@lobu/gateway 3.0.9 → 3.0.13

package/src/__tests__/agent-settings-store.test.ts

@@ -1,323 +0,0 @@
-import {
-  afterAll,
-  beforeAll,
-  beforeEach,
-  describe,
-  expect,
-  test,
-} from "bun:test";
-import { MockRedisClient } from "@lobu/core/testing";
-import { AgentSettingsStore } from "../auth/settings/agent-settings-store";
-
-const TEST_ENCRYPTION_KEY =
-  "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef";
-
-let originalEncryptionKey: string | undefined;
-
-beforeAll(() => {
-  originalEncryptionKey = process.env.ENCRYPTION_KEY;
-  process.env.ENCRYPTION_KEY = TEST_ENCRYPTION_KEY;
-});
-
-afterAll(() => {
-  if (originalEncryptionKey !== undefined) {
-    process.env.ENCRYPTION_KEY = originalEncryptionKey;
-  } else {
-    delete process.env.ENCRYPTION_KEY;
-  }
-});
-
-function createStore(redis?: MockRedisClient) {
-  const r = redis ?? new MockRedisClient();
-  const store = new AgentSettingsStore(r as any);
-  return { store, redis: r };
-}
-
-describe("AgentSettingsStore", () => {
-  let redis: MockRedisClient;
-  let store: AgentSettingsStore;
-
-  beforeEach(() => {
-    const created = createStore();
-    redis = created.redis;
-    store = created.store;
-  });
-
-  describe("CRUD basics", () => {
-    test("saveSettings stores and getSettings retrieves", async () => {
-      await store.saveSettings("agent-1", { model: "claude-sonnet-4" });
-      const result = await store.getSettings("agent-1");
-      expect(result).not.toBeNull();
-      expect(result!.model).toBe("claude-sonnet-4");
-      expect(result!.updatedAt).toBeGreaterThan(0);
-    });
-
-    test("getSettings returns null for non-existent agent", async () => {
-      const result = await store.getSettings("missing");
-      expect(result).toBeNull();
-    });
-
-    test("updateSettings merges with existing", async () => {
-      await store.saveSettings("agent-1", { model: "claude-sonnet-4" });
-      await store.updateSettings("agent-1", { soulMd: "Be helpful" });
-      const result = await store.getSettings("agent-1");
-      expect(result!.model).toBe("claude-sonnet-4");
-      expect(result!.soulMd).toBe("Be helpful");
-    });
-
-    test("deleteSettings removes settings", async () => {
-      await store.saveSettings("agent-1", { model: "claude-sonnet-4" });
-      await store.deleteSettings("agent-1");
-      const result = await store.getSettings("agent-1");
-      expect(result).toBeNull();
-    });
-
-    test("hasSettings returns boolean", async () => {
-      expect(await store.hasSettings("agent-1")).toBe(false);
-      await store.saveSettings("agent-1", { model: "claude-sonnet-4" });
-      expect(await store.hasSettings("agent-1")).toBe(true);
-    });
-  });
-
-  describe("partial update merging", () => {
-    test("merges new fields with existing", async () => {
-      await store.saveSettings("agent-1", {
-        model: "claude-sonnet-4",
-        soulMd: "Original",
-      });
-      await store.updateSettings("agent-1", { userMd: "New field" });
-      const result = await store.getSettings("agent-1");
-      expect(result!.model).toBe("claude-sonnet-4");
-      expect(result!.soulMd).toBe("Original");
-      expect(result!.userMd).toBe("New field");
-    });
-
-    test("overwrites overlapping fields", async () => {
-      await store.saveSettings("agent-1", { model: "claude-sonnet-4" });
-      await store.updateSettings("agent-1", { model: "claude-opus-4" });
-      const result = await store.getSettings("agent-1");
-      expect(result!.model).toBe("claude-opus-4");
-    });
-
-    test("creates if no existing settings", async () => {
-      await store.updateSettings("agent-1", { model: "claude-opus-4" });
-      const result = await store.getSettings("agent-1");
-      expect(result).not.toBeNull();
