@usebruno/js 0.43.0 → 0.45.0

package/src/sandbox/node-vm/utils.js

@@ -0,0 +1,42 @@
+const path = require('node:path');
+const nodeModule = require('node:module');
+
+/**
+ * Check if a module is a Node.js builtin
+ * @param {string} moduleName - Module name to check
+ * @returns {boolean} True if module is a builtin
+ */
+function isBuiltinModule(moduleName) {
+  const normalized = moduleName.startsWith('node:') ? moduleName.slice(5) : moduleName;
+  return nodeModule.builtinModules.includes(normalized);
+}
+
+/**
+ * Validate that a path is within allowed context roots
+ * @param {string} normalizedPath - Normalized file path
+ * @param {Array<string>} additionalContextRootsAbsolute - Allowed roots
+ * @returns {boolean} True if path is within allowed roots
+ */
+function isPathWithinAllowedRoots(normalizedPath, additionalContextRootsAbsolute) {
+  return additionalContextRootsAbsolute.some((allowedRoot) => {
+    const normalizedAllowedRoot = path.normalize(allowedRoot);
+    const relativePath = path.relative(normalizedAllowedRoot, normalizedPath);
+    return !relativePath.startsWith('..') && !path.isAbsolute(relativePath);
+  });
+}
+
+class ScriptError extends Error {
+  constructor(error, script) {
+    super(error.message);
+    this.name = 'ScriptError';
+    this.originalError = error;
+    this.script = script;
+    this.stack = error.stack;
+  }
+}
+
+module.exports = {
+  isBuiltinModule,
+  isPathWithinAllowedRoots,
+  ScriptError
+};

package/src/sandbox/quickjs/index.js

@@ -24,7 +24,7 @@ const toNumber = (value) => {
 };
 
 const removeQuotes = (str) => {
-  if ((str.startsWith('"') && str.endsWith('"')) || (str.startsWith("'") && str.endsWith("'"))) {
+  if ((str.startsWith('"') && str.endsWith('"')) || (str.startsWith('\'') && str.endsWith('\''))) {
     return str.slice(1, -1);
   }
   return str;
@@ -36,7 +36,7 @@ const executeQuickJsVm = ({ script: externalScript, context: externalContext, sc
   }
   externalScript = externalScript?.trim();
 
-  if(scriptType === 'template-literal') {
+  if (scriptType === 'template-literal') {
     if (!isNaN(Number(externalScript))) {
       const number = Number(externalScript);
 

package/src/sandbox/quickjs/shims/bru.js

@@ -24,6 +24,12 @@ const addBruShimToContext = (vm, bru) => {
   vm.setProp(bruObject, 'getCollectionName', getCollectionName);
   getCollectionName.dispose();
 
+  let isSafeMode = vm.newFunction('isSafeMode', function () {
+    return marshallToVm(bru.isSafeMode(), vm);
+  });
+  vm.setProp(bruObject, 'isSafeMode', isSafeMode);
+  isSafeMode.dispose();
+
   let getProcessEnv = vm.newFunction('getProcessEnv', function (key) {
     return marshallToVm(bru.getProcessEnv(vm.dump(key)), vm);
   });
@@ -341,7 +347,7 @@ const addBruShimToContext = (vm, bru) => {
       const promise = vm.newPromise();
       const dumpedUrl = vm.dump(url);
       const dumpedNameOrObj = vm.dump(nameOrCookieObj);
-      
+
       // Check if the second argument is an object (cookie object case)
       if (typeof dumpedNameOrObj === 'object' && dumpedNameOrObj !== null) {
         // Cookie object case: setCookie(url, cookieObject, callback)
@@ -363,7 +369,7 @@ const addBruShimToContext = (vm, bru) => {
           }
         });
       }
-      
+
       promise.settled.then(vm.runtime.executePendingJobs);
       return promise.handle;
     });
@@ -371,7 +377,7 @@ const addBruShimToContext = (vm, bru) => {
 
     const _setCookiesFn = vm.newFunction('_setCookies', (url, cookiesArray) => {
       const promise = vm.newPromise();
-      
+
       nativeJar.setCookies(vm.dump(url), vm.dump(cookiesArray), (err) => {
         if (err) {
           promise.reject(marshallToVm(cleanJson(err), vm));

