Files
hermes-webui/tests/test_regressions.py
T
nesquena-hermes eaf7d1e9ab gate-fix #5466: stamp anchor attrs on incremental node + teardown on all terminal paths
Codex gate findings (2 SILENT, both fixed):
- ui.js: incremental prose node now flows through the shared row-decoration
  block (data-anchor-scene-row/-row-id/-row-role/-source-event-type) instead of
  returning early, so live incremental rows keep the identity attrs the scene
  reconciler matches on.
- messages.js: _cancelThrottledSnapshotTimer() + _clearAnchorProseIncrementalNode()
  now run on apperror, cancel, _handleStreamError, and _restoreSettledSession
  terminal paths (previously only fallback/done/stream_end) — closes the
  snapshot-timer/anchor-cache/window-global teardown gap.
- test: extend test_messages_js_stream_perf_cleanup_lifecycle to pin teardown on
  all four additional terminal paths.

CORE equivalence (Codex flagged smd != renderMd): reconciled — Opus's 1498-frame
harness against real smd.min.js proves incremental-smd == whole-smd byte-identical;
live-smd-vs-renderMd difference is the already-shipped fidelity model (main live
body streams smd, settles renderMd), and the incremental path is gated on !settled
so settled DOM still comes from renderMd. Not a regression.
2026-07-03 21:24:08 +00:00

1280 lines
66 KiB
Python

"""
Regression tests -- one test per bug that was introduced and fixed.
These tests exist specifically to prevent those bugs from silently returning.
Each test is tagged with the sprint/commit where the bug was found and fixed.
"""
import json
import os
import pathlib
import re
import time
import urllib.error
import urllib.request
import urllib.parse
REPO_ROOT = pathlib.Path(__file__).parent.parent.resolve()
from tests._pytest_port import BASE
def get(path):
with urllib.request.urlopen(BASE + path, timeout=10) as r:
return json.loads(r.read()), r.status
def get_raw(path):
with urllib.request.urlopen(BASE + path, timeout=10) as r:
return r.read(), r.headers.get("Content-Type",""), r.status
def post(path, body=None):
data = json.dumps(body or {}).encode()
req = urllib.request.Request(
BASE + path, data=data, headers={"Content-Type": "application/json"}
)
try:
with urllib.request.urlopen(req, timeout=10) as r:
return json.loads(r.read()), r.status
except urllib.error.HTTPError as e:
return json.loads(e.read()), e.code
def make_session(created_list):
d, _ = post("/api/session/new", {})
sid = d["session"]["session_id"]
created_list.append(sid)
return sid
def _make_session_visible(sid):
from api.models import Session
from tests.conftest import TEST_WORKSPACE
session = Session(
session_id=sid,
title="regression-test-delete-R8",
workspace=str(TEST_WORKSPACE),
model="test",
created_at=time.time(),
updated_at=time.time(),
profile="default",
messages=[{"role": "user", "content": "visible row", "timestamp": time.time()}],
tool_calls=[],
)
session.save(touch_updated_at=False)
def _make_auth_json_with_credential_pool(
provider_id: str, pool_entries: list[dict], tmp_dir: pathlib.Path
) -> pathlib.Path:
"""Write an auth.json with only credential_pool entries for provider_id."""
store = {"providers": {}, "credential_pool": {provider_id: pool_entries}}
auth_path = tmp_dir / "auth.json"
auth_path.write_text(json.dumps(store), encoding="utf-8")
return auth_path
# ── R1: uuid not imported in server.py (Sprint 10 split regression) ──────────
def test_chat_start_returns_stream_id(cleanup_test_sessions):
"""R1: chat/start must return stream_id -- catches missing uuid import.
When uuid was missing, this returned 500 (NameError).
"""
sid = make_session(cleanup_test_sessions)
data, status = post("/api/chat/start", {
"session_id": sid,
"message": "ping",
"model": "openai/gpt-5.4-mini",
})
# Must return 200 with a stream_id -- not 500
assert status == 200, f"chat/start failed with {status}: {data}"
assert "stream_id" in data, "stream_id missing from chat/start response"
assert len(data["stream_id"]) > 8, "stream_id looks invalid"
post("/api/session/delete", {"session_id": sid})
cleanup_test_sessions.clear()
# ── R2: AIAgent not imported in api/streaming.py (Sprint 10 split regression) ─
def test_chat_stream_opens_successfully(cleanup_test_sessions):
"""R2: After chat/start, GET /api/chat/stream must return 200 (SSE opens).
When AIAgent was missing, the thread crashed immediately, popped STREAMS,
and the SSE GET returned 404.
"""
sid = make_session(cleanup_test_sessions)
data, status = post("/api/chat/start", {
"session_id": sid,
"message": "say: hello",
"model": "openai/gpt-5.4-mini",
})
assert status == 200, f"chat/start failed: {data}"
stream_id = data["stream_id"]
# Open the SSE stream -- must return 200, not 404
# We only check headers (don't read the full stream body)
req = urllib.request.Request(BASE + f"/api/chat/stream?stream_id={stream_id}")
try:
r = urllib.request.urlopen(req, timeout=3)
assert r.status == 200, f"SSE stream returned {r.status} (expected 200)"
ct = r.headers.get("Content-Type", "")
assert "text/event-stream" in ct, f"Wrong Content-Type: {ct}"
r.close()
except urllib.error.HTTPError as e:
assert False, f"SSE stream returned {e.code} -- AIAgent may not be imported"
except Exception:
pass # timeout or connection close after brief read is fine
post("/api/session/delete", {"session_id": sid})
cleanup_test_sessions.clear()
# ── R3: Session.__init__ missing tool_calls param (Sprint 10 split regression) ─
def test_session_with_tool_calls_in_json_loads_ok(cleanup_test_sessions):
"""R3: Sessions that have tool_calls in their JSON must load without 500.
When tool_calls=None was missing from Session.__init__, loading such sessions
threw TypeError: unexpected keyword argument.
"""
sid = make_session(cleanup_test_sessions)
# Manually inject tool_calls into the session's JSON file
from tests._pytest_port import TEST_STATE_DIR
sessions_dir = pathlib.Path(os.environ.get("HERMES_WEBUI_TEST_STATE_DIR", str(TEST_STATE_DIR))) / "sessions"
session_file = sessions_dir / f"{sid}.json"
if session_file.exists():
d = json.loads(session_file.read_text())
d["tool_calls"] = [
{"name": "terminal", "snippet": "test output", "tid": "test_tid_001", "assistant_msg_idx": 1}
]
session_file.write_text(json.dumps(d))
# Loading the session must return 200, not 500
data, status = get(f"/api/session?session_id={urllib.parse.quote(sid)}")
assert status == 200, f"Session with tool_calls returned {status}: {data}"
assert data["session"]["session_id"] == sid
post("/api/session/delete", {"session_id": sid})
cleanup_test_sessions.clear()
# ── R4: approval check not imported in streaming.py (Sprint 10 split regression) ─
def test_streaming_py_imports_has_pending(cleanup_test_sessions):
"""R4: api/streaming.py must import an approval-check function.
When missing, the approval check mid-stream caused NameError.
"""
src = (REPO_ROOT / "api/streaming.py").read_text()
assert "has_blocking_approval" in src, "has_blocking_approval not found in api/streaming.py"
assert "import" in src and "has_blocking_approval" in src, \
"has_blocking_approval must be imported in api/streaming.py"
def test_aiagent_imported_in_streaming(cleanup_test_sessions):
"""R2b: api/streaming.py must import AIAgent.
When missing, the streaming thread crashed immediately after being spawned.
