wooo/ewoooc
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat(smoke): monitor pchome signing issuer closeout
Some checks failed
CD Pipeline / deploy (push) Has been cancelled
Details

Browse Source
This commit is contained in:
ogt
2026-07-03 09:49:00 +08:00
parent a094c6b241
commit 6ee4244079
6 changed files with 689 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
tests/test_ai_automation_metrics.py
View File

@@ -107,10 +107,10 @@ def test_system_metrics_exports_scheduled_health_summary():
Gauge,
{
"summary": {
"ok": 11,
"ok": 12,
"warning": 1,
"critical": 0,
"total": 12,
"total": 13,
"primary_human_gate_count": 0,
"writes_database_count": 0,
},
@@ -124,6 +124,7 @@ def test_system_metrics_exports_scheduled_health_summary():
{"key": "pchome_auto_policy_signing_decision_preflight", "status": "ok"},
{"key": "pchome_auto_policy_signing_decision_closeout", "status": "ok"},
{"key": "pchome_auto_policy_signing_issuer_guard", "status": "ok"},
{"key": "pchome_auto_policy_signing_issuer_closeout", "status": "ok"},
{"key": "sitewide_ui_ux_agent", "status": "ok"},
{"key": "sitewide_visual_qa", "status": "ok"},
],
@@ -131,7 +132,7 @@ def test_system_metrics_exports_scheduled_health_summary():
)
output = generate_latest(registry).decode("utf-8")
assert 'momo_ai_automation_scheduled_health_summary_total{status="ok"} 11.0' in output
assert 'momo_ai_automation_scheduled_health_summary_total{status="ok"} 12.0' in output
assert 'momo_ai_automation_scheduled_health_summary_total{status="warning"} 1.0' in output
assert (
'momo_ai_automation_scheduled_health_family_status{family="ai_automation_smoke",status="ok"} 1.0'
@@ -169,6 +170,10 @@ def test_system_metrics_exports_scheduled_health_summary():
'momo_ai_automation_scheduled_health_family_status{family="pchome_auto_policy_signing_issuer_guard",status="ok"} 1.0'
in output
)
assert (
'momo_ai_automation_scheduled_health_family_status{family="pchome_auto_policy_signing_issuer_closeout",status="ok"} 1.0'
in output
)
assert (
'momo_ai_automation_scheduled_health_family_status{family="sitewide_ui_ux_agent",status="ok"} 1.0'
in output

245
tests/test_ai_automation_smoke_service.py
View File

@@ -269,6 +269,53 @@ def _auto_policy_signing_issuer_guard_history_check(status="ok"):
}
def _auto_policy_signing_issuer_closeout_history_check(status="ok"):
return {
"name": "PChome auto-policy signing issuer closeout",
"status": status,
"summary": "PChome auto-policy signing issuer closeout 已自動完成",
"details": {
"policy": (
"read_only_pchome_growth_auto_policy_db_apply_authorization_"
"signing_issuer_closeout"
),
"result": "DB_APPLY_AUTHORIZATION_SIGNING_ISSUER_CLOSEOUT_READY",
"signing_issuer_closeout_ready_count": 1,
"signing_issuer_closeout_check_count": 12,
"signing_issuer_closeout_pass_count": 12,
"signing_issuer_closeout_waiting_count": 0,
"signing_issuer_guard_ready_count": 1,
"signing_issuer_guard_check_count": 12,
"signing_decision_input_requirement_count": 10,
"signing_decision_rejection_reason_count": 11,
"required_issuer_evidence_count": 9,
"nonsecret_authorization_claim_count": 8,
"post_apply_verifier_required_count": 1,
"same_run_truth_required_count": 1,
"reads_secret_count": 0,
"executes_sql_count": 0,
"writes_database_count": 0,
"signs_database_apply_authorization_count": 0,
"primary_human_gate_count": 0,
"manual_review_mode": "exception_only",
"payload_source": "local_contract_fixture",
"execute_fetch": True,
"outbound_network": False,
"business_data_source": False,
"ready_for_database_apply_now": False,
"issues_database_apply_authorization": False,
"signs_database_apply_authorization": False,
