@cursor/july 0.1.25 → 0.1.27

package/src/internal/server.artifacts.test.ts

@@ -1,303 +0,0 @@
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { afterEach, describe, expect, it } from "vitest";
-import { z } from "zod";
-import { defineArtifacts } from "../artifacts.js";
-import { httpChannel } from "../channels.js";
-import { defineTool } from "../tools.js";
-import type {
-  AgentProject,
-  ArtifactRecord,
-  AuthContext,
-  DiscoveredTool,
-  ServeOptions,
-} from "../types.js";
-import { toolInputJsonSchema } from "./json-schema.js";
-import type { AgentRunner } from "./sdk-runner.js";
-import { type AgentMount, startServer } from "./server.js";
-import { SessionEngine } from "./session-engine.js";
-
-const seedTool = defineTool({
-  description: "Tags one artifact (test seed).",
-  inputSchema: z.object({
-    kind: z.string(),
-    key: z.string().optional(),
-    note: z.string().optional(),
-  }),
-  execute: async ({ kind, key, note }, ctx) => {
-    const record = await ctx.artifacts.tag({
-      kind,
-      key,
-      data: { note: note ?? null },
-    });
-    return { id: record.id };
-  },
-});
-
-function testProject(rootDir: string): AgentProject {
-  const discovered: DiscoveredTool = {
-    name: "seed",
-    description: seedTool.description,
-    inputSchema: toolInputJsonSchema(seedTool.inputSchema),
-    execution: "server",
-    needsApproval: false,
-    definition: seedTool,
-  };
-  return {
-    rootDir,
-    agentDir: join(rootDir, "agent"),
-    name: "artifacts-route-test",
-    agent: {
-      name: "artifacts-route-test",
-      runtime: "local",
-      instructions: "Test agent.",
-      tools: [discovered],
-      skills: [],
-      connections: [],
-      subagents: [],
-      seedFiles: [],
-    },
-    httpChannel: httpChannel(),
-    channels: [],
-    schedules: [],
-    hooks: [],
-    abs: [],
-    artifacts: defineArtifacts({
-      kinds: {
-        "reviewed-pr": { description: "A reviewed PR." },
-        report: { description: "A report." },
-      },
-    }),
-    diagnostics: [],
-  };
-}
-
-const noTurnRunner: AgentRunner = {
-  runTurn: () => {
-    throw new Error("runTurn must not be called");
-  },
-};
-
-const cleanups: Array<() => Promise<void>> = [];
-
-afterEach(async () => {
-  while (cleanups.length > 0) {
-    await cleanups.pop()?.();
-  }
-});
-
-async function startTestServer(options?: Partial<ServeOptions>) {
-  const stateRoot = await mkdtemp(join(tmpdir(), "agent-serve-artroute-"));
-  cleanups.push(() => rm(stateRoot, { recursive: true, force: true }));
-  const mounts: AgentMount[] = [{ slug: "", project: testProject(stateRoot) }];
-  const handle = await startServer(mounts, {
-    port: 0,
-    stateRoot,
-    playground: false,
-    schedules: false,
-    logger: () => {},
-    runner: noTurnRunner,
-    ...options,
-  });
-  cleanups.push(() => handle.close());
-  return handle;
-}
-
-async function listArtifacts(
-  url: string,
-  query = "",
-  headers: Record<string, string> = {}
-): Promise<{ status: number; artifacts: ArtifactRecord[] }> {
-  const response = await fetch(`${url}/v1/artifacts${query}`, { headers });
-  if (response.status !== 200) {
-    return { status: response.status, artifacts: [] };
-  }
-  const body = (await response.json()) as { artifacts: ArtifactRecord[] };
-  return { status: response.status, artifacts: body.artifacts };
-}
-
-/** Force distinct `updatedAt` millis so newest-first ordering is stable. */
-function tick(): Promise<void> {
-  return new Promise((resolve) => setTimeout(resolve, 5));
-}
-
-describe("GET /v1/artifacts", () => {
-  it("lists newest-updated first with kind filtering (dev includeAll)", async () => {
-    const handle = await startTestServer({ dev: true });
-    await handle.callTool("seed", { kind: "reviewed-pr", key: "pr-1" });
-    await tick();
-    await handle.callTool("seed", { kind: "report", key: "r-1" });
-    await tick();
-    await handle.callTool("seed", { kind: "reviewed-pr", key: "pr-2" });
-
-    const all = await listArtifacts(handle.url);
-    expect(all.status).toBe(200);
-    expect(all.artifacts.map((a) => a.key)).toEqual(["pr-2", "r-1", "pr-1"]);
-
-    const reports = await listArtifacts(handle.url, "?kind=report");
-    expect(reports.artifacts.map((a) => a.key)).toEqual(["r-1"]);
-
-    const none = await listArtifacts(handle.url, "?kind=missing");
-    expect(none.artifacts).toEqual([]);
-  });
-
-  it("filters by sessionId", async () => {
-    // Scratch (session-less) seeds never match a sessionId filter.
