cj-tauri 0.8.0 → 1.1.0

package/native/tests/test_bridge_core.c

@@ -16,6 +16,18 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
+#include <sys/stat.h>
+#include <unistd.h>
+
+/* mingw 的 <io.h> 把 mkdir 声明成单参（MSVCRT 语义，且已标 deprecated），
+   POSIX 的两参形态在 Windows 上直接编不过（too many arguments to function call）——
+   用例里统一走这个包装，两边的语义都是「建一级目录」。 */
+#ifdef _WIN32
+#include <direct.h>
+static int cj_test_mkdir(const char *p) { return _mkdir(p); }
+#else
+static int cj_test_mkdir(const char *p) { return mkdir(p, 0700); }
+#endif
 
 /* ===== 断言与用例 ===== */
 
@@ -39,6 +51,47 @@ static void case_begin(const char *name) {
     fprintf(stderr, "  - %s\n", name);
 }
 
+/* ===== 日志落盘用例的辅助（RFC-003 第 5 期） =====
+   开启日志后 fd 2 就被日志文件接管了，此时 CHECK 的失败行会**写进日志文件**、外面根本看不见。
+   所以接管期间改用 LOG_CHECK：结果先攒在内存里，等 stderr 还原之后再一次性打出来。 */
+static char g_log_fail_buf[4096];
+
+static void cj_test_log_check(int cond, int line, const char *what) {
+    if (cond) {
+        g_pass++;
+        return;
+    }
+    g_fail++;
+    if (strlen(g_log_fail_buf) + 240 < sizeof(g_log_fail_buf)) {
+        char row[200];
+        snprintf(row, sizeof(row), "  [FAIL] %s:%d [log file] %s\n", __FILE__, line, what);
+        strcat(g_log_fail_buf, row);
+    }
+}
+
+#define LOG_CHECK(cond, what) cj_test_log_check((cond) ? 1 : 0, __LINE__, what)
+
+static int cj_test_file_exists(const char *path) {
+    FILE *f = fopen(path, "rb");
+    if (!f) return 0;
+    fclose(f);
+    return 1;
+}
+
+/* 读全文（截断到 cap-1）；返回读到的字节数，-1 = 打不开 */
+static long cj_test_read_all(const char *path, char *buf, long cap) {
+    FILE *f = fopen(path, "rb");
+    long n;
+    if (!f) {
+        if (cap > 0) buf[0] = '\0';
+        return -1;
+    }
+    n = (long)fread(buf, 1, (size_t)(cap - 1), f);
+    buf[n > 0 ? n : 0] = '\0';
+    fclose(f);
+    return n;
+}
+
 /* ===== 桩平台：只记录调用，不做真实副作用 ===== */
 
 struct cj_sync {
@@ -69,11 +122,24 @@ static int g_last_menu_state_checked;
 static int g_caps_calls;
 static int g_caps_value = CJ_CAP_MENU; /* 桩平台自称的能力位（用例里改它，验证 core 只是如实缓存） */
 
+/* 拖放策略：桩平台只记录调用（core 的职责是 pending 存取与 drop 报文解析）*/
+static int g_drag_calls;
+static int g_drag_last_enabled;
+static int g_drag_last_files;
+
+/* 标题栏副标题：桩平台只记录调用（core 的职责是参数校验 + 透传）*/
+static int g_subtitle_calls;
+static char *g_last_subtitle_text;
+
 static void reset_counters(void) {
     g_post_js_calls = g_wake_calls = g_quit_calls = g_start_calls = 0;
     g_fini_calls = g_run_dialog_calls = g_post_dialog_calls = 0;
     g_load_url_calls = g_reload_calls = g_devtools_calls = 0;
     g_set_menu_calls = g_menu_state_calls = g_caps_calls = 0;
+    g_drag_calls = g_drag_last_enabled = g_drag_last_files = 0;
+    g_subtitle_calls = 0;
+    free(g_last_subtitle_text);
+    g_last_subtitle_text = NULL;
     free(g_last_js);
     g_last_js = NULL;
     free(g_last_menu_text);
@@ -130,6 +196,49 @@ void cj_plat_post_js(cj_host *h, const char *script_utf8) {
 int cj_plat_is_ui_thread(cj_host *h) { (void)h; return g_is_ui_thread; }
 void cj_plat_post_dialog(cj_host *h, dlg_req *req) { (void)h; (void)req; g_post_dialog_calls++; }
 
