( dict N)Path) MagicMockpatch)codex_gate_check_maat_fallback_checkrisks suggestionsreturnc|||xsgd}t}d|_tj||_d|_|S)u=Codex CLI가 정상 반환하는 JSON stdout을 모킹한다.rr rr returncodejsondumpsstdoutstderrrr payload mock_procs T/home/jay/workspace/.worktrees/task-2057-dev2/scripts/tests/test_codex_gate_check.py_make_codex_resultrF"(bG IIzz'*II c|||xsgd}t}d|_tj||_d|_|S)u=마아트 폴백이 반환하는 JSON stdout을 모킹한다.r rr rrs r_make_maat_resultr%rrceZdZdZdZdZy)TestCodexPassNoCriticalu3critical severity 리스크가 없으면 gate PASS.c t|dz }t|jddddddddd dg}t|d g }t d | 5t |dgd}dddddusJdy#1swYxYw)Ntask.md# 설계 문서highu성능 저하 가능성severity descriptionmediumu로그 누락 우려lowu 주석 부족u캐시 레이어 추가 검토r subprocess.run return_value src/api.py/home/jay/workspace task_fileaffected_filesworkspace_rootpassTu!critical 없으면 PASS여야 함strr write_textrrrselftmp_pathr/rrresults rtest_codex_pass_no_criticalz3TestCodexPassNoCritical.test_codex_pass_no_critical8s9,-  Y""#45 0I J!2H I ?  'u;[:\] #) < %# ,~4F f~%J'JJ%  s A99Bct|dz }t|jdtgg}t d|5t |gd}dddd d usJy#1swYxYw) u#리스크가 아예 없어도 PASS.r u # 빈 설계r r)r*r-r.Nr2Tr3r7r8r/rr9s rtest_codex_pass_empty_risksz3TestCodexPassNoCritical.test_codex_pass_empty_risksLsv9,-  Y"">2&RR@ #) < %#!4F f~%%%  s A$$A-N)__name__ __module__ __qualname____doc__r:r=rrrr5s=K(&rrceZdZdZdZdZy)TestCodexFailCriticalExistsu;critical severity 리스크가 1개 이상이면 gate FAIL.ct|dz }t|jdddddddg}t|}t d| 5t |d gd }dddd dusJdy#1swYxYw)Nr r!criticalu인증 우회 취약점r#r&u 로그 누락r)r* src/auth.pyr-r.r2Fu%critical 존재 시 FAIL이어야 함r3r6s rtest_codex_fail_single_criticalz;TestCodexFailCriticalExists.test_codex_fail_single_criticalcs9,-  Y""#45$4M N!/ B 'u- #) < %# -4F f~&O(OO&  s A22A;c,t|dz }t|jdddddddg}t|}t d|5t |d d gd }d d d ddusJt d|dD}|dk(sJy #1swY/xYw)ucritical 2개: 여전히 FAIL.r # 설계rFu SQL 인젝션r#u권한 상승 가능r)r*z src/db.pyrGr-r.Nr2Fc32K|]}|ddk(s dyw)r$rFNrB.0rs r zQTestCodexFailCriticalExists.test_codex_fail_multiple_criticals..sW11Z=J;VQWs r)r4rr5rrrsum)r7r8r/rrr9critical_counts r"test_codex_fail_multiple_criticalsz>TestCodexFailCriticalExists.test_codex_fail_multiple_criticalsvs9,-  Y"":.