-    const handle = await startTestServer({ dev: true });
-    await handle.callTool("seed", { kind: "report", key: "loose" });
-    const filtered = await listArtifacts(handle.url, "?sessionId=ses_other");
-    expect(filtered.status).toBe(200);
-    expect(filtered.artifacts).toEqual([]);
-    expect((await listArtifacts(handle.url)).artifacts).toHaveLength(1);
-  });
-
-  it("bounds the limit and rejects non-positive limits", async () => {
-    const handle = await startTestServer({ dev: true });
-    for (const key of ["a", "b", "c"]) {
-      await handle.callTool("seed", { kind: "report", key });
-      await tick();
-    }
-    const limited = await listArtifacts(handle.url, "?limit=2");
-    expect(limited.artifacts).toHaveLength(2);
-    expect(limited.artifacts.map((a) => a.key)).toEqual(["c", "b"]);
-
-    // Above the ceiling clamps rather than erroring.
-    const clamped = await listArtifacts(handle.url, "?limit=99999");
-    expect(clamped.status).toBe(200);
-    expect(clamped.artifacts).toHaveLength(3);
-
-    expect((await listArtifacts(handle.url, "?limit=0")).status).toBe(400);
-    expect((await listArtifacts(handle.url, "?limit=nope")).status).toBe(400);
-  });
-
-  it("hides session-less artifacts from non-includeAll callers", async () => {
-    // No --dev: loopback callers get the strict per-principal view, and
-    // session-less (agent-scoped) artifacts have no owning principal.
-    const handle = await startTestServer();
-    await handle.callTool("seed", { kind: "report", key: "agent-scoped" });
-    const listed = await listArtifacts(handle.url);
-    expect(listed.status).toBe(200);
-    expect(listed.artifacts).toEqual([]);
-  });
-
-  it("requires the bearer token when one is configured", async () => {
-    const handle = await startTestServer({ authToken: "sekrit" });
-    const denied = await fetch(`${handle.url}/v1/artifacts`);
-    expect(denied.status).toBe(401);
-    const allowed = await fetch(`${handle.url}/v1/artifacts`, {
-      headers: { authorization: "Bearer sekrit" },
-    });
-    expect(allowed.status).toBe(200);
-  });
-
-  it("never widens to includeAll when a bearer token is configured", async () => {
-    // Bearer auth vetoes relaxSessionReadAuth even under --dev on loopback,
-    // matching GET /v1/sessions.
-    const handle = await startTestServer({ dev: true, authToken: "sekrit" });
-    await handle.callTool("seed", { kind: "report", key: "agent-scoped" });
-    const listed = await listArtifacts(handle.url, "", {
-      authorization: "Bearer sekrit",
-    });
-    expect(listed.status).toBe(200);
-    expect(listed.artifacts).toEqual([]);
-  });
-});
-
-describe("SessionEngine.listArtifacts ownership", () => {
-  const alice: AuthContext = {
-    authenticator: "test",
-    principalId: "alice",
-    principalType: "user",
-  };
-  const bob: AuthContext = {
-    authenticator: "test",
-    principalId: "bob",
-    principalType: "user",
-  };
-
-  async function makeEngine(): Promise<SessionEngine> {
-    const stateRoot = await mkdtemp(join(tmpdir(), "agent-serve-artown-"));
-    cleanups.push(() => rm(stateRoot, { recursive: true, force: true }));
-    const engine = new SessionEngine({
-      project: testProject(stateRoot),
-      stateRoot,
-      runner: noTurnRunner,
-    });
-    cleanups.push(() => engine.close());
-    return engine;
-  }
-
-  async function seedSession(
-    engine: SessionEngine,
-    sessionId: string,
-    auth: AuthContext | null
-  ): Promise<void> {
-    await engine.sessions.save({
-      sessionId,
-      channelId: "http",
-      mode: "chat",
-      continuationKey: null,
-      auth,
-      turnCount: 0,
-      createdAt: new Date().toISOString(),
-      updatedAt: new Date().toISOString(),
-    });
-  }
-
-  it("scopes non-includeAll listings to the caller's sessions", async () => {
-    const engine = await makeEngine();
-    await seedSession(engine, "ses_alice", alice);
-    await seedSession(engine, "ses_bob", bob);
-    await engine.artifacts.tag({
-      kind: "report",
-      key: "alice-report",
-      data: 1,
-      sessionId: "ses_alice",
-    });
-    await engine.artifacts.tag({
-      kind: "report",
-      key: "bob-report",
-      data: 1,
-      sessionId: "ses_bob",
-    });
-    await engine.artifacts.tag({ kind: "report", key: "loose", data: 1 });
-
-    const forAlice = await engine.listArtifacts(alice);
-    expect(forAlice.map((a) => a.key)).toEqual(["alice-report"]);
