wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

fix(telegram): close ops direct sender gaps
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Failing after 2m6s
Details
CD Pipeline / build-and-deploy (push) Has been skipped
Details
CD Pipeline / post-deploy-checks (push) Has been skipped
Details

Browse Source
This commit is contained in:
Your Name
2026-07-02 19:32:30 +08:00
parent 8cfede071b
commit b191f8e9fe
26 changed files with 330 additions and 2642 deletions
Download Patch File Download Diff File Expand all files Collapse all files

97
scripts/security/security-mirror-progress-guard.py
View File

@@ -21645,12 +21645,12 @@ def validate(root: Path) -> None:
"repo_only_scan_no_secret_value_no_telegram_send",
)
expected_telegram_notification_egress_summary = {
"direct_bot_api_file_count": 5,
"direct_bot_api_call_count": 5,
"direct_bot_api_file_count": 0,
"direct_bot_api_call_count": 0,
"workflow_direct_bot_api_call_count": 0,
"ops_script_direct_bot_api_call_count": 4,
"ops_script_direct_bot_api_call_count": 0,
"ci_script_direct_bot_api_call_count": 0,
"api_direct_bot_api_call_count": 1,
"api_direct_bot_api_call_count": 0,
"gateway_normalized_callsite_count": 57,
"gateway_final_exit_formatter_present_count": 1,
"required_owner_field_count": 18,
@@ -21679,13 +21679,7 @@ def validate(root: Path) -> None:
telegram_notification_egress_inventory["summary"][key],
expected,
)
expected_telegram_direct_path_counts = {
"apps/api/src/services/channel_hub.py": 1,
"scripts/ops/backup-from-110.sh": 1,
"scripts/ops/docker-health-monitor.sh": 1,
"scripts/ops/dr-drill.sh": 1,
"scripts/ops/pg-backup.sh": 1,
}
expected_telegram_direct_path_counts: dict[str, int] = {}
actual_telegram_direct_path_counts: dict[str, int] = {}
for item in telegram_notification_egress_inventory["direct_bot_api_calls"]:
actual_telegram_direct_path_counts[item["path"]] = actual_telegram_direct_path_counts.get(item["path"], 0) + 1
@@ -21761,13 +21755,13 @@ def validate(root: Path) -> None:
"metadata_only_no_secret_value_no_telegram_send_no_workflow_change",
)
expected_telegram_egress_owner_request_summary = {
"source_direct_bot_api_call_count": 5,
"source_direct_bot_api_file_count": 5,
"request_draft_count": 5,
"source_direct_bot_api_call_count": 0,
"source_direct_bot_api_file_count": 0,
"request_draft_count": 0,
"workflow_request_draft_count": 0,
"ops_script_request_draft_count": 4,
"ops_script_request_draft_count": 0,
"ci_script_request_draft_count": 0,
"api_direct_request_draft_count": 1,
"api_direct_request_draft_count": 0,
"request_field_count": 27,
"required_owner_field_count": 19,
"preflight_check_count": 16,
@@ -21801,13 +21795,7 @@ def validate(root: Path) -> None:
telegram_notification_egress_owner_request_draft["summary"][key],
expected,
)
expected_telegram_egress_request_paths = [
"apps/api/src/services/channel_hub.py",
"scripts/ops/backup-from-110.sh",
"scripts/ops/docker-health-monitor.sh",
"scripts/ops/dr-drill.sh",
"scripts/ops/pg-backup.sh",
]
expected_telegram_egress_request_paths: list[str] = []
assert_equal(
"telegram_notification_egress_owner_request_draft.source_paths",
[item["source_path"] for item in telegram_notification_egress_owner_request_draft["request_drafts"]],
@@ -21895,22 +21883,22 @@ def validate(root: Path) -> None:
"metadata_only_no_workflow_script_api_change_no_telegram_send",
)
expected_telegram_egress_migration_plan_summary = {
"source_request_draft_count": 5,
"source_direct_bot_api_call_count": 5,
"migration_candidate_count": 5,
"source_request_draft_count": 0,
"source_direct_bot_api_call_count": 0,
"migration_candidate_count": 0,
"workflow_migration_candidate_count": 0,
"ops_script_migration_candidate_count": 4,
