GithubStar/codegraph
1
0
Fork 0
mirror of https://github.com/colbymchenry/codegraph.git synced 2026-10-28 14:08:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

test: isolate hosted catalog selection and persistence readback [skip ci]

Browse Source
This commit is contained in:
Forge
2026-09-22 21:20:29 +00:00
parent 384daf329f
commit 2b9ec85df6
3 changed files with 23 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
marketplace/cloudflare/.gitignore
+2
View File
@@ -3,3 +3,5 @@ node_modules/
.wrangler/
.dev.vars*
wrangler.deploy.json
wrangler.window.json
wrangler.restore.json
scripts/validation/cloudflare-hosted-browser.cjs
+9 -9
View File
@@ -15,9 +15,9 @@ const checks = [];
const safeError = error => String(error.stack || error).replace(/token=[a-f0-9]+/g, 'token=[redacted]');
function artifact(version, broken = false) {
return Buffer.from(JSON.stringify({ format: 'codegraph-extension-1', package: {
name: '@browser/example', version, main: 'index.cjs', codegraph: { id: 'hosted-browser-20260922', apiVersion: 1, capabilities: ['frameworks'] },
name: '@browser/example', version, main: 'index.cjs', codegraph: { id: 'hosted-browser-20260922c', apiVersion: 1, capabilities: ['frameworks'] },
}, files: { 'index.cjs': `module.exports=()=>({frameworks:[{name:'route',languages:['typescript'],detect:()=>true,resolve:()=>null,
extract(file){${broken ? "throw Error('Rejected browser update');" : ''} return {nodes:[{id:'plugin:hosted-browser-20260922:'+file,kind:'route',name:'/browser-${version}',qualifiedName:file+'::browser',filePath:file,language:'typescript',startLine:1,endLine:1,startColumn:0,endColumn:0,updatedAt:0}],references:[]}}}]});` } }));
extract(file){${broken ? "throw Error('Rejected browser update');" : ''} return {nodes:[{id:'plugin:hosted-browser-20260922c:'+file,kind:'route',name:'/browser-${version}',qualifiedName:file+'::browser',filePath:file,language:'typescript',startLine:1,endLine:1,startColumn:0,endColumn:0,updatedAt:0}],references:[]}}}]});` } }));
}
function routes(root) {
const file = path.join(root, '.codegraph/codegraph.db');
@@ -33,7 +33,7 @@ function routes(root) {
try {
let origin = process.env.HOSTED_REGISTRY;
assert.match(origin || '', /^https:\/\/[a-z0-9.-]+\.workers\.dev$/);
assert.equal((await(await fetch(origin+'/api/extensions/hosted-browser-20260922')).json()).length,0,'Fixture already exists; use a fresh isolated target or rename this owned fixture');
assert.equal((await(await fetch(origin+'/api/extensions/hosted-browser-20260922c')).json()).length,0,'Fixture already exists; use a fresh isolated target or rename this owned fixture');
if (process.env.REGISTRY_TEST_HTTPS === '1') { https = await require('./https-marketplace.cjs').httpsMarketplace(server.port, out); origin = https.origin; }
bridge = await startExtensionBridge(roots, origin);
const token = new URLSearchParams(new URL(bridge.connectionUrl).hash.slice(1)).get('token');
@@ -81,11 +81,11 @@ function routes(root) {
assert.equal(await page.locator('#source').inputValue(), 'https://example.com/recovery-source');
await page.getByRole('button', { name: 'Publish release' }).click();
console.log('Submitted', version);
await page.waitForURL('**/extensions/hosted-browser-20260922');
await page.waitForURL('**/extensions/hosted-browser-20260922c');
await page.getByText(version, { exact: true }).waitFor();
}
await publish('1.0.0'); checks.push('real browser signed publisher upload'); checks.push('slow package metadata preserves typed publisher fields');
const first = (await (await fetch(origin + '/api/extensions')).json()).find(x=>x.id==='hosted-browser-20260922');
const first = (await (await fetch(origin + '/api/extensions')).json()).find(x=>x.id==='hosted-browser-20260922c');
assert.equal(first.official, false);
// A separate browser has a separate signing identity and cannot claim this id.
