mesalogo
42cbfa43f1
Completed AI responses now expose a bottom copy action that copies their Markdown source without reasoning, tool logs, or citation metadata. Clipboard writes use a validated Preload/Main bridge so sandboxed Electron sessions no longer fail with a renderer clipboard permission error; full-conversation copy uses the same path. Release note: AI 回复底部现在可以直接复制 Markdown 原文，并修复了沙箱环境下回复和完整会话可能无法写入剪贴板的问题。
388 lines
14 KiB
TypeScript
388 lines
14 KiB
TypeScript
import { readFileSync } from 'node:fs'
|
|
import { join } from 'node:path'
|
|
import { describe, expect, it } from 'vitest'
|
|
|
|
describe('sandboxed preload', () => {
|
|
it('does not import Node built-ins unavailable in Electron sandbox', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).not.toMatch(/\bfrom\s+['"]node:/u)
|
|
expect(source).not.toMatch(/\brequire\(\s*['"]node:/u)
|
|
})
|
|
|
|
it('does not load runtime schema libraries in the Electron sandbox', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).not.toMatch(/\b\w+Schema\b/u)
|
|
expect(source).not.toMatch(/\bfrom\s+['"]zod['"]/u)
|
|
})
|
|
|
|
it('exposes only explicit clipboard text writing', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
const clipboard =
|
|
source.match(
|
|
/clipboard: \{(?<body>[\s\S]*?)\r?\n {2}\},\r?\n {2}agent:/u
|
|
)?.groups?.body ?? ''
|
|
expect(clipboard).toContain('writeText: async (text: string)')
|
|
expect(clipboard).toContain('ipcChannels.clipboardWriteText')
|
|
expect(clipboard).not.toMatch(/\b(?:read|image|html|rtf|bookmark)\b/iu)
|
|
})
|
|
|
|
it('exposes only narrow browser-control methods', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
const browser =
|
|
source.match(
|
|
/browser: \{(?<body>[\s\S]*?)\r?\n {2}\},\r?\n {2}terminal:/u
|
|
)?.groups?.body ?? ''
|
|
for (const method of [
|
|
'navigate:',
|
|
'back:',
|
|
'reload:',
|
|
'stopLoading:',
|
|
'interact:',
|
|
'stop:',
|
|
'onState:'
|
|
]) {
|
|
expect(browser).toContain(method)
|
|
}
|
|
expect(browser).not.toMatch(
|
|
/\b(?:webContents|debugger|session|partition|cookie)\b/iu
|
|
)
|
|
})
|
|
|
|
it('exposes bounded local tool environment operations without execution inputs', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
const localTools =
|
|
source.match(
|
|
/localToolEnvironment: \{(?<body>[\s\S]*?)\r?\n {2}\},\r?\n {2}feedback:/u
|
|
)?.groups?.body ?? ''
|
|
for (const method of [
|
|
'getSnapshot:',
|
|
'updateSettings:',
|
|
'refreshCandidates:',
|
|
'selectExecutable:',
|
|
'diagnose:',
|
|
'installPython:',
|
|
'cancelPython:',
|
|
'removePython:',
|
|
'onProgress:'
|
|
]) {
|
|
expect(localTools).toContain(method)
|
|
}
|
|
expect(localTools).not.toMatch(
|
|
/\b(?:command|env|url|hash|installDirectory|shim)\b/iu
|
|
)
|
|
expect(localTools).toContain('ipcRenderer.removeListener(')
|
|
})
|
|
|
|
it('exposes only explicit computer capability and managed profile IPC methods', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('setComputerCapabilityEnabled:')
|
|
expect(source).toContain('diagnoseComputerCapability:')
|
|
expect(source).toContain('createBrowserProfile:')
|
|
expect(source).toContain('renameBrowserProfile:')
|
|
expect(source).toContain('setDefaultBrowserProfile:')
|
|
expect(source).toContain('removeBrowserProfile:')
|
|
expect(source).not.toMatch(
|
|
/(?:setComputerCapability|BrowserProfile).{0,80}(?:executablePath|command|env|args)/su
|
|
)
|
|
})
|
|
|
|
it('exposes model ZIP dialogs without renderer-controlled paths', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('importArchive: (modelId: string)')
|
|
expect(source).toContain('exportArchive: (modelId: string)')
|
|
expect(source).toContain('importOcrModelArchive: (modelId: string)')
|
|
expect(source).toContain('exportOcrModelArchive: (modelId: string)')
|
|
expect(source).toContain('importModelArchive: (modelId: string)')
|
|
expect(source).toContain('ipcChannels.embeddingModelsImportArchive')
|
|
expect(source).not.toContain('importLocalDirectory:')
|
|
expect(source).not.toContain('importOcrModel:')
|
|
expect(source).not.toMatch(
|
|
/importModelArchive:\s*\([^)]*(?:path|directory|archivePath)/u
|
|
)
|
|
})
|
|
|
|
