mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-08-01 04:42:10 +03:00
* chore(release): continue v3.8.25 development cycle after main code-sync (r5) main fast-forwarded to release/v3.8.25 (#3863): unblocked Build+Docker via #3864, plus #3837 (mimocode proxy) and #3862 (trivy bump). This marker re-opens the umbrella PR for further v3.8.25 work. No version bump. * fix(db): persist the Keep-latest-backups retention setting (#3834) (#3867) * fix(oauth): clear GitLab Duo setup message instead of 500 (#3861) (#3868) * test(oauth): prove refresh_token preserved on real gemini-cli/antigravity dispatch (#3850) (#3869) * feat(compression-ui): unified compression config UI — per-engine pages + combos editor + menu + WS default-on (#3860) Integrated into release/v3.8.25 — feat(compression-ui): unified compression configuration UI (Compression Hub + per-engine Lite/Aggressive/Ultra pages + combos editor + sidebar entry + live-WS default-on). File-size re-baselined for sidebarVisibility.ts/chatCore.ts growth; orphan ws test relocated to a collected path. * docs(changelog): complete the v3.8.25 release notes + credit all contributors Audited every commit since v3.8.24 and filled the gaps the [3.8.25] section was missing: a New Features section (compression engines + Compression Studios #3848, compression UI #3860, injection-guard #3857, kiro discovery #3836, Veo #3839, mimocode proxy #3837, Arena ELO flag #3821), 9 more Fixed entries (#3811/#3807/#3759/#3849/#3838/#3835/#3814/#3820/#3819), a Security section (CCR IDOR #3859, supply-chain #3824), and an Internal/Quality section. Every contributor and issue reporter is now credited. * docs(changelog): restore + complete the v3.8.25 release notes Re-adds CHANGELOG.md (a prior server-side commit accidentally dropped it) with the complete, audited [3.8.25] section: New Features, the full Fixed list, Security & Hardening, and Internal/Quality — every contributor and issue reporter credited. * chore(release): finalize v3.8.25 — reconcile CHANGELOG + i18n mirrors, document OMNIROUTE_MAX_PENDING_MIGRATIONS, green the unit suite Release-gate reconciliation for v3.8.25: - CHANGELOG: dated 2026-06-14, linked #3826, rolled up file-size re-baselines (#3823/#3833), recorded the test-greening; re-synced all 41 i18n CHANGELOG mirrors. - Documented OMNIROUTE_MAX_PENDING_MIGRATIONS (#3416) in .env.example + ENVIRONMENT.md. - Greened the unit suite (was merged red on 4 CI shards): aligned 10 stale tests to this cycle's intended behavior (#3838/#3822/#3501/SOCKS5/Vertex-Express/Antigravity) and the same-provider 503 fall-through test; de-flaked the compression benchmark reproducibility and ServiceSupervisor crash tests. No production code changed. * ci(security): clear OpenSSF Scorecard code-scanning noise + harden workflow token permissions The Security tab held 155 open alerts, ALL from the advisory OpenSSF Scorecard tool (#3824) — supply-chain/posture scores, not code vulnerabilities — which drowned out real CodeQL findings. - scorecard.yml: stop uploading SARIF to the code-scanning tab (drop the upload-sarif step + the now-unused security-events: write). The run still produces the OpenSSF badge (publish_results) and a downloadable SARIF artifact. - TokenPermissions hardening (the high-severity, genuinely-valuable subset): set each workflow's top-level token to read-only and grant the exact writes at the job level that needs them — npm-publish (id-token/packages on publish jobs), docker-publish (packages on build), electron-release (contents on build/release, id-token/packages on publish-npm), build-fork (packages on build), claude (empty top-level; job grants its own). The 155 existing alerts were dismissed. Not adopting repo-wide SHA-pinning (143 PinnedDependencies advisories) — declined. * test(integration): align stale wiring/socks5 integration tests to this cycle's behavior These were red on the CI Integration job (pre-existing). No production code changed: - integration-wiring: the combos page no longer renders a per-page EmailPrivacyToggle (#3822 consolidated it into Settings → Appearance); the provider-detail test-result masking and upstream-proxy copy moved to decomposed components (#3501 BatchTestResultsModal / UpstreamProxyCard) — assertions now read the owning files. - api-routes-critical: SOCKS5 is now enabled by default (opt-out), so the disabled- rejection test must set ENABLE_SOCKS5_PROXY=false explicitly (an unset env now means enabled). (The ~32 live-Gemini integration tests are gated on OMNIROUTE_API_KEY and skip in CI; they only 'fail' locally when that key is present without a running server.)
