feat(ql3): add bounded panel bootstrap

2026-09-22 19:29:13 +08:00 · 2026-09-02 11:30:42 +08:00
parent 83966a1287
commit 882ce07d7e
20 changed files with 1095 additions and 134 deletions
@@ -0,0 +1,150 @@
+const assert = require('node:assert/strict');
+const test = require('node:test');
+
+const {
+  createPanelBootstrapRoute,
+  panelCapabilities,
+  panelPublicResponse,
+} = require('../dist/panel-compatibility/panelBootstrapRoute.js');
+
+const PRINCIPAL = Object.freeze({
+  subject: Object.freeze({ type: 'user', id: 'owner' }),
+  authenticationId: 'auth:owner',
+  authenticatedAtMs: 1_787_200_000_000,
+  expiresAtMs: 1_787_200_060_000,
+  assurance: 'local_console',
+});
+
+test('publishes an exact profile-aware capability contract', () => {
+  const edge = panelCapabilities('edge');
+  const standalone = panelCapabilities('standalone');
+  assert.deepEqual(edge, {
+    schemaVersion: 1,
+    product: 'qinglong3',
+    version: '3.0.0-alpha.2',
+    deployment: { mode: 'local', profile: 'edge' },
+    authentication: {
+      kind: 'api_credential',
+      transport: 'bearer',
+      persistence: 'memory_only',
+      loginEndpoint: null,
+    },
+    project: { selection: 'explicit', defaultId: 'default' },
+    panel: {
+      bootstrap: true,
+      cronList: 'bounded_read_only',
+      taskRead: true,
+      triggerRead: true,
+      runRead: true,
+      runLogRead: true,
+      legacyMutations: false,
+      legacyLogin: false,
+      subscriptions: false,
+      scripts: false,
+      environmentVariables: false,
+      webSocket: false,
+    },
+    limits: {
+      cronRows: 64,
+      cronPageSize: 64,
+      logChunkBytes: 16 * 1_024,
+    },
+  });
+  assert.deepEqual(standalone.limits, {
+    cronRows: 256,
+    cronPageSize: 64,
+    logChunkBytes: 32 * 1_024,
+  });
+  assert.throws(() => panelCapabilities('cluster'));
+});
+
+test('serves public health, system and native capability envelopes', () => {
+  assert.deepEqual(panelPublicResponse('health', 'edge'), {
+    statusCode: 200,
+    body: {
+      code: 200,
+      data: {
+        status: 'ok',
+        ql3: {
+          schemaVersion: 1,
+          apiVersion: 'v3',
+          capabilitiesPath: '/api/v3/capabilities',
+        },
+      },
+    },
+  });
+  const system = panelPublicResponse('system', 'standalone');
+  assert.equal(system.body.code, 200);
+  assert.equal(system.body.data.isInitialized, true);
+  assert.equal(system.body.data.version, '3.0.0-alpha.2');
+  assert.equal(system.body.data.ql3.profile, 'standalone');
+  const capabilities = panelPublicResponse('capabilities', 'edge');
+  assert.equal(capabilities.body.capabilities.limits.cronRows, 64);
+});
+
+test('projects the authenticated principal and bounded panel configuration', async () => {
+  const route = createPanelBootstrapRoute('edge');
+  const user = await route.handle({
+    operationId: 'panel.user.get',
+    principal: PRINCIPAL,
+  });
+  assert.deepEqual(user, {
+    statusCode: 200,
+    body: {
+      code: 200,
+      data: {
+        username: 'owner',
+        ql3: {
+          schemaVersion: 1,
+          subjectType: 'user',
+          assurance: 'local_console',
+          expiresAtMs: 1_787_200_060_000,
+          credentialPersistence: 'memory_only',
+          panelHome: '/crontab',
+        },
+      },
+    },
+  });
+  const config = await route.handle({
+    operationId: 'panel.system.config.get',
+    principal: PRINCIPAL,
+  });
+  assert.equal(config.statusCode, 200);
+  assert.deepEqual(config.body.data.info, {
+    panelTitle: 'QingLong 3.0',
+    lang: 'zh-cn',
+  });
+  assert.equal(config.body.data.ql3.limits.cronRows, 64);
+});
+
+test('fails closed for invalid profile, principal and operation', async () => {
+  assert.throws(() => createPanelBootstrapRoute('cluster'));
+  const route = createPanelBootstrapRoute('standalone');
+  assert.equal(
+    (await route.handle({ operationId: 'panel.user.get', principal: null }))
+      .statusCode,
+    503,
+  );
+  assert.equal(
+    (
+      await route.handle({
+        operationId: 'panel.user.get',
+        principal: {
+          ...PRINCIPAL,
+          subject: { type: 'api_app', id: 'service' },
+          assurance: 'service',
+        },
+      })
+    ).statusCode,
+    503,
+  );
+  assert.equal(
+    (
+      await route.handle({
+        operationId: 'panel.unknown',
+        principal: PRINCIPAL,
+      })
+    ).statusCode,
+    503,
+  );
+});