File size: 5,419 Bytes
cd8bd0a
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
import test from "node:test";
import assert from "node:assert/strict";
import fs from "node:fs";
import os from "node:os";
import path from "node:path";

import { makeManagementSessionRequest } from "../../helpers/managementSession.ts";

const TEST_DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), "omniroute-compression-preview-"));
const originalDataDir = process.env.DATA_DIR;
const originalJwtSecret = process.env.JWT_SECRET;

process.env.DATA_DIR = TEST_DATA_DIR;

const core = await import("../../../src/lib/db/core.ts");
const settingsDb = await import("../../../src/lib/db/settings.ts");
const previewRoute = await import("../../../src/app/api/compression/preview/route.ts");
const languagePacksRoute = await import("../../../src/app/api/compression/language-packs/route.ts");
const rulesRoute = await import("../../../src/app/api/compression/rules/route.ts");

type ErrorResponseBody = {
  error: string | { message?: string };
};

async function resetAuthRequiredStorage(): Promise<void> {
  core.resetDbInstance();
  fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
  fs.mkdirSync(TEST_DATA_DIR, { recursive: true });
  await settingsDb.updateSettings({
    requireLogin: true,
    setupComplete: true,
    password: "test-password-hash",
  });
}

test.beforeEach(async () => {
  process.env.DATA_DIR = TEST_DATA_DIR;
  await resetAuthRequiredStorage();
});

test.after(() => {
  if (originalDataDir === undefined) delete process.env.DATA_DIR;
  else process.env.DATA_DIR = originalDataDir;
  if (originalJwtSecret === undefined) delete process.env.JWT_SECRET;
  else process.env.JWT_SECRET = originalJwtSecret;
  core.resetDbInstance();
  fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
});

test("compression preview requires management auth before reading preview input", async () => {
  const response = await previewRoute.POST(
    new Request("http://localhost/api/compression/preview", {
      method: "POST",
      body: JSON.stringify({
        messages: [{ role: "tool", content: "same\nsame\nsame" }],
        mode: "rtk",
      }),
    })
  );
  const body = (await response.json()) as ErrorResponseBody;

  assert.equal(response.status, 401);
  assert.equal(
    typeof body.error === "object" ? body.error.message : null,
    "Authentication required"
  );
});

test("compression preview rejects bearer tokens without a dashboard session", async () => {
  const response = await previewRoute.POST(
    new Request("http://localhost/api/compression/preview", {
      method: "POST",
      headers: { authorization: "Bearer invalid-management-token" },
      body: JSON.stringify({
        messages: [{ role: "tool", content: "same\nsame\nsame" }],
        mode: "rtk",
      }),
    })
  );
  const body = (await response.json()) as ErrorResponseBody;

  assert.equal(response.status, 403);
  assert.equal(
    typeof body.error === "object" ? body.error.message : null,
    "Invalid management token"
  );
});

test("compression preview still runs for authenticated management sessions", async () => {
  const request = await makeManagementSessionRequest("http://localhost/api/compression/preview", {
    method: "POST",
    body: {
      messages: [{ role: "tool", content: "same\nsame\nsame" }],
      mode: "rtk",
      config: {
        rtkConfig: {
          intensity: "standard",
        },
      },
    },
  });

  const response = await previewRoute.POST(request);
  const body = (await response.json()) as { mode?: string; original?: string };

  assert.equal(response.status, 200);
  assert.equal(body.mode, "rtk");
  assert.match(body.original || "", /same/);
});

test("compression language pack metadata requires management auth", async () => {
  const response = await languagePacksRoute.GET(
    new Request("http://localhost/api/compression/language-packs")
  );
  const body = (await response.json()) as ErrorResponseBody;

  assert.equal(response.status, 401);
  assert.equal(
    typeof body.error === "object" ? body.error.message : null,
    "Authentication required"
  );
});

test("compression rules metadata rejects bearer tokens without a dashboard session", async () => {
  const response = await rulesRoute.GET(
    new Request("http://localhost/api/compression/rules", {
      headers: { authorization: "Bearer invalid-management-token" },
    })
  );
  const body = (await response.json()) as ErrorResponseBody;

  assert.equal(response.status, 403);
  assert.equal(
    typeof body.error === "object" ? body.error.message : null,
    "Invalid management token"
  );
});

test("compression metadata routes return data for authenticated management sessions", async () => {
  const languageRequest = await makeManagementSessionRequest(
    "http://localhost/api/compression/language-packs"
  );
  const rulesRequest = await makeManagementSessionRequest("http://localhost/api/compression/rules");

  const languageResponse = await languagePacksRoute.GET(languageRequest);
  const rulesResponse = await rulesRoute.GET(rulesRequest);
  const languageBody = (await languageResponse.json()) as { languages?: unknown; packs?: unknown };
  const rulesBody = (await rulesResponse.json()) as { rules?: unknown };

  assert.equal(languageResponse.status, 200);
  assert.ok(Array.isArray(languageBody.languages));
  assert.ok(Array.isArray(languageBody.packs));
  assert.equal(rulesResponse.status, 200);
  assert.ok(Array.isArray(rulesBody.rules));
});