'use strict'; const test = require('node:test'); const assert = require('node:assert/strict'); const { isCameraUrl, normalizeCameraUrl } = require('../src/url-policy'); const cameraUrl = 'https://avacam-abh7-c62u-gc3e.local'; test('permits only root local Alta camera HTTPS URLs', () => { assert.equal(isCameraUrl(cameraUrl), true); assert.equal(isCameraUrl('http://avacam-abh7-c62u-gc3e.local'), false); assert.equal(isCameraUrl('https://example.com'), false); assert.equal(isCameraUrl('https://user:pass@avacam-abh7-c62u-gc3e.local'), false); assert.equal(isCameraUrl('https://avacam-abh7-c62u-gc3e.local:8443'), false); assert.equal(isCameraUrl(`${cameraUrl}/anything`), false); assert.equal(isCameraUrl(`${cameraUrl}/?secret=value`), false); assert.equal(isCameraUrl(`${cameraUrl}/#fragment`), false); }); test('normalizes camera URLs to their canonical form', () => { assert.equal(normalizeCameraUrl(`${cameraUrl}/`), cameraUrl); assert.equal(normalizeCameraUrl(`${cameraUrl.toUpperCase()}/`), cameraUrl); });