@dsh-workbench/shared 0.3.11 → 1.0.0-beta.0

package/src/host/__tests__/adapter-set.test.ts

@@ -0,0 +1,228 @@
+import { afterEach, describe, expect, it } from 'vitest';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import type { DshHostContext } from '../../api/dsh.js';
+import { loadAdapterSet, resolveAdapterSet } from '../adapter-set.js';
+
+const dirs: string[] = [];
+
+function profileOf(): string {
+  const dir = mkdtempSync(join(tmpdir(), 'wb-adapter-set-'));
+  dirs.push(dir);
+  writeFileSync(join(dir, 'package.json'), JSON.stringify({ name: 'fixture-profile', private: true, type: 'module' }));
+  return dir;
+}
+
+function install(dir: string, name: string, source: string): void {
+  const pkg = join(dir, 'node_modules', name);
+  mkdirSync(pkg, { recursive: true });
+  writeFileSync(
+    join(pkg, 'package.json'),
+    JSON.stringify({ name, version: '1.0.0', type: 'module', exports: { '.': './index.js' } }),
+  );
+  writeFileSync(join(pkg, 'index.js'), source);
+}
+
+function installEsmOnly(dir: string, name: string, source: string): void {
+  const pkg = join(dir, 'node_modules', name);
+  mkdirSync(pkg, { recursive: true });
+  writeFileSync(
+    join(pkg, 'package.json'),
+    JSON.stringify({ name, version: '1.0.0', type: 'module', exports: { '.': { import: './index.js' } } }),
+  );
+  writeFileSync(join(pkg, 'index.js'), source);
+}
+
+function installDual(dir: string, name: string, esmSource: string, cjsSource: string): void {
+  const pkg = join(dir, 'node_modules', name);
+  mkdirSync(pkg, { recursive: true });
+  writeFileSync(
+    join(pkg, 'package.json'),
+    JSON.stringify({
+      name,
+      version: '1.0.0',
+      exports: { '.': { import: './index.mjs', require: './index.cjs' } },
+    }),
+  );
+  writeFileSync(join(pkg, 'index.mjs'), esmSource);
+  writeFileSync(join(pkg, 'index.cjs'), cjsSource);
+}
+
+function ctxOf(dir: string | null): DshHostContext {
+  return {
+    get: (key: string) => (key === 'profileContext' && dir !== null ? { dir } : undefined),
+  } as unknown as DshHostContext;
+}
+
+const FULL = `{
+  apiVersion: 1,
+  id: 'fixture',
+  version: '1.0.0',
+  data: {
+    read: async () => ({ ok: true, data: {} }),
+    request: async () => ({ ok: true, data: {} }),
+    requestMany: async () => ({}),
+    submit: async () => ({ ok: true, data: {} }),
+  },
+  supply: {
+    resolvePluginSource: () => ({ ok: false, problem: 'not-declared' }),
+    libInstallCommand: () => '',
+    pluginInstallPlan: () => ({ ok: false, problem: 'not-declared' }),
+    latestVersion: async () => undefined,
+    missingReleaseParts: async () => [],
+    probeRelease: async () => undefined,
+    splitNpmSpec: () => undefined,
+  },
+  profile: {
+    dirOf: () => null,
+    dshPlugins: () => () => ({ ok: true, plugins: [] }),
+    selfUpdateView: () => undefined,
+  },
+  probe: {
+    probeUnits: async () => [],
+    registerPreflight: () => {},
+    declaredPluginCommands: () => new Map(),
+  },
+}`;
+
+afterEach(() => {
+  for (const dir of dirs.splice(0)) rmSync(dir, { recursive: true, force: true });
+});
+
+describe('loadAdapterSet：从 profile 解析 set，失败不抛', () => {
+  it('没配置 → not-configured（不是错误）', async () => {
+    const loaded = await loadAdapterSet(ctxOf(profileOf()), undefined);
+    expect(loaded).toMatchObject({ ok: false, failure: 'not-configured' });
+  });
+
+  it('不是包名 → malformed', async () => {
+    const loaded = await loadAdapterSet(ctxOf(profileOf()), './local-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'malformed' });
+  });
+
+  it('没有 profile → no-profile', async () => {
+    const loaded = await loadAdapterSet(ctxOf(null), 'fixture-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'no-profile' });
+  });
+
+  it('没有 profile 时先报 no-profile，不先纠结包名', async () => {
+    const loaded = await loadAdapterSet(ctxOf(null), './local-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'no-profile' });
+  });
+
+  it('profile 里没装 → not-resolvable', async () => {
+    const loaded = await loadAdapterSet(ctxOf(profileOf()), 'fixture-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'not-resolvable' });
+  });
+
+  it('只导出 import 条件的 ESM 包也能从 profile 解析', async () => {
+    const dir = profileOf();
+    installEsmOnly(dir, 'esm-set', `export function createAdapterSet() { return ${FULL}; }`);
+    const loaded = await loadAdapterSet(ctxOf(dir), 'esm-set');
+    expect(loaded.ok).toBe(true);
+  });
+
+  it('双条件包走 import 那一份入口，不是 require 的 CJS 面', async () => {
+    const dir = profileOf();
