@bongos/core 1.19.1073 → 1.19.1074

package/tests/app_pair.mjs

@@ -1,168 +0,0 @@
-// tests/app_pair.mjs
-//
-// Hermetic unit tests for the Dev Box desktop app's pairing store (#904,
-// ADR 0045) — src/bongos/app-pair.js. Pure in-memory, injected clock, no DB,
-// no network. Locks down the security-load-bearing behaviors: one-shot token
-// delivery, no-oracle expiry/unknown responses, TTL, the pending→approved
-// state machine, code normalization, and the memory cap.
-//
-// Run:  node tests/app_pair.mjs
-
-import { strict as assert } from 'node:assert';
-import { createRequire } from 'node:module';
-
-const require = createRequire(import.meta.url);
-const { createPairStore, normalizeCode } = require('../src/bongos/app-pair.js');
-
-let passed = 0;
-let failed = 0;
-function t(name, fn) {
-  try { fn(); passed++; console.log(`  PASS  ${name}`); }
-  catch (e) { failed++; console.log(`  FAIL  ${name}\n        ${e.message}`); }
-}
-
-const NOW = Date.parse('2026-06-10T12:00:00Z');
-function storeAt(opts = {}) {
-  let now = NOW;
-  const store = createPairStore({ nowMs: () => now, ...opts });
-  return { store, tick: (ms) => { now += ms; } };
-}
-
-console.log('normalizeCode:');
-
-t('accepts canonical XXXX-XXXX and returns it unchanged', () => {
-  assert.equal(normalizeCode('ABCD-EFGH'), 'ABCD-EFGH');
-});
-
-t('normalizes case, spaces, and a missing dash', () => {
-  assert.equal(normalizeCode('  abcd efgh '), 'ABCD-EFGH');
-  assert.equal(normalizeCode('abcdefgh'), 'ABCD-EFGH');
-});
-
-t('rejects wrong length, off-alphabet chars (0/O/1/I/L/U/V), and non-strings', () => {
-  assert.equal(normalizeCode('ABC-DEFG'), null);
-  assert.equal(normalizeCode('ABCD-EFG0'), null);  // 0 not in alphabet
-  assert.equal(normalizeCode('ABCD-EFGI'), null);  // I not in alphabet
-  assert.equal(normalizeCode('ABCD-EFGU'), null);  // U not in alphabet
-  assert.equal(normalizeCode(null), null);
-  assert.equal(normalizeCode(12345678), null);
-});
-
-console.log('start:');
-
-t('start returns a well-formed pairing', () => {
-  const { store } = storeAt();
-  const out = store.start({ deviceName: 'OTB Dev Box', platform: 'mac' });
-  assert.match(out.pairCode, /^[A-HJ-NP-TW-Z2-9]{4}-[A-HJ-NP-TW-Z2-9]{4}$/);
-  assert.match(out.pollToken, /^[0-9a-f]{64}$/);
-  assert.equal(out.expiresIn, 600);
-  assert.equal(out.interval, 5);
-});
-
-t('start truncates oversized device names and defaults missing fields', () => {
-  const { store } = storeAt();
-  const out = store.start({ deviceName: 'x'.repeat(500) });
-  const info = store.info(out.pairCode);
-  assert.equal(info.deviceName.length, 80);
-  assert.equal(info.platform, 'unknown');
-});
-
-t('start refuses beyond the memory cap with error:busy', () => {
-  const { store } = storeAt({ maxPending: 3 });
-  for (let i = 0; i < 3; i++) assert.ok(store.start({}).pairCode);
-  assert.deepEqual(store.start({}), { error: 'busy' });
-});
-
-t('expired entries free cap space (lazy purge)', () => {
-  const { store, tick } = storeAt({ maxPending: 2, ttlMs: 1000 });
-  store.start({});
-  store.start({});
-  tick(1001);
-  assert.ok(store.start({}).pairCode, 'cap should free after expiry');
-});
-
-console.log('info:');
-
-t('info shows device details for a live pending code (any input form)', () => {
-  const { store } = storeAt();
