fluxer/fluxer_desktop/src/main/ChromiumRuntime.test.mjs

// SPDX-License-Identifier: AGPL-3.0-or-later

import assert from 'node:assert/strict';
import {readFileSync} from 'node:fs';
import {createRequire} from 'node:module';
import {describe, test} from 'node:test';
import {fileURLToPath} from 'node:url';
import vm from 'node:vm';

const require = createRequire(import.meta.url);
const esbuild = require('esbuild');

const sourcePath = fileURLToPath(new URL('./ChromiumRuntime.ts', import.meta.url));
const source = readFileSync(sourcePath, 'utf8');
const transformedSource = esbuild.transformSync(source, {
	loader: 'ts',
	format: 'cjs',
	platform: 'node',
	target: 'node20',
}).code;

function loadChromiumRuntime(platform = 'win32') {
	const appendedSwitches = [];
	const app = {
		getVersion: () => '0.0.0-test',
		getGPUInfo: async () => ({}),
		commandLine: {
			appendSwitch(name, value) {
				appendedSwitches.push({name, value});
			},
			getSwitchValue: () => '',
		},
	};
	const log = {debug() {}, info() {}, warn() {}};

	function requireStub(specifier) {
		if (specifier === 'electron') return {app};
		if (specifier === 'electron-log') return log;
		return require(specifier);
	}

	const module = {exports: {}};
	const context = vm.createContext({
		require: requireStub,
		module,
		exports: module.exports,
		process: {
			...process,
			platform,
			execPath: '/tmp/fluxer-test',
			resourcesPath: '/tmp/fluxer-resources',
			versions: {...process.versions},
		},
		console,
	});
	vm.runInContext(transformedSource, context, {filename: sourcePath});
	return {appendedSwitches, module: module.exports};
}

function collectChromiumFeatureNames(platform) {
	const {module} = loadChromiumRuntime(platform);
	const features = new Set(module.BASE_DISABLED_CHROMIUM_FEATURES);
	for (const [name, value] of Object.entries(module)) {
		if (typeof value !== 'function') continue;
		if (!name.startsWith('add') || !name.endsWith('Features')) continue;
		value(features);
	}
	return [...features];
}

describe('ChromiumRuntime Windows capture policy', () => {
	test('leaves the choice of Windows graphics capture to Chromium', () => {
		const {module} = loadChromiumRuntime('win32');
		const features = new Set(module.BASE_DISABLED_CHROMIUM_FEATURES);

		for (const [name, value] of Object.entries(module)) {
			if (typeof value === 'function' && name.startsWith('addWindows') && name.endsWith('Features')) {
				value(features);
			}
		}

		assert.deepEqual(
			[...features].filter((feature) => feature.includes('Wgc')),
			[],
		);
	});
});

describe('ChromiumRuntime macOS capture policy', () => {
	test('leaves the choice of macOS screen capture device to Chromium', () => {
		assert.deepEqual(
			collectChromiumFeatureNames('darwin').filter(
				(feature) => feature.includes('ScreenCaptureKit') || feature.includes('SCContentSharingPicker'),
			),
			[],
		);
	});

	test('exposes no macOS release-gated screen capture override', () => {
		const {module} = loadChromiumRuntime('darwin');

		assert.deepEqual(
			Object.keys(module).filter((name) => name.includes('ScreenCapture')),
			[],
		);
	});
});

describe('ChromiumRuntime Linux capture policy', () => {
	test('leaves the choice of PipeWire screen capture to Chromium', () => {
		assert.deepEqual(
			collectChromiumFeatureNames('linux').filter((feature) => feature.includes('PipeWire')),
			[],
		);
	});
});

describe('ChromiumRuntime configured switch allowlist', () => {
	test('rejects settings-supplied switches that would disable or shrink the HTTP cache', () => {
		const {appendedSwitches, module} = loadChromiumRuntime('win32');

		module.appendConfiguredChromiumSwitches([
			'disable-http-cache',
			'disk-cache-size',
			'disk-cache-dir',
			'disable-gpu-shader-disk-cache',
			'disable_metal',
		]);

		assert.deepEqual(appendedSwitches, [{name: 'disable_metal', value: undefined}]);
	});
});