v0.3.15-pre.005

crates/ksp-app-raw-transaction-ingest-desk/tests/desktop_security.rs

@@ -0,0 +1,72 @@
+// file: crates/ksp-app-raw-transaction-ingest-desk/tests/desktop_security.rs
+// version: 1
+
+//! Desktop security canaries for the Raw Transaction Ingest Desk scaffold.
+
+#![forbid(unsafe_code)]
+#![deny(unreachable_pub)]
+#![warn(missing_docs)]
+
+fn app_root() -> std::path::PathBuf {
+    return std::path::PathBuf::from(env!("CARGO_MANIFEST_DIR"));
+}
+
+fn read_text(path: &std::path::Path) -> String {
+    let source = std::fs::read_to_string(path);
+    assert!(source.is_ok(), "unable to read {}", path.display());
+    return match source {
+        std::result::Result::Ok(value) => value,
+        std::result::Result::Err(_) => String::new(),
+    };
+}
+
+fn collect_typescript(root: &std::path::Path, files: &mut std::vec::Vec<std::path::PathBuf>) {
+    let entries = std::fs::read_dir(root);
+    if let std::result::Result::Ok(entries) = entries {
+        for entry in entries.flatten() {
+            let path = entry.path();
+            if path.is_dir() {
+                collect_typescript(path.as_path(), files);
+            } else if path.extension().and_then(std::ffi::OsStr::to_str) == std::option::Option::Some("ts") {
+                files.push(path);
+            }
+        }
+    }
+}
+
+#[test]
+fn pre_005_capability_surface_is_core_plus_tracing_only() {
+    let capability = read_text(app_root().join("capabilities/default.json").as_path());
+    assert!(capability.contains("\"core:default\""));
+    assert!(capability.contains("\"tracing:default\""));
+    for forbidden in ["dialog:", "fs:", "http:", "shell:"] {
+        assert!(!capability.contains(forbidden));
+    }
+}
+
+#[test]
+fn pre_005_frontend_has_no_network_persistence_or_native_dialog_surface() {
+    let mut files = std::vec::Vec::new();
+    collect_typescript(app_root().join("frontend/ts").as_path(), &mut files);
+    assert!(!files.is_empty());
+    for path in files {
+        let source = read_text(path.as_path());
+        for forbidden in ["fetch(", "XMLHttpRequest", "localStorage", "sessionStorage", "window.alert(", "window.confirm(", "window.prompt("] {
+            assert!(!source.contains(forbidden), "{} contains forbidden frontend surface {forbidden}", path.display());
+        }
+    }
+}
+
+#[test]
+fn pre_005_frontend_tracing_is_control_and_command_oriented_only() {
+    let main = read_text(app_root().join("frontend/ts/main.ts").as_path());
+    assert!(main.contains("frontend control clicked"));
+    assert!(main.contains("navigation tab clicked"));
+    assert!(main.contains("runtime status refresh requested"));
+    assert!(main.contains("route foundation refresh requested"));
+    let invoke = read_text(app_root().join("frontend/ts/invoke.ts").as_path());
+    assert!(invoke.contains("Frontend IPC command requested"));
+    for forbidden in ["apiKey", "authorization", "connectionUri", "endpointUrl", "sourceKey", "rawTransaction", "transactionPayload"] {
+        assert!(!main.contains(forbidden), "frontend contains forbidden sensitive marker {forbidden}");
+    }
+}