mirror of
https://github.com/Sea-Haven-Industries/open-swe.git
synced 2026-09-30 15:03:16 +00:00
* chore: bake sfw binary into sandbox image (#1611) sfw only ships a launcher that fetches its real binary at first run and does a daily update check against api.github.com/repos/SocketDev/sfw-free. Both fail in the sandbox (restricted egress; the proxy injects the GitHub App installation token, which lacks access to that repo), so `sfw yarn install` errors with "could not fetch its binary". Pin sfw 2.0.6, warm + verify the binary cache at build, and set SFW_SKIP_UPDATE_CHECK=1 so runs use the baked binary offline. * feat: editable plan mode + fix review-plan banner overlap (#1610) * feat: editable plan mode + fix review-plan banner overlap Lets the thread owner edit the plan markdown by hand from the plan-review page (Edit -> textarea -> Save) via a new PUT /dashboard/api/plan/{id} endpoint that re-publishes the plan and mirrors it into the sandbox plan.md, so approve hands the edited plan to the agent as the source of truth. Also fixes the collapsed git-panel's floating expand button covering the "Review plan ->" banner by reserving space for it. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: abort plan approval when the published plan read fails get_plan_content() swallowed store errors and returned None, so a transient failure during approve would still mark the plan approved and dispatch the generic fallback text — silently dropping an owner's edited plan. Read the plan strictly (raise_on_error=True) so approval aborts instead, matching the comment read. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: show message timestamps (#1609) * feat: show message timestamps Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: suppress fallback message timestamps Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: stable message + tool-call hover timestamps Stamp a stable client-side arrival time per message and tool call (keyed by id, persisted to localStorage). Messages render the timestamp inline; tool rows reveal a dim timestamp chip on hover. Real backend created_at still takes precedence when present. * fix: hide client-stamped message timestamps Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: add PR trace resolution (#1612) * feat: add PR trace resolution Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: inject reviewer trace context as JSON Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: address review on PR trace resolution Use the documented LangSmith metadata filter syntax (and(eq(metadata_key,...), eq(metadata_value,...))) instead of has(metadata, '{...}'), which does not match runs — _list_thread_runs was silently returning nothing. Bound full-text searches to a 90-day window so they don't hit LangSmith's large-window rate limit. Also folds in the best-effort branch->head-sha resolver (dropping the weighted scoring/threshold + repo/file evidence + GitHub hydration), sandbox JSON injection, and the admin "Resolve trace" dry-run endpoint. The IDOR findings are moot: resolve_pr_to_threads/summarize_agent_session were removed; resolution now runs deterministically from the trusted run config with no model-controlled pr_url or thread_id. * fix: scope branch trace search to the repo Branch names like fix-tests aren't unique across repos (or older PRs) in a shared tracing project, so an unscoped branch hit could resolve to an unrelated thread and write its runs into the reviewer sandbox. Require the repo slug to co-occur with the branch in matched runs; the full head SHA stays unscoped since it is globally unique. Addresses open-swe review on PR #1612. --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: include plan links in PR descriptions (#1613) Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: gate workflow pushes with approval (#1614) * feat: gate workflow pushes with approval Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: preserve proxy refresh test compatibility Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: bind workflow approvals to pushed ref Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: recover thread work as patch (#1615) * feat: recover thread work as patch Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: search sandbox cwd for recovery patches Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: omit plan link in PR description when no plan exists (#1618) Plan links in PR descriptions were always built from the thread id, so runs that never produced a plan linked to an empty plan-review page. Now the plan content store is consulted first; the link is only added when a plan with non-empty markdown actually exists. A transient store failure degrades gracefully (no link) rather than blocking PR creation. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: add filter & grouping menu to agents threads sidebar (#1617) Add a Cursor-style control to the agents sidebar that groups (None/Date/ Status/Project), filters (ownership, status, source, pull request, model, repo, include-resolved), and compacts the threads list. All client-side over already-fetched sidebar threads; preferences persist in localStorage. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * chore: update langsmith sdk to 0.9.3 (#1616) Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: clickable shared PR header in git panel and reviews (#1620) * feat: clickable shared PR header in git panel and reviews Replace the standalone "View PR" button in the agent git panel with a clickable PR title, matching the reviews view. Extract a shared PrHeader component reused by both the git panel and the review main body. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * refactor: drop PrHeader wrapper, use shared component directly The review-side PrHeader was just a thin adapter mapping detail -> the shared component's props. Inline it at the call site and use the shared PrHeader directly so there's a single component. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * refactor: durable interrupt dispatch + completion webhook (#1621) * wip(rebuild): core reliability spine - remove PR-babysitting (ci_autofix + ci_monitor graph + webhook wiring) - dispatch core: agent/dispatch.py with multitask_strategy=interrupt + durability=sync + completion webhook; reroute all webhook + plan triggers; drop the racy in-process lock + is_thread_active busy-check - completion webhook: agent/completion.py + /webhooks/run-complete loopback route for failure/timeout replies (idempotent) Co-authored-by: open-swe[bot] * feat(rebuild): async tools, reconcile, shared http timeouts, assembly tuning Parallel batch on top of the reliability spine: - async-ify all 24 tools (drop asyncio.run; requests->httpx); re-implement the http_request/fetch_url SSRF + DNS-rebinding defense httpx-natively and harden the IP check to 'not is_global' (+ IPv4-mapped unwrap) - reconcile.py: stale pending-run sweep (threads.search -> per-thread runs.list -> cancel_many), wired into the scheduler graph via task='reconcile' - shared DEFAULT_HTTP_TIMEOUT (agent/utils/http.py) on every bare httpx.AsyncClient() across utils/dashboard/webapp/middleware - run budget: MODEL_CALL_RECURSION_LIMIT 5000->250 - fix stale OpenAI->Anthropic fallback id (claude-opus-4-5 -> 4-8) - drop redundant custom repair middleware (deepagents auto-adds