chore: import upstream snapshot with attribution

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,38 @@
+---
+name: Bug 报告 / Bug Report
+about: 报告项目中的错误或问题 / Report errors or issues in the project
+title: "[BUG] 简洁阐述问题 / Concise description of the issue"
+labels: bug
+assignees: ''
+
+---
+
+**问题描述 / Problem Description**
+用简洁明了的语言描述这个问题 / Describe the problem in a clear and concise manner.
+
+**复现问题的步骤 / Steps to Reproduce**
+1. 执行 '...' / Run '...'
+2. 点击 '...' / Click '...'
+3. 滚动到 '...' / Scroll to '...'
+4. 问题出现 / Problem occurs
+
+**预期的结果 / Expected Result**
+描述应该出现的结果 / Describe the expected result.
+
+**实际结果 / Actual Result**
+描述实际发生的结果 / Describe the actual result.
+
+**环境信息 / Environment Information**
+- Langchain-Chatchat 版本 / commit 号：(例如：0.3.1 或 commit 123456) / Langchain-Chatchat version / commit number: (e.g., 0.3.1 or commit 123456)
+- 部署方式（pypi 安装 / 源码部署 / docker 部署）：pypi 安装 / Deployment method (pypi installation / dev deployment / docker deployment): pypi installation
+- 使用的模型推理框架（Xinference / Ollama / OpenAI API 等）：Xinference / Model serve method（Xinference / Ollama / OpenAI API, etc.): Xinference 
+- 使用的 LLM 模型（GLM-4-9B / Qwen2-7B-Instruct 等）：GLM-4-9B / LLM used (GLM-4-9B / Qwen2-7B-Instruct, etc.): GLM-4-9B
+- 使用的 Embedding 模型（bge-large-zh-v1.5 / m3e-base 等）：bge-large-zh-v1.5 / Embedding model used (bge-large-zh-v1.5 / m3e-base, etc.): bge-large-zh-v1.5
+- 使用的向量库类型 (faiss / milvus / pg_vector 等)： faiss / Vector library used (faiss, milvus, pg_vector, etc.): faiss
+- 操作系统及版本 / Operating system and version: MacOS
+- Python 版本 / Python version: 3.8
+- 推理使用的硬件（GPU / CPU / MPS / NPU 等） / Inference hardware (GPU / CPU / MPS / NPU, etc.): GPU 
+- 其他相关环境信息 / Other relevant environment information:
+
+**附加信息 / Additional Information**
+添加与问题相关的任何其他信息 / Add any other information related to the issue.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,23 @@
+---
+name: 功能请求 / Feature Request
+about: 为项目提出新功能或建议 / Propose new features or suggestions for the project
+title: "[FEATURE] 简洁阐述功能 / Concise description of the feature"
+labels: enhancement
+assignees: ''
+
+---
+
+**功能描述 / Feature Description**
+用简洁明了的语言描述所需的功能 / Describe the desired feature in a clear and concise manner.
+
+**解决的问题 / Problem Solved**
+解释此功能如何解决现有问题或改进项目 / Explain how this feature solves existing problems or improves the project.
+
+**实现建议 / Implementation Suggestions**
+如果可能，请提供关于如何实现此功能的建议 / If possible, provide suggestions on how to implement this feature.
+
+**替代方案 / Alternative Solutions**
+描述您考虑过的替代方案 / Describe alternative solutions you have considered.
+
+**其他信息 / Additional Information**
+添加与功能请求相关的任何其他信息 / Add any other information related to the feature request.

