GaBڃdZddlmZddlZddlmcmZddl Z ddl Z ddl Z ddl Z ddl Z ddlmZddlmZddlZddlmZddlmZddlmZmZmZdd lmZeZej<j?e j@d dud Z!d Z"d2dZ#d2dZ$d2dZ%d3dZ&d3dZ'd4dZ(d5dZ)d6dZ*d7dZ+d8dZ,d9dZ-d9dZ.d9dZ/d:dZ0d:dZ1d:dZ2d:dZ3d:dZ4e! d;d Z5d:d!Z6d:d"Z7d:d#Z8d:d$Z9ej<jud%gd&dd:d-Z?d:d.Z@d:d/ZAd:d0ZBe! d;d1ZCy)>a8Tests for the authorized ``cyberbrain run`` execution path. These tests pin the fail-closed behaviour of the rewritten CLI: * every option that grants anything is validated before a bridge exists, so a rejected invocation executes nothing at all; * a code-carrying step ends closed at the scope gate when ``--scopes`` is empty; * an approval is required before any code runs, and granting it on the shared SQLite store from a second "terminal" lets the very same step succeed; * a step without an explicitly declared action, or one whose dependency did not succeed, is never dispatched; * no command reports success for a run that failed, refused or blocked. Output conventions under test ----------------------------- Diagnostics that ``cyberbrain26.cli`` controls go to stderr through ``typer.echo(..., err=True)``, and no command re-raises a handled exception, so a CLI failure never produces a Python traceback on stdout and never leaves an unhandled exception behind ``result.exception``. The libraries below the CLI do log their own diagnostics - including stack traces at ERROR level - on stderr when a dispatched step is denied; that is deliberate operational logging in ``orchestration.ptah_bridge`` and is left in place, so the assertions below check stdout for tracebacks and check ``result.exception`` for crashes. ) annotationsN)Path)Any) CliRunner)app) open_databaseresolve_db_pathworkspaces_root)ApprovalManagerbwrapzBubblewrap is unavailable)reason) completedz created with authorizedc^ |jS#ttf$r|jcYSwxYw)z1Return the captured stdout across click versions.)stdoutAttributeError ValueErroroutputresults ?/home/oem/CyberBrain26-unified/tests/test_cli_run_authorized.py_stdoutr7/}} J '}} ,,c^ |jS#ttf$r|jcYSwxYw)z1Return the captured stderr across click versions.)stderrrrrrs r_stderrr?rrc0t|t|zS)z"Return stdout and stderr together.)rrrs r _all_outputrGs 6?WV_ ,,c||j}d}||k7}|stjd|fd||fdtjvstj |rtj |ndtj |tj |dz}dd|iz}ttj|dx}x}}|j}t|t}|sBtjd |jd zd tjvstj trtj tnd dtjvstj |rtj |ndtj |d tjvstj trtj tnd tj |d z}ttj|dx}}d} t|}| |v}|stjd|fd| |ftj | dtjvstj trtj tnddtjvstj |rtj |ndtj |dz}dd|iz} ttj| dx} x}}y)zPAssert the command failed cleanly: non-zero exit, no crash, no stdout traceback.r!=z1%(py2)s {%(py2)s = %(py0)s.exit_code } != %(py5)srpy0py2py5assert %(py7)spy7Nz!expected a clean SystemExit, got zV >assert %(py6)s {%(py6)s = %(py0)s(%(py3)s {%(py3)s = %(py1)s.exception }, %(py4)s) } isinstance SystemExit)r&py1py3py4py6 Tracebacknot inz4%(py1)s not in %(py6)s {%(py6)s = %(py3)s(%(py4)s) }rr-r.r/r0assert %(py8)spy8) exit_code @pytest_ar_call_reprcompare @py_builtinslocals_should_repr_global_name _safereprAssertionError_format_explanation exceptionr+r,_format_assertmsgr) r @py_assert1 @py_assert4 @py_assert3 @py_format6 @py_format8 @py_assert2 @py_assert5 @py_format7 @py_assert0 @py_format9s r _assert_failed_without_cli_crashrMLs    q q    q      6   6      q       &&:& 3 3 ,F,<,<+?