w-serv-orm 1.1.6 → 1.1.8

package/test/unit-getDb.test.mjs

@@ -0,0 +1,188 @@
+import fs from 'fs'
+import path from 'path'
+import assert from 'assert'
+import { spawnSync } from 'child_process'
+import { pathToFileURL } from 'url'
+import getDb from '../src/getDb.mjs'
+import br from '../src/getDbBackupAndRecover.mjs'
+
+
+//會寫出備份檔之案例以子行程執行: getDb之輸出目錄於模組載入時取cwd, 子行程之cwd設於本案暫存夾, 不寫入repo根目錄
+let fd = path.resolve('./test/_tmp/unit-getDb')
+let urlGetDb = pathToFileURL(path.resolve('./src/getDb.mjs')).href
+
+function mkWoItems(log, behavior = {}) {
+    return {
+        tests: {
+            select: async () => {
+                if (behavior.select) {
+                    return behavior.select()
+                }
+                return [{ id: 'a' }]
+            },
+            insert: async (d) => {
+                log.push({ fn: 'insert', table: 'tests', d })
+                return { n: d.length, nInserted: d.length, ok: 1 }
+            },
+            createStorage: async () => {
+                log.push({ fn: 'createStorage', table: 'tests' })
+            },
+        },
+    }
+}
+
+async function getReject(pm) {
+    try {
+        await pm
+    }
+    catch (err) {
+        return err
+    }
+    throw new Error('預期reject但resolve')
+}
+
+async function quiet(fn) {
+    let logOrig = console.log
+    console.log = () => {}
+    try {
+        return await fn()
+    }
+    finally {
+        console.log = logOrig
+    }
+}
+
+function writeBackup(name, content) {
+    let fp = path.join(fd, name)
+    fs.writeFileSync(fp, content, 'utf8')
+    return fp
+}
+
+function runChild(name, code) {
+    let dir = path.join(fd, name)
+    fs.mkdirSync(dir, { recursive: true })
+    let fp = path.join(dir, 'run.mjs')
+    fs.writeFileSync(fp, code, 'utf8')
+    let r = spawnSync(process.execPath, [fp], { cwd: dir, encoding: 'utf8' })
+    let files = fs.readdirSync(dir).filter((v) => v.startsWith('backup-'))
+    return { status: r.status, stdout: r.stdout, stderr: r.stderr, dir, files }
+}
+
+
+describe('getDb備份與還原', function() {
+
+    before(function() {
+        fs.rmSync(fd, { recursive: true, force: true })
+        fs.mkdirSync(fd, { recursive: true })
+    })
+
+    after(function() {
+        fs.rmSync(fd, { recursive: true, force: true })
+    })
+
+    it('B01 backup之select失敗即reject', async function() {
+        //D5: 印log後reject原錯誤
+        let woItems = mkWoItems([], { select: () => Promise.reject(new Error('E-select')) })
+        let err = await quiet(() => getReject(getDb.backup(woItems, { bLog: false })))
+        assert.ok(String(err).includes('E-select'))
+    })
+
+    it('B02 recover之備份檔不存在即reject', async function() {
+        //D5
+        let err = await quiet(() => getReject(getDb.recover(mkWoItems([]), path.join(fd, 'none.json'), { bLog: false })))
+        assert.ok(String(err).includes('fp is not exist'))
+    })
+
+    it('B03 recover之備份內容無效即reject且不寫入', async function() {
+        //P4-2: 空檔、壞JSON、空陣列、缺name皆拒絕, 不假成功
+        for (let [name, content] of [['empty.json', ''], ['bad.json', '{bad'], ['arr0.json', '[]'], ['noname.json', '[{"x":1}]']]) {
+            let log = []
+            let err = await quiet(() => getReject(getDb.recover(mkWoItems(log), writeBackup(name, content), { bLog: false })))
+            assert.ok(String(err).includes('invalid backup'), `${name}: ${err}`)
+            assert.strict.deepEqual(log, [])
