trade-compass-agent 0.2.0__tar.gz

trade_compass_agent-0.2.0/.cursor/rules/skill-design.mdc

@@ -0,0 +1,72 @@
+---
+description: Skill 设计规范 — 编写/修改 memory_vault/skills/ 下的 SKILL.md 时遵循此格式
+globs:
+  - memory_vault/skills/**/SKILL.md
+---
+
+# Skill 文件规范
+
+## 文件位置
+`memory_vault/skills/<skill-name>/SKILL.md`
+
+## Frontmatter（必填）
+
+```yaml
+---
+name: <skill-name>          # 与目录名一致，kebab-case
+description: <一句话描述>    # 中文，20字以内核心功能 + 关键词
+category: <分类>             # 见下方分类列表
+---
+```
+
+### 分类（category）
+
+| 值 | 含义 |
+|---|---|
+| `screening` | 选股/扫描类 |
+| `execution` | 交易执行/事件驱动 |
+| `analysis` | 分析/研判类 |
+| `risk` | 风控/合规类 |
+| `compliance` | 市场规则/合规约束 |
+
+## 正文结构（按顺序）
+
+### 1. `## 适用场景`
+一段话描述何时应加载/使用此 Skill。
+
+### 2. `## 触发条件` 或 `## 规则`（按需）
+列出使用此 Skill 的前置条件或核心知识点。
+
+### 3. `## 执行流程`
+有序步骤，每步标注要调用的工具名（反引号），如：
+```
+1. `get_bars(symbol, timeframe="1d", limit=60)` → 获取K线
+2. `get_market_pulse` → 确认大盘环境
+3. 满足全部条件 → `emit_signal(rating="buy")`
+```
+
+### 4. `## 参数`（可选）
+关键阈值/配置参数，便于后续调优。
+
+### 5. `## 排除条件`（可选）
+不适用的场景或应跳过的标的。
+
+## 编写原则
+
+1. **中文优先**：描述和规则用中文，工具名/代码保持英文
+2. **可执行**：每个 Skill 应能直接指导 Agent 行动，不是泛泛而谈
+3. **无重复**：新建 Skill 前检查是否已有覆盖相同领域的 Skill
+4. **短小精悍**：控制在 50 行以内；超出则考虑拆分
+5. **注册**：新 Skill 需在 `config/agent_skills.yaml` 中添加描述
+
+## 现有 Skills 列表
+
+| 目录名 | category | 核心职责 |
+|--------|----------|---------|
+| compliance | compliance | A股结构性规则(T+1/涨跌幅/手数/停牌/费用) |
+| risk-veto | risk | 信号否决 + 用户对话风控建议 |
+| momentum-scan | screening | 量价共振筛选 |
+| fund-flow-analysis | analysis | 资金流向分析 |
+| earnings-play | execution | 财报事件驱动 |
+| equity-research | analysis | 个股深度研究 |
+| intraday-tech | analysis | 日内技术分析 |

