@kernel-sig/console 0.1.0

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@kernel-sig/console",
+  "version": "0.1.0",
+  "description": "openEuler Kernel SIG 的 PR/Issue 管理平台：一条命令在本机起一整套实例",
+  "bin": {
+    "ksc": "./cli/index.js"
+  },
+  "files": [
+    "cli/",
+    "backend/app/**/*.py",
+    "backend/alembic/**/*.py",
+    "backend/alembic/*.py",
+    "backend/alembic/script.py.mako",
+    "backend/tests/**/*.py",
+    "backend/alembic.ini",
+    "backend/pyproject.toml",
+    "backend/Dockerfile",
+    "backend/.dockerignore",
+    "backend/entrypoint.sh",
+    "frontend/src/**/*.ts",
+    "frontend/src/**/*.tsx",
+    "frontend/src/**/*.css",
+    "frontend/index.html",
+    "frontend/nginx.conf",
+    "frontend/package.json",
+    "frontend/package-lock.json",
+    "frontend/tsconfig.json",
+    "frontend/vite.config.ts",
+    "frontend/Dockerfile",
+    "frontend/.dockerignore",
+    "compose.yaml",
+    "scripts/**/*.py",
+    "Makefile",
+    "README.md",
+    ".env.example"
+  ],
+  "keywords": [
+    "openeuler",
+    "kernel",
+    "sig",
+    "atomgit",
+    "pull-request"
+  ],
+  "license": "MulanPSL-2.0",
+  "engines": {
+    "node": ">=18"
+  }
+}

package/scripts/e2e-auth-flow.py

@@ -0,0 +1,131 @@
+"""Kernel SIG Console 登录流程的浏览器端验证。
+
+覆盖：路由守卫、登录页渲染、凭据校验、会话保持、退出登录、权限提示。
+每一步都断言实际观察到的状态，不做「看起来没问题」的判断。
+"""
+
+import os
+import sys
+
+from playwright.sync_api import Page, expect, sync_playwright
+
+BASE = os.environ.get("KSC_BASE_URL", "http://localhost:18080")
+USERNAME = os.environ.get("KSC_E2E_USERNAME", "admin")
+
+# 口令只从环境变量取，不给默认值。这个脚本登的是**你自己的实例**，
+# 在源码里写死任何一个口令，都等于随代码一起公开它。
+PASSWORD = os.environ.get("KSC_E2E_PASSWORD")
+if not PASSWORD:
+    sys.exit("请用 KSC_E2E_PASSWORD 环境变量提供实例口令")
+
+results: list[tuple[str, bool, str]] = []
+
+
+def check(name: str, condition: bool, detail: str = "") -> None:
+    results.append((name, condition, detail))
+    mark = "PASS" if condition else "FAIL"
+    print(f"[{mark}] {name}" + (f" — {detail}" if detail else ""))
+
+
+def run(page: Page) -> None:
+    # --- 1. 未登录访问根路径应落到登录页 ---
+    page.goto(BASE, wait_until="networkidle")
+    check("未登录访问 / 被路由守卫拦截", page.url.endswith("/login"), f"当前 URL: {page.url}")
+
+    # --- 2. 登录页渲染 ---
+    expect(page.get_by_role("heading", name="登录")).to_be_visible()
+    check("登录页标题渲染", True)
+    check("用户名输入框存在", page.get_by_label("用户名").is_visible())
+    check("密码输入框存在", page.get_by_label("密码").is_visible())
+    check("登录按钮存在", page.get_by_role("button", name="登录").is_visible())
+
+    # --- 3. 深色主题令牌生效 ---
+    bg = page.evaluate("getComputedStyle(document.body).backgroundColor")
+    check("主题背景已应用（非白底）", bg not in ("rgb(255, 255, 255)", "rgba(0, 0, 0, 0)"), bg)
+
+    # --- 4. 错误密码应显示后端返回的错误信息 ---
+    page.get_by_label("用户名").fill(USERNAME)
+    page.get_by_label("密码").fill("definitely-wrong-password")
+    page.get_by_role("button", name="登录").click()
+    error_alert = page.get_by_role("alert")
+    expect(error_alert).to_be_visible(timeout=8000)
+    text = error_alert.inner_text()
+    check("错误密码显示错误提示", "用户名或密码错误" in text, text.strip())
+    check("错误后仍停留在登录页", page.url.endswith("/login"))
+
+    # --- 5. 正确凭据登录 ---
+    page.get_by_label("密码").fill(PASSWORD)
+    page.get_by_role("button", name="登录").click()
+    page.wait_for_url("**/dashboard", timeout=12000)
+    check("登录后跳转到仪表盘", page.url.endswith("/dashboard"), page.url)
+
+    # --- 6. 仪表盘内容 ---
