@inneranimalmedia/agentsam-sdk 2.6.7 → 2.6.9

package/test/error-diagnostics.test.mjs

@@ -1,124 +0,0 @@
-import assert from 'node:assert/strict';
-import test from 'node:test';
-import {
-  ERROR_CODE,
-  ERROR_REASON,
-  canonicalCodeFromGrpcStatus,
-  classifyCloudflareFailure,
-  classifyOAuthFailure,
-  classifyOpenAIError,
-  createErrorEnvelope,
-  createOpenAIHttpError,
-  diagnosticFromError,
-  grpcStatusForCode,
-} from '../src/errors/index.js';
-import { createOpenAIResponsesAdapter } from '../src/providers/openai-responses.js';
-
-function response(status, body, headers = {}) { return new Response(JSON.stringify(body), { status, headers: { 'content-type': 'application/json', ...headers } }); }
-
-
-test('public errors subpath preserves canonical and legacy diagnostic APIs', async () => {
-  const errors = await import('@inneranimalmedia/agentsam-sdk/errors');
-  assert.equal(typeof errors.createErrorEnvelope, 'function');
-  assert.equal(typeof errors.classifyCloudflareFailure, 'function');
-  assert.equal(typeof errors.classifyOpenAIError, 'function');
-  assert.equal(typeof errors.diagnosticFromError, 'function');
-});
-
-test('OpenAI diagnostics preserve machine code, request id, retry metadata and redact secrets', () => {
-  const error = createOpenAIHttpError({
-    status: 429,
-    body: { error: { type: 'rate_limit_error', code: 'slow_down', message: 'slow down Bearer abc.def.ghi', param: null }, api_key: 'sk-secret-value-123456789' },
-    headers: new Headers({ 'retry-after': '2', 'x-request-id': 'req_123' }),
-    requestedServiceTier: 'fast',
-  });
-  assert.equal(error.diagnostic.http_status, 429);
-  assert.equal(error.diagnostic.type, 'rate_limit_error');
-  assert.equal(error.diagnostic.code, 'slow_down');
-  assert.equal(error.diagnostic.request_id, 'req_123');
-  assert.equal(error.diagnostic.retry_after_ms, 2000);
-  assert.equal(error.diagnostic.retriable, true);
-  assert.equal(error.diagnostic.retry_strategy, 'retry_after_backoff');
-  assert.equal(error.diagnostic.requested_service_tier, 'fast');
-  assert.ok(!JSON.stringify(error.diagnostic).includes('sk-secret-value'));
-  assert.ok(!error.diagnostic.message.includes('abc.def.ghi'));
-});
-
-test('billing and spend errors are explicitly non-retriable while provider overload is retriable', () => {
-  for (const code of ['credit_balance_exhausted', 'organization_spend_limit_exceeded', 'project_spend_limit_exceeded', 'organization_usage_limit_exceeded']) {
-    assert.equal(classifyOpenAIError({ status: 429, code }).retriable, false);
-  }
-  assert.deepEqual(classifyOpenAIError({ status: 503, code: 'server_is_overloaded' }), { category: 'provider_overload', retriable: true, retry_strategy: 'retry_after_backoff' });
-  assert.equal(classifyOpenAIError({ status: 401 }).category, 'authentication');
-});
-
-test('OpenAI retry classifier distinguishes configuration, continuation, rate, server, and operator-action failures', () => {
-  assert.deepEqual(classifyOpenAIError({ status: 400, message: 'Invalid service_tier argument' }), { category: 'service_tier', retriable: false, retry_strategy: 'change_configuration' });
-  assert.deepEqual(classifyOpenAIError({ status: 400, code: 'previous_response_not_found' }), { category: 'continuation', retriable: true, retry_strategy: 'retry_full_context' });