+/* ---- 剪贴板桩：记调用次数与最后一次写的文本；读返回桩文本 ---- */
+static int g_clip_write_calls = 0;
+static int g_clip_read_calls = 0;
+static char *g_clip_last_written = NULL;
+static int g_clip_write_ok = 1; /* 用例可扳成 0 模拟平台失败 */
+
+int cj_plat_post_ui(cj_host *h, cj_ui_fn fn, void *ud) {
+    (void)h;
+    fn(ud); /* 桩平台没有真 UI 线程：就地执行（core 的 is_ui_thread 桩可扳成 0 验投递路径）*/
+    return 1;
+}
+
+int cj_plat_clipboard_write_text(cj_host *h, const char *text, char *err, int err_len) {
+    (void)h; (void)err; (void)err_len;
+    g_clip_write_calls++;
+    if (!g_clip_write_ok) return -3;
+    free(g_clip_last_written);
+    g_clip_last_written = strdup(text ? text : "");
+    return 0;
+}
+
+char *cj_plat_clipboard_read_text(cj_host *h, char *err, int err_len) {
+    (void)h; (void)err; (void)err_len;
+    g_clip_read_calls++;
+    if (!g_clip_last_written) return NULL;
+    return strdup(g_clip_last_written);
+}
+
+/* ---- 通知桩：记调用次数与最后一次的标题；用例可扳失败 ---- */
+static int g_note_calls = 0;
+static char *g_note_last_title = NULL;
+static int g_note_ok = 1;
+
+int cj_plat_notification_notify(cj_host *h, const char *title, const char *body,
+                                char *err, int err_len) {
+    (void)h; (void)body; (void)err; (void)err_len;
+    g_note_calls++;
+    if (!g_note_ok) return -3;
+    free(g_note_last_title);
+    g_note_last_title = strdup(title ? title : "");
+    return 0;
+}
+
 int cj_plat_run_dialog(cj_host *h, dlg_req *req) {
     (void)h;
     g_run_dialog_calls++;
@@ -151,6 +260,15 @@ void cj_plat_set_menu(cj_host *h, const char *wire) {
     g_last_menu_text = wire ? strdup(wire) : NULL;
 }
 
+/* 桩平台：副标题一律接受（真平台未就绪返回 -3、Windows 返回 -4，那是平台自己的事）*/
+int cj_plat_set_titlebar_subtitle(cj_host *h, const char *text) {
+    (void)h;
+    g_subtitle_calls++;
+    free(g_last_subtitle_text);
+    g_last_subtitle_text = text ? strdup(text) : NULL;
+    return 0;
+}
+
 void cj_plat_menu_item_state(cj_host *h, const char *id, int enabled, int checked) {
     (void)h;
     g_menu_state_calls++;
@@ -159,6 +277,49 @@ void cj_plat_menu_item_state(cj_host *h, const char *id, int enabled, int checke
     g_last_menu_state_checked = checked;
 }
 
+/* ---- 拖放策略：声明在计数器区（reset_counters 之前），这里只留原语 ---- */
+void cj_plat_set_drag_drop(cj_host *h, int enabled, int files) {
+    (void)h;
+    g_drag_calls++;
+    g_drag_last_enabled = enabled;
+    g_drag_last_files = files;
+}
+
+/* ---- 全局快捷键：桩平台没有 X11，只记录调用（接线层自检用）---- */
+static int g_hotkey_calls;
+static char g_hotkey_last_wire[512];
+void cj_plat_set_global_hotkeys(cj_host *h, const char *wire) {
+    (void)h;
+    g_hotkey_calls++;
+    snprintf(g_hotkey_last_wire, sizeof(g_hotkey_last_wire), "%s", wire ? wire : "");
+}
+
+/* ---- 托盘：桩平台没有 appindicator，只记录调用（接线层自检用）---- */
+static int g_tray_calls;
+static char g_tray_last_wire[512];
+void cj_plat_set_tray(cj_host *h, const char *wire) {
+    (void)h;
+    g_tray_calls++;
+    snprintf(g_tray_last_wire, sizeof(g_tray_last_wire), "%s", wire ? wire : "");
+}
+
+/* ---- 窗口可见性 / 最小化到托盘：桩平台没有窗口，只记录调用（接线层自检用）---- */
+static int g_win_visible_calls;
+static int g_win_visible_last = -1;
+void cj_plat_set_window_visible(cj_host *h, int visible) {
+    (void)h;
+    g_win_visible_calls++;
+    g_win_visible_last = visible;
+}
+
+static int g_min_tray_calls;
+static int g_min_tray_last = -1;
+void cj_plat_set_minimize_to_tray(cj_host *h, int enabled) {
+    (void)h;
+    g_min_tray_calls++;
+    g_min_tray_last = enabled;
+}
+
 int cj_plat_host_capabilities(cj_host *h) {
     (void)h;
     g_caps_calls++;
@@ -225,6 +386,55 @@ int cj_plat_serial_list(char *out, int out_len) {
     return 0;
 }
 
