Renames: - platform/ → workspace-server/ (Go module path stays as "platform" for external dep compat — will update after plugin module republish) - workspace-template/ → workspace/ Removed (moved to separate repos or deleted): - PLAN.md — internal roadmap (move to private project board) - HANDOFF.md, AGENTS.md — one-time internal session docs - .claude/ — gitignored entirely (local agent config) - infra/cloudflare-worker/ → Molecule-AI/molecule-tenant-proxy - org-templates/molecule-dev/ → standalone template repo - .mcp-eval/ → molecule-mcp-server repo - test-results/ — ephemeral, gitignored Security scrubbing: - Cloudflare account/zone/KV IDs → placeholders - Real EC2 IPs → <EC2_IP> in all docs - CF token prefix, Neon project ID, Fly app names → redacted - Langfuse dev credentials → parameterized - Personal runner username/machine name → generic Community files: - CONTRIBUTING.md — build, test, branch conventions - CODE_OF_CONDUCT.md — Contributor Covenant 2.1 All Dockerfiles, CI workflows, docker-compose, railway.toml, render.yaml, README, CLAUDE.md updated for new directory names. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
402 lines
12 KiB
Go
402 lines
12 KiB
Go
package handlers
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/DATA-DOG/go-sqlmock"
|
|
"github.com/Molecule-AI/molecule-monorepo/platform/internal/db"
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func TestSessionSearchReturnsActivityAndMemory(t *testing.T) {
|
|
mock := setupTestDB(t)
|
|
setupTestRedis(t)
|
|
broadcaster := newTestBroadcaster()
|
|
handler := NewActivityHandler(broadcaster)
|
|
|
|
rows := sqlmock.NewRows([]string{
|
|
"kind", "id", "workspace_id", "label", "content", "method", "status", "request_body", "response_body", "created_at",
|
|
}).
|
|
AddRow("activity", "act-1", "ws-123", "task_update", "Working on docs", "POST", "ok", `{"task":"docs"}`, `{"ok":true}`, time.Now()).
|
|
AddRow("activity", "act-2", "ws-123", "skill_promotion", "Promoted repeatable workflow", "memory/skill-promotion", "ok", `{"promote_to_skill":true}`, `{"id":"mem-2"}`, time.Now()).
|
|
AddRow("memory", "mem-1", "ws-123", "TEAM", "remember the docs path", "", "", nil, nil, time.Now())
|
|
|
|
mock.ExpectQuery("WITH session_items AS").
|
|
WithArgs("ws-123", "%docs%", 50).
|
|
WillReturnRows(rows)
|
|
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Request = httptest.NewRequest("GET", "/workspaces/ws-123/session-search?q=docs", bytes.NewBufferString(""))
|
|
c.Request.Header.Set("Content-Type", "application/json")
|
|
c.Params = gin.Params{{Key: "id", Value: "ws-123"}}
|
|
|
|
handler.SessionSearch(c)
|
|
|
|
if w.Code != http.StatusOK {
|
|
t.Fatalf("expected status 200, got %d: %s", w.Code, w.Body.String())
|
|
}
|
|
|
|
var resp []map[string]any
|
|
if err := json.Unmarshal(w.Body.Bytes(), &resp); err != nil {
|
|
t.Fatalf("failed to parse response: %v", err)
|
|
}
|
|
if len(resp) != 3 {
|
|
t.Fatalf("expected 3 results, got %d", len(resp))
|
|
}
|
|
if resp[0]["kind"] != "activity" || resp[1]["kind"] != "activity" || resp[2]["kind"] != "memory" {
|
|
t.Fatalf("unexpected result kinds: %#v", resp)
|
|
}
|
|
|
|
if err := mock.ExpectationsWereMet(); err != nil {
|
|
t.Fatalf("unmet sqlmock expectations: %v", err)
|
|
}
|
|
}
|
|
|
|
// ---------- Activity List source filter ----------
|
|
|
|
func TestActivityList_SourceCanvas(t *testing.T) {
|
|
mock := setupTestDB(t)
|
|
broadcaster := newTestBroadcaster()
|
|
handler := NewActivityHandler(broadcaster)
|
|
|
|
// Expect query with "source_id IS NULL"
|
|
mock.ExpectQuery(`SELECT .+ FROM activity_logs WHERE workspace_id = .+ AND source_id IS NULL`).
|
|
WithArgs("ws-1", 100).
