#!/usr/bin/env node const fs = require('fs'); const path = require('path'); const vm = require('vm'); const root = path.resolve(__dirname, '..'); const sourcePath = path.join(root, 'plugins', 'secrets', 'frontend', 'src', 'index.js'); const manifestPath = path.join(root, 'plugins', 'secrets', 'plugin.json'); const source = fs.readFileSync(sourcePath, 'utf8'); const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8')); class FakeNode { constructor(tagName) { this.tagName = String(tagName || '').toUpperCase(); this.children = []; this.attributes = {}; this.listeners = {}; this.className = ''; this.value = ''; this.disabled = false; this.parentNode = null; this._textContent = ''; } appendChild(node) { this.children.push(node); node.parentNode = this; return node; } setAttribute(name, value) { this.attributes[name] = String(value); } getAttribute(name) { return this.attributes[name]; } addEventListener(type, handler) { this.listeners[type] = this.listeners[type] || []; this.listeners[type].push(handler); } dispatchEvent(type, event = {}) { (this.listeners[type] || []).forEach((handler) => handler({ target: this, preventDefault() {}, stopPropagation() {}, ...event })); } click() { this.dispatchEvent('click'); } set textContent(value) { this._textContent = String(value || ''); this.children = []; } get textContent() { if (this.tagName === '#TEXT') return this._textContent; return this._textContent + this.children.map((child) => child.textContent).join(''); } set innerHTML(value) { this._textContent = String(value || ''); this.children = []; } get innerHTML() { return this.textContent; } } function walk(node, fn) { if (fn(node)) return node; for (const child of node.children) { const found = walk(child, fn); if (found) return found; } return null; } function makeDocument() { return { head: new FakeNode('head'), body: new FakeNode('body'), createElement(tagName) { return new FakeNode(tagName); }, createTextNode(text) { const node = new FakeNode('#text'); node.textContent = text; return node; }, getElementById() { return null; }, }; } function loadComponent(document) { const registry = {}; vm.runInNewContext(source, { console, document, window: { VerstakPluginRegister(pluginId, bundle) { registry[pluginId] = bundle.components || {}; }, confirm: () => true, navigator: { clipboard: { writeText: async () => undefined } }, }, setTimeout, clearTimeout, }, { filename: sourcePath }); const component = registry['verstak.secrets'] && registry['verstak.secrets'].SecretsView; if (!component) throw new Error('SecretsView was not registered'); return component; } async function flush() { for (let i = 0; i < 12; i++) { await Promise.resolve(); await new Promise((resolve) => setTimeout(resolve, 0)); } } (async () => { if (!manifest.provides.includes('secret-store')) throw new Error('secrets manifest must provide secret-store'); if (!manifest.provides.includes('secrets.read-ui')) throw new Error('secrets manifest must provide secrets.read-ui'); if (!manifest.provides.includes('secrets.write-ui')) throw new Error('secrets manifest must provide secrets.write-ui'); if (!manifest.permissions.includes('secrets.read')) throw new Error('secrets manifest must request secrets.read'); if (!manifest.permissions.includes('secrets.write')) throw new Error('secrets manifest must request secrets.write'); if (!manifest.permissions.includes('ui.register')) throw new Error('secrets manifest must request ui.register'); if (!(manifest.contributes.openProviders || []).some((item) => (item.supports || []).some((support) => support.kind === 'secret'))) throw new Error('secrets secret open provider missing'); if (!(manifest.contributes.workspaceItems || []).some((item) => item.component === 'SecretsView')) throw new Error('secrets workspace item missing'); if (!(manifest.contributes.settingsPanels || []).some((item) => item.component === 'SecretsView')) throw new Error('secrets settings panel missing'); const document = makeDocument(); const component = loadComponent(document); const records = [ { id: 'global.server', title: 'Global Server', username: 'root', scope: { kind: 'global' }, updatedAt: '2026-06-29T00:00:00Z' }, { id: 'client-a.db', title: 'Client A DB', username: 'app', scope: { kind: 'workspace', workspaceRootPath: 'ClientA' }, updatedAt: '2026-06-29T00:00:00Z' }, ]; let initialized = false; let unlocked = false; const readCalls = []; const copied = []; const deleted = []; const api = { secrets: { status: async () => ({ initialized, unlocked }), unlock: async (password) => { if (password !