fOjbpdZddlZddlmcmZddlZddlZddl Z ddl Z ddl Z ddl m Z ddlmZmZddlmZmZmZejdkrC ejdejdn #e$rYnwxYwe ejjZed z Zed z Ze ee ee efD]&Z!e!ej"vrej"#de!'dd l$m%Z%ddl&Z'Gd d e j(Z)e*dkre j+dSdS)u ============================================================================= KIEU STORY — EMPIRICAL ADVERSARIAL TEST SUITE: M4 API & CONCURRENCY ============================================================================= Agent: teamwork_preview_challenger (M4 Challenger 1) Target: web_review/server.py Empirical Stress-Testing Criteria: 1. /api/matrix/ep01: - Returns HTTP 200 with total_shots == 188 - Structured across exactly 15 scenes (C01 to C15) - Every scene has exact shot breakdown matching screenplay contract - Scene 05 (Đạm Tiên) has exactly 27 shots - Closed-lips guard flags and audio guards present 2. Concurrency & State Machine Protection: - When gen_state["status"] == "generating": both POST /api/generate and POST /api/concat return HTTP 409 Conflict - When gen_state["status"] == "concatenating": both POST /api/generate and POST /api/concat return HTTP 409 Conflict - Rapid multi-request stress flood (50 requests) guarantees zero 500 errors and 100% 409 rejection 3. Request Validation Rigor: - POST /api/generate without prompt or shot_id returns HTTP 422 Unprocessable Entity - Empty JSON, empty string prompts, invalid types return HTTP 422 - Valid payloads are accepted (HTTP 200, status "accepted") 4. Concat Endpoint Rigor: - POST /api/concat without scene_id or with blank whitespace returns HTTP 422 - Valid ConcatRequest is accepted (HTTP 200) 5. Windows Encoding & Logging Stability: - log_msg() handles extensive Vietnamese diacritics without crashing - Emulated cp1252 / ASCII terminal encode errors trigger safe fallback without uncaught exceptions - Rolling buffer keeps exactly 30 entries 6. Query Filtering & Security Boundaries: - Filtering /api/shots by ?episode=ep01 returns 188 shots - Filtering /api/shots by ?scene=ep01_scene05 returns 27 shots - Directory traversal attempts on /api/episode/{filename} return HTTP 404 ============================================================================= N)Path)patch MagicMock)DictAnyListwin32utf-8encoding web_review05_Production_Pipeline) TestClientceZdZdZedZedZdedefdZ dZ dZ d Z d Z d Zd Zd ZdZdZdZdZdZdZdZdZdZdS)TestAdversarialM4ApiConcurrencyz@TUUU dhh}55<>Z[[[(B'' c&kkR/1VWWW  $"#  BzNE'{HXJ&0 U # #z 1 #-11%88L  ! !l*bbb\bbU_bbb     ! !=!\1MMMM      #s * [AX [ [ [   3v;;)4 4 y!-000r'c >|jd}|}|dg}d}d}d}d}|D]}|dD]} | d} |t | dd| d | d d krd }t | d ddsd }| dr d| dvrd }| dr|dz }ӌ||d||d||d||dkd|||d|jdd<dS)z?Stress-test detailed attributes of all 188 shots in the matrix.r?rErTr^shot_id ep01_scenezShot z has valid ID prefix duration_secrMFtarget_video_filez _10s_v1.mp4 audio_guarduKHÔNG sinh nhạc nềnhas_lip_sync_guardr:z)All 188 shots have 10s duration specifiedz(All 188 shots target *_10s_v1.mp4 namingz(All 188 shots have mandatory Audio Guardz.Identified shots with Closed Lips Guard active)shots_with_closed_lipsall_shots_have_audio_guardall_shots_have_10s_durationr matrix_guardsN) rrdr0r=bool startswithstrendswithr#) r<rgrhrErzr{r|all_shots_have_v1_targetrlsrss r%)test_02_matrix_shot_attributes_and_guardszITestAdversarialM4ApiConcurrency.test_02_matrix_shot_attributes_and_guardss{122yy{{(B''!"