kiku-agent 1.3.0 → 1.3.2

package/server/agent/tests/webChatInspection.test.js

@@ -0,0 +1,300 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { getWebChatHtml } from '../../webChatHtml.js';
+import { executeDirectCatalogKnowledge, makeInspectableToolPayload } from '../../webChatServer.js';
+
+test('web chat tool payloads redact secrets and bound large values', () => {
+  const payload = makeInspectableToolPayload({
+    query: 'In Blossom',
+    apiKey: 'must-not-leak',
+    nested: { token: 'must-not-leak-either' },
+    values: Array.from({ length: 5 }, (_, index) => index)
+  }, { maxArrayItems: 2 });
+
+  assert.equal(payload.query, 'In Blossom');
+  assert.equal(payload.apiKey, '[redacted]');
+  assert.equal(payload.nested.token, '[redacted]');
+  assert.deepEqual(payload.values, [0, 1, '… [ตัดอีก 3 รายการ]']);
+});
+
+test('direct catalog fallback retains inspectable tool input and result', async () => {
+  const response = await executeDirectCatalogKnowledge('ผลงานซีรีส์ In Blossom');
+  const tool = response.tools.find(item => item.name === 'search_works');
+
+  assert.ok(tool);
+  assert.equal(typeof tool.input, 'object');
+  assert.equal(typeof tool.result, 'object');
+  assert.ok(Number.isFinite(tool.durationMs));
+});
+
+test('web chat HTML isolates answer text and renders expandable tool details', () => {
+  const html = getWebChatHtml();
+
+  assert.match(html, /class="answer-content"/);
+  assert.match(html, /class="tool-inspector"/);
+ 
+  assert.match(html, /renderToolParamChips\(t\)/);
+  assert.match(html, /summarizeToolResult\(t\)/);
+  assert.match(html, /tool-call-line/);
+  assert.match(html, /tool-result-strip tool-tone-/);
+  assert.match(html, /tool-param-chip/);
+  assert.match(html, /function renderJsonTree\(/);
+  assert.match(html, /function copyToolJson\(/);
+  assert.match(html, /ข้อมูลดิบ \(JSON\)/);
+  assert.match(html, /\.tool-raw-json\s*\{[^}]*max-width:\s*100%/);
+  assert.match(html, /\.tool-raw-json\s*\{[^}]*box-sizing:\s*border-box/);
+  assert.match(html, /\.tool-raw-json\s*\{[^}]*overflow:\s*hidden/);
+  assert.match(html, /\.tool-json-tree\s*\{[^}]*word-break:\s*break-word/);
+  assert.match(html, /\.tool-view-switch-row\s*\{[^}]*flex-wrap:\s*wrap/);
+ 
+  assert.doesNotMatch(html, /tool-raw-json[^\n]*106\.38/);
+  assert.doesNotMatch(html, /\.tool-inspector:has\(\.tool-raw-json\[open\]\)\s*\{\s*overflow:\s*visible/);
+
+  assert.doesNotMatch(html, /class="tool-payload"/);
+  assert.doesNotMatch(html, /toggleInspectorJsonView/);
+  assert.match(html, /extractQuoteFromAnswer\(answerRoot\)/);
+  assert.match(html, /restoreInspectorState\(bubble/);
+  assert.match(html, /--tool-accent:\s*#0369a1/);
+  assert.match(html, /sessionId:\s*currentSessionId/);
+  assert.match(html, /chatHistory\.slice\(0, -1\)\.slice\(-24\)/);
+  assert.doesNotMatch(html, /Deep Reasoning Trace/);
+});
+
+test('generated web chat inline scripts remain syntactically valid', () => {
+  const html = getWebChatHtml();
+  const scripts = Array.from(html.matchAll(/<script(?:\s[^>]*)?>([\s\S]*?)<\/script>/gi), match => match[1]);
+
+  assert.ok(scripts.length > 0);
+  scripts.forEach((script) => {
+    assert.doesNotThrow(() => new Function(script));
+  });
+});
+
+test('drama cards use matching OST video ids and hide unavailable tracks', () => {
+  const html = getWebChatHtml();
+
+  assert.match(html, /youtubeId: 'oEgxqij58LQ',[\s\S]*?ostTitle: '叹云兮 \(Tan Yun Xi\) OST'/);
+  assert.match(html, /youtubeId: '-vf6jU96WI4',[\s\S]*?ostTitle: '千年等一回 \(A Millennium Wait\)'/);
+  assert.match(html, /youtubeId: '9ke3efb9U7A',[\s\S]*?ostTitle: '芙蓉 \(Fu Rong\) OST'/);
