kiku-agent 1.3.0 → 1.3.2

package/server/agent/tests/bilibiliEmbed.test.js

@@ -0,0 +1,251 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+
+import {
+  buildBilibiliEmbedUrl,
+  buildBilibiliIframeHtml,
+  normalizeBilibiliIframeSrc,
+  normalizeBilibiliPic,
+  fetchBilibiliVideoInfo,
+  isBrokenBilibiliIframeSrc,
+  parseBilibiliViewPayload,
+  parseBilibiliSearchPayload,
+} from '../webSearch.js';
+
+const BROKEN_SRC = '//://bilibili.com';
+const SAMPLE_BVID = 'BV1xx411c7mD';
+
+test('broken src "//://bilibili.com" is detected as invalid', () => {
+  assert.equal(isBrokenBilibiliIframeSrc(BROKEN_SRC), true);
+  assert.equal(isBrokenBilibiliIframeSrc(''), true);
+  assert.equal(isBrokenBilibiliIframeSrc('//player.bilibili.com/player.html'), true);
+  assert.equal(isBrokenBilibiliIframeSrc('https://www.bilibili.com/video/' + SAMPLE_BVID), true);
+});
+
+test('builder produces the canonical player URL (never the broken form)', () => {
+  const url = buildBilibiliEmbedUrl(SAMPLE_BVID);
+  assert.ok(url.startsWith('https://player.bilibili.com/player.html?bvid='));
+  assert.ok(url.includes(`bvid=${SAMPLE_BVID}`));
+  assert.ok(!url.includes('//://'));
+
+  const parsed = new URL(url);
+  assert.equal(parsed.hostname, 'player.bilibili.com');
+  assert.equal(parsed.searchParams.get('bvid'), SAMPLE_BVID);
+
+  assert.equal(buildBilibiliEmbedUrl('not-a-bvid'), '');
+  assert.equal(buildBilibiliEmbedUrl(''), '');
+  assert.ok(buildBilibiliEmbedUrl(SAMPLE_BVID, { autoplay: true }).includes('autoplay=1'));
+});
+
+test('normalizer repairs the reported broken snippet given a bvid', () => {
+  const fixed = normalizeBilibiliIframeSrc(BROKEN_SRC, SAMPLE_BVID);
+  assert.equal(fixed, buildBilibiliEmbedUrl(SAMPLE_BVID));
+  assert.ok(!fixed.includes('//://'));
+
+ 
+  const legacy = '//player.bilibili.com/player.html?bvid=' + SAMPLE_BVID + '&page=1';
+  assert.equal(normalizeBilibiliIframeSrc(legacy), buildBilibiliEmbedUrl(SAMPLE_BVID));
+
+ 
+  assert.equal(normalizeBilibiliIframeSrc(BROKEN_SRC), '');
+});
+
+test('builder preserves aid/cid/page (official embed params)', () => {
+  const url = buildBilibiliEmbedUrl('BV1PK4y1b7dt', { aid: '883409884', cid: '201056987', page: 1 });
+  const parsed = new URL(url);
+  assert.equal(parsed.hostname, 'player.bilibili.com');
+  assert.equal(parsed.searchParams.get('bvid'), 'BV1PK4y1b7dt');
+  assert.equal(parsed.searchParams.get('aid'), '883409884');
+  assert.equal(parsed.searchParams.get('cid'), '201056987');
+  assert.equal(parsed.searchParams.get('page'), '1');
+ 
+  const clean = buildBilibiliEmbedUrl('BV1PK4y1b7dt', { aid: 'x";evil', cid: '' });
+  assert.ok(!clean.includes('evil'));
+  assert.equal(new URL(clean).searchParams.get('aid'), null);
+});
+
+test('user-reported snippet: protocol-relative src with aid/bvid/cid is upgraded with params kept', () => {
+  const userSrc = '//player.bilibili.com/player.html?aid=883409884&bvid=BV1PK4y1b7dt&cid=201056987&page=1';
+  const fixed = normalizeBilibiliIframeSrc(userSrc);
+  assert.ok(fixed.startsWith('https://player.bilibili.com/player.html?'));
+  const parsed = new URL(fixed);
+  assert.equal(parsed.searchParams.get('bvid'), 'BV1PK4y1b7dt');
+  assert.equal(parsed.searchParams.get('aid'), '883409884');