+        }
+    })
+
+    it('B04 recover之備份含woItems沒有之資料表即於寫入前reject', async function() {
+        //P4-2: 先驗全部再寫入, 不留部分還原
+        let log = []
+        let fp = writeBackup('unknown.json', JSON.stringify([{ name: 'tests', data: [{ id: 'a' }] }, { name: 'nope', data: [{ id: 'b' }] }]))
+        let err = await quiet(() => getReject(getDb.recover(mkWoItems(log), fp, { bLog: false })))
+        assert.ok(String(err).includes('nope'))
+        assert.strict.deepEqual(log, [])
+    })
+
+    it('B05 recover成功', async function() {
+        //D5: 成功路徑不變
+        let log = []
+        let fp = writeBackup('ok.json', JSON.stringify([{ name: 'tests', data: [{ id: 'a' }] }]))
+        await quiet(() => getDb.recover(mkWoItems(log), fp, { bLog: false }))
+        assert.strict.deepEqual(log, [{ fn: 'insert', table: 'tests', d: [{ id: 'a' }] }])
+    })
+
+    it('B06 recover之bRela缺ds或genModelsByTabs即於寫入前reject', async function() {
+        //P4-1: 明確訊息, 不寫入
+        let log = []
+        let fp = writeBackup('rela.json', JSON.stringify([{ name: 'tests', data: [{ id: 'a' }] }]))
+        let err = await quiet(() => getReject(getDb.recover(mkWoItems(log), fp, { bRela: true, bLog: false })))
+        assert.ok(String(err).includes('genModelsByTabs'))
+        assert.strict.deepEqual(log, [])
+    })
+
+    it('B07 recover之bRela帶ds與genModelsByTabs可產生model並建表寫入', async function() {
+        //P4-1: genModelsByTabs收到各表settings, 之後建表並寫入
+        let log = []
+        let calls = []
+        let ds = { tests: { keys: ['id'], settings: { id: { pk: true, type: 'STRING' } } } }
+        let genModelsByTabs = (fdModels, tabs) => {
+            calls.push({ fdModels, tabs })
+        }
+        let fp = writeBackup('rela2.json', JSON.stringify([{ name: 'tests', data: [{ id: 'a' }] }]))
+        await quiet(() => getDb.recover(mkWoItems(log), fp, { bRela: true, ds, genModelsByTabs, fdModels: './test/_tmp/unit-getDb/models', bLog: false }))
+        assert.strict.equal(calls.length, 1)
+        assert.strict.deepEqual(calls[0].tabs, { tests: ds.tests.settings })
+        assert.strict.deepEqual(log.map((v) => v.fn), ['createStorage', 'insert'])
+    })
+
+    it('B08 低階recover之備份內容無效即reject', async function() {
+        //P4-2: WServOrm實例上之recover即此低階函數
+        let fp = writeBackup('bad2.json', '{bad')
+        let err = await getReject(br.recover(fp, mkWoItems([])))
+        assert.ok(String(err).includes('invalid backup'))
+    })
+
+    it('B12 backup之woItems無效即reject且為Error', async function() {
+        //錯誤型別: 工具函數一律拋Error(原由pmSeries以字串reject); 空物件與空陣列原會產出recover拒收之空備份, 一併拒絕
+        for (let bad of [null, undefined, 'x', 1, [], {}]) {
+            let err = await quiet(() => getReject(br.backup(bad)))
+            assert.ok(err instanceof Error && err.message === 'invalid woItems', `低階 ${String(bad)}: ${err}`)
+            err = await quiet(() => getReject(getDb.backup(bad, { bLog: false })))
+            assert.ok(err instanceof Error && err.message === 'invalid woItems', `getDb ${String(bad)}: ${err}`)
+        }
+    })
+
+    it('B09 backup成功寫出備份檔(子行程)', async function() {
+        //D5: 成功路徑不變
+        let r = runChild('bk-ok', `import getDb from '${urlGetDb}'\nlet woItems = { tests: { select: async () => [{ id: 'a' }] } }\nawait getDb.backup(woItems, { bLog: false })\nconsole.log('RESOLVED')\n`)
+        assert.strict.equal(r.status, 0, r.stderr)
