feat(creator-studio): 前台 Gutenberg 创作工作台与受保护付费附件
前台投稿页改为沉浸式创作工作台：Gutenberg 负责区块解析与序列化， React + TypeScript 负责工作台外壳与发布抽屉，Jio 服务端继续作为权限、 审核与付费的唯一权威。 - 新增 assets/creator-studio 独立构建（wp-scripts，锁定 WP 6.4 时代包）， 仅在投稿模板加载，构建缺失或游客访问时回退原有 TinyMCE 表单 - 自动保存（4s 防抖 + rev 冲突 409）、本地快照恢复、发布配置抽屉、 移动端全屏单列与安全区适配 - 图片插入走现有 front-submit 上传管线，保留能力校验与待认领生命周期 - 已发布文章的改稿写入私有版本，审核通过前线上内容/链接/付费条款不变； 原生后台「改稿审核」一次性应用或退回，并校验源文章并发指纹 - 私有附件新表 jio_private_asset + jio_dl_token.asset_id，schema 升到 3.4.0； 文件存放 ABSPATH 之外，未配置私有存储时 fail closed - 下载令牌绑定文章/附件/用户/IP/UA/次数，每次交付复核 Visibility 的 订单、VIP 与配额判定；中断传输归还次数 - 付费字段改为写入前校验，非法价格不再留下半保存文章 - 新增 creator-studio 契约测试；更新受影响的 schema/下载/投稿契约 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
kate522andClaude Opus 5 committed
1 parent
7a8279f8e7
commit
fac4a714e0
45 files changed
+28495
-56
No files matched your search
@@ -0,0 +1,144 @@
|
||||
'use strict';
|
||||
|
||||
/**
|
||||
* Creator Studio 契约测试。
|
||||
*
|
||||
* 这些断言锁定“服务端才是权威”的边界：状态、付费、审核与私有附件不能由前端
|
||||
* 直接写穿；已发布文章的改稿不得覆盖线上内容；私有附件不得暴露公开路径。
|
||||
*/
|
||||
|
||||
const assert = require('node:assert/strict');
|
||||
const fs = require('node:fs');
|
||||
const path = require('node:path');
|
||||
const test = require('node:test');
|
||||
|
||||
const root = path.resolve(__dirname, '..', '..');
|
||||
const read = (file) => fs.readFileSync(path.join(root, file), 'utf8');
|
||||
const exists = (file) => fs.existsSync(path.join(root, file));
|
||||
|
||||
const creatorRest = read('src/Core/CreatorRest.php');
|
||||
const versions = read('src/Core/SubmissionVersion.php');
|
||||
const privateAssets = read('src/Content/PrivateAssets.php');
|
||||
const protectedDownload = read('src/Content/ProtectedDownload.php');
|
||||
const studio = read('src/Core/CreatorStudio.php');
|
||||
const pageSubmit = read('templates/pages/page-submit.php');
|
||||
const saveTrait = read('src/Core/FrontSubmitSave.php');
|
||||
const domainModel = read('src/Core/DomainModel.php');
|
||||
const appSource = read('assets/creator-studio/src/index.tsx');
|
||||
const drawer = read('assets/creator-studio/src/panels/publish-drawer.tsx');
|
||||
const api = read('assets/creator-studio/src/services/api.ts');
|
||||
|
||||
test('creator REST routes always register a permission callback', () => {
|
||||
const routes = creatorRest.match(/register_rest_route\(/g) || [];
|
||||
const permissions = creatorRest.match(/'permission_callback'\s*=>/g) || [];
|
||||
assert.ok(routes.length >= 5, 'creator API should expose bootstrap/save/submit/preview/upload routes');
|
||||
assert.equal(routes.length, permissions.length, 'every creator route needs a permission callback');
|
||||
assert.doesNotMatch(creatorRest, /'permission_callback'\s*=>\s*'__return_true'/);
|
||||
});
|
||||
|
||||
test('studio writes reuse the existing submit service instead of raw post APIs', () => {
|
||||
assert.match(creatorRest, /\$front->persist\(\$data, 'posts_draft'\)/);
|
||||
assert.match(creatorRest, /\$front->persist\(\$data, 'posts_save'\)/);
|
||||
assert.doesNotMatch(creatorRest, /wp_insert_post\(/);
|
||||
