boss/tests/project-messages-route.test.ts

import test from "node:test";
import assert from "node:assert/strict";
import os from "node:os";
import path from "node:path";
import { mkdtemp, rm } from "node:fs/promises";
import { NextRequest } from "next/server";

let runtimeRoot = "";
let getMessagesRoute: (typeof import("../src/app/api/v1/projects/[projectId]/messages/route"))["GET"];
let createAuthSession: (typeof import("../src/lib/boss-data"))["createAuthSession"];
let readState: (typeof import("../src/lib/boss-data"))["readState"];
let writeState: (typeof import("../src/lib/boss-data"))["writeState"];
let AUTH_SESSION_COOKIE = "";
let baseState: Awaited<ReturnType<typeof import("../src/lib/boss-data")["readState"]>>;

async function setup() {
  if (runtimeRoot) return;
  runtimeRoot = await mkdtemp(path.join(os.tmpdir(), "boss-project-messages-route-"));
  process.env.BOSS_RUNTIME_ROOT = runtimeRoot;
  process.env.BOSS_STATE_FILE = path.join(runtimeRoot, "boss-state.json");

  const [messageModule, data, auth] = await Promise.all([
    import("../src/app/api/v1/projects/[projectId]/messages/route.ts"),
    import("../src/lib/boss-data.ts"),
    import("../src/lib/boss-auth.ts"),
  ]);

  getMessagesRoute = messageModule.GET;
  createAuthSession = data.createAuthSession;
  readState = data.readState;
  writeState = data.writeState;
  baseState = structuredClone(await readState());
  AUTH_SESSION_COOKIE = auth.AUTH_SESSION_COOKIE;
}

test.after(async () => {
  if (runtimeRoot) {
    await rm(runtimeRoot, { recursive: true, force: true });
  }
});

test.beforeEach(async () => {
  await setup();
  await writeState(structuredClone(baseState));
});

function buildSingleThreadProject(projectId: string) {
  return {
    id: projectId,
    name: "轻量消息线程",
    pinned: false,
    systemPinned: false,
    deviceIds: ["device-message-lite"],
    preview: "等待增量刷新。",
    updatedAt: "2026-04-10T16:20:00+08:00",
    lastMessageAt: "2026-04-10T16:20:00+08:00",
    isGroup: false,
    threadMeta: {
      projectId,
      threadId: "thread-message-lite",
      threadDisplayName: "轻量消息线程",
      folderName: "Boss",
      activityIconCount: 0,
      updatedAt: "2026-04-10T16:20:00+08:00",
      codexThreadRef: "thread-message-lite",
      codexFolderRef: "boss",
    },
    groupMembers: [],
    createdByAgent: true,
    collaborationMode: "development" as const,
    approvalState: "not_required" as const,
    unreadCount: 0,
    riskLevel: "low" as const,
    messages: [
      {
        id: "message-lite-1",
        sender: "assistant",
        senderLabel: "Codex",
        body: "新的消息已经到了。",
        kind: "text" as const,
        sentAt: "2026-04-10T16:20:00+08:00",
      },
    ],
    goals: [],
    versions: [],
  };
}

async function createAuthedRequest(projectId: string) {
  const session = await createAuthSession({
    account: "krisolo",
    role: "highest_admin",
    displayName: "Boss 超级管理员",
    loginMethod: "password",
  });

  return new NextRequest(`http://127.0.0.1:3000/api/v1/projects/${projectId}/messages`, {
    method: "GET",
    headers: {
      cookie: `${AUTH_SESSION_COOKIE}=${session.sessionToken}`,
    },
  });
}

test("GET /api/v1/projects/[projectId]/messages returns a lightweight chat payload", async () => {
  await setup();
  const state = await readState();
  const project = buildSingleThreadProject("message-lite");

  await writeState({
    ...state,
    devices: state.devices.concat({
      id: "device-message-lite",
      name: "Mac Studio",
      avatar: "M",
      account: "krisolo",
      source: "production",
      status: "online",
      projects: [project.id],
      quota5h: 0,
      quota7d: 0,
      lastSeenAt: "2026-04-10T16:20:00+08:00",
      note: "",
    }),
    projects: state.projects.concat(project),
  });

  const response = await getMessagesRoute(
    await createAuthedRequest(project.id),
    { params: Promise.resolve({ projectId: project.id }) },
  );

  assert.equal(response.status, 200);
  assert.equal(response.headers.get("Cache-Control"), "private, no-store, max-age=0");

  const payload = (await response.json()) as {
    ok: boolean;
    project: { id: string; messages: Array<{ id: string }> };
    devices: Array<{ id: string }>;
    activeThreadContexts?: unknown;
    recentAppLogs?: unknown;
    openFaults?: unknown;
  };

  assert.equal(payload.ok, true);
  assert.equal(payload.project.id, project.id);
  assert.deepEqual(
    payload.project.messages.map((message) => message.id),
    ["message-lite-1"],
  );
  assert.deepEqual(
    payload.devices.map((device) => device.id),
    ["device-message-lite"],
  );
  assert.equal("activeThreadContexts" in payload, false);
  assert.equal("recentAppLogs" in payload, false);
  assert.equal("openFaults" in payload, false);
});

test("GET /api/v1/projects/[projectId]/messages disables caching when unauthorized", async () => {
  await setup();

  const response = await getMessagesRoute(
    new NextRequest("http://127.0.0.1:3000/api/v1/projects/message-lite/messages"),
    { params: Promise.resolve({ projectId: "message-lite" }) },
  );

  assert.equal(response.status, 401);
  assert.equal(response.headers.get("Cache-Control"), "private, no-store, max-age=0");
});