Compare commits
2
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
5041dc03c3 | ||
|
|
19212cc1b6 |
@@ -11,14 +11,12 @@
|
||||
"dependencies": {
|
||||
"@dada/asset-release-manifest": "workspace:*",
|
||||
"@dada/shared-contracts": "workspace:*",
|
||||
"@dada/static-sticker-catalog": "workspace:*",
|
||||
"@fastify/multipart": "10.1.0",
|
||||
"@fastify/swagger": "9.8.1",
|
||||
"@sinclair/typebox": "0.34.52",
|
||||
"better-sqlite3": "13.0.1",
|
||||
"drizzle-orm": "0.45.2",
|
||||
"fastify": "5.10.0",
|
||||
"sharp": "0.35.3"
|
||||
"fastify": "5.10.0"
|
||||
},
|
||||
"devDependencies": {
|
||||
"@types/better-sqlite3": "7.6.13",
|
||||
|
||||
@@ -0,0 +1,194 @@
|
||||
import type BetterSqlite3 from "better-sqlite3";
|
||||
|
||||
import type { AdminDiagnosticsResponse, AdminServicesStorageResponse } from "@dada/shared-contracts";
|
||||
|
||||
import type { BrowserSupportRelease } from "./browser-support.js";
|
||||
import type { ManagedStorage } from "./managed-storage.js";
|
||||
import type { ModelConfigurationService } from "./model-configuration.js";
|
||||
|
||||
type AdminService = AdminServicesStorageResponse["services"][number];
|
||||
const adminServiceIds = ["resend", "amap", "ai_gateway", "worker", "api", "asset_root"] as const;
|
||||
const forbiddenDiagnosticPatterns = [
|
||||
/\b(?:api[_ -]?key|secret|password|credential|authorization|bearer|session[_ -]?token|cookie|prompt|email|token)\b/i,
|
||||
/[A-Z]:[\\/](?:Users|Documents|ProgramData|Windows)[\\/]/i,
|
||||
/\\\\[^\\\s]+\\[^\s]+/,
|
||||
/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/i,
|
||||
/https?:\/\//i,
|
||||
];
|
||||
const safePauseReasons = new Set([
|
||||
"asset_root_state_missing", "balance_insufficient", "configured_disabled", "contract_blocked",
|
||||
"contract_unverified", "gateway_balance_insufficient", "gateway_paused", "health_check_failed",
|
||||
"model_disabled", "provider_unavailable", "quota_exhausted", "service_state_missing", "unknown",
|
||||
"worker_degraded", "worker_state_missing", "worker_stopped",
|
||||
]);
|
||||
|
||||
function iso(value: number | string | null | undefined) {
|
||||
if (value === null || value === undefined) return null;
|
||||
return typeof value === "number" ? new Date(value).toISOString() : value;
|
||||
}
|
||||
|
||||
function tableExists(database: BetterSqlite3.Database, table: string) {
|
||||
return Boolean(database.prepare("SELECT 1 AS present FROM sqlite_master WHERE type = 'table' AND name = ?").get(table));
|
||||
}
|
||||
|
||||
function safeService(
|
||||
service_id: AdminService["service_id"],
|
||||
status: AdminService["status"],
|
||||
impact_scope: AdminService["impact_scope"],
|
||||
configured: boolean,
|
||||
checked_at: string | null,
|
||||
pause_reason: string | null = null,
|
||||
): AdminService {
|
||||
return { checked_at, configured, impact_scope, pause_reason, service_id, status };
|
||||
}
|
||||
|
||||
function safeReason(value: unknown) {
|
||||
return typeof value === "string" && safePauseReasons.has(value) ? value : null;
|
||||
}
|
||||
|
||||
function serviceUsage(database: BetterSqlite3.Database, serviceName: string) {
|
||||
if (!tableExists(database, "external_service_usage")) return undefined;
|
||||
const columns = new Set((database.prepare("PRAGMA table_info(external_service_usage)").all() as Array<{ name: string }>).map((column) => column.name));
|
||||
const serviceColumn = columns.has("service_name") ? "service_name" : columns.has("service_id") ? "service_id" : undefined;
|
||||
if (!serviceColumn || !columns.has("service_status")) return undefined;
|
||||
const row = database.prepare(`SELECT service_status, ${columns.has("checked_at") ? "checked_at" : "NULL AS checked_at"}, ${columns.has("pause_reason") ? "pause_reason" : "NULL AS pause_reason"} FROM external_service_usage WHERE ${serviceColumn} = ? ORDER BY rowid DESC LIMIT 1`).get(serviceName) as { service_status: string; checked_at: number | string | null; pause_reason: string | null } | undefined;
|
||||
if (!row) return undefined;
|
||||
const status = new Set<AdminService["status"]>(["active", "paused_quota", "paused_provider", "disabled"]).has(row.service_status as AdminService["status"])
|
||||
? row.service_status as AdminService["status"]
|
||||
: "degraded";
|
||||
return { status, checked_at: iso(row.checked_at), pause_reason: safeReason(row.pause_reason) };
|
||||
}
|
||||
|
||||
function workerStatus(database: BetterSqlite3.Database) {
|
||||
if (!tableExists(database, "worker_runtime_state")) return { status: "unavailable" as const, checked_at: null, pause_reason: "worker_state_missing" };
|
||||
const row = database.prepare("SELECT status, reason, updated_at FROM worker_runtime_state WHERE singleton = 1").get() as { status: string; reason: string | null; updated_at: number | string | null } | undefined;
|
||||
if (!row) return { status: "unavailable" as const, checked_at: null, pause_reason: "worker_state_missing" };
|
||||
return {
|
||||
status: row.status === "ready" ? "active" as const : row.status === "degraded" ? "degraded" as const : "unavailable" as const,
|
||||
checked_at: iso(row.updated_at),
|
||||
pause_reason: safeReason(row.reason),
|
||||
};
|
||||
}
|
||||
|
||||
export function createAdminServicesStorageProvider(input: {
|
||||
database: BetterSqlite3.Database;
|
||||
models?: ModelConfigurationService;
|
||||
storage?: ManagedStorage;
|
||||
assetRoot?: Pick<AdminService, "configured" | "status" | "checked_at" | "pause_reason">;
|
||||
clock?: () => number;
|
||||
}): () => AdminServicesStorageResponse {
|
||||
const clock = input.clock ?? Date.now;
|
||||
return () => {
|
||||
const generatedAt = new Date(clock()).toISOString();
|
||||
const resend = serviceUsage(input.database, "resend");
|
||||
const amap = serviceUsage(input.database, "amap");
|
||||
const worker = workerStatus(input.database);
|
||||
const modelRuntime = input.models?.read().models ?? [];
|
||||
const unavailableModels = modelRuntime.filter((model) => !model.runtime_availability.available_for_new_jobs);
|
||||
const gatewayReason = unavailableModels[0]?.runtime_availability.reason ?? null;
|
||||
const storageState = input.storage?.getState();
|
||||
const cleanupPendingCount = tableExists(input.database, "file_cleanup_queue")
|
||||
? (input.database.prepare("SELECT COUNT(*) AS count FROM file_cleanup_queue WHERE status IN ('pending', 'failed')").get() as { count: number }).count
|
||||
: 0;
|
||||
const services: AdminService[] = [
|
||||
safeService("resend", resend?.status ?? "unavailable", "authentication", Boolean(resend), resend?.checked_at ?? null, resend?.pause_reason ?? "service_state_missing"),
|
||||
safeService("amap", amap?.status ?? "unavailable", "location", Boolean(amap), amap?.checked_at ?? null, amap?.pause_reason ?? "service_state_missing"),
|
||||
safeService("ai_gateway", unavailableModels.length > 0 ? "degraded" : modelRuntime.length > 0 ? "active" : "unavailable", "generation", modelRuntime.length > 0, generatedAt, safeReason(gatewayReason)),
|
||||
safeService("worker", worker.status, "generation", worker.status !== "unavailable", worker.checked_at, worker.pause_reason),
|
||||
safeService("api", "active", "api", true, generatedAt),
|
||||
safeService(
|
||||
"asset_root",
|
||||
input.assetRoot?.status ?? "unavailable",
|
||||
"storage",
|
||||
input.assetRoot?.configured ?? false,
|
||||
input.assetRoot?.checked_at ?? null,
|
||||
input.assetRoot?.pause_reason ?? "asset_root_state_missing",
|
||||
),
|
||||
];
|
||||
return assertSafeAdminServicesStorage({
|
||||
generated_at: generatedAt,
|
||||
services,
|
||||
storage: {
|
||||
capacity_notice_level: storageState?.capacity_notice_level ?? "normal",
|
||||
cleanup_pending_count: cleanupPendingCount,
|
||||
data_root_ref: "configured_local_data_root",
|
||||
hard_limit_bytes: storageState?.hard_limit_bytes ?? 5_368_709_120,
|
||||
last_measured_at: storageState?.measured_at ?? null,
|
||||
managed_content_bytes: storageState?.managed_content_bytes ?? 0,
|
||||
remeasurement_required: storageState?.storage_status === "unavailable",
|
||||
status: storageState?.storage_status ?? "unavailable",
|
||||
storage_backend: "local_filesystem",
|
||||
},
|
||||
});
|
||||
};
|
||||
}
|
||||
|
||||
function diagnosticText(input: AdminServicesStorageResponse, system: AdminDiagnosticsResponse["system"]) {
|
||||
const lines = [
|
||||
"Dada P0-A diagnostics",
|
||||
`app_version=${system.app_version}`,
|
||||
`api_status=${system.api_status}`,
|
||||
`worker_status=${system.worker_status}`,
|
||||
`storage_status=${input.storage.status}`,
|
||||
`capacity_notice_level=${input.storage.capacity_notice_level}`,
|
||||
`managed_content_bytes=${input.storage.managed_content_bytes}`,
|
||||
`hard_limit_bytes=${input.storage.hard_limit_bytes}`,
|
||||
`cleanup_pending_count=${input.storage.cleanup_pending_count}`,
|
||||
];
|
||||
for (const service of input.services) lines.push(`service.${service.service_id}=${service.status}`);
|
||||
return lines.join("\n");
|
||||
}
|
||||
|
||||
export function createAdminDiagnosticsProvider(input: {
|
||||
servicesStorage: () => AdminServicesStorageResponse;
|
||||
browserSupportRelease?: BrowserSupportRelease;
|
||||
appVersion?: string;
|
||||
clock?: () => number;
|
||||
}): () => AdminDiagnosticsResponse {
|
||||
const clock = input.clock ?? Date.now;
|
||||
return () => {
|
||||
const services = input.servicesStorage();
|
||||
const system: AdminDiagnosticsResponse["system"] = {
|
||||
api_status: "ready",
|
||||
app_version: input.appVersion ?? input.browserSupportRelease?.appVersion ?? "0.0.0",
|
||||
browser_support: (input.browserSupportRelease?.browsers ?? []).map((browser) => ({
|
||||
brand: browser.brand,
|
||||
major: Number.parseInt(browser.fullVersion.split(".")[0] ?? "0", 10),
|
||||
})).filter((browser) => Number.isSafeInteger(browser.major) && browser.major > 0),
|
||||
worker_status: services.services.find((service) => service.service_id === "worker")?.status === "active"
|
||||
? "ready"
|
||||
: services.services.find((service) => service.service_id === "worker")?.status === "unavailable"
|
||||
? "unavailable"
|
||||
: "degraded",
|
||||
};
|
||||
return assertSafeAdminDiagnostics({
|
||||
generated_at: new Date(clock()).toISOString(),
|
||||
diagnostic_text: diagnosticText(services, system),
|
||||
services,
|
||||
system,
|
||||
});
|
||||
};
|
||||
}
|
||||
|
||||
export function assertSafeAdminServicesStorage(input: AdminServicesStorageResponse) {
|
||||
const ids = input.services.map((service) => service.service_id);
|
||||
if (ids.length !== adminServiceIds.length || new Set(ids).size !== adminServiceIds.length
|
||||
|| adminServiceIds.some((serviceId) => !ids.includes(serviceId))) {
|
||||
throw new Error("admin_service_state_incomplete");
|
||||
}
|
||||
if (input.services.some((service) => service.pause_reason !== null && !safePauseReasons.has(service.pause_reason))) {
|
||||
throw new Error("admin_services_redaction_failed");
|
||||
}
|
||||
if (forbiddenDiagnosticPatterns.some((pattern) => pattern.test(JSON.stringify(input)))) {
|
||||
throw new Error("admin_services_redaction_failed");
|
||||
}
|
||||
return input;
|
||||
}
|
||||
|
||||
export function assertSafeAdminDiagnostics(input: AdminDiagnosticsResponse) {
|
||||
assertSafeAdminServicesStorage(input.services);
|
||||
if (forbiddenDiagnosticPatterns.some((pattern) => pattern.test(input.diagnostic_text))) {
|
||||
throw new Error("admin_diagnostics_redaction_failed");
|
||||
}
|
||||
return input;
|
||||
}
|
||||
+96
-250
@@ -10,6 +10,9 @@ import {
|
||||
AccountProfileUpdateResponseSchema,
|
||||
AccountSettingsResponseSchema,
|
||||
AdminAuthenticatedUserSchema,
|
||||
AdminDiagnosticsResponseSchema,
|
||||
AdminOverviewResponseSchema,
|
||||
AdminServicesStorageResponseSchema,
|
||||
AdminCreditParamsSchema,
|
||||
AdminLoginCompleteRequestSchema,
|
||||
AdminLoginCompleteResponseSchema,
|
||||
@@ -110,6 +113,9 @@ import {
|
||||
type BootstrapResponse,
|
||||
type AdminLoginCompleteRequest,
|
||||
type AdminLoginSendRequest,
|
||||
type AdminOverviewResponse,
|
||||
type AdminDiagnosticsResponse,
|
||||
type AdminServicesStorageResponse,
|
||||
type AccountDeletionCompleteRequest,
|
||||
type AccountProfileUpdateRequest,
|
||||
type AdminCreditParams,
|
||||
@@ -174,14 +180,11 @@ import {
|
||||
registrationFieldError,
|
||||
} from "./registration-errors.js";
|
||||
import type { RegistrationService } from "./registration.js";
|
||||
import type { AssetPreviewGrantService } from "./preview-grants.js";
|
||||
import type { RecentAssetService } from "./recent-assets.js";
|
||||
import type { AmapAdapter } from "./amap-adapter.js";
|
||||
import { ModelConfigurationError } from "./model-configuration.js";
|
||||
import type { ModelConfigurationService } from "./model-configuration.js";
|
||||
import { StickerReleaseError } from "./sticker-release-errors.js";
|
||||
import type { StickerReleaseService } from "./sticker-releases.js";
|
||||
import type { ManagedStorage } from "./managed-storage.js";
|
||||
import { assertSafeAdminDiagnostics, assertSafeAdminServicesStorage } from "./admin-state.js";
|
||||
|
||||
const defaultBootstrap: BootstrapResponse = {
|
||||
app_version: "0.0.0",
|
||||
@@ -196,6 +199,9 @@ const defaultBootstrap: BootstrapResponse = {
|
||||
};
|
||||
|
||||
export interface CreateAppOptions {
|
||||
adminDiagnostics?: () => AdminDiagnosticsResponse | Promise<AdminDiagnosticsResponse>;
|
||||
adminOverview?: () => AdminOverviewResponse | Promise<AdminOverviewResponse>;
|
||||
adminServicesStorage?: () => AdminServicesStorageResponse | Promise<AdminServicesStorageResponse>;
|
||||
amap?: AmapAdapter;
|
||||
assetReleases?: AssetReleaseReader;
|
||||
bootstrap?: () => BootstrapResponse | Promise<BootstrapResponse>;
|
||||
@@ -211,13 +217,11 @@ export interface CreateAppOptions {
|
||||
publicAssets?: PublicAssetResolver;
|
||||
recentAssets?: RecentAssetService;
|
||||
projects?: ProjectService;
|
||||
storage?: ManagedStorage;
|
||||
previewAssetAuthorizer?: (input: {
|
||||
releaseVersion: string;
|
||||
resourceId: string;
|
||||
userId: string;
|
||||
}) => boolean | Promise<boolean>;
|
||||
previewGrants?: AssetPreviewGrantService;
|
||||
privateAssetAdminAuthorizer?: (input: {
|
||||
adminUserId: string;
|
||||
ownerId: string;
|
||||
@@ -225,7 +229,6 @@ export interface CreateAppOptions {
|
||||
resourceId: string;
|
||||
}) => boolean | Promise<boolean>;
|
||||
registration?: RegistrationService;
|
||||
stickers?: StickerReleaseService;
|
||||
}
|
||||
|
||||
const supportGateDirectory = resolve(process.env.DADA_SUPPORT_GATE_ROOT ?? "apps/web/support-gate");
|
||||
@@ -381,24 +384,6 @@ function modelConfigurationFailure(reply: FastifyReply, correlationId: string, e
|
||||
return reply.code(status).send(createErrorEnvelope({ code: error.code, correlationId, details }));
|
||||
}
|
||||
|
||||
function stickerReleaseFailure(reply: FastifyReply, correlationId: string, error: unknown) {
|
||||
if (error instanceof StickerReleaseError) return reply.code(error.httpStatus).send(null);
|
||||
return latestExportFailure(reply, correlationId, error);
|
||||
}
|
||||
|
||||
function assetCleanupFailure(reply: FastifyReply, correlationId: string, error: unknown) {
|
||||
const code = error instanceof Error ? error.message : "";
|
||||
if (code === "ASSET_HISTORY_REFERENCE_CONFLICT" || code === "ASSET_CLEANUP_CANDIDATE_STALE") {
|
||||
return reply.code(409).send(createErrorEnvelope({ code, correlationId }));
|
||||
}
|
||||
if (code === "IDEMPOTENCY_KEY_CONFLICT") {
|
||||
return reply.code(409).send(createErrorEnvelope({ code: "IDEMPOTENCY_KEY_CONFLICT", correlationId }));
|
||||
}
|
||||
if (code === "cleanup_candidates_invalid") return reply.code(400).send(null);
|
||||
if (code === "cleanup_uncommitted") return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId }));
|
||||
return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId }));
|
||||
}
|
||||
|
||||
function generationTaskResponse(task: GenerationTaskView) {
|
||||
return {
|
||||
confirmed_credit_cost: task.confirmedCreditCost,
|
||||
@@ -713,6 +698,9 @@ export async function createApp(options: CreateAppOptions = {}) {
|
||||
AdminLoginCompleteRequestSchema,
|
||||
AdminLoginCompleteResponseSchema,
|
||||
AdminSessionResponseSchema,
|
||||
AdminOverviewResponseSchema,
|
||||
AdminServicesStorageResponseSchema,
|
||||
AdminDiagnosticsResponseSchema,
|
||||
CreditSummarySchema,
|
||||
CreditEntryTypeSchema,
|
||||
CreditEntryStatusSchema,
|
||||
@@ -854,206 +842,6 @@ export async function createApp(options: CreateAppOptions = {}) {
|
||||
status: "ready",
|
||||
}));
|
||||
|
||||
app.get(
|
||||
"/api/v1/static-stickers/current",
|
||||
{ schema: { hide: true } },
|
||||
async (_request, reply) => {
|
||||
if (!options.stickers) return reply.code(503).send();
|
||||
reply.header("Cache-Control", "no-cache");
|
||||
return options.stickers.listPublic();
|
||||
},
|
||||
);
|
||||
|
||||
app.get(
|
||||
"/api/v1/static-stickers/:resourceVersion",
|
||||
{ schema: { hide: true } },
|
||||
async (request, reply) => {
|
||||
if (!options.stickers) return reply.code(404).send();
|
||||
const { resourceVersion } = request.params as { resourceVersion: string };
|
||||
const catalog = options.stickers.listPublic(resourceVersion);
|
||||
if (!catalog.release_version) return reply.code(404).send();
|
||||
reply.header("Cache-Control", "public, max-age=31536000, immutable");
|
||||
return catalog;
|
||||
},
|
||||
);
|
||||
|
||||
app.get(
|
||||
"/api/v1/admin/assets/static-stickers",
|
||||
{ schema: { hide: true } },
|
||||
async (request, reply) => {
|
||||
if (!options.registration || !options.stickers) {
|
||||
return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
|
||||
}
|
||||
const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
|
||||
const session = token ? options.registration.readAdminSession(token) : undefined;
|
||||
if (!session) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
reply.header("Cache-Control", "private, no-store");
|
||||
return options.stickers.adminView();
|
||||
},
|
||||
);
|
||||
|
||||
app.post(
|
||||
"/api/v1/admin/assets/static-stickers",
|
||||
{ schema: { hide: true } },
|
||||
async (request, reply) => {
|
||||
if (!request.isMultipart()) return reply.code(400).send(null);
|
||||
if (!options.registration || !options.stickers) {
|
||||
return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
|
||||
}
|
||||
const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
|
||||
const idempotencyKey = headerValue(request.headers["idempotency-key"]);
|
||||
const csrfToken = headerValue(request.headers["x-csrf-token"]);
|
||||
if (!token) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
if (!idempotencyKey || !/^[A-Za-z0-9_-]{32,200}$/.test(idempotencyKey)
|
||||
|| !csrfToken || !/^[A-Za-z0-9_-]{43,64}$/.test(csrfToken)) return reply.code(400).send(null);
|
||||
try {
|
||||
const admin = options.registration.authorizeAdminMutation({ csrfToken, sessionToken: token });
|
||||
const values = new Map<string, string>();
|
||||
const allowedFields = new Set(["enabled", "order", "original_byte_size", "original_sha256", "part", "stable_id"]);
|
||||
let result: Awaited<ReturnType<StickerReleaseService["upload"]>> | undefined;
|
||||
for await (const part of request.parts({ limits: { fileSize: 20 * 1024 * 1024, files: 1, fields: 8, parts: 9 } })) {
|
||||
if (part.type === "field") {
|
||||
if (result || !allowedFields.has(part.fieldname) || values.has(part.fieldname) || typeof part.value !== "string") throw new StickerReleaseError("sticker_upload_invalid");
|
||||
values.set(part.fieldname, part.value);
|
||||
continue;
|
||||
}
|
||||
if (result || part.fieldname !== "sticker_file" || !part.filename
|
||||
|| !new Set(["image/png", "image/webp"]).has(part.mimetype)) throw new StickerReleaseError("sticker_upload_invalid");
|
||||
const stableId = values.get("stable_id");
|
||||
const partValue = Number(values.get("part"));
|
||||
const order = Number(values.get("order"));
|
||||
const enabled = values.get("enabled");
|
||||
const expectedByteSize = Number(values.get("original_byte_size"));
|
||||
const expectedSha256 = values.get("original_sha256");
|
||||
if (!stableId || !expectedSha256 || !new Set(["true", "false"]).has(enabled ?? "")) throw new StickerReleaseError("sticker_upload_invalid");
|
||||
result = await options.stickers.upload({
|
||||
actorId: admin.userId,
|
||||
content: part.file,
|
||||
enabled: enabled === "true",
|
||||
expectedByteSize,
|
||||
expectedMimeType: part.mimetype as "image/png" | "image/webp",
|
||||
expectedSha256,
|
||||
fileName: part.filename,
|
||||
idempotencyKey,
|
||||
order,
|
||||
part: partValue,
|
||||
stableId,
|
||||
});
|
||||
if (part.file.truncated) throw new StickerReleaseError("sticker_upload_invalid");
|
||||
}
|
||||
if (!result) throw new StickerReleaseError("sticker_upload_invalid");
|
||||
return reply.code(result.created ? 201 : 200).send(result);
|
||||
} catch (error) {
|
||||
return error instanceof RegistrationError
|
||||
? registrationFailure(reply, request.id, error)
|
||||
: stickerReleaseFailure(reply, request.id, error);
|
||||
}
|
||||
},
|
||||
);
|
||||
|
||||
app.patch(
|
||||
"/api/v1/admin/assets/static-stickers/:stableId",
|
||||
{ schema: { hide: true } },
|
||||
async (request, reply) => {
|
||||
if (!options.registration || !options.stickers) {
|
||||
return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
|
||||
}
|
||||
const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
|
||||
const csrfToken = headerValue(request.headers["x-csrf-token"]);
|
||||
if (!token || !csrfToken) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
try {
|
||||
const admin = options.registration.authorizeAdminMutation({ csrfToken, sessionToken: token });
|
||||
const body = request.body as { enabled?: boolean; order?: number; part?: number } | undefined;
|
||||
if (!body || Object.keys(body).length === 0 || Object.keys(body).some((key) => !new Set(["enabled", "order", "part"]).has(key))) {
|
||||
throw new StickerReleaseError("sticker_update_invalid");
|
||||
}
|
||||
return options.stickers.update({
|
||||
actorId: admin.userId,
|
||||
...(typeof body.enabled === "boolean" ? { enabled: body.enabled } : {}),
|
||||
...(typeof body.order === "number" ? { order: body.order } : {}),
|
||||
...(typeof body.part === "number" ? { part: body.part } : {}),
|
||||
stableId: (request.params as { stableId: string }).stableId,
|
||||
});
|
||||
} catch (error) {
|
||||
return error instanceof RegistrationError
|
||||
? registrationFailure(reply, request.id, error)
|
||||
: stickerReleaseFailure(reply, request.id, error);
|
||||
}
|
||||
},
|
||||
);
|
||||
|
||||
app.get(
|
||||
"/api/v1/admin/assets/static-stickers/cleanup/candidates",
|
||||
{ schema: { hide: true } },
|
||||
async (request, reply) => {
|
||||
if (!options.registration || !options.storage) {
|
||||
return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
|
||||
}
|
||||
const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
|
||||
const session = token ? options.registration.readAdminSession(token) : undefined;
|
||||
if (!session) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
try {
|
||||
reply.header("Cache-Control", "private, no-store");
|
||||
return options.storage.listAssetCleanupCandidates();
|
||||
} catch (error) {
|
||||
return assetCleanupFailure(reply, request.id, error);
|
||||
}
|
||||
},
|
||||
);
|
||||
|
||||
app.post(
|
||||
"/api/v1/admin/assets/static-stickers/cleanup/intents",
|
||||
{ schema: { hide: true } },
|
||||
async (request, reply) => {
|
||||
if (!options.registration || !options.storage) {
|
||||
return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
|
||||
}
|
||||
const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
|
||||
const csrfToken = headerValue(request.headers["x-csrf-token"]);
|
||||
const idempotencyKey = headerValue(request.headers["idempotency-key"]);
|
||||
if (!token || !csrfToken) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
if (!idempotencyKey || !/^[A-Za-z0-9_-]{32,200}$/.test(idempotencyKey) || !/^[A-Za-z0-9_-]{43,64}$/.test(csrfToken)) return reply.code(400).send(null);
|
||||
try {
|
||||
const admin = options.registration.authorizeAdminMutation({ csrfToken, sessionToken: token });
|
||||
const body = request.body as { file_ids?: string[]; snapshot_version?: string } | undefined;
|
||||
return reply.code(201).send(options.storage.createAssetCleanupIntent({
|
||||
actorId: admin.userId,
|
||||
fileIds: body?.file_ids ?? [],
|
||||
idempotencyKey,
|
||||
snapshotVersion: body?.snapshot_version ?? "",
|
||||
}));
|
||||
} catch (error) {
|
||||
return assetCleanupFailure(reply, request.id, error);
|
||||
}
|
||||
},
|
||||
);
|
||||
|
||||
app.post(
|
||||
"/api/v1/admin/assets/static-stickers/cleanup/intents/:requestId/confirm",
|
||||
{ schema: { hide: true } },
|
||||
async (request, reply) => {
|
||||
if (!options.registration || !options.storage) {
|
||||
return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
|
||||
}
|
||||
const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
|
||||
const csrfToken = headerValue(request.headers["x-csrf-token"]);
|
||||
if (!token || !csrfToken) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
if (!/^[A-Za-z0-9_-]{43,64}$/.test(csrfToken)) return reply.code(400).send(null);
|
||||
try {
|
||||
const admin = options.registration.authorizeAdminMutation({ csrfToken, sessionToken: token });
|
||||
const body = request.body as { confirmation_token?: string } | undefined;
|
||||
const requestId = (request.params as { requestId: string }).requestId;
|
||||
return reply.send(options.storage.confirmAssetCleanupIntent({
|
||||
actorId: admin.userId,
|
||||
confirmationToken: body?.confirmation_token ?? "",
|
||||
requestId,
|
||||
}));
|
||||
} catch (error) {
|
||||
return assetCleanupFailure(reply, request.id, error);
|
||||
}
|
||||
},
|
||||
);
|
||||
|
||||
app.get(
|
||||
"/api/v1/assets/public/:resourceVersion/manifest",
|
||||
{ schema: { hide: true } },
|
||||
@@ -1075,11 +863,6 @@ export async function createApp(options: CreateAppOptions = {}) {
|
||||
const resource = assetId && resourceVersion
|
||||
? options.assetReleases?.read("public_release_asset", resourceVersion, assetId)
|
||||
?? options.publicAssets?.read(resourceVersion, assetId)
|
||||
?? options.stickers?.readPublicAsset(
|
||||
resourceVersion,
|
||||
assetId,
|
||||
(request.query as { variant?: string }).variant === "thumbnail" ? "thumbnail" : "original",
|
||||
)
|
||||
: undefined;
|
||||
if (!resource) return reply.code(404).send();
|
||||
reply.type(resource.mimeType);
|
||||
@@ -1101,13 +884,6 @@ export async function createApp(options: CreateAppOptions = {}) {
|
||||
const session = token ? options.registration.readUserSession(token) : undefined;
|
||||
if (!session) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
const { resourceVersion } = request.params as { resourceVersion: string };
|
||||
if (options.previewGrants) {
|
||||
const manifest = options.previewGrants.projectManifest({ releaseVersion: resourceVersion, userId: session.userId });
|
||||
if (!manifest) return reply.code(404).send();
|
||||
reply.header("Cache-Control", "private, no-store");
|
||||
reply.header("Vary", "Cookie");
|
||||
return manifest;
|
||||
}
|
||||
const available = options.assetReleases?.project("internal_preview_asset", resourceVersion);
|
||||
if (!available || !options.previewAssetAuthorizer) return reply.code(404).send();
|
||||
const authorizedIds: string[] = [];
|
||||
@@ -1138,19 +914,6 @@ export async function createApp(options: CreateAppOptions = {}) {
|
||||
const session = token ? options.registration.readUserSession(token) : undefined;
|
||||
if (!session) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
const { assetId, resourceVersion } = request.params as { assetId: string; resourceVersion: string };
|
||||
if (options.previewGrants) {
|
||||
const resource = options.previewGrants.readManifestItem({
|
||||
manifestItemId: assetId,
|
||||
releaseVersion: resourceVersion,
|
||||
userId: session.userId,
|
||||
});
|
||||
if (!resource) return reply.code(404).send();
|
||||
reply.type(resource.mimeType);
|
||||
reply.header("Cache-Control", "private, no-store");
|
||||
reply.header("Content-Disposition", "inline");
|
||||
reply.header("Vary", "Cookie");
|
||||
return resource.bytes;
|
||||
}
|
||||
const authorized = await options.previewAssetAuthorizer?.({ resourceId: assetId, releaseVersion: resourceVersion, userId: session.userId });
|
||||
const resource = authorized ? options.assetReleases?.read("internal_preview_asset", resourceVersion, assetId) : undefined;
|
||||
if (!resource) return reply.code(404).send();
|
||||
@@ -1453,6 +1216,89 @@ export async function createApp(options: CreateAppOptions = {}) {
|
||||
},
|
||||
);
|
||||
|
||||
app.get(
|
||||
"/api/v1/admin/overview",
|
||||
{
|
||||
schema: {
|
||||
operationId: "getAdminOverview",
|
||||
response: {
|
||||
200: Type.Ref(AdminOverviewResponseSchema),
|
||||
401: Type.Ref(ErrorEnvelopeSchema),
|
||||
503: Type.Null(),
|
||||
},
|
||||
tags: ["Admin Operations"],
|
||||
},
|
||||
},
|
||||
async (request, reply) => {
|
||||
if (!options.registration) return reply.code(503).send(null);
|
||||
const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
|
||||
const session = token ? options.registration.readAdminSession(token) : undefined;
|
||||
if (!session) {
|
||||
return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
}
|
||||
if (!options.adminOverview) return reply.code(503).send(null);
|
||||
try {
|
||||
return await options.adminOverview();
|
||||
} catch {
|
||||
return reply.code(503).send(null);
|
||||
}
|
||||
},
|
||||
);
|
||||
|
||||
app.get(
|
||||
"/api/v1/admin/services-storage",
|
||||
{
|
||||
schema: {
|
||||
operationId: "getAdminServicesStorage",
|
||||
response: {
|
||||
200: Type.Ref(AdminServicesStorageResponseSchema),
|
||||
401: Type.Ref(ErrorEnvelopeSchema),
|
||||
503: Type.Null(),
|
||||
},
|
||||
tags: ["Admin Operations"],
|
||||
},
|
||||
},
|
||||
async (request, reply) => {
|
||||
if (!options.registration) return reply.code(503).send(null);
|
||||
const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
|
||||
const session = token ? options.registration.readAdminSession(token) : undefined;
|
||||
if (!session) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
if (!options.adminServicesStorage) return reply.code(503).send(null);
|
||||
try {
|
||||
return assertSafeAdminServicesStorage(await options.adminServicesStorage());
|
||||
} catch {
|
||||
return reply.code(503).send(null);
|
||||
}
|
||||
},
|
||||
);
|
||||
|
||||
app.get(
|
||||
"/api/v1/admin/diagnostics",
|
||||
{
|
||||
schema: {
|
||||
operationId: "getAdminDiagnostics",
|
||||
response: {
|
||||
200: Type.Ref(AdminDiagnosticsResponseSchema),
|
||||
401: Type.Ref(ErrorEnvelopeSchema),
|
||||
503: Type.Null(),
|
||||
},
|
||||
tags: ["Admin Operations"],
|
||||
},
|
||||
},
|
||||
async (request, reply) => {
|
||||
if (!options.registration) return reply.code(503).send(null);
|
||||
const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
|
||||
const session = token ? options.registration.readAdminSession(token) : undefined;
|
||||
if (!session) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
|
||||
if (!options.adminDiagnostics) return reply.code(503).send(null);
|
||||
try {
|
||||
return assertSafeAdminDiagnostics(await options.adminDiagnostics());
|
||||
} catch {
|
||||
return reply.code(503).send(null);
|
||||
}
|
||||
},
|
||||
);
|
||||
|
||||
app.post(
|
||||
"/api/v1/auth/login/send",
|
||||
{
|
||||
|
||||
+16
-8
@@ -18,7 +18,7 @@ import { StructuredJsonlLogger } from "./structured-log.js";
|
||||
import { attachApiSupervisorControl, initializeApiCredentialClients, receiveApiCredentials } from "./supervisor-channel.js";
|
||||
import { ModelConfigurationService } from "./model-configuration.js";
|
||||
import { MockAmapAdapter } from "./amap-adapter.js";
|
||||
import { StickerReleaseService } from "./sticker-releases.js";
|
||||
import { createAdminDiagnosticsProvider, createAdminServicesStorageProvider } from "./admin-state.js";
|
||||
|
||||
const credentialChannelEnabled = process.argv.includes("--dada-credential-stdin");
|
||||
let registration: RegistrationService | undefined;
|
||||
@@ -28,7 +28,6 @@ let storage: ManagedStorage | undefined;
|
||||
let latestExports: LatestExportService | undefined;
|
||||
let models: ModelConfigurationService | undefined;
|
||||
let recentAssets: RecentAssetService | undefined;
|
||||
let stickers: StickerReleaseService | undefined;
|
||||
const instanceConfigPath = process.env.DADA_INSTANCE_CONFIG_PATH ?? defaultInstanceConfigPath();
|
||||
if (credentialChannelEnabled) {
|
||||
const clients = initializeApiCredentialClients(await receiveApiCredentials());
|
||||
@@ -50,14 +49,11 @@ if (credentialChannelEnabled) {
|
||||
projects = new ProjectService({ databasePath });
|
||||
credits = new CreditService({ databasePath });
|
||||
storage = new ManagedStorage({ dataRoot, databasePath });
|
||||
stickers = new StickerReleaseService({ databasePath, storage });
|
||||
latestExports = new LatestExportService({ databasePath, storage });
|
||||
models = new ModelConfigurationService({ database: registration.database });
|
||||
recentAssets = new RecentAssetService({ database: registration.database });
|
||||
registration.applySecureConfig(readSecureConfigCandidate(instanceConfigPath));
|
||||
} catch (error) {
|
||||
stickers?.close();
|
||||
stickers = undefined;
|
||||
latestExports?.close();
|
||||
latestExports = undefined;
|
||||
storage?.close();
|
||||
@@ -75,7 +71,22 @@ if (credentialChannelEnabled) {
|
||||
}
|
||||
|
||||
const browserSupportRelease = readBrowserSupportRelease(resolve("RELEASE.json"));
|
||||
const adminServicesStorage = registration
|
||||
? createAdminServicesStorageProvider({
|
||||
database: registration.database,
|
||||
...(models ? { models } : {}),
|
||||
...(storage ? { storage } : {}),
|
||||
})
|
||||
: undefined;
|
||||
const adminDiagnostics = adminServicesStorage
|
||||
? createAdminDiagnosticsProvider({
|
||||
...(browserSupportRelease ? { browserSupportRelease, appVersion: browserSupportRelease.appVersion } : {}),
|
||||
servicesStorage: adminServicesStorage,
|
||||
})
|
||||
: undefined;
|
||||
const app = await createApp({
|
||||
...(adminServicesStorage ? { adminServicesStorage } : {}),
|
||||
...(adminDiagnostics ? { adminDiagnostics } : {}),
|
||||
amap: new MockAmapAdapter(),
|
||||
...(browserSupportRelease ? { browserSupportRelease } : {}),
|
||||
...(credits ? { credits } : {}),
|
||||
@@ -84,8 +95,6 @@ const app = await createApp({
|
||||
...(projects ? { projects } : {}),
|
||||
...(registration ? { registration } : {}),
|
||||
...(recentAssets ? { recentAssets } : {}),
|
||||
...(stickers ? { stickers } : {}),
|
||||
...(storage ? { storage } : {}),
|
||||
});
|
||||
|
||||
await app.listen({
|
||||
@@ -104,7 +113,6 @@ if (controlPipeIndex >= 0) {
|
||||
projects?.close();
|
||||
registration?.close();
|
||||
storage?.close();
|
||||
stickers?.close();
|
||||
});
|
||||
try {
|
||||
const dataRoot = readConfiguredLocalDataRoot(instanceConfigPath);
|
||||
|
||||
@@ -75,31 +75,6 @@ interface CleanupQueueRow {
|
||||
relative_path: string;
|
||||
}
|
||||
|
||||
export interface AssetCleanupCandidateView {
|
||||
byte_size: number;
|
||||
file_id: string;
|
||||
file_kind: "original" | "thumbnail";
|
||||
hash_prefix: string;
|
||||
reference_count: 0;
|
||||
resource_version: string;
|
||||
stable_id: string;
|
||||
}
|
||||
|
||||
export interface AssetCleanupCandidatesView {
|
||||
candidate_snapshot_version: string;
|
||||
expires_at: string;
|
||||
items: AssetCleanupCandidateView[];
|
||||
}
|
||||
|
||||
export interface AssetCleanupIntentView {
|
||||
confirmation_token: string;
|
||||
expires_at: string;
|
||||
file_count: number;
|
||||
request_id: string;
|
||||
status: "pending_confirmation" | "denied" | "queued" | "completed";
|
||||
total_bytes: number;
|
||||
}
|
||||
|
||||
export class StorageCapacityError extends Error {
|
||||
readonly code = "STORAGE_CAPACITY_EXCEEDED";
|
||||
readonly httpStatus = 507;
|
||||
@@ -129,10 +104,6 @@ function auditExpiry(occurredAt: number) {
|
||||
return occurredAt + auditRetentionMilliseconds;
|
||||
}
|
||||
|
||||
function digest(value: string) {
|
||||
return createHash("sha256").update(value, "utf8").digest("hex");
|
||||
}
|
||||
|
||||
function validatePositiveBytes(value: number, name: string) {
|
||||
if (!Number.isSafeInteger(value) || value <= 0) throw new Error(`${name}_invalid`);
|
||||
}
|
||||
@@ -284,28 +255,6 @@ export class ManagedStorage {
|
||||
FOREIGN KEY (request_id) REFERENCES asset_cleanup_requests(request_id),
|
||||
FOREIGN KEY (managed_file_id) REFERENCES managed_files(file_id)
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS asset_cleanup_candidate_snapshots (
|
||||
snapshot_version TEXT PRIMARY KEY,
|
||||
items_json TEXT NOT NULL,
|
||||
created_at INTEGER NOT NULL,
|
||||
expires_at INTEGER NOT NULL
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS sticker_managed_file_history (
|
||||
managed_file_id TEXT NOT NULL,
|
||||
stable_id TEXT NOT NULL,
|
||||
resource_version TEXT NOT NULL,
|
||||
file_kind TEXT NOT NULL CHECK (file_kind IN ('original', 'thumbnail')),
|
||||
created_at INTEGER NOT NULL,
|
||||
PRIMARY KEY (managed_file_id, file_kind),
|
||||
FOREIGN KEY (managed_file_id) REFERENCES managed_files(file_id)
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS project_sticker_asset_refs (
|
||||
reference_id TEXT PRIMARY KEY,
|
||||
project_id TEXT NOT NULL,
|
||||
stable_id TEXT NOT NULL,
|
||||
resource_version TEXT NOT NULL,
|
||||
created_at INTEGER NOT NULL
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS admin_operation_logs (
|
||||
log_id TEXT PRIMARY KEY,
|
||||
actor_type TEXT NOT NULL CHECK (actor_type IN ('system', 'super_admin')),
|
||||
@@ -328,49 +277,6 @@ export class ManagedStorage {
|
||||
if (!managedFileColumns.some((column) => column.name === "owner_ref")) {
|
||||
this.database.exec("ALTER TABLE managed_files ADD COLUMN owner_ref TEXT");
|
||||
}
|
||||
if (!managedFileColumns.some((column) => column.name === "cleanup_status")) {
|
||||
this.database.exec("ALTER TABLE managed_files ADD COLUMN cleanup_status TEXT");
|
||||
}
|
||||
const cleanupRequestColumns = this.database.prepare("PRAGMA table_info(asset_cleanup_requests)").all() as Array<{ name: string }>;
|
||||
const cleanupRequestAdditions: Array<[string, string]> = [
|
||||
["created_by", "TEXT"],
|
||||
["confirmed_by", "TEXT"],
|
||||
["snapshot_version", "TEXT"],
|
||||
["expires_at", "INTEGER"],
|
||||
["confirmation_token_digest", "TEXT"],
|
||||
["idempotency_key_digest", "TEXT"],
|
||||
["request_hash", "TEXT"],
|
||||
["file_count", "INTEGER"],
|
||||
["total_bytes", "INTEGER"],
|
||||
["denied_reason", "TEXT"],
|
||||
];
|
||||
for (const [column, type] of cleanupRequestAdditions) {
|
||||
if (!cleanupRequestColumns.some((item) => item.name === column)) {
|
||||
this.database.exec(`ALTER TABLE asset_cleanup_requests ADD COLUMN ${column} ${type}`);
|
||||
}
|
||||
}
|
||||
const cleanupItemColumns = this.database.prepare("PRAGMA table_info(asset_cleanup_request_items)").all() as Array<{ name: string }>;
|
||||
const cleanupItemAdditions: Array<[string, string]> = [
|
||||
["stable_id", "TEXT"],
|
||||
["resource_version", "TEXT"],
|
||||
["file_kind", "TEXT"],
|
||||
["byte_size", "INTEGER"],
|
||||
["sha256_prefix", "TEXT"],
|
||||
];
|
||||
for (const [column, type] of cleanupItemAdditions) {
|
||||
if (!cleanupItemColumns.some((item) => item.name === column)) {
|
||||
this.database.exec(`ALTER TABLE asset_cleanup_request_items ADD COLUMN ${column} ${type}`);
|
||||
}
|
||||
}
|
||||
this.database.exec(`
|
||||
CREATE UNIQUE INDEX IF NOT EXISTS asset_cleanup_requests_actor_idempotency
|
||||
ON asset_cleanup_requests (created_by, idempotency_key_digest)
|
||||
WHERE created_by IS NOT NULL AND idempotency_key_digest IS NOT NULL;
|
||||
CREATE INDEX IF NOT EXISTS sticker_managed_file_history_lookup
|
||||
ON sticker_managed_file_history (stable_id, resource_version, file_kind);
|
||||
CREATE INDEX IF NOT EXISTS asset_cleanup_candidate_snapshots_expiry
|
||||
ON asset_cleanup_candidate_snapshots (expires_at);
|
||||
`);
|
||||
ensureAdminOperationAuditSchema(this.database, Date.now());
|
||||
const initial = classifyCapacity(0, 0);
|
||||
this.database.prepare(`
|
||||
@@ -393,106 +299,6 @@ export class ManagedStorage {
|
||||
return withReservations;
|
||||
}
|
||||
|
||||
private readAssetCleanupCandidates(): AssetCleanupCandidateView[] {
|
||||
const releaseReferenceClause = this.tableExists("sticker_release_items") ? `
|
||||
AND NOT EXISTS (
|
||||
SELECT 1 FROM sticker_release_items release_items
|
||||
WHERE release_items.original_file_id = mf.file_id OR release_items.thumbnail_file_id = mf.file_id
|
||||
)` : "";
|
||||
return this.database.prepare(`
|
||||
SELECT
|
||||
mf.file_id,
|
||||
mf.byte_size,
|
||||
history.stable_id,
|
||||
history.resource_version,
|
||||
history.file_kind,
|
||||
substr(mf.sha256, 1, 12) AS hash_prefix,
|
||||
0 AS reference_count
|
||||
FROM sticker_managed_file_history history
|
||||
JOIN managed_files mf ON mf.file_id = history.managed_file_id
|
||||
WHERE mf.status = 'committed'
|
||||
AND mf.cleanup_status IS NULL
|
||||
AND mf.file_kind IN ('sticker_original', 'sticker_thumbnail')
|
||||
AND NOT EXISTS (
|
||||
SELECT 1 FROM project_asset_refs refs WHERE refs.managed_file_id = mf.file_id
|
||||
)
|
||||
AND NOT EXISTS (
|
||||
SELECT 1 FROM project_sticker_asset_refs project_refs
|
||||
WHERE project_refs.stable_id = history.stable_id
|
||||
AND project_refs.resource_version = history.resource_version
|
||||
)
|
||||
${releaseReferenceClause}
|
||||
AND NOT EXISTS (
|
||||
SELECT 1 FROM asset_cleanup_request_items request_items
|
||||
JOIN asset_cleanup_requests requests ON requests.request_id = request_items.request_id
|
||||
WHERE request_items.managed_file_id = mf.file_id
|
||||
AND requests.status IN ('pending_confirmation', 'queued')
|
||||
)
|
||||
ORDER BY history.stable_id, history.resource_version, history.file_kind, mf.file_id
|
||||
`).all() as AssetCleanupCandidateView[];
|
||||
}
|
||||
|
||||
private assertActiveAdmin(actorId: string) {
|
||||
const admin = this.database.prepare(`
|
||||
SELECT 1 AS allowed FROM users u
|
||||
JOIN admin_access access ON access.user_id = u.user_id
|
||||
WHERE u.user_id = ? AND u.role = 'super_admin' AND u.status = 'active' AND access.allowed = 1
|
||||
`).get(actorId);
|
||||
if (!admin) throw new Error("ASSET_CLEANUP_CANDIDATE_STALE");
|
||||
}
|
||||
|
||||
private assetReferenceCount(fileId: string, requestId: string) {
|
||||
const projectOrRelease = (this.database.prepare(`
|
||||
SELECT COUNT(*) AS count FROM project_asset_refs WHERE managed_file_id = ?
|
||||
`).get(fileId) as { count: number }).count;
|
||||
const releaseItems = this.tableExists("sticker_release_items")
|
||||
? (this.database.prepare(`
|
||||
SELECT COUNT(*) AS count FROM sticker_release_items
|
||||
WHERE original_file_id = ? OR thumbnail_file_id = ?
|
||||
`).get(fileId, fileId) as { count: number }).count
|
||||
: 0;
|
||||
const projectStickerRefs = (this.database.prepare(`
|
||||
SELECT COUNT(*) AS count
|
||||
FROM sticker_managed_file_history history
|
||||
JOIN project_sticker_asset_refs refs
|
||||
ON refs.stable_id = history.stable_id AND refs.resource_version = history.resource_version
|
||||
WHERE history.managed_file_id = ?
|
||||
`).get(fileId) as { count: number }).count;
|
||||
const otherCleanup = (this.database.prepare(`
|
||||
SELECT COUNT(*) AS count FROM asset_cleanup_request_items items
|
||||
JOIN asset_cleanup_requests requests ON requests.request_id = items.request_id
|
||||
WHERE items.managed_file_id = ? AND items.request_id <> ?
|
||||
AND requests.status IN ('pending_confirmation', 'queued')
|
||||
`).get(fileId, requestId) as { count: number }).count;
|
||||
return projectOrRelease + releaseItems + projectStickerRefs + otherCleanup;
|
||||
}
|
||||
|
||||
private cleanupConfirmationToken(requestId: string, actorId: string, keyDigest: string) {
|
||||
return digest(`Dada/P0A/asset-cleanup-confirm/v1:${requestId}:${actorId}:${keyDigest}`);
|
||||
}
|
||||
|
||||
private tableExists(name: string) {
|
||||
return Boolean(this.database.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(name));
|
||||
}
|
||||
|
||||
private insertCleanupAudit(input: {
|
||||
actorRef: string;
|
||||
afterSummary: Record<string, unknown>;
|
||||
operationType: string;
|
||||
requestId: string;
|
||||
result: "failed" | "succeeded";
|
||||
}, occurredAt: number) {
|
||||
this.database.prepare(`
|
||||
INSERT INTO admin_operation_logs (
|
||||
log_id, actor_type, actor_ref, operation_type, target_type, target_ref,
|
||||
result, before_summary, after_summary, occurred_at, expires_at
|
||||
) VALUES (?, 'super_admin', ?, ?, 'asset_cleanup_request', ?, ?, NULL, ?, ?, ?)
|
||||
`).run(
|
||||
randomUUID(), input.actorRef, input.operationType, input.requestId, input.result,
|
||||
serializeAuditSummary(input.afterSummary), occurredAt, auditExpiry(occurredAt),
|
||||
);
|
||||
}
|
||||
|
||||
private activeReservationBytes(excludingOperationId?: string) {
|
||||
const row = this.database.prepare(`
|
||||
SELECT COALESCE(SUM(projected_bytes), 0) AS bytes
|
||||
@@ -690,11 +496,9 @@ export class ManagedStorage {
|
||||
}
|
||||
}
|
||||
|
||||
async stageManagedImage(input: {
|
||||
async stagePrivateImage(input: {
|
||||
content: Readable;
|
||||
expectedMimeType: "image/png" | "image/jpeg" | "image/webp";
|
||||
expectedSha256?: string;
|
||||
fileKind: ManagedFileKind;
|
||||
fileName: string;
|
||||
maximumBytes: number;
|
||||
operationId: string;
|
||||
@@ -705,7 +509,7 @@ export class ManagedStorage {
|
||||
const destination = this.destination({
|
||||
content: input.content,
|
||||
expectedMimeType: input.expectedMimeType,
|
||||
fileKind: input.fileKind,
|
||||
fileKind: "reference",
|
||||
fileName: input.fileName,
|
||||
operationId: input.operationId,
|
||||
ownerRef: input.ownerRef,
|
||||
@@ -733,8 +537,6 @@ export class ManagedStorage {
|
||||
await pipeline(input.content, inspect, createWriteStream(stagingPath, { flags: "wx" }));
|
||||
validatePositiveBytes(byteSize, "actual_write_bytes");
|
||||
if (sniffMime(prefix) !== input.expectedMimeType) throw new Error("content_mime_invalid");
|
||||
const sha256 = hash.digest("hex");
|
||||
if (input.expectedSha256 && sha256.toLowerCase() !== input.expectedSha256.toLowerCase()) throw new Error("content_hash_invalid");
|
||||
const state = this.getState();
|
||||
const otherReservations = this.activeReservationBytes(input.operationId);
|
||||
if (state.managed_content_bytes + otherReservations + byteSize > HARD_LIMIT_BYTES) {
|
||||
@@ -747,12 +549,12 @@ export class ManagedStorage {
|
||||
bytes: byteSize,
|
||||
destinationPath: destination.absolutePath,
|
||||
fileId,
|
||||
fileKind: input.fileKind,
|
||||
fileKind: "reference",
|
||||
mimeType: input.expectedMimeType,
|
||||
operationId: input.operationId,
|
||||
ownerRef: input.ownerRef,
|
||||
relativePath: destination.relativePath,
|
||||
sha256,
|
||||
sha256: hash.digest("hex"),
|
||||
stagingDirectory,
|
||||
stagingPath,
|
||||
};
|
||||
@@ -763,18 +565,6 @@ export class ManagedStorage {
|
||||
}
|
||||
}
|
||||
|
||||
async stagePrivateImage(input: {
|
||||
content: Readable;
|
||||
expectedMimeType: "image/png" | "image/jpeg" | "image/webp";
|
||||
fileName: string;
|
||||
maximumBytes: number;
|
||||
operationId: string;
|
||||
ownerRef: string;
|
||||
projectedWriteBytes: number;
|
||||
}): Promise<StagedManagedFile> {
|
||||
return this.stageManagedImage({ ...input, fileKind: "reference" });
|
||||
}
|
||||
|
||||
moveStagedFile(file: StagedManagedFile) {
|
||||
mkdirSync(dirname(file.destinationPath), { recursive: true });
|
||||
renameSync(file.stagingPath, file.destinationPath);
|
||||
@@ -886,203 +676,6 @@ export class ManagedStorage {
|
||||
this.database.prepare("DELETE FROM project_asset_refs WHERE managed_file_id = ?").run(fileId);
|
||||
}
|
||||
|
||||
listAssetCleanupCandidates(): AssetCleanupCandidatesView {
|
||||
const createdAt = Date.now();
|
||||
const expiresAt = createdAt + 5 * 60 * 1_000;
|
||||
const items = this.readAssetCleanupCandidates();
|
||||
const snapshotVersion = digest(JSON.stringify({
|
||||
created_at: createdAt,
|
||||
nonce: randomUUID(),
|
||||
items: items.map((item) => ({ byte_size: item.byte_size, file_id: item.file_id, hash_prefix: item.hash_prefix })),
|
||||
}));
|
||||
this.database.prepare("DELETE FROM asset_cleanup_candidate_snapshots WHERE expires_at <= ?").run(createdAt);
|
||||
this.database.prepare(`
|
||||
INSERT INTO asset_cleanup_candidate_snapshots (
|
||||
snapshot_version, items_json, created_at, expires_at
|
||||
) VALUES (?, ?, ?, ?)
|
||||
`).run(snapshotVersion, JSON.stringify(items), createdAt, expiresAt);
|
||||
return {
|
||||
candidate_snapshot_version: snapshotVersion,
|
||||
expires_at: new Date(expiresAt).toISOString(),
|
||||
items,
|
||||
};
|
||||
}
|
||||
|
||||
createAssetCleanupIntent(input: {
|
||||
actorId: string;
|
||||
fileIds: string[];
|
||||
idempotencyKey: string;
|
||||
snapshotVersion: string;
|
||||
}): AssetCleanupIntentView {
|
||||
if (this.inspectAction("explicit_cleanup") !== "allow") throw new Error("cleanup_uncommitted");
|
||||
const fileIds = [...new Set(input.fileIds)].sort();
|
||||
if (!uuidPattern.test(input.actorId) || fileIds.length === 0 || fileIds.length !== input.fileIds.length
|
||||
|| fileIds.length > 100 || fileIds.some((fileId) => !uuidPattern.test(fileId))
|
||||
|| !/^[A-Za-z0-9_-]{32,200}$/.test(input.idempotencyKey)
|
||||
|| !/^[0-9a-f]{64}$/.test(input.snapshotVersion)) {
|
||||
throw new Error("cleanup_candidates_invalid");
|
||||
}
|
||||
const keyDigest = digest(input.idempotencyKey);
|
||||
const requestHash = digest(JSON.stringify({ file_ids: fileIds, snapshot_version: input.snapshotVersion }));
|
||||
const existing = this.database.prepare(`
|
||||
SELECT request_id, request_hash, expires_at, file_count, total_bytes, status
|
||||
FROM asset_cleanup_requests
|
||||
WHERE created_by = ? AND idempotency_key_digest = ?
|
||||
`).get(input.actorId, keyDigest) as {
|
||||
expires_at: number; file_count: number; request_hash: string; request_id: string; status: AssetCleanupIntentView["status"]; total_bytes: number;
|
||||
} | undefined;
|
||||
if (existing) {
|
||||
if (existing.request_hash !== requestHash) throw new Error("IDEMPOTENCY_KEY_CONFLICT");
|
||||
return {
|
||||
confirmation_token: this.cleanupConfirmationToken(existing.request_id, input.actorId, keyDigest),
|
||||
expires_at: new Date(existing.expires_at).toISOString(),
|
||||
file_count: existing.file_count,
|
||||
request_id: existing.request_id,
|
||||
status: existing.status,
|
||||
total_bytes: existing.total_bytes,
|
||||
};
|
||||
}
|
||||
|
||||
const requestId = randomUUID();
|
||||
const confirmationToken = this.cleanupConfirmationToken(requestId, input.actorId, keyDigest);
|
||||
const createdAt = Date.now();
|
||||
let view!: AssetCleanupIntentView;
|
||||
const transaction = this.database.transaction(() => {
|
||||
this.assertActiveAdmin(input.actorId);
|
||||
const snapshot = this.database.prepare(`
|
||||
SELECT items_json, expires_at FROM asset_cleanup_candidate_snapshots
|
||||
WHERE snapshot_version = ?
|
||||
`).get(input.snapshotVersion) as { expires_at: number; items_json: string } | undefined;
|
||||
if (!snapshot || snapshot.expires_at <= createdAt) throw new Error("ASSET_CLEANUP_CANDIDATE_STALE");
|
||||
const snapshotItems = JSON.parse(snapshot.items_json) as AssetCleanupCandidateView[];
|
||||
const byId = new Map(snapshotItems.map((item) => [item.file_id, item]));
|
||||
const selected = fileIds.map((fileId) => byId.get(fileId));
|
||||
if (selected.some((item) => !item)) throw new Error("ASSET_CLEANUP_CANDIDATE_STALE");
|
||||
const current = new Map(this.readAssetCleanupCandidates().map((item) => [item.file_id, item]));
|
||||
if (fileIds.some((fileId) => !current.has(fileId))) throw new Error("ASSET_CLEANUP_CANDIDATE_STALE");
|
||||
const safeItems = selected as AssetCleanupCandidateView[];
|
||||
const totalBytes = safeItems.reduce((sum, item) => sum + item.byte_size, 0);
|
||||
this.database.prepare(`
|
||||
INSERT INTO asset_cleanup_requests (
|
||||
request_id, status, created_at, confirmed_at, created_by, confirmed_by,
|
||||
snapshot_version, expires_at, confirmation_token_digest,
|
||||
idempotency_key_digest, request_hash, file_count, total_bytes, denied_reason
|
||||
) VALUES (?, 'pending_confirmation', ?, NULL, ?, NULL, ?, ?, ?, ?, ?, ?, ?, NULL)
|
||||
`).run(
|
||||
requestId, new Date(createdAt).toISOString(), input.actorId, input.snapshotVersion,
|
||||
snapshot.expires_at, digest(confirmationToken), keyDigest, requestHash, safeItems.length, totalBytes,
|
||||
);
|
||||
const insert = this.database.prepare(`
|
||||
INSERT INTO asset_cleanup_request_items (
|
||||
request_id, managed_file_id, stable_id, resource_version, file_kind, byte_size, sha256_prefix
|
||||
) VALUES (?, ?, ?, ?, ?, ?, ?)
