@hanamesh/dsh-app-host 0.2.0-rc.2 → 0.6.12

package/dist/install-target/fixtures/install-failure-cases.json

@@ -0,0 +1,58 @@
+{
+  "contract": "hanamesh.install-target",
+  "contractVersion": "1",
+  "since": "0.2.0-rc.10",
+  "evidence": "SOURCE",
+  "label": "SOURCE fixture: the official dsh plugin command and lib-provision are stand-ins on a temporary profile; these results never stand for a real installation or a REAL_UI product gate.",
+  "application": {
+    "itemId": "fixture.install-target.app",
+    "packageName": "@hanamesh-fixture/install-target-app",
+    "appId": "fixture-app",
+    "previous": "0.3.0",
+    "latest": "0.4.0"
+  },
+  "plugin": {
+    "itemId": "fixture.install-target.plugin",
+    "packageName": "@hanamesh-fixture/install-target-plugin",
+    "latest": "1.2.3"
+  },
+  "cases": [
+    { "id": "RB01", "mode": "new-install", "stage": "before-add", "note": "registry lookup fails before the profile is touched", "registryMissing": true,
+      "expect": { "code": "REGISTRY_LOOKUP_FAILED", "status": "not-needed", "actions": [] } },
+    { "id": "RB02", "mode": "new-install", "stage": "add", "note": "official CLI fails before writing", "inject": [["add", "before"]],
+      "expect": { "code": "DSH_PLUGIN_FAILED", "status": "not-needed", "actions": [] } },
+    { "id": "RB03", "mode": "new-install", "stage": "add", "note": "official CLI fails after writing package/lock/module", "inject": [["add", "after"]],
+      "expect": { "code": "DSH_PLUGIN_FAILED", "status": "restored", "actions": ["dsh plugin remove $package"] } },
+    { "id": "RB04", "mode": "new-install", "stage": "definition", "note": "add succeeded, application definition is invalid", "invalidDefinition": true,
+      "expect": { "code": "INVALID_DEFINITION", "status": "restored", "actions": ["dsh plugin remove $package"] } },
+    { "id": "RB05", "mode": "new-install", "stage": "provision", "note": "provision fails before promote (runtime untouched)", "inject": [["provision", "before"]],
+      "expect": { "code": "E_DOWNLOAD", "status": "restored", "actions": ["dsh plugin remove $package"] } },
+    { "id": "RB06", "mode": "new-install", "stage": "provision", "note": "provision fails after promoting a newly claimed runtime item", "inject": [["provision", "after"]],
+      "expect": { "code": "E_VERIFY", "status": "restored", "actions": ["dsh plugin remove $package", "provision remove runtime"] } },
+    { "id": "RB07", "mode": "upgrade", "stage": "before-add", "note": "upgrade: registry lookup fails before the profile is touched", "registryMissing": true,
+      "expect": { "code": "REGISTRY_LOOKUP_FAILED", "status": "not-needed", "actions": [] } },
+    { "id": "RB08", "mode": "upgrade", "stage": "add", "note": "upgrade: official CLI fails after writing the new version", "inject": [["add", "after"]],
+      "expect": { "code": "DSH_PLUGIN_FAILED", "status": "restored", "actions": ["dsh plugin add --save-exact $package@$previous"] } },
+    { "id": "RB09", "mode": "upgrade", "stage": "definition", "note": "upgrade: new definition is invalid; original exact version comes back", "invalidDefinition": true,
+      "expect": { "code": "INVALID_DEFINITION", "status": "restored", "actions": ["dsh plugin add --save-exact $package@$previous"] } },
+    { "id": "RB10", "mode": "upgrade", "stage": "provision", "note": "upgrade: new runtime promoted then failed; original runtime is provisioned again from the restored definition", "inject": [["provision", "after"]],
+      "expect": { "code": "E_VERIFY", "status": "restored", "actions": ["dsh plugin add --save-exact $package@$previous", "provision runtime"] } },
+    { "id": "RB11", "mode": "new-install", "stage": "definition", "note": "compensation itself fails: the original error is kept and the residue is reported", "invalidDefinition": true, "inject": [["remove", "before"]],
+      "expect": { "code": "INVALID_DEFINITION", "status": "failed", "recoveryError": "DSH_PLUGIN_FAILED", "actions": ["dsh plugin remove $package"], "residue": ["dependency", "module", "lockfile"] } },
+    { "id": "RB12", "mode": "upgrade", "stage": "provision", "note": "upgrade compensation fails: original version cannot be added back", "inject": [["provision", "after"], ["add", "before", 1]],