assert.doesNotMatch(creatorRest, /wp_update_post\(\$update/);
|
||||
assert.match(creatorRest, /can_use_studio/);
|
||||
assert.match(creatorRest, /user_can_cap\('new_post_audit_no', \$user_id\)/);
|
||||
});
|
||||
|
||||
test('published edits never overwrite the live post before approval', () => {
|
||||
assert.match(versions, /public static function requires_version/);
|
||||
assert.match(versions, /post_status === 'publish'/);
|
||||
assert.match(versions, /self::POST_TYPE/);
|
||||
assert.match(versions, /public function approve/);
|
||||
assert.match(versions, /public function reject/);
|
||||
assert.match(versions, /jio_version_source_changed/);
|
||||
assert.match(versions, /'status'\s*=>\s*409/);
|
||||
// Approval is the only path that writes title/content back to the source post.
|
||||
assert.match(versions, /'ID'\s*=>\s*\$source_id[\s\S]{0,400}?wp_update_post/);
|
||||
assert.match(creatorRest, /SubmissionVersion::requires_version\(\$post_id\)[\s\S]{0,400}?save_working/);
|
||||
});
|
||||
|
||||
test('stale autosave requests are rejected instead of overwriting', () => {
|
||||
assert.match(versions, /'jio_version_conflict'/);
|
||||
assert.match(versions, /current_rev/);
|
||||
assert.match(versions, /base_rev/);
|
||||
assert.match(appSource, /status === 409/);
|
||||
});
|
||||
|
||||
test('paid payload is validated before any post write', () => {
|
||||
const prepareAt = saveTrait.indexOf('prepare_pay_meta');
|
||||
const insertAt = saveTrait.indexOf('wp_insert_post');
|
||||
const updateAt = saveTrait.indexOf('wp_update_post');
|
||||
assert.notEqual(prepareAt, -1, 'persist must validate pay payload');
|
||||
assert.ok(prepareAt < insertAt, 'pay validation must precede insert');
|
||||
assert.ok(prepareAt < updateAt, 'pay validation must precede update');
|
||||
assert.match(saveTrait, /if \(empty\(\$pay_result\['success'\]\)\) \{\s*return \$pay_result;/);
|
||||
});
|
||||
|
||||
test('private attachments never expose a public URL', () => {
|
||||
assert.match(privateAssets, /define\('JIO_PRIVATE_STORAGE_DIR'/);
|
||||
assert.match(privateAssets, /is_available\(\)/);
|
||||
assert.match(privateAssets, /is_verified/);
|
||||
assert.match(privateAssets, /return \$outside \|\| \$explicit;/);
|
||||
assert.doesNotMatch(privateAssets, /wp_upload_dir\(/);
|
||||
assert.doesNotMatch(privateAssets, /wp_get_attachment_url/);
|
||||
assert.match(privateAssets, /asset_key/);
|
||||
assert.match(privateAssets, /@chmod\(\$target, 0600\)/);
|
||||
});
|
||||
|
||||
test('protected downloads require entitlement, tokens, and the private asset id', () => {
|
||||
assert.match(protectedDownload, /jio_can_download/);
|
||||
assert.match(protectedDownload, /Visibility::can_download_resource/);
|
||||
assert.match(protectedDownload, /asset_id/);
|
||||
assert.match(protectedDownload, /jio_token_expired/);
|
||||
assert.match(protectedDownload, /jio_token_exhausted/);
|
||||
assert.match(protectedDownload, /UPDATE \{\$table\} SET used_count = used_count \+ 1/);
|
||||
assert.match(protectedDownload, /GREATEST\(used_count - 1, 0\)/);
