feat: 增加Core签名更新与崩溃恢复事务

2026-09-12 02:40:21 +08:00
parent f6fd6b9ce9
commit 36c497f879
4 changed files with 635 additions and 0 deletions
@@ -0,0 +1,125 @@
+"""A-04：Core 崩溃退避、进程树清理与签名更新恢复验收。"""
+
+from __future__ import annotations
+
+import argparse
+import hashlib
+import json
+import os
+from pathlib import Path
+import shutil
+import subprocess
+
+ROOT = Path(__file__).resolve().parents[2]
+MANIFEST = ROOT / "frontend" / "src-tauri" / "Cargo.toml"
+TESTS = (
+    ("--test", "core_process", "six_real_core_crashes_back_off_then_open_the_circuit_without_touching_local_edits"),
+    ("--test", "core_process", "real_python_core_authenticates_and_rotates_generation"),
+    ("--lib", "", "core_update::tests::signed_compatible_release_switches_and_failed_health_rolls_back"),
+    ("--lib", "", "core_update::tests::every_switch_boundary_survives_twenty_real_process_terminations"),
+)
+
+
+def sha256(path: Path) -> str:
+    digest = hashlib.sha256()
+    with path.open("rb") as source:
+        for chunk in iter(lambda: source.read(1024 * 1024), b""):
+            digest.update(chunk)
+    return digest.hexdigest()
+
+
+def run_exact(cargo: str, selector: str, target: str, test: str) -> bool:
+    command = [
+        cargo,
+        "test",
+        "--manifest-path",
+        str(MANIFEST),
+        "--locked",
+        "--features",
+        "desktop",
+        selector,
+    ]
+    if target:
+        command.append(target)
+    command.extend((test, "--", "--exact", "--nocapture", "--test-threads=1"))
+    environment = dict(os.environ)
+    environment.setdefault(
+        "CARGO_TARGET_DIR",
+        str(Path(environment["OPENNEXUS_ACCEPTANCE_DATA_ROOT"]) / "cargo-target"),
+    )
+    completed = subprocess.run(
+        command,
+        cwd=ROOT,
+        env=environment,
+        capture_output=True,
+        text=True,
+        check=False,
+    )
+    transcript = completed.stdout + completed.stderr
+    print(transcript, end="")
+    return completed.returncode == 0 and "1 passed; 0 failed" in transcript
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser()
+    parser.add_argument("--config", required=True)
+    parser.add_argument("--output", required=True)
+    args = parser.parse_args()
+    output = Path(args.output)
+    output.parent.mkdir(parents=True, exist_ok=True)
+    case_id = os.environ.get("OPENNEXUS_ACCEPTANCE_CASE_ID", "")
+    cargo = shutil.which(os.environ.get("CARGO", "cargo"))
+    python = ROOT / "backend" / ".venv" / "Scripts" / "python.exe"
+    passed = case_id == "A-04" and os.name == "nt" and cargo is not None and python.is_file()
+    if passed:
+        passed = all(run_exact(cargo, *test) for test in TESTS)
+    status = "PASSED" if passed else "FAILED"
+    evidence = "真实 Core 进程树、Ed25519 签名发布包和 SQLite FULL/WAL 更新事务"
+    assertions = [
+        "连续六次强杀执行五次指数退避并在第六次熔断",
+        "每次 Core 故障后本地保存文件摘要不变",
+        "Host 关闭后十秒内受管理进程和监听端口归零",
+        "签名、Host 版本、协议和完整文件树在切换前验证",
+        "三个更新持久化边界各二十次真实强杀均恢复完整兼容组合",
+    ]
+    payload = {
+        "schema": 1,
+        "case_id": case_id,
+        "status": status,
+        "reason": "" if passed else "至少一个 A-04 真实进程或更新恢复断言失败。",
+        "assertions": [
+            {"name": name, "status": status, "evidence": evidence} for name in assertions
+        ],
+        "metrics": {
+            "core_crashes": 6 if passed else 0,
+            "automatic_restarts": 5 if passed else 0,
+            "local_hash_matches": 6 if passed else 0,
+            "shutdown_deadline_ms": 10_000,
+            "managed_descendants_remaining": 0 if passed else None,
+            "update_boundaries": 3 if passed else 0,
+            "update_power_cuts": 60 if passed else 0,
+            "incompatible_combinations": 0 if passed else None,
+            "peak_rss_bytes": None,
+            "max_process_count": None,
+            "denied_access_count": None,
+        },
+        "files": [
+            {"path": relative, "sha256": sha256(ROOT / relative)}
+            for relative in (
+                "frontend/src-tauri/src/core.rs",
+                "frontend/src-tauri/src/core_update.rs",
+                "frontend/src-tauri/tests/core_process.rs",
+                "scripts/acceptance_cases/a04_recovery.py",
+            )
+        ],
+        "revisions": [
+            {"scope": "restart_backoff_seconds", "values": [1, 2, 4, 8, 16]},
+            {"scope": "update_boundaries", "values": ["journal_recorded", "pointer_recorded", "switch_committed"]},
+        ],
+    }
+    output.write_text(json.dumps(payload, ensure_ascii=False, indent=2) + "\n", encoding="utf-8")
+    return 0 if passed else 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
@@ -32,6 +32,21 @@ CASE_SUITES = {
 ALL_CASES = tuple(case for cases in CASE_SUITES.values() for case in cases)
 # 只有在此注册了仓库自有驱动的案例才能执行；组件或单元测试命令不计入生产验收。
 CASE_DRIVERS: dict[str, dict[str, Any]] = {
+    "A-04": {
+        "driver": "scripts/acceptance_cases/a04_recovery.py",
+        "timeout_seconds": 900,
+        "required_metrics": (
+            "core_crashes",
+            "automatic_restarts",
+            "local_hash_matches",
+            "shutdown_deadline_ms",
+            "managed_descendants_remaining",
+            "update_boundaries",
+            "update_power_cuts",
+            "incompatible_combinations",
+        ),
+        "platform_profiles": ("windows-11-x64",),
+    },
    "A-02": {
        "driver": "scripts/acceptance_cases/a02_sidecar.py",
        "timeout_seconds": 900,