41 lines
2.5 KiB
TypeScript
41 lines
2.5 KiB
TypeScript
import { expect, test } from "bun:test";
|
|
import express from "express";
|
|
import { registerTaskQuestionBridge } from "../../src/routes/task-question-bridge.js";
|
|
import { removeRuntimeSessionContext, setRuntimeSessionContext } from "../../src/runtime/sessionContext.js";
|
|
|
|
test("task questions bind identity on the host and reject chat, readers, and forged targets", async () => {
|
|
const calls: unknown[][] = [];
|
|
const taskId = crypto.randomUUID();
|
|
for (const purpose of ["task_execution", "task_collaboration", "ordinary_chat"] as const) {
|
|
setRuntimeSessionContext({ sessionId: purpose, clientSessionId: `client-${purpose}`, actorKey: "actor",
|
|
projectKey: "project", traceId: "test", taskId, purpose });
|
|
}
|
|
const app = express(); app.use(express.json());
|
|
registerTaskQuestionBridge(app, { internalToken: "test-token", client: {
|
|
askTaskUser: async (...args) => { calls.push(args); return { question_request_id: crypto.randomUUID(), status: "pending", version: 1 }; }
|
|
} });
|
|
const server = app.listen(0, "127.0.0.1");
|
|
await new Promise<void>((resolve) => server.once("listening", resolve));
|
|
const body = { session_id: "task_execution", request_id: crypto.randomUUID(), questions: [{
|
|
question_id: "flow", title: "流量依据", body: "是否有流量记录？", options: [], mode: "single", allow_custom: true, required: true
|
|
}] };
|
|
const post = (input = body, token = "test-token") => fetch(`http://127.0.0.1:${(server.address() as { port: number }).port}/internal/operational-task/questions`, {
|
|
method: "POST", headers: { "content-type": "application/json", "x-agent-internal-token": token }, body: JSON.stringify(input)
|
|
});
|
|
try {
|
|
expect((await post(body, "wrong")).status).toBe(403);
|
|
for (const session_id of ["task_collaboration", "ordinary_chat", "unregistered-reader"]) {
|
|
expect((await post({ ...body, session_id })).status).toBe(403);
|
|
}
|
|
expect((await post({ ...body, task_id: "forged" } as typeof body)).status).toBe(400);
|
|
expect((await post({ ...body, questions: [body.questions[0], body.questions[0]] })).status).toBe(400);
|
|
expect(calls).toHaveLength(0);
|
|
expect((await post()).status).toBe(200);
|
|
expect(calls[0]).toEqual(["task_execution", taskId, { request_id: body.request_id,
|
|
questions: body.questions, sourceSessionId: "client-task_execution" }]);
|
|
} finally {
|
|
["task_execution", "task_collaboration", "ordinary_chat"].forEach(removeRuntimeSessionContext);
|
|
await new Promise<void>((resolve) => server.close(() => resolve()));
|
|
}
|
|
});
|