First
"); + try testing.expectEqual(WebviewState.Loaded, w.getState()); + + _ = try w.loadHTML("Second
"); + try testing.expectEqual(WebviewState.Loaded, w.getState()); + + try testing.expectEqual(@as(usize, 2), ffi.countCalls("gossamer_load_html")); +} + +test "e2e/lifecycle: invalid transition throws" { + var ffi = MockFFI.init(testing.allocator); + defer ffi.deinit(); + var w = try WebviewShell.init(&ffi, "BadTransition"); + + _ = try w.loadHTML(""); + try w.run(); // → Destroyed + + // Destroyed → Loaded must error + try testing.expectError(LifecycleError.InvalidTransition, w.loadHTML("after destroy")); +} + +test "e2e/lifecycle: create failure throws" { + var ffi = MockFFI.init(testing.allocator); + defer ffi.deinit(); + ffi.setFailNext("gossamer_create"); + + try testing.expectError(LifecycleError.CreateFailed, WebviewShell.init(&ffi, "FailCreate")); +} + +//============================================================================== +// Tests: IPC round-trip +//============================================================================== + +test "e2e/ipc: open channel → bind → simulate round-trip → close" { + var ffi = MockFFI.init(testing.allocator); + defer ffi.deinit(); + var w = try WebviewShell.init(&ffi, "IPC Window"); + _ = try w.loadHTML(""); + + const channel = try ffi.gossamer_channel_open(1000); + try testing.expect(channel != 0); + + const bind_r = try ffi.gossamer_channel_bind(channel, "open-file", 0, 0); + try testing.expectEqual(@as(c_int, 0), bind_r); + + const eval_r = try w.eval("window.__gossamer.send('open-file', {})"); + try testing.expectEqual(@as(c_int, 0), eval_r); + + try ffi.gossamer_channel_close(channel); + try testing.expectEqual(@as(usize, 1), ffi.countCalls("gossamer_channel_close")); + + try w.destroy(); +} + +test "e2e/ipc: multiple commands can be bound" { + var ffi = MockFFI.init(testing.allocator); + defer ffi.deinit(); + var w = try WebviewShell.init(&ffi, "Multi IPC"); + _ = try w.loadHTML(""); + + const channel = try ffi.gossamer_channel_open(1000); + const commands = [_][]const u8{ "open-file", "save-file", "close-dialog", "list-dir" }; + + for (commands) |cmd| { + const r = try ffi.gossamer_channel_bind(channel, cmd, 0, 0); + try testing.expectEqual(@as(c_int, 0), r); + } + + try testing.expectEqual(@as(usize, commands.len), ffi.countCalls("gossamer_channel_bind")); + + try ffi.gossamer_channel_close(channel); + try w.destroy(); +} + +//============================================================================== +// Tests: capability lifecycle +//============================================================================== + +test "e2e/capability: grant → check → use → revoke" { + var ffi = MockFFI.init(testing.allocator); + defer ffi.deinit(); + + const token = try ffi.gossamer_cap_grant(0); // Filesystem + try testing.expect(token != 0); + + try testing.expectEqual(@as(c_int, 0), try ffi.gossamer_cap_check(token)); + + var w = try WebviewShell.init(&ffi, "Cap Window"); + _ = try w.loadHTML(""); + _ = try w.eval("// gated filesystem read"); + + try ffi.gossamer_cap_revoke(token); + + try testing.expectEqual(@as(c_int, 10), try ffi.gossamer_cap_check(token)); + + try w.destroy(); +} + +test "e2e/capability: revoke blocks subsequent operations" { + var ffi = MockFFI.init(testing.allocator); + defer ffi.deinit(); + const shell_token = try ffi.gossamer_cap_grant(2); + const fs_token = try ffi.gossamer_cap_grant(0); + + try testing.expectEqual(@as(c_int, 0), try ffi.gossamer_cap_check(shell_token)); + try testing.expectEqual(@as(c_int, 0), try ffi.gossamer_cap_check(fs_token)); + + try ffi.gossamer_cap_revoke(shell_token); + + try testing.expectEqual(@as(c_int, 10), try ffi.gossamer_cap_check(shell_token)); + try testing.expectEqual(@as(c_int, 0), try ffi.gossamer_cap_check(fs_token)); +} + +test "e2e/capability: grant failure (0) must be handled" { + var ffi = MockFFI.init(testing.allocator); + defer ffi.deinit(); + ffi.setFailNext("gossamer_cap_grant"); + + const token = try ffi.gossamer_cap_grant(0); + try testing.expectEqual(@as(u64, 0), token); + + try testing.expectEqual(@as(c_int, 10), try ffi.gossamer_cap_check(0)); +} + +//============================================================================== +// Tests: window control operations +//============================================================================== + +test "e2e/window: set title after load succeeds" { + var ffi = MockFFI.init(testing.allocator); + defer ffi.deinit(); + var w = try WebviewShell.init(&ffi, "Original Title"); + _ = try w.loadHTML(""); + + const r = try w.setTitle("New Title"); + try testing.expectEqual(@as(c_int, 0), r); + try testing.expectEqual(@as(usize, 1), ffi.countCalls("gossamer_set_title")); + + try w.destroy(); +} + +test "e2e/window: eval JS after load succeeds" { + var ffi = MockFFI.init(testing.allocator); + defer ffi.deinit(); + var w = try WebviewShell.init(&ffi, "JS Window"); + _ = try w.loadHTML(""); + + const r = try w.eval("document.getElementById('app').textContent = 'Gossamer';"); + try testing.expectEqual(@as(c_int, 0), r); + + try w.run(); +} + +//============================================================================== +// Tests: multi-window independence +//============================================================================== + +test "e2e/multi-window: two windows have independent state machines" { + var ffi = MockFFI.init(testing.allocator); + defer ffi.deinit(); + var w1 = try WebviewShell.init(&ffi, "Window 1"); + var w2 = try WebviewShell.init(&ffi, "Window 2"); + + _ = try w1.loadHTML("W1
"); + try testing.expectEqual(WebviewState.Loaded, w1.getState()); + try testing.expectEqual(WebviewState.Created, w2.getState()); + + _ = try w2.navigate("https://gossamer.example"); + try testing.expectEqual(WebviewState.Loaded, w2.getState()); + + try w1.destroy(); + try testing.expectEqual(WebviewState.Destroyed, w1.getState()); + try testing.expectEqual(WebviewState.Loaded, w2.getState()); + + try w2.run(); + try testing.expectEqual(WebviewState.Destroyed, w2.getState()); + + try testing.expectEqual(@as(usize, 2), ffi.countCalls("gossamer_create")); +} diff --git a/tests/README.adoc b/tests/README.adoc index 9a20c9e..0dba6bd 100644 --- a/tests/README.adoc +++ b/tests/README.adoc @@ -1,4 +1,62 @@ // SPDX-License-Identifier: PMPL-1.0-or-later = Tests -Full test suite for gossamer, organised by category. -Subdirectories: `unit/` (capability, dialog, guard-mode, IPC, result-code), `e2e/` (webview lifecycle), `property/` (contract-based property tests), `bench/` (startup and throughput benchmarks), and `aspect/` (cross-cutting security aspect tests). + +Gossamer's test suites, organised by language per the project rule +(Idris2 = ABI tests, Zig = FFI / unit / e2e / bench, Ephapax = apps). + +== Idris2 ABI tests — `tests/idris2/` + +Native Idris2 tests against `gossamer-abi`. Six suites, ported 1:1 from +the previous TypeScript / Deno-FFI suite: + +* `ResultCodeTest.idr` — Result enum, round-trip, errorDescription, GuardMode, Platform +* `GuardModeTest.idr` — requireOpen / requireUnguarded, window constraints, async IPC slots +* `CapabilityTest.idr` — grant / check / revoke / resourceKind / activeCount +* `IPCTest.idr` — channel open / bind / dispatch / close + message routing +* `ContractsTest.idr` — property tests (LCG PRNG, 50–200 iterations per invariant) +* `SecurityTest.idr` — IPC + shell + filesystem + webview-title + capability hardening + +Harness: + +* `Test/Spec.idr` — minimal assertEq / assertNotEq / assertTrue / runTestSuite +* `Main.idr` — aggregating runner; append new suites here + +Run: + +[source,bash] +---- +just