106 lines
5.7 KiB
JavaScript
106 lines
5.7 KiB
JavaScript
import { spawnSync } from "node:child_process";
|
|
import { createHash } from "node:crypto";
|
|
import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
|
|
import { resolve } from "node:path";
|
|
|
|
const runId = process.env.DADA_TDD_RUN_ID ?? `wp7-04-amap-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
|
|
const runDirectory = resolve("artifacts", "tdd", runId);
|
|
const caseDirectory = resolve(runDirectory, "cases", "TDD-WP7-EXT-003-real-amap");
|
|
if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
|
|
mkdirSync(caseDirectory, { recursive: true });
|
|
|
|
function run(command, args) {
|
|
const startedAt = new Date().toISOString();
|
|
const executable = process.platform === "win32" ? (process.env.ComSpec ?? "cmd.exe") : command;
|
|
const actualArgs = process.platform === "win32" ? ["/d", "/s", "/c", [command, ...args].join(" ")] : args;
|
|
const result = spawnSync(executable, actualArgs, { encoding: "utf8" });
|
|
return {
|
|
command: [command, ...args].join(" "),
|
|
exit_code: result.status ?? 1,
|
|
finished_at: new Date().toISOString(),
|
|
stderr: result.stderr ?? "",
|
|
stdout: result.stdout ?? "",
|
|
started_at: startedAt,
|
|
};
|
|
}
|
|
|
|
const build = run("pnpm", ["build:workspace-packages"]);
|
|
const contract = build.exit_code === 0
|
|
? run("pnpm", ["exec", "vitest", "run", "tests/api/wp4-04-location.test.ts", "tests/api/wp6-03-services.test.ts"])
|
|
: { command: "pnpm exec vitest run tests/api/wp4-04-location.test.ts tests/api/wp6-03-services.test.ts", exit_code: 1, finished_at: new Date().toISOString(), started_at: new Date().toISOString() };
|
|
const supervisorBuild = run("dotnet", ["build", "supervisor/Dada.Supervisor/Dada.Supervisor.csproj", "--configuration", "Release"]);
|
|
const supervisorExe = resolve("supervisor", "Dada.Supervisor", "bin", "Release", "net8.0-windows", "Dada.Supervisor.exe");
|
|
const external = supervisorBuild.exit_code === 0 && existsSync(supervisorExe)
|
|
? run(supervisorExe, ["secrets", "probe", "api-amap"])
|
|
: { command: `${supervisorExe} secrets probe api-amap`, exit_code: 3, finished_at: new Date().toISOString(), started_at: new Date().toISOString(), stderr: "supervisor_probe_unavailable", stdout: "" };
|
|
const trace = run("pnpm", ["validate:tdd-trace"]);
|
|
const commands = [build, contract, external, trace].map(({ command, exit_code, finished_at, started_at }) => ({ command, exit_code, finished_at, started_at }));
|
|
const parsedExternal = (() => {
|
|
try { return JSON.parse(external.stdout.trim().split(/\r?\n/).at(-1) ?? ""); } catch { return { status: "invalid_output" }; }
|
|
})();
|
|
const probePassed = external.exit_code === 0 && parsedExternal.code === "amap_probe_passed" && parsedExternal.real_calls === 2;
|
|
const blocker = probePassed ? "manual_acceptance_required" : (parsedExternal.code ?? "real_amap_validation_failed");
|
|
const contractPassed = contract.exit_code === 0;
|
|
const tracePassed = trace.exit_code === 0;
|
|
writeFileSync(resolve(caseDirectory, "amap-contract.json"), `${JSON.stringify({
|
|
checks: {
|
|
location_and_reverse_geocode: probePassed ? "real_probe_passed" : "not_verified",
|
|
qps_and_allowlist: "not_verified",
|
|
security_binding: "not_verified",
|
|
dyn004_hard_stop: "contract_passed",
|
|
monthly_hard_limit_1000: "not_verified",
|
|
},
|
|
mode: probePassed ? "controlled_real" : "blocked",
|
|
real_calls: parsedExternal.real_calls ?? 0,
|
|
status: "externally_blocked",
|
|
blocker,
|
|
schema_version: "1.0",
|
|
}, null, 2)}\n`);
|
|
writeFileSync(resolve(caseDirectory, "external-calls.json"), `${JSON.stringify({
|
|
blocker,
|
|
mode: probePassed ? "controlled_real" : "blocked",
|
|
real_calls: parsedExternal.real_calls ?? 0,
|
|
service: "amap",
|
|
source_command_status: parsedExternal.code ?? "unknown",
|
|
status: "externally_blocked",
|
|
schema_version: "1.0",
|
|
}, null, 2)}\n`);
|
|
writeFileSync(resolve(caseDirectory, "redaction.json"), `${JSON.stringify({
|
|
findings: [],
|
|
stored_fields: ["service", "status", "logical_limit", "evidence_sha256"],
|
|
forbidden_fields_present: false,
|
|
status: "passed",
|
|
schema_version: "1.0",
|
|
}, null, 2)}\n`);
|
|
writeFileSync(resolve(caseDirectory, "manual-review.json"), `${JSON.stringify({
|
|
blocker,
|
|
required_before_release: probePassed ? ["security_binding", "allowlist_confirmation", "qps_and_1000_call_hard_stop"] : ["controlled_amap_key", "security_binding", "allowlist_confirmation", "real_location_and_reverse_geocode", "qps_and_1000_call_hard_stop"],
|
|
status: "externally_blocked",
|
|
schema_version: "1.0",
|
|
}, null, 2)}\n`);
|
|
const result = {
|
|
acceptance_criteria: ["AC-17", "AC-41", "AC-47"],
|
|
automation: ["controlled_real", "manual_review"],
|
|
blocker,
|
|
contract_regression: contractPassed ? "passed" : "failed",
|
|
external_calls: parsedExternal.real_calls ?? 0,
|
|
finished_at: new Date().toISOString(),
|
|
manifest: { path: "tasks.manifest.json", sha256: createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase() },
|
|
missing_evidence: [],
|
|
parent_family: "TDD-WP7-EXT-003",
|
|
phase: "green",
|
|
release_gate: ["release:P0-A"],
|
|
requirements: ["DYN-04", "PRIV-03"],
|
|
run_id: runId,
|
|
schema_version: "1.0",
|
|
status: contractPassed && tracePassed ? "externally_blocked" : "failed",
|
|
task_id: "TASK-WP7-04",
|
|
test_id: "TDD-WP7-EXT-003-real-amap",
|
|
work_package: "WP-7",
|
|
};
|
|
writeFileSync(resolve(caseDirectory, "commands.json"), `${JSON.stringify({ commands, run_id: runId, schema_version: "1.0" }, null, 2)}\n`);
|
|
writeFileSync(resolve(caseDirectory, "result.json"), `${JSON.stringify(result, null, 2)}\n`);
|
|
writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify({ cases: [{ status: result.status, test_id: result.test_id }], run_id: runId, status: result.status, schema_version: "1.0" }, null, 2)}\n`);
|
|
console.log(JSON.stringify(result, null, 2));
|
|
if (result.status === "failed") process.exit(1);
|