trade_compass_agent-0.2.0/.env.example

@@ -0,0 +1,95 @@
+# Trade Compass Agent — local settings template
+# 本地配置模板：复制为 .env 后填入密钥（Copy to .env and fill in secrets）
+#
+#   cp .env.example .env
+
+# ── Paths / profile ──────────────────────────────────────────────────────────
+# 数据目录 | Local data cache (bars, portfolio, audit)
+TRADE_COMPASS_DATA_DIR=./data
+# 记忆库目录 | Markdown memory vault (rulebooks, reviews, tree/)
+TRADE_COMPASS_MEMORY_DIR=./memory_vault
+# 配置 profile | Matches config/default.yaml profile key
+TRADE_COMPASS_PROFILE=local
+
+# ── Server (optional) ────────────────────────────────────────────────────────
+# API 端口 | Default 19704; override --port or this env
+# TRADE_COMPASS_PORT=19704
+# 最大 HTTP 请求体（字节）| Default 10 MiB
+# TRADE_COMPASS_MAX_REQUEST_BYTES=10485760
+# 开发 CORS | Set 1 when Vite dev (:3000) talks to API (:19704)
+# Also set automatically by `trade-compass serve --dev`
+TRADE_COMPASS_DEV_CORS=
+
+# ── Data providers (optional) ────────────────────────────────────────────────
+# Tushare token — requires pip install -e ".[tushare]" and data.tushare_enabled: true
+TUSHARE_TOKEN=
+
+# 网络代理 | Network proxy — domestic finance APIs (eastmoney/sina) often fail through proxy
+# 建议关闭系统代理，或设置 NO_PROXY 绕过：
+# NO_PROXY=localhost,127.0.0.1,eastmoney.com,.eastmoney.com,push2.eastmoney.com,datacenter-web.eastmoney.com,sina.com.cn,.sina.com.cn
+
+# ── LLM providers (optional) ─────────────────────────────────────────────────
+# Default in config/default.yaml: provider deepseek, model deepseek-chat
+OPENAI_API_KEY=
+ANTHROPIC_API_KEY=
+DEEPSEEK_API_KEY=
+OPENROUTER_API_KEY=
+
+# ── Vision (image attachment support) ────────────────────────────────────────
+# DeepSeek is text-only; to enable image understanding, configure a vision model.
+# Option A: Use OpenAI (requires OPENAI_API_KEY above)
+#   In config/default.yaml set:  vision_model: gpt-4o-mini
+#                                 vision_provider: openai
+#                                 vision_api_key_env: OPENAI_API_KEY
+# Option B: Use DashScope (Qwen-VL)
+#   DASHSCOPE_API_KEY=
+#   In config/default.yaml set:  vision_model: qwen-vl-max
+#                                 vision_provider: dashscope
+#                                 vision_api_key_env: DASHSCOPE_API_KEY
+
+# ── MCP (optional) ───────────────────────────────────────────────────────────
+# MCP server tokens — keep secrets in gitignored .trade-compass/mcp.json (not in repo).
+# Use ${VAR_NAME} in mcp.json url/headers to reference env vars defined here.
+# EXAMPLE_API_TOKEN=
+
+# ── Kronos K-line Forecast (optional) ────────────────────────────────────────
+# Path to cloned Kronos repo — required for kline_forecast tool
+# Install: pip install -e ".[forecast]" && git clone https://github.com/NeoQuasar/Kronos.git
+KRONOS_PATH=
+
+# ── Search (optional) ────────────────────────────────────────────────────────
+# Tavily API key for enhanced web search — get one at https://tavily.com
+TAVILY_API_KEY=
+# xAI API key for X (Twitter) search via Grok — get one at https://console.x.ai
+XAI_API_KEY=
+
+# ── Notification channels (optional) ────────────────────────────────────────
+# 飞书群 Webhook 推送 | Feishu group bot webhook (push-only)
+FEISHU_WEBHOOK_URL=
+FEISHU_WEBHOOK_SECRET=
+# 飞书应用 Bot 双向 | Feishu app bot (bidirectional, requires lark_oapi)
+FEISHU_APP_ID=
+FEISHU_APP_SECRET=
+# 主动推送目标会话（可选，oc_ 开头的 chat_id；不设则需先给 Bot 发一条消息）
+FEISHU_PUSH_CHAT_ID=
+# 企微群 Webhook 推送 | WeCom group robot webhook (push-only)
+WECOM_WEBHOOK_URL=
+# 企微应用 Bot 双向 | WeCom app bot (bidirectional)
+WECOM_CORP_ID=
+WECOM_AGENT_SECRET=
+WECOM_AGENT_ID=
+# 通用 Webhook | Generic webhook (any URL that accepts POST JSON)
+WEBHOOK_NOTIFICATION_URL=
+
+# ── Logging ───────────────────────────────────────────────────────────────────
+# 日志级别 | DEBUG, INFO (default), WARNING, ERROR
+LOG_LEVEL=INFO
+# 日志格式 | "json" for structured JSON lines, empty for colored console
+LOG_FORMAT=
+# 模块级别覆盖 | Per-module override (e.g. LOG_LEVEL_SCREENING=DEBUG)
+# LOG_LEVEL_OPS=DEBUG
+# LOG_LEVEL_RUNTIME=DEBUG
+
+# ── Privacy ──────────────────────────────────────────────────────────────────
+# 隐私门控 | Allow memory/review snippets in external LLM calls (learning curator)
+ALLOW_EXTERNAL_LLM_MEMORY=false

