@1agh/maude 1.0.11 → 1.3.0

package/apps/studio/test/fs-watch.test.ts

@@ -1,41 +0,0 @@
-// Smoke: recursive fs.watch fires when a file is written under designRoot.
-
-import { describe, expect, test } from 'bun:test';
-import { mkdirSync, mkdtempSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-import { createContext } from '../context.ts';
-import { createFsWatch } from '../fs-watch.ts';
-
-describe('fs-watch.ts', () => {
-  test('emits fs:html on recursive write', async () => {
-    const root = mkdtempSync(join(tmpdir(), 'mdcc-fswatch-'));
-    mkdirSync(join(root, '.design', 'ui', 'nested'), { recursive: true });
-    writeFileSync(join(root, '.design', 'config.json'), '{"name":"t"}');
-
-    const origArgv = process.argv;
-    process.argv = [...origArgv, '--root', root];
-    let watch: ReturnType<typeof createFsWatch> | null = null;
-    try {
-      const ctx = createContext();
-      watch = createFsWatch(ctx);
-
-      const seen: string[] = [];
-      ctx.bus.on('fs:html', (file) => seen.push(String(file)));
-
-      watch.start();
-      // give the watcher a moment to register.
-      await Bun.sleep(80);
-
-      const target = join(root, '.design', 'ui', 'nested', 'evt.html');
-      writeFileSync(target, '<doc>1</doc>');
-      await Bun.sleep(250);
-
-      expect(seen.some((f) => f.endsWith('evt.html'))).toBe(true);
-    } finally {
-      watch?.stop();
-      process.argv = origArgv;
-    }
-  });
-});

package/apps/studio/test/gemma-models.test.ts

@@ -1,245 +0,0 @@
-// gemma-models.test.ts — the pure helpers behind the Gemma scout's two runtimes
-// (feature-scene-aware-keyframes / DDR-183). The download spawn + the live probes
-// are soft-dep gates covered by manual runs; this covers what a security review
-// found load-bearing: the copy/paste install command the user pastes UNREAD, and
-// the loopback pin that keeps the scout egress-free.
-
-import { afterEach, describe, expect, test } from 'bun:test';
-import {
-  getOllamaModel,
-  isLoopbackHostname,
-  listScoutModels,
-  mlxInstallCommand,
-  mlxSetup,
-  mlxVenvDir,
-  ollamaHost,
-  ollamaSetupOptions,
-  pickOllamaGemmaTag,
-} from '../generation/gemma-models.ts';
-
-const ENV_KEYS = ['XDG_CACHE_HOME', 'OLLAMA_HOST', 'MAUDE_OLLAMA_MODEL'] as const;
-const saved = new Map<string, string | undefined>();
-function setEnv(key: (typeof ENV_KEYS)[number], value: string | undefined) {
-  if (!saved.has(key)) saved.set(key, process.env[key]);
-  if (value === undefined) delete process.env[key];
-  else process.env[key] = value;
-}
-afterEach(() => {
-  for (const [k, v] of saved) {
-    if (v === undefined) delete process.env[k];
-    else process.env[k] = v;
-  }
-  saved.clear();
-});
-
-describe('mlxVenvDir / mlxInstallCommand', () => {
-  test('honors XDG_CACHE_HOME, else ~/.maude', () => {
-    setEnv('XDG_CACHE_HOME', '/tmp/xdg');
-    expect(mlxVenvDir()).toBe('/tmp/xdg/maude/mlx-venv');
-    setEnv('XDG_CACHE_HOME', undefined);
-    expect(mlxVenvDir()).toMatch(/\/\.maude\/mlx-venv$/);
-  });
-
-  test('the shown command targets the SAME path the probe checks', () => {
-    setEnv('XDG_CACHE_HOME', '/tmp/xdg');
-    const cmd = mlxInstallCommand();
-    expect(cmd).toContain(mlxVenvDir());
-    expect(cmd).toContain('python3 -m venv');
-    expect(cmd).toContain('install -U mlx-vlm');
-  });
-
-  test('single-quotes the path so shell metacharacters cannot execute', () => {
-    setEnv('XDG_CACHE_HOME', '/tmp/$(touch /tmp/pwned)/`id`/"x"');
-    const cmd = mlxInstallCommand() ?? '';
-    // The dangerous characters are present only INSIDE single quotes — the shell
-    // expands nothing there.
