Files
hermes-webui/tests/test_issue3256_context_length_default_only_guard.py
b3nw b2eda41b49 fix(#4059): pass custom provider keys to context probes
Resolve custom provider API keys from the matched config snapshot and pass them through session hydration plus streaming fallback context-length probes. This prevents authenticated /v1/models endpoints from falling back to the default 256K window and clobbering larger persisted session metadata.
2026-06-12 15:53:48 +00:00

205 lines
9.0 KiB
Python

"""Regression coverage for #3256 / #3263: the global model.context_length cap
must apply ONLY when the session model equals model.default.
Bug: a global `model.context_length` (set for the default model, e.g. 232000)
was applied to EVERY model, silently shrinking a non-default model's real
context window (e.g. a 1M-context variant). The fix scopes the override to
`model.default` only, in `_resolve_context_length_for_session_model`.
This test drives the real resolver with a monkeypatched
`agent.model_metadata.get_model_context_length` that records the
`config_context_length` it receives, so we assert the gating without needing
the real agent metadata catalog.
"""
import sys
import types
from pathlib import Path as _Path
def _install_fake_get_model_context_length(monkeypatch, recorder):
"""Install a fake get_model_context_length into a stand-in agent.model_metadata."""
mod = types.ModuleType("agent.model_metadata")
def _fake(model, base_url="", api_key="", config_context_length=None, provider="", custom_providers=None):
recorder["model"] = model
recorder["api_key"] = api_key
recorder["config_context_length"] = config_context_length
# Pretend the real per-model metadata window is 1,000,000 unless the
# caller forced a config cap, in which case honor the cap (mirrors the
# real helper's contract).
if config_context_length:
return int(config_context_length)
return 1_000_000
mod.get_model_context_length = _fake
# Ensure a parent `agent` package exists so `from agent.model_metadata import ...` resolves.
if "agent" not in sys.modules:
agent_pkg = types.ModuleType("agent")
agent_pkg.__path__ = []
monkeypatch.setitem(sys.modules, "agent", agent_pkg)
monkeypatch.setitem(sys.modules, "agent.model_metadata", mod)
def _resolver():
import api.routes as routes
return routes._resolve_context_length_for_session_model
def test_global_cap_applies_to_default_model(monkeypatch):
"""When the session model IS model.default, the global cap is passed through."""
import api.config as config
rec = {}
_install_fake_get_model_context_length(monkeypatch, rec)
monkeypatch.setattr(
config, "get_config",
lambda *a, **k: {"model": {"default": "claude-opus-4.8", "context_length": 232000}},
)
result = _resolver()("claude-opus-4.8")
assert rec["config_context_length"] == 232000, "default model must receive the global cap"
assert result == 232000
def test_global_cap_NOT_applied_to_non_default_model(monkeypatch):
"""When the session model is NOT model.default, the global cap is dropped so
the model's real (larger) window is used — the core #3256/#3263 fix."""
import api.config as config
rec = {}
_install_fake_get_model_context_length(monkeypatch, rec)
monkeypatch.setattr(
config, "get_config",
lambda *a, **k: {"model": {"default": "claude-opus-4.8", "context_length": 232000}},
)
result = _resolver()("claude-opus-4.7-1m-internal")
assert rec["config_context_length"] is None, (
"non-default model must NOT receive the global cap (it would clobber real metadata)"
)
assert result == 1_000_000, "non-default model should resolve to its real 1M window, not the 232K cap"
def test_no_default_configured_still_applies_cap(monkeypatch):
"""If model.default is unset, the cap applies (backward-compatible)."""
import api.config as config
rec = {}
_install_fake_get_model_context_length(monkeypatch, rec)
monkeypatch.setattr(
config, "get_config",
lambda *a, **k: {"model": {"context_length": 200000}},
)
result = _resolver()("some-model")
assert rec["config_context_length"] == 200000
assert result == 200000
def test_empty_model_returns_zero(monkeypatch):
rec = {}
_install_fake_get_model_context_length(monkeypatch, rec)
assert _resolver()("") == 0
assert _resolver()(None) == 0
# --- #3263 provider-aware default match (Codex final-gate finding, v0.51.192) ---
# model.default and the session model can be stored in equivalent-but-different
# shapes (bare / provider-prefixed / @provider:model). An exact string compare
# wrongly treats the actual default model as non-default and drops its configured
# context_length cap. _model_matches_configured_default() normalizes the shapes.
def _matcher():
import api.routes as routes
return routes._model_matches_configured_default
def test_default_match_exact():
assert _matcher()("claude-opus-4.8", "claude-opus-4.8") is True
def test_default_match_bare_session_vs_prefixed_default():
