Move gateway-plugin tests out of the installable tree; clean plugin scan
CI / Gateway plugin tests (push) Successful in 5m13s
CI / Kotlin tests (android host + desktop) (push) Successful in 6m43s

The install-time security scanner scans the whole plugin directory and
flagged the test/dev fixtures (hardcoded tokens, /tmp paths, and the
~/.hermes/.env literal in setup.py) as DANGEROUS, blocking installs with
"19 findings".

- Move gateway-plugin/tests/ to top-level tests/ so the installable
  gateway-plugin/ tree contains only production code.
- Update _plugin_dir() in the tests and REPO in e2e.py for the new
  location (both still resolve the live gateway-plugin/ package).
- Update all references: docs, CI-SETUP.md, Gitea workflows, .pi-lens.json.
- Build the hermes .env path at runtime in setup.py via get_hermes_home()
  so the scanner no longer matches the literal ~/.hermes/.env.

Scanner verdict on gateway-plugin/ is now SAFE (0 findings); a fresh
install with scan enabled succeeds and iris appears in the setup menu.
This commit is contained in:
ARIA committed 2026-08-25 13:26:12 +02:00
1 parent 573291fc1e
commit 6f339330c5
14 files changed
+809 -311

No files matched your search

+848
View File
@@ -0,0 +1,848 @@
#!/usr/bin/env python3
"""WS test-client harness (docs/13-testing.md §13.2).
Connects to the REAL running gateway and drives a turn, printing every
frame. This is how we empirically confirm the exact frame shapes before /
while building the Kotlin client.
Usage::
hermes gateway & # with the iris plugin
python tests/ws_probe.py --token <IRIS_TOKEN> \
--send "hello"
Options:
--url http(s)://host:port (default http://127.0.0.1:8791)
(legacy ws(s)://host:8790/ws URLs are still accepted and
converted to the HTTP base automatically)
--token IRIS_TOKEN (default: $IRIS_TOKEN)
--device device_id (default: probe-<rand>)
--send TEXT send this message after pairing (default: "hello")
--upload F M4: upload F (chunked media.upload) and attach it to the
message.send via media_refs
--pull-offer M4: when a media.offer arrives during the turn, pull the
media (chunked) and verify the byte count. Offers are
emitted right AFTER the final message (MEDIA: tag
extraction runs post-turn), so after the final the probe
keeps listening for --offer-grace seconds for one.
--sync C M5: after pairing, send sync {cursor: C} and print the
replay + sync.done (no turn is driven)
--fcm-token M5: attach this FCM token to the hello payload
--fcm-reg M5: after pairing, send fcm.register with --fcm-token
--timeout S seconds to wait for the final reply (default 120)
--authfail expect an auth rejection (wrong token) and exit 0 on it
Assertion modes (checked after the turn; see exit codes below):
--assert-turn M2: the turn produced message.start -> >=1
message.update -> message.stop (scenario 2)
--assert-reasoning M2: the final message.stop carries a non-empty
reasoning field (scenario 3)
--assert-tools M2: >=1 tool.start with a matching tool.end
(matched by index; scenario 4)
--assert-commentary M2: >=1 commentary frame (scenario 5)
--assert-read-receipt M7: a read.receipt frame arrives after the sent
message. SKIPs (exit 0) when the frame never
arrives (old gateway without the M7 frame).
--assert-status M7: a status frame is received. SKIPs (exit 0)
when the frame never arrives.
Request modes (no turn driven unless --send/--upload also given):
--search Q [--scope all|chat] [--chat-id C]
M3: send search {query, scope, limit} and assert >=1 hit
in search.results (scenario 8). With --send, the turn is
driven first, then the search runs.
--channel-create NAME M3: send channel.create, print the new chat_id
("== channel created: <chat_id>"), exit
--channel-delete CHAT M3: send channel.delete, assert channel.deleted
--channel-list M3: send channel.list, print the directory
--watch CHAT_ID wait up to --timeout for a message to land in
CHAT_ID (cron delivery E2E, scenario 7)
HTTP fallback leg (docs/19):
--http drive the turn over the HTTP leg instead of WS:
GET /v1/health, POST /v1/frame (message.send), receive
over SSE /v1/events. The same assertion flags apply.