package/src/sandbox/quickjs/shims/bruno-request.js

@@ -9,6 +9,7 @@ const addBrunoRequestShimToContext = (vm, req) => {
   const body = marshallToVm(req.getBody(), vm);
   const timeout = marshallToVm(req.getTimeout(), vm);
   const name = marshallToVm(req.getName(), vm);
+  const pathParams = marshallToVm(req.getPathParams(), vm);
   const tags = marshallToVm(req.getTags(), vm);
 
   vm.setProp(reqObject, 'url', url);
@@ -17,6 +18,7 @@ const addBrunoRequestShimToContext = (vm, req) => {
   vm.setProp(reqObject, 'body', body);
   vm.setProp(reqObject, 'timeout', timeout);
   vm.setProp(reqObject, 'name', name);
+  vm.setProp(reqObject, 'pathParams', pathParams);
   vm.setProp(reqObject, 'tags', tags);
 
   url.dispose();
@@ -25,6 +27,7 @@ const addBrunoRequestShimToContext = (vm, req) => {
   body.dispose();
   timeout.dispose();
   name.dispose();
+  pathParams.dispose();
   tags.dispose();
 
   let getUrl = vm.newFunction('getUrl', function () {
@@ -39,6 +42,24 @@ const addBrunoRequestShimToContext = (vm, req) => {
   vm.setProp(reqObject, 'setUrl', setUrl);
   setUrl.dispose();
 
+  let getHost = vm.newFunction('getHost', function () {
+    return marshallToVm(req.getHost(), vm);
+  });
+  vm.setProp(reqObject, 'getHost', getHost);
+  getHost.dispose();
+
+  let getPath = vm.newFunction('getPath', function () {
+    return marshallToVm(req.getPath(), vm);
+  });
+  vm.setProp(reqObject, 'getPath', getPath);
+  getPath.dispose();
+
+  let getQueryString = vm.newFunction('getQueryString', function () {
+    return marshallToVm(req.getQueryString(), vm);
+  });
+  vm.setProp(reqObject, 'getQueryString', getQueryString);
+  getQueryString.dispose();
+
   let getMethod = vm.newFunction('getMethod', function () {
     return marshallToVm(req.getMethod(), vm);
   });
@@ -57,6 +78,12 @@ const addBrunoRequestShimToContext = (vm, req) => {
   vm.setProp(reqObject, 'getName', getName);
   getName.dispose();
 
+  let getPathParams = vm.newFunction('getPathParams', function () {
+    return marshallToVm(req.getPathParams(), vm);
+  });
+  vm.setProp(reqObject, 'getPathParams', getPathParams);
+  getPathParams.dispose();
+
   let setMethod = vm.newFunction('setMethod', function (method) {
     req.setMethod(vm.dump(method));
   });

package/src/sandbox/quickjs/shims/lib/crypto-utils.js

@@ -10,7 +10,7 @@ const addCryptoUtilsShimToContext = async (vm) => {
   let randomBytesHandle = vm.newFunction('randomBytes', function (sizeHandle) {
     try {
       let size = vm.dump(sizeHandle);
-      
+
       if (typeof size !== 'number') {
         throw new TypeError('The "size" argument must be of type number');
       }
@@ -30,15 +30,14 @@ const addCryptoUtilsShimToContext = async (vm) => {
       }
 
       const buffer = crypto.randomBytes(size);
-      
+
       const byteArray = Array.from(buffer);
-      
+
       return marshallToVm(byteArray, vm);
-      
     } catch (error) {
       const vmError = vm.newError(error.message);
       vm.setProp(vmError, 'name', vm.newString(error.name));
-      
+
       throw vmError;
     }
   });
@@ -48,7 +47,7 @@ const addCryptoUtilsShimToContext = async (vm) => {
       // Receive the serialized array data directly
       const serializedArray = vm.dump(arrayHandle);
       const typedArray = deserializeTypedArray(serializedArray);
-      
+
       if (typedArray.length === 0) {
         return marshallToVm([], vm);
       }
@@ -62,11 +61,10 @@ const addCryptoUtilsShimToContext = async (vm) => {
       const byteArray = Array.from(typedArray);
 
       return marshallToVm(byteArray, vm);
-      
     } catch (error) {
       const vmError = vm.newError(error.message);
       vm.setProp(vmError, 'name', vm.newString(error.name));
-      
+
       throw vmError;
     }
   });
@@ -101,4 +99,4 @@ const addCryptoUtilsShimToContext = async (vm) => {
   `);
 };
 