@  ')3)3 4 -gfo-;o ----;o---;------g---g------f---f---o-------r ct|}tD]}||v}|stjd|fd||fdt j vstj |rtj|nddt j vstj |rtj|nddz}tjd|d|dzd |iz}ttj|d }y ) z@Assert no success wording was printed anywhere for a failed run.r2)z%(py0)s not in %(py2)smarkerrr&r'zsuccess marker z present in: z >assert %(py4)sr/N) r_SUCCESS_MARKERSr9r:r;r<r=r>rBr?r@)rrrOrC @py_format3 @py_format5s r_assert_no_success_claimrTUs  F"YV#XXXvVXXXXXXvXXXvXXXXXXVXXXVXXXXvj fZ%XXXXXXXYr c V|dz jtj|dy)z*Write ``roadmaps.json`` into ``data_dir``. roadmaps.json)indentN) write_textjsondumps)data_dirroadmapss r_storer^\s  ++DJJx,JKr c  ddddddd|gdd S) zAReturn a stored coder step whose payload carries executable code.s1coderzexecute the code stepexecute_pythonzprint('side-effect')python)actioncodelanguagependingidrole descriptionpayload depends_onstatus)rls r _code_steprpas7.&*      r ctjt|}tj|_ |j dDcgc] }t |c}|jScc}w#|jwxYw)z2Return every ``audit_events`` row as a plain dict.zSELECT * FROM audit_events)sqlite3connectstrRow row_factoryexecutedictclosedb_path connectionrows r _audit_rowsr~rscW.J$[[J%/%7%78T%UVcS VWsA2A-A2-A22Bctjt|} |jdDcgc]}t|dc}|j Scc}w#|j wxYw)z;Return every durable task id stored in the ``tasks`` table.SELECT task_id FROM tasksr)rrrsrtrwryrzs r _task_idsr|s[W.J'1'9'9:U'VWCF WXsA AA A A2ctjt|} t|j d|j d|j S#|j wxYw)z"Return the row count of ``table``.zSELECT COUNT(*) FROM r)rrrsrtintrwfetchonery)r{tabler|s r _table_countrs\W.J:%%(=eW&EFOOQRSTU s -AA0cNtjtdg}|j}d}||k(}|st j d|fd||fdt jvst j|rt j|ndt j|t j|dz}dd|iz}tt j|dx}x}}d D]<}t|}||v}|s#t j d |fd ||fd t jvst j|rt j|nd d t jvst jtrt jtnd dt jvst j|rt j|ndt j|dz}dd|iz}tt j|dx}}?y)N--helpr==z1%(py2)s {%(py2)s = %(py0)s.exit_code } == %(py5)srr%r)r*)planrunversion approvalsdoctorin)z0%(py0)s in %(py5)s {%(py5)s = %(py2)s(%(py3)s) }commandr)r&r'r.r( runnerinvokerr8r9r:r;r<r=r>r?r@r)rrCrDrErFrGrs r'test_top_level_help_lists_every_commandrs0 ]]3 +F    q q    q      6   6      q       D*!&/)w/))))w/))))))w)))w))))))')))'))))))&)))&)))/)))))))*r ctjtddg}|j}d}||k(}|st j d|fd||fdt jvst j|rt j|ndt j|t j|dz}dd |iz}tt j|dx}x}}t|}d D]}||v}|st j d |fd ||fd t jvst j|rt j|nd dt jvst j|rt j|nddz}dd|iz} tt j| d}y)Nrrrrrrr%r)r*) --data-dirz--db--approval-timeout--scopesr)z%(py0)s in %(py2)soptionrrPzassert %(py4)sr/r) rrCrDrErFrGrrrRrSs r/test_run_help_exposes_the_authorization_optionsrs  ]]3 1 2F    q q    q      6   6      q       V_FJ vvv r cvtjtddg}|j}d}||k(}|st j d|fd||fdt jvst j|rt j|ndt j|t j|dz}dd |iz}tt j|dx}x}}t|}d }||v}|st j d |fd ||ft j|d t jvst j|rt j|nd dz} dd| iz}tt j|dx}}d}||v}|st j d |fd ||ft j|d t jvst j|rt j|nd dz} dd| iz}tt j|dx}}y)Nrrrrrrr%r)r*z--modelr2z%(py1)s not in %(py3)srr-r.assert %(py5)sr(z--langr) rrCrDrErFrGrrKrH @py_format4s r-test_run_help_no_longer_exposes_model_optionsrsD ]]3 1 2F    q q    q      6   6      q       V_F "9F """"9F"""9""""""F"""F""""""" !86 !!!!86!!!8!!!!!!6!!!6!!!!!!!r c tjtddddt|g}t |d}t |}||v}|st jd|fd||ft j|dtjvst jt rt jt nddtjvst j|rt j|ndt j|d z}d d |iz}tt j|dx}x}}t|y) Nr--idno-such-roadmaprrz0%(py1)s in %(py6)s {%(py6)s = %(py3)s(%(py4)s) }rrr5r6r7)rrrrtrMrr9r:r>r;r<r=r?r@rTtmp_pathrrKrIrHrJrLs r-test_run_with_unknown_roadmap_id_fails_closedrs ]]30Ar?r@r r) rrrCrDrErFrGr{rH @py_assert7 @py_assert6rL @py_format11s r3test_run_with_unknown_roadmap_id_dispatches_no_steprs ]] eV. c(mZYa bF    q q    q      6   6      q       x0G!(.< ).Q. )Q .... )Q......<...<............... )...Q.......!4:<!4 5:: 5 :::: 5::::::<:::<::::::::::::!4::: 5::::::::::r c  t|dddtgdtjtddddt |g}t |d}t|}||v}|stjd |fd ||ftj|d tjvstjtrtjtnd d tjvstj|rtj|nd tj|d z}dd|iz}ttj|dx}x}}d}t!|}||v}|stjd |fd ||ftj|dtjvstjt rtjt ndd tjvstj|rtj|nd tj|d z}dd|iz}ttj|dx}x}}t#|t%t'|}|Dcgc]}|d dk(s |ddk(s|} }| s~tj(d|dzddtjvstj| rtj| ndiz} ttj| | dd}|j*}d} || } | stdtj|tj|tj| tj| dz} ttj| dx}x}x} } |Dcgc] }|d dk(s |}}|sed dd!tjvstj|rtj|nd!iz} ttj| |dd}d"}||k(}|sltjd#|fd$||ftj|tj|d%z}d&d'|iz}ttj|dx}x}}ycc}wcc}w)(Ngatedrgrinamernstepsrrrrzcoder scopes: (none)rrrrr5r6r7r`rrdenyrdrbz*no scope denial recorded in audit_events:  >assert %(py0)sr&denialsrerrorz.Agent ptah-coder lacks required scope 'python'zLassert %(py7)s {%(py7)s = %(py3)s {%(py3)s = %(py1)s.startswith }(%(py5)s) })r-r.r(r*scope_check_failedzassert %(py0)s scope_checkszmissing_scope:pythonrz%(py1)s == %(py4)sr-r/assert %(py6)sr0)r^rprrrrtrMrr9r:r>r;r<r=r?r@rrTr~r rB startswith)rrrKrIrHrJrLrowsr}r @py_format1rDrrGrrErSs r3test_code_step_without_scopes_is_denied_and_auditedrs gjl^\ ]]3s8} U VF$V, !4WV_4 !_ 4444 !_444 !444444W444W444444V444V444_4444444 "76?"4? """"4?"""4""""""7"""7""""""6"""6"""?"""""""V$ 9 :D"dsc(mv&=#h-ScBcsdGd GG@GGGGGGG7GGG7GGGGG 1:g [  ) )[*Z[ )*Z [[ [[[ [[[ )[[[*Z[[[ [[[[[[[#'QC3x=r?r@r r) rrrCrDrErFrGrIr @py_assert10 @py_assert9 @py_format12 @py_format14s r8test_code_step_without_scopes_raises_no_approval_requestrs gjl^\ ]]3s8} U VF    q q    q      6   6      q       (:U)z8%(py5)s {%(py5)s = %(py0)s(%(py1)s, %(py3)s) } > %(py8)srr{rrrz$SELECT status FROM approval_requestsr2rstatusesrrr(approval_recordsrr)r^rprrrrtrMrr9r:r>r;r<r=r?r@rTr rrrrsrwry)rrrKrIrHrJrLr{rDrrrr|r}rrrFs r9test_code_step_without_approval_reports_the_approval_gaters gjl^\ ]]     M     F%V, ((: ((((:(((:(((((((((((((((((((((((((((( .wv.  .... ... ......w...w......v...v..........V$x0G"59<!4 599 5 9999 5999999<999<999999999999!4999 59999999999W.J&0&8&89_&`asCFaa $9H $$$$9H$$$9$$$$$$H$$$H$$$$$$$!39<!3 499 4 9999 4999999<999<999999999999!3999 49999999999 bsW$ W0WWW)c   |jdt|jddtdz }|j d|d z }t d d d t d t| gdtjtddd dtddddg }|j}d}||k7}|stjd|fd||fdtjvstj|rtj |ndtj |tj |dz}dd|iz} t#tj$| dx}x}}|j&}|}| } | sddtjvstj|rtj |ndtj |tj |d z}t#tj$|dx}x}} t)} i dW fd! } t+j,| "} t/}| j1 t3t5| d#$}|j6}d}||u}|stjd%|fd&||fd'tjvstj|rtj |nd'tj |tj |dz}dd|iz} t#tj$| dx}x}}t9j:d(z}| j=rt9j:|kr|j?D]L}|j@|vr|jC|j@d)d*}|2|jE|j@Nt9jFd+| j=rt9j:|kr| jId,-| j<}|}| } | stjJd.d/zd0tjvstj| rtj | nd0tj |tj |d z}t#tj$|dx}x}} d1}| v}|stjd2|fd3| ftj |d4tjvstj rtj nd4d5z}tjJd6d7zd8|iz}t#tj$|dx}} d1}|s{tjJd9d:zd;d||fd1tjvstj|rtj |nd1tj |tj |dz}tjJtM|d?zd|iz} t#tj$| dx}x}}d@}tO|} || v}|stjd2|fdA|| ftj |dBtjvstjtNrtj tNndBd1tjvstj|rtj |nd1tj | dCz}dDdE|iz}t#tj$|dx}x}} dF}tO|} || v}|stjdG|fdH|| ftj |dBtjvstjtNrtj tNndBd1tjvstj|rtj |nd1tj | dCz}dDdE|iz}t#tj$|dx}x}} |j&}|}|sdIdtjvstj|rtj |ndtj |tj |d z}t#tj$|dx}}|jP}|}dJ}||k(} | stjd=| fdK||fdtjvstj|rtj |ndtj |tj |tj |dLz} dMdN| iz}t#tj$|dx}x}x} }dO}tS| |}tU|}||k(}|stjd=|fdP||fdQtjvstjtRrtj tRndQdRtjvstj| rtj | ndRtj |tj |dStjvstjtTrtj tTndSd._run_in_backgroundD=#]] H $   r targetr{persistdatabaseis notz4%(py2)s {%(py2)s = %(py0)s.database } is not %(py5)smanagerN@ test-reviewergranted by test{Gz?xtimeout!the background run never finishedI >assert not %(py4)s {%(py4)s = %(py2)s {%(py2)s = %(py0)s.is_alive }() }workerrrz%(py1)s in %(py3)srr*the background run never produced a result >assert %(py5)sr(zAno approval request was ever raised, so nothing could be approvedrr&approvedrr >assert %(py7)srrrr5r6r7r1r2r4zAassert %(py4)s {%(py4)s = %(py2)s {%(py2)s = %(py0)s.exists }() }executedzH%(py4)s {%(py4)s = %(py2)s {%(py2)s = %(py0)s.read_text }() } == %(py7)sr&r'r/r*assert %(py9)spy9r)zY%(py5)s {%(py5)s = %(py0)s(%(py1)s, %(py3)s) } == %(py10)s {%(py10)s = %(py7)s(%(py8)s) }rr{len)r&r-r.r(r*r7rzassert %(py12)spy12returnNone)+setenvrtdelenvr mkdirr^rprrrr8r9r:r;r<r=r>r?r@existsr threadingThreadsetstartr rrtime monotonicis_alive list_pending request_idapproveaddsleepjoinrBrr read_textrr)!r monkeypatchrrOrrCrDrErFrGrIr{rrrrdeadlinerequestdecisionrKrHrrrrJrLrSr @py_format10rr @py_format13rs!` @rDtest_code_step_runs_after_an_approval_is_granted_on_the_shared_storer+s,c(m<3UC2[@I OODO!  "F L!)n    mm     M     G   !!  !!!! !!!!!!7!!!7!!! !!!!!!!!!!}}}  vv} x0G!H   %7 8FH LLN!!=RV+WX+t+t++++t++++++w+++w++++++t+++++++>>#d*ooDNN$4x$?"//1 5%%1"??7+=+=Pab'LL!3!34  5 JJt ooDNN$4x$?  C  E E E EE"EEEEEEEvEEEvEEEEEE EEEEEE M8x MMM8xMMM8MMMMMMxMMMxMMMM!MMMMMMM h F XXXXXXXXX8XXX8XXXXX   5q5 q 555 q55555565556555 555q555+f"55555555 )'&/);/ ))));/)));))))))')))'))))))&)))&)))/))))))) -gfo-;o ----;o---;------g---g------f---f---o------- ===??66=?   +  ++  ++++ ++++++6+++6+++ +++ ++++++++++!3E<!3 4EH E 4 EEEE 4 EEEEEE<EEE<EEEEEEEEEEEE!3EEE 4EEEEEEEEEEEEEEEHEEEHEEE EEEEEEE  C  s#Eq9Aq99r c  t|ddddddddigddgd  tjtd d dd t |ddg}t |d}t |}||v}|stjd|fd||ftj|dtjvstjt rtjt nddtjvstj|rtj|ndtj|dz}dd|iz}ttj|dx}x}}d}t |}||v}|stjd|fd||ftj|dtjvstjt rtjt nddtjvstj|rtj|ndtj|dz}dd|iz}ttj|dx}x}}t|t!|}d}t#||}d} || k(} | s tjd| fd|| fdtjvstjt"rtjt"nddtjvstj|rtj|ndtj|tj|tj| dz}d d!|iz} ttj| dx}x}x} } d"}t#||}d} || k(} | s tjd| fd|| fdtjvstjt"rtjt"nddtjvstj|rtj|ndtj|tj|tj| dz}d d!|iz} ttj| dx}x}x} } y)#Nsilentrgzno-action-stepplannerz planner output carries no actiongoalz do somethingrhr)r-rrrrrcrrrrr5r6r7zdeclares no 'action'rrrrrrr{rrrr)r^rrrrtrMrr9r:r>r;r<r=r?r@rTr r) rrrKrIrHrJrLr{rDrrrs r,test_step_without_declared_action_is_refusedr0ys +%#E &7"$'    &]] eVX|S]JPX YF%V, .wv.  .... ... ......w...w......v...v.......... !4WV_4 !_ 4444 !_444 !444444W444W444444V444V444_4444444V$x0G!(.< ).Q. )Q .... )Q......<...<............... )...Q.......!4:<!4 5:: 5 :::: 5::::::<:::<::::::::::::!4::: 5::::::::::r c tjtddddddt|g}|j}d}||k(}|st j d|fd ||fd tjvst j|rt j|nd t j|t j|d z}d d |iz}tt j|dx}x}}tj|dz j}|dd}|sNt j ddzdt j|iz} tt j| d}tjtddddt|ddg} t#| t%| t't)|D cgc] } d| vs|  }} g}||k(} | slt j d| fd||ft j|t j|dz} dd| iz}tt j|dx}x} }ycc} w)Nr--goalzship the thingrplannedrrrrrr%r)r*rVrz*the planner produced no steps to test withz >assert %(py1)sr-rrrcrzstep-1rrrr0)rrrrtr8r9r:r;r<r=r>r?r@rZloadsr$rBrMrTrr )rrrCrDrErFrGstoredrK @py_format2 run_resulttask_idrHrSrJs r1test_planner_produced_roadmap_is_entirely_refusedr9s ]] fh 0&)\SVW_S` aF    q q    q      6   6      q       ZZO3>>@ AF ) W %S %SS'SSSS %SSSSS eVY c(mZQY ZJ%Z0Z($-_h-O#P hT\`gTgG hn hlnn hln nnnn hlnnnn hnnnlnnnnnnnn hs IIc >t|dddtgdtjtddddt |dd g}|j }d }||k7}|stjd |fd ||fd tjvstj|rtj|nd tj|tj|dz}dd|iz}ttj|dx}x}}t|}d}||v} | stjd| fd||ftj|dtjvstj|rtj|nddz} dd| iz}ttj|dx}} d}||v} | stjd| fd||ftj|dtjvstj|rtj|nddz} dd| iz}ttj|dx}} d}||v} | stjd| fd||ftj|dtjvstj|rtj|nddz} dd| iz}ttj|dx}} t!|} | j"}|} | } | sddtjvstjt rtjt nddtjvstj|rtj|ndtj| tj|tj| dz} ttj| dx} x}x} } y)Nrrgrrrrrrzpython,teleportrr"r$rr%r)r*teleportrrrrrr(zValid scopes are:rcrlassert not %(py7)s {%(py7)s = %(py5)s {%(py5)s = %(py3)s {%(py3)s = %(py0)s(data_dir=%(py1)s) }.exists }() }r rr&r-r.r(r*)r^rprrrrtr8r9r:r;r<r=r>r?r@rr r)rrrCrDrErFrGrrKrHrr @py_assert8rLs r3test_unknown_scope_is_rejected_and_nothing_executesr?sp gjl^\ ]] s8}jJ[\F    q q    q      6   6      q        F : :: ( & (((( &((( ((((((&(((&((((((( 8v 8v8vv1:188:8::: :: :::::::::::::::::::::1:::8::::::::::r c 2tjtddddt|ddg}|j}d}||k7}|st j d|fd ||fd tjvst j|rt j|nd t j|t j|d z}d d |iz}tt j|dx}x}}d}t|}||v} | st j d| fd||ft j|dtjvst jtrt jtndd tjvst j|rt j|nd t j|dz} dd| iz} tt j| dx}x} }t|} | j}|} | } | sddtjvst jtrt jtnddtjvst j|rt j|ndt j| t j|t j| dz} tt j| dx} x}x} } y)Nrranythingrrnoperr"r$rr%r)r*rrrr5r6r7rr<r rr=)rrrrtr8r9r:r;r<r=r>r?r@rr r)rrrCrDrErFrGrKrIrHrJrLrr>s r5test_unknown_scope_is_rejected_even_without_a_roadmaprCs ]] eVZs8}jRX YF    q q    q      6   6      q       ([((6( ((((6((((6(((((([((([((((((((((((((((((((1:188:8::: :: :::::::::::::::::::::1:::8::::::::::r r)0z-1z-0.5c t|dddtgdtjtddddt |dd d |g }|j }d }||k7}|stjd |fd ||fdtjvstj|rtj|ndtj|tj|dz}dd|iz}ttj|dx}x}}t|}d} | |v} | stjd| fd| |ftj| dtjvstj|rtj|nddz} dd| iz}ttj|dx} } t!