// Copyright 2025 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "chrome/browser/actor/execution_engine.h"

#include <optional>
#include <string_view>
#include <tuple>

#include "base/command_line.h"
#include "base/files/file_util.h"
#include "base/files/scoped_temp_dir.h"
#include "base/run_loop.h"
#include "base/task/single_thread_task_runner.h"
#include "base/test/bind.h"
#include "base/test/metrics/histogram_tester.h"
#include "base/test/run_until.h"
#include "base/test/scoped_feature_list.h"
#include "base/test/test_file_util.h"
#include "base/test/test_future.h"
#include "chrome/browser/actor/actor_keyed_service.h"
#include "chrome/browser/actor/actor_task.h"
#include "chrome/browser/actor/actor_test_util.h"
#include "chrome/browser/actor/site_policy.h"
#include "chrome/browser/actor/tools/click_tool_request.h"
#include "chrome/browser/actor/tools/fake_tool_request.h"
#include "chrome/browser/actor/tools/tab_management_tool_request.h"
#include "chrome/browser/actor/tools/tool_callbacks.h"
#include "chrome/browser/actor/tools/wait_tool.h"
#include "chrome/browser/actor/ui/event_dispatcher.h"
#include "chrome/browser/chrome_content_browser_client.h"
#include "chrome/browser/download/download_test_file_activity_observer.h"
#include "chrome/browser/glic/public/glic_keyed_service.h"
#include "chrome/browser/glic/test_support/non_interactive_glic_test.h"
#include "chrome/browser/lookalikes/lookalike_test_helper.h"
#include "chrome/browser/optimization_guide/browser_test_util.h"
#include "chrome/browser/optimization_guide/mock_optimization_guide_keyed_service.h"
#include "chrome/browser/optimization_guide/optimization_guide_keyed_service_factory.h"
#include "chrome/browser/profiles/profile.h"
#include "chrome/browser/ui/actions/chrome_action_id.h"
#include "chrome/browser/ui/browser_window/public/browser_window_interface.h"
#include "chrome/browser/ui/navigator/browser_navigator.h"
#include "chrome/browser/ui/navigator/browser_navigator_params.h"
#include "chrome/browser/ui/omnibox/omnibox_next_features.h"
#include "chrome/browser/ui/tabs/tab_strip_model.h"
#include "chrome/browser/ui/ui_features.h"
#include "chrome/browser/ui/views/file_system_access/file_system_access_test_utils.h"
#include "chrome/browser/ui/views/frame/browser_view.h"
#include "chrome/browser/ui/views/frame/toolbar_button_provider.h"
#include "chrome/browser/ui/views/location_bar/icon_label_bubble_view.h"
#include "chrome/browser/ui/views/page_action/page_action_view_interface.h"
#include "chrome/browser/ui/views/page_action/test_support/page_action_test_accessor.h"
#include "chrome/common/actor.mojom.h"
#include "chrome/common/actor/action_result.h"
#include "chrome/common/chrome_features.h"
#include "chrome/common/pref_names.h"
#include "chrome/test/base/chrome_test_utils.h"
#include "chrome/test/base/in_process_browser_test.h"
#include "chrome/test/base/ui_test_utils.h"
#include "components/actor/core/actor_features.h"
#include "components/actor/core/actor_switches.h"
#include "components/actor/public/mojom/actor_types.mojom.h"
#include "components/javascript_dialogs/app_modal_dialog_controller.h"
#include "components/javascript_dialogs/app_modal_dialog_queue.h"
#include "components/keyed_service/content/browser_context_dependency_manager.h"
#include "components/optimization_guide/content/browser/page_content_proto_provider.h"
#include "components/optimization_guide/core/filters/optimization_hints_component_update_listener.h"
#include "components/optimization_guide/proto/features/actions_data.pb.h"
#include "components/safe_browsing/buildflags.h"
#include "components/safe_browsing/core/common/safe_browsing_prefs.h"
#include "components/viz/common/frame_sinks/copy_output_result.h"
#include "content/public/browser/browser_thread.h"
#include "content/public/browser/render_frame_host.h"
#include "content/public/browser/render_widget_host_view.h"
#include "content/public/browser/web_contents.h"
#include "content/public/common/content_client.h"
#include "content/public/test/back_forward_cache_util.h"
#include "content/public/test/browser_test.h"
#include "content/public/test/browser_test_utils.h"
#include "content/public/test/download_test_observer.h"
#include "content/public/test/hit_test_region_observer.h"
#include "content/public/test/navigation_handle_observer.h"
#include "content/public/test/prerender_test_util.h"
#include "content/public/test/test_frame_navigation_observer.h"
#include "net/dns/mock_host_resolver.h"
#include "net/test/embedded_test_server/embedded_test_server.h"
#include "testing/gmock/include/gmock/gmock.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "third_party/blink/public/common/input/web_mouse_event.h"
#include "third_party/skia/include/core/SkBitmap.h"
#include "third_party/skia/include/core/SkColor.h"
#include "ui/gfx/geometry/rect.h"
#include "ui/gfx/geometry/size.h"
#include "ui/shell_dialogs/select_file_dialog.h"
#include "url/gurl.h"

#if BUILDFLAG(SAFE_BROWSING_AVAILABLE)
#include "chrome/browser/safe_browsing/test_safe_browsing_service.h"
#include "components/safe_browsing/core/browser/db/fake_database_manager.h"
#include "components/safe_browsing/core/common/features.h"
#endif

using ::base::test::TestFuture;
using ::optimization_guide::proto::ClickAction;
using ::testing::_;
using ::testing::Conditional;
using ::testing::Not;

namespace actor {

namespace {
class FakeChromeContentBrowserClient : public ChromeContentBrowserClient {
 public:
  bool HandleExternalProtocol(
      const GURL& url,
      content::WebContents::Getter web_contents_getter,
      content::FrameTreeNodeId frame_tree_node_id,
      content::NavigationUIData* navigation_data,
      bool is_primary_main_frame,
      bool is_in_fenced_frame_tree,
      network::mojom::WebSandboxFlags sandbox_flags,
      ::ui::PageTransition page_transition,
      bool has_user_gesture,
      const std::optional<url::Origin>& initiating_origin,
      content::RenderFrameHost* initiator_document,
      const net::IsolationInfo& isolation_info,
      mojo::PendingRemote<network::mojom::URLLoaderFactory>* out_factory)
      override {
    external_protocol_result_ =
        ChromeContentBrowserClient::HandleExternalProtocol(
            url, web_contents_getter, frame_tree_node_id, navigation_data,
            is_primary_main_frame, is_in_fenced_frame_tree, sandbox_flags,
            page_transition, has_user_gesture, initiating_origin,
            initiator_document, isolation_info, out_factory);

    return external_protocol_result_.value();
  }

  std::optional<bool> external_protocol_result() {
    return external_protocol_result_;
  }

 private:
  std::optional<bool> external_protocol_result_;
};

class ExecutionEngineBrowserTest : public InProcessBrowserTest {
 public:
  ExecutionEngineBrowserTest()
      : prerender_helper_(
            base::BindRepeating(&ExecutionEngineBrowserTest::web_contents,
                                base::Unretained(this))) {
    scoped_feature_list_.InitWithFeaturesAndParameters(
        /*enabled_features=*/{{features::kGlic, {}},
                              {kGlicExternalProtocolActionResultCode, {}},
                              {kGlicCrossOriginNavigationGating,
                               {{"confirm_navigation_to_new_origins",
                                 "false"}}}},
        /*disabled_features=*/{features::kGlicWarming});
  }
  ExecutionEngineBrowserTest(const ExecutionEngineBrowserTest&) = delete;
  ExecutionEngineBrowserTest& operator=(const ExecutionEngineBrowserTest&) =
      delete;