-  assert.deepEqual(classifyOpenAIError({ status: 400, code: 'websocket_connection_limit_reached' }), { category: 'connection_lifetime', retriable: true, retry_strategy: 'reconnect' });
-  assert.deepEqual(classifyOpenAIError({ status: 429, type: 'rate_limit_error', code: 'slow_down' }), { category: 'ramp_rate', retriable: true, retry_strategy: 'retry_after_backoff' });
-  assert.deepEqual(classifyOpenAIError({ status: 500 }), { category: 'provider_server', retriable: true, retry_strategy: 'retry_backoff' });
-  assert.deepEqual(classifyOpenAIError({ status: 403 }), { category: 'authorization_or_region', retriable: false, retry_strategy: 'operator_action' });
-});
-
-test('Responses adapter throws a diagnostic error instead of flattening the provider response', async () => {
-  const adapter = createOpenAIResponsesAdapter({
-    apiKey: 'sk-test',
-    fetchImpl: async () => response(429, { error: { type: 'insufficient_quota', code: 'project_spend_limit_exceeded', message: 'budget reached' } }, { 'x-request-id': 'req_budget' }),
-  });
-  await assert.rejects(
-    adapter.create({ model: 'gpt-6-astra', reasoningEffort: 'low', serviceTier: 'default', input: 'hi' }),
-    (error) => {
-      const d = diagnosticFromError(error);
-      assert.equal(d.code, 'project_spend_limit_exceeded');
-      assert.equal(d.request_id, 'req_budget');
-      assert.equal(d.retriable, false);
-      return true;
-    },
-  );
-});
-
-
-test('canonical error contract preserves transport-neutral code and reason mappings', () => {
-  const envelope = createErrorEnvelope({
-    code: ERROR_CODE.UNAVAILABLE,
-    reason: ERROR_REASON.TUNNEL_CONNECTOR_UNAVAILABLE,
-    message: 'Local terminal tunnel has no healthy connector.',
-    retryable: true,
-    http_status: 530,
-    provider: 'cloudflare',
-    provider_code: '1033',
-    transport: 'cloudflare_tunnel',
-  });
-  assert.equal(envelope.ok, false);
-  assert.equal(envelope.code, 'UNAVAILABLE');
-  assert.equal(envelope.reason, 'tunnel_connector_unavailable');
-  assert.equal(envelope.http_status, 530);
-  assert.equal(envelope.grpc_status, 14);
-  assert.equal(envelope.retryable, true);
-  assert.equal(canonicalCodeFromGrpcStatus(14), ERROR_CODE.UNAVAILABLE);
-  assert.equal(grpcStatusForCode(ERROR_CODE.UNAUTHENTICATED), 16);
-});
-
-test('Cloudflare and OAuth boundary classifiers map native failures into canonical AgentSam semantics', () => {
-  assert.deepEqual(classifyCloudflareFailure({ httpStatus: 530, cloudflareCode: 1033 }), {
-    code: ERROR_CODE.UNAVAILABLE,
-    reason: ERROR_REASON.TUNNEL_CONNECTOR_UNAVAILABLE,
-    retryable: true,
-  });
-  assert.deepEqual(classifyCloudflareFailure({ httpStatus: 526 }), {
-    code: ERROR_CODE.UNAVAILABLE,
-    reason: ERROR_REASON.TLS_CERTIFICATE_INVALID,
-    retryable: false,
-  });
-  assert.deepEqual(classifyOAuthFailure('invalid_grant'), {
-    code: ERROR_CODE.UNAUTHENTICATED,
-    reason: ERROR_REASON.AUTH_INVALID,
-    retryable: false,
-  });
-  assert.deepEqual(classifyOAuthFailure('access_denied'), {
-    code: ERROR_CODE.PERMISSION_DENIED,
-    reason: ERROR_REASON.PERMISSION_DENIED,
-    retryable: false,
-  });
-});

