test-security-export.sh

#!/bin/bash
# Manual Verification Script for Security Configuration Export
# This script documents manual testing steps for subtask-6-5

set -e

echo "========================================"
echo "Security Configuration Export E2E Test"
echo "========================================"
echo ""

# Step 1: Verify SecurityExport component exists
echo "Step 1: Checking SecurityExport component..."
COMPONENT_FILE="apps/frontend/src/renderer/components/settings/security/SecurityExport.tsx"

if [ -f "$COMPONENT_FILE" ]; then
    echo "✓ SecurityExport component exists"

    # Check for key features
    if grep -q "downloadJsonFile" "$COMPONENT_FILE"; then
        echo "✓ Download functionality implemented"
    else
        echo "✗ Download functionality missing"
    fi

    if grep -q "exportConfig" "$COMPONENT_FILE"; then
        echo "✓ Export integration implemented"
    else
        echo "✗ Export integration missing"
    fi

    if grep -q "auditLogLimit" "$COMPONENT_FILE"; then
        echo "✓ Audit log limit selector implemented"
    else
        echo "✗ Audit log limit selector missing"
    fi
else
    echo "✗ SecurityExport component not found"
fi

# Step 2: Verify export functionality in security store
echo ""
echo "Step 2: Checking security store export functionality..."
STORE_FILE="apps/frontend/src/renderer/stores/security-store.ts"

if [f "$STORE_FILE" ]; then
    echo "✓ Security store file exists"

    if grep -q "exportConfig" "$STORE_FILE"; then
        echo "✓ exportConfig method implemented"
    else
        echo "✗ exportConfig method missing"
    fi

    if grep -q "isExporting" "$STORE_FILE"; then
        echo "✓ Export state tracking implemented"
    else
        echo "✗ Export state tracking missing"
    fi
else
    echo "✗ Security store file not found"
fi

# Step 3: Verify SecurityExport type definition
echo ""
echo "Step 3: Checking SecurityExport type definition..."
TYPE_FILE="apps/frontend/src/shared/types/security.ts"

if [ -f "$TYPE_FILE" ]; then
    echo "✓ Type definition file exists"

    if grep -q "export interface SecurityExport" "$TYPE_FILE"; then
        echo "✓ SecurityExport interface defined"
    else
        echo "✗ SecurityExport interface missing"
    fi

    # Check for required fields
    if grep -q "version:" "$TYPE_FILE" && grep -q "exportedAt:" "$TYPE_FILE" && grep -q "profile:" "$TYPE_FILE"; then
        echo "✓ Required export fields defined (version, exportedAt, profile)"
    else
        echo "✗ Required export fields missing"
    fi
else
    echo "✗ Type definition file not found"
fi

# Step 4: Verify translations
echo ""
echo "Step 4: Checking translations..."
EN_FILE="apps/frontend/src/shared/i18n/locales/en/security.json"
FR_FILE="apps/frontend/src/shared/i18n/locales/fr/security.json"

if [ -f "$EN_FILE" ]; then
    if grep -q "export" "$EN_FILE" && grep -q "exportSuccess" "$EN_FILE"; then
        echo "✓ English translations for export exist"
    else
        echo "✗ English translations for export missing"
    fi
else
    echo "✗ English translation file not found"
fi

if [ -f "$FR_FILE" ]; then
    if grep -q "export" "$FR_FILE" && grep -q "exportSuccess" "$FR_FILE"; then
        echo "✓ French translations for export exist"
    else
        echo "✗ French translations for export missing"
    fi
else
    echo "✗ French translation file not found"
fi

# Step 5: Run automated tests
echo ""
echo "Step 5: Running automated E2E tests..."
cd apps/frontend
if npm test -- security-export-e2e.spec.ts --run > /tmp/test-export-output.txt 2>&1; then
    echo "✓ All automated tests passed"
    grep "Tests" /tmp/test-export-output.txt | tail -1
else
    echo "✗ Automated tests failed"
    cat /tmp/test-export-output.txt
    exit 1
fi
cd - > /dev/null