  ~ExecutionEngineBrowserTest() override = default;

  void SetUpCommandLine(base::CommandLine* command_line) override {
    InProcessBrowserTest::SetUpCommandLine(command_line);
    SetUpBlocklist(command_line, "blocked.example.com");
  }

  void SetUpOnMainThread() override {
    InProcessBrowserTest::SetUpOnMainThread();
    host_resolver()->AddRule("*", "127.0.0.1");
    embedded_test_server()->ServeFilesFromSourceDirectory(
        "components/test/data");
    embedded_https_test_server().ServeFilesFromSourceDirectory(
        "components/test/data");
    ASSERT_TRUE(embedded_test_server()->Start());
    if (UseCertTestNames()) {
      embedded_https_test_server().SetSSLConfig(
          net::EmbeddedTestServer::CERT_TEST_NAMES);
    }
    ASSERT_TRUE(embedded_https_test_server().Start());

    task_id_ = actor_keyed_service()->CreateTask(actor::TestTaskSourceInfo(),
                                                 NoEnterprisePolicyChecker());

    // Optimization guide uses this histogram to signal initialization in tests.
    optimization_guide::RetryForHistogramUntilCountReached(
        &histogram_tester_for_init_,
        "OptimizationGuide.HintsManager.HintCacheInitialized", 1);

    // Simulate the component loading, as the implementation checks it, but the
    // actual list is set via the command line.
    ASSERT_TRUE(temp_dir_.CreateUniqueTempDir());
    optimization_guide::OptimizationHintsComponentUpdateListener::GetInstance()
        ->MaybeUpdateHintsComponent(
            {base::Version("123"),
             temp_dir_.GetPath().Append(FILE_PATH_LITERAL("dont_care"))});

    content::SetBrowserClientForTesting(&mock_browser_client_);
  }

  virtual bool UseCertTestNames() const { return false; }

 protected:
  tabs::TabInterface* active_tab() {
    return browser()->tab_strip_model()->GetActiveTab();
  }

  content::WebContents* web_contents() { return active_tab()->GetContents(); }

  content::RenderFrameHost* main_frame() {
    return web_contents()->GetPrimaryMainFrame();
  }

  ActorKeyedService* actor_keyed_service() {
    return ActorKeyedService::Get(browser()->GetProfile());
  }

  ActorTask& actor_task() { return *actor_keyed_service()->GetTask(task_id_); }

  void ClickTarget(
      std::string_view query_selector,
      mojom::ActionResultCode expected_code = mojom::ActionResultCode::kOk,
      content::RenderFrameHost* execution_target = nullptr) {
    content::RenderFrameHost& rfh =
        execution_target ? *execution_target : *main_frame();
    std::optional<int> dom_node_id = content::GetDOMNodeId(rfh, query_selector);
    ASSERT_TRUE(dom_node_id);
    std::unique_ptr<ToolRequest> click =
        MakeClickRequest(rfh, dom_node_id.value());
    ActResultFuture result;
    actor_task().Act(ToRequestList(click), result.GetCallback());
    if (expected_code == mojom::ActionResultCode::kOk) {
      ExpectOkResult(result);
    } else {
      ExpectErrorResult(result, expected_code);
    }
  }

  content::test::PrerenderTestHelper& prerender_helper() {
    return prerender_helper_;
  }

  FakeChromeContentBrowserClient& browser_client() {
    return mock_browser_client_;
  }

 private:
  TaskId task_id_;
  content::test::PrerenderTestHelper prerender_helper_;
  base::HistogramTester histogram_tester_for_init_;
  base::test::ScopedFeatureList scoped_feature_list_;
  FakeChromeContentBrowserClient mock_browser_client_;
  base::ScopedTempDir temp_dir_;
};

// The coordinator does not yet handle multi-tab cases. For now,
// while acting on a tab, we override attempts by the page to create new
// tabs, and instead navigate the existing tab.
IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest, ForceSameTabNavigation) {
  const GURL url =
      embedded_test_server()->GetURL("/actor/target_blank_links.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), url));

  // Check specifically that it's the existing frame that navigates.
  content::TestFrameNavigationObserver frame_nav_observer(main_frame());
  ClickTarget("#anchorTarget");
  frame_nav_observer.Wait();
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest,
                       ForceSameTabNavigationByScript) {
  const GURL url =
      embedded_test_server()->GetURL("/actor/target_blank_links.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), url));

  // Check specifically that it's the existing frame that navigates.
  content::TestFrameNavigationObserver frame_nav_observer(main_frame());
  ClickTarget("#scriptOpen");
  frame_nav_observer.Wait();
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest, TwoClicks) {
  const GURL url = embedded_test_server()->GetURL("/actor/two_clicks.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), url));

  // Check initial background color is red
  EXPECT_EQ("red", EvalJs(web_contents(), "document.body.bgColor"));

  // Create a single BrowserAction with two click actions
  std::optional<int> button1_id =
      content::GetDOMNodeId(*main_frame(), "#button1");
  std::optional<int> button2_id =
      content::GetDOMNodeId(*main_frame(), "#button2");
  ASSERT_TRUE(button1_id);
  ASSERT_TRUE(button2_id);

  std::unique_ptr<ToolRequest> click1 =
      MakeClickRequest(*main_frame(), button1_id.value());
  std::unique_ptr<ToolRequest> click2 =
      MakeClickRequest(*main_frame(), button2_id.value());

  // Execute the action
  ActResultFuture result;
  actor_task().Act(ToRequestList(click1, click2), result.GetCallback());
  ExpectOkResult(result);

  // Check background color changed to green
  EXPECT_EQ("green", EvalJs(web_contents(), "document.body.bgColor"));
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest, TwoClicksInBackgroundTab) {
  const GURL url = embedded_test_server()->GetURL("/actor/two_clicks.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), url));

  // Check initial background color is red
  EXPECT_EQ("red", EvalJs(web_contents(), "document.body.bgColor"));

  // Store a pointer to the first tab.
  content::WebContents* first_tab_contents = web_contents();
  auto* tab = browser()->GetActiveTabInterface();

  // Create a second tab, which will be in the foreground.
  ui_test_utils::NavigateToURLWithDisposition(
      browser(), GURL("about:blank"), WindowOpenDisposition::NEW_FOREGROUND_TAB,
      ui_test_utils::BROWSER_TEST_WAIT_FOR_LOAD_STOP);

  // The first tab should now be in the background.
  ASSERT_TRUE(!tab->IsVisible());

  // Create a single Actions proto with two click actions on the background tab.
  std::optional<int> button1_id = content::GetDOMNodeId(
      *first_tab_contents->GetPrimaryMainFrame(), "#button1");
  std::optional<int> button2_id = content::GetDOMNodeId(
      *first_tab_contents->GetPrimaryMainFrame(), "#button2");
  ASSERT_TRUE(button1_id);
  ASSERT_TRUE(button2_id);

  std::unique_ptr<ToolRequest> click1 = MakeClickRequest(
      *first_tab_contents->GetPrimaryMainFrame(), button1_id.value());
  std::unique_ptr<ToolRequest> click2 = MakeClickRequest(
      *first_tab_contents->GetPrimaryMainFrame(), button2_id.value());

