cj-tauri 0.8.0 → 1.1.0

package/src/tests/plugin_dialog_test.cj

@@ -1,6 +1,7 @@
 package cjTauri.tests
 
 import cjTauri.*
+import cjTauri.plugins.dialog.*
 import std.collection.*
 import stdx.encoding.json.*
 import std.unittest.*
@@ -18,14 +19,22 @@ func messageArgs(text: String): JsonObject {
     return o
 }
 
+/** 造一个只带 title 的对象 */
+func titleArgs(t: String): JsonObject {
+    var o = JsonObject()
+    o.put("title", JsonString(t))
+    return o
+}
+
 @Test
 func testDialogPluginSurface(): Unit {
     let p = DialogPlugin()
     @Expect(p.name(), "dialog")
     let names = pluginCommandNames(p)
-    @Expect(names.size, 3)
+    @Expect(names.size, 4)
     var hasOpen = false
     var hasSave = false
+    var hasPick = false
     var hasMessage = false
     for (n in names) {
         if (n == "dialog:open") {
@@ -34,12 +43,16 @@ func testDialogPluginSurface(): Unit {
         if (n == "dialog:save") {
             hasSave = true
         }
+        if (n == "dialog:pickFolder") {
+            hasPick = true
+        }
         if (n == "dialog:message") {
             hasMessage = true
         }
     }
     @Expect(hasOpen, true)
     @Expect(hasSave, true)
+    @Expect(hasPick, true)
     @Expect(hasMessage, true)
 }
 
@@ -49,6 +62,7 @@ func testDialogPluginShimTargetsItsOwnNamespace(): Unit {
     @Expect(js.contains("t.dialog"), true)
     @Expect(js.contains("'dialog:open'"), true)
     @Expect(js.contains("'dialog:save'"), true)
+    @Expect(js.contains("'dialog:pickFolder'"), true)
     @Expect(js.contains("'dialog:message'"), true)
 }
 
@@ -57,16 +71,36 @@ func testDialogPluginDeclaresPermissionSets(): Unit {
     let sets = pluginPermissionSets(DialogPlugin())
     @Expect(sets.size, 2)
     let files = sets.get("dialog:files").getOrThrow()
-    @Expect(files.size, 2)
+    @Expect(files.size, 3)
     var filesHasMessage = false
     for (m in files) {
         if (m == "dialog:message") {
             filesHasMessage = true
         }
     }
-    // 只想挑文件的应用不该顺带拿到「弹任意提示框」
+    // 只想挑文件（或目录）的应用不该顺带拿到「弹任意提示框」
     @Expect(filesHasMessage, false)
-    @Expect(sets.get("dialog:default").getOrThrow().size, 3)
+    @Expect(sets.get("dialog:default").getOrThrow().size, 4)
+}
+
+@Test
+func testDialogPickFolderGoesToFolderDialog(): Unit {
+    // 选目录走的是独立的宿主方法（不是文件框那条）：桩把标题记下来，用例断言转交的确实是 title
+    let host = FakeHost("main")
+    let cmds = DialogCommands()
+    cmds.attachHost(host)
+    let ctx = IpcContext("main", IpcHub())
+
+    cmds.handle("dialog:pickFolder", titleArgs("选工作区"), ctx)
+    @Expect(host.folderDialogTitle, "选工作区")
+
+    // 不给标题时兜底，别把空标题交给平台（空串会让平台用自己的默认文案）
+    cmds.handle("dialog:pickFolder", JsonObject(), ctx)
+    @Expect(host.folderDialogTitle, "选择文件夹")
+
+    // 用户取消（桩恒回空串）时命令的返回也是空串——上游按「没选」处理
+    let r = cmds.handle("dialog:pickFolder", JsonObject(), ctx)
+    @Expect(r.toString(), "\"\"")
 }
 
