WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

2026-09-22 16:19:06 +08:00
commit f7fc992f57
3929 changed files with 1006607 additions and 0 deletions
@@ -0,0 +1,58 @@
+name: CLI
+
+# Builds and tests the cli/ Go module on every push / PR that touches it.
+# Foundation PR (PR-1) gates: 3-platform `go build` + `go test ./...` green.
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'cli/**'
+      - '.github/workflows/cli.yml'
+  pull_request:
+    paths:
+      - 'cli/**'
+      - '.github/workflows/cli.yml'
+
+defaults:
+  run:
+    working-directory: cli
+    # Windows default is PowerShell, which tokenizes `go test -coverprofile=coverage.out ./...`
+    # in a way that detaches `.out` as a separate positional package arg.
+    # Force bash everywhere so the run lines parse identically across platforms
+    # (Git Bash is preinstalled on windows-latest runners).
+    shell: bash
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: test (${{ matrix.os }} / go ${{ matrix.go }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        go: ['1.26']
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
+        with:
+          go-version: ${{ matrix.go }}
+          cache-dependency-path: cli/go.sum
+      - name: go build
+        run: go build ./...
+      - name: go test
+        run: go test -race -coverprofile=coverage.out ./...
+      - name: go vet
+        run: go vet ./...
+      - name: Check agent-facing doc wire vocabulary
+        if: runner.os == 'Linux'
+        run: scripts/check-skill-wire-vocab.sh
+      - name: Check for committed credentials in docs
+        if: runner.os == 'Linux'
+        run: scripts/check-secret-tokens.sh
+      - name: coverage report
+        if: matrix.os == 'ubuntu-latest'
+        run: go tool cover -func=coverage.out