feat: extend main-server artifact consumers

scripts/src/ci.ts

@@ -29,6 +29,14 @@ const ciRuntimeImages = [
   "alpine/git:2.45.2",
   ciCodeQueueImage,
 ];
+const publishUserServiceArtifactAllowedServiceIds = new Set([
+  "baidu-netdisk",
+  "code-queue-mgr",
+  "decision-center",
+  "frontend",
+  "oa-event-flow",
+  "project-manager",
+]);
 
 interface CiOptions {
   repoUrl: string;
@@ -213,7 +221,10 @@ function requireSupportedUserService(config: UniDeskConfig, serviceId: string):
   const isMainServerDirectService = service.providerId === "main-server"
     && service.development.providerId === "main-server"
     && service.deployment.mode === "unidesk-direct";
-  if (!isD601K3sService && !isMainServerDirectService) {
+  const isMainServerInternalSidecar = service.providerId === "main-server"
+    && service.development.providerId === "main-server"
+    && service.deployment.mode === "internal-sidecar";
+  if (!isD601K3sService && !isMainServerDirectService && !isMainServerInternalSidecar) {
     throw new Error(`ci publish-user-service supports only reviewed k3sctl-managed D601 services or main-server unidesk-direct services; ${serviceId} is ${service.providerId}/${service.deployment.mode}`);
   }
   return service;
@@ -1539,8 +1550,8 @@ export async function runCiCommand(config: UniDeskConfig, args: string[]): Promi
     const waitMs = numberOption(args, "--wait-ms", 0);
     const dryRun = boolFlag(args, "--dry-run");
     const dockerfile = requireRepoRelativePath(target.dockerfile, serviceId === "frontend" ? "frontend.dockerfile" : `microservices.${serviceId}.repository.dockerfile`);
-    if (!["baidu-netdisk", "decision-center", "frontend"].includes(serviceId)) {
-      throw new Error("ci publish-user-service currently allows only baidu-netdisk, decision-center, and frontend until each user-service Dockerfile contract is reviewed");
+    if (!publishUserServiceArtifactAllowedServiceIds.has(serviceId)) {
+      throw new Error(`ci publish-user-service currently allows only ${Array.from(publishUserServiceArtifactAllowedServiceIds).join(", ")} until each user-service Dockerfile contract is reviewed`);
     }
     return publishUserServiceArtifact(config, {
       repoUrl: target.repoUrl,