teqo/tests/unit/localHosts.unit.spec.ts

// @vitest-environment node

import { describe, expect, it } from 'vitest'

import { defaultGatewayHost, LOCAL_HOSTS } from '../../scripts/lib/cli.mjs'

describe('LOCAL_HOSTS (OPS50 — self-hosted runner reaches services via the bridge gateway)', () => {
  it('still contains the canonical static hosts', () => {
    for (const host of ['localhost', '127.0.0.1', '0.0.0.0', '::1', 'postgres']) {
      expect(LOCAL_HOSTS.has(host)).toBe(true)
    }
  })

  it('admits the machine default gateway when it is RFC1918 (Linux CI bridge)', () => {
    const gateway = defaultGatewayHost()
    if (gateway) {
      // The Forgejo runner publishes the job's postgres service on the bridge
      // gateway IP; assertLocalDatabase must accept it so seeds run in CI.
      expect(LOCAL_HOSTS.has(gateway)).toBe(true)
    }
  })

  it('never admits public or loopback hosts', () => {
    expect(LOCAL_HOSTS.has('8.8.8.8')).toBe(false)
    expect(LOCAL_HOSTS.has('127.0.0.2')).toBe(false)
    expect(LOCAL_HOSTS.has('203.0.113.1')).toBe(false)
  })
})