"secret_material_included": False,
"secret_material_required_in_preview": False,
"ready_for_future_final_signable_request_package": True,
"permits_future_final_signable_request_package_lane": True,
"next_machine_action": (
"continue_to_pchome_auto_policy_signing_execution_preflight_lane"
),
},
}
def test_event_router_smoke_reports_queued_deliveries(tmp_path, monkeypatch):
from services import ai_automation_metrics as metrics
from services import ai_automation_smoke_service as smoke
@@ -311,6 +358,7 @@ def test_collect_ai_automation_smoke_uses_worst_status(monkeypatch):
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_decision_preflight_check", lambda: smoke._check("auto-policy signing preflight", "ok", "ok"))
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_decision_closeout_check", lambda: smoke._check("auto-policy signing closeout", "ok", "ok"))
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_issuer_guard_check", lambda: smoke._check("auto-policy signing issuer guard", "ok", "ok"))
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_issuer_closeout_check", lambda: smoke._check("auto-policy signing issuer closeout", "ok", "ok"))
monkeypatch.setattr(smoke, "_ai_surface_html_readback_check", lambda: smoke._check("surface", "ok", "ok"))
monkeypatch.setattr(smoke, "_sitewide_ui_ux_agent_check", lambda: smoke._check("sitewide", "ok", "ok"))
monkeypatch.setattr(smoke, "_sitewide_visual_qa_check", lambda: smoke._check("visual", "ok", "ok"))
@@ -318,7 +366,7 @@ def test_collect_ai_automation_smoke_uses_worst_status(monkeypatch):
result = smoke.collect_ai_automation_smoke(record_history=False)
assert result["status"] == "critical"
assert result["summary"] == {"ok": 15, "warning": 1, "critical": 1, "total": 17}
assert result["summary"] == {"ok": 16, "warning": 1, "critical": 1, "total": 18}
def test_pchome_controlled_apply_drift_monitor_reports_verified_zero_drift(monkeypatch):
@@ -993,6 +1041,121 @@ def test_pchome_auto_policy_signing_issuer_guard_reports_signable_no_write_bound
)
def test_pchome_auto_policy_signing_issuer_closeout_reports_final_signable_no_write_package(monkeypatch):
from services import ai_automation_smoke_service as smoke
from services import pchome_mapping_backlog_service as backlog
captured = {}
def fake_closeout(*_args, **kwargs):
captured.update(kwargs)
return {
"policy": (
"read_only_pchome_growth_auto_policy_db_apply_authorization_"
"signing_issuer_closeout"
),
"result": "DB_APPLY_AUTHORIZATION_SIGNING_ISSUER_CLOSEOUT_READY",
"source_policy": (
"read_only_pchome_growth_auto_policy_db_apply_authorization_"
"signing_issuer_guard"
),
"summary": {
"authorization_signing_issuer_closeout_ready_count": 1,
"signing_issuer_closeout_check_count": 12,
"signing_issuer_closeout_pass_count": 12,
"signing_issuer_closeout_waiting_count": 0,
"authorization_signing_issuer_guard_ready_count": 1,
"signing_issuer_guard_check_count": 12,
"signing_decision_input_requirement_count": 10,
"signing_decision_rejection_reason_count": 11,
"required_issuer_evidence_count": 9,
"nonsecret_authorization_claim_count": 8,
"post_apply_verifier_required_count": 1,
"same_run_truth_required_count": 1,
"reads_secret_count": 0,
"executes_script_count": 0,
"executes_sql_count": 0,
"writes_database_count": 0,
"signs_database_apply_authorization_count": 0,
"primary_human_gate_count": 0,
"manual_review_required_count": 0,
},
"future_authorization_signing_issuer_closeout": {
"ready_for_future_signing_issuer_closeout": True,
"can_enter_future_final_signable_request_package_lane": True,
"ready_for_database_apply_now": False,
"issues_database_apply_authorization": False,