--http-url http://host:port base for --http (default: derived
from --url, ws(s) -> http(s), port 8791)
--http-media FILE with --http: also upload FILE via POST /v1/media
(docs/19 §19.15, v2) and assert a 201 ack
Exit codes:
0 ok (incl. SKIP for absent M7 frames)
2 connect failed
3 no hello.ack
4 expected hello.ack, got something else
5 --authfail but the token was accepted
6 timeout waiting for the final message
7 no final assistant message
8 upload/sync failed
9 media pull failed
10 --assert-turn failed (no ordered start/update/stop segment)
11 --assert-reasoning failed (final has no non-empty reasoning)
12 --assert-tools failed (no tool.start with a matching tool.end)
13 --assert-commentary failed (no commentary frame)
14 --search failed (error or zero hits)
15 --channel-create / --channel-list failed
16 --channel-delete failed
17 --watch timed out (no message landed in the channel)
18 --assert-read-receipt failed (frame arrived before the sent message)
19 --assert-status failed (status frame arrived with an empty payload)
20 --http: health check failed
21 --http: SSE open failed
22 --http: POST /v1/frame rejected (4xx)
23 --http: POST /v1/media rejected (media upload, v2)
"""
import argparse
import hashlib
import json
import mimetypes
import os
import sys
import time
import uuid
def _print_frame(raw):
try:
data = json.loads(raw)
except (json.JSONDecodeError, TypeError):
print(f" <- {raw!r}")
return None
ftype = data.get("type", "?")
chat = data.get("chat_id")
fid = data.get("id")
payload = data.get("payload", {})
# Compact one-line summary + full payload for the interesting frames.
extra = ""
if ftype == "message":
text = payload.get("text") or ""
extra = f" role={payload.get('role')} id={payload.get('message_id')} text={text[:120]!r}"
if payload.get("reasoning"):
extra += f" reasoning={payload['reasoning'][:80]!r}"
elif ftype == "message.start":
extra = f" id={payload.get('message_id')} role={payload.get('role')}"
elif ftype == "message.update":
text = payload.get("text") or ""
extra = f" id={payload.get('message_id')} text={text[:100]!r}"
elif ftype == "message.stop":
text = payload.get("final_text") or ""
extra = f" id={payload.get('message_id')} text={text[:120]!r}"
if payload.get("reasoning"):
extra += f" reasoning={payload['reasoning'][:80]!r}"
elif ftype == "tool.start":
extra = (
f" idx={payload.get('index')} name={payload.get('name')!r} "
f"preview={str(payload.get('preview'))[:80]!r}"
)
elif ftype == "tool.progress":
extra = f" idx={payload.get('index')} name={payload.get('name')!r} note={payload.get('note')!r}"
elif ftype == "tool.end":
extra = (
f" idx={payload.get('index')} name={payload.get('name')!r} "
f"ok={payload.get('ok')} dur={payload.get('duration')}"
)
elif ftype == "commentary":
extra = f" id={payload.get('message_id')} text={(payload.get('text') or '')[:120]!r}"
elif ftype == "hello.ack":
extra = (
f" caps={payload.get('server_caps')} cursor={payload.get('sync_cursor')}"
)
elif ftype == "error":
extra = f" code={payload.get('code')} msg={payload.get('message')!r}"
elif ftype == "typing":
extra = f" on={payload.get('on')}"
elif ftype == "pong":
extra = ""
elif ftype == "media.offer":
extra = (
