@modusensus/dsh-mneme 0.8.14 → 0.8.15

package/test/version-check.test.js

@@ -1,152 +1,152 @@
-import { test, describe } from 'node:test';
-import assert from 'node:assert/strict';
-
-import {
-  validateRegistryUrl,
-  compareVersions,
-  classify,
-  fetchLatestVersion,
-  resetCacheForTest,
-  REGISTRY_URL,
-  PACKAGE_VERSION,
-} from '../src/version-check.js';
-
-describe('version-check.js', () => {
-  // ---- validateRegistryUrl：https + 精确 host 白名单（构造性排除本机/内网）----
-  describe('validateRegistryUrl', () => {
-    test('白名单内 https 地址通过', () => {
-      assert.equal(validateRegistryUrl('https://registry.npmjs.org/@modusensus%2Fdsh-mneme/latest'), true);
-      assert.equal(validateRegistryUrl('https://registry.npmjs.org/anything'), true);
-    });
-
-    test('非 https 一律拒绝', () => {
-      assert.equal(validateRegistryUrl('http://registry.npmjs.org/latest'), false);
-      assert.equal(validateRegistryUrl('ftp://registry.npmjs.org/latest'), false);
-      assert.equal(validateRegistryUrl('file:///etc/passwd'), false);
-    });
-
-    test('host 不在白名单一律拒绝（含本机/内网/相似域名）', () => {
-      assert.equal(validateRegistryUrl('https://localhost/latest'), false);
-      assert.equal(validateRegistryUrl('https://127.0.0.1/latest'), false);
-      assert.equal(validateRegistryUrl('https://[::1]/latest'), false);
-      assert.equal(validateRegistryUrl('https://10.0.0.5/latest'), false);
-      assert.equal(validateRegistryUrl('https://192.168.1.10/latest'), false);
-      assert.equal(validateRegistryUrl('https://evil-registry.npmjs.org.example.com/latest'), false);
-      assert.equal(validateRegistryUrl('https://registry.npmjs.org.evil.com/latest'), false);
-      assert.equal(validateRegistryUrl('https://npmjs.org/latest'), false);
-    });
-
-    test('非法 URL 拒绝而不抛出', () => {
-      assert.equal(validateRegistryUrl('not a url'), false);
-      assert.equal(validateRegistryUrl(''), false);
-    });
-  });
-
-  // ---- compareVersions / classify：纯函数比对 ----
-  describe('compareVersions', () => {
-    test('三元组数值比较', () => {
-      assert.equal(compareVersions('0.8.0', '0.8.1'), -1);
-      assert.equal(compareVersions('0.8.1', '0.8.0'), 1);
-      assert.equal(compareVersions('0.8.0', '0.8.0'), 0);
-      assert.equal(compareVersions('0.10.0', '0.9.0'), 1);
-      assert.equal(compareVersions('1.0.0', '0.9.9'), 1);
-    });
-
-    test('同号带 prerelease 的一方更旧；两侧都带视为同版', () => {
-      assert.equal(compareVersions('0.9.0-rc.1', '0.9.0'), -1);
-      assert.equal(compareVersions('0.9.0', '0.9.0-rc.1'), 1);
-      assert.equal(compareVersions('0.9.0-rc.1', '0.9.0-rc.1'), 0);
-      // 数字三元组相等、两侧都带后缀 → 同版（横幅只关心是否落后 latest，
-      // 不追求完整 semver prerelease 序）
-      assert.equal(compareVersions('0.9.0-rc.2', '0.9.0-rc.1'), 0);
-    });
-
-    test('解析失败返回 null', () => {
-      assert.equal(compareVersions('unknown', '0.8.0'), null);
-      assert.equal(compareVersions('0.8.0', ''), null);
-      assert.equal(compareVersions(null, null), null);
-    });
-  });
-
-  describe('classify', () => {
-    test('四种形态', () => {
-      assert.equal(classify('0.8.0', '0.8.1'), 'outdated');
-      assert.equal(classify('0.8.0', '0.8.0'), 'up-to-date');
-      // workspace/link 直载开发态：运行版本高于已发布 → ahead（前端不打扰）
-      assert.equal(classify('0.9.0', '0.8.1'), 'ahead');
