Critical Security Fixes: - Fix command injection vulnerability in Windows shims (beadboard.cmd, bb.cmd) - Added path validation to block traversal (.. and root-relative paths) - Added quotes around env var to prevent command injection Reliability Fixes: - Fix agent cache null safety bug - Fixed callBdAgentShow() to check for cache misses (null check, expiration) - Fixed getCachedAgent to properly return entry.data or null - Fix null body crashes in mail ack route - Added null check before casting body to object - Returns 400 error instead of 500 for invalid requests BD Compliance Fixes: - Fix read-issues to use BD audit record path - Ensures all writes go through bd audit record - Maintains watcher/SSE parity and Dolt commit tracking Code Quality Fixes: - Fix path canonicalization violations - Use canonicalizeWindowsPath() and windowsPathKey() from pathing module - Prevents Windows edge cases and ensures machine-reproducible paths - Fix typo: mobile-fronted → mobile-frontend - Pin GitHub Actions tags - softprops/action-gh-release@v1 → specific commit hash - Register pr14 test in package.json (already registered) Testing: - Refactor broad exception handlers in Python scripts - Replace except Exception: with specific exceptions - Allows KeyboardInterrupt and SystemExit to propagate correctly - All tests passing
151 lines
5.2 KiB
TypeScript
151 lines
5.2 KiB
TypeScript
import test from 'node:test';
|
|
import assert from 'node:assert/strict';
|
|
import fs from 'node:fs/promises';
|
|
import os from 'node:os';
|
|
import path from 'node:path';
|
|
|
|
import { readIssuesFromDisk, resolveIssuesJsonlPath, resolveIssuesJsonlPathCandidates, writeIssuesToDisk } from '../../src/lib/read-issues';
|
|
import { canonicalizeWindowsPath, sameWindowsPath, toDisplayPath, windowsPathKey } from '../../src/lib/pathing';
|
|
|
|
test('resolveIssuesJsonlPath appends .beads/issues.jsonl using windows-safe pathing', () => {
|
|
const resolved = resolveIssuesJsonlPath('C:/Repo/Project');
|
|
assert.equal(sameWindowsPath(resolved, 'C:/Repo/Project/.beads/issues.jsonl'), true);
|
|
});
|
|
|
|
test('resolveIssuesJsonlPathCandidates includes .jsonl and .jsonl.new fallback paths', () => {
|
|
const [primary, fallback] = resolveIssuesJsonlPathCandidates('C:/Repo/Project');
|
|
assert.equal(sameWindowsPath(primary, 'C:/Repo/Project/.beads/issues.jsonl'), true);
|
|
assert.equal(sameWindowsPath(fallback, 'C:/Repo/Project/.beads/issues.jsonl.new'), true);
|
|
});
|
|
|
|
test('readIssuesFromDisk parses JSONL issues from disk', async (t) => {
|
|
try {
|
|
const root = await fs.mkdtemp(path.join(os.tmpdir(), 'beadboard-read-'));
|
|
const beadsDir = path.join(root, '.beads');
|
|
const issuesPath = path.join(beadsDir, 'issues.jsonl');
|
|
|
|
await fs.mkdir(beadsDir, { recursive: true });
|
|
await fs.writeFile(
|
|
issuesPath,
|
|
[
|
|
JSON.stringify({ id: 'bb-1', title: 'Open issue', status: 'open', priority: 0, issue_type: 'task' }),
|
|
JSON.stringify({ id: 'bb-2', title: 'Hidden tombstone', status: 'tombstone' }),
|
|
].join('\n'),
|
|
'utf8',
|
|
);
|
|
|
|
const issues = await readIssuesFromDisk({ projectRoot: root });
|
|
|
|
assert.equal(issues.length, 1);
|
|
assert.equal(issues[0].id, 'bb-1');
|
|
assert.equal(issues[0].priority, 0);
|
|
assert.equal(issues[0].project.root, canonicalizeWindowsPath(root));
|
|
assert.equal(issues[0].project.key, windowsPathKey(root));
