Files
openwork/evals/specs/desktop-server-credential-coherence.test.ts

69 lines
2.2 KiB
TypeScript

import { spawnSync } from "node:child_process";
import { fileURLToPath } from "node:url";
import { test } from "@openwork/testkit";
import { expect } from "vitest";
import { migrateOpenworkServerTokenStore } from "../../apps/desktop/electron/runtime.mjs";
const repoRoot = fileURLToPath(new URL("../../", import.meta.url));
test("desktop server credentials remain coherent across workspaces and reconnects", ({ evidence }) => {
const migrated = migrateOpenworkServerTokenStore({
version: 1,
workspaces: {
"/workspace/older": {
clientToken: "older-client",
hostToken: "older-host",
ownerToken: "older-owner",
updatedAt: 10,
},
"/workspace/current": {
clientToken: "current-client",
hostToken: "current-host",
ownerToken: "current-owner",
updatedAt: 20,
},
},
});
expect(migrated).toEqual({
version: 2,
credentials: {
clientToken: "current-client",
hostToken: "current-host",
ownerToken: "current-owner",
updatedAt: 20,
},
});
expect(migrated).not.toHaveProperty("workspaces");
expect(migrateOpenworkServerTokenStore(migrated)).toEqual(migrated);
const reconnect = spawnSync("pnpm", [
"--dir",
"apps/app",
"exec",
"bun",
"test",
"--isolate",
"--test-name-pattern",
"desktop reconnect persists the complete live server credential bundle",
"tests/gateway-runtime.test.ts",
], { cwd: repoRoot, encoding: "utf8" });
const output = `${reconnect.stdout}${reconnect.stderr}`;
expect(reconnect.error, output).toBeUndefined();
expect(reconnect.status, output).toBe(0);
expect(output).toContain("1 pass");
expect(output).toContain("0 fail");
evidence.recordAssertionEvidence(
"One desktop server owns one credential bundle",
"Legacy workspace credentials migrate to one global client, host, and owner token bundle with no workspace-scoped credentials remaining.",
!Object.hasOwn(migrated, "workspaces"),
);
evidence.recordAssertionEvidence(
"Reconnect cannot combine credentials from different server generations",
"The renderer regression suite confirms that reconnect replaces both stale client and host tokens with the live server pair.",
reconnect.status === 0,
);
});