package helps import (	"bytes"	"math"	"strings"	"testing" 	"github.com/google/uuid"	"google.golang.org/protobuf/encoding/protowire") func TestConnectEnvelopeFraming(t *testing.T) {	payload := []byte("hello devin connect-rpc")	envelope := WrapConnectEnvelope(payload) 	if len(envelope) != 5+len(payload) {		t.Fatalf("expected envelope len %d, got %d", 5+len(payload), len(envelope))	}	if envelope[0] != ConnectFlagData {		t.Fatalf("expected flag 0x00, got 0x%02x", envelope[0])	} 	r := bytes.NewReader(envelope)	flag, readPayload, err := ReadConnectFrame(r)	if err != nil {		t.Fatalf("ReadConnectFrame failed: %v", err)	}	if flag != ConnectFlagData {		t.Errorf("flag = 0x%02x, want 0x00", flag)	}	if !bytes.Equal(readPayload, payload) {		t.Errorf("payload = %q, want %q", string(readPayload), string(payload))	}} func TestGenerateDevinDeviceFingerprint(t *testing.T) {	fp1 := GenerateDevinDeviceFingerprint("seed-1")	if len(fp1) != DevinFingerprintHexLen {		t.Fatalf("fp1 len = %d, want %d", len(fp1), DevinFingerprintHexLen)	}	// Check hex characters	for _, c := range fp1 {		if !((c >= '0' && c <= '9') || (c >= 'a' && c <= 'f')) {			t.Fatalf("invalid hex char in fingerprint: %c", c)		}	} 	// Deterministic seed produces deterministic fingerprint	fp2 := GenerateDevinDeviceFingerprint("seed-1")	if fp1 != fp2 {		t.Fatalf("fingerprints for same seed do not match: %s != %s", fp1, fp2)	}} func TestBuildDevinGetChatMessageRequest(t *testing.T) {	prompts := []DevinPrompt{		{			MessageID: "msg-1",			Source:    1,			Content:   "hello",		},		{			MessageID: "msg-2",			Source:    2,			Content:   "hi there",			Thinking:  "thinking step",			Signature: []byte("sealed.v1.test"),		},		{			MessageID:  "msg-3",			Source:     4,			Content:    `{"result":"ok"}`,			ToolCallID: "call-1",		},	}	tools := []DevinTool{		{			Name:        "get_weather",			Description: "lookup weather",			Parameters:  []byte(`{"type":"object"}`),		},	} 	temp := 0.7	req := BuildDevinGetChatMessageRequest(		"token-123",		"device-seed-1",		"swe-2-high",		"you are a helpful assistant",		prompts,		tools,		&temp,		4000,		"session-1",		"cascade-1",		nil,	) 	if len(req) == 0 {		t.Fatal("encoded request is empty")	} 	// Envelope check	framed := WrapConnectEnvelope(req)	flag, readPayload, err := ReadConnectFrame(bytes.NewReader(framed))	if err != nil {		t.Fatalf("ReadConnectFrame failed: %v", err)	}	if flag != ConnectFlagData || len(readPayload) != len(req) {		t.Fatalf("framed payload length mismatch")	}} func TestBuildDevinGetChatMessageRequest_SensitiveWordsOnlyInSystemPrompt(t *testing.T) {	matcher := BuildSensitiveWordMatcher([]string{"SECRET_TOKEN"})	prompts := []DevinPrompt{		{			MessageID: "msg-1",			Source:    2,			Content:   "calling tool with SECRET_TOKEN in content",			ToolCalls: []DevinToolCall{				{					ID:        "call-1",					Name:      "test_tool",					Arguments: `{"key":"SECRET_TOKEN"}`,				},			},		},	}	// Sensitive word in system prompt MUST be obfuscated	reqWithSys := BuildDevinGetChatMessageRequest("tok", "seed", "swe-2-high", "System prompt containing SECRET_TOKEN", prompts, nil, nil, 100, "s", "c", matcher)	if bytes.Contains(reqWithSys, []byte("System prompt containing SECRET_TOKEN")) {		t.Fatalf("expected SECRET_TOKEN in system prompt to be obfuscated")	} 	// Tool call arguments and history prompt content MUST NOT be obfuscated	if !bytes.Contains(reqWithSys, []byte(`{"key":"SECRET_TOKEN"}`)) {		t.Fatalf("tool call arguments should preserve original raw text without obfuscation")	}	if !bytes.Contains(reqWithSys, []byte("calling tool with SECRET_TOKEN in content")) {		t.Fatalf("prompt content should preserve original raw text without obfuscation")	}} func TestSanitizeDevinSystemPrompt_AndSensitiveWords(t *testing.T) {	matcher := BuildSensitiveWordMatcher([]string{"API", "proxy"})	rawPrompt := "x-anthropic-billing-header: cc_version=2.1.260;\nYou are Claude Code, Anthropic's official CLI for Claude.