package/test/eval-context.test.mjs

@@ -1,37 +0,0 @@
-import assert from 'node:assert/strict';
-import { spawnSync } from 'node:child_process';
-import path from 'node:path';
-import test from 'node:test';
-import { evaluateContextFixture, listContextEvalFixtures } from '../src/eval/index.js';
-
-const repoRoot = path.resolve(new URL('..', import.meta.url).pathname);
-
-test('context eval ships AgentSam-shaped deterministic fixtures and never calls a provider', async () => {
-  const fixtures = listContextEvalFixtures();
-  assert.ok(fixtures.length >= 6);
-  assert.ok(fixtures.includes('continuation-after-compaction'));
-  const report = await evaluateContextFixture({ fixture: 'exact-symbol-callers' });
-  assert.equal(report.live_provider_used, false);
-  assert.equal(report.strategies.length, 3);
-  assert.ok(report.strategies.every(row => row.result === 'PASS'));
-  assert.ok(report.winner);
-});
-
-test('compaction fixture reaches a proactive pressure region and proves explicit rehydration', async () => {
-  const report = await evaluateContextFixture({ fixture: 'continuation-after-compaction', strategy: 'compact' });
-  const row = report.strategies[0];
-  assert.equal(row.result, 'PASS');
-  assert.ok(row.compacted_chars > 0);
-  assert.ok(row.rehydrated_refs.includes('tool:call_previous'));
-  assert.ok(row.active_context_tokens < row.pricing_threshold_tokens);
-});
-
-test('CLI JSON context eval is stable and offline', () => {
-  const result = spawnSync(process.execPath, ['src/cli.js', 'eval', 'context', '--fixture', 'two-file-repair', '--strategy', 'discovery', '--json'], { cwd: repoRoot, encoding: 'utf8' });
-  assert.equal(result.status, 0, result.stderr);
-  const report = JSON.parse(result.stdout);
-  assert.equal(report.fixture, 'two-file-repair');
-  assert.equal(report.live_provider_used, false);
-  assert.equal(report.strategies[0].strategy, 'discovery');
-  assert.equal(report.strategies[0].result, 'PASS');
-});

package/test/execution-approvals.test.mjs

@@ -1,27 +0,0 @@
-import assert from 'node:assert/strict';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import test from 'node:test';
-import { grantExecutionApproval, isExecutionApproved, toolApprovalKey } from '../src/lib/execution-approvals.js';
-
-function tempHome(t) {
-  const home = fs.mkdtempSync(path.join(os.tmpdir(), 'agentsam-approval-home-'));
-  t.after(() => fs.rmSync(home, { recursive: true, force: true }));
-  return home;
-}
-
-test('execution approvals are exact-command and project scoped', t => {
-  const home = tempHome(t);
-  const one = fs.mkdtempSync(path.join(os.tmpdir(), 'agentsam-project-a-'));
-  const two = fs.mkdtempSync(path.join(os.tmpdir(), 'agentsam-project-b-'));
-  t.after(() => fs.rmSync(one, { recursive: true, force: true }));
-  t.after(() => fs.rmSync(two, { recursive: true, force: true }));
-  const key = toolApprovalKey('cloudflare.wrangler.native', { command: 'whoami' });
-  assert.equal(key, 'cloudflare.wrangler.native:whoami');
-  assert.equal(isExecutionApproved({ cwd: one, key }, { home }), false);
-  grantExecutionApproval({ cwd: one, key }, { home });
-  assert.equal(isExecutionApproved({ cwd: one, key }, { home }), true);
-  assert.equal(isExecutionApproved({ cwd: two, key }, { home }), false);
-  assert.equal(isExecutionApproved({ cwd: one, key: 'cloudflare.wrangler.native:versions.list' }, { home }), false);
-});

