chore: import upstream snapshot with attribution

tests/hermes_cli/test_session_export.py

@@ -0,0 +1,266 @@
+import json
+import sys
+
+from hermes_cli.session_export import export_record_count, render_sessions_export
+from hermes_cli.session_export_html import (
+    _generate_messages_html,
+    generate_multi_session_html_export,
+)
+
+
+def _sample_session():
+    return {
+        "id": "sess-123",
+        "source": "cli",
+        "model": "test/model",
+        "title": "Debug auth flow",
+        "started_at": 1700000000,
+        "message_count": 5,
+        "messages": [
+            {
+                "id": 1,
+                "role": "system",
+                "content": "hidden system context",
+                "timestamp": 1700000000,
+            },
+            {
+                "id": 2,
+                "role": "user",
+                "content": "Why is login broken?",
+                "timestamp": 1700000001,
+                "platform_message_id": "evt-2",
+            },
+            {
+                "id": 3,
+                "role": "assistant",
+                "content": "I will inspect the auth middleware.",
+                "timestamp": 1700000002,
+            },
+            {
+                "id": 4,
+                "role": "tool",
+                "tool_name": "read_file",
+                "content": "def redirect_after_login(): pass",
+                "timestamp": 1700000003,
+            },
+            {
+                "id": 5,
+                "role": "user",
+                "content": [{"type": "text", "text": "Only show me the prompts."}],
+                "timestamp": 1700000004,
+            },
+        ],
+    }
+
+
+def test_default_jsonl_preserves_full_session_shape():
+    session = _sample_session()
+
+    rendered = render_sessions_export([session])
+
+    assert [json.loads(line) for line in rendered.splitlines()] == [session]
+
+
+def test_prompt_only_jsonl_emits_one_record_per_user_prompt():
+    rendered = render_sessions_export(
+        [_sample_session()],
+        only="user-prompts",
+    )
+
+    records = [json.loads(line) for line in rendered.splitlines()]
+
+    assert records == [
+        {
+            "session_id": "sess-123",
+            "index": 1,
+            "created_at": "2023-11-14T22:13:21Z",
+            "role": "user",
+            "text": "Why is login broken?",
+            "message_id": 2,
+            "event_id": "evt-2",
+        },
+        {
+            "session_id": "sess-123",
+            "index": 2,
+            "created_at": "2023-11-14T22:13:24Z",
+            "role": "user",
+            "text": "Only show me the prompts.",
+            "message_id": 5,
+        },
+    ]
+
+
+def test_prompt_only_markdown_excludes_assistant_tool_and_system_content():
+    rendered = render_sessions_export(
+        [_sample_session()],
+        fmt="markdown",
+        only="user-prompts",
+    )
+
+    assert "# User prompts for session sess-123" in rendered
+    assert "## 1. 2023-11-14T22:13:21Z" in rendered
+    assert "Why is login broken?" in rendered
+    assert "Only show me the prompts." in rendered
+    assert "I will inspect the auth middleware." not in rendered
+    assert "def redirect_after_login" not in rendered
+    assert "hidden system context" not in rendered
+
+
+def test_full_markdown_renderer_collapses_tool_output_and_filters_system():
+    rendered = render_sessions_export([_sample_session()], fmt="markdown")
+
+    assert "# Session: Debug auth flow" in rendered
+    assert "## User - 2023-11-14T22:13:21Z" in rendered
+    assert "## Assistant - 2023-11-14T22:13:22Z" in rendered
+    assert "<details><summary>read_file</summary>" in rendered
+    assert "```text\ndef redirect_after_login(): pass\n```" in rendered
+    assert "hidden system context" not in rendered
+
+
+def test_html_export_escapes_tool_call_names():
+    payload = '<img src=x onerror="alert(document.domain)">'
+
+    rendered = _generate_messages_html(
+        [
+            {
+                "role": "assistant",
+                "content": "",
+                "tool_calls": [