"""
src = (REPO_ROOT / "api/streaming.py").read_text()
assert "AIAgent" in src, "AIAgent not referenced in api/streaming.py"
assert "from run_agent import AIAgent" in src or "import AIAgent" in src, \
"AIAgent must be imported in api/streaming.py"
# ── R5: SSE loop did not break on cancel event (Sprint 10 bug) ───────────────
def test_cancel_nonexistent_stream_returns_not_cancelled(cleanup_test_sessions):
"""R5a: Cancel endpoint works and returns cancelled:false for unknown stream."""
data, status = get("/api/chat/cancel?stream_id=nonexistent_test_xyz")
assert status == 200
assert data["ok"] is True
assert data["cancelled"] is False
def test_server_py_sse_loop_breaks_on_cancel(cleanup_test_sessions):
"""R5b: SSE loop must include 'cancel' in the break condition.
When missing, the connection hung after the cancel event was processed.
Sprint 11: logic moved from server.py to api/routes.py -- check both.
"""
import re
# Check server.py first, then api/routes.py (Sprint 11 extracted routes)
src = (REPO_ROOT / "server.py").read_text()
routes_src = (REPO_ROOT / "api" / "routes.py").read_text() if (REPO_ROOT / "api" / "routes.py").exists() else ""
combined = src + routes_src
m = re.search(r"if event in \([^)]+\):\s*break", combined)
assert m, "SSE break condition not found in server.py or api/routes.py"
assert "cancel" in m.group(), \
f"'cancel' missing from SSE break condition: {m.group()}"
# ── R6: Test cron isolation (Sprint 10) ──────────────────────────────────────
def test_real_jobs_json_not_polluted_by_tests(cleanup_test_sessions):
"""R6: Test runs must not write to the real ~/.hermes/cron/jobs.json.
When HERMES_HOME isolation was missing, every test run added test-job-* entries.
"""
real_jobs_path = pathlib.Path.home() / ".hermes" / "cron" / "jobs.json"
if not real_jobs_path.exists():
return # no jobs file at all -- fine
jobs = json.loads(real_jobs_path.read_text())
if isinstance(jobs, dict):
jobs = jobs.get("jobs", [])
test_jobs = [j for j in jobs if j.get("name", "").startswith("test-job-")]
assert len(test_jobs) == 0, \
f"Real jobs.json contains {len(test_jobs)} test-job-* entries: " \
f"{[j['name'] for j in test_jobs]}"
# ── General: api modules all importable ──────────────────────────────────────
def test_all_api_modules_importable(cleanup_test_sessions):
"""All api/ modules must be importable without NameError or ImportError.
Catches missing imports introduced during future module splits.
"""
import ast, pathlib
api_dir = REPO_ROOT / "api"
for module_file in api_dir.glob("*.py"):
src = module_file.read_text()
try:
ast.parse(src)
except SyntaxError as e:
assert False, f"{module_file.name} has syntax error: {e}"
def test_server_py_importable(cleanup_test_sessions):
"""server.py must parse without syntax errors after any split."""
import ast, pathlib
src = (REPO_ROOT / "server.py").read_text()
try:
ast.parse(src)
except SyntaxError as e:
assert False, f"server.py has syntax error: {e}"
# ── R7: Cross-session busy state bleed ───────────────────────────────────────
def test_loadSession_resets_busy_state_for_idle_session(cleanup_test_sessions):
"""R7: sessions.js loadSession for a non-inflight session must reset S.busy to false.
When missing, switching from a busy session to an idle one left the Send button
disabled, showed the wrong activity bar, and pointed Cancel at the wrong stream.
"""
src = (REPO_ROOT / "static/sessions.js").read_text()
# The fix adds explicit S.busy=false in the non-inflight else branch
assert "S.busy=false;" in src, "sessions.js loadSession must set S.busy=false when loading a non-inflight session"
# btnSend state must be refreshed via updateSendBtn
assert "updateSendBtn()" in src, "sessions.js loadSession must call updateSendBtn for non-inflight sessions"
def test_done_handler_guards_setbusy_with_inflight_check(cleanup_test_sessions):
"""R7b: messages.js done/error handlers must not call setBusy(false) if the
currently viewed session is itself still in-flight.
When missing, finishing session A while viewing in-flight session B would
disable B's Send button.
"""
src = (REPO_ROOT / "static/messages.js").read_text()
# The fix wraps setBusy(false) in an active-pane ownership guard. Newer
# implementations may centralize the guard in a helper rather than repeat the
# raw INFLIGHT expression at every terminal event site.
assert (
"INFLIGHT[S.session.session_id]" in src
or "function _setActivePaneIdleIfOwner" in src
), "messages.js must guard setBusy(false) for the current session"
def test_refresh_handler_does_not_drop_tool_messages_needed_by_todos(cleanup_test_sessions):
"""Todo panel state must survive session reload/refresh.
The UI can hide tool-role messages from the visible transcript, but it must not
destroy the raw session messages because loadTodos reconstructs state from the
latest todo tool output.
"""
sessions_src = (REPO_ROOT / "static/sessions.js").read_text()
ui_src = (REPO_ROOT / "static/ui.js").read_text()
panels_src = (REPO_ROOT / "static/panels.js").read_text()
assert "data.session.messages=(data.session.messages||[]).filter(" not in sessions_src, \
"sessions.js must not overwrite raw session.messages when filtering transcript display"
assert "S.messages = (data.session.messages || []).filter(" not in ui_src, \
"ui.js refreshSession must not rebuild S.messages by discarding tool messages from the raw session payload"
assert "const sourceMessages = (S.session && Array.isArray(S.session.messages) && S.session.messages.length) ? S.session.messages : S.messages;" in panels_src, \
"loadTodos must prefer raw S.session.messages so todo state survives reloads"
def test_cancel_button_not_cleared_across_sessions(cleanup_test_sessions):
"""R7c: The Cancel button and activeStreamId must only be cleared when the
done/error event belongs to the currently viewed session.
"""
src = (REPO_ROOT / "static/messages.js").read_text()
# Both clear operations must be inside the activeSid === S.session guard
# We check for the pattern added by the fix
assert "S.session.session_id===activeSid" in src, "messages.js must guard activeStreamId/Cancel clearing with session identity check"
# ── R8: Session delete does not invalidate index (ghost sessions) ─────────────
def test_deleted_session_does_not_appear_in_list(cleanup_test_sessions):
"""R8: After deleting a session, it must not appear in /api/sessions.
When _index.json was not invalidated on delete, the session reappeared
in the list even after the JSON file was removed.
"""
# Create a session with a title so it shows in the list
d, _ = post("/api/session/new", {})
sid = d["session"]["session_id"]
post("/api/session/rename", {"session_id": sid, "title": "regression-test-delete-R8"})
_make_session_visible(sid)
post("/api/session/rename", {"session_id": sid, "title": "regression-test-delete-R8"})
# Verify it appears
sessions, _ = get("/api/sessions")
ids_before = [s["session_id"] for s in sessions["sessions"]]
assert sid in ids_before, "Session must appear in list before delete"
# Delete it
result, status = post("/api/session/delete", {"session_id": sid})
assert status == 200 and result.get("ok") is True
# Verify it no longer appears -- even after a second fetch (index rebuild)
sessions2, _ = get("/api/sessions")
ids_after = [s["session_id"] for s in sessions2["sessions"]]
assert sid not in ids_after, f"Deleted session {sid} still appears in list -- index not invalidated on delete"
def test_server_delete_prunes_session_index(cleanup_test_sessions):
"""session/delete should prune the deleted row without discarding the index."""
src = (REPO_ROOT / "server.py").read_text()
routes_src = (REPO_ROOT / "api" / "routes.py").read_text() if (REPO_ROOT / "api" / "routes.py").exists() else ""
# Find the delete handler in either file
for label, text in [("server.py", src), ("api/routes.py", routes_src)]:
# Accept both single-quote and double-quote style (formatting varies by contributor)
delete_idx = max(
text.find("if parsed.path == '/api/session/delete':"),
text.find('if parsed.path == "/api/session/delete":'),
)
if delete_idx >= 0:
delete_block = text[delete_idx:delete_idx+2400]
assert "prune_session_from_index(sid)" in delete_block, \
f"{label} session/delete must prune SESSION_INDEX_FILE"
return
assert False, "session/delete handler not found in server.py or api/routes.py"
def test_server_delete_removes_session_bak_snapshot(cleanup_test_sessions):
"""session/delete must remove sidecar backups so deleted sessions stay deleted."""
routes_src = (REPO_ROOT / "api" / "routes.py").read_text()
delete_idx = max(
routes_src.find("if parsed.path == '/api/session/delete':"),
routes_src.find('if parsed.path == "/api/session/delete":'),
)
assert delete_idx >= 0, "session/delete handler not found in api/routes.py"
delete_block = routes_src[delete_idx:delete_idx+2400]
assert "with_suffix('.json.bak').unlink" in delete_block or 'with_suffix(".json.bak").unlink' in delete_block, \
"session/delete must unlink <sid>.json.bak to avoid later orphan-backup recovery"
# ── R9: Token/tool SSE events write to wrong session after switch ─────────────
def test_token_handler_guards_session_id(cleanup_test_sessions):
"""R9a: The SSE token event handler must check activeSid before writing to DOM.
