mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-07-21 16:18:55 +00:00
c80b244b52
The per-session record store is now the ONLY cwd mechanism. Deleted: - env.cwd_owner stamping + prev_owner threading (terminal_tool): the shared env no longer carries ownership metadata at all - _resolve_command_cwd's env/prev_owner params: resolution is workdir > session record > config/override default - file_tools._live_cwd_if_owned + _get_live_tracking_cwd: path resolution never consults the shared env's live cwd - file_tools._last_known_cwd + _remember_last_known_cwd + _last_known_cwd_for: the #26211 preserved-anchor registry is subsumed by the session record, which never lived on the env and therefore cannot be lost to env cleanup. The _get_file_ops stale-cache rescue now writes the record instead. - env recreation (both _get_file_ops and terminal_tool) seeds the fresh env from override > session record > config Why no transition fallback: the legacy state was process-local and in-memory exactly like the record store — after a restart both start empty, and within a running process every legacy write site has been dual-writing the record since step 1. There is no populated-legacy/ empty-record state to fall back for. Tests updated to drive the record store instead of the deleted mechanism; the cross-session isolation suite now asserts the same behavior contracts (no leak, cd isolation, #26211 persistence) against the new architecture, plus a new "session C inherits nothing" case that the old ownership guard could not express.
244 lines
9.7 KiB
Python
244 lines
9.7 KiB
Python
"""Session-cwd record store (cwd rearchitecture, step 1: dual-write).
|
|
|
|
The store is the future single source of truth for per-session working
|
|
directories. Step 1 only guarantees the WRITE side: every path that learns a
|
|
session's live cwd must record it under the raw session key. Readers still
|
|
use the legacy env.cwd ladder; these tests pin the invariants the later
|
|
read-side flip will rely on.
|
|
"""
|
|
|
|
import pytest
|
|
|
|
import tools.terminal_tool as tt
|
|
|
|
|
|
@pytest.fixture(autouse=True)
|
|
def _clean_store(monkeypatch):
|
|
monkeypatch.setattr(tt, "_session_cwd", {})
|
|
monkeypatch.setattr(tt, "_task_env_overrides", {})
|
|
|
|
|
|
class TestRecordSemantics:
|
|
def test_records_are_keyed_by_raw_session_key(self):
|
|
tt.record_session_cwd("sess-a", "/wt/a")
|
|
tt.record_session_cwd("sess-b", "/wt/b")
|
|
# No cross-talk: each session reads back exactly its own record.
|
|
assert tt.get_session_cwd("sess-a") == "/wt/a"
|
|
assert tt.get_session_cwd("sess-b") == "/wt/b"
|
|
assert tt.get_session_cwd("sess-c") is None
|
|
|
|
def test_none_and_empty_keys_collapse_to_default(self):
|
|
tt.record_session_cwd(None, "/somewhere")
|
|
assert tt.get_session_cwd(None) == "/somewhere"
|
|
assert tt.get_session_cwd("") == "/somewhere"
|
|
assert tt.get_session_cwd("default") == "/somewhere"
|
|
|
|
def test_invalid_cwd_values_are_ignored(self):
|
|
tt.record_session_cwd("sess-a", None)
|
|
tt.record_session_cwd("sess-a", "")
|
|
tt.record_session_cwd("sess-a", " ")
|
|
tt.record_session_cwd("sess-a", 123) # type: ignore[arg-type]
|
|
assert tt.get_session_cwd("sess-a") is None
|
|
|
|
def test_clear_drops_only_the_named_session(self):
|
|
tt.record_session_cwd("sess-a", "/wt/a")
|
|
tt.record_session_cwd("sess-b", "/wt/b")
|
|
tt.clear_session_cwd("sess-a")
|
|
assert tt.get_session_cwd("sess-a") is None
|
|
assert tt.get_session_cwd("sess-b") == "/wt/b"
|
|
|
|
|
|
class TestDualWriteSites:
|
|
def test_register_cwd_override_seeds_the_session_record(self):
|
|
"""A registered workspace cwd IS the session's cwd until a `cd`."""
|
|
tt.register_task_env_overrides("desktop-sess", {"cwd": "/wt/desktop"})
|
|
assert tt.get_session_cwd("desktop-sess") == "/wt/desktop"
|
|
|
|
def test_register_without_cwd_does_not_touch_the_record(self):
|
|
tt.register_task_env_overrides("rl-42", {"docker_image": "x:y"})
|
|
assert tt.get_session_cwd("rl-42") is None
|
|
|
|
def test_clear_task_env_overrides_drops_the_record(self):
|
|
tt.register_task_env_overrides("desktop-sess", {"cwd": "/wt/desktop"})
|
|
tt.clear_task_env_overrides("desktop-sess")
|
|
assert tt.get_session_cwd("desktop-sess") is None
|
|
|
|
def test_reregistration_updates_the_record(self):
|
|
"""ACP session/load switching project roots mid-session."""