\nHelp the project with API and proxy."	sanitized := SanitizeDevinSystemPrompt(rawPrompt, matcher) 	if strings.Contains(sanitized, "x-anthropic-billing-header") {		t.Errorf("sanitized prompt still contains billing header: %s", sanitized)	}	if strings.Contains(sanitized, "You are Claude Code") {		t.Errorf("sanitized prompt still contains Claude Code identity: %s", sanitized)	}	if strings.Contains(sanitized, "API") && !strings.Contains(sanitized, zeroWidthSpace) {		t.Errorf("API was not obfuscated with zero-width space")	}} func TestBuildDevinGetChatMessageRequest_WithImages(t *testing.T) {	prompts := []DevinPrompt{		{			MessageID: "msg-img-1",			Source:    1,			Content:   "[Image 1: pasted_image_1.png]\n\nocr this image",			Images: []DevinImage{				{					Base64Data: "iVBORw0KGgoAAAANSUhEUgAA...",					MimeType:   "image/png",				},			},		},	} 	temp := 0.0	req := BuildDevinGetChatMessageRequest(		"token-123",		"device-seed-1",		"swe-2-max",		"assistant instructions",		prompts,		nil,		&temp,		4000,		"session-1",		"cascade-1",		nil,	) 	if len(req) == 0 {		t.Fatal("encoded request with images is empty")	} 	// Verify that the payload contains the image base64 data and mime type	if !bytes.Contains(req, []byte("iVBORw0KGgoAAAANSUhEUgAA...")) {		t.Error("encoded payload missing image base64 data")	}	if !bytes.Contains(req, []byte("image/png")) {		t.Error("encoded payload missing image mime type")	}} func TestParseDevinFrame(t *testing.T) {	// Synthesize a response frame containing:	// #1 output_id, #3 delta_text, #9 delta_thinking, #10 delta_signature, #21 delta_signature_type	var payload []byte	payload = appendFieldBytes(payload, 1, []byte("bot-uuid-123"))	payload = appendFieldBytes(payload, 3, []byte("Hello world"))	payload = appendFieldBytes(payload, 9, []byte("Let me think..."))	payload = appendFieldBytes(payload, 10, []byte("CAQS-signature-bytes"))	payload = appendFieldBytes(payload, 21, []byte("anthropic")) 	res, err := ParseDevinFrame(payload)	if err != nil {		t.Fatalf("ParseDevinFrame failed: %v", err)	} 	if res.OutputID != "bot-uuid-123" {		t.Errorf("OutputID = %q, want bot-uuid-123", res.OutputID)	}	if res.ContentText != "Hello world" {		t.Errorf("ContentText = %q, want 'Hello world'", res.ContentText)	}	if res.ThinkingText != "Let me think..." {		t.Errorf("ThinkingText = %q, want 'Let me think...'", res.ThinkingText)	}	if string(res.DeltaSignature) != "CAQS-signature-bytes" {		t.Errorf("DeltaSignature = %q, want 'CAQS-signature-bytes'", string(res.DeltaSignature))	}	if res.DeltaSignatureType != "anthropic" {		t.Errorf("DeltaSignatureType = %q, want 'anthropic'", res.DeltaSignatureType)	}} func TestParseDevinTrailerError(t *testing.T) {	quotaJSON := []byte(`{"error":{"code":"failed_precondition","message":"User monthly ACU quota exhausted (trace ID: 12345)"}}`)	code, err := ParseDevinTrailerError(quotaJSON)	if err == nil {		t.Fatal("expected error, got nil")	}	if code != 429 {		t.Errorf("status code = %d, want 429 for quota error", code)	} 	configJSON := []byte(`{"error":{"code":"failed_precondition","message":"Client version 3000.1.0 is no longer supported"}}`)	code, err = ParseDevinTrailerError(configJSON)	if code != 400 {		t.Errorf("status code = %d, want 400 for config error", code)	} 	unauthJSON := []byte(`{"error":{"code":"unauthenticated","message":"Invalid or expired session token"}}`)	code, err = ParseDevinTrailerError(unauthJSON)	if code != 401 {		t.Errorf("status code = %d, want 401", code)	} 	internalErrJSON := []byte(`{"error":{"code":"invalid_argument","message":"an internal error occurred (trace ID: fa43c6393b805646b66997cc46c6f4af)"}}`)	code, err = ParseDevinTrailerError(internalErrJSON)	