feat: add computer control and managed browser

2026-08-05 12:55:24 +08:00
parent 2f549387a6
commit 38ac2206f2
92 changed files with 21028 additions and 766 deletions
@@ -0,0 +1,188 @@
+import { afterEach, describe, expect, it } from 'vitest'
+import { capabilityDiagnosticReportSchema } from '../../shared/capability-contracts'
+import {
+  CapabilityDiagnostics,
+  type CapabilityDiagnosticCheck
+} from './capability-diagnostics'
+
+const originalDiagnosticSecret = process.env.GOODBUDDY_DIAGNOSTIC_TEST_SECRET
+
+afterEach(() => {
+  if (originalDiagnosticSecret === undefined) {
+    delete process.env.GOODBUDDY_DIAGNOSTIC_TEST_SECRET
+  } else {
+    process.env.GOODBUDDY_DIAGNOSTIC_TEST_SECRET = originalDiagnosticSecret
+  }
+})
+
+function check(
+  id: string,
+  status: 'available' | 'degraded' | 'unavailable',
+  summary = `${id} result`
+): CapabilityDiagnosticCheck {
+  return {
+    id,
+    run: async () => ({ status, summary })
+  }
+}
+
+describe('CapabilityDiagnostics', () => {
+  it('aggregates required checks with unavailable taking precedence', async () => {
+    const diagnostics = new CapabilityDiagnostics(
+      [
+        check('browser-executable', 'degraded'),
+        check('managed-profile-root', 'unavailable')
+      ],
+      { now: () => new Date('2026-08-05T12:00:00.000Z') }
+    )
+
+    await expect(
+      diagnostics.diagnose({
+        capabilityId: 'host-browser-control',
+        enabled: true,
+        platform: 'win32',
+        architecture: 'x64'
+      })
+    ).resolves.toMatchObject({
+      status: 'unavailable',
+      checkedAt: '2026-08-05T12:00:00.000Z',
+      checks: [
+        { id: 'browser-executable', status: 'degraded' },
+        { id: 'managed-profile-root', status: 'unavailable' }
+      ]
+    })
+  })
+
+  it('reports available, degraded, disabled and unsupported states', async () => {
+    const available = new CapabilityDiagnostics([
+      check('browser-executable', 'available'),
+      check('managed-profile-root', 'available')
+    ])
+    const degraded = new CapabilityDiagnostics([
+      check('browser-executable', 'available'),
+      check('managed-profile-root', 'degraded')
+    ])
+    const request = {
+      capabilityId: 'host-browser-control' as const,
+      enabled: true,
+      platform: 'linux' as const,
+      architecture: 'arm64'
+    }
+
+    await expect(available.diagnose(request)).resolves.toMatchObject({
+      status: 'available'
+    })
+    await expect(degraded.diagnose(request)).resolves.toMatchObject({
+      status: 'degraded'
+    })
+    await expect(
+      available.diagnose({ ...request, enabled: false })
+    ).resolves.toMatchObject({ status: 'disabled', checks: [] })
+    await expect(
+      available.diagnose({
+        ...request,
+        platform: 'freebsd'
+      })
+    ).resolves.toMatchObject({
+      status: 'unavailable',
+      checks: [{ id: 'platform-support', status: 'unavailable' }]
+    })
+  })
+
+  it('redacts environment values, credentials and sensitive paths', async () => {
+    process.env.GOODBUDDY_DIAGNOSTIC_TEST_SECRET =
+      'environment-secret-value-12345'
+    const diagnostics = new CapabilityDiagnostics([
+      {
+        id: 'browser-executable',
+        run: async () => ({
+          status: 'degraded',
+          summary:
+            'token=top-secret-token Bearer abc.def.ghi environment-secret-value-12345 /home/alice/private/browser',
+          remedy:
+            'apiKey=sk-abcdefghijklmnop at C:\\Users\\Alice\\AppData\\browser'
+        })
+      },
+      check('managed-profile-root', 'available')
+    ])
+    const report = await diagnostics.diagnose({
+      capabilityId: 'host-browser-control',
+      enabled: true,
+      platform: 'linux',
+      architecture: 'x64'
+    })
+    const serialized = JSON.stringify(report)
+
+    expect(capabilityDiagnosticReportSchema.parse(report)).toEqual(report)
+    expect(serialized).not.toContain('top-secret-token')
+    expect(serialized).not.toContain('abc.def.ghi')
+    expect(serialized).not.toContain('environment-secret-value-12345')
+    expect(serialized).not.toContain('/home/alice')
+    expect(serialized).not.toContain('C:\\\\Users\\\\Alice')
+    expect(serialized).toContain('[redacted')
+  })
+
+  it('fails closed when a check times out', async () => {
+    const diagnostics = new CapabilityDiagnostics(
+      [
+        {
+          id: 'browser-executable',
+          run: async () => new Promise(() => undefined)
+        },
+        check('managed-profile-root', 'available')
+      ],
+      { timeoutMs: 10 }
+    )
+    const report = await diagnostics.diagnose({
+      capabilityId: 'host-browser-control',
+      enabled: true,
+      platform: 'win32',
+      architecture: 'x64'
+    })
+
+    expect(report.status).toBe('unavailable')
+    expect(report.checks[0]).toMatchObject({
+      id: 'browser-executable',
+      status: 'unavailable',
+      summary: '诊断检查超时。'
+    })
+  })
+
+  it('fails closed promptly when cancelled', async () => {
+    const controller = new AbortController()
+    const diagnostics = new CapabilityDiagnostics(
+      [
+        {
+          id: 'browser-executable',
+          run: async () => new Promise(() => undefined)
+        },
+        check('managed-profile-root', 'available')
+      ],
+      { timeoutMs: 1_000 }
+    )
+    const pending = diagnostics.diagnose({
+      capabilityId: 'host-browser-control',
+      enabled: true,
+      platform: 'darwin',
+      architecture: 'arm64',
+      signal: controller.signal
+    })
+    controller.abort()
+
+    await expect(pending).resolves.toMatchObject({
+      status: 'unavailable',
+      checks: [
+        {
+          id: 'browser-executable',
+          status: 'unavailable',
+          summary: '诊断检查已取消。'
+        },
+        {
+          id: 'managed-profile-root',
+          status: 'unavailable',
+          summary: '诊断检查已取消。'
+        }
+      ]
+    })
+  })
+})