$O D#4J K 'u- #) < %# +];4F f~&&&WwWW"""  s B  BN)r>r?r@rArHrTrBrrrDrD`sEP&#rrDceZdZdZdZdZy)TestCodexTimeoutFallbackToMaatuUsubprocess.run이 TimeoutExpired를 발생시키면 마아트 폴백을 사용한다.ct|dz }t|jddddg}t|dgfd}t d | 5t |d gd }dddddk(sJy#1swYxYw)Nr r!r'u 폴백 경고r#u마아트 제안r(c|r|dn|jdg}td|Drtj|dS)Nrargsc36K|]}dt|vywcodexNr4rNcs rrPzjTestCodexTimeoutFallbackToMaat.test_codex_timeout_fallback_to_maat..side_effect..27c!f$2cmdtimeoutgetany subprocessTimeoutExpiredrYkwargsrd maat_procs r side_effectzWTestCodexTimeoutFallbackToMaat.test_codex_timeout_fallback_to_maat..side_effectsB!$q'vzz&"'=C2c22 //CDD rr)rnzsrc/service.pyr-r.source maat_fallback)r4rr5rrr)r7r8r/ maat_risksrnr9rms @r#test_codex_timeout_fallback_to_maatzBTestCodexTimeoutFallbackToMaat.test_codex_timeout_fallback_to_maats9,-  Y""#45$)IJ %j?Q>RS  # = %# 014F h?222  s A33A<c$t|dz }t|jdtggfd}t d|5t |gd}d d d hd }|j jsJy #1swY/xYw) uP타임아웃 폴백 결과도 유효한 딕셔너리 구조를 가져야 한다.r rJr(c|r|dn|jdg}td|Drtj|dS)NrrYc36K|]}dt|vywr[r]r^s rrPziTestCodexTimeoutFallbackToMaat.test_codex_timeout_result_is_valid..side_effect..r`rarbrcrfrks rrnzVTestCodexTimeoutFallbackToMaat.test_codex_timeout_result_is_valid..side_effectsB!$q'vzz&"'=C2c22 //CDD rr)ror-r.N>r2errorrrpr )r4rr5rrrissubsetkeys)r7r8r/rnr9 required_keysrms @r"test_codex_timeout_result_is_validzATestCodexTimeoutFallbackToMaat.test_codex_timeout_result_is_valids9,-  Y"":.%bb9   # = %#!4F L %%fkkm444  s BBN)r>r?r@rArsr{rBrrrVrVs_305rrVceZdZdZdZdZy)TestCodexApiErrorFallbackToMaatuVCodex CLI가 비정상 종료(returncode != 0)하면 마아트 폴백을 사용한다.ct|dz }t|jdtd_d_d_td_tjddgii_d_fd }td | 5t|d gd }dddddk(sJy#1swYxYw)Nr rJrLr zAPI rate limit exceededr blast_radiuscallerscb|r|dn|jdg}td|DrSS)NrrYc36K|]}dt|vywr[r]r^s rrPzmTestCodexApiErrorFallbackToMaat.test_codex_api_error_fallback_to_maat..side_effect..r`ra)rgrh)rYrlrdast_proc error_procs rrnzZTestCodexApiErrorFallbackToMaat.test_codex_api_error_fallback_to_maat..side_effects4!$q'vzz&"'=C2c22!!Orr)ror,r-r.rprq) r4rr5rrrrrrrr)r7r8r/rnr9rrs @@r%test_codex_api_error_fallback_to_maatzETestCodexApiErrorFallbackToMaat.test_codex_api_error_fallback_to_maats9,-  Y"":.[ !  5 ;**ny"o%FG # = %# ,~4F h?222  s B66B?ct|dz }t|jdt}d|_d|_d|_td|5t|gd }d d d d d k(sJ|d Jy #1swYxYw)ukAPI 오류 시 마아트 폴백으로 전환되며 source='maat_fallback'이어야 한다. 구현체는 returncode != 0이면 즉시 _maat_fallback_check()를 호출한다. 마아트 폴백 결과의 error 필드는 None으로 설정된다(폴백 자체는 성공). 대신 source='maat_fallback'으로 오류 전환을 알린다. r rJrLr zconnection refusedr)r*r-r.Nrprqrw r4rr5rrrrrr)r7r8r/rr9s r%test_codex_api_error_sets_error_fieldzETestCodexApiErrorFallbackToMaat.test_codex_api_error_sets_error_fields9,-  Y"":.