060122fcd6
Some checks failed
Ansible / Reboot Recovery Contract / validate (push) Waiting to run
CD Pipeline / build-and-deploy (push) Blocked by required conditions
Code Review / ai-code-review (push) Waiting to run
CD Pipeline / tests (push) Successful in 1m39s
CD Pipeline / post-deploy-checks (push) Has been cancelled
50 lines
1.7 KiB
Python
50 lines
1.7 KiB
Python
from __future__ import annotations
|
|
|
|
import json
|
|
import runpy
|
|
from pathlib import Path
|
|
|
|
|
|
ROOT = Path(__file__).resolve().parents[3]
|
|
|
|
|
|
def test_awooop_controlled_automation_copy_guard_blocks_legacy_manual_gate_text() -> None:
|
|
guard = runpy.run_path(
|
|
str(ROOT / "scripts" / "security" / "awooop-controlled-automation-copy-guard.py")
|
|
)
|
|
|
|
guard["validate"](ROOT)
|
|
|
|
|
|
def test_awooop_controlled_automation_copy_guard_blocks_live_owner_review_copy(tmp_path: Path) -> None:
|
|
guard = runpy.run_path(
|
|
str(ROOT / "scripts" / "security" / "awooop-controlled-automation-copy-guard.py")
|
|
)
|
|
messages_path = tmp_path / "apps" / "web" / "messages" / "zh-TW.json"
|
|
messages_path.parent.mkdir(parents=True)
|
|
messages_path.write_text(
|
|
json.dumps({"awooop": {"workItems": {"status": "Owner Review 等待人工"}}}),
|
|
encoding="utf-8",
|
|
)
|
|
|
|
violations = guard["_collect_awooop_message_violations"](messages_path, tmp_path)
|
|
|
|
assert any("Owner Review" in violation for violation in violations)
|
|
assert any("等待人工" in violation for violation in violations)
|
|
|
|
|
|
def test_awooop_controlled_automation_copy_guard_allows_legacy_hitl_history(tmp_path: Path) -> None:
|
|
guard = runpy.run_path(
|
|
str(ROOT / "scripts" / "security" / "awooop-controlled-automation-copy-guard.py")
|
|
)
|
|
messages_path = tmp_path / "apps" / "web" / "messages" / "zh-TW.json"
|
|
messages_path.parent.mkdir(parents=True)
|
|
messages_path.write_text(
|
|
json.dumps({"awooop": {"approvals": {"legacyHitl": {"title": "既有 HITL 待人工處理"}}}}),
|
|
encoding="utf-8",
|
|
)
|
|
|
|
violations = guard["_collect_awooop_message_violations"](messages_path, tmp_path)
|
|
|
|
assert violations == []
|