create-windy 0.6.11 → 0.6.14

package/template/apps/agent-server/tests/test_adk_debug_sessions.py

@@ -1,215 +0,0 @@
-from __future__ import annotations
-
-import httpx
-import pytest
-from google.adk.cli.service_registry import get_service_registry
-from google.adk.events.event import Event
-from google.genai import types
-
-from adk_web_agents.services import SESSION_SERVICE_URI
-from southwind_agent_server.adk_debug_sessions import (
-    IMPORTED_SESSION_STATE_KEY,
-    DebugSessionDetailV1,
-    DebugSessionListEnvelopeV1,
-    ImportedDebugSessionReadOnlyError,
-    WindyDebugSessionClientV1,
-    WindyDebugSessionServiceV1,
-)
-
-SESSION_ID = "wdbg1_" + "a" * 43
-
-
-def test_services_module_registers_official_custom_uri(
-    monkeypatch: pytest.MonkeyPatch,
-) -> None:
-    monkeypatch.setenv("ADK_DEBUG_PLATFORM_URL", "https://platform.test")
-    monkeypatch.setenv("ADK_DEBUG_PLATFORM_TOKEN", "debug-token")
-
-    service = get_service_registry().create_session_service(SESSION_SERVICE_URI)
-
-    assert isinstance(service, WindyDebugSessionServiceV1)
-
-
-async def test_client_uses_read_only_platform_routes_and_strict_v1_dto() -> None:
-    requests: list[httpx.Request] = []
-
-    async def handler(request: httpx.Request) -> httpx.Response:
-        requests.append(request)
-        if request.url.path.endswith(SESSION_ID):
-            return httpx.Response(200, json=detail_envelope())
-        return httpx.Response(200, json=list_envelope())
-
-    client = WindyDebugSessionClientV1(
-        "https://platform.test",
-        "debug-token",
-        transport=httpx.MockTransport(handler),
-    )
-
-    listed = await client.list()
-    detail = await client.get(SESSION_ID)
-
-    assert listed.sessions[0].id == SESSION_ID
-    assert detail and detail.messages[1].content == "只读回答"
-    assert [request.method for request in requests] == ["GET", "GET"]
-    assert all(
-        request.headers["authorization"] == "Bearer debug-token" for request in requests
-    )
-
-
-async def test_service_overlays_imported_projection_and_keeps_local_sessions() -> None:
-    client = FakeClient()
-    service = WindyDebugSessionServiceV1(client)
-    local = await service.create_session(
-        app_name="canonical_debug",
-        user_id="user",
-        session_id="local-session",
-        state={"topic": "local"},
-    )
-
-    listed = await service.list_sessions(app_name="canonical_debug", user_id="user")
-    imported = await service.get_session(
-        app_name="canonical_debug",
-        user_id="user",
-        session_id=SESSION_ID,
-    )
-
-    assert {session.id for session in listed.sessions} == {
-        local.id,
-        SESSION_ID,
-    }
-    assert imported
-    assert imported.state[IMPORTED_SESSION_STATE_KEY] is True
-    assert [event.content.role for event in imported.events if event.content] == [
-        "user",
-        "model",
-    ]
-    await service.delete_session(
-        app_name="canonical_debug", user_id="user", session_id=SESSION_ID
-    )
-    after_delete = await service.list_sessions(
-        app_name="canonical_debug", user_id="user"
-    )
-    assert [session.id for session in after_delete.sessions] == [local.id]
-
-
-def test_list_contract_accepts_all_sessions_after_platform_drains_pages() -> None:
-    envelope = DebugSessionListEnvelopeV1.model_validate(
-        {
-            "schemaVersion": 1,
-            "sessions": [
