ChatCoolify 0.2.2__tar.gz → 0.2.4__tar.gz

{chatcoolify-0.2.2/src/ChatCoolify.egg-info → chatcoolify-0.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ChatCoolify
-Version: 0.2.2
+Version: 0.2.4
 Summary: AI-safe Python client and CLI for the official Coolify API
 Author-email: ChatArch <1073853456@qq.com>
 License-Expression: MIT
@@ -123,3 +123,16 @@ python -m twine check dist/*
 ## 许可证
 
 MIT。
+
+
+## 签名访客的公开只读投影
+
+公开项目可以由受信任服务显式实现 `GET` / `HEAD /api/public/catalog`、`/api/public/state` 和 `/api/public/projects/{id}`（ID 为 1–80 个 ASCII 字母、数字、下划线或连字符）。平台仍按应用和站点绑定签名，访客上下文保持 `authenticated=False`，不因签名或客户端身份声明成为已登录所有者。普通私有 API 不在访客白名单中；此扩展不改变既有评论提交协议。
+
+后端必须独立验证准确的方法、路径/查询、正文与站点 read 权限，并生成明确允许的公开字段。不要把原始项目材料、来源连接、人工私人记录或凭据直接当成公开响应。投影路径只读；私有读取、管理写入和 CSRF 仍执行各自的认证规则。项目可见性是项目级策略，切换前同时核对预览与生产范围，不以一层登录遮罩替代后端权限。
+
+正式发布包包含上述签名只读投影能力；是否允许公开读取仍由项目的持久化访问策略决定。
+
+### 原生项目访问管理
+
+已认证的项目所有者可通过 `GET /__platform/manage` 进入原生控制台的准确项目设置。正式站与预览共用持久化的访问模式；公开切换需要明确确认，保存时验证预期的旧模式并再次读取结果。普通阅读账号不能管理访问权限。该能力不新增或改名 CLI 命令。

{chatcoolify-0.2.2 → chatcoolify-0.2.4}/README.md

@@ -84,3 +84,16 @@ python -m twine check dist/*
 ## 许可证
 
 MIT。
+
+
+## 签名访客的公开只读投影
+
+公开项目可以由受信任服务显式实现 `GET` / `HEAD /api/public/catalog`、`/api/public/state` 和 `/api/public/projects/{id}`（ID 为 1–80 个 ASCII 字母、数字、下划线或连字符）。平台仍按应用和站点绑定签名，访客上下文保持 `authenticated=False`，不因签名或客户端身份声明成为已登录所有者。普通私有 API 不在访客白名单中；此扩展不改变既有评论提交协议。
+
+后端必须独立验证准确的方法、路径/查询、正文与站点 read 权限，并生成明确允许的公开字段。不要把原始项目材料、来源连接、人工私人记录或凭据直接当成公开响应。投影路径只读；私有读取、管理写入和 CSRF 仍执行各自的认证规则。项目可见性是项目级策略，切换前同时核对预览与生产范围，不以一层登录遮罩替代后端权限。
+
+正式发布包包含上述签名只读投影能力；是否允许公开读取仍由项目的持久化访问策略决定。
+
+### 原生项目访问管理
+
+已认证的项目所有者可通过 `GET /__platform/manage` 进入原生控制台的准确项目设置。正式站与预览共用持久化的访问模式；公开切换需要明确确认，保存时验证预期的旧模式并再次读取结果。普通阅读账号不能管理访问权限。该能力不新增或改名 CLI 命令。

{chatcoolify-0.2.2 → chatcoolify-0.2.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ChatCoolify"
-version = "0.2.2"
+version = "0.2.4"
 description = "AI-safe Python client and CLI for the official Coolify API"
 readme = "README.md"
 requires-python = ">=3.10"

{chatcoolify-0.2.2 → chatcoolify-0.2.4/src/ChatCoolify.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ChatCoolify
-Version: 0.2.2
+Version: 0.2.4
 Summary: AI-safe Python client and CLI for the official Coolify API
 Author-email: ChatArch <1073853456@qq.com>
 License-Expression: MIT
@@ -123,3 +123,16 @@ python -m twine check dist/*
 ## 许可证
 
 MIT。
+
+
+## 签名访客的公开只读投影
+
+公开项目可以由受信任服务显式实现 `GET` / `HEAD /api/public/catalog`、`/api/public/state` 和 `/api/public/projects/{id}`（ID 为 1–80 个 ASCII 字母、数字、下划线或连字符）。平台仍按应用和站点绑定签名，访客上下文保持 `authenticated=False`，不因签名或客户端身份声明成为已登录所有者。普通私有 API 不在访客白名单中；此扩展不改变既有评论提交协议。
+
+后端必须独立验证准确的方法、路径/查询、正文与站点 read 权限，并生成明确允许的公开字段。不要把原始项目材料、来源连接、人工私人记录或凭据直接当成公开响应。投影路径只读；私有读取、管理写入和 CSRF 仍执行各自的认证规则。项目可见性是项目级策略，切换前同时核对预览与生产范围，不以一层登录遮罩替代后端权限。
+
+正式发布包包含上述签名只读投影能力；是否允许公开读取仍由项目的持久化访问策略决定。
+
+### 原生项目访问管理
+
+已认证的项目所有者可通过 `GET /__platform/manage` 进入原生控制台的准确项目设置。正式站与预览共用持久化的访问模式；公开切换需要明确确认，保存时验证预期的旧模式并再次读取结果。普通阅读账号不能管理访问权限。该能力不新增或改名 CLI 命令。