  // Execute the actions.
  ActResultFuture result;
  actor_task().Act(ToRequestList(click1, click2), result.GetCallback());

  // Check that the action succeeded.
  ExpectOkResult(result);

  // Check background color changed to green in the background tab.
  EXPECT_EQ("green", EvalJs(tab->GetContents(), "document.body.bgColor"));
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest, ClickLinkToBlockedSite) {
  const GURL start_url = embedded_https_test_server().GetURL(
      "example.com", "/actor/blocked_links.html");
  const GURL blocked_url = embedded_https_test_server().GetURL(
      "blocked.example.com", "/actor/blank.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), start_url));
  EXPECT_TRUE(content::ExecJs(
      web_contents(), content::JsReplace("setBlockedSite($1);", blocked_url)));
  ClickTarget("#directToBlocked",
              mojom::ActionResultCode::kTriggeredNavigationBlocked);
}

// Ensure that the block list is still active while the actor task is paused.
IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest,
                       DisallowBlockedSiteWhenPaused) {
  const GURL start_url = embedded_https_test_server().GetURL(
      "example.com", "/actor/blocked_links.html");
  const GURL blocked_url = embedded_https_test_server().GetURL(
      "blocked.example.com", "/actor/blank.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), start_url));

  // Arbitrary click to add the tab to the ActorTask.
  ClickTarget("h1");

  EXPECT_TRUE(content::ExecJs(
      web_contents(), content::JsReplace("setBlockedSite($1);", blocked_url)));

  // Pause the task as if the user took over. Blocked links should still be
  // disallowed.
  actor_task().Pause(true);

  content::TestNavigationManager main_manager(web_contents(), blocked_url);

  EXPECT_TRUE(content::ExecJs(
      web_contents(), "document.getElementById('directToBlocked').click()"));

  ASSERT_TRUE(main_manager.WaitForNavigationFinished());
  EXPECT_FALSE(main_manager.was_committed());
  EXPECT_FALSE(main_manager.was_successful());
  EXPECT_EQ(web_contents()->GetURL(), start_url);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest,
                       ClickLinkToBlockedSiteWithRedirect) {
  const GURL start_url = embedded_https_test_server().GetURL(
      "example.com", "/actor/blocked_links.html");
  const GURL blocked_url = embedded_https_test_server().GetURL(
      "blocked.example.com", "/actor/blank.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), start_url));
  EXPECT_TRUE(content::ExecJs(
      web_contents(), content::JsReplace("setBlockedSite($1);", blocked_url)));
  ClickTarget("#redirectToBlocked",
              mojom::ActionResultCode::kTriggeredNavigationBlocked);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest, FirstActionOnBlockedSite) {
  const GURL start_url = embedded_https_test_server().GetURL(
      "blocked.example.com", "/actor/link.html");
  const GURL second_url =
      embedded_https_test_server().GetURL("example.com", "/actor/blank.html");

  ASSERT_TRUE(content::NavigateToURL(web_contents(), start_url));
  EXPECT_TRUE(content::ExecJs(web_contents(),
                              content::JsReplace("setLink($1);", second_url)));

  ClickTarget("#link", mojom::ActionResultCode::kUrlBlocked);

  // Even though the first action failed, the tab should still be associated
  // with the task.
  EXPECT_TRUE(
      actor_task().GetLastActedTabs().contains(active_tab()->GetHandle()));
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest, PrerenderBlockedSite) {
  const GURL start_url = embedded_https_test_server().GetURL(
      "example.com", "/actor/blocked_links.html");
  const GURL blocked_url = embedded_https_test_server().GetURL(
      "blocked.example.com", "/actor/blank.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), start_url));
  EXPECT_TRUE(content::ExecJs(
      web_contents(), content::JsReplace("setBlockedSite($1);", blocked_url)));

  base::RunLoop loop;
  actor_task().AddTab(
      active_tab()->GetHandle(),
      /*stop_task_on_detach=*/true,
      base::BindLambdaForTesting([&](mojom::ActionResultPtr result) {
        EXPECT_TRUE(IsOk(*result));
        loop.Quit();
      }));
  loop.Run();

  // While we have an active task, cancel any prerenders which would be to a
  // blocked site.
  content::test::PrerenderHostObserver prerender_observer(*web_contents(),
                                                          blocked_url);
  prerender_helper().AddPrerenderAsync(blocked_url);
  prerender_observer.WaitForDestroyed();

  ClickTarget("#directToBlocked",
              mojom::ActionResultCode::kTriggeredNavigationBlocked);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest,
                       ExternalProtocolLinkBlocked) {
  const GURL start_url = embedded_https_test_server().GetURL(
      "example.com", "/actor/external_protocol_links.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), start_url));

  ClickTarget("#mailto",
              mojom::ActionResultCode::kExternalProtocolNavigationBlocked);
}

// We need to follow a link which then spawns the external protocol request in
// an iframe to test this. If we launch click the external protocol link
// directly, its caught by the network throttler as seen in the test above. If
// we click a button that creates the iframe request directly, the actor will
// finish the task before ChromeContentBrowserClient has a chance to check for
// the actor task.
IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest,
                       BackgroundExternalProtocolBlocked) {
  const GURL start_url =
      embedded_https_test_server().GetURL("example.com", "/actor/link.html");
  const GURL second_url = embedded_https_test_server().GetURL(
      "example.com", "/actor/external_protocol.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), start_url));
  EXPECT_TRUE(content::ExecJs(web_contents(),
                              content::JsReplace("setLink($1);", second_url)));

  ClickTarget("#link", mojom::ActionResultCode::kOk);

  EXPECT_FALSE(browser_client().external_protocol_result().value());
}

// Regression test for https://crbug.com/502819675.
IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest, HistoryBackIsChecked) {
  // Disable SafeBrowsing so that IsAcceptableNavigationDestination rejects
  // every non-localhost URL with kSafeBrowsing.
  safe_browsing::SetSafeBrowsingState(
      browser()->GetProfile()->GetPrefs(),
      safe_browsing::SafeBrowsingState::NO_SAFE_BROWSING);

  // Disable BFCache so that `history.back()` is a real navigation.
  content::DisableBackForwardCacheForTesting(
      web_contents(), content::BackForwardCache::TEST_REQUIRES_NO_CACHING);

  const GURL first_url =
      embedded_https_test_server().GetURL("a.com", "/empty.html");
  const GURL second_url =
      embedded_https_test_server().GetURL("b.com", "/empty.html");

  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), first_url));
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), second_url));

  actor_task().AddTab(active_tab()->GetHandle(),
                      /*stop_task_on_detach=*/true, base::DoNothing());
  ASSERT_TRUE(actor_task().IsActingOnTab(active_tab()->GetHandle()));

  // A `history.back()` navigation should be classified as renderer-initiated
  // (even though the initiator is std::nullopt), and should be blocked by
  // IsAcceptableNavigationDestination.
  content::NavigationHandleObserver navigation_handle_observer(web_contents(),
                                                               first_url);
  content::TestNavigationManager test_navigation_manager(web_contents(),
                                                         first_url);
  EXPECT_TRUE(content::ExecJs(web_contents(), "history.back();",
                              content::EXECUTE_SCRIPT_NO_USER_GESTURE));
  ASSERT_TRUE(test_navigation_manager.WaitForNavigationFinished());
  ASSERT_TRUE(navigation_handle_observer.is_renderer_initiated());
  ASSERT_EQ(navigation_handle_observer.last_initiator_origin(), std::nullopt);

  EXPECT_FALSE(navigation_handle_observer.has_committed());
  EXPECT_EQ(second_url, web_contents()->GetLastCommittedURL());
}

// TODO(crbug.com/456759397): Add coverage for multi-tab cases in
// foreground/background visibility metric.

