4b17b284ce
Restore the cheap repo-wide guards the per-file triage classed as source reads
but that protect recurring bug classes (<2s total):
- subprocess env scrubbing near spawn sites (credential leakage)
- gateway UTF-8 encoding= on file I/O (Windows mojibake)
- no raw yaml.safe_load of config.yaml (lost ${ENV} expansion)
- CLI subprocess.run timeouts (hung CLI)
- no locked readers on the shared state.db connection (#99349 segfault)
- CI classifier outputs / live-comment watch list match real workflows
- relay imports no platform crypto (relay trust boundary)
- Desktop relay deliver budget mirrors the Python deadlines (#93911)
- no native title= on Desktop buttons (DESIGN.md rule)
Drop _BASELINE entries in check_os_marker_fakes.py for files that no longer
fake macOS (the checker fails on stale entries), and remove doc/comment
pointers to deleted tests.
45 lines
1.5 KiB
Python
45 lines
1.5 KiB
Python
"""Tests for subprocess.run() timeout coverage in CLI utilities."""
|
|
import ast
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
|
|
|
|
# Parameterise over every CLI module that calls subprocess.run
|
|
_CLI_MODULES = [
|
|
"hermes_cli/doctor.py",
|
|
"hermes_cli/status.py",
|
|
"hermes_cli/clipboard.py",
|
|
"hermes_cli/banner.py",
|
|
]
|
|
|
|
|
|
def _subprocess_run_calls(filepath: str) -> list[dict]:
|
|
"""Parse a Python file and return info about subprocess.run() calls."""
|
|
source = Path(filepath).read_text()
|
|
tree = ast.parse(source, filename=filepath)
|
|
calls = []
|
|
for node in ast.walk(tree):
|
|
if not isinstance(node, ast.Call):
|
|
continue
|
|
func = node.func
|
|
if (isinstance(func, ast.Attribute) and func.attr == "run"
|
|
and isinstance(func.value, ast.Name)
|
|
and func.value.id == "subprocess"):
|
|
has_timeout = any(kw.arg == "timeout" for kw in node.keywords)
|
|
calls.append({"line": node.lineno, "has_timeout": has_timeout})
|
|
return calls
|
|
|
|
|
|
@pytest.mark.parametrize("filepath", _CLI_MODULES)
|
|
def test_all_subprocess_run_calls_have_timeout(filepath):
|
|
"""Every subprocess.run() call in CLI modules must specify a timeout."""
|
|
if not Path(filepath).exists():
|
|
pytest.skip(f"{filepath} not found")
|
|
calls = _subprocess_run_calls(filepath)
|
|
missing = [c for c in calls if not c["has_timeout"]]
|
|
assert not missing, (
|
|
f"{filepath} has subprocess.run() without timeout at "
|
|
f"line(s): {[c['line'] for c in missing]}"
|
|
)
|