api/services/nginx/app/tests/Unit/Selfserve/EdgeGatewayManagerUrlTest.php

<?php

app_require('classes/edge_gateway_manager.php');

use classes\edge_gateway_manager;

class EdgeGatewayManagerUrlHarness extends edge_gateway_manager
{
    public function __construct()
    {
    }
}

function with_edge_gateway_server_state(array $server, callable $callback): void
{
    $originalServer = $_SERVER;
    $originalPublicApiUrl = getenv('EDGE_PUBLIC_API_URL');
    $originalBrokerPublicUrl = getenv('EDGE_BROKER_PUBLIC_URL');

    $_SERVER = $server;

    try {
        $callback();
    } finally {
        $_SERVER = $originalServer;
        if ($originalPublicApiUrl === false) {
            putenv('EDGE_PUBLIC_API_URL');
        } else {
            putenv('EDGE_PUBLIC_API_URL=' . $originalPublicApiUrl);
        }
        if ($originalBrokerPublicUrl === false) {
            putenv('EDGE_BROKER_PUBLIC_URL');
        } else {
            putenv('EDGE_BROKER_PUBLIC_URL=' . $originalBrokerPublicUrl);
        }
    }
}

it('builds install script urls with forwarded https scheme when proxied', function (): void {
    with_edge_gateway_server_state([
        'HTTP_HOST' => 'api.truckwash.io:4433',
        'HTTP_X_FORWARDED_PROTO' => 'https',
    ], function (): void {
        $manager = new EdgeGatewayManagerUrlHarness();
        $script = $manager->buildInstallScript('abc123');

        expect($manager->getApiBaseUrl())->toBe('https://api.truckwash.io:4433');
        expect($manager->buildInstallTokenVerifyUrl('abc123'))->toBe('https://api.truckwash.io:4433/edge-agent/install-token/verify?token=abc123');
        expect($manager->buildInstallScriptUrl('abc123'))->toBe('https://api.truckwash.io:4433/edge-agent/install.sh?token=abc123');
        expect($manager->buildInstallCommand('abc123'))->toContain("https://api.truckwash.io:4433/edge-agent/install.sh?token=abc123");
        expect($script)->toContain('curl -fsSL "https://api.truckwash.io:4433/edge-agent/install-token/verify?token=abc123" >/dev/null');
        expect($script)->toContain('mkdir -p "$INSTALL_DIR"');
        expect($script)->toContain('curl -fsSL "https://api.truckwash.io:4433/edge-agent/artifacts/package.json" -o "$INSTALL_DIR/package.json"');
        expect($script)->toContain('curl -fsSL "https://api.truckwash.io:4433/edge-agent/artifacts/agent.mjs" -o "$INSTALL_DIR/agent.mjs"');
        expect($script)->toContain('"apiUrl":"https://api.truckwash.io:4433"');
        expect($script)->toContain('"brokerUrl":"https://api.truckwash.io:4433"');
        expect($script)->not->toContain('Undefined variable $INSTALL_DIR');
    });
});

it('appends forwarded ports when the forwarded host omits them', function (): void {
    with_edge_gateway_server_state([
        'HTTP_X_FORWARDED_PROTO' => 'https',
        'HTTP_X_FORWARDED_HOST' => 'api.truckwash.io',
        'HTTP_X_FORWARDED_PORT' => '4433',
    ], function (): void {
        $manager = new EdgeGatewayManagerUrlHarness();

        expect($manager->getApiBaseUrl())->toBe('https://api.truckwash.io:4433');
    });
});

it('infers https for the staging api host when only the https port is present', function (): void {
    with_edge_gateway_server_state([
        'HTTP_HOST' => 'api.truckwash.io:4433',
        'SERVER_PORT' => '4433',
    ], function (): void {
        $manager = new EdgeGatewayManagerUrlHarness();
        $script = $manager->buildInstallScript('port-only');

        expect($manager->getApiBaseUrl())->toBe('https://api.truckwash.io:4433');
        expect($script)->toContain('"apiUrl":"https://api.truckwash.io:4433"');
        expect($script)->toContain('"brokerUrl":"https://api.truckwash.io:4433"');
    });
});

it('prefers EDGE_PUBLIC_API_URL when explicitly configured and derives the broker from the api origin', function (): void {
    with_edge_gateway_server_state([
        'HTTP_HOST' => 'localhost',
        'HTTP_X_FORWARDED_PROTO' => 'http',
    ], function (): void {
        putenv('EDGE_PUBLIC_API_URL=https://edge.example.test/api');

        $manager = new EdgeGatewayManagerUrlHarness();

        expect($manager->getApiBaseUrl())->toBe('https://edge.example.test/api');
        expect($manager->getBrokerPublicUrl())->toBe('https://edge.example.test');
        expect($manager->buildInstallScriptUrl('token-1'))->toBe('https://edge.example.test/api/edge-agent/install.sh?token=token-1');
        expect($manager->buildBrowserShellWsUrl('token-1'))->toBe('wss://edge.example.test/ws/browser-shell?token=token-1');
    });
});

it('normalizes public broker overrides to https, strips paths, and browser shell urls to wss', function (): void {
    with_edge_gateway_server_state([
        'HTTP_HOST' => 'localhost',
        'HTTP_X_FORWARDED_PROTO' => 'http',
    ], function (): void {
        putenv('EDGE_BROKER_PUBLIC_URL=http://api.truckwash.io:4300/edge-broker');

        $manager = new EdgeGatewayManagerUrlHarness();

        expect($manager->getBrokerPublicUrl())->toBe('https://api.truckwash.io:4300');
        expect($manager->buildBrowserShellWsUrl('shell-token'))->toBe('wss://api.truckwash.io:4300/ws/browser-shell?token=shell-token');
    });
});

it('keeps localhost broker overrides on plain http and ws for local development', function (): void {
    with_edge_gateway_server_state([
        'HTTP_HOST' => 'localhost:5173',
        'HTTP_X_FORWARDED_PROTO' => 'http',
    ], function (): void {
        putenv('EDGE_BROKER_PUBLIC_URL=http://localhost:4300');

        $manager = new EdgeGatewayManagerUrlHarness();

        expect($manager->getBrokerPublicUrl())->toBe('http://localhost:4300');
        expect($manager->buildBrowserShellWsUrl('shell-token'))->toBe('ws://localhost:4300/ws/browser-shell?token=shell-token');
    });
});

it('includes node-pty build prerequisites in the generated install script', function (): void {
    with_edge_gateway_server_state([
        'HTTP_HOST' => 'api.truckwash.io:4433',
        'HTTP_X_FORWARDED_PROTO' => 'https',
    ], function (): void {
        $manager = new EdgeGatewayManagerUrlHarness();
        $script = $manager->buildInstallScript('pty-token');

        expect($script)->toMatch('/set -euo pipefail\s+curl -fsSL "https:\/\/api\.truckwash\.io:4433\/edge-agent\/install-token\/verify\?token=pty-token" >\/dev\/null\s+INSTALL_DIR=\/opt\/truckwash-edge-agent/');
        expect($script)->toContain('apt-get install -y curl ca-certificates nodejs npm python3 make g++');
        expect($script)->toContain('npm install --omit=dev');
    });
});