Kanban:补齐任务操作链路,明确能力边界 (#615)

* [verified] fix(kanban): harden WUI parity bridge

- Align board slug normalization with canonical underscore/lowercase/64-char rules
- Validate malformed Kanban action bodies before CLI shell-out
- Narrow task log no-log handling and expose phase-1 capabilities
- Extend client/server regression coverage for parity actions

* fix(kanban): guard archived task detail actions

---------

Co-authored-by: ekko <152005280+EKKOLearnAI@users.noreply.github.com>
This commit is contained in:
Zhicheng Han
2026-05-11 15:26:24 +02:00
committed by GitHub
parent 3a1893d401
commit 6ff1c18ee2
12 changed files with 1079 additions and 91 deletions
+164 -2
View File
@@ -12,6 +12,13 @@ const mockCompleteTasks = vi.hoisted(() => vi.fn())
const mockBlockTask = vi.hoisted(() => vi.fn())
const mockUnblockTasks = vi.hoisted(() => vi.fn())
const mockAssignTask = vi.hoisted(() => vi.fn())
const mockAddComment = vi.hoisted(() => vi.fn())
const mockGetTaskLog = vi.hoisted(() => vi.fn())
const mockGetDiagnostics = vi.hoisted(() => vi.fn())
const mockReclaimTask = vi.hoisted(() => vi.fn())
const mockReassignTask = vi.hoisted(() => vi.fn())
const mockSpecifyTask = vi.hoisted(() => vi.fn())
const mockDispatch = vi.hoisted(() => vi.fn())
const mockGetStats = vi.hoisted(() => vi.fn())
const mockGetAssignees = vi.hoisted(() => vi.fn())
const mockSearchSessions = vi.hoisted(() => vi.fn())
@@ -29,8 +36,8 @@ vi.mock('os', () => ({
vi.mock('../../packages/server/src/services/hermes/hermes-kanban', () => ({
normalizeBoardSlug: (board?: string | null) => {
const value = board?.trim() || 'default'
if (!/^[a-z0-9][a-z0-9-]{0,62}$/.test(value)) throw new Error('Invalid kanban board slug')
const value = board?.trim().toLowerCase() || 'default'
if (!/^[a-z0-9][a-z0-9_-]{0,63}$/.test(value)) throw new Error('Invalid kanban board slug')
return value
},
listBoards: mockListBoards,
@@ -44,6 +51,13 @@ vi.mock('../../packages/server/src/services/hermes/hermes-kanban', () => ({
blockTask: mockBlockTask,
unblockTasks: mockUnblockTasks,
assignTask: mockAssignTask,
addComment: mockAddComment,
getTaskLog: mockGetTaskLog,
getDiagnostics: mockGetDiagnostics,
reclaimTask: mockReclaimTask,
reassignTask: mockReassignTask,
specifyTask: mockSpecifyTask,
dispatch: mockDispatch,
getStats: mockGetStats,
getAssignees: mockGetAssignees,
}))
@@ -109,6 +123,108 @@ describe('kanban controller', () => {
expect(mockListTasks).toHaveBeenLastCalledWith({ board: 'default', status: 'ready', assignee: undefined, tenant: undefined, includeArchived: false })
})
it('proxies comment/log/diagnostics with explicit board context', async () => {
const taskLog = { task_id: 'task-1', path: null, exists: true, size_bytes: 10, content: 'worker log', truncated: false }
mockAddComment.mockResolvedValue({ ok: true, output: 'commented' })
mockGetTaskLog.mockResolvedValue(taskLog)
mockGetDiagnostics.mockResolvedValue([{ task_id: 'task-1' }])
const commentCtx = ctx({ query: { board: 'project-a' }, params: { id: 'task-1' }, request: { body: { body: 'needs review', author: 'han' } } })
await ctrl.addComment(commentCtx)
expect(mockAddComment).toHaveBeenCalledWith('task-1', 'needs review', { board: 'project-a', author: 'han' })
expect(commentCtx.body).toEqual({ ok: true, output: 'commented' })
const logCtx = ctx({ query: { board: 'default', tail: '4000' }, params: { id: 'task-1' } })
await ctrl.taskLog(logCtx)
expect(mockGetTaskLog).toHaveBeenCalledWith('task-1', { board: 'default', tail: 4000 })
expect(logCtx.body).toEqual(taskLog)
const diagnosticsCtx = ctx({ query: { board: 'default', task: 'task-1', severity: 'warning' } })
await ctrl.diagnostics(diagnosticsCtx)
expect(mockGetDiagnostics).toHaveBeenCalledWith({ board: 'default', task: 'task-1', severity: 'warning' })
expect(diagnosticsCtx.body).toEqual({ diagnostics: [{ task_id: 'task-1' }] })