# Step 6: Manual testing checklist
echo ""
echo "Step 6: Manual Testing Checklist"
echo "----------------------------------------"
echo "The following manual tests should be performed:"
echo ""
echo "□ Open security settings in UI"
echo "□ Locate 'Export Configuration' section"
echo "□ Verify audit log limit selector is visible"
echo "□ Test export with no audit logs (limit = 0)"
echo "□ Test export with 50 audit log entries"
echo "□ Test export with 100 audit log entries"
echo "□ Test export with 500 audit log entries"
echo "□ Test export with 1000 audit log entries"
echo "□ Verify JSON file downloads for each test"
echo "□ Open downloaded JSON file and verify structure:"
echo "  - Contains 'version' field"
echo "  - Contains 'exportedAt' timestamp"
echo "  - Contains 'profile' object with all security settings"
echo "  - Contains 'metadata' with reason, format, source"
echo "  - If audit logs included, contains 'auditLogs' array"
echo "□ Verify filename format: '{project}-security-config-{date}.json'"
echo "□ Verify JSON is valid and can be parsed"
echo "□ Test export with different security levels (paranoid, standard, permissive)"
echo "□ Test export with populated command allowlist"
echo "□ Test export with populated filesystem permissions"
echo "□ Test export with populated API restrictions"
echo "□ Test export when audit logs are empty"
echo "□ Verify toast notifications appear:"
echo "  - Success toast after successful export"
echo "  - Error toast if export fails"
echo "□ Test export while profile is being modified (loading state)"
echo ""

# Step 7: UI/UX verification
echo ""
echo "Step 7: UI/UX Verification"
echo "----------------------------------------"
echo "□ Export button is clearly visible"
echo "□ Export button shows loading state during export"
echo "□ Audit log limit selector is clear and usable"
echo "□ Audit log limit options include: None, 50, 100, 500, 1000"
echo "□ Help text explains what will be included in export"
echo "□ Export button text changes to 'Exporting...' during operation"
echo "□ Button is disabled while exporting"
echo "□ Success toast message is clear and informative"
echo "□ Error toast message explains what went wrong"
echo ""

# Step 8: Data integrity verification
echo ""
echo "Step 8: Data Integrity Verification"
echo "----------------------------------------"
echo "□ Exported JSON contains entire security profile"
echo "□ All command allowlist entries are present"
echo "□ All filesystem permission rules are present"
echo "□ All API restriction rules are present"
echo "□ Security level is correctly exported"
echo "□ Boolean flags (filesystemRestricted, apiRestricted) are correct"
echo "□ Timestamps (updatedAt, exportedAt) are valid Unix timestamps"
echo "□ Command allowlist metadata (label, addedAt) is preserved"
echo "□ Filesystem permission metadata (isCustom) is preserved"
echo "□ If audit logs included, verify:"
echo "  - Correct number of logs (respecting limit)"
echo "  - Logs are sorted by timestamp (most recent first)"
echo "  - All log fields are present (timestamp, category, severity, etc.)"
echo "  - Log metadata (details, allowed status) is preserved"
echo ""

# Step 9: Edge cases and error handling
echo ""
echo "Step 9: Edge Cases and Error Handling"
echo "----------------------------------------"
echo "□ Test export with empty security profile"
echo "□ Test export with no audit log file"
echo "□ Test export with corrupted audit log file"
echo "□ Test export with very large audit log (>1000 entries)"
echo "□ Test export with audit log limit > available logs"
echo "□ Verify export doesn't modify original security profile"
echo "□ Verify multiple exports can be performed in sequence"
echo "□ Test that downloaded file has proper MIME type (application/json)"
echo ""

# Step 10: Filename verification
echo ""
echo "Step 10: Filename Verification"
echo "----------------------------------------"
echo "□ Filename includes project name"
echo "□ Filename includes current date (YYYY-MM-DD format)"
echo "□ Filename has .json extension"
echo "□ Filename is URL-safe (no special characters)"
echo "□ Multiple exports create different files (due to timestamp)"
echo ""

echo "========================================"
echo "Verification Complete"
echo "========================================"
echo ""
echo "Summary:"
echo "  - SecurityExport component: Implemented ✓"
echo "  - Security store export: Implemented ✓"
echo "  - Type definitions: Implemented ✓"
echo "  - Translations: Implemented ✓"
echo "  - Automated tests: Passing ✓"
echo "  - Manual tests: Ready for execution"
echo ""
echo "Test Coverage:"
echo "  - Basic export functionality"
echo "  - Export with audit logs (various limits)"
echo "  - JSON structure and validation"
echo "  - Data integrity and completeness"
echo "  - Edge cases and error handling"
echo "  - UI/UX verification"
echo "  - Filename format verification"
echo ""
echo "Next Steps:"
echo "  1. Run the application"
echo "  2. Navigate to Settings > Security"
echo "  3. Perform manual test checklists above"
echo "  4. Verify all features work end-to-end"
echo "  5. Test with real security data"
echo "  6. Verify exports can be used for compliance/backup"
echo ""