatch):
+    monkeypatch.setattr("builtins.input", lambda _: "n")
+    assert confirm_release("v0.1.0", "some notes") is False
+
+
+def test_confirm_release_yes_input(monkeypatch):
+    monkeypatch.setattr("builtins.input", lambda _: "y")
+    assert confirm_release("v0.1.0", "some notes") is True
+
+
+def test_confirm_release_eof(monkeypatch):
+    monkeypatch.setattr("builtins.input", lambda _: (_ for _ in ()).throw(EOFError()))
+    assert confirm_release("v0.1.0", "some notes") is False
+
+
+def test_confirm_release_keyboard_interrupt(monkeypatch):
+    monkeypatch.setattr("builtins.input", lambda _: (_ for _ in ()).throw(KeyboardInterrupt()))
+    assert confirm_release("v0.1.0", "some notes") is False
+
+
+def test_create_tag_success(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: MagicMock(returncode=0))
+    assert create_tag("v0.1.0") is True
+
+
+def test_create_tag_failure(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: MagicMock(returncode=1, stderr="错误"))
+    assert create_tag("v0.1.0") is False
+
+
+def test_push_tag_success(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: MagicMock(returncode=0))
+    assert push_tag("v0.1.0") is True
+
+
+def test_push_tag_failure(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: MagicMock(returncode=1, stderr="错误"))
+    assert push_tag("v0.1.0") is False
+
+
+def test_create_release_success(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: MagicMock(returncode=0))
+    assert create_release("v0.1.0", "notes", "quanttide/repo") is True
+
+
+def test_create_release_failure(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: MagicMock(returncode=1, stderr="错误"))
+    assert create_release("v0.1.0", "notes", "quanttide/repo") is False
+
+
+def test_verify_release_success(monkeypatch):
+    mock = MagicMock(returncode=0, stdout="Release v0.1.0\nURL: ...")
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: mock)
+    assert verify_release("v0.1.0", "quanttide/repo") is True
+
+
+def test_verify_release_failure(monkeypatch):
+    mock = MagicMock(returncode=1, stderr="not found")
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: mock)
+    assert verify_release("v0.1.0", "quanttide/repo") is False
+
+
+def test_rollback_tag(monkeypatch):
+    calls = []
+    monkeypatch.setattr(
+        "app.release.subprocess.run",
+        lambda cmd, **kw: calls.append(cmd) or MagicMock(stdout=""),
+    )
+    rollback_tag("v0.1.0")
+    assert calls[0] == ["git", "tag", "-d", "v0.1.0"]
+    assert calls[1] == ["git", "push", "origin", "--delete", "v0.1.0"]
+
+
+def test_get_remote_repo_ssh(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: MagicMock(
+        returncode=0, stdout="git@github.com:quanttide/quanttide-platform.git\n"
+    ))
+    assert get_remote_repo() == "quanttide/quanttide-platform"
+
+
+def test_get_remote_repo_https(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: MagicMock(
+        returncode=0, stdout="https://github.com/quanttide/quanttide-platform\n"
+    ))
+    assert get_remote_repo() == "quanttide/quanttide-platform"
+
+
+def test_get_remote_repo_failure(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: MagicMock(returncode=1, stderr=""))
+    assert get_remote_repo() is None
+
+
+def test_run_dry_run(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", git_precheck_ok())
+    changelog = Path("/tmp/test_run_dry.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+    assert run("v0.1.0", changelog, dry_run=True) == 0
+    changelog.unlink()
+
+
+def test_run_dry_run_with_errors():
+    assert run("invalid", Path("/nonexistent"), dry_run=True) == 1
+
+
+def test_run_cancelled(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", git_precheck_ok())
+    monkeypatch.setattr("builtins.input", lambda _: "n")
+    changelog = Path("/tmp/test_run_cancel.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+    assert run("v0.1.0", changelog) == 0
+    changelog.unlink()
+
+
+def test_run_create_tag_failure(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", mock_subprocess({
+        ("git", "tag", "-l"): MagicMock(stdout=""),
+        ("git", "tag", "v0.1.0"): MagicMock(returncode=1, stderr="错误"),
+        ("git", "rev-parse", "--abbrev-ref", "HEAD"): MagicMock(returncode=0, stdout="main\n"),
+    }, default=MagicMock(returncode=0, stdout="")))
+    changelog = Path("/tmp/test_run_tag_fail.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+    assert run("v0.1.0", changelog, yes=True) == 1
+    changelog.unlink()
+
+
+def test_run_push_tag_failure_triggers_rollback(monkeypatch):
+    calls = []