+/* ===== 静默子进程桩：桩平台建不了真进程，只为让 core 的**参数校验与转发**可调可断言 =====
+   真进程那条路（Windows 的 DETACHED_PROCESS / Linux 的 posix_spawn）由平台实机验证。 */
+long long cj_plat_spawn_hidden(const char *exe, const char *args, char *err, int err_len) {
+    (void)args;
+    if (err && err_len > 0) {
+        err[0] = '\0';
+    }
+    /* 只认一个哨兵：命中就给个假 pid，其余回 0 并留一句原因（两条分支 core 都要覆盖） */
+    if (exe && strcmp(exe, "stub-ok") == 0) {
+        return 4242;
+    }
+    if (err && err_len > 0) {
+        snprintf(err, (size_t)err_len, "stub: 不能建进程");
+    }
+    return 0;
+}
+
+int cj_plat_kill_pid(long long pid) {
+    (void)pid;
+    return 1; /* 幂等口径：桩上一律算「已结束」 */
+}
+
+int cj_plat_pid_alive(long long pid) {
+    (void)pid;
+    return 0; /* 桩平台没有真进程 */
+}
+
+/* ===== 内嵌资源桩：桩平台没有 PE 资源表，如实返回 0 或留一句原因，
+   让 core 的三条分支（参数校验 / 无资源 / 失败）都能在无 SDK 的机器上被断言。 ===== */
+int cj_plat_extract_assets(const char *dir, char *err, int err_len) {
+    if (err && err_len > 0) err[0] = '\0';
+    if (dir && strcmp(dir, "stub-missing") == 0) {
+        if (err && err_len > 0) snprintf(err, (size_t)err_len, "桩平台：没有内嵌资源");
+        return -1;
+    }
+    return 0; /* 普通产物没有内嵌资源——如实回报 */
+}
+
+/* ===== 动态库预加载桩：桩平台不去真加载库，只让 core 的「空路径拒绝 / 失败出口」可断言。
+   真加载那条路（Windows 的 LoadLibraryW / Linux 的 dlopen）由平台实机验证。 ===== */
+int cj_plat_preload_library(const char *path, char *err, int err_len) {
+    if (err && err_len > 0) err[0] = '\0';
+    if (path && strcmp(path, "stub-broken") == 0) {
+        if (err && err_len > 0) snprintf(err, (size_t)err_len, "桩平台：加载失败");
+        return 0;
+    }
+    return 1; /* 其余一律算加载成功（core 只关心 0 / 非 0 与日志） */
+}
+
 /* ===== 线路解析的回调收集器（菜单是树，桩侧用一张表记录 core 走出来的每一行）===== */
 
 typedef struct row_rec {
@@ -320,6 +530,7 @@ int main(void) {
     case_begin("set_window / set_icon / set_devtools");
     cj_bridge_set_window(h, "First", 800, 600);
     CHECK(h->win_w == 800 && h->win_h == 600, "尺寸生效");
+
     CHECK(h->win_title && strcmp(h->win_title, "First") == 0, "标题是拷贝");
     cj_bridge_set_window(h, "Second", 0, -1);
     CHECK(h->win_title && strcmp(h->win_title, "Second") == 0, "标题替换（旧值已释放）");
@@ -333,6 +544,22 @@ int main(void) {
     cj_bridge_set_devtools(h, 1);
     CHECK(h->devtools == 1, "devtools 可开");
 
+    /* --- 2b. 窗口可见性 / 最小化到托盘：两头都能用，但「建窗前」只记不下发 --- */
+    case_begin("set_window_visible / set_minimize_to_tray");
+    cj_bridge_set_window_visible(h, 0);
+    CHECK(h->win_visible == 0, "未就绪：记下待定可见性");
+    CHECK(g_win_visible_calls == 0, "未就绪：不下发平台（建窗时按 h->win_visible 定稿，省一次闪烁）");
+    h->ready = 1;
+    cj_bridge_set_window_visible(h, 1);
+    CHECK(h->win_visible == 1 && g_win_visible_calls == 1 && g_win_visible_last == 1,
+          "就绪后：投平台执行显示");
+    cj_bridge_set_minimize_to_tray(h, 1);
+    CHECK(h->minimize_to_tray == 1 && g_min_tray_calls == 1 && g_min_tray_last == 1,
+          "最小化到托盘策略转给平台");
+    cj_bridge_set_minimize_to_tray(h, 0);
+    CHECK(h->minimize_to_tray == 0 && g_min_tray_last == 0, "策略可关（回到普通最小化）");
+    h->ready = 0; /* 后面的用例还按「未启动」的前提走 */
+
     /* --- 3. 预执行脚本：忽略空串、顺序保持、容量翻倍 --- */
     case_begin("add_init_script 顺序与扩容");
     cj_bridge_add_init_script(h, "");
@@ -558,7 +785,28 @@ int main(void) {
     cj_bridge_set_menu(NULL, "x");
     CHECK(1, "set_menu 对 NULL 宿主安全");
 