{chatcoolify-0.2.2 → chatcoolify-0.2.4}/src/ChatCoolify.egg-info/SOURCES.txt

@@ -25,4 +25,8 @@ tests/test_platform.py
 tests/test_platform_domains.py
 tests/test_platform_management.py
 tests/test_platform_public.py
-tests/test_release_contract.py
+tests/test_platform_public_projection.py
+tests/test_public_patch_version.py
+tests/test_public_release_docs.py
+tests/test_release_contract.py
+tests/test_site_management.py

{chatcoolify-0.2.2 → chatcoolify-0.2.4}/src/chatcoolify/__init__.py

@@ -10,7 +10,7 @@ from .client import (
     PublicApplicationSpec,
 )
 
-__version__ = "0.2.2"
+__version__ = "0.2.4"
 
 from .platform import PlatformService
 from .platform_client import PlatformClient

{chatcoolify-0.2.2 → chatcoolify-0.2.4}/src/chatcoolify/platform.py

@@ -374,12 +374,19 @@ class PlatformService:
                 'WHERE p.owner_id=? OR g.user_id=? ORDER BY p.created_at LIMIT 1000', (actor.user_id,actor.user_id))]
         return [self.project(actor,p) for p in ids]
 
-    def set_visibility(self,actor,project_id,visibility):
+    def set_visibility(self,actor,project_id,visibility,*,expected_visibility=None):
         """Publishing access is independent of management-account permissions."""
         self.check(actor,project_id,'manage_visibility')
         if visibility not in {'public','private'}:
             raise PlatformError(422,'Invalid project visibility')
+        if expected_visibility is not None and expected_visibility not in {'public','private'}:
+            raise PlatformError(422,'Invalid expected project visibility')
         with self.lock:
+            if expected_visibility is not None:
+                with self.connection() as db:
+                    current=db.execute('SELECT visibility FROM projects WHERE id=?',(project_id,)).fetchone()
+                if not current or current['visibility']!=expected_visibility:
+                    raise PlatformError(409,'Project visibility changed; reload current settings')
             # Tightening access takes effect before any backend request. Opening
             # access happens only after all registered comment policies agree.
             if visibility=='private':
@@ -846,7 +853,7 @@ class PlatformService:
             raise PlatformError(403,'Same-origin guest CSRF validation required')
         with self.connection() as db:
             sites=[row[0] for row in db.execute('SELECT site_id FROM services WHERE project_id=?',(app['project_id'],))]
-        access={'authenticated':False,'read':True,'csrf_token':csrf,
+        access={'authenticated':False,'read':True,'csrf_token':csrf,'can_manage_project':False,
             'subject':'guest:'+digest(cookie.encode())[:32],
             'site_permissions':{site:{'read':True,'comment':True,'manage':False,'owner':False,
                 'management_until':0} for site in sites}}
@@ -897,6 +904,8 @@ class PlatformService:
                     (digest(token.encode()),app['project_id'],site)).fetchone()
                 grants[site]=grant['expires'] if grant and grant['expires']>time.time() else 0
         return {'authenticated':True,'subject':session.principal.user_id,'read':True,'csrf_token':session.csrf_token,
+            'can_manage_project':project['role']=='owner',
+            'management_url':self.control_url+'/#project-'+app['project_id'] if project['role']=='owner' else None,
             'site_permissions':{site:{'read':True,'comment':True,'manage':project['role']=='owner',
                 'owner':project['role']=='owner','management_until':until} for site,until in grants.items()}}
 
@@ -1018,11 +1027,15 @@ class PlatformService:
             parsed=urlsplit(downstream)
             public_api=re.fullmatch(r'/api/sites/([A-Za-z0-9_-]{1,64})/(config|comments)',parsed.path)
             same_site=public_api and public_api[1]==binding['site_id']
+            # An explicit backend opt-in namespace, never the private API.
+            # Preserve the signed anonymous identity and site read scope; the
+            # backend must independently project public fields and reject writes.
+            projection=re.fullmatch(r'/api/public/(?:catalog|state|projects/[A-Za-z0-9_-]{1,80})',parsed.path)
             permitted=(method in {'GET','HEAD'} and
-                (parsed.path in {'/widget.js','/widget.css','/board'} or same_site))
+                (parsed.path in {'/widget.js','/widget.css','/board'} or same_site or projection))
             submission=method=='POST' and same_site and public_api[2]=='comments'
             if not permitted and not submission:
-                raise PlatformError(403,'Guest access is limited to reading and adding comments')
+                raise PlatformError(403,'Guest access is limited to registered public reads and adding comments')
             # POST was already checked by authorize(); GET can use the freshly
             # issued internal cookie when a visitor opens a service directly.
             cookie=self._guest_cookie(app,access.get('_guest_cookie') or payload.get('guest_token',''))