 @Test
@@ -141,3 +175,63 @@ func testDialogRejectsUnknownCommand(): Unit {
     }
     @Expect(threw, true)
 }
+
+/**
+ * 桩侧「label → 宿主」解析器（模拟 `app.hostOf`）
+ *
+ * 用独立函数而不是内联 lambda：多分支要能 return，写成独立函数最稳。
+ */
+func routeProbeHost(label: String, mainHost: FakeHost, secondHost: FakeHost): Option<WebViewHost> {
+    if (label == "second") {
+        return Some(secondHost)
+    }
+    if (label == "main") {
+        return Some(mainHost)
+    }
+    return None
+}
+
+@Test
+func testDialogRoutesToTheWindowThatAsked(): Unit {
+    // 多窗口的核心契约：报文里的 window 决定交给哪个宿主。
+    // 只用单槽（装配时那一个宿主）时，第二扇窗的框会排进 main 的队列——
+    // 2026-10-20 鸿蒙真机实测的串台就是这么来的（docs/鸿蒙ArkWeb接入踩坑.md §10.12）。
+    let mainHost = FakeHost("main")
+    let secondHost = FakeHost("second")
+    let cmds = DialogCommands()
+    cmds.attachHost(mainHost)
+    cmds.attachHostResolver({ label => routeProbeHost(label, mainHost, secondHost) })
+    let hub = IpcHub()
+
+    cmds.handle("dialog:message", messageArgs("second 的框"), IpcContext("second", hub))
+    @Expect(secondHost.messageDialogArgs.contains("second 的框"), true)
+    @Expect(secondHost.messageDialogArgs.contains("|second 的框"), true)
+    // 关键断言：另一扇窗**一点都没被碰到**
+    @Expect(mainHost.messageDialogArgs, "")
+
+    cmds.handle("dialog:message", messageArgs("main 的框"), IpcContext("main", hub))
+    @Expect(mainHost.messageDialogArgs.contains("main 的框"), true)
+    // 反向也成立：second 那一份不被覆盖（各持一份状态，不是共用一个槽）
+    @Expect(secondHost.messageDialogArgs.contains("second 的框"), true)
+}
+
+@Test
+func testDialogReportsUnknownWindowInsteadOfFallingBack(): Unit {
+    // 解析器在场而窗口没登记时如实报错：悄悄回落到单槽正是串台的来源
+    let mainHost = FakeHost("main")
+    let secondHost = FakeHost("second")
+    let cmds = DialogCommands()
+    cmds.attachHost(mainHost)
+    cmds.attachHostResolver({ label => routeProbeHost(label, mainHost, secondHost) })
+    var threw = false
+    try {
+        cmds.handle("dialog:message", messageArgs("谁的框"), IpcContext("ghost", IpcHub()))
+    } catch (e: CommandException) {
+        threw = true
+        @Expect(e.message.contains("ghost"), true)
+    }
+    @Expect(threw, true)
+    // 报错之后两个宿主都没被写过：宁可不弹，也不弹到别人窗口里
+    @Expect(mainHost.messageDialogArgs, "")
+    @Expect(secondHost.messageDialogArgs, "")
+}