-                {
-                    **summary(),
-                    "id": f"wdbg1_{index:043d}",
-                    "title": f"历史研判 {index}",
-                }
-                for index in range(101)
-            ],
-            "truncated": False,
-        }
-    )
-
-    assert len(envelope.sessions) == 101
-
-
-async def test_imported_projection_rejects_mutation_and_follow_up() -> None:
-    service = WindyDebugSessionServiceV1(FakeClient())
-    imported = await service.get_session(
-        app_name="canonical_debug",
-        user_id="user",
-        session_id=SESSION_ID,
-    )
-    assert imported
-
-    with pytest.raises(ImportedDebugSessionReadOnlyError, match="只读投影"):
-        await service.append_event(
-            imported,
-            Event(
-                author="user",
-                content=types.Content(role="user", parts=[types.Part(text="继续追问")]),
-            ),
-        )
-    with pytest.raises(ImportedDebugSessionReadOnlyError, match="保留值"):
-        await service.create_session(
-            app_name="canonical_debug",
-            user_id="user",
-            session_id=SESSION_ID,
-        )
-
-
-@pytest.mark.parametrize(
-    "error",
-    [
-        pytest.param(httpx.ConnectError("offline"), id="connect-error"),
-        pytest.param(ValueError("provider failed"), id="provider-exception"),
-    ],
-)
-async def test_remote_failure_does_not_break_normal_local_sessions(
-    error: Exception,
-) -> None:
-    service = WindyDebugSessionServiceV1(FailingListClient(error))
-    local = await service.create_session(
-        app_name="canonical_debug", user_id="user", session_id="local-session"
-    )
-
-    listed = await service.list_sessions(app_name="canonical_debug", user_id="user")
-
-    assert [session.id for session in listed.sessions] == [local.id]
-
-
-class FakeClient:
-    async def list(self) -> DebugSessionListEnvelopeV1:
-        return DebugSessionListEnvelopeV1.model_validate(list_envelope())
-
-    async def get(self, session_id: str) -> DebugSessionDetailV1 | None:
-        if session_id != SESSION_ID:
-            return None
-        return DebugSessionDetailV1.model_validate(detail_envelope()["session"])
-
-
-class FailingListClient(FakeClient):
-    def __init__(self, error: Exception) -> None:
-        self._error = error
-
-    async def list(self) -> DebugSessionListEnvelopeV1:
-        raise self._error
-
-
-def list_envelope() -> dict[str, object]:
-    return {
-        "schemaVersion": 1,
-        "sessions": [summary()],
-        "truncated": False,
-    }
-
-
-def detail_envelope() -> dict[str, object]:
-    return {
-        "schemaVersion": 1,
-        "session": {
-            **summary(),
-            "messages": [
-                {
-                    "sequence": 1,
-                    "role": "user",
-                    "content": "历史问题",
-                    "createdAt": "2026-07-31T01:00:00.000Z",
-                },
-                {
-                    "sequence": 2,
-                    "role": "assistant",
-                    "content": "只读回答",
-                    "createdAt": "2026-07-31T01:00:01.000Z",
-                },
-            ],
-        },
-    }
-
-
-def summary() -> dict[str, object]:
-    return {
-        "id": SESSION_ID,
-        "title": "历史研判",
-        "scopeLabel": "当前范围",
-        "updatedAt": "2026-07-31T01:00:01.000Z",
-        "revision": "2",
-    }

