@marsken/dsh-studio 0.1.2 → 0.1.3

package/docs/compatibility.md

@@ -6,7 +6,7 @@
 
 | 项 | 值 |
 | --- | --- |
-| dsh-studio | `package.json` `version: 0.1.2` |
+| dsh-studio | `package.json` `version: 0.1.3` |
 | DeepSeek Harness | `0.2.2-rc.1`（`dsh --version`） |
 | Node | `v24.22.2`（Linux 目标机）；本机 Windows `v24.19.0` |
 | 目标系统 | Ubuntu 24.04，`dsh web` 监听 `18080`，nginx `:80` 反代并注入 `dsh-auth-*` cookie |

package/docs/publish.md

@@ -127,6 +127,7 @@ token 只写进临时 npmrc（放在仓库外或 `tmp/` 且不提交），发完
 | --- | --- | --- |
 | `0.1.0` | 2026-11-13 | 首个公开版：看板 / 需求 / 用例回归 / 效能 / 设计评审四期 |
 | `0.1.1` | 2026-11-13 | 补三张 README 截图（npm 页可看图）；默认值与文档去掉公司内网信息 |
+| `0.1.3` | 2026-11-13 | shell 用例（命令 + 退出码/输出断言，默认关闭） |
 | `0.1.2` | 2026-11-13 | 修 5 个缺陷：卡片挂不上 MR、换列清空负责人、三处静默截断、还原度无历史、规范体检不定位元素 |
 
 两条硬规矩，每次发版都过一遍：

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marsken/dsh-studio",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "type": "module",
   "description": "DSH Studio: role-based multi-agent workspace (product / architect / developer / QA) with a live work board, GitLab + Feishu connection settings, all configurable from the web GUI.",
   "main": "index.js",

package/src/host/domain.js

@@ -8,6 +8,7 @@
  * @module dsh-studio/src/host/domain
  */
 import { createHash, randomBytes } from 'node:crypto'
+import { sanitizeCaseShell } from './shell-case.js'
 import { homedir } from 'node:os'
 import { dirname, join } from 'node:path'
 
@@ -1257,6 +1258,7 @@ export function sanitizeCaseHttp(raw) {
 }
 
 /** 一条测试用例：做什么、期望什么、实际结果，以及最近一次执行的样子。 */
+
 export function sanitizeCase(raw, index) {
   if (typeof raw === 'string') {
     const title = raw.trim().slice(0, 200)
@@ -1275,6 +1277,7 @@ export function sanitizeCase(raw, index) {
       by: '',
       at: 0,
       http: null,
+      shell: null,
       lastRun: null,
     }
   }
@@ -1287,6 +1290,7 @@ export function sanitizeCase(raw, index) {
   return {
     id: String(raw.id ?? '').trim() || `c${index + 1}-${randomBytes(2).toString('hex')}`,
     title,
+    shell: sanitizeCaseShell(raw.shell),
     expected: String(raw.expected ?? '').trim().slice(0, 300),
     pointId: String(raw.pointId ?? '').trim().slice(0, 24),
     result,
@@ -1445,7 +1449,9 @@ export function sanitizeAllowHosts(input) {
 
 /** 测试执行配置：环境、默认环境、超时、允许的域名。 */
 export function sanitizeTesting(raw) {
-  const base = { envs: [], defaultEnv: '', timeoutMs: 15000, allowHosts: ['127.0.0.1', 'localhost'], concurrency: 4 }
+  // allowShell 默认关：开了等于把「在宿主机执行任意命令」的能力交给看板。
+
+  const base = { envs: [], defaultEnv: '', timeoutMs: 15000, allowHosts: ['127.0.0.1', 'localhost'], concurrency: 4, allowShell: false, shellCwd: '' }
   if (raw === null || typeof raw !== 'object') return base
   const envs = sanitizeEnvs(raw.envs)
   const defaultEnv = String(raw.defaultEnv ?? '').trim()
@@ -1454,6 +1460,8 @@ export function sanitizeTesting(raw) {
     defaultEnv: envs.some(env => env.id === defaultEnv) ? defaultEnv : (envs[0]?.id ?? ''),
     timeoutMs: Math.max(1000, Math.min(120000, Number(raw.timeoutMs) || base.timeoutMs)),
     allowHosts: sanitizeAllowHosts(raw.allowHosts ?? base.allowHosts),
+    allowShell: raw.allowShell === true,
+    shellCwd: String(raw.shellCwd ?? '').slice(0, 300),
     concurrency: Math.max(1, Math.min(8, Number(raw.concurrency) || base.concurrency)),
   }
 }

package/src/host/executor.js

@@ -8,6 +8,7 @@ import { casesOfTasks, impactSummary } from './impact.js'
 import { designGate } from './design.js'
 import { RUN_LOG, parseMentions } from './dispatcher.js'
 import { appendTeamMemory } from './team-memory.js'
+import { runShellCase } from './shell-runner.js'
 import { homedir } from 'node:os'
 import { join, resolve } from 'node:path'
 import { mkdir, readFile, rm, stat, writeFile } from 'node:fs/promises'
@@ -183,6 +184,7 @@ export async function probeEnv(env, config, timeoutMs = 5000) {
 
