P7

test/computer-use.test.js

@@ -1,6 +1,11 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { ComputerUseSession } from '../computer-use/session.js';
+import { ComputerActuator } from '../computer-use/actuator.js';
+import { ComputerAudit } from '../computer-use/audit.js';
+import { mkdtemp, readFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
 
 test('computer use requires an explicit grant and enforces its step budget', () => {
   let now = 1000;
@@ -24,3 +29,18 @@ test('computer use expires its wall clock grant', () => {
   assert.throws(() => session.beginStep(), /expired/);
   assert.equal(session.status().backend, 'none');
 });
+
+test('computer use semantic actuation previews, budgets, and audits actions', async () => {
+  const dir = await mkdtemp(path.join(tmpdir(), 'jarvis-cu-audit-'));
+  const audit = new ComputerAudit({ dir }); const session = new ComputerUseSession({ stepsMax: 1, audit }); const sent = [];
+  session.grant();
+  const actuator = new ComputerActuator({ session, input: { send: (event) => sent.push(event) }, find: async ({ ref }) => [{ ref, name: 'Save', role: 'push button', rect: [1, 2, 3, 4] }], atspiAction: async () => ({ semantic: true }), audit, sleep: async () => {} });
+  const result = await actuator.click({ ref: 'r1' }); assert.equal(result.ok, true); assert.equal(session.status().steps_used, 1);
+  assert.deepEqual(sent, []); const files = await (await import('node:fs/promises')).readdir(dir); assert.equal(files.length, 1); assert.match(await readFile(path.join(dir, files[0]), 'utf8'), /target_hash/);
+});
+
+test('computer use refuses password targets and unconfirmed dangerous keys', async () => {
+  const session = new ComputerUseSession(); session.grant(); const actuator = new ComputerActuator({ session, input: { send() {} }, find: async () => [{ name: 'Password', role: 'password text' }], sleep: async () => {} });
+  await assert.rejects(() => actuator.type({ ref: 'password', text: 'secret' }), /password/);
+  await assert.rejects(() => actuator.key({ combo: 'alt+f4' }), /confirmation/);
+});