import assert from "node:assert/strict"; import { test } from "node:test"; // The web runtime is the WEB Host: it parses the injected seed, reports its // platform, and delegates action generation to the shared picker. These tests // guard the Host surface and the seed-precision contract. DOM candidate // enumeration is exercised against a minimal querySelectorAll stub. // A 64-bit seed that loses precision as a JS Number must survive as a BigInt. process.env.SANDERLING_SEED = "9007199254740993"; // cssEscape delegates to the browser's CSS.escape, absent in node. Install the // WHATWG CSSOM escape algorithm so selector-builder tests exercise the real // escaping production relies on, not a stub. if (!(globalThis as { CSS?: unknown }).CSS) { (globalThis as { CSS?: { escape(v: string): string } }).CSS = { escape(value: string): string { let out = ""; for (let i = 0; i < value.length; i++) { const c = value.charCodeAt(i); if (c === 0) { out += "�"; } else if ( (c >= 0x1 && c <= 0x1f) || c === 0x7f || (i === 0 && c >= 0x30 && c <= 0x39) || (i === 1 && c >= 0x30 && c <= 0x39 && value.charCodeAt(0) === 0x2d) ) { out += "\\" + c.toString(16) + " "; } else if (i === 0 && c === 0x2d && value.length === 1) { out += "\\" + value[i]; } else if ( c >= 0x80 || c === 0x2d || c === 0x5f || (c >= 0x30 && c <= 0x39) || (c >= 0x41 && c <= 0x5a) || (c >= 0x61 && c <= 0x7a) ) { out += value[i]; } else { out += "\\" + value[i]; } } return out; }, }; } const { __testing__ } = await import("../src/web-runtime.ts"); const { host } = __testing__; test("platform is web", () => { assert.equal(host.platform(), "web"); }); test("seedHi parses the injected 64-bit seed without Number precision loss", () => { assert.equal(host.seedHi(), 9007199254740993n); }); test("seedLo is 0 to match goja rand.NewPCG(seed, 0)", () => { assert.equal(host.seedLo(), 0n); }); test("reportUnsupported warns once via console.warn", () => { const original = console.warn; const messages: string[] = []; console.warn = (m: string) => messages.push(m); try { host.reportUnsupported("swipes"); } finally { console.warn = original; } assert.equal(messages.length, 1); assert.match(messages[0]!, /swipes/); }); // installRuntime locked the next-action and extractor globals at import. test("installRuntime defined the host-invoked globals", () => { const g = globalThis as Record; assert.equal(typeof g.__sanderlingNextAction__, "function"); assert.equal(typeof g.__sanderlingExtractors__, "function"); assert.equal(typeof g.__sanderling__, "object"); }); const { fakeElement, withFakeDocument } = await import("./web-dom-harness.ts"); // The host reports facts and never routes verbs: which of these a verb may act // on is decided by the shared rule in src/targets.ts, exercised across both // engines by host-parity.test.ts. test("queryTargets reports the tappable selector set as clickable", () => { const button = fakeElement({ tag: "button", x: 10, y: 20, width: 40, height: 8, clickable: true }); const plain = fakeElement({ tag: "div", x: 0, y: 0, width: 100, height: 100 }); withFakeDocument([button, plain], () => { const targets = host.queryTargets(); assert.equal(targets.length, 2); assert.equal(targets[0]!.clickable, true); assert.deepEqual({ x: targets[0]!.x, y: targets[0]!.y }, { x: 30, y: 24 }); assert.equal(targets[1]!.clickable, false); }); }); test("queryTargets reports only real text inputs as editable", () => { const input = fakeElement({ tag: "input", x: 0, y: 0, width: 100, height: 20, editable: true }); const checkbox = fakeElement({ tag: "input", x: 0, y: 40, width: 20, height: 20, editable: true }); checkbox.type = "checkbox"; withFakeDocument([input, checkbox], () => { const targets = host.queryTargets(); assert.equal(targets[0]!.editable, true); assert.deepEqual({ x: targets[0]!.x, y: targets[0]!.y }, { x: 50, y: 10 }); assert.equal(targets[1]!.editable, false); }); }); // A disabled control used to be dropped from