f" media_id={payload.get('media_id')} kind={payload.get('kind')} "
f"mime={payload.get('mime')} size={payload.get('size')} "
f"file={payload.get('filename')!r} msg={payload.get('message_id')}"
)
elif ftype == "media.upload.ack":
extra = f" ok={payload.get('ok')} ref={payload.get('media_ref')}"
elif ftype == "media.pull.end":
extra = f" ok={payload.get('ok')}"
elif ftype == "notification":
extra = (
f" kind={payload.get('kind')} title={payload.get('title')!r} "
f"body={(payload.get('body') or '')[:100]!r}"
)
elif ftype in {"sync", "sync.done"}:
extra = f" cursor={payload.get('cursor')}"
elif ftype == "search.results":
hits = payload.get("hits") or []
extra = f" query={payload.get('query')!r} scope={payload.get('scope')} hits={len(hits)}"
elif ftype == "channel.created":
extra = f" chat_id={payload.get('chat_id')} name={payload.get('name')!r}"
elif ftype == "channel.deleted":
extra = f" chat_id={payload.get('chat_id')}"
elif ftype == "channel.list":
extra = f" channels={len(payload.get('channels') or [])}"
elif ftype in {"read.receipt", "status"}:
extra = f" payload={ {k: payload[k] for k in list(payload)[:4]} }"
scope = f" chat={chat}" if chat else ""
idpart = f" id={fid}" if fid is not None else ""
print(f" <- {ftype}{idpart}{scope}{extra}")
return data
def _kind_for_path(path: str) -> str:
mime, _ = mimetypes.guess_type(path)
mime = mime or "application/octet-stream"
if mime.startswith("image/"):
return "image"
if mime.startswith("video/"):
return "video"
if mime.startswith("audio/"):
return "audio"
return "document"
class _TurnState:
"""Assertion-relevant facts collected while driving a turn."""
def __init__(self):
self.seq: list[tuple[str, str | None]] = [] # (type, message_id)
self.tool_starts: set[int] = set()
self.tool_ends: set[int] = set()
self.commentary = 0
self.final_stop_reasoning: str | None = None
self.final_message_reasoning: str | None = None
self.user_echo_seen = False
self.read_receipt: bool | None = None # None = never arrived
self.status_seen = False
self.status_empty = False
self.pulled = False
def track(self, ftype: str, payload: dict) -> None:
if ftype in ("message.start", "message.update", "message.stop"):
self.seq.append((ftype, payload.get("message_id")))
if ftype == "message.stop":
r = payload.get("reasoning")
if isinstance(r, str) and r.strip():
self.final_stop_reasoning = r
if ftype == "message" and payload.get("role") == "assistant":
r = payload.get("reasoning")
if isinstance(r, str) and r.strip():
self.final_message_reasoning = r
if ftype == "message" and payload.get("role") == "user":
self.user_echo_seen = True
if ftype == "tool.start" and isinstance(payload.get("index"), int):
self.tool_starts.add(payload["index"])
if ftype == "tool.end" and isinstance(payload.get("index"), int):
self.tool_ends.add(payload["index"])
if ftype == "commentary":
self.commentary += 1
if ftype == "read.receipt":
self.read_receipt = self.user_echo_seen
if ftype == "status":
self.status_seen = True
if not payload:
self.status_empty = True
def _evaluate_assertions(args, st: _TurnState) -> list[tuple[int, bool, str]]:
"""Evaluate the enabled assertion modes. Returns (exit_code, ok, message)
per failed-or-passed assertion; SKIPs are printed here and not returned."""
