mirror of
https://github.com/binaricat/Netcatty.git
synced 2026-09-24 15:49:09 +00:00
904af93a1d
* fix(credentials): stop double-encrypting undecryptable safeStorage blobs When local decrypt failed (e.g. OSCrypt key churn after reboot), encrypt used to wrap the leftover enc:v1 ciphertext again, permanently poisoning the vault. Startup sync could also push those placeholders to cloud and make download restore the same poison. - Keep real enc:v1 blobs unchanged on encrypt (header check, no wrap) - Strip device-bound placeholders when applying portable sync payloads - Guard startup local-wins / merge round-trips before upload - Skip vault init re-encrypt writes when secrets are still undecrypted Fixes #2702 Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(sync): strip enc:v1 secrets from smart-merge uploads Bugbot found that after local apply sanitized placeholders, legacy v1 smart-merge could still decrypt an unstripped remote, merge it, and re-upload the poison. Strip device-bound credentials on remote decrypt and again on the merged payload before upload. Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(credentials): address Codex P2 review on #2702 - Always re-encrypt vault init batches so plaintext siblings are not left unprotected when one record is a stale enc:v1 placeholder - Sanitize device-bound secrets before convergent restore prepare so CRDT replica commit matches vault import - Require a complete safeStorage blob (header + min 31 bytes) before treating enc:v1 as ciphertext; encrypt header-only coincidences Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(credentials): address Codex P1 review on #2702 - Decode enc:v1 payloads with atob in the renderer-safe domain helper - Heal poisoned remote secrets from local/base before smart-merge so good credentials are not discarded as remote-only deletions - Keep post-merge strip so leftover enc:v1 never uploads Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(credentials): address Codex P1 CBC min and startup heal - Accept 19-byte v10/v11 CBC OSCrypt blobs (not only 31-byte GCM) - Heal poisoned remote secrets before startup smart-merge - Strip unresolved placeholders on merge round-trip upload Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(sync): sanitize payloads at every apply/commit boundary Codex P1: vault apply stripped enc:v1 while commitRemoteInspection and convergent materialization could keep the poison. Sanitize merged/remote payloads before apply+base commit, strip on CRDT materialization, and sanitize convergent apply inputs. Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(sync): heal local and remote secrets before smart-merge Smart-merge could select a locally-changed entity whose only secret delta was enc:v1 poison, then strip and upload empty secrets. Heal both sides from the opposite payload/base before merge on all sync paths. Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(sync): keep enc:v1 intact during convergent materialize Stripping device-bound secrets inside materializeSyncPayloadFromConvergentState broke envelope validation for poisoned-but-consistent v2 snapshots, so decrypt could not hydrate the clouds #2702 needs to recover. Portable stripping stays at apply/upload boundaries. Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(credentials): detect Windows DPAPI by decoded header bytes Real DPAPI blobs start with 01 00 00 00 d0 8c... and base64-encode as AQAAANCM..., so the previous AQAAAA string prefix rejected them and allowed double-wrapping after key rotation. Match decoded headers in both the main-process bridge and renderer predicate. Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * test(credentials): use complete enc:v1 fixtures for stricter detector Short placeholders like enc:v1:djEwAAAA no longer pass the platform header + minimum-size checks. Update auth/SFTP/proxy/sync fixtures to full v10-shaped blobs so npm test matches production validation. Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(sync): treat preferred credential deletions as authoritative When healing enc:v1 before merge, an empty/missing secret on a present preferred entity is an intentional clear and must not be revived from base. Only fall back to base when preferred is absent or also poisoned. Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(credentials): reject impossible v10/v11 ciphertext lengths Accept only CBC-aligned sizes (19+16n) or GCM-sized blobs (>=31) so coincidental enc:v1 plaintext of intermediate length is encrypted instead of treated as an undecryptable placeholder. Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> * fix(credentials): require full DPAPI provider GUID signature Accept Windows safeStorage blobs only when they start with version 01 00 00 00 plus provider GUID df9d8cd0-1501-11d1-8c7a-00c04fc297eb, so coincidental 01 00 00 00 prefixes are not treated as ciphertext. Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: 陈大猫 <binaricat@users.noreply.github.com>
552 lines
17 KiB
TypeScript
552 lines
17 KiB
TypeScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
import React from "react";
|
|
import { renderToStaticMarkup } from "react-dom/server";
|
|
|
|
import { I18nProvider } from "../application/i18n/I18nProvider.tsx";
|
|
import type { Host, Identity } from "../types.ts";
|
|
import HostDetailsPanel, { parseOptionalPortInput } from "./HostDetailsPanel.tsx";
|
|
import {
|
|
prepareProxyConfigForSave,
|
|
prepareTelnetCredentialsForSave,
|
|
resolvePrimaryProtocolSavePort,
|
|
resolvePrimaryProtocolSwitchPort,
|
|
validateProxyConfigForSave,
|
|
} from "./HostDetailsPanel.helpers.ts";
|
|
import { TooltipProvider } from "./ui/tooltip.tsx";
|
|
|
|
const hostWithMissingProxyProfile: Host = {
|
|
id: "host-1",
|
|
label: "DB",
|
|
hostname: "db.example.com",
|
|
username: "root",
|
|
tags: [],
|
|
os: "linux",
|
|
port: 22,
|
|
protocol: "ssh",
|
|
authMethod: "password",
|
|
proxyProfileId: "missing-proxy",
|
|
createdAt: 1,
|
|
};
|
|
|
|
const renderHostDetails = (
|
|
initialData: Host = hostWithMissingProxyProfile,
|
|
options: { identities?: Identity[] } = {},
|
|
) =>
|
|
renderToStaticMarkup(
|
|
React.createElement(
|
|
I18nProvider,
|
|
{ locale: "en" },
|
|
React.createElement(
|
|
TooltipProvider,
|
|
null,
|
|
React.createElement(HostDetailsPanel, {
|
|
initialData,
|
|
availableKeys: [],
|
|
identities: options.identities ?? [],
|
|
proxyProfiles: [],
|
|
groups: [],
|
|
managedSources: [],
|
|
allTags: [],
|
|
allHosts: [],
|
|
terminalThemeId: "default",
|
|
terminalFontSize: 14,
|
|
onSave: () => {},
|
|
onCancel: () => {},
|
|
}),
|
|
),
|
|
),
|
|
);
|
|
|
|
const findInputByValue = (markup: string, value: string) => {
|
|
const match = markup.match(new RegExp(`<input(?=[^>]*value="${value}")[^>]*>`));
|
|
assert.ok(match, `expected input with value ${value}`);
|
|
return match[0];
|
|
};
|
|
|
|
const classTokens = (markup: string) => {
|
|
const classMatch = markup.match(/class="([^"]*)"/);
|
|
assert.ok(classMatch, "expected class attribute");
|
|
return new Set(classMatch[1].split(/\s+/).filter(Boolean));
|
|
};
|
|
|
|
test("HostDetailsPanel shows a missing saved proxy without undefined fields", () => {
|
|
const markup = renderHostDetails();
|
|
|
|
assert.match(markup, /Missing saved proxy/);
|
|