-      expect(result!.model).toBe("claude-opus-4");
-    });
-  });
-
-  describe("encryption of authProfiles.credential", () => {
-    test("credential is encrypted in Redis and decrypted on read", async () => {
-      const apiKey = "sk-ant-secret-key-12345";
-      await store.saveSettings("agent-1", {
-        authProfiles: [
-          {
-            id: "profile-1",
-            provider: "anthropic",
-            model: "claude-sonnet-4",
-            credential: apiKey,
-            label: "test",
-            authType: "api-key",
-            createdAt: Date.now(),
-          },
-        ],
-      });
-
-      // Check raw value in Redis has enc:v1: prefix
-      const rawData = await redis.get("agent:settings:agent-1");
-      expect(rawData).not.toBeNull();
-      const parsed = JSON.parse(rawData!);
-      expect(parsed.authProfiles[0].credential).toStartWith("enc:v1:");
-      expect(parsed.authProfiles[0].credential).not.toBe(apiKey);
-
-      // Check decrypted on read
-      const result = await store.getSettings("agent-1");
-      expect(result!.authProfiles![0].credential).toBe(apiKey);
-    });
-  });
-
-  describe("encryption of refreshToken", () => {
-    test("refreshToken is encrypted in Redis and decrypted on read", async () => {
-      const refreshToken = "rt-secret-refresh-token-xyz";
-      await store.saveSettings("agent-1", {
-        authProfiles: [
-          {
-            id: "profile-1",
-            provider: "anthropic",
-            model: "claude-sonnet-4",
-            credential: "sk-key",
-            label: "test",
-            authType: "oauth",
-            metadata: {
-              refreshToken,
-              email: "user@example.com",
-            },
-            createdAt: Date.now(),
-          },
-        ],
-      });
-
-      // Check raw value in Redis
-      const rawData = await redis.get("agent:settings:agent-1");
-      const parsed = JSON.parse(rawData!);
-      expect(parsed.authProfiles[0].metadata.refreshToken).toStartWith(
-        "enc:v1:"
-      );
-
-      // Check decrypted on read
-      const result = await store.getSettings("agent-1");
-      expect(result!.authProfiles![0].metadata!.refreshToken).toBe(
-        refreshToken
-      );
-    });
-  });
-
-  describe("no double-encryption", () => {
-    test("already encrypted values are not re-encrypted", async () => {
-      // Save once to encrypt
-      await store.saveSettings("agent-1", {
-        authProfiles: [
-          {
-            id: "profile-1",
-            provider: "anthropic",
-            model: "claude-sonnet-4",
-            credential: "sk-key",
-            label: "test",
-            authType: "api-key",
-            createdAt: Date.now(),
-          },
-        ],
-      });
-
-      const rawAfterFirst = await redis.get("agent:settings:agent-1");
-      const parsedFirst = JSON.parse(rawAfterFirst!);
-      const encryptedCredential = parsedFirst.authProfiles[0].credential;
-
-      // Update to re-save (simulating save with already-encrypted value)
-      await store.updateSettings("agent-1", { model: "claude-opus-4" });
-
-      const rawAfterSecond = await redis.get("agent:settings:agent-1");
-      const parsedSecond = JSON.parse(rawAfterSecond!);
-
-      // The credential should still be encrypted, not double-encrypted
-      // Both should decrypt to the same plaintext
-      const result = await store.getSettings("agent-1");
-      expect(result!.authProfiles![0].credential).toBe("sk-key");
-    });
-  });
-
-  describe("graceful plaintext when ENCRYPTION_KEY missing", () => {
-    test("values stored as plaintext without encryption key", async () => {
-      const savedKey = process.env.ENCRYPTION_KEY;
-      delete process.env.ENCRYPTION_KEY;
-
-      try {
