feat(ql3): establish 3.0 incubation baseline

2026-09-20 16:07:11 +08:00 · 2026-08-12 00:25:26 +08:00
parent 4bf92dcfeb
commit c699c32461
2817 changed files with 779642 additions and 653 deletions
@@ -0,0 +1,128 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { test } = require('node:test');
+
+const {
+  createLocalPluginPackagePromptCommandRunner,
+} = require('@qinglong/local-owner-cli/plugin-package-prompt-command');
+const {
+  createInitialPluginPackageAutomationPublication,
+} = require('@qinglong/runtime-core/plugin-package-automation-publication');
+const {
+  pluginPackageTaskReconciliationFixture,
+} = require('../../../test/contracts/pluginPackageTaskReconciliationRepositoryContract.cjs');
+
+test('Local prompt.inspect reads only the redacted catalog without activating AI', async (t) => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'ql3-prompt-catalog-'));
+  fs.chmodSync(root, 0o700);
+  t.after(() => fs.rmSync(root, { recursive: true, force: true }));
+  const source = pluginPackageTaskReconciliationFixture('local-prompt-catalog', {
+    prompts: [{
+      schema: 'qinglong/plugin-package-prompt-resource@v1',
+      id: 'summary',
+      name: 'Summary',
+      template: 'Private {{subject}} template.',
+      parameters: [{ name: 'subject', required: true }],
+    }],
+  });
+  const publication = createInitialPluginPackageAutomationPublication(
+    source.revision,
+    source.registry,
+    1_000,
+  );
+  const child = (name) => path.join(root, name);
+  const commandPath = child('command.json');
+  fs.writeFileSync(commandPath, JSON.stringify({
+    schemaVersion: 1,
+    operation: 'prompt.inspect',
+    options: {
+      deploymentRoot: root,
+      databasePath: child('qinglong3.sqlite'),
+      profile: 'edge',
+      ownerPepperKeyringDirectory: child('owner-keys'),
+      credentialFilePath: child('credential.json'),
+    },
+    request: {
+      projectId: publication.target.projectId,
+      packageName: publication.target.packageName,
+      requestId: 'prompt-catalog-request-1',
+      auditEventId: '00000000-0000-4000-8000-000000000001',
+      failureAuditEventId: '00000000-0000-4000-8000-000000000002',
+    },
+  }), { mode: 0o600 });
+
+  const audits = [];
+  let providerLoads = 0;
+  let closes = 0;
+  const principal = {
+    subject: { type: 'user', id: 'owner-1' },
+    authenticationId: 'credential-1',
+    authenticatedAtMs: 1,
+    expiresAtMs: 10_000,
+    assurance: 'local_console',
+  };
+  const runner = createLocalPluginPackagePromptCommandRunner({
+    async openDatabase() {
+      return {
+        projectPolicy: {
+          async resolve(projectId, subject) {
+            return {
+              project: {
+                id: projectId,
+                name: projectId,
+                slug: projectId,
+                status: 'active',
+                version: 1,
+                createdAtMs: 0,
+                updatedAtMs: 0,
+              },
+              binding: {
+                projectId,
+                subject,
+                version: 1,
+                state: 'active',
+                role: 'owner',
+                mutationId: 'grant-owner',
+                changedBy: subject,
+                createdAtMs: 0,
+              },
+            };
+          },
+          async append() { throw new Error('not used'); },
+        },
+        automationPublications: {
+          async findCurrent() { return publication; },
+        },
+        securityAudit: {
+          async record(audit) { audits.push(audit); },
+        },
+        authority: { client: {} },
+        async close() { closes += 1; },
+      };
+    },
+    async authenticate() {
+      return {
+        principal,
+        databaseFence: {},
+        async confirm() {},
+      };
+    },
+    async loadProviders() {
+      providerLoads += 1;
+      throw new Error('prompt.inspect must not load providers');
+    },
+    now: () => 2_000,
+  });
+
+  const result = await runner.run(commandPath);
+  assert.equal(result.operation, 'prompt.inspect');
+  assert.equal(result.found, true);
+  assert.equal(result.prompts[0].id, 'summary');
+  assert.equal(JSON.stringify(result).includes('Private'), false);
+  assert.equal(providerLoads, 0);
+  assert.equal(closes, 1);
+  assert.equal(audits.length, 1);
+  assert.equal(audits[0].operationId, 'prompt.inspect');
+});