Files
dingtalk-workspace-cli/scripts/policy/schema-compat/main_test.go
T
修雨 474ce88d47 fix(ci): harden CLI smoke and Schema compatibility gates (#629)
* fix(ci): harden PR gate enforcement

* fix(schema): allow compatible positional evolution
2026-07-16 09:59:21 +08:00

484 lines
19 KiB
Go

// Copyright 2026 Alibaba Group
// Licensed under the Apache License, Version 2.0 (the "License");
package main
import (
"bytes"
"errors"
"os"
"path/filepath"
"strings"
"testing"
)
const completeSchemaJSON = `{
"kind":"schema",
"level":"catalog",
"products":[{
"id":"doc",
"tools":[{
"canonical_path":"doc.create",
"primary_cli_path":"doc create",
"interface_mode":"local",
"interface_ref":{"transport":"local"},
"availability":"available",
"parameters":{
"title":{
"type":"string",
"property":"title",
"required":true,
"cli_required":true,
"interface_type":"string",
"default":null,
"field_provenance":{}
},
"format":{
"type":["string","null"],
"property":"format",
"required":false,
"interface_type":"string",
"default":"markdown",
"enum":["markdown","text"],
"field_provenance":{}
}
},
"constraints":{"require_one_of":[["title","format"]]},
"positionals":[{
"name":"content",
"index":0,
"type":"string",
"required":false,
"description":"original prose"
}],
"effect":"write",
"risk":"medium",
"confirmation":"not_required",
"idempotency":"unknown",
"field_provenance":{}
}]
}]
}`
type failingWriter struct{}
func (failingWriter) Write([]byte) (int, error) { return 0, errors.New("write failed") }
func TestRunSchemaModes(t *testing.T) {
directory := t.TempDir()
raw := filepath.Join(directory, "raw.json")
writeTestFile(t, raw, completeSchemaJSON)
var normalized, stderr bytes.Buffer
if code := run([]string{"--normalize", raw}, &normalized, &stderr); code != 0 {
t.Fatalf("normalize code=%d stderr=%s", code, stderr.String())
}
baseline := filepath.Join(directory, "baseline.json")
writeTestFile(t, baseline, normalized.String())
var stdout bytes.Buffer
stderr.Reset()
if code := run([]string{"--check", baseline, "--current", raw}, &stdout, &stderr); code != 0 {
t.Fatalf("check code=%d stderr=%s", code, stderr.String())
}
if !strings.Contains(stdout.String(), "compatibility check: ok") {
t.Fatalf("unexpected check output %q", stdout.String())
}
stdout.Reset()
stderr.Reset()
if code := run([]string{"--merge", baseline, "--current", raw}, &stdout, &stderr); code != 0 {
t.Fatalf("merge code=%d stderr=%s", code, stderr.String())
}
if !strings.Contains(stdout.String(), `"doc.create"`) {
t.Fatalf("unexpected merge output %q", stdout.String())
}
empty := filepath.Join(directory, "empty.json")
writeTestFile(t, empty, `{"kind":"schema","products":[]}`)
stderr.Reset()
if code := run([]string{"--check", baseline, "--current", empty}, &stdout, &stderr); code != 2 {
t.Fatalf("empty current contract code=%d, want 2", code)
}
for _, args := range [][]string{
nil,
{"--normalize", raw, "--check", baseline},
{"--check", baseline},
{"--normalize", filepath.Join(directory, "missing")},
{"--unknown"},
} {
stderr.Reset()
if code := run(args, &stdout, &stderr); code != 2 {
t.Errorf("run(%v) code=%d, want 2", args, code)
}
}
stderr.Reset()
if code := run([]string{"--normalize", raw}, failingWriter{}, &stderr); code != 2 {
t.Fatalf("write failure code=%d, want 2", code)
}
}
func TestNormalizeRawFileValidation(t *testing.T) {
tests := []struct {
name string
body string
want string
}{
{name: "invalid json", body: `{`, want: "unexpected end"},
{name: "wrong kind", body: `{"kind":"other","products":[]}`, want: "unexpected kind"},
{name: "missing products", body: `{"kind":"schema"}`, want: "products array is missing"},
