Files
hermes-webui/tests/test_stale_stream_cleanup.py
nesquena-hermes 5f3e0ab8d9 test(#3899): re-anchor 5 brittle source-window tests displaced by the idle-reset block
#3899's new idle-reset added an EARLIER if(INFLIGHT[sid]){ block in loadSession, so
4 test_regressions tests' src.find('if(INFLIGHT[sid]){') grabbed the wrong (idle-cleanup)
occurrence instead of the Phase-2 restore branch → switched to rfind (the substantive
branch). And the idle-cleanup comment changed from 'discard any browser-side inflight'
to 'reset browser-side streaming flags' → re-anchored test_frontend_drops_inflight_cache
on the new comment + nested if(!activeStreamId){...if(INFLIGHT[sid]){ form (behavior
preserved + enhanced). No production code changed.
2026-06-13 06:48:21 +00:00

439 lines
16 KiB
Python

import queue
import threading
import time
from pathlib import Path
import api.config as config
import api.routes as routes
REPO = Path(__file__).resolve().parents[1]
ROUTES_SRC = (REPO / "api" / "routes.py").read_text(encoding="utf-8")
SESSIONS_SRC = (REPO / "static" / "sessions.js").read_text(encoding="utf-8")
SW_SRC = (REPO / "static" / "sw.js").read_text(encoding="utf-8")
class _GateLock:
def __init__(self):
self._lock = threading.Lock()
self.lookup_finished = threading.Event()
self.writer_finished = threading.Event()
def __enter__(self):
self._lock.acquire()
return self
def __exit__(self, exc_type, exc, tb):
self._lock.release()
if not self.lookup_finished.is_set():
self.lookup_finished.set()
assert self.writer_finished.wait(2), "writer did not finish race setup"
return False
class _FakeSession:
session_id = "issue1533-session"
def __init__(self):
self.active_stream_id = "stale-stream"
self.pending_user_message = "old prompt"
self.pending_attachments = ["old.txt"]
self.pending_started_at = 123
self.messages = []
self.saved_stream_ids = []
self.saved_touch_updated_at = []
def save(self, *, touch_updated_at=True):
self.saved_stream_ids.append(self.active_stream_id)
self.saved_touch_updated_at.append(touch_updated_at)
def test_stale_stream_cleanup_helper_exists():
assert "def _clear_stale_stream_state(session)" in ROUTES_SRC
assert "stream_id in STREAMS" in ROUTES_SRC
assert "session.active_stream_id = None" in ROUTES_SRC
assert "session.pending_user_message = None" in ROUTES_SRC
assert "session.pending_attachments = []" in ROUTES_SRC
assert "session.pending_started_at = None" in ROUTES_SRC
assert "session.save(touch_updated_at=False)" in ROUTES_SRC
def test_stale_stream_cleanup_does_not_refresh_sidebar_timestamp():
config.STREAMS.clear()
config.SESSION_AGENT_LOCKS.clear()
session = _FakeSession()
assert routes._clear_stale_stream_state(session) is True
assert session.active_stream_id is None
assert session.saved_touch_updated_at == [False]
def test_session_load_clears_stale_stream_before_response():
load_pos = ROUTES_SRC.index("s = get_session(sid, metadata_only=(not load_messages))")
cleanup_pos = ROUTES_SRC.index("_clear_stale_stream_state(s)", load_pos)
response_pos = ROUTES_SRC.index('"active_stream_id": getattr(s, "active_stream_id", None)', cleanup_pos)
assert load_pos < cleanup_pos < response_pos
def test_chat_start_clears_stale_pending_state_not_only_active_id():
stale_comment_pos = ROUTES_SRC.index("# Stale stream id from a previous run; clear and continue.")
cleanup_pos = ROUTES_SRC.index("_clear_stale_stream_state(s)", stale_comment_pos)
stream_id_pos = ROUTES_SRC.index("stream_id = uuid.uuid4().hex", cleanup_pos)
assert stale_comment_pos < cleanup_pos < stream_id_pos
def test_chat_start_rechecks_active_stream_under_session_lock(monkeypatch, tmp_path):
"""A concurrent chat_start must not overwrite stream ownership.
