@hupan56/wlkj 2.7.12 → 3.1.2

package/templates/qoder/scripts/{kg_auto_login.py → validation/test/kg_auto_login.py}

@@ -1,196 +1,208 @@
-# -*- coding: utf-8 -*-
-"""
-全自动登录: 获取验证码 → ddddocr识别 → 页面JS加密提交 → 保存token
-登录态保存到 auth-state.json, 后续测试复用(无需再次识别验证码)。
-"""
-import base64
-import json
-import os
-import sys
-import requests
-import ddddocr
-
-BASE_URL = 'https://icsqas.inforecloud.com'
-API_PREFIX = '/test-api'
-USERNAME = '15888888887'
-PASSWORD = 'admin123'
-CLIENT_ID = 'e5cd7e4891bf95d1d19206ce24a7b32e'
-
-# RSA公钥 (从 .env.production)
-RSA_PUBLIC_KEY_B64 = 'MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDN/EkuOg1gq/t2/PUI8GpcJCsCFQgHkSHUEdk7ZPrEQYd8IM1hFkHmDJrCOQ+qUPqKHG9a5BAI44yE6FuPI9Vvqu2ZrCww/zryR7A+2n5jaKIG2rJG9KHDzT5mAVOJrlhBf8L2i7wZc8eWrNg0md0BlwEowQyVEEj9oIBlw/nqTwIDAQAB'
-
-# 保存路径
-SCRIPTS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-
-def _read_developer():
-    """读 .qoder/.developer 拿当前开发者名, 用于身份隔离。
-    多人共用 workspace 时, auth-state 必须按开发者分目录, 否则会串登录态。
-    没有身份 → 抛异常 (绝不 fallback 到 hupan/default, 防串号)。"""
-    dev_file = os.path.join(SCRIPTS_DIR, '..', '..', '.qoder', '.developer')
-    if os.path.isfile(dev_file):
-        for ln in open(dev_file, encoding='utf-8'):
-            if ln.strip().startswith('name='):
-                return ln.strip().split('=', 1)[1].strip()
-    raise RuntimeError(
-        '未检测到开发者身份(.qoder/.developer)。请先运行 /wl-init 注册身份。'
-        ' (auth-state 按开发者分目录, 没身份无法隔离 → 拒绝执行防串号)'
-    )
-
-
-STATE_FILE = os.path.join(SCRIPTS_DIR, '..', '..', 'workspace', 'members',
-                          _read_developer(), 'auth-state.json')
-
-out = []
-def log(s=''):
-    out.append(s)
-    print(s)
-
-
-def get_captcha():
-    """获取验证码图片 + uuid"""
-    resp = requests.get(BASE_URL + API_PREFIX + '/auth/code', timeout=10)
-    data = resp.json().get('data', {})
-    return data.get('uuid'), data.get('img'), data.get('captchaEnabled', False)
-
-
-def recognize_captcha(img_b64):
-    """用 ddddocr 识别验证码图片, 并解析数学题(ICS 是 a op b = ? 形式).
-    返回算出的答案字符串; 解析失败返回 None."""