When missing, tokens from session A would render into session B's message area
if the user switched sessions mid-stream.
Sprint 12: handler moved into _wireSSE(source), so search source.addEventListener.
"""
src = (REPO_ROOT / "static/messages.js").read_text()
# Sprint 12 refactored es.addEventListener -> source.addEventListener inside _wireSSE()
token_idx = src.find("source.addEventListener('token'")
if token_idx < 0:
token_idx = src.find("es.addEventListener('token'")
assert token_idx >= 0, "token event handler not found"
token_block = src[token_idx:token_idx+300]
assert "activeSid" in token_block, \
"token handler must check activeSid before writing to DOM"
assert "S.session.session_id!==activeSid" in token_block or \
"S.session.session_id===activeSid" in token_block, \
"token handler must compare current session to activeSid"
def test_tool_handler_guards_session_id(cleanup_test_sessions):
"""R9b: The SSE tool event handler must check activeSid before writing to DOM.
When missing, tool cards from session A would render into session B's message area.
Sprint 12: handler moved into _wireSSE(source), so search source.addEventListener.
"""
src = (REPO_ROOT / "static/messages.js").read_text()
tool_idx = src.find("source.addEventListener('tool'")
if tool_idx < 0:
tool_idx = src.find("es.addEventListener('tool'")
assert tool_idx >= 0, "tool event handler not found"
tool_block = src[tool_idx:tool_idx+400]
assert "activeSid" in tool_block, \
"tool handler must check activeSid before writing to DOM"
# ── R10: respondApproval uses wrong session_id after switch (multi-session) ─
def test_respond_approval_uses_approval_session_id(cleanup_test_sessions):
"""R10: respondApproval must use the session_id of the session that triggered
the approval, not S.session.session_id (which may be a different session
if the user switched while approval was pending).
"""
src = (REPO_ROOT / "static/messages.js").read_text()
# The fix introduces _approvalSessionId to track the correct session
assert "_approvalSessionId" in src, "messages.js must use _approvalSessionId in respondApproval"
# respondApproval must use _approvalSessionId, not S.session.session_id directly
idx = src.find("async function respondApproval(")
assert idx >= 0, "respondApproval not found"
fn_body = src[idx:idx+300]
assert "_approvalSessionId" in fn_body, "respondApproval must read _approvalSessionId, not S.session.session_id"
# ── R11: Tool progress must not use shared status chrome ──────────────────
def test_tool_status_only_shown_for_current_session(cleanup_test_sessions):
"""R11: Tool progress should not drive the global status bar or composer
status. Live tool cards in the current conversation are the authoritative
progress UI, which avoids cross-session status leakage entirely.
"""
src = (REPO_ROOT / "static/messages.js").read_text()
# Sprint 12: handler moved into _wireSSE(source)
tool_idx = src.find("source.addEventListener('tool'")
if tool_idx < 0:
tool_idx = src.find("es.addEventListener('tool'")
assert tool_idx >= 0
tool_block = src[tool_idx:tool_idx+400]
assert "setStatus(" not in tool_block, \
"tool handler should not use the global activity/status bar"
assert "setComposerStatus(" not in tool_block, \
"tool handler should not use composer status for tool progress"
# ── R12: Live tool cards lost on switch-away and switch-back ──────────────
def test_loadSession_inflight_restores_live_tool_cards(cleanup_test_sessions):
"""R12: When switching back to an in-flight session, live tool cards in
#liveToolCards must be restored from S.toolCalls.
When missing, tool cards disappeared on switch-away even though the session
was still processing.
"""
src = (REPO_ROOT / "static/sessions.js").read_text()
# INFLIGHT branch must call appendLiveToolCard
# Anchor on the Phase-2 INFLIGHT restore branch (the later occurrence); #3899
# added an earlier if(INFLIGHT[sid]){ idle-reset block, so .find() would
# grab the wrong one. (rfind = the substantive restore branch.)
inflight_idx = src.rfind("if(INFLIGHT[sid]){")
assert inflight_idx >= 0, "INFLIGHT branch not found in loadSession"
inflight_block = src[inflight_idx:inflight_idx+4200]
assert "appendLiveToolCard" in inflight_block, "loadSession INFLIGHT branch must restore live tool cards via appendLiveToolCard"
assert "clearLiveToolCards" in inflight_block, "loadSession INFLIGHT branch must clear old live cards before restoring"
# ── R13: renderMessages() called before S.busy=false in done handler ────────
def test_done_handler_sets_busy_false_before_renderMessages(cleanup_test_sessions):
"""R13: In the done handler, S.busy must be set to false BEFORE renderMessages()
is called for the active session. The !S.busy guard in renderMessages() controls
whether settled tool cards are rendered. When S.busy=true during renderMessages(),
tool cards are skipped entirely after a response completes.
"""
src = (REPO_ROOT / "static/messages.js").read_text()
# Sprint 12: handler moved into _wireSSE(source)
done_idx = src.find("source.addEventListener('done'")
if done_idx < 0:
done_idx = src.find("es.addEventListener('done'")
assert done_idx >= 0
stream_end_idx = src.find("source.addEventListener('stream_end'", done_idx)
assert stream_end_idx >= 0, "stream_end listener after done handler not found"
done_block = src[done_idx:stream_end_idx]
# S.busy=false must appear before the terminal render call within the done handler.
busy_pos = done_block.find("S.busy=false;")
render_pos = done_block.find("renderMessages(")
assert busy_pos >= 0, "done handler must set S.busy=false before renderMessages()"
assert render_pos >= 0, "done handler must call renderMessages after settling state"
assert busy_pos < render_pos, f"S.busy=false (pos {busy_pos}) must come before renderMessages (pos {render_pos})"
# ── R14: send() uses stale modelSelect.value instead of session model ────────
def test_send_uses_session_model_as_authoritative_source(cleanup_test_sessions):
"""R14: send() must use S.session.model as the authoritative model, not just
$('modelSelect').value. When a session was created with a model not in the
current dropdown list, the select value would be stale after switching sessions,
causing the wrong model to be sent.
"""
src = (REPO_ROOT / "static/messages.js").read_text()
# The model field in the chat/start payload must prefer S.session.model.
# PR #1591 (May 2026) added optimistic `upsertActiveSessionForLocalTurn`
# comments that mention `/api/chat/start` BEFORE the actual POST call, so
# `src.find("/api/chat/start")` may land on a comment occurrence rather
# than the `api('/api/chat/start',{...})` POST. Match the call signature
# explicitly to land on the payload block.
chat_start_idx = src.find("api('/api/chat/start'")
assert chat_start_idx >= 0, "could not find /api/chat/start POST in messages.js"
payload_block = src[chat_start_idx:chat_start_idx+400]
assert "S.session.model" in payload_block, \
"send() must use S.session.model in the chat/start payload"
# ── R15: newSession does not clear live tool cards ────────────────────────────
def test_newSession_clears_live_tool_cards(cleanup_test_sessions):
"""R15: newSession() must call clearLiveToolCards() so live cards from a
previous in-flight session don't persist when starting a fresh conversation.