.github/actions/poetry_setup/action.yml

@@ -0,0 +1,93 @@
+# An action for setting up poetry install with caching.
+# Using a custom action since the default action does not
+# take poetry install groups into account.
+# Action code from:
+# https://github.com/actions/setup-python/issues/505#issuecomment-1273013236
+name: poetry-install-with-caching
+description: Poetry install with support for caching of dependency groups.
+
+inputs:
+  python-version:
+    description: Python version, supporting MAJOR.MINOR only
+    required: true
+
+  poetry-version:
+    description: Poetry version
+    required: true
+
+  cache-key:
+    description: Cache key to use for manual handling of caching
+    required: true
+
+  working-directory:
+    description: Directory whose poetry.lock file should be cached
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - uses: actions/setup-python@v5
+      name: Setup python ${{ inputs.python-version }}
+      id: setup-python
+      with:
+        python-version: ${{ inputs.python-version }}
+
+    - uses: actions/cache@v4
+      id: cache-bin-poetry
+      name: Cache Poetry binary - Python ${{ inputs.python-version }}
+      env:
+        SEGMENT_DOWNLOAD_TIMEOUT_MIN: "1"
+      with:
+        path: |
+          /opt/pipx/venvs/poetry
+        # This step caches the poetry installation, so make sure it's keyed on the poetry version as well.
+        key: bin-poetry-${{ runner.os }}-${{ runner.arch }}-py-${{ inputs.python-version }}-${{ inputs.poetry-version }}
+
+    - name: Refresh shell hashtable and fixup softlinks
+      if: steps.cache-bin-poetry.outputs.cache-hit == 'true'
+      shell: bash
+      env:
+        POETRY_VERSION: ${{ inputs.poetry-version }}
+        PYTHON_VERSION: ${{ inputs.python-version }}
+      run: |
+        set -eux
+
+        # Refresh the shell hashtable, to ensure correct `which` output.
+        hash -r
+
+        # `actions/cache@v3` doesn't always seem able to correctly unpack softlinks.
+        # Delete and recreate the softlinks pipx expects to have.
+        rm /opt/pipx/venvs/poetry/bin/python
+        cd /opt/pipx/venvs/poetry/bin
+        ln -s "$(which "python$PYTHON_VERSION")" python
+        chmod +x python
+        cd /opt/pipx_bin/
+        ln -s /opt/pipx/venvs/poetry/bin/poetry poetry
+        chmod +x poetry
+
+        # Ensure everything got set up correctly.
+        /opt/pipx/venvs/poetry/bin/python --version
+        /opt/pipx_bin/poetry --version
+
+    - name: Install poetry
+      if: steps.cache-bin-poetry.outputs.cache-hit != 'true'
+      shell: bash
+      env:
+        POETRY_VERSION: ${{ inputs.poetry-version }}
+        PYTHON_VERSION: ${{ inputs.python-version }}
+      # Install poetry using the python version installed by setup-python step.
+      run: pipx install "poetry==$POETRY_VERSION" --python '${{ steps.setup-python.outputs.python-path }}' --verbose
+
+    - name: Restore pip and poetry cached dependencies
+      uses: actions/cache@v4
+      env:
+        SEGMENT_DOWNLOAD_TIMEOUT_MIN: "4"
+        WORKDIR: ${{ inputs.working-directory == '' && '.' || inputs.working-directory }}
+      with:
+        path: |
+          ~/.cache/pip
+          ~/.cache/pypoetry/virtualenvs
+          ~/.cache/pypoetry/cache
+          ~/.cache/pypoetry/artifacts
+          ${{ env.WORKDIR }}/.venv
+        key: py-deps-${{ runner.os }}-${{ runner.arch }}-py-${{ inputs.python-version }}-poetry-${{ inputs.poetry-version }}-${{ inputs.cache-key }}-${{ hashFiles(format('{0}/**/poetry.lock', env.WORKDIR)) }}

.github/workflows/_integration_test.yml

@@ -0,0 +1,91 @@
+name: integration_test
+
+on:
+  workflow_dispatch:
+    inputs:
+      working-directory:
+        required: true
+        type: string
+        default: './libs/chatchat-server'
+        description: "From which folder this pipeline executes"
+
+env:
+  POETRY_VERSION: "1.7.1"
+
+jobs:
+  build:
+    defaults:
+      run:
+        working-directory: ${{ inputs.working-directory }}
+    if: github.ref == 'refs/heads/master'
+    environment: Scheduled testing publish
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+        python-version: ["3.8", "3.9", "3.10", "3.11"]
+
+    name: "make integration_test #${{ matrix.os }} Python ${{ matrix.python-version }}"
+    steps:
+        - uses: actions/checkout@v4
+
+        - name: Set up Python ${{ matrix.python-version }} + Poetry ${{ env.POETRY_VERSION }}
+          uses: "./.github/actions/poetry_setup"
+          with:
+            python-version: ${{ matrix.python-version }}
+            poetry-version: ${{ env.POETRY_VERSION }}
+            working-directory: ${{ inputs.working-directory }}
+            cache-key: core
+
+
+        - name: Import test dependencies
+          run: poetry install --with test
+          working-directory: ${{ inputs.working-directory }}
+
+        - name: Run integration tests
+          shell: bash
+          env:
+            ZHIPUAI_API_KEY: ${{ secrets.ZHIPUAI_API_KEY }}
+            ZHIPUAI_BASE_URL: ${{ secrets.ZHIPUAI_BASE_URL }}
+          run: |
+            make integration_tests
+
+
+        - name: Remove chatchat Test Untracked files (Linux/macOS)
+          if: runner.os != 'Windows'
+          working-directory: ${{ inputs.working-directory }}
+          run: |
+            if [ -d "tests/unit_tests/config/chatchat/" ]; then
+              rm -rf tests/unit_tests/config/chatchat/
+            fi
+
+        - name: Remove chatchat Test Untracked files (Windows)
+          if: runner.os == 'Windows'
+          working-directory: ${{ inputs.working-directory }}
+          run: |
+            if (Test-Path -Path "tests/unit_tests/config/chatchat/") {
+              Remove-Item -Recurse -Force "tests/unit_tests/config/chatchat/"
+            }
+
+        - name: Ensure the tests did not create any additional files (Linux/macOS)
+          if: runner.os != 'Windows'
+          shell: bash
+          run: |
+            set -eu
+            
+            STATUS="$(git status)"
+            echo "$STATUS"
+            
+            # grep will exit non-zero if the target message isn't found,
+            # and `set -e` above will cause the step to fail.
+            echo "$STATUS" | grep 'nothing to commit, working tree clean'
+
+        - name: Ensure the tests did not create any additional files (Windows)
+          if: runner.os == 'Windows'
+          shell: powershell
+          run: |
+            $STATUS = git status
+            Write-Host $STATUS
+            
+            # Select-String will exit non-zero if the target message isn't found.
+            $STATUS | Select-String 'nothing to commit, working tree clean'