|
||||
assert.match(protectedDownload, /X-Content-Type-Options/);
|
||||
assert.doesNotMatch(protectedDownload, /wp_get_attachment_url/);
|
||||
});
|
||||
|
||||
test('model stores protected downloads by asset key only', () => {
|
||||
assert.match(domainModel, /'protected'/);
|
||||
assert.match(domainModel, /'asset_key'/);
|
||||
assert.match(domainModel, /PrivateAssets::sanitize_asset_key/);
|
||||
assert.match(domainModel, /\$is_protected\) \{\s*\$type = 'protected';\s*\$url = '';/);
|
||||
});
|
||||
|
||||
test('studio is mounted only on the submit template with a fallback', () => {
|
||||
assert.match(pageSubmit, /CreatorStudio::get_instance\(\)/);
|
||||
assert.match(pageSubmit, /is_built\(\)/);
|
||||
assert.match(pageSubmit, /get_current_user_id\(\) > 0/);
|
||||
assert.match(pageSubmit, /id="jio-creator-studio"/);
|
||||
// Guests and missing builds fall back to the existing TinyMCE form.
|
||||
assert.match(pageSubmit, /wp_enqueue_editor\(\);/);
|
||||
assert.match(studio, /is_page_template\('templates\/pages\/page-submit.php'\)/);
|
||||
assert.match(studio, /index\.asset\.php/);
|
||||
assert.match(studio, /wp_add_inline_script/);
|
||||
});
|
||||
|
||||
test('studio app keeps autosave, recovery, and the publish drawer wired', () => {
|
||||
assert.match(appSource, /useAutosave/);
|
||||
assert.match(appSource, /useLocalRecovery/);
|
||||
assert.match(appSource, /PublishDrawer/);
|
||||
assert.match(appSource, /BlockEditorProvider/);
|
||||
assert.match(appSource, /registerCoreBlocks/);
|
||||
assert.match(appSource, /installMediaUploadBridge/);
|
||||
assert.match(api, /'X-WP-Nonce'/);
|
||||
assert.match(drawer, /canPay/);
|
||||
assert.match(drawer, /canPayDownload/);
|
||||
assert.match(drawer, /私有附件存储尚未配置/);
|
||||
assert.match(drawer, /onSubmit\(false\)/);
|
||||
assert.match(drawer, /立即发布/);
|
||||
});
|
||||
|
||||
test('creator studio build artifacts and contracts exist', () => {
|
||||
assert.ok(exists('assets/creator-studio/package.json'));
|
||||
assert.ok(exists('assets/creator-studio/package-lock.json'));
|
||||
assert.ok(exists('assets/creator-studio/build/index.asset.php'));
|
||||
assert.ok(exists('assets/creator-studio/build/index.js'));
|
||||
assert.ok(exists('assets/creator-studio/build/index.css'));
|
||||
assert.ok(exists('assets/js/protected-download.js'));
|
||||
assert.ok(exists('src/Core/PreviewToken.php'));
|
||||
assert.ok(exists('src/Admin/Native/SubmissionReview.php'));
|
||||
});
|
||||
@@ -28,7 +28,9 @@ test('front submit owns the typed media REST routes and media trait wiring', ()
|
||||
assert.match(frontSubmit, /use FrontSubmitMedia\s*;/);
|
||||
assert.match(frontSubmit, /add_action\('rest_api_init', \[\$this, 'register_rest_routes'\]\)/);
|
||||
assert.doesNotMatch(frontSubmit, /add_action\('jio_new_(?:add|edit)_posts', \[\$this, 'sync_post_attachments'\]\)/);
|
||||
assert.match(saveTrait, /\$this->sync_post_attachments\(\$post\);\s*if \(!\$pay_result\['success'\]\)/);
|
||||
// Paid fields are validated before the post write; saved posts always sync attachments.
