first commit

2026-09-19 20:55:32 -04:00
1 parent 831814283e
commit 7aacc0b63f
@@ -0,0 +1,187 @@
+#Requires -Version 5.1
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+Import-Module (Join-Path $PSScriptRoot '../src/Wind.Core.psm1') -Force
+$script:passed = 0
+
+function Assert-True { param([bool]$Condition,[string]$Message) if (-not $Condition) { throw $Message } }
+function Assert-Throws { param([scriptblock]$Action) $threw=$false; try { & $Action | Out-Null } catch { $threw=$true }; Assert-True $threw 'Expected an exception.' }
+function Run-Test { param([string]$Name,[scriptblock]$Action) & $Action; $script:passed++; Write-Output "PASS $Name" }
+function New-Harness {
+    $state = [pscustomobject]@{ Values=@{}; Writes=0; FailName=''; FailAfterWrite=$false; ReadFail=$false; Saved=$null; Saves=0; FailSaveAt=0 }
+    $store = @{
+        Read = {
+            param($policy)
+            if ($state.ReadFail) { throw 'Injected read error' }
+            $key=$policy.Path+'|'+$policy.Name
+            if ($state.Values.ContainsKey($key)) {
+                $v=$state.Values[$key]
+                return [pscustomobject]@{ Exists=$true; Kind=$v.Kind; Value=$v.Value }
+            }
+            [pscustomobject]@{ Exists=$false; Kind=$null; Value=$null }
+        }.GetNewClosure()
+        Write = {
+            param($policy,$value)
+            $state.Writes++
+            $fail=$state.FailName -eq $policy.Name
+            if ($fail -and -not $state.FailAfterWrite) { $state.FailName=''; throw 'Injected write error' }
+            $key=$policy.Path+'|'+$policy.Name
+            if ($value.Exists) { $state.Values[$key]=[pscustomobject]@{ Kind=$value.Kind; Value=$value.Value } }
+            else { $state.Values.Remove($key) }
+            if ($fail) { $state.FailName=''; throw 'Injected error after write' }
+        }.GetNewClosure()
+    }
+    $save = {
+        param($journal)
+        $state.Saves++
+        if ($state.Saves -eq $state.FailSaveAt) { throw 'Injected journal error' }
+        $state.Saved=$journal | ConvertTo-Json -Depth 12 | ConvertFrom-Json
+    }.GetNewClosure()
+    [pscustomobject]@{ State=$state; Store=$store; Save=$save; Context=[pscustomobject]@{ Edition='Professional'; Build=26200; Revision=1 } }
+}
+function New-Plan { param($Harness,[string[]]$Ids=@('advertising-id','clipboard-sync')) @(Get-WindPlan -Context $Harness.Context -Store $Harness.Store -Id $Ids) }
+function Apply-Test { param($Harness,$Plan) Invoke-WindTransaction -Plan $Plan -Context $Harness.Context -Store $Harness.Store -Save $Harness.Save -InstallationId 'test-installation' }
+function Restore-Test { param($Harness,$Journal) Restore-WindTransaction -Journal $Journal -Store $Harness.Store -Save $Harness.Save -InstallationId 'test-installation' }
+
+Run-Test 'Home is unsupported even if a matching policy value exists' {
+    $h=New-Harness; $h.Context.Edition='Core'
+    $plan=New-Plan $h
+    Assert-True (@($plan | Where-Object Status -NE 'Unsupported').Count -eq 0) 'Home policies must not be called enforced.'
+    Assert-Throws { Apply-Test $h $plan }
+    Assert-True ($h.State.Writes -eq 0 -and $h.State.Saves -eq 0) 'Unsupported apply touched state.'
+}
+Run-Test 'Unknown build is audit-only' {
+    $h=New-Harness; $h.Context.Build=99999
+    Assert-True ((New-Plan $h)[0].Status -eq 'Unsupported') 'Unknown build accepted.'
+}
+Run-Test 'Edition-aware diagnostic level' {
+    $h=New-Harness
+    Assert-True ((New-Plan $h @('diagnostics'))[0].Desired -eq 1) 'Pro should retain required diagnostics.'
+    $h.Context.Edition='Enterprise'
+    Assert-True ((New-Plan $h @('diagnostics'))[0].Desired -eq 0) 'Enterprise should use supported minimum.'
+}
+Run-Test 'Update choices are explicit and preserve update services' {
+    $h=New-Harness
+    $keep=@(Get-WindPlan -Context $h.Context -Store $h.Store)
+    Assert-True (@($keep | Where-Object Id -Like 'updates-*').Count -eq 0) 'Default modified update policy.'
