Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -14,27 +14,31 @@ vi.mock('@/lib/auth', () => ({

vi.mock('@pagespace/db', () => ({ db: {} }));

vi.mock('@pagespace/lib/server', () => ({
loggers: {
vi.mock('@pagespace/lib/logging/logger-config', () => ({
loggers: {
api: { info: vi.fn(), error: vi.fn(), warn: vi.fn(), debug: vi.fn() },
security: { info: vi.fn(), error: vi.fn(), warn: vi.fn(), debug: vi.fn() },
},
auditRequest: vi.fn(),

logger: { child: vi.fn(() => ({ info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() })) },
}));
vi.mock('@pagespace/lib/audit/audit-log', () => ({
auditRequest: vi.fn(),
}));

vi.mock('@pagespace/lib/permissions', () => ({
canUserEditPage: vi.fn().mockResolvedValue(true),
vi.mock('@pagespace/lib/permissions/permissions', () => ({
canUserEditPage: vi.fn().mockResolvedValue(true),
}));

vi.mock('@pagespace/lib/integrations', () => ({
vi.mock('@pagespace/lib/integrations/repositories/grant-repository', () => ({
getGrantById: mockGetGrantById,
updateGrant: vi.fn(),
deleteGrant: mockDeleteGrant,
}));

import { DELETE } from '../route';
import { authenticateRequestWithOptions } from '@/lib/auth';
import { auditRequest } from '@pagespace/lib/server';
import { auditRequest } from '@pagespace/lib/audit/audit-log';

const mockUserId = 'user_123';
const mockAgentId = 'agent-1';
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,10 @@ import { NextResponse } from 'next/server';
import { z } from 'zod';
import { authenticateRequestWithOptions, isAuthError } from '@/lib/auth';
import { db } from '@pagespace/db';
import { loggers, auditRequest } from '@pagespace/lib/server';
import { canUserEditPage } from '@pagespace/lib/permissions';
import { getGrantById, updateGrant, deleteGrant } from '@pagespace/lib/integrations';
import { loggers } from '@pagespace/lib/logging/logger-config';
import { auditRequest } from '@pagespace/lib/audit/audit-log';
import { canUserEditPage } from '@pagespace/lib/permissions/permissions';
import { getGrantById, updateGrant, deleteGrant } from '@pagespace/lib/integrations/repositories/grant-repository';

const AUTH_OPTIONS_WRITE = { allow: ['session'] as const, requireCSRF: true };

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -13,32 +13,38 @@ vi.mock('@/lib/auth', () => ({

vi.mock('@pagespace/db', () => ({ db: {} }));

vi.mock('@pagespace/lib/server', () => ({
loggers: {
vi.mock('@pagespace/lib/logging/logger-config', () => ({
loggers: {
api: { info: vi.fn(), error: vi.fn(), warn: vi.fn(), debug: vi.fn() },
security: { info: vi.fn(), error: vi.fn(), warn: vi.fn(), debug: vi.fn() },
},
auditRequest: vi.fn(),

logger: { child: vi.fn(() => ({ info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() })) },
}));
vi.mock('@pagespace/lib/audit/audit-log', () => ({
auditRequest: vi.fn(),
}));

vi.mock('@pagespace/lib/permissions', () => ({
canUserEditPage: vi.fn().mockResolvedValue(true),
vi.mock('@pagespace/lib/permissions/permissions', () => ({
canUserEditPage: vi.fn().mockResolvedValue(true),
}));

vi.mock('@pagespace/lib/services/drive-service', () => ({
getDriveAccess: vi.fn(),
}));

vi.mock('@pagespace/lib/integrations', () => ({
vi.mock('@pagespace/lib/integrations/repositories/grant-repository', () => ({
listGrantsByAgent: mockListGrantsByAgent,
createGrant: vi.fn(),
getConnectionById: vi.fn(),
findGrant: vi.fn(),
}));
vi.mock('@pagespace/lib/integrations/repositories/connection-repository', () => ({
getConnectionById: vi.fn(),
}));