.github/workflows/_release.yml

@@ -0,0 +1,257 @@
+name: release
+run-name: Release ${{ inputs.working-directory }} by @${{ github.actor }}
+on:
+  workflow_call:
+    inputs:
+      working-directory:
+        required: true
+        type: string
+        description: "From which folder this pipeline executes"
+  workflow_dispatch:
+    inputs:
+      working-directory:
+        required: true
+        type: string
+        default: './libs/chatchat-server'
+        description: "From which folder this pipeline executes"
+env:
+  PYTHON_VERSION: "3.8"
+  POETRY_VERSION: "1.7.1"
+
+
+jobs:
+  build:
+    if: github.ref == 'refs/heads/master'
+    environment: Scheduled testing
+    runs-on: ubuntu-latest
+
+    outputs:
+      pkg-name: ${{ steps.check-version.outputs.pkg-name }}
+      version: ${{ steps.check-version.outputs.version }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python + Poetry ${{ env.POETRY_VERSION }}
+        uses: "./.github/actions/poetry_setup"
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+          poetry-version: ${{ env.POETRY_VERSION }}
+          working-directory: ${{ inputs.working-directory }}
+          cache-key: release
+
+      # We want to keep this build stage *separate* from the release stage,
+      # so that there's no sharing of permissions between them.
+      # The release stage has trusted publishing and GitHub repo contents write access,
+      # and we want to keep the scope of that access limited just to the release job.
+      # Otherwise, a malicious `build` step (e.g. via a compromised dependency)
+      # could get access to our GitHub or PyPI credentials.
+      #
+      # Per the trusted publishing GitHub Action:
+      # > It is strongly advised to separate jobs for building [...]
+      # > from the publish job.
+      # https://github.com/pypa/gh-action-pypi-publish#non-goals
+      - name: Build project for distribution
+        run: poetry build
+        working-directory: ${{ inputs.working-directory }}
+
+      - name: Upload build
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: ${{ inputs.working-directory }}/dist/
+
+      - name: Check Version
+        id: check-version
+        shell: bash
+        working-directory: ${{ inputs.working-directory }}
+        run: |
+          echo pkg-name="$(poetry version | cut -d ' ' -f 1)" >> $GITHUB_OUTPUT
+          echo version="$(poetry version --short)" >> $GITHUB_OUTPUT
+
+  test-pypi-publish:
+    needs:
+      - build
+    uses:
+      ./.github/workflows/_test_release.yml
+    with:
+      working-directory: ${{ inputs.working-directory }}
+    secrets: inherit
+
+  pre-release-checks:
+    needs:
+      - build
+      - test-pypi-publish
+    environment: Scheduled testing
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      # We explicitly *don't* set up caching here. This ensures our tests are
+      # maximally sensitive to catching breakage.
+      #
+      # For example, here's a way that caching can cause a falsely-passing test:
+      # - Make the chatchat package manifest no longer list a dependency package
+      #   as a requirement. This means it won't be installed by `pip install`,
+      #   and attempting to use it would cause a crash.
+      # - That dependency used to be required, so it may have been cached.
+      #   When restoring the venv packages from cache, that dependency gets included.
+      # - Tests pass, because the dependency is present even though it wasn't specified.
+      # - The package is published, and it breaks on the missing dependency when
+      #   used in the real world.
+
+      - name: Set up Python + Poetry ${{ env.POETRY_VERSION }}
+        uses: "./.github/actions/poetry_setup"
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+          poetry-version: ${{ env.POETRY_VERSION }}
+          working-directory: ${{ inputs.working-directory }}
+
+      - name: Import published package
+        shell: bash
+        working-directory: ${{ inputs.working-directory }}
+        env:
+          PKG_NAME: ${{ needs.build.outputs.pkg-name }}
+          VERSION: ${{ needs.build.outputs.version }}
+        # Here we use:
+        # - The default regular PyPI index as the *primary* index, meaning
+        #   that it takes priority (https://pypi.org/simple)
+        # - The test PyPI index as an extra index, so that any dependencies that
+        #   are not found on test PyPI can be resolved and installed anyway.
+        #   (https://test.pypi.org/simple). This will include the PKG_NAME==VERSION