== 'master-password') throw new Error('bad password'); initialized = true; unlocked = true; }, list: async () => records, read: async (id) => { readCalls.push(id); return { ...records.find((record) => record.id === id), value: 'secret-value' }; }, write: async (record) => { const next = { ...record, id: record.id || 'generated.id', updatedAt: '2026-06-29T00:00:00Z' }; const idx = records.findIndex((item) => item.id === next.id); const listRecord = { ...next }; delete listRecord.value; if (idx >= 0) records[idx] = listRecord; else records.push(listRecord); return listRecord; }, delete: async (id) => { deleted.push(id); const idx = records.findIndex((record) => record.id === id); if (idx >= 0) records.splice(idx, 1); }, copyLink: async (id) => `[${records.find((record) => record.id === id).title}](verstak-secret://${id})`, }, clipboard: { writeText: async (text) => copied.push(text), }, }; const container = document.createElement('div'); component.mount(container, { workspaceRootPath: 'ClientA', resource: { path: 'client-a.db' } }, api); await flush(); if (!container.textContent.includes('Create master password')) throw new Error('setup screen did not render'); const passwordInput = walk(container, (node) => node.getAttribute && node.getAttribute('data-secret-master-password') === ''); const confirmInput = walk(container, (node) => node.getAttribute && node.getAttribute('data-secret-master-password-confirm') === ''); const unlockButton = walk(container, (node) => node.getAttribute && node.getAttribute('data-secret-unlock') === ''); if (!passwordInput || !confirmInput || !unlockButton) throw new Error('setup controls missing'); passwordInput.value = 'master-password'; confirmInput.value = 'master-password'; unlockButton.click(); await flush(); if (!container.textContent.includes('Global')) throw new Error('global group missing'); if (!container.textContent.includes('ClientA')) throw new Error('workspace group missing'); if (!container.textContent.includes('Client A DB')) throw new Error('workspace secret missing'); if (!readCalls.includes('client-a.db')) throw new Error('deep-linked secret was not selected/read'); if (!container.textContent.includes('Group')) throw new Error('secret field table missing Group row'); if (!container.textContent.includes('Username')) throw new Error('secret field table missing Username row'); if (!container.textContent.includes('Password')) throw new Error('secret field table missing Password row'); if (!container.textContent.includes('secret-value')) throw new Error('secret value was not shown in the field table'); const copyButton = walk(container, (node) => node.getAttribute && node.getAttribute('data-secret-copy-link') === 'client-a.db'); if (!copyButton) throw new Error('copy link button missing'); copyButton.click(); await flush(); if (!copied.includes('[Client A DB](verstak-secret://client-a.db)')) throw new Error('secret link was not copied'); const editButton = walk(container, (node) => node.getAttribute && node.getAttribute('data-secret-edit') === 'client-a.db'); if (!editButton) throw new Error('edit button missing'); editButton.click(); await flush(); const titleInput = walk(container, (node) => node.getAttribute && node.getAttribute('data-secret-title') === ''); const valueInput = walk(container, (node) => node.getAttribute && node.getAttribute('data-secret-value') === ''); const saveButton = walk(container, (node) => node.getAttribute && node.getAttribute('data-secret-save') === ''); if (!titleInput || !valueInput || !saveButton) throw new Error('edit form controls missing'); titleInput.value = 'Client A DB Updated'; valueInput.value = 'updated-secret-value'; saveButton.click(); await flush(); if (!records.some((record) => record.id === 'client-a.db' && record.title === 'Client A DB Updated')) throw new Error('secret edit did not persist'); const deleteButton = walk(container, (node) => node.getAttribute && node.getAttribute('data-secret-delete') === 'client-a.db'); if (!deleteButton) throw new Error('delete button missing'); deleteButton.click(); await flush(); if (!deleted.includes('client-a.db')) throw new Error('secret delete was not called'); console.log('secrets plugin smoke passed'); })().catch((err) => { console.error(err); process.exit(1); });