@rover-studio/answer-me 0.1.0-rc.1

package/distribution/npm/skills/answerme/scripts/test-answerme-installation.ps1

@@ -0,0 +1,498 @@
+[CmdletBinding()]
+param(
+    [string]$ResumeInteractionId,
+    [string]$ApiBaseUrl,
+    [switch]$AllowInsecureLoopbackHttpForTest,
+    [string]$CredentialPath = $env:ANSWERME_CREATOR_CREDENTIAL_PATH,
+    [string]$ResultTokenStoreRoot = $env:ANSWERME_RESULT_TOKEN_STORE_ROOT,
+    [switch]$AllowNonDefaultResultTokenStore,
+    [object]$WaitTimeoutSeconds = 300,
+    [object]$EnrollmentWaitTimeoutSeconds = 300,
+    [ValidateRange(1, 60)]
+    [int]$PollSeconds = 5,
+    [switch]$SkipPopup,
+    [switch]$ValidateOnly
+)
+
+$ErrorActionPreference = 'Stop'
+
+$processStartInfoSupport = Join-Path $PSScriptRoot 'windows-process-start-info.ps1'
+if (-not (Test-Path -LiteralPath $processStartInfoSupport -PathType Leaf)) {
+    throw 'The AnswerMe Windows process argument helper is missing.'
+}
+. $processStartInfoSupport
+
+function Write-AnswerMeSelfTestIssue {
+    param(
+        [Parameter(Mandatory = $true)][string]$Stage,
+        [Parameter(Mandatory = $true)][string]$Code,
+        [Parameter(Mandatory = $true)][string]$Message,
+        [Parameter(Mandatory = $true)][int]$ExitCode,
+        [bool]$NetworkCalled = $false,
+        [AllowNull()][object]$Cleanup
+    )
+
+    if ($null -eq $Cleanup) {
+        $Cleanup = [PSCustomObject]@{ attempted = $false; removed = $false }
+    }
+    [PSCustomObject]@{
+        ok = $false
+        status = 'issue'
+        stage = $Stage
+        code = $Code
+        message = $Message
+        networkCalled = $NetworkCalled
+        resultTokenCleanup = $Cleanup
+        cleanupWarning = $null
+    } | ConvertTo-Json -Depth 6 -Compress
+    exit $ExitCode
+}
+
+function Invoke-AnswerMeSelfTestChild {
+    param(
+        [Parameter(Mandatory = $true)][string]$ScriptPath,
+        [Parameter(Mandatory = $true)][object[]]$Arguments,
+        [switch]$AllowEnrollmentEvent,
+        [AllowNull()][Uri]$ResolvedApiBaseUrl
+    )
+
+    $pwshPath = (Get-Process -Id $PID).Path
+    $startInfo = [Diagnostics.ProcessStartInfo]::new()
+    $startInfo.FileName = $pwshPath
+    $startInfo.UseShellExecute = $false
+    $startInfo.CreateNoWindow = $true
+    $startInfo.RedirectStandardOutput = $true
+    $startInfo.RedirectStandardError = $true
+    $startInfo.RedirectStandardInput = $true
+    $acknowledgementToken = $null
+    if ($AllowEnrollmentEvent) {
+        $acknowledgementToken = [Guid]::NewGuid().ToString('N')
+        Set-AnswerMeProcessEnvironmentVariable `
+            -StartInfo $startInfo `
+            -Name 'ANSWERME_INTERNAL_SELFTEST_CREATE_EVENT_ACK' `
+            -Value $acknowledgementToken
+    }
+    Set-AnswerMeProcessArguments `
+        -StartInfo $startInfo `
+        -Arguments (@('-NoLogo', '-NoProfile', '-File', $ScriptPath) + $Arguments)
+
+    $process = [Diagnostics.Process]::new()
+    $process.StartInfo = $startInfo
+    try {
+        if (-not $process.Start()) { throw 'Self-test child process could not be started.' }
+        $stdoutTask = $process.StandardOutput.ReadToEndAsync()
+        $invalidStderr = $false
+        $enrollmentEventCount = 0
+        while ($null -ne ($line = $process.StandardError.ReadLine())) {
+            if ($AllowEnrollmentEvent -and
