+ ;
copyAppInfo(): Promise;
+ // v0.2.8 Cut A — 첨부 이미지를 OS 기본 뷰어로 열기 (Task 3).
+ openMedia(relPath: string): Promise<{ ok: true } | { ok: false; reason: string }>;
}
export interface InklingApi {
diff --git a/tests/unit/NoteCard.test.tsx b/tests/unit/NoteCard.test.tsx
new file mode 100644
index 0000000..cff2f66
--- /dev/null
+++ b/tests/unit/NoteCard.test.tsx
@@ -0,0 +1,81 @@
+// @vitest-environment jsdom
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import '@testing-library/jest-dom/vitest';
+import { render, screen, fireEvent, cleanup } from '@testing-library/react';
+import type { Note } from '@shared/types';
+
+const { mockOpenMedia } = vi.hoisted(() => ({
+ mockOpenMedia: vi.fn(async () => ({ ok: true }))
+}));
+
+vi.mock('../../src/renderer/inbox/api.js', () => ({
+ inboxApi: {
+ openMedia: mockOpenMedia,
+ deleteNote: vi.fn(),
+ restoreNote: vi.fn(),
+ permanentDeleteNote: vi.fn(),
+ updateAiFields: vi.fn(),
+ setDueDate: vi.fn(),
+ setIntent: vi.fn(),
+ dismissIntent: vi.fn()
+ }
+}));
+
+vi.mock('../../src/renderer/inbox/store.js', () => ({
+ useInbox: Object.assign(
+ () => ({}),
+ { getState: () => ({ setTagFilter: vi.fn() }) }
+ )
+}));
+
+import { NoteCard } from '../../src/renderer/inbox/components/NoteCard';
+
+const baseNote: Note = {
+ id: 'n1',
+ rawText: 'test',
+ aiTitle: 'T',
+ aiSummary: 'S',
+ aiStatus: 'done',
+ aiError: null,
+ aiProvider: null,
+ aiGeneratedAt: '2026-05-09T00:00:00Z',
+ titleEditedByUser: false,
+ summaryEditedByUser: false,
+ userIntent: null,
+ intentPromptedAt: '2026-05-09T00:00:00Z',
+ dueDate: null,
+ dueDateEditedByUser: false,
+ deletedAt: null,
+ lastRecalledAt: null,
+ recallDismissedAt: null,
+ createdAt: '2026-05-09T00:00:00Z',
+ updatedAt: '2026-05-09T00:00:00Z',
+ tags: [],
+ media: [
+ { id: 'm1', kind: 'image', relPath: 'media/n1/img1.png', mime: 'image/png', bytes: 100 },
+ { id: 'm2', kind: 'image', relPath: 'media/n1/img2.jpg', mime: 'image/jpeg', bytes: 200 }
+ ]
+};
+
+describe('NoteCard — image rendering', () => {
+ beforeEach(() => {
+ vi.clearAllMocks();
+ cleanup();
+ });
+
+ it('renders ![]()
for each media item', () => {
+ render( {}} mode="inbox" />);
+ const imgs = screen.getAllByRole('presentation');
+ expect(imgs).toHaveLength(2);
+ expect(imgs[0]?.getAttribute('src')).toBe('inkling-media://media/n1/img1.png');
+ expect(imgs[1]?.getAttribute('src')).toBe('inkling-media://media/n1/img2.jpg');
+ });
+
+ it('clicking ![]()
calls inboxApi.openMedia', () => {
+ render( {}} mode="inbox" />);
+ const first = screen.getAllByRole('presentation')[0];
+ if (first === undefined) throw new Error('expected at least one img');
+ fireEvent.click(first);
+ expect(mockOpenMedia).toHaveBeenCalledWith('media/n1/img1.png');
+ });
+});
diff --git a/tests/unit/inboxApi-openMedia.test.ts b/tests/unit/inboxApi-openMedia.test.ts
new file mode 100644
index 0000000..0625653
--- /dev/null
+++ b/tests/unit/inboxApi-openMedia.test.ts
@@ -0,0 +1,62 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { join } from 'node:path';
+
+const { handlers, mockOpenPath } = vi.hoisted(() => ({
+ handlers: {} as Record unknown>,
+ mockOpenPath: vi.fn(async () => '')
+}));
+
+vi.mock('electron', () => ({
+ default: {
+ ipcMain: {
+ handle: (ch: string, fn: (...args: unknown[]) => unknown) => {
+ handlers[ch] = fn;
+ }
+ },
+ dialog: {},
+ shell: { openPath: mockOpenPath }
+ }
+}));
+
+import { registerInboxApi } from '../../src/main/ipc/inboxApi';
+
+function makeDeps(profileDir: string): Parameters[0] {
+ // Minimal stub — `inbox:open-media` 핸들러는 deps.paths.profileDir 만 참조.
