Import AITURK IDE 1.0.0-beta.1 from Hermes 63279301; preserve MIT license

apps/desktop/electron/renderer-load-error-page.test.ts

@@ -0,0 +1,95 @@
+import assert from 'node:assert/strict'
+
+import { test } from 'vitest'
+
+import { buildRendererLoadErrorPage, loadRendererLoadErrorPage } from './renderer-load-error-page'
+
+test('error page names the failure and carries a Reload button', () => {
+  const html = buildRendererLoadErrorPage({
+    errorCode: -6,
+    errorDescription: 'The desktop renderer bundle is incomplete after the last update (2 missing file(s)).',
+    missingAssets: ['assets/app-C0ffee.js', 'assets/shiki-block-DeadBeef.js'],
+    repairHint: 'hermes desktop --force-build'
+  })
+
+  assert.match(html, /Hermes couldn.t start the desktop UI/)
+  assert.match(html, /incomplete after the last update \(2 missing file\(s\)\)/)
+  assert.match(html, /-6/)
+  assert.match(html, /assets\/app-C0ffee\.js/)
+  assert.match(html, /assets\/shiki-block-DeadBeef\.js/)
+  assert.match(html, /hermes desktop --force-build/)
+  assert.match(html, /Reload/)
+  assert.match(html, /location\.reload\(\)/)
+})
+
+test('error page reload button targets the real renderer URL when provided', () => {
+  const html = buildRendererLoadErrorPage({
+    errorDescription: 'load failed',
+    reloadUrl: 'file:///C:/Hermes%20Agent/dist/index.html'
+  })
+
+  // A data: page cannot recover with location.reload() (it would re-render
+  // the error page) — the button must navigate back to the app URL.
+  assert.match(html, /location\.replace\("file:\/\/\/C:\/Hermes%20Agent\/dist\/index\.html"\)/)
+  assert.doesNotMatch(html, /location\.reload\(\)/)
+})
+
+test('error page escapes HTML in failure details', () => {
+  const html = buildRendererLoadErrorPage({
+    errorDescription: '<script>alert("pwned")</script>',
+    url: 'file:///C:/x/index.html?<b>',
+    missingAssets: ['assets/<img src=x onerror=alert(1)>.js']
+  })
+
+  assert.doesNotMatch(html, /<script>alert\("pwned"\)<\/script>/)
+  assert.match(html, /&lt;script&gt;alert/)
+})
+
+test('reloadUrl cannot break out of the inline script block', () => {
+  // JSON.stringify alone does not escape '<' — a reloadUrl containing a
+  // script-tag sequence would otherwise terminate the inline <script>
+  // element and inject markup/script into the error page.
+  const html = buildRendererLoadErrorPage({
+    errorDescription: 'load failed',
+    reloadUrl: 'file:///C:/x/index.html</script><script>alert("pwned")</script>'
+  })
+
+  assert.doesNotMatch(html, /<\/script><script>/)
+  assert.doesNotMatch(html, /alert\("pwned"\)/)
+  // The payload is preserved as inert \u003c escapes inside the JS string.
+  assert.match(html, /\\u003c\/script/)
+  assert.match(html, /\\u003cscript\\u003ealert/)
+})
+
+test('error page renders without any details', () => {
+  const html = buildRendererLoadErrorPage()
+
+  assert.match(html, /The desktop renderer failed to load\./)
+  assert.match(html, /Reload/)
+})
+
+test('loadRendererLoadErrorPage loads a data: URL and swallows loadURL rejections', async () => {
+  const loads: string[] = []
+
+  const win = {
+    loadURL: async (url: string) => {
+      loads.push(url)
+    }
+  }
+
+  await loadRendererLoadErrorPage(win, { errorCode: -6, errorDescription: 'torn bundle' })
+
+  assert.equal(loads.length, 1)
+  assert.ok(loads[0].startsWith('data:text/html;charset=utf-8,'))
+  assert.ok(decodeURIComponent(loads[0]).includes('torn bundle'))
+
+  // A rejected loadURL must not become an unhandled rejection — the white
+  // screen is strictly better than a crashed recovery path.
+  const rejectingWin = {
+    loadURL: async () => {
+      throw new Error('boom')
+    }
+  }
+
+  await assert.doesNotReject(() => loadRendererLoadErrorPage(rejectingWin))
+})