diff --git a/packages/webui/src/public/bus.js b/packages/webui/src/public/bus.js index 876dbad8a..42643689a 100644 --- a/packages/webui/src/public/bus.js +++ b/packages/webui/src/public/bus.js @@ -558,10 +558,14 @@ // REQ-WEB-1: drafts survive polling/refusals; only an explicit submit writes. let settingsSnapshot=null, settingsInputs=null, settingsSaving=false, settingsReceipt=''; const inputKey=parts=>JSON.stringify(parts); + // Row 167 (#1664): one snapshot for the launch form, the assistant forms and the token limit + // reset. A read replaces it only while no form has a draft; every save and reset sets it from + // its answer, so the next submit sends the revision the last write returned. + const launchDrafts=()=>!!settingsInputs||Object.keys(assistantDrafts).length>0; + function takeSnapshot(value){if(!settingsSnapshot||!launchDrafts())settingsSnapshot=value;return settingsSnapshot;} function launchForm(value){ if(!value||value.refused)return `

Agent limits

${txt(value?.message||'Launch settings are not configured.')}

`; - if(!settingsInputs)settingsSnapshot=value; - const v=settingsSnapshot, modelTable=v.models||{}, limits=v.limits||{}, usage=v.usage||{}; + const v=takeSnapshot(value), modelTable=v.models||{}, limits=v.limits||{}, usage=v.usage||{}; const val=(parts,fallback)=>settingsInputs&&Object.hasOwn(settingsInputs,inputKey(parts))?settingsInputs[inputKey(parts)]:fallback; const disabled=!canSend||out()||settingsSaving?' disabled':''; const field=(parts,label,count,current)=>``; @@ -606,7 +610,7 @@ const path=e.target.dataset?.limitReset;if(path===undefined||!canSend||out()||settingsSaving)return; const revision=settingsSnapshot?.revision;if(!/^[a-f0-9]{64}$/.test(revision??''))return; settingsSaving=true;resetReceipt='';render(false);let reread=false; - try{const response=await fetch('/api/settings',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({revision,reset:[JSON.parse(path)]}),cache:'no-store',redirect:'manual'});if(response.type==='opaqueredirect'){resetReceipt='Sign in again.';signOut();}else{const result=await response.json();if(response.ok&&/^[a-f0-9]{64}$/.test(result?.revision??'')){if(!settingsInputs)settingsSnapshot=result;const prior=last.get('api:settings');if(prior)last.set('api:settings',{...prior,launch:result});reread=true;resetReceipt='Limit reset.';}else resetReceipt=result?.sent==='unknown'?'Outcome unknown. Read current settings before trying again.':`${result?.message||'Reset refused.'}`;}} + try{const response=await fetch('/api/settings',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({revision,reset:[JSON.parse(path)]}),cache:'no-store',redirect:'manual'});if(response.type==='opaqueredirect'){resetReceipt='Sign in again.';signOut();}else{const result=await response.json();if(response.ok&&/^[a-f0-9]{64}$/.test(result?.revision??'')){settingsSnapshot=result;const prior=last.get('api:settings');if(prior)last.set('api:settings',{...prior,launch:result});reread=true;resetReceipt='Limit reset.';}else resetReceipt=result?.sent==='unknown'?'Outcome unknown. Read current settings before trying again.':`${result?.message||'Reset refused.'}`;}} catch{resetReceipt='Outcome unknown. Read current settings before trying again.';}finally{settingsSaving=false;if(!out())render(reread);} }); function tokenUsage(value) { @@ -624,12 +628,12 @@ // Row 155 (#1649, Q169): each assistant instance's settings, its seat name and a stop. A save // sends only the fields that changed, with the read's revision. Drafts survive polling and // refusals as in the limits form, and nothing retries. - let assistantSnapshot=null, assistantDrafts=Object.create(null), nameDrafts=Object.create(null), assistantBusy=false, assistantReceipts=Object.create(null); + let