package/test/fixtures/cad/courtyard-house.json

@@ -1,208 +0,0 @@
-{
-  "id": "courtyard-house-fixture",
-  "name": "Courtyard House — baseline study",
-  "units": "in",
-  "scale": 1,
-  "gridSize": 12,
-  "snapToGrid": true,
-  "walls": [
-    {
-      "id": "wall-0",
-      "x1": 0,
-      "y1": 0,
-      "x2": 864,
-      "y2": 0,
-      "thickness": 6,
-      "height3D": 120,
-      "material": "wood_panel",
-      "exterior": true
-    },
-    {
-      "id": "wall-1",
-      "x1": 864,
-      "y1": 0,
-      "x2": 864,
-      "y2": 720,
-      "thickness": 6,
-      "height3D": 120,
-      "material": "wood_panel",
-      "exterior": true
-    },
-    {
-      "id": "wall-2",
-      "x1": 864,
-      "y1": 720,
-      "x2": 600,
-      "y2": 720,
-      "thickness": 6,
-      "height3D": 120,
-      "material": "wood_panel",
-      "exterior": true
-    },
-    {
-      "id": "wall-3",
-      "x1": 600,
-      "y1": 720,
-      "x2": 600,
-      "y2": 192,
-      "thickness": 6,
-      "height3D": 120,
-      "material": "wood_panel",
-      "exterior": true
-    },
-    {
-      "id": "wall-4",
-      "x1": 600,
-      "y1": 192,
-      "x2": 264,
-      "y2": 192,
-      "thickness": 6,
-      "height3D": 120,
-      "material": "wood_panel",
-      "exterior": true
-    },
-    {
-      "id": "wall-5",
-      "x1": 264,
-      "y1": 192,
-      "x2": 264,
-      "y2": 720,
-      "thickness": 6,
-      "height3D": 120,
-      "material": "wood_panel",
-      "exterior": true
-    },
-    {
-      "id": "wall-6",
-      "x1": 264,
-      "y1": 720,
-      "x2": 0,
-      "y2": 720,
-      "thickness": 6,
-      "height3D": 120,
-      "material": "wood_panel",
-      "exterior": true
-    },
-    {
-      "id": "wall-7",
-      "x1": 0,
-      "y1": 720,
-      "x2": 0,
-      "y2": 0,
-      "thickness": 6,
-      "height3D": 120,
-      "material": "wood_panel",
-      "exterior": true
-    }
-  ],
-  "doors": [
-    {
-      "id": "courtyard-door",
-      "wallId": "wall-4",
-      "distanceAlongWall": 0.5,
-      "width": 96,
-      "height": 96,
-      "swing": "double",
-      "openAngle": 0
-    }
-  ],
-  "windows": [],
-  "rooms": [
-    {
-      "id": "left-wing",
-      "name": "Primary / kitchen wing",
-      "points": [
-        [
-          0,
-          0
-        ],
-        [
-          264,
-          0
-        ],
-        [
-          264,
-          720
-        ],
-        [
-          0,
-          720
-        ]
-      ],
-      "areaSqFt": 1320,
-      "floorMaterial": "hardwood",
-      "color": "#ac9875"
-    },
-    {
-      "id": "right-wing",
-      "name": "Bedroom / media wing",
-      "points": [
-        [
-          600,
-          0
-        ],
-        [
-          864,
-          0
-        ],
-        [
-          864,
-          720
-        ],
-        [
-          600,
-          720
-        ]
-      ],
-      "areaSqFt": 1320,
-      "floorMaterial": "hardwood",
-      "color": "#ac9875"
-    },
-    {
-      "id": "living",
-      "name": "Living connection",
-      "points": [
-        [
-          264,
-          0
-        ],
-        [
-          600,
-          0
-        ],
-        [
-          600,
-          192
-        ],
-        [
-          264,
-          192
-        ]
-      ],
-      "areaSqFt": 448,
-      "floorMaterial": "hardwood",
-      "color": "#ac9875"
-    }
-  ],
-  "furniture": [],
-  "annotations": [],
-  "parametricObjects": [],
-  "lighting": {
-    "sunAltitude": 45,
-    "sunAzimuth": 135,
-    "intensity": 1,
-    "timeOfDay": "noon",
-    "shadows": true,
-    "ambientColor": "#334155"
-  },
-  "roofType": "none",
-  "ceilingHeight": 120,
-  "version": 1,
-  "updatedAt": 0,
-  "metadata": {
-    "createdAt": 0,
-    "updatedAt": 0,
-    "revision": 1,
-    "description": "Regression fixture, not final house plan. 72x60 ft reference envelope; rear courtyard opens +Y. 10ft height assumed. Roof intentionally omitted until supported."
-  }
-}

