Files
OmniRoute/tests/integration/opencode-config-startup.test.ts
Xiangzhe 7790b0d168 test(integration): realign three suites to security and version contracts that moved
All three are the sibling-test gap again: a PR moved a contract, updated its own
tests, and left these behind. None is a production defect — in two of the three the
production side is a deliberate security fix.

v1-contracts-behavior (4 failures, one cause): the job env sets INITIAL_PASSWORD,
which makes isAuthRequired() true, and #9320 (b07182c72a) made the /v1 catalogue
gate on-by-default instead of opt-in via settings.requireAuthForModels. The four
contract reads were calling the catalogue routes with no credential and correctly
getting 401. Bisected the job's four env vars to confirm INITIAL_PASSWORD alone
reproduces it (5 pass / 4 fail with it, 9 / 0 without). The tests now send a Bearer
token; the shape assertions are untouched, and the auth contract itself stays owned
by tests/unit/v1-models-auth-leak-9320.test.ts rather than being duplicated here.

opencode-config-startup: two independent drifts. OPENCODE_VERSION was pinned to
1.18.8 while the installed opencode-ai is 1.18.18 (Dependabot 7f6958960c, #10626) —
now read from require("opencode-ai/package.json").version, which is exactly as
strict but cannot drift on the next bump. And the no-limit-metadata case asserted
limit === undefined, but #11054 made the generator always emit a limit; it now pins
the actual fallback {context: 128_000, output: 8_192} instead of an absence.

memory-pipeline: #11040 (GHSA-cpv3-xr7r-xf8q) made the resolved caller principal
always win over a caller-supplied apiKeyId, so a spoofed id can no longer write into
another principal's store. That PR updated the unit sibling but not this one. The
test now asserts the stronger property — and deliberately not just the absence: the
spoofed principal's store is empty AND the caller can still read the entry, which
proves the write was redirected rather than dropped and keeps the emptiness check
from passing vacuously with a disabled store. (The old assertion was count === 0,
which a switched-off memory store would satisfy.)

Assertion counts: 43 -> 43, 13 -> 14, 76 -> 81. Nothing weakened or removed.
Verified: 24/24 pass, with and without the CI env vars.

Refs #10692
2026-08-25 11:37:19 -03:00

115 lines
4.5 KiB
TypeScript

import assert from "node:assert/strict";
import { spawnSync } from "node:child_process";
import fs from "node:fs";
import os from "node:os";
import path from "node:path";
import { createRequire } from "node:module";
import { after, it } from "node:test";
const require = createRequire(import.meta.url);
// Read the pin from the installed package instead of hard-coding it: the constant
// was frozen at 1.18.8 and silently went stale when Dependabot bumped opencode-ai
// to 1.18.18 (#10626), turning this into a base-red. Sourcing it from the resolved
// package.json keeps the assertion just as strict (the binary must report exactly
// the version this repo pins) while surviving future bumps.
const OPENCODE_VERSION: string = require("opencode-ai/package.json").version;
const testHome = fs.mkdtempSync(path.join(os.tmpdir(), "omniroute-opencode-8849-"));
const originalHome = process.env.HOME;
const originalFetch = globalThis.fetch;
process.env.HOME = testHome;
after(() => {
globalThis.fetch = originalFetch;
if (originalHome === undefined) delete process.env.HOME;
else process.env.HOME = originalHome;
fs.rmSync(testHome, { recursive: true, force: true });
});
function runOpencode(binary: string, args: string[]) {
const xdgRoot = path.join(testHome, "xdg");
const result = spawnSync(binary, args, {
cwd: testHome,
encoding: "utf8",
timeout: 30_000,
env: {
...process.env,
HOME: testHome,
XDG_CONFIG_HOME: path.join(xdgRoot, "config"),
XDG_DATA_HOME: path.join(xdgRoot, "data"),
XDG_CACHE_HOME: path.join(xdgRoot, "cache"),
XDG_STATE_HOME: path.join(xdgRoot, "state"),
NO_COLOR: "1",
OPENCODE_DISABLE_AUTOUPDATE: "1",
},
});
assert.ifError(result.error);
return result;
}
it("#8849 generated config is accepted by pinned OpenCode schema and startup", async () => {
const packageJsonPath = require.resolve("opencode-ai/package.json");
const opencodeBinary = path.join(path.dirname(packageJsonPath), "bin", "opencode.exe");
assert.ok(fs.existsSync(opencodeBinary), `missing pinned OpenCode ${OPENCODE_VERSION} binary`);
const version = runOpencode(opencodeBinary, ["--version"]);
assert.strictEqual(version.status, 0, version.stderr);
assert.strictEqual(version.stdout.trim(), OPENCODE_VERSION);
const catalog = {
object: "list",
data: [
{ id: "context-only", context_length: 131072 },
{ id: "context-input", context_length: 131072, max_input_tokens: 100000 },
{
id: "context-input-output",
context_length: 131072,
max_input_tokens: 100000,
max_output_tokens: 32768,
},
{ id: "no-limit-metadata" },
],
};
globalThis.fetch = (async () =>
new Response(JSON.stringify(catalog), {
status: 200,
headers: { "content-type": "application/json" },
})) as typeof fetch;
const { generateOpencodeConfig } =
await import("../../src/lib/cli-helper/config-generator/opencode.ts");
const generatedConfig = await generateOpencodeConfig({
baseUrl: "http://127.0.0.1:9/v1",
apiKey: "sk-test",
providerId: "issue8849",
});
const configDir = path.join(testHome, "xdg", "config", "opencode");
fs.mkdirSync(configDir, { recursive: true });
fs.writeFileSync(path.join(configDir, "opencode.json"), generatedConfig);
const configCheck = runOpencode(opencodeBinary, ["debug", "config", "--pure"]);
assert.strictEqual(configCheck.status, 0, configCheck.stderr);
assert.doesNotMatch(configCheck.stderr, /Missing key .*\.limit\.output/);
const resolvedConfig = JSON.parse(configCheck.stdout);
assert.ok(resolvedConfig.provider.issue8849.models["context-only"].limit.output > 0);
assert.strictEqual(
resolvedConfig.provider.issue8849.models["context-input-output"].limit.output,
32768
);
// #11035/#11032 (PR #11054) made the generator ALWAYS emit both limit keys: a model
// the catalog knows nothing about now gets the 128K context / 8K output fallbacks,
// because OpenCode's v1 provider schema rejects the whole config on a missing
// `limit.context` / `limit.output`. Before that fix the entry carried no `limit` at all.
assert.deepStrictEqual(resolvedConfig.provider.issue8849.models["no-limit-metadata"].limit, {
context: 128_000,
output: 8_192,
});
const startup = runOpencode(opencodeBinary, ["debug", "startup", "--pure"]);
assert.strictEqual(startup.status, 0, startup.stderr);
assert.match(startup.stdout.trim(), /^\d+(?:\.\d+)?$/);
assert.doesNotMatch(startup.stderr, /Missing key .*\.limit\.output/);
});