-    /* --- 15. 菜单点击：shell 回调带回宿主身份 + JSON 载荷 --- */
+    /* --- 15. titlebar 副标题：core 校验参数、原样透传平台 --- */
+    case_begin("titlebar 副标题：校验 + 透传平台");
+    reset_counters();
+    CHECK(cj_bridge_set_titlebar_subtitle(h, "n.md · 已保存 · 54 字") == 0, "正常文本返回 0");
+    CHECK(g_subtitle_calls == 1 && g_last_subtitle_text &&
+          strcmp(g_last_subtitle_text, "n.md · 已保存 · 54 字") == 0,
+          "原文透传平台（UTF-8 多字节不截断）");
+    cj_bridge_set_titlebar_subtitle(h, "");
+    CHECK(g_last_subtitle_text && g_last_subtitle_text[0] == '\0', "空串 = 清空副标题（仍透传）");
+    {
+        /* 超 1024 字节：core 当场拒绝，不透传——平台在 UI 线程里不该再做第二份校验 */
+        char big[1100];
+        memset(big, 'a', sizeof(big) - 1);
+        big[sizeof(big) - 1] = '\0';
+        reset_counters();
+        CHECK(cj_bridge_set_titlebar_subtitle(h, big) == -1, "超过 1024 字节返回 -1");
+        CHECK(g_subtitle_calls == 0, "被拒的请求不透传到平台");
+    }
+    CHECK(cj_bridge_set_titlebar_subtitle(h, NULL) == -1, "NULL 文本返回 -1");
+    CHECK(cj_bridge_set_titlebar_subtitle(NULL, "x") == -1, "NULL 宿主返回 -1");
+
+    /* --- 16. 菜单点击：shell 回调带回宿主身份 + JSON 载荷 --- */
     case_begin("menu 点击回调带宿主句柄 + JSON 载荷（多窗口不串台）");
     reset_counters();
     g_shell_cb_calls = 0;
@@ -596,6 +844,117 @@ int main(void) {
     cj_bridge_set_menu_item_state(NULL, "x", 1, 1);
     CHECK(1, "对 NULL 宿主安全");
 