-    expect(cmd).toContain('\'/tmp/$(touch /tmp/pwned)/`id`/"x"/maude/mlx-venv\'');
-    expect(cmd).not.toMatch(/"\/tmp\/\$\(/); // never inside double quotes
-  });
-
-  test('escapes an embedded single quote by closing, escaping, reopening', () => {
-    setEnv('XDG_CACHE_HOME', "/tmp/it's");
-    const cmd = mlxInstallCommand() ?? '';
-    expect(cmd).toContain(`'/tmp/it'\\''s/maude/mlx-venv'`);
-  });
-
-  test('refuses to build a command when the path holds a control char', () => {
-    setEnv('XDG_CACHE_HOME', '/tmp/a\nrm -rf ~');
-    expect(mlxInstallCommand()).toBe(null);
-  });
-});
-
-describe('ollamaHost — loopback pin (DDR-183 egress-free)', () => {
-  test('defaults to loopback and accepts loopback forms', () => {
-    setEnv('OLLAMA_HOST', undefined);
-    expect(ollamaHost()).toBe('http://127.0.0.1:11434');
-    setEnv('OLLAMA_HOST', '127.0.0.1:11434');
-    expect(ollamaHost()).toBe('http://127.0.0.1:11434');
-    setEnv('OLLAMA_HOST', 'http://localhost:11434/');
-    expect(ollamaHost()).toBe('http://localhost:11434');
-  });
-
-  test('refuses every non-loopback host rather than uploading frames to it', () => {
-    for (const host of [
-      '0.0.0.0:11434',
-      '192.168.1.20:11434',
-      'http://169.254.169.254',
-      'http://ollama.example.com',
-      'not a url',
-    ]) {
-      setEnv('OLLAMA_HOST', host);
-      expect(ollamaHost()).toBe(null);
-    }
-  });
-
-  test('isLoopbackHostname accepts only literal loopback', () => {
-    expect(isLoopbackHostname('127.0.0.1')).toBe(true);
-    expect(isLoopbackHostname('127.1.2.3')).toBe(true);
-    expect(isLoopbackHostname('::1')).toBe(true);
-    expect(isLoopbackHostname('localhost')).toBe(true);
-    expect(isLoopbackHostname('127.0.0.1.evil.com')).toBe(false);
-    expect(isLoopbackHostname('10.0.0.1')).toBe(false);
-  });
-});
-
-// The card must never show an instruction this machine can't follow — the whole
-// point of probing brew/python3/curl rather than hardcoding an install line.
-describe('ollamaSetupOptions', () => {
-  const notInstalled = { available: false, model: null, tags: [], installed: false };
-
-  test('installed but not running → start it, never "install it" again', () => {
-    const opts = ollamaSetupOptions({ ...notInstalled, installed: true });
-    expect(opts.map((o) => o.id)).toEqual(['start']);
-    expect(opts[0].command).toBe('ollama serve');
-  });
-
-  test('running → the only thing missing is a model', () => {
-    const opts = ollamaSetupOptions({ available: true, model: null, tags: [], installed: true });
-    expect(opts.map((o) => o.id)).toEqual(['pull']);
-    expect(opts[0].command).toContain('ollama pull');
-  });
-
-  test('not installed → always offers a route, and a download link as the floor', () => {
-    const opts = ollamaSetupOptions(notInstalled);
-    expect(opts.length).toBeGreaterThan(0);
-    const download = opts.find((o) => o.id === 'download');
-    expect(download?.kind).toBe('link');
-    expect(download?.url).toBe('https://ollama.com/download');
-    // Whatever routes are offered, each is actionable as-is.
-    for (const o of opts) expect(o.kind === 'command' ? o.command : o.url).toBeTruthy();
-  });
-
-  test('on macOS/Linux the brew-free script route comes before brew', () => {
-    if (process.platform !== 'darwin' && process.platform !== 'linux') return;
-    const ids = ollamaSetupOptions(notInstalled).map((o) => o.id);
-    if (ids.includes('script') && ids.includes('brew'))
-      expect(ids.indexOf('script')).toBeLessThan(ids.indexOf('brew'));
-  });
-});
-
-// The model list has to be actionable on whatever runtime the machine has —
-// a dead "Needs mlx-vlm" on an Ollama box was the bug this replaced.
-describe('listScoutModels', () => {
-  const offline = { available: false, model: null, tags: [], installed: false };
-  const running = {
-    available: true,
-    model: 'gemma3:4b',
-    tags: ['gemma3:4b', 'llama3:8b'],
-    installed: true,
-  };
-
-  test('every model declares the runtime that can download it', () => {
-    for (const m of listScoutModels(offline)) expect(['mlx', 'ollama']).toContain(m.runtime);
-  });
-
-  test('Ollama models sort first when Ollama is the runtime that can act', () => {
-    expect(listScoutModels(running)[0].runtime).toBe('ollama');
-    expect(listScoutModels(offline)[0].runtime).toBe('mlx');
-  });
-
-  test('an Ollama model counts as downloaded only on an EXACT tag match', () => {
-    const rows = listScoutModels(running).filter((m) => m.runtime === 'ollama');
-    expect(rows.find((m) => m.id === 'ollama:gemma3:4b')?.downloaded).toBe(true);
-    expect(rows.find((m) => m.id === 'ollama:gemma3:12b')?.downloaded).toBe(false);
-    // A near-miss tag is a different pull, not the same model.