+                $enrollmentEventCount -eq 0 -and
+                $null -ne $ResolvedApiBaseUrl -and
+                (Test-AnswerMeSelfTestEnrollmentEvent `
+                    -Line $line `
+                    -ResolvedApiBaseUrl $ResolvedApiBaseUrl)) {
+                $enrollmentEventCount += 1
+                [Console]::Error.WriteLine($line)
+                [Console]::Error.Flush()
+                $process.StandardInput.WriteLine($acknowledgementToken)
+                $process.StandardInput.Flush()
+            }
+            else {
+                $invalidStderr = $true
+                if ($AllowEnrollmentEvent) {
+                    $process.StandardInput.WriteLine('invalid-event')
+                    $process.StandardInput.Flush()
+                }
+            }
+        }
+        $process.WaitForExit()
+        $text = $stdoutTask.GetAwaiter().GetResult().Trim()
+        $body = $null
+        if (-not [string]::IsNullOrWhiteSpace($text)) {
+            try {
+                $body = $text | ConvertFrom-Json
+            }
+            catch {
+                $body = $null
+            }
+        }
+        return [PSCustomObject]@{
+            exitCode = $process.ExitCode
+            body = $body
+            invalidStderr = $invalidStderr
+            enrollmentEventCount = $enrollmentEventCount
+        }
+    }
+    finally {
+        $process.Dispose()
+    }
+}
+
+function Test-AnswerMeSelfTestResponseFields {
+    param(
+        [AllowNull()][object]$Body,
+        [Parameter(Mandatory = $true)][string[]]$ExpectedFields
+    )
+
+    if ($Body -isnot [PSCustomObject]) { return $false }
+    $actual = @($Body.PSObject.Properties.Name | Sort-Object)
+    $expected = @($ExpectedFields | Sort-Object)
+    return $actual.Count -eq $expected.Count -and
+        -not (Compare-Object -ReferenceObject $expected -DifferenceObject $actual -CaseSensitive)
+}
+
+function Test-AnswerMeSelfTestEnrollmentEvent {
+    param(
+        [Parameter(Mandatory = $true)][string]$Line,
+        [Parameter(Mandatory = $true)][Uri]$ResolvedApiBaseUrl
+    )
+
+    try {
+        $eventBody = $Line | ConvertFrom-Json
+    }
+    catch {
+        return $false
+    }
+    if (-not (Test-AnswerMeSelfTestResponseFields `
+            -Body $eventBody `
+            -ExpectedFields @('event', 'stage', 'verificationUrl')) -or
+        $eventBody.event -isnot [string] -or
+        [string]$eventBody.event -cne 'answerme.creator-enrollment.verification-url' -or
+        $eventBody.stage -isnot [string] -or
+        [string]$eventBody.stage -cne 'verification-handoff' -or
+        $eventBody.verificationUrl -isnot [string]) {
+        return $false
+    }
+
+    $eventUri = $null
+    return [Uri]::TryCreate([string]$eventBody.verificationUrl, [UriKind]::Absolute, [ref]$eventUri) -and
+        $eventUri.Scheme.Equals($ResolvedApiBaseUrl.Scheme, [StringComparison]::OrdinalIgnoreCase) -and
+        $eventUri.DnsSafeHost.Equals($ResolvedApiBaseUrl.DnsSafeHost, [StringComparison]::OrdinalIgnoreCase) -and
+        $eventUri.Port -eq $ResolvedApiBaseUrl.Port -and
+        [string]::IsNullOrEmpty($eventUri.UserInfo) -and
+        [string]::IsNullOrEmpty($eventUri.Fragment)
+}
+
+function Get-AnswerMeSelfTestExpectedApiBaseUrl {
+    if (-not (Get-Command Resolve-AnswerMeApiBaseUrl -ErrorAction SilentlyContinue)) {
