43 lines
1.9 KiB
JavaScript
43 lines
1.9 KiB
JavaScript
import assert from 'node:assert/strict';
|
|
import test from 'node:test';
|
|
import {
|
|
getPageDeliveryContract,
|
|
markPageDeliveryContractReady,
|
|
normalizeDeliveryRelativePath,
|
|
preparePageDeliveryContract,
|
|
} from './mindspace-delivery-contract.mjs';
|
|
|
|
test('normalizes only safe public HTML delivery paths', () => {
|
|
assert.equal(normalizeDeliveryRelativePath('public/survey.html'), 'public/survey.html');
|
|
assert.equal(normalizeDeliveryRelativePath('/public/nested/report.html'), 'public/nested/report.html');
|
|
assert.equal(normalizeDeliveryRelativePath('public/../secret.html'), null);
|
|
assert.equal(normalizeDeliveryRelativePath('public/report.js'), null);
|
|
});
|
|
|
|
test('contract lifecycle writes preparing then ready against the same route key', async () => {
|
|
const calls = [];
|
|
const pool = {
|
|
async query(sql, params) {
|
|
calls.push({ sql, params });
|
|
if (sql.includes('SELECT id, data_mode')) return [[{ id: 'contract-1', data_mode: 'pg_required', status: 'preparing' }]];
|
|
if (sql.includes('UPDATE h5_page_delivery_contracts')) return [{ affectedRows: 1 }];
|
|
return [{ affectedRows: 1 }];
|
|
},
|
|
};
|
|
const contract = await preparePageDeliveryContract({
|
|
pool,
|
|
userId: 'user-1',
|
|
requestId: 'request-1',
|
|
relativePath: 'public/form.html',
|
|
pgRequired: true,
|
|
});
|
|
assert.equal(contract.status, 'preparing');
|
|
assert.equal(contract.dataMode, 'pg_required');
|
|
const prepareCall = calls.find((call) => call.sql.includes('INSERT INTO h5_page_delivery_contracts'));
|
|
assert.equal(prepareCall.params[4], 'pg_required');
|
|
const current = await getPageDeliveryContract({ pool, userId: 'user-1', relativePath: 'public/form.html' });
|
|
assert.equal(current.status, 'preparing');
|
|
assert.equal(await markPageDeliveryContractReady({ pool, userId: 'user-1', relativePath: 'public/form.html' }), true);
|
|
assert.ok(calls.some((call) => call.sql.includes("status = 'ready'")));
|
|
});
|