@wingman-ai/gateway 0.5.3 → 0.5.4

package/dist/tests/gateway-command-workspace.test.cjs

@@ -1,150 +0,0 @@
-"use strict";
-var __webpack_exports__ = {};
-const external_node_fs_namespaceObject = require("node:fs");
-const external_node_os_namespaceObject = require("node:os");
-const external_node_path_namespaceObject = require("node:path");
-const external_vitest_namespaceObject = require("vitest");
-const gateway_cjs_namespaceObject = require("../cli/commands/gateway.cjs");
-function _define_property(obj, key, value) {
-    if (key in obj) Object.defineProperty(obj, key, {
-        value: value,
-        enumerable: true,
-        configurable: true,
-        writable: true
-    });
-    else obj[key] = value;
-    return obj;
-}
-const daemonStartMock = external_vitest_namespaceObject.vi.fn(async (_config)=>{});
-const daemonStopMock = external_vitest_namespaceObject.vi.fn(async ()=>{});
-const daemonRestartMock = external_vitest_namespaceObject.vi.fn(async ()=>{});
-const daemonGetStatusMock = external_vitest_namespaceObject.vi.fn(()=>({
-        running: false
-    }));
-const daemonGetLogFileMock = external_vitest_namespaceObject.vi.fn(()=>"/tmp/wingman-gateway.log");
-const daemonGetPidFileMock = external_vitest_namespaceObject.vi.fn(()=>"/tmp/wingman-gateway.pid");
-const daemonGetConfigFileMock = external_vitest_namespaceObject.vi.fn(()=>"/tmp/wingman-gateway.json");
-let serverStartShouldReject = false;
-const createdServerConfigs = [];
-const serverStartMock = external_vitest_namespaceObject.vi.fn(async ()=>{
-    if (serverStartShouldReject) throw new Error("synthetic gateway run stop");
-});
-const serverStopMock = external_vitest_namespaceObject.vi.fn(async ()=>{});
-const loadConfigMock = external_vitest_namespaceObject.vi.fn(()=>({
-        gateway: {
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "none"
-            }
-        }
-    }));
-external_vitest_namespaceObject.vi.mock("../gateway/index.js", ()=>({
-        GatewayDaemon: class {
-            constructor(){
-                _define_property(this, "start", daemonStartMock);
-                _define_property(this, "stop", daemonStopMock);
-                _define_property(this, "restart", daemonRestartMock);
-                _define_property(this, "getStatus", daemonGetStatusMock);
-                _define_property(this, "getLogFile", daemonGetLogFileMock);
-                _define_property(this, "getPidFile", daemonGetPidFileMock);
-                _define_property(this, "getConfigFile", daemonGetConfigFileMock);
-            }
-        },
-        GatewayServer: class {
-            constructor(config){
-                _define_property(this, "start", serverStartMock);
-                _define_property(this, "stop", serverStopMock);
-                createdServerConfigs.push(config);
-            }
-        },
-        GatewayClient: class {
-        }
-    }));
-external_vitest_namespaceObject.vi.mock("../cli/config/loader.js", ()=>({
-        WingmanConfigLoader: class {
-            constructor(){
-                _define_property(this, "loadConfig", loadConfigMock);
-            }
-        }
-    }));
-(0, external_vitest_namespaceObject.describe)("gateway command workspace handling", ()=>{
-    let tempRoot;
-    let consoleLogSpy;
-    let consoleErrorSpy;
-    let processExitSpy;
-    const originalGatewayConfigEnv = process.env.WINGMAN_GATEWAY_CONFIG;
-    (0, external_vitest_namespaceObject.beforeEach)(()=>{
-        tempRoot = (0, external_node_fs_namespaceObject.mkdtempSync)((0, external_node_path_namespaceObject.join)((0, external_node_os_namespaceObject.tmpdir)(), "wingman-gateway-command-"));
-        serverStartShouldReject = false;
-        createdServerConfigs.length = 0;
-        daemonStartMock.mockClear();
-        serverStartMock.mockClear();
-        loadConfigMock.mockClear();
-        consoleLogSpy = external_vitest_namespaceObject.vi.spyOn(console, "log").mockImplementation(()=>{});
-        consoleErrorSpy = external_vitest_namespaceObject.vi.spyOn(console, "error").mockImplementation(()=>{});
-        processExitSpy = external_vitest_namespaceObject.vi.spyOn(process, "exit").mockImplementation((code)=>{