assistantDrafts=Object.create(null), nameDrafts=Object.create(null), assistantBusy=false, assistantReceipts=Object.create(null); const asShown=(entry,field)=>field==='definition'?entry.definition??'':entry[field]==null?'':JSON.stringify(entry[field],null,2); function assistantSection(value,names){ - if(!value||value.refused||!value.assistants||!Object.keys(value.assistants).length)return ''; - if(!Object.keys(assistantDrafts).length)assistantSnapshot=value; - const v=assistantSnapshot, disabled=!canSend||out()||assistantBusy?' disabled':''; + if(!value||value.refused)return ''; + const v=takeSnapshot(value);if(!v.assistants||!Object.keys(v.assistants).length)return ''; + const disabled=!canSend||out()||assistantBusy?' disabled':''; const named=names?Object.fromEntries(names.map(r=>[r.instance,r.name])):null; const forms=Object.entries(v.assistants).map(([instance,entry])=>{ const d=assistantDrafts[instance]||{}, val=f=>Object.hasOwn(d,f)?d[f]:asShown(entry,f), k=esc(instance); @@ -639,7 +643,7 @@ return `

Assistant

The definition stays an assistant one. Holder and credentials stay hand edits. Stop ends the runs of your threads; the assistant starts again when you next write to it.

${forms}

${canSend?'Changes are checked and logged with your identity.':'Changes require signed-in send mode.'}

`; } function assistantPayload(instance,form){ - const entry=assistantSnapshot.assistants[instance], patch={}; + const entry=settingsSnapshot.assistants[instance], patch={}; for(const f of ['definition','vars','tracker']){ const text=form.querySelector(`[data-assistant-field="${f}"]`).value, what=f==='vars'?'Vars':'The tracker'; if(text===asShown(entry,f))continue; @@ -650,7 +654,7 @@ patch[f]=parsed; } if(!Object.keys(patch).length)throw Error('Nothing changed.'); - return {revision:assistantSnapshot.revision,assistants:{[instance]:patch}}; + return {revision:settingsSnapshot.revision,assistants:{[instance]:patch}}; } const unknownAssistant='Outcome unknown. Read current settings before trying again. Draft kept.'; async function assistantPost(url,payload,instance,ok){ @@ -663,7 +667,7 @@ document.addEventListener('submit',async e=>{ const form=assistantForm(e.target);if(!form||e.target!==form)return;e.preventDefault();if(!canSend||out()||assistantBusy)return;const instance=form.dataset.instance;let payload; try{payload=assistantPayload(instance,form);}catch(err){assistantReceipts[instance]=err.message;render(false);return;} - await assistantPost('/api/settings',payload,instance,result=>{if(!/^[a-f0-9]{64}$/.test(result?.revision??''))return unknownAssistant;delete assistantDrafts[instance];assistantSnapshot=result;const prior=last.get('api:settings');if(prior)last.set('api:settings',{...prior,launch:result});return 'Assistant settings saved.';}); + await assistantPost('/api/settings',payload,instance,result=>{if(!/^[a-f0-9]{64}$/.test(result?.revision??''))return unknownAssistant;delete assistantDrafts[instance];settingsSnapshot=result;const prior=last.get('api:settings');if(prior)last.set('api:settings',{...prior,launch:result});return 'Assistant settings saved.';}); }); document.addEventListener('click',async e=>{ const form=assistantForm(e.target);if(!form||!canSend||out()||assistantBusy)return;const instance=form.dataset.instance; @@ -726,7 +730,7 @@ const s = await get.api('settings'), n = s.notifier || {}; let usage, names = null; try { [usage] = await get('usage'); } catch (err) { if (err.status === 403 || err.code === 'signed-out') throw err; } - try { names = await get('names'); } catch { /* the section says the name could not be read */ } + try { names = await get('names'); } catch (err) { if (err.status === 403 || err.code === 'signed-out') throw err; /* the section says the name could not be read */ } let instances = null; try { [instances] = await get('instances'); } catch (err) { if (err.status === 403 || err.code === 'signed-out') throw err; } let limitRows = [], limitsRefused = false; diff --git a/packages/webui/tests/assistant.test.mjs b/packages/webui/tests/assistant.test.mjs index f885562eb..0c3bd51e1 100644 --- a/packages/webui/tests/assistant.test.mjs +++ b/packages/webui/tests/assistant.test.mjs @@ -66,6 +66,21 @@ test('Q169 the name and stop routes take JSON within 4 KiB and only their own ke assert.equal(s.calls.length, 0); }); +// Row 167 (#1664, Dewey's F1): a JSON null body is refused by body() before the key check runs, +// so neither route throws on it, calls the bus or stops answering. +test('Row 167 a null body on the name and stop routes is 400 invalid-request with no write, and the next request is answered', async t => { + const s = await setup(t); + for (const [path, data, call] of [['/api/name', { instance: 'assistant', name: 'piper' }, 'name.set'], ['/api/assistant-stop', { instance: 'assistant' }, 'assistant.stop']]) { + const before = s.calls.length; + const r = await send(s, path, 'null'); + assert.deepEqual([r.status, r.body.error, r.body.sent], [400, 'invalid-request', false], path); + assert.equal(s.calls.length, before, path); + assert.equal((await send(s, path, data)).status, 200, path); + assert.deepEqual(s.calls.at(-1), [call, data]); + } + assert.equal(s.calls.length, 2); +}); + test('Q169 a bus refusal says nothing changed; a lost or odd answer says the change may have been made', async t => { const fail = code => async () => { throw new BusReadError(code); }; for (const [stop, status, error, sent] of [ diff --git a/packages/webui/tests/limits-browser.test.mjs b/packages/webui/tests/limits-browser.test.mjs index c34152bba..1a92984fb 100644 --- a/packages/webui/tests/limits-browser.test.mjs +++ b/packages/webui/tests/limits-browser.test.mjs @@ -39,7 +39,7 @@ test('REQ-LIMIT-3 REQ-LIMIT-4 Settings shows token limits counted, not enforced assert.equal(await b.evaluate('[...document.querySelectorAll("[data-limit-reset]")].every(e=>e.disabled)'),true); assert.equal(await b.evaluate('window.injected===true'),false); // Signed-in send mode: Reset posts the revision and that one path, and nothing else. A draft - // typed before the reset stays, and so does the revision it was typed against. + // typed before the reset stays, and its save carries the revision the reset returned (row 167). await b.navigate(`http://127.0.0.1:${port}/?send=1#/settings`); await wait('document.querySelector("[data-limit-reset]")?.disabled===false'); await b.evaluate(`(()=>{const e=[...document.querySelectorAll('[data-setting]')].find(e=>e.dataset.setting===${JSON.stringify(JSON.stringify(['total']))});e.value='3';e.dispatchEvent(new Event('input',{bubbles:true}));return true;})()`); @@ -51,7 +51,7 @@ test('REQ-LIMIT-3 REQ-LIMIT-4 Settings shows token limits counted, not enforced await b.evaluate('document.querySelector("#launch-settings-form").requestSubmit();true'); await wait('posts.length===2'); const [,save]=await b.evaluate('posts'); - assert.equal(save.revision,'a'.repeat(64)); + assert.equal(save.revision,'b'.repeat(64)); assert.equal(save.limits.total,3); assert.deepEqual(save.limits.tokens,tokens); // A limits answer the server refuses shows no rows and no count. @@ -61,3 +61,25 @@ test('REQ-LIMIT-3 REQ-LIMIT-4 Settings shows token limits counted, not enforced assert.equal(await b.evaluate('document.querySelectorAll("#token-limits-table").length'),0); }finally{await b.close();await close(web);} }); +// Row 167 (#1664): the reset and the Assistant