mirror of
https://github.com/whyour/qinglong.git
synced 2026-09-28 09:02:12 +08:00
whyour
801a71d740
* feat(cli): add unified Commander CLI for QingLong 2.x * fix(cli): publish via npm and address security review feedback * ci(cli): package npm artifacts and remove evaluation collateral * test(cli): use a fixed shell fixture for log retention * refactor(cli): separate remote npm client from panel tools * feat(cli): cover active panel OpenAPI resources * docs(cli): unify authentication and skill guidance * refactor(cli): isolate internal commands and generate Commander help * refactor(cli): organize remote and internal modules by responsibility * ci(cli): publish verified npm archives from master * fix(cli): publish under the whyour npm scope * ci: use npm trusted publishing for both packages * docs: introduce the published CLI on the project homepage * fix(cli): preserve server log truncation and correct login hints * fix(cli): accept dashboard record request bodies * fix(cli): preserve stdin for local task execution * fix(cli): resolve task executables after changing directory * fix(cli): preserve shell function tasks and sanitize test failures * fix(cli): preserve shell hook state and resolve workdir after hooks * fix(cli): preserve cleanup across shared shell task timeouts * fix(cli): isolate shell control descriptors and reap timed-out descendants
74 lines
2.7 KiB
JavaScript
74 lines
2.7 KiB
JavaScript
const test = require('node:test');
|
|
const assert = require('node:assert/strict');
|
|
const fs = require('node:fs/promises');
|
|
const os = require('node:os');
|
|
const path = require('node:path');
|
|
const { spawnSync } = require('node:child_process');
|
|
|
|
test('standalone public commands load only public modules and never local operators or backend dependencies', async (t) => {
|
|
const root = await fs.realpath(
|
|
await fs.mkdtemp(path.join(os.tmpdir(), 'ql-loading-')),
|
|
);
|
|
t.after(() => fs.rm(root, { recursive: true, force: true }));
|
|
const dist = path.join(root, 'dist');
|
|
await fs.cp(path.resolve(__dirname, '../../dist'), dist, { recursive: true });
|
|
const script = `
|
|
const path = require('node:path');
|
|
const originalWrite = process.stdout.write.bind(process.stdout);
|
|
process.stdout.write = () => true;
|
|
process.stderr.write = () => true;
|
|
const entry = process.argv[1];
|
|
require(entry).main(JSON.parse(process.argv[2])).then(code => {
|
|
originalWrite(JSON.stringify({ code, modules: Object.keys(require.cache).map(file => path.relative(path.dirname(entry), file)) }));
|
|
});
|
|
`;
|
|
for (const [args, expected] of [
|
|
[['--help'], 0],
|
|
[['task', 'list', '--help'], 0],
|
|
[['auth', 'logout'], 0],
|
|
[['auth', 'status', '--json'], 3],
|
|
[['task', 'list', '--json'], 3],
|
|
[['subscription', 'list', '--json'], 3],
|
|
]) {
|
|
const child = spawnSync(
|
|
process.execPath,
|
|
['-e', script, path.join(dist, 'main.js'), JSON.stringify(args)],
|
|
{
|
|
cwd: root,
|
|
encoding: 'utf8',
|
|
env: {
|
|
PATH: process.env.PATH,
|
|
QL_CLI_CONFIG: path.join(root, 'missing/config.json'),
|
|
QL_DIR: '/nonexistent-panel',
|
|
},
|
|
timeout: 10000,
|
|
},
|
|
);
|
|
assert.equal(child.status, 0, child.stderr);
|
|
const result = JSON.parse(child.stdout);
|
|
assert.equal(result.code, expected, JSON.stringify(args));
|
|
assert.ok(result.modules.length > 0);
|
|
for (const module of result.modules) {
|
|
assert.ok(!module.startsWith('..'), `External module loaded: ${module}`);
|
|
assert.doesNotMatch(
|
|
module,
|
|
/^(local|internal|back|preload)[/\\]|(^|[/\\])node_modules[/\\]/,
|
|
JSON.stringify(args),
|
|
);
|
|
}
|
|
if (args.includes('--help'))
|
|
assert.ok(
|
|
!result.modules.some((module) =>
|
|
/^remote[/\\](commands[/\\](auth|open|task|subscription)\.js|api[/\\](client|download)\.js|auth[/\\])/.test(module),
|
|
),
|
|
'Help eagerly loaded command implementation',
|
|
);
|
|
if (args[0] === 'task' && !args.includes('--help'))
|
|
assert.ok(result.modules.includes(path.join('remote', 'commands', 'task.js')));
|
|
if (args[0] === 'subscription')
|
|
assert.ok(
|
|
result.modules.includes(path.join('remote', 'commands', 'subscription.js')),
|
|
);
|
|
}
|
|
});
|