{name: "empty products", body: `{"kind":"schema","products":[]}`, want: "contains no products"},
{name: "empty tools", body: `{"kind":"schema","products":[{"id":"doc","tools":[]}]}`, want: "contains no tools"},
{name: "missing product id", body: `{"kind":"schema","products":[{"tools":[]}]}`, want: "product without id"},
{name: "duplicate product", body: `{"kind":"schema","products":[{"id":"doc"},{"id":"doc"}]}`, want: "duplicate product"},
{name: "compact tool rejected", body: `{"kind":"schema","products":[{"id":"doc","tools":[{"canonical_path":"doc.create","parameters":{},"effect":"write","risk":"medium","confirmation":"not_required","idempotency":"unknown","interface_mode":"local","availability":"available"}]}]}`, want: "not a complete schema --all leaf"},
{name: "invalid required", body: strings.Replace(completeSchemaJSON, `"required":true`, `"required":"yes"`, 1), want: "cannot unmarshal string"},
{name: "incomplete parameter", body: strings.Replace(completeSchemaJSON, `"field_provenance":{}`, `"incomplete":true`, 1), want: "not a complete schema --all parameter"},
}
for _, test := range tests {
t.Run(test.name, func(t *testing.T) {
path := filepath.Join(t.TempDir(), "raw.json")
writeTestFile(t, path, test.body)
_, err := normalizeRawFile(path)
if err == nil || !strings.Contains(err.Error(), test.want) {
t.Fatalf("normalizeRawFile() error=%v, want %q", err, test.want)
}
})
}
}
func TestNormalizeCompleteSchemaPayload(t *testing.T) {
path := filepath.Join(t.TempDir(), "schema.json")
writeTestFile(t, path, completeSchemaJSON)
contract, err := normalizeRawFile(path)
if err != nil {
t.Fatal(err)
}
tool := contract.Products["doc"].Tools["doc.create"]
if tool.PrimaryCLIPath != "doc create" || tool.Constraints == "" || tool.Effect != "write" {
t.Fatalf("normalized tool contract is incomplete: %#v", tool)
}
if len(tool.Positionals) != 1 || tool.Positionals[0].Name != "content" {
t.Fatalf("normalized positionals = %#v", tool.Positionals)
}
if got := tool.Parameters["title"]; got.Type != `"string"` || !got.Required || got.Property != "title" || got.InterfaceType != "string" {
t.Fatalf("title parameter = %#v", got)
}
if got := tool.Parameters["format"]; got.Type != `["string","null"]` || got.Default != `"markdown"` {
t.Fatalf("format parameter = %#v", got)
}
}
func TestSchemaCompatibilityIgnoresPositionalDescription(t *testing.T) {
directory := t.TempDir()
baselinePath := filepath.Join(directory, "baseline.json")
currentPath := filepath.Join(directory, "current.json")
writeTestFile(t, baselinePath, completeSchemaJSON)
writeTestFile(t, currentPath, strings.Replace(completeSchemaJSON, "original prose", "edited prose only", 1))
baseline, err := normalizeRawFile(baselinePath)
if err != nil {
t.Fatal(err)
}
current, err := normalizeRawFile(currentPath)
if err != nil {
t.Fatal(err)
}
if failures := checkCompatibility(baseline, current); len(failures) != 0 {
t.Fatalf("positional description edit should be compatible: %v", failures)
}
}
func TestSchemaTypeAndHelpers(t *testing.T) {
if got := schemaType(map[string]any{"type": []any{"string", "null"}}); got != `["string","null"]` {
t.Fatalf("schemaType(type)=%q", got)
}
if got := schemaType(map[string]any{"oneOf": []any{"a"}}); got != `oneOf:["a"]` {
t.Fatalf("schemaType(oneOf)=%q", got)
}
if got := schemaType(map[string]any{}); got != "unspecified" {
t.Fatalf("schemaType(empty)=%q", got)
}
if !enumNarrowed([]string{"a", "b"}, []string{"a"}) || enumNarrowed([]string{"a"}, []string{"a", "b"}) {
t.Fatal("enum narrowing classification is incorrect")
}
}
func TestSchemaCompatibilityAllowsAdditionsAndLooserInputs(t *testing.T) {
baseline := baselineContract()
mutateTool(&baseline, func(tool *toolSchema) {