+  assert.equal(parsed.searchParams.get('cid'), '201056987');
+
+  assert.equal(normalizeBilibiliIframeSrc('https://www.bilibili.com/video/BV1PK4y1b7dt'), '');
+});
+
+test('iframe HTML keeps legacy attrs but points at the fixed src', () => {
+  const html = buildBilibiliIframeHtml(SAMPLE_BVID, { title: 'Test Clip', autoplay: true });
+  assert.match(html, /<iframe /);
+  assert.match(html, /src="https:\/\/player\.bilibili\.com\/player\.html\?bvid=/);
+  assert.ok(!html.includes('src="//player.bilibili.com'));
+  for (const attr of ['scrolling="no"', 'border="0"', 'frameborder="no"', 'framespacing="0"', 'allowfullscreen']) {
+    assert.ok(html.includes(attr), `iframe should contain ${attr}`);
+  }
+ 
+  assert.match(html, /width="100%"/);
+  assert.match(html, /height="500"/);
+  assert.match(html, /aspect-ratio:16\/9/);
+  const userHtml = buildBilibiliIframeHtml('BV1PK4y1b7dt', { aid: '883409884', cid: '201056987', page: 1 });
+  assert.ok(userHtml.includes('aid=883409884'));
+  assert.ok(userHtml.includes('cid=201056987'));
+  assert.equal(buildBilibiliIframeHtml('bad-id'), '');
+});
+
+test('CSP frame-src allows the Bilibili player everywhere it is served', () => {
+  const root = dirname(fileURLToPath(import.meta.url));
+  const repoRoot = join(root, '..', '..', '..');
+  const vercel = readFileSync(join(repoRoot, 'vercel.json'), 'utf8');
+  const webchatSecurity = readFileSync(join(repoRoot, 'server', 'web-chat', 'core', 'security.js'), 'utf8');
+  const apiRouter = readFileSync(join(repoRoot, 'server', 'apiRouter.js'), 'utf8');
+
+  for (const [name, source] of [['vercel.json', vercel], ['web-chat/core/security.js', webchatSecurity], ['server/apiRouter.js', apiRouter]]) {
+    const frameSrc = source.match(/frame-src[^;]*/)?.[0] || '';
+    assert.ok(frameSrc.includes('https://player.bilibili.com'), `${name} frame-src must allow the Bilibili player`);
+    assert.ok(frameSrc.includes('https://www.bilibili.com'), `${name} frame-src must allow the Bilibili mobile-player redirect`);
+  
+    assert.ok(frameSrc.includes('https://www.youtube-nocookie.com'), `${name} frame-src must keep YouTube`);
+  }
+
+ 
+  assert.ok(vercel.includes('frame-src https://www.youtube.com https://www.youtube-nocookie.com https://player.bilibili.com'));
+});
+
+test('cover pic URLs are upgraded to https (mixed-content safe)', () => {
+  assert.equal(normalizeBilibiliPic('http://i0.hdslb.com/bfs/archive/abc.jpg'), 'https://i0.hdslb.com/bfs/archive/abc.jpg');
+  assert.equal(normalizeBilibiliPic('//i0.hdslb.com/bfs/archive/abc.jpg'), 'https://i0.hdslb.com/bfs/archive/abc.jpg');
+  assert.equal(normalizeBilibiliPic('https://i0.hdslb.com/bfs/archive/abc.jpg'), 'https://i0.hdslb.com/bfs/archive/abc.jpg');
+  assert.equal(normalizeBilibiliPic(''), '');
+  assert.equal(normalizeBilibiliPic('not a url'), '');
+});
+
+test('fetchBilibiliVideoInfo rejects bad bvids without network', async () => {
+  for (const bad of ['', 'BVshort', 'av12345', 'https://www.bilibili.com/video/BV1PK4y1b7dt']) {
+    const res = await fetchBilibiliVideoInfo(bad);
+    assert.equal(res.status, 'error');
+    assert.match(res.message, /bvid/i);
+  }
+});
+
+test('parseBilibiliViewPayload maps the view API payload with https pic and string cid', () => {
