Add reusable multi-session skill and five-page project workbench

2026-10-19 03:03:29 -07:00
parent 939c14de77
commit 579dece104
75 changed files with 13096 additions and 0 deletions
@@ -0,0 +1,62 @@
+import json
+from http.server import BaseHTTPRequestHandler,ThreadingHTTPServer
+from pathlib import Path
+import sys
+import tempfile
+import threading
+import unittest
+from unittest.mock import patch
+
+ROOT=Path(__file__).resolve().parents[1]
+sys.path.insert(0,str(ROOT/'scripts'))
+from control import Client,APIError
+
+
+class ClientTests(unittest.TestCase):
+    def test_redirect_never_forwards_bearer_to_another_origin(self):
+        received=[]
+        class Target(BaseHTTPRequestHandler):
+            def log_message(self,*args):pass
+            def do_GET(self):
+                received.append(self.headers.get('Authorization'))
+                self.send_response(200);self.end_headers();self.wfile.write(b'{}')
+        target=ThreadingHTTPServer(('127.0.0.1',0),Target)
+        class Redirect(BaseHTTPRequestHandler):
+            def log_message(self,*args):pass
+            def do_GET(self):
+                self.send_response(302)
+                self.send_header('Location','http://127.0.0.1:'+str(target.server_port)+'/capture')
+                self.end_headers()
+        redirect=ThreadingHTTPServer(('127.0.0.1',0),Redirect)
+        threads=[threading.Thread(target=s.serve_forever,daemon=True) for s in (target,redirect)]
+        for t in threads:t.start()
+        try:
+            with tempfile.TemporaryDirectory() as root:
+                token=Path(root)/'token';token.write_text('test-only-token');token.chmod(0o600)
+                client=Client({'url':'http://127.0.0.1:'+str(redirect.server_port),'token_file':str(token)})
+                with self.assertRaises(APIError) as result:client.call('/api/state')
+                self.assertEqual(result.exception.status,302)
+                self.assertEqual(received,[])
+        finally:
+            for s in (redirect,target):s.shutdown();s.server_close()
+            for t in threads:t.join()
+
+    def test_ssh_json_is_explicit_utf8_and_preserves_chinese(self):
+        from types import SimpleNamespace
+        client=Client({'transport':'ssh','identity_file':'example-key','ssh_host':'observer@entry.example.test',
+                       'remote_client':'/home/observer/agent-workbench/scripts/control.py','remote_config':'/home/observer/private/config.json'})
+        with patch('control.subprocess.run',return_value=SimpleNamespace(returncode=0,stdout=json.dumps({'text':'中文回复'}))) as run:
+            self.assertEqual(client.call('/api/state')['text'],'中文回复')
+            self.assertEqual(run.call_args.kwargs['encoding'],'utf-8')
+            self.assertIn('python3 -X utf8',run.call_args.args[0][-1])
+
+    def test_ssh_preserves_conflict_status_for_reconciliation(self):
+        from types import SimpleNamespace
+        client=Client({'transport':'ssh','identity_file':'example-key','ssh_host':'observer@entry.example.test',
+                       'remote_client':'/home/observer/agent-workbench/scripts/control.py','remote_config':'/home/observer/private/config.json'})
+        with patch('control.subprocess.run',return_value=SimpleNamespace(returncode=2,stdout='{"api_error":409}')):
+            with self.assertRaises(APIError) as result:client.call('/api/state')
+            self.assertEqual(result.exception.status,409)
+
+
+if __name__=='__main__':unittest.main()