bulltrackers-module 1.0.1003 → 1.0.1004

package/functions/api-v3/testing/routes.integration.test.js

@@ -946,57 +946,65 @@ describe('Cross-Cutting', () => {
             'Content-Type': 'application/json',
         });
 
-        it('returns 422 and does not write to GCS when code fails verification (process.env)', async () => {
-            const res = await request(app)
-                .post('/computations/upload')
-                .set(auth())
-                .send({
-                    code: `module.exports = { config: { name: 'Evil', skills: [], requires: {} }, process(ctx) { return process.env; } };`,
-                    name: 'Evil',
-                });
-            expect(res.status).toBe(422);
-            expect(res.body.error).toBe('Verification failed');
-            expect(res.body.stages).toBeDefined();
-            expect(storage._saveCalls.length).toBe(0);
-        });
-
-        it('returns 422 and does not write to GCS when code fails verification (require)', async () => {
-            const res = await request(app)
-                .post('/computations/upload')
-                .set(auth())
-                .send({
-                    code: `module.exports = { config: { name: 'Evil', skills: [], requires: {} }, process(ctx) { require('fs'); return ctx; } };`,
-                    name: 'Evil',
-                });
-            expect(res.status).toBe(422);
-            expect(res.body.error).toBe('Verification failed');
-            expect(storage._saveCalls.length).toBe(0);
-        });
-
-        it('returns 422 and does not write to GCS when code fails verification (eval)', async () => {
-            const res = await request(app)
-                .post('/computations/upload')
-                .set(auth())
-                .send({
-                    code: `module.exports = { config: { name: 'Evil', skills: [], requires: {} }, process(ctx) { return eval('1+1'); } };`,
-                    name: 'Evil',
-                });
-            expect(res.status).toBe(422);
-            expect(res.body.error).toBe('Verification failed');
-            expect(storage._saveCalls.length).toBe(0);
-        });
-
-        it('returns 200 and writes to GCS when code passes verification', async () => {
-            // Use process: (ctx) => ... so extracted process source re-parses when wrapped in parens (method shorthand process(ctx){ } is invalid as a standalone expression).
-            const validCode = `module.exports = {
-                config: { name: 'SafeComp', typeOverride: 'global' },
-                process: (ctx) => ({ ok: true, date: ctx.date })
-            };`;
-            const res = await request(app)
-                .post('/computations/upload')
-                .set(auth())
-                .send({ code: validCode, name: 'SafeComp' });
-            expect(res.status).toBe(200);
+        it('returns 422 and does not write to GCS when code fails verification (process.env)', async () => {
+            const res = await request(app)
+                .post('/computations/upload')
+                .set(auth())
+                .send({
+                    code: `module.exports = { config: { name: 'Evil', skills: [], requires: {} }, process(ctx) { return process.env; } };`,
+                    name: 'Evil',
+                });
+            expect(res.status).toBe(422);
+            expect(res.body.error).toBe('Verification required');
+            expect(storage._saveCalls.length).toBe(0);
+        });
+
+        it('returns 422 and does not write to GCS when code fails verification (require)', async () => {
+            const res = await request(app)
+                .post('/computations/upload')
+                .set(auth())
+                .send({
+                    code: `module.exports = { config: { name: 'Evil', skills: [], requires: {} }, process(ctx) { require('fs'); return ctx; } };`,
+                    name: 'Evil',
+                });
+            expect(res.status).toBe(422);
+            expect(res.body.error).toBe('Verification required');
+            expect(storage._saveCalls.length).toBe(0);
+        });
+
+        it('returns 422 and does not write to GCS when code fails verification (eval)', async () => {
+            const res = await request(app)
+                .post('/computations/upload')
+                .set(auth())
+                .send({
+                    code: `module.exports = { config: { name: 'Evil', skills: [], requires: {} }, process(ctx) { return eval('1+1'); } };`,
+                    name: 'Evil',
+                });
+            expect(res.status).toBe(422);
+            expect(res.body.error).toBe('Verification required');
+            expect(storage._saveCalls.length).toBe(0);
+        });
+
+        it('returns 200 and writes to GCS when code passes verification', async () => {
+            // Use process: (ctx) => ... so extracted process source re-parses when wrapped in parens (method shorthand process(ctx){ } is invalid as a standalone expression).
+            const validCode = `module.exports = {
+                config: { name: 'SafeComp', typeOverride: 'global' },
+                process: (ctx) => ({ ok: true, date: ctx.date })
+            };`;
+            const crypto = require('crypto');
+            const codeHash = crypto.createHash('sha256').update(validCode).digest('hex');
+            db.seed('users/user-123/verification_status/safecomp', {
+                lastHash: codeHash,
+                lastVerificationId: 'verify-1',
+                lastVerifiedAt: new Date().toISOString(),
+                status: 'passed',
+                name: 'SafeComp',
+            });
+            const res = await request(app)
+                .post('/computations/upload')
+                .set(auth())
+                .send({ code: validCode, name: 'SafeComp' });
+            expect(res.status).toBe(200);
             expect(res.body.success).toBe(true);
             expect(res.body.hash).toBeDefined();
             expect(storage._saveCalls.length).toBe(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bulltrackers-module",
-  "version": "1.0.1003",
+  "version": "1.0.1004",
   "description": "Helper Functions for Bulltrackers.",
   "main": "index.js",
   "files": [