+  const payload = parseBilibiliViewPayload({
+    code: 0,
+    data: {
+      bvid: SAMPLE_BVID,
+      title: 'Ju Jingyi <em class=&quot;keyword&quot;>MV</em> &amp; more',
+      pic: '//i0.hdslb.com/bfs/archive/cover1.jpg',
+      owner: { name: 'UP Main' },
+      stat: { view: 12345, danmaku: 67 },
+      duration: 210,
+      pubdate: 1750000000,
+      cid: 987654321,
+    },
+  });
+
+  assert.equal(payload.title, 'Ju Jingyi MV & more');
+  assert.equal(payload.pic, 'https://i0.hdslb.com/bfs/archive/cover1.jpg');
+  assert.equal(payload.author, 'UP Main');
+  assert.equal(payload.playCount, 12345);
+  assert.equal(payload.cid, '987654321');
+  assert.equal(payload.duration, 210);
+
+
+  assert.equal(parseBilibiliViewPayload({ code: -352, message: 'risk control' }), null);
+  assert.equal(parseBilibiliViewPayload({ code: 0, data: null }), null);
+  assert.equal(parseBilibiliViewPayload(null), null);
+});
+
+test('parseBilibiliSearchPayload accepts ONLY the exact bvid result', () => {
+  const json = {
+    code: 0,
+    data: {
+      result: [
+        { bvid: 'BV1zzz411zzzz', title: '<em class="keyword">BV1NG411y7Tc</em> lookalike clip', pic: '//i0.hdslb.com/bfs/archive/wrong.jpg', author: 'Other UP', play: 9 },
+        { bvid: 'BV1NG411y7Tc', title: '【鞠婧祎】real clip &amp; 精剪', pic: '//i0.hdslb.com/bfs/archive/right.jpg', author: 'Ju Jingyi Studio', play: 456 },
+      ],
+    },
+  };
+
+  const picked = parseBilibiliSearchPayload(json, 'BV1NG411y7Tc');
+  assert.ok(picked);
+  assert.equal(picked.title, '【鞠婧祎】real clip & 精剪');
+  assert.equal(picked.pic, 'https://i0.hdslb.com/bfs/archive/right.jpg');
+  assert.equal(picked.author, 'Ju Jingyi Studio');
+  assert.equal(picked.playCount, 456);
+
+
+  assert.equal(parseBilibiliSearchPayload({ code: 0, data: { result: json.data.result.slice(0, 1) } }, 'BV1NG411y7Tc'), null);
+  assert.equal(parseBilibiliSearchPayload({ code: 0, data: { result: [] } }, 'BV1NG411y7Tc'), null);
+  assert.equal(parseBilibiliSearchPayload({ code: -412 }, 'BV1NG411y7Tc'), null);
+  assert.equal(parseBilibiliSearchPayload(null, 'BV1NG411y7Tc'), null);
+});
+
+test('web-chat card keeps the video part (?p=) in the watch link', () => {
+  const root = dirname(fileURLToPath(import.meta.url));
+  const clientPath = join(root, '..', '..', 'web-chat', 'ui', 'scripts', 'client.js');
+  const source = readFileSync(clientPath, 'utf8');
+
+  
+  assert.match(source, /bilibili\\\.com\\\/video\\\/\(BV\[0-9a-zA-Z\]\{10\}\)\(\\\?\[/);
+  assert.ok(source.includes('pageFromUrl'));
+ 
+  assert.ok(!source.includes('data-page='));
+});
+
+test('bilibili card extraction enriches from tool payloads and answers linkify bare BV ids', () => {
+  const root = dirname(fileURLToPath(import.meta.url));
+  const clientPath = join(root, '..', '..', 'web-chat', 'ui', 'scripts', 'client.js');
+  const source = readFileSync(clientPath, 'utf8');
+
+ 
+  assert.match(source, /function upsertBili\(/);
+  assert.match(source, /existing\.author === 'UP 主'/);
+ 
+  assert.match(source, /\(b\.playCount \|\| 0\) - \(a\.playCount \|\| 0\)/);
+ 
+  assert.match(source, /function linkifyBareBilibiliIds\(/);
