Files
zero/internal/agent/ask_user_test.go
73eddf758b Agent runtime: ask_user interception, context compaction, guardrails (#125)
* Agent runtime: ask_user interception, context compaction, guardrails

Ports the agent-runtime slices from the reskin branch onto main, MINUS the blueprint's own sub-agent/task interception (main already has the merged specialist Task implementation, which this preserves).

- ask_user (S6): AskUserRequest/AskUserResponse/AskUserQuestion types + Options.OnAskUser; the loop intercepts ask_user and routes to the interactive front-end, degrading gracefully (non-interactive fallback) when no handler is set. Answers are scrubbed through the redaction boundary.

- compaction (S8): Options.ContextWindow + CompactionPreserveLast; proactive compaction when the estimated history crosses a fraction of the window, and reactive recovery on context-limit errors (summarizes the old middle, keeps system + last N). ContextWindow=0 disables it, so every existing caller/test behaves identically.

- guardrails: empty-turn stop, repeated-tool-failure hint/stop, and a stale plan reminder; an aborted-placeholder is appended for unexecuted tool calls on guard stop. confirmation_policy.md is embedded into the system prompt.

Preserved from main's specialist work: the RunWithOptions tool-context fields (ToolCallID/SessionID/Model/ReasoningEffort/Depth/Cwd), propertyToRuntimeMap nested Items, and ToolAdvertised AdvertiseInAuto. Dropped Options.Provider (it existed only for the blueprint task; compaction uses Run's provider arg).

build/vet/-race/full-suite + GOOS=windows build green; no new deps. Unblocks the TUI shell + cli wiring PRs.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

* Address #125 review (CodeRabbit + @Vasanthdev2004): scope failure hint, fix ask_user fallback/cancel

- Repeated-failure guard now fires only on RETRIABLE tool errors (bad args / execution failures), not policy refusals (disabled tool, permission denial, sandbox violation) — a 'match this schema' hint there misdirects the model or nudges it to retry blocked behavior. New isRetriableToolError classifier (keys off permission_action meta + the known policy-error messages). Test: TestIsRetriableToolError.

- Headless ask_user fallback now goes through registry.RunWithOptions with the full run context (ToolCallID/SessionID/Model/ReasoningEffort/Depth/Cwd, sandbox/permission) and copies the full result fields (Meta/ChangedFiles/Display), so it behaves like every other tool path instead of the bare registry.Run that dropped them.

- A canceled / timed-out ask_user prompt (OnAskUser returns context.Canceled/DeadlineExceeded) now ABORTS the run and returns that error instead of fabricating a synthetic 'no interactive user' answer and continuing to mutate the transcript. executeToolCall/executeAskUser return an abort error that the loop honors (closing out remaining advertised calls for replay validity). Test: TestRunAskUserCancellationAbortsRun.

- compaction_test: corrected the comment to match the assertion (retried text must NOT be re-streamed to OnText).

build/vet/-race/full-suite + GOOS=windows build green.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

* gofmt internal/agent/guardrails_test.go

The file carried over from the reskin branch was not gofmt-clean; format it so the gofmt/lint check is green.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

---------

Co-authored-by: KRATOS <[email protected]>
Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>
2026-06-07 22:34:40 +05:30

