mirror of
https://github.com/ThearchyHelios/AgentLab.git
synced 2026-11-15 21:12:01 +00:00
ThearchyHelios
845809486a
为什么：动作确认、工具 / 代码审批、审批驳回即终止、填写 / 编辑被驳回、双盲裁决的驳回以前抛普通 NodeError，运行记成 failed。 通知推「实例失败」，定时推「运行失败」，发布单把驳回过的试运行说成「试运行失败了」并挡住发布，记录页还给「继续运行」 （接着跑只会读到同一个驳回答复、再停一次）。人的决定被说成故障，每个消费方各写一份映射，已经漏了四处（05-已知遗留 (a)、总方案 X9）。 做了什么： - engine/context 新增 NodeRejected(NodeError)，带 node_id、kind、decision（reject / expired_reject）、actor、note；六处驳回改抛它， 原话一字不变。待办超时驳回的答复带 expired，Decision.expired 据此记成 expired_reject。 - runner._drive 在通用 except 之前单独接住：status=cancelled、end_reason=rejected、error 写原话、error_node 写那一步， run.cancelled 带 reason/node_id/label/kind/decision/actor/note；关审批、回收沙箱、关流、封存走取消的那一套。手动停止 （执行中取消、放弃断点上的运行）写 end_reason=stopped，run.cancelled 带 reason=stopped。 - 继续运行：被驳回的 409 code=run_rejected「被驳回的运行不能接着跑：改好内容后重新发起」；存量 failed+驳回（失败那一步上 最近一条处理完的待办是驳回，和实例页同一份判断 resolve.legacy_rejected）也拒。RunOut 带 end_reason。 - apps/resolve.instance_state：cancelled+rejected 和存量 failed+驳回说同一句（「「付款」未确认（被驳回）」「「x」被驳回」）。 - notify_run：状态那一句取自 instance_state，被驳回的走「实例结束」、ok=False，走到「已退回」成果的不再写「已完成」； 手动停止照旧不推。顺带修 04-对外集成与触达 B1：发起人是认证身份（run.origin.actor_verified）时 users 传 [started_by]， 个人渠道订阅了实例完成 / 失败终于收得到；自报署名不算。 - 定时 webhook：cancelled+rejected 按「运行结束」推「未出具（被驳回）」、写驳回的那一步，不写备注和原话、不画成功色； 手动停止仍不推。 - 发布单：试运行被驳回不算 plan.trial_failed，记 warning plan.trial_rejected「最近一次试运行在「x」被驳回、没有走完」（带白话）。 - (h) 重启时排队中的运行改成 failed 时补发 run.failed（同一句原因），时间线里有了失败原因这一行；不写结束时间、不封存，同以前。 - (f) tasks.tick / actions.tick 交回这一拍处理过的 id 列表（调度循环只记条数），测试改成只断言自己造的待办；先加了预置 一条无关到期待办的 fixture，旧的按条数断言当场失败（3 == 1），改完通过。 已封存的老运行不改写。测试：新增 test_run_rejected（五种关卡参数化、超时驳回、继续运行拒绝含存量、手动停止、补发 run.failed、 instance_state 新老形状同一句）、test_notify_run（驳回走实例结束、手动停止不推、已退回不写已完成、个人渠道 B1 两条）； webhook、发布单、动作确认、双盲、审批的老断言跟上。去掉 runner 里接 NodeRejected 的分支回跑，新测试 8 条失败。
593 lines
32 KiB
Python
593 lines
32 KiB
Python
"""定时任务的 Webhook（app/scheduler/webhook.py）：运行结束、失败、停在审批时推送一次。
|
||
|
||
- 四种格式的请求体和签名：通用 JSON（配了密钥时 X-AgentLab-Signature = HMAC-SHA256(密钥, 时间戳.请求体)）、
|
||
飞书文本（timestamp + sign，sign 是以「时间戳\\n密钥」为键的 HMAC-SHA256）、企业微信 markdown（key 在地址里）、
|
||
钉钉 markdown（地址上加 timestamp 和 sign）
|
||
- 通知里有任务名、状态、出具档位、缺口条数、运行链接（对外访问地址 + /runs/{id}）、清单哈希前 12 位、开始结束
|
||
时间，失败时写失败节点的名字；不放报告里的具体数字，不放失败的原始报错。立即运行写「手动触发」，补发标明补发
|
||
- 每一拍查已发起的触发：运行状态变了、任务订阅了这个事件、这个状态还没处理过才推送。停在审批只在确有待审批时
|
||
算，每停一个审批点推一次；挂起（没有待审批）按失败推一次；结束的运行等封存好再推（没有结束时间、不会再封存的
|
||
按最后更新时间等）；没订阅、没配 Webhook 的也记下已处理，之后再配上不会补发旧的
|
||
- 失败重试 3 次（4xx 不重试），每次推送记一条 WebhookDelivery；平台的错误码按地址的主机认，不看选的格式；
|
||
日志和错误里只有主机名，没有地址、key、access_token、密钥（httpx 自己的请求日志也一样）
|
||
- 地址校验：httpx 发不出去的（端口写错、不可见字符、主机名不合 IDNA 规则）保存时就拦下
|
||
|
||
用 httpx.MockTransport 接住请求，不连外网。任务名、地址、密钥、数字都是虚构的。
|
||
"""
|
||
from __future__ import annotations
|
||
|
||
import base64
|
||
import hashlib
|
||
import hmac
|
||
import json
|
||
import logging
|
||
import uuid
|
||
from datetime import datetime, timedelta, timezone
|
||
from urllib.parse import parse_qs, quote_plus, urlsplit
|
||
|
||
import httpx
|
||
import pytest
|
||
from sqlalchemy import delete, select
|
||
|
||
from app.core.crypto import encrypt
|
||
from app.db.base import SessionLocal
|
||
from app.db.models import Approval, Run, RunEvent, Schedule, ScheduleFire, Setting, WebhookDelivery
|
||
from app.scheduler import webhook
|
||
|
||
UTC = timezone.utc
|
||
NOW = datetime(2026, 10, 5, 1, 2, 3, tzinfo=UTC)
|
||
FEISHU = "https://open.feishu.cn/open-apis/bot/v2/hook/0f1e2d3c-aaaa-bbbb-cccc-9d8e7f6a5b4c"
|
||
WECOM = "https://qyapi.weixin.qq.com/cgi-bin/webhook/send?key=6a7b8c9d-1111-2222-3333-444455556666"
|
||
DINGTALK = "https://oapi.dingtalk.com/robot/send?access_token=f00dfacecafebabe0123456789abcdef"
|
||
GENERIC = "https://hooks.example.com/agentlab/inbox-7f3a"
|
||
SECRET = "SECdemo-not-a-real-secret-42"
|
||
|
||
|
||
class Recorder:
|
||
"""MockTransport 的处理函数：记下每个请求，按 replies 依次回应（用完了就一直回最后一个）。"""
|
||
|
||
def __init__(self, *replies):
|
||
self.requests: list[httpx.Request] = []