tool.DryRun = ""
})
current := cloneContract(baseline)
mutateParameter(&current, func(parameter *parameterSchema) {
parameter.Required = false
parameter.CLIRequired = false
parameter.Enum = append(parameter.Enum, "html")
})
mutateTool(&current, func(tool *toolSchema) {
tool.Parameters["folder"] = parameterSchema{Type: `"string"`}
tool.DryRun = `{"mode":"native"}`
})
current.Products["doc"].Tools["doc.read"] = toolSchema{Parameters: map[string]parameterSchema{}}
current.Products["sheet"] = productSchema{Tools: map[string]toolSchema{}}
if failures := checkCompatibility(baseline, current); len(failures) != 0 {
t.Fatalf("compatible additions should pass: %v", failures)
}
}
func TestSchemaCompatibilityAllowsLooserAndAppendedOptionalPositionals(t *testing.T) {
baseline := baselineContract()
mutateTool(&baseline, func(tool *toolSchema) {
tool.Positionals[0].Required = true
})
current := cloneContract(baseline)
mutateTool(&current, func(tool *toolSchema) {
tool.Positionals[0].Required = false
tool.Positionals = append(tool.Positionals, positionalSchema{
Name: "template",
Index: 1,
Type: "string",
})
})
if failures := checkCompatibility(baseline, current); len(failures) != 0 {
t.Fatalf("looser and appended optional positionals should pass: %v", failures)
}
}
func TestCompatiblePositionals(t *testing.T) {
baseline := []positionalSchema{
{Name: "content", Index: 0, Type: "string", Required: true},
{Name: "format", Index: 1, Type: "string"},
}
tests := []struct {
name string
old []positionalSchema
current []positionalSchema
compatible bool
}{
{name: "unchanged", old: baseline, current: clonePositionals(baseline), compatible: true},
{name: "required becomes optional", old: baseline, current: []positionalSchema{
{Name: "content", Index: 0, Type: "string"},
{Name: "format", Index: 1, Type: "string"},
}, compatible: true},
{name: "append optional", old: baseline, current: append(clonePositionals(baseline), positionalSchema{
Name: "template", Index: 2, Type: "string",
}), compatible: true},
{name: "last positional becomes variadic", old: baseline, current: []positionalSchema{
{Name: "content", Index: 0, Type: "string", Required: true},
{Name: "format", Index: 1, Type: "string", Variadic: true},
}, compatible: true},
{name: "removed", old: baseline, current: clonePositionals(baseline[:1])},
{name: "renamed", old: baseline, current: []positionalSchema{
{Name: "body", Index: 0, Type: "string", Required: true},
{Name: "format", Index: 1, Type: "string"},
}},
{name: "reindexed", old: baseline, current: []positionalSchema{
{Name: "content", Index: 1, Type: "string", Required: true},
{Name: "format", Index: 2, Type: "string"},
}},
{name: "retyped", old: baseline, current: []positionalSchema{
{Name: "content", Index: 0, Type: "number", Required: true},
{Name: "format", Index: 1, Type: "string"},
}},
{name: "optional becomes required", old: baseline, current: []positionalSchema{
{Name: "content", Index: 0, Type: "string", Required: true},
{Name: "format", Index: 1, Type: "string", Required: true},
}},
{name: "append required", old: baseline, current: append(clonePositionals(baseline), positionalSchema{
Name: "template", Index: 2, Type: "string", Required: true,
})},
{name: "variadic becomes fixed", old: []positionalSchema{
{Name: "content", Index: 0, Type: "string", Variadic: true},
}, current: []positionalSchema{
{Name: "content", Index: 0, Type: "string"},
}},
{name: "append after variadic", old: []positionalSchema{
{Name: "content", Index: 0, Type: "string", Variadic: true},
}, current: []positionalSchema{
{Name: "content", Index: 0, Type: "string", Variadic: true},
{Name: "format", Index: 1, Type: "string"},
}},
}