-    import re as _re
-    ocr = ddddocr.DdddOcr(show_ad=False)
-    img_bytes = base64.b64decode(img_b64)
-    raw = ocr.classification(img_bytes)
-    # 规范化运算符 (x/X/× → *, ÷ → /), 去掉 = ? 尾部
-    expr = raw.replace('x', '*').replace('X', '*').replace('×', '*').replace('÷', '/')
-    expr = expr.rstrip('=?？').strip()
-    m = _re.match(r'^\s*(\d+)\s*([+\-*/])\s*(\d+)\s*$', expr)
-    if not m:
-        return None
-    a, op, b = int(m.group(1)), m.group(2), int(m.group(3))
-    if op == '+':
-        ans = a + b
-    elif op == '-':
-        ans = a - b
-    elif op == '*':
-        ans = a * b
-    elif op == '/':
-        ans = a // b if b else None
-    else:
-        return None
-    return str(ans) if ans is not None else None
-
-
-def encrypt_login(username, password, code, uuid):
-    """用 RSA+AES 加密登录请求 (复现前端加密逻辑)。
-    使用 cryptography 库 (替代 pycryptodome)。"""
-    import os as _os
-    from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
-    from cryptography.hazmat.primitives.padding import PKCS7
-    from cryptography.hazmat.primitives.asymmetric import padding as asym_padding
-    from cryptography.hazmat.primitives.serialization import load_der_public_key
-
-    # 1. 生成随机 AES 密钥 (前端用 randomUUID = 32 hex chars)
-    aes_key = _os.urandom(16).hex().encode('utf-8')  # 32 bytes
-
-    # 2. AES-ECB-PKCS7 加密请求体
-    login_body = json.dumps({
-        'username': username,
-        'password': password,
-        'grantType': 'password',
-        'tenantId': '000000',
-        'clientId': CLIENT_ID,
-        'code': code,
-        'uuid': uuid,
-    }, ensure_ascii=False).encode('utf-8')
-
-    padder = PKCS7(128).padder()
-    padded = padder.update(login_body) + padder.finalize()
-    cipher = Cipher(algorithms.AES(aes_key), modes.ECB())
-    encryptor = cipher.encryptor()
-    encrypted_body = base64.b64encode(encryptor.update(padded) + encryptor.finalize()).decode()
-
-    # 3. RSA 加密 AES 密钥 (前端: encrypt(encryptBase64(aesKey)))
-    aes_key_b64 = base64.b64encode(aes_key).decode()
-    pub_key = load_der_public_key(base64.b64decode(RSA_PUBLIC_KEY_B64))
-    encrypted_key_bytes = pub_key.encrypt(aes_key_b64.encode('utf-8'), asym_padding.PKCS1v15())
-    encrypted_key = base64.b64encode(encrypted_key_bytes).decode()
-
-    return encrypted_body, encrypted_key
-
-
-def login():
-    """全自动登录流程"""
-    log('=== 全自动登录 ===')
-
-    # 1. 获取验证码
-    uuid, img_b64, captcha_enabled = get_captcha()
-    log('验证码: enabled=%s, uuid=%s' % (captcha_enabled, uuid[:8] if uuid else 'N/A'))
-
-    if not captcha_enabled:
-        log('验证码未开启, 直接登录')
-        code = ''
-        uuid = ''
-    else:
-        # 2. OCR 识别 + 数学题解析
-        code = recognize_captcha(img_b64)
-        log('OCR识别验证码: %s' % code)
-        if code is None:
-            # ddddocr 没读对(数学题识别不稳定), 本次放弃, 让外层重试
-            log('验证码识别失败(数学题未解析), 重试')
-            return None
-
-    # 3. 加密 + 登录
-    try:
-        encrypted_body, encrypted_key = encrypt_login(USERNAME, PASSWORD, code, uuid)
-        log('加密完成, 发送登录请求...')
-
-        resp = requests.post(
-            BASE_URL + API_PREFIX + '/auth/login',
-            data=encrypted_body,
-            headers={
-                'Content-Type': 'application/json',
-                'encrypt-key': encrypted_key,
-            },
-            timeout=10,
-        )
-        result = resp.json()
-        log('登录响应: code=%s, msg=%s' % (result.get('code'), result.get('msg')))
-
-        if result.get('code') == 200 and result.get('data', {}).get('access_token'):
-            token = result['data']['access_token']
-            log('✓ 登录成功! token=%s...' % token[:20])
-
-            # 保存登录态
-            os.makedirs(os.path.dirname(STATE_FILE), exist_ok=True)
-            with open(STATE_FILE, 'w', encoding='utf-8') as f:
-                json.dump({
-                    'access_token': token,
-                    'base_url': BASE_URL,
-                    'api_prefix': API_PREFIX,
-                    'saved_at': __import__('datetime').datetime.now().isoformat(),
-                }, f, indent=2)
-            log('登录态已保存: %s' % STATE_FILE)
-            return token
-        else:
-            log('✗ 登录失败: %s' % json.dumps(result, ensure_ascii=False)[:200])
-            log('  可能验证码识别错误, 重试...')