"""
src = (REPO_ROOT / "static/sessions.js").read_text()
new_sess_idx = src.find("async function newSession(")
assert new_sess_idx >= 0
# Find end of newSession (next async function)
next_fn = src.find("async function ", new_sess_idx + 10)
new_sess_body = src[new_sess_idx:next_fn]
assert "clearLiveToolCards" in new_sess_body, "newSession() must call clearLiveToolCards() to clear stale live cards"
def test_newSession_resets_busy_state_for_fresh_chat(cleanup_test_sessions):
"""R15b: newSession() must reset the viewed chat to idle state.
Without this, starting a second chat while another session is streaming leaves
S.busy=true, so the first send in the new chat gets incorrectly queued.
"""
src = (REPO_ROOT / "static/sessions.js").read_text()
new_sess_idx = src.find("async function newSession(")
assert new_sess_idx >= 0
next_fn = src.find("async function ", new_sess_idx + 10)
new_sess_body = src[new_sess_idx:next_fn]
assert "S.busy=false;" in new_sess_body, \
"newSession() must clear S.busy so a fresh chat is immediately sendable"
assert "S.activeStreamId=null;" in new_sess_body, \
"newSession() must clear the active stream id for the newly viewed chat"
assert "updateQueueBadge(S.session.session_id);" in new_sess_body, \
"newSession() must refresh the badge for the new session rather than leaving the old session's queue badge visible"
def test_session_scoped_message_queue_frontend_wiring(cleanup_test_sessions):
"""R15bb: queued follow-ups must stay attached to their originating session.
The frontend should use a session-keyed queue store and drain only the active
session's queued messages when that session becomes idle.
"""
ui_src = (REPO_ROOT / "static/ui.js").read_text()
messages_src = (REPO_ROOT / "static/messages.js").read_text()
sessions_src = (REPO_ROOT / "static/sessions.js").read_text()
assert "const SESSION_QUEUES" in ui_src
assert "function queueSessionMessage" in ui_src
assert "function shiftQueuedSessionMessage" in ui_src
# _queueDrainSid tracks which session's queue to drain even after session switches
assert "_queueDrainSid" in ui_src
assert "shiftQueuedSessionMessage(sid)" in ui_src
assert "queueSessionMessage(S.session.session_id" in messages_src
assert "updateQueueBadge(S.session.session_id);" in messages_src
assert "updateQueueBadge(sid);" in sessions_src
def test_queue_card_cross_session_clear_called_before_draft_save(cleanup_test_sessions):
"""R15c: switching away from one session to another should clear the old
session's queue card before the async draft-save await, so stale DOM cannot
survive into the destination session.
"""
src = (REPO_ROOT / "static/sessions.js").read_text()
block_pattern = re.compile(
r"if \(currentSid && currentSid !== sid\) \{\s*"
r"if\(typeof window\._clearPendingSelections==='function'\) window\._clearPendingSelections\(\);\s*"
r"if\(typeof _clearQueueCardDisplay==='function'\) _clearQueueCardDisplay\(currentSid\);\s*"
r"await _saveComposerDraftNow\(currentSid",
re.S,
)
assert block_pattern.search(src), (
"cross-session loadSession path must clear queue card display via"
" _clearQueueCardDisplay(currentSid) before awaiting _saveComposerDraftNow"
)
def test_queue_card_cross_session_helper_used_only_for_session_change(cleanup_test_sessions):
"""R15c: _clearQueueCardDisplay(sid) must only fire on cross-session switches,
not on same-session navigation/force-reload code paths.
"""
src = (REPO_ROOT / "static/sessions.js").read_text()
load_start = src.find("async function loadSession(sid){")
assert load_start >= 0
load_end = src.find(" // Sync context usage indicator from session data", load_start)
load_body = src[load_start:load_end]
cross_start = load_body.find("if (currentSid && currentSid !== sid) {")
cross_end = load_body.find("if (currentSid !== sid || forceReload) {", cross_start)
assert cross_start >= 0 and cross_end >= 0
assert "_clearQueueCardDisplay(currentSid);" in load_body[cross_start:cross_end], (
"queue-card clear helper must be inside the cross-session branch"
)
same_session_idx = load_body.find("if(currentSid===sid && !forceReload && !_loadingSessionId) return;")
assert same_session_idx >= 0
assert same_session_idx < cross_start
def test_queue_card_clear_helper_tracks_render_epoch(cleanup_test_sessions):
"""R15d: the delayed queue clear must only wipe the chips from the render it
was asked to dismiss, not a later render for the same shared queue DOM.
"""
src = (REPO_ROOT / "static/ui.js").read_text()
assert "let _queueRenderEpoch=0;" in src
assert "if(sid) delete _queueRenderKeys[sid];" in src
assert "inner.setAttribute('data-queue-render-sid',sid);" in src
assert "inner.setAttribute('data-queue-render-epoch',String(++_queueRenderEpoch));" in src
assert "const _epoch=_chips.getAttribute('data-queue-render-epoch')||'';" in src
assert "(_chips.getAttribute('data-queue-render-sid')||'')===_sid" in src
assert "(_chips.getAttribute('data-queue-render-epoch')||'')===_epoch" in src
def test_chat_start_persists_pending_turn_metadata_for_reload_recovery(cleanup_test_sessions):
"""R15c: chat/start must expose enough pending-turn metadata for a reload to
rebuild the in-flight conversation instead of showing a blank session.
"""
routes_src = (REPO_ROOT / "api/routes.py").read_text()
assert 's.active_stream_id = stream_id' in routes_src
assert 's.pending_user_message = msg' in routes_src
assert 's.pending_attachments = attachments' in routes_src
assert '"active_stream_id": getattr(s, "active_stream_id", None)' in routes_src
assert '"pending_user_message": getattr(s, "pending_user_message", None)' in routes_src
def test_session_detail_uses_runtime_streaming_state(cleanup_test_sessions):
"""GET /api/session must agree with /api/sessions on live stream ownership."""
routes_src = (REPO_ROOT / "api/routes.py").read_text()
session_route = routes_src.split('if parsed.path == "/api/session":', 1)[1].split(
'if parsed.path == "/api/session/lineage/report":', 1
)[0]
assert "active_stream_ids = _active_stream_ids()" in session_route
assert "s.compact(" in session_route
assert "include_runtime=True" in session_route
assert "active_stream_ids=active_stream_ids" in session_route
def test_reload_path_restores_pending_message_and_reattaches_live_stream(cleanup_test_sessions):
"""R15d: the frontend reload path must show the pending user turn and
reattach to the live SSE stream after loadSession().
"""
sessions_src = (REPO_ROOT / "static/sessions.js").read_text()
ui_src = (REPO_ROOT / "static/ui.js").read_text()
messages_src = (REPO_ROOT / "static/messages.js").read_text()
assert 'getPendingSessionMessage' in ui_src
assert 'pending_user_message' in ui_src
assert 'function attachLiveStream' in messages_src
assert 'const pendingMsg=typeof getPendingSessionMessage' in sessions_src
# `activeStreamId` declaration was widened const → let (#5248 race-guard
# re-reads it after the awaited message load). Accept either keyword via a
# prefix anchor that omits const/let.
assert ('activeStreamId=data.session.active_stream_id||null;' in sessions_src or
'activeStreamId=S.session.active_stream_id||null;' in sessions_src)
assert 'attachLiveStream(sid, activeStreamId' in sessions_src
assert 'if (S.activeStreamId && S.activeStreamId === streamId) return;' in ui_src
active_branch_start = sessions_src.index("if(activeStreamId){\n S.busy=true;")
active_branch_end = sessions_src.index("}else{\n S.busy=false;", active_branch_start)
active_branch = sessions_src[active_branch_start:active_branch_end]
render_pos = active_branch.index("renderMessages(")
shell_pos = active_branch.index("ensureLiveWorklogShell")
assert render_pos < shell_pos, (
"Reloading an active stream must recreate the live worklog shell after "
"renderMessages() rebuilds msgInner; otherwise the stream stays invisible "
"until a session switch triggers another restore path."
