skill-template/release.ps1

<#
.SYNOPSIS
  Local git release for skill-template repo.

.DESCRIPTION
  Handles git commit / push / semver tag / push tag only.
  Encryption, ZIP packaging, and marketplace sync are done by CI
  (.github/workflows/release_skill.yaml → reusable-release-skill.yaml@main).

  Requires: git, PowerShell 5+

  After fetch, runs default tests against the current working tree (before auto-commit):
    python tests/run_tests.py -v
  Use -SkipTests only for emergency diagnostics. -DryRun still runs tests.
#>

[CmdletBinding()]
param(
  [string]$Prefix = "v",
  [string]$Message = "正式发布",
  [switch]$AutoCommit,
  [switch]$RequireClean,
  [string]$CommitMessage,
  [switch]$DryRun,
  [switch]$SkipTests
)

Set-StrictMode -Version Latest
$ErrorActionPreference = "Stop"

function Remove-GitNoise {
  param([string[]]$Lines)
  return @($Lines | Where-Object {
    $_ -and ($_ -notmatch '^warning:\s+unable to access ')
  })
}

function Convert-GitOutputLines {
  param($Output)
  return @(
    @($Output) | ForEach-Object {
      if ($_ -is [System.Management.Automation.ErrorRecord]) { $_.ToString() }
      else { "$_" }
    }
  )
}

# Call git.exe directly. Do not wrap with `cmd /c` — on Chinese Windows, cmd
# re-encodes -m / -F arguments through the OEM code page and garbles UTF-8
# annotated tag / commit messages (e.g. 「正式发布」 → 「姝ｅ紡鍙戝竷」).
function Invoke-GitRaw {
  param([Parameter(Mandatory = $true)][string[]]$GitArgs)
  $prev = $ErrorActionPreference
  $ErrorActionPreference = "Continue"
  try {
    $output = & git @GitArgs 2>&1
    $code = $LASTEXITCODE
  } finally {
    $ErrorActionPreference = $prev
  }
  return [pscustomobject]@{
    ExitCode = $code
    Lines    = @(Remove-GitNoise -Lines @(Convert-GitOutputLines -Output $output))
  }
}

function Invoke-Git {
  param([Parameter(Mandatory = $true)][string[]]$GitArgs)
  Write-Host (">> git " + ($GitArgs -join " ")) -ForegroundColor DarkGray
  $r = Invoke-GitRaw -GitArgs $GitArgs
  if ($r.ExitCode -ne 0) {
    throw "git command failed: git $($GitArgs -join ' ')"
  }
}

function Get-GitOutput {
  param([Parameter(Mandatory = $true)][string[]]$GitArgs)
  $r = Invoke-GitRaw -GitArgs $GitArgs
  if ($r.ExitCode -ne 0) {
    throw "git command failed: git $($GitArgs -join ' ')"
  }
  return @($r.Lines)
}

function Test-Repo {
  $r = Invoke-GitRaw -GitArgs @("rev-parse", "--is-inside-work-tree")
  if ($r.ExitCode -ne 0) {
    return $false
  }
  return (($r.Lines | Select-Object -First 1) -eq "true")
}

function Get-CurrentBranch {
  $b = (Get-GitOutput -GitArgs @("branch", "--show-current") | Select-Object -First 1).Trim()
  return $b
}

function Get-StatusPorcelain {
  $lines = @(Get-GitOutput -GitArgs @("status", "--porcelain"))
  return $lines
}

function Parse-SemVerTag {
  param(
    [string]$Tag,
    [string]$TagPrefix
  )
  $escaped = [regex]::Escape($TagPrefix)
  $m = [regex]::Match($Tag, "^${escaped}(\d+)\.(\d+)\.(\d+)$")
  if (-not $m.Success) { return $null }

  return [pscustomobject]@{
    Raw   = $Tag
    Major = [int]$m.Groups[1].Value
    Minor = [int]$m.Groups[2].Value
    Patch = [int]$m.Groups[3].Value
  }
}

function Get-NextTag {
  param([string]$TagPrefix)

