3471d40576
CI / changes (pull_request) Successful in 3s
CI / unit (pull_request) Successful in 9s
CI / integration (pull_request) Successful in 16s
CI / ui (pull_request) Successful in 1m4s
CI / conformance (pull_request) Successful in 9s
CI / gate (pull_request) Successful in 0s
CI / deploy (pull_request) Successful in 1m27s
The finished-game export now works identically on every platform: the client mints a signed relative URL (game.export_url) carrying its date locale, IANA time zone and localized non-play labels, resolves it against its own origin and hands it to the platform's native download — Telegram downloadFile, VKWebAppDownloadFile, or a plain browser anchor (also the desktop VK iframe). Both artifacts ride the route: the .gcg text (no more clipboard mode, except the legacy pre-8.0 Telegram fallback) and the PNG of the final position. The PNG is rasterized by a new internal 'renderer' sidecar (node:22-slim + skia-canvas + baked Liberation/Noto Color Emoji fonts) executing the SAME ui/src/lib/gameimage.ts the web project unit-tests, bundled at image build time — one renderer, no drift; the browser no longer draws or delivers bytes itself. The backend rebuilds the render payload from the journal + engine.AlphabetTable, verifies the HMAC (10-minute TTL, BACKEND_EXPORT_SIGN_KEY, constant-time, uniform 404s) on its public group, and streams the artifact as a named attachment; the gateway forwards /dl/* behind the per-IP public rate limiter (caddy @gateway matcher extended — the landing catch-all trap). Deploy: renderer service (compose + prod overlay + roll before backend + prod push list), EXPORT_SIGN_KEY env (TEST_/PROD_ secrets), CI runs the sidecar smoke in the ui job. Docs: ARCHITECTURE export-delivery section, FUNCTIONAL(+_ru), UI_DESIGN, TESTING, deploy/README.
133 lines
5.8 KiB
TypeScript
133 lines
5.8 KiB
TypeScript
import { expect, test, type Page } from './fixtures';
|
||
|
||
// The finished-game export: the history header's 📤 button opens the app's own format
|
||
// chooser (never Telegram's native popup — its callback carries no user activation),
|
||
// and BOTH formats travel the same unified route on every platform: the client mints a
|
||
// signed relative URL (game.export_url), resolves it against its own origin and hands
|
||
// it to the platform's native download — Telegram downloadFile / VKWebAppDownloadFile —
|
||
// or a plain anchor download in a browser. g3 ("vs Rick") is the seeded finished game.
|
||
// The mock gateway returns a shape-faithful /dl/... path; the tests intercept that
|
||
// route and serve bytes, so the download itself is exercised end to end.
|
||
|
||
// A minimal valid 1×1 PNG, hex-decoded without node typings (the e2e tsconfig has none).
|
||
const PNG_HEX =
|
||
'89504e470d0a1a0a0000000d49484452000000010000000108060000001f15c489' +
|
||
'0000000a49444154789c6360000000020001e221bc330000000049454e44ae426082';
|
||
const PNG_BYTES = Uint8Array.from({ length: PNG_HEX.length / 2 }, (_, i) =>
|
||
parseInt(PNG_HEX.slice(i * 2, i * 2 + 2), 16),
|
||
);
|
||
|
||
async function routeDl(page: Page): Promise<void> {
|
||
await page.route('**/dl/**', (route) => {
|
||
const png = route.request().url().includes('/png');
|
||
return route.fulfill({
|
||
status: 200,
|
||
contentType: png ? 'image/png' : 'text/plain; charset=utf-8',
|
||
headers: { 'Content-Disposition': 'attachment' },
|
||
body: png ? PNG_BYTES : '#character-encoding UTF-8\n',
|
||
});
|
||
});
|
||
}
|
||
|
||
async function openFinishedHistory(page: Page): Promise<void> {
|
||
await page.goto('/');
|
||
await page.getByRole('button', { name: /guest/i }).click();
|
||
await page.getByRole('button', { name: /Rick/ }).click();
|
||
await expect(page.locator('[data-cell]').first()).toBeVisible();
|
||
await page.locator('.scoreboard').click();
|
||
await expect(page.getByRole('button', { name: 'Export game' })).toBeVisible();
|
||
}
|
||
|
||
test('the chooser downloads the PNG through the signed URL on a plain browser', async ({ page }) => {
|
||
await routeDl(page);
|
||
await openFinishedHistory(page);
|
||
await page.getByRole('button', { name: 'Export game' }).click();
|
||
|
||
const download = page.waitForEvent('download');
|
||
await page.getByRole('button', { name: 'Image (PNG)' }).click();
|
||
expect((await download).suggestedFilename()).toMatch(/^game-.+\.png$/);
|
||
});
|
||
|
||
test('the chooser downloads the GCG through the same signed-URL route', async ({ page }) => {
|
||
await routeDl(page);
|
||
await openFinishedHistory(page);
|
||
await page.getByRole('button', { name: 'Export game' }).click();
|
||
|
||
const download = page.waitForEvent('download');
|
||
await page.getByRole('button', { name: 'GCG file' }).click();
|
||
expect((await download).suggestedFilename()).toMatch(/^game-.+\.gcg$/);
|
||
});
|
||
|
||
test('inside Telegram both formats go through the native downloadFile dialog', async ({ page }) => {
|
||
// A Telegram stub with downloadFile present (Bot API 8.0): the image option is offered
|
||
// and the artifact is handed to the native download — never an in-webview anchor.
