Feat v0.7.1 surface runner framework (#55)
All checks were successful
CI/CD / detect-changes (push) Successful in 3s
CI/CD / test-frontend (push) Successful in 6s
CI/CD / test-go-pg (push) Successful in 2m51s
CI/CD / test-sqlite (push) Successful in 3m2s
CI/CD / build-and-deploy (push) Successful in 1m26s

Co-authored-by: Jeffrey Smith <jasafpro@gmail.com>
Co-committed-by: Jeffrey Smith <jasafpro@gmail.com>
This commit was merged in pull request #55.
This commit is contained in:
2026-04-01 23:01:38 +00:00
committed by xcaliber
parent e916ed41ea
commit 829caa3b20
59 changed files with 2509 additions and 6525 deletions

View File

@@ -11,14 +11,16 @@
'use strict';
var T = window.ICD;
if (!T) return;
if (!window.sw || !window.sw.testing) return;
T.runPackaging = async function () {
sw.testing.suite('icd/packaging', async function (s) {
var extId = 'icd-pkg-' + Date.now();
var extInstalled = false;
var cleanup = [];
// ── Install with permissions → pending_review ──
await T.test('crud', 'packaging', 'POST /admin/extensions (with permissions)', async function () {
s.test('packaging: POST /admin/extensions (with permissions)', async function (t) {
var d = await T.apiPost('/admin/extensions', {
ext_id: extId,
name: 'ICD Packaging Test',
@@ -37,16 +39,15 @@
T.assert(d.data.id === extId, 'id should match ext_id');
T.assert(d.data.tier === 'starlark', 'tier should be starlark');
extInstalled = true;
T.registerCleanup(function () {
cleanup.push(function () {
if (extInstalled) return T.safeDelete('/admin/extensions/' + extId);
});
});
if (!extInstalled) return;
// ── Verify pending_review status ──
await T.test('crud', 'packaging', 'GET /admin/extensions/:id (status = pending_review)', async function () {
s.test('packaging: GET /admin/extensions/:id (status = pending_review)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiGet('/admin/extensions');
T.assertHasKey(d, 'data', 'admin list');
var pkg = d.data.find(function (e) { return e.id === extId; });
@@ -56,7 +57,8 @@
// ── List declared permissions ──
await T.test('crud', 'packaging', 'GET /admin/extensions/:id/permissions (declared)', async function () {
s.test('packaging: GET /admin/extensions/:id/permissions (declared)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiGet('/admin/extensions/' + extId + '/permissions');
T.assertHasKey(d, 'data', 'permissions response');
T.assert(Array.isArray(d.data), 'permissions should be array');
@@ -72,7 +74,8 @@
// ── Review package ──
await T.test('crud', 'packaging', 'GET /admin/extensions/:id/review', async function () {
s.test('packaging: GET /admin/extensions/:id/review', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiGet('/admin/extensions/' + extId + '/review');
T.assertHasKey(d, 'package', 'review response package');
T.assertHasKey(d, 'permissions', 'review response permissions');
@@ -83,7 +86,8 @@
// ── Grant single permission ──
await T.test('crud', 'packaging', 'POST .../permissions/secrets.read/grant', async function () {
s.test('packaging: POST .../permissions/secrets.read/grant', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiPost('/admin/extensions/' + extId + '/permissions/secrets.read/grant', {});
T.assert(d.status === 'granted', 'should return granted status');
T.assert(d.permission === 'secrets.read', 'should echo permission');
@@ -91,7 +95,8 @@
// ── Still pending_review (not all granted) ──
await T.test('crud', 'packaging', 'status still pending_review (1 of 2 granted)', async function () {
s.test('packaging: status still pending_review (1 of 2 granted)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiGet('/admin/extensions');
var pkg = d.data.find(function (e) { return e.id === extId; });
T.assert(pkg.status === 'pending_review', 'should still be pending_review, got: ' + pkg.status);
@@ -99,14 +104,16 @@
// ── Grant all remaining ──
await T.test('crud', 'packaging', 'POST .../permissions/grant-all', async function () {
s.test('packaging: POST .../permissions/grant-all', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiPost('/admin/extensions/' + extId + '/permissions/grant-all', {});
T.assert(d.status === 'granted_all', 'should return granted_all status');
});
// ── Verify active status ──
