@bongos/core 1.19.737 → 1.19.739

package/tests/npmrc.mjs

@@ -1,154 +0,0 @@
-// tests/npmrc.mjs
-//
-// Unit tests for scripts/gds/npmrc.js (ADR 0134, task 2090) — the single source of the
-// env-fed `.npmrc` used to install the PRIVATE @bongos/core from the npm registry, plus
-// the opt-in / token gates that keep the vendored-tarball path the default/fallback.
-//
-// Run:  node tests/npmrc.mjs
-
-import { strict as assert } from 'node:assert';
-import { createRequire } from 'node:module';
-import { mkdtempSync, writeFileSync, readFileSync, existsSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-const require = createRequire(import.meta.url);
-const n = require('../scripts/gds/npmrc.js');
-
-let passed = 0, failed = 0;
-function test(name, fn) {
-  try { fn(); passed++; console.log(`  ok  ${name}`); }
-  catch (err) { failed++; console.log(`  FAIL ${name}`); console.log(`     ${err.message}`); }
-}
-
-// ---- npmrcContent ----------------------------------------------------------
-test('npmrcContent: scopes @bongos to the registry + auth token EXPANDS from the env (literal ${NPM_TOKEN})', () => {
-  const body = n.npmrcContent();
-  assert.match(body, /@bongos:registry=https:\/\/registry\.npmjs\.org\//);
-  assert.match(body, /\/\/registry\.npmjs\.org\/:_authToken=\$\{NPM_TOKEN\}/);
-});
-
-test('npmrcContent: carries NO real secret — only the ${NPM_TOKEN} placeholder', () => {
-  const body = n.npmrcContent();
-  // the only _authToken= assignment must be the env placeholder, never a concrete value
-  const tokenLines = body.split('\n').filter((l) => /_authToken=/.test(l));
-  assert.equal(tokenLines.length, 1);
-  assert.equal(tokenLines[0].trim(), '//registry.npmjs.org/:_authToken=${NPM_TOKEN}');
-});
-
-test('npmrcContent: comment lines use the ini `;` comment char', () => {
-  const comments = n.npmrcContent().split('\n').filter((l) => l.startsWith(';'));
-  assert.ok(comments.length >= 3, 'has explanatory comments');
-});
-
-test('npmrcContent: honors custom scope/host/tokenEnv', () => {
-  const body = n.npmrcContent({ scope: '@acme', host: 'npm.acme.dev', tokenEnv: 'ACME_TOKEN' });
-  assert.match(body, /@acme:registry=https:\/\/npm\.acme\.dev\//);
-  assert.match(body, /\/\/npm\.acme\.dev\/:_authToken=\$\{ACME_TOKEN\}/);
-});
-
-// ---- gates -----------------------------------------------------------------
-test('hasNpmToken: true only when NPM_TOKEN is a non-empty string', () => {
-  assert.equal(n.hasNpmToken({ NPM_TOKEN: 'npm_abc' }), true);
-  assert.equal(n.hasNpmToken({ NPM_TOKEN: '' }), false);
-  assert.equal(n.hasNpmToken({ NPM_TOKEN: '   ' }), false);
-  assert.equal(n.hasNpmToken({}), false);
-});
-
-test('registryCoreRequested: 1/true/yes/on → true; everything else → false', () => {
-  for (const v of ['1', 'true', 'TRUE', 'yes', 'on']) assert.equal(n.registryCoreRequested({ PROVISION_CORE_FROM_REGISTRY: v }), true, v);
-  for (const v of ['0', 'false', 'no', '', 'off', 'garbage']) assert.equal(n.registryCoreRequested({ PROVISION_CORE_FROM_REGISTRY: v }), false, v);
-  assert.equal(n.registryCoreRequested({}), false, 'unset');
-});
-
-// ---- writeNpmrc ------------------------------------------------------------
-test('writeNpmrc: writes the env-fed .npmrc + returns its path', () => {
-  const dir = mkdtempSync(join(tmpdir(), 'npmrc-'));
-  try {
-    const p = n.writeNpmrc(dir, { log: () => {} });
-    assert.equal(p, join(dir, '.npmrc'));
-    assert.equal(readFileSync(p, 'utf8'), n.npmrcContent());
-  } finally { rmSync(dir, { recursive: true, force: true }); }
-});
-
-test('writeNpmrc: dry-run writes nothing but returns the intended path', () => {
-  const dir = mkdtempSync(join(tmpdir(), 'npmrc-'));
-  try {
-    const p = n.writeNpmrc(dir, { dryRun: true, log: () => {} });