// Android uses a different dropdown UI that doesn't respect styling.
#if !BUILDFLAG(IS_ANDROID)
class ExecutionEnginePixelBrowserTest : public ExecutionEngineBrowserTest {
 public:
  ExecutionEnginePixelBrowserTest() {
    scoped_feature_list_.InitAndEnableFeature(
        features::kGlicActorInternalPopups);
  }

  void SetUp() override {
    EnablePixelOutput();
    ExecutionEngineBrowserTest::SetUp();
  }

  // Captures the page with CopyFromSurface() and returns true if any red
  // pixels are found.
  bool HasRedPixels() {
    bool found_red = false;
    base::RunLoop run_loop;
    web_contents()->GetRenderWidgetHostView()->CopyFromSurface(
        gfx::Rect(), gfx::Size(), base::TimeDelta(),
        base::BindLambdaForTesting(
            [&](const content::CopyFromSurfaceResult& result) {
              ASSERT_TRUE(result.has_value());
              const SkBitmap& bitmap = result->bitmap;
              for (int x = 0; x < bitmap.width() && !found_red; ++x) {
                for (int y = 0; y < bitmap.height() && !found_red; ++y) {
                  if (bitmap.getColor(x, y) == SK_ColorRED) {
                    found_red = true;
                  }
                }
              }
              base::SingleThreadTaskRunner::GetCurrentDefault()->PostTask(
                  FROM_HERE, run_loop.QuitClosure());
            }));
    run_loop.Run();
    return found_red;
  }

  base::test::ScopedFeatureList scoped_feature_list_;
};

// TODO: b/456801048 - Fix test flakiness on Linux.
#if BUILDFLAG(IS_LINUX)
#define MAYBE_DropdownCapturedWhenActing DISABLED_DropdownCapturedWhenActing
#else
#define MAYBE_DropdownCapturedWhenActing DropdownCapturedWhenActing
#endif  // BUILDFLAG(IS_LINUX)

// Tests that dropdown menus are visible in captures during an actor-controlled
// state.
IN_PROC_BROWSER_TEST_F(ExecutionEnginePixelBrowserTest,
                       MAYBE_DropdownCapturedWhenActing) {
  // Render an HTML <select> element whose second item appears red.
  // The second item should appear when the element is clicked.
  EXPECT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/actor/red_dropdown.html")));
  EXPECT_TRUE(WaitForRenderFrameReady(web_contents()->GetPrimaryMainFrame()));
  content::SimulateEndOfPaintHoldingOnPrimaryMainFrame(web_contents());

  base::RunLoop loop;
  actor_task().AddTab(
      active_tab()->GetHandle(),
      /*stop_task_on_detach=*/true,
      base::BindLambdaForTesting([&](mojom::ActionResultPtr result) {
        EXPECT_TRUE(IsOk(*result));
        loop.Quit();
      }));
  loop.Run();

  // Set the actor task to an actor-controlled state.
  actor_task().SetState(ActorTask::State::kActing);

  {
    content::ShowPopupWidgetWaiter dropdown_waiter(web_contents(),
                                                   main_frame());
    ClickTarget("#select");
    dropdown_waiter.Wait();
    ASSERT_FALSE(dropdown_waiter.last_initial_rect().IsEmpty());
  }
  content::WaitForCopyableViewInFrame(main_frame());

  // CopyFromSurface() should have seen red pixels from the dropdown.
  EXPECT_TRUE(HasRedPixels());

  // Dismissing popups only happens on Mac -- it happens to shift back to the
  // external UI.
#if BUILDFLAG(IS_MAC)
  // Move to a non-actor-controlled state, which should dismiss the popup.
  actor_task().SetState(ActorTask::State::kPausedByUser);

  // Capture again, and expect no red pixels.
  EXPECT_FALSE(HasRedPixels());

  // Re-open the popup. Since the actor is not in an actor-controlled state,
  // the popup should be external and not styled.
  {
    content::ShowPopupWidgetWaiter dropdown_waiter(web_contents(),
                                                   main_frame());
    content::SimulateMouseClickAt(
        web_contents(), /*modifiers=*/0, blink::WebMouseEvent::Button::kLeft,
        gfx::ToFlooredPoint(content::GetCenterCoordinatesOfElementWithId(
            web_contents(), "select")));
    dropdown_waiter.Wait();
    ASSERT_FALSE(dropdown_waiter.last_initial_rect().IsEmpty());
    content::WaitForCopyableViewInFrame(main_frame());
  }

  // Capture again, and expect no red pixels.
  EXPECT_FALSE(HasRedPixels());

  // Now, go back to an actor-controlled state again, and re-open the popup. We
  // should get red pixels again.
  actor_task().SetState(ActorTask::State::kReflecting);
  actor_task().SetState(ActorTask::State::kActing);

  {
    content::ShowPopupWidgetWaiter dropdown_waiter(web_contents(),
                                                   main_frame());
    ClickTarget("#select");
    dropdown_waiter.Wait();
    ASSERT_FALSE(dropdown_waiter.last_initial_rect().IsEmpty());
  }
  content::WaitForCopyableViewInFrame(main_frame());

  // CopyFromSurface() should have seen red pixels from the dropdown.
  EXPECT_TRUE(HasRedPixels());
#endif  // BUILDFLAG(IS_MAC)
}

// Only Mac switches between internal and external popups, so this test only
// makes sense on that platform.
#if BUILDFLAG(IS_MAC)

// Determines the ordering of when the the cross-origin iframe is created.
enum class CreateFrameHappens {
  kBeforeStateTransistions,
  kAfterStateTransistions,
};

// Determines if expecting the popup to use internal (when actor controlled) or
// external (when user controlled) popup UI. Only the internal UI is stylable
// with red.
enum class ExpectedPopupType {
  kInternal,
  kExternal,
};

class ExecutionEngineDropdownCaptureOopifBrowserTest
    : public ExecutionEnginePixelBrowserTest,
      public ::testing::WithParamInterface<
          std::tuple<CreateFrameHappens, ExpectedPopupType>> {
 public:
  bool UseCertTestNames() const override { return true; }

  CreateFrameHappens GetCreateFrameHappens() const {
    return std::get<0>(GetParam());
  }

  ExpectedPopupType GetExpectedPopupType() const {
    return std::get<1>(GetParam());
  }