trade_compass_agent-0.2.0/.github/CODEOWNERS

@@ -0,0 +1,8 @@
+# Default ownership
+* @AdenChenCoder
+
+# Release and security-sensitive surfaces
+/.github/workflows/ @AdenChenCoder
+/pyproject.toml @AdenChenCoder
+/scripts/check_dist.py @AdenChenCoder
+/SECURITY.md @AdenChenCoder

trade_compass_agent-0.2.0/.github/ISSUE_TEMPLATE/bug.yml

@@ -0,0 +1,59 @@
+name: Bug report
+description: Report a reproducible problem in Trade Compass Agent.
+title: "[Bug]: "
+labels:
+  - bug
+body:
+  - type: markdown
+    attributes:
+      value: Do not include API keys, webhook secrets, portfolio exports, or other private trading data.
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      description: Output from `trade-compass --version`.
+    validations:
+      required: true
+  - type: dropdown
+    id: install
+    attributes:
+      label: Installation method
+      options:
+        - PyPI / uv tool
+        - Editable source checkout
+        - Other
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Reproduction steps
+      description: Include the smallest safe example and relevant `trade-compass doctor` output.
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: OS, Python version, browser, and enabled optional extras. Redact secrets.
+    validations:
+      required: true
+  - type: checkboxes
+    id: safety
+    attributes:
+      label: Safety check
+      options:
+        - label: I removed credentials and private financial data from this report.
+          required: true

trade_compass_agent-0.2.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security report
+    url: https://github.com/AdenChenCoder/trade-compass-agent/security/advisories/new
+    about: Report vulnerabilities privately. Do not disclose them in a public issue.
+  - name: Documentation
+    url: https://github.com/AdenChenCoder/trade-compass-agent/tree/main/docs
+    about: Read installation, configuration, CLI, Skill, architecture, and release guides.

trade_compass_agent-0.2.0/.github/ISSUE_TEMPLATE/feature.yml

@@ -0,0 +1,35 @@
+name: Feature request
+description: Propose a user-visible improvement.
+title: "[Feature]: "
+labels:
+  - enhancement
+body:
+  - type: textarea
+    id: outcome
+    attributes:
+      label: Desired user outcome
+      description: What should a user be able to observe or accomplish?
+    validations:
+      required: true
+  - type: textarea
+    id: current
+    attributes:
+      label: Current limitation
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed behavior
+      description: Describe behavior and compatibility expectations, not only implementation details.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+  - type: textarea
+    id: contracts
+    attributes:
+      label: Compatibility and product contracts
+      description: Note any data, workflow, permission, or automation behavior that must remain unchanged.

trade_compass_agent-0.2.0/.github/dependabot.yml

@@ -0,0 +1,38 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:00"
+      timezone: Asia/Shanghai
+    open-pull-requests-limit: 5
+    groups:
+      python-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:15"
+      timezone: Asia/Shanghai
+    open-pull-requests-limit: 5
+    groups:
+      web-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:30"
+      timezone: Asia/Shanghai
+    open-pull-requests-limit: 5

trade_compass_agent-0.2.0/.github/pull_request_template.md

@@ -0,0 +1,26 @@
+## User outcome
+
+Describe the observable problem solved and who benefits.
+
+## Changes
+
+Summarize the smallest relevant implementation changes.
+
+## Contracts and risk
+
+- Existing behavior or data semantics preserved:
+- Security, privacy, compatibility, or migration impact:
+- Rollback or recovery path:
+
+## Verification
+
+- [ ] Python tests and governance checks pass (`scripts/ci_check.sh`).
+- [ ] Web tests and typecheck pass when applicable.
+- [ ] Consumer-facing behavior was exercised.
+- [ ] Built wheel behavior was exercised when package assets or entry points changed.
+- [ ] No secrets, generated runtime data, or private financial data were added.
+- [ ] Documentation and changelog were updated when user-visible behavior changed.
+
+## Release note
+
+State the changelog entry, or explain why this change is not user-visible.