305 lines
9.6 KiB
TypeScript
305 lines
9.6 KiB
TypeScript
// @vitest-environment jsdom
|
|
import React, { act } from "react";
|
|
import { createRoot } from "react-dom/client";
|
|
import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
|
|
|
|
// ── Helpers ───────────────────────────────────────────────────────────────
|
|
|
|
const containers: HTMLElement[] = [];
|
|
const roots: Array<{ unmount: () => void }> = [];
|
|
|
|
function mountInContainer(ui: React.ReactElement): HTMLElement {
|
|
const container = document.createElement("div");
|
|
document.body.appendChild(container);
|
|
containers.push(container);
|
|
const root = createRoot(container);
|
|
roots.push(root);
|
|
act(() => {
|
|
root.render(ui);
|
|
});
|
|
return container;
|
|
}
|
|
|
|
beforeEach(() => {
|
|
(
|
|
globalThis as typeof globalThis & { IS_REACT_ACT_ENVIRONMENT?: boolean }
|
|
).IS_REACT_ACT_ENVIRONMENT = true;
|
|
});
|
|
|
|
afterEach(async () => {
|
|
// Restore mocks first so any in-flight fetch promises settle without blocking
|
|
vi.restoreAllMocks();
|
|
await act(async () => {
|
|
while (roots.length > 0) {
|
|
roots.pop()?.unmount();
|
|
}
|
|
});
|
|
// Drain all remaining microtasks from effects that fired during unmount
|
|
for (let i = 0; i < 10; i++) {
|
|
await Promise.resolve();
|
|
}
|
|
while (containers.length > 0) {
|
|
containers.pop()?.remove();
|
|
}
|
|
document.body.innerHTML = "";
|
|
});
|
|
|
|
// ── Mock fetch ────────────────────────────────────────────────────────────
|
|
|
|
const ENGINE_PAYLOAD = {
|
|
engines: [
|
|
{
|
|
id: "headroom",
|
|
name: "Headroom",
|
|
description: "Headroom engine description",
|
|
icon: "🗜️",
|
|
stackable: true,
|
|
stackPriority: 1,
|
|
metadata: { description: "Headroom metadata description" },
|
|
configSchema: [
|
|
{
|
|
key: "minRows",
|
|
type: "number",
|
|
label: "Min rows",
|
|
defaultValue: 8,
|
|
min: 1,
|
|
max: 1000,
|
|
},
|
|
],
|
|
},
|
|
],
|
|
};
|
|
|
|
const COMBO_PAYLOAD = {
|
|
id: "default",
|
|
name: "Default",
|
|
description: "Default combo",
|
|
pipeline: [],
|
|
languagePacks: [],
|
|
outputMode: null,
|
|
};
|
|
|
|
const ANALYTICS_PAYLOAD = {
|
|
engineId: "headroom",
|
|
runs: 0,
|
|
tokensSaved: 0,
|
|
avgSavingsPercent: 0,
|
|
days: 7,
|
|
};
|
|
|
|
function setupFetchMock() {
|
|
vi.spyOn(globalThis, "fetch").mockImplementation(async (input: RequestInfo | URL) => {
|
|
const url = input.toString();
|
|
if (url.includes("/api/compression/engines")) {
|
|
return new Response(JSON.stringify(ENGINE_PAYLOAD), {
|
|
status: 200,
|
|
headers: { "Content-Type": "application/json" },
|
|
});
|
|
}
|
|
if (url.includes("/api/context/combos/default")) {
|
|
return new Response(JSON.stringify(COMBO_PAYLOAD), {
|
|
status: 200,
|
|
headers: { "Content-Type": "application/json" },
|
|
});
|
|
}
|
|
if (url.includes("/api/context/analytics/engine")) {
|
|
return new Response(JSON.stringify(ANALYTICS_PAYLOAD), {
|
|
status: 200,
|
|
headers: { "Content-Type": "application/json" },
|
|
});
|
|
}
|
|
return new Response(JSON.stringify({}), { status: 404 });
|
|
});
|
|
}
|
|
|
|
// ── Tests ─────────────────────────────────────────────────────────────────
