feat(xtask): comprehensive build automation CLI with 31 subcommands

[houko]

Summary

Replace scattered shell scripts with a unified, cross-platform cargo xtask CLI (31 subcommands), migrate CI workflows to use xtask, and extract shared utilities.

Core Build Commands

• ci: local CI suite (build + test + clippy + web lint) with --no-test, --no-web, --release
• fmt: check or fix formatting (Rust + web) with --fix
• build-web: build dashboard / web / docs frontends via pnpm
• clean-all: remove all build artifacts (target/, node_modules/, dist/, .next/)
• pre-commit: run fmt + clippy + test as pre-commit check

Release & Publishing

• release: full release flow — changelog, version sync, commit, tag, PR creation
• changelog: generate CHANGELOG.md from merged PRs via gh pr list
• sync-versions: sync CalVer across Cargo.toml, JS/Python/Rust SDKs, Tauri
• dist: build release binaries for multiple platforms
• docker: build and optionally push Docker image
• publish-sdks: publish SDKs to npm, PyPI, and crates.io
• publish-npm-binaries: publish platform-specific CLI binaries to npm (replaces publish-npm-binaries.sh)
• publish-pypi-binaries: publish platform-specific CLI wheels to PyPI (replaces publish-pypi-binaries.sh)

Development & Testing

• dev: start daemon + dashboard hot reload together
• setup: set up local development environment
• doctor: diagnose development environment issues
• bench: run criterion benchmarks
• coverage: generate test coverage report
• integration-test: start daemon, test API endpoints, verify LLM + budget

Code Quality & Analysis

• deps: audit dependencies for vulnerabilities (--audit, --ignore RUSTSEC-ID) and check outdated
• codegen: generate OpenAPI spec, TypeScript bindings, etc.
• check-links: check for broken links in documentation
• license-check: check dependency licenses for compliance
• loc: lines of code statistics with per-crate breakdown
• api-docs: generate Swagger UI site from OpenAPI spec
• validate-config: validate ~/.librefang/config.toml syntax

Data & Infra

• db: database management (info, backup, reset)
• migrate: migrate agents from other frameworks (OpenClaw, OpenFang)
• update-deps: batch update Rust and web dependencies
• contributors: generate contributors SVG and star history SVG (replaces Python scripts)

CI Migration

• ci.yml: quality job uses cargo xtask fmt + cargo xtask ci --no-test --no-web
• ci.yml: security job uses cargo xtask deps --audit --ignore ...
• update-contributors.yml: uses cargo xtask contributors
• release-shell.yml: npm/PyPI publish steps use xtask commands

Code Quality

• Extract duplicated repo_root() from 27 files into shared common.rs module (-450 lines)
• All &PathBuf → &Path (clippy ptr_arg), div_ceil, too_many_arguments fixes
• Fix db.rs WAL cleanup path construction bug
• Delete migrated scripts: generate_contributors.py, generate_star_history.py, publish-npm-binaries.sh, publish-pypi-binaries.sh

Usage

cargo xtask --help                              # list all 31 commands
cargo xtask ci                                  # full local CI
cargo xtask ci --no-test --no-web               # build + clippy only
cargo xtask fmt --fix                           # auto-fix formatting
cargo xtask deps --audit --ignore RUSTSEC-2024-0001
cargo xtask release --version 2026.3.2214 --no-confirm
cargo xtask contributors --repo librefang/librefang
cargo xtask publish-npm-binaries --version $VER --tag $TAG

Test plan

• cargo clippy -p xtask --all-targets -- -D warnings passes (zero warnings)
• cargo xtask --help shows all 31 subcommands
• cargo xtask ci --no-test --no-web runs build + clippy
• CI workflows pass with xtask commands
• Justfile recipes cover all 31 commands

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.