Files
hermes-agent/tests/scripts/test_commit_stamp_identity.py
ethernet bbec973514 refactor(pm): pm owns the dependency-environment layout and interpreter paths
hermes_cli.runtime_paths (venv generations, selection, activation) moves to
pm.environments, and gains venv_bin_dir / venv_python / project_python. Every
in-tree caller asks pm for an interpreter now; pm no longer reaches back into
hermes_cli for its own environment layout (pm.packages, pm.extras, pm.ensure,
pm.paths imported hermes_cli.runtime_paths). The three open-coded
"Scripts/python.exe or bin/python" ladders in pm collapse onto venv_python.

hermes_constants.venv_python_path / venv_bin_dir and hermes_cli.runtime_paths
stay as frozen-updater-surface shims only (tests/compat/old_updater_surface.json).

To keep the boot path light, pm/__init__ resolves its facade lazily (PEP 562)
and pm.registry loads the built-in package definitions on first read instead of
at import: `import hermes_bootstrap` now loads pm + pm.environments only (25ms,
was 37ms with the eager facade dragging in the downloader). The stripped-payload
fixtures that ship only pre-import files keep working for the same reason.

Also restores two frozen-surface re-exports the F401 sweep dropped
(banner._github_compare_behind, cua_backend.resolve_cua_driver_cmd).
2026-09-18 20:02:36 -04:00

71 lines
3.2 KiB
Python

"""The Python stamp writer binds tagless identity to the built checkout."""
import json
import os
from pathlib import Path
import shutil
import subprocess
import sys
ROOT = Path(__file__).resolve().parents[2]
def test_stamp_uses_built_commit_even_with_dispatch_sha_and_refuses_mismatch(tmp_path):
repo = tmp_path / 'repo'
repo.mkdir()
for relative in ('scripts/write_install_stamp.py', 'scripts/releases/commit_build.py',
'hermes_cli/__init__.py', 'hermes_cli/update_channel.py', 'hermes_cli/release_channels.py',
'pm/environments.py', 'hermes_cli/steward.py', 'hermes_constants.py'):
dest = repo / relative
dest.parent.mkdir(parents=True, exist_ok=True)
shutil.copy2(ROOT / relative, dest)
def git(*args):
return subprocess.run(['git', *args], cwd=repo, check=True, capture_output=True,
text=True, encoding='utf-8', timeout=30).stdout.strip()
git('init', '-q', '-b', 'main')
git('config', 'user.name', 'Fixture')
git('config', 'user.email', 'fixture@example.invalid')
git('add', '.')
git('commit', '-qm', 'main')
main = git('rev-parse', 'HEAD')
git('checkout', '-qb', 'feature')
(repo / 'feature').write_text('feature\n', encoding='utf-8')
git('add', 'feature')
git('commit', '-qm', 'feature')
feature = git('rev-parse', 'HEAD')
out = tmp_path / 'stamp.json'
env = {k: v for k, v in os.environ.items() if not k.startswith(('GITHUB_', 'HERMES_BUILD_', 'HERMES_PAYLOAD_'))}
env.update({'GITHUB_SHA': main, 'GITHUB_REF_NAME': 'main',
'HERMES_BUILD_COMMIT': feature, 'HERMES_DESKTOP_VARIANT': 'bundled',
'HERMES_HOME': str(tmp_path / 'home')})
command = [sys.executable, '-I', '-S', str(repo / 'scripts/write_install_stamp.py'),
'--output', str(out), '--update-mechanism', 'app-installer']
def run(*args, override=None):
return subprocess.run([*command, *args], cwd=tmp_path, env={**env, **(override or {})},
capture_output=True, text=True, encoding='utf-8', timeout=30)
result = run()
assert result.returncode == 0, result.stderr
data = json.loads(out.read_text(encoding='utf-8'))
assert data['commit'] == feature and data['source'] == 'commit-build'
assert data['branch'] is None and data['tag'] is None and data['updateMechanism'] == 'external'
result = run('--commit', feature)
assert result.returncode == 0, result.stderr
before = out.read_bytes()
git('checkout', '-q', 'main')
for args in ((), ('--commit', feature)):
result = run(*args)
assert result.returncode != 0 and 'checkout' in result.stderr.lower()
assert out.read_bytes() == before
git('checkout', '-q', 'feature')
for extra in ({'HERMES_BUILD_COMMIT': feature[:8]}, {'HERMES_PAYLOAD_TAG': 'v1.2.3'},
{'HERMES_BUILD_COMMIT': ' ' + feature}):
assert run(override=extra).returncode != 0
assert out.read_bytes() == before
result = run('--commit', feature, override={'HERMES_BUILD_COMMIT': '', 'HERMES_PAYLOAD_TAG': 'v1.2.3'})
assert result.returncode == 0, result.stderr
assert json.loads(out.read_text(encoding='utf-8'))['tag'] == 'v1.2.3'