{chatcoolify-0.2.2 → chatcoolify-0.2.4}/src/chatcoolify/platform_runtime.py

@@ -14,6 +14,7 @@ import json
 import mimetypes
 import os
 import secrets
+import re
 import time
 from pathlib import Path
 from urllib.error import HTTPError, URLError
@@ -191,6 +192,19 @@ class FrontendHandler(BaseHTTPRequestHandler):
                     return self.respond(503,{'error':'Guest session unavailable'})
                 self._guest_response_cookies.append(
                     f'{GUEST_COOKIE}={guest}; Path=/; Secure; HttpOnly; SameSite=Lax; Max-Age={age}')
+            if path == '/__platform/manage' and self.command in {'GET', 'HEAD'}:
+                if access.get('authenticated') is not True or access.get('can_manage_project') is not True:
+                    return self.respond(403, {'error': 'Project owner permission required'})
+                target=access.get('management_url')
+                if not isinstance(target,str):
+                    return self.respond(503, {'error': 'Management destination unavailable'})
+                destination=urlsplit(target)
+                control=urlsplit(os.environ['PLATFORM_CONTROL_URL'])
+                if (destination.scheme!=control.scheme or destination.netloc!=control.netloc
+                        or destination.username or destination.password or destination.path!='/'
+                        or destination.query or not re.fullmatch(r'project-[A-Za-z0-9_-]{1,80}',destination.fragment)):
+                    return self.respond(503, {'error': 'Management destination unavailable'})
+                return self.respond(303, b'', headers={'Location':target})
             if path == '/__platform/session':
                 return self.respond(200, access)
             if path == '/__platform/artifact' and self.command in {'GET', 'HEAD'}:

