@arcadialdev/arcality 2.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (97) hide show
  1. package/.agents/skills/e2e-testing-expert/SKILL.md +28 -0
  2. package/.agents/skills/frontend-design/LICENSE.txt +177 -0
  3. package/.agents/skills/frontend-design/SKILL.md +42 -0
  4. package/.agents/skills/nodejs-backend-patterns/SKILL.md +639 -0
  5. package/.agents/skills/nodejs-backend-patterns/references/advanced-patterns.md +430 -0
  6. package/.agents/skills/playwright-best-practices/LICENSE.md +7 -0
  7. package/.agents/skills/playwright-best-practices/README.md +147 -0
  8. package/.agents/skills/playwright-best-practices/SKILL.md +303 -0
  9. package/.agents/skills/playwright-best-practices/advanced/authentication-flows.md +360 -0
  10. package/.agents/skills/playwright-best-practices/advanced/authentication.md +871 -0
  11. package/.agents/skills/playwright-best-practices/advanced/clock-mocking.md +364 -0
  12. package/.agents/skills/playwright-best-practices/advanced/mobile-testing.md +409 -0
  13. package/.agents/skills/playwright-best-practices/advanced/multi-context.md +288 -0
  14. package/.agents/skills/playwright-best-practices/advanced/multi-user.md +393 -0
  15. package/.agents/skills/playwright-best-practices/advanced/network-advanced.md +452 -0
  16. package/.agents/skills/playwright-best-practices/advanced/third-party.md +464 -0
  17. package/.agents/skills/playwright-best-practices/architecture/pom-vs-fixtures.md +363 -0
  18. package/.agents/skills/playwright-best-practices/architecture/test-architecture.md +369 -0
  19. package/.agents/skills/playwright-best-practices/architecture/when-to-mock.md +383 -0
  20. package/.agents/skills/playwright-best-practices/browser-apis/browser-apis.md +391 -0
  21. package/.agents/skills/playwright-best-practices/browser-apis/iframes.md +403 -0
  22. package/.agents/skills/playwright-best-practices/browser-apis/service-workers.md +504 -0
  23. package/.agents/skills/playwright-best-practices/browser-apis/websockets.md +403 -0
  24. package/.agents/skills/playwright-best-practices/core/annotations.md +424 -0
  25. package/.agents/skills/playwright-best-practices/core/assertions-waiting.md +361 -0
  26. package/.agents/skills/playwright-best-practices/core/configuration.md +452 -0
  27. package/.agents/skills/playwright-best-practices/core/fixtures-hooks.md +417 -0
  28. package/.agents/skills/playwright-best-practices/core/global-setup.md +434 -0
  29. package/.agents/skills/playwright-best-practices/core/locators.md +242 -0
  30. package/.agents/skills/playwright-best-practices/core/page-object-model.md +315 -0
  31. package/.agents/skills/playwright-best-practices/core/projects-dependencies.md +453 -0
  32. package/.agents/skills/playwright-best-practices/core/test-data.md +492 -0
  33. package/.agents/skills/playwright-best-practices/core/test-suite-structure.md +361 -0
  34. package/.agents/skills/playwright-best-practices/core/test-tags.md +298 -0
  35. package/.agents/skills/playwright-best-practices/debugging/console-errors.md +420 -0
  36. package/.agents/skills/playwright-best-practices/debugging/debugging.md +504 -0
  37. package/.agents/skills/playwright-best-practices/debugging/error-testing.md +360 -0
  38. package/.agents/skills/playwright-best-practices/debugging/flaky-tests.md +496 -0
  39. package/.agents/skills/playwright-best-practices/frameworks/angular.md +530 -0
  40. package/.agents/skills/playwright-best-practices/frameworks/nextjs.md +469 -0
  41. package/.agents/skills/playwright-best-practices/frameworks/react.md +531 -0
  42. package/.agents/skills/playwright-best-practices/frameworks/vue.md +574 -0
  43. package/.agents/skills/playwright-best-practices/infrastructure-ci-cd/ci-cd.md +468 -0
  44. package/.agents/skills/playwright-best-practices/infrastructure-ci-cd/docker.md +283 -0
