feat(cli): cover OpenAPI with a remote npm CLI and internal panel tools (#3074)

* feat(cli): add unified Commander CLI for QingLong 2.x * fix(cli): publish via npm and address security review feedback * ci(cli): package npm artifacts and remove evaluation collateral * test(cli): use a fixed shell fixture for log retention * refactor(cli): separate remote npm client from panel tools * feat(cli): cover active panel OpenAPI resources * docs(cli): unify authentication and skill guidance * refactor(cli): isolate internal commands and generate Commander help * refactor(cli): organize remote and internal modules by responsibility * ci(cli): publish verified npm archives from master * fix(cli): publish under the whyour npm scope * ci: use npm trusted publishing for both packages * docs: introduce the published CLI on the project homepage * fix(cli): preserve server log truncation and correct login hints * fix(cli): accept dashboard record request bodies * fix(cli): preserve stdin for local task execution * fix(cli): resolve task executables after changing directory * fix(cli): preserve shell function tasks and sanitize test failures * fix(cli): preserve shell hook state and resolve workdir after hooks * fix(cli): preserve cleanup across shared shell task timeouts * fix(cli): isolate shell control descriptors and reap timed-out descendants
2026-10-01 05:13:50 +08:00 · 2026-09-25 23:24:41 +08:00
parent f051135fc4
commit 801a71d740
185 changed files with 22412 additions and 6 deletions
@@ -0,0 +1,57 @@
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs/promises');
+const os = require('node:os');
+const path = require('node:path');
+const { runProcess } = require('../../dist/internal/runtime/process');
+const { sourceEnvironment } = require('../../dist/internal/runtime/context');
+
+test('shell option restoration never rewrites -c passed as a script argument', async (t) => {
+  const root = await fs.mkdtemp(path.join(os.tmpdir(), 'ql-bash-argv-'));
+  t.after(() => fs.rm(root, { recursive: true, force: true }));
+  const script = path.join(root, 'script.sh');
+  await fs.writeFile(script, 'printf "%s\\0" "$@"\n');
+  const env = await sourceEnvironment({ PATH: process.env.PATH }, []);
+  const parameters = ['-c', 'literal $(printf injected)', '', 'space value'];
+  for (const prefix of [
+    [],
+    ['--'],
+    ['--noprofile', '--norc'],
+    ['-o', 'pipefail'],
+  ]) {
+    const result = await runProcess(
+      'bash',
+      [...prefix, script, ...parameters],
+      { env, capture: true },
+    );
+    assert.equal(result.code, 0);
+    assert.deepEqual(result.stdout.split('\0'), [...parameters, '']);
+  }
+});
+
+test('known Bash command forms restore options and preserve positional command arguments', async () => {
+  const env = await sourceEnvironment({ PATH: process.env.PATH }, [], [], {
+    command: 'set +o braceexpand',
+  });
+  for (const prefix of [[], ['--noprofile', '--norc']]) {
+    const result = await runProcess(
+      'bash',
+      [
+        ...prefix,
+        '-c',
+        'printf "%s\\0" {a,b} "$@"',
+        'fixture',
+        '-c',
+        'original command data',
+      ],
+      { env, capture: true },
+    );
+    assert.equal(result.code, 0);
+    assert.deepEqual(result.stdout.split('\0'), [
+      '{a,b}',
+      '-c',
+      'original command data',
+      '',
+    ]);
+  }
+});