EnvScope
@@ -266,7 +272,7 @@
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+
+#ifndef ENVSCOPE_RELEASE
+#define ENVSCOPE_RELEASE "development"
+#endif
+#ifndef ENVSCOPE_FIXTURE
+#define ENVSCOPE_FIXTURE 0
+#endif
+static wchar_t root[MAX_PATH], target[128], observed[128];
+static int fixture = ENVSCOPE_FIXTURE;
+#if ENVSCOPE_FIXTURE
+static int live_clock=0;
+#endif
+static long long epoch;
+
+static int system_identity(void) {
+ HANDLE token=NULL;BYTE user[1024],sid[SECURITY_MAX_SID_SIZE];DWORD used=0,size=sizeof(sid);int ok=0;
+ if(!OpenProcessToken(GetCurrentProcess(),TOKEN_QUERY,&token))return 0;
+ if(GetTokenInformation(token,TokenUser,user,sizeof(user),&used)&&CreateWellKnownSid(WinLocalSystemSid,NULL,sid,&size))ok=EqualSid(((TOKEN_USER*)user)->User.Sid,sid);
+ CloseHandle(token);return ok;
+}
+static int drop_privileges(void) {
+ HANDLE token=NULL;if(!OpenProcessToken(GetCurrentProcess(),TOKEN_ADJUST_PRIVILEGES,&token))return 0;
+ int ok=AdjustTokenPrivileges(token,TRUE,NULL,0,NULL,NULL);CloseHandle(token);return ok;
+}
+
+static int path_for(wchar_t *out, const wchar_t *name) {
+ return swprintf(out, MAX_PATH, L"%ls\\%ls", root, name) > 0 && wcslen(out) < MAX_PATH-1;
+}
+static int safe_file(const wchar_t *path, int optional) {
+ DWORD attributes=GetFileAttributesW(path);
+ if(attributes==INVALID_FILE_ATTRIBUTES)return optional && GetLastError()==ERROR_FILE_NOT_FOUND;
+ if(attributes & FILE_ATTRIBUTE_REPARSE_POINT)return 0;
+ if(fixture)return 1;
+ PSID owner=NULL; PACL acl=NULL; PSECURITY_DESCRIPTOR sd=NULL;
+ BYTE system[SECURITY_MAX_SID_SIZE], admins[SECURITY_MAX_SID_SIZE];
+ DWORD a=sizeof(system), b=sizeof(admins); int ok=1;
+ if(!CreateWellKnownSid(WinLocalSystemSid,NULL,system,&a) || !CreateWellKnownSid(WinBuiltinAdministratorsSid,NULL,admins,&b))return 0;
+ if(GetNamedSecurityInfoW((LPWSTR)path,SE_FILE_OBJECT,OWNER_SECURITY_INFORMATION|DACL_SECURITY_INFORMATION,&owner,NULL,&acl,NULL,&sd)!=ERROR_SUCCESS)return 0;
+ if(!owner || !acl || (!EqualSid(owner,system) && !EqualSid(owner,admins)))ok=0;
+ for(DWORD i=0;ok && iAceCount;i++) {
+ void *raw=NULL; if(!GetAce(acl,i,&raw)){ok=0;break;}
+ ACE_HEADER *header=(ACE_HEADER*)raw;
+ if(header->AceFlags & INHERIT_ONLY_ACE)continue;
+ if(header->AceType!=ACCESS_ALLOWED_ACE_TYPE && header->AceType!=ACCESS_DENIED_ACE_TYPE){ok=0;break;}
+ if(header->AceType==ACCESS_ALLOWED_ACE_TYPE) {
+ ACCESS_ALLOWED_ACE *ace=(ACCESS_ALLOWED_ACE*)raw; PSID sid=(PSID)&ace->SidStart;
+ DWORD writes=FILE_WRITE_DATA|FILE_APPEND_DATA|FILE_WRITE_EA|FILE_WRITE_ATTRIBUTES|FILE_DELETE_CHILD|DELETE|WRITE_DAC|WRITE_OWNER|GENERIC_WRITE|GENERIC_ALL;
+ if((ace->Mask&writes) && !EqualSid(sid,system) && !EqualSid(sid,admins))ok=0;
+ }
+ }
+ LocalFree(sd);return ok;
+}
+static int read_value(const wchar_t *file,const wchar_t *key,wchar_t *value,DWORD size) {
+ wchar_t path[MAX_PATH];if(!path_for(path,file)||!safe_file(path,0))return 0;
+ DWORD n=GetPrivateProfileStringW(L"guard",key,L"",value,size,path);
+ return n>0 && n100)return 0;
+ for(size_t i=0;i=L'A'&&v[i]<=L'Z')||(v[i]>=L'a'&&v[i]<=L'z')||(v[i]>=L'0'&&v[i]<=L'9')||wcschr(L" _+-",v[i])))return 0;
+ return 1;
+}
+static int replace_text(const wchar_t *name,const char *data) {
+ wchar_t path[MAX_PATH], temp[MAX_PATH];if(!path_for(path,name)||!path_for(temp,L"write.tmp")||!safe_file(path,1)||!safe_file(temp,1))return 0;
+ HANDLE h=CreateFileW(temp,GENERIC_WRITE,0,NULL,CREATE_ALWAYS,FILE_ATTRIBUTE_NORMAL|FILE_FLAG_OPEN_REPARSE_POINT,NULL);
+ if(h==INVALID_HANDLE_VALUE)return 0;
+ DWORD written=0, size=(DWORD)strlen(data);int ok=WriteFile(h,data,size,&written,NULL)&&written==size&&FlushFileBuffers(h);
+ CloseHandle(h);return ok && MoveFileExW(temp,path,MOVEFILE_REPLACE_EXISTING|MOVEFILE_WRITE_THROUGH);
+}
+static int ascii(const wchar_t *in,char *out,int size) {
+ return WideCharToMultiByte(CP_UTF8,0,in,-1,out,size,NULL,NULL)>0;
+}
+static int file_hash(const wchar_t *file,wchar_t out[65]) {
+ BYTE digest[32], buffer[16384];BCRYPT_ALG_HANDLE alg=NULL;BCRYPT_HASH_HANDLE hash=NULL;
+ if(!safe_file(file,0))return 0;
+ HANDLE h=CreateFileW(file,GENERIC_READ,FILE_SHARE_READ,NULL,OPEN_EXISTING,FILE_FLAG_OPEN_REPARSE_POINT,NULL);
+ if(h==INVALID_HANDLE_VALUE)return 0;
+ int ok=BCryptOpenAlgorithmProvider(&alg,BCRYPT_SHA256_ALGORITHM,NULL,0)==0 && BCryptCreateHash(alg,&hash,NULL,0,NULL,0,0)==0;
+ DWORD count;while(ok){if(!ReadFile(h,buffer,sizeof(buffer),&count,NULL)){ok=0;break;}if(!count)break;ok=BCryptHashData(hash,buffer,count,0)==0;}
+ if(ok)ok=BCryptFinishHash(hash,digest,sizeof(digest),0)==0;
+ if(hash)BCryptDestroyHash(hash);if(alg)BCryptCloseAlgorithmProvider(alg,0);CloseHandle(h);
+ if(ok){for(int i=0;i<32;i++)swprintf(out+i*2,3,L"%02x",digest[i]);out[64]=0;}return ok;
+}
+static int own_hash(wchar_t out[65]) {
+ wchar_t file[MAX_PATH];return GetModuleFileNameW(NULL,file,MAX_PATH)&&file_hash(file,out);
+}
+static int committed_lifecycle(void) {
+ wchar_t file[MAX_PATH],hash[65];char receipt[67],expected[65];DWORD count=0;
+ if(!path_for(file,L"transaction.json")||!file_hash(file,hash)||!ascii(hash,expected,sizeof(expected)))return 0;
+ if(!path_for(file,L"worker-commit.json")||!safe_file(file,0))return 0;
+ HANDLE h=CreateFileW(file,GENERIC_READ,FILE_SHARE_READ,NULL,OPEN_EXISTING,FILE_FLAG_OPEN_REPARSE_POINT,NULL);
+ if(h==INVALID_HANDLE_VALUE)return 0;
+ int ok=ReadFile(h,receipt,sizeof(receipt),&count,NULL)&&count==66&&receipt[0]=='"'&&receipt[65]=='"'&&!memcmp(receipt+1,expected,64);
+ CloseHandle(h);return ok;
+}
+static int read_zone(void) {
+#if ENVSCOPE_FIXTURE
+ return read_value(L"clock.ini",L"timezone",observed,128)&&text_safe(observed);
+#else
+ DYNAMIC_TIME_ZONE_INFORMATION value;
+ if(GetDynamicTimeZoneInformation(&value)==TIME_ZONE_ID_INVALID)return 0;
+ wcscpy_s(observed,128,value.TimeZoneKeyName);return text_safe(observed);
+#endif
+}
+static int write_zone(void) {
+#if ENVSCOPE_FIXTURE
+ char zone[256], data[512];if(!ascii(target,zone,sizeof(zone)))return 0;
+ if(live_clock)snprintf(data,sizeof(data),"[guard]\ntimezone=%s\nat_epoch=live\n",zone);
+ else snprintf(data,sizeof(data),"[guard]\ntimezone=%s\nat_epoch=%lld\n",zone,epoch);
+ return replace_text(L"clock.ini",data);
+#else
+ DYNAMIC_TIME_ZONE_INFORMATION zone;int found=0;
+ for(DWORD i=0;EnumDynamicTimeZoneInformation(i,&zone)==ERROR_SUCCESS;i++)if(wcscmp(zone.TimeZoneKeyName,target)==0){found=1;break;}
+ if(!found)return 0;
+ HANDLE token=NULL;TOKEN_PRIVILEGES privileges,previous;DWORD size=sizeof(previous);
+ if(!OpenProcessToken(GetCurrentProcess(),TOKEN_ADJUST_PRIVILEGES|TOKEN_QUERY,&token))return 0;
+ privileges.PrivilegeCount=1;privileges.Privileges[0].Attributes=SE_PRIVILEGE_ENABLED;
+ int ok=LookupPrivilegeValueW(NULL,SE_TIME_ZONE_NAME,&privileges.Privileges[0].Luid);
+ if(ok){SetLastError(ERROR_SUCCESS);ok=AdjustTokenPrivileges(token,FALSE,&privileges,sizeof(previous),&previous,&size)&&GetLastError()==ERROR_SUCCESS;}
+ if(ok){zone.DynamicDaylightTimeDisabled=FALSE;ok=SetDynamicTimeZoneInformation(&zone);AdjustTokenPrivileges(token,FALSE,&previous,0,NULL,NULL);}
+ CloseHandle(token);return ok;
+#endif
+}
+static int status(const char *state,const wchar_t *attempts,int pending) {
+ char t[256],o[256],tries[512],data[2048];if(!ascii(target,t,sizeof(t))||!ascii(observed,o,sizeof(o))||!ascii(attempts,tries,sizeof(tries)))return 0;
+ snprintf(data,sizeof(data),"[guard]\nformat=1\nguard_policy=2\nrelease=%s\nfixture=%d\ninitial=%d\nat_epoch=%lld\nstate=%s\ntarget=%s\nobserved=%s\n",ENVSCOPE_RELEASE,fixture,!system_identity(),epoch,state,t,o);
+ if(!replace_text(L"status.ini",data))return 0;
+ wchar_t prior[64]=L"";read_value(L"state.ini",L"state",prior,64);
+ char before[128];ascii(prior,before,sizeof(before));
+ if(strcmp(before,state)!=0 || !strcmp(state,"repairing")) {
+ SYSTEMTIME now;GetSystemTime(&now);wchar_t name[64],path[MAX_PATH];
+ swprintf(name,64,L"events-%04d-%02d-%02d.jsonl",now.wYear,now.wMonth,now.wDay);
+ if(!path_for(path,name)||!safe_file(path,1))return 0;
+ HANDLE h=CreateFileW(path,FILE_APPEND_DATA,FILE_SHARE_READ,NULL,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL|FILE_FLAG_OPEN_REPARSE_POINT,NULL);
+ if(h==INVALID_HANDLE_VALUE)return 0;
+ snprintf(data,sizeof(data),"{\"at_epoch\":%lld,\"state\":\"%s\",\"target\":\"%s\",\"observed\":\"%s\",\"fixture\":%s}\n",epoch,state,t,o,fixture?"true":"false");
+ DWORD size=(DWORD)strlen(data),written=0;int ok=WriteFile(h,data,size,&written,NULL)&&written==size&&FlushFileBuffers(h);CloseHandle(h);if(!ok)return 0;
+ }
+ snprintf(data,sizeof(data),"[guard]\nstate=%s\nattempts=%s\npending=%d\n",state,tries,pending);return replace_text(L"state.ini",data);
+}
+static int once_locked(void) {
+ wchar_t file[MAX_PATH],value[512],hash[65];
+ if(!safe_file(root,0)||!path_for(file,L"baseline.ini")||!safe_file(file,0))return 72;
+ if(!read_value(L"baseline.ini",L"worker_sha256",value,512)||!own_hash(hash)||wcscmp(hash,value))return 73;
+ if(!read_value(L"baseline.ini",L"target",target,128)||!text_safe(target)||!read_zone())return 74;
+ if(!path_for(file,L"run.lock")||!safe_file(file,1))return 72;
+ HANDLE lock=CreateFileW(file,GENERIC_READ|GENERIC_WRITE,0,NULL,OPEN_ALWAYS,FILE_FLAG_OPEN_REPARSE_POINT,NULL);
+ if(lock==INVALID_HANDLE_VALUE)return 75;
+ int ok=0;wchar_t attempts[512]=L"", pending[8]=L"", state_path[MAX_PATH];
+ path_for(state_path,L"state.ini");
+ if(GetFileAttributesW(state_path)!=INVALID_FILE_ATTRIBUTES && (!read_value(L"state.ini",L"pending",pending,8)||!safe_file(state_path,0)||(wcscmp(pending,L"0")&&wcscmp(pending,L"1"))))goto done;
+ read_value(L"state.ini",L"attempts",attempts,512);
+ if(!committed_lifecycle()){ok=status("lifecycle_pending",attempts,!wcscmp(pending,L"1"));goto done;}
+ if(!wcscmp(pending,L"1")){ok=status("attention",attempts,1);goto done;}
+ if(!wcscmp(observed,target)){ok=status("healthy",attempts,0);goto done;}
+ long long last=0, values[3];int count=0;wchar_t *cursor=attempts;
+ while(*cursor){wchar_t *end;long long stamp=wcstoll(cursor,&end,10);if(end==cursor||(*end&&*end!=L',')){ok=status("attention",attempts,1);goto done;}
+ if(stamp>epoch){ok=status("clock_changed",attempts,0);goto done;}
+ if(epoch-stamp<86400){if(count==3){ok=status("paused",attempts,0);goto done;}values[count++]=stamp;last=stamp;}cursor=*end?end+1:end;}
+ if(count>=3){ok=status("paused",attempts,0);goto done;}
+ if(last&&epoch-last<300){ok=status("cooldown",attempts,0);goto done;}
+ values[count++]=epoch;attempts[0]=0;
+ for(int i=0;inul && set"'], text=True, errors='replace')
+ environment.update((key.upper(), value) for key, value in (line.split('=', 1) for line in result.splitlines() if '=' in line and not line.startswith('=')))
+ compiler = shutil.which('cl.exe', path=environment.get('PATH'))
+ if not compiler:
+ raise RuntimeError('Install MSVC C++ Build Tools or put a Windows GCC compiler on PATH')
+ environment['PATH'] = str(Path(compiler).parent) + os.pathsep + environment.get('PATH', '')
+ defines = ['ENVSCOPE_RELEASE="' + __release__ + '"', 'ENVSCOPE_FIXTURE=' + str(int(fixture))]
+ if Path(compiler).name.lower() == 'cl.exe':
+ command = [compiler, '/nologo', '/O2', '/W3', '/WX', '/MT', '/D_CRT_SECURE_NO_WARNINGS'] + ['/D' + d for d in defines]
+ command += [str(source), '/Fo:' + str(folder / 'worker.obj'), '/Fe:' + str(binary), '/link', 'advapi32.lib', 'shell32.lib', 'bcrypt.lib']
+ else:
+ command = [compiler, '-municode', '-static', '-O2', '-Wall', '-Wextra', '-Werror', '-Wno-misleading-indentation'] + ['-D' + d for d in defines]
+ command += [str(source), '-o', str(binary), '-ladvapi32', '-lshell32', '-lbcrypt']
+ result = subprocess.run(command, cwd=folder, env=environment, capture_output=True, text=True, errors='replace')
+ if result.returncode:
+ raise RuntimeError(result.stdout + result.stderr)
+ version = json.loads(subprocess.check_output([str(binary), '--version']))
+ if version != {'format': 1, 'release': __release__, 'fixture': fixture}:
+ raise ValueError('Unexpected worker identity')
+ metadata = {**version, 'architecture': platform.machine(), 'sha256': hashlib.sha256(binary.read_bytes()).hexdigest()}
+ (folder / 'timezone-helper.json').write_text(json.dumps(metadata, indent=2), encoding='utf-8')
+ return folder
+
+
+if __name__ == '__main__':
+ print(build())
diff --git a/scripts/desktop_refresh_smoke.py b/scripts/desktop_refresh_smoke.py
new file mode 100644
index 0000000..47a0cdf
--- /dev/null
+++ b/scripts/desktop_refresh_smoke.py
@@ -0,0 +1,81 @@
+"""Desktop navigation, retained inspection state, keyboard and visual fixtures."""