"signs_database_apply_authorization": False,
},
"final_signable_request_package": {
"authorization_material_type": "final_signable_request_package",
"ready_for_future_final_signable_request_package": True,
"ready_for_database_apply_now": False,
"issues_database_apply_authorization": False,
"signs_database_apply_authorization": False,
"hash_matches": True,
"requires_post_apply_verifier": True,
"requires_fresh_production_truth_in_same_run": True,
"secret_material_included": False,
"secret_material_required_in_preview": False,
"reads_secret_in_preview": False,
"executes_sql_in_preview": False,
"writes_database_in_preview": False,
},
"signing_issuer_closeout_contract": {
"machine_verifiable": True,
"permits_future_final_signable_request_package_lane": True,
"issues_database_apply_authorization": False,
"ready_for_database_apply_now": False,
"signs_database_apply_authorization": False,
"writes_database": False,
"secret_material_required_in_preview": False,
},
"safety": {
"reads_secret_in_preview": False,
"executes_script": False,
"executes_endpoint": False,
"executes_migration": False,
"executes_sql": False,
"writes_database": False,
"signs_database_apply_authorization": False,
"manual_review_mode": "exception_only",
},
}
monkeypatch.setattr(
backlog,
"build_pchome_auto_policy_db_apply_authorization_signing_issuer_closeout",
fake_closeout,
)
result = smoke._pchome_auto_policy_signing_issuer_closeout_check()
assert result["status"] == "ok"
assert captured["execute_fetch"] is True
assert captured["http_get"] is smoke._pchome_auto_policy_machine_fetch_evidence_get
assert result["details"]["signing_issuer_closeout_pass_count"] == 12
assert result["details"]["signing_issuer_guard_check_count"] == 12
assert result["details"]["signing_decision_input_requirement_count"] == 10
assert result["details"]["signing_decision_rejection_reason_count"] == 11
assert result["details"]["payload_source"] == "local_contract_fixture"
assert result["details"]["machine_fetch_evidence_source"] == "local_schema_fixture"
assert result["details"]["outbound_network"] is False
assert result["details"]["business_data_source"] is False
assert result["details"]["primary_human_gate_count"] == 0
assert result["details"]["writes_database_count"] == 0
assert result["details"]["signs_database_apply_authorization_count"] == 0
assert result["details"]["issues_database_apply_authorization"] is False
assert result["details"]["signs_database_apply_authorization"] is False
assert result["details"]["secret_material_included"] is False
assert result["details"]["secret_material_required_in_preview"] is False
assert result["details"]["ready_for_future_final_signable_request_package"] is True
assert result["details"]["permits_future_final_signable_request_package_lane"] is True
assert result["details"]["next_machine_action"] == (
"continue_to_pchome_auto_policy_signing_execution_preflight_lane"
)
def test_collect_ai_automation_smoke_persists_recent_history(tmp_path, monkeypatch):
from services import ai_automation_smoke_service as smoke
@@ -1013,6 +1176,7 @@ def test_collect_ai_automation_smoke_persists_recent_history(tmp_path, monkeypat
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_decision_preflight_check", lambda: smoke._check("auto-policy signing preflight", "ok", "ok"))
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_decision_closeout_check", lambda: smoke._check("auto-policy signing closeout", "ok", "ok"))
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_issuer_guard_check", lambda: smoke._check("auto-policy signing issuer guard", "ok", "ok"))