|
|
tt.register_task_env_overrides("acp-sess", {"cwd": "/proj/one"})
|
|
tt.register_task_env_overrides("acp-sess", {"cwd": "/proj/two"})
|
|
assert tt.get_session_cwd("acp-sess") == "/proj/two"
|
|
|
|
|
|
class TestPostCommandDualWrite:
|
|
"""The env's post-command cwd tracking must mirror into the session record."""
|
|
|
|
def _run(self, monkeypatch, task_id, env):
|
|
import json
|
|
monkeypatch.setattr(tt, "_active_environments", {task_id: env})
|
|
monkeypatch.setattr(tt, "_last_activity", {})
|
|
monkeypatch.setattr(
|
|
tt, "_get_env_config",
|
|
lambda: {"env_type": "local", "cwd": "/default", "timeout": 60,
|
|
"lifetime_seconds": 3600},
|
|
)
|
|
monkeypatch.setattr(
|
|
tt, "_check_all_guards",
|
|
lambda command, env_type, **kwargs: {"approved": True},
|
|
)
|
|
return json.loads(tt.terminal_tool(command="cd /new/dir", task_id=task_id))
|
|
|
|
def test_cd_result_is_recorded_under_the_session_key(self, monkeypatch):
|
|
class FakeEnv:
|
|
env = {}
|
|
cwd = "/start"
|
|
def execute(self, command, **kwargs):
|
|
# Simulate the env's own post-command tracking (marker parse).
|
|
self.cwd = "/new/dir"
|
|
return {"output": "", "returncode": 0}
|
|
|
|
result = self._run(monkeypatch, "sess-a", FakeEnv())
|
|
assert result["exit_code"] == 0
|
|
assert tt.get_session_cwd("sess-a") == "/new/dir"
|
|
# And ONLY that session's record was touched.
|
|
assert tt.get_session_cwd("sess-b") is None
|
|
|
|
def test_envs_without_cwd_tracking_record_nothing(self, monkeypatch):
|
|
class FakeEnv:
|
|
env = {}
|
|
def execute(self, command, **kwargs):
|
|
return {"output": "", "returncode": 0}
|
|
|
|
result = self._run(monkeypatch, "sess-a", FakeEnv())
|
|
assert result["exit_code"] == 0
|
|
assert tt.get_session_cwd("sess-a") is None
|
|
|
|
|
|
class TestFileToolsReadTheRecord:
|
|
"""Step 2: file-tool path resolution prefers the session's own record."""
|
|
|
|
def test_two_sessions_resolve_into_their_own_recorded_cwds(self, tmp_path, monkeypatch):
|
|
import tools.file_tools as ft
|
|
|
|
wt_a = tmp_path / "wt_a"
|
|
wt_b = tmp_path / "wt_b"
|
|
for d in (wt_a, wt_b):
|
|
d.mkdir()
|
|
monkeypatch.chdir(tmp_path)
|
|
monkeypatch.delenv("TERMINAL_CWD", raising=False)
|
|
monkeypatch.setattr(ft, "_file_ops_cache", {})
|
|
monkeypatch.setattr(tt, "_active_environments", {})
|
|
|
|
# Each session ran commands that recorded its own cwd. No env alive,
|
|
# no registered overrides — just the records.
|
|
tt.record_session_cwd("sess-a", str(wt_a))
|
|
tt.record_session_cwd("sess-b", str(wt_b))
|
|
|
|
assert ft._resolve_path_for_task("f.py", task_id="sess-a") == (wt_a / "f.py")
|
|
assert ft._resolve_path_for_task("f.py", task_id="sess-b") == (wt_b / "f.py")
|
|
|
|
def test_record_beats_foreign_env_cwd_without_ownership_metadata(self, tmp_path, monkeypatch):
|
|
"""The leak-A scenario, solved structurally: the shared env's cwd is
|
|
never consulted for path resolution — only the session's own record."""
