Two unrelated features bundled because they ship together and share
migration 0028.
Strategic-log feedback (thumb up/down):
- New strategic_log_feedback table with UNIQUE(log_id, user_id) so each
user has one vote per log, flippable in place (up -> down -> clear).
UI shows aggregate counts only.
- app/services/log_feedback.py: set_vote, get_counts, sign/verify
feedback tokens (same itsdangerous pattern as auth.sign_pending,
30-day TTL for email links).
- POST /api/log/{id}/feedback: web vote, auth required, returns counts
+ the requesting user's own vote.
- GET /feedback?token=...&vote=...: email-link target, no auth, signed
token encodes (user, log, vote), renders feedback_thanks.html.
- partials/log.html: thumbs row below content, JS-driven swap via the
POST endpoint. Dashboard latest-log card and /log page both render
this partial via htmx, so the buttons appear in all three surfaces.
- digest emails: a "How was today's read?" row above the unsub footer,
with signed-token URLs against the latest StrategicLog at send time.
Plain-text fallback included.
Reviewer self-score (0-10):
- _SYSTEM_PROMPT asks for an integer score with anchors (10 exemplary,
5 borderline, 0 unfit). Verdict gains score: int | None.
- Deterministic-layer hits get score=0 (hard rule, no nuance);
error rows get None; LLM rows get the model's score clamped 0..10.
- ReviewerVerdict.score, StrategicLog.reviewer_score, and
IndicatorSummary.reviewer_score all new SMALLINT NULL columns.
- ai_log_job + indicator_summary_job persist verdict.score onto their
content rows when committing the row alongside content.
Tests:
- tests/test_strategic_log_feedback.py: vote, flip, clear, aggregate
across users, invalid vote, token round-trip + tamper + garbage +
'clear' not signable for email path.
- tests/test_output_review.py: score parsing, clamping (>10, <0),
missing/non-numeric -> None, deterministic-layer score=0.
Full suite: 427 passed (was 412), 5 skipped, no regressions.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
433 lines
18 KiB
Python
433 lines
18 KiB
Python
"""Tests for the JSON-envelope extractor and the reviewer agent.
|
|
|
|
The two together replaced the regex `clean_summary` + `looks_like_leakage`
|
|
scaffolding that used to live in indicator_summary_job. The extractor is
|
|
pure-function so it's covered exhaustively; the reviewer makes an LLM
|
|
call and is exercised via the httpx MockTransport that the other
|
|
openrouter tests use."""
|
|
from __future__ import annotations
|
|
|
|
import httpx
|
|
import pytest
|
|
|
|
from app.jobs.indicator_summary_job import _extract_read
|
|
from app.services import openrouter as ot
|
|
from app.services.output_review import review_read
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# _extract_read — JSON envelope handling
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
def test_extract_read_returns_trimmed_field():
|
|
raw = '{"read": " The market is pricing growth. "}'
|
|
assert _extract_read(raw) == "The market is pricing growth."
|
|
|
|
|
|
def test_extract_read_returns_none_on_invalid_json():
|
|
assert _extract_read("not json") is None
|
|
assert _extract_read("{bad}") is None
|
|
assert _extract_read("") is None
|
|
|
|
|
|
def test_extract_read_returns_none_when_field_missing():
|
|
assert _extract_read('{"other": "x"}') is None
|
|
|
|
|
|
def test_extract_read_returns_none_when_field_not_string():
|
|
assert _extract_read('{"read": 42}') is None
|
|
assert _extract_read('{"read": null}') is None
|
|
assert _extract_read('{"read": ["a","b"]}') is None
|
|
|
|
|
|
def test_extract_read_returns_none_when_field_empty():
|
|
assert _extract_read('{"read": ""}') is None
|
|
assert _extract_read('{"read": " "}') is None
|
|
|
|
|
|
def test_extract_read_returns_none_when_envelope_not_object():
|
|
# A bare string or array is valid JSON but not the expected shape.
|
|
assert _extract_read('"just a string"') is None
|
|
assert _extract_read('["a", "b"]') is None
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# review_read — judges candidate read via a second LLM call
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
def _mock_post(handler):
|
|
return httpx.MockTransport(handler)
|
|
|
|
|
|
def _configure(monkeypatch, *, portfolio_ai_enabled: bool = False):
|
|
"""Minimal env so call_llm believes a provider is configured.
