cc-haha/src/server/__tests__/providers-real.test.ts
程序员阿江(Relakkes) 6e5dd94dad Stop bearer providers from inheriting local API keys
Desktop Anthropic-compatible relay providers use ANTHROPIC_AUTH_TOKEN for
Authorization, but the CLI process can still load a stale ANTHROPIC_API_KEY
from inherited env, original settings, keychain-backed config, or the SDK
constructor fallback. That made Provider Test pass while real sessions sent
both Authorization and x-api-key to relays such as Packy and Shengsuanyun,
which then rejected the request as an invalid token/key.

The client now avoids falling back to a local API key when bearer-token
provider auth is active. Provider-managed auth_token env also writes an empty
ANTHROPIC_API_KEY so cc-haha settings explicitly override stale original
settings during desktop/sidecar startup. Regression tests pin both the SDK
client behavior and the desktop child-env behavior.

Constraint: Anthropic-compatible relay providers can reject mixed Authorization plus x-api-key headers even when direct provider tests pass
Rejected: Treat this as a provider/model-name issue | local proxy captures showed the failing request shape before provider handling
Rejected: Rely only on client.ts fallback suppression | settings/env layering can leave ANTHROPIC_API_KEY populated before the client is constructed
Confidence: high
Scope-risk: moderate
Directive: Bearer-token provider sessions must keep Authorization without inheriting or reintroducing x-api-key from user/global settings
Tested: bun test src/services/api/client.test.ts
Tested: bun test src/server/__tests__/providers.test.ts src/server/__tests__/providers-real.test.ts src/server/__tests__/conversation-service.test.ts
Tested: bun run check:server
Tested: Source and packaged sidecar proxy captures with stale original ANTHROPIC_API_KEY showed Authorization=true and x-api-key=false after the fix
Tested: desktop/scripts/build-macos-arm64.sh
Tested: PackyCodex2ccCustom and 胜算云 packaged-sidecar live calls returned ok
Not-tested: Full manual UI click-through in the rebuilt macOS app window
2026-05-08 15:20:45 +08:00

260 lines
9.6 KiB
TypeScript
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

/**
* 用真实的 Provider 配置测试 ProviderService
* 验证添加、激活、cc-haha/settings.json 同步是否正确
* (provider env 写到 ~/.claude/cc-haha/settings.json不污染原版 settings.json)
*/
import { describe, test, expect, beforeEach, afterEach } from 'bun:test'
import * as fs from 'fs/promises'
import * as path from 'path'
import * as os from 'os'
import { ProviderService } from '../services/providerService.js'
const MODEL_MAPPING = {
main: 'MiniMax-M2.7-highspeed',
haiku: 'MiniMax-M2.7-highspeed',
sonnet: 'MiniMax-M2.7-highspeed',
opus: 'MiniMax-M2.7-highspeed',
}
describe('Real Provider Configs', () => {
let tmpDir: string
let service: ProviderService
beforeEach(async () => {
tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'provider-real-'))
process.env.CLAUDE_CONFIG_DIR = tmpDir
service = new ProviderService()
})
afterEach(async () => {
delete process.env.CLAUDE_CONFIG_DIR
await fs.rm(tmpDir, { recursive: true, force: true })
})
// Helper: read the Haha-specific settings file
async function readCcHahaSettings(): Promise<Record<string, unknown>> {
const raw = await fs.readFile(path.join(tmpDir, 'cc-haha', 'settings.json'), 'utf-8')
return JSON.parse(raw)
}
// Helper: check original settings.json is NOT modified
async function originalSettingsExists(): Promise<boolean> {
try {
await fs.access(path.join(tmpDir, 'settings.json'))