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_issuer_closeout_check", lambda: smoke._check("auto-policy signing issuer closeout", "ok", "ok"))
monkeypatch.setattr(smoke, "_ai_surface_html_readback_check", lambda: smoke._check("surface", "ok", "ok"))
monkeypatch.setattr(smoke, "_sitewide_ui_ux_agent_check", lambda: smoke._check("sitewide", "ok", "ok"))
monkeypatch.setattr(smoke, "_sitewide_visual_qa_check", lambda: smoke._check("visual", "ok", "ok"))
@@ -1071,7 +1235,7 @@ def test_scheduled_automation_health_summary_reads_history_without_side_effects(
json.dumps({
"generated_at": datetime.now().isoformat(timespec="seconds"),
"status": "ok",
"summary": {"ok": 17, "warning": 0, "critical": 0, "total": 17},
"summary": {"ok": 18, "warning": 0, "critical": 0, "total": 18},
"checks": [
{
"name": "PChome 受控落地 drift monitor",
@@ -1092,6 +1256,7 @@ def test_scheduled_automation_health_summary_reads_history_without_side_effects(
_auto_policy_signing_decision_preflight_history_check(),
_auto_policy_signing_decision_closeout_history_check(),
_auto_policy_signing_issuer_guard_history_check(),
_auto_policy_signing_issuer_closeout_history_check(),
{
"name": "AI surface HTML readback",
"status": "ok",
@@ -1153,7 +1318,7 @@ def test_scheduled_automation_health_summary_reads_history_without_side_effects(
)
assert summary["policy"] == "read_only_ai_automation_scheduled_health_summary"
assert summary["status"] == "ok"
assert summary["summary"]["total"] == 14
assert summary["summary"]["total"] == 15
assert summary["summary"]["primary_human_gate_count"] == 0
assert summary["summary"]["writes_database_count"] == 0
assert pchome_family["status"] == "ok"
@@ -1259,6 +1424,60 @@ def test_scheduled_automation_health_summary_reads_history_without_side_effects(
assert signing_issuer_guard_family["details"]["secret_material_included"] is False
assert signing_issuer_guard_family["details"]["secret_material_required_in_preview"] is False
assert signing_issuer_guard_family["details"]["ready_for_future_signable_request_boundary"] is True
signing_issuer_closeout_family = next(
item for item in summary["families"]
if item["key"] == "pchome_auto_policy_signing_issuer_closeout"
)
assert signing_issuer_closeout_family["status"] == "ok"
assert (
signing_issuer_closeout_family["details"]["signing_issuer_closeout_pass_count"]
== 12
)
assert (
signing_issuer_closeout_family["details"]["signing_issuer_guard_check_count"]
== 12
)
assert (
signing_issuer_closeout_family["details"][
"signing_decision_input_requirement_count"
]
== 10
)
assert (
signing_issuer_closeout_family["details"][
"signing_decision_rejection_reason_count"
]
== 11
)
assert (
signing_issuer_closeout_family["details"]["payload_source"]
== "local_contract_fixture"
)
assert signing_issuer_closeout_family["details"]["outbound_network"] is False
assert signing_issuer_closeout_family["details"]["business_data_source"] is False
assert signing_issuer_closeout_family["details"]["primary_human_gate_count"] == 0
assert signing_issuer_closeout_family["details"]["writes_database_count"] == 0
assert (
signing_issuer_closeout_family["details"][
"signs_database_apply_authorization_count"
]
== 0
)
assert (
signing_issuer_closeout_family["details"]["signs_database_apply_authorization"]
is False
)
assert signing_issuer_closeout_family["details"]["secret_material_included"] is False
assert (
signing_issuer_closeout_family["details"]["secret_material_required_in_preview"]
is False
)
assert (
signing_issuer_closeout_family["details"][
"ready_for_future_final_signable_request_package"
]
is True
)
surface_family = next(
item for item in summary["families"]
