hermes-agent/tests/hermes_cli/test_dingtalk_auth.py

"""Unit tests for hermes_cli/dingtalk_auth.py (QR device-flow registration)."""
from __future__ import annotations

import sys
from unittest.mock import MagicMock, patch

import pytest


# ---------------------------------------------------------------------------
# API layer — _api_post + error mapping
# ---------------------------------------------------------------------------


class TestApiPost:

    def test_raises_on_network_error(self):
        import requests
        from hermes_cli.dingtalk_auth import _api_post, RegistrationError

        with patch("hermes_cli.dingtalk_auth.requests.post",
                   side_effect=requests.ConnectionError("nope")):
            with pytest.raises(RegistrationError, match="Network error"):
                _api_post("/app/registration/init", {"source": "hermes"})

    def test_raises_on_nonzero_errcode(self):
        from hermes_cli.dingtalk_auth import _api_post, RegistrationError

        mock_resp = MagicMock()
        mock_resp.raise_for_status = MagicMock()
        mock_resp.json.return_value = {"errcode": 42, "errmsg": "boom"}

        with patch("hermes_cli.dingtalk_auth.requests.post", return_value=mock_resp):
            with pytest.raises(RegistrationError, match=r"boom \(errcode=42\)"):
                _api_post("/app/registration/init", {"source": "hermes"})


# ---------------------------------------------------------------------------
# begin_registration — 2-step nonce → device_code chain
# ---------------------------------------------------------------------------


class TestBeginRegistration:

    def test_chains_init_then_begin(self):
        from hermes_cli.dingtalk_auth import begin_registration

        responses = [
            {"errcode": 0, "nonce": "nonce123"},
            {
                "errcode": 0,
                "device_code": "dev-xyz",
                "verification_uri_complete": "https://open-dev.dingtalk.com/openapp/registration/openClaw?user_code=ABCD",
                "expires_in": 7200,
                "interval": 2,
            },
        ]
        with patch("hermes_cli.dingtalk_auth._api_post", side_effect=responses):
            result = begin_registration()

        assert result["device_code"] == "dev-xyz"
        assert "verification_uri_complete" in result
        assert result["interval"] == 2
        assert result["expires_in"] == 7200

    def test_missing_nonce_raises(self):
        from hermes_cli.dingtalk_auth import begin_registration, RegistrationError

        with patch("hermes_cli.dingtalk_auth._api_post",
                   return_value={"errcode": 0, "nonce": ""}):
            with pytest.raises(RegistrationError, match="missing nonce"):
                begin_registration()


# ---------------------------------------------------------------------------
# wait_for_registration_success — polling loop
# ---------------------------------------------------------------------------


class TestWaitForSuccess:

    def test_returns_credentials_on_success(self):
        from hermes_cli.dingtalk_auth import wait_for_registration_success

        responses = [
            {"status": "WAITING"},
            {"status": "WAITING"},
            {"status": "SUCCESS", "client_id": "cid-1", "client_secret": "sec-1"},
        ]
        with patch("hermes_cli.dingtalk_auth.poll_registration", side_effect=responses), \
             patch("hermes_cli.dingtalk_auth.time.sleep"):
            cid, secret = wait_for_registration_success(
                device_code="dev", interval=0, expires_in=60
            )
            assert cid == "cid-1"
            assert secret == "sec-1"

    def test_success_without_credentials_raises(self):
        from hermes_cli.dingtalk_auth import wait_for_registration_success, RegistrationError

        with patch("hermes_cli.dingtalk_auth.poll_registration",
                   return_value={"status": "SUCCESS", "client_id": "", "client_secret": ""}), \
             patch("hermes_cli.dingtalk_auth.time.sleep"):
            with pytest.raises(RegistrationError, match="credentials are missing"):
                wait_for_registration_success(
                    device_code="dev", interval=0, expires_in=60
                )

    def test_invokes_waiting_callback(self):
        from hermes_cli.dingtalk_auth import wait_for_registration_success

        callback = MagicMock()
        responses = [
            {"status": "WAITING"},
            {"status": "WAITING"},
            {"status": "SUCCESS", "client_id": "cid", "client_secret": "sec"},
        ]
        with patch("hermes_cli.dingtalk_auth.poll_registration", side_effect=responses), \
             patch("hermes_cli.dingtalk_auth.time.sleep"):
            wait_for_registration_success(
                device_code="dev", interval=0, expires_in=60, on_waiting=callback
            )
        assert callback.call_count == 2


# ---------------------------------------------------------------------------
# QR rendering — terminal output
# ---------------------------------------------------------------------------


class TestRenderQR:

    def test_returns_false_when_qrcode_missing(self, monkeypatch):
        from hermes_cli import dingtalk_auth

        # Simulate qrcode import failure
        monkeypatch.setitem(sys.modules, "qrcode", None)
        assert dingtalk_auth.render_qr_to_terminal("https://example.com") is False

    def test_prints_when_qrcode_available(self, capsys):
        """End-to-end: render a real QR and verify SOMETHING got printed."""
        try:
            import qrcode  # noqa: F401
        except ImportError:
            pytest.skip("qrcode library not available")

        from hermes_cli.dingtalk_auth import render_qr_to_terminal
        result = render_qr_to_terminal("https://example.com/test")
        captured = capsys.readouterr()
        assert result is True
        assert len(captured.out) > 100  # rendered matrix is non-trivial


# ---------------------------------------------------------------------------
# Configuration — env var overrides
# ---------------------------------------------------------------------------




@pytest.mark.parametrize("succeeds", [True, False])
def test_missing_qrcode_enables_dingtalk_without_switching_the_live_process(monkeypatch, succeeds):
    import pm
    from hermes_cli import dingtalk_auth

    monkeypatch.setitem(sys.modules, "qrcode", None)
    calls = []
    def sync(extras, *, explicit):
        calls.append((extras, explicit))
        if not succeeds:
            raise pm.InstallError("venv", "offline")

    monkeypatch.setattr(pm, "sync_venv", sync)
    assert dingtalk_auth._ensure_qrcode_installed() is False
    assert calls == [(["dingtalk"], True)]
    assert dingtalk_auth.render_qr_to_terminal("https://example.com") is False
    assert sys.modules["qrcode"] is None


def test_available_qrcode_does_not_install(monkeypatch):
    import pm
    from hermes_cli import dingtalk_auth

    monkeypatch.setitem(sys.modules, "qrcode", MagicMock())
    def forbidden(*args, **kwargs):
        raise AssertionError("installed dependency must not trigger a transaction")
    monkeypatch.setattr(pm, "sync_venv", forbidden)
    assert dingtalk_auth._ensure_qrcode_installed() is True