PatchToolCalls) - confirm tool-result eviction + summarization auto-wired via backend - slim system prompt ~8% (full harness-profile rewrite deferred) Co-authored-by: open-swe[bot] * feat(rebuild): harness-profile prompt + split webhooks out of webapp - prompt.py: own the system prompt via a registered harness profile (OPEN_SWE_SHARED_BASE, kept neutral so the read-only reviewer/analyzer that share it stay safe), registered across all 4 providers; per-thread values stay in construct_system_prompt. Assembled main-agent prompt ~6.8k -> ~3.1k tokens (~55% smaller); de-duped PR/commit/suite/force-push guidance; dropped ALL-CAPS markers. - webapp.py 3325 -> 1890 LOC: moved 14 per-source handlers into agent/webhooks/{linear,slack,github}.py; webapp re-exports them for the routes + tests; moved handlers reach shared helpers via the webapp namespace to preserve the test suite's monkeypatch targets. Full suite: 1168 passing, lint clean. Co-authored-by: open-swe[bot] * Restore MODEL_CALL_RECURSION_LIMIT to 5000 for long-running tasks Reverts the 250 cap from the run-budget change — long-running tasks legitimately need many model calls. The notify_step_limit_reached safety net still fires if a run does hit the cap, so runs end with a signal either way. Co-authored-by: open-swe[bot] * fix: address PR review (auth, SSRF, interrupted status, redirect headers) - completion.py: drop `interrupted` from failure statuses — with multitask_strategy=interrupt a follow-up ends the prior run as interrupted, which is healthy, not a failure to report. [open-swe] - /webhooks/run-complete: shared-secret auth — dispatch appends ?token= when RUN_COMPLETE_WEBHOOK_SECRET is set; route verifies via hmac.compare_digest. [corridor-security] - SSRF: extract the URL validator to agent/utils/url_safety.py and apply it before server-side image fetches in multimodal.fetch_image_block. [corridor-security] - http_request: preserve caller headers/extensions across redirect hops instead of dropping them on the first hop. [open-swe] Co-authored-by: open-swe[bot] * chore: remove REBUILD_PLAN.md (planning doc, not needed in the repo) Co-authored-by: open-swe[bot] * fix: fail closed on run-complete webhook auth when secret unset Corridor follow-up: verify_run_complete_token returns False (not True) when RUN_COMPLETE_WEBHOOK_SECRET is unset, so the public route is never unauthenticated. Logs a startup warning when the secret is absent, and dispatch skips registering the webhook when there's no secret (no rejected callbacks). Co-authored-by: open-swe[bot] --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: restore forced tool call to prevent premature run stops (#1622) Restore the ensure_no_empty_msg middleware and the always-call-a-tool system-prompt instruction that #1535 removed. When the model emits a message with no tool call (and hasn't already messaged the user or confirmed completion), the middleware re-injects a no_op / confirming_completion tool call so the run continues instead of ending mid-task. Shipping to test whether it fixes runs that stop halfway through. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * chore(deps): bump langgraph-checkpoint from 4.1.0 to 4.1.1 (#1619) Bumps [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) from 4.1.0 to 4.1.1. - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](https://github.com/langchain-ai/langgraph/compare/checkpoint==4.1.0...checkpoint==4.1.1) --- updated-dependencies: - dependency-name: langgraph-checkpoint dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: post reviewer resolution notes verbatim (#1624) * fix: post reviewer resolution notes verbatim Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: stabilize dashboard follow-up e2e Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: preserve dashboard attribution in e2e Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: make e2e attribution marker durable Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: only echo found e2e attribution Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: check live dashboard attribution in e2e Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * hotfix: stop prompting agent/reviewer to wrap installs in sfw (#1625) Installs hung when prefixed with sfw inside the sandbox (trace 019f0608 stalled on a pending `sfw npm install` execute, never returned). Strip the Socket Firewall guidance from the agent and reviewer prompts so installs run through the project's package manager directly. sfw stays in the Docker image; nothing invokes it now. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: make plan view mobile friendly (#1636) Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: fall back to vision model for image threads (#1626) Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: surface Slack thread errors (#1627) * fix: surface Slack thread errors Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: don't set failure_reply_posted on Slack preprocessing errors The preprocessing error handler was setting failure_reply_posted=True, the same idempotency flag handle_run_completion checks to suppress duplicate run-failure replies. Since preprocessing failures happen before any run exists but the flag persists on the thread, a subsequent run failure on the same thread would be silently ignored. The preprocessing handler already posts its own Slack reply, so the run-completion idempotency flag should not be set here. --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * chore: avoid recapping Slack replies (#1629) * chore: avoid recapping Slack replies Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * chore: simplify Slack reply prompt wording Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> --------- Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: update Slack trace reply on web handoff (#1630) * fix: update Slack trace reply on web handoff Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: trigger web handoff on dashboard starts Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: format web handoff as contextual fragment Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: preserve trace_message_ts when overwriting Slack run mapping When store_slack_run_mapping is called without trace_message_ts (e.g. on follow-up Slack mentions), it was unconditionally overwriting the thread-level mapping and clobbering the timestamp captured from the initial trace reply. After that, _notify_slack_web_handoff could not find the original message, so a subsequent move to Web silently skipped the Slack trace update. Now, when trace_message_ts is not passed, the existing thread mapping is read first and its trace_message_ts is preserved. * style: ruff format --------- Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> Co-authored-by: Johannes du Plessis <51395795+johannes117@users.noreply.github.com> Co-authored-by: Johannes du Plessis <johannes@langchain.dev> * fix: pre-bundle shiki/@pierre deps to stop dev dynamic-import failures (#1643) * fix(ui): pre-bundle shiki/@pierre deps to stop dev dynamic-import failures shiki lazy-imports a grammar per language and these libs only live inside lazy route components, so Vite's startup scanner never sees them. They get discovered on first thread navigation, triggering a dep re-optimize + force-reload that aborts the in-flight route-chunk