+        assert.ok(r.stdout.includes('RESOLVED'))
+        assert.strict.equal(r.files.length, 1)
+        let j = JSON.parse(fs.readFileSync(path.join(r.dir, r.files[0]), 'utf8'))
+        assert.strict.deepEqual(j, [{ name: 'tests', data: [{ id: 'a' }] }])
+    })
+
+    it('B10 仿g_backupDb未await呼叫而失敗時離開碼非零(子行程)', async function() {
+        //D5: 使用端之頂層呼叫未await, 失敗成為未處理之rejection
+        let r = runChild('bk-fail', `import getDb from '${urlGetDb}'\nlet woItems = { tests: { select: async () => { throw new Error('E-select') } } }\ngetDb.backup(woItems)\n`)
+        assert.notStrictEqual(r.status, 0)
+        assert.strict.equal(r.files.length, 0)
+    })
+
+    it('B11 backup資料無法序列化即reject且不寫出空檔(子行程)', async function() {
+        //D5: o2j失敗回空字串, 不得寫出空備份而回報成功
+        let r = runChild('bk-circular', `import getDb from '${urlGetDb}'\nlet a = { id: 'a' }\na.self = a\nlet woItems = { tests: { select: async () => [a] } }\nlet out = 'RESOLVED'\nawait getDb.backup(woItems, { bLog: false }).catch(() => { out = 'REJECTED' })\nconsole.log(out)\n`)
+        assert.ok(r.stdout.includes('REJECTED'), r.stdout + r.stderr)
+        assert.strict.equal(r.files.length, 0)
+    })
+
+})

package/test/unit-mapOrm.test.mjs

@@ -0,0 +1,373 @@
+import assert from 'assert'
+import WServOrm from '../src/WServOrm.mjs'
+import genTestData from '../src/genTestData.mjs'
+import dsSchema from '../schema/index.mjs'
+
+
+//替身ORM, 回傳形狀依w-orm系列規格(資料庫函數回傳定義計算.md T2、T4):
+//save與del回傳與輸入等長保序之逐筆陣列, 單筆失敗時整批仍resolve, 該筆以ok為0並附err回報; 整批性錯誤則reject
+let plan = {}
+let calls = []
+function WOrmStub() {
+    let ev = {}
+    for (let fn of ['select', 'insert', 'save', 'del', 'delAll']) {
+        ev[fn] = async (data) => {
+            calls.push({ fn, data })
+            return plan[fn](data)
+        }
+    }
+    return ev
+}
+
+let ds = {
+    tests: {
+        keys: ['id', 'name', 'timeCreate', 'timeUpdate'],
+    },
+}
+
+let okSave = { n: 1, nInserted: 0, nModified: 1, ok: 1 }
+let okDel = { n: 1, nDeleted: 1, ok: 1 }
+
+async function getReject(pm) {
+    try {
+        await pm
+    }
+    catch (err) {
+        return err
+    }
+    throw new Error('預期reject但resolve')
+}
+
+
+describe('mapOrm逐筆失敗', function() {
+
+    let so = WServOrm(ds, WOrmStub, 'stub-url', 'stub-db', { useCheckUser: false, useExcludeWhenNotAdmin: false })
+    let proc = (mode, input) => so.procOrm('u1', 'tests', mode, input)
+
+    beforeEach(function() {
+        plan = {}
+        calls = []
+    })
+
+    it('U01 save陣列全部成功', async function() {
+        //R04: 全部成功時save回傳不變, 僅回傳id
+        plan.save = (data) => data.map(() => okSave)
+        let r = await proc('save', [{ id: 's1', name: 'a' }, { id: 's2', name: 'b' }])
+        assert.strict.deepEqual(r, [{ id: 's1' }, { id: 's2' }])
+    })
+
+    it('U02 save物件全部成功', async function() {
+        //R04: 輸入為單一物件時回傳單一{id}
+        plan.save = () => [okSave]
+        let r = await proc('save', { id: 's1', name: 'a' })
+        assert.strict.deepEqual(r, { id: 's1' })
+    })
+
+    it('U03 save陣列中一筆ok為0', async function() {
+        //R01: 逐筆ok為0即reject, 訊息帶失敗筆之主鍵, 不含成功筆
+        plan.save = () => [okSave, { n: 1, nInserted: 0, nModified: 0, ok: 0, err: 'E-save' }]
+        let err = await getReject(proc('save', [{ id: 's1' }, { id: 's2' }]))
+        assert.strict.equal(err, 'failed to save data: id[s2]')
+    })
+