package/template/apps/agent-server/tests/test_adk_web_agent.py

@@ -1,12 +0,0 @@
-from __future__ import annotations
-
-from google.adk.models.base_llm import BaseLlm
-
-from adk_web_agents.safe_debug.agent import root_agent
-
-
-def test_adk_web_agent_has_no_business_tools_or_provider_model() -> None:
-    assert root_agent.name == "safe_debug"
-    assert root_agent.tools == []
-    assert isinstance(root_agent.model, BaseLlm)
-    assert root_agent.model.model == "windy-safe-debug"

package/template/apps/agent-server/tests/test_adk_web_canonical_debug.py

@@ -1,282 +0,0 @@
-from __future__ import annotations
-
-import json
-from pathlib import Path
-
-import httpx
-import pytest
-from google.adk.models.llm_request import LlmRequest
-from google.genai import types
-
-from adk_web_agents.canonical_debug.agent import (
-    TOOL_NAME,
-    CanonicalDebugLlm,
-    build_root_agent,
-    ensure_debug_session_writable,
-)
-from southwind_agent_server.adk_debug import (
-    MAX_EVENT_FRAME_BYTES,
-    CanonicalRunDebugClient,
-    TextOperationDebugConfig,
-    compact_events,
-    load_text_operation_debug_config,
-    sse_events,
-)
-from southwind_agent_server.adk_debug_sessions import (
-    ImportedDebugSessionReadOnlyError,
-)
-
-OPERATION = TextOperationDebugConfig("customer.copilot.global")
-
-
-async def test_client_runs_project_operation_through_canonical_api() -> None:
-    requests: list[httpx.Request] = []
-
-    async def handler(request: httpx.Request) -> httpx.Response:
-        requests.append(request)
-        if request.url.path == "/api/agent/runs":
-            return httpx.Response(200, json={"runId": "run_debug"})
-        if request.url.path.endswith("/events"):
-            return httpx.Response(
-                200,
-                content=(
-                    b"event: tool.requested\ndata: "
-                    b'{"sequence":1,"type":"tool.requested",'
-                    b'"toolKey":"customer.records.search"}\n\n'
-                    b"event: run.completed\ndata: "
-                    b'{"sequence":2,"type":"run.completed"}\n\n'
-                ),
-            )
-        if request.url.path.endswith("/result"):
-            return httpx.Response(
-                200,
-                json={
-                    "runId": "run_debug",
-                    "status": "completed",
-                    "output": {"text": "真实回答"},
-                },
-            )
-        raise AssertionError(request.url)
-
-    client = CanonicalRunDebugClient(
-        OPERATION.operation_key,
-        "https://platform.test",
-        "developer-token",
-        transport=httpx.MockTransport(handler),
-    )
-
-    result = await client.run("请查询案件")
-
-    assert result == {
-        "runId": "run_debug",
-        "answer": "真实回答",
-        "events": [
-            {
-                "sequence": 1,
-                "type": "tool.requested",
-                "toolKey": "customer.records.search",
-            },
-            {"sequence": 2, "type": "run.completed"},
-        ],
-    }
-    assert requests[0].headers["authorization"] == "Bearer developer-token"
-    assert json.loads(requests[0].content) == {
-        "operationKey": "customer.copilot.global",
-        "input": {"question": "请查询案件"},
-    }
-
-
-async def test_dispatcher_sends_user_text_to_canonical_tool() -> None:
-    model = CanonicalDebugLlm(OPERATION)
-    request = LlmRequest(
-        contents=[types.Content(role="user", parts=[types.Part(text="查测试数据")])]
-    )
-
-    responses = [response async for response in model.generate_content_async(request)]
-
-    response = responses[0]
-    assert response.content and response.content.parts
-    call = response.content.parts[0].function_call
-    assert call
-    assert call.name == TOOL_NAME
-    assert call.args == {"question": "查测试数据"}
-    assert build_root_agent(OPERATION).name == "canonical_debug"
-    assert len(build_root_agent(OPERATION).tools) == 1
-
-
-async def test_dispatcher_renders_result_and_bounded_event_summary() -> None:
-    model = CanonicalDebugLlm(OPERATION)
-    request = LlmRequest(
-        contents=[
-            types.Content(role="user", parts=[types.Part(text="查测试数据")]),
-            types.Content(
-                role="user",
-                parts=[
-                    types.Part(
-                        function_response=types.FunctionResponse(
-                            name=TOOL_NAME,
-                            response={
-                                "runId": "run_debug",
-                                "answer": "真实回答",
-                                "events": [{"type": "run.completed"}],
-                            },
-                        )
-                    )
-                ],
-            ),
-        ]
-    )
-
-    responses = [response async for response in model.generate_content_async(request)]
-
-    response = responses[0]
-    assert response.content and response.content.parts
