feat(agent-runtime): 补全测试替身编排闭环

common/tests.py

@@ -0,0 +1,44 @@
+"""公共日志与请求上下文测试。"""
+
+from django.test import SimpleTestCase
+from django.urls import reverse
+
+from .logging import request_id_context, sanitize_summary
+
+
+class LoggingTests(SimpleTestCase):
+    """验证敏感摘要递归脱敏，且统计字段不会被误删。"""
+
+    def test_nested_sensitive_values_are_masked(self):
+        result = sanitize_summary(
+            {
+                "access_token": "secret",
+                "nested": {"password": "secret", "token_count": 12},
+                "items": [{"api-key": "secret"}],
+            }
+        )
+        self.assertEqual(result["access_token"], "***")
+        self.assertEqual(result["nested"]["password"], "***")
+        self.assertEqual(result["nested"]["token_count"], 12)
+        self.assertEqual(result["items"][0]["api-key"], "***")
+
+
+class RequestContextMiddlewareTests(SimpleTestCase):
+    """验证入站关联标识的复用、非法值替换和请求结束后的上下文清理。"""
+
+    def test_valid_request_id_is_returned(self):
+        response = self.client.get(
+            reverse("accounts:login"),
+            headers={"X-Request-ID": "request-123"},
+        )
+        self.assertEqual(response.headers["X-Request-ID"], "request-123")
+        self.assertEqual(request_id_context.get(), "-")
+
+    def test_invalid_request_id_is_replaced(self):
+        response = self.client.get(
+            reverse("accounts:login"),
+            headers={"X-Request-ID": "invalid value"},
+        )
+        generated = response.headers["X-Request-ID"]
+        self.assertNotEqual(generated, "invalid value")
+        self.assertEqual(len(generated), 32)