-    const nearMiss = listScoutModels({ ...running, tags: ['gemma3:4b-it-q4_K_M'] });
-    expect(nearMiss.find((m) => m.id === 'ollama:gemma3:4b')?.downloaded).toBe(false);
-  });
-
-  test('getOllamaModel only resolves allowlisted ids (the pull target is frozen)', () => {
-    expect(getOllamaModel('ollama:gemma3:4b')?.tag).toBe('gemma3:4b');
-    expect(getOllamaModel('gemma-4-e4b-it-4bit')).toBe(null);
-    expect(getOllamaModel('ollama:../../evil')).toBe(null);
-    expect(getOllamaModel('ollama:llama3:8b')).toBe(null);
-  });
-});
-
-describe('mlxSetup', () => {
-  test('either a usable command or a stated reason — never a silent dead end', () => {
-    const s = mlxSetup();
-    if (s.supported) {
-      expect(s.command).toContain('mlx-vlm');
-      expect(s.reason).toBeUndefined();
-    } else {
-      expect(s.reason).toBeTruthy();
-      expect(s.command).toBeUndefined();
-    }
-  });
-});
-
-// The CLI (bin/_smart-frames.mjs, pure JS — no .ts imports) deliberately carries
-// its OWN copy of these helpers. That duplication is an accepted constraint, so
-// the drift it invites needs a guard: a review already caught the two copies
-// disagreeing about the bare `gemma3` tag.
-describe('CLI ↔ server helper parity', () => {
-  test('pickOllamaGemmaTag agrees on every tag shape', async () => {
-    const cli = await import('../bin/_smart-frames.mjs');
-    setEnv('MAUDE_OLLAMA_MODEL', undefined);
-    for (const tags of [
-      ['gemma3:4b'],
-      ['gemma3'],
-      ['gemma3:1b'],
-      ['gemma3n:e4b'],
-      ['llama3:8b', 'gemma3:12b'],
-      [],
-    ]) {
-      expect(cli.pickOllamaGemmaTag(tags, {})).toBe(pickOllamaGemmaTag(tags));
-    }
-  });
-
-  test('ollamaHost agrees on loopback acceptance and refusal', async () => {
-    const cli = await import('../bin/_smart-frames.mjs');
-    for (const host of [
-      '127.0.0.1:11434',
-      'http://localhost:11434/',
-      '[::1]:11434',
-      '0.0.0.0:11434',
-      '192.168.1.20:11434',
-      'http://ollama.example.com',
-    ]) {
-      setEnv('OLLAMA_HOST', host);
-      expect(cli.ollamaHost({ OLLAMA_HOST: host })).toBe(ollamaHost());
-    }
-  });
-
-  test('the venv path the CLI probes is the one the server installs into', async () => {
-    const cli = await import('../bin/_smart-frames.mjs');
-    setEnv('XDG_CACHE_HOME', '/tmp/xdg');
-    expect(cli.mlxVenvPython({ XDG_CACHE_HOME: '/tmp/xdg' })).toBe(`${mlxVenvDir()}/bin/python3`);
-  });
-});
-
-describe('pickOllamaGemmaTag', () => {
-  test('picks a vision-capable gemma3 tag, skips text-only ones', () => {
-    setEnv('MAUDE_OLLAMA_MODEL', undefined);
-    expect(pickOllamaGemmaTag(['llama3:8b', 'gemma3:4b'])).toBe('gemma3:4b');
-    expect(pickOllamaGemmaTag(['gemma3'])).toBe('gemma3');
-    expect(pickOllamaGemmaTag(['gemma3:1b'])).toBe(null);
-    expect(pickOllamaGemmaTag(['gemma3n:e4b'])).toBe(null);
-  });
-
-  test('$MAUDE_OLLAMA_MODEL wins verbatim', () => {
-    setEnv('MAUDE_OLLAMA_MODEL', 'gemma3:27b');
-    expect(pickOllamaGemmaTag(['gemma3:4b'])).toBe('gemma3:27b');
-  });
-});

package/apps/studio/test/generate-route.test.ts

@@ -1,106 +0,0 @@
-// generate-route.test.ts — the privileged /_api/generate* routes on the MAIN
-// origin. Boots a real server (no CANVAS_ORIGIN_SPLIT; loopback host). Proves:
-// validation rejects bad bodies; a key POST reports {configured} and GET never
-// echoes the value; the provider catalogue serializes with a presence flag; and
-// a generate POST enqueues a job (202 {jobId}) that fails cleanly with no key
-// configured (no real Google call). Points MAUDE_GEN_KEYS_PATH at the sandbox
-// so the user's real key store is never touched.
