From ebfef40bb3fd363079af1862c1fda9b0de970e63 Mon Sep 17 00:00:00 2001 From: ogt Date: Fri, 10 Jul 2026 12:26:59 +0800 Subject: [PATCH] feat(ai): add PixelRAG marketplace embedding signature guard replay --- config.py | 2 +- docs/AI_INTELLIGENCE_MODULE_SOT.md | 4 +- .../ai_automation_mainline_work_items.md | 3 +- docs/guides/browse_sh_crawler_playbook.md | 4 + routes/system_public_routes.py | 37 + ...tplace_embedding_signature_guard_replay.py | 77 +++ services/ai_automation_smoke_service.py | 166 +++++ ...mbedding_signature_guard_replay_service.py | 651 ++++++++++++++++++ tests/test_ai_automation_smoke_service.py | 40 +- ...mbedding_signature_guard_replay_service.py | 332 +++++++++ 10 files changed, 1309 insertions(+), 7 deletions(-) create mode 100755 scripts/ops/run_pixelrag_marketplace_embedding_signature_guard_replay.py create mode 100644 services/pixelrag_marketplace_embedding_signature_guard_replay_service.py create mode 100644 tests/test_pixelrag_marketplace_embedding_signature_guard_replay_service.py diff --git a/config.py b/config.py index 1446b6a..387623e 100644 --- a/config.py +++ b/config.py @@ -402,7 +402,7 @@ YOUTUBE_API_KEY = os.getenv('YOUTUBE_API_KEY', '') # ========================================== # 系統版本與路徑 # ========================================== -SYSTEM_VERSION = "V10.768" +SYSTEM_VERSION = "V10.769" LOG_FILE_PATH = os.path.join(BASE_DIR, 'logs/system.log') public_url = PUBLIC_URL # 用於模板顯示 diff --git a/docs/AI_INTELLIGENCE_MODULE_SOT.md b/docs/AI_INTELLIGENCE_MODULE_SOT.md index b37f60c..ffdd70c 100644 --- a/docs/AI_INTELLIGENCE_MODULE_SOT.md +++ b/docs/AI_INTELLIGENCE_MODULE_SOT.md @@ -2,7 +2,7 @@ > **最後更新**: 2026-07-10 (台北時間) > **狀態**: 🟢 四 AI Agent 自動化閉環已落地；LLM 路由紅線升級為 Ollama-first 三主機級聯；PChome 後台業績匯入韌性已補強；產品定位正名為「PChome 業績成長自動化作戰系統」；外部市場來源正規化層、自動同步、作戰清單與價格參考表優先讀取、CSV 備援預檢、前台操作入口、高可見頁面繁中化守門、比價/作戰 UI 工作台化、AI 密集工作台文字密度守門、跨平台來源治理、商品身份 UI 契約、sitewide visual QA runtime readback、external MCP/RAG integration monitoring、PixelRAG RAG candidate replay monitoring、PixelRAG OCR/VLM replay contract monitoring、PixelRAG application portfolio、PChome auto-policy authorization guard monitoring、decision preflight machine evidence monitoring、decision closeout monitoring、authorization issuer gate monitoring、signing decision preflight monitoring、signing decision closeout monitoring、signing issuer guard monitoring、signing issuer closeout monitoring、signing execution preflight monitoring、signing execution closeout monitoring、signed receipt preflight monitoring、signed receipt closeout monitoring、signed receipt evidence intake monitoring、detached verification evidence validation monitoring、verifier receipt closeout monitoring、authorization evidence execution preflight monitoring、authorization evidence execution closeout monitoring、controlled apply final preflight monitoring、controlled dry-run package monitoring 與 controlled dry-run receipt closeout monitoring 已建立，GCP embedding 熔斷延後處理、110 proxy rescue 與 direct host health skip 已建立 -> **適用版本**: V10.768 +> **適用版本**: V10.769 --- @@ -124,6 +124,7 @@ - 2026-07-10 起 PixelRAG marketplace source-contract adapter dry-run 必須是正式 smoke/scheduled family：`/api/ai-automation/pixelrag-marketplace-source-contract-adapter-dry-run` 與 `scripts/ops/run_pixelrag_marketplace_source_contract_adapter_dry_run.py` 預設只讀 adapter preflight receipts 並做 deterministic mapping readiness；`execute=true&write_receipt=true` 只寫 `marketplace_adapter_dry_run_receipt.json` artifact，輸出 field contracts、offer candidate contracts、identity matcher / PromotionGate / embedding signature gates 與 no-write 邊界。此 worker 不抓外站、不呼叫模型、不讀 secret/cookie/session、不寫 DB、不寫 `ai_insights`、不寫正式價格表；dry-run receipt 只允許進 identity matcher replay，不得直接進價格表或候選知識層。 - 2026-07-10 起 PixelRAG marketplace identity matcher replay 必須是正式 smoke/scheduled family：`/api/ai-automation/pixelrag-marketplace-identity-matcher-replay` 與 `scripts/ops/run_pixelrag_marketplace_identity_matcher_replay.py` 預設只讀 adapter dry-run receipts 並產生 deterministic identity key / match contract；`execute=true&write_receipt=true` 只寫 `marketplace_identity_matcher_replay_receipt.json` artifact，輸出 identity candidate contracts、source provenance、PromotionGate readiness 與 no-write 邊界。此 worker 不抓外站、不呼叫模型、不讀 secret/cookie/session、不寫 DB、不寫 `ai_insights`、不寫正式價格表；identity replay receipt 只允許進 PromotionGate replay，不得直接進價格表或候選知識層。 - 2026-07-10 起 PixelRAG marketplace PromotionGate replay 必須是正式 smoke/scheduled family：`/api/ai-automation/pixelrag-marketplace-promotion-gate-replay` 與 `scripts/ops/run_pixelrag_marketplace_promotion_gate_replay.py` 預設只讀 identity matcher receipts 並產生 deterministic PromotionGate contract；`execute=true&write_receipt=true` 只寫 `marketplace_promotion_gate_replay_receipt.json` artifact，輸出 promotion candidate contracts、embedding signature guard readiness、source provenance 與 no-write 邊界。此 worker 不抓外站、不呼叫模型、不讀 secret/cookie/session、不寫 DB、不寫 `ai_insights`、不寫正式價格表；PromotionGate receipt 只允許進 embedding signature guard replay，不得直接進價格表或候選知識層。 +- 2026-07-10 起 PixelRAG marketplace embedding signature guard replay 必須是正式 smoke/scheduled family：`/api/ai-automation/pixelrag-marketplace-embedding-signature-guard-replay` 與 `scripts/ops/run_pixelrag_marketplace_embedding_signature_guard_replay.py` 預設只讀 PromotionGate receipts 並產生 deterministic embedding signature guard contract；`execute=true&write_receipt=true` 只寫 `marketplace_embedding_signature_guard_replay_receipt.json` artifact，輸出 expected embedding signature、signature guard contracts、candidate knowledge replay readiness 與 no-write 邊界。此 worker 不產生 embedding、不抓外站、不呼叫模型、不讀 secret/cookie/session、不寫 DB、不寫 `ai_insights`、不寫正式價格表；embedding signature guard receipt 只允許進 candidate knowledge replay，不得直接進價格表或正式知識層。 - 2026-07-02 起 `/ai_intelligence` 商品明細與單品作戰詳情的四格價格證據必須可測：PChome 價格、MOMO 參考價、差距、可信度需以 `data-evidence` 固定，並以 `aria-label="價格證據"` 對應可掃描區塊；候選待確認或缺資料只能顯示「候選待確認 / 待補」，不得捏造價格或讓使用者打開 raw payload 才知道判斷依據。 - 2026-07-02 起 `/ai_intelligence` 必須是密集 AI 工作台，不得退回大段文字說明頁：首屏與明細可見內容只保留短狀態、數字、四格證據與下一步按鈕；KPI note、benchmark detail、alert 副句、策略說明、decision copy、來源長句與單品 reason list 不得佔用第一層視覺。`tests/test_ai_intelligence_text_density_guardrails.py` 必須鎖住 `data-density-guardrail="compact-ai-workbench"`、短任務文案、detail meta 與 hidden explanatory copy。 - 2026-07-02 起 `/observability/overview` 也必須採密集 AI 觀測工作台：首屏以 `data-density-guardrail="compact-observability-workbench"`、`AI 觀測 / 風險優先 / 下一步` 與 golden signals 先呈現狀態、數字與操作入口；hero lede、signal note、route desc、host meta 與資料來源長句不得佔用第一層視覺。`tests/test_observability_text_density_guardrails.py` 必須鎖住 compact marker 與 hidden explanatory copy。 @@ -904,6 +905,7 @@ POSTGRES_HOST=momo-db | 2026-07-10 | PixelRAG marketplace adapter dry-run 必須先產生 no-write mapping receipt | V10.766 起 `/api/ai-automation/pixelrag-marketplace-source-contract-adapter-dry-run`、`scripts/ops/run_pixelrag_marketplace_source_contract_adapter_dry_run.py`、`/api/ai-automation/smoke` 與 `/api/ai-automation/scheduled-health-summary` 必須輸出 PixelRAG marketplace adapter dry-run / `pixelrag_marketplace_adapter_dry_run` family；dry-run 只讀 `marketplace_adapter_preflight_receipt.json`，驗證 preflight ready、canonical offer fields、required gates、no-DB/no-network/no-model、blocked page not product data 與 price-write blocked。execute 模式只寫 `marketplace_adapter_dry_run_receipt.json` artifact，產生 deterministic field contracts / offer candidate contracts，不抓外站、不呼叫模型、不寫 DB、不寫 `ai_insights`、不寫正式價格表，下一步只允許進 identity matcher replay。 | | 2026-07-10 | PixelRAG marketplace identity matcher replay 必須先產生 no-write match receipt | V10.767 起 `/api/ai-automation/pixelrag-marketplace-identity-matcher-replay`、`scripts/ops/run_pixelrag_marketplace_identity_matcher_replay.py`、`/api/ai-automation/smoke` 與 `/api/ai-automation/scheduled-health-summary` 必須輸出 PixelRAG marketplace identity matcher replay / `pixelrag_marketplace_identity_matcher_replay` family；replay 只讀 `marketplace_adapter_dry_run_receipt.json`，驗證 adapter dry-run ready、identity key fields、candidate contracts、required gates、no-DB/no-network/no-model、source provenance 與 price-write blocked。execute 模式只寫 `marketplace_identity_matcher_replay_receipt.json` artifact，產生 deterministic identity candidate contracts，不抓外站、不呼叫模型、不寫 DB、不寫 `ai_insights`、不寫正式價格表，下一步只允許進 PromotionGate replay。 | | 2026-07-10 | PixelRAG marketplace PromotionGate replay 必須先產生 no-write promotion receipt | V10.768 起 `/api/ai-automation/pixelrag-marketplace-promotion-gate-replay`、`scripts/ops/run_pixelrag_marketplace_promotion_gate_replay.py`、`/api/ai-automation/smoke` 與 `/api/ai-automation/scheduled-health-summary` 必須輸出 PixelRAG marketplace PromotionGate replay / `pixelrag_marketplace_promotion_gate_replay` family；replay 只讀 `marketplace_identity_matcher_replay_receipt.json`，驗證 identity matcher ready、identity checks all passed、required promotion gates、embedding signature guard readiness、no-DB/no-network/no-model、source provenance 與 price-write blocked。execute 模式只寫 `marketplace_promotion_gate_replay_receipt.json` artifact，產生 deterministic promotion candidate contracts，不抓外站、不呼叫模型、不寫 DB、不寫 `ai_insights`、不寫正式價格表，下一步只允許進 embedding signature guard replay。 | +| 2026-07-10 | PixelRAG marketplace embedding signature guard replay 必須先產生 no-write signature receipt | V10.769 起 `/api/ai-automation/pixelrag-marketplace-embedding-signature-guard-replay`、`scripts/ops/run_pixelrag_marketplace_embedding_signature_guard_replay.py`、`/api/ai-automation/smoke` 與 `/api/ai-automation/scheduled-health-summary` 必須輸出 PixelRAG marketplace embedding signature guard replay / `pixelrag_marketplace_embedding_signature_guard_replay` family；replay 只讀 `marketplace_promotion_gate_replay_receipt.json`，驗證 PromotionGate ready、PromotionGate checks all passed、expected embedding signature、signature guard contracts、candidate knowledge readiness、no-DB/no-network/no-model、no embedding generation、source provenance 與 price-write blocked。execute 模式只寫 `marketplace_embedding_signature_guard_replay_receipt.json` artifact，產生 deterministic signature guard contracts，不產生 embedding、不抓外站、不呼叫模型、不寫 DB、不寫 `ai_insights`、不寫正式價格表，下一步只允許進 candidate knowledge replay。 | | 2026-06-29 | PChome DB apply 授權 lane 必須先通過 no-write guard / decision preflight / decision closeout / issuer gate / signing-decision preflight / signing-decision closeout / signing-issuer guard | V10.725 的 PChome mapping backlog auto-policy 已新增 `/api/ai/pchome-growth/mapping-backlog/auto-policy-db-apply-authorization-lane-guard`、`/api/ai/pchome-growth/mapping-backlog/auto-policy-db-apply-authorization-decision-preflight`、`/api/ai/pchome-growth/mapping-backlog/auto-policy-db-apply-authorization-decision-closeout`、`/api/ai/pchome-growth/mapping-backlog/auto-policy-db-apply-authorization-issuer-gate`、`/api/ai/pchome-growth/mapping-backlog/auto-policy-db-apply-authorization-signing-decision-preflight`、`/api/ai/pchome-growth/mapping-backlog/auto-policy-db-apply-authorization-signing-decision-closeout` 與 `/api/ai/pchome-growth/mapping-backlog/auto-policy-db-apply-authorization-signing-issuer-guard`；這些 endpoint 只驗證 final exact request package、same-run production truth requirement、secret rejection、rollback boundary、lane entry requirements、decision input requirements、rejection policy、post-apply verifier、future authorization decision package、final nonsecret authorization envelope、signing decision preflight inputs、unsigned signing decision package 與 signable request boundary，不讀 secret、不執行 shell/SQL、不寫 DB，也不簽發 database apply authorization。 | | 2026-06-29 | PChome DB apply 授權簽署發行者 lane 必須先產出 final signable request package | V10.725 的 PChome mapping backlog auto-policy 新增 `/api/ai/pchome-growth/mapping-backlog/auto-policy-db-apply-authorization-signing-issuer-closeout`；此 endpoint 只把 signing-issuer guard 的 signable request boundary 收斂成 final signable request package 與 closeout contract，確認 fresh production truth、post-apply verifier、migration hash、secret boundary 與 no-side-effect checks，不讀 secret、不簽發 authorization、不執行 shell/SQL、不寫 DB，也不代表正式 DB apply 已授權。 | | 2026-06-29 | PChome DB apply 授權簽署執行 lane 必須先通過 operator-held secret boundary preflight | V10.725 的 PChome mapping backlog auto-policy 新增 `/api/ai/pchome-growth/mapping-backlog/auto-policy-db-apply-authorization-signing-execution-preflight`；此 endpoint 只把 final signable request package 轉成 future signing execution preflight package、operator-held secret boundary contract、nonsecret signing inputs、command-shape preview、rollback boundary 與 abort conditions，不讀 secret、不接受 plaintext secret、不簽發 authorization、不執行 shell/SQL、不寫 DB，也不代表正式 DB apply 已授權。 | diff --git a/docs/guides/ai_automation_mainline_work_items.md b/docs/guides/ai_automation_mainline_work_items.md index 4997b24..219e3d9 100644 --- a/docs/guides/ai_automation_mainline_work_items.md +++ b/docs/guides/ai_automation_mainline_work_items.md @@ -22,11 +22,12 @@ | Completed | PixelRAG marketplace adapter dry-run | `/api/ai-automation/pixelrag-marketplace-source-contract-adapter-dry-run` and `scripts/ops/run_pixelrag_marketplace_source_contract_adapter_dry_run.py` turn adapter preflight receipts into deterministic no-write field contracts and offer candidate contracts, with price writes blocked until identity matcher replay and PromotionGate. | | Completed | PixelRAG marketplace identity matcher replay | `/api/ai-automation/pixelrag-marketplace-identity-matcher-replay` and `scripts/ops/run_pixelrag_marketplace_identity_matcher_replay.py` turn adapter dry-run receipts into deterministic identity candidate contracts and source provenance checks, with price writes blocked until PromotionGate replay. | | Completed | PixelRAG marketplace PromotionGate replay | `/api/ai-automation/pixelrag-marketplace-promotion-gate-replay` and `scripts/ops/run_pixelrag_marketplace_promotion_gate_replay.py` turn identity matcher receipts into deterministic PromotionGate contracts and embedding-signature readiness, with price writes still blocked. | +| Completed | PixelRAG marketplace embedding signature guard replay | `/api/ai-automation/pixelrag-marketplace-embedding-signature-guard-replay` and `scripts/ops/run_pixelrag_marketplace_embedding_signature_guard_replay.py` turn PromotionGate receipts into deterministic embedding-signature guard contracts and candidate-knowledge readiness, with DB and price writes still blocked. | | Completed | PixelRAG application portfolio and integration lanes | `/api/ai-automation/pixelrag-application-portfolio` and `scripts/ops/report_pixelrag_application_portfolio.py` expose commerce, RAG, UX, ops, marketing, and governance uses with priority, status, next machine action, and forbidden guardrails. | | Completed | PixelRAG Ollama-first VLM replay worker | `/api/ai-automation/pixelrag-vlm-replay-worker` and `scripts/ops/run_pixelrag_vlm_replay_worker.py` dry-run or execute ready visual receipts against approved Ollama VLM routes, emit evidence-bound artifact receipts, and keep blocked pages out of product data. | | Completed | PixelRAG VLM route readiness and auto model select | `/api/ai-automation/pixelrag-vlm-route-readiness` and `scripts/ops/report_pixelrag_vlm_route_readiness.py` read approved Ollama `/api/tags`, expose configured/candidate model readiness, and let execute mode avoid missing-model blind generate calls. | | Completed | PixelRAG platform probe worker | `/api/ai-automation/pixelrag-platform-probe-worker` and `scripts/ops/run_pixelrag_platform_probe_worker.py` turn platform probe plans into dry-run/execute automation: Shopee interstitials go to public empty-context capture when runtime is available, missing Playwright auto-falls back to structured-source/backoff receipt, and Coupang 403/access denied goes to structured-source/backoff artifact receipts. | -| In progress | MCP/RAG runtime health in AI automation smoke | `/api/ai-automation/smoke` and `/api/ai-automation/scheduled-health-summary` include external MCP/RAG integration, PixelRAG RAG candidate replay, PixelRAG OCR/VLM replay contract, PixelRAG VLM route readiness, PixelRAG VLM replay worker, PixelRAG platform probe, PixelRAG platform probe worker, source-contract replay, adapter preflight, adapter dry-run, identity matcher replay, and PromotionGate replay families. | +| In progress | MCP/RAG runtime health in AI automation smoke | `/api/ai-automation/smoke` and `/api/ai-automation/scheduled-health-summary` include external MCP/RAG integration, PixelRAG RAG candidate replay, PixelRAG OCR/VLM replay contract, PixelRAG VLM route readiness, PixelRAG VLM replay worker, PixelRAG platform probe, PixelRAG platform probe worker, source-contract replay, adapter preflight, adapter dry-run, identity matcher replay, PromotionGate replay, and embedding signature guard replay families. | | In progress | Formal production deploy/readback discipline | Every mainline change must update version, push Gitea main/dev, deploy to 188 without touching `momo-db`, and read back `/health` plus new endpoints. | ## P1 diff --git a/docs/guides/browse_sh_crawler_playbook.md b/docs/guides/browse_sh_crawler_playbook.md index cbd1434..ac79f76 100644 --- a/docs/guides/browse_sh_crawler_playbook.md +++ b/docs/guides/browse_sh_crawler_playbook.md @@ -206,6 +206,8 @@ python scripts/ops/run_pixelrag_marketplace_identity_matcher_replay.py --platfor python scripts/ops/run_pixelrag_marketplace_identity_matcher_replay.py --platform coupang_tw --execute --write-receipt --limit 1 python scripts/ops/run_pixelrag_marketplace_promotion_gate_replay.py --platform shopee_tw --platform coupang_tw python scripts/ops/run_pixelrag_marketplace_promotion_gate_replay.py --platform coupang_tw --execute --write-receipt --limit 1 +python scripts/ops/run_pixelrag_marketplace_embedding_signature_guard_replay.py --platform shopee_tw --platform coupang_tw +python scripts/ops/run_pixelrag_marketplace_embedding_signature_guard_replay.py --platform coupang_tw --execute --write-receipt --limit 1 ``` API readback: `/api/ai-automation/pixelrag-vlm-route-readiness` 與 `/api/ai-automation/pixelrag-vlm-replay-worker?platform=shopee_tw`。worker 預設為 dry-run，不呼叫模型、不寫 artifact；`execute=true&write_receipt=true` 才呼叫 Ollama VLM 並寫 artifact receipt。execute 前會自動讀 approved Ollama `/api/tags` 選擇已安裝候選模型；若完全沒有候選，會寫 `model_route_not_ready` artifact receipt，不盲打 generate。