package/src/tests/plugin_http_test.cj

@@ -0,0 +1,124 @@
+package cjTauri.tests
+
+import cjTauri.*
+import cjTauri.plugins.http.*
+import std.collection.*
+import std.unittest.*
+import std.unittest.testmacro.*
+
+/*
+ * http 插件的策略层用例（RFC-003 HTTP 白名单收口）。
+ *
+ * 只测**纯函数**（URL → host 提取、上限常量、插件声明面）：真的发请求那一段归
+ * 实机 E2E——单测进程里起真 HTTP 服务会引入对环境的依赖，不符合「渐进目标」的口径。
+ */
+
+@Test
+func testHttpHostOfExtractsHostLowercased(): Unit {
+    @Expect(httpHostOf("https://api.deepseek.com/v1/chat/completions"), "api.deepseek.com")
+    // host 大小写不敏感：统一小写，匹配口径才收得住
+    @Expect(httpHostOf("https://API.DeepSeek.COM/x"), "api.deepseek.com")
+}
+
+@Test
+func testHttpHostOfStripsPortAndUserinfo(): Unit {
+    // 端口不参与匹配（白名单声明「信这个主机」）
+    @Expect(httpHostOf("http://localhost:2375/docker"), "localhost")
+    // userinfo（user:pass@host）不许用来伪造白名单匹配
+    @Expect(httpHostOf("https://user:pass@api.example.com/"), "api.example.com")
+}
+
+@Test
+func testHttpHostOfRejectsNonHttpSchemes(): Unit {
+    // file: 不给出网语义；空 host（ftp://）也当解析不出
+    let f = match (httpHostOf("file:///etc/passwd")) {
+        case Some(_) => true
+        case None => false
+    }
+    @Expect(f, false)
+    let n = match (httpHostOf("notaurl")) {
+        case Some(_) => true
+        case None => false
+    }
+    @Expect(n, false)
+}
+
+@Test
+func testHttpHostOfIpv6Literal(): Unit {
+    // IPv6 字面量整体当 host（不拆端口）：去端口逻辑只在非 '[' 开头时走
+    @Expect(httpHostOf("http://[::1]:8080/x"), "[::1]")
+}
+
+@Test
+func testHttpPluginDeclarations(): Unit {
+    let p = HttpPlugin()
+    @Expect(p.name(), "http")
+    @Expect(p.scopeAware(), true)
+    // 权限集 default = get + post + delete + postStream：集声明 != 放行，清单引用才生效
+    @Expect(p.permissions().contains("default"), true)
+    let cmds = p.commands()
+    @Expect(cmds.contains("get"), true)
+    @Expect(cmds.contains("post"), true)
+    // delete 是给「带 JSON 体的 DELETE」用的（cjh 的工作区删除靠体传 path）：
+    // 少了它前端只能退化成无体 DELETE，对端拿不到要删哪个
+    @Expect(cmds.contains("delete"), true)
+    @Expect(cmds.contains("postStream"), true)
+    // 推一个事件（流式 http:chunk，短名登记）、无前端 shim
+    @Expect(p.events().size == 1, true)
+    @Expect(p.jsShim().size == 0, true)
+}
+
+@Test
+func testHttpHostOfRejectsWsSchemes(): Unit {
+    // http 插件的 host 提取转发核心 urlHostOf（ws/wss 是 ws 插件的合法目标），
+    // 但协议收紧到 http(s)：ws:// 不是可抓取目标，解析不出 host 按白名单未命中拒
+    let f = match (httpHostOf("ws://127.0.0.1:8765/ws")) {
+        case Some(_) => true
+        case None => false
+    }
+    @Expect(f, false)
+}
+
+@Test
+func testHttpLimitsAreSane(): Unit {
+    // 上限是「防撑爆」而非「功能」：8 MiB 与 60s 与既有插件（clipboard 8MiB）同量级
+    @Expect(CJ_HTTP_MAX_BYTES == 8 * 1024 * 1024, true)
+    @Expect(CJ_HTTP_TIMEOUT_SECONDS > 0, true)
+    @Expect(CJ_HTTP_MAX_HEADERS > 0, true)
+}
+
+/*
+ * 流式分块的 UTF-8 边界（2026-10-16 实机 → 回归）：`takeCompleteUtf8` 取走完整序列后
+ * 必须把 pending 里的**这些字节**全移掉。曾经写成 `remove(0..(cut-1))`（Range 是右开的，
+ * 这样就少移 1 字节），上一个序列的末字节留在 pending 里，下一轮拼出的字节序列非法，
+ * fromUtf8 抛 IllegalArgumentException，表现是「中文回复偶发整条 postStream 请求失败」。
+ * 判据就一条：整块都是完整序列时，取完 pending 必须**空**。
+ */
+
+@Test
+func testHttpTakeCompleteUtf8ConsumesWholeCompleteChunk(): Unit {
+    let pending = ArrayList<Byte>()
+    for (b in "abc你".toArray()) {
+        pending.add(b)
+    }
+    let cmds = HttpCommands()
+    @Expect(cmds.takeCompleteUtf8(pending), "abc你")
+    @Expect(pending.size, 0)
+}
+
+@Test
+func testHttpTakeCompleteUtf8KeepsPartialTail(): Unit {
+    // 尾巴不完整（汉字只到了前 2 字节）：留在 pending 里等下一块补齐，不能按原样解出来
+    let bytes = "你".toArray()
+    @Expect(bytes.size, 3)
+    let pending = ArrayList<Byte>()
+    pending.add(bytes[0])
+    pending.add(bytes[1])
+    let cmds = HttpCommands()
+    @Expect(cmds.takeCompleteUtf8(pending), "")
+    @Expect(pending.size, 2)
+    // 第 3 字节到了：跨块的字符拼回来，pending 随之清空
+    pending.add(bytes[2])
+    @Expect(cmds.takeCompleteUtf8(pending), "你")
+    @Expect(pending.size, 0)
+}

package/src/tests/plugin_menu_test.cj

@@ -1,6 +1,7 @@
 package cjTauri.tests
 
 import cjTauri.*
+import cjTauri.plugins.menu.*
 import std.collection.*
 import stdx.encoding.json.*
 import std.unittest.*