|
|
Both review_read (which pins to OpenRouter for a non-thinking model)
|
|
and the openrouter module itself read get_settings, so we patch
|
|
both module-level references."""
|
|
import app.services.output_review as orr
|
|
settings = type("S", (), {
|
|
"LLM_PROVIDER": "deepseek", "LLM_FALLBACK": "",
|
|
"DEEPSEEK_API_KEY": "sk-d", "OPENROUTER_API_KEY": "sk-or",
|
|
"DEEPSEEK_URL": "https://x/deepseek", "DEEPSEEK_MODEL": "deepseek-v4-flash",
|
|
"OPENROUTER_URL": "https://x/or", "OPENROUTER_MODEL": "deepseek/deepseek-v4-flash",
|
|
"REVIEWER_MODEL": "anthropic/claude-haiku-4.5",
|
|
"PORTFOLIO_AI_ENABLED": portfolio_ai_enabled,
|
|
})()
|
|
monkeypatch.setattr(ot, "get_settings", lambda: settings)
|
|
monkeypatch.setattr(orr, "get_settings", lambda: settings)
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_clean_verdict(monkeypatch):
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content": '{"clean": true, "reason": "ok"}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 12, "cost": 0.00007},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "Markets are pricing tighter policy.")
|
|
assert v.clean is True
|
|
assert v.cost_usd == 0.00007
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_unclean_verdict(monkeypatch):
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content":
|
|
'{"clean": false, "reason": "chain of thought"}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 14, "cost": 0.00009},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "Let's see, is it X? Actually Y?")
|
|
assert v.clean is False
|
|
assert "chain of thought" in v.reason
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_strips_markdown_fence_around_json(monkeypatch):
|
|
"""Haiku (and friends) sometimes wrap JSON in ```json ... ``` even
|
|
when response_format is set. The parser needs to peel that off
|
|
before json.loads or it'll reject otherwise-valid verdicts."""
|
|
_configure(monkeypatch)
|
|
fenced = '```json\n{"clean": true, "reason": "polished read"}\n```'
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content": fenced},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 18, "cost": 0.0006},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "Markets are pricing tighter policy.")
|
|
assert v.clean is True
|
|
assert v.reason == "polished read"
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_failsafe_on_malformed_json(monkeypatch):
|
|
"""Reviewer returned prose instead of JSON → conservative reject."""
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content": "yes it looks clean"},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 6},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "Some candidate.")
|
|
assert v.clean is False
|
|
assert "non-JSON" in v.reason
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_failsafe_on_missing_clean_field(monkeypatch):
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content": '{"reason": "no field"}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 6},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "Some candidate.")
|
|
assert v.clean is False
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_failsafe_on_empty_candidate(monkeypatch):
|
|
"""No LLM call should fire if the candidate is empty."""
|
|
_configure(monkeypatch)
|
|
calls = []
|
|
def handler(_req):
|
|
calls.append(1)
|
|
return httpx.Response(500, json={"error": "should not be called"})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, " ")
|
|
assert v.clean is False
|
|
assert calls == []
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Compliance: deterministic lexicon layer (zero LLM cost)
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
@pytest.mark.parametrize("candidate,rule_prefix", [
|
|
# Level triggers
|
|
("Brent close above $93 would confirm the safe-haven bid.", "lexicon:level_trigger"),
|
|
("Watching SOXX close above 570 to flip the read.", "lexicon:level_trigger"),
|
|
("If gold breaks below $4,500 the floor is broken.", "lexicon:level_trigger"),
|
|
# Targets
|
|
("Target of $95 looks reasonable into year-end.", "lexicon:forecast_phrase"),
|
|
# Action / advice (first-match-wins: "you should buy" → action_phrase,
|
|
# "we recommend trimming" → advice_phrase)
|
|
("You should buy the dip here.", "lexicon:action_phrase"),
|
|
("We recommend trimming this position.", "lexicon:advice_phrase"),
|
|
("Consider buying defensives into Q1.", "lexicon:advice_phrase"),
|
|
# Forecast register direct
|
|
("The price target sits well above current spot.", "lexicon:forecast_phrase"),
|
|
])
|
|
async def test_review_deterministic_layer_catches_obvious_violations(
|
|
monkeypatch, candidate, rule_prefix,
|
|
):
|
|
"""The deterministic layer short-circuits the LLM call entirely — the
|
|
handler must not be hit. Verdict carries layer='deterministic' and a
|
|
lexicon: reason prefix."""
