test_output_presenter.py 40 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028
  1. import json
  2. import unittest
  3. from services.output_presenter import OutputPresenter
  4. from tools.export_out_of_province_port_data import ExportOutOfProvincePortDataTool
  5. from tools.export_pending_outbound_orders import ExportPendingOutboundOrdersTool
  6. from tools.list_order_filter_options import ListOrderFilterOptionsTool
  7. from tools.list_customer_filter_options import ListCustomerFilterOptionsTool
  8. from tools.list_pending_outbound_export_filter_options import (
  9. ListPendingOutboundExportFilterOptionsTool,
  10. )
  11. from tools.query_order import QueryOrderTool
  12. from tools.query_order_exact import QueryOrderExactTool
  13. from tools.query_track import QueryTrackTool
  14. from tools.query_customer_list import QueryCustomerListTool
  15. class OutputPresenterTest(unittest.TestCase):
  16. def setUp(self):
  17. self.presenter = OutputPresenter()
  18. def test_customer_list_uses_fixed_17_column_safe_table(self):
  19. keys = [
  20. 'customer_name', 'customer_code', 'create_time', 'business_type',
  21. 'customer_attribute', 'customer_source', 'first_inbound_date',
  22. 'last_inbound_date', 'active_status', 'contract_status',
  23. 'contract_validity', 'credit_limit', 'currency_code',
  24. 'billing_modes', 'sales_name', 'merchandiser_name',
  25. 'department_name',
  26. ]
  27. result = self.presenter.present('query_customer_list', {
  28. 'code': 'MCP_0000',
  29. 'data': {
  30. 'summary': '当前页返回1个客户',
  31. 'columns': [{'key': key, 'name': '不可信名称'} for key in keys],
  32. 'records': [dict(
  33. (key, [
  34. {'business_type': '头程业务', 'settlement_mode': '月结'},
  35. {'business_type': '转运业务', 'settlement_mode': '票结'},
  36. ] if key == 'billing_modes' else '值{0}'.format(index))
  37. for index, key in enumerate(keys)
  38. )],
  39. 'tips': [],
  40. },
  41. 'meta': {
  42. 'page': 1, 'limit': 20, 'has_more': False,
  43. 'request_id': 'rq_customer',
  44. },
  45. })
  46. self.assertFalse(result['is_error'])
  47. self.assertEqual(17, len(result['structured_content']['headers']))
  48. self.assertEqual('客户名称', result['structured_content']['headers'][0]['label'])
  49. self.assertEqual('事业部', result['structured_content']['headers'][-1]['label'])
  50. self.assertEqual([
  51. {'业务类型': '头程业务', '结算模式': '月结'},
  52. {'业务类型': '转运业务', '结算模式': '票结'},
  53. ], result['structured_content']['rows'][0][13])
  54. self.assertEqual({
  55. 'mode': 'complete',
  56. 'allow_summary': False,
  57. 'allow_omit_records': False,
  58. 'allow_omit_empty_fields': False,
  59. 'allow_rename_fields': False,
  60. 'preserve_record_order': True,
  61. 'required_field_count': 17,
  62. 'returned_record_count': 1,
  63. 'required_value_count': 17,
  64. 'instruction': '最终回复必须逐条展示全部记录及全部17个字段,不得摘要、省略或改写',
  65. }, result['structured_content']['display_rules'])
  66. self.assertIn('完整客户数据,禁止摘要、合并、隐藏字段或省略空字段。', result['text'])
  67. self.assertIn('本页记录数:1;每条字段数:17;应展示字段值总数:17。', result['text'])
  68. self.assertIn('展示完整性校验:已提供1条客户的全部17个字段。', result['text'])
  69. serialized = json.dumps(result, ensure_ascii=False)
  70. self.assertNotIn('customer_name', serialized)
  71. self.assertNotIn('不可信名称', serialized)
  72. def test_customer_list_rejects_malformed_structured_billing_modes(self):
  73. keys = list(self.presenter.TABLE_COLUMNS['query_customer_list'])
  74. for billing_modes in (
  75. '头程业务:月结',
  76. [{'business_type': '头程业务'}],
  77. [{'business_type': '头程业务', 'settlement_mode': '月结', 'id': 1}],
  78. [{'business_type': '', 'settlement_mode': '月结'}],
  79. ):
  80. with self.subTest(billing_modes=billing_modes):
  81. record = dict((key, '') for key in keys)
  82. record['billing_modes'] = billing_modes
  83. result = self.presenter.present('query_customer_list', {
  84. 'code': 'MCP_0000',
  85. 'data': {
  86. 'summary': '',
  87. 'columns': [{'key': key, 'name': key} for key in keys],
  88. 'records': [record],
  89. 'tips': [],
  90. },
  91. 'meta': {'page': 1, 'limit': 20, 'has_more': False},
  92. })
  93. self.assertTrue(result['is_error'])
  94. record = dict((key, '') for key in keys)
  95. record['billing_modes'] = []
  96. record['customer_name'] = ['不允许的嵌套值']