package/test/fixtures/knowledge-rpc-worker.mjs

@@ -1,16 +0,0 @@
-process.once('message', payload => {
-  const generation = payload?.request?.generation_id || null;
-  const delay = generation === 'slow' ? 180 : 20;
-  setTimeout(() => {
-    if (generation === 'fail') {
-      process.send?.({ ok: false, error: 'fixture knowledge failure' });
-    } else {
-      process.send?.({ ok: true, result: {
-        operation: payload?.request?.operation || null,
-        repository_id: payload?.config?.repository_id || null,
-        generation_id: generation,
-      } });
-    }
-    setTimeout(() => process.exit(0), 5);
-  }, delay);
-});

package/test/fixtures/project-authority/customer-app/.agentsam/app.json

@@ -1,5 +0,0 @@
-{
-  "schema": "agentsam.app-install.v1",
-  "app_id": "my-product",
-  "mount": "apps/my-product"
-}

package/test/fixtures/project-authority/customer-app/apps/my-product/index.ts

@@ -1 +0,0 @@
-export const productName = 'Generic Customer Product';

package/test/fixtures/project-authority/customer-app/wrangler.toml

@@ -1,17 +0,0 @@
-name = "customer-product-worker"
-
-[ai]
-binding = "MY_AI"
-
-[[vectorize]]
-binding = "MY_VECTORS"
-index_name = "customer-code-index"
-
-[[d1_databases]]
-binding = "DB"
-database_name = "customer-db"
-database_id = "00000000-0000-0000-0000-000000000001"
-
-[[r2_buckets]]
-binding = "CONTENT"
-bucket_name = "customer-assets"