-    assert.equal(p, join(dir, '.npmrc'));
-    assert.equal(existsSync(join(dir, '.npmrc')), false, 'dry-run must not write');
-  } finally { rmSync(dir, { recursive: true, force: true }); }
-});
-
-test('writeNpmrc: overwrite:false leaves a pre-existing .npmrc untouched (returns null)', () => {
-  const dir = mkdtempSync(join(tmpdir(), 'npmrc-'));
-  try {
-    const existing = '@other:registry=https://npm.other.dev/\n';
-    writeFileSync(join(dir, '.npmrc'), existing);
-    const p = n.writeNpmrc(dir, { overwrite: false, log: () => {} });
-    assert.equal(p, null, 'skipped');
-    assert.equal(readFileSync(join(dir, '.npmrc'), 'utf8'), existing, 'existing content preserved');
-  } finally { rmSync(dir, { recursive: true, force: true }); }
-});
-
-test('writeNpmrc: overwrite:true (default) replaces an existing .npmrc', () => {
-  const dir = mkdtempSync(join(tmpdir(), 'npmrc-'));
-  try {
-    writeFileSync(join(dir, '.npmrc'), 'stale\n');
-    n.writeNpmrc(dir, { log: () => {} });
-    assert.equal(readFileSync(join(dir, '.npmrc'), 'utf8'), n.npmrcContent());
-  } finally { rmSync(dir, { recursive: true, force: true }); }
-});
-
-// ---- resolveNpmToken (task 1002754) ----------------------------------------
-// The install-time credential resolver that removes the hand-exported-NPM_TOKEN
-// deploy step: env wins, else the user-level ~/.npmrc's LITERAL token; env-fed
-// `${…}` values in the user file are the trap, never a credential.
-test('resolveNpmToken: env NPM_TOKEN wins over everything', () => {
-  const home = mkdtempSync(join(tmpdir(), 'npmrc-home-'));
-  try {
-    writeFileSync(join(home, '.npmrc'), '//registry.npmjs.org/:_authToken=npm_userlevel\n');
-    const r = n.resolveNpmToken({ env: { NPM_TOKEN: ' npm_fromenv ' }, homedir: home });
-    assert.deepEqual(r, { token: 'npm_fromenv', source: 'env' });
-  } finally { rmSync(home, { recursive: true, force: true }); }
-});
-
-test('resolveNpmToken: falls back to the user-level ~/.npmrc literal token', () => {
-  const home = mkdtempSync(join(tmpdir(), 'npmrc-home-'));
-  try {
-    writeFileSync(join(home, '.npmrc'),
-      'registry=https://registry.npmjs.org/\n//registry.npmjs.org/:_authToken=npm_ABC123\nfund=false\n');
-    const r = n.resolveNpmToken({ env: {}, homedir: home });
-    assert.deepEqual(r, { token: 'npm_ABC123', source: 'user-npmrc' });
-  } finally { rmSync(home, { recursive: true, force: true }); }
-});
-
-test('resolveNpmToken: an env-fed ${…} value in the user file is the trap, not a credential', () => {
-  const home = mkdtempSync(join(tmpdir(), 'npmrc-home-'));
-  try {
-    writeFileSync(join(home, '.npmrc'), '//registry.npmjs.org/:_authToken=${NPM_TOKEN}\n');
-    const r = n.resolveNpmToken({ env: {}, homedir: home });
-    assert.deepEqual(r, { token: null, source: null });
-  } finally { rmSync(home, { recursive: true, force: true }); }
-});
-
-test('resolveNpmToken: a token for a DIFFERENT host is not borrowed', () => {
-  const home = mkdtempSync(join(tmpdir(), 'npmrc-home-'));
-  try {
-    writeFileSync(join(home, '.npmrc'), '//npm.pkg.github.com/:_authToken=ghp_other\n');
-    const r = n.resolveNpmToken({ env: {}, homedir: home });
-    assert.deepEqual(r, { token: null, source: null });
-  } finally { rmSync(home, { recursive: true, force: true }); }
-});
-
-test('resolveNpmToken: no user npmrc at all → null, never a throw', () => {
-  const home = mkdtempSync(join(tmpdir(), 'npmrc-home-'));
-  try {
-    const r = n.resolveNpmToken({ env: {}, homedir: home });
-    assert.deepEqual(r, { token: null, source: null });
-  } finally { rmSync(home, { recursive: true, force: true }); }
-});
-
-console.log('');
-console.log(`npmrc tests: ${passed} passed, ${failed} failed`);
-process.exit(failed ? 1 : 0);