| """Tests for hermes_cli.copilot_auth — Copilot token validation and resolution.""" |
|
|
| import os |
| import pytest |
| from unittest.mock import patch, MagicMock |
|
|
|
|
| class TestTokenValidation: |
| """Token type validation.""" |
|
|
| def test_classic_pat_rejected(self): |
| from hermes_cli.copilot_auth import validate_copilot_token |
| valid, msg = validate_copilot_token("ghp_abcdefghijklmnop1234") |
| assert valid is False |
| assert "Classic Personal Access Tokens" in msg |
| assert "ghp_" in msg |
|
|
| def test_oauth_token_accepted(self): |
| from hermes_cli.copilot_auth import validate_copilot_token |
| valid, msg = validate_copilot_token("gho_abcdefghijklmnop1234") |
| assert valid is True |
|
|
| def test_fine_grained_pat_accepted(self): |
| from hermes_cli.copilot_auth import validate_copilot_token |
| valid, msg = validate_copilot_token("github_pat_abcdefghijklmnop1234") |
| assert valid is True |
|
|
| def test_github_app_token_accepted(self): |
| from hermes_cli.copilot_auth import validate_copilot_token |
| valid, msg = validate_copilot_token("ghu_abcdefghijklmnop1234") |
| assert valid is True |
|
|
| def test_empty_token_rejected(self): |
| from hermes_cli.copilot_auth import validate_copilot_token |
| valid, msg = validate_copilot_token("") |
| assert valid is False |
|
|
| def test_is_classic_pat(self): |
| from hermes_cli.copilot_auth import is_classic_pat |
| assert is_classic_pat("ghp_abc123") is True |
| assert is_classic_pat("gho_abc123") is False |
| assert is_classic_pat("github_pat_abc") is False |
| assert is_classic_pat("") is False |
|
|
|
|
| class TestResolveToken: |
| """Token resolution with env var priority.""" |
|
|
| def test_copilot_github_token_first_priority(self, monkeypatch): |
| from hermes_cli.copilot_auth import resolve_copilot_token |
| monkeypatch.setenv("COPILOT_GITHUB_TOKEN", "gho_copilot_first") |
| monkeypatch.setenv("GH_TOKEN", "gho_gh_second") |
| monkeypatch.setenv("GITHUB_TOKEN", "gho_github_third") |
| token, source = resolve_copilot_token() |
| assert token == "gho_copilot_first" |
| assert source == "COPILOT_GITHUB_TOKEN" |
|
|
| def test_gh_token_second_priority(self, monkeypatch): |
| from hermes_cli.copilot_auth import resolve_copilot_token |
| monkeypatch.delenv("COPILOT_GITHUB_TOKEN", raising=False) |
| monkeypatch.setenv("GH_TOKEN", "gho_gh_second") |
| monkeypatch.setenv("GITHUB_TOKEN", "gho_github_third") |
| token, source = resolve_copilot_token() |
| assert token == "gho_gh_second" |
| assert source == "GH_TOKEN" |
|
|
| def test_github_token_third_priority(self, monkeypatch): |
| from hermes_cli.copilot_auth import resolve_copilot_token |
| monkeypatch.delenv("COPILOT_GITHUB_TOKEN", raising=False) |
| monkeypatch.delenv("GH_TOKEN", raising=False) |
| monkeypatch.setenv("GITHUB_TOKEN", "gho_github_third") |
| token, source = resolve_copilot_token() |
| assert token == "gho_github_third" |
| assert source == "GITHUB_TOKEN" |
|
|
| def test_classic_pat_in_env_skipped(self, monkeypatch): |
| """Classic PATs in env vars should be skipped, not returned.""" |
| from hermes_cli.copilot_auth import resolve_copilot_token |
| monkeypatch.setenv("COPILOT_GITHUB_TOKEN", "ghp_classic_pat_nope") |
| monkeypatch.delenv("GH_TOKEN", raising=False) |
| monkeypatch.setenv("GITHUB_TOKEN", "gho_valid_oauth") |
| token, source = resolve_copilot_token() |
| |
| assert token == "gho_valid_oauth" |
| assert source == "GITHUB_TOKEN" |
|
|
| def test_gh_cli_fallback(self, monkeypatch): |
| from hermes_cli.copilot_auth import resolve_copilot_token |
| monkeypatch.delenv("COPILOT_GITHUB_TOKEN", raising=False) |
| monkeypatch.delenv("GH_TOKEN", raising=False) |
| monkeypatch.delenv("GITHUB_TOKEN", raising=False) |
| with patch("hermes_cli.copilot_auth._try_gh_cli_token", return_value="gho_from_cli"): |
| token, source = resolve_copilot_token() |
| assert token == "gho_from_cli" |
| assert source == "gh auth token" |
|
|
| def test_gh_cli_classic_pat_raises(self, monkeypatch): |
| from hermes_cli.copilot_auth import resolve_copilot_token |
| monkeypatch.delenv("COPILOT_GITHUB_TOKEN", raising=False) |
| monkeypatch.delenv("GH_TOKEN", raising=False) |
| monkeypatch.delenv("GITHUB_TOKEN", raising=False) |
| with patch("hermes_cli.copilot_auth._try_gh_cli_token", return_value="ghp_classic"): |
| with pytest.raises(ValueError, match="classic PAT"): |
| resolve_copilot_token() |
|
|