+      "expect": { "code": "E_VERIFY", "status": "failed", "recoveryError": "DSH_PLUGIN_FAILED", "actions": ["dsh plugin add --save-exact $package@$previous"], "residue": ["dependency", "module", "lockfile", "runtime:runtime"] } },
+    { "id": "RB13", "mode": "new-install", "stage": "definition", "note": "a concurrent profile writer is never undone; the lockfile cannot be proven restored", "invalidDefinition": true, "concurrent": true,
+      "expect": { "code": "INVALID_DEFINITION", "status": "failed", "actions": ["dsh plugin remove $package"], "residue": ["lockfile"] } },
+    { "id": "RB14", "mode": "new-install", "stage": "provision", "note": "unowned files in a newly claimed runtime are kept and reported, not deleted", "inject": [["provision", "unowned"], ["provision", "after"]],
+      "expect": { "code": "E_VERIFY", "status": "failed", "actions": ["dsh plugin remove $package", "provision remove runtime"], "residue": ["runtime:runtime"] } },
+    { "id": "RB15", "mode": "new-install", "stage": "add", "kind": "plugin", "note": "plugin bundle: CLI fails after selecting the bundle; selection and lock come back", "inject": [["add", "after"]],
+      "expect": { "code": "DSH_PLUGIN_FAILED", "status": "restored", "actions": ["dsh plugin remove $package"] } }
+  ],
+  "presentation": [
+    { "id": "RP01", "note": "restored new install is a failure that left nothing behind", "recovery": { "status": "restored", "mode": "new-install", "stage": "definition", "previousVersion": null, "actions": ["dsh plugin remove @hanamesh-fixture/install-target-app"], "checks": [], "residue": [] }, "expect": { "installed": false, "restored": true } },
+    { "id": "RP02", "note": "restored upgrade names the original version", "recovery": { "status": "restored", "mode": "upgrade", "stage": "provision", "previousVersion": "0.3.0", "actions": [], "checks": [], "residue": [] }, "expect": { "installed": false, "restored": true, "version": "0.3.0" } },
+    { "id": "RP03", "note": "nothing was changed before the failure", "recovery": { "status": "not-needed", "mode": "new-install", "stage": "before-add", "previousVersion": null, "actions": [], "checks": [], "residue": [] }, "expect": { "installed": false, "restored": true } },
+    { "id": "RP04", "note": "compensation failed: never shown as success or as rolled back", "recovery": { "status": "failed", "mode": "upgrade", "stage": "provision", "previousVersion": "0.3.0", "actions": [], "checks": [], "residue": [{ "item": "module", "reason": "NOT_RESTORED" }], "error": { "code": "DSH_PLUGIN_FAILED" }, "originals": { "dir": "/data/library-recovery/op", "files": ["package.json"] } }, "expect": { "installed": false, "restored": false, "residue": ["module"] } },
+    { "id": "RP05", "note": "an rc.9 provider sends no recovery: unknown, not restored", "recovery": null, "expect": { "installed": false, "restored": false } }
+  ]
+}

package/dist/install-target/fixtures/provider-cases.json

@@ -0,0 +1,618 @@
+{
+  "contract": "hanamesh.install-target",
+  "contractVersion": "1",
+  "catalog": "./catalog.json",
+  "targets": [
+    {
+      "id": "PV01",
+      "semantic": "public",
+      "note": "package name resolves through the market's own catalog",
+      "input": {
+        "packageName": "@hanamesh-fixture/install-target-plugin"
+      },
+      "expect": {
+        "status": "confirmation-required",
+        "itemId": "fixture.install-target.plugin",
+        "packageName": "@hanamesh-fixture/install-target-plugin"
+      }
+    },
+    {
+      "id": "PV02",
+      "semantic": "public",
+      "note": "catalog item id resolves",
+      "input": {
+        "itemId": "fixture.install-target.plugin"
+      },
+      "expect": {
+        "status": "confirmation-required",
+        "itemId": "fixture.install-target.plugin",
+        "packageName": "@hanamesh-fixture/install-target-plugin"
+      }
+    },
+    {
+      "id": "PV03",
+      "semantic": "public",
+      "note": "matching pair resolves",
+      "input": {
+        "itemId": "fixture.install-target.app",
+        "packageName": "@hanamesh-fixture/install-target-app"
+      },