-            throw new Error(`process.exit(${code ?? "undefined"})`);
-        });
-        delete process.env.WINGMAN_GATEWAY_CONFIG;
-    });
-    (0, external_vitest_namespaceObject.afterEach)(()=>{
-        consoleLogSpy.mockRestore();
-        consoleErrorSpy.mockRestore();
-        processExitSpy.mockRestore();
-        if (originalGatewayConfigEnv) process.env.WINGMAN_GATEWAY_CONFIG = originalGatewayConfigEnv;
-        else delete process.env.WINGMAN_GATEWAY_CONFIG;
-        if ((0, external_node_fs_namespaceObject.existsSync)(tempRoot)) (0, external_node_fs_namespaceObject.rmSync)(tempRoot, {
-            recursive: true,
-            force: true
-        });
-    });
-    (0, external_vitest_namespaceObject.it)("passes workspace/configDir into daemon config on gateway start", async ()=>{
-        const workspace = (0, external_node_path_namespaceObject.join)(tempRoot, "workspace");
-        const configDir = ".wingman-dev";
-        await (0, gateway_cjs_namespaceObject.executeGatewayCommand)({
-            subcommand: "start",
-            args: [],
-            options: {}
-        }, {
-            workspace,
-            configDir
-        });
-        (0, external_vitest_namespaceObject.expect)(daemonStartMock).toHaveBeenCalledTimes(1);
-        (0, external_vitest_namespaceObject.expect)(daemonStartMock).toHaveBeenCalledWith(external_vitest_namespaceObject.expect.objectContaining({
-            workspace,
-            configDir
-        }));
-    });
-    (0, external_vitest_namespaceObject.it)("fills missing workspace/configDir when running from daemon config", async ()=>{
-        const workspace = (0, external_node_path_namespaceObject.join)(tempRoot, "workspace");
-        const configDir = ".wingman-dev";
-        const daemonConfigPath = (0, external_node_path_namespaceObject.join)(tempRoot, "gateway-daemon.json");
-        (0, external_node_fs_namespaceObject.writeFileSync)(daemonConfigPath, JSON.stringify({
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "none"
-            }
-        }));
-        process.env.WINGMAN_GATEWAY_CONFIG = daemonConfigPath;
-        serverStartShouldReject = true;
-        await (0, external_vitest_namespaceObject.expect)((0, gateway_cjs_namespaceObject.executeGatewayCommand)({
-            subcommand: "run",
-            args: [],
-            options: {
-                daemon: true
-            }
-        }, {
-            workspace,
-            configDir
-        })).rejects.toThrow("process.exit(1)");
-        (0, external_vitest_namespaceObject.expect)(createdServerConfigs).toHaveLength(1);
-        (0, external_vitest_namespaceObject.expect)(createdServerConfigs[0]?.workspace).toBe(workspace);
-        (0, external_vitest_namespaceObject.expect)(createdServerConfigs[0]?.configDir).toBe(configDir);
-    });
-});
-for(var __rspack_i in __webpack_exports__)exports[__rspack_i] = __webpack_exports__[__rspack_i];
-Object.defineProperty(exports, '__esModule', {
-    value: true
-});

package/dist/tests/gateway-command-workspace.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/tests/gateway-command-workspace.test.js

@@ -1,144 +0,0 @@
-import { existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { executeGatewayCommand } from "../cli/commands/gateway.js";
-function _define_property(obj, key, value) {
-    if (key in obj) Object.defineProperty(obj, key, {
-        value: value,
-        enumerable: true,
-        configurable: true,
-        writable: true
-    });
-    else obj[key] = value;
-    return obj;
-}
-const daemonStartMock = vi.fn(async (_config)=>{});
-const daemonStopMock = vi.fn(async ()=>{});
-const daemonRestartMock = vi.fn(async ()=>{});
-const daemonGetStatusMock = vi.fn(()=>({
-        running: false
-    }));
-const daemonGetLogFileMock = vi.fn(()=>"/tmp/wingman-gateway.log");
-const daemonGetPidFileMock = vi.fn(()=>"/tmp/wingman-gateway.pid");
-const daemonGetConfigFileMock = vi.fn(()=>"/tmp/wingman-gateway.json");
-let serverStartShouldReject = false;
-const createdServerConfigs = [];
-const serverStartMock = vi.fn(async ()=>{
-    if (serverStartShouldReject) throw new Error("synthetic gateway run stop");
-});