test-abi # installs gossamer-abi, builds tests, runs runner +---- + +== Zig FFI tests — `src/interface/ffi/test/` + +Native Zig tests for FFI surface + e2e + bench: + +* `integration_test.zig` — headless FFI integration tests (existing) +* `display_test.zig` — display-server FFI tests (existing) +* `dialog_test.zig` — Dialog mock + filter parser (ported) +* `webview_lifecycle_test.zig` — webview state machine + mocked FFI (ported) +* `gossamer_bench.zig` — core ops microbenchmarks (ported) +* `startup_bench.zig` — startup-path microbenchmarks (ported) + +Run: + +[source,bash] +---- +just test-integration # existing FFI integration tests +just test-zig-unit # ported unit / e2e tests (no display required) +just test-zig-bench # benchmarks (with -OReleaseFast) +just test-display # display-required tests (X11 / Wayland / Xvfb) +---- + +== End-to-end smoke — `tests/e2e.sh` + +Higher-level harness that builds libgossamer, runs Zig tests, checks symbol +exports, and verifies safety aspects. Invoke via `just e2e` or `bash tests/e2e.sh`. + +== Run everything + +[source,bash] +---- +just test # rolls up all of the above +---- diff --git a/tests/aspect/security_test.ts b/tests/aspect/security_test.ts deleted file mode 100644 index 3bf12a0..0000000 --- a/tests/aspect/security_test.ts +++ /dev/null @@ -1,365 +0,0 @@ -// SPDX-License-Identifier: PMPL-1.0-or-later -// Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)First
"); - assertEquals(w.getState(), "Loaded"); - - w.loadHTML("Second
"); - assertEquals(w.getState(), "Loaded"); - - assertEquals(ffi.countCalls("gossamer_load_html"), 2); -}); - -Deno.test("e2e/lifecycle: invalid transition throws", () => { - const ffi = new MockFFI(); - const w = new WebviewShell(ffi, "BadTransition"); - - w.loadHTML(""); - w.run(); // → Destroyed - - let threw = false; - try { - w.loadHTML("after destroy"); // invalid: Destroyed → Loaded - } catch { - threw = true; - } - assertEquals(threw, true, "Destroyed → Loaded must throw"); -}); - -Deno.test("e2e/lifecycle: create failure throws", () => { - const ffi = new MockFFI(); - ffi.setFailNext("gossamer_create"); - - let threw = false; - try { - new WebviewShell(ffi, "FailCreate"); - } catch { - threw = true; - } - assertEquals(threw, true, "null handle from create must throw"); -}); - -// --------------------------------------------------------------------------- -// Tests: IPC round-trip -// --------------------------------------------------------------------------- - -Deno.test("e2e/ipc: open channel → bind → simulate round-trip → close", () => { - const ffi = new MockFFI(); - const w = new WebviewShell(ffi, "IPC Window"); - w.loadHTML(""); - - const channel = ffi.gossamer_channel_open(1000n); - assertNotEquals(channel, 0n, "channel handle must be non-zero"); - - const bindResult = ffi.gossamer_channel_bind(channel, "open-file", 0n, 0n); - assertEquals(bindResult, 0, "bind must succeed"); - - // Simulate round-trip: eval JS to trigger handler - const evalResult = w.eval("window.__gossamer.send('open-file', {})"); - assertEquals(evalResult, 0); - - ffi.gossamer_channel_close(channel); - assertEquals(ffi.countCalls("gossamer_channel_close"), 1); - - w.destroy(); -}); - -Deno.test("e2e/ipc: multiple commands can be bound", () => { - const ffi = new MockFFI(); - const w = new WebviewShell(ffi, "Multi IPC"); - w.loadHTML(""); - - const channel = ffi.gossamer_channel_open(1000n); - const commands = ["open-file", "save-file", "close-dialog", "list-dir"]; - - for (const cmd of commands) { - const r = ffi.gossamer_channel_bind(channel, cmd, 0n, 0n); - assertEquals(r, 0, `bind ${cmd} must succeed`); - } - - assertEquals(ffi.countCalls("gossamer_channel_bind"), commands.length); - - ffi.gossamer_channel_close(channel); - w.destroy(); -}); - -// --------------------------------------------------------------------------- -// Tests: capability lifecycle -// --------------------------------------------------------------------------- - -Deno.test("e2e/capability: grant → check → use → revoke", () => { - const ffi = new MockFFI(); - - // Grant filesystem capability - const token = ffi.gossamer_cap_grant(0 /* Filesystem */); - assertNotEquals(token, 0n, "granted token must be non-zero"); - - // Check before use - assertEquals(ffi.gossamer_cap_check(token), 0 /* Ok */); - - // Simulate gated operation (eval with capability) - const w = new WebviewShell(ffi, "Cap Window"); - w.loadHTML(""); - w.eval("// gated filesystem read"); - - // Revoke - ffi.gossamer_cap_revoke(token); - - // Check after revoke - assertEquals(ffi.gossamer_cap_check(token), 10 /* CapabilityDenied */); - - w.destroy(); -}); - -Deno.test("e2e/capability: revoke blocks subsequent operations", () => { - const ffi = new MockFFI(); - const shellToken = ffi.gossamer_cap_grant(2 /* Shell */); - const fsToken = ffi.gossamer_cap_grant(0 /* Filesystem */); - - // Both active - assertEquals(ffi.gossamer_cap_check(shellToken), 0); - assertEquals(ffi.gossamer_cap_check(fsToken), 0); - - // Revoke shell - ffi.gossamer_cap_revoke(shellToken); - - // Shell denied, filesystem still active - assertEquals(ffi.gossamer_cap_check(shellToken), 10, "shell must be denied"); - assertEquals(ffi.gossamer_cap_check(fsToken), 0, "filesystem still ok"); -}); - -Deno.test("e2e/capability: grant failure (0n) must be handled", () => { - const ffi = new MockFFI(); - ffi.setFailNext("gossamer_cap_grant"); - - const token = ffi.gossamer_cap_grant(0); - assertEquals(token, 0n, "failed grant returns 0n"); - - // Checking a null token must return denied - assertEquals(ffi.gossamer_cap_check(0n), 10, "null token must be denied"); -}); - -// --------------------------------------------------------------------------- -// Tests: window control operations -// --------------------------------------------------------------------------- - -Deno.test("e2e/window: set title after load succeeds", () => { - const ffi = new MockFFI(); - const w = new WebviewShell(ffi, "Original Title"); - w.loadHTML(""); - - const r = w.setTitle("New Title"); - assertEquals(r, 0); - assertEquals(ffi.countCalls("gossamer_set_title"), 1); - - w.destroy(); -}); - -Deno.test("e2e/window: eval JS after load succeeds", () => { - const ffi = new MockFFI(); - const w = new WebviewShell(ffi, "JS Window"); - w.loadHTML(""); - - const r = w.eval("document.getElementById('app').textContent = 'Gossamer';"); - assertEquals(r, 0); - - w.run(); -}); - -// --------------------------------------------------------------------------- -// Tests: multi-window independence -// --------------------------------------------------------------------------- - -Deno.test("e2e/multi-window: two windows have independent state machines", () => { - const ffi = new MockFFI(); - const w1 = new WebviewShell(ffi, "Window 1"); - const w2 = new WebviewShell(ffi, "Window 2"); - - w1.loadHTML("W1
"); - assertEquals(w1.getState(), "Loaded"); - assertEquals(w2.getState(), "Created", "w2 unaffected by w1 load"); - - w2.navigate("https://gossamer.example"); - assertEquals(w2.getState(), "Loaded"); - - w1.destroy(); - assertEquals(w1.getState(), "Destroyed"); - assertEquals(w2.getState(), "Loaded", "w2 unaffected by w1 destroy"); - - w2.run(); - assertEquals(w2.getState(), "Destroyed"); - - assertEquals(ffi.countCalls("gossamer_create"), 2); -}); diff --git a/tests/idris2/CapabilityTest.idr b/tests/idris2/CapabilityTest.idr new file mode 100644 index 0000000..c260ab8 --- /dev/null +++ b/tests/idris2/CapabilityTest.idr @@ -0,0 +1,276 @@ +-- SPDX-License-Identifier: PMPL-1.0-or-later +-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)- "
+ show (VObj _) = "