@cats-inc/cats-platform 0.1.10 → 0.2.8

package/scripts/testing/usage-app-smoke-electron.cjs

@@ -0,0 +1,10 @@
+// Isolated Electron fixture: no Desktop supervisor, user profile, or live services.
+const { app, BrowserWindow } = require('electron');
+app.setPath('userData', process.env.CATS_USAGE_SMOKE_PROFILE_DIR);
+app.whenReady().then(async () => {
+  globalThis.testWindow = new BrowserWindow({ width: 1440, height: 1200, show: false,
+    webPreferences: { contextIsolation: true, nodeIntegration: false, sandbox: true, backgroundThrottling: false },
+  });
+  await globalThis.testWindow.loadURL('about:blank');
+});
+app.on('window-all-closed', () => app.quit());

package/scripts/testing/usage-app-smoke-renderer.tsx

@@ -0,0 +1,8 @@
+import { createRoot } from 'react-dom/client';
+import { AppRendererSurface } from '../../src/app/renderer/AppRendererSurface.js';
+import { installCsrfFetch } from '../../src/app/renderer/csrfFetch.js';
+
+installCsrfFetch();
+createRoot(document.getElementById('root')!).render(<AppRendererSurface appId="cats.usage" version={new URLSearchParams(location.search).get('appVersion') ?? ''}
+  title="Usage" locale={new URLSearchParams(location.search).get('locale') ?? 'zh-TW'}
+  onLobby={() => { document.body.textContent = 'Returned to lobby'; }} />);

package/scripts/verify-desktop-app-bundle.mjs

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+// Verify the actual unpacked installer resources and offline App activation.
+// Usage: node scripts/verify-desktop-app-bundle.mjs --release-root release --expect-lock config/desktop-apps.lock.json
+// Alternatively pass --resources <resources-directory>. Uses only a temporary registry;
+// does not start provider CLIs, download Apps, or touch the user's installed state.
+import assert from 'node:assert/strict';
+import { access, mkdtemp, readFile, readdir, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { createRequire } from 'node:module';
+import { resolveDesktopHostConfig } from '../build/desktop/config.js';
+import { buildManagedServiceSpecs } from '../build/desktop/processSupervisor.js';
+import { installBundledApps } from '../build/server/platform/apps/packageInstaller.js';
+import { FileCatsAppRegistry } from '../build/server/platform/apps/registry.js';
+import { readAppRenderer } from '../build/server/platform/apps/renderer.js';
+
+const pins = (apps) => apps.map(({ id, version, sha256 }) => ({ id, version, sha256 }));
+
+export async function verifyDesktopAppBundle(resourcesRoot, expectedLockPath) {
+  const root = await mkdtemp(path.join(tmpdir(), 'cats-packaged-app-check-'));
+  try {
+    const config = resolveDesktopHostConfig({
+      env: {}, packaged: true, resourcesPath: path.resolve(resourcesRoot),
+      userDataDir: path.join(root, 'desktop'), catsHomeDir: path.join(root, 'cats-home'),
+    });
+    const [, platform] = buildManagedServiceSpecs(config, {}, process.platform);
+    const sdk = await import(pathToFileURL(path.join(config.packageRoot, 'packages/app-sdk/package.js')).href);
+    const expected = sdk.parseAppLock(JSON.parse(await readFile(expectedLockPath, 'utf8')));
+    const bundledLock = platform.env.CATS_APP_BUNDLE_PATH;
+    assert.equal(bundledLock, path.join(config.packageRoot, 'official-apps/bundle.lock.json'));
+    assert.equal(config.paths.platformBundledConfigDir, path.join(config.packageRoot, 'config'));
+    await access(config.paths.appEntryScript);
+    await access(path.join(config.paths.platformBundledConfigDir, 'provider-capability-bootstrap.yaml.example'));
+    const bundled = sdk.parseAppLock(JSON.parse(await readFile(bundledLock, 'utf8')));
+    const plan = JSON.parse(await readFile(path.join(resourcesRoot, 'desktop-package-plan.json'), 'utf8'));
+    assert.deepEqual(pins(bundled.apps), pins(expected.apps), 'Installer must contain the selected exact App set');
+    assert.deepEqual(pins(plan.apps ?? []), pins(expected.apps), 'Packaging plan must retain the selected App set');
+    if (expected.apps.length > 0) {
+      assert.equal(createRequire(pathToFileURL(config.paths.appEntryScript)).resolve('#cats-app-package'),
+        path.join(config.packageRoot, 'packages/app-sdk/package.js'), 'Sidecar SDK alias must resolve to its shipped package');
+      if (plan.sidecarLayout?.app === 'bundle') {
+        const entry = await readFile(config.paths.appEntryScript, 'utf8');
+        assert.match(entry, /\bfrom\s+['"]#cats-app-package['"]/u,
+          'Bundled sidecar must retain the SDK package import; inlining relocates browser.js');
+      }
+    }
+    assert.ok((await sdk.readBrowserSdk()).includes('getSnapshot'), 'Shipped browser SDK must be readable');
+    for (const app of bundled.apps) {
+      assert.equal(app.artifact, `${app.id}-${app.version}.catsapp`, 'Startup must use adjacent offline archives');
+      sdk.decodeAppPackage(await readFile(path.join(path.dirname(bundledLock), app.artifact)), app);
+    }
+    // Exercise the same installer invoked before the Platform HTTP server starts.
+    // These compiled modules come from this build; bytes and SDK above come from
+    // the actual installer resources, including bundled-sidecar builds.
+    await installBundledApps(config.paths.appStatePath, bundledLock);
+    await installBundledApps(config.paths.appStatePath, bundledLock);
+    const registry = new FileCatsAppRegistry({ registryPath: path.join(config.paths.platformDir, 'apps/registry.json') });
+    const installed = await registry.listInstalledApps();
+    assert.equal(installed.length, expected.apps.length);
+    for (const app of installed) {
+      assert.equal(app.enabled, true);
+      assert.equal(app.installState, 'enabled');
+      assert.equal(app.packageSource, 'desktop-bundle');
+      assert.ok(app.manifest.contributions.lobbyApps.length > 0);
+      assert.ok((await readAppRenderer(app)).html.includes('<head>'));
+    }
+    return { resources: path.resolve(resourcesRoot), apps: pins(bundled.apps), offlineActivation: true };
+  } finally {
+    await rm(root, { recursive: true, force: true });
+  }
+}
+
+async function findResources(directory, depth = 0) {
+  try {
+    await access(path.join(directory, 'desktop-package-plan.json'));
+    return [directory];
+  } catch { /* Look only through unpacked distribution directories below. */ }
+  if (depth >= 6) return [];
+  const entries = await readdir(directory, { withFileTypes: true });
+  const nested = await Promise.all(entries.filter((entry) => entry.isDirectory()
+    && !['node_modules', 'app-sidecar', 'cats-runtime'].includes(entry.name))
+    .map((entry) => findResources(path.join(directory, entry.name), depth + 1)));
+  return nested.flat();
+}
+
+async function main() {
+  const args = process.argv.slice(2);
+  if (args.includes('--help')) {
+    console.log('Usage: verify-desktop-app-bundle.mjs (--release-root <directory> | --resources <directory>) --expect-lock <lock>');
+    return;
+  }
+  const options = {};
+  for (let index = 0; index < args.length; index += 2) {
+    if (!['--resources', '--release-root', '--expect-lock'].includes(args[index])
+      || !args[index + 1] || args[index + 1].startsWith('--')) throw new Error('Invalid verifier arguments. Use --help.');
+    options[args[index]] = path.resolve(args[index + 1]);
+  }
+  assert.ok(options['--expect-lock'], '--expect-lock is required');
+  assert.ok(Boolean(options['--resources']) !== Boolean(options['--release-root']), 'Select resources or release-root');
+  const roots = options['--resources'] ? [options['--resources']] : await findResources(options['--release-root']);
+  assert.ok(roots.length > 0, 'No unpacked installer resources found');
+  for (const resources of roots) console.log(JSON.stringify(await verifyDesktopAppBundle(resources, options['--expect-lock']), null, 2));
+}
+
+if (path.resolve(process.argv[1] ?? '') === fileURLToPath(import.meta.url)) {
+  main().catch((error) => { console.error(error); process.exitCode = 1; });
+}