  45. package/.agents/skills/playwright-best-practices/infrastructure-ci-cd/github-actions.md +546 -0
  46. package/.agents/skills/playwright-best-practices/infrastructure-ci-cd/gitlab.md +397 -0
  47. package/.agents/skills/playwright-best-practices/infrastructure-ci-cd/other-providers.md +521 -0
  48. package/.agents/skills/playwright-best-practices/infrastructure-ci-cd/parallel-sharding.md +371 -0
  49. package/.agents/skills/playwright-best-practices/infrastructure-ci-cd/performance.md +453 -0
  50. package/.agents/skills/playwright-best-practices/infrastructure-ci-cd/reporting.md +424 -0
  51. package/.agents/skills/playwright-best-practices/infrastructure-ci-cd/test-coverage.md +497 -0
  52. package/.agents/skills/playwright-best-practices/testing-patterns/accessibility.md +359 -0
  53. package/.agents/skills/playwright-best-practices/testing-patterns/api-testing.md +719 -0
  54. package/.agents/skills/playwright-best-practices/testing-patterns/browser-extensions.md +506 -0
  55. package/.agents/skills/playwright-best-practices/testing-patterns/canvas-webgl.md +493 -0
  56. package/.agents/skills/playwright-best-practices/testing-patterns/component-testing.md +500 -0
  57. package/.agents/skills/playwright-best-practices/testing-patterns/drag-drop.md +576 -0
  58. package/.agents/skills/playwright-best-practices/testing-patterns/electron.md +509 -0
  59. package/.agents/skills/playwright-best-practices/testing-patterns/file-operations.md +377 -0
  60. package/.agents/skills/playwright-best-practices/testing-patterns/file-upload-download.md +562 -0
  61. package/.agents/skills/playwright-best-practices/testing-patterns/forms-validation.md +561 -0
  62. package/.agents/skills/playwright-best-practices/testing-patterns/graphql-testing.md +331 -0
  63. package/.agents/skills/playwright-best-practices/testing-patterns/i18n.md +508 -0
  64. package/.agents/skills/playwright-best-practices/testing-patterns/performance-testing.md +476 -0
  65. package/.agents/skills/playwright-best-practices/testing-patterns/security-testing.md +430 -0
  66. package/.agents/skills/playwright-best-practices/testing-patterns/visual-regression.md +634 -0
  67. package/.env.example +21 -0
  68. package/README.md +30 -0
  69. package/bin/arcality.mjs +86 -0
  70. package/package.json +66 -0
  71. package/playwright.config.ts +12 -0
  72. package/scripts/cleanup-qmsdev.mjs +63 -0
  73. package/scripts/discover-view.mjs +52 -0
  74. package/scripts/extract-view.mjs +64 -0
  75. package/scripts/gen-and-run.mjs +838 -0
  76. package/scripts/init.mjs +290 -0
  77. package/scripts/migrate-to-central-out.mjs +157 -0
  78. package/scripts/postinstall.mjs +63 -0
  79. package/scripts/rebrand-report.mjs +241 -0
  80. package/scripts/setup.mjs +166 -0
  81. package/src/KnowledgeService.ts +239 -0
  82. package/src/arcalityClient.mjs +266 -0
  83. package/src/configLoader.mjs +179 -0
  84. package/src/configManager.mjs +172 -0
  85. package/src/consoleBanner.ts +32 -0
  86. package/src/envSetup.ts +205 -0
  87. package/src/index.ts +25 -0
  88. package/src/projectInspector.ts +42 -0
  89. package/src/services/collectiveMemoryService.ts +178 -0
  90. package/src/testRunner.ts +201 -0
  91. package/tests/_helpers/ArcalityReporter.ts +490 -0
  92. package/tests/_helpers/agentic-runner.spec.ts +741 -0
  93. package/tests/_helpers/ai-agent-helper.ts +1573 -0
  94. package/tests/_helpers/discover-view.spec.ts +238 -0
  95. package/tests/_helpers/extract-view.spec.ts +118 -0
  96. package/tests/_helpers/qa-tools.ts +333 -0
  97. package/tests/_helpers/smart-action.spec.ts +1458 -0
@@ -0,0 +1,562 @@
1
+ # File Upload and Download Testing
2
+
3
+ > **When to use**: Testing file uploads (single, multiple, drag-and-drop), downloads (content verification, filename, type), upload progress indicators, or file type/size restrictions.