{chatcoolify-0.2.2 → chatcoolify-0.2.4}/src/chatcoolify/platform_web.py

@@ -177,12 +177,12 @@ class PlatformHandler(BaseHTTPRequestHandler):
             if project['role']=='owner':
                 public_selected=' selected' if project['visibility']=='public' else ''
                 private_selected=' selected' if project['visibility']=='private' else ''
-                policy=(f'<form class="visibility-form" data-kind="visibility" data-project="{project_id}">'
-                        '<label>访客访问方式<select name="visibility">'
+                policy=(f'<form class="visibility-form" data-kind="visibility" data-project="{project_id}" data-current-visibility="{project["visibility"]}">'
+                        '<label>整站访问方式<select name="visibility">'
                         f'<option value="public"{public_selected}>公开：任何人可访问</option>'
-                        f'<option value="private"{private_selected}>私有：仅授权用户</option></select></label>'
-                        '<button>保存访问设置</button><p class="feedback" role="status"></p></form>')
-            cards.append(f'<article><div class="card-title"><h2>{html.escape(project["name"])}</h2>'
+                        f'<option value="private"{private_selected}>仅登录：仅已授权用户</option></select></label>'
+                        '<button>保存访问设置</button><span class="policy-note">正式网站与预览环境共用此设置；仅登录时限已授权账号访问。</span><p class="feedback" role="status"></p></form>')
+            cards.append(f'<article id="project-{project_id}"><div class="card-title"><h2>{html.escape(project["name"])}</h2>'
                          f'<span class="badge">{visibility} · {html.escape(role)}</span></div>'
                          f'<p class="slug">{html.escape(project["slug"])}</p>{policy}'+''.join(links)+
                          f'<details><summary>上传与发布命令</summary><pre>'
@@ -193,7 +193,7 @@ class PlatformHandler(BaseHTTPRequestHandler):
         empty='<p class="empty">还没有项目。在下方创建网站，再上传本地构建目录。</p>'
         style='''*{box-sizing:border-box}body{margin:0;background:#f5f6f3;color:#202b24;font:16px/1.6 system-ui,sans-serif}
         header,main{max-width:1080px;margin:auto;padding:24px}header{display:flex;justify-content:space-between;align-items:center;gap:16px;border-bottom:1px solid #dce2d8}header a{color:inherit;text-decoration:none;font-weight:700}.account{display:flex;align-items:center;gap:14px;min-width:0;font-size:14px}.account span{overflow-wrap:anywhere}
-        button{background:white;border:1px solid #b9c7b5;padding:8px 14px;border-radius:7px;color:inherit;cursor:pointer;white-space:nowrap}button:disabled{opacity:.6;cursor:wait}h1{font-size:32px;margin:20px 0 6px}h2{margin:0;font-size:21px;overflow-wrap:anywhere}.intro,.muted,.slug{color:#64705e}.intro{margin:0 0 28px}.cards{display:grid;gap:18px}article,.create{background:white;border:1px solid #dce2d8;border-radius:12px;padding:24px;min-width:0}.card-title{display:flex;align-items:start;justify-content:space-between;gap:16px}.badge{background:#eef2e9;border-radius:6px;padding:3px 9px;white-space:nowrap;font-size:13px}.slug{margin:6px 0 18px;font-size:14px}.address{display:grid;grid-template-columns:100px minmax(0,1fr);gap:12px;margin:24px 0}.address a{color:#355d36;overflow-wrap:anywhere}small{display:block;color:#7a631e;overflow-wrap:anywhere}form{display:flex;align-items:end;gap:10px;flex-wrap:wrap}label{display:grid;gap:5px;color:#53614e;font-size:13px;min-width:0}input,select{font:15px system-ui;padding:9px 10px;border:1px solid #becab7;border-radius:6px;background:white;color:#202b24;min-width:0;max-width:100%}.domain-form{margin-top:12px}.domain-form input{width:190px}.suffix{font-size:13px;color:#64705e;align-self:center;overflow-wrap:anywhere}.feedback{flex-basis:100%;margin:0;color:#715a1d;font-size:13px;overflow-wrap:anywhere}.feedback:empty{display:none}.visibility-form{padding:14px;background:#f5f7f1;border-radius:8px}.create{margin-top:24px}.create h2{margin-bottom:14px}.create p{color:#64705e;font-size:14px}details{margin-top:20px;border-top:1px solid #e6ebe2;padding-top:14px;font-size:13px}summary{cursor:pointer;color:#64705e}code,pre{overflow-wrap:anywhere;white-space:pre-wrap;font-size:12px}aside{margin-top:24px;padding:18px;background:#edf1e8;border-radius:10px;font-size:14px}.empty{padding:24px;background:white;border-radius:12px}
+        button{background:white;border:1px solid #b9c7b5;padding:8px 14px;border-radius:7px;color:inherit;cursor:pointer;white-space:nowrap}button:disabled{opacity:.6;cursor:wait}h1{font-size:32px;margin:20px 0 6px}h2{margin:0;font-size:21px;overflow-wrap:anywhere}.intro,.muted,.slug{color:#64705e}.intro{margin:0 0 28px}.cards{display:grid;gap:18px}article,.create{background:white;border:1px solid #dce2d8;border-radius:12px;padding:24px;min-width:0}.card-title{display:flex;align-items:start;justify-content:space-between;gap:16px}.badge{background:#eef2e9;border-radius:6px;padding:3px 9px;white-space:nowrap;font-size:13px}.slug{margin:6px 0 18px;font-size:14px}.address{display:grid;grid-template-columns:100px minmax(0,1fr);gap:12px;margin:24px 0}.address a{color:#355d36;overflow-wrap:anywhere}small{display:block;color:#7a631e;overflow-wrap:anywhere}form{display:flex;align-items:end;gap:10px;flex-wrap:wrap}label{display:grid;gap:5px;color:#53614e;font-size:13px;min-width:0}input,select{font:15px system-ui;padding:9px 10px;border:1px solid #becab7;border-radius:6px;background:white;color:#202b24;min-width:0;max-width:100%}.domain-form{margin-top:12px}.domain-form input{width:190px}.suffix{font-size:13px;color:#64705e;align-self:center;overflow-wrap:anywhere}.feedback{flex-basis:100%;margin:0;color:#715a1d;font-size:13px;overflow-wrap:anywhere}.feedback:empty{display:none}.policy-note{flex-basis:100%;font-size:13px;color:#64705e}.visibility-form{padding:14px;background:#f5f7f1;border-radius:8px}.create{margin-top:24px}.create h2{margin-bottom:14px}.create p{color:#64705e;font-size:14px}details{margin-top:20px;border-top:1px solid #e6ebe2;padding-top:14px;font-size:13px}summary{cursor:pointer;color:#64705e}code,pre{overflow-wrap:anywhere;white-space:pre-wrap;font-size:12px}aside{margin-top:24px;padding:18px;background:#edf1e8;border-radius:10px;font-size:14px}.empty{padding:24px;background:white;border-radius:12px}