trade_compass_agent-0.2.0/.github/release.yml

@@ -0,0 +1,23 @@
+changelog:
+  exclude:
+    labels:
+      - skip-changelog
+    authors:
+      - dependabot
+  categories:
+    - title: Breaking changes
+      labels:
+        - breaking-change
+    - title: Features
+      labels:
+        - enhancement
+    - title: Fixes
+      labels:
+        - bug
+        - bugfix
+    - title: Documentation
+      labels:
+        - documentation
+    - title: Other changes
+      labels:
+        - "*"

trade_compass_agent-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,107 @@
+name: CI
+
+on:
+  push:
+    branches-ignore:
+      - "dependabot/**"
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  python-test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: "3.12"
+      - name: Install uv
+        run: python -m pip install "uv==0.11.32"
+      - name: Install locked project dependencies
+        run: uv sync --locked --extra dev
+      - name: Run Python governance checks
+        run: scripts/ci_check.sh
+        env:
+          PYTHONPATH: src
+
+  web-build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+        with:
+          version: 11.1.3
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: "22"
+          cache: pnpm
+      - name: Install workspace dependencies
+        run: pnpm install --frozen-lockfile
+      - name: Build Vite web app
+        run: pnpm --dir apps/web build
+      - name: Typecheck web app
+        run: pnpm --dir apps/web typecheck
+      - name: Test web app
+        run: pnpm --dir apps/web test
+
+  wheel-smoke:
+    runs-on: ubuntu-latest
+    needs: [web-build]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: "3.12"
+      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+        with:
+          version: 11.1.3
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: "22"
+          cache: pnpm
+      - name: Install workspace dependencies
+        run: pnpm install --frozen-lockfile
+      - name: Build distributions and verify installed quickstart
+        run: |
+          python -m pip install "uv==0.11.32"
+          uv build --no-sources
+          python scripts/check_dist.py
+          python -m pip install dist/*.whl
+          export TRADE_COMPASS_HOME="$RUNNER_TEMP/trade-compass-home"
+          export DEEPSEEK_API_KEY="ci-placeholder"
+          cd "$RUNNER_TEMP"
+          trade-compass --version
+          trade-compass commands --json
+          trade-compass setup
+          trade-compass doctor
+          python -m trade_compass_agent.release_smoke
+          python - <<'PY'
+          import os
+          from pathlib import Path
+
+          import trade_compass_agent.web.dist as dist
+          from trade_compass_agent.config import (
+              PACKAGE_ROOT,
+              load_app_config,
+              resolve_config_path,
+              resolve_schema_path,
+          )
+
+          path = dist.resolve_web_dist()
+          assert path is not None, "web_dist missing from installed wheel"
+          assert (path / "index.html").is_file()
+          print(f"web_dist ok: {path}")
+          assert (PACKAGE_ROOT / "workflows" / "catalyst_calendar_cn" / "workflow.yaml").is_file()
+          assert (PACKAGE_ROOT / "specialists" / "equity_research" / "specialist.yaml").is_file()
+          assert resolve_schema_path("readers/reader_claims.schema.json").is_file()
+          config = load_app_config()
+          home = Path(os.environ["TRADE_COMPASS_HOME"])
+          assert resolve_config_path().resolve() == (home / "config.yaml").resolve()
+          assert config.data_dir.resolve() == (home / "data").resolve()
+          assert config.memory_dir.resolve() == (home / "memory_vault").resolve()
+          assert config.llm.provider == "deepseek"
+          assert not str(config.data_dir).startswith(str(PACKAGE_ROOT))
+          print("installed config, runtime paths, and package assets ok")
+          PY