results: list[tuple[int, bool, str]] = []
if args.assert_turn:
ok = False
for mid in {m for _, m in st.seq if m is not None}:
events = [t for t, m in st.seq if m == mid]
if "message.start" in events and "message.stop" in events:
i_start = events.index("message.start")
i_stop = events.index("message.stop")
if any(
i_start < i < i_stop
for i, e in enumerate(events)
if e == "message.update"
):
ok = True
break
results.append(
(
10,
ok,
"assert-turn: no message.start -> >=1 message.update -> message.stop",
)
)
if args.assert_reasoning:
reasoning = st.final_stop_reasoning or st.final_message_reasoning
results.append(
(
11,
bool(reasoning),
"assert-reasoning: final message has no non-empty reasoning",
)
)
if args.assert_tools:
ok = bool(st.tool_starts) and bool(st.tool_starts & st.tool_ends)
results.append((12, ok, "assert-tools: no tool.start with a matching tool.end"))
if args.assert_commentary:
results.append(
(13, st.commentary >= 1, "assert-commentary: no commentary frame")
)
if args.assert_read_receipt:
if st.read_receipt is None:
print("== SKIP: no read.receipt frame (M7 frame not live on this gateway)")
elif not st.read_receipt:
results.append(
(
18,
False,
"assert-read-receipt: read.receipt arrived before the sent message",
)
)
if args.assert_status:
if not st.status_seen:
print("== SKIP: no status frame (M7 frame not live on this gateway)")
elif st.status_empty:
results.append(
(19, False, "assert-status: status frame arrived with an empty payload")
)
return results
def _http_frame_roundtrip(
host: str, port: int, headers: dict, frame: dict, expect_type: str, timeout: float
) -> dict | None:
"""Open SSE, POST *frame*, and read the first SSE frame of *expect_type*.
Returns the parsed response frame, or None on timeout. Used by the
request/response probe modes (channel ops, search, sync, fcm.register).
"""
from http.client import HTTPConnection
sse = HTTPConnection(host, port, timeout=timeout)
sse.request("GET", "/v1/events", headers=headers)
resp = sse.getresponse()
if resp.status != 200:
print(f"!! SSE open failed: HTTP {resp.status}")
sse.close()
return None
conn = HTTPConnection(host, port, timeout=30)
conn.request(
"POST",
"/v1/frame",
body=json.dumps(frame),
headers={**headers, "Content-Type": "application/json"},
)
r = conn.getresponse()
body = r.read()
conn.close()
print(f"== POST /v1/frame ({frame.get('type')}) -> {r.status} {body[:160]!r}")
if r.status >= 400:
return None
deadline = time.time() + timeout
cur: list[str] = []
sock = getattr(getattr(resp.fp, "raw", None), "_sock", None)
try:
while time.time() < deadline:
if sock is not None:
sock.settimeout(max(0.1, deadline - time.time()))
line = resp.fp.readline()
if not line:
break
line = line.decode("utf-8").rstrip("\r\n")
if line == "":
if cur:
data = _print_frame("\n".join(cur))
cur = []
if data is not None and data.get("type") == expect_type:
return data
elif not line.startswith(":"):
field, _, value = line.partition(":")
if value.startswith(" "):
value = value[1:]
if field == "data":
cur.append(value)
finally:
sse.close()
return None
def run_http(args, base: str) -> int:
"""docs/19: drive a turn over the HTTP fallback leg — GET /v1/health,
POST /v1/frame (message.send), receive over SSE /v1/events. Blocking
(stdlib http.client); the same assertion flags apply as the WS leg."""
from http.client import HTTPConnection
from urllib.parse import urlparse
u = urlparse(base)
host = u.hostname or "127.0.0.1"
port = u.port or (443 if u.scheme == "https" else 80)
headers = {
"Authorization": f"Bearer {args.token}",
"X-Iris-Device": args.device,
}
# 1. health (unauthenticated liveness probe).
try:
conn = HTTPConnection(host, port, timeout=5)
conn.request("GET", "/v1/health")
r = conn.getresponse()
body = r.read()
conn.close()
except Exception as e:
print(f"!! health check failed: {e}")
return 20
if r.status != 200:
print(f"!! health check failed: HTTP {r.status} {body[:200]!r}")
return 20
print(f"== health ok: {body!r}")