-
-    const forBob = await engine.listArtifacts(bob);
-    expect(forBob.map((a) => a.key)).toEqual(["bob-report"]);
-
-    const anonymous = await engine.listArtifacts(null);
-    expect(anonymous).toEqual([]);
-
-    const everything = await engine.listArtifacts(null, { includeAll: true });
-    expect(everything.map((a) => a.key).sort()).toEqual([
-      "alice-report",
-      "bob-report",
-      "loose",
-    ]);
-  });
-
-  it("applies the filter before ownership scoping", async () => {
-    const engine = await makeEngine();
-    await seedSession(engine, "ses_alice", alice);
-    await engine.artifacts.tag({
-      kind: "reviewed-pr",
-      key: "pr",
-      data: 1,
-      sessionId: "ses_alice",
-    });
-    await engine.artifacts.tag({
-      kind: "report",
-      key: "rep",
-      data: 1,
-      sessionId: "ses_alice",
-    });
-    const filtered = await engine.listArtifacts(alice, {
-      filter: { kind: "reviewed-pr" },
-    });
-    expect(filtered.map((a) => a.key)).toEqual(["pr"]);
-  });
-});

package/src/internal/session-engine.artifacts.test.ts

@@ -1,243 +0,0 @@
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { defineArtifacts } from "../artifacts.js";
-import { httpChannel } from "../channels.js";
-import { defineHook } from "../hooks.js";
-import { defineTool } from "../tools.js";
-import type {
-  AgentProject,
-  ArtifactsDefinition,
-  DiscoveredHook,
-  DiscoveredTool,
-  JsonObject,
-  ToolContext,
-} from "../types.js";
-import type { AgentRunner } from "./sdk-runner.js";
-import { SessionEngine } from "./session-engine.js";
-
-const AGENT = "artifacts-engine-test";
-
-function tagTool(): DiscoveredTool {
-  const definition = defineTool({
-    description: "Tags the reviewed PR as an artifact.",
-    async execute(_input: JsonObject, ctx: ToolContext) {
-      const record = await ctx.artifacts.tag({
-        kind: "artifact",
-        key: "pr-1",
-        title: "Reviewed PR",
-        data: { url: "https://github.com/org/repo/pull/1" },
-      });
-      return { id: record.id };
-    },
-  });
-  return {
-    name: "tag_result",
-    description: definition.description,
-    execution: "server",
-    needsApproval: false,
-    inputSchema: { type: "object", additionalProperties: false },
-    definition,
-  };
-}
-
-function testProject(options?: {
-  artifacts?: ArtifactsDefinition;
-  tools?: DiscoveredTool[];
-  hooks?: DiscoveredHook[];
-}): AgentProject {
-  return {
-    rootDir: "/tmp/artifacts-fixture",
-    agentDir: "/tmp/artifacts-fixture/agent",
-    name: AGENT,
-    agent: {
-      name: AGENT,
-      runtime: "local",
-      instructions: "Test agent.",
-      tools: options?.tools ?? [],
-      skills: [],
-      connections: [],
-      subagents: [],
-      seedFiles: [],
-    },
-    httpChannel: httpChannel(),
-    channels: [],
-    schedules: [],
-    hooks: options?.hooks ?? [],
-    abs: [],
-    artifacts: options?.artifacts,
-    diagnostics: [],
-  };
-}
-
-function echoRunner(): AgentRunner {
-  return {
-    runTurn: async (request) => ({
-      status: "finished",
-      result: `echo: ${request.prompt}`,
-    }),
-  };
-}
-
-/** Runner that invokes the session-bound `tag_result` custom tool. */
-function toolCallingRunner(): AgentRunner {
-  return {
-    runTurn: async (request) => {
-      const tool = request.customTools.tag_result;
-      if (tool === undefined) {
-        throw new Error("tag_result not registered");
-      }
-      await tool.execute({}, { toolCallId: "call_tag_1" });
-      return { status: "finished", result: "done" };
-    },
-  };
-}
-
-const cleanups: Array<() => Promise<void>> = [];
-
-afterEach(async () => {
-  while (cleanups.length > 0) {
-    await cleanups.pop()?.();
-  }
-});
-
-async function makeEngine(
-  project: AgentProject,
-  runner: AgentRunner
-): Promise<SessionEngine> {
-  const stateRoot = await mkdtemp(join(tmpdir(), "agent-serve-artifacts-eng-"));
-  cleanups.push(() => rm(stateRoot, { recursive: true, force: true }));
-  const engine = new SessionEngine({ project, stateRoot, runner });
-  cleanups.push(() => engine.close());
-  return engine;
-}
-
-describe("session engine artifacts wiring", () => {
-  it("tool ctx.artifacts auto-fills the session and appends artifact.tagged", async () => {
-    const engine = await makeEngine(
-      testProject({ tools: [tagTool()] }),
-      toolCallingRunner()
-    );
