dsh-browser-plus 0.0.0-stage → 0.5.1

package/scripts/smoke-chrome-world.mjs

@@ -0,0 +1,65 @@
+/**
+ * Verify chromeWorld: 'isolated' in a real window.
+ *
+ * This is the one declared feature that had never been exercised: the chrome is
+ * injected into an isolated world so the page's own scripts cannot read its
+ * globals. The claim has two halves -- the chrome still mounts, and the page's
+ * main world cannot see it -- and an A/B against the default mode proves the
+ * switch actually changes something rather than being inert.
+ *
+ * Run: npm run smoke:chrome-world
+ */
+import { mkdtempSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+
+import { RemoteElectronViewHost, defaultHostMainPath } from '../lib/browser-electron/remote-host.js'
+
+const wait = ms => new Promise(resolve => setTimeout(resolve, ms))
+const results = []
+
+const probe = async (label, options) => {
+  const profile = mkdtempSync(join(tmpdir(), 'dsh-chrome-world-'))
+  process.env.DSH_BROWSER_PLUS_USER_DATA = profile
+  const host = new RemoteElectronViewHost(defaultHostMainPath(), options)
+  try {
+    const view = host.createView('chrome-world', 'Chrome World')
+    await view.sendCommand('Page.enable', {})
+    await view.sendCommand('Page.navigate', { url: 'https://example.com/' })
+    await wait(2500)
+    const reply = await view.sendCommand('Runtime.evaluate', {
+      expression: 'JSON.stringify({ chromeHost: document.getElementById("__dsh_browser_chrome_host__") !== null, painted: (() => { const h = document.getElementById("__dsh_browser_chrome_host__"); if (h === null) return 0; return Math.round(h.getBoundingClientRect().width) })(), binding: typeof window.__dshBrowserTaskAction, tasks: typeof window.__dshTasks, trail: typeof window.__dshTrail })',
+      returnByValue: true,
+    })
+    const value = JSON.parse(reply?.result?.value ?? '{}')
+    results.push({ label, ...value })
+    console.log('  ' + label.padEnd(22) + JSON.stringify(value))
+    return value
+  } finally {
+    host.dispose()
+    await wait(1500)
+    try { rmSync(profile, { recursive: true, force: true }) } catch { /* briefly locked */ }
+  }
+}
+
+// 两种模式都**显式**指定：默认值会变（2026-10-04 起默认 isolated），
+// 用 `{}` 表示「main」会让这条检查在默认值一变就静默失效。
+const isolated = await probe('isolated (default)', {})
+const main = await probe('main (opt-in)', { chromeWorld: 'main' })
+
+// Assert only what chromeWorld claims. window.__dshBrowserTaskAction is reported
+// but not asserted: it appears asynchronously after load, so a fixed wait
+// measures it inconsistently (observed both ways at 2.5s and 3s).
+const failures = []
+if (main.chromeHost !== true) failures.push('the chrome did not mount in main mode')
+if (main.tasks !== 'object' || main.trail !== 'object') failures.push('main mode should leak the chrome globals, or the A/B proves nothing')
+if (isolated.chromeHost !== true) failures.push('the chrome did not mount in isolated mode')
+for (const key of ['binding', 'tasks', 'trail']) {
+  if (isolated[key] !== 'undefined') failures.push('isolated mode still leaks window.' + (key === 'binding' ? '__dshBrowserTaskAction' : '__dsh' + key[0].toUpperCase() + key.slice(1)))
+}
+console.log('')
+if (failures.length > 0) {
+  console.log(JSON.stringify({ ok: false, failures }))
+  process.exit(1)
+}
+console.log(JSON.stringify({ ok: true, note: 'the chrome mounts in both modes; only main (the opt-in bisect path) leaks its globals to the page' }))