-
-import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
-import { mkdtempSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-import { bootServer, killProc, makeSandbox, nextPort } from './_helpers.ts';
-
-let keysDir: string;
-beforeEach(() => {
-  keysDir = mkdtempSync(join(tmpdir(), 'maude-genroute-'));
-});
-afterEach(() => rmSync(keysDir, { recursive: true, force: true }));
-
-describe('/_api/generate* main-origin routes', () => {
-  test('providers catalogue, key custody (no echo), validation, and enqueue', async () => {
-    const { root } = makeSandbox();
-    const port = nextPort();
-    const proc = await bootServer(root, port, {
-      MAUDE_GEN_KEYS_PATH: join(keysDir, 'keys.json'),
-    });
-    const base = `http://localhost:${port}`;
-    try {
-      // Provider catalogue — gemini present, not yet configured.
-      const provRes = await fetch(`${base}/_api/generate/providers`);
-      expect(provRes.status).toBe(200);
-      const provJson = (await provRes.json()) as {
-        providers: Array<{ id: string; configured: boolean }>;
-      };
-      const gemini = provJson.providers.find((p) => p.id === 'gemini');
-      expect(gemini).toBeTruthy();
-      expect(gemini?.configured).toBe(false);
-
-      // Set a key → {configured:true}; the value is NEVER echoed back.
-      const setRes = await fetch(`${base}/_api/generate/keys`, {
-        method: 'POST',
-        headers: { 'content-type': 'text/plain' },
-        body: JSON.stringify({ provider: 'gemini', key: 'AIza-super-secret' }),
-      });
-      expect(setRes.status).toBe(200);
-      const setJson = (await setRes.json()) as Record<string, unknown>;
-      expect(setJson.configured).toBe(true);
-      expect(JSON.stringify(setJson)).not.toContain('super-secret');
-
-      // GET key status → presence only, no value.
-      const statusRes = await fetch(`${base}/_api/generate/keys`);
-      const statusJson = (await statusRes.json()) as { configured: string[] };
-      expect(statusJson.configured).toContain('gemini');
-      expect(JSON.stringify(statusJson)).not.toContain('super-secret');
-
-      // Validation — a malformed generate body 400s before any provider call.
-      const badRes = await fetch(`${base}/_api/generate-jobs`, {
-        method: 'POST',
-        headers: { 'content-type': 'text/plain' },
-        body: JSON.stringify({ modality: 'hologram', provider: '../etc' }),
-      });
-      expect(badRes.status).toBe(400);
-
-      // Unknown provider 400s.
-      const unkRes = await fetch(`${base}/_api/generate-jobs`, {
-        method: 'POST',
-        headers: { 'content-type': 'text/plain' },
-        body: JSON.stringify({ modality: 'image', provider: 'nope', prompt: 'x' }),
-      });
-      expect(unkRes.status).toBe(400);
-
-      // A well-formed request enqueues → 202 { jobId }. (The run will hit the
-      // real Gemini endpoint with a bogus key and fail in the background — we
-      // only assert the queue accepted it and surfaces the job.)
-      const okRes = await fetch(`${base}/_api/generate-jobs`, {
-        method: 'POST',
-        headers: { 'content-type': 'text/plain' },
-        body: JSON.stringify({ modality: 'image', provider: 'gemini', prompt: 'a red circle' }),
-      });
-      expect(okRes.status).toBe(202);
-      const okJson = (await okRes.json()) as { jobId: string };
-      expect(okJson.jobId).toMatch(/^gen_/);
-
-      // The job shows up in the list.
-      const listRes = await fetch(`${base}/_api/generate-jobs`);
-      const listJson = (await listRes.json()) as { jobs: Array<{ id: string }> };
-      expect(listJson.jobs.some((j) => j.id === okJson.jobId)).toBe(true);
-
-      // Remove the key.
-      const delRes = await fetch(`${base}/_api/generate/keys`, {
-        method: 'DELETE',
-        headers: { 'content-type': 'text/plain' },
-        body: JSON.stringify({ provider: 'gemini' }),
-      });
-      expect(delRes.status).toBe(200);
-      const afterDel = (await (await fetch(`${base}/_api/generate/keys`)).json()) as {
-        configured: string[];
-      };
-      expect(afterDel.configured).not.toContain('gemini');
-    } finally {
-      await killProc(proc);
-    }
-  });
-});