-      // 查询失败/离线 → unknown（前端完全静默）
-      assert.equal(classify('0.8.0', null), 'unknown');
-      assert.equal(classify('unknown', '0.8.0'), 'unknown');
-    });
-  });
-
-  // ---- fetchLatestVersion：TTL 缓存 + 失败静默 ----
-  describe('fetchLatestVersion', () => {
-    test('正常响应取 latest；TTL 内复用缓存不重复请求', async () => {
-      resetCacheForTest();
-      let calls = 0;
-      let clock = 1000;
-      const fetchImpl = async () => { calls += 1; return { ok: true, json: async () => ({ version: '0.8.1' }) }; };
-      const now = () => clock;
-
-      assert.equal(await fetchLatestVersion({ fetchImpl, now }), '0.8.1');
-      assert.equal(await fetchLatestVersion({ fetchImpl, now }), '0.8.1');
-      assert.equal(calls, 1);
-
-      clock += 60 * 60 * 1000 - 1;
-      assert.equal(await fetchLatestVersion({ fetchImpl, now }), '0.8.1');
-      assert.equal(calls, 1);
-
-      // 过 TTL 后重新请求
-      clock += 1;
-      assert.equal(await fetchLatestVersion({ fetchImpl, now }), '0.8.1');
-      assert.equal(calls, 2);
-      resetCacheForTest();
-    });
-
-    test('失败静默返回 null：网络异常 / 非 2xx / 形状不对', async () => {
-      resetCacheForTest();
-      assert.equal(await fetchLatestVersion({ fetchImpl: async () => { throw new Error('offline'); }, now: () => 1000 }), null);
-      assert.equal(await fetchLatestVersion({ fetchImpl: async () => ({ ok: false, status: 503 }), now: () => 1000 }), null);
-      assert.equal(await fetchLatestVersion({ fetchImpl: async () => ({ ok: true, json: async () => ({ nope: true }) }), now: () => 1000 }), null);
-      resetCacheForTest();
-    });
-
-    test('失败不写缓存：下次调用立刻重试', async () => {
-      resetCacheForTest();
-      let calls = 0;
-      let fail = true;
-      const fetchImpl = async () => {
-        calls += 1;
-        if (fail) throw new Error('boom');
-        return { ok: true, json: async () => ({ version: '0.8.2' }) };
-      };
-      assert.equal(await fetchLatestVersion({ fetchImpl, now: () => 1000 }), null);
-      assert.equal(await fetchLatestVersion({ fetchImpl, now: () => 1000 }), null);
-      assert.equal(calls, 2);
-      fail = false;
-      assert.equal(await fetchLatestVersion({ fetchImpl, now: () => 1000 }), '0.8.2');
-      resetCacheForTest();
-    });
-
-    test('运行环境无全局 fetch 时走默认参兜底：resolve null 而非同步抛', async () => {
-      resetCacheForTest();
-      const original = globalThis.fetch;
-      globalThis.fetch = undefined;
-      try {
-        // 修复前：默认参 fetchImpl = fetch 在参数求值期同步抛 ReferenceError，
-        // 路由的 .catch 接不住；修复后应归入常规失败路径静默返 null。
-        assert.equal(await fetchLatestVersion({ now: () => 1000 }), null);
-      } finally {
-        globalThis.fetch = original;
-      }
-      resetCacheForTest();
-    });
-  });
-
-  // ---- 模块常量：URL 必须过白名单，运行版本可读 ----
-  test('REGISTRY_URL 自身通过白名单校验；PACKAGE_VERSION 可读', () => {
-    assert.equal(validateRegistryUrl(REGISTRY_URL), true);
-    assert.match(PACKAGE_VERSION, /^\d+\.\d+\.\d+/);
-  });
-});
+import { test, describe } from 'node:test';
+import assert from 'node:assert/strict';
+
+import {
+  validateRegistryUrl,
+  compareVersions,
+  classify,
+  fetchLatestVersion,
+  resetCacheForTest,
+  REGISTRY_URL,
+  PACKAGE_VERSION,
+} from '../src/version-check.js';
+
+describe('version-check.js', () => {
+  // ---- validateRegistryUrl：https + 精确 host 白名单（构造性排除本机/内网）----
