Initial commit of 001code-html Scratch frontend project.

Includes scratch-gui, scratch-vm, scratch-blocks, scratch-render, scratch-l10n, and deployment config.

Co-authored-by: Cursor <cursoragent@cursor.com>

scratch-vm/test/integration/tw_privacy.js

@@ -0,0 +1,116 @@
+const {test} = require('tap');
+const Runtime = require('../../src/engine/runtime');
+const VM = require('../../src/virtual-machine');
+
+const mockRenderer = () => ({
+    setLayerGroupOrdering: () => {
+        // not relevant to this test
+    },
+
+    privateSkinAccess: true,
+    setPrivateSkinAccess (enabled) {
+        this.privateSkinAccess = enabled;
+    }
+});
+
+test('baseline: no external communication methods', t => {
+    const rt = new Runtime();
+    rt.attachRenderer(mockRenderer());
+    t.equal(rt.renderer.privateSkinAccess, true);
+    t.end();
+});
+
+test('throws errors for unknown method', t => {
+    t.plan(1);
+    const rt = new Runtime();
+    try {
+        rt.setExternalCommunicationMethod('something fake', true);
+    } catch (e) {
+        t.equal(e.message, 'Unknown method: something fake');
+    }
+    t.end();
+});
+
+test('communication method enabled after attaching renderer', t => {
+    const rt = new Runtime();
+    rt.attachRenderer(mockRenderer());
+    rt.setExternalCommunicationMethod('cloudVariables', true);
+    t.equal(rt.renderer.privateSkinAccess, false);
+    t.end();
+});
+
+test('communication method enabled before attaching renderer', t => {
+    const rt = new Runtime();
+    rt.setExternalCommunicationMethod('cloudVariables', true);
+    rt.attachRenderer(mockRenderer());
+    t.equal(rt.renderer.privateSkinAccess, false);
+    t.end();
+});
+
+test('disable enforcement', t => {
+    const rt = new Runtime();
+    rt.attachRenderer(mockRenderer());
+    rt.setEnforcePrivacy(false);
+    rt.setExternalCommunicationMethod('cloudVariables', true);
+    t.equal(rt.renderer.privateSkinAccess, true);
+    t.end();
+});
+
+test('multiple features toggled', t => {
+    const rt = new Runtime();
+    rt.attachRenderer(mockRenderer());
+    rt.setExternalCommunicationMethod('cloudVariables', true);
+    t.equal(rt.renderer.privateSkinAccess, false);
+    rt.setExternalCommunicationMethod('customExtensions', true);
+    t.equal(rt.renderer.privateSkinAccess, false);
+    rt.setExternalCommunicationMethod('cloudVariables', false);
+    t.equal(rt.renderer.privateSkinAccess, false);
+    rt.setExternalCommunicationMethod('customExtensions', false);
+    t.equal(rt.renderer.privateSkinAccess, true);
+    t.end();
+});
+
+test('cloud variables', t => {
+    const rt = new Runtime();
+    rt.attachRenderer(mockRenderer());
+
+    rt.addCloudVariable();
+    t.equal(rt.renderer.privateSkinAccess, false);
+
+    rt.addCloudVariable();
+    t.equal(rt.renderer.privateSkinAccess, false);
+
+    rt.removeCloudVariable();
+    t.equal(rt.renderer.privateSkinAccess, false);
+
+    rt.removeCloudVariable();
+    t.equal(rt.renderer.privateSkinAccess, true);
+
+    t.end();
+});
+
+test('custom extensions', async t => {
+    const vm = new VM();
+    vm.attachRenderer(mockRenderer());
+
+    vm.extensionManager.securityManager.getSandboxMode = () => 'unsandboxed';
+    global.document = {
+        createElement: () => {
+            const element = {};
+            setTimeout(() => {
+                global.Scratch.extensions.register({
+                    getInfo: () => ({})
+                });
+            });
+            return element;
+        },
+        body: {
+            appendChild: () => {}
+        }
+    };
+
+    t.equal(vm.renderer.privateSkinAccess, true);
+    await vm.extensionManager.loadExtensionURL('data:application/javascript;,');
+    t.equal(vm.renderer.privateSkinAccess, false);
+    t.end();
+});