assert.doesNotMatch(markup, /undefined:undefined/);
|
|
});
|
|
|
|
test("HostDetailsPanel labels command proxy summaries consistently", () => {
|
|
const markup = renderHostDetails({
|
|
...hostWithMissingProxyProfile,
|
|
proxyProfileId: undefined,
|
|
proxyConfig: {
|
|
type: "command",
|
|
host: "",
|
|
port: 0,
|
|
command: "cloudflared access ssh --hostname %h --token secret",
|
|
},
|
|
});
|
|
|
|
assert.match(markup, /ProxyCommand/);
|
|
assert.doesNotMatch(markup, /COMMAND/);
|
|
assert.doesNotMatch(markup, /cloudflared access ssh/);
|
|
assert.doesNotMatch(markup, /secret/);
|
|
});
|
|
|
|
test("HostDetailsPanel keeps explicitly cleared telnet credentials empty", () => {
|
|
const markup = renderHostDetails({
|
|
...hostWithMissingProxyProfile,
|
|
protocol: "telnet",
|
|
telnetEnabled: true,
|
|
telnetPort: 23,
|
|
username: "root",
|
|
password: "ssh-password",
|
|
telnetUsername: "",
|
|
telnetPassword: "",
|
|
proxyProfileId: undefined,
|
|
});
|
|
|
|
assert.match(markup, /placeholder="Telnet Username"[^>]*value=""/);
|
|
assert.match(markup, /placeholder="Telnet Password"[^>]*value=""/);
|
|
assert.doesNotMatch(markup, /placeholder="Telnet Username"[^>]*value="root"/);
|
|
assert.doesNotMatch(markup, /placeholder="Telnet Password"[^>]*value="ssh-password"/);
|
|
});
|
|
|
|
test("HostDetailsPanel shows a selected telnet identity instead of manual telnet fields", () => {
|
|
const markup = renderHostDetails(
|
|
{
|
|
...hostWithMissingProxyProfile,
|
|
protocol: "telnet",
|
|
telnetEnabled: true,
|
|
identityId: "ssh-identity",
|
|
telnetIdentityId: "telnet-identity",
|
|
telnetUsername: undefined,
|
|
telnetPassword: undefined,
|
|
proxyProfileId: undefined,
|
|
},
|
|
{
|
|
identities: [{
|
|
id: "ssh-identity",
|
|
label: "SSH login",
|
|
username: "ssh-user",
|
|
authMethod: "password",
|
|
password: "ssh-password",
|
|
created: 1,
|
|
}, {
|
|
id: "telnet-identity",
|
|
label: "Telnet login",
|
|
username: "telnet-user",
|
|
authMethod: "password",
|
|
password: "telnet-password",
|
|
created: 2,
|
|
}],
|
|
},
|
|
);
|
|
|
|
assert.match(markup, /telnet-user - Telnet login/);
|
|
assert.doesNotMatch(markup, /placeholder="Telnet Username"/);
|
|
assert.doesNotMatch(markup, /placeholder="Telnet Password"/);
|
|
});
|
|
|
|
test("prepareTelnetCredentialsForSave preserves selected telnet identity and clears manual telnet fields", () => {
|
|
const saved = prepareTelnetCredentialsForSave({
|
|
...hostWithMissingProxyProfile,
|
|
protocol: "telnet",
|
|
telnetEnabled: true,
|
|
identityId: "ssh-identity",
|
|
telnetIdentityId: "telnet-identity",
|
|
telnetUsername: "stale-telnet-user",
|
|
telnetPassword: "stale-telnet-password",
|
|
proxyProfileId: undefined,
|
|
});
|
|
|
|
assert.equal(saved.identityId, "ssh-identity");
|
|
assert.equal(saved.telnetIdentityId, "telnet-identity");
|
|
assert.equal(saved.telnetUsername, undefined);
|
|
assert.equal(saved.telnetPassword, undefined);
|
|
});
|
|
|
|
test("HostDetailsPanel disables save when hostname is whitespace only", () => {
|
|
const markup = renderHostDetails({
|
|
...hostWithMissingProxyProfile,
|
|
hostname: " ",
|
|
proxyProfileId: undefined,
|
|
});
|
|
|
|
assert.match(markup, /<button[^>]*disabled=""[^>]*aria-label="Save"/);
|
|
assert.match(markup, />Save<\/button>/);
|
|
assert.match(markup, /<button[^>]*disabled=""[^>]*>Save<\/button>/);
|
|
});
|
|
|
|
test("HostDetailsPanel gives the telnet port field the same roomy layout as SSH", () => {
|
|
const markup = renderHostDetails({
|
|
...hostWithMissingProxyProfile,
|
|
protocol: "telnet",
|
|
telnetEnabled: true,
|
|
telnetPort: 2325,
|
|
proxyProfileId: undefined,
|
|
});
|
|
|
|