|
||
self.replies = list(replies) or [httpx.Response(200, json={"code": 0, "errcode": 0})]
|
||
|
||
def __call__(self, request: httpx.Request) -> httpx.Response:
|
||
self.requests.append(request)
|
||
reply = self.replies[min(len(self.requests), len(self.replies)) - 1]
|
||
if isinstance(reply, Exception):
|
||
raise reply
|
||
return reply
|
||
|
||
|
||
@pytest.fixture
|
||
def recorder(monkeypatch):
|
||
rec = Recorder()
|
||
monkeypatch.setattr(webhook, "_transport", httpx.MockTransport(rec))
|
||
monkeypatch.setattr(webhook, "RETRY_DELAYS", (0, 0, 0))
|
||
return rec
|
||
|
||
|
||
@pytest.fixture(autouse=True)
|
||
async def clean():
|
||
async with SessionLocal() as session:
|
||
await session.execute(delete(Schedule))
|
||
await session.execute(delete(Setting).where(Setting.key == "notify"))
|
||
await session.commit()
|
||
yield
|
||
|
||
|
||
def notice(**over) -> webhook.Notice:
|
||
base = dict(event="finished", schedule_id="s1", schedule_name="门店周报", timezone="Asia/Shanghai",
|
||
fire_id="f1", fire_at=datetime(2026, 10, 5, 1, 0, tzinfo=UTC), fire_kind="scheduled",
|
||
run_id="r0123456789abcdef", status="succeeded", tier="degraded", gaps=2,
|
||
run_url="https://agentlab.example.com/runs/r0123456789abcdef",
|
||
manifest_hash="a1b2c3d4e5f60718293a", started_at=datetime(2026, 10, 5, 1, 0, 3, tzinfo=UTC),
|
||
finished_at=datetime(2026, 10, 5, 1, 1, 10, tzinfo=UTC), reason=None, pending_approvals=None)
|
||
base.update(over)
|
||
return webhook.Notice(**base)
|
||
|
||
|
||
# --------------------------------------------------------------------------
|
||
# 请求体和签名
|
||
# --------------------------------------------------------------------------
|
||
|
||
|
||
def test_generic_json_carries_the_agreed_fields():
|
||
url, headers, body = webhook.build_request("generic", GENERIC, None, notice(), now=NOW)
|
||
data = json.loads(body)
|
||
assert url == GENERIC and headers["Content-Type"] == "application/json"
|
||
assert {k: data[k] for k in ("event", "schedule_name", "run_id", "status", "tier", "tier_label", "gaps",
|
||
"run_url", "manifest_hash")} == {
|
||
"event": "finished", "schedule_name": "门店周报", "run_id": "r0123456789abcdef", "status": "succeeded",
|
||
"tier": "degraded", "tier_label": "降档出具", "gaps": 2,
|
||
"run_url": "https://agentlab.example.com/runs/r0123456789abcdef", "manifest_hash": "a1b2c3d4e5f6"}
|
||
assert data["started_at"] == "2026-10-05T01:00:03+00:00" and data["finished_at"] == "2026-10-05T01:01:10+00:00"
|
||
assert "X-AgentLab-Signature" not in headers
|
||
|
||
|
||
def test_generic_signature_when_a_secret_is_set():
|
||
_, headers, body = webhook.build_request("generic", GENERIC, SECRET, notice(), now=NOW)
|
||
ts = headers["X-AgentLab-Timestamp"]
|
||
assert ts == str(int(NOW.timestamp()))
|
||
expected = hmac.new(SECRET.encode(), f"{ts}.".encode() + body, hashlib.sha256).hexdigest()
|
||
assert headers["X-AgentLab-Signature"] == f"sha256={expected}"
|
||
|
||
|
||
def test_feishu_text_and_signature():
|
||
url, _, body = webhook.build_request("feishu", FEISHU, SECRET, notice(), now=NOW)
|
||
data = json.loads(body)
|
||
assert url == FEISHU and data["msg_type"] == "text"
|
||
ts = data["timestamp"]
|
||
assert ts == str(int(NOW.timestamp()))
|
||
# 飞书的签名：以「timestamp + 换行 + 密钥」为键，对空串做 HMAC-SHA256，再 base64
|
||
key = f"{ts}\n{SECRET}".encode()
|
||
assert data["sign"] == base64.b64encode(hmac.new(key, b"", hashlib.sha256).digest()).decode()
|
||
text = data["content"]["text"]
|
||
for fragment in ("门店周报", "降档出具", "缺口 2 条", "a1b2c3d4e5f6", "/runs/r0123456789abcdef",
|
||
"2026-10-05 09:00", "2026-10-05 09:00:03", "2026-10-05 09:01:10"):
|
||
assert fragment in text, text
|
||
|
||
|
||
def test_feishu_without_secret_has_no_sign():
|
||
_, _, body = webhook.build_request("feishu", FEISHU, None, notice(), now=NOW)
|
||
assert "sign" not in json.loads(body) and "timestamp" not in json.loads(body)
|
||
|
||
|
||