|
|
_configure(monkeypatch)
|
|
calls = []
|
|
def handler(_req):
|
|
calls.append(1)
|
|
return httpx.Response(500, json={"error": "deterministic should have fired first"})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, candidate)
|
|
assert v.clean is False
|
|
assert v.layer == "deterministic"
|
|
assert v.reason.startswith(rule_prefix), v.reason
|
|
assert calls == [], "LLM must not be called on deterministic-layer hit"
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
@pytest.mark.parametrize("candidate", [
|
|
# Plausible state-level commentary that must pass the deterministic
|
|
# layer (the LLM layer still runs and judges the nuance).
|
|
"Valuations are stretched after a sharp move higher.",
|
|
"Real yields are restrictive and credit is calm.",
|
|
"Brent is trading at $90 after a 12% drop YTD.",
|
|
# False-positive guards from the brief: bare 'should', 'cut', 'hold'
|
|
# in benign contexts must not trip the lexicon.
|
|
"Saudi price cuts pushed energy lower this week.",
|
|
"The cargo hold story dominated the rates tape.",
|
|
"Investors should be aware that liquidity is thin.",
|
|
])
|
|
async def test_review_deterministic_layer_lets_clean_state_through(
|
|
monkeypatch, candidate,
|
|
):
|
|
"""If the deterministic layer says nothing, the LLM layer runs. We mock
|
|
a CLEAN verdict so we can assert the deterministic gate did not pre-empt."""
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content":
|
|
'{"clean": true, "reason": "state-level, fine"}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 12, "cost": 0.00005},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, candidate)
|
|
# Some of these benign phrases may legitimately catch a lexicon rule
|
|
# we haven't tightened (e.g. "investors should be aware"); accept either
|
|
# an LLM-clean or a deterministic reject — what we forbid is silently
|
|
# claiming clean=True via the LLM layer when the deterministic layer
|
|
# caught the obvious cases above. The key invariant: if it passes, it's
|
|
# because the LLM said so, not because the lexicon was bypassed.
|
|
if v.layer == "llm":
|
|
assert v.clean is True
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_llm_forward_state_as_description(monkeypatch):
|
|
"""The sharpened prompt asks the LLM to reject 'state + direction'
|
|
constructions like 'valuations are stretched and unlikely to hold'.
|
|
We can only verify the wiring: that the LLM response flows through.
|
|
Catching that specific phrasing in production depends on the model."""
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content":
|
|
'{"clean": false, "reason": "forward state-as-description"}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 14, "cost": 0.00007},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(
|
|
client,
|
|
"Valuations are stretched and unlikely to hold under current policy.",
|
|
)
|
|
assert v.clean is False
|
|
assert v.layer == "llm"
|
|
assert "forward" in v.reason.lower() or "state" in v.reason.lower()
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_portfolio_rider_gated_off_by_default(monkeypatch):
|
|
"""With PORTFOLIO_AI_ENABLED=False, the portfolio rider must NOT be
|
|
appended even when the caller passes surface='portfolio'. We assert
|
|
this by hitting a phrase the rider would normally exempt; without the
|
|
rider the LLM still gets the base rules and we simulate a reject."""