|
|
WillReturnRows(sqlmock.NewRows([]string{
|
|
"id", "workspace_id", "activity_type", "source_id", "target_id",
|
|
"method", "summary", "request_body", "response_body",
|
|
"duration_ms", "status", "error_detail", "created_at",
|
|
}))
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Params = gin.Params{{Key: "id", Value: "ws-1"}}
|
|
c.Request = httptest.NewRequest("GET", "/workspaces/ws-1/activity?source=canvas", nil)
|
|
handler.List(c)
|
|
|
|
if w.Code != http.StatusOK {
|
|
t.Errorf("expected 200, got %d: %s", w.Code, w.Body.String())
|
|
}
|
|
if err := mock.ExpectationsWereMet(); err != nil {
|
|
t.Fatalf("unmet expectations: %v", err)
|
|
}
|
|
}
|
|
|
|
func TestActivityList_SourceAgent(t *testing.T) {
|
|
mock := setupTestDB(t)
|
|
broadcaster := newTestBroadcaster()
|
|
handler := NewActivityHandler(broadcaster)
|
|
|
|
// Expect query with "source_id IS NOT NULL"
|
|
mock.ExpectQuery(`SELECT .+ FROM activity_logs WHERE workspace_id = .+ AND source_id IS NOT NULL`).
|
|
WithArgs("ws-1", 100).
|
|
WillReturnRows(sqlmock.NewRows([]string{
|
|
"id", "workspace_id", "activity_type", "source_id", "target_id",
|
|
"method", "summary", "request_body", "response_body",
|
|
"duration_ms", "status", "error_detail", "created_at",
|
|
}))
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Params = gin.Params{{Key: "id", Value: "ws-1"}}
|
|
c.Request = httptest.NewRequest("GET", "/workspaces/ws-1/activity?source=agent", nil)
|
|
handler.List(c)
|
|
|
|
if w.Code != http.StatusOK {
|
|
t.Errorf("expected 200, got %d: %s", w.Code, w.Body.String())
|
|
}
|
|
if err := mock.ExpectationsWereMet(); err != nil {
|
|
t.Fatalf("unmet expectations: %v", err)
|
|
}
|
|
}
|
|
|
|
func TestActivityList_SourceInvalid(t *testing.T) {
|
|
gin.SetMode(gin.TestMode)
|
|
broadcaster := newTestBroadcaster()
|
|
handler := NewActivityHandler(broadcaster)
|
|
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Params = gin.Params{{Key: "id", Value: "ws-1"}}
|
|
c.Request = httptest.NewRequest("GET", "/workspaces/ws-1/activity?source=bogus", nil)
|
|
handler.List(c)
|
|
|
|
if w.Code != http.StatusBadRequest {
|
|
t.Errorf("expected 400 for invalid source, got %d", w.Code)
|
|
}
|
|
}
|
|
|
|
func TestActivityList_SourceWithType(t *testing.T) {
|
|
mock := setupTestDB(t)
|
|
broadcaster := newTestBroadcaster()
|
|
handler := NewActivityHandler(broadcaster)
|
|
|
|
// Both type and source filters
|
|
mock.ExpectQuery(`SELECT .+ FROM activity_logs WHERE workspace_id = .+ AND activity_type = .+ AND source_id IS NULL`).
|
|
WithArgs("ws-1", "a2a_receive", 100).
|
|
WillReturnRows(sqlmock.NewRows([]string{
|
|
"id", "workspace_id", "activity_type", "source_id", "target_id",
|
|
"method", "summary", "request_body", "response_body",
|
|
"duration_ms", "status", "error_detail", "created_at",
|
|
}))
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Params = gin.Params{{Key: "id", Value: "ws-1"}}
|
|
c.Request = httptest.NewRequest("GET", "/workspaces/ws-1/activity?type=a2a_receive&source=canvas", nil)
|
|
handler.List(c)
|
|
|
|
if w.Code != http.StatusOK {
|
|
t.Errorf("expected 200, got %d: %s", w.Code, w.Body.String())
|
|
}
|
|
if err := mock.ExpectationsWereMet(); err != nil {
|
|
t.Fatalf("unmet expectations: %v", err)
|
|
}
|
|
}
|
|
|
|
// ---------- Activity type allowlist (#125: memory_write added) ----------
|
|
|
|
func TestActivityReport_AcceptsMemoryWriteType(t *testing.T) {
|
|
mockDB, mock, _ := sqlmock.New()
|
|
defer mockDB.Close()
|
|
db.DB = mockDB
|
|
|
|
mock.ExpectExec(`INSERT INTO activity_logs`).
