mirror of
https://github.com/larksuite/cli.git
synced 2026-07-08 10:08:02 +08:00
600fa50517
* feat(contentsafety): add extension interface layer with Provider, Alert, and registry Change-Id: Ibeac6366c7201293057bc3b063f75ac34565bcd5 * feat(contentsafety): add normalize utility for JSON type conversion Change-Id: I7d4729a5ddcab2553abc110f8f6ecc88435ae921 * feat(contentsafety): add tree walker and regex scanner Change-Id: I215dad7cf3072711d05e45f7d384162e1f8752d4 * feat(contentsafety): add config loading with lazy creation, default rules, and allowlist matching Change-Id: I75e10df28f1f8d4f433cb2b469a0ff317af3bf70 * feat(contentsafety): add regex provider with config-driven scanning and allowlist Change-Id: I658889b3647cbbbde6881e0c5f7c13887a1eb1d4 * feat(contentsafety): add output core with mode parsing, path normalization, and scan orchestration Change-Id: I1cb9df75f1a4d176d660e2e7a9561314c3787191 * feat(contentsafety): add ScanForSafety entry point and Envelope alert field Change-Id: I5fdb311e1c8d983a35a58667970b9fd3ac729a5c * feat(contentsafety): integrate scanning into shortcut Out() and OutFormat() Change-Id: I33eef1dba14c8a9bd1998857311bdd611f33b916 * feat(contentsafety): integrate scanning into API/service output paths and register provider Change-Id: Ic3981db6c546a19eadea095d82175f92f4783bec * fix(contentsafety): emit stderr notice when lazy-creating default config Change-Id: Ia2491f7a17caceea3125ff9fb58d750dc196d7e7 * style: gofmt factory_default and exitcode Change-Id: I86c5afdfbbdb68d8137f0ca09ef3b5a1139f4b4e * fix(contentsafety): vfs for config I/O, mutex for lazy-create, sort matched rules, emit warn on --output path Change-Id: Ib4982cd54e1bfe0580a0eb03368e6ca818304e1b * fix(contentsafety): isolate scan goroutine errOut to prevent race on timeout Change-Id: Ia5a770d7387ba6d3b7fa318fc5f1384214ea10b7 * fix(contentsafety): deep-normalize typed slices so scanner can walk shortcut data Change-Id: I641e89113d1a2f2285ac6109bd3d7264f5845ea7 * fix(contentsafety): file perms 0600/0700, no result mutation, timeout test, scanTimeout comment Change-Id: Ie45a2e365ee7098e214e94f8871026cc12029d83
99 lines
2.6 KiB
Go
99 lines
2.6 KiB
Go
// Copyright (c) 2026 Lark Technologies Pte. Ltd.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package common
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"encoding/json"
|
|
"testing"
|
|
|
|
"github.com/spf13/cobra"
|
|
|
|
extcs "github.com/larksuite/cli/extension/contentsafety"
|
|
"github.com/larksuite/cli/internal/cmdutil"
|
|
"github.com/larksuite/cli/internal/core"
|
|
"github.com/larksuite/cli/internal/output"
|
|
)
|
|
|
|
type csTestProvider struct {
|
|
alert *extcs.Alert
|
|
}
|
|
|
|
func (p *csTestProvider) Name() string { return "test" }
|
|
func (p *csTestProvider) Scan(_ context.Context, _ extcs.ScanRequest) (*extcs.Alert, error) {
|
|
return p.alert, nil
|
|
}
|
|
|
|
func newCSTestContext(t *testing.T) (*RuntimeContext, *bytes.Buffer, *bytes.Buffer) {
|
|
t.Helper()
|
|
stdout := &bytes.Buffer{}
|
|
stderr := &bytes.Buffer{}
|
|
parentCmd := &cobra.Command{Use: "lark-cli"}
|
|
cmd := &cobra.Command{Use: "test"}
|
|
parentCmd.AddCommand(cmd)
|
|
rctx := &RuntimeContext{
|
|
ctx: context.Background(),
|
|
Config: &core.CliConfig{Brand: core.BrandFeishu},
|
|
Cmd: cmd,
|
|
resolvedAs: core.AsBot,
|
|
Factory: &cmdutil.Factory{
|
|
IOStreams: &cmdutil.IOStreams{Out: stdout, ErrOut: stderr},
|
|
},
|
|
}
|
|
return rctx, stdout, stderr
|
|
}
|
|
|
|
func TestOut_ContentSafetyWarn(t *testing.T) {
|
|
t.Setenv("LARKSUITE_CLI_CONTENT_SAFETY_MODE", "warn")
|
|
|
|
alert := &extcs.Alert{Provider: "test", MatchedRules: []string{"r1"}}
|
|
extcs.Register(&csTestProvider{alert: alert})
|
|
defer extcs.Register(nil)
|
|
|
|
rctx, stdout, _ := newCSTestContext(t)
|
|
rctx.Out(map[string]any{"msg": "hello"}, nil)
|
|
|
|
var env output.Envelope
|
|
if err := json.Unmarshal(stdout.Bytes(), &env); err != nil {
|
|
t.Fatalf("unmarshal envelope: %v", err)
|
|
}
|
|
if env.ContentSafetyAlert == nil {
|
|
t.Error("expected _content_safety_alert in envelope")
|
|
}
|
|
}
|
|
|
|
func TestOut_ContentSafetyBlock(t *testing.T) {
|
|
t.Setenv("LARKSUITE_CLI_CONTENT_SAFETY_MODE", "block")
|
|
|
|
alert := &extcs.Alert{Provider: "test", MatchedRules: []string{"r1"}}
|
|
extcs.Register(&csTestProvider{alert: alert})
|
|
defer extcs.Register(nil)
|
|
|
|
rctx, stdout, _ := newCSTestContext(t)
|
|
rctx.Out(map[string]any{"msg": "hello"}, nil)
|
|
|
|
if stdout.Len() > 0 {
|
|
t.Error("block mode should not write data to stdout")
|
|
}
|
|
if rctx.outputErr == nil {
|
|
t.Error("block mode should set outputErr")
|
|
}
|
|
}
|
|
|
|
func TestOut_ContentSafetyOff(t *testing.T) {
|
|
t.Setenv("LARKSUITE_CLI_CONTENT_SAFETY_MODE", "off")
|
|
|
|
rctx, stdout, _ := newCSTestContext(t)
|
|
rctx.Out(map[string]any{"msg": "hello"}, nil)
|
|
|
|
var env output.Envelope
|
|
if err := json.Unmarshal(stdout.Bytes(), &env); err != nil {
|
|
t.Fatalf("unmarshal: %v", err)
|
|
}
|
|
if env.ContentSafetyAlert != nil {
|
|
t.Error("mode=off should not produce alert")
|
|
}
|
|
}
|