refactor: 移除独立 hub/proxy/executor/gateway crate，统一为 gateway tunnel 架构

- 删除 aether-hub、aether-proxy 独立项目及其 Dockerfile/配置 - 删除 crates/aether-executor 和 crates/aether-gateway 全部模块 - 新增 apps/ 目录作为应用入口 - 将 hub 概念重构为 gateway tunnel transport - 将 executor 重构为 execution runtime - 新增 tunnel.rs 合约定义和 testkit tunnel/execution_runtime 模块 - 更新 Python 服务层和测试适配新架构命名
2026-10-11 03:39:49 +08:00 · 2026-04-03 14:59:58 +08:00
parent ddf18fed9a
commit 8f26e1a31f
983 changed files with 103097 additions and 105836 deletions
@@ -0,0 +1,284 @@
+use super::*;
+
+#[test]
+fn classifies_admin_provider_oauth_start_key_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/provider-oauth/keys/key-123/start"
+        .parse()
+        .expect("uri should parse");
+    let decision =
+        classify_control_route(&http::Method::POST, &uri, &headers).expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(
+        decision.route_family.as_deref(),
+        Some("provider_oauth_manage")
+    );
+    assert_eq!(decision.route_kind.as_deref(), Some("start_key_oauth"));
+    assert_eq!(
+        decision.auth_endpoint_signature.as_deref(),
+        Some("admin:provider_oauth")
+    );
+    assert!(!decision.is_execution_runtime_candidate());
+}
+
+#[test]
+fn classifies_admin_provider_oauth_start_provider_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/provider-oauth/providers/provider-123/start"
+        .parse()
+        .expect("uri should parse");
+    let decision =
+        classify_control_route(&http::Method::POST, &uri, &headers).expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(
+        decision.route_family.as_deref(),
+        Some("provider_oauth_manage")
+    );
+    assert_eq!(decision.route_kind.as_deref(), Some("start_provider_oauth"));
+    assert_eq!(
+        decision.auth_endpoint_signature.as_deref(),
+        Some("admin:provider_oauth")
+    );
+    assert!(!decision.is_execution_runtime_candidate());
+}
+
+#[test]
+fn classifies_admin_provider_oauth_batch_import_task_status_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/provider-oauth/providers/provider-123/batch-import/tasks/task-456"
+        .parse()
+        .expect("uri should parse");
+    let decision =
+        classify_control_route(&http::Method::GET, &uri, &headers).expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(
+        decision.route_family.as_deref(),
+        Some("provider_oauth_manage")
+    );
+    assert_eq!(
+        decision.route_kind.as_deref(),
+        Some("get_batch_import_task_status")
+    );
+    assert_eq!(
+        decision.auth_endpoint_signature.as_deref(),
+        Some("admin:provider_oauth")
+    );
+    assert!(!decision.is_execution_runtime_candidate());
+}
+
+#[test]
+fn classifies_admin_provider_oauth_maintenance_routes_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    for (method, path, route_kind) in [
+        (
+            http::Method::POST,
+            "/api/admin/provider-oauth/keys/key-123/complete",
+            "complete_key_oauth",
+        ),
+        (
+            http::Method::POST,
+            "/api/admin/provider-oauth/keys/key-123/refresh",
+            "refresh_key_oauth",
+        ),
+        (
+            http::Method::POST,
+            "/api/admin/provider-oauth/providers/provider-123/complete",
+            "complete_provider_oauth",
+        ),
+        (
+            http::Method::POST,
+            "/api/admin/provider-oauth/providers/provider-123/import-refresh-token",
+            "import_refresh_token",
+        ),
+        (
+            http::Method::POST,
+            "/api/admin/provider-oauth/providers/provider-123/batch-import",
+            "batch_import_oauth",
+        ),
+        (
+            http::Method::POST,
+            "/api/admin/provider-oauth/providers/provider-123/batch-import/tasks",
+            "start_batch_import_oauth_task",
+        ),
+        (
+            http::Method::GET,
+            "/api/admin/provider-oauth/providers/provider-123/batch-import/tasks/task-123",
+            "get_batch_import_task_status",
+        ),
+        (
+            http::Method::POST,
+            "/api/admin/provider-oauth/providers/provider-123/device-authorize",
+            "device_authorize",
+        ),
+        (
+            http::Method::POST,
+            "/api/admin/provider-oauth/providers/provider-123/device-poll",
+            "device_poll",
+        ),
+    ] {
+        let uri: Uri = path.parse().expect("uri should parse");
+        let decision =
+            classify_control_route(&method, &uri, &headers).expect("route should classify");
+
+        assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+        assert_eq!(
+            decision.route_family.as_deref(),
+            Some("provider_oauth_manage")
+        );
+        assert_eq!(decision.route_kind.as_deref(), Some(route_kind));
+        assert_eq!(
+            decision.auth_endpoint_signature.as_deref(),
