275 lines
10 KiB
Go
275 lines
10 KiB
Go
package agent
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"fmt"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/Autumn-27/artex/db"
|
|
actool "github.com/Autumn-27/norma/tool"
|
|
)
|
|
|
|
func callReadJSON(t *testing.T, tool actool.CoreTool, input string) any {
|
|
t.Helper()
|
|
result, err := tool.Call(context.Background(), json.RawMessage(input), nil)
|
|
if err != nil {
|
|
t.Fatalf("tool call: %v", err)
|
|
}
|
|
var out any
|
|
if err := json.Unmarshal([]byte(result.Flatten()), &out); err != nil {
|
|
t.Fatalf("decode tool result: %v; raw=%s", err, result.Flatten())
|
|
}
|
|
return out
|
|
}
|
|
|
|
func TestGraphOverviewExpandsAssociatedCompanyScope(t *testing.T) {
|
|
d := testDB(t)
|
|
defer d.Close()
|
|
|
|
companies := d.Companies()
|
|
companyID, _, err := companies.UpsertCompany(fmt.Sprintf("overview-scope-%d", time.Now().UnixNano()), "")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
t.Cleanup(func() { _ = companies.DeleteCompany(companyID) })
|
|
|
|
domain := fmt.Sprintf("overview-scope-%d.invalid", companyID)
|
|
ip := fmt.Sprintf("2001:db8:%x::42", companyID%0xffff)
|
|
cidr := fmt.Sprintf("2001:db8:%x:1::/64", companyID%0xffff)
|
|
icp := fmt.Sprintf("京 ICP 备 %d 号", companyID)
|
|
keyword := fmt.Sprintf("Scope Company %d", companyID)
|
|
inputs := []db.ScopeInput{
|
|
{Kind: "domain", Value: domain},
|
|
{Kind: "ip", Value: ip},
|
|
{Kind: "cidr", Value: cidr},
|
|
{Kind: "icp", Value: icp},
|
|
{Kind: "keyword", Value: keyword},
|
|
}
|
|
added, skipped, invalid, scopeErrors := companies.AddScopeInputs(companyID, inputs, "task context test")
|
|
if added != len(inputs) || skipped != 0 || invalid != 0 || len(scopeErrors) != 0 {
|
|
t.Fatalf("add company scope: added=%d skipped=%d invalid=%d errors=%v", added, skipped, invalid, scopeErrors)
|
|
}
|
|
|
|
task, err := d.CreateTaskWithOptions("company context", "read configured scope", db.TaskCreateOptions{
|
|
CompanyIDs: []int64{companyID},
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
t.Cleanup(func() { _ = d.DeleteTask(task.ID) })
|
|
|
|
tools := NewToolSet(d.Exploration(task.ExplorationID), "planner")
|
|
tools.SetTaskID(task.ID)
|
|
tools.SetAssetStore(d.Assets(), companies)
|
|
overview := tools.graphOverviewData()
|
|
coverage, ok := overview["coverage"].(map[string]any)
|
|
if !ok {
|
|
t.Fatalf("coverage missing: %#v", overview["coverage"])
|
|
}
|
|
scopeRows, ok := coverage["scope"].([]map[string]any)
|
|
if !ok || len(scopeRows) != 1 {
|
|
t.Fatalf("task scope missing: %#v", coverage["scope"])
|
|
}
|
|
companyScope, ok := scopeRows[0]["company_scope"].([]map[string]any)
|
|
if !ok || len(companyScope) != len(inputs) {
|
|
t.Fatalf("company scope not expanded: %#v", scopeRows[0])
|
|
}
|
|
kinds := make(map[string]string, len(companyScope))
|
|
for _, rule := range companyScope {
|
|
kinds[fmt.Sprint(rule["kind"])] = fmt.Sprint(rule["value"])
|
|
}
|
|
for _, input := range inputs {
|
|
if kinds[input.Kind] != input.Value {
|
|
t.Errorf("scope %s=%q want %q", input.Kind, kinds[input.Kind], input.Value)
|
|
}
|
|
}
|
|
keywords, ok := scopeRows[0]["company_keywords"].([]string)
|
|
if !ok || len(keywords) != 1 || keywords[0] != keyword {
|
|
t.Fatalf("company keywords missing: %#v", scopeRows[0]["company_keywords"])
|
|
}
|
|
}
|
|
|
|
func TestBlackboardToolsReadDirectSources(t *testing.T) {
|
|
d := testDB(t)
|
|
defer d.Close()
|
|
|
|
grand, err := d.CreateTask("grand", "grand goal", nil, 0, 0)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
source, err := d.CreateTaskWithOptions("source", "source goal", db.TaskCreateOptions{SourceTaskIDs: []int64{grand.ID}})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
