test: isolate pytest runtime defaults across workers and runs

tests/test_worker_runtime.py

@@ -0,0 +1,72 @@
+"""The default namespace must protect callers and simultaneous pytest runs."""
+
+import os
+import subprocess
+import sys
+import tempfile
+from pathlib import Path
+
+import pytest
+
+from tests.helpers.worker_runtime import isolated_runtime
+
+
+@pytest.mark.parametrize("fail", [False, True])
+def test_runtime_restores_environment_and_removes_files(monkeypatch, tmp_path, fail):
+    caller = tmp_path / "caller"
+    caller.mkdir()
+    sentinel = caller / "sentinel"
+    sentinel.write_text("keep")
+    for name in ("ODYSSEUS_DATA_DIR", "ODYSSEUS_MAIL_ATTACHMENTS_DIR",
+                 "FASTEMBED_CACHE_PATH", "XDG_RUNTIME_DIR", "AGENT_BROWSER_SOCKET_DIR",
+                 "TMPDIR", "TMP", "TEMP"):
+        monkeypatch.setenv(name, str(caller))
+    before = dict(os.environ)
+    previous_tmp = tempfile.tempdir
+    root = None
+    try:
+        with isolated_runtime("gw0") as root:
+            assert root != caller
+            assert "AGENT_BROWSER_SOCKET_DIR" not in os.environ
+            for name in ("ODYSSEUS_DATA_DIR", "ODYSSEUS_MAIL_ATTACHMENTS_DIR",
+                         "FASTEMBED_CACHE_PATH", "XDG_RUNTIME_DIR", "TMPDIR", "TMP", "TEMP"):
+                path = Path(os.environ[name])
+                assert path.is_dir() and path.is_relative_to(root)
+                (path / "owned").write_text("test")
+            assert Path(tempfile.gettempdir()).is_relative_to(root)
+            if fail:
+                raise RuntimeError("test failure")
+    except RuntimeError:
+        assert fail
+    assert dict(os.environ) == before
+    assert tempfile.tempdir == previous_tmp
+    assert root is not None and not root.exists()
+    assert sentinel.read_text() == "keep"
+    assert list(caller.iterdir()) == [sentinel]
+
+
+def test_same_worker_name_gets_distinct_namespaces():
+    data_variable = "ODYSSEUS_DATA_DIR"
+    with isolated_runtime("gw0") as first:
+        (first / "data" / "state").write_text("first")
+        with isolated_runtime("gw0") as second:
+            assert first != second
+            assert not (second / "data" / "state").exists()
+            assert Path(os.environ[data_variable]) == second / "data"
+        assert Path(os.environ[data_variable]) == first / "data"
+        assert (first / "data" / "state").read_text() == "first"
+    assert not first.exists() and not second.exists()
+
+
+def test_subprocess_inherits_private_temp_and_data_directories():
+    with isolated_runtime("gw1") as root:
+        result = subprocess.run(
+            [sys.executable, "-c", "import os,tempfile; from pathlib import Path; "
+             "name = 'ODYSSEUS_DATA_DIR'; Path(os.environ[name], 'child').write_text('data'); "
+             "Path(tempfile.gettempdir(), 'child').write_text('temp')"],
+            capture_output=True, text=True, timeout=10,
+        )
+        assert result.returncode == 0, result.stderr
+        assert (root / "data" / "child").read_text() == "data"
+        assert (root / "tmp" / "child").read_text() == "temp"
+    assert not root.exists()