for _, test := range tests {
t.Run(test.name, func(t *testing.T) {
if got := compatiblePositionals(test.old, test.current); got != test.compatible {
t.Fatalf("compatiblePositionals() = %t, want %t", got, test.compatible)
}
})
}
}
func TestSchemaCompatibilityRejectsContractDrift(t *testing.T) {
tests := []struct {
name string
want string
mutate func(*schemaContract)
}{
{name: "removed product", want: "historical schema product", mutate: func(contract *schemaContract) { delete(contract.Products, "doc") }},
{name: "removed tool", want: "historical schema tool", mutate: func(contract *schemaContract) { delete(contract.Products["doc"].Tools, "doc.create") }},
{name: "removed parameter", want: "lost parameter", mutate: func(contract *schemaContract) {
mutateTool(contract, func(tool *toolSchema) { delete(tool.Parameters, "title") })
}},
{name: "changed type", want: "changed type", mutate: func(contract *schemaContract) {
mutateParameter(contract, func(parameter *parameterSchema) { parameter.Type = `"number"` })
}},
{name: "new required", want: "newly required", mutate: func(contract *schemaContract) {
mutateParameter(contract, func(parameter *parameterSchema) { parameter.Required = true })
}},
{name: "new cli required", want: "newly cli_required", mutate: func(contract *schemaContract) {
mutateParameter(contract, func(parameter *parameterSchema) { parameter.CLIRequired = true })
}},
{name: "changed required when", want: "changed required_when", mutate: func(contract *schemaContract) {
mutateParameter(contract, func(parameter *parameterSchema) { parameter.RequiredWhen = "scope=team" })
}},
{name: "changed property", want: "changed property", mutate: func(contract *schemaContract) {
mutateParameter(contract, func(parameter *parameterSchema) { parameter.Property = "subject" })
}},
{name: "changed interface type", want: "changed interface_type", mutate: func(contract *schemaContract) {
mutateParameter(contract, func(parameter *parameterSchema) { parameter.InterfaceType = "integer" })
}},
{name: "changed default", want: "changed default", mutate: func(contract *schemaContract) {
mutateParameter(contract, func(parameter *parameterSchema) { parameter.Default = `"html"` })
}},
{name: "changed interface default", want: "changed interface_default", mutate: func(contract *schemaContract) {
mutateParameter(contract, func(parameter *parameterSchema) { parameter.InterfaceDefault = `"html"` })
}},
{name: "changed format", want: "changed format", mutate: func(contract *schemaContract) {
mutateParameter(contract, func(parameter *parameterSchema) { parameter.Format = "uri" })
}},
{name: "narrowed enum", want: "narrowed enum", mutate: func(contract *schemaContract) {
mutateParameter(contract, func(parameter *parameterSchema) { parameter.Enum = []string{"markdown"} })
}},
{name: "changed primary cli path", want: "changed primary_cli_path", mutate: func(contract *schemaContract) {
mutateTool(contract, func(tool *toolSchema) { tool.PrimaryCLIPath = "doc make" })
}},
{name: "changed interface mode", want: "changed interface_mode", mutate: func(contract *schemaContract) {
mutateTool(contract, func(tool *toolSchema) { tool.InterfaceMode = "mcp" })
}},
{name: "changed constraints", want: "changed constraints", mutate: func(contract *schemaContract) {
mutateTool(contract, func(tool *toolSchema) { tool.Constraints = `{}` })
}},
{name: "changed positionals", want: "changed positionals", mutate: func(contract *schemaContract) {
mutateTool(contract, func(tool *toolSchema) { tool.Positionals[0].Name = "id" })
}},
{name: "changed interface mapping", want: "changed interface_ref", mutate: func(contract *schemaContract) {