%)"&*##'  0 0B[ 0 0I,%%++L99::9G99955((B..27/155!4b99::CCMRR5/4,uu]++7/IQRS`Qa/a/a16.55-..0*a/* 0 9;fggg 68bccc 8:deee 4q8:jkkk'=*D+F6 6 y!/222r'c|jd}|}td|dDd}||dud|t |ddkdd |dD}d t d d D}|||kd dS)uCEmpirically inspect reconstructed Đạm Tiên Scene 05 (27 shots).r?c32K|]}|ddk|VdS)r]rRN.0rs r% zXTestAdversarialM4ApiConcurrency.test_03_dam_tien_scene05_subsequences..s0RR1!J->2Q2QQ2Q2Q2Q2QRRr'rENzScene 05 exists in matrixr^rIzScene 05 has exactly 27 shotscg|] }|d S)rsrrs r% zYTestAdversarialM4ApiConcurrency.test_03_dam_tien_scene05_subsequences..s888QAiL888r'cg|]}d|d S)ep01_scene05_shot02dr)ris r%rzYTestAdversarialM4ApiConcurrency.test_03_dam_tien_scene05_subsequences..s$JJJ3A333JJJr'r:z1Scene 05 shots are numbered 01 to 27 sequentially)rrdr0nextr=rfrange)r<rgrhsc05shot_ids expected_idss r%%test_03_dam_tien_scene05_subsequenceszETestAdversarialM4ApiConcurrency.test_03_dam_tien_scene05_subsequencess{122yy{{RRXRRRTXYY d$.0KLLL c$w-00B68WXXX98$w-888JJU1b\\JJJ  h,68klllllr'ctjd} dtjd<|jdddi}||jdkd||dd kd |jdd d i}||jdkd |jdddi}||jdkd||dd kd |tjd<dS#|tjd<wxYw)zVVerify both POST /api/generate and /api/concat return 409 when status is 'generating'.status generating /api/generatepromptAdversarial test promptr0z.POST /api/generate returns 409 when generatingbusyStatus payload is 'busy'rsep01_scene01_shot01z;POST /api/generate with shot_id returns 409 when generating /api/concatr]rNz,POST /api/concat returns 409 when generatingNr gen_staterpostr=rer0rd)r< orig_statusr_gen r_gen_shotr_concats r%0test_04_concurrency_generating_state_returns_409zPTestAdversarialM4ApiConcurrency.test_04_concurrency_generating_state_returns_409somH-  2&2CM( #K$$_HF_;`$aaE  ! !%"3s":>DN9 %&9 : '2CM( # # #kCM( # 1 1 1 1s D$E Ectjd} dtjd<|jdi}||jdkd|jdddd }||jdkd |jdd d i}||jdkd |jdddd}||jdkd|jdddd}||jdkd|tjd<dS#|tjd<wxYw)zNVerify invalid/empty generation requests return HTTP 422 Unprocessable Entity.ridlerrzEmpty JSON returns 422rNTest)r]titlez"Missing prompt/shot_id returns 422rrwzEmpty string prompt returns 422N)rrsz'None for prompt and shot_id returns 422z Valid prompt not_a_bool)rforcez!Invalid boolean field returns 422rrrrr=rer<rr1r2r3r4r5s r%6test_07_generate_validation_empty_and_invalid_payloadszVTestAdversarialM4ApiConcurrency.test_07_generate_validation_empty_and_invalid_payloads+smH-  2&,CM( #!!/!;;B  ! !".C"79Q R R R!!/^^d8e8e!ffB  ! !".C"79] ^ ^ ^!!/2!GGB  ! !".C"79Z [ [ [!!/4TX8Y8Y!ZZB  ! !".C"79b c c c!!/>\h8i8i!jjB  ! !".C"79\ ] ] ]'2CM( # # #kCM( # 1 1 1 1s EE&&E7cLtjd} dtjd<td5}|jdddd}||jd kd ||dd kd |jdd di}||jd kd||dd kd |jdddd}||jd kddddn #1swxYwY|tjd<dS#|tjd<wxYw)zLVerify valid generation requests are accepted (HTTP 200, status 'accepted').rrzserver.run_unified_generationrzValid test promptr)rrrr@zValid prompt accepted with 200acceptedResponse status is 'accepted'rsrzValid shot_id accepted with 200ep01_scene01_shot02z Custom prompt)rsrz(Valid dual prompt/shot accepted with 200N rrrrrr=rer0rd)r<rmock_genrrrs r%)test_08_generate_valid_payload_acceptancezITestAdversarialM4ApiConcurrency.test_08_generate_valid_payload_acceptanceHsmH-  