mirror of
https://github.com/PR0M3TH3AN/TORCH.git
synced 2026-10-30 09:21:52 +00:00
53 lines
3.6 KiB
JavaScript
53 lines
3.6 KiB
JavaScript
import assert from 'node:assert/strict';
|
|
import { DatabaseSync } from 'node:sqlite';
|
|
import test from 'node:test';
|
|
import { observeDeliveryEvidence } from '../../src/observability/snapshot.mjs';
|
|
import '../../site/operation-outcomes.js';
|
|
|
|
test('SCN-console-operation-outcomes: project-scoped read-only receipt projection omits raw secrets and distinguishes uncertain outcomes', () => {
|
|
const database = new DatabaseSync(':memory:');
|
|
try {
|
|
assert.deepEqual(observeDeliveryEvidence(database, 'project').deliveryOperations, []);
|
|
database.exec(`CREATE TABLE deliveries (id TEXT, project_id TEXT);
|
|
CREATE TABLE delivery_operations (id TEXT, delivery_id TEXT, commit_sha TEXT, actor TEXT,
|
|
provider TEXT, operation TEXT, state TEXT, created_at TEXT, updated_at TEXT);
|
|
CREATE TABLE delivery_attempts (id TEXT, operation_id TEXT, ordinal INTEGER, state TEXT,
|
|
started_at TEXT, finished_at TEXT, receipt_json TEXT);`);
|
|
database.prepare('INSERT INTO deliveries VALUES (?,?)').run('delivery', 'project');
|
|
database.prepare('INSERT INTO deliveries VALUES (?,?)').run('foreign', 'other');
|
|
const operation = database.prepare('INSERT INTO delivery_operations VALUES (?,?,?,?,?,?,?,?,?)');
|
|
operation.run('op', 'delivery', 'abc', 'owner', 'custom', 'deploy', 'unknown', '2026-09-30', '2026-09-30');
|
|
operation.run('foreign-op', 'foreign', 'secret-commit', 'owner', 'private', 'deploy', 'succeeded', '2026-09-30', '2026-09-30');
|
|
database.prepare('INSERT INTO delivery_attempts VALUES (?,?,?,?,?,?,?)').run('attempt', 'op', 1, 'unknown',
|
|
'2026-09-30', '2026-09-30', JSON.stringify({ status: 'failed', reference: 'https://secret:[email protected]',
|
|
failure: { classification: 'transient', effects: 'unknown', code: '<script>secret-error</script>' } }));
|
|
const before = database.prepare('SELECT * FROM delivery_attempts').all();
|
|
const projection = observeDeliveryEvidence(database, 'project');
|
|
assert.equal(projection.deliveryOperations.length, 1);
|
|
assert.equal(projection.deliveryAttempts[0].receiptSummary.effects, 'unknown');
|
|
assert.doesNotMatch(JSON.stringify(projection), /password|secret|foreign-op/);
|
|
const html = globalThis.TorchOperationOutcomes.render(projection);
|
|
assert.match(html, /Outcome unknown — review required/);
|
|
assert.match(html, /transient failure.*effects unknown/s);
|
|
assert.match(html, /not independent live verification/);
|
|
assert.doesNotMatch(html, /<button|password|secret/);
|
|
assert.deepEqual(database.prepare('SELECT * FROM delivery_attempts').all(), before);
|
|
database.prepare('UPDATE delivery_attempts SET receipt_json = ?').run('{bad');
|
|
assert.equal(observeDeliveryEvidence(database, 'project').deliveryAttempts[0].receiptSummary.status, 'unavailable');
|
|
} finally { database.close(); }
|
|
});
|
|
|
|
test('SCN-console-operation-outcomes: import and adapter success are never live release proof, and text remains escaped', () => {
|
|
const input = { canonicalFetches: [{ remote: '<img src=x>', state: 'succeeded', attempts: [{ ordinal: 1, state: 'succeeded' }] }],
|
|
deliveryOperations: [{ id: 'running', state: 'running', operation: 'deploy' }, { id: 'ok', state: 'succeeded', operation: 'deploy' }],
|
|
deliveryAttempts: [] };
|
|
const before = JSON.stringify(input);
|
|
const html = globalThis.TorchOperationOutcomes.render(input);
|
|
assert.match(html, /Object import succeeded — not deployment/);
|
|
assert.match(html, /Running — completion unconfirmed/);
|
|
assert.match(html, /Adapter succeeded — verify lifecycle and live evidence/);
|
|
assert.match(html, /<img src=x>/);
|
|
assert.doesNotMatch(html, /<img|<button/);
|
|
assert.equal(JSON.stringify(input), before);
|
|
});
|