|
|
|
|
describe("EngineConfigPage", () => {
|
|
it("renders the engine name after fetching engine list", async () => {
|
|
setupFetchMock();
|
|
const { EngineConfigPage } =
|
|
await import("../../../src/shared/components/compression/EngineConfigPage");
|
|
|
|
let container!: HTMLElement;
|
|
await act(async () => {
|
|
container = mountInContainer(<EngineConfigPage engineId="headroom" />);
|
|
});
|
|
|
|
// Flush any pending microtasks from effects
|
|
await act(async () => {
|
|
await Promise.resolve();
|
|
});
|
|
|
|
expect(container.textContent).toContain("Headroom");
|
|
});
|
|
|
|
it("renders the enable toggle for the engine", async () => {
|
|
setupFetchMock();
|
|
const { EngineConfigPage } =
|
|
await import("../../../src/shared/components/compression/EngineConfigPage");
|
|
|
|
let container!: HTMLElement;
|
|
await act(async () => {
|
|
container = mountInContainer(<EngineConfigPage engineId="headroom" />);
|
|
});
|
|
|
|
await act(async () => {
|
|
await Promise.resolve();
|
|
});
|
|
|
|
// Either a checkbox or a button that says "Ativar"
|
|
const hasToggle =
|
|
container.querySelector("input[type='checkbox'][data-toggle='enable']") !== null ||
|
|
container.querySelector("[data-toggle='enable']") !== null ||
|
|
container.textContent?.includes("Ativar") === true;
|
|
|
|
expect(hasToggle).toBe(true);
|
|
});
|
|
|
|
it("renders the config form field label from fetched schema (EngineConfigForm mounted)", async () => {
|
|
setupFetchMock();
|
|
const { EngineConfigPage } =
|
|
await import("../../../src/shared/components/compression/EngineConfigPage");
|
|
|
|
let container!: HTMLElement;
|
|
await act(async () => {
|
|
container = mountInContainer(<EngineConfigPage engineId="headroom" />);
|
|
});
|
|
|
|
await act(async () => {
|
|
await Promise.resolve();
|
|
});
|
|
|
|
// EngineConfigForm should render the "Min rows" field label from the schema
|
|
expect(container.textContent).toContain("Min rows");
|
|
});
|
|
|
|
it("shows empty-state text when analytics returns runs=0", async () => {
|
|
setupFetchMock();
|
|
const { EngineConfigPage } =
|
|
await import("../../../src/shared/components/compression/EngineConfigPage");
|
|
|
|
let container!: HTMLElement;
|
|
await act(async () => {
|
|
container = mountInContainer(<EngineConfigPage engineId="headroom" />);
|
|
});
|
|
|
|
await act(async () => {
|
|
await Promise.resolve();
|
|
});
|
|
|
|
// Should show some "no data" copy
|
|
const hasEmptyState =
|
|
container.textContent?.includes("Sem dados") === true ||
|
|
container.textContent?.includes("No data") === true;
|
|
expect(hasEmptyState).toBe(true);
|
|
});
|
|
|
|
it("renders the stacked-mode prerequisite notice", async () => {
|
|
setupFetchMock();
|
|
const { EngineConfigPage } =
|
|
await import("../../../src/shared/components/compression/EngineConfigPage");
|
|
|
|
let container!: HTMLElement;
|
|
await act(async () => {
|
|
container = mountInContainer(<EngineConfigPage engineId="headroom" />);
|
|
});
|
|
|
|
await act(async () => {
|
|
await Promise.resolve();
|
|
});
|
|
|
|
expect(container.textContent).toContain("stacked");