def test_wecom_markdown_keeps_the_key_in_the_address():
|
||
url, _, body = webhook.build_request("wecom", WECOM, None, notice(), now=NOW)
|
||
data = json.loads(body)
|
||
assert url == WECOM and data["msgtype"] == "markdown"
|
||
assert "门店周报" in data["markdown"]["content"] and "降档出具" in data["markdown"]["content"]
|
||
|
||
|
||
def test_dingtalk_markdown_and_signed_address():
|
||
url, _, body = webhook.build_request("dingtalk", DINGTALK, SECRET, notice(), now=NOW)
|
||
data = json.loads(body)
|
||
assert data["msgtype"] == "markdown" and "门店周报" in data["markdown"]["title"]
|
||
assert "降档出具" in data["markdown"]["text"]
|
||
query = parse_qs(urlsplit(url).query)
|
||
ts = str(int(NOW.timestamp() * 1000))
|
||
assert query["access_token"] == ["f00dfacecafebabe0123456789abcdef"] and query["timestamp"] == [ts]
|
||
sign = base64.b64encode(hmac.new(SECRET.encode(), f"{ts}\n{SECRET}".encode(), hashlib.sha256).digest()).decode()
|
||
assert query["sign"] == [sign]
|
||
assert f"sign={quote_plus(sign)}" in url
|
||
|
||
|
||
def test_awaiting_approval_and_failed_to_start_texts():
|
||
title, lines, _ = webhook.message(notice(event="awaiting_approval", status="interrupted", tier=None, gaps=None,
|
||
pending_approvals=2, finished_at=None))
|
||
# 状态的叫法和界面一致：「等待审批」，审批也可能来自 Agent、工具的审批策略，不一定是人工审批节点
|
||
assert "等待审批" in title and dict(lines)["状态"] == "等待审批"
|
||
assert dict(lines)["待审批"].startswith("2 项")
|
||
refused = webhook.message(notice(event="failed", status="failed_to_start", run_id=None, run_url=None,
|
||
tier=None, gaps=None, manifest_hash=None, started_at=None, finished_at=None,
|
||
reason="「门店周报」还没有发布版本，请先在编排页发布"))
|
||
assert "未能发起" in refused[0] and any("还没有发布版本" in value for _, value in refused[1])
|
||
|
||
|
||
def test_trigger_line_follows_the_kind_of_fire():
|
||
"""立即运行不写「计划触发」（群里的人会以为报告按时出了），补发标明是补发"""
|
||
manual = webhook._text(notice(fire_kind="manual"))
|
||
assert "手动触发：2026-10-05 09:00（Asia/Shanghai）" in manual and "计划触发" not in manual
|
||
caught_up = webhook._text(notice(fire_kind="misfire"))
|
||
assert "计划触发：2026-10-05 09:00（Asia/Shanghai），错过后补发" in caught_up
|
||
assert "计划触发：2026-10-05 09:00（Asia/Shanghai）\n" in webhook._text(notice())
|
||
|
||
|
||
def test_failed_run_text_points_to_the_node_without_repeating_itself():
|
||
title, lines, _ = webhook.message(notice(event="failed", status="failed", tier=None, gaps=None,
|
||
error_node="查询门店销售"))
|
||
shown = dict(lines)
|
||
assert title.endswith("运行失败") and shown["状态"] == "失败"
|
||
# 处理只说去哪里看，不许诺能继续运行（没有断点的运行续不了，见 test_scheduler_notice_rules.py）
|
||
assert shown["失败节点"] == "「查询门店销售」" and shown["处理"] == "请在 AgentLab 的「记录」中查看失败原因"
|
||
# 不再写「原因：运行失败，详情请查看运行记录」这种同义反复
|
||
assert "原因" not in shown
|
||
|
||
|
||
def test_hash_and_run_id_are_named_like_the_run_page():
|
||
shown = dict(webhook.message(notice())[1])
|
||
assert shown["清单哈希"] == "a1b2c3d4e5f6" and shown["运行"] == "#r01234"
|
||
assert "封存哈希" not in shown and "运行编号" not in shown
|
||
|
||
|
||
def test_url_hint_shows_only_host_and_last_four():
|
||
assert webhook.url_hint(FEISHU) == "open.feishu.cn/…5b4c"
|
||
assert webhook.url_hint(WECOM) == "qyapi.weixin.qq.com/…6666"
|
||
assert webhook.url_hint("http://127.0.0.1:8794/hook") == "127.0.0.1:8794/…hook"
|
||
|
||
|
||
@pytest.mark.parametrize("url", ["", "open.feishu.cn/hook", "ftp://x.example.com/a", "https://", "https://a b.com/x"])
|
||
def test_bad_addresses_are_refused(url):
|
||
with pytest.raises(ValueError) as caught:
|
||
webhook.check_url(url)
|
||
assert "Webhook 地址" in str(caught.value)
|
||
|
||
|
||
@pytest.mark.parametrize("url", [
|
||
"https://hooks.example.com:abc/inbox-7f3a", # 端口不是数字
|
||
"https://hooks.example.com:99999/inbox-7f3a", # 端口越界
|
||
"https://hooks.example.com:0/inbox-7f3a",
|
||
"https://hooks.example.com/inbox-7f3a", # 从聊天软件粘贴带上的零宽空格
|
||
"https://hooks.example.com/inbox?key=ab\x7fcd", # 控制字符
|
||
"https://xn--bad.example.com/inbox-7f3a", # 不合 IDNA 规则的主机名
|
||
])
|
||