|
||||
assert.match(saveTrait, /\$pay_result = \$this->prepare_pay_meta\([\s\S]{0,120}?if \(empty\(\$pay_result\['success'\]\)\) \{\s*return \$pay_result;/);
|
||||
assert.match(saveTrait, /\$this->sync_post_attachments\(\$post\);[\s\S]{0,200}?do_action\(/);
|
||||
|
||||
assert.match(frontSubmit, /register_rest_route\('jio\/v1', '\/front-submit\/media\/\(\?P<type>image\|video\|file\)'/);
|
||||
assert.match(frontSubmit, /'methods'\s*=>\s*\\WP_REST_Server::READABLE/);
|
||||
|
||||
@@ -376,15 +376,19 @@ namespace Jio\Core {
|
||||
return $cap !== 'new_post_audit_no';
|
||||
}
|
||||
|
||||
private function save_pay_meta(int $post_id, array $data, int $user_id, array $settings): array {
|
||||
if (isset($data['fake_saved_pay_meta']) && is_array($data['fake_saved_pay_meta'])) {
|
||||
$GLOBALS['front_pending_state']['pay_meta'][$post_id] = $data['fake_saved_pay_meta'];
|
||||
\update_post_meta($post_id, DomainModel::PAY_META_KEY, $data['fake_saved_pay_meta']);
|
||||
}
|
||||
private function prepare_pay_meta(int $post_id, array $data, int $user_id, array $settings): array {
|
||||
if (!empty($data['fake_pay_failure'])) {
|
||||
return ['success' => false, 'message' => 'pay validation failed'];
|
||||
}
|
||||
return ['success' => true];
|
||||
if (isset($data['fake_saved_pay_meta']) && is_array($data['fake_saved_pay_meta'])) {
|
||||
return ['success' => true, 'write' => true, 'meta' => $data['fake_saved_pay_meta']];
|
||||
}
|
||||
return ['success' => true, 'write' => false];
|
||||
}
|
||||
|
||||
private function write_pay_meta(int $post_id, array $meta): void {
|
||||
$GLOBALS['front_pending_state']['pay_meta'][$post_id] = $meta;
|
||||
\update_post_meta($post_id, DomainModel::PAY_META_KEY, $meta);
|
||||
}
|
||||
|
||||
private function save_featured_meta(int $post_id, array $data, int $user_id): void {
|
||||
@@ -537,21 +541,23 @@ namespace {
|
||||
fp_assert(get_post_meta(441, '_jio_front_submit_media', true) === '', 'removed media should lose only its submit relation marker');
|
||||
fp_assert(!fp_pending(441) && $GLOBALS['front_pending_state']['deleted'] === [], 'removed media must not be deleted or marked pending again');
|
||||
|
||||
// A payment validation error happens after the body write. The saved body is
|
||||
// protected, but the request's featured values were never persisted and must
|
||||
// therefore not be considered references.
|
||||
// A payment validation error is resolved before anything is written, so the
|
||||
// request leaves no partially saved post and no claimed reference. Featured
|
||||
// values are never considered persisted either.