import { GET } from '../route';
import { authenticateRequestWithOptions } from '@/lib/auth';
import { auditRequest } from '@pagespace/lib/server';
import { auditRequest } from '@pagespace/lib/audit/audit-log';

const mockUserId = 'user_123';
const mockAgentId = 'agent-1';
Expand Down
13 changes: 5 additions & 8 deletions apps/web/src/app/api/agents/[agentId]/integrations/route.ts
Original file line number Diff line number Diff line change
Expand Up @@ -2,15 +2,12 @@ import { NextResponse } from 'next/server';
import { z } from 'zod';
import { authenticateRequestWithOptions, isAuthError } from '@/lib/auth';
import { db } from '@pagespace/db';
import { loggers, auditRequest } from '@pagespace/lib/server';
import { canUserEditPage } from '@pagespace/lib/permissions';
import { loggers } from '@pagespace/lib/logging/logger-config';
import { auditRequest } from '@pagespace/lib/audit/audit-log';
import { canUserEditPage } from '@pagespace/lib/permissions/permissions';
import { getDriveAccess } from '@pagespace/lib/services/drive-service';
import {
listGrantsByAgent,
createGrant,
getConnectionById,
findGrant,
} from '@pagespace/lib/integrations';
import { listGrantsByAgent, createGrant, findGrant } from '@pagespace/lib/integrations/repositories/grant-repository';
import { getConnectionById } from '@pagespace/lib/integrations/repositories/connection-repository';

const AUTH_OPTIONS_READ = { allow: ['session'] as const };
const AUTH_OPTIONS_WRITE = { allow: ['session'] as const, requireCSRF: true };
Expand Down
25 changes: 12 additions & 13 deletions apps/web/src/app/api/ai/abort/__tests__/route.test.ts
Original file line number Diff line number Diff line change
Expand Up @@ -22,30 +22,29 @@ vi.mock('@/lib/ai/core/stream-abort-registry', () => ({
}));

// Mock logger (boundary)
vi.mock('@pagespace/lib/server', () => ({
loggers: {
vi.mock('@pagespace/lib/logging/logger-config', () => ({
loggers: {
api: {
info: vi.fn(),
error: vi.fn(),
warn: vi.fn(),
},
},
auditRequest: vi.fn(),

logger: { child: vi.fn(() => ({ info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() })) },
}));
vi.mock('@pagespace/lib/audit/audit-log', () => ({
auditRequest: vi.fn(),
}));

// Mock rate limit (boundary) - note: checkRateLimit is exported from @pagespace/lib/auth
vi.mock('@pagespace/lib/auth', async () => {
const actual = await vi.importActual('@pagespace/lib/auth');
return {
...actual,
checkRateLimit: vi.fn(),
};
});
vi.mock('@pagespace/lib/auth/rate-limit-utils', () => ({
checkRateLimit: vi.fn(),
}));

import { authenticateRequestWithOptions, isAuthError } from '@/lib/auth';
import { abortStream } from '@/lib/ai/core/stream-abort-registry';
import { loggers } from '@pagespace/lib/server';
import { checkRateLimit } from '@pagespace/lib/auth';
import { loggers } from '@pagespace/lib/logging/logger-config';
import { checkRateLimit } from '@pagespace/lib/auth/rate-limit-utils';

// Test fixtures
const mockUserId = 'user-123';
Expand Down
5 changes: 3 additions & 2 deletions apps/web/src/app/api/ai/abort/route.ts
Original file line number Diff line number Diff line change
@@ -1,8 +1,9 @@
import { NextResponse } from 'next/server';
import { authenticateRequestWithOptions, isAuthError } from '@/lib/auth';
import { abortStream } from '@/lib/ai/core/stream-abort-registry';
import { loggers, auditRequest } from '@pagespace/lib/server';
import { checkRateLimit } from '@pagespace/lib/auth';
import { loggers } from '@pagespace/lib/logging/logger-config';
import { auditRequest } from '@pagespace/lib/audit/audit-log';
import { checkRateLimit } from '@pagespace/lib/auth/rate-limit-utils';

const AUTH_OPTIONS = { allow: ['session'] as const, requireCSRF: true };