  // Helper function that clicks and opens a popup. This function works both in
  // actor-controlled and non-actor-controlled states.
  void ClickSelect(std::string_view select_id,
                   content::RenderFrameHost* execution_target = nullptr) {
    content::RenderFrameHost& rfh =
        execution_target ? *execution_target : *main_frame();
    content::ShowPopupWidgetWaiter dropdown_waiter(web_contents(), &rfh);
    if (actor_task().IsUnderActorControl()) {
      ClickTarget(base::StrCat({"#", select_id}),
                  /*expected_code=*/mojom::ActionResultCode::kOk,
                  /*execution_target=*/&rfh);
    } else {
      blink::WebMouseEvent mouse_event(
          blink::WebInputEvent::Type::kMouseDown,
          blink::WebInputEvent::kNoModifiers,
          blink::WebInputEvent::GetStaticTimeStampForTests());
      mouse_event.button = blink::WebPointerProperties::Button::kLeft;
      mouse_event.SetPositionInWidget(
          content::GetCenterCoordinatesOfElementWithId(&rfh, select_id));
      rfh.GetRenderWidgetHost()->ForwardMouseEvent(mouse_event);
    }
    dropdown_waiter.Wait();
    ASSERT_FALSE(dropdown_waiter.last_initial_rect().IsEmpty());
  }

  void DoStateTransitions() {
    base::RunLoop loop;
    actor_task().AddTab(
        active_tab()->GetHandle(),
        /*stop_task_on_detach=*/true,
        base::BindLambdaForTesting([&](mojom::ActionResultPtr result) {
          EXPECT_TRUE(IsOk(*result));
          loop.Quit();
        }));
    loop.Run();

    // Set the actor task to an actor-controlled state.
    actor_task().SetState(ActorTask::State::kActing);

    if (GetExpectedPopupType() == ExpectedPopupType::kExternal) {
      // Now, transition back to a user-controlled state.
      actor_task().SetState(ActorTask::State::kPausedByUser);
    }
  }
};

// Ensure that internal / external popup mode correctly propagates to
// newly-created out-of-process (cross-origin) iframes, even those created after
// moving to an actor-controlled state.
//
// Transition to an actor-controlled state, then create a new out-of-process
// iframe that contains a <select> tag.
//
// When the actor opens the select dropdown, it uses the internal UI (styled
// with red) and is visible in the screenshot.
IN_PROC_BROWSER_TEST_P(ExecutionEngineDropdownCaptureOopifBrowserTest,
                       OutOfProcIframeDropdowns) {
  // The main frame is a.test, the iframe with the popup (created dynamically)
  // is in b.test.
  const url::Origin origin_b =
      url::Origin::Create(embedded_https_test_server().GetURL("b.test", "/"));
  EXPECT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_https_test_server().GetURL(
                     "a.test", base::StrCat({"/actor/oopif_red_dropdown.html?",
                                             origin_b.Serialize()}))));
  EXPECT_TRUE(WaitForRenderFrameReady(web_contents()->GetPrimaryMainFrame()));
  content::SimulateEndOfPaintHoldingOnPrimaryMainFrame(web_contents());

  switch (GetCreateFrameHappens()) {
    case CreateFrameHappens::kBeforeStateTransistions:
      EXPECT_TRUE(content::ExecJs(web_contents(), "createIframe();"));
      DoStateTransitions();
      break;
    case CreateFrameHappens::kAfterStateTransistions:
      DoStateTransitions();
      EXPECT_TRUE(content::ExecJs(web_contents(), "createIframe();"));
      break;
  }

  // Get a handle to the out of process iframe.
  content::RenderFrameHost* iframe =
      ChildFrameAt(web_contents()->GetPrimaryMainFrame(), 0);
  ASSERT_NE(iframe, nullptr);
  EXPECT_TRUE(WaitForRenderFrameReady(iframe));
  content::WaitForHitTestData(iframe);

  // Now click on the <select> in the out of process iframe, and then look for
  // red pixels.
  ClickSelect("select", /*execution_target=*/iframe);
  content::WaitForCopyableViewInFrame(iframe);

  // CopyFromSurface() should have seen red pixels from the dropdown.
  switch (GetExpectedPopupType()) {
    case ExpectedPopupType::kInternal:
      EXPECT_TRUE(HasRedPixels());
      break;
    case ExpectedPopupType::kExternal:
      EXPECT_FALSE(HasRedPixels());
      break;
  }
}

INSTANTIATE_TEST_SUITE_P(
    ,
    ExecutionEngineDropdownCaptureOopifBrowserTest,
    ::testing::Combine(
        ::testing::Values(CreateFrameHappens::kBeforeStateTransistions,
                          CreateFrameHappens::kAfterStateTransistions),
        ::testing::Values(ExpectedPopupType::kInternal,
                          ExpectedPopupType::kExternal)),
    [](const testing::TestParamInfo<
        std::tuple<CreateFrameHappens, ExpectedPopupType>>& info) {
      return base::StrCat(
          {"CreateFrameHappens_",
           std::get<0>(info.param) ==
                   CreateFrameHappens::kBeforeStateTransistions
               ? "BeforeStateTransistions"
               : "AfterStateTransitions",
           "__ExpectedPopupType_",
           std::get<1>(info.param) == ExpectedPopupType::kInternal
               ? "Internal"
               : "External"});
    });

#endif  // BUILDFLAG(IS_MAC)

#endif  // !BUILDFLAG(IS_ANDROID)

class ExecutionEngineFileSystemAccessApiBrowserTest
    : public ExecutionEngineBrowserTest,
      public testing::WithParamInterface<bool> {
 public:
  ExecutionEngineFileSystemAccessApiBrowserTest() {
    scoped_feature_list_.InitWithFeatureStates(
        {{kGlicBlockFileSystemAccessApiFilePicker, should_block_file_picker()},
         // TODO(crbug.com/452061489): Fix tests that fail when the WebUI
         // Omnibox is enabled and then remove these two Features.
         {omnibox::internal::kWebUIOmniboxPopup, false},
         {omnibox::internal::kWebUIOmniboxAimPopup, false}});
  }

  bool should_block_file_picker() { return GetParam(); }

  void SetUp() override {
    ASSERT_TRUE(
        temp_dir_.CreateUniqueTempDirUnderPath(base::GetTempDirForTesting()));
    InProcessBrowserTest::SetUp();
  }

  base::FilePath CreateTestFile(const std::string& contents) {
    base::ScopedAllowBlockingForTesting allow_blocking;
    base::FilePath result;
    EXPECT_TRUE(base::CreateTemporaryFileInDir(temp_dir_.GetPath(), &result));
    EXPECT_TRUE(base::WriteFile(result, contents));
    return result;
  }

  bool IsUsageIndicatorVisible(BrowserWindowInterface* browser) {
    return page_actions::PageActionTestAccessor(browser,
                                                kActionShowFileSystemAccess)
        .GetVisible();
  }

 private:
  base::ScopedTempDir temp_dir_;
  base::test::ScopedFeatureList scoped_feature_list_;
};

IN_PROC_BROWSER_TEST_P(ExecutionEngineFileSystemAccessApiBrowserTest,
                       FilePickerForFileSystemAccessApiBlocked) {
  const base::FilePath test_file = CreateTestFile("");
  const std::string file_contents = "file contents to write";

  ::ui::SelectFileDialog::SetFactory(
      std::make_unique<SelectPredeterminedFileDialogFactory>(
          std::vector<base::FilePath>{test_file}));
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(),
      embedded_test_server()->GetURL("/actor/file_system_access.html")));

