sci-agent 0.2.0__tar.gz

sci_agent-0.2.0/PKG-INFO

@@ -0,0 +1,11 @@
+Metadata-Version: 2.4
+Name: sci-agent
+Version: 0.2.0
+Summary: Agent-first lightweight CI/CD tool
+Requires-Python: >=3.12
+Requires-Dist: fastapi>=0.110.0
+Requires-Dist: uvicorn>=0.29.0
+Requires-Dist: httpx>=0.27.0
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: jinja2>=3.1.0
+Requires-Dist: python-dotenv>=1.0.0

sci_agent-0.2.0/README.md

@@ -0,0 +1,129 @@
+# sci-agent
+
+sci-agent (`sci-agent`) is an agent-first lightweight CI/CD tool. It can run pipelines from the command line, expose a protected target execution server, and provide a local Web UI for browsing configuration and run history.
+
+## Quick start
+
+Open the local Web UI from a workspace that contains `sci/`:
+
+```powershell
+uvx --from sci-agent sci-agent
+```
+
+Run the example `ai-threat` release pipeline on target `10-50-10-18`:
+
+```powershell
+uvx --from sci-agent sci-agent run --env 10-50-10-18 --project ai-threat --pipeline server-openapi --yes
+```
+
+Start a target execution server:
+
+```powershell
+uvx --from sci-agent sci-agent server --port 9090 --token xxx
+```
+
+For production-like usage, prefer `SCI_AGENT_TOKEN` over passing the token on the command line.
+
+## Configuration layout
+
+A workspace is configured with a `sci/` directory and an optional root `.env` file:
+
+```text
+.
+├── .env
+├── .sci-agent/
+│   └── history.jsonl
+└── sci/
+    ├── config.toml
+    ├── targets/
+    │   └── 10-50-10-18.toml
+    └── projects/
+        └── ai-threat/
+            ├── config.toml
+            └── pipeline/
+                └── server-openapi/
+                    ├── config.toml
+                    └── pipeline.yml
+```
+
+IDs are derived from paths:
+
+- Target ID: `sci/targets/10-50-10-18.toml` -> `10-50-10-18`.
+- Project ID: `sci/projects/ai-threat/` -> `ai-threat`.
+- Pipeline ID: `sci/projects/ai-threat/pipeline/server-openapi/` -> `server-openapi`.
+
+## Git credential model
+
+Git credentials are split between non-secret configuration and secret environment values.
+
+`sci/config.toml` defines credential IDs and which environment variables contain the secret values:
+
+```toml
+[credentials.gitlab-ai-threat]
+type = "git_http_basic"
+username_env = "GITLAB_AI_THREAT_USERNAME"
+password_env = "GITLAB_AI_THREAT_PASSWORD"
+```
+
+The root `.env` file stores the actual username and password:
+
+```dotenv
+GITLAB_AI_THREAT_USERNAME=your-user
+GITLAB_AI_THREAT_PASSWORD=your-password-or-token
+SERVER_10_50_10_18_URL=http://10.50.10.18:9090
+SERVER_10_50_10_18_TOKEN=xxx
+```
+
+The project config references the credential ID, not the secret values:
+
+```toml
+[source]
+repo = "https://gitlab.example.com/ai-threat/ai-threat.git"
+branch = "release"
+credential = "gitlab-ai-threat"
+```
+
+## Running pipelines
+
+Inspect the resolved plan without executing it:
+
+```powershell
+uvx --from sci-agent sci-agent run --env 10-50-10-18 --project ai-threat --pipeline server-openapi --dry-run
+```
+
+Execute without interactive confirmation:
+
+```powershell
+uvx --from sci-agent sci-agent run --env 10-50-10-18 --project ai-threat --pipeline server-openapi --yes
+```
+
+View local run status and logs:
+
+```powershell
+uvx --from sci-agent sci-agent run --status
+uvx --from sci-agent sci-agent run --status run-xxxxxxxxxxxx
+uvx --from sci-agent sci-agent run --logs run-xxxxxxxxxxxx
+```
+
+Dry-run output, confirmation summaries, logs, Web UI responses, and history records are sanitized before display or persistence. Tokens, passwords, credentials, and known secret values are redacted.
+
+## Web UI, history, and streaming
+
+- `uvx --from sci-agent sci-agent` starts a local Web UI for browsing targets, projects, pipelines, and `.sci-agent/history.jsonl`.
+- Web UI APIs return sanitized configuration and sanitized history only.
+- Agents use polling when waiting for target server runs, which keeps CLI behavior simple and resilient.
+- The Web UI can use Server-Sent Events (SSE) for run detail updates via the local UI streaming endpoint.
+
+## Publishing
+
+Copy `.env.publish.example` to `.env.publish`, fill in `UV_PUBLISH_TOKEN`, then run:
+
+```powershell
+.\scripts\publish.ps1
+```
+
+Build only without requiring a publish token:
+
+```powershell
+.\scripts\publish.ps1 -BuildOnly
+```