+ return {
+ repo: {} as never,
+ continuity: {} as never,
+ capture: {} as never,
+ health: {} as never,
+ intent: {} as never,
+ getInboxWindow: () => null,
+ settings: {} as never,
+ providerHolder: {} as never,
+ paths: { profileDir }
+ };
+}
+
+describe('inbox:open-media IPC', () => {
+ beforeEach(() => {
+ Object.keys(handlers).forEach((k) => delete handlers[k]);
+ mockOpenPath.mockClear();
+ });
+
+ it('opens valid relPath with shell.openPath', async () => {
+ registerInboxApi(makeDeps('/profile'));
+ const handler = handlers['inbox:open-media'];
+ if (handler === undefined) throw new Error('handler not registered');
+ const r = await handler(null, 'media/note1/img.png');
+ expect(r).toEqual({ ok: true });
+ expect(mockOpenPath).toHaveBeenCalledWith(join('/profile', 'media', 'note1', 'img.png'));
+ });
+
+ it('rejects path traversal with reason "invalid path"', async () => {
+ registerInboxApi(makeDeps('/profile'));
+ const handler = handlers['inbox:open-media'];
+ if (handler === undefined) throw new Error('handler not registered');
+ const r = await handler(null, '../etc/passwd') as { ok: boolean; reason?: string };
+ expect(r.ok).toBe(false);
+ expect(r.reason).toBe('invalid path');
+ expect(mockOpenPath).not.toHaveBeenCalled();
+ });
+});
diff --git a/tests/unit/inklingMedia.test.ts b/tests/unit/inklingMedia.test.ts
new file mode 100644
index 0000000..8b333c5
--- /dev/null
+++ b/tests/unit/inklingMedia.test.ts
@@ -0,0 +1,74 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { join, sep } from 'node:path';
+
+const { mockReadFile, mockHandle, mockRegisterSchemes } = vi.hoisted(() => ({
+ mockReadFile: vi.fn(),
+ mockHandle: vi.fn(),
+ mockRegisterSchemes: vi.fn()
+}));
+
+vi.mock('node:fs/promises', () => ({
+ readFile: mockReadFile
+}));
+
+vi.mock('electron', () => ({
+ default: {
+ protocol: {
+ registerSchemesAsPrivileged: mockRegisterSchemes,
+ handle: mockHandle
+ }
+ }
+}));
+
+import { registerInklingMediaProtocol, inferMime } from '../../src/main/protocol/inklingMedia';
+
+describe('inferMime', () => {
+ it('returns image/png for .png', () => { expect(inferMime('foo.png')).toBe('image/png'); });
+ it('returns image/jpeg for .jpg and .jpeg', () => {
+ expect(inferMime('foo.jpg')).toBe('image/jpeg');
+ expect(inferMime('foo.jpeg')).toBe('image/jpeg');
+ });
+ it('returns image/gif for .gif', () => { expect(inferMime('foo.gif')).toBe('image/gif'); });
+ it('returns image/webp for .webp', () => { expect(inferMime('foo.webp')).toBe('image/webp'); });
+ it('returns application/octet-stream for unknown', () => { expect(inferMime('foo.xyz')).toBe('application/octet-stream'); });
+});
+
+describe('inkling-media protocol handler', () => {
+ beforeEach(() => { vi.clearAllMocks(); });
+
+ function getHandler(profileDir: string): (req: { url: string }) => Promise {
+ registerInklingMediaProtocol(profileDir);
+ const call = mockHandle.mock.calls[0];
+ if (!call) throw new Error('protocol.handle not called');
+ return call[1] as (req: { url: string }) => Promise;
+ }
+
+ // 실 운영 (Electron protocol.handle) 에서는 req.url 이 raw 문자열로 전달되지만,
+ // vitest 의 `new Request()` constructor 는 url 을 즉시 normalize (`/../` 제거) 함.
+ // 따라서 traversal 검사 로직이 raw URL 단계에서 작동하는지 검증하려면
+ // raw url 을 보존한 minimal mock 을 직접 전달.
+ function rawReq(url: string): { url: string } { return { url }; }
+
+ it('serves valid file with correct mime', async () => {
+ mockReadFile.mockResolvedValueOnce(Buffer.from([1, 2, 3]));
+ const handler = getHandler('/profile');
+ const res = await handler(rawReq('inkling-media://media/note1/img.png'));
+ expect(res.status).toBe(200);
+ expect(res.headers.get('content-type')).toBe('image/png');
+ expect(mockReadFile).toHaveBeenCalledWith(join('/profile', 'media', 'note1', 'img.png'));
+ });
+
+ it('returns 403 on path traversal attempt', async () => {
+ const handler = getHandler('/profile');
+ const res = await handler(rawReq('inkling-media://media/../etc/passwd'));
+ expect(res.status).toBe(403);
+ expect(mockReadFile).not.toHaveBeenCalled();
+ });
+
+ it('returns 404 when file missing', async () => {
+ mockReadFile.mockRejectedValueOnce(new Error('ENOENT'));
+ const handler = getHandler('/profile');
+ const res = await handler(rawReq('inkling-media://media/note1/missing.png'));
+ expect(res.status).toBe(404);
+ });
+});
{local.media.map((m) => (
-
+ // alt="" — decorative (relPath 는 사용자 의미 X). title 이 hover tooltip.
+ 
{ void inboxApi.openMedia(m.relPath); }}
+ style={{
+ width: 48,
+ height: 48,
+ objectFit: 'cover',
+ borderRadius: 4,
+ cursor: 'pointer',
+ border: '1px solid #e0e0e0'
+ }}
+ />
))}
)}
diff --git a/src/shared/types.ts b/src/shared/types.ts
index 883651e..4e78fd8 100644
--- a/src/shared/types.ts
+++ b/src/shared/types.ts
@@ -126,6 +126,8 @@ export interface InboxApi {
}>;
openProfileDir(): Promise