@tea-agent/loop-agent 0.36.4-beta.0 → 0.37.1-beta.0

package/dist/workflows/dag/backend-test-case-manifest.js

@@ -149,6 +149,10 @@ export const backendTestCaseManifestSchema = z
         crossCuttingTestPointCount: z.number().int().min(0),
         unclassifiedTestPointCount: z.number().int().min(0),
         duplicateBindingTestPointCount: z.number().int().min(0),
+        payloadSafeCount: z.number().int().min(0),
+        payloadUnsafeCount: z.number().int().min(0),
+        payloadUnavailableCount: z.number().int().min(0),
+        duplicateExecutionSignatureCount: z.number().int().min(0),
     }).strict().optional(),
     artifactRefs: z.object({
         caseCoverageFacts: z.object({ path: z.string().min(1), sha256: z.string().regex(/^[a-f0-9]{64}$/).optional() }).strict(),

package/dist/workflows/dag/backend-test-markdown-workflow.js

@@ -17,7 +17,7 @@ const CANONICAL_CASE_ID = /\bBE-[A-Z0-9]+(?:-[A-Z0-9]+)*-\d{3}\b/;
 const AC_ID = /\bAC-[A-Z0-9]+(?:-[A-Z0-9]+)*\b/g;
 const SECRET = /(?:password|passwd|secret|token|api[_-]?key|private[_-]?key|authorization)\s*[:=]\s*\S+/i;
 const SECRET_ASSIGNMENT = /\b(password|passwd|secret|token|api[_-]?key|private[_-]?key|authorization|cookie|set-cookie|credential)\b\s*[:=]\s*([^\r\n,;]+)/gi;
-const SECRET_VALUE = /-----BEGIN [A-Z ]*PRIVATE KEY-----|\b(?:ghp|github_pat|xox[baprs]|AKIA|sk)[-_A-Za-z0-9]{12,}\b/i;
+const SECRET_VALUE = /-----BEGIN [A-Z ]*PRIVATE KEY-----|\b(?:ghp|github_pat|xox[baprs]|AKIA)[-_A-Za-z0-9]{12,}\b|\bsk[-_][-_A-Za-z0-9]{10,}\b/i;
 const PLACEHOLDER_SECRET_VALUE = /^(?:<[^>]+>|\$\{[^}]+\}|\*+|x+|redacted|masked|example(?:[-_].*)?|sample(?:[-_].*)?|dummy(?:[-_].*)?|test(?:[-_].*)?|your[-_].*)$/i;
 const PLACEHOLDER = /\b(?:TODO|TBD|FIXME)\b|后续补充|暂不实现|接口正常|结果正确|按实际情况处理/i;
 const CASE_SECTION_ALIASES = {
@@ -303,6 +303,8 @@ function isCleanupStatement(value) {
         return false;
     if (/\b(?:assert|pytest\.fail|raise)\b/.test(trimmed))
         return false;
+    if (/\b[A-Za-z_][A-Za-z0-9_.]*request\s*\(\s*["']DELETE["']/i.test(trimmed))
+        return true;
     return /(?:^|[._])(?:cleanup|clean_up|teardown|delete|remove|close|release|rollback|disconnect|dispose|unlink)(?:[_(.]|$)/i.test(trimmed);
 }
 function findUnsafeSwallowedException(source) {
@@ -326,7 +328,18 @@ function findUnsafeSwallowedException(source) {
             continue;
         }
         const exceptionType = exceptMatch[2]?.trim() || "bare except";
-        if (exceptionType !== "requests.RequestException") {
+        const narrowDecodeTypes = exceptionType
+            .replace(/[()]/g, "")
+            .split(",")
+            .map((value) => value.trim())
+            .filter(Boolean);
+        const precedingDecodeRegion = lines.slice(Math.max(0, index - 8), index).join("\n");
+        if (narrowDecodeTypes.length > 0 &&
+            narrowDecodeTypes.every((value) => value === "UnicodeDecodeError" || value === "json.JSONDecodeError") &&
+            /\.json\s*\(\s*\)/.test(precedingDecodeRegion)) {
+            continue;
+        }
+        if (!new Set(["requests.RequestException", "urllib.error.URLError", "httpx.RequestError"]).has(exceptionType)) {
             return exceptionType;
         }
         let tryIndex = index - 1;
@@ -366,9 +379,18 @@ function httpLoggingFindings(relativeScript, source) {
     if (!hasHttpRequest)
         return [];
     const findings = [];
-    const hasRequestLog = /(?:print|log(?:ger)?\.(?:debug|info|warning|error))\s*\([^\n]*(?:request|请求)[^\n]*(?:method|url|path|params|query|json|body|payload|参数)/i.test(source);
-    const hasResponseLog = /(?:print|log(?:ger)?\.(?:debug|info|warning|error))\s*\([^\n]*(?:response|响应)[^\n]*(?:status|status_code|body|json|text|result|结果)/i.test(source);