+      "expect": {
+        "status": "confirmation-required",
+        "itemId": "fixture.install-target.app",
+        "packageName": "@hanamesh-fixture/install-target-app"
+      }
+    },
+    {
+      "id": "PV04",
+      "semantic": "version-match",
+      "note": "declared contract version 1 is accepted and changes nothing else",
+      "input": {
+        "packageName": "@hanamesh-fixture/install-target-plugin",
+        "contractVersion": "1"
+      },
+      "expect": {
+        "status": "confirmation-required",
+        "itemId": "fixture.install-target.plugin",
+        "packageName": "@hanamesh-fixture/install-target-plugin"
+      }
+    },
+    {
+      "id": "PV05",
+      "semantic": "version-mismatch",
+      "note": "unsupported declaration is refused explicitly",
+      "input": {
+        "packageName": "@hanamesh-fixture/install-target-plugin",
+        "contractVersion": "2"
+      },
+      "expect": {
+        "error": "CONTRACT_VERSION_UNSUPPORTED",
+        "http": 400
+      }
+    },
+    {
+      "id": "PV06",
+      "semantic": "version-mismatch",
+      "note": "a newer caller's extra fields are refused as a version mismatch, not silently accepted",
+      "input": {
+        "packageName": "@hanamesh-fixture/install-target-plugin",
+        "contractVersion": "2",
+        "channel": "beta"
+      },
+      "expect": {
+        "error": "CONTRACT_VERSION_UNSUPPORTED",
+        "http": 400
+      }
+    },
+    {
+      "id": "PV07",
+      "semantic": "version-mismatch",
+      "note": "empty declaration is not treated as absent",
+      "input": {
+        "packageName": "@hanamesh-fixture/install-target-plugin",
+        "contractVersion": ""
+      },
+      "expect": {
+        "error": "CONTRACT_VERSION_UNSUPPORTED",
+        "http": 400
+      }
+    },
+    {
+      "id": "PV08",
+      "semantic": "invalid",
+      "note": "no identifier",
+      "input": {},
+      "expect": {
+        "error": "INVALID_INPUT",
+        "http": 400
+      }
+    },
+    {
+      "id": "PV09",
+      "semantic": "invalid",
+      "note": "caller-supplied version is refused",
+      "input": {
+        "packageName": "@hanamesh-fixture/install-target-plugin",
+        "version": "9.0.0"
+      },
+      "expect": {
+        "error": "INVALID_INPUT",
+        "http": 400
+      }
+    },
+    {
+      "id": "PV10",
+      "semantic": "invalid",
+      "note": "caller-supplied download location is refused",
+      "input": {
+        "itemId": "fixture.install-target.plugin",
+        "url": "https://evil.example/pkg.tgz"
+      },
+      "expect": {
+        "error": "INVALID_INPUT",
+        "http": 400
+      }
+    },
+    {
+      "id": "PV11",
+      "semantic": "invalid",
+      "note": "package name grammar",
+      "input": {
+        "packageName": "../escape"
+      },
+      "expect": {
+        "error": "INVALID_INPUT",
+        "http": 400
+      }
+    },
+    {
+      "id": "PV12",
+      "semantic": "invalid",
+      "note": "item id longer than 160",
+      "input": {
+        "itemId": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
+      },
+      "expect": {
+        "error": "INVALID_INPUT",
+        "http": 400
+      }
+    },
+    {
+      "id": "PV13",
+      "semantic": "invalid",
+      "note": "control character in item id",
+      "input": {
+        "itemId": "fixture\u0007id"
+      },
+      "expect": {
+        "error": "INVALID_INPUT",
+        "http": 400
+      }
+    },
+    {
+      "id": "PV14",
+      "semantic": "missing-catalog",
+      "note": "identifier absent from the catalog",
+      "input": {
+        "packageName": "@hanamesh-fixture/not-in-catalog"
+      },
+      "expect": {
+        "error": "CATALOG_ITEM_MISSING",
+        "http": 404
+      }
+    },
+    {
+      "id": "PV15",
+      "semantic": "missing-catalog",
+      "note": "identifiers naming two different items",
+      "input": {
+        "itemId": "fixture.install-target.plugin",
+        "packageName": "@hanamesh-fixture/install-target-app"
+      },
+      "expect": {
+        "error": "CATALOG_ITEM_MISSING",
+        "http": 404
+      }
+    },
+    {
+      "id": "PV16",
