fix: E2E harness respects Chromium executable override and tests WebCrypto directly (audit OBS-02)

@@ -1,7 +1,7 @@11 {22   "manifest_version": 3,33   "name": "Peach Password Manager",4-  "version": "5.0.28",4+  "version": "5.0.29",55   "description": "Zero-knowledge password manager",66   "browser_specific_settings": {77     "gecko": {

@@ -2,7 +2,7 @@22   "manifest_version": 3,33   "minimum_chrome_version": "116",44   "name": "Peach Password Manager",5-  "version": "5.0.28",5+  "version": "5.0.29",66   "description": "Zero-knowledge password manager",77   "action": {88     "default_popup": "src/popup/index.html",

@@ -1,6 +1,6 @@11 {22   "name": "peach",3-  "version": "5.0.28",3+  "version": "5.0.29",44   "description": "Zero-knowledge password manager",55   "license": "GPL-3.0-only",66   "type": "module",

@@ -119,6 +119,7 @@119119     const userDataDir = join(os.tmpdir(), `peach-sec-restart-${Date.now()}`);120120     await fs.mkdir(userDataDir, { recursive: true });121121     const launch = () => chromium.launchPersistentContext(userDataDir, {122+      executablePath: process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH,122123       headless: false,123124       args: [`--load-extension=${EXTENSION_PATH}`, `--disable-extensions-except=${EXTENSION_PATH}`],124125     });@@ -255,13 +256,31 @@255256   test.beforeEach(async () => { ctx = await makeContext(); });256257 257258 258-  test("SECE02 - AES-GCM used for vault encryption", async () => {259-    const aesFiles = await fs.readdir(join(__dirname, "..", "dist-chrome", "assets")).then(f =>260-      f.filter(f => f.includes("aes"))261-    );262-    expect(aesFiles.length).toBeGreaterThan(0);263-    const content = await fs.readFile(join(__dirname, "..", "dist-chrome", "assets", aesFiles[0]), "utf-8");264-    expect(content).toMatch(/AES-GCM|aes-gcm|AESGCM|AES.*GCM/);259+  test("SECE02 - extension page supports AES-GCM WebCrypto", async () => {260+    const extId = await waitForSW(ctx);261+    const page = await ctx.newPage();262+    await page.goto(`chrome-extension://${extId}/src/popup/index.html`);263+    const plaintext = "Peach WebCrypto";264+    const decrypted = await page.evaluate(async (value) => {265+      const key = await crypto.subtle.generateKey(266+        { name: "AES-GCM", length: 256 },267+        true,268+        ["encrypt", "decrypt"],269+      );270+      const iv = crypto.getRandomValues(new Uint8Array(12));271+      const ciphertext = await crypto.subtle.encrypt(272+        { name: "AES-GCM", iv },273+        key,274+        new TextEncoder().encode(value),275+      );276+      const recovered = await crypto.subtle.decrypt(277+        { name: "AES-GCM", iv },278+        key,279+        ciphertext,280+      );281+      return new TextDecoder().decode(recovered);282+    }, plaintext);283+    expect(decrypted).toBe(plaintext);265284     await ctx.close();266285   });267286