feat: refactor client + containers to be testable, and add tests

.changeset/fruity-banks-add.md

@@ -0,0 +1,7 @@
+---
+"@cloudflare/sandbox": patch
+---
+
+comprehensive testing infrastructure and client architecture improvements
+
+Establishes complete testing suite (476 tests) with unit, integration, container, and e2e coverage. Refactors monolithic HttpClient into domain-specific clients (Command, File, Process, Port, Git, Utility) with enhanced error handling. Fixes critical port access control vulnerability and enhances preview URL security with mandatory tokens. Solves Build ID problem enabling container testing. Maintains 100% backward compatibility.

.github/workflows/prerelease.yml

@@ -20,17 +20,26 @@ jobs:
           node-version: 20
           cache: "npm"
 
-      - run: npm install
+      - name: Install dependencies
+        run: npm install
 
       - name: Modify package.json version
         run: npx tsx .github/version-script.ts
 
       - name: Resolve workspace dependencies
         run: npx tsx .github/resolve-workspace-versions.ts
 
-      - run: npm run build
-      - run: npm run check
-      - run: CI=true npm run test
+      - name: Run type checking
+        run: npm run typecheck
+
+      - name: Run linting
+        run: npm run check
+
+      - name: Build packages
+        run: npm run build
+
+      - name: Run full test suite
+        run: npm test
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3

.github/workflows/pullrequest.yml

@@ -1,18 +1,12 @@
 name: Pull Request
+permissions:
+  contents: read
 
 on: pull_request
 
 jobs:
-  check:
-    timeout-minutes: 5
-    strategy:
-      matrix:
-        os: [
-            ubuntu-24.04,
-            # windows-latest,
-            # macos-latest,
-          ]
-    runs-on: ${{ matrix.os }}
+  pr-validation:
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
         with:
@@ -23,7 +17,16 @@ jobs:
           node-version: 20
           cache: "npm"
 
-      - run: npm install
-      - run: npm run build
-      - run: npm run check
-      - run: CI=true npm run test
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run quality checks
+        run: |
+          npm run build
+          npm run typecheck
+          npm run check
+
+      - name: Run test suite
+        run: |
+          npm run test:unit
+          npm run test:container

.github/workflows/release.yml

@@ -23,8 +23,20 @@ jobs:
           node-version: 20
           cache: "npm"
 
-      - run: npm install
-      - run: npm run build
+      - name: Install dependencies
+        run: npm install
+
+      - name: Run type checking
+        run: npm run typecheck
+
+      - name: Run linting
+        run: npm run check
+
+      - name: Build packages
+        run: npm run build
+
+      - name: Run full test suite
+        run: npm test
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3

.github/workflows/test.yml

@@ -0,0 +1,147 @@
+name: Test Suite
+permissions:
+  contents: read
+
+on:
+  push:
+    branches: [main, develop]
+
+jobs:
+  quality-checks:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build packages
+        run: npm run build
+
+      - name: Run type checking
+        run: npm run typecheck
+
+      - name: Run linting
+        run: npm run check
+
+  test:
+    runs-on: ubuntu-latest
+    needs: quality-checks
+    strategy:
+      matrix:
+        test-suite: [unit, contracts, container]
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run ${{ matrix.test-suite }} tests
+        run: npm run test:${{ matrix.test-suite }}
+
+  coverage:
+    runs-on: ubuntu-latest
+    needs: test
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Generate coverage report
+        run: npm run test:coverage
+
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v3
+        with:
+          file: ./packages/sandbox/coverage/lcov.info
+          fail_ci_if_error: true
+
+  build:
+    runs-on: ubuntu-latest
+    needs: coverage
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build sandbox package
+        run: npm run build
+        working-directory: packages/sandbox
+
+      - name: Cache build artifacts
+        uses: actions/cache/save@v4
+        with:
+          path: |
+            packages/sandbox/dist
+            packages/sandbox/node_modules
+          key: build-${{ github.sha }}-${{ hashFiles('**/package-lock.json') }}
+
+      - name: Build Docker image
+        run: npm run docker:local
+        working-directory: packages/sandbox
+
+  example-test:
+    runs-on: ubuntu-latest
+    needs: build
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+
+      - name: Restore build artifacts
+        uses: actions/cache/restore@v4
+        with:
+          path: |
+            packages/sandbox/dist
+            packages/sandbox/node_modules
+          key: build-${{ github.sha }}-${{ hashFiles('**/package-lock.json') }}
+          fail-on-cache-miss: true
+
+      - name: Install root dependencies
+        run: npm ci
+
+      - name: Test example application
+        run: |
+          npm ci
+          npm run build
+        working-directory: examples/basic