mutateTool(contract, func(tool *toolSchema) { tool.InterfaceRef = `{"transport":"mcp"}` })
}},
{name: "changed availability", want: "changed availability", mutate: func(contract *schemaContract) {
mutateTool(contract, func(tool *toolSchema) { tool.Availability = "unavailable" })
}},
{name: "changed confirmation", want: "changed confirmation", mutate: func(contract *schemaContract) {
mutateTool(contract, func(tool *toolSchema) { tool.Confirmation = "user_required" })
}},
{name: "changed risk", want: "changed risk", mutate: func(contract *schemaContract) { mutateTool(contract, func(tool *toolSchema) { tool.Risk = "high" }) }},
{name: "changed effect", want: "changed effect", mutate: func(contract *schemaContract) {
mutateTool(contract, func(tool *toolSchema) { tool.Effect = "destructive" })
}},
{name: "changed idempotency", want: "changed idempotency", mutate: func(contract *schemaContract) {
mutateTool(contract, func(tool *toolSchema) { tool.Idempotency = "idempotent" })
}},
{name: "removed dry run", want: "changed or removed dry_run", mutate: func(contract *schemaContract) { mutateTool(contract, func(tool *toolSchema) { tool.DryRun = "" }) }},
}
for _, test := range tests {
t.Run(test.name, func(t *testing.T) {
current := baselineContract()
test.mutate(&current)
failures := strings.Join(checkCompatibility(baselineContract(), current), "\n")
if !strings.Contains(failures, test.want) {
t.Fatalf("failures=%q, want %q", failures, test.want)
}
})
}
}
func TestMergeContracts(t *testing.T) {
historical := baselineContract()
current := cloneContract(historical)
mutateTool(&current, func(tool *toolSchema) {
tool.Parameters["folder"] = parameterSchema{Type: `"string"`}
})
merged, failures := mergeContracts(historical, current)
if len(failures) != 0 || merged.Products["doc"].Tools["doc.create"].Parameters["folder"].Type == "" {
t.Fatalf("merge=%v failures=%v", merged, failures)
}
mutateParameter(&current, func(parameter *parameterSchema) {
parameter.Type = `"number"`
})
if _, failures := mergeContracts(historical, current); len(failures) == 0 {
t.Fatal("incompatible merge unexpectedly passed")
}
}
func baselineContract() schemaContract {
return schemaContract{Version: schemaContractVersion, Products: map[string]productSchema{
"doc": {Tools: map[string]toolSchema{
"doc.create": {
PrimaryCLIPath: "doc create",
InterfaceMode: "local",
InterfaceRef: `{"transport":"local"}`,
Availability: "available",
Parameters: map[string]parameterSchema{
"title": {
Type: `"string"`,
Property: "title",
InterfaceType: "string",
},
"format": {
Type: `"string"`,
Property: "format",
InterfaceType: "string",
Default: `"markdown"`,
Enum: []string{"markdown", "text"},
},
},
Constraints: `{"require_one_of":[["title","format"]]}`,
Positionals: []positionalSchema{{
Name: "content",
Index: 0,
Type: "string",
}},
DryRun: `{"mode":"native"}`,
Effect: "write",
Risk: "medium",
Confirmation: "not_required",
Idempotency: "unknown",
},
}},
}}
}
func mutateTool(contract *schemaContract, mutate func(*toolSchema)) {
product := contract.Products["doc"]
tool := product.Tools["doc.create"]
mutate(&tool)
product.Tools["doc.create"] = tool
contract.Products["doc"] = product
}
func mutateParameter(contract *schemaContract, mutate func(*parameterSchema)) {
mutateTool(contract, func(tool *toolSchema) {
parameter := tool.Parameters["format"]
mutate(&parameter)
tool.Parameters["format"] = parameter
})
}
func clonePositionals(source []positionalSchema) []positionalSchema {
return append([]positionalSchema(nil), source...)
}
func writeTestFile(t *testing.T, path, body string) {
t.Helper()
if err := os.WriteFile(path, []byte(body), 0o600); err != nil {
t.Fatal(err)
}
}