The first request can pass the pre-lock active_stream_id check while another
request is waiting/running. Once this request enters the session lock, it
must re-read active_stream_id and reject instead of creating a ghost stream.
"""
config.STREAMS.clear()
config.SESSION_AGENT_LOCKS.clear()
existing_stream_id = "already-running-stream"
class ChatStartSession:
session_id = "duplicate-start-session"
def __init__(self):
self.active_stream_id = None
self.pending_user_message = None
self.pending_attachments = []
self.pending_started_at = None
self.messages = []
self.title = "Untitled"
self.worktree_path = None
self.workspace = None
self.model = None
self.model_provider = None
def save(self, *args, **kwargs):
return None
session = ChatStartSession()
class MutatingSessionLock:
def __enter__(self):
session.active_stream_id = existing_stream_id
session.pending_user_message = "prompt already claimed by another start"
session.pending_started_at = 123.0
routes.STREAMS[existing_stream_id] = queue.Queue()
return self
def __exit__(self, exc_type, exc, tb):
return False
class NoopThread:
def __init__(self, *args, **kwargs):
self.args = args
self.kwargs = kwargs
def start(self):
return None
monkeypatch.setattr(routes, "_get_session_agent_lock", lambda sid: MutatingSessionLock())
monkeypatch.setattr(routes.uuid, "uuid4", lambda: type("FakeUuid", (), {"hex": "new-stream"})())
monkeypatch.setattr(routes, "set_last_workspace", lambda workspace: None)
monkeypatch.setattr(routes, "create_stream_channel", lambda: queue.Queue())
monkeypatch.setattr(routes.threading, "Thread", NoopThread)
try:
response = routes._start_chat_stream_for_session(
session,
msg="please start once",
attachments=[],
workspace=str(tmp_path),
model="test-model",
model_provider=None,
)
assert response["_status"] == 409
assert response["active_stream_id"] == existing_stream_id
assert session.active_stream_id == existing_stream_id
assert "new-stream" not in routes.STREAMS
finally:
routes.STREAMS.pop(existing_stream_id, None)
def test_chat_start_blocks_same_session_active_run_after_cancel_clears_stream_id(monkeypatch, tmp_path):
"""Regression for #3808: cancel clears active_stream_id before worker exit.
interrupt-and-send queues a successor message, then calls cancel_stream().
cancel_stream() intentionally clears session.active_stream_id so Stop remains
responsive, but the old worker remains in ACTIVE_RUNS until its finally block
unregisters it. chat/start must still block by session_id during that window.
"""
config.STREAMS.clear()
config.ACTIVE_RUNS.clear()
config.SESSION_AGENT_LOCKS.clear()
class ChatStartSession:
session_id = "interrupt-send-session"
def __init__(self):
self.active_stream_id = None
self.pending_user_message = None
self.pending_attachments = []
self.pending_started_at = None
self.messages = []
self.title = "Interrupt Send"
self.worktree_path = None
self.workspace = None
self.model = None
self.model_provider = None
def save(self, *args, **kwargs):
return None
session = ChatStartSession()
old_stream_id = "old-cancelling-stream"
config.register_active_run(old_stream_id, session_id=session.session_id, phase="cancelling")
class NoopThread:
def __init__(self, *args, **kwargs):
self.args = args
self.kwargs = kwargs
def start(self):
return None
monkeypatch.setattr(routes.uuid, "uuid4", lambda: type("FakeUuid", (), {"hex": "new-stream"})())
monkeypatch.setattr(routes, "set_last_workspace", lambda workspace: None)
monkeypatch.setattr(routes, "create_stream_channel", lambda: queue.Queue())
monkeypatch.setattr(routes.threading, "Thread", NoopThread)
try:
response = routes._start_chat_stream_for_session(
session,
msg="successor prompt",
attachments=[],
workspace=str(tmp_path),
model="test-model",
model_provider=None,
)
assert response["_status"] == 409
assert response["active_stream_id"] == old_stream_id
assert session.active_stream_id is None
assert session.pending_user_message is None
assert "new-stream" not in routes.STREAMS
finally:
config.unregister_active_run(old_stream_id)
def test_chat_start_allows_same_session_after_active_run_unregisters(monkeypatch, tmp_path):
"""The #3808 guard must release once the old worker unregisters ACTIVE_RUNS."""
