ykxmz/_tests/acceptance.py

# -*- coding: utf-8 -*-
"""目标验收：逐条核对用户提出的每一项要求，每条都给证据。

用户的目标：
    "在 Debian 随身WiFi 上部署中转服务器 + Cloudflare Tunnel，实现跨网络远程控制。
     交付物为压缩包，内含三部分：被控端(Windows agent)、服务器端(relay)、控制端(Android APK)。
     要求：单设备单配对码（设备曾设置过则复用旧码）、服务器端可管理、
           面向 512MB 内存做优化。另需为电脑端所有按钮增加回退/撤销能力。"

这个脚本**不重复跑那些已经跑过的测试**，而是逐条给"这条要求达成了"的证据，
并明确指出哪一条还没有完全达成。
"""
from __future__ import annotations

import json
import subprocess
import sys
import urllib.error
import urllib.request
import zipfile
from pathlib import Path

ROOT = Path(__file__).resolve().parent.parent
sys.path.insert(0, str(ROOT / "_build"))

from devssh import run as ssh                            # noqa: E402

RESULTS = []


# ---------------------------------------------------------------------------
# 管理页密码**不再硬编码**。
#
# 以前这里写着明文密码，而 relay.py 里也把它当默认密码 ——
# 仓库要推到公开的 Gitee/EzHub，等于把管理台钥匙挂门上，
# 而且 git 历史删不掉。
#
# 现在按优先级取：
#     1. 环境变量 RELAY_ADMIN_PASSWORD
#     2. _build/relay_info.json 里的 adminPassword（本地测试用）
#     3. 本机 8080 中转实际用的 data/admin_password.txt
# 拿不到就跳过需要登录的用例，而不是编一个假密码硬试。
# ---------------------------------------------------------------------------
# ---- 测试专用管理密码 ----------------------------------------------------
# 测试要登录它自己启动的中转，但密码是那边随机的 —— 两边对不上就会
# 全部 401（表现成"功能坏了"，实际是环境没打通）。
#
# 这里生成一个**本次运行专用**的随机密码，写进环境变量；
# 测试启动中转用的是 dict(os.environ)，所以会自动传给中转。
#
# 为什么不用写死的：写死就又变成"密码进仓库"了，白改一场。
import os as _os_for_pw
import secrets as _secrets_for_pw
TEST_ADMIN_PW = "t" + _secrets_for_pw.token_hex(12)
_os_for_pw.environ["RELAY_ADMIN_PASSWORD"] = TEST_ADMIN_PW
_os_for_pw.environ.setdefault("RELAY_ADMIN_USER", "xmz7891")
# ---------------------------------------------------------------------------


def _admin_password() -> str:
    import json as _json
    import os as _os
    from pathlib import Path as _Path

    pw = (_os.environ.get("RELAY_ADMIN_PASSWORD") or "").strip()
    if pw:
        return pw
    root = _Path(__file__).resolve().parent.parent
    info = root / "_build" / "relay_info.json"
    try:
        data = _json.loads(info.read_text(encoding="utf-8"))
        pw = str(data.get("adminPassword") or "").strip()
        if pw:
            return pw
    except Exception:
        pass
    for cand in (root / "relay" / "data" / "admin_password.txt",
                 _Path("/root/lanremote-relay/data/admin_password.txt")):
        try:
            if cand.is_file():
                return cand.read_text(encoding="utf-8").strip()
        except Exception:
            continue
    return ""



def item(requirement: str, ok: bool, evidence: str, gap: str = "") -> None:
    RESULTS.append({
        "requirement": requirement,
        "ok": ok,
        "evidence": evidence,
        "gap": gap,
    })
    mark = "✓" if ok else ("~" if gap else "✗")
    print(f"  [{mark}] {requirement}")
    print(f"      证据: {evidence}")
    if gap:
        print(f"      差距: {gap}")


def device(command: str, timeout: int = 60) -> str:
    _code, out, _err = ssh(command, timeout=timeout, quiet=True)
    return out.strip()