return true
} catch {
return false
}
}
test('添加 MiniMax Provider 并激活 — 写入 cc-haha/settings.json', async () => {
const minimax = await service.addProvider({
presetId: 'minimax',
name: 'MiniMax',
baseUrl: 'https://api.minimaxi.com/anthropic',
apiKey: 'sk-fake-test-key-for-testing-only',
models: MODEL_MAPPING,
notes: 'MiniMax 官方 Anthropic 兼容接口',
})
expect(minimax.name).toBe('MiniMax')
// 激活 provider
await service.activateProvider(minimax.id)
// 验证写入 cc-haha/settings.json
const settings = await readCcHahaSettings()
expect((settings.env as Record<string, string>).ANTHROPIC_BASE_URL).toBe('https://api.minimaxi.com/anthropic')
expect((settings.env as Record<string, string>).ANTHROPIC_AUTH_TOKEN).toBe('sk-fake-test-key-for-testing-only')
expect((settings.env as Record<string, string>).ANTHROPIC_API_KEY).toBe('')
expect((settings.env as Record<string, string>).ANTHROPIC_MODEL).toBe('MiniMax-M2.7-highspeed')
expect(JSON.parse((settings.env as Record<string, string>).CLAUDE_CODE_MODEL_CONTEXT_WINDOWS)).toMatchObject({
'MiniMax-M2.7': 204800,
'MiniMax-M2.7-highspeed': 204800,
})
// 验证原版 settings.json 没有被创建
expect(await originalSettingsExists()).toBe(false)
console.log('✅ Provider 写入 cc-haha/settings.json原版 settings.json 未被污染')
})
test('切换 Provider — 更新 cc-haha/settings.json', async () => {
const minimax = await service.addProvider({
presetId: 'minimax',
name: 'MiniMax',
baseUrl: 'https://api.minimaxi.com/anthropic',
apiKey: 'sk-api-test-minimax',
models: MODEL_MAPPING,
})
const jiekou = await service.addProvider({
presetId: 'custom',
name: '接口AI中转站',
baseUrl: 'https://api.jiekou.ai/anthropic',
apiKey: 'sk-fake-test-key-for-testing-only',
models: {
main: 'claude-opus-4-7',
haiku: 'claude-haiku-4-5',
sonnet: 'claude-sonnet-4-6',
opus: 'claude-opus-4-7',
},
})
// 先激活 MiniMax
await service.activateProvider(minimax.id)
let settings = await readCcHahaSettings()
expect((settings.env as Record<string, string>).ANTHROPIC_BASE_URL).toBe('https://api.minimaxi.com/anthropic')
expect(JSON.parse((settings.env as Record<string, string>).CLAUDE_CODE_MODEL_CONTEXT_WINDOWS)).toMatchObject({
'MiniMax-M2.7': 204800,
'MiniMax-M2.7-highspeed': 204800,
})
// 切换到接口AI中转站
await service.activateProvider(jiekou.id)
settings = await readCcHahaSettings()
expect((settings.env as Record<string, string>).ANTHROPIC_BASE_URL).toBe('https://api.jiekou.ai/anthropic')
expect((settings.env as Record<string, string>).ANTHROPIC_AUTH_TOKEN).toBe('sk-fake-test-key-for-testing-only')
expect((settings.env as Record<string, string>).ANTHROPIC_API_KEY).toBe('')
expect((settings.env as Record<string, string>).ANTHROPIC_MODEL).toBe('claude-opus-4-7')
expect((settings.env as Record<string, string>).CLAUDE_CODE_AUTO_COMPACT_WINDOW).toBeUndefined()
// 验证 activeId 正确
const list = await service.listProviders()
expect(list.activeId).toBe(jiekou.id)
// 原版 settings.json 依然不存在
expect(await originalSettingsExists()).toBe(false)
console.log('✅ 切换 Provider 成功cc-haha/settings.json 更新正确')
})
test('cc-haha/settings.json 保留已有字段', async () => {
// 预写一个有内容的 cc-haha/settings.json模拟用户已有配置
await fs.mkdir(path.join(tmpDir, 'cc-haha'), { recursive: true })
await fs.writeFile(
path.join(tmpDir, 'cc-haha', 'settings.json'),
JSON.stringify({
customField: 'should_be_preserved',
env: {
EXISTING_VAR: 'should_be_preserved',
},
}, null, 2),
)
// 添加并激活 provider
const provider = await service.addProvider({
presetId: 'custom',
name: '接口AI中转站',
baseUrl: 'https://api.jiekou.ai/anthropic',
apiKey: 'sk_test',
models: {