section share one snapshot. With an assistant +// draft open, a reset gives the assistant submit the revision the reset returned. +test('Row 167 with an assistant draft open, a token limit reset gives the assistant submit its revision',{timeout:90000},async()=>{ + const withAssistant={...launch,assistants:{assistant:{definition:'assistant',vars:{model:'claude-opus-5-5'},tracker:null}}}; + const bus={messages:async()=>({messages:[],unread:0}),usage:async()=>{throw Error('no usage');},limits:async()=>({revision:launch.revision,limits:launch.limits,tokens:TOKENS})}; + const web=await startServer({port:0,board:'http://127.0.0.1:9',bus,reads:{settings:()=>({business:'acme',release:'fixture',notifier:{},launch:withAssistant})}}),b=await browser(); + try{ + await b.call('Page.addScriptToEvaluateOnNewDocument',{source:`window.posts=[];window.fixture=${JSON.stringify(withAssistant)};const original=window.fetch;window.fetch=async(url,options={})=>{if(url==='/api/config')return new Response(JSON.stringify({send:true}));if(url==='/api/settings'&&options.method==='POST'){posts.push(JSON.parse(options.body));return new Response(JSON.stringify({...fixture,revision:'bc'[posts.length-1].repeat(64)}));}return original(url,options);};`}); + const q=sel=>`document.querySelector(${JSON.stringify(sel)})`; + const wait=expr=>b.evaluate(`(async()=>{for(let n=0;n<200;n++){if(${expr})return true;await new Promise(r=>setTimeout(r,30));}throw Error('wait failed: '+${JSON.stringify(expr)});})()`); + await b.navigate(`http://127.0.0.1:${web.address().port}/#/settings`); + await wait(`${q('[data-limit-reset]')}?.disabled===false&&${q('.assistant-form button[type=submit]')}?.disabled===false`); + await b.evaluate(`(()=>{const e=${q('.assistant-form [data-assistant-field="tracker"]')};e.value='{"project":"P19"}';e.dispatchEvent(new Event('input',{bubbles:true}));return true;})()`); + await b.evaluate('document.querySelectorAll("[data-limit-reset]")[1].click();true'); + await wait('document.querySelector("#token-limits-receipt")?.textContent.includes("Limit reset.")'); + assert.deepEqual(await b.evaluate('posts'),[{revision:'a'.repeat(64),reset:[['tokens','keys','k1']]}]); + assert.equal(await b.evaluate(`${q('.assistant-form [data-assistant-field="tracker"]')}.value`),'{"project":"P19"}'); + await b.evaluate(`${q('.assistant-form')}.requestSubmit();true`); + await wait(`${q('[data-assistant-receipt]')}?.textContent.includes("Assistant settings saved")`); + assert.deepEqual(await b.evaluate('posts[1]'),{revision:'b'.repeat(64),assistants:{assistant:{tracker:{project:'P19'}}}}); + }finally{await b.close();await close(web);} +}); diff --git a/packages/webui/tests/settings-form.test.mjs b/packages/webui/tests/settings-form.test.mjs index faf18d07d..4778af293 100644 --- a/packages/webui/tests/settings-form.test.mjs +++ b/packages/webui/tests/settings-form.test.mjs @@ -50,3 +50,77 @@ test('Q169 Assistant section: gated, changed fields only, name and stop posts, r await b.evaluate(`${q('[data-assistant-stop]')}.click();true`);await receipt('Stopped 2 runs');assert.deepEqual(await b.evaluate('posts[3]'),['/api/assistant-stop',{instance:'assistant'}]);assert.equal(await b.evaluate('posts.length'),4); }finally{await b.close();await close(web);} }); +// Row 167 (#1664): the names read fails like the usage read. A 403 on it gives the same refused +// page as a 403 on usage; any other failure keeps the Assistant section and says so. +test('Row 167 a refused names read gives the refused usage page; another names failure keeps the Assistant section',{timeout:90000},async()=>{ + const withAssistant={...launch,assistants:{assistant:{definition:'assistant',vars:{model:'claude-sonnet-5-5'},tracker:null}}}; + const