import, surfacing as "Failed to fetch dynamically imported module: .../$threadId.tsx". Pre-bundle them (and the github themes + common code-block languages) via optimizeDeps.include so the optimize happens once at startup. Dev-only; production bundles are unaffected. * fix: pre-bundle canonical shiki docker/make langs instead of aliases --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: show queued dashboard follow-ups (#1631) * feat: show queued dashboard follow-ups Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: de-dupe queued follow-ups while streaming --------- Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> Co-authored-by: Johannes du Plessis <johannes@langchain.dev> * feat: notify Slack on plan approval (#1632) * feat: notify Slack on plan approval Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: post Slack approval notice after successful dispatch Move the _maybe_post_plan_approved_to_slack call until after _dispatch_followup succeeds so the Slack thread is not told implementation is beginning before the LangGraph run is created. Addresses PR review comment. --------- Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> Co-authored-by: Johannes du Plessis <johannes@langchain.dev> * feat: include Slack channel context in prompts (#1633) Add cached Slack channel metadata enrichment for Slack-triggered runs so prompts can include channel names and descriptions without duplicate conversations.info calls.\n\nCo-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> * chore: keep plan guidance high-level (#1634) Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: publish plans from sandbox files (#1635) * feat: publish plans from sandbox files Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: avoid fixed plan filenames Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: virtualize local sandbox file paths Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: preserve plan_file_path across set_plan_status set_plan_status was rewriting the content record with only markdown and status, dropping plan_file_path. After a reject, the owner's dashboard edit would mirror to a different file than the agent's original, and the next save_plan could republish the stale file. Preserve plan_file_path when updating status. --------- Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: return to thread after plan approval (#1637) Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: add Slack breakout thread tool (#1638) * feat: add Slack breakout thread tool Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * chore: make fake LLM scripts declarative Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: exclude slack_start_new_thread from plan mode The breakout tool can dispatch a fresh agent run that starts outside the current plan-mode state, bypassing the approval flow. Add it to PLAN_MODE_EXCLUDED_TOOLS so it's hidden alongside the other mutating tools while planning. --------- Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * chore: require bun for ui agent work (#1639) Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: request actions read for sandbox logs (#1642) * fix: request actions read for sandbox logs Request optional Actions read permission for sandbox proxy tokens, with fallback for installations that have not approved it yet. Update setup docs and prompt guidance for safe GitHub Actions log usage. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: restore actions:read scope after workflow push After an approved workflow push, the guard was restoring the proxy with BASE_RUNTIME_PROXY_TOKEN_PERMISSIONS, which excludes the actions: read scope this PR adds. Restore with RUNTIME_PROXY_TOKEN_PERMISSIONS (which includes actions: read) and fall back to BASE if the install hasn't granted Actions read — mirroring the pattern in _create_sandbox_with_proxy. Addresses review comment on PR #1642. --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * fix: widen split review diffs (#1647) Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * chore: install missing deps before verification (#1646) Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * chore: switch ui to pnpm (#1645) * chore: require pnpm for ui agent work Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * chore: switch ui to pnpm Replace Bun and Yarn lockfiles with pnpm lockfile and update UI/Vercel commands to use pnpm. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * ci: use corepack for ui pnpm e2e build Run pnpm through Corepack in the E2E global setup so CI can use the pinned package manager without a separate pnpm install step. Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * feat: add Sonnet 5 to model picker (#1651) * chore: update Sonnet examples to Sonnet 5 Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * chore: add Sonnet 5 to model picker Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> * Remove dead breakout-thread e2e scenario after dropping the tool The merge resolution deferred upstream's Slack breakout-thread tool (slack_start_new_thread, #1638) since it depends on the #1621 dispatch module, but the e2e harness still scripted it. Removing the tool name from fake_llm.py's _tool_step call left a malformed scenario, crashing the langgraph-dev web server at import (TypeError: _tool_step() missing 'call_id') and failing Playwright E2E. Drop the "breakout" script scenario, its _is_breakout_request helper + ScriptRule, and the corresponding full_flow.spec.ts test. * Revert upstream pnpm switch; keep bun for the UI build The merge auto-adopted upstream's pnpm switch (#1645) in tests/e2e/ global-setup.ts and ui/package.json, but our fork builds the UI with bun (vercel.json + the E2E workflow's setup-bun). That left the Playwright globalSetup running `corepack pnpm install --frozen-lockfile` with no pnpm-lock.yaml, failing E2E at UI build time. Revert global-setup.ts and ui/package.json to the dev (bun) baseline, drop the merge-added ui/pnpm-lock.yaml, and remove the re-added ui/AGENTS.md (our fork had deleted it). * Align plan-review e2e + UI with the HEAD (pre-#1635) backend The merge left a split plan vertical: the backend save_plan/plan_api are HEAD (we deferred the editable-plan/sandbox-publish features #1610/#1635/ #1637 per #80), but the plan UI and e2e harness were upstream's. The fake_llm scenario called save_plan(plan_file_path=...) — upstream's file-based #1635 contract — while HEAD save_plan takes plan_markdown, so the plan never saved and PlanReview never rendered (E2E failure on the plan-review locator). Pass plan_markdown to save_plan, and revert PlanReview.tsx / plan.ts / $threadId_.plan.tsx / plan_review.spec.ts to the dev baseline so the whole plan flow (save -> render -> approve -> implement) is consistent with the HEAD backend. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Johannes du Plessis <johannes@langchain.dev> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> Co-authored-by: Ramon Nogueira <ramon.nogueira@langchain.dev> Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: Caroline di Vittorio <43390382+carolinedivittorio@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Johannes du Plessis <51395795+johannes117@users.noreply.github.com> Co-authored-by: Ankush Gola <9536492+agola11@users.noreply.github.com> Co-authored-by: Mukil Loganathan <mukil@langchain.dev>