+  assert.match(html, /youtubeId: 'lzDP2MfP3eA',[\s\S]*?ostTitle: '如纱 \(Ru Sha\) OST'/);
+  assert.match(html, /drama\.youtubeId && drama\.ostTitle/);
+  assert.doesNotMatch(html, /youtubeId: 'qjA7K9pM_U8'/);
+});
+
+test('web chat html registers sw.js and sw.js is accessible', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /navigator\.serviceWorker\.register\('\/sw\.js'\)/);
+});
+
+test('floating mini player contains disc dock, progress bar, video toggle, and jukebox controls', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /id="mini-player-dock"/);
+  assert.match(html, /id="mini-player-card"/);
+  assert.match(html, /id="btn-mini-disc"/);
+  assert.match(html, /id="mini-disc-progress-circle"/);
+  assert.match(html, /id="mini-player-progressbar"/);
+  assert.match(html, /onclick="toggleMiniPlayerShuffle\(\)"/);
+  assert.match(html, /onclick="toggleMiniPlayerRepeat\(\)"/);
+  assert.match(html, /onclick="toggleMiniPlayerVideo\(\)"/);
+  assert.match(html, /id="mini-player-video-frame-container"/);
+  assert.match(html, /onclick="nextMiniPlayerTrack\(\)"/);
+  assert.match(html, /onclick="prevMiniPlayerTrack\(\)"/);
+  assert.match(html, /JU_JINGYI_PLAYLIST/);
+});
+
+test('renderFollowUpSuggestions creates intelligent contextual follow-up topic chips', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /function renderFollowUpSuggestions\(botGroup, answerText, userQuery, serverSuggestions\)/);
+  assert.match(html, /follow-up-suggestions/);
+  assert.match(html, /💎 บทบาท Versace/);
+  assert.match(html, /👗 แบรนด์อื่นๆ ทั้งหมด/);
+  assert.match(html, /🌸 ตัวตนกับรูปลักษณ์/);
+  assert.match(html, /🌿 เสน่ห์หานหยุนซี/);
+});
+
+test('song queries render embedded iframes and tool visual mini iframes', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /function extractSongEmbedsFromContext/);
+  assert.match(html, /function renderSongEmbedCard/);
+  assert.match(html, /chat-rich-songs-container/);
+  assert.match(html, /chat-song-iframe/);
+  assert.match(html, /https:\/\/www\.youtube-nocookie\.com\/embed\//);
+  assert.match(html, /tool-card-iframe-wrap/);
+  assert.match(html, /tool-card-mini-iframe/);
+});
+
+test('agent interactive question cards detect questions and render action pills', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /function detectAgentInteractiveQuestion/);
+  assert.match(html, /function renderAgentQuestionCard/);
+  assert.match(html, /agent-interactive-question-card/);
+  assert.match(html, /agent-q-btn btn-primary-pill/);
+  assert.match(html, /submitCustomAgentContinuation/);
+});
+
+test('luxury Voice HUD renders live orb, visualizer canvas, and direct action controls', () => {  const html = getWebChatHtml();
+  assert.match(html, /id="voice-hud"/);
+  assert.match(html, /class="voice-live-orb"/);
+  assert.match(html, /id="voice-canvas"/);
+  assert.match(html, /id="voice-hud-text"/);
+  assert.match(html, /id="voice-lang-badge"/);
+  assert.match(html, /onclick="sendVoiceQueryDirectly\(\)"/);
+  assert.match(html, /onclick="cancelSpeechRecognition\(\)"/);
+  assert.match(html, /function startVoiceAudioVisualizer/);
+  assert.match(html, /function stopVoiceAudioVisualizer/);
+});
+
+test('song playback timestamp syncs and mutually pauses between chat embed and mini player', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /function openMiniPlayerFromCard\(btnEl, videoIdOrUrl, title\)/);
+  assert.match(html, /function pauseAllChatSongIframes\(\)/);
+  assert.match(html, /function pauseMiniPlayer\(\)/);
+  assert.match(html, /function handleChatIframeLoad\(iframe\)/);
+  assert.match(html, /handleChatIframeLoad\(this\)/);
+  assert.match(html, /openMiniPlayerFromCard\(this/);