def test_addresses_httpx_cannot_send_are_refused_in_chinese(url):
|
||
"""校验以前只看 scheme 和主机名：这些地址照样存进去，到「测试 Webhook」才在 httpx 里炸成 500 或英文报错"""
|
||
with pytest.raises(ValueError) as caught:
|
||
webhook.check_url(url)
|
||
text = str(caught.value)
|
||
assert text.startswith("Webhook 地址") and "Invalid" not in text and "Codepoint" not in text
|
||
assert "7f3a" not in text and "abcd" not in text # 不回显地址
|
||
|
||
|
||
def test_platform_hosts_need_their_own_format():
|
||
assert webhook.bot_format(FEISHU) == "feishu" and webhook.bot_format(WECOM) == "wecom"
|
||
assert webhook.bot_format(DINGTALK) == "dingtalk"
|
||
assert webhook.bot_format("https://open.larksuite.com/open-apis/bot/v2/hook/0f1e2d3c") == "feishu"
|
||
# 同一主机上不是群机器人的地址（飞书集成平台的 Webhook 触发器收任意 JSON）、自建接收端：不限格式
|
||
assert webhook.bot_format("https://open.feishu.cn/anycross/trigger/callback/MDk2NTc0") is None
|
||
assert webhook.bot_format(GENERIC) is None
|
||
|
||
|
||
# --------------------------------------------------------------------------
|
||
# 推送与重试
|
||
# --------------------------------------------------------------------------
|
||
|
||
|
||
async def test_success_on_first_try(recorder):
|
||
outcome = await webhook.send("feishu", FEISHU, SECRET, notice())
|
||
assert (outcome.ok, outcome.http_status, outcome.attempts, outcome.error) == (True, 200, 1, None)
|
||
assert len(recorder.requests) == 1 and str(recorder.requests[0].url) == FEISHU
|
||
|
||
|
||
async def test_server_errors_are_retried(recorder):
|
||
recorder.replies = [httpx.Response(502), httpx.ReadTimeout("timed out"), httpx.Response(200, json={"code": 0})]
|
||
outcome = await webhook.send("feishu", FEISHU, None, notice())
|
||
assert (outcome.ok, outcome.attempts) == (True, 3)
|
||
|
||
|
||
async def test_gives_up_after_three_retries(recorder):
|
||
recorder.replies = [httpx.Response(500)]
|
||
outcome = await webhook.send("generic", GENERIC, None, notice())
|
||
assert (outcome.ok, outcome.http_status, outcome.attempts) == (False, 500, 4)
|
||
assert "HTTP 500" in outcome.error
|
||
|
||
|
||
async def test_client_errors_are_not_retried(recorder):
|
||
recorder.replies = [httpx.Response(404)]
|
||
outcome = await webhook.send("generic", GENERIC, None, notice())
|
||
assert (outcome.ok, outcome.http_status, outcome.attempts) == (False, 404, 1)
|
||
|
||
|
||
async def test_platform_error_code_counts_as_failure(recorder):
|
||
recorder.replies = [httpx.Response(200, json={"code": 19021, "msg": "sign match fail or timestamp is not within one hour"})]
|
||
outcome = await webhook.send("feishu", FEISHU, SECRET, notice())
|
||
assert not outcome.ok and outcome.error.startswith("open.feishu.cn 返回错误码 19021：sign match fail")
|
||
recorder.replies = [httpx.Response(200, json={"errcode": 310000, "errmsg": "sign not match"})]
|
||
assert "310000" in (await webhook.send("dingtalk", DINGTALK, SECRET, notice())).error
|
||
|
||
|
||
@pytest.mark.parametrize("fmt, url, reply", [
|
||
("generic", FEISHU, {"code": 19002, "msg": "params error, msg_type need"}),
|
||
("wecom", FEISHU, {"code": 19002, "msg": "params error, msg_type need"}),
|
||
("dingtalk", FEISHU, {"code": 19002, "msg": "params error, msg_type need"}),
|
||
("generic", WECOM, {"errcode": 40008, "errmsg": "invalid message type"}),
|
||
("feishu", WECOM, {"errcode": 40008, "errmsg": "invalid message type"}),
|
||
("generic", DINGTALK, {"errcode": 40035, "errmsg": "missing parameter"}),
|
||
("feishu", DINGTALK, {"errcode": 40035, "errmsg": "missing parameter"}),
|
||
])
|
||
async def test_platform_error_codes_are_read_by_host_whatever_the_format(recorder, fmt, url, reply):
|
||
"""三个平台出错都回 HTTP 200、错误码在响应体里。以前只看所选格式自己的字段（通用格式完全不看）：格式和地址
|
||
对不上时测试显示「已送达」，正式推送也记成功，群里却什么都没收到"""
|
||
recorder.replies = [httpx.Response(200, json=reply)]
|
||
outcome = await webhook.send(fmt, url, None, notice(), retry=False)
|
||
assert not outcome.ok and "返回错误码" in outcome.error, outcome
|
||
|
||
|
||