         @media(max-width:540px){header,main{padding:18px}.card-title{display:block}.badge{display:inline-block;margin-top:8px}article,.create{padding:18px}.address{grid-template-columns:1fr;gap:6px}header{align-items:start}.account{flex-wrap:wrap;justify-content:end}.domain-form label,.domain-form input,.visibility-form label,.visibility-form select,.create label,.create input,.create select{width:100%}.suffix{flex-basis:100%}form button{width:100%}}'''
         script=r'''const csrf=__CSRF__;
         async function request(path,method,payload){const r=await fetch(path,{method,headers:{'Content-Type':'application/json','X-CSRF-Token':csrf},body:payload===undefined?undefined:JSON.stringify(payload)});let data={};try{data=await r.json()}catch(e){}if(!r.ok)throw new Error(data.error||'请求失败，请重试');return data}
@@ -201,7 +201,7 @@ class PlatformHandler(BaseHTTPRequestHandler):
         document.querySelectorAll('form[data-kind]').forEach(form=>{form.onsubmit=async event=>{event.preventDefault();const button=form.querySelector('button'),message=form.querySelector('.feedback'),data=Object.fromEntries(new FormData(form));button.disabled=true;message.textContent='正在保存…';try{
           const base='/api/platform/v1/projects',id=form.dataset.project,kind=form.dataset.kind;
           if(kind==='create'){await request(base,'POST',{slug:data.slug,name:data.name||data.slug,visibility:data.visibility,request_key:'create-'+data.slug});location.reload();return}
-          if(kind==='visibility'){await request(base+'/'+id,'PATCH',{visibility:data.visibility});location.reload();return}
+          if(kind==='visibility'){if(data.visibility==='public'&&!confirm('确认公开此项目的正式网站和预览环境？公开后的读写仍按应用权限执行。')){message.textContent='已取消，访问设置未修改。';return}await request(base+'/'+id,'PATCH',{visibility:data.visibility,expected_visibility:form.dataset.currentVisibility});const saved=await request(base+'/'+id,'GET');if(saved.visibility!==data.visibility)throw new Error('访问设置生效状态未确认，请刷新核对');location.reload();return}
           const route=base+'/'+id+'/domains/'+form.dataset.environment;
           await request(route,'PUT',{hostname:data.hostname});
           if(form.dataset.live!=='1'){message.textContent='域名已预留。首次上传并发布后即可访问。';return}
@@ -211,11 +211,11 @@ class PlatformHandler(BaseHTTPRequestHandler):
           message.textContent='正在更新域名；验证成功前保持原入口。';
           for(let n=0;n<60;n++){await new Promise(resolve=>setTimeout(resolve,2500));const result=await request(base+'/'+id+'/deployments/'+job.id,'GET');if(result.state==='finished'&&result.runtime_active&&result.runtime_verified&&!result.domain.pending){location.reload();return}if(['failed','cancelled','configuration_failed','provenance_mismatch'].includes(result.state)){delete form.dataset.requestKey;throw new Error('域名更新未完成，原入口保留。可重试或查看部署状态。')}}
           message.textContent='部署仍在进行，可稍后刷新查看。';
-        }catch(error){message.textContent=error.message}finally{button.disabled=false}}});'''.replace('__CSRF__',json.dumps(session.csrf_token).replace('<','\\u003c'))
+        }catch(error){message.textContent=form.dataset.kind==='visibility'?'未确认设置生效，请刷新核对当前访问方式后再操作；请勿直接重复保存。':error.message}finally{button.disabled=false}}});'''.replace('__CSRF__',json.dumps(session.csrf_token).replace('<','\\u003c'))
         page=f'''<!doctype html><html lang="zh"><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>我的网站 · ChatCoolify</title><style>{style}</style>
         <header><a href="/">ChatCoolify</a><div class="account"><span>{name}</span><button id="logout">退出</button></div></header>
         <main><h1>我的网站</h1><p class="intro">{len(projects)} 个项目 · 这里管理你的网站；访客访问公开网站无需登录。</p><section class="cards">{''.join(cards) or empty}</section>
-        <section class="create"><h2>创建网站</h2><form data-kind="create"><label>网站名称<input name="name" placeholder="我的网站" maxlength="160"></label><label>默认域名前缀<input name="slug" placeholder="my-site" pattern="[a-z][a-z0-9-]{{1,47}}[a-z0-9]" required maxlength="49"></label><label>访客访问<select name="visibility"><option value="public" selected>公开：任何人可访问</option><option value="private">私有：仅授权用户</option></select></label><button>创建网站</button><p class="feedback" role="status"></p></form><p>创建后上传本地构建目录，先预览，再发布。公开网站可直接分享，访客不需要平台账号。</p></section>
+        <section class="create"><h2>创建网站</h2><form data-kind="create"><label>网站名称<input name="name" placeholder="我的网站" maxlength="160"></label><label>默认域名前缀<input name="slug" placeholder="my-site" pattern="[a-z][a-z0-9-]{{1,47}}[a-z0-9]" required maxlength="49"></label><label>访客访问<select name="visibility"><option value="public" selected>公开：任何人可访问</option><option value="private">仅登录：仅已授权用户</option></select></label><button>创建网站</button><p class="feedback" role="status"></p></form><p>创建后上传本地构建目录，先预览，再发布。公开网站可直接分享，访客不需要平台账号。</p></section>
         <aside>账号登录保护网站管理、部署与设置。公开阅读与普通留言独立于管理账号；选择私有时才要求授权访问。构建和运行使用同一套 Coolify 基础设施。</aside></main><script>{script}</script></html>'''.encode()
         self.respond(200,page,'text/html; charset=utf-8')
 
