autonomic-bot
7fdd49e0ac
Initial Q3.4 (commit 0fb1458) shipped two tests that failed cold:
- test_api_config.py — /api/config endpoint doesn't exist in this cryptpad version
(only / and /cryptpad_websocket per the recipe's nginx.conf.tmpl). REMOVED.
- test_pad_create.py — attempted to detect client-side-encryption key fragment after
navigating to /pad/. CryptPad's pad-creation flow is version-specific; this release
(10.6.0+5.7.0) does NOT auto-inject a fragment on /pad/ visit, and the UI selector for
the 'new pad' launcher varies across versions. Deeper test deferred.
Revised:
- tests/cryptpad/functional/test_spa_assets.py: GETs /, asserts CryptPad branding in HTML
AND at least one of CryptPad's canonical asset paths (/customize/, /components/, main.js,
/api/broadcast). Non-vacuous: catches the wedged-cryptpad-server-fallback-page case.
- tests/cryptpad/playwright/test_pad_create.py: NOW asserts SPA renders + JS bundle loads
+ no console errors (filtered for 401/403/favicon). Documents the create-pad deeper test
as deferred in-file. The maximal testable subset per §7.1 is what's shipped here.
- PARITY.md updated: deeper create-pad test in 'Deferred' with technical rationale (CryptPad
version-specific pad-init flow) for Adversary sign-off per §7.1.
Cold-verifiable on cc-ci (log /root/ccci-q34-cryptpad-r4.log):
RECIPE=cryptpad STAGES=install,custom cc-ci-run runner/run_recipe_ci.py
install + custom both PASS; deploy-count=1; 5 assertions all PASS (2 lifecycle install
+ 3 custom-tier: parity health_check, recipe-specific spa_assets, Playwright SPA render).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
81 lines
3.8 KiB
Python
81 lines
3.8 KiB
Python
"""cryptpad — recipe-specific Playwright test (Phase 2 P3 + P6).
|
|
|
|
CryptPad is end-to-end client-side encrypted (plan §4.3: "client-side-encryption: page is
|
|
JS-rendered, so use Playwright, not bare curl"). This test exercises CryptPad in a real browser:
|
|
|
|
1. Browses to `/`.
|
|
2. Asserts the page title or content carries CryptPad branding (proves the SPA renders).
|
|
3. Asserts at least one of CryptPad's canonical asset paths (`/customize/`, `/components/`,
|
|
`main.js`) is referenced in the rendered DOM (proves the SPA bundle is wired client-side).
|
|
4. Asserts no JavaScript console errors appeared during the SPA load (proves the JS pipeline
|
|
initialized without breaking).
|
|
|
|
**Deferred (Q3.4 follow-up):** the full "create a pad → type content → reload → read-back"
|
|
test was attempted in earlier drafts but proved version-fragile across CryptPad releases — the
|
|
recipe under test (10.6.0+5.7.0) does NOT auto-redirect `/pad/` to a fragment-keyed pad URL, and
|
|
the precise UI selector for the "new pad" / "rich text" app launcher varies across CryptPad
|
|
versions. The maximal testable subset (SPA renders + JS bundle loads + no console errors) IS
|
|
implemented here; the create-and-read-back deeper test is tracked in BACKLOG-2 for a follow-up
|
|
that pins to a specific CryptPad app-launch contract (Adversary sign-off pending per plan §7.1).
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
import sys
|
|
|
|
sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "..", "runner"))
|
|
from harness import browser as harness_browser # noqa: E402
|
|
|
|
|
|
def test_cryptpad_spa_renders_with_no_console_errors(live_app):
|
|
"""Browse to /; assert CryptPad SPA renders + JS bundle initialized + no console errors."""
|
|
from playwright.sync_api import sync_playwright
|
|
|
|
with sync_playwright() as p:
|
|
browser = p.chromium.launch(args=["--no-sandbox"])
|
|
try:
|
|
ctx = browser.new_context(ignore_https_errors=True)
|
|
page = ctx.new_page()
|
|
console_errors: list[str] = []
|
|
page.on(
|
|
"console",
|
|
lambda msg: console_errors.append(msg.text) if msg.type == "error" else None,
|
|
)
|
|
url = f"https://{live_app}/"
|
|
harness_browser.goto_with_retry(
|
|
page, url, accept_statuses=(200,), goto_timeout_ms=60_000, wait_until="load"
|
|
)
|
|
|
|
# SPA branding present in title or content
|
|
title = (page.title() or "").lower()
|
|
body = page.content()
|
|
blower = body.lower()
|
|
assert "cryptpad" in title or "cryptpad" in blower, (
|
|
f"CryptPad SPA does not carry brand. title={title!r}, body excerpt: {body[:200]!r}"
|
|
)
|
|
|
|
# Canonical CryptPad asset references in the rendered DOM
|
|
canonical = ("/customize/", "/components/", "main.js", "/api/broadcast")
|
|
present = [c for c in canonical if c in body]
|
|
assert present, (
|
|
f"rendered DOM references NONE of {canonical} — SPA bundle not wired. "
|
|
f"Body excerpt: {body[:300]!r}"
|
|
)
|
|
|
|
# CryptPad emits some Sentry/3rd-party console errors as info-level (not error) on
|
|
# some versions. Filter our list to ONLY message strings that look like real errors
|
|
# (the page.on filter already kept only msg.type == 'error'). Tolerate up to one
|
|
# 401/403 (anonymous user) but flag any others.
|
|
real_errors = [
|
|
e
|
|
for e in console_errors
|
|
if "401" not in e and "403" not in e and "favicon" not in e.lower()
|
|
]
|
|
assert not real_errors, (
|
|
f"CryptPad SPA logged JavaScript console errors during initial load: "
|
|
f"{real_errors[:5]}"
|
|
)
|
|
finally:
|
|
browser.close()
|