2&,CM( #677 i8[%%oGZekFF#ctjd} dtjd<|jdi}||jdkd|jdddi}||jdkd |jdd d i}||jdkd |jdd d i}||jdkd|jdddd}||jdkd|tjd<dS#|tjd<wxYw)z/Verify invalid concat requests return HTTP 422.rrrrrzEmpty JSON concat returns 422 output_pathzout.mp4zMissing scene_id returns 422r]rwz!Empty string scene_id returns 422z z$Whitespace-only scene_id returns 422rN invalid_num)r] crossfade_durz!Invalid crossfade_dur returns 422Nrrs r%*test_09_concat_validation_invalid_payloadszJTestAdversarialM4ApiConcurrency.test_09_concat_validation_invalid_payloadsdsmH-  2&,CM( #!!-b!99B  ! !".C"79X Y Y Y!!-}i6P!QQB  ! !".C"79W X X X!!-z26F!GGB  ! !".C"79\ ] ] ]!!-z66J!KKB  ! !".C"79_ ` ` `!!->dq6r6r!ssB  ! !".C"79\ ] ] ]'2CM( # # #kCM( # 1 1 1 1s D?E$$E5cVtjd} dtjd<td5}|jddddd }||jd kd ||dd kd |d|ddvddddn #1swxYwY|tjd<dS#|tjd<wxYw)z1Verify valid ConcatRequest is accepted when idle.rrzserver.run_scene_concatrrNztest_output.mp4g?)r]rrrr@zValid ConcatRequest returns 200rrmessagerwzMessage confirms scene_idNr)r<r mock_concatrs r%'test_10_concat_valid_payload_acceptancezGTestAdversarialM4ApiConcurrency.test_10_concat_valid_payload_acceptancesnmH-  2&,CM( #011 r[K$$] .#4%(::$ %%ams&:<]^^^%%affhhll8&<&< &JLklll%%n YPR8S8S&SUpqqq r r r r r r r r r r r r r r r'2CM( # # #kCM( # 1 1 1 1s/DB=C;/ D;C??DC?DD(c gd}|D]V} tj|d}n#t$r }d}Yd}~nd}~wwxYw|| d|dddWtjdd }|d |vd dS) z;Verify log_msg() does not crash on complex Vietnamese text.)uDThập Ngũ Niên: Đoạn Trường Ký - Thúy Kiều & Thúy VânuRBước lần theo ngọn tiểu khê, lần xem phong cảnh có bề thanh thanhuQRằng sao trong tiết thanh minh, mà đây hương khói vắng tanh thế màuOTrăm năm trong cõi người ta, chữ tài chữ mệnh khéo là ghét nhauu_Tiết Thanh Minh tảo mộ, nấm mồ vô danh bên đường, Vương Quan thuật chuyệnufÀÁÂÃÈÉÊÌÍÒÓÔÕÙÚÝàáâãèéêìíòóôõùúýĂăĐđĨĩŨũƠơƯưẠạẢảẤấẦầẨẩẪẫẬậẮắẰằẲẳẴẵẶặẸẹẺẻẼẽẾếỀềỂểỄễỆệỈỉỊịỌọỎỏỐốỒồỔổỖỗỘộỚớỜờỞởỠỡỢợỤụỦủỨứỪừỬửỮữỰựỲỳỴỵỶỷỸỹFTNz+log_msg did not crash on Vietnamese text: 'z...'logsuÀÁÂÃz?Vietnamese characters correctly stored in gen_state logs buffer)rlog_msgr3r=r)r< test_phrasesphrasecrashedr5 latest_logs r%.test_11_windows_encoding_vietnamese_diacriticszNTestAdversarialM4ApiConcurrency.test_11_windows_encoding_vietnamese_diacriticss   # p pF  F###      ! !g+/n]cdgegdg]h/n/n/n o o o o]6*2.  jJ68yzzzzzs! 727cd}dddfd}td|5 tj|d}n#t$rd}YnwxYw|| d d d d d S#1swxYwYd S) zZAdversarially simulate UnicodeEncodeError (Windows cp1252) to verify ASCII fallback logic.uBKiều gặp Đạm Tiên: khóc thương số phận bạc mệnhr)normalfallbackcdxxdz cc<td|Drtd|ddddS)Nrr:c3<K|]}t|dkVdS)N)ord)rcs r%rzTestAdversarialM4ApiConcurrency.test_12_windows_cp1252_encoding_fallback_simulation..mock_failing_print..s,..A3q66C<......r'cp1252rzcharacter maps to )anyUnicodeEncodeError)r call_counts r%mock_failing_printzoTestAdversarialM4ApiConcurrency.test_12_windows_cp1252_encoding_fallback_simulation..mock_failing_printsb x A % ....... `(4A?^___ ` `r'zbuiltins.print) side_effectFTz4log_msg survived simulated cp1252 UnicodeEncodeErrorN)rrrr3r=)r<test_msgrrrs @r%3test_12_windows_cp1252_encoding_fallback_simulationzSTestAdversarialM4ApiConcurrency.test_12_windows_cp1252_encoding_fallback_simulationsW!"q11  ` ` ` ` ` #1C D D D g g  H%%%      ! !g+/e f f f g g g g g g g g g g g g g g g g g gs1A.8A. AA.AA..A25A2cFtdD]}tjd|d|t tjddkd|tjdddd d S) z3Verify gen_state['logs'] strictly caps at 30 items.