+    installDual(
+      dir,
+      'dual-set',
+      `export function createAdapterSet() { return ${FULL}; }`,
+      'module.exports = { notTheFactory: 1 };',
+    );
+    const loaded = await loadAdapterSet(ctxOf(dir), 'dual-set');
+    expect(loaded.ok).toBe(true);
+  });
+
+  it('正常 set → ok，返回 core 成员', async () => {
+    const dir = profileOf();
+    install(dir, 'fixture-set', `export function createAdapterSet() { return ${FULL}; }`);
+    const loaded = await loadAdapterSet(ctxOf(dir), 'fixture-set');
+    expect(loaded.ok).toBe(true);
+    if (loaded.ok) {
+      expect(loaded.spec).toBe('fixture-set');
+      expect(loaded.set.data).toBeDefined();
+      expect(loaded.set.probe).toBeDefined();
+    }
+  });
+
+  it('没有工厂 → bad-export', async () => {
+    const dir = profileOf();
+    install(dir, 'fixture-set', 'export const nope = 1;');
+    const loaded = await loadAdapterSet(ctxOf(dir), 'fixture-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'bad-export' });
+  });
+
+  it('工厂抛错 → factory-failed', async () => {
+    const dir = profileOf();
+    install(dir, 'fixture-set', 'export function createAdapterSet() { throw new Error("boom"); }');
+    const loaded = await loadAdapterSet(ctxOf(dir), 'fixture-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'factory-failed' });
+  });
+
+  it('协议版本不对 → incompatible-version', async () => {
+    const dir = profileOf();
+    install(dir, 'fixture-set', `export function createAdapterSet() { return { ...${FULL}, apiVersion: 2 }; }`);
+    const loaded = await loadAdapterSet(ctxOf(dir), 'fixture-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'incompatible-version' });
+  });
+
+  it('少成员 → missing-member，点名缺哪个', async () => {
+    const dir = profileOf();
+    install(
+      dir,
+      'fixture-set',
+      'export function createAdapterSet() { return { apiVersion: 1, id: "fixture", version: "1.0.0", data: { read: async () => ({ ok: true, data: {} }) }, profile: { dirOf: () => null }, probe: { probeUnits: async () => [] } }; }',
+    );
+    const loaded = await loadAdapterSet(ctxOf(dir), 'fixture-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'missing-member' });
+    if (!loaded.ok) expect(loaded.detail).toContain('supply');
+  });
+
+  it('缺 id / version → missing-member，点名', async () => {
+    const dir = profileOf();
+    install(
+      dir,
+      'fixture-set',
+      'export function createAdapterSet() { return { apiVersion: 1, data: { read: async () => ({ ok: true, data: {} }) }, supply: { resolvePluginSource: () => ({ ok: false, problem: "not-declared" }) }, profile: { dirOf: () => null }, probe: { probeUnits: async () => [] } }; }',
+    );
+    const loaded = await loadAdapterSet(ctxOf(dir), 'fixture-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'missing-member' });
+    if (!loaded.ok) expect(loaded.detail).toContain('id');
+  });
+
+  it('关键方法不是函数 → missing-member', async () => {
+    const dir = profileOf();
+    install(
+      dir,
+      'fixture-set',
+      'export function createAdapterSet() { return { apiVersion: 1, id: "fixture", version: "1.0.0", data: {}, supply: { resolvePluginSource: () => ({ ok: false, problem: "not-declared" }) }, profile: { dirOf: () => null }, probe: { probeUnits: async () => [] } }; }',
+    );
+    const loaded = await loadAdapterSet(ctxOf(dir), 'fixture-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'missing-member' });
+    if (!loaded.ok) expect(loaded.detail).toContain('data.read');
+  });
+
+  it('完整 set → 不建、不 seed 默认集合', async () => {
+    const dir = profileOf();
+    install(
+      dir,
+      'full-set',
+      `export function createAdapterSet() { return ${FULL.replace('  probe: {', '  modules: new Proxy({}, { get: () => () => undefined }), runtime: new Proxy({}, { get: () => () => undefined }), plugins: new Proxy({}, { get: () => () => undefined }), actions: new Proxy({}, { get: () => () => undefined }),\n  probe: {')}; }`,
+    );
+    const resolved = await resolveAdapterSet(ctxOf(dir), 'full-set', async () => {
+      throw new Error('完整 set 不该建默认');
+    });
+    expect(resolved.load.ok).toBe(true);
+    expect(resolved.usedDefaults).toBe(false);
+    expect(resolved.set.id).toBe('fixture');
+  });
+
+  it('入口加载失败 → import-failed', async () => {
+    const dir = profileOf();
+    install(dir, 'fixture-set', 'export function createAdapterSet( {');
+    const loaded = await loadAdapterSet(ctxOf(dir), 'fixture-set');
+    expect(loaded).toMatchObject({ ok: false, failure: 'import-failed' });
+  });
+});