[ !  0 #* = %#!4F h?222g&&&  s A>>BN)r>r?r@rArrrBrrr}r}s`3B'rr}cHeZdZdZhdZdZdZdZdZdZ dZ d Z d Z y ) TestOutputJsonFormatuB반환 딕셔너리가 명세된 스키마를 충족해야 한다.>r2rwrrpr cht|dz }t|jdtg}t d|5t |dgd}ddd|j jjs%Jd|j |jz y#1swYXxYw) Nr rJr)r*z src/main.pyr-r.u 누락 키: ) r4rr5rrr REQUIRED_KEYSrxryr<s rtest_all_required_keys_presentz3TestOutputJsonFormat.test_all_required_keys_presents9,-  Y"":.&r* #) < %# -4F !!**6;;=9n\$J\J\_e_j_j_lJlIm;nn9  s B((B1ct|dz }t|jdtg}t d|5t |gd}dddt dtsJy#1swYxYw)Nr rJr)r*r-r.r2)r4rr5rrr isinstanceboolr<s rtest_pass_is_boolz&TestOutputJsonFormat.test_pass_is_boolsv9,-  Y"":.&r* #) < %#!4F &.$///  s A..A7ct|dz }t|jdtdddg}t d|5t |dgd }dddt d tsJy#1swYxYw) Nr rJr"u경고r#r)r*zsrc/x.pyr-r.rr4rr5rrrrlistr<s rtest_risks_is_listz'TestOutputJsonFormat.test_risks_is_list-s9,-  Y"":.&VH(U'VW #) < %# *|4F &/4000  s A33A<ct|dz }t|jdtgddg}t d|5t |gd }dddt d tsJy#1swYxYw) Nr rJu제안 1u제안 2r(r)r*r-r.r rr<s rtest_suggestions_is_listz-TestOutputJsonFormat.test_suggestions_is_list<s~9,-  Y"":.&r J7OP #) < %#!4F &/666  s A22A;ct|dz }t|jdtg}t d|5t |gd}ddddd k(sJy#1swYxYw) u2Codex 정상 응답 시 source는 codex_companion.r rJr)r*r-r.Nrpcodex_companionr3r<s rtest_source_is_codex_on_successz4TestOutputJsonFormat.test_source_is_codex_on_successKsv9,-  Y"":.&r* #) < %#!4F h#4444  s A##A,ct|dz }t|jdtg}t d|5t |gd}ddddJy#1swYxYw) u정상 응답 시 error=None.r rJr)r*r-r.Nrwr3r<s rtest_error_is_none_on_successz2TestOutputJsonFormat.test_error_is_none_on_success[sr9,-  Y"":.&r* #) < %#!4F g&&&  s A  A)c t|dz }t|jdddddddg}t|}t d| 5t |d gd }d d d dD]}d|vsJdd|vrJdy #1swY*xYw)uB리스크 항목은 severity, description 키를 가져야 한다.r rJr"u고위험 항목r#r'u저위험 항목r)r*zsrc/y.pyr-r.Nrr$u"risk 항목에 severity 키 없음r%u%risk 항목에 description 키 없음r3)r7r8r/rrr9items r+test_risk_item_has_severity_and_descriptionz@TestOutputJsonFormat.test_risk_item_has_severity_and_descriptionks9,-  Y"":. 0B C/A B 'u- #) < %# *|4F 7O RD% K'K K% D( Q*Q Q( R  s BB c4t|dz }t|jdhd}ddddddd d dd d dg}t|}t d |5t |dgd}ddddD]}|d|vr Jd|dy#1swY(xYw)u=severity는 critical|high|medium|low 중 하나여야 한다.r rJ>r'r"r&rFrFu치명r#r"u높음r&u중간r'u낮음r)r*zsrc/z.pyr-r.Nrr$u"허용되지 않는 severity 값: r3)r7r8r/valid_severitiesrrr9rs rtest_severity_values_are_validz3TestOutputJsonFormat.test_severity_values_are_valids9,-  Y"":.