Pre-launch — Gluecron is in final validation. Public signups and git hosting for non-owner users open after launch review.
CodeIssuesDiscussionsWikiPull RequestsProjectsCommitsActionsReleasesContributorsPulse● GatesSecuritySettingsDeploymentsPipelineInsightsAgents✨ Explain✨ Ask AI✨ Workspace✨ Spec✨ Tests▓ Debt Map✨ NL Search🏛 Archaeology
claude/adoring-hopper-5x74bqclaude/affectionate-feynman-ykrf1hclaude/architecture-audit-design-wxprenclaude/build-status-update-3MXsfclaude/charming-meitner-mllb5rclaude/compare-gate-gluecron-s4mFQclaude/confident-faraday-tikcwbclaude/continue-work-XMTlIclaude/crontech-gluecron-deploy-7MIECclaude/crontech-platform-setup-SeKfwclaude/design-2026claude/ecstatic-ptolemy-jMdigclaude/enhance-github-integration-QNHdGclaude/fix-aa-loop-issue-PonMQclaude/fix-actions-and-processclaude/fix-desktop-errors-XqoW8claude/fix-red-workflowsclaude/fix-website-access-6FKJNclaude/gatetest-integration-hardeningclaude/github-audit-improvements-bDFr9claude/gluecron-launch-status-FoMRlclaude/hopeful-lamport-olfCTclaude/issue-to-pr-and-protectionsclaude/jolly-heisenberg-2sg1Qclaude/launch-preparation-QmTb6claude/new-session-xk1l7claude/plan-platform-architecture-kkN4yclaude/platform-analysis-roadmap-1nUGLclaude/platform-launch-assessment-8dWV8claude/polish-platform-release-AeDrUclaude/resume-previous-work-KzyLwclaude/review-crontech-handoff-qYEVqclaude/review-project-completeness-lHhS2claude/review-readme-docs-ulqPKclaude/serene-edison-rj87weclaude/setup-multi-repo-dev-BCwNQclaude/ship-fixes-and-tests-Jvz1cclaude/site-audit-competitive-pctlwgclaude/site-migration-vercel-XstpKclaude/standalone-product-repos-XHFTDcopilot/feat-smart-empty-states-keyboard-first-enhancementcopilot/feat-smart-morning-digest-review-context-restorecopilot/fix-and-process-workflowscopilot/update-ai-powered-code-reviewfeat/debt-mapfeat/push-policy-codeowners-hardeningfeat/smart-digest-contextfeat/stage-impactfeat/t1-secret-migrationfeat/u-polishfeat/w-self-hostfeat/w2-claude-configfix/agent-journey-orphan-sweepgatetest/auto-fix-1776586424172gatetest/auto-fix-1776586534814gatetest/auto-fix-1776590685143gatetest/auto-fix-1776590808199mainops/redeploy-retriggerstyle/dxt-cta-themeworktree-agent-a3377aad30d55da26worktree-agent-a7ef607b7ee1d6c74
live-events.test.ts2.8 KB · 82 lines
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
/**
 * Smoke tests for GET /live-events/:topic — primarily the topic
 * grammar. The full streaming path needs a live DB (read-gate), so we
 * focus on:
 *   - 400 on invalid topics (single-letter, missing kind, bad chars)
 *   - non-400 on the valid forms (single-segment `kind:id`, multi-
 *     segment `kind:id:scope1:scope2`).
 *
 * The route uses softAuth; no cookie required.
 */

import { describe, it, expect } from "bun:test";
import app from "../app";

const NON_400_OK = [200, 301, 302, 303, 307, 401, 403, 404, 503];

describe("GET /live-events/:topic — topic grammar", () => {
  it("rejects an empty path beyond the prefix", async () => {
    const res = await app.request("/live-events/", { redirect: "manual" });
    // 404 for "no param" (Hono path doesn't match) is acceptable.
    expect([400, 404]).toContain(res.status);
  });

  it("rejects a kind-only topic (no id)", async () => {
    const res = await app.request("/live-events/repo");
    expect([400, 404]).toContain(res.status);
  });

  it("rejects topics with disallowed characters", async () => {
    const res = await app.request(
      "/live-events/" + encodeURIComponent("repo:has spaces")
    );
    expect(res.status).toBe(400);
  });

  it("rejects topics with embedded slash", async () => {
    const res = await app.request(
      "/live-events/" + encodeURIComponent("repo:foo/bar")
    );
    expect(res.status).toBe(400);
  });

  it("accepts the canonical single-segment form (repo:<uuid>)", async () => {
    const uuid = "00000000-0000-0000-0000-000000000000";
    const res = await app.request(`/live-events/repo:${uuid}`, {
      redirect: "manual",
    });
    // Either 404 (repo not found in DB) or some auth response — but
    // critically not 400. The grammar must accept this shape.
    expect(res.status).not.toBe(400);
    expect(NON_400_OK).toContain(res.status);
  });

  it("accepts a multi-segment topic (repo:<uuid>:issue:7)", async () => {
    const uuid = "00000000-0000-0000-0000-000000000000";
    const res = await app.request(
      `/live-events/repo:${uuid}:issue:7`,
      { redirect: "manual" }
    );
    expect(res.status).not.toBe(400);
    expect(NON_400_OK).toContain(res.status);
  });

  it("accepts a multi-segment PR topic (repo:<uuid>:pr:9)", async () => {
    const uuid = "00000000-0000-0000-0000-000000000000";
    const res = await app.request(
      `/live-events/repo:${uuid}:pr:9`,
      { redirect: "manual" }
    );
    expect(res.status).not.toBe(400);
    expect(NON_400_OK).toContain(res.status);
  });

  it("accepts a non-repo kind (passes the read-gate)", async () => {
    // `user:42` is not a repo so the auth-gate is bypassed; should
    // open a stream (200 + text/event-stream) or fail later.
    const res = await app.request(`/live-events/user:42`, {
      redirect: "manual",
    });
    expect(res.status).not.toBe(400);
  });
});