  $tags = Get-GitOutput -GitArgs @("tag", "--list")
  $parsed = @()

  foreach ($t in $tags) {
    $t = $t.Trim()
    if (-not $t) { continue }
    $obj = Parse-SemVerTag -Tag $t -TagPrefix $TagPrefix
    if ($null -ne $obj) { $parsed += $obj }
  }

  if ($parsed.Count -eq 0) {
    return "${TagPrefix}1.0.1"
  }

  $latest = $parsed | Sort-Object Major, Minor, Patch | Select-Object -Last 1
  return "$TagPrefix$($latest.Major).$($latest.Minor).$([int]$latest.Patch + 1)"
}

function Assert-SkillReleasePackagingSources {
  param([Parameter(Mandatory = $true)][string]$SkillRoot)

  $scriptsDir = Join-Path $SkillRoot "scripts"
  $mainPy = Join-Path $scriptsDir "main.py"
  if (-not (Test-Path -LiteralPath $mainPy)) {
    return
  }

  $text = Get-Content -LiteralPath $mainPy -Raw -Encoding UTF8 -ErrorAction SilentlyContinue
  if ([string]::IsNullOrWhiteSpace($text)) {
    return
  }

  $need = @()
  if ($text -match '(?m)^\s*from\s+cli\.') { $need += 'cli' }
  if ($text -match '(?m)^\s*import\s+cli\b') { $need += 'cli' }
  if ($text -match '(?m)^\s*from\s+service\.') { $need += 'service' }
  if ($text -match '(?m)^\s*import\s+service\b') { $need += 'service' }
  if ($text -match '(?m)^\s*from\s+db\.') { $need += 'db' }
  if ($text -match '(?m)^\s*import\s+db\b') { $need += 'db' }
  if ($text -match '(?m)^\s*from\s+util\.') { $need += 'util' }
  if ($text -match '(?m)^\s*import\s+util\b') { $need += 'util' }

  foreach ($p in ($need | Select-Object -Unique)) {
    $folder = Join-Path $scriptsDir $p
    if (-not (Test-Path -LiteralPath $folder)) {
      throw "Release check failed: scripts/main.py imports from '$p' but folder is missing: $folder"
    }
  }

  $pyFiles = @(Get-ChildItem -LiteralPath $scriptsDir -Filter *.py -Recurse -File -ErrorAction SilentlyContinue)
  Write-Host "Packaging check: $($pyFiles.Count) Python file(s) under scripts/ (CI will obfuscate all recursively)." -ForegroundColor DarkGray
}

function Invoke-DefaultTests {
  param(
    [Parameter(Mandatory = $true)][string]$SkillRoot,
    [switch]$Skip
  )

  if ($Skip) {
    Write-Host "WARNING: Skipping tests before release. This should only be used for emergency diagnostics." -ForegroundColor Yellow
    return
  }

  $runTests = Join-Path $SkillRoot "tests\run_tests.py"
  if (-not (Test-Path -LiteralPath $runTests)) {
    throw "Release check failed: tests/run_tests.py not found."
  }

  Write-Host ">> python tests/run_tests.py -v" -ForegroundColor DarkGray
  & python $runTests -v
  if ($LASTEXITCODE -ne 0) {
    throw "Release aborted: default tests failed (python tests/run_tests.py -v)."
  }
}

function Ensure-CleanOrAutoCommit {
  param(
    [switch]$DoAutoCommit,
    [switch]$NeedClean,
    [switch]$IsDryRun,
    [string]$Msg
  )

  $status = @(Get-StatusPorcelain)
  if ($status.Length -eq 0) { return }

  if ($NeedClean) {
    Write-Host "Working tree is not clean and -RequireClean is enabled." -ForegroundColor Yellow
    (Invoke-GitRaw -GitArgs @("status", "--short")).Lines | ForEach-Object { Write-Host $_ }
    throw "Abort: dirty working tree."
  }