+    /* --- 16b. 拖放：策略透传 + drop 报文解析（RFC-002 §5 / §7.B）--- */
+    case_begin("set_drag_drop 透传与 pending");
+    reset_counters();
+    cj_bridge_set_drag_drop(h, 1, 1);
+    CHECK(g_drag_calls == 1 && g_drag_last_enabled == 1 && g_drag_last_files == 1,
+          "策略透传到平台原语");
+    CHECK(h->pending_drop_enabled == 1 && h->pending_drop_files == 1,
+          "策略同时记进 pending（建 view 时读）");
+    cj_bridge_set_drag_drop(h, 0, 0);
+    CHECK(g_drag_calls == 2 && h->pending_drop_enabled == 0 && h->pending_drop_files == 0,
+          "关掉也透传（平台摘 drag dest）");
+    cj_bridge_set_drag_drop(NULL, 1, 1);
+    CHECK(1, "对 NULL 宿主安全");
+
+    case_begin("cj_core_drop_files 解析与报文");
+    reset_counters();
+    g_shell_cb_calls = 0; /* shell 回调计数不在 reset_counters 里（menu 用例也是手动清零） */
+    cj_core_drop_files(h, "file:///tmp/a.png\r\nfile:///tmp/b%20c.txt\r\n");
+    CHECK(g_shell_cb_calls == 1 && g_shell_cb_host == h, "drop 回调一次、带回该宿主句柄");
+    CHECK(strstr(g_shell_cb_json, "\"kind\":\"drop\"") != NULL &&
+          strstr(g_shell_cb_json, "\"paths\":[\"/tmp/a.png\",\"/tmp/b c.txt\"]") != NULL,
+          "file:// 解码成路径（\\r\\n 分隔、%20 还原空格），报文是 {kind,paths} JSON");
+    cj_core_drop_files(h, "# comment line\n\nfile:///tmp/only.txt\nhttps://example.com/x");
+    CHECK(g_shell_cb_calls == 2 &&
+          strstr(g_shell_cb_json, "\"/tmp/only.txt\"") != NULL &&
+          strstr(g_shell_cb_json, "\"https://example.com/x\"") != NULL &&
+          strstr(g_shell_cb_json, "comment") == NULL,
+          "注释/空行跳过，非 file:// URI 原样保留");
+    cj_core_drop_files(h, "");
+    CHECK(g_shell_cb_calls == 2, "空载荷不回调");
+    cj_core_drop_files(h, NULL);
+    CHECK(g_shell_cb_calls == 2, "NULL 载荷安全");
+    cj_bridge_set_shell_callback(h2, on_shell);
+    cj_core_drop_files(h2, "file:///tmp/second.txt");
+    CHECK(g_shell_cb_calls == 3 && g_shell_cb_host == h2,
+          "第二个宿主的 drop 带回它自己的句柄（句柄路由不串台）");
+    cj_core_drop_files(NULL, "file:///tmp/x");
+    CHECK(1, "对 NULL 宿主安全");
+
+    /* --- 16c. 全局快捷键：接线层（wire 记 pending + 透传平台；触发报文走 shell 通道）--- */
+    case_begin("set_global_hotkeys 接线（pending + 平台透传）");
+    reset_counters();
+    g_hotkey_calls = 0;
+    g_hotkey_last_wire[0] = '\0';
+    cj_bridge_set_global_hotkeys(h, "Ctrl+Alt+C:show-panel\nCtrl+Shift+P:pause");
+    CHECK(g_hotkey_calls == 1 && strcmp(g_hotkey_last_wire,
+          "Ctrl+Alt+C:show-panel\nCtrl+Shift+P:pause") == 0,
+          "wire 透传到平台原语（解析与 grab 在平台层）");
+    CHECK(h->pending_hotkeys != NULL &&
+          strcmp(h->pending_hotkeys, "Ctrl+Alt+C:show-panel\nCtrl+Shift+P:pause") == 0,
+          "wire 同时记进 pending（grab 线程启动时读）");
+    cj_bridge_set_global_hotkeys(h, "");
+    CHECK(g_hotkey_calls == 2 && h->pending_hotkeys != NULL &&
+          strcmp(h->pending_hotkeys, "") == 0,
+          "空 wire = 全部注销（整表替换语义）");