package/src/host/__tests__/adapters.test.ts

@@ -0,0 +1,27 @@
+import { describe, expect, it } from 'vitest';
+import type { DshHostContext } from '../../api/dsh.js';
+import type { WorkbenchAdapters } from '../adapters.js';
+import { adaptersOf, WORKBENCH_ADAPTERS } from '../adapters.js';
+
+describe('适配器端口：apply 期读自己刚 provide 的服务', () => {
+  it('严格 get 还看不见时，按非严格读得到', () => {
+    const adapters = {} as WorkbenchAdapters;
+    const seen: Array<boolean | undefined> = [];
+    const ctx = {
+      get: (name: string, strict?: boolean) => {
+        if (name !== WORKBENCH_ADAPTERS) return undefined;
+        seen.push(strict);
+        return strict === false ? adapters : undefined;
+      },
+    } as unknown as DshHostContext;
+
+    expect(adaptersOf(ctx)).toBe(adapters);
+    expect(seen).toEqual([false]);
+  });
+
+  it('真的没有 provide 时照旧抛', () => {
+    const ctx = { get: () => undefined } as unknown as DshHostContext;
+
+    expect(() => adaptersOf(ctx)).toThrow('workbenchAdapters 未提供');
+  });
+});

package/src/host/__tests__/changelog.test.ts

@@ -0,0 +1,102 @@
+import { describe, expect, it } from 'vitest';
+import {
+  CHANGELOG_FILE,
+  appendChangelogEntry,
+  changelogHasEntry,
+  changelogSectionOf,
+  changelogSkeleton,
+  parseChangelog,
+} from '../changelog.js';
+
+const SAMPLE = [
+  '# 更新日志',
+  '',
+  '## v1.2.0',
+  '',
+  '`2026-10-26`',
+  '',
+  '### ✨ 新增',
+  '',
+  '- 模块详情能看说明与更新日志',
+  '',
+  '### 🐛 修复',
+  '',
+  '- 发布审批会显示这一版的更新日志',
+  '',
+  '## v1.1.0',
+  '',
+  '`2026-10-01`',
+  '',
+  '- 旧版本的一条',
+  '',
+].join('\n');
+
+describe('parseChangelog', () => {
+  it('按 v 前缀的版本标题切段，正文保留分类与列表', () => {
+    const sections = parseChangelog(SAMPLE);
+    expect(sections.map((one) => one.version)).toEqual(['1.2.0', '1.1.0']);
+    expect(sections[0]?.body).toContain('`2026-10-26`');
+    expect(sections[0]?.body).toContain('### ✨ 新增');
+    expect(sections[0]?.body).toContain('- 模块详情能看说明与更新日志');
+    expect(sections[1]?.body).toContain('- 旧版本的一条');
+  });
+
+  it('文件名常量是 CHANGELOG.md', () => {
+    expect(CHANGELOG_FILE).toBe('CHANGELOG.md');
+  });
+});
+
+describe('changelogSectionOf / changelogHasEntry', () => {
+  it('认 v 前缀、方括号与不带方括号的版本标题', () => {