  EXPECT_FALSE(IsUsageIndicatorVisible(browser()));

  ClickTarget("#save");

  EXPECT_NE(IsUsageIndicatorVisible(browser()), should_block_file_picker());

  // Now check that we can get access to file when not using actor
  actor_keyed_service()->ResetForTesting();
  content::WebContents* web_contents =
      browser()->tab_strip_model()->GetActiveWebContents();

  EXPECT_EQ(test_file.BaseName().AsUTF8Unsafe(),
            content::EvalJs(web_contents, "saveFile()"));

  EXPECT_TRUE(IsUsageIndicatorVisible(browser()))
      << "A save file dialog implicitly grants write access, so usage "
         "indicator should be visible.";
}

INSTANTIATE_TEST_SUITE_P(All,
                         ExecutionEngineFileSystemAccessApiBrowserTest,
                         testing::Bool());
class ExecutionEngineDangerousContentBrowserTest
    : public ExecutionEngineBrowserTest,
      public testing::WithParamInterface<bool> {
 public:
  ExecutionEngineDangerousContentBrowserTest() {
    scoped_feature_list_.InitWithFeatureState(
        kGlicBlockNavigationToDangerousContentTypes,
        should_block_dangerous_navigations());
  }

  bool should_block_dangerous_navigations() { return GetParam(); }

 private:
  base::test::ScopedFeatureList scoped_feature_list_;
};

IN_PROC_BROWSER_TEST_P(ExecutionEngineDangerousContentBrowserTest,
                       BlockNavigationToJson) {
  const GURL start_url =
      embedded_https_test_server().GetURL("example.com", "/actor/link.html");
  const GURL json_url =
      embedded_https_test_server().GetURL("example.com", "/actor/test.json");

  ASSERT_TRUE(content::NavigateToURL(web_contents(), start_url));
  EXPECT_TRUE(content::ExecJs(web_contents(),
                              content::JsReplace("setLink($1);", json_url)));

  ClickTarget("#link",
              should_block_dangerous_navigations()
                  ? mojom::ActionResultCode::kTriggeredNavigationBlocked
                  : mojom::ActionResultCode::kOk);
  ASSERT_EQ(web_contents()->GetLastCommittedURL(),
            should_block_dangerous_navigations() ? start_url : json_url);
}

INSTANTIATE_TEST_SUITE_P(All,
                         ExecutionEngineDangerousContentBrowserTest,
                         testing::Bool());

class ExecutionEngineSkipBeforeUnloadBrowserTest
    : public ExecutionEngineBrowserTest,
      public testing::WithParamInterface<std::tuple<bool, bool>> {
 public:
  ExecutionEngineSkipBeforeUnloadBrowserTest() {
    if (IsSkipFeatureEnabled()) {
      scoped_feature_list_.InitAndEnableFeature(
          kGlicSkipBeforeUnloadDialogAndNavigate);
    } else {
      scoped_feature_list_.InitAndDisableFeature(
          kGlicSkipBeforeUnloadDialogAndNavigate);
    }
  }

  bool IsActorActive() const { return std::get<0>(GetParam()); }
  bool IsSkipFeatureEnabled() const { return std::get<1>(GetParam()); }

  void WaitForAppModalDialogToClose() {
    ASSERT_TRUE(base::test::RunUntil([] {
      return !javascript_dialogs::AppModalDialogQueue::GetInstance()
                  ->HasActiveDialog();
    }));
  }

  void CancelActiveAppModalDialog() {
    auto* dialog_queue = javascript_dialogs::AppModalDialogQueue::GetInstance();
    ASSERT_TRUE(javascript_dialogs::AppModalDialogQueue::GetInstance()
                    ->HasActiveDialog());
    javascript_dialogs::AppModalDialogController* dialog =
        dialog_queue->active_dialog();
    dialog->OnCancel(true);
    WaitForAppModalDialogToClose();
  }

 private:
  base::test::ScopedFeatureList scoped_feature_list_;
};

// This test is to ensure that the beforeunload dialog is skipped when the
//  kGlicSkipBeforeUnloadDialogAndNavigate feature is enabled and the actor is
//  active on the renderer.
IN_PROC_BROWSER_TEST_P(ExecutionEngineSkipBeforeUnloadBrowserTest,
                       SkipBeforeUnloadDialogAndNavigate) {
  if (IsActorActive()) {
    base::test::TestFuture<mojom::ActionResultPtr> future;
    actor_task().AddTab(active_tab()->GetHandle(), /*stop_task_on_detach=*/true,
                        future.GetCallback());
    mojom::ActionResultPtr result = future.Take();
    ASSERT_TRUE(IsOk(*result));
  } else {
    actor_keyed_service()->ResetForTesting();
  }

  const GURL beforeunload_url =
      embedded_test_server()->GetURL("/actor/beforeunload.html");
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), beforeunload_url));

  content::WebContents* web_contents =
      browser()->tab_strip_model()->GetActiveWebContents();
  content::PrepContentsForBeforeUnloadTest(web_contents);
  ASSERT_EQ(beforeunload_url, web_contents->GetLastCommittedURL());

  const GURL target_url = embedded_test_server()->GetURL("/title1.html");

  bool should_skip_dialog = IsActorActive() && IsSkipFeatureEnabled();

  if (should_skip_dialog) {
    ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), target_url));
    content::WaitForLoadStop(web_contents);

    EXPECT_EQ(target_url, web_contents->GetLastCommittedURL());
    EXPECT_FALSE(web_contents->NeedToFireBeforeUnloadOrUnloadEvents());

  } else {
    // Expect navigation to be blocked by beforeunload dialogs and no navigation
    // to occur.
    web_contents->GetController().LoadURL(target_url, content::Referrer(),
                                          ::ui::PAGE_TRANSITION_TYPED,
                                          std::string());

    ui_test_utils::WaitForAppModalDialog();
    EXPECT_EQ(beforeunload_url, web_contents->GetLastCommittedURL());
    CancelActiveAppModalDialog();
  }
}

struct SkipBeforeUnloadTestNameGenerator {
  template <class ParamType>
  std::string operator()(const testing::TestParamInfo<ParamType>& info) const {
    return base::StringPrintf(
        "%s_%s", std::get<0>(info.param) ? "ActorActive" : "ActorInactive",
        std::get<1>(info.param) ? "SkipFeatureEnabled" : "SkipFeatureDisabled");
  }
};

INSTANTIATE_TEST_SUITE_P(
    All,
    ExecutionEngineSkipBeforeUnloadBrowserTest,
    testing::Combine(testing::Bool(),   // IsActorActive
                     testing::Bool()),  // IsSkipFeatureEnabled
    SkipBeforeUnloadTestNameGenerator());

class ExecutionEngineDownloadBrowserTest : public ExecutionEngineBrowserTest {
 public:
  void SetUpOnMainThread() override {
    browser()->GetProfile()->GetPrefs()->SetBoolean(prefs::kPromptForDownload,
                                                 true);
    file_activity_observer_ =
        std::make_unique<DownloadTestFileActivityObserver>(
            browser()->GetProfile());
    file_activity_observer_->EnableFileChooser(false);
    ExecutionEngineBrowserTest::SetUpOnMainThread();
  }

  void TearDownOnMainThread() override {
    ExecutionEngineBrowserTest::TearDownOnMainThread();
    // Needs to be torn down on the main thread. file_activity_observer_ holds a
    // reference to the ChromeDownloadManagerDelegate which should be destroyed
    // on the UI thread.
    file_activity_observer_.reset();
  }

 protected:
  base::HistogramTester histogram_tester_;

 private:
  std::unique_ptr<DownloadTestFileActivityObserver> file_activity_observer_;
  base::test::ScopedFeatureList scoped_feature_list_;
};