  97. result = self.presenter.present('query_customer_list', {
  98. 'code': 'MCP_0000',
  99. 'data': {
  100. 'summary': '',
  101. 'columns': [{'key': key, 'name': key} for key in keys],
  102. 'records': [record],
  103. 'tips': [],
  104. },
  105. 'meta': {'page': 1, 'limit': 20, 'has_more': False},
  106. })
  107. self.assertTrue(result['is_error'])
  108. def test_customer_list_fails_closed_on_incomplete_columns_or_bad_meta(self):
  109. base = {
  110. 'code': 'MCP_0000',
  111. 'data': {
  112. 'summary': '',
  113. 'columns': [{'key': 'customer_name', 'name': '客户名称'}],
  114. 'records': [], 'tips': [],
  115. },
  116. 'meta': {'page': 1, 'limit': 20, 'has_more': False},
  117. }
  118. self.assertTrue(self.presenter.present('query_customer_list', base)['is_error'])
  119. keys = list(self.presenter.TABLE_COLUMNS['query_customer_list'])
  120. base['data']['columns'] = [{'key': key, 'name': key} for key in keys]
  121. base['meta']['has_more'] = 'false'
  122. self.assertTrue(self.presenter.present('query_customer_list', base)['is_error'])
  123. def test_customer_list_rejects_record_with_internal_field(self):
  124. keys = list(self.presenter.TABLE_COLUMNS['query_customer_list'])
  125. record = dict((key, '') for key in keys)
  126. record['customer_id'] = 9
  127. result = self.presenter.present('query_customer_list', {
  128. 'code': 'MCP_0000',
  129. 'data': {
  130. 'summary': '', 'columns': [{'key': key, 'name': key} for key in keys],
  131. 'records': [record], 'tips': [],
  132. },
  133. 'meta': {'page': 1, 'limit': 20, 'has_more': False},
  134. })
  135. self.assertTrue(result['is_error'])
  136. def test_customer_options_use_safe_shape_and_reject_unknown_fields(self):
  137. result = self.presenter.present('list_customer_filter_options', {
  138. 'code': 'MCP_0000',
  139. 'data': {'records': [{'value': 7, 'label': '客户甲-C001', 'code': 'C001'}]},
  140. 'meta': {'page': 1, 'limit': 20, 'has_more': False},
  141. })
  142. self.assertFalse(result['is_error'])
  143. self.assertEqual([[7, '客户甲-C001', 'C001']], result['structured_content']['rows'])
  144. malformed = self.presenter.present('list_customer_filter_options', {
  145. 'code': 'MCP_0000',
  146. 'data': {'records': [{
  147. 'value': 7, 'label': '客户甲', 'code': 'C001', 'admin_id': 99,
  148. }]},
  149. 'meta': {'page': 1, 'limit': 20, 'has_more': False},
  150. })
  151. self.assertTrue(malformed['is_error'])
  152. self.assertNotIn('99', malformed['text'])
  153. def test_customer_options_reject_malformed_records_and_pagination(self):
  154. def present(records, meta):
  155. return self.presenter.present('list_customer_filter_options', {
  156. 'code': 'MCP_0000', 'data': {'records': records}, 'meta': meta,
  157. })
  158. good_meta = {'page': 1, 'limit': 20, 'has_more': False}
  159. bad_records = [
  160. 'record',
  161. {'value': 1, 'label': '客户甲'},
  162. {'value': True, 'label': '客户甲', 'code': ''},
  163. {'value': '1', 'label': '客户甲', 'code': ''},
  164. {'value': 0, 'label': '客户甲', 'code': ''},
  165. {'value': 1, 'label': 2, 'code': ''},
  166. {'value': 1, 'label': ' ', 'code': ''},
  167. {'value': 1, 'label': '客户甲', 'code': 3},
  168. ]
  169. for record in bad_records:
  170. with self.subTest(record=record):
  171. self.assertTrue(present([record], good_meta)['is_error'])
  172. self.assertTrue(present('records', good_meta)['is_error'])
  173. self.assertTrue(self.presenter.present('list_customer_filter_options', {
  174. 'code': 'MCP_0000', 'data': {'records': [], 'extra': 1}, 'meta': good_meta,
  175. })['is_error'])
  176. bad_meta = [
  177. None, {},
  178. {'page': True, 'limit': 20, 'has_more': False},
  179. {'page': '1', 'limit': 20, 'has_more': False},
  180. {'page': 0, 'limit': 20, 'has_more': False},
  181. {'page': 1, 'limit': True, 'has_more': False},
  182. {'page': 1, 'limit': '20', 'has_more': False},
  183. {'page': 1, 'limit': 0, 'has_more': False},
  184. {'page': 1, 'limit': 101, 'has_more': False},
  185. {'page': 1, 'limit': 20, 'has_more': 'false'},
  186. ]
  187. for meta in bad_meta:
  188. with self.subTest(meta=meta):
  189. self.assertTrue(present([], meta)['is_error'])
  190. def test_customer_tools_are_safe_and_total_is_24(self):
  191. self.assertTrue(self.presenter.handles(QueryCustomerListTool.name))