+import json
+from pathlib import Path
+import tempfile
+import threading
+from unittest.mock import Mock
+
+from playwright.sync_api import sync_playwright, expect
+from envscope.guide import LESSON_VERSION
+from envscope.state import StateStore
+from envscope.operations import Operations
+from envscope.legacy import LegacyBridge
+from envscope.service import make_server
+from scripts.environment_fixtures import fixture, target
+from scripts.ui_navigation import open_page
+
+
+def main():
+ out=Path('artifacts/desktop-refresh');out.mkdir(parents=True,exist_ok=True);results=[]
+ with sync_playwright() as runtime:
+ browser=runtime.chromium.launch()
+ try:
+ for system in ('Windows','Darwin'):
+ with tempfile.TemporaryDirectory() as folder:
+ home=Path(folder);store=StateStore(home/'state');store.complete_learning(LESSON_VERSION)
+ settings=target(system,'cli','direct',usage_country='US')
+ store.save_settings({k:v for k,v in settings.items() if k!='environment_confirmed'},confirm_environment=True)
+ ops=Operations(store,home,discoverer=lambda:[],legacy=LegacyBridge(platform_name=system,home=home,runner=Mock(side_effect=AssertionError('No vendor execution'))))
+ calls=[]
+ def audit(*args,**kwargs):
+ calls.append(1)
+ return fixture(home,kwargs['baseline_config'],system,'permission',browser=kwargs.get('browser'))
+ server=make_server(store=store,operations=ops,auditor=audit)
+ thread=threading.Thread(target=server.serve_forever,daemon=True);thread.start()
+ try:
+ for width in (1024,1280,1440):
+ context=browser.new_context(viewport={'width':width,'height':900},locale='zh-CN',reduced_motion='reduce')
+ page=context.new_page();errors=[];page.on('pageerror',lambda error:errors.append(str(error)))
+ page.add_init_script('window.RTCPeerConnection=undefined');page.route('https://**/*',lambda route:route.abort())
+ page.goto(f'http://127.0.0.1:{server.server_port}/');expect(page.locator('#target-edit')).to_be_enabled()
+ expect(page.locator('#all-checks-list details').first).to_be_attached(timeout=30000)
+ open_page(page,'checks');page.evaluate('window.scrollTo(0,650)')
+ open_page(page,'settings');open_page(page,'checks')
+ for _ in range(20):
+ if page.evaluate('window.scrollY > 600'):break
+ page.wait_for_timeout(50)
+ assert page.evaluate('window.scrollY > 600'),'Navigation lost the previous scroll position'
+ page.evaluate('window.scrollTo(0,0)')
+ row=page.locator('[data-inspection="baseline.timezone"]');row.locator('summary').click()
+ page.locator('#check-search').fill('时区');expect(row).to_have_attribute('open','')
+ page.locator('#check-search').fill('');expect(row).to_have_attribute('open','')
+ for name in ('audit','checks','upkeep','accounts','tools','history','settings','coverage'):
+ open_page(page,name)
+ if name=='upkeep':
+ page.locator('#advanced-maintenance').evaluate('(n)=>n.open=false')
+ page.evaluate('window.scrollTo(0,0)')
+ assert page.evaluate('document.documentElement.scrollWidth <= innerWidth'),(system,width,name,'horizontal overflow')
+ assert page.locator('.tab[aria-current="page"]').count()==1
+ page.screenshot(path=str(out/f'{system}-{width}-{name}.png'))
+ open_page(page,'audit');before=len(calls)
+ with page.expect_response(lambda response:response.url.endswith('/api/audit')) as received:
+ page.locator('#start').click();page.locator('#start').dispatch_event('click')
+ assert received.value.ok, received.value.text()
+ expect(page.locator('#start')).to_be_enabled(timeout=45000)
+ assert server.last_raw_report and server.last_raw_report.get('report_id'),'Audit must produce a report'
+ expect(page.locator('#session-state')).not_to_contain_text('系统检测未完成')
+ assert len(calls)==before+1,'Repeated click must not start a second audit'
+ page.screenshot(path=str(out/f'{system}-{width}-results.png'))
+ page.locator('#more-menu>summary').focus();page.keyboard.press('Enter')
+ expect(page.locator('#more-menu')).to_have_attribute('open','')
+ page.keyboard.press('Escape');expect(page.locator('#more-menu')).not_to_have_attribute('open','')
+ expect(page.locator('#more-menu>summary')).to_be_focused()
+ assert not errors,errors
+ results.append({'system':system,'width':width,'pages':8,'scroll_retained':True,'disclosure_retained':True,'duplicate_blocked':True,'keyboard':True,'errors':errors})
+ context.close()
+ finally:server.shutdown();server.server_close();thread.join(3)
+ finally:browser.close()
+ (out/'result.json').write_text(json.dumps(results,indent=2),encoding='utf-8');print(json.dumps(results))
+
+
+if __name__=='__main__':main()
diff --git a/scripts/desktop_ui_smoke.py b/scripts/desktop_ui_smoke.py
index 66d4241..ddd1f10 100644
--- a/scripts/desktop_ui_smoke.py
+++ b/scripts/desktop_ui_smoke.py
@@ -29,7 +29,9 @@ def status(self):
def run(self, action, params, confirmed):
self.calls.append((action, params, confirmed))
- if action == 'desktop-save':
+ if action == 'desktop-status':
+ time.sleep(0.3) # A real native read may overlap a quick Save click.
+ elif action == 'desktop-save':
self.preferences.update(params)
elif action == 'app-update-check':
time.sleep(0.2)
diff --git a/scripts/package_identity.py b/scripts/package_identity.py
new file mode 100644
index 0000000..fc76eec
--- /dev/null
+++ b/scripts/package_identity.py
@@ -0,0 +1,32 @@
+"""Write native version resources and honest unsigned build identity."""
+import json
+import plistlib
+from pathlib import Path
+
+from envscope import __version__, __release__
+from envscope.app_identity import APP_ID, build_identity
+
+
+def windows_version_file(destination):
+ from PyInstaller.utils.win32.versioninfo import VSVersionInfo, FixedFileInfo, StringFileInfo, StringTable, StringStruct, VarFileInfo, VarStruct
+ parts=tuple(map(int,__version__.split('.')))+(int(__release__.rsplit('.',1)[-1]) if '-alpha.' in __release__ else 0,)
+ value=VSVersionInfo(ffi=FixedFileInfo(filevers=parts,prodvers=parts,mask=0x3f,flags=0x2,OS=0x40004,fileType=1,subtype=0,date=(0,0)),
+ kids=[StringFileInfo([StringTable('040904b0',[StringStruct(key,value) for key,value in {
+ 'CompanyName':'EnvScope contributors','FileDescription':'EnvScope desktop environment diagnostics',
+ 'FileVersion':__version__,'InternalName':APP_ID,'OriginalFilename':'EnvScope.exe',
+ 'ProductName':'EnvScope','ProductVersion':__release__,'LegalCopyright':'EnvScope contributors · MIT License'}.items()])]),
+ VarFileInfo([VarStruct('Translation',[1033,1200])])])
+ path=Path(destination);path.parent.mkdir(parents=True,exist_ok=True);path.write_text(str(value),encoding='utf-8')
+ return path
+
+
+def write_identity(app,system):
+ app=Path(app)
+ resources=app/'Contents/Resources' if system=='Darwin' else app
+ resources.mkdir(parents=True,exist_ok=True)
+ (resources/'build-identity.json').write_text(json.dumps(build_identity(system),indent=2),encoding='utf-8')
+ if system=='Darwin':
+ path=app/'Contents/Info.plist';value=plistlib.loads(path.read_bytes())
+ value.update(CFBundleIdentifier=APP_ID,CFBundleShortVersionString=__version__,CFBundleVersion=__version__,
+ NSHumanReadableCopyright='EnvScope contributors · MIT License')
+ path.write_bytes(plistlib.dumps(value))
diff --git a/scripts/permission_flow_smoke.py b/scripts/permission_flow_smoke.py
new file mode 100644
index 0000000..dfff097
--- /dev/null
+++ b/scripts/permission_flow_smoke.py
@@ -0,0 +1,91 @@
+"""Offline permission-return workflows. No real permissions or OS settings change."""
+import json
+from pathlib import Path
+import tempfile
+import threading
+from unittest.mock import Mock
+
+from playwright.sync_api import expect, sync_playwright
+from envscope.guide import LESSON_VERSION
+from envscope.legacy import LegacyBridge
+from envscope.operations import Operations
+from envscope.permissions import permission_help
+from envscope.service import make_server
+from envscope.state import StateStore
+from scripts.environment_fixtures import fixture, target
+from scripts.ui_navigation import open_page
+
+
+def main():
+ results = []
+ output = Path('artifacts/permission-flow'); output.mkdir(parents=True, exist_ok=True)
+ with sync_playwright() as runtime:
+ browser = runtime.chromium.launch()
+ try:
+ for system in ('Windows', 'Darwin'):
+ with tempfile.TemporaryDirectory() as directory:
+ home = Path(directory); store = StateStore(home / 'state'); store.complete_learning(LESSON_VERSION)
+ settings = target(system, 'cli', 'direct', usage_country='US')
+ store.save_settings({k: v for k, v in settings.items() if k != 'environment_confirmed'}, confirm_environment=True)
+ opener = Mock(); calls = []; access = [False]
+ class FixtureOperations(Operations):
+ def run(self, action, params, **kwargs):
+ if action == 'permission-help':
+ return permission_help(kwargs.get('report'), params, home, home / 'Claude', kwargs.get('confirmed'), opener, system)
+ return super().run(action, params, **kwargs)
+ def auditor(*args, **kwargs):
+ calls.append(kwargs.get('selected_checks'))
+ return fixture(home, kwargs['baseline_config'], system, None if access[0] else 'permission')
+ ops = FixtureOperations(store, home, discoverer=lambda: [],
+ legacy=LegacyBridge(platform_name=system, home=home, runner=Mock(side_effect=AssertionError('No vendor execution'))))
+ server = make_server(store=store, operations=ops, auditor=auditor)
+ thread = threading.Thread(target=server.serve_forever, daemon=True); thread.start()
+ context = browser.new_context(viewport={'width': 1280, 'height': 900}, locale='zh-CN')
+ page = context.new_page(); errors = []
+ page.on('pageerror', lambda error: errors.append(str(error)))
+ page.add_init_script('window.RTCPeerConnection=undefined;')
+ page.route('https://**/*', lambda route: route.abort())
+ def row(): return page.locator('[data-inspection="target.config"]')
+ def begin():
+ if not row().evaluate('(node)=>node.open'): row().locator('summary').first.click()
+ page.once('dialog', lambda dialog: dialog.accept())
+ row().get_by_role('button', name='处理读取权限').click()
+ expect(page.locator('#permission-status')).to_have_attribute('data-state', 'waiting')
+ expect(page.locator('html')).not_to_have_attribute('data-operation-busy', 'true')
+ try:
+ page.goto('http://127.0.0.1:' + str(server.server_port), wait_until='networkidle')
+ open_page(page, 'checks'); page.locator('#checks-clear').click()
+ row().locator('input[type=checkbox]').check()
+ page.locator('#checks-run').click()
+ expect(row()).to_contain_text('需要读取权限', timeout=30000)
+ initial = list(calls[-1]); count = len(calls)
+ begin()
+ page.evaluate("window.dispatchEvent(new Event('blur'));window.dispatchEvent(new Event('focus'));window.dispatchEvent(new Event('focus'))")
+ expect(page.locator('#permission-status')).to_have_attribute('data-state', 'denied', timeout=30000)
+ assert len(calls) == count + 1 and calls[-1] == initial
+ begin(); page.locator('#permission-cancel').click()
+ page.evaluate("window.dispatchEvent(new Event('blur'));window.dispatchEvent(new Event('focus'))")
+ expect(page.locator('#permission-status')).to_have_attribute('data-state', 'cancelled')
+ assert len(calls) == count + 1
+ begin(); page.locator('#checks-clear').click()
+ expect(page.locator('#permission-status')).to_have_attribute('data-state', 'stale')
+ row().locator('input[type=checkbox]').check()
+ begin(); access[0] = True
+ page.locator('#permission-resume').click()
+ expect(page.locator('#permission-status')).to_have_attribute('data-state', 'verified', timeout=30000)
+ assert calls[-1] == initial and len(calls) == count + 2
+ assert not errors, errors
+ page.screenshot(path=str(output / (system + '.png')), full_page=True)
+ results.append({'system': system, 'same_selection': True, 'single_auto_recheck': True,
+ 'denial_preserved': True, 'cancel': True, 'selection_invalidation': True,
+ 'fresh_readback': True, 'real_os_consent': False, 'page_errors': errors})
+ finally:
+ context.close(); server.shutdown(); server.server_close(); thread.join(3)
+ finally:
+ browser.close()
+ (output / 'result.json').write_text(json.dumps(results, indent=2), encoding='utf-8')
+ print(json.dumps(results))
+
+
+if __name__ == '__main__':
+ main()
diff --git a/scripts/region_lookup_smoke.py b/scripts/region_lookup_smoke.py
index f18653f..16ff36d 100644
--- a/scripts/region_lookup_smoke.py
+++ b/scripts/region_lookup_smoke.py
@@ -29,6 +29,13 @@ def lookup(params):
thread=threading.Thread(target=server.serve_forever,daemon=True);thread.start()
context=browser.new_context(viewport={'width':1280,'height':950},locale='zh-CN')
page=context.new_page();errors=[]
+ busy_reads=[0]
+ def first_lookup_busy(route):
+ if route.request.post_data_json.get('action')=='environment-location' and busy_reads[0]==0:
+ busy_reads[0]+=1
+ route.fulfill(status=409,json={'error':'audit_running'})
+ else:route.continue_()
+ page.route('**/api/action',first_lookup_busy)
page.on('pageerror',lambda e:errors.append(str(e)))
page.route('https://**/*',lambda route:route.abort())
try:
@@ -37,6 +44,7 @@ def lookup(params):
country=page.locator('#target-form [name=usage_country]')
city=page.locator('#target-region-profile');status=page.locator('#target-ip-status')
country.fill('US');expect(status).to_contain_text('仅显示 US')
+ assert busy_reads[0]==1,'A busy read must recover without another user click'
assert city.locator('option[value^="us-"]').count()>=29
assert city.locator('option').count()==city.locator('option[value^="us-"]').count()+1
expect(city).to_have_value('us-new-york')
diff --git a/scripts/simple_workflow_smoke.py b/scripts/simple_workflow_smoke.py
index a2bc965..afa2236 100644
--- a/scripts/simple_workflow_smoke.py
+++ b/scripts/simple_workflow_smoke.py
@@ -81,13 +81,17 @@ def auditor(*args, **kwargs):
expect(page.locator('#audit-content')).to_be_visible()
expect(page.locator('#learning-panel')).to_be_visible()
expect(page.locator('#audit-results')).to_be_hidden()
- assert page.locator('#desktop-nav .tab:visible').count() == 1
+ assert page.locator('#desktop-nav .tab:visible').count() == 3
expect(page.locator('#target-confirm')).to_be_enabled()
assert page.locator('#target-country option').count() > 240
page.screenshot(path=str(out / f'{system}-{width}-initial.png'), full_page=True)
page.locator('#learning-skip').click()
page.locator('[name=usage_country]').fill('US')
- expect(page.locator('#target-region-profile')).to_have_value('us-new-york')
+ try:
+ expect(page.locator('#target-region-profile')).to_have_value('us-new-york')
+ except AssertionError:
+ print({'location':page.locator('#target-ip-status').inner_text(), 'requests':requests[-5:]},flush=True)
+ raise
open_details(page, '#target-connection-options')
page.locator('#target-form [name=usage]').select_option('cli')
page.locator('#target-form [name=connection_mode]').select_option('direct')
diff --git a/scripts/ui_navigation.py b/scripts/ui_navigation.py
index e633a7c..4ff28bb 100644
--- a/scripts/ui_navigation.py
+++ b/scripts/ui_navigation.py
@@ -2,11 +2,13 @@
from playwright.sync_api import expect
-def open_page(page, name):
+def open_page(page, name, *, advanced=True):
expect(page.locator('html')).not_to_have_attribute('data-operation-busy', 'true', timeout=30000)
- if name != 'audit' and not page.locator('#more-menu').evaluate('(node)=>node.open'):
+ if not page.locator(f'.tab[data-page="{name}"]').is_visible() and not page.locator('#more-menu').evaluate('(node)=>node.open'):
page.locator('#more-menu>summary').click()
page.locator(f'.tab[data-page="{name}"]').click()
+ if name=='upkeep' and advanced and page.locator('#advanced-maintenance').count():
+ open_details(page,'#advanced-maintenance')
def open_details(page, selector):
diff --git a/scripts/update_package_smoke.py b/scripts/update_package_smoke.py
index 505d310..e4ee7d2 100644
--- a/scripts/update_package_smoke.py
+++ b/scripts/update_package_smoke.py
@@ -6,6 +6,7 @@
import subprocess
import sys
import tempfile
+from unittest.mock import patch
from envscope.state import StateStore
from envscope import __release__
@@ -15,7 +16,7 @@
def main():
archive = Path(sys.argv[1]) if len(sys.argv) > 1 else Path('dist') / asset_name()
digest = hashlib.sha256(archive.read_bytes()).hexdigest()
- tag = 'v99.0.0-alpha.1' # Synthetic discovery version; not a published release.