@#H = 9!( ;x 8   'u- #) < %# *|4F 7O qD #'77 p;]^bcm^n]o9p p7 q  s BBN) r>r?r@rArrrrrrrrrrBrrrr s5LGM o 0 1 75 ' R,qrrcDeZdZdZhdZd dZdZdZdZdZ d Z d Z y) "TestMaatFallbackReturnsValidResultuV마아트 폴백 경로에서도 완전한 result 딕셔너리를 반환해야 한다.>r2rwrrpr Nc t|dz }t|jdt}d|_d|_d|_td|5tdtd |D ||xsgd d d 5t|gd cd d d cd d d S#1swYnxYw d d d y #1swYy xYw)uLCodex 오류를 유발하여 마아트 폴백을 강제하는 헬퍼. 마아트 폴백은 파일 존재 여부를 직접 검사하므로 affected_files는 실제 존재하는 파일만 넘기거나 빈 목록을 사용한다. task_file은 tmp_path 안에 생성하여 실제로 존재하게 한다. r rJrLr zcodex unavailabler)r*z%codex_gate_check._maat_fallback_checkc3,K|] }|ddk(yw)r$rFNrBrMs rrPzJTestMaatFallbackReturnsValidResult._force_maat_fallback..s#TAAjMZ$?#TsrqN)r2rr rprwr-r.) r4rr5rrrrrrhr)r7r8rrmaat_suggestionsr/rs r_force_maat_fallbackz7TestMaatFallbackReturnsValidResult._force_maat_fallbacks9,-  Y"":.[ !  /  #* = 7 ##T#T TT'#3#9r-!   ('#%#8          s$)B5>B B5B( $B55B>c|j|g}|jj|jsJy)Nrr)rrrxryr7r8r9s r(test_maat_fallback_has_all_required_keyszKTestMaatFallbackReturnsValidResult.test_maat_fallback_has_all_required_keyss7**8*C!!**6;;=999rc>|j|g}|ddk(sJy)Nrrprqrrs r*test_maat_fallback_source_is_maat_fallbackzMTestMaatFallbackReturnsValidResult.test_maat_fallback_source_is_maat_fallbacks***8*Ch?222rcHdddg}|j||}|ddusJy)u2마아트 폴백에서도 critical 없으면 PASS.r"u마아트 고위험r#rr2TNrr7r8rrr9s r-test_maat_fallback_pass_true_when_no_criticalzPTestMaatFallbackReturnsValidResult.test_maat_fallback_pass_true_when_no_criticals7#):OPQ **8 *Kf~%%%rcHdddg}|j||}|ddusJy)u/마아트 폴백에서 critical 있으면 FAIL.rFu마아트 치명 오류r#rr2FNrrs r+test_maat_fallback_pass_false_when_criticalzNTestMaatFallbackReturnsValidResult.test_maat_fallback_pass_false_when_criticals7#->WXY **8 *Kf~&&&rcdddddddg}|j||}t|ddk(sJy ) uJ마아트 폴백 리스크 목록이 결과에 그대로 담겨야 한다.r&u마아트 중간 위험r#r'u마아트 낮은 위험rrrQNrlenrs r"test_maat_fallback_risks_preservedzETestMaatFallbackReturnsValidResult.test_maat_fallback_risks_preservedsK"2K L/H I **8 *K6'?#q(((rc^g}ddg}|j|||}t|ddk(sJy)u=마아트 폴백 제안 목록이 결과에 담겨야 한다.u마아트 제안 Au마아트 제안 B)rrrr rQNr)r7r8rrrr9s r(test_maat_fallback_suggestions_preservedzKTestMaatFallbackReturnsValidResult.test_maat_fallback_suggestions_preservedsC 02FG**8 ]m*n6-()Q...rN) r>r?r@rArrrrrrrrrBrrrrs.`GM@:3& ' )/rrceZdZdZdZdZy)TestCallersContextu?