+  assert.match(source, /formatMarkdown\(linkifyBareBilibiliIds\(cleanAnswerText\)\)/);
+});
+
+test('GET /api/bilibili/cover validates bvid (no network needed)', async () => {
+  const { startWebChatServer, stopWebChatServer } = await import('../../webChatServer.js');
+  await startWebChatServer({ port: 3311 });
+  try {
+    const missing = await fetch('http://localhost:3311/api/bilibili/cover');
+    assert.equal(missing.status, 400);
+
+    const bad = await fetch('http://localhost:3311/api/bilibili/cover?bvid=nope');
+    assert.equal(bad.status, 400);
+
+    const wrongMethod = await fetch('http://localhost:3311/api/bilibili/cover?bvid=BV1PK4y1b7dt', { method: 'POST' });
+    assert.equal(wrongMethod.status, 405);
+  } finally {
+    await stopWebChatServer();
+  }
+});
+
+test('web-chat Bilibili card is iframe-free: cover + open-on-Bilibili link', () => {
+  const root = dirname(fileURLToPath(import.meta.url));
+  const clientPath = join(root, '..', '..', 'web-chat', 'ui', 'scripts', 'client.js');
+  const source = readFileSync(clientPath, 'utf8');
+
+ 
+  assert.ok(!source.includes('player.bilibili.com/player.html'), 'client must not build player iframes');
+  assert.ok(!source.includes('loadBilibiliIframe'));
+  assert.ok(!source.includes('data-bilibili-facade'));
+  assert.ok(!source.includes('chat-bilibili-iframe'));
+ 
+  assert.match(source, /<a class="bilibili-card-media" href="' \+ escapeHtml\(watchUrl\)/);
+ 
+  assert.match(source, /function loadBilibiliCover\(/);
+  assert.ok(source.includes('/api/bilibili/cover?bvid='));
+  assert.ok(source.includes('bilibili-facade-thumb'));
+  assert.match(source, /closest\('\[data-bilibili-cover\]'\)/);
+ 
+  assert.match(source, /!wrap\.querySelector\('\.bilibili-facade-thumb'\)/);
+});

package/server/agent/tests/catalogSync.test.js

@@ -0,0 +1,130 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { worksData as richWorks } from '../../../src/data/worksData.js';
+import { discographyData as richDiscography } from '../../../src/data/discographyData.js';
+import { brandsData as richBrands } from '../../../src/data/brandsData.js';
+import { awardsData as richAwards } from '../../../src/data/awardsData.js';
+import { timelineData as richTimeline } from '../../../src/data/timelineData.js';
+import { profileData as richProfile } from '../../../src/data/profileData.js';
+
+import { worksData as mcpWorks } from '../../mcp/data/works.js';
+import { discographyData as mcpDiscography } from '../../mcp/data/discography.js';
+import { brandsData as mcpBrands } from '../../mcp/data/brands.js';
+import { awardsData as mcpAwards } from '../../mcp/data/awards.js';
+import { timelineData as mcpTimeline } from '../../mcp/data/timeline.js';
+import { profileData as mcpProfile } from '../../mcp/data/profile.js';
+
+import {
+  getUnifiedProfile,
+  getUnifiedWorks,
+  getUnifiedDiscography,
+  getUnifiedAwards,
+  getUnifiedBrands,
+  getUnifiedTimeline
+} from '../../mcp/dataAdapter.js';
+
+import { readResource } from '../../mcp/resources.js';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const rootDir = resolve(__dirname, '../../../');
+
+test('Catalog SSOT: every work in src/data/worksData.js matches server/mcp/data/works.js', () => {
+  assert.ok(richWorks.length > 0);