-module.exports = addCryptoUtilsShimToContext;
+module.exports = addCryptoUtilsShimToContext;

package/src/sandbox/quickjs/shims/lib/crypto-utils.spec.js

@@ -27,7 +27,7 @@ describe('crypto-utils shims tests', () => {
     const handle = vm.unwrapResult(result);
     const type = vm.dump(handle);
     handle.dispose();
-  
+
     expect(type).toBe('function');
   });
 
@@ -36,7 +36,7 @@ describe('crypto-utils shims tests', () => {
     const handle = vm.unwrapResult(result);
     const type = vm.dump(handle);
     handle.dispose();
-    
+
     expect(type).toBe('function');
   });
 
@@ -45,7 +45,7 @@ describe('crypto-utils shims tests', () => {
     const handle = vm.unwrapResult(result);
     const length = vm.dump(handle);
     handle.dispose();
-    
+
     expect(length).toBe(8);
   });
 
@@ -54,7 +54,7 @@ describe('crypto-utils shims tests', () => {
     const handle = vm.unwrapResult(result);
     const hexLength = vm.dump(handle);
     handle.dispose();
-    
+
     expect(hexLength).toBe(8); // 4 bytes = 8 hex chars
   });
 
@@ -67,7 +67,7 @@ describe('crypto-utils shims tests', () => {
     const handle = vm.unwrapResult(result);
     const length = vm.dump(handle);
     handle.dispose();
-    
+
     expect(length).toBe(5);
   });
-});
+});

package/src/sandbox/quickjs/shims/lib/utils.js

@@ -45,4 +45,4 @@ function deserializeTypedArray(obj) {
 module.exports = {
   serializeTypedArray,
   deserializeTypedArray
-}
+};

package/src/utils/results.js

@@ -7,7 +7,7 @@ const getResultsSummary = (results) => {
     total: results.length,
     passed: 0,
     failed: 0,
-    skipped: 0,
+    skipped: 0
   };
 
   results.forEach((r) => {
@@ -34,7 +34,7 @@ const setupBruTestMethods = (bru, __brunoTestResults, assertionResults) => {
     const summary = getResultsSummary(results);
     return {
       summary,
-      results: results.map(r => ({
+      results: results.map((r) => ({
         status: r.status,
         description: r.description,
         expected: r.expected,
@@ -49,7 +49,7 @@ const setupBruTestMethods = (bru, __brunoTestResults, assertionResults) => {
     const summary = getResultsSummary(results);
     return {
       summary,
-      results: results.map(r => ({
+      results: results.map((r) => ({
         status: r.status,
         lhsExpr: r.lhsExpr,
         rhsExpr: r.rhsExpr,
@@ -77,4 +77,4 @@ module.exports = {
   getResultsSummary,
   createBruTestResultMethods,
   setupBruTestMethods
-};
+};

package/src/utils.js

@@ -90,7 +90,7 @@ const evaluateJsTemplateLiteral = (templateLiteral, context) => {
     return templateLiteral.slice(1, -1);
   }
 
-  if (templateLiteral.startsWith("'") && templateLiteral.endsWith("'")) {
+  if (templateLiteral.startsWith('\'') && templateLiteral.endsWith('\'')) {
     return templateLiteral.slice(1, -1);
   }
 
@@ -129,7 +129,7 @@ const createResponseParser = (response = {}) => {
 };
 
 /**
- * Objects that are created inside vm2 execution context result in an serialization error when sent to the renderer process
+ * Objects that are created inside developer mode execution context result in an serialization error when sent to the renderer process
  * Error sending from webFrameMain:  Error: Failed to serialize arguments
  *    at s.send (node:electron/js2c/browser_init:169:631)
  *    at g.send (node:electron/js2c/browser_init:165:2156)
@@ -201,7 +201,7 @@ const uuid = () => {
   const customNanoId = customAlphabet(urlAlphabet, 21);
 
   return customNanoId();
-}
+};
 
 const appendAwaitToTestFunc = (str) => {
   return str.replace(/(?<!\.\s*)(?<!await\s)(test\()/g, 'await $1');
@@ -211,18 +211,18 @@ const cleanCircularJson = (data) => {
   try {
     // Handle circular references by keeping track of seen objects
     const seen = new WeakSet();
-    
+
     const replacer = (key, value) => {
       // Skip non-objects and null
       if (typeof value !== 'object' || value === null) {
         return value;
       }
-      
+
       // Detect circular reference
       if (seen.has(value)) {
         return '[Circular Reference]';
       }
-      
+
       seen.add(value);
       return value;
     };