chore: 移除 CI/Actions 相关设施（workflow、ci 脚本、tests 目录），审计脚本保留在 repro/ 供本地开发使用
This commit is contained in:
root
@@ -1,58 +0,0 @@
|
||||
# CI：每次推送自动运行完整测试套件（本地与云端同一入口：node scripts/ci.mjs）
|
||||
# 网络适配（服务器在国内）：
|
||||
# 1) 不使用任何远程 action（actions/checkout 会被解析到 github.com 导致挂死），改用内置环境变量手动 clone
|
||||
# 2) job 容器镜像走腾讯内网镜像源（runner 标签已指向 mirror.ccs.tencentyun.com）
|
||||
# 3) npm/pnpm 走国内 registry
|
||||
name: CI
|
||||
on:
|
||||
push:
|
||||
pull_request:
|
||||
|
||||
jobs:
|
||||
test:
|
||||
name: 测试套件（协议/用户管理/单测/双设备/实时链路/构建）
|
||||
runs-on: ubuntu-latest
|
||||
container:
|
||||
image: mirror.ccs.tencentyun.com/library/node:22-bookworm
|
||||
steps:
|
||||
- name: 检出代码（内网闭环，不访问 github）
|
||||
run: |
|
||||
git config --global --add safe.directory "$GITHUB_WORKSPACE"
|
||||
git clone --depth 1 "https://x-access-token:${GITHUB_TOKEN}@${GITHUB_SERVER_URL#https://}/root/daywork.git" .
|
||||
git checkout "$GITHUB_SHA"
|
||||
|
||||
- name: 安装 pnpm
|
||||
run: npm install -g pnpm@11 --registry=https://registry.npmmirror.com
|
||||
|
||||
- name: 安装依赖
|
||||
working-directory: intern-log
|
||||
run: pnpm install --frozen-lockfile --registry=https://registry.npmmirror.com
|
||||
|
||||
- name: 运行测试与构建
|
||||
env:
|
||||
NODE_ENV: production
|
||||
run: node scripts/ci.mjs
|
||||
|
||||
audit:
|
||||
name: 依赖漏洞扫描（软性检查）
|
||||
runs-on: ubuntu-latest
|
||||
container:
|
||||
image: mirror.ccs.tencentyun.com/library/node:22-bookworm
|
||||
continue-on-error: true
|
||||
steps:
|
||||
- name: 检出代码（内网闭环，不访问 github）
|
||||
run: |
|
||||
git config --global --add safe.directory "$GITHUB_WORKSPACE"
|
||||
git clone --depth 1 "https://x-access-token:${GITHUB_TOKEN}@${GITHUB_SERVER_URL#https://}/root/daywork.git" .
|
||||
git checkout "$GITHUB_SHA"
|
||||
|
||||
- name: 安装 pnpm
|
||||
run: npm install -g pnpm@11 --registry=https://registry.npmmirror.com
|
||||
|
||||
- name: 安装依赖
|
||||
working-directory: intern-log
|
||||
run: pnpm install --frozen-lockfile --registry=https://registry.npmmirror.com
|
||||
|
||||
- name: pnpm audit（高危及以上）
|
||||
working-directory: intern-log
|
||||
run: pnpm audit --prod --audit-level=high --registry=https://registry.npmmirror.com
|
||||
-131
@@ -1,131 +0,0 @@
|
||||
// 统一 CI 编排：本地与 Gitea Actions 共用同一入口
|
||||
// 用法：node scripts/ci.mjs
|
||||
// 步骤：起本地同步服务 → 协议审计 → 用户管理审计 → 单元测试 → 双设备回归 → 实时链路 → 网页构建 → 依赖审计(软性)
|
||||
// 任何硬性步骤失败即整体失败（依赖审计默认软性，CI 里单独放开）
|
||||
import { spawn, spawnSync } from 'node:child_process'
|
||||
import fs from 'node:fs'
|
||||
import os from 'node:os'
|
||||
import path from 'node:path'
|
||||
import { fileURLToPath } from 'node:url'
|
||||
|
||||
const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
|
||||
const PORT = process.env.SYNC_PORT || '3780'
|
||||
const BASE = 'http://127.0.0.1:' + PORT
|
||||
const results = []
|
||||
let hardFailed = false
|
||||
let softWarned = false
|
||||
|
||||
function log(tag, line) { console.log('[' + tag + '] ' + line) }
|
||||
|
||||
function runStep(name, cmd, args, opts = {}) {
|
||||
log('RUN', name + ' (' + cmd + ' ' + args.join(' ') + ')')
|
||||
const started = Date.now()
|
||||
const r = spawnSync(cmd, args, { cwd: opts.cwd || ROOT, env: process.env, encoding: 'utf-8', shell: process.platform === 'win32' && cmd.endsWith('.cmd') })
|
||||
const out = ((r.stdout || '') + (r.stderr || '')).trim()
|
||||
const tail = out.split('\n').slice(-opts.tailLines || -40)
|
||||
for (const l of (opts.tail || out.split('\n').slice(-25))) if (l.trim()) console.log(' ' + l)
|
||||
const dur = ((Date.now() - started) / 1000).toFixed(1) + 's'
|
||||
const ok = r.status === 0
|
||||
results.push({ name, ok, dur })
|
||||
if (ok) log('OK ', name + ' (' + dur + ')')
|
||||
else {
|
||||
log('FAIL', name + ' (exit ' + r.status + ', ' + dur + ')')
|
||||
if (opts.soft) { softWarned = true; log('WARN', name + ' 为软性检查，不阻断 CI') }
|
||||
else hardFailed = true
|
||||
}
|
||||
return { ok, out }
|
||||
}
|
||||
|
||||
function findEsbuild() {
|
||||
const candidates = [
|
||||
