intelligrow/tyx_AI_xhs
6
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat: add controlled Amap credential probe
Dada P0-A isolated Windows CI / validate-and-package (push) Failing after 1m0s
Details

Browse Source
This commit is contained in:
suyx
2026-08-04 14:52:23 +08:00
parent d474768a2b
commit 4ec8327f5e
3 changed files with 77 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/run-wp7-04-validation.mjs
+17 -12
View File
@@ -28,35 +28,40 @@ const build = run("pnpm", ["build:workspace-packages"]);
const contract = build.exit_code === 0
? run("pnpm", ["exec", "vitest", "run", "tests/api/wp4-04-location.test.ts", "tests/api/wp6-03-services.test.ts"])
: { command: "pnpm exec vitest run tests/api/wp4-04-location.test.ts tests/api/wp6-03-services.test.ts", exit_code: 1, finished_at: new Date().toISOString(), started_at: new Date().toISOString() };
const external = run("pnpm", ["validate:external", "--", "--service", "amap", "--run-id", runId]);
const supervisorBuild = run("dotnet", ["build", "supervisor/Dada.Supervisor/Dada.Supervisor.csproj", "--configuration", "Release"]);
const supervisorExe = resolve("supervisor", "Dada.Supervisor", "bin", "Release", "net8.0-windows", "Dada.Supervisor.exe");
const external = supervisorBuild.exit_code === 0 && existsSync(supervisorExe)
? run(supervisorExe, ["secrets", "probe", "api-amap"])
: { command: `${supervisorExe} secrets probe api-amap`, exit_code: 3, finished_at: new Date().toISOString(), started_at: new Date().toISOString(), stderr: "supervisor_probe_unavailable", stdout: "" };
const trace = run("pnpm", ["validate:tdd-trace"]);
const commands = [build, contract, external, trace].map(({ command, exit_code, finished_at, started_at }) => ({ command, exit_code, finished_at, started_at }));
const parsedExternal = (() => {
try { return JSON.parse(external.stdout.trim()); } catch { return { status: "invalid_output" }; }
try { return JSON.parse(external.stdout.trim().split(/\r?\n/).at(-1) ?? ""); } catch { return { status: "invalid_output" }; }
})();
const blocker = "real_amap_credentials_absent";
const probePassed = external.exit_code === 0 && parsedExternal.code === "amap_probe_passed" && parsedExternal.real_calls === 2;
const blocker = probePassed ? "manual_acceptance_required" : (parsedExternal.code ?? "real_amap_validation_failed");
const contractPassed = contract.exit_code === 0;
const tracePassed = trace.exit_code === 0;
writeFileSync(resolve(caseDirectory, "amap-contract.json"), `${JSON.stringify({
checks: {
location_and_reverse_geocode: "mock_contract_passed",
location_and_reverse_geocode: probePassed ? "real_probe_passed" : "not_verified",
qps_and_allowlist: "not_verified",
security_binding: "not_verified",
dyn004_hard_stop: "mock_contract_passed",
dyn004_hard_stop: "contract_passed",
monthly_hard_limit_1000: "not_verified",
},
mode: "controlled_real",
real_calls: 0,
mode: probePassed ? "controlled_real" : "blocked",
real_calls: parsedExternal.real_calls ?? 0,
status: "externally_blocked",
blocker,
schema_version: "1.0",
}, null, 2)}\n`);
writeFileSync(resolve(caseDirectory, "external-calls.json"), `${JSON.stringify({
blocker,
mode: parsedExternal.mode ?? "mock",
real_calls: 0,
mode: probePassed ? "controlled_real" : "blocked",
real_calls: parsedExternal.real_calls ?? 0,
service: "amap",
source_command_status: parsedExternal.status ?? "unknown",
source_command_status: parsedExternal.code ?? "unknown",
status: "externally_blocked",
schema_version: "1.0",
}, null, 2)}\n`);
@@ -69,7 +74,7 @@ writeFileSync(resolve(caseDirectory, "redaction.json"), `${JSON.stringify({
}, null, 2)}\n`);
writeFileSync(resolve(caseDirectory, "manual-review.json"), `${JSON.stringify({
blocker,
required_before_release: ["controlled_amap_key", "security_binding", "allowlist_confirmation", "real_location_and_reverse_geocode", "qps_and_1000_call_hard_stop"],
required_before_release: probePassed ? ["security_binding", "allowlist_confirmation", "qps_and_1000_call_hard_stop"] : ["controlled_amap_key", "security_binding", "allowlist_confirmation", "real_location_and_reverse_geocode", "qps_and_1000_call_hard_stop"],
status: "externally_blocked",
schema_version: "1.0",
}, null, 2)}\n`);
@@ -78,7 +83,7 @@ const result = {
automation: ["controlled_real", "manual_review"],
blocker,
contract_regression: contractPassed ? "passed" : "failed",
external_calls: 0,
external_calls: parsedExternal.real_calls ?? 0,
finished_at: new Date().toISOString(),
manifest: { path: "tasks.manifest.json", sha256: createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase() },
missing_evidence: [],