47 lines
2.0 KiB
TypeScript
47 lines
2.0 KiB
TypeScript
import assert from "node:assert/strict";
|
|
import { test } from "node:test";
|
|
import { mkdtemp, rm } from "node:fs/promises";
|
|
import { tmpdir } from "node:os";
|
|
import path from "node:path";
|
|
import { exploreUrl, scanUrl } from "../src/engine.js";
|
|
|
|
const fixturePath = path.resolve("tests/fixtures/context-risk.html");
|
|
|
|
async function withTempOutput<T>(name: string, callback: (out: string) => Promise<T>): Promise<T> {
|
|
const dir = await mkdtemp(path.join(tmpdir(), "action-topology-engine-test-"));
|
|
try {
|
|
return await callback(path.join(dir, `${name}.json`));
|
|
} finally {
|
|
await rm(dir, { recursive: true, force: true });
|
|
}
|
|
}
|
|
|
|
function hasEdgeForAccessibleName(
|
|
graph: {
|
|
edges: Array<{ elementId: string }>;
|
|
elements: Array<{ elementId: string; accessibleName: string | null }>;
|
|
},
|
|
accessibleName: string,
|
|
): boolean {
|
|
return graph.edges.some((edge) => {
|
|
const element = graph.elements.find((item) => item.elementId === edge.elementId);
|
|
return element?.accessibleName === accessibleName;
|
|
});
|
|
}
|
|
|
|
test("scan captures a state-local inventory without clicking high-risk actions", async () => {
|
|
const graph = await withTempOutput("scan", (out) => scanUrl({ url: fixturePath, out }));
|
|
assert.equal(graph.states.length, 1);
|
|
assert.equal(graph.edges.length, 0);
|
|
assert.equal(graph.elements.some((element) => element.accessibleName === "Open settings"), true);
|
|
assert.equal(graph.elements.some((element) => element.accessibleName === "Delete account"), false);
|
|
});
|
|
|
|
test("explore records low-risk edges and keeps high-risk submit actions out of default execution", async () => {
|
|
const graph = await withTempOutput("explore", (out) => exploreUrl({ url: fixturePath, maxActions: 8, out }));
|
|
assert.equal(graph.edges.some((edge) => edge.riskLevel === "low" && edge.toStateId), true);
|
|
assert.equal(hasEdgeForAccessibleName(graph, "Delete account"), false);
|
|
assert.equal(hasEdgeForAccessibleName(graph, "Submit search"), false);
|
|
assert.equal(graph.states.length >= 2, true);
|
|
});
|