mirror of
https://github.com/rennf93/roboco.git
synced 2026-08-03 07:23:24 +02:00
92 lines
3.2 KiB
Python
92 lines
3.2 KiB
Python
"""End-to-end: the real validator subprocess feeds the real gate decision.
|
|||
|
|
|
||
|
|
Exercises the whole enforcement path against a real repo on disk — effective
|
||
|
|
map (auto-derived ⊕ committed file), tree-sitter placement, waiver filtering,
|
||
|
|
and the gateway's block/pass decision — without the orchestrator plumbing:
|
||
|
|
|
||
|
|
1. a model defined in a router blocks the submit with the offending file:line;
|
||
|
|
2. after the model moves to ``app/models``, the submit passes;
|
||
|
|
3. a committed waiver lets a deliberately-kept model through the gate.
|
||
|
|
"""
|
||
|
|
|
||
|
|
from __future__ import annotations
|
||
|
|
|
||
|
|
import json
|
||
|
|
import subprocess
|
||
|
|
import sys
|
||
|
|
from typing import TYPE_CHECKING, Any
|
||
|
|
|
||
|
|
from roboco.services.gateway.choreographer import Choreographer
|
||
|
|
|
||
|
|
if TYPE_CHECKING:
|
||
|
|
from pathlib import Path
|
||
|
|
|
||
|
|
_MODEL_SRC = (
|
||
|
|
"from pydantic import BaseModel\nclass UserCreate(BaseModel):\n x: int\n"
|
||
|
|
)
|
||
|
|
_FORBID_MODEL = (
|
||
|
|
"modules:\n - path: app/routers\n purpose: routes\n forbidden: [model]\n"
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
def _run_validator(root: Path, files: list[str]) -> dict[str, Any]:
|
||
|
|
proc = subprocess.run(
|
||
|
|
[
|
||
|
|
sys.executable,
|
||
|
|
"-m",
|
||
|
|
"roboco.conventions",
|
||
|
|
"check",
|
||
|
|
"--root",
|
||
|
|
str(root),
|
||
|
|
"--files",
|
||
|
|
*files,
|
||
|
|
],
|
||
|
|
capture_output=True,
|
||
|
|
text=True,
|
||
|
|
check=False,
|
||
|
|
)
|
||
|
|
findings = [json.loads(line) for line in proc.stdout.splitlines() if line.strip()]
|
||
|
|
return {"findings": findings, "could_not_run": proc.returncode != 0}
|
||
|
|
|
||
|
|
|
||
|
|
def _write(root: Path, rel: str, content: str) -> None:
|
||
|
|
path = root / rel
|
||
|
|
path.parent.mkdir(parents=True, exist_ok=True)
|
||
|
|
path.write_text(content)
|
||
|
|
|
||
|
|
|
||
|
|
def test_block_then_fix_then_waiver(tmp_path: Path) -> None:
|
||
|
|
_write(tmp_path, ".roboco/conventions.yml", _FORBID_MODEL)
|
||
|
|
_write(tmp_path, "app/routers/users.py", _MODEL_SRC)
|
||
|
|
|
||
|
|
# 1. A Pydantic model in the router blocks, naming the offending file:line.
|
||
|
|
blocked = _run_validator(tmp_path, ["app/routers/users.py"])
|
||
|
|
rejection = Choreographer._conventions_rejection(blocked, {})
|
||
|
|
assert rejection is not None
|
||
|
|
assert "app/routers/users.py:2" in rejection.as_dict()["remediate"]
|
||
|
|
|
||
|
|
# 2. Move the model to app/models; the router now only holds a route → passes.
|
||
|
|
_write(
|
||
|
|
tmp_path,
|
||
|
|
"app/routers/users.py",
|
||
|
|
"@router.get('/users')\ndef list_users():\n return []\n",
|
||
|
|
)
|
||
|
|
_write(tmp_path, "app/models/user.py", _MODEL_SRC)
|
||
|
|
fixed = _run_validator(tmp_path, ["app/routers/users.py", "app/models/user.py"])
|
||
|
|
assert Choreographer._conventions_rejection(fixed, {}) is None
|
||
|
|
|
||
|
|
# 3. A deliberately-kept model in a router blocks — until a committed waiver
|
||
|
|
# (reviewed in the PR) suppresses exactly that finding.
|
||
|
|
_write(tmp_path, "app/routers/legacy.py", _MODEL_SRC)
|
||
|
|
still_blocked = _run_validator(tmp_path, ["app/routers/legacy.py"])
|
||
|
|
assert Choreographer._conventions_rejection(still_blocked, {}) is not None
|
||
|
|
|
||
|
|
_write(
|
||
|
|
tmp_path,
|
||
|
|
".roboco/conventions.yml",
|
||
|
|
_FORBID_MODEL + "waivers:\n - path: app/routers/legacy.py\n"
|
||
|
|
" rule: no_models_in_routers\n reason: extraction tracked\n",
|
||
|
|
)
|
||
|
|
waived = _run_validator(tmp_path, ["app/routers/legacy.py"])
|
||
|
|
assert Choreographer._conventions_rejection(waived, {}) is None
|