-    assert response.content.parts[0].text == (
-        '真实回答\n\n---\n调试 Run：run_debug\n事件摘要：[{"type": "run.completed"}]'
-    )
-
-
-async def test_dispatcher_ignores_previous_turn_tool_response() -> None:
-    model = CanonicalDebugLlm(OPERATION)
-    request = LlmRequest(
-        contents=[
-            types.Content(role="user", parts=[types.Part(text="第一轮问题")]),
-            types.Content(
-                role="user",
-                parts=[
-                    types.Part(
-                        function_response=types.FunctionResponse(
-                            name=TOOL_NAME,
-                            response={
-                                "runId": "run_previous",
-                                "answer": "上一轮回答",
-                                "events": [],
-                            },
-                        )
-                    )
-                ],
-            ),
-            types.Content(role="model", parts=[types.Part(text="上一轮回答")]),
-            types.Content(role="user", parts=[types.Part(text="第二轮问题")]),
-        ]
-    )
-
-    responses = [response async for response in model.generate_content_async(request)]
-
-    response = responses[0]
-    assert response.content and response.content.parts
-    call = response.content.parts[0].function_call
-    assert call
-    assert call.name == TOOL_NAME
-    assert call.args == {"question": "第二轮问题"}
-
-
-async def test_unconfigured_project_fails_closed_without_tool() -> None:
-    model = CanonicalDebugLlm(None)
-    request = LlmRequest(
-        contents=[types.Content(role="user", parts=[types.Part(text="查测试数据")])]
-    )
-
-    responses = [response async for response in model.generate_content_async(request)]
-
-    response = responses[0]
-    assert response.content and response.content.parts
-    assert "尚未" in (response.content.parts[0].text or "")
-    assert build_root_agent(None).tools == []
-
-
-def test_imported_session_follow_up_fails_closed() -> None:
-    with pytest.raises(ImportedDebugSessionReadOnlyError, match="只读投影"):
-        ensure_debug_session_writable(True)
-
-    ensure_debug_session_writable(False)
-
-
-def test_project_config_selects_only_operation_key(tmp_path: Path) -> None:
-    path = tmp_path / "adk-web-debug.json"
-    path.write_text(
-        '{"schemaVersion":1,"textOperation":'
-        '{"key":"customer.copilot.global","dataActorId":"user_dev_admin"}}',
-        encoding="utf-8",
-    )
-
-    assert load_text_operation_debug_config(path) == TextOperationDebugConfig(
-        "customer.copilot.global", "user_dev_admin"
-    )
-
-
-def test_environment_selects_operation_without_mount(
-    monkeypatch: pytest.MonkeyPatch,
-) -> None:
-    monkeypatch.setenv("ADK_DEBUG_OPERATION_KEY", "customer.copilot.global")
-
-    assert load_text_operation_debug_config() == OPERATION
-
-
-def test_missing_project_config_is_unconfigured(tmp_path: Path) -> None:
-    assert load_text_operation_debug_config(tmp_path / "missing.json") is None
-
-
-def test_project_config_rejects_unknown_fields(tmp_path: Path) -> None:
-    path = tmp_path / "adk-web-debug.json"
-    path.write_text(
-        '{"schemaVersion":1,"textOperation":null,"token":"forbidden"}',
-        encoding="utf-8",
-    )
-
-    with pytest.raises(RuntimeError, match="格式无效"):
-        load_text_operation_debug_config(path)
-
-
-def test_client_rejects_missing_user_token(
-    monkeypatch: pytest.MonkeyPatch,
-) -> None:
-    monkeypatch.delenv("ADK_DEBUG_PLATFORM_TOKEN", raising=False)
-
-    with pytest.raises(RuntimeError, match="ADK_DEBUG_PLATFORM_TOKEN"):
-        CanonicalRunDebugClient.from_environment(OPERATION.operation_key)
-
-
-def test_event_summary_compacts_streaming_output() -> None:
-    events = compact_events(
-        [
-            {"sequence": 1, "type": "run.started"},
-            {"sequence": 2, "type": "output.delta"},
-            {"sequence": 3, "type": "output.delta"},
-            {"sequence": 4, "type": "run.completed"},
-        ]
-    )
-
-    assert events == [
-        {"sequence": 1, "type": "run.started"},
-        {"sequence": 4, "type": "run.completed"},
-        {"type": "output.delta", "count": 2},
-    ]
-
-
-async def test_event_stream_rejects_oversized_frame() -> None:
-    response = httpx.Response(
-        200,
-        content=b"event: output.delta\ndata: " + b"x" * MAX_EVENT_FRAME_BYTES,
-    )
-
-    with pytest.raises(RuntimeError, match="超过调试上限"):
-        _ = [event async for event in sse_events(response)]
-
-
-def test_event_summary_never_exceeds_visible_limit() -> None:
-    events = compact_events(
-        [
-            *[
-                {"sequence": sequence, "type": "tool.completed"}
-                for sequence in range(100)
-            ],
-            {"sequence": 101, "type": "output.delta"},
-        ]
-    )
-
-    assert len(events) == 64
-    assert events[-2:] == [
-        {"type": "output.delta", "count": 1},
-        {"type": "events.truncated", "count": 38},
-    ]