# Cloudflare 的 Browser Integrity Check 会拦 Python 默认 UA
# （403 + error code 1010），所以请求要带上这个。
_UA = {"User-Agent": "LanRemote/1.4.0"}


def http_get(url: str, timeout: int = 15) -> tuple:
    try:
        req = urllib.request.Request(url, headers=_UA)
        with urllib.request.urlopen(req, timeout=timeout) as resp:
            return resp.status, resp.read().decode("utf-8", "replace")
    except urllib.error.HTTPError as exc:
        return exc.code, exc.read().decode("utf-8", "replace")
    except Exception as exc:                              # noqa: BLE001
        return 0, str(exc)


def main() -> int:
    print("=" * 70)
    print("  目标验收：逐条核对")
    print("=" * 70)
    print()

    # ---------------- 1. 中转服务器部署 ----------------
    print("一、在随身 WiFi 上部署中转服务器")
    status = device("systemctl is-active lanremote-relay")
    enabled = device("systemctl is-enabled lanremote-relay 2>/dev/null")
    health = device("curl -s --max-time 8 http://127.0.0.1:8080/v1/health")
    mem_kb = 0
    try:
        mem_kb = json.loads(health).get("memoryKB", 0)
    except Exception:                                     # noqa: BLE001
        pass
    item("中转服务在设备上运行", status == "active",
         f"systemctl={status}，开机自启={enabled}，Rss={mem_kb}KB ({mem_kb // 1024}MB)")

    # ---------------- 2. Cloudflare Tunnel ----------------
    print()
    print("二、Cloudflare 隧道")
    tunnel_active = device("systemctl is-active lanremote-tunnel")
    url = device("cat /root/lanremote-relay/public_url.txt 2>/dev/null")
    code, _body = http_get(f"{url}/v1/health") if url else (0, "")
    item("Cloudflare 隧道已建立且公网可达", tunnel_active == "active" and code == 200,
         f"服务={tunnel_active}，地址={url or '（无）'}，从公网访问 HTTP {code}")
    cert = device("test -f /root/.cloudflared/cert.pem && echo yes || echo no")
    item("具名隧道（固定域名 relay.xxmxxs.top）",
         cert == "yes",
         f"cert.pem={'存在' if cert == 'yes' else '不存在'}（授权未完成）",
         gap="等待用户在浏览器完成 Cloudflare 授权。"
             "已定位并修复了阻塞它的两个问题："
             "① api.cloudflare.com 被 DNS 劫持（已写 hosts 钉真实 IP）；"
             "② install.sh 的 CRLF 行尾（已改 LF）")

    # ---------------- 3. 三件套压缩包 ----------------
    print()
    print("三、交付压缩包含三部分")
    zip_path = ROOT / "dist" / "LanRemote-跨网络版-1.4.0.zip"
    parts = {}
    if zip_path.is_file():
        with zipfile.ZipFile(zip_path) as archive:
            names = archive.namelist()
        parts = {
            "被控端": any("ykxmz.exe" in n for n in names),
            "服务器端": any("relay.py" in n for n in names),
            "控制端": any(".apk" in n for n in names),
        }
    size = zip_path.stat().st_size / 1024 / 1024 if zip_path.is_file() else 0
    item("压缩包含被控端 / 服务器端 / 控制端",
         all(parts.values()),
         f"{zip_path.name}  {size:.2f} MB  " +
         "  ".join(f"{k}={'✓' if v else '✗'}" for k, v in parts.items()))

    # ---------------- 4. 单设备单配对码 ----------------
    print()
    print("四、单设备单配对码（设备设过就复用旧码）")
    # 用真实的 relay 跑一次：同 deviceId 报新码 -> 应改回旧码；异设备用同码 -> 应拒绝
    result = subprocess.run(
        [sys.executable, "-u", str(ROOT / "_tests" / "test_relay_local.py")],
        capture_output=True, text=True, encoding="utf-8", errors="replace")
    relay_ok = "失败 0 项" in result.stdout
    item("单设备单配对码 + 一个码只能一台设备用", relay_ok,
         "test_relay_local.py（经真实中转）：" +
         (result.stdout.strip().splitlines()[-1] if result.stdout.strip() else "无输出"))