+    cj_bridge_set_global_hotkeys(NULL, "Ctrl+Alt+C:x");
+    CHECK(1, "对 NULL 宿主安全");
+
+    case_begin("cj_core_hotkey_pressed 触发报文");
+    g_shell_cb_calls = 0;
+    cj_bridge_set_shell_callback(h, on_shell);
+    cj_core_hotkey_pressed(h, "show-panel");
+    CHECK(g_shell_cb_calls == 1 && g_shell_cb_host == h,
+          "触发回调一次、带回该宿主句柄");
+    CHECK(strstr(g_shell_cb_json, "\"kind\":\"hotkey\"") != NULL &&
+          strstr(g_shell_cb_json, "\"id\":\"show-panel\"") != NULL,
+          "载荷是 {kind,id} JSON（与菜单点击同族，走 on_shell 通道）");
+    cj_core_hotkey_pressed(h, "");
+    CHECK(g_shell_cb_calls == 1, "空 id 不回调（无法路由，直接丢弃）");
+    cj_bridge_set_shell_callback(h2, on_shell);
+    cj_core_hotkey_pressed(h2, "second");
+    CHECK(g_shell_cb_calls == 2 && g_shell_cb_host == h2,
+          "第二个宿主的触发带回它自己的句柄（句柄路由不串台）");
+    cj_core_hotkey_pressed(NULL, "x");
+    CHECK(1, "对 NULL 宿主安全");
+
+    /* --- 16d. 托盘：接线层（wire 记 pending + 透传平台；点击报文走 shell 通道）--- */
+    case_begin("set_tray 接线（pending + 平台透传）");
+    reset_counters();
+    g_tray_calls = 0;
+    g_tray_last_wire[0] = '\0';
+    cj_bridge_set_tray(h, "icon\t/tmp/tray.png\ntooltip\tcj-tauri\nn\ttoggle\t显示/隐藏\t1\t\nn\tquit\t退出\t1\t\n");
+    CHECK(g_tray_calls == 1 && strstr(g_tray_last_wire, "icon\t/tmp/tray.png") != NULL &&
+          strstr(g_tray_last_wire, "n\ttoggle") != NULL,
+          "wire 透传到平台原语（解析与 appindicator 在平台层）");
+    CHECK(h->pending_tray != NULL && strstr(h->pending_tray, "tooltip\tcj-tauri") != NULL,
+          "wire 同时记进 pending（宿主线程装配时读）");
+    cj_bridge_set_tray(h, "");
+    CHECK(g_tray_calls == 2 && h->pending_tray != NULL && strcmp(h->pending_tray, "") == 0,
+          "空 wire = 移除托盘（pending 同步清空）");
+    cj_bridge_set_tray(NULL, "icon\tx");
+    CHECK(1, "对 NULL 宿主安全");
+
+    case_begin("cj_core_tray_clicked 触发报文");
+    g_shell_cb_calls = 0;
+    cj_bridge_set_shell_callback(h, on_shell);
+    cj_core_tray_clicked(h, "toggle");
+    CHECK(g_shell_cb_calls == 1 && g_shell_cb_host == h,
+          "点击回调一次、带回该宿主句柄");
+    CHECK(strstr(g_shell_cb_json, "\"kind\":\"tray\"") != NULL &&
+          strstr(g_shell_cb_json, "\"id\":\"toggle\"") != NULL,
+          "载荷是 {kind,id} JSON（RFC-002 §5.5 的 tray 信封，走 on_shell 通道）");
+    cj_core_tray_clicked(h, "");
+    CHECK(g_shell_cb_calls == 1, "空 id 不回调（无法路由，直接丢弃）");
+    cj_bridge_set_shell_callback(h2, on_shell);
+    cj_core_tray_clicked(h2, "quit");
+    CHECK(g_shell_cb_calls == 2 && g_shell_cb_host == h2,
+          "第二个宿主的点击带回它自己的句柄（句柄路由不串台）");
+    cj_core_tray_clicked(NULL, "x");
+    CHECK(1, "对 NULL 宿主安全");
+
     /* --- 17. 能力位：cj_plat_init 时问一次，此后只读 --- */
     case_begin("host capabilities 透传（system:host 的依据）");
     {
@@ -688,6 +1047,174 @@ int main(void) {
         CHECK(1, "串口导出不需要宿主（本用例跑在两个宿主都已销毁之后）");
     }
 
