@1agh/maude 1.0.11 → 1.2.0

package/apps/studio/test/hmr-classify.test.ts

@@ -1,87 +0,0 @@
-// Unit test for hmr-broadcast.ts classifyChange().
-//
-// The load-bearing case: a canvas/specimen sibling stylesheet (e.g. motion.css
-// next to motion.tsx) is INLINED into the built module — there is no <link> for
-// the iframe css-swap to target, so it must route to a module reload keyed on
-// the sibling .tsx. Link-mounted CSS (tokens / _components / _layout — no
-// sibling .tsx) keeps the fast css swap. Regression guard for the silent-drop
-// bug (see .ai/logs/rca/hmr-inlined-css-dropped.md).
-
-import { describe, expect, test } from 'bun:test';
-
-import { classifyChange } from '../hmr-broadcast.ts';
-
-describe('classifyChange', () => {
-  const noSibling = () => false;
-  const hasSibling = () => true;
-
-  test('sibling-tsx CSS → module reload keyed on the .tsx', () => {
-    const msg = classifyChange(
-      'system/x/preview/motion.css',
-      (cssRel) => cssRel === 'system/x/preview/motion.css'
-    );
-    expect(msg?.mode).toBe('module');
-    expect(msg?.file).toBe('system/x/preview/motion.tsx');
-    expect(msg?.scope).toBe('canvas');
-  });
-
-  test('link-mounted partial CSS (no sibling .tsx) → css swap', () => {
-    expect(classifyChange('system/x/preview/_components.css', noSibling)?.mode).toBe('css');
-    expect(classifyChange('system/x/preview/_layout.css', noSibling)?.mode).toBe('css');
-    expect(classifyChange('system/x/colors_and_type.css', noSibling)?.mode).toBe('css');
-  });
-
-  test('css mode echoes the changed file path', () => {
-    const msg = classifyChange('system/x/colors_and_type.css', noSibling);
-    expect(msg?.mode).toBe('css');
-    expect(msg?.file).toBe('system/x/colors_and_type.css');
-  });
-
-  test('_lib/** → hard reload (no file)', () => {
-    const msg = classifyChange('_lib/canvas-lib.tsx', hasSibling);
-    expect(msg?.mode).toBe('hard');
-    expect(msg?.scope).toBe('lib');
-    expect(msg?.file).toBeUndefined();
-  });
-
-  test('.tsx / .jsx / .ts / .js → module reload', () => {
-    for (const f of ['ui/Foo.tsx', 'ui/Foo.jsx', 'ui/Foo.ts', 'ui/Foo.js']) {
-      expect(classifyChange(f, noSibling)?.mode).toBe('module');
-      expect(classifyChange(f, noSibling)?.file).toBe(f);
-    }
-  });
-
-  test('.meta.json → meta (not treated as a .json no-op)', () => {
-    const msg = classifyChange('ui/Foo.meta.json', noSibling);
-    expect(msg?.mode).toBe('meta');
-    expect(msg?.file).toBe('ui/Foo.meta.json');
-  });
-
-  test('unrelated extensions → null', () => {
-    expect(classifyChange('ui/notes.md', noSibling)).toBeNull();
-    expect(classifyChange('assets/photo.png.part', noSibling)).toBeNull();
-    expect(classifyChange('system/x/assets/fonts/Gators-Bold.woff2', noSibling)).toBeNull();
-  });
-
-  test('media files → asset heal signal (2026-08-15 annotations-assets RCA)', () => {
-    // A synced-down media file landing on disk heals still-broken <img>/<image>
-    // elements in open canvases — no reload. Top-level assets/ and DS trees both.
-    for (const f of [
-      'assets/65c3a940.png',
-      'assets/807d7ba7.jpg',
-      'assets/logo.svg',
-      'assets/clip.mp4',
-      'system/alligators/assets/photos-cut/frame-helmet.jpg',
-    ]) {
-      const msg = classifyChange(f, noSibling);
-      expect(msg?.mode).toBe('asset');
-      expect(msg?.file).toBe(f);
-    }
-  });
-
-  test('backslash paths are normalised before classification', () => {
-    const msg = classifyChange('system\\x\\preview\\motion.css', () => true);
-    expect(msg?.mode).toBe('module');
-    expect(msg?.file).toBe('system/x/preview/motion.tsx');
-  });
-});