await T.test('crud', 'packaging', 'status → active (all permissions granted)', async function () {
s.test('packaging: status → active (all permissions granted)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiGet('/admin/extensions');
var pkg = d.data.find(function (e) { return e.id === extId; });
T.assert(pkg.status === 'active', 'should be active after grant-all, got: ' + pkg.status);
@@ -114,7 +121,8 @@
// ── Verify all granted ──
await T.test('crud', 'packaging', 'GET .../permissions (all granted)', async function () {
s.test('packaging: GET .../permissions (all granted)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiGet('/admin/extensions/' + extId + '/permissions');
var allGranted = d.data.every(function (p) { return p.granted === true; });
T.assert(allGranted, 'all permissions should be granted');
@@ -124,7 +132,8 @@
// ── Secrets CRUD ──
await T.test('crud', 'packaging', 'PUT /admin/extensions/:id/secrets (set)', async function () {
s.test('packaging: PUT /admin/extensions/:id/secrets (set)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiPut('/admin/extensions/' + extId + '/secrets', {
secrets: { api_key: 'sk-test-123', webhook_token: 'tok-abc' }
});
@@ -132,7 +141,8 @@
T.assert(d.key_count === 2, 'should report 2 keys');
});
await T.test('crud', 'packaging', 'GET /admin/extensions/:id/secrets (keys only)', async function () {
s.test('packaging: GET /admin/extensions/:id/secrets (keys only)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiGet('/admin/extensions/' + extId + '/secrets');
T.assertHasKey(d, 'data', 'secrets response');
T.assert(d.data.package_id === extId, 'package_id should match');
@@ -142,24 +152,28 @@
T.assert(!d.data.api_key, 'raw values should not be exposed');
});
await T.test('crud', 'packaging', 'DELETE /admin/extensions/:id/secrets', async function () {
s.test('packaging: DELETE /admin/extensions/:id/secrets', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiDelete('/admin/extensions/' + extId + '/secrets');
T.assert(d.status === 'deleted', 'should return deleted status');
});
await T.test('crud', 'packaging', 'GET .../secrets (empty after delete)', async function () {
s.test('packaging: GET .../secrets (empty after delete)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiGet('/admin/extensions/' + extId + '/secrets');
T.assert(d.data.keys.length === 0, 'keys should be empty after delete');
});
// ── Revoke → suspended ──
await T.test('crud', 'packaging', 'POST .../permissions/secrets.read/revoke', async function () {
s.test('packaging: POST .../permissions/secrets.read/revoke', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiPost('/admin/extensions/' + extId + '/permissions/secrets.read/revoke', {});
T.assert(d.status === 'revoked', 'should return revoked status');
});
await T.test('crud', 'packaging', 'status → suspended (permission revoked)', async function () {
s.test('packaging: status → suspended (permission revoked)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var d = await T.apiGet('/admin/extensions');
var pkg = d.data.find(function (e) { return e.id === extId; });
T.assert(pkg.status === 'suspended', 'should be suspended after revoke, got: ' + pkg.status);
@@ -167,16 +181,19 @@
// ── Invalid permission ──
await T.test('crud', 'packaging', 'POST .../permissions/bogus/grant (400)', async function () {
var d = await T.authFetch(API.accessToken, 'POST', '/admin/extensions/' + extId + '/permissions/bogus/grant', {});
s.test('packaging: POST .../permissions/bogus/grant (400)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
var adminToken = await T.getAuthToken();
var d = await T.authFetch(adminToken, 'POST', '/admin/extensions/' + extId + '/permissions/bogus/grant', {});
T.assertStatus(d, 400, 'invalid permission should 400');
});
// ── Cleanup (DELETE handled by registerCleanup) ──
// ── Cleanup ──
await T.test('crud', 'packaging', 'DELETE /admin/extensions/:id (cleanup)', async function () {
var d = await T.apiDelete('/admin/extensions/' + extId);
s.test('packaging: DELETE /admin/extensions/:id (cleanup)', async function (t) {
if (!extInstalled) { t.skip('extension not installed'); return; }
await T.apiDelete('/admin/extensions/' + extId);
extInstalled = false;
});
};
});
})();