content.message-routing.test.ts

1// @vitest-environment jsdom2//3// Test File 4 — index.ts message routing (T-M01–T-M13).4//5// index.ts registers a single chrome.runtime.onMessage listener that routes6// SUMMON_AUTOFILL (keyboard shortcut / toolbar button), VAULT_UNLOCKED (retry7// after unlock), PING, GET_SITE_PASSWORD_POLICY, and the passkey-toast control8// messages. The harness captures every registered listener; we invoke them with9// a spy sendResponse and a same-extension sender, then assert the routed effect.10//11// Where the brief assumed messages that this listener does not own12// (DISMISS_AUTOFILL, FILL_AND_SUBMIT), the cases are documented rather than13// faked.1415import { vi } from "vitest";1617const { predictBatch, dismissSpy } = vi.hoisted(() => ({18  predictBatch: vi.fn(() => Promise.resolve([] as unknown[])),19  dismissSpy: vi.fn(),20}));2122vi.mock("./inject", () => ({23  injectFieldIcon: vi.fn(() => vi.fn()),24  showAutofillSelector: vi.fn(() => dismissSpy),25  showTOTPSelector: vi.fn(() => dismissSpy),26  showCardSelector: vi.fn(() => dismissSpy),27  showRememberSiteToast: vi.fn(),28  showPasskeyAvailable: vi.fn(),29  showPasskeyProGate: vi.fn(),30  showPasskeyRegistrationOffer: vi.fn(),31}));32vi.mock("./content-ml-detector", () => ({33  contentMLDetector: { predictBatch },34}));3536import { afterEach, beforeEach, describe, expect, it } from "vitest";37import "./_setup";38import { resetChromeMock, setMessageResponder, messageListeners, createLoginForm, makeInput } from "./_setup";39import "./index"; // registers the onMessage listener at import time40import * as inject from "./inject";4142const showSelector = inject.showAutofillSelector as unknown as ReturnType<typeof vi.fn>;43const showPasskeyProGate = inject.showPasskeyProGate as unknown as ReturnType<typeof vi.fn>;44const SELF_SENDER = { id: "peach-test-extension-id" };45const ENTRIES = [{ id: "e1", title: "Acme", username: "alice" }];4647// Deliver a message to every registered onMessage listener; return the48// sendResponse spy so the test can assert the reply.49function dispatch(msg: any, sender: any = SELF_SENDER) {50  const sendResponse = vi.fn();51  for (const l of messageListeners) l(msg, sender, sendResponse);52  return sendResponse;53}5455function withEntries(): void {56  setMessageResponder((msg) =>57    msg.type === "AUTOFILL_QUERY" ? { ok: true, data: ENTRIES } : { ok: true, data: null }58  );59}6061let urlCounter = 0;62beforeEach(async () => {63  try { history.pushState({}, "", `/m${++urlCounter}`); } catch { /* ignore */ }64  document.body.innerHTML = "";65  await new Promise((r) => setTimeout(r, 0));66  resetChromeMock();67  showSelector.mockClear();68  showPasskeyProGate.mockClear();69  predictBatch.mockReset();70  predictBatch.mockReturnValue(Promise.resolve([]));71});7273afterEach(async () => {74  await new Promise((r) => setTimeout(r, 0));75});7677describe("T-M01–T-M02: SUMMON_AUTOFILL", () => {78  // T-M01: the shortcut on a login form opens the selector for the focused field.79  it("T-M01: SUMMON_AUTOFILL with a focused login field → selector opens", async () => {80    const { password } = createLoginForm();81    password.focus();82    withEntries();83    const send = dispatch({ type: "SUMMON_AUTOFILL", source: "shortcut" });84    await vi.waitFor(() => expect(showSelector).toHaveBeenCalled());85    expect(send).toHaveBeenCalled(); // listener acknowledged86  });8788  // T-M02: the shortcut on a page with no login form must not crash and must not89  // open the credential selector (it falls back to the search palette).90  it("T-M02: SUMMON_AUTOFILL with no login form → no crash, no credential selector", () => {91    expect(() => dispatch({ type: "SUMMON_AUTOFILL", source: "shortcut" })).not.toThrow();92    expect(showSelector).not.toHaveBeenCalled();93  });94});9596describe("T-M03–T-M05: VAULT_UNLOCKED", () => {97  // T-M03: after unlock, the pending field's interaction is retried.98  it("T-M03: VAULT_UNLOCKED with a pending anchor → re-triggers and reopens", async () => {99    const { password } = createLoginForm();100    password.focus();101    withEntries();102    dispatch({ type: "SUMMON_AUTOFILL", source: "shortcut" }); // opens → sets currentAnchorField103    await vi.waitFor(() => expect(showSelector).toHaveBeenCalled());104    showSelector.mockClear();105106    dispatch({ type: "VAULT_UNLOCKED" });107    await vi.waitFor(() => expect(showSelector).toHaveBeenCalled()); // reopened at the same field108  });109110  // T-M05: VAULT_UNLOCKED with nothing pending and no focused field is a no-op —111  // it must not throw or open anything.112  it("T-M05: VAULT_UNLOCKED with no pending interaction → no-op, no crash", async () => {113    (document.activeElement as HTMLElement | null)?.blur?.();114    const send = dispatch({ type: "VAULT_UNLOCKED" });115    await new Promise((r) => setTimeout(r, 20));116    expect(send).toHaveBeenCalledWith({ ok: true });117    expect(showSelector).not.toHaveBeenCalled();118  });119120  // T-M04: when a passkey unlock is in flight (passkeySummonActive), VAULT_UNLOCKED121  // must NOT re-trigger autofill — the passkey toast owns the next step. We arm122  // passkeySummonActive via the passkey-unlock summon path, then assert the123  // unlock only dismisses (no fresh credential selector). Ordered last in the124  // group because the VAULT_UNLOCKED it sends also clears the flag.125  it("T-M04: VAULT_UNLOCKED while passkeySummonActive → no re-trigger", async () => {126    // The passkey-unlock branch only fires when there is NO credential form on127    // the page (vault locked mid-passkey-GET); it anchors the locked prompt on128    // whatever element is focused (typically the sign-in button).129    const anchor = makeInput({ type: "text", name: "search-box", placeholder: "Search" });130    anchor.focus();131    dispatch({ type: "SUMMON_AUTOFILL", source: "passkey-unlock" }); // sets passkeySummonActive132    await vi.waitFor(() => expect(showSelector).toHaveBeenCalled());133    showSelector.mockClear();134135    dispatch({ type: "VAULT_UNLOCKED" }); // passkey branch: dismiss only, no reopen136    await new Promise((r) => setTimeout(r, 20));137    expect(showSelector).not.toHaveBeenCalled();138  });139});140141describe("T-M08–T-M10: PING, passkey gate, robustness", () => {142  // PING is the liveness probe the background uses to confirm the content script143  // is injected.144  it("PING → sendResponse({ ok: true })", () => {145    const send = dispatch({ type: "PING" });146    expect(send).toHaveBeenCalledWith({ ok: true });147  });148149  // GET_SITE_PASSWORD_POLICY returns the scraped policy for the generator.150  it("GET_SITE_PASSWORD_POLICY → returns a policy object", () => {151    document.body.innerHTML = '<input type="password" maxlength="32" />';152    const send = dispatch({ type: "GET_SITE_PASSWORD_POLICY" });153    expect(send).toHaveBeenCalledTimes(1);154    const arg = send.mock.calls[0]![0];155    expect(arg.ok).toBe(true);156    expect(arg.data.maxLength).toBe(32);157  });158159  // PASSKEY_PRO_GATE surfaces the upgrade prompt (State 11).160  it("PASSKEY_PRO_GATE → showPasskeyProGate called", () => {161    dispatch({ type: "PASSKEY_PRO_GATE" });162    expect(showPasskeyProGate).toHaveBeenCalled();163  });164165  // T-M09: an unknown message type falls through harmlessly — no throw, no166  // unhandled rejection.167  it("T-M09: unknown message type → handled gracefully", () => {168    expect(() => dispatch({ type: "TOTALLY_UNKNOWN_MESSAGE" })).not.toThrow();169    expect(showSelector).not.toHaveBeenCalled();170  });171172  // T-M10: a foreign-extension sender (sender.id mismatch) is ignored entirely —173  // a security boundary, not just robustness.174  it("T-M10: message from a foreign sender id is ignored", () => {175    const send = dispatch({ type: "PING" }, { id: "some-other-extension" });176    expect(send).not.toHaveBeenCalled();177  });178});