+      "semantic": "invalid",
+      "note": "catalog entry that is not an npm package",
+      "input": {
+        "itemId": "fixture.install-target.repository-only"
+      },
+      "expect": {
+        "error": "NOT_INSTALLABLE",
+        "http": 400
+      }
+    }
+  ],
+  "fragments": [
+    {
+      "id": "PF01",
+      "semantic": "public",
+      "note": "legacy fragment without declaration",
+      "fragment": "#hanamesh-install?packageName=%40hanamesh-fixture%2Finstall-target-plugin",
+      "expect": {
+        "status": "confirmation-required",
+        "itemId": "fixture.install-target.plugin"
+      }
+    },
+    {
+      "id": "PF02",
+      "semantic": "version-match",
+      "note": "declared v1 fragment",
+      "fragment": "#hanamesh-install?itemId=fixture.install-target.plugin&packageName=%40hanamesh-fixture%2Finstall-target-plugin&contractVersion=1",
+      "expect": {
+        "status": "confirmation-required",
+        "itemId": "fixture.install-target.plugin"
+      }
+    },
+    {
+      "id": "PF03",
+      "semantic": "version-mismatch",
+      "note": "unsupported declaration",
+      "fragment": "#hanamesh-install?packageName=%40hanamesh-fixture%2Finstall-target-plugin&contractVersion=2",
+      "expect": {
+        "status": "failed",
+        "error": "CONTRACT_VERSION_UNSUPPORTED"
+      }
+    },
+    {
+      "id": "PF04",
+      "semantic": "invalid",
+      "note": "duplicate field",
+      "fragment": "#hanamesh-install?packageName=%40hanamesh-fixture%2Finstall-target-plugin&packageName=evil",
+      "expect": {
+        "status": "failed",
+        "error": "INVALID_INPUT"
+      }
+    },
+    {
+      "id": "PF05",
+      "semantic": "invalid",
+      "note": "extra download location",
+      "fragment": "#hanamesh-install?packageName=%40hanamesh-fixture%2Finstall-target-plugin&url=https%3A%2F%2Fevil.example",
+      "expect": {
+        "status": "failed",
+        "error": "INVALID_INPUT"
+      }
+    },
+    {
+      "id": "PF06",
+      "semantic": "missing-catalog",
+      "note": "identifier absent from the catalog",
+      "fragment": "#hanamesh-install?packageName=%40hanamesh-fixture%2Fnot-in-catalog",
+      "expect": {
+        "status": "failed",
+        "error": "CATALOG_ITEM_MISSING"
+      }
+    }
+  ],
+  "loopback": {
+    "aliases": [
+      "127.0.0.1",
+      "localhost"
+    ],
+    "cases": [
+      {
+        "id": "LB01",
+        "method": "GET",
+        "headers": {},
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 200
+        },
+        "note": "authenticated resolution without Origin"
+      },
+      {
+        "id": "LB02",
+        "method": "GET",
+        "headers": {
+          "origin": "$origin"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 200
+        },
+        "note": "authenticated same-origin resolution"
+      },
+      {
+        "id": "LB03",
+        "method": "GET",
+        "headers": {
+          "host": "unknown.example:$port"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "HOST_DENIED"
+        },
+        "note": "unknown Host"
+      },
+      {
+        "id": "LB04",
+        "method": "GET",
+        "headers": {
+          "host": "$hostname:$otherPort"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "HOST_DENIED"
+        },
+        "note": "different Host port"
+      },
+      {
+        "id": "LB05",
+        "method": "GET",
+        "headers": {
+          "origin": "$otherOrigin"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "ORIGIN_DENIED"
+        },
+        "note": "the other alias remains a different browser origin"
+      },
+      {
+        "id": "LB06",
+        "method": "GET",
+        "headers": {
+          "origin": "http://$hostname:$otherPort"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "ORIGIN_DENIED"
+        },
+        "note": "different Origin port"
+      },
+      {
+        "id": "LB07",
+        "method": "GET",
+        "headers": {
+          "origin": "https://foreign.example"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "ORIGIN_DENIED"
+        },
+        "note": "foreign Origin"
+      },
+      {
+        "id": "LB08",
+        "method": "GET",
+        "headers": {
