项目文件夹

文件
wehub-resource-sync 2860fb5d18
Security / Dependency review (push) Has been skipped
Scorecard / Scorecard analysis (push) Failing after 0s
Security / Dependency audit (push) Failing after 1s
Security / Secret scan (push) Failing after 1s
Validate / eval (push) Failing after 0s
Validate / tests (push) Failing after 0s
Validate / mcp-tests (push) Failing after 1s
GitHub Actions Security Analysis with zizmor 🌈 / zizmor (push) Failing after 1s
Security / SAST scan (push) Failing after 13m52s
chore: import upstream snapshot with attribution
2026-07-13 12:05:33 +08:00

537 行
21 KiB
Python

import json
import os
import shutil
import subprocess
import textwrap
import unittest
from pathlib import Path
from lib.bird_x import parse_bird_response
REPO_ROOT = Path(__file__).resolve().parents[1]
VENDORED_BIRD = REPO_ROOT / "skills" / "last30days" / "scripts" / "lib" / "vendor" / "bird-search" / "bird-search.mjs"
class TestBirdXEngagementZero(unittest.TestCase):
def test_zero_likes_preserved(self):
tweets = [
{
"id": "1",
"text": "test",
"permanent_url": "https://x.com/u/status/1",
"likeCount": 0,
"retweetCount": 5,
}
]
items = parse_bird_response(tweets, "test query")
self.assertEqual(0, items[0]["engagement"]["likes"])
self.assertEqual(5, items[0]["engagement"]["reposts"])
@unittest.skipUnless(shutil.which("node"), "node is required for vendored Bird tests")
class TestVendoredBirdRuntime(unittest.TestCase):
def test_check_uses_env_credentials_without_browser_cookie_dependency(self):
env = os.environ.copy()
env["AUTH_TOKEN"] = "dummy-auth"
env["CT0"] = "dummy-ct0"
result = subprocess.run(
["node", str(VENDORED_BIRD), "--check"],
cwd=REPO_ROOT,
env=env,
capture_output=True,
text=True,
check=False,
)
self.assertEqual(0, result.returncode, result.stderr)
payload = json.loads(result.stdout)
self.assertTrue(payload["authenticated"])
self.assertEqual("env AUTH_TOKEN", payload["source"])
def test_check_with_browser_lookup_disabled_returns_json_warnings(self):
env = os.environ.copy()
env.pop("AUTH_TOKEN", None)
env.pop("CT0", None)
env["BIRD_DISABLE_BROWSER_COOKIES"] = "1"
result = subprocess.run(
["node", str(VENDORED_BIRD), "--check"],
cwd=REPO_ROOT,
env=env,
capture_output=True,
text=True,
check=False,
)
self.assertEqual(1, result.returncode, result.stderr)
payload = json.loads(result.stdout)
self.assertFalse(payload["authenticated"])
self.assertTrue(payload["warnings"])
self.assertIn("Missing auth_token", " ".join(payload["warnings"]))
def test_browser_cookie_helpers_lazy_load_sweet_cookie(self):
sweet_cookie_dir = (
REPO_ROOT
/ "skills"
/ "last30days"
/ "scripts"
/ "lib"
/ "vendor"
/ "bird-search"
/ "lib"
/ "node_modules"
/ "@steipete"
/ "sweet-cookie"
)
if sweet_cookie_dir.exists():
self.skipTest("vendored sweet-cookie test stub already exists")
sweet_cookie_dir.mkdir(parents=True)
(sweet_cookie_dir / "package.json").write_text(
json.dumps(
{
"name": "@steipete/sweet-cookie",
"type": "module",
"exports": "./index.js",
}
),
encoding="utf-8",
)
(sweet_cookie_dir / "index.js").write_text(
textwrap.dedent(
"""
export async function getCookies(options) {
const browser = options.browsers?.[0] ?? "unknown";
return {
cookies: [
{ name: "auth_token", value: `${browser}-auth`, domain: "x.com" },
{ name: "ct0", value: `${browser}-ct0`, domain: "x.com" },