const telnetMarkup = markup.slice(markup.indexOf("Telnet on"));
|
|
const wrapperMatch = telnetMarkup.match(/<div class="([^"]*w-1\/2[^"]*)"/);
|
|
assert.ok(wrapperMatch, "expected telnet port wrapper");
|
|
const wrapperClasses = new Set(wrapperMatch[1].split(/\s+/).filter(Boolean));
|
|
assert.ok(wrapperClasses.has("ml-auto"));
|
|
assert.ok(wrapperClasses.has("w-1/2"));
|
|
assert.ok(wrapperClasses.has("min-w-0"));
|
|
assert.ok(wrapperClasses.has("justify-end"));
|
|
const telnetPortInput = findInputByValue(markup, "2325");
|
|
const inputClasses = classTokens(telnetPortInput);
|
|
assert.ok(inputClasses.has("flex-1"));
|
|
assert.ok(inputClasses.has("min-w-0"));
|
|
assert.ok(inputClasses.has("text-center"));
|
|
assert.equal(inputClasses.has("w-16"), false);
|
|
});
|
|
|
|
test("HostDetailsPanel displays inherited telnet port before falling back to 23", () => {
|
|
const markup = renderToStaticMarkup(
|
|
React.createElement(
|
|
I18nProvider,
|
|
{ locale: "en" },
|
|
React.createElement(
|
|
TooltipProvider,
|
|
null,
|
|
React.createElement(HostDetailsPanel, {
|
|
initialData: {
|
|
...hostWithMissingProxyProfile,
|
|
protocol: "telnet",
|
|
telnetEnabled: true,
|
|
telnetPort: undefined,
|
|
port: undefined,
|
|
group: "network",
|
|
proxyProfileId: undefined,
|
|
},
|
|
availableKeys: [],
|
|
identities: [],
|
|
proxyProfiles: [],
|
|
groups: ["network"],
|
|
managedSources: [],
|
|
allTags: [],
|
|
allHosts: [],
|
|
terminalThemeId: "default",
|
|
terminalFontSize: 14,
|
|
groupConfigs: [{ path: "network", telnetPort: 2325 }],
|
|
onSave: () => {},
|
|
onCancel: () => {},
|
|
}),
|
|
),
|
|
),
|
|
);
|
|
|
|
assert.match(findInputByValue(markup, "2325"), /type="number"/);
|
|
});
|
|
|
|
test("HostDetailsPanel uses group telnet port instead of ssh port for optional telnet", () => {
|
|
const markup = renderToStaticMarkup(
|
|
React.createElement(
|
|
I18nProvider,
|
|
{ locale: "en" },
|
|
React.createElement(
|
|
TooltipProvider,
|
|
null,
|
|
React.createElement(HostDetailsPanel, {
|
|
initialData: {
|
|
...hostWithMissingProxyProfile,
|
|
protocol: "ssh",
|
|
telnetEnabled: true,
|
|
telnetPort: undefined,
|
|
port: 2222,
|
|
group: "network",
|
|
proxyProfileId: undefined,
|
|
},
|
|
availableKeys: [],
|
|
identities: [],
|
|
proxyProfiles: [],
|
|
groups: ["network"],
|
|
managedSources: [],
|
|
allTags: [],
|
|
allHosts: [],
|
|
terminalThemeId: "default",
|
|
terminalFontSize: 14,
|
|
groupConfigs: [{ path: "network", telnetPort: 2325 }],
|
|
onSave: () => {},
|
|
onCancel: () => {},
|
|
}),
|
|
),
|
|
),
|
|
);
|
|
|
|
const telnetMarkup = markup.slice(markup.indexOf("Telnet on"));
|
|
assert.match(findInputByValue(telnetMarkup, "2325"), /type="number"/);
|
|
assert.doesNotMatch(telnetMarkup, /value="2222"/);
|
|
});
|
|
|
|
test("HostDetailsPanel displays inherited telnet credentials", () => {
|
|
const markup = renderToStaticMarkup(
|
|
React.createElement(
|
|
I18nProvider,
|
|
{ locale: "en" },
|
|
React.createElement(
|
|
TooltipProvider,
|
|
null,
|
|
React.createElement(HostDetailsPanel, {
|
|
initialData: {
|
|
...hostWithMissingProxyProfile,
|
|
protocol: "telnet",
|
|
telnetEnabled: true,
|
|
telnetUsername: undefined,
|
|
telnetPassword: undefined,
|
|
username: "ssh-user",
|
|
password: "ssh-password",
|
|
group: "network",
|
|
proxyProfileId: undefined,
|
|
},
|
|
availableKeys: [],
|
|
identities: [],
|
|
proxyProfiles: [],
|
|
groups: ["network"],
|
|
managedSources: [],
|
|
allTags: [],
|
|
allHosts: [],
|
|
terminalThemeId: "default",
|
|
terminalFontSize: 14,
|
|
groupConfigs: [{
|
|
path: "network",
|
|
telnetUsername: "group-telnet-user",
|
|