trade_compass_agent-0.2.0/.github/workflows/release.yml

@@ -0,0 +1,182 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: read
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+      - name: Scan complete Git history
+        run: scripts/secret_scan.sh
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: "3.12"
+      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+        with:
+          version: 11.1.3
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: "22"
+          cache: pnpm
+      - name: Install workspace and project dependencies
+        run: |
+          pnpm install --frozen-lockfile
+          python -m pip install "uv==0.11.32"
+          uv sync --locked --extra dev
+      - name: Verify Python project
+        run: scripts/ci_check.sh
+        env:
+          PYTHONPATH: src
+      - name: Verify web app
+        run: |
+          pnpm --dir apps/web test
+          pnpm --dir apps/web typecheck
+          pnpm --dir apps/web build
+
+  build:
+    needs: verify
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: "3.12"
+      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+        with:
+          version: 11.1.3
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: "22"
+          cache: pnpm
+      - name: Install workspace dependencies
+        run: pnpm install --frozen-lockfile
+      - name: Build distributions
+        run: |
+          python -m pip install "uv==0.11.32"
+          uv build --no-sources
+          python scripts/check_dist.py
+      - name: Verify tag matches package version
+        run: |
+          python - <<'PY'
+          import os
+          import tomllib
+
+          with open("pyproject.toml", "rb") as handle:
+              version = tomllib.load(handle)["project"]["version"]
+          tag = os.environ["GITHUB_REF_NAME"]
+          if tag != f"v{version}":
+              raise SystemExit(f"tag {tag!r} does not match package version {version!r}")
+          PY
+      - name: Verify the exact wheel as an installed consumer
+        run: |
+          python -m venv "$RUNNER_TEMP/release-smoke"
+          "$RUNNER_TEMP/release-smoke/bin/python" -m pip install dist/*.whl
+          cd "$RUNNER_TEMP"
+          export TRADE_COMPASS_HOME="$RUNNER_TEMP/trade-compass-home"
+          "$RUNNER_TEMP/release-smoke/bin/trade-compass" --version
+          "$RUNNER_TEMP/release-smoke/bin/trade-compass" commands --json
+          "$RUNNER_TEMP/release-smoke/bin/python" -m trade_compass_agent.release_smoke
+      - name: Build release SBOM and checksums
+        run: |
+          mkdir -p release-assets
+          cp dist/* release-assets/
+          cp install.sh release-assets/
+          uv export --quiet \
+            --locked \
+            --format cyclonedx1.5 \
+            --all-extras \
+            --all-groups \
+            --no-emit-project \
+            --output-file release-assets/sbom.cdx.json
+          cd release-assets
+          sha256sum * > SHA256SUMS
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: python-distributions
+          path: dist/
+          if-no-files-found: error
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: release-assets
+          path: release-assets/
+          if-no-files-found: error
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/trade-compass-agent/
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: python-distributions
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
+
+  postpublish:
+    needs: publish
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: "3.12"
+      - name: Install and accept the published package
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+          python -m venv "$RUNNER_TEMP/postpublish"
+          for attempt in 1 2 3 4 5; do
+            if "$RUNNER_TEMP/postpublish/bin/python" -m pip install \
+              "trade-compass-agent==$VERSION"; then
+              break
+            fi
+            if [ "$attempt" = 5 ]; then
+              exit 1
+            fi
+            sleep 15
+          done
+          cd "$RUNNER_TEMP"
+          export TRADE_COMPASS_HOME="$RUNNER_TEMP/trade-compass-home"
+          "$RUNNER_TEMP/postpublish/bin/trade-compass" --version
+          "$RUNNER_TEMP/postpublish/bin/trade-compass" commands --json
+          "$RUNNER_TEMP/postpublish/bin/python" -m trade_compass_agent.release_smoke
+      - name: Accept the published one-command installer
+        run: |
+          export HOME="$RUNNER_TEMP/installer-home"
+          export TRADE_COMPASS_PACKAGE="trade-compass-agent==${GITHUB_REF_NAME#v}"
+          sh install.sh
+          test ! -e "$HOME/.trade-compass/config.yaml"
+          if command -v uv >/dev/null 2>&1; then
+            uv_bin="$(command -v uv)"
+          else
+            uv_bin="$HOME/.local/bin/uv"
+          fi
+          tool_bin="$("$uv_bin" tool dir --bin)"
+          "$tool_bin/trade-compass" --version
+
+  github-release:
+    needs: postpublish
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: release-assets
+          path: release-assets
+      - uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
+        with:
+          files: release-assets/*
+          generate_release_notes: true