|t#|} | j$}|} | } | sddtjvstjt"rtjt"nddtjvstj|rtj|ndtj| tj|tj| dz}ttj|dx} x}x} } y)Nrrgrrrrrrrcrrr"r$rr%r)r*z7--approval-timeout must be a positive number of secondsrrrrrr(rr<r rr=)r^rprrrrtr8r9r:r;r<r=r>r?r@rrTr r)rrrrCrDrErFrGrrKrHrrr>rLs r.test_non_positive_approval_timeout_is_rejectedrFs gjl^\ ]]     M     F    q q    q      6   6      q        F DN D NNNN DNNN DNNNNNNNNNNNNNNNNV$1:188:8::: :: :::::::::::::::::::::1:::8::::::::::r c |dz }|jdt||jdd|jddtj t ddd d t|d d g}|j }d }||k7}|stjd|fd||fdtjvstj|rtj|ndtj|tj|dz}dd|iz}ttj|dx}x}}d}||z }|j}|} | sddtjvstj|rtj|ndtj|tj|tj| dz}ttj|dx}x}x}} d}||z }|j }|} | } | sddtjvstj|rtj|ndtj|tj|tj| dz} ttj| dx}x}x}x} } y)Nenv-datarCYBERBRAIN_DB_PATHFrCYBERBRAIN_RETENTION_DAYSrrzfrom-envrrrcrr"r$rr%r)r*cyberbrain.sqlite3zNassert %(py7)s {%(py7)s = %(py5)s {%(py5)s = (%(py0)s / %(py2)s).is_file }() }r\r&r'r(r*Qassert not %(py7)s {%(py7)s = %(py5)s {%(py5)s = (%(py0)s / %(py2)s).exists }() }r)rrtrrrrr8r9r:r;r<r=r>r?r@is_filer) rr%r\rrCrDrErFrGrr>rLs rAtest_env_data_dir_keeps_roadmap_index_and_sqlite_in_one_directoryrOs*$H,c(m<+U;2EB ]]     M    F    q q    q      6   6      q       +6H+ +6 + 4 46 4 66 666666H666H666+666 4666 6666666/9//9/7797999 99 999999999999/999799999999999r c  |dz }|jdt||jdd|jddtj t gd}|j }d}||k(}|stjd |fd ||fd tjvstj|rtj|nd tj|tj|d z}tjt|d zd|iz}ttj |dx}x}}|dz } |dz } | j"}|}|sddtjvstj| rtj| ndtj|tj|dz} ttj | dx}}| j"}|}|sddtjvstj| rtj| ndtj|tj|dz} ttj | dx}}| j$}| j$} || k(}|stjd |fd|| fdtjvstj| rtj| ndtj|dtjvstj| rtj| ndtj| dz} dd| iz}ttj |dx}x}} d}t&j(}| j*}|}||}||v}|s2tjd|fd||ftj|dtjvstjt&rtjt&ndtj|dtjvstj| rtj| ndtj|tj|tj|dz}dd|iz}ttj |dx}x}x}x}x}}d}||z }|j,}|}| }|sd d!tjvstj|rtj|nd!tj|tj|tj|d"z}ttj |dx}x}x}x}}y)#NrHrrIFrrJ)rr2z wire it uprenv-planrrrr3r%rr*rVrKzBassert %(py4)s {%(py4)s = %(py2)s {%(py2)s = %(py0)s.is_file }() } roadmaps_filerdb_file)zJ%(py2)s {%(py2)s = %(py0)s.parent } == %(py6)s {%(py6)s = %(py4)s.parent })r&r'r/r0r6r7rQr)z%(py1)s in %(py12)s {%(py12)s = %(py5)s {%(py5)s = %(py3)s.loads }(%(py10)s {%(py10)s = %(py8)s {%(py8)s = %(py6)s.read_text }() }) }rZ)r-r.r(r0r7rrzassert %(py14)spy14rMrrL)rrtrrrrr8r9r:r;r<r=r>rBrr?r@rNparentrZr4r$r)rr%r\r3rCrDrErFrGrRrSrSrIrJrLrKrr @py_assert11rHr* @py_format15rr>s r4test_env_data_dir_holds_plan_output_and_the_databaserX s*$H,c(m<+U;2EBmmC!UVG   77  !777 77777777777777 777777;w#77777777.M--G  " "" """"""="""=""" """ """"""" ???  77?    17>>1 > 1111 >111111=111=111 11111171117111>1111111 >>M$;$;>$;$=>$=>>:> >>>>:>>>>:>>>>>>>>>>>>>>>>>>M>>>M>>>$;>>>$=>>>>>>>>>>>>*4?