4
+
5
+ ## Table of Contents
6
+
7
+ 1. [Downloading Files](#downloading-files)
8
+ 2. [Single File Upload](#single-file-upload)
9
+ 3. [Multiple File Upload](#multiple-file-upload)
10
+ 4. [Drag-and-Drop Zones](#drag-and-drop-zones)
11
+ 5. [File Chooser Dialog](#file-chooser-dialog)
12
+ 6. [Upload Progress and Cancellation](#upload-progress-and-cancellation)
13
+ 7. [Retry After Failure](#retry-after-failure)
14
+ 8. [File Type and Size Restrictions](#file-type-and-size-restrictions)
15
+ 9. [Image Preview](#image-preview)
16
+ 10. [Authenticated Downloads](#authenticated-downloads)
17
+ 11. [Tips](#tips)
18
+
19
+ ---
20
+
21
+ ## Downloading Files
22
+
23
+ ### Capturing Downloads and Verifying Content
24
+
25
+ ```typescript
26
+ import { test, expect } from '@playwright/test';
27
+ import fs from 'fs';
28
+ import path from 'path';
29
+
30
+ test('verifies downloaded CSV content', async ({ page }) => {
31
+ await page.goto('/exports');
32
+
33
+ // Set up download listener BEFORE triggering the download
34
+ const downloadPromise = page.waitForEvent('download');
35
+ await page.getByRole('link', { name: 'transactions.csv' }).click();
36
+
37
+ const download = await downloadPromise;
38
+ const savePath = path.join(__dirname, '../tmp', download.suggestedFilename());
39
+ await download.saveAs(savePath);
40
+
41
+ const content = fs.readFileSync(savePath, 'utf-8');
42
+ expect(content).toContain('id,amount,date');
43
+ expect(content).toContain('1001,250.00,2025-01-15');
44
+
45
+ const rows = content.trim().split('\n');
46
+ expect(rows.length).toBeGreaterThan(1);
47
+
48
+ fs.unlinkSync(savePath);
49
+ });
50
+
51
+ test('reads download via stream without disk I/O', async ({ page }) => {
52
+ await page.goto('/exports');
53
+
54
+ const downloadPromise = page.waitForEvent('download');
55
+ await page.getByRole('link', { name: 'transactions.csv' }).click();
56
+
57
+ const download = await downloadPromise;
58
+ const readable = await download.createReadStream();
59
+ const chunks: Buffer[] = [];
60
+
61
+ for await (const chunk of readable!) {
62
+ chunks.push(Buffer.from(chunk));
63
+ }
64
+
65
+ const content = Buffer.concat(chunks).toString('utf-8');
66
+ expect(content).toContain('id,amount,date');
67
+ });
68
+ ```
69
+
70
+ ### Verifying Filename and Format
71
+
72
+ ```typescript
73
+ test('export filename matches selected format', async ({ page }) => {
74
+ await page.goto('/analytics');
75
+
76
+ const downloadPromise = page.waitForEvent('download');
77
+ await page.getByRole('button', { name: 'Export PDF' }).click();
78
+
79
+ const download = await downloadPromise;
80
+ expect(download.suggestedFilename()).toMatch(/^analytics-\d{4}-\d{2}-\d{2}\.pdf$/);
81
+ });
82
+
83
+ test('format selector changes output extension', async ({ page }) => {
84
+ await page.goto('/analytics');