|
|
WillReturnResult(sqlmock.NewResult(1, 1))
|
|
|
|
broadcaster := newTestBroadcaster()
|
|
handler := NewActivityHandler(broadcaster)
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Params = gin.Params{{Key: "id", Value: "ws-mem"}}
|
|
body := `{"workspace_id":"ws-mem","activity_type":"memory_write","summary":"[LOCAL] x","status":"ok"}`
|
|
c.Request = httptest.NewRequest("POST", "/workspaces/ws-mem/activity", strings.NewReader(body))
|
|
c.Request.Header.Set("Content-Type", "application/json")
|
|
handler.Report(c)
|
|
|
|
if w.Code != http.StatusOK && w.Code != http.StatusCreated {
|
|
t.Errorf("memory_write should be accepted; got %d: %s", w.Code, w.Body.String())
|
|
}
|
|
}
|
|
|
|
func TestActivityReport_RejectsUnknownType(t *testing.T) {
|
|
mockDB, _, _ := sqlmock.New()
|
|
defer mockDB.Close()
|
|
db.DB = mockDB
|
|
|
|
broadcaster := newTestBroadcaster()
|
|
handler := NewActivityHandler(broadcaster)
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Params = gin.Params{{Key: "id", Value: "ws-x"}}
|
|
body := `{"workspace_id":"ws-x","activity_type":"made_up_type","summary":"x","status":"ok"}`
|
|
c.Request = httptest.NewRequest("POST", "/workspaces/ws-x/activity", strings.NewReader(body))
|
|
c.Request.Header.Set("Content-Type", "application/json")
|
|
handler.Report(c)
|
|
|
|
if w.Code != http.StatusBadRequest {
|
|
t.Errorf("unknown type should 400; got %d: %s", w.Code, w.Body.String())
|
|
}
|
|
if !strings.Contains(w.Body.String(), "memory_write") {
|
|
t.Errorf("error message should list valid types including memory_write; got %s", w.Body.String())
|
|
}
|
|
}
|
|
|
|
// ==================== Direct unit tests for SessionSearch helpers ====================
|
|
|
|
// --- parseSessionSearchParams ---
|
|
|
|
func TestParseSessionSearchParams_Defaults(t *testing.T) {
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Request = httptest.NewRequest("GET", "/x", nil)
|
|
|
|
q, limit := parseSessionSearchParams(c)
|
|
if q != "" {
|
|
t.Errorf("expected empty q, got %q", q)
|
|
}
|
|
if limit != 50 {
|
|
t.Errorf("expected default limit 50, got %d", limit)
|
|
}
|
|
}
|
|
|
|
func TestParseSessionSearchParams_CustomLimit(t *testing.T) {
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Request = httptest.NewRequest("GET", "/x?q=foo&limit=75", nil)
|
|
|
|
q, limit := parseSessionSearchParams(c)
|
|
if q != "foo" {
|
|
t.Errorf("expected q=foo, got %q", q)
|
|
}
|
|
if limit != 75 {
|
|
t.Errorf("expected limit=75, got %d", limit)
|
|
}
|
|
}
|
|
|
|
func TestParseSessionSearchParams_LimitCappedAt200(t *testing.T) {
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Request = httptest.NewRequest("GET", "/x?limit=9999", nil)
|
|
|
|
_, limit := parseSessionSearchParams(c)
|
|
if limit != 200 {
|
|
t.Errorf("expected cap 200, got %d", limit)
|
|
}
|
|
}
|
|
|
|
func TestParseSessionSearchParams_InvalidLimitUsesDefault(t *testing.T) {
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Request = httptest.NewRequest("GET", "/x?limit=abc", nil)
|
|
|
|
_, limit := parseSessionSearchParams(c)
|
|
if limit != 50 {
|
|
t.Errorf("expected default on invalid, got %d", limit)
|
|
}
|
|
}
|
|
|
|
// --- buildSessionSearchQuery ---
|
|
|
|
func TestBuildSessionSearchQuery_NoFilters(t *testing.T) {
|
|
sqlQuery, args := buildSessionSearchQuery("ws-1", "", 50)
|
|
if strings.Contains(sqlQuery, "ILIKE") {
|
|
t.Error("expected no ILIKE when query empty")
|
|
}
|
|
if len(args) != 2 || args[0] != "ws-1" || args[1] != 50 {
|
|
t.Errorf("unexpected args: %v", args)
|
|
}
|
|
}
|
|
|
|
func TestBuildSessionSearchQuery_WithQuery(t *testing.T) {
|
|
sqlQuery, args := buildSessionSearchQuery("ws-1", "foo", 25)
|
|
if !strings.Contains(sqlQuery, "ILIKE") {
|
|
t.Error("expected ILIKE when query provided")
|
|
}
|
|
if len(args) != 3 {
|
|
t.Fatalf("expected 3 args, got %d: %v", len(args), args)
|
|
}
|
|
if args[1] != "%foo%" {
|
|
t.Errorf("expected LIKE pattern, got %v", args[1])
|
|
}
|
|
if args[2] != 25 {
|
|
t.Errorf("expected limit=25, got %v", args[2])
|
|
}
|
|
}
|
|
|
|
// --- scanSessionSearchRows ---
|
|
|
|
// fakeRows implements the minimal rows interface scanSessionSearchRows expects.
