chore: reorganize test files into domain-specific subdirectories under tests/

Split the monolithic test directory into three tiers (unit, api, e2e) with a path-mirroring directory structure. Added corresponding Makefile targets (test-unit, test-api, test-e2e) and updated all documentation references (CLAUDE.md, README.md, testing-cicd.html, testing-framework.html, testing-make.html) to reflect the new layout and naming conventions.
2026-06-13 14:32:33 +00:00
parent 014c4c6bb3
commit 43f4011005
268 changed files with 20634 additions and 9206 deletions
@@ -0,0 +1,143 @@
+# retoor <retoor@molodetz.nl>
+
+import asyncio
+import io
+import json
+import time
+import zipfile
+from pathlib import Path
+import requests
+from playwright.sync_api import expect
+from tests.conftest import BASE_URL
+from devplacepy.database import get_table, refresh_snapshot
+from devplacepy.services.jobs import queue
+from devplacepy.services.jobs.zip_service import ZipService
+from tests.conftest import run_async
+_counter_zip_download = [0]
+def _signup_zip_download():
+    _counter_zip_download[0] += 1
+    name = f"zd{int(time.time() * 1000)}{_counter_zip_download[0]}"
+    session = requests.Session()
+    session.post(
+        f"{BASE_URL}/auth/signup",
+        data={
+            "username": name,
+            "email": f"{name}@t.dev",
+            "password": "secret123",
+            "confirm_password": "secret123",
+        },
+        allow_redirects=True,
+    )
+    refresh_snapshot()
+    key = get_table("users").find_one(username=name)["api_key"]
+    return name, key
+def _h_zip_download(key):
+    return {"X-API-KEY": key, "Accept": "application/json"}
+def _create_project_zip_download(key, title):
+    r = requests.post(
+        f"{BASE_URL}/projects/create",
+        headers=_h_zip_download(key),
+        data={
+            "title": title,
+            "description": "zip download test",
+            "project_type": "software",
+            "status": "In Development",
+        },
+    )
+    assert r.status_code == 200, r.text
+    return r.json()["data"]
+def _write_zip_download(key, slug, path, content):
+    r = requests.post(
+        f"{BASE_URL}/projects/{slug}/files/write",
+        headers=_h_zip_download(key),
+        data={"path": path, "content": content},
+        allow_redirects=False,
+    )
+    assert r.status_code in (200, 302), r.text
+def _process_uid(uid):
+    async def drive():
+        svc = ZipService()
+        for _ in range(400):
+            await svc.run_once()
+            refresh_snapshot()
+            job = queue.get_job(uid)
+            if job and job["status"] in ("done", "failed"):
+                return
+            await asyncio.sleep(0.05)
+
+    run_async(drive())
+def _drain_pending():
+    async def drive():
+        svc = ZipService()
+        appeared = False
+        for _ in range(600):
+            refresh_snapshot()
+            pending = [
+                r
+                for r in get_table("jobs").find(kind="zip")
+                if r["status"] in ("pending", "running")
+            ]
+            if pending:
+                appeared = True
+            await svc.run_once()
+            refresh_snapshot()
+            pending = [
+                r
+                for r in get_table("jobs").find(kind="zip")
+                if r["status"] in ("pending", "running")
+            ]
+            if appeared and not pending and not svc._inflight:
+                return
+            await asyncio.sleep(0.05)
+
+    run_async(drive())
+def _cleanup_archives():
+    refresh_snapshot()
+    jobs = get_table("jobs")
+    for row in list(jobs.find(kind="zip")):
+        result = json.loads(row.get("result") or "{}")
+        local_path = result.get("local_path")
+        if local_path:
+            Path(local_path).unlink(missing_ok=True)
+        jobs.delete(uid=row["uid"])
+def _login_zip_download(page, name):
+    page.goto(f"{BASE_URL}/auth/login", wait_until="domcontentloaded")
+    page.fill("#email", f"{name}@t.dev")
+    page.fill("#password", "secret123")
+    page.click("button:has-text('Sign in')")
+    page.wait_for_url("**/feed", timeout=10000, wait_until="domcontentloaded")
+
+
+def test_files_zip_subtree_download(app_server):
+    try:
+        _, key = _signup_zip_download()
+        proj = _create_project_zip_download(key, "Subtree Flow")
+        slug = proj["slug"] or proj["uid"]
+        _write_zip_download(key, slug, "src/app.py", "print(1)\n")
+        _write_zip_download(key, slug, "docs/readme.md", "x")
+        uid = requests.post(
+            f"{BASE_URL}/projects/{slug}/files/zip",
+            headers=_h_zip_download(key),
+            params={"path": "src"},
+        ).json()["uid"]
+        _process_uid(uid)
+        done = requests.get(
+            f"{BASE_URL}/zips/{uid}", headers={"Accept": "application/json"}
+        ).json()
+        dl = requests.get(f"{BASE_URL}{done['download_url']}")
+        names = sorted(zipfile.ZipFile(io.BytesIO(dl.content)).namelist())
+        assert names == ["src/", "src/app.py"]
+    finally:
+        _cleanup_archives()
+
+
+def test_files_zip_rejects_traversal(app_server):
+    _, key = _signup_zip_download()
+    proj = _create_project_zip_download(key, "Traversal Guard")
+    slug = proj["slug"] or proj["uid"]
+    r = requests.post(
+        f"{BASE_URL}/projects/{slug}/files/zip",
+        headers=_h_zip_download(key),
+        params={"path": "../../etc/passwd"},
+    )
+    assert r.status_code == 400, r.text