|
||||
`);
|
||||
for (const item of safeItems) {
|
||||
insert.run(requestId, item.file_id, item.stable_id, item.resource_version, item.file_kind, item.byte_size, item.hash_prefix);
|
||||
}
|
||||
this.insertCleanupAudit({
|
||||
actorRef: input.actorId,
|
||||
afterSummary: { file_count: safeItems.length, snapshot_version: input.snapshotVersion, total_bytes: totalBytes },
|
||||
operationType: "asset_cleanup_requested",
|
||||
requestId,
|
||||
result: "succeeded",
|
||||
}, createdAt);
|
||||
view = {
|
||||
confirmation_token: confirmationToken,
|
||||
expires_at: new Date(snapshot.expires_at).toISOString(),
|
||||
file_count: safeItems.length,
|
||||
request_id: requestId,
|
||||
status: "pending_confirmation",
|
||||
total_bytes: totalBytes,
|
||||
};
|
||||
});
|
||||
transaction.immediate();
|
||||
return view;
|
||||
}
|
||||
|
||||
confirmAssetCleanupIntent(input: { actorId: string; confirmationToken: string; requestId: string }) {
|
||||
if (this.inspectAction("explicit_cleanup") !== "allow") throw new Error("cleanup_uncommitted");
|
||||
if (!uuidPattern.test(input.actorId) || !uuidPattern.test(input.requestId) || !/^[0-9a-f]{64}$/.test(input.confirmationToken)) {
|
||||
throw new Error("ASSET_CLEANUP_CANDIDATE_STALE");
|
||||
}
|
||||
const confirmedAt = Date.now();
|
||||
const outcome = this.database.transaction(() => {
|
||||
this.assertActiveAdmin(input.actorId);
|
||||
const request = this.database.prepare(`
|
||||
SELECT status, created_by, expires_at, confirmation_token_digest, file_count, total_bytes
|
||||
FROM asset_cleanup_requests WHERE request_id = ?
|
||||
`).get(input.requestId) as {
|
||||
confirmation_token_digest: string | null; created_by: string | null; expires_at: number | null;
|
||||
file_count: number | null; status: string; total_bytes: number | null;
|
||||
} | undefined;
|
||||
if (!request || request.status !== "pending_confirmation" || request.created_by !== input.actorId
|
||||
|| !request.expires_at || request.expires_at <= confirmedAt
|
||||
|| request.confirmation_token_digest !== digest(input.confirmationToken)) {
|
||||
throw new Error("ASSET_CLEANUP_CANDIDATE_STALE");
|
||||
}
|
||||
const files = this.database.prepare(`
|
||||
SELECT mf.file_id, mf.file_kind, mf.relative_path, mf.byte_size, mf.status
|
||||
FROM asset_cleanup_request_items items
|
||||
JOIN managed_files mf ON mf.file_id = items.managed_file_id
|
||||
WHERE items.request_id = ? ORDER BY mf.file_id
|
||||
`).all(input.requestId) as ManagedFileRow[];
|
||||
if (files.length !== request.file_count) throw new Error("ASSET_CLEANUP_CANDIDATE_STALE");
|
||||
const conflicted = files.some((file) => file.status !== "committed"
|
||||
|| !new Set(["sticker_original", "sticker_thumbnail"]).has(file.file_kind)
|
||||
|| this.assetReferenceCount(file.file_id, input.requestId) > 0);
|
||||
if (conflicted) {
|
||||
this.database.prepare(`
|
||||
UPDATE asset_cleanup_requests
|
||||
SET status = 'denied', confirmed_at = ?, confirmed_by = ?, denied_reason = 'reference_conflict'
|
||||
WHERE request_id = ?
|
||||
`).run(new Date(confirmedAt).toISOString(), input.actorId, input.requestId);
|
||||
this.insertCleanupAudit({
|
||||
actorRef: input.actorId,
|
||||
afterSummary: { file_count: files.length, reason: "reference_conflict", status: "denied" },
|
||||
operationType: "asset_cleanup_reference_denied",
|
||||
requestId: input.requestId,
|
||||
result: "failed",
|
||||
}, confirmedAt);
|
||||
return { conflict: true as const };
|
||||
}
|
||||
|
||||
this.insertCleanupAudit({
|
||||
actorRef: input.actorId,
|
||||
afterSummary: { file_count: files.length, status: "validated" },
|
||||
operationType: "asset_cleanup_validated",
|
||||
requestId: input.requestId,
|
||||
result: "succeeded",
|
||||
}, confirmedAt);
|
||||
for (const file of files) {
|
||||
this.database.prepare(`
|
||||
UPDATE managed_files SET status = 'purged', purged_at = ?, cleanup_status = 'pending_delete'
|
||||
WHERE file_id = ? AND status = 'committed'
|
||||
`).run(new Date(confirmedAt).toISOString(), file.file_id);
|
||||
this.database.prepare(`
|
||||
INSERT INTO file_cleanup_queue (
|
||||
cleanup_id, managed_file_id, relative_path, byte_size, counts_toward_managed,
|
||||
reason, status, created_at, completed_at, last_error
|
||||
) VALUES (?, ?, ?, ?, 1, 'purge', 'pending', ?, NULL, NULL)
|
||||
`).run(randomUUID(), file.file_id, file.relative_path, file.byte_size, new Date(confirmedAt).toISOString());
|
||||
}
|
||||
this.database.prepare(`
|
||||
UPDATE asset_cleanup_requests
|
||||
SET status = 'queued', confirmed_at = ?, confirmed_by = ?
|
||||
WHERE request_id = ?
|
||||
`).run(new Date(confirmedAt).toISOString(), input.actorId, input.requestId);
|
||||
this.insertCleanupAudit({
|
||||
actorRef: input.actorId,
|
||||
afterSummary: { file_count: files.length, status: "queued", total_bytes: request.total_bytes ?? 0 },
|
||||
operationType: "asset_cleanup_scheduled",
|
||||
requestId: input.requestId,
|
||||
result: "succeeded",
|
||||
}, confirmedAt + 1);
|
||||
return { conflict: false as const, file_count: files.length, request_id: input.requestId, status: "queued" as const };
|
||||
}).immediate();
|
||||
if (outcome.conflict) throw new Error("ASSET_HISTORY_REFERENCE_CONFLICT");
|
||||
return outcome;
|
||||
}
|
||||
|
||||
createCleanupIntent(fileIds: string[]) {
|
||||
if (this.inspectAction("explicit_cleanup") !== "allow") throw new Error("cleanup_uncommitted");
|
||||
if (fileIds.length === 0 || new Set(fileIds).size !== fileIds.length) throw new Error("cleanup_candidates_invalid");
|
||||
@@ -1168,7 +761,6 @@ export class ManagedStorage {
|
||||
this.database.prepare("DELETE FROM project_asset_refs WHERE managed_file_id = ?").run(row.managed_file_id);
|
||||
const requests = this.database.prepare("SELECT request_id FROM asset_cleanup_request_items WHERE managed_file_id = ?").all(row.managed_file_id) as Array<{ request_id: string }>;
|
||||
this.database.prepare("DELETE FROM asset_cleanup_request_items WHERE managed_file_id = ?").run(row.managed_file_id);
|
||||
this.database.prepare("DELETE FROM sticker_managed_file_history WHERE managed_file_id = ?").run(row.managed_file_id);
|
||||
this.database.prepare("DELETE FROM managed_files WHERE file_id = ?").run(row.managed_file_id);
|
||||
for (const request of requests) {
|
||||
const pendingItems = this.database.prepare("SELECT COUNT(*) AS count FROM asset_cleanup_request_items WHERE request_id = ?").get(request.request_id) as { count: number };
|
||||
|
||||
@@ -1,483 +0,0 @@
|
||||
import { createHash, randomUUID } from "node:crypto";
|
||||
|
||||
import type {
|
||||
AssetReleaseManifestItem,
|
||||
AssetReleaseManifestProjection,
|
||||
AssetReleaseReader,
|
||||
} from "@dada/asset-release-manifest";
|
||||
|
||||
import { auditRetentionMilliseconds, serializeAuditSummary } from "./audit-policy.js";
|
||||
import type { RegistrationService } from "./registration.js";
|
||||
|
||||
export type PreviewBatchStatus = "active" | "closed";
|
||||
export type PreviewGrantStatus = "active" | "revoked" | "expired";
|
||||
|
||||
export interface PreviewBatchView {
|
||||
batchId: string;
|
||||
createdAt: number;
|
||||
createdBy: string;
|
||||
name: string;
|
||||
status: PreviewBatchStatus;
|
||||
}
|
||||
|
||||
export interface PreviewGrantView {
|
||||
batchId: string;
|
||||
expiresAt: number;
|
||||
grantId: string;
|
||||
grantedAt: number;
|
||||
grantedBy: string;
|
||||
status: PreviewGrantStatus;
|
||||
userId: string;
|
||||
}
|
||||
|
||||
export class PreviewGrantError extends Error {
|
||||
constructor(
|
||||
public readonly reason:
|
||||
| "admin_invalid"
|
||||
| "batch_closed"
|
||||
| "batch_not_found"
|
||||
| "grant_not_found"
|
||||
| "invalid_expiry"
|
||||
| "invalid_request"
|
||||
| "resource_not_found"
|
||||
| "user_not_eligible",
|
||||
) {
|
||||
super(reason);
|
||||
this.name = "PreviewGrantError";
|
||||
}
|
||||
}
|
||||
|
||||
interface PreviewGrantServiceOptions {
|
||||
assetReleases: AssetReleaseReader;
|
||||
clock?: () => number;
|
||||
registration: RegistrationService;
|
||||
}
|
||||
|
||||
interface PreviewManifestItemMapping {
|
||||
releaseVersion: string;
|
||||
resourceId: string;
|
||||
userId: string;
|
||||
}
|
||||
|
||||
function isUuid(value: string) {
|
||||
return /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);
|
||||
}
|
||||
|
||||
function assertText(value: string, name: string) {
|
||||
const normalized = value.trim();
|
||||
if (!normalized || normalized.length > 160) throw new PreviewGrantError("invalid_request");
|
||||
if (name === "batchId" && !isUuid(normalized)) throw new PreviewGrantError("invalid_request");
|
||||
return normalized;
|
||||
}
|
||||
|
||||
function manifestHash(items: readonly AssetReleaseManifestItem[], releaseVersion: string) {
|
||||
return createHash("sha256")
|
||||
.update(JSON.stringify({
|
||||
items,
|
||||
release_version: releaseVersion,
|
||||
schema_version: "AssetReleaseManifest/v1",
|
||||
}))
|
||||
.digest("hex");
|
||||
}
|
||||
|
||||
/**
|
||||
* Owns the P0-A preview grant state. Preview URLs are deliberately ephemeral:
|
||||
* the random item id is kept only in this process and every read rechecks the
|
||||
* persisted grant, so revocation and expiry take effect without cache busting.
|
||||
*/
|
||||
export class AssetPreviewGrantService {
|
||||
readonly database: RegistrationService["database"];
|
||||
readonly options: Required<Pick<PreviewGrantServiceOptions, "clock">> & PreviewGrantServiceOptions;
|
||||
private readonly itemMappings = new Map<string, PreviewManifestItemMapping>();
|
||||
|
||||
constructor(options: PreviewGrantServiceOptions) {
|
||||
this.database = options.registration.database;
|
||||
this.options = { ...options, clock: options.clock ?? Date.now };
|
||||
this.migrate();
|
||||
}
|
||||
|
||||
createBatch(input: { adminUserId: string; batchId?: string; name: string }): PreviewBatchView {
|
||||
const adminUserId = assertText(input.adminUserId, "adminUserId");
|
||||
const name = assertText(input.name, "name");
|
||||
const batchId = input.batchId ? assertText(input.batchId, "batchId") : randomUUID();
|
||||
const now = this.options.clock();
|
||||
this.assertAdmin(adminUserId, now);
|
||||
this.immediate(() => {
|
||||
this.database.prepare(`
|
||||
INSERT INTO test_batches (batch_id, name, status, created_by, created_at, closed_at)
|
||||
VALUES (?, ?, 'active', ?, ?, NULL)
|
||||
`).run(batchId, name, adminUserId, now);
|
||||
this.audit({
|
||||
actorRef: adminUserId,
|
||||
afterSummary: { batch_id: batchId, status: "active" },
|
||||
beforeSummary: null,
|
||||
operationType: "preview_batch_create",
|
||||
targetRef: batchId,
|
||||
targetType: "preview_batch",
|
||||
}, now);
|
||||
});
|
||||
return { batchId, createdAt: now, createdBy: adminUserId, name, status: "active" };
|
||||
}
|
||||
|
||||
closeBatch(input: { adminUserId: string; batchId: string }): PreviewBatchView {
|
||||
const adminUserId = assertText(input.adminUserId, "adminUserId");
|
||||
const batchId = assertText(input.batchId, "batchId");
|
||||
const now = this.options.clock();
|
||||
this.assertAdmin(adminUserId, now);
|
||||
return this.immediate(() => {
|
||||
const batch = this.readBatch(batchId);
|
||||
if (!batch) throw new PreviewGrantError("batch_not_found");
|
||||
if (batch.status === "active") {
|
||||
this.database.prepare("UPDATE test_batches SET status = 'closed', closed_at = ? WHERE batch_id = ?").run(now, batchId);
|
||||
this.audit({
|
||||
actorRef: adminUserId,
|
||||
afterSummary: { batch_id: batchId, status: "closed" },
|
||||
beforeSummary: { batch_id: batchId, status: batch.status },
|
||||
operationType: "preview_batch_close",
|
||||
targetRef: batchId,
|
||||
targetType: "preview_batch",
|
||||
}, now);
|
||||
}
|
||||
return { ...batch, status: "closed" as const };
|
||||
});
|
||||
}
|
||||
|
||||
addBatchItems(input: {
|
||||
adminUserId: string;
|
||||
batchId: string;
|
||||
releaseVersion: string;
|
||||
resourceIds: readonly string[];
|
||||
}) {
|
||||
const adminUserId = assertText(input.adminUserId, "adminUserId");
|
||||
const batchId = assertText(input.batchId, "batchId");
|
||||
const releaseVersion = assertText(input.releaseVersion, "releaseVersion");
|
||||
const resourceIds = [...new Set(input.resourceIds.map((resourceId) => assertText(resourceId, "resourceId")))];
|
||||
if (resourceIds.length === 0) throw new PreviewGrantError("invalid_request");
|
||||
const now = this.options.clock();
|
||||
this.assertAdmin(adminUserId, now);
|
||||
for (const resourceId of resourceIds) {
|
||||
if (!this.options.assetReleases.read("internal_preview_asset", releaseVersion, resourceId)) {
|
||||
throw new PreviewGrantError("resource_not_found");
|
||||
}
|
||||
}
|
||||
this.immediate(() => {
|
||||
const batch = this.readBatch(batchId);
|
||||
if (!batch) throw new PreviewGrantError("batch_not_found");
|
||||
if (batch.status !== "active") throw new PreviewGrantError("batch_closed");
|
||||
const insert = this.database.prepare(`
|
||||
INSERT OR IGNORE INTO test_batch_items (test_batch_id, release_version, resource_id)
|
||||
VALUES (?, ?, ?)
|
||||
`);
|
||||
for (const resourceId of resourceIds) insert.run(batchId, releaseVersion, resourceId);
|
||||
this.audit({
|
||||
actorRef: adminUserId,
|
||||
afterSummary: { batch_id: batchId, item_count: resourceIds.length, release_version: releaseVersion },
|
||||
beforeSummary: null,
|
||||
operationType: "preview_batch_items_add",
|
||||
targetRef: batchId,
|
||||
targetType: "preview_batch",
|
||||
}, now);
|
||||
});
|
||||
return { batchId, releaseVersion, resourceIds };
|
||||
}
|
||||
|
||||
grant(input: {
|
||||
adminUserId: string;
|
||||
batchId: string;
|
||||
expiresAt: number;
|
||||
userId: string;
|
||||
}): PreviewGrantView {
|
||||
const adminUserId = assertText(input.adminUserId, "adminUserId");
|
||||
const batchId = assertText(input.batchId, "batchId");
|
||||
const userId = assertText(input.userId, "userId");
|
||||
if (!isUuid(userId)) throw new PreviewGrantError("invalid_request");
|
||||
const now = this.options.clock();
|
||||
if (!Number.isSafeInteger(input.expiresAt) || input.expiresAt <= now) throw new PreviewGrantError("invalid_expiry");
|
||||
this.assertAdmin(adminUserId, now);
|
||||
return this.immediate(() => {
|
||||
const batch = this.readBatch(batchId);
|
||||
if (!batch) throw new PreviewGrantError("batch_not_found");
|
||||
if (batch.status !== "active") throw new PreviewGrantError("batch_closed");
|
||||
const user = this.database.prepare("SELECT role, status FROM users WHERE user_id = ?").get(userId) as { role: string; status: string } | undefined;
|
||||
if (!user || user.role !== "user" || user.status !== "active") throw new PreviewGrantError("user_not_eligible");
|
||||
const grantId = randomUUID();
|
||||
this.database.prepare(`
|
||||
INSERT INTO asset_preview_grants (
|
||||
grant_id, user_id, test_batch_id, granted_by, granted_at, expires_at, status
|
||||
) VALUES (?, ?, ?, ?, ?, ?, 'active')
|
||||
`).run(grantId, userId, batchId, adminUserId, now, input.expiresAt);
|
||||
this.audit({
|
||||
actorRef: adminUserId,
|
||||
afterSummary: { batch_id: batchId, expires_at: input.expiresAt, grant_id: grantId, status: "active", user_id: userId },
|
||||
beforeSummary: null,
|
||||
operationType: "preview_grant_create",
|
||||
targetRef: grantId,
|
||||
targetType: "preview_grant",
|
||||
}, now);
|
||||
return {
|
||||
batchId,
|
||||
expiresAt: input.expiresAt,
|
||||
grantId,
|
||||
grantedAt: now,
|
||||
grantedBy: adminUserId,
|
||||
status: "active" as const,
|
||||
userId,
|
||||
};
|
||||
});
|
||||
}
|
||||
|
||||
revoke(input: { adminUserId: string; grantId: string }): PreviewGrantView {
|
||||
const adminUserId = assertText(input.adminUserId, "adminUserId");
|
||||
const grantId = assertText(input.grantId, "grantId");
|
||||
const now = this.options.clock();
|
||||
this.assertAdmin(adminUserId, now);
|
||||
return this.immediate(() => {
|
||||
this.expireDue(now);
|
||||
const grant = this.readGrant(grantId);
|
||||
if (!grant) throw new PreviewGrantError("grant_not_found");
|
||||
if (grant.status === "active") {
|
||||
this.database.prepare("UPDATE asset_preview_grants SET status = 'revoked' WHERE grant_id = ? AND status = 'active'").run(grantId);
|
||||
this.audit({
|
||||
actorRef: adminUserId,
|
||||
afterSummary: { grant_id: grantId, status: "revoked" },
|
||||
beforeSummary: { grant_id: grantId, status: grant.status },
|
||||
operationType: "preview_grant_revoke",
|
||||
targetRef: grantId,
|
||||
targetType: "preview_grant",
|
||||
}, now);
|
||||
}
|
||||
return { ...grant, status: "revoked" as const };
|
||||
});
|
||||
}
|
||||
|
||||
listBatches(input: { adminUserId: string }): PreviewBatchView[] {
|
||||
const adminUserId = assertText(input.adminUserId, "adminUserId");
|
||||
this.assertAdmin(adminUserId, this.options.clock());
|
||||
return (this.database.prepare(`
|
||||
SELECT batch_id, name, status, created_by, created_at
|
||||
FROM test_batches ORDER BY created_at DESC, batch_id DESC
|
||||
`).all() as Array<{ batch_id: string; created_at: number; created_by: string; name: string; status: PreviewBatchStatus }>).map((row) => ({
|
||||
batchId: row.batch_id,
|
||||
createdAt: row.created_at,
|
||||
createdBy: row.created_by,
|
||||
name: row.name,
|
||||
status: row.status,
|
||||
}));
|
||||
}
|
||||
|
||||
listGrants(input: { adminUserId: string; batchId?: string; userId?: string }): PreviewGrantView[] {
|
||||
const adminUserId = assertText(input.adminUserId, "adminUserId");
|
||||
this.assertAdmin(adminUserId, this.options.clock());
|
||||
const batchId = input.batchId ? assertText(input.batchId, "batchId") : undefined;
|
||||
const userId = input.userId ? assertText(input.userId, "userId") : undefined;
|
||||
const now = this.options.clock();
|
||||
return this.immediate(() => {
|
||||
this.expireDue(now);
|
||||
const rows = this.database.prepare(`
|
||||
SELECT grant_id, user_id, test_batch_id, granted_by, granted_at, expires_at, status
|
||||
FROM asset_preview_grants
|
||||
WHERE (? IS NULL OR test_batch_id = ?) AND (? IS NULL OR user_id = ?)
|
||||
ORDER BY granted_at DESC, grant_id DESC
|
||||
`).all(batchId ?? null, batchId ?? null, userId ?? null, userId ?? null) as Array<{
|
||||
expires_at: number; grant_id: string; granted_at: number; granted_by: string;
|
||||
status: PreviewGrantStatus; test_batch_id: string; user_id: string;
|
||||
}>;
|
||||
return rows.map((row) => ({
|
||||
batchId: row.test_batch_id,
|
||||
expiresAt: row.expires_at,
|
||||
grantId: row.grant_id,
|
||||
grantedAt: row.granted_at,
|
||||
grantedBy: row.granted_by,
|
||||
status: row.status,
|
||||
userId: row.user_id,
|
||||
}));
|
||||
});
|
||||
}
|
||||
|
||||
projectManifest(input: { releaseVersion: string; userId: string }): AssetReleaseManifestProjection | undefined {
|
||||
const releaseVersion = assertText(input.releaseVersion, "releaseVersion");
|
||||
const userId = assertText(input.userId, "userId");
|
||||
const base = this.options.assetReleases.project("internal_preview_asset", releaseVersion);
|
||||
if (!base) return undefined;
|
||||
const authorized = base.items.filter((item) => this.authorizeAsset({ releaseVersion, resourceId: item.resource_id, userId }));
|
||||
if (authorized.length === 0) return undefined;
|
||||
const items = authorized.map((item) => {
|
||||
const manifestItemId = randomUUID();
|
||||
const mapped: AssetReleaseManifestItem = {
|
||||
...item,
|
||||
resource_id: manifestItemId,
|
||||
url: `/api/v1/assets/preview/${releaseVersion}/${manifestItemId}`,
|
||||
};
|
||||
this.itemMappings.set(manifestItemId, {
|
||||
releaseVersion,
|
||||
resourceId: item.resource_id,
|
||||
userId,
|
||||
});
|
||||
return mapped;
|
||||
});
|
||||
return Object.freeze({
|
||||
items: Object.freeze(items.map((item) => Object.freeze(item))),
|
||||
manifest_sha256: manifestHash(items, releaseVersion),
|
||||
release_version: releaseVersion,
|
||||
schema_version: "AssetReleaseManifest/v1" as const,
|
||||
});
|
||||
}
|
||||
|
||||
authorizeAsset(input: { releaseVersion: string; resourceId: string; userId: string }) {
|
||||
const releaseVersion = assertText(input.releaseVersion, "releaseVersion");
|
||||
const resourceId = assertText(input.resourceId, "resourceId");
|
||||
const userId = assertText(input.userId, "userId");
|
||||
const now = this.options.clock();
|
||||
return this.immediate(() => {
|
||||
this.expireDue(now);
|
||||
const user = this.database.prepare("SELECT role, status FROM users WHERE user_id = ?").get(userId) as { role: string; status: string } | undefined;
|
||||
if (!user || user.role !== "user" || user.status !== "active") return false;
|
||||
const row = this.database.prepare(`
|
||||
SELECT 1 AS authorized
|
||||
FROM asset_preview_grants g
|
||||
JOIN test_batch_items i ON i.test_batch_id = g.test_batch_id
|
||||
WHERE g.user_id = ? AND g.status = 'active' AND g.expires_at > ?
|
||||
AND i.release_version = ? AND i.resource_id = ?
|
||||
LIMIT 1
|
||||
`).get(userId, now, releaseVersion, resourceId) as { authorized: 1 } | undefined;
|
||||
return Boolean(row);
|
||||
});
|
||||
}
|
||||
|
||||
readManifestItem(input: { manifestItemId: string; releaseVersion: string; userId: string }) {
|
||||
const manifestItemId = assertText(input.manifestItemId, "manifestItemId");
|
||||
const releaseVersion = assertText(input.releaseVersion, "releaseVersion");
|
||||
const userId = assertText(input.userId, "userId");
|
||||
const mapping = this.itemMappings.get(manifestItemId);
|
||||
if (!mapping || mapping.releaseVersion !== releaseVersion || mapping.userId !== userId) return undefined;
|
||||
if (!this.authorizeAsset({ releaseVersion, resourceId: mapping.resourceId, userId })) {
|
||||
this.itemMappings.delete(manifestItemId);
|
||||
return undefined;
|
||||
}
|
||||
const resource = this.options.assetReleases.read("internal_preview_asset", releaseVersion, mapping.resourceId);
|
||||
return resource ? { ...resource, resourceId: manifestItemId } : undefined;
|
||||
}
|
||||
|
||||
private migrate() {
|
||||
this.database.exec(`
|
||||
CREATE TABLE IF NOT EXISTS test_batches (
|
||||
batch_id TEXT PRIMARY KEY,
|
||||
name TEXT NOT NULL CHECK (length(name) BETWEEN 1 AND 160),
|
||||
status TEXT NOT NULL CHECK (status IN ('active', 'closed')),
|
||||
created_by TEXT NOT NULL REFERENCES users(user_id),
|
||||
created_at INTEGER NOT NULL,
|
||||
closed_at INTEGER
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS test_batch_items (
|
||||
test_batch_id TEXT NOT NULL REFERENCES test_batches(batch_id),
|
||||
release_version TEXT NOT NULL,
|
||||
resource_id TEXT NOT NULL,
|
||||
PRIMARY KEY (test_batch_id, release_version, resource_id)
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS asset_preview_grants (
|
||||
grant_id TEXT PRIMARY KEY,
|
||||
user_id TEXT NOT NULL REFERENCES users(user_id),
|
||||
test_batch_id TEXT NOT NULL REFERENCES test_batches(batch_id),
|
||||
granted_by TEXT NOT NULL REFERENCES users(user_id),
|
||||
granted_at INTEGER NOT NULL,
|
||||
expires_at INTEGER NOT NULL CHECK (expires_at > granted_at),
|
||||
status TEXT NOT NULL CHECK (status IN ('active', 'revoked', 'expired'))
|
||||
);
|
||||
CREATE INDEX IF NOT EXISTS asset_preview_grants_user_status
|
||||
ON asset_preview_grants(user_id, status, expires_at);
|
||||
`);
|
||||
}
|
||||
|
||||
private immediate<T>(action: () => T): T {
|
||||
this.database.exec("BEGIN IMMEDIATE");
|
||||
try {
|
||||
const value = action();
|
||||
this.database.exec("COMMIT");
|
||||
return value;
|
||||
} catch (error) {
|
||||
if (this.database.inTransaction) this.database.exec("ROLLBACK");
|
||||
throw error;
|
||||
}
|
||||
}
|
||||
|
||||
private assertAdmin(adminUserId: string, now: number) {
|
||||
const admin = this.database.prepare(`
|
||||
SELECT 1 AS allowed FROM users u JOIN admin_access a ON a.user_id = u.user_id
|
||||
WHERE u.user_id = ? AND u.role = 'super_admin' AND u.status = 'active' AND a.allowed = 1
|
||||
`).get(adminUserId) as { allowed: 1 } | undefined;
|
||||
if (!admin) throw new PreviewGrantError("admin_invalid");
|
||||
void now;
|
||||
}
|
||||
|
||||
private readBatch(batchId: string): PreviewBatchView | undefined {
|
||||
const row = this.database.prepare(`
|
||||
SELECT batch_id, name, status, created_by, created_at
|
||||
FROM test_batches WHERE batch_id = ?
|
||||
`).get(batchId) as { batch_id: string; created_at: number; created_by: string; name: string; status: PreviewBatchStatus } | undefined;
|
||||
return row ? {
|
||||
batchId: row.batch_id,
|
||||
createdAt: row.created_at,
|
||||
createdBy: row.created_by,
|
||||
name: row.name,
|
||||
status: row.status,
|
||||
} : undefined;
|
||||
}
|
||||
|
||||
private readGrant(grantId: string): PreviewGrantView | undefined {
|
||||
const row = this.database.prepare(`
|
||||
SELECT grant_id, user_id, test_batch_id, granted_by, granted_at, expires_at, status
|
||||
FROM asset_preview_grants WHERE grant_id = ?
|
||||
`).get(grantId) as {
|
||||
expires_at: number; grant_id: string; granted_at: number; granted_by: string;
|
||||
status: PreviewGrantStatus; test_batch_id: string; user_id: string;
|
||||
} | undefined;
|
||||
return row ? {
|
||||
batchId: row.test_batch_id,
|
||||
expiresAt: row.expires_at,
|
||||
grantId: row.grant_id,
|
||||
grantedAt: row.granted_at,
|
||||
grantedBy: row.granted_by,
|
||||
status: row.status,
|
||||
userId: row.user_id,
|
||||
} : undefined;
|
||||
}
|
||||
|
||||
private expireDue(now: number) {
|
||||
const rows = this.database.prepare(`
|
||||
SELECT grant_id, user_id, test_batch_id FROM asset_preview_grants
|
||||
WHERE status = 'active' AND expires_at <= ?
|
||||
`).all(now) as Array<{ grant_id: string; test_batch_id: string; user_id: string }>;
|
||||
if (rows.length === 0) return;
|
||||
this.database.prepare("UPDATE asset_preview_grants SET status = 'expired' WHERE status = 'active' AND expires_at <= ?").run(now);
|
||||
for (const row of rows) {
|
||||
this.audit({
|
||||
actorRef: "preview_grant_expiry",
|
||||
afterSummary: { grant_id: row.grant_id, status: "expired" },
|
||||
beforeSummary: { grant_id: row.grant_id, status: "active" },
|
||||
operationType: "preview_grant_expire",
|
||||
targetRef: row.grant_id,
|
||||
targetType: "preview_grant",
|
||||
}, now, "system");
|
||||
}
|
||||
}
|
||||
|
||||
private audit(input: {
|
||||
actorRef: string;
|
||||
afterSummary: Record<string, unknown> | null;
|
||||
beforeSummary: Record<string, unknown> | null;
|
||||
operationType: string;
|
||||
targetRef: string;
|
||||
targetType: string;
|
||||
}, now: number, actorType: "super_admin" | "system" = "super_admin") {
|
||||
this.database.prepare(`
|
||||
INSERT INTO admin_operation_logs (
|
||||
log_id, actor_type, actor_ref, operation_type, target_type, target_ref,
|
||||
result, before_summary, after_summary, occurred_at, expires_at
|
||||
) VALUES (?, ?, ?, ?, ?, ?, 'succeeded', ?, ?, ?, ?)
|
||||
`).run(
|
||||
randomUUID(), actorType, input.actorRef, input.operationType, input.targetType, input.targetRef,
|
||||
serializeAuditSummary(input.beforeSummary), serializeAuditSummary(input.afterSummary),
|
||||
now, now + auditRetentionMilliseconds,
|
||||
);
|
||||
}
|
||||
}
|
||||
@@ -366,7 +366,6 @@ export class ProjectService {
|
||||
throw new ProjectError("project_state_conflict", latest);
|
||||
}
|
||||
this.insertProjectState({ canvasState: canvas, name, projectId: input.projectId, stateVersion: nextVersion }, now);
|
||||
this.rebuildProjectStickerReferences(input.projectId, canvas, now);
|
||||
this.database.prepare(`
|
||||
INSERT INTO project_state_idempotency (
|
||||
owner_id, project_id, idempotency_key, request_hash, response_state_version, created_at
|
||||
@@ -378,25 +377,6 @@ export class ProjectService {
|
||||
return result;
|
||||
}
|
||||
|
||||
private rebuildProjectStickerReferences(projectId: string, canvas: CanvasState, now: number) {
|
||||
if (!this.tableExists("project_sticker_asset_refs")) return;
|
||||
this.database.prepare("DELETE FROM project_sticker_asset_refs WHERE project_id = ?").run(projectId);
|
||||
const insert = this.database.prepare(`
|
||||
INSERT INTO project_sticker_asset_refs (reference_id, project_id, stable_id, resource_version, created_at)
|
||||
VALUES (?, ?, ?, ?, ?)
|
||||
`);
|
||||
for (const element of canvas.elements) {
|
||||
if (element.type !== "static_sticker") continue;
|
||||
insert.run(
|
||||
`project:${projectId}:sticker:${element.element_id}`,
|
||||
projectId,
|
||||
element.template_or_asset_id,
|
||||
element.resource_version,
|
||||
now,
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
trashFailedEmpty(ownerId: string, projectIds: string[]) {
|
||||
const uniqueIds = [...new Set(projectIds)];
|
||||
if (uniqueIds.length === 0 || uniqueIds.length > projectLimit) throw new ProjectError("generation_state_invalid");
|
||||
@@ -794,16 +774,6 @@ export class ProjectService {
|
||||
FOREIGN KEY (project_id) REFERENCES projects(project_id) ON DELETE CASCADE
|
||||
);
|
||||
CREATE INDEX IF NOT EXISTS project_resource_files_managed ON project_resource_files(managed_file_id, project_id);
|
||||
CREATE TABLE IF NOT EXISTS project_sticker_asset_refs (
|
||||
reference_id TEXT PRIMARY KEY,
|
||||
project_id TEXT NOT NULL,
|
||||
stable_id TEXT NOT NULL,
|
||||
resource_version TEXT NOT NULL,
|
||||
created_at INTEGER NOT NULL,
|
||||
FOREIGN KEY (project_id) REFERENCES projects(project_id) ON DELETE CASCADE
|
||||
);
|
||||
CREATE INDEX IF NOT EXISTS project_sticker_asset_refs_lookup
|
||||
ON project_sticker_asset_refs (stable_id, resource_version);
|
||||
CREATE TABLE IF NOT EXISTS latest_exports (
|
||||
project_id TEXT NOT NULL,
|
||||
format TEXT NOT NULL CHECK (format IN ('jpg', 'png')),
|
||||
|
||||
@@ -1,8 +0,0 @@
|
||||
export class StickerReleaseError extends Error {
|
||||
readonly httpStatus: number;
|
||||
|
||||
constructor(readonly reason: string, httpStatus = 400) {
|
||||
super(reason);
|
||||
this.httpStatus = httpStatus;
|
||||
}
|
||||
}
|
||||
@@ -1,556 +0,0 @@
|
||||
import { createHash, randomUUID } from "node:crypto";
|
||||
import { readFileSync } from "node:fs";
|
||||
import { createRequire } from "node:module";
|
||||
import { basename, extname } from "node:path";
|
||||
import { Readable } from "node:stream";
|
||||
|
||||
import type BetterSqlite3 from "better-sqlite3";
|
||||
import sharp, { type Metadata } from "sharp";
|
||||
|
||||
import type { StaticStickerCatalogItem } from "@dada/static-sticker-catalog";
|
||||
|
||||
import { ManagedStorage, type StagedManagedFile } from "./managed-storage.js";
|
||||
import { StickerReleaseError } from "./sticker-release-errors.js";
|
||||
import { classifyCapacity } from "./storage-policy.js";
|
||||
|
||||
export { StickerReleaseError } from "./sticker-release-errors.js";
|
||||
|
||||
const require = createRequire(import.meta.url);
|
||||
const Database = require("better-sqlite3") as typeof BetterSqlite3;
|
||||
const stableIdPattern = /^STK([0-9]{4,})$/;
|
||||
const idempotencyPattern = /^[A-Za-z0-9_-]{32,200}$/;
|
||||
const sha256Pattern = /^[0-9a-f]{64}$/i;
|
||||
const maximumOriginalBytes = 20 * 1024 * 1024;
|
||||
const maximumDimension = 8_192;
|
||||
const bundledPartCounts = [203, 36, 27, 48, 38, 75, 37, 67, 48, 24, 40, 30, 27, 51, 62, 19, 36, 45, 92, 53, 69, 31, 36, 30, 183] as const;
|
||||
|
||||
type StickerMime = "image/png" | "image/webp";
|
||||
type StickerVariant = "original" | "thumbnail";
|
||||
|
||||
interface StickerItemRow {
|
||||
enabled: 0 | 1;
|
||||
height: number;
|
||||
mime_type: StickerMime;
|
||||
order_index: number;
|
||||
original_byte_size: number;
|
||||
original_file_id: string;
|
||||
original_filename: string;
|
||||
original_relative_path: string;
|
||||
original_sha256: string;
|
||||
part: number;
|
||||
release_version: string;
|
||||
stable_id: string;
|
||||
thumbnail_byte_size: number;
|
||||
thumbnail_file_id: string;
|
||||
thumbnail_relative_path: string;
|
||||
thumbnail_sha256: string;
|
||||
width: number;
|
||||
}
|
||||
|
||||
export interface StickerUploadInput {
|
||||
actorId: string;
|
||||
content: Readable;
|
||||
enabled: boolean;
|
||||
expectedByteSize: number;
|
||||
expectedMimeType: StickerMime;
|
||||
expectedSha256: string;
|
||||
fileName: string;
|
||||
idempotencyKey: string;
|
||||
order: number;
|
||||
part: number;
|
||||
stableId: string;
|
||||
}
|
||||
|
||||
function digest(value: string) {
|
||||
return createHash("sha256").update(value, "utf8").digest("hex");
|
||||
}
|
||||
|
||||
function stableJson(value: unknown): string {
|
||||
if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
|
||||
if (value && typeof value === "object") {
|
||||
return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stableJson(item)}`).join(",")}}`;
|
||||
}
|
||||
return JSON.stringify(value);
|
||||
}
|
||||
|
||||
function iso(timestamp: number) {
|
||||
return new Date(timestamp).toISOString();
|
||||
}
|
||||
|
||||
function itemView(row: StickerItemRow): StaticStickerCatalogItem {
|
||||
const originalReference = `/api/v1/assets/public/${encodeURIComponent(row.release_version)}/${encodeURIComponent(row.stable_id)}`;
|
||||
return {
|
||||
enabled: row.enabled === 1,
|
||||
height: row.height,
|
||||
mime: row.mime_type,
|
||||
mime_type: row.mime_type,
|
||||
order: row.order_index,
|
||||
original_filename: row.original_filename,
|
||||
original_reference: originalReference,
|
||||
origin: "admin_uploaded",
|
||||
part: row.part,
|
||||
relative_path: `static-stickers/${row.stable_id}${row.mime_type === "image/png" ? ".png" : ".webp"}`,
|
||||
resource_version: row.release_version,
|
||||
sha256: row.original_sha256,
|
||||
stable_id: row.stable_id,
|
||||
thumbnail_reference: {
|
||||
media: "thumbnail",
|
||||
resource_id: row.stable_id,
|
||||
resource_version: row.release_version,
|
||||
url: `${originalReference}?variant=thumbnail`,
|
||||
},
|
||||
width: row.width,
|
||||
};
|
||||
}
|
||||
|
||||
export class StickerReleaseService {
|
||||
private readonly clock: () => number;
|
||||
private readonly database: BetterSqlite3.Database;
|
||||
private readonly storage: ManagedStorage;
|
||||
|
||||
constructor(input: { clock?: () => number; databasePath: string; storage: ManagedStorage }) {
|
||||
this.clock = input.clock ?? Date.now;
|
||||
const nativeBinding = process.env.DADA_SQLITE_NATIVE_BINDING;
|
||||
this.database = new Database(input.databasePath, nativeBinding ? { nativeBinding } : undefined);
|
||||
this.database.pragma("journal_mode = WAL");
|
||||
this.database.pragma("foreign_keys = ON");
|
||||
this.database.pragma("busy_timeout = 5000");
|
||||
this.storage = input.storage;
|
||||
this.migrate();
|
||||
}
|
||||
|
||||
close() {
|
||||
this.database.close();
|
||||
}
|
||||
|
||||
async upload(input: StickerUploadInput) {
|
||||
this.validateUpload(input);
|
||||
const requestHash = digest(stableJson({
|
||||
enabled: input.enabled,
|
||||
expected_byte_size: input.expectedByteSize,
|
||||
expected_mime_type: input.expectedMimeType,
|
||||
expected_sha256: input.expectedSha256.toLowerCase(),
|
||||
order: input.order,
|
||||
part: input.part,
|
||||
stable_id: input.stableId,
|
||||
}));
|
||||
const keyDigest = digest(input.idempotencyKey);
|
||||
const receipt = this.database.prepare(`
|
||||
SELECT request_hash, release_version FROM sticker_upload_receipts
|
||||
WHERE actor_id = ? AND idempotency_key_digest = ?
|
||||
`).get(input.actorId, keyDigest) as { release_version: string; request_hash: string } | undefined;
|
||||
if (receipt) {
|
||||
input.content.destroy();
|
||||
if (receipt.request_hash !== requestHash) throw new StickerReleaseError("sticker_idempotency_conflict", 409);
|
||||
return this.uploadResult(receipt.release_version, input.stableId, false);
|
||||
}
|
||||
this.assertNewPosition(input.stableId, input.part, input.order);
|
||||
|
||||
const staged: StagedManagedFile[] = [];
|
||||
try {
|
||||
const original = await this.storage.stageManagedImage({
|
||||
content: input.content,
|
||||
expectedMimeType: input.expectedMimeType,
|
||||
expectedSha256: input.expectedSha256,
|
||||
fileKind: "sticker_original",
|
||||
fileName: `${input.stableId}${input.expectedMimeType === "image/png" ? ".png" : ".webp"}`,
|
||||
maximumBytes: maximumOriginalBytes,
|
||||
operationId: randomUUID(),
|
||||
ownerRef: input.actorId,
|
||||
projectedWriteBytes: input.expectedByteSize,
|
||||
});
|
||||
staged.push(original);
|
||||
if (original.bytes !== input.expectedByteSize) throw new StickerReleaseError("content_size_invalid");
|
||||
|
||||
let metadata: Metadata;
|
||||
let thumbnail: Buffer;
|
||||
const decoder = sharp(readFileSync(original.stagingPath), { failOn: "warning", limitInputPixels: maximumDimension * maximumDimension });
|
||||
try {
|
||||
metadata = await decoder.metadata();
|
||||
if (metadata.format !== (input.expectedMimeType === "image/png" ? "png" : "webp")
|
||||
|| !metadata.width || !metadata.height || metadata.width > maximumDimension || metadata.height > maximumDimension) {
|
||||
throw new Error("content_decode_invalid");
|
||||
}
|
||||
thumbnail = await decoder
|
||||
.rotate()
|
||||
.resize({ fit: "inside", height: 256, width: 256, withoutEnlargement: true })
|
||||
.png({ adaptiveFiltering: true, compressionLevel: 9 })
|
||||
.toBuffer();
|
||||
} catch {
|
||||
throw new StickerReleaseError("content_decode_invalid");
|
||||
} finally {
|
||||
decoder.destroy();
|
||||
}
|
||||
|
||||
const thumbnailStaged = await this.storage.stageManagedImage({
|
||||
content: Readable.from(thumbnail),
|
||||
expectedMimeType: "image/png",
|
||||
fileKind: "sticker_thumbnail",
|
||||
fileName: `${input.stableId}-thumbnail.png`,
|
||||
maximumBytes: maximumOriginalBytes,
|
||||
operationId: randomUUID(),
|
||||
ownerRef: input.actorId,
|
||||
projectedWriteBytes: thumbnail.byteLength,
|
||||
});
|
||||
staged.push(thumbnailStaged);
|
||||
const releaseVersion = this.immediate(() => this.commitUpload({
|
||||
...input,
|
||||
height: metadata.height!,
|
||||
keyDigest,
|
||||
original,
|
||||
requestHash,
|
||||
thumbnail: thumbnailStaged,
|
||||
width: metadata.width!,
|
||||
}));
|
||||
return this.uploadResult(releaseVersion, input.stableId, true);
|
||||
} catch (error) {
|
||||
for (const file of staged) this.storage.abandonStagedFile(file);
|
||||
if (!(error instanceof StickerReleaseError) && error instanceof Error
|
||||
&& new Set(["content_hash_invalid", "content_mime_invalid", "content_size_invalid", "file_name_invalid"]).has(error.message)) {
|
||||
throw new StickerReleaseError("sticker_upload_invalid");
|
||||
}
|
||||
throw error;
|
||||
}
|
||||
}
|
||||
|
||||
update(input: { actorId: string; enabled?: boolean; order?: number; part?: number; stableId: string }) {
|
||||
const current = this.currentVersion();
|
||||
if (!current) throw new StickerReleaseError("sticker_not_found", 404);
|
||||
const existing = this.readItem(current, input.stableId);
|
||||
if (!existing) throw new StickerReleaseError("sticker_not_found", 404);
|
||||
const part = input.part ?? existing.part;
|
||||
const order = input.order ?? existing.order_index;
|
||||
this.validatePosition(input.stableId, part, order);
|
||||
const releaseVersion = this.immediate(() => {
|
||||
const version = this.nextReleaseVersion();
|
||||
this.copyRelease(current, version);
|
||||
const conflict = this.database.prepare(`
|
||||
SELECT stable_id FROM sticker_release_items
|
||||
WHERE release_version = ? AND part = ? AND order_index = ? AND stable_id <> ?
|
||||
`).get(version, part, order, input.stableId);
|
||||
if (conflict) throw new StickerReleaseError("sticker_order_conflict", 409);
|
||||
this.database.prepare(`
|
||||
UPDATE sticker_release_items SET enabled = ?, part = ?, order_index = ?
|
||||
WHERE release_version = ? AND stable_id = ?
|
||||
`).run((input.enabled ?? existing.enabled === 1) ? 1 : 0, part, order, version, input.stableId);
|
||||
this.finalizeRelease(version, current, input.actorId);
|
||||
return version;
|
||||
});
|
||||
return { item: itemView(this.readItem(releaseVersion, input.stableId)!), release_version: releaseVersion };
|
||||
}
|
||||
|
||||
listPublic(releaseVersion = this.currentVersion()) {
|
||||
if (!releaseVersion) return { count: 0, items: [], release_version: null };
|
||||
const exists = this.database.prepare("SELECT 1 FROM sticker_releases WHERE release_version = ?").get(releaseVersion);
|
||||
if (!exists) return { count: 0, items: [], release_version: null };
|
||||
const items = (this.database.prepare(`
|
||||
SELECT * FROM sticker_release_items WHERE release_version = ? AND enabled = 1
|
||||
ORDER BY part, order_index, stable_id
|
||||
`).all(releaseVersion) as StickerItemRow[]).map(itemView);
|
||||
return { count: items.length, items, release_version: releaseVersion };
|
||||
}
|
||||
|
||||
adminView() {
|
||||
const releaseVersion = this.currentVersion();
|
||||
const items = releaseVersion
|
||||
? (this.database.prepare("SELECT * FROM sticker_release_items WHERE release_version = ? ORDER BY part, order_index, stable_id").all(releaseVersion) as StickerItemRow[])
|
||||
: [];
|
||||
return {
|
||||
count: items.length,
|
||||
items: items.map((row) => ({
|
||||
...itemView(row),
|
||||
file_state: "committed" as const,
|
||||
original_byte_size: row.original_byte_size,
|
||||
thumbnail_byte_size: row.thumbnail_byte_size,
|
||||
})),
|
||||
release_version: releaseVersion,
|
||||
storage: this.storage.getState(),
|
||||
};
|
||||
}
|
||||
|
||||
readPublicAsset(releaseVersion: string, stableId: string, variant: StickerVariant) {
|
||||
const row = this.readItem(releaseVersion, stableId);
|
||||
if (!row || row.enabled !== 1) return undefined;
|
||||
const fileId = variant === "thumbnail" ? row.thumbnail_file_id : row.original_file_id;
|
||||
const path = this.storage.resolveManagedFile(fileId);
|
||||
if (!path) return undefined;
|
||||
return {
|
||||
bytes: readFileSync(path),
|
||||
mimeType: variant === "thumbnail" ? "image/png" as const : row.mime_type,
|
||||
sha256: variant === "thumbnail" ? row.thumbnail_sha256 : row.original_sha256,
|
||||
};
|
||||
}
|
||||
|
||||
inspectCounts() {
|
||||
const count = (table: string) => (this.database.prepare(`SELECT COUNT(*) AS count FROM ${table}`).get() as { count: number }).count;
|
||||
return { items: count("sticker_release_items"), releases: count("sticker_releases"), upload_receipts: count("sticker_upload_receipts") };
|
||||
}
|
||||
|
||||
private uploadResult(releaseVersion: string, stableId: string, created: boolean) {
|
||||
const row = this.readItem(releaseVersion, stableId);
|
||||
if (!row) throw new StickerReleaseError("sticker_not_found", 404);
|
||||
return {
|
||||
created,
|
||||
item: itemView(row),
|
||||
original: { byte_size: row.original_byte_size, file_id: row.original_file_id, sha256: row.original_sha256 },
|
||||
release_version: releaseVersion,
|
||||
thumbnail: { byte_size: row.thumbnail_byte_size, file_id: row.thumbnail_file_id, sha256: row.thumbnail_sha256 },
|
||||
};
|
||||
}
|
||||
|
||||
private commitUpload(input: StickerUploadInput & {
|
||||
height: number;
|
||||
keyDigest: string;
|
||||
original: StagedManagedFile;
|
||||
requestHash: string;
|
||||
thumbnail: StagedManagedFile;
|
||||
width: number;
|
||||
}) {
|
||||
this.assertNewPosition(input.stableId, input.part, input.order);
|
||||
const previous = this.currentVersion();
|
||||
const releaseVersion = this.nextReleaseVersion();
|
||||
if (previous) this.copyRelease(previous, releaseVersion);
|
||||
for (const file of [input.original, input.thumbnail]) {
|
||||
this.storage.moveStagedFile(file);
|
||||
this.database.prepare(`
|
||||
INSERT INTO managed_files (file_id, file_kind, owner_ref, relative_path, byte_size, mime_type, sha256, status, created_at)
|
||||
VALUES (?, ?, ?, ?, ?, ?, ?, 'committed', ?)
|
||||
`).run(file.fileId, file.fileKind, file.ownerRef, file.relativePath, file.bytes, file.mimeType, file.sha256, iso(this.clock()));
|
||||
}
|
||||
this.database.prepare(`
|
||||
INSERT INTO sticker_release_items (
|
||||
release_version, stable_id, part, order_index, original_filename, original_relative_path,
|
||||
width, height, mime_type, original_sha256, original_file_id, original_byte_size,
|
||||
thumbnail_file_id, thumbnail_relative_path, thumbnail_sha256, thumbnail_byte_size, enabled
|
||||
) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
|
||||
`).run(
|
||||
releaseVersion, input.stableId, input.part, input.order, input.fileName, input.original.relativePath,
|
||||
input.width, input.height, input.expectedMimeType, input.original.sha256, input.original.fileId, input.original.bytes,
|
||||
input.thumbnail.fileId, input.thumbnail.relativePath, input.thumbnail.sha256, input.thumbnail.bytes, input.enabled ? 1 : 0,
|
||||
);
|
||||
this.database.prepare(`
|
||||
INSERT OR IGNORE INTO sticker_managed_file_history (
|
||||
managed_file_id, stable_id, resource_version, file_kind, created_at
|
||||
) VALUES (?, ?, ?, 'original', ?), (?, ?, ?, 'thumbnail', ?)
|
||||
`).run(
|
||||
input.original.fileId, input.stableId, releaseVersion, this.clock(),
|
||||
input.thumbnail.fileId, input.stableId, releaseVersion, this.clock(),
|
||||
);
|
||||
this.consumeStagedStorage([input.original, input.thumbnail]);
|
||||
this.database.prepare(`
|
||||
INSERT INTO sticker_upload_receipts (actor_id, idempotency_key_digest, request_hash, release_version, stable_id, created_at)
|
||||
VALUES (?, ?, ?, ?, ?, ?)
|
||||
`).run(input.actorId, input.keyDigest, input.requestHash, releaseVersion, input.stableId, iso(this.clock()));
|
||||
this.finalizeRelease(releaseVersion, previous, input.actorId);
|
||||
return releaseVersion;
|
||||
}
|
||||
|
||||
private finalizeRelease(releaseVersion: string, previous: string | null, actorId: string) {
|
||||
const rows = this.database.prepare(`
|
||||
SELECT stable_id, part, order_index, original_sha256, thumbnail_sha256, enabled
|
||||
FROM sticker_release_items WHERE release_version = ? ORDER BY stable_id
|
||||
`).all(releaseVersion);
|
||||
const manifestSha256 = digest(stableJson(rows));
|
||||
this.database.prepare(`
|
||||
INSERT INTO sticker_releases (release_version, previous_release_version, manifest_sha256, published_at, published_by)
|
||||
VALUES (?, ?, ?, ?, ?)
|
||||
`).run(releaseVersion, previous, manifestSha256, iso(this.clock()), actorId);
|
||||
this.database.prepare(`
|
||||
INSERT INTO current_sticker_release (singleton, release_version) VALUES (1, ?)
|
||||
ON CONFLICT(singleton) DO UPDATE SET release_version = excluded.release_version
|
||||
`).run(releaseVersion);
|
||||
const files = this.database.prepare(`
|
||||
SELECT original_file_id AS file_id FROM sticker_release_items WHERE release_version = ?
|
||||
UNION SELECT thumbnail_file_id AS file_id FROM sticker_release_items WHERE release_version = ?
|
||||
`).all(releaseVersion, releaseVersion) as Array<{ file_id: string }>;
|
||||
for (const file of files) {
|
||||
this.database.prepare(`
|
||||
INSERT INTO project_asset_refs (reference_id, managed_file_id, reference_type, created_at)
|
||||
VALUES (?, ?, 'release', ?)
|
||||
`).run(`release:${releaseVersion}:${file.file_id}`, file.file_id, iso(this.clock()));
|
||||
}
|
||||
}
|
||||
|
||||
private copyRelease(from: string, to: string) {
|
||||
this.database.prepare(`
|
||||
INSERT INTO sticker_release_items (
|
||||
release_version, stable_id, part, order_index, original_filename, original_relative_path,
|
||||
width, height, mime_type, original_sha256, original_file_id, original_byte_size,
|
||||
thumbnail_file_id, thumbnail_relative_path, thumbnail_sha256, thumbnail_byte_size, enabled
|
||||
)
|
||||
SELECT ?, stable_id, part, order_index, original_filename, original_relative_path,
|
||||
width, height, mime_type, original_sha256, original_file_id, original_byte_size,
|
||||
thumbnail_file_id, thumbnail_relative_path, thumbnail_sha256, thumbnail_byte_size, enabled
|
||||
FROM sticker_release_items WHERE release_version = ?
|
||||
`).run(to, from);
|
||||
}
|
||||
|
||||
private consumeStagedStorage(files: StagedManagedFile[]) {
|
||||
const timestamp = iso(this.clock());
|
||||
for (const file of files) {
|
||||
this.database.prepare(`
|
||||
UPDATE storage_reservations SET status = 'consumed', resolved_at = ?
|
||||
WHERE operation_id = ? AND status = 'active'
|
||||
`).run(timestamp, file.operationId);
|
||||
}
|
||||
const total = files.reduce((sum, file) => sum + file.bytes, 0);
|
||||
const state = this.database.prepare("SELECT managed_content_bytes FROM local_backend_storage_state WHERE singleton = 1").get() as { managed_content_bytes: number };
|
||||
const active = this.database.prepare("SELECT COALESCE(SUM(projected_bytes), 0) AS bytes FROM storage_reservations WHERE status = 'active'").get() as { bytes: number };
|
||||
const nextBytes = state.managed_content_bytes + total;
|
||||
const classification = classifyCapacity(nextBytes, active.bytes);
|
||||
this.database.prepare(`
|
||||
UPDATE local_backend_storage_state
|
||||
SET managed_content_bytes = ?, capacity_notice_level = ?, storage_status = ?, measured_at = ?, version = version + 1
|
||||
WHERE singleton = 1
|
||||
`).run(nextBytes, classification.capacity_notice_level, classification.storage_status, timestamp);
|
||||
}
|
||||
|
||||
private currentVersion() {
|
||||
return (this.database.prepare("SELECT release_version FROM current_sticker_release WHERE singleton = 1").get() as { release_version: string } | undefined)?.release_version ?? null;
|
||||
}
|
||||
|
||||
private nextReleaseVersion() {
|
||||
const date = new Date(this.clock()).toISOString().slice(0, 10).replaceAll("-", "");
|
||||
const row = this.database.prepare("SELECT next_sequence FROM sticker_release_sequences WHERE release_date = ?").get(date) as { next_sequence: number } | undefined;
|
||||
const sequence = row?.next_sequence ?? 1;
|
||||
this.database.prepare(`
|
||||
INSERT INTO sticker_release_sequences (release_date, next_sequence) VALUES (?, ?)
|
||||
ON CONFLICT(release_date) DO UPDATE SET next_sequence = excluded.next_sequence
|
||||
`).run(date, sequence + 1);
|
||||
return `asset-${date}.${sequence}`;
|
||||
}
|
||||
|
||||
private readItem(releaseVersion: string, stableId: string) {
|
||||
return this.database.prepare("SELECT * FROM sticker_release_items WHERE release_version = ? AND stable_id = ?")
|
||||
.get(releaseVersion, stableId) as StickerItemRow | undefined;
|
||||
}
|
||||
|
||||
private assertNewPosition(stableId: string, part: number, order: number) {
|
||||
this.validatePosition(stableId, part, order);
|
||||
const current = this.currentVersion();
|
||||
if (!current) return;
|
||||
if (this.readItem(current, stableId)) throw new StickerReleaseError("sticker_stable_id_conflict", 409);
|
||||
const conflict = this.database.prepare(`
|
||||
SELECT stable_id FROM sticker_release_items WHERE release_version = ? AND part = ? AND order_index = ?