+    def recorder(cmd, **kw):
+        calls.append(cmd)
+        if cmd == ["git", "tag", "-l"]:
+            return MagicMock(returncode=0, stdout="")
+        if cmd == ["git", "push", "origin", "v0.1.0"]:
+            return MagicMock(returncode=1, stderr="错误")
+        if cmd == ["git", "rev-parse", "--abbrev-ref", "HEAD"]:
+            return MagicMock(returncode=0, stdout="main\n")
+        return MagicMock(returncode=0, stdout="")
+
+    monkeypatch.setattr("app.release.subprocess.run", recorder)
+    changelog = Path("/tmp/test_run_push_fail.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+    assert run("v0.1.0", changelog, yes=True) == 1
+    assert ["git", "tag", "-d", "v0.1.0"] in calls
+    assert ["git", "push", "origin", "--delete", "v0.1.0"] in calls
+    changelog.unlink()
+
+
+def test_run_tag_only_explicit(monkeypatch):
+    """--tag-only 显式声明，只打标签不发 release"""
+    changelog = Path("/tmp/test_run_tag_only_explicit.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+
+    calls = []
+    def recorder(cmd, **kw):
+        calls.append(cmd)
+        if cmd == ["git", "tag", "-l"]:
+            return MagicMock(returncode=0, stdout="")
+        if cmd == ["git", "rev-parse", "--abbrev-ref", "HEAD"]:
+            return MagicMock(returncode=0, stdout="main\n")
+        return MagicMock(returncode=0, stdout="")
+
+    monkeypatch.setattr("app.release.subprocess.run", recorder)
+    assert run("v0.1.0", changelog, tag_only=True, yes=True) == 0
+    assert ["git", "tag", "v0.1.0"] in calls
+    assert not any("create" in c for c in calls)
+    changelog.unlink()
+
+
+def test_run_tag_and_release_only_mutually_exclusive():
+    assert run("v0.1.0", Path("/tmp"), tag_only=True, release_only=True) == 1
+
+
+def test_run_default_creates_tag_and_release(monkeypatch):
+    """默认行为：标签 + GitHub Release"""
+    changelog = Path("/tmp/test_run_default.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+
+    calls = []
+    def recorder(cmd, **kw):
+        calls.append(cmd)
+        if cmd == ["git", "tag", "-l"]:
+            return MagicMock(returncode=0, stdout="")
+        if cmd == ["git", "rev-parse", "--abbrev-ref", "HEAD"]:
+            return MagicMock(returncode=0, stdout="main\n")
+        if cmd == ["git", "remote", "get-url", "origin"]:
+            return MagicMock(returncode=0, stdout="git@github.com:quanttide/repo.git\n")
+        if "view" in str(cmd):
+            return MagicMock(returncode=0, stdout="Release v0.1.0\n")
+        return MagicMock(returncode=0, stdout="")
+
+    monkeypatch.setattr("app.release.subprocess.run", recorder)
+    assert run("v0.1.0", changelog, yes=True) == 0
+    assert ["git", "tag", "v0.1.0"] in calls
+    assert any("create" in c for c in calls)
+    changelog.unlink()
+
+
+def test_run_default_skips_tag_if_exists(monkeypatch):
+    """默认模式：标签已存在时跳过 tag 创建，继续发 release"""
+    changelog = Path("/tmp/test_run_default_tag_exists.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+
+    calls = []
+    def recorder(cmd, **kw):
+        calls.append(cmd)
+        if cmd == ["git", "tag", "-l"]:
+            return MagicMock(returncode=0, stdout="v0.1.0\n")
+        if cmd == ["git", "rev-parse", "--abbrev-ref", "HEAD"]:
+            return MagicMock(returncode=0, stdout="main\n")
+        if cmd == ["git", "remote", "get-url", "origin"]:
+            return MagicMock(returncode=0, stdout="git@github.com:quanttide/repo.git\n")
+        if "view" in str(cmd):
+            return MagicMock(returncode=0, stdout="Release v0.1.0\n")
+        return MagicMock(returncode=0, stdout="")
+
+    monkeypatch.setattr("app.release.subprocess.run", recorder)
+    assert run("v0.1.0", changelog, yes=True) == 0
+    assert ["git", "tag", "v0.1.0"] not in calls
+    assert any("create" in c for c in calls)
+    changelog.unlink()
+
+
+def test_run_release_only(monkeypatch):
+    """--release-only 只创建 GitHub Release，不打标签"""
+    changelog = Path("/tmp/test_run_release_only.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+
+    calls = []
+    def recorder(cmd, **kw):
+        calls.append(cmd)
+        if cmd == ["git", "tag", "-l"]:
+            return MagicMock(returncode=0, stdout="v0.1.0\n")
+        if cmd == ["git", "rev-parse", "--abbrev-ref", "HEAD"]:
+            return MagicMock(returncode=0, stdout="main\n")
+        if cmd == ["git", "remote", "get-url", "origin"]:
+            return MagicMock(returncode=0, stdout="git@github.com:quanttide/repo.git\n")
+        if "view" in str(cmd):
+            return MagicMock(returncode=0, stdout="Release v0.1.0\nURL: ...")