+    /* --- 20. 剪贴板：参数校验在 core，平台失败码原样返回 --- */
+    case_begin("clipboard 校验与转发");
+    CHECK(cj_bridge_clipboard_write_text(NULL, "x") == -1, "NULL 文本被拒（-1）");
+    {
+        char *big = (char *)malloc((8u << 20) + 1);
+        cj_host *hc = cj_bridge_create(); /* 剪贴板是宿主能力：要一个活句柄（不 start，window_gone=0）*/
+        if (big && hc) {
+            memset(big, 'a', (8u << 20));
+            big[8u << 20] = '\0';
+            CHECK(cj_bridge_clipboard_write_text(hc, big) == -1, "超 8 MiB 被拒");
+            free(big);
+        }
+        if (hc) {
+            g_clip_write_calls = 0;
+            g_clip_read_calls = 0;
+            free(g_clip_last_written);
+            g_clip_last_written = NULL;
+            CHECK(cj_bridge_clipboard_write_text(hc, "hello clip") == 0, "写文本成功");
+            CHECK(g_clip_write_calls == 1 && g_clip_last_written &&
+                  strcmp(g_clip_last_written, "hello clip") == 0, "文本原样到达平台");
+            {
+                char *got = cj_bridge_clipboard_read_text(hc);
+                CHECK(got && strcmp(got, "hello clip") == 0, "读回刚写的文本");
+                cj_bridge_clipboard_free(got);
+                CHECK(g_clip_read_calls == 1, "读触达平台一次");
+            }
+            cj_bridge_clipboard_free(NULL);
+            CHECK(1, "free(NULL) 幂等安全");
+            g_clip_write_ok = 0;
+            CHECK(cj_bridge_clipboard_write_text(hc, "x") == -3, "平台失败码返回 -3");
+            g_clip_write_ok = 1;
+            /* 通知：参数校验 + 发后即忘（投递即返回 0，平台成败看 stderr）*/
+            g_note_calls = 0;
+            hc->capabilities |= CJ_CAP_NOTIFICATION; /* 通知是宿主能力：声明了才走到平台 */
+            CHECK(cj_bridge_notification_notify(hc, "", "b") == -1, "空标题被拒");
+            CHECK(cj_bridge_notification_notify(hc, NULL, "b") == -1, "NULL 标题被拒");
+            {
+                char long_title[258];
+                memset(long_title, 't', sizeof(long_title));
+                long_title[sizeof(long_title) - 1] = '\0';
+                CHECK(cj_bridge_notification_notify(hc, long_title, "b") == -1, "超长标题被拒");
+            }
+            CHECK(g_note_calls == 0, "被拒的通知不触达平台");
+            CHECK(cj_bridge_notification_notify(hc, "hello", "body") == 0, "合法通知提交成功（发后即忘）");
+            CHECK(g_note_calls == 1 && g_note_last_title && strcmp(g_note_last_title, "hello") == 0,
+                  "标题原样到达平台");
+            g_note_ok = 0;
+            CHECK(cj_bridge_notification_notify(hc, "x", NULL) == -3, "UI 直行路径平台失败如实回 -3");
+            g_note_ok = 1;
+            /* 未声明通知能力的平台（如 Windows 桩）要当场拒绝，不能走「发后即忘」被读成成功 */
+            hc->capabilities &= ~CJ_CAP_NOTIFICATION;
+            g_note_calls = 0;
+            CHECK(cj_bridge_notification_notify(hc, "x", "b") == -4, "未声明能力位如实回 -4");
+            CHECK(g_note_calls == 0, "未声明能力位不触达平台");
+            cj_bridge_destroy(hc);
+        }
+    }
+
+    /* --- 日志落盘（RFC-003 第 5 期）：接管 stderr、按大小轮转、失败如实回 0 --- */
+    case_begin("log file：接管 stderr / 按大小轮转 / 失败如实回 0");
+    {
+        char dir[256];
+        char path[300];
+        char archive1[320];
+        char archive2[320];
+        char archive3[320];
+        char blocker[320];
+        char unwritable[340];
+        char long_path[1200];
+        char buf[65536];
+        FILE *bf;
+        int saved_fd;
+        int i;
+
+        snprintf(dir, sizeof(dir), "/tmp/cj-bridge-logtest-%ld", (long)getpid());
+        cj_test_mkdir(dir);
+        /* 路径故意多两级不存在的目录：默认日志目录（~/.local/state/cj-tauri）常常还不存在，
+           走到 ③ 顺带证明「父目录按需建出来」 */
+        snprintf(path, sizeof(path), "%s/nested/deep/app.log", dir);
+        snprintf(archive1, sizeof(archive1), "%s.1", path);
+        snprintf(archive2, sizeof(archive2), "%s.2", path);
+        snprintf(archive3, sizeof(archive3), "%s.3", path);
+
+        /* ① 未开启（对照组）：回读空串、不创建文件，c j_logf 仍写 stderr */
+        CHECK(strcmp(cj_bridge_log_file(), "") == 0, "未开启时回读空串");
+        cj_logf("[bridge-core] probe before enable\n");
+        CHECK(cj_test_file_exists(path) == 0, "未开启时不创建日志文件");
+
+        /* ② 参数与失败路径都回 0（stderr 完好，原因打在 stderr 上） */
+        CHECK(cj_bridge_set_log_file(NULL, 0, 0) == 0, "NULL 路径被拒");
+        CHECK(cj_bridge_set_log_file("", 0, 0) == 0, "空路径被拒");
+        memset(long_path, 'a', sizeof(long_path) - 1);
+        long_path[sizeof(long_path) - 1] = '\0';
+        CHECK(cj_bridge_set_log_file(long_path, 0, 0) == 0, "超长路径被拒");
+        /* 「不可写」不能拿一个不存在的目录测：父目录缺失会被如实建出来（默认目录要的就是这行为），
+           所以拿一个**普通文件**当路径的中间段——父级不是目录，建也建不了、开也开不了 */
+        snprintf(blocker, sizeof(blocker), "%s/blocker", dir);
+        bf = fopen(blocker, "wb");
