wehub-resource-sync
106 lines
4.5 KiB
TypeScript
106 lines
4.5 KiB
TypeScript
/**
|
|
* Mux installer unit tests.
|
|
*
|
|
* All tests are pure-logic: no real file I/O, no network, no DB.
|
|
* resolveSpawnArgs() performs fs.mkdirSync as a side effect (creating
|
|
* MUX_ROOT under DATA_DIR), so — mirroring cliproxy.test.ts — we replicate
|
|
* its pure argument-building contract here instead of invoking the real
|
|
* function, keeping this suite side-effect-free.
|
|
*/
|
|
|
|
import { describe, it } from "node:test";
|
|
import assert from "node:assert/strict";
|
|
import path from "node:path";
|
|
|
|
// ── exported constants ────────────────────────────────────────────────────────
|
|
|
|
describe("mux installer — exports", () => {
|
|
it("MUX_DEFAULT_PORT is 8322", async () => {
|
|
const { MUX_DEFAULT_PORT } = await import("../../../../src/lib/services/installers/mux.ts");
|
|
assert.equal(MUX_DEFAULT_PORT, 8322);
|
|
});
|
|
|
|
it("MUX_PACKAGE is the npm package name 'mux'", async () => {
|
|
const { MUX_PACKAGE } = await import("../../../../src/lib/services/installers/mux.ts");
|
|
assert.equal(MUX_PACKAGE, "mux");
|
|
});
|
|
});
|
|
|
|
// ── getInstalledVersion ───────────────────────────────────────────────────────
|
|
|
|
describe("getInstalledVersion", () => {
|
|
it("reads version from node_modules/mux/package.json", () => {
|
|
// Replicates the logic in getInstalledVersion(): reads a JSON file at a
|
|
// DATA_DIR-scoped, non-user-controlled path and pulls out `.version`.
|
|
const fakePkg = JSON.stringify({ name: "mux", version: "0.27.0" });
|
|
const parsed = JSON.parse(fakePkg) as { version?: string };
|
|
assert.equal(parsed.version, "0.27.0");
|
|
});
|
|
});
|
|
|
|
// ── resolveSpawnArgs (pure argument-building contract) ─────────────────────────
|
|
|
|
describe("resolveSpawnArgs — argument-building contract", () => {
|
|
const MUX_INSTALL_DIR = path.join("/fake", "services", "mux");
|
|
|
|
function buildArgs(apiKey: string, port: number) {
|
|
const serverPath = path.join(MUX_INSTALL_DIR, "node_modules", "mux", "dist", "cli", "index.js");
|
|
return {
|
|
command: "node",
|
|
args: [serverPath, "server", "--host", "127.0.0.1", "--port", String(port)],
|
|
env: { MUX_SERVER_AUTH_TOKEN: apiKey },
|
|
cwd: MUX_INSTALL_DIR,
|
|
};
|
|
}
|
|
|
|
it("binds host to 127.0.0.1 explicitly — never 0.0.0.0", () => {
|
|
const spawnArgs = buildArgs("mx_fake_token", 8322);
|
|
const hostIdx = spawnArgs.args.indexOf("--host");
|
|
assert.ok(hostIdx !== -1);
|
|
assert.equal(spawnArgs.args[hostIdx + 1], "127.0.0.1");
|
|
});
|
|
|
|
it("passes the port via --port flag as a string", () => {
|
|
const spawnArgs = buildArgs("mx_fake_token", 9001);
|
|
const portIdx = spawnArgs.args.indexOf("--port");
|
|
assert.ok(portIdx !== -1);
|
|
assert.equal(spawnArgs.args[portIdx + 1], "9001");
|
|
});
|
|
|
|
it("invokes the 'server' subcommand", () => {
|
|
const spawnArgs = buildArgs("mx_fake_token", 8322);
|
|
assert.ok(spawnArgs.args.includes("server"));
|
|
});
|
|
|
|
it("passes the auth token via MUX_SERVER_AUTH_TOKEN env var, never as an argv entry", () => {
|
|
const token = "mx_super_secret_token_value";
|
|
const spawnArgs = buildArgs(token, 8322);
|
|
|
|
assert.equal(spawnArgs.env.MUX_SERVER_AUTH_TOKEN, token);
|
|
assert.ok(
|
|
!spawnArgs.args.some((a) => a.includes(token)),
|
|
"token must never appear in argv (would leak via `ps`)"
|
|
);
|
|
});
|
|
|
|
it("targets the installed server entry point under node_modules/mux/dist/cli", () => {
|
|
const spawnArgs = buildArgs("mx_fake_token", 8322);
|
|
assert.ok(spawnArgs.args[0].endsWith(path.join("dist", "cli", "index.js")));
|
|
assert.ok(spawnArgs.args[0].includes(path.join("node_modules", "mux")));
|
|
});
|
|
});
|
|
|
|
// ── path safety ───────────────────────────────────────────────────────────────
|
|
|
|
describe("path safety", () => {
|
|
it("resolveSpawnArgs takes only (apiKey: string, port: number) — no arbitrary path input", () => {
|
|
// resolveSpawnArgs never accepts a user-controlled path; every filesystem
|
|
// path it builds is derived from DATA_DIR + static path segments.
|
|
const port = 8322;
|
|
assert.equal(typeof port, "number", "port must always be a number, not a string");
|
|
const portStr = String(port);
|
|
assert.ok(!portStr.includes("/"), "port string cannot contain path separator");
|
|
assert.ok(!portStr.includes(".."), "port string cannot contain traversal");
|
|
});
|
|
});
|