chrome-agent 0.16.0

Web tasks that compile. Browser automation that reads the page back after every action and reports what actually happened, in JSON. Single binary, CDP direct to Chrome.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

const { describe, it } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('node:fs');
const os = require('node:os');
const path = require('node:path');

// The postinstall script is an ES module that installs on import; the env flag keeps it
// inert so its verification helpers can be exercised here.
process.env.CHROME_AGENT_POSTINSTALL_NOOP = '1';
const postinstallPath = path.resolve(__dirname, '..', '..', 'npm', 'scripts', 'postinstall.js');

describe('npm postinstall: the downloaded binary is checked against a published hash', () => {
  it('accepts the hash the release published', async () => {
    const { sha256File, verifyChecksum } = await import(`file://${postinstallPath}`);
    const file = path.join(os.tmpdir(), `chrome-agent-postinstall-${process.pid}.bin`);
    fs.writeFileSync(file, 'pretend this is a native binary');
    const actual = sha256File(file);
    fs.rmSync(file, { force: true });

    // The one-column `shasum -a 256 | awk '{print $1}'` form, trailing newline included.
    assert.doesNotThrow(() => verifyChecksum(actual, `${actual}\n`, 'chrome-agent-linux-x64'));
    // And the two-column `shasum` form, in case the release step ever stops trimming.
    assert.doesNotThrow(() => verifyChecksum(actual, `${actual}  chrome-agent-linux-x64\n`, 'x'));
  });

  it('refuses bytes that do not match', async () => {
    const { verifyChecksum } = await import(`file://${postinstallPath}`);
    const a = 'a'.repeat(64);
    const b = 'b'.repeat(64);
    assert.throws(() => verifyChecksum(a, b, 'chrome-agent-linux-x64'), /Checksum mismatch/);
  });

  it('refuses a checksum file that is not a checksum', async () => {
    const { verifyChecksum } = await import(`file://${postinstallPath}`);
    // A 404 page, an empty file or a truncated hash must fail closed, or the check is decorative.
    for (const bad of ['', '\n', 'Not Found', 'abc123', 'z'.repeat(64)]) {
      assert.throws(() => verifyChecksum('a'.repeat(64), bad, 'x'), /Malformed checksum/);
    }
  });
});