@@ -252,7 +252,8 @@ class PlatformHandler(BaseHTTPRequestHandler):
         project_id=route[1]
         if len(route)==2 and self.command=='GET':return self.respond(200,self.service.project(actor,project_id))
         if len(route)==2 and self.command=='PATCH':
-            return self.respond(200,self.service.set_visibility(actor,project_id,self.json().get('visibility')))
+            value=self.json()
+            return self.respond(200,self.service.set_visibility(actor,project_id,value.get('visibility'),expected_visibility=value.get('expected_visibility')))
         self.service.check(actor,project_id)
         if len(route)==3 and route[2]=='domains' and self.command=='GET':
             result=self.service.domains(actor,project_id)

chatcoolify-0.2.4/tests/test_platform_public_projection.py

@@ -0,0 +1,82 @@
+"""Opt-in /api/public projections relay as signed read-only guests only."""
+import base64
+import json
+from email.message import Message
+import pytest
+from chatcoolify import PlatformError
+from chatcomment.access import verify_context
+from test_platform_public import public_site,guest
+
+
+@pytest.mark.parametrize('path',[
+    '/api/public/catalog?offset=0&limit=100',
+    '/api/public/state',
+    '/api/public/projects/0123456789abcdefabcd',
+])
+@pytest.mark.parametrize('method',['GET','HEAD'])
+def test_guest_projection_is_signed_scoped_read_only(public_site,monkeypatch,path,method):
+    import chatcoolify.platform as platform
+    service,owner,app,private,store,backend=public_site
+    access,context=guest(service,app)
+    captured=[]
+    class Response:
+        code=200
+        headers={'Content-Type':'application/json'}
+        def __enter__(self):return self
+        def __exit__(self,*args):pass
+        def read(self,limit):return b'{"public_read_only":true}'
+    class Opener:
+        def open(self,request,timeout):
+            captured.append(request)
+            return Response()
+    monkeypatch.setattr(platform,'build_opener',lambda *args:Opener())
+    response=service.service_request(app,{**context,'method':method,
+        'path':'/__platform/services/comments'+path,'body_b64':'',
+        'subject':owner.user_id,'authenticated':True,
+        'site_permissions':{'public-site':{'owner':True,'manage':True}}})
+    assert response['status']==200 and len(captured)==1
+    with service.connection() as db:
+        key=db.execute('SELECT secret FROM services WHERE project_id=?',(app['project_id'],)).fetchone()[0]
+    headers=Message()
+    for name,value in captured[0].header_items():headers[name]=value
+    signed=verify_context(headers,key=key,method=method,path=path,body=b'')
+    assert not signed.authenticated and signed.subject.startswith('guest:')
+    scope=signed.scope('public-site')
+    assert scope.read and not scope.owner and not scope.manage and scope.management_until==0
+    assert not signed.scope('other-site').read
+    with service.connection() as db:
+        assert db.execute('SELECT COUNT(*) FROM readers').fetchone()[0]==0
+        assert db.execute('SELECT COUNT(*) FROM management').fetchone()[0]==0
+
+
+@pytest.mark.parametrize('path,method',[
+    ('/api/catalog','GET'),('/api/state','GET'),
+    ('/api/projects/project-id','GET'),('/api/public/directions','GET'),
+    ('/api/public/projects/../../state','GET'),
+    ('/api/public/projects/project-id/notes','GET'),
+    ('/api/public/catalog/','GET'),('/api/public/state','POST'),
+    ('/api/public/catalog','POST'),('/api/public/projects/project-id','PATCH'),
+    ('/api/public/state','DELETE'),('/api/public/projects/project-id','PUT'),
+])
+def test_guest_projection_cannot_expand_private_paths_or_write(public_site,monkeypatch,path,method):
+    import chatcoolify.platform as platform
+    service,owner,app,private,store,backend=public_site
+    access,context=guest(service,app)
+    def forbidden(*args,**kwargs):raise AssertionError('forbidden request reached backend')
+    monkeypatch.setattr(platform,'build_opener',forbidden)
+    with pytest.raises(PlatformError) as error:
+        service.service_request(app,{**context,'method':method,
+            'path':'/__platform/services/comments'+path,'body_b64':''})
+    assert error.value.status==403
+
+
+def test_public_projection_never_opens_private_project(public_site,monkeypatch):
+    import chatcoolify.platform as platform
+    service,owner,app,private,store,backend=public_site
+    access,context=guest(service,app)
+    def forbidden(*args,**kwargs):raise AssertionError('private project reached backend')
+    monkeypatch.setattr(platform,'build_opener',forbidden)
+    with pytest.raises(PlatformError) as error:
+        service.service_request(private,{**context,'method':'GET',
+            'path':'/__platform/services/comments/api/public/catalog','body_b64':''})
+    assert error.value.status==401