85
+
86
+ await page.getByLabel('Format').selectOption('csv');
87
+ const csvDownload = page.waitForEvent('download');
88
+ await page.getByRole('button', { name: 'Download' }).click();
89
+ expect((await csvDownload).suggestedFilename()).toMatch(/\.csv$/);
90
+
91
+ await page.getByLabel('Format').selectOption('xlsx');
92
+ const xlsxDownload = page.waitForEvent('download');
93
+ await page.getByRole('button', { name: 'Download' }).click();
94
+ expect((await xlsxDownload).suggestedFilename()).toMatch(/\.xlsx$/);
95
+ });
96
+ ```
97
+
98
+ ### Checking Response Headers
99
+
100
+ ```typescript
101
+ test('download response has correct MIME type', async ({ page }) => {
102
+ await page.goto('/analytics');
103
+
104
+ const responsePromise = page.waitForResponse('**/api/analytics/export**');
105
+ const downloadPromise = page.waitForEvent('download');
106
+
107
+ await page.getByRole('button', { name: 'Export PDF' }).click();
108
+
109
+ const response = await responsePromise;
110
+ expect(response.headers()['content-type']).toContain('application/pdf');
111
+ expect(response.headers()['content-disposition']).toContain('attachment');
112
+
113
+ await downloadPromise;
114
+ });
115
+ ```
116
+
117
+ ### Handling Download Failures
118
+
119
+ ```typescript
120
+ test('shows error when download fails', async ({ page }) => {
121
+ await page.route('**/api/analytics/export**', async (route) => {
122
+ await route.fulfill({
123
+ status: 500,
124
+ contentType: 'application/json',
125
+ body: JSON.stringify({ error: 'Generation failed' }),
126
+ });
127
+ });
128
+
129
+ await page.goto('/analytics');
130
+ await page.getByRole('button', { name: 'Export PDF' }).click();
131
+
132
+ await expect(page.getByRole('alert')).toContainText(/failed|error/i);
133
+ });
134
+ ```
135
+
136
+ ---
137
+
138
+ ## Single File Upload
139
+
140
+ ### From Fixture File
141
+
142
+ ```typescript
143
+ import path from 'path';
144
+
145
+ test('uploads document from fixture', async ({ page }) => {
146
+ await page.goto('/attachments');
147
+
148
+ const fileInput = page.locator('input[type="file"]');
149
+ await fileInput.setInputFiles(path.resolve(__dirname, '../fixtures/invoice.pdf'));
150
+
151
+ await expect(page.getByText('invoice.pdf')).toBeVisible();
152
+
153
+ await page.getByRole('button', { name: 'Upload' }).click();
154
+ await expect(page.getByRole('alert')).toContainText('uploaded successfully');
155
+ await expect(page.getByRole('link', { name: 'invoice.pdf' })).toBeVisible();
156
+ });
157
+ ```
158
+
159
+ ### From In-Memory Buffer
160
+
161
+ ```typescript
162
+ test('uploads in-memory CSV', async ({ page }) => {
163
+ await page.goto('/attachments');
164
+
165
+ const fileInput = page.locator('input[type="file"]');
166
+ await fileInput.setInputFiles({
167
+ name: 'contacts.csv',