async def test_custom_receivers_reply_is_not_second_guessed(recorder):
|
||
"""自建接收端回什么由它自己定：HTTP 2xx 就算送达，不按平台的错误码去解读它的 code 字段"""
|
||
recorder.replies = [httpx.Response(200, json={"code": 7, "msg": "queued"})]
|
||
assert (await webhook.send("generic", GENERIC, None, notice(), retry=False)).ok
|
||
|
||
|
||
async def test_an_unsendable_saved_address_fails_cleanly(recorder):
|
||
"""校验加严之前存进库的地址（端口写错之类）：httpx 抛的不是 HTTPError，记一次失败、写主机名，不往外抛"""
|
||
outcome = await webhook.send("generic", "https://hooks.example.com:abc/inbox-7f3a", None, notice())
|
||
assert (outcome.ok, outcome.attempts) == (False, 1)
|
||
assert "hooks.example.com" in outcome.error and "地址" in outcome.error and "7f3a" not in outcome.error
|
||
|
||
|
||
async def test_connection_errors_name_only_the_host(recorder):
|
||
recorder.replies = [httpx.ConnectError(f"cannot reach {WECOM}")]
|
||
outcome = await webhook.send("wecom", WECOM, None, notice())
|
||
assert not outcome.ok and outcome.attempts == 4
|
||
assert "qyapi.weixin.qq.com" in outcome.error and "6a7b8c9d" not in outcome.error
|
||
|
||
|
||
async def test_logs_never_contain_the_address_key_or_secret(recorder, caplog):
|
||
caplog.set_level(logging.DEBUG)
|
||
recorder.replies = [httpx.Response(500, json={"errmsg": f"bad token {DINGTALK}"}), httpx.Response(200, json={"errcode": 0})]
|
||
await webhook.send("dingtalk", DINGTALK, SECRET, notice())
|
||
await webhook.send("feishu", FEISHU, SECRET, notice())
|
||
text = caplog.text
|
||
assert "oapi.dingtalk.com" in text and "open.feishu.cn" in text # 主机名照常记
|
||
for leaked in (DINGTALK, FEISHU, "f00dfacecafebabe0123456789abcdef", "0f1e2d3c-aaaa", SECRET, "access_token="):
|
||
assert leaked not in text, leaked
|
||
|
||
|
||
# --------------------------------------------------------------------------
|
||
# 每一拍的通知扫描
|
||
# --------------------------------------------------------------------------
|
||
|
||
|
||
async def make(*, run_status: str | None = "succeeded", events=("finished", "failed", "awaiting_approval"),
|
||
fmt: str = "generic", url: str | None = GENERIC, secret: str | None = None, sealed: bool = True,
|
||
fire_status: str = "started", output: dict | None = None, reason: str | None = None):
|
||
"""建一个配了 Webhook 的任务、一次触发和它发起的运行（运行不真的执行，状态直接写库）。"""
|
||
async with SessionLocal() as session:
|
||
sched = Schedule(name="门店周报", workflow_id="wf-demo", cron="0 9 * * 1", timezone="Asia/Shanghai",
|
||
webhook_format=fmt if url else None, webhook_url=encrypt(url) if url else None,
|
||
webhook_secret=encrypt(secret) if secret else None, webhook_events=list(events))
|
||
session.add(sched)
|
||
await session.flush()
|
||
run = None
|
||
if run_status:
|
||
now = datetime.now(UTC)
|
||
run = Run(workflow_id=None, workflow_name="门店周报", status=run_status, schedule_id=sched.id,
|
||
run_class="formal", started_at=now - timedelta(minutes=1),
|
||
finished_at=now if run_status in ("succeeded", "failed", "cancelled") else None,
|
||
manifest_hash=("c0ffee" * 10) if sealed else None,
|
||
output=output if output is not None else {
|
||
"report": "本周销售额 98765.43 元，同比增长 12.5%",
|
||
"_issuance": {"tier": "formal", "gaps": []}})
|
||
session.add(run)
|
||
await session.flush()
|
||
fire = ScheduleFire(schedule_id=sched.id, fire_at=datetime.now(UTC).replace(microsecond=0),
|
||
kind="scheduled", status=fire_status, run_id=run.id if run else None, reason=reason)
|
||
session.add(fire)
|
||
await session.commit()
|
||
return sched.id, fire.id, run.id if run else None
|
||
|
||
|
||
async def fire_row(fire_id: str) -> ScheduleFire:
|
||
async with SessionLocal() as session:
|
||
return await session.get(ScheduleFire, fire_id)
|
||
|
||
|
||
async def deliveries(fire_id: str) -> list[WebhookDelivery]:
|
||
async with SessionLocal() as session:
|
||
return list((await session.execute(
|
||
select(WebhookDelivery).where(WebhookDelivery.fire_id == fire_id).order_by(WebhookDelivery.created_at)
|
||
)).scalars())
|