+  describe('validateRegistryUrl', () => {
+    test('白名单内 https 地址通过', () => {
+      assert.equal(validateRegistryUrl('https://registry.npmjs.org/@modusensus%2Fdsh-mneme/latest'), true);
+      assert.equal(validateRegistryUrl('https://registry.npmjs.org/anything'), true);
+    });
+
+    test('非 https 一律拒绝', () => {
+      assert.equal(validateRegistryUrl('http://registry.npmjs.org/latest'), false);
+      assert.equal(validateRegistryUrl('ftp://registry.npmjs.org/latest'), false);
+      assert.equal(validateRegistryUrl('file:///etc/passwd'), false);
+    });
+
+    test('host 不在白名单一律拒绝（含本机/内网/相似域名）', () => {
+      assert.equal(validateRegistryUrl('https://localhost/latest'), false);
+      assert.equal(validateRegistryUrl('https://127.0.0.1/latest'), false);
+      assert.equal(validateRegistryUrl('https://[::1]/latest'), false);
+      assert.equal(validateRegistryUrl('https://10.0.0.5/latest'), false);
+      assert.equal(validateRegistryUrl('https://192.168.1.10/latest'), false);
+      assert.equal(validateRegistryUrl('https://evil-registry.npmjs.org.example.com/latest'), false);
+      assert.equal(validateRegistryUrl('https://registry.npmjs.org.evil.com/latest'), false);
+      assert.equal(validateRegistryUrl('https://npmjs.org/latest'), false);
+    });
+
+    test('非法 URL 拒绝而不抛出', () => {
+      assert.equal(validateRegistryUrl('not a url'), false);
+      assert.equal(validateRegistryUrl(''), false);
+    });
+  });
+
+  // ---- compareVersions / classify：纯函数比对 ----
+  describe('compareVersions', () => {
+    test('三元组数值比较', () => {
+      assert.equal(compareVersions('0.8.0', '0.8.1'), -1);
+      assert.equal(compareVersions('0.8.1', '0.8.0'), 1);
+      assert.equal(compareVersions('0.8.0', '0.8.0'), 0);
+      assert.equal(compareVersions('0.10.0', '0.9.0'), 1);
+      assert.equal(compareVersions('1.0.0', '0.9.9'), 1);
+    });
+
+    test('同号带 prerelease 的一方更旧；两侧都带视为同版', () => {
+      assert.equal(compareVersions('0.9.0-rc.1', '0.9.0'), -1);
+      assert.equal(compareVersions('0.9.0', '0.9.0-rc.1'), 1);
+      assert.equal(compareVersions('0.9.0-rc.1', '0.9.0-rc.1'), 0);
+      // 数字三元组相等、两侧都带后缀 → 同版（横幅只关心是否落后 latest，
+      // 不追求完整 semver prerelease 序）
+      assert.equal(compareVersions('0.9.0-rc.2', '0.9.0-rc.1'), 0);
+    });
+
+    test('解析失败返回 null', () => {
+      assert.equal(compareVersions('unknown', '0.8.0'), null);
+      assert.equal(compareVersions('0.8.0', ''), null);
+      assert.equal(compareVersions(null, null), null);
+    });
+  });
+
+  describe('classify', () => {
+    test('四种形态', () => {
+      assert.equal(classify('0.8.0', '0.8.1'), 'outdated');
+      assert.equal(classify('0.8.0', '0.8.0'), 'up-to-date');
+      // workspace/link 直载开发态：运行版本高于已发布 → ahead（前端不打扰）
+      assert.equal(classify('0.9.0', '0.8.1'), 'ahead');
+      // 查询失败/离线 → unknown（前端完全静默）
+      assert.equal(classify('0.8.0', null), 'unknown');
+      assert.equal(classify('unknown', '0.8.0'), 'unknown');
+    });
+  });
+
+  // ---- fetchLatestVersion：TTL 缓存 + 失败静默 ----
+  describe('fetchLatestVersion', () => {
+    test('正常响应取 latest；TTL 内复用缓存不重复请求', async () => {
+      resetCacheForTest();
+      let calls = 0;
+      let clock = 1000;
+      const fetchImpl = async () => { calls += 1; return { ok: true, json: async () => ({ version: '0.8.1' }) }; };