_get_callers_context가 프롬프트에 통합되는지 검증.c t|dz }t|jd|dz }|j|dz jdt d_t jddd gd d gd gd dd_d_ tgg ddig fd}td|5t|dgt|}dddddusJtdDsJy#1swY'xYw)uIAST callers 컨텍스트가 Codex 프롬프트에 포함되어야 한다.r r!scriptsast_dependency_map.py# dummyrr,z server.py:42z routes.py:15 server.pyz routes.pyz test_api.py)rdirect_importers test_filestotal_affected changed_filerr r(ncdxxdz cc<|r|dn|jdg}td|DrS|jdd}j|S)NrrLrrYc36K|]}dt|vyw)ast_dependency_mapNr]r^s rrPzbTestCallersContext.test_callers_context_included_in_prompt..side_effect..s?a'3q61?rainputr )rgrhappend)rYrlrd stdin_input ast_result call_countcaptured_inputs codex_results rrnzOTestCallersContext.test_callers_context_included_in_prompt..side_effect sa sOq O!$q'vzz&"'=C?3??!! **Wb1K  " "; / rr)ror.Nr2Tc36K|]}dt|vyw) 호출됨Nr])rNinps rrPzMTestCallersContext.test_callers_context_included_in_prompt..!sFs;#c(*Fra)r4rr5mkdirrrrrrrrrrrh) r7r8r/ scripts_dirrnr9rrrrs @@@@r'test_callers_context_included_in_promptz:TestCallersContext.test_callers_context_included_in_prompts&9,-  Y""#45*  . .::9E[ !  JJ , .?)4k(B#0/&' !    *""= 1X  # = %# ,~"8}F f~%%%FoFFFF  s =C<<Dct|dz }t|jdtgg}t d|5t |dgd}d d d d vsJd |vsJy #1swYxYw) uQAST 스크립트 실패 시에도 codex_gate_check는 정상 동작해야 한다.r r!r(r)r*znonexistent.py/tmp/nonexistentr.Nr2rpr3)r7r8r/rr9s r,test_callers_context_fallback_on_ast_failurez?TestCallersContext.test_callers_context_fallback_on_ast_failure#s9,-  Y""#45*""= #, ? %# 011F 6!!!  s A((A1N)r>r?r@rArrrBrrrrsI4Gl"rr_get_callers_contextc"eZdZdZdZdZdZy)TestGetCallersContextu4_get_callers_context 헬퍼 함수 단위 테스트.c,tdgd}|dk(sJy)u3AST 스크립트가 없으면 빈 문자열 반환.r,rr Nr)r7r9s r%test_returns_empty_when_no_ast_scriptz;TestGetCallersContext.test_returns_empty_when_no_ast_script@s%|n6HI||rc|dz }|j|dz jd|dz }|jdtjddgdggdd d }t }d |_||_d |_td |5tt|gt|}ddddvsJd|vsJy#1swYxYw)u5AST 호출 성공 시 호출 관계 문자열 반환.rrrapi.pyzdef get_data(): pass rz server.py:10rQ)rrrrrrr r)r*Nr) rr5rrrrrrrrr4)r7r8rapi_file ast_outputrr9s rtest_returns_context_on_successz5TestGetCallersContext.test_returns_context_on_successEs*  . .::9Eh&9:ZZ ()4 ./"$&' !   K  %   #) < J)3x=/3x=IF Jf$$$'''  J Js CC c|dz }|j|dz jdt}d|_d|_d|_t d|5td gt|}d d d dk(sJy #1swYxYw) u+AST 호출 실패 시 빈 문자열 반환.rrrrLr rwr)r*rN) rr5rrrrrrr4)r7r8rrr9s rtest_returns_empty_on_ast_errorz5TestGetCallersContext.test_returns_empty_on_ast_errorhs*  . .::9EK   "  #) < E)8*c(mDF E|| E Es A==BN)r>r?r@rArrrrBrrrr=s> !