sci_agent-0.2.0/pyproject.toml

@@ -0,0 +1,33 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "sci-agent"
+version = "0.2.0"
+description = "Agent-first lightweight CI/CD tool"
+requires-python = ">=3.12"
+dependencies = [
+  "fastapi>=0.110.0",
+  "uvicorn>=0.29.0",
+  "httpx>=0.27.0",
+  "pyyaml>=6.0",
+  "jinja2>=3.1.0",
+  "python-dotenv>=1.0.0",
+]
+
+[dependency-groups]
+dev = [
+  "pytest>=8.0.0",
+  "pytest-asyncio>=0.23.0",
+]
+
+[project.scripts]
+sci-agent = "simple_ci.__main__:main"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+include = ["simple_ci*"]
+
+[tool.setuptools.package-data]
+simple_ci = ["ui/static/*.html", "ui/static/*.js", "ui/static/*.css"]

sci_agent-0.2.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

sci_agent-0.2.0/src/sci_agent.egg-info/PKG-INFO

@@ -0,0 +1,11 @@
+Metadata-Version: 2.4
+Name: sci-agent
+Version: 0.2.0
+Summary: Agent-first lightweight CI/CD tool
+Requires-Python: >=3.12
+Requires-Dist: fastapi>=0.110.0
+Requires-Dist: uvicorn>=0.29.0
+Requires-Dist: httpx>=0.27.0
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: jinja2>=3.1.0
+Requires-Dist: python-dotenv>=1.0.0

sci_agent-0.2.0/src/sci_agent.egg-info/SOURCES.txt

@@ -0,0 +1,44 @@
+README.md
+pyproject.toml
+src/sci_agent.egg-info/PKG-INFO
+src/sci_agent.egg-info/SOURCES.txt
+src/sci_agent.egg-info/dependency_links.txt
+src/sci_agent.egg-info/entry_points.txt
+src/sci_agent.egg-info/requires.txt
+src/sci_agent.egg-info/top_level.txt
+src/simple_ci/__init__.py
+src/simple_ci/__main__.py
+src/simple_ci/errors.py
+src/simple_ci/models.py
+src/simple_ci/actions/__init__.py
+src/simple_ci/actions/base.py
+src/simple_ci/actions/build.py
+src/simple_ci/actions/deploy.py
+src/simple_ci/actions/hooks.py
+src/simple_ci/actions/image.py
+src/simple_ci/actions/source.py
+src/simple_ci/actions/target.py
+src/simple_ci/cli/__init__.py
+src/simple_ci/cli/client.py
+src/simple_ci/cli/config.py
+src/simple_ci/cli/history.py
+src/simple_ci/cli/main.py
+src/simple_ci/cli/render.py
+src/simple_ci/server/__init__.py
+src/simple_ci/server/app.py
+src/simple_ci/server/auth.py
+src/simple_ci/server/executor.py
+src/simple_ci/server/main.py
+src/simple_ci/server/store.py
+src/simple_ci/ui/__init__.py
+src/simple_ci/ui/server.py
+src/simple_ci/ui/static/index.html
+tests/test_actions_commands.py
+tests/test_cli.py
+tests/test_config_loader.py
+tests/test_executor.py
+tests/test_history.py
+tests/test_hooks.py
+tests/test_render.py
+tests/test_server_api.py
+tests/test_version.py