-const serverStopMock = vi.fn(async ()=>{});
-const loadConfigMock = vi.fn(()=>({
-        gateway: {
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "none"
-            }
-        }
-    }));
-vi.mock("../gateway/index.js", ()=>({
-        GatewayDaemon: class {
-            constructor(){
-                _define_property(this, "start", daemonStartMock);
-                _define_property(this, "stop", daemonStopMock);
-                _define_property(this, "restart", daemonRestartMock);
-                _define_property(this, "getStatus", daemonGetStatusMock);
-                _define_property(this, "getLogFile", daemonGetLogFileMock);
-                _define_property(this, "getPidFile", daemonGetPidFileMock);
-                _define_property(this, "getConfigFile", daemonGetConfigFileMock);
-            }
-        },
-        GatewayServer: class {
-            constructor(config){
-                _define_property(this, "start", serverStartMock);
-                _define_property(this, "stop", serverStopMock);
-                createdServerConfigs.push(config);
-            }
-        },
-        GatewayClient: class {
-        }
-    }));
-vi.mock("../cli/config/loader.js", ()=>({
-        WingmanConfigLoader: class {
-            constructor(){
-                _define_property(this, "loadConfig", loadConfigMock);
-            }
-        }
-    }));
-describe("gateway command workspace handling", ()=>{
-    let tempRoot;
-    let consoleLogSpy;
-    let consoleErrorSpy;
-    let processExitSpy;
-    const originalGatewayConfigEnv = process.env.WINGMAN_GATEWAY_CONFIG;
-    beforeEach(()=>{
-        tempRoot = mkdtempSync(join(tmpdir(), "wingman-gateway-command-"));
-        serverStartShouldReject = false;
-        createdServerConfigs.length = 0;
-        daemonStartMock.mockClear();
-        serverStartMock.mockClear();
-        loadConfigMock.mockClear();
-        consoleLogSpy = vi.spyOn(console, "log").mockImplementation(()=>{});
-        consoleErrorSpy = vi.spyOn(console, "error").mockImplementation(()=>{});
-        processExitSpy = vi.spyOn(process, "exit").mockImplementation((code)=>{
-            throw new Error(`process.exit(${code ?? "undefined"})`);
-        });
-        delete process.env.WINGMAN_GATEWAY_CONFIG;
-    });
-    afterEach(()=>{
-        consoleLogSpy.mockRestore();
-        consoleErrorSpy.mockRestore();
-        processExitSpy.mockRestore();
-        if (originalGatewayConfigEnv) process.env.WINGMAN_GATEWAY_CONFIG = originalGatewayConfigEnv;
-        else delete process.env.WINGMAN_GATEWAY_CONFIG;
-        if (existsSync(tempRoot)) rmSync(tempRoot, {
-            recursive: true,
-            force: true
-        });
-    });
-    it("passes workspace/configDir into daemon config on gateway start", async ()=>{
-        const workspace = join(tempRoot, "workspace");
-        const configDir = ".wingman-dev";
-        await executeGatewayCommand({
-            subcommand: "start",
-            args: [],
-            options: {}
-        }, {
-            workspace,
-            configDir
-        });
-        expect(daemonStartMock).toHaveBeenCalledTimes(1);
-        expect(daemonStartMock).toHaveBeenCalledWith(expect.objectContaining({
-            workspace,
-            configDir
-        }));
-    });
-    it("fills missing workspace/configDir when running from daemon config", async ()=>{
-        const workspace = join(tempRoot, "workspace");
-        const configDir = ".wingman-dev";
-        const daemonConfigPath = join(tempRoot, "gateway-daemon.json");
-        writeFileSync(daemonConfigPath, JSON.stringify({
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "none"
-            }
-        }));
-        process.env.WINGMAN_GATEWAY_CONFIG = daemonConfigPath;
-        serverStartShouldReject = true;
-        await expect(executeGatewayCommand({
-            subcommand: "run",
-            args: [],
-            options: {
-                daemon: true
-            }
-        }, {
-            workspace,
-            configDir
-        })).rejects.toThrow("process.exit(1)");
-        expect(createdServerConfigs).toHaveLength(1);
-        expect(createdServerConfigs[0]?.workspace).toBe(workspace);