],
warnings: [],
};
}
"""
),
encoding="utf-8",
)
try:
result = subprocess.run(
[
"node",
"--input-type=module",
"-e",
textwrap.dedent(
"""
import {
extractCookiesFromSafari,
extractCookiesFromChrome,
extractCookiesFromFirefox,
} from "./skills/last30days/scripts/lib/vendor/bird-search/lib/cookies.js";
const payload = await Promise.all([
extractCookiesFromSafari(),
extractCookiesFromChrome("Profile 1"),
extractCookiesFromFirefox("default-release"),
]);
process.stdout.write(JSON.stringify(payload));
"""
),
],
cwd=REPO_ROOT,
capture_output=True,
text=True,
check=False,
)
self.assertEqual(0, result.returncode, result.stderr)
payload = json.loads(result.stdout)
self.assertEqual("Safari", payload[0]["cookies"]["source"])
self.assertEqual('Chrome profile "Profile 1"', payload[1]["cookies"]["source"])
self.assertEqual(
'Firefox profile "default-release"', payload[2]["cookies"]["source"]
)
self.assertEqual("safari-auth", payload[0]["cookies"]["authToken"])
self.assertEqual("chrome-auth", payload[1]["cookies"]["authToken"])
self.assertEqual("firefox-auth", payload[2]["cookies"]["authToken"])
finally:
shutil.rmtree(sweet_cookie_dir, ignore_errors=True)
for path in [sweet_cookie_dir.parent, sweet_cookie_dir.parent.parent]:
try:
path.rmdir()
except OSError:
pass
def test_none_likes_when_missing(self):
tweets = [
{
"id": "1",
"text": "test tweet with no engagement fields",
"permanent_url": "https://x.com/u/status/1",
# no likeCount, like_count, or favorite_count
}
]
items = parse_bird_response(tweets, "test query")
self.assertIsNone(items[0]["engagement"])
def test_fallback_to_second_key(self):
tweets = [
{
"id": "1",
"text": "test",
"permanent_url": "https://x.com/u/status/1",
"like_count": 7,
}
]
items = parse_bird_response(tweets, "test query")
self.assertEqual(7, items[0]["engagement"]["likes"])
def test_zero_does_not_fall_through(self):
"""likeCount=0 should not fall through to like_count=10."""
tweets = [
{
"id": "1",
"text": "test",
"permanent_url": "https://x.com/u/status/1",
"likeCount": 0,
"like_count": 10,
}
]
items = parse_bird_response(tweets, "test query")
self.assertEqual(0, items[0]["engagement"]["likes"])
def test_engagement_none_when_all_fields_missing(self):
"""All-None engagement dict should become None, not propagate."""
tweets = [
{
"id": "1",
"text": "test",
"permanent_url": "https://x.com/u/status/1",
}
]
items = parse_bird_response(tweets, "test query")
self.assertIsNone(items[0]["engagement"])
def test_engagement_preserved_when_any_field_present(self):
"""Engagement dict kept when at least one metric exists."""
tweets = [
{
"id": "1",
"text": "test",
"permanent_url": "https://x.com/u/status/1",
"likeCount": 5,
}
]
items = parse_bird_response(tweets, "test query")
self.assertIsNotNone(items[0]["engagement"])
self.assertEqual(5, items[0]["engagement"]["likes"])
class TestRunBirdSearchJsonDecodeRetry(unittest.TestCase):
"""When bird-search returns non-JSON stdout, retry the subprocess.
Twitter's edge sometimes serves an HTML anti-bot interstitial in place of
JSON. Before this fix, that response made json.loads raise JSONDecodeError
and the function returned {"items": []} with no diagnostic — silent-empty
against an orchestrator that can't distinguish "Twitter blocked us" from
"no tweets matched the query."