-        const { store: noEncStore, redis: noEncRedis } = createStore();
-
-        const apiKey = "sk-plaintext-key";
-        await noEncStore.saveSettings("agent-1", {
-          authProfiles: [
-            {
-              id: "profile-1",
-              provider: "anthropic",
-              model: "claude-sonnet-4",
-              credential: apiKey,
-              label: "test",
-              authType: "api-key",
-              createdAt: Date.now(),
-            },
-          ],
-        });
-
-        // Raw value should be plaintext (no enc:v1: prefix)
-        const rawData = await noEncRedis.get("agent:settings:agent-1");
-        const parsed = JSON.parse(rawData!);
-        expect(parsed.authProfiles[0].credential).toBe(apiKey);
-        expect(parsed.authProfiles[0].credential).not.toStartWith("enc:v1:");
-
-        // Read should also return plaintext
-        const result = await noEncStore.getSettings("agent-1");
-        expect(result!.authProfiles![0].credential).toBe(apiKey);
-      } finally {
-        process.env.ENCRYPTION_KEY = savedKey;
-      }
-    });
-  });
-
-  describe("findTemplateAgentId", () => {
-    test("returns first agent with installedProviders", async () => {
-      // Agent without installedProviders
-      await store.saveSettings("agent-no-providers", {
-        model: "claude-sonnet-4",
-      });
-
-      // Agent with installedProviders
-      await store.saveSettings("agent-with-providers", {
-        model: "claude-opus-4",
-        installedProviders: [
-          {
-            id: "anthropic",
-            displayName: "Anthropic",
-            envVarName: "ANTHROPIC_API_KEY",
-            upstreamBaseUrl: "https://api.anthropic.com",
-          },
-        ],
-      });
-
-      const templateId = await store.findTemplateAgentId();
-      expect(templateId).toBe("agent-with-providers");
-    });
-
-    test("returns null when no agents have providers", async () => {
-      await store.saveSettings("agent-1", { model: "claude-sonnet-4" });
-      await store.saveSettings("agent-2", { model: "claude-opus-4" });
-
-      const templateId = await store.findTemplateAgentId();
-      expect(templateId).toBeNull();
-    });
-  });
-
-  describe("findSandboxAgentIds", () => {
-    test("returns agent IDs referencing template", async () => {
-      const templateId = "template-agent";
-
-      await store.saveSettings(templateId, {
-        model: "claude-opus-4",
-        installedProviders: [
-          {
-            id: "anthropic",
-            displayName: "Anthropic",
-            envVarName: "ANTHROPIC_API_KEY",
-            upstreamBaseUrl: "https://api.anthropic.com",
-          },
-        ],
-      });
-
-      await store.saveSettings("sandbox-1", {
-        model: "claude-sonnet-4",
-        templateAgentId: templateId,
-      });
-
-      await store.saveSettings("sandbox-2", {
-        model: "claude-sonnet-4",
-        templateAgentId: templateId,
-      });
-
-      // Unrelated agent
-      await store.saveSettings("other-agent", {
-        model: "claude-sonnet-4",
-      });
-
-      const sandboxIds = await store.findSandboxAgentIds(templateId);
-      expect(sandboxIds).toHaveLength(2);
-      expect(sandboxIds.sort()).toEqual(["sandbox-1", "sandbox-2"]);
-    });
-
-    test("returns empty array when no sandboxes exist", async () => {
-      await store.saveSettings("agent-1", { model: "claude-sonnet-4" });
-      const sandboxIds = await store.findSandboxAgentIds("non-existent");
-      expect(sandboxIds).toEqual([]);
-    });
-  });
-});

package/src/__tests__/bedrock-model-catalog.test.ts

@@ -1,40 +0,0 @@
-import { describe, expect, test } from "bun:test";
-import { BedrockModelCatalog } from "../services/bedrock-model-catalog";
-