package/src/tests/plugin_notification_test.cj

@@ -0,0 +1,205 @@
+package cjTauri.tests
+
+import cjTauri.*
+import cjTauri.plugins.notification.*
+import std.collection.*
+import stdx.encoding.json.*
+import std.unittest.*
+import std.unittest.testmacro.*
+
+/*
+ * notification 插件单元测试：命令面 / shim / 命名权限集闸门 / 参数校验 / 未装配宿主的可读错误
+ * + 「宿主已装配」时的转交（FakeHost 记痕）。
+ *
+ * 真通知落在 C 桥（Linux 走 freedesktop Notifications，Windows 桩阶段未实现），
+ * 归实机验证；这里只锁入口逻辑。body 可省是契约的一部分，单独覆盖。
+ */
+
+/** 取一条「已装配宿主」的命令处理器 */
+func notifCmdWithHost(host: FakeHost): CommandHandler {
+    let c = NotificationCommands()
+    c.attachHost(host)
+    return c
+}
+
+func notifErrOf(handler: CommandHandler, cmd: String, args: JsonObject): String {
+    try {
+        handler.handle(cmd, args, IpcContext("main", IpcHub()))
+        return ""
+    } catch (e: CommandException) {
+        return e.message
+    }
+}
+
+/** 造 { title, body } */
+func notifArgs(title: String, body: JsonValue): JsonObject {
+    var o = JsonObject()
+    o.put("title", JsonString(title))
+    o.put("body", body)
+    return o
+}
+
+@Test
+func testNotificationPluginSurface(): Unit {
+    let p = NotificationPlugin()
+    @Expect(p.name(), "notification")
+    let names = pluginCommandNames(p)
+    @Expect(names.size, 1)
+    @Expect(names[0], "notification:notify")
+}
+
+@Test
+func testNotificationPluginShimTargetsItsOwnNamespace(): Unit {
+    let js = NotificationPlugin().jsShim()
+    @Expect(js.contains("t.notification"), true)
+    @Expect(js.contains("'notification:notify'"), true)
+}
+
+@Test
+func testNotificationPluginDeclaresPermissionSets(): Unit {
+    let sets = pluginPermissionSets(NotificationPlugin())
+    @Expect(sets.size, 1)
+    let d = sets.get("notification:default").getOrThrow()
+    @Expect(d.size, 1)
+    @Expect(d[0], "notification:notify")
+}
+
+@Test
+func testNotificationPermissionSetGatesCommand(): Unit {
+    let out = ArrayList<String>()
+    let reg = CapabilityRegistry()
+    reg.addFromJson(JsonValue.fromStr("{\"identifier\":\"n\",\"permissions\":[\"notification:default\"]}"))
+    let hub = hubWithRegistry(reg, out)
+    registerPluginCommands(hub, NotificationPlugin())
+    registerPluginPermissionSets(reg, NotificationPlugin())
+
+    // 集内命令放行：走到「宿主未装配」的业务错误，而不是「未授权」
+    hub.handleRawMessage(
+        "{\"type\":\"invoke\",\"id\":51,\"cmd\":\"notification:notify\",\"args\":{\"title\":\"t\"}}")
+    waitSink(out, 1)
+    @Expect(out.size, 1)
+    @Expect(strField(out[0], "error").contains("command not allowed"), false)
+}
+
+@Test
+func testNotificationWithoutPermissionIsDenied(): Unit {
+    let out = ArrayList<String>()
+    let reg = CapabilityRegistry()
+    reg.addFromJson(JsonValue.fromStr("{\"identifier\":\"empty\",\"permissions\":[]}"))
+    let hub = hubWithRegistry(reg, out)
+    registerPluginCommands(hub, NotificationPlugin())
+    registerPluginPermissionSets(reg, NotificationPlugin())
+
+    hub.handleRawMessage(
+        "{\"type\":\"invoke\",\"id\":52,\"cmd\":\"notification:notify\",\"args\":{\"title\":\"t\"}}")
+    waitSink(out, 1)
+    @Expect(strField(out[0], "error"), "command not allowed: notification:notify")
+}
+
+@Test
+func testNotificationRequiresTitle(): Unit {
+    let cmd = NotificationPlugin().commands().get("notify").getOrThrow()
+    let ctx = IpcContext("main", IpcHub())
+    var threw = false
+    try {
+        cmd.handle("notification:notify", JsonObject(), ctx)
+    } catch (e: CommandException) {
+        threw = true