+ tag = __release__ # Actual artifact identity; discovery stays entirely offline.
prefix = 'https://github.com/qudadd/envscope/releases/download/' + tag + '/'
metadata = [{'tag_name': tag, 'draft': False, 'prerelease': True, 'assets': [
{'name': archive.name, 'state': 'uploaded', 'size': archive.stat().st_size, 'digest': 'sha256:' + digest, 'browser_download_url': prefix + archive.name},
@@ -34,7 +35,8 @@ def fixture(url, limit, destination=None):
with tempfile.TemporaryDirectory(prefix='envscope-update-fixture-') as directory:
store = StateStore(Path(directory) / 'state')
updater = AppUpdates(store, fixture)
- assert updater.check()['state'] == 'available'
+ with patch('envscope.updates.RELEASE','v0.0.0-alpha.1'):
+ assert updater.check()['state'] == 'available'
assert updater.install(tag)['state'] == 'confirmation_required'
assert updater.install(tag, True)['state'] == 'ready'
executable = updater.installed()
diff --git a/scripts/verify_package.py b/scripts/verify_package.py
index e4cbc24..adaf76b 100644
--- a/scripts/verify_package.py
+++ b/scripts/verify_package.py
@@ -26,6 +26,8 @@ def verify(read, names):
assert read('envscope/web/components_ui.mjs'), 'missing component migration UI'
assert read('envscope/web/check_preferences_ui.mjs'), 'missing optional checks / diagnostics UI'
assert read('envscope/web/workflow.mjs'), 'missing single-workflow UI'
+ for name in ('workspace.css','workspace_ui.mjs','icons.mjs','mark.svg','scan.svg','app-icon.png','app.ico','app.icns','tray.png','permission_flow.mjs'):
+ assert read('envscope/web/'+name),'Missing desktop refresh resource: '+name
print("Verified full pinned vendor bundle and all desktop UI resources.")
diff --git a/scripts/windows_timezone_acceptance.py b/scripts/windows_timezone_acceptance.py
new file mode 100644
index 0000000..b985052
--- /dev/null
+++ b/scripts/windows_timezone_acceptance.py
@@ -0,0 +1,108 @@
+"""CI-only SYSTEM scheduler/ACL acceptance with a compiled file-clock fixture."""
+import configparser
+import ctypes
+import hashlib
+import json
+import os
+from pathlib import Path
+import platform
+import secrets
+import subprocess
+import tempfile
+import time
+
+from envscope.state import StateStore
+from envscope.timezone_windows import WindowsTimezoneIO, WindowsTimezoneService
+from scripts.build_windows_timezone import build
+from scripts.environment_fixtures import report, target
+
+
+def main():
+ if platform.system()!='Windows' or os.environ.get('ENVSCOPE_TIMEZONE_ACCEPTANCE')!='1' or os.environ.get('CI')!='true':
+ print('SKIP: opt-in Windows CI fixture only');return
+ if not ctypes.windll.shell32.IsUserAnAdmin():raise RuntimeError('CI fixture requires an administrator runner, never prompts for real authorization')
+ folder=ctypes.create_unicode_buffer(260)
+ if ctypes.windll.shell32.SHGetFolderPathW(None,35,None,0,folder)!=0:raise RuntimeError('CommonApplicationData unavailable')
+ parent=Path(folder.value).resolve()/'EnvScope';nonce=secrets.token_hex(8)
+ root=(parent/('TimezoneFixture-'+nonce)).resolve();task='EnvScope-TimezoneFixture-'+nonce
+ if root.parent!=parent.resolve() or not root.name.startswith('TimezoneFixture-'):raise RuntimeError('Fixture containment failed')
+ tzutil=str(Path(os.environ['SystemRoot'])/'System32/tzutil.exe');before_zone=subprocess.check_output([tzutil,'/g'])
+ summary={}
+ with tempfile.TemporaryDirectory(prefix='envscope-windows-timezone-test-') as temporary:
+ build_root=build(Path(temporary)/'build',fixture=True);binary=build_root/'timezone-helper.exe'
+ worker=json.loads((build_root/'timezone-helper.json').read_text())|{'path':str(binary)}
+ class FixtureIO(WindowsTimezoneIO):
+ interrupt=False
+ def execute(self,payload):super().execute({**payload,**({'fixture_interrupt':self.interrupt} if self.interrupt else {})})
+ io=FixtureIO(root=root,task=task,fixture=True,worker=lambda:worker)
+ def powershell(source):
+ value=subprocess.run([io.executable,'-NoProfile','-NonInteractive','-Command','[Console]::InputEncoding=[Text.UTF8Encoding]::new($false); & ([scriptblock]::Create([Console]::In.ReadToEnd()))'],input=source.encode(),capture_output=True,timeout=30)
+ if value.returncode:raise RuntimeError('Owned fixture operation failed: '+value.stderr.decode('utf-8',errors='replace')[-1500:])
+ return value.stdout
+ def reader():
+ parser=configparser.ConfigParser();parser.read(root/'clock.ini');return {'network':{'timezone_id':parser['guard']['timezone']}}
+ store=StateStore(Path(temporary)/'state');settings=target('Windows',usage_country='US',country='US',timezone='Eastern Standard Time',locale='en-US')
+ store.save_settings({k:v for k,v in settings.items() if k!='environment_confirmed'},confirm_environment=True)
+ service=WindowsTimezoneService(store,reader,io=io)
+ try:
+ powershell(io.script("New-Root ([IO.DirectoryInfo]::new($Root).Parent.FullName);New-Root $Root;Set-Zone 'China Standard Time'"))
+ r=report(Path(temporary),store.settings(),'Windows')
+ plan=service.prepare(r);assert plan['state']=='planned',plan
+ outcome=service.apply(plan['plan_id'],True);assert outcome['state']=='completed',outcome
+ first=service.status()['heartbeat_at'];cycles=[];deadline=time.monotonic()+165
+ while len(cycles)<2 and time.monotonic()first and (not cycles or stamp>cycles[-1]+1):
+ cycles.append(stamp);print('Observed SYSTEM fixture cycle '+str(len(cycles)),flush=True)
+ time.sleep(2)
+ assert len(cycles)==2,service.status()
+ summary['system_scheduled_cycles']=2
+ # The ACL change is confined to the disposable fixture baseline.