+  assert.ok(mcpWorks.length >= richWorks.length);
+
+  for (const richItem of richWorks) {
+    const matched = mcpWorks.find(m => m.id === richItem.id || m.alias === richItem.id);
+    assert.ok(
+      matched,
+      `Work "${richItem.id}" (${richItem.titleEn || richItem.titleTh}) in src/data/worksData.js must exist in server/mcp/data/works.js`
+    );
+    assert.equal(matched.year, richItem.year);
+    assert.ok(matched.titleCn, `Work "${richItem.id}" should have a Chinese title`);
+    assert.ok(matched.titleEn, `Work "${richItem.id}" should have an English title`);
+  }
+});
+
+test('Catalog SSOT: discography covers major 2026 releases and career landmarks', () => {
+  const mcpTitles = mcpDiscography.map(s => (s.titleEn || s.titleCn || '').toLowerCase());
+
+  assert.ok(mcpTitles.some(t => t.includes('find the way')));
+  assert.ok(mcpTitles.some(t => t.includes('not suffering') || t.includes('不苦')));
+  assert.ok(mcpTitles.some(t => t.includes('eternal fragrance') || t.includes('千香')));
+  assert.ok(mcpTitles.some(t => t.includes('everyday') || t.includes('每一天')));
+});
+
+test('Catalog SSOT: brand endorsements synchronize global ambassador contracts', () => {
+  const mcpBrandIds = mcpBrands.map(b => b.id);
+
+  assert.ok(mcpBrandIds.includes('prsr'));
+  assert.ok(mcpBrandIds.includes('versace'));
+  assert.ok(mcpBrandIds.includes('lafang'));
+  assert.ok(mcpBrandIds.includes('tutucare'));
+  assert.ok(mcpBrandIds.includes('dafuyan'));
+});
+
+test('Unified DataAdapter: correctly extracts and standardizes all domain models', () => {
+  const profile = getUnifiedProfile();
+  assert.equal(profile.nameEn, 'Ju Jingyi');
+  assert.equal(profile.nameCn, '鞠婧祎');
+  assert.ok(profile.fandomName.includes('Miju'));
+
+  const works = getUnifiedWorks();
+  assert.equal(works.length, richWorks.length);
+  assert.ok(works.every(w => w.id && w.titleEn && w.year));
+
+  const discography = getUnifiedDiscography();
+  assert.ok(discography.length >= 20);
+
+  const awards = getUnifiedAwards();
+  assert.ok(awards.length >= 10);
+
+  const brands = getUnifiedBrands();
+  assert.ok(brands.length >= 10);
+
+  const timeline = getUnifiedTimeline();
+  assert.ok(timeline.length >= 10);
+});
+
+test('MCP Resource: kiku://catalog generates complete unified summary without errors', async () => {
+  const res = await readResource('kiku://catalog');
+  assert.equal(res.contents.length, 1);
+  assert.equal(res.contents[0].mimeType, 'application/json');
+
+  const catalog = JSON.parse(res.contents[0].text);
+  assert.equal(catalog.artist, 'Ju Jingyi');
+  assert.ok(catalog.totalWorks >= 18);
+  assert.ok(catalog.totalSongs >= 25);
+  assert.ok(catalog.featuredWorks.length > 0);
+  assert.ok(catalog.globalBrands.length > 0);
+});
+
+test('Packaging & Bins: package.json has valid bin wrappers and files manifest', () => {
+  const pkgPath = resolve(rootDir, 'package.json');
+  assert.ok(existsSync(pkgPath));
+
+  const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+  assert.equal(pkg.name, 'kiku-agent');
+  assert.ok(pkg.bin['kiku-agent'], 'kiku-agent bin must be defined');
+  assert.ok(pkg.bin['kiku-mcp'], 'kiku-mcp bin must be defined');
+
+  const cliPath = resolve(rootDir, pkg.bin['kiku-agent']);