 export async function runOneCase(item, env, config, seedVars) {
   const started = Date.now()
+  if (item.shell !== null && item.shell !== undefined) return runShellCase(item, config)
   if (item.http == null) {
     return { ok: false, status: 0, ms: 0, error: '这条用例还没有可执行的请求定义（method/url）', preview: '' }
   }
@@ -297,7 +299,7 @@ export async function runTaskCases(store, taskId, options = {}) {
     ? new Set(options.caseIds.map(id => String(id)))
     : null
   const targets = (Array.isArray(task.cases) ? task.cases : [])
-    .filter(item => (wanted === null ? item.http != null : wanted.has(item.id)))
+    .filter(item => (wanted === null ? item.http != null || item.shell != null : wanted.has(item.id)))
   if (targets.length === 0) throw new Error('没有可执行的用例：用例上要填 method + url（相对地址会拼环境 baseUrl）')
 
   const probe = await probeEnv(env, config)
@@ -940,7 +942,7 @@ export async function pullFeishuDoc(url) {
     }
     text = String(parsed.data?.document?.content ?? '')
     if (text.trim() === '') return { ok: false, tool: true, text: '', error: '拉到了空正文：这个文档可能是空的，或者应用没有阅读权限' }
-    const title = /<title>([\s\S]*?)<\/title>/.exec(text)?.[1]?.trim() ?? ''
+    const title = text.match(/<title>([\s\S]*?)<\/title>/)?.[1]?.trim() ?? ''
     const body = text.replace(/<title>[\s\S]*?<\/title>\s*/, '')
     return { ok: true, tool: true, title, text: body.slice(0, 60000), error: '' }
   } catch {

package/src/host/shell-case.js

@@ -0,0 +1,16 @@
+// shell 用例的数据形状。纯函数，放在这里是为了不把 domain.js 撑过 2000 行的闸门。
+
+/** shell 用例：跑一条命令，看退出码与输出。默认**关**，要在设置里显式打开（见 config.testing.allowShell）。 */
+export function sanitizeCaseShell(raw) {
+  if (raw === null || typeof raw !== 'object') return null
+  const command = String(raw.command ?? '').trim().slice(0, 2000)
+  if (command === '') return null
+  return {
+    command,
+    cwd: String(raw.cwd ?? '').trim().slice(0, 300),
+    timeoutMs: Math.max(1000, Math.min(120000, Number(raw.timeoutMs) || 30000)),
+    expectExit: Number.isInteger(Number(raw.expectExit)) ? Number(raw.expectExit) : 0,
+    expectContains: String(raw.expectContains ?? '').slice(0, 500),
+    expectNotContains: String(raw.expectNotContains ?? '').slice(0, 500),
+  }
+}

package/src/host/shell-runner.js

@@ -0,0 +1,42 @@
+// shell 用例执行器：跑一条命令，比对退出码与输出。
+// 默认关闭（config.testing.allowShell）——打开它等于把「在宿主机执行任意命令」的能力交给看板。
+import { exec } from 'node:child_process'
+
+/** shell 用例：跑一条命令，比对退出码与输出。默认关闭，见 config.testing.allowShell。 */
+export async function runShellCase(item, config) {
+  const started = Date.now()
+  const shell = item.shell
+  if (config?.testing?.allowShell !== true) {
+    return { ok: false, status: 0, ms: 0, error: '这台机器没开 shell 用例：设置 → 测试执行 里打开「允许 shell 用例」', preview: '' }
+  }
+  const cwd = shell.cwd !== '' ? shell.cwd : String(config?.testing?.shellCwd ?? '')
+  const timeout = shell.timeoutMs > 0 ? shell.timeoutMs : 30000
+  let stdout = ''
+  let stderr = ''
+  let code = 0
+  try {
+    const out = await new Promise(finish => {
+      exec(shell.command, { cwd: cwd === '' ? undefined : cwd, timeout, maxBuffer: 1024 * 1024 }, (error, outText, errText) => {
+        finish({ error, out: String(outText ?? ''), err: String(errText ?? '') })
+      })
+    })
+    stdout = out.out
+    stderr = out.err
+    code = out.error === null || out.error === undefined ? 0 : (Number(out.error.code) || 1)
+  } catch (error) {
+    stderr = String(error?.message ?? error)
+    code = 1
+  }
+  const combined = stdout + stderr
+  const problems = []
+  if (code !== shell.expectExit) problems.push('退出码 ' + code + '（期望 ' + shell.expectExit + '）')
+  if (shell.expectContains !== '' && !combined.includes(shell.expectContains)) problems.push('输出里没有「' + shell.expectContains + '」')
+  if (shell.expectNotContains !== '' && combined.includes(shell.expectNotContains)) problems.push('输出里有不该出现的「' + shell.expectNotContains + '」')
+  return {
+    ok: problems.length === 0,
+    status: code,
+    ms: Date.now() - started,
+    error: problems.join('；').slice(0, 300),
+    preview: combined.trim().slice(-600),
+  }
+}