230 lines
8.3 KiB
Go

package agent
import (
"context"
"errors"
"strings"
"testing"
"github.com/Gitlawb/zero/internal/tools"
"github.com/Gitlawb/zero/internal/zeroruntime"
)
// providerCallingAskUserThenAnswer returns a mock provider whose first turn calls
// the ask_user tool and whose second turn returns a plain-text final answer.
func providerCallingAskUserThenAnswer(arguments string, answer string) *mockProvider {
return &mockProvider{
turns: [][]zeroruntime.StreamEvent{
{
{Type: zeroruntime.StreamEventToolCallStart, ToolCallID: "call-1", ToolName: "ask_user"},
{Type: zeroruntime.StreamEventToolCallDelta, ToolCallID: "call-1", ArgumentsFragment: arguments},
{Type: zeroruntime.StreamEventToolCallEnd, ToolCallID: "call-1"},
{Type: zeroruntime.StreamEventDone},
},
{
{Type: zeroruntime.StreamEventText, Content: answer},
{Type: zeroruntime.StreamEventDone},
},
},
}
}
func registryWithAskUser() *tools.Registry {
registry := tools.NewRegistry()
registry.Register(tools.NewAskUserTool())
return registry
}
func TestRunAskUserReturnsHandlerAnswers(t *testing.T) {
registry := registryWithAskUser()
args := `{"questions":[{"question":"Which framework?","options":["React","Vue"]},{"question":"TypeScript?"}]}`
provider := providerCallingAskUserThenAnswer(args, "thanks")
var requests []AskUserRequest
result, err := Run(context.Background(), "clarify", provider, Options{
Registry: registry,
OnAskUser: func(_ context.Context, request AskUserRequest) (AskUserResponse, error) {
requests = append(requests, request)
return AskUserResponse{Answers: []string{"React", "yes"}}, nil
},
})
if err != nil {
t.Fatal(err)
}
if result.FinalAnswer != "thanks" {
t.Fatalf("expected final answer from second turn, got %q", result.FinalAnswer)
}
if len(requests) != 1 {
t.Fatalf("expected one ask_user request, got %#v", requests)
}
request := requests[0]
if len(request.Questions) != 2 {
t.Fatalf("expected two parsed questions, got %#v", request.Questions)
}
if request.Questions[0].Question != "Which framework?" || len(request.Questions[0].Options) != 2 {
t.Fatalf("unexpected first question: %#v", request.Questions[0])
}
if request.Questions[1].Question != "TypeScript?" {
t.Fatalf("unexpected second question: %#v", request.Questions[1])
}
// The answers must be threaded back to the model as the tool result.
toolMessage := provider.requests[1].Messages[len(provider.requests[1].Messages)-1]
if toolMessage.Role != zeroruntime.MessageRoleTool || toolMessage.ToolCallID != "call-1" {
t.Fatalf("expected tool result message for call-1, got %#v", toolMessage)
}
for _, want := range []string{"Which framework?", "React", "TypeScript?", "yes"} {
if !strings.Contains(toolMessage.Content, want) {
t.Fatalf("expected tool result to contain %q, got %q", want, toolMessage.Content)
}
}
}
func TestRunAskUserWithoutHandlerDegradesGracefully(t *testing.T) {
registry := registryWithAskUser()
args := `{"questions":[{"question":"Which framework?"}]}`
provider := providerCallingAskUserThenAnswer(args, "proceeding with React")
// No OnAskUser handler: the loop must NOT hang, and must hand the model a
// result telling it to proceed with its best assumption.
result, err := Run(context.Background(), "clarify", provider, Options{
Registry: registry,
})
if err != nil {
t.Fatal(err)
}
if result.FinalAnswer != "proceeding with React" {
t.Fatalf("expected loop to continue to a final answer, got %q", result.FinalAnswer)
}
if len(provider.requests) != 2 {
t.Fatalf("expected the loop to continue (2 turns), got %d", len(provider.requests))
}
toolMessage := provider.requests[1].Messages[len(provider.requests[1].Messages)-1]
if toolMessage.ToolCallID != "call-1" {
t.Fatalf("expected tool result for call-1, got %#v", toolMessage)
}
if !strings.Contains(strings.ToLower(toolMessage.Content), "no interactive user") {
t.Fatalf("expected no-interactive-user message, got %q", toolMessage.Content)
}
if !strings.Contains(strings.ToLower(toolMessage.Content), "assumption") {
t.Fatalf("expected guidance to proceed with assumptions, got %q", toolMessage.Content)
}
}
func TestRunAskUserHandlerErrorDegradesGracefully(t *testing.T) {