+        #   package because VERSION will not have been uploaded to regular PyPI yet.
+        # - attempt install again after 5 seconds if it fails because there is
+        #   sometimes a delay in availability on test pypi
+        run: |
+          poetry run pip install \
+            --extra-index-url https://test.pypi.org/simple/ \
+            "$PKG_NAME==$VERSION" || \
+          ( \
+            sleep 5 && \
+            poetry run pip install \
+              --extra-index-url https://test.pypi.org/simple/ \
+              "$PKG_NAME==$VERSION" \
+          )
+
+          # Replace all dashes in the package name with underscores,
+          # since that's how Python imports packages with dashes in the name.
+          IMPORT_NAME="$(echo "$PKG_NAME" | sed s/-/_/g)"
+
+          poetry run python -c "import $IMPORT_NAME; print(dir($IMPORT_NAME))"
+
+      - name: Import test dependencies
+        run: poetry install --with test
+        working-directory: ${{ inputs.working-directory }}
+
+      # Overwrite the local version of the package with the test PyPI version.
+      - name: Import published package (again)
+        working-directory: ${{ inputs.working-directory }}
+        shell: bash
+        env:
+          PKG_NAME: ${{ needs.build.outputs.pkg-name }}
+          VERSION: ${{ needs.build.outputs.version }}
+        run: |
+          poetry run pip install \
+            --extra-index-url https://test.pypi.org/simple/ \
+            "$PKG_NAME==$VERSION"
+
+      - name: Run unit tests
+        run: make tests
+        env:
+          ZHIPUAI_API_KEY: ${{ secrets.ZHIPUAI_API_KEY }}
+          ZHIPUAI_BASE_URL: ${{ secrets.ZHIPUAI_BASE_URL }}
+        working-directory: ${{ inputs.working-directory }}
+
+#      - name: Run integration tests
+#        env:
+#          ZHIPUAI_API_KEY: ${{ secrets.ZHIPUAI_API_KEY }}
+#          ZHIPUAI_BASE_URL: ${{ secrets.ZHIPUAI_BASE_URL }}
+#        run: make integration_tests
+#        working-directory: ${{ inputs.working-directory }}
+
+  publish:
+    needs:
+      - build
+      - test-pypi-publish
+      - pre-release-checks
+    environment: Scheduled testing
+    runs-on: ubuntu-latest
+
+
+    defaults:
+      run:
+        working-directory: ${{ inputs.working-directory }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python + Poetry ${{ env.POETRY_VERSION }}
+        uses: "./.github/actions/poetry_setup"
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+          poetry-version: ${{ env.POETRY_VERSION }}
+          working-directory: ${{ inputs.working-directory }}
+          cache-key: release
+
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: ${{ inputs.working-directory }}/dist/
+
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: ${{ inputs.working-directory }}/dist/
+          verbose: true
+          print-hash: true
+          user: __token__
+          password: ${{ secrets.PYPI_API_TOKEN }}
+          # We overwrite any existing distributions with the same name and version.
+          # This is *only for CI use* and is *extremely dangerous* otherwise!
+          # https://github.com/pypa/gh-action-pypi-publish#tolerating-release-package-file-duplicates
+#          skip-existing: true
+
+  # mark-release:
+  #   needs:
+  #     - build
+  #     - test-pypi-publish
+  #     - pre-release-checks
+  #     - publish
+  #   environment: Scheduled testing
+  #   runs-on: ubuntu-latest
+  #   permissions:
+  #     # This permission is needed by `ncipollo/release-action` to
+  #     # create the GitHub release.
+  #     contents: write
+  #     id-token: none
+
+  #   defaults:
+  #     run:
+  #       working-directory: ${{ inputs.working-directory }}
+
+  #   steps:
+  #     - uses: actions/checkout@v4
+
+  #     - name: Set up Python + Poetry ${{ env.POETRY_VERSION }}
+  #       uses: "./.github/actions/poetry_setup"
+  #       with:
+  #         python-version: ${{ env.PYTHON_VERSION }}
+  #         poetry-version: ${{ env.POETRY_VERSION }}
+  #         working-directory: ${{ inputs.working-directory }}
+  #         cache-key: release
+
+  #     - uses: actions/download-artifact@v4
+  #       with:
+  #         name: dist
+  #         path: ${{ inputs.working-directory }}/dist/
+
+  #     - name: Create Release
+  #       uses: ncipollo/release-action@v1
+  #       if: ${{ inputs.working-directory == './chatchat-server' }}
+  #       with:
+  #         artifacts: "dist/*"
+  #         token: ${{ secrets.GITHUB_TOKEN }}
+  #         draft: false
+  #         generateReleaseNotes: true
+  #         tag: v${{ needs.build.outputs.version }}
+  #         commit: main