+    expect(changelogSectionOf(SAMPLE, 'v1.2.0')).toContain('更新日志');
+    expect(changelogSectionOf(SAMPLE, '1.1.0')).toContain('旧版本的一条');
+    expect(changelogSectionOf('# 更新日志\n\n## [1.0.0] - 2026-10-01\n\n- 一条\n', '1.0.0')).toBe('- 一条');
+  });
+
+  it('只有版本标题和日期不算一条记录', () => {
+    const empty = '# 更新日志\n\n## v1.0.0\n\n`2026-10-26`\n\n### ✨ 新增\n';
+    expect(changelogHasEntry(empty, '1.0.0')).toBe(false);
+    expect(changelogHasEntry(SAMPLE, '1.2.0')).toBe(true);
+    expect(changelogHasEntry(SAMPLE, '9.9.9')).toBe(false);
+  });
+});
+
+describe('appendChangelogEntry', () => {
+  it('新版本插在最前面，带日期行与 emoji 分类', () => {
+    const next = appendChangelogEntry(SAMPLE, { version: '1.3.0', kind: 'added', note: '新的东西', date: '2026-10-27' });
+    expect(parseChangelog(next).map((one) => one.version)).toEqual(['1.3.0', '1.2.0', '1.1.0']);
+    expect(next).toContain('## v1.3.0');
+    expect(next).toContain('`2026-10-27`');
+    expect(next).toContain('### ✨ 新增');
+    expect(changelogHasEntry(next, '1.3.0')).toBe(true);
+  });
+
+  it('已有版本号往对应分类下追加，不新建一段', () => {
+    const next = appendChangelogEntry(SAMPLE, { version: '1.2.0', kind: 'fixed', note: '又修了一条' });
+    const sections = parseChangelog(next);
+    expect(sections.filter((one) => one.version === '1.2.0')).toHaveLength(1);
+    expect(sections[0]?.body).toContain('- 又修了一条');
+    expect(sections[0]?.body.indexOf('- 又修了一条')).toBeGreaterThan(
+      sections[0]?.body.indexOf('- 发布审批会显示这一版的更新日志') ?? 0,
+    );
+  });
+
+  it('空文件从骨架起，只留标题', () => {
+    const next = appendChangelogEntry('', { version: '0.1.0', kind: 'added', note: '第一次发布' });
+    expect(next.startsWith('# 更新日志')).toBe(true);
+    expect(next).not.toContain('Unreleased');
+    expect(parseChangelog(next).map((one) => one.version)).toEqual(['0.1.0']);
+  });
+
+  it('这一版还没有该分类时补一个小节', () => {
+    const next = appendChangelogEntry(SAMPLE, { version: '1.2.0', kind: 'removed', note: '删掉旧入口' });
+    expect(changelogSectionOf(next, '1.2.0')).toContain('### 🗑️ 移除');
+    expect(changelogHasEntry(next, '1.2.0')).toBe(true);
+  });
+});
+
+describe('changelogSkeleton', () => {
+  it('只有标题，不给假条目', () => {
+    expect(changelogSkeleton()).toBe('# 更新日志\n');
+  });
+});