current, err := d.CreateTaskWithOptions("current", "current goal", db.TaskCreateOptions{SourceTaskIDs: []int64{source.ID}})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
t.Cleanup(func() {
|
|
_ = d.DeleteTask(current.ID)
|
|
_ = d.DeleteTask(source.ID)
|
|
_ = d.DeleteTask(grand.ID)
|
|
})
|
|
|
|
grandStore := d.Exploration(grand.ExplorationID)
|
|
sourceStore := d.Exploration(source.ExplorationID)
|
|
currentStore := d.Exploration(current.ExplorationID)
|
|
grandFact, err := grandStore.AddNode(db.KindFact, map[string]any{"summary": "indirect-only"}, 0, "confirmed", "worker", nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
sourceFact, err := sourceStore.AddNode(db.KindFact, map[string]any{"summary": "shared fact", "confidence": "verified"}, 0, "confirmed", "worker", nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
sourceIntent, err := sourceStore.AddIntent(map[string]any{"summary": "shared work"}, 1, nil, "planner")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := sourceStore.SetIntentState(sourceIntent, "done"); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
sourceFinding, err := sourceStore.AddNode(db.KindFinding, map[string]any{
|
|
"summary": "shared finding", "vulnclass": "idor", "severity": "high",
|
|
}, 9, "confirmed", "worker", nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := sourceStore.Link(sourceIntent, db.RelYields, sourceFinding); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
stepID, err := sourceStore.AppendActivity(db.Activity{
|
|
NodeID: &sourceIntent, Worker: "source-worker", Kind: "result", Tool: "HTTP",
|
|
Summary: "shared trace marker", Detail: "shared trace full detail",
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
for i := 0; i < 301; i++ {
|
|
if _, err := sourceStore.AddIntent(map[string]any{"summary": fmt.Sprintf("newer live source work %d", i)}, 1, nil, "planner"); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
assets := d.Assets()
|
|
host := fmt.Sprintf("overview-host-%d.invalid", source.ID)
|
|
assetID, err := assets.UpsertRootDomain(db.UpsertRootDomainReq{Domain: host, TaskID: source.ID})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
t.Cleanup(func() { _, _ = assets.DeleteByIDs([]int64{assetID}) })
|
|
if _, err := sourceStore.AddNode(db.KindFact, map[string]any{"summary": "source host anchor"}, 0, "confirmed", "worker", []int64{assetID}); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
tools := NewToolSet(currentStore, "worker")
|
|
tools.SetTaskID(current.ID)
|
|
tools.SetAssetStore(assets, assets.Companies())
|
|
parentID, _ := json.Marshal(sourceFact)
|
|
derivedID, err := tools.addOneIntent(intentItem{
|
|
Summary: "derive locally from shared fact", ParentIDs: []json.RawMessage{parentID},
|
|
})
|
|
if err != nil {
|
|
t.Fatalf("derive from inherited fact: %v", err)
|
|
}
|
|
if derived, err := currentStore.GetNode(derivedID); err != nil || derived == nil {
|
|
t.Fatalf("derived intent must be local: node=%+v err=%v", derived, err)
|
|
}
|
|
beforeFacts, _ := currentStore.ListByKind(db.KindFact, 100)
|
|
sourceIntentID, _ := json.Marshal(sourceIntent)
|
|
if _, err := tools.recordOneFact(factItem{Summary: "must not attach to inherited intent", IntentID: json.RawMessage(sourceIntentID)}, sourceIntent); err == nil {
|
|
t.Fatal("record_fact must reject inherited intent")
|
|
}
|
|
afterFacts, _ := currentStore.ListByKind(db.KindFact, 100)
|
|
if len(afterFacts) != len(beforeFacts) {
|
|
t.Fatalf("rejected inherited write persisted a fact: before=%d after=%d", len(beforeFacts), len(afterFacts))
|
|
}
|
|
overview := tools.graphOverviewData()
|
|
related, ok := overview["related_tasks"].([]map[string]any)
|
|
if !ok || len(related) != 1 {
|
|
t.Fatalf("related_tasks: %#v", overview["related_tasks"])
