This commit is contained in:
2026-07-26 14:02:37 +07:00
parent bc56546b49
commit 367ebc1c7f
171 changed files with 4617 additions and 10402 deletions
+69 -73
View File
@@ -1,83 +1,79 @@
#!/usr/bin/env bash
set -e
set -euo pipefail
AUTH_FILE="$HOME/.pi/agent/auth.json"
AUTH_BACKUP="$HOME/.pi/agent/auth.json.bak"
# Isolate user resources, credentials, temporary files, and tool configuration.
temp_parent="${TMPDIR:-/tmp}"
temp_parent="${temp_parent%/}"
test_root="$(mktemp -d "$temp_parent/pi-test.XXXXXX")"
git_askpass="$(type -P false)"
readonly temp_parent test_root git_askpass
# Restore auth.json on exit (success or failure)
mkdir -p "$test_root/home/.config" "$test_root/tmp" "$test_root/cache/npm"
# Mark the generated root so cleanup can verify ownership before deleting it.
touch "$test_root/.pi-test-owned" "$test_root/npm-userconfig" "$test_root/npm-globalconfig"
# Only remove the marked directory created above, never an unverified path.
cleanup() {
if [[ -f "$AUTH_BACKUP" ]]; then
mv "$AUTH_BACKUP" "$AUTH_FILE"
echo "Restored auth.json"
fi
local status=$?
trap - EXIT
case "$test_root" in
"$temp_parent"/pi-test.*)
if [[ -d "$test_root" && ! -L "$test_root" && -f "$test_root/.pi-test-owned" ]]; then
rm -rf -- "$test_root"
else
printf "Refusing to remove unverified test directory: %s\n" "$test_root" >&2
[[ $status -ne 0 ]] || status=1
fi
;;
*)
printf "Refusing to remove unexpected test directory: %s\n" "$test_root" >&2
[[ $status -ne 0 ]] || status=1
;;
esac
exit "$status"
}
trap cleanup EXIT
# Move auth.json out of the way
if [[ -f "$AUTH_FILE" ]]; then
mv "$AUTH_FILE" "$AUTH_BACKUP"
echo "Moved auth.json to backup"
fi
# Start from an empty environment and allow only required platform and test settings.
test_env=(
"PATH=$PATH"
"PWD=$PWD"
"HOME=$test_root/home"
"USERPROFILE=$test_root/home"
"TMPDIR=$test_root/tmp"
"TMP=$test_root/tmp"
"TEMP=$test_root/tmp"
"XDG_CONFIG_HOME=$test_root/home/.config"
"XDG_CACHE_HOME=$test_root/cache"
"LANG=C"
"LC_ALL=C"
"TZ=UTC"
"GIT_CONFIG_NOSYSTEM=1"
"GIT_CONFIG_GLOBAL=/dev/null"
"GIT_TERMINAL_PROMPT=0"
"GIT_ASKPASS=$git_askpass"
"GIT_EDITOR=true"
"GIT_SEQUENCE_EDITOR=true"
"NPM_CONFIG_USERCONFIG=$test_root/npm-userconfig"
"NPM_CONFIG_GLOBALCONFIG=$test_root/npm-globalconfig"
"NPM_CONFIG_CACHE=$test_root/cache/npm"
"PI_NO_LOCAL_LLM=1"
"AWS_EC2_METADATA_DISABLED=true"
)
# Skip local LLM tests (ollama, lmstudio)
export PI_NO_LOCAL_LLM=1
# Native Windows needs these inherited values to launch child processes.
for name in SystemRoot SYSTEMROOT WINDIR COMSPEC PATHEXT; do
value="${!name-}"
[[ -z "$value" ]] || test_env+=("$name=$value")
done
# Unset API keys (see packages/ai/src/stream.ts getEnvApiKey)
unset ANTHROPIC_API_KEY
unset ANTHROPIC_OAUTH_TOKEN
unset ANT_LING_API_KEY
unset NVIDIA_API_KEY
unset OPENAI_API_KEY
unset AZURE_OPENAI_API_KEY
unset DEEPSEEK_API_KEY
unset GEMINI_API_KEY
unset GOOGLE_CLOUD_API_KEY
unset GROQ_API_KEY
unset CEREBRAS_API_KEY
unset XAI_API_KEY
unset OPENROUTER_API_KEY
unset ZAI_API_KEY
unset ZAI_CODING_CN_API_KEY
unset MISTRAL_API_KEY
unset MINIMAX_API_KEY
unset MINIMAX_CN_API_KEY
unset MOONSHOT_API_KEY
unset KIMI_API_KEY
unset HF_TOKEN
unset FIREWORKS_API_KEY
unset TOGETHER_API_KEY
unset AI_GATEWAY_API_KEY
unset OPENCODE_API_KEY
unset CLOUDFLARE_API_KEY
unset CLOUDFLARE_ACCOUNT_ID
unset CLOUDFLARE_GATEWAY_ID
unset XIAOMI_API_KEY
unset XIAOMI_TOKEN_PLAN_CN_API_KEY
unset XIAOMI_TOKEN_PLAN_AMS_API_KEY
unset XIAOMI_TOKEN_PLAN_SGP_API_KEY
unset QWEN_TOKEN_PLAN_API_KEY
unset QWEN_TOKEN_PLAN_CN_API_KEY
unset RADIUS_API_KEY
unset PI_GATEWAY
unset PI_EXPERIMENTAL
unset COPILOT_GITHUB_TOKEN
unset GH_TOKEN
unset GITHUB_TOKEN
unset GOOGLE_APPLICATION_CREDENTIALS
unset GOOGLE_CLOUD_PROJECT
unset GCLOUD_PROJECT
unset GOOGLE_CLOUD_LOCATION
unset AWS_PROFILE
unset AWS_ACCESS_KEY_ID
unset AWS_SECRET_ACCESS_KEY
unset AWS_SESSION_TOKEN
unset AWS_REGION
unset AWS_DEFAULT_REGION
unset AWS_BEARER_TOKEN_BEDROCK
unset AWS_CONTAINER_CREDENTIALS_RELATIVE_URI
unset AWS_CONTAINER_CREDENTIALS_FULL_URI
unset AWS_WEB_IDENTITY_TOKEN_FILE
unset BEDROCK_EXTENSIVE_MODEL_TEST
# Preserve CI detection only for runner behavior and test reporting.
for name in CI GITHUB_ACTIONS; do
value="${!name-}"
[[ -z "$value" ]] || test_env+=("$name=$value")
done
echo "Running tests without API keys..."
npm test
echo "Running tests without API keys in isolated home: $test_root/home"
env -i "${test_env[@]}" npm test