+        if (bf) fclose(bf);
+        snprintf(unwritable, sizeof(unwritable), "%s/app.log", blocker);
+        CHECK(cj_bridge_set_log_file(unwritable, 0, 0) == 0, "不可写路径被拒（父级是普通文件）");
+        CHECK(cj_test_file_exists(path) == 0, "被拒的开启不产生文件");
+        CHECK(strcmp(cj_bridge_log_file(), "") == 0, "被拒之后仍未激活");
+
+        /* ③ 留底原 stderr fd（必须在接管之前取），然后开启：max 1KB、保留 2 份 */
+        saved_fd = dup(2);
+        LOG_CHECK(saved_fd >= 0, "留底原 stderr fd 成功");
+        LOG_CHECK(cj_bridge_set_log_file(path, 1, 2) == 1, "开启成功回 1（父目录缺失也按需建出来）");
+        LOG_CHECK(strcmp(cj_bridge_log_file(), path) == 0, "回读路径与传入一致");
+        LOG_CHECK(cj_bridge_set_log_file(path, 1, 2) == 0, "重复开启被拒（换了目标只能重启）");
+
+        /* ④ 开启后的诊断确实落在文件里 */
+        cj_logf("[bridge-core] after enable marker=alpha\n");
+        CHECK(1, "接管期间断言走 LOG_CHECK（失败行不会丢进日志文件）");
+        LOG_CHECK(cj_test_read_all(path, buf, sizeof(buf)) > 0, "日志文件有内容");
+        LOG_CHECK(strstr(buf, "[cj-bridge] log file: ") != NULL, "首行记录了日志路径与预算");
+        LOG_CHECK(strstr(buf, "marker=alpha") != NULL, "开启后的 cj_logf 落到文件");
+        LOG_CHECK(strstr(buf, "[2") != NULL, "落盘行带时间戳前缀（[YYYY-…)");
+        LOG_CHECK(strstr(buf, "probe before enable") == NULL, "开启之前的输出不会被追认进文件");
+
+        /* ⑤ 前端/插件通道：写一行 + NULL 拒绝 */
+        LOG_CHECK(cj_bridge_log_write(NULL) == -1, "log_write(NULL) 被拒");
+        LOG_CHECK(cj_bridge_log_write("[frontend] marker=beta") == 0, "log_write 回 0");
+        LOG_CHECK(cj_test_read_all(path, buf, sizeof(buf)) > 0 && strstr(buf, "marker=beta") != NULL,
+                  "log_write 的行也落在同一份文件");
+
+        /* ⑥ 轮转：1KB 预算下连写，档案要出现、keep 上限要守住 */
+        for (i = 0; i < 60; i++) cj_logf("[bridge-core] filler line %02d padding ................\n", i);
+        LOG_CHECK(cj_test_file_exists(archive1) != 0, "超预算后出现 log.1");
+        LOG_CHECK(cj_test_read_all(archive1, buf, sizeof(buf)) > 0, "log.1 有内容");
+        LOG_CHECK(cj_test_file_exists(archive2) != 0, "继续写出现 log.2");
+        LOG_CHECK(cj_test_file_exists(archive3) == 0, "keep=2 时不出现 log.3（上限守住）");
+        LOG_CHECK(cj_test_read_all(path, buf, sizeof(buf)) > 0 &&
+                  strstr(buf, "log rotated") != NULL, "轮转后当前文件仍继续写（有 rotated 行）");
+
+        /* ⑦ 还原 stderr：后续断言与收尾输出照常可见（顺带证明接管可逆） */
+        fflush(stderr);
+        dup2(saved_fd, 2);
+        close(saved_fd);
+        fprintf(stderr, "  - [bridge-core] stderr 已还原（日志用例期间的失败行如下，无输出即全过）\n");
+        if (g_log_fail_buf[0]) fprintf(stderr, "%s", g_log_fail_buf);
+        CHECK(cj_test_read_all(path, buf, sizeof(buf)) > 0, "还原后仍能读日志文件");
+    }
+
+    /* ===== 静默子进程：core 侧的校验与转发（真进程由平台原语负责，实机验证） ===== */
+    {
+        case_begin("spawn hidden");
+        CHECK(cj_bridge_spawn_hidden(NULL, "") == 0, "spawn_hidden(NULL) 被拒");
+        CHECK(cj_bridge_spawn_hidden("", "") == 0, "spawn_hidden 空路径被拒");
+        CHECK(cj_bridge_spawn_hidden("stub-ok", "a\x1f" "b") == 4242,
+              "参数串按 0x1F 分隔转发给平台，pid 原样回给上层");
+        CHECK(cj_bridge_spawn_hidden("stub-no", "") == 0, "平台失败时 core 回 0（绝不谎报 pid）");
+        CHECK(cj_bridge_kill_pid(0) == 0, "kill_pid(0) 被拒");
+        CHECK(cj_bridge_kill_pid(-5) == 0, "kill_pid(负数) 被拒");
+        CHECK(cj_bridge_pid_alive(0) == 0, "pid_alive(0) 恒为 0（不落到平台原语）");
+    }
+
+    /* ===== 内嵌资源释放：单文件包随包资源（core 负责校验与错误出口） ===== */
+    {
+        case_begin("extract assets");
+        CHECK(cj_bridge_extract_assets(NULL) == -1, "extract_assets(NULL) 被拒");
+        CHECK(cj_bridge_extract_assets("") == -1, "extract_assets 空目录被拒");
+        CHECK(cj_bridge_extract_assets("some/runtime/dir") == 0,
+              "没有内嵌资源的产物如实回 0（普通构建就是这样，不是错误）");
+        CHECK(cj_bridge_extract_assets("stub-missing") == -1,
+              "平台报错时 core 回 -1（绝不把失败说成 0 个文件）");
+    }
+
     fprintf(stderr, "[bridge-core] 断言 %d 项：通过 %d，失败 %d\n", g_pass + g_fail,
             g_pass, g_fail);
     free(g_last_js);

package/package.json

@@ -1,15 +1,24 @@
 {
   "name": "cj-tauri",
-  "version": "0.8.0",
-  "description": "仓颉版 Tauri：用仓颉写桌面应用后端的类 Tauri 框架脚手架 CLI（WebView 宿主 + IPC 双向桥 + 能力安全模型，Windows / Linux）",
+  "version": "1.1.0",
+  "description": "仓颉语言的 Tauri：用仓颉写桌面应用后端 / 系统 WebView 写前端的混合开发框架脚手架 CLI（IPC 双向桥 + 能力安全模型，Windows / Linux / 鸿蒙 PC）",
   "keywords": [
     "cangjie",
+    "cangjie-lang",
     "仓颉",
     "tauri",
     "webview",
+    "webview2",
+    "webkitgtk",
     "desktop",
+    "gui",
+    "framework",
+    "ipc",
     "cli",
-    "scaffold"
+    "scaffold",
+    "cross-platform",
+    "windows",
+    "linux"
   ],
   "license": "MIT",
   "bin": {