+    it('U04 save物件ok為0', async function() {
+        //R01: 輸入為單一物件時ORM回傳長度為1之陣列, 仍須檢出
+        plan.save = () => [{ n: 1, nInserted: 0, nModified: 0, ok: 0, err: 'E-save' }]
+        let err = await getReject(proc('save', { id: 's1' }))
+        assert.strict.equal(err, 'failed to save data: id[s1]')
+    })
+
+    it('U05 save未帶主鍵之筆ok為0且無err', async function() {
+        //R01: 無有效主鍵者以輸入位置標示; R07: ok為0而無err(舊版ORM)仍判失敗
+        plan.save = () => [okSave, { n: 1, ok: 0 }]
+        let err = await getReject(proc('save', [{ id: 's1' }, { name: 'no-id' }]))
+        assert.strict.equal(err, 'failed to save data: data[1]')
+    })
+
+    it('U06 save整批reject', async function() {
+        //R05: 整批性錯誤之訊息不變
+        plan.save = () => Promise.reject(new Error('E-batch'))
+        let err = await getReject(proc('save', [{ id: 's1' }]))
+        assert.strict.equal(err, 'failed to save data')
+    })
+
+    it('U07 save之ORM回傳非陣列', async function() {
+        //R07: 未依規格之ORM回傳非陣列時不檢查, 照舊回傳id
+        plan.save = () => ({ n: 1, ok: 1 })
+        let r = await proc('save', [{ id: 's1' }])
+        assert.strict.deepEqual(r, [{ id: 's1' }])
+    })
+
+    it('U08 save多筆ok為0', async function() {
+        //R08: 失敗筆數超過10筆時僅列前10筆並附總筆數
+        let input = []
+        for (let i = 1; i <= 12; i++) {
+            input.push({ id: `f${i}` })
+        }
+        plan.save = (data) => data.map(() => ({ n: 1, nInserted: 0, nModified: 0, ok: 0, err: 'E-full' }))
+        let err = await getReject(proc('save', input))
+        let ids = input.slice(0, 10).map((v) => `id[${v.id}]`).join(', ')
+        assert.strict.equal(err, `failed to save data: ${ids}, ... (12 in total)`)
+    })
+
+    it('U09 del全部成功含主鍵未命中', async function() {
+        //R04: del回傳ORM原始逐筆陣列不變; 主鍵未命中(n為0、ok為1)屬正常結果而非失敗
+        let rs = [okDel, { n: 0, nDeleted: 0, ok: 1 }]
+        plan.del = () => rs
+        let r = await proc('del', [{ id: 'd1' }, { id: 'd-none' }])
+        assert.strict.deepEqual(r, rs)
+    })
+
+    it('U10 del數字主鍵ok為0', async function() {
+        //R02: del逐筆ok為0即reject; 數字主鍵照列
+        plan.del = () => [okDel, { n: 0, nDeleted: 0, ok: 0, err: 'can not delete by invalid id[123]' }]
+        let err = await getReject(proc('del', [{ id: 'd1' }, { id: 123 }]))
+        assert.strict.equal(err, 'failed to delete data: id[123]')
+    })
+
+    it('U10b del物件輸入ok為0且無err', async function() {
+        //R02: 物件輸入亦須檢出; R07: ok為0而無err仍判失敗
+        plan.del = () => [{ n: 1, nDeleted: 0, ok: 0 }]
+        let err = await getReject(proc('del', { id: 'd1' }))
+        assert.strict.equal(err, 'failed to delete data: id[d1]')
+    })
+
+    it('U11 del整批reject', async function() {
+        //R05: 整批性錯誤之訊息不變
+        plan.del = () => Promise.reject(new Error('E-batch'))
+        let err = await getReject(proc('del', [{ id: 'd1' }]))
+        assert.strict.equal(err, 'failed to delete data')
+    })
+
+    it('U12 del之ORM回傳非陣列', async function() {
+        //R07: 未依規格之ORM回傳非陣列時不檢查, 照舊回傳原值
+        plan.del = () => ({ n: 1, nDeleted: 1, ok: 1 })
+        let r = await proc('del', [{ id: 'd1' }])
+        assert.strict.deepEqual(r, { n: 1, nDeleted: 1, ok: 1 })
+    })
+
+    it('U13 mix全部成功', async function() {
+        //R04: mix依add、del、diff順序執行, 回傳累積之id
+        plan.insert = (data) => ({ n: data.length, nInserted: data.length, ok: 1 })
+        plan.del = (data) => data.map(() => okDel)