648 lines
22 KiB
Python
648 lines
22 KiB
Python
from __future__ import annotations
|
|
|
|
import asyncio
|
|
import importlib
|
|
from types import SimpleNamespace
|
|
from typing import Any
|
|
|
|
import pytest
|
|
from fastapi import HTTPException
|
|
|
|
from agent.dashboard import review_chat_api
|
|
|
|
# `agent.tools.__init__` rebinds these names to the tool *functions*, shadowing
|
|
# the submodules. Import the real modules so we can monkeypatch their globals.
|
|
list_review_findings = importlib.import_module("agent.tools.list_review_findings")
|
|
read_repo_file = importlib.import_module("agent.tools.read_repo_file")
|
|
search_repo_code = importlib.import_module("agent.tools.search_repo_code")
|
|
|
|
|
|
def _fake_async_client(handler):
|
|
"""Build a fake ``httpx.AsyncClient`` factory whose ``get`` calls ``handler``.
|
|
|
|
``handler(url, headers=..., params=...)`` returns the response object.
|
|
"""
|
|
|
|
class _FakeClient:
|
|
def __init__(self, *args, **kwargs):
|
|
pass
|
|
|
|
async def __aenter__(self):
|
|
return self
|
|
|
|
async def __aexit__(self, *exc):
|
|
return False
|
|
|
|
async def get(self, url, headers=None, params=None):
|
|
return handler(url, headers=headers, params=params)
|
|
|
|
return _FakeClient
|
|
|
|
|
|
# --- chat thread list / delete / title ---------------------------------------
|
|
|
|
|
|
def test_derive_title_from_first_user_message() -> None:
|
|
params = {
|
|
"input": {"messages": [{"type": "human", "content": " Why did we drop\nstructs? "}]}
|
|
}
|
|
assert review_chat_api._derive_title(params) == "Why did we drop structs?"
|
|
|
|
|
|
def test_derive_title_defaults_when_no_message() -> None:
|
|
assert review_chat_api._derive_title({"input": {"messages": []}}) == "New chat"
|
|
|
|
|
|
def test_derive_title_truncates() -> None:
|
|
params = {"input": {"messages": [{"type": "human", "content": "x" * 200}]}}
|
|
assert len(review_chat_api._derive_title(params)) == review_chat_api._TITLE_MAX_CHARS
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_list_review_chat_threads_scopes_and_maps(monkeypatch) -> None:
|
|
captured: dict[str, Any] = {}
|
|
|
|
async def search(**kwargs: Any) -> list[dict[str, Any]]:
|
|
captured["metadata"] = kwargs.get("metadata")
|
|
return [
|
|
{
|
|
"thread_id": "c1",
|
|
"updated_at": "2026-06-15T00:00:00Z",
|
|
"metadata": {"title": "Why structs?"},
|
|
},
|
|
{"thread_id": "c2", "metadata": {}}, # untitled -> default label
|
|
]
|
|
|
|
client = SimpleNamespace(threads=SimpleNamespace(search=search))
|
|
monkeypatch.setattr(review_chat_api, "langgraph_client", lambda: client)
|
|
|
|
threads = await review_chat_api.list_review_chat_threads("acme", "repo", 7, "octocat")
|
|
assert captured["metadata"] == {
|
|
"kind": "review_chat",
|
|
"github_login": "octocat",
|
|
"repo_owner": "acme",
|
|
"repo_name": "repo",
|
|
"pr_number": 7,
|
|
}
|
|
assert threads[0] == {
|
|
"thread_id": "c1",
|
|
"title": "Why structs?",
|
|
"updated_at": "2026-06-15T00:00:00Z",
|
|
}
|
|
assert threads[1]["title"] == "New chat"
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_delete_review_chat_thread_checks_ownership(monkeypatch) -> None:
|
|
deleted: list[str] = []
|
|
|
|
async def get(thread_id: str) -> dict[str, Any]:
|
|
return {
|
|
"thread_id": thread_id,
|
|
"metadata": {
|
|
"kind": "review_chat",
|
|
"github_login": "octocat",
|
|
"repo_owner": "acme",
|
|
"repo_name": "repo",
|
|
"pr_number": 7,
|
|
},
|
|
}
|
|
|
|
async def delete(thread_id: str) -> None:
|
|
deleted.append(thread_id)
|
|
|
|
client = SimpleNamespace(threads=SimpleNamespace(get=get, delete=delete))
|
|
monkeypatch.setattr(review_chat_api, "langgraph_client", lambda: client)
|
|
|
|
await review_chat_api.delete_review_chat_thread("acme", "repo", 7, "octocat", "c1")
|
|
assert deleted == ["c1"]
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_delete_review_chat_thread_rejects_other_user(monkeypatch) -> None:
|
|
async def get(thread_id: str) -> dict[str, Any]:
|
|
return {
|
|
"thread_id": thread_id,
|
|
"metadata": {"kind": "review_chat", "github_login": "hubot"},
|
|
}
|
|
|
|
async def delete(thread_id: str) -> None:
|
|
raise AssertionError("should not delete another user's chat")
|
|
|
|
client = SimpleNamespace(threads=SimpleNamespace(get=get, delete=delete))
|
|
monkeypatch.setattr(review_chat_api, "langgraph_client", lambda: client)
|
|
|
|