|
|
}
|
|
if related[0]["source_task_id"] != source.ID || related[0]["inherited"] != true {
|
|
t.Fatalf("related source provenance: %#v", related[0])
|
|
}
|
|
recentFacts, ok := related[0]["recent_facts"].([]map[string]any)
|
|
foundSourceFact := false
|
|
for _, fact := range recentFacts {
|
|
if fact["id"] == sourceFact {
|
|
foundSourceFact = true
|
|
break
|
|
}
|
|
}
|
|
if !ok || !foundSourceFact {
|
|
t.Fatalf("related fact summary: %#v", related[0]["recent_facts"])
|
|
}
|
|
if findings, ok := related[0]["recent_findings"].([]map[string]any); !ok || len(findings) == 0 || findings[0]["id"] != sourceFinding {
|
|
t.Fatalf("related finding summary: %#v", related[0]["recent_findings"])
|
|
}
|
|
results, ok := related[0]["recent_intent_results"].([]map[string]any)
|
|
if !ok || len(results) == 0 || results[0]["id"] != sourceIntent {
|
|
t.Fatalf("terminal source intent was starved by newer live work: %#v", related[0]["recent_intent_results"])
|
|
}
|
|
if results[0]["result_summary"] != "shared trace marker" {
|
|
t.Fatalf("terminal source intent result was not distilled: %#v", results[0])
|
|
}
|
|
coverage, ok := overview["coverage"].(map[string]any)
|
|
if !ok {
|
|
t.Fatalf("coverage missing from overview: %#v", overview["coverage"])
|
|
}
|
|
hosts, ok := coverage["hosts"].([]string)
|
|
if !ok || len(hosts) != 1 || hosts[0] != host || coverage["host_count"] != 1 {
|
|
t.Fatalf("inherited host context missing: %#v", coverage)
|
|
}
|
|
|
|
facts := callReadJSON(t, tools.listFacts(), `{}`).([]any)
|
|
seenSource, seenGrand := false, false
|
|
for _, raw := range facts {
|
|
item := raw.(map[string]any)
|
|
id := int64(item["id"].(float64))
|
|
if id == sourceFact {
|
|
seenSource = item["inherited"] == true && int64(item["source_task_id"].(float64)) == source.ID
|
|
}
|
|
seenGrand = seenGrand || id == grandFact
|
|
}
|
|
if !seenSource || seenGrand {
|
|
t.Fatalf("list_facts direct-only: source=%v grand=%v payload=%#v", seenSource, seenGrand, facts)
|
|
}
|
|
|
|
findings := callReadJSON(t, tools.listFindings(), `{}`).([]any)
|
|
if len(findings) != 1 {
|
|
t.Fatalf("list_findings: %#v", findings)
|
|
}
|
|
finding := findings[0].(map[string]any)
|
|
if finding["inherited"] != true || int64(finding["task_id"].(float64)) != source.ID || int64(finding["intent_id"].(float64)) != sourceIntent {
|
|
t.Fatalf("inherited finding provenance: %#v", finding)
|
|
}
|
|
|
|
detailInput, _ := json.Marshal(map[string]any{"id": sourceFact})
|
|
detail := callReadJSON(t, tools.nodeDetail(), string(detailInput)).(map[string]any)
|
|
if detail["inherited"] != true || int64(detail["source_task_id"].(float64)) != source.ID {
|
|
t.Fatalf("inherited node detail: %#v", detail)
|
|
}
|
|
|
|
traceInput, _ := json.Marshal(map[string]any{"intent_id": sourceIntent})
|
|
trace := callReadJSON(t, tools.getWorkerTrace(), string(traceInput)).(map[string]any)
|
|
if trace["inherited"] != true || int64(trace["source_task_id"].(float64)) != source.ID {
|
|
t.Fatalf("inherited trace: %#v", trace)
|
|
}
|
|
steps := trace["steps"].([]any)
|
|
if len(steps) != 1 || int64(steps[0].(map[string]any)["step_id"].(float64)) != stepID {
|
|
t.Fatalf("inherited trace steps: %#v", steps)
|
|
}
|
|
output := callReadJSON(t, tools.getWorkerOutput(), string(traceInput)).(map[string]any)
|
|
if output["inherited"] != true || output["final_text"] != "shared trace full detail" {
|
|
t.Fatalf("inherited worker output: %#v", output)
|
|
}
|
|
|
|
search := callReadJSON(t, tools.searchAllWorkerTraces(), `{"q":"shared trace marker"}`).(map[string]any)
|
|
hits := search["hits"].([]any)
|
|
if len(hits) != 1 || hits[0].(map[string]any)["inherited"] != true {
|
|
t.Fatalf("inherited trace search: %#v", hits)
|
|
}
|
|
}
|