[Init] Initial commit - NetMesh terminal manager

electron/plugins/jsonBoundary.test.cjs

@@ -0,0 +1,80 @@
+"use strict";
+
+const assert = require("node:assert/strict");
+const test = require("node:test");
+
+const {
+  PLUGIN_JSON_MAX_DEPTH,
+  PLUGIN_JSON_MAX_NODES,
+  assertPluginJsonValue,
+} = require("./jsonBoundary.cjs");
+
+test("main-process JSON boundary matches the public contract budgets", async () => {
+  const contract = await import("@netcatty/plugin-contract");
+  const hostLimits = require("./constants.cjs");
+  assert.equal(PLUGIN_JSON_MAX_DEPTH, contract.PLUGIN_JSON_MAX_DEPTH);
+  assert.equal(PLUGIN_JSON_MAX_NODES, contract.PLUGIN_JSON_MAX_NODES);
+  assert.equal(hostLimits.PLUGIN_RPC_MAX_JSON_BYTES, contract.PLUGIN_RPC_MAX_JSON_BYTES);
+  assert.equal(
+    hostLimits.PLUGIN_STREAM_MAX_FRAME_JSON_BYTES,
+    contract.PLUGIN_STREAM_MAX_FRAME_JSON_BYTES,
+  );
+});
+
+test("main-process JSON boundary rejects deep, sparse, cyclic, and accessor values", () => {
+  let deep = null;
+  for (let index = 0; index <= PLUGIN_JSON_MAX_DEPTH; index += 1) deep = [deep];
+  assert.throws(() => assertPluginJsonValue(deep), /levels/);
+  const sparse = [];
+  sparse.length = 1;
+  assert.throws(() => assertPluginJsonValue(sparse), /dense/);
+  const cyclic = {};
+  cyclic.self = cyclic;
+  assert.throws(() => assertPluginJsonValue(cyclic), /cycles/);
+  const accessor = {};
+  Object.defineProperty(accessor, "value", { get: () => 1, enumerable: true });
+  assert.throws(() => assertPluginJsonValue(accessor), /data properties/);
+});
+
+test("main-process JSON boundary enforces an incremental UTF-8 byte budget", () => {
+  const value = { text: "你好\n\"", empty: [] };
+  const exactBytes = Buffer.byteLength(JSON.stringify(value), "utf8");
+  assert.deepEqual(assertPluginJsonValue(value, { maxBytes: exactBytes }), value);
+  assert.throws(
+    () => assertPluginJsonValue(value, { maxBytes: exactBytes - 1 }),
+    new RegExp(`exceeds ${exactBytes - 1} bytes`),
+  );
+  assert.throws(() => assertPluginJsonValue({}, { maxBytes: 0 }), /positive safe integer/);
+});
+
+test("maximum broker raw payloads fit inside JSON-RPC envelopes", () => {
+  const { PLUGIN_RPC_MAX_RAW_BYTES, PLUGIN_RPC_MAX_JSON_BYTES } = require("./constants.cjs");
+  const { assertRpcMessage } = require("./contractValidator.cjs");
+  const data = Buffer.alloc(PLUGIN_RPC_MAX_RAW_BYTES).toString("base64");
+  const response = {
+    jsonrpc: "2.0",
+    id: 1,
+    result: {
+      url: `https://example.com/${"x".repeat(8_000)}`,
+      status: 200,
+      headers: { "x-budget": "y".repeat(64 * 1024) },
+      body: { encoding: "base64", data },
+    },
+  };
+  assert.ok(Buffer.byteLength(JSON.stringify(response)) < PLUGIN_RPC_MAX_JSON_BYTES);
+  assert.doesNotThrow(() => assertRpcMessage(response));
+  const request = {
+    jsonrpc: "2.0",
+    id: 2,
+    method: "network.request",
+    params: {
+      url: `https://example.com/${"x".repeat(8_000)}`,
+      headers: Object.fromEntries(Array.from({ length: 8 }, (_, index) => (
+        [`x-budget-${index}`, "\\".repeat(8 * 1024)]
+      ))),
+      body: { encoding: "utf8", data: "\0".repeat(PLUGIN_RPC_MAX_RAW_BYTES) },
+    },
+  };
+  assert.ok(Buffer.byteLength(JSON.stringify(request)) < PLUGIN_RPC_MAX_JSON_BYTES);
+  assert.doesNotThrow(() => assertRpcMessage(request));
+});