Implement e2e tests

test/e2e/pip.e2e.spec.js

@@ -0,0 +1,71 @@
+import { describe, it, before, beforeEach, afterEach } from "node:test";
+import { DockerTestContainer } from "./DockerTestContainer.js";
+import assert from "node:assert";
+
+// Note: These tests require Docker. If Docker isn't available locally,
+// they will be skipped by the runner or fail to build the image.
+describe("E2E: pip coverage", () => {
+  let container;
+
+  before(async () => {
+    DockerTestContainer.buildImage();
+  });
+
+  beforeEach(async () => {
+    // Run a new Docker container for each test
+    container = new DockerTestContainer();
+    await container.start();
+
+    const installationShell = await container.openShell("zsh");
+    await installationShell.runCommand("safe-chain setup");
+  });
+
+  afterEach(async () => {
+    // Stop and clean up the container after each test
+    if (container) {
+      await container.stop();
+      container = null;
+    }
+  });
+
+  it(`safe-chain successfully installs safe packages with pip3`, async () => {
+    const shell = await container.openShell("zsh");
+    const result = await shell.runCommand("pip3 install requests");
+
+    assert.ok(
+      result.output.includes("no malicious packages found."),
+      `Output did not include expected text. Output was:\n${result.output}`
+    );
+  });
+
+  it(`pip3 download works with safe-chain proxy`, async () => {
+    const shell = await container.openShell("zsh");
+    const result = await shell.runCommand("pip3 download requests");
+
+    assert.ok(
+      result.output.includes("no malicious packages found."),
+      `Output did not include expected text. Output was:\n${result.output}`
+    );
+  });
+
+  it(`pip3 wheel works with safe-chain proxy`, async () => {
+    const shell = await container.openShell("zsh");
+    const result = await shell.runCommand("pip3 wheel requests");
+
+    assert.ok(
+      result.output.includes("no malicious packages found."),
+      `Output did not include expected text. Output was:\n${result.output}`
+    );
+  });
+
+  it(`pip3 install --dry-run is respected by scanner`, async () => {
+    const shell = await container.openShell("zsh");
+    const result = await shell.runCommand("pip3 install --dry-run requests");
+
+    // Scanner intentionally skips when --dry-run is present for install
+    assert.ok(
+      result.output.includes("no malicious packages found."),
+      `Output did not include expected text. Output was:\n${result.output}`
+    );
+  });
+});