feat(consultation): validate bounded consultation plans

2026-08-14 17:38:27 +08:00
parent a8141d955c
commit f4b3da6511
3 changed files with 62 additions and 1 deletions
@@ -8,9 +8,20 @@ const mastra = readFileSync(new URL("../src/mastra/index.ts", import.meta.url),
 const tools = readFileSync(new URL("../src/mastra/consultation-tools.ts", import.meta.url), "utf8");
 const stream = readFileSync(new URL("../src/lib/stream-agent-response.ts", import.meta.url), "utf8");
 const workflow = readFileSync(new URL("../src/mastra/consultation-workflow.ts", import.meta.url), "utf8");
+const plan = readFileSync(new URL("../src/lib/consultation-plan.ts", import.meta.url), "utf8");
 const stagingCompose = readFileSync(new URL("../../deploy/docker-compose.staging.yml", import.meta.url), "utf8");


+
+test("consultation plans are server-owned and bounded", () => {
+  assert.match(plan, /consultationPlanSchema/);
+  assert.match(plan, /requestedDomains/);
+  assert.match(plan, /requiredEvidenceCategories/);
+  assert.match(plan, /createConsultationPlan/);
+  assert.match(tools, /createConsultationPlan\(\{ userIntent: input\.question, theme: input\.theme \}\)/);
+  assert.doesNotMatch(plan, /birth|latitude|longitude|engine|script/i);
+});
+
 test("uses one runtime step append entry and no scattered hard-coded step cap", () => {
  assert.match(tools, /export function appendConsultationRuntimeStep/);
  assert.doesNotMatch(tools, /steps\.length\s*>=\s*32/);