Files
hermes-agent/tests/gateway/test_mirror.py
T
kshitijk4poor db339f0051 fix(state): consolidate gateway SessionDB writers via process-wide shared registry
A gateway process opened state.db from ~12 call sites, each minting its
own writer connection, self._lock, close-time WAL checkpoint, and
token-writer thread. With N independent writers on one WAL file, one
connection's close-time checkpoint could race another's growth — the
lost/reordered-page-write signature across 11+ incidents (#90837).

Adds hermes_state_registry.py: a process-wide, per-path, refcounted
shared registry owning the writer boundary.

- acquire(path): same resolved path returns the same instance (one
  writer connection, one lock, one token-writer thread) for every
  long-lived in-process caller (gateway runner, SessionStore, per-agent
  lazy recall, cron per-job, mirror, channel_directory, slash_commands,
  shutdown_flush, session_search, react_to_message, delegate, mcp_serve,
  auto_archive, tui_gateway).
- close() on a shared instance is a NO-OP — the registry owns the
  lifecycle, so one caller's close can never tear down a writer other
  callers still hold.
- Generation-aware retirement on inode change: a replaced state.db
  RETIRES the live generation (never lent again) but keeps it alive for
  existing holders; release is object-keyed so holders of the old
  generation drain it independently of the new one. The old
  generation's own write path still fails with the typed
  StateDbReplacedError (existing protection, unchanged).
- Replacement-open failure leaves NO registry entry for the path —
  the next acquire retries fresh, never hands out a closed stale object.
- All teardown runs OUTSIDE the registry lock: a final release's WAL
  checkpoint can never stall acquisition for every state.db.
- close_shared_session_dbs() at gateway shutdown drains every
  generation (live + retired) as the final safety net.

CLI one-shots, recovery flows, and read-only cross-profile opens keep
using SessionDB() directly with their own close() — only long-lived
in-process sites route through the registry.

References #90837 (root-cause tracker stays open: the #10 EOF signature
and the WAL-lifecycle A/B verdict remain under investigation there).
2026-09-01 20:55:35 +05:30

137 lines
5.1 KiB
Python

"""Tests for gateway/mirror.py — session mirroring."""
import json
from unittest.mock import patch, MagicMock
import gateway.mirror as mirror_mod
from gateway.mirror import (
mirror_to_session,
_find_session_id,
)
def _setup_sessions(tmp_path, sessions_data):
"""Helper to write a fake sessions.json and patch module-level paths."""
sessions_dir = tmp_path / "sessions"
sessions_dir.mkdir(parents=True, exist_ok=True)
index_file = sessions_dir / "sessions.json"
index_file.write_text(json.dumps(sessions_data))
return sessions_dir, index_file
class TestFindSessionId:
def test_finds_matching_session(self, tmp_path):
sessions_dir, index_file = _setup_sessions(tmp_path, {
"agent:main:telegram:dm": {
"session_id": "sess_abc",
"origin": {"platform": "telegram", "chat_id": "12345"},
"updated_at": "2026-01-01T00:00:00",
}
})
with patch.object(mirror_mod, "_SESSIONS_DIR", sessions_dir), \
patch.object(mirror_mod, "_SESSIONS_INDEX", index_file):
result = _find_session_id("telegram", "12345")
assert result == "sess_abc"
def test_returns_most_recent(self, tmp_path):
sessions_dir, index_file = _setup_sessions(tmp_path, {
"old": {
"session_id": "sess_old",
"origin": {"platform": "telegram", "chat_id": "12345"},
"updated_at": "2026-01-01T00:00:00",
},
"new": {
"session_id": "sess_new",
"origin": {"platform": "telegram", "chat_id": "12345"},
"updated_at": "2026-02-01T00:00:00",
},
})
with patch.object(mirror_mod, "_SESSIONS_DIR", sessions_dir), \
patch.object(mirror_mod, "_SESSIONS_INDEX", index_file):
result = _find_session_id("telegram", "12345")
assert result == "sess_new"
def test_thread_id_disambiguates_same_chat(self, tmp_path):
sessions_dir, index_file = _setup_sessions(tmp_path, {
"topic_a": {
"session_id": "sess_topic_a",
"origin": {"platform": "telegram", "chat_id": "-1001", "thread_id": "10"},
"updated_at": "2026-01-01T00:00:00",
},
"topic_b": {
"session_id": "sess_topic_b",
"origin": {"platform": "telegram", "chat_id": "-1001", "thread_id": "11"},
"updated_at": "2026-02-01T00:00:00",
},
})
with patch.object(mirror_mod, "_SESSIONS_DIR", sessions_dir), \
patch.object(mirror_mod, "_SESSIONS_INDEX", index_file):
result = _find_session_id("telegram", "-1001", thread_id="10")
assert result == "sess_topic_a"
class TestMirrorToSession:
def test_successful_mirror_uses_user_id_for_group_session(self, tmp_path):
sessions_dir, index_file = _setup_sessions(tmp_path, {
"alice": {
"session_id": "sess_alice",
"origin": {"platform": "telegram", "chat_id": "-1001", "user_id": "alice"},
"updated_at": "2026-01-01T00:00:00",
},
"bob": {
"session_id": "sess_bob",
"origin": {"platform": "telegram", "chat_id": "-1001", "user_id": "bob"},
"updated_at": "2026-02-01T00:00:00",
},
})
with patch.object(mirror_mod, "_SESSIONS_DIR", sessions_dir), \
patch.object(mirror_mod, "_SESSIONS_INDEX", index_file), \
patch("gateway.mirror._append_to_sqlite") as mock_sqlite:
result = mirror_to_session(
"telegram",
"-1001",
"Hello group!",
source_label="cli",
user_id="alice",
)
assert result is True
mock_sqlite.assert_called_once()
assert mock_sqlite.call_args[0][0] == "sess_alice"
def test_no_matching_session(self, tmp_path):
sessions_dir, index_file = _setup_sessions(tmp_path, {})
with patch.object(mirror_mod, "_SESSIONS_DIR", sessions_dir), \
patch.object(mirror_mod, "_SESSIONS_INDEX", index_file):
result = mirror_to_session("telegram", "99999", "Hello!")
assert result is False
class TestAppendToSqlite:
def test_connection_is_closed_after_use(self, tmp_path):
"""Verify _append_to_sqlite releases the shared SessionDB handle."""
from gateway.mirror import _append_to_sqlite
mock_db = MagicMock()
with patch("hermes_state.get_shared_session_db", return_value=mock_db):
_append_to_sqlite("sess_1", {"role": "assistant", "content": "hello"})
mock_db.append_message.assert_called_once()
# Shared instances are released (not closed) — the registry owns close().
# release_shared_session_db is a module-level function, so verify the
# mock was passed to it by checking that append_message was called
# (the real release_shared_session_db on a MagicMock is a no-op since
# the mock isn't in the registry).