package/scripts/smoke-electron-host.mjs

@@ -0,0 +1,50 @@
+import assert from 'node:assert/strict'
+
+import { RemoteElectronViewHost, defaultHostMainPath } from '../lib/browser-electron/remote-host.js'
+
+function withTimeout(promise, timeoutMs, label) {
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => reject(new Error(label + ' timed out after ' + String(timeoutMs) + 'ms')), timeoutMs)
+    promise.then(
+      value => { clearTimeout(timer); resolve(value) },
+      error => { clearTimeout(timer); reject(error) },
+    )
+  })
+}
+
+function delay(ms) {
+  return new Promise(resolve => setTimeout(resolve, ms))
+}
+
+const host = new RemoteElectronViewHost(defaultHostMainPath())
+try {
+  const view = host.createView('electron-host-smoke', 'Electron Host Smoke')
+  await withTimeout(view.sendCommand('Page.navigate', { url: 'http://127.0.0.1:3080/' }), 15_000, 'Page.navigate')
+  const binding = await withTimeout(view.sendCommand('Runtime.evaluate', {
+    expression: 'typeof window.__dshBrowserTaskAction',
+    returnByValue: true,
+  }), 10_000, 'binding probe')
+  assert.equal(binding.result?.value, 'function', 'page task binding must be present')
+  const chromeReady = await withTimeout(view.sendCommand('Runtime.evaluate', {
+    expression: "new Promise(resolve => { const deadline = Date.now() + 3000; const inspect = () => { const host = document.getElementById('__dsh_browser_chrome_host__'); if (host?.getAttribute('data-dsh-browser-ready') === '1' || Date.now() >= deadline) { resolve(host?.getAttribute('data-dsh-browser-ready') || null); return } setTimeout(inspect, 50) }; inspect() })",
+    returnByValue: true,
+    awaitPromise: true,
+  }), 5_000, 'chrome ready probe')
+  assert.equal(chromeReady.result?.value, '1', 'page chrome must finish wiring interactive controls')
+
+  // The renderer's direct DOM interaction path is covered by page-chrome
+  // regression tests. CDP Input.dispatchMouseEvent does not surface a DOM
+  // pointer event in Electron 42, so it cannot faithfully stand in for a hand.
+  await delay(300)
+  await withTimeout(view.sendCommand('Runtime.evaluate', {
+    expression: "window.__dshBrowserTaskAction(JSON.stringify({ type: 'set-control-owner', taskKey: 'electron-host-smoke', control: 'human' })); 'sent'",
+    returnByValue: true,
+  }), 10_000, 'binding action')
+  await delay(300)
+  const task = await withTimeout(host.getTask('electron-host-smoke'), 10_000, 'task state query')
+  assert.equal(task?.control, 'human', 'Host must receive the page handoff')
+  assert.equal(task?.status, 'waiting-user', 'Host must show the handoff state')
+  console.log(JSON.stringify({ ok: true, task }))
+} finally {
+  host.dispose()
+}