package/src/host/__tests__/command-name.test.ts

@@ -0,0 +1,16 @@
+import { describe, expect, it } from 'vitest';
+import { commandNamesMatch } from '../command-name.js';
+
+describe('commandNamesMatch：声明的命令名与解析出来的命令路径', () => {
+  it('缺省 opencli 不管写成名字还是绝对路径都算同一个', () => {
+    expect(commandNamesMatch('opencli', '/Users/me/.dsh/workbench/opencli/bin/opencli')).toBe(true);
+    expect(commandNamesMatch('opencli.cmd', 'C:\\dsh\\opencli.cmd')).toBe(true);
+    expect(commandNamesMatch('opencli.exe', 'C:\\dsh\\opencli.exe')).toBe(true);
+    expect(commandNamesMatch('gitops', '/usr/local/bin/gitops')).toBe(true);
+  });
+
+  it('不同的命令不算同一个', () => {
+    expect(commandNamesMatch('gitops', '/usr/local/bin/opencli')).toBe(false);
+    expect(commandNamesMatch('', 'opencli')).toBe(false);
+  });
+});

package/src/host/__tests__/diy-record.test.ts

@@ -14,8 +14,8 @@ const pact = (sessionId: string, now = 1000, unit = 'demo'): RecordPact => ({
   workspace: '/w/diy',
   unit,
   name: unit,
-  url: 'https://cmdb.example.com/env',
-  title: '环境 · CMDB',
+  url: 'https://inventory.example.com/env',
+  title: '环境 · Inventory',
   action: '发布',
   expect: { method: 'POST', urlContains: '/api/publish' },
   captureFile: '/w/diy/shots/rec-demo.jsonl',
@@ -34,7 +34,7 @@ describe('录制交接：一台机器一次一场，谁开谁收工', () => {
 
     expect(state.phase).toBe('armed');
     expect(state.unit).toBe('demo');
-    expect(state.url).toBe('https://cmdb.example.com/env');
+    expect(state.url).toBe('https://inventory.example.com/env');
     expect(state.action).toBe('发布');
     expect(state.expect).toEqual({ method: 'POST', urlContains: '/api/publish' });
     expect(state.captureFile).toBe('/w/diy/shots/rec-demo.jsonl');

package/src/host/__tests__/facts.test.ts

@@ -1,13 +1,13 @@
 import { describe, expect, it } from 'vitest';
-import { isFactScope, scopePrefixOf } from '../../api/facts.js';
+import { isFactScope, scopePrefixOf } from '../../contract/facts.js';
 import { unitFactScope } from '../facts.js';
 
 describe('unitFactScope', () => {
   it('命名空间 = 模块 id + `*`（"这个模块的数据全作废"只写一个字符串）', () => {
-    expect(unitFactScope('cmdb')).toBe('cmdb*');
-    expect(isFactScope('cmdb*')).toBe(true);
+    expect(unitFactScope('inventory')).toBe('inventory*');
+    expect(isFactScope('inventory*')).toBe(true);
     expect(isFactScope('*')).toBe(false);
-    expect(isFactScope('cmdb/summary')).toBe(false);
-    expect(scopePrefixOf('cmdb*')).toBe('cmdb');
+    expect(isFactScope('inventory/summary')).toBe(false);
+    expect(scopePrefixOf('inventory*')).toBe('inventory');
   });
 });

package/src/host/__tests__/long-task.test.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it } from 'vitest';
-import type { LongTaskStep } from '../../api/long-task.js';
+import type { LongTaskStep } from '../../contract/long-task.js';
 import {
   createLongTaskHost,
   createLongTaskRegistry,