.github/workflows/_test.yml

@@ -0,0 +1,85 @@
+name: test
+
+on:
+  workflow_dispatch:
+    inputs:
+      working-directory:
+        required: true
+        type: string
+        default: './libs/chatchat-server'
+        description: "From which folder this pipeline executes"
+
+env:
+  POETRY_VERSION: "1.7.1"
+
+jobs:
+  build:
+    defaults:
+      run:
+        working-directory: ${{ inputs.working-directory }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+        python-version: ["3.8", "3.9", "3.10", "3.11"]
+
+    name: "make test #${{ matrix.os }} Python ${{ matrix.python-version }}"
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }} + Poetry ${{ env.POETRY_VERSION }}
+        uses: "./.github/actions/poetry_setup"
+        with:
+          python-version: ${{ matrix.python-version }}
+          poetry-version: ${{ env.POETRY_VERSION }}
+          working-directory: ${{ inputs.working-directory }}
+          cache-key: core
+
+      - name: Install chatchat editable
+        working-directory: ${{ inputs.working-directory }}
+        shell: bash
+        run: poetry install --with test
+
+      - name: Run core tests
+        shell: bash
+        run: |
+          make test
+
+      - name: Remove chatchat Test Untracked files (Linux/macOS)
+        if: runner.os != 'Windows'
+        working-directory: ${{ inputs.working-directory }}
+        run: |
+          if [ -d "tests/unit_tests/config/chatchat/" ]; then
+            rm -rf tests/unit_tests/config/chatchat/
+          fi
+
+      - name: Remove chatchat Test Untracked files (Windows)
+        if: runner.os == 'Windows'
+        working-directory: ${{ inputs.working-directory }}
+        run: |
+          if (Test-Path -Path "tests/unit_tests/config/chatchat/") {
+            Remove-Item -Recurse -Force "tests/unit_tests/config/chatchat/"
+          }
+
+      - name: Ensure the tests did not create any additional files (Linux/macOS)
+        if: runner.os != 'Windows'
+        shell: bash
+        run: |
+          set -eu
+
+          STATUS="$(git status)"
+          echo "$STATUS"
+
+          # grep will exit non-zero if the target message isn't found,
+          # and `set -e` above will cause the step to fail.
+          echo "$STATUS" | grep 'nothing to commit, working tree clean'
+
+      - name: Ensure the tests did not create any additional files (Windows)
+        if: runner.os == 'Windows'
+        shell: powershell
+        run: |
+          $STATUS = git status
+          Write-Host $STATUS
+
+          # Select-String will exit non-zero if the target message isn't found.
+          $STATUS | Select-String 'nothing to commit, working tree clean'

