Enhance Beryl Agent detail and report views

2026-09-11 11:13:24 +08:00
parent 336bf88466
commit 15f067fff9
57 changed files with 1833 additions and 95 deletions
@@ -0,0 +1,34 @@
+import { expect, it } from "vitest";
+import { mkdtemp, mkdir, writeFile, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { randomUUID, createHash } from "node:crypto";
+import { SafeWorkspace } from "../src/workspace.js";
+import { validatedPpt } from "../src/ppt-tools.js";
+import { validateReportDelivery } from "../src/delivery.js";
+import { MemoryEventStore } from "../src/store.js";
+import { saveTask, updateTask } from "../src/task.js";
+it("rejects traversal, stale PPTs and files changed after validation", async () => {
+  const root = await mkdtemp(path.join(tmpdir(), "ppt-gate-test-"));
+  try {
+    const ws = await SafeWorkspace.create(root, "test");
+    await expect(validatedPpt(ws, "../../secret")).rejects.toThrow("PPT_NOT_FOUND");
+    const id = randomUUID();
+    const dir = ws.resolve(`presentations/${id}`);
+    await mkdir(path.join(dir, "output"), { recursive: true });
+    const bytes = Buffer.from("mock validated artifact");
+    await writeFile(path.join(dir, "output/deck.pptx"), bytes);
+    const task = updateTask(undefined, "生成PPT", "new")!;
+    await saveTask(ws, task);
+    const receipt = { validated: true, purpose: "final", deliveryAccepted: true, taskRevision: task.revision, runId: "new", sha256: createHash("sha256").update(bytes).digest("hex") };
+    await writeFile(path.join(dir, "result.json"), JSON.stringify({ ...receipt, purpose: "debug", deliveryAccepted: false }));
+    await expect(validatedPpt(ws, id)).rejects.toThrow("PPT_NOT_ACCEPTED");
+    await writeFile(path.join(dir, "result.json"), JSON.stringify(receipt));
+    expect(await validateReportDelivery("pptx", ws, [], "new")).toBe(false);
+    const events = new MemoryEventStore();
+    events.append("s", { type: "tool.completed", runId: "new", payload: { toolName: "generate_pptx", result: { details: { artifactId: id } } } });
+    expect(await validateReportDelivery("pptx", ws, events.listAfter("s"), "new")).toBe(true);
+    await writeFile(path.join(dir, "output/deck.pptx"), "changed");
+    expect(await validateReportDelivery("pptx", ws, events.listAfter("s"), "new")).toBe(false);
+  } finally { await rm(root, { recursive: true, force: true }); }
+});