import { test } from 'node:test' import assert from 'node:assert/strict' import { createServer } from 'node:http' import { mkdtemp, readFile, readdir, rm, mkdir, writeFile } from 'node:fs/promises' import { tmpdir } from 'node:os' import { join, resolve } from 'node:path' import { randomUUID } from 'node:crypto' import { _electron as electron, expect } from '@playwright/test' test('packaged Windows client logs in, encrypts pairing, restores its session and never starts a server', { skip: process.platform !== 'win32', timeout: 90000 }, async () => { const home = await mkdtemp(join(tmpdir(), '夭夭-windows-')), hostId = randomUUID(), token = 'windows-fixture-token-not-for-production' let exchanges = 0, app const server = createServer((req, res) => { const json = (body, status = 200) => { res.statusCode = status; res.setHeader('content-type', 'application/json'); res.end(JSON.stringify(body)) } if (req.url.split('?')[0] === '/api/app/bootstrap') { res.setHeader('set-cookie', 'csrf=fixture; Path=/; HttpOnly') return json({ authenticated: String(req.headers.cookie).includes('hermes_yaoyao_session=fixture'), setupRequired: false, csrfToken: 'fixture', serverKind: 'yaoyao-web' }) } if (req.url === '/api/app/login') { req.resume(); res.setHeader('set-cookie', 'hermes_yaoyao_session=fixture; Path=/; HttpOnly; Max-Age=3600') return json({ user: { id: 'fixture', username: 'admin', role: 'admin' }, csrfToken: 'fixture' }) } if (req.url === '/api/app/admin/desktop-hosts') { req.resume(); return json({ host: { id: hostId }, token }) } if (req.url === `/api/desktop-host/v1/${hostId}/exchange`) { let raw = ''; req.on('data', bytes => { raw += bytes }); req.on('end', () => { const body = JSON.parse(raw) assert.equal(body.host.platform, 'win32'); assert.equal(req.headers.authorization, `Bearer ${token}`) exchanges++; json({ commands: [], capabilities: { environmentMetadata: 1, desktopPlatforms: ['darwin', 'win32'] } }) }); return } res.setHeader('content-type', 'text/html; charset=utf-8'); res.end('Windows 登录验证

远程工作区

') }) await new Promise(done => server.listen(0, '127.0.0.1', done)) const url = `http://127.0.0.1:${server.address().port}` const launch = () => electron.launch({ executablePath: process.env.DESKTOP_TEST_EXECUTABLE || resolve('desktop-release/windows-x64/win-unpacked/Yaoyao.exe'), args: [], env: { ...process.env, HERMES_YAOYAO_DESKTOP_TEST_HOME: home }, timeout: 30000 }) const evidence = resolve('test-results/windows-client') try { app = await launch(); let page = await app.firstWindow() await expect(page.locator('#connection-form')).toBeVisible() await expect(page.locator('#choice-section')).toBeHidden() assert.deepEqual((await page.evaluate(() => window.yaoyaoDesktop.status())).supportedModes, ['client']) assert.equal(await page.evaluate(async () => { try { await window.yaoyaoDesktop.selectServer('local'); return false } catch { return true } }), true) await page.locator('#remember').check() await page.locator('#server').fill(url); await page.locator('#detect').click() await expect(page.locator('#login-form')).toBeVisible() await page.locator('#username').fill('admin'); await page.locator('#password').fill('fixture-password'); await page.locator('#submit').click() await page.waitForURL(url + '/**') const state = await page.evaluate(() => window.yaoyaoDesktop.modeState()) assert.equal(state.mode, 'client'); assert.deepEqual(state.supportedModes, ['client']) assert.equal((await page.evaluate(() => window.yaoyaoDesktop.switchMode('server'))).ok, false) await expect.poll(() => exchanges).toBeGreaterThan(0) const bytes = await readFile(join(home, 'desktop-host.enc')) assert.equal(bytes.includes(token), false); assert.equal(bytes.includes('fixture-password'), false) assert.equal(bytes.subarray(0, Buffer.byteLength('YAOYAO-WINDOWS-DPAPI-1\n')).toString(), 'YAOYAO-WINDOWS-DPAPI-1\n') assert.equal((await readdir(home)).includes('service-instance.json'), false) const menu = await app.evaluate(({ Menu }) => ['desktop-host-use-local', 'desktop-stop-and-quit', 'runner-import'].map(id => Boolean(Menu.getApplicationMenu().getMenuItemById(id)))) assert.deepEqual(menu, [false, false, false]) const native = await app.evaluate(async ({ app, BrowserWindow, screen }, { home, url }) => { const { createRequire } = process.getBuiltinModule('node:module') const { join } = process.getBuiltinModule('node:path') const { DesktopHostCore } = createRequire(join(app.getAppPath(), 'main.mjs'))('./environment-host.mjs') const core = new DesktopHostCore({ root: join(process.resourcesPath, 'runtime'), dataRoot: join(home, 'native-acceptance') }) const owner = 'a'.repeat(64), resource = 'b'.repeat(64) const command = { owner, resource, mode: 'local', profile: 'temporary', deadline: Date.now() + 30000 } core.approved.add(owner); core.approvedFull.add(owner) try { const shell = await core.execute({ ...command, operation: 'shell', action: { command: "[Console]::WriteLine('原生命令')" } }) if (shell.exitCode !