+        $policyPath = Join-Path $PSScriptRoot 'answerme-api-base-url.ps1'
+        if (-not (Test-Path -LiteralPath $policyPath -PathType Leaf)) { return $null }
+        try { . $policyPath } catch { return $null }
+    }
+
+    $candidate = $ApiBaseUrl
+    $credential = $null
+    if ([string]::IsNullOrWhiteSpace($candidate)) {
+        $candidateCredentialPath = $CredentialPath
+        if ([string]::IsNullOrWhiteSpace($candidateCredentialPath) -and
+            [Environment]::OSVersion.Platform -eq [PlatformID]::Win32NT) {
+            $localAppData = [Environment]::GetFolderPath([Environment+SpecialFolder]::LocalApplicationData)
+            if (-not [string]::IsNullOrWhiteSpace($localAppData)) {
+                $candidateCredentialPath = Join-Path $localAppData 'AnswerMe\creator-credential.clixml'
+            }
+        }
+        if (-not [string]::IsNullOrWhiteSpace($candidateCredentialPath) -and
+            (Test-Path -LiteralPath $candidateCredentialPath -PathType Leaf)) {
+            try {
+                $credential = Import-Clixml -LiteralPath $candidateCredentialPath
+                if ($credential -is [PSCredential]) { $candidate = $credential.UserName }
+            }
+            catch {
+                return $null
+            }
+            finally {
+                $credential = $null
+            }
+        }
+    }
+    if ([string]::IsNullOrWhiteSpace($candidate)) { return $null }
+    try {
+        return Resolve-AnswerMeApiBaseUrl `
+            -ApiBaseUrl $candidate `
+            -AllowInsecureLoopbackHttpForTest:$AllowInsecureLoopbackHttpForTest
+    }
+    catch {
+        return $null
+    }
+}
+
+function Get-AnswerMeSelfTestAnswer {
+    param(
+        [Parameter(Mandatory = $true)][object[]]$Answers,
+        [Parameter(Mandatory = $true)][string]$QuestionId,
+        [Parameter(Mandatory = $true)][string[]]$AllowedOptionIds
+    )
+
+    $matches = @($Answers | Where-Object { [string]$_.questionId -ceq $QuestionId })
+    if ($matches.Count -ne 1) {
+        throw "Self-test result must contain exactly one answer for '$QuestionId'."
+    }
+    $answer = $matches[0]
+    $fields = @($answer.PSObject.Properties.Name | Sort-Object)
+    if ($fields.Count -ne 2 -or
+        $fields -notcontains 'questionId' -or
+        $fields -notcontains 'optionId' -or
+        [string]$answer.optionId -cnotin $AllowedOptionIds) {
+        throw "Self-test result contains an invalid answer for '$QuestionId'."
+    }
+    return [string]$answer.optionId
+}
+
+$createScript = Join-Path $PSScriptRoot 'create-answerme.ps1'
+$waitScript = Join-Path $PSScriptRoot 'wait-answerme-result.ps1'
+$cleanupScript = Join-Path $PSScriptRoot 'remove-answerme-result-token.ps1'
+foreach ($requiredScript in @($createScript, $waitScript, $cleanupScript)) {
+    if (-not (Test-Path -LiteralPath $requiredScript -PathType Leaf)) {
+        Write-AnswerMeSelfTestIssue `
+            -Stage 'preflight' `
+            -Code 'self-test-dependency-missing' `
+            -Message 'A required AnswerMe self-test adapter is missing.' `
+            -ExitCode 3
+    }
+}
+
+$template = [ordered]@{
+    schemaVersion = 1
+    type = 'questionnaire'
+    topic = 'AnswerMe 安装自检'
+    intro = '请分别核对页面显示、自动弹出和问题诊断建议。三项答案只用于诊断，不影响安装结果。'
+    questions = @(
