Import AITURK IDE 1.0.0-beta.1 from Hermes 63279301; preserve MIT license

apps/desktop/electron/secret-storage-policy.test.ts

@@ -0,0 +1,103 @@
+/**
+ * Tests for electron/secret-storage-policy.ts — the "is OS-keychain
+ * encryption enabled at all?" decision seam.
+ *
+ * The behavior this file pins: keychain-backed encryption is OPT-IN
+ * (default OFF), and once the one-shot legacy migration has run, a
+ * safeStorage blob under an opted-out policy reads as 'drop' — i.e. the
+ * caller must treat it as absent WITHOUT touching safeStorage, so a broken
+ * macOS login keychain can never raise its password dialog on launch.
+ *
+ * (Wired into the vitest `electron` project via electron/**\/*.test.ts.)
+ */
+
+import assert from 'node:assert/strict'
+
+import { test } from 'vitest'
+
+import {
+  classifyStoredSecret,
+  readSecretStoragePolicy,
+  type SecretStoragePolicyIo,
+  writeSecretStoragePolicy
+} from './secret-storage-policy'
+
+function fakeIo(initial: string | null = null): SecretStoragePolicyIo & { fileText: () => string | null } {
+  let text = initial
+
+  return {
+    readText: () => {
+      if (text === null) {
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      }
+
+      return text
+    },
+    writeText: (next: string) => {
+      text = next
+    },
+    fileText: () => text
+  }
+}
+
+// ── defaults ────────────────────────────────────────────────────────────────
+
+test('missing policy file defaults to encryption OFF, not migrated', () => {
+  const policy = readSecretStoragePolicy(fakeIo())
+
+  assert.deepEqual(policy, { on: false, migrated: false })
+})
+
+test('corrupt or non-object policy file reads as the default', () => {
+  for (const bad of ['not-json', '[]', '"on"', 'null', '123']) {
+    assert.deepEqual(readSecretStoragePolicy(fakeIo(bad)), { on: false, migrated: false })
+  }
+})
+
+test('truthy-but-not-true values do NOT enable encryption', () => {
+  // Strict === true coercion: a hand-edited "on": 1 or "yes" must not turn
+  // keychain prompts back on.
+  for (const bad of ['{"on":1}', '{"on":"yes"}', '{"on":"true"}']) {
+    assert.equal(readSecretStoragePolicy(fakeIo(bad)).on, false)
+  }
+})
+
+test('round trip preserves both fields', () => {
+  const io = fakeIo()
+
+  writeSecretStoragePolicy({ on: true, migrated: true }, io)
+  assert.deepEqual(readSecretStoragePolicy(io), { on: true, migrated: true })
+
+  writeSecretStoragePolicy({ on: false, migrated: true }, io)
+  assert.deepEqual(readSecretStoragePolicy(io), { on: false, migrated: true })
+})
+
+// ── classification ──────────────────────────────────────────────────────────
+
+const SAFE_BLOB = { encoding: 'safeStorage', value: 'AAAA' }
+const PLAIN_BLOB = { encoding: 'plain', value: 'tok' }
+
+test('non-safeStorage blobs are always keep, under every policy', () => {
+  for (const policy of [
+    { on: false, migrated: false },
+    { on: false, migrated: true },
+    { on: true, migrated: true }
+  ]) {
+    assert.equal(classifyStoredSecret(PLAIN_BLOB, policy), 'keep')
+    assert.equal(classifyStoredSecret(null, policy), 'keep')
+    assert.equal(classifyStoredSecret(undefined, policy), 'keep')
+    assert.equal(classifyStoredSecret({} as any, policy), 'keep')
+  }
+})
+
+test('safeStorage blob with encryption ON is keep', () => {
+  assert.equal(classifyStoredSecret(SAFE_BLOB, { on: true, migrated: true }), 'keep')
+})
+
+test('safeStorage blob, encryption OFF, pre-migration is migrate', () => {
+  assert.equal(classifyStoredSecret(SAFE_BLOB, { on: false, migrated: false }), 'migrate')
+})
+
+test('safeStorage blob, encryption OFF, post-migration is drop — never touch the keychain again', () => {
+  assert.equal(classifyStoredSecret(SAFE_BLOB, { on: false, migrated: true }), 'drop')
+})