with pytest.raises(Exception): # noqa: B017,PT011 - HTTPException(404)
|
|
await review_chat_api.delete_review_chat_thread("acme", "repo", 7, "octocat", "c1")
|
|
|
|
|
|
def _patch_thread_metadata(monkeypatch, metadata: dict[str, Any] | None) -> None:
|
|
async def get(thread_id: str) -> dict[str, Any]:
|
|
if metadata is None:
|
|
raise RuntimeError("not found")
|
|
return {"thread_id": thread_id, "metadata": metadata}
|
|
|
|
client = SimpleNamespace(threads=SimpleNamespace(get=get))
|
|
monkeypatch.setattr(review_chat_api, "langgraph_client", lambda: client)
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_assert_chat_thread_access_allows_owner(monkeypatch) -> None:
|
|
_patch_thread_metadata(
|
|
monkeypatch,
|
|
{
|
|
"kind": "review_chat",
|
|
"github_login": "octocat",
|
|
"repo_owner": "acme",
|
|
"repo_name": "repo",
|
|
"pr_number": 7,
|
|
},
|
|
)
|
|
meta = await review_chat_api.assert_chat_thread_access("ct-1", "acme", "repo", 7, "octocat")
|
|
assert meta is not None
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_assert_chat_thread_access_missing_thread_returns_none(monkeypatch) -> None:
|
|
_patch_thread_metadata(monkeypatch, None)
|
|
assert (
|
|
await review_chat_api.assert_chat_thread_access("ct-1", "acme", "repo", 7, "octocat")
|
|
is None
|
|
)
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
@pytest.mark.parametrize(
|
|
"metadata",
|
|
[
|
|
{ # another user's chat thread
|
|
"kind": "review_chat",
|
|
"github_login": "hubot",
|
|
"repo_owner": "acme",
|
|
"repo_name": "repo",
|
|
"pr_number": 7,
|
|
},
|
|
{ # a reviewer (non-chat) thread with the same deterministic id space
|
|
"kind": "reviewer",
|
|
"github_login": "octocat",
|
|
"repo_owner": "acme",
|
|
"repo_name": "repo",
|
|
"pr_number": 7,
|
|
},
|
|
{ # right user, wrong PR scope
|
|
"kind": "review_chat",
|
|
"github_login": "octocat",
|
|
"repo_owner": "acme",
|
|
"repo_name": "repo",
|
|
"pr_number": 8,
|
|
},
|
|
],
|
|
)
|
|
async def test_assert_chat_thread_access_rejects_unauthorized(monkeypatch, metadata) -> None:
|
|
_patch_thread_metadata(monkeypatch, metadata)
|
|
with pytest.raises(Exception): # noqa: B017,PT011 - HTTPException(404)
|
|
await review_chat_api.assert_chat_thread_access("ct-1", "acme", "repo", 7, "octocat")
|
|
|
|
|
|
# --- tools -------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_list_review_findings_compacts_and_filters(monkeypatch) -> None:
|
|
monkeypatch.setattr(
|
|
list_review_findings,
|
|
"get_config",
|
|
lambda: {"configurable": {"reviewer_thread_id": "rt-1"}},
|
|
)
|
|
|
|
async def fake_list(thread_id: str) -> list[dict[str, Any]]:
|
|
assert thread_id == "rt-1"
|
|
return [
|
|
{
|
|
"id": "f1",
|
|
"title": "Open one",
|
|
"status": "open",
|
|
"severity": "high",
|
|
"github_review_comment_id": 999,
|
|
},
|
|
{"id": "f2", "title": "Closed one", "status": "resolved", "severity": "low"},
|
|
]
|
|
|
|
monkeypatch.setattr(list_review_findings, "list_findings_async", fake_list)
|
|
|
|
result = await list_review_findings.list_review_findings(status_filter="open")
|
|
assert result["count"] == 1
|
|
finding = result["findings"][0]
|
|
assert finding["id"] == "f1"
|
|
# compact view drops GitHub plumbing fields
|
|
assert "github_review_comment_id" not in finding
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_list_review_findings_requires_reviewer_thread(monkeypatch) -> None:
|
|
monkeypatch.setattr(list_review_findings, "get_config", lambda: {"configurable": {}})
|
|
result = await list_review_findings.list_review_findings()
|
|
assert result["count"] == 0
|
|
assert "reviewer thread" in result["error"]
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_read_repo_file_decodes_file(monkeypatch) -> None:
|
|
import base64
|
|
|
|
monkeypatch.setattr(
|
|
read_repo_file,
|
|
"get_config",
|
|
lambda: {
|
|
"configurable": {
|
|
"chat_repo_owner": "acme",
|
|
"chat_repo_name": "repo",
|
|
"chat_github_token": "tok",
|
|
"chat_head_sha": "deadbeef",
|
|
}
|
|
},
|
|
)
|
|
|
|
captured: dict[str, Any] = {}
|
|
|
|
def fake_get(url, headers=None, params=None):
|
|
captured["url"] = url
|
|
captured["params"] = params
|
|
return SimpleNamespace(
|
|
status_code=200,
|
|
json=lambda: {"type": "file", "content": base64.b64encode(b"hello\nworld").decode()},
|
|
)
|
|
|
|
monkeypatch.setattr(read_repo_file.httpx, "AsyncClient", _fake_async_client(fake_get))
|
|
|
|