-            return None
-    except Exception as e:
-        log('登录异常: %s' % str(e))
-        return None
-
-
-if __name__ == '__main__':
-    # 数学题验证码识别不稳定, 多重试几次 (实测 ~30% 一次读对, 20 次基本必中)
-    import time as _time
-    for attempt in range(20):
-        log('--- 尝试 %d ---' % (attempt + 1))
-        token = login()
-        if token:
-            break
-        _time.sleep(0.3)
-    else:
-        log('20次尝试均失败, 请检查账号/密码/验证码/网络')
-
-    open(os.path.join(SCRIPTS_DIR, '_login_log.txt'), 'w', encoding='utf-8').write('\n'.join(out))
+# -*- coding: utf-8 -*-
+# v3.0 路径自举: 引导到 common/bootstrap, 统一 sys.path 逻辑
+import os as _o, sys as _s
+_f = _o.path.abspath(__file__)
+for _ in range(10):
+    _f = _o.path.dirname(_f)
+    _cp = _o.path.join(_f, 'foundation')
+    if _o.path.isfile(_o.path.join(_cp, 'bootstrap.py')):
+        break
+if _cp not in _s.path: _s.path.insert(0, _cp)
+from bootstrap import setup; setup()
+from foundation.core.paths import get_repo_root
+
+"""
+全自动登录: 获取验证码 → ddddocr识别 → 页面JS加密提交 → 保存token
+登录态保存到 auth-state.json, 后续测试复用(无需再次识别验证码)。
+"""
+import base64
+import json
+import os
+import sys
+import requests
+import ddddocr
+
+BASE_URL = 'https://icsqas.inforecloud.com'
+API_PREFIX = '/test-api'
+USERNAME = '15888888887'
+PASSWORD = 'admin123'
+CLIENT_ID = 'e5cd7e4891bf95d1d19206ce24a7b32e'
+
+# RSA公钥 (从 .env.production)
+RSA_PUBLIC_KEY_B64 = 'MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDN/EkuOg1gq/t2/PUI8GpcJCsCFQgHkSHUEdk7ZPrEQYd8IM1hFkHmDJrCOQ+qUPqKHG9a5BAI44yE6FuPI9Vvqu2ZrCww/zryR7A+2n5jaKIG2rJG9KHDzT5mAVOJrlhBf8L2i7wZc8eWrNg0md0BlwEowQyVEEj9oIBlw/nqTwIDAQAB'
+
+# 保存路径
+SCRIPTS_DIR = get_repo_root()
+
+
+def _read_developer():
+    """读 .qoder/.developer 拿当前开发者名, 用于身份隔离。
+    多人共用 workspace 时, auth-state 必须按开发者分目录, 否则会串登录态。
+    没有身份 → 抛异常 (绝不 fallback 到 hupan/default, 防串号)。"""
+    dev_file = os.path.join(SCRIPTS_DIR, '..', '..', '.qoder', '.developer')
+    if os.path.isfile(dev_file):
+        for ln in open(dev_file, encoding='utf-8'):
+            if ln.strip().startswith('name='):
+                return ln.strip().split('=', 1)[1].strip()
+    raise RuntimeError(
+        '未检测到开发者身份(.qoder/.developer)。请先运行 /wl-init 注册身份。'
+        ' (auth-state 按开发者分目录, 没身份无法隔离 → 拒绝执行防串号)'
+    )
+
+
+STATE_FILE = os.path.join(SCRIPTS_DIR, '..', '..', 'workspace', 'members',
+                          _read_developer(), 'auth-state.json')
+
+out = []
+def log(s=''):
+    out.append(s)
+    print(s)
+
+
+def get_captcha():
+    """获取验证码图片 + uuid"""
+    resp = requests.get(BASE_URL + API_PREFIX + '/auth/code', timeout=10)
+    data = resp.json().get('data', {})
+    return data.get('uuid'), data.get('img'), data.get('captchaEnabled', False)
+
+
+def recognize_captcha(img_b64):
+    """用 ddddocr 识别验证码图片, 并解析数学题(ICS 是 a op b = ? 形式).