+            Some("admin:provider_oauth")
+        );
+        assert!(!decision.is_execution_runtime_candidate());
+    }
+}
+
+#[test]
+fn classifies_admin_oauth_list_providers_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/oauth/providers?limit=20"
+        .parse()
+        .expect("uri should parse");
+    let decision =
+        classify_control_route(&http::Method::GET, &uri, &headers).expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(decision.route_family.as_deref(), Some("oauth_manage"));
+    assert_eq!(decision.route_kind.as_deref(), Some("list_providers"));
+    assert_eq!(
+        decision.auth_endpoint_signature.as_deref(),
+        Some("admin:oauth")
+    );
+    assert!(!decision.is_execution_runtime_candidate());
+}
+
+#[test]
+fn classifies_admin_oauth_get_provider_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/oauth/providers/linuxdo"
+        .parse()
+        .expect("uri should parse");
+    let decision =
+        classify_control_route(&http::Method::GET, &uri, &headers).expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(decision.route_family.as_deref(), Some("oauth_manage"));
+    assert_eq!(decision.route_kind.as_deref(), Some("get_provider"));
+    assert_eq!(
+        decision.auth_endpoint_signature.as_deref(),
+        Some("admin:oauth")
+    );
+    assert!(!decision.is_execution_runtime_candidate());
+}
+
+#[test]
+fn classifies_admin_oauth_upsert_provider_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/oauth/providers/linuxdo"
+        .parse()
+        .expect("uri should parse");
+    let decision =
+        classify_control_route(&http::Method::PUT, &uri, &headers).expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(decision.route_family.as_deref(), Some("oauth_manage"));
+    assert_eq!(decision.route_kind.as_deref(), Some("upsert_provider"));
+    assert_eq!(
+        decision.auth_endpoint_signature.as_deref(),
+        Some("admin:oauth")
+    );
+    assert!(!decision.is_execution_runtime_candidate());
+}
+
+#[test]
+fn classifies_admin_oauth_delete_provider_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/oauth/providers/linuxdo"
+        .parse()
+        .expect("uri should parse");
+    let decision = classify_control_route(&http::Method::DELETE, &uri, &headers)
+        .expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(decision.route_family.as_deref(), Some("oauth_manage"));
+    assert_eq!(decision.route_kind.as_deref(), Some("delete_provider"));
+    assert_eq!(
+        decision.auth_endpoint_signature.as_deref(),
+        Some("admin:oauth")
+    );
+    assert!(!decision.is_execution_runtime_candidate());
+}
+
+#[test]
+fn classifies_admin_oauth_test_provider_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/oauth/providers/linuxdo/test"
+        .parse()
+        .expect("uri should parse");
+    let decision =
+        classify_control_route(&http::Method::POST, &uri, &headers).expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(decision.route_family.as_deref(), Some("oauth_manage"));
+    assert_eq!(decision.route_kind.as_deref(), Some("test_provider"));
+    assert_eq!(
+        decision.auth_endpoint_signature.as_deref(),
+        Some("admin:oauth")
+    );
+    assert!(!decision.is_execution_runtime_candidate());
+}
+
+#[test]
+fn classifies_admin_get_management_token_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/management-tokens/token-123"
+        .parse()
+        .expect("uri should parse");
+    let decision =
+        classify_control_route(&http::Method::GET, &uri, &headers).expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(
+        decision.route_family.as_deref(),
+        Some("management_tokens_manage")
+    );
+    assert_eq!(decision.route_kind.as_deref(), Some("get_token"));
+}
+
+#[test]
+fn classifies_admin_delete_management_token_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/management-tokens/token-123"
+        .parse()
+        .expect("uri should parse");
+    let decision = classify_control_route(&http::Method::DELETE, &uri, &headers)
+        .expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(
+        decision.route_family.as_deref(),
+        Some("management_tokens_manage")
+    );
+    assert_eq!(decision.route_kind.as_deref(), Some("delete_token"));
+}
+
+#[test]
+fn classifies_admin_toggle_management_token_status_as_admin_proxy_route() {
+    let headers = headers(&[]);
+    let uri: Uri = "/api/admin/management-tokens/token-123/status"
+        .parse()
+        .expect("uri should parse");
+    let decision = classify_control_route(&http::Method::PATCH, &uri, &headers)
+        .expect("route should classify");
+
+    assert_eq!(decision.route_class.as_deref(), Some("admin_proxy"));
+    assert_eq!(
+        decision.route_family.as_deref(),
+        Some("management_tokens_manage")
+    );
+    assert_eq!(decision.route_kind.as_deref(), Some("toggle_status"));
+}