atlas-iac/testing/tests/test_hermes_hux_ui_research.py
jenkins b66c762f5d hermes(webui): add HUX card UI models with contract-locked suites
Standalone per-card browser model/security/view modules for HUX-01..10
plus node+pytest suites that read the hux.v1 contract schemas directly.
Reconciled drift found on integration: the activity model now accepts
all 32 hux.event.v1 kinds (delegation.*, memory.suppressed,
memory.retrieval_removed, budget.exhausted, side_effect.*), the
autonomy model carries the external_side_effect capability, and the
foundation boundary test now asserts the shipped static HUX surface
exists on disk and that images never bake activated HUX_FLAGS.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf
2026-08-24 04:12:03 -03:00

104 lines
4.1 KiB
Python

"""Executable and static quality gates for isolated HUX-08 research UX."""
from __future__ import annotations
import json
import subprocess
from pathlib import Path
ROOT = Path(__file__).resolve().parents[2]
RESEARCH = ROOT / "dockerfiles" / "hermes-webui-hux" / "research"
def test_hux_research_node_suite_and_coverage():
result = subprocess.run(
[
"node",
"--test",
"--experimental-strip-types",
"--experimental-test-coverage",
"--test-coverage-lines=95",
"--test-coverage-functions=95",
"--test-coverage-branches=95",
"--test-coverage-include=dockerfiles/hermes-webui-hux/research/model.ts",
"--test-coverage-include=dockerfiles/hermes-webui-hux/research/security.ts",
"--test-coverage-include=dockerfiles/hermes-webui-hux/research/endpoints.ts",
"testing/tests/test_hermes_hux_ui_research.mjs",
],
cwd=ROOT,
check=False,
capture_output=True,
text=True,
timeout=30,
)
assert result.returncode == 0, result.stdout + result.stderr
def test_hux_research_matches_shared_contract_and_stays_default_off():
schema = json.loads(
(ROOT / "services/hermes/contracts/hux/citation.schema.json").read_text(
encoding="utf-8"
)
)
model = (RESEARCH / "model.ts").read_text(encoding="utf-8")
for definition in ("source", "passage", "citation", "notebook"):
assert schema["$defs"][definition]["properties"]["schema"]["const"] in model
for value in schema["$defs"]["source"]["properties"]["kind"]["enum"]:
assert f'"{value}"' in model
for value in schema["$defs"]["source"]["properties"]["classification"][
"enum"
]:
assert f'"{value}"' in model
for value in schema["$defs"]["citation"]["properties"]["support"]["enum"]:
assert f'"{value}"' in model
assert "researchEnabled(props.flags)" in (
RESEARCH / "ResearchWorkspace.tsx"
).read_text(encoding="utf-8")
assert "dockerfiles/hermes-webui-hux/research" not in (
ROOT / "dockerfiles/Dockerfile.hermes-webui"
).read_text(encoding="utf-8")
def test_hux_research_ui_is_accessible_and_evidence_is_not_executable():
component = (RESEARCH / "ResearchWorkspace.tsx").read_text(encoding="utf-8")
endpoints = (RESEARCH / "endpoints.ts").read_text(encoding="utf-8")
security = (RESEARCH / "security.ts").read_text(encoding="utf-8")
styles = (RESEARCH / "styles.css").read_text(encoding="utf-8")
assert "if (!enabled || !page) return null" in component
assert 'aria-label="Research and citations"' in component
assert 'aria-expanded={expanded}' in component
assert 'aria-controls={panelId}' in component
assert 'aria-live="polite"' in component
assert "primary source" not in component # classification is data-driven
assert "Research notes" in component
assert "Assumptions" in component
assert "Unresolved questions" in component
assert 'rel="noopener noreferrer"' in component
assert "dangerouslySetInnerHTML" not in component
assert "<iframe" not in component and "<object" not in component
assert "javascript:" not in component and "data:" not in component
assert 'parsed.protocol === "https:"' in security
assert "fetch(" not in endpoints and "axios" not in endpoints
assert ".hux-research" in styles
assert "body" not in styles and ":root" not in styles
assert "prefers-reduced-motion" in styles
def test_hux_research_sources_are_bounded_and_endpoint_only():
sources = sorted(RESEARCH.glob("*"))
assert {path.name for path in sources} == {
"ResearchWorkspace.tsx",
"endpoints.ts",
"index.ts",
"model.ts",
"security.ts",
"styles.css",
"types.ts",
}
for path in sources:
assert len(path.read_text(encoding="utf-8").splitlines()) <= 500
endpoints = (RESEARCH / "endpoints.ts").read_text(encoding="utf-8")
assert "expected_updated_at" in endpoints
assert '"PATCH"' not in endpoints and '"DELETE"' not in endpoints