feat(workflows): align CLI commands with extension/preset pattern#2353

Open

mnriem wants to merge 26 commits into

github:mainfrom

mnriem:feat/workflow-cli-alignment-2342

Commits on Apr 24, 2026

feat(workflows): align CLI commands with extension/preset pattern
mnriem
committed
fix: address PR review feedback from Copilot
mnriem
committed
fix: address second round of PR review feedback
mnriem
committed
fix: address third round of PR review feedback
mnriem
committed
fix: address fourth round of PR review feedback
mnriem
committed
fix: harden WorkflowRegistry against corrupted JSON
mnriem
committed
fix: validate source URL scheme in _download_validated before opening
mnriem
committed
fix: reorder validation, safe tempdir prefix, fix test coverage
mnriem
committed
fix: KeyboardInterrupt safety, corrupted entry repair, disabled run guard
mnriem
committed
fix: check disabled before load, streaming download, tolerate cleanup
mnriem
committed
fix: reject non-HTTPS redirects before following, validate workflow ID format
mnriem
committed
fix: remove unused import, reject source+--from, broaden version parsing
mnriem
committed
fix: atomic registry save, registry snapshot rollback, hidden backup dir
mnriem
committed
fix: tighten test assertion for --dev missing path
mnriem
committed
fix: check disabled by definition.id, reload registry after rollback, reuse _ID_PATTERN
mnriem
committed
fix: temp file cleanup on download failure, rollback without backup
mnriem
committed
fix: expose public is_valid_workflow_id() instead of importing private _ID_PATTERN
mnriem
committed
fix: prevent SSRF via redirect to loopback, preserve description on update
mnriem
committed
fix: surface catalog errors in update, clean up save() imports
mnriem
committed
fix: preserve file permissions on atomic registry save
mnriem
committed
fix: deepcopy fields in Registry.update(), ensure installed_at exists
mnriem
committed
fix: validate absolute redirect URL, raise KeyError on missing workflow
mnriem
committed
fix: descriptive KeyError, preserve installed_at unconditionally, carry catalog description
mnriem
committed
fix: address review — single timestamp, descriptive URL error, skipped count
mnriem
committed
fix: normalize installed_at timestamp, guard .backup against symlinks
mnriem
committed
fix: update error messages to say localhost/loopback
mnriem
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(workflows): align CLI commands with extension/preset pattern#2353

feat(workflows): align CLI commands with extension/preset pattern#2353
mnriem wants to merge 26 commits into
github:mainfrom
mnriem:feat/workflow-cli-alignment-2342

Commits on Apr 24, 2026

feat(workflows): align CLI commands with extension/preset pattern

fix: address PR review feedback from Copilot

fix: address second round of PR review feedback

fix: address third round of PR review feedback

fix: address fourth round of PR review feedback

fix: harden WorkflowRegistry against corrupted JSON

fix: validate source URL scheme in _download_validated before opening

fix: reorder validation, safe tempdir prefix, fix test coverage

fix: KeyboardInterrupt safety, corrupted entry repair, disabled run guard

fix: check disabled before load, streaming download, tolerate cleanup

fix: reject non-HTTPS redirects before following, validate workflow ID format

fix: remove unused import, reject source+--from, broaden version parsing

fix: atomic registry save, registry snapshot rollback, hidden backup dir

fix: tighten test assertion for --dev missing path

fix: check disabled by definition.id, reload registry after rollback, reuse _ID_PATTERN

fix: temp file cleanup on download failure, rollback without backup

fix: expose public is_valid_workflow_id() instead of importing private _ID_PATTERN

fix: prevent SSRF via redirect to loopback, preserve description on update

fix: surface catalog errors in update, clean up save() imports

fix: preserve file permissions on atomic registry save

fix: deepcopy fields in Registry.update(), ensure installed_at exists

fix: validate absolute redirect URL, raise KeyError on missing workflow

fix: descriptive KeyError, preserve installed_at unconditionally, carry catalog description

fix: address review — single timestamp, descriptive URL error, skipped count

fix: normalize installed_at timestamp, guard .backup against symlinks

fix: update error messages to say localhost/loopback