feat: bootstrap commercial AI drama platform

2026-08-24 10:24:34 +08:00
commit ffb27d845b
100 changed files with 35314 additions and 0 deletions
@@ -0,0 +1,60 @@
+import assert from "node:assert/strict";
+
+const api = process.env.AI_DRAMA_API_BASE || "http://127.0.0.1:8787";
+
+async function request(path, headers, options = {}) {
+  const response = await fetch(`${api}${path}`, {
+    ...options,
+    headers: { "content-type": "application/json", ...(headers || {}), ...(options.headers || {}) }
+  });
+  const contentType = response.headers.get("content-type") || "";
+  const payload = contentType.includes("json") ? await response.json().catch(() => ({})) : await response.text();
+  return { response, payload };
+}
+
+async function login(email) {
+  const result = await request("/api/auth/login", null, { method: "POST", body: JSON.stringify({ email, password: "Demo@123456" }) });
+  assert.equal(result.response.status, 200, `${email} 登录失败`);
+  return { authorization: `Bearer ${result.payload.session.token}` };
+}
+
+const systemAdmin = await login("producer@local.test");
+const organizationAdmin = await login("producer2@local.test");
+const ordinaryUser = await login("writer@local.test");
+
+const globalList = await request("/api/audit?page=1&pageSize=2&result=ok", systemAdmin);
+assert.equal(globalList.response.status, 200, "系统管理员读取审计列表失败");
+assert.equal(globalList.payload.scope.mode, "global", "系统管理员应获得全局审计范围");
+assert.equal(globalList.payload.auditLog.length, 2, "服务端分页未按 pageSize 返回");
+assert.ok(globalList.payload.pagination.total > 2 && globalList.payload.pagination.hasMore, "审计分页元数据不完整");
+
+const auditId = globalList.payload.auditLog[0]?.id;
+assert.ok(auditId, "审计列表缺少事件 ID");
+const detail = await request(`/api/audit/${encodeURIComponent(auditId)}`, systemAdmin);
+assert.equal(detail.response.status, 200, "系统管理员读取审计详情失败");
+assert.equal(detail.payload.event.id, auditId, "审计详情 ID 不一致");
+assert.ok(Array.isArray(detail.payload.relatedAudit), "审计详情缺少关联审计列表");
+assert.ok(Array.isArray(detail.payload.relatedSecurityEvents), "审计详情缺少安全事件列表");
+
+const exported = await request("/api/audit/export?query=project&pageSize=5", systemAdmin);
+assert.equal(exported.response.status, 200, "审计 JSON 导出失败");
+assert.ok(Array.isArray(exported.payload.auditLog), "审计 JSON 导出缺少事件数组");
+assert.ok(Number.isInteger(exported.payload.total), "审计 JSON 导出缺少总数");
+
+const csv = await request("/api/audit/export?format=csv&pageSize=2", systemAdmin);
+assert.equal(csv.response.status, 200, "审计 CSV 导出失败");
+assert.match(csv.response.headers.get("content-type") || "", /text\/csv/);
+assert.match(csv.response.headers.get("content-disposition") || "", /audit-/);
+assert.match(csv.payload, /id,|"id"/);
+
+const orgList = await request("/api/audit?page=1&pageSize=5", organizationAdmin);
+assert.equal(orgList.response.status, 200, "组织管理员读取审计列表失败");
+assert.equal(orgList.payload.scope.mode, "organization", "组织管理员应限制在组织范围");
+assert.equal(orgList.payload.scope.organizationId, "org-northstar", "组织管理员组织范围错误");
+const crossOrganization = await request("/api/audit?organizationId=org-studio-lab", organizationAdmin);
+assert.equal(crossOrganization.response.status, 403, "组织管理员不应读取其他组织审计");
+
+const denied = await request("/api/audit", ordinaryUser);
+assert.equal(denied.response.status, 403, "普通用户不应读取审计中心");
+
+console.log(`audit smoke passed: ${api}`);