)
assert "else appendThinking();" in active_branch, (
"Non-simplified tool-calling must keep the legacy fallback."
)
# ── R16: Switching away/back must preserve live partial assistant output ─────
def test_live_stream_tokens_persist_partial_assistant_for_session_switch(cleanup_test_sessions):
"""R16: in-flight assistant text must be mirrored into INFLIGHT session state,
and the live stream must rebind to the rebuilt DOM after switching away and back.
Without this, partial assistant output disappears until the final done payload lands.
"""
messages_src = (REPO_ROOT / "static/messages.js").read_text()
ui_src = (REPO_ROOT / "static/ui.js").read_text()
# #3455: the persisted partial assistant content is now the think-split content
# (inline <think> moved to m.reasoning), so the push uses content:split.content
# where split=_splitThinkFromContent(assistantText, ...). The invariant — partial
# assistant text is mirrored into INFLIGHT state — is unchanged.
assert "content:split.content" in messages_src, \
"messages.js must persist the (think-split) partial assistant text into INFLIGHT state"
assert "_splitThinkFromContent(assistantText" in messages_src, \
"the persisted partial must be derived from the live assistantText"
assert "_live:true" in messages_src, \
"messages.js must mark the persisted in-flight assistant row so renderMessages can re-anchor it"
assert "syncInflightAssistantMessage();" in messages_src, \
"token handler must update INFLIGHT state before checking the active session"
token_match = re.search(r"source\.addEventListener\('token',e=>\{(.*?)\n\s*\}\);", messages_src, re.S)
assert token_match, "token listener not found"
token_fn = token_match.group(1)
assert token_fn.find("assistantText+=d.text") < token_fn.find("if(!S.session||S.session.session_id!==activeSid) return;"), (
"token events must update the active stream's local state before DOM-only active-session guards"
)
assert token_fn.find("syncInflightAssistantMessage();") < token_fn.find("if(!S.session||S.session.session_id!==activeSid) return;"), (
"token events must persist INFLIGHT state even while another session is selected"
)
assert "assistantRow&&!assistantRow.isConnected" in messages_src, \
"live stream must drop stale detached assistant DOM references after session switches"
assert "data-live-assistant" in ui_src, \
"renderMessages must preserve a live-assistant DOM anchor when rebuilding the thread"
assert "snapshotLiveTurnHtmlForSession(activeSid)" in messages_src, \
"live turn DOM snapshots should preserve the interleaved timeline across session switches"
assert "restoreLiveTurnHtmlForSession(sid)" in (REPO_ROOT / "static/sessions.js").read_text(), \
"loadSession should restore the live turn snapshot before replaying flat tool cards"
def test_inflight_session_state_tracks_live_tool_cards_per_session(cleanup_test_sessions):
"""R16b: live tool cards must be stored on the in-flight session, not only in the
global S.toolCalls array, so switching chats does not lose or misattach them.
"""
messages_src = (REPO_ROOT / "static/messages.js").read_text()
sessions_src = (REPO_ROOT / "static/sessions.js").read_text()
assert "inflight.toolCalls.push(tc)" in messages_src, \
"tool SSE handler must persist live tool calls onto the in-flight session"
assert "S.toolCalls=(INFLIGHT[sid].toolCalls||[]);" in sessions_src, \
"loadSession() must restore live tool calls from the in-flight session state"
def test_loadSession_inflight_sets_busy_before_renderMessages(cleanup_test_sessions):
"""R16c: loading an in-flight session must mark it busy before renderMessages().
Otherwise renderMessages() treats S.toolCalls as settled history cards and the
same tool call appears once inline and once in the live tool host after a
session switch.
"""
src = (REPO_ROOT / "static/sessions.js").read_text()
# Anchor on the Phase-2 INFLIGHT restore branch (the later occurrence); #3899
# added an earlier if(INFLIGHT[sid]){ idle-reset block, so .find() would
# grab the wrong one. (rfind = the substantive restore branch.)
inflight_idx = src.rfind("if(INFLIGHT[sid]){")
assert inflight_idx >= 0, "INFLIGHT branch not found in loadSession"
inflight_block = src[inflight_idx:inflight_idx+4200]
busy_pos = inflight_block.find("S.busy=")
# #3326 added an optional {preserveScroll} arg to the INFLIGHT-branch render
# call, so match the call form rather than the bare `renderMessages();`.
render_pos = inflight_block.find("renderMessages(")
assert busy_pos >= 0, "loadSession INFLIGHT branch must set S.busy"
assert render_pos >= 0, "loadSession INFLIGHT branch must call renderMessages()"
assert busy_pos < render_pos, \
"loadSession must set S.busy before renderMessages() to avoid duplicate tool cards"
def test_loadSession_inflight_merges_tail_with_persisted_transcript(cleanup_test_sessions):
src = (REPO_ROOT / "static/sessions.js").read_text()
# Anchor on the Phase-2 INFLIGHT restore branch (the later occurrence); #3899
# added an earlier if(INFLIGHT[sid]){ idle-reset block, so .find() would
# grab the wrong one. (rfind = the substantive restore branch.)
inflight_idx = src.rfind("if(INFLIGHT[sid]){")
assert inflight_idx >= 0, "INFLIGHT branch not found in loadSession"
inflight_block = src[inflight_idx:inflight_idx+1200]
assert "await _ensureMessagesLoaded(sid" in inflight_block, (
"returning to an active stream should load the persisted transcript before adding the live tail"
)
assert "_mergeInflightTailMessages(S.messages,inflightMessages)" in inflight_block, (
"INFLIGHT messages should be merged as a tail, not replace the full transcript"
)
assert "function _mergeInflightTailMessages" in src, (
"sessions.js should centralize INFLIGHT tail merge logic for regression coverage"
)
def test_renderMessages_preserves_loading_placeholder_for_session_switch(cleanup_test_sessions):
"""R16d: renderMessages should not repaint transcript during session-load window.
During loadSession(sid) after the loading metadata call, S.messages is
intentionally empty until _ensureMessagesLoaded(sid) settles. A concurrent
renderMessages() must keep the existing 'Loading conversation...' placeholder
instead of clearing #msgInner to an empty transcript.
"""
ui_src = (REPO_ROOT / "static/ui.js").read_text()
fn_start = ui_src.find("function renderMessages")
assert fn_start >= 0, "renderMessages() not found in ui.js"
fn_body = ui_src[fn_start:fn_start + 1400]
compact = re.sub(r"\s+", "", fn_body)
assert (
"if(_loadingSessionId===sid&&msgCount===0&&inner)return;" in compact
), (
"renderMessages() must return early when loadSession is active for"
" the current sid and S.messages is still empty."
)
# Guard must live before render-window reset and message-filter pass.
reset_pos = compact.find("if(sid!==_messageRenderWindowSid)_resetMessageRenderWindow(sid);")
guard_pos = compact.find("if(_loadingSessionId===sid&&msgCount===0&&inner)return;")
assert (
0 <= guard_pos < reset_pos
), "Session-load empty-state guard must run before render-window/state resets."
def test_browser_session_url_accepts_api_session_id_param(cleanup_test_sessions):
"""External links using ?session_id=... should open that session in the browser.
The API endpoint uses `session_id`, while the browser URL historically used
`session`/`/session/<id>`. Auth/cookie bridges and external callers can
legitimately produce `/?session_id=<sid>`; ignoring it falls back to stale
localStorage and renders the wrong or empty conversation.
