jackwener--opencli/clis/slock/server-use.test.js

import { describe, it, expect, vi } from 'vitest';
import { ArgumentError } from '@jackwener/opencli/errors';
import { getRegistry } from '@jackwener/opencli/registry';
import './server-use.js';

describe('slock server-use', () => {
  const command = getRegistry().get('slock/server-use');

  it('writes localStorage when the slug resolves', async () => {
    const page = {
      goto: vi.fn(),
      evaluate: vi.fn().mockResolvedValue({
        kind: 'ok',
        rows: [{ slug: 'eng', id: 's1', name: 'Engineering' }],
        meta: { written: true, newSlug: 'eng' },
      }),
    };
    const rows = await command.func(page, { input: '#engineering' });
    expect(rows[0]).toMatchObject({ slug: 'eng', written: true });
  });

  it('atomicity: when slug is unknown, returns unresolvable and meta.written is false', async () => {
    const page = {
      goto: vi.fn(),
      evaluate: vi.fn().mockResolvedValue({ kind: 'unresolvable', detail: 'unknown slug "ops"' }),
    };
    await expect(command.func(page, { input: 'ops' })).rejects.toBeInstanceOf(ArgumentError);
  });

  it('rejects empty input before navigation', async () => {
    const page = { goto: vi.fn(), evaluate: vi.fn() };
    await expect(command.func(page, { input: '' })).rejects.toBeInstanceOf(ArgumentError);
    expect(page.goto).not.toHaveBeenCalled();
  });

  it('[red-line] an input with a quote cannot break out of the snippet string', async () => {
    const page = {
      goto: vi.fn(),
      evaluate: vi.fn().mockResolvedValue({ kind: 'unresolvable', detail: 'x' }),
    };
    await command.func(page, { input: "ev'il" }).catch(() => {});
    const script = page.evaluate.mock.calls[0][0];
    // Vulnerable form embedded the input raw as `matches "ev'il"`, letting the
    // quote close the string literal. The input must only appear JSON-encoded.
    expect(script).not.toContain('no server matches "ev\'il"');
    expect(script).toContain('"ev\'il"');
  });
});