IN_PROC_BROWSER_TEST_F(ExecutionEngineDownloadBrowserTest,
                       OnlyActorDownloadsAreRecorded) {
  const GURL start_url = embedded_https_test_server().GetURL(
      "example.com", "/actor/download.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), start_url));
  ASSERT_TRUE(content::ExecJs(web_contents(),
                              "document.getElementById('download').click()"));

  content::DownloadTestObserverTerminal download_observer(
      browser()->GetProfile()->GetDownloadManager(), 2,
      content::DownloadTestObserver::ON_DANGEROUS_DOWNLOAD_FAIL);
  ASSERT_TRUE(content::NavigateToURL(web_contents(), start_url));
  ClickTarget("#download", mojom::ActionResultCode::kFilePickerTriggered);

  // Execution Engine normal holds onto file picker callback until next resume,
  // resetting forces the callback to get triggered.
  actor_keyed_service()->ResetForTesting();
  download_observer.WaitForFinished();

  histogram_tester_.ExpectUniqueSample("Actor.Download.DirectDownloadTriggered",
                                       true, 1);
  histogram_tester_.ExpectUniqueSample("Actor.Download.SaveAsDialogTriggered",
                                       true, 1);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest, CollectsToolVotes) {
  const GURL url = embedded_test_server()->GetURL("/actor/two_clicks.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), url));

  std::optional<int> button1_id =
      content::GetDOMNodeId(*main_frame(), "#button1");
  std::optional<int> button2_id =
      content::GetDOMNodeId(*main_frame(), "#button2");
  ASSERT_TRUE(button1_id);
  ASSERT_TRUE(button2_id);

  std::unique_ptr<ToolRequest> click1 =
      MakeClickRequest(*main_frame(), button1_id.value());
  std::unique_ptr<ToolRequest> click2 =
      MakeClickRequest(*main_frame(), button2_id.value());

  ActResultFuture result;
  actor_task().Act(ToRequestList(click1, click2), result.GetCallback());
  ExpectOkResult(result);

  const TabObservationStrategy& strategy = result.GetStrategy();
  EXPECT_EQ(strategy.GetScreenshotPolicy(active_tab()->GetHandle()),
            ScreenshotPolicy::kRequested);
  EXPECT_EQ(strategy.GetPageContentExtractionPolicy(active_tab()->GetHandle()),
            PageContentExtractionPolicy::kRequested);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineBrowserTest, CollectsMultipleToolVotes) {
  const GURL url = embedded_test_server()->GetURL("/actor/two_clicks.html");
  ASSERT_TRUE(content::NavigateToURL(web_contents(), url));

  base::test::TestFuture<ToolCallback> on_invoke_future1;
  base::test::TestFuture<ToolCallback> on_invoke_future2;

  std::unique_ptr<ToolRequest> tool1 = std::make_unique<FakeToolRequest>(
      on_invoke_future1.GetCallback(), base::OnceClosure(),
      active_tab()->GetHandle());
  std::unique_ptr<ToolRequest> tool2 = std::make_unique<FakeToolRequest>(
      on_invoke_future2.GetCallback(), base::OnceClosure(),
      active_tab()->GetHandle());

  ActResultFuture result;
  actor_task().Act(ToRequestList(tool1, tool2), result.GetCallback());

  // First tool is invoked. Give it votes: Screenshot Skipped, Dom Extraction
  // Required.
  ASSERT_TRUE(on_invoke_future1.Wait());
  mojom::ActionResultPtr result1 = MakeOkResult();
  result1->screenshot_policy = mojom::ScreenshotPolicy::kSkipped;
  result1->page_content_policy = mojom::PageContentExtractionPolicy::kRequired;
  std::move(on_invoke_future1.Take()).Run(std::move(result1));

  // Second tool is invoked. Give it votes: Screenshot Required, Dom Extraction
  // Skipped.
  ASSERT_TRUE(on_invoke_future2.Wait());
  mojom::ActionResultPtr result2 = MakeOkResult();
  result2->screenshot_policy = mojom::ScreenshotPolicy::kRequired;
  result2->page_content_policy = mojom::PageContentExtractionPolicy::kSkipped;
  std::move(on_invoke_future2.Take()).Run(std::move(result2));

  ExpectOkResult(result);

  // The strategy should take the maximum of the votes for the tab.
  // Screenshot: max(Skipped, Required) = Required.
  // Dom Extraction: max(Required, Skipped) = Required.
  const TabObservationStrategy& strategy = result.GetStrategy();
  EXPECT_EQ(strategy.GetScreenshotPolicy(active_tab()->GetHandle()),
            ScreenshotPolicy::kRequired);
  EXPECT_EQ(strategy.GetPageContentExtractionPolicy(active_tab()->GetHandle()),
            PageContentExtractionPolicy::kRequired);
}

// Hosts that will trigger lookalike warnings. One causes an interstitial and
// the other only a safety tip.
constexpr char kLookalikeHostInterstitial[] = "google.com.example.com";
constexpr char kLookalikeHostWarning[] = "accounts-google.com";

#if BUILDFLAG(SAFE_BROWSING_AVAILABLE)

class ExecutionEngineUrlGatingBrowserTest : public InProcessBrowserTest {
 public:
  ExecutionEngineUrlGatingBrowserTest() = default;

  ~ExecutionEngineUrlGatingBrowserTest() override = default;

  void SetUpCommandLine(base::CommandLine* command_line) override {
    InProcessBrowserTest::SetUpCommandLine(command_line);
    SetUpBlocklist(command_line, "bar.com");
  }

  void SetUpOnMainThread() override {
    InProcessBrowserTest::SetUpOnMainThread();
    host_resolver()->AddRule("*", "127.0.0.1");
    LookalikeTestHelper::SetUpLookalikeTestParams();
    embedded_https_test_server().SetCertHostnames(
        {"a.com", "b.com", "c.com", "bar.com", "*.bar.com",
         kLookalikeHostInterstitial, kLookalikeHostWarning});
    ASSERT_TRUE(embedded_https_test_server().Start());

    // Optimization guide uses this histogram to signal initialization in tests.
    optimization_guide::RetryForHistogramUntilCountReached(
        &histogram_tester_for_init_,
        "OptimizationGuide.HintsManager.HintCacheInitialized", 1);

    InitActionBlocklist(browser()->GetProfile());