+        plan.save = (data) => data.map(() => okSave)
+        let r = await proc('mix', { add: [{ id: 'a1' }], del: [{ id: 'd1' }], diff: [{ id: 'f1' }] })
+        assert.strict.deepEqual(r, [{ id: 'a1' }, { id: 'd1' }, { id: 'f1' }])
+        assert.strict.deepEqual(calls.map((v) => v.fn), ['insert', 'del', 'save'])
+    })
+
+    it('U14 mix之del與diff皆有ok為0', async function() {
+        //R03: 逐筆失敗不中斷後續步驟, 全部步驟完成後一次reject並分步列出
+        plan.insert = (data) => ({ n: data.length, nInserted: data.length, ok: 1 })
+        plan.del = () => [okDel, { n: 0, nDeleted: 0, ok: 0, err: 'E-del' }]
+        plan.save = () => [{ n: 1, nInserted: 0, nModified: 0, ok: 0, err: 'E-save' }]
+        let err = await getReject(proc('mix', { add: [{ id: 'a1' }], del: [{ id: 'd1' }, { id: 'd2' }], diff: [{ id: 'f1' }] }))
+        assert.strict.equal(err, 'failed to delete data: id[d2]; failed to update data: id[f1]')
+        assert.strict.deepEqual(calls.map((v) => v.fn), ['insert', 'del', 'save'])
+    })
+
+    it('U15 mix僅del有ok為0', async function() {
+        //R03: del之逐筆失敗不中斷diff, diff仍寫入, 最後reject僅列del之失敗
+        plan.del = () => [{ n: 0, nDeleted: 0, ok: 0, err: 'E-del' }]
+        plan.save = (data) => data.map(() => okSave)
+        let err = await getReject(proc('mix', { del: [{ id: 'd1' }], diff: [{ id: 'f1' }] }))
+        assert.strict.equal(err, 'failed to delete data: id[d1]')
+        assert.strict.deepEqual(calls.map((v) => v.fn), ['del', 'save'])
+    })
+
+    it('U16 mix之del整批reject', async function() {
+        //R05: 整批性錯誤維持立即reject, 後續步驟不執行
+        plan.del = () => Promise.reject(new Error('E-batch'))
+        plan.save = (data) => data.map(() => okSave)
+        let err = await getReject(proc('mix', { del: [{ id: 'd1' }], diff: [{ id: 'f1' }] }))
+        assert.strict.equal(err, 'failed to delete data')
+        assert.strict.deepEqual(calls.map((v) => v.fn), ['del'])
+    })
+
+    it('U17 mix之add整批reject', async function() {
+        //R05: insert整批性錯誤維持立即reject, 後續步驟不執行
+        plan.insert = () => Promise.reject(new Error('E-batch'))
+        plan.del = (data) => data.map(() => okDel)
+        let err = await getReject(proc('mix', { add: [{ id: 'a1' }], del: [{ id: 'd1' }] }))
+        assert.strict.equal(err, 'failed to insert data')
+        assert.strict.deepEqual(calls.map((v) => v.fn), ['insert'])
+    })
+
+    it('U18 mix之del有ok為0後diff整批reject', async function() {
+        //R05: 遇整批性錯誤即以該步驟之訊息reject, 先前之逐筆失敗已由log輸出
+        plan.del = () => [{ n: 0, nDeleted: 0, ok: 0, err: 'E-del' }]
+        plan.save = () => Promise.reject(new Error('E-batch'))
+        let err = await getReject(proc('mix', { del: [{ id: 'd1' }], diff: [{ id: 'f1' }] }))
+        assert.strict.equal(err, 'failed to update data')
+    })
+
+    it('U19 insert成功', async function() {
+        //R04: insert回傳聚合物件而非逐筆陣列, 照舊回傳id
+        plan.insert = (data) => ({ n: data.length, nInserted: data.length, ok: 1 })
+        let r = await proc('insert', [{ id: 'i1' }])
+        assert.strict.deepEqual(r, [{ id: 'i1' }])
+    })
+
+    it('U22 錯誤原文寫入log而不進reject訊息', async function() {
+        //R06: 前端訊息只帶主鍵, 錯誤原文由console.log輸出
+        plan.save = () => [{ n: 1, nInserted: 0, nModified: 0, ok: 0, err: 'E-secret-detail' }]
+        let logs = []
+        let logOrig = console.log
+        console.log = (...args) => {
+            logs.push(args)
+        }