+        @Expect(e.message.contains("missing argument \"title\""), true)
+    }
+    @Expect(threw, true)
+}
+
+@Test
+func testNotificationRejectsNonStringTitle(): Unit {
+    var args = JsonObject()
+    args.put("title", JsonBool(true))
+    let cmd = NotificationPlugin().commands().get("notify").getOrThrow()
+    var threw = false
+    try {
+        cmd.handle("notification:notify", args, IpcContext("main", IpcHub()))
+    } catch (e: CommandException) {
+        threw = true
+        @Expect(e.message.contains("must be a string"), true)
+    }
+    @Expect(threw, true)
+}
+
+@Test
+func testNotificationWithoutHostIsReadableError(): Unit {
+    @Expect(notifErrOf(NotificationPlugin().commands().get("notify").getOrThrow(), "notification:notify",
+        notifArgs("hi", JsonString("body"))).contains("宿主未装配"), true)
+}
+
+@Test
+func testNotificationRejectsUnknownCommand(): Unit {
+    @Expect(notifErrOf(NotificationPlugin().commands().get("notify").getOrThrow(), "notification:nope",
+        JsonObject()).contains("unknown notification command"), true)
+}
+
+@Test
+func testNotificationBodyIsOptional(): Unit {
+    let host = FakeHost("main")
+    let cmd = notifCmdWithHost(host)
+
+    // 只给 title：body 按空串
+    var onlyTitle = JsonObject()
+    onlyTitle.put("title", JsonString("标题"))
+    let r1 = cmd.handle("notification:notify", onlyTitle, IpcContext("main", IpcHub()))
+    match (r1.kind()) {
+        case JsonKind.JsNull => ()
+        case _ => @Expect(false, true)
+    }
+    @Expect(host.notifiedArgs, "标题|")
+
+    // body 显式 null：同样按空串（前端 o.body 传 undefined 时序列化可能落成 null）
+    cmd.handle("notification:notify", notifArgs("标题2", JsonNull()), IpcContext("main", IpcHub()))
+    @Expect(host.notifiedArgs, "标题2|")
+
+    // body 有值：原样转交
+    cmd.handle("notification:notify", notifArgs("标题3", JsonString("正文")), IpcContext("main", IpcHub()))
+    @Expect(host.notifiedArgs, "标题3|正文")
+}
+
+/** 桩侧「label → 宿主」解析器见 plugin_dialog_test.cj 的 routeProbeHost（同包可见） */
+@Test
+func testNotificationRoutesToTheWindowThatAsked(): Unit {
+    // 与 dialog / clipboard 同一条契约：报文里的 window 决定交给哪个宿主
+    let mainHost = FakeHost("main")
+    let secondHost = FakeHost("second")
+    let cmds = NotificationCommands()
+    cmds.attachHost(mainHost)
+    cmds.attachHostResolver({ label => routeProbeHost(label, mainHost, secondHost) })
+
+    cmds.handle("notification:notify", notifArgs("second 的通知", JsonString("正文")),
+        IpcContext("second", IpcHub()))
+    @Expect(secondHost.notifiedArgs, "second 的通知|正文")
+    // 关键断言：另一扇窗的宿主一点都没被碰到
+    @Expect(mainHost.notifiedArgs, "")
+
+    // 反向也成立
+    cmds.handle("notification:notify", notifArgs("main 的通知", JsonNull()), IpcContext("main", IpcHub()))
+    @Expect(mainHost.notifiedArgs, "main 的通知|")
+    @Expect(secondHost.notifiedArgs, "second 的通知|正文")
+}
+
+@Test
+func testNotificationReportsUnknownWindowInsteadOfFallingBack(): Unit {
+    let mainHost = FakeHost("main")
+    let secondHost = FakeHost("second")
+    let cmds = NotificationCommands()
+    cmds.attachHost(mainHost)
+    cmds.attachHostResolver({ label => routeProbeHost(label, mainHost, secondHost) })
+
+    var threw = false
+    try {
+        cmds.handle("notification:notify", notifArgs("谁的", JsonNull()), IpcContext("ghost", IpcHub()))
+    } catch (e: CommandException) {
+        threw = true
+        @Expect(e.message.contains("ghost"), true)
+    }
+    @Expect(threw, true)
+    // 报错之后两个宿主都没被写过：不回落单槽
+    @Expect(mainHost.notifiedArgs, "")
+    @Expect(secondHost.notifiedArgs, "")
+}