Initialize repository with harness code and assets

Initial import of all source code, config, and README assets: the packages workspace (cli, core, server, web, docs, landing, skills), build scripts, tooling config, and CI workflows. Includes the data-layout revision made on this branch: the local data root defaults to ~/.penguin/data (PENGUIN_HOME still overrides; the installer keeps its binaries in ~/.penguin), and every Agent lives under <project>/agents/<agent>/ — path helpers, the three agent-enumeration scans, the system prompt, built-in Skills, tests and docs all follow the new layout. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018ihk8iQuo3kv2aPjAYEPuR
2026-07-19 14:06:53 +08:00
parent 056bed7aeb
commit 45bfae6e94
543 changed files with 92949 additions and 0 deletions
@@ -0,0 +1,86 @@
+/**
+ * Regression (#68): switching accounts in the same browser must keep draft caches isolated per user.
+ *
+ * Old bug: the draft key only included the Project/Session ID, with no user dimension. If user A
+ * left an unsent draft in a shared Project and logged out, user B logging in and visiting the
+ * same Project would restore A's body and selections — an info leak across accounts. After the
+ * fix, the key includes userId (penguin.chatDraft.<userId>.<projectId>), so each account only sees its own draft.
+ */
+import { test, expect } from "@playwright/test";
+import { provisionAndLogin, provisionUser } from "./auth.mjs";
+
+const BASE = process.env.BASE_URL;
+const MOCK = process.env.MOCK_URL;
+const P = "password123";
+const UA = "draftowner";
+const UB = "draftguest";
+
+test("切换账号：B 不恢复 A 的草稿，两人草稿并存", async ({ page }) => {
+  // A is provisioned and logged in (page's cookie belongs to A); B is only provisioned, logging in via the UI later. userId is the username.
+  const userA = (await provisionAndLogin(page.request, UA, P)).userId;
+  await provisionUser(UB, P);
+  const userB = UB;
+
+  // Configure a model on A's initial Project (missing credentials would trigger the onboarding
+  // prompt), then add B as a member (shared Project). After logging in, B lands on projects[0] —
+  // the list is sorted by creation time ascending, and A's Project is older, exactly reproducing the issue's scenario.
+  const projectId = (await (await page.request.get(`${BASE}/api/projects`)).json()).projects[0]
+    .projectId;
+  const put = await page.request.put(`${BASE}/api/projects/${projectId}/models`, {
+    data: {
+      defaultModel: { provider: "custom", modelId: "claude-4-8" },
+      models: [
+        {
+          provider: "custom",
+          modelId: "claude-4-8",
+          apiKey: "sk-mock",
+          baseUrl: MOCK,
+          contextWindow: 200000,
+        },
+      ],
+    },
+  });
+  expect(put.ok(), "put models").toBeTruthy();
+  const add = await page.request.post(`${BASE}/api/projects/${projectId}/members`, {
+    data: { userId: UB },
+  });
+  expect(add.ok(), "add member").toBeTruthy();
+
+  // A types a body on the draft page and waits for debounce to persist it under A's key; after a reload it restores as usual (confirming it was persisted).
+  await page.goto(`${BASE}/chat`);
+  const ta = page.getByPlaceholder(/输入消息/);
+  await ta.fill("A 的机密草稿");
+  const keyA = `penguin.chatDraft.${userA}.${projectId}`;
+  await expect
+    .poll(() => page.evaluate((k) => localStorage.getItem(k), keyA))
+    .toContain("A 的机密草稿");
+  await page.reload();
+  await expect(ta).toHaveValue("A 的机密草稿");
+
+  // A logs out: the bottom-left user menu (the username button shares its name with the top
+  // Project switcher — the initial Project's display name defaults to the username — so take
+  // the last match, which is the bottom user menu).
+  await page.getByRole("button", { name: UA }).last().click();
+  await page.getByRole("button", { name: "登出" }).click();
+  await page.waitForURL(/\/login/);
+
+  // B logs in on the same browser, landing on the draft page for the shared Project.
+  await page.getByLabel("用户名").fill(UB);
+  // exact: without it, a substring match would also hit the "show password" toggle button (aria-label) next to the password field.
+  await page.getByLabel("密码", { exact: true }).fill(P);
+  await page.locator('button[type="submit"]').click();
+  await page.waitForURL(/\/chat/);
+  await expect(page.getByRole("heading", { name: "PenguinHarness" })).toBeVisible();
+
+  // The leak's regression point: B's input area must be empty (before the fix, it would restore A's body and selections).
+  await expect(ta).toHaveValue("");
+
+  // B writes their own draft: it lands under B's key (the key includes projectId, confirming B
+  // is on the same shared Project), while A's draft is left untouched — neither overwrites the other.
+  await ta.fill("B 自己的草稿");
+  const keyB = `penguin.chatDraft.${userB}.${projectId}`;
+  await expect
+    .poll(() => page.evaluate((k) => localStorage.getItem(k), keyB))
+    .toContain("B 自己的草稿");
+  expect(await page.evaluate((k) => localStorage.getItem(k), keyA)).toContain("A 的机密草稿");
+});