|
|
import tools.file_tools as ft
|
|
|
|
wt_a = tmp_path / "wt_a"
|
|
wt_b = tmp_path / "wt_b"
|
|
for d in (wt_a, wt_b):
|
|
d.mkdir()
|
|
monkeypatch.chdir(tmp_path)
|
|
monkeypatch.delenv("TERMINAL_CWD", raising=False)
|
|
monkeypatch.setattr(ft, "_file_ops_cache", {})
|
|
|
|
class _Env:
|
|
cwd = str(wt_b) # another session's leftover cd on the shared env
|
|
|
|
monkeypatch.setattr(tt, "_active_environments", {"default": _Env()})
|
|
tt.record_session_cwd("sess-a", str(wt_a))
|
|
|
|
resolved = ft._resolve_path_for_task("f.py", task_id="sess-a")
|
|
assert resolved == (wt_a / "f.py")
|
|
assert not str(resolved).startswith(str(wt_b))
|
|
|
|
|
|
class TestDelegateSeedsChildRecord:
|
|
def test_child_record_seeded_from_parent_then_isolated(self):
|
|
tt.record_session_cwd("parent-task", "/parent/worktree")
|
|
# what delegate_tool does at spawn:
|
|
tt.record_session_cwd("child-1", tt.get_session_cwd("parent-task"))
|
|
|
|
assert tt.get_session_cwd("child-1") == "/parent/worktree"
|
|
# child cds somewhere; parent record must be untouched.
|
|
tt.record_session_cwd("child-1", "/child/scratch")
|
|
assert tt.get_session_cwd("parent-task") == "/parent/worktree"
|
|
assert tt.get_session_cwd("child-1") == "/child/scratch"
|
|
|
|
|
|
class TestCommandCwdReadsTheRecord:
|
|
"""_resolve_command_cwd: workdir > session record > default. Nothing else."""
|
|
|
|
def test_record_beats_default(self):
|
|
tt.record_session_cwd("sess-a", "/my/worktree")
|
|
resolved = tt._resolve_command_cwd(
|
|
workdir=None,
|
|
default_cwd="/config/default",
|
|
session_key="sess-a",
|
|
)
|
|
assert resolved == "/my/worktree"
|
|
|
|
def test_workdir_still_beats_the_record(self):
|
|
tt.record_session_cwd("sess-a", "/my/worktree")
|
|
resolved = tt._resolve_command_cwd(
|
|
workdir="/explicit/place",
|
|
default_cwd="/config/default",
|
|
session_key="sess-a",
|
|
)
|
|
assert resolved == "/explicit/place"
|
|
|
|
def test_no_record_falls_back_to_default(self):
|
|
resolved = tt._resolve_command_cwd(
|
|
workdir=None,
|
|
default_cwd="/config/default",
|
|
session_key="sess-a",
|
|
)
|
|
assert resolved == "/config/default"
|
|
|
|
def test_other_sessions_record_is_not_consulted(self):
|
|
tt.record_session_cwd("sess-b", "/other/worktree")
|
|
resolved = tt._resolve_command_cwd(
|
|
workdir=None,
|
|
default_cwd="/config/default",
|
|
session_key="sess-a",
|
|
)
|
|
assert resolved == "/config/default"
|
|
|
|
def test_cd_then_next_command_runs_in_the_new_dir(self, monkeypatch):
|
|
"""E2E through terminal_tool: the record round-trips cd state."""
|
|
import json
|
|
|
|
class FakeEnv:
|
|
env = {}
|
|
cwd = "/start"
|
|
def execute(self, command, **kwargs):
|
|
self.last_cwd_arg = kwargs.get("cwd")
|
|
if command.startswith("cd "):
|
|
self.cwd = command[3:]
|
|
return {"output": "", "returncode": 0}
|
|
|
|
fake = FakeEnv()
|
|
monkeypatch.setattr(tt, "_active_environments", {"sess-a": fake})
|
|
monkeypatch.setattr(tt, "_last_activity", {})
|
|
monkeypatch.setattr(
|
|
tt, "_get_env_config",
|
|
lambda: {"env_type": "local", "cwd": "/default", "timeout": 60,
|
|
"lifetime_seconds": 3600},
|
|
)
|
|
monkeypatch.setattr(
|
|
tt, "_check_all_guards",
|
|
lambda command, env_type, **kwargs: {"approved": True},
|
|
)
|
|
|
|
json.loads(tt.terminal_tool(command="cd /project", task_id="sess-a"))
|
|
assert tt.get_session_cwd("sess-a") == "/project"
|
|
json.loads(tt.terminal_tool(command="pwd", task_id="sess-a"))
|
|
assert fake.last_cwd_arg == "/project"
|