|
||||
fp_reset();
|
||||
fp_attachment(450, 7, 'image/jpeg');
|
||||
fp_attachment(451, 7, 'image/jpeg');
|
||||
$pay_error = $submit->persist(fp_article_data('<p>Body remains persisted after pay error.</p><img data-edit-file-id="450" src="/saved.jpg">', [
|
||||
$pay_error = $submit->persist(fp_article_data('<p>Body must not persist after pay error.</p><img data-edit-file-id="450" src="/saved.jpg">', [
|
||||
'fake_pay_failure' => true,
|
||||
'fake_featured_meta' => ['featured_video_attachment_id' => 0, 'featured_slide' => '451'],
|
||||
'fake_thumbnail_id' => 451,
|
||||
]));
|
||||
fp_assert(empty($pay_error['success']) && (int) ($pay_error['post_id'] ?? 0) > 0, 'pay validation should return its error after the post was written');
|
||||
fp_assert(!fp_pending(450), 'persisted body reference should be claimed even when payment validation fails');
|
||||
fp_assert(empty($pay_error['success']), 'pay validation should fail before the post is written');
|
||||
fp_assert((int) ($pay_error['post_id'] ?? 0) === 0, 'a failed pay validation must not report a saved post');
|
||||
fp_assert(fp_pending(450), 'body media must stay pending when validation fails before the write');
|
||||
fp_assert(fp_pending(451), 'unsaved featured media from failed request must not be claimed');
|
||||
fp_assert($GLOBALS['front_pending_state']['featured_save_calls'] === 0, 'featured metadata must not be saved after payment failure');
|
||||
fp_assert(($GLOBALS['front_pending_state']['posts'][450]->post_parent ?? 0) === 0, 'validation failure must not bind media to a post');
|
||||
|
||||
// Failed insert/update writes cannot claim anything because no saved post is
|
||||
// synchronized. Test both the create and edit branches.
|
||||
|
||||
@@ -134,12 +134,12 @@ test('preserves readable labels through the admin category filter, list, and det
|
||||
assert.equal(result.detail_report.category, '涉嫌侵权');
|
||||
});
|
||||
|
||||
test('stores report categories as text and uses schema version 3.3.0', () => {
|
||||
test('stores report categories as text and uses the current schema version', () => {
|
||||
const migrator = fs.readFileSync(path.join(root, 'src/Core/DBMigrator.php'), 'utf8');
|
||||
const tableDefinitions = fs.readFileSync(path.join(root, 'src/Core/DBMigratorPart2.php'), 'utf8');
|
||||
const reportTable = tableDefinitions.match(/\$sql_report\s*=\s*"([\s\S]*?)";/);
|
||||
|
||||
assert.match(migrator, /const SCHEMA_VERSION\s*=\s*'3\.3\.0';/);
|
||||
assert.match(migrator, /const SCHEMA_VERSION\s*=\s*'3\.4\.0';/);
|
||||
assert.ok(reportTable, 'report table definition should exist');
|
||||
assert.match(reportTable[1], /\bcategory\s+TEXT\s+NOT NULL\b/);
|
||||
});
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
/**
|
||||
* 工单表结构契约：
|
||||
* 1) 6 张 jio_ticket* 表全部由 DBMigratorPart2 建出，且被 migrate_ticket_tables() 调用；
|
||||
* 2) SCHEMA_VERSION 已升到 3.3.0（dbDelta 只在版本变化时重跑）；
|
||||
* 2) SCHEMA_VERSION 已升到当前版本（dbDelta 只在版本变化时重跑）；
|
||||
* 3) jio_order_aftersale 已从 schema 与表名映射中彻底移除；
|
||||
* 4) 状态与部门 seeds 幂等，默认状态被标记为不可改删。
|
||||
*/
|
||||
@@ -27,7 +27,7 @@ const TABLES = [
|
||||
|
||||
test('schema version is bumped so dbDelta re-runs', () => {
|
||||
const migrator = read('src/Core/DBMigrator.php');
|
||||
assert.match(migrator, /const SCHEMA_VERSION = '3\.3\.0';/, 'SCHEMA_VERSION must be 3.3.0');
|
||||
assert.match(migrator, /const SCHEMA_VERSION = '3\.4\.0';/, 'SCHEMA_VERSION must be bumped for new tables/columns');
|
||||
assert.ok(migrator.includes('use DBMigratorTicket;'), 'DBMigratorTicket trait not composed');
|
||||
// 版本注释要说明每次升版做了什么，否则后人看不懂升版原因。
|
||||
assert.match(migrator, /3\.0\.0: 售后（order_aftersale）整体替换为工单系统/);
|
||||
|
||||
Reference in new issue
Block a user