-    const hasSanitizer = /\b(?:sanitize|sanitise|redact|mask)[A-Za-z0-9_]*\s*\(|\b[A-Za-z0-9_]*(?:sanitize|sanitise|redact|mask)[A-Za-z0-9_]*\s*\(/i.test(source);
+    const hasRequestLog = /(?:print|log(?:ger)?\.(?:debug|info|warning|error))\s*\([^\n]*(?:request|请求)[^\n]*(?:method|url|path|params|query|json|body|payload|参数)/i.test(source)
+        || /["']record["']\s*:\s*["']request["'][\s\S]{0,600}["'](?:method|url|path|params|query|json|body|payload)["']\s*:/i.test(source)
+        || /\b[A-Za-z_][A-Za-z0-9_]*log[A-Za-z0-9_]*\s*\(\s*["'](?:HTTP|API)_REQUEST["'][\s\S]{0,600}["'](?:method|url|path|params|query|json|body|payload)["']\s*:/i.test(source)
+        || /print\s*\(\s*f?["'](?:HTTP|API)(?:_|\s+)REQUEST\b/i.test(source) && /["'](?:method|url|path|params|query|json|body|payload)["']\s*:/i.test(source)
+        || /\b[A-Za-z_][A-Za-z0-9_]*log\s*\(\s*["']REQUEST["'][\s\S]{0,600}["'](?:method|url|path|params|query|json|body|payload)["']\s*:/i.test(source);
+    const hasResponseLog = /(?:print|log(?:ger)?\.(?:debug|info|warning|error))\s*\([^\n]*(?:response|响应)[^\n]*(?:status|status_code|body|json|text|result|结果)/i.test(source)
+        || /["']record["']\s*:\s*["']response["'][\s\S]{0,600}["'](?:status|status_code|body|json|text|result)["']\s*:/i.test(source)
+        || /\b[A-Za-z_][A-Za-z0-9_]*log[A-Za-z0-9_]*\s*\(\s*["'](?:HTTP|API)_RESPONSE["'][\s\S]{0,600}["'](?:status|status_code|body|json|text|result)["']\s*:/i.test(source)
+        || /print\s*\(\s*f?["'](?:HTTP|API)(?:_|\s+)RESPONSE\b/i.test(source) && /["'](?:status|status_code|body|json|text|result)["']\s*:/i.test(source)
+        || /\b[A-Za-z_][A-Za-z0-9_]*log\s*\(\s*["']RESPONSE["'][\s\S]{0,600}["'](?:status|status_code|body|json|text|result)["']\s*:/i.test(source);
+    const hasSanitizer = /\b(?:sanitize|sanitise|redact|mask)[A-Za-z0-9_]*\s*\(|\b[A-Za-z0-9_]*(?:sanitize|sanitise|redact|mask)[A-Za-z0-9_]*\s*\(/i.test(source)
+        || /(?:SENSITIVE_KEYS|sensitive_keys)[\s\S]{0,1600}["']<redacted>["']/i.test(source);
     const hasBoundedOutput = /(?:MAX_[A-Z_]*(?:LOG|BODY|RESPONSE)|max_(?:log|body|response)|truncate|truncat|\[:\s*\d{3,}\s*\])/i.test(source);
     if (!hasRequestLog)
         findings.push(`request logging evidence is missing in mapped backend pytest: ${relativeScript}`);
@@ -459,6 +481,15 @@ export async function validateBackendMarkdownCases(input) {
                     findings.push(`${testCase.id} missing section: ${sectionAliases.join(" or ")}`);
                 }
             }
+            const bindingFinding = markdownTestPointBindingFinding(testCase.id, testCase.body);
+            if (bindingFinding)
+                findings.push(bindingFinding);
+            const payloadLabelFinding = markdownPayloadLabelFinding(testCase.id, testCase.body);
+            if (payloadLabelFinding)
+                findings.push(payloadLabelFinding);
+            const scenarioIntentFinding = markdownScenarioIntentFinding(testCase.id, testCase.body);
+            if (scenarioIntentFinding)
+                findings.push(scenarioIntentFinding);
             const acIds = unique(testCase.body.match(AC_ID) ?? []);
             acIds.forEach((id) => coveredAc.add(id));
             const steps = sectionBody(testCase.body, CASE_SECTION_ALIASES.steps);
@@ -471,7 +502,10 @@ export async function validateBackendMarkdownCases(input) {
             }
             const expectedScript = expectedBackendTestPytestScriptForMarkdownModule(relativeFile);
             const mappedScripts = extractMappedPytestScripts(testCase.body);
-            if (mappedScripts.length === 0) {
+            if (isEvidenceOnlyMarkdownCaseBody(testCase.body)) {
+                // Evidence-only meta cases intentionally declare 脚本/primary symbol as 无 and keep only assertion/cross-cutting TPs.