package/apps/studio/test/hub-link.test.ts

@@ -1,80 +0,0 @@
-// Phase 29 (E4) Door C — hub-link credential write. Validates the lean in-app
-// counterpart to `maude design link`: input validation + the global hubs.json write
-// (token + per-machine trust, mode 0600). The http-layer gating (main-origin +
-// loopback) is covered by canvas-origin-gate.test.ts.
-
-import { afterEach, beforeEach, expect, test } from 'bun:test';
-import { existsSync, mkdtempSync, readFileSync, rmSync, statSync } from 'node:fs';
-import { platform, tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-import { linkHub, saveHubCredential } from '../sync/hub-link.ts';
-
-let dir: string;
-let prevPath: string | undefined;
-
-beforeEach(() => {
-  dir = mkdtempSync(join(tmpdir(), 'maude-hublink-'));
-  prevPath = process.env.HUBS_CONFIG_PATH;
-  process.env.HUBS_CONFIG_PATH = join(dir, 'hubs.json');
-});
-afterEach(() => {
-  if (prevPath === undefined) delete process.env.HUBS_CONFIG_PATH;
-  else process.env.HUBS_CONFIG_PATH = prevPath;
-  rmSync(dir, { recursive: true, force: true });
-});
-
-test('rejects a missing url', async () => {
-  const r = await linkHub({ token: 'tok' });
-  expect(r.status).toBe(400);
-  expect((r.json as { ok: boolean }).ok).toBe(false);
-});
-
-test('rejects a missing token', async () => {
-  const r = await linkHub({ url: 'https://hub.example.dev' });
-  expect(r.status).toBe(400);
-  expect((r.json as { ok: boolean }).ok).toBe(false);
-});
-
-test('rejects a non-http(s) scheme (no file:/ftp: hub)', async () => {
-  const r = await linkHub({ url: 'file:///etc/passwd', token: 'tok' });
-  expect(r.status).toBe(400);
-  expect(existsSync(process.env.HUBS_CONFIG_PATH as string)).toBe(false);
-});
-
-test('rejects a malformed url', async () => {
-  const r = await linkHub({ url: 'not a url', token: 'tok' });
-  expect(r.status).toBe(400);
-});
-
-test('saveHubCredential writes the token + records per-machine trust, mode 0600', () => {
-  saveHubCredential('https://hub.example.dev', 'mau_secret');
-  const p = process.env.HUBS_CONFIG_PATH as string;
-  const cfg = JSON.parse(readFileSync(p, 'utf8'));
-  expect(cfg.hubs['https://hub.example.dev'].token).toBe('mau_secret');
-  expect(typeof cfg.hubs['https://hub.example.dev'].linkedAt).toBe('number');
-  expect(cfg.trusted).toContain('https://hub.example.dev');
-  if (platform() !== 'win32') {
-    expect(statSync(p).mode & 0o777).toBe(0o600);
-  }
-});
-
-test('a second credential for the same hub replaces the token (per-machine key)', () => {
-  saveHubCredential('https://hub.example.dev', 'first');
-  saveHubCredential('https://hub.example.dev', 'second');
-  const cfg = JSON.parse(readFileSync(process.env.HUBS_CONFIG_PATH as string, 'utf8'));
-  expect(cfg.hubs['https://hub.example.dev'].token).toBe('second');
-  // Trust is not duplicated.
-  expect(cfg.trusted.filter((u: string) => u === 'https://hub.example.dev')).toHaveLength(1);
-});
-
-test('role + expiresAt round-trip through the store (the renewal deadline survives)', () => {
-  saveHubCredential('https://hub.example.dev', 'mau_secret', 'member', 1786400000000);
-  const cfg = JSON.parse(readFileSync(process.env.HUBS_CONFIG_PATH as string, 'utf8'));
-  expect(cfg.hubs['https://hub.example.dev'].role).toBe('member');
-  expect(cfg.hubs['https://hub.example.dev'].expiresAt).toBe(1786400000000);
-  // Absent stays absent — a self-hosted hub's credential carries no deadline.
-  saveHubCredential('https://hub.example.dev', 'mau_secret2');
-  const cfg2 = JSON.parse(readFileSync(process.env.HUBS_CONFIG_PATH as string, 'utf8'));
-  expect(cfg2.hubs['https://hub.example.dev'].expiresAt).toBeUndefined();
-});