+    返回算出的答案字符串; 解析失败返回 None."""
+    import re as _re
+    ocr = ddddocr.DdddOcr(show_ad=False)
+    img_bytes = base64.b64decode(img_b64)
+    raw = ocr.classification(img_bytes)
+    # 规范化运算符 (x/X/× → *, ÷ → /), 去掉 = ? 尾部
+    expr = raw.replace('x', '*').replace('X', '*').replace('×', '*').replace('÷', '/')
+    expr = expr.rstrip('=?？').strip()
+    m = _re.match(r'^\s*(\d+)\s*([+\-*/])\s*(\d+)\s*$', expr)
+    if not m:
+        return None
+    a, op, b = int(m.group(1)), m.group(2), int(m.group(3))
+    if op == '+':
+        ans = a + b
+    elif op == '-':
+        ans = a - b
+    elif op == '*':
+        ans = a * b
+    elif op == '/':
+        ans = a // b if b else None
+    else:
+        return None
+    return str(ans) if ans is not None else None
+
+
+def encrypt_login(username, password, code, uuid):
+    """用 RSA+AES 加密登录请求 (复现前端加密逻辑)。
+    使用 cryptography 库 (替代 pycryptodome)。"""
+    import os as _os
+    from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
+    from cryptography.hazmat.primitives.padding import PKCS7
+    from cryptography.hazmat.primitives.asymmetric import padding as asym_padding
+    from cryptography.hazmat.primitives.serialization import load_der_public_key
+
+    # 1. 生成随机 AES 密钥 (前端用 randomUUID = 32 hex chars)
+    aes_key = _os.urandom(16).hex().encode('utf-8')  # 32 bytes
+
+    # 2. AES-ECB-PKCS7 加密请求体
+    login_body = json.dumps({
+        'username': username,
+        'password': password,
+        'grantType': 'password',
+        'tenantId': '000000',
+        'clientId': CLIENT_ID,
+        'code': code,
+        'uuid': uuid,
+    }, ensure_ascii=False).encode('utf-8')
+
+    padder = PKCS7(128).padder()
+    padded = padder.update(login_body) + padder.finalize()
+    cipher = Cipher(algorithms.AES(aes_key), modes.ECB())
+    encryptor = cipher.encryptor()
+    encrypted_body = base64.b64encode(encryptor.update(padded) + encryptor.finalize()).decode()
+
+    # 3. RSA 加密 AES 密钥 (前端: encrypt(encryptBase64(aesKey)))
+    aes_key_b64 = base64.b64encode(aes_key).decode()
+    pub_key = load_der_public_key(base64.b64decode(RSA_PUBLIC_KEY_B64))
+    encrypted_key_bytes = pub_key.encrypt(aes_key_b64.encode('utf-8'), asym_padding.PKCS1v15())
+    encrypted_key = base64.b64encode(encrypted_key_bytes).decode()
+
+    return encrypted_body, encrypted_key
+
+
+def login():
+    """全自动登录流程"""
+    log('=== 全自动登录 ===')
+
+    # 1. 获取验证码
+    uuid, img_b64, captcha_enabled = get_captcha()
+    log('验证码: enabled=%s, uuid=%s' % (captcha_enabled, uuid[:8] if uuid else 'N/A'))
+
+    if not captcha_enabled:
+        log('验证码未开启, 直接登录')
+        code = ''
+        uuid = ''
+    else:
+        # 2. OCR 识别 + 数学题解析
+        code = recognize_captcha(img_b64)
+        log('OCR识别验证码: %s' % code)
+        if code is None:
+            # ddddocr 没读对(数学题识别不稳定), 本次放弃, 让外层重试
+            log('验证码识别失败(数学题未解析), 重试')
+            return None
+
+    # 3. 加密 + 登录
+    try:
+        encrypted_body, encrypted_key = encrypt_login(USERNAME, PASSWORD, code, uuid)
+        log('加密完成, 发送登录请求...')