  192. self.assertTrue(self.presenter.handles(ListCustomerFilterOptionsTool.name))
  193. self.assertEqual(27, len(self.presenter.SAFE_TOOLS))
  194. def test_exact_order_uses_labels_and_drops_internal_fields(self):
  195. result = self.presenter.present(
  196. 'query_order_exact',
  197. {
  198. 'code': 'MCP_0000',
  199. 'data': {
  200. 'summary': '当前页返回 1 条订单',
  201. 'columns': [
  202. {'key': 'order_number', 'name': '订单号'},
  203. {
  204. 'key': 'tracking_number',
  205. 'name': '快递单号',
  206. 'description': '承运商跟踪号码',
  207. },
  208. ],
  209. 'records': [{
  210. 'order_number': 'SO001',
  211. 'tracking_number': 'TN001',
  212. 'order_id': 99,
  213. 'time_zone': '8.00',
  214. }],
  215. 'tips': [],
  216. },
  217. 'meta': {
  218. 'page': 1,
  219. 'limit': 20,
  220. 'has_more': False,
  221. 'request_id': 'rq_exact',
  222. },
  223. },
  224. )
  225. self.assertFalse(result['is_error'])
  226. self.assertEqual(
  227. [
  228. {'label': '订单号'},
  229. {'label': '快递单号', 'description': '承运商跟踪号码'},
  230. ],
  231. result['structured_content']['headers'],
  232. )
  233. self.assertEqual(
  234. [['SO001', 'TN001']],
  235. result['structured_content']['rows'],
  236. )
  237. self.assertEqual(
  238. {'page': 1, 'limit': 20, 'has_more': False},
  239. result['structured_content']['pagination'],
  240. )
  241. self.assertEqual({'request_id': 'rq_exact'}, result['meta'])
  242. serialized = json.dumps(result, ensure_ascii=False)
  243. self.assertNotIn('order_number', serialized)
  244. self.assertNotIn('tracking_number', serialized)
  245. self.assertNotIn('order_id', serialized)
  246. self.assertNotIn('time_zone', serialized)
  247. self.assertIn('订单号', result['text'])
  248. self.assertIn('SO001', result['text'])
  249. def test_table_tools_reject_unknown_backend_columns(self):
  250. for tool_name in (
  251. 'query_order_exact',
  252. 'query_track',
  253. 'query_customs_declaration_files',
  254. ):
  255. with self.subTest(tool_name=tool_name):
  256. result = self.presenter.present(
  257. tool_name,
  258. {
  259. 'code': 'MCP_0000',
  260. 'data': {
  261. 'columns': [
  262. {'key': 'order_id', 'name': '内部订单ID'},
  263. ],
  264. 'records': [{'order_id': 99}],
  265. },
  266. },
  267. )
  268. self.assertTrue(result['is_error'])
  269. self.assertEqual(
  270. '工具返回格式异常',
  271. result['structured_content']['message'],
  272. )
  273. self.assertNotIn('99', result['text'])
  274. def test_table_tools_use_fixed_labels_instead_of_backend_labels(self):
  275. result = self.presenter.present(
  276. 'query_customs_declaration_files',
  277. {
  278. 'code': 'MCP_0000',
  279. 'data': {
  280. 'columns': [
  281. {'key': 'order_number', 'name': '内部名称'},
  282. ],
  283. 'records': [{'order_number': 'ORD001'}],
  284. },
  285. },
  286. )
  287. self.assertFalse(result['is_error'])
  288. self.assertEqual(
  289. [{'label': '订单号'}],
  290. result['structured_content']['headers'],
  291. )
  292. self.assertNotIn('内部名称', result['text'])
  293. def test_table_tool_without_column_definition_fails_closed(self):
  294. definition = self.presenter.TABLE_COLUMNS.pop('query_track')
  295. try:
  296. result = self.presenter.present(
  297. 'query_track',
  298. {
  299. 'code': 'MCP_0000',
  300. 'data': {
  301. 'columns': [{'key': 'status', 'name': '轨迹节点'}],
  302. 'records': [],
  303. },
  304. },
  305. )
  306. finally:
  307. self.presenter.TABLE_COLUMNS['query_track'] = definition
  308. self.assertTrue(result['is_error'])
  309. self.assertEqual(
  310. '工具返回格式异常',
  311. result['structured_content']['message'],
  312. )
  313. def test_table_missing_value_is_empty_and_fixed_labels_are_used(self):
  314. result = self.presenter.present(
  315. 'query_track',
  316. {
  317. 'code': '0',
  318. 'data': {
  319. 'columns': [
  320. {'key': 'status', 'name': '状态'},
  321. {'key': 'content', 'name': '状态'},
  322. ],
  323. 'records': [{'status': '已发货'}],
  324. 'tips': ['仅展示已有轨迹'],
  325. },
  326. 'meta': {'request_id': 'rq_track'},
  327. },
  328. )
  329. self.assertEqual(
  330. [
  331. {
  332. 'label': '轨迹节点',
  333. 'description': '轨迹状态,如:开始集港、离港放行、清关、配送等',
  334. },
  335. {'label': '轨迹内容', 'description': '详细描述'},
  336. ],
  337. result['structured_content']['headers'],