})
it('validates canonical parity endpoint inputs before shelling out', async () => {
const invalidTailCtx = ctx({ query: { board: 'default', tail: '0' }, params: { id: 'task-1' } })
await ctrl.taskLog(invalidTailCtx)
expect(invalidTailCtx.status).toBe(400)
expect(mockGetTaskLog).not.toHaveBeenCalled()
const oversizedTailCtx = ctx({ query: { board: 'default', tail: '1000001' }, params: { id: 'task-1' } })
await ctrl.taskLog(oversizedTailCtx)
expect(oversizedTailCtx.status).toBe(400)
expect(mockGetTaskLog).not.toHaveBeenCalled()
const invalidSeverityCtx = ctx({ query: { board: 'default', severity: 'info' } })
await ctrl.diagnostics(invalidSeverityCtx)
expect(invalidSeverityCtx.status).toBe(400)
expect(mockGetDiagnostics).not.toHaveBeenCalled()
const emptyBoardCtx = ctx({ query: { board: ' ' } })
await ctrl.list(emptyBoardCtx)
expect(emptyBoardCtx.status).toBe(400)
expect(mockListTasks).not.toHaveBeenCalled()
const invalidDispatchCtx = ctx({ query: { board: 'default' }, request: { body: { dryRun: 'yes', max: -1, failureLimit: 0 } } })
await ctrl.dispatch(invalidDispatchCtx)
expect(invalidDispatchCtx.status).toBe(400)
expect(mockDispatch).not.toHaveBeenCalled()
const oversizedDispatchCtx = ctx({ query: { board: 'default' }, request: { body: { dryRun: false, max: 999999999 } } })
await ctrl.dispatch(oversizedDispatchCtx)
expect(oversizedDispatchCtx.status).toBe(400)
expect(mockDispatch).not.toHaveBeenCalled()
})
it('rejects malformed parity action bodies before shelling out', async () => {
const cases: Array<{ name: string; invoke: (c: any) => Promise<void>; context: any; mock: ReturnType<typeof vi.fn> }> = [
{ name: 'comment body object', invoke: ctrl.addComment, context: ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: { body: {}, author: 'han' } } }), mock: mockAddComment },
{ name: 'comment request body array', invoke: ctrl.addComment, context: ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: [] } }), mock: mockAddComment },
{ name: 'comment author object', invoke: ctrl.addComment, context: ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: { body: 'ok', author: {} } } }), mock: mockAddComment },
{ name: 'reclaim request body string', invoke: ctrl.reclaim, context: ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: 'bad' } }), mock: mockReclaimTask },
{ name: 'reclaim reason array', invoke: ctrl.reclaim, context: ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: { reason: [] } } }), mock: mockReclaimTask },
{ name: 'reassign reclaim string', invoke: ctrl.reassign, context: ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: { profile: 'bob', reclaim: 'false' } } }), mock: mockReassignTask },
{ name: 'reassign reclaim number', invoke: ctrl.reassign, context: ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: { profile: 'bob', reclaim: 1 } } }), mock: mockReassignTask },
{ name: 'reassign profile number', invoke: ctrl.reassign, context: ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: { profile: 123 } } }), mock: mockReassignTask },
{ name: 'specify request body number', invoke: ctrl.specify, context: ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: 123 } }), mock: mockSpecifyTask },
{ name: 'specify author object', invoke: ctrl.specify, context: ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: { author: {} } } }), mock: mockSpecifyTask },
{ name: 'dispatch request body array', invoke: ctrl.dispatch, context: ctx({ query: { board: 'default' }, request: { body: [] } }), mock: mockDispatch },
]
for (const testCase of cases) {
vi.clearAllMocks()
await testCase.invoke(testCase.context)
expect(testCase.context.status, testCase.name).toBe(400)
expect(testCase.mock, testCase.name).not.toHaveBeenCalled()
}
})
it('proxies recovery and dispatch actions with explicit board context', async () => {
mockReclaimTask.mockResolvedValue({ ok: true, output: 'reclaimed' })