    # ---------------- 5. 服务器端可管理 ----------------
    print()
    print("五、服务器端可管理")
    if url:
        plain = device("cat /root/lanremote-relay/data/admin_password.txt 2>/dev/null")
        c_login, _ = http_get(f"{url}/v1/admin/devices")
        c_url, url_body = http_get(f"{url}/url")
        item("管理页需要登录 + 管理接口 + 可查当前地址",
             c_login == 401 and c_url == 200,
             f"管理接口未登录={c_login}（应为 401）；"
             f"/url={c_url} 返回 {url_body.strip()[:60]}；"
             f"管理密码={plain or _admin_password()}")
    else:
        item("管理页需要登录 + 管理接口", False, "没有公网地址，无法测")

    # ---------------- 6. 512MB 内存优化 ----------------
    print()
    print("六、面向 512MB 内存做优化")
    freem = device("free -m | awk 'NR==2{print $3\" \"$7}'")
    queue_cap = device("grep -o 'RELAY_QUEUE_BYTES=[0-9]*' "
                       "/etc/systemd/system/lanremote-relay.service")
    memmax = device("grep -o 'MemoryMax=[0-9A-Za-z]*' "
                    "/etc/systemd/system/lanremote-relay.service")
    item("内存占用受控且有上限保护",
         mem_kb > 0 and mem_kb < 60 * 1024,
         f"中转 Rss={mem_kb // 1024}MB；系统已用/可用={freem or '?'}MB；"
         f"{memmax or 'MemoryMax 未设'}；{queue_cap or '队列上限未设'}")

    # ---------------- 7. 所有按钮加回退 ----------------
    print()
    print("七、电脑端所有按钮加回退/撤销")
    result = subprocess.run(
        [sys.executable, "-u", str(ROOT / "_tests" / "test_undo.py")],
        capture_output=True, text=True, encoding="utf-8", errors="replace")
    undo_ok = "失败 0 项" in result.stdout
    item("开关类 + 画面类都能回退，不可逆的不进列表", undo_ok,
         "test_undo.py：" +
         (result.stdout.strip().splitlines()[-1] if result.stdout.strip() else "无输出"))

    # ---------------- 8. 跨网络远程控制（端到端）----------------
    print()
    print("八、跨网络远程控制确实能用")
    if url:
        admin = device("cat /root/lanremote-relay/data/admin_key.txt 2>/dev/null")
        result = subprocess.run(
            [sys.executable, "-u",
             str(ROOT / "_tests" / "test_relay_e2e.py"), url, admin],
            capture_output=True, text=True, encoding="utf-8", errors="replace")
        e2e_ok = "失败 0 项" in result.stdout
        item("经公网隧道完成注册/接入/收发/鉴权", e2e_ok,
             "test_relay_e2e.py：" +
             (result.stdout.strip().splitlines()[-1] if result.stdout.strip() else "无输出"))
    else:
        item("经公网隧道端到端", False, "没有公网地址")

    # ---------------- 汇总 ----------------
    print()
    print("=" * 70)
    print("  验收汇总")
    print("=" * 70)
    full = sum(1 for r in RESULTS if r["ok"])
    partial = sum(1 for r in RESULTS if not r["ok"] and r["gap"])
    missing = sum(1 for r in RESULTS if not r["ok"] and not r["gap"])
    for r in RESULTS:
        mark = "✓ 达成" if r["ok"] else ("~ 部分" if r["gap"] else "✗ 未达成")
        print(f"  {mark}  {r['requirement']}")
    print()
    print(f"  完全达成 {full} 项 / 部分达成 {partial} 项 / 未达成 {missing} 项")
    if partial:
        print()
        print("  未完全达成的：")
        for r in RESULTS:
            if not r["ok"] and r["gap"]:
                print(f"    · {r['requirement']}")
                print(f"      {r['gap']}")
    return 0 if missing == 0 else 1


if __name__ == "__main__":
    sys.exit(main())