-        expect(createdServerConfigs[0]?.configDir).toBe(configDir);
-    });
-});

package/dist/tests/gateway-http-security.test.cjs

@@ -1,318 +0,0 @@
-"use strict";
-var __webpack_exports__ = {};
-const external_node_fs_namespaceObject = require("node:fs");
-const external_node_os_namespaceObject = require("node:os");
-const external_node_path_namespaceObject = require("node:path");
-const external_vitest_namespaceObject = require("vitest");
-const server_cjs_namespaceObject = require("../gateway/server.cjs");
-const tempWorkspaces = [];
-function createGateway(config) {
-    const workspace = (0, external_node_fs_namespaceObject.mkdtempSync)((0, external_node_path_namespaceObject.join)((0, external_node_os_namespaceObject.tmpdir)(), "wingman-gateway-http-security-"));
-    tempWorkspaces.push(workspace);
-    return new server_cjs_namespaceObject.GatewayServer({
-        logLevel: "silent",
-        workspace,
-        configDir: ".wingman-http-security-config",
-        stateDir: ".wingman-http-security-state",
-        ...config
-    });
-}
-function getGatewayInternals(server) {
-    return server;
-}
-function createTestSocket(initialData) {
-    const messages = [];
-    const ws = {
-        data: {
-            ...initialData || {}
-        },
-        send: (serialized)=>{
-            messages.push(JSON.parse(serialized));
-            return 1;
-        },
-        close: ()=>{}
-    };
-    return {
-        ws,
-        messages
-    };
-}
-(0, external_vitest_namespaceObject.afterAll)(()=>{
-    for (const workspace of tempWorkspaces)(0, external_node_fs_namespaceObject.rmSync)(workspace, {
-        recursive: true,
-        force: true
-    });
-});
-(0, external_vitest_namespaceObject.describe)("gateway HTTP security", ()=>{
-    (0, external_vitest_namespaceObject.it)("requires auth for /api routes when token auth is enabled", async ()=>{
-        const server = createGateway({
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "token",
-                token: "test-token"
-            },
-            requireAuth: true
-        });
-        const internals = getGatewayInternals(server);
-        const unauthenticated = await internals.handleUiRequest(new Request("http://127.0.0.1:18789/api/providers"));
-        (0, external_vitest_namespaceObject.expect)(unauthenticated.status).toBe(401);
-        const authenticated = await internals.handleUiRequest(new Request("http://127.0.0.1:18789/api/providers", {
-            headers: {
-                Authorization: "Bearer test-token"
-            }
-        }));
-        (0, external_vitest_namespaceObject.expect)(authenticated.status).toBe(200);
-    });
-    (0, external_vitest_namespaceObject.it)("returns summarization settings from /api/config without auth", async ()=>{
-        const server = createGateway({
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "token",
-                token: "test-token"
-            },
-            requireAuth: true
-        });
-        const internals = getGatewayInternals(server);
-        const response = await internals.handleUiRequest(new Request("http://127.0.0.1:18789/api/config"));
-        (0, external_vitest_namespaceObject.expect)(response.status).toBe(200);
-        const payload = await response.json();
-        (0, external_vitest_namespaceObject.expect)(payload.summarization).toMatchObject({
-            enabled: true,
-            maxTokensBeforeSummary: 12000,
-            messagesToKeep: 8
-        });
-    });
-    (0, external_vitest_namespaceObject.it)("rejects disallowed origins and allows loopback development preflight", async ()=>{
-        const server = createGateway({
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "token",
-                token: "test-token"
-            },
-            requireAuth: true
-        });
-        const internals = getGatewayInternals(server);
-        const denied = await internals.handleUiRequest(new Request("http://127.0.0.1:18789/api/providers", {
-            method: "OPTIONS",
-            headers: {
-                Origin: "https://evil.example",
-                "Access-Control-Request-Method": "GET"
-            }