"""
def _make_result(self, stdout: str, stderr: str = "", returncode: int = 0):
from lib.subproc import SubprocResult
return SubprocResult(returncode=returncode, stdout=stdout, stderr=stderr)
def test_retries_subprocess_on_html_interstitial_then_succeeds(self):
"""First subprocess attempt returns HTML; second returns JSON → success."""
from unittest import mock
from lib import bird_x
html_interstitial = "<!DOCTYPE html><html><body>Rate limited</body></html>"
json_success = '[{"id": "1", "text": "tweet"}]'
results = [
(self._make_result(stdout=html_interstitial), None),
(self._make_result(stdout=json_success), None),
]
with mock.patch.object(bird_x, "_invoke_bird_subprocess", side_effect=results), \
mock.patch.object(bird_x.time, "sleep") as mock_sleep:
response = bird_x._run_bird_search("test", count=10, timeout=30)
self.assertNotIn("error", response)
self.assertEqual(response["items"], [{"id": "1", "text": "tweet"}])
# Should have slept between the failed first attempt and the retry.
mock_sleep.assert_called_once_with(bird_x.JSON_DECODE_RETRY_DELAY)
def test_returns_error_after_all_retries_exhausted(self):
"""All attempts return HTML → error dict with diagnostic + items=[]."""
from unittest import mock
from lib import bird_x
html_interstitial = "<!DOCTYPE html><html>blocked</html>"
results = [
(self._make_result(stdout=html_interstitial), None),
(self._make_result(stdout=html_interstitial), None),
]
with mock.patch.object(bird_x, "_invoke_bird_subprocess", side_effect=results), \
mock.patch.object(bird_x.time, "sleep"):
response = bird_x._run_bird_search("test", count=10, timeout=30)
self.assertIn("error", response)
self.assertIn("Invalid JSON response", response["error"])
# Diagnostic message names the anti-bot interstitial so it's
# distinguishable from a genuine no-results case in logs.
self.assertIn("anti-bot interstitial", response["error"].lower())
self.assertEqual(response["items"], [])
def test_terminal_subprocess_error_is_not_retried(self):
"""Subprocess timeout / spawn failure → terminal error, no retry."""
from unittest import mock
from lib import bird_x
timeout_error = {"error": "Search timed out after 30s", "items": []}
results = [(None, timeout_error)]
with mock.patch.object(bird_x, "_invoke_bird_subprocess", side_effect=results), \
mock.patch.object(bird_x.time, "sleep") as mock_sleep:
response = bird_x._run_bird_search("test", count=10, timeout=30)
self.assertEqual(response, timeout_error)
mock_sleep.assert_not_called()
if __name__ == "__main__":
unittest.main()
class TestXFromAndAboutLanes(unittest.TestCase):
"""U7/U8: FROM lane drops the topic-AND; ABOUT lane queries @handle and
excludes the handle's own tweets."""
