a3s-use-browser 0.1.0

Typed browser rendering and session contracts for A3S Use
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75

use super::*;

#[test]
fn only_approved_https_sources_are_accepted() {
    assert!(trusted_https_url("https://example.com/runtime", &["example.com"]).is_ok());
    assert!(trusted_https_url("http://example.com/runtime", &["example.com"]).is_err());
    assert!(trusted_https_url("https://evil.example/runtime", &["example.com"]).is_err());
}

#[test]
fn version_identifiers_cannot_escape_the_install_root() {
    assert_eq!(validate_version_segment("v1.2.3").unwrap(), "v1.2.3");
    assert!(validate_version_segment("../../escape").is_err());
    assert!(validate_version_segment("version/name").is_err());
}

#[test]
fn published_digest_must_be_a_well_formed_sha256() {
    let digest = format!("sha256:{}", "A1".repeat(32));
    assert_eq!(parse_published_sha256(&digest).unwrap(), "a1".repeat(32));
    assert!(parse_published_sha256("md5:fixture").is_err());
    assert!(parse_published_sha256("sha256:not-hex").is_err());
}

#[tokio::test]
async fn activation_replaces_a_complete_directory_without_partial_visibility() {
    let temp = tempfile::tempdir().unwrap();
    let target = temp.path().join("v1");
    let stage = create_stage(temp.path(), "fixture").await.unwrap();
    tokio::fs::create_dir(&target).await.unwrap();
    tokio::fs::write(target.join("value"), b"old")
        .await
        .unwrap();
    tokio::fs::write(stage.join("value"), b"new").await.unwrap();

    activate_directory(&stage, &target).await.unwrap();

    assert_eq!(tokio::fs::read(target.join("value")).await.unwrap(), b"new");
    assert!(!tokio::fs::try_exists(&stage).await.unwrap());
}

#[tokio::test]
async fn interrupted_activation_recovers_the_previous_complete_install() {
    let temp = tempfile::tempdir().unwrap();
    let backup = temp.path().join(".a3s-backup-v1-fixture");
    tokio::fs::create_dir(&backup).await.unwrap();
    tokio::fs::write(backup.join("runtime"), b"previous")
        .await
        .unwrap();
    write_receipt(
        &backup,
        &ManagedInstallReceipt {
            schema_version: 1,
            provider: "fixture".to_string(),
            version: "v1".to_string(),
            source_url: "https://example.com/runtime".to_string(),
            artifact_sha256: "a".repeat(64),
            artifact_bytes: 8,
            executable_sha256: "b".repeat(64),
            integrity_policy: "fixture".to_string(),
        },
    )
    .await
    .unwrap();

    cleanup_stale_stages(temp.path()).await.unwrap();

    assert_eq!(
        tokio::fs::read(temp.path().join("v1/runtime"))
            .await
            .unwrap(),
        b"previous"
    );
    assert!(!tokio::fs::try_exists(&backup).await.unwrap());
}