hololake-system-architecture/product-source/hololake-native-desktop/scripts/human-authorization.test.mjs

import assert from 'node:assert/strict'
import { readFileSync } from 'node:fs'
import test from 'node:test'

const read = (path) => readFileSync(new URL(`../${path}`, import.meta.url), 'utf8')
const contract = JSON.parse(read('contracts/human-authorization.json'))
const webview = JSON.parse(read('contracts/numbered-ipc-registry.json'))
const broker = JSON.parse(read('contracts/direct-local-broker-numbered-registry.json'))

test('human authorization is a durable numbered state machine rather than a UI-only button', () => {
  assert.equal(contract.state, 'NATIVE_FAIL_CLOSED')
  assert.deepEqual(contract.lifecycle, ['PENDING_HUMAN', 'APPROVED', 'DENIED', 'EXPIRED', 'CONSUMED'])
  assert.equal(contract.destructive_purge.enabled, false)
  assert.equal(contract.ticket.single_use, true)
  assert.equal(contract.ticket.requester_session_bound, true)
  assert.equal(contract.invariants.proposal_is_not_authorization, true)
  assert.equal(contract.invariants.approval_is_not_execution, true)
  assert.ok(contract.supported_actions.includes('TEST_COMPILED_HLDP_TOOL'))
})

test('the human client and external execution carrier meet through distinct exact numbered routes', () => {
  const webviewNumbers = new Set(webview.operations.map((item) => item.operation_number))
  const brokerNumbers = new Set(broker.operations.map((item) => item.operation_number))
  assert.ok(contract.routes.human_client.every((number) => webviewNumbers.has(number)))
  assert.ok(contract.routes.external_execution_carrier.every((number) => brokerNumbers.has(number)))
  const decisions = webview.operations.filter((item) => contract.routes.human_client.includes(item.operation_number))
  assert.ok(decisions.every((item) => item.admission === 'VERIFIED_HUMAN_ROUTE'))
})

test('approving an HLDP tool test returns the single-use ticket to the original forge flow', () => {
  const center = read('src/modules/human-authorization-center.tsx')
  const forge = read('src/modules/knowledge-agent/ToolForgePanel.tsx')

  assert.match(center, /request\.action === 'TEST_COMPILED_HLDP_TOOL'/)
  assert.match(center, /numberedInvoke<\{ testReceiptHash: string \}>\('test_hldp_tool'/)
  assert.match(center, /ticketId: decided\.ticketId/)
  assert.match(center, /同意并运行一次性测试/)
  assert.doesNotMatch(forge, /placeholder="在授权中心批准后取得的 ticketId"/)
  assert.match(forge, /系统不会要求你复制机器票据/)
})