6c7eed7580
Fresh history cut from cynarAI/evoo antigravity-handoff/project-timeline (Voice First + project timeline). Brand docs/titles as evOo; keep @rakazo/* packages as tech debt. Excludes node_modules, caches, secrets, voice blobs.
61 lines
2.4 KiB
TypeScript
61 lines
2.4 KiB
TypeScript
import { execFileSync } from "node:child_process";
|
|
import { LOCAL_SETTINGS_RPC, LOCAL_SETTINGS_TOKEN_HEADER } from "@rakazo/contracts";
|
|
import { describe, expect, it, vi } from "vitest";
|
|
import { requestLocalSettings } from "./local-settings.js";
|
|
|
|
const target = { origin: "http://127.0.0.1:5173", token: "ab".repeat(32) };
|
|
const pathname = `${LOCAL_SETTINGS_RPC}/models/connect`;
|
|
describe("local settings transport", () => {
|
|
it("loads shared settings contracts in native Node without a TypeScript loader", () => {
|
|
expect(() =>
|
|
execFileSync(
|
|
process.execPath,
|
|
[
|
|
"--no-experimental-strip-types",
|
|
"--input-type=module",
|
|
"-e",
|
|
'import { LOCAL_SETTINGS_PAGE, isLocalSettingsProcedure } from "@rakazo/contracts/local-settings"; if (LOCAL_SETTINGS_PAGE !== "/desktop-settings" || !isLocalSettingsProcedure("/api/desktop-settings/rpc/me")) throw new Error("Invalid runtime contract");',
|
|
],
|
|
{ cwd: import.meta.dirname, env: { ...process.env, NODE_OPTIONS: "" }, stdio: "pipe" },
|
|
),
|
|
).not.toThrow();
|
|
});
|
|
it("sends only the scoped capability, without cookies or following redirects", async () => {
|
|
const fetcher = vi.fn(async () => new Response('{"json":{"ok":true}}'));
|
|
expect(await requestLocalSettings(target, pathname, '{"json":{}}', fetcher)).toEqual({
|
|
status: 200,
|
|
body: '{"json":{"ok":true}}',
|
|
});
|
|
expect(fetcher).toHaveBeenCalledWith(
|
|
target.origin + pathname,
|
|
expect.objectContaining({
|
|
method: "POST",
|
|
credentials: "omit",
|
|
redirect: "error",
|
|
headers: {
|
|
"content-type": "application/json",
|
|
[LOCAL_SETTINGS_TOKEN_HEADER]: target.token,
|
|
},
|
|
}),
|
|
);
|
|
});
|
|
it("rejects remote targets, arbitrary procedures, and oversized payloads before sending", async () => {
|
|
const fetcher = vi.fn();
|
|
for (const path of [
|
|
"/rpc/bots/list",
|
|
`${LOCAL_SETTINGS_RPC}/bots/list`,
|
|
`${pathname}?redirect=1`,
|
|
"https://example.test",
|
|
]) {
|
|
await expect(requestLocalSettings(target, path, "{}", fetcher)).rejects.toThrow();
|
|
}
|
|
await expect(
|
|
requestLocalSettings({ ...target, origin: "https://example.test" }, pathname, "{}", fetcher),
|
|
).rejects.toThrow();
|
|
await expect(
|
|
requestLocalSettings(target, pathname, "x".repeat(1024 * 1024 + 1), fetcher),
|
|
).rejects.toThrow();
|
|
expect(fetcher).not.toHaveBeenCalled();
|
|
});
|
|
});
|