mockReassignTask.mockResolvedValue({ ok: true, output: 'reassigned' })
mockSpecifyTask.mockResolvedValue([{ task_id: 'task-1' }])
mockDispatch.mockResolvedValue({ spawned: 1 })
const reclaimCtx = ctx({ query: { board: 'project-a' }, params: { id: 'task-1' }, request: { body: { reason: 'stale' } } })
await ctrl.reclaim(reclaimCtx)
expect(mockReclaimTask).toHaveBeenCalledWith('task-1', { board: 'project-a', reason: 'stale' })
const reassignCtx = ctx({ query: { board: 'project-a' }, params: { id: 'task-1' }, request: { body: { profile: 'bob', reclaim: true, reason: 'handoff' } } })
await ctrl.reassign(reassignCtx)
expect(mockReassignTask).toHaveBeenCalledWith('task-1', 'bob', { board: 'project-a', reclaim: true, reason: 'handoff' })
const specifyCtx = ctx({ query: { board: 'default' }, params: { id: 'task-1' }, request: { body: { author: 'han' } } })
await ctrl.specify(specifyCtx)
expect(mockSpecifyTask).toHaveBeenCalledWith('task-1', { board: 'default', author: 'han' })
expect(specifyCtx.body).toEqual({ results: [{ task_id: 'task-1' }] })
const dispatchCtx = ctx({ query: { board: 'default' }, request: { body: { dryRun: true, max: 2, failureLimit: 3 } } })
await ctrl.dispatch(dispatchCtx)
expect(mockDispatch).toHaveBeenCalledWith({ board: 'default', dryRun: true, max: 2, failureLimit: 3 })
expect(dispatchCtx.body).toEqual({ result: { spawned: 1 } })
})
it('enriches completed task details using the latest run profile', async () => {
mockGetTask.mockResolvedValue({
task: { id: 'task-1', status: 'done' },
@@ -134,6 +250,31 @@ describe('kanban controller', () => {
expect(c.body.session).toMatchObject({ id: 'session-1', title: 'Session one' })
})
it('enriches archived task details using the latest run profile', async () => {
mockGetTask.mockResolvedValue({
task: { id: 'task-archived', status: 'archived' },
runs: [{ profile: 'reviewer' }],
comments: [],
events: [],
})
mockFindLatestExactSessionId.mockResolvedValue('session-archived')
mockGetExactSessionDetail.mockResolvedValue({
title: 'Archived session',
source: 'codex',
model: 'gpt-5.5',
started_at: 1,
ended_at: 2,
messages: [],
})
const c = ctx({ params: { id: 'task-archived' }, query: { board: 'project-a' } })
await ctrl.get(c)
expect(mockFindLatestExactSessionId).toHaveBeenCalledWith('task-archived', 'reviewer')
expect(mockGetExactSessionDetail).toHaveBeenCalledWith('session-archived', 'reviewer')
expect(c.body.session).toMatchObject({ id: 'session-archived', title: 'Archived session' })
})
it('prefers exact kanban-task session matches over later sessions that merely reference the task id', async () => {
mockGetTask.mockResolvedValue({
task: { id: 't_348bfaaf', status: 'done' },
@@ -165,6 +306,27 @@ describe('kanban controller', () => {
const createCtx = ctx({ request: { body: {} } })
await ctrl.create(createCtx)
expect(createCtx.status).toBe(400)
expect(mockCreateTask).not.toHaveBeenCalled()
const invalidCompleteCtx = ctx({ request: { body: { task_ids: ['task-1', 123] } } })
await ctrl.complete(invalidCompleteCtx)
expect(invalidCompleteCtx.status).toBe(400)
expect(mockCompleteTasks).not.toHaveBeenCalled()
const invalidBlockCtx = ctx({ params: { id: 'task-1' }, request: { body: { reason: [] } } })
await ctrl.block(invalidBlockCtx)
expect(invalidBlockCtx.status).toBe(400)
expect(mockBlockTask).not.toHaveBeenCalled()
const invalidUnblockCtx = ctx({ request: { body: [] } })
await ctrl.unblock(invalidUnblockCtx)
expect(invalidUnblockCtx.status).toBe(400)
expect(mockUnblockTasks).not.toHaveBeenCalled()
const invalidAssignCtx = ctx({ params: { id: 'task-1' }, request: { body: { profile: 123 } } })
await ctrl.assign(invalidAssignCtx)
expect(invalidAssignCtx.status).toBe(400)
expect(mockAssignTask).not.toHaveBeenCalled()
const searchCtx = ctx({ query: { task_id: 'task-1' } })
await ctrl.searchSessions(searchCtx)