package/src/host/__tests__/market-index.test.ts

@@ -0,0 +1,179 @@
+import { describe, expect, it } from 'vitest';
+import type { MarketIndex, MarketIndexEntry } from '../../contract/protocol/market-index.js';
+import {
+  filterMarketIndex,
+  marketInstallTarget,
+  marketSourceKey,
+  parseMarketIndex,
+  parseMarketIndexJson,
+  parseSourceConfig,
+  upsertMarketEntry,
+} from '../market-index.js';
+
+function entry(change: Partial<MarketIndexEntry> = {}): MarketIndexEntry {
+  return {
+    name: '@scope/module-x',
+    versions: [
+      {
+        version: '0.1.1',
+        source: { type: 'npm', registry: 'https://npm.company.com/' },
+        publishTimestamp: 1_760_000_000,
+      },
+      { version: '0.1.0', source: { type: 'npm' } },
+    ],
+    metadata: { category: 'workbench', labels: ['workbench'], keywords: ['缺陷'] },
+    ...change,
+  };
+}
+
+function indexOf(entries: readonly MarketIndexEntry[]): unknown {
+  return { format: 1, title: { zh: '工作台模块' }, plugins: entries };
+}
+
+describe('parseMarketIndex', () => {
+  it('收下一份合法的 format 1', () => {
+    const parsed = parseMarketIndex(indexOf([entry()]));
+    expect(parsed.ok).toBe(true);
+    if (!parsed.ok) return;
+    expect(parsed.index.plugins[0]?.name).toBe('@scope/module-x');
+    expect(parsed.index.title).toEqual({ zh: '工作台模块' });
+  });
+
+  it('format 不是 1 就整份拒', () => {
+    const parsed = parseMarketIndex({ format: 2, plugins: [] });
+    expect(parsed.ok).toBe(false);
+    if (parsed.ok) return;
+    expect(parsed.problems[0]?.kind).toBe('format');
+  });
+
+  it('版本没按 SemVer 降序就整份拒', () => {
+    const parsed = parseMarketIndex(indexOf([entry({ versions: [
+      { version: '0.1.0', source: { type: 'npm' } },
+      { version: '0.1.1', source: { type: 'npm' } },
+    ] })]));
+    expect(parsed.ok).toBe(false);
+    if (parsed.ok) return;
+    expect(parsed.problems[0]?.kind).toBe('version-order');
+  });
+
+  it('git source 只接受 40 位小写 commit', () => {
+    const parsed = parseMarketIndex(indexOf([entry({ versions: [
+      { version: '0.1.0', source: { type: 'git', url: 'https://git.company.com/wb/market.git', commit: 'v0.1.0' } },
+    ] })]));
+    expect(parsed.ok).toBe(false);
+    if (parsed.ok) return;
+    expect(parsed.problems[0]?.kind).toBe('git-commit');
+  });
+
+  it('同名插件整份拒', () => {
+    const parsed = parseMarketIndex(indexOf([entry(), entry()]));
+    expect(parsed.ok).toBe(false);
+    if (parsed.ok) return;
+    expect(parsed.problems[0]?.kind).toBe('duplicate-name');
+  });
+
+  it('JSON 读不懂是 not-json', () => {
+    const parsed = parseMarketIndexJson('{');
+    expect(parsed.ok).toBe(false);
+    if (parsed.ok) return;
+    expect(parsed.problems[0]?.kind).toBe('not-json');
+  });
+});
+
+describe('upsertMarketEntry', () => {
+  const base: MarketIndex = {
+    format: 1,
+    plugins: [entry({ versions: [{ version: '0.1.0', source: { type: 'npm' } }] })],
+  };
+
+  it('新版本合并进去并按 SemVer 降序', () => {
+    const next = upsertMarketEntry(base, entry({ versions: [
+      { version: '0.1.2', source: { type: 'npm' } },
+      { version: '0.1.1', source: { type: 'npm' } },