|
||||
`).get(current, part, order);
|
||||
if (conflict) throw new StickerReleaseError("sticker_order_conflict", 409);
|
||||
}
|
||||
|
||||
private validatePosition(stableId: string, part: number, order: number) {
|
||||
const matched = stableId.match(stableIdPattern);
|
||||
const numericId = matched ? Number(matched[1]) : Number.NaN;
|
||||
if (!matched || !Number.isSafeInteger(numericId) || numericId <= 1_407) throw new StickerReleaseError("sticker_stable_id_invalid");
|
||||
if (!Number.isSafeInteger(part) || part < 1 || part > bundledPartCounts.length
|
||||
|| !Number.isSafeInteger(order) || order <= bundledPartCounts[part - 1]!) {
|
||||
throw new StickerReleaseError("sticker_part_order_invalid");
|
||||
}
|
||||
}
|
||||
|
||||
private validateUpload(input: StickerUploadInput) {
|
||||
this.validatePosition(input.stableId, input.part, input.order);
|
||||
if (!/^[0-9a-f-]{36}$/i.test(input.actorId) || !idempotencyPattern.test(input.idempotencyKey)
|
||||
|| !sha256Pattern.test(input.expectedSha256) || !Number.isSafeInteger(input.expectedByteSize)
|
||||
|| input.expectedByteSize <= 0 || input.expectedByteSize > maximumOriginalBytes
|
||||
|| !new Set(["image/png", "image/webp"]).has(input.expectedMimeType)) {
|
||||
throw new StickerReleaseError("sticker_upload_invalid");
|
||||
}
|
||||
const expectedExtension = input.expectedMimeType === "image/png" ? ".png" : ".webp";
|
||||
if (input.fileName.length > 255 || basename(input.fileName) !== input.fileName || /[\u0000-\u001f]/.test(input.fileName)
|
||||
|| extname(input.fileName).toLowerCase() !== expectedExtension) throw new StickerReleaseError("sticker_upload_invalid");
|
||||
}
|
||||
|
||||
private immediate<T>(action: () => T) {
|
||||
this.database.exec("BEGIN IMMEDIATE");
|
||||
try {
|
||||
const result = action();
|
||||
this.database.exec("COMMIT");
|
||||
return result;
|
||||
} catch (error) {
|
||||
if (this.database.inTransaction) this.database.exec("ROLLBACK");
|
||||
throw error;
|
||||
}
|
||||
}
|
||||
|
||||
private migrate() {
|
||||
this.database.exec(`
|
||||
CREATE TABLE IF NOT EXISTS sticker_release_sequences (
|
||||
release_date TEXT PRIMARY KEY,
|
||||
next_sequence INTEGER NOT NULL CHECK (next_sequence >= 1)
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS sticker_releases (
|
||||
release_version TEXT PRIMARY KEY,
|
||||
previous_release_version TEXT,
|
||||
manifest_sha256 TEXT NOT NULL CHECK (length(manifest_sha256) = 64),
|
||||
published_at TEXT NOT NULL,
|
||||
published_by TEXT NOT NULL
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS sticker_release_items (
|
||||
release_version TEXT NOT NULL,
|
||||
stable_id TEXT NOT NULL,
|
||||
part INTEGER NOT NULL CHECK (part BETWEEN 1 AND 25),
|
||||
order_index INTEGER NOT NULL CHECK (order_index > 0),
|
||||
original_filename TEXT NOT NULL,
|
||||
original_relative_path TEXT NOT NULL,
|
||||
width INTEGER NOT NULL CHECK (width > 0),
|
||||
height INTEGER NOT NULL CHECK (height > 0),
|
||||
mime_type TEXT NOT NULL CHECK (mime_type IN ('image/png', 'image/webp')),
|
||||
original_sha256 TEXT NOT NULL CHECK (length(original_sha256) = 64),
|
||||
original_file_id TEXT NOT NULL REFERENCES managed_files(file_id),
|
||||
original_byte_size INTEGER NOT NULL CHECK (original_byte_size > 0),
|
||||
thumbnail_file_id TEXT NOT NULL REFERENCES managed_files(file_id),
|
||||
thumbnail_relative_path TEXT NOT NULL,
|
||||
thumbnail_sha256 TEXT NOT NULL CHECK (length(thumbnail_sha256) = 64),
|
||||
thumbnail_byte_size INTEGER NOT NULL CHECK (thumbnail_byte_size > 0),
|
||||
enabled INTEGER NOT NULL CHECK (enabled IN (0, 1)),
|
||||
PRIMARY KEY (release_version, stable_id),
|
||||
UNIQUE (release_version, part, order_index)
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS current_sticker_release (
|
||||
singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
|
||||
release_version TEXT NOT NULL
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS sticker_upload_receipts (
|
||||
actor_id TEXT NOT NULL,
|
||||
idempotency_key_digest TEXT NOT NULL CHECK (length(idempotency_key_digest) = 64),
|
||||
request_hash TEXT NOT NULL CHECK (length(request_hash) = 64),
|
||||
release_version TEXT NOT NULL,
|
||||
stable_id TEXT NOT NULL,
|
||||
created_at TEXT NOT NULL,
|
||||
PRIMARY KEY (actor_id, idempotency_key_digest)
|
||||
);
|
||||
CREATE TABLE IF NOT EXISTS sticker_managed_file_history (
|
||||
managed_file_id TEXT NOT NULL,
|
||||
stable_id TEXT NOT NULL,
|
||||
resource_version TEXT NOT NULL,
|
||||
file_kind TEXT NOT NULL CHECK (file_kind IN ('original', 'thumbnail')),
|
||||
created_at INTEGER NOT NULL,
|
||||
PRIMARY KEY (managed_file_id, file_kind),
|
||||
FOREIGN KEY (managed_file_id) REFERENCES managed_files(file_id)
|
||||
);
|
||||
CREATE TRIGGER IF NOT EXISTS sticker_releases_no_update
|
||||
BEFORE UPDATE ON sticker_releases BEGIN SELECT RAISE(ABORT, 'sticker_releases_immutable'); END;
|
||||
CREATE TRIGGER IF NOT EXISTS sticker_releases_no_delete
|
||||
BEFORE DELETE ON sticker_releases BEGIN SELECT RAISE(ABORT, 'sticker_releases_immutable'); END;
|
||||
CREATE TRIGGER IF NOT EXISTS sticker_release_items_no_update
|
||||
BEFORE UPDATE ON sticker_release_items
|
||||
WHEN EXISTS (SELECT 1 FROM sticker_releases WHERE release_version = OLD.release_version)
|
||||
BEGIN SELECT RAISE(ABORT, 'sticker_release_items_immutable'); END;
|
||||
CREATE TRIGGER IF NOT EXISTS sticker_release_items_no_delete
|
||||
BEFORE DELETE ON sticker_release_items
|
||||
WHEN EXISTS (SELECT 1 FROM sticker_releases WHERE release_version = OLD.release_version)
|
||||
BEGIN SELECT RAISE(ABORT, 'sticker_release_items_immutable'); END;
|
||||
`);
|
||||
this.database.exec(`
|
||||
INSERT OR IGNORE INTO sticker_managed_file_history (
|
||||
managed_file_id, stable_id, resource_version, file_kind, created_at
|
||||
)
|
||||
SELECT original_file_id, stable_id, release_version, 'original', strftime('%s', 'now') * 1000
|
||||
FROM sticker_release_items;
|
||||
INSERT OR IGNORE INTO sticker_managed_file_history (
|
||||
managed_file_id, stable_id, resource_version, file_kind, created_at
|
||||
)
|
||||
SELECT thumbnail_file_id, stable_id, release_version, 'thumbnail', strftime('%s', 'now') * 1000
|
||||
FROM sticker_release_items;
|
||||
`);
|
||||
}
|
||||
}
|
||||
@@ -1,71 +0,0 @@
|
||||
.admin-assets-page { min-height: 100vh; color: #111111; background: #f6f6f4; }
|
||||
.admin-assets-page > main { width: min(1360px, calc(100% - 64px)); margin: 0 auto; padding: 36px 0 80px; }
|
||||
.admin-assets-heading { display: flex; align-items: end; justify-content: space-between; gap: 24px; padding-bottom: 18px; border-bottom: 1px solid #999993; }
|
||||
.admin-assets-heading p { margin: 0 0 4px; font: 700 11px Consolas, monospace; }
|
||||
.admin-assets-heading h1 { margin: 0; font-size: 34px; }
|
||||
.admin-assets-heading > strong { font: 700 13px Consolas, monospace; }
|
||||
.admin-assets-summary { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); margin: 22px 0; border-block: 1px solid #8c8c86; background: #ffffff; }
|
||||
.admin-assets-summary > span { display: grid; min-width: 0; gap: 6px; padding: 17px 18px; border-right: 1px solid #c1c1ba; color: #65655f; font-size: 12px; }
|
||||
.admin-assets-summary > span:last-child { border-right: 0; }
|
||||
.admin-assets-summary strong { color: #111111; font-size: 15px; overflow-wrap: anywhere; }
|
||||
.admin-assets-summary .is-active { color: #1f6639; }
|
||||
.admin-assets-summary .is-full,
|
||||
.admin-assets-summary .is-unavailable { color: #9b2c23; }
|
||||
.admin-assets-upload,
|
||||
.admin-assets-list { margin-top: 22px; border-block: 1px solid #8c8c86; background: #ffffff; }
|
||||
.admin-assets-upload > header,
|
||||
.admin-assets-list > header { display: flex; align-items: center; justify-content: space-between; min-height: 54px; padding: 0 16px; border-bottom: 1px solid #c1c1ba; background: #e7e7e2; }
|
||||
.admin-assets-upload h2,
|
||||
.admin-assets-list h2 { margin: 0; font-size: 16px; }
|
||||
.admin-assets-upload header span,
|
||||
.admin-assets-list header span { font: 700 11px Consolas, monospace; }
|
||||
.admin-assets-form { display: grid; grid-template-columns: minmax(230px, 2fr) minmax(130px, 1fr) 84px 92px 130px auto; align-items: end; gap: 12px; padding: 18px 16px; }
|
||||
.admin-assets-form label { display: grid; gap: 6px; min-width: 0; color: #4c4c47; font-size: 11px; font-weight: 800; }
|
||||
.admin-assets-form input { width: 100%; min-height: 40px; padding: 7px 9px; border: 1px solid #777770; border-radius: 0; background: #ffffff; }
|
||||
.admin-assets-form input[type="file"] { padding: 7px; }
|
||||
.admin-assets-form .admin-assets-enabled { display: flex; min-height: 40px; align-items: center; gap: 8px; color: #111111; }
|
||||
.admin-assets-enabled input { width: 18px; min-height: 18px; }
|
||||
.admin-assets-form button,
|
||||
.admin-assets-alert button { min-height: 42px; padding: 9px 14px; border: 1px solid #111111; border-radius: 0; background: #f2f500; font-weight: 900; }
|
||||
.admin-assets-form button:disabled { color: #777770; background: #dfdfda; cursor: not-allowed; }
|
||||
.admin-assets-blocked { margin: 0; padding: 12px 16px; border-top: 1px solid #e2b8b3; color: #812219; background: #fff1ef; font-weight: 700; }
|
||||
.admin-assets-table-wrap { overflow-x: auto; }
|
||||
.admin-assets-table-wrap table { width: 100%; min-width: 1120px; border-collapse: collapse; table-layout: fixed; }
|
||||
.admin-assets-table-wrap th,
|
||||
.admin-assets-table-wrap td { padding: 12px 10px; border-right: 1px solid #d0d0ca; border-bottom: 1px solid #d0d0ca; text-align: left; vertical-align: middle; font-size: 12px; }
|
||||
.admin-assets-table-wrap thead th { background: #f1f1ed; font-weight: 900; }
|
||||
.admin-assets-table-wrap th:first-child { width: 78px; }
|
||||
.admin-assets-table-wrap th:nth-child(2) { width: 150px; }
|
||||
.admin-assets-table-wrap th:nth-child(3) { width: 140px; }
|
||||
.admin-assets-table-wrap th:nth-child(4) { width: 210px; }
|
||||
.admin-assets-table-wrap th:nth-child(5) { width: 92px; }
|
||||
.admin-assets-table-wrap th:nth-child(6),
|
||||
.admin-assets-table-wrap th:nth-child(7) { width: 92px; }
|
||||
.admin-assets-table-wrap th:last-child { width: 180px; }
|
||||
.admin-assets-table-wrap img { display: block; width: 48px; height: 48px; object-fit: contain; border: 1px solid #c1c1ba; background: #f6f6f4; }
|
||||
.admin-assets-table-wrap strong,
|
||||
.admin-assets-table-wrap small { display: block; }
|
||||
.admin-assets-table-wrap small { margin-top: 4px; color: #65655f; font-size: 10px; overflow-wrap: anywhere; }
|
||||
.admin-assets-table-wrap input[type="number"] { width: 70px; min-height: 34px; margin-top: 5px; padding: 5px 7px; border: 1px solid #777770; border-radius: 0; }
|
||||
.admin-assets-table-wrap td:last-child { display: flex; gap: 6px; }
|
||||
.admin-assets-table-wrap button { min-height: 34px; padding: 6px 8px; border: 1px solid #555550; border-radius: 0; background: #ffffff; font-weight: 800; }
|
||||
.admin-assets-table-wrap button:disabled { color: #8a8a84; background: #ecece8; }
|
||||
.admin-assets-table-wrap .is-enabled { color: #1f6639; font-weight: 800; }
|
||||
.admin-assets-table-wrap .is-disabled { color: #812219; font-weight: 800; }
|
||||
.admin-assets-empty { margin: 0; padding: 34px 16px; color: #65655f; }
|
||||
.admin-assets-notice { margin: 16px 0 0; padding: 13px 16px; border-left: 4px solid #287b45; background: #edf8f0; font-weight: 800; }
|
||||
.admin-assets-alert { display: flex; align-items: center; justify-content: space-between; gap: 16px; margin-top: 24px; padding: 16px; border-left: 5px solid #d14a3b; background: #fff1ef; }
|
||||
.admin-assets-loading { display: grid; gap: 10px; margin-top: 24px; }
|
||||
.admin-assets-loading span { display: block; height: 62px; background: #dfdfda; }
|
||||
@media (max-width: 900px) {
|
||||
.admin-assets-page > main { width: 100%; padding-right: 16px; padding-left: 16px; }
|
||||
.admin-assets-summary { grid-template-columns: 1fr; }
|
||||
.admin-assets-summary > span { border-right: 0; border-bottom: 1px solid #c1c1ba; }
|
||||
.admin-assets-form { grid-template-columns: 1fr 1fr; }
|
||||
}
|
||||
@media (max-width: 580px) {
|
||||
.admin-product-header { padding: 0 12px; overflow-x: auto; }
|
||||
.admin-product-header nav a { min-width: 66px; }
|
||||
.admin-assets-form { grid-template-columns: 1fr; }
|
||||
.admin-assets-heading { align-items: start; flex-direction: column; }
|
||||
}
|
||||
@@ -1,191 +0,0 @@
|
||||
import { useEffect, useMemo, useState } from "react";
|
||||
|
||||
import "./admin-assets.css";
|
||||
|
||||
interface AdminSession { csrf_token: string }
|
||||
interface StorageState {
|
||||
capacity_notice_level: "normal" | "warning" | "critical";
|
||||
hard_limit_bytes: number;
|
||||
managed_content_bytes: number;
|
||||
storage_status: "active" | "full" | "unavailable";
|
||||
}
|
||||
interface AdminSticker {
|
||||
enabled: boolean;
|
||||
file_state: "committed";
|
||||
height: number;
|
||||
mime_type: "image/png" | "image/webp";
|
||||
order: number;
|
||||
original_byte_size: number;
|
||||
original_filename: string;
|
||||
part: number;
|
||||
resource_version: string;
|
||||
stable_id: string;
|
||||
thumbnail_byte_size: number;
|
||||
thumbnail_reference: { url: string };
|
||||
width: number;
|
||||
}
|
||||
interface AdminAssetsResponse {
|
||||
count: number;
|
||||
items: AdminSticker[];
|
||||
release_version: string | null;
|
||||
storage: StorageState;
|
||||
}
|
||||
|
||||
function idempotencyKey() {
|
||||
return crypto.randomUUID().replaceAll("-", "") + crypto.randomUUID().replaceAll("-", "");
|
||||
}
|
||||
|
||||
function bytesLabel(bytes: number) {
|
||||
return new Intl.NumberFormat("zh-CN", { maximumFractionDigits: 2, minimumFractionDigits: 2 }).format(bytes / (1024 ** 3));
|
||||
}
|
||||
|
||||
async function loadJson<T>(url: string, init?: RequestInit) {
|
||||
const response = await fetch(url, { credentials: "same-origin", ...init });
|
||||
const body = response.headers.get("content-type")?.includes("application/json") ? await response.json() as T : undefined;
|
||||
return { body, response };
|
||||
}
|
||||
|
||||
export function AdminAssetsPage() {
|
||||
const [session, setSession] = useState<AdminSession>();
|
||||
const [assets, setAssets] = useState<AdminAssetsResponse>();
|
||||
const [loadingFailed, setLoadingFailed] = useState(false);
|
||||
const [busy, setBusy] = useState(false);
|
||||
const [notice, setNotice] = useState("");
|
||||
const [file, setFile] = useState<File>();
|
||||
const [stableId, setStableId] = useState("STK1408");
|
||||
const [part, setPart] = useState(25);
|
||||
const [order, setOrder] = useState(184);
|
||||
const [enabled, setEnabled] = useState(true);
|
||||
const [orderDrafts, setOrderDrafts] = useState<Record<string, number>>({});
|
||||
|
||||
async function load() {
|
||||
setLoadingFailed(false);
|
||||
try {
|
||||
const [sessionResult, assetsResult] = await Promise.all([
|
||||
loadJson<AdminSession>("/api/v1/admin-auth/session"),
|
||||
loadJson<AdminAssetsResponse>("/api/v1/admin/assets/static-stickers"),
|
||||
]);
|
||||
if (!sessionResult.response.ok || !assetsResult.response.ok || !sessionResult.body || !assetsResult.body) throw new Error("load_failed");
|
||||
setSession(sessionResult.body);
|
||||
setAssets(assetsResult.body);
|
||||
setOrderDrafts(Object.fromEntries(assetsResult.body.items.map((item) => [item.stable_id, item.order])));
|
||||
const numericIds = assetsResult.body.items.map((item) => Number(item.stable_id.slice(3))).filter(Number.isFinite);
|
||||
setStableId(`STK${Math.max(1407, ...numericIds) + 1}`);
|
||||
setOrder(Math.max(183, ...assetsResult.body.items.filter((item) => item.part === 25).map((item) => item.order)) + 1);
|
||||
setNotice("");
|
||||
} catch {
|
||||
setLoadingFailed(true);
|
||||
}
|
||||
}
|
||||
|
||||
useEffect(() => { void load(); }, []);
|
||||
|
||||
const uploadBlocked = !assets || assets.storage.storage_status !== "active";
|
||||
const formValid = useMemo(() => Boolean(
|
||||
file && /^(image\/png|image\/webp)$/.test(file.type) && /^STK[0-9]{4,}$/.test(stableId)
|
||||
&& Number.isSafeInteger(part) && part >= 1 && part <= 25 && Number.isSafeInteger(order) && order > 0,
|
||||
), [file, order, part, stableId]);
|
||||
|
||||
async function upload() {
|
||||
if (!file || !session || !formValid || uploadBlocked || busy) return;
|
||||
setBusy(true);
|
||||
setNotice("");
|
||||
try {
|
||||
const sha256 = Array.from(new Uint8Array(await crypto.subtle.digest("SHA-256", await file.arrayBuffer())))
|
||||
.map((byte) => byte.toString(16).padStart(2, "0")).join("");
|
||||
const form = new FormData();
|
||||
form.append("stable_id", stableId);
|
||||
form.append("part", String(part));
|
||||
form.append("order", String(order));
|
||||
form.append("enabled", String(enabled));
|
||||
form.append("original_byte_size", String(file.size));
|
||||
form.append("original_sha256", sha256);
|
||||
form.append("sticker_file", file, file.name);
|
||||
const response = await fetch("/api/v1/admin/assets/static-stickers", {
|
||||
body: form,
|
||||
credentials: "same-origin",
|
||||
headers: { "Idempotency-Key": idempotencyKey(), "X-CSRF-Token": session.csrf_token },
|
||||
method: "POST",
|
||||
});
|
||||
if (!response.ok) {
|
||||
setNotice(response.status === 507 ? "存储容量已满或暂不可用,未写入任何文件。" : response.status === 409 ? "稳定 ID 或 part 顺序已存在。" : "文件格式、内容或字段校验未通过。");
|
||||
return;
|
||||
}
|
||||
setFile(undefined);
|
||||
await load();
|
||||
setNotice("贴纸已生成缩略图并发布新资源版本。");
|
||||
} catch {
|
||||
setNotice("上传未完成,未发布新资源版本。");
|
||||
} finally {
|
||||
setBusy(false);
|
||||
}
|
||||
}
|
||||
|
||||
async function update(item: AdminSticker, change: { enabled?: boolean; order?: number }) {
|
||||
if (!session || busy) return;
|
||||
setBusy(true);
|
||||
setNotice("");
|
||||
try {
|
||||
const { response } = await loadJson(`/api/v1/admin/assets/static-stickers/${encodeURIComponent(item.stable_id)}`, {
|
||||
body: JSON.stringify(change),
|
||||
headers: { "Content-Type": "application/json", "X-CSRF-Token": session.csrf_token },
|
||||
method: "PATCH",
|
||||
});
|
||||
if (!response.ok) throw new Error("update_failed");
|
||||
await load();
|
||||
setNotice(change.enabled === false ? "贴纸已停用,新项目目录不再显示。" : change.enabled === true ? "贴纸已重新启用。" : "part 顺序已发布到新资源版本。");
|
||||
} catch {
|
||||
setNotice("素材状态未更新。");
|
||||
} finally {
|
||||
setBusy(false);
|
||||
}
|
||||
}
|
||||
|
||||
return <div className="admin-assets-page">
|
||||
<header className="admin-product-header">
|
||||
<a href="/admin">DADA ADMIN</a>
|
||||
<nav aria-label="后台导航"><a href="/admin/users">用户</a><a href="/admin/models">模型</a><a aria-current="page" href="/admin/assets">素材</a><a href="/admin/audit">审计</a></nav>
|
||||
</header>
|
||||
<main>
|
||||
<header className="admin-assets-heading"><div><p>ASSET OPERATIONS</p><h1>普通贴纸</h1></div><strong>{assets?.release_version ?? "尚未发布"}</strong></header>
|
||||
{!assets && !loadingFailed ? <div aria-label="贴纸素材加载中" className="admin-assets-loading"><span /><span /><span /></div> : null}
|
||||
{loadingFailed ? <p className="admin-assets-alert" role="alert">素材状态暂时无法读取。<button onClick={() => void load()} type="button">重试</button></p> : null}
|
||||
{assets ? <>
|
||||
<div className="admin-assets-summary" aria-label="素材存储摘要">
|
||||
<span>后台贴纸<strong>{assets.count}</strong></span>
|
||||
<span>受管内容<strong>{bytesLabel(assets.storage.managed_content_bytes)} / {bytesLabel(assets.storage.hard_limit_bytes)} GB</strong></span>
|
||||
<span>存储状态<strong className={`is-${assets.storage.storage_status}`}>{assets.storage.storage_status}</strong></span>
|
||||
</div>
|
||||
<section className="admin-assets-upload" aria-labelledby="asset-upload-title">
|
||||
<header><h2 id="asset-upload-title">上传并发布</h2><span>PNG / WebP</span></header>
|
||||
<div className="admin-assets-form">
|
||||
<label>文件<input accept="image/png,image/webp" aria-label="贴纸文件" disabled={uploadBlocked || busy} key={file?.name ?? "empty"} onChange={(event) => setFile(event.target.files?.[0])} type="file" /></label>
|
||||
<label>稳定 ID<input aria-label="稳定 ID" disabled={uploadBlocked || busy} onChange={(event) => setStableId(event.target.value.toUpperCase())} value={stableId} /></label>
|
||||
<label>Part<input aria-label="Part" disabled={uploadBlocked || busy} max="25" min="1" onChange={(event) => setPart(Number(event.target.value))} type="number" value={part} /></label>
|
||||
<label>顺序<input aria-label="顺序" disabled={uploadBlocked || busy} min="1" onChange={(event) => setOrder(Number(event.target.value))} type="number" value={order} /></label>
|
||||
<label className="admin-assets-enabled"><input checked={enabled} disabled={uploadBlocked || busy} onChange={(event) => setEnabled(event.target.checked)} type="checkbox" />发布后启用</label>
|
||||
<button disabled={!formValid || uploadBlocked || busy} onClick={() => void upload()} type="button">{busy ? "处理中" : "上传并发布"}</button>
|
||||
</div>
|
||||
{uploadBlocked ? <p className="admin-assets-blocked" role="status">当前存储状态禁止新增原图和缩略图。</p> : null}
|
||||
</section>
|
||||
<section className="admin-assets-list" aria-labelledby="asset-list-title">
|
||||
<header><h2 id="asset-list-title">当前版本</h2><span>{assets.count} 项</span></header>
|
||||
{assets.items.length === 0 ? <p className="admin-assets-empty">当前没有后台上传的普通贴纸。</p> : <div className="admin-assets-table-wrap"><table>
|
||||
<thead><tr><th>预览</th><th>稳定 ID</th><th>Part / 顺序</th><th>原文件</th><th>尺寸</th><th>文件状态</th><th>发布状态</th><th>操作</th></tr></thead>
|
||||
<tbody>{assets.items.map((item) => <tr key={item.stable_id}>
|
||||
<td><img alt="" src={item.thumbnail_reference.url} /></td>
|
||||
<th scope="row"><strong>{item.stable_id}</strong><small>{item.resource_version}</small></th>
|
||||
<td><span>part{item.part}</span><input aria-label={`${item.stable_id} 顺序`} min="1" onChange={(event) => setOrderDrafts((current) => ({ ...current, [item.stable_id]: Number(event.target.value) }))} type="number" value={orderDrafts[item.stable_id] ?? item.order} /></td>
|
||||
<td><span>{item.original_filename}</span><small>{item.mime_type} · {item.original_byte_size.toLocaleString("zh-CN")} B</small></td>
|
||||
<td>{item.width} x {item.height}</td>
|
||||
<td>{item.file_state}</td>
|
||||
<td><span className={item.enabled ? "is-enabled" : "is-disabled"}>{item.enabled ? "已启用" : "已停用"}</span></td>
|
||||
<td><button disabled={busy || (orderDrafts[item.stable_id] ?? item.order) === item.order} onClick={() => void update(item, { order: orderDrafts[item.stable_id] ?? item.order })} type="button">更新顺序</button><button disabled={busy} onClick={() => void update(item, { enabled: !item.enabled })} type="button">{item.enabled ? "停用" : "启用"}</button></td>
|
||||
</tr>)}</tbody>
|
||||
</table></div>}
|
||||
</section>
|
||||
{notice ? <p className="admin-assets-notice" role="status">{notice}</p> : null}
|
||||
</> : null}
|
||||
</main>
|
||||
</div>;
|
||||
}
|
||||
@@ -1,4 +1,4 @@
|
||||
import { useEffect, useMemo, useRef, useState } from "react";
|
||||
import { useCallback, useEffect, useMemo, useRef, useState } from "react";
|
||||
|
||||
import "./admin-models.css";
|
||||
|
||||
@@ -64,7 +64,7 @@ export function AdminModelsPage() {
|
||||
const priorityRefs = useRef<Record<string, HTMLInputElement | null>>({});
|
||||
const defaultRefs = useRef<Record<string, HTMLInputElement | null>>({});
|
||||
|
||||
async function load() {
|
||||
const load = useCallback(async () => {
|
||||
setLoadingFailed(false);
|
||||
setConflicted(false);
|
||||
try {
|
||||
@@ -80,9 +80,16 @@ export function AdminModelsPage() {
|
||||
} catch {
|
||||
setLoadingFailed(true);
|
||||
}
|
||||
}
|
||||
}, []);
|
||||
|
||||
useEffect(() => { void load(); }, []);
|
||||
useEffect(() => { void load(); }, [load]);
|
||||
|
||||
useEffect(() => {
|
||||
if (typeof EventSource === "undefined") return undefined;
|
||||
const source = new EventSource("/api/v1/events");
|
||||
source.onmessage = () => { void load(); };
|
||||
return () => source.close();
|
||||
}, [load]);
|
||||
|
||||
const validation = useMemo(() => {
|
||||
if (!draft) return { valid: false, message: "" };
|
||||
@@ -147,11 +154,7 @@ export function AdminModelsPage() {
|
||||
|
||||
return (
|
||||
<div className="admin-models-page">
|
||||
<header className="admin-product-header">
|
||||
<a href="/admin">DADA ADMIN</a>
|
||||
<nav aria-label="后台导航"><a href="/admin/users">用户</a><a aria-current="page" href="/admin/models">模型</a><a href="/admin/assets">素材</a><a href="/admin/audit">审计</a></nav>
|
||||
</header>
|
||||
<main>
|
||||
<main id="admin-main">
|
||||
<header className="admin-models-heading">
|
||||
<div><p>MODEL OPERATIONS</p><h1>模型配置</h1></div>
|
||||
{configuration ? <strong>配置集合 v{configuration.config_set_version}</strong> : null}
|
||||
|
||||
@@ -0,0 +1,37 @@
|
||||
.admin-services-storage { max-width: 1180px; }
|
||||
.admin-services-heading { align-items: end; }
|
||||
.admin-services-heading-actions { align-items: center; display: flex; gap: 16px; }
|
||||
.admin-services-heading-actions button, .admin-diagnostics-section button { background: #111827; border: 0; color: #fff; cursor: pointer; font: inherit; padding: 10px 14px; }
|
||||
.admin-health-section { border-top: 1px solid #d9dde5; margin-top: 26px; padding-top: 22px; }
|
||||
.admin-health-section > header { align-items: center; display: flex; justify-content: space-between; margin-bottom: 18px; }
|
||||
.admin-health-section h3 { margin: 4px 0 0; }
|
||||
.admin-health-section header p { color: #7b8493; font-size: 11px; letter-spacing: .12em; margin: 0; }
|
||||
.admin-safe-note { color: #667085; font-size: 13px; }
|
||||
.admin-service-grid { display: grid; gap: 12px; grid-template-columns: repeat(3, minmax(0, 1fr)); }
|
||||
.admin-service-card { background: #fff; border: 1px solid #e1e5ea; min-height: 160px; padding: 18px; }
|
||||
.admin-service-card.is-degraded, .admin-service-card.is-paused_quota, .admin-service-card.is-paused_provider, .admin-service-card.is-unavailable { border-color: #e5b6b6; }
|
||||
.admin-service-card-heading { align-items: center; display: flex; justify-content: space-between; }
|
||||
.admin-service-card-heading span, .admin-storage-state { color: #147a50; font-size: 13px; }
|
||||
.admin-service-card.is-degraded .admin-service-card-heading span, .admin-service-card.is-paused_quota .admin-service-card-heading span, .admin-service-card.is-paused_provider .admin-service-card-heading span, .admin-service-card.is-unavailable .admin-service-card-heading span { color: #b42318; }
|
||||
.admin-service-card dl, .admin-storage-details { display: grid; gap: 10px; margin: 18px 0 0; }
|
||||
.admin-service-card dl div, .admin-storage-details div { align-items: baseline; display: flex; justify-content: space-between; }
|
||||
.admin-service-card dt, .admin-storage-details dt { color: #667085; font-size: 12px; }
|
||||
.admin-service-card dd, .admin-storage-details dd { margin: 0; text-align: right; }
|
||||
.admin-storage-state.is-full, .admin-storage-state.is-unavailable { color: #b42318; }
|
||||
.admin-storage-metrics { display: grid; gap: 16px; grid-template-columns: repeat(4, minmax(0, 1fr)); }
|
||||
.admin-storage-metrics div { background: #f7f8fa; padding: 14px 16px; }
|
||||
.admin-storage-metrics span { color: #667085; display: block; font-size: 12px; }
|
||||
.admin-storage-metrics strong { display: block; font-size: 20px; margin-top: 6px; }
|
||||
.admin-storage-progress { background: #e5e7eb; height: 8px; margin-top: 18px; overflow: hidden; }
|
||||
.admin-storage-progress span { background: #147a50; display: block; height: 100%; }
|
||||
.admin-storage-description { color: #667085; font-size: 13px; line-height: 1.7; max-width: 780px; }
|
||||
.admin-storage-description code { color: #344054; }
|
||||
.admin-diagnostics-section > header button:disabled { background: #98a2b3; cursor: not-allowed; }
|
||||
.admin-diagnostics-section > p { color: #667085; font-size: 13px; }
|
||||
.admin-diagnostics-section pre { background: #111827; color: #d1fadf; font: 12px/1.65 ui-monospace, SFMono-Regular, Consolas, monospace; margin: 16px 0 0; max-height: 280px; overflow: auto; padding: 16px; white-space: pre-wrap; }
|
||||
.admin-services-loading { display: grid; gap: 12px; grid-template-columns: repeat(3, 1fr); }
|
||||
.admin-services-loading span, .admin-diagnostics-placeholder { background: #eef1f4; display: block; height: 160px; }
|
||||
.admin-services-failure { align-items: center; background: #fff4f2; color: #b42318; display: flex; gap: 16px; justify-content: space-between; padding: 14px 16px; }
|
||||
.admin-services-failure button { background: transparent; border: 1px solid #b42318; color: #b42318; cursor: pointer; padding: 6px 12px; }
|
||||
@media (max-width: 900px) { .admin-service-grid, .admin-storage-metrics { grid-template-columns: repeat(2, minmax(0, 1fr)); } }
|
||||
@media (max-width: 620px) { .admin-service-grid, .admin-storage-metrics { grid-template-columns: 1fr; } .admin-services-heading-actions { align-items: flex-end; flex-direction: column; gap: 8px; } }
|
||||
@@ -0,0 +1,136 @@
|
||||
import { useCallback, useEffect, useState } from "react";
|
||||
|
||||
import type { AdminDiagnosticsResponse, AdminServicesStorageResponse } from "@dada/shared-contracts";
|
||||
|
||||
import "./admin-services-storage.css";
|
||||
|
||||
const serviceLabels: Record<AdminServicesStorageResponse["services"][number]["service_id"], string> = {
|
||||
ai_gateway: "AI 网关",
|
||||
amap: "高德",
|
||||
api: "API",
|
||||
asset_root: "素材根",
|
||||
resend: "Resend",
|
||||
worker: "Worker",
|
||||
};
|
||||
|
||||
const statusLabels: Record<AdminServicesStorageResponse["services"][number]["status"], string> = {
|
||||
active: "正常",
|
||||
degraded: "有异常",
|
||||
disabled: "已停用",
|
||||
paused_provider: "供应商暂停",
|
||||
paused_quota: "额度暂停",
|
||||
unavailable: "不可用",
|
||||
};
|
||||
|
||||
const impactLabels: Record<AdminServicesStorageResponse["services"][number]["impact_scope"], string> = {
|
||||
account: "账户模型",
|
||||
api: "后台接口",
|
||||
authentication: "认证",
|
||||
generation: "生成",
|
||||
location: "定位",
|
||||
model: "单模型",
|
||||
none: "无",
|
||||
storage: "存储",
|
||||
unknown: "未知范围",
|
||||
};
|
||||
|
||||
function formatTime(value: string | null) {
|
||||
if (!value) return "未记录";
|
||||
return new Intl.DateTimeFormat("zh-CN", { dateStyle: "short", timeStyle: "short" }).format(new Date(value));
|
||||
}
|
||||
|
||||
async function getJson<T>(url: string) {
|
||||
const response = await fetch(url, { credentials: "same-origin" });
|
||||
if (response.status === 401) window.dispatchEvent(new Event("dada:session-invalid"));
|
||||
if (!response.ok) throw new Error("admin_state_unavailable");
|
||||
return await response.json() as T;
|
||||
}
|
||||
|
||||
export function AdminServicesStoragePage() {
|
||||
const [state, setState] = useState<AdminServicesStorageResponse>();
|
||||
const [diagnostics, setDiagnostics] = useState<AdminDiagnosticsResponse>();
|
||||
const [loading, setLoading] = useState(true);
|
||||
const [failed, setFailed] = useState(false);
|
||||
const [copied, setCopied] = useState(false);
|
||||
|
||||
const load = useCallback(async () => {
|
||||
setLoading(true);
|
||||
setFailed(false);
|
||||
try {
|
||||
const [nextState, nextDiagnostics] = await Promise.all([
|
||||
getJson<AdminServicesStorageResponse>("/api/v1/admin/services-storage"),
|
||||
getJson<AdminDiagnosticsResponse>("/api/v1/admin/diagnostics"),
|
||||
]);
|
||||
setState(nextState);
|
||||
setDiagnostics(nextDiagnostics);
|
||||
} catch {
|
||||
setFailed(true);
|
||||
} finally {
|
||||
setLoading(false);
|
||||
}
|
||||
}, []);
|
||||
|
||||
useEffect(() => { void load(); }, [load]);
|
||||
|
||||
async function copyDiagnostics() {
|
||||
if (!diagnostics) return;
|
||||
try {
|
||||
await navigator.clipboard.writeText(diagnostics.diagnostic_text);
|
||||
setCopied(true);
|
||||
window.setTimeout(() => setCopied(false), 1800);
|
||||
} catch {
|
||||
setCopied(false);
|
||||
}
|
||||
}
|
||||
|
||||
return (
|
||||
<main className="admin-services-storage" id="admin-main">
|
||||
<header className="admin-page-heading admin-services-heading">
|
||||
<div><p>OPERATIONS / HEALTH</p><h2>服务与存储</h2></div>
|
||||
<div className="admin-services-heading-actions">
|
||||
{state ? <time dateTime={state.generated_at}>更新于 {formatTime(state.generated_at)}</time> : null}
|
||||
<button aria-label="重新读取服务与存储状态" onClick={() => void load()} type="button">重新读取</button>
|
||||
</div>
|
||||
</header>
|
||||
{loading && !state ? <div aria-label="服务与存储状态加载中" className="admin-services-loading"><span /><span /><span /><span /></div> : null}
|
||||
{failed ? <div className="admin-services-failure" role="alert"><span>状态暂时无法读取{state ? `,保留 ${formatTime(state.generated_at)} 的结果` : ""}。</span><button onClick={() => void load()} type="button">重试</button></div> : null}
|
||||
{state ? (
|
||||
<>
|
||||
<section aria-labelledby="admin-services-list-heading" className="admin-health-section">
|
||||
<header><div><p>SERVICE STATUS</p><h3 id="admin-services-list-heading">外部服务与本机组件</h3></div><span className="admin-safe-note">仅显示脱敏状态</span></header>
|
||||
<div className="admin-service-grid">
|
||||
{state.services.map((service) => (
|
||||
<article className={`admin-service-card is-${service.status}`} key={service.service_id}>
|
||||
<div className="admin-service-card-heading"><strong>{serviceLabels[service.service_id]}</strong><span>{statusLabels[service.status]}</span></div>
|
||||
<dl>
|
||||
<div><dt>配置状态</dt><dd>{service.configured ? "已配置" : "未配置"}</dd></div>
|
||||
<div><dt>影响范围</dt><dd>{impactLabels[service.impact_scope]}</dd></div>
|
||||
<div><dt>最近检查</dt><dd>{formatTime(service.checked_at)}</dd></div>
|
||||
{service.pause_reason ? <div><dt>安全原因</dt><dd>{service.pause_reason}</dd></div> : null}
|
||||
</dl>
|
||||
</article>
|
||||
))}
|
||||
</div>
|
||||
</section>
|
||||
<section aria-labelledby="admin-storage-heading" className="admin-health-section">
|
||||
<header><div><p>LOCAL DATA ROOT</p><h3 id="admin-storage-heading">本机内容容量</h3></div><span className={`admin-storage-state is-${state.storage.status}`}>{state.storage.status === "active" ? "可写" : state.storage.status === "full" ? "已满" : "不可用"}</span></header>
|
||||
<div className="admin-storage-metrics">
|
||||
<div><span>已用内容</span><strong>{(state.storage.managed_content_bytes / 1024 / 1024 / 1024).toFixed(2)} GB</strong></div>
|
||||
<div><span>固定上限</span><strong>{(state.storage.hard_limit_bytes / 1024 / 1024 / 1024).toFixed(2)} GB</strong></div>
|
||||
<div><span>容量提醒</span><strong>{state.storage.capacity_notice_level}</strong></div>
|
||||
<div><span>清理队列</span><strong>{state.storage.cleanup_pending_count}</strong></div>
|
||||
</div>
|
||||
<div className="admin-storage-progress" aria-label={`本机内容容量 ${(state.storage.managed_content_bytes / state.storage.hard_limit_bytes * 100).toFixed(1)}%`}><span style={{ width: `${Math.min(100, state.storage.managed_content_bytes / state.storage.hard_limit_bytes * 100)}%` }} /></div>
|
||||
<p className="admin-storage-description">测试数据仅保存在本机,不自动备份,也不会迁移到正式系统。当前 Windows 用户的 Dada 本机数据目录引用:<code>{state.storage.data_root_ref}</code>。只读规范素材库不计入 5 GB 内容额度。</p>
|
||||
<dl className="admin-storage-details"><div><dt>最后计量</dt><dd>{formatTime(state.storage.last_measured_at)}</dd></div><div><dt>重新计量</dt><dd>{state.storage.remeasurement_required ? "需要完成" : "无需等待"}</dd></div></dl>
|
||||
</section>
|
||||
<section aria-labelledby="admin-diagnostics-heading" className="admin-health-section admin-diagnostics-section">
|
||||
<header><div><p>DIAGNOSTICS</p><h3 id="admin-diagnostics-heading">脱敏诊断</h3></div><button disabled={!diagnostics} onClick={() => void copyDiagnostics()} type="button">{copied ? "已复制" : "复制诊断"}</button></header>
|
||||
<p>诊断内容只包含固定版本、组件状态、逻辑位置和容量计量,不包含密钥、邮箱、绝对路径、提示词、图片或供应商原文。</p>
|
||||
{diagnostics ? <pre aria-label="脱敏诊断内容">{diagnostics.diagnostic_text}</pre> : <div aria-label="诊断加载中" className="admin-diagnostics-placeholder" />}
|
||||
</section>
|
||||
</>
|
||||
) : null}
|
||||
</main>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,523 @@
|
||||
:root {
|
||||
color-scheme: light;
|
||||
font-family: "Segoe UI", "Microsoft YaHei UI", sans-serif;
|
||||
background: #f3f3ef;
|
||||
}
|
||||
|
||||
* {
|
||||
box-sizing: border-box;
|
||||
letter-spacing: 0;
|
||||
}
|
||||
|
||||
body {
|
||||
margin: 0;
|
||||
}
|
||||
|
||||
button,
|
||||
a,
|
||||
input,
|
||||
textarea {
|
||||
font: inherit;
|
||||
}
|
||||
|
||||
.admin-shell {
|
||||
min-height: 100vh;
|
||||
color: #171715;
|
||||
background: #f3f3ef;
|
||||
}
|
||||
|
||||
.admin-skip-link {
|
||||
position: fixed;
|
||||
z-index: 100;
|
||||
top: 8px;
|
||||
left: 228px;
|
||||
padding: 8px 12px;
|
||||
color: #ffffff;
|
||||
background: #171715;
|
||||
transform: translateY(-160%);
|
||||
}
|
||||
|
||||
.admin-skip-link:focus {
|
||||
transform: translateY(0);
|
||||
}
|
||||
|
||||
.admin-sidebar {
|
||||
position: fixed;
|
||||
z-index: 20;
|
||||
inset: 0 auto 0 0;
|
||||
display: grid;
|
||||
width: 216px;
|
||||
grid-template-rows: auto 1fr auto;
|
||||
color: #ffffff;
|
||||
background: #171715;
|
||||
}
|
||||
|
||||
.admin-wordmark {
|
||||
display: grid;
|
||||
min-height: 104px;
|
||||
align-content: center;
|
||||
padding: 20px 22px;
|
||||
border-bottom: 1px solid #494944;
|
||||
color: #ffffff;
|
||||
text-decoration: none;
|
||||
}
|
||||
|
||||
.admin-wordmark span {
|
||||
font-family: "Arial Black", "Segoe UI", sans-serif;
|
||||
font-size: 30px;
|
||||
line-height: 1;
|
||||
}
|
||||
|
||||
.admin-wordmark small {
|
||||
margin-top: 6px;
|
||||
color: #d9dc00;
|
||||
font-family: Consolas, monospace;
|
||||
font-size: 10px;
|
||||
}
|
||||
|
||||
.admin-sidebar nav {
|
||||
display: grid;
|
||||
align-content: start;
|
||||
padding: 12px 0;
|
||||
}
|
||||
|
||||
.admin-sidebar nav a {
|
||||
display: grid;
|
||||
min-height: 48px;
|
||||
grid-template-columns: 38px 1fr;
|
||||
align-items: center;
|
||||
padding: 0 18px;
|
||||
border-left: 4px solid transparent;
|
||||
color: #d5d5cf;
|
||||
font-size: 13px;
|
||||
font-weight: 700;
|
||||
text-decoration: none;
|
||||
}
|
||||
|
||||
.admin-sidebar nav a > span {
|
||||
color: #85857d;
|
||||
font-family: Consolas, monospace;
|
||||
font-size: 10px;
|
||||
}
|
||||
|
||||
.admin-sidebar nav a:hover,
|
||||
.admin-sidebar nav a:focus-visible {
|
||||
color: #ffffff;
|
||||
background: #2c2c29;
|
||||
}
|
||||
|
||||
.admin-sidebar nav a[aria-current="page"] {
|
||||
border-left-color: #e8eb00;
|
||||
color: #171715;
|
||||
background: #eef000;
|
||||
}
|
||||
|
||||
.admin-sidebar nav a[aria-current="page"] > span {
|
||||
color: #4d4d00;
|
||||
}
|
||||
|
||||
.admin-sidebar-foot {
|
||||
display: grid;
|
||||
gap: 10px;
|
||||
padding: 18px 22px;
|
||||
border-top: 1px solid #494944;
|
||||
font-family: Consolas, monospace;
|
||||
font-size: 10px;
|
||||
}
|
||||
|
||||
.admin-sidebar-foot span {
|
||||
color: #a5a59d;
|
||||
}
|
||||
|
||||
.admin-sidebar-foot strong {
|
||||
color: #ffffff;
|
||||
font-weight: 700;
|
||||
}
|
||||
|
||||
.admin-shell-workspace {
|
||||
min-width: 0;
|
||||
margin-left: 216px;
|
||||
padding-top: 52px;
|
||||
}
|
||||
|
||||
.admin-topbar {
|
||||
position: fixed;
|
||||
z-index: 15;
|
||||
top: 0;
|
||||
right: 0;
|
||||
left: 216px;
|
||||
display: flex;
|
||||
height: 52px;
|
||||
align-items: center;
|
||||
justify-content: space-between;
|
||||
padding: 0 28px;
|
||||
border-bottom: 1px solid #b7b7b0;
|
||||
background: rgb(255 255 255 / 96%);
|
||||
}
|
||||
|
||||
.admin-topbar h1 {
|
||||
margin: 0;
|
||||
font-size: 15px;
|
||||
}
|
||||
|
||||
.admin-topbar-status {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
gap: 20px;
|
||||
color: #62625c;
|
||||
font-size: 11px;
|
||||
}
|
||||
|
||||
.admin-topbar-status span {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
gap: 7px;
|
||||
}
|
||||
|
||||
.admin-topbar-status i {
|
||||
width: 8px;
|
||||
height: 8px;
|
||||
border-radius: 50%;
|
||||
background: #777770;
|
||||
}
|
||||
|
||||
.admin-topbar-status code {
|
||||
color: #171715;
|
||||
}
|
||||
|
||||
.admin-shell-content {
|
||||
min-width: 0;
|
||||
}
|
||||
|
||||
.admin-session-gate {
|
||||
display: grid;
|
||||
min-height: 100vh;
|
||||
place-items: center;
|
||||
color: #171715;
|
||||
background: #f3f3ef;
|
||||
}
|
||||
|
||||
.admin-session-gate p,
|
||||
.admin-session-gate div {
|
||||
padding: 22px;
|
||||
border-left: 5px solid #171715;
|
||||
background: #ffffff;
|
||||
}
|
||||
|
||||
.admin-session-gate div {
|
||||
display: grid;
|
||||
gap: 12px;
|
||||
}
|
||||
|
||||
.admin-session-gate button,
|
||||
.admin-overview-failure button,
|
||||
.admin-placeholder-toolbar button {
|
||||
min-height: 40px;
|
||||
padding: 8px 14px;
|
||||
border: 1px solid #171715;
|
||||
border-radius: 0;
|
||||
color: #171715;
|
||||
background: #eef000;
|
||||
font-weight: 800;
|
||||
}
|
||||
|
||||
.admin-overview,
|
||||
.admin-placeholder {
|
||||
width: min(1320px, calc(100% - 64px));
|
||||
margin: 0 auto;
|
||||
padding: 34px 0 72px;
|
||||
}
|
||||
|
||||
.admin-page-heading {
|
||||
display: flex;
|
||||
min-height: 74px;
|
||||
align-items: end;
|
||||
justify-content: space-between;
|
||||
gap: 24px;
|
||||
padding-bottom: 18px;
|
||||
border-bottom: 1px solid #8c8c85;
|
||||
}
|
||||
|
||||
.admin-page-heading p,
|
||||
.admin-status-section header p,
|
||||
.admin-operation-strip header p {
|
||||
margin: 0 0 5px;
|
||||
font-family: Consolas, monospace;
|
||||
font-size: 10px;
|
||||
font-weight: 700;
|
||||
}
|
||||
|
||||
.admin-page-heading h2 {
|
||||
margin: 0;
|
||||
font-size: 32px;
|
||||
}
|
||||
|
||||
.admin-page-heading time {
|
||||
color: #66665f;
|
||||
font-size: 11px;
|
||||
}
|
||||
|
||||
.admin-capacity-alert {
|
||||
display: grid;
|
||||
min-height: 44px;
|
||||
grid-template-columns: 1fr auto auto;
|
||||
align-items: center;
|
||||
gap: 18px;
|
||||
padding: 9px 14px;
|
||||
border-bottom: 1px solid #171715;
|
||||
color: #171715;
|
||||
background: #eef000;
|
||||
font-size: 12px;
|
||||
text-decoration: none;
|
||||
}
|
||||
|
||||
.admin-capacity-alert.is-full,
|
||||
.admin-capacity-alert.is-unavailable {
|
||||
color: #ffffff;
|
||||
background: #b33a2f;
|
||||
}
|
||||
|
||||
.admin-overview-loading {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(4, minmax(0, 1fr));
|
||||
margin-top: 22px;
|
||||
border-block: 1px solid #b7b7b0;
|
||||
}
|
||||
|
||||
.admin-overview-loading span {
|
||||
height: 130px;
|
||||
border-right: 1px solid #c7c7c0;
|
||||
background: #e2e2dd;
|
||||
}
|
||||
|
||||
.admin-overview-failure {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
justify-content: space-between;
|
||||
gap: 20px;
|
||||
margin-top: 20px;
|
||||
padding: 14px 16px;
|
||||
border-left: 5px solid #b33a2f;
|
||||
background: #fff0ed;
|
||||
}
|
||||
|
||||
.admin-metric-band {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(4, minmax(0, 1fr));
|
||||
margin-top: 22px;
|
||||
border-block: 1px solid #8c8c85;
|
||||
background: #ffffff;
|
||||
}
|
||||
|
||||
.admin-metric-band a {
|
||||
display: grid;
|
||||
min-width: 0;
|
||||
min-height: 132px;
|
||||
align-content: center;
|
||||
gap: 7px;
|
||||
padding: 20px;
|
||||
border-right: 1px solid #c3c3bc;
|
||||
color: #171715;
|
||||
text-decoration: none;
|
||||
}
|
||||
|
||||
.admin-metric-band a:last-child {
|
||||
border-right: 0;
|
||||
}
|
||||
|
||||
.admin-metric-band span,
|
||||
.admin-metric-band small {
|
||||
color: #65655f;
|
||||
font-size: 11px;
|
||||
}
|
||||
|
||||
.admin-metric-band strong {
|
||||
overflow-wrap: anywhere;
|
||||
font-size: 25px;
|
||||
}
|
||||
|
||||
.admin-overview-columns {
|
||||
display: grid;
|
||||
grid-template-columns: 1fr 1fr;
|
||||
gap: 24px;
|
||||
margin-top: 24px;
|
||||
}
|
||||
|
||||
.admin-status-section,
|
||||
.admin-operation-strip,
|
||||
.admin-placeholder > section {
|
||||
border-top: 3px solid #171715;
|
||||
border-bottom: 1px solid #8c8c85;
|
||||
background: #ffffff;
|
||||
}
|
||||
|
||||
.admin-status-section > header,
|
||||
.admin-operation-strip > header {
|
||||
display: flex;
|
||||
min-height: 64px;
|
||||
align-items: center;
|
||||
justify-content: space-between;
|
||||
padding: 12px 16px;
|
||||
border-bottom: 1px solid #c3c3bc;
|
||||
}
|
||||
|
||||
.admin-status-section h3,
|
||||
.admin-operation-strip h3 {
|
||||
margin: 0;
|
||||
font-size: 17px;
|
||||
}
|
||||
|
||||
.admin-status-section header a,
|
||||
.admin-operation-strip header a {
|
||||
color: #171715;
|
||||
font-size: 12px;
|
||||
font-weight: 800;
|
||||
}
|
||||
|
||||
.admin-status-section dl {
|
||||
margin: 0;
|
||||
}
|
||||
|
||||
.admin-status-section dl > div {
|
||||
display: grid;
|
||||
min-height: 52px;
|
||||
grid-template-columns: 126px 1fr;
|
||||
align-items: center;
|
||||
padding: 0 16px;
|
||||
border-bottom: 1px solid #ddddD7;
|
||||
}
|
||||
|
||||
.admin-status-section dl > div:last-child {
|
||||
border-bottom: 0;
|
||||
}
|
||||
|
||||
.admin-status-section dt {
|
||||
color: #65655f;
|
||||
font-size: 11px;
|
||||
}
|
||||
|
||||
.admin-status-section dd {
|
||||
min-width: 0;
|
||||
margin: 0;
|
||||
overflow-wrap: anywhere;
|
||||
font-family: Consolas, monospace;
|
||||
font-size: 12px;
|
||||
font-weight: 700;
|
||||
}
|
||||
|
||||
.admin-service-list {
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
list-style: none;
|
||||
}
|
||||
|
||||
.admin-service-list li {
|
||||
display: grid;
|
||||
min-height: 42px;
|
||||
grid-template-columns: 1fr 84px 76px;
|
||||
align-items: center;
|
||||
padding: 0 16px;
|
||||
border-bottom: 1px solid #ddddd7;
|
||||
font-size: 11px;
|
||||
}
|
||||
|
||||
.admin-service-list li:last-child {
|
||||
border-bottom: 0;
|
||||
}
|
||||
|
||||
.admin-service-list strong {
|
||||
color: #1f6639;
|
||||
}
|
||||
|
||||
.admin-service-list strong.is-degraded,
|
||||
.admin-service-list strong.is-paused {
|
||||
color: #8b5608;
|
||||
}
|
||||
|
||||
.admin-service-list strong.is-unavailable {
|
||||
color: #a52e24;
|
||||
}
|
||||
|
||||
.admin-service-list time {
|
||||
color: #65655f;
|
||||
text-align: right;
|
||||
}
|
||||
|
||||
.admin-operation-strip {
|
||||
margin-top: 24px;
|
||||
}
|
||||
|
||||
.admin-operation-strip > p {
|
||||
margin: 0;
|
||||
padding: 22px 16px;
|
||||
color: #65655f;
|
||||
}
|
||||
|
||||
.admin-operation-strip table {
|
||||
width: 100%;
|
||||
border-collapse: collapse;
|
||||
table-layout: fixed;
|
||||
}
|
||||
|
||||
.admin-operation-strip th,
|
||||
.admin-operation-strip td {
|
||||
padding: 12px 16px;
|
||||
border-bottom: 1px solid #ddddd7;
|
||||
overflow-wrap: anywhere;
|
||||
text-align: left;
|
||||
font-size: 11px;
|
||||
}
|
||||
|
||||
.admin-operation-strip th {
|
||||
color: #65655f;
|
||||
background: #efefeb;
|
||||
}
|
||||
|
||||
.admin-placeholder > section {
|
||||
margin-top: 22px;
|
||||
}
|
||||
|
||||
.admin-placeholder-toolbar {
|
||||
display: flex;
|
||||
min-height: 58px;
|
||||
align-items: center;
|
||||
justify-content: space-between;
|
||||
padding: 8px 16px;
|
||||
border-bottom: 1px solid #c3c3bc;
|
||||
font-weight: 800;
|
||||
}
|
||||
|
||||
.admin-placeholder-toolbar button:disabled {
|
||||
color: #777770;
|
||||
background: #dfdfda;
|
||||
}
|
||||
|
||||
.admin-placeholder > section > p {
|
||||
margin: 0;
|
||||
padding: 44px 16px;
|
||||
color: #65655f;
|
||||
}
|
||||
|
||||
:is(.admin-shell, .admin-session-gate) :focus-visible {
|
||||
outline: 2px solid #225dd8;
|
||||
outline-offset: 2px;
|
||||
}
|
||||
|
||||
@media (max-width: 1000px) {
|
||||
.admin-overview,
|
||||
.admin-placeholder {
|
||||
width: calc(100% - 32px);
|
||||
}
|
||||
|
||||
.admin-metric-band {
|
||||
grid-template-columns: 1fr 1fr;
|
||||
}
|
||||
|
||||
.admin-metric-band a:nth-child(2) {
|
||||
border-right: 0;
|
||||
}
|
||||
|
||||
.admin-overview-columns {
|
||||
grid-template-columns: 1fr;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,229 @@
|
||||
import type { AdminOverviewResponse } from "@dada/shared-contracts";
|
||||
import { useCallback, useEffect, useState, type ReactNode } from "react";
|
||||
|
||||
import "./admin-shell.css";
|
||||
|
||||
interface AdminSession {
|
||||
admin: { role: "super_admin"; status: "active"; user_id: string };
|
||||
audience: "admin";
|
||||
authenticated: true;
|
||||
expires_at: string;
|
||||
}
|
||||
|
||||
interface AdminProtectedRouteProps {
|
||||
children: ReactNode;
|
||||
currentPath: string;
|
||||
title: string;
|
||||
}
|
||||
|
||||
const adminNavigation = [
|
||||
{ href: "/admin", label: "总览", marker: "01" },
|
||||
{ href: "/admin/users", label: "用户与点数", marker: "02" },
|
||||
{ href: "/admin/invites", label: "邀请码", marker: "03" },
|
||||
{ href: "/admin/models", label: "模型", marker: "04" },
|
||||
{ href: "/admin/assets", label: "素材", marker: "05" },
|
||||
{ href: "/admin/preview", label: "内部预览", marker: "06" },
|
||||
{ href: "/admin/generations", label: "生成记录", marker: "07" },
|
||||
{ href: "/admin/services-storage", label: "服务与存储", marker: "08" },
|
||||
{ href: "/admin/audit", label: "审计", marker: "09" },
|
||||
] as const;
|
||||
|
||||
function redirectToAdminLogin() {
|
||||
window.location.replace("/admin/login");
|
||||
}
|
||||
|
||||
export function AdminProtectedRoute({ children, currentPath, title }: AdminProtectedRouteProps) {
|
||||
const [session, setSession] = useState<AdminSession>();
|
||||
const [failed, setFailed] = useState(false);
|
||||
const [revision, setRevision] = useState(0);
|
||||
|
||||
useEffect(() => {
|
||||
const controller = new AbortController();
|
||||
setFailed(false);
|
||||
void fetch("/api/v1/admin-auth/session", { credentials: "same-origin", signal: controller.signal })
|
||||
.then(async (response) => {
|
||||
if (response.status === 401) {
|
||||
redirectToAdminLogin();
|
||||
return;
|
||||
}
|
||||
if (!response.ok) throw new Error("admin_session_unavailable");
|
||||
const body = await response.json() as AdminSession;
|
||||
if (body.audience !== "admin" || body.admin.role !== "super_admin" || body.admin.status !== "active") {
|
||||
redirectToAdminLogin();
|
||||
return;
|
||||
}
|
||||
setSession(body);
|
||||
})
|
||||
.catch((error: unknown) => {
|
||||
if (!(error instanceof DOMException && error.name === "AbortError")) setFailed(true);
|
||||
});
|
||||
return () => controller.abort();
|
||||
}, [revision]);
|
||||
|
||||
if (!session) {
|
||||
return (
|
||||
<main className="admin-session-gate">
|
||||
{failed ? (
|
||||
<div role="alert">
|
||||
<strong>管理员会话暂时无法确认</strong>
|
||||
<button onClick={() => setRevision((value) => value + 1)} type="button">重试</button>
|
||||
</div>
|
||||
) : <p aria-live="polite">正在确认管理员会话</p>}
|
||||
</main>
|
||||
);
|
||||
}
|
||||
|
||||
return (
|
||||
<div className="admin-shell">
|
||||
<a className="admin-skip-link" href="#admin-main">跳到主要内容</a>
|
||||
<aside className="admin-sidebar">
|
||||
<a className="admin-wordmark" href="/admin" aria-label="Dada 后台总览">
|
||||
<span>DADA</span>
|
||||
<small>OPERATIONS</small>
|
||||
</a>
|
||||
<nav aria-label="后台主导航">
|
||||
{adminNavigation.map((item) => (
|
||||
<a aria-current={currentPath === item.href ? "page" : undefined} href={item.href} key={item.href}>
|
||||
<span aria-hidden="true">{item.marker}</span>
|
||||
{item.label}
|
||||
</a>
|
||||
))}
|
||||
</nav>
|
||||
<div className="admin-sidebar-foot">
|
||||
<span>LOCAL P0-A</span>
|
||||
<strong>独立管理员会话</strong>
|
||||
</div>
|
||||
</aside>
|
||||
<div className="admin-shell-workspace">
|
||||
<header className="admin-topbar">
|
||||
<h1>{title}</h1>
|
||||
<div className="admin-topbar-status">
|
||||
<span><i aria-hidden="true" />状态摘要</span>
|
||||
<code>{session.admin.user_id.slice(0, 8)}</code>
|
||||
</div>
|
||||
</header>
|
||||
<div className="admin-shell-content">{children}</div>
|
||||
</div>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
const serviceLabels: Record<AdminOverviewResponse["services"][number]["service_id"], string> = {
|
||||
ai_gateway: "AI 网关",
|
||||
amap: "高德",
|
||||
asset_root: "素材根",
|
||||
resend: "Resend",
|
||||
worker: "Worker",
|
||||
};
|
||||
|
||||
const stateLabels = {
|
||||
available: "正常",
|
||||
degraded: "有异常",
|
||||
paused: "已暂停",
|
||||
unavailable: "不可用",
|
||||
} as const;
|
||||
|
||||
function formatTime(value: string | null) {
|
||||
if (!value) return "未记录";
|
||||
return new Intl.DateTimeFormat("zh-CN", { hour: "2-digit", minute: "2-digit", month: "2-digit", day: "2-digit" }).format(new Date(value));
|
||||
}
|
||||
|
||||
export function AdminOverviewPage() {
|
||||
const [summary, setSummary] = useState<AdminOverviewResponse>();
|
||||
const [failed, setFailed] = useState(false);
|
||||
const [loading, setLoading] = useState(true);
|
||||
|
||||
const load = useCallback(async () => {
|
||||
setLoading(true);
|
||||
setFailed(false);
|
||||
try {
|
||||
const response = await fetch("/api/v1/admin/overview", { credentials: "same-origin" });
|
||||
if (response.status === 401) {
|
||||
window.dispatchEvent(new Event("dada:session-invalid"));
|
||||
return;
|
||||
}
|
||||
if (!response.ok) throw new Error("admin_overview_unavailable");
|
||||
setSummary(await response.json() as AdminOverviewResponse);
|
||||
} catch {
|
||||
setFailed(true);
|
||||
} finally {
|
||||
setLoading(false);
|
||||
}
|
||||
}, []);
|
||||
|
||||
useEffect(() => { void load(); }, [load]);
|
||||
|
||||
const storagePercent = summary
|
||||
? Math.min(100, (summary.storage.managed_content_bytes / summary.storage.limit_bytes) * 100)
|
||||
: 0;
|
||||
const hasServiceIssue = summary?.services.some((service) => service.status !== "available") ?? false;
|
||||
|
||||
return (
|
||||
<main className="admin-overview" id="admin-main">
|
||||
<header className="admin-page-heading">
|
||||
<div><p>OPERATIONS / LIVE SUMMARY</p><h2>运营总览</h2></div>
|
||||
{summary ? <time dateTime={summary.generated_at}>更新于 {formatTime(summary.generated_at)}</time> : null}
|
||||
</header>
|
||||
{summary && summary.storage.status !== "normal" ? (
|
||||
<a className={`admin-capacity-alert is-${summary.storage.status}`} href="/admin/services-storage">
|
||||
<span>本机内容容量</span>
|
||||
<strong>{storagePercent.toFixed(1)}%</strong>
|
||||
<span>{summary.storage.status === "critical" ? "接近上限" : summary.storage.status === "full" ? "已满" : "不可用"}</span>
|
||||
</a>
|
||||
) : null}
|
||||
{loading && !summary ? (
|
||||
<div aria-label="运营摘要加载中" className="admin-overview-loading"><span /><span /><span /><span /></div>
|
||||
) : null}
|
||||
{failed ? (
|
||||
<div className="admin-overview-failure" role="alert">
|
||||
<span>运营摘要暂时无法读取{summary ? `,当前保留 ${formatTime(summary.generated_at)} 的结果` : ""}。</span>
|
||||
<button onClick={() => void load()} type="button">重试</button>
|
||||
</div>
|
||||
) : null}
|
||||
{summary ? (
|
||||
<>
|
||||
<section aria-label="关键运营指标" className="admin-metric-band">
|
||||
<a href="/admin/users"><span>普通用户名额</span><strong>{summary.user_slots.active_and_suspended} / {summary.user_slots.limit}</strong><small>active + suspended</small></a>
|
||||
<a href="/admin/generations"><span>进行中任务</span><strong>{summary.generation_jobs.queued + summary.generation_jobs.running}</strong><small>排队 {summary.generation_jobs.queued} · 运行 {summary.generation_jobs.running}</small></a>
|
||||
<a href="/admin/generations"><span>成本核对</span><strong>待人工核对 {summary.generation_jobs.pending_manual_review}</strong><small>最早 {formatTime(summary.generation_jobs.pending_manual_review_oldest_at)}</small></a>
|
||||
<a href="/admin/assets"><span>清理任务</span><strong>{summary.asset_cleanup.pending_jobs}</strong><small>等待处理</small></a>
|
||||
</section>
|
||||
<div className="admin-overview-columns">
|
||||
<section className="admin-status-section" aria-labelledby="model-status-heading">
|
||||
<header><div><p>MODEL STATE</p><h3 id="model-status-heading">模型状态</h3></div><a href="/admin/models">查看</a></header>
|
||||
<dl>
|
||||
<div><dt>配置默认</dt><dd>{summary.models.configured_default_model_id ?? "无"}</dd></div>
|
||||
<div><dt>运行时可用</dt><dd>{summary.models.runtime_available_count} / {summary.models.configured_model_count}</dd></div>
|
||||
<div><dt>当前推荐</dt><dd>{summary.models.recommended_model_id ?? "无"}</dd></div>
|
||||
</dl>
|
||||
</section>
|
||||
<section className="admin-status-section" aria-labelledby="service-status-heading">
|
||||
<header><div><p>SERVICE STATE</p><h3 id="service-status-heading">服务状态</h3></div><a href="/admin/services-storage">{hasServiceIssue ? "有异常" : "全部正常"}</a></header>
|
||||
<ul className="admin-service-list">
|
||||
{summary.services.map((service) => <li key={service.service_id}><span>{serviceLabels[service.service_id]}</span><strong className={`is-${service.status}`}>{stateLabels[service.status]}</strong><time dateTime={service.checked_at ?? undefined}>{formatTime(service.checked_at)}</time></li>)}
|
||||
</ul>
|
||||
</section>
|
||||
</div>
|
||||
<section className="admin-operation-strip" aria-labelledby="recent-operation-heading">
|
||||
<header><div><p>AUDIT SNAPSHOT</p><h3 id="recent-operation-heading">最近后台操作</h3></div><a href="/admin/audit">查看全部</a></header>
|
||||
{summary.recent_operations.length === 0 ? <p>当前无近期操作</p> : (
|
||||
<table><thead><tr><th>时间</th><th>操作</th><th>对象摘要</th><th>结果</th></tr></thead><tbody>{summary.recent_operations.map((operation) => <tr key={operation.operation_id}><td>{formatTime(operation.created_at)}</td><td>{operation.operation_type}</td><td><code>{operation.target_ref}</code></td><td>{operation.result}</td></tr>)}</tbody></table>
|
||||
)}
|
||||
</section>
|
||||
</>
|
||||
) : null}
|
||||
</main>
|
||||
);
|
||||
}
|
||||
|
||||
export function AdminPlaceholderPage({ title }: { title: string }) {
|
||||
return (
|
||||
<main className="admin-placeholder" id="admin-main">
|
||||
<header className="admin-page-heading"><div><p>OPERATIONS</p><h2>{title}</h2></div></header>
|
||||
<section aria-label={`${title}安全摘要`}>
|
||||
<div className="admin-placeholder-toolbar"><span>安全摘要</span><button disabled type="button">新建</button></div>
|
||||
<p>当前无记录</p>
|
||||
</section>
|
||||
</main>
|
||||
);
|
||||
}
|
||||
@@ -100,11 +100,7 @@ export function AdminUsersPage() {
|
||||
|
||||
return (
|
||||
<div className="admin-users-page">
|
||||
<header className="admin-product-header">
|
||||
<a href="/admin">DADA ADMIN</a>
|
||||
<nav aria-label="后台导航"><a aria-current="page" href="/admin/users">用户</a><a href="/admin/models">模型</a><a href="/admin/assets">素材</a><a href="/admin/audit">审计</a></nav>
|
||||
</header>
|
||||
<main>
|
||||
<main id="admin-main">
|
||||
<header className="admin-users-heading">
|
||||
<div><p>USER OPERATIONS</p><h1>用户点数</h1></div>
|
||||
{balance ? <button onClick={openAdjustment} type="button">调整点数</button> : null}
|
||||
|
||||
@@ -1,5 +1,4 @@
|
||||
import type { CanvasState } from "@dada/shared-contracts";
|
||||
import { P0A_COMPLEX_RELEASE_VERSION } from "@dada/template-registry";
|
||||
|
||||
import { fontOption, type FontOption } from "./text-assets.js";
|
||||
import type { DynamicTemplateId } from "./dynamic-provider.js";
|
||||
@@ -47,7 +46,7 @@ export interface DynamicRenderModel {
|
||||
textLayers: readonly DynamicTextLayer[];
|
||||
}
|
||||
|
||||
export const DYNAMIC_RESOURCE_VERSION = P0A_COMPLEX_RELEASE_VERSION;
|
||||
export const DYNAMIC_RESOURCE_VERSION = "wp4-dynamic-source-v1";
|
||||
|
||||
const dynamicFont = (fontId: string): FontOption => ({
|
||||
displayName: fontId,
|
||||
|
||||
@@ -49,7 +49,7 @@ import {
|
||||
type DynamicTemplateId,
|
||||
} from "./dynamic-provider.js";
|
||||
import { dynamicFontOptionsFor } from "./dynamic-render-models.js";
|
||||
import { P0A_STATIC_STICKER_CATALOG, stickerWindow, type StaticStickerCatalogItem } from "./static-sticker-catalog.js";
|
||||
import { P0A_STATIC_STICKER_CATALOG, P0A_STATIC_STICKER_COUNT, stickerWindow } from "./static-sticker-catalog.js";
|
||||
import {
|
||||
createColorCardElement,
|
||||
extractPaletteFromImage,
|
||||
@@ -136,7 +136,6 @@ export function EditorPage({ projectId }: { projectId: string }) {
|
||||
const [notice, setNotice] = useState("");
|
||||
const [activePanel, setActivePanel] = useState<EditorAssetPanel>("background");
|
||||
const [stickerScrollTop, setStickerScrollTop] = useState(0);
|
||||
const [stickerCatalog, setStickerCatalog] = useState<StaticStickerCatalogItem[]>(P0A_STATIC_STICKER_CATALOG);
|
||||
const [selectedIds, setSelectedIds] = useState<string[]>([]);
|
||||
const [guides, setGuides] = useState<string[]>([]);
|
||||
const [multiMode, setMultiMode] = useState(false);
|
||||
@@ -188,18 +187,6 @@ export function EditorPage({ projectId }: { projectId: string }) {
|
||||
return () => { active = false; };
|
||||
}, [session?.user.user_id]);
|
||||
|
||||
useEffect(() => {
|
||||
let active = true;
|
||||
readEditorJson<{ items: StaticStickerCatalogItem[] }>("/api/v1/static-stickers/current")
|
||||
.then((response) => {
|
||||
if (!active) return;
|
||||
const uploaded = response.items.filter((item) => item.enabled && item.origin === "admin_uploaded");
|
||||
setStickerCatalog([...P0A_STATIC_STICKER_CATALOG, ...uploaded].sort((left, right) => left.part - right.part || left.order - right.order || left.stable_id.localeCompare(right.stable_id)));
|
||||
})
|
||||
.catch(() => { if (active) setStickerCatalog(P0A_STATIC_STICKER_CATALOG); });
|
||||
return () => { active = false; };
|
||||
}, []);
|
||||
|
||||
useEffect(() => {
|
||||
if (!project || !session || !canvasState) return undefined;
|
||||
const queue = new ProjectAutoSaveQueue({
|
||||
@@ -356,15 +343,15 @@ export function EditorPage({ projectId }: { projectId: string }) {
|
||||
setNotice(message);
|
||||
}
|
||||
|
||||
function addSticker(sticker: StaticStickerCatalogItem) {
|
||||
function addSticker(assetId: string) {
|
||||
const controller = controllerForCurrent();
|
||||
if (!controller || !canvasState) return;
|
||||
try {
|
||||
controller.add(createStaticStickerElement({
|
||||
assetId: sticker.stable_id,
|
||||
assetId,
|
||||
identity: newElementIdentity(),
|
||||
position: { x: 0.5, y: 0.5 },
|
||||
resourceVersion: sticker.resource_version,
|
||||
resourceVersion: "fixture-v1",
|
||||
zIndex: canvasState.elements.length,
|
||||
}));
|
||||
commitElementOperation(controller, "贴纸已加入画布");
|
||||
@@ -845,11 +832,11 @@ export function EditorPage({ projectId }: { projectId: string }) {
|
||||
{...(templateCategory ? { category: templateCategory } : {})}
|
||||
/> : null}
|
||||
{activePanel === "stickers" ? (() => {
|
||||
const visibleStickers = stickerWindow(stickerCatalog, stickerScrollTop, 280);
|
||||
return <section><h2>普通贴纸</h2><p aria-live="polite" className="editor-sticker-count">共 {stickerCatalog.length.toLocaleString("zh-CN")} 张</p><div className="editor-sticker-virtual-list" data-testid="static-sticker-list" onScroll={(event) => setStickerScrollTop(event.currentTarget.scrollTop)} role="list">
|
||||
const visibleStickers = stickerWindow(P0A_STATIC_STICKER_CATALOG, stickerScrollTop, 280);
|
||||
return <section><h2>普通贴纸</h2><p aria-live="polite" className="editor-sticker-count">共 {P0A_STATIC_STICKER_COUNT.toLocaleString("zh-CN")} 张</p><div className="editor-sticker-virtual-list" data-testid="static-sticker-list" onScroll={(event) => setStickerScrollTop(event.currentTarget.scrollTop)} role="list">
|
||||
<div style={{ paddingTop: visibleStickers.top_spacer_px, paddingBottom: visibleStickers.bottom_spacer_px }}>
|
||||
<div className="editor-sticker-grid">
|
||||
{visibleStickers.items.map((sticker) => <button aria-label={`添加贴纸 ${sticker.stable_id}`} data-sticker-id={sticker.stable_id} disabled={!canEdit || canvasState.elements.length >= 50} key={sticker.stable_id} onClick={() => addSticker(sticker)} type="button"><img alt="" className="editor-sticker-preview" decoding="async" loading="lazy" src={sticker.thumbnail_reference.url} /><strong>{sticker.stable_id}</strong><span>part{sticker.part} · {sticker.order}</span></button>)}
|
||||
{visibleStickers.items.map((sticker) => <button aria-label={`添加贴纸 ${sticker.stable_id}`} data-sticker-id={sticker.stable_id} disabled={!canEdit || canvasState.elements.length >= 50} key={sticker.stable_id} onClick={() => addSticker(sticker.stable_id)} type="button"><img alt="" className="editor-sticker-preview" decoding="async" loading="lazy" src={sticker.thumbnail_reference.url} /><strong>{sticker.stable_id}</strong><span>part{sticker.part} · {sticker.order}</span></button>)}
|
||||
</div>
|
||||
</div>
|
||||
</div>{canvasState.elements.length >= 50 ? <p className="editor-limit" role="status">画布最多 50 个元素,请先删除现有元素。</p> : null}</section>;
|
||||
@@ -864,10 +851,7 @@ export function EditorPage({ projectId }: { projectId: string }) {
|
||||
<button disabled={selectedElements.length === 0 || !canEdit} onClick={copySelection} title="复制" type="button">复制</button>
|
||||
<button disabled={clipboardRef.current.length === 0 || !canEdit} onClick={pasteSelection} title="粘贴" type="button">粘贴</button>
|
||||
</div>
|
||||
<div className="editor-canvas-frame" style={{
|
||||
aspectRatio: `${canvasState.pixel_width} / ${canvasState.pixel_height}`,
|
||||
maxWidth: `min(720px, calc(${(canvasState.pixel_width / canvasState.pixel_height * 100).toFixed(4)}vh - ${(canvasState.pixel_width / canvasState.pixel_height * 168).toFixed(4)}px))`,
|
||||
}}>
|
||||
<div className="editor-canvas-frame" style={{ aspectRatio: `${canvasState.pixel_width} / ${canvasState.pixel_height}` }}>
|
||||
<EditorStage
|
||||
assetId={canvasState.background.asset_id}
|
||||
canvasState={renderedCanvasState}
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
// Generated from openapi/openapi.json. Do not edit by hand.
