// @vitest-environment node import { afterEach, beforeEach, describe, expect, it, vi } from "vitest" // No DNS in tests: only loopback addresses are private vi.mock("@/lib/ssrf-protection", async (importOriginal) => ({ ...(await importOriginal()), isPrivateUrl: async (url: string) => /^https?:\/\/(127\.0\.0\.1|localhost)\b/.test(url), })) import { POST as chat } from "@/app/api/chat/route" const ENV = [ "AI_PROVIDER", "AI_MODEL", "OPENAI_API_KEY", "OLLAMA_BASE_URL", "OLLAMA_API_KEY", "NEXT_AI_DRAWIO_DESKTOP", ] const saved: Record = {} beforeEach(() => { for (const k of ENV) saved[k] = process.env[k] for (const k of ENV) delete process.env[k] }) afterEach(() => { for (const k of ENV) { if (saved[k] === undefined) delete process.env[k] else process.env[k] = saved[k] } vi.unstubAllGlobals() }) /** Every provider request answers with this status and text */ const providerAnswers = (status: number, body: string) => vi.stubGlobal( "fetch", vi.fn( async () => new Response(body, { status, headers: { "Content-Type": "application/json" }, }), ), ) /** The error text the chat panel gets from the stream */ async function streamedError(headers: Record) { const res = await chat( new Request("http://localhost/api/chat", { method: "POST", headers: { "Content-Type": "application/json", ...headers }, body: JSON.stringify({ messages: [ { id: "u1", role: "user", parts: [{ type: "text", text: "Draw two boxes" }], }, ], xml: "", }), }), ) const text = await res.text() const line = text.split("\n").find((l) => l.includes('"type":"error"')) return line ? JSON.parse(JSON.parse(line.slice(6)).errorText).message : "" } describe("provider error texts in the stream", () => { it("shows the user's own local Ollama error in the desktop app", async () => { process.env.NEXT_AI_DRAWIO_DESKTOP = "1" process.env.AI_PROVIDER = "ollama" process.env.AI_MODEL = "llama3" // Ollama is not running vi.stubGlobal( "fetch", vi.fn(async () => { throw Object.assign(new TypeError("fetch failed"), { cause: new Error("connect ECONNREFUSED 127.0.0.1:11434"), }) }), ) expect(await streamedError({})).toMatch( /127\.0\.0\.1:11434|fetch failed/, ) // The SDK retries a refused connection twice, waiting between }, 20_000) it("shows EdgeOne's own daily quota explanation", async () => { // The function answers 429, which the SDK retries with a wait; // the status does not decide whether the text is shown providerAnswers( 400, JSON.stringify({ error: { message: "The daily public quota has been exhausted. After deployment, you can enjoy a personal daily exclusive quota.", }, }), ) expect( await streamedError({ "x-ai-provider": "edgeone", "x-ai-model": "@tx/deepseek-ai/deepseek-v3-0324", }), ).toMatch(/daily public quota/) }) it("hides the provider's text on the server's own key", async () => { process.env.AI_PROVIDER = "openai" process.env.AI_MODEL = "gpt-5.5" process.env.OPENAI_API_KEY = "server-key" providerAnswers( 403, JSON.stringify({ error: { message: "Organization org-operator is suspended" }, }), ) const message = await streamedError({}) expect(message).not.toMatch(/org-operator/) expect(message).toBe("The provider returned an error.") }) })