chatcoolify-0.2.4/tests/test_public_patch_version.py

@@ -0,0 +1,13 @@
+"""The authorized forward patch must not keep a private build version."""
+from pathlib import Path
+from chatcoolify import __version__
+
+
+def test_authorized_public_patch_version():
+    assert __version__ == "0.2.4"
+
+
+def test_public_patch_is_declared_in_metadata_and_changelog():
+    root = Path(__file__).resolve().parents[1]
+    assert 'version = "0.2.4"' in (root / 'pyproject.toml').read_text()
+    assert '## 0.2.4' in (root / 'CHANGELOG.md').read_text()

chatcoolify-0.2.4/tests/test_public_release_docs.py

@@ -0,0 +1,13 @@
+"""Public release documentation must not retain an active private-build claim."""
+from pathlib import Path
+
+
+def test_active_documentation_does_not_claim_the_distribution_is_a_private_build():
+    root = Path(__file__).resolve().parents[1]
+    files = [root / 'README.md', root / 'README.en.md', root / 'DEVELOP.md', *sorted((root / 'docs').glob('*.md'))]
+    stale = ('0.2.2+access.1', '0.2.2+publicread.1',
+             'This private build does not add or rename CLI commands.',
+             'not a formal PyPI release', '不是 PyPI 正式发版')
+    findings = [(path.relative_to(root).as_posix(), marker)
+                for path in files for marker in stale if marker in path.read_text()]
+    assert findings == []