-zAdversarial rolling log entry #rrrz/gen_state['logs'] strictly capped at 30 entriesrz entry #44z1Most recent log entry preserved at tail of bufferN)rrrr=rfrr)r<rs r%'test_13_log_buffer_rolling_window_limitzGTestAdversarialM4ApiConcurrency.test_13_log_buffer_rolling_window_limitsr C CA KA!AAA B B B B c#-"788B>@qrrr  M& !" % . .{ ; ; ?     r'c|jd}||jdkd|di}|t |dkdt |d|t d|Dd |jd }||jdkd |di}|t |d kd t |d|jd}|t |didkddS)z&Verify query parameters on /api/shots.z/api/shots?episode=ep01r@z'GET /api/shots?episode=ep01 returns 200r^rDz1Filtered episode=ep01 returns 188 shots (actual: r_c3@K|]}|dVdS)rBNrrks r%rzPTestAdversarialM4ApiConcurrency.test_14_shots_query_filtering..s.!I!I1!,,v"6"6!I!I!I!I!I!Ir'z"All returned shots start with ep01z/api/shots?scene=ep01_scene05z-GET /api/shots?scene=ep01_scene05 returns 200rIz6Filtered scene=ep01_scene05 returns 27 shots (actual: z#/api/shots?episode=nonexistent_ep99rz$Non-matching episode returns 0 shotsN)rrdr=rer0rfall)r<r_epshots_epr_scshots_scr_nones r%test_14_shots_query_filteringz=TestAdversarialM4ApiConcurrency.test_14_shots_query_filterings{899 d.#57`aaa99;;??7B// c(mms24xhklthuhu4x4x4xyyy c!I!I!I!I!IIIKoppp{>?? d.#57fggg99;;??7B// c(mmr13|lopxlyly3|3|3|}}}!FGG c&++--"3"3GR"@"@AAQFHnooooor'c ngd}|D]J}|jd|}||jdkd|d|jdK|jd}||jdkd |d |vd d S) zIVerify path traversal attacks on /api/episode/{filename} return HTTP 404.)z../../windows/system32/cmd.exez ../PROJECT.mdz..%2F..%2FPROJECT.mdz../../../boot.inizTAP_99_NONEXISTENT.mdz /api/episode/iz"Path traversal / invalid episode 'z$' safely rejected with 404 (actual: r_zC/api/episode/TAP_01_XUAN_SAC_THE_NGUYEN_VA_GIONG_BAO_DOAN_TRUONG.mdr@z Valid episode TAP_01 returns 200contentz&Valid episode returns markdown contentN)rrdr=rer0)r<malicious_pathsprr_valids r%test_15_path_traversal_guardsz=TestAdversarialM4ApiConcurrency.test_15_path_traversal_guardss   !  A  3 3 344A  ! ! $lQll\]\illl     +//"ghh g1S8:\]]] i7<<>>9;cdddddr'cL|jd}||jdkd|}d|D}|t |dkdt |ddS) z>Verify /api/banana-prompts serves the 188 Start Frame prompts.z/api/banana-promptsr@z#GET /api/banana-prompts returns 200c<g|]}|d|S)rtrrs r%rzSTestAdversarialM4ApiConcurrency.test_16_banana_prompts_endpoint..s)LLLQl1K1KLqLLLr'rDz3Banana prompts catalog has 188 EP01 shots (actual: r_N)rrdr=rer0keysrf)r<rrh ep01_bananas r%test_16_banana_prompts_endpointz?TestAdversarialM4ApiConcurrency.test_16_banana_prompts_endpoints KOO1 2 2 ams24YZZZvvxxLL$))++LLL  c+..#58Ampq|m}m}8A8A8A B B B B Br'N)__name__ __module__ __qualname____doc__ classmethodr&r6r~rr=rqrrrrrrrrrrrrrr rrr'r%rrDsFF   [  AA[AG$GSGGGG< < < |% % % N m m m"222,222$222J222:2228222:222.{{{0ggg*    ppp&eee,BBBBBr'r__main__),rbuiltins @py_builtins_pytest.assertion.rewrite assertionrewrite @pytest_arossysr0r unittestpathlibr unittest.mockrrtypingrrrplatformstdout reconfigurestderrr3__file__resolveparentrWEB_REVIEW_DIR PIPELINE_DIRrr pathinsertstarlette.testclientrserverrTestCaserrmainrr'r%r3s""H ********""""""""""<7  000 0000       4>> ! ! # # * 1L(22 #n  ss<00##h-- @A 1++++++@B@B@B@B@Bh&7@B@B@BF zHMOOOOOs6A??BB