+    ] }));
+    expect(next.plugins[0]?.versions.map((one) => one.version)).toEqual(['0.1.2', '0.1.1', '0.1.0']);
+  });
+
+  it('同版本覆盖，不新增第二条', () => {
+    const next = upsertMarketEntry(base, entry({ versions: [
+      { version: '0.1.0', source: { type: 'git', url: 'https://git.company.com/wb/market.git', commit: 'a'.repeat(40) } },
+    ] }));
+    expect(next.plugins[0]?.versions).toHaveLength(1);
+    expect(next.plugins[0]?.versions[0]?.source.type).toBe('git');
+  });
+});
+
+describe('filterMarketIndex', () => {
+  const index: MarketIndex = {
+    format: 1,
+    plugins: [
+      entry(),
+      entry({ name: '@scope/module-y', metadata: { category: 'data', labels: ['cmdb'], keywords: ['服务'] } }),
+    ],
+  };
+
+  it('按 label 过滤', () => {
+    expect(filterMarketIndex(index, { label: 'cmdb' }).map((one) => one.name)).toEqual(['@scope/module-y']);
+  });
+
+  it('按分类过滤', () => {
+    expect(filterMarketIndex(index, { category: 'workbench' }).map((one) => one.name)).toEqual(['@scope/module-x']);
+  });
+
+  it('关键词搜中文描述', () => {
+    expect(filterMarketIndex(index, { query: '缺陷' }).map((one) => one.name)).toEqual(['@scope/module-x']);
+  });
+});
+
+describe('索引源与安装目标', () => {
+  it('sourceKey 忽略 localPath', () => {
+    const one = marketSourceKey({ kind: 'git', url: 'https://git.company.com/wb/market.git', ref: 'main' });
+    const other = marketSourceKey({
+      kind: 'git',
+      url: 'https://git.company.com/wb/market.git',
+      ref: 'main',
+      localPath: '/Users/x/market',
+    });
+    expect(one).toBe(other);
+  });
+
+  it('npm 目标带 registry，git 目标带 commit 与 path', () => {
+    expect(marketInstallTarget('@scope/x', '0.1.1', { type: 'npm', registry: 'https://npm.company.com/' })).toEqual({
+      spec: '@scope/x@0.1.1',
+      registry: 'https://npm.company.com/',
+    });
+    expect(
+      marketInstallTarget('@scope/x', '0.1.1', {
+        type: 'git',
+        url: 'https://git.company.com/wb/market.git',
+        commit: 'a'.repeat(40),
+        path: 'packages/module-x',
+      }),
+    ).toEqual({
+      spec: `git+https://git.company.com/wb/market.git#${'a'.repeat(40)}&path:/packages/module-x`,
+    });
+  });
+
+  it('http 源拒带凭据', () => {
+    const parsed = parseSourceConfig({
+      id: 'team',
+      label: '团队市场',
+      kind: 'http',
+      url: 'https://user:token@git.company.com/market.json',
+    });
+    expect(parsed.ok).toBe(false);
+  });
+
+  it('git 源收 scp 与 ssh 用户名形式，拒带密码', () => {
+    expect(parseSourceConfig({ id: 'team', label: '团队', kind: 'git', url: 'git@git.company.com:wb/market.git' }).ok).toBe(true);
+    expect(
+      parseSourceConfig({ id: 'team', label: '团队', kind: 'git', url: 'ssh://git@git.company.com/wb/market.git' }).ok,
+    ).toBe(true);
+    expect(
+      parseSourceConfig({ id: 'team', label: '团队', kind: 'git', url: 'https://user:token@git.company.com/wb/market.git' }).ok,
+    ).toBe(false);
+    expect(
+      parseSourceConfig({ id: 'team', label: '团队', kind: 'git', url: 'ssh://git:token@git.company.com/wb/market.git' }).ok,
+    ).toBe(false);
+  });
+});

