Impressum avatar-policy.test.ts

import path from "node:path";
import { describe, expect, it } from "vitest";
import {
  hasAvatarUriScheme,
  isAvatarDataUrl,
  isAvatarHttpUrl,
  isAvatarImageDataUrl,
  isPathWithinRoot,
  isSupportedLocalAvatarExtension,
  isWindowsAbsolutePath,
  isWorkspaceRelativeAvatarPath,
  looksLikeAvatarPath,
  resolveAvatarMime,
} from "./avatar-policy.js";

describe("avatar policy", () => {
  it("classifies avatar URI and path helpers directly", () => {
    expect(isAvatarDataUrl("data:text/plain,hello")).toBe(true);
    expect(isAvatarImageDataUrl("data:image/png;base64,AAAA")).toBe(true);
    expect(isAvatarImageDataUrl("data:text/plain,hello")).toBe(false);
    expect(isAvatarHttpUrl("https://example.com/avatar.png")).toBe(true);
    expect(isAvatarHttpUrl("ftp://example.com/avatar.png")).toBe(false);
    expect(hasAvatarUriScheme("slack://avatar")).toBe(true);
    expect(isWindowsAbsolutePath("C:\\\\avatars\\\\openclaw.png")).toBe(true);
  });

  it("accepts workspace-relative avatar paths and rejects URI schemes", () => {
    expect(isWorkspaceRelativeAvatarPath("avatars/openclaw.png")).toBe(true);
    expect(isWorkspaceRelativeAvatarPath("C:\\\\avatars\\\\openclaw.png")).toBe(true);
    expect(isWorkspaceRelativeAvatarPath("https://example.com/avatar.png")).toBe(false);
    expect(isWorkspaceRelativeAvatarPath("data:image/png;base64,AAAA")).toBe(false);
    expect(isWorkspaceRelativeAvatarPath("~/avatar.png")).toBe(false);
    expect(isWorkspaceRelativeAvatarPath("slack://avatar")).toBe(false);
    expect(isWorkspaceRelativeAvatarPath("")).toBe(false);
  });

  it("checks path containment safely", () => {
    const root = path.resolve("/tmp/root");
    expect(isPathWithinRoot(root, root)).toBe(true);
    expect(isPathWithinRoot(root, path.resolve("/tmp/root/avatars/a.png"))).toBe(true);
    expect(isPathWithinRoot(root, path.resolve("/tmp/root/../outside.png"))).toBe(false);
    expect(isPathWithinRoot(root, path.resolve("/tmp/root-sibling/avatar.png"))).toBe(false);
  });

  it("detects avatar-like path strings", () => {
    expect(looksLikeAvatarPath("avatars/openclaw.svg")).toBe(true);
    expect(looksLikeAvatarPath("openclaw.webp")).toBe(true);
    expect(looksLikeAvatarPath("avatar.ico")).toBe(true);
    expect(looksLikeAvatarPath("A")).toBe(false);
  });

  it("supports expected local file extensions", () => {
    expect(isSupportedLocalAvatarExtension("avatar.png")).toBe(true);
    expect(isSupportedLocalAvatarExtension("avatar.svg")).toBe(true);
    expect(isSupportedLocalAvatarExtension("avatar.ico")).toBe(false);
  });

  it("resolves mime type from extension", () => {
    expect(resolveAvatarMime("a.svg")).toBe("image/svg+xml");
    expect(resolveAvatarMime("a.tiff")).toBe("image/tiff");
    expect(resolveAvatarMime("A.PNG")).toBe("image/png");
    expect(resolveAvatarMime("a.bin")).toBe("application/octet-stream");
  });
});