it('exposes explicit embedding settings operations without vectors or credentials', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
const embeddings =
|
|
source.match(
|
|
/embeddings: \{(?<body>[\s\S]*?)\r?\n {2}\},\r?\n {2}documentParsing:/u
|
|
)?.groups?.body ?? ''
|
|
expect(embeddings).toContain('getSnapshot:')
|
|
expect(embeddings).toContain('getModelProgress:')
|
|
expect(embeddings).toContain('diagnose: (connectionId: string)')
|
|
expect(embeddings).toContain('setCurrent: (connectionId: string)')
|
|
expect(embeddings).toContain('installModel:')
|
|
expect(embeddings).toContain('cancelModelOperation:')
|
|
expect(embeddings).toContain('removeModel:')
|
|
expect(embeddings).not.toMatch(/\b(?:apiKey|credential|vector)\b/iu)
|
|
})
|
|
|
|
it('passes an explicit parsing scenario to document diagnostics', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain(
|
|
'test: (purpose: DocumentParsingTestPurpose)'
|
|
)
|
|
expect(source).toMatch(
|
|
/ipcChannels\.documentParsingTest,\r?\n {8}\{ purpose \}/u
|
|
)
|
|
})
|
|
|
|
it('exposes a narrow OCR operation progress snapshot', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('getOcrModelProgress:')
|
|
expect(source).toContain('ipcChannels.documentOcrModelsProgress')
|
|
})
|
|
|
|
it('exposes a removable attachment parsing progress listener', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('onFileSelectionProgress:')
|
|
expect(source).toContain('contextFileSelectionProgress')
|
|
expect(source).toContain('ipcRenderer.removeListener(')
|
|
})
|
|
|
|
it('exposes only bounded release-note actions', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('releaseNotes: {')
|
|
expect(source).toContain('getPending:')
|
|
expect(source).toContain('acknowledge: async (version: string)')
|
|
expect(source).toContain('ipcChannels.releaseNotesGetPending')
|
|
expect(source).toContain('ipcChannels.releaseNotesAcknowledge')
|
|
})
|
|
|
|
it('exposes only the narrow feedback submission method', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
const feedback =
|
|
source.match(
|
|
/feedback: \{(?<body>[\s\S]*?)\r?\n {2}\},\r?\n {2}shortcuts:/u
|
|
)?.groups?.body ?? ''
|
|
expect(feedback).toContain('submit: (input: FeedbackSubmitInput)')
|
|
expect(feedback).toContain('ipcChannels.feedbackSubmit')
|
|
expect(feedback).not.toMatch(
|
|
/\b(?:url|endpoint|header|cookie|authorization|path)\b/iu
|
|
)
|
|
})
|
|
|
|
it('exposes only get and validated-update shortcut settings methods', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('shortcuts: {')
|
|
expect(source).toContain('ipcChannels.shortcutSettingsGet')
|
|
expect(source).toContain('ipcChannels.shortcutSettingsUpdate')
|
|
expect(source).not.toContain('globalShortcut.')
|
|
})
|
|
|
|
it('exposes only explicit SSH host-management methods', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('sshHosts: {')
|
|
expect(source).toContain('getSnapshot:')
|
|
expect(source).toContain('onAgentConnectionStatus:')
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsAgentConnectionStatus'
|
|
)
|
|
expect(source).toContain(
|
|
'getAgentPackageInventory: (refresh = false)'
|
|
)
|
|
expect(source).toContain('downloadAgentPackage:')
|
|
expect(source).toContain('importAgentPackage:')
|
|
expect(source).toContain('exportAgentPackage: async')
|
|
expect(source).toContain('onAgentPackageProgress:')
|
|
expect(source).toContain('inspectDraftHostKey:')
|
|
expect(source).toContain('discardCandidate:')
|
|
expect(source).toContain('validateAndSave:')
|
|
expect(source).toContain(
|
|
'browseDirectories: (hostId: string, path?: string)'
|
|
)
|
|
expect(source).toContain('cancelDirectoryBrowse: async ()')
|
|
expect(source).toContain('getRemoteEnvironment: (hostId: string)')
|
|
expect(source).toContain(
|
|
'input: RemoteEnvironmentUpdateRequest'
|
|
)
|
|
expect(source).toContain(
|
|
'cancelRemoteEnvironmentUpdate: async (hostId: string)'
|
|
)
|
|
expect(source).toContain(
|
|
'onRemoteEnvironmentUpdateProgress:'
|
|
)
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsRemoteEnvironment'
|
|
)
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsAgentPackageInventory'
|
|
)
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsAgentPackageDownload'
|
|
)