+        [ordered]@{
+            id = 'page-display'
+            type = 'single-choice'
+            title = 'AnswerMe 答题页面是否正常显示？'
+            shortLabel = '页面显示'
+            required = $true
+            minSelections = 1
+            maxSelections = 1
+            options = @(
+                [ordered]@{ id = 'displayed'; label = '是，页面正常显示' },
+                [ordered]@{ id = 'not-displayed'; label = '否，页面未正常显示' }
+            )
+            allowCustomAnswer = $false
+        },
+        [ordered]@{
+            id = 'automatic-popup'
+            type = 'single-choice'
+            title = '答题页面是否自动弹出并置于前台？'
+            shortLabel = '自动弹出'
+            required = $true
+            minSelections = 1
+            maxSelections = 1
+            options = @(
+                [ordered]@{ id = 'foreground'; label = '是，已自动弹出并置前' },
+                [ordered]@{ id = 'not-foreground'; label = '否，未自动弹出或未置前' }
+            )
+            allowCustomAnswer = $false
+        },
+        [ordered]@{
+            id = 'diagnostic-advice'
+            type = 'single-choice'
+            title = '是否需要生成脱敏诊断报告？正常使用请选择“不生成诊断报告”。'
+            shortLabel = '诊断建议'
+            required = $true
+            minSelections = 1
+            maxSelections = 1
+            options = @(
+                [ordered]@{ id = 'do-not-recommend'; label = '不生成诊断报告' },
+                [ordered]@{ id = 'recommend-redacted'; label = '建议生成脱敏诊断报告' }
+            )
+            allowCustomAnswer = $false
+        }
+    )
+    allowAdditionalContext = $false
+    expiresInSeconds = 3600
+    visual = [ordered]@{ theme = 'auto' }
+}
+$templateJson = $template | ConvertTo-Json -Depth 16 -Compress
+
+if ($PSBoundParameters.ContainsKey('ResumeInteractionId')) {
+    Write-AnswerMeSelfTestIssue `
+        -Stage 'preflight' `
+        -Code 'self-test-resume-unsupported' `
+        -Message 'Installation usage validation must create and wait for its own fixed questionnaire.' `
+        -ExitCode 2
+}
+
+if ($ValidateOnly) {
+    $createArguments = @(
+        '-TemplateJson', $templateJson,
+        '-WaitTimeoutSeconds', [string]$WaitTimeoutSeconds,
+        '-EnrollmentWaitTimeoutSeconds', [string]$EnrollmentWaitTimeoutSeconds,
+        '-ValidateOnly'
+    )
+    if (-not [string]::IsNullOrWhiteSpace($ApiBaseUrl)) { $createArguments += @('-ApiBaseUrl', $ApiBaseUrl) }
+    if (-not [string]::IsNullOrWhiteSpace($CredentialPath)) { $createArguments += @('-CredentialPath', $CredentialPath) }
+    if (-not [string]::IsNullOrWhiteSpace($ResultTokenStoreRoot)) { $createArguments += @('-ResultTokenStoreRoot', $ResultTokenStoreRoot) }
+    if ($AllowInsecureLoopbackHttpForTest) { $createArguments += '-AllowInsecureLoopbackHttpForTest' }
+    if ($AllowNonDefaultResultTokenStore) { $createArguments += '-AllowNonDefaultResultTokenStore' }
+    if ($SkipPopup) { $createArguments += '-SkipPopup' }
+    $create = Invoke-AnswerMeSelfTestChild -ScriptPath $createScript -Arguments $createArguments
+    if ($create.invalidStderr) {
+        Write-AnswerMeSelfTestIssue `
+            -Stage 'create' `
+            -Code 'self-test-create-stderr-invalid' `
+            -Message 'The AnswerMe create adapter emitted an untrusted stderr record.' `
+            -ExitCode 4 `
+            -NetworkCalled $false
+    }