+  assert.match(html, /chatIframeTimes/);
+  assert.match(html, /&start=/);
+  assert.match(html, /sendMiniPlayerCommand\('seekTo'/);
+});
+
+test('message bubble actions work without disruptive toasts and modal elements exist', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /id="quote-card-modal"/);
+  assert.match(html, /id="quote-canvas"/);
+  assert.match(html, /id="quote-text-editor"/);
+  assert.match(html, /id="share-card-modal"/);
+  assert.match(html, /function copyBubbleText\(btn\)/);
+  assert.match(html, /function fallbackCopy\(text\)/);
+  assert.match(html, /function regenerateMessage\(target\)/);
+  assert.match(html, /function makeQuoteCardFromBubble\(btn\)/);
+  assert.match(html, /function toggleBookmark\(btn\)/);
+  assert.match(html, /function forkConversation\(target\)/);
+  assert.match(html, /function openShareCardFromAction\(btn\)/);
+  assert.match(html, /btn\.closest\('\.msg-group'\)/);
+  assert.doesNotMatch(html, /function speakMessage/);
+  assert.doesNotMatch(html, /aria-label="อ่านออกเสียง"/);
+  assert.doesNotMatch(html, /showToast\('คัดลอกข้อความแล้ว'\)/);
+  assert.doesNotMatch(html, /showToast\('บันทึก Bookmark เรียบร้อย ⭐'\)/);
+  assert.doesNotMatch(html, /id="toast-container"/);
+  assert.doesNotMatch(html, /对话已导出/);
+  assert.doesNotMatch(html, /\.toast-container/);
+  assert.doesNotMatch(html, /\.toast-pill/);
+});
+
+test('follow-up suggestions persist and re-render upon page refresh and loadActiveSession', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /function loadActiveSession\(\)/);
+  assert.match(html, /renderFollowUpSuggestions\(lastBotGroup, lastBotMessage\.text, userQ, serverSugg\)/);
+  assert.match(html, /serverSuggestions:\s*serverSuggestions\s*\|\|\s*\[\]/);
+  assert.match(html, /userQuery:\s*query/);
+});
+
+test('web-chat displays Sponsor Spotlight ads with sidebar card, modal, and /ads in-chat card', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /id="sidebar-ad-card"/);
+  assert.match(html, /id="sponsors-modal"/);
+  assert.match(html, /id="sponsors-modal-body"/);
+  assert.match(html, /function renderSidebarAd\(\)/);
+  assert.match(html, /function cycleSidebarAd\(/);
+  assert.match(html, /function openSponsorsModal\(/);
+  assert.match(html, /function showInChatSponsorCard\(/);
+  assert.match(html, /modal\.classList\.add\('open'\)/);
+  assert.match(html, /body\.sidebar-collapsed\s+\.sidebar-sponsors\s*\{[^}]*display:\s*none\s*!important/);
+  assert.match(html, /class="sidebar-ad-cta"/);
+  assert.match(html, /class="sidebar-ad-direct-link"/);
+  assert.match(html, /width:\s*300px\s*!important/);
+  assert.match(html, /width:\s*310px;\s*max-width:\s*86vw/);
+  assert.match(html, /\.sponsors-modal-dialog/);
+  assert.match(html, /\.sponsor-url-code/);
+  assert.match(html, /DashSecurity/);
+  assert.match(html, /ThemeHackers/);
+  assert.match(html, /https:\/\/dashsecurity\.kpltgroup\.com\//);
+  assert.match(html, /https:\/\/jujingyi-kikuuu\.vercel\.app\//);
+  assert.match(html, /https:\/\/github\.com\/Themehackers\//);
+  assert.match(html, /lowerQuery === '\/ads'/);
+  assert.match(html, /cmd_ads/);
+});
+
+test('btn-quick-actions renders complete plus sign (+) icon with horizontal and vertical lines', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /id="btn-quick-actions"/);
+  assert.match(html, /<line x1="12" y1="5" x2="12" y2="19"\/><line x1="5" y1="12" x2="19" y2="12"\/>/);
+});
+
+test('user bubble renders dedicated renderUserContent with high contrast white text and Kiku rose theme', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /function renderUserContent\(/);
+  assert.match(html, /user-content-body/);