"""
src = (REPO_ROOT / "static/sessions.js").read_text()
start = src.find("function _sessionIdFromLocation")
assert start >= 0, "session URL parser not found"
end = src.find("function _sessionUrlForSid", start)
assert end > start, "session URL parser block end not found"
block = src[start:end]
assert "qs.get('session')" in block or 'qs.get("session")' in block
assert "qs.get('session_id')" in block or 'qs.get("session_id")' in block
def test_inflight_merge_dedupes_uploaded_user_message(cleanup_test_sessions):
"""Uploaded-file turns render optimistically before the server stores the
final pending text with an `[Attached files: ...]` suffix. The INFLIGHT
merge must treat those as the same user turn instead of rendering both.
"""
src = (REPO_ROOT / "static/sessions.js").read_text()
assert "function _normalizeUserTranscriptText" in src, (
"sessions.js should normalize user transcript text before deduping user turns"
)
assert "_stripAttachedFilesMarker(_stripForcedSkillEnvelope(text))" in src, (
"user transcript normalization should still remove the server-side attached-files suffix"
)
assert "_normalizeUserTranscriptText(aText)===_normalizeUserTranscriptText(bText)" in src, (
"INFLIGHT user-message comparison should dedupe optimistic upload text against final pending text"
)
assert "role==='user'" in src, (
"attached-files normalization should be limited to user turns"
)
pending_idx = src.find("function _mergePendingSessionMessage")
assert pending_idx >= 0, "pending session merge helper not found"
pending_block = src[pending_idx:pending_idx+500]
assert "_hasCurrentTailUserDuplicate(currentTurnMessages,pendingMsg)" in pending_block, (
"pending-user merge should dedupe only against the current active-turn user row"
)
assert "messages.some(" not in pending_block, (
"pending-user merge must not scan historical user rows by normalized content"
)
def test_loadSession_inflight_sets_active_stream_before_replaying_live_tool_cards(cleanup_test_sessions):
"""#1715: returning to an active chat must replay persisted tool cards.
appendLiveToolCard() intentionally no-ops unless S.activeStreamId is already
set for the viewed streaming session. If loadSession() restores S.toolCalls
and replays them before assigning S.activeStreamId, the compact Activity
counter drops the previously-seen tools after a focus change.
"""
src = (REPO_ROOT / "static/sessions.js").read_text()
# Anchor on the Phase-2 INFLIGHT restore branch (the later occurrence); #3899
# added an earlier if(INFLIGHT[sid]){ idle-reset block, so .find() would
# grab the wrong one. (rfind = the substantive restore branch.)
inflight_idx = src.rfind("if(INFLIGHT[sid]){")
assert inflight_idx >= 0, "INFLIGHT branch not found in loadSession"
inflight_block = src[inflight_idx:inflight_idx+4200]
active_pos = inflight_block.find("S.activeStreamId=activeStreamId;")
replay_pos = inflight_block.find("const replayPersistedLiveToolCards=(opts)=>{")
attach_pos = inflight_block.find("attachLiveStream(sid, activeStreamId")
assert active_pos >= 0, "loadSession INFLIGHT branch must restore S.activeStreamId"
assert replay_pos >= 0, "loadSession INFLIGHT branch must replay persisted live tool cards"
assert active_pos < replay_pos, \
"S.activeStreamId must be restored before replaying persisted tools"
assert attach_pos < 0 or active_pos < attach_pos, \
"S.activeStreamId should also be restored before SSE reattach can deliver more tool events"
def test_streaming_bridge_accepts_current_tool_progress_callback_signature(cleanup_test_sessions):
"""R17: api/streaming.py must accept the current Hermes agent callback contract.
The agent now calls tool_progress_callback(event_type, name, preview, args, **kwargs).
If the WebUI bridge only accepts (name, preview, args), live tool updates silently vanish.
"""
src = (REPO_ROOT / "api/streaming.py").read_text()
assert "def on_tool(*cb_args, **cb_kwargs):" in src, \
"streaming.py must accept variable callback args for tool progress events"
assert "reasoning_callback=on_reasoning" in src, \
"streaming.py must wire the agent's reasoning callback into the SSE bridge"
assert "put('tool_complete'" in src or 'put("tool_complete"' in src, \
"streaming.py must emit live tool completion SSE events"
def test_streaming_reads_reasoning_effort_from_config_dict(cleanup_test_sessions):
"""R17b: WebUI must read agent.reasoning_effort from the dict returned by get_config().
`get_config()` returns a plain dict (not a wrapper exposing `.cfg`). The
pre-fix line `_cfg.cfg.get('agent', {})` raised AttributeError that the
surrounding try/except swallowed, so `_reasoning_config` was always None
regardless of what `/reasoning <level>` had been set to. This static
source assertion pins the fix because the runtime symptom is silent.
"""
src = (REPO_ROOT / "api/streaming.py").read_text()
assert "_cfg.cfg" not in src, \
"get_config() returns a dict; accessing _cfg.cfg drops reasoning_config to None"
assert "_cfg.get('agent', {})" in src or '_cfg.get("agent", {})' in src, \
"streaming.py must read agent.reasoning_effort via the config dict"
def test_streaming_agent_cache_signature_includes_reasoning_config(cleanup_test_sessions):
"""R17c: changing reasoning effort mid-session must rebuild the cached per-session agent.
Without `_reasoning_config` participating in `_sig_blob`, the cache key
matches the old entry and the operator's `/reasoning xhigh` change has
no effect on the live session.
"""
src = (REPO_ROOT / "api/streaming.py").read_text()
start = src.find("_sig_blob = _json.dumps")
end = src.find("_agent_sig", start)
assert start >= 0 and end > start, "agent cache signature block not found"
sig_block = src[start:end]
assert "_reasoning_config" in sig_block, \
"agent cache signature must include reasoning_config so xhigh/medium changes take effect"
def test_messages_js_supports_live_reasoning_and_tool_completion(cleanup_test_sessions):
"""R18: messages.js must render live reasoning and react to tool completion events.
Without these handlers, the operator only sees generic Thinking… or nothing
until the final done snapshot redraws the whole turn.
"""
src = (REPO_ROOT / "static/messages.js").read_text()
# reasoningText is initialised at closure scope in attachLiveStream.
# On initial connect it defaults to ''; on reconnect it restores from
# INFLIGHT so the already-rendered content survives the session switch.
assert ("let reasoningText=''" in src
or "let reasoningText = _lastLiveAssistant" in src
or "let reasoningText=_lastLiveReasoning" in src), \
"messages.js must track streamed reasoning text separately from assistant text"
assert ("let liveReasoningText=''" in src
or "let liveReasoningText = reasoningText" in src
or "let liveReasoningText=_lastLiveReasoning" in src), \
"messages.js must track the currently active reasoning segment separately from cumulative reasoning"
assert "source.addEventListener('reasoning'" in src or 'source.addEventListener("reasoning"' in src, \
"messages.js must listen for live reasoning SSE events"
assert "liveReasoningText += text" in src, \
"live reasoning SSE events must update the active Worklog Thinking Card text"
assert "_updateLiveThinkingCard(_liveThinkingText())" in src, \
"live reasoning SSE events must refresh the current segment's Worklog Thinking Card"
assert "source.addEventListener('tool_complete'" in src or 'source.addEventListener("tool_complete"' in src, \
"messages.js must listen for live tool completion SSE events"
assert "function _parseStreamState()" in src, \
"messages.js must parse live stream state into reasoning + visible answer"
def test_messages_js_supports_interim_assistant_events(cleanup_test_sessions):
"""R18b: messages.js must render live interim assistant commentary when
`interim_assistant` SSE events arrive.
AIAgent emits completed mid-turn commentary through an interim callback.
Without a dedicated SSE handler, Codex-style interim status text disappears
from the live answer and users only see the final response after tool calls.