|
||
await page.addInitScript(() => {
|
||
Object.assign(window, {
|
||
Telegram: {
|
||
WebApp: {
|
||
initData: 'query_id=test&user=%7B%22id%22%3A1%7D&auth_date=1&hash=deadbeef',
|
||
initDataUnsafe: {},
|
||
ready() {},
|
||
expand() {},
|
||
downloadFile(params: { url: string; file_name: string }) {
|
||
const w = window as unknown as { __downloads?: { url: string; file_name: string }[] };
|
||
(w.__downloads ??= []).push(params);
|
||
},
|
||
},
|
||
},
|
||
});
|
||
});
|
||
await page.goto('/');
|
||
await expect(page.getByText('Your turn')).toBeVisible(); // auto-authenticated lobby
|
||
await page.getByRole('button', { name: /Rick/ }).click();
|
||
await expect(page.locator('[data-cell]').first()).toBeVisible();
|
||
await page.locator('.scoreboard').click();
|
||
await page.getByRole('button', { name: 'Export game' }).click();
|
||
|
||
await page.getByRole('button', { name: 'Image (PNG)' }).click();
|
||
await expect
|
||
.poll(() =>
|
||
page.evaluate(() => (window as unknown as { __downloads?: { url: string; file_name: string }[] }).__downloads),
|
||
)
|
||
.toHaveLength(1);
|
||
const dl = await page.evaluate(
|
||
() => (window as unknown as { __downloads: { url: string; file_name: string }[] }).__downloads[0],
|
||
);
|
||
// The relative signed path was resolved against the app's own origin — absolute for TG.
|
||
expect(dl.url).toMatch(/^http.+\/dl\/.+\/png\?/);
|
||
expect(dl.file_name).toMatch(/^game-.+\.png$/);
|
||
});
|
||
|
||
test('a legacy Telegram client (no downloadFile) hides the image and copies the GCG', async ({ page }) => {
|
||
await page.addInitScript(() => {
|
||
// Headless engines deny the real clipboard; a permissive stub keeps the legacy
|
||
// copy path deterministic in both browsers.
|
||
Object.defineProperty(navigator, 'clipboard', {
|
||
value: { writeText: async () => {} },
|
||
configurable: true,
|
||
});
|
||
Object.assign(window, {
|
||
Telegram: {
|
||
WebApp: {
|
||
initData: 'query_id=test&user=%7B%22id%22%3A1%7D&auth_date=1&hash=deadbeef',
|
||
initDataUnsafe: {},
|
||
ready() {},
|
||
expand() {},
|
||
},
|
||
},
|
||
});
|
||
});
|
||
await page.goto('/');
|
||
await expect(page.getByText('Your turn')).toBeVisible();
|
||
await page.getByRole('button', { name: /Rick/ }).click();
|
||
await expect(page.locator('[data-cell]').first()).toBeVisible();
|
||
await page.locator('.scoreboard').click();
|
||
await page.getByRole('button', { name: 'Export game' }).click();
|
||
|
||
// No image option without the native download; the GCG stays available (clipboard path).
|
||
await expect(page.getByRole('button', { name: 'GCG file' })).toBeVisible();
|
||
await expect(page.getByRole('button', { name: 'Image (PNG)' })).toHaveCount(0);
|
||
await page.getByRole('button', { name: 'GCG file' }).click();
|
||
await expect(page.getByText('GCG copied to the clipboard.')).toBeVisible();
|
||
});
|