168
+ mimeType: 'text/csv',
169
+ buffer: Buffer.from('name,email\nAlice,alice@acme.com\nBob,bob@acme.com'),
170
+ });
171
+
172
+ await expect(page.getByText('contacts.csv')).toBeVisible();
173
+ await page.getByRole('button', { name: 'Upload' }).click();
174
+ await expect(page.getByRole('alert')).toContainText('uploaded successfully');
175
+ });
176
+ ```
177
+
178
+ ### Clearing Selection
179
+
180
+ ```typescript
181
+ test('clears selected file', async ({ page }) => {
182
+ await page.goto('/attachments');
183
+
184
+ const fileInput = page.locator('input[type="file"]');
185
+ await fileInput.setInputFiles({
186
+ name: 'draft.txt',
187
+ mimeType: 'text/plain',
188
+ buffer: Buffer.from('draft content'),
189
+ });
190
+
191
+ await expect(page.getByText('draft.txt')).toBeVisible();
192
+
193
+ // Clear via API
194
+ await fileInput.setInputFiles([]);
195
+ await expect(page.getByText('draft.txt')).not.toBeVisible();
196
+ });
197
+ ```
198
+
199
+ ---
200
+
201
+ ## Multiple File Upload
202
+
203
+ ```typescript
204
+ test('uploads multiple files at once', async ({ page }) => {
205
+ await page.goto('/attachments');
206
+
207
+ const fileInput = page.locator('input[type="file"]');
208
+ await fileInput.setInputFiles([
209
+ { name: 'doc1.pdf', mimeType: 'application/pdf', buffer: Buffer.from('pdf1') },
210
+ { name: 'doc2.pdf', mimeType: 'application/pdf', buffer: Buffer.from('pdf2') },
211
+ { name: 'doc3.pdf', mimeType: 'application/pdf', buffer: Buffer.from('pdf3') },
212
+ ]);
213
+
214
+ await expect(page.getByText('doc1.pdf')).toBeVisible();
215
+ await expect(page.getByText('doc2.pdf')).toBeVisible();
216
+ await expect(page.getByText('doc3.pdf')).toBeVisible();
217
+ await expect(page.getByText('3 files selected')).toBeVisible();
218
+
219
+ await page.getByRole('button', { name: 'Upload all' }).click();
220
+ await expect(page.getByRole('alert')).toContainText('3 files uploaded');
221
+ });
222
+
223
+ test('removes one file from selection', async ({ page }) => {
224
+ await page.goto('/attachments');
225
+
226
+ const fileInput = page.locator('input[type="file"]');
227
+ await fileInput.setInputFiles([
228
+ { name: 'keep.txt', mimeType: 'text/plain', buffer: Buffer.from('keep') },
229
+ { name: 'discard.txt', mimeType: 'text/plain', buffer: Buffer.from('discard') },
230
+ ]);
231
+
232
+ const discardRow = page.getByText('discard.txt').locator('..');
233
+ await discardRow.getByRole('button', { name: /remove|delete|×/i }).click();
234
+
235
+ await expect(page.getByText('discard.txt')).not.toBeVisible();
236
+ await expect(page.getByText('keep.txt')).toBeVisible();
237
+ });
238
+ ```
239
+
240
+ ---
241
+
242
+ ## Drag-and-Drop Zones
243
+
244
+ Drop zones always have an underlying `input[type="file"]`—target it directly instead of simulating OS-level drag events.
