PageIndex/tests
mountain b9d021916f fix: prompt-injection delimiter escape, legacy config coercion, gather resilience, true cross-thread concurrency bound
Addresses items 4-8 from the max-effort review of PR #272 (VectifyAI/PageIndex#272).

- agent.py: wrap_with_doc_context() strips '<'/'>' from doc_name/doc_description
  (untrusted: unsanitized filename / LLM-generated from document content) before
  inserting them into the <docs>...</docs> block, so embedded content can never
  form a literal </docs> that closes the delimiter early and escapes the
  untrusted-data boundary SCOPED_SYSTEM_PROMPT relies on. Deterministic
  per-field transform, doesn't touch the (cacheable) static system prompt.

- ConfigLoader.load() (legacy 0.2.x compat) now routes merged overrides through
  IndexConfig before returning, so a legacy 'no' string gets pydantic's bool
  coercion instead of surviving as a truthy non-empty string — page_index_main's
  bare `if opt.if_add_node_summary:` checks (changed from `== 'yes'` elsewhere
  in this PR) were silently inverting caller intent and firing unwanted billed
  LLM calls.

- verify_toc, process_large_node_recursively, tree_parser,
  generate_summaries_for_structure, generate_summaries_for_structure_md: added
  return_exceptions=True to their asyncio.gather calls (llm_completion/
  llm_acompletion raise RuntimeError on retry exhaustion, added earlier in this
  PR), each with a degrade path matching the pattern already used by sibling
  hardened gathers in the same files. One transient LLM failure no longer
  aborts the whole document's indexing.

- _llm_semaphore is now a true process-wide ceiling (threading.Semaphore,
  shared across every thread/event loop) instead of one asyncio.Semaphore per
  event loop -- concurrently indexing N documents on N threads no longer
  multiplies the effective cap by N. A max_concurrency_scope() override is
  layered as a second, nested, per-loop restriction that can only tighten the
  effective cap within the ceiling, never widen past it.

- set_llm_params() mutated a bare process-wide dict with no per-call isolation,
  unlike max_concurrency which already had ContextVar scoping. Added
  llm_params_scope() (mirrors max_concurrency_scope) + IndexConfig.llm_params,
  wired into build_index() the same way max_concurrency already was, so
  concurrent indexing jobs with different llm kwargs don't leak into each
  other.

Adds regression tests for all five. Full suite: 221 passed, 2 skipped (one
pre-existing, unrelated flaky cloud-streaming test intermittently fails on
rerun; confirmed independent of this change).

Claude-Session: https://claude.ai/code/session_01Kx5DgKbhK1N8autqXH8SmS
2026-07-09 11:15:58 +08:00
..
test_agent.py fix: prompt-injection delimiter escape, legacy config coercion, gather resilience, true cross-thread concurrency bound 2026-07-09 11:15:58 +08:00
test_architecture.py refactor(sdk): typed returns, protocol contract, parser layering 2026-07-07 12:15:34 +08:00
test_client.py feat(collection): doc_ids accepts str|list, design cleanups 2026-05-15 17:03:17 +08:00
test_cloud_backend.py fix: six P2 correctness/robustness cleanups from the SDK review 2026-07-07 11:34:13 +08:00
test_collection.py fix: six P2 correctness/robustness cleanups from the SDK review 2026-07-07 11:34:13 +08:00
test_concurrency.py fix: prompt-injection delimiter escape, legacy config coercion, gather resilience, true cross-thread concurrency bound 2026-07-09 11:15:58 +08:00
test_config.py fix: prompt-injection delimiter escape, legacy config coercion, gather resilience, true cross-thread concurrency bound 2026-07-09 11:15:58 +08:00
test_content_node.py feat: add PageIndex SDK with local/cloud dual-mode support (#207) 2026-04-08 20:21:58 +08:00
test_env_compat.py fix: exact md page selection + restore CHATGPT_API_KEY alias 2026-07-08 17:33:41 +08:00
test_errors.py feat:compatible with Pageindex SDK (#238) 2026-05-11 21:06:23 +08:00
test_events.py feat: add PageIndex SDK with local/cloud dual-mode support (#207) 2026-04-08 20:21:58 +08:00
test_issue_163.py merge upstream/main into dev; port #188 into the index pipeline 2026-07-07 16:34:02 +08:00
test_legacy_sdk_contract.py fix(cloud_api): restore legacy is_retrieval_ready swallow-on-error contract 2026-07-07 15:48:49 +08:00
test_legacy_shims.py fix: prompt-injection delimiter escape, legacy config coercion, gather resilience, true cross-thread concurrency bound 2026-07-09 11:15:58 +08:00
test_legacy_utils_contract.py fix: six P2 correctness/robustness cleanups from the SDK review 2026-07-07 11:34:13 +08:00
test_local_backend.py fix: dedup race, cwd-relative image paths, unencoded legacy URLs 2026-07-07 12:06:58 +08:00
test_markdown_parser.py fix: resolve five P1 defects from the SDK review 2026-07-07 10:12:51 +08:00
test_page_content.py fix: exact md page selection + restore CHATGPT_API_KEY alias 2026-07-08 17:33:41 +08:00
test_pdf_parser.py fix: dedup race, cwd-relative image paths, unencoded legacy URLs 2026-07-07 12:06:58 +08:00
test_pipeline.py fix: prompt-injection delimiter escape, legacy config coercion, gather resilience, true cross-thread concurrency bound 2026-07-09 11:15:58 +08:00
test_review_fixes.py feat(cli): accept both bare flags and legacy yes/no for --if-add-* args 2026-07-08 19:11:52 +08:00
test_review_fixes_2.py fix: address xhigh code-review findings on 2d46d68..8f536cb 2026-07-08 21:56:41 +08:00
test_sqlite_storage.py fix(sqlite): make concurrent indexing writes robust (no "database is locked") 2026-07-07 18:23:01 +08:00
test_storage_protocol.py feat: add PageIndex SDK with local/cloud dual-mode support (#207) 2026-04-08 20:21:58 +08:00