chore(merge): 整合最新 main 与统一认证变更

合并远端生产 CI、依赖与 API 文档改动，保留统一认证和 SSF 能力。由于远端生产基线已占用 0062，将尚未发布的身份迁移整理为 0063 至 0068 的最终增量 Schema，移除仅用于开发期草稿升级的破坏性迁移步骤。验证：go test ./...。其余生产门禁在合并提交后继续执行。
2026-07-17 19:06:37 +08:00
parent 5b8178b703 6cc24fa978
commit 4426eeccf7
100 changed files with 9673 additions and 1799 deletions
@@ -1,15 +1,18 @@
 import { afterEach, describe, expect, it, vi } from 'vitest';
 import {
-	cancelIdentityPairing,
+  cancelIdentityPairing,
  connectSecurityEventTransmitter,
+  createResponse,
  deleteOIDCBrowserSession,
  GatewayApiError,
  gatewayErrorMessage,
+  getAPITask,
  getCurrentUser,
+  getOpsManagementSkillMetadata,
  OIDC_BROWSER_SESSION_CREDENTIAL,
-	startIdentityPairing,
-	retireIdentityPairingSecurityEventConflict,
-	validateIdentityRevision,
+  startIdentityPairing,
+  retireIdentityPairingSecurityEventConflict,
+  validateIdentityRevision,
 } from './api';

 describe('Gateway provisioning errors', () => {
@@ -200,3 +203,69 @@ describe('OIDC browser session transport', () => {
    expect(new Headers(init.headers).has('Authorization')).toBe(false);
  });
 });
+
+describe('Public Agent resources', () => {
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it('loads operations skill metadata without authorization', async () => {
+    const metadata = {
+      name: 'ai-gateway-ops-management',
+      version: '1.0.2',
+      displayName: 'AI Gateway 运维管理',
+      modules: ['model-runtime'],
+      fileName: 'ai-gateway-ops-management-v1.0.2.zip',
+      downloadPath: '/api/v1/public/skills/ai-gateway-ops-management/download',
+      apiDocsJsonPath: '/api-docs-json',
+      apiDocsYamlPath: '/api-docs-yaml',
+    };
+    const fetchMock = vi.fn().mockResolvedValue(new Response(JSON.stringify(metadata), {
+      status: 200,
+      headers: { 'Content-Type': 'application/json' },
+    }));
+    vi.stubGlobal('fetch', fetchMock);
+
+    await expect(getOpsManagementSkillMetadata()).resolves.toEqual(metadata);
+
+    const [url, init] = fetchMock.mock.calls[0] as [string, RequestInit];
+    expect(url).toContain('/api/v1/public/skills/ai-gateway-ops-management/metadata');
+    expect(new Headers(init.headers).has('Authorization')).toBe(false);
+  });
+});
+
+describe('API documentation runner transports', () => {
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it('runs Responses against the public OpenAI-compatible endpoint', async () => {
+    const fetchMock = vi.fn().mockResolvedValue(new Response(JSON.stringify({ id: 'resp-test', object: 'response' }), {
+      status: 200,
+      headers: { 'Content-Type': 'application/json' },
+    }));
+    vi.stubGlobal('fetch', fetchMock);
+
+    await createResponse('sk-test', { model: 'gpt-test', input: 'hello', store: true, stream: false });
+
+    const [url, init] = fetchMock.mock.calls[0] as [string, RequestInit];
+    expect(url).toContain('/v1/responses');
+    expect(init.method).toBe('POST');
+    expect(new Headers(init.headers).get('Authorization')).toBe('Bearer sk-test');
+    expect(JSON.parse(String(init.body))).toMatchObject({ model: 'gpt-test', input: 'hello', store: true, stream: false });
+  });
+
+  it('retrieves a task from the documented API path', async () => {
+    const fetchMock = vi.fn().mockResolvedValue(new Response(JSON.stringify({ id: 'task-123', status: 'running' }), {
+      status: 200,
+      headers: { 'Content-Type': 'application/json' },
+    }));
+    vi.stubGlobal('fetch', fetchMock);
+
+    await getAPITask('sk-test', 'task-123');
+
+    const [url, init] = fetchMock.mock.calls[0] as [string, RequestInit];
+    expect(url).toContain('/api/v1/tasks/task-123');
+    expect(init.method).toBe('GET');
+  });
+});