sci_agent-0.2.0/src/sci_agent.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

sci_agent-0.2.0/src/sci_agent.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+sci-agent = simple_ci.__main__:main

sci_agent-0.2.0/src/sci_agent.egg-info/requires.txt

@@ -0,0 +1,6 @@
+fastapi>=0.110.0
+uvicorn>=0.29.0
+httpx>=0.27.0
+pyyaml>=6.0
+jinja2>=3.1.0
+python-dotenv>=1.0.0

sci_agent-0.2.0/src/sci_agent.egg-info/top_level.txt

@@ -0,0 +1 @@
+simple_ci

sci_agent-0.2.0/src/simple_ci/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.2.0"

sci_agent-0.2.0/src/simple_ci/__main__.py

@@ -0,0 +1,42 @@
+from __future__ import annotations
+
+import ctypes
+import sys
+
+
+def _configure_stdio_encoding() -> None:
+    if sys.platform == "win32":
+        try:
+            kernel32 = ctypes.windll.kernel32
+            kernel32.SetConsoleOutputCP(65001)
+            kernel32.SetConsoleCP(65001)
+        except Exception:
+            pass
+
+    for stream in (sys.stdout, sys.stderr, sys.stdin):
+        try:
+            stream.reconfigure(encoding="utf-8", errors="replace")
+        except Exception:
+            pass
+
+
+def main() -> None:
+    _configure_stdio_encoding()
+
+    argv = sys.argv[1:]
+    if argv and argv[0] == "server":
+        from simple_ci.server.main import handle_server
+
+        handle_server(argv[1:])
+    elif argv and argv[0] == "run":
+        from simple_ci.cli.main import handle_run
+
+        handle_run(argv[1:])
+    else:
+        from simple_ci.ui.server import run_ui
+
+        run_ui(argv)
+
+
+if __name__ == "__main__":
+    main()