  338. )
  339. self.assertEqual([['已发货', '']], result['structured_content']['rows'])
  340. self.assertEqual(['仅展示已有轨迹'], result['structured_content']['tips'])
  341. def test_empty_table_keeps_safe_headers_and_tips(self):
  342. result = self.presenter.present(
  343. 'query_track',
  344. {
  345. 'code': 'MCP_0000',
  346. 'data': {
  347. 'columns': [{'key': 'status', 'name': '轨迹节点'}],
  348. 'records': [],
  349. 'tips': ['未查询到轨迹信息'],
  350. },
  351. 'meta': {'page': 1, 'limit': 5, 'total': 0},
  352. },
  353. )
  354. self.assertEqual(
  355. [{
  356. 'label': '轨迹节点',
  357. 'description': '轨迹状态,如:开始集港、离港放行、清关、配送等',
  358. }],
  359. result['structured_content']['headers'],
  360. )
  361. self.assertEqual([], result['structured_content']['rows'])
  362. self.assertIn('未查询到轨迹信息', result['text'])
  363. without_tips = self.presenter.present(
  364. 'query_track',
  365. {
  366. 'code': 'MCP_0000',
  367. 'data': {
  368. 'columns': [{'key': 'status', 'name': '轨迹节点'}],
  369. 'records': [],
  370. 'tips': 'not-a-list',
  371. },
  372. },
  373. )
  374. self.assertNotIn('tips', without_tips['structured_content'])
  375. def test_filter_options_preserve_values_for_follow_up_calls(self):
  376. result = self.presenter.present(
  377. 'list_order_filter_options',
  378. {
  379. 'code': 'MCP_0000',
  380. 'data': {
  381. 'records': [
  382. {'value': 101, 'label': '客户甲', 'code': 'CUS-A'},
  383. {'value': -1, 'label': '客户仓', 'code': '-1'},
  384. ],
  385. },
  386. 'meta': {'page': 2, 'limit': 20, 'has_more': True},
  387. },
  388. )
  389. self.assertEqual(
  390. [[101, '客户甲', 'CUS-A'], [-1, '客户仓', '-1']],
  391. result['structured_content']['rows'],
  392. )
  393. self.assertEqual(
  394. ['可传值', '显示名称', '业务编码'],
  395. [item['label'] for item in result['structured_content']['headers']],
  396. )
  397. self.assertNotIn('"value"', json.dumps(result, ensure_ascii=False))
  398. def test_pending_filter_options_use_same_safe_shape(self):
  399. result = self.presenter.present(
  400. 'list_pending_outbound_export_filter_options',
  401. {
  402. 'code': 'MCP_0000',
  403. 'data': {'records': [{'value': 'US', 'label': '美国', 'code': 'US'}]},
  404. 'meta': {},
  405. },
  406. )
  407. self.assertEqual([['US', '美国', 'US']], result['structured_content']['rows'])
  408. def test_export_submission_returns_only_safe_queued_task(self):
  409. for tool_name in (
  410. 'export_pending_outbound_orders',
  411. 'export_out_of_province_port_data',
  412. 'export_receivable_cost_list',
  413. 'export_pallet_data',
  414. ):
  415. with self.subTest(tool_name=tool_name):
  416. result = self.presenter.present(
  417. tool_name,
  418. {
  419. 'code': 'MCP_0000',
  420. 'data': {
  421. 'task_ref': 'mexp_abc',
  422. 'status': 'queued',
  423. 'retry_after_seconds': 10,
  424. },
  425. 'meta': {'request_id': 'rq_export'},
  426. },
  427. )
  428. self.assertEqual(
  429. {
  430. 'task_ref': 'mexp_abc',
  431. 'status': 'queued',
  432. 'retry_after_seconds': 10,
  433. },
  434. result['structured_content']['task'],
  435. )
  436. self.assertNotIn('file_url', json.dumps(result, ensure_ascii=False))
  437. def test_export_task_query_presents_all_known_states(self):
  438. queued = self.presenter.present(
  439. 'query_export_task',
  440. {
  441. 'code': 'MCP_0000',
  442. 'data': {
  443. 'task_ref': 'mexp_abc',
  444. 'status': 'queued',
  445. 'retry_after_seconds': 10,
  446. },
  447. },
  448. )
  449. running = self.presenter.present(
  450. 'query_export_task',
  451. {
  452. 'code': 'MCP_0000',
  453. 'data': {
  454. 'task_ref': 'mexp_abc',
  455. 'status': 'running',
  456. 'retry_after_seconds': 10,
  457. },
  458. },
  459. )
  460. completed = self.presenter.present(
  461. 'query_export_task',
  462. {
  463. 'code': 'MCP_0000',
  464. 'data': {
  465. 'task_ref': 'mexp_abc',
  466. 'status': 'completed',
  467. 'files': [{
  468. 'label': 'port.zip',
  469. 'url': 'https://files.test/port.zip',
  470. }],
  471. },
  472. },
  473. )
  474. failed = self.presenter.present(
  475. 'query_export_task',
  476. {
  477. 'code': 'MCP_0000',
  478. 'data': {'task_ref': 'mexp_abc', 'status': 'failed'},
  479. },
  480. )
  481. self.assertEqual('queued', queued['structured_content']['task']['status'])