-describe("BedrockModelCatalog", () => {
-  test("returns configured models from the loader", async () => {
-    const catalog = new BedrockModelCatalog({
-      cacheTtlMs: 0,
-      loadModels: async () => [
-        {
-          id: "amazon.nova-lite-v1:0",
-          label: "Amazon / Nova Lite",
-          inputModalities: ["TEXT"],
-          outputModalities: ["TEXT"],
-        },
-      ],
-    });
-
-    await expect(catalog.listModelOptions()).resolves.toEqual([
-      {
-        id: "amazon.nova-lite-v1:0",
-        label: "Amazon / Nova Lite",
-      },
-    ]);
-  });
-
-  test("falls back to the static registry when AWS loading fails", async () => {
-    const catalog = new BedrockModelCatalog({
-      cacheTtlMs: 0,
-      loadModels: async () => {
-        throw new Error("boom");
-      },
-    });
-
-    const models = await catalog.listModelOptions();
-    expect(models.length).toBeGreaterThan(0);
-    expect(models.some((model) => model.id === "amazon.nova-lite-v1:0")).toBe(
-      true
-    );
-  });
-});

package/src/__tests__/bedrock-openai-service.test.ts

@@ -1,157 +0,0 @@
-import { describe, expect, test } from "bun:test";
-import type { Model } from "@mariozechner/pi-ai/dist/types.js";
-import { BedrockModelCatalog } from "../services/bedrock-model-catalog";
-import { BedrockOpenAIService } from "../services/bedrock-openai-service";
-
-function createCatalog() {
-  return new BedrockModelCatalog({
-    cacheTtlMs: 0,
-    loadModels: async () => [
-      {
-        id: "amazon.nova-lite-v1:0",
-        label: "Amazon / Nova Lite",
-        providerName: "Amazon",
-        modelName: "Nova Lite",
-        inputModalities: ["TEXT"],
-        outputModalities: ["TEXT"],
-      },
-    ],
-  });
-}
-
-describe("BedrockOpenAIService", () => {
-  test("lists models in OpenAI format", async () => {
-    const service = new BedrockOpenAIService({
-      modelCatalog: createCatalog(),
-    });
-
-    const response = await service
-      .getApp()
-      .request("http://localhost/openai/a/test-agent/v1/models");
-
-    expect(response.status).toBe(200);
-    expect(await response.json()).toEqual({
-      object: "list",
-      data: [
-        {
-          id: "amazon.nova-lite-v1:0",
-          object: "model",
-          created: 0,
-          owned_by: "amazon-bedrock",
-        },
-      ],
-    });
-  });
-
-  test("streams OpenAI chat completion chunks for Bedrock events", async () => {
-    process.env.AWS_REGION = "eu-west-1";
-
-    const service = new BedrockOpenAIService({
-      modelCatalog: createCatalog(),
-      modelResolver: () => undefined,
-      bedrockStreamer: (() =>
-        (async function* () {
-          yield { type: "text_delta", delta: "hello" };
-          yield {
-            type: "toolcall_start",
-            contentIndex: 1,
-            toolCall: { id: "call_1", name: "lookup" },
-          };
-          yield {
-            type: "toolcall_delta",
-            contentIndex: 1,
-            delta: '{"city":"London"}',
-          };
-          yield {
-            type: "done",
-            reason: "toolUse",
-            message: {
-              usage: {
-                input: 10,
-                output: 4,
-                cacheRead: 2,
-                totalTokens: 16,
-              },
-            },
-          };
-        })()) as any,
-    });
-
-    const response = await service
-      .getApp()
-      .request("http://localhost/openai/a/test-agent/v1/chat/completions", {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-          model: "amazon.nova-lite-v1:0",
-          stream: true,
-          stream_options: { include_usage: true },
-          messages: [{ role: "user", content: "hi" }],
-          tools: [
-            {
-              type: "function",