+  assert.match(html, /--user-msg:\s*linear-gradient\(135deg,\s*#e11d48/);
+  assert.match(html, /\.bubble-user\s*,\s*\.bubble-user\s*\*\s*,\s*\.bubble-user\s*p/);
+  assert.match(html, /color:\s*#ffffff\s*!important/);
+});
+
+test('clarifying questions and interactive question cards are stably pinned without stream flickering', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /\.clarify-slot/);
+  assert.match(html, /clarifySlot\.className = 'clarify-slot'/);
+  assert.match(html, /msgGroup\.insertBefore\(clarifySlot,\s*botBubble\)/);
+  assert.match(html, /dismissAgentInteractiveQuestion/);
+  assert.match(html, /dismissedAgentQuestions/);
+  assert.match(html, /!details\.isStreaming/);
+});
+
+test('subagent progress renders a dedicated live card with evidence report', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /function accumulateSubagentProgress\(/);
+  assert.match(html, /function finalizeSubagentFromToolResult\(/);
+  assert.match(html, /function renderSubagentCards\(/);
+  assert.match(html, /event\.type === 'subagent_progress'/);
+  assert.match(html, /subagentsAccum/);
+  assert.match(html, /subagents: subagentsAccum/);
+  assert.match(html, /class="subagents-container"/);
+  assert.match(html, /subagent-card/);
+  assert.match(html, /subagent-report/);
+  assert.match(html, /\.subagent-card\s*\{/);
+  assert.match(html, /subagent-pulse/);
+  assert.match(html, /run_deep_research: '🔍/);
+});
+
+test('error handling renders dedicated retry error card and interactive retry badge', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /function renderErrorCardWithRetry\(/);
+  assert.match(html, /class="chat-error-card"/);
+  assert.match(html, /class="btn-retry-chat"/);
+  assert.match(html, /onclick="regenerateMessage\(this\)"/);
+  assert.match(html, /data-retry-query=/);
+  assert.match(html, /badge\.dataset\.status = status;/);
+  assert.match(html, /if \(status === STATUS\.ERROR\)/);
+  assert.match(html, /globalScope\.regenerateMessage\(group\)/);
+  assert.match(html, /\.agent-status-badge\[data-status='error'\]\s*\{/);
+  assert.match(html, /\.btn-retry-chat\s*\{/);
+  assert.match(html, /btn-retry-chat:hover/);
+  assert.match(html, /bubble button:not\(\.btn-retry-chat\)/);
+});
+
+test('incomplete answer renders styled resume bar with continue button and CSS styles', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /resumeWrap\.className = 'resume-incomplete-bar'/);
+  assert.match(html, /class="resume-incomplete-info"/);
+  assert.match(html, /class="resume-incomplete-badge"/);
+  assert.match(html, /class="resume-incomplete-title"/);
+  assert.match(html, /class="btn-resume-continue btn-mini-ctrl"/);
+  assert.match(html, /resumeIncompleteAnswer\(group, m\)/);
+  assert.match(html, /\.resume-incomplete-bar\s*\{/);
+  assert.match(html, /\.btn-resume-continue/);
+  assert.match(html, /\.btn-mini-ctrl/);
+  assert.match(html, /resumeBarArrive/);
+});
+test('input box enhancements: slash commands menu, model chip, relocated attachment tray, and quick action icons', () => {
+  const html = getWebChatHtml();
+  assert.match(html, /id="slash-commands-menu"/);
+  assert.match(html, /class="slash-commands-menu"/);
+  assert.match(html, /id="input-model-chip"/);
+  assert.match(html, /id="input-model-chip-label"/);
+  assert.match(html, /id="input-box-container"[\s\S]*?id="attachment-tray"/);
+  assert.match(html, /btn-send-muted/);
+  assert.match(html, /SLASH_COMMANDS/);
+  assert.match(html, /syncInputModelChip/);
+  assert.match(html, /updateSendButtonState/);
+  assert.match(html, /drag-over/);
+});

package/server/agent/tests/webChatMemory.test.js