package/scripts/windows/Build-DesktopPackage.ps1

@@ -13,6 +13,9 @@
 .PARAMETER OutputDir
     Optional override for the packaging output directory.
 
+.PARAMETER AppsLock
+    App selection lock with exact IDs, versions and SHA-256 hashes.
+
 .EXAMPLE
     .\scripts\windows\Build-DesktopPackage.ps1 -Platform windows
     Build the staged Windows packaging outputs.
@@ -20,7 +23,8 @@
 param(
   [ValidateSet('all', 'windows', 'macos', 'linux')]
   [string]$Platform = 'all',
-  [string]$OutputDir = ''
+  [string]$OutputDir = '',
+  [string]$AppsLock = ''
 )
 
 Set-StrictMode -Version Latest
@@ -34,11 +38,10 @@ try {
   if ($LASTEXITCODE -ne 0) {
     throw "npm run build failed with exit code $LASTEXITCODE"
   }
-  if ($OutputDir) {
-    node .\scripts\package-desktop.mjs --platform $Platform --output-dir $OutputDir
-  } else {
-    node .\scripts\package-desktop.mjs --platform $Platform
-  }
+  $packageArguments = @('.\scripts\package-desktop.mjs', '--platform', $Platform)
+  if ($OutputDir) { $packageArguments += @('--output-dir', $OutputDir) }
+  if ($AppsLock) { $packageArguments += @('--apps-lock', $AppsLock) }
+  node @packageArguments
   if ($LASTEXITCODE -ne 0) {
     throw "desktop packaging failed with exit code $LASTEXITCODE"
   }