d0c249c739
- launchd writer emits <EnvironmentVariables>; systemd writer emits EnvironmentFile/Environment; originConfig zone parameterized (default 'term' preserved for relay callers). - InstallOptions threaded CLI install -> createCliDeps -> installService seam -> writers, so generated units carry BIND_HOST (defaults 127.0.0.1 for tunnel hosts), ALLOWED_ORIGINS, PORT, SHELL_PATH, IDLE_TTL, USE_TMUX. systemd rejects control chars in env values. Verified: agent typecheck+build clean; vitest 166/166 (154 baseline + 12 new).
85 lines
3.2 KiB
TypeScript
85 lines
3.2 KiB
TypeScript
import { describe, expect, it } from 'vitest'
|
|
import {
|
|
DEFAULT_ORIGIN_ZONE,
|
|
ensureAllowedOrigin,
|
|
mergeOrigins,
|
|
subdomainOrigin,
|
|
type OriginFsDeps,
|
|
} from '../src/service/originConfig.js'
|
|
|
|
function memFs(initial: string | null): { fs: OriginFsDeps; get(): string } {
|
|
const store = { content: initial }
|
|
const fs: OriginFsDeps = {
|
|
exists: () => store.content !== null,
|
|
read: () => store.content ?? '',
|
|
write: (_p, c) => {
|
|
store.content = c
|
|
},
|
|
}
|
|
return { fs, get: () => store.content ?? '' }
|
|
}
|
|
|
|
const PATH = '/etc/web-terminal.env'
|
|
|
|
describe('ensureAllowedOrigin (T17, EXPLORE §3)', () => {
|
|
it('composes https://<subdomain>.term.<domain>', () => {
|
|
expect(subdomainOrigin('host-42', 'example.com')).toBe('https://host-42.term.example.com')
|
|
})
|
|
|
|
it('appends the origin when the file has none', () => {
|
|
const { fs, get } = memFs('PORT=3000\n')
|
|
ensureAllowedOrigin(PATH, 'host-42', 'example.com', fs)
|
|
expect(get()).toContain('ALLOWED_ORIGINS=https://host-42.term.example.com')
|
|
expect(get()).toContain('PORT=3000')
|
|
})
|
|
|
|
it('is idempotent (no duplicate on a second run)', () => {
|
|
const { fs, get } = memFs('ALLOWED_ORIGINS=https://host-42.term.example.com\n')
|
|
ensureAllowedOrigin(PATH, 'host-42', 'example.com', fs)
|
|
const matches = get().match(/host-42\.term\.example\.com/g) ?? []
|
|
expect(matches).toHaveLength(1)
|
|
})
|
|
|
|
it('preserves existing origins (never weakens the Origin check)', () => {
|
|
const { fs, get } = memFs('ALLOWED_ORIGINS=https://existing.example.com\n')
|
|
ensureAllowedOrigin(PATH, 'host-42', 'example.com', fs)
|
|
expect(get()).toContain('https://existing.example.com')
|
|
expect(get()).toContain('https://host-42.term.example.com')
|
|
})
|
|
})
|
|
|
|
describe('zone parameterization (PLAN_NATIVE_TUNNEL S2)', () => {
|
|
it('defaults to the historical `term` zone', () => {
|
|
expect(DEFAULT_ORIGIN_ZONE).toBe('term')
|
|
expect(subdomainOrigin('t1', 'yaojia.wang')).toBe('https://t1.term.yaojia.wang')
|
|
})
|
|
|
|
it('composes the `terminal` zone for native-tunnel hosts', () => {
|
|
expect(subdomainOrigin('t1', 'yaojia.wang', 'terminal')).toBe('https://t1.terminal.yaojia.wang')
|
|
})
|
|
|
|
it('ensureAllowedOrigin writes the caller-selected zone', () => {
|
|
const { fs, get } = memFs('PORT=3000\n')
|
|
ensureAllowedOrigin(PATH, 't1', 'yaojia.wang', fs, 'terminal')
|
|
expect(get()).toContain('ALLOWED_ORIGINS=https://t1.terminal.yaojia.wang')
|
|
expect(get()).not.toContain('.term.yaojia.wang')
|
|
})
|
|
})
|
|
|
|
describe('mergeOrigins (PLAN_NATIVE_TUNNEL S2)', () => {
|
|
it('appends to an empty/undefined value', () => {
|
|
expect(mergeOrigins(undefined, 'https://a.example.com')).toBe('https://a.example.com')
|
|
expect(mergeOrigins('', 'https://a.example.com')).toBe('https://a.example.com')
|
|
})
|
|
|
|
it('de-duplicates an origin already present', () => {
|
|
expect(mergeOrigins('https://a.example.com', 'https://a.example.com')).toBe('https://a.example.com')
|
|
})
|
|
|
|
it('appends a new origin, trimming whitespace, preserving existing ones', () => {
|
|
expect(mergeOrigins(' https://a.example.com , https://b.example.com ', 'https://c.example.com')).toBe(
|
|
'https://a.example.com,https://b.example.com,https://c.example.com',
|
|
)
|
|
})
|
|
})
|