+    $notify=@(Get-WindPlan -Context $h.Context -Store $h.Store -Updates Notify)
+    Assert-True (($notify | Where-Object Id -EQ 'updates-options').Desired -eq 2) 'Notify value wrong.'
+    $manual=@(Get-WindPlan -Context $h.Context -Store $h.Store -Updates Manual)
+    Assert-True (($manual | Where-Object Id -EQ 'updates-auto').Desired -eq 1) 'Manual value wrong.'
+}
+Run-Test 'Unknown ID fails instead of silently ignoring a typo' {
+    $h=New-Harness; Assert-Throws { New-Plan $h @('not-a-policy') }
+}
+Run-Test 'Non-DWORD pre-existing value is never overwritten' {
+    $h=New-Harness; $p=Get-WindCatalog | Where-Object Id -EQ 'advertising-id'
+    $h.State.Values[$p.Path+'|'+$p.Name]=[pscustomobject]@{ Kind='String'; Value='custom' }
+    Assert-Throws { Apply-Test $h (New-Plan $h) }
+    Assert-True ($h.State.Writes -eq 0) 'Conflicting type was overwritten.'
+}
+Run-Test 'Microphone per-app overrides block misleading default-deny claim' {
+    $h=New-Harness; $p=Get-WindCatalog | Where-Object Id -EQ 'microphone-apps'
+    $h.State.Values[$p.Path+'|LetAppsAccessMicrophone_ForceAllowTheseApps']=[pscustomobject]@{ Kind='MultiString'; Value=@('example.app') }
+    Assert-True ((New-Plan $h @('microphone-apps'))[0].Status -eq 'Conflict') 'Exception was missed.'
+}
+Run-Test 'Unreadable registry is a read error, not missing or configured' {
+    $h=New-Harness; $h.State.ReadFail=$true
+    Assert-True ((New-Plan $h)[0].Status -eq 'ReadError') 'Read error hidden.'
+}
+Run-Test 'Apply and restore preserve absence and arbitrary original DWORD' {
+    $h=New-Harness; $p=Get-WindCatalog | Where-Object Id -EQ 'advertising-id'
+    $h.State.Values[$p.Path+'|'+$p.Name]=[pscustomobject]@{ Kind='DWord'; Value=7 }
+    $j=Apply-Test $h (New-Plan $h)
+    Assert-True ($j.Status -eq 'Applied' -and $h.State.Values.Count -eq 2) 'Apply incomplete.'
+    $r=Restore-Test $h ($j | ConvertTo-Json -Depth 12 | ConvertFrom-Json)
+    Assert-True ($r.Status -eq 'Restored' -and $h.State.Values.Count -eq 1) 'Restore did not preserve absence.'
+    Assert-True ($h.State.Values[$p.Path+'|'+$p.Name].Value -eq 7) 'Original value lost.'
+}
+Run-Test 'Reapplying configured policies makes zero registry writes' {
+    $h=New-Harness; Apply-Test $h (New-Plan $h) | Out-Null; $count=$h.State.Writes
+    $j=Apply-Test $h (New-Plan $h)
+    Assert-True ($h.State.Writes -eq $count -and @($j.Entries).Count -eq 0) 'Reapply mutated configured values.'
+}
+Run-Test 'Write-ahead journal failure prevents all policy writes' {
+    $h=New-Harness; $h.State.FailSaveAt=1
+    Assert-Throws { Apply-Test $h (New-Plan $h) }
+    Assert-True ($h.State.Writes -eq 0) 'Write occurred without durable journal.'
+}
+Run-Test 'Mid-apply failure rolls back successful earlier writes' {
+    $h=New-Harness; $h.State.FailName='AllowCrossDeviceClipboard'
+    Assert-Throws { Apply-Test $h (New-Plan $h) }
+    Assert-True ($h.State.Values.Count -eq 0 -and $h.State.Saved.Status -eq 'Restored') 'Rollback incomplete.'
+}
+Run-Test 'Failure after mutation also rolls back the current setting' {
+    $h=New-Harness; $h.State.FailName='AllowCrossDeviceClipboard'; $h.State.FailAfterWrite=$true
+    Assert-Throws { Apply-Test $h (New-Plan $h) }
+    Assert-True ($h.State.Values.Count -eq 0) 'Current setting was not recovered.'
+}
+Run-Test 'External edits cause restore conflict and are preserved' {
+    $h=New-Harness; $j=Apply-Test $h (New-Plan $h)
+    $p=Get-WindCatalog | Where-Object Id -EQ 'advertising-id'
+    $h.State.Values[$p.Path+'|'+$p.Name].Value=9
+    $r=Restore-Test $h $j
+    Assert-True ($r.Status -eq 'RestoreIncomplete') 'Conflict not reported.'
