refactor(config): deduplicate exec helpers between secret-store, writer and config-resolver
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
- 难度
- 3/5
- 预计耗时
- 1-2 天
- 新手友好度
- 20/100
- Issue 类型
- 重构
- 描述清晰度
- 基本清楚
- 活跃度
- 活跃
- 技术栈
- typescript
- 领域
- cli
调研方向
Start by diffing src/config/secret-store.ts, src/config/writer.ts and packages/config-resolver/src/index.ts to confirm the duplicated helpers (shellEscape, psEncodedCommand, PRINTABLE_ASCII_RE, execOpts, the _testSetExecSync/_testSetPlatform seams). The issue says not to start until #664 and the icacls-to-execFile change for writer.ts have landed, so re-check those first. Done means no helper body is defined in more than one file, existing tests pass with only import paths changed, and the lazy load in loader.ts is preserved.
由索引模型根据 Issue 内容生成。
描述
Summary
Process-exec helpers are copy-pasted across three files. Diffed and confirmed byte-identical:
shellEscapeandpsEncodedCommand:src/config/secret-store.ts:88-95andpackages/config-resolver/src/index.ts:139-146.PRINTABLE_ASCII_RE:secret-store.ts:57andconfig-resolver/src/index.ts:184.execOpts:config-resolver/src/index.ts:135-137andsrc/config/writer.ts:59-61are identical.secret-store.ts:77-86is the same with an optionalinput._execSync/_platformplus the_testSetExecSync/_testSetPlatformseams:secret-store.ts:125-148,config-resolver/src/index.ts:132-133,341-351,writer.ts:42-57.
secret-store.ts also defines spawnOpts (L110-119). Its body is identical to execOpts (L77-86); only the return type differs. The security -w … doc comment at L101-106 describes the spawnSync(SETSID_PERL, …) call in MacKeychainStore.put (~L184-195), but it is attached to the SETSID_PERL constant.
Sequencing (do NOT start yet)
- After #664's fix. This comment proposes moving
secret-store.tstoexecFile/spawnargv. That deletes every POSIXshellEscapeuse in that file (L214, 239, 252, 283, 294) and probablyexecOpts/spawnOptsas they are today. - After the icacls →
execFilePR forwriter.ts.writer.tsonly uses_execSyncforicacls(L238). Once that change lands, itsexecOptscopy and_testSetExecSyncseam either go away or change shape.
What remains after both
These are estimates and depend on how #664 lands:
psEncodedCommand(4 lines) is still in bothsecret-store.ts(Windows Credential Manager: L313, 330, 342) andconfig-resolver(L297).PRINTABLE_ASCII_RE(1 line) is in both.shellEscapestays only inconfig-resolver(L215, 238, 264) unless the resolver also moves to argv. It would then no longer be duplicated.- The
_testSetExecSync/_testSetPlatformseams (~10 lines) remain in each file that still shells out.
That leaves roughly 15-25 duplicated lines in total. This is low priority. Once the prerequisites land, re-run the diff first. If only psEncodedCommand and the regex are left, it may be cheaper to leave them and close this issue.
Proposal
- Export
psEncodedCommand(andPRINTABLE_ASCII_RE, plus the exec options builder if one survives) from@elastic/config-resolver, which is already a workspace dependency, and import them insecret-store.ts. Don't add asrc/lib/proc.ts: the package can't import fromsrc/, so the package has to be the source. - Keep it a cheap import.
loader.ts:31,381lazy-loads@elastic/config-resolverto keep the help path fast.secret-store.tsis only reached fromconfigcommands andcloud/credentials.ts, so a static import there should be fine. Check this against ARCHITECTURE.md before merging. - Collapse
execOpts/spawnOptsinto one builder if both still exist. - Move the
security -wcomment onto thespawnSynccall it describes.
Acceptance criteria
- No helper function body is defined in more than one of
src/config/secret-store.ts,src/config/writer.ts,packages/config-resolver/src/index.ts. - At most one exec options builder in
secret-store.ts. - The
security -wcomment sits next to thespawnSynccall inMacKeychainStore.put. - No behavior change. Existing secret-store, writer and config-resolver tests pass unmodified, apart from import paths.
- No regression in help-path startup time (the lazy-load in
loader.tsis preserved).
Related
#664, plus the pending icacls → execFile PR for src/config/writer.ts.
authored by Pi Coding Agent (Claude Opus 5.5)
- 主要语言
- TypeScript
- 星标
- 53
- 派生
- 28
- 平均合并
- 23 小时 41 分钟
- 30 天内合并 PR
- 44
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
elastic/cli 的其他 Issue
-
tracking
难度 2/5 1-3 小时 新手友好度 77/100
维护者通常 1 天内回复
-
feat: ship skills/elastic/SKILL.md for agent invocation可能已有人在做 @onatozmenn 于 31 天前认领。 未关闭enhancement
难度 2/5 1-3 小时 新手友好度 88/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 72/100
维护者通常 1 天内回复
-
难度 5/5 一周以上 新手友好度 35/100
维护者通常 1 天内回复
-
难度 3/5 1-2 天 新手友好度 63/100
维护者通常 1 天内回复
相似的 Issue
-
难度 1/5 1-3 小时 新手友好度 66/100
维护者通常 1 天内回复
-
area:plugins area:security area:skills bug has repro
难度 2/5 1-3 小时 新手友好度 76/100
anthropics/claude-code#105911 ·
维护者通常 1 天内回复
-
documentation good first issue help wanted
难度 2/5 1-3 小时 新手友好度 74/100
dev-five-git/devup-ui#879 ·
维护者通常 11 天内回复
-
openspec-apply-change skill: when blocked, may select a ready artifact unrelated to missingArtifacts未关闭
难度 2/5 1-3 小时 新手友好度 72/100
Fission-AI/OpenSpec#2165 ·
维护者通常 1 天内回复
-
🐞 bug 🧐 unconfirmed
难度 2/5 1-3 小时 新手友好度 66/100
Tencent/tdesign-vue-next#7032 · 1 条评论 ·
维护者通常 1 天内回复