fix: make release sidecar build work in ci

Author: linhay

docs-linhay/dev/20260426-release-prep-guide.md

@@ -36,6 +36,12 @@
 对应脚本：
 - `scripts/build-sidecar.sh <goos> <goarch> <output-dir>`
 
+补充：
+
+1. 本地开发默认优先使用 `docs-linhay/references/CLIProxyAPI`
+2. CI runner 若没有该目录，脚本会自动 clone `https://github.com/linhay/CLIProxyAPI.git`
+3. 默认构建分支为 `gettokens/wham-token-fix`，可通过 `CLI_PROXY_SOURCE_REF` 覆盖
+
 示例：
 
 ```bash

docs-linhay/memory/2026-04-26.md

@@ -152,3 +152,7 @@
 - 额外发现：Wails `darwin/universal` 打包后，`GetTokens.app/Contents/MacOS/cli-proxy-api` 会退回单架构副本；因此 workflow 需要在 `wails build` 之后显式把 `build/bin/cli-proxy-api` 覆盖回 app bundle，再进入签名与 DMG。
 - Release v0.1.1 已完成本地正式签名公证验证：`GetTokens.app` notarization submission `f408535a-17b1-4390-8833-144fb05cfcce` Accepted，`GetTokens_darwin_universal.dmg` submission `67381bcb-427e-4d4a-bed8-4fa66a8a5e1c` Accepted，`stapler validate` 通过。
 - 本轮发布版本同步到 `frontend/package.json@0.1.1` / `frontend/package-lock.json@0.1.1`，准备以 git tag `v0.1.1` 触发 GitHub Release workflow。
+- `v0.1.1` 的 GitHub Release workflow 失败根因已定位：runner checkout 不包含 `docs-linhay/references/CLIProxyAPI`，导致 `scripts/build-sidecar.sh` 在 CI 上找不到 fork 源码目录。
+- 已修正 `scripts/build-sidecar.sh`：本地优先用 `docs-linhay/references/CLIProxyAPI`，CI 缺目录时自动 clone `linhay/CLIProxyAPI#gettokens/wham-token-fix` 再构建 sidecar，避免 workflow 依赖未纳入 git 的本地参考目录。
+- 修正验证已完成：通过 `CLI_PROXY_SOURCE_DIR=/tmp/gettokens-missing-source ./scripts/build-sidecar.sh darwin arm64 /tmp/gettokens-sidecar-clone-verify` 覆盖了 CI 回退路径，确认自动 clone fork 后可以正常构建并退出。
+- 发布版本继续上调到 `v0.1.2`，避免复用已失败的 `v0.1.1` tag。

frontend/package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "gettokens-frontend",
   "private": true,
-  "version": "0.1.1",
+  "version": "0.1.2",
   "type": "module",
   "scripts": {
     "dev": "vite",

frontend/package.json

@@ -1 +1 @@
-eeceab8a0dae6629403dcfd4cc741ee1
+cf32875b7317ee64da4c6d80843c2f5b

frontend/package.json.md5

@@ -12,21 +12,35 @@ OUTPUT_DIR="$3"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ROOT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
 SOURCE_DIR="${CLI_PROXY_SOURCE_DIR:-${ROOT_DIR}/docs-linhay/references/CLIProxyAPI}"
+SOURCE_REPO="${CLI_PROXY_SOURCE_REPO:-https://github.com/linhay/CLIProxyAPI.git}"
+SOURCE_REF="${CLI_PROXY_SOURCE_REF:-gettokens/wham-token-fix}"
 BINARY_NAME="cli-proxy-api"
+TEMP_SOURCE_DIR=""
+STAGE_DIR=""
 
 if [[ "$GOOS" == "windows" ]]; then
   BINARY_NAME="${BINARY_NAME}.exe"
 fi
 
-if [[ ! -d "${SOURCE_DIR}" ]]; then
-  echo "CLIProxyAPI source dir not found: ${SOURCE_DIR}" >&2
-  exit 1
-fi
+ensure_source_dir() {
+  if [[ -f "${SOURCE_DIR}/go.mod" ]]; then
+    return 0
+  fi
 
-if [[ ! -f "${SOURCE_DIR}/go.mod" ]]; then
-  echo "CLIProxyAPI source dir is missing go.mod: ${SOURCE_DIR}" >&2
-  exit 1
-fi
+  TEMP_SOURCE_DIR="$(mktemp -d)"
+
+  echo "→ CLIProxyAPI source missing locally, cloning ${SOURCE_REPO}#${SOURCE_REF}" >&2
+  git clone --depth 1 --branch "${SOURCE_REF}" "${SOURCE_REPO}" "${TEMP_SOURCE_DIR}/CLIProxyAPI" >&2
+  SOURCE_DIR="${TEMP_SOURCE_DIR}/CLIProxyAPI"
+
+  if [[ ! -f "${SOURCE_DIR}/go.mod" ]]; then
+    echo "CLIProxyAPI source dir is missing go.mod after clone: ${SOURCE_DIR}" >&2
+    exit 1
+  fi
+}
+
+ensure_source_dir
+trap 'rm -rf "${TEMP_SOURCE_DIR}" "${STAGE_DIR}"' EXIT
 
 resolve_git_value() {
   local cmd="$1"
@@ -65,7 +79,6 @@ case "${GOOS}:${GOARCH}" in
     fi
 
     STAGE_DIR="$(mktemp -d)"
-    trap 'rm -rf "${STAGE_DIR}"' EXIT
 
     ARM64_PATH="${STAGE_DIR}/cli-proxy-api-arm64"
     AMD64_PATH="${STAGE_DIR}/cli-proxy-api-amd64"