feat(cli): cover OpenAPI with a remote npm CLI and internal panel tools (#3074)

* feat(cli): add unified Commander CLI for QingLong 2.x * fix(cli): publish via npm and address security review feedback * ci(cli): package npm artifacts and remove evaluation collateral * test(cli): use a fixed shell fixture for log retention * refactor(cli): separate remote npm client from panel tools * feat(cli): cover active panel OpenAPI resources * docs(cli): unify authentication and skill guidance * refactor(cli): isolate internal commands and generate Commander help * refactor(cli): organize remote and internal modules by responsibility * ci(cli): publish verified npm archives from master * fix(cli): publish under the whyour npm scope * ci: use npm trusted publishing for both packages * docs: introduce the published CLI on the project homepage * fix(cli): preserve server log truncation and correct login hints * fix(cli): accept dashboard record request bodies * fix(cli): preserve stdin for local task execution * fix(cli): resolve task executables after changing directory * fix(cli): preserve shell function tasks and sanitize test failures * fix(cli): preserve shell hook state and resolve workdir after hooks * fix(cli): preserve cleanup across shared shell task timeouts * fix(cli): isolate shell control descriptors and reap timed-out descendants
2026-10-18 18:33:06 +08:00 · 2026-09-25 23:24:41 +08:00
parent f051135fc4
commit 801a71d740
185 changed files with 22412 additions and 6 deletions
@@ -0,0 +1,51 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+
+// Linux preserves argv boundaries in cmdline. Resolve relative entrypoints from
+// each process's cwd, not from the operator's cwd or a broad ps substring match.
+export async function findDirectBackendPids(
+  entry: string,
+  procRoot = '/proc',
+): Promise<number[]> {
+  const expected = await fs
+    .realpath(entry)
+    .catch((error: NodeJS.ErrnoException) => {
+      if (error.code === 'ENOENT') return undefined;
+      throw error;
+    });
+  if (!expected) return [];
+  const matches: number[] = [];
+  for (const name of await fs.readdir(procRoot)) {
+    if (!/^[1-9]\d*$/.test(name)) continue;
+    const pid = Number(name);
+    if (!Number.isSafeInteger(pid) || pid === process.pid) continue;
+    const directory = path.join(procRoot, name);
+    try {
+      const command = await fs.readFile(
+        path.join(directory, 'cmdline'),
+        'utf8',
+      );
+      const args = command.split('\0');
+      if (args.at(-1) === '') args.pop();
+      // Both the legacy fallback and the TS fallback launch one script without
+      // Node flags or application arguments. Reject other command shapes.
+      if (args.length !== 2 || !/^node(?:\d+)?$/.test(path.basename(args[0]!)))
+        continue;
+      const script = args[1]!;
+      if (!script) continue;
+      const absolute = path.isAbsolute(script)
+        ? script
+        : path.resolve(await fs.realpath(path.join(directory, 'cwd')), script);
+      if ((await fs.realpath(absolute)) === expected) matches.push(pid);
+    } catch (error) {
+      // Processes may exit while enumerating; foreign users can deny inspection.
+      if (
+        !['ENOENT', 'ESRCH', 'EACCES', 'EPERM'].includes(
+          (error as NodeJS.ErrnoException).code ?? '',
+        )
+      )
+        throw error;
+    }
+  }
+  return matches;
+}