-  const { pairCode } = store.start({ deviceName: 'OTB Dev Box', platform: 'windows' });
-  const info = store.info(pairCode.toLowerCase().replace('-', ' '));
-  assert.equal(info.deviceName, 'OTB Dev Box');
-  assert.equal(info.platform, 'windows');
-  assert.equal(info.status, 'pending');
-});
-
-t('info: unknown and expired are indistinguishable (both null)', () => {
-  const { store, tick } = storeAt({ ttlMs: 1000 });
-  const { pairCode } = store.start({});
-  tick(1001);
-  assert.equal(store.info(pairCode), null);
-  assert.equal(store.info('ABCD-EFGH'), null);
-});
-
-console.log('approve:');
-
-t('approve parks the grant exactly once', () => {
-  const { store } = storeAt();
-  const { pairCode } = store.start({});
-  assert.deepEqual(store.approve(pairCode, { token: 'tok1' }), { ok: true });
-  assert.deepEqual(store.approve(pairCode, { token: 'tok2' }), { error: 'already_approved' });
-});
-
-t('approve on unknown or expired code → not_found', () => {
-  const { store, tick } = storeAt({ ttlMs: 1000 });
-  const { pairCode } = store.start({});
-  assert.deepEqual(store.approve('ABCD-EFGH', { token: 't' }), { error: 'not_found' });
-  tick(1001);
-  assert.deepEqual(store.approve(pairCode, { token: 't' }), { error: 'not_found' });
-});
-
-console.log('poll:');
-
-t('poll is pending before approval, delivers the grant once, then expired', () => {
-  const { store } = storeAt();
-  const { pairCode, pollToken } = store.start({});
-  assert.deepEqual(store.poll(pollToken), { status: 'pending', interval: 5 });
-  const grant = { token: 'sess-token', builder: { github_login: 'larstest' } };
-  store.approve(pairCode, grant);
-  const out = store.poll(pollToken);
-  assert.equal(out.status, 'approved');
-  assert.deepEqual(out.grant, grant);
-  // One-shot: the entry is gone; replay of the SAME poll token yields expired.
-  assert.deepEqual(store.poll(pollToken), { status: 'expired' });
-});
-
-t('poll: unknown token and expired pairing are indistinguishable', () => {
-  const { store, tick } = storeAt({ ttlMs: 1000 });
-  const { pollToken } = store.start({});
-  assert.deepEqual(store.poll('f'.repeat(64)), { status: 'expired' });
-  tick(1001);
-  assert.deepEqual(store.poll(pollToken), { status: 'expired' });
-});
-
-t('an approved-but-never-polled grant still dies at TTL', () => {
-  const { store, tick } = storeAt({ ttlMs: 1000 });
-  const { pairCode, pollToken } = store.start({});
-  store.approve(pairCode, { token: 'sess' });
-  tick(1001);
-  assert.deepEqual(store.poll(pollToken), { status: 'expired' });
-  assert.equal(store._size(), 0, 'expired entry purged');
-});
-
-t('a delivered grant leaves no residue in the store', () => {
-  const { store } = storeAt();
-  const { pairCode, pollToken } = store.start({});
-  store.approve(pairCode, { token: 'sess' });
-  store.poll(pollToken);
-  assert.equal(store._size(), 0);
-});
-
-t('pair code cannot poll; poll token cannot approve (credential separation)', () => {
-  const { store } = storeAt();
-  const { pairCode, pollToken } = store.start({});
-  assert.deepEqual(store.poll(pairCode), { status: 'expired' });
-  assert.deepEqual(store.approve(pollToken, { token: 't' }), { error: 'not_found' });
-});
-
-console.log(`\n${passed} passed, ${failed} failed`);
-process.exit(failed === 0 ? 0 : 1);