+      const now = () => clock;
+
+      assert.equal(await fetchLatestVersion({ fetchImpl, now }), '0.8.1');
+      assert.equal(await fetchLatestVersion({ fetchImpl, now }), '0.8.1');
+      assert.equal(calls, 1);
+
+      clock += 60 * 60 * 1000 - 1;
+      assert.equal(await fetchLatestVersion({ fetchImpl, now }), '0.8.1');
+      assert.equal(calls, 1);
+
+      // 过 TTL 后重新请求
+      clock += 1;
+      assert.equal(await fetchLatestVersion({ fetchImpl, now }), '0.8.1');
+      assert.equal(calls, 2);
+      resetCacheForTest();
+    });
+
+    test('失败静默返回 null：网络异常 / 非 2xx / 形状不对', async () => {
+      resetCacheForTest();
+      assert.equal(await fetchLatestVersion({ fetchImpl: async () => { throw new Error('offline'); }, now: () => 1000 }), null);
+      assert.equal(await fetchLatestVersion({ fetchImpl: async () => ({ ok: false, status: 503 }), now: () => 1000 }), null);
+      assert.equal(await fetchLatestVersion({ fetchImpl: async () => ({ ok: true, json: async () => ({ nope: true }) }), now: () => 1000 }), null);
+      resetCacheForTest();
+    });
+
+    test('失败不写缓存：下次调用立刻重试', async () => {
+      resetCacheForTest();
+      let calls = 0;
+      let fail = true;
+      const fetchImpl = async () => {
+        calls += 1;
+        if (fail) throw new Error('boom');
+        return { ok: true, json: async () => ({ version: '0.8.2' }) };
+      };
+      assert.equal(await fetchLatestVersion({ fetchImpl, now: () => 1000 }), null);
+      assert.equal(await fetchLatestVersion({ fetchImpl, now: () => 1000 }), null);
+      assert.equal(calls, 2);
+      fail = false;
+      assert.equal(await fetchLatestVersion({ fetchImpl, now: () => 1000 }), '0.8.2');
+      resetCacheForTest();
+    });
+
+    test('运行环境无全局 fetch 时走默认参兜底：resolve null 而非同步抛', async () => {
+      resetCacheForTest();
+      const original = globalThis.fetch;
+      globalThis.fetch = undefined;
+      try {
+        // 修复前：默认参 fetchImpl = fetch 在参数求值期同步抛 ReferenceError，
+        // 路由的 .catch 接不住；修复后应归入常规失败路径静默返 null。
+        assert.equal(await fetchLatestVersion({ now: () => 1000 }), null);
+      } finally {
+        globalThis.fetch = original;
+      }
+      resetCacheForTest();
+    });
+  });
+
+  // ---- 模块常量：URL 必须过白名单，运行版本可读 ----
+  test('REGISTRY_URL 自身通过白名单校验；PACKAGE_VERSION 可读', () => {
+    assert.equal(validateRegistryUrl(REGISTRY_URL), true);
+    assert.match(PACKAGE_VERSION, /^\d+\.\d+\.\d+/);
+  });
+});

package/test/webServer-optional.test.js

@@ -1,82 +1,82 @@
-import test from "node:test";
-import assert from "node:assert/strict";
-import { Context } from "@deepseek-ai/cordis";
-import { mkdtempSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import * as mneme from "../src/index.js";
-
-// webServer 可选依赖回归（v0.7.24 修复）：v0.7.23 曾把 webServer 从 inject 声明
-// 中去掉想支持 headless，但 apply 里 `if (ctx.webServer)` 在 cordis 4 的 Proxy
-// 下访问未注入属性会抛 "cannot get property without inject"（不会返回
-// undefined），桌面端插件树直接加载失败。本测试用真实 cordis Context 复现两种
-// 宿主形态，守住「有 webServer 时注册 API 路由 / 无 webServer 时不崩」两条底线。
-//
-// 修复后 webServer 保留在 inject（cordis 等待宿主服务就绪后再 apply，路由注册
-// 不落时序），apply 守卫用 ctx.reflect.get 而非直接属性访问。headless 宿主
-// 缺 webServer 时 fiber 静默不激活（与 v0.7.22 一致），不抛错。
-
-function buildHost(withWebServer) {
-  const ctx = new Context();