+    expect(page.get_by_role("heading", name="总览")).to_be_visible()
+    check("仪表盘标题渲染", True)
+    body = page.inner_text("body")
+    check("侧栏显示登录用户名", USERNAME in body or "管理员" in body)
+
+    # --- 7. 会话保持：刷新后不被踢出 ---
+    page.reload(wait_until="networkidle")
+    page.wait_for_timeout(1200)
+    check("刷新后会话保持", page.url.endswith("/dashboard"), f"当前 URL: {page.url}")
+
+    # --- 8. 会话 Cookie 为 HttpOnly ---
+    cookies = page.context.cookies()
+    access = next((c for c in cookies if c["name"] == "ksc_access"), None)
+    check("访问令牌 Cookie 存在", access is not None)
+    if access:
+        check("访问令牌 Cookie 为 HttpOnly", access.get("httpOnly", False))
+
+    # --- 9. 已初始化后 /setup 应被拒绝 ---
+    page.goto(f"{BASE}/setup", wait_until="networkidle")
+    page.wait_for_timeout(1000)
+    check("/setup 在已初始化后被拒", not page.url.endswith("/setup"), f"当前 URL: {page.url}")
+
+    # --- 10. 退出登录 ---
+    page.goto(f"{BASE}/dashboard", wait_until="networkidle")
+    page.wait_for_selector('button[aria-label="退出登录"]', timeout=8000)
+    page.click('button[aria-label="退出登录"]')
+    page.wait_for_url("**/login", timeout=10000)
+    check("退出后回到登录页", page.url.endswith("/login"), page.url)
+
+    # --- 11. 退出后受保护路由再次被拦截 ---
+    page.goto(f"{BASE}/dashboard", wait_until="networkidle")
+    page.wait_for_timeout(1200)
+    check("退出后 /dashboard 被拦截", page.url.endswith("/login"), page.url)
+
+    page.screenshot(path="/tmp/ksp-final.png", full_page=True)
+
+
+def main() -> int:
+    with sync_playwright() as p:
+        browser = p.chromium.launch(headless=True)
+        context = browser.new_context(viewport={"width": 1440, "height": 900})
+        page = context.new_page()
+
+        console_errors: list[str] = []
+        page.on(
+            "console",
+            lambda msg: console_errors.append(msg.text) if msg.type == "error" else None,
+        )
+
+        try:
+            run(page)
+        except Exception as exc:
+            check("脚本执行完成", False, f"{type(exc).__name__}: {exc}")
+            page.screenshot(path="/tmp/ksp-failure.png", full_page=True)
+        finally:
+            browser.close()
+
+    print("\n" + "=" * 60)
+    failed = [r for r in results if not r[1]]
+    print(f"通过 {len(results) - len(failed)} / {len(results)}")
+    if console_errors:
+        print("\n浏览器控制台错误:")
+        for err in console_errors[:10]:
+            print("  -", err[:200])
+    return 1 if failed else 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/scripts/e2e-pr-detail.py

@@ -0,0 +1,128 @@
+"""PR 详情页的浏览器端验证。
+
+覆盖本次新增的三块能力：上游标签按原色展示、讨论时间线、机器人评论折叠。
+其中最关键的一条是**评论正文必须按纯文本渲染** —— 上游正文含
+``<table>`` 与 ``<a href>``，若哪天有人改用 innerHTML，浏览器会把这些
+标签解析成真实 DOM，这个脚本会立刻失败。
+
+用法：
+    KSC_BASE_URL=http://host:port KSC_PULL_ID=<uuid> \
+        python3 scripts/e2e-pr-detail.py
+
+直接按 id 进详情页，不走列表 —— 列表默认只列 open 的 30 条，
+目标 PR 未必在第一页，靠翻页找样本会让脚本本身变脆。
+"""
+
+import os
+import sys
+
+from playwright.sync_api import Page, sync_playwright
+
+BASE = os.environ.get("KSC_BASE_URL", "http://localhost:18080")
+USERNAME = os.environ.get("KSC_E2E_USERNAME", "admin")
+
+# 口令只从环境变量取，不给默认值。这个脚本登的是**你自己的实例**，
+# 在源码里写死任何一个口令，都等于随代码一起公开它。
+PASSWORD = os.environ.get("KSC_E2E_PASSWORD")
+if not PASSWORD:
+    sys.exit("请用 KSC_E2E_PASSWORD 环境变量提供实例口令")
+
+PULL_ID = os.environ.get("KSC_PULL_ID", "")
+
+results: list[tuple[str, bool, str]] = []
+
+
+def check(name: str, condition: bool, detail: str = "") -> None:
+    results.append((name, condition, detail))
+    print(f"[{'PASS' if condition else 'FAIL'}] {name}" + (f" — {detail}" if detail else ""))
+
+
+def login(page: Page) -> None:
+    page.goto(f"{BASE}/login", wait_until="networkidle")
+    page.get_by_label("用户名").fill(USERNAME)
+    page.get_by_label("密码").fill(PASSWORD)
+    page.get_by_role("button", name="登录").click()
+    page.wait_for_url(lambda url: "/login" not in url, timeout=15000)
+
+
+def run(page: Page) -> None:
+    login(page)
+
+    if not PULL_ID:
+        check("提供了 KSC_PULL_ID", False, "未设置环境变量")
+        return
+
+    # --- 进入目标 PR 详情 ---
+    page.goto(f"{BASE}/pulls/{PULL_ID}", wait_until="networkidle")
+
+    check("已进入 PR 详情页", "/pulls/" in page.url, page.url)
+    check("详情页渲染了标题", page.locator("h1").count() > 0)
+
+    # --- 标签：以原色渲染 ---
+    labels_heading = page.get_by_text("标签", exact=True)
+    check("侧栏「标签」面板存在", labels_heading.count() > 0)
+
+    chips = page.get_by_text("openeuler-cla/yes", exact=True)
+    check("标签 chip 渲染", chips.count() > 0, f"{chips.count()} 个")
+    if chips.count() > 0:
+        color = chips.first.evaluate("el => getComputedStyle(el).color")
+        # 上游色 #25e42b 亮度足够，应原样作为前景色（rgb 37,228,43）
+        check("标签沿用上游色而非中性色", color == "rgb(37, 228, 43)", color)
+
+    # --- 讨论标签页 ---
+    # 页签现在是 AntD 的 Tabs：role=tab，不是 button
+    discussion = page.get_by_role("tab", name="讨论")
+    check("「讨论」标签页存在", discussion.count() > 0)
+    check("「评审」旧标签页已移除", page.get_by_role("tab", name="评审", exact=True).count() == 0)
+    discussion.click()
+    page.wait_for_timeout(600)
+
+    details = page.locator("details")
+    check("机器人评论折叠为 <details>", details.count() > 0, f"{details.count()} 条")
+
+    if details.count() > 0:
+        check("折叠块默认收起", details.first.evaluate("el => !el.open"))
+
+    summaries = page.locator("details > summary")
+    check("折叠块标注机器人身份", summaries.first.inner_text().find("机器人") >= 0)
+
+    # --- 正文纯文本渲染（注入面检查）---
+    # 用 textContent 而非 innerText：折叠块内容不参与渲染，
+    # innerText 读不到，会被误判成"标签没渲染"
+    body_text = page.locator("ol").first.text_content() or ""
+    check("上游 HTML 标签以字面量呈现", "<table>" in body_text)
+    check("未被解析成真实表格元素", page.locator("ol table").count() == 0)
+    check("未被解析成真实链接元素（正文内）", page.locator("ol p a").count() == 0)
+
+    # --- 展开一条机器人评论，确认正文可见 ---
+    if details.count() > 0:
+        details.first.locator("summary").click()
+        page.wait_for_timeout(200)
+        check("展开后正文可读", details.first.evaluate("el => el.open"))
+
+    # --- 侧栏分类面板 ---
+    check("侧栏「分类」面板存在", page.get_by_text("分类", exact=True).count() > 0)
+
+
+def main() -> int:
+    with sync_playwright() as p:
+        browser = p.chromium.launch(headless=True)
+        page = browser.new_page(viewport={"width": 1440, "height": 900})
+        try:
+            run(page)
+        except Exception as exc:  # noqa: BLE001 — 脚本要报出失败细节而非堆栈
+            check("执行过程未抛异常", False, f"{type(exc).__name__}: {exc}")
+            page.screenshot(path="/tmp/pr-detail-failure.png", full_page=True)
+            print("失败截图：/tmp/pr-detail-failure.png")
+        finally:
+            browser.close()
+
+    failed = [name for name, ok, _ in results if not ok]
+    print(f"\n{len(results) - len(failed)}/{len(results)} 通过")
+    if failed:
+        print("失败项：" + "、".join(failed))
+    return 1 if failed else 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())