+
+        resp = requests.post(
+            BASE_URL + API_PREFIX + '/auth/login',
+            data=encrypted_body,
+            headers={
+                'Content-Type': 'application/json',
+                'encrypt-key': encrypted_key,
+            },
+            timeout=10,
+        )
+        result = resp.json()
+        log('登录响应: code=%s, msg=%s' % (result.get('code'), result.get('msg')))
+
+        if result.get('code') == 200 and result.get('data', {}).get('access_token'):
+            token = result['data']['access_token']
+            log('✓ 登录成功! token=%s...' % token[:20])
+
+            # 保存登录态
+            os.makedirs(os.path.dirname(STATE_FILE), exist_ok=True)
+            with open(STATE_FILE, 'w', encoding='utf-8') as f:
+                json.dump({
+                    'access_token': token,
+                    'base_url': BASE_URL,
+                    'api_prefix': API_PREFIX,
+                    'saved_at': __import__('datetime').datetime.now().isoformat(),
+                }, f, indent=2)
+            log('登录态已保存: %s' % STATE_FILE)
+            return token
+        else:
+            log('✗ 登录失败: %s' % json.dumps(result, ensure_ascii=False)[:200])
+            log('  可能验证码识别错误, 重试...')
+            return None
+    except Exception as e:
+        log('登录异常: %s' % str(e))
+        return None
+
+
+if __name__ == '__main__':
+    # 数学题验证码识别不稳定, 多重试几次 (实测 ~30% 一次读对, 20 次基本必中)
+    import time as _time
+    for attempt in range(20):
+        log('--- 尝试 %d ---' % (attempt + 1))
+        token = login()
+        if token:
+            break
+        _time.sleep(0.3)
+    else:
+        log('20次尝试均失败, 请检查账号/密码/验证码/网络')
+
+    open(os.path.join(SCRIPTS_DIR, '_login_log.txt'), 'w', encoding='utf-8').write('\n'.join(out))

package/templates/qoder/scripts/{kg_test_runner.py → validation/test/kg_test_runner.py}

@@ -1,4 +1,15 @@
 # -*- coding: utf-8 -*-
+# v3.0 路径自举: 引导到 common/bootstrap, 统一 sys.path 逻辑
+import os as _o, sys as _s
+_f = _o.path.abspath(__file__)
+for _ in range(10):
+    _f = _o.path.dirname(_f)
+    _cp = _o.path.join(_f, 'foundation')
+    if _o.path.isfile(_o.path.join(_cp, 'bootstrap.py')):
+        break
+if _cp not in _s.path: _s.path.insert(0, _cp)
+from bootstrap import setup; setup()
+
 """
 Automated test runner using Playwright (headless) + knowledge graph.
 
@@ -23,9 +34,9 @@ import sys
 import time
 import yaml
 
-SCRIPTS = os.path.dirname(os.path.abspath(__file__))
+SCRIPTS = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))  # 子包→scripts/根
 sys.path.insert(0, SCRIPTS)
-from common.paths import DATA_INDEX_DIR, PROJECT_ROOT
+from foundation.core.paths import DATA_INDEX_DIR, PROJECT_ROOT
 
 INDEX_DIR = str(DATA_INDEX_DIR)
 CODE_DIR = str(PROJECT_ROOT / 'data' / 'code')