Expand Down
17 changes: 12 additions & 5 deletions apps/web/src/app/api/ai/chat/__tests__/mcp-scope.test.ts
Original file line number Diff line number Diff line change
Expand Up @@ -19,10 +19,14 @@ vi.mock('@/lib/auth', () => ({
checkMCPPageScope: vi.fn().mockResolvedValue(null),
}));

vi.mock('@pagespace/lib/server', () => ({
canUserViewPage: vi.fn().mockResolvedValue(true),
canUserEditPage: vi.fn().mockResolvedValue(true),
getActorInfo: vi.fn().mockResolvedValue({ actorEmail: 'test@test.com', actorDisplayName: 'Test' }),
vi.mock('@pagespace/lib/permissions/permissions', () => ({
canUserViewPage: vi.fn().mockResolvedValue(true),
canUserEditPage: vi.fn().mockResolvedValue(true),
}));
vi.mock('@pagespace/lib/monitoring/activity-logger', () => ({
getActorInfo: vi.fn().mockResolvedValue({ actorEmail: 'test@test.com', actorDisplayName: 'Test' }),
}));
vi.mock('@pagespace/lib/logging/logger-config', () => ({
loggers: {
ai: {
info: vi.fn(),
Expand All @@ -39,7 +43,10 @@ vi.mock('@pagespace/lib/server', () => ({
})),
},
},
auditRequest: vi.fn(),
logger: { child: vi.fn(() => ({ info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() })) },
}));
vi.mock('@pagespace/lib/audit/audit-log', () => ({
auditRequest: vi.fn(),
}));

vi.mock('@pagespace/db', () => ({
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -28,12 +28,18 @@ vi.mock('@/lib/auth', () => ({
}));

// Mock permissions (boundary)
vi.mock('@pagespace/lib/server', () => ({
canUserEditPage: vi.fn(),
loggers: {
vi.mock('@pagespace/lib/permissions/permissions', () => ({
canUserEditPage: vi.fn(),
}));
vi.mock('@pagespace/lib/logging/logger-config', () => ({
loggers: {
api: { info: vi.fn(), error: vi.fn(), warn: vi.fn() },
},
auditRequest: vi.fn(),

logger: { child: vi.fn(() => ({ info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() })) },
}));
vi.mock('@pagespace/lib/audit/audit-log', () => ({
auditRequest: vi.fn(),
}));

// Mock logging mask (boundary)
Expand Down Expand Up @@ -64,7 +70,8 @@ import { chatMessageRepository } from '@/lib/repositories/chat-message-repositor
import { getActorInfo, logMessageActivity } from '@pagespace/lib/monitoring/activity-logger';
import { db } from '@pagespace/db';
import { authenticateRequestWithOptions, isAuthError, checkMCPPageScope } from '@/lib/auth';
import { canUserEditPage, loggers } from '@pagespace/lib/server';
import { canUserEditPage } from '@pagespace/lib/permissions/permissions'
import { loggers } from '@pagespace/lib/logging/logger-config';

// Type for page lookup mock (matches Drizzle schema)
type PageType = 'DOCUMENT' | 'FOLDER' | 'CHANNEL' | 'AI_CHAT' | 'CANVAS' | 'FILE' | 'SHEET' | 'TASK_LIST' | 'CODE';
Expand Down
4 changes: 3 additions & 1 deletion apps/web/src/app/api/ai/chat/messages/[messageId]/route.ts
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
import { NextResponse } from 'next/server';
import { authenticateRequestWithOptions, isAuthError, checkMCPPageScope } from '@/lib/auth';
import { canUserEditPage, loggers, auditRequest } from '@pagespace/lib/server';
import { canUserEditPage } from '@pagespace/lib/permissions/permissions';
import { loggers } from '@pagespace/lib/logging/logger-config';
import { auditRequest } from '@pagespace/lib/audit/audit-log';
import { maskIdentifier } from '@/lib/logging/mask';
import {
chatMessageRepository,
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -34,17 +34,23 @@ vi.mock('@/lib/repositories/global-conversation-repository', () => ({
}));