+            }
+            else if (mappedScripts.length === 0) {
                 findings.push(`${testCase.id} has no mapped pytest script in Automation Notes/自动化映射 (expected ${expectedScript} from module ${path.basename(relativeFile)})`);
             }
             else {
@@ -560,6 +594,71 @@ function extractMappedPytestScripts(testCaseBody) {
         .map((match) => match[1].replaceAll("\\", "/"))
         .filter((value) => !value.includes("..")));
 }
+function markdownScenarioIntentFinding(testCaseId, testCaseBody) {
+    const automation = sectionBody(testCaseBody, CASE_SECTION_ALIASES.automationNotes);
+    if (!automation.trim())
+        return null;
+    const variantLine = /^(?:\s*[-*+]\s*)?(?:变体测试点|Variant Test Points)\s*[：:]\s*(.*)$/im.exec(automation)?.[1] ?? "";
+    const variants = unique(variantLine.match(/\bTP-[A-Z0-9-]+\b/g) ?? []);
+    if (variants.length === 0)
+        return null;
+    const localIntentIds = unique([...testCaseBody.matchAll(/(?:场景意图|Scenario Intent)\s*[：:]\s*(TP-[A-Z0-9-]+)/gi)].map((match) => match[1].toUpperCase()));
+    const missing = variants.filter((id) => !localIntentIds.includes(id.toUpperCase()));
+    return missing.length > 0
+        ? `${testCaseId} variant Test Points require a local Scenario Intent line inside the same Case: missing=${missing.join(", ")}`
+        : null;
+}
+function markdownPayloadLabelFinding(testCaseId, testCaseBody) {
+    const automation = sectionBody(testCaseBody, CASE_SECTION_ALIASES.automationNotes);
+    if (!automation.trim())
+        return null;
+    const payloadLabel = /Payload (?:Contract|Required Paths|Allowed Paths|Enum)\s*[:：]/gi;
+    for (const line of automation.split(/\r?\n/)) {
+        const matches = line.match(payloadLabel) ?? [];
+        if (matches.length === 0)
+            continue;
+        if (matches.length !== 1 || !/^\s*[-*+]\s*Payload (?:Contract|Required Paths|Allowed Paths|Enum)\s*[:：]/i.test(line)) {
+            return `${testCaseId} payload contract labels must each occupy one independent machine-readable list line`;
+        }
+    }
+    return null;
+}
+function markdownTestPointBindingFinding(testCaseId, testCaseBody) {
+    const declaredSection = sectionBody(testCaseBody, ["测试点", "Test Points"]);
+    const automation = sectionBody(testCaseBody, CASE_SECTION_ALIASES.automationNotes);
+    if (!declaredSection.trim() || !automation.trim())
+        return null;
+    const declared = unique(declaredSection.match(/\bTP-[A-Z0-9-]+\b/g) ?? []);
+    const bindingLines = [
+        /^(?:\s*[-*+]\s*)?(?:变体测试点|Variant Test Points)\s*[：:]\s*(.*)$/gim,
+        /^(?:\s*[-*+]\s*)?(?:场景断言测试点|Assertion Test Points)\s*[：:]\s*(.*)$/gim,
+        /^(?:\s*[-*+]\s*)?(?:横切证据测试点|Cross-Cutting Test Points)\s*[：:]\s*(.*)$/gim,
+    ];
+    const bound = unique(bindingLines.flatMap((pattern) => [...automation.matchAll(pattern)].flatMap((match) => match[1]?.match(/\bTP-[A-Z0-9-]+\b/g) ?? [])));
+    const missingBindings = declared.filter((id) => !bound.includes(id));
+    const undeclaredBindings = bound.filter((id) => !declared.includes(id));
+    if (missingBindings.length === 0 && undeclaredBindings.length === 0)
+        return null;
+    return `${testCaseId} Test Point set must exactly equal variant/assertion/cross-cutting binding union: unclassified=${missingBindings.join(", ") || "none"}; undeclared-bindings=${undeclaredBindings.join(", ") || "none"}`;
+}
+function isEvidenceOnlyMarkdownCaseBody(testCaseBody) {
+    const automation = sectionBody(testCaseBody, CASE_SECTION_ALIASES.automationNotes);
+    if (!automation.trim())
+        return false;
+    const scriptLine = /^\s*[-*+]\s*(?:脚本|script)\s*[：:]\s*(.*)$/im.exec(automation)?.[1]?.replaceAll("`", "").trim() ??