|
|
assert.equal(issues[0].project.displayPath, toDisplayPath(root));
|
|
assert.equal(issues[0].project.name, path.basename(canonicalizeWindowsPath(root)));
|
|
assert.equal(issues[0].project.source, 'local');
|
|
assert.equal(issues[0].project.addedAt, null);
|
|
} catch (error) {
|
|
if ((error as Error).message.includes('Dolt unreachable')) {
|
|
t.skip('Dolt not available for file-based tests');
|
|
} else {
|
|
throw error;
|
|
}
|
|
}
|
|
});
|
|
|
|
test('readIssuesFromDisk returns empty list when issues file does not exist', async (t) => {
|
|
try {
|
|
const root = await fs.mkdtemp(path.join(os.tmpdir(), 'beadboard-read-missing-'));
|
|
const issues = await readIssuesFromDisk({ projectRoot: root });
|
|
assert.deepEqual(issues, []);
|
|
} catch (error) {
|
|
if ((error as Error).message.includes('Dolt unreachable')) {
|
|
t.skip('Dolt not available for file-based tests');
|
|
} else {
|
|
throw error;
|
|
}
|
|
}
|
|
});
|
|
|
|
test('readIssuesFromDisk falls back to issues.jsonl.new when issues.jsonl is missing', async (t) => {
|
|
try {
|
|
const root = await fs.mkdtemp(path.join(os.tmpdir(), 'beadboard-read-fallback-'));
|
|
const beadsDir = path.join(root, '.beads');
|
|
const fallbackPath = path.join(beadsDir, 'issues.jsonl.new');
|
|
await fs.mkdir(beadsDir, { recursive: true });
|
|
await fs.writeFile(
|
|
fallbackPath,
|
|
JSON.stringify({ id: 'bb-fallback', title: 'From fallback', status: 'open', priority: 2, issue_type: 'task' }),
|
|
'utf8',
|
|
);
|
|
|
|
const issues = await readIssuesFromDisk({ projectRoot: root });
|
|
assert.equal(issues.length, 1);
|
|
assert.equal(issues[0].id, 'bb-fallback');
|
|
} catch (error) {
|
|
if ((error as Error).message.includes('Dolt unreachable')) {
|
|
t.skip('Dolt not available for file-based tests');
|
|
} else {
|
|
throw error;
|
|
}
|
|
}
|
|
});
|
|
|
|
test('readIssuesFromDisk throws error when Dolt is unreachable (BD compliance)', async () => {
|
|
const root = await fs.mkdtemp(path.join(os.tmpdir(), 'beadboard-dolt-check-'));
|
|
|
|
await assert.rejects(
|
|
() => readIssuesFromDisk({ projectRoot: root }),
|
|
{
|
|
message: 'Dolt unreachable - ensure Dolt is running: bd dolt start',
|
|
}
|
|
);
|
|
});
|
|
|
|
test('writeIssuesToDisk uses BD audit record when available', async () => {
|
|
const root = await fs.mkdtemp(path.join(os.tmpdir(), 'beadboard-write-bd-'));
|
|
const beadsDir = path.join(root, '.beads');
|
|
await fs.mkdir(beadsDir, { recursive: true });
|
|
|
|
const issues = [
|
|
{
|
|
id: 'bb-1',
|
|
title: 'Test issue',
|
|
description: null,
|
|
status: 'open' as const,
|
|
priority: 1,
|
|
issue_type: 'task' as const,
|
|
assignee: null,
|
|
templateId: null,
|
|
owner: null,
|
|
labels: [],
|
|
dependencies: [],
|
|
created_at: '',
|
|
updated_at: '',
|
|
closed_at: null,
|
|
close_reason: null,
|
|
closed_by_session: null,
|
|
created_by: null,
|
|
due_at: null,
|
|
estimated_minutes: null,
|
|
external_ref: null,
|
|
comments_count: 0,
|
|
metadata: {},
|
|
project: {
|
|
root,
|
|
key: 'test-key',
|
|
displayPath: root,
|
|
name: 'test',
|
|
source: 'local' as const,
|
|
addedAt: null,
|
|
},
|
|
},
|
|
];
|
|
|
|
await writeIssuesToDisk(issues, { projectRoot: root });
|
|
|
|
const issuesPath = resolveIssuesJsonlPath(root);
|
|
const content = await fs.readFile(issuesPath, 'utf8');
|
|
assert.ok(content.includes('bb-1'));
|
|
});
|