  482. self.assertEqual('running', running['structured_content']['task']['status'])
  483. self.assertEqual(
  484. 'https://files.test/port.zip',
  485. completed['structured_content']['files'][0]['url'],
  486. )
  487. self.assertEqual('failed', failed['structured_content']['task']['status'])
  488. def test_export_task_unknown_or_malformed_states_fail_closed(self):
  489. cases = (
  490. {
  491. 'task_ref': 123,
  492. 'status': 'queued',
  493. 'retry_after_seconds': 10,
  494. },
  495. {'task_ref': 'mexp_abc', 'status': 'unknown'},
  496. {'task_ref': 'mexp_abc', 'status': 'queued'},
  497. {
  498. 'task_ref': 'mexp_abc',
  499. 'status': 'queued',
  500. 'retry_after_seconds': 0,
  501. },
  502. {
  503. 'task_ref': 'mexp_abc',
  504. 'status': 'running',
  505. 'retry_after_seconds': 10,
  506. 'files': [],
  507. },
  508. {
  509. 'task_ref': 'mexp_abc',
  510. 'status': 'completed',
  511. 'files': None,
  512. },
  513. {
  514. 'task_ref': 'mexp_abc',
  515. 'status': 'completed',
  516. 'files': ['bad'],
  517. },
  518. {
  519. 'task_ref': 'mexp_abc',
  520. 'status': 'completed',
  521. 'files': [{'label': 'bad', 'url': None}],
  522. },
  523. {
  524. 'task_ref': 'mexp_abc',
  525. 'status': 'completed',
  526. 'files': [{'label': 'bad', 'url': 'javascript:alert(1)'}],
  527. },
  528. {
  529. 'task_ref': 'mexp_abc',
  530. 'status': 'completed',
  531. 'files': [],
  532. 'extra': True,
  533. },
  534. {
  535. 'task_ref': 'mexp_abc',
  536. 'status': 'failed',
  537. 'remark': 'secret',
  538. },
  539. )
  540. for data in cases:
  541. with self.subTest(data=data):
  542. result = self.presenter.present(
  543. 'query_export_task',
  544. {'code': 'MCP_0000', 'data': data},
  545. )
  546. self.assertTrue(result['is_error'])
  547. def test_export_task_rejects_unsafe_download_urls(self):
  548. urls = (
  549. 'https://user:pass@files.test/a.xlsx',
  550. 'https://files.test/a file.xlsx',
  551. 'https://files.test/a\x00.xlsx',
  552. 'http:foo',
  553. 'ftp://files.test/a.xlsx',
  554. 'https://files.test:bad/a.xlsx',
  555. 'https://files.test:99999/a.xlsx',
  556. 'https://files.test\\evil/a.xlsx',
  557. )
  558. for url in urls:
  559. with self.subTest(url=repr(url)):
  560. result = self.presenter.present(
  561. 'query_export_task',
  562. {
  563. 'code': 'MCP_0000',
  564. 'data': {
  565. 'task_ref': 'mexp_abc',
  566. 'status': 'completed',
  567. 'files': [{'label': 'a.xlsx', 'url': url}],
  568. },
  569. },
  570. )
  571. self.assertTrue(result['is_error'])
  572. def test_known_parameter_error_uses_business_label(self):
  573. result = self.presenter.present(
  574. 'query_track',
  575. {
  576. 'code': 'MCP_1401',
  577. 'msg': 'tracking_number is required',
  578. 'data': {'tracking_number': 'bad'},
  579. 'meta': {'request_id': 'rq_error'},
  580. },
  581. )
  582. self.assertTrue(result['is_error'])
  583. self.assertEqual('快递单号参数不正确', result['structured_content']['message'])
  584. self.assertNotIn('tracking_number', json.dumps(result, ensure_ascii=False))
  585. self.assertEqual({'request_id': 'rq_error'}, result['meta'])
  586. def test_port_export_so_number_error_uses_business_label(self):
  587. result = self.presenter.present(
  588. 'export_out_of_province_port_data',
  589. {
  590. 'code': 'MCP_1401',
  591. 'msg': 'so_numbers must be an array',
  592. 'data': {'so_numbers': 'bad'},
  593. 'meta': {'request_id': 'rq_so_error'},
  594. },
  595. )
  596. self.assertTrue(result['is_error'])
  597. self.assertEqual('SO号参数不正确', result['structured_content']['message'])
  598. self.assertNotIn('so_numbers', json.dumps(result, ensure_ascii=False))
  599. def test_pallet_export_container_code_error_uses_business_label(self):
  600. result = self.presenter.present(
  601. 'export_pallet_data',
  602. {
  603. 'code': 'MCP_1401',
  604. 'msg': 'container_codes must be an array',
  605. 'data': {'container_codes': 'bad'},
  606. 'meta': {'request_id': 'rq_container_error'},
  607. },
  608. )
  609. self.assertTrue(result['is_error'])
  610. self.assertEqual('柜号参数不正确', result['structured_content']['message'])
  611. self.assertNotIn('container_codes', json.dumps(result, ensure_ascii=False))
  612. self.assertEqual({'request_id': 'rq_container_error'}, result['meta'])