package/scripts/test-orb-drag.mjs

@@ -0,0 +1,83 @@
+/**
+ * 真正驱动指针事件的悬浮球拖动测试（审查要的那条）。
+ *
+ * 单元测试只能断言「生成的脚本文本里有某个公式」，抓不到 H2 那类错误 ——
+ * 慢速拖动曾经因为阈值拿「上一帧已应用的位置」当基准，永远不算拖动：
+ * 位置不落盘、松手还会误触 click。这里用离屏 Electron 跑真脚本、派发真指针事件。
+ *
+ *   node scripts/test-orb-drag.mjs
+ */
+import { spawnSync } from 'node:child_process'
+import { mkdtempSync, readFileSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { createRequire } from 'node:module'
+
+const require = createRequire(import.meta.url)
+const chrome = require('../lib/browser-electron/page-chrome.js')
+const dir = mkdtempSync(join(tmpdir(), 'orb-drag-'))
+const W = 620
+const H = 480
+const CENTER = { x: W - 18 - 22, y: H - 18 - 22 }
+
+const probe = [
+  'window.__moves = [];',
+  'window.__seen = [];',
+  'window.addEventListener("pointerdown", e => window.__seen.push(["down", e.buttons, Math.round(e.clientX)]), true);',
+  'window.addEventListener("pointermove", e => window.__seen.push(["move", e.buttons, Math.round(e.clientX)]), true);',
+  'window.__dshChromeToken = "t";',
+  'window.__dshChromeTaskKey = "default";',
+  'window.__dshBrowserTaskAction = function (payload) { try { const a = JSON.parse(payload); if (a && a.type === "orb-move") window.__moves.push(a) } catch {} };',
+  'window.__dshChromeBootstrap = ' + JSON.stringify({
+    kind: 'bootstrap', epoch: 1, revision: 1, selectedTaskKey: 'default',
+    panels: { tasks: false, trail: false },
+    tasks: [{ key: 'default', label: '', active: true, tabs: 1, status: 'running', updatedAt: Date.now() }],
+    tabs: [], trail: [], bookmarks: [], bookmarkBar: false,
+  }) + ';',
+].join('')
+
+const html = '<!doctype html><html><head><meta charset="utf-8"><style>html,body{margin:0;height:100%;background:#202124}</style></head><body>'
+  + '<scr' + 'ipt>' + probe + '</scr' + 'ipt>'
+  + '<scr' + 'ipt>' + chrome.buildPageChromeScript('t', 'page') + '</scr' + 'ipt>'
+  + '</body></html>'
+
+const driver = `
+const { app, BrowserWindow } = require('electron')
+const fs = require('fs')
+const file = process.argv[2]
+const out = process.argv[3]
+const center = JSON.parse(process.argv[4])
+app.whenReady().then(async () => {
+  const win = new BrowserWindow({ width: ${W}, height: ${H}, show: false, webPreferences: { offscreen: true } })
+  await win.loadFile(file)
+  await new Promise(r => setTimeout(r, 700))
+  const send = (type, x, y, buttons) => win.webContents.sendInputEvent({ type, x: Math.round(x), y: Math.round(y), button: 'left', buttons, clickCount: 1 })
+  send('mouseDown', center.x, center.y, 1)
+  await new Promise(r => setTimeout(r, 80))
+  // 每步之间等一帧多一点：Chromium 会把挨得太近的 pointermove 合并掉，
+  // 合并之后「每帧位移」就超过阈值了，测不出 H2 那种慢速拖动。
+  for (let i = 1; i <= 60; i++) { send('mouseMove', center.x - i * 2, center.y - i, 1); await new Promise(r => setTimeout(r, 25)) }
+  send('mouseUp', center.x - 120, center.y - 60, 0)
+  await new Promise(r => setTimeout(r, 250))
+  fs.writeFileSync(out, JSON.stringify({
+    moves: await win.webContents.executeJavaScript('window.__moves'),
+    seen: await win.webContents.executeJavaScript('window.__seen.slice(0, 3)'),
+    total: await win.webContents.executeJavaScript('window.__seen.length'),
+  }))
+  console.log('DRIVER_DONE')
+  app.quit()
+})
+`
+writeFileSync(join(dir, 'page.html'), html)
+writeFileSync(join(dir, 'drive.cjs'), driver)
+const out = join(dir, 'result.json')
+const run = spawnSync(process.execPath, [require.resolve('electron/cli.js'), join(dir, 'drive.cjs'), join(dir, 'page.html'), out, JSON.stringify(CENTER)], { encoding: 'utf8' })
+const text = String(run.stdout ?? '') + String(run.stderr ?? '')
+if (!text.includes('DRIVER_DONE')) { console.error('driver did not finish:\n' + text.slice(-900)); process.exit(1) }
+const result = JSON.parse(readFileSync(out, 'utf8'))
+console.log('page saw ' + result.total + ' pointer events; first 3: ' + JSON.stringify(result.seen))
+const moves = result.moves
+if (moves.length === 0) { console.error('FAIL: a slow drag produced no orb-move — the position would not be persisted'); process.exit(1) }
+const last = moves[moves.length - 1]
+if (!(last.x < CENTER.x) || !(last.y < CENTER.y)) { console.error('FAIL: the orb did not move up-left: ' + JSON.stringify(last)); process.exit(1) }
+console.log('OK: slow drag persisted ' + moves.length + ' move(s), last ' + last.x + ',' + last.y)