core2026/app/gateway-api/test/frontendArtifactManager.test.ts

import fs from 'node:fs/promises';
import os from 'node:os';
import path from 'node:path';

import { afterEach, describe, expect, it } from 'vitest';

import {
    FrontendArtifactManager,
    GAME_FRONTEND_RUNTIME_CONFIG_ID,
    renderProfileFrontendIndex,
    resolveFrontendServeMode,
    SHARED_GAME_FRONTEND_KEY,
} from '../src/orchestrator/frontendArtifactManager.js';

const roots: string[] = [];
const sha = 'a'.repeat(40);

afterEach(async () => {
    await Promise.all(roots.splice(0).map((root) => fs.rm(root, { recursive: true, force: true })));
});

const fixture = async (): Promise<{ source: string; artifacts: string }> => {
    const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sammo-frontend-artifact-'));
    roots.push(root);
    const source = path.join(root, 'dist');
    const artifacts = path.join(root, 'artifacts');
    await fs.mkdir(path.join(source, 'assets'), { recursive: true });
    await fs.writeFile(path.join(source, 'index.html'), '<div>one</div>');
    await fs.writeFile(path.join(source, 'assets', 'app-deadbeef.js'), 'console.log(1)');
    return { source, artifacts };
};

describe('resolveFrontendServeMode', () => {
    it('keeps preview as the compatibility default and accepts explicit static mode', () => {
        expect(resolveFrontendServeMode(undefined)).toBe('preview');
        expect(resolveFrontendServeMode('preview')).toBe('preview');
        expect(resolveFrontendServeMode('STATIC')).toBe('static');
        expect(() => resolveFrontendServeMode('server')).toThrow(/preview or static/u);
    });
});

describe('FrontendArtifactManager', () => {
    it('stages immutable releases and atomically switches current and previous pointers', async () => {
        const { source, artifacts } = await fixture();
        const manager = new FrontendArtifactManager(artifacts);
        const first = await manager.stageAndActivate({ frontendKey: 'gateway', sourceRoot: source, commitSha: sha });
        expect(await manager.readCurrentReleaseId('gateway')).toBe(first.releaseId);
        expect(await fs.readFile(path.join(artifacts, 'gateway', 'current', 'index.html'), 'utf8')).toContain('one');

        await fs.writeFile(path.join(source, 'index.html'), '<div>two</div>');
        const second = await manager.stageAndActivate({
            frontendKey: 'gateway',
            sourceRoot: source,
            commitSha: 'b'.repeat(40),
        });
        expect(second.previousReleaseId).toBe(first.releaseId);
        expect(await fs.readFile(path.join(artifacts, 'gateway', 'current', 'index.html'), 'utf8')).toContain('two');
        expect(await fs.readFile(path.join(artifacts, 'gateway', 'previous', 'index.html'), 'utf8')).toContain('one');
        expect(await fs.readFile(path.join(first.releasePath, 'index.html'), 'utf8')).toContain('one');
    });

    it('removes only the live pointer when a frontend is stopped', async () => {
        const { source, artifacts } = await fixture();
        const manager = new FrontendArtifactManager(artifacts);
        const staged = await manager.stageAndActivate({ frontendKey: 'che', sourceRoot: source, commitSha: sha });
        expect(await manager.deactivate('che')).toBe(staged.releaseId);
        expect(await manager.readCurrentReleaseId('che')).toBeNull();
        expect(await fs.readFile(path.join(staged.releasePath, 'index.html'), 'utf8')).toContain('one');
    });

    it('rejects symlinks instead of copying files outside the build output', async () => {
        const { source, artifacts } = await fixture();
        await fs.symlink('/etc/passwd', path.join(source, 'assets', 'outside'));
        const manager = new FrontendArtifactManager(artifacts);
        await expect(manager.stage({ frontendKey: 'gateway', sourceRoot: source, commitSha: sha })).rejects.toThrow(
            /symbolic link/u
        );
    });

    it('publishes one shared asset release and a small profile runtime-config wrapper', async () => {
        const { source, artifacts } = await fixture();
        await fs.writeFile(
            path.join(source, 'index.html'),
            '<!doctype html><head><script type="module" src="./assets/app-deadbeef.js"></script></head>'
        );
        await fs.writeFile(path.join(source, 'deployment-version.json'), `${JSON.stringify({ commitSha: sha })}\n`);
        const manager = new FrontendArtifactManager(artifacts);
        const sharedArtifact = await manager.stage({
            frontendKey: SHARED_GAME_FRONTEND_KEY,
            sourceRoot: source,
            commitSha: sha,
        });
        const wrapper = await manager.stageProfileWrapper({
            frontendKey: 'pya',
            sharedArtifact,
            sharedAssetPublicBase: '/gateway/profile-assets',
            runtimeConfig: {
                version: 1,
                profile: 'pya',
                profileName: 'pya:default',
                appBasePath: '/pya/',
                gameApiUrl: '/pya/api/trpc',
                gameSseUrl: '/pya/api/events',
                gatewayApiUrl: '/gateway/api/trpc',
                gatewayWebUrl: '/gateway/',
            },
        });
        await manager.activate('pya', wrapper.releaseId);

        const indexHtml = await fs.readFile(path.join(artifacts, 'pya', 'current', 'index.html'), 'utf8');
        expect(indexHtml).toContain(`id="${GAME_FRONTEND_RUNTIME_CONFIG_ID}" type="application/json"`);
        expect(indexHtml).toContain('"profile":"pya"');
        expect(indexHtml).toContain(`"assetReleaseId":"${sharedArtifact.releaseId}"`);
        expect(indexHtml).toContain(`src="/gateway/profile-assets/${sharedArtifact.releaseId}/assets/app-deadbeef.js"`);
        expect(await fs.readdir(path.join(artifacts, 'pya', 'current'))).toEqual([
            '.sammo-artifact.json',
            'deployment-version.json',
            'index.html',
        ]);
        expect(await fs.readFile(path.join(sharedArtifact.releasePath, 'assets', 'app-deadbeef.js'), 'utf8')).toBe(
            'console.log(1)'
        );
    });

    it('escapes script-closing runtime values before embedding JSON', () => {
        const releaseId = `${sha}-${'b'.repeat(16)}`;
        const rendered = renderProfileFrontendIndex({
            sharedIndexHtml: '<script type="module" src="./assets/app-deadbeef.js"></script>',
            sharedReleaseId: releaseId,
            sharedAssetPublicBase: '/gateway/profile-assets',
            runtimeConfig: {
                version: 1,
                profile: 'che',
                profileName: 'che:default',
                appBasePath: '/che/',
                gameApiUrl: '/che/api/trpc?</script>',
                gameSseUrl: '/che/api/events',
                gatewayApiUrl: '/gateway/api/trpc',
                gatewayWebUrl: '/gateway/',
                buildCommitSha: sha,
                assetReleaseId: releaseId,
            },
        });

        expect(rendered).not.toContain('trpc?</script>');
        expect(rendered).toContain('\\u003c/script\\u003e');
    });
});