sci_agent-0.2.0/src/simple_ci/actions/__init__.py

@@ -0,0 +1,136 @@
+"""内置动作入口与调度注册表。"""
+
+from __future__ import annotations
+
+from collections.abc import Callable
+from typing import Any
+
+from simple_ci.actions import base
+from simple_ci.actions.build import build_maven_command
+from simple_ci.actions.deploy import build_compose_command
+from simple_ci.actions.image import build_image_command, build_push_command
+from simple_ci.actions.source import build_git_pull_command
+from simple_ci.actions.target import build_target_shell_command
+
+ActionHandler = Callable[[dict[str, Any], dict[str, Any]], base.ActionResult]
+
+
+def dispatch_action(step: dict[str, Any], payload: dict[str, Any]) -> dict[str, Any]:
+    """根据 step.uses 分发内置动作，并返回可 JSON 序列化的动作结果。"""
+
+    action_name = str(step.get("uses") or step.get("action") or "")
+    handler = ACTION_REGISTRY.get(action_name)
+    if handler is None:
+        return base.ActionResult(
+            rendered_command="",
+            exit_code=1,
+            stderr_tail=f"Unknown action: {action_name or '<missing>'}",
+        ).to_dict()
+    return handler(step, payload).to_dict()
+
+
+def _params(step: dict[str, Any]) -> dict[str, Any]:
+    """兼容配置文件中的 with 字段与 Python 调用中的 with_ 字段。"""
+
+    value = step.get("with", step.get("with_", {}))
+    return dict(value) if isinstance(value, dict) else {}
+
+
+def _run_built_command(
+    command: list[str] | list[list[str]] | str,
+    params: dict[str, Any],
+    *,
+    allow_shell: bool = False,
+) -> base.ActionResult:
+    """统一执行命令并注入动作参数中的敏感值用于结果脱敏。"""
+
+    return base.run_command(
+        command,
+        cwd=params.get("cwd") or params.get("workdir"),
+        env=params.get("env"),
+        secret_values=base.collect_secret_values(params),
+        timeout_seconds=float(params.get("timeout_seconds", 300)),
+        allow_shell=allow_shell,
+    )
+
+
+def _source_git_pull(step: dict[str, Any], _payload: dict[str, Any]) -> base.ActionResult:
+    params = _params(step)
+    if isinstance(params.get("credential"), str):
+        message = "Unresolved credential id for source.git_pull; CLI must send a credential dict."
+        return base.ActionResult(rendered_command="", exit_code=1, stderr_tail=message, error=message)
+    return _run_built_command(build_git_pull_command(params), params)
+
+
+def _build_maven(step: dict[str, Any], _payload: dict[str, Any]) -> base.ActionResult:
+    params = _params(step)
+    return _run_built_command(build_maven_command(params), params)
+
+
+def _shell_action(step: dict[str, Any], _payload: dict[str, Any]) -> base.ActionResult:
+    params = _params(step)
+    command = params.get("command") or step.get("command")
+    if not isinstance(command, (str, list)):
+        return base.ActionResult(rendered_command="", exit_code=1, stderr_tail="Missing shell command.")
+    return _run_built_command(command, params, allow_shell=True)
+
+
+def _target_shell(step: dict[str, Any], payload: dict[str, Any]) -> base.ActionResult:
+    """执行目标脚本或 inline 命令；script 模式使用 argv，inline 字符串保留 shell 能力。"""
+
+    params = _params(step)
+    try:
+        command = build_target_shell_command(params, payload)
+    except ValueError as exc:
+        return base.ActionResult(rendered_command="", exit_code=1, stderr_tail=str(exc), error=str(exc))
+    return _run_built_command(command, params, allow_shell=isinstance(command, str))
+
+
+def _image_build(step: dict[str, Any], _payload: dict[str, Any]) -> base.ActionResult:
+    params = _params(step)
+    result = _run_built_command(build_image_command(params), params)
+    if result.exit_code == 0:
+        result.image_tag = f"{params['image']}:{params.get('tag', 'latest')}"
+    return result
+
+
+def _image_push(step: dict[str, Any], _payload: dict[str, Any]) -> base.ActionResult:
+    params = _params(step)
+    return _run_built_command(build_push_command(params), params)
+
+
+def _deploy_compose(step: dict[str, Any], _payload: dict[str, Any]) -> base.ActionResult:
+    params = _params(step)
+    return _run_built_command(build_compose_command(params), params)
+
+
+def _deploy_healthcheck(step: dict[str, Any], _payload: dict[str, Any]) -> base.ActionResult:
+    """执行 HTTP 健康检查；失败时以非零退出码进入流水线短路。"""
+
+    params = _params(step)
+    return base.run_healthcheck(
+        str(params.get("url", "")),
+        timeout=float(params.get("timeout", 10)),
+        expected_status=int(params.get("expected_status", 200)),
+        retries=int(params.get("retries", 0)),
+        interval_seconds=float(params.get("interval_seconds", 0)),
+        expect_body_contains=(
+            str(params["expect_body_contains"]) if params.get("expect_body_contains") is not None else None
+        ),
+        secret_values=base.collect_secret_values(params),
+    )
+
+
+ACTION_REGISTRY: dict[str, ActionHandler] = {
+    "source.git_pull": _source_git_pull,
+    "build.maven": _build_maven,
+    "build.shell": _shell_action,
+    "image.build": _image_build,
+    "image.push": _image_push,
+    "deploy.compose": _deploy_compose,
+    "deploy.healthcheck": _deploy_healthcheck,
+    "deploy.shell": _shell_action,
+    "target.shell": _target_shell,
+}
+
+__all__ = ["ACTION_REGISTRY", "dispatch_action"]