即使 execute，結果仍只是 candidate evidence；不得直接寫 `ai_insights`、正式價格表或競品價格歷史，且 missing confidence/evidence 會留在 replay / probe lane。 @@ -222,6 +224,8 @@ Marketplace identity matcher replay API readback: `/api/ai-automation/pixelrag-m Marketplace PromotionGate replay API readback: `/api/ai-automation/pixelrag-marketplace-promotion-gate-replay?platform=coupang_tw`。PromotionGate replay 預設只讀 identity matcher receipts 並建立 deterministic promotion candidate contracts；`execute=true&write_receipt=true` 只寫 PromotionGate artifact receipt，不抓外站、不呼叫模型、不寫 DB、不寫 `ai_insights`、不寫正式價格表。PromotionGate receipt 下一步只能進 embedding signature guard replay，不得直接變成價格資料。 +Marketplace embedding signature guard replay API readback: `/api/ai-automation/pixelrag-marketplace-embedding-signature-guard-replay?platform=coupang_tw`。embedding signature guard replay 預設只讀 PromotionGate receipts 並建立 deterministic signature guard contracts；`execute=true&write_receipt=true` 只寫 embedding signature guard artifact receipt，不產生 embedding、不抓外站、不呼叫模型、不寫 DB、不寫 `ai_insights`、不寫正式價格表。signature guard receipt 下一步只能進 candidate knowledge replay，不得直接變成價格資料。 + Application portfolio： ```bash diff --git a/routes/system_public_routes.py b/routes/system_public_routes.py index 8af7f23..ef55f49 100644 --- a/routes/system_public_routes.py +++ b/routes/system_public_routes.py @@ -1090,6 +1090,43 @@ def ai_automation_pixelrag_marketplace_promotion_gate_replay_api(): )) +@system_public_bp.route('/api/ai-automation/pixelrag-marketplace-embedding-signature-guard-replay') +@login_required +def ai_automation_pixelrag_marketplace_embedding_signature_guard_replay_api(): + """Controlled PixelRAG marketplace embedding signature guard readback.""" + from services.pixelrag_marketplace_embedding_signature_guard_replay_service import ( + run_pixelrag_marketplace_embedding_signature_guard_replay, + ) + + platforms = tuple( + str(item or '').strip() + for item in request.args.getlist('platform') + if str(item or '').strip() + ) + execute = str(request.args.get('execute') or '').strip().lower() in { + '1', + 'true', + 'yes', + } + write_receipt = str(request.args.get('write_receipt') or '').strip().lower() in { + '1', + 'true', + 'yes', + } + max_age_hours = request.args.get('max_age_hours', 168, type=int) + limit = request.args.get('limit', 25, type=int) + return jsonify(run_pixelrag_marketplace_embedding_signature_guard_replay( + promotion_gate_receipt_root=str( + request.args.get('promotion_gate_receipt_root') or '' + ).strip() or None, + platform=platforms, + max_age_hours=max(1, min(max_age_hours or 168, 720)), + limit=max(1, min(limit or 25, 250)), + execute=execute, + write_receipt=bool(execute and write_receipt), + )) + + @system_public_bp.route('/api/ai-automation/external-mcp-rag-integration') @login_required def ai_automation_external_mcp_rag_integration_api(): diff --git a/scripts/ops/run_pixelrag_marketplace_embedding_signature_guard_replay.py b/scripts/ops/run_pixelrag_marketplace_embedding_signature_guard_replay.py new file mode 100755 index 0000000..8e0893d --- /dev/null +++ b/scripts/ops/run_pixelrag_marketplace_embedding_signature_guard_replay.py @@ -0,0 +1,77 @@ +#!/usr/bin/env python3 +"""Run or dry-run PixelRAG marketplace embedding signature guard replay.""" + +from __future__ import annotations + +import argparse +import json +import sys +from pathlib import Path + + +ROOT = Path(__file__).resolve().parents[2] +if str(ROOT) not in sys.path: + sys.path.insert(0, str(ROOT)) + +from services.pixelrag_marketplace_embedding_signature_guard_replay_service import ( # noqa: E402 + run_pixelrag_marketplace_embedding_signature_guard_replay, +) + + +def main() -> int: + parser = argparse.ArgumentParser( + description="執行或 dry-run PixelRAG marketplace embedding signature guard replay。" + ) + parser.add_argument( + "--promotion-gate-receipt-root", + help="Marketplace PromotionGate replay receipt root；預設使用 production/container 設定。", + ) + parser.add_argument( + "--output-root", + help="Marketplace embedding signature guard replay artifact receipt output root。", + ) + parser.add_argument( + "--platform", + action="append", + dest="platforms", + help="限制平台，可重複指定，例如 --platform shopee_tw --platform coupang_tw。", + ) + parser.add_argument( + "--max-age-hours", + type=int, + default=168, + help="receipt 最大新鮮度小時數。", + ) + parser.add_argument( + "--limit", + type=int, + default=25, + help="最多處理 PromotionGate replay receipt 數。", + ) + parser.add_argument( + "--execute", + action="store_true", + help="執行 embedding signature guard replay；未指定時只做 no-write dry-run readiness。", + ) + parser.add_argument( + "--write-receipt", + action="store_true", + help="execute 後寫入 embedding signature guard replay artifact receipt；不寫 DB。", + ) + args = parser.parse_args() + + payload = run_pixelrag_marketplace_embedding_signature_guard_replay( + promotion_gate_receipt_root=args.promotion_gate_receipt_root, + output_root=args.output_root, + platform=tuple(args.platforms or ()), + max_age_hours=args.max_age_hours, + limit=args.limit, + execute=args.execute, + write_receipt=bool(args.write_receipt and args.execute), + ) + print(json.dumps(payload, ensure_ascii=False, indent=2, sort_keys=True)) + return 0 if payload.get("success") else 1 + + +if __name__ == "__main__": + raise SystemExit(main()) diff --git a/services/ai_automation_smoke_service.py b/services/ai_automation_smoke_service.py index 8d2c204..2f7a83f 100644 --- a/services/ai_automation_smoke_service.py +++ b/services/ai_automation_smoke_service.py @@ -603,6 +603,23 @@ def build_scheduled_automation_health_summary( pixelrag_marketplace_promotion_gate_details = ( pixelrag_marketplace_promotion_gate.get("details") or {} ) + pixelrag_marketplace_embedding_signature = _find_check( + source_result, + "PixelRAG marketplace embedding signature guard replay", + ) + pixelrag_marketplace_embedding_signature_details = ( + pixelrag_marketplace_embedding_signature.get("details") or {} + ) + if ( + not pixelrag_marketplace_embedding_signature + or not pixelrag_marketplace_embedding_signature_details + ): + pixelrag_marketplace_embedding_signature = ( + _pixelrag_marketplace_embedding_signature_guard_replay_check() + ) + pixelrag_marketplace_embedding_signature_details = ( + pixelrag_marketplace_embedding_signature.get("details") or {} + ) pixelrag_ocr_vlm_replay = _find_check(source_result, "PixelRAG OCR/VLM replay contract") pixelrag_ocr_vlm_replay_details = pixelrag_ocr_vlm_replay.get("details") or {} if not pixelrag_ocr_vlm_replay or not pixelrag_ocr_vlm_replay_details: @@ -4925,6 +4942,74 @@ def build_scheduled_automation_health_summary( "primary_human_gate_count": 0, }, }, + { + "key": "pixelrag_marketplace_embedding_signature_guard_replay", + "label": "PixelRAG marketplace embedding signature guard replay", + "status": ( + pixelrag_marketplace_embedding_signature.get("status") or "warning" + ), + "summary": ( + pixelrag_marketplace_embedding_signature.get("summary") + or "PixelRAG marketplace embedding signature guard replay has no latest readback." + ), + "next_machine_action": pixelrag_marketplace_embedding_signature_details.get( + "next_machine_action" + ) + or "run_marketplace_embedding_signature_guard_replay", + "details": { + "policy": pixelrag_marketplace_embedding_signature_details.get("policy"), + "candidate_count": int( + pixelrag_marketplace_embedding_signature_details.get("candidate_count") or 0 + ), + "ready_count": int( + pixelrag_marketplace_embedding_signature_details.get("ready_count") or 0 + ), + "blocked_count": int( + pixelrag_marketplace_embedding_signature_details.get("blocked_count") or 0 + ), + "dry_run_count": int( + pixelrag_marketplace_embedding_signature_details.get("dry_run_count") or 0 + ), + "executed_count": int( + pixelrag_marketplace_embedding_signature_details.get("executed_count") or 0 + ), + "receipt_written_count": int( + pixelrag_marketplace_embedding_signature_details.get("receipt_written_count") or 0 + ), + "capture_runtime_gap_count": int( + pixelrag_marketplace_embedding_signature_details.get("capture_runtime_gap_count") or 0 + ), + "signature_guard_candidate_count": int( + pixelrag_marketplace_embedding_signature_details.get("signature_guard_candidate_count") or 0 + ), + "candidate_knowledge_ready_count": int( + pixelrag_marketplace_embedding_signature_details.get("candidate_knowledge_ready_count") or 0 + ), + "expected_embedding_signatures": list( + pixelrag_marketplace_embedding_signature_details.get( + "expected_embedding_signatures" + ) + or [] + ), + "network_call_performed": bool( + pixelrag_marketplace_embedding_signature_details.get("network_call_performed") + ), + "model_call_performed": bool( + pixelrag_marketplace_embedding_signature_details.get("model_call_performed") + ), + "embedding_generation_performed": bool( + pixelrag_marketplace_embedding_signature_details.get( + "embedding_generation_performed" + ) + ), + "artifact_write_performed": bool( + pixelrag_marketplace_embedding_signature_details.get("artifact_write_performed") + ), + "writes_database": False, + "writes_database_count": 0, + "primary_human_gate_count": 