package/template/apps/server/src/agent/run-debug-authorization.ts

@@ -1,27 +0,0 @@
-import { projectedModuleUserId, type RequestActor } from "../guards.js";
-import { AgentRunFacadeError, inaccessibleRun } from "./run-errors.js";
-
-interface AgentDebugOperationRuntime {
-  agentDebugOperationForActor(actorId: string): string | undefined;
-}
-
-export function assertSelectedDebugOperation(
-  runtime: AgentDebugOperationRuntime,
-  actorId: string,
-  operationKey: string,
-  disclosure: "forbidden" | "hidden",
-) {
-  const selected = runtime.agentDebugOperationForActor(actorId);
-  if (!selected || selected === operationKey) return;
-  if (disclosure === "hidden") throw inaccessibleRun();
-  throw new AgentRunFacadeError(
-    "FORBIDDEN",
-    "ADK Web 调试身份只能执行项目选定的 Agent Operation",
-    403,
-  );
-}
-
-export function debugActorAuditMetadata(actor: RequestActor) {
-  const userId = projectedModuleUserId(actor);
-  return userId ? { debugDataActorId: userId } : {};
-}

package/template/apps/server/src/agent/run-facade-adk-debug.test.ts

@@ -1,95 +0,0 @@
-import { describe, expect, test } from "bun:test";
-import { AgentRunFacade } from "./run-facade.js";
-import {
-  createRunFacadeFixture,
-  runFacadeManifest,
-} from "./run-facade.test-support.js";
-import { createTestRunAuthorizationStore } from "./run-authorization.test-support.js";
-import { debugActorAuditMetadata } from "./run-debug-authorization.js";
-import { bindModuleUserProjection } from "../guards.js";
-import { buildScopeContext } from "../data-access/context.js";
-
-describe("ADK 调试 Operation 边界", () => {
-  test("专用身份不能切换到未选定的 Agent Operation", async () => {
-    const fixture = await createRunFacadeFixture();
-    const runtime = Object.assign(fixture.runtime, {
-      agentDebugOperationForActor(actorId: string) {
-        return actorId === "actor-1" ? "business.other" : undefined;
-      },
-    });
-    const facade = new AgentRunFacade(
-      [runFacadeManifest()],
-      fixture.hosts,
-      runtime,
-      fixture.remote,
-      createTestRunAuthorizationStore(),
-    );
-
-    await expect(
-      facade.start(
-        "business.answer",
-        { question: "越权切换" },
-        "request-debug",
-        fixture.context,
-      ),
-    ).rejects.toMatchObject({ code: "FORBIDDEN", status: 403 });
-    await expect(
-      facade.authorizeRun("business.answer", "run_1", fixture.context),
-    ).rejects.toMatchObject({ code: "RUN_CONFLICT", status: 404 });
-  });
-
-  test("审计显式记录业务数据用户但不替换核心调试主体", () => {
-    expect(
-      debugActorAuditMetadata(
-        bindModuleUserProjection(
-          {
-            id: "service_adk_debug",
-            type: "service",
-            name: "ADK 开发调试",
-            roleCodes: ["adk-debug"],
-            permissionKeys: ["business.answer.execute"],
-          },
-          "user_dev_admin",
-        ),
-      ),
-    ).toEqual({ debugDataActorId: "user_dev_admin" });
-  });
-
-  test("报表按 Module Actor 投影归属真实调试用户", async () => {
-    const fixture = await createRunFacadeFixture();
-    const actor = bindModuleUserProjection(
-      {
-        ...fixture.context.actor,
-        id: "service_adk_debug",
-        type: "service",
-        scopeContext: buildScopeContext("user_dev_admin", "dept_platform", [
-          {
-            id: "role-debug",
-            code: "debug",
-            dataScope: "self",
-            departmentIds: [],
-          },
-        ]),
-      },
-      "user_dev_admin",
-    );
-    const context = { ...fixture.context, actor };
-    Object.assign(fixture.runtime, {
-      agentDebugOperationForActor: (actorId: string) =>
-        actorId === "service_adk_debug" ? "business.answer" : undefined,
-    });
-
-    await fixture.facade.start(
-      "business.answer",
-      { question: "调试归属" },
-      "request-debug-report",
-      context,
-    );
-
-    expect(fixture.remote.started[0]?.reporting).toEqual({
-      actorId: "user_dev_admin",
-      actorType: "user",
-      departmentId: "dept_platform",
-    });
-  });
-});