feat(headless): Implement Phase 2 - Core API Routes & Authentication

tests/temp_project_history.toml

@@ -9,7 +9,7 @@ auto_add = true
 
 [discussions.main]
 git_commit = ""
-last_updated = "2026-02-25T13:02:29"
+last_updated = "2026-02-25T13:08:45"
 history = [
     "@1772042443.1159382\nUser:\nStress test entry 0 Stress test entry 0 Stress test entry 0 Stress test entry 0 Stress test entry 0",
     "@1772042443.1159382\nUser:\nStress test entry 1 Stress test entry 1 Stress test entry 1 Stress test entry 1 Stress test entry 1",

tests/test_headless_api.py

@@ -23,13 +23,40 @@ class TestHeadlessAPI(unittest.TestCase):
         self.assertEqual(response.status_code, 200)
         self.assertEqual(response.json(), {"status": "ok"})
 
-    def test_status_endpoint(self):
-        response = self.client.get("/status")
-        self.assertEqual(response.status_code, 200)
-        data = response.json()
-        self.assertIn("provider", data)
-        self.assertIn("model", data)
-        self.assertIn("active_project", data)
+    def test_status_endpoint_unauthorized(self):
+        # Ensure a key is required
+        with patch.dict(self.app_instance.config, {"headless": {"api_key": "some-required-key"}}):
+            response = self.client.get("/status")
+            self.assertEqual(response.status_code, 403)
+
+    def test_status_endpoint_authorized(self):
+        # We'll use a test key
+        headers = {"X-API-KEY": "test-secret-key"}
+        with patch.dict(self.app_instance.config, {"headless": {"api_key": "test-secret-key"}}):
+            response = self.client.get("/status", headers=headers)
+            self.assertEqual(response.status_code, 200)
+
+    def test_generate_endpoint(self):
+        payload = {
+            "prompt": "Hello AI"
+        }
+        # Mock ai_client.send and get_comms_log
+        with patch('gui_2.ai_client.send') as mock_send, \
+             patch('gui_2.ai_client.get_comms_log') as mock_log:
+            mock_send.return_value = "Hello from Mock AI"
+            mock_log.return_value = [{
+                "kind": "response",
+                "payload": {
+                    "usage": {"input_tokens": 10, "output_tokens": 5}
+                }
+            }]
+            
+            response = self.client.post("/api/v1/generate", json=payload)
+            self.assertEqual(response.status_code, 200)
+            data = response.json()
+            self.assertEqual(data["text"], "Hello from Mock AI")
+            self.assertIn("metadata", data)
+            self.assertEqual(data["usage"]["input_tokens"], 10)
 
 if __name__ == "__main__":
     unittest.main()