"""
src = (REPO_ROOT / "static/messages.js").read_text()
assert "source.addEventListener('interim_assistant'" in src or 'source.addEventListener("interim_assistant"' in src, \
"messages.js must listen for interim_assistant SSE events"
assert "function _resetAssistantSegment()" in src, \
"messages.js should share live-segment reset logic between interim assistant updates and tool events"
assert "_resetAssistantSegment();" in src, \
"messages.js should apply segment reset when tool or interim assistant events require it"
def test_ui_js_can_upgrade_thinking_spinner_into_live_reasoning_card(cleanup_test_sessions):
"""R19: ui.js keeps the thinking helpers available while simplified mode
renders provider reasoning as a Worklog Thinking Card.
"""
src = (REPO_ROOT / "static/ui.js").read_text()
assert "function _thinkingMarkup(text='')" in src or 'function _thinkingMarkup(text="")' in src, \
"ui.js must centralize thinking row markup so it can switch between spinner and live text"
assert ("function updateThinking(text='', options){appendThinking(text, options);}" in src
or 'function updateThinking(text="", options){appendThinking(text, options);}' in src), \
"ui.js must expose an updateThinking helper that preserves live Thinking placement metadata"
assert "function finalizeThinkingCard()" in src, \
"ui.js must expose a helper to finalize one live thinking card before starting another"
def test_ui_js_keeps_split_thinking_cards_and_assistant_header(cleanup_test_sessions):
"""R19b: settled render should keep distinct thinking cards for split assistant
turns inside a single assistant turn container, preserving one assistant header
for the whole response while keeping multiple thinking cards distinct.
"""
src = (REPO_ROOT / "static" / "ui.js").read_text()
assert "pendingTurnThinking" not in src, \
"renderMessages must not merge distinct thinking blocks into one settled card"
assert "_createAssistantTurn(" in src, \
"renderMessages must build a shared assistant turn wrapper instead of separate top-level rows"
assert "assistant-segment" in src, \
"settled assistant turns must preserve per-message segments for multiple thinking/tool/result blocks"
def test_ui_js_keeps_reasoning_only_assistant_messages_visible(cleanup_test_sessions):
"""R19c: assistant messages that only contain reasoning must still survive
rerenders, otherwise prior thinking cards disappear on the next turn.
"""
src = (REPO_ROOT / "static" / "ui.js").read_text()
assert "function _messageHasReasoningPayload(m)" in src, \
"ui.js must detect reasoning-only assistant messages"
assert "hasTc||hasTu||_messageHasReasoningPayload(m)" in src.replace(' ', ''), \
"renderMessages visibility filter must preserve reasoning-only assistant messages"
def test_ui_js_does_not_hide_anchor_segments_that_contain_thinking(cleanup_test_sessions):
"""R19c2/R19c3: reasoning-only metadata must remain preserved as a
collapsed Worklog Thinking Card.
"""
src = (REPO_ROOT / "static" / "ui.js").read_text()
compact = src.replace(' ', '').replace('\n', '')
assert "assistantThinking.set(rawIdx,thinkingText)" in compact, \
"renderMessages must preserve reasoning text before hiding empty anchor segments"
helper_start = src.find("function _worklogReasoningTextFromMessage")
helper_end = src.find("function _thinkingCardHtml", helper_start)
assert helper_start != -1 and helper_end != -1
helper = src[helper_start:helper_end]
assert "_assistantReasoningPayloadText(m)" in helper and "_stripVisibleAssistantEchoFromThinking" in helper, \
"provider reasoning metadata should feed the Worklog Thinking Card after exact duplicate suppression"
assert "data-worklog-thinking-card" in src, \
"Thinking Cards should be explicit Worklog items, not tool cards"
assert "_thinkingActivityNode(thinkingText, false, thinkingDisclosureKey)" in src, \
"settled reasoning should render as a collapsed Worklog Thinking Card"
def test_messages_js_live_assistant_segment_reuses_live_turn_wrapper(cleanup_test_sessions):
"""R19d: live streaming must reuse the existing live assistant turn wrapper created
by appendThinking(), otherwise the header gets recreated when answer tokens start.
"""
src = (REPO_ROOT / "static" / "messages.js").read_text()
assert "function ensureAssistantRow(force=false)" in src or 'function ensureAssistantRow(force = false)' in src, \
"ensureAssistantRow should manage the live assistant content segment"
assert "let turn=$('liveAssistantTurn');" in src, \
"ensureAssistantRow must bind to the existing live assistant turn wrapper"
assert "appendThinking();" in src, \
"ensureAssistantRow should create the live turn via appendThinking() when needed"
assert "assistantRow.className='assistant-segment';" in src or 'assistantRow.className = \'assistant-segment\';' in src, \
"live answer content should be appended as a segment inside the live turn wrapper"
assert "if(!force&&!assistantRow){" in src.replace(' ', ''), \
"ensureAssistantRow must still avoid creating the live answer segment when no display text exists yet"
token_start = src.find("source.addEventListener('token'")
interim_start = src.find("source.addEventListener('interim_assistant'", token_start)
assert token_start >= 0 and interim_start > token_start
token_body = src[token_start:interim_start]
compact_token_body = token_body.replace(" ", "").replace("\n", "")
assert "if(assistantRow){ensureAssistantRow();_scheduleRender();}" in compact_token_body, \
"token handler should skip the per-token full-text parse after the live answer segment exists"
assert "constparsed=_parseStreamState();if(String((parsed&&parsed.displayText)||'').trim())ensureAssistantRow();_scheduleRender(parsed);" in compact_token_body, \
"token handler must only create the live answer segment once visible answer text starts"
def test_messages_js_stream_perf_cleanup_lifecycle(cleanup_test_sessions):
"""#5455 review: throttled snapshot timers and incremental anchor caches tear down at terminal events."""
src = (REPO_ROOT / "static/messages.js").read_text()
assert "function _cancelThrottledSnapshotTimer()" in src
assert "clearTimeout(_snapshotLiveTurnTimer)" in src
assert "function _clearAnchorProseIncrementalNode()" in src
assert "window.__anchorProseIncrementalNode===_anchorProseIncrementalNode" in src
assert "_anchorProseSmdCache.clear();" in src
fallback_start = src.find("function _finalizeStreamEndFallback")
recovery_start = src.find("async function _runStreamEndRecovery", fallback_start)
assert fallback_start >= 0 and recovery_start > fallback_start
fallback_body = src[fallback_start:recovery_start]
assert "_cancelThrottledSnapshotTimer();" in fallback_body
assert "_clearAnchorProseIncrementalNode();" in fallback_body
done_start = src.find("source.addEventListener('done'")
stream_end_start = src.find("source.addEventListener('stream_end'", done_start)
assert done_start >= 0 and stream_end_start > done_start
done_body = src[done_start:stream_end_start]