def _result(self, body_items):
import json as _j
class _R:
returncode = 0
stderr = ""
r = _R()
r.stdout = _j.dumps({"items": body_items})
return r
def test_from_lane_drops_topic_and(self):
from unittest import mock
from lib import bird_x
captured = []
def fake_run(cmd, timeout=None, env=None):
captured.append(cmd[2]) # the query string arg
return self._result([])
with mock.patch.object(bird_x.subproc, "run_with_timeout", side_effect=fake_run):
bird_x.search_handles(["xuezhao"], "lan xuezhao", "2026-05-19", count_per=1)
self.assertEqual(captured[0], "from:xuezhao since:2026-05-19")
self.assertNotIn("lan xuezhao", captured[0])
def test_mention_lane_queries_at_handle(self):
from unittest import mock
from lib import bird_x
captured = []
def fake_run(cmd, timeout=None, env=None):
captured.append(cmd[2])
return self._result([])
with mock.patch.object(bird_x.subproc, "run_with_timeout", side_effect=fake_run):
bird_x.search_mentions(["xuezhao"], "2026-05-19", count_per=1)
self.assertEqual(captured[0], "@xuezhao since:2026-05-19")
def test_mention_lane_excludes_own_tweets(self):
from unittest import mock
from lib import bird_x
parsed = [
{"url": "https://x.com/xuezhao/status/1", "title": "own tweet"},
{"url": "https://twitter.com/xuezhao/status/3", "title": "own legacy-domain tweet"},
{"url": "https://x.com/fan99/status/2", "title": "mention of them"},
]
with mock.patch.object(bird_x.subproc, "run_with_timeout",
return_value=self._result([{"id": "x"}])), \
mock.patch.object(bird_x, "parse_bird_response", return_value=parsed):
out = bird_x.search_mentions(["xuezhao"], "2026-05-19", count_per=5)
urls = [it["url"] for it in out]
self.assertNotIn("https://x.com/xuezhao/status/1", urls) # own (x.com) excluded
self.assertNotIn("https://twitter.com/xuezhao/status/3", urls) # own (twitter.com) excluded
self.assertIn("https://x.com/fan99/status/2", urls) # mention kept
def test_mention_lane_empty_when_no_mentions(self):
from unittest import mock
from lib import bird_x
with mock.patch.object(bird_x.subproc, "run_with_timeout",
return_value=self._result([])), \
mock.patch.object(bird_x, "parse_bird_response", return_value=[]):
out = bird_x.search_mentions(["xuezhao"], "2026-05-19")
self.assertEqual(out, [])
class TestProbeAndDiagnoseHonesty(unittest.TestCase):
"""U5: --diagnose probe + true auth lane; X is not reported green when dead."""
def setUp(self):
from lib import bird_x
bird_x._probe_cache = "unset"
bird_x._credentials = {"AUTH_TOKEN": "t", "CT0": "c"} # injected creds present
def tearDown(self):
from lib import bird_x
bird_x._probe_cache = "unset"
bird_x._credentials = {}
def test_probe_true_when_response_ok(self):
from unittest import mock
from lib import bird_x
with mock.patch.object(bird_x, "_run_bird_search", return_value={"items": [{"id": "1"}]}):
self.assertTrue(bird_x.probe_works())
def test_probe_false_on_auth_error(self):
from unittest import mock
from lib import bird_x
with mock.patch.object(bird_x, "_run_bird_search",
return_value={"error": "Missing auth_token", "items": []}):
self.assertIs(bird_x.probe_works(), False)
def test_probe_none_on_timeout_inconclusive(self):
from unittest import mock
from lib import bird_x
with mock.patch.object(bird_x, "_run_bird_search",
return_value={"error": "Search timed out after 8s", "items": []}):
self.assertIsNone(bird_x.probe_works())
def test_probe_false_when_no_credentials(self):
from unittest import mock
from lib import bird_x
bird_x._credentials = {}
with mock.patch.dict(os.environ, {}, clear=True):
self.assertIs(bird_x.probe_works(), False)
def test_probe_cached_per_process(self):
from unittest import mock
from lib import bird_x
with mock.patch.object(bird_x, "_run_bird_search",
return_value={"items": [{"id": "1"}]}) as m:
bird_x.probe_works()
bird_x.probe_works()
self.assertEqual(m.call_count, 1) # cached, not re-run
def test_get_x_source_status_reports_true_lane(self):
from unittest import mock
from lib import env, bird_x
cfg = {"AUTH_TOKEN": "t", "CT0": "c", "_AUTH_TOKEN_SOURCE": "browser"}
with mock.patch.object(bird_x, "get_bird_status",
return_value={"installed": True, "authenticated": True,
"username": "env AUTH_TOKEN", "can_install": True}):
status = env.get_x_source_status(cfg, probe=False)
self.assertEqual(status["bird_username"], "browser AUTH_TOKEN")
def test_diagnose_probe_downgrades_when_dead(self):
from unittest import mock
from lib import env, bird_x
cfg = {"AUTH_TOKEN": "t", "CT0": "c", "_AUTH_TOKEN_SOURCE": "browser"}
with mock.patch.object(bird_x, "get_bird_status",
return_value={"installed": True, "authenticated": True,
"username": "env AUTH_TOKEN", "can_install": True}), \
mock.patch.object(bird_x, "probe_works", return_value=False):
status = env.get_x_source_status(cfg, probe=True)
self.assertFalse(status["bird_authenticated"])
self.assertIn("no working X auth", status["bird_username"])
class TestHandleSearchLogsOnSuccess(unittest.TestCase):
"""U6: handle searches log query + count on success, not only on failure."""