@@ -0,0 +1,112 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import os from 'node:os';
+import path from 'node:path';
+import { mkdtemp, readFile, rm } from 'node:fs/promises';
+
+import { KikuAgent } from '../agentCore.js';
+import { McpClientManager } from '../mcpClient.js';
+import { AgentSession } from '../session.js';
+import { AgentMemory } from '../memory.js';
+
+function createMemoryStub() {
+  return {
+    _loaded: true,
+    _storageError: null,
+    facts: [],
+    preferences: { userSkills: [], skillsEnabled: true, topicsOfInterest: [] },
+    buildMemoryContext: () => '',
+    buildUserSkillContext: () => '',
+    trackTopicInterest: () => {},
+    getArchivedSessions: () => [],
+    getStatus: () => ({ factsCount: 0, sessionsCount: 0 }),
+    addFact: () => null,
+  };
+}
+
+test('AgentSession keeps web chat storage files isolated', async () => {
+  const tempDir = await mkdtemp(path.join(os.tmpdir(), 'kiku-web-sessions-'));
+  const firstPath = path.join(tempDir, 'first.json');
+  const secondPath = path.join(tempDir, 'second.json');
+
+  try {
+    const first = new AgentSession({ sessionId: 'web_first', storageFile: firstPath });
+    first.createUserMessage('ข้อความของห้องแรก');
+    await first.saveToDisk();
+
+    const second = new AgentSession({ sessionId: 'web_second', storageFile: secondPath });
+    second.createUserMessage('ข้อความของห้องที่สอง');
+    await second.saveToDisk();
+
+    const loadedFirst = new AgentSession({ storageFile: firstPath });
+    const loadedSecond = new AgentSession({ storageFile: secondPath });
+    assert.equal(await loadedFirst.loadFromDisk(), true);
+    assert.equal(await loadedSecond.loadFromDisk(), true);
+    assert.equal(loadedFirst.messages[0].parts[0].content, 'ข้อความของห้องแรก');
+    assert.equal(loadedSecond.messages[0].parts[0].content, 'ข้อความของห้องที่สอง');
+  } finally {
+    await rm(tempDir, { recursive: true, force: true });
+  }
+});
+
+test('AgentMemory reports fact counts by category', () => {
+  const memory = new AgentMemory();
+  memory.facts = [
+    { category: 'music' },
+    { category: 'music' },
+    { category: 'drama' },
+    {},
+  ];
+
+  assert.deepEqual(memory.getFactsByCategory(), { music: 2, drama: 1, general: 1 });
+  assert.deepEqual(memory.getStatus().factsByCategory, { music: 2, drama: 1, general: 1 });
+});
+
+test('KikuAgent hydrates browser history and persists direct answers', async () => {
+  const tempDir = await mkdtemp(path.join(os.tmpdir(), 'kiku-web-memory-'));
+  const storageFile = path.join(tempDir, 'session.json');
+  const observedMessages = [];
+  const client = {
+    provider: 'lmstudio',
+    providerName: 'LM Studio',
+    model: 'test-model',
+    async chat(options) {
+      observedMessages.push(options.messages.map(message => ({ ...message })));
+      options.onToken?.('ฉันจำได้ว่าชื่อที่บอกคือ Miju');
+      return { role: 'assistant', content: 'ฉันจำได้ว่าชื่อที่บอกคือ Miju' };
+    }
+  };
+  const agent = new KikuAgent({
+    client,
+    memory: createMemoryStub(),
+    mcpManager: new McpClientManager({
+      autoLoad: false,
+      globalConfigPath: path.join(tempDir, 'mcp.json'),
+    }),
+    sessionId: 'web_memory_test',
+    sessionStorageFile: storageFile,
+  });
+
+  try {
+    await agent.ready();
+    const hydration = await agent.hydrateConversationHistory([
+      { role: 'user', text: 'เรียกฉันว่าอะไรดี' },
+      { role: 'bot', text: 'ฉันจะเรียกคุณว่า Miju' },
+    ], { sessionId: 'web_memory_test' });
+    assert.equal(hydration.hydrated, true);
+
+    const answer = await agent.run('ฉันบอกให้เรียกว่าอะไร');
+    assert.equal(answer, 'ฉันจำได้ว่าชื่อที่บอกคือ Miju');