||
|
||
|
||
async def set_run(run_id: str, **values) -> None:
|
||
async with SessionLocal() as session:
|
||
await session.execute(Run.__table__.update().where(Run.id == run_id).values(**values))
|
||
await session.commit()
|
||
|
||
|
||
async def test_finished_run_is_pushed_once(recorder):
|
||
async with SessionLocal() as session:
|
||
session.add(Setting(key="notify", value={"public_base_url": "https://agentlab.example.com"}))
|
||
await session.commit()
|
||
_, fire_id, run_id = await make()
|
||
assert await webhook.notify_due() == 1
|
||
[req] = recorder.requests
|
||
data = json.loads(req.content)
|
||
assert (data["event"], data["status"], data["tier"], data["gaps"]) == ("finished", "succeeded", "formal", 0)
|
||
assert data["run_url"] == f"https://agentlab.example.com/runs/{run_id}"
|
||
assert data["manifest_hash"] == ("c0ffee" * 2)
|
||
# 报告里的数字不进通知
|
||
assert "98765.43" not in req.content.decode() and "12.5" not in req.content.decode()
|
||
[delivery] = await deliveries(fire_id)
|
||
assert (delivery.event, delivery.status, delivery.http_status, delivery.attempts, delivery.run_id) == (
|
||
"finished", "ok", 200, 1, run_id)
|
||
assert (await fire_row(fire_id)).notified_status == "succeeded"
|
||
# 下一拍：同一状态不再推送
|
||
assert await webhook.notify_due() == 0
|
||
assert len(recorder.requests) == 1
|
||
|
||
|
||
async def test_no_public_address_means_no_link(recorder):
|
||
await make()
|
||
await webhook.notify_due()
|
||
assert json.loads(recorder.requests[0].content)["run_url"] is None
|
||
|
||
|
||
async def test_failed_run_and_failed_to_start(recorder):
|
||
_, failed_fire, _ = await make(run_status="failed", output={})
|
||
_, refused_fire, _ = await make(run_status=None, fire_status="failed_to_start",
|
||
reason="「门店周报」还没有发布版本，请先在编排页发布")
|
||
assert await webhook.notify_due() == 2
|
||
bodies = sorted((json.loads(r.content) for r in recorder.requests), key=lambda b: b["status"])
|
||
assert [(b["event"], b["status"]) for b in bodies] == [("failed", "failed"), ("failed", "failed_to_start")]
|
||
assert bodies[1]["run_id"] is None and "还没有发布版本" in bodies[1]["reason"]
|
||
assert (await fire_row(failed_fire)).notified_status == "failed"
|
||
assert (await fire_row(refused_fire)).notified_status == "failed_to_start"
|
||
|
||
|
||
async def test_unsubscribed_event_is_marked_but_not_pushed(recorder):
|
||
_, fire_id, _ = await make(events=("failed",))
|
||
assert await webhook.notify_due() == 0
|
||
assert recorder.requests == [] and await deliveries(fire_id) == []
|
||
assert (await fire_row(fire_id)).notified_status == "succeeded"
|
||
|
||
|
||
async def test_without_webhook_old_fires_are_not_pushed_later(recorder):
|
||
sid, fire_id, _ = await make(url=None)
|
||
await webhook.notify_due()
|
||
assert (await fire_row(fire_id)).notified_status == "succeeded"
|
||
async with SessionLocal() as session:
|
||
await session.execute(Schedule.__table__.update().where(Schedule.id == sid).values(
|
||
webhook_format="generic", webhook_url=encrypt(GENERIC), webhook_events=["finished"]))
|
||
await session.commit()
|
||
assert await webhook.notify_due() == 0 and recorder.requests == []
|
||
|
||
|
||
async def test_cancelled_run_is_not_pushed(recorder):
|
||
_, fire_id, run_id = await make(run_status="cancelled")
|
||
await set_run(run_id, end_reason="stopped")
|
||
await webhook.notify_due()
|
||
assert recorder.requests == [] and (await fire_row(fire_id)).notified_status == "cancelled"
|
||
|
||
|
||
async def test_a_rejected_run_is_pushed_as_not_issued(recorder):
|
||
"""被人驳回的那一期（cancelled + end_reason=rejected）：按「运行结束」推「未出具（被驳回）」，写驳回的那一步，不写驳回的
|
||
备注和原话（可能带着数）；订阅「运行失败」的不收（05-已知遗留 (a)）。"""
|
||
_, fire_id, run_id = await make(run_status="cancelled", output={}, fmt="wecom", url=WECOM)
|
||
await set_run(run_id, end_reason="rejected", error_node_id="pay", error="「付款」未确认（被驳回），没有发送：金额 0042 不对",
|
||
graph={"nodes": [{"id": "pay", "type": "tool", "data": {"label": "付款", "config": {}}}],