"api_direct_migration_candidate_count": 1,
"proposed_wave_count": 2,
"ops_script_migration_candidate_count": 0,
"api_direct_migration_candidate_count": 0,
"proposed_wave_count": 0,
"plan_field_count": 17,
"reviewer_check_count": 15,
"outcome_lane_count": 9,
"blocked_action_count": 21,
"owner_response_required_count": 5,
"maintenance_window_required_count": 5,
"rollback_owner_required_count": 5,
"postcheck_required_count": 5,
"delivery_receipt_required_count": 5,
"owner_response_required_count": 0,
"maintenance_window_required_count": 0,
"rollback_owner_required_count": 0,
"postcheck_required_count": 0,
"delivery_receipt_required_count": 0,
"owner_response_received_count": 0,
"owner_response_accepted_count": 0,
"migration_authorized_count": 0,
@@ -21934,10 +21922,7 @@ def validate(root: Path) -> None:
assert_equal(
"telegram_notification_egress_migration_plan_draft.proposed_waves",
telegram_notification_egress_migration_plan_draft["proposed_waves"],
[
"wave_2_ops_notification_wrapper",
"wave_3_api_sender_gateway",
],
[],
)
for key, value in telegram_notification_egress_migration_plan_draft["execution_boundaries"].items():
if key == "not_authorization":
@@ -22012,13 +21997,13 @@ def validate(root: Path) -> None:
"repo_source_scan_no_secret_value_no_telegram_send",
)
expected_telegram_egress_no_new_bypass_summary = {
"source_direct_bot_api_call_count": 5,
"source_direct_bot_api_file_count": 5,
"baseline_signature_count": 5,
"current_direct_bot_api_call_count": 5,
"current_direct_bot_api_file_count": 5,
"source_direct_bot_api_call_count": 0,
"source_direct_bot_api_file_count": 0,
"baseline_signature_count": 0,
"current_direct_bot_api_call_count": 0,
"current_direct_bot_api_file_count": 0,
"guarded_method_count": 9,
"sendMessage_call_count": 5,
"sendMessage_call_count": 0,
"sendDocument_call_count": 0,
"sendPhoto_call_count": 0,
"sendMediaGroup_call_count": 0,
@@ -22039,13 +22024,7 @@ def validate(root: Path) -> None:
assert_equal(
"telegram_notification_egress_no_new_bypass_guard.current_paths",
[item["path"] for item in telegram_notification_egress_no_new_bypass_guard["current_direct_bot_api_calls"]],
[
"apps/api/src/services/channel_hub.py",
"scripts/ops/backup-from-110.sh",
"scripts/ops/docker-health-monitor.sh",
"scripts/ops/dr-drill.sh",
"scripts/ops/pg-backup.sh",
],
[],
)
assert_equal(
"telegram_notification_egress_no_new_bypass_guard.new_bypass_findings",
@@ -22070,7 +22049,7 @@ def validate(root: Path) -> None:
assert_equal(
"telegram_notification_egress_owner_response_acceptance.status",
telegram_notification_egress_owner_response_acceptance["status"],
"owner_response_acceptance_ledger_ready_no_runtime_action",
"owner_response_acceptance_ledger_clear_no_direct_candidates",
)
assert_equal(
"telegram_notification_egress_owner_response_acceptance.mode",
@@ -22078,15 +22057,15 @@ def validate(root: Path) -> None:
"metadata_only_no_secret_value_no_telegram_send_no_workflow_script_api_change",
)
expected_telegram_egress_owner_response_acceptance_summary = {
"source_request_draft_count": 5,
"source_migration_candidate_count": 5,
"source_direct_bot_api_call_count": 5,
"acceptance_candidate_count": 5,
"source_request_draft_count": 0,
"source_migration_candidate_count": 0,
"source_direct_bot_api_call_count": 0,
"acceptance_candidate_count": 0,
"workflow_acceptance_candidate_count": 0,
"ops_script_acceptance_candidate_count": 4,
"api_direct_acceptance_candidate_count": 1,
"ops_script_acceptance_candidate_count": 0,
"api_direct_acceptance_candidate_count": 0,
"acceptance_field_count": 33,
"required_owner_field_count": 19,
"required_owner_field_count": 0,
"reviewer_check_count": 23,
"outcome_lane_count": 10,
"forbidden_payload_count": 14,