+    assert.ok(observedMessages[0].some(message =>
+      message.role === 'assistant' && message.content === 'ฉันจะเรียกคุณว่า Miju'
+    ));
+
+    const saved = JSON.parse(await readFile(storageFile, 'utf8'));
+    assert.equal(saved.id, 'web_memory_test');
+    assert.equal(saved.messages.length, 4);
+    assert.equal(saved.messages.at(-1).parts[0].content, 'ฉันจำได้ว่าชื่อที่บอกคือ Miju');
+  } finally {
+    await agent.mcpManager.disconnectAll();
+    await rm(tempDir, { recursive: true, force: true });
+  }
+});

package/server/agent/tests/webChatSecurity.test.js

@@ -0,0 +1,169 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import http from 'node:http';
+import { readFileSync } from 'node:fs';
+import {
+  resolveAllowedOrigin,
+  applySecurityHeaders,
+  extractApiKey,
+  checkChatRateLimit,
+  resolveClientIp
+} from '../../web-chat/core/security.js';
+import { handleWebChatRequest } from '../../web-chat/router.js';
+import { getSharedAgent } from '../../routes/agent.js';
+
+test('Security: resolveAllowedOrigin correctly validates allowed origins', () => {
+  assert.equal(resolveAllowedOrigin('http://localhost:3000'), 'http://localhost:3000');
+  assert.equal(resolveAllowedOrigin('http://127.0.0.1:5173'), 'http://127.0.0.1:5173');
+  assert.equal(resolveAllowedOrigin('https://jujingyi-fans.vercel.app'), null);
+  assert.equal(resolveAllowedOrigin(null), null);
+  assert.equal(resolveAllowedOrigin(''), null);
+});
+
+test('Security: resolveAllowedOrigin respects custom WEBCHAT_CORS_ORIGINS', () => {
+  const origEnv = process.env.WEBCHAT_CORS_ORIGINS;
+  try {
+    process.env.WEBCHAT_CORS_ORIGINS = 'https://portal.kiku.com, https://admin.kiku.com';
+    assert.equal(resolveAllowedOrigin('https://portal.kiku.com'), 'https://portal.kiku.com');
+    assert.equal(resolveAllowedOrigin('https://admin.kiku.com'), 'https://admin.kiku.com');
+    assert.equal(resolveAllowedOrigin('https://evil-site.com'), null);
+  } finally {
+    if (origEnv !== undefined) process.env.WEBCHAT_CORS_ORIGINS = origEnv;
+    else delete process.env.WEBCHAT_CORS_ORIGINS;
+  }
+});
+
+test('Security: applySecurityHeaders injects standard defensive headers', () => {
+  const headers = {};
+  const mockReq = { headers: { origin: 'http://localhost:3000' } };
+  const mockRes = {
+    setHeader: (k, v) => { headers[k.toLowerCase()] = v; }
+  };
+
+  applySecurityHeaders(mockReq, mockRes);
+  assert.equal(headers['x-content-type-options'], 'nosniff');
+  assert.equal(headers['x-frame-options'], 'SAMEORIGIN');
+  assert.equal(headers['referrer-policy'], 'strict-origin-when-cross-origin');
+  assert.equal(headers['access-control-allow-origin'], 'http://localhost:3000');
+  assert.match(headers['access-control-allow-methods'], /GET, POST, OPTIONS/);
+  assert.match(headers['access-control-allow-headers'], /Authorization/);
+});
+
+test('Security: extractApiKey extracts tokens securely with priority', () => {
+  
+  const req1 = { headers: { 'x-api-key': 'key_from_x_header' } };
+  assert.equal(extractApiKey(req1), 'key_from_x_header');
+
+
+  const req2 = { headers: { authorization: 'Bearer key_from_bearer' } };
+  assert.equal(extractApiKey(req2), 'key_from_bearer');
+
+
+  const req3 = { headers: { 'x-api-key': 'key_header' } };
+  const url3 = new URL('http://localhost:3000/api/chat?apiKey=key_query');
+  assert.equal(extractApiKey(req3, url3), 'key_header');
+
+  
+  const req4 = { headers: {} };
+  const url4 = new URL('http://localhost:3000/api/chat?apiKey=key_query');
+  assert.equal(extractApiKey(req4, url4), null);
+
+  
+  assert.equal(extractApiKey({ headers: {} }, new URL('http://localhost:3000/api/chat')), null);
+});
+