result = await read_repo_file.read_repo_file("src/app.py")
|
|
assert result["success"] is True
|
|
assert result["content"] == "hello\nworld"
|
|
assert result["ref"] == "deadbeef" # defaults to head sha
|
|
assert captured["params"] == {"ref": "deadbeef"}
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_read_repo_file_lists_directory(monkeypatch) -> None:
|
|
monkeypatch.setattr(
|
|
read_repo_file,
|
|
"get_config",
|
|
lambda: {
|
|
"configurable": {
|
|
"chat_repo_owner": "acme",
|
|
"chat_repo_name": "repo",
|
|
"chat_github_token": "tok",
|
|
}
|
|
},
|
|
)
|
|
|
|
def fake_get(url, headers=None, params=None):
|
|
return SimpleNamespace(
|
|
status_code=200,
|
|
json=lambda: [
|
|
{"name": "a.py", "type": "file", "path": "src/a.py"},
|
|
{"name": "sub", "type": "dir", "path": "src/sub"},
|
|
],
|
|
)
|
|
|
|
monkeypatch.setattr(read_repo_file.httpx, "AsyncClient", _fake_async_client(fake_get))
|
|
result = await read_repo_file.read_repo_file("src")
|
|
assert result["success"] is True
|
|
assert {e["name"] for e in result["entries"]} == {"a.py", "sub"}
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_read_repo_file_missing_context(monkeypatch) -> None:
|
|
monkeypatch.setattr(read_repo_file, "get_config", lambda: {"configurable": {}})
|
|
result = await read_repo_file.read_repo_file("src/app.py")
|
|
assert result["success"] is False
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_search_repo_code_scopes_to_repo(monkeypatch) -> None:
|
|
monkeypatch.setattr(
|
|
search_repo_code,
|
|
"get_config",
|
|
lambda: {
|
|
"configurable": {
|
|
"chat_repo_owner": "acme",
|
|
"chat_repo_name": "repo",
|
|
"chat_github_token": "tok",
|
|
}
|
|
},
|
|
)
|
|
captured: dict[str, Any] = {}
|
|
|
|
def fake_get(url, headers=None, params=None):
|
|
captured["params"] = params
|
|
return SimpleNamespace(
|
|
status_code=200,
|
|
json=lambda: {
|
|
"total_count": 1,
|
|
"items": [{"path": "src/a.py", "text_matches": [{"fragment": "def foo()"}]}],
|
|
},
|
|
)
|
|
|
|
monkeypatch.setattr(search_repo_code.httpx, "AsyncClient", _fake_async_client(fake_get))
|
|
result = await search_repo_code.search_repo_code("foo")
|
|
assert result["success"] is True
|
|
assert "repo:acme/repo" in captured["params"]["q"]
|
|
assert result["results"][0]["path"] == "src/a.py"
|
|
|
|
|
|
# --- proxy enrichment --------------------------------------------------------
|
|
|
|
|
|
def _fake_review() -> dict[str, Any]:
|
|
return {
|
|
"title": "Fix things",
|
|
"number": 7,
|
|
"full_name": "acme/repo",
|
|
"author": "octocat",
|
|
"head_ref": "feature",
|
|
"base_ref": "main",
|
|
"head_sha": "abc123def456",
|
|
"findings": [
|
|
{
|
|
"id": "f1",
|
|
"title": "Bug",
|
|
"severity": "high",
|
|
"confidence": "high",
|
|
"status": "open",
|
|
"file": "src/a.py",
|
|
"start_line": 5,
|
|
"description": "boom",
|
|
"group": "bug",
|
|
},
|
|
],
|
|
"pr": {
|
|
"state": "open",
|
|
"body": "desc",
|
|
"additions": 1,
|
|
"deletions": 2,
|
|
"changed_files": 1,
|
|
"commits": 1,
|
|
"head_sha": "abc123def456",
|
|
},
|
|
}
|
|
|
|
|
|
def _client_for_enrich(existing_metadata: dict[str, Any] | None) -> tuple[Any, dict[str, Any]]:
|
|
captured: dict[str, Any] = {"created": False, "updated": []}
|
|
|
|
async def get(thread_id: str) -> dict[str, Any]:
|
|
if existing_metadata is None:
|
|
raise RuntimeError("not found")
|
|
return {"thread_id": thread_id, "metadata": existing_metadata}
|
|
|
|
async def create(**kwargs: Any) -> None:
|
|
captured["created"] = True
|
|
|
|
async def update(**kwargs: Any) -> None:
|
|
captured["updated"].append(kwargs.get("metadata"))
|
|
|
|
client = SimpleNamespace(threads=SimpleNamespace(get=get, create=create, update=update))
|
|
return client, captured
|
|
|
|
|
|
def _patch_enrich_deps(
|
|
monkeypatch, *, metadata: dict[str, Any] | None, current_head: str = "abc123def456"
|
|
) -> dict[str, Any]:
|
|
client, captured = _client_for_enrich(metadata)
|
|
monkeypatch.setattr(review_chat_api, "langgraph_client", lambda: client)
|
|
|
|
async def fake_get_review(owner, repo, pr_number):
|
|
return _fake_review()
|
|
|
|
async def fake_diff(*, owner, repo, pr_number, token):
|
|
return "diff --git a/x b/x\n+added\n"
|
|
|
|
async def fake_token(repositories=None):
|
|
return "app-token"
|
|
|
|
async def fake_head(owner, repo, pr_number):
|
|
captured["head_calls"] = captured.get("head_calls", 0) + 1
|
|
return current_head