telnetPassword: "group-telnet-password",
|
|
}],
|
|
onSave: () => {},
|
|
onCancel: () => {},
|
|
}),
|
|
),
|
|
),
|
|
);
|
|
|
|
assert.match(markup, /placeholder="Telnet Username"[^>]*value="group-telnet-user"/);
|
|
assert.match(markup, /placeholder="Telnet Password"[^>]*value="group-telnet-password"/);
|
|
assert.doesNotMatch(markup, /placeholder="Telnet Username"[^>]*value="ssh-user"/);
|
|
assert.doesNotMatch(markup, /placeholder="Telnet Password"[^>]*value="ssh-password"/);
|
|
});
|
|
|
|
test("parseOptionalPortInput clears empty port values", () => {
|
|
assert.equal(parseOptionalPortInput(""), undefined);
|
|
assert.equal(parseOptionalPortInput("2325"), 2325);
|
|
});
|
|
|
|
test("validateProxyConfigForSave rejects missing proxy identities", () => {
|
|
assert.equal(
|
|
validateProxyConfigForSave({
|
|
proxyConfig: {
|
|
type: "http",
|
|
host: "proxy.example.com",
|
|
port: 3128,
|
|
identityId: "missing-identity",
|
|
},
|
|
identities: [],
|
|
}),
|
|
"missingIdentity",
|
|
);
|
|
});
|
|
|
|
test("validateProxyConfigForSave rejects missing identities inside saved proxy profiles", () => {
|
|
assert.equal(
|
|
validateProxyConfigForSave({
|
|
proxyProfileId: "profile-1",
|
|
proxyProfiles: [{
|
|
id: "profile-1",
|
|
label: "Office Proxy",
|
|
config: {
|
|
type: "http",
|
|
host: "proxy.example.com",
|
|
port: 3128,
|
|
identityId: "missing-identity",
|
|
},
|
|
createdAt: 1,
|
|
}],
|
|
identities: [],
|
|
}),
|
|
"missingIdentity",
|
|
);
|
|
});
|
|
|
|
test("validateProxyConfigForSave rejects incomplete proxy identities", () => {
|
|
assert.equal(
|
|
validateProxyConfigForSave({
|
|
proxyConfig: {
|
|
type: "http",
|
|
host: "proxy.example.com",
|
|
port: 3128,
|
|
identityId: "identity-1",
|
|
},
|
|
identities: [{
|
|
id: "identity-1",
|
|
label: "Proxy login",
|
|
username: "proxy-user",
|
|
authMethod: "password",
|
|
created: 1,
|
|
}],
|
|
}),
|
|
"incompleteIdentity",
|
|
);
|
|
});
|
|
|
|
test("validateProxyConfigForSave rejects unreadable proxy identity passwords", () => {
|
|
assert.equal(
|
|
validateProxyConfigForSave({
|
|
proxyConfig: {
|
|
type: "http",
|
|
host: "proxy.example.com",
|
|
port: 3128,
|
|
identityId: "identity-1",
|
|
},
|
|
identities: [{
|
|
id: "identity-1",
|
|
label: "Proxy login",
|
|
username: "proxy-user",
|
|
authMethod: "password",
|
|
password: "enc:v1:djEwdGVzdAAAAAAAAAAAAAAAAA==",
|
|
created: 1,
|
|
}],
|
|
}),
|
|
"unreadableIdentity",
|
|
);
|
|
});
|
|
|
|
test("prepareProxyConfigForSave returns a normalized proxy config for save handlers", () => {
|
|
assert.deepEqual(
|
|
prepareProxyConfigForSave({
|
|
proxyConfig: {
|
|
type: "http",
|
|
host: " proxy.example.com ",
|
|
port: "3128" as never,
|
|
command: "cloudflared access ssh --hostname %h --token secret",
|
|
username: " proxy-user ",
|
|
password: "proxy-secret",
|
|
},
|
|
identities: [],
|
|
}),
|
|
{
|
|
normalizedProxyConfig: {
|
|
type: "http",
|
|
host: "proxy.example.com",
|
|
port: 3128,
|
|
username: "proxy-user",
|
|
password: "proxy-secret",
|
|
},
|
|
},
|
|
);
|
|
});
|
|
|
|
test("prepareProxyConfigForSave returns identity errors before save handlers build output", () => {
|
|
assert.deepEqual(
|
|
prepareProxyConfigForSave({
|
|
proxyProfileId: "profile-1",
|
|
proxyProfiles: [{
|
|
id: "profile-1",
|
|
label: "Office Proxy",
|
|
config: {
|
|
type: "http",
|
|
host: "proxy.example.com",
|
|
port: 3128,
|
|
identityId: "identity-1",
|
|
},
|
|
createdAt: 1,
|
|
}],
|
|
identities: [{
|
|
id: "identity-1",
|
|
label: "Proxy login",
|
|
username: "",
|
|
authMethod: "password",
|
|
password: "enc:v1:djEwdGVzdAAAAAAAAAAAAAAAAA==",
|
|
created: 1,
|
|
}],
|
|
}),
|
|