+    if ($create.exitCode -ne 0 -or $null -eq $create.body -or $create.body.ok -ne $true) {
+        Write-AnswerMeSelfTestIssue `
+            -Stage 'create' `
+            -Code 'self-test-create-validation-failed' `
+            -Message 'The AnswerMe self-test questionnaire contract could not be validated.' `
+            -ExitCode 4 `
+            -NetworkCalled $false
+    }
+    [PSCustomObject]@{
+        ok = $true
+        status = 'validated'
+        stage = 'preflight'
+        networkCalled = $false
+        resultTokenCleanup = [PSCustomObject]@{ attempted = $false; removed = $false }
+        cleanupWarning = $null
+    } | ConvertTo-Json -Depth 4 -Compress
+    exit 0
+}
+
+$interactionId = $null
+$createArguments = @(
+    '-TemplateJson', $templateJson,
+    '-WaitTimeoutSeconds', [string]$WaitTimeoutSeconds,
+    '-EnrollmentWaitTimeoutSeconds', [string]$EnrollmentWaitTimeoutSeconds
+)
+if (-not [string]::IsNullOrWhiteSpace($ApiBaseUrl)) { $createArguments += @('-ApiBaseUrl', $ApiBaseUrl) }
+if (-not [string]::IsNullOrWhiteSpace($CredentialPath)) { $createArguments += @('-CredentialPath', $CredentialPath) }
+if (-not [string]::IsNullOrWhiteSpace($ResultTokenStoreRoot)) { $createArguments += @('-ResultTokenStoreRoot', $ResultTokenStoreRoot) }
+if ($AllowInsecureLoopbackHttpForTest) { $createArguments += '-AllowInsecureLoopbackHttpForTest' }
+if ($AllowNonDefaultResultTokenStore) { $createArguments += '-AllowNonDefaultResultTokenStore' }
+if ($SkipPopup) { $createArguments += '-SkipPopup' }
+
+$expectedEnrollmentApiBaseUrl = Get-AnswerMeSelfTestExpectedApiBaseUrl
+$create = Invoke-AnswerMeSelfTestChild `
+    -ScriptPath $createScript `
+    -Arguments $createArguments `
+    -AllowEnrollmentEvent `
+    -ResolvedApiBaseUrl $expectedEnrollmentApiBaseUrl
+if ($create.invalidStderr) {
+    Write-AnswerMeSelfTestIssue `
+        -Stage 'create' `
+        -Code 'self-test-create-stderr-invalid' `
+        -Message 'The AnswerMe create adapter emitted an untrusted stderr record.' `
+        -ExitCode 4 `
+        -NetworkCalled ($null -ne $create.body -and $create.body.networkCalled -eq $true)
+}
+if ($create.exitCode -ne 0 -or
+    $null -eq $create.body -or
+    $create.body.ok -ne $true -or
+    [string]$create.body.status -cne 'pending' -or
+    $create.body.resultTokenPersisted -ne $true -or
+    $create.body.questionCount -ne 3 -or
+    $create.body.interactionId -isnot [string] -or
+    [string]::IsNullOrWhiteSpace([string]$create.body.interactionId) -or
+    ([string]$create.body.interactionId).Length -gt 100) {
+    Write-AnswerMeSelfTestIssue `
+        -Stage 'create' `
+        -Code 'self-test-create-failed' `
+        -Message 'The AnswerMe self-test questionnaire could not be created and verified.' `
+        -ExitCode 4 `
+        -NetworkCalled ($null -ne $create.body -and $create.body.networkCalled -eq $true)
+}
+
+$interactionId = [string]$create.body.interactionId
+
+$waitArguments = @(
+    '-InteractionId', $interactionId,
+    '-TimeoutSeconds', [string]$WaitTimeoutSeconds,
+    '-PollSeconds', [string]$PollSeconds
+)
+if (-not [string]::IsNullOrWhiteSpace($ApiBaseUrl)) {
+    $waitArguments += @('-ApiBaseUrl', $ApiBaseUrl)
+}
+if (-not [string]::IsNullOrWhiteSpace($CredentialPath)) {
+    $waitArguments += @('-CredentialPath', $CredentialPath)
