Merge pull request #317 from Heretek-AI/fixup/test-env-guard

fix(tooling): remove ambient web-provider settings before any suite loads (Refs #312)

bunfig.toml

@@ -3,3 +3,5 @@ timeout = 30000
 # Discovery starts at packages/: a bare `bun test` or path filter never walks
 # review/ or evals/ (#159). Paths outside it still run when given as ./path.
 root = "packages"
+# Ambient web-provider settings are removed before any suite loads (#312).
+preload = ["./scripts/test-preload.ts"]

packages/core/test/clean-room.test.ts

@@ -1,8 +1,10 @@
 // Clean-room isolation (#159): the workspace test, lint and typecheck entry
 // points stay inside packages/. Local-only reference checkouts (review/,
 // evals/results/) and nested worktrees carry third-party suites that hang and
-// biome.json files that are nested roots, so nothing may walk them. Each test
+// biome.json files that are nested roots, so nothing may walk them. Web
-// runs the real root config against a throwaway tree with planted intruders.
+// provider keys exported in the developer's shell are the same kind of leak
+// (#312). Each test runs the real root config against a throwaway tree with
+// planted intruders.
 import { afterEach, describe, expect, test } from "bun:test"
 import { cp, mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises"
 import { tmpdir } from "node:os"
@@ -44,6 +46,8 @@ async function fixture(options: { bunfig: boolean }) {
   if (options.bunfig) await cp(path.join(repo, "bunfig.toml"), path.join(root, "bunfig.toml"))
   await mkdir(path.join(root, "scripts"))
   await cp(path.join(repo, "scripts/packages.ts"), path.join(root, "scripts/packages.ts"))
+  // bunfig.toml names a preload, so it travels with the config.
+  if (options.bunfig) await cp(path.join(repo, "scripts/test-preload.ts"), path.join(root, "scripts/test-preload.ts"))
 
   // beta takes the `--conditions=browser` leg of the test script, alpha the other.
   const manifests = {
@@ -64,12 +68,12 @@ async function fixture(options: { bunfig: boolean }) {
   return root
 }
 
-async function run(root: string, cmd: string[]) {
+async function run(root: string, cmd: string[], env: Record<string, string> = {}) {
   const log = path.join(root, "loaded.log")
   await writeFile(log, "")
   const proc = Bun.spawn(cmd, {
     cwd: root,
-    env: { ...process.env, CLEAN_ROOM_LOG: log },
+    env: { ...process.env, ...env, CLEAN_ROOM_LOG: log },
     stdout: "pipe",
     stderr: "pipe",
   })
@@ -105,6 +109,39 @@ describe("test runner isolation", () => {
   })
 })
 
+describe("ambient environment isolation", () => {
+  // Every setting the research providers and the gateway backend read.
+  const PROVIDER_KEYS = [
+    "BRAVE_API_KEY",
+    "FIRECRAWL_API_KEY",
+    "FIRECRAWL_API_URL",
+    "SEARXNG_URL",
+    "ES_SCRAPER_SWARM_URL",
+    "ES_SCRAPER_SWARM_TOKEN",
+  ]
+
+  test("web provider settings from the developer shell never reach a suite", async () => {
+    const root = await fixture({ bunfig: true })
+    await writeFile(
+      path.join(root, "packages/alpha/test/env.test.ts"),
+      [
+        'import { expect, test } from "bun:test"',
+        'import { appendFileSync } from "node:fs"',
+        "",
+        `const seen = ${JSON.stringify(PROVIDER_KEYS)}.filter((key) => process.env[key] !== undefined)`,
+        'appendFileSync(process.env.CLEAN_ROOM_LOG!, "leaked:" + seen.join(",") + "\\n")',
+        "",
+        'test("probe", () => expect(seen).toEqual([]))',
+        "",
+      ].join("\n"),
+    )
+    const ambient = Object.fromEntries(PROVIDER_KEYS.map((key) => [key, "ambient-must-not-leak"]))
+    const result = await run(root, ["bun", "test", "./packages/alpha/test/env.test.ts"], ambient)
+    expect(result.loaded).toEqual(["leaked:"])
+    expect(result.exit).toBe(0)
+  })
+})
+
 describe("lint and typecheck isolation", () => {
   test("`biome check .` ignores nested root configs outside packages/", async () => {
     const root = await fixture({ bunfig: true })

scripts/test-preload.ts

@@ -0,0 +1,13 @@
+// Preloaded by every root `bun test` run (bunfig.toml, [test] preload). Web
+// provider settings exported in the developer's shell must never reach a
+// suite: a real key sends fixture queries to the live API and spends quota
+// (#312). A test that needs one sets its own value after this runs.
+for (const key of [
+  "BRAVE_API_KEY",
+  "FIRECRAWL_API_KEY",
+  "FIRECRAWL_API_URL",
+  "SEARXNG_URL",
+  "ES_SCRAPER_SWARM_URL",
+  "ES_SCRAPER_SWARM_TOKEN",
+])
+  delete process.env[key]