  613. def test_pallet_export_bl_number_error_uses_business_label(self):
  614. result = self.presenter.present(
  615. 'export_pallet_data',
  616. {
  617. 'code': 'MCP_1401',
  618. 'msg': 'bl_numbers must be an array',
  619. 'data': {'bl_numbers': 'bad'},
  620. 'meta': {'request_id': 'rq_bl_error'},
  621. },
  622. )
  623. self.assertTrue(result['is_error'])
  624. self.assertEqual('提单号参数不正确', result['structured_content']['message'])
  625. self.assertNotIn('bl_numbers', json.dumps(result, ensure_ascii=False))
  626. self.assertEqual({'request_id': 'rq_bl_error'}, result['meta'])
  627. def test_pallet_export_inbound_time_start_error_uses_business_label(self):
  628. result = self.presenter.present(
  629. 'export_pallet_data',
  630. {
  631. 'code': 'MCP_1401',
  632. 'msg': 'inbound_time_start is required',
  633. 'data': {'inbound_time_start': ''},
  634. 'meta': {'request_id': 'rq_time_start_error'},
  635. },
  636. )
  637. self.assertTrue(result['is_error'])
  638. self.assertEqual(
  639. '海外仓入库时间开始参数不正确',
  640. result['structured_content']['message'],
  641. )
  642. self.assertNotIn('inbound_time_start', json.dumps(result, ensure_ascii=False))
  643. self.assertEqual({'request_id': 'rq_time_start_error'}, result['meta'])
  644. def test_pallet_export_inbound_time_end_error_uses_business_label(self):
  645. result = self.presenter.present(
  646. 'export_pallet_data',
  647. {
  648. 'code': 'MCP_1401',
  649. 'msg': 'inbound_time_end is required',
  650. 'data': {'inbound_time_end': ''},
  651. 'meta': {'request_id': 'rq_time_end_error'},
  652. },
  653. )
  654. self.assertTrue(result['is_error'])
  655. self.assertEqual(
  656. '海外仓入库时间结束参数不正确',
  657. result['structured_content']['message'],
  658. )
  659. self.assertNotIn('inbound_time_end', json.dumps(result, ensure_ascii=False))
  660. self.assertEqual({'request_id': 'rq_time_end_error'}, result['meta'])
  661. def test_system_error_hides_backend_message_and_data(self):
  662. result = self.presenter.present(
  663. 'query_order_exact',
  664. {
  665. 'code': 'MCP_9001',
  666. 'msg': 'SQLSTATE table st_order order_number failed',
  667. 'data': {'sql': 'select * from st_order'},
  668. },
  669. )
  670. serialized = json.dumps(result, ensure_ascii=False)
  671. self.assertIn('工具调用失败,请稍后重试', serialized)
  672. self.assertNotIn('SQLSTATE', serialized)
  673. self.assertNotIn('st_order', serialized)
  674. self.assertNotIn('order_number', serialized)
  675. def test_new_business_error_codes_have_stable_messages_and_are_not_retryable(self):
  676. cases = {
  677. 'MCP_1103': '员工账号不可用,请联系管理员',
  678. 'MCP_1104': '身份信息已失效,请重新登录或重新生成设备配置',
  679. 'MCP_1501': '目标数据不可用',
  680. 'MCP_1502': '结果过多,请缩小查询范围',
  681. 'MCP_1601': '没有可导出的数据',
  682. }
  683. for code, message in cases.items():
  684. with self.subTest(code=code):
  685. result = self.presenter.present(
  686. 'query_order_exact',
  687. {'code': code, 'msg': 'internal detail', 'data': []},
  688. )
  689. self.assertEqual(code, result['structured_content']['code'])
  690. self.assertEqual(message, result['structured_content']['message'])
  691. self.assertFalse(result['structured_content']['retryable'])
  692. def test_unknown_business_error_code_is_normalized_to_system_error(self):
  693. with self.assertLogs('services.output_presenter', level='WARNING') as logs:
  694. result = self.presenter.present(
  695. 'query_order_exact',
  696. {
  697. 'code': 'MCP_7777',
  698. 'msg': 'secret backend detail',
  699. 'data': [],
  700. 'meta': {'request_id': 'rq_unknown_code'},
  701. },
  702. )
  703. self.assertEqual('MCP_9001', result['structured_content']['code'])
  704. self.assertEqual('工具调用失败,请稍后重试', result['structured_content']['message'])
  705. self.assertTrue(result['structured_content']['retryable'])
  706. self.assertNotIn('secret', json.dumps(result, ensure_ascii=False))
  707. record = logs.records[0]
  708. self.assertEqual('rq_unknown_code', record.request_id)
  709. self.assertEqual('query_order_exact', record.tool_code)
  710. self.assertEqual('MCP_7777', record.backend_code)
  711. self.assertEqual('MCP_9001', record.response_code)
  712. self.assertEqual('UNEXPECTED_EXCEPTION', record.diagnostic_reason)
