Files
wehub-resource-sync 9b395f5cc3
Build Chrome Extension / build (push) Waiting to run
Trigger Website Rebuild (Docs Updated) / dispatch (push) Waiting to run
E2E Headed Chrome / e2e-headed (macos-15) (push) Has been cancelled
E2E Headed Chrome / e2e-headed (ubuntu-latest) (push) Has been cancelled
E2E Headed Chrome / e2e-headed (windows-latest) (push) Has been cancelled
CI / build (macos-latest) (push) Has been cancelled
CI / build (ubuntu-latest) (push) Has been cancelled
CI / build (windows-latest) (push) Has been cancelled
CI / unit-test (push) Has been cancelled
CI / bun-test (push) Has been cancelled
CI / adapter-test (push) Has been cancelled
CI / smoke-test (macos-latest) (push) Has been cancelled
CI / smoke-test (ubuntu-latest) (push) Has been cancelled
Security Audit / audit (push) Has been cancelled
chore: import upstream snapshot with attribution
2026-07-13 12:39:48 +08:00

128 lines
6.0 KiB
JavaScript

import { describe, it, expect, vi } from 'vitest';
import { ArgumentError, AuthRequiredError, CommandExecutionError } from '@jackwener/opencli/errors';
import { getRegistry } from '@jackwener/opencli/registry';
import './message-send.js';
function makePage(result = { kind: 'ok', rows: [{ id: 'm1' }] }) {
return { goto: vi.fn(), evaluate: vi.fn().mockResolvedValue(result) };
}
describe('slock message-send', () => {
const command = getRegistry().get('slock/message-send');
it('channel-name target embeds the lowercased name into the snippet', async () => {
const page = makePage();
await command.func(page, { target: '#general', content: 'hi' });
expect(page.evaluate.mock.calls[0][0]).toContain('"general"');
});
it('dm:@name target embeds member-lookup + DM channel creation', async () => {
const page = makePage();
await command.func(page, { target: 'dm:@alice', content: 'hi' });
const script = page.evaluate.mock.calls[0][0];
expect(script).toContain('/members');
expect(script).toContain('/channels/dm');
});
it('thread short-id target embeds /messages/context + parent /threads', async () => {
const page = makePage();
await command.func(page, { target: '#general:8af3cbbb', content: 'reply' });
const script = page.evaluate.mock.calls[0][0];
expect(script).toContain('/messages/context');
expect(script).toContain('/threads');
});
it('[red-line] thread unresolvable → ArgumentError + zero network writes', async () => {
const page = makePage({ kind: 'unresolvable', detail: 'short id had 0 matches' });
await expect(command.func(page, { target: '#general:zzzzzzzz', content: 'hi' }))
.rejects.toBeInstanceOf(ArgumentError);
// The single evaluate is allowed (read-side resolution); the snippet returns
// 'unresolvable' BEFORE any /messages POST, which the mock proves.
expect(page.evaluate).toHaveBeenCalledTimes(1);
});
it('[red-line] --dry-run returns a plan row and never calls evaluate', async () => {
const page = makePage();
const rows = await command.func(page, { target: '#general', content: 'hi', 'dry-run': true });
expect(page.evaluate).not.toHaveBeenCalled();
expect(rows[0]).toMatchObject({ result: 'dry-run', content: 'hi', target: '#general' });
});
it('[red-line] content is sent byte-equal — the snippet body contains the EXACT input string', async () => {
const tricky = `pizza 🍕 + \n + </script> + "quotes"`;
const page = makePage();
await command.func(page, { target: '#general', content: tricky });
const script = page.evaluate.mock.calls[0][0];
// The snippet must JSON-encode the content; the encoded form must round-trip back exactly.
const m = script.match(/content:\s*(".*?[^\\]")/);
expect(m).not.toBeNull();
expect(JSON.parse(m[1])).toBe(tricky);
});
it('error mapping: parametric coverage of auth / http / no-server', async () => {
await expect(command.func(makePage({ kind: 'auth', detail: '401' }), { target: '#g', content: 'x' }))
.rejects.toBeInstanceOf(AuthRequiredError);
await expect(command.func(makePage({ kind: 'http', status: 500, where: '/messages' }), { target: '#g', content: 'x' }))
.rejects.toBeInstanceOf(CommandExecutionError);
});
it('[postcondition] rejects 2xx send responses that do not return a message id', async () => {
await expect(command.func(makePage({ kind: 'ok', rows: [{ channelId: 'c1' }] }), { target: '#g', content: 'x' }))
.rejects.toThrow(/message id/);
});
it('--server override passes the override into the snippet', async () => {
const page = makePage();
await command.func(page, { target: '#general', content: 'hi', server: 'design' });
expect(page.evaluate.mock.calls[0][0]).toContain('"design"');
});
it('--as-task adds asTask:true to the POST body', async () => {
const page = makePage();
await command.func(page, { target: '#general', content: 'ship it', 'as-task': true });
expect(page.evaluate.mock.calls[0][0]).toContain('asTask: true');
});
it('--attach embeds the attachmentId UUIDs in the body', async () => {
const page = makePage();
const a = '550e8400-e29b-41d4-a716-446655440000';
const b = '550e8400-e29b-41d4-a716-446655440001';
await command.func(page, { target: '#general', content: 'files', attach: `${a}, ${b}` });
const script = page.evaluate.mock.calls[0][0];
expect(script).toContain('attachmentIds');
expect(script).toContain(a);
expect(script).toContain(b);
});
it('--attach rejects a non-UUID id before navigation', async () => {
const page = makePage();
await expect(command.func(page, { target: '#general', content: 'x', attach: 'not-a-uuid' }))
.rejects.toBeInstanceOf(ArgumentError);
expect(page.goto).not.toHaveBeenCalled();
});
it('--as-task is reflected in the --dry-run plan row', async () => {
const page = makePage();
const rows = await command.func(page, { target: '#general', content: 'hi', 'as-task': true, 'dry-run': true });
expect(page.evaluate).not.toHaveBeenCalled();
expect(rows[0]).toMatchObject({ result: 'dry-run (asTask)' });
});
it('[red-line] a channel name with a quote cannot break out of the snippet string', async () => {
const page = makePage({ kind: 'unresolvable', detail: 'x' });
await command.func(page, { target: "#ev'il", content: 'x' }).catch(() => {});
const script = page.evaluate.mock.calls[0][0];
// Vulnerable form would embed the name raw as `matches ev'il`, letting the
// quote close the string literal. The name must only appear JSON-encoded.
expect(script).not.toContain("no channel matches ev'il");
expect(script).toContain('"ev\'il"');
});
it('[red-line] a dm:@name with a quote is JSON-encoded, not interpolated raw', async () => {
const page = makePage({ kind: 'unresolvable', detail: 'x' });
await command.func(page, { target: "dm:@ev'il", content: 'x' }).catch(() => {});
const script = page.evaluate.mock.calls[0][0];
expect(script).not.toContain("no member @ev'il");
});
});