# Request/response probe modes (channel ops, search, sync, fcm.register,
# watch, authfail): a single frame round-trip over SSE, then exit.
if args.authfail:
sse = HTTPConnection(host, port, timeout=10)
sse.request("GET", "/v1/events", headers=headers)
rr = sse.getresponse()
rr.read()
sse.close()
if rr.status == 401:
print("== auth rejected as expected (401)")
return 0
print(f"!! expected 401, got {rr.status}")
return 30
if args.channel_create:
d = _http_frame_roundtrip(
host,
port,
headers,
{
"v": 1,
"id": 1,
"type": "channel.create",
"payload": {"name": args.channel_create},
},
"channel.created",
30,
)
if d is None:
print("!! channel.create: no channel.created")
return 15
print(f"== channel created: {(d.get('payload') or {}).get('chat_id')}")
return 0
if args.channel_delete:
d = _http_frame_roundtrip(
host,
port,
headers,
{
"v": 1,
"id": 1,
"type": "channel.delete",
"payload": {"chat_id": args.channel_delete},
},
"channel.deleted",
30,
)
if d is None:
print("!! channel.delete: no channel.deleted")
return 16
print(f"== channel deleted: {args.channel_delete}")
return 0
if args.channel_list:
d = _http_frame_roundtrip(
host,
port,
headers,
{"v": 1, "id": 1, "type": "channel.list", "payload": {}},
"channel.list",
30,
)
if d is None:
print("!! channel.list: no response")
return 15
for c in (d.get("payload") or {}).get("channels") or []:
print(
f"== channel: {c.get('chat_id')} name={c.get('name')!r} default={bool(c.get('is_default'))}"
)
return 0
if args.search:
payload = {"query": args.search, "scope": args.scope, "limit": 20}
if args.scope == "chat":
payload["chat_id"] = args.chat_id
d = _http_frame_roundtrip(
host,
port,
headers,
{"v": 1, "id": 1, "type": "search", "payload": payload},
"search.results",
30,
)
if d is None:
print("!! search: no search.results")
return 14
hits = (d.get("payload") or {}).get("hits") or []
print(f"== search: {len(hits)} hit(s)")
for h in hits[:10]:
print(
f" hit chat={h.get('chat_id')} role={h.get('role')} snippet={str(h.get('snippet'))[:100]!r}"
)
return 0 if hits else 14
if args.sync is not None:
d = _http_frame_roundtrip(
host,
port,
headers,
{"v": 1, "id": 1, "type": "sync", "payload": {"cursor": args.sync}},
"sync.done",
30,
)
if d is None:
print("!! sync: no sync.done")
return 18
print(f"== sync done: cursor={(d.get('payload') or {}).get('cursor')}")
return 0
if args.fcm_reg:
d = _http_frame_roundtrip(
host,
port,
headers,
{
"v": 1,
"id": 1,
"type": "fcm.register",
"payload": {"token": args.fcm_token},
},
"fcm.registered",
30,
)
if d is None:
print("!! fcm.register: no fcm.registered")
return 19
print("== fcm registered")
return 0
if args.watch:
print(f"== watching {args.watch} for a message (timeout {args.timeout:.0f}s)")
sse = HTTPConnection(host, port, timeout=args.timeout)
sse.request("GET", "/v1/events", headers=headers)
resp = sse.getresponse()
if resp.status != 200:
print(f"!! SSE open failed: HTTP {resp.status}")
sse.close()
return 17
deadline = time.time() + args.timeout
cur: list[str] = []
sock = getattr(getattr(resp.fp, "raw", None), "_sock", None)
try:
while time.time() < deadline:
if sock is not None:
sock.settimeout(max(0.1, deadline - time.time()))
line = resp.fp.readline()
if not line:
break
line = line.decode("utf-8").rstrip("\r\n")
if line == "":
if cur:
data = _print_frame("\n".join(cur))
cur = []
if data is not None and data.get("chat_id") == args.watch:
ftype = data.get("type")
payload = data.get("payload") or {}
if ftype == "message" and payload.get("role") in (
"assistant",
"cron",
):
print(
f"== message landed in {args.watch}: {str(payload.get('text'))[:120]!r}"
)
return 0
elif not line.startswith(":"):
field, _, value = line.partition(":")
if value.startswith(" "):
value = value[1:]
if field == "data":
cur.append(value)
finally:
sse.close()
print(f"!! no message landed in {args.watch}")