|
|
expect(container.textContent).toContain("Compression Settings");
|
|
});
|
|
|
|
it("Fix #4: handleSave sends enabled=false when engine is disabled", async () => {
|
|
// COMBO_PAYLOAD has empty pipeline → engine is disabled (enabled=false)
|
|
const putCalls: { body: unknown }[] = [];
|
|
vi.spyOn(globalThis, "fetch").mockImplementation(
|
|
async (input: RequestInfo | URL, init?: RequestInit) => {
|
|
const url = input.toString();
|
|
if (url.includes("/api/compression/engines")) {
|
|
return new Response(JSON.stringify(ENGINE_PAYLOAD), {
|
|
status: 200,
|
|
headers: { "Content-Type": "application/json" },
|
|
});
|
|
}
|
|
if (url.includes("/api/context/combos/default")) {
|
|
if (init?.method === "PUT") {
|
|
putCalls.push({ body: JSON.parse(init.body as string) });
|
|
return new Response(JSON.stringify(COMBO_PAYLOAD), {
|
|
status: 200,
|
|
headers: { "Content-Type": "application/json" },
|
|
});
|
|
}
|
|
return new Response(JSON.stringify(COMBO_PAYLOAD), {
|
|
status: 200,
|
|
headers: { "Content-Type": "application/json" },
|
|
});
|
|
}
|
|
if (url.includes("/api/context/analytics/engine")) {
|
|
return new Response(JSON.stringify(ANALYTICS_PAYLOAD), {
|
|
status: 200,
|
|
headers: { "Content-Type": "application/json" },
|
|
});
|
|
}
|
|
return new Response(JSON.stringify({}), { status: 404 });
|
|
}
|
|
);
|
|
|
|
const { EngineConfigPage } =
|
|
await import("../../../src/shared/components/compression/EngineConfigPage");
|
|
|
|
let container!: HTMLElement;
|
|
await act(async () => {
|
|
container = mountInContainer(<EngineConfigPage engineId="headroom" />);
|
|
});
|
|
|
|
// Let initial load complete
|
|
await act(async () => {
|
|
await Promise.resolve();
|
|
});
|
|
|
|
// Click "Salvar" — engine is disabled (COMBO_PAYLOAD pipeline is empty)
|
|
const saveBtn = container.querySelector("button") as HTMLButtonElement | null;
|
|
const allButtons = Array.from(container.querySelectorAll("button"));
|
|
const salvarBtn = allButtons.find((b) => b.textContent?.includes("Salvar"));
|
|
if (salvarBtn) {
|
|
await act(async () => {
|
|
salvarBtn.click();
|
|
});
|
|
await act(async () => {
|
|
await Promise.resolve();
|
|
});
|
|
}
|
|
|
|
// There should be at least one PUT call with enabled=false
|
|
const putWithFalse = putCalls.find(
|
|
(c) => (c.body as { enabled: boolean; engineId: string }).enabled === false
|
|
);
|
|
expect(putCalls.length).toBeGreaterThan(0);
|
|
expect(putWithFalse).toBeDefined();
|
|
});
|
|
|
|
it("does not crash when all fetch calls fail (fail-soft)", async () => {
|
|
vi.spyOn(globalThis, "fetch").mockRejectedValue(new Error("Network error"));
|
|
|
|
const { EngineConfigPage } =
|
|
await import("../../../src/shared/components/compression/EngineConfigPage");
|
|
|
|
let container!: HTMLElement;
|
|
await act(async () => {
|
|
container = mountInContainer(<EngineConfigPage engineId="headroom" />);
|
|
});
|
|
|
|
await act(async () => {
|
|
await Promise.resolve();
|
|
});
|
|
|
|
// Component should still be mounted (not crashed)
|
|
expect(container).toBeTruthy();
|
|
expect(container.parentNode).toBeTruthy();
|
|
});
|
|
});
|