@vellumai/assistant 0.12.1-staging.1 → 0.12.1

package/src/live-voice/__tests__/runtime-websocket-shell.test.ts

@@ -92,17 +92,36 @@ mock.module("../live-voice-credential-preflight.js", () => ({
       : realPreflightModule.resolveLiveVoiceCredentialReadiness(),
 }));
 
-import {
-  mintActorToken,
-  mintGatewayToken,
-  requireHttpAuth,
-  upgradeHeaders,
-  waitForClose,
-} from "../../runtime/__tests__/runtime-ws-test-utils.js";
+import { CURRENT_POLICY_EPOCH } from "../../runtime/auth/policy.js";
+import { mintToken } from "../../runtime/auth/token-service.js";
 import { RuntimeHttpServer } from "../../runtime/http-server.js";
 
 type JsonFrame = Record<string, unknown>;
 
+const savedAuthEnv = {
+  DISABLE_HTTP_AUTH: process.env.DISABLE_HTTP_AUTH,
+};
+
+function mintGatewayToken(): string {
+  return mintToken({
+    aud: "vellum-daemon",
+    sub: "svc:gateway:self",
+    scope_profile: "gateway_ingress_v1",
+    policy_epoch: CURRENT_POLICY_EPOCH,
+    ttlSeconds: 3600,
+  });
+}
+
+function mintActorToken(): string {
+  return mintToken({
+    aud: "vellum-daemon",
+    sub: "actor:self:user-123",
+    scope_profile: "actor_client_v1",
+    policy_epoch: CURRENT_POLICY_EPOCH,
+    ttlSeconds: 3600,
+  });
+}
+
 function startFrame(conversationId = "conversation-123"): string {
   return JSON.stringify({
     type: "start",
@@ -142,6 +161,33 @@ async function waitForOpen(ws: WebSocket, timeoutMs = 2000): Promise<void> {
   });
 }
 
+async function waitForClose(ws: WebSocket, timeoutMs = 2000): Promise<void> {
+  if (ws.readyState === WebSocket.CLOSED) {
+    return;
+  }
+  await new Promise<void>((resolve, reject) => {
+    const timer = setTimeout(() => {
+      cleanup();
+      reject(new Error("Timed out waiting for WebSocket close"));
+    }, timeoutMs);
+    const cleanup = () => {
+      clearTimeout(timer);
+      ws.removeEventListener("close", onClose);
+      ws.removeEventListener("error", onError);
+    };
+    const onClose = () => {
+      cleanup();
+      resolve();
+    };
+    const onError = () => {
+      cleanup();
+      reject(new Error("WebSocket close failed"));
+    };
+    ws.addEventListener("close", onClose);
+    ws.addEventListener("error", onError);
+  });
+}
+
 async function waitForJsonFrame(
   ws: WebSocket,
   timeoutMs = 2000,
@@ -195,7 +241,6 @@ describe("RuntimeHttpServer live voice WebSocket shell", () => {
   let baseUrl: string;
   let wsBaseUrl: string;
   let clients: WebSocket[];
-  let restoreAuthEnv: () => void;
 
   beforeAll(() => {
     shellMocksActive = true;
@@ -206,7 +251,7 @@ describe("RuntimeHttpServer live voice WebSocket shell", () => {
   });
 
   beforeEach(async () => {
-    restoreAuthEnv = requireHttpAuth();
+    delete process.env.DISABLE_HTTP_AUTH;
     resolveStreamingTranscriberImpl = async () => createResolvedTranscriber();
     resolveStreamingTranscriberMock.mockClear();
     resolvedTranscribers.length = 0;
@@ -223,7 +268,11 @@ describe("RuntimeHttpServer live voice WebSocket shell", () => {
       closeClient(client);
     }
     await server.stop();
-    restoreAuthEnv();
+    if (savedAuthEnv.DISABLE_HTTP_AUTH === undefined) {
+      delete process.env.DISABLE_HTTP_AUTH;
+    } else {
+      process.env.DISABLE_HTTP_AUTH = savedAuthEnv.DISABLE_HTTP_AUTH;
+    }
   });
 
   function openLiveVoiceClient(token = mintGatewayToken()): WebSocket {
@@ -235,14 +284,21 @@ describe("RuntimeHttpServer live voice WebSocket shell", () => {
   }
 
   test("rejects unauthorized upgrades before creating a WebSocket", async () => {
+    const baseHeaders = {
+      Upgrade: "websocket",
+      Connection: "Upgrade",
+      "Sec-WebSocket-Key": "dGhlIHNhbXBsZSBub25jZQ==",
+      "Sec-WebSocket-Version": "13",
+    };
+
     const missingToken = await fetch(`${baseUrl}/v1/live-voice`, {
-      headers: upgradeHeaders,
+      headers: baseHeaders,
     });
     expect(missingToken.status).toBe(401);
 
     const actorToken = await fetch(
       `${baseUrl}/v1/live-voice?token=${mintActorToken()}`,
-      { headers: upgradeHeaders },
+      { headers: baseHeaders },
     );
     expect(actorToken.status).toBe(401);
 
@@ -250,7 +306,7 @@ describe("RuntimeHttpServer live voice WebSocket shell", () => {
       `${baseUrl}/v1/live-voice?token=${mintGatewayToken()}`,
       {
         headers: {
-          ...upgradeHeaders,
+          ...baseHeaders,
           Origin: "https://external.example.com",
         },
       },