*4*2242444 44 444444444444?444244444444444r r)rrrc(tjt|dg}|j}d}||k(}|st j d|fd||fdt jvst j|rt j|ndt j|t j|dz}t jt|dzd|iz}tt j|dx}x}}d }t|}||v} | st j d | fd ||ft j|d t jvst jtrt jtnd dt jvst j|rt j|ndt j|d z} dd| iz} tt j| dx}x} }y)Nrrrrrr%rr*Usagerrrr5r6r7)rrrr8r9r:r;r<r=r>rBrr?r@r) rrrCrDrErFrGrKrIrHrJrLs rtest_subcommand_help_rendersr[!s% ]]3( 3 4F   5q5 q 555 q55555565556555 555q555+f"55555555 %gfo%7o %%%%7o%%%7%%%%%%g%%%g%%%%%%f%%%f%%%o%%%%%%%r c |dz jdtjtddddt |g}t |d}t |}||v}|stjd|fd||ftj|d tjvstjt rtjt nd d tjvstj|rtj|nd tj|d z}d d |iz}ttj|dx}x}}t|y)NrVz {not jsonrrrrrrrrr5r6r7)rYrrrrtrMrr9r:r>r;r<r=r?r@rTrs r'test_corrupt_roadmap_index_fails_closedr]+s ++K8 ]]3s8} U VF$V, -gfo-?o ----?o---?------g---g------f---f---o-------V$r c (t}t|dddt|t|gdtj t ddddt |g}t|d}t|}||v}|stjd |fd ||ftj|d tjvstjtrtjtnd d tjvstj|rtj|nd tj|d z}dd|iz}ttj |dx}x}}t#|}d}t%||} d} | | k(} | sgtjd| fd| | fdtjvstjt$rtjt$nddtjvstjt"rtjt"nddtjvstj|rtj|ndtj|tj|tj| tj| dz} dd| iz} ttj | dx}x}x} x} } t'|y)Nduprgr)r_rrr malformedrrrrr5r6r7rrrrrrr rrrr)rpr^rxrrrrtrMrr9r:r>r;r<r=r?r@r rrT)rsteprrKrIrHrJrLrErrrrrs r1test_roadmap_with_duplicate_step_ids_fails_closedrb5s r;r<r=r?r@rTr rrrsrwry) rrrKrIrHrJrLr{r|r}rhrrFs r5test_step_whose_dependency_failed_is_never_dispatchedriLs "%#7 &}"$' ###5)|I6#*)'   6]]  <X HUF %V, &wv&8 &&&&8&&&8&&&&&&w&&&w&&&&&&v&&&v&&&&&&&&&& 00  0000 000 0000000000000000000000000000 276?2 ? 2222 ?222 2222227222722222262226222?2222222V$x0GW.J&0&8&89T&UVsCFVV 0  0000 000 0000000000000000Ws R% R (R% R%%R7c t|dddgdtjtddddt |g}t |d}t |}||v}|stjd |fd ||ftj|d tjvstjt rtjt nd d tjvstj|rtj|nd tj|d z}dd|iz}ttj|dx}x}}t|y)Nemptyrgr)rkrrrzcontains no stepsrrrrr5r6r7)r^rrrrtrMrr9r:r>r;r<r=r?r@rTrs r/test_empty_roadmap_is_not_reported_as_completedrl}s 8'7iZ\]^ ]]3s8} U VF$V, 1'&/1 / 1111 /111 111111'111'111111&111&111/1111111V$r c  |jdt|jddtdz }|j d|d z }t d d d t d t| gdt}tt|d}|j}d}||u}|stjd|fd||fdtjvstj|rtj |ndtj |tj |dz} dd| iz} t#tj$| dx}x}}i d\ fd } t'j(| } g} | j+ t-j.dz}| st-j.|kr~|j1D]<}|j3|j4dds!| j7|j4nt-j8d| st-j.|kr~| j;rTt-j.|kr=t-j8d| j;rt-j.|kr=| j=d !| j:}|}| }|stj>d"d#zd$tjvstj| rtj | nd$tj |tj |d%z} t#tj$| dx}x}}d&}| v}|stjd'|fd(| ftj |d)tjvstj rtj nd)d*z}tj>d+d,zd-|iz} t#tj$| dx}} d&}tA| }d.}||k(}|stjd/|fd0||fd1tjvstjt@rtj t@nd1d2tjvstj| rtj | nd2tj |tj |d3z}tj>d4| d5zd6|iz}t#tj$|dx}x}}|jB}d7}||k(}|stjd/|fd8||fd&tjvstj|rtj |nd&tj |tj |dz} tj>tE|d9zd| iz} t#tj$| dx}x}}d:}tG|}||v}|stjd'|fd;||ftj |dd6|iz}t#tj$|dx}x}}d?}tG|}||v}|stjd@|fdA||ftj |dd6|iz}t#tj$|dx}x}}|jH}|}dB}||k(}|stjd/|fdC||fdDtjvstj|rtj |ndDtj |tj |tj |dEz} dFdG| iz}t#tj$|dx}x}x}}dH}tK||}d.}||k(}|s tjd/|fdI||fdJtjvstjtJrtj tJndJdKtjvstj|rtj |ndKtj |tj |tj |dLz}dMdN|iz}t#tj$|dx}x}x}}dO}tK||}d.