|
|
_configure(monkeypatch, portfolio_ai_enabled=False)
|
|
seen_systems: list[str] = []
|
|
def handler(req):
|
|
body = req.content.decode("utf-8")
|
|
seen_systems.append(body)
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content":
|
|
'{"clean": false, "reason": "base rule"}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 8, "cost": 0.00003},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(
|
|
client,
|
|
"Portfolio shows high concentration in single names.",
|
|
surface="portfolio",
|
|
)
|
|
assert v.clean is False
|
|
# Surface rider text appears in the system prompt only when the flag is
|
|
# on; with it off, the rider must be absent.
|
|
assert "# Surface: portfolio commentary" not in seen_systems[0]
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_portfolio_rider_active_when_flag_enabled(monkeypatch):
|
|
"""With PORTFOLIO_AI_ENABLED=True, surface='portfolio' attaches the
|
|
rider. Verified by inspecting the outbound system-prompt body."""
|
|
_configure(monkeypatch, portfolio_ai_enabled=True)
|
|
seen_systems: list[str] = []
|
|
def handler(req):
|
|
seen_systems.append(req.content.decode("utf-8"))
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content":
|
|
'{"clean": true, "reason": "portfolio fine"}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 8, "cost": 0.00003},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
await review_read(
|
|
client,
|
|
"Portfolio shows high concentration in single names.",
|
|
surface="portfolio",
|
|
)
|
|
assert "# Surface: portfolio commentary" in seen_systems[0]
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Reviewer self-score (0-10)
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_parses_score_from_llm_json(monkeypatch):
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content":
|
|
'{"clean": true, "reason": "exemplary", "score": 9}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 12, "cost": 0.00007},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "Markets pricing tighter policy.")
|
|
assert v.clean is True
|
|
assert v.score == 9
|
|
assert v.layer == "llm"
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_score_clamped_to_0_10(monkeypatch):
|
|
"""A model returning 17 or -3 is buggy but must not blow up — clamp."""
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content":
|
|
'{"clean": false, "reason": "x", "score": 17}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 8, "cost": 0.00003},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "Some content.")
|
|
assert v.score == 10
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_score_negative_clamped_to_0(monkeypatch):
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content":
|
|
'{"clean": false, "reason": "x", "score": -3}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 8, "cost": 0.00003},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "Some content.")
|
|
assert v.score == 0
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_missing_score_yields_none(monkeypatch):
|
|
"""Older mocked responses don't carry score; verdict still valid,
|
|
score is None."""
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content":
|
|
'{"clean": true, "reason": "ok"}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 6, "cost": 0.00002},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "Plain state-level prose.")
|
|
assert v.clean is True
|
|
assert v.score is None
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_score_non_numeric_yields_none(monkeypatch):
|
|
"""Defensive: a string or null in the score field doesn't poison the
|
|
verdict; score becomes None."""
|
|
_configure(monkeypatch)
|
|
def handler(_req):
|
|
return httpx.Response(200, json={
|
|
"choices": [{"message": {"content":
|
|
'{"clean": true, "reason": "ok", "score": "high"}'},
|
|
"finish_reason": "stop"}],
|
|
"usage": {"prompt_tokens": 50, "completion_tokens": 6, "cost": 0.00002},
|
|
})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "Plain state-level prose.")
|
|
assert v.clean is True
|
|
assert v.score is None
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_review_deterministic_layer_score_is_zero(monkeypatch):
|
|
"""A deterministic-layer hit is a hard reject by rule; the audit row
|
|
carries score=0 (no nuance to score)."""
|
|
_configure(monkeypatch)
|
|
calls = []
|
|
def handler(_req):
|
|
calls.append(1)
|
|
return httpx.Response(500, json={"error": "should not fire"})
|
|
async with httpx.AsyncClient(transport=_mock_post(handler)) as client:
|
|
v = await review_read(client, "You should buy the dip.")
|
|
assert v.clean is False
|
|
assert v.layer == "deterministic"
|
|
assert v.score == 0
|
|
assert calls == []
|