feat(workflows): align CLI commands with extension/preset pattern - #2353

Closed

mnriem wants to merge 26 commits into

github:mainfrom

mnriem:feat/workflow-cli-alignment-2342

Commits on Apr 24, 2026

feat(workflows): align CLI commands with extension/preset pattern
mnriem
committed
89a62b2
fix: address PR review feedback from Copilot
mnriem
committed
317830c
fix: address second round of PR review feedback
mnriem
committed
9d07773
fix: address third round of PR review feedback
mnriem
committed
605f710
fix: address fourth round of PR review feedback
mnriem
committed
71c5171
fix: harden WorkflowRegistry against corrupted JSON
mnriem
committed
d2588e7
fix: validate source URL scheme in _download_validated before opening
mnriem
committed
4a7cf52
fix: reorder validation, safe tempdir prefix, fix test coverage
mnriem
committed
3906918
fix: KeyboardInterrupt safety, corrupted entry repair, disabled run guard
mnriem
committed
cca84b7
fix: check disabled before load, streaming download, tolerate cleanup
mnriem
committed
7414b5f
fix: reject non-HTTPS redirects before following, validate workflow ID format
mnriem
committed
bc6ee95
fix: remove unused import, reject source+--from, broaden version parsing
mnriem
committed
ea2c732
fix: atomic registry save, registry snapshot rollback, hidden backup dir
mnriem
committed
6dcb3fb
fix: tighten test assertion for --dev missing path
mnriem
committed
f18e5a3
fix: check disabled by definition.id, reload registry after rollback, reuse _ID_PATTERN
mnriem
committed
8a4dbaf
fix: temp file cleanup on download failure, rollback without backup
mnriem
committed
fbc6001
fix: expose public is_valid_workflow_id() instead of importing private _ID_PATTERN
mnriem
committed
77b6db0
fix: prevent SSRF via redirect to loopback, preserve description on update
mnriem
committed
7c232c2
fix: surface catalog errors in update, clean up save() imports
mnriem
committed
15beca8
fix: preserve file permissions on atomic registry save
mnriem
committed
16509cb
fix: deepcopy fields in Registry.update(), ensure installed_at exists
mnriem
committed
5da3a39
fix: validate absolute redirect URL, raise KeyError on missing workflow
mnriem
committed
28309a4
fix: descriptive KeyError, preserve installed_at unconditionally, carry catalog description
mnriem
committed
9d8de6e
fix: address review — single timestamp, descriptive URL error, skipped count
mnriem
committed
94415a0
fix: normalize installed_at timestamp, guard .backup against symlinks
mnriem
committed
d925baf
fix: update error messages to say localhost/loopback
mnriem
committed
6c0351d

Navigation Menu

Uh oh!

feat(workflows): align CLI commands with extension/preset pattern - #2353

feat(workflows): align CLI commands with extension/preset pattern#2353
mnriem wants to merge 26 commits into
github:mainfrom
mnriem:feat/workflow-cli-alignment-2342

Commits on Apr 24, 2026

feat(workflows): align CLI commands with extension/preset pattern

fix: address PR review feedback from Copilot

fix: address second round of PR review feedback

fix: address third round of PR review feedback

fix: address fourth round of PR review feedback

fix: harden WorkflowRegistry against corrupted JSON

fix: validate source URL scheme in _download_validated before opening

fix: reorder validation, safe tempdir prefix, fix test coverage

fix: KeyboardInterrupt safety, corrupted entry repair, disabled run guard

fix: check disabled before load, streaming download, tolerate cleanup

fix: reject non-HTTPS redirects before following, validate workflow ID format

fix: remove unused import, reject source+--from, broaden version parsing

fix: atomic registry save, registry snapshot rollback, hidden backup dir

fix: tighten test assertion for --dev missing path

fix: check disabled by definition.id, reload registry after rollback, reuse _ID_PATTERN

fix: temp file cleanup on download failure, rollback without backup

fix: expose public is_valid_workflow_id() instead of importing private _ID_PATTERN

fix: prevent SSRF via redirect to loopback, preserve description on update

fix: surface catalog errors in update, clean up save() imports

fix: preserve file permissions on atomic registry save

fix: deepcopy fields in Registry.update(), ensure installed_at exists

fix: validate absolute redirect URL, raise KeyError on missing workflow

fix: descriptive KeyError, preserve installed_at unconditionally, carry catalog description

fix: address review — single timestamp, descriptive URL error, skipped count

fix: normalize installed_at timestamp, guard .backup against symlinks

fix: update error messages to say localhost/loopback