# Config default is provider-prefixed; session model is bare — still the default.
assert _matcher()("claude-opus-4.8", "anthropic/claude-opus-4.8", "anthropic") is True
def test_default_match_prefixed_session_vs_bare_default():
assert _matcher()("anthropic/claude-opus-4.8", "claude-opus-4.8", "anthropic") is True
def test_default_match_at_qualified_session():
assert _matcher()("@anthropic:claude-opus-4.8", "claude-opus-4.8") is True
def test_default_match_distinct_models_do_not_match():
assert _matcher()("claude-opus-4.7-1m", "claude-opus-4.8", "anthropic") is False
assert _matcher()("claude-opus-4.7-1m", "anthropic/claude-opus-4.8", "anthropic") is False
assert _matcher()("gpt-5.5", "claude-opus-4.8", "openai") is False
def test_default_match_same_bare_different_provider_does_NOT_match():
"""Same bare model id on a DIFFERENT provider is NOT the configured default
and must not receive its cap (Codex final-gate over-match finding)."""
assert _matcher()("openai/gpt-4o", "openrouter/gpt-4o", "openai") is False
assert _matcher()("@openai:gpt-4o", "@openrouter:gpt-4o") is False
assert _matcher()("gpt-4o", "openrouter/gpt-4o", "openai") is False
# but the SAME provider (or unknown session provider) still matches:
assert _matcher()("openrouter/gpt-4o", "openrouter/gpt-4o") is True
assert _matcher()("gpt-4o", "openrouter/gpt-4o", "openrouter") is True
def test_default_match_empty_inputs_are_false():
assert _matcher()("claude-opus-4.8", "") is False
assert _matcher()("", "claude-opus-4.8") is False
def test_prefixed_default_still_receives_cap(monkeypatch):
"""The actual default model, configured provider-prefixed, must still get
the global cap when the session stores it bare (the Codex final-gate bug)."""
import api.config as config
rec = {}
_install_fake_get_model_context_length(monkeypatch, rec)
monkeypatch.setattr(
config, "get_config",
lambda *a, **k: {"model": {"default": "anthropic/claude-opus-4.8", "context_length": 232000}},
)
# session model is the bare form of the prefixed default
result = _resolver()("claude-opus-4.8", "anthropic")
assert rec["config_context_length"] == 232000, (
"provider-prefixed default model must still receive its configured cap"
)
assert result == 232000
# --- #3263 dual-gate MUST-FIX invariants (Codex regression gate, v0.51.192) ---
# These pin the two consistency fixes applied after the gate found that the
# default-only guard dropped the stale cap but didn't (a) recompute a persisted
# stale context_length, or (b) rescale the terminal SSE threshold. Both live
# deep inside _run_agent_streaming, so we pin them at the source-structure level
# (the live-snapshot path already had behavioral coverage; these guard the two
# sibling paths from silently regressing back to the stale value).
_STREAMING_SRC = (_Path(__file__).resolve().parent.parent / "api" / "streaming.py").read_text(encoding="utf-8")
def test_persistence_fallback_also_runs_when_skip_cc_cl():
"""The per-turn persistence fallback must recompute the real cap when the
stale compressor cap was skipped — not only when context_length is falsy.
Otherwise a previously-persisted stale 232K survives forever."""
assert "(not getattr(s, 'context_length', 0)) or _skip_cc_cl:" in _STREAMING_SRC, (
"persistence fallback gate must also fire on _skip_cc_cl (#3263 MUST-FIX 1)"
)
def test_persistence_rescales_threshold_when_cap_skipped():
"""When the stale cap is skipped and the real cap recomputed, the persisted
threshold_tokens must be rescaled to the real cap (or cleared), so a reload
matches the live snapshot."""
assert "if _skip_cc_cl:" in _STREAMING_SRC
assert "s.threshold_tokens = int(_orig_thresh * _real_cap / _orig_cap)" in _STREAMING_SRC, (
"persistence path must rescale threshold_tokens to the real cap (#3263 MUST-FIX 2)"
)
def test_sse_done_payload_rescales_threshold_when_cap_dropped():
"""The terminal SSE usage payload must rescale threshold_tokens when it
dropped the stale compressor cap, so the indicator doesn't revert on stream
end (messages.js overwrites S.lastUsage with this payload)."""
assert "_dropped_stale_cap_sse" in _STREAMING_SRC
assert "usage['threshold_tokens'] = int(_orig_cc_thresh_sse * _fb_cl / _orig_cc_cl_sse)" in _STREAMING_SRC, (
"SSE done payload must rescale threshold_tokens to the resolved window (#3263 MUST-FIX 3)"
)