main: 'claude-opus-4-7',
haiku: 'claude-haiku-4-5',
sonnet: 'claude-sonnet-4-6',
opus: 'claude-opus-4-7',
},
})
await service.activateProvider(provider.id)
const settings = await readCcHahaSettings()
// 验证新字段写入
expect((settings.env as Record<string, string>).ANTHROPIC_BASE_URL).toBe('https://api.jiekou.ai/anthropic')
expect((settings.env as Record<string, string>).ANTHROPIC_AUTH_TOKEN).toBe('sk_test')
expect((settings.env as Record<string, string>).ANTHROPIC_API_KEY).toBe('')
// 验证已有字段保留
expect(settings.customField).toBe('should_be_preserved')
expect((settings.env as Record<string, string>).EXISTING_VAR).toBe('should_be_preserved')
console.log('✅ cc-haha/settings.json 已有字段全部保留')
})
test('activateOfficial 清除 provider env', async () => {
const provider = await service.addProvider({
presetId: 'minimax',
name: 'MiniMax',
baseUrl: 'https://api.minimaxi.com/anthropic',
apiKey: 'sk-test',
models: MODEL_MAPPING,
})
await service.activateProvider(provider.id)
// 确认写入了
let settings = await readCcHahaSettings()
expect((settings.env as Record<string, string>).ANTHROPIC_BASE_URL).toBeDefined()
// 切换到 official
await service.activateOfficial()
settings = await readCcHahaSettings()
const env = settings.env as Record<string, string> | undefined
expect(env?.ANTHROPIC_BASE_URL).toBeUndefined()
expect(env?.ANTHROPIC_API_KEY).toBeUndefined()
expect(env?.ANTHROPIC_AUTH_TOKEN).toBeUndefined()
expect(env?.ANTHROPIC_MODEL).toBeUndefined()
console.log('✅ activateOfficial 正确清除了 provider env')
})
test('连通性测试 — 返回结构正确', async () => {
const result = await service.testProviderConfig({
baseUrl: 'https://api.minimaxi.com/anthropic',
apiKey: 'sk-fake-test-key',
modelId: 'MiniMax-M2.7-highspeed',
authStrategy: 'auth_token',
})
// testProviderConfig 返回 { connectivity: { ... }, proxy?: { ... } }
expect(result.connectivity).toBeDefined()
expect(result.connectivity.latencyMs).toBeGreaterThanOrEqual(0)
expect(result.connectivity.modelUsed).toBe('MiniMax-M2.7-highspeed')
console.log('🔌 MiniMax 连通性测试结果:')
console.log(' success:', result.connectivity.success)
console.log(' latencyMs:', result.connectivity.latencyMs)
console.log(' error:', result.connectivity.error)
})
test('providers.json 和 cc-haha/settings.json 独立于 settings.json', async () => {
// 模拟原版 Claude Code 的 settings.json 已存在
await fs.writeFile(
path.join(tmpDir, 'settings.json'),
JSON.stringify({
effortLevel: 'high',
env: {
ANTHROPIC_BASE_URL: 'https://original-claude-code.api.com',
ANTHROPIC_API_KEY: 'original-key',
},
}, null, 2),
)
// Haha 添加并激活自己的 provider
const provider = await service.addProvider({
presetId: 'minimax',
name: 'MiniMax',
baseUrl: 'https://api.minimaxi.com/anthropic',
apiKey: 'sk-haha-key',
models: MODEL_MAPPING,
})
await service.activateProvider(provider.id)
// 验证原版 settings.json 没被修改
const original = JSON.parse(await fs.readFile(path.join(tmpDir, 'settings.json'), 'utf-8'))
expect((original.env as Record<string, string>).ANTHROPIC_BASE_URL).toBe('https://original-claude-code.api.com')
expect((original.env as Record<string, string>).ANTHROPIC_API_KEY).toBe('original-key')
expect(original.effortLevel).toBe('high')
// 验证 cc-haha/settings.json 是 Haha 自己的
const haha = await readCcHahaSettings()
expect((haha.env as Record<string, string>).ANTHROPIC_BASE_URL).toBe('https://api.minimaxi.com/anthropic')
expect((haha.env as Record<string, string>).ANTHROPIC_AUTH_TOKEN).toBe('sk-haha-key')
expect((haha.env as Record<string, string>).ANTHROPIC_API_KEY).toBe('')
console.log('✅ 原版 settings.json 完好无损Haha 配置独立存储')
})
})