    // Simulate the component loading, as the implementation checks it, but the
    // actual list is set via the command line.
    ASSERT_TRUE(temp_dir_.CreateUniqueTempDir());
    optimization_guide::OptimizationHintsComponentUpdateListener::GetInstance()
        ->MaybeUpdateHintsComponent(
            {base::Version("123"),
             temp_dir_.GetPath().Append(FILE_PATH_LITERAL("dont_care"))});
  }

  void TearDownOnMainThread() override {
    LookalikeTestHelper::TearDownLookalikeTestParams();
    InProcessBrowserTest::TearDownOnMainThread();
  }

 protected:
  void CheckUrl(const GURL& url, bool expected_allowed) {
    ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), url));

    auto* actor_service = ActorKeyedService::Get(browser()->GetProfile());
    TaskId task_id =
        actor_service->CreateTask(TestTaskSourceInfo(), &policy_checker_);
    ActorTask* task = actor_service->GetTask(task_id);
    ASSERT_TRUE(task);
    WaitTool::SetNoDelayForTesting();
    std::unique_ptr<ToolRequest> tool_request =
        MakeWaitRequest(browser()->tab_strip_model()->GetActiveTab());
    ASSERT_TRUE(tool_request->RequiresUrlCheckInCurrentTab());
    ActResultFuture result;
    task->Act(ToRequestList(tool_request), result.GetCallback());
    // The result should not be provided synchronously.
    EXPECT_FALSE(result.IsReady());
    ASSERT_EQ(result.Get().size(), 1u);
    EXPECT_THAT(result.Get()[0].result->code,
                Conditional(expected_allowed, mojom::ActionResultCode::kOk,
                            Not(mojom::ActionResultCode::kOk)));
  }

 private:
  base::HistogramTester histogram_tester_for_init_;
  base::ScopedTempDir temp_dir_;
  // Must outlive any ActorTask created with it as the policy checker.
  MockPolicyChecker policy_checker_{
      EnterprisePolicyChecker::UrlBlockReason::kNotBlocked};
};

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingBrowserTest, Basic) {
  const GURL allowed_url =
      embedded_https_test_server().GetURL("a.com", "/title1.html");
  CheckUrl(allowed_url, true);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingBrowserTest,
                       AllowIfNotInBlocklist) {
  const GURL allowed_url =
      embedded_https_test_server().GetURL("c.com", "/title1.html");
  CheckUrl(allowed_url, true);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingBrowserTest,
                       BlockIfInBlocklist) {
  const GURL blocked_url =
      embedded_https_test_server().GetURL("bar.com", "/title1.html");
  CheckUrl(blocked_url, false);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingBrowserTest,
                       BlockSubdomainIfInBlocklist) {
  const GURL blocked_url =
      embedded_https_test_server().GetURL("sub.bar.com", "/title1.html");
  CheckUrl(blocked_url, false);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingBrowserTest, BlockLookalikes) {
  const GURL lookalike_url = embedded_https_test_server().GetURL(
      kLookalikeHostInterstitial, "/title1.html");
  CheckUrl(lookalike_url, false);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingBrowserTest,
                       TreatLookalikeWarningsAsBlocking) {
  const GURL lookalike_url = embedded_https_test_server().GetURL(
      kLookalikeHostWarning, "/title1.html");
  CheckUrl(lookalike_url, false);
}

// This intentionally does not load a blocklist.
class ExecutionEngineUrlGatingMissingBlocklistBrowserTest
    : public InProcessBrowserTest {
 public:
  void SetUpOnMainThread() override {
    InProcessBrowserTest::SetUpOnMainThread();
    host_resolver()->AddRule("*", "127.0.0.1");
    ASSERT_TRUE(embedded_https_test_server().Start());

    // Register the optimization type for the blocklist, but we do not actually
    // load a blocklist.
    InitActionBlocklist(browser()->GetProfile());
  }

 protected:
  // Must outlive any ActorTask created with it as the policy checker.
  MockPolicyChecker policy_checker_{
      EnterprisePolicyChecker::UrlBlockReason::kNotBlocked};
};

// If the blocklist doesn't exist, we allow the URL.
IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingMissingBlocklistBrowserTest,
                       FailOpen) {
  const GURL url =
      embedded_https_test_server().GetURL("bar.com", "/title1.html");
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), url));

  auto* actor_service = ActorKeyedService::Get(browser()->GetProfile());
  TaskId task_id =
      actor_service->CreateTask(TestTaskSourceInfo(), &policy_checker_);
  ActorTask* task = actor_service->GetTask(task_id);
  ASSERT_TRUE(task);
  WaitTool::SetNoDelayForTesting();
  std::unique_ptr<ToolRequest> tool_request =
      MakeWaitRequest(browser()->tab_strip_model()->GetActiveTab());
  ASSERT_TRUE(tool_request->RequiresUrlCheckInCurrentTab());
  ActResultFuture result;
  task->Act(ToRequestList(tool_request), result.GetCallback());
  ExpectOkResult(result);
}

class ExecutionEngineUrlGatingSafeBrowsingBrowserTest
    : public ExecutionEngineUrlGatingBrowserTest {
 public:
  ExecutionEngineUrlGatingSafeBrowsingBrowserTest() = default;
  ~ExecutionEngineUrlGatingSafeBrowsingBrowserTest() override = default;

 protected:
  void CreatedBrowserMainParts(
      content::BrowserMainParts* browser_main_parts) override {
    fake_safe_browsing_database_manager_ =
        base::MakeRefCounted<safe_browsing::FakeSafeBrowsingDatabaseManager>(
            content::GetUIThreadTaskRunner({}));
    safe_browsing_factory_.SetTestDatabaseManager(
        fake_safe_browsing_database_manager_.get());
    safe_browsing::SafeBrowsingService::RegisterFactory(
        &safe_browsing_factory_);
    ExecutionEngineUrlGatingBrowserTest::CreatedBrowserMainParts(
        browser_main_parts);
  }

  void TearDown() override {
    safe_browsing::SafeBrowsingService::RegisterFactory(nullptr);
    ExecutionEngineUrlGatingBrowserTest::TearDown();
  }

  void AddDangerousUrl(const GURL& dangerous_url) {
    fake_safe_browsing_database_manager_->AddDangerousUrl(
        dangerous_url, safe_browsing::SBThreatType::SB_THREAT_TYPE_URL_MALWARE);
  }

  void AddPhishingUrl(const GURL& phishing_url) {
    fake_safe_browsing_database_manager_->AddDangerousUrl(
        phishing_url, safe_browsing::SBThreatType::SB_THREAT_TYPE_URL_PHISHING);
  }

 private:
  scoped_refptr<safe_browsing::FakeSafeBrowsingDatabaseManager>
      fake_safe_browsing_database_manager_;
  safe_browsing::TestSafeBrowsingServiceFactory safe_browsing_factory_;
};

class ExecutionEngineUrlGatingDelayedWarningBrowserTest
    : public ExecutionEngineUrlGatingSafeBrowsingBrowserTest {
 public:
  ExecutionEngineUrlGatingDelayedWarningBrowserTest() {
    scoped_feature_list_.InitAndEnableFeature(safe_browsing::kDelayedWarnings);
  }
  ~ExecutionEngineUrlGatingDelayedWarningBrowserTest() override = default;

 private:
  base::test::ScopedFeatureList scoped_feature_list_;
};

class ExecutionEngineUrlGatingNoSafetyChecksBrowserTest
    : public ExecutionEngineUrlGatingSafeBrowsingBrowserTest {
 public:
  void SetUpCommandLine(base::CommandLine* command_line) override {
    ExecutionEngineUrlGatingSafeBrowsingBrowserTest::SetUpCommandLine(
        command_line);
    command_line->AppendSwitch(actor::switches::kDisableActorSafetyChecks);
  }
};

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingSafeBrowsingBrowserTest,
                       BlockDangerousSite