package/apps/studio/test/identity-cache.test.ts

@@ -1,83 +0,0 @@
-// DDR-132 — per-user GitHub identity SWR disk cache.
-//
-// Round-trips the cache against a temp XDG_CACHE_HOME, proves a different
-// token-hash is a clean miss, and asserts the raw token NEVER appears in the
-// on-disk file (only its sha256 prefix). Pure module — no network.
-
-import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
-import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import {
-  __testing,
-  cacheDir,
-  clearCached,
-  readCached,
-  tokenHash,
-  writeCached,
-} from '../github/identity-cache.ts';
-
-const realXdg = process.env.XDG_CACHE_HOME;
-let tmp: string;
-
-beforeEach(() => {
-  tmp = mkdtempSync(join(tmpdir(), 'maude-idcache-'));
-  process.env.XDG_CACHE_HOME = tmp;
-});
-afterEach(() => {
-  if (realXdg === undefined) delete process.env.XDG_CACHE_HOME;
-  else process.env.XDG_CACHE_HOME = realXdg;
-  rmSync(tmp, { recursive: true, force: true });
-});
-
-const IDENTITY = { login: 'octocat', name: 'Octo Cat', avatar_url: 'https://x/y.png' };
-
-describe('identity-cache', () => {
-  test('cacheDir lands under $XDG_CACHE_HOME/maude', () => {
-    expect(cacheDir()).toBe(join(tmp, 'maude'));
-  });
-
-  test('round-trips a written identity for the matching key', () => {
-    const key = tokenHash('tok_secret_abc');
-    expect(readCached(key)).toBeNull(); // first run: clean miss
-    writeCached(key, IDENTITY);
-    expect(readCached(key)).toEqual(IDENTITY);
-  });
-
-  test('a different token-hash is a clean miss (account/token swap)', () => {
-    writeCached(tokenHash('tok_account_A'), IDENTITY);
-    expect(readCached(tokenHash('tok_account_B'))).toBeNull();
-  });
-
-  test('the raw token never appears in the on-disk file', () => {
-    const token = 'ghp_SUPERSECRETtokenVALUE1234567890';
-    writeCached(tokenHash(token), IDENTITY);
-    const raw = readFileSync(__testing.cacheFile(), 'utf8');
-    expect(raw).not.toContain(token);
-    // the stored key IS present and is the hash prefix, not the token
-    expect(raw).toContain(tokenHash(token));
-    expect(tokenHash(token).length).toBe(16);
-  });
-
-  test('tolerates a null name', () => {
-    const key = tokenHash('t');
-    writeCached(key, { login: 'ghost', name: null, avatar_url: 'a' });
-    expect(readCached(key)?.name).toBeNull();
-  });
-
-  test('corrupt JSON is a clean miss, not a throw', () => {
-    writeCached(tokenHash('t'), IDENTITY);
-    // clobber the file with garbage
-    const fs = require('node:fs');
-    fs.writeFileSync(__testing.cacheFile(), '{ not json');
-    expect(readCached(tokenHash('t'))).toBeNull();
-  });
-
-  test('clearCached forces a subsequent miss', () => {
-    const key = tokenHash('t');
-    writeCached(key, IDENTITY);
-    expect(readCached(key)).toEqual(IDENTITY);
-    clearCached();
-    expect(readCached(key)).toBeNull();
-  });
-});

package/apps/studio/test/import-asset-browser.test.ts

@@ -1,64 +0,0 @@
-// Browser-driven pieces of local-file/SVG/PDF ingestion (DDR-167) — the SVG
-// execution canary. Spawns real agent-browser sessions, so this is slower
-// than import-asset.test.ts and is skipped (not failed) when agent-browser
-// can't be resolved, mirroring how the rest of this codebase treats
-// browser-dependent verification as a real-environment concern rather than a
-// hard CI requirement (e.g. ensure-browser.test.ts's resolution-only tests).
-//
-// DDR-167 requires the SVG canary fixtures be a PERMANENT regression test,
-// not a one-time pre-ship check — this file is that test. The PDF rasterize
-// adversarial fixtures (OpenAction/JS canary, SubmitForm/URI/Launch) are NOT
-// here: live spike-verification found the planned rasterization mechanism
-// (headless-Chromium navigating a file://*.pdf URL) does not render PDF
-// content under agent-browser automation (confirmed blank output on both
-// chrome-headless-shell and full Chrome) — see DDR-167's addendum. PDF
-// rasterization throws "not yet available" rather than shipping broken
-// output; there is nothing to fixture-test until a follow-up mechanism lands.
-
-import { describe, expect, test } from 'bun:test';
-import { execFileSync } from 'node:child_process';
-
-import { rasterizePdfPage, runSvgExecutionCanary } from '../bin/_import-asset.mjs';
-
-function agentBrowserAvailable(): boolean {
-  try {
-    execFileSync(process.env.MAUDE_AGENT_BROWSER_BIN || 'agent-browser', ['--version'], {
-      stdio: 'ignore',
-      timeout: 5000,
-    });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-const HAS_AGENT_BROWSER = agentBrowserAvailable();
-const d = HAS_AGENT_BROWSER ? describe : describe.skip;
-
-d('SVG execution canary (Decision 1, step 6) — permanent regression fixtures', () => {
-  test('accepts a clean, allowlist-sanitized SVG (no false positive)', async () => {
-    const clean =
-      '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><path d="M16 5l2.8 8.2L27 16l-8.2 2.8L16 27l-2.8-8.2L5 16l8.2-2.8z" fill="#4f46e5"/></svg>';
-    await expect(runSvgExecutionCanary(clean)).resolves.toBe(clean);
-  }, 30_000);
-
-  test('trips on a raw <script>-bearing SVG (defense-in-depth if the allowlist sanitizer were ever bypassed)', async () => {
-    const malicious =
-      '<svg xmlns="http://www.w3.org/2000/svg"><script>window.__MAUDE_IMPORT_CANARY__=true;</script></svg>';
-    await expect(runSvgExecutionCanary(malicious)).rejects.toThrow(/canary tripped/);
-  }, 30_000);
-
-  test('the sandboxed-render helper does not block the file:// navigation it needs (regression: a bare "*" network route also blocks local file loads)', async () => {
-    // A file:// SVG with no scripting at all must still load and be
-    // observable — this specifically guards against re-introducing the
-    // wildcard-route regression found during implementation.
-    const trivial = '<svg xmlns="http://www.w3.org/2000/svg"><rect width="1" height="1"/></svg>';
-    await expect(runSvgExecutionCanary(trivial)).resolves.toBeTruthy();
-  }, 30_000);
-});
-
-d('PDF rasterization — explicitly NOT shipped (DDR-167 addendum)', () => {
-  test('rasterizePdfPage throws "not yet available" rather than producing output', async () => {
-    await expect(rasterizePdfPage('/nonexistent.pdf', 1)).rejects.toThrow(/not yet available/);
-  });
-});