245
+
246
+ ```typescript
247
+ test('uploads via drop zone', async ({ page }) => {
248
+ await page.goto('/attachments');
249
+
250
+ const dropZone = page.locator('[data-testid="drop-zone"]');
251
+ await expect(dropZone).toContainText(/drag.*here|drop.*files/i);
252
+
253
+ const fileInput = page.locator('input[type="file"]');
254
+ await fileInput.setInputFiles({
255
+ name: 'dropped.pdf',
256
+ mimeType: 'application/pdf',
257
+ buffer: Buffer.from('pdf-content'),
258
+ });
259
+
260
+ await expect(dropZone.getByText('dropped.pdf')).toBeVisible();
261
+ await page.getByRole('button', { name: 'Upload' }).click();
262
+ await expect(page.getByRole('alert')).toContainText('uploaded successfully');
263
+ });
264
+
265
+ test('shows visual feedback on drag-over', async ({ page }) => {
266
+ await page.goto('/attachments');
267
+
268
+ const dropZone = page.locator('[data-testid="drop-zone"]');
269
+
270
+ await dropZone.dispatchEvent('dragenter', {
271
+ dataTransfer: { types: ['Files'], files: [] },
272
+ });
273
+
274
+ await expect(dropZone).toHaveClass(/active|highlight|drag-over/);
275
+ await expect(dropZone).toContainText(/release|drop now/i);
276
+
277
+ await dropZone.dispatchEvent('dragleave');
278
+ await expect(dropZone).not.toHaveClass(/active|highlight|drag-over/);
279
+ });
280
+ ```
281
+
282
+ ---
283
+
284
+ ## File Chooser Dialog
285
+
286
+ ```typescript
287
+ test('uploads via native file chooser', async ({ page }) => {
288
+ await page.goto('/attachments');
289
+
290
+ const fileChooserPromise = page.waitForEvent('filechooser');
291
+ await page.getByRole('button', { name: 'Choose file' }).click();
292
+
293
+ const fileChooser = await fileChooserPromise;
294
+ expect(fileChooser.isMultiple()).toBe(false);
295
+
296
+ await fileChooser.setFiles({
297
+ name: 'selected.pdf',
298
+ mimeType: 'application/pdf',
299
+ buffer: Buffer.from('pdf-content'),
300
+ });
301
+
302
+ await expect(page.getByText('selected.pdf')).toBeVisible();
303
+ });
304
+ ```
305
+
306
+ ---
307
+
308
+ ## Upload Progress and Cancellation
309
+
310
+ ```typescript
311
+ test('displays upload progress for large file', async ({ page }) => {
312
+ await page.goto('/attachments');
313
+
314
+ const fileInput = page.locator('input[type="file"]');
315
+ const largeBuffer = Buffer.alloc(5 * 1024 * 1024, 'x');
316
+
317
+ await fileInput.setInputFiles({
318
+ name: 'dataset.bin',
319
+ mimeType: 'application/octet-stream',
320
+ buffer: largeBuffer,
321
+ });
322
+
323
+ await page.getByRole('button', { name: 'Upload' }).click();
324
+
325
+ const progressBar = page.getByRole('progressbar');
326
+ await expect(progressBar).toBeVisible();
327
+
328
+ await expect(async () => {
329
+ const value = await progressBar.getAttribute('aria-valuenow');
330
+ expect(Number(value)).toBeGreaterThan(0);
331
+ }).toPass({ timeout: 10000 });
332
+
333
+ await expect(progressBar).not.toBeVisible({ timeout: 60000 });
334
+ await expect(page.getByRole('alert')).toContainText('uploaded successfully');
335
+ });
336
+
337
+ test('cancels in-progress upload', async ({ page }) => {
338
+ await page.route('**/api/attachments/upload', async (route) => {
339
+ await new Promise((resolve) => setTimeout(resolve, 10000));
340
+ await route.continue();
341
+ });
342
+
343
+ await page.goto('/attachments');
344
+
345
+ const fileInput = page.locator('input[type="file"]');
346
+ await fileInput.setInputFiles({
347
+ name: 'large.bin',
348
+ mimeType: 'application/octet-stream',
349
+ buffer: Buffer.alloc(5 * 1024 * 1024, 'x'),
350
+ });
351
+
352
+ await page.getByRole('button', { name: 'Upload' }).click();