{ error: "incompleteIdentity" },
|
|
);
|
|
});
|
|
|
|
test("resolvePrimaryProtocolSwitchPort only migrates opposite protocol defaults", () => {
|
|
assert.equal(resolvePrimaryProtocolSwitchPort(22, "telnet", false, false), 23);
|
|
assert.equal(resolvePrimaryProtocolSwitchPort(23, "ssh", false, false), 22);
|
|
assert.equal(resolvePrimaryProtocolSwitchPort(2222, "telnet", false, false), 2222);
|
|
assert.equal(resolvePrimaryProtocolSwitchPort(2323, "ssh", false, false), 2323);
|
|
assert.equal(resolvePrimaryProtocolSwitchPort(undefined, "telnet", false, false), 23);
|
|
assert.equal(resolvePrimaryProtocolSwitchPort(undefined, "ssh", false, false), 22);
|
|
assert.equal(resolvePrimaryProtocolSwitchPort(22, "telnet", false, true), 22);
|
|
assert.equal(resolvePrimaryProtocolSwitchPort(22, "telnet", true, false), 22);
|
|
});
|
|
|
|
test("resolvePrimaryProtocolSavePort falls back to telnet default for primary telnet", () => {
|
|
assert.equal(resolvePrimaryProtocolSavePort("telnet", undefined, false, false), 23);
|
|
assert.equal(resolvePrimaryProtocolSavePort("telnet", 2323, false, false), 2323);
|
|
assert.equal(resolvePrimaryProtocolSavePort("ssh", undefined, false, false), 22);
|
|
assert.equal(resolvePrimaryProtocolSavePort("ssh", undefined, true, false), undefined);
|
|
assert.equal(resolvePrimaryProtocolSavePort("telnet", undefined, false, true), undefined);
|
|
assert.equal(resolvePrimaryProtocolSavePort("telnet", undefined, true, false), undefined);
|
|
});
|
|
|
|
test("HostDetailsPanel does not offer to disable telnet when telnet is the primary protocol", () => {
|
|
const markup = renderHostDetails({
|
|
...hostWithMissingProxyProfile,
|
|
protocol: "telnet",
|
|
telnetEnabled: true,
|
|
telnetPort: 23,
|
|
proxyProfileId: undefined,
|
|
});
|
|
const telnetHeader = markup.match(/Telnet on[\s\S]*?Credentials/);
|
|
|
|
assert.ok(telnetHeader);
|
|
assert.doesNotMatch(telnetHeader[0], /hover:text-destructive/);
|
|
});
|
|
|
|
test("HostDetailsPanel shows color and icon controls in the connection settings", () => {
|
|
const markup = renderHostDetails({
|
|
...hostWithMissingProxyProfile,
|
|
proxyProfileId: undefined,
|
|
distroMode: "manual",
|
|
manualDistro: "linux",
|
|
iconColorMode: "manual",
|
|
iconColor: "blue",
|
|
});
|
|
|
|
assert.match(markup, /Color & Icon/);
|
|
assert.match(markup, /Manual icon/);
|
|
assert.match(markup, /Generic Linux/);
|
|
assert.match(markup, /Icon color/);
|
|
assert.match(markup, /Blue/);
|
|
assert.match(markup, /IP or Hostname/);
|
|
});
|
|
|
|
test("HostDetailsPanel keeps empty notes collapsed below connection settings", () => {
|
|
const markup = renderHostDetails({
|
|
...hostWithMissingProxyProfile,
|
|
proxyProfileId: undefined,
|
|
notes: "",
|
|
});
|
|
|
|
assert.match(markup, /aria-label="Show notes editor"/);
|
|
assert.doesNotMatch(markup, /placeholder="Hardware, project, customer, region, role\.\.\."/);
|
|
assert.ok(
|
|
markup.indexOf("IP or Hostname") < markup.indexOf("Notes"),
|
|
"expected notes to render after connection settings",
|
|
);
|
|
});
|
|
|
|
test("HostDetailsPanel expands notes when the host already has notes", () => {
|
|
const markup = renderHostDetails({
|
|
...hostWithMissingProxyProfile,
|
|
proxyProfileId: undefined,
|
|
notes: "Runs nightly backups",
|
|
});
|
|
|
|
assert.match(markup, /aria-label="Hide notes editor"/);
|
|
assert.match(markup, /Runs nightly backups/);
|
|
assert.match(markup, /placeholder="Hardware, project, customer, region, role\.\.\."/);
|
|
assert.ok(
|
|
markup.indexOf("IP or Hostname") < markup.indexOf("Notes"),
|
|
"expected notes to render after connection settings",
|
|
);
|
|
});
|