Files
hermes-webui/tests/test_4167_sidebar_payload_and_scope.py

53 lines
2.1 KiB
Python

"""Regression tests for #4167 sidebar payload and scope guards."""
import re
import sys
from pathlib import Path
sys.path.insert(0, str(Path(__file__).resolve().parent.parent))
_ROOT = Path(__file__).resolve().parent.parent
def test_sidebar_allowlist_preserves_read_only_and_gateway_routing():
import api.routes as routes
allow = routes._SIDEBAR_SESSION_RESPONSE_FIELDS
assert "read_only" in allow, "read_only dropped -> read-only sessions render writable"
assert "is_read_only" in allow, "is_read_only dropped -> read-only detection misses"
assert "gateway_routing" in allow, "gateway_routing dropped -> sidebar model label degrades"
def test_sidebar_response_item_preserves_read_only_flag():
"""_sidebar_session_response_item() must carry read_only through."""
import api.routes as routes
fn = getattr(routes, "_sidebar_session_response_item", None)
if fn is None:
assert "read_only" in routes._SIDEBAR_SESSION_RESPONSE_FIELDS
return
row = fn({
"session_id": "s1",
"title": "t",
"read_only": True,
"gateway_routing": {"provider": "anthropic", "model": "claude"},
"not_allowed_field": "x",
})
assert row.get("read_only") is True
assert row.get("gateway_routing") == {"provider": "anthropic", "model": "claude"}
assert "not_allowed_field" not in row
def test_failed_refresh_clears_cache_on_profile_scope_change():
"""The catch path must reject cached rows from a mismatched sidebar scope."""
src = (_ROOT / "static" / "sessions.js").read_text(encoding="utf-8")
assert "_allSessionsScope" in src, "cache is not scope-tagged"
assert re.search(r"_scopeMatches", src), "catch path does not gate fallback on scope match"
assert re.search(r"_allSessions\s*=\s*\[\]", src), "catch path does not clear stale rows on scope mismatch"
assert "excludeHidden: _sessionListExcludeHiddenEnabled()" in src, (
"scope tagging must include the hidden-filter query mode"
)
assert "_allSessionsScope.excludeHidden === _curScope.excludeHidden" in src, (
"catch path must reject cached rows fetched under the wrong hidden-filter mode"
)