+        return MagicMock(returncode=0, stdout="")
+
+    monkeypatch.setattr("app.release.subprocess.run", recorder)
+    assert run("v0.1.0", changelog, release_only=True, yes=True) == 0
+    assert not any(cmd == ["git", "tag", "v0.1.0"] for cmd in calls)
+    assert any("create" in c for c in calls)
+    changelog.unlink()
+
+
+def test_run_release_only_fails_without_remote(monkeypatch):
+    """--release-only 无法解析 remote 时报错"""
+    changelog = Path("/tmp/test_run_rel_no_remote.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+
+    monkeypatch.setattr("app.release.subprocess.run", mock_subprocess({
+        ("git", "rev-parse", "--abbrev-ref", "HEAD"): MagicMock(returncode=0, stdout="main\n"),
+        ("git", "remote", "get-url", "origin"): MagicMock(returncode=1, stderr=""),
+    }, default=MagicMock(returncode=0, stdout="")))
+
+    assert run("v0.1.0", changelog, release_only=True, yes=True) == 1
+    changelog.unlink()
+
+
+def test_run_release_only_requires_existing_tag(monkeypatch):
+    """--release-only 要求标签已存在（预检查通过）"""
+    changelog = Path("/tmp/test_run_release_only_tag_exists.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+
+    calls = []
+    def recorder(cmd, **kw):
+        calls.append(cmd)
+        if cmd == ["git", "tag", "-l"]:
+            return MagicMock(returncode=0, stdout="v0.1.0\n")
+        if cmd == ["git", "rev-parse", "--abbrev-ref", "HEAD"]:
+            return MagicMock(returncode=0, stdout="main\n")
+        if cmd == ["git", "remote", "get-url", "origin"]:
+            return MagicMock(returncode=0, stdout="git@github.com:quanttide/repo.git\n")
+        if "view" in str(cmd):
+            return MagicMock(returncode=0, stdout="Release v0.1.0\n")
+        return MagicMock(returncode=0, stdout="")
+
+    monkeypatch.setattr("app.release.subprocess.run", recorder)
+    assert run("v0.1.0", changelog, release_only=True, yes=True) == 0
+    changelog.unlink()
+
+
+def test_run_release_only_fails_if_tag_missing(monkeypatch):
+    """--release-only 标签不存在时预检查拒绝"""
+    changelog = Path("/tmp/test_run_release_only_tag_missing.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+
+    monkeypatch.setattr("app.release.subprocess.run", mock_subprocess({
+        ("git", "tag", "-l"): MagicMock(stdout="v0.2.0\n"),
+        ("git", "status", "--porcelain"): MagicMock(stdout=""),
+        ("git", "rev-parse", "--abbrev-ref", "HEAD"): MagicMock(stdout="main\n"),
+    }, default=MagicMock(returncode=0, stdout="")))
+
+    assert run("v0.1.0", changelog, release_only=True, yes=True) == 1
+    changelog.unlink()
+
+
+def test_precheck_release_only_requires_tag(monkeypatch):
+    """--release-only 时要求标签已存在"""
+    monkeypatch.setattr("app.release.subprocess.run", mock_subprocess({
+        ("git", "tag", "-l"): MagicMock(stdout="v0.1.0\n"),
+        ("git", "status", "--porcelain"): MagicMock(stdout=""),
+        ("git", "rev-parse", "--abbrev-ref", "HEAD"): MagicMock(stdout="main\n"),
+    }))
+    changelog = Path("/tmp/test_precheck_release_only_tag_ok.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+    errors = precheck("v0.1.0", changelog, release_only=True)
+    assert len(errors) == 0
+    changelog.unlink()
+
+
+def test_precheck_release_only_fails_if_tag_missing(monkeypatch):
+    """--release-only 时标签不存在应报错"""
+    monkeypatch.setattr("app.release.subprocess.run", mock_subprocess({
+        ("git", "tag", "-l"): MagicMock(stdout="v0.2.0\n"),
+        ("git", "status", "--porcelain"): MagicMock(stdout=""),
+        ("git", "rev-parse", "--abbrev-ref", "HEAD"): MagicMock(stdout="main\n"),
+    }))
+    changelog = Path("/tmp/test_precheck_release_only_tag_missing.md")
+    changelog.write_text("# CHANGELOG\n\n## [0.1.0]\n\n内容\n")
+    errors = precheck("v0.1.0", changelog, release_only=True)
+    assert any("标签不存在" in e for e in errors)
+    changelog.unlink()
+
+
+def test_run_uses_default_changelog(monkeypatch):
+    monkeypatch.setattr("app.release.subprocess.run", lambda *a, **kw: MagicMock(returncode=0, stdout="main\n"))
+    assert run("v0.1.0", dry_run=True) == 1