}||k(}|s tjd/|fdI||fdJtjvstjtJrtj tJndJdKtjvstj|rtj |ndKtj |tj |tj |dLz}dMdN|iz}t#tj$|dx}x}x}}tM|}|Dcgc] }|dPdQk(s |}}|Dcgc]}|dRdSk(s |d&}}d g}||k(}|stjd/|fdT||ftj |tj |dUz}tj>|dVzdW|iz}t#tj$|dx}x}}|Dcgc]}|dRdXk(s |d&}}tO|}d2dYg}||k(}|s tjd/|fd0||fdZtjvstjtNrtj tNndZd[tjvstj|rtj |nd[tj |tj |d3z}tj>|d5zd6|iz}t#tj$|dx}x}}y#| j=d !wxYwcc}wcc}wcc}w)]aA code step must need one human decision, not one per gate. Regression test. The operator approves the first request and then approves nothing at all - exactly what a person typing one ``approvals approve`` does. The step must complete. While the run raised a *second* independent request, it instead sat blocked until the approval timed out and then failed with "Approval pending", so the documented single-approval flow was unusable in practice: it only ever finished for a script that approves in a loop. The earlier test above cannot catch that, because it approves every pending request until the worker exits and is therefore equally happy with one approval or with five. rrFrrrTrrrrgrrrrrrNrrrr%r)r*c dtjtddddtddddg d <y) Nrrrrrrcr10rrrsrrzOtest_code_step_completes_after_exactly_one_approval.._run_in_backgroundrr rrrrrg?rrrrrrrrrrrrrr(r)z0%(py3)s {%(py3)s = %(py0)s(%(py1)s) } == %(py6)srr)r&r-r.r0z1expected exactly one approval to be granted, got z >assert %(py8)sr7rrrrrrr5r6r1r2r4r r rOr r r rrrr{rrrrr8r` event_typeapproval_requiredrrz >assert %(py6)sr0approval_grantedreusedsortedgrantedr)(rrtrr rr^rpr r rrr9r:r;r<r=r>r?r@rrrrrrr rappendr"rr#rBrr8rrr$rr~ru)!rr%rrOr{rrCrDrErFrGrrrr&r'rIrKrHrrrJrLrr)rrrr} step_eventsrSrvrs!` @r3test_code_step_completes_after_exactly_one_approvalrys",c(m<3UC2[@I OODO!  "F L!)n   x0G}Wd'STG   '4' 4 '''' 4''''''7'''7''' '''4'''''''!H   %7 8FH LLN !>>#d*t~~/(:"//1 ??7#5#5HYZOOG$6$67  JJt  t~~/(:ooDNN$4x$? JJt ooDNN$4x$?  C  E E E EE"EEEEEEEvEEEvEEEEEE EEEEEE M8x MMM8xMMM8MMMMMMxMMMxMMMM!MMMMMMM h F x=]A]=A ]]]=A]]]]]]3]]]3]]]]]]x]]]x]]]=]]]A]]]!RS[R\]]]]]]]]   5q5 q 555 q55555565556555 555q555+f"55555555 )'&/);/ ))));/)));))))))')))'))))))&)))&)))/))))))) -gfo-;o ----;o---;------g---g------f---f---o-------   +  ++  ++++ ++++++6+++6+++ +++ ++++++++++"5:<!4 5:: 5 :::: 5::::::<:::<::::::::::::!4::: 5::::::::::!39<!3 499 4 9999 4999999<999<999999999999!3999 49999999999 w D"&A3#i.D*@3AKA%0 ]cC 4EI\4\CM ] ]b ]b  ]b  ^ b{"-L0AEW0WH G '?Az84A?4 4AAA?4AAAAAA6AAA6AAAAAA'AAA'AAA?AAA4AAAkAAAAAAA9  C  *B ]s?A v<;A v<A#v<6 ww ww; w w<w)rrrrt)rrrr)r\rr]dict[str, Any]rr)rlrrrz)r{rrzlist[dict[str, Any]])r{rrz list[str])r{rrrtrrr)rrrr)rrr%zpytest.MonkeyPatchrr)rrrrtrr)rrtrr)D__doc__ __future__rbuiltinsr;_pytest.assertion.rewrite assertionrewriter9rZshutilrrrrpathlibrtypingrpytest typer.testingrcyberbrain26.clir cyberbrain26.product.local_storerr r $cyberbrain26.security_plane.approvalr rmarkskipifwhichrequires_bubblewraprQrrrrMrTr^rpr~rrrrrrrrrrr+r0r9r?rC parametrizerFrOrXr[r]rbrirlryror rrs2#   # \\@ kk((FLLT!*E)? - .YL "* "%;>. V $:NcFcF!3cF cFcFR;Do*;(;$78;9;>::!3: :255!35 50$CD&E&%%..1b%gBgB!3gB gBgBr