every verb's candidates, because // the web host folded `disabled` into its visibility check. It is a fact of its // own now, so `taps` still skips it while `swipes` can still start on it, which // is what the native host has always done. test("queryTargets reports a disabled control rather than dropping it", () => { const disabled = fakeElement({ tag: "button", x: 0, y: 0, width: 40, height: 20, clickable: true, disabled: true, }); withFakeDocument([disabled], () => { const targets = host.queryTargets(); assert.equal(targets.length, 1); assert.equal(targets[0]!.clickable, true); assert.equal(targets[0]!.enabled, false); }); }); test("queryTargets caches within a tick until reset", () => { const button = fakeElement({ tag: "button", x: 0, y: 0, width: 10, height: 10, clickable: true }); withFakeDocument([button], () => { const first = host.queryTargets(); const second = host.queryTargets(); assert.equal(first, second); __testing__.resetTargetCache(); assert.notEqual(host.queryTargets(), first); }); }); // evaluateExtractors builds State, which references document and window. const emptyDocument = { querySelector: () => null, querySelectorAll: () => [], }; function withState(run: () => void) { const g = globalThis as Record; const originalDocument = g.document; const originalWindow = g.window; g.document = emptyDocument; g.window = {}; try { run(); } finally { g.document = originalDocument; g.window = originalWindow; } } test("named() sets the extractor's display name", () => { const handle = __testing__.runtime.extract(() => "home").named("route"); const entry = __testing__.extractors.find((e) => e.handle === handle); assert.equal(entry?.name, "route"); }); test("reading another extractor's current inside a getter throws", () => { const first = __testing__.runtime.extract(() => 1); let caught: Error | undefined; __testing__.runtime.extract(() => { try { return first.current; } catch (error) { caught = error as Error; return undefined; } }); withState(() => __testing__.evaluateExtractors()); assert.match( caught?.message ?? "", /inside another extractor is not allowed/, ); }); // An uncaught cross-extractor read must abort evaluateExtractors loudly, exactly // like goja's PushSnapshot. If the getter throw were swallowed, web would // silently yield undefined and the guard would be a no-op for real authors. test("an uncaught cross-extractor read aborts evaluateExtractors", () => { __testing__.extractors.length = 0; const first = __testing__.runtime.extract(() => 1); __testing__.runtime.extract(() => first.previous); let thrown: Error | undefined; withState(() => { try { __testing__.evaluateExtractors(); } catch (error) { thrown = error as Error; } }); assert.match( thrown?.message ?? "", /inside another extractor is not allowed/, ); }); // sanitize runs over every extractor's return value before it leaves the // runtime. A user extractor that returns a page object reachable from // document/window can be self-referential, carry functions, or nest deeply; // without cycle, function, and depth guards extraction overflows the stack or // emits non-serializable values. These exercise sanitize via the real path. function sanitizeViaExtract(value: unknown): unknown { __testing__.extractors.length = 0; __testing__.runtime.extract(() => value); let out: Record = {}; withState(() => { out = __testing__.evaluateExtractors(); }); return out[0]; } test("sanitize breaks a self-referential cycle instead of overflowing", () => { const cyclic: Record = { name: "root" }; cyclic.self = cyclic; const result = sanitizeViaExtract(cyclic) as Record; assert.equal(result.name, "root"); assert.equal(result.self, null); }); test("sanitize drops function-valued properties", () => { const result = sanitizeViaExtract({ keep: 1, fn: () => 7 }) as Record; assert.deepEqual(result, { keep: 1 }); }); test("sanitize drops a top-level function to undefined", () => { assert.equal(sanitizeViaExtract(() => 