Files
hermes-agent/tests/tools/test_subprocess_stdin_guard.py
teknium1 f287036ea3 test: purge low-value tests, lane py19 (370 removed)
Change-detectors, tautologies, source-reading tests, redundant duplicates,
mock-echo tests and dead/unrunnable tests. Per-test rationale in the lane
ledger (category + reason for every removal).
2026-09-23 03:15:26 -07:00

89 lines
3.1 KiB
Python

"""Verify that TUI-context subprocess calls specify stdin=.
This is the pytest wrapper for scripts/check_subprocess_stdin.py.
It runs as part of the test suite so CI catches regressions when new
subprocess calls are added without stdin=subprocess.DEVNULL.
"""
import importlib.util
import subprocess
import sys
from pathlib import Path
REPO_ROOT = Path(__file__).resolve().parents[2]
SCRIPT = REPO_ROOT / "scripts" / "check_subprocess_stdin.py"
def _load_guard():
spec = importlib.util.spec_from_file_location("_stdin_guard", SCRIPT)
assert spec is not None and spec.loader is not None
mod = importlib.util.module_from_spec(spec)
spec.loader.exec_module(mod)
return mod
def test_all_tui_subprocess_calls_have_stdin():
"""Every subprocess.run/Popen in TUI-context code must set stdin=."""
result = subprocess.run(
[sys.executable, str(SCRIPT)],
capture_output=True,
text=True,
timeout=30,
)
assert result.returncode == 0, (
f"subprocess stdin= check failed:\n{result.stdout}\n{result.stderr}"
)
def test_inline_noqa_marker_exempts_a_call():
"""The guard honors an inline 'noqa: subprocess-stdin' exemption marker."""
guard = _load_guard()
flagged = guard.find_subprocess_calls(
"import subprocess\nsubprocess.run(['ls'])\n", "x.py"
)
assert len(flagged) == 1, "unmarked missing-stdin call should be flagged"
exempt = guard.find_subprocess_calls(
"import subprocess\nsubprocess.run(['ls']) # noqa: subprocess-stdin\n",
"x.py",
)
assert exempt == [], "inline marker should exempt the call"
def test_splatted_kwargs_helper_counts_only_when_it_sets_stdin():
"""``**_KW`` / ``**_kw()`` splats are safe only when the same-file definition sets stdin=."""
guard = _load_guard()
safe_const = (
"import subprocess\n"
"_KW = dict(capture_output=True, stdin=subprocess.DEVNULL)\n"
"subprocess.run(['ls'], **_KW)\n"
)
safe_fn = (
"import subprocess\n"
"def _kw(timeout):\n"
" return dict(timeout=timeout, stdin=subprocess.DEVNULL)\n"
"subprocess.run(['ls'], **_kw(3))\n"
)
unsafe_const = (
"import subprocess\n"
"_KW = dict(capture_output=True, text=True)\n"
"subprocess.run(['ls'], **_KW)\n"
)
undefined = "import subprocess\nsubprocess.run(['ls'], **_KW)\n"
# A later unrelated call passing stdin= must NOT vouch for the splat (reviewer-found false negative
# in the 30-line text-window version).
unrelated_later = (
"import subprocess\n"
"kwargs = {'capture_output': True}\n"
"subprocess.run(['child'], **kwargs)\n"
"subprocess.run(['other'], stdin=subprocess.DEVNULL)\n"
)
assert guard.find_subprocess_calls(safe_const, "x.py") == []
assert guard.find_subprocess_calls(safe_fn, "x.py") == []
assert len(guard.find_subprocess_calls(unsafe_const, "x.py")) == 1
assert len(guard.find_subprocess_calls(undefined, "x.py")) == 1
assert [v["line"] for v in guard.find_subprocess_calls(unrelated_later, "x.py")] == [3]