+test('Security: client IP ignores spoofed forwarding headers unless a trusted proxy is configured', () => {
+  const original = process.env.KIKU_TRUST_PROXY;
+  const originalVercel = process.env.VERCEL;
+  try {
+    delete process.env.KIKU_TRUST_PROXY;
+    delete process.env.VERCEL;
+    const req = { headers: { 'x-forwarded-for': '10.0.0.5' }, socket: { remoteAddress: '198.51.100.20' } };
+    assert.equal(resolveClientIp(req), '198.51.100.20');
+  } finally {
+    if (original === undefined) delete process.env.KIKU_TRUST_PROXY;
+    else process.env.KIKU_TRUST_PROXY = original;
+    if (originalVercel === undefined) delete process.env.VERCEL;
+    else process.env.VERCEL = originalVercel;
+  }
+});
+
+test('Security: remotely reachable agents are isolated and cannot access privileged tools', () => {
+  const first = getSharedAgent();
+  const second = getSharedAgent();
+  assert.notEqual(first, second);
+  assert.notEqual(first.memory, second.memory);
+  const names = new Set(first.getAllToolsSchema().map(tool => tool.function?.name || tool.name));
+  assert.equal(names.has('read_local_file'), false);
+  assert.equal(names.has('manage_skill'), false);
+  assert.equal(names.has('fetch_json'), false);
+});
+
+test('Security: web-chat escapes markdown before rendering and never persists API keys in browser storage', () => {
+  const source = readFileSync(new URL('../../web-chat/ui/scripts/client.js', import.meta.url), 'utf8');
+  assert.match(source, /text = escapeHtml\(reconstructed\)/);
+  assert.match(source, /data-query=.*this\.dataset\.query/);
+  assert.doesNotMatch(source, /localStorage\.setItem\([^\n]*(?:api.?key|vip.?key|token|secret)/i);
+  assert.doesNotMatch(source, /body\.apiKey/);
+});
+
+test('Security: checkChatRateLimit enforces 60 requests per minute', () => {
+  const testIp = '198.51.100.42';
+  const first = checkChatRateLimit(testIp);
+  assert.equal(first.allowed, true);
+  assert.equal(typeof first.remaining, 'number');
+
+
+  for (let i = 0; i < 60; i++) {
+    checkChatRateLimit(testIp);
+  }
+
+  const blocked = checkChatRateLimit(testIp);
+  assert.equal(blocked.allowed, false);
+  assert.ok(blocked.retryAfter > 0);
+
+  
+  const otherIpResult = checkChatRateLimit('203.0.113.99');
+  assert.equal(otherIpResult.allowed, true);
+});
+
+test('Integration: web-chat router handles OPTIONS preflight and rate limiting over HTTP', async () => {
+  const server = http.createServer(async (req, res) => {
+    await handleWebChatRequest(req, res, { port: 0 });
+  });
+
+  await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+  const port = server.address().port;
+  const baseUrl = `http://127.0.0.1:${port}`;
+
+  try {
+  
+    const optRes = await fetch(`${baseUrl}/api/chat`, {
+      method: 'OPTIONS',
+      headers: { Origin: 'http://localhost:3000' }
+    });
+    assert.equal(optRes.status, 204);
+    assert.equal(optRes.headers.get('access-control-allow-origin'), 'http://localhost:3000');
+    assert.equal(optRes.headers.get('x-content-type-options'), 'nosniff');
+
+
+    const badReq = await fetch(`${baseUrl}/api/chat`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({})
+    });
+    assert.equal(badReq.status, 400);
+    const badJson = await badReq.json();
+    assert.equal(badJson.error, 'Query is required');
+
+    
+    const statusRes = await fetch(`${baseUrl}/api/status`, {
+      headers: { Authorization: 'Bearer test_agent_key_123' }
+    });
+    assert.equal(statusRes.status, 200);
+    const statusJson = await statusRes.json();
+    assert.equal(statusJson.status, 'ok');
+  } finally {
+    await new Promise((resolve) => server.close(resolve));
+  }
+});