.github/workflows/_test_release.yml

@@ -0,0 +1,90 @@
+name: test-release
+
+on:
+  workflow_call:
+    inputs:
+      working-directory:
+        required: true
+        type: string
+        description: "From which folder this pipeline executes"
+
+env:
+  POETRY_VERSION: "1.7.1"
+  PYTHON_VERSION: "3.8"
+
+jobs:
+  build:
+    if: github.ref == 'refs/heads/master'
+    runs-on: ubuntu-latest
+
+    outputs:
+      pkg-name: ${{ steps.check-version.outputs.pkg-name }}
+      version: ${{ steps.check-version.outputs.version }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python + Poetry ${{ env.POETRY_VERSION }}
+        uses: "./.github/actions/poetry_setup"
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+          poetry-version: ${{ env.POETRY_VERSION }}
+          working-directory: ${{ inputs.working-directory }}
+          cache-key: release
+
+      # We want to keep this build stage *separate* from the release stage,
+      # so that there's no sharing of permissions between them.
+      # The release stage has trusted publishing and GitHub repo contents write access,
+      # and we want to keep the scope of that access limited just to the release job.
+      # Otherwise, a malicious `build` step (e.g. via a compromised dependency)
+      # could get access to our GitHub or PyPI credentials.
+      #
+      # Per the trusted publishing GitHub Action:
+      # > It is strongly advised to separate jobs for building [...]
+      # > from the publish job.
+      # https://github.com/pypa/gh-action-pypi-publish#non-goals
+      - name: Build project for distribution
+        run: poetry build
+        working-directory: ${{ inputs.working-directory }}
+
+      - name: Upload build
+        uses: actions/upload-artifact@v4
+        with:
+          name: test-dist
+          path: ${{ inputs.working-directory }}/dist/
+
+      - name: Check Version
+        id: check-version
+        shell: bash
+        working-directory: ${{ inputs.working-directory }}
+        run: |
+          echo pkg-name="$(poetry version | cut -d ' ' -f 1)" >> $GITHUB_OUTPUT
+          echo version="$(poetry version --short)" >> $GITHUB_OUTPUT
+
+  publish:
+    needs:
+      - build
+    runs-on: ubuntu-latest
+    environment: Scheduled test pypi publish
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/download-artifact@v4
+        with:
+          name: test-dist
+          path: ${{ inputs.working-directory }}/dist/
+
+      - name: Publish to test PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          user: __token__
+          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
+          packages-dir: ${{ inputs.working-directory }}/dist/
+          verbose: true
+          print-hash: true
+          repository-url: https://test.pypi.org/legacy/
+          # We overwrite any existing distributions with the same name and version.
+          # This is *only for CI use* and is *extremely dangerous* otherwise!
+          # https://github.com/pypa/gh-action-pypi-publish#tolerating-release-package-file-duplicates
+#          skip-existing: true

.github/workflows/close-issue.yml

@@ -0,0 +1,22 @@
+name: Close inactive issues
+on:
+  schedule:
+    - cron: "30 21 * * *"
+
+jobs:
+  close-issues:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+    steps:
+      - uses: actions/stale@v5
+        with:
+          days-before-issue-stale: 30
+          days-before-issue-close: 14
+          stale-issue-label: "stale"
+          stale-issue-message: "这个问题已经被标记为 `stale` ，因为它已经超过 30 天没有任何活动。"
+          close-issue-message: "这个问题已经被自动关闭，因为它被标为 `stale` 后超过 14 天没有任何活动。"
+          days-before-pr-stale: -1
+          days-before-pr-close: -1
+          repo-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/label_ad_issue.yml

@@ -0,0 +1,32 @@
+name: label_ad_issue
+
+on:
+  issues:
+    types:
+      - opened
+
+jobs:
+  label_ad_issue:
+    runs-on: ubuntu-latest
+
+    environment: Scheduled GITHUB_OWNER publish
+    steps:
+      - env:
+          GH_TOKEN: ${{ secrets.GITHUB_OWNER_TOKEN }}
+          ISSUE_URL: ${{ github.event.issue.html_url }}
+          ISSUE_TITLE: ${{ github.event.issue.title }}
+        run: |
+          stat=no
+          AD_KEYWORDS=(download crack "serial key" "license key" "product key" "free download" "full version" "full crack" "full keygen" "full license" "full activation" "full serial")
+          ISSUE_TITLE_LOWER=$(echo $ISSUE_TITLE | tr '[:upper:]' '[:lower:]')
+          for KEYWORD in ${AD_KEYWORDS[@]}; do
+            if [[ $ISSUE_TITLE_LOWER == *$KEYWORD* ]] && [[ $ISSUE_TITLE_LOWER != *input* ]]; then
+              stat=yes
+              break
+            fi
+          done
+          if [[ $stat == yes ]]; then
+            echo "Issue title contains advertisement keywords."
+          
+            gh issue delete $ISSUE_URL --yes 
+          fi