Jyotisha/frontend/tests/professional-report-reference-route.test.ts

import assert from "node:assert/strict";
import { spawnSync } from "node:child_process";
import { readFileSync } from "node:fs";
import { fileURLToPath } from "node:url";
import test from "node:test";

const routeSource = readFileSync(
  new URL("../src/app/api/reports/[reportId]/professional-reference/route.ts", import.meta.url),
  "utf8",
);

const frontendRoot = fileURLToPath(new URL("../", import.meta.url));

function executeReadyReportExport() {
  const script = String.raw`
    import { mock } from "node:test";
    import { pathToFileURL } from "node:url";
    import { Agent } from "@mastra/core/agent";

    const moduleUrl = (path) => pathToFileURL(process.cwd() + "/" + path).href;
    mock.module(moduleUrl("src/lib/personal-report-entitlement.ts"), { exports: {
      checkSameOrigin: () => ({ ok: true }),
      resolveAllowedReportOrigins: () => [],
    }});
    mock.module(moduleUrl("src/lib/personal-report-service.ts"), { exports: {
      createSupabasePersonalReportService: () => ({
        getOwnedById: async () => ({ status: "ready" }),
      }),
    }});
    mock.module(moduleUrl("src/lib/server-owned-birth-profile.ts"), { exports: {
      ACCOUNT_BIRTH_SELECT: "birth-select",
      globalBirthProfileFromAccountRow: () => ({
        date: "1990-01-02",
        time: "03:04",
        latitude: 39.9,
        longitude: 116.4,
        timezoneOffset: 8,
        ayanamsa: "lahiri",
      }),
    }});
    mock.module(moduleUrl("src/lib/supabase/config.ts"), { exports: {
      isSupabaseConfigurationError: () => false,
    }});
    const profileQuery = {
      select() { return this; },
      eq() { return this; },
      async maybeSingle() { return { data: {}, error: null }; },
    };
    mock.module(moduleUrl("src/lib/supabase/server.ts"), { exports: {
      createServerSupabaseClient: async () => ({
        auth: { getUser: async () => ({ data: { user: { id: "user-1" } }, error: null }) },
        from: () => profileQuery,
      }),
    }});

    let modelCalls = 0;
    Agent.prototype.generate = async () => {
      modelCalls += 1;
      throw new Error("professional export must not call a model");
    };
    let telemetryEvents = 0;
    console.info = (...args) => {
      if (args[0] === "[personal-report-agent]") telemetryEvents += 1;
    };
    const upstream = [];
    globalThis.fetch = async (input, init) => {
      upstream.push({
        url: String(input),
        method: init?.method,
        body: JSON.parse(String(init?.body)),
      });
      return new Response(JSON.stringify({ format: "markdown", markdown: "# Professional reference" }), {
        status: 200,
        headers: { "content-type": "application/json" },
      });
    };

    const { POST } = await import(moduleUrl("src/app/api/reports/[reportId]/professional-reference/route.ts"));
    const response = await POST(
      new Request("https://staging.jyotisha.chat/api/reports/123e4567-e89b-12d3-a456-426614174000/professional-reference", {
        method: "POST",
        headers: { origin: "https://staging.jyotisha.chat" },
      }),
      { params: Promise.resolve({ reportId: "123e4567-e89b-12d3-a456-426614174000" }) },
    );
    console.log(JSON.stringify({
      status: response.status,
      body: await response.json(),
      modelCalls,
      telemetryEvents,
      upstream,
    }));
  `;
  const result = spawnSync(process.execPath, [
    "--experimental-test-module-mocks",
    "--import",
    "tsx",
    "--input-type=module",
    "--eval",
    script,
  ], { cwd: frontendRoot, encoding: "utf8" });
  assert.equal(result.status, 0, result.stderr || result.stdout);
  return JSON.parse(result.stdout.trim()) as {
    status: number;
    body: { format: string; markdown: string };
    modelCalls: number;
    telemetryEvents: number;
    upstream: Array<{ url: string; method: string; body: Record<string, unknown> }>;
  };
}

test("professional reference route authenticates, checks origin, owner and ready status", () => {
  assert.match(routeSource, /createServerSupabaseClient/);
  assert.match(routeSource, /supabase\.auth\.getUser\(\)/);
  assert.match(routeSource, /checkSameOrigin/);
  assert.match(routeSource, /resolveAllowedReportOrigins/);
  assert.match(routeSource, /getOwnedById\(user\.id, reportId\)/);
  assert.match(routeSource, /report\.status !== "ready"/);
  assert.match(routeSource, /status: 401/);
  assert.match(routeSource, /status: 403/);
  assert.match(routeSource, /status: 404/);
  assert.match(routeSource, /status: 409/);
});

test("birth data stays server-owned and the route calls only the public Python export", () => {
  assert.match(routeSource, /\.from\("profiles"\)/);
  assert.match(routeSource, /select\(ACCOUNT_BIRTH_SELECT\)/);
  assert.match(routeSource, /globalBirthProfileFromAccountRow/);
  assert.match(routeSource, /\/api\/professional_report_reference/);
  assert.match(routeSource, /format: "markdown"/);
  assert.match(routeSource, /packs: \["full"\]/);
  assert.doesNotMatch(routeSource, /request\.json\(/);
  assert.doesNotMatch(routeSource, /mastra|writer|billing|personal_report_sections/i);
  assert.doesNotMatch(routeSource, /\.insert\(|\.update\(|\.delete\(/);
});

test("ready report export calls the Python endpoint without model calls or writer telemetry", () => {
  const result = executeReadyReportExport();
  assert.equal(result.status, 200);
  assert.deepEqual(result.body, { format: "markdown", markdown: "# Professional reference" });
  assert.equal(result.modelCalls, 0);
  assert.equal(result.telemetryEvents, 0);
  assert.equal(result.upstream.length, 1);
  assert.equal(result.upstream[0].url, "http://127.0.0.1:5200/api/professional_report_reference");
  assert.equal(result.upstream[0].method, "POST");
  assert.deepEqual(result.upstream[0].body, {
    year: 1990,
    month: 1,
    day: 2,
    hour: 3,
    minute: 4,
    lat: 39.9,
    lon: 116.4,
    tz: 8,
    ayanamsa: "lahiri",
    format: "markdown",
    packs: ["full"],
  });
});

test("busy upstream responses preserve 429 and Retry-After", () => {
  assert.match(routeSource, /upstream\.status/);
  assert.match(routeSource, /upstream\.headers\.get\("retry-after"\)/);
  assert.match(routeSource, /"Retry-After": retryAfter/);
});