-  const apiRoutes = [];
-  ctx.provide("tools", { register() { return () => {}; } });
-  ctx.provide("commands", { register() { return () => {}; } });
-  ctx.provide("systemPrompt", { context() { return () => {}; } });
-  ctx.provide("agentDefaultModel", { currentSelection() { return { provider: "mock", model: "mock" }; } });
-  ctx.provide("llm", {
-    async *stream() { yield { type: "finish", reason: { kind: "stop" } }; }
-  });
-  if (withWebServer) {
-    ctx.provide("webServer", { register(route) { apiRoutes.push(route); return () => {}; } });
-  }
-  return { ctx, apiRoutes };
-}
-
-test("desktop host (webServer present): plugin boots and registers API routes", async () => {
-  const { ctx, apiRoutes } = buildHost(true);
-  const fiber = ctx.plugin(mneme, { memoryDir: mkdtempSync(join(tmpdir(), "mneme-desk-")) });
-  await fiber;
-  assert.ok(apiRoutes.length > 0, "webServer routes must be registered on desktop");
-  assert.ok(apiRoutes.some((r) => r.kind === "exact"), "expect exact routes, got: " + apiRoutes.map((r) => r.kind).join(","));
-});
-
-test("headless host (no webServer): plugin must not throw", async () => {
-  const { ctx } = buildHost(false);
-  const fiber = ctx.plugin(mneme, { memoryDir: mkdtempSync(join(tmpdir(), "mneme-head-")) });
-  // INACTIVE fiber 静默等待依赖，fiber promise 不会 reject；只要不抛错即为通过。
-  await fiber;
-  assert.ok(true, "headless load must not throw");
-});
-
-/** Boot the plugin with ctx.logger.warn captured. */
-async function bootCapturingWarnings(config) {
-  const { ctx } = buildHost(true);
-  const warnings = [];
-  const original = ctx.logger.warn.bind(ctx.logger);
-  ctx.logger.warn = (...args) => { warnings.push(args.join(" ")); original(...args); };
-  await ctx.plugin(mneme, config);
-  return warnings;
-}
-
-// issue #135：向量层未配置时启动必须留下痕迹。此前 legacy OpenAI embedder 恒报
-// ready=true，于是向量层「绿的但全哑」可以静默存在很久 —— 本机这样过了数周，
-// 语义召回、语义去重、rerank、sleep 冲突检测全部失效而面板一切正常。
-// embedProvider 默认就是 "openai"，所以「默认配置 + 空 vector-config」必现。
-test("unconfigured vector layer warns once at boot (issue #135)", async () => {
-  const warnings = await bootCapturingWarnings({ memoryDir: mkdtempSync(join(tmpdir(), "mneme-warn-")) });
-  const vectorWarnings = warnings.filter((w) => w.includes("向量层未配置"));
-  assert.equal(vectorWarnings.length, 1, "exactly one warning, not one per use:\n" + warnings.join("\n"));
-  // 告警必须点名实际受影响的能力，否则用户不知道该去修什么。
-  for (const feature of ["语义召回", "rerank", "sleep", "dream"]) {
-    assert.ok(vectorWarnings[0].includes(feature), `warning must name ${feature}: ${vectorWarnings[0]}`);
-  }
-});
-
-// 轻量模式是有意的选择、不是配置错误：不能刷这条告警（整条向量管线本就不装配）。
-test("light mode does not warn about the vector layer (issue #135)", async () => {
-  const warnings = await bootCapturingWarnings({
-    memoryDir: mkdtempSync(join(tmpdir(), "mneme-light-")),
-    lightMode: true
-  });
-  assert.deepEqual(warnings.filter((w) => w.includes("向量层未配置")), []);
-});
+import test from "node:test";
+import assert from "node:assert/strict";
+import { Context } from "@deepseek-ai/cordis";
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import * as mneme from "../src/index.js";
+
+// webServer 可选依赖回归（v0.7.24 修复）：v0.7.23 曾把 webServer 从 inject 声明
+// 中去掉想支持 headless，但 apply 里 `if (ctx.webServer)` 在 cordis 4 的 Proxy