registry := registryWithAskUser()
args := `{"questions":[{"question":"Which framework?"}]}`
provider := providerCallingAskUserThenAnswer(args, "done")
result, err := Run(context.Background(), "clarify", provider, Options{
Registry: registry,
OnAskUser: func(_ context.Context, _ AskUserRequest) (AskUserResponse, error) {
return AskUserResponse{}, errors.New("user cancelled")
},
})
if err != nil {
t.Fatal(err)
}
if result.FinalAnswer != "done" {
t.Fatalf("expected loop to continue after handler error, got %q", result.FinalAnswer)
}
toolMessage := provider.requests[1].Messages[len(provider.requests[1].Messages)-1]
if !strings.Contains(strings.ToLower(toolMessage.Content), "no interactive user") {
t.Fatalf("expected graceful degradation message after handler error, got %q", toolMessage.Content)
}
}
func TestRunAskUserCancellationAbortsRun(t *testing.T) {
registry := registryWithAskUser()
args := `{"questions":[{"question":"Which framework?"}]}`
provider := providerCallingAskUserThenAnswer(args, "done")
result, err := Run(context.Background(), "clarify", provider, Options{
Registry: registry,
OnAskUser: func(_ context.Context, _ AskUserRequest) (AskUserResponse, error) {
return AskUserResponse{}, context.Canceled
},
})
// A canceled prompt must abort with that error — NOT fabricate a headless
// answer and run on to a final answer.
if !errors.Is(err, context.Canceled) {
t.Fatalf("expected run to abort with context.Canceled, got err=%v answer=%q", err, result.FinalAnswer)
}
// The model must not be asked for a follow-up turn after cancellation.
if len(provider.requests) != 1 {
t.Fatalf("expected the run to stop after the canceled ask_user (1 turn), got %d", len(provider.requests))
}
// The recorded tool result must reflect cancellation, not a synthetic answer.
var toolMsg string
for _, m := range result.Messages {
if m.Role == zeroruntime.MessageRoleTool {
toolMsg = m.Content
}
}
if !strings.Contains(strings.ToLower(toolMsg), "canceled") {
t.Fatalf("expected a canceled tool result, got %q", toolMsg)
}
if strings.Contains(strings.ToLower(toolMsg), "no interactive user") {
t.Fatalf("must not fabricate a headless answer on cancellation, got %q", toolMsg)
}
}
func TestRunAskUserRedactsSecretsInAnswers(t *testing.T) {
registry := registryWithAskUser()
secret := "sk-ant-api03-ABCDEFGHIJKLMNOP1234567890"
args := `{"questions":[{"question":"Paste your key"}]}`
provider := providerCallingAskUserThenAnswer(args, "done")
var captured ToolResult
_, err := Run(context.Background(), "clarify", provider, Options{
Registry: registry,
OnToolResult: func(r ToolResult) { captured = r },
OnAskUser: func(_ context.Context, _ AskUserRequest) (AskUserResponse, error) {
return AskUserResponse{Answers: []string{"my key is " + secret}}, nil
},
})
if err != nil {
t.Fatal(err)
}
if strings.Contains(captured.Output, secret) {
t.Fatalf("secret leaked into ask_user tool result: %q", captured.Output)
}
if !captured.Redacted {
t.Error("expected Redacted=true when a secret was scrubbed from an ask_user answer")
}
// The redacted answer must also not reach the model.
for _, m := range provider.requests[1].Messages {
if strings.Contains(m.Content, secret) {
t.Fatalf("secret leaked into model message: %q", m.Content)
}
}
}
func TestRunAskUserRejectsMissingQuestions(t *testing.T) {
registry := registryWithAskUser()
provider := providerCallingAskUserThenAnswer(`{"questions":[]}`, "done")
result, err := Run(context.Background(), "clarify", provider, Options{
Registry: registry,
OnAskUser: func(_ context.Context, _ AskUserRequest) (AskUserResponse, error) {
t.Fatal("handler should not be invoked when questions are missing")
return AskUserResponse{}, nil
},
})
if err != nil {
t.Fatal(err)
}
if result.FinalAnswer != "done" {
t.Fatalf("expected loop to continue, got %q", result.FinalAnswer)
}
toolMessage := provider.requests[1].Messages[len(provider.requests[1].Messages)-1]
if !strings.Contains(strings.ToLower(toolMessage.Content), "at least one question") {
t.Fatalf("expected invalid-arguments message, got %q", toolMessage.Content)
}
}