const otherContext = await browser.newContext();
@@ -113,16 +113,16 @@ function routes(root) {
await other.locator('#source').fill('https://example.com/invalid');
await other.getByRole('button', { name: 'Publish release' }).click();
await other.locator('#publish-result').filter({ hasText: /package/i }).waitFor();
assert.equal((await (await fetch(origin + '/api/extensions/hosted-browser-20260922')).json()).length, 1);
assert.equal((await (await fetch(origin + '/api/extensions/hosted-browser-20260922c')).json()).length, 1);
await otherContext.close(); checks.push('browser malformed-package rejection without publication');
await page.getByRole('link', { name: 'Marketplace', exact: true }).first().click();
await page.getByRole('link', {name:'Browser example',exact:true}).click();
const popupPromise = page.waitForEvent('popup');
await page.locator('#connect').click();
const popup = await popupPromise;
await popup.getByRole('button', { name: 'Allow connection' }).click();
await page.getByText('CodeGraph connected', { exact: true }).waitFor();
await page.locator('#project').selectOption('1');
await page.locator('a[href="/extensions/hosted-browser-20260922c"]').first().click();
let completedJob = 0;
await page.getByRole('button', { name: 'Install extension' }).click();
async function settle(expected) {
@@ -143,7 +143,7 @@ function routes(root) {
window.__recoveryPopup = state.popup;
const iframe = document.createElement('iframe'); iframe.name = 'wrong-source'; document.body.append(iframe);
});
await page.frame({ name: 'wrong-source' }).evaluate(() => parent.__recoveryPopup.postMessage({ channel: 'codegraph-extensions-v1', type: 'command', id: 'wrong-window', command: { action: 'remove', id: 'hosted-browser-20260922', project: '1' } }, '*'));
await page.frame({ name: 'wrong-source' }).evaluate(() => parent.__recoveryPopup.postMessage({ channel: 'codegraph-extensions-v1', type: 'command', id: 'wrong-window', command: { action: 'remove', id: 'hosted-browser-20260922c', project: '1' } }, '*'));
await page.waitForTimeout(300); assert.equal((await snapshot()).jobId, before);
await page.locator('iframe[name="wrong-source"]').evaluate(node => node.remove());
checks.push('real postMessage wrong-window command ignored');
@@ -185,7 +185,7 @@ function routes(root) {
const badPopupPromise = evil.waitForEvent('popup'); await evil.locator('#open').click(); const badPopup = await badPopupPromise;
await badPopup.getByRole('button', { name: 'Allow connection' }).click();
const beforeOrigin = (await snapshot()).jobId;
await evil.evaluate(() => window.target.postMessage({ channel: 'codegraph-extensions-v1', type: 'command', id: 'wrong-origin', command: { action: 'enable', id: 'hosted-browser-20260922', project: '1' } }, '*'));
await evil.evaluate(() => window.target.postMessage({ channel: 'codegraph-extensions-v1', type: 'command', id: 'wrong-origin', command: { action: 'enable', id: 'hosted-browser-20260922c', project: '1' } }, '*'));
await evil.waitForTimeout(300); assert.equal((await snapshot()).jobId, beforeOrigin);
checks.push('real postMessage wrong-origin command ignored');
await popup.close();
scripts/validation/cloudflare-hosted-readback.cjs
+12
View File
@@ -0,0 +1,12 @@
// Read-only proof of every catalog release and its actual HTTPS package bytes.
const fs=require('node:fs'),path=require('node:path'),assert=require('node:assert/strict'),{createHash}=require('node:crypto');
const [origin,destination,reference]=process.argv.slice(2);assert.match(origin||'',/^https:\/\/[a-z0-9.-]+\.workers\.dev$/);
const hash=b=>createHash('sha256').update(b).digest('hex');
(async()=>{const health=await(await fetch(origin+'/api/health')).json();assert.equal(health.ok,true);assert.equal(health.publishing,false);
const gate=await fetch(origin+'/api/publish',{method:'POST',body:'{}'});assert.equal(gate.status,503);
const catalog=await(await fetch(origin+'/api/extensions')).json(),releases=[];
for(const item of catalog){const versions=await(await fetch(origin+'/api/extensions/'+item.id)).json();for(const listing of versions){const r=await fetch(origin+'/api/download/'+listing.id+'/'+encodeURIComponent(listing.version)+'?readback='+Date.now());assert.equal(r.status,200);const bytes=Buffer.from(await r.arrayBuffer());assert.equal(hash(bytes),listing.integrity);releases.push({listing,bytes:bytes.length,sha256:hash(bytes)});}}
releases.sort((a,b)=>(a.listing.id+'@'+a.listing.version).localeCompare(b.listing.id+'@'+b.listing.version));
if(reference)assert.deepEqual(releases,JSON.parse(fs.readFileSync(reference)).releases);
const result={origin,at:new Date().toISOString(),health,publishStatus:gate.status,catalogCount:catalog.length,releases,reference:reference||null,success:true};fs.mkdirSync(path.dirname(destination),{recursive:true});fs.writeFileSync(destination,JSON.stringify(result,null,2));console.log(JSON.stringify({origin,catalogCount:catalog.length,releaseCount:releases.length,bytes:releases.reduce((n,r)=>n+r.bytes,0),equal:!!reference,publishing:false}));
})().catch(e=>{console.error(e);process.exitCode=1;});