-    const session = await engine.send("http", "review the PR", { auth: null });
-    await session.waitForCompletion();
-
-    const rows = await engine.artifacts.list({ sessionId: session.id });
-    expect(rows).toHaveLength(1);
-    expect(rows[0]).toMatchObject({
-      kind: "artifact",
-      key: "pr-1",
-      sessionId: session.id,
-      turnId: "turn_1",
-      source: "host",
-    });
-
-    const events = await engine.listEvents(session.id);
-    const tagged = events.filter((event) => event.type === "artifact.tagged");
-    expect(tagged).toHaveLength(1);
-    expect(tagged[0]).toMatchObject({
-      sessionId: session.id,
-      turnId: "turn_1",
-      data: {
-        id: rows[0]?.id,
-        kind: "artifact",
-        key: "pr-1",
-        title: "Reviewed PR",
-        source: "host",
-      },
-    });
-  });
-
-  it("bound facades reject a conflicting explicit sessionId", async () => {
-    const engine = await makeEngine(testProject(), echoRunner());
-    const session = await engine.send("http", "hello", { auth: null });
-    await session.waitForCompletion();
-
-    const bound = engine.artifactsApi({ sessionId: session.id });
-    await expect(
-      bound.tag({ data: 1, sessionId: "ses_other" })
-    ).rejects.toThrow(/bound to session/);
-    // The matching sessionId (a no-op override) is fine.
-    await expect(
-      bound.tag({ data: 1, sessionId: session.id })
-    ).resolves.toMatchObject({ sessionId: session.id });
-  });
-
-  it("session-less tags via the unbound channel facade write the row only", async () => {
-    const engine = await makeEngine(testProject(), echoRunner());
-    const session = await engine.send("http", "hello", { auth: null });
-    await session.waitForCompletion();
-    const eventCount = (await engine.listEvents(session.id)).length;
-
-    // ChannelHandlerArgs.artifacts is this same unbound facade.
-    const record = await engine.artifacts.tag({ data: { note: "no session" } });
-    expect(record.sessionId).toBeUndefined();
-    expect(await engine.artifacts.list()).toHaveLength(1);
-    expect(await engine.listEvents(session.id)).toHaveLength(eventCount);
-  });
-
-  it("unbound tags with an explicit sessionId stream to that session", async () => {
-    const engine = await makeEngine(testProject(), echoRunner());
-    const session = await engine.send("http", "hello", { auth: null });
-    await session.waitForCompletion();
-
-    const record = await engine.artifacts.tag({
-      data: "attributed",
-      sessionId: session.id,
-    });
-    expect(record.sessionId).toBe(session.id);
-    const events = await engine.listEvents(session.id);
-    expect(events.some((event) => event.type === "artifact.tagged")).toBe(true);
-  });
-
-  it("tags for an unknown sessionId reject before writing the row", async () => {
-    const engine = await makeEngine(testProject(), echoRunner());
-    await expect(
-      engine.artifacts.tag({ data: 1, sessionId: "ses_nope" })
-    ).rejects.toThrow(/Unknown session/);
-    expect(await engine.artifacts.list()).toHaveLength(0);
-  });
-
-  it("hook ctx.artifacts is bound to the hook's session", async () => {
-    const hook: DiscoveredHook = {
-      name: "tagger",
-      definition: defineHook({
-        events: {
-          async "turn.completed"(_event, ctx) {
-            await ctx.artifacts.tag({ key: "from-hook", data: "h" });
-          },
-        },
-      }),
-    };
-    const engine = await makeEngine(
-      testProject({ hooks: [hook] }),
-      echoRunner()
-    );
-    const session = await engine.send("http", "hello", { auth: null });
-    await session.waitForCompletion();
-
-    await vi.waitFor(async () => {
-      const rows = await engine.artifacts.list({ sessionId: session.id });
-      expect(rows.map((row) => row.key)).toEqual(["from-hook"]);
-    });
-    const events = await engine.listEvents(session.id);
-    expect(events.some((event) => event.type === "artifact.tagged")).toBe(true);
-  });
-
-  it("enforces declared kinds end to end", async () => {
-    const engine = await makeEngine(
-      testProject({
-        artifacts: defineArtifacts({
-          kinds: { note: { description: "Note." } },
-        }),
-      }),
-      echoRunner()
-    );
-    await expect(
-      engine.artifacts.tag({ kind: "bogus", data: 1 })
-    ).rejects.toThrow(/unknown kind/);
-    await expect(
-      engine.artifacts.tag({ kind: "note", data: 1 })
-    ).resolves.toMatchObject({ kind: "note" });
-  });
-});