assert "_cancelThrottledSnapshotTimer();" in done_body
assert "_clearAnchorProseIncrementalNode();" in done_body
# #5466 Codex gate: the snapshot/anchor cleanup must run on EVERY terminal
# path, not just fallback/done/stream_end — otherwise a timer/cache/global
# survives the turn on apperror, cancel, stream-error, and the settled-session
# recovery path (the PR's own stated teardown invariant).
def _terminal_body(anchor, end_marker):
a = src.find(anchor)
assert a >= 0, f"missing terminal handler: {anchor}"
b = src.find(end_marker, a)
assert b > a, f"could not bound terminal handler: {anchor}"
return src[a:b]
apperror_body = _terminal_body("source.addEventListener('apperror'", "_streamFadeCleanupReduceMotionListener();")
assert "_cancelThrottledSnapshotTimer();" in apperror_body and "_clearAnchorProseIncrementalNode();" in apperror_body, \
"apperror terminal handler must tear down the snapshot timer + anchor prose cache"
cancel_body = _terminal_body("source.addEventListener('cancel'", "_streamFadeCleanupReduceMotionListener();")
assert "_cancelThrottledSnapshotTimer();" in cancel_body and "_clearAnchorProseIncrementalNode();" in cancel_body, \
"cancel terminal handler must tear down the snapshot timer + anchor prose cache"
stream_error_body = _terminal_body("function _handleStreamError(source)", "_streamFadeCleanupReduceMotionListener();")
assert "_cancelThrottledSnapshotTimer();" in stream_error_body and "_clearAnchorProseIncrementalNode();" in stream_error_body, \
"_handleStreamError must tear down the snapshot timer + anchor prose cache"
restore_body = _terminal_body("async function _restoreSettledSession(source", "_cancelAnimationFramePendingStreamRender();")
assert "_cancelThrottledSnapshotTimer();" in restore_body and "_clearAnchorProseIncrementalNode();" in restore_body, \
"_restoreSettledSession terminal recovery must tear down the snapshot timer + anchor prose cache"
def test_messages_js_finalizes_thinking_card_before_tool_card(cleanup_test_sessions):
"""R19e: later reasoning after a tool call must render in a fresh Worklog
Thinking Card without discarding durable reasoning.
"""
src = (REPO_ROOT / "static/messages.js").read_text()
tool_start = src.find("source.addEventListener('tool'")
tool_complete_start = src.find("source.addEventListener('tool_complete'", tool_start + 1)
assert tool_start >= 0 and tool_complete_start > tool_start
body = src[tool_start:tool_complete_start]
assert "finalizeThinkingCard()" in body, \
"tool handler must finalize the current live thinking card before appending a tool card"
assert "liveReasoningText='';" in body or 'liveReasoningText = "";' in body, \
"tool handler must reset the active reasoning segment before post-tool reasoning arrives"
assert "reasoningText=''" not in body and 'reasoningText = ""' not in body, \
"tool handler must not discard durable reasoning already assigned to the Worklog"
# ── R17: Stack traces must not leak to clients in 500 responses ────────────
def test_500_response_has_no_trace_field():
"""R16: HTTP 500 responses must not include a 'trace' field.
Leaking tracebacks exposes file paths, module names, and potentially
secret values from local variables.
"""
# POST to /api/chat/start with missing required fields to trigger an error
data, status = post("/api/chat/start", {})
# Should be an error response (4xx or 5xx)
assert "trace" not in data, \
"Server must not leak stack traces to clients"
def test_upload_error_has_no_trace_field():
"""R16b: Upload 500 responses must not include a 'trace' field."""
# Send a POST to /api/upload with invalid content to trigger the error handler
req = urllib.request.Request(
BASE + "/api/upload",
data=b"not-multipart-data",
headers={"Content-Type": "text/plain", "Content-Length": "18"},
)
try:
with urllib.request.urlopen(req, timeout=10) as r:
body = json.loads(r.read())
code = r.status
except urllib.error.HTTPError as e:
body = json.loads(e.read())
code = e.code
assert code >= 400, "Invalid upload should return an error status"
assert "trace" not in body, \
"Upload errors must not leak stack traces to clients"
assert "error" in body, "Error responses must include an 'error' key"
# ── #248: /skills slash command ───────────────────────────────────────────────
def test_skills_slash_command_defined():
"""#248: /skills slash command must be wired up.
Pre-Task 2 (slash-command-parity batch 1) this checked for the
hardcoded ``name:'skills'`` entry in the COMMANDS array. The COMMANDS
array is now sourced from hermes-agent's ``COMMAND_REGISTRY`` at boot
via ``GET /api/commands``, so the literal string is gone. The handler
must still exist and be registered, otherwise ``/skills`` would fall
through to \"not yet supported\".
"""
src = (REPO_ROOT / "static/commands.js").read_text()
# 1. cmdSkills function must be defined
assert "async function cmdSkills" in src or "function cmdSkills" in src, \
"cmdSkills function missing from commands.js"
# 2. HANDLERS.skills must be registered to dispatch /skills to cmdSkills
assert "HANDLERS.skills" in src, \
"HANDLERS.skills registration missing from commands.js"
def test_reload_recovery_persists_durable_inflight_state(cleanup_test_sessions):
"""Reload recovery must persist a durable per-session inflight snapshot.
Without these helpers, loadSession() references loadInflightState() but a full
browser reload has no saved state to hydrate, so recovery silently no-ops.
"""
ui_src = (REPO_ROOT / "static/ui.js").read_text()
messages_src = (REPO_ROOT / "static/messages.js").read_text()
sessions_src = (REPO_ROOT / "static/sessions.js").read_text()
assert "const INFLIGHT_STATE_KEY = 'hermes-webui-inflight-state'" in ui_src
assert "function saveInflightState(sid, state)" in ui_src
assert "function loadInflightState(sid, streamId)" in ui_src
assert "function clearInflightState(sid)" in ui_src
assert "saveInflightState(activeSid" in messages_src, \
"messages.js must persist live stream snapshots while a turn is in flight"
assert "clearInflightState(activeSid)" in messages_src, \
"messages.js must clear durable inflight snapshots when the run ends/errors/cancels"
assert "const stored=loadInflightState(sid, activeStreamId);" in sessions_src, \
"loadSession() must hydrate in-flight state from durable browser storage on reload"
# ── R18: OAuth onboarding must recognize credential_pool-only auth ───────────
def test_provider_oauth_authenticated_accepts_credential_pool_entries(
cleanup_test_sessions, tmp_path
):
"""R18a: pool-only OAuth auth.json should count as authenticated.
Hermes runtime resolves Codex credentials from credential_pool; onboarding
must not insist on stale or duplicated providers[provider_id] entries.
"""
_make_auth_json_with_credential_pool(
"openai-codex",
[
{
"id": "pool1",
"label": "device_code",
"source": "device_code",
"auth_type": "oauth",
"access_token": "***",
"refresh_token": "***",
"base_url": "https://chatgpt.com/backend-api/codex",
}
],
tmp_path,
)
from api.onboarding import _provider_oauth_authenticated
assert _provider_oauth_authenticated("openai-codex", tmp_path) is True
def test_provider_oauth_authenticated_rejects_flag_only_credential_pool_entries(
cleanup_test_sessions, tmp_path
):
"""R18a2: metadata flags alone must not count as usable OAuth auth."""
_make_auth_json_with_credential_pool(
"openai-codex",
[
{
"id": "pool1",
"label": "device_code",
"source": "device_code",
"auth_type": "oauth",
"has_access_token": True,
"has_refresh_token": True,
"base_url": "https://chatgpt.com/backend-api/codex",
}
],
tmp_path,
)
from api.onboarding import _provider_oauth_authenticated
assert _provider_oauth_authenticated("openai-codex", tmp_path) is False
def test_status_from_runtime_marks_openai_codex_ready_from_credential_pool(
cleanup_test_sessions, tmp_path
):
"""R18b: provider_ready should be true when auth lives only in credential_pool."""
_make_auth_json_with_credential_pool(
"openai-codex",
[
{
"id": "pool1",
"label": "device_code",
"source": "device_code",
"auth_type": "oauth",
"access_token": "***",
"refresh_token": "***",
"base_url": "https://chatgpt.com/backend-api/codex",
}
],
tmp_path,
)
from api.onboarding import _status_from_runtime
import api.onboarding as _ob
orig_home = _ob._get_active_hermes_home
orig_found = _ob._HERMES_FOUND
_ob._get_active_hermes_home = lambda: tmp_path
_ob._HERMES_FOUND = True
try:
result = _status_from_runtime(
{"model": {"provider": "openai-codex", "default": "codex-mini-latest"}},
True,
)
finally:
_ob._get_active_hermes_home = orig_home
_ob._HERMES_FOUND = orig_found
assert result["provider_configured"] is True
assert result["provider_ready"] is True
assert result["setup_state"] == "ready"