package/apps/studio/test/import-asset-route.test.ts

@@ -1,71 +0,0 @@
-// POST /_api/import-asset — DDR-167 (Phase 3 / T10). Full HTTP round-trip
-// against a real booted server (privilege/CSRF boundary is covered generically
-// by canvas-origin-gate.test.ts — this file exercises the route's own
-// success/error shapes).
-
-import { describe, expect, test } from 'bun:test';
-import { readFileSync } from 'node:fs';
-
-import { bootServer, killProc, makeSandbox, nextPort } from './_helpers.ts';
-
-const MALICIOUS_SVG =
-  '<svg xmlns="http://www.w3.org/2000/svg"><script>alert(1)</script>' +
-  '<rect onclick="alert(2)" fill="#4f46e5" width="10" height="10"/></svg>';
-
-describe('POST /_api/import-asset', () => {
-  test('imports and sanitizes an SVG, rejects a PDF kind as not-yet-available, rejects GET', async () => {
-    const { root, designRoot } = makeSandbox();
-    const port = nextPort();
-    const proc = await bootServer(root, port);
-    try {
-      const base = `http://localhost:${port}`;
-
-      const post = await fetch(`${base}/_api/import-asset`, {
-        method: 'POST',
-        headers: { 'X-Import-Kind': 'svg', Origin: base },
-        body: MALICIOUS_SVG,
-      });
-      expect(post.status).toBe(201);
-      const body = (await post.json()) as { ok: boolean; path: string };
-      expect(body.ok).toBe(true);
-      expect(body.path).toMatch(/^assets\/[a-z0-9]{8}\.svg$/);
-      const written = readFileSync(`${designRoot}/${body.path}`, 'utf8');
-      expect(written).not.toContain('script');
-      expect(written).not.toContain('onclick');
-
-      const pdfAttempt = await fetch(`${base}/_api/import-asset`, {
-        method: 'POST',
-        headers: { 'X-Import-Kind': 'pdf', Origin: base },
-        body: '%PDF-1.4 fixture',
-      });
-      expect(pdfAttempt.status).toBe(501);
-      const pdfBody = (await pdfAttempt.json()) as { ok: boolean; error: string };
-      expect(pdfBody.ok).toBe(false);
-      expect(pdfBody.error).toContain('not yet available');
-
-      const getAttempt = await fetch(`${base}/_api/import-asset`, { method: 'GET' });
-      expect(getAttempt.status).toBe(405);
-    } finally {
-      await killProc(proc);
-    }
-  }, 30_000);
-
-  test('a malformed SVG is rejected with a clean 400, not a 500 crash', async () => {
-    const { root } = makeSandbox();
-    const port = nextPort();
-    const proc = await bootServer(root, port);
-    try {
-      const base = `http://localhost:${port}`;
-      const res = await fetch(`${base}/_api/import-asset`, {
-        method: 'POST',
-        headers: { 'X-Import-Kind': 'svg', Origin: base },
-        body: '<svg><rect',
-      });
-      expect(res.status).toBe(400);
-      const body = (await res.json()) as { ok: boolean };
-      expect(body.ok).toBe(false);
-    } finally {
-      await killProc(proc);
-    }
-  }, 30_000);
-});