== 0 || shell.stdout.trim() !== '原生命令') throw new Error('打包后的 PowerShell 助手执行失败：' + shell.stderr) await core.execute({ ...command, mode: 'browser', operation: 'open' }) await core.execute({ ...command, mode: 'browser', operation: 'browser', action: { kind: 'navigate', url } }) const browserFrame = await core.execute({ ...command, mode: 'browser', operation: 'view' }) if (!browserFrame.data || (await core.browser.sessions.get(resource).cookies.get({ url })).some(cookie => cookie.name === 'session')) throw new Error('独立浏览器画面或会话隔离失败') let unavailable try { await core.native.call({ operation: 'probe' }) } catch (error) { unavailable = error.message } if (unavailable) return { shell: true, isolatedBrowser: true, screenInput: 'unavailable in CI session', reason: unavailable } const frame = await core.execute({ ...command, operation: 'view' }), display = screen.getPrimaryDisplay() const target = BrowserWindow.getAllWindows().find(w => w.isVisible() && w.webContents.getURL().startsWith(url)), bounds = target.getContentBounds() target.show(); target.focus() const rect = await target.webContents.executeJavaScript('(()=>{const r=document.querySelector("textarea").getBoundingClientRect();return {x:r.x+30,y:r.y+30}})()') const physical = screen.dipToScreenPoint({ x: Math.round(bounds.x + rect.x), y: Math.round(bounds.y + rect.y) }) const primary = screen.dipToScreenRect(null, display.bounds) await core.execute({ ...command, operation: 'input', frame, action: { kind: 'click', x: Math.floor(physical.x * frame.width / primary.width), y: Math.floor(physical.y * frame.height / primary.height) } }) await core.execute({ ...command, operation: 'input', frame, action: { kind: 'text', text: '你好，Windows🙂' } }) for (let i = 0; i < 30; i++) { if (await target.webContents.executeJavaScript('document.querySelector("textarea").value') === '你好，Windows🙂') break await new Promise(done => setTimeout(done, 100)) } if (await target.webContents.executeJavaScript('document.querySelector("textarea").value') !== '你好，Windows🙂') throw new Error('原生鼠标点击或 Unicode 输入失败') await core.execute({ ...command, operation: 'input', frame, action: { kind: 'key', key: 'a', modifiers: ['ctrl'] } }) await core.execute({ ...command, operation: 'input', frame, action: { kind: 'text', text: '组合键已验证' } }) if (await target.webContents.executeJavaScript('document.querySelector("textarea").value') !== '组合键已验证') throw new Error('原生 Ctrl+A 输入失败') screen.emit('display-metrics-changed', {}, display, ['scaleFactor']) let staleRejected = false try { await core.execute({ ...command, operation: 'input', frame, action: { kind: 'key', key: 'Tab' } }) } catch (error) { staleRejected = /刷新画面/.test(error.message) } if (!staleRejected) throw new Error('显示器变化后必须重新截图') await core.revoke() let revoked = false try { await core.execute({ ...command, operation: 'shell', action: { command: 'exit 0' } }) } catch { revoked = true } if (!revoked) throw new Error('撤销后仍允许命令执行') return { shell: true, isolatedBrowser: true, screenshot: true, click: true, unicodeInput: true, ctrlA: true, displayInvalidation: true, revoked: true, scaleFactor: display.scaleFactor } } finally { await core.close() } }, { home, url }) await mkdir(evidence, { recursive: true }); await page.screenshot({ path: join(evidence, 'remote-login.png') }) await app.evaluate(({ BrowserWindow }) => BrowserWindow.getAllWindows()[0].close()) assert.equal(await app.evaluate(({ BrowserWindow }) => BrowserWindow.getAllWindows()[0].isVisible()), false) await app.close(); app = undefined const before = exchanges; app = await launch(); page = await app.firstWindow() await page.waitForURL(url + '/**'); await expect.poll(() => exchanges).toBeGreaterThan(before) await writeFile(join(evidence, 'smoke.json'), JSON.stringify({ platform: 'win32', login: true, encryptedPairing: true, sessionRestored: true, clientOnly: true, native, windows10and11Matrix: 'requires Windows 10/11 acceptance; CI runs Windows Server 2022' }, null, 2)) } finally { await app?.close().catch(() => {}); await new Promise(done => server.close(done)); await rm(home, { recursive: true, force: true }) } })