-        }));
-        (0, external_vitest_namespaceObject.expect)(denied.status).toBe(403);
-        const allowed = await internals.handleUiRequest(new Request("http://127.0.0.1:18789/api/providers", {
-            method: "OPTIONS",
-            headers: {
-                Origin: "http://localhost:5173",
-                "Access-Control-Request-Method": "GET"
-            }
-        }));
-        (0, external_vitest_namespaceObject.expect)(allowed.status).toBe(204);
-        (0, external_vitest_namespaceObject.expect)(allowed.headers.get("access-control-allow-origin")).toBe("http://localhost:5173");
-    });
-    (0, external_vitest_namespaceObject.it)("allows tauri loopback origin preflight for desktop clients", async ()=>{
-        const server = createGateway({
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "token",
-                token: "test-token"
-            },
-            requireAuth: true
-        });
-        const internals = getGatewayInternals(server);
-        const allowed = await internals.handleUiRequest(new Request("http://127.0.0.1:18789/api/providers", {
-            method: "OPTIONS",
-            headers: {
-                Origin: "tauri://localhost",
-                "Access-Control-Request-Method": "GET"
-            }
-        }));
-        (0, external_vitest_namespaceObject.expect)(allowed.status).toBe(204);
-        (0, external_vitest_namespaceObject.expect)(allowed.headers.get("access-control-allow-origin")).toBe("tauri://localhost");
-    });
-    (0, external_vitest_namespaceObject.it)("does not trust tailscale identity headers on non-loopback hosts", ()=>{
-        const server = createGateway({
-            host: "0.0.0.0",
-            port: 18789,
-            auth: {
-                mode: "token",
-                token: "tailscale-token",
-                allowTailscale: true
-            },
-            requireAuth: true
-        });
-        const internals = getGatewayInternals(server);
-        const bypassAttempt = internals.requireHttpAuth(new Request("http://127.0.0.1:18789/api/providers", {
-            headers: {
-                "tailscale-user-login": "attacker@example.com"
-            }
-        }));
-        (0, external_vitest_namespaceObject.expect)(bypassAttempt?.status).toBe(401);
-        const authenticated = internals.requireHttpAuth(new Request("http://127.0.0.1:18789/api/providers", {
-            headers: {
-                Authorization: "Bearer tailscale-token",
-                "tailscale-user-login": "attacker@example.com"
-            }
-        }));
-        (0, external_vitest_namespaceObject.expect)(authenticated).toBeNull();
-    });
-    (0, external_vitest_namespaceObject.it)("enforces bridge node capacity limits", async ()=>{
-        const server = createGateway({
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "none"
-            },
-            requireAuth: false,
-            maxNodes: 1
-        });
-        const internals = getGatewayInternals(server);
-        const registerBody = JSON.stringify({
-            type: "register",
-            payload: {
-                name: "bridge-node"
-            },
-            timestamp: Date.now()
-        });
-        const first = await internals.handleBridgeSend(new Request("http://127.0.0.1:18789/bridge/send", {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/json"
-            },
-            body: registerBody
-        }));
-        (0, external_vitest_namespaceObject.expect)(first.status).toBe(200);
-        const second = await internals.handleBridgeSend(new Request("http://127.0.0.1:18789/bridge/send", {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/json"
-            },
-            body: registerBody
-        }));
-        (0, external_vitest_namespaceObject.expect)(second.status).toBe(429);
-    });
-    (0, external_vitest_namespaceObject.it)("rejects malformed /api/nodes client IDs with 400", async ()=>{
-        const server = createGateway({
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "none"
-            },
-            requireAuth: false
-        });
-        const internals = getGatewayInternals(server);