bus={inbox:async()=>[],tasks:async()=>[],agents:async()=>[],messages:async()=>({messages:[],unread:0}),names:async()=>[{instance:'assistant',name:'piper',at:'2026-10-18T00:00:00.000Z'}]}; + const web=await startServer({port:0,board:'http://127.0.0.1:9',bus,reads:{settings:()=>({business:'acme',release:'fixture',notifier:{binding:'fixture'},launch:withAssistant})}}),b=await browser(); + try{ + await b.call('Page.addScriptToEvaluateOnNewDocument',{source:`const query=new URL(location.href).searchParams,refuse=query.get('refuse'),fail=query.get('fail'),original=window.fetch;window.fetch=async(url,options={})=>{if(refuse&&url.startsWith('/api/bus/'+refuse))return new Response(JSON.stringify({error:'human-required',message:'fixture refusal'}),{status:403});if(fail&&url.startsWith('/api/bus/'+fail))return new Response(JSON.stringify({error:'bus-unreachable',message:'fixture failure'}),{status:503});return original(url,options);};`}); + const port=web.address().port; + const wait=expr=>b.evaluate(`(async()=>{for(let n=0;n<200;n++){if(${expr})return true;await new Promise(r=>setTimeout(r,30));}throw Error('wait failed: '+${JSON.stringify(expr)});})()`); + const refused=async read=>{await b.navigate(`http://127.0.0.1:${port}/?refuse=${read}#/settings`);await wait('document.querySelector("#bus-view")?.textContent.includes("Bus refused the read")');return b.evaluate('document.querySelector("#bus-view").innerHTML');}; + const usage=await refused('usage'), names=await refused('names'); + assert.match(usage,/refused: human-required<\/code>/); + assert.equal(names,usage); + assert.equal(names.includes('assistant-form')||names.includes('launch-settings-form'),false); + await b.navigate(`http://127.0.0.1:${port}/?fail=names#/settings`);await wait('!!document.querySelector(".assistant-form")'); + assert.equal(await b.evaluate('document.querySelector(".assistant-form").textContent.includes("The current name could not be read.")'),true); + assert.equal(await b.evaluate('document.querySelector("[data-assistant-field=name]").value'),''); + assert.equal(await b.evaluate('!!document.querySelector("#launch-settings-form")'),true); + }finally{await b.close();await close(web);} +}); +// Row 167 (#1664): one settings snapshot. Each POST answers the fixture with the next revision +// (b, c, then d), and reads after it serve that answer, as the server would. A save in one form +// gives the other form's open draft the revision it returned. +const oneSnapshot=`window.posts=[];window.saved=null;const original=window.fetch;window.fetch=async(url,options={})=>{if(url==='/api/config')return new Response(JSON.stringify({send:true}));if(url==='/api/settings'&&options.method==='POST'){posts.push(JSON.parse(options.body));window.saved={...(window.saved||window.fixture),revision:'bcd'[posts.length-1].repeat(64)};return new Response(JSON.stringify(window.saved));}if(url==='/api/settings'&&window.saved){const read=await (await original(url,options)).json();return new Response(JSON.stringify({...read,launch:window.saved}));}return original(url,options);};`; +async function snapshotPage(){ + const withAssistant={...launch,assistants:{assistant:{definition:'assistant',vars:{model:'claude-sonnet-5-5'},tracker:null}}}; + const bus={inbox:async()=>[],tasks:async()=>[],agents:async()=>[],messages:async()=>({messages:[],unread:0}),names:async()=>[{instance:'assistant',name:'piper',at:'2026-10-18T00:00:00.000Z'}]}; + const web=await startServer({port:0,board:'http://127.0.0.1:9',bus,reads:{settings:()=>({business:'acme',release:'fixture',notifier:{binding:'fixture'},launch:withAssistant})}}),b=await browser(); + await b.call('Page.addScriptToEvaluateOnNewDocument',{source:`window.fixture=${JSON.stringify(withAssistant)};${oneSnapshot}`}); + const