+}
+if (-not [string]::IsNullOrWhiteSpace($ResultTokenStoreRoot)) {
+    $waitArguments += @('-ResultTokenStoreRoot', $ResultTokenStoreRoot)
+}
+if ($AllowInsecureLoopbackHttpForTest) { $waitArguments += '-AllowInsecureLoopbackHttpForTest' }
+if ($AllowNonDefaultResultTokenStore) { $waitArguments += '-AllowNonDefaultResultTokenStore' }
+
+$wait = Invoke-AnswerMeSelfTestChild -ScriptPath $waitScript -Arguments $waitArguments
+if ($wait.invalidStderr -or $wait.exitCode -ne 0 -or $null -eq $wait.body -or $wait.body.ok -ne $true) {
+    Write-AnswerMeSelfTestIssue `
+        -Stage 'wait' `
+        -Code 'self-test-wait-failed' `
+        -Message 'The AnswerMe self-test did not reach a readable terminal result.' `
+        -ExitCode 4 `
+        -NetworkCalled $true
+}
+
+$terminal = $wait.body.response
+try {
+    if ($null -eq $terminal -or
+        [string]$terminal.interactionId -cne $interactionId -or
+        [string]$terminal.status -cne 'submitted' -or
+        $null -eq $terminal.result -or
+        [string]$terminal.result.type -cne 'questionnaire') {
+        throw 'Self-test terminal result is not the original submitted questionnaire.'
+    }
+    $answers = @($terminal.result.answers)
+    if ($answers.Count -ne 3) {
+        throw 'Self-test result must contain exactly three answers.'
+    }
+    [void](Get-AnswerMeSelfTestAnswer `
+        -Answers $answers `
+        -QuestionId 'page-display' `
+        -AllowedOptionIds @('displayed', 'not-displayed'))
+    [void](Get-AnswerMeSelfTestAnswer `
+        -Answers $answers `
+        -QuestionId 'automatic-popup' `
+        -AllowedOptionIds @('foreground', 'not-foreground'))
+    [void](Get-AnswerMeSelfTestAnswer `
+        -Answers $answers `
+        -QuestionId 'diagnostic-advice' `
+        -AllowedOptionIds @('recommend-redacted', 'do-not-recommend'))
+}
+catch {
+    Write-AnswerMeSelfTestIssue `
+        -Stage 'mapping' `
+        -Code 'self-test-result-invalid' `
+        -Message 'The AnswerMe self-test result did not match the fixed three-question contract.' `
+        -ExitCode 4 `
+        -NetworkCalled $true
+}
+
+$cleanupArguments = @('-InteractionId', $interactionId)
+if (-not [string]::IsNullOrWhiteSpace($ResultTokenStoreRoot)) { $cleanupArguments += @('-ResultTokenStoreRoot', $ResultTokenStoreRoot) }
+if ($AllowNonDefaultResultTokenStore) { $cleanupArguments += '-AllowNonDefaultResultTokenStore' }
+$cleanup = Invoke-AnswerMeSelfTestChild -ScriptPath $cleanupScript -Arguments $cleanupArguments
+$cleanupSucceeded = -not $cleanup.invalidStderr -and
+    $cleanup.exitCode -eq 0 -and
+    $null -ne $cleanup.body -and
+    $cleanup.body.ok -eq $true -and
+    $cleanup.body.removed -eq $true
+$cleanupEvidence = [PSCustomObject]@{
+    attempted = $true
+    removed = $cleanupSucceeded
+}
+$cleanupWarning = if ($cleanupSucceeded) {
+    $null
+}
+else {
+    [PSCustomObject]@{
+        code = 'self-test-cleanup-failed'
+        message = 'The protected self-test Result Token could not be confirmed removed.'
+    }
+}
+
+[PSCustomObject]@{
+    ok = $true
+    status = 'passed'
+    stage = 'complete'
+    code = $null
+    message = $null
+    networkCalled = $true
+    resultTokenCleanup = $cleanupEvidence
+    cleanupWarning = $cleanupWarning
+} | ConvertTo-Json -Depth 6 -Compress
+exit 0