if item["key"] == "ai_surface_html_readback"
@@ -1293,7 +1512,7 @@ def test_scheduled_automation_health_summary_can_use_current_smoke_without_recor
current_smoke = {
"generated_at": "2026-07-02T12:00:00",
"status": "critical",
"summary": {"ok": 16, "warning": 0, "critical": 1, "total": 17},
"summary": {"ok": 17, "warning": 0, "critical": 1, "total": 18},
"checks": [
{
"name": "PChome 受控落地 drift monitor",
@@ -1308,6 +1527,7 @@ def test_scheduled_automation_health_summary_can_use_current_smoke_without_recor
_auto_policy_signing_decision_preflight_history_check(),
_auto_policy_signing_decision_closeout_history_check(),
_auto_policy_signing_issuer_guard_history_check(),
_auto_policy_signing_issuer_closeout_history_check(),
{
"name": "AI surface HTML readback",
"status": "ok",
@@ -1363,7 +1583,7 @@ def test_scheduled_automation_health_summary_falls_back_to_visual_qa_artifact(tm
json.dumps({
"generated_at": datetime.now().isoformat(timespec="seconds"),
"status": "ok",
"summary": {"ok": 15, "warning": 0, "critical": 0, "total": 15},
"summary": {"ok": 16, "warning": 0, "critical": 0, "total": 16},
"checks": [],
}, ensure_ascii=False) + "\n",
encoding="utf-8",
@@ -1404,6 +1624,11 @@ def test_scheduled_automation_health_summary_falls_back_to_visual_qa_artifact(tm
"_pchome_auto_policy_signing_issuer_guard_check",
lambda: _auto_policy_signing_issuer_guard_history_check(),
)
monkeypatch.setattr(
smoke,
"_pchome_auto_policy_signing_issuer_closeout_check",
lambda: _auto_policy_signing_issuer_closeout_history_check(),
)
monkeypatch.setattr(
surface_service,
"build_sitewide_visual_qa_readback",
@@ -1452,7 +1677,7 @@ def test_scheduled_automation_health_summary_route_returns_compact_payload(tmp_p
json.dumps({
"generated_at": datetime.now().isoformat(timespec="seconds"),
"status": "ok",
"summary": {"ok": 16, "warning": 0, "critical": 0, "total": 16},
"summary": {"ok": 17, "warning": 0, "critical": 0, "total": 17},
"checks": [],
}, ensure_ascii=False) + "\n",
encoding="utf-8",
@@ -1493,6 +1718,11 @@ def test_scheduled_automation_health_summary_route_returns_compact_payload(tmp_p
"_pchome_auto_policy_signing_issuer_guard_check",
lambda: _auto_policy_signing_issuer_guard_history_check(),
)
monkeypatch.setattr(
smoke,
"_pchome_auto_policy_signing_issuer_closeout_check",
lambda: _auto_policy_signing_issuer_closeout_history_check(),
)
app = Flask(__name__)
with app.test_request_context(
@@ -1723,6 +1953,7 @@ def test_surface_html_readback_check_is_part_of_ai_smoke(monkeypatch):
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_decision_preflight_check", lambda: smoke._check("auto-policy signing preflight", "ok", "ok"))
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_decision_closeout_check", lambda: smoke._check("auto-policy signing closeout", "ok", "ok"))
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_issuer_guard_check", lambda: smoke._check("auto-policy signing issuer guard", "ok", "ok"))
monkeypatch.setattr(smoke, "_pchome_auto_policy_signing_issuer_closeout_check", lambda: smoke._check("auto-policy signing issuer closeout", "ok", "ok"))
monkeypatch.setattr(smoke, "_sitewide_visual_qa_check", lambda: smoke._check(
"Sitewide visual QA readback",
"ok",
@@ -1744,7 +1975,7 @@ def test_surface_html_readback_check_is_part_of_ai_smoke(monkeypatch):
item for item in result["checks"]
if item["name"] == "Sitewide visual QA readback"
)
assert result["summary"]["total"] == 17
assert result["summary"]["total"] == 18
assert surface_check["status"] == "ok"
assert surface_check["details"]["checked_surface_count"] == 10
assert sitewide_check["status"] == "ok"