if code != 502 {		t.Errorf("status code = %d, want 502 for upstream internal error mislabeled as invalid_argument", code)	} 	normalInvalidArgJSON := []byte(`{"error":{"code":"invalid_argument","message":"field 'model' cannot be empty"}}`)	code, err = ParseDevinTrailerError(normalInvalidArgJSON)	if code != 400 {		t.Errorf("status code = %d, want 400 for legitimate client invalid argument", code)	} 	upstreamInternalJSON := []byte(`{"error":{"code":"internal","message":"database timeout"}}`)	code, err = ParseDevinTrailerError(upstreamInternalJSON)	if code != 502 {		t.Errorf("status code = %d, want 502 for upstream internal error", code)	} 	unknownErrJSON := []byte(`{"error":{"code":"unknown_future_error","message":"something unusual"}}`)	code, err = ParseDevinTrailerError(unknownErrJSON)	if code != 502 {		t.Errorf("status code = %d, want 502 for fallback gateway error", code)	} 	canceledJSON := []byte(`{"error":{"code":"canceled","message":"client canceled"}}`)	code, err = ParseDevinTrailerError(canceledJSON)	if code != 499 {		t.Errorf("status code = %d, want 499 for canceled", code)	} 	deadlineJSON := []byte(`{"error":{"code":"deadline_exceeded","message":"upstream deadline exceeded"}}`)	code, err = ParseDevinTrailerError(deadlineJSON)	if code != 504 {		t.Errorf("status code = %d, want 504 for deadline_exceeded", code)	}} func TestUTF8SplitBuffer(t *testing.T) {	buf := &UTF8SplitBuffer{}	// Multi-byte UTF-8 test: \xe4\xbd\xa0 \xe5\xa5\xbd (3 bytes each)	chunk1 := []byte{0xe4, 0xbd}       // first 2 bytes of char 1	chunk2 := []byte{0xa0, 0xe5, 0xa5} // last 1 byte of char 1, first 2 bytes of char 2	chunk3 := []byte{0xbd}             // last 1 byte of char 2 	s1 := buf.Feed(chunk1)	if s1 != "" {		t.Errorf("expected empty string from split chunk1, got %q", s1)	} 	s2 := buf.Feed(chunk2)	if s2 != "你" {		t.Errorf("expected '你' from chunk2, got %q", s2)	} 	s3 := buf.Feed(chunk3)	if s3 != "好" {		t.Errorf("expected '好' from chunk3, got %q", s3)	}} func appendFieldBytes(dst []byte, fieldNum int, val []byte) []byte {	tag := uint64(fieldNum<<3 | 2)	dst = appendVarint(dst, tag)	dst = appendVarint(dst, uint64(len(val)))	dst = append(dst, val...)	return dst} func appendVarint(dst []byte, v uint64) []byte {	for v >= 0x80 {		dst = append(dst, byte(v)|0x80)		v >>= 7	}	dst = append(dst, byte(v))	return dst} func TestBuildDevinUpstreamLogBody(t *testing.T) {	interactions := []byte(`{"model":"devin/swe-2","input":[{"type":"user_input","content":[{"type":"text","text":"hello"}]}]}`)	prompts := []DevinPrompt{		{			MessageID: "msg-1",			Source:    1,			Content:   "hello",		},		{			MessageID:     "msg-2",			Source:        2,			Content:       "hi there",			Thinking:      "thinking steps",			Signature:     []byte("sealed.v1.abc123xyz"),			SignatureType: "sealed",		},	}	tools := []DevinTool{		{			Name:        "get_weather",			Description: "Get weather info",			Parameters:  []byte(`{"type":"object"}`),		},	}	temp := 0.5 	// Case 1: from non-interactions source format (e.g. OpenAI chat completions)	logBody := BuildDevinUpstreamLogBody(		interactions,		false,		"swe-2-high",		"system instruction",		prompts,		tools,		&temp,		2048,		"sess-123",		"casc-456",	) 	bodyStr := string(logBody)	if !strings.Contains(bodyStr, "=== INTERMEDIATE INTERACTIONS ===") {		t.Errorf("expected body to contain intermediate interactions header")	}	if !strings.Contains(bodyStr, "=== DEVIN UPSTREAM REQUEST ===") {		t.Errorf("expected body to contain devin upstream request header")	}	if !strings.Contains(bodyStr, `"model": "swe-2-high"`) {		t.Errorf("expected body to contain model UID swe-2-high")	}	if !strings.Contains(bodyStr, `"thinking": "thinking steps"`) {		t.Errorf("expected body to contain thinking steps")	}	if !strings.Contains(bodyStr, `"signature": "sealed.v1.abc123xyz"`) {		