+        let err
+        try {
+            err = await getReject(proc('save', [{ id: 's1' }]))
+        }
+        finally {
+            console.log = logOrig
+        }
+        assert.ok(!String(err).includes('E-secret-detail'))
+        assert.ok(JSON.stringify(logs).includes('E-secret-detail'))
+    })
+
+})
+
+
+describe('mapOrm主鍵與clearXSS', function() {
+
+    let so = WServOrm(ds, WOrmStub, 'stub-url', 'stub-db', { useCheckUser: false, useExcludeWhenNotAdmin: false })
+    let proc = (mode, input) => so.procOrm('u1', 'tests', mode, input)
+
+    beforeEach(function() {
+        plan = {}
+        calls = []
+    })
+
+    it('X01 數學式之主鍵與欄位原樣寫入並回傳', async function() {
+        //wsemi 1.9.13起clearXSS只轉義會開始標籤之<, 數學式不改寫, 主鍵不被拒絕且與寫入者一致
+        plan.save = (data) => data.map(() => okSave)
+        let r = await proc('save', [{ id: 'a < b', name: '溫度 > 30°C' }, { id: '1 > 0', name: 'x <= 5' }])
+        assert.strict.deepEqual(r, [{ id: 'a < b' }, { id: '1 > 0' }])
+        assert.strict.deepEqual(calls[0].data.map((v) => [v.id, v.name]), [['a < b', '溫度 > 30°C'], ['1 > 0', 'x <= 5']])
+    })
+
+    it('X02 save之主鍵會被改寫即整批reject且不呼叫ORM', async function() {
+        //改寫後之主鍵與呼叫端所持者不同而查不到, 整批拒絕; 訊息只列位置不回顯主鍵; 結尾之<亦會被轉義
+        plan.save = (data) => data.map(() => okSave)
+        let err = await getReject(proc('save', [{ id: 's1' }, { id: 'a<b' }, { id: 'x <' }]))
+        assert.strict.equal(err, 'failed to save data, id contains HTML markup: data[1], data[2]')
+        assert.strict.deepEqual(calls, [])
+    })
+
+    it('X03 insert物件之主鍵會被改寫即reject且不呼叫ORM', async function() {
+        plan.insert = (data) => ({ n: data.length, nInserted: data.length, ok: 1 })
+        let err = await getReject(proc('insert', { id: '<script>x' }))
+        assert.strict.equal(err, 'failed to insert data, id contains HTML markup: data[0]')
+        assert.strict.deepEqual(calls, [])
+    })
+
+    it('X04 mix之新增或修改之主鍵會被改寫即於任何步驟之前reject', async function() {
+        //mix依add、del、diff執行, 預檢於任何步驟寫入之前, 故一筆都不寫入
+        plan.insert = (data) => ({ n: data.length, nInserted: data.length, ok: 1 })
+        plan.del = (data) => data.map(() => okDel)
+        plan.save = (data) => data.map(() => okSave)
+        let err = await getReject(proc('mix', { add: [{ id: 'a1' }, { id: 'a<b' }], del: [{ id: 'd1' }], diff: [{ id: '</x>' }] }))
+        assert.strict.equal(err, 'failed to insert data, id contains HTML markup: data[1]; failed to update data, id contains HTML markup: data[0]')
+        assert.strict.deepEqual(calls, [])
+        err = await getReject(proc('mix', { del: [{ id: 'd1' }], diff: [{ id: 'f1' }, { id: '<!--x-->' }] }))
+        assert.strict.equal(err, 'failed to update data, id contains HTML markup: data[1]')
+        assert.strict.deepEqual(calls, [])
+    })
+
+    it('X05 數字主鍵、未帶主鍵與不被改寫之主鍵照常寫入', async function() {
+        //判準為是否被改寫: 數字不經清除, 未帶主鍵者由本套件補值, 白名單標籤之規範寫法不被改寫
+        plan.save = (data) => data.map(() => okSave)
+        let r = await proc('save', [{ id: 5 }, { id: '<b>粗體</b>' }, { name: 'no-id' }])
+        assert.strict.equal(r[0].id, 5)
+        assert.strict.equal(r[1].id, '<b>粗體</b>')
+        assert.ok(typeof r[2].id === 'string' && r[2].id.length > 0)
+    })
+
+    it('X06 select與del不經clearXSS, 主鍵原樣交ORM', async function() {
+        //此不對稱即主鍵會被改寫者須於寫入前拒絕之原因
+        plan.select = () => []
+        plan.del = (data) => data.map(() => ({ n: 0, nDeleted: 0, ok: 1 }))