+ powershell(io.script("$acl=Get-Acl -LiteralPath $Baseline;$script:original=$acl.Sddl;[IO.File]::WriteAllText((Join-Path $Root 'saved-acl.txt'),$acl.Sddl);$acl.AddAccessRule([Security.AccessControl.FileSystemAccessRule]::new([Security.Principal.SecurityIdentifier]::new('S-1-5-32-545'),'Write','Allow'));Set-Acl -LiteralPath $Baseline -AclObject $acl"))
+ assert service.status()['state']=='attention'
+ powershell(io.script("$acl=[Security.AccessControl.FileSecurity]::new();$acl.SetSecurityDescriptorSddlForm([IO.File]::ReadAllText((Join-Path $Root 'saved-acl.txt')));Set-Acl -LiteralPath $Baseline -AclObject $acl"))
+ summary['writable_acl_rejected']=True
+ plan=service.prepare(r,remove=True,restore=True);assert service.apply(plan['plan_id'],True)['state']=='completed'
+ assert reader()['network']['timezone_id']=='China Standard Time'
+ plan=service.prepare_undo();assert service.undo(plan['plan_id'],True)['state']=='completed'
+ assert reader()['network']['timezone_id']=='Eastern Standard Time'
+ summary['remove_restore_undo']=True
+ r=report(Path(temporary),store.settings(),'Windows');plan=service.prepare(r);io.interrupt='after_pending'
+ assert service.apply(plan['plan_id'],True)['state']=='partial';assert service.status()['state']=='recovery_required'
+ powershell(io.script("Set-Zone 'China Standard Time'"))
+ deadline=time.monotonic()+85
+ while time.monotonic()context,isBusy:()=>false,
+ recheck:async checks=>{calls.push(checks);return {report_id:'r2',assessment:{items:[{id:'target.config',state:'permission'}]}};},
+ notify:(...args)=>messages.push(args)});
+ return {flow,calls,messages,setContext:value=>{context=value;},context};
+}
+test('return from OS settings rechecks original selection once, never grants from focus',async()=>{
+ const f=fixture();f.flow.arm('target.config',f.context);
+ assert.equal(await f.flow.resume(),false);
+ f.flow.leave();await Promise.all([f.flow.resume(),f.flow.resume()]);
+ assert.deepEqual(f.calls,[['target.config']]);
+ assert.equal(f.messages.at(-1)[0],'denied');
+ await f.flow.resume();assert.equal(f.calls.length,1);
+});
+test('changed target, report or selection invalidates pending continuation',async()=>{
+ for(const change of [{revision:1},{report:{report_id:'new'}},{report:{...fixture().context.report,environment:{fingerprint:'new'}}}]){
+ const f=fixture();f.flow.arm('target.config',f.context);f.flow.leave();
+ f.setContext({...f.context,...change});await f.flow.resume();assert.equal(f.calls.length,0);
+ assert.equal(f.messages.at(-1)[0],'stale');
+ }
+});
+test('cancel is final and manual continue can recheck without a focus transition',async()=>{
+ const f=fixture();f.flow.arm('target.config',f.context);f.flow.cancel();f.flow.leave();
+ await f.flow.resume(true);assert.equal(f.calls.length,0);
+ f.flow.arm('target.config',f.context);await f.flow.resume(true);assert.equal(f.calls.length,1);
+});
diff --git a/tests/test_app_identity.py b/tests/test_app_identity.py
new file mode 100644
index 0000000..dcece88
--- /dev/null
+++ b/tests/test_app_identity.py
@@ -0,0 +1,35 @@
+import json
+from pathlib import Path
+import tempfile
+import unittest
+
+from envscope import __release__, __version__
+from envscope.app_identity import APP_ID, build_identity, validate_identity, verify_package_identity
+
+
+class AppIdentityTests(unittest.TestCase):
+ def test_open_source_identity_is_stable_and_never_claims_publisher_trust(self):
+ for system, mode in [('Windows','unsigned'),('Darwin','ad-hoc')]:
+ value=build_identity(system)
+ self.assertEqual(value['app_id'],APP_ID)
+ self.assertEqual(value['version'],__version__)
+ self.assertEqual(value['signature_mode'],mode)
+ self.assertIs(value['publisher_verified'],False)
+ self.assertIs(value['notarized'],False)
+ self.assertEqual(validate_identity(value,system,__release__),value)
+
+ def test_identity_release_platform_and_signature_claims_cannot_drift(self):
+ original=build_identity('Windows')
+ for change in ({'app_id':'another.app'},{'release':'v99.0.0-alpha.1'},{'system':'Darwin'},
+ {'version':'0.0.0'},{'signature_mode':'publisher'},{'publisher_verified':True},{'notarized':True}):
+ with self.subTest(change=change),self.assertRaises(ValueError):
+ validate_identity({**original,**change},'Windows',__release__)
+
+ def test_missing_changed_and_oversized_package_metadata_is_rejected(self):
+ with tempfile.TemporaryDirectory() as folder:
+ app=Path(folder)/'EnvScope';app.mkdir();exe=app/'EnvScope.exe';exe.write_bytes(b'MZ-fixture')
+ with self.assertRaises(ValueError):verify_package_identity(exe,'Windows',__release__)
+ path=app/'build-identity.json';path.write_text(json.dumps(build_identity('Windows')))
+ self.assertEqual(verify_package_identity(exe,'Windows',__release__)['app_id'],APP_ID)
+ path.write_text(' '*16385)
+ with self.assertRaises(ValueError):verify_package_identity(exe,'Windows',__release__)
diff --git a/tests/test_assessment.py b/tests/test_assessment.py
index a6d4277..12d1b03 100644
--- a/tests/test_assessment.py
+++ b/tests/test_assessment.py
@@ -35,7 +35,8 @@ def test_real_permission_denial_is_distinct_from_io_failure(self):
self.assertNotEqual(rows['extra.config']['state'], 'permission')
runner = Mock()
params = {'report_id': 'fixture', 'finding_id': 'extra.hosts'}
- self.assertEqual(permission_help(report, params, Path('/home'), Path('/profile'), runner=runner)['state'], 'confirmation_required')
+ self.assertEqual(permission_help(report, params, Path('/home'), Path('/profile'), runner=runner, system='Windows')['state'], 'confirmation_required')
+ self.assertEqual(permission_help(report, params, Path('/home'), Path('/profile'), runner=runner, system='Darwin')['state'], 'manual')
runner.assert_not_called()
result = permission_help(report, params, Path('/home'), Path('/profile'), True, runner, 'Windows')
self.assertEqual(result['state'], 'opened')
diff --git a/tests/test_consent.py b/tests/test_consent.py
new file mode 100644
index 0000000..4d949af
--- /dev/null
+++ b/tests/test_consent.py
@@ -0,0 +1,26 @@
+import subprocess
+import unittest
+
+from envscope.consent import ConsentError, raise_for_consent, operation_outcome
+
+
+class ConsentTests(unittest.TestCase):
+ def test_only_native_cancel_codes_mean_cancelled(self):
+ for system, code, stderr, expected in (
+ ('Windows', 1223, '', 'consent_cancelled'), ('Windows', 1260, '', 'policy_denied'),
+ ('Darwin', 1, 'execution error: User canceled. (-128)', 'consent_cancelled'),
+ ('Darwin', 1, 'operation failed; cancelled string PRIVATE_CREDENTIAL', 'operation_failed'),
+ ('Windows', 1, 'cancelled string', 'operation_failed')):
+ with self.subTest(system=system, expected=expected):
+ with self.assertRaises(ConsentError) as error:
+ raise_for_consent(subprocess.CompletedProcess([], code, '', stderr), system)
+ self.assertEqual(operation_outcome(error.exception)['error'], expected)
+ self.assertNotIn('PRIVATE_CREDENTIAL', str(error.exception))
+
+ def test_timeout_is_unknown_execution_not_cancelled(self):
+ value = operation_outcome(subprocess.TimeoutExpired('fixture', 1))
+ self.assertEqual(value['error'], 'execution_unknown')
+ self.assertTrue(value['needs_retest'])
+
+ def test_successful_command_still_requires_callers_independent_readback(self):
+ self.assertIsNone(raise_for_consent(subprocess.CompletedProcess([], 0, '', ''), 'Darwin'))
diff --git a/tests/test_desktop_runtime.py b/tests/test_desktop_runtime.py
index 0159b0f..5ab2349 100644
--- a/tests/test_desktop_runtime.py
+++ b/tests/test_desktop_runtime.py
@@ -15,6 +15,7 @@
from envscope import __version__
from envscope.updates import AppUpdates, API, RELEASE, allowed_url, asset_name, safe_extract, version
from envscope.state import StateStore
+from envscope.app_identity import build_identity
class UpdateTests(unittest.TestCase):
@@ -25,14 +26,19 @@ def setUp(self):
major, minor, _ = version(RELEASE)[:3]
self.future_base = f'v{major}.{minor+1}.0'
self.tag = self.future_base + '-alpha.1'
- self.data = self.archive({'EnvScope/EnvScope.exe': b'MZ-TEST-NOT-EXECUTABLE', 'EnvScope/data.txt': b'test'})
- self.size = len(self.data)
- self.digest = hashlib.sha256(self.data).hexdigest()
- self.checksum = self.digest
+ self.refresh_package()
self.release = self.metadata()
self.calls = []
self.updates = AppUpdates(self.store, self.fetch, 'Windows', 'AMD64')
+ def refresh_package(self,change=None):
+ identity={**build_identity('Windows'),'release':self.tag,'version':self.tag[1:].split('-')[0],'build_version':self.tag[1:].split('-')[0],**(change or {})}
+ self.data = self.archive({'EnvScope/EnvScope.exe': b'MZ-TEST-NOT-EXECUTABLE', 'EnvScope/data.txt': b'test',
+ 'EnvScope/build-identity.json':json.dumps(identity).encode()})
+ self.size = len(self.data)
+ self.digest = hashlib.sha256(self.data).hexdigest()
+ self.checksum = self.digest
+
def archive(self, values):
out = io.BytesIO()
with zipfile.ZipFile(out, 'w') as z:
@@ -71,6 +77,7 @@ def test_verified_side_by_side_install_and_second_version_rollback(self):
first = self.updates.installed()
self.assertEqual(first.read_bytes(), b'MZ-TEST-NOT-EXECUTABLE')
self.tag = self.future_base + '-alpha.2'
+ self.refresh_package()
self.release = self.metadata()
self.updates.check()
self.updates.install(self.tag, True)
@@ -87,6 +94,13 @@ def test_bad_checksum_does_not_change_installed_pointer(self):
self.assertIsNone(self.updates.installed())
self.assertFalse(list((self.store.root / 'updates/versions').iterdir()))
+ def test_archive_hash_cannot_substitute_for_package_identity(self):
+ self.refresh_package({'app_id':'another.application'})
+ self.release=self.metadata();self.updates.check()
+ with self.assertRaises(ValueError):self.updates.install(self.tag,True)
+ self.assertIsNone(self.updates.installed())
+ self.assertFalse(list((self.store.root/'updates/versions').iterdir()))
+
def test_corrupt_archive_and_traversal_are_rejected(self):
self.updates.check()
self.data += b'corruption'
@@ -169,6 +183,17 @@ def setUp(self):
self.server = SimpleNamespace(store=self.store, audit_lock=threading.Lock())
self.runtime = DesktopRuntime(self.server, self.window)
+ def test_guard_failure_survives_restart_without_repeating_os_notification(self):
+ self.server.operations=SimpleNamespace(maintenance=Mock(),timezone_service=Mock())
+ self.server.operations.maintenance.status.return_value={'enabled':True,'watchdog':{'proxy':{'state':'attention'}}}
+ self.server.operations.timezone_service.status.return_value={'state':'not_installed'}
+ self.runtime.icon=Mock();self.runtime.ready.set();self.runtime.poll_guard()
+ self.runtime.icon.notify.assert_called_once()
+ again=DesktopRuntime(self.server,self.window);again.icon=Mock();again.ready.set();again.poll_guard()
+ again.icon.notify.assert_not_called()
+ self.assertEqual(again.guard_attention['components'],['proxy'])
+ self.assertIn('envscope-guard-attention',self.window.run_js.call_args.args[0])
+
def test_close_hides_only_with_a_working_tray(self):
self.assertTrue(self.runtime.closing())
self.runtime.icon = Mock()
diff --git a/tests/test_guard_notifications.py b/tests/test_guard_notifications.py
new file mode 100644
index 0000000..943da5e
--- /dev/null
+++ b/tests/test_guard_notifications.py
@@ -0,0 +1,43 @@
+import unittest
+import tempfile
+from pathlib import Path
+from unittest.mock import Mock
+from envscope.state import StateStore
+from envscope.guard_notifications import GuardNotifications
+
+
+class GuardNotificationTests(unittest.TestCase):
+ def setUp(self):
+ self.folder=tempfile.TemporaryDirectory();self.addCleanup(self.folder.cleanup)
+ self.store=StateStore(Path(self.folder.name))
+ def test_unchanged_failure_is_quiet_across_restart_and_recovery_rearms(self):
+ store=self.store;sink=Mock();notifier=GuardNotifications(store,sink)
+ bad={'enabled':True,'state':'attention','watchdog':{'proxy':{'state':'attention','note':'PRIVATE_PROXY_NAME'}}}
+ self.assertTrue(notifier.update(bad,{}));self.assertFalse(notifier.update(bad,{}))
+ self.assertFalse(GuardNotifications(store,sink).update(bad,{}));self.assertEqual(sink.call_count,1)
+ self.assertNotIn('PRIVATE_PROXY_NAME',str(sink.call_args))
+ self.assertFalse(notifier.update({'enabled':True,'state':'active'},{}))
+ self.assertTrue(notifier.update(bad,{}));self.assertEqual(sink.call_count,2)
+
+ def test_unconfigured_waiting_and_cooldown_states_do_not_notify(self):
+ sink=Mock();notifier=GuardNotifications(self.store,sink)
+ for state in ('disabled','waiting','active'):
+ self.assertFalse(notifier.update({'enabled':state!='disabled','state':state}, {'state':'not_installed'}))
+ self.assertFalse(notifier.update({'enabled':True,'state':'attention','watchdog':{'timezone':{'state':'cooldown'}}},{}))
+ sink.assert_not_called()
+
+ def test_disabled_or_unreadable_previously_approved_native_task_notifies(self):
+ sink=Mock();notifier=GuardNotifications(self.store,sink)
+ notifier.update({}, {'installed':True,'state':'active'})
+ self.assertTrue(notifier.update({}, {'state':'attention'}))
+ self.assertEqual(sink.call_args.args[0]['components'],['timezone'])
+
+ def test_lost_heartbeat_and_unexpected_removal_need_attention(self):
+ sink=Mock();now=[1000];notifier=GuardNotifications(self.store,sink,clock=lambda:now[0])
+ self.assertFalse(notifier.update({}, {'installed':True,'state':'waiting'}))
+ now[0]+=181
+ self.assertTrue(notifier.update({}, {'installed':True,'state':'waiting'}))
+ self.assertFalse(notifier.update({}, {'installed':True,'state':'waiting'}))
+ self.assertTrue(notifier.update({}, {'installed':False,'state':'not_installed'}))
+ notifier.update({}, {'installed':False,'state':'not_installed','intentionally_removed':True})
+ self.assertFalse(notifier.active)
diff --git a/tests/test_inventory_permissions.py b/tests/test_inventory_permissions.py
new file mode 100644
index 0000000..514ba18
--- /dev/null
+++ b/tests/test_inventory_permissions.py
@@ -0,0 +1,118 @@
+"""Permission evidence fixtures; no real commands or system mutations."""
+import json
+import subprocess
+import unittest
+from unittest.mock import Mock, patch
+
+from envscope.assessment import assessment, denied
+from envscope.baseline import collect_baseline, proxy_runtime, tunnel
+from envscope.inventory import command_text, macos_network
+from envscope.network_facts import lookup_routes
+from envscope.policy import Policy
+from envscope.probes import audit
+from envscope.model import Finding, Status
+
+
+def mac_reader(failure):
+ def read(command, **kwargs):
+ if command == ['/usr/sbin/scutil', '--dns']:
+ raise failure
+ if command[0] == '/sbin/ifconfig':
+ return 'en0: flags=8863\n inet 192.0.2.10\n'
+ if command[0] == '/sbin/route':
+ return 'gateway: 192.0.2.1\ninterface: en0\n'
+ return ''
+ return read
+
+
+class InventoryPermissionTests(unittest.TestCase):
+ def test_partial_values_cannot_hide_denied_baseline_reads(self):
+ inventory = {'locale': 'en-US', 'network': {'timezone_id': 'UTC', 'dns': ['192.0.2.2'],
+ 'ipv6_bindings': [{'Enabled': False}], 'errors': {
+ name: {'error': 'permission_denied'} for name in ('timezone', 'locale', 'dns', 'ipv6_bindings')}}}
+ unknown = Finding('fixture', 'fixture', Status.UNKNOWN, 'fixture', 'fixture')
+ rows = collect_baseline(inventory, [], [], unknown, unknown, {'timezone': 'UTC', 'locale': 'en-US'}, Mock(), enabled=set())
+ for key in ('timezone', 'locale', 'dns', 'ipv6'):
+ with self.subTest(component=key):
+ row = next(r for r in rows if r.id == 'baseline.' + key)
+ self.assertEqual(row.status, Status.UNKNOWN)
+ self.assertTrue(denied(row.evidence))
+
+ def test_truncated_route_results_cannot_omit_the_failed_address(self):
+ completed = subprocess.CompletedProcess(['fixture'], 0, stdout='[]', stderr='')
+ rows = lookup_routes(['192.0.2.1'], 'Windows', Mock(return_value=completed))
+ self.assertEqual(len(rows), 1)
+ self.assertEqual(rows[0]['error'], 'invalid_response')
+
+ def test_denied_dns_is_explained_as_permission_in_the_report(self):
+ with patch('envscope.inventory.command_text', side_effect=mac_reader(PermissionError())):
+ network = macos_network()
+ with patch('envscope.probes.collect', return_value={'platform': 'Darwin', 'network': network}):
+ rows = audit(Policy(), Mock(), selected_checks=['system.inventory'])
+ report = {'findings': [row.to_dict() for row in rows]}
+ item = next(row for row in assessment(report)['items'] if row['id'] == 'system.inventory')
+ self.assertEqual(item['state'], 'permission')
+ self.assertEqual(item['action'], 'permission-help')
+ self.assertEqual(network['errors']['dns']['error'], 'permission_denied')
+
+ def test_failed_subcollection_never_becomes_a_completed_inventory(self):
+ for failure in (PermissionError(), subprocess.TimeoutExpired('fixture', 3), FileNotFoundError(), OSError()):
+ with self.subTest(failure=type(failure).__name__):
+ with patch('envscope.inventory.command_text', side_effect=mac_reader(failure)):
+ network = macos_network()
+ with patch('envscope.probes.collect', return_value={'platform': 'Darwin', 'network': network}):
+ row = next(f for f in audit(Policy(), Mock(), selected_checks=['system.inventory']) if f.id == 'system.inventory')
+ self.assertEqual(row.status.value, 'unknown')
+ self.assertNotIn('已采集', row.summary)
+
+ def test_timeout_and_missing_tool_are_not_reported_as_permission(self):
+ for failure, expected in ((subprocess.TimeoutExpired('fixture', 3), 'timeout'), (FileNotFoundError(), 'tool_missing')):
+ with self.subTest(expected=expected):
+ with patch('envscope.inventory.command_text', side_effect=mac_reader(failure)):
+ network = macos_network()
+ self.assertEqual(network.get('errors', {}).get('dns', {}).get('error'), expected)
+ self.assertFalse(denied(network))
+
+ def test_process_and_tunnel_denials_reach_the_affected_check(self):
+ for key, make in (('known_clients', lambda value: proxy_runtime(value, {})), ('adapters', tunnel)):
+ with self.subTest(component=key):
+ value = {'network': {key: [], 'errors': {key: {'error': 'permission_denied', 'operation': key}}}}
+ finding = make(value).to_dict()
+ row = assessment({'findings': [finding]})['items'][0]
+ self.assertEqual(row['state'], 'permission')
+
+ def test_legacy_partial_inventory_errors_are_not_ignored(self):
+ for key in ('dns_error', 'default_route_error'):
+ with self.subTest(component=key):
+ inventory = {'platform': 'Darwin', 'network': {'adapters': [], key: 'unavailable'}}
+ with patch('envscope.probes.collect', return_value=inventory):
+ row = next(f for f in audit(Policy(), Mock(), selected_checks=['system.inventory']) if f.id == 'system.inventory')
+ self.assertEqual(row.status.value, 'unknown')
+
+ def test_denied_command_has_a_safe_machine_readable_error(self):
+ completed = subprocess.CompletedProcess(['fixture'], 1, stdout='', stderr='scutil: Permission denied PRIVATE_CREDENTIAL')
+ with patch('envscope.inventory.subprocess.run', return_value=completed):
+ with self.assertRaises(OSError) as raised:
+ command_text(['/usr/sbin/scutil', '--dns'])
+ self.assertEqual(getattr(raised.exception, 'code', None), 'permission_denied')
+ self.assertNotIn('PRIVATE_CREDENTIAL', str(raised.exception))
+
+ def test_route_read_denial_remains_actionable_on_both_platforms(self):
+ for system in ('Windows', 'Darwin'):
+ with self.subTest(system=system):
+ result = lookup_routes(['192.0.2.1'], system, Mock(side_effect=PermissionError()))
+ self.assertEqual(result[0]['error'], 'permission_denied')
+ self.assertTrue(denied(result))
+
+ def test_route_timeout_is_distinct_from_denial(self):
+ for system in ('Windows', 'Darwin'):
+ with self.subTest(system=system):
+ result = lookup_routes(['192.0.2.1'], system, Mock(side_effect=subprocess.TimeoutExpired('fixture', 3)))
+ self.assertEqual(result[0]['error'], 'timeout')
+ self.assertFalse(denied(result))
+
+ def test_denied_route_command_response_does_not_expose_stderr(self):
+ completed = subprocess.CompletedProcess(['fixture'], 1, stdout='', stderr='route: Operation not permitted PRIVATE_CREDENTIAL')
+ result = lookup_routes(['192.0.2.1'], 'Darwin', Mock(return_value=completed))
+ self.assertEqual(result[0]['error'], 'permission_denied')
+ self.assertNotIn('PRIVATE_CREDENTIAL', json.dumps(result))
diff --git a/tests/test_permissions.py b/tests/test_permissions.py
new file mode 100644
index 0000000..92caa1c
--- /dev/null
+++ b/tests/test_permissions.py
@@ -0,0 +1,68 @@
+"""Permission steps use fixture launchers only; no OS dialogs are opened."""