|
|
|
|
monkeypatch.setattr(review_chat_api, "get_review", fake_get_review)
|
|
monkeypatch.setattr(review_chat_api, "fetch_pr_diff", fake_diff)
|
|
monkeypatch.setattr(review_chat_api, "get_github_app_installation_token", fake_token)
|
|
monkeypatch.setattr(review_chat_api, "get_pr_head_sha", fake_head)
|
|
return captured
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_enrich_chat_command_seeds_context_on_create(monkeypatch) -> None:
|
|
_patch_enrich_deps(monkeypatch, metadata=None)
|
|
command = {"method": "run.start", "params": {"input": {"messages": []}}}
|
|
|
|
enriched = await review_chat_api._enrich_chat_command(
|
|
command, owner="acme", repo="repo", pr_number=7, login="octocat", thread_id="ct-1"
|
|
)
|
|
|
|
params = enriched["params"]
|
|
assert params["assistant_id"] == "chat"
|
|
configurable = params["config"]["configurable"]
|
|
assert configurable["chat_repo_owner"] == "acme"
|
|
assert configurable["chat_repo_name"] == "repo"
|
|
assert configurable["chat_pr_number"] == 7
|
|
assert configurable["chat_head_sha"] == "abc123def456"
|
|
assert configurable["reviewer_thread_id"] == review_chat_api.reviewer_thread_id(
|
|
"acme", "repo", 7
|
|
)
|
|
files = params["input"]["files"]
|
|
assert set(files) == {"/pr/overview.md", "/pr/diff.patch", "/pr/findings.md"}
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_enrich_chat_command_reuses_context_when_head_unchanged(monkeypatch) -> None:
|
|
# Stored head matches the current review head -> no reseed.
|
|
captured = _patch_enrich_deps(
|
|
monkeypatch, metadata={"kind": "review_chat", "chat_head_sha": "abc123def456"}
|
|
)
|
|
command = {"method": "run.start", "params": {"input": {"messages": []}}}
|
|
|
|
enriched = await review_chat_api._enrich_chat_command(
|
|
command, owner="acme", repo="repo", pr_number=7, login="octocat", thread_id="ct-1"
|
|
)
|
|
|
|
params = enriched["params"]
|
|
# No re-seeding of files when the head hasn't moved.
|
|
assert "files" not in params["input"]
|
|
assert params["config"]["configurable"]["chat_head_sha"] == "abc123def456"
|
|
assert captured["created"] is False
|
|
assert captured["updated"] == []
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_enrich_chat_command_reseeds_on_head_change(monkeypatch) -> None:
|
|
# Stored head is stale relative to the current review head -> reseed.
|
|
captured = _patch_enrich_deps(
|
|
monkeypatch, metadata={"kind": "review_chat", "chat_head_sha": "old-stale-sha"}
|
|
)
|
|
command = {"method": "run.start", "params": {"input": {"messages": []}}}
|
|
|
|
enriched = await review_chat_api._enrich_chat_command(
|
|
command, owner="acme", repo="repo", pr_number=7, login="octocat", thread_id="ct-1"
|
|
)
|
|
|
|
params = enriched["params"]
|
|
files = params["input"]["files"]
|
|
assert set(files) == {"/pr/overview.md", "/pr/diff.patch", "/pr/findings.md"}
|
|
assert params["config"]["configurable"]["chat_head_sha"] == "abc123def456"
|
|
assert {"chat_head_sha": "abc123def456"} in captured["updated"]
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_enrich_chat_command_keeps_context_when_reseed_fails(monkeypatch) -> None:
|
|
# Existing chat whose head moved, but loading the fresh context fails: the
|
|
# command must keep answering from the last seeded context instead of erroring.
|
|
captured = _patch_enrich_deps(
|
|
monkeypatch,
|
|
metadata={"kind": "review_chat", "chat_head_sha": "old-stale-sha"},
|
|
current_head="new-head-sha",
|
|
)
|
|
|
|
async def failing_build(*args, **kwargs):
|
|
raise HTTPException(404, "review not found")
|
|
|
|
monkeypatch.setattr(review_chat_api, "_build_pr_context", failing_build)
|
|
command = {"method": "run.start", "params": {"input": {"messages": []}}}
|
|
|
|
enriched = await review_chat_api._enrich_chat_command(
|
|
command,
|
|
owner="acme",
|
|
repo="repo",
|
|
pr_number=7,
|
|
login="octocat",
|
|
thread_id="ct-1",
|
|
thread_metadata={"kind": "review_chat", "chat_head_sha": "old-stale-sha"},
|
|
)
|
|
|
|
params = enriched["params"]
|
|
assert "files" not in params["input"] # no reseed
|
|
assert params["config"]["configurable"]["chat_head_sha"] == "old-stale-sha"
|
|
assert params["assistant_id"] == "chat"
|
|
assert captured["updated"] == [] # head metadata not advanced on failure
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_enrich_chat_command_surfaces_reseed_failure_on_create(monkeypatch) -> None:
