1import assert from "node:assert/strict";2import test from "node:test";34import { isControlOrigin, siteAddressFromUrl, siteUrl } from "../src/env.ts";56const env = {7 PUBLIC_BASE: "https://n.zip",8 SITE_DOMAIN: "n.zip",9};1011test("control and site hosts are classified without trusting arbitrary wildcard hosts", () => {12 assert.equal(isControlOrigin(env, new URL("https://n.zip/api/status")), true);13 assert.equal(isControlOrigin(env, new URL("http://n.zip/2a3f")), true);14 assert.equal(isControlOrigin(env, new URL("https://2a3f.n.zip/")), false);1516 assert.equal(siteAddressFromUrl(env, new URL("https://2a3f.n.zip/")), "2a3f");17 assert.equal(siteAddressFromUrl(env, new URL("http://2a3f.n.zip/")), "2a3f");18 assert.equal(siteAddressFromUrl(env, new URL("https://site.n.zip/")), null);19 assert.equal(siteAddressFromUrl(env, new URL("https://2a3f.evil.n.zip/")), null);20 assert.equal(siteAddressFromUrl(env, new URL("https://n.zip/")), null);21});2223test("site URLs always derive from the configured public HTTPS base", () => {24 assert.equal(25 siteUrl(env, "2a3f", "/docs/", "?view=full"),26 "https://2a3f.n.zip/docs/?view=full",27 );28});2930test("invalid site domains fail closed", () => {31 assert.throws(32 () => siteUrl({ ...env, SITE_DOMAIN: "bad..domain" }, "2a3f"),33 /invalid SITE_DOMAIN/,34 );35});