ThothII/backend/test/workspaces-contracts.test.ts

import { expect, test } from "vitest";
import { buildInstallationContract, renderWorkspaceDocs } from "../src/workspaces/contracts.js";
import { type CanonicalWorkspace, parseWorkspaceYaml } from "../src/workspaces/schema.js";

const validWorkspace = parseWorkspaceYaml(`workspace:
  schema_version: 1
  id: psd-clinical
  name: Policlinico San Donato
  language: it
dwh:
  engine: postgres
  database: postgres
  schema: datawarehouse
  supported_transports:
    - postgres_direct
    - rest_api
semantic_index:
  vector_store:
    engine: pgvector
    collection: clinical_documents
    dimensions: 768
    distance: cosine
    supported_transports:
      - pgvector_direct
      - rest_api
  embedding:
    provider: ollama_compatible
    model: nomic-embed-text-v2-moe
    dimensions: 768
llm_policy:
  default: zai/glm-5.2
  allowed:
    - zai/glm-5.2
    - openai/gpt-5
`);

test("generates stable FILE-based secret requirements from an immutable ID", () => {
  const contract = buildInstallationContract(validWorkspace);

  expect(contract.variables.map((variable) => variable.name))
    .toContain("THT_WS_PSD_CLINICAL_DWH_PASSWORD_FILE");
  expect(contract.variables.filter((variable) => variable.secret).every((variable) => (
    variable.name.endsWith("_FILE")
  ))).toBe(true);
  expect(renderWorkspaceDocs(validWorkspace).envExample).not.toContain("secret-value");
});

test("derives variable names from fixed role and suffix metadata", () => {
  const contract = buildInstallationContract(validWorkspace);
  const password = contract.variables.find((variable) => (
    variable.role === "DWH" && variable.suffix === "PASSWORD_FILE"
  ));

  expect(password).toMatchObject({
    name: "THT_WS_PSD_CLINICAL_DWH_PASSWORD_FILE",
    role: "DWH",
    suffix: "PASSWORD_FILE",
    secret: true,
  });
});

test("renders English UI headings and workspace-language Italian prose", () => {
  const docs = renderWorkspaceDocs(validWorkspace);

  expect(docs.markdown).toContain("# Installation requirements");
  expect(docs.markdown).toContain("Configurazione dell'installazione");
  expect(docs.envExample).toContain("THT_WS_PSD_CLINICAL_VECTOR_TRANSPORT=");
});

function withTransports(
  dwhTransport: CanonicalWorkspace["dwh"]["supported_transports"][number],
  vectorTransport: CanonicalWorkspace["semantic_index"]["vector_store"]["supported_transports"][number],
): CanonicalWorkspace {
  return {
    ...validWorkspace,
    dwh: { ...validWorkspace.dwh, supported_transports: [dwhTransport] },
    semantic_index: {
      ...validWorkspace.semantic_index,
      vector_store: {
        ...validWorkspace.semantic_index.vector_store,
        supported_transports: [vectorTransport],
      },
    },
  };
}

test("emits only direct connector bindings for direct transports", () => {
  const variables = buildInstallationContract(withTransports("postgres_direct", "pgvector_direct")).variables;

  for (const role of ["DWH", "VECTOR"] as const) {
    const names = variables.filter((variable) => variable.role === role).map((variable) => variable.name);
    expect(names).toContain(`THT_WS_PSD_CLINICAL_${role}_HOST`);
    expect(names).toContain(`THT_WS_PSD_CLINICAL_${role}_PASSWORD_FILE`);
    expect(names).not.toContain(`THT_WS_PSD_CLINICAL_${role}_BASE_URL`);
    expect(names).not.toContain(`THT_WS_PSD_CLINICAL_${role}_API_KEY_FILE`);
    expect(names.some((name) => name.includes("_SSH_"))).toBe(false);
  }
});

test("emits only REST connector bindings for REST transports", () => {
  const variables = buildInstallationContract(withTransports("rest_api", "rest_api")).variables;

  for (const role of ["DWH", "VECTOR"] as const) {
    const names = variables.filter((variable) => variable.role === role).map((variable) => variable.name);
    expect(names).toContain(`THT_WS_PSD_CLINICAL_${role}_BASE_URL`);
    expect(names).toContain(`THT_WS_PSD_CLINICAL_${role}_API_KEY_FILE`);
    expect(names).not.toContain(`THT_WS_PSD_CLINICAL_${role}_HOST`);
    expect(names).not.toContain(`THT_WS_PSD_CLINICAL_${role}_PASSWORD_FILE`);
    expect(names.some((name) => name.includes("_SSH_"))).toBe(false);
  }
});

test("emits SSH bindings only for SSH-tunnel transports", () => {
  const variables = buildInstallationContract(withTransports("ssh_tunnel", "ssh_tunnel")).variables;

  for (const role of ["DWH", "VECTOR"] as const) {
    const roleVariables = variables.filter((variable) => variable.role === role);
    expect(roleVariables.map((variable) => variable.name))
      .toContain(`THT_WS_PSD_CLINICAL_${role}_SSH_PRIVATE_KEY_FILE`);
    expect(roleVariables.find((variable) => variable.suffix === "SSH_HOST")?.transports)
      .toEqual(["ssh_tunnel"]);
    expect(roleVariables.map((variable) => variable.name))
      .not.toContain(`THT_WS_PSD_CLINICAL_${role}_BASE_URL`);
  }
});

test("validates public contract and documentation inputs at runtime", () => {
  const unsafeWorkspace = {
    ...validWorkspace,
    workspace: { ...validWorkspace.workspace, id: "psd\nclinical" },
  } as CanonicalWorkspace;

  expect(() => buildInstallationContract(unsafeWorkspace)).toThrow(/id/i);
  expect(() => renderWorkspaceDocs(unsafeWorkspace)).toThrow(/id/i);
});