+    Assert-True ($h.State.Values[$p.Path+'|'+$p.Name].Value -eq 9) 'External edit overwritten.'
+}
+Run-Test 'Crash with Writing journal status remains recoverable' {
+    $h=New-Harness; $j=Apply-Test $h (New-Plan $h); $j.Entries[0].Status='Writing'
+    Restore-Test $h $j | Out-Null
+    Assert-True ($h.State.Values.Count -eq 0) 'Writing status not recovered.'
+}
+Run-Test 'Pending entries never restore changes made by another program' {
+    $h=New-Harness; $j=Apply-Test $h (New-Plan $h); $j.Entries[0].Status='Pending'
+    Restore-Test $h $j | Out-Null
+    Assert-True ($h.State.Values.Count -eq 1) 'Never-started entry was modified.'
+}
+Run-Test 'Repeated restore does not undo subsequent configuration' {
+    $h=New-Harness; $j=Apply-Test $h (New-Plan $h); Restore-Test $h $j | Out-Null
+    Apply-Test $h (New-Plan $h) | Out-Null; $writes=$h.State.Writes
+    Restore-Test $h $j | Out-Null
+    Assert-True ($h.State.Writes -eq $writes -and $h.State.Values.Count -eq 2) 'Repeated restore overwrote later apply.'
+}
+Run-Test 'Journal rejects unknown entries before any write' {
+    $h=New-Harness; $j=Apply-Test $h (New-Plan $h); $j.Entries[1].Id='untrusted-path'; $writes=$h.State.Writes
+    Assert-Throws { Restore-Test $h $j }
+    Assert-True ($writes -eq $h.State.Writes) 'Partial restore before validation.'
+}
+Run-Test 'Journal rejects wrong installation and invalid target' {
+    $h=New-Harness; $j=Apply-Test $h (New-Plan $h)
+    $j.InstallationId='other'; Assert-Throws { Restore-Test $h $j }
+    $j.InstallationId='test-installation'; $j.Entries[0].After.Value=999
+    Assert-Throws { Restore-Test $h $j }
+}
+Run-Test 'State change between planning and apply is not overwritten' {
+    $h=New-Harness; $plan=New-Plan $h; $p=Get-WindCatalog | Where-Object Id -EQ 'advertising-id'
+    $h.State.Values[$p.Path+'|'+$p.Name]=[pscustomobject]@{ Kind='DWord'; Value=88 }
+    Assert-Throws { Apply-Test $h $plan }
+    Assert-True ($h.State.Writes -eq 0 -and $h.State.Values[$p.Path+'|'+$p.Name].Value -eq 88) 'Stale plan wrote registry.'
+}
+Run-Test 'Journal failure after a successful write triggers recovery' {
+    $h=New-Harness; $h.State.FailSaveAt=3
+    Assert-Throws { Apply-Test $h (New-Plan $h) }
+    Assert-True ($h.State.Values.Count -eq 0 -and $h.State.Saved.Status -eq 'Restored') 'Post-write journal failure was not recovered.'
+}
+Run-Test 'Duplicate journal entry is rejected before restore' {
+    $h=New-Harness; $j=Apply-Test $h (New-Plan $h); $j.Entries[1].Id=$j.Entries[0].Id; $writes=$h.State.Writes
+    Assert-Throws { Restore-Test $h $j }
+    Assert-True ($writes -eq $h.State.Writes) 'Duplicate journal triggered writes.'
+}
+Run-Test 'Durable journal creation and replacement round-trip' {
+    $testRoot=[IO.Path]::GetFullPath((Join-Path $PSScriptRoot '../reports'))
+    [IO.Directory]::CreateDirectory($testRoot) | Out-Null
+    $path=Join-Path $testRoot ([guid]::NewGuid().ToString('N')+'.journal.json')
+    try {
+        $h=New-Harness; $j=Apply-Test $h (New-Plan $h)
+        Save-WindJournal -Journal $j -Path $path
+        $loaded=Get-Content -LiteralPath $path -Raw | ConvertFrom-Json
+        Assert-WindJournal $loaded 'test-installation'
+        $j.Status='AppliedAgain'; Save-WindJournal -Journal $j -Path $path
+        Assert-True ((Get-Content -LiteralPath $path -Raw | ConvertFrom-Json).Status -eq 'AppliedAgain') 'Atomic replacement failed.'
+    } finally {
+        # Exact single file generated in the workspace; never a recursive cleanup.
+        if ([IO.File]::Exists($path)) { [IO.File]::Delete($path) }
+    }
+}
+
+Write-Output "$script:passed tests passed. No Windows policy settings were modified."