import test from "node:test"; import assert from "node:assert/strict"; import { parseProviderPackArguments, materializeCandidateProviderPack, providerPackProviders, providerPackManifestFields } from "./candidate-provider-pack.mjs"; import { createHash } from "node:crypto"; async function withCopilotTestPlatform(run) { const platformDescriptor = Object.getOwnPropertyDescriptor(process, "platform"); const archDescriptor = Object.getOwnPropertyDescriptor(process, "arch"); if (!platformDescriptor || !archDescriptor) throw new Error("Missing process platform descriptors"); try { Object.defineProperty(process, "platform", { ...platformDescriptor, value: "linux" }); Object.defineProperty(process, "arch", { ...archDescriptor, value: "x64" }); return await run(); } finally { try { Object.defineProperty(process, "platform", platformDescriptor); } finally { Object.defineProperty(process, "arch", archDescriptor); } } } // Matches the canonical manifest hashing used by the builder and admission. function digest(value) { const canonical = value => Array.isArray(value) ? `[${value.map(canonical).join(",")}]` : value && typeof value === "object" ? `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonical(value[key])}`).join(",")}}` : JSON.stringify(value); return createHash("sha256").update(canonical(value)).digest("hex"); } test("provider manifest digest survives disk JSON on supported and unsupported targets", () => { const cursor = { version: "pinned", profileDigest: "sha256:profile", closureDigest: "sha256:closure" }; for (const [platform, architecture] of [["darwin", "arm64"], ["darwin", "x64"], ["linux", "x64"], ["linux", "arm64"], ["win32", "x64"]]) { const selected = providerPackProviders(platform, architecture, []); const payload = { target: { platform, architecture }, ...providerPackManifestFields(selected.includes("cursor") ? { cursor } : {}, []) }; const diskPayload = JSON.parse(JSON.stringify(payload)); assert.deepEqual(diskPayload, payload); assert.equal(digest(diskPayload), digest(payload)); assert.equal(diskPayload.providers?.cursor?.version, selected.includes("cursor") ? "pinned" : undefined); } const candidate = providerPackManifestFields({ cursor }, ["cursor"]); assert.deepEqual(candidate.candidateProviders, { cursor }); assert.equal(digest(JSON.parse(JSON.stringify(candidate))), digest(candidate)); }); test("candidate options stay explicit and supported native assets are included by default", () => { assert.deepEqual(parseProviderPackArguments(["--", "/pack"]), { output: "/pack", candidates: [] }); assert.deepEqual(parseProviderPackArguments(["/pack", "--candidate-providers=pi,cursor"]), { output: "/pack", candidates: ["pi", "cursor"] }); }); test("normal packs include Cursor and Copilot on their three pinned targets without breaking other hosts", () => { for (const [platform, architecture] of [["darwin", "arm64"], ["darwin", "x64"], ["linux", "x64"]]) { assert.deepEqual(providerPackProviders(platform, architecture, []), ["pi", "cursor", "copilot"]); assert.deepEqual(providerPackProviders(platform, architecture, ["cursor"]), ["pi", "cursor", "copilot"]); } assert.deepEqual(providerPackProviders("linux", "arm64", []), []); assert.deepEqual(providerPackProviders("win32", "x64", []), []); assert.deepEqual(providerPackProviders("linux", "arm64", ["cursor"]), ["cursor"]); }); test("candidate builder cannot admit unknown providers, options or duplicate assets", async () => { for (const args of [["--candidate-providers=cursor,cursor"], ["--candidate-providers=other"], ["--executable=/tmp/x"], ["/one", "/two"]]) { assert.throws(() => parseProviderPackArguments(args)); } await assert.rejects(materializeCandidateProviderPack({ provider: "arbitrary", outputRoot: "/tmp/unused" }), /Unknown candidate/); }); test("normal Copilot inventory needs no candidate override and has no duplicate candidate", () => { const copilot = { qualification: "qualified", version: "1.0.88" }; for (const candidates of [[], ["copilot"]]) { const fields = providerPackManifestFields({ copilot }, candidates); assert.equal(fields.providers.copilot, copilot); assert.equal(fields.candidateProviders?.copilot, undefined); assert.equal(digest(JSON.parse(JSON.stringify(fields))), digest(fields)); } }); test("Copilot pack selection reaches only the pinned native archive builder", t => withCopilotTestPlatform(async () => { const requests = []; t.mock.method(globalThis, "fetch", async (url, options) => { requests.push({ url, redirect: options.redirect, credentials: options.credentials }); return new Response("corrupt archive"); }); await assert.rejects(materializeCandidateProviderPack({ provider: "copilot", outputRoot: "/unused-copilot-build" }), /integrity mismatch/); assert.equal(requests.length, 1); assert.match(requests[0].url, /^https:\/\/registry\.npmjs\.org\/@github\/copilot-(darwin-(arm64|x64)|linux-x64)\/-\/copilot-.*-1\.0\.88\.tgz$/); assert.deepEqual({ redirect: requests[0].redirect, credentials: requests[0].credentials }, { redirect: "error", credentials: "omit" }); })); test("Pi pack selection reaches its pinned builder and rejects unsafe output before downloading", async t => { let requests = 0; t.mock.method(globalThis, "fetch", async () => { requests += 1; throw new Error("Unexpected download for invalid Pi output"); }); await assert.rejects(materializeCandidateProviderPack({ provider: "pi", outputRoot: "relative-pi-output" }), /Pi distribution output must be absolute/); assert.equal(requests, 0); });