0, + }, + }, { "key": "pixelrag_ocr_vlm_replay", "label": "PixelRAG OCR/VLM replay contract", @@ -13484,6 +13569,86 @@ def _pixelrag_marketplace_promotion_gate_replay_check() -> Dict[str, Any]: ) +def _pixelrag_marketplace_embedding_signature_guard_replay_check() -> Dict[str, Any]: + """Dry-run sentinel for PixelRAG marketplace embedding signature guard.""" + try: + from services.pixelrag_marketplace_embedding_signature_guard_replay_service import ( + run_pixelrag_marketplace_embedding_signature_guard_replay, + ) + + readback = run_pixelrag_marketplace_embedding_signature_guard_replay( + execute=False, + ) + summary = readback.get("summary") or {} + candidate_count = int(summary.get("candidate_count") or 0) + ready_count = int(summary.get("ready_count") or 0) + blocked_count = int(summary.get("blocked_count") or 0) + dry_run_count = int(summary.get("dry_run_count") or 0) + executed_count = int(summary.get("executed_count") or 0) + receipt_written_count = int(summary.get("receipt_written_count") or 0) + signature_candidate_count = int( + summary.get("signature_guard_candidate_count") or 0 + ) + knowledge_ready_count = int( + summary.get("candidate_knowledge_ready_count") or 0 + ) + signatures = list(summary.get("expected_embedding_signatures") or []) + status = readback.get("status") or "warning" + signature_text = ",".join(str(item) for item in signatures) or "none" + summary_text = ( + f"PixelRAG marketplace embedding signature guard replay " + f"candidates={candidate_count}, ready={ready_count}, " + f"blocked={blocked_count}, dry_run={dry_run_count}, " + f"executed={executed_count}, receipts={receipt_written_count}, " + f"signature_candidates={signature_candidate_count}, " + f"knowledge_ready={knowledge_ready_count}, signatures={signature_text}" + ) + return _check( + "PixelRAG marketplace embedding signature guard replay", + status, + summary_text, + { + "policy": readback.get("policy"), + "candidate_count": candidate_count, + "ready_count": ready_count, + "blocked_count": blocked_count, + "dry_run_count": dry_run_count, + "executed_count": executed_count, + "receipt_written_count": receipt_written_count, + "capture_runtime_gap_count": int( + summary.get("capture_runtime_gap_count") or 0 + ), + "guard_failed_count": int(summary.get("guard_failed_count") or 0), + "signature_guard_candidate_count": signature_candidate_count, + "candidate_knowledge_ready_count": knowledge_ready_count, + "expected_embedding_signatures": signatures, + "network_call_performed": bool(summary.get("network_call_performed")), + "model_call_performed": bool(summary.get("model_call_performed")), + "embedding_generation_performed": bool( + summary.get("embedding_generation_performed") + ), + "artifact_write_performed": bool( + summary.get("artifact_write_performed") + ), + "next_machine_action": readback.get("next_machine_action"), + "writes_database": False, + "writes_database_count": 0, + "primary_human_gate_count": 0, + }, + ) + except Exception as exc: + return _check( + "PixelRAG marketplace embedding signature guard replay", + "critical", + f"PixelRAG marketplace embedding signature guard replay 無法執行 dry-run：{exc}", + { + "writes_database": False, + "writes_database_count": 0, + "primary_human_gate_count": 0, + }, + ) + + def _pixelrag_ocr_vlm_replay_check() -> Dict[str, Any]: """Read-only sentinel for PixelRAG receipts becoming OCR/VLM replay contracts.""" try: @@ -13820,6 +13985,7 @@ def collect_ai_automation_smoke(*, record_history: bool = True, history_limit: i _pixelrag_marketplace_adapter_dry_run_check(), _pixelrag_marketplace_identity_matcher_replay_check(), _pixelrag_marketplace_promotion_gate_replay_check(), + _pixelrag_marketplace_embedding_signature_guard_replay_check(), _pixelrag_ocr_vlm_replay_check(), _pixelrag_vlm_route_readiness_check(), _pixelrag_vlm_replay_worker_check(), diff --git a/services/pixelrag_marketplace_embedding_signature_guard_replay_service.py b/services/pixelrag_marketplace_embedding_signature_guard_replay_service.py new file mode 100644 index 0000000..77ca973 --- /dev/null +++ b/services/pixelrag_marketplace_embedding_signature_guard_replay_service.py @@ -0,0 +1,651 @@ +"""Controlled PixelRAG marketplace embedding signature guard replay worker. + +This worker turns marketplace PromotionGate receipts into deterministic +embedding signature guard receipts. It does not generate embeddings, fetch +marketplace pages, call models, write databases, write AI insights, or promote +candidate prices. +""" + +from __future__ import annotations + +import hashlib +import json +import os +import re +from datetime import datetime, timezone +from pathlib import Path +from typing import Any, Mapping + +from services.pixelrag_crawler_integration_service import DEFAULT_ARTIFACT_MAX_AGE_HOURS +from services.pixelrag_marketplace_promotion_gate_replay_service import ( + DEFAULT_OUTPUT_ROOT as DEFAULT_PROMOTION_GATE_RECEIPT_ROOT, + PROMOTION_GATE_REPLAY_VERSION, +) +from services.rag_service import ( + RAG_EMBED_DIM, + RAG_EMBED_MODEL, + RAG_EMBED_NORMALIZE, + get_embedding_signature, +) + + +POLICY = "controlled_pixelrag_marketplace_embedding_signature_guard_replay_v1" +EMBEDDING_SIGNATURE_GUARD_REPLAY_VERSION = ( + "pixelrag_marketplace_embedding_signature_guard_replay_v1" +) +DEFAULT_LIMIT = 25 +DEFAULT_OUTPUT_ROOT = os.getenv( + "PIXELRAG_MARKETPLACE_EMBEDDING_SIGNATURE_GUARD_REPLAY_RECEIPT_ROOT", + "/app/data/ai_automation/pixelrag_marketplace_embedding_signature_guard_replay_receipts" + if Path("/app/data").exists() + else "runtime_artifacts/pixelrag_marketplace_embedding_signature_guard_replay_receipts", +) + +REQUIRED_PROMOTION_GATES = { + "public_source_boundary", + "rate_limit_contract", + "provenance_contract", + "identity_matcher_replay", + "promotion_gate", + "embedding_signature_guard", +} + + +def _normalise_platforms( + platform: str | tuple[str, ...] | list[str] | None, +) -> tuple[str, ...]: + if isinstance(platform, str): + value = platform.strip().lower() + return (value,) if value else () + return tuple( + str(item or "").strip().lower() + for item in (platform or ()) + if str(item or "").strip() + ) + + +def _safe_segment(value: Any) -> str: + text = str(value or "unknown").strip().lower() + text = re.sub(r"[^a-z0-9._-]+", "-", text) + return text.strip("-") or "unknown" + + +def _parse_iso_datetime(value: Any) -> datetime | None: + if not value: + return None + try: + return datetime.fromisoformat(str(value).replace("Z", "+00:00")) + except ValueError: + return None + + +def _receipt_candidates( + root: Path, + *, + platforms: tuple[str, ...], + limit: int, +) -> list[Path]: + if not root.exists(): + return [] + candidates: list[Path] = [] + if platforms: + for platform in platforms: + candidates.extend( + (root / platform).glob("*/marketplace_promotion_gate_replay_receipt.json") + ) + else: + candidates.extend(root.glob("*/*/marketplace_promotion_gate_replay_receipt.json")) + return sorted(candidates, key=lambda path: path.stat().st_mtime, reverse=True)[:limit] + + +def _load_receipt(path: Path) -> tuple[dict[str, Any], list[str]]: + try: + return json.loads(path.read_text(encoding="utf-8")), [] + except (OSError, json.JSONDecodeError) as exc: + return {}, [str(exc)[:300]] + + +def _as_mapping(value: Any) -> Mapping[str, Any]: + return value if isinstance(value, Mapping) else {} + + +def _as_list(value: Any) -> list[Any]: + return list(value) if isinstance(value, list) else [] + + +def _required_before(promotion_payload: Mapping[str, Any]) -> set[str]: + return set(str(item) for item in _as_list(promotion_payload.get("required_before_data_promotion"))) + + +def _signature_guard_fingerprint( + platform: str, + manifest_id: str, + candidate_id: str, + promotion_fingerprint: str, + embedding_signature: str, +) -> str: + digest = hashlib.sha256( + ( + f"{platform}:{manifest_id}:{candidate_id}:" + f"{promotion_fingerprint}:{embedding_signature}" + ).encode("utf-8") + ).hexdigest() + return digest[:24] + + +def _embedding_signature_contract() -> dict[str, Any]: + signature = get_embedding_signature() + return { + "embedding_signature": signature, + "embedding_model": RAG_EMBED_MODEL, + "embedding_dim": RAG_EMBED_DIM, + "embedding_normalize": RAG_EMBED_NORMALIZE, + "signature_algorithm": "sha1(model|normalize|dim)[:12]", + "embedding_generation_performed": False, + "model_call_performed": False, + } + + +def _signature_guard_candidate_contracts( + receipt: Mapping[str, Any], + *, + promotion_payload: Mapping[str, Any], + embedding_contract: Mapping[str, Any], +) -> list[dict[str, Any]]: + platform = str(receipt.get("platform") or "unknown") + manifest_id = str(receipt.get("manifest_id") or "unknown") + embedding_signature = str(embedding_contract.get("embedding_signature") or "") + contracts: list[dict[str, Any]] = [] + for candidate in _as_list(promotion_payload.get("promotion_candidate_contracts")): + if not isinstance(candidate, Mapping): + continue + candidate_id = str(candidate.get("candidate_id") or f"{platform}:{manifest_id}:unknown") + promotion_fingerprint = str(candidate.get("promotion_fingerprint") or "missing") + contracts.append( + { + "candidate_id": candidate_id, + "candidate_index": int(candidate.get("candidate_index") or 0), + "promotion_fingerprint": promotion_fingerprint, + "identity_fingerprint": candidate.get("identity_fingerprint"), + "expected_embedding_signature": embedding_signature, + "embedding_signature": embedding_signature, + "embedding_signature_guard_fingerprint": _signature_guard_fingerprint( + platform, + manifest_id, + candidate_id, + promotion_fingerprint, + embedding_signature, + ), + "signature_guard_strategy": "deterministic_signature_contract_no_embedding_generation", + "guard_stage": "pre_candidate_knowledge_replay", + "requires_embedding_signature_guard": True, + "requires_candidate_knowledge_replay": True, + "requires_source_provenance": True, + "requires_replay_canary_before_db_write": True, + "embedding_generation_performed": False, + "ready_for_candidate_knowledge_replay": True, + "ready_for_ai_insights_write": False, + "ready_for_price_table_write": False, + "price_write_blocked_until_candidate_canary": True, + } + ) + return contracts + + +def _embedding_signature_guard_payload( + receipt: Mapping[str, Any], + *, + receipt_path: Path, +) -> dict[str, Any]: + promotion_payload = _as_mapping(receipt.get("promotion_gate_replay")) + embedding_contract = _embedding_signature_contract() + guard_contracts = _signature_guard_candidate_contracts( + receipt, + promotion_payload=promotion_payload, + embedding_contract=embedding_contract, + ) + return { + "embedding_signature_guard_replay_version": ( + EMBEDDING_SIGNATURE_GUARD_REPLAY_VERSION + ), + "promotion_gate_replay_version": promotion_payload.get( + "promotion_gate_replay_version" + ), + "identity_matcher_replay_version": promotion_payload.get( + "identity_matcher_replay_version" + ), + "adapter_dry_run_version": promotion_payload.get("adapter_dry_run_version"), + "adapter_preflight_version": promotion_payload.get("adapter_preflight_version"), + "source_contract_version": promotion_payload.get("source_contract_version"), + "adapter_code": promotion_payload.get("adapter_code") or receipt.get("adapter_code"), + "contract_id": promotion_payload.get("contract_id"), + "barrier_type": promotion_payload.get("barrier_type"), + "capture_runtime_unavailable": bool( + promotion_payload.get("capture_runtime_unavailable") + ), + "input_promotion_gate_receipt_path": str(receipt_path), + "input_identity_matcher_receipt_path": promotion_payload.get( + "input_identity_matcher_receipt_path" + ), + "input_adapter_dry_run_receipt_path": promotion_payload.get( + "input_adapter_dry_run_receipt_path" + ), + "adapter_preflight_receipt_path": promotion_payload.get( + "adapter_preflight_receipt_path" + ), + "source_contract_replay_receipt_path": promotion_payload.get( + "source_contract_replay_receipt_path" + ), + "source_worker_receipt_path": promotion_payload.get("source_worker_receipt_path"), + "source_receipt_path": promotion_payload.get("source_receipt_path"), + "embedding_signature_contract": embedding_contract, + "embedding_signature_guard_execution_mode": ( + "deterministic_signature_guard_only_no_embedding_no_network_no_db" + ), + "signature_guard_candidate_count": len(guard_contracts), + "signature_guard_candidate_contracts": guard_contracts, + "required_before_data_promotion": list( + promotion_payload.get("required_before_data_promotion") or [] + ), + "allowed_next_step": "run_marketplace_candidate_knowledge_replay", + } + + +def _embedding_signature_guard_checks( + receipt: Mapping[str, Any], + *, + stale: bool, + errors: list[str], + guard_payload: Mapping[str, Any], +) -> dict[str, bool]: + promotion_payload = _as_mapping(receipt.get("promotion_gate_replay")) + boundary = _as_mapping(receipt.get("promotion_boundary")) + promotion_checks = _as_mapping(receipt.get("promotion_gate_replay_checks")) + promotion_contracts = _as_list(promotion_payload.get("promotion_candidate_contracts")) + guard_contracts = _as_list(guard_payload.get("signature_guard_candidate_contracts")) + embedding_contract = _as_mapping(guard_payload.get("embedding_signature_contract")) + expected_signature = str(embedding_contract.get("embedding_signature") or "") + required_before = _required_before(promotion_payload) + return { + "receipt_parse_ok": not errors, + "receipt_fresh": not stale, + "promotion_gate_replay_ready": ( + receipt.get("worker_status") + == "executed_marketplace_promotion_gate_replay_ready" + ), + "promotion_gate_version_supported": ( + promotion_payload.get("promotion_gate_replay_version") + == PROMOTION_GATE_REPLAY_VERSION + ), + "promotion_gate_checks_all_passed": ( + int(receipt.get("promotion_gate_replay_check_pass_count") or 0) + == int(receipt.get("promotion_gate_replay_check_count") or -1) + and int(receipt.get("promotion_gate_replay_check_count") or 0) > 0 + ), + "blocked_page_not_product_data": bool( + promotion_checks.get("blocked_page_not_product_data") + ), + "promotion_candidate_contracts_present": bool(promotion_contracts), + "signature_guard_contracts_generated": bool(guard_contracts), + "signature_guard_count_matches_promotion_count": ( + len(guard_contracts) == len(promotion_contracts) + ), + "promotion_candidates_ready_for_embedding_signature_guard": all( + bool(item.get("ready_for_embedding_signature_guard_replay")) + for item in promotion_contracts + ), + "required_promotion_gates_present": REQUIRED_PROMOTION_GATES.issubset( + required_before + ), + "embedding_signature_guard_required": "embedding_signature_guard" in required_before, + "embedding_signature_present": ( + len(expected_signature) == 12 + and all(ch in "0123456789abcdef" for ch in expected_signature) + ), + "embedding_generation_not_performed": ( + not bool(embedding_contract.get("embedding_generation_performed")) + and not bool(embedding_contract.get("model_call_performed")) + ), + "signature_guard_all_match_expected_signature": all( + item.get("embedding_signature") == expected_signature + and item.get("expected_embedding_signature") == expected_signature + for item in guard_contracts + ), + "candidate_knowledge_replay_ready": all( + bool(item.get("ready_for_candidate_knowledge_replay")) + for item in guard_contracts + ), + "ai_insights_write_disallowed": all( + not bool(item.get("ready_for_ai_insights_write")) + for item in guard_contracts + ), + "price_write_blocked_until_candidate_canary": all( + bool(item.get("price_write_blocked_until_candidate_canary")) + and not bool(item.get("ready_for_price_table_write")) + for item in guard_contracts + ), + "direct_price_write_disallowed": not bool( + boundary.get("direct_price_write_allowed") + ), + "direct_ai_insights_write_disallowed": not bool( + boundary.get("direct_ai_insights_write_allowed") + ), + "database_write_disallowed": not bool(receipt.get("writes_database")) + and int(receipt.get("writes_database_count") or 0) == 0, + "network_call_disallowed": not bool(receipt.get("network_call_performed")), + "model_call_disallowed": not bool(receipt.get("model_call_performed")), + "source_provenance_paths_present": bool( + guard_payload.get("input_promotion_gate_receipt_path") + and guard_payload.get("input_identity_matcher_receipt_path") + and guard_payload.get("input_adapter_dry_run_receipt_path") + and guard_payload.get("adapter_preflight_receipt_path") + and guard_payload.get("source_contract_replay_receipt_path") + ), + } + + +def _worker_item( + receipt_path: Path, + *, + now: datetime, + max_age_hours: int, + execute: bool, +) -> dict[str, Any]: + receipt, errors = _load_receipt(receipt_path) + generated_at = _parse_iso_datetime(receipt.get("generated_at")) + if generated_at is None: + try: + generated_at = datetime.fromtimestamp(receipt_path.stat().st_mtime, tz=timezone.utc) + except OSError: + generated_at = None + age_hours = ((now - generated_at).total_seconds() / 3600) if generated_at else None + stale = age_hours is None or age_hours > max_age_hours + guard_payload = _embedding_signature_guard_payload(receipt, receipt_path=receipt_path) + checks = _embedding_signature_guard_checks( + receipt, + stale=stale, + errors=errors, + guard_payload=guard_payload, + ) + check_count = len(checks) + pass_count = sum(1 for passed in checks.values() if passed) + ready = pass_count == check_count + platform = str(receipt.get("platform") or receipt_path.parent.parent.name).strip().lower() + manifest_id = str(receipt.get("manifest_id") or receipt_path.parent.name).strip() + status = ( + "executed_marketplace_embedding_signature_guard_replay_ready" + if execute and ready + else ( + "dry_run_ready_for_marketplace_embedding_signature_guard_replay" + if ready + else "skipped_marketplace_embedding_signature_guard_replay_guard_failed" + ) + ) + return { + "worker_status": status, + "platform": platform, + "manifest_id": manifest_id, + "source_type": "marketplace_promotion_gate_replay_receipt", + "promotion_gate_receipt_path": str(receipt_path), + "identity_matcher_receipt_path": guard_payload.get( + "input_identity_matcher_receipt_path" + ), + "adapter_dry_run_receipt_path": guard_payload.get( + "input_adapter_dry_run_receipt_path" + ), + "adapter_preflight_receipt_path": guard_payload.get( + "adapter_preflight_receipt_path" + ), + "source_contract_replay_receipt_path": guard_payload.get( + "source_contract_replay_receipt_path" + ), + "source_worker_receipt_path": guard_payload.get("source_worker_receipt_path"), + "source_receipt_path": guard_payload.get("source_receipt_path"), + "adapter_code": guard_payload.get("adapter_code"), + "embedding_signature_guard_replay_status": "ready" if ready else "blocked", + "ready_for_execution": ready, + "execute": bool(execute), + "generated_at": generated_at.isoformat() if generated_at else None, + "age_hours": round(age_hours, 3) if age_hours is not None else None, + "stale": stale, + "network_call_performed": False, + "model_call_performed": False, + "embedding_generation_performed": False, + "artifact_write_performed": False, + "writes_database": False, + "writes_database_count": 0, + "primary_human_gate_count": 0, + "embedding_signature_guard_replay_checks": checks, + "embedding_signature_guard_replay_check_count": check_count, + "embedding_signature_guard_replay_check_pass_count": pass_count, + "embedding_signature_guard_replay": guard_payload, + "promotion_boundary": { + "direct_ai_insights_write_allowed": False, + "direct_price_write_allowed": False, + "embedding_signature_guard_replay_only": True, + "requires_public_source_boundary": True, + "requires_rate_limit_contract": True, + "requires_provenance_contract": True, + "requires_identity_matcher_replay": True, + "requires_promotion_gate": True, + "requires_candidate_knowledge_replay": True, + }, + "next_machine_action": ( + "run_marketplace_candidate_knowledge_replay" + if execute and ready + else ( + "run_marketplace_embedding_signature_guard_replay_execute" + if ready + else "repair_marketplace_embedding_signature_guard_replay_inputs" + ) + ), + } + + +def _write_embedding_signature_guard_receipt( + *, + output_root: Path, + item: Mapping[str, Any], +) -> str: + target = ( + output_root + / _safe_segment(item.get("platform")) + / _safe_segment(item.get("manifest_id")) + / "marketplace_embedding_signature_guard_replay_receipt.json" + ) + target.parent.mkdir(parents=True, exist_ok=True) + receipt = dict(item) + receipt["artifact_write_performed"] = True + receipt["receipt_path"] = str(target) + receipt["generated_at"] = datetime.now(timezone.utc).isoformat() + receipt["policy"] = POLICY + target.write_text( + json.dumps(receipt, ensure_ascii=False, indent=2, sort_keys=True), + encoding="utf-8", + ) + return str(target) + + +def run_pixelrag_marketplace_embedding_signature_guard_replay( + *, + promotion_gate_receipt_root: str | Path | None = None, + output_root: str | Path | None = None, + platform: str | tuple[str, ...] | list[str] | None = None, + max_age_hours: int | None = None, + limit: int | None = None, + execute: bool = False, + write_receipt: bool = False, +) -> dict[str, Any]: + """Run or dry-run marketplace embedding signature guard replay.""" + source_root = Path(promotion_gate_receipt_root or DEFAULT_PROMOTION_GATE_RECEIPT_ROOT) + output = Path(output_root or DEFAULT_OUTPUT_ROOT) + platforms = _normalise_platforms(platform) + max_age = max(1, int(max_age_hours or DEFAULT_ARTIFACT_MAX_AGE_HOURS)) + item_limit = max(1, min(int(limit or DEFAULT_LIMIT), 250)) + now = datetime.now(timezone.utc) + receipt_paths = _receipt_candidates(source_root, platforms=platforms, limit=item_limit) + worker_items: list[dict[str, Any]] = [] + for receipt_path in receipt_paths: + item = _worker_item( + receipt_path, + now=now, + max_age_hours=max_age, + execute=execute, + ) + if execute and write_receipt and item.get("ready_for_execution"): + item["receipt_path"] = _write_embedding_signature_guard_receipt( + output_root=output, + item=item, + ) + item["artifact_write_performed"] = True + worker_items.append(item) + + ready_count = sum(1 for item in worker_items if item.get("ready_for_execution")) + blocked_count = len(worker_items) - ready_count + dry_run_count = sum( + 1 for item in worker_items if str(item.get("worker_status") or "").startswith("dry_run_") + ) + executed_count = sum( + 1 for item in worker_items if str(item.get("worker_status") or "").startswith("executed_") + ) + receipt_written_count = sum(1 for item in worker_items if item.get("receipt_path")) + guard_failed_count = sum( + 1 + for item in worker_items + if item.get("embedding_signature_guard_replay_status") != "ready" + ) + capture_runtime_gap_count = sum( + 1 + for item in worker_items + if (item.get("embedding_signature_guard_replay") or {}).get( + "capture_runtime_unavailable" + ) + ) + signature_guard_candidate_count = sum( + int( + (item.get("embedding_signature_guard_replay") or {}).get( + "signature_guard_candidate_count" + ) + or 0 + ) + for item in worker_items + ) + candidate_knowledge_ready_count = sum( + sum( + 1 + for candidate in _as_list( + (item.get("embedding_signature_guard_replay") or {}).get( + "signature_guard_candidate_contracts" + ) + ) + if isinstance(candidate, Mapping) + and candidate.get("ready_for_candidate_knowledge_replay") + ) + for item in worker_items + ) + expected_signatures = sorted( + { + str( + ( + (item.get("embedding_signature_guard_replay") or {}) + .get("embedding_signature_contract") + or {} + ).get("embedding_signature") + or "" + ) + for item in worker_items + } + - {""} + ) + + if not worker_items: + status = "warning" + elif guard_failed_count: + status = "warning" + else: + status = "ok" + + if not worker_items: + next_action = "run_marketplace_promotion_gate_replay" + elif not execute and ready_count: + next_action = "run_marketplace_embedding_signature_guard_replay_execute" + elif execute and receipt_written_count: + next_action = "run_marketplace_candidate_knowledge_replay" + elif guard_failed_count: + next_action = "repair_marketplace_embedding_signature_guard_replay_inputs" + else: + next_action = "refresh_marketplace_embedding_signature_guard_replay_candidates" + + summary = { + "candidate_count": len(worker_items), + "ready_count": ready_count, + "blocked_count": blocked_count, + "dry_run_count": dry_run_count, + "executed_count": executed_count, + "receipt_written_count": receipt_written_count, + "guard_failed_count": guard_failed_count, + "capture_runtime_gap_count": capture_runtime_gap_count, + "signature_guard_candidate_count": signature_guard_candidate_count, + "candidate_knowledge_ready_count": candidate_knowledge_ready_count, + "expected_embedding_signatures": expected_signatures, + "platforms": sorted({str(item.get("platform") or "unknown") for item in worker_items}), + "network_call_performed": False, + "model_call_performed": False, + "embedding_generation_performed": False, + "artifact_write_performed": bool(receipt_written_count), + "writes_database_count": 0, + "primary_human_gate_count": 0, + } + return { + "success": status != "critical", + "policy": POLICY, + "status": status, + "generated_at": now.isoformat(), + "embedding_signature_guard_replay_version": ( + EMBEDDING_SIGNATURE_GUARD_REPLAY_VERSION + ), + "promotion_gate_receipt_root": str(source_root), + "output_root": str(output), + "platform_filter": list(platforms), + "max_age_hours": max_age, + "limit": item_limit, + "execute": bool(execute), + "write_receipt": bool(write_receipt and execute), + "summary": summary, + "worker_items": worker_items, + "controlled_apply": { + "network_call": False, + "model_call": False, + "embedding_generation": False, + "artifact_write": bool(receipt_written_count), + "db_write": False, + "writes_database": False, + "writes_database_count": 0, + "secret_read": False, + "raw_cookie_or_session_read": False, + "credentialed_session_allowed": False, + "login_allowed": False, + "production_price_write": False, + "primary_human_gate_count": 0, + }, + "promotion_boundary": { + "writes_ai_insights": False, + "writes_price_tables": False, + "embedding_signature_guard_replay_only": True, + "requires_public_source_boundary": True, + "requires_rate_limit_contract": True, + "requires_provenance_contract": True, + "requires_identity_matcher_replay": True, + "requires_promotion_gate": True, + "requires_candidate_knowledge_replay": True, + }, + "next_machine_action": next_action, + } + + +__all__ = [ + "DEFAULT_OUTPUT_ROOT", + "EMBEDDING_SIGNATURE_GUARD_REPLAY_VERSION", + "POLICY", + "run_pixelrag_marketplace_embedding_signature_guard_replay", +] diff --git a/tests/test_ai_automation_smoke_service.py b/tests/test_ai_automation_smoke_service.py index e8c6b0c..d350b61 100644 --- a/tests/test_ai_automation_smoke_service.py +++ b/tests/test_ai_automation_smoke_service.py @@ -1315,6 +1315,7 @@ def test_collect_ai_automation_smoke_uses_worst_status(monkeypatch): monkeypatch.setattr(smoke, "_pixelrag_marketplace_adapter_dry_run_check", lambda: smoke._check("pixelrag marketplace adapter dry-run", "ok", "ok")) monkeypatch.setattr(smoke, "_pixelrag_marketplace_identity_matcher_replay_check", lambda: smoke._check("pixelrag marketplace identity matcher replay", "ok", "ok")) monkeypatch.setattr(smoke, "_pixelrag_marketplace_promotion_gate_replay_check", lambda: smoke._check("pixelrag marketplace promotion gate replay", "ok", "ok")) + monkeypatch.setattr(smoke, "_pixelrag_marketplace_embedding_signature_guard_replay_check", lambda: smoke._check("pixelrag marketplace embedding signature guard replay", "ok", "ok")) monkeypatch.setattr(smoke, "_pixelrag_ocr_vlm_replay_check", lambda: smoke._check("pixelrag ocr vlm", "ok", "ok")) monkeypatch.setattr(smoke, "_pixelrag_vlm_route_readiness_check", lambda: smoke._check("pixelrag vlm route", "ok", "ok")) monkeypatch.setattr(smoke, "_pixelrag_vlm_replay_worker_check", lambda: smoke._check("pixelrag vlm worker", "ok", "ok")) @@ -1324,7 +1325,7 @@ def test_collect_ai_automation_smoke_uses_worst_status(monkeypatch): result = smoke.collect_ai_automation_smoke(record_history=False) assert result["status"] == "critical" - assert result["summary"] == {"ok": 40, "warning": 1, "critical": 1, "total": 42} + assert result["summary"] == {"ok": 41, "warning": 1, "critical": 1, "total": 43} def test_pchome_controlled_apply_drift_monitor_reports_verified_zero_drift(monkeypatch): @@ -3858,6 +3859,7 @@ def test_collect_ai_automation_smoke_persists_recent_history(tmp_path, monkeypat monkeypatch.setattr(smoke, "_pixelrag_marketplace_adapter_dry_run_check", lambda: smoke._check("pixelrag marketplace adapter dry-run", "ok", "ok")) monkeypatch.setattr(smoke, "_pixelrag_marketplace_identity_matcher_replay_check", lambda: smoke._check("pixelrag marketplace identity matcher replay", "ok", "ok")) monkeypatch.setattr(smoke, "_pixelrag_marketplace_promotion_gate_replay_check", lambda: smoke._check("pixelrag marketplace promotion gate replay", "ok", "ok")) + monkeypatch.setattr(smoke, "_pixelrag_marketplace_embedding_signature_guard_replay_check", lambda: smoke._check("pixelrag marketplace embedding signature guard replay", "ok", "ok")) monkeypatch.setattr(smoke, "_pixelrag_ocr_vlm_replay_check", lambda: smoke._check("pixelrag ocr vlm", "ok", "ok")) monkeypatch.setattr(smoke, "_pixelrag_vlm_route_readiness_check", lambda: smoke._check("pixelrag vlm route", "ok", "ok")) monkeypatch.setattr(smoke, "_pixelrag_vlm_replay_worker_check", lambda: smoke._check("pixelrag vlm worker", "ok", "ok")) @@ -3918,7 +3920,7 @@ def test_scheduled_automation_health_summary_reads_history_without_side_effects( json.dumps({ "generated_at": datetime.now().isoformat(timespec="seconds"), "status": "ok", - "summary": {"ok": 42, "warning": 0, "critical": 0, "total": 42}, + "summary": {"ok": 43, "warning": 0, "critical": 0, "total": 43}, "checks": [ { "name": "PChome 受控落地 drift monitor", @@ -4137,6 +4139,31 @@ def test_scheduled_automation_health_summary_reads_history_without_side_effects( "primary_human_gate_count": 0, }, }, + { + "name": "PixelRAG marketplace embedding signature guard replay", + "status": "ok", + "summary": "PixelRAG marketplace embedding signature guard replay candidates=1, ready=1, blocked=0, dry_run=1, executed=0, receipts=0, signature_candidates=2, knowledge_ready=2, signatures=8c8063c66dbe", + "details": { + "policy": "controlled_pixelrag_marketplace_embedding_signature_guard_replay_v1", + "candidate_count": 1, + "ready_count": 1, + "blocked_count": 0, + "dry_run_count": 1, + "executed_count": 0, + "receipt_written_count": 0, + "capture_runtime_gap_count": 0, + "signature_guard_candidate_count": 2, + "candidate_knowledge_ready_count": 2, + "expected_embedding_signatures": ["8c8063c66dbe"], + "network_call_performed": False, + "model_call_performed": False, + "embedding_generation_performed": False, + "artifact_write_performed": False, + "next_machine_action": "run_marketplace_embedding_signature_guard_replay_execute", + "writes_database_count": 0, + "primary_human_gate_count": 0, + }, + }, { "name": "PixelRAG OCR/VLM replay contract", "status": "ok", @@ -4251,7 +4278,7 @@ def test_scheduled_automation_health_summary_reads_history_without_side_effects( ) assert summary["policy"] == "read_only_ai_automation_scheduled_health_summary" assert summary["status"] == "ok" - assert summary["summary"]["total"] == 39 + assert summary["summary"]["total"] == 40 assert summary["summary"]["primary_human_gate_count"] == 0 assert summary["summary"]["writes_database_count"] == 0 assert pchome_family["status"] == "ok" @@ -6608,6 +6635,11 @@ def test_surface_html_readback_check_is_part_of_ai_smoke(monkeypatch): "ok", "pixelrag marketplace PromotionGate replay ok", )) + monkeypatch.setattr(smoke, "_pixelrag_marketplace_embedding_signature_guard_replay_check", lambda: smoke._check( + "PixelRAG marketplace embedding signature guard replay", + "ok", + "pixelrag marketplace embedding signature guard replay ok", + )) monkeypatch.setattr(smoke, "_pixelrag_ocr_vlm_replay_check", lambda: smoke._check( "PixelRAG OCR/VLM replay contract", "ok", @@ -6648,7 +6680,7 @@ def test_surface_html_readback_check_is_part_of_ai_smoke(monkeypatch): item for item in result["checks"] if item["name"] == "Sitewide visual QA readback" ) - assert result["summary"]["total"] == 42 + assert result["summary"]["total"] == 43 assert surface_check["status"] == "ok" assert surface_check["details"]["checked_surface_count"] == 10 assert sitewide_check["status"] == "ok" diff --git a/tests/test_pixelrag_marketplace_embedding_signature_guard_replay_service.py b/tests/test_pixelrag_marketplace_embedding_signature_guard_replay_service.py new file mode 100644 index 0000000..17215d7 --- /dev/null +++ b/tests/test_pixelrag_marketplace_embedding_signature_guard_replay_service.py @@ -0,0 +1,332 @@ +import json +import subprocess +import sys +from datetime import datetime, timezone + + +def _promotion_candidate(platform, manifest_id, index): + return { + "candidate_id": f"{platform}:{manifest_id}:{index}", + "candidate_index": index, + "identity_fingerprint": f"identity-{platform}-{index}", + "promotion_fingerprint": f"promotion-{platform}-{index}", + "promotion_stage": "pre_embedding_signature_guard", + "promotion_strategy": "deterministic_gate_replay_no_values", + "ready_for_candidate_knowledge_replay": True, + "ready_for_embedding_signature_guard_replay": True, + "ready_for_price_table_write": False, + "price_write_blocked_until_embedding_signature_guard": True, + "requires_embedding_signature_guard": True, + "requires_evidence_time": True, + "requires_identity_matcher_replay": True, + "requires_promotion_gate": True, + "requires_public_source_boundary": True, + "requires_rate_limit_contract": True, + "requires_source_provenance": True, + } + + +def _write_promotion_gate_receipt( + root, + *, + platform="coupang_tw", + manifest_id="coupang-403", + adapter_code="coupang", + barrier_type="access_denied", + capture_runtime_unavailable=False, +): + receipt_dir = root / platform / manifest_id + receipt_dir.mkdir(parents=True) + source_root = "runtime_artifacts" + payload = { + "generated_at": datetime.now(timezone.utc).isoformat(), + "policy": "controlled_pixelrag_marketplace_promotion_gate_replay_v1", + "worker_status": "executed_marketplace_promotion_gate_replay_ready", + "platform": platform, + "manifest_id": manifest_id, + "adapter_code": adapter_code, + "promotion_gate_receipt_path": ( + f"{source_root}/pixelrag_marketplace_promotion_gate_replay_receipts/" + f"{platform}/{manifest_id}/marketplace_promotion_gate_replay_receipt.json" + ), + "identity_matcher_receipt_path": ( + f"{source_root}/pixelrag_marketplace_identity_matcher_replay_receipts/" + f"{platform}/{manifest_id}/marketplace_identity_matcher_replay_receipt.json" + ), + "adapter_dry_run_receipt_path": ( + f"{source_root}/pixelrag_marketplace_adapter_dry_run_receipts/" + f"{platform}/{manifest_id}/marketplace_adapter_dry_run_receipt.json" + ), + "adapter_preflight_receipt_path": ( + f"{source_root}/pixelrag_marketplace_adapter_preflight_receipts/" + f"{platform}/{manifest_id}/marketplace_adapter_preflight_receipt.json" + ), + "source_contract_replay_receipt_path": ( + f"{source_root}/pixelrag_source_contract_replay_receipts/" + f"{platform}/{manifest_id}/source_contract_replay_receipt.json" + ), + "source_worker_receipt_path": ( + f"{source_root}/pixelrag_platform_probe_worker_receipts/" + f"{platform}/{manifest_id}/platform_probe_worker_receipt.json" + ), + "source_receipt_path": ( + f"{source_root}/pixelrag_visual_evidence/" + f"{platform}/{manifest_id}/capture_receipt.json" + ), + "promotion_gate_replay_check_count": 22, + "promotion_gate_replay_check_pass_count": 