t.Errorf("expected body to contain sealed signature")	}	if !strings.Contains(bodyStr, `"name": "get_weather"`) {		t.Errorf("expected body to contain tool get_weather")	} 	// Case 2: direct interactions source	logBodyDirect := BuildDevinUpstreamLogBody(		interactions,		true,		"swe-2-high",		"system instruction",		prompts,		tools,		&temp,		2048,		"sess-123",		"casc-456",	)	bodyDirectStr := string(logBodyDirect)	if strings.Contains(bodyDirectStr, "=== INTERMEDIATE INTERACTIONS ===") {		t.Errorf("direct interactions source should NOT have separate intermediate header")	}	if !strings.Contains(bodyDirectStr, `"model": "swe-2-high"`) {		t.Errorf("expected direct body to contain model UID")	}} func TestGenerateDevinSentryTrace(t *testing.T) {	st1 := GenerateDevinSentryTrace()	st2 := GenerateDevinSentryTrace()	if st1 == st2 {		t.Fatalf("traces should be randomly generated: %s == %s", st1, st2)	}	parts := strings.Split(st1, "-")	if len(parts) != 3 {		t.Fatalf("sentry-trace should have 3 parts separated by hyphen, got %q", st1)	}	if len(parts[0]) != 32 {		t.Errorf("traceID len = %d, want 32", len(parts[0]))	}	if len(parts[1]) != 16 {		t.Errorf("spanID len = %d, want 16", len(parts[1]))	}	if parts[2] != "1" {		t.Errorf("sampled = %q, want 1", parts[2])	}} func TestBuildDevinGetChatMessageRequest_Field15TurnIndex(t *testing.T) {	sessID0 := "sess-turn0-" + uuid.New().String()	defer ResetDevinSessionTurnIndex(sessID0) 	// 1. Turn 0 with user prompt: turnIndex=0 (omitted), 15.4=14 emitted on user boundary	promptsTurn0 := []DevinPrompt{		{MessageID: "u1", Source: 1, Content: "hello"},	}	req0 := BuildDevinGetChatMessageRequest("tok", "seed", "swe-2-high", "", promptsTurn0, nil, nil, 1000, sessID0, "casc-turn0", nil)	gotSess0, f15Sub0 := extractField15Subfields(t, req0)	if gotSess0 != sessID0 {		t.Errorf("Field 1 sessionID = %q, want %q", gotSess0, sessID0)	}	if _, hasF2 := f15Sub0[2]; hasF2 {		t.Errorf("turn 0 should omit Field 2, got %v", f15Sub0[2])	}	if f15Sub0[3] != 4 {		t.Errorf("Field 3 = %d, want 4", f15Sub0[3])	}	if f15Sub0[4] != 14 {		t.Errorf("Field 4 = %d, want 14 on user turn boundary", f15Sub0[4])	} 	sessIDTool := "sess-tool-" + uuid.New().String()	defer ResetDevinSessionTurnIndex(sessIDTool) 	// 2. Tool-result continuation (source=4): 15.4 should be omitted	promptsTool := []DevinPrompt{		{MessageID: "u1", Source: 1, Content: "read file"},		{MessageID: "a1", Source: 2, Content: "calling tool"},		{MessageID: "t1", Source: 4, Content: "file content", ToolCallID: "call_1"},	}	reqTool := BuildDevinGetChatMessageRequest("tok", "seed", "swe-2-high", "", promptsTool, nil, nil, 1000, sessIDTool, "casc-tool", nil)	_, f15SubTool := extractField15Subfields(t, reqTool)	if _, hasF4 := f15SubTool[4]; hasF4 {		t.Errorf("Field 4 should be omitted on tool result continuation, got %v", f15SubTool[4])	}} func TestBuildDevinGetChatMessageRequest_Field15SequentialCounter(t *testing.T) {	sessionID := "sess-sequential-test-" + uuid.New().String()	defer ResetDevinSessionTurnIndex(sessionID) 	prompts := []DevinPrompt{		{MessageID: "u1", Source: 1, Content: "hi"},	} 	// Request 1: fresh session -> turnIndex 0 (omitted from wire)	req1 := BuildDevinGetChatMessageRequest("tok", "seed", "swe-2-high", "", prompts, nil, nil, 1000, sessionID, "casc-1", nil)	_, sub1 := extractField15Subfields(t, req1)	if _, hasF2 := sub1[2]; hasF2 {		t.Errorf("Request 1 in fresh session should omit 15.2, got %v", sub1[2])	} 	// Request 2: turnIndex 1	req2 := BuildDevinGetChatMessageRequest("tok", "seed", "swe-2-high", "", prompts, nil, nil, 1000, sessionID, "casc-1", nil)	_, sub2 := extractField15Subfields(t, req2)	if sub2[2] != 1 {		t.Errorf("Request 2 should have 15.2 = 1, got %v", sub2[2])	} 	// Request 3: turnIndex 2

Lines 1–500 of 789. Load more