(Frrc"eZdZdZdZdZdZy)TestCodexCascadeuC3단계 캐스케이드(companion → exec → maat) 동작 검증.c"t|dz }t|jdtg}t d|5t dd5t |gd}d d d d d d d d k(sJy #1swYxYw#1swY xYw) u4codex-companion 성공 시 source='codex_companion'.r rJr)r*zcodex_gate_check.os.path.isfileTr-r.Nrprr3r<s r5test_companion_success_returns_codex_companion_sourcezFTestCodexCascade.test_companion_success_returns_codex_companion_sources9,-  Y"":.&r* #) < 8tL )'K`   h#4444     s$BA9B9B >BBct|dz }t|jdt}d|_d|_d|_td|5t|gd }d d d d d k(sJy #1swYxYw) u3companion 실패 시 마아트 폴백으로 전환.r rJrLr zcompanion errorr)r*r-r.Nrprqrr7r8r/ fail_procr9s r&test_companion_fail_falls_back_to_maatz7TestCodexCascade.test_companion_fail_falls_back_to_maats9,-  Y"":.K   ,  #) < %#BG\F h?222    A77Bct|dz }t|jdt}d|_d|_d|_td|5t|gd }d d d d d k(sJy #1swYxYw) u.companion, exec 모두 실패 시 maat 폴백.r rJrLr rwr)r*r-r.Nrprqrrs r*test_both_codex_fail_returns_maat_fallbackz;TestCodexCascade.test_both_codex_fail_returns_maat_fallbacks9,-  Y"":.K   "  #) < %#BG\F h?222   rN)r>r?r@rArrrrBrrrr|sM 53 3rrc"eZdZdZdZdZdZy)TestMaatFallbackEnhancedu&마아트 폴백 강화 기능 검증.ct|dz }t|jdg}tdD]9}|d|dz }|jd||j t|;t ||t|}|dDcgc]}|dd k(s d |d vs|}}t |d k\sJy cc}w)u7affected_files 6개 이상이면 high 리스크 경고.r r!filez.pyz# file rr$r"u 변경 범위r%rLN)r4rr5rangerrr) r7r8r/filesifr9rO high_riskss rtest_large_scope_warningz1TestMaatFallbackEnhanced.test_large_scope_warnings9,-  Y""#45q !AT!C=(A LL71# ' LLQ  ! &iH F!'tAAjMV4KP_cdercsPsat t:!###us B<B<%B<ct|dz }t|jdt|gt|}|dDcgc]}|ddk(s d|dvs|}}t |dk\sJy cc}w) uAtask_file에 보안 민감 키워드 포함 시 medium 리스크.r u@# 인증 모듈 변경 보안 취약점 수정 및 API키 갱신rr$r&u보안 민감 키워드r%rLNr4rr5rrr7r8r/r9rO medium_riskss rtest_security_keyword_detectionz8TestMaatFallbackEnhanced.test_security_keyword_detections9,-  Y""#fg%iS]C#)'?Caa mx6OTmqrtArBUBC C< A%%%Cs A3A3A3ct|dz }t|jdt|gt|}|dDcgc] }|ddk(s |}}t |dk(sJycc}w)uH보안 키워드 없는 일반 task에서는 medium 리스크 미생성.r u$# 로깅 개선 로그 포맷 변경rr$r&rNrrs r$test_no_false_positive_on_clean_taskz=TestMaatFallbackEnhanced.test_no_false_positive_on_clean_tasksq9,-  Y""#JK%iS]C#)'?Paa mx6OP P< A%%%Qs  A+A+N)r>r?r@rArrrrBrrrrs0 $&&rrr)rArrisyspathlibr unittest.mockrrpathinsertr4__file__parentrrrrrrrDrVr}rrrrrrrrBrrrs   *3tH~,,3345C d    T t y  %&%&V*#*#`0505l>'>'HMqMqfG/G/ZJ"J"`299~-3-3f"&"&r