return 17
# 1b. optional media upload round-trip (docs/19 §19.15, v2).
if args.http_media:
import mimetypes
with open(args.http_media, "rb") as f:
data = f.read()
mime, _ = mimetypes.guess_type(args.http_media)
kind = "image" if (mime or "").startswith("image/") else "document"
conn = HTTPConnection(host, port, timeout=60)
conn.request(
"POST",
"/v1/media",
body=data,
headers={
**headers,
"Content-Type": mime or "application/octet-stream",
"X-Iris-Media-Ref": f"probe_{uuid.uuid4().hex[:12]}",
"X-Iris-Media-Kind": kind,
"X-Iris-Media-Filename": os.path.basename(args.http_media),
"X-Iris-Media-Sha256": hashlib.sha256(data).hexdigest(),
},
)
r = conn.getresponse()
body = r.read()
conn.close()
print(f"== POST /v1/media ({len(data)} bytes) -> {r.status} {body[:200]!r}")
if r.status != 201:
print("!! media upload rejected")
return 23
# 2. open the SSE stream.
sse = HTTPConnection(host, port, timeout=args.timeout)
sse.request("GET", "/v1/events", headers=headers)
resp = sse.getresponse()
if resp.status != 200:
print(f"!! SSE open failed: HTTP {resp.status}")
return 21
print("== SSE open (/v1/events)")
# 3. POST the message.send frame (accept-and-ack).
post_time: float | None = None
if args.send:
frame = {
"v": 1,
"id": 1,
"type": "message.send",
"chat_id": "default",
"payload": {"text": args.send},
}
conn = HTTPConnection(host, port, timeout=30)
conn.request(
"POST",
"/v1/frame",
body=json.dumps(frame),
headers={**headers, "Content-Type": "application/json"},
)
r = conn.getresponse()
body = r.read()
conn.close()
post_time = time.time()
print(f"== POST /v1/frame -> {r.status} {body[:200]!r}")
if r.status >= 400:
print("!! POST /v1/frame rejected")
return 22
# 4. read SSE until the final assistant message (same final-detection
# logic as the WS leg).
st = _TurnState()
got_final = False
seen_final_frame = False
echo_logged = False
deadline = time.time() + args.timeout
cur_data: list[str] = []
def feed(line: str) -> bool:
nonlocal cur_data, got_final, seen_final_frame, echo_logged
line = line.rstrip("\r\n")
if line == "":
if cur_data:
data = _print_frame("\n".join(cur_data))
if data is not None:
ftype = data.get("type")
payload = data.get("payload") or {}
st.track(ftype, payload)
# docs/19: the user echo must land on the SSE stream
# promptly after the POST (the < 1 s sendable-in-fallback
# UX assertion).
if (
not echo_logged
and post_time is not None
and ftype == "message"
and payload.get("role") == "user"
):
echo_logged = True
print(f"== user echo in {time.time() - post_time:.2f}s")
if ftype == "message" and payload.get("role") == "assistant":
got_final = True
if ftype == "message.stop":
seen_final_frame = True
if (
ftype == "typing"
and payload.get("on") is False
and seen_final_frame
):
got_final = True
cur_data = []
return got_final
if line.startswith(":"):
return got_final # heartbeat comment
field, _, value = line.partition(":")
if value.startswith(" "):
value = value[1:]
if field == "data":
cur_data.append(value)
return got_final
sock = getattr(getattr(resp.fp, "raw", None), "_sock", None)
try:
while time.time() < deadline and not got_final:
if sock is not None:
sock.settimeout(max(0.1, deadline - time.time()))
line = resp.fp.readline()
if not line:
break
if feed(line.decode("utf-8")):
break
finally:
sse.close()
if not got_final:
print(f"!! no final assistant message (HTTP leg, {args.timeout:.0f}s)")
return 7
print("== final assistant message received (via SSE)")
for code, ok, msg in _evaluate_assertions(args, st):
if not ok:
print(f"!! {msg}")
return code
return 0
def main() -> int:
p = argparse.ArgumentParser(description=__doc__)
p.add_argument("--url", default=os.getenv("IRIS_HTTP_URL", "http://127.0.0.1:8791"))