+  assert.ok(existsSync(cliPath), `CLI entry "${cliPath}" must exist`);
+  const cliContent = readFileSync(cliPath, 'utf8');
+  assert.ok(cliContent.startsWith('#!/usr/bin/env node'), 'CLI must start with shebang');
+
+  const mcpPath = resolve(rootDir, pkg.bin['kiku-mcp']);
+  assert.ok(existsSync(mcpPath), `MCP entry "${mcpPath}" must exist`);
+  const mcpContent = readFileSync(mcpPath, 'utf8');
+  assert.ok(mcpContent.startsWith('#!/usr/bin/env node'), 'MCP must start with shebang');
+
+  assert.ok(pkg.files.includes('src/data/**/*.js'), 'package.json files must include src/data');
+  const covers = (rel) => pkg.files.some((p) => p === 'server/**/*' || p === rel || (rel === 'server/agent/*.js' && p === 'server/**/*.js') || (rel === 'server/mcp/*.js' && (p === 'server/**/*.js' || p === 'server/mcp/**/*.js')));
+  assert.ok(covers('server/agent/*.js'), 'package.json files must include server/agent (broad server/**/* also satisfies this)');
+  assert.ok(covers('server/mcp/*.js'), 'package.json files must include server/mcp (broad server/**/* also satisfies this)');
+});

package/server/agent/tests/citations.test.js

@@ -0,0 +1,180 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { extractCitations, formatCitationsBlock, resolveCitationReference } from '../citations.js';
+import { routeCommand } from '../commands.js';
+
+test('extractCitations: correctly extracts and deduplicates works from search_works', () => {
+  const tools = [
+    {
+      name: 'search_works',
+      result: {
+        count: 2,
+        works: [
+          {
+            id: 'legend-of-yunxi',
+            titleTh: 'ตำนานหยุนซี มเหสียอดอัจฉริยะแห่งพิษ',
+            titleCn: '芸汐传',
+            category: 'ซีรีส์โบราณ',
+            year: 2018,
+            role: 'หานอวิ๋นซี (Han Yunxi)'
+          },
+          {
+            id: 'in-blossom',
+            titleTh: 'บุปผารักอลวน',
+            titleCn: '花间令',
+            category: 'ซีรีส์สืบสวนโบราณ',
+            year: 2024,
+            role: 'หยางไฉ่เวย / ซ่างกวนจื่อ'
+          }
+        ]
+      }
+    }
+  ];
+
+  const answer = 'จวีจิ้งอี มีผลงานซีรีส์ชื่อดังอย่าง ตำนานหยุนซี (芸汐传) รับบทเป็น หานอวิ๋นซี';
+  const citations = extractCitations(answer, tools);
+
+  assert.equal(citations.length, 1);
+  assert.equal(citations[0].id, 1);
+  assert.equal(citations[0].type, 'work');
+  assert.match(citations[0].title, /ตำนานหยุนซี/);
+  assert.equal(citations[0].year, 2018);
+  assert.equal(citations[0].verified, true);
+});
+
+test('extractCitations: extracts discography, timeline, and web search results', () => {
+  const tools = [
+    {
+      name: 'search_discography',
+      result: {
+        songs: [
+          {
+            title: 'Everyday',
+            titleTh: 'ทุกๆ วัน',
+            category: 'Single',
+            year: 2016
+          }
+        ]
+      }
+    },
+    {
+      name: 'get_career_timeline',
+      result: {
+        timeline: [
+          {
+            year: 2013,
+            event: 'เดบิวต์ในฐานะสมาชิกรุ่นที่ 2 ของ SNH48'
+          }
+        ]
+      }
+    },
+    {
+      name: 'web_search',
+      result: {
+        results: [
+          {
+            title: 'Ju Jingyi Studio Official Statement',