|
|
# A brand-new chat has no prior context to fall back to, so a seeding failure
|
|
# must surface rather than silently produce an empty conversation.
|
|
_patch_enrich_deps(monkeypatch, metadata=None)
|
|
|
|
async def failing_build(*args, **kwargs):
|
|
raise HTTPException(404, "review not found")
|
|
|
|
monkeypatch.setattr(review_chat_api, "_build_pr_context", failing_build)
|
|
command = {"method": "run.start", "params": {"input": {"messages": []}}}
|
|
|
|
with pytest.raises(HTTPException):
|
|
await review_chat_api._enrich_chat_command(
|
|
command, owner="acme", repo="repo", pr_number=7, login="octocat", thread_id="ct-1"
|
|
)
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_enrich_chat_command_uses_passed_metadata_without_refetch(monkeypatch) -> None:
|
|
# When the caller supplies the already-fetched metadata, enrichment must not
|
|
# issue a second thread read on the hot path.
|
|
captured = _patch_enrich_deps(
|
|
monkeypatch, metadata={"kind": "review_chat", "chat_head_sha": "abc123def456"}
|
|
)
|
|
|
|
async def boom(thread_id: str) -> None:
|
|
raise AssertionError("metadata was supplied; must not refetch the thread")
|
|
|
|
monkeypatch.setattr(review_chat_api, "_get_chat_thread_metadata", boom)
|
|
command = {"method": "run.start", "params": {"input": {"messages": []}}}
|
|
|
|
enriched = await review_chat_api._enrich_chat_command(
|
|
command,
|
|
owner="acme",
|
|
repo="repo",
|
|
pr_number=7,
|
|
login="octocat",
|
|
thread_id="ct-1",
|
|
thread_metadata={"kind": "review_chat", "chat_head_sha": "abc123def456"},
|
|
)
|
|
|
|
assert enriched["params"]["config"]["configurable"]["chat_head_sha"] == "abc123def456"
|
|
assert "files" not in enriched["params"]["input"]
|
|
assert captured.get("head_calls") == 1 # lightweight head lookup, no full get_review
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_enrich_chat_command_ignores_non_run_start(monkeypatch) -> None:
|
|
_patch_enrich_deps(monkeypatch, metadata=None)
|
|
command = {"method": "something.else", "params": {}}
|
|
enriched = await review_chat_api._enrich_chat_command(
|
|
command, owner="acme", repo="repo", pr_number=7, login="octocat", thread_id="ct-1"
|
|
)
|
|
assert enriched == command
|
|
assert "assistant_id" not in enriched["params"]
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_proxy_state_normalizes_missing_thread(monkeypatch) -> None:
|
|
async def fake_passthrough(method, thread_id, suffix, body, content_type):
|
|
return 404, b"not found", "text/plain"
|
|
|
|
async def no_thread(thread_id: str) -> None:
|
|
return None
|
|
|
|
monkeypatch.setattr(review_chat_api, "_proxy_passthrough", fake_passthrough)
|
|
monkeypatch.setattr(review_chat_api, "_get_chat_thread_metadata", no_thread)
|
|
status, content, media_type = await review_chat_api.proxy_review_chat_state(
|
|
"acme", "repo", 7, "octocat", "ct-1"
|
|
)
|
|
assert status == 200
|
|
assert b'"next": []' in content
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_proxy_history_normalizes_missing_thread(monkeypatch) -> None:
|
|
async def fake_passthrough(method, thread_id, suffix, body, content_type):
|
|
return 404, b"not found", "text/plain"
|
|
|
|
async def no_thread(thread_id: str) -> None:
|
|
return None
|
|
|
|
monkeypatch.setattr(review_chat_api, "_proxy_passthrough", fake_passthrough)
|
|
monkeypatch.setattr(review_chat_api, "_get_chat_thread_metadata", no_thread)
|
|
status, content, _ = await review_chat_api.proxy_review_chat_history(
|
|
"acme", "repo", 7, "octocat", "ct-1", b"{}"
|
|
)
|
|
assert status == 200
|
|
assert content == b"[]"
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_proxy_state_rejects_foreign_thread(monkeypatch) -> None:
|
|
async def other_owner(thread_id: str) -> dict[str, Any]:
|
|
return {
|
|
"kind": "review_chat",
|
|
"github_login": "hubot",
|
|
"repo_owner": "acme",
|
|
"repo_name": "repo",
|
|
"pr_number": 7,
|
|
}
|
|
|
|
async def fake_passthrough(*args, **kwargs):
|
|
raise AssertionError("must not proxy a thread the caller doesn't own")
|
|
|
|
monkeypatch.setattr(review_chat_api, "_get_chat_thread_metadata", other_owner)
|
|
monkeypatch.setattr(review_chat_api, "_proxy_passthrough", fake_passthrough)
|
|
with pytest.raises(Exception): # noqa: B017,PT011 - HTTPException(404)
|
|
await review_chat_api.proxy_review_chat_state("acme", "repo", 7, "octocat", "ct-1")
|
|
|
|
|
|
# --- graph factory guard -----------------------------------------------------
|
|
|
|
|
|
def test_get_chat_agent_returns_trivial_when_not_for_execution() -> None:
|
|
from agent.chat import get_chat_agent
|
|
|
|
graph = asyncio.run(get_chat_agent({"configurable": {"thread_id": None}}))
|
|
assert graph is not None
|