admin
ac67db7702
- apply() 先异步判 /api/auth/me 角色，非 admin 不注入该 section（fail-closed）
- 依据：官方 settings 外壳按 ctx.slots.getVersion('settings.section') 重算导航
（dsh-client-ui-settings/lib/client.js:560）⇒ 晚注册会被正确反映
- 验收脚本补「非 admin 只注册 1 个分区」断言 + 等一拍异步注册；npm run verify 全绿
- 版本 0.3.1 → 0.3.2，已铺发
130 lines
6.9 KiB
JavaScript
130 lines
6.9 KiB
JavaScript
#!/usr/bin/env node
|
||
/**
|
||
* verify-platform-admin-section.mjs —— R2「平台管理」分区的**无浏览器**渲染验收（档案 82）
|
||
*
|
||
* 为什么需要：本机 `agent-browser` 的 daemon 起不来（2026-09-13），浏览器截图验收受阻；
|
||
* 而 `06-工作台UI规范 §7.3` 三段式在 bundle **按需动态加载** 时也拿不到带 rev 的完整 URL。
|
||
* 做法：打桩 `react` / `react/jsx-runtime` + 最小 hooks 循环 + **真执行** client.js，
|
||
* 断言分区**被注册**、**admin 渲染出 6 张卡**、**非 admin 被门禁挡住**。
|
||
* 用法：node scripts/verify-platform-admin-section.mjs 退出码 0=全绿 / 1=有失败
|
||
*/
|
||
import { readFileSync } from "node:fs";
|
||
import { fileURLToPath } from "node:url";
|
||
import { dirname, join } from "node:path";
|
||
import vm from "node:vm";
|
||
|
||
const ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
|
||
const src = readFileSync(join(ROOT, "poc/business-plugins/lib/client.js"), "utf8");
|
||
let failed = 0;
|
||
const ok = (name, cond, extra = "") => { console.log((cond ? " ✓ " : " ✗ ") + name + (extra ? " " + extra : "")); if (!cond) failed++; };
|
||
|
||
let slots = [], cursor = 0, dirty = false;
|
||
const React = {
|
||
useState(init) { const i = cursor++; if (!(i in slots)) slots[i] = init; return [slots[i], (v) => { slots[i] = typeof v === "function" ? v(slots[i]) : v; dirty = true; }]; },
|
||
useEffect(fn) { const i = cursor++; if (!slots[i]) { slots[i] = 1; fn(); } },
|
||
};
|
||
const jsx = (type, props) => ({ type, props: props || {} });
|
||
const jsxRuntime = { jsx, jsxs: jsx, Fragment: "Fragment" };
|
||
|
||
let def = null;
|
||
const win = {
|
||
__ModuleLoader__: { load: (d) => { def = d; } },
|
||
location: { hostname: "admin.alotbuy.com", protocol: "https:", origin: "https://admin.alotbuy.com" },
|
||
open: (u) => { globalThis.__OPENED = u; },
|
||
document: { createElement: () => ({ setAttribute() {}, remove() {}, textContent: "" }), head: { appendChild() {} } },
|
||
};
|
||
let ROLE = "admin";
|
||
const DATA = {
|
||
"/api/dsh/status": { running: true, instance: { port: 43095, restarts: 2 }, breaker: null },
|
||
"/api/admin/users": { users: [{ role: "admin" }, { role: "active" }, { role: "pending" }, { role: "disabled" }] },
|
||
"/api/admin/storage": { generatedAt: 1, users: [{}, {}] },
|
||
"/api/plugins/business": { plugins: [{}, {}, {}] },
|
||
"/api/admin/runtime": { items: [{}, {}, {}, {}, {}] },
|
||
};
|
||
const sandbox = {
|
||
console, setTimeout, clearTimeout,
|
||
JSON, Object, Promise, Buffer, URL, globalThis: undefined,
|
||
window: win, document: win.document,
|
||
fetch: async (url) => {
|
||
const p = String(url).replace("https://alotbuy.com", "");
|
||
const body = p === "/api/auth/me" ? { user: { id: "u1", username: ROLE, role: ROLE } } : DATA[p];
|
||
return { ok: body !== undefined, status: body === undefined ? 404 : 200, json: async () => body };
|
||
},
|
||
require: (m) => (m === "react" ? React : m === "react/jsx-runtime" ? jsxRuntime : (() => { throw new Error("require " + m); })()),
|
||
};
|
||
sandbox.globalThis = sandbox;
|
||
vm.createContext(sandbox);
|
||
vm.runInContext(src, sandbox);
|
||
const mod = def.factory(sandbox.require);
|
||
|
||
let DICT = {}, regs = [];
|
||
const ctx = {
|
||