  $commitMsg = $Msg
  if ([string]::IsNullOrWhiteSpace($commitMsg)) {
    $commitMsg = "chore: auto release commit ($(Get-Date -Format 'yyyy-MM-dd HH:mm:ss'))"
  }

  if (-not $DoAutoCommit) {
    Write-Host "Detected uncommitted changes, auto-committing before release..." -ForegroundColor Yellow
  }

  if ($IsDryRun) {
    Write-Host "[DryRun] Would run: git add -A" -ForegroundColor Yellow
    Write-Host "[DryRun] Would run: git commit -m `"$commitMsg`"" -ForegroundColor Yellow
    return
  }

  Invoke-Git -GitArgs @("add", "-A")
  Invoke-Git -GitArgs @("commit", "-m", $commitMsg)
}

try {
  Write-Host "=== Release Script Start ===" -ForegroundColor Cyan

  if (-not (Test-Repo)) {
    throw "Current directory is not a git repository."
  }

  $branch = Get-CurrentBranch
  if ([string]::IsNullOrWhiteSpace($branch)) {
    throw "Unable to determine current branch."
  }

  if ($branch -notin @("main", "master")) {
    throw "Current branch is '$branch'. Release is only allowed from main/master."
  }

  if ($DryRun) {
    Write-Host "[DryRun] Would run: git fetch --tags --prune origin" -ForegroundColor Yellow
  } else {
    Invoke-Git -GitArgs @("fetch", "--tags", "--prune", "origin")
  }

  $skillRoot = (Get-GitOutput -GitArgs @("rev-parse", "--show-toplevel") | Select-Object -First 1).Trim()
  if (Test-Path -LiteralPath (Join-Path $skillRoot "SKILL.md")) {
    Assert-SkillReleasePackagingSources -SkillRoot $skillRoot
  }

  Invoke-DefaultTests -SkillRoot $skillRoot -Skip:$SkipTests

  Ensure-CleanOrAutoCommit -DoAutoCommit:$AutoCommit -NeedClean:$RequireClean -IsDryRun:$DryRun -Msg $CommitMessage

  $upstream = Invoke-GitRaw -GitArgs @("rev-parse", "--abbrev-ref", "--symbolic-full-name", "@{u}")
  $hasUpstream = ($upstream.ExitCode -eq 0)

  if ($DryRun) {
    if ($hasUpstream) {
      Write-Host "[DryRun] Would run: git push" -ForegroundColor Yellow
    } else {
      Write-Host "[DryRun] Would run: git push -u origin $branch" -ForegroundColor Yellow
    }
  } else {
    if ($hasUpstream) {
      Invoke-Git -GitArgs @("push")
    } else {
      Invoke-Git -GitArgs @("push", "-u", "origin", $branch)
    }
  }

  $nextTag = Get-NextTag -TagPrefix $Prefix
  Write-Host "Next tag: $nextTag" -ForegroundColor Green

  $existing = @(Get-GitOutput -GitArgs @("tag", "--list", $nextTag))
  if ($existing.Length -gt 0) {
    throw "Tag already exists: $nextTag"
  }

  if ($DryRun) {
    Write-Host "[DryRun] Would run: git tag -a $nextTag -m `"$Message`"" -ForegroundColor Yellow
    Write-Host "[DryRun] Would run: git push origin $nextTag" -ForegroundColor Yellow
    Write-Host "=== DryRun Complete ===" -ForegroundColor Cyan
    exit 0
  }

  Invoke-Git -GitArgs @("tag", "-a", $nextTag, "-m", $Message)
  Invoke-Git -GitArgs @("push", "origin", $nextTag)

  Write-Host "Release success: $nextTag" -ForegroundColor Green
  Write-Host "=== Release Script Done ===" -ForegroundColor Cyan
  exit 0
}
catch {
  Write-Host "Release failed: $($_.Exception.Message)" -ForegroundColor Red
  exit 1
}