package/test/gcloud-auth.test.mjs

@@ -1,111 +0,0 @@
-import assert from 'node:assert/strict';
-import test from 'node:test';
-import {
-  resolveGoogleOauthStartUrl,
-  runAgentsamGoogleOauthLogin,
-  runGcloudAuth,
-} from '../src/commands/gcloud-auth.js';
-import {
-  GOOGLE_CLOUD_CONNECTION_SCOPES,
-  buildGoogleDesktopAuthUrl,
-  googleCloudPermissionChecklist,
-  resolveGoogleDesktopClientId,
-} from '../src/lib/google-desktop-oauth.js';
-
-const TEST_ENV = {
-  IAM_OAUTH_ISSUER: 'https://inneranimalmedia.com',
-  GOOGLE_CLIENT_ID: '246811022042-d8q1rc1oki4uv9qiqjah8lvkffb91crp.apps.googleusercontent.com',
-  GOOGLE_DESKTOP_CLIENT_ID: '246811022042-cckq00b5seekpkv0in358jhu42n0b6u9.apps.googleusercontent.com',
-};
-
-test('hosted --web login emits start URL in --json', async () => {
-  let out = '';
-  const code = await runAgentsamGoogleOauthLogin({
-    write: (s) => {
-      out += s;
-    },
-    json: true,
-    nonInteractive: true,
-    env: TEST_ENV,
-  });
-  assert.equal(code, 0);
-  const parsed = JSON.parse(out.slice(out.indexOf('{')));
-  assert.equal(parsed.mode, 'hosted_identity');
-  assert.equal(
-    parsed.start_url,
-    resolveGoogleOauthStartUrl(TEST_ENV),
-  );
-});
-
-test('gcloud auth login --web is hosted identity', async () => {
-  let out = '';
-  const code = await runGcloudAuth(['login', '--web', '--json'], {
-    write: (s) => {
-      out += s;
-    },
-    nonInteractive: true,
-    env: TEST_ENV,
-  });
-  assert.equal(code, 0);
-  assert.match(out, /hosted_identity|\/api\/oauth\/google\/start/);
-});
-
-test('gcloud auth help mentions studio broker default and --desktop/--web/--sdk', async () => {
-  let out = '';
-  await runGcloudAuth(['help'], {
-    write: (s) => {
-      out += s;
-    },
-  });
-  assert.match(out, /Studio Web OAuth broker|Worker holds/i);
-  assert.match(out, /--desktop/);
-  assert.match(out, /--web/);
-  assert.match(out, /--sdk/);
-});
-
-test('desktop auth URL requests cloud-platform + offline', () => {
-  const url = new URL(buildGoogleDesktopAuthUrl({
-    clientId: resolveGoogleDesktopClientId(TEST_ENV),
-    redirectUri: 'http://127.0.0.1:12345/callback',
-    state: 'abc',
-    codeChallenge: 'challenge',
-  }));
-  assert.match(url.searchParams.get('scope') || '', /cloud-platform/);
-  assert.equal(url.searchParams.get('access_type'), 'offline');
-  assert.equal(url.searchParams.get('code_challenge_method'), 'S256');
-  assert.match(GOOGLE_CLOUD_CONNECTION_SCOPES, /openid/);
-});
-
-test('permissions checklist separates OAuth scopes from IAM roles', async () => {
-  let out = '';
-  const code = await runGcloudAuth(['login', '--permissions'], {
-    write: (s) => {
-      out += s;
-    },
-  });
-  assert.equal(code, 0);
-  assert.match(out, /cloud-platform/);
-  assert.match(out, /mcp\.toolUser|roles\/mcp/);
-  const checklist = googleCloudPermissionChecklist();
-  assert.ok(checklist.oauth_scopes_requested.includes('https://www.googleapis.com/auth/cloud-platform'));
-});
-
-test('resolveGoogleDesktopClientId fails loud when unset', () => {
-  assert.throws(
-    () => resolveGoogleDesktopClientId({}),
-    (err) => err?.code === 'google_desktop_client_not_configured',
-  );
-});
-
-test('resolveGoogleDesktopClientIdAsync uses public-config when env unset', async () => {
-  const { resolveGoogleDesktopClientIdAsync } = await import('../src/lib/google-desktop-oauth.js');
-  const id = await resolveGoogleDesktopClientIdAsync({}, {
-    publicConfigUrl: 'https://example.test/api/public-config',
-    fetchImpl: async () =>
-      new Response(JSON.stringify({
-        ok: true,
-        google_desktop_client_id: 'from-public-config.apps.googleusercontent.com',
-      }), { status: 200 }),
-  });
-  assert.equal(id, 'from-public-config.apps.googleusercontent.com');
-});

package/test/go/build-source-identity.test.mjs

@@ -1,31 +0,0 @@
-import assert from 'node:assert/strict';
-import test from 'node:test';
-
-import {
-  repositoryIdFromGitContext,
-} from '../../src/go/build.js';
-
-test('Go build source canonicalizes GitHub repository identity', () => {
-  assert.equal(
-    repositoryIdFromGitContext({
-      remoteHost: 'github.com',
-      repoFullName: 'SamPrimeaux/agentsam-sdk',
-    }),
-    'github:samprimeaux/agentsam-sdk',
-  );
-});
-
-test('Go build source preserves provider-qualified non-GitHub identity', () => {
-  assert.equal(
-    repositoryIdFromGitContext({
-      remoteHost: 'gitlab.example.com',
-      repoFullName: 'Owner/Repo',
-    }),
-    'gitlab.example.com:Owner/Repo',
-  );
-});
-
-test('Go build source returns null when remote identity is unavailable', () => {
-  assert.equal(repositoryIdFromGitContext(null), null);
-  assert.equal(repositoryIdFromGitContext({}), null);
-});