// Mock permissions
vi.mock('@pagespace/lib/server', () => ({
canUserEditPage: vi.fn(),
loggers: {
vi.mock('@pagespace/lib/permissions/permissions', () => ({
canUserEditPage: vi.fn(),
}));
vi.mock('@pagespace/lib/logging/logger-config', () => ({
loggers: {
api: {
info: vi.fn(),
error: vi.fn(),
warn: vi.fn(),
debug: vi.fn(),
},
},
auditRequest: vi.fn(),

logger: { child: vi.fn(() => ({ info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() })) },
}));
vi.mock('@pagespace/lib/audit/audit-log', () => ({
auditRequest: vi.fn(),
}));

// Mock websocket broadcasts
Expand All @@ -66,7 +72,7 @@ vi.mock('@/lib/logging/mask', () => ({
import { previewAiUndo, executeAiUndo, type AiUndoPreview } from '@/services/api';
import { authenticateRequestWithOptions, checkMCPPageScope } from '@/lib/auth';
import { globalConversationRepository } from '@/lib/repositories/global-conversation-repository';
import { canUserEditPage } from '@pagespace/lib/server';
import { canUserEditPage } from '@pagespace/lib/permissions/permissions';

const mockAuth = vi.mocked(authenticateRequestWithOptions);
const mockCheckMCPPageScope = vi.mocked(checkMCPPageScope);
Expand Down
Original file line number Diff line number Diff line change
@@ -1,7 +1,9 @@
import { NextResponse } from 'next/server';
import { z } from 'zod';
import { authenticateRequestWithOptions, isAuthError, checkMCPPageScope, type AuthResult } from '@/lib/auth';
import { canUserEditPage, loggers, auditRequest } from '@pagespace/lib/server';
import { canUserEditPage } from '@pagespace/lib/permissions/permissions';
import { loggers } from '@pagespace/lib/logging/logger-config';
import { auditRequest } from '@pagespace/lib/audit/audit-log';
import { maskIdentifier } from '@/lib/logging/mask';
import { globalConversationRepository } from '@/lib/repositories/global-conversation-repository';
import { previewAiUndo, executeAiUndo, type AiUndoPreview } from '@/services/api';
Expand Down
16 changes: 11 additions & 5 deletions apps/web/src/app/api/ai/chat/messages/__tests__/mcp-scope.test.ts
Original file line number Diff line number Diff line change
Expand Up @@ -26,12 +26,18 @@ vi.mock('@/lib/auth', () => ({
}));

// Mock permissions (boundary)
vi.mock('@pagespace/lib/server', () => ({
canUserViewPage: vi.fn().mockResolvedValue(true),
loggers: {
vi.mock('@pagespace/lib/permissions/permissions', () => ({
canUserViewPage: vi.fn().mockResolvedValue(true),
}));
vi.mock('@pagespace/lib/logging/logger-config', () => ({
loggers: {
ai: { info: vi.fn(), error: vi.fn() },
},
auditRequest: vi.fn(),

logger: { child: vi.fn(() => ({ info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() })) },
}));
vi.mock('@pagespace/lib/audit/audit-log', () => ({
auditRequest: vi.fn(),
}));

// Mock message converter (boundary)
Expand All @@ -44,7 +50,7 @@ vi.mock('@/lib/ai/core', () => ({
}));

import { authenticateRequestWithOptions, checkMCPPageScope } from '@/lib/auth';
import { canUserViewPage } from '@pagespace/lib/server';
import { canUserViewPage } from '@pagespace/lib/permissions/permissions';
import { chatMessageRepository } from '@/lib/repositories/chat-message-repository';

