import { optimizeImageToPng } from "openclaw/plugin-sdk/web-media";

import sharp from "sharp";

import { afterAll, afterEach, beforeAll, describe, expect, it, vi } from "vitest";

import { sendVoiceMessageDiscord } from "../../discord/src/send.js";

import {

LocalMediaAccessError,

loadWebMedia,

});

});

describe("Discord voice message input hardening", () => {

it("rejects unsafe voice message inputs", async () => {

const cases = [

{

name: "local path outside allowed media roots",

candidate: path.join(process.cwd(), "package.json"),

expectedMessage: /Local media path is not under an allowed directory/i,

},

{

name: "private-network URL",

candidate: "http://127.0.0.1/voice.ogg",

expectedMessage: /Failed to fetch media|Blocked|private|internal/i,

},

{

name: "non-http URL scheme",

candidate: "rtsp://example.com/voice.ogg",

expectedMessage: /Local media path is not under an allowed directory|ENOENT|no such file/i,

},

] as const;

for (const testCase of cases) {

await expect(

sendVoiceMessageDiscord("channel:123", testCase.candidate, { cfg: {} as never }),

testCase.name,

).rejects.toThrow(testCase.expectedMessage);

}

});

});

describe("local media root guard", () => {

it("rejects local paths outside allowed roots", async () => {

// Explicit roots that don't contain the temp file.