  713. def test_unknown_tool_and_malformed_success_fail_closed(self):
  714. unknown = self.presenter.present(
  715. 'future_tool',
  716. {'code': 'MCP_0000', 'data': {'secret_field': 'secret'}},
  717. )
  718. malformed = self.presenter.present(
  719. 'query_track',
  720. {'code': 'MCP_0000', 'data': {'records': []}},
  721. )
  722. for result in (unknown, malformed):
  723. self.assertTrue(result['is_error'])
  724. self.assertEqual('工具返回格式异常', result['structured_content']['message'])
  725. self.assertNotIn('secret', json.dumps(result, ensure_ascii=False))
  726. def test_present_exception_maps_value_error_and_hides_unknown_exception(self):
  727. parameter = self.presenter.present_exception(
  728. 'query_track',
  729. ValueError('order_number is required'),
  730. )
  731. system = self.presenter.present_exception(
  732. 'query_track',
  733. RuntimeError('SQL password leaked'),
  734. )
  735. self.assertEqual('订单号参数不正确', parameter['structured_content']['message'])
  736. self.assertEqual('工具调用失败,请稍后重试', system['structured_content']['message'])
  737. self.assertNotIn('password', json.dumps(system, ensure_ascii=False))
  738. def test_present_exception_handles_device_disabled_and_unknown_tool(self):
  739. device = self.presenter.present_exception(
  740. 'query_track',
  741. RuntimeError('这台设备的 Workbuddy 配置已失效,请重新生成配置。'),
  742. )
  743. disabled = self.presenter.present_exception(
  744. 'query_track',
  745. RuntimeError('tool disabled: query_track'),
  746. )
  747. unknown = self.presenter.present_exception(
  748. 'future_tool',
  749. RuntimeError('secret error'),
  750. )
  751. self.assertIn('Workbuddy', device['structured_content']['message'])
  752. self.assertEqual('MCP_1202', disabled['structured_content']['code'])
  753. self.assertEqual('工具返回格式异常', unknown['structured_content']['message'])
  754. def test_invalid_payload_types_and_generic_errors_fail_safely(self):
  755. cases = (
  756. self.presenter.present('query_track', 'invalid'),
  757. self.presenter.present('query_track', {'code': 'MCP_0000', 'data': []}),
  758. self.presenter.present('query_track', {'code': '', 'msg': 'secret'}),
  759. self.presenter.present(
  760. 'query_track',
  761. {'code': 'MCP_7777', 'msg': 'secret backend error'},
  762. ),
  763. self.presenter.present(
  764. 'query_track',
  765. {'code': 'MCP_1301', 'msg': 'secret permission detail'},
  766. ),
  767. )
  768. for result in cases:
  769. self.assertTrue(result['is_error'])
  770. self.assertNotIn('secret', json.dumps(result, ensure_ascii=False))
  771. def test_malformed_table_parts_fail_closed(self):
  772. base = {
  773. 'code': 'MCP_0000',
  774. 'data': {
  775. 'columns': [{'key': 'status', 'name': '状态'}],
  776. 'records': [],
  777. },
  778. }
  779. bad_data = (
  780. {'columns': [], 'records': []},
  781. {'columns': [{'key': 'status', 'name': '状态'}], 'records': None},
  782. {'columns': ['status'], 'records': []},
  783. {'columns': [{'key': None, 'name': '状态'}], 'records': []},
  784. {'columns': [{'key': ' ', 'name': '状态'}], 'records': []},
  785. {'columns': [{'key': 'status', 'name': None}], 'records': []},
  786. {'columns': [{'key': 'status', 'name': ' '}], 'records': []},
  787. {'columns': [{'key': 'status', 'name': '状态'}], 'records': ['bad']},
  788. )
  789. for data in bad_data:
  790. with self.subTest(data=data):
  791. payload = dict(base)
  792. payload['data'] = data
  793. self.assertTrue(self.presenter.present('query_track', payload)['is_error'])
  794. def test_malformed_options_and_exports_fail_closed(self):
  795. cases = (
  796. self.presenter.present(
  797. 'list_order_filter_options',
  798. {'code': 'MCP_0000', 'data': {'records': None}},
  799. ),
  800. self.presenter.present(
  801. 'list_order_filter_options',
  802. {'code': 'MCP_0000', 'data': {'records': ['bad']}},
  803. ),
  804. self.presenter.present(
  805. 'export_pending_outbound_orders',
  806. {
  807. 'code': 'MCP_0000',
  808. 'data': {
  809. 'task_ref': '',
  810. 'status': 'queued',
  811. 'retry_after_seconds': 10,
  812. },
  813. },
  814. ),
  815. self.presenter.present(
  816. 'export_pending_outbound_orders',
  817. {
  818. 'code': 'MCP_0000',
  819. 'data': {
  820. 'task_ref': 'mexp_abc',
  821. 'status': 'queued',
  822. 'retry_after_seconds': 10,