p.add_argument("--token", default=os.getenv("IRIS_TOKEN", ""))
p.add_argument("--device", default=f"probe-{uuid.uuid4().hex[:8]}")
p.add_argument("--send", default="hello")
p.add_argument(
"--upload",
default="",
help="M4: file to upload (chunked) and attach via media_refs",
)
p.add_argument(
"--pull-offer",
action="store_true",
help="M4: pull any media.offer that arrives during the turn",
)
p.add_argument(
"--sync",
type=int,
default=None,
help="M5: send sync {cursor} after pairing, print replay, exit",
)
p.add_argument(
"--fcm-token", default="", help="M5: FCM token to attach to the hello payload"
)
p.add_argument(
"--fcm-reg",
action="store_true",
help="M5: send fcm.register after pairing (uses --fcm-token)",
)
p.add_argument("--timeout", type=float, default=120.0)
p.add_argument(
"--authfail", action="store_true", help="expect an auth rejection (wrong token)"
)
p.add_argument(
"--assert-turn",
action="store_true",
help="assert message.start -> >=1 message.update -> message.stop",
)
p.add_argument(
"--assert-reasoning",
action="store_true",
help="assert the final message.stop carries non-empty reasoning",
)
p.add_argument(
"--assert-tools",
action="store_true",
help="assert >=1 tool.start with a matching tool.end",
)
p.add_argument(
"--assert-commentary", action="store_true", help="assert >=1 commentary frame"
)
p.add_argument(
"--assert-read-receipt",
action="store_true",
help="assert a read.receipt arrives after the sent message (SKIP if absent; M7)",
)
p.add_argument(
"--assert-status",
action="store_true",
help="assert a status frame is received (SKIP if absent; M7)",
)
p.add_argument(
"--search",
default="",
help="M3: send search {query, scope, limit}, assert >=1 hit",
)
p.add_argument(
"--scope",
choices=("all", "chat"),
default="all",
help="search scope (default all)",
)
p.add_argument(
"--chat-id",
default="default",
help="chat_id for --scope chat (default default)",
)
p.add_argument(
"--channel-create",
default="",
help="M3: create a channel, print its chat_id, exit",
)
p.add_argument(
"--channel-delete", default="", help="M3: delete (archive) a channel, exit"
)
p.add_argument(
"--channel-list", action="store_true", help="M3: list channels, exit"
)
p.add_argument(
"--watch",
default="",
help="wait up to --timeout for a message to land in this chat_id",
)
p.add_argument(
"--offer-grace",
type=float,
default=15.0,
help="seconds to wait for a media.offer after the final "
"message when --pull-offer (default 15)",
)
p.add_argument(
"--http",
action="store_true",
help="docs/19: drive the turn over the HTTP fallback leg "
"(health + POST /v1/frame + SSE /v1/events) instead of WS",
)
p.add_argument(
"--http-url",
default="",
help="docs/19: http(s)://host:port base for --http "
"(default: derived from --url, port 8791)",
)
p.add_argument(
"--http-media",
default="",
help="docs/19 v2: with --http, also upload this file via POST /v1/media "
"and assert a 201 ack",
)
args = p.parse_args()
if not args.token and not args.authfail:
p.error("--token (or $IRIS_TOKEN) is required")
if args.assert_read_receipt and not args.send:
p.error(
"--assert-read-receipt requires --send (the receipt must follow the sent message)"
)
# HTTP is the only transport (docs/19): derive the http(s) base from the
# --url (legacy ws(s)://host:8790/ws -> http(s)://host:8791) unless
# --http-url is given.
if args.http_url:
base = args.http_url
else:
from urllib.parse import urlparse
u = urlparse(args.url)
scheme = "https" if u.scheme in ("wss", "https") else "http"
port = u.port or 8791
base = f"{scheme}://{u.hostname or '127.0.0.1'}:{port}"
return run_http(args, base)
if __name__ == "__main__":
sys.exit(main())