7), undefined); }); test("sanitize bounds recursion past its depth limit", () => { let deep: Record = { leaf: true }; for (let i = 0; i < 40; i++) deep = { next: deep }; // Walk to the depth cap; beyond it sanitize must yield null, not recurse on. let node: unknown = sanitizeViaExtract(deep); for (let i = 0; i < 32 && node && typeof node === "object"; i++) { node = (node as Record).next; } assert.equal(node, null); }); test("sanitize preserves arrays and nested plain values", () => { const result = sanitizeViaExtract({ items: [1, "two", { ok: true }] }); assert.deepEqual(result, { items: [1, "two", { ok: true }] }); }); // xpathStringLiteral builds XPath 1.0 string literals by hand (no escape // syntax in XPath 1.0). A value carrying a quote that isn't wrapped or // concat()-composed produces a malformed expression, so document.evaluate // throws or, worse, matches the wrong node by truncating at the quote. const { xpathStringLiteral } = __testing__; test("xpathStringLiteral table: quote handling stays well-formed", () => { const cases: Array<[string, string]> = [ ["plain", '"plain"'], ['has"double', `'has"double'`], ["has'single", `"has'single"`], [`both"and'`, `concat("both", '"', "and'")`], [`"`, `'"'`], ]; for (const [input, want] of cases) { assert.equal(xpathStringLiteral(input), want, input); } }); // selectorFromString routes a "kind:value" prefix; text becomes an XPath // equality, everything else a CSS attribute selector. A value containing a // colon must not be re-split, and a quote in a text value must reach the // well-formed XPath literal rather than corrupting the predicate. const { selectorFromString, selectorFromObject } = __testing__; test("selectorFromString routes text to a normalize-space XPath", () => { assert.deepEqual(selectorFromString("text:Hello"), { xpath: `//*[normalize-space(text())="Hello"]`, }); }); test("selectorFromString keeps colons in the value intact", () => { // Only the first colon splits kind from value; the rest is the value. assert.deepEqual(selectorFromString("text:a:b:c"), { xpath: `//*[normalize-space(text())="a:b:c"]`, }); }); test("selectorFromString text value with both quote kinds uses concat", () => { assert.deepEqual(selectorFromString(`text:say "hi" o'clock`), { xpath: `//*[normalize-space(text())=concat("say ", '"', "hi", '"', " o'clock")]`, }); }); test("selectorFromObject escapes attribute values to prevent injection", () => { // A quote in an id value, left unescaped, would close the attribute selector // early and match a different element. assert.deepEqual(selectorFromObject({ id: 'a"]' }), { css: `[id="a\\"\\]"]`, }); }); test("selectorFromObject maps known keys to their canonical attribute", () => { assert.deepEqual(selectorFromObject({ testID: "submit" }), { css: `[data-testid="submit"]`, }); }); // Compose Multiplatform emits its testTag into `id`, which the native table // already accepts via the resource-id alias. The web table must not be the one // place that rejects it. test("selectorFromObject resolves testTag through data-testid or id", () => { assert.deepEqual(selectorFromObject({ testTag: "LoginSubmit" }), { css: `:is([data-testid="LoginSubmit"], [id="LoginSubmit"])`, }); }); // Multi-key selectors concatenate their parts into one compound, so the // two-attribute testTag match has to stay a single compound piece. test("selectorFromObject composes testTag with a second key", () => { assert.deepEqual(selectorFromObject({ testTag: "Row", "aria-label": "first" }), { css: `:is([data-testid="Row"], [id="Row"])[aria-label="first"]`, }); }); test("selectorFromObject falls back to a literal attribute for unknown keys", () => { assert.deepEqual(selectorFromObject({ "data-foo": "bar" }), { css: `[data-foo="bar"]`, }); }); test("selectorFromObject text-only selector becomes an XPath", () => { assert.deepEqual(selectorFromObject({ text: "Go" }), { xpath: `//*[normalize-space(text())="Go"]`, }); });