bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat(domain): project verified runtime policy to desktop

Browse source
This commit is contained in:
冰朔 2026-08-10 10:25:25 +08:00
commit 683e135f5e
12 changed files with 224 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

23
product-source/guanghu-knowledge-base/server/domain-access.test.ts
View file

@ -208,6 +208,27 @@ test('runtime access requires matching manifest, scoped capability and online re
assert.equal(status.runtimeReady, true);
assert.equal(status.stage, 'runtime-ready');
assert.deepEqual(status.blockers, []);
assert.deepEqual(status.runtimePolicy, {
allowedSessionScopes: ['domain:enter', 'knowledge:read'],
forbiddenDataScopes: ['private:relationship-core'],
manifestDigest: DIGEST,
permissionPolicyRef: 'policy://origin-domain/default',
routeRef: 'domain-route://origin-domain/runtime',
themeOwner: 'fifth-domain',
themePackageRef: 'theme://origin-domain/lake-reflects-stars',
});
assert.equal(Object.isFrozen(status.runtimePolicy), true);
assert.equal(Object.isFrozen(status.runtimePolicy?.allowedSessionScopes), true);
assert.deepEqual(Object.keys(status.runtimePolicy ?? {}).sort(), [
'allowedSessionScopes',
'forbiddenDataScopes',
'manifestDigest',
'permissionPolicyRef',
'routeRef',
'themeOwner',
'themePackageRef',
]);
assert.doesNotMatch(JSON.stringify(status.runtimePolicy), /signature|signer|repository|sourceCommit|publicKey/i);
});
test('the runtime handoff entry resolves its signer only from a loaded snapshot', async () => {
@ -302,6 +323,7 @@ test('mismatched or expired evidence fails closed', () => {
sessionCapability: { capabilityId: 'CAP-001', domainId: 'DOM-FIFTH-0001', expiresAt: NOW, nodeId: 'LOCAL-001', nodeType: NODE_TYPE, scopes: ['domain:enter'] },
}, NOW);
assert.equal(status.runtimeReady, false);
assert.equal(status.runtimePolicy, undefined);
assert.ok(status.blockers.includes('scoped_session_capability_missing'));
assert.ok(status.blockers.includes('matching_connection_receipt_missing'));
});
@ -446,5 +468,6 @@ test('copying verified-looking fields cannot bypass the in-process verifier boun
sessionCapability: verifiedHandoff.sessionCapability,
}, NOW);
assert.equal(status.runtimeReady, false);
assert.equal(status.runtimePolicy, undefined);
assert.ok(status.blockers.includes('verified_domain_manifest_missing'));
});