+from pathlib import Path
+import unittest
+from unittest.mock import Mock
+
+from envscope.permissions import permission_help
+
+
+class PermissionFlowTests(unittest.TestCase):
+ def report(self, key, evidence=None):
+ return {'report_id': 'current', 'usage': 'cli', 'findings': [
+ {'id': key, 'evidence': evidence or [{'error': 'permission_denied'}]}]}
+
+ def call(self, key, system='Windows', evidence=None, confirmed=False, runner=None):
+ return permission_help(self.report(key, evidence), {'report_id': 'current', 'finding_id': key},
+ Path('/fixture/home'), Path('/fixture/Claude'), confirmed, runner or Mock(), system)
+
+ def test_inventory_denial_has_scoped_entry_on_both_platforms(self):
+ evidence = [{'network': {'errors': {'dns': {'error': 'permission_denied'}}}}]
+ for system in ('Windows', 'Darwin'):
+ with self.subTest(system=system):
+ value = self.call('system.inventory', system, evidence)
+ self.assertEqual(value['state'], 'confirmation_required')
+ self.assertEqual(value['capabilities'][0]['id'], 'network-read')
+ self.assertEqual(value['scope'], 'read')
+ self.assertIn('baseline.dns', value['affected_checks'])
+ self.assertFalse(value['permission_granted'])
+
+ def test_native_network_denial_never_opens_file_privacy(self):
+ runner = Mock()
+ value = self.call('target.tun_route', 'Darwin', confirmed=True, runner=runner)
+ self.assertEqual(value['state'], 'opened')
+ command = runner.call_args.args[0]
+ self.assertTrue(any('Network' in part for part in command))
+ self.assertFalse(any('FilesAndFolders' in part for part in command))
+
+ def test_file_and_service_requests_remain_read_only(self):
+ for key in ('extra.hosts', 'extra.config', 'target.config', 'extra.cli_env', 'extra.profile', 'target.wireguard'):
+ with self.subTest(key=key):
+ value = self.call(key)
+ self.assertEqual(value['state'], 'confirmation_required')
+ self.assertEqual(value['scope'], 'read')
+ self.assertTrue(value['capabilities'])
+ self.assertFalse(value['permission_granted'])
+
+ def test_tool_launch_failure_is_actionable_not_a_grant(self):
+ value = self.call('extra.config', confirmed=True, runner=Mock(side_effect=FileNotFoundError()))
+ self.assertEqual(value['state'], 'unavailable')
+ self.assertEqual(value['error'], 'tool_missing')
+ self.assertFalse(value['permission_granted'])
+ self.assertTrue(value['manual_steps'])
+
+ def test_policy_denial_is_manual_without_retrying_elevation(self):
+ runner = Mock()
+ value = self.call('system.inventory', evidence=[{'error': 'policy_denied'}], confirmed=True, runner=runner)
+ self.assertEqual(value['state'], 'manual')
+ self.assertEqual(value['error'], 'policy_denied')
+ runner.assert_not_called()
+
+ def test_stale_and_unmeasured_requests_do_not_open_settings(self):
+ runner = Mock()
+ report = self.report('extra.config')
+ value = permission_help(report, {'report_id': 'old', 'finding_id': 'extra.config'}, Path('.'), Path('.'), True, runner, 'Windows')
+ self.assertEqual(value['state'], 'retest_required')
+ for evidence in ([{'error': 'timeout'}], [{'error': 'invalid_response'}]):
+ with self.assertRaises(ValueError):
+ self.call('extra.config', evidence=evidence, confirmed=True, runner=runner)
+ runner.assert_not_called()
diff --git a/tests/test_watchdog.py b/tests/test_watchdog.py
index c2138e1..617bfe0 100644
--- a/tests/test_watchdog.py
+++ b/tests/test_watchdog.py
@@ -11,21 +11,63 @@
from envscope.accounts import AccountManager, AccountError
from tests.test_maintenance import FakeScheduler
from scripts.environment_fixtures import report, target
+from envscope import __release__
class WatchdogTests(unittest.TestCase):
+ def test_windows_missing_write_privilege_cannot_approve_automatic_guard(self):
+ guard=Watchdog(system='Windows',reader=lambda:self.inventory,writer=Mock(),
+ capability_reader=lambda:{'timezone':{'state':'authorization_required'}})
+ from envscope.region_profiles import profiles
+ selected=next(p for p in profiles('Windows') if p['timezone']=='Eastern Standard Time' and p['locale']=='en-US')
+ settings=target('Windows',region_profile=selected['id'],timezone=selected['timezone'],locale=selected['locale'],country=selected['country'])
+ with self.assertRaisesRegex(ValueError,'授权'):
+ guard.prepare(settings,{'timezone':True})
+ self.assertEqual(guard.options()['capabilities']['timezone']['state'],'authorization_required')
+
+ def test_revoked_windows_privilege_is_detected_even_before_drift(self):
+ writer=Mock()
+ guard=Watchdog(system='Windows',reader=lambda:self.inventory,writer=writer,
+ capability_reader=lambda:{'timezone':{'state':'authorization_required'}})
+ stats={}
+ guard.run({'timezone':'Eastern Standard Time'},stats,lambda *a,**k:None,lambda:None)
+ self.assertEqual(stats['watchdog']['timezone']['state'],'attention')
+ writer.assert_not_called()
+
def test_authorized_mac_service_owns_timezone_repairs_without_duplicate_writes(self):
from datetime import datetime,timezone
now=datetime.now(timezone.utc).timestamp()
writer=Mock()
- authority=lambda:{'registered':True,'pending':False,'baseline':{'target':'America/New_York'},
- 'status':{'at_epoch':now,'state':'healthy','initial':False}}
+ authority=lambda:{'registered':True,'pending':False,'baseline':{'target':'America/New_York','release':__release__},
+ 'status':{'format':1,'guard_policy':2,'target':'America/New_York','release':__release__,
+ 'fixture':False,'at_epoch':now,'state':'healthy','initial':False}}
guard=Watchdog(system='Darwin',reader=lambda:{'timezone_iana':'Asia/Shanghai'},writer=writer,authority=authority)
stats={};events=[]
self.assertFalse(guard.run({'timezone':'America/New_York'},stats,lambda *a,**k:events.append(a),lambda:None))
self.assertEqual(stats['watchdog']['timezone']['state'],'delegated')
self.assertEqual(stats['watchdog']['timezone']['attempts'],[])
writer.assert_not_called()
+ def test_mismatched_native_heartbeat_never_claims_healthy_or_delegated(self):
+ now=datetime.now(timezone.utc).timestamp()
+ valid={'format':1,'guard_policy':2,'target':'America/New_York','release':__release__,
+ 'fixture':False,'at_epoch':now,'state':'healthy','initial':False}
+ for mismatch in ({'target':'UTC'},{'release':'v0.1.0'},{'guard_policy':1},{'format':True},{'fixture':True}):
+ for observed in ('America/New_York','Asia/Shanghai'):
+ with self.subTest(mismatch=mismatch,observed=observed):
+ writer=Mock();value={'registered':True,'pending':False,'baseline':{'target':'America/New_York','release':__release__},'status':valid|mismatch}
+ guard=Watchdog(system='Darwin',reader=lambda:{'timezone_iana':observed},writer=writer,authority=lambda:value)
+ stats={};guard.run({'timezone':'America/New_York'},stats,lambda *a,**k:None,lambda:None)
+ self.assertEqual(stats['watchdog']['timezone']['state'],'attention');writer.assert_not_called()
+
+ def test_valid_cooldown_remains_delegated_but_old_release_is_attention(self):
+ now=datetime.now(timezone.utc).timestamp()
+ for release,expected in ((__release__,'delegated'),('v0.1.0','attention')):
+ value={'registered':True,'pending':False,'baseline':{'target':'America/New_York','release':release},
+ 'status':{'format':1,'guard_policy':2,'target':'America/New_York','release':release,
+ 'fixture':False,'at_epoch':now,'state':'cooldown','initial':False}}
+ writer=Mock();guard=Watchdog(system='Darwin',reader=lambda:{'timezone_iana':'Asia/Shanghai'},writer=writer,authority=lambda:value)
+ stats={};guard.run({'timezone':'America/New_York'},stats,lambda *a,**k:None,lambda:None)
+ self.assertEqual(stats['watchdog']['timezone']['state'],expected);writer.assert_not_called()
def test_mac_guard_never_competes_with_changed_pending_or_unknown_root_baseline(self):
states=[{'registered':True,'baseline':{'target':'Europe/London'}},
{'registered':False,'pending':True},{'registered':False,'legacy_registered':True},ValueError('unreadable')]
diff --git a/tests/test_windows_timezone_service.py b/tests/test_windows_timezone_service.py
new file mode 100644
index 0000000..f264350
--- /dev/null
+++ b/tests/test_windows_timezone_service.py
@@ -0,0 +1,182 @@
+import copy
+import hashlib
+import tempfile
+import time
+import unittest
+import subprocess
+import platform
+from pathlib import Path
+
+from envscope import __release__
+from envscope.consent import ConsentError
+from envscope.state import StateStore
+from envscope.timezone_windows import WindowsTimezoneService, WindowsTimezoneIO, stable, installer_bootstrap
+from scripts.environment_fixtures import report, target
+
+
+class WindowsTimezoneFixture:
+ fixture=True
+ clock=staticmethod(time.time)
+ def __init__(self,inventory):
+ self.inventory=inventory;self.value={'baseline':{},'status':{},'transaction':{},'registered':False,'enabled':False,'pending':False,'baseline_sha':'','worker_sha':''}
+ self.backups={};self.cancel=False;self.interrupt=False;self.worker_hash='a'*64
+ def inspect(self):return copy.deepcopy(self.value)
+ def owner(self):return 'S-1-5-21-1-2-3-1001'
+ def worker(self):return {'path':'C:/fixture/worker.exe','sha256':self.worker_hash,'release':__release__}
+ def execute(self,payload):
+ if self.cancel:raise ConsentError('consent_cancelled')
+ action=payload['action']
+ if action=='restore':
+ old,zone=self.backups[payload['restore_id']];self.value=copy.deepcopy(old);self.inventory['network']['timezone_id']=zone
+ self.value['transaction']={'id':payload['restore_id'],'owner':self.owner(),'state':'restored'};return
+ nonce=payload['nonce'];self.backups[nonce]=(self.inspect(),self.inventory['network']['timezone_id'])
+ self.value['transaction']={'id':nonce,'owner':self.owner(),'state':'pending','before_zone':payload['observed']}
+ if self.interrupt:self.value['pending']=True;raise ValueError('fixture interruption')
+ if action=='install':
+ self.value.update(baseline={'target':payload['target'],'original':self.value['baseline'].get('original',payload['observed']),
+ 'owner':self.owner(),'release':__release__},registered=True,enabled=True,baseline_sha=hashlib.sha256(nonce.encode()).hexdigest(),worker_sha=self.worker_hash)
+ self.inventory['network']['timezone_id']=payload['target']
+ self.value['status']={'format':'1','guard_policy':'2','at_epoch':str(self.clock()),'initial':'0','fixture':'1','release':__release__,'target':payload['target'],'observed':payload['target'],'state':'healthy'}
+ else:
+ if payload['restore']:self.inventory['network']['timezone_id']=self.value['baseline']['original']
+ self.value.update(baseline={},registered=False,enabled=False,baseline_sha='')
+ self.value['transaction']['state']='committed'
+ self.value['transaction'].update(after_baseline_sha=self.value['baseline_sha'],after_worker_sha=self.value['worker_sha'])
+
+
+class WindowsTimezoneServiceTests(unittest.TestCase):
+ def setUp(self):
+ self.temp=tempfile.TemporaryDirectory();self.addCleanup(self.temp.cleanup);self.home=Path(self.temp.name)
+ self.store=StateStore(self.home/'state');settings=target('Windows',usage_country='US',timezone='Eastern Standard Time',locale='en-US',country='US')
+ self.store.save_settings({k:v for k,v in settings.items() if k!='environment_confirmed'},confirm_environment=True)
+ self.report=report(self.home,self.store.settings(),'Windows')
+ self.inventory={'network':{'timezone_id':'China Standard Time'}};self.io=WindowsTimezoneFixture(self.inventory)
+ self.service=WindowsTimezoneService(self.store,lambda:self.inventory,io=self.io)
+ def install(self):
+ plan=self.service.prepare(self.report);self.assertEqual(plan['state'],'planned',plan)
+ self.assertEqual(self.service.apply(plan['plan_id'],'true')['state'],'confirmation_required')
+ result=self.service.apply(plan['plan_id'],True);self.assertEqual(result['state'],'completed',result);return result
+ def test_install_stop_restore_and_undo_preserve_original(self):
+ self.install();self.assertEqual(self.service.status()['state'],'active')
+ plan=self.service.prepare(self.report,remove=True,restore=True)
+ self.assertEqual(self.service.apply(plan['plan_id'],True)['state'],'completed')
+ self.assertEqual(self.inventory['network']['timezone_id'],'China Standard Time')
+ plan=self.service.prepare_undo();self.assertEqual(self.service.undo(plan['plan_id'],True)['state'],'completed')
+ self.assertEqual(self.service.status()['state'],'active')
+ def test_cancel_and_interruption_keep_the_correct_recovery_state(self):
+ self.io.cancel=True;plan=self.service.prepare(self.report);result=self.service.apply(plan['plan_id'],True)
+ self.assertEqual(result['error'],'consent_cancelled');self.assertEqual(self.service.status()['state'],'not_installed')
+ self.io.cancel=False;self.io.interrupt=True;plan=self.service.prepare(self.report)
+ self.assertEqual(self.service.apply(plan['plan_id'],True)['state'],'partial')
+ self.assertEqual(self.service.status()['state'],'recovery_required')