config.STREAMS.clear()
config.ACTIVE_RUNS.clear()
config.SESSION_AGENT_LOCKS.clear()
class ChatStartSession:
session_id = "interrupt-send-session-released"
def __init__(self):
self.active_stream_id = None
self.pending_user_message = None
self.pending_attachments = []
self.pending_started_at = None
self.messages = []
self.title = "Interrupt Send"
self.worktree_path = None
self.workspace = None
self.model = None
self.model_provider = None
def save(self, *args, **kwargs):
return None
session = ChatStartSession()
class NoopThread:
def __init__(self, *args, **kwargs):
self.args = args
self.kwargs = kwargs
def start(self):
return None
monkeypatch.setattr(routes.uuid, "uuid4", lambda: type("FakeUuid", (), {"hex": "new-stream"})())
monkeypatch.setattr(routes, "set_last_workspace", lambda workspace: None)
monkeypatch.setattr(routes, "create_stream_channel", lambda: queue.Queue())
monkeypatch.setattr(routes.threading, "Thread", NoopThread)
response = routes._start_chat_stream_for_session(
session,
msg="successor prompt",
attachments=[],
workspace=str(tmp_path),
model="test-model",
model_provider=None,
)
try:
assert "error" not in response
assert response["stream_id"] == "new-stream"
assert session.active_stream_id == "new-stream"
assert session.pending_user_message == "successor prompt"
finally:
routes.STREAMS.pop("new-stream", None)
def test_chat_start_not_permanently_blocked_by_stale_active_run(monkeypatch, tmp_path):
"""A wedged/detached ACTIVE_RUNS entry past the unwind ceiling must NOT 409 forever.
The #3808 successor guard waits on a same-session ACTIVE_RUNS entry during the
short post-cancel unwind. But unregister only runs in the worker finally, so a
worker stuck in a provider call (or leaked by SIGKILL without restart) would
block the session permanently. The guard ignores entries older than the 180s
ceiling so the user can recover. (Codex brick-gate hardening, #3822.)
"""
config.STREAMS.clear()
config.ACTIVE_RUNS.clear()
config.SESSION_AGENT_LOCKS.clear()
class ChatStartSession:
session_id = "interrupt-send-session-stale"
def __init__(self):
self.active_stream_id = None
self.pending_user_message = None
self.pending_attachments = []
self.pending_started_at = None
self.messages = []
self.title = "Interrupt Send"
self.worktree_path = None
self.workspace = None
self.model = None
self.model_provider = None
def save(self, *args, **kwargs):
return None
session = ChatStartSession()
stale_stream_id = "wedged-old-stream"
config.register_active_run(stale_stream_id, session_id=session.session_id, phase="running")
# Age the entry well past the 180s unwind ceiling.
with config.ACTIVE_RUNS_LOCK:
config.ACTIVE_RUNS[stale_stream_id]["started_at"] = time.time() - 600
# The bounded guard should treat it as stale and NOT report it as blocking.
assert routes._active_run_stream_for_session(session.session_id) is None
class NoopThread:
def __init__(self, *args, **kwargs):
self.args = args
self.kwargs = kwargs
def start(self):
return None
monkeypatch.setattr(routes.uuid, "uuid4", lambda: type("FakeUuid", (), {"hex": "new-stream"})())
monkeypatch.setattr(routes, "set_last_workspace", lambda workspace: None)
monkeypatch.setattr(routes, "create_stream_channel", lambda: queue.Queue())
monkeypatch.setattr(routes.threading, "Thread", NoopThread)
try:
response = routes._start_chat_stream_for_session(
session,
msg="successor prompt",
attachments=[],
workspace=str(tmp_path),
model="test-model",
model_provider=None,
)
assert "error" not in response
assert response["stream_id"] == "new-stream"
assert session.active_stream_id == "new-stream"
finally:
config.unregister_active_run(stale_stream_id)
routes.STREAMS.pop("new-stream", None)
def test_stale_stream_cleanup_does_not_clobber_concurrent_chat_start(monkeypatch):
"""Regression for #1533: stale cleanup must not erase a new stream id.