353
+ await expect(page.getByRole('progressbar')).toBeVisible();
354
+
355
+ await page.getByRole('button', { name: 'Cancel upload' }).click();
356
+
357
+ await expect(page.getByRole('progressbar')).not.toBeVisible();
358
+ await expect(page.getByText(/cancelled|aborted/i)).toBeVisible();
359
+ await expect(page.getByRole('link', { name: 'large.bin' })).not.toBeVisible();
360
+ });
361
+ ```
362
+
363
+ ---
364
+
365
+ ## Retry After Failure
366
+
367
+ ```typescript
368
+ test('retries failed upload', async ({ page }) => {
369
+ let attempt = 0;
370
+
371
+ await page.route('**/api/attachments/upload', async (route) => {
372
+ attempt++;
373
+ if (attempt === 1) {
374
+ await route.fulfill({
375
+ status: 500,
376
+ contentType: 'application/json',
377
+ body: JSON.stringify({ error: 'Server error' }),
378
+ });
379
+ } else {
380
+ await route.fulfill({
381
+ status: 200,
382
+ contentType: 'application/json',
383
+ body: JSON.stringify({ id: 'abc', name: 'data.csv' }),
384
+ });
385
+ }
386
+ });
387
+
388
+ await page.goto('/attachments');
389
+
390
+ const fileInput = page.locator('input[type="file"]');
391
+ await fileInput.setInputFiles({
392
+ name: 'data.csv',
393
+ mimeType: 'text/csv',
394
+ buffer: Buffer.from('col1,col2\nval1,val2'),
395
+ });
396
+
397
+ await page.getByRole('button', { name: 'Upload' }).click();
398
+ await expect(page.getByText(/upload failed|error/i)).toBeVisible();
399
+
400
+ await page.getByRole('button', { name: /retry/i }).click();
401
+ await expect(page.getByRole('alert')).toContainText('uploaded successfully');
402
+ expect(attempt).toBe(2);
403
+ });
404
+ ```
405
+
406
+ ---
407
+
408
+ ## File Type and Size Restrictions
409
+
410
+ ### Validating Allowed Types
411
+
412
+ ```typescript
413
+ test('accepts allowed file types', async ({ page }) => {
414
+ await page.goto('/attachments');
415
+
416
+ const fileInput = page.locator('input[type="file"]');
417
+ await expect(fileInput).toHaveAttribute('accept', /\.pdf|\.doc|\.docx|\.txt/);
418
+
419
+ await fileInput.setInputFiles({
420
+ name: 'report.pdf',
421
+ mimeType: 'application/pdf',
422
+ buffer: Buffer.from('pdf-content'),
423
+ });
424
+
425
+ await expect(page.getByText('report.pdf')).toBeVisible();
426
+ await expect(page.getByText(/not allowed|invalid/i)).not.toBeVisible();
427
+ });
428
+
429
+ test('rejects disallowed file types', async ({ page }) => {
430
+ await page.goto('/attachments');
431
+
432
+ const fileInput = page.locator('input[type="file"]');
433
+ // setInputFiles bypasses the accept attribute—tests JavaScript validation
434
+ await fileInput.setInputFiles({
435
+ name: 'malware.exe',
436
+ mimeType: 'application/x-msdownload',
437
+ buffer: Buffer.from('exe-content'),
438
+ });
439
+
440
+ await expect(page.getByRole('alert')).toContainText(
441
+ /not allowed|unsupported file type|only .pdf, .doc/i
442
+ );
443
+ await expect(page.getByText('malware.exe')).not.toBeVisible();
444
+ });
445
+ ```
446
+
447
+ ### Enforcing Size Limits
448
+
449
+ ```typescript
450
+ test('rejects oversized file', async ({ page }) => {
451
+ await page.goto('/attachments');
452
+
453
+ const fileInput = page.locator('input[type="file"]');
454
+ const oversizedBuffer = Buffer.alloc(11 * 1024 * 1024, 'x');
455
+
456
+ await fileInput.setInputFiles({
457
+ name: 'huge.pdf',
458
+ mimeType: 'application/pdf',
459
+ buffer: oversizedBuffer,
460
+ });
461
+
462
+ await expect(page.getByRole('alert')).toContainText(/file.*too large|exceeds.*10 ?MB/i);
463
+ await expect(page.getByText('huge.pdf')).not.toBeVisible();
464
+ });
465
+ ```