+ self.io.interrupt=False;plan=self.service.prepare_recovery();self.assertEqual(self.service.recover(plan['plan_id'],True)['state'],'completed')
+ self.assertEqual(self.inventory['network']['timezone_id'],'China Standard Time')
+ def test_foreign_owner_changed_binary_and_revoked_registration_are_visible(self):
+ plan=self.service.prepare(self.report);self.io.worker_hash='b'*64
+ self.assertEqual(self.service.apply(plan['plan_id'],True)['state'],'retest_required')
+ self.install();self.io.value['enabled']=False
+ self.assertEqual(self.service.status()['state'],'unregistered')
+ self.io.value['baseline']['owner']='S-1-5-21-1-2-3-9999'
+ self.assertEqual(self.service.status()['state'],'conflict')
+ self.assertEqual(self.service.prepare(self.report)['state'],'blocked')
+ def test_stale_heartbeat_is_not_running_and_target_change_invalidates_plan(self):
+ self.install();self.io.value['status']['at_epoch']='1'
+ self.assertEqual(self.service.status()['state'],'waiting')
+ plan=self.service.prepare(self.report);self.store.save_settings({'timezone':'UTC'})
+ self.assertEqual(self.service.apply(plan['plan_id'],True)['state'],'retest_required')
+
+
+@unittest.skipUnless(platform.system()=='Windows','Windows PowerShell transport')
+class WindowsTimezoneTransportTests(unittest.TestCase):
+ def test_snapshot_retains_transaction_receipt_in_powershell_case_insensitive_scope(self):
+ import json
+ with tempfile.TemporaryDirectory() as folder:
+ root=Path(folder);receipt={'format':1,'id':'a'*32,'owner':'S-1-5-21-1-2-3-1001','fixture':True,'state':'pending'}
+ (root/'transaction.json').write_text(json.dumps(receipt))
+ io=WindowsTimezoneIO(root=root,task='EnvScope-TimezoneFixture-12345678',fixture=True)
+ value=io._read('function Assert-Protected($path){};function Read-Task{return $null};Snapshot | ConvertTo-Json -Depth 12 -Compress')
+ self.assertEqual(value['transaction'],receipt)
+ self.assertTrue(value['pending'])
+
+ def test_pending_receipt_remains_recoverable_with_incomplete_live_pair(self):
+ import json
+ with tempfile.TemporaryDirectory() as folder:
+ root=Path(folder);receipt={'format':1,'id':'a'*32,'owner':'S-1-5-21-1-2-3-1001','fixture':True,'state':'partial'}
+ (root/'transaction.json').write_text(json.dumps(receipt))
+ (root/'timezone-helper.exe').write_bytes(b'new fixture worker')
+ io=WindowsTimezoneIO(root=root,task='EnvScope-TimezoneFixture-12345678',fixture=True)
+ for base in ('[guard]\nformat=1\nowner='+receipt['owner']+'\nworker_sha256='+'0'*64+'\n','[guard]\nformat=1\nbroken'):
+ with self.subTest(base=base):
+ (root/'baseline.ini').write_text(base)
+ value=io._read('function Assert-Protected($path){};function Read-Task{return $null};Snapshot | ConvertTo-Json -Depth 12 -Compress')
+ self.assertTrue(value['pending']);self.assertEqual(value['transaction'],receipt)
+ self.assertEqual(value['worker_sha'],hashlib.sha256(b'new fixture worker').hexdigest())
+ # An incomplete live pair is tolerated only for protected recovery.
+ raw=json.dumps(receipt|{'state':'committed'}).encode()
+ (root/'transaction.json').write_bytes(raw)
+ (root/'worker-commit.json').write_text(json.dumps(hashlib.sha256(raw).hexdigest()))
+ with self.assertRaises(ValueError):
+ io._read('function Assert-Protected($path){};function Read-Task{return $null};Snapshot | ConvertTo-Json -Depth 12 -Compress')
+
+ def test_commit_publication_interruption_retains_recovery(self):
+ import json
+ with tempfile.TemporaryDirectory() as folder:
+ root=Path(folder);io=WindowsTimezoneIO(root=root,task='EnvScope-TimezoneFixture-12345678',fixture=True)
+ for state in ('committed','restored'):
+ raw=json.dumps({'format':1,'id':'a'*32,'owner':'S-1-5-21-1-2-3-1001','fixture':True,'state':state}).encode()
+ (root/'transaction.json').write_bytes(raw)
+ (root/'worker-commit.json').write_text('"'+'0'*64+'"')
+ value=io._read('function Assert-Protected($path){};function Read-Task{return $null};Snapshot | ConvertTo-Json -Depth 12 -Compress')
+ self.assertTrue(value['pending'])
+ (root/'worker-commit.json').write_text(json.dumps(hashlib.sha256(raw).hexdigest()))
+ value=io._read('function Assert-Protected($path){};function Read-Task{return $null};Snapshot | ConvertTo-Json -Depth 12 -Compress')
+ self.assertFalse(value['pending'])
+
+ def test_windows_powershell_ini_parser_preserves_values_and_rejects_duplicates(self):
+ import re
+ from envscope.timezone_windows import HEADER
+ source=re.search(r'function Ini\(\$path\) \{.*?\n\}',HEADER,re.S).group()
+ with tempfile.TemporaryDirectory() as folder:
+ path=Path(folder)/'fixture.ini';path.write_text('[guard]\ntimezone=Eastern Standard Time\nvalue=a=b\n')
+ command=[WindowsTimezoneIO().executable,'-NoProfile','-NonInteractive','-Command',
+ 'function Assert-Protected($path){};'+source+';Ini '+"'"+str(path).replace("'","''")+"'"+' | ConvertTo-Json -Compress']
+ value=subprocess.run(command,capture_output=True,timeout=15)
+ self.assertEqual(value.returncode,0,value.stderr)
+ import json
+ self.assertEqual(json.loads(value.stdout)['value'],'a=b')
+ path.write_text('[guard]\nvalue=1\nvalue=2\n')
+ self.assertNotEqual(subprocess.run(command,capture_output=True,timeout=15).returncode,0)
+
+ def test_verified_source_is_snapshot_and_tamper_never_executes(self):
+ with tempfile.TemporaryDirectory() as folder:
+ path=Path(folder)/"installer with 'quote.ps1"
+ source=b"Write-Output 'VERIFIED_FIXTURE_ONLY'"
+ path.write_bytes(source)
+ io=WindowsTimezoneIO()
+ command=[io.executable,'-NoProfile','-NonInteractive','-Command',installer_bootstrap(path,hashlib.sha256(source).hexdigest())]
+ result=subprocess.run(command,capture_output=True,timeout=15)
+ self.assertEqual(result.returncode,0,result.stderr)
+ self.assertIn(b'VERIFIED_FIXTURE_ONLY',result.stdout)
+ path.write_bytes(b"Write-Output 'MUTATED_SOURCE_MUST_NOT_RUN'")
+ changed=subprocess.run(command,capture_output=True,timeout=15)
+ self.assertNotEqual(changed.returncode,0)
+ self.assertNotIn(b'MUTATED_SOURCE_MUST_NOT_RUN',changed.stdout)
+
+ def test_full_installer_is_parseable_without_running_and_command_is_bounded(self):
+ seen=[]
+ def runner(command,**kwargs):
+ import base64
+ bootstrap=base64.b64decode(kwargs['input']).decode('utf-16-le')
+ self.assertLess(len(bootstrap),4000)
+ self.assertNotIn('ExecutionPolicy',bootstrap)
+ path=next(Path(tempfile.gettempdir()).glob('envscope-timezone-*/installer.ps1'))
+ source=path.read_text(encoding='utf-8')
+ self.assertIn('function Record',source)
+ self.assertIn('transactionLock.Dispose()',source)
+ parser="$e=$null;$t=$null;[void][System.Management.Automation.Language.Parser]::ParseFile("+"'"+str(path).replace("'","''")+"'"+",[ref]$t,[ref]$e);if($e.Count){$e | Out-String;exit 1}"
+ check=subprocess.run([WindowsTimezoneIO().executable,'-NoProfile','-NonInteractive','-Command',parser],capture_output=True,timeout=15)
+ self.assertEqual(check.returncode,0,check.stdout+check.stderr)
+ seen.append(True)
+ return subprocess.CompletedProcess(command,1223,b'',b'')
+ with self.assertRaises(ConsentError):WindowsTimezoneIO(runner=runner).execute({'fixture_data':'no system writes'})
+ self.assertEqual(seen,[True])
diff --git a/tests/test_windows_timezone_worker.py b/tests/test_windows_timezone_worker.py
new file mode 100644
index 0000000..dcf1c4c
--- /dev/null
+++ b/tests/test_windows_timezone_worker.py
@@ -0,0 +1,107 @@
+"""Compiled fixture has no OS clock-writing branch; only disposable files change."""
+import configparser
+import hashlib
+import json
+import os
+from pathlib import Path
+import platform
+import subprocess
+import tempfile
+import unittest
+
+
+@unittest.skipUnless(platform.system() == 'Windows', 'Windows native compiler required')
+class WindowsTimezoneWorkerTests(unittest.TestCase):
+ @classmethod
+ def setUpClass(cls):
+ from scripts.build_windows_timezone import build
+ cls.build_dir = tempfile.TemporaryDirectory()
+ try:
+ cls.folder = build(cls.build_dir.name, fixture=True)
+ except RuntimeError as error:
+ cls.build_dir.cleanup()
+ raise RuntimeError('Native worker fixture build failed: ' + str(error)) from None
+ cls.exe = cls.folder / 'timezone-helper.exe'
+
+ @classmethod
+ def tearDownClass(cls): cls.build_dir.cleanup()
+
+ def setUp(self):
+ self.directory = tempfile.TemporaryDirectory(); self.addCleanup(self.directory.cleanup)
+ self.root = Path(self.directory.name)
+ self.write('baseline', target='Eastern Standard Time', worker_sha256=hashlib.sha256(self.exe.read_bytes()).hexdigest())
+ self.write('clock', timezone='China Standard Time', at_epoch=1793400000)
+ self.receipt={'format':1,'id':'a'*32,'owner':'S-1-5-21-1-2-3-1001','fixture':True,'state':'committed'}
+ raw=json.dumps(self.receipt).encode()
+ (self.root/'transaction.json').write_bytes(raw)
+ (self.root/'worker-commit.json').write_text(json.dumps(hashlib.sha256(raw).hexdigest()),encoding='ascii')
+
+ def write(self, name, **values):
+ (self.root / (name + '.ini')).write_text('[guard]\n' + ''.join(str(k) + '=' + str(v) + '\n' for k, v in values.items()), encoding='ascii')
+
+ def read(self, name):
+ value=configparser.ConfigParser();value.read(self.root/(name+'.ini'));return dict(value['guard'])
+
+ def run_worker(self):
+ return subprocess.run([str(self.exe), '--once', str(self.root)], capture_output=True, timeout=10).returncode
+
+ def test_drift_readback_then_healthy_cycle_without_real_timezone_change(self):
+ tzutil = str(Path(os.environ['SystemRoot'])/'System32/tzutil.exe')
+ before = subprocess.check_output([tzutil, '/g'])
+ self.assertEqual(self.run_worker(), 0)
+ self.assertEqual(self.read('status')['state'], 'restored')
+ self.assertEqual(self.read('clock')['timezone'], 'Eastern Standard Time')
+ self.assertEqual(self.run_worker(), 0)
+ self.assertEqual(self.read('status')['state'], 'healthy')
+ self.assertEqual(subprocess.check_output([tzutil, '/g']), before)
+ self.assertTrue(list(self.root.glob('events-*.jsonl')))
+
+ def test_pending_and_repeated_drift_pause_before_write(self):
+ self.write('state', pending=1, state='repairing', attempts='1793399999')
+ self.assertEqual(self.run_worker(), 0)
+ self.assertEqual(self.read('status')['state'], 'attention')
+ self.assertEqual(self.read('clock')['timezone'], 'China Standard Time')
+ self.write('state', pending=0, state='healthy', attempts='1793398000,1793398600,1793399200')
+ self.assertEqual(self.run_worker(), 0)
+ self.assertEqual(self.read('status')['state'], 'paused')
+ self.assertEqual(self.read('clock')['timezone'], 'China Standard Time')
+
+ def test_tampered_identity_and_invalid_target_cannot_write(self):
+ for values in ({'target':'Eastern Standard Time','worker_sha256':'0'*64}, {'target':'bad\"; command','worker_sha256':hashlib.sha256(self.exe.read_bytes()).hexdigest()}):
+ self.write('baseline', **values)
+ self.assertNotEqual(self.run_worker(), 0)
+ self.assertEqual(self.read('clock')['timezone'], 'China Standard Time')
+
+ def test_malformed_pending_marker_never_allows_a_write(self):
+ self.write('state',pending='unknown',state='repairing',attempts='')
+ self.assertNotEqual(self.run_worker(),0)
+ self.assertEqual(self.read('clock')['timezone'],'China Standard Time')
+
+ def test_incomplete_lifecycle_blocks_worker_until_receipt_is_committed(self):
+ for state in ('pending','partial'):
+ with self.subTest(state=state):
+ (self.root/'transaction.json').write_text(json.dumps(self.receipt|{'state':state}))
+ self.run_worker()
+ self.assertEqual(self.read('clock')['timezone'],'China Standard Time')
+ (self.root/'worker-commit.json').unlink()
+ (self.root/'transaction.json').write_text(json.dumps(self.receipt))
+ self.run_worker()
+ self.assertEqual(self.read('clock')['timezone'],'China Standard Time')
+ raw=(self.root/'transaction.json').read_bytes()
+ (self.root/'worker-commit.json').write_text(json.dumps(hashlib.sha256(raw).hexdigest()))
+ self.assertEqual(self.run_worker(),0)
+ self.assertEqual(self.read('clock')['timezone'],'Eastern Standard Time')
+
+ def test_live_lifecycle_lock_blocks_worker(self):
+ import ctypes
+ from ctypes import wintypes
+ create=ctypes.windll.kernel32.CreateFileW
+ create.argtypes=[wintypes.LPCWSTR,wintypes.DWORD,wintypes.DWORD,ctypes.c_void_p,wintypes.DWORD,wintypes.DWORD,wintypes.HANDLE]
+ create.restype=wintypes.HANDLE
+ close=ctypes.windll.kernel32.CloseHandle;close.argtypes=[wintypes.HANDLE]
+ handle=create(str(self.root/'transaction.lock'),0xC0000000,0,None,4,0x80,None)
+ self.assertNotEqual(handle,wintypes.HANDLE(-1).value)
+ try:
+ self.assertNotEqual(self.run_worker(),0)
+ self.assertEqual(self.read('clock')['timezone'],'China Standard Time')
+ finally:close(handle)
工具
开源方
仅经指定代理检测 Claude 网页与 API，区分连接失败、需认证、拒绝访问、限流及服务错误。代理失败不回退直连。
环境信息
点击后在下方显示，不会打开额外窗口。设备和浏览器信息用于排障，不推断账号风险。
选择一项查看；无需先安装维护核心。
与 claude-switcher 有什么区别
EnvScope 原生提供逐项检查、配置预览与恢复、独立账号资料、加密存档、临时浏览器、托盘和完整软件更新。持续维护提供基线恢复、单独批准的 10 秒进程守护，以及可授权的 Mac 60 秒系统时区守护。