The gate lock pauses the cleanup thread after it has decided that the old
stream id is stale, then lets a chat_start-like writer register and persist
a new active_stream_id for the same session.
"""
config.STREAMS.clear()
config.SESSION_AGENT_LOCKS.clear()
gate_lock = _GateLock()
session = _FakeSession()
new_stream_id = "new-stream"
result = {}
monkeypatch.setattr(routes, "STREAMS_LOCK", gate_lock)
def cleanup_stale_stream():
result["cleared"] = routes._clear_stale_stream_state(session)
def start_new_stream():
assert gate_lock.lookup_finished.wait(2), "cleanup did not reach race point"
with routes.STREAMS_LOCK:
routes.STREAMS[new_stream_id] = queue.Queue()
with routes._get_session_agent_lock(session.session_id):
session.active_stream_id = new_stream_id
session.pending_user_message = "new prompt"
session.pending_attachments = ["new.txt"]
session.pending_started_at = 456
session.save()
gate_lock.writer_finished.set()
cleanup_thread = threading.Thread(target=cleanup_stale_stream)
writer_thread = threading.Thread(target=start_new_stream)
cleanup_thread.start()
writer_thread.start()
cleanup_thread.join(2)
writer_thread.join(2)
assert not cleanup_thread.is_alive()
assert not writer_thread.is_alive()
assert result["cleared"] is False
assert session.active_stream_id == new_stream_id
assert session.pending_user_message == "new prompt"
assert session.pending_attachments == ["new.txt"]
assert session.pending_started_at == 456
def test_frontend_drops_inflight_cache_when_server_session_is_idle():
# #3900/#3899 generalized this block: on an idle server session it now resets
# the streaming flags (S.busy/S.activeStreamId) AND drops the inflight cache,
# before the async message-load gap. Anchor on the current comment + assert the
# (preserved) cache-drop behavior in the now-nested form.
marker = "If the server says the session is idle, reset browser-side streaming flags"
marker_pos = SESSIONS_SRC.index(marker)
window = SESSIONS_SRC[marker_pos:marker_pos + 900]
assert "if(!activeStreamId){" in window
assert "S.busy=false" in window
assert "S.activeStreamId=null" in window
assert "if(INFLIGHT[sid]){" in window
assert "delete INFLIGHT[sid]" in window
assert "clearInflightState" in window
def test_service_worker_cache_bumped_for_frontend_fix_delivery():
"""The SW CACHE_NAME must be keyed on the WEBUI_VERSION placeholder so
every release naturally invalidates the previous shell cache and delivers
the frontend half of the stale-stream cleanup fix to existing browsers.
Originally pinned a manual `-stale-stream-cleanup1` suffix on
`CACHE_NAME` (PR #1525 author shipped that to force-bump existing
SWs). During the v0.50.279 stage build that suffix collided with the
independent #1517 placeholder rename (`__CACHE_VERSION__` →
`__WEBUI_VERSION__`), so the maintainer dropped the manual suffix in
favor of the canonical version-token path. The natural bump still
invalidates the old cache via `keys.filter((k) => k !== CACHE_NAME)`
in the activate handler — same delivery guarantee, less churn.
"""
# CACHE_NAME must include the WEBUI_VERSION placeholder so each release
# produces a different cache name. The activate handler then deletes any
# cache whose key != current CACHE_NAME, so the old shell is reaped on
# every upgrade and the new sessions.js (with the INFLIGHT[sid] clear)
# ships to existing browsers.
assert "CACHE_NAME = 'hermes-shell-__WEBUI_VERSION__'" in SW_SRC, (
"SW CACHE_NAME must include __WEBUI_VERSION__ so each release "
"invalidates the previous cache and delivers frontend changes."
)