|
||
"edges": []})
|
||
assert await webhook.notify_due() == 1
|
||
content = json.loads(recorder.requests[0].content)["markdown"]["content"]
|
||
assert "定时任务「门店周报」未出具（被驳回）" in content and '状态：<font color="warning">被驳回</font>' in content
|
||
assert "驳回节点：「付款」" in content and "失败" not in content
|
||
assert "0042" not in content and "金额" not in content
|
||
assert (await fire_row(fire_id)).notified_status == "cancelled"
|
||
[delivery] = await deliveries(fire_id)
|
||
assert delivery.event == "finished"
|
||
|
||
_, only_failed, other = await make(run_status="cancelled", output={}, events=("failed",))
|
||
await set_run(other, end_reason="rejected")
|
||
assert await webhook.notify_due() == 0 and (await fire_row(only_failed)).notified_status == "cancelled"
|
||
|
||
|
||
async def test_waits_for_the_seal_before_pushing(recorder):
|
||
_, fire_id, run_id = await make(sealed=False)
|
||
assert await webhook.notify_due() == 0 and (await fire_row(fire_id)).notified_status is None
|
||
await set_run(run_id, manifest_hash="beef" * 16)
|
||
assert await webhook.notify_due() == 1
|
||
assert json.loads(recorder.requests[0].content)["manifest_hash"] == "beef" * 3
|
||
|
||
|
||
async def add_approval(run_id: str, status: str = "pending") -> None:
|
||
async with SessionLocal() as session:
|
||
session.add(Approval(run_id=run_id, node_id="gate", title="审核周报", status=status))
|
||
await session.commit()
|
||
|
||
|
||
async def new_segment(run_id: str, seq: int) -> None:
|
||
"""运行又执行了一段（审批后恢复、继续运行都从一条 run.started 开始）"""
|
||
async with SessionLocal() as session:
|
||
session.add(RunEvent(run_id=run_id, seq=seq, type="run.started", ts=float(seq), data={}))
|
||
await session.commit()
|
||
|
||
|
||
async def test_awaiting_approval_is_pushed_once_per_stop(recorder):
|
||
"""停在审批推一次；批完接着执行、又停在下一个审批点，再推一次；跑完推完成。同一个审批点不重复推"""
|
||
_, fire_id, run_id = await make(run_status="interrupted")
|
||
await new_segment(run_id, 1)
|
||
await add_approval(run_id)
|
||
assert await webhook.notify_due() == 1
|
||
data = json.loads(recorder.requests[0].content)
|
||
assert (data["event"], data["status"], data["pending_approvals"]) == ("awaiting_approval", "interrupted", 1)
|
||
assert await webhook.notify_due() == 0
|
||
# 批了第一个，执行一段之后停在第二个审批点
|
||
async with SessionLocal() as session:
|
||
await session.execute(Approval.__table__.update().where(Approval.run_id == run_id).values(status="resolved"))
|
||
await session.commit()
|
||
await new_segment(run_id, 2)
|
||
await add_approval(run_id)
|
||
assert await webhook.notify_due() == 1
|
||
assert await webhook.notify_due() == 0
|
||
await set_run(run_id, status="succeeded", finished_at=datetime.now(UTC), manifest_hash="ab" * 32)
|
||
assert await webhook.notify_due() == 1
|
||
events = ["awaiting_approval", "awaiting_approval", "finished"]
|
||
assert [json.loads(r.content)["event"] for r in recorder.requests] == events
|
||
assert [d.event for d in await deliveries(fire_id)] == events
|
||
|
||
|
||
async def test_suspended_run_is_pushed_once_as_a_failure(recorder):
|
||
"""服务重启挂起的运行（interrupted、没有待审批）不会自己接着执行，这个任务之后的触发都会跳过：按失败事件推
|
||
一次，写明要去继续运行或放弃。以前它既不算停在审批、也不算结束，一条都不推，任务就此静默停摆"""
|
||
_, fire_id, run_id = await make(run_status="interrupted", fmt="feishu", url=FEISHU)
|
||
assert await webhook.notify_due() == 1
|
||
text = json.loads(recorder.requests[0].content)["content"]["text"]
|
||
assert "运行已挂起" in text and "状态：已挂起，可继续运行" in text and "通常是服务重启所致" in text
|
||
assert "处理：请在 AgentLab 的「记录」中继续运行或放弃这次运行" in text
|
||
assert await webhook.notify_due() == 0
|
||
[delivery] = await deliveries(fire_id)
|
||
assert (delivery.event, delivery.status) == ("failed", "ok")
|
||
# 继续运行之后又挂起了一次（又一次服务重启）：再推一次
|
||
await new_segment(run_id, 1)
|
||
assert await webhook.notify_due() == 1
|
||
|
||
|
||
async def test_answered_but_not_yet_resumed_is_not_a_suspension(recorder):
|
||
"""审批刚批完、运行还没改回 running 的那一瞬间：没有 pending 的审批，但也不是挂起，不推挂起"""