def test_search_handles_logs_on_success(self):
from unittest import mock
from lib import bird_x
class _R:
returncode = 0
stdout = '{"items": [{"id": "1"}]}'
stderr = ""
logged = []
with mock.patch.object(bird_x.subproc, "run_with_timeout", return_value=_R()), \
mock.patch.object(bird_x, "_log", side_effect=lambda m: logged.append(m)):
bird_x.search_handles(["mvanhorn"], "matt van horn", "2026-05-19", count_per=1)
self.assertTrue(any("Searching:" in m for m in logged),
f"expected a Searching: log on success, got {logged}")
class TestStrongestTokenRetryAnchored(unittest.TestCase):
"""The last-chance retry must keep an entity anchor, not collapse to a bare
generic token (e.g. 'compound') that floods the X pool with off-topic noise.
"""
def test_last_chance_retry_keeps_entity_anchor(self):
from unittest import mock
from lib import bird_x
queries = []
def fake_run(query, count, timeout):
queries.append(query)
return {"items": []} # always 0 → forces every retry tier
# extract_compound_terms may run; let it. Force all bird calls empty.
with mock.patch.object(bird_x, "_run_bird_search", side_effect=fake_run):
bird_x.search_x("trevin chow ai agents compound", "2026-05-19", "2026-06-18")
self.assertTrue(queries, "expected at least one bird query")
last = queries[-1]
# The final (last-chance) query keeps the entity anchor ...
self.assertIn("trevin", last)
# ... and is NOT a bare generic token query.
self.assertFalse(last.startswith("compound "), f"bare generic retry: {last!r}")
self.assertNotEqual(last, "compound since:2026-05-19")
def test_retry_with_single_distinctive_token_no_crash(self):
from unittest import mock
from lib import bird_x
queries = []
def fake_run(query, count, timeout):
queries.append(query)
return {"items": []}
with mock.patch.object(bird_x, "_run_bird_search", side_effect=fake_run):
# 'trending tools' is all low-signal except nothing distinctive ->
# whatever survives, the retry must not crash and stays anchored.
bird_x.search_x("agentcookie", "2026-05-19", "2026-06-18")
self.assertTrue(queries)
self.assertIn("agentcookie", queries[-1])
class LeadingMentionsTests(unittest.TestCase):
"""U5: leading @mentions parsed from post text identify reply targets."""
def test_single_leading_mention(self):
from lib import bird_x
self.assertEqual(["alpha"], bird_x._leading_mentions("@alpha thanks so much!"))
def test_multiple_leading_mentions(self):
from lib import bird_x
self.assertEqual(["alpha", "beta"], bird_x._leading_mentions("@alpha @beta hi"))
def test_in_body_mention_not_collected(self):
from lib import bird_x
self.assertEqual([], bird_x._leading_mentions("hello @gamma nice work"))
def test_punctuation_stripped(self):
from lib import bird_x
self.assertEqual(["alpha"], bird_x._leading_mentions("@alpha, nice"))
def test_empty_text(self):
from lib import bird_x
self.assertEqual([], bird_x._leading_mentions(""))
self.assertEqual([], bird_x._leading_mentions(None))
if __name__ == "__main__":
unittest.main()