732642856
61 lines
2.2 KiB
Python
61 lines
2.2 KiB
Python
from pathlib import Path
|
|
|
|
|
|
PAGE = Path("frontend/src/app/page.tsx")
|
|
STYLES = Path("frontend/src/app/globals.css")
|
|
SESSION_ROW = Path("frontend/src/components/sidebar-session-row.tsx")
|
|
SESSION_DELETE_ROUTE = Path("frontend/src/app/api/sessions/[id]/route.ts")
|
|
SESSION_DELETE_MIGRATION = Path("frontend/supabase/migrations/20260721100000_chat_sessions_delete_grant.sql")
|
|
|
|
|
|
def test_chat_history_management_actions_are_exposed() -> None:
|
|
source = PAGE.read_text(encoding="utf-8") + STYLES.read_text(encoding="utf-8") + SESSION_ROW.read_text(encoding="utf-8")
|
|
for expected in (
|
|
"renameSession",
|
|
"deleteSession",
|
|
"pendingSessionDeletion",
|
|
"确认删除",
|
|
"session-delete-overlay",
|
|
"togglePinnedSession",
|
|
"toggleArchivedSession",
|
|
"showArchivedSessions",
|
|
"已归档，可在左侧归档中恢复。",
|
|
"shareSession",
|
|
"share_payload_version",
|
|
"messages.map",
|
|
"onContextMenu",
|
|
"session-menu-trigger",
|
|
'role="menu"',
|
|
"closeSessionMenu",
|
|
"Escape",
|
|
"focus-within",
|
|
"置顶",
|
|
"重命名",
|
|
"归档",
|
|
"恢复",
|
|
"删除",
|
|
"转发",
|
|
'fetch(`/api/sessions/${encodeURIComponent(session.id)}`',
|
|
):
|
|
assert expected in source
|
|
|
|
|
|
def test_chat_session_delete_is_server_controlled_and_granted() -> None:
|
|
route = SESSION_DELETE_ROUTE.read_text(encoding="utf-8")
|
|
migration = SESSION_DELETE_MIGRATION.read_text(encoding="utf-8")
|
|
assert 'from("chat_sessions")' in route
|
|
assert '.eq("user_id", user.id)' in route
|
|
assert 'count !== 1' in route
|
|
assert 'grant delete on table public.chat_sessions to authenticated' in migration.lower()
|
|
assert 'create policy chat_sessions_delete_own' in migration.lower()
|
|
assert 'using ((select auth.uid()) = user_id)' in migration.lower()
|
|
|
|
|
|
def test_archiving_never_calls_the_delete_endpoint() -> None:
|
|
source = PAGE.read_text(encoding="utf-8")
|
|
start = source.index("function toggleArchivedSession")
|
|
end = source.index("async function shareSession", start)
|
|
archive_action = source[start:end]
|
|
assert "setArchivedSessionIds" in archive_action
|
|
assert "/api/sessions/" not in archive_action
|