jason.woltje
362893d043
Source-candidate: poe d9a564e6d20f5f0fd75ce45b12cbbf8bb4c9d568\nSource-candidate: magica38ba5762b06716db1dee00d0afec162656488f5c\nValidated321whole-file phase plus whole bus1349/model-proxy100/webui490; final gate tooling checks pending, not landed.
36 lines
2.7 KiB
JavaScript
36 lines
2.7 KiB
JavaScript
// R5: the sandbox may load parsing helpers, never proxy PIN or host state.
|
|
import test from 'node:test';
|
|
import assert from 'node:assert/strict';
|
|
import { readFileSync } from 'node:fs';
|
|
import * as common from '../src/common.mjs';
|
|
|
|
test('validation has only the exact parsing import and no state or I/O capability', () => {
|
|
const source = readFileSync(new URL('../src/validation.mjs', import.meta.url), 'utf8');
|
|
assert.deepEqual([...source.matchAll(/^import .*;$/gm)].map(m => m[0]), ["import { validateHeaderValue } from 'node:http';"]);
|
|
assert.equal((source.match(/\bimport\b/g) ?? []).length, 1);
|
|
assert.doesNotMatch(source, /\b(?:require|process|globalThis|global|fetch|eval|Function|WebSocket|XMLHttpRequest|Buffer|URL|fs|path|PIN|config|state|env)\b/);
|
|
assert.doesNotMatch(source, /\b(?:readFile|writeFile|open|request|createServer|connect|listen|setTimeout|setInterval)\w*\b/);
|
|
// No namespace/default import, aliases, reexports or lazy imports can expose node:http I/O.
|
|
assert.equal((source.match(/\bvalidateHeaderValue\b/g) ?? []).length, 2);
|
|
assert.doesNotMatch(source, /\bexport\s+(?:\*|\{)|\bimport\s*\(/);
|
|
});
|
|
|
|
test('common reexports the exact validation bindings and errors keep their identity', async () => {
|
|
const validation = await import('../src/validation.mjs');
|
|
for (const name of ['ProxyError', 'refuse', 'validManagementKey', 'proxyTiming']) assert.equal(common[name], validation[name], name);
|
|
assert.throws(() => validation.refuse('fixture-refusal'), e => e instanceof common.ProxyError && e.code === 'fixture-refusal' && e.message === 'fixture-refusal');
|
|
assert.throws(() => common.refuse('fixture-refusal'), e => e instanceof validation.ProxyError);
|
|
});
|
|
|
|
test('validation retains management header parsing and timing bounds', async () => {
|
|
const { validManagementKey, proxyTiming, ProxyError } = await import('../src/validation.mjs');
|
|
for (const value of ['a', 'fx331-key', '!~']) assert.equal(validManagementKey(value), true);
|
|
for (const value of ['', 'with space', 'line\n', 'line\r', '\t', '\u007f', '\u0080', null, 7]) assert.equal(validManagementKey(value), false);
|
|
assert.deepEqual(proxyTiming({}), {});
|
|
assert.deepEqual(proxyTiming({ rotateGraceMinutes: 1, firstOutputSeconds: 1 }), { rotateGraceMinutes: 1, firstOutputSeconds: 1 });
|
|
assert.deepEqual(proxyTiming({ rotateGraceMinutes: 1440, firstOutputSeconds: 3600 }), { rotateGraceMinutes: 1440, firstOutputSeconds: 3600 });
|
|
for (const [field, max, code] of [['rotateGraceMinutes', 1440, 'proxy-rotate-grace-invalid'], ['firstOutputSeconds', 3600, 'proxy-first-output-invalid']]) {
|
|
for (const value of [0, -1, max + 1, 1.5, '120', null]) assert.throws(() => proxyTiming({ [field]: value }), e => e instanceof ProxyError && e.code === code);
|
|
}
|
|
});
|