22, + "promotion_gate_replay_checks": { + "blocked_page_not_product_data": True, + "candidate_knowledge_replay_ready": True, + "database_write_disallowed": True, + "direct_ai_insights_write_disallowed": True, + "direct_price_write_disallowed": True, + "embedding_signature_guard_replay_ready": True, + "embedding_signature_guard_required": True, + "identity_candidate_contracts_present": True, + "identity_candidates_ready_for_promotion": True, + "identity_matcher_checks_all_passed": True, + "identity_matcher_replay_ready": True, + "identity_matcher_version_supported": True, + "model_call_disallowed": True, + "network_call_disallowed": True, + "price_write_blocked_until_embedding_signature_guard": True, + "promotion_candidate_contracts_generated": True, + "promotion_candidate_count_matches_identity_count": True, + "promotion_gate_required": True, + "receipt_fresh": True, + "receipt_parse_ok": True, + "required_promotion_gates_present": True, + "source_provenance_paths_present": True, + }, + "promotion_gate_replay": { + "promotion_gate_replay_version": "pixelrag_marketplace_promotion_gate_replay_v1", + "identity_matcher_replay_version": "pixelrag_marketplace_identity_matcher_replay_v1", + "adapter_dry_run_version": "pixelrag_marketplace_adapter_dry_run_v1", + "adapter_preflight_version": "pixelrag_marketplace_adapter_preflight_v1", + "source_contract_version": "pixelrag_marketplace_source_contract_v1", + "contract_id": f"{platform}:{manifest_id}:{adapter_code}", + "adapter_code": adapter_code, + "barrier_type": barrier_type, + "capture_runtime_unavailable": capture_runtime_unavailable, + "input_promotion_gate_receipt_path": ( + f"{source_root}/pixelrag_marketplace_promotion_gate_replay_receipts/" + f"{platform}/{manifest_id}/marketplace_promotion_gate_replay_receipt.json" + ), + "input_identity_matcher_receipt_path": ( + f"{source_root}/pixelrag_marketplace_identity_matcher_replay_receipts/" + f"{platform}/{manifest_id}/marketplace_identity_matcher_replay_receipt.json" + ), + "input_adapter_dry_run_receipt_path": ( + f"{source_root}/pixelrag_marketplace_adapter_dry_run_receipts/" + f"{platform}/{manifest_id}/marketplace_adapter_dry_run_receipt.json" + ), + "adapter_preflight_receipt_path": ( + f"{source_root}/pixelrag_marketplace_adapter_preflight_receipts/" + f"{platform}/{manifest_id}/marketplace_adapter_preflight_receipt.json" + ), + "source_contract_replay_receipt_path": ( + f"{source_root}/pixelrag_source_contract_replay_receipts/" + f"{platform}/{manifest_id}/source_contract_replay_receipt.json" + ), + "source_worker_receipt_path": ( + f"{source_root}/pixelrag_platform_probe_worker_receipts/" + f"{platform}/{manifest_id}/platform_probe_worker_receipt.json" + ), + "source_receipt_path": ( + f"{source_root}/pixelrag_visual_evidence/" + f"{platform}/{manifest_id}/capture_receipt.json" + ), + "promotion_gate_execution_mode": "deterministic_replay_only_no_network_no_db", + "promotion_candidate_count": 2, + "promotion_candidate_contracts": [ + _promotion_candidate(platform, manifest_id, 0), + _promotion_candidate(platform, manifest_id, 1), + ], + "required_before_data_promotion": [ + "public_source_boundary", + "rate_limit_contract", + "provenance_contract", + "identity_matcher_replay", + "promotion_gate", + "embedding_signature_guard", + ], + "allowed_next_step": "run_marketplace_embedding_signature_guard_replay", + }, + "promotion_boundary": { + "direct_ai_insights_write_allowed": False, + "direct_price_write_allowed": False, + }, + "writes_database": False, + "writes_database_count": 0, + "network_call_performed": False, + "model_call_performed": False, + } + path = receipt_dir / "marketplace_promotion_gate_replay_receipt.json" + path.write_text(json.dumps(payload, ensure_ascii=False), encoding="utf-8") + return path + + +def test_marketplace_embedding_signature_guard_reads_promotion_receipts(tmp_path): + from services.pixelrag_marketplace_embedding_signature_guard_replay_service import ( + POLICY, + run_pixelrag_marketplace_embedding_signature_guard_replay, + ) + from services.rag_service import get_embedding_signature + + promotion_root = tmp_path / "promotion_gate" + _write_promotion_gate_receipt(promotion_root) + _write_promotion_gate_receipt( + promotion_root, + platform="shopee_tw", + manifest_id="shopee-runtime-gap", + adapter_code="shopee", + barrier_type="language_or_region_interstitial", + capture_runtime_unavailable=True, + ) + + payload = run_pixelrag_marketplace_embedding_signature_guard_replay( + promotion_gate_receipt_root=promotion_root, + platform=("coupang_tw", "shopee_tw"), + ) + by_platform = {item["platform"]: item for item in payload["worker_items"]} + + assert payload["policy"] == POLICY + assert payload["status"] == "ok" + assert payload["summary"]["candidate_count"] == 2 + assert payload["summary"]["ready_count"] == 2 + assert payload["summary"]["dry_run_count"] == 2 + assert payload["summary"]["signature_guard_candidate_count"] == 4 + assert payload["summary"]["candidate_knowledge_ready_count"] == 4 + assert payload["summary"]["capture_runtime_gap_count"] == 1 + assert payload["summary"]["expected_embedding_signatures"] == [ + get_embedding_signature() + ] + assert payload["summary"]["writes_database_count"] == 0 + assert payload["controlled_apply"]["embedding_generation"] is False + assert payload["controlled_apply"]["network_call"] is False + assert payload["promotion_boundary"]["writes_price_tables"] is False + assert payload["next_machine_action"] == ( + "run_marketplace_embedding_signature_guard_replay_execute" + ) + assert by_platform["coupang_tw"]["worker_status"] == ( + "dry_run_ready_for_marketplace_embedding_signature_guard_replay" + ) + first_guard = by_platform["coupang_tw"]["embedding_signature_guard_replay"][ + "signature_guard_candidate_contracts" + ][0] + assert first_guard["embedding_signature"] == get_embedding_signature() + assert first_guard["ready_for_candidate_knowledge_replay"] is True + assert first_guard["ready_for_ai_insights_write"] is False + assert first_guard["ready_for_price_table_write"] is False + assert first_guard["price_write_blocked_until_candidate_canary"] is True + assert by_platform["shopee_tw"]["embedding_signature_guard_replay"][ + "capture_runtime_unavailable" + ] is True + + +def test_marketplace_embedding_signature_guard_execute_writes_receipt(tmp_path): + from services.pixelrag_marketplace_embedding_signature_guard_replay_service import ( + run_pixelrag_marketplace_embedding_signature_guard_replay, + ) + + promotion_root = tmp_path / "promotion_gate" + output_root = tmp_path / "embedding_signature" + _write_promotion_gate_receipt(promotion_root) + + payload = run_pixelrag_marketplace_embedding_signature_guard_replay( + promotion_gate_receipt_root=promotion_root, + output_root=output_root, + platform="coupang_tw", + execute=True, + write_receipt=True, + ) + + assert payload["status"] == "ok" + assert payload["summary"]["executed_count"] == 1 + assert payload["summary"]["receipt_written_count"] == 1 + assert payload["controlled_apply"]["artifact_write"] is True + assert payload["controlled_apply"]["writes_database"] is False + assert payload["next_machine_action"] == "run_marketplace_candidate_knowledge_replay" + receipt_path = ( + output_root + / "coupang_tw" + / "coupang-403" + / "marketplace_embedding_signature_guard_replay_receipt.json" + ) + assert receipt_path.exists() + receipt = json.loads(receipt_path.read_text(encoding="utf-8")) + assert receipt["worker_status"] == ( + "executed_marketplace_embedding_signature_guard_replay_ready" + ) + assert receipt["artifact_write_performed"] is True + assert receipt["writes_database"] is False + assert receipt["embedding_signature_guard_replay_check_pass_count"] == ( + receipt["embedding_signature_guard_replay_check_count"] + ) + assert receipt["embedding_signature_guard_replay"]["allowed_next_step"] == ( + "run_marketplace_candidate_knowledge_replay" + ) + + +def test_marketplace_embedding_signature_guard_cli_outputs_json(tmp_path): + promotion_root = tmp_path / "promotion_gate" + _write_promotion_gate_receipt(promotion_root) + + completed = subprocess.run( + [ + sys.executable, + "scripts/ops/run_pixelrag_marketplace_embedding_signature_guard_replay.py", + "--promotion-gate-receipt-root", + str(promotion_root), + "--platform", + "coupang_tw", + ], + capture_output=True, + check=False, + text=True, + ) + + assert completed.returncode == 0 + payload = json.loads(completed.stdout) + assert payload["summary"]["candidate_count"] == 1 + assert payload["summary"]["ready_count"] == 1 + assert payload["summary"]["signature_guard_candidate_count"] == 2 + assert payload["controlled_apply"]["writes_database"] is False + + +def test_marketplace_embedding_signature_guard_route_returns_readback( + tmp_path, + monkeypatch, +): + from flask import Flask + from routes import system_public_routes as routes + from services import ( + pixelrag_marketplace_embedding_signature_guard_replay_service as service, + ) + + promotion_root = tmp_path / "promotion_gate" + _write_promotion_gate_receipt(promotion_root) + monkeypatch.setattr( + service, + "DEFAULT_PROMOTION_GATE_RECEIPT_ROOT", + str(promotion_root), + ) + + app = Flask(__name__) + with app.test_request_context( + "/api/ai-automation/pixelrag-marketplace-embedding-signature-guard-replay?platform=coupang_tw" + ): + response = ( + routes + .ai_automation_pixelrag_marketplace_embedding_signature_guard_replay_api + .__wrapped__() + ) + payload = response.get_json() + + assert payload["policy"] == ( + "controlled_pixelrag_marketplace_embedding_signature_guard_replay_v1" + ) + assert payload["summary"]["candidate_count"] == 1 + assert payload["summary"]["ready_count"] == 1 + assert payload["controlled_apply"]["writes_database"] is False