+        await proc('select', { id: 'a<b' })
+        await proc('del', [{ id: 'a<b' }])
+        assert.strict.deepEqual(calls.map((v) => v.data), [{ id: 'a<b' }, [{ id: 'a<b' }]])
+    })
+
+    it('X07 insert與mix各入口之其餘主鍵狀態', async function() {
+        //數字與不被改寫之主鍵照寫, mix之修改未帶主鍵者補值, mix之刪除不經clearXSS而原樣交ORM
+        plan.insert = (data) => ({ n: data.length, nInserted: data.length, ok: 1 })
+        plan.del = (data) => data.map(() => okDel)
+        plan.save = (data) => data.map(() => okSave)
+        let r1 = await proc('insert', [{ id: 7 }, { id: 'a < b' }])
+        assert.strict.deepEqual(r1, [{ id: 7 }, { id: 'a < b' }])
+        let r2 = await proc('mix', { add: [{ id: 8 }, { id: '1 > 0' }], del: [{ id: 'a<b' }], diff: [{ id: 9 }, { id: 'x <= 5' }, { name: 'no-id' }] })
+        assert.strict.deepEqual(r2.slice(0, 5), [{ id: 8 }, { id: '1 > 0' }, { id: 'a<b' }, { id: 9 }, { id: 'x <= 5' }])
+        assert.ok(typeof r2[5].id === 'string' && r2[5].id.length > 0)
+        assert.strict.deepEqual(calls.map((v) => v.fn), ['insert', 'insert', 'del', 'save'])
+        assert.strict.deepEqual(calls[2].data, [{ id: 'a<b' }])
+        assert.strict.equal(calls[3].data[2].id, r2[5].id)
+    })
+
+})
+
+
+describe('genTestData逐筆失敗', function() {
+
+    let dsGen = {
+        tests: {
+            funTest: () => [{ id: 'g1' }, { id: 'g2' }],
+        },
+    }
+
+    it('U20 funTest全部成功', async function() {
+        //R09: 全部成功時照舊resolve, 並以funTest產生之數據呼叫save
+        let saved = null
+        let woItems = {
+            tests: {
+                save: async (rs) => {
+                    saved = rs
+                    return rs.map(() => okSave)
+                },
+            },
+        }
+        await genTestData(dsGen, woItems, { mode: 'funTest', bLog: false })
+        assert.strict.deepEqual(saved, [{ id: 'g1' }, { id: 'g2' }])
+    })
+
+    it('U21 funTest之save有ok為0', async function() {
+        //R09: 逐筆ok為0即reject, 訊息含資料表名與錯誤原文(伺服器端開發工具)
+        let woItems = {
+            tests: {
+                save: async () => [okSave, { n: 1, nInserted: 0, nModified: 0, ok: 0, err: 'E-gen' }],
+            },
+        }
+        let err = await getReject(genTestData(dsGen, woItems, { mode: 'funTest', bLog: false }))
+        assert.ok(String(err).includes('tests'))
+        assert.ok(String(err).includes('E-gen'))
+        assert.ok(String(err).includes('g2'))
+    })
+
+    it('U23 funTestAndSave與funTest之逐筆失敗訊息相同', async function() {
+        //R09: funTestAndSave由w-data-collector之build產生(schema/index.mjs)且其錯誤原樣轉出; w-data-collector 1.0.46起兩種模式之訊息同為英文同格式
+        let woItems = {
+            tests: {
+                save: async (rs) => rs.map((v, k) => (k === 1 ? { n: 1, nInserted: 0, nModified: 0, ok: 0, err: 'E-gen' } : okSave)),
+            },
+        }
+        let logOrig = console.log
+        console.log = () => {}
+        let errs = []
+        try {
+            for (let mode of ['funTestAndSave', 'funTest']) {
+                errs.push(await getReject(genTestData(dsSchema, woItems, { mode, bLog: false })))
+            }
+        }
+        finally {
+            console.log = logOrig
+        }
+        let msg = 'failed to write test data into table[tests]: [{"k":1,"id":"id-for-tests-2","err":"E-gen"}]'
+        assert.strict.deepEqual(errs.map((e) => e.message), [msg, msg])
+    })
+
+})