});

});

it("rejects loose timeoutMs values before granting permissions", async () => {

const { response, profileCtx } = await callGrant({

origin: "https://meet.google.com",

permissions: ["audioCapture"],

timeoutMs: "1e3",

});

expect(response.statusCode).toBe(400);

expect(response.body).toStrictEqual({ error: "timeoutMs must be a positive integer." });

expect(profileCtx.ensureBrowserAvailable).not.toHaveBeenCalled();

expect(cdpMocks.getChromeWebSocketUrl).not.toHaveBeenCalled();

expect(cdpMocks.send).not.toHaveBeenCalled();

});

it("keeps the minimum permission timeout for small valid values", async () => {

const { response } = await callGrant({

origin: "https://meet.google.com",

permissions: ["audioCapture"],

timeoutMs: "1",

});

expect(response.statusCode).toBe(200);

expect(cdpMocks.getChromeWebSocketUrl).toHaveBeenCalledWith("http://127.0.0.1:18800", 1000, {

allowPrivateNetwork: false,

});

});

it("keeps required permissions when an optional permission is unsupported", async () => {

cdpMocks.send.mockImplementation(async (_method: string, params?: Record<string, unknown>) => {

const permissions = Array.isArray(params?.permissions) ? params.permissions : [];

import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";

import { formatErrorMessage } from "../../infra/errors.js";

import type { SsrFPolicy } from "../../infra/net/ssrf.js";

import { withCdpSocket } from "../cdp.helpers.js";

import { getChromeWebSocketUrl } from "../chrome.js";

import { getPwAiModule } from "../pw-ai-module.js";

import type { BrowserRouteContext } from "../server-context.js";

import type { ProfileContext } from "../server-context.js";

import { readRoutePositiveInteger } from "./route-numeric.js";

import type { BrowserRouteRegistrar } from "./types.js";

import {

asyncBrowserRoute,

getProfileContext,

jsonError,

toNumber,

toStringOrEmpty,

} from "./utils.js";

import { asyncBrowserRoute, getProfileContext, jsonError, toStringOrEmpty } from "./utils.js";

const permissionRouteDeps = {

getPwAiModule,

}

const optionalPermissions = readPermissions(body.optionalPermissions ?? []) ?? [];

const targetId = toStringOrEmpty(body.targetId) || undefined;

const timeoutMs = Math.max(1_000, toNumber(body.timeoutMs) ?? 5_000);

let timeoutMs: number;

try {

timeoutMs = Math.max(1_000, readRoutePositiveInteger(body.timeoutMs, "timeoutMs") ?? 5_000);

} catch (err) {

return jsonError(res, 400, formatErrorMessage(err));

}

try {

await profileCtx.ensureBrowserAvailable();