+          "sec-fetch-dest": "iframe"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "FRAME_CONTROL_DENIED"
+        },
+        "note": "iframe"
+      },
+      {
+        "id": "LB09",
+        "method": "GET",
+        "headers": {
+          "x-install-target-suite": "wrong"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 401,
+          "error": "UNAUTHENTICATED"
+        },
+        "note": "missing authentication"
+      },
+      {
+        "id": "LB10",
+        "method": "POST",
+        "headers": {
+          "origin": "$origin"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "CSRF_DENIED"
+        },
+        "note": "missing explicit client header"
+      },
+      {
+        "id": "LB11",
+        "method": "POST",
+        "headers": {
+          "x-hanamesh-client": "workspace-v1"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "CSRF_DENIED"
+        },
+        "note": "missing Origin"
+      },
+      {
+        "id": "LB12",
+        "method": "POST",
+        "headers": {
+          "origin": "$otherOrigin",
+          "x-hanamesh-client": "workspace-v1"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "ORIGIN_DENIED"
+        },
+        "note": "cross-alias install"
+      },
+      {
+        "id": "LB13",
+        "method": "POST",
+        "headers": {
+          "origin": "$origin",
+          "x-hanamesh-client": "workspace-v1",
+          "sec-fetch-dest": "iframe"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "FRAME_CONTROL_DENIED"
+        },
+        "note": "iframe install"
+      },
+      {
+        "id": "LB14",
+        "method": "POST",
+        "headers": {
+          "origin": "$origin",
+          "x-hanamesh-client": "workspace-v1",
+          "x-install-target-suite": "wrong"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 401,
+          "error": "UNAUTHENTICATED"
+        },
+        "note": "unauthenticated install"
+      },
+      {
+        "id": "LB15",
+        "method": "POST",
+        "headers": {
+          "origin": "$origin",
+          "x-hanamesh-client": "workspace-v1"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "2"
+        },
+        "expect": {
+          "http": 400,
+          "error": "CONTRACT_VERSION_UNSUPPORTED"
+        },
+        "note": "unsupported install version"
+      },
+      {
+        "id": "LB16",
+        "method": "GET",
+        "headers": {
+          "origin": "null"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "ORIGIN_DENIED"
+        },
+        "note": "opaque Origin"
+      },
+      {
+        "id": "LB17",
+        "method": "GET",
+        "headers": {
+          "host": "localhost.:$port"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "HOST_DENIED"
+        },
+        "note": "unlisted localhost spelling"
+      },
+      {
+        "id": "LB18",
+        "method": "GET",
+        "headers": {
+          "host": "[::1]:$port"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "HOST_DENIED"
+        },
+        "note": "unlisted IPv6 Host"
+      },
+      {
+        "id": "LB19",
+        "method": "POST",
+        "headers": {
+          "origin": "https://$hostname:$port",
+          "x-hanamesh-client": "workspace-v1"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "ORIGIN_DENIED"
+        },
+        "note": "different Origin scheme"
+      },
+      {
+        "id": "LB20",
+        "method": "GET",
+        "headers": {},
+        "input": {
+          "packageName": "@hanamesh-fixture/install-target-plugin",
+          "contractVersion": "2"
+        },
+        "expect": {
+          "http": 400,
+          "error": "CONTRACT_VERSION_UNSUPPORTED"
+        },
+        "note": "unsupported resolve version"
+      },
+      {
+        "id": "LB21",
+        "method": "POST",
+        "headers": {
+          "origin": "$origin",
+          "x-hanamesh-client": "workspace-v1"
+        },
+        "input": {
+          "packageName": "@hanamesh-fixture/forbidden",
+          "contractVersion": "1"
+        },
+        "expect": {
+          "http": 403,
+          "error": "FORBIDDEN"
+        },
+        "note": "unauthorized installation"
+      }
+    ]
+  }
+}