+            url: 'https://weibo.com/jujingyi/status/12345'
+          }
+        ]
+      }
+    }
+  ];
+
+  const answer = 'เธอเดบิวต์ในปี 2013 กับ SNH48 และมีเพลง Everyday รวมถึงแถลงการณ์อย่างเป็นทางการ';
+  const citations = extractCitations(answer, tools);
+
+  assert.equal(citations.length, 3);
+  assert.equal(citations[0].id, 1);
+  assert.equal(citations[0].type, 'song');
+  assert.equal(citations[1].id, 2);
+  assert.equal(citations[1].type, 'timeline');
+  assert.equal(citations[2].id, 3);
+  assert.equal(citations[2].type, 'web');
+  assert.equal(citations[2].source, 'weibo.com');
+});
+
+test('extractCitations: returns empty array for empty inputs or no matches', () => {
+  assert.deepEqual(extractCitations('', []), []);
+  assert.deepEqual(extractCitations('ข้อความทั่วไป', null), []);
+});
+
+test('formatCitationsBlock: formats citations in Thai, English, and Chinese', () => {
+  const citations = [
+    {
+      id: 1,
+      title: 'บุปผารักอลวน (花间令)',
+      category: 'ซีรีส์',
+      year: 2024,
+      source: 'catalog:works (search_works)',
+      verified: true
+    },
+    {
+      id: 2,
+      title: 'Weibo News',
+      url: 'https://weibo.com/test',
+      category: 'เว็บข่าว',
+      verified: true
+    }
+  ];
+
+  const thBlock = formatCitationsBlock(citations, { lang: 'th' });
+  assert.match(thBlock, /แหล่งข้อมูลและหลักฐานอ้างอิง/);
+  assert.match(thBlock, /\[1\] บุปผารักอลวน/);
+  assert.match(thBlock, /\[2024\]/);
+  assert.match(thBlock, /\[2\] Weibo News/);
+  assert.match(thBlock, /https:\/\/weibo.com\/test/);
+
+  const enBlock = formatCitationsBlock(citations, { lang: 'en' });
+  assert.match(enBlock, /Sources & Evidence Citations/);
+
+  const zhBlock = formatCitationsBlock(citations, { lang: 'zh' });
+  assert.match(zhBlock, /参考来源与证据引用/);
+
+  assert.equal(formatCitationsBlock([]), '');
+});
+
+test('resolveCitationReference: resolves bracket notation, hash, number, and entity name', () => {
+  const citations = [
+    { id: 1, title: 'ตำนานหยุนซี (芸汐传)', year: 2018 },
+    { id: 2, title: 'บุปผารักอลวน (In Blossom)', year: 2024 },
+    { id: 3, title: 'เพลง Everyday', year: 2016 }
+  ];
+
+  const res1 = resolveCitationReference('เล่าเรื่องย่อของ [1] ให้ฟังหน่อย', citations);
+  assert.equal(res1?.id, 1);
+  assert.equal(res1?.year, 2018);
+
+  const res2 = resolveCitationReference('ขอรายละเอียดของ #2 เพิ่มเติม', citations);
+  assert.equal(res2?.id, 2);
+
+  const res3 = resolveCitationReference('3', citations);
+  assert.equal(res3?.id, 3);
+
+  const resTitle = resolveCitationReference('บุปผารักอลวน มีกี่ตอน', citations);
+  assert.equal(resTitle?.id, 2);
+
+  const notFound = resolveCitationReference('ไม่มีในรายการ', citations);
+  assert.equal(notFound, null);
+});
+
+test('/sources command: displays active grounded citations when available', async () => {
+  const mockAgent = {
+    lastCitations: [
+      {
+        id: 1,
+        title: 'ตำนานหยุนซี',
+        category: 'ซีรีส์',
+        year: 2018,
+        tool: 'search_works'
+      }
+    ]
+  };
+
+  const status = await routeCommand('/sources', {
+    agent: mockAgent,
+    setIsProcessing: () => {}
+  });
+
+  assert.equal(status, 'HANDLED');
+});