|
|
type fakeRows struct {
|
|
data [][]interface{}
|
|
i int
|
|
err error
|
|
}
|
|
|
|
func (f *fakeRows) Next() bool { return f.i < len(f.data) }
|
|
func (f *fakeRows) Scan(dest ...interface{}) error {
|
|
row := f.data[f.i]
|
|
f.i++
|
|
for i, v := range row {
|
|
switch d := dest[i].(type) {
|
|
case *string:
|
|
*d = v.(string)
|
|
case *[]byte:
|
|
if v == nil {
|
|
*d = nil
|
|
} else {
|
|
*d = v.([]byte)
|
|
}
|
|
case *time.Time:
|
|
*d = v.(time.Time)
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
func (f *fakeRows) Err() error { return f.err }
|
|
|
|
func TestScanSessionSearchRows_EmptyRows(t *testing.T) {
|
|
items, err := scanSessionSearchRows(&fakeRows{})
|
|
if err != nil {
|
|
t.Fatalf("unexpected error: %v", err)
|
|
}
|
|
if len(items) != 0 {
|
|
t.Errorf("expected empty result, got %d", len(items))
|
|
}
|
|
}
|
|
|
|
func TestScanSessionSearchRows_MultipleRows(t *testing.T) {
|
|
now := time.Now()
|
|
rows := &fakeRows{
|
|
data: [][]interface{}{
|
|
{"activity", "a1", "ws-1", "task_update", "hello", "POST", "ok", []byte(`{"x":1}`), []byte(`{"y":2}`), now},
|
|
{"memory", "m1", "ws-1", "TEAM", "note", "", "", []byte(nil), []byte(nil), now},
|
|
},
|
|
}
|
|
items, err := scanSessionSearchRows(rows)
|
|
if err != nil {
|
|
t.Fatalf("unexpected error: %v", err)
|
|
}
|
|
if len(items) != 2 {
|
|
t.Fatalf("expected 2 items, got %d", len(items))
|
|
}
|
|
if items[0]["kind"] != "activity" {
|
|
t.Errorf("first row kind: %v", items[0]["kind"])
|
|
}
|
|
if items[0]["request_body"] == nil {
|
|
t.Error("expected request_body present on activity row")
|
|
}
|
|
if _, has := items[1]["request_body"]; has {
|
|
t.Error("memory row should not have request_body (nil bytes)")
|
|
}
|
|
}
|
|
|
|
// scanErrorRows returns a Scan error on the first row to cover the
|
|
// log-and-skip branch in scanSessionSearchRows.
|
|
type scanErrorRows struct {
|
|
called bool
|
|
}
|
|
|
|
func (s *scanErrorRows) Next() bool {
|
|
if !s.called {
|
|
s.called = true
|
|
return true
|
|
}
|
|
return false
|
|
}
|
|
func (s *scanErrorRows) Scan(dest ...interface{}) error { return fmt.Errorf("scan bad") }
|
|
func (s *scanErrorRows) Err() error { return nil }
|
|
|
|
func TestScanSessionSearchRows_ScanErrorSkipped(t *testing.T) {
|
|
items, err := scanSessionSearchRows(&scanErrorRows{})
|
|
if err != nil {
|
|
t.Fatalf("unexpected error: %v", err)
|
|
}
|
|
if len(items) != 0 {
|
|
t.Errorf("expected 0 items (scan error skipped), got %d", len(items))
|
|
}
|
|
}
|
|
|
|
func TestScanSessionSearchRows_RowsErrPropagates(t *testing.T) {
|
|
f := &fakeRows{err: fmt.Errorf("boom")}
|
|
_, err := scanSessionSearchRows(f)
|
|
if err == nil {
|
|
t.Fatal("expected error to propagate")
|
|
}
|
|
}
|