// ============================================================================
Expand Down
17 changes: 12 additions & 5 deletions apps/web/src/app/api/ai/chat/messages/__tests__/route.test.ts
Original file line number Diff line number Diff line change
Expand Up @@ -26,12 +26,18 @@ vi.mock('@/lib/auth', () => ({
}));

// Mock permissions (boundary)
vi.mock('@pagespace/lib/server', () => ({
canUserViewPage: vi.fn(),
loggers: {
vi.mock('@pagespace/lib/permissions/permissions', () => ({
canUserViewPage: vi.fn(),
}));
vi.mock('@pagespace/lib/logging/logger-config', () => ({
loggers: {
ai: { info: vi.fn(), error: vi.fn() },
},
auditRequest: vi.fn(),

logger: { child: vi.fn(() => ({ info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() })) },
}));
vi.mock('@pagespace/lib/audit/audit-log', () => ({
auditRequest: vi.fn(),
}));

// Mock message converter (boundary)
Expand All @@ -45,7 +51,8 @@ vi.mock('@/lib/ai/core', () => ({

import { chatMessageRepository } from '@/lib/repositories/chat-message-repository';
import { authenticateRequestWithOptions, isAuthError } from '@/lib/auth';
import { canUserViewPage, loggers } from '@pagespace/lib/server';
import { canUserViewPage } from '@pagespace/lib/permissions/permissions'
import { loggers } from '@pagespace/lib/logging/logger-config';
import { convertDbMessageToUIMessage } from '@/lib/ai/core';

// Test fixtures
Expand Down
4 changes: 3 additions & 1 deletion apps/web/src/app/api/ai/chat/messages/route.ts
Original file line number Diff line number Diff line change
@@ -1,7 +1,9 @@
import { NextResponse } from 'next/server';
import { authenticateRequestWithOptions, isAuthError, checkMCPPageScope } from '@/lib/auth';
import { convertDbMessageToUIMessage } from '@/lib/ai/core';
import { loggers, auditRequest, canUserViewPage } from '@pagespace/lib/server';
import { loggers } from '@pagespace/lib/logging/logger-config';
import { auditRequest } from '@pagespace/lib/audit/audit-log';
import { canUserViewPage } from '@pagespace/lib/permissions/permissions';
import { chatMessageRepository } from '@/lib/repositories/chat-message-repository';

// Auth options: GET is read-only operation
Expand Down
6 changes: 4 additions & 2 deletions apps/web/src/app/api/ai/chat/route.ts
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,8 @@ import { authenticateRequestWithOptions, isAuthError, checkMCPPageScope } from '

const AUTH_OPTIONS_READ = { allow: ['session', 'mcp'] as const, requireCSRF: false };
const AUTH_OPTIONS_WRITE = { allow: ['session', 'mcp'] as const, requireCSRF: true };
import { canUserViewPage, canUserEditPage, getActorInfo } from '@pagespace/lib/server';
import { canUserViewPage, canUserEditPage } from '@pagespace/lib/permissions/permissions';
import { getActorInfo } from '@pagespace/lib/monitoring/activity-logger';
import {
createAIProvider,
updateUserProviderSettings,
Expand Down Expand Up @@ -60,7 +61,8 @@ import {
} from '@/lib/ai/core';
import { db, users, chatMessages, pages, drives, eq, and } from '@pagespace/db';
import { createId } from '@paralleldrive/cuid2';
import { loggers, auditRequest } from '@pagespace/lib/server';
import { loggers } from '@pagespace/lib/logging/logger-config';
import { auditRequest } from '@pagespace/lib/audit/audit-log';
import { maskIdentifier } from '@/lib/logging/mask';
import { trackFeature } from '@pagespace/lib/monitoring/activity-tracker';
import { AIMonitoring } from '@pagespace/lib/monitoring/ai-monitoring';
Expand Down
Loading
Loading