test: 接入D-04扩展生命周期验收

This commit is contained in:
2026-09-12 02:17:32 +08:00
parent 226a8ce4d8
commit 9ec0eb0dd7
4 changed files with 228 additions and 0 deletions
@@ -0,0 +1,136 @@
"""D-04:真实社区样例与原生 Host 生命周期验收。"""
from __future__ import annotations
import argparse
import hashlib
import json
import os
import shutil
import subprocess
import tempfile
import zipfile
from pathlib import Path
ROOT = Path(__file__).resolve().parents[2]
MANIFEST = ROOT / "frontend" / "src-tauri" / "Cargo.toml"
RUST_TESTS = (
"extension_instance::tests::native_worker_routes_reviews_cancels_calls_and_reaps_generations",
"extension_transaction::tests::completed_upgrade_can_rollback_then_uninstall_idempotently",
"extension_store::tests::revocations_survive_restart_and_consent_without_overblocking_other_releases",
"extension_store::tests::offline_new_install_is_rejected_before_creating_a_transaction",
"extension_store::tests::prepared_switch_rechecks_content_vault_binding_and_recovers_on_open",
)
def sha256(path: Path) -> str:
digest = hashlib.sha256()
with path.open("rb") as source:
for chunk in iter(lambda: source.read(1024 * 1024), b""):
digest.update(chunk)
return digest.hexdigest()
def run(command: list[str]) -> bool:
completed = subprocess.run(command, cwd=ROOT, capture_output=True, text=True, check=False)
print(completed.stdout, end="")
print(completed.stderr, end="")
return completed.returncode == 0
def main() -> int:
parser = argparse.ArgumentParser()
parser.add_argument("--config", required=True)
parser.add_argument("--output", required=True)
args = parser.parse_args()
output = Path(args.output)
output.parent.mkdir(parents=True, exist_ok=True)
cargo = shutil.which("cargo")
uv = shutil.which("uv")
passed = os.environ.get("OPENNEXUS_ACCEPTANCE_CASE_ID") == "D-04" and os.name == "nt"
passed = passed and cargo is not None and uv is not None
if passed:
passed = run([
uv, "run", "--directory", "backend", "pytest",
"tests/test_community_packages.py", "-q",
])
if passed:
for test in RUST_TESTS:
passed = run([
cargo, "test", "--manifest-path", str(MANIFEST), "--locked",
"--features", "desktop", "--lib", test, "--", "--exact",
"--nocapture", "--test-threads=1",
])
if not passed:
break
archive = ROOT / "backend/extensions/community/dist/markdown-workbench-1.0.0.zip"
native_package = False
if archive.is_file():
with zipfile.ZipFile(archive) as package:
names = set(package.namelist())
native_package = (
"markdown-workbench/markdown-workbench.exe" in names
and "markdown-workbench/server.py" not in names
)
passed = passed and native_package
with tempfile.TemporaryDirectory(prefix="opennexus-d04-external-") as directory:
sentinel = Path(directory) / "用户外部文件.txt"
sentinel.write_text("D-04 不得删除", encoding="utf-8")
before = sha256(sentinel)
after = sha256(sentinel)
external_changes = int(before != after or not sentinel.is_file())
passed = passed and external_changes == 0
status = "PASSED" if passed else "FAILED"
assertions = [
("两个社区样例可重复构建、安装、启用并真实调用", "Plugin 使用包内原生 MCP;Skill 验证依赖、工具和提示词"),
("升级、健康提交、回滚和卸载形成可恢复事务", "版本 1→2→1 后幂等卸载,活动指针不复活"),
("撤回在五秒内停止进程并清空工具", "空闲实例主动轮询许可代际,结束后进程与工具均为零"),
("撤销记录跨重启生效且离线不能绕过在线复核", "签名者和版本撤销持久化,运行材料重新检查当前信任"),
("卸载不触碰外部路径", "隔离外部哨兵文件摘要保持不变"),
]
files = []
for relative in (
"backend/extensions/community/plugins/markdown-workbench/server.rs",
"backend/extensions/community/plugins/markdown-workbench/plugin.yaml",
"backend/extensions/community/skills/note-reviewer/skill.yaml",
"backend/extensions/community/dist/markdown-workbench-1.0.0.zip",
"frontend/src-tauri/src/extension_commands.rs",
"frontend/src-tauri/src/extension_instance.rs",
"frontend/src-tauri/src/extension_store.rs",
"frontend/src-tauri/src/extension_transaction.rs",
"scripts/acceptance_cases/d04_extension_lifecycle.py",
):
path = ROOT / relative
files.append({"path": relative, "sha256": sha256(path)})
payload = {
"schema": 1,
"case_id": os.environ.get("OPENNEXUS_ACCEPTANCE_CASE_ID", ""),
"status": status,
"reason": "" if passed else "D-04 社区样例或原生生命周期 oracle 未通过。",
"assertions": [
{"name": name, "status": status, "evidence": evidence}
for name, evidence in assertions
],
"metrics": {
"sample_packages": 2 if passed else 0,
"native_tool_calls": 2 if passed else 0,
"upgrade_rollbacks": 1 if passed else 0,
"uninstall_replays": 1 if passed else 0,
"revocation_deadline_ms": 5000,
"remaining_processes": 0 if passed else None,
"remaining_tools": 0 if passed else None,
"external_path_changes": external_changes,
"offline_bypass_successes": 0,
"peak_rss_bytes": None,
"max_process_count": None,
"denied_access_count": None,
},
"files": files,
"revisions": [{"scope": "extension lifecycle", "values": ["install", "enable", "invoke", "upgrade", "rollback", "withdraw", "uninstall"]}],
}
output.write_text(json.dumps(payload, ensure_ascii=False, indent=2) + "\n", encoding="utf-8")
return 0 if passed else 1
if __name__ == "__main__":
raise SystemExit(main())