|
||
_, fire_id, run_id = await make(run_status="interrupted")
|
||
await add_approval(run_id, status="answered")
|
||
assert await webhook.notify_due() == 0 and recorder.requests == []
|
||
assert (await fire_row(fire_id)).notified_status is None
|
||
|
||
|
||
async def test_failed_run_without_finish_time_is_still_notified(recorder):
|
||
"""服务重启时还在排队的运行被改成 failed：不写结束时间，也永远不会封存。以前按「结束时间 = 现在」等封存，
|
||
每一拍都等、永远不推；现在按它最后一次更新的时间等，过了等封存的时限就推"""
|
||
_, fire_id, run_id = await make(run_status="failed", sealed=False, output={})
|
||
await set_run(run_id, finished_at=None)
|
||
assert await webhook.notify_due() == 0
|
||
later = datetime.now(UTC) + timedelta(seconds=webhook.SEAL_WAIT_S + 5)
|
||
assert await webhook.notify_due(later) == 1
|
||
data = json.loads(recorder.requests[0].content)
|
||
assert (data["event"], data["status"], data["manifest_hash"]) == ("failed", "failed", None)
|
||
assert (await fire_row(fire_id)).notified_status == "failed"
|
||
|
||
|
||
async def test_failed_notice_names_the_failed_node(recorder):
|
||
_, _, run_id = await make(run_status="failed", output={}, fmt="wecom", url=WECOM)
|
||
await set_run(run_id, error_node_id="q1", error="查询超时：门店 0042 的数据……", graph={"nodes": [
|
||
{"id": "q1", "type": "sql", "data": {"label": "查询门店销售", "config": {}}}], "edges": []})
|
||
await webhook.notify_due()
|
||
content = json.loads(recorder.requests[0].content)["markdown"]["content"]
|
||
assert "失败节点：「查询门店销售」" in content
|
||
# 原始报错不进通知：里面可能带着查询到的数据
|
||
assert "0042" not in content and "查询超时" not in content
|
||
|
||
|
||
async def test_failed_delivery_is_recorded_without_secrets(recorder):
|
||
recorder.replies = [httpx.Response(503, text=f"upstream {DINGTALK} down")]
|
||
_, fire_id, _ = await make(fmt="dingtalk", url=DINGTALK, secret=SECRET)
|
||
await webhook.notify_due()
|
||
[delivery] = await deliveries(fire_id)
|
||
assert (delivery.status, delivery.http_status, delivery.attempts) == ("failed", 503, 4)
|
||
assert "HTTP 503" in delivery.error
|
||
for leaked in (DINGTALK, "f00dfacecafebabe", SECRET):
|
||
assert leaked not in delivery.error
|
||
# 推送失败也算这个状态处理过了：不会每一拍都再试一遍
|
||
assert (await fire_row(fire_id)).notified_status == "succeeded"
|
||
|
||
|
||
async def test_test_message(recorder):
|
||
sid, _, _ = await make(fmt="feishu", url=FEISHU, secret=SECRET, run_status=None, fire_status="skipped_overlap")
|
||
result = await webhook.send_test(sid)
|
||
# message 是 ok、http_status 之外的补充说明：界面在「测试消息已送达（HTTP 200）」后面接它，不再重复那半句
|
||
assert result == {"ok": True, "http_status": 200, "message": "请到接收端确认已收到"}
|
||
data = json.loads(recorder.requests[0].content)
|
||
text = data["content"]["text"]
|
||
assert "测试" in text and "门店周报" in text and data["sign"]
|
||
assert "机器人开启了签名校验的，签名密钥也配置正确" in text and text.count("说明") == 1
|
||
async with SessionLocal() as session:
|
||
[row] = (await session.execute(select(WebhookDelivery).where(WebhookDelivery.schedule_id == sid))).scalars()
|
||
assert (row.event, row.status, row.fire_id, row.attempts) == ("test", "ok", None, 1)
|
||
recorder.replies = [httpx.ConnectError("refused")]
|
||
failed = await webhook.send_test(sid)
|
||
assert failed == {"ok": False, "http_status": None, "message": "无法连接 open.feishu.cn"}
|
||
|
||
|
||
@pytest.mark.parametrize("fmt, url, secret, says, not_says", [
|
||
("feishu", FEISHU, None, "Webhook 地址配置正确", "签名"),
|
||
# 企业微信不签名：填了密钥也不说签名配置正确
|
||
("wecom", WECOM, SECRET, "Webhook 地址配置正确", "签名"),
|
||
# 通用格式带签名，但接收端验没验签这边不知道：只说收到即地址可用、可据此核对
|
||
("generic", GENERIC, SECRET, "接收端可据此核对签名密钥", "签名密钥也配置正确"),
|
||
])
|
||
async def test_test_message_only_claims_what_it_proves(recorder, fmt, url, secret, says, not_says):
|
||
sid, _, _ = await make(fmt=fmt, url=url, secret=secret, run_status=None, fire_status="skipped_overlap")
|
||
await webhook.send_test(sid)
|
||
body = recorder.requests[0].content.decode()
|
||
assert says in body and not_says not in body.split("说明", 1)[1]
|
||
|
||
|