+// 下访问未注入属性会抛 "cannot get property without inject"（不会返回
+// undefined），桌面端插件树直接加载失败。本测试用真实 cordis Context 复现两种
+// 宿主形态，守住「有 webServer 时注册 API 路由 / 无 webServer 时不崩」两条底线。
+//
+// 修复后 webServer 保留在 inject（cordis 等待宿主服务就绪后再 apply，路由注册
+// 不落时序），apply 守卫用 ctx.reflect.get 而非直接属性访问。headless 宿主
+// 缺 webServer 时 fiber 静默不激活（与 v0.7.22 一致），不抛错。
+
+function buildHost(withWebServer) {
+  const ctx = new Context();
+  const apiRoutes = [];
+  ctx.provide("tools", { register() { return () => {}; } });
+  ctx.provide("commands", { register() { return () => {}; } });
+  ctx.provide("systemPrompt", { context() { return () => {}; } });
+  ctx.provide("agentDefaultModel", { currentSelection() { return { provider: "mock", model: "mock" }; } });
+  ctx.provide("llm", {
+    async *stream() { yield { type: "finish", reason: { kind: "stop" } }; }
+  });
+  if (withWebServer) {
+    ctx.provide("webServer", { register(route) { apiRoutes.push(route); return () => {}; } });
+  }
+  return { ctx, apiRoutes };
+}
+
+test("desktop host (webServer present): plugin boots and registers API routes", async () => {
+  const { ctx, apiRoutes } = buildHost(true);
+  const fiber = ctx.plugin(mneme, { memoryDir: mkdtempSync(join(tmpdir(), "mneme-desk-")) });
+  await fiber;
+  assert.ok(apiRoutes.length > 0, "webServer routes must be registered on desktop");
+  assert.ok(apiRoutes.some((r) => r.kind === "exact"), "expect exact routes, got: " + apiRoutes.map((r) => r.kind).join(","));
+});
+
+test("headless host (no webServer): plugin must not throw", async () => {
+  const { ctx } = buildHost(false);
+  const fiber = ctx.plugin(mneme, { memoryDir: mkdtempSync(join(tmpdir(), "mneme-head-")) });
+  // INACTIVE fiber 静默等待依赖，fiber promise 不会 reject；只要不抛错即为通过。
+  await fiber;
+  assert.ok(true, "headless load must not throw");
+});
+
+/** Boot the plugin with ctx.logger.warn captured. */
+async function bootCapturingWarnings(config) {
+  const { ctx } = buildHost(true);
+  const warnings = [];
+  const original = ctx.logger.warn.bind(ctx.logger);
+  ctx.logger.warn = (...args) => { warnings.push(args.join(" ")); original(...args); };
+  await ctx.plugin(mneme, config);
+  return warnings;
+}
+
+// issue #135：向量层未配置时启动必须留下痕迹。此前 legacy OpenAI embedder 恒报
+// ready=true，于是向量层「绿的但全哑」可以静默存在很久 —— 本机这样过了数周，
+// 语义召回、语义去重、rerank、sleep 冲突检测全部失效而面板一切正常。
+// embedProvider 默认就是 "openai"，所以「默认配置 + 空 vector-config」必现。
+test("unconfigured vector layer warns once at boot (issue #135)", async () => {
+  const warnings = await bootCapturingWarnings({ memoryDir: mkdtempSync(join(tmpdir(), "mneme-warn-")) });
+  const vectorWarnings = warnings.filter((w) => w.includes("向量层未配置"));
+  assert.equal(vectorWarnings.length, 1, "exactly one warning, not one per use:\n" + warnings.join("\n"));
+  // 告警必须点名实际受影响的能力，否则用户不知道该去修什么。
+  for (const feature of ["语义召回", "rerank", "sleep", "dream"]) {
+    assert.ok(vectorWarnings[0].includes(feature), `warning must name ${feature}: ${vectorWarnings[0]}`);
+  }
+});
+
+// 轻量模式是有意的选择、不是配置错误：不能刷这条告警（整条向量管线本就不装配）。
+test("light mode does not warn about the vector layer (issue #135)", async () => {
+  const warnings = await bootCapturingWarnings({
+    memoryDir: mkdtempSync(join(tmpdir(), "mneme-light-")),
+    lightMode: true
+  });
+  assert.deepEqual(warnings.filter((w) => w.includes("向量层未配置")), []);
+});