path.join(ROOT, 'intern-log', 'node_modules', 'esbuild', 'bin', 'esbuild')
|
||||
]
|
||||
const pnpmDir = path.join(ROOT, 'intern-log', 'node_modules', '.pnpm')
|
||||
try {
|
||||
for (const d of fs.readdirSync(pnpmDir)) {
|
||||
if (d.startsWith('esbuild@')) candidates.push(path.join(pnpmDir, d, 'node_modules', 'esbuild', 'bin', 'esbuild'))
|
||||
}
|
||||
} catch { /* 无 .pnpm 目录 */ }
|
||||
for (const c of candidates) if (fs.existsSync(c)) return c
|
||||
throw new Error('找不到 esbuild，请先在 intern-log 下执行 pnpm install')
|
||||
}
|
||||
|
||||
function runBundled(name, tsPath) {
|
||||
const outfile = path.join(os.tmpdir(), 'daywork-' + name + '-' + Date.now() + '.cjs')
|
||||
const esbuildBin = findEsbuild()
|
||||
const b = runStep('bundle:' + name, process.execPath, [esbuildBin, tsPath, '--bundle', '--platform=node', '--format=cjs', '--outfile=' + outfile], { tail: [] })
|
||||
if (!b.ok) return
|
||||
runStep('test:' + name, process.execPath, [outfile], {})
|
||||
try { fs.rmSync(outfile, { force: true }) } catch { /* 忽略 */ }
|
||||
}
|
||||
|
||||
async function waitForServer(deadlineMs) {
|
||||
const started = Date.now()
|
||||
while (Date.now() - started < deadlineMs) {
|
||||
try {
|
||||
const r = await fetch(BASE + '/api/health')
|
||||
if (r.ok) return true
|
||||
} catch { /* 未就绪 */ }
|
||||
await new Promise(r => globalThis.setTimeout(r, 300))
|
||||
}
|
||||
return false
|
||||
}
|
||||
|
||||
// ---------- 0) 清理历史测试数据，保证套件幂等 ----------
|
||||
fs.rmSync(path.join(ROOT, 'server', 'data'), { recursive: true, force: true })
|
||||
|
||||
// ---------- 1) 启动本地同步服务 ----------
|
||||
const serverProc = spawn(process.execPath, [path.join(ROOT, 'server', 'index.js')], {
|
||||
cwd: ROOT,
|
||||
env: { ...process.env, PORT },
|
||||
stdio: ['ignore', 'pipe', 'pipe']
|
||||
})
|
||||
let serverLog = ''
|
||||
serverProc.stdout.on('data', d => { serverLog += d })
|
||||
serverProc.stderr.on('data', d => { serverLog += d })
|
||||
|
||||
const up = await waitForServer(15000)
|
||||
if (!up) {
|
||||
console.error('[FATAL] 本地同步服务 15 秒内未就绪')
|
||||
console.error(serverLog.slice(-1500))
|
||||
process.exit(1)
|
||||
}
|
||||
log('OK', '同步服务已就绪 ' + BASE)
|
||||
|
||||
try {
|
||||
// ---------- 2) 服务端协议审计 ----------
|
||||
runStep('protocol-audit', process.execPath, [path.join(ROOT, 'tests', 'server', 'protocol.mjs')], {})
|
||||
// ---------- 3) 用户管理审计 ----------
|
||||
runStep('admin-audit', process.execPath, [path.join(ROOT, 'tests', 'server', 'admin.mjs')], {})
|
||||
// ---------- 4/5/6) 客户端引擎级测试 ----------
|
||||
runBundled('unit', 'intern-log/repro/unit-tests.ts')
|
||||
runBundled('two-device', 'intern-log/repro/two-device.ts')
|
||||
runBundled('realtime', 'intern-log/repro/engine-realtime.ts')
|
||||
|
||||
// ---------- 7) 网页构建（编译即检查） ----------
|
||||
const isWin = process.platform === 'win32'
|
||||
const pnpmCmd = isWin ? 'pnpm.cmd' : 'pnpm'
|
||||
runStep('build:web', pnpmCmd, ['run', 'build'], { cwd: path.join(ROOT, 'intern-log') })
|
||||
} finally {
|
||||
serverProc.kill()
|
||||
try { fs.rmSync(path.join(ROOT, 'server', 'data'), { recursive: true, force: true }) } catch { /* 忽略 */ }
|
||||
}
|
||||
|
||||
// ---------- 8) 依赖漏洞审计（软性：高危及以上才告警，CI 可单独放开为硬性） ----------
|
||||
const isWin = process.platform === 'win32'
|
||||
runStep('audit:deps', isWin ? 'pnpm.cmd' : 'pnpm', ['audit', '--prod', '--audit-level=high'], {
|
||||
cwd: path.join(ROOT, 'intern-log'),
|
||||
soft: true
|
||||
})
|
||||
|
||||
// ---------- 汇总 ----------
|
||||
console.log('')
|
||||
console.log('==================== CI 汇总 ====================')
|
||||
for (const r of results) console.log((r.ok ? ' PASS ' : ' FAIL ') + r.name.padEnd(18) + r.dur)
|
||||
console.log('================================================')
|
||||
if (hardFailed) {
|
||||
console.error('结果：存在失败步骤，CI 不通过')
|
||||
process.exit(1)
|
||||
}
|
||||
if (softWarned) console.log('结果：全部硬性步骤通过（存在软性告警，见上方 WARN）')
|
||||
else console.log('结果：全部通过')
|
||||
Reference in New Issue
Block a user