+                    {
+                        "id": "call_1",
+                        "type": "function",
+                        "function": {"name": payload, "arguments": "<b>x</b>"},
+                    }
+                ],
+            }
+        ]
+    )
+
+    assert payload not in rendered
+    assert '&lt;img src=x onerror=&quot;alert(document.domain)&quot;&gt;' in rendered
+    assert "&lt;b&gt;x&lt;/b&gt;" in rendered
+
+
+def test_html_export_uses_csp_without_inline_event_handlers():
+    first = _sample_session()
+    second = {**_sample_session(), "id": "sess-456", "title": "Second session"}
+
+    rendered = generate_multi_session_html_export([first, second])
+
+    assert "Content-Security-Policy" in rendered
+    assert "script-src 'nonce-" in rendered
+    assert "<script nonce=" in rendered
+    assert "onclick=" not in rendered
+
+
+def test_export_record_count_switches_unit_for_prompt_only_exports():
+    assert export_record_count([_sample_session()]) == (1, "session")
+    assert export_record_count([_sample_session()], only="user-prompts") == (
+        2,
+        "prompt",
+    )
+
+
+def test_sessions_export_cli_prompt_only_stdout(monkeypatch, capsys):
+    import hermes_cli.main as main_mod
+    import hermes_state
+
+    captured = {}
+
+    class FakeDB:
+        def resolve_session_id(self, session_id):
+            captured["resolved_from"] = session_id
+            return "sess-123"
+
+        def export_session(self, session_id):
+            captured["exported"] = session_id
+            return _sample_session()
+
+        def close(self):
+            captured["closed"] = True
+
+    monkeypatch.setattr(hermes_state, "SessionDB", lambda: FakeDB())
+    monkeypatch.setattr(
+        sys,
+        "argv",
+        ["hermes", "sessions", "export", "-", "--session-id", "sess", "--only", "user-prompts"],
+    )
+
+    main_mod.main()
+
+    output = capsys.readouterr().out
+    records = [json.loads(line) for line in output.splitlines()]
+    assert [record["text"] for record in records] == [
+        "Why is login broken?",
+        "Only show me the prompts.",
+    ]
+    assert captured == {
+        "resolved_from": "sess",
+        "exported": "sess-123",
+        "closed": True,
+    }
+
+
+def test_sessions_export_cli_prompt_only_markdown_file(monkeypatch, capsys, tmp_path):
+    import hermes_cli.main as main_mod
+    import hermes_state
+
+    class FakeDB:
+        def resolve_session_id(self, _session_id):
+            return "sess-123"
+
+        def export_session(self, _session_id):
+            return _sample_session()
+
+        def close(self):
+            pass
+
+    output_path = tmp_path / "prompts.md"
+    monkeypatch.setattr(hermes_state, "SessionDB", lambda: FakeDB())
+    monkeypatch.setattr(
+        sys,
+        "argv",
+        [
+            "hermes",
+            "sessions",
+            "export",
+            str(output_path),
+            "--session-id",
+            "sess",
+            "--format",
+            "md",
+            "--only",
+            "user-prompts",
+        ],
+    )
+
+    main_mod.main()
+
+    assert f"Exported 2 prompts to {output_path}" in capsys.readouterr().out
+    content = output_path.read_text(encoding="utf-8")
+    assert "# User prompts for session sess-123" in content
+    assert "Why is login broken?" in content
+    assert "I will inspect the auth middleware." not in content
+
+
+def test_sessions_export_only_rejects_unsupported_format(monkeypatch, capsys):
+    import hermes_cli.main as main_mod
+    import hermes_state
+
+    class FakeDB:
+        def export_all(self, source=None):
+            raise AssertionError("should refuse before touching the DB")
+
+        def close(self):
+            pass
+
+    monkeypatch.setattr(hermes_state, "SessionDB", lambda: FakeDB())
+    monkeypatch.setattr(
+        sys,
+        "argv",
+        ["hermes", "sessions", "export", "-", "--format", "html", "--only", "user-prompts"],
+    )
+
+    main_mod.main()
+
+    assert "--only user-prompts supports --format jsonl or md." in capsys.readouterr().out