q=sel=>`document.querySelector(${JSON.stringify(sel)})`; + const wait=expr=>b.evaluate(`(async()=>{for(let n=0;n<200;n++){if(${expr})return true;await new Promise(r=>setTimeout(r,30));}throw Error('wait failed: '+${JSON.stringify(expr)});})()`); + await b.navigate(`http://127.0.0.1:${web.address().port}/#/settings`); + await wait(`${q('#launch-settings-form button[type=submit]')}?.disabled===false&&${q('.assistant-form button[type=submit]')}?.disabled===false`); + const total=()=>b.evaluate(`[...document.querySelectorAll('[data-setting]')].find(e=>e.dataset.setting===${JSON.stringify(JSON.stringify(['total']))}).value`); + return {web,b,q,wait,total, + setTotal:value=>b.evaluate(`(()=>{const e=[...document.querySelectorAll('[data-setting]')].find(e=>e.dataset.setting===${JSON.stringify(JSON.stringify(['total']))});e.value=${JSON.stringify(value)};e.dispatchEvent(new Event('input',{bubbles:true}));return true;})()`), + setTracker:value=>b.evaluate(`(()=>{const e=${q('.assistant-form [data-assistant-field="tracker"]')};e.value=${JSON.stringify(value)};e.dispatchEvent(new Event('input',{bubbles:true}));return true;})()`), + tracker:()=>b.evaluate(`${q('.assistant-form [data-assistant-field="tracker"]')}.value`), + submitLaunch:()=>b.evaluate(`${q('#launch-settings-form')}.requestSubmit();true`), + submitAssistant:()=>b.evaluate(`${q('.assistant-form')}.requestSubmit();true`), + }; +} +test('Row 167 with a limits draft open, an assistant save gives the limits submit its revision and the typed limit stays',{timeout:90000},async()=>{ + const p=await snapshotPage(); + try{ + await p.setTotal('7');await p.setTracker('{"project":"P19"}');await p.submitAssistant(); + await p.wait(`${p.q('[data-assistant-receipt]')}?.textContent.includes("Assistant settings saved")`); + assert.equal((await p.b.evaluate('posts[0]')).revision,launch.revision); + assert.equal(await p.total(),'7'); + await p.submitLaunch();await p.wait(`${p.q('#launch-settings-receipt')}?.textContent.includes("saved")`); + const second=await p.b.evaluate('posts[1]'); + assert.equal(second.revision,'b'.repeat(64)); + assert.equal(second.limits.total,7); + }finally{await p.b.close();await close(p.web);} +}); +test('Row 167 with an assistant draft open, a launch save gives the assistant submit its revision, and reload reads the current one',{timeout:90000},async()=>{ + const p=await snapshotPage(); + try{ + await p.setTracker('{"project":"P19"}');await p.setTotal('7');await p.submitLaunch(); + await p.wait(`${p.q('#launch-settings-receipt')}?.textContent.includes("saved")`); + assert.equal((await p.b.evaluate('posts[0]')).revision,launch.revision); + assert.equal(await p.tracker(),'{"project":"P19"}'); + await p.submitAssistant();await p.wait(`${p.q('[data-assistant-receipt]')}?.textContent.includes("Assistant settings saved")`); + assert.deepEqual(await p.b.evaluate('posts[1]'),{revision:'b'.repeat(64),assistants:{assistant:{tracker:{project:'P19'}}}}); + // Someone else writes, so the file is at d. The reload button clears the snapshot even with an + // assistant draft open, and the draft's submit then carries d. + await p.setTracker('{"project":"P20"}');await p.b.evaluate(`window.saved={...window.saved,revision:'d'.repeat(64)};${p.q('#launch-settings-reload')}.click();true`); + await p.wait(`${p.q('#launch-settings-receipt')}?.textContent===''`); + assert.equal(await p.tracker(),'{"project":"P20"}'); + await p.submitAssistant();await p.wait('posts.length===3'); + assert.deepEqual(await p.b.evaluate('posts[2]'),{revision:'d'.repeat(64),assistants:{assistant:{tracker:{project:'P20'}}}}); + }finally{await p.b.close();await close(p.web);} +});