Files
OmniRoute/tests/unit/plugins-config-validation.test.ts
Diego Rodrigues de Sa e Souza 20c31493af feat(plugins): plugins framework + per-API-key disable-non-public-models (#3041)
Integrates two community contributions into release/v3.8.8 with security hardening and conflict resolution.

- **Plugins framework** (#2913 — thanks @oyi77): hooks + registry unification, plugin SDK (`definePlugin`), worker-thread sandbox, per-plugin hook rate limiting, SHA-256 integrity verification, semver-gated upgrade, and execution analytics. Plugin routes are loopback-only (`isLocalOnlyPath`); `child_process` exec is opt-in via `OMNIROUTE_PLUGINS_ALLOW_EXEC` (default off).
- **API key option: disable non-published models** (#3017 — thanks @androw): a per-key flag restricting the key to discovered public models (combos / `auto/*` / `qtSd/*` routing still allowed).

Hardening applied during integration: migration renumber (089/090/091), `/api/plugins` LOCAL_ONLY route-guard classification (closes the plugin-RCE vector), atomic install/upgrade with path containment, `O_EXCL` tmp-file creation (TOCTOU), rate-limit-map eviction, `validatePluginConfig` on configure, `buildErrorBody` on all plugin error paths. 246/246 tests; typecheck / cycles / docs-sync clean.

Co-authored-by: oyi77 <14921983+oyi77@users.noreply.github.com>
Co-authored-by: Nicolas Lorin <androw95220@gmail.com>
2026-06-01 15:43:55 -03:00

82 lines
2.7 KiB
TypeScript

import { describe, it } from "node:test";
import assert from "node:assert";
import { validatePluginConfig, type ConfigField } from "../../src/lib/plugins/manifest.ts";
describe("validatePluginConfig", () => {
const schema: Record<string, ConfigField> = {
name: { type: "string", default: "test" },
count: { type: "number", default: 10, min: 1, max: 100 },
enabled: { type: "boolean", default: true },
mode: { type: "select", enum: ["fast", "slow"], default: "fast" },
};
it("valid config passes", () => {
const result = validatePluginConfig({ name: "hello", count: 5, enabled: true, mode: "fast" }, schema);
assert.deepStrictEqual(result, { valid: true });
});
it("unknown key rejected", () => {
const result = validatePluginConfig({ unknownKey: "value" }, schema);
assert.strictEqual(result.valid, false);
if (!result.valid) {
assert.ok(result.errors[0].includes("Unknown config key"));
assert.ok(result.errors[0].includes("unknownKey"));
}
});
it("wrong type rejected", () => {
const result = validatePluginConfig({ name: 123 }, schema);
assert.strictEqual(result.valid, false);
if (!result.valid) {
assert.ok(result.errors[0].includes("must be a string"));
}
});
it("number min/max enforced", () => {
const result = validatePluginConfig({ count: 200 }, schema);
assert.strictEqual(result.valid, false);
if (!result.valid) {
assert.ok(result.errors[0].includes("must be <= 100"));
}
});
it("number min enforced", () => {
const result = validatePluginConfig({ count: 0 }, schema);
assert.strictEqual(result.valid, false);
if (!result.valid) {
assert.ok(result.errors[0].includes("must be >= 1"));
}
});
it("select enum enforced", () => {
const result = validatePluginConfig({ mode: "turbo" }, schema);
assert.strictEqual(result.valid, false);
if (!result.valid) {
assert.ok(result.errors[0].includes("must be one of"));
}
});
it("empty config passes", () => {
const result = validatePluginConfig({}, schema);
assert.deepStrictEqual(result, { valid: true });
});
it("empty schema allows anything", () => {
const result = validatePluginConfig({ whatever: "value", count: 999 }, {});
assert.deepStrictEqual(result, { valid: true });
});
it("partial config validates only provided fields", () => {
const result = validatePluginConfig({ name: "partial" }, schema);
assert.deepStrictEqual(result, { valid: true });
});
it("boolean type rejected for non-boolean", () => {
const result = validatePluginConfig({ enabled: "yes" }, schema);
assert.strictEqual(result.valid, false);
if (!result.valid) {
assert.ok(result.errors[0].includes("must be a boolean"));
}
});
});