-        const res = await internals.handleUiRequest(new Request("http://127.0.0.1:18789/api/nodes/%E0%A4%A", {
-            method: "PUT",
-            headers: {
-                "Content-Type": "application/json"
-            },
-            body: JSON.stringify({
-                enabled: true
-            })
-        }));
-        (0, external_vitest_namespaceObject.expect)(res.status).toBe(400);
-    });
-    (0, external_vitest_namespaceObject.it)("requires approved client identity for node execution capabilities", ()=>{
-        const server = createGateway({
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "none"
-            },
-            requireAuth: false
-        });
-        const internals = getGatewayInternals(server);
-        const blocked = createTestSocket({
-            authenticated: true
-        });
-        internals.handleRegister(blocked.ws, {
-            type: "register",
-            payload: {
-                name: "unpaired-node",
-                capabilities: [
-                    "system.run"
-                ]
-            },
-            timestamp: Date.now()
-        });
-        (0, external_vitest_namespaceObject.expect)(blocked.messages.some((message)=>"error" === message.type && message.payload?.code === "NODE_NOT_ENABLED")).toBe(true);
-    });
-    (0, external_vitest_namespaceObject.it)("rejects duplicate pending node request IDs", async ()=>{
-        const server = createGateway({
-            host: "127.0.0.1",
-            port: 18789,
-            auth: {
-                mode: "none"
-            },
-            requireAuth: false
-        });
-        const internals = getGatewayInternals(server);
-        const enableTarget = await internals.handleUiRequest(new Request("http://127.0.0.1:18789/api/nodes/desktop-target", {
-            method: "PUT",
-            headers: {
-                "Content-Type": "application/json"
-            },
-            body: JSON.stringify({
-                enabled: true,
-                name: "Desktop Target"
-            })
-        }));
-        (0, external_vitest_namespaceObject.expect)(enableTarget.status).toBe(200);
-        const target = createTestSocket({
-            authenticated: true,
-            clientId: "desktop-target",
-            clientType: "desktop"
-        });
-        internals.handleRegister(target.ws, {
-            type: "register",
-            payload: {
-                name: "target-node",
-                capabilities: [
-                    "system.notify"
-                ]
-            },
-            timestamp: Date.now()
-        });
-        const nodeId = target.messages.find((message)=>"ack" === message.type && "string" == typeof message.payload?.nodeId)?.payload?.nodeId;
-        (0, external_vitest_namespaceObject.expect)(nodeId).toBeTruthy();
-        const requester = createTestSocket({
-            authenticated: true,
-            clientId: "desktop-requester",
-            clientType: "desktop"
-        });
-        const duplicateRequestId = "dup-node-request-id";
-        internals.handleNodeRequest(requester.ws, {
-            type: "req:node",
-            id: duplicateRequestId,
-            targetNodeId: nodeId,
-            payload: {
-                tool: "system.notify",
-                args: {
-                    title: "test"
-                }
-            },
-            timestamp: Date.now()
-        });
-        internals.handleNodeRequest(requester.ws, {
-            type: "req:node",
-            id: duplicateRequestId,
-            targetNodeId: nodeId,
-            payload: {
-                tool: "system.notify",
-                args: {
-                    title: "test"
-                }
-            },
-            timestamp: Date.now()
-        });
-        (0, external_vitest_namespaceObject.expect)(requester.messages.some((message)=>"error" === message.type && message.payload?.code === "DUPLICATE_REQUEST_ID")).toBe(true);
-    });
-});
-for(var __rspack_i in __webpack_exports__)exports[__rspack_i] = __webpack_exports__[__rspack_i];
-Object.defineProperty(exports, '__esModule', {
-    value: true
-});

package/dist/tests/gateway-http-security.test.d.ts

@@ -1 +0,0 @@
-export {};