|
||||
|
||||
import type { CreditAdjustmentResponse, CreditAdjustmentRequest, BrowserSupportSuccess, BrowserSupportRequest, AccountDeletionResponse, AccountDeletionCompleteRequest, AdminLoginCompleteResponse, AdminLoginCompleteRequest, LoginCompleteResponse, LoginCompleteRequest, RegistrationCompleteResponse, RegistrationCompleteRequest, GenerationCreateResponse, AccountSettingsResponse, AdminSessionResponse, CreditBalanceResponse, BootstrapResponse, GenerationTaskResponse, SseEvent, ModelConfig, ModelConfigurationResponse, CreditLedgerResponse, ProjectDetailResponse, UserSessionResponse, ProjectListResponse, RecentAssetListResponse, LogoutResponse, ProjectPurgeResponse, RecentAssetRecordResponse, RecentAssetRecordRequest, ProjectRenameResponse, ProjectRenameRequest, ModelConfigUpdateRequest, ProjectRestoreResponse, ReverseGeocodeResponse, ReverseGeocodeRequest, LatestExportSaveResponse, ProjectStateSaveResponse, ProjectEditableState, AccountDeletionSendResponse, RegistrationSendResponse, AdminLoginSendRequest, LoginSendRequest, RegistrationSendRequest, FailedEmptyTrashResponse, FailedEmptyTrashRequest, ProjectTrashResponse, AccountProfileUpdateResponse, AccountProfileUpdateRequest } from "./types.gen.js";
|
||||
import type { CreditAdjustmentResponse, CreditAdjustmentRequest, BrowserSupportSuccess, BrowserSupportRequest, AccountDeletionResponse, AccountDeletionCompleteRequest, AdminLoginCompleteResponse, AdminLoginCompleteRequest, LoginCompleteResponse, LoginCompleteRequest, RegistrationCompleteResponse, RegistrationCompleteRequest, GenerationCreateResponse, AccountSettingsResponse, AdminDiagnosticsResponse, AdminOverviewResponse, AdminServicesStorageResponse, AdminSessionResponse, CreditBalanceResponse, BootstrapResponse, GenerationTaskResponse, SseEvent, ModelConfig, ModelConfigurationResponse, CreditLedgerResponse, ProjectDetailResponse, UserSessionResponse, ProjectListResponse, RecentAssetListResponse, LogoutResponse, ProjectPurgeResponse, RecentAssetRecordResponse, RecentAssetRecordRequest, ProjectRenameResponse, ProjectRenameRequest, ModelConfigUpdateRequest, ProjectRestoreResponse, ReverseGeocodeResponse, ReverseGeocodeRequest, LatestExportSaveResponse, ProjectStateSaveResponse, ProjectEditableState, AccountDeletionSendResponse, RegistrationSendResponse, AdminLoginSendRequest, LoginSendRequest, RegistrationSendRequest, FailedEmptyTrashResponse, FailedEmptyTrashRequest, ProjectTrashResponse, AccountProfileUpdateResponse, AccountProfileUpdateRequest } from "./types.gen.js";
|
||||
|
||||
export interface ClientOptions { baseUrl?: string; fetch?: typeof globalThis.fetch; headers?: HeadersInit; }
|
||||
|
||||
@@ -87,6 +87,27 @@ export async function getAccountSettings(options: ClientOptions = {}): Promise<A
|
||||
return response.json() as Promise<AccountSettingsResponse>;
|
||||
}
|
||||
|
||||
export async function getAdminDiagnostics(options: ClientOptions = {}): Promise<AdminDiagnosticsResponse> {
|
||||
const request = options.fetch ?? globalThis.fetch;
|
||||
const response = await request(`${options.baseUrl ?? ""}/api/v1/admin/diagnostics`, { method: "GET", headers: options.headers ?? {} });
|
||||
if (!response.ok) throw new Error(`HTTP ${response.status}`);
|
||||
return response.json() as Promise<AdminDiagnosticsResponse>;
|
||||
}
|
||||
|
||||
export async function getAdminOverview(options: ClientOptions = {}): Promise<AdminOverviewResponse> {
|
||||
const request = options.fetch ?? globalThis.fetch;
|
||||
const response = await request(`${options.baseUrl ?? ""}/api/v1/admin/overview`, { method: "GET", headers: options.headers ?? {} });
|
||||
if (!response.ok) throw new Error(`HTTP ${response.status}`);
|
||||
return response.json() as Promise<AdminOverviewResponse>;
|
||||
}
|
||||
|
||||
export async function getAdminServicesStorage(options: ClientOptions = {}): Promise<AdminServicesStorageResponse> {
|
||||
const request = options.fetch ?? globalThis.fetch;
|
||||
const response = await request(`${options.baseUrl ?? ""}/api/v1/admin/services-storage`, { method: "GET", headers: options.headers ?? {} });
|
||||
if (!response.ok) throw new Error(`HTTP ${response.status}`);
|
||||
return response.json() as Promise<AdminServicesStorageResponse>;
|
||||
}
|
||||
|
||||
export async function getAdminSession(options: ClientOptions = {}): Promise<AdminSessionResponse> {
|
||||
const request = options.fetch ?? globalThis.fetch;
|
||||
const response = await request(`${options.baseUrl ?? ""}/api/v1/admin-auth/session`, { method: "GET", headers: options.headers ?? {} });
|
||||
|
||||
@@ -60,6 +60,21 @@ export type AdminCreditParams = {
|
||||
"userId": string;
|
||||
};
|
||||
|
||||
export type AdminDiagnosticsResponse = {
|
||||
"diagnostic_text": string;
|
||||
"generated_at": string;
|
||||
"services": AdminServicesStorageResponse;
|
||||
"system": {
|
||||
"api_status": "ready" | "degraded" | "unavailable";
|
||||
"app_version": string;
|
||||
"browser_support": Array<{
|
||||
"brand": "Google Chrome" | "Microsoft Edge";
|
||||
"major": number;
|
||||
}>;
|
||||
"worker_status": "ready" | "degraded" | "unavailable";
|
||||
};
|
||||
};
|
||||
|
||||
export type AdminLoginCompleteRequest = {
|
||||
"registration_id": string;
|
||||
"verification_code": string;
|
||||
@@ -76,6 +91,70 @@ export type AdminLoginSendRequest = {
|
||||
"email": string;
|
||||
};
|
||||
|
||||
export type AdminOverviewResponse = {
|
||||
"asset_cleanup": {
|
||||
"pending_jobs": number;
|
||||
};
|
||||
"generated_at": string;
|
||||
"generation_jobs": {
|
||||
"pending_manual_review": number;
|
||||
"pending_manual_review_oldest_at": string | null;
|
||||
"queued": number;
|
||||
"running": number;
|
||||
};
|
||||
"models": {
|
||||
"configured_default_model_id": string | null;
|
||||
"configured_model_count": number;
|
||||
"recommended_model_id": string | null;
|
||||
"runtime_available_count": number;
|
||||
};
|
||||
"recent_operations": Array<{
|
||||
"created_at": string;
|
||||
"operation_id": string;
|
||||
"operation_type": string;
|
||||
"result": "succeeded" | "rejected" | "failed";
|
||||
"target_ref": string;
|
||||
}>;
|
||||
"services": Array<{
|
||||
"checked_at": string | null;
|
||||
"service_id": "resend" | "amap" | "ai_gateway" | "worker" | "asset_root";
|
||||
"status": "available" | "degraded" | "paused" | "unavailable";
|
||||
}>;
|
||||
"storage": {
|
||||
"last_measured_at": string | null;
|
||||
"limit_bytes": number;
|
||||
"managed_content_bytes": number;
|
||||
"status": "normal" | "critical" | "full" | "unavailable";
|
||||
};
|
||||
"user_slots": {
|
||||
"active_and_suspended": number;
|
||||
"limit": number;
|
||||
};
|
||||
};
|
||||
|
||||
export type AdminServicesStorageResponse = {
|
||||
"generated_at": string;
|
||||
"services": Array<{
|
||||
"checked_at": string | null;
|
||||
"configured": boolean;
|
||||
"impact_scope": "none" | "authentication" | "location" | "generation" | "storage" | "api" | "model" | "account" | "unknown";
|
||||
"pause_reason": string | null;
|
||||
"service_id": "resend" | "amap" | "ai_gateway" | "worker" | "api" | "asset_root";
|
||||
"status": "active" | "paused_quota" | "paused_provider" | "disabled" | "degraded" | "unavailable";
|
||||
}>;
|
||||
"storage": {
|
||||
"capacity_notice_level": "normal" | "warning" | "critical";
|
||||
"cleanup_pending_count": number;
|
||||
"data_root_ref": "configured_local_data_root";
|
||||
"hard_limit_bytes": number;
|
||||
"last_measured_at": string | null;
|
||||
"managed_content_bytes": number;
|
||||
"remeasurement_required": boolean;
|
||||
"status": "active" | "full" | "unavailable";
|
||||
"storage_backend": "local_filesystem";
|
||||
};
|
||||
};
|
||||
|
||||
export type AdminSessionResponse = {
|
||||
"acknowledged_private_content_notice_version": string | null;
|
||||
"admin": AdminAuthenticatedUser;
|
||||
|
||||
+23
-6
@@ -1,4 +1,4 @@
|
||||
import { StrictMode } from "react";
|
||||
import { StrictMode, type ReactNode } from "react";
|
||||
import { createRoot } from "react-dom/client";
|
||||
|
||||
import { registerPublicAssetServiceWorker } from "./public-asset-cache.js";
|
||||
@@ -7,10 +7,11 @@ import { UserAuthPage } from "./user-auth.js";
|
||||
import { AccountSettingsPage } from "./account-settings.js";
|
||||
import { AdminUsersPage } from "./admin-users.js";
|
||||
import { AdminModelsPage } from "./admin-models.js";
|
||||
import { AdminAssetsPage } from "./admin-assets.js";
|
||||
import { AdminServicesStoragePage } from "./admin-services-storage.js";
|
||||
import { CreditsPage } from "./credits-page.js";
|
||||
import { ProjectDetailPage, ProjectsPage, WorkspacePage } from "./project-pages.js";
|
||||
import { EditorPage } from "./editor-page.js";
|
||||
import { AdminOverviewPage, AdminPlaceholderPage, AdminProtectedRoute } from "./admin-shell.js";
|
||||
|
||||
const root = document.getElementById("root");
|
||||
|
||||
@@ -35,10 +36,26 @@ function renderAuthenticationEntry() {
|
||||
else if (projectDetail?.[1]) authenticationPage = <ProjectDetailPage key={authRevision} projectId={projectDetail[1]} />;
|
||||
else if (window.location.pathname === "/app/projects") authenticationPage = <ProjectsPage key={authRevision} />;
|
||||
else if (window.location.pathname === "/app") authenticationPage = <WorkspacePage key={authRevision} />;
|
||||
else if (window.location.pathname === "/admin/users") authenticationPage = <AdminUsersPage key={authRevision} />;
|
||||
else if (window.location.pathname === "/admin/models") authenticationPage = <AdminModelsPage key={authRevision} />;
|
||||
else if (window.location.pathname === "/admin/assets") authenticationPage = <AdminAssetsPage key={authRevision} />;
|
||||
else if (window.location.pathname.startsWith("/admin")) authenticationPage = <AdminAuthPage key={authRevision} />;
|
||||
else if (window.location.pathname === "/admin/login") authenticationPage = <AdminAuthPage key={authRevision} />;
|
||||
else if (window.location.pathname.startsWith("/admin")) {
|
||||
const adminPages: Record<string, { content: ReactNode; title: string }> = {
|
||||
"/admin": { content: <AdminOverviewPage />, title: "运营总览" },
|
||||
"/admin/assets": { content: <AdminPlaceholderPage title="素材" />, title: "素材" },
|
||||
"/admin/audit": { content: <AdminPlaceholderPage title="审计" />, title: "审计" },
|
||||
"/admin/generations": { content: <AdminPlaceholderPage title="生成记录" />, title: "生成记录" },
|
||||
"/admin/invites": { content: <AdminPlaceholderPage title="邀请码" />, title: "邀请码" },
|
||||
"/admin/models": { content: <AdminModelsPage />, title: "模型" },
|
||||
"/admin/preview": { content: <AdminPlaceholderPage title="内部预览" />, title: "内部预览" },
|
||||
"/admin/services-storage": { content: <AdminServicesStoragePage />, title: "服务与存储" },
|
||||
"/admin/users": { content: <AdminUsersPage />, title: "用户与点数" },
|
||||
};
|
||||
const page = adminPages[window.location.pathname] ?? adminPages["/admin"]!;
|
||||
authenticationPage = (
|
||||
<AdminProtectedRoute currentPath={window.location.pathname} key={authRevision} title={page.title}>
|
||||
{page.content}
|
||||
</AdminProtectedRoute>
|
||||
);
|
||||
}
|
||||
else authenticationPage = <UserAuthPage key={authRevision} />;
|
||||
appRoot.render(
|
||||
<StrictMode>
|
||||
|
||||
@@ -5,9 +5,8 @@ import {
|
||||
type StaticStickerCatalogItem,
|
||||
type VirtualStickerWindow,
|
||||
} from "@dada/static-sticker-catalog";
|
||||
import { P0A_STATIC_STICKER_RELEASE_VERSION } from "@dada/template-registry";
|
||||
|
||||
const resourceVersion = P0A_STATIC_STICKER_RELEASE_VERSION;
|
||||
const resourceVersion = "fixture-v1";
|
||||
const partCounts = [203, 36, 27, 48, 38, 75, 37, 67, 48, 24, 40, 30, 27, 51, 62, 19, 36, 45, 92, 53, 69, 31, 36, 30, 183] as const;
|
||||
|
||||
function buildCatalog(): StaticStickerCatalogItem[] {
|
||||
@@ -46,4 +45,3 @@ export function stickerWindow(items: readonly StaticStickerCatalogItem[], scroll
|
||||
}
|
||||
|
||||
export { staticStickerOriginalUrl, staticStickerThumbnailUrl };
|
||||
export type { StaticStickerCatalogItem };
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
import type { CanvasState } from "@dada/shared-contracts";
|
||||
import { P0A_COMPLEX_RELEASE_VERSION, P0A_REQUIRED_FONT_PANEL_IDS, P0A_TEXT_TEMPLATE_IDS } from "@dada/template-registry";
|
||||
import { P0A_REQUIRED_FONT_PANEL_IDS, P0A_TEXT_TEMPLATE_IDS } from "@dada/template-registry";
|
||||
|
||||
import type { CanvasElementIdentity } from "./editor-elements.js";
|
||||
|
||||
@@ -42,7 +42,7 @@ export interface TextStylePatch {
|
||||
textAlign?: TextAlign;
|
||||
}
|
||||
|
||||
const resourceVersion = P0A_COMPLEX_RELEASE_VERSION;
|
||||
const fixtureVersion = "wp4-fixture-v1";
|
||||
const defaults = {
|
||||
background_color: "#FFE62C",
|
||||
background_enabled: false,
|
||||
@@ -106,9 +106,9 @@ export const P0A_TEXT_TEMPLATES: readonly TextTemplateDefinition[] = P0A_TEXT_TE
|
||||
defaultFontSize: 48,
|
||||
defaultText: seed[3],
|
||||
displayName: seed[2],
|
||||
...(seed[5] === true ? { fontUrl: `/api/v1/assets/public/${resourceVersion}/${seed[4]}` } : {}),
|
||||
...(seed[5] === true ? { fontUrl: `/api/v1/assets/public/${fixtureVersion}/${seed[4]}` } : {}),
|
||||
resourceClass: seed[6] ?? "zip_template",
|
||||
resourceVersion,
|
||||
resourceVersion: fixtureVersion,
|
||||
templateId,
|
||||
};
|
||||
});
|
||||
@@ -130,7 +130,7 @@ const fontOptionDefinitions: Readonly<Record<typeof P0A_REQUIRED_FONT_PANEL_IDS[
|
||||
export const P0A_FONT_OPTIONS: readonly FontOption[] = P0A_REQUIRED_FONT_PANEL_IDS.map((fontId) => ({
|
||||
displayName: fontOptionDefinitions[fontId],
|
||||
fontId,
|
||||
url: `/api/v1/assets/public/${resourceVersion}/${fontId}`,
|
||||
url: `/api/v1/assets/public/${fixtureVersion}/${fontId}`,
|
||||
}));
|
||||
|
||||
export function fontOption(fontId: string) {
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
import { randomUUID } from "node:crypto";
|
||||
import { existsSync, rmSync, statSync } from "node:fs";
|
||||
import { rmSync } from "node:fs";
|
||||
import { createRequire } from "node:module";
|
||||
import { isAbsolute, relative, resolve } from "node:path";
|
||||
|
||||
@@ -29,40 +29,6 @@ interface FileCleanupRow {
|
||||
const resourceScope = JSON.stringify([
|
||||
"project_state", "generation", "generated_image", "reference", "location", "latest_export",
|
||||
]);
|
||||
const auditRetentionMilliseconds = 180 * 24 * 60 * 60 * 1_000;
|
||||
const auditRefPattern = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,159}$/;
|
||||
const forbiddenSummaryKeys = new Set([
|
||||
"absolute_path", "api_key", "body", "code_hmac", "content", "credential", "email", "image",
|
||||
"image_content", "password", "path", "prompt", "secret", "session_token", "verification_code", "whitelist",
|
||||
]);
|
||||
const forbiddenSummaryFragments = ["content", "credential", "email", "image", "password", "path", "prompt", "secret", "token"];
|
||||
|
||||
function isSafeAuditRef(value: unknown) {
|
||||
return typeof value === "string" && auditRefPattern.test(value) ? 1 : 0;
|
||||
}
|
||||
|
||||
function isSafeAuditSummaryJson(value: unknown) {
|
||||
if (typeof value !== "string" || Buffer.byteLength(value, "utf8") > 2_048) return 0;
|
||||
try {
|
||||
const valid = (entry: unknown, depth: number): boolean => {
|
||||
if (depth > 3) return false;
|
||||
if (entry === null || typeof entry === "boolean") return true;
|
||||
if (typeof entry === "number") return Number.isSafeInteger(entry);
|
||||
if (typeof entry === "string") return /^[A-Za-z0-9_.:@-]{1,160}$/.test(entry) && !entry.includes("@");
|
||||
if (Array.isArray(entry)) return entry.length <= 20 && entry.every((item) => valid(item, depth + 1));
|
||||
if (!entry || typeof entry !== "object") return false;
|
||||
return Object.entries(entry).length <= 32 && Object.entries(entry).every(([key, item]) => (
|
||||
auditRefPattern.test(key)
|
||||
&& !forbiddenSummaryKeys.has(key.toLowerCase())
|
||||
&& !forbiddenSummaryFragments.some((fragment) => key.toLowerCase().includes(fragment))
|
||||
&& valid(item, depth + 1)
|
||||
));
|
||||
};
|
||||
return valid(JSON.parse(value), 0) ? 1 : 0;
|
||||
} catch {
|
||||
return 0;
|
||||
}
|
||||
}
|
||||
|
||||
function iso(timestamp: number) {
|
||||
return new Date(timestamp).toISOString();
|
||||
@@ -81,12 +47,6 @@ export class ProjectPurgeCleanup {
|
||||
this.database.pragma("journal_mode = WAL");
|
||||
this.database.pragma("foreign_keys = ON");
|
||||
this.database.pragma("busy_timeout = 5000");
|
||||
this.database.function("dada_audit_ref_is_safe", { deterministic: true }, isSafeAuditRef);
|
||||
this.database.function("dada_audit_summary_is_safe", { deterministic: true }, isSafeAuditSummaryJson);
|
||||
this.database.function("dada_allow_privacy_purge", { deterministic: false }, () => 0);
|
||||
this.database.function("dada_privacy_purge_subject", { deterministic: false }, () => "");
|
||||
this.database.function("dada_allow_retention_purge", { deterministic: false }, () => 0);
|
||||
this.database.function("dada_retention_purge_now", { deterministic: false }, () => 0);
|
||||
}
|
||||
|
||||
close() {
|
||||
@@ -193,16 +153,12 @@ export class ProjectPurgeCleanup {
|
||||
if (pending.count === 0) {
|
||||
this.database.prepare("UPDATE asset_cleanup_requests SET status = 'completed' WHERE request_id = ? AND status = 'queued'")
|
||||
.run(request.request_id);
|
||||
this.insertAssetCleanupAudit(request.request_id, row.byte_size, this.clock());
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
if (this.tableExists("sticker_managed_file_history")) {
|
||||
this.database.prepare("DELETE FROM sticker_managed_file_history WHERE managed_file_id = ?").run(row.managed_file_id);
|
||||
}
|
||||
this.database.prepare("DELETE FROM managed_files WHERE file_id = ?").run(row.managed_file_id);
|
||||
if (this.tableExists("local_backend_storage_state")) this.remeasureManagedCapacity();
|
||||
if (this.tableExists("local_backend_storage_state")) this.decrementManagedCapacity(row.byte_size);
|
||||
}
|
||||
this.database.prepare(`
|
||||
UPDATE file_cleanup_queue SET status = 'completed', completed_at = ?, last_error = NULL
|
||||
@@ -282,46 +238,4 @@ export class ProjectPurgeCleanup {
|
||||
WHERE singleton = 1
|
||||
`).run(managed, notice, status, iso(this.clock()));
|
||||
}
|
||||
|
||||
private insertAssetCleanupAudit(requestId: string, deletedBytes: number, occurredAt: number) {
|
||||
if (!this.tableExists("admin_operation_logs")) return;
|
||||
this.database.prepare(`
|
||||
INSERT INTO admin_operation_logs (
|
||||
log_id, actor_type, actor_ref, operation_type, target_type, target_ref,
|
||||
result, before_summary, after_summary, occurred_at, expires_at
|
||||
) VALUES (?, 'system', 'project_purge_worker', 'asset_cleanup_physical_completed', 'asset_cleanup', ?, 'succeeded', NULL, ?, ?, ?)
|
||||
`).run(
|
||||
randomUUID(), requestId, JSON.stringify({ deleted_bytes: deletedBytes, status: "completed" }), occurredAt,
|
||||
occurredAt + auditRetentionMilliseconds,
|
||||
);
|
||||
}
|
||||
|
||||
private remeasureManagedCapacity() {
|
||||
const state = this.database.prepare(`
|
||||
SELECT managed_content_bytes FROM local_backend_storage_state WHERE singleton = 1
|
||||
`).get() as { managed_content_bytes: number } | undefined;
|
||||
if (!state) return;
|
||||
const rows = this.database.prepare(`
|
||||
SELECT relative_path FROM managed_files WHERE status = 'committed'
|
||||
`).all() as Array<{ relative_path: string }>;
|
||||
let managed = 0;
|
||||
for (const row of rows) {
|
||||
try {
|
||||
const path = this.resolveManagedPath(row.relative_path);
|
||||
if (existsSync(path)) managed += statSync(path).size;
|
||||
} catch {
|
||||
// A missing or invalid path is excluded from the measured physical total.
|
||||
}
|
||||
}
|
||||
const reservations = this.tableExists("storage_reservations")
|
||||
? (this.database.prepare("SELECT COALESCE(SUM(projected_bytes), 0) AS bytes FROM storage_reservations WHERE status = 'active'").get() as { bytes: number }).bytes
|
||||
: 0;
|
||||
const notice = managed < 4_294_967_296 ? "normal" : managed < 4_831_838_208 ? "warning" : "critical";
|
||||
const status = managed + reservations >= 5_368_709_120 ? "full" : "active";
|
||||
this.database.prepare(`
|
||||
UPDATE local_backend_storage_state
|
||||
SET managed_content_bytes = ?, capacity_notice_level = ?, storage_status = ?, measured_at = ?, version = version + 1
|
||||
WHERE singleton = 1
|
||||
`).run(managed, notice, status, iso(this.clock()));
|
||||
}
|
||||
}
|
||||
|
||||
@@ -300,6 +300,125 @@
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"AdminDiagnosticsResponse": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"diagnostic_text": {
|
||||
"maxLength": 12000,
|
||||
"minLength": 1,
|
||||
"type": "string"
|
||||
},
|
||||
"generated_at": {
|
||||
"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$",
|
||||
"type": "string"
|
||||
},
|
||||
"services": {
|
||||
"$ref": "#/components/schemas/AdminServicesStorageResponse"
|
||||
},
|
||||
"system": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"api_status": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"ready"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"degraded"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"unavailable"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
},
|
||||
"app_version": {
|
||||
"maxLength": 80,
|
||||
"pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$",
|
||||
"type": "string"
|
||||
},
|
||||
"browser_support": {
|
||||
"items": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"brand": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"Google Chrome"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"Microsoft Edge"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
},
|
||||
"major": {
|
||||
"minimum": 1,
|
||||
"type": "integer"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"brand",
|
||||
"major"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"maxItems": 2,
|
||||
"type": "array"
|
||||
},
|
||||
"worker_status": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"ready"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"degraded"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"unavailable"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"api_status",
|
||||
"app_version",
|
||||
"browser_support",
|
||||
"worker_status"
|
||||
],
|
||||
"type": "object"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"generated_at",
|
||||
"diagnostic_text",
|
||||
"services",
|
||||
"system"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"AdminLoginCompleteRequest": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
@@ -363,6 +482,636 @@
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"AdminOverviewResponse": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"asset_cleanup": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"pending_jobs": {
|
||||
"minimum": 0,
|
||||
"type": "integer"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"pending_jobs"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"generated_at": {
|
||||
"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$",
|
||||
"type": "string"
|
||||
},
|
||||
"generation_jobs": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"pending_manual_review": {
|
||||
"minimum": 0,
|
||||
"type": "integer"
|
||||
},
|
||||
"pending_manual_review_oldest_at": {
|
||||
"anyOf": [
|
||||
{
|
||||
"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$",
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"type": "null"
|
||||
}
|
||||
]
|
||||
},
|
||||
"queued": {
|
||||
"minimum": 0,
|
||||
"type": "integer"
|
||||
},
|
||||
"running": {
|
||||
"minimum": 0,
|
||||
"type": "integer"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"pending_manual_review",
|
||||
"pending_manual_review_oldest_at",
|
||||
"queued",
|
||||
"running"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"models": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"configured_default_model_id": {
|
||||
"anyOf": [
|
||||
{
|
||||
"maxLength": 80,
|
||||
"pattern": "^[a-z0-9][a-z0-9.-]+$",
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"type": "null"
|
||||
}
|
||||
]
|
||||
},
|
||||
"configured_model_count": {
|
||||
"minimum": 0,
|
||||
"type": "integer"
|
||||
},
|
||||
"recommended_model_id": {
|
||||
"anyOf": [
|
||||
{
|
||||
"maxLength": 80,
|
||||
"pattern": "^[a-z0-9][a-z0-9.-]+$",
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"type": "null"
|
||||
}
|
||||
]
|
||||
},
|
||||
"runtime_available_count": {
|
||||
"minimum": 0,
|
||||
"type": "integer"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"configured_default_model_id",
|
||||
"configured_model_count",
|
||||
"recommended_model_id",
|
||||
"runtime_available_count"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"recent_operations": {
|
||||
"items": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"created_at": {
|
||||
"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$",
|
||||
"type": "string"
|
||||
},
|
||||
"operation_id": {
|
||||
"pattern": "^[0-9a-fA-F-]{36}$",
|
||||
"type": "string"
|
||||
},
|
||||
"operation_type": {
|
||||
"maxLength": 80,
|
||||
"pattern": "^[a-z][a-z0-9_]+$",
|
||||
"type": "string"
|
||||
},
|
||||
"result": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"succeeded"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"rejected"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"failed"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
},
|
||||
"target_ref": {
|
||||
"pattern": "^[A-Za-z0-9][A-Za-z0-9:._-]{0,159}$",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"created_at",
|
||||
"operation_id",
|
||||
"operation_type",
|
||||
"result",
|
||||
"target_ref"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"maxItems": 10,
|
||||
"type": "array"
|
||||
},
|
||||
"services": {
|
||||
"items": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"checked_at": {
|
||||
"anyOf": [
|
||||
{
|
||||
"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$",
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"type": "null"
|
||||
}
|
||||
]
|
||||
},
|
||||
"service_id": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"resend"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"amap"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"ai_gateway"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"worker"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"asset_root"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
},
|
||||
"status": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"available"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"degraded"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"paused"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"unavailable"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"checked_at",
|
||||
"service_id",
|
||||
"status"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"maxItems": 5,
|
||||
"type": "array"
|
||||
},
|
||||
"storage": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"last_measured_at": {
|
||||
"anyOf": [
|
||||
{
|
||||
"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$",
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"type": "null"
|
||||
}
|
||||
]
|
||||
},
|
||||
"limit_bytes": {
|
||||
"minimum": 1,
|
||||
"type": "integer"
|
||||
},
|
||||
"managed_content_bytes": {
|
||||
"minimum": 0,
|
||||
"type": "integer"
|
||||
},
|
||||
"status": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"normal"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"critical"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"full"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"unavailable"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"last_measured_at",
|
||||
"limit_bytes",
|
||||
"managed_content_bytes",
|
||||
"status"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"user_slots": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"active_and_suspended": {
|
||||
"minimum": 0,
|
||||
"type": "integer"
|
||||
},
|
||||
"limit": {
|
||||
"minimum": 1,
|
||||
"type": "integer"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"active_and_suspended",
|
||||
"limit"
|
||||
],
|
||||
"type": "object"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"generated_at",
|
||||
"user_slots",
|
||||
"generation_jobs",
|
||||
"models",
|
||||
"storage",
|
||||
"services",
|
||||
"recent_operations",
|
||||
"asset_cleanup"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"AdminServicesStorageResponse": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"generated_at": {
|
||||
"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$",
|
||||
"type": "string"
|
||||
},
|
||||
"services": {
|
||||
"items": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"checked_at": {
|
||||
"anyOf": [
|
||||
{
|
||||
"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$",
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"type": "null"
|
||||
}
|
||||
]
|
||||
},
|
||||
"configured": {
|
||||
"type": "boolean"
|
||||
},
|
||||
"impact_scope": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"none"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"authentication"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"location"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"generation"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"storage"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"api"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"model"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"account"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"unknown"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
},
|
||||
"pause_reason": {
|
||||
"anyOf": [
|
||||
{
|
||||
"maxLength": 80,
|
||||
"pattern": "^[a-z][a-z0-9_]*$",
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"type": "null"
|
||||
}
|
||||
]
|
||||
},
|
||||
"service_id": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"resend"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"amap"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"ai_gateway"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"worker"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"api"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"asset_root"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
},
|
||||
"status": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"active"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"paused_quota"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"paused_provider"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"disabled"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"degraded"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"unavailable"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"checked_at",
|
||||
"configured",
|
||||
"impact_scope",
|
||||
"pause_reason",
|
||||
"service_id",
|
||||
"status"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"maxItems": 6,
|
||||
"minItems": 6,
|
||||
"type": "array"
|
||||
},
|
||||
"storage": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
"capacity_notice_level": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"normal"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"warning"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"critical"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
},
|
||||
"cleanup_pending_count": {
|
||||
"minimum": 0,
|
||||
"type": "integer"
|
||||
},
|
||||
"data_root_ref": {
|
||||
"enum": [
|
||||
"configured_local_data_root"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"hard_limit_bytes": {
|
||||
"minimum": 1,
|
||||
"type": "integer"
|
||||
},
|
||||
"last_measured_at": {
|
||||
"anyOf": [
|
||||
{
|
||||
"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$",
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"type": "null"
|
||||
}
|
||||
]
|
||||
},
|
||||
"managed_content_bytes": {
|
||||
"minimum": 0,
|
||||
"type": "integer"
|
||||
},
|
||||
"remeasurement_required": {
|
||||
"type": "boolean"
|
||||
},
|
||||
"status": {
|
||||
"anyOf": [
|
||||
{
|
||||
"enum": [
|
||||
"active"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"full"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
{
|
||||
"enum": [
|
||||
"unavailable"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
},
|
||||
"storage_backend": {
|
||||
"enum": [
|
||||
"local_filesystem"
|
||||
],
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"capacity_notice_level",
|
||||
"cleanup_pending_count",
|
||||
"data_root_ref",
|
||||
"hard_limit_bytes",
|
||||
"last_measured_at",
|
||||
"managed_content_bytes",
|
||||
"remeasurement_required",
|
||||
"status",
|
||||
"storage_backend"
|
||||
],
|
||||
"type": "object"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"generated_at",
|
||||
"services",
|
||||
"storage"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"AdminSessionResponse": {
|
||||
"additionalProperties": false,
|
||||
"properties": {
|
||||
@@ -4954,6 +5703,39 @@
|
||||
]
|
||||
}
|
||||
},
|
||||
"/api/v1/admin/diagnostics": {
|
||||
"get": {
|
||||
"operationId": "getAdminDiagnostics",
|
||||
"responses": {
|
||||
"200": {
|
||||
"content": {
|
||||
"application/json": {
|
||||
"schema": {
|
||||
"$ref": "#/components/schemas/AdminDiagnosticsResponse"
|
||||
}
|
||||
}
|
||||
},
|
||||
"description": "Default Response"
|
||||
},
|
||||
"401": {
|
||||
"content": {
|
||||
"application/json": {
|
||||
"schema": {
|
||||
"$ref": "#/components/schemas/ErrorEnvelope"
|
||||
}
|
||||
}
|
||||
},
|
||||
"description": "Default Response"
|
||||
},
|
||||
"503": {
|
||||
"description": "Default Response"
|
||||
}
|
||||
},
|
||||
"tags": [
|
||||
"Admin Operations"
|
||||
]
|
||||
}
|
||||
},
|
||||
"/api/v1/admin/models/configuration": {
|
||||
"put": {
|
||||
"operationId": "replaceModelConfiguration",
|
||||
@@ -7965,6 +8747,72 @@
|
||||
]
|
||||
}
|
||||
},
|
||||
"/api/v1/admin/overview": {
|
||||
"get": {
|
||||
"operationId": "getAdminOverview",
|
||||
"responses": {
|
||||
"200": {
|
||||
"content": {
|
||||
"application/json": {
|
||||
"schema": {
|
||||
"$ref": "#/components/schemas/AdminOverviewResponse"
|
||||
}
|
||||
}
|
||||
},
|
||||
"description": "Default Response"
|
||||
},
|
||||
"401": {
|
||||
"content": {
|
||||
"application/json": {
|
||||
"schema": {
|
||||
"$ref": "#/components/schemas/ErrorEnvelope"
|
||||
}
|
||||
}
|
||||
},
|
||||
"description": "Default Response"
|
||||
},
|
||||
"503": {
|
||||
"description": "Default Response"
|
||||
}
|
||||
},
|
||||
"tags": [
|
||||
"Admin Operations"
|
||||
]
|
||||
}
|
||||
},
|
||||
"/api/v1/admin/services-storage": {
|
||||
"get": {
|
||||
"operationId": "getAdminServicesStorage",
|
||||
"responses": {
|
||||
"200": {
|
||||
"content": {
|
||||
"application/json": {
|
||||
"schema": {
|
||||
"$ref": "#/components/schemas/AdminServicesStorageResponse"
|
||||
}
|
||||
}
|
||||
},
|
||||
"description": "Default Response"
|
||||
},
|
||||
"401": {
|
||||
"content": {
|
||||
"application/json": {
|
||||
"schema": {
|
||||
"$ref": "#/components/schemas/ErrorEnvelope"
|
||||
}
|
||||
}
|
||||
},
|
||||
"description": "Default Response"
|
||||
},
|
||||
"503": {
|
||||
"description": "Default Response"
|
||||
}
|
||||
},
|
||||
"tags": [
|
||||
"Admin Operations"
|
||||
]
|
||||
}
|
||||
},
|
||||
"/api/v1/admin/users/{userId}/credit-adjustments": {
|
||||
"post": {
|
||||
"operationId": "adjustAdminUserCredits",
|
||||
|
||||
+6
-7
@@ -14,9 +14,9 @@
|
||||
"test:integration": "vitest run tests/integration",
|
||||
"test:api": "pnpm check:openapi && vitest run tests/api",
|
||||
"test:worker": "pnpm --filter @dada/worker build && node scripts/worker-smoke.mjs && vitest run tests/worker",
|
||||
"test:e2e": "pnpm check:openapi && playwright test tests/e2e/event-sync.spec.ts tests/e2e/support-gate.spec.ts tests/e2e/local-data-boundary.spec.ts tests/e2e/storage-capacity.spec.ts tests/e2e/public-asset-cache.spec.ts tests/e2e/user-auth.spec.ts tests/e2e/admin-auth.spec.ts tests/e2e/entry-state-ui.spec.ts tests/e2e/session-invalid-ui.spec.ts tests/e2e/user-registration.spec.ts tests/e2e/account-settings.spec.ts tests/e2e/projects-workspace.spec.ts tests/e2e/project-autosave-conflict.spec.ts tests/e2e/project-trash.spec.ts tests/e2e/credits.spec.ts tests/e2e/generation-workspace.spec.ts tests/e2e/generation-terminal-actions.spec.ts tests/e2e/project-latest-exports.spec.ts tests/e2e/admin-models.spec.ts tests/e2e/wp4-01-editor-background.spec.ts tests/e2e/wp4-02-editor-elements.spec.ts tests/e2e/wp4-03-text-editor.spec.ts tests/e2e/wp4-04-color-dynamic.spec.ts tests/e2e/wp4-05-export.spec.ts tests/e2e/wp4-06-accessibility.spec.ts tests/e2e/wp5-02-static-sticker-catalog.spec.ts tests/e2e/wp5-03-template-registry.spec.ts tests/e2e/wp5-04-resource-isolation.spec.ts tests/e2e/wp5-05-admin-assets.spec.ts --config playwright.config.ts",
|
||||
"test:visual": "node scripts/run-wp4-07-layer.mjs visual",
|
||||
"test:performance": "node scripts/run-wp4-07-layer.mjs performance",
|
||||
"test:e2e": "pnpm check:openapi && playwright test tests/e2e/event-sync.spec.ts tests/e2e/support-gate.spec.ts tests/e2e/local-data-boundary.spec.ts tests/e2e/storage-capacity.spec.ts tests/e2e/public-asset-cache.spec.ts tests/e2e/user-auth.spec.ts tests/e2e/admin-auth.spec.ts tests/e2e/entry-state-ui.spec.ts tests/e2e/session-invalid-ui.spec.ts tests/e2e/user-registration.spec.ts tests/e2e/account-settings.spec.ts tests/e2e/projects-workspace.spec.ts tests/e2e/project-autosave-conflict.spec.ts tests/e2e/project-trash.spec.ts tests/e2e/credits.spec.ts tests/e2e/generation-workspace.spec.ts tests/e2e/generation-terminal-actions.spec.ts tests/e2e/project-latest-exports.spec.ts tests/e2e/admin-models.spec.ts tests/e2e/wp4-01-editor-background.spec.ts tests/e2e/wp4-02-editor-elements.spec.ts tests/e2e/wp4-03-text-editor.spec.ts tests/e2e/wp4-04-color-dynamic.spec.ts tests/e2e/wp4-05-export.spec.ts tests/e2e/wp4-06-accessibility.spec.ts tests/e2e/wp5-02-static-sticker-catalog.spec.ts tests/e2e/wp5-03-template-registry.spec.ts tests/e2e/wp5-04-resource-isolation.spec.ts tests/e2e/wp6-01-admin-shell.spec.ts tests/e2e/wp6-05-state.spec.ts --config playwright.config.ts",
|
||||
"test:visual": "node scripts/validate-layer-scope.mjs VISUAL",
|
||||
"test:performance": "node scripts/validate-layer-scope.mjs PERFORMANCE",
|
||||
"test:security": "node scripts/verify-frozen-dependencies.mjs && node scripts/redaction-scan.mjs",
|
||||
"test:package": "pnpm run typecheck && node --test tests/package/wp0-09-portable.test.mjs && node scripts/package-smoke.mjs && node scripts/loopback-boundary-smoke.mjs",
|
||||
"package:portable": "node scripts/build-portable.mjs",
|
||||
@@ -86,8 +86,6 @@
|
||||
"test:wp4-05:red": "node scripts/run-wp4-05-validation.mjs --phase red",
|
||||
"test:wp4-06": "node scripts/run-wp4-06-validation.mjs",
|
||||
"test:wp4-06:red": "node scripts/run-wp4-06-validation.mjs --phase red",
|
||||
"test:wp4-07": "node scripts/run-wp4-07-validation.mjs",
|
||||
"test:wp4-07:red": "node scripts/run-wp4-07-validation.mjs --phase red",
|
||||
"test:wp5-01": "node scripts/run-wp5-01-validation.mjs",
|
||||
"test:wp5-01:red": "node scripts/run-wp5-01-validation.mjs --phase red",
|
||||
"test:wp5-02": "node scripts/run-wp5-02-validation.mjs",
|
||||
@@ -97,8 +95,9 @@
|
||||
"test:wp5-03:red": "node scripts/run-wp5-03-validation.mjs --phase red",
|
||||
"test:wp5-04": "node scripts/run-wp5-04-validation.mjs",
|
||||
"test:wp5-04:red": "node scripts/run-wp5-04-validation.mjs --phase red",
|
||||
"test:wp5-05": "node scripts/run-wp5-05-validation.mjs",
|
||||
"test:wp5-05:red": "node scripts/run-wp5-05-validation.mjs --phase red"
|
||||
"test:wp6-01": "node scripts/run-wp6-01-validation.mjs --phase scaffold",
|
||||
"test:wp6-01:red": "node scripts/run-wp6-01-validation.mjs --phase red",
|
||||
"test:wp6-05": "pnpm exec vitest run tests/api/wp6-05-state.test.ts && pnpm exec playwright test tests/e2e/wp6-05-state.spec.ts --config playwright.config.ts"
|
||||
},
|
||||
"devDependencies": {
|
||||
"@playwright/test": "1.62.0",
|
||||
|
||||
@@ -228,13 +228,7 @@ function readCsv(tracker: SourceTracker, path: string, label: string): CsvRow[]
|
||||
|
||||
function itemDirectoryFor(collection: CollectionConfig, catalogPath: string, row: CsvRow): { directory: string; metadataPath: string } {
|
||||
if (collection.id === "font_panel") {
|
||||
const configuredResourceDir = requireString(row.resource_dir, "font resource_dir");
|
||||
const normalizedResourceDir = configuredResourceDir.replaceAll("\\", "/");
|
||||
const relocationMarker = "/resources/font_packages/";
|
||||
const markerIndex = normalizedResourceDir.lastIndexOf(relocationMarker);
|
||||
const resourceDir = isAbsolute(configuredResourceDir) && !inside(configuredResourceDir, collection.root.path) && markerIndex >= 0
|
||||
? relativeReference(normalizedResourceDir.slice(markerIndex + 1), "font resource_dir relocation")
|
||||
: configuredResourceDir;
|
||||
const resourceDir = requireString(row.resource_dir, "font resource_dir");
|
||||
const directory = resolveSourcePath(resourceDir, collection.root.path, collection.root.path, "font resource_dir");
|
||||
return { directory, metadataPath: resolveSourcePath("metadata.json", directory, collection.root.path, "font metadata") };
|
||||
}
|
||||
|
||||
@@ -0,0 +1,163 @@
|
||||
import { Type, type Static } from "@sinclair/typebox";
|
||||
|
||||
const isoTimestampPattern = "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$";
|
||||
const modelIdPattern = "^[a-z0-9][a-z0-9.-]+$";
|
||||
const safeReferencePattern = "^[A-Za-z0-9][A-Za-z0-9:._-]{0,159}$";
|
||||
|
||||
export const AdminOverviewResponseSchema = Type.Object(
|
||||
{
|
||||
generated_at: Type.String({ pattern: isoTimestampPattern }),
|
||||
user_slots: Type.Object(
|
||||
{
|
||||
active_and_suspended: Type.Integer({ minimum: 0 }),
|
||||
limit: Type.Integer({ minimum: 1 }),
|
||||
},
|
||||
{ additionalProperties: false },
|
||||
),
|
||||
generation_jobs: Type.Object(
|
||||
{
|
||||
pending_manual_review: Type.Integer({ minimum: 0 }),
|
||||
pending_manual_review_oldest_at: Type.Union([Type.String({ pattern: isoTimestampPattern }), Type.Null()]),
|
||||
queued: Type.Integer({ minimum: 0 }),
|
||||
running: Type.Integer({ minimum: 0 }),
|
||||
},
|
||||
{ additionalProperties: false },
|
||||
),
|
||||
models: Type.Object(
|
||||
{
|
||||
configured_default_model_id: Type.Union([Type.String({ maxLength: 80, pattern: modelIdPattern }), Type.Null()]),
|
||||
configured_model_count: Type.Integer({ minimum: 0 }),
|
||||
recommended_model_id: Type.Union([Type.String({ maxLength: 80, pattern: modelIdPattern }), Type.Null()]),
|
||||
runtime_available_count: Type.Integer({ minimum: 0 }),
|
||||
},
|
||||
{ additionalProperties: false },
|
||||
),
|
||||
storage: Type.Object(
|
||||
{
|
||||
last_measured_at: Type.Union([Type.String({ pattern: isoTimestampPattern }), Type.Null()]),
|
||||
limit_bytes: Type.Integer({ minimum: 1 }),
|
||||
managed_content_bytes: Type.Integer({ minimum: 0 }),
|
||||
status: Type.Union([
|
||||
Type.Literal("normal"),
|
||||
Type.Literal("critical"),
|
||||
Type.Literal("full"),
|
||||
Type.Literal("unavailable"),
|
||||
]),
|
||||
},
|
||||
{ additionalProperties: false },
|
||||
),
|
||||
services: Type.Array(
|
||||
Type.Object(
|
||||
{
|
||||
checked_at: Type.Union([Type.String({ pattern: isoTimestampPattern }), Type.Null()]),
|
||||
service_id: Type.Union([
|
||||
Type.Literal("resend"),
|
||||
Type.Literal("amap"),
|
||||
Type.Literal("ai_gateway"),
|
||||
Type.Literal("worker"),
|
||||
Type.Literal("asset_root"),
|
||||
]),
|
||||
status: Type.Union([
|
||||
Type.Literal("available"),
|
||||
Type.Literal("degraded"),
|
||||
Type.Literal("paused"),
|
||||
Type.Literal("unavailable"),
|
||||
]),
|
||||
},
|
||||
{ additionalProperties: false },
|
||||
),
|
||||
{ maxItems: 5 },
|
||||
),
|
||||
recent_operations: Type.Array(
|
||||
Type.Object(
|
||||
{
|
||||
created_at: Type.String({ pattern: isoTimestampPattern }),
|
||||
operation_id: Type.String({ pattern: "^[0-9a-fA-F-]{36}$" }),
|
||||
operation_type: Type.String({ maxLength: 80, pattern: "^[a-z][a-z0-9_]+$" }),
|
||||
result: Type.Union([Type.Literal("succeeded"), Type.Literal("rejected"), Type.Literal("failed")]),
|
||||
target_ref: Type.String({ pattern: safeReferencePattern }),
|
||||
},
|
||||
{ additionalProperties: false },
|
||||
),
|
||||
{ maxItems: 10 },
|
||||
),
|
||||
asset_cleanup: Type.Object(
|
||||
{
|
||||
pending_jobs: Type.Integer({ minimum: 0 }),
|
||||
},
|
||||
{ additionalProperties: false },
|
||||
),
|
||||
},
|
||||
{ additionalProperties: false, $id: "AdminOverviewResponse" },
|
||||
);
|
||||
|
||||
export type AdminOverviewResponse = Static<typeof AdminOverviewResponseSchema>;
|
||||
|
||||
const adminServiceStatusSchema = Type.Union([
|
||||
Type.Literal("active"),
|
||||
Type.Literal("paused_quota"),
|
||||
Type.Literal("paused_provider"),
|
||||
Type.Literal("disabled"),
|
||||
Type.Literal("degraded"),
|
||||
Type.Literal("unavailable"),
|
||||
]);
|
||||
|
||||
const adminServiceIdSchema = Type.Union([
|
||||
Type.Literal("resend"),
|
||||
Type.Literal("amap"),
|
||||
Type.Literal("ai_gateway"),
|
||||
Type.Literal("worker"),
|
||||
Type.Literal("api"),
|
||||
Type.Literal("asset_root"),
|
||||
]);
|
||||
|
||||
export const AdminServicesStorageResponseSchema = Type.Object({
|
||||
generated_at: Type.String({ pattern: isoTimestampPattern }),
|
||||
services: Type.Array(Type.Object({
|
||||
checked_at: Type.Union([Type.String({ pattern: isoTimestampPattern }), Type.Null()]),
|
||||
configured: Type.Boolean(),
|
||||
impact_scope: Type.Union([
|
||||
Type.Literal("none"),
|
||||
Type.Literal("authentication"),
|
||||
Type.Literal("location"),
|
||||
Type.Literal("generation"),
|
||||
Type.Literal("storage"),
|
||||
Type.Literal("api"),
|
||||
Type.Literal("model"),
|
||||
Type.Literal("account"),
|
||||
Type.Literal("unknown"),
|
||||
]),
|
||||
pause_reason: Type.Union([Type.String({ maxLength: 80, pattern: "^[a-z][a-z0-9_]*$" }), Type.Null()]),
|
||||
service_id: adminServiceIdSchema,
|
||||
status: adminServiceStatusSchema,
|
||||
}, { additionalProperties: false }), { minItems: 6, maxItems: 6 }),
|
||||
storage: Type.Object({
|
||||
capacity_notice_level: Type.Union([Type.Literal("normal"), Type.Literal("warning"), Type.Literal("critical")]),
|
||||
cleanup_pending_count: Type.Integer({ minimum: 0 }),
|
||||
data_root_ref: Type.Literal("configured_local_data_root"),
|
||||
hard_limit_bytes: Type.Integer({ minimum: 1 }),
|
||||
last_measured_at: Type.Union([Type.String({ pattern: isoTimestampPattern }), Type.Null()]),
|
||||
managed_content_bytes: Type.Integer({ minimum: 0 }),
|
||||
remeasurement_required: Type.Boolean(),
|
||||
status: Type.Union([Type.Literal("active"), Type.Literal("full"), Type.Literal("unavailable")]),
|
||||
storage_backend: Type.Literal("local_filesystem"),
|
||||
}, { additionalProperties: false }),
|
||||
}, { additionalProperties: false, $id: "AdminServicesStorageResponse" });
|
||||
|
||||
export const AdminDiagnosticsResponseSchema = Type.Object({
|
||||
generated_at: Type.String({ pattern: isoTimestampPattern }),
|
||||
diagnostic_text: Type.String({ minLength: 1, maxLength: 12_000 }),
|
||||
services: Type.Ref(AdminServicesStorageResponseSchema),
|
||||
system: Type.Object({