Clash Verge 置顶路由、Mac 系统时区服务和原版加密 DMG 兼容已原生实现。系统网络修复、客户端适配和旧组件迁移提供原生方案；不支持的操作会保留具体手动指引。
上游功能核对至 92cd62f；随附源码固定在 870c4ca。各平台实现方式、需手动处理的项目和验收范围见完整核对表。
完整功能升级核对表与 claude-switcher 有什么区别
EnvScope 原生提供逐项检查、配置预览与恢复、独立账号资料、加密存档、临时浏览器、托盘和完整软件更新。持续维护提供基线恢复、单独批准的 10 秒进程守护，以及可授权的 Windows / macOS 60 秒系统时区守护。
Clash Verge 置顶路由、系统时区服务和原版加密 DMG 兼容已原生实现。系统网络修复、客户端适配和旧组件迁移提供原生方案；不支持的操作会保留具体手动指引。
上游功能核对至 92cd62f；随附源码固定在 870c4ca。各平台实现方式、需手动处理的项目和验收范围见完整核对表。
完整功能升级核对表配置备份
最近 20 份可识别恢复记录，关闭后仍保留。撤销会先停用持续维护，并校验备份和当前文件；后续已有修改时拒绝覆盖。原文位于 ~/.envscope/config-backups，可能含密钥，不可分享。
临时浏览器
独立资料，不带入日常 Cookie 或扩展。关闭后清理，应用退出后由独立进程继续检查。
diff --git a/envscope/web/inspection.mjs b/envscope/web/inspection.mjs index 24af2a8..720e2c1 100644 --- a/envscope/web/inspection.mjs +++ b/envscope/web/inspection.mjs @@ -7,6 +7,8 @@ const explained={passed:'通过',review:'需要复核',problem:'发现问题',pe export function initInspection({run,operate,isBusy,retest}){ let catalog=[],report=null,phase='not_run',selection=new Set(),visible=[],groups=[],source='current',initialized=false,defaultsKey=null; const selected=()=>[...selection]; + let selectionKey=''; + const openRows=new Set(); const output=$('checks-output'); const button=(text,fn)=>{const b=el('button',text,'link');b.type='button';b.disabled=phase==='running'||isBusy()||$('start').disabled;b.addEventListener('click',fn);return b;}; const operateHere=fn=>operate(fn,output); @@ -17,7 +19,7 @@ export function initInspection({run,operate,isBusy,retest}){ for(const id of ['checks-select-all','checks-clear','checks-select-problems','checks-select-visible','checks-load-nodes','checks-node-group','checks-node','checks-region-undo'])$(id).disabled=blocked; for(const node of document.querySelectorAll('#all-checks-list button, #all-checks-list input[type=checkbox], #checks-plan button'))node.disabled=blocked; } - function invalidate(){$('checks-plan').replaceChildren();$('checks-selected-count').textContent=`已勾选 ${selection.size} 项。所需依赖自动包含；未选项目不算通过。`;updateButtons();} + function invalidate(){$('checks-plan').replaceChildren();$('checks-selected-count').textContent=`已勾选 ${selection.size} 项。所需依赖自动包含；未选项目不算通过。`;updateButtons();const key=JSON.stringify([...selection].sort());if(key!==selectionKey){selectionKey=key;document.dispatchEvent(new CustomEvent('envscope-selection-changed'));}} const busyObserver=new MutationObserver(updateButtons); busyObserver.observe(document.documentElement,{attributes:true,attributeFilter:['data-operation-busy']}); busyObserver.observe($('start'),{attributes:true,attributeFilter:['disabled']}); @@ -85,6 +87,13 @@ export function initInspection({run,operate,isBusy,retest}){ $('checks-return').addEventListener('click',()=>document.querySelector('.tab[data-page="audit"]')?.click()); for(const id of ['check-search','check-group','check-status'])$(id).addEventListener(id==='check-search'?'input':'change',render); function render(){ + // A native details toggle event may still be queued when a filter renders. + // Capture the live state before replacing rows so the user's click survives. + for(const row of $('all-checks-list').querySelectorAll(':scope > details[data-inspection]')){ + if(row.open)openRows.add(row.dataset.inspection);else openRows.delete(row.dataset.inspection); + } + const active=document.activeElement,activeRow=active?.closest('[data-inspection]'); + const focused=activeRow?{id:activeRow.dataset.inspection,index:[...activeRow.querySelectorAll('summary,input,button')].indexOf(active)}:null; const found=new Map((report?.findings||[]).map(f=>[f.id,f])); const known=new Set(catalog.map(c=>c.id)); const items=[...catalog,...(report?.findings||[]).filter(f=>!known.has(f.id)).map(f=>({id:f.id,title:f.title,label:f.title,group:f.id.startsWith('target.')?'target':'measurement',why:f.id.startsWith('target.')?'按已确认的用途和连接方式，核对本次证据是否达到目标。':'独立记录测量来源和范围；检测目录与补充测量分别列出。'}))]; @@ -98,8 +107,9 @@ export function initInspection({run,operate,isBusy,retest}){ $('check-count').textContent=`显示 ${selected.length} / ${rows.length} 项。基础 ${basics} 项，扩展 ${extras} 项，其余为目标验收及补充测量。`; const nodes=selected.map(c=>{ const row=el('details',undefined,'inspection-row');row.dataset.inspection=c.id; + row.open=openRows.has(c.id);row.addEventListener('toggle',()=>{if(row.isConnected){if(row.open)openRows.add(c.id);else openRows.delete(c.id);}}); row.dataset.manual=String(!!c.remedy?.manual); - const summary=el('summary'),name=el('span',undefined,'inspection-name'),state=el('span',undefined,'inspection-state'),disclosure=el('small','查看说明'); + const summary=el('summary'),name=el('span',undefined,'inspection-name'),state=el('span',undefined,'inspection-state'),disclosure=el('small',row.open?'收起说明':'查看说明'); const label=el('label',undefined,'inspection-select'),checkbox=el('input');checkbox.type='checkbox';checkbox.checked=selection.has(c.id);checkbox.setAttribute('aria-label','选择 '+c.label);checkbox.disabled=phase==='running'; label.append(checkbox);label.addEventListener('click',event=>event.stopPropagation());checkbox.addEventListener('change',()=>{if(checkbox.checked)selection.add(c.id);else selection.delete(c.id);invalidate();});summary.append(label); const statusText=c.finding?.scope==='not-selected'?'未勾选 · 未检测':c.remedy?.manual?(c.annotation?.state==='permission'?'需要读取权限 · 需手动处理':'需手动处理'):explained[c.annotation?.state]||states[c.status]||'未取得结果'; @@ -122,6 +132,7 @@ export function initInspection({run,operate,isBusy,retest}){ }); $('all-checks-list').replaceChildren(...(nodes.length?nodes:[el('p',catalog.length?'没有符合条件的项目，试试清除搜索或切换筛选。':'检查目录尚未取得，请检查本地服务连接。','note')])); updateButtons(); + if(focused){const row=nodes.find(n=>n.dataset.inspection===focused.id);row?.querySelectorAll('summary,input,button')[focused.index]?.focus({preventScroll:true});} } const applyDefaults=config=>{ if(!config)return false; diff --git a/envscope/web/mark.svg b/envscope/web/mark.svg new file mode 100644 index 0000000..f7e3677 --- /dev/null +++ b/envscope/web/mark.svg @@ -0,0 +1 @@ + diff --git a/envscope/web/permission_flow.mjs b/envscope/web/permission_flow.mjs new file mode 100644 index 0000000..3b7725e --- /dev/null +++ b/envscope/web/permission_flow.mjs @@ -0,0 +1,67 @@ +// Opening an OS pane is never evidence that permission was granted. +const key=context=>JSON.stringify([context?.report?.report_id,context?.report?.environment?.fingerprint, + context?.report?.selection?.selected,context?.revision]); +export function permissionContinuation({getContext,recheck,notify,isBusy=()=>false}){ + let pending=null,running=false; + return { + arm(id,context,left=false){pending={id,key:key(context),checks:context.report.selection?.selected?.slice()||null,left};notify('waiting');}, + leave(){if(pending)pending.left=true;}, + cancel(){pending=null;notify('cancelled');}, + invalidate(){if(pending){pending=null;notify('stale');}}, + async resume(manual=false){ + if(!pending||running||isBusy()||(!manual&&!pending.left))return false; + const step=pending;pending=null; + if(step.key!==key(getContext())){notify('stale');return false;} + running=true;notify('checking'); + try{ + const report=await recheck(step.checks); + const item=report?.assessment?.items?.find(row=>row.id===step.id); + if(!report||!item)notify('incomplete'); + else if(item.state==='permission')notify('denied'); + else if(item.state==='passed')notify('verified'); + else notify('review'); + }catch{notify('incomplete');} + finally{running=false;} + return true; + } + }; +} + +export function initPermissionFlow({run,operate,recheck,getContext,isBusy}){ + const panel=document.getElementById('permission-status'),text=document.getElementById('permission-message'); + const resume=document.getElementById('permission-resume'),cancel=document.getElementById('permission-cancel'); + const messages={waiting:'已打开系统入口。处理后返回本窗口，将按原勾选范围自动复检一次。',checking:'正在重新读取权限和检测结果…', + cancelled:'已停止自动复检。系统中已做的操作不会被撤销。',stale:'检测目标、范围或报告已改变，请按当前目标重新检测。', + denied:'复检仍被系统拒绝。请按该项说明处理；不会重复弹出授权窗口。',verified:'本项已重新读取并通过检测，修复方案已更新。', + review:'复检已完成，请查看新的检测结果和处理方案。',incomplete:'复检未取得本项的完整结果，请重新检测。'}; + function notify(state){panel.hidden=false;panel.dataset.state=state;text.textContent=messages[state];resume.hidden=cancel.hidden=state!=='waiting';} + const flow=permissionContinuation({getContext,recheck,isBusy,notify}); + let opening=false,leftDuringOpen=false; + const leave=()=>{if(opening)leftDuringOpen=true;flow.leave();}; + window.addEventListener('blur',leave); + window.addEventListener('focus',()=>{void flow.resume();}); + document.addEventListener('visibilitychange',()=>{if(document.hidden)leave();else void flow.resume();}); + resume.addEventListener('click',()=>void flow.resume(true)); + cancel.addEventListener('click',()=>flow.cancel()); + for(const name of ['envscope-target-changed','envscope-selection-changed','envscope-check-preferences-changed'])document.addEventListener(name,()=>flow.invalidate()); + document.addEventListener('envscope-permission',event=>{ + const context=getContext();if(!context?.report){notify('stale');return;} + void operate(async()=>{ + const {id,button,output}=event.detail;button.disabled=true; + try{ + const params={report_id:context.report.report_id,finding_id:id}; + let value=await run('permission-help',params); + if(value.state==='confirmation_required'){ + if(!window.confirm(value.reason)){output.textContent='已取消，未打开权限入口。';return;} + opening=true;leftDuringOpen=false; + value=await run('permission-help',params,true); + } + output.textContent=value.reason||'请根据本项说明处理后复检。'; + if(value.state==='opened'&&value.recheck_on_return===true){ + flow.arm(id,context,leftDuringOpen); + } + }finally{opening=false;button.disabled=false;} + },event.detail.output); + }); + return flow; +} diff --git a/envscope/web/scan.svg b/envscope/web/scan.svg new file mode 100644 index 0000000..4f66185 --- /dev/null +++ b/envscope/web/scan.svg @@ -0,0 +1 @@ + diff --git a/envscope/web/target.mjs b/envscope/web/target.mjs index bd7d3c9..04f145f 100644 --- a/envscope/web/target.mjs +++ b/envscope/web/target.mjs @@ -69,7 +69,17 @@ export function initTargetEnvironment({sessionPromise,run,retest,isBusy}){ const params={connection_mode:field('connection_mode').value,target_proxy:field('connection_mode').value==='http_proxy'?field('target_proxy').value.trim():''}; lookupBusy=true;controls();$('target-ip-status').textContent='正在按所选连接读取出口 IP…'; try{ - const value=await run('environment-location',params); + let value; + for(let attempt=0;attempt<4;attempt++){ + if(revision!==lookupRevision||form.hidden)return; + try{value=await run('environment-location',params);break;} + catch(error){ + // Only retry this read, never a configuration change or consent action. + if(error.code!=='audit_running'||attempt===3)throw error; + $('target-ip-status').textContent='等待当前操作完成，随后自动读取出口 IP…'; + await new Promise(resolve=>setTimeout(resolve,300*(attempt+1))); + } + } if(revision!==lookupRevision||form.hidden)return; if(edited!==editRevision||manualTarget){$('target-ip-status').textContent=`${value.country?'本次出口 '+value.country+'。':''}已保留手动选择或已保存目标。点“重新读取 IP”可重新匹配。`;return;} const country=countryCode(value.country),actual=countryCode(field('usage_country').value); diff --git a/envscope/web/tray.png b/envscope/web/tray.png new file mode 100644 index 0000000..d02214a Binary files /dev/null and b/envscope/web/tray.png differ diff --git a/envscope/web/watchdog_ui.mjs b/envscope/web/watchdog_ui.mjs index 23b3b7e..39400e7 100644 --- a/envscope/web/watchdog_ui.mjs +++ b/envscope/web/watchdog_ui.mjs @@ -14,7 +14,8 @@ export function initWatchdogForms(run){ const select=$(p+'-guard-client'),previous=select.value; select.replaceChildren(new Option('不重开客户端，仅恢复可读取节点',''),...(value.clients||[]).map(c=>new Option(c.label+' · '+c.path,c.id))); if([...select.options].some(o=>o.value===previous))select.value=previous; - $(p+'-guard-note').textContent=value.note+(!(value.clients||[]).length?' 未找到支持的已安装客户端；代理离线需手动处理。':''); + const capabilityNote=Object.values(value.capabilities||{}).map(c=>c.reason).filter(Boolean).join(' '); + $(p+'-guard-note').textContent=[capabilityNote,value.note,!(value.clients||[]).length?'