466
+
467
+ ### Enforcing File Count Limits
468
+
469
+ ```typescript
470
+ test('rejects too many files', async ({ page }) => {
471
+ await page.goto('/attachments');
472
+
473
+ const fileInput = page.locator('input[type="file"]');
474
+ const files = Array.from({ length: 6 }, (_, i) => ({
475
+ name: `file-${i + 1}.txt`,
476
+ mimeType: 'text/plain' as const,
477
+ buffer: Buffer.from(`content ${i + 1}`),
478
+ }));
479
+
480
+ await fileInput.setInputFiles(files);
481
+
482
+ await expect(page.getByRole('alert')).toContainText(/maximum.*5 files|too many files/i);
483
+ });
484
+ ```
485
+
486
+ ### Validating Image Dimensions
487
+
488
+ ```typescript
489
+ test('rejects image below minimum dimensions', async ({ page }) => {
490
+ await page.goto('/profile/avatar');
491
+
492
+ const fileInput = page.locator('input[type="file"]');
493
+ // Minimal 1x1 PNG
494
+ const tinyPng = Buffer.from(
495
+ 'iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==',
496
+ 'base64'
497
+ );
498
+
499
+ await fileInput.setInputFiles({
500
+ name: 'tiny.png',
501
+ mimeType: 'image/png',
502
+ buffer: tinyPng,
503
+ });
504
+
505
+ await expect(page.getByRole('alert')).toContainText(/minimum.*dimensions|too small/i);
506
+ });
507
+ ```
508
+
509
+ ---
510
+
511
+ ## Image Preview
512
+
513
+ ```typescript
514
+ test('shows image preview after selection', async ({ page }) => {
515
+ await page.goto('/profile/avatar');
516
+
517
+ const fileInput = page.locator('input[type="file"]');
518
+ await fileInput.setInputFiles(path.resolve(__dirname, '../fixtures/photo.jpg'));
519
+
520
+ const preview = page.getByRole('img', { name: /preview|avatar/i });
521
+ await expect(preview).toBeVisible();
522
+
523
+ const src = await preview.getAttribute('src');
524
+ expect(src).toMatch(/^(blob:|data:image)/);
525
+ });
526
+ ```
527
+
528
+ ---
529
+
530
+ ## Authenticated Downloads
531
+
532
+ ```typescript
533
+ test('downloads file requiring authentication', async ({ page, request }) => {
534
+ await page.goto('/attachments');
535
+
536
+ // Browser download works because cookies are sent
537
+ const downloadPromise = page.waitForEvent('download');
538
+ await page.getByRole('link', { name: 'confidential.pdf' }).click();
539
+
540
+ const download = await downloadPromise;
541
+ expect(download.suggestedFilename()).toBe('confidential.pdf');
542
+
543
+ // Verify via API request (carries auth context)
544
+ const response = await request.get('/api/attachments/456/download');
545
+ expect(response.ok()).toBeTruthy();
546
+ expect(response.headers()['content-type']).toContain('application/pdf');
547
+ });
548
+ ```
549
+
550
+ ---
551
+
552
+ ## Tips
553
+
554
+ 1. **Use `setInputFiles` for uploads**. Even drag-and-drop zones have an underlying `input[type="file"]`. Target it directly instead of simulating OS-level drag events.
555
+
556
+ 2. **Prefer in-memory buffers**. Creating files with `Buffer.from()` keeps tests self-contained. Use fixture files only when you need real content (e.g., a valid PDF your app parses).
557
+
558
+ 3. **Set up download listener before clicking**. Call `page.waitForEvent('download')` before the click that triggers the download—otherwise you may miss the event.
559
+
560
+ 4. **Use `createReadStream()` for content verification**. Reading directly from the stream avoids disk I/O and cleanup of temporary files.
561
+
562
+ 5. **Test both `accept` attribute and JavaScript validation**. The HTML `accept` attribute only filters the OS file dialog. `setInputFiles()` bypasses it, which is exactly what you need to test your app's JavaScript validation.