Implement managed browser security, individual agents and observability

tests/request-gate-timeout.test.mjs

@@ -0,0 +1,30 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import vm from 'node:vm';
+import {readFileSync} from 'node:fs';
+import {createRequire} from 'node:module';
+import {defaultPolicy} from '../packages/core/policy.mjs';
+const require=createRequire(import.meta.url),source=readFileSync(new URL('../apps/browser/main.cjs',import.meta.url),'utf8');
+const hook=source.slice(source.indexOf("  browserSession.webRequest.onBeforeRequest("),source.indexOf("  browserSession.webRequest.onBeforeSendHeaders("));
+function fixture(){
+ let listener,completeDNS;const timers=[],events=[],callbacks=[],policy=defaultPolicy();
+ const context=vm.createContext({require:specifier=>require('../apps/browser/'+specifier.slice(2)),URL,Date,ready:true,policy,
+  browserSession:{webRequest:{onBeforeRequest(_filter,fn){listener=fn;}}},tabs:{all:()=>[]},currentTabContext:()=>true,
+  developerAssetRequestAllowed:()=>false,diagnosticSpan:(_name,_attrs,fn)=>fn(),core:{destinationAllowed:()=>true,inspect:()=>({decision:'allow'})},
+  audit:async(...args)=>events.push(args),recentRequests:new Map(),dnsGate:()=>new Promise(resolve=>completeDNS=resolve),
+  setTimeout:fn=>{timers.push(fn);return timers.length;},clearTimeout(){},Buffer,
+ });
+ vm.runInContext(source.slice(source.indexOf('function agentRequestOwnerAllowed(source)'),source.indexOf('function actorDestinationAllowed')),context);
+ vm.runInContext(hook,context);listener({id:1,url:'https://example.test/',webContentsId:0,resourceType:'mainFrame',method:'GET'},r=>callbacks.push(r));
+ return {timers,events,callbacks,complete:()=>completeDNS()};
+}
+const settle=async()=>{for(let n=0;n<8;n++)await Promise.resolve();};
+test('native request deadline records a fixed reason and never authorizes a late result',async()=>{
+ const f=fixture();await settle();f.timers[0]();await settle();assert.equal(f.callbacks.length,1);assert.equal(f.callbacks[0].cancel,true);
+ assert.deepEqual(f.events,[['navigation.block','request-inspection-timeout','example.test']]);f.complete();await settle();f.timers[0]();await settle();
+ assert.equal(f.callbacks.length,1);assert.equal(f.events.length,1);
+});
+test('a completed native request cannot subsequently produce a timeout event',async()=>{
+ const f=fixture();await settle();f.complete();await settle();assert.equal(f.callbacks.length,1);assert.equal(f.callbacks[0].cancel,false);
+ f.timers[0]();await settle();assert.equal(f.callbacks.length,1);assert.equal(f.events.length,0);
+});