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsAgentPackageImport'
|
|
)
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsAgentPackageExport'
|
|
)
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsAgentPackageProgress'
|
|
)
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsUpdateRemoteEnvironment'
|
|
)
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsCancelRemoteEnvironmentUpdate'
|
|
)
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsRemoteEnvironmentUpdateProgress'
|
|
)
|
|
expect(source).toContain('ipcChannels.sshHostsBrowseDirectories')
|
|
expect(source).toContain(
|
|
'ipcChannels.sshHostsCancelDirectoryBrowse'
|
|
)
|
|
expect(source).not.toContain('sshHostsCreate')
|
|
expect(source).not.toContain('sshHostsAcceptKey')
|
|
expect(source).not.toContain('privateKey:')
|
|
expect(source).not.toContain('agentForward: true')
|
|
const sshHostsSource =
|
|
source.match(
|
|
/sshHosts: \{(?<body>[\s\S]*?)\n {2}\},\n {2}channels:/u
|
|
)
|
|
?.groups?.body ?? ''
|
|
expect(sshHostsSource).not.toMatch(
|
|
/\b(?:credential|password|revision|sftp|shell|command)\b/iu
|
|
)
|
|
expect(sshHostsSource).not.toMatch(
|
|
/\b(?:detail|phaseName|installationId)\b/iu
|
|
)
|
|
})
|
|
|
|
it('exposes only bounded terminal session operations', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
const terminal =
|
|
source.match(
|
|
/terminal: \{(?<body>[\s\S]*?)\r?\n {2}\},\r?\n {2}settings:/u
|
|
)?.groups?.body ?? ''
|
|
expect(terminal).toContain('create:')
|
|
expect(terminal).toContain('write:')
|
|
expect(terminal).toContain('resize:')
|
|
expect(terminal).toContain('close:')
|
|
expect(terminal).toContain('getSnapshot:')
|
|
expect(terminal).toContain('ack:')
|
|
expect(terminal).toContain('onEvent:')
|
|
expect(terminal).toContain('ipcRenderer.removeListener(')
|
|
expect(terminal).not.toMatch(
|
|
/\b(?:shell|cwd|command|environment|password|privateKey|pid)\b/u
|
|
)
|
|
})
|
|
|
|
it('exposes narrow awaited remote project activation and save operations', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('remote: {')
|
|
expect(source).toContain('remoteProjectSave')
|
|
expect(source).toContain('remoteProjectCancelCurrent')
|
|
expect(source).toContain('remoteProjectSaveProgress')
|
|
expect(source).toContain('RemoteProjectSaveRequest')
|
|
expect(source).not.toContain('commitToken')
|
|
expect(source).toContain('ipcRenderer.removeListener(')
|
|
})
|
|
|
|
it('exposes removable project recovery snapshot, retry, and progress APIs', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('getRecoverySnapshot:')
|
|
expect(source).toContain('retryRecovery: (projectId: string)')
|
|
expect(source).toContain('onRecoveryProgress:')
|
|
expect(source).toContain('ipcChannels.remoteProjectRecoveryGet')
|
|
expect(source).toContain('ipcChannels.remoteProjectRecoveryRetry')
|
|
expect(source).toContain(
|
|
'ipcChannels.remoteProjectRecoveryProgress'
|
|
)
|
|
expect(source).toMatch(
|
|
/remoteProjectRecoveryProgress,[\s\S]*?removeListener\([\s\S]*?remoteProjectRecoveryProgress/u
|
|
)
|
|
})
|
|
|
|
it('exposes bounded knowledge task actions', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('cancelTask: (taskId: string)')
|
|
expect(source).toContain('retryTask: async (taskId: string)')
|
|
expect(source).toContain('ipcChannels.knowledgeTaskCancel')
|
|
expect(source).toContain('ipcChannels.knowledgeTaskRetry')
|
|
})
|
|
|
|
it('exposes only explicit Conversation queue operations and listeners', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain('conversationQueue: {')
|
|
expect(source).toContain('ipcChannels.conversationQueueEnqueueUser')
|
|
expect(source).toContain(
|
|
'ipcChannels.conversationQueueInterruptAndRun'
|
|
)
|
|
expect(source).toContain('ipcChannels.conversationQueueDispatch')
|
|
expect(source).toContain('listener(conversationId)')
|
|
})
|
|
|
|
it('exposes a narrow local conversation branch operation', () => {
|
|
const source = readFileSync(
|
|
join(process.cwd(), 'src', 'preload', 'index.ts'),
|
|
'utf8'
|
|
)
|
|
expect(source).toContain(
|
|
'branchLocal: (input: ConversationBranchInput)'
|
|
)
|
|
expect(source).toContain('ipcChannels.conversationsBranchLocal')
|
|
})
|
|
})
|