chatcoolify-0.2.4/tests/test_site_management.py

@@ -0,0 +1,144 @@
+"""Owner-only native management handoff reuses the existing platform console."""
+from http.client import HTTPConnection
+from http.server import ThreadingHTTPServer
+import json
+import secrets
+import threading
+
+import pytest
+from chatcoolify import PlatformError
+from chatcoolify.platform_runtime import FrontendHandler, COOKIE
+from chatcoolify.platform_web import PlatformHandler, COOKIE as CONTROL_COOKIE
+from test_platform_public import public_site, owner_reader, guest
+from test_platform_management import local_server
+
+
+def test_owner_management_metadata_is_project_scoped_even_without_bindings(public_site):
+    service, owner, app, private, store, backend = public_site
+    for target in [app, private]:
+        token = owner_reader(service, target)
+        value = service.authorize(target, {'method': 'GET', 'reader_token': token})
+        assert value['can_manage_project'] is True
+        assert value['management_url'] == service.control_url + '/#project-' + target['project_id']
+
+
+def test_guest_and_project_viewer_have_no_management_destination(public_site):
+    service, owner, app, private, store, backend = public_site
+    value, _ = guest(service, app)
+    assert not value.get('can_manage_project') and not value.get('management_url')
+    member = service.users.create_user(owner, 'reader@example.test', 'Example-reader-password!')
+    service.grant(owner, app['project_id'], member.user_id, 'viewer')
+    token = owner_reader(service, app, member.username, 'Example-reader-password!')
+    value = service.authorize(app, {'method': 'GET', 'reader_token': token,
+        'can_manage_project': True, 'management_url': 'https://evil.example/'})
+    assert value['can_manage_project'] is False and not value.get('management_url')
+
+
+@pytest.mark.parametrize('identity,expected', [('owner',303),('viewer',403),('guest',403),('tampered-target',503)])
+def test_native_manage_route_uses_verified_owner_only(public_site, monkeypatch, identity, expected):
+    service, owner, app, private, store, backend = public_site
+    token = ''
+    if identity in ['owner','tampered-target']:
+        token = owner_reader(service, app)
+    elif identity == 'viewer':
+        member = service.users.create_user(owner, 'reader@example.test', 'Example-reader-password!')
+        service.grant(owner, app['project_id'], member.user_id, 'viewer')
+        token = owner_reader(service, app, member.username, 'Example-reader-password!')
+    class Runtime(FrontendHandler):
+        def broker(self, endpoint, payload):
+            if endpoint == 'canonical': return 200, {'url': app['url']}
+            assert endpoint == 'authorize'
+            value = service.authorize(app, payload)
+            if identity == 'tampered-target': value['management_url'] = 'https://evil.example/#project-x'
+            return 200, value
+    monkeypatch.setenv('PLATFORM_PUBLIC_URLS', app['url'])
+    monkeypatch.setenv('PLATFORM_CONTROL_URL', service.control_url)
+    with local_server(Runtime) as url:
+        from urllib.parse import urlsplit
+        parsed = urlsplit(url)
+        conn = HTTPConnection(parsed.hostname, parsed.port)
+        conn.request('GET', '/__platform/manage', headers={'Host': urlsplit(app['url']).netloc,
+            'Cookie': COOKIE+'='+token, 'X-User':'owner','X-Role':'owner'})
+        response = conn.getresponse(); body = response.read()
+        assert response.status == expected
+        if expected == 303: assert response.getheader('Location') == service.control_url+'/#project-'+app['project_id']
+        else: assert response.getheader('Location') is None
+        conn.close()
+
+
+def test_native_console_has_exact_project_anchor_and_safe_public_confirmation(public_site):
+    service, owner, app, private, store, backend = public_site
+    login = service.login('owner@example.test', 'Example-owner-password!')
+    with local_server(PlatformHandler, platform=service) as url:
+        from urllib.parse import urlsplit
+        parsed = urlsplit(url); conn = HTTPConnection(parsed.hostname, parsed.port)
+        conn.request('GET','/',headers={'Cookie':CONTROL_COOKIE+'='+login['token']})
+        response = conn.getresponse(); body = response.read().decode()
+        assert response.status == 200
+        assert 'id="project-'+app['project_id']+'"' in body
+        assert 'confirm(' in body and '公开' in body
+        assert '保存访问设置' in body and '<option value="private" selected>' in body
+        conn.close()
+
+
+def control_login(service, username, password):
+    value=service.login(username,password)
+    value['csrf_token']=service.control_session(value['token']).csrf_token
+    return value
+
+
+def visibility_http(service, url, project, token, csrf, data, *, spoof=False):
+    from urllib.parse import urlsplit
+    parsed=urlsplit(url);conn=HTTPConnection(parsed.hostname,parsed.port)
+    headers={'Content-Type':'application/json','Origin':service.control_url}
+    if token:headers['Cookie']=CONTROL_COOKIE+'='+token
+    if csrf:headers['X-CSRF-Token']=csrf
+    if spoof:headers.update({'X-User':'owner','X-Role':'owner'})
+    conn.request('PATCH','/api/platform/v1/projects/'+project,body=json.dumps(data),headers=headers)
+    response=conn.getresponse();status=response.status;body=response.read();conn.close()
+    return status,json.loads(body)
+
+
+def test_visibility_http_rejects_stale_expected_mode_without_reopening(public_site):
+    service,owner,app,private,store,backend=public_site
+    service.set_visibility(owner,app['project_id'],'private')
+    login=control_login(service,'owner@example.test','Example-owner-password!')
+    with local_server(PlatformHandler,platform=service) as url:
+        status,body=visibility_http(service,url,app['project_id'],login['token'],login['csrf_token'],
+            {'visibility':'public','expected_visibility':'public'})
+        assert status==409
+        assert service.project(owner,app['project_id'])['visibility']=='private'
+
+
+def test_visibility_http_checks_fresh_expected_mode_for_both_transitions(public_site):
+    service,owner,app,private,store,backend=public_site
+    login=control_login(service,'owner@example.test','Example-owner-password!')
+    with local_server(PlatformHandler,platform=service) as url:
+        for old,new in [('public','private'),('private','public'),('public','private')]:
+            status,body=visibility_http(service,url,app['project_id'],login['token'],login['csrf_token'],
+                {'visibility':new,'expected_visibility':old})
+            assert status==200 and body['visibility']==new
+            assert service.project(owner,app['project_id'])['visibility']==new
+        status,_=visibility_http(service,url,app['project_id'],login['token'],login['csrf_token'],
+            {'visibility':'public','expected_visibility':'not-a-mode'})
+        assert status==422
+        assert service.project(owner,app['project_id'])['visibility']=='private'
+
+
+@pytest.mark.parametrize('identity,csrf_ok,spoof,expected',[
+    ('guest',False,False,401),('guest',False,True,401),('viewer',True,True,403),('owner',False,False,403)])
+def test_visibility_http_keeps_owner_and_csrf_gate(public_site,identity,csrf_ok,spoof,expected):
+    service,owner,app,private,store,backend=public_site
+    service.set_visibility(owner,app['project_id'],'private')
+    login={}
+    if identity=='owner':login=control_login(service,'owner@example.test','Example-owner-password!')
+    if identity=='viewer':
+        member=service.users.create_user(owner,'reader@example.test','Example-reader-password!')
+        service.grant(owner,app['project_id'],member.user_id,'viewer')
+        login=control_login(service,member.username,'Example-reader-password!')
+    with local_server(PlatformHandler,platform=service) as url:
+        status,_=visibility_http(service,url,app['project_id'],login.get('token'),login.get('csrf_token') if csrf_ok else None,
+            {'visibility':'public','expected_visibility':'private'},spoof=spoof)
+        assert status==expected
+        assert service.project(owner,app['project_id'])['visibility']=='private'
+