99 lines
3.1 KiB
JavaScript
99 lines
3.1 KiB
JavaScript
#!/usr/bin/env node
|
|
|
|
const fs = require('fs');
|
|
const path = require('path');
|
|
|
|
const openHubRoot =
|
|
process.env.OPENHUB_RESEARCH_ROOT || '/tmp/mnote-openhub-research/OpenHub';
|
|
const backendRoot = path.join(openHubRoot, 'smart-query-backend');
|
|
const disableEnv = 'MNOTE_OPENHUB_DISABLE_GIT_SNAPSHOT_RESTORE';
|
|
const legacyDisableEnv = 'OPENHUB_DISABLE_GIT_SNAPSHOT_RESTORE';
|
|
|
|
function read(relativePath) {
|
|
return fs.readFileSync(path.join(backendRoot, relativePath), 'utf8');
|
|
}
|
|
|
|
function assertCheck(name, passed) {
|
|
if (!passed) failures.push(name);
|
|
}
|
|
|
|
function includesAll(source, needles) {
|
|
return needles.every((needle) => source.includes(needle));
|
|
}
|
|
|
|
const failures = [];
|
|
|
|
const gitSnapshot = read('app/services/git_snapshot.py');
|
|
const stream = read('app/services/stream.py');
|
|
const taskExecutor = read('app/services/task_executor.py');
|
|
const session = read('app/api/session.py');
|
|
|
|
assertCheck(
|
|
'git_snapshot exposes MNote disable env and legacy equivalent',
|
|
includesAll(gitSnapshot, [disableEnv, legacyDisableEnv, 'def is_snapshot_restore_disabled'])
|
|
);
|
|
|
|
assertCheck(
|
|
'git_snapshot low-level git write command guard covers destructive/write commands',
|
|
includesAll(gitSnapshot, [
|
|
'_GIT_WRITE_COMMANDS',
|
|
'"init"',
|
|
'"config"',
|
|
'"add"',
|
|
'"commit"',
|
|
'"checkout"',
|
|
'"restore"',
|
|
'"reset"',
|
|
'"revert"',
|
|
'is_snapshot_restore_disabled() and _is_git_write(args)',
|
|
])
|
|
);
|
|
|
|
assertCheck(
|
|
'git_snapshot high-level write APIs short-circuit when disabled',
|
|
includesAll(gitSnapshot, [
|
|
'def init_git_repo',
|
|
'def create_snapshot',
|
|
'def create_restore_snapshot',
|
|
'def restore_all',
|
|
'def restore_single_file',
|
|
'disabled by {GIT_SNAPSHOT_RESTORE_DISABLE_ENV}',
|
|
])
|
|
);
|
|
|
|
assertCheck(
|
|
'stream automatic snapshot path is guarded before init/create_snapshot',
|
|
stream.includes('not git_snap.is_snapshot_restore_disabled()') &&
|
|
stream.includes('git_snap.init_git_repo') &&
|
|
stream.includes('git_snap.create_snapshot') &&
|
|
stream.includes('Git snapshot skipped: disabled by MNOTE_OPENHUB_DISABLE_GIT_SNAPSHOT_RESTORE')
|
|
);
|
|
|
|
assertCheck(
|
|
'task_executor automatic snapshot path is guarded before init/create_snapshot',
|
|
taskExecutor.includes('not git_snapshot.is_snapshot_restore_disabled()') &&
|
|
taskExecutor.includes('git_snapshot.init_git_repo') &&
|
|
taskExecutor.includes('git_snapshot.create_snapshot') &&
|
|
taskExecutor.includes('Git snapshot skipped: disabled by MNOTE_OPENHUB_DISABLE_GIT_SNAPSHOT_RESTORE')
|
|
);
|
|
|
|
const restoreRouteGuardCount = (
|
|
session.match(/git_snapshot\.is_snapshot_restore_disabled\(\)/g) || []
|
|
).length;
|
|
assertCheck(
|
|
'session restore routes reject when disabled',
|
|
restoreRouteGuardCount >= 2 &&
|
|
session.includes('Git snapshot/restore 写链已由 MNote 禁用') &&
|
|
session.includes('git_snapshot.restore_all') &&
|
|
session.includes('git_snapshot.restore_single_file') &&
|
|
session.includes('git_snapshot.create_restore_snapshot')
|
|
);
|
|
|
|
if (failures.length) {
|
|
console.error('OpenHub git snapshot/restore guard static smoke failed:');
|
|
for (const failure of failures) console.error(`- ${failure}`);
|
|
process.exit(1);
|
|
}
|
|
|
|
console.log('OpenHub git snapshot/restore guard static smoke passed.');
|