未找到支持的已安装客户端；代理离线需手动处理。':''].filter(Boolean).join(' '); $(p+'-plan').replaceChildren(); } }catch(e){$(prefix+'-guard-note').textContent='未读取客户端：'+e.message;}finally{button.disabled=false;} diff --git a/envscope/web/workspace.css b/envscope/web/workspace.css new file mode 100644 index 0000000..3341f5e --- /dev/null +++ b/envscope/web/workspace.css @@ -0,0 +1,142 @@ +/* Desktop task surface. The existing modules retain their semantic states. */ +:root{--paper:#fff;--rail:#f5f6f4;--ink:#202322;--muted:#626763;--line:#dde1dc;--selected:#e5e9e3;--rail-width:204px;--danger:#ad3030;--radius:7px} +body{font-size:14px;line-height:1.65;min-width:960px;caret-color:var(--ink)} +::selection{background:#dce4d8;color:#171b17} +.skip-link{position:fixed;left:220px;top:-60px;z-index:80;padding:10px 16px;background:var(--ink);color:#fff;border-radius:var(--radius)} +.skip-link:focus{top:12px} +.app-header{position:fixed;inset:0 auto 0 0;width:var(--rail-width);max-width:none;margin:0;padding:28px 16px 180px;display:flex;flex-direction:column;align-items:stretch;justify-content:flex-start;gap:36px;background:var(--rail);border:0;border-right:1px solid var(--line);z-index:20} +.app-header{overflow-y:auto;scrollbar-width:thin;scrollbar-color:#bac2b5 var(--rail)} +header{display:flex;flex-direction:column;align-items:flex-start;gap:10px;padding:0 8px} +header a{display:flex;align-items:center;gap:10px;font-size:19px;letter-spacing:-.5px;font-weight:650} +header img{flex-shrink:0} +header span{padding-left:42px;font-size:11px;line-height:1.3} +nav{display:flex;flex-direction:column;align-items:stretch;gap:5px} +.tab{display:flex;align-items:center;gap:10px;min-height:42px;width:100%;border-radius:var(--radius);padding:10px 12px;font-size:13px;line-height:1.5;white-space:normal} +.tab[aria-current=page]{background:var(--selected);color:var(--ink)} +.tab:hover:not(:disabled){background:#ecefea} +.ui-icon{width:19px;height:19px;flex-shrink:0;fill:none;stroke:currentColor;stroke-width:1.7;stroke-linecap:round;stroke-linejoin:round} +#more-menu{margin:18px 0 0;padding-top:12px;border-top:1px solid var(--line)} +#more-menu>summary{display:flex;align-items:center;gap:10px;list-style:none;padding:10px 12px;width:100%;border-radius:var(--radius);font-size:13px;color:var(--muted)} +#more-menu>summary::-webkit-details-marker{display:none} +#more-menu>summary::after{content:'';width:6px;height:6px;border-right:1px solid currentColor;border-bottom:1px solid currentColor;transform:rotate(45deg);margin:0 0 3px auto} +#more-menu[open]>summary::after{transform:rotate(225deg);margin-bottom:-3px} +#more-menu>summary:hover{background:#ecefea;color:var(--ink)} +.more-menu-items{position:static;display:flex;align-items:stretch;border:0;border-radius:0;padding:4px 0;min-width:0;background:transparent;gap:3px} +main{margin:0 0 0 var(--rail-width);max-width:none;padding:26px 40px 48px;min-height:100vh} +.page,.connection-status,.connection-banner{max-width:1024px;margin-left:auto;margin-right:auto} +.page{scroll-margin-top:24px} +main:focus{outline:none} +h1{font-size:24px;line-height:1.4;letter-spacing:-.5px;font-weight:650;margin:0 0 10px} +h2{font-size:16px;line-height:1.5;font-weight:600} +h3{font-size:14px;line-height:1.6} +p{margin-bottom:14px} +.note,.limits p{font-size:12.5px;line-height:1.75;max-width:80ch;color:var(--muted)} +.subtle{font-size:13px;line-height:1.75;margin-bottom:24px;max-width:78ch} +.connection-status{height:22px;margin-top:0;margin-bottom:22px;font-size:11px;line-height:22px} +.connection-banner{padding:16px 20px;background:#fafbf9;border:1px solid #aeb6aa;border-radius:var(--radius);margin-bottom:20px} +button,input,select,textarea{border-radius:var(--radius);font-size:13px} +button{min-height:36px;padding:8px 14px;border-color:#bdc5b9;line-height:1.45;transition:background-color .12s,border-color .12s} +button:hover:not(:disabled){background:#f1f4ef;border-color:#919c89} +button:active:not(:disabled){background:#e8ede4} +button:focus-visible,a:focus-visible,summary:focus-visible,input:focus-visible,select:focus-visible,textarea:focus-visible{outline:2px solid var(--ink);outline-offset:3px} +input,select,textarea{border:1px solid #b9c1b5;padding:9px 11px;line-height:1.5;background:#fff;color:var(--ink)} +input::placeholder,textarea::placeholder{color:#6d7269;opacity:1} +select,input:not([type=checkbox]):not([type=radio]){min-height:40px} +input[type=checkbox],input[type=radio]{accent-color:var(--ink);width:16px;height:16px;flex-shrink:0;margin:0 8px 0 0} +label{color:var(--ink);font-size:13px} +.checkbox{display:flex;align-items:center;gap:0;min-height:34px;margin:5px 0;font-size:13px} +.checkbox .note{margin-left:6px} +.form-grid{gap:16px 24px} +.actions{gap:12px 18px;margin:18px 0 14px} +.link{display:inline-flex;align-items:center;gap:8px;min-height:28px;padding:2px 0;line-height:1.55;text-decoration:underline;text-underline-offset:3px;border-radius:2px} +.primary,#start,#prepare-solution{min-height:40px;background:var(--ink);color:#fff;border-color:var(--ink);border-radius:var(--radius);font-weight:550} +#prepare-solution{padding:10px 18px;text-decoration:none} +.primary:hover:not(:disabled),#start:hover:not(:disabled),#prepare-solution:hover:not(:disabled){background:#394038;border-color:#394038} +#start{display:inline-flex;align-items:center;justify-content:center;gap:10px;min-width:140px;padding:11px 20px} +#start::before{content:'';width:18px;height:18px;flex-shrink:0;background:url('scan.svg') center/contain no-repeat} +#start:disabled{opacity:.7} +.intro-heading{align-items:center;gap:24px} +.intro-heading .actions{gap:6px} +#session-state{font-size:11px;line-height:1.6;font-variant-numeric:tabular-nums} +#mode-note{margin-top:8px;max-width:64ch} +.network-note{font-size:11px;margin-top:9px} +.target-environment{padding:18px 20px;margin:22px 0 24px;background:#f7f9f5;border:1px solid var(--line);border-radius:var(--radius)} +.target-heading{align-items:center;gap:18px} +.target-heading h2{font-size:14px;margin-bottom:5px} +.target-heading .note{margin:0} +#target-form{padding-top:18px;margin-top:16px;border-top:1px solid var(--line)} +.target-primary-fields{margin-top:0} +.target-ip{display:flex;align-items:center;justify-content:space-between;gap:16px} +.target-ip p{margin:0} +#target-form details{margin-top:16px} +.flow-progress{margin:20px 0 14px;gap:20px;border-bottom:1px solid var(--line)} +.flow-progress li{padding:11px 0;font-size:12px} +.result-summary{align-items:center;min-height:34px} +.result-summary h2{font-size:18px;line-height:1.5} +#verdict-note{margin:9px 0 20px;max-width:78ch} +.problem{padding:18px 0;border-left:0;border-right:0} +.problem-header{align-items:center} +.problem-header h3{font-size:15px} +.problem p{font-size:13px;line-height:1.75;max-width:80ch} +.problem-actions{gap:12px} +.problem .cause{margin-bottom:10px} +.manual-guidance,.inspection-error{color:var(--danger)} +.inspection-row[data-manual=true]>.inspection-state,.inspection-row[data-manual=true]>summary .inspection-state{color:var(--danger)} +.inspection-row{padding:13px 12px;border-top:1px solid var(--line);scroll-margin-top:20px} +.inspection-row[open]{background:#fafbf9;padding-bottom:20px} +.inspection-row>summary{gap:14px;align-items:center;font-size:13px} +.inspection-row>summary strong{font-size:13px;font-weight:550} +.inspection-row>summary small{margin-top:3px;font-size:11px} +.inspection-row>p,.inspection-row>h3,.inspection-row>.actions,.inspection-row>details{margin-left:34px} +.inspection-row>p{font-size:13px;line-height:1.75} +.inspection-state{font-size:12px;min-width:120px} +.inspection-state small{font-size:11px} +.inspection-toolbar{gap:10px 16px;margin:20px 0} +.check-filters{background:var(--rail);padding:16px;border-radius:var(--radius);gap:16px;margin-top:20px} +.check-filters label{font-size:12px} +.check-filters input,.check-filters select{margin-top:6px} +.tool-section{margin-top:26px;padding-top:22px} +.tool-section>h2{margin-bottom:12px} +.tool-section h3{margin-top:20px} +.tool-section .actions{margin-top:16px} +.upkeep-state{padding:18px 20px;border:1px solid var(--line);border-radius:var(--radius);background:#f7f9f5} +.upkeep-state p{margin:6px 0} +#upkeep-setup{margin-top:22px;border-top:0;padding-top:0} +#upkeep-setup>label:not(.checkbox){max-width:480px} +#upkeep-setup>.checkbox{display:inline-flex;margin:6px 24px 6px 0} +#upkeep-setup>h2{font-size:17px} +#advanced-maintenance{border-top:1px solid var(--line);padding-top:18px;margin-top:28px;font-size:13px} +#advanced-maintenance>summary{color:var(--ink);padding:4px 0;font-weight:550} +#advanced-maintenance .tool-section{margin-top:18px;padding-top:18px} +details>summary{max-width:100%;font-size:12px} +#opensource-tools>summary{font-size:14px;color:var(--ink)} +.account-guide{margin-top:20px} +table{font-size:13px;line-height:1.65;font-variant-numeric:tabular-nums} +th{font-size:12px;color:var(--muted);font-weight:500;background:var(--rail)} +td,th{padding:12px 14px;border-color:var(--line)} +.information-output{border:1px solid var(--line);border-radius:var(--radius);padding:18px 20px;margin-top:18px} +.information-output:empty{display:none} +.information-output dl div{grid-template-columns:160px minmax(0,1fr);padding:8px 0;margin:0;border-bottom:1px solid #e8ece5} +.information-output dl div:last-child{border-bottom:0} +#check-preferences-panel{border-top:0;margin-top:26px;padding-top:0} +#check-preferences-form{display:grid;grid-template-columns:1fr 1fr;gap:4px 20px} +#check-preferences-form>p,#check-preferences-form>.checkbox:has(#optional-failures),#check-preferences-form>.checkbox:has(#diagnostic-logging),#check-preferences-form>button{grid-column:1/-1} +#check-preferences-form>button{justify-self:start;margin-top:8px} +#check-preferences-form>p{margin:6px 0 10px} +.desktop-preferences{max-width:none;padding:22px 0;margin:24px 0;border-top:1px solid var(--line);border-bottom:1px solid var(--line)} +.desktop-preferences h2{font-size:16px} +.desktop-preferences h3{margin-top:22px} +.learning{max-width:780px;margin:24px auto} +.learning-top{font-size:12px} +.learning h1{font-size:24px} +.learning-inline{margin:0 0 24px;padding:14px 18px;border:1px solid var(--line);border-radius:var(--radius);background:#fafbf9} +.learning-inline h1{font-size:14px} +.learning-inline #learning-body p{font-size:12px} +footer{position:fixed;left:0;bottom:0;width:var(--rail-width);max-width:none;margin:0;padding:18px 24px;display:flex;flex-direction:column;align-items:flex-start;gap:12px;border:0;background:var(--rail);z-index:21;font-size:11px} +footer span{margin:0;text-align:left;line-height:1.8;font-size:11px;color:var(--muted)} +footer br{display:block} +footer .link{font-size:12px;min-height:26px} +footer .ui-icon{width:16px;height:16px} +#quit{color:var(--muted)} +@media (max-width:1100px){:root{--rail-width:184px}main{padding:24px 28px 40px}.app-header{padding-left:12px;padding-right:12px}footer{padding-left:20px}.tab{font-size:12.5px}.check-filters{grid-template-columns:1.5fr 1fr 1fr}.inspection-row>summary{gap:10px}.result{grid-template-columns:135px minmax(0,1fr) 80px;gap:16px}.form-grid{gap:14px 20px}} +@media (prefers-reduced-motion:reduce){*,*::before,*::after{transition:none!important;animation:none!important;scroll-behavior:auto!important}} diff --git a/envscope/web/workspace_ui.mjs b/envscope/web/workspace_ui.mjs new file mode 100644 index 0000000..87dd12e --- /dev/null +++ b/envscope/web/workspace_ui.mjs @@ -0,0 +1,21 @@ +// Reorder existing controls without duplicating their state or action handlers. +export function initWorkspace(){ + const setup=document.getElementById('upkeep-prepare')?.closest('section'); + const status=document.querySelector('#page-upkeep>.upkeep-state'); + if(setup&&status){setup.id='upkeep-setup';status.after(setup);} + const advanced=document.createElement('details');advanced.id='advanced-maintenance'; + const title=document.createElement('summary');title.textContent='系统守护与高级修复';advanced.append(title); + for(const id of ['timezone-service-panel','process-guard-panel','client-panel','language-panel','network-panel','routing-panel','components-panel','software-panel']){ + const section=document.getElementById(id);if(section)advanced.append(section); + } + setup?.after(advanced); + const tools=document.getElementById('environment-tools'),heading=document.querySelector('#page-tools>h1'); + if(tools&&heading)heading.after(tools); + const sources=document.getElementById('opensource-tools'); + if(sources){ + const disclosure=document.createElement('details'),summary=document.createElement('summary'); + disclosure.id=sources.id;disclosure.className=sources.className;summary.textContent='开源方案使用说明'; + sources.querySelector('h2')?.remove();disclosure.append(summary,...sources.childNodes);sources.replaceWith(disclosure); + document.getElementById('tool-output')?.before(disclosure); + } +} diff --git a/native/timezone_windows.c b/native/timezone_windows.c new file mode 100644 index 0000000..bb4b430 --- /dev/null +++ b/native/timezone_windows.c @@ -0,0 +1,214 @@ +/* Restricted Windows timezone worker. No shell, user scripts or network. */ +#ifndef _WIN32_WINNT +#define _WIN32_WINNT 0x0A00 +#endif +#ifndef WINVER +#define WINVER 0x0A00 +#endif +#ifndef UNICODE +#define UNICODE +#endif +#ifndef _UNICODE +#define _UNICODE +#endif +#define WIN32_LEAN_AND_MEAN +#include