| def test_no_token_returns_empty(self, monkeypatch): |
| from hermes_cli.copilot_auth import resolve_copilot_token |
| monkeypatch.delenv("COPILOT_GITHUB_TOKEN", raising=False) |
| monkeypatch.delenv("GH_TOKEN", raising=False) |
| monkeypatch.delenv("GITHUB_TOKEN", raising=False) |
| with patch("hermes_cli.copilot_auth._try_gh_cli_token", return_value=None): |
| token, source = resolve_copilot_token() |
| assert token == "" |
| assert source == "" |
|
|
|
|
| class TestRequestHeaders: |
| """Copilot API header generation.""" |
|
|
| def test_default_headers_include_openai_intent(self): |
| from hermes_cli.copilot_auth import copilot_request_headers |
| headers = copilot_request_headers() |
| assert headers["Openai-Intent"] == "conversation-edits" |
| assert headers["User-Agent"] == "HermesAgent/1.0" |
| assert "Editor-Version" in headers |
|
|
| def test_agent_turn_sets_initiator(self): |
| from hermes_cli.copilot_auth import copilot_request_headers |
| headers = copilot_request_headers(is_agent_turn=True) |
| assert headers["x-initiator"] == "agent" |
|
|
| def test_user_turn_sets_initiator(self): |
| from hermes_cli.copilot_auth import copilot_request_headers |
| headers = copilot_request_headers(is_agent_turn=False) |
| assert headers["x-initiator"] == "user" |
|
|
| def test_vision_header(self): |
| from hermes_cli.copilot_auth import copilot_request_headers |
| headers = copilot_request_headers(is_vision=True) |
| assert headers["Copilot-Vision-Request"] == "true" |
|
|
| def test_no_vision_header_by_default(self): |
| from hermes_cli.copilot_auth import copilot_request_headers |
| headers = copilot_request_headers() |
| assert "Copilot-Vision-Request" not in headers |
|
|
|
|
| class TestCopilotDefaultHeaders: |
| """The models.py copilot_default_headers uses copilot_auth.""" |
|
|
| def test_includes_openai_intent(self): |
| from hermes_cli.models import copilot_default_headers |
| headers = copilot_default_headers() |
| assert "Openai-Intent" in headers |
| assert headers["Openai-Intent"] == "conversation-edits" |
|
|
| def test_includes_x_initiator(self): |
| from hermes_cli.models import copilot_default_headers |
| headers = copilot_default_headers() |
| assert "x-initiator" in headers |
|
|
|
|
| class TestApiModeSelection: |
| """API mode selection matching opencode's shouldUseCopilotResponsesApi.""" |
|
|
| def test_gpt5_uses_responses(self): |
| from hermes_cli.models import _should_use_copilot_responses_api |
| assert _should_use_copilot_responses_api("gpt-5.4") is True |
| assert _should_use_copilot_responses_api("gpt-5.4-mini") is True |
| assert _should_use_copilot_responses_api("gpt-5.3-codex") is True |
| assert _should_use_copilot_responses_api("gpt-5.2-codex") is True |
| assert _should_use_copilot_responses_api("gpt-5.2") is True |
| assert _should_use_copilot_responses_api("gpt-5.1-codex-max") is True |
|
|
| def test_gpt5_mini_excluded(self): |
| from hermes_cli.models import _should_use_copilot_responses_api |
| assert _should_use_copilot_responses_api("gpt-5-mini") is False |
|
|
| def test_gpt4_uses_chat(self): |
| from hermes_cli.models import _should_use_copilot_responses_api |
| assert _should_use_copilot_responses_api("gpt-4.1") is False |
| assert _should_use_copilot_responses_api("gpt-4o") is False |
| assert _should_use_copilot_responses_api("gpt-4o-mini") is False |
|
|
| def test_non_gpt_uses_chat(self): |
| from hermes_cli.models import _should_use_copilot_responses_api |
| assert _should_use_copilot_responses_api("claude-sonnet-4.6") is False |
| assert _should_use_copilot_responses_api("claude-opus-4.6") is False |
| assert _should_use_copilot_responses_api("gemini-2.5-pro") is False |
| assert _should_use_copilot_responses_api("grok-code-fast-1") is False |
|
|
|
|
| class TestEnvVarOrder: |
| """PROVIDER_REGISTRY has correct env var order.""" |
|
|
| def test_copilot_env_vars_include_copilot_github_token(self): |
| from hermes_cli.auth import PROVIDER_REGISTRY |
| copilot = PROVIDER_REGISTRY["copilot"] |
| assert "COPILOT_GITHUB_TOKEN" in copilot.api_key_env_vars |
| |
| assert copilot.api_key_env_vars[0] == "COPILOT_GITHUB_TOKEN" |
|
|
| def test_copilot_env_vars_order_matches_docs(self): |
| from hermes_cli.auth import PROVIDER_REGISTRY |
| copilot = PROVIDER_REGISTRY["copilot"] |
| assert copilot.api_key_env_vars == ( |
| "COPILOT_GITHUB_TOKEN", "GH_TOKEN", "GITHUB_TOKEN" |
| ) |
|
|
