Publish Vulpes Preview 15 sources for desktop, Android and Tundra

Share Gaia assets and adapters, keep private profiles and development documents local, and update both public READMEs.

android/tools/check-bridge.py

@@ -0,0 +1,110 @@
+"""Exercise alarms and Android permission boundaries in the packaged bridge."""
+
+import functools
+import json
+import os
+import threading
+from http.server import ThreadingHTTPServer, SimpleHTTPRequestHandler
+from pathlib import Path
+from playwright.sync_api import sync_playwright
+
+# This harness mocks extension storage/native messaging, not the Gaia service code.
+root = Path(__file__).resolve().parents[2]
+
+
+class Handler(SimpleHTTPRequestHandler):
+    def log_message(self, *args):
+        pass
+
+    def do_GET(self):
+        if self.path == "/test.html":
+            body = b'<!doctype html><html><head><script type="module" src="/background.js"></script></head><body>Bridge test</body></html>'
+            self.send_response(200)
+            self.send_header("Content-Type", "text/html")
+            self.end_headers()
+            self.wfile.write(body)
+        else:
+            super().do_GET()
+
+
+server = ThreadingHTTPServer(
+    ("127.0.0.1", 0),
+    functools.partial(Handler, directory=str(root / "android/app/src/main/assets/bridge")),
+)
+threading.Thread(target=server.serve_forever, daemon=True).start()
+try:
+    with sync_playwright() as p:
+        b = p.chromium.launch(executable_path=os.environ.get("PLAYWRIGHT_CHROMIUM_EXECUTABLE"))
+        page = b.new_page()
+        messages = []
+        errors = []
+        page.on("console", lambda msg: messages.append(msg.text))
+        page.on("pageerror", lambda e: errors.append(str(e)))
+        page.add_init_script(
+            """
+    const values={};window.nativeCalls=[];window.events=[];
+    window.browser={storage:{local:{get:async key=>({[key]:structuredClone(values[key])}),set:async data=>Object.assign(values,structuredClone(data))}},runtime:{
+      connectNative:()=>({onMessage:{addListener(fn){window.nativeEvent=fn;}},onDisconnect:{addListener(){}},postMessage(){}}),
+      sendNativeMessage:async(app,message)=>{nativeCalls.push(message);return message.type==='android.snapshot'?{}:null;},onConnect:{addListener(fn){window.connectPort=fn;}}
+    }};
+    window.makePort=url=>{
+      let receive,seq=0;const waiting=new Map();
+      connectPort({name:'gaia',sender:{url},onMessage:{addListener(fn){receive=fn;}},onDisconnect:{addListener(){}},postMessage(msg){if(msg.event)events.push({url,...msg.event});if(waiting.has(msg.id)){waiting.get(msg.id)(msg.reply);waiting.delete(msg.id);}}});
+      return (method,params)=>new Promise(resolve=>{const id=++seq;waiting.set(id,resolve);receive({id,request:{version:1,id,method,params}});});
+    };
+  """
+        )
+        page.goto(f"http://127.0.0.1:{server.server_port}/test.html")
+        page.wait_for_function('typeof connectPort === "function"')
+        results = page.evaluate(
+            """async()=>{
+    const clock=makePort('http://clock.localhost:18765/onring.html');
+    const before=await clock('alarms.request',{operation:'getAll'});
+    if(before.error)throw Error(JSON.stringify(before));
+    const add=await clock('alarms.request',{operation:'add',date:Date.now()+60000,respectTimezone:'honorTimezone',local:[2026,8,23,9,0,0,0],data:{label:'test'}});
+    if(add.error)throw Error(JSON.stringify(add));
+    const list=await clock('alarms.request',{operation:'getAll'});
+    await clock('alarms.request',{operation:'remove',id:add.result});
+    const empty=await clock('alarms.request',{operation:'getAll'});
+    const gallery=makePort('http://gallery.localhost:18765/index.html');
+    const denied=await gallery('android.settings',{panel:'wifi'});
+    const cameraDenied=await gallery('android.capture',{});
+    const settingsDenied=await gallery('settings.set',{values:{'screen.brightness':.4}});
+    const settings=makePort('http://settings.localhost:18765/index.html');
+    nativeCalls.length=0;
+    const malformed=await settings('settings.set',{values:{'screen.brightness':.5,'':true}});
+    const noSideEffect=malformed.error?.code==='INVALID_KEY' && nativeCalls.length===0;
+    const notificationDenied=await gallery('android.notification',{operation:'show',owner:'settings',title:'Spoof'});
+    const smsDenied=await clock('android.sms',{number:'123',body:'test'});
+    const foreign=makePort('https://example.com/');
+    const foreignDenied=await foreign('android.snapshot',{});
+    const system=makePort('http://system.localhost:18765/index.html');
+    events.length=0;
+    await nativeEvent({type:'notification-click',data:{owner:'settings',id:1}});
+    const queued=!events.some(e=>e.type==='launch');
+    const forbiddenReady=await gallery('android.systemReady',{});
+    await system('android.systemReady',{});
+    const replayed=events.some(e=>e.type==='launch' && e.data.manifestURL==='http://settings.localhost:18765/manifest.webapp');
+    return {coldNotificationWaitsForGaia:queued && replayed,systemReadinessPermission:forbiddenReady.error?.code==='PERMISSION_DENIED',invalidSettingNoNativeSideEffect:noSideEffect,notificationPermissions:notificationDenied.error?.code==='PERMISSION_DENIED',smsPermissions:smsDenied.error?.code==='PERMISSION_DENIED',started:true,stored:list.result.length===1,removed:empty.result.length===0,
+      hardwarePermissions:denied.error?.code==='PERMISSION_DENIED' && cameraDenied.error?.code==='PERMISSION_DENIED',
+      settingsPermissions:settingsDenied.error?.code==='PERMISSION_DENIED',
+      externalOriginDenied:foreignDenied.error?.code==='PERMISSION_DENIED'};
+  }"""
+        )
+        assert all(results.values()), results
+        assert not errors, errors
+        (root / "logs/repository-preparation").mkdir(parents=True, exist_ok=True)
+        (root / "logs/repository-preparation/android-bridge-test.json").write_text(
+            json.dumps(
+                {
+                    "results": results,
+                    "scope": "Packaged extension in a browser; native messaging and extension storage mocked. Not an Android device test.",
+                },
+                indent=2,
+            )
+        )
+        print(results)
+        b.close()
+finally:
+    server.shutdown()
+    server.server_close()