  823. 'extra': True,
  824. },
  825. },
  826. ),
  827. self.presenter.present(
  828. 'export_pending_outbound_orders',
  829. {
  830. 'code': 'MCP_0000',
  831. 'data': {
  832. 'task_ref': 'mexp_abc',
  833. 'status': 'queued',
  834. 'retry_after_seconds': 0,
  835. },
  836. },
  837. ),
  838. )
  839. self.assertTrue(all(result['is_error'] for result in cases))
  840. def test_optional_text_meta_and_nested_values_cover_safe_boundaries(self):
  841. result = self.presenter.present(
  842. 'query_track',
  843. {
  844. 'code': 'MCP_0000',
  845. 'data': {
  846. 'summary': None,
  847. 'columns': [
  848. {'key': 'status', 'name': '状态', 'description': ''},
  849. {'key': 'content', 'name': '详情', 'description': 123},
  850. ],
  851. 'records': [{'status': {'name': '已发货'}, 'content': ['A']}],
  852. 'tips': ['', None, '有效提示'],
  853. },
  854. 'meta': {'request_id': ' ', 'page': 1},
  855. },
  856. )
  857. self.assertFalse(result['is_error'])
  858. self.assertEqual({}, result['meta'])
  859. self.assertIn('{"name": "已发货"}', result['text'])
  860. self.assertIn('["A"]', result['text'])
  861. self.assertEqual(['有效提示'], result['structured_content']['tips'])
  862. no_meta = self.presenter.present(
  863. 'list_order_filter_options',
  864. {'code': 'MCP_0000', 'data': {'records': []}, 'meta': None},
  865. )
  866. self.assertNotIn('pagination', no_meta['structured_content'])
  867. def test_parameter_error_without_known_field_is_generic(self):
  868. result = self.presenter.present(
  869. 'query_track',
  870. {'code': 'MCP_1401', 'msg': 'invalid request'},
  871. )
  872. self.assertEqual(
  873. '工具参数不正确,请检查后重试',
  874. result['structured_content']['message'],
  875. )
  876. def test_query_order_is_explicitly_not_presented(self):
  877. self.assertFalse(self.presenter.handles('query_order'))
  878. self.assertTrue(self.presenter.handles('query_order_exact'))
  879. def test_unhashable_tool_names_fail_closed(self):
  880. for tool_name in ([], {}):
  881. with self.subTest(tool_name=tool_name):
  882. self.assertFalse(self.presenter.handles(tool_name))
  883. result = self.presenter.present_exception(
  884. tool_name,
  885. RuntimeError('secret backend error'),
  886. )
  887. self.assertTrue(result['is_error'])
  888. self.assertEqual(
  889. '工具返回格式异常',
  890. result['structured_content']['message'],
  891. )
  892. def test_safe_tool_descriptions_require_business_labels_only(self):
  893. safe_tools = (
  894. QueryOrderExactTool(),
  895. QueryTrackTool(),
  896. ListOrderFilterOptionsTool(),
  897. ListPendingOutboundExportFilterOptionsTool(),
  898. ExportPendingOutboundOrdersTool(),
  899. ExportOutOfProvincePortDataTool(),
  900. )
  901. for tool in safe_tools:
  902. with self.subTest(tool=tool.name):
  903. self.assertIn('不得展示内部参数名', tool.metadata()['description'])
  904. self.assertNotIn('不得展示内部参数名', QueryOrderTool().metadata()['description'])
  905. def test_presented_order_and_option_values_can_feed_follow_up_tools(self):
  906. class RecordingClient:
  907. def __init__(self):
  908. self.calls = []
  909. def call_tool(self, tool_code, route_path, payload, request_id):
  910. self.calls.append((tool_code, payload))
  911. return {'code': 'MCP_0000'}
  912. order_result = self.presenter.present(
  913. 'query_order_exact',
  914. {
  915. 'code': 'MCP_0000',
  916. 'data': {
  917. 'columns': [{'key': 'order_number', 'name': '订单号'}],
  918. 'records': [{'order_number': 'SO-FOLLOW-UP'}],
  919. },
  920. },
  921. )
  922. option_result = self.presenter.present(
  923. 'list_order_filter_options',
  924. {
  925. 'code': 'MCP_0000',
  926. 'data': {
  927. 'records': [{'value': 901, 'label': '客户甲', 'code': 'C901'}],
  928. },
  929. },
  930. )
  931. client = RecordingClient()
  932. QueryTrackTool(client).call(
  933. order_number=order_result['structured_content']['rows'][0][0],
  934. )
  935. QueryOrderExactTool(client).call(
  936. customer_ids=[option_result['structured_content']['rows'][0][0]],
  937. )
  938. self.assertEqual(
  939. ('query_track', {'page': 1, 'limit': 5, 'order_number': 'SO-FOLLOW-UP'}),
  940. client.calls[0],
  941. )
  942. self.assertEqual([901], client.calls[1][1]['customer_ids'])
  943. if __name__ == '__main__':
  944. unittest.main()