effect: (fn, name) => { try { fn(); } catch (e) { console.log(" effect 抛错:", name, e.message); } },
|
||
locale: { register: (ns, d) => { DICT = Object.assign({}, dICT_zh(d)); }, bind: () => (k) => DICT[k] ?? k },
|
||
slots: { inject: (n, fn) => fn(), register: (meta, Comp) => { regs.push({ meta, Comp }); return () => {}; } },
|
||
};
|
||
function dICT_zh(d) { return d.zh || {}; }
|
||
const inj = Array.isArray(mod.inject) ? mod.inject : [];
|
||
console.log(" inject 声明:", JSON.stringify(inj));
|
||
mod.apply(ctx);
|
||
// ⚠️ apply 里「仅 admin 注册」是**异步**的（先 fetch /api/auth/me 判角色）⇒ 必须等一拍
|
||
await new Promise((r) => setTimeout(r, 80));
|
||
console.log(" 已注册 section:", regs.map(r => r.meta.id + " / order=" + r.meta.order + " / label=" + r.meta.label()).join(" ｜ "));
|
||
|
||
function text(n, out = [], depth = 0) {
|
||
if (n == null || depth > 12) return out;
|
||
if (typeof n === "string" || typeof n === "number") { out.push(String(n)); return out; }
|
||
if (Array.isArray(n)) { n.forEach(x => text(x, out, depth + 1)); return out; }
|
||
if (typeof n === "object") {
|
||
if (typeof n.type === "function") { text(n.type(n.props || {}), out, depth + 1); return out; }
|
||
if (n.props) text(n.props.children, out, depth + 1);
|
||
}
|
||
return out;
|
||
}
|
||
async function render(Comp) {
|
||
cursor = 0; slots = [];
|
||
let tree = Comp();
|
||
for (let i = 0; i < 6; i++) { await new Promise(r => setTimeout(r, 30)); if (!dirty) break; dirty = false; cursor = 0; tree = Comp(); }
|
||
return tree;
|
||
}
|
||
for (const { meta, Comp } of regs.filter(r => r.meta.id === "platform-admin")) {
|
||
for (const role of ["admin", "active"]) {
|
||
ROLE = role;
|
||
delete globalThis.__OPENED;
|
||
const tree = await render(Comp);
|
||
const t = text(tree).join(" ｜ ");
|
||
console.log("\n ── role=" + role + " ──");
|
||
console.log(" 渲染文本:", t.slice(0, 300));
|
||
console.log(" 含「平台管理」:", t.includes("平台管理"), "｜ 含 6 张卡:", ["当前实例","熔断","用户","存储","候选池","运行时"].every(k => t.includes(k)));
|
||
if (role === "active") console.log(" 含仅管理员说明:", t.includes("仅对管理员显示"));
|
||
}
|
||
}
|
||
|
||
// 注：apply 里「仅 admin 注册」是异步判角色后才 inject；本脚本打桩的是同步路径，
|
||
// 因此这里断言「两个分区都可注册」+ 内容层门禁。注册条件由 R2 的运行时口径另验。
|
||
ok("admin 视角下注册了两个 settings.section", regs.length === 2, "-> " + regs.map(r => r.meta.id).join(", "));
|
||
const pa = regs.find(r => r.meta.id === "platform-admin");
|
||
ok("存在 platform-admin 分区", !!pa);
|
||
if (pa) ok("其 order = 102", pa.meta.order === 102);
|
||
ROLE = "admin"; delete globalThis.__OPENED;
|
||
const tAdmin = text(await render(pa.Comp)).join(" | ");
|
||
ok("admin：含分区标题「系统管理」", tAdmin.includes("系统管理"));
|
||
ok("admin：5 个管理项齐全", ["用户管理","候选池","运行时","存储","当前实例"].every(k => tAdmin.includes(k)));
|
||
ok("admin：不再是只读（提示改为弹窗内管理）", tAdmin.includes("弹窗"));
|
||
ROLE = "active";
|
||
const tUser = text(await render(pa.Comp)).join(" | ");
|
||
ok("非 admin：被门禁挡住", tUser.includes("仅对管理员显示"));
|
||
ok("非 admin：不出现任何管理项", !["候选池","运行时"].some(k => tUser.includes(k)));
|
||
// ── 关键：**非 admin 时「系统管理」压根不注册**（2026-09-13 用户指出普通用户不该看到这一栏）
|
||
{
|
||
regs = []; ROLE = "active";
|
||
mod.apply(ctx);
|
||
await new Promise((r) => setTimeout(r, 80));
|
||
ok("非 admin 视角下只注册 1 个分区（不含系统管理）",
|
||
regs.length === 1 && regs[0].meta.id === "business-plugins",
|
||
"-> " + regs.map(r => r.meta.id).join(", "));
|
||
regs = []; ROLE = "admin";
|
||
}
|
||
console.log(failed === 0 ? "\n结论：全绿 ✅" : "\n结论：有 " + failed + " 项失败 ❌");
|
||
process.exit(failed === 0 ? 0 : 1);
|