-              function: {
-                name: "lookup",
-                parameters: { type: "object", properties: {} },
-              },
-            },
-          ],
-        }),
-      });
-
-    expect(response.status).toBe(200);
-    const body = await response.text();
-    expect(body).toContain('"content":"hello"');
-    expect(body).toContain('"tool_calls":[{"index":0,"id":"call_1"');
-    expect(body).toContain('"finish_reason":"tool_calls"');
-    expect(body).toContain('"prompt_tokens":12');
-    expect(body).toContain("[DONE]");
-  });
-
-  test("builds a dynamic Bedrock runtime model when not in registry", async () => {
-    process.env.AWS_REGION = "eu-west-1";
-
-    let resolvedModel: Model<"bedrock-converse-stream"> | null = null;
-
-    const service = new BedrockOpenAIService({
-      modelCatalog: new BedrockModelCatalog({
-        cacheTtlMs: 0,
-        loadModels: async () => [
-          {
-            id: "custom.model-v1:0",
-            label: "Custom / Model",
-            providerName: "Custom",
-            modelName: "Model",
-            inputModalities: ["TEXT"],
-            outputModalities: ["TEXT"],
-          },
-        ],
-      }),
-      modelResolver: () => undefined,
-      bedrockStreamer: ((model: Model<"bedrock-converse-stream">) => {
-        resolvedModel = model;
-        return (async function* () {
-          yield { type: "done", reason: "stop", message: { usage: {} } };
-        })();
-      }) as any,
-    });
-
-    const response = await service
-      .getApp()
-      .request("http://localhost/openai/a/test-agent/v1/chat/completions", {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-          model: "custom.model-v1:0",
-          stream: true,
-          messages: [{ role: "user", content: "hi" }],
-        }),
-      });
-
-    expect(response.status).toBe(200);
-    await response.text();
-    expect(resolvedModel?.id).toBe("custom.model-v1:0");
-    expect(resolvedModel?.provider).toBe("amazon-bedrock");
-    expect(resolvedModel?.api).toBe("bedrock-converse-stream");
-  });
-});

package/src/__tests__/bedrock-provider-module.test.ts

@@ -1,56 +0,0 @@
-import { describe, expect, test } from "bun:test";
-import { BedrockProviderModule } from "../auth/bedrock/provider-module";
-import { BedrockModelCatalog } from "../services/bedrock-model-catalog";
-
-describe("BedrockProviderModule", () => {
-  const createModule = () =>
-    new BedrockProviderModule(
-      {} as any,
-      new BedrockModelCatalog({
-        cacheTtlMs: 0,
-        loadModels: async () => [
-          {
-            id: "amazon.nova-lite-v1:0",
-            label: "Amazon / Nova Lite",
-          },
-        ],
-      })
-    );
-
-  test("registers as an OpenAI-compatible dynamic provider", () => {
-    const module = createModule();
-    const metadata = module.getProviderMetadata();
-
-    expect(metadata).toEqual({
-      sdkCompat: "openai",
-      defaultModel: "amazon.nova-lite-v1:0",
-      baseUrlEnvVar: "AMAZON_BEDROCK_BASE_URL",
-    });
-  });
-
-  test("points workers at the gateway-owned Bedrock route", () => {
-    const module = createModule();
-
-    expect(
-      module.getProxyBaseUrlMappings(
-        "http://gateway:8080/api/proxy",
-        "agent-123"
-      )
-    ).toEqual({
-      AMAZON_BEDROCK_BASE_URL:
-        "http://gateway:8080/api/bedrock/openai/a/agent-123",
-    });
-  });
-
-  test("returns Bedrock model options under the amazon-bedrock provider prefix", async () => {
-    const module = createModule();
-    const options = await module.getModelOptions("agent-1", "user-1");
-
-    expect(options).toEqual([
-      {
-        value: "amazon-bedrock/amazon.nova-lite-v1:0",
-        label: "Amazon / Nova Lite",
-      },
-    ]);
-  });
-});