package/src/host/__tests__/plugin-ledger.test.ts

@@ -14,7 +14,7 @@ const HOME = '/h/workbench/opencli/home';
 function entry(over: Partial<PluginLedgerEntry> = {}): PluginLedgerEntry {
   return {
     opencliHome: HOME,
-    package: 'opencli-plugin-cmdb',
+    package: 'opencli-plugin-inventory',
     installedAt: '2026-10-14T00:00:00.000Z',
     ...over,
   };
@@ -29,7 +29,7 @@ describe('台账条目的「放手」那一笔', () => {
   });
 
   it('★ 放手了的那一笔还在文件里（自动清得靠它认得"这是我们装的"），但不再是"持着"', () => {
-    const released = withReleasedEntry([entry()], HOME, 'opencli-plugin-cmdb', '2026-10-15T00:00:00.000Z');
+    const released = withReleasedEntry([entry()], HOME, 'opencli-plugin-inventory', '2026-10-15T00:00:00.000Z');
 
     expect(released).toHaveLength(1);
     expect(released[0]?.releasedAt).toBe('2026-10-15T00:00:00.000Z');
@@ -37,33 +37,33 @@ describe('台账条目的「放手」那一笔', () => {
   });
 
   it('记两次放手不覆盖第一次的时间（第二次是重放，不是新事实）', () => {
-    const once = withReleasedEntry([entry()], HOME, 'opencli-plugin-cmdb', '2026-10-15T00:00:00.000Z');
-    const twice = withReleasedEntry(once, HOME, 'opencli-plugin-cmdb', '2026-10-16T00:00:00.000Z');
+    const once = withReleasedEntry([entry()], HOME, 'opencli-plugin-inventory', '2026-10-15T00:00:00.000Z');
+    const twice = withReleasedEntry(once, HOME, 'opencli-plugin-inventory', '2026-10-16T00:00:00.000Z');
 
     expect(twice[0]?.releasedAt).toBe('2026-10-15T00:00:00.000Z');
   });
 
   it('另一个 home 的那一笔不受影响（隔离 wrapper 会换 home）', () => {
     const other = entry({ opencliHome: '/h/global/opencli/home' });
-    const released = withReleasedEntry([entry(), other], HOME, 'opencli-plugin-cmdb', '2026-10-15T00:00:00.000Z');
+    const released = withReleasedEntry([entry(), other], HOME, 'opencli-plugin-inventory', '2026-10-15T00:00:00.000Z');
 
     expect(released.find((item) => item.opencliHome !== HOME)?.releasedAt).toBeUndefined();
     expect(heldEntriesOfHome(released, other.opencliHome)).toHaveLength(1);
   });
 
   it('★ 按插件名找"用户持着的"那一份：插件名与包名两边都认（§3.4 那条映射）', () => {
-    const entries = [entry({ name: 'cmdb' })];
+    const entries = [entry({ name: 'inventory' })];
 
-    expect(heldEntryOfPlugin(entries, HOME, 'cmdb')?.package).toBe('opencli-plugin-cmdb');
-    expect(heldEntryOfPlugin(entries, HOME, 'opencli-plugin-cmdb')?.name).toBe('cmdb');
+    expect(heldEntryOfPlugin(entries, HOME, 'inventory')?.package).toBe('opencli-plugin-inventory');
+    expect(heldEntryOfPlugin(entries, HOME, 'opencli-plugin-inventory')?.name).toBe('inventory');
     expect(heldEntryOfPlugin(entries, HOME, '别的')).toBeUndefined();
     expect(heldEntryOfPlugin(entries, HOME, '  ')).toBeUndefined();
   });
 
   it('放手了的那一笔不再算"用户持着"（模块放手时就可以删它了）', () => {
-    const released = withReleasedEntry([entry({ name: 'cmdb' })], HOME, 'opencli-plugin-cmdb', '2026-10-15T00:00:00.000Z');
+    const released = withReleasedEntry([entry({ name: 'inventory' })], HOME, 'opencli-plugin-inventory', '2026-10-15T00:00:00.000Z');
 
-    expect(heldEntryOfPlugin(released, HOME, 'cmdb')).toBeUndefined();
+    expect(heldEntryOfPlugin(released, HOME, 'inventory')).toBeUndefined();
   });
 
   it('键还是「home + 包名」（同一份文件里两个 home 不互相撒谎）', () => {