+        "";
+    const primaryLine = /^\s*[-*+]\s*(?:primary symbol|Primary Symbol|主测试符号)\s*[：:]\s*(.*)$/im.exec(automation)?.[1]
+        ?.replaceAll("`", "")
+        .trim() ?? "";
+    const noneLike = /^(?:none|无|n\/a|not-applicable)(?:\s*[（(].*[）)])?$/i;
+    const scriptIsNone = noneLike.test(scriptLine) || scriptLine.length === 0;
+    const primaryIsNone = noneLike.test(primaryLine) || primaryLine.length === 0;
+    const hasMappedScript = extractMappedPytestScripts(testCaseBody).length > 0;
+    const hasPrimary = /\btest_[A-Za-z0-9_]+\b/.test(primaryLine);
+    const hasVariant = /(?:变体测试点|Variant Test Points)\s*[：:]\s*(?!\s*(?:无|none)\b)[^\n]*\bTP-[A-Z0-9-]+/i.test(automation);
+    const hasAssertionOrCross = /(?:场景断言测试点|Assertion Test Points|横切证据测试点|Cross-Cutting Test Points)\s*[：:]\s*(?!\s*(?:无|none)\b)[^\n]*\bTP-[A-Z0-9-]+/i.test(automation);
+    return scriptIsNone && primaryIsNone && !hasMappedScript && !hasPrimary && !hasVariant && hasAssertionOrCross;
+}
 function isSafeBackendPytestScript(script, workspaceRoot) {
     const absolute = path.resolve(workspaceRoot, script);
     const relative = path.relative(workspaceRoot, absolute).replaceAll(path.sep, "/");
@@ -619,8 +718,11 @@ export async function validateBackendMarkdownTraceability(workspaceRoot) {
             continue;
         const content = await readFile(file, "utf8");
         for (const testCase of splitCases(content)) {
-            markdownIds.add(testCase.id);
             const scripts = extractMappedPytestScripts(testCase.body);
+            if (isEvidenceOnlyMarkdownCaseBody(testCase.body)) {
+                continue;
+            }
+            markdownIds.add(testCase.id);
             if (scripts.length === 0) {
                 findings.push(`${testCase.id} has no mapped pytest script in Automation Notes/自动化映射`);
                 continue;

package/dist/workflows/dag/backend-test-module-stem.js

@@ -1,5 +1,7 @@
 import path from "node:path";
 const PRIORITY_ONLY_MODULE_STEMS = new Set(["p0", "p1", "p2"]);
+const OPAQUE_HASH_MODULE_STEM = /^[a-f][a-f0-9]{6,63}$/;
+export const BACKEND_TEST_MAX_MODULE_COUNT = 8;
 export function normalizeBackendTestModuleStemCandidate(raw) {
     return path.basename(raw)
         .replace(/\.(?:md|py)$/i, "")
@@ -11,6 +13,9 @@ export function normalizeBackendTestModuleStemCandidate(raw) {
 export function isPriorityOnlyBackendTestModuleStem(raw) {
     return PRIORITY_ONLY_MODULE_STEMS.has(normalizeBackendTestModuleStemCandidate(raw));
 }
+export function isOpaqueHashBackendTestModuleStem(raw) {
+    return OPAQUE_HASH_MODULE_STEM.test(normalizeBackendTestModuleStemCandidate(raw));
+}
 export function isPriorityOnlyBackendPytestScript(script) {
     const basename = path.posix.basename(script.replaceAll("\\", "/"));
     const match = /^test_(.+)\.py$/i.exec(basename);