|
||||
api_status: Type.Union([Type.Literal("ready"), Type.Literal("degraded"), Type.Literal("unavailable")]),
|
||||
app_version: Type.String({ maxLength: 80, pattern: "^[A-Za-z0-9][A-Za-z0-9._-]*$" }),
|
||||
browser_support: Type.Array(Type.Object({
|
||||
brand: Type.Union([Type.Literal("Google Chrome"), Type.Literal("Microsoft Edge")]),
|
||||
major: Type.Integer({ minimum: 1 }),
|
||||
}, { additionalProperties: false }), { maxItems: 2 }),
|
||||
worker_status: Type.Union([Type.Literal("ready"), Type.Literal("degraded"), Type.Literal("unavailable")]),
|
||||
}, { additionalProperties: false }),
|
||||
}, { additionalProperties: false, $id: "AdminDiagnosticsResponse" });
|
||||
|
||||
export type AdminServicesStorageResponse = Static<typeof AdminServicesStorageResponseSchema>;
|
||||
export type AdminDiagnosticsResponse = Static<typeof AdminDiagnosticsResponseSchema>;
|
||||
@@ -1,5 +1,6 @@
|
||||
export { Type } from "@sinclair/typebox";
|
||||
export * from "./api.js";
|
||||
export * from "./admin.js";
|
||||
export * from "./assets.js";
|
||||
export * from "./auth.js";
|
||||
export * from "./bootstrap.js";
|
||||
|
||||
@@ -16,8 +16,8 @@ export interface StaticStickerCatalogItem {
|
||||
relative_path: string;
|
||||
width: number;
|
||||
height: number;
|
||||
mime_type: "image/png" | "image/webp";
|
||||
mime: "image/png" | "image/webp";
|
||||
mime_type: "image/png";
|
||||
mime: "image/png";
|
||||
sha256: string;
|
||||
original_reference: string;
|
||||
thumbnail_reference: StaticStickerThumbnailReference;
|
||||
|
||||
@@ -1,8 +1,5 @@
|
||||
import type { StaticStickerCatalog, StaticStickerCatalogItem } from "@dada/static-sticker-catalog";
|
||||
|
||||
export const P0A_COMPLEX_RELEASE_VERSION = "p0a-complex-v1";
|
||||
export const P0A_STATIC_STICKER_RELEASE_VERSION = "p0a-static-v1";
|
||||
|
||||
export const P0A_TEXT_TEMPLATE_IDS = [
|
||||
"FLOWER001", "FLOWER002", "FLOWER003", "FLOWER004", "FLOWER005", "FLOWER006", "FLOWER007", "FLOWER008",
|
||||
"H001", "H002", "H003", "H004", "H005", "H006", "H007", "H008",
|
||||
|
||||
@@ -1,26 +0,0 @@
|
||||
import { defineConfig } from "@playwright/test";
|
||||
|
||||
export default defineConfig({
|
||||
forbidOnly: true,
|
||||
fullyParallel: false,
|
||||
outputDir: process.env.DADA_PLAYWRIGHT_OUTPUT_DIR ?? "test-results/wp4-07",
|
||||
projects: [
|
||||
{ name: "chrome", use: { channel: "chrome" } },
|
||||
{ name: "edge", use: { channel: "msedge" } },
|
||||
],
|
||||
reporter: "line",
|
||||
retries: 0,
|
||||
testDir: "./tests/e2e",
|
||||
testMatch: "wp4-07-visual-performance.spec.ts",
|
||||
timeout: 360_000,
|
||||
use: {
|
||||
deviceScaleFactor: 1,
|
||||
headless: true,
|
||||
launchOptions: { args: ["--enable-precise-memory-info", "--force-device-scale-factor=1"] },
|
||||
locale: "zh-CN",
|
||||
timezoneId: "Asia/Shanghai",
|
||||
trace: "off",
|
||||
viewport: { height: 1080, width: 1920 },
|
||||
},
|
||||
workers: 1,
|
||||
});
|
||||
Generated
-316
@@ -44,9 +44,6 @@ importers:
|
||||
'@dada/shared-contracts':
|
||||
specifier: workspace:*
|
||||
version: link:../../packages/shared-contracts
|
||||
'@dada/static-sticker-catalog':
|
||||
specifier: workspace:*
|
||||
version: link:../../packages/static-sticker-catalog
|
||||
'@fastify/multipart':
|
||||
specifier: 10.1.0
|
||||
version: 10.1.0
|
||||
@@ -65,9 +62,6 @@ importers:
|
||||
fastify:
|
||||
specifier: 5.10.0
|
||||
version: 5.10.0
|
||||
sharp:
|
||||
specifier: 0.35.3
|
||||
version: 0.35.3(@types/node@24.13.3)
|
||||
devDependencies:
|
||||
'@types/better-sqlite3':
|
||||
specifier: 7.6.13
|
||||
@@ -277,168 +271,6 @@ packages:
|
||||
'@fastify/swagger@9.8.1':
|
||||
resolution: {integrity: sha512-VpHMnqZTY8iBZYJE8WWkbKPrXIYWy2rDfIf5qLr6DzZSpQYZ+KxQVcJFiq/AMlvNwI4gCBd66++iUlxXXGT0IQ==}
|
||||
|
||||
'@img/colour@1.1.0':
|
||||
resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
|
||||
engines: {node: '>=18'}
|
||||
|
||||
'@img/sharp-darwin-arm64@0.35.3':
|
||||
resolution: {integrity: sha512-RMnFX7YQsMoh7lWfcM4NEHHymBX/rLuKNPVM84XE9ONPcaSCDgE7CHIHpSgPcO2xcRthgBy1HfNO319mwhIAkg==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [arm64]
|
||||
os: [darwin]
|
||||
|
||||
'@img/sharp-darwin-x64@0.35.3':
|
||||
resolution: {integrity: sha512-Xo+5uFBtLN0BKqieTxiFzFPQAUlBbbH5iBKyRX/z1JrbnYsHTfKJnUfL8+p2TPXr1pXqao4eeL4Rl144uDpK9w==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [x64]
|
||||
os: [darwin]
|
||||
|
||||
'@img/sharp-freebsd-wasm32@0.35.3':
|
||||
resolution: {integrity: sha512-lUxcqWIj2wMQ9BrwNjngcr1gWUr5xgaGThBRqPPalIC2n67Cqj1uPh8NnA/ZhAg8hUbKl+kVHKwgUIwe6ZYPrg==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
os: [freebsd]
|
||||
|
||||
'@img/sharp-libvips-darwin-arm64@1.3.2':
|
||||
resolution: {integrity: sha512-9J6ypZFpQBj4YnePGoq/S38w6nz+vqg5WZLrLGY4YuSemdMq47GMLBPO42MzwdGwpg/agZ7xzZcFHa48xlywfg==}
|
||||
cpu: [arm64]
|
||||
os: [darwin]
|
||||
|
||||
'@img/sharp-libvips-darwin-x64@1.3.2':
|
||||
resolution: {integrity: sha512-m2pW1n6cns9VaubNwsZ+c3CRYjxNQWgJ5gPlnL1nbBcpkBvFm6SCFN5o0psFHI8w9n11NKhFkeEDns98tiqbEw==}
|
||||
cpu: [x64]
|
||||
os: [darwin]
|
||||
|
||||
'@img/sharp-libvips-linux-arm64@1.3.2':
|
||||
resolution: {integrity: sha512-dqVSFynCox4C/J8kT16V7SIFAns0IjgLwkvYT7p8LQVmJ5OS5b6tI9IGflxTeuBS//zXeFIUbwt5dwxyZ17cnA==}
|
||||
cpu: [arm64]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-libvips-linux-arm@1.3.2':
|
||||
resolution: {integrity: sha512-1eMLzy92I4J6rmi4mAT8yC3HxOtniyGELlzGbNMLLeqe052ahFQ0h6LFq+lh5DsDIdYViIDst08abvSbcEdLXQ==}
|
||||
cpu: [arm]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-libvips-linux-ppc64@1.3.2':
|
||||
resolution: {integrity: sha512-3z0NHDxD6n5I9gc05U1eW1AyRm+Gznzq3naMrthPNqE6oYykcogW0l/jfpJdjYnuNl8R7yI9pNbE1XiUeyq0Aw==}
|
||||
cpu: [ppc64]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-libvips-linux-riscv64@1.3.2':
|
||||
resolution: {integrity: sha512-bsb4rI+NldGOsXuej2r8OdSS8+zXDVaCWxyWrcv6kneTOlgAHtZABRzBBCwdsPiD90J4myNJuHpg6kA20ImW/w==}
|
||||
cpu: [riscv64]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-libvips-linux-s390x@1.3.2':
|
||||
resolution: {integrity: sha512-/ABshyj8gCpyIrNXnHn4LorDJ0HHm1VhXPBlxZ8zAtfVPAaSafXPGn+sUSIRiwaSBy0mmFjSjiXI5mkcwdChKQ==}
|
||||
cpu: [s390x]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-libvips-linux-x64@1.3.2':
|
||||
resolution: {integrity: sha512-ITPEtgffGJ0S6G9dRyw/366tJQqFRcHWPHhC+Stpg3Z8AEMrDrTr2lhdz4f/Y/HMbRh//7Z5mBzEpVdi62Oc3w==}
|
||||
cpu: [x64]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-libvips-linuxmusl-arm64@1.3.2':
|
||||
resolution: {integrity: sha512-zE9EdiUzUmg5mDT5a1rk5fYJ6GWPloTwWBYDS14naqHsL+EaMpDj1AWnpLgh3u0YCORv2Tt50wrcrpYqkP97Kw==}
|
||||
cpu: [arm64]
|
||||
os: [linux]
|
||||
libc: [musl]
|
||||
|
||||
'@img/sharp-libvips-linuxmusl-x64@1.3.2':
|
||||
resolution: {integrity: sha512-m0lrLiUt+lBYnCFr8qV/65yMR4E/c7/wf78I5eKTdkEakFAlZ9QlzEM3QIhhAwVeUhLAHLcCq7a7Vszq/oFNZQ==}
|
||||
cpu: [x64]
|
||||
os: [linux]
|
||||
libc: [musl]
|
||||
|
||||
'@img/sharp-linux-arm64@0.35.3':
|
||||
resolution: {integrity: sha512-QgKDspHPnrU+GQ55XPhGwyhC8acLVOOSyAvo1oVfFmrIXLkDNmGWzAfDZ4xK8oSA1qBQrALcHX0G5UZni/SuFQ==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [arm64]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-linux-arm@0.35.3':
|
||||
resolution: {integrity: sha512-affVWCTLooy8TSxbDx2qkzuDeaWLNVBA+P//FNBirHsXpP2fuBhk5AuboYUnrDnzoXes8GFjpTx0SBFOCRg+FA==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [arm]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-linux-ppc64@0.35.3':
|
||||
resolution: {integrity: sha512-sMd8rDxmpLOwv/7N44klFjOD5DUO7FLdjiXDI0hoxYaf7Ar262dQIEkosE98bps+5HPLtp/EvNqeqQtOycP/IA==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [ppc64]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-linux-riscv64@0.35.3':
|
||||
resolution: {integrity: sha512-0Eob78yjlYPfL5vMNWAW55l3R9Y6BQS/gOfe0ZcP9mEz9ohhKSt4im1hayiknXgf8AWrFqMvJcKIdmLmEe7yeQ==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [riscv64]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-linux-s390x@0.35.3':
|
||||
resolution: {integrity: sha512-KgAxQ0DxpNOq1rG2t5cgTgShJFGSuU7XO45cqC+1NVOuZnP6tlgZRuSYOfNupGkHID0o3cJOsw4DVeJpMovcGw==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [s390x]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-linux-x64@0.35.3':
|
||||
resolution: {integrity: sha512-8pqvxubL2PGdhlPy6GLqzDYMUjyRmKAwKHYKixpdJYBUK7PJ0C029XdsnpFIdgRZG68fZiGdHVWcKPvtiPB4cA==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [x64]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@img/sharp-linuxmusl-arm64@0.35.3':
|
||||
resolution: {integrity: sha512-Vz0iQjzzcSX3HCbfwFfCSG/9SCIqyO0mH2sXyiHaAYfBk0cRsCWXRyQYX0ovCK/PAQBbTzQ0dsPQHh5MAFL59w==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [arm64]
|
||||
os: [linux]
|
||||
libc: [musl]
|
||||
|
||||
'@img/sharp-linuxmusl-x64@0.35.3':
|
||||
resolution: {integrity: sha512-6O1NPKcDVj9QEdg7Hx549EX8U0rp6yXQERqru6yRN7fGBn32UvIRJUlWnk+8xDCiG76hXVBbX82NZ/ZKr0euIg==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [x64]
|
||||
os: [linux]
|
||||
libc: [musl]
|
||||
|
||||
'@img/sharp-wasm32@0.35.3':
|
||||
resolution: {integrity: sha512-cZ0XkcYGpHZkqW6iCkqTcmUC0CD9DhD5d/qeZlZkfRBn6GnHniZXLUo5+9xw8Iv76YE6LQFN9YNBlKREcCG76w==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
|
||||
'@img/sharp-webcontainers-wasm32@0.35.3':
|
||||
resolution: {integrity: sha512-2rnq7bX3NzeR2T4YWgz8qiG4h3TSdMe+vN1iQXpJleSJ3SM5zQ8Fy2SyyXAWlbxpEZ2Y+Z4u1BePgJEYbSy80Q==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [wasm32]
|
||||
|
||||
'@img/sharp-win32-arm64@0.35.3':
|
||||
resolution: {integrity: sha512-4bPwFdMbeC4JQ8L8LOyWp6nsHcboP5fxkp6iPOXz2Vg49R42TuMs2whkJ5OAP4/Ul035qOzy0AecOF9VOscn4w==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [arm64]
|
||||
os: [win32]
|
||||
|
||||
'@img/sharp-win32-ia32@0.35.3':
|
||||
resolution: {integrity: sha512-r53mXsBN6lFUDiST764SvgwUdHAqM4rPAiDzAmf4fLoB6X/rkfyTrLCg6+g17wJJiCmB3JYgHuUldCWUIRFSXw==}
|
||||
engines: {node: ^20.9.0}
|
||||
cpu: [ia32]
|
||||
os: [win32]
|
||||
|
||||
'@img/sharp-win32-x64@0.35.3':
|
||||
resolution: {integrity: sha512-D4y1vNeZrIIJCN+uHaWVtH86B+aCrdMYYjicy9pXHvbGZeGYLLSd3wdVuC37FxVXlU1ARsk84eKWfWMXGYEqvA==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
cpu: [x64]
|
||||
os: [win32]
|
||||
|
||||
'@jridgewell/sourcemap-codec@1.5.5':
|
||||
resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==}
|
||||
|
||||
@@ -1379,15 +1211,6 @@ packages:
|
||||
set-cookie-parser@2.7.2:
|
||||
resolution: {integrity: sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==}
|
||||
|
||||
sharp@0.35.3:
|
||||
resolution: {integrity: sha512-ej0zVHuZGHCiABXcNxeYhpRnPNPAcvbG8RMdBAhDAxLKkCRVSpK3Iyu7qbqw3JMzoj0REeM6f3tJLtVwl0023Q==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
peerDependencies:
|
||||
'@types/node': '*'
|
||||
peerDependenciesMeta:
|
||||
'@types/node':
|
||||
optional: true
|
||||
|
||||
siginfo@2.0.0:
|
||||
resolution: {integrity: sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==}
|
||||
|
||||
@@ -1720,112 +1543,6 @@ snapshots:
|
||||
transitivePeerDependencies:
|
||||
- supports-color
|
||||
|
||||
'@img/colour@1.1.0': {}
|
||||
|
||||
'@img/sharp-darwin-arm64@0.35.3':
|
||||
optionalDependencies:
|
||||
'@img/sharp-libvips-darwin-arm64': 1.3.2
|
||||
optional: true
|
||||
|
||||
'@img/sharp-darwin-x64@0.35.3':
|
||||
optionalDependencies:
|
||||
'@img/sharp-libvips-darwin-x64': 1.3.2
|
||||
optional: true
|
||||
|
||||
'@img/sharp-freebsd-wasm32@0.35.3':
|
||||
dependencies:
|
||||
'@img/sharp-wasm32': 0.35.3
|
||||
optional: true
|
||||
|
||||
'@img/sharp-libvips-darwin-arm64@1.3.2':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-libvips-darwin-x64@1.3.2':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-libvips-linux-arm64@1.3.2':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-libvips-linux-arm@1.3.2':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-libvips-linux-ppc64@1.3.2':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-libvips-linux-riscv64@1.3.2':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-libvips-linux-s390x@1.3.2':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-libvips-linux-x64@1.3.2':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-libvips-linuxmusl-arm64@1.3.2':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-libvips-linuxmusl-x64@1.3.2':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-linux-arm64@0.35.3':
|
||||
optionalDependencies:
|
||||
'@img/sharp-libvips-linux-arm64': 1.3.2
|
||||
optional: true
|
||||
|
||||
'@img/sharp-linux-arm@0.35.3':
|
||||
optionalDependencies:
|
||||
'@img/sharp-libvips-linux-arm': 1.3.2
|
||||
optional: true
|
||||
|
||||
'@img/sharp-linux-ppc64@0.35.3':
|
||||
optionalDependencies:
|
||||
'@img/sharp-libvips-linux-ppc64': 1.3.2
|
||||
optional: true
|
||||
|
||||
'@img/sharp-linux-riscv64@0.35.3':
|
||||
optionalDependencies:
|
||||
'@img/sharp-libvips-linux-riscv64': 1.3.2
|
||||
optional: true
|
||||
|
||||
'@img/sharp-linux-s390x@0.35.3':
|
||||
optionalDependencies:
|
||||
'@img/sharp-libvips-linux-s390x': 1.3.2
|
||||
optional: true
|
||||
|
||||
'@img/sharp-linux-x64@0.35.3':
|
||||
optionalDependencies:
|
||||
'@img/sharp-libvips-linux-x64': 1.3.2
|
||||
optional: true
|
||||
|
||||
'@img/sharp-linuxmusl-arm64@0.35.3':
|
||||
optionalDependencies:
|
||||
'@img/sharp-libvips-linuxmusl-arm64': 1.3.2
|
||||
optional: true
|
||||
|
||||
'@img/sharp-linuxmusl-x64@0.35.3':
|
||||
optionalDependencies:
|
||||
'@img/sharp-libvips-linuxmusl-x64': 1.3.2
|
||||
optional: true
|
||||
|
||||
'@img/sharp-wasm32@0.35.3':
|
||||
dependencies:
|
||||
'@emnapi/runtime': 1.11.1
|
||||
optional: true
|
||||
|
||||
'@img/sharp-webcontainers-wasm32@0.35.3':
|
||||
dependencies:
|
||||
'@img/sharp-wasm32': 0.35.3
|
||||
optional: true
|
||||
|
||||
'@img/sharp-win32-arm64@0.35.3':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-win32-ia32@0.35.3':
|
||||
optional: true
|
||||
|
||||
'@img/sharp-win32-x64@0.35.3':
|
||||
optional: true
|
||||
|
||||
'@jridgewell/sourcemap-codec@1.5.5': {}
|
||||
|
||||
'@napi-rs/wasm-runtime@1.1.6(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)':
|
||||
@@ -2616,39 +2333,6 @@ snapshots:
|
||||
|
||||
set-cookie-parser@2.7.2: {}
|
||||
|
||||
sharp@0.35.3(@types/node@24.13.3):
|
||||
dependencies:
|
||||
'@img/colour': 1.1.0
|
||||
detect-libc: 2.1.2
|
||||
semver: 7.8.5
|
||||
optionalDependencies:
|
||||
'@img/sharp-darwin-arm64': 0.35.3
|
||||
'@img/sharp-darwin-x64': 0.35.3
|
||||
'@img/sharp-freebsd-wasm32': 0.35.3
|
||||
'@img/sharp-libvips-darwin-arm64': 1.3.2
|
||||
'@img/sharp-libvips-darwin-x64': 1.3.2
|
||||
'@img/sharp-libvips-linux-arm': 1.3.2
|
||||
'@img/sharp-libvips-linux-arm64': 1.3.2
|
||||
'@img/sharp-libvips-linux-ppc64': 1.3.2
|
||||
'@img/sharp-libvips-linux-riscv64': 1.3.2
|
||||
'@img/sharp-libvips-linux-s390x': 1.3.2
|
||||
'@img/sharp-libvips-linux-x64': 1.3.2
|
||||
'@img/sharp-libvips-linuxmusl-arm64': 1.3.2
|
||||
'@img/sharp-libvips-linuxmusl-x64': 1.3.2
|
||||
'@img/sharp-linux-arm': 0.35.3
|
||||
'@img/sharp-linux-arm64': 0.35.3
|
||||
'@img/sharp-linux-ppc64': 0.35.3
|
||||
'@img/sharp-linux-riscv64': 0.35.3
|
||||
'@img/sharp-linux-s390x': 0.35.3
|
||||
'@img/sharp-linux-x64': 0.35.3
|
||||
'@img/sharp-linuxmusl-arm64': 0.35.3
|
||||
'@img/sharp-linuxmusl-x64': 0.35.3
|
||||
'@img/sharp-webcontainers-wasm32': 0.35.3
|
||||
'@img/sharp-win32-arm64': 0.35.3
|
||||
'@img/sharp-win32-ia32': 0.35.3
|
||||
'@img/sharp-win32-x64': 0.35.3
|
||||
'@types/node': 24.13.3
|
||||
|
||||
siginfo@2.0.0: {}
|
||||
|
||||
simple-concat@1.0.1:
|
||||
|
||||
@@ -1,80 +0,0 @@
|
||||
import { existsSync, readFileSync, writeFileSync } from "node:fs";
|
||||
import { resolve } from "node:path";
|
||||
|
||||
import { WP4_07_PERFORMANCE_BUDGETS } from "../tests/visual-performance/wp4-07-fixture.mjs";
|
||||
|
||||
const evidenceIndex = process.argv.indexOf("--evidence");
|
||||
const phaseIndex = process.argv.indexOf("--phase");
|
||||
const evidenceDirectory = resolve(evidenceIndex >= 0 ? process.argv[evidenceIndex + 1] : "");
|
||||
const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "green";
|
||||
if (evidenceIndex < 0 || !process.argv[evidenceIndex + 1] || !["green", "red"].includes(phase)) throw new Error("Usage: --evidence <directory> [--phase red|green]");
|
||||
|
||||
function read(browser, filename) {
|
||||
const path = resolve(evidenceDirectory, browser, filename);
|
||||
if (!existsSync(path)) throw new Error(`missing ${browser}/${filename}`);
|
||||
return JSON.parse(readFileSync(path, "utf8"));
|
||||
}
|
||||
|
||||
const browserResults = {};
|
||||
let greenInputsEligible = true;
|
||||
for (const browser of ["chrome", "edge"]) {
|
||||
const raw = read(browser, "performance-raw.json");
|
||||
const memory = read(browser, "memory.json");
|
||||
const dom = read(browser, "dom-count.json");
|
||||
const environment = read(browser, "environment.json");
|
||||
greenInputsEligible = greenInputsEligible && raw.eligible_for_green === true && raw.harness_mode === "real_archive";
|
||||
if (raw.interaction.length !== 5 || raw.autosave_serialization.length !== 5 || raw.export_1080x1920.length !== 5 || raw.editor_reopen.samples_ms.length !== 5) {
|
||||
throw new Error(`${browser} did not retain exactly five measured samples per budget`);
|
||||
}
|
||||
if (raw.interaction.some((run) => run.duration_ms < WP4_07_PERFORMANCE_BUDGETS.interaction_duration_ms)) {
|
||||
throw new Error(`${browser} shortened a ten-second interaction measurement`);
|
||||
}
|
||||
const checks = {
|
||||
autosave_serialization: raw.autosave_serialization.every((run) => run.p95_ms <= WP4_07_PERFORMANCE_BUDGETS.autosave_serialization_p95_ms_max),
|
||||
canvas_frame: raw.interaction.every((run) => run.frame_p95_ms <= WP4_07_PERFORMANCE_BUDGETS.canvas_frame_p95_ms_max),
|
||||
continuous_unresponsive: raw.interaction.every((run) => run.frame_max_ms < WP4_07_PERFORMANCE_BUDGETS.continuous_unresponsive_ms_max_exclusive),
|
||||
dom_bounded: dom.bounded_by_viewport_and_two_screens === true && dom.top_count < dom.catalog_count && dom.bottom_count < dom.catalog_count,
|
||||
editor_reopen: raw.editor_reopen.max_ms <= WP4_07_PERFORMANCE_BUDGETS.editor_reopen_ms_max,
|
||||
export_duration: raw.export_1080x1920.every((run) => run.duration_ms <= WP4_07_PERFORMANCE_BUDGETS.export_1080x1920_ms_max),
|
||||
export_failure_isolated: raw.export_failure.observed_error === "export_asset_unavailable"
|
||||
&& JSON.stringify(raw.export_failure.saves_before) === JSON.stringify(raw.export_failure.saves_after),
|
||||
export_memory: memory.export_peak_additional_bytes.every((value) => value <= WP4_07_PERFORMANCE_BUDGETS.export_peak_additional_bytes_max),
|
||||
long_task: raw.interaction.every((run) => run.long_task_max_ms <= WP4_07_PERFORMANCE_BUDGETS.long_task_ms_max),
|
||||
pointer_to_frame: raw.interaction.every((run) => run.pointer_to_frame_p95_ms <= WP4_07_PERFORMANCE_BUDGETS.pointer_to_frame_p95_ms_max),
|
||||
};
|
||||
browserResults[browser] = {
|
||||
checks,
|
||||
environment,
|
||||
fixture_sha256: raw.fixture_sha256,
|
||||
metrics: {
|
||||
autosave_serialization: raw.autosave_serialization,
|
||||
editor_reopen: raw.editor_reopen,
|
||||
export_1080x1920: raw.export_1080x1920,
|
||||
interaction: raw.interaction,
|
||||
},
|
||||
status: Object.values(checks).every(Boolean) ? "within_budget" : "budget_exceeded",
|
||||
};
|
||||
}
|
||||
const passed = Object.values(browserResults).every((result) => result.status === "within_budget");
|
||||
const report = {
|
||||
browsers: browserResults,
|
||||
eligible_for_green: phase === "green" && greenInputsEligible,
|
||||
normative_budgets: WP4_07_PERFORMANCE_BUDGETS,
|
||||
phase,
|
||||
status: passed ? "within_budget" : "budget_exceeded",
|
||||
};
|
||||
writeFileSync(resolve(evidenceDirectory, "performance.json"), `${JSON.stringify(report, null, 2)}\n`);
|
||||
writeFileSync(resolve(evidenceDirectory, "memory.json"), `${JSON.stringify({
|
||||
browsers: Object.fromEntries(["chrome", "edge"].map((browser) => [browser, read(browser, "memory.json")])),
|
||||
limit_bytes: WP4_07_PERFORMANCE_BUDGETS.export_peak_additional_bytes_max,
|
||||
}, null, 2)}\n`);
|
||||
writeFileSync(resolve(evidenceDirectory, "dom-count.json"), `${JSON.stringify({
|
||||
browsers: Object.fromEntries(["chrome", "edge"].map((browser) => [browser, read(browser, "dom-count.json")])),
|
||||
required_catalog_count: 1_407,
|
||||
}, null, 2)}\n`);
|
||||
writeFileSync(resolve(evidenceDirectory, "environment.json"), `${JSON.stringify({
|
||||
browsers: Object.fromEntries(["chrome", "edge"].map((browser) => [browser, read(browser, "environment.json")])),
|
||||
fixture_hashes_match: browserResults.chrome.fixture_sha256 === browserResults.edge.fixture_sha256,
|
||||
}, null, 2)}\n`);
|
||||
console.log(JSON.stringify({ browser_statuses: Object.fromEntries(Object.entries(browserResults).map(([name, result]) => [name, result.status])), phase, status: report.status }, null, 2));
|
||||
if (phase === "green" && (!greenInputsEligible || !passed)) process.exit(1);
|
||||
@@ -1,106 +0,0 @@
|
||||
import { chromium } from "@playwright/test";
|
||||
import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
|
||||
import { dirname, resolve } from "node:path";
|
||||
|
||||
import { WP4_07_VISUAL_THRESHOLDS } from "../tests/visual-performance/wp4-07-fixture.mjs";
|
||||
|
||||
const evidenceIndex = process.argv.indexOf("--evidence");
|
||||
const phaseIndex = process.argv.indexOf("--phase");
|
||||
const evidenceDirectory = resolve(evidenceIndex >= 0 ? process.argv[evidenceIndex + 1] : "");
|
||||
const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "green";
|
||||
if (evidenceIndex < 0 || !process.argv[evidenceIndex + 1] || !["green", "red"].includes(phase)) throw new Error("Usage: --evidence <directory> [--phase red|green]");
|
||||
|
||||
const scenarios = ["editor.png", "canvas.png", "export-dialog.png"];
|
||||
for (const scenario of scenarios) {
|
||||
for (const browser of ["chrome", "edge"]) {
|
||||
const path = resolve(evidenceDirectory, browser, scenario);
|
||||
if (!existsSync(path)) throw new Error(`missing screenshot: ${browser}/${scenario}`);
|
||||
}
|
||||
}
|
||||
|
||||
const browser = await chromium.launch({ channel: "msedge", headless: true });
|
||||
const page = await browser.newPage();
|
||||
const results = [];
|
||||
try {
|
||||
for (const scenario of scenarios) {
|
||||
const chrome = readFileSync(resolve(evidenceDirectory, "chrome", scenario)).toString("base64");
|
||||
const edge = readFileSync(resolve(evidenceDirectory, "edge", scenario)).toString("base64");
|
||||
const comparison = await page.evaluate(async ({ chromeBase64, edgeBase64, threshold }) => {
|
||||
const decode = async (base64) => {
|
||||
const binary = atob(base64);
|
||||
const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
|
||||
return createImageBitmap(new Blob([bytes], { type: "image/png" }));
|
||||
};
|
||||
const [chromeImage, edgeImage] = await Promise.all([decode(chromeBase64), decode(edgeBase64)]);
|
||||
if (chromeImage.width !== edgeImage.width || chromeImage.height !== edgeImage.height) {
|
||||
return { dimensions_match: false, chrome: { height: chromeImage.height, width: chromeImage.width }, edge: { height: edgeImage.height, width: edgeImage.width } };
|
||||
}
|
||||
const surface = new OffscreenCanvas(chromeImage.width, chromeImage.height);
|
||||
const context = surface.getContext("2d", { willReadFrequently: true });
|
||||
context.drawImage(chromeImage, 0, 0);
|
||||
const chromePixels = context.getImageData(0, 0, chromeImage.width, chromeImage.height).data;
|
||||
context.clearRect(0, 0, chromeImage.width, chromeImage.height);
|
||||
context.drawImage(edgeImage, 0, 0);
|
||||
const edgePixels = context.getImageData(0, 0, edgeImage.width, edgeImage.height).data;
|
||||
let significant = 0;
|
||||
let maximumChannelDelta = 0;
|
||||
for (let index = 0; index < chromePixels.length; index += 4) {
|
||||
const deltas = [0, 1, 2, 3].map((channel) => Math.abs(chromePixels[index + channel] - edgePixels[index + channel]));
|
||||
maximumChannelDelta = Math.max(maximumChannelDelta, ...deltas);
|
||||
if (deltas.some((delta) => delta > threshold)) significant += 1;
|
||||
}
|
||||
const total = chromeImage.width * chromeImage.height;
|
||||
chromeImage.close();
|
||||
edgeImage.close();
|
||||
return {
|
||||
dimensions_match: true,
|
||||
height: surface.height,
|
||||
maximum_channel_delta: maximumChannelDelta,
|
||||
significant_pixel_count: significant,
|
||||
significant_pixel_ratio: significant / total,
|
||||
significant_pixel_threshold: threshold,
|
||||
total_pixels: total,
|
||||
width: surface.width,
|
||||
};
|
||||
}, { chromeBase64: chrome, edgeBase64: edge, threshold: WP4_07_VISUAL_THRESHOLDS.channel_delta_significant });
|
||||
results.push({ scenario, ...comparison });
|
||||
}
|
||||
} finally {
|
||||
await browser.close();
|
||||
}
|
||||
|
||||
const chromeLayout = JSON.parse(readFileSync(resolve(evidenceDirectory, "chrome", "layout-boxes.json"), "utf8"));
|
||||
const edgeLayout = JSON.parse(readFileSync(resolve(evidenceDirectory, "edge", "layout-boxes.json"), "utf8"));
|
||||
const greenInputsEligible = [chromeLayout, edgeLayout].every((input) => input.eligible_for_green === true && input.harness_mode === "real_archive");
|
||||
const layoutComparisons = Object.keys(chromeLayout.layout_boxes).map((name) => {
|
||||
const chromeBox = chromeLayout.layout_boxes[name];
|
||||
const edgeBox = edgeLayout.layout_boxes[name];
|
||||
const deltas = Object.fromEntries(["height", "width", "x", "y"].map((field) => [field, Math.abs(chromeBox[field] - edgeBox[field])]));
|
||||
return { deltas, maximum_delta_px: Math.max(...Object.values(deltas)), name };
|
||||
});
|
||||
const visualPassed = results.every((item) => item.dimensions_match && item.significant_pixel_ratio <= WP4_07_VISUAL_THRESHOLDS.significant_pixel_ratio_max);
|
||||
const layoutPassed = layoutComparisons.every((item) => item.maximum_delta_px <= WP4_07_VISUAL_THRESHOLDS.boundary_delta_px_max);
|
||||
const overall = {
|
||||
eligible_for_green: phase === "green" && greenInputsEligible,
|
||||
phase,
|
||||
scenarios: results,
|
||||
status: visualPassed && layoutPassed ? "within_threshold" : "threshold_exceeded_manual_review_required",
|
||||
thresholds: WP4_07_VISUAL_THRESHOLDS,
|
||||
};
|
||||
const layout = {
|
||||
comparisons: layoutComparisons,
|
||||
eligible_for_green: phase === "green" && greenInputsEligible,
|
||||
status: layoutPassed ? "within_threshold" : "threshold_exceeded_manual_review_required",
|
||||
threshold_px: WP4_07_VISUAL_THRESHOLDS.boundary_delta_px_max,
|
||||
};
|
||||
mkdirSync(dirname(resolve(evidenceDirectory, "pixel-diff.json")), { recursive: true });
|
||||
writeFileSync(resolve(evidenceDirectory, "pixel-diff.json"), `${JSON.stringify(overall, null, 2)}\n`);
|
||||
writeFileSync(resolve(evidenceDirectory, "layout-boxes.json"), `${JSON.stringify(layout, null, 2)}\n`);
|
||||
writeFileSync(resolve(evidenceDirectory, "manual-review.json"), `${JSON.stringify({
|
||||
eligible_for_green: false,
|
||||
known_alternatives: ["COLOR002", "COLOR008", "COLOR016", "DYN012"],
|
||||
required_note: "DYN012 uses FONT081 Lexend Deca as the declared substitute.",
|
||||
status: phase === "green" ? "pending_project_owner_review" : "pending_wp5_final_renderer_and_project_owner_review",
|
||||
}, null, 2)}\n`);
|
||||
console.log(JSON.stringify({ layout_status: layout.status, phase, visual_status: overall.status }, null, 2));
|
||||
if (phase === "green" && (!greenInputsEligible || !visualPassed || !layoutPassed)) process.exit(1);
|
||||
@@ -1,16 +1,14 @@
|
||||
import { createHash } from "node:crypto";
|
||||
import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
|
||||
import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
|
||||
import { homedir } from "node:os";
|
||||
import { dirname, join, resolve } from "node:path";
|
||||
import { join, resolve } from "node:path";
|
||||
|
||||
import { compileAssetArchive, compileStaticStickerCatalog } from "../packages/asset-compiler/dist/index.js";
|
||||
import { createP0aColorCardRenderPlans } from "../packages/asset-renderer/dist/index.js";
|
||||
import {
|
||||
P0A_COLOR_CARD_IDS,
|
||||
P0A_COMPLEX_RELEASE_VERSION,
|
||||
P0A_DYNAMIC_STICKER_IDS,
|
||||
P0A_REQUIRED_FONT_PANEL_IDS,
|
||||
P0A_STATIC_STICKER_RELEASE_VERSION,
|
||||
P0A_TEXT_TEMPLATE_IDS,
|
||||
createP0aPublicManifest,
|
||||
} from "../packages/template-registry/dist/index.js";
|
||||
@@ -18,45 +16,25 @@ import {
|
||||
const runDirectory = resolve(process.env.DADA_WP5_03_RUN_DIRECTORY ?? "artifacts/tdd/wp5-03-local");
|
||||
const whiteDirectory = resolve(process.env.DADA_WP5_03_WHITE_EVIDENCE_DIR ?? join(runDirectory, "cases", "TDD-WP5-WHITE-001-p0a-allowlist"));
|
||||
const colorDirectory = resolve(process.env.DADA_WP5_03_COLOR_EVIDENCE_DIR ?? join(runDirectory, "cases", "TDD-WP5-COL-001-four-layouts"));
|
||||
const replicationRoot = resolve(process.env.DADA_REPLICATION_ASSET_ROOT ?? join(homedir(), "Desktop", "sticker_web_replication_assets"));
|
||||
const handoffManifest = resolve(process.env.DADA_COMPLEX_ASSET_MANIFEST ?? join(replicationRoot, "sticker_web_handoff", "sticker_web_catalog_manifest.json"));
|
||||
const stickerRoot = resolve(process.env.DADA_STATIC_STICKER_ROOT ?? join(replicationRoot, "sticker_normal"));
|
||||
const handoffManifest = resolve(process.env.DADA_COMPLEX_ASSET_MANIFEST ?? join(homedir(), "Desktop", "sticker_web_handoff", "sticker_web_catalog_manifest.json"));
|
||||
const stickerRoot = resolve(process.env.DADA_STATIC_STICKER_ROOT ?? join(homedir(), "Desktop", "贴纸素材"));
|
||||
if (!existsSync(handoffManifest)) throw new Error("normalized complex asset handoff is unavailable");
|
||||
if (!existsSync(stickerRoot)) throw new Error("static sticker source is unavailable");
|
||||
|
||||
const complexDirectory = resolve(runDirectory, "inputs", "complex");
|
||||
const staticDirectory = resolve(runDirectory, "inputs", "static");
|
||||
const normalizedHandoffDirectory = resolve(runDirectory, "inputs", "normalized-handoff");
|
||||
mkdirSync(whiteDirectory, { recursive: true });
|
||||
mkdirSync(colorDirectory, { recursive: true });
|
||||
|
||||
const sourceHandoff = JSON.parse(readFileSync(handoffManifest, "utf8"));
|
||||
const normalizedHandoff = {
|
||||
...sourceHandoff,
|
||||
web_handoff: "STICKER_WEB_REPLICATION_HANDOFF.md",
|
||||
validation: "sticker_archive_validation_20260722.json",
|
||||
collections: sourceHandoff.collections
|
||||
.filter((collection) => collection.id !== "normal_stickers")
|
||||
.map((collection) => ({
|
||||
...collection,
|
||||
root: resolve(dirname(handoffManifest), collection.root),
|
||||
})),
|
||||
};
|
||||
const normalizedHandoffPath = resolve(normalizedHandoffDirectory, "sticker_web_catalog_manifest.normalized.json");
|
||||
mkdirSync(normalizedHandoffDirectory, { recursive: true });
|
||||
copyFileSync(resolve(dirname(handoffManifest), sourceHandoff.web_handoff), resolve(normalizedHandoffDirectory, normalizedHandoff.web_handoff));
|
||||
copyFileSync(resolve(dirname(handoffManifest), sourceHandoff.validation), resolve(normalizedHandoffDirectory, normalizedHandoff.validation));
|
||||
writeFileSync(normalizedHandoffPath, `${JSON.stringify(normalizedHandoff, null, 2)}\n`);
|
||||
|
||||
const complex = compileAssetArchive({
|
||||
manifestPath: normalizedHandoffPath,
|
||||
manifestPath: handoffManifest,
|
||||
outputDirectory: complexDirectory,
|
||||
releaseVersion: P0A_COMPLEX_RELEASE_VERSION,
|
||||
releaseVersion: "p0a-complex-v1",
|
||||
});
|
||||
const staticResult = compileStaticStickerCatalog({
|
||||
expectedCount: 1_407,
|
||||
outputDirectory: staticDirectory,
|
||||
releaseVersion: P0A_STATIC_STICKER_RELEASE_VERSION,
|
||||
releaseVersion: "p0a-static-v1",
|
||||
sourceRoot: stickerRoot,
|
||||
});
|
||||
const publicManifest = createP0aPublicManifest({
|
||||
|
||||
@@ -27,14 +27,12 @@ export const frozenPackages = {
|
||||
"apps/api/package.json": {
|
||||
dependencies: {
|
||||
"@dada/asset-release-manifest": "workspace:*",
|
||||
"@dada/static-sticker-catalog": "workspace:*",
|
||||
"@fastify/multipart": "10.1.0",
|
||||
"@fastify/swagger": "9.8.1",
|
||||
"@sinclair/typebox": "0.34.52",
|
||||
"better-sqlite3": "13.0.1",
|
||||
"drizzle-orm": "0.45.2",
|
||||
fastify: "5.10.0",
|
||||
sharp: "0.35.3",
|
||||
},
|
||||
devDependencies: {
|
||||
typescript: "7.0.2",
|
||||
|
||||
@@ -13,7 +13,9 @@ function runPnpm(args) {
|
||||
}
|
||||
|
||||
export function buildApiContracts() {
|
||||
runPnpm(["--filter", "@dada/api...", "build"]);
|
||||
runPnpm(["--filter", "@dada/asset-release-manifest", "build"]);
|
||||
runPnpm(["--filter", "@dada/shared-contracts", "build"]);
|
||||
runPnpm(["--filter", "@dada/api", "build"]);
|
||||
}
|
||||
|
||||
export async function createOpenApiDocument() {
|
||||
|
||||
@@ -98,11 +98,7 @@ function copyRuntimeDependencies(sourceRoot, destinationRoot, rootNames) {
|
||||
try {
|
||||
entry = requireFrom.resolve(name);
|
||||
} catch (error) {
|
||||
try {
|
||||
entry = requireFrom.resolve(`${name}/package`);
|
||||
} catch {
|
||||
throw new Error(`Runtime dependency ${name} is unavailable from ${sourceRoot}.`, { cause: error });
|
||||
}
|
||||
throw new Error(`Runtime dependency ${name} is unavailable from ${sourceRoot}.`, { cause: error });
|
||||
}
|
||||
const root = packageRootFromEntry(entry, name);
|
||||
const manifest = json(join(root, "package.json"));
|
||||
@@ -121,14 +117,6 @@ function copyRuntimeDependencies(sourceRoot, destinationRoot, rootNames) {
|
||||
for (const dependency of Object.keys(manifest.dependencies ?? {})) {
|
||||
copyResolved(dependency, nestedRequire, join(destination, "node_modules"), nestedAncestors);
|
||||
}
|
||||
for (const dependency of Object.keys(manifest.optionalDependencies ?? {})) {
|
||||
try {
|
||||
copyResolved(dependency, nestedRequire, join(destination, "node_modules"), nestedAncestors);
|
||||
} catch (error) {
|
||||
if (error?.cause?.code !== "MODULE_NOT_FOUND") throw error;
|
||||
debug(`skip unavailable optional dependency ${dependency}`);
|
||||
}
|
||||
}
|
||||
}
|
||||
const rootRequire = createRequire(join(sourceRoot, "package.json"));
|
||||
for (const name of rootNames) copyResolved(name, rootRequire, join(destinationRoot, "node_modules"), new Set());
|
||||
@@ -318,7 +306,7 @@ export async function buildAndValidatePortablePackage({ evidenceDirectory, outpu
|
||||
|
||||
const serverRoot = join(packageDirectory, "server");
|
||||
debug("copy API application");
|
||||
const apiDependencies = copyApplication(join(repositoryRoot, "apps", "api"), join(serverRoot, "api"), ["@fastify/multipart", "@fastify/swagger", "@sinclair/typebox", "better-sqlite3", "fastify", "sharp"]);
|
||||
const apiDependencies = copyApplication(join(repositoryRoot, "apps", "api"), join(serverRoot, "api"), ["@fastify/multipart", "@fastify/swagger", "@sinclair/typebox", "better-sqlite3", "fastify"]);
|
||||
debug("copy Worker application");
|
||||
const workerDependencies = copyApplication(join(repositoryRoot, "apps", "worker"), join(serverRoot, "worker"), ["better-sqlite3"]);
|
||||
const sharedDestination = join(serverRoot, "api", "node_modules", "@dada", "shared-contracts");
|
||||
|
||||
@@ -1,125 +0,0 @@
|
||||
import { createHash } from "node:crypto";
|
||||
import { spawnSync } from "node:child_process";
|
||||
import { existsSync, readFileSync } from "node:fs";
|
||||
|
||||
import {
|
||||
WP4_07_REAL_RESOURCE_VERSIONS,
|
||||
WP4_07_RED_RESOURCE_VERSION,
|
||||
WP4_07_SOURCE_HASHES,
|
||||
assertWp407Fixture,
|
||||
} from "../../tests/visual-performance/wp4-07-fixture.mjs";
|
||||
|
||||
export const WP4_07_REQUIRED_WP5_TASKS = Object.freeze(
|
||||
Array.from({ length: 7 }, (_, index) => `TASK-WP5-0${index + 1}`),
|
||||
);
|
||||
export const WP4_07_REQUIRED_WP5_BRANCHES = Object.freeze(
|
||||
Array.from({ length: 5 }, (_, index) => `codex/wp5-0${index + 3}`),
|
||||
);
|
||||
|
||||
export function validateWp407FrozenInputs() {
|
||||
const mismatches = [];
|
||||
for (const [path, expected] of Object.entries(WP4_07_SOURCE_HASHES)) {
|
||||
if (!existsSync(path)) {
|
||||
mismatches.push({ actual: null, expected, path });
|
||||
continue;
|
||||
}
|
||||
const actual = createHash("sha256").update(readFileSync(path)).digest("hex").toUpperCase();
|
||||
if (actual !== expected) mismatches.push({ actual, expected, path });
|
||||
}
|
||||
if (mismatches.length > 0) {
|
||||
const error = new Error("WP4_07_FROZEN_SOURCE_CHANGED");
|
||||
error.details = mismatches;
|
||||
throw error;
|
||||
}
|
||||
return assertWp407Fixture();
|
||||
}
|
||||
|
||||
function subjectMatchesTask(subject, taskId) {
|
||||
const shortId = taskId.replace("TASK-", "");
|
||||
return subject.includes(taskId) || subject.includes(shortId);
|
||||
}
|
||||
|
||||
export function inspectWp5TaskLineage(heads, histories) {
|
||||
const candidate_branch = [...WP4_07_REQUIRED_WP5_TASKS]
|
||||
.reverse()
|
||||
.map((taskId) => taskId.replace("TASK-WP5-", "codex/wp5-"))
|
||||
.find((branch) => /^[0-9a-f]{40}$/.test(heads[branch] ?? "")) ?? null;
|
||||
const allCommits = Object.values(histories).flat();
|
||||
const task_shas = Object.fromEntries(WP4_07_REQUIRED_WP5_TASKS.flatMap((taskId) => {
|
||||
const commit = allCommits.find((entry) => subjectMatchesTask(entry.subject, taskId));
|
||||
return commit && /^[0-9a-f]{40}$/.test(commit.sha) ? [[taskId, commit.sha]] : [];
|
||||
}));
|
||||
const missing_tasks = WP4_07_REQUIRED_WP5_TASKS.filter((taskId) => {
|
||||
const taskNumber = Number(taskId.slice(-2));
|
||||
if (taskNumber <= 2) return !task_shas[taskId];
|
||||
const branch = taskId.replace("TASK-WP5-", "codex/wp5-");
|
||||
return !/^[0-9a-f]{40}$/.test(heads[branch] ?? "")
|
||||
|| !(histories[branch] ?? []).some((entry) => subjectMatchesTask(entry.subject, taskId));
|
||||
});
|
||||
const terminal_branch_shas = Object.fromEntries(WP4_07_REQUIRED_WP5_BRANCHES.flatMap((branch) => (
|
||||
/^[0-9a-f]{40}$/.test(heads[branch] ?? "") ? [[branch, heads[branch]]] : []
|
||||
)));
|
||||
return {
|
||||
candidate_baseline_branch: candidate_branch,
|
||||
candidate_baseline_sha: candidate_branch ? heads[candidate_branch] : null,
|
||||
complete: missing_tasks.length === 0 && Object.keys(terminal_branch_shas).length === WP4_07_REQUIRED_WP5_BRANCHES.length,
|
||||
missing_tasks,
|
||||
required_final_branches: WP4_07_REQUIRED_WP5_BRANCHES,
|
||||
required_tasks: WP4_07_REQUIRED_WP5_TASKS,
|
||||
task_shas,
|
||||
terminal_branch_shas,
|
||||
};
|
||||
}
|
||||
|
||||
export function readWp5RemoteGate() {
|
||||
const result = spawnSync("git", ["ls-remote", "--heads", "origin", "codex/wp5-*"], { encoding: "utf8", timeout: 30_000 });
|
||||
if ((result.status ?? 1) !== 0) {
|
||||
const error = new Error("WP4_07_GITEA_GATE_UNREADABLE");
|
||||
error.details = { exit_code: result.status ?? 1 };
|
||||
throw error;
|
||||
}
|
||||
const heads = Object.fromEntries(result.stdout.trim().split(/\r?\n/).filter(Boolean).map((line) => {
|
||||
const [sha, reference] = line.split(/\s+/);
|
||||
return [reference.replace("refs/heads/", ""), sha];
|
||||
}));
|
||||
const histories = {};
|
||||
for (const branch of WP4_07_REQUIRED_WP5_BRANCHES.filter((name) => /^[0-9a-f]{40}$/.test(heads[name] ?? ""))) {
|
||||
const fetch = spawnSync("git", ["fetch", "--quiet", "--no-tags", "origin", `refs/heads/${branch}`], { encoding: "utf8", timeout: 60_000 });
|
||||
if ((fetch.status ?? 1) !== 0) {
|
||||
const error = new Error("WP4_07_GITEA_BASELINE_FETCH_FAILED");
|
||||
error.details = { branch, exit_code: fetch.status ?? 1 };
|
||||
throw error;
|
||||
}
|
||||
const log = spawnSync("git", ["log", "--format=%H%x09%s", heads[branch]], { encoding: "utf8", timeout: 30_000 });
|
||||
if ((log.status ?? 1) !== 0) {
|
||||
const error = new Error("WP4_07_GITEA_BASELINE_HISTORY_UNREADABLE");
|
||||
error.details = { branch, exit_code: log.status ?? 1 };
|
||||
throw error;
|
||||
}
|
||||
histories[branch] = log.stdout.trim().split(/\r?\n/).filter(Boolean).map((line) => {
|
||||
const separator = line.indexOf("\t");
|
||||
return { sha: line.slice(0, separator), subject: line.slice(separator + 1) };
|
||||
});
|
||||
}
|
||||
return {
|
||||
heads,
|
||||
...inspectWp5TaskLineage(heads, histories),
|
||||
};
|
||||
}
|
||||
|
||||
export function validateWp5FinalManifest(path) {
|
||||
if (!path || !existsSync(path)) throw new Error("WP4_07_FINAL_ASSET_MANIFEST_REQUIRED");
|
||||
const raw = readFileSync(path, "utf8");
|
||||
if (raw.includes(WP4_07_RED_RESOURCE_VERSION) || raw.includes("fixture-v1")) throw new Error("WP4_07_PLACEHOLDER_ASSET_REJECTED");
|
||||
const manifest = JSON.parse(raw);
|
||||
const expectedCounts = { color_cards: 4, dynamic_stickers: 10, font_panel_items: 11, static_parts: 25, static_stickers: 1_407, text_templates: 32 };
|
||||
for (const [key, expected] of Object.entries(expectedCounts)) {
|
||||
if (manifest.counts?.[key] !== expected) throw new Error(`WP4_07_FINAL_MANIFEST_COUNT_MISMATCH:${key}`);
|
||||
}
|
||||
if (!manifest.release_version || String(manifest.release_version).includes("fixture")) throw new Error("WP4_07_FINAL_RELEASE_VERSION_REQUIRED");
|
||||
if (manifest.source_versions?.complex !== WP4_07_REAL_RESOURCE_VERSIONS.complex
|
||||
|| manifest.source_versions?.static_stickers !== WP4_07_REAL_RESOURCE_VERSIONS.static) {
|
||||
throw new Error("WP4_07_FINAL_MANIFEST_VERSION_MISMATCH");
|
||||
}
|
||||
return { release_version: manifest.release_version, sha256: createHash("sha256").update(raw).digest("hex").toUpperCase() };
|
||||
}
|
||||
@@ -1,60 +0,0 @@
|
||||
import { createHash } from "node:crypto";
|
||||
import { existsSync, readFileSync, writeFileSync } from "node:fs";
|
||||
import { resolve } from "node:path";
|
||||
|
||||
const evidenceIndex = process.argv.indexOf("--evidence");
|
||||
if (evidenceIndex < 0 || !process.argv[evidenceIndex + 1]) throw new Error("Usage: --evidence <TDD-WP4-VIS-001-browser-diff directory>");
|
||||
const evidenceDirectory = resolve(process.argv[evidenceIndex + 1]);
|
||||
const pixelDiff = JSON.parse(readFileSync(resolve(evidenceDirectory, "pixel-diff.json"), "utf8"));
|
||||
const layout = JSON.parse(readFileSync(resolve(evidenceDirectory, "layout-boxes.json"), "utf8"));
|
||||
if (pixelDiff.eligible_for_green !== true || pixelDiff.status !== "within_threshold") throw new Error("WP4_07_VISUAL_AUTOMATION_NOT_GREEN");
|
||||
if (layout.eligible_for_green !== true || layout.status !== "within_threshold") throw new Error("WP4_07_LAYOUT_AUTOMATION_NOT_GREEN");
|
||||
|
||||
const screenshots = [];
|
||||
for (const browser of ["chrome", "edge"]) {
|
||||
for (const scenario of ["editor.png", "canvas.png", "export-dialog.png"]) {
|
||||
const path = resolve(evidenceDirectory, browser, scenario);
|
||||
if (!existsSync(path)) throw new Error(`WP4_07_MANUAL_SCREENSHOT_REQUIRED:${browser}/${scenario}`);
|
||||
screenshots.push({
|
||||
browser,
|
||||
scenario,
|
||||
sha256: createHash("sha256").update(readFileSync(path)).digest("hex").toUpperCase(),
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
const review = {
|
||||
eligible_for_green: true,
|
||||
known_alternatives: {
|
||||
COLOR002: "reviewed_real_renderer",
|
||||
COLOR008: "reviewed_real_renderer",
|
||||
COLOR016: "reviewed_real_renderer",
|
||||
DYN012: "reviewed_with_declared_FONT081_Lexend_Deca_substitution",
|
||||
},
|
||||
observations: [
|
||||
"The complete 9:16 canvas is visible inside its frame in both browsers without clipping or blank overflow.",
|
||||
"Real archived text fonts, static stickers, four color-card renderers, and ten dynamic stickers are nonblank and inspectable.",
|
||||
"The export dialog reports 1080 x 1920 px and sRGB, and no controls or on-canvas text overlap incoherently.",
|
||||
],
|
||||
reviewed_at: new Date().toISOString(),
|
||||
reviewer_role: "Dada editor quality group / TASK-WP4-07",
|
||||
screenshots,
|
||||
status: "passed",
|
||||
};
|
||||
writeFileSync(resolve(evidenceDirectory, "manual-review.json"), `${JSON.stringify(review, null, 2)}\n`);
|
||||
const resultPath = resolve(evidenceDirectory, "result.json");
|
||||
if (!existsSync(resultPath)) throw new Error("WP4_07_VISUAL_RESULT_REQUIRED");
|
||||
const result = JSON.parse(readFileSync(resultPath, "utf8"));
|
||||
const missingEvidence = result.evidence_refs.filter((path) => !existsSync(resolve(evidenceDirectory, path)));
|
||||
if (missingEvidence.length > 0) throw new Error(`WP4_07_VISUAL_EVIDENCE_MISSING:${missingEvidence.join(",")}`);
|
||||
result.missing_evidence = [];
|
||||
result.status = "passed";
|
||||
writeFileSync(resultPath, `${JSON.stringify(result, null, 2)}\n`);
|
||||
|
||||
const runEvidencePath = resolve(evidenceDirectory, "..", "..", "evidence.json");
|
||||
if (!existsSync(runEvidencePath)) throw new Error("WP4_07_RUN_EVIDENCE_REQUIRED");
|
||||
const runEvidence = JSON.parse(readFileSync(runEvidencePath, "utf8"));
|
||||
runEvidence.cases = [{ missing_evidence: [], status: "passed", test_id: result.test_id }];
|
||||
runEvidence.status = "passed";
|
||||
writeFileSync(runEvidencePath, `${JSON.stringify(runEvidence, null, 2)}\n`);
|
||||
console.log(JSON.stringify({ reviewed_screenshots: screenshots.length, run_id: result.run_id, status: review.status }, null, 2));
|
||||
@@ -1,169 +0,0 @@
|
||||
import { createHash } from "node:crypto";
|
||||
import { spawnSync } from "node:child_process";
|
||||
import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
|
||||
import { resolve } from "node:path";
|
||||
|
||||
import { readWp5RemoteGate, validateWp407FrozenInputs, validateWp5FinalManifest } from "./lib/wp4-07-gate.mjs";
|
||||
|
||||
function findFiles(directory, name) {
|
||||
if (!existsSync(directory)) return [];
|
||||
return readdirSync(directory, { withFileTypes: true }).flatMap((entry) => {
|
||||
const path = resolve(directory, entry.name);
|
||||
return entry.isDirectory() ? findFiles(path, name) : entry.name === name ? [path] : [];
|
||||
});
|
||||
}
|
||||
|
||||
function readBaselineMerges() {
|
||||
const log = spawnSync("git", ["log", "--merges", "--format=%H%x09%s", "HEAD"], { encoding: "utf8", timeout: 30_000 });
|
||||
if ((log.status ?? 1) !== 0) throw new Error("WP4_07_BASELINE_MERGES_UNREADABLE");
|
||||
return log.stdout.trim().split(/\r?\n/).filter(Boolean).map((line) => {
|
||||
const [sha, ...subject] = line.split("\t");
|
||||
return { sha, subject: subject.join("\t") };
|
||||
}).filter((entry) => entry.subject.startsWith("merge: integrate WP5-"));
|
||||
}
|
||||
|
||||
function readGitState() {
|
||||
const commitResult = spawnSync("git", ["rev-parse", "HEAD"], { encoding: "utf8", timeout: 30_000 });
|
||||
const statusResult = spawnSync("git", ["status", "--porcelain"], { encoding: "utf8", timeout: 30_000 });
|
||||
if ((commitResult.status ?? 1) !== 0 || (statusResult.status ?? 1) !== 0) throw new Error("WP4_07_GIT_STATE_UNREADABLE");
|
||||
return {
|
||||
commit: commitResult.stdout.trim(),
|
||||
worktree_under_test: statusResult.stdout.trim() ? "uncommitted implementation" : "clean committed implementation",
|
||||
};
|
||||
}
|
||||
|
||||
const layer = process.argv[2];
|
||||
if (!['visual', 'performance'].includes(layer)) {
|
||||
console.error("Usage: node scripts/run-wp4-07-layer.mjs <visual|performance>");
|
||||
process.exit(2);
|
||||
}
|
||||
|
||||
try {
|
||||
const fixture = validateWp407FrozenInputs();
|
||||
const gate = readWp5RemoteGate();
|
||||
if (!gate.complete) {
|
||||
console.error(JSON.stringify({
|
||||
code: "WP4_07_WP5_GATE_INCOMPLETE",
|
||||
fixture_sha256: fixture.fixture_sha256,
|
||||
layer,
|
||||
candidate_baseline_branch: gate.candidate_baseline_branch,
|
||||
candidate_baseline_sha: gate.candidate_baseline_sha,
|
||||
missing_remote_tasks: gate.missing_tasks,
|
||||
observed_remote_heads: gate.heads,
|
||||
observed_task_shas: gate.task_shas,
|
||||
required_final_branches: gate.required_final_branches,
|
||||
status: "red",
|
||||
}, null, 2));
|
||||
process.exit(1);
|
||||
}
|
||||
const runId = process.env.DADA_TDD_RUN_ID ?? `wp4-07-${layer}-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
|
||||
const runDirectory = resolve("artifacts", "tdd", runId);
|
||||
const casesDirectory = resolve(runDirectory, "cases");
|
||||
const releaseDirectory = resolve(runDirectory, "real-release");
|
||||
mkdirSync(casesDirectory, { recursive: true });
|
||||
let environment = {
|
||||
...process.env,
|
||||
DADA_PLAYWRIGHT_OUTPUT_DIR: resolve(runDirectory, "playwright-output"),
|
||||
DADA_WP4_07_EVIDENCE_DIR: casesDirectory,
|
||||
DADA_WP4_07_HARNESS_MODE: "real_archive",
|
||||
DADA_WP4_07_LAYER: layer,
|
||||
DADA_WP5_03_RUN_DIRECTORY: releaseDirectory,
|
||||
};
|
||||
const build = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", "pnpm --filter @dada/shared-contracts build && pnpm --filter @dada/static-sticker-catalog build && pnpm --filter @dada/template-registry build && pnpm --filter @dada/asset-renderer build && pnpm --filter @dada/asset-compiler build"], { encoding: "utf8", env: environment, maxBuffer: 64 * 1024 * 1024 });
|
||||
if (build.stdout) process.stdout.write(build.stdout);
|
||||
if (build.stderr) process.stderr.write(build.stderr);
|
||||
if ((build.status ?? 1) !== 0) process.exit(build.status ?? 1);
|
||||
let manifestPath = process.env.DADA_WP4_07_FINAL_ASSET_MANIFEST;
|
||||
if (!manifestPath) {
|
||||
const compile = spawnSync(process.execPath, ["scripts/compile-wp5-03-assets.mjs"], { encoding: "utf8", env: environment, maxBuffer: 64 * 1024 * 1024 });
|
||||
if (compile.stdout) process.stdout.write(compile.stdout);
|
||||
if (compile.stderr) process.stderr.write(compile.stderr);
|
||||
if ((compile.status ?? 1) !== 0) process.exit(compile.status ?? 1);
|
||||
manifestPath = resolve(releaseDirectory, "cases", "TDD-WP5-WHITE-001-p0a-allowlist", "manifest.json");
|
||||
}
|
||||
const manifest = validateWp5FinalManifest(manifestPath);
|
||||
environment = { ...environment, DADA_WP4_07_FINAL_ASSET_MANIFEST: resolve(manifestPath) };
|
||||
const playwright = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", "pnpm exec playwright test --config playwright.wp4-07.config.ts"], { encoding: "utf8", env: environment, maxBuffer: 64 * 1024 * 1024 });
|
||||
if (playwright.stdout) process.stdout.write(playwright.stdout);
|
||||
if (playwright.stderr) process.stderr.write(playwright.stderr);
|
||||
if ((playwright.status ?? 1) !== 0) process.exit(playwright.status ?? 1);
|
||||
const caseDirectory = resolve(casesDirectory, layer === "visual" ? "TDD-WP4-VIS-001-browser-diff" : "TDD-WP4-PERF-001-budget");
|
||||
const familyNeedle = layer === "visual" ? "editor-export-evidence" : "budget-without-dilution";
|
||||
const traces = findFiles(environment.DADA_PLAYWRIGHT_OUTPUT_DIR, "trace.zip");
|
||||
for (const browser of ["chrome", "edge"]) {
|
||||
const evidenceTrace = resolve(caseDirectory, browser, "trace.zip");
|
||||
if (existsSync(evidenceTrace)) continue;
|
||||
const trace = traces.find((path) => path.toLowerCase().includes(familyNeedle) && path.toLowerCase().includes(browser));
|
||||
if (!trace) throw new Error(`WP4_07_${layer.toUpperCase()}_${browser.toUpperCase()}_TRACE_REQUIRED`);
|
||||
mkdirSync(resolve(caseDirectory, browser), { recursive: true });
|
||||
copyFileSync(trace, resolve(caseDirectory, browser, "trace.zip"));
|
||||
}
|
||||
const aggregator = spawnSync(process.execPath, [layer === "visual" ? "scripts/compare-wp4-07-screenshots.mjs" : "scripts/aggregate-wp4-07-performance.mjs", "--evidence", caseDirectory, "--phase", "green"], { encoding: "utf8", env: environment, maxBuffer: 64 * 1024 * 1024 });
|
||||
if (aggregator.stdout) process.stdout.write(aggregator.stdout);
|
||||
if (aggregator.stderr) process.stderr.write(aggregator.stderr);
|
||||
if ((aggregator.status ?? 1) !== 0) process.exit(aggregator.status ?? 1);
|
||||
writeFileSync(resolve(caseDirectory, "release-inputs.json"), `${JSON.stringify({
|
||||
baseline_merge_commits: readBaselineMerges(),
|
||||
final_manifest: manifest,
|
||||
remote_terminal_shas: gate.terminal_branch_shas,
|
||||
source_task_shas: gate.task_shas,
|
||||
status: "passed",
|
||||
}, null, 2)}\n`);
|
||||
const git = readGitState();
|
||||
const manifestSha = createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase();
|
||||
const visual = layer === "visual";
|
||||
const evidenceRefs = visual
|
||||
? [
|
||||
"pixel-diff.json", "layout-boxes.json", "manual-review.json", "release-inputs.json",
|
||||
"chrome/asset-sources.json", "chrome/editor.png", "chrome/canvas.png", "chrome/export-dialog.png", "chrome/layout-boxes.json", "chrome/trace.zip",
|
||||
"edge/asset-sources.json", "edge/editor.png", "edge/canvas.png", "edge/export-dialog.png", "edge/layout-boxes.json", "edge/trace.zip",
|
||||
]
|
||||
: [
|
||||
"performance.json", "memory.json", "dom-count.json", "environment.json", "release-inputs.json",
|
||||
"chrome/asset-sources.json", "chrome/performance-raw.json", "chrome/trace.zip",
|
||||
"edge/asset-sources.json", "edge/performance-raw.json", "edge/trace.zip",
|
||||
];
|
||||
const missingEvidence = evidenceRefs.filter((path) => !existsSync(resolve(caseDirectory, path)));
|
||||
const manualReviewPassed = !visual
|
||||
|| JSON.parse(readFileSync(resolve(caseDirectory, "manual-review.json"), "utf8")).status === "passed";
|
||||
const status = missingEvidence.length > 0
|
||||
? "failed"
|
||||
: manualReviewPassed ? "passed" : "automated_green_pending_manual";
|
||||
const result = {
|
||||
acceptance_criteria: visual ? ["AC-19", "AC-23", "AC-32"] : ["AC-27", "AC-32"],
|
||||
automation: visual ? ["automated", "manual_review"] : ["automated"],
|
||||
commit: git.commit,
|
||||
evidence_refs: evidenceRefs,
|
||||
fixture_ids: ["FX-CANVAS-50"],
|
||||
green_assertions: visual
|
||||
? ["Chrome/Edge visual and layout differences remain within the fixed section 10.1 thresholds", "known substitutions receive manual review"]
|
||||
: ["all fixed section 10.2 budgets pass in Chrome and Edge", "export failure leaves the project and latest export unchanged"],
|
||||
layer: visual ? ["VIS-PERF", "MANUAL"] : ["VIS-PERF"],
|
||||
manifest: { path: "tasks.manifest.json", sha256: manifestSha },
|
||||
missing_evidence: missingEvidence,
|
||||
phase: "green",
|
||||
red_reason: visual ? "Chrome/Edge 白名单结构或导出漂移" : "50 元素、自动保存、资源面板或导出超过预算",
|
||||
release_gate: ["work_package:WP-4", "release:P0-A"],
|
||||
requirements: visual ? ["NFR-02"] : ["NFR-03"],
|
||||
run_id: runId,
|
||||
status,
|
||||
task_id: "TASK-WP4-07",
|
||||
test_id: visual ? "TDD-WP4-VIS-001-browser-diff" : "TDD-WP4-PERF-001-budget",
|
||||
work_package: "WP-4",
|
||||
worktree_under_test: git.worktree_under_test,
|
||||
};
|
||||
writeFileSync(resolve(caseDirectory, "result.json"), `${JSON.stringify(result, null, 2)}\n`);
|
||||
writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify({
|
||||
cases: [{ missing_evidence: missingEvidence, status, test_id: result.test_id }],
|
||||
commit: git.commit,
|
||||
phase: "green",
|
||||
run_id: runId,
|
||||
status,
|
||||
task_id: "TASK-WP4-07",
|
||||
}, null, 2)}\n`);
|
||||
console.log(JSON.stringify({ layer, manifest, run_id: runId, status }, null, 2));
|
||||
if (status === "failed") process.exit(1);
|
||||
} catch (error) {
|
||||
console.error(JSON.stringify({ code: error instanceof Error ? error.message : String(error), layer, status: "failed" }, null, 2));
|
||||
process.exit(1);
|
||||
}
|
||||
@@ -1,232 +0,0 @@
|
||||
import { createHash } from "node:crypto";
|
||||
import { spawnSync } from "node:child_process";
|
||||
import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
|
||||
import { resolve } from "node:path";
|
||||
|
||||
import { WP4_07_SOURCE_HASHES, wp407FixtureSha256 } from "../tests/visual-performance/wp4-07-fixture.mjs";
|
||||
import { readWp5RemoteGate, validateWp407FrozenInputs } from "./lib/wp4-07-gate.mjs";
|
||||
|
||||
const phaseIndex = process.argv.indexOf("--phase");
|
||||
const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "green";
|
||||
if (!["red", "green"].includes(phase)) throw new Error(`Unsupported phase: ${phase}`);
|
||||
|
||||
if (phase === "green") {
|
||||
const commands = [
|
||||
["visual", "pnpm test:visual"],
|
||||
["performance", "pnpm test:performance"],
|
||||
["tdd-trace", "pnpm validate:tdd-trace"],
|
||||
].map(([name, command]) => {
|
||||
const started_at = new Date().toISOString();
|
||||
const result = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", command], {
|
||||
encoding: "utf8",
|
||||
env: process.env,
|
||||
maxBuffer: 64 * 1024 * 1024,
|
||||
});
|
||||
if (result.stdout) process.stdout.write(result.stdout);
|
||||
if (result.stderr) process.stderr.write(result.stderr);
|
||||
return {
|
||||
command,
|
||||
exit_code: result.status ?? 1,
|
||||
finished_at: new Date().toISOString(),
|
||||
name,
|
||||
started_at,
|
||||
};
|
||||
});
|
||||
const status = commands.every((command) => command.exit_code === 0) ? "automated_green_pending_manual" : "failed";
|
||||
console.log(JSON.stringify({ commands, phase, status }, null, 2));
|
||||
if (status === "failed") process.exit(1);
|
||||
process.exit(0);
|
||||
}
|
||||
|
||||
const runId = process.env.DADA_TDD_RUN_ID ?? `wp4-07-${phase}-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
|
||||
const runDirectory = resolve("artifacts", "tdd", runId);
|
||||
const casesDirectory = resolve(runDirectory, "cases");
|
||||
const visualDirectory = resolve(casesDirectory, "TDD-WP4-VIS-001-browser-diff");
|
||||
const performanceDirectory = resolve(casesDirectory, "TDD-WP4-PERF-001-budget");
|
||||
if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
|
||||
mkdirSync(visualDirectory, { recursive: true });
|
||||
mkdirSync(performanceDirectory, { recursive: true });
|
||||
|
||||
const fixture = validateWp407FrozenInputs();
|
||||
const remoteGate = readWp5RemoteGate();
|
||||
const environment = {
|
||||
...process.env,
|
||||
DADA_TDD_RUN_ID: runId,
|
||||
DADA_PLAYWRIGHT_OUTPUT_DIR: resolve(runDirectory, "playwright-output"),
|
||||
DADA_WP4_07_EVIDENCE_DIR: casesDirectory,
|
||||
...(phase === "red" ? { DADA_WP4_07_HARNESS_MODE: "red_contract" } : {}),
|
||||
};
|
||||
|
||||
function run(name, command, expected) {
|
||||
const started_at = new Date().toISOString();
|
||||
const result = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", command], {
|
||||
encoding: "utf8",
|
||||
env: environment,
|
||||
maxBuffer: 64 * 1024 * 1024,
|
||||
});
|
||||
if (result.stdout) process.stdout.write(result.stdout);
|
||||
if (result.stderr) process.stderr.write(result.stderr);
|
||||
return {
|
||||
command,
|
||||
exit_code: result.status ?? 1,
|
||||
expected,
|
||||
finished_at: new Date().toISOString(),
|
||||
name,
|
||||
started_at,
|
||||
};
|
||||
}
|
||||
|
||||
function runDirect(name, executable, args, expected) {
|
||||
const started_at = new Date().toISOString();
|
||||
const result = spawnSync(executable, args, {
|
||||
encoding: "utf8",
|
||||
env: environment,
|
||||
maxBuffer: 64 * 1024 * 1024,
|
||||
});
|
||||
if (result.stdout) process.stdout.write(result.stdout);
|
||||
if (result.stderr) process.stderr.write(result.stderr);
|
||||
return {
|
||||
command: [executable, ...args].join(" "),
|
||||
exit_code: result.status ?? 1,
|
||||
expected,
|
||||
finished_at: new Date().toISOString(),
|
||||
name,
|
||||
started_at,
|
||||
};
|
||||
}
|
||||
|
||||
const commands = [
|
||||
run("fixture-contract", "node --test tests/visual-performance/wp4-07-fixture.test.mjs tests/visual-performance/wp4-07-gate.test.mjs", "zero"),
|
||||
run("build-browser-dependencies", "pnpm --filter @dada/shared-contracts build && pnpm --filter @dada/static-sticker-catalog build && pnpm --filter @dada/template-registry build && pnpm --filter @dada/asset-renderer build", "zero"),
|
||||
run("browser-harness", "pnpm exec playwright test --config playwright.wp4-07.config.ts", "zero"),
|
||||
runDirect("visual-diff", process.execPath, ["scripts/compare-wp4-07-screenshots.mjs", "--evidence", visualDirectory, "--phase", "red"], "zero"),
|
||||
runDirect("performance-aggregation", process.execPath, ["scripts/aggregate-wp4-07-performance.mjs", "--evidence", performanceDirectory, "--phase", "red"], "zero"),
|
||||
run("visual-green-gate", "pnpm test:visual", "nonzero_wp5_gate"),
|
||||
run("performance-green-gate", "pnpm test:performance", "nonzero_wp5_gate"),
|
||||
run("tdd-trace", "pnpm validate:tdd-trace", "zero"),
|
||||
];
|
||||
|
||||
function findFiles(directory, name) {
|
||||
if (!existsSync(directory)) return [];
|
||||
return readdirSync(directory, { withFileTypes: true }).flatMap((entry) => {
|
||||
const path = resolve(directory, entry.name);
|
||||
return entry.isDirectory() ? findFiles(path, name) : entry.name === name ? [path] : [];
|
||||
});
|
||||
}
|
||||
|
||||
if (phase === "red") {
|
||||
const traces = findFiles(resolve(runDirectory, "playwright-output"), "trace.zip");
|
||||
for (const [caseDirectory, familyNeedle] of [[visualDirectory, "editor-export-evidence"], [performanceDirectory, "budget-without-dilution"]]) {
|
||||
for (const browser of ["chrome", "edge"]) {
|
||||
const evidenceTrace = resolve(caseDirectory, browser, "trace.zip");
|
||||
if (existsSync(evidenceTrace)) continue;
|
||||
const trace = traces.find((path) => path.toLowerCase().includes(familyNeedle) && path.toLowerCase().includes(browser));
|
||||
if (trace) {
|
||||
mkdirSync(resolve(caseDirectory, browser), { recursive: true });
|
||||
copyFileSync(trace, resolve(caseDirectory, browser, "trace.zip"));
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
const commandExpected = commands.every((command) => command.expected === "zero" ? command.exit_code === 0 : command.exit_code !== 0);
|
||||
const redConfirmed = phase === "red" && !remoteGate.complete && commandExpected;
|
||||
const observation = {
|
||||
eligible_for_green: false,
|
||||
expected_failure: "Final WP-5 task SHAs, immutable release inputs, real fonts, and the final renderer are unavailable, so Chrome/Edge visual and performance results cannot become Green.",
|
||||
fixture_sha256: fixture.fixture_sha256,
|
||||
candidate_baseline_branch: remoteGate.candidate_baseline_branch,
|
||||
candidate_baseline_sha: remoteGate.candidate_baseline_sha,
|
||||
missing_remote_tasks: remoteGate.missing_tasks,
|
||||
observed_remote_heads: remoteGate.heads,
|
||||
observed_task_shas: remoteGate.task_shas,
|
||||
placeholder_policy: "red_contract resources are harness smoke inputs only and are rejected by the Green gate",
|
||||
status: redConfirmed ? "red_confirmed" : "failed",
|
||||
};
|
||||
for (const directory of [visualDirectory, performanceDirectory]) {
|
||||
writeFileSync(resolve(directory, "red-observation.json"), `${JSON.stringify(observation, null, 2)}\n`);
|
||||
writeFileSync(resolve(directory, "commands.json"), `${JSON.stringify({ commands, phase, run_id: runId }, null, 2)}\n`);
|
||||
}
|
||||
|
||||
const commit = spawnSync("git", ["rev-parse", "HEAD"], { encoding: "utf8" }).stdout.trim();
|
||||
const dirty = spawnSync("git", ["status", "--porcelain"], { encoding: "utf8" }).stdout.trim().length > 0;
|
||||
const manifestSha = createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase();
|
||||
const definitions = [
|
||||
{
|
||||
acceptance_criteria: ["AC-19", "AC-23", "AC-32"],
|
||||
automation: ["automated", "manual_review"],
|
||||
directory: visualDirectory,
|
||||
evidence_refs: [
|
||||
"red-observation.json", "pixel-diff.json", "layout-boxes.json", "manual-review.json",
|
||||
"chrome/editor.png", "chrome/canvas.png", "chrome/export-dialog.png", "chrome/layout-boxes.json", "chrome/trace.zip",
|
||||
"edge/editor.png", "edge/canvas.png", "edge/export-dialog.png", "edge/layout-boxes.json", "edge/trace.zip",
|
||||
],
|
||||
green_assertions: ["Chrome/Edge structure, fonts, wrapping, color, stroke, and decoration remain within the fixed section 10.1 thresholds", "known substitutions receive manual review"],
|
||||
layer: ["VIS-PERF", "MANUAL"],
|
||||
red_reason: "Chrome/Edge 白名单结构或导出漂移",
|
||||
requirements: ["NFR-02"],
|
||||
test_id: "TDD-WP4-VIS-001-browser-diff",
|
||||
},
|
||||
{
|
||||
acceptance_criteria: ["AC-27", "AC-32"],
|
||||
automation: ["automated"],
|
||||
directory: performanceDirectory,
|
||||
evidence_refs: [
|
||||
"red-observation.json", "performance.json", "memory.json", "dom-count.json", "environment.json",
|
||||
"chrome/performance-raw.json", "chrome/trace.zip", "edge/performance-raw.json", "edge/trace.zip",
|
||||
],
|
||||
green_assertions: ["all section 10.2 budgets pass in both real browsers", "export failure leaves the project and latest export unchanged"],
|
||||
layer: ["VIS-PERF"],
|
||||
red_reason: "50 元素、自动保存、资源面板或导出超过预算",
|
||||
requirements: ["NFR-03"],
|
||||
test_id: "TDD-WP4-PERF-001-budget",
|
||||
},
|
||||
];
|
||||
|
||||
const summaries = definitions.map((item) => {
|
||||
const missing = item.evidence_refs.filter((path) => !existsSync(resolve(item.directory, path)));
|
||||
const status = phase === "red"
|
||||
? redConfirmed && missing.length === 0 ? "red_confirmed" : "failed"
|
||||
: commandExpected && missing.length === 0 ? "passed" : "failed";
|
||||
writeFileSync(resolve(item.directory, "result.json"), `${JSON.stringify({
|
||||
acceptance_criteria: item.acceptance_criteria,
|
||||
automation: item.automation,
|
||||
commit,
|
||||
evidence_refs: item.evidence_refs,
|
||||
fixture_ids: ["FX-CANVAS-50"],
|
||||
green_assertions: item.green_assertions,
|
||||
layer: item.layer,
|
||||
manifest: { path: "tasks.manifest.json", sha256: manifestSha },
|
||||
missing_evidence: missing,
|
||||
phase,
|
||||
red_reason: item.red_reason,
|
||||
release_gate: ["work_package:WP-4", "release:P0-A"],
|
||||
requirements: item.requirements,
|
||||
run_id: runId,
|
||||
status,
|
||||
task_id: "TASK-WP4-07",
|
||||
test_id: item.test_id,
|
||||
work_package: "WP-4",
|
||||
worktree_under_test: dirty ? "uncommitted implementation" : "clean committed implementation",
|
||||
}, null, 2)}\n`);
|
||||
return { missing_evidence: missing, status, test_id: item.test_id };
|
||||
});
|
||||
const expectedStatus = phase === "red" ? "red_confirmed" : "passed";
|
||||
const status = summaries.every((summary) => summary.status === expectedStatus) ? expectedStatus : "failed";
|
||||
const evidence = {
|
||||
automation: ["automated", "manual_review"],
|
||||
cases: summaries,
|
||||
commit,
|
||||
fixture_sha256: wp407FixtureSha256(),
|
||||
phase,
|
||||
redaction_scan: "passed",
|
||||
release_gate: ["work_package:WP-4", "release:P0-A"],
|
||||
remote_gate: remoteGate,
|
||||
run_id: runId,
|
||||
source_hashes: WP4_07_SOURCE_HASHES,
|
||||
status,
|
||||
};
|
||||
writeFileSync(resolve(runDirectory, "commands.json"), `${JSON.stringify({ commands, phase, run_id: runId }, null, 2)}\n`);
|
||||
writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify(evidence, null, 2)}\n`);
|
||||
console.log(JSON.stringify({ cases: summaries, phase, remote_gate: remoteGate, run_id: runId, status }, null, 2));
|
||||
if (status === "failed") process.exit(1);
|
||||
@@ -1,63 +0,0 @@
|
||||
import { createHash } from "node:crypto";
|
||||
import { spawnSync } from "node:child_process";
|
||||
import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
|
||||
import { resolve } from "node:path";
|
||||
|
||||
const phaseIndex = process.argv.indexOf("--phase");
|
||||
const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "green";
|
||||
if (!new Set(["red", "green"]).has(phase)) throw new Error(`Unsupported phase: ${phase}`);
|
||||
const runId = process.env.DADA_TDD_RUN_ID ?? `wp5-05-${phase}-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
|
||||
const runDirectory = resolve("artifacts", "tdd", runId);
|
||||
const caseDirectory = resolve(runDirectory, "cases", "TDD-WP5-UPL-001-upload-metering");
|
||||
if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
|
||||
mkdirSync(caseDirectory, { recursive: true });
|
||||
|
||||
const commands = phase === "red"
|
||||
? [["red-focused", "pnpm --filter @dada/shared-contracts build && pnpm exec vitest run tests/integration/wp5-05-sticker-release.test.ts tests/api/wp5-05-sticker-upload.test.ts"]]
|
||||
: [
|
||||
["unit", "pnpm test:unit"],
|
||||
["integration", "pnpm test:integration"],
|
||||
["api", "pnpm test:api"],
|
||||
["e2e", "pnpm test:e2e"],
|
||||
["security", "pnpm test:security"],
|
||||
["tdd-trace", "pnpm validate:tdd-trace"],
|
||||
];
|
||||
const results = [];
|
||||
for (const [name, command] of commands) {
|
||||
const started_at = new Date().toISOString();
|
||||
const result = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", command], {
|
||||
encoding: "utf8", env: { ...process.env, DADA_EVIDENCE_DIR_WP5_UPL: caseDirectory }, maxBuffer: 40 * 1024 * 1024,
|
||||
});
|
||||
if (result.stdout) process.stdout.write(result.stdout);
|
||||
if (result.stderr) process.stderr.write(result.stderr);
|
||||
results.push({ command, exit_code: result.status ?? 1, finished_at: new Date().toISOString(), name, started_at });
|
||||
if (phase === "green" && (result.status ?? 1) !== 0) break;
|
||||
}
|
||||
|
||||
const redConfirmed = phase === "red" && results.length === 1 && results[0].exit_code !== 0;
|
||||
if (phase === "red") writeFileSync(resolve(caseDirectory, "red-observation.json"), `${JSON.stringify({
|
||||
expected_failure: "后台上传未流式校验、原图/缩略图漏计量或 full 仍写入",
|
||||
observed_command: results[0].command,
|
||||
observed_exit_code: results[0].exit_code,
|
||||
status: redConfirmed ? "red_confirmed" : "failed",
|
||||
}, null, 2)}\n`);
|
||||
const evidenceRefs = phase === "red" ? ["red-observation.json"] : ["response.json", "db-diff.json", "fs-before.json", "fs-after.json"];
|
||||
const missingEvidence = evidenceRefs.filter((name) => !existsSync(resolve(caseDirectory, name)));
|
||||
const commandState = phase === "red" ? redConfirmed : results.length === commands.length && results.every((item) => item.exit_code === 0);
|
||||
const status = commandState && missingEvidence.length === 0 ? phase === "red" ? "red_confirmed" : "passed" : "failed";
|
||||
const manifest = { path: "tasks.manifest.json", sha256: createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase() };
|
||||
const commit = spawnSync("git", ["rev-parse", "--short", "HEAD"], { encoding: "utf8" }).stdout.trim();
|
||||
const dirty = spawnSync("git", ["status", "--porcelain"], { encoding: "utf8" }).stdout.trim().length > 0;
|
||||
writeFileSync(resolve(caseDirectory, "commands.json"), `${JSON.stringify({ commands: results, phase, run_id: runId }, null, 2)}\n`);
|
||||
writeFileSync(resolve(caseDirectory, "result.json"), `${JSON.stringify({
|
||||
acceptance_criteria: ["AC-31", "AC-55"], automation: ["automated"], commit,
|
||||
evidence_refs: evidenceRefs, layer: ["INTEGRATION", "API", "E2E", "PKG-SEC"], manifest,
|
||||
missing_evidence: missingEvidence, phase, red_reason: "后台上传未流式校验、原图/缩略图漏计量或 full 仍写入",
|
||||
requirements: ["ADMIN-06"], run_id: runId, status, task_id: "TASK-WP5-05",
|
||||
test_id: "TDD-WP5-UPL-001-upload-metering", work_package: "WP-5",
|
||||
worktree_under_test: dirty ? "uncommitted implementation" : "clean committed implementation",
|
||||
}, null, 2)}\n`);
|
||||
writeFileSync(resolve(runDirectory, "commands.json"), `${JSON.stringify({ commands: results, phase, run_id: runId }, null, 2)}\n`);
|
||||
writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify({ cases: [{ missing_evidence: missingEvidence, status, test_id: "TDD-WP5-UPL-001-upload-metering" }], phase, run_id: runId, status }, null, 2)}\n`);
|
||||
console.log(JSON.stringify({ phase, run_id: runId, status }, null, 2));
|
||||
if (status === "failed") process.exit(1);
|
||||
@@ -0,0 +1,115 @@
|
||||
import { createHash } from "node:crypto";
|
||||
import { spawnSync } from "node:child_process";
|
||||
import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
|
||||
import { resolve } from "node:path";
|
||||
|
||||
const phaseIndex = process.argv.indexOf("--phase");
|
||||
const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "scaffold";
|
||||
if (!new Set(["red", "scaffold"]).has(phase)) throw new Error(`Unsupported phase: ${phase}`);
|
||||
|
||||
const runId = process.env.DADA_TDD_RUN_ID ?? `wp6-01-${phase}-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
|
||||
const runDirectory = resolve("artifacts", "tdd", runId);
|
||||
const caseDirectory = resolve(runDirectory, "cases", "TDD-WP6-ADM-001-role-and-summary");
|
||||
if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
|
||||
mkdirSync(caseDirectory, { recursive: true });
|
||||
|
||||
const environment = {
|
||||
...process.env,
|
||||
DADA_EVIDENCE_DIR_ADMIN: caseDirectory,
|
||||
DADA_PLAYWRIGHT_OUTPUT_DIR: resolve(runDirectory, "playwright-output"),
|
||||
DADA_WP6_01_EVIDENCE_DIR: caseDirectory,
|
||||
};
|
||||
const commands = phase === "red"
|
||||
? [
|
||||
["api-red", "pnpm exec vitest run tests/api/wp6-01-admin-shell.test.ts"],
|
||||
["e2e-red", "pnpm exec playwright test tests/e2e/wp6-01-admin-shell.spec.ts --config playwright.config.ts"],
|
||||
]
|
||||
: [
|
||||
["api", "pnpm test:api"],
|
||||
["e2e", "pnpm test:e2e"],
|
||||
["security", "pnpm test:security"],
|
||||
["tdd-trace", "pnpm validate:tdd-trace"],
|
||||
];
|
||||
|
||||
const commandResults = [];
|
||||
for (const [name, command] of commands) {
|
||||
const started_at = new Date().toISOString();
|
||||
const result = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", command], {
|
||||
encoding: "utf8",
|
||||
env: environment,
|
||||
maxBuffer: 40 * 1024 * 1024,
|
||||
});
|
||||
if (result.stdout) process.stdout.write(result.stdout);
|
||||
if (result.stderr) process.stderr.write(result.stderr);
|
||||
commandResults.push({ command, exit_code: result.status ?? 1, finished_at: new Date().toISOString(), name, started_at });
|
||||
if (phase === "scaffold" && (result.status ?? 1) !== 0) break;
|
||||
}
|
||||
|
||||
const redConfirmed = phase === "red" && commandResults.length === commands.length && commandResults.every((item) => item.exit_code !== 0);
|
||||
if (phase === "red") {
|
||||
writeFileSync(resolve(caseDirectory, "red-observation.json"), `${JSON.stringify({
|
||||
expected_failure: "The protected admin overview route, nine-entry admin shell, denied-session redirect, and disabled-session ejection are absent before TASK-WP6-01.",
|
||||
observed_commands: commandResults,
|
||||
red_reason: "TDD-WP6-ADM-001 first Red: ordinary or preview subjects can reach the unguarded admin route, while no safe summary API exists.",
|
||||
status: redConfirmed ? "red_confirmed" : "failed",
|
||||
}, null, 2)}\n`);
|
||||
}
|
||||
|
||||
function findFiles(directory, name) {
|
||||
if (!existsSync(directory)) return [];
|
||||
const matches = [];
|
||||
for (const entry of readdirSync(directory, { withFileTypes: true })) {
|
||||
const path = resolve(directory, entry.name);
|
||||
if (entry.isDirectory()) matches.push(...findFiles(path, name));
|
||||
else if (entry.name === name) matches.push(path);
|
||||
}
|
||||
return matches;
|
||||
}
|
||||
|
||||
if (phase === "scaffold") {
|
||||
const trace = findFiles(environment.DADA_PLAYWRIGHT_OUTPUT_DIR, "trace.zip")
|
||||
.find((path) => path.toLowerCase().includes("wp6-01-admin-shell"));
|
||||
if (trace) copyFileSync(trace, resolve(caseDirectory, "trace.zip"));
|
||||
}
|
||||
|
||||
const expectedEvidence = phase === "red"
|
||||
? ["red-observation.json"]
|
||||
: ["response.json", "db-access.json", "trace.zip", "screenshots/admin-denied.png", "screenshots/admin-overview.png"];
|
||||
const missingEvidence = expectedEvidence.filter((file) => !existsSync(resolve(caseDirectory, file)));
|
||||
const commandsPassed = phase === "scaffold" && commandResults.length === commands.length && commandResults.every((item) => item.exit_code === 0);
|
||||
const status = phase === "red"
|
||||
? redConfirmed && missingEvidence.length === 0 ? "red_confirmed" : "failed"
|
||||
: commandsPassed && missingEvidence.length === 0 ? "red" : "failed";
|
||||
const commit = spawnSync("git", ["rev-parse", "HEAD"], { encoding: "utf8" }).stdout.trim();
|
||||
const wp5BaselineSha = spawnSync("git", ["rev-parse", "origin/codex/wp5-04"], { encoding: "utf8" }).stdout.trim();
|
||||
const manifest = {
|
||||
path: "tasks.manifest.json",
|
||||
sha256: createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase(),
|
||||
};
|
||||
const result = {
|
||||
acceptance_criteria: ["AC-25", "AC-49"],
|
||||
automation: ["automated"],
|
||||
commit,
|
||||
dependency_gate: {
|
||||
blocked_by: ["TASK-WP5-05", "TASK-WP5-06", "TASK-WP5-07"],
|
||||
baseline_remote_branch: "origin/codex/wp5-04",
|
||||
baseline_remote_sha: wp5BaselineSha,
|
||||
final_green_allowed: false,
|
||||
},
|
||||
evidence_refs: expectedEvidence,
|
||||
layer: ["API", "E2E"],
|
||||
manifest,
|
||||
missing_evidence: missingEvidence,
|
||||
phase,
|
||||
requirements: ["ADMIN-01", "ADMIN-02", "ADMIN-04", "ADMIN-08"],
|
||||
run_id: runId,
|
||||
status,
|
||||
task_id: "TASK-WP6-01",
|
||||
test_id: "TDD-WP6-ADM-001-role-and-summary",
|
||||
work_package: "WP-6",
|
||||
};
|
||||
writeFileSync(resolve(caseDirectory, "commands.json"), `${JSON.stringify({ commands: commandResults, phase, run_id: runId }, null, 2)}\n`);
|
||||
writeFileSync(resolve(caseDirectory, "result.json"), `${JSON.stringify(result, null, 2)}\n`);
|
||||
writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify({ cases: [{ missing_evidence: missingEvidence, status, test_id: result.test_id }], phase, run_id: runId, status }, null, 2)}\n`);
|
||||
console.log(JSON.stringify({ phase, run_id: runId, status }, null, 2));
|
||||
if (status === "failed") process.exit(1);
|
||||
@@ -1,109 +0,0 @@
|
||||
import { createHash, randomUUID } from "node:crypto";
|
||||
import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
|
||||
import { tmpdir } from "node:os";
|
||||
import { join, resolve } from "node:path";
|
||||
|
||||
import { afterEach, describe, expect, it } from "vitest";
|
||||
|
||||
import { createApp } from "../../apps/api/src/app.js";
|
||||
import { ManagedStorage } from "../../apps/api/src/managed-storage.js";
|
||||
import { RegistrationService } from "../../apps/api/src/registration.js";
|
||||
import { MockResendAdapter } from "../../apps/api/src/resend-adapter.js";
|
||||
import { StickerReleaseService } from "../../apps/api/src/sticker-releases.js";
|
||||
|
||||
const now = Date.parse("2026-08-03T12:00:00.000Z");
|
||||
const png = Buffer.from("iVBORw0KGgoAAAANSUhEUgAAAAQAAAADCAYAAAC09K7GAAAACXBIWXMAAAPoAAAD6AG1e1JrAAAAEklEQVQImWO4E6XxHxkzEBQAANIxHF3ECQOzAAAAAElFTkSuQmCC", "base64");
|
||||
const roots: string[] = [];
|
||||
const closeables: Array<{ close(): void }> = [];
|
||||
const baseHeaders = { host: "127.0.0.1:43121", origin: "http://127.0.0.1:43121" };
|
||||
|
||||
async function multipart() {
|
||||
const form = new FormData();
|
||||
form.append("stable_id", "STK1408");
|
||||
form.append("part", "25");
|
||||
form.append("order", "184");
|
||||
form.append("enabled", "true");
|
||||
form.append("original_byte_size", String(png.byteLength));
|
||||
form.append("original_sha256", createHash("sha256").update(png).digest("hex"));
|
||||
form.append("sticker_file", new Blob([png], { type: "image/png" }), "STK1408.png");
|
||||
const serialized = new Response(form);
|
||||
return { contentType: serialized.headers.get("content-type")!, payload: Buffer.from(await serialized.arrayBuffer()) };
|
||||
}
|
||||
|
||||
function evidence(value: unknown) {
|
||||
const directory = process.env.DADA_EVIDENCE_DIR_WP5_UPL;
|
||||
if (!directory) return;
|
||||
mkdirSync(directory, { recursive: true });
|
||||
writeFileSync(resolve(directory, "response.json"), `${JSON.stringify(value, null, 2)}\n`);
|
||||
}
|
||||
|
||||
afterEach(() => {
|
||||
for (const value of closeables.splice(0).reverse()) value.close();
|
||||
for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
|
||||
});
|
||||
|
||||
describe("TASK-WP5-05 admin sticker API", () => {
|
||||
it("requires admin mutation controls, publishes upload, and exposes current and versioned public resources", async () => {
|
||||
const dataRoot = mkdtempSync(join(tmpdir(), "dada-wp5-05-api-"));
|
||||
roots.push(dataRoot);
|
||||
mkdirSync(join(dataRoot, "db"), { recursive: true });
|
||||
const databasePath = join(dataRoot, "db", "dada.sqlite3");
|
||||
const registration = new RegistrationService({
|
||||
challengePepper: Buffer.alloc(32, 0x41), clock: () => now,
|
||||
currentPrivacyNoticeVersion: "p0a-registration-notice-v1", databasePath,
|
||||
invitePepper: Buffer.alloc(32, 0x42), resend: new MockResendAdapter(), sessionPepper: Buffer.alloc(32, 0x43),
|
||||
});
|
||||
const storage = new ManagedStorage({ dataRoot, databasePath });
|
||||
const stickers = new StickerReleaseService({ clock: () => now, databasePath, storage });
|
||||
closeables.push(stickers, storage, registration);
|
||||
const adminId = randomUUID();
|
||||
registration.database.prepare(`INSERT INTO users (
|
||||
user_id, normalized_email, role, status, counts_toward_stage_limit, registration_id, created_at
|
||||
) VALUES (?, 'sticker-admin@example.invalid', 'super_admin', 'active', 0, ?, ?)`).run(adminId, randomUUID(), now);
|
||||
registration.database.prepare("INSERT INTO admin_access (user_id, allowed) VALUES (?, 1)").run(adminId);
|
||||
const session = registration.issueAuthenticatedSession(adminId, "admin");
|
||||
const csrf = registration.issueAdminCsrfToken(session.sessionToken);
|
||||
const app = await createApp({ browserGate: false, networkBoundary: { allowTestPort: true }, registration, stickers });
|
||||
const uploadKey = `sticker-${randomUUID()}-${randomUUID()}`;
|
||||
|
||||
const body = await multipart();
|
||||
const denied = await app.inject({ headers: { ...baseHeaders, "content-type": body.contentType }, method: "POST", payload: body.payload, url: "/api/v1/admin/assets/static-stickers" });
|
||||
expect(denied.statusCode).toBe(401);
|
||||
|
||||
const acceptedBody = await multipart();
|
||||
const accepted = await app.inject({
|
||||
headers: {
|
||||
...baseHeaders, cookie: `dada_admin_session=${session.sessionToken}`, "content-type": acceptedBody.contentType,
|
||||
"idempotency-key": uploadKey, "x-csrf-token": csrf,
|
||||
},
|
||||
method: "POST", payload: acceptedBody.payload, url: "/api/v1/admin/assets/static-stickers",
|
||||
});
|
||||
expect(accepted.statusCode).toBe(201);
|
||||
expect(accepted.json()).toMatchObject({ item: { stable_id: "STK1408" }, release_version: "asset-20260803.1" });
|
||||
const replayBody = await multipart();
|
||||
const replay = await app.inject({
|
||||
headers: {
|
||||
...baseHeaders, cookie: `dada_admin_session=${session.sessionToken}`, "content-type": replayBody.contentType,
|
||||
"idempotency-key": uploadKey, "x-csrf-token": csrf,
|
||||
},
|
||||
method: "POST", payload: replayBody.payload, url: "/api/v1/admin/assets/static-stickers",
|
||||
});
|
||||
expect(replay.statusCode).toBe(200);
|
||||
expect(replay.json()).toMatchObject({ created: false, release_version: "asset-20260803.1" });
|
||||
expect(storage.inspectCounts()).toMatchObject({ managed_files: 2 });
|
||||
|
||||
const adminList = await app.inject({ headers: { ...baseHeaders, cookie: `dada_admin_session=${session.sessionToken}` }, method: "GET", url: "/api/v1/admin/assets/static-stickers" });
|
||||
const publicList = await app.inject({ headers: baseHeaders, method: "GET", url: "/api/v1/static-stickers/current" });
|
||||
const original = await app.inject({ headers: baseHeaders, method: "GET", url: "/api/v1/assets/public/asset-20260803.1/STK1408" });
|
||||
const thumbnail = await app.inject({ headers: baseHeaders, method: "GET", url: "/api/v1/assets/public/asset-20260803.1/STK1408?variant=thumbnail" });
|
||||
expect(adminList.statusCode).toBe(200);
|
||||
expect(publicList.json()).toMatchObject({ count: 1, items: [{ stable_id: "STK1408" }] });
|
||||
expect(original.rawPayload).toEqual(png);
|
||||
expect(thumbnail.statusCode).toBe(200);
|
||||
expect(thumbnail.headers["content-type"]).toMatch(/^image\/png/);
|
||||
expect(thumbnail.rawPayload).not.toEqual(png);
|
||||
|
||||
evidence({ admin_list_status: adminList.statusCode, public_count: publicList.json().count, upload_status: accepted.statusCode });
|
||||
await app.close();
|
||||
});
|
||||
});
|
||||
@@ -1,179 +0,0 @@
|
||||
import { randomUUID } from "node:crypto";
|
||||
import { mkdtempSync, rmSync } from "node:fs";
|
||||
import { tmpdir } from "node:os";
|
||||
import { join } from "node:path";
|
||||
|
||||
import { afterEach, describe, expect, it } from "vitest";
|
||||
|
||||
import { createApp } from "../../apps/api/src/app.js";
|
||||
import { AssetPreviewGrantService } from "../../apps/api/src/preview-grants.js";
|
||||
import { RegistrationService } from "../../apps/api/src/registration.js";
|
||||
import { MockResendAdapter } from "../../apps/api/src/resend-adapter.js";
|
||||
import { createAssetReleaseManifest } from "../../packages/asset-release-manifest/src/index.js";
|
||||
|
||||
const start = Date.parse("2026-08-04T08:00:00.000Z");
|
||||
const releaseVersion = "asset-20260804.1";
|
||||
const previewResourceId = "8f9b5c62-7488-4c7a-9f0c-3b8f3fc34f92";
|
||||
const roots: string[] = [];
|
||||
const registrations: RegistrationService[] = [];
|
||||
|
||||
function harness() {
|
||||
const root = mkdtempSync(join(tmpdir(), "dada-wp5-07-"));
|
||||
roots.push(root);
|
||||
let now = start;
|
||||
const registration = new RegistrationService({
|
||||
challengePepper: Buffer.alloc(32, 0x71),
|
||||
clock: () => now,
|
||||
currentPrivacyNoticeVersion: "p0a-registration-notice-v1",
|
||||
databasePath: join(root, "dada.sqlite3"),
|
||||
invitePepper: Buffer.alloc(32, 0x72),
|
||||
resend: new MockResendAdapter(),
|
||||
sessionPepper: Buffer.alloc(32, 0x73),
|
||||
});
|
||||
registrations.push(registration);
|
||||
const userId = randomUUID();
|
||||
registration.database.prepare(`
|
||||
INSERT INTO users (
|
||||
user_id, normalized_email, role, status, counts_toward_stage_limit,
|
||||
registration_id, created_at
|
||||
) VALUES (?, ?, 'user', 'active', 1, ?, ?)
|
||||
`).run(userId, `${userId}@example.invalid`, randomUUID(), start);
|
||||
registration.database.prepare(`
|
||||
INSERT INTO user_profiles (user_id, creator_name, social_id)
|
||||
VALUES (?, 'Preview User', '@preview_user')
|
||||
`).run(userId);
|
||||
registration.database.prepare(`
|
||||
INSERT INTO credit_accounts (user_id, available_balance, reserved_balance, updated_at)
|
||||
VALUES (?, 10, 0, ?)
|
||||
`).run(userId, start);
|
||||
const adminId = randomUUID();
|
||||
registration.database.prepare(`
|
||||
INSERT INTO users (
|
||||
user_id, normalized_email, role, status, counts_toward_stage_limit,
|
||||
registration_id, created_at
|
||||
) VALUES (?, ?, 'super_admin', 'active', 0, ?, ?)
|
||||
`).run(adminId, `${adminId}@example.invalid`, randomUUID(), start);
|
||||
registration.database.prepare("INSERT INTO admin_access (user_id, allowed) VALUES (?, 1)").run(adminId);
|
||||
const assetReleases = createAssetReleaseManifest({
|
||||
items: [{
|
||||
access_class: "internal_preview_asset",
|
||||
content: Buffer.from("preview-content"),
|
||||
mime_type: "image/webp",
|
||||
relative_path: "preview/TEMPLATE.webp",
|
||||
resource_id: previewResourceId,
|
||||
root_ref: "canonical-assets",
|
||||
}],
|
||||
release_version: releaseVersion,
|
||||
});
|
||||
const service = new AssetPreviewGrantService({ assetReleases, registration, clock: () => now });
|
||||
return {
|
||||
advance(milliseconds: number) { now += milliseconds; },
|
||||
adminId,
|
||||
registration,
|
||||
service,
|
||||
userId,
|
||||
};
|
||||
}
|
||||
|
||||
afterEach(() => {
|
||||
for (const registration of registrations.splice(0)) registration.close();
|
||||
for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
|
||||
});
|
||||
|
||||
describe("TASK-WP5-07 internal preview grant lifecycle", () => {
|
||||
it("keeps ordinary role, returns randomized manifest item IDs, and blocks revoked/expired grants", () => {
|
||||
const test = harness();
|
||||
const batch = test.service.createBatch({
|
||||
name: "WP5 preview batch",
|
||||
adminUserId: test.adminId,
|
||||
});
|
||||
test.service.addBatchItems({
|
||||
adminUserId: test.adminId,
|
||||
batchId: batch.batchId,
|
||||
releaseVersion,
|
||||
resourceIds: [previewResourceId],
|
||||
});
|
||||
const grant = test.service.grant({
|
||||
adminUserId: test.adminId,
|
||||
batchId: batch.batchId,
|
||||
expiresAt: start + 60_000,
|
||||
userId: test.userId,
|
||||
});
|
||||
|
||||
const firstManifest = test.service.projectManifest({ releaseVersion, userId: test.userId });
|
||||
expect(firstManifest?.items).toHaveLength(1);
|
||||
expect(firstManifest?.items[0].resource_id).not.toBe(previewResourceId);
|
||||
expect(firstManifest?.items[0].url).toContain(firstManifest?.items[0].resource_id ?? "");
|
||||
expect(test.service.readManifestItem({
|
||||
manifestItemId: firstManifest!.items[0].resource_id,
|
||||
releaseVersion,
|
||||
userId: test.userId,
|
||||
})?.bytes).toEqual(Buffer.from("preview-content"));
|
||||
expect(test.registration.database.prepare("SELECT role FROM users WHERE user_id = ?").get(test.userId)).toEqual({ role: "user" });
|
||||
|
||||
test.service.revoke({ adminUserId: test.adminId, grantId: grant.grantId });
|
||||
expect(test.service.projectManifest({ releaseVersion, userId: test.userId })).toBeUndefined();
|
||||
expect(test.service.readManifestItem({
|
||||
manifestItemId: firstManifest!.items[0].resource_id,
|
||||
releaseVersion,
|
||||
userId: test.userId,
|
||||
})).toBeUndefined();
|
||||
|
||||
const secondGrant = test.service.grant({
|
||||
adminUserId: test.adminId,
|
||||
batchId: batch.batchId,
|
||||
expiresAt: start + 10_000,
|
||||
userId: test.userId,
|
||||
});
|
||||
expect(secondGrant.status).toBe("active");
|
||||
test.advance(10_001);
|
||||
expect(test.service.projectManifest({ releaseVersion, userId: test.userId })).toBeUndefined();
|
||||
expect(test.registration.database.prepare("SELECT status FROM asset_preview_grants WHERE grant_id = ?").get(secondGrant.grantId)).toEqual({ status: "expired" });
|
||||
|
||||
test.registration.database.prepare("UPDATE users SET status = 'active' WHERE user_id = ?").run(test.userId);
|
||||
test.service.grant({
|
||||
adminUserId: test.adminId,
|
||||
batchId: batch.batchId,
|
||||
expiresAt: start + 120_000,
|
||||
userId: test.userId,
|
||||
});
|
||||
test.registration.changeUserStatus(test.userId, "suspended");
|
||||
expect(test.service.projectManifest({ releaseVersion, userId: test.userId })).toBeUndefined();
|
||||
expect(test.registration.database.prepare("SELECT COUNT(*) AS count FROM admin_operation_logs WHERE operation_type LIKE 'preview_grant_%'").get()).toEqual({ count: 5 });
|
||||
});
|
||||
|
||||
it("serves the randomized item through the authenticated no-store route", async () => {
|
||||
const test = harness();
|
||||
const batch = test.service.createBatch({ name: "WP5 route batch", adminUserId: test.adminId });
|
||||
test.service.addBatchItems({
|
||||
adminUserId: test.adminId,
|
||||
batchId: batch.batchId,
|
||||
releaseVersion,
|
||||
resourceIds: [previewResourceId],
|
||||
});
|
||||
const grant = test.service.grant({ adminUserId: test.adminId, batchId: batch.batchId, expiresAt: start + 60_000, userId: test.userId });
|
||||
const session = test.registration.issueAuthenticatedSession(test.userId, "user");
|
||||
const app = await createApp({
|
||||
browserGate: false,
|
||||
networkBoundary: { allowTestPort: true },
|
||||
previewGrants: test.service,
|
||||
registration: test.registration,
|
||||
});
|
||||
try {
|
||||
const headers = { cookie: `dada_session=${session.sessionToken}`, host: "127.0.0.1:43121", origin: "http://127.0.0.1:43121" };
|
||||
const manifest = await app.inject({ headers, method: "GET", url: `/api/v1/assets/preview/${releaseVersion}/manifest` });
|
||||
expect(manifest.statusCode).toBe(200);
|
||||
const itemId = manifest.json().items[0].resource_id;
|
||||
expect(itemId).not.toBe(previewResourceId);
|
||||
const asset = await app.inject({ headers, method: "GET", url: `/api/v1/assets/preview/${releaseVersion}/${itemId}` });
|
||||
expect(asset.statusCode).toBe(200);
|
||||
expect(asset.headers["cache-control"]).toBe("private, no-store");
|
||||
expect(asset.rawPayload).toEqual(Buffer.from("preview-content"));
|
||||
test.service.revoke({ adminUserId: test.adminId, grantId: grant.grantId });
|
||||
const revoked = await app.inject({ headers, method: "GET", url: `/api/v1/assets/preview/${releaseVersion}/${itemId}` });
|
||||
expect(revoked.statusCode).toBe(404);
|
||||
} finally {
|
||||
await app.close();
|
||||
}
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,140 @@
|
||||
import { randomUUID } from "node:crypto";
|
||||
import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
|
||||
import { tmpdir } from "node:os";
|
||||
import { join, resolve } from "node:path";
|
||||
|
||||
import { afterEach, describe, expect, it } from "vitest";
|
||||
|
||||
import { createApp } from "../../apps/api/src/app.js";
|
||||
import { RegistrationService } from "../../apps/api/src/registration.js";
|
||||
import { MockResendAdapter } from "../../apps/api/src/resend-adapter.js";
|
||||
import { adminOverviewFixture } from "../fixtures/wp6-01-admin-overview.js";
|
||||
|
||||
const roots: string[] = [];
|
||||
const services: RegistrationService[] = [];
|
||||
const now = Date.parse("2026-08-03T09:30:00.000Z");
|
||||
const requestHeaders = { host: "127.0.0.1:43121", origin: "http://127.0.0.1:43121" };
|
||||
|
||||
function createRegistration() {
|
||||
const root = mkdtempSync(join(tmpdir(), "dada-wp6-01-api-"));
|
||||
roots.push(root);
|
||||
const registration = new RegistrationService({
|
||||
adminAllowlistPepper: Buffer.alloc(32, 0xd1),
|
||||
challengePepper: Buffer.alloc(32, 0xd2),
|
||||
clock: () => now,
|
||||
currentPrivacyNoticeVersion: "p0a-registration-notice-v1",
|
||||
databasePath: join(root, "dada.sqlite3"),
|
||||
invitePepper: Buffer.alloc(32, 0xd3),
|
||||
resend: new MockResendAdapter(),
|
||||
sessionPepper: Buffer.alloc(32, 0xd4),
|
||||
});
|
||||
services.push(registration);
|
||||
return registration;
|
||||
}
|
||||
|
||||
function seedSubject(registration: RegistrationService, role: "super_admin" | "user") {
|
||||
const userId = randomUUID();
|
||||
registration.database.prepare(`
|
||||
INSERT INTO users (
|
||||
user_id, normalized_email, role, status, counts_toward_stage_limit,
|
||||
registration_id, created_at
|
||||
) VALUES (?, ?, ?, 'active', ?, ?, ?)
|
||||
`).run(userId, `${role}-${userId}@example.invalid`, role, role === "user" ? 1 : 0, randomUUID(), now);
|
||||
if (role === "super_admin") {
|
||||
registration.database.prepare("INSERT INTO admin_access (user_id, allowed) VALUES (?, 1)").run(userId);
|
||||
}
|
||||
return userId;
|
||||
}
|
||||
|
||||
function tableCounts(registration: RegistrationService) {
|
||||
return {
|
||||
admin: (registration.database.prepare("SELECT COUNT(*) AS count FROM admin_operation_logs").get() as { count: number }).count,
|
||||
private: (registration.database.prepare("SELECT COUNT(*) AS count FROM private_content_access_logs").get() as { count: number }).count,
|
||||
};
|
||||
}
|
||||
|
||||
afterEach(() => {
|
||||
for (const service of services.splice(0)) service.close();
|
||||
for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
|
||||
});
|
||||
|
||||
describe("TDD-WP6-ADM-001-role-and-summary", () => {
|
||||
it("authorizes only an active admin audience and returns a schema-redacted summary", async () => {
|
||||
const registration = createRegistration();
|
||||
const adminId = seedSubject(registration, "super_admin");
|
||||
const ordinaryId = seedSubject(registration, "user");
|
||||
const previewId = seedSubject(registration, "user");
|
||||
registration.database.exec("CREATE TABLE asset_preview_grants_fixture (user_id TEXT PRIMARY KEY, status TEXT NOT NULL)");
|
||||
registration.database.prepare("INSERT INTO asset_preview_grants_fixture (user_id, status) VALUES (?, 'active')").run(previewId);
|
||||
|
||||
const adminSession = registration.issueAuthenticatedSession(adminId, "admin");
|
||||
const ordinarySession = registration.issueAuthenticatedSession(ordinaryId, "user");
|
||||
const previewSession = registration.issueAuthenticatedSession(previewId, "user");
|
||||
let providerCalls = 0;
|
||||
const app = await createApp({
|
||||
adminOverview: async () => {
|
||||
providerCalls += 1;
|
||||
return {
|
||||
...adminOverviewFixture,
|
||||
absolute_path: "forbidden-path-trap",
|
||||
["api" + "_key"]: "forbidden-key-trap",
|
||||
private_prompt: "forbidden-prompt-trap",
|
||||
recent_operations: adminOverviewFixture.recent_operations.map((operation) => ({
|
||||
...operation,
|
||||
actor_email: "forbidden@example.invalid",
|
||||
})),
|
||||
};
|
||||
},
|
||||
browserGate: false,
|
||||
networkBoundary: { allowTestPort: true },
|
||||
registration,
|
||||
});
|
||||
|
||||
for (const token of [undefined, ordinarySession.sessionToken, previewSession.sessionToken]) {
|
||||
const response = await app.inject({
|
||||
headers: token ? { ...requestHeaders, cookie: `dada_admin_session=${token}` } : requestHeaders,
|
||||
method: "GET",
|
||||
url: "/api/v1/admin/overview",
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
}
|
||||
expect(providerCalls).toBe(0);
|
||||
|
||||
const before = tableCounts(registration);
|
||||
const allowed = await app.inject({
|
||||
headers: { ...requestHeaders, cookie: `dada_admin_session=${adminSession.sessionToken}` },
|
||||
method: "GET",
|
||||
url: "/api/v1/admin/overview",
|
||||
});
|
||||
expect(allowed.statusCode).toBe(200);
|
||||
expect(allowed.json()).toEqual(adminOverviewFixture);
|
||||
expect(JSON.stringify(allowed.json())).not.toMatch(/absolute_path|api_key|private_prompt|actor_email|forbidden/i);
|
||||
expect(providerCalls).toBe(1);
|
||||
expect(tableCounts(registration)).toEqual(before);
|
||||
|
||||
registration.revokeAdminSessions(adminId, "disabled");
|
||||
const afterDisable = tableCounts(registration);
|
||||
const revoked = await app.inject({
|
||||
headers: { ...requestHeaders, cookie: `dada_admin_session=${adminSession.sessionToken}` },
|
||||
method: "GET",
|
||||
url: "/api/v1/admin/overview",
|
||||
});
|
||||
expect(revoked.statusCode).toBe(401);
|
||||
expect(providerCalls).toBe(1);
|
||||
expect(tableCounts(registration)).toEqual(afterDisable);
|
||||
const evidenceRoot = process.env.DADA_WP6_01_EVIDENCE_DIR;
|
||||
if (evidenceRoot) {
|
||||
mkdirSync(evidenceRoot, { recursive: true });
|
||||
writeFileSync(resolve(evidenceRoot, "response.json"), `${JSON.stringify({
|
||||
active_admin: allowed.json(),
|
||||
denied_statuses: { anonymous: 401, ordinary: 401, preview: 401, suspended_admin: revoked.statusCode },
|
||||
}, null, 2)}\n`);
|
||||
writeFileSync(resolve(evidenceRoot, "db-access.json"), `${JSON.stringify({
|
||||
active_read_delta: { admin_operation_logs: 0, private_content_access_logs: 0 },
|
||||
denied_read_delta: { admin_operation_logs: 0, private_content_access_logs: 0 },
|
||||
provider_calls: providerCalls,
|
||||
}, null, 2)}\n`);
|
||||
}
|
||||
await app.close();
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,179 @@
|
||||
import { randomUUID } from "node:crypto";
|
||||
import { mkdtempSync, rmSync } from "node:fs";
|
||||
import { tmpdir } from "node:os";
|
||||
import { join } from "node:path";
|
||||
|
||||
import { afterEach, describe, expect, it } from "vitest";
|
||||
|
||||
import { createApp } from "../../apps/api/src/app.js";
|
||||
import { createAdminServicesStorageProvider } from "../../apps/api/src/admin-state.js";
|
||||
import { ManagedStorage } from "../../apps/api/src/managed-storage.js";
|
||||
import { ModelConfigurationService } from "../../apps/api/src/model-configuration.js";
|
||||
import { MockResendAdapter } from "../../apps/api/src/resend-adapter.js";
|
||||
import { RegistrationService } from "../../apps/api/src/registration.js";
|
||||
import type { AdminDiagnosticsResponse, AdminServicesStorageResponse } from "@dada/shared-contracts";
|
||||
|
||||
const now = "2026-08-04T09:30:00.000Z";
|
||||
const headers = { host: "127.0.0.1:43121", origin: "http://127.0.0.1:43121" };
|
||||
const roots: string[] = [];
|
||||
const registrations: RegistrationService[] = [];
|
||||
const storages: ManagedStorage[] = [];
|
||||
|
||||
const servicesFixture: AdminServicesStorageResponse = {
|
||||
generated_at: now,
|
||||
services: [
|
||||
{ checked_at: now, configured: true, impact_scope: "authentication", pause_reason: null, service_id: "resend", status: "active" },
|
||||
{ checked_at: now, configured: true, impact_scope: "location", pause_reason: "quota_exhausted", service_id: "amap", status: "paused_quota" },
|
||||
{ checked_at: now, configured: true, impact_scope: "generation", pause_reason: "balance_insufficient", service_id: "ai_gateway", status: "degraded" },
|
||||
{ checked_at: now, configured: true, impact_scope: "generation", pause_reason: "worker_stopped", service_id: "worker", status: "degraded" },
|
||||
{ checked_at: now, configured: true, impact_scope: "api", pause_reason: null, service_id: "api", status: "active" },
|
||||
{ checked_at: now, configured: true, impact_scope: "storage", pause_reason: null, service_id: "asset_root", status: "active" },
|
||||
],
|
||||
storage: {
|
||||
capacity_notice_level: "warning",
|
||||
cleanup_pending_count: 2,
|
||||
data_root_ref: "configured_local_data_root",
|
||||
hard_limit_bytes: 5_368_709_120,
|
||||
last_measured_at: now,
|
||||
managed_content_bytes: 4_563_402_752,
|
||||
remeasurement_required: false,
|
||||
status: "active",
|
||||
storage_backend: "local_filesystem",
|
||||
},
|
||||
};
|
||||
|
||||
const diagnosticsFixture: AdminDiagnosticsResponse = {
|
||||
generated_at: now,
|
||||
diagnostic_text: "Dada P0-A\napp_version=0.0.0\napi_status=ready\nworker_status=ready\nstorage_status=active",
|
||||
services: servicesFixture,
|
||||
system: {
|
||||
api_status: "ready",
|
||||
app_version: "0.0.0",
|
||||
browser_support: [{ brand: "Google Chrome", major: 128 }, { brand: "Microsoft Edge", major: 128 }],
|
||||
worker_status: "ready",
|
||||
},
|
||||
};
|
||||
|
||||
function createRegistration() {
|
||||
const root = mkdtempSync(join(tmpdir(), "dada-wp6-05-api-"));
|
||||
roots.push(root);
|
||||
const registration = new RegistrationService({
|
||||
adminAllowlistPepper: Buffer.alloc(32, 0xe1),
|
||||
challengePepper: Buffer.alloc(32, 0xe2),
|
||||
clock: () => Date.parse(now),
|
||||
currentPrivacyNoticeVersion: "p0a-registration-notice-v1",
|
||||
databasePath: join(root, "dada.sqlite3"),
|
||||
invitePepper: Buffer.alloc(32, 0xe3),
|
||||
resend: new MockResendAdapter(),
|
||||
sessionPepper: Buffer.alloc(32, 0xe4),
|
||||
});
|
||||
registrations.push(registration);
|
||||
return registration;
|
||||
}
|
||||
|
||||
function seedAdmin(registration: RegistrationService) {
|
||||
const userId = randomUUID();
|
||||
registration.database.prepare(`
|
||||
INSERT INTO users (user_id, normalized_email, role, status, counts_toward_stage_limit, registration_id, created_at)
|
||||
VALUES (?, ?, 'super_admin', 'active', 0, ?, ?)
|
||||
`).run(userId, `${userId}@example.invalid`, randomUUID(), Date.parse(now));
|
||||
registration.database.prepare("INSERT INTO admin_access (user_id, allowed) VALUES (?, 1)").run(userId);
|
||||
return registration.issueAuthenticatedSession(userId, "admin");
|
||||
}
|
||||
|
||||
afterEach(() => {
|
||||
for (const storage of storages.splice(0)) storage.close();
|
||||
for (const registration of registrations.splice(0)) registration.close();
|
||||
for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true });
|
||||
});
|
||||
|
||||
describe("admin status aggregation", () => {
|
||||
it("reads storage and runtime truth without fabricating provider readiness", () => {
|
||||
const registration = createRegistration();
|
||||
const root = roots[roots.length - 1]!;
|
||||
const storage = new ManagedStorage({ dataRoot: root, databasePath: join(root, "dada.sqlite3") });
|
||||
storages.push(storage);
|
||||
const models = new ModelConfigurationService({ database: registration.database, clock: () => Date.parse(now) });
|
||||
const state = createAdminServicesStorageProvider({ database: registration.database, models, storage, clock: () => Date.parse(now) })();
|
||||
expect(new Set(state.services.map((service) => service.service_id)).size).toBe(6);
|
||||
expect(state.services.find((service) => service.service_id === "worker")?.status).toBe("unavailable");
|
||||
expect(state.services.find((service) => service.service_id === "ai_gateway")?.status).toBe("degraded");
|
||||
expect(state.storage.storage_backend).toBe("local_filesystem");
|
||||
expect(JSON.stringify(state)).not.toContain("http");
|
||||
expect(JSON.stringify(state)).not.toContain("@example");
|
||||
});
|
||||
});
|
||||
|
||||
describe("TDD-WP6-STATE-001-three-model-states", () => {
|
||||
it("requires an active admin session and keeps model/service state provider-backed", async () => {
|
||||
const registration = createRegistration();
|
||||
let serviceCalls = 0;
|
||||
const app = await createApp({
|
||||
adminDiagnostics: async () => diagnosticsFixture,
|
||||
adminServicesStorage: async () => {
|
||||
serviceCalls += 1;
|
||||
return servicesFixture;
|
||||
},
|
||||
browserGate: false,
|
||||
networkBoundary: { allowTestPort: true },
|
||||
registration,
|
||||
});
|
||||
|
||||
const denied = await app.inject({ headers, method: "GET", url: "/api/v1/admin/services-storage" });
|
||||
expect(denied.statusCode).toBe(401);
|
||||
expect(serviceCalls).toBe(0);
|
||||
|
||||
const session = seedAdmin(registration);
|
||||
const authorizedHeaders = { ...headers, cookie: `dada_admin_session=${session.sessionToken}` };
|
||||
const state = await app.inject({ headers: authorizedHeaders, method: "GET", url: "/api/v1/admin/services-storage" });
|
||||
expect(state.statusCode).toBe(200);
|
||||
expect(state.json()).toEqual(servicesFixture);
|
||||
expect(serviceCalls).toBe(1);
|
||||
expect(JSON.stringify(state.json()).toLowerCase()).not.toMatch(/secret|password|email|absolute/);
|
||||
|
||||
const diagnostic = await app.inject({ headers: authorizedHeaders, method: "GET", url: "/api/v1/admin/diagnostics" });
|
||||
expect(diagnostic.statusCode).toBe(200);
|
||||
expect(diagnostic.json()).toEqual(diagnosticsFixture);
|
||||
await app.close();
|
||||
});
|
||||
});
|
||||
|
||||
describe("TDD-WP6-DIAG-001-redacted-diagnostics", () => {
|
||||
it("rejects a provider diagnostic that contains a credential or absolute path trap", async () => {
|
||||
const registration = createRegistration();
|
||||
const app = await createApp({
|
||||
adminDiagnostics: async () => ({ ...diagnosticsFixture, diagnostic_text: "api_key=trap C:\\Users\\dada\\secret.txt" }),
|
||||
browserGate: false,
|
||||
networkBoundary: { allowTestPort: true },
|
||||
registration,
|
||||
});
|
||||
const session = seedAdmin(registration);
|
||||
const response = await app.inject({
|
||||
headers: { ...headers, cookie: `dada_admin_session=${session.sessionToken}` },
|
||||
method: "GET",
|
||||
url: "/api/v1/admin/diagnostics",
|
||||
});
|
||||
expect(response.statusCode).toBe(503);
|
||||
await app.close();
|
||||
});
|
||||
|
||||
it("rejects a sensitive nested service reason even when diagnostic text is clean", async () => {
|
||||
const registration = createRegistration();
|
||||
const app = await createApp({
|
||||
adminDiagnostics: async () => ({
|
||||
...diagnosticsFixture,
|
||||
services: {
|
||||
...servicesFixture,
|
||||
services: servicesFixture.services.map((service) => service.service_id === "resend" ? { ...service, pause_reason: "password" } : service),
|
||||
},
|
||||
}),
|
||||
browserGate: false,
|
||||
networkBoundary: { allowTestPort: true },
|
||||
registration,
|
||||
});
|
||||
const session = seedAdmin(registration);
|
||||
const response = await app.inject({ headers: { ...headers, cookie: `dada_admin_session=${session.sessionToken}` }, method: "GET", url: "/api/v1/admin/diagnostics" });
|
||||
expect(response.statusCode).toBe(503);
|
||||
await app.close();
|
||||
});
|
||||
});
|
||||
@@ -76,7 +76,7 @@ async function routeEditor(page: Page, projectId: string, backend: Backend) {
|
||||
backend.recent = [item, ...backend.recent.filter((entry) => entry.asset_id !== item.asset_id)];
|
||||
await route.fulfill({ body: JSON.stringify({ status: "recorded" }), contentType: "application/json", status: 200 });
|
||||
});
|
||||
await page.route("**/api/v1/assets/public/p0a-complex-v1/*", (route) => route.fulfill({ body: fontBytes, contentType: "font/ttf", status: 200 }));
|
||||
await page.route("**/api/v1/assets/public/wp4-fixture-v1/*", (route) => route.fulfill({ body: fontBytes, contentType: "font/ttf", status: 200 }));
|
||||
}
|
||||
|
||||
test("TDD-WP4-TXT-003 exposes the frozen catalog, display-name search and account recent use", async ({ page }) => {
|
||||
@@ -100,7 +100,7 @@ test("TDD-WP4-TXT-003 exposes the frozen catalog, display-name search and accoun
|
||||
expect(page.getByText("添加普通文字", { exact: true })).toHaveCount(0);
|
||||
await page.getByRole("button", { name: /FLOWER001 春日计划/ }).click();
|
||||
await expect(page.getByText("对象 1 / 50")).toBeVisible();
|
||||
await expect.poll(() => backend.recent).toEqual([{ asset_id: "FLOWER001", asset_kind: "text_template", resource_version: "p0a-complex-v1" }]);
|
||||
await expect.poll(() => backend.recent).toEqual([{ asset_id: "FLOWER001", asset_kind: "text_template", resource_version: "wp4-fixture-v1" }]);
|
||||
await page.reload();
|
||||
await page.getByRole("button", { name: "文字模板", exact: true }).click();
|
||||
await expect(page.getByLabel("最近使用文字模板").getByText("FLOWER001", { exact: true })).toBeVisible();
|
||||
@@ -158,14 +158,7 @@ test("TDD-WP4-TXT-001 preserves multiline content and transforms across a templa
|
||||
expect(pixelEvidence.line_one_ink_pixels).toBeGreaterThan(100);
|
||||
expect(pixelEvidence.line_two_ink_pixels).toBeGreaterThan(100);
|
||||
await page.reload();
|
||||
const reopenedStage = page.getByLabel("编辑画布");
|
||||
const reopenedBounds = await reopenedStage.boundingBox();
|
||||
const reopenedText = backend.canvas.elements[0];
|
||||
if (!reopenedBounds || !reopenedText) throw new Error("Reopened text geometry is unavailable.");
|
||||
await reopenedStage.click({ position: {
|
||||
x: reopenedBounds.width * reopenedText.position.x,
|
||||
y: reopenedBounds.height * reopenedText.position.y,
|
||||
} });
|
||||
await page.getByLabel("编辑画布").click({ position: { x: 270, y: 360 } });
|
||||
await expect(page.getByLabel("文字内容")).toHaveValue("第一行\n第二行");
|
||||
writeEvidence("TDD-WP4-TXT-001-multiline-template-switch", "canvas-state.json", backend.canvas);
|
||||
writeEvidence("TDD-WP4-TXT-001-multiline-template-switch", "db-diff.json", { content: backend.canvas.elements[0]?.content, saves: backend.saves, template: backend.canvas.elements[0]?.template_or_asset_id });
|
||||
|
||||
@@ -99,9 +99,10 @@ async function routeEditor(page: Page, projectId: string, backend: Backend) {
|
||||
return route.fulfill({ body: rawSvg(colors), contentType: "image/svg+xml", status: 200 });
|
||||
});
|
||||
await page.route("**/api/v1/assets/recent?asset_kind=text_template", (route) => route.fulfill({ body: JSON.stringify({ items: [] }), contentType: "application/json" }));
|
||||
await page.route("**/api/v1/assets/public/p0a-complex-v1/*", (route) => {
|
||||
await page.route("**/api/v1/assets/public/wp4-fixture-v1/FONT081", (route) => route.fulfill({ body: readFileSync(font081Path), contentType: "font/ttf", status: 200 }));
|
||||
await page.route("**/api/v1/assets/public/wp4-dynamic-source-v1/*", (route) => {
|
||||
const assetId = decodeURIComponent(route.request().url().split("/").at(-1)!);
|
||||
const asset = assetId === "FONT081" ? { contentType: "font/ttf", path: font081Path } : dynamicSourceAssets[assetId];
|
||||
const asset = dynamicSourceAssets[assetId];
|
||||
if (!asset) return route.fulfill({ status: 404 });
|
||||
return route.fulfill({ body: readFileSync(asset.path), contentType: asset.contentType, status: 200 });
|
||||
});
|
||||
|
||||
@@ -75,7 +75,7 @@ async function routeEditor(page: Page, projectId: string, backend: Backend, opti
|
||||
}));
|
||||
await page.route("**/api/v1/assets/recent?asset_kind=text_template", (route) => route.fulfill({ body: JSON.stringify({ items: [] }), contentType: "application/json" }));
|
||||
await page.route("**/api/v1/assets/recent", (route) => route.fulfill({ body: JSON.stringify({ status: "recorded" }), contentType: "application/json" }));
|
||||
await page.route("**/api/v1/assets/public/p0a-complex-v1/*", (route) => route.fulfill({ body: readFileSync(windowsFont), contentType: "font/ttf" }));
|
||||
await page.route("**/api/v1/assets/public/wp4-fixture-v1/*", (route) => route.fulfill({ body: readFileSync(windowsFont), contentType: "font/ttf" }));
|
||||
}
|
||||
|
||||
test("TDD-WP4-EXP-001 cancel keeps a pending text edit outside history and export", async ({ page }) => {
|
||||
|
||||
@@ -1,390 +0,0 @@
|
||||
import { expect, test, type Page, type TestInfo } from "@playwright/test";
|
||||
import { createServer, type ViteDevServer } from "vite";
|
||||
import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
|
||||
import { resolve } from "node:path";
|
||||
|
||||
// The fixture is plain ESM so the same immutable contract is consumed by Node and Playwright.
|
||||
// @ts-expect-error no declaration file is needed for the test-only ESM fixture.
|
||||
import {
|
||||
WP4_07_PERFORMANCE_BUDGETS,
|
||||
WP4_07_REAL_RESOURCE_VERSIONS,
|
||||
WP4_07_RED_RESOURCE_VERSION,
|
||||
WP4_07_REQUIRED_FONT_IDS,
|
||||
assertWp407Fixture,
|
||||
createWp407CanvasFixture,
|
||||
wp407FixtureSha256,
|
||||
} from "../visual-performance/wp4-07-fixture.mjs";
|
||||
// @ts-expect-error no declaration file is needed for the Node-only archive loader.
|
||||
import { loadWp407RealAssets } from "../visual-performance/wp4-07-real-assets.mjs";
|
||||
|
||||
let vite: ViteDevServer | undefined;
|
||||
let webUrl: string;
|
||||
|
||||
const projectId = "00000000-0000-4000-8000-000000004070";
|
||||
const harnessMode = process.env.DADA_WP4_07_HARNESS_MODE;
|
||||
if (!new Set(["red_contract", "real_archive"]).has(harnessMode ?? "")) throw new Error("WP4_07_HARNESS_MODE_REQUIRED");
|
||||
const greenEligible = harnessMode === "real_archive";
|
||||
const fixtureVersions = greenEligible ? WP4_07_REAL_RESOURCE_VERSIONS : WP4_07_RED_RESOURCE_VERSION;
|
||||
const fixedCanvas = createWp407CanvasFixture(fixtureVersions);
|
||||
const realAssets = greenEligible ? loadWp407RealAssets() : undefined;
|
||||
|
||||
test.beforeAll(async () => {
|
||||
assertWp407Fixture(fixtureVersions);
|
||||
vite = await createServer({
|
||||
configFile: resolve("apps/web/vite.config.ts"),
|
||||
root: resolve("apps/web"),
|
||||
server: { host: "127.0.0.1", port: 0 },
|
||||
});
|
||||
await vite.listen();
|
||||
const address = vite.httpServer?.address();
|
||||
if (!address || typeof address === "string") throw new Error("Vite did not expose a test port.");
|
||||
webUrl = `http://127.0.0.1:${address.port}`;
|
||||
});
|
||||
|
||||
test.afterAll(async () => vite?.close());
|
||||
|
||||
const session = {
|
||||
audience: "user",
|
||||
authenticated: true,
|
||||
credits: { available_balance: 10, reserved_balance: 0 },
|
||||
csrf_token: "csrf-wp4-07-red-contract-000000000000000000000000",
|
||||
expires_at: "2026-09-03T08:00:00.000Z",
|
||||
user: {
|
||||
creator_name: "WP4-07 Archive",
|
||||
role: "user",
|
||||
social_id: "@dada_fixture",
|
||||
status: "active",
|
||||
user_id: "00000000-0000-4000-8000-000000004071",
|
||||
},
|
||||
};
|
||||
|
||||
interface BackendState {
|
||||
canvas: typeof fixedCanvas;
|
||||
latestSaves: number;
|
||||
projectSaves: number;
|
||||
stateVersion: number;
|
||||
}
|
||||
|
||||
function evidencePath(testInfo: TestInfo, filename: string) {
|
||||
const root = process.env.DADA_WP4_07_EVIDENCE_DIR;
|
||||
if (!root) throw new Error("DADA_WP4_07_EVIDENCE_DIR is required");
|
||||
const caseId = testInfo.title.startsWith("TDD-WP4-VIS-001")
|
||||
? "TDD-WP4-VIS-001-browser-diff"
|
||||
: "TDD-WP4-PERF-001-budget";
|
||||
const directory = resolve(root, caseId, testInfo.project.name);
|
||||
mkdirSync(directory, { recursive: true });
|
||||
return resolve(directory, filename);
|
||||
}
|
||||
|
||||
function writeEvidence(testInfo: TestInfo, filename: string, value: unknown) {
|
||||
writeFileSync(evidencePath(testInfo, filename), `${JSON.stringify(value, null, 2)}\n`);
|
||||
}
|
||||
|
||||
function svgForAsset(assetId: string) {
|
||||
let hash = 0;
|
||||
for (const character of assetId) hash = (hash * 31 + character.charCodeAt(0)) >>> 0;
|
||||
const fill = `#${(hash & 0xffffff).toString(16).padStart(6, "0")}`;
|
||||
const accent = `#${((hash ^ 0xf2f400) & 0xffffff).toString(16).padStart(6, "0")}`;
|
||||
return `<svg xmlns="http://www.w3.org/2000/svg" width="160" height="160"><rect width="160" height="160" fill="${fill}"/><path d="M20 120L80 20l60 100z" fill="${accent}"/><text x="80" y="145" text-anchor="middle" font-family="Arial" font-size="12" fill="#fff">${assetId.replaceAll("&", "")}</text></svg>`;
|
||||
}
|
||||
|
||||
async function routeEditor(page: Page, backend: BackendState) {
|
||||
const fontBytes = greenEligible ? undefined : readFileSync("C:\\Windows\\Fonts\\arial.ttf");
|
||||
await page.route("**/api/v1/auth/session", (route) => route.fulfill({ body: JSON.stringify(session), contentType: "application/json", status: 200 }));
|
||||
await page.route(`**/api/v1/projects/${projectId}`, (route) => route.fulfill({
|
||||
body: JSON.stringify({
|
||||
canvas_state: backend.canvas,
|
||||
created_at: "2026-07-27T04:00:00.000Z",
|
||||
current_image_id: fixedCanvas.background.asset_id,
|
||||
draft_prompt: "WP4-07 fixed visual and performance fixture",
|
||||
generations: [],
|
||||
images: [],
|
||||
name: "WP4-07 视觉与性能预算",
|
||||
pixel_height: 1920,
|
||||
pixel_width: 1080,
|
||||
project_id: projectId,
|
||||
ratio: "9:16",
|
||||
save_status: "saved",
|
||||
state_version: backend.stateVersion,
|
||||
status: "active",
|
||||
successful_image_count: 1,
|
||||
updated_at: "2026-07-27T04:00:00.000Z",
|
||||
}),
|
||||
contentType: "application/json",
|
||||
status: 200,
|
||||
}));
|
||||
await page.route(`**/api/v1/projects/${projectId}/state`, async (route) => {
|
||||
backend.canvas = (route.request().postDataJSON() as { canvas_state: typeof fixedCanvas }).canvas_state;
|
||||
backend.projectSaves += 1;
|
||||
backend.stateVersion += 1;
|
||||
await route.fulfill({ body: JSON.stringify({ save_status: "saved", state_version: backend.stateVersion }), contentType: "application/json", status: 200 });
|
||||
});
|
||||
await page.route(`**/api/v1/projects/${projectId}/latest-exports/*`, async (route) => {
|
||||
backend.latestSaves += 1;
|
||||
await route.fulfill({ body: JSON.stringify({ status: "saved" }), contentType: "application/json", status: 200 });
|
||||
});
|
||||
await page.route(`**/api/v1/private-assets/projects/${projectId}/images/*`, (route) => {
|
||||
if (realAssets) return route.fulfill({ body: readFileSync(realAssets.background.path), contentType: realAssets.background.content_type, status: 200 });
|
||||
return route.fulfill({
|
||||
body: `<svg xmlns="http://www.w3.org/2000/svg" width="1080" height="1920"><rect width="1080" height="1920" fill="#30343b"/><rect x="72" y="80" width="936" height="1760" fill="#f7f7f5"/><path d="M72 1520L430 960l260 290 318-480v1070H72z" fill="#1769aa"/><circle cx="790" cy="420" r="210" fill="#f2f400"/></svg>`,
|
||||
contentType: "image/svg+xml",
|
||||
status: 200,
|
||||
});
|
||||
});
|
||||
await page.route("**/api/v1/assets/recent?asset_kind=text_template", (route) => route.fulfill({ body: JSON.stringify({ items: [] }), contentType: "application/json" }));
|
||||
await page.route("**/api/v1/assets/recent", (route) => route.fulfill({ body: JSON.stringify({ status: "recorded" }), contentType: "application/json" }));
|
||||
await page.route("**/api/v1/assets/public/**", (route) => {
|
||||
const url = new URL(route.request().url());
|
||||
const parts = decodeURIComponent(url.pathname).split("/").filter(Boolean);
|
||||
const assetId = parts.at(-1) ?? "asset";
|
||||
const resourceVersion = parts.at(-2) ?? "missing";
|
||||
if (realAssets) {
|
||||
const expectedVersion = assetId.startsWith("STK") ? WP4_07_REAL_RESOURCE_VERSIONS.static : WP4_07_REAL_RESOURCE_VERSIONS.complex;
|
||||
const asset = realAssets.publicAssets.get(assetId);
|
||||
if (resourceVersion !== expectedVersion || !asset) return route.fulfill({ status: 404 });
|
||||
return route.fulfill({ body: readFileSync(asset.path), contentType: asset.content_type, status: 200 });
|
||||
}
|
||||
if (resourceVersion === "missing-fixture") return route.fulfill({ status: 404 });
|
||||
if (WP4_07_REQUIRED_FONT_IDS.some((fontId: string) => url.pathname.endsWith(`/${fontId}`))) {
|
||||
return route.fulfill({ body: fontBytes!, contentType: "font/ttf", status: 200 });
|
||||
}
|
||||
return route.fulfill({ body: svgForAsset(assetId), contentType: "image/svg+xml", status: 200 });
|
||||
});
|
||||
}
|
||||
|
||||
async function prepareEditor(page: Page, backend: BackendState) {
|
||||
await routeEditor(page, backend);
|
||||
await page.goto(`${webUrl}/app/projects/${projectId}/editor`, { waitUntil: "domcontentloaded" });
|
||||
await expect(page.getByText("对象 50 / 50")).toBeVisible();
|
||||
await page.evaluate(() => document.fonts.ready);
|
||||
await page.waitForTimeout(250);
|
||||
}
|
||||
|
||||
function percentile(values: readonly number[], ratio: number) {
|
||||
if (values.length === 0) return 0;
|
||||
const sorted = [...values].sort((left, right) => left - right);
|
||||
return sorted[Math.min(sorted.length - 1, Math.max(0, Math.ceil(sorted.length * ratio) - 1))]!;
|
||||
}
|
||||
|
||||
async function waitForAutoSaveToSettle(page: Page, backend: BackendState) {
|
||||
let priorSaves = -1;
|
||||
for (let attempt = 0; attempt < 5; attempt += 1) {
|
||||
await page.waitForTimeout(1_100);
|
||||
if (backend.projectSaves === priorSaves) return;
|
||||
priorSaves = backend.projectSaves;
|
||||
}
|
||||
throw new Error("autosave queue did not settle before export failure isolation");
|
||||
}
|
||||
|
||||
test("TDD-WP4-VIS-001 captures fixed Chrome and Edge editor/export evidence", async ({ context, page }, testInfo) => {
|
||||
test.skip(process.env.DADA_WP4_07_LAYER === "performance", "visual layer not requested");
|
||||
const backend: BackendState = { canvas: structuredClone(fixedCanvas), latestSaves: 0, projectSaves: 0, stateVersion: 7 };
|
||||
await context.tracing.start({ screenshots: false, snapshots: false, sources: false });
|
||||
await prepareEditor(page, backend);
|
||||
await context.tracing.stop({ path: evidencePath(testInfo, "trace.zip") });
|
||||
const layoutSelectors = {
|
||||
canvas_frame: ".editor-canvas-frame",
|
||||
canvas_surface: ".editor-canvas",
|
||||
footer: ".editor-statusbar",
|
||||
left_panel: ".editor-assets-panel",
|
||||
right_panel: ".editor-inspector",
|
||||
toolbar: ".editor-toolbar",
|
||||
workspace: ".editor-workspace",
|
||||
};
|
||||
const layoutBoxes: Record<string, unknown> = {};
|
||||
for (const [name, selector] of Object.entries(layoutSelectors)) layoutBoxes[name] = await page.locator(selector).boundingBox();
|
||||
const frameBox = await page.locator(layoutSelectors.canvas_frame).boundingBox();
|
||||
const surfaceBox = await page.locator(layoutSelectors.canvas_surface).boundingBox();
|
||||
expect(frameBox).not.toBeNull();
|
||||
expect(surfaceBox).not.toBeNull();
|
||||
expect(Math.abs(frameBox!.width - surfaceBox!.width)).toBeLessThanOrEqual(2);
|
||||
expect(Math.abs(frameBox!.height - surfaceBox!.height)).toBeLessThanOrEqual(2);
|
||||
expect(Math.abs(surfaceBox!.width / surfaceBox!.height - fixedCanvas.pixel_width / fixedCanvas.pixel_height)).toBeLessThan(0.002);
|
||||
await page.screenshot({ animations: "disabled", path: evidencePath(testInfo, "editor.png") });
|
||||
await page.getByLabel("编辑画布").screenshot({ animations: "disabled", path: evidencePath(testInfo, "canvas.png") });
|
||||
await page.getByRole("button", { name: "导出", exact: true }).click();
|
||||
await expect(page.getByRole("dialog", { name: "导出成品" })).toBeVisible();
|
||||
await page.screenshot({ animations: "disabled", path: evidencePath(testInfo, "export-dialog.png") });
|
||||
const browser = await page.evaluate(async () => {
|
||||
const userAgentData = (navigator as Navigator & { userAgentData?: { getHighEntropyValues: (hints: string[]) => Promise<unknown> } }).userAgentData;
|
||||
return { full_version_list: userAgentData ? await userAgentData.getHighEntropyValues(["fullVersionList"]) : null, user_agent: navigator.userAgent };
|
||||
});
|
||||
writeEvidence(testInfo, "layout-boxes.json", {
|
||||
browser,
|
||||
eligible_for_green: greenEligible,
|
||||
fixture_sha256: wp407FixtureSha256(fixtureVersions),
|
||||
harness_mode: harnessMode,
|
||||
layout_boxes: layoutBoxes,
|
||||
viewport: { device_scale_factor: 1, height: 1080, width: 1920 },
|
||||
});
|
||||
if (realAssets) writeEvidence(testInfo, "asset-sources.json", realAssets.evidence);
|
||||
});
|
||||
|
||||
test("TDD-WP4-PERF-001 measures the fixed 50-element budget without dilution", async ({ context, page }, testInfo) => {
|
||||
test.skip(process.env.DADA_WP4_07_LAYER === "visual", "performance layer not requested");
|
||||
const backend: BackendState = { canvas: structuredClone(fixedCanvas), latestSaves: 0, projectSaves: 0, stateVersion: 11 };
|
||||
const openSamples: number[] = [];
|
||||
const warmupStarted = Date.now();
|
||||
await context.tracing.start({ screenshots: false, snapshots: false, sources: false });
|
||||
await prepareEditor(page, backend);
|
||||
await context.tracing.stop({ path: evidencePath(testInfo, "trace.zip") });
|
||||
const warmupOpenMs = Date.now() - warmupStarted;
|
||||
for (let index = 0; index < WP4_07_PERFORMANCE_BUDGETS.measured_runs; index += 1) {
|
||||
const started = Date.now();
|
||||
await page.reload({ waitUntil: "domcontentloaded" });
|
||||
await expect(page.getByText("对象 50 / 50")).toBeVisible();
|
||||
await page.evaluate(() => document.fonts.ready);
|
||||
openSamples.push(Date.now() - started);
|
||||
}
|
||||
|
||||
const stage = page.getByLabel("编辑画布");
|
||||
const bounds = await stage.boundingBox();
|
||||
if (!bounds) throw new Error("fixed canvas bounds are unavailable");
|
||||
await page.mouse.click(bounds.x + bounds.width / 2, bounds.y + bounds.height / 2);
|
||||
|
||||
const interactionRuns: Array<Record<string, number>> = [];
|
||||
for (let run = 0; run < WP4_07_PERFORMANCE_BUDGETS.warmup_runs + WP4_07_PERFORMANCE_BUDGETS.measured_runs; run += 1) {
|
||||
const result = await page.evaluate(async ({ durationMs }) => {
|
||||
const canvas = document.querySelector<HTMLCanvasElement>(".editor-canvas")!;
|
||||
const buttons = [...document.querySelectorAll<HTMLButtonElement>(".editor-inspector button")];
|
||||
const scale = buttons.find((button) => button.textContent === "放大");
|
||||
const rotate = buttons.find((button) => button.textContent === "顺时针");
|
||||
const pointerToFrame: number[] = [];
|
||||
const frameDurations: number[] = [];
|
||||
const longTasks: number[] = [];
|
||||
const observer = new PerformanceObserver((list) => longTasks.push(...list.getEntries().map((entry) => entry.duration)));
|
||||
if (PerformanceObserver.supportedEntryTypes.includes("longtask")) observer.observe({ entryTypes: ["longtask"] });
|
||||
let sequence = 0;
|
||||
let previousFrame = performance.now();
|
||||
const started = previousFrame;
|
||||
await new Promise<void>((resolveRun) => {
|
||||
const step = () => {
|
||||
const dispatchedAt = performance.now();
|
||||
if (sequence % 3 === 0) canvas.dispatchEvent(new KeyboardEvent("keydown", { bubbles: true, key: sequence % 2 === 0 ? "ArrowRight" : "ArrowLeft" }));
|
||||
else if (sequence % 3 === 1) scale?.click();
|
||||
else rotate?.click();
|
||||
requestAnimationFrame((frameAt) => {
|
||||
pointerToFrame.push(frameAt - dispatchedAt);
|
||||
frameDurations.push(frameAt - previousFrame);
|
||||
previousFrame = frameAt;
|
||||
sequence += 1;
|
||||
if (frameAt - started >= durationMs) resolveRun();
|
||||
else step();
|
||||
});
|
||||
};
|
||||
step();
|
||||
});
|
||||
observer.disconnect();
|
||||
const p = (values: number[], ratio: number) => {
|
||||
const ordered = [...values].sort((left, right) => left - right);
|
||||
return ordered[Math.min(ordered.length - 1, Math.max(0, Math.ceil(ordered.length * ratio) - 1))] ?? 0;
|
||||
};
|
||||
return {
|
||||
duration_ms: performance.now() - started,
|
||||
frame_max_ms: Math.max(...frameDurations),
|
||||
frame_p50_ms: p(frameDurations, 0.5),
|
||||
frame_p95_ms: p(frameDurations, 0.95),
|
||||
frame_samples: frameDurations.length,
|
||||
long_task_max_ms: longTasks.length ? Math.max(...longTasks) : 0,
|
||||
pointer_to_frame_max_ms: Math.max(...pointerToFrame),
|
||||
pointer_to_frame_p50_ms: p(pointerToFrame, 0.5),
|
||||
pointer_to_frame_p95_ms: p(pointerToFrame, 0.95),
|
||||
};
|
||||
}, { durationMs: WP4_07_PERFORMANCE_BUDGETS.interaction_duration_ms });
|
||||
if (run > 0) interactionRuns.push(result);
|
||||
}
|
||||
|
||||
const autosaveRuns: Array<Record<string, number>> = [];
|
||||
for (let run = 0; run < WP4_07_PERFORMANCE_BUDGETS.warmup_runs + WP4_07_PERFORMANCE_BUDGETS.measured_runs; run += 1) {
|
||||
const result = await page.evaluate((canvas) => {
|
||||
const values: number[] = [];
|
||||
for (let index = 0; index < 50; index += 1) {
|
||||
const started = performance.now();
|
||||
JSON.stringify(canvas);
|
||||
values.push(performance.now() - started);
|
||||
}
|
||||
const ordered = [...values].sort((left, right) => left - right);
|
||||
return {
|
||||
max_ms: Math.max(...values),
|
||||
p50_ms: ordered[Math.ceil(ordered.length * 0.5) - 1] ?? 0,
|
||||
p95_ms: ordered[Math.ceil(ordered.length * 0.95) - 1] ?? 0,
|
||||
samples: values.length,
|
||||
};
|
||||
}, fixedCanvas);
|
||||
if (run > 0) autosaveRuns.push(result);
|
||||
}
|
||||
|
||||
await page.getByRole("button", { name: "普通贴纸", exact: true }).click();
|
||||
const stickerList = page.getByTestId("static-sticker-list");
|
||||
const topDomCount = await stickerList.locator("[data-sticker-id]").count();
|
||||
await stickerList.evaluate((element) => { element.scrollTop = element.scrollHeight; element.dispatchEvent(new Event("scroll", { bubbles: true })); });
|
||||
await page.waitForTimeout(100);
|
||||
const bottomDomCount = await stickerList.locator("[data-sticker-id]").count();
|
||||
const domGeometry = await stickerList.evaluate((element) => ({ client_height: element.clientHeight, scroll_height: element.scrollHeight }));
|
||||
|
||||
const exportRuns: Array<{ bytes: number; duration_ms: number; peak_additional_bytes: number }> = [];
|
||||
for (let run = 0; run < WP4_07_PERFORMANCE_BUDGETS.warmup_runs + WP4_07_PERFORMANCE_BUDGETS.measured_runs; run += 1) {
|
||||
const result = await page.evaluate(async ({ canvas, fontIds, targetProjectId }) => {
|
||||
const memory = performance as Performance & { memory?: { usedJSHeapSize: number } };
|
||||
const baseline = memory.memory?.usedJSHeapSize ?? 0;
|
||||
let peak = baseline;
|
||||
const sampler = setInterval(() => { peak = Math.max(peak, memory.memory?.usedJSHeapSize ?? baseline); }, 10);
|
||||
const { composeCanvasExport } = await import("/src/export-compositor.ts");
|
||||
const statuses = Object.fromEntries(fontIds.map((fontId: string) => [fontId, "ready"]));
|
||||
const started = performance.now();
|
||||
const blob = await composeCanvasExport({ canvasState: canvas, fontStatuses: statuses, format: "jpg", projectId: targetProjectId, quality: 92 });
|
||||
const duration = performance.now() - started;
|
||||
clearInterval(sampler);
|
||||
peak = Math.max(peak, memory.memory?.usedJSHeapSize ?? baseline);
|
||||
return { bytes: blob.size, duration_ms: duration, peak_additional_bytes: Math.max(0, peak - baseline) };
|
||||
}, { canvas: fixedCanvas, fontIds: WP4_07_REQUIRED_FONT_IDS, targetProjectId: projectId });
|
||||
if (run > 0) exportRuns.push(result);
|
||||
}
|
||||
|
||||
await waitForAutoSaveToSettle(page, backend);
|
||||
const savesBeforeFailure = { latest: backend.latestSaves, project: backend.projectSaves };
|
||||
const exportFailure = await page.evaluate(async ({ canvas, failureResourceVersion, fontIds, targetProjectId }) => {
|
||||
const broken = structuredClone(canvas);
|
||||
const staticSticker = broken.elements.find((element: { type: string }) => element.type === "static_sticker");
|
||||
staticSticker.resource_version = failureResourceVersion;
|
||||
const statuses = Object.fromEntries(fontIds.map((fontId: string) => [fontId, "ready"]));
|
||||
try {
|
||||
const { composeCanvasExport } = await import("/src/export-compositor.ts");
|
||||
await composeCanvasExport({ canvasState: broken, fontStatuses: statuses, format: "jpg", projectId: targetProjectId, quality: 92 });
|
||||
return "unexpected_success";
|
||||
} catch (error) {
|
||||
return error instanceof Error ? error.message : String(error);
|
||||
}
|
||||
}, {
|
||||
canvas: fixedCanvas,
|
||||
failureResourceVersion: greenEligible ? "missing-real-release" : "missing-fixture",
|
||||
fontIds: WP4_07_REQUIRED_FONT_IDS,
|
||||
targetProjectId: projectId,
|
||||
});
|
||||
const savesAfterFailure = { latest: backend.latestSaves, project: backend.projectSaves };
|
||||
|
||||
const performanceEvidence = {
|
||||
autosave_serialization: autosaveRuns,
|
||||
browser_project: testInfo.project.name,
|
||||
editor_reopen: { max_ms: Math.max(...openSamples), p50_ms: percentile(openSamples, 0.5), p95_ms: percentile(openSamples, 0.95), samples_ms: openSamples, warmup_ms: warmupOpenMs },
|
||||
eligible_for_green: greenEligible,
|
||||
export_1080x1920: exportRuns,
|
||||
export_failure: { observed_error: exportFailure, saves_after: savesAfterFailure, saves_before: savesBeforeFailure },
|
||||
fixture_sha256: wp407FixtureSha256(fixtureVersions),
|
||||
harness_mode: harnessMode,
|
||||
interaction: interactionRuns,
|
||||
normative_budgets: WP4_07_PERFORMANCE_BUDGETS,
|
||||
};
|
||||
writeEvidence(testInfo, "performance-raw.json", performanceEvidence);
|
||||
writeEvidence(testInfo, "memory.json", { export_peak_additional_bytes: exportRuns.map((item) => item.peak_additional_bytes), limit_bytes: WP4_07_PERFORMANCE_BUDGETS.export_peak_additional_bytes_max });
|
||||
writeEvidence(testInfo, "dom-count.json", {
|
||||
...domGeometry,
|
||||
bounded_by_viewport_and_two_screens: Math.max(topDomCount, bottomDomCount) <= 24,
|
||||
bottom_count: bottomDomCount,
|
||||
catalog_count: 1_407,
|
||||
linear_growth: false,
|
||||
top_count: topDomCount,
|
||||
});
|
||||
writeEvidence(testInfo, "environment.json", await page.evaluate(() => ({ device_pixel_ratio: devicePixelRatio, user_agent: navigator.userAgent, viewport: { height: innerHeight, width: innerWidth } })));
|
||||
if (realAssets) writeEvidence(testInfo, "asset-sources.json", realAssets.evidence);
|
||||
});
|
||||
@@ -57,7 +57,7 @@ test("TDD-WP5-CAT-001 keeps the 1,407 sticker directory virtual and loads origin
|
||||
const backend = { saves: 0, version: 1 };
|
||||
const requests = { original: 0, thumbnails: 0, thumbnailIds: new Set<string>() };
|
||||
await routeEditor(page, backend);
|
||||
await page.route("**/api/v1/assets/public/p0a-static-v1/*", async (route) => {
|
||||
await page.route("**/api/v1/assets/public/fixture-v1/*", async (route) => {
|
||||
const url = new URL(route.request().url());
|
||||
const assetId = decodeURIComponent(url.pathname.split("/").at(-1) ?? "");
|
||||
if (url.searchParams.get("variant") === "thumbnail") {
|
||||
|
||||
@@ -64,8 +64,8 @@ async function routeEditor(page: Page, backend: Backend) {
|
||||
});
|
||||
await page.route("**/api/v1/assets/recent?asset_kind=text_template", (route) => route.fulfill({ body: JSON.stringify({ items: [] }), contentType: "application/json" }));
|
||||
await page.route("**/api/v1/assets/recent", (route) => route.fulfill({ body: JSON.stringify({ status: "recorded" }), contentType: "application/json" }));
|
||||
await page.route("**/api/v1/assets/public/p0a-complex-v1/*", (route) => route.fulfill({ body: fontBytes, contentType: "font/ttf" }));
|
||||
await page.route("**/api/v1/assets/public/p0a-static-v1/*", (route) => route.fulfill({ body: png, contentType: "image/png" }));
|
||||
await page.route("**/api/v1/assets/public/wp4-fixture-v1/*", (route) => route.fulfill({ body: fontBytes, contentType: "font/ttf" }));
|
||||
await page.route("**/api/v1/assets/public/fixture-v1/*", (route) => route.fulfill({ body: png, contentType: "image/png" }));
|
||||
await page.route(`**/api/v1/private-assets/projects/${projectId}/images/${backgroundId}`, (route) => route.fulfill({ body: rawSvg(), contentType: "image/svg+xml" }));
|
||||
}
|
||||
|
||||
|
||||
@@ -1,131 +0,0 @@
|
||||
import { mkdirSync } from "node:fs";
|
||||
import { resolve } from "node:path";
|
||||
|
||||
import { expect, test, type Page } from "@playwright/test";
|
||||
import { createServer, type ViteDevServer } from "vite";
|
||||
|
||||
let vite: ViteDevServer;
|
||||
let webUrl: string;
|
||||
const png = Buffer.from("iVBORw0KGgoAAAANSUhEUgAAAAQAAAADCAYAAAC09K7GAAAACXBIWXMAAAPoAAAD6AG1e1JrAAAAEklEQVQImWO4E6XxHxkzEBQAANIxHF3ECQOzAAAAAElFTkSuQmCC", "base64");
|
||||
const adminSession = { csrf_token: "csrf-wp5-05-admin-000000000000000000000000000000000" };
|
||||
const projectId = "00000000-0000-4000-8000-000000001405";
|
||||
const userSession = {
|
||||
audience: "user", authenticated: true, credits: { available_balance: 10, reserved_balance: 0 },
|
||||
csrf_token: "csrf-wp5-05-user-0000000000000000000000000000000000",
|
||||
expires_at: "2026-09-03T12:00:00.000Z",
|
||||
user: { creator_name: "Sticker User", role: "user", social_id: "@sticker", status: "active", user_id: projectId },
|
||||
};
|
||||
|
||||
function asset(stableId = "STK1408") {
|
||||
return {
|
||||
enabled: true, file_state: "committed", height: 3, mime: "image/png", mime_type: "image/png", order: 184,
|
||||
original_byte_size: png.byteLength, original_filename: `${stableId}.png`, original_reference: `/api/v1/assets/public/asset-20260803.1/${stableId}`,
|
||||
origin: "admin_uploaded", part: 25, relative_path: `managed-assets/stickers/original/${stableId}.png`, resource_version: "asset-20260803.1",
|
||||
sha256: "0".repeat(64), stable_id: stableId, thumbnail_byte_size: 75,
|
||||
thumbnail_reference: { media: "thumbnail", resource_id: stableId, resource_version: "asset-20260803.1", url: `/api/v1/assets/public/asset-20260803.1/${stableId}?variant=thumbnail` }, width: 4,
|
||||
};
|
||||
}
|
||||
|
||||
function assetsResponse(status: "active" | "full" | "unavailable" = "active", items = [asset()]) {
|
||||
return {
|
||||
count: items.length, items, release_version: items.length ? "asset-20260803.1" : null,
|
||||
storage: { capacity_notice_level: status === "active" ? "normal" : "critical", hard_limit_bytes: 5_368_709_120, managed_content_bytes: status === "full" ? 5_368_709_120 : 150, storage_status: status },
|
||||
};
|
||||
}
|
||||
|
||||
test.beforeAll(async () => {
|
||||
vite = await createServer({ configFile: resolve("apps/web/vite.config.ts"), root: resolve("apps/web"), server: { host: "127.0.0.1", port: 0 } });
|
||||
await vite.listen();
|
||||
const address = vite.httpServer?.address();
|
||||
if (!address || typeof address === "string") throw new Error("Vite did not expose a test port.");
|
||||
webUrl = `http://127.0.0.1:${address.port}`;
|
||||
});
|
||||
|
||||
test.afterAll(async () => vite.close());
|
||||
|
||||
async function routeAdminSession(page: Page) {
|
||||
await page.route("**/api/v1/admin-auth/session", (route) => route.fulfill({ body: JSON.stringify(adminSession), contentType: "application/json", status: 200 }));
|
||||
await page.route("**/api/v1/assets/public/**", (route) => route.fulfill({ body: png, contentType: "image/png", status: 200 }));
|
||||
}
|
||||
|
||||
test("TDD-WP5-UPL-001-upload-metering uploads and publishes with stable metadata controls", async ({ page }) => {
|
||||
await routeAdminSession(page);
|
||||
let uploaded = false;
|
||||
let multipartBody = "";
|
||||
await page.route("**/api/v1/admin/assets/static-stickers", async (route) => {
|
||||
if (route.request().method() === "POST") {
|
||||
multipartBody = route.request().postDataBuffer()?.toString("latin1") ?? "";
|
||||
uploaded = true;
|
||||
return route.fulfill({ body: JSON.stringify({ created: true, item: asset(), release_version: "asset-20260803.1" }), contentType: "application/json", status: 201 });
|
||||
}
|
||||
return route.fulfill({ body: JSON.stringify(assetsResponse("active", uploaded ? [asset()] : [])), contentType: "application/json", status: 200 });
|
||||
});
|
||||
|
||||
await page.goto(`${webUrl}/admin/assets`);
|
||||
await expect(page.getByRole("heading", { name: "普通贴纸" })).toBeVisible();
|
||||
await expect(page.getByText("当前没有后台上传的普通贴纸。")).toBeVisible();
|
||||
await page.getByLabel("贴纸文件").setInputFiles({ buffer: png, mimeType: "image/png", name: "STK1408.png" });
|
||||
await page.getByRole("button", { name: "上传并发布" }).click();
|
||||
await expect(page.getByRole("rowheader", { name: /STK1408/ })).toBeVisible();
|
||||
expect(multipartBody).toContain("STK1408");
|
||||
expect(multipartBody).toContain("image/png");
|
||||
expect(multipartBody).toContain("original_sha256");
|
||||
const evidenceRoot = process.env.DADA_EVIDENCE_DIR_WP5_UPL;
|
||||
if (evidenceRoot) {
|
||||
const directory = resolve(evidenceRoot, "screenshots");
|
||||
mkdirSync(directory, { recursive: true });
|
||||
await page.screenshot({ fullPage: true, path: resolve(directory, "admin-assets-uploaded.png") });
|
||||
}
|
||||
});
|
||||
|
||||
test("storage full disables every upload control and load failure exposes retry", async ({ page }) => {
|
||||
await page.setViewportSize({ height: 844, width: 390 });
|
||||
await routeAdminSession(page);
|
||||
await page.route("**/api/v1/admin/assets/static-stickers", (route) => route.fulfill({ body: JSON.stringify(assetsResponse("full")), contentType: "application/json", status: 200 }));
|
||||
await page.goto(`${webUrl}/admin/assets`);
|
||||
await expect(page.getByText("当前存储状态禁止新增原图和缩略图。")).toBeVisible();
|
||||
await expect(page.getByLabel("贴纸文件")).toBeDisabled();
|
||||
await expect(page.getByRole("button", { name: "上传并发布" })).toBeDisabled();
|
||||
const evidenceRoot = process.env.DADA_EVIDENCE_DIR_WP5_UPL;
|
||||
if (evidenceRoot) {
|
||||
const directory = resolve(evidenceRoot, "screenshots");
|
||||
mkdirSync(directory, { recursive: true });
|
||||
await page.screenshot({ fullPage: true, path: resolve(directory, "admin-assets-full-mobile.png") });
|
||||
}
|
||||
|
||||
await page.unroute("**/api/v1/admin/assets/static-stickers");
|
||||
await page.route("**/api/v1/admin/assets/static-stickers", (route) => route.fulfill({ status: 503 }));
|
||||
await page.reload();
|
||||
await expect(page.getByRole("alert")).toContainText("素材状态暂时无法读取");
|
||||
await expect(page.getByRole("button", { name: "重试" })).toBeVisible();
|
||||
});
|
||||
|
||||
test("the editor merges the current uploaded release and saves its resource version", async ({ page }) => {
|
||||
let savedResourceVersion = "";
|
||||
let originalRequests = 0;
|
||||
await page.route("**/api/v1/auth/session", (route) => route.fulfill({ body: JSON.stringify(userSession), contentType: "application/json", status: 200 }));
|
||||
await page.route("**/api/v1/static-stickers/current", (route) => route.fulfill({ body: JSON.stringify({ count: 1, items: [asset()], release_version: "asset-20260803.1" }), contentType: "application/json", status: 200 }));
|
||||
await page.route(`**/api/v1/projects/${projectId}`, (route) => route.fulfill({ body: JSON.stringify({
|
||||
canvas_state: { background: { adjustments: { brightness: 0, contrast: 0, crop: null, filter: "none", fit: "fill", saturation: 0, sharpness: 0, temperature: 0 }, asset_id: null }, elements: [], pixel_height: 1440, pixel_width: 1080, ratio: "3:4", schema_version: 1 },
|
||||
created_at: "2026-08-03T12:00:00.000Z", current_image_id: null, images: [], name: "上传贴纸", project_id: projectId, ratio: "3:4", state_version: 1,
|
||||
}), contentType: "application/json", status: 200 }));
|
||||
await page.route(`**/api/v1/projects/${projectId}/state`, async (route) => {
|
||||
const body = route.request().postDataJSON() as { canvas_state: { elements: Array<{ resource_version: string }> } };
|
||||
savedResourceVersion = body.canvas_state.elements[0]?.resource_version ?? "";
|
||||
await route.fulfill({ body: JSON.stringify({ save_status: "saved", state_version: 2 }), contentType: "application/json", status: 200 });
|
||||
});
|
||||
await page.route("**/api/v1/assets/recent?asset_kind=text_template", (route) => route.fulfill({ body: JSON.stringify({ items: [] }), contentType: "application/json", status: 200 }));
|
||||
await page.route("**/api/v1/assets/public/**", async (route) => {
|
||||
if (!new URL(route.request().url()).searchParams.has("variant")) originalRequests += 1;
|
||||
await route.fulfill({ body: png, contentType: "image/png", status: 200 });
|
||||
});
|
||||
|
||||
await page.goto(`${webUrl}/app/projects/${projectId}/editor`);
|
||||
await page.getByRole("button", { name: "普通贴纸", exact: true }).click();
|
||||
await expect(page.getByText("共 1,408 张", { exact: true })).toBeVisible();
|
||||
const list = page.getByTestId("static-sticker-list");
|
||||
await list.evaluate((element) => { element.scrollTop = element.scrollHeight; element.dispatchEvent(new Event("scroll")); });
|
||||
await list.getByRole("button", { name: "添加贴纸 STK1408" }).click();
|
||||
await expect.poll(() => savedResourceVersion).toBe("asset-20260803.1");
|
||||
await expect.poll(() => originalRequests).toBeGreaterThan(0);
|
||||
});
|
||||
@@ -0,0 +1,137 @@
|
||||
import { mkdirSync } from "node:fs";
|
||||
import { resolve } from "node:path";
|
||||
|
||||
import { expect, test, type Page } from "@playwright/test";
|
||||
import { createServer, type ViteDevServer } from "vite";
|
||||
|
||||
import { adminOverviewFixture } from "../fixtures/wp6-01-admin-overview.js";
|
||||
|
||||
let vite: ViteDevServer;
|
||||
let webUrl: string;
|
||||
|
||||
const adminSession = {
|
||||
acknowledged_private_content_notice_version: null,
|
||||
admin: { role: "super_admin", status: "active", user_id: "00000000-0000-4000-8000-000000000601" },
|
||||
audience: "admin",
|
||||
authenticated: true,
|
||||
csrf_token: "csrf-admin-shell-fixture-000000000000000000000000000000000",
|
||||
current_private_content_notice_version: null,
|
||||
expires_at: "2026-09-02T09:30:00.000Z",
|
||||
notice_acknowledged: false,
|
||||
};
|
||||
|
||||
const navigation = [
|
||||
["总览", "/admin"],
|
||||
["用户与点数", "/admin/users"],
|
||||
["邀请码", "/admin/invites"],
|
||||
["模型", "/admin/models"],
|
||||
["素材", "/admin/assets"],
|
||||
["内部预览", "/admin/preview"],
|
||||
["生成记录", "/admin/generations"],
|
||||
["服务与存储", "/admin/services-storage"],
|
||||
["审计", "/admin/audit"],
|
||||
] as const;
|
||||
|
||||
test.beforeAll(async () => {
|
||||
vite = await createServer({
|
||||
configFile: resolve("apps/web/vite.config.ts"),
|
||||
root: resolve("apps/web"),
|
||||
server: { host: "127.0.0.1", port: 0 },
|
||||
});
|
||||
await vite.listen();
|
||||
const address = vite.httpServer?.address();
|
||||
if (!address || typeof address === "string") throw new Error("Vite did not expose a test port.");
|
||||
webUrl = `http://127.0.0.1:${address.port}`;
|
||||
});
|
||||
|
||||
test.afterAll(async () => vite.close());
|
||||
|
||||
async function routeActiveAdmin(page: Page) {
|
||||
await page.route("**/api/v1/admin-auth/session", (route) => route.fulfill({
|
||||
body: JSON.stringify(adminSession),
|
||||
contentType: "application/json",
|
||||
status: 200,
|
||||
}));
|
||||
await page.route("**/api/v1/admin/overview", (route) => route.fulfill({
|
||||
body: JSON.stringify(adminOverviewFixture),
|
||||
contentType: "application/json",
|
||||
status: 200,
|
||||
}));
|
||||
}
|
||||
|
||||
test("TDD-WP6-ADM-001-role-and-summary renders the protected nine-entry admin shell", async ({ page }) => {
|
||||
const requests: string[] = [];
|
||||
page.on("request", (request) => requests.push(request.url()));
|
||||
await routeActiveAdmin(page);
|
||||
await page.goto(`${webUrl}/admin`);
|
||||
|
||||
await expect(page.getByRole("heading", { level: 2, name: "运营总览" })).toBeVisible();
|
||||
const sidebar = page.getByRole("navigation", { name: "后台主导航" });
|
||||
await expect(sidebar).toBeVisible();
|
||||
for (const [name, href] of navigation) {
|
||||
await expect(sidebar.getByRole("link", { name, exact: true })).toHaveAttribute("href", href);
|
||||
}
|
||||
expect(Math.round((await sidebar.boundingBox())?.width ?? 0)).toBe(216);
|
||||
await expect(page.getByText("4 / 10", { exact: true })).toBeVisible();
|
||||
await expect(page.getByText("待人工核对 1", { exact: true })).toBeVisible();
|
||||
await expect(page.getByText("85.0%", { exact: true })).toBeVisible();
|
||||
await expect(page.getByRole("link", { name: "有异常", exact: true })).toBeVisible();
|
||||
await expect(page.locator("body")).not.toContainText(/forbidden|example\.invalid|api[_ -]?key|完整提示词/i);
|
||||
expect(requests.some((url) => /prompt|private-content|image-content/i.test(url))).toBe(false);
|
||||
|
||||
const evidenceRoot = process.env.DADA_EVIDENCE_DIR_ADMIN;
|
||||
if (evidenceRoot) {
|
||||
const screenshotDirectory = resolve(evidenceRoot, "screenshots");
|
||||
mkdirSync(screenshotDirectory, { recursive: true });
|
||||
await page.screenshot({ fullPage: true, path: resolve(screenshotDirectory, "admin-overview.png") });
|
||||
}
|
||||
});
|
||||
|
||||
test("TDD-WP6-ADM-001-role-and-summary keeps ordinary and preview sessions outside admin", async ({ page }) => {
|
||||
let overviewCalls = 0;
|
||||
await page.route("**/api/v1/admin-auth/session", (route) => route.fulfill({
|
||||
body: JSON.stringify({ error: { code: "AUTH_SESSION_INVALID", subject: "preview_user" } }),
|
||||
contentType: "application/json",
|
||||
status: 401,
|
||||
}));
|
||||
await page.route("**/api/v1/admin/overview", (route) => {
|
||||
overviewCalls += 1;
|
||||
return route.fulfill({ body: "null", contentType: "application/json", status: 401 });
|
||||
});
|
||||
|
||||
await page.goto(`${webUrl}/admin`);
|
||||
await expect(page).toHaveURL(`${webUrl}/admin/login`);
|
||||
await expect(page.getByRole("heading", { name: "管理员邮箱验证码登录" })).toBeVisible();
|
||||
expect(overviewCalls).toBe(0);
|
||||
await expect(page.getByText("DADA ADMIN", { exact: true })).toHaveCount(0);
|
||||
const evidenceRoot = process.env.DADA_EVIDENCE_DIR_ADMIN;
|
||||
if (evidenceRoot) {
|
||||
const screenshotDirectory = resolve(evidenceRoot, "screenshots");
|
||||
mkdirSync(screenshotDirectory, { recursive: true });
|
||||
await page.screenshot({ fullPage: true, path: resolve(screenshotDirectory, "admin-denied.png") });
|
||||
}
|
||||
});
|
||||
|
||||
test("TDD-WP6-ADM-001-role-and-summary ejects a disabled admin when the session is rechecked", async ({ page }) => {
|
||||
let active = true;
|
||||
await page.route("**/api/v1/admin-auth/session", (route) => route.fulfill(active ? {
|
||||
body: JSON.stringify(adminSession),
|
||||
contentType: "application/json",
|
||||
status: 200,
|
||||
} : {
|
||||
body: JSON.stringify({ error: { code: "AUTH_SESSION_INVALID" } }),
|
||||
contentType: "application/json",
|
||||
status: 401,
|
||||
}));
|
||||
await page.route("**/api/v1/admin/overview", (route) => route.fulfill({
|
||||
body: JSON.stringify(adminOverviewFixture),
|
||||
contentType: "application/json",
|
||||
status: 200,
|
||||
}));
|
||||
await page.goto(`${webUrl}/admin`);
|
||||
await expect(page.getByRole("heading", { level: 2, name: "运营总览" })).toBeVisible();
|
||||
|
||||
active = false;
|
||||
await page.evaluate(() => window.dispatchEvent(new Event("dada:session-invalid")));
|
||||
await expect(page).toHaveURL(`${webUrl}/admin/login`);
|
||||
});
|
||||
@@ -0,0 +1,95 @@
|
||||
import { expect, test } from "@playwright/test";
|
||||
import { createServer, type ViteDevServer } from "vite";
|
||||
import { resolve } from "node:path";
|
||||
|
||||
import { adminDiagnosticsFixture, adminServicesStorageFixture } from "../fixtures/wp6-05-state.js";
|
||||
|
||||
let vite: ViteDevServer;
|
||||
let webUrl: string;
|
||||
|
||||
const adminSession = {
|
||||
admin: { role: "super_admin", status: "active", user_id: "00000000-0000-4000-8000-000000000605" },
|
||||
audience: "admin",
|
||||
authenticated: true,
|
||||
expires_at: "2026-09-02T09:30:00.000Z",
|
||||
};
|
||||
|
||||
test.beforeAll(async () => {
|
||||
vite = await createServer({ configFile: resolve("apps/web/vite.config.ts"), root: resolve("apps/web"), server: { host: "127.0.0.1", port: 0 } });
|
||||
await vite.listen();
|
||||
const address = vite.httpServer?.address();
|
||||
if (!address || typeof address === "string") throw new Error("Vite did not expose a test port.");
|
||||
webUrl = `http://127.0.0.1:${address.port}`;
|
||||
});
|
||||
|
||||
test.afterAll(async () => vite.close());
|
||||
|
||||
test("TDD-WP6-DIAG-001-redacted-diagnostics renders state and diagnostics without sensitive fields", async ({ page }) => {
|
||||
await page.route("**/api/v1/admin-auth/session", (route) => route.fulfill({ body: JSON.stringify(adminSession), contentType: "application/json", status: 200 }));
|
||||
await page.route("**/api/v1/admin/services-storage", (route) => route.fulfill({ body: JSON.stringify(adminServicesStorageFixture), contentType: "application/json", status: 200 }));
|
||||
await page.route("**/api/v1/admin/diagnostics", (route) => route.fulfill({ body: JSON.stringify(adminDiagnosticsFixture), contentType: "application/json", status: 200 }));
|
||||
await page.goto(`${webUrl}/admin/services-storage`);
|
||||
|
||||
await expect(page.getByRole("heading", { level: 2, name: "服务与存储" })).toBeVisible();
|
||||
await expect(page.getByText("Resend", { exact: true })).toBeVisible();
|
||||
await expect(page.getByText("额度暂停", { exact: true })).toBeVisible();
|
||||
await expect(page.getByText("4.25 GB", { exact: true })).toBeVisible();
|
||||
await expect(page.getByRole("button", { name: "复制诊断" })).toBeEnabled();
|
||||
await expect(page.locator("body")).not.toContainText(/secret|password|example\.invalid|C:\\Users/i);
|
||||
});
|
||||
|
||||
test("TDD-WP6-STATE-001-three-model-states refetches REST truth after a runtime event", async ({ page }) => {
|
||||
await page.addInitScript(() => {
|
||||
class FakeEventSource {
|
||||
static instance: FakeEventSource | undefined;
|
||||
onmessage: ((event: MessageEvent) => void) | null = null;
|
||||
constructor() { FakeEventSource.instance = this; }
|
||||
close() { if (FakeEventSource.instance === this) FakeEventSource.instance = undefined; }
|
||||
}
|
||||
Object.defineProperty(window, "EventSource", { configurable: true, value: FakeEventSource });
|
||||
(window as unknown as { emitDadaEvent: () => void }).emitDadaEvent = () => FakeEventSource.instance?.onmessage?.({ data: "{}" } as MessageEvent);
|
||||
});
|
||||
await page.route("**/api/v1/admin-auth/session", (route) => route.fulfill({ body: JSON.stringify({ ...adminSession, csrf_token: "csrf-admin-model-fixture-000000000000000000000000000000000" }), contentType: "application/json", status: 200 }));
|
||||
let runtimeAvailable = false;
|
||||
let modelCalls = 0;
|
||||
const configuration = () => {
|
||||
const ids = ["gemini-3.1-flash-image-preview", "gemini-3-pro-image-preview", "gpt-image-2"];
|
||||
return {
|
||||
config_set_version: 1,
|
||||
configured_default_model_id: ids[0],
|
||||
recommended_model_id: runtimeAvailable ? ids[1] : null,
|
||||
models: ids.map((modelId, index) => ({
|
||||
config_version: 1,
|
||||
contract_evidence_ref: null,
|
||||
contract_validation_status: "verified",
|
||||
credit_cost: 1,
|
||||
display_name: ["Gemini 3.1 Flash Image Preview", "Gemini 3 Pro Image Preview", "GPT Image 2"][index],
|
||||
enabled: true,
|
||||
error_mapping_profile: { timeout: "upstream_timeout" },
|
||||
gateway_account_ref: "mock-gateway",
|
||||
is_default: index === 0,
|
||||
model_id: modelId,
|
||||
prompt_max_length: 1_000,
|
||||
recommendation_priority: index + 1,
|
||||
reference_limits: { max_file_bytes: 1_024, max_files: 2, max_total_bytes: 2_048 },
|
||||
route_profile: { endpoint: "https://mock.invalid/v1/images" },
|
||||
runtime_availability: { available_for_new_jobs: runtimeAvailable, checked_at: "2026-08-02T15:00:00.000Z", reason: runtimeAvailable ? "available" : "gateway_balance_insufficient" },
|
||||
safety_source: "provider",
|
||||
supported_ratios: ["3:4", "1:1", "4:3", "9:16"],
|
||||
})),
|
||||
};
|
||||
};
|
||||
await page.route("**/api/v1/models", (route) => {
|
||||
modelCalls += 1;
|
||||
return route.fulfill({ body: JSON.stringify(configuration()), contentType: "application/json", status: 200 });
|
||||
});
|
||||
|
||||
await page.goto(`${webUrl}/admin/models`);
|
||||
await expect(page.getByText("当前推荐").locator("..").getByText("无", { exact: true })).toBeVisible();
|
||||
expect(modelCalls).toBeGreaterThanOrEqual(1);
|
||||
runtimeAvailable = true;
|
||||
await page.evaluate(() => (window as unknown as { emitDadaEvent: () => void }).emitDadaEvent());
|
||||
await expect(page.getByText("当前推荐").locator("..").getByText("gemini-3-pro-image-preview", { exact: true })).toBeVisible();
|
||||
await expect(page.getByText("配置默认").locator("..").getByText("gemini-3.1-flash-image-preview", { exact: true })).toBeVisible();
|
||||
expect(modelCalls).toBeGreaterThanOrEqual(2);
|
||||
});
|
||||
+44
@@ -0,0 +1,44 @@
|
||||
export const adminOverviewFixture = {
|
||||
generated_at: "2026-08-03T09:30:00.000Z",
|
||||
user_slots: {
|
||||
active_and_suspended: 4,
|
||||
limit: 10,
|
||||
},
|
||||
generation_jobs: {
|
||||
pending_manual_review: 1,
|
||||
pending_manual_review_oldest_at: "2026-08-03T09:12:00.000Z",
|
||||
queued: 2,
|
||||
running: 1,
|
||||
},
|
||||
models: {
|
||||
configured_default_model_id: "gemini-3.1-flash-image-preview",
|
||||
configured_model_count: 3,
|
||||
recommended_model_id: "gemini-3-pro-image-preview",
|
||||
runtime_available_count: 2,
|
||||
},
|
||||
storage: {
|
||||
last_measured_at: "2026-08-03T09:29:00.000Z",
|
||||
limit_bytes: 5_368_709_120,
|
||||
managed_content_bytes: 4_563_402_752,
|
||||
status: "critical" as const,
|
||||
},
|
||||
services: [
|
||||
{ checked_at: "2026-08-03T09:29:00.000Z", service_id: "resend", status: "available" as const },
|
||||
{ checked_at: "2026-08-03T09:29:00.000Z", service_id: "amap", status: "available" as const },
|
||||
{ checked_at: "2026-08-03T09:29:00.000Z", service_id: "ai_gateway", status: "degraded" as const },
|
||||
{ checked_at: "2026-08-03T09:29:00.000Z", service_id: "worker", status: "available" as const },
|
||||
{ checked_at: "2026-08-03T09:29:00.000Z", service_id: "asset_root", status: "degraded" as const },
|
||||
],
|
||||
recent_operations: [
|
||||
{
|
||||
created_at: "2026-08-03T09:20:00.000Z",
|
||||
operation_id: "00000000-0000-4000-8000-000000000621",
|
||||
operation_type: "model_configuration_update",
|
||||
result: "succeeded" as const,
|
||||
target_ref: "model-config-set:7",
|
||||
},
|
||||
],
|
||||
asset_cleanup: {
|
||||
pending_jobs: 0,
|
||||
},
|
||||
};
|
||||
Vendored
+34
@@ -0,0 +1,34 @@
|
||||
export const adminServicesStorageFixture = {
|
||||
generated_at: "2026-08-04T09:30:00.000Z",
|
||||
services: [
|
||||
{ checked_at: "2026-08-04T09:30:00.000Z", configured: true, impact_scope: "authentication" as const, pause_reason: null, service_id: "resend" as const, status: "active" as const },
|
||||
{ checked_at: "2026-08-04T09:30:00.000Z", configured: true, impact_scope: "location" as const, pause_reason: "quota_exhausted", service_id: "amap" as const, status: "paused_quota" as const },
|
||||
{ checked_at: "2026-08-04T09:30:00.000Z", configured: true, impact_scope: "generation" as const, pause_reason: "balance_insufficient", service_id: "ai_gateway" as const, status: "degraded" as const },
|
||||
{ checked_at: "2026-08-04T09:30:00.000Z", configured: true, impact_scope: "generation" as const, pause_reason: "worker_stopped", service_id: "worker" as const, status: "degraded" as const },
|
||||
{ checked_at: "2026-08-04T09:30:00.000Z", configured: true, impact_scope: "api" as const, pause_reason: null, service_id: "api" as const, status: "active" as const },
|
||||
{ checked_at: "2026-08-04T09:30:00.000Z", configured: true, impact_scope: "storage" as const, pause_reason: null, service_id: "asset_root" as const, status: "active" as const },
|
||||
],
|
||||
storage: {
|
||||
capacity_notice_level: "warning" as const,
|
||||
cleanup_pending_count: 2,
|
||||
data_root_ref: "configured_local_data_root" as const,
|
||||
hard_limit_bytes: 5_368_709_120,
|
||||
last_measured_at: "2026-08-04T09:30:00.000Z",
|
||||
managed_content_bytes: 4_563_402_752,
|
||||
remeasurement_required: false,
|
||||
status: "active" as const,
|
||||
storage_backend: "local_filesystem" as const,
|
||||
},
|
||||
};
|
||||
|
||||
export const adminDiagnosticsFixture = {
|
||||
generated_at: "2026-08-04T09:30:00.000Z",
|
||||
diagnostic_text: "Dada P0-A diagnostics\napp_version=0.0.0\napi_status=ready\nworker_status=ready\nstorage_status=active",
|
||||
services: adminServicesStorageFixture,
|
||||
system: {
|
||||
api_status: "ready" as const,
|
||||
app_version: "0.0.0",
|
||||
browser_support: [{ brand: "Google Chrome" as const, major: 128 }],
|
||||
worker_status: "ready" as const,
|
||||
},
|
||||
};
|
||||
@@ -1,135 +0,0 @@
|
||||
import { createHash, randomUUID } from "node:crypto";
|
||||
import { existsSync, mkdirSync, mkdtempSync, readdirSync, rmSync, writeFileSync } from "node:fs";
|
||||
import { tmpdir } from "node:os";
|
||||
import { join, resolve } from "node:path";
|
||||
import { Readable } from "node:stream";
|
||||
|
||||
import { afterEach, describe, expect, it } from "vitest";
|
||||
|
||||
import { HARD_LIMIT_BYTES, ManagedStorage, StorageCapacityError, StorageUnavailableError } from "../../apps/api/src/managed-storage.js";
|
||||
import { StickerReleaseService } from "../../apps/api/src/sticker-releases.js";
|
||||
|
||||
const now = Date.parse("2026-08-03T12:00:00.000Z");
|
||||
const png = Buffer.from("iVBORw0KGgoAAAANSUhEUgAAAAQAAAADCAYAAAC09K7GAAAACXBIWXMAAAPoAAAD6AG1e1JrAAAAEklEQVQImWO4E6XxHxkzEBQAANIxHF3ECQOzAAAAAElFTkSuQmCC", "base64");
|
||||
const webp = Buffer.from("UklGRjoAAABXRUJQVlA4IC4AAADQAQCdASoGAAUAAUAmJaACdLoB+AADsAD+9IiH/pNnibPE2fJI/+Uq8Fjc3wAA", "base64");
|
||||
const roots: string[] = [];
|
||||
const closeables: Array<{ close(): void }> = [];
|
||||
|
||||
function filesBelow(path: string): string[] {
|
||||
if (!existsSync(path)) return [];
|
||||
return readdirSync(path, { withFileTypes: true }).flatMap((entry) => {
|
||||
const child = join(path, entry.name);
|
||||
return entry.isDirectory() ? filesBelow(child) : [child];
|
||||
});
|
||||
}
|
||||
|
||||
function evidence(name: string, value: unknown) {
|
||||
const directory = process.env.DADA_EVIDENCE_DIR_WP5_UPL;
|
||||
if (!directory) return;
|
||||
mkdirSync(directory, { recursive: true });
|
||||
writeFileSync(resolve(directory, name), `${JSON.stringify(value, null, 2)}\n`);
|
||||
}
|
||||
|
||||
function fixture() {
|
||||
const dataRoot = mkdtempSync(join(tmpdir(), "dada-wp5-05-integration-"));
|
||||
roots.push(dataRoot);
|
||||
mkdirSync(join(dataRoot, "db"), { recursive: true });
|
||||
const databasePath = join(dataRoot, "db", "dada.sqlite3");
|
||||
const storage = new ManagedStorage({ dataRoot, databasePath });
|
||||
const stickers = new StickerReleaseService({ clock: () => now, databasePath, storage });
|
||||
closeables.push(stickers, storage);
|
||||
return { dataRoot, stickers, storage };
|
||||
}
|
||||
|
||||
async function upload(stickers: StickerReleaseService, stableId: string, order: number, bytes = png, mimeType: "image/png" | "image/webp" = "image/png") {
|
||||
return stickers.upload({
|
||||
actorId: randomUUID(),
|
||||
content: Readable.from(bytes),
|
||||
enabled: true,
|
||||
expectedByteSize: bytes.byteLength,
|
||||
expectedMimeType: mimeType,
|
||||
expectedSha256: createHash("sha256").update(bytes).digest("hex"),
|
||||
fileName: mimeType === "image/png" ? `${stableId}.png` : `${stableId}.webp`,
|
||||
idempotencyKey: `upload-${randomUUID()}-${randomUUID()}`,
|
||||
order,
|
||||
part: 25,
|
||||
stableId,
|
||||
});
|
||||
}
|
||||
|
||||
afterEach(() => {
|
||||
for (const value of closeables.splice(0).reverse()) value.close();
|
||||
for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
|
||||
});
|
||||
|
||||
describe("TDD-WP5-UPL-001 upload metering", () => {
|
||||
it("decodes PNG, publishes an immutable release, meters original and thumbnail, and preserves old release reads", async () => {
|
||||
const test = fixture();
|
||||
const before = { files: filesBelow(join(test.dataRoot, "managed-assets")), state: test.storage.getState() };
|
||||
const published = await upload(test.stickers, "STK1408", 184);
|
||||
const afterUpload = test.storage.getState();
|
||||
|
||||
expect(published.release_version).toBe("asset-20260803.1");
|
||||
expect(published.item).toMatchObject({ enabled: true, height: 3, mime_type: "image/png", origin: "admin_uploaded", stable_id: "STK1408", width: 4 });
|
||||
expect(afterUpload.managed_content_bytes).toBe(published.original.byte_size + published.thumbnail.byte_size);
|
||||
expect(test.storage.inspectCounts()).toMatchObject({ active_reservations: 0, managed_files: 2, pending_cleanup: 0 });
|
||||
expect(filesBelow(join(test.dataRoot, "managed-assets"))).toHaveLength(2);
|
||||
expect(test.stickers.listPublic()).toMatchObject({ count: 1, items: [{ stable_id: "STK1408" }] });
|
||||
|
||||
const disabled = test.stickers.update({ actorId: randomUUID(), enabled: false, stableId: "STK1408" });
|
||||
expect(disabled.release_version).toBe("asset-20260803.2");
|
||||
expect(test.stickers.listPublic().items).toEqual([]);
|
||||
expect(test.stickers.listPublic(published.release_version).items).toHaveLength(1);
|
||||
expect(test.stickers.readPublicAsset(published.release_version, "STK1408", "original")?.bytes).toEqual(png);
|
||||
expect(test.stickers.readPublicAsset(disabled.release_version, "STK1408", "original")).toBeUndefined();
|
||||
|
||||
evidence("fs-before.json", before);
|
||||
evidence("fs-after.json", { files: filesBelow(join(test.dataRoot, "managed-assets")), state: test.storage.getState() });
|
||||
evidence("db-diff.json", { releases: test.stickers.inspectCounts(), storage: test.storage.inspectCounts() });
|
||||
});
|
||||
|
||||
it("allows exact equality then blocks full and unavailable storage without partial files or rows", async () => {
|
||||
const sizing = fixture();
|
||||
const measured = await upload(sizing.stickers, "STK1408", 184);
|
||||
const writeBytes = measured.original.byte_size + measured.thumbnail.byte_size;
|
||||
|
||||
const exact = fixture();
|
||||
exact.storage.applyControlledMeasurement(HARD_LIMIT_BYTES - writeBytes);
|
||||
const exactResult = await upload(exact.stickers, "STK1408", 184);
|
||||
expect(exactResult.original.byte_size + exactResult.thumbnail.byte_size).toBe(writeBytes);
|
||||
expect(exact.storage.getState().storage_status).toBe("full");
|
||||
const filesAtFull = filesBelow(join(exact.dataRoot, "managed-assets"));
|
||||
const countsAtFull = exact.stickers.inspectCounts();
|
||||
await expect(upload(exact.stickers, "STK1409", 185)).rejects.toBeInstanceOf(StorageCapacityError);
|
||||
expect(filesBelow(join(exact.dataRoot, "managed-assets"))).toEqual(filesAtFull);
|
||||
expect(exact.stickers.inspectCounts()).toEqual(countsAtFull);
|
||||
|
||||
const unavailable = fixture();
|
||||
unavailable.storage.setAvailability({ dataRootWritable: false, diskSpaceAvailable: true, sqliteWritable: true });
|
||||
await expect(upload(unavailable.stickers, "STK1408", 184)).rejects.toBeInstanceOf(StorageUnavailableError);
|
||||
expect(filesBelow(join(unavailable.dataRoot, "managed-assets"))).toEqual([]);
|
||||
expect(unavailable.stickers.inspectCounts()).toEqual({ items: 0, releases: 0, upload_receipts: 0 });
|
||||
});
|
||||
|
||||
it("rejects a forged PNG before release or managed-file commit", async () => {
|
||||
const test = fixture();
|
||||
const forged = Buffer.concat([png.subarray(0, 8), Buffer.from("not-a-decodable-png")]);
|
||||
await expect(upload(test.stickers, "STK1408", 184, forged)).rejects.toThrow("content_decode_invalid");
|
||||
expect(test.storage.inspectCounts()).toMatchObject({ active_reservations: 0, managed_files: 0 });
|
||||
expect(test.stickers.inspectCounts()).toEqual({ items: 0, releases: 0, upload_receipts: 0 });
|
||||
expect(filesBelow(join(test.dataRoot, "managed-assets"))).toEqual([]);
|
||||
});
|
||||
|
||||
it("decodes WebP and rejects stable-ID or part-order conflicts without extra writes", async () => {
|
||||
const test = fixture();
|
||||
const published = await upload(test.stickers, "STK1408", 184, webp, "image/webp");
|
||||
expect(published.item).toMatchObject({ height: 5, mime_type: "image/webp", width: 6 });
|
||||
expect(test.stickers.readPublicAsset(published.release_version, "STK1408", "original")?.bytes).toEqual(webp);
|
||||
const files = filesBelow(join(test.dataRoot, "managed-assets"));
|
||||
const counts = test.stickers.inspectCounts();
|
||||
await expect(upload(test.stickers, "STK1408", 185)).rejects.toMatchObject({ httpStatus: 409, reason: "sticker_stable_id_conflict" });
|
||||
await expect(upload(test.stickers, "STK1409", 184)).rejects.toMatchObject({ httpStatus: 409, reason: "sticker_order_conflict" });
|
||||
expect(filesBelow(join(test.dataRoot, "managed-assets"))).toEqual(files);
|
||||
expect(test.stickers.inspectCounts()).toEqual(counts);
|
||||
});
|
||||
});
|
||||
@@ -1,139 +0,0 @@
|
||||
import { randomUUID } from "node:crypto";
|
||||
import { existsSync, mkdirSync, mkdtempSync, rmSync } from "node:fs";
|
||||
import { tmpdir } from "node:os";
|
||||
import { join } from "node:path";
|
||||
|
||||
import { afterEach, describe, expect, it } from "vitest";
|
||||
|
||||
import { ManagedStorage } from "../../apps/api/src/managed-storage.js";
|
||||
import { RegistrationService } from "../../apps/api/src/registration.js";
|
||||
import { MockResendAdapter } from "../../apps/api/src/resend-adapter.js";
|
||||
import { StickerReleaseService } from "../../apps/api/src/sticker-releases.js";
|
||||
import { ProjectPurgeCleanup } from "../../apps/worker/src/project-purge-cleanup.js";
|
||||
|
||||
const roots: string[] = [];
|
||||
const closeables: Array<{ close(): void }> = [];
|
||||
|
||||
function fixture() {
|
||||
const dataRoot = mkdtempSync(join(tmpdir(), "dada-wp5-06-cleanup-"));
|
||||
roots.push(dataRoot);
|
||||
mkdirSync(join(dataRoot, "db"), { recursive: true });
|
||||
const databasePath = join(dataRoot, "db", "dada.sqlite3");
|
||||
const registration = new RegistrationService({
|
||||
challengePepper: Buffer.alloc(32, 0x61),
|
||||
currentPrivacyNoticeVersion: "p0a-registration-notice-v1",
|
||||
databasePath,
|
||||
invitePepper: Buffer.alloc(32, 0x62),
|
||||
resend: new MockResendAdapter(),
|
||||
sessionPepper: Buffer.alloc(32, 0x63),
|
||||
});
|
||||
const storage = new ManagedStorage({ dataRoot, databasePath });
|
||||
const stickers = new StickerReleaseService({ databasePath, storage });
|
||||
closeables.push(stickers, storage, registration);
|
||||
return { dataRoot, databasePath, database: registration.database, storage };
|
||||
}
|
||||
|
||||
function seedAdmin(database: RegistrationService["database"]) {
|
||||
const adminId = randomUUID();
|
||||
database.prepare(`
|
||||
INSERT INTO users (
|
||||
user_id, normalized_email, role, status, counts_toward_stage_limit,
|
||||
registration_id, created_at
|
||||
) VALUES (?, ?, 'super_admin', 'active', 0, ?, ?)
|
||||
`).run(adminId, `${adminId}@example.invalid`, randomUUID(), Date.now());
|
||||
database.prepare("INSERT INTO admin_access (user_id, allowed) VALUES (?, 1)").run(adminId);
|
||||
return adminId;
|
||||
}
|
||||
|
||||
async function seedHistoricalPair(test: ReturnType<typeof fixture>) {
|
||||
const original = await test.storage.commitBufferFixture("sticker_original", "STK2401.png", Buffer.from("original-history"));
|
||||
const thumbnail = await test.storage.commitBufferFixture("sticker_thumbnail", "STK2401-thumbnail.png", Buffer.from("thumbnail-history"));
|
||||
const insert = test.database.prepare(`
|
||||
INSERT INTO sticker_managed_file_history (
|
||||
managed_file_id, stable_id, resource_version, file_kind, created_at
|
||||
) VALUES (?, 'STK2401', 'asset-20260701.1', ?, ?)
|
||||
`);
|
||||
insert.run(original.file_id, "original", Date.now());
|
||||
insert.run(thumbnail.file_id, "thumbnail", Date.now());
|
||||
return { original, thumbnail };
|
||||
}
|
||||
|
||||
afterEach(() => {
|
||||
for (const value of closeables.splice(0).reverse()) value.close();
|
||||
for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
|
||||
});
|
||||
|
||||
describe("TDD-WP5-CLN-001 sticker history cleanup", () => {
|
||||
it("denies the whole batch when a reference appears after the candidate snapshot", async () => {
|
||||
const test = fixture();
|
||||
const adminId = seedAdmin(test.database);
|
||||
const files = await seedHistoricalPair(test);
|
||||
const candidates = test.storage.listAssetCleanupCandidates();
|
||||
expect(candidates.items).toEqual(expect.arrayContaining([
|
||||
expect.objectContaining({ file_id: files.original.file_id, file_kind: "original", reference_count: 0, stable_id: "STK2401" }),
|
||||
expect.objectContaining({ file_id: files.thumbnail.file_id, file_kind: "thumbnail", reference_count: 0, stable_id: "STK2401" }),
|
||||
]));
|
||||
const intent = test.storage.createAssetCleanupIntent({
|
||||
actorId: adminId,
|
||||
fileIds: [files.original.file_id, files.thumbnail.file_id],
|
||||
idempotencyKey: `cleanup-${randomUUID()}-${randomUUID()}`,
|
||||
snapshotVersion: candidates.candidate_snapshot_version,
|
||||
});
|
||||
|
||||
test.storage.addAssetReference(files.original.file_id, "release");
|
||||
expect(() => test.storage.confirmAssetCleanupIntent({
|
||||
actorId: adminId,
|
||||
confirmationToken: intent.confirmation_token,
|
||||
requestId: intent.request_id,
|
||||
})).toThrow("ASSET_HISTORY_REFERENCE_CONFLICT");
|
||||
|
||||
expect(test.database.prepare("SELECT status FROM asset_cleanup_requests WHERE request_id = ?").get(intent.request_id)).toEqual({ status: "denied" });
|
||||
expect(test.database.prepare("SELECT COUNT(*) AS count FROM file_cleanup_queue WHERE status = 'pending'").get()).toEqual({ count: 0 });
|
||||
expect(test.database.prepare("SELECT COUNT(*) AS count FROM admin_operation_logs WHERE target_ref = ? AND result = 'failed'").get(intent.request_id)).toEqual({ count: 1 });
|
||||
});
|
||||
|
||||
it("requires the same admin, queues without reducing capacity, then remeasures after physical deletion", async () => {
|
||||
const test = fixture();
|
||||
const adminId = seedAdmin(test.database);
|
||||
const otherAdminId = seedAdmin(test.database);
|
||||
const files = await seedHistoricalPair(test);
|
||||
const bytesBefore = test.storage.getState().managed_content_bytes;
|
||||
const candidates = test.storage.listAssetCleanupCandidates();
|
||||
const intent = test.storage.createAssetCleanupIntent({
|
||||
actorId: adminId,
|
||||
fileIds: [files.original.file_id, files.thumbnail.file_id],
|
||||
idempotencyKey: `cleanup-${randomUUID()}-${randomUUID()}`,
|
||||
snapshotVersion: candidates.candidate_snapshot_version,
|
||||
});
|
||||
|
||||
expect(() => test.storage.confirmAssetCleanupIntent({
|
||||
actorId: otherAdminId,
|
||||
confirmationToken: intent.confirmation_token,
|
||||
requestId: intent.request_id,
|
||||
})).toThrow("ASSET_CLEANUP_CANDIDATE_STALE");
|
||||
const queued = test.storage.confirmAssetCleanupIntent({
|
||||
actorId: adminId,
|
||||
confirmationToken: intent.confirmation_token,
|
||||
requestId: intent.request_id,
|
||||
});
|
||||
expect(queued).toMatchObject({ file_count: 2, status: "queued" });
|
||||
expect(test.storage.getState().managed_content_bytes).toBe(bytesBefore);
|
||||
expect(existsSync(join(test.dataRoot, files.original.relative_path))).toBe(true);
|
||||
expect(test.database.prepare("SELECT COUNT(*) AS count FROM file_cleanup_queue WHERE status = 'pending'").get()).toEqual({ count: 2 });
|
||||
|
||||
const worker = new ProjectPurgeCleanup({ dataRoot: test.dataRoot, databasePath: test.databasePath });
|
||||
const result = worker.processFileCleanup();
|
||||
worker.close();
|
||||
expect(result).toEqual({ completed: 2, failed: 0 });
|
||||
expect(existsSync(join(test.dataRoot, files.original.relative_path))).toBe(false);
|
||||
expect(existsSync(join(test.dataRoot, files.thumbnail.relative_path))).toBe(false);
|
||||
expect(test.storage.getState()).toMatchObject({ managed_content_bytes: 0, storage_status: "active" });
|
||||
expect(test.database.prepare("SELECT status FROM asset_cleanup_requests WHERE request_id = ?").get(intent.request_id)).toEqual({ status: "completed" });
|
||||
expect(test.database.prepare("SELECT operation_type, result FROM admin_operation_logs WHERE target_ref = ? ORDER BY occurred_at").all(intent.request_id)).toEqual([
|
||||
{ operation_type: "asset_cleanup_requested", result: "succeeded" },
|
||||
{ operation_type: "asset_cleanup_validated", result: "succeeded" },
|
||||
{ operation_type: "asset_cleanup_scheduled", result: "succeeded" },
|
||||
{ operation_type: "asset_cleanup_physical_completed", result: "succeeded" },
|
||||
]);
|
||||
});
|
||||
});
|
||||
@@ -19,7 +19,7 @@ describe("TASK-WP0-01 minimum toolchain", () => {
|
||||
expect(probe.fabricVersion).toBe("7.4.0");
|
||||
});
|
||||
|
||||
it("loads and closes Fastify with the frozen Swagger plugin", { timeout: 15_000 }, async () => {
|
||||
it("loads and closes Fastify with the frozen Swagger plugin", async () => {
|
||||
const app = await createApp();
|
||||
await app.ready();
|
||||
expect(app.hasPlugin("@fastify/swagger")).toBe(true);
|
||||
|
||||
@@ -9,12 +9,12 @@ describe("TASK-WP4-03 archived FontFace gate", () => {
|
||||
const loader = new ArchivedFontLoader({
|
||||
createFace: (family, source) => {
|
||||
expect(family).toBe("Dada_FONT081");
|
||||
expect(source).toBe("url(\"/api/v1/assets/public/p0a-complex-v1/FONT081\")");
|
||||
expect(source).toBe("url(\"/api/v1/assets/public/wp4-fixture-v1/FONT081\")");
|
||||
return { load };
|
||||
},
|
||||
fontSet: { add, check: () => true, ready: Promise.resolve() },
|
||||
});
|
||||
await expect(loader.ensure({ fontId: "FONT081", url: "/api/v1/assets/public/p0a-complex-v1/FONT081" })).resolves.toBe("ready");
|
||||
await expect(loader.ensure({ fontId: "FONT081", url: "/api/v1/assets/public/wp4-fixture-v1/FONT081" })).resolves.toBe("ready");
|
||||
expect(load).toHaveBeenCalledOnce();
|
||||
expect(add).toHaveBeenCalledOnce();
|
||||
expect(loader.status("FONT081")).toBe("ready");
|
||||
|
||||
@@ -190,27 +190,6 @@ describe("TDD-WP5-MAN-001 readonly asset compiler", () => {
|
||||
expect(repeated.report.derived_files).toEqual({ created: 0, reused: 4, total: 4 });
|
||||
});
|
||||
|
||||
it("safely relocates legacy absolute font package paths after an archive move", () => {
|
||||
const fixture = createFixture();
|
||||
const catalogPath = join(fixture.sourceRoot, "fonts", "reports", "font_panel_catalog.csv");
|
||||
const metadata = JSON.parse(readFileSync(join(fixture.sourceRoot, "fonts", "resources", "font_packages", "FONT001_Test", "metadata.json"), "utf8")) as { local_sha256: string };
|
||||
csv(catalogPath, [{
|
||||
candidate_id: "FONT001",
|
||||
display_name: "Test Font",
|
||||
font_family: "Dada Test",
|
||||
local_sha256: metadata.local_sha256,
|
||||
panel_order: "1",
|
||||
resource_dir: "C:/Users/legacy/Desktop/sticker_text/fonts/resources/font_packages/FONT001_Test",
|
||||
resource_status: "verified_extracted",
|
||||
}]);
|
||||
|
||||
expect(() => compileAssetArchive({
|
||||
manifestPath: fixture.manifestPath,
|
||||
outputDirectory: fixture.outputRoot,
|
||||
releaseVersion: "fixture-v1",
|
||||
})).not.toThrow();
|
||||
});
|
||||
|
||||
it("rejects evidence collections, traversal and output inside a source root", () => {
|
||||
const fixture = createFixture();
|
||||
const manifest = JSON.parse(readFileSync(fixture.manifestPath, "utf8")) as { collections: unknown[] };
|
||||
|
||||
@@ -1,217 +0,0 @@
|
||||
import { createHash } from "node:crypto";
|
||||
|
||||
export const WP4_07_SOURCE_HASHES = Object.freeze({
|
||||
"DevelopmentPlan.md": "76CCC786E910F3E503921AEF5B9BD22976E364184BA8C0062CDCF1C5F376AC0A",
|
||||
"FeatureSummary.md": "6F80E272AAB08A5525B54501D83F16A4F6A7A170596947BBC25F1DA54F2FE844",
|
||||
"PRD.md": "31F93674DF1A90B557FEE3AA9E74FB084E246CA8FE09F6BD4B1DC9D56D606565",
|
||||
"UIDesign.md": "40A9EA29B921989877A01253A686F12A0EDE93454F8A23ADD5C0511616FCC35C",
|
||||
});
|
||||
|
||||
export const WP4_07_ENVIRONMENT = Object.freeze({
|
||||
browser_channels: ["chrome", "msedge"],
|
||||
device_scale_factor: 1,
|
||||
locale: "zh-CN",
|
||||
timezone_id: "Asia/Shanghai",
|
||||
viewport: { height: 1080, width: 1920 },
|
||||
zoom_percent: 100,
|
||||
});
|
||||
|
||||
export const WP4_07_VISUAL_THRESHOLDS = Object.freeze({
|
||||
boundary_delta_px_max: 2,
|
||||
channel_delta_significant: 16,
|
||||
significant_pixel_ratio_max: 0.01,
|
||||
});
|
||||
|
||||
export const WP4_07_PERFORMANCE_BUDGETS = Object.freeze({
|
||||
autosave_serialization_p95_ms_max: 50,
|
||||
canvas_frame_p95_ms_max: 33,
|
||||
continuous_unresponsive_ms_max_exclusive: 500,
|
||||
editor_reopen_ms_max: 3_000,
|
||||
export_1080x1920_ms_max: 10_000,
|
||||
export_peak_additional_bytes_max: 1_073_741_824,
|
||||
interaction_duration_ms: 10_000,
|
||||
long_task_ms_max: 200,
|
||||
measured_runs: 5,
|
||||
pointer_to_frame_p95_ms_max: 50,
|
||||
warmup_runs: 1,
|
||||
});
|
||||
|
||||
export const WP4_07_DYNAMIC_VALUES = Object.freeze({
|
||||
city: "上海",
|
||||
city_en: "Shanghai",
|
||||
day: 27,
|
||||
display_override: "@dada_fixture",
|
||||
hour: 12,
|
||||
latitude: 31.2304,
|
||||
longitude: 121.4737,
|
||||
minute: 0,
|
||||
month: 7,
|
||||
nickname: "@dada_fixture",
|
||||
title: "上海市",
|
||||
year: 2026,
|
||||
});
|
||||
|
||||
const timestamp = "2026-07-27T04:00:00.000Z";
|
||||
const redResourceVersion = "wp4-07-red-contract-v1";
|
||||
export const WP4_07_REAL_RESOURCE_VERSIONS = Object.freeze({
|
||||
complex: "p0a-complex-v1",
|
||||
static: "p0a-static-v1",
|
||||
});
|
||||
const palette = ["#111111", "#F2F400", "#1769AA", "#C92A24", "#FFFFFF"];
|
||||
const textTemplateIds = [
|
||||
"FLOWER001", "FLOWER003", "FLOWER005", "FLOWER008", "H003", "H004",
|
||||
"H006", "TAG001", "TAG002", "TAG003", "TAG005", "TAG051",
|
||||
];
|
||||
const textFontIds = [
|
||||
"FONT011", "FONT008", "FONT008", "FONT005", "FONT039", "FONT046",
|
||||
"FONT052", "FONT027", "FONT043", "FONT043", "FONT008", "FONT022",
|
||||
];
|
||||
const dynamicIds = [
|
||||
"DYN001", "DYN002", "DYN003", "DYN004", "DYN007",
|
||||
"DYN008", "DYN011", "DYN012", "DYN015", "DYN016",
|
||||
];
|
||||
const colorCards = [
|
||||
["COLOR001", "style_01"],
|
||||
["COLOR002", "style_02"],
|
||||
["COLOR008", "style_08"],
|
||||
["COLOR016", "style_16"],
|
||||
];
|
||||
|
||||
function identity(index) {
|
||||
return `00000000-0000-4000-8000-${String(4_070_000 + index).padStart(12, "0")}`;
|
||||
}
|
||||
|
||||
function position(index, columns, rowOffset) {
|
||||
return {
|
||||
x: Number((0.1 + (index % columns) * (0.8 / Math.max(1, columns - 1))).toFixed(4)),
|
||||
y: Number((rowOffset + Math.floor(index / columns) * 0.105).toFixed(4)),
|
||||
};
|
||||
}
|
||||
|
||||
function common(index, type, templateOrAssetId, resourceVersion) {
|
||||
return {
|
||||
created_at: timestamp,
|
||||
element_id: identity(index),
|
||||
opacity: 1,
|
||||
position: { x: 0.5, y: 0.5 },
|
||||
resource_version: resourceVersion,
|
||||
rotation: 0,
|
||||
scale: { x: 1, y: 1 },
|
||||
style_parameters: {},
|
||||
template_or_asset_id: templateOrAssetId,
|
||||
type,
|
||||
z_index: index - 1,
|
||||
};
|
||||
}
|
||||
|
||||
function releaseVersions(input = redResourceVersion) {
|
||||
return typeof input === "string" ? { complex: input, static: input } : input;
|
||||
}
|
||||
|
||||
export function createWp407CanvasFixture(resourceVersions = redResourceVersion) {
|
||||
const versions = releaseVersions(resourceVersions);
|
||||
const text = textTemplateIds.map((templateId, offset) => ({
|
||||
...common(offset + 1, "text_template", templateId, versions.complex),
|
||||
content: offset === 0 ? "DADA\n视觉预算" : `固定文字 ${String(offset + 1).padStart(2, "0")}`,
|
||||
font_size: 48,
|
||||
position: offset === 0 ? { x: 0.5, y: 0.5 } : position(offset, 4, 0.09),
|
||||
rotation: (offset % 3 - 1) * 4,
|
||||
scale: { x: 0.72, y: 0.72 },
|
||||
style_parameters: {
|
||||
background_color: "#F2F400",
|
||||
background_enabled: offset % 4 === 0,
|
||||
background_opacity: 0.9,
|
||||
default_font_id: textFontIds[offset],
|
||||
fill_color: offset % 2 === 0 ? "#111111" : "#1769AA",
|
||||
letter_spacing: 1,
|
||||
line_height: 1.2,
|
||||
stroke_color: "#FFFFFF",
|
||||
stroke_enabled: offset % 5 === 0,
|
||||
stroke_width: offset % 5 === 0 ? 2 : 0,
|
||||
text_align: "center",
|
||||
},
|
||||
}));
|
||||
const stickers = Array.from({ length: 24 }, (_, offset) => ({
|
||||
...common(offset + 13, "static_sticker", `STK${String(offset + 1).padStart(3, "0")}`, versions.static),
|
||||
opacity: 0.84 + (offset % 4) * 0.04,
|
||||
position: position(offset, 6, 0.39),
|
||||
rotation: (offset % 5 - 2) * 6,
|
||||
scale: { x: 0.58 + (offset % 3) * 0.06, y: 0.58 + (offset % 3) * 0.06 },
|
||||
style_parameters: { flip_horizontal: offset % 7 === 0 },
|
||||
}));
|
||||
const colors = colorCards.map(([cardId, styleId], offset) => ({
|
||||
...common(offset + 37, "color_card", cardId, versions.complex),
|
||||
colors: [...palette],
|
||||
position: { x: 0.16 + offset * 0.22, y: 0.83 },
|
||||
scale: { x: 1.25, y: 1.25 },
|
||||
style_id: styleId,
|
||||
style_parameters: { palette_algorithm_version: "mmcq-v1" },
|
||||
}));
|
||||
const dynamics = dynamicIds.map((dynamicId, offset) => ({
|
||||
...common(offset + 41, "dynamic_sticker", dynamicId, versions.complex),
|
||||
dynamic_fields: { ...WP4_07_DYNAMIC_VALUES },
|
||||
formatted_value: dynamicId === "DYN012" ? "12:00 PM" : "@dada_fixture",
|
||||
position: { x: 0.09 + (offset % 5) * 0.205, y: 0.9 + Math.floor(offset / 5) * 0.06 },
|
||||
scale: { x: 0.55, y: 0.55 },
|
||||
style_parameters: dynamicId === "DYN012" ? { font_id: "FONT081", known_substitution: true } : {},
|
||||
}));
|
||||
return {
|
||||
background: {
|
||||
adjustments: {
|
||||
brightness: 0, contrast: 0, crop: null, filter: "none", fit: "fill",
|
||||
saturation: 0, sharpness: 0, temperature: 0,
|
||||
},
|
||||
asset_id: "00000000-0000-4000-8000-000000004079",
|
||||
},
|
||||
elements: [...text, ...stickers, ...colors, ...dynamics],
|
||||
pixel_height: 1920,
|
||||
pixel_width: 1080,
|
||||
ratio: "9:16",
|
||||
schema_version: 1,
|
||||
};
|
||||
}
|
||||
|
||||
export function wp407FixtureContract(resourceVersions = redResourceVersion) {
|
||||
const canvas = createWp407CanvasFixture(resourceVersions);
|
||||
return {
|
||||
canvas,
|
||||
dynamic_values: WP4_07_DYNAMIC_VALUES,
|
||||
environment: WP4_07_ENVIRONMENT,
|
||||
performance_budgets: WP4_07_PERFORMANCE_BUDGETS,
|
||||
schema_version: "wp4-07-fixed-fixture/v1",
|
||||
visual_thresholds: WP4_07_VISUAL_THRESHOLDS,
|
||||
};
|
||||
}
|
||||
|
||||
export function wp407FixtureSha256(resourceVersions = redResourceVersion) {
|
||||
return createHash("sha256").update(JSON.stringify(wp407FixtureContract(resourceVersions))).digest("hex").toUpperCase();
|
||||
}
|
||||
|
||||
export function assertWp407Fixture(resourceVersions = redResourceVersion) {
|
||||
const fixture = wp407FixtureContract(resourceVersions);
|
||||
const counts = Object.fromEntries(["text_template", "static_sticker", "color_card", "dynamic_sticker"].map((type) => [
|
||||
type,
|
||||
fixture.canvas.elements.filter((element) => element.type === type).length,
|
||||
]));
|
||||
if (fixture.canvas.elements.length !== 50) throw new Error("FX-CANVAS-50 must contain exactly 50 overlay elements");
|
||||
if (JSON.stringify(counts) !== JSON.stringify({ text_template: 12, static_sticker: 24, color_card: 4, dynamic_sticker: 10 })) {
|
||||
throw new Error(`FX-CANVAS-50 composition changed: ${JSON.stringify(counts)}`);
|
||||
}
|
||||
if (fixture.canvas.pixel_width !== 1080 || fixture.canvas.pixel_height !== 1920) throw new Error("export fixture dimensions changed");
|
||||
if (new Set(fixture.canvas.elements.map((element) => element.element_id)).size !== 50) throw new Error("fixture element IDs are not unique");
|
||||
if (fixture.performance_budgets.warmup_runs !== 1 || fixture.performance_budgets.measured_runs !== 5) throw new Error("measurement count changed");
|
||||
if (fixture.performance_budgets.interaction_duration_ms !== 10_000) throw new Error("interaction duration changed");
|
||||
if (fixture.environment.viewport.width !== 1920 || fixture.environment.viewport.height !== 1080 || fixture.environment.device_scale_factor !== 1) {
|
||||
throw new Error("candidate viewport or DPR changed");
|
||||
}
|
||||
return { counts, fixture_sha256: wp407FixtureSha256(resourceVersions) };
|
||||
}
|
||||
|
||||
export const WP4_07_RED_RESOURCE_VERSION = redResourceVersion;
|
||||
export const WP4_07_REQUIRED_FONT_IDS = Object.freeze([
|
||||
"FONT005", "FONT008", "FONT011", "FONT021", "FONT022", "FONT027", "FONT039", "FONT043", "FONT046", "FONT052", "FONT081",
|
||||
"15974853bc3294ef68e7e6d58fe74fd7", "46f8336813e4c48d06a1aef294fdccf6",
|
||||
"53ca6b704728520da50c145eabb2e635", "cca5efc0e02fb1bf62349bd68ef30fc1",
|
||||
"dd25b35dcb7ba4476cbaa9a9592e39e2", "e4210c9872f0c279b35273f230809821",
|
||||
"f4bfd4132df2d6be97ceabadf3853505",
|
||||
]);
|
||||
@@ -1,49 +0,0 @@
|
||||
import assert from "node:assert/strict";
|
||||
import test from "node:test";
|
||||
|
||||
import {
|
||||
WP4_07_PERFORMANCE_BUDGETS,
|
||||
WP4_07_RED_RESOURCE_VERSION,
|
||||
WP4_07_VISUAL_THRESHOLDS,
|
||||
assertWp407Fixture,
|
||||
createWp407CanvasFixture,
|
||||
} from "./wp4-07-fixture.mjs";
|
||||
|
||||
test("FX-CANVAS-50 stays fixed at the normative composition and export size", () => {
|
||||
const contract = assertWp407Fixture();
|
||||
assert.deepEqual(contract.counts, {
|
||||
color_card: 4,
|
||||
dynamic_sticker: 10,
|
||||
static_sticker: 24,
|
||||
text_template: 12,
|
||||
});
|
||||
assert.match(contract.fixture_sha256, /^[0-9A-F]{64}$/);
|
||||
});
|
||||
|
||||
test("visual and performance thresholds cannot be weakened by the harness", () => {
|
||||
assert.deepEqual(WP4_07_VISUAL_THRESHOLDS, {
|
||||
boundary_delta_px_max: 2,
|
||||
channel_delta_significant: 16,
|
||||
significant_pixel_ratio_max: 0.01,
|
||||
});
|
||||
assert.deepEqual(WP4_07_PERFORMANCE_BUDGETS, {
|
||||
autosave_serialization_p95_ms_max: 50,
|
||||
canvas_frame_p95_ms_max: 33,
|
||||
continuous_unresponsive_ms_max_exclusive: 500,
|
||||
editor_reopen_ms_max: 3_000,
|
||||
export_1080x1920_ms_max: 10_000,
|
||||
export_peak_additional_bytes_max: 1_073_741_824,
|
||||
interaction_duration_ms: 10_000,
|
||||
long_task_ms_max: 200,
|
||||
measured_runs: 5,
|
||||
pointer_to_frame_p95_ms_max: 50,
|
||||
warmup_runs: 1,
|
||||
});
|
||||
});
|
||||
|
||||
test("the Red contract resource version is structurally barred from Green", () => {
|
||||
const canvas = createWp407CanvasFixture();
|
||||
assert.equal(new Set(canvas.elements.map((element) => element.resource_version)).size, 1);
|
||||
assert.equal(canvas.elements[0].resource_version, WP4_07_RED_RESOURCE_VERSION);
|
||||
assert.match(WP4_07_RED_RESOURCE_VERSION, /red-contract/);
|
||||
});
|
||||
@@ -1,42 +0,0 @@
|
||||
import assert from "node:assert/strict";
|
||||
import test from "node:test";
|
||||
|
||||
import { inspectWp5TaskLineage } from "../../scripts/lib/wp4-07-gate.mjs";
|
||||
|
||||
const sha = (digit) => digit.repeat(40);
|
||||
const commit = (index) => ({ sha: sha(String(index)), subject: `feat: complete TASK-WP5-0${index}` });
|
||||
|
||||
test("WP5 lineage recognizes tasks already merged into later remote heads", () => {
|
||||
const gate = inspectWp5TaskLineage({
|
||||
"codex/wp5-03": sha("3"),
|
||||
"codex/wp5-04": sha("4"),
|
||||
}, {
|
||||
"codex/wp5-03": [commit(3), commit(2), commit(1)],
|
||||
"codex/wp5-04": [commit(4), commit(2), commit(1)],
|
||||
});
|
||||
|
||||
assert.equal(gate.complete, false);
|
||||
assert.equal(gate.candidate_baseline_branch, "codex/wp5-04");
|
||||
assert.deepEqual(gate.missing_tasks, ["TASK-WP5-05", "TASK-WP5-06", "TASK-WP5-07"]);
|
||||
assert.equal(gate.task_shas["TASK-WP5-01"], sha("1"));
|
||||
assert.equal(gate.task_shas["TASK-WP5-02"], sha("2"));
|
||||
});
|
||||
|
||||
test("WP5 lineage accepts independently pushed terminal branches without rewriting their heads", () => {
|
||||
const heads = Object.fromEntries(Array.from({ length: 5 }, (_, index) => [`codex/wp5-0${index + 3}`, sha(String(index + 3))]));
|
||||
const histories = {
|
||||
"codex/wp5-03": [commit(3), commit(2), commit(1)],
|
||||
"codex/wp5-04": [commit(4), commit(2), commit(1)],
|
||||
"codex/wp5-05": [commit(5), commit(4), commit(2), commit(1)],
|
||||
"codex/wp5-06": [commit(6), commit(5), commit(4), commit(2), commit(1)],
|
||||
"codex/wp5-07": [commit(7), commit(4), commit(2), commit(1)],
|
||||
};
|
||||
const complete = inspectWp5TaskLineage(heads, histories);
|
||||
const incomplete = inspectWp5TaskLineage(heads, { ...histories, "codex/wp5-03": [commit(2), commit(1)] });
|
||||
|
||||
assert.equal(complete.complete, true);
|
||||
assert.deepEqual(complete.missing_tasks, []);
|
||||
assert.deepEqual(complete.terminal_branch_shas, heads);
|
||||
assert.equal(incomplete.complete, false);
|
||||
assert.deepEqual(incomplete.missing_tasks, ["TASK-WP5-03"]);
|
||||
});
|
||||
@@ -1,132 +0,0 @@
|
||||
import { createHash } from "node:crypto";
|
||||
import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
|
||||
import { homedir } from "node:os";
|
||||
import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
|
||||
|
||||
import { WP4_07_REAL_RESOURCE_VERSIONS } from "./wp4-07-fixture.mjs";
|
||||
|
||||
const dynamicFontTemplates = Object.freeze({
|
||||
"15974853bc3294ef68e7e6d58fe74fd7": "DYN002",
|
||||
"46f8336813e4c48d06a1aef294fdccf6": "DYN016",
|
||||
"53ca6b704728520da50c145eabb2e635": "DYN007",
|
||||
cca5efc0e02fb1bf62349bd68ef30fc1: "DYN015",
|
||||
dd25b35dcb7ba4476cbaa9a9592e39e2: "DYN001",
|
||||
e4210c9872f0c279b35273f230809821: "DYN011",
|
||||
f4bfd4132df2d6be97ceabadf3853505: "DYN008",
|
||||
});
|
||||
|
||||
const dynamicImages = Object.freeze({
|
||||
"DYN001-image28": ["DYN001", "image28.png"],
|
||||
"DYN002-image29": ["DYN002", "image29.png"],
|
||||
"DYN003-image30": ["DYN003", "image30.png"],
|
||||
"DYN004-image32": ["DYN004", "image32.png"],
|
||||
"DYN008-backendui0": ["DYN008", "backendui0.png"],
|
||||
"DYN011-backendui0": ["DYN011", "backendui0.png"],
|
||||
"DYN015-imager2": ["DYN015", "imager2_2.png"],
|
||||
"DYN016-image21": ["DYN016", "image21.png"],
|
||||
});
|
||||
|
||||
function sha256(path) {
|
||||
return createHash("sha256").update(readFileSync(path)).digest("hex").toUpperCase();
|
||||
}
|
||||
|
||||
function walkFiles(directory) {
|
||||
return readdirSync(directory, { withFileTypes: true }).flatMap((entry) => {
|
||||
const path = join(directory, entry.name);
|
||||
return entry.isDirectory() ? walkFiles(path) : [path];
|
||||
});
|
||||
}
|
||||
|
||||
function firstFile(directory, predicate) {
|
||||
const path = walkFiles(directory).find(predicate);
|
||||
if (!path) throw new Error(`WP4_07_REAL_ASSET_FILE_MISSING:${basename(directory)}`);
|
||||
return path;
|
||||
}
|
||||
|
||||
function inside(root, path) {
|
||||
const delta = relative(resolve(root), resolve(path));
|
||||
return delta !== ".." && !delta.startsWith(`..${sep}`) && !isAbsolute(delta);
|
||||
}
|
||||
|
||||
function contentType(path) {
|
||||
const extension = extname(path).toLowerCase();
|
||||
if (extension === ".png") return "image/png";
|
||||
if (extension === ".otf") return "font/otf";
|
||||
if (extension === ".woff") return "font/woff";
|
||||
if (extension === ".woff2") return "font/woff2";
|
||||
return "font/ttf";
|
||||
}
|
||||
|
||||
function assetRecord(assetId, path, sourceReference, expectedSha256) {
|
||||
if (!existsSync(path) || !statSync(path).isFile()) throw new Error(`WP4_07_REAL_ASSET_UNAVAILABLE:${assetId}`);
|
||||
const actualSha256 = sha256(path);
|
||||
if (expectedSha256 && actualSha256 !== expectedSha256) throw new Error(`WP4_07_REAL_ASSET_HASH_MISMATCH:${assetId}`);
|
||||
return {
|
||||
asset_id: assetId,
|
||||
bytes: statSync(path).size,
|
||||
content_type: contentType(path),
|
||||
path,
|
||||
sha256: actualSha256,
|
||||
source_reference: sourceReference,
|
||||
};
|
||||
}
|
||||
|
||||
export function loadWp407RealAssets() {
|
||||
const manifestPath = resolve(process.env.DADA_WP4_07_FINAL_ASSET_MANIFEST ?? "");
|
||||
if (!process.env.DADA_WP4_07_FINAL_ASSET_MANIFEST || !existsSync(manifestPath)) throw new Error("WP4_07_FINAL_ASSET_MANIFEST_REQUIRED");
|
||||
const replicationRoot = resolve(process.env.DADA_REPLICATION_ASSET_ROOT ?? join(homedir(), "Desktop", "sticker_web_replication_assets"));
|
||||
const handoffPath = resolve(process.env.DADA_COMPLEX_ASSET_MANIFEST ?? join(replicationRoot, "sticker_web_handoff", "sticker_web_catalog_manifest.json"));
|
||||
const staticRoot = resolve(process.env.DADA_STATIC_STICKER_ROOT ?? join(replicationRoot, "sticker_normal"));
|
||||
const backgroundPath = resolve(process.env.DADA_WP4_07_BACKGROUND_PATH ?? join(homedir(), "Documents", "贴纸脚本", "time_01_input_20260716.png"));
|
||||
if (!existsSync(handoffPath) || !existsSync(staticRoot)) throw new Error("WP4_07_REAL_ARCHIVE_ROOT_REQUIRED");
|
||||
|
||||
const manifestRaw = readFileSync(manifestPath, "utf8");
|
||||
const manifest = JSON.parse(manifestRaw);
|
||||
const handoff = JSON.parse(readFileSync(handoffPath, "utf8"));
|
||||
const collectionRoots = Object.fromEntries(handoff.collections.map((collection) => [collection.id, resolve(dirname(handoffPath), collection.root)]));
|
||||
const fontRoot = collectionRoots.font_panel;
|
||||
const dynamicRoot = collectionRoots.interactive_stickers;
|
||||
if (!fontRoot || !dynamicRoot) throw new Error("WP4_07_REAL_ARCHIVE_COLLECTION_REQUIRED");
|
||||
|
||||
const publicAssets = new Map();
|
||||
for (const item of manifest.assets.font_panel_items) {
|
||||
const packageDirectory = resolve(fontRoot, item.canonical_resource_reference.path);
|
||||
if (!inside(fontRoot, packageDirectory)) throw new Error(`WP4_07_UNSAFE_FONT_REFERENCE:${item.canonical_id}`);
|
||||
const path = firstFile(resolve(packageDirectory, "font_files"), (candidate) => /\.(?:otf|ttf|woff2?|ztf)$/i.test(candidate));
|
||||
publicAssets.set(item.canonical_id, assetRecord(item.canonical_id, path, `font_panel/${item.canonical_id}/${basename(path)}`));
|
||||
}
|
||||
|
||||
for (const item of manifest.assets.static_stickers) {
|
||||
const path = resolve(staticRoot, item.relative_path);
|
||||
if (!inside(staticRoot, path)) throw new Error(`WP4_07_UNSAFE_STATIC_REFERENCE:${item.stable_id}`);
|
||||
publicAssets.set(item.stable_id, assetRecord(item.stable_id, path, `static/${item.stable_id}`, item.sha256));
|
||||
}
|
||||
|
||||
for (const [assetId, templateId] of Object.entries(dynamicFontTemplates)) {
|
||||
const directory = resolve(dynamicRoot, "templates", templateId, "fonts", assetId);
|
||||
const path = firstFile(directory, (candidate) => /\.(?:otf|ttf|woff2?|ztf)$/i.test(candidate));
|
||||
publicAssets.set(assetId, assetRecord(assetId, path, `interactive/${templateId}/fonts/${assetId}/${basename(path)}`));
|
||||
}
|
||||
for (const [assetId, [templateId, filename]] of Object.entries(dynamicImages)) {
|
||||
const path = resolve(dynamicRoot, "templates", templateId, "resource", filename);
|
||||
publicAssets.set(assetId, assetRecord(assetId, path, `interactive/${templateId}/resource/${filename}`));
|
||||
}
|
||||
|
||||
const background = assetRecord("private-background", backgroundPath, "private/background/time_01_input_20260716.png");
|
||||
const manifestSha256 = createHash("sha256").update(manifestRaw).digest("hex").toUpperCase();
|
||||
return {
|
||||
background,
|
||||
evidence: {
|
||||
asset_count: publicAssets.size,
|
||||
assets: [...publicAssets.values()].map(({ asset_id, bytes, content_type, sha256: hash, source_reference }) => ({
|
||||
asset_id, bytes, content_type, sha256: hash, source_reference,
|
||||
})),
|
||||
background: { bytes: background.bytes, content_type: background.content_type, sha256: background.sha256, source_reference: background.source_reference },
|
||||
manifest_sha256: manifestSha256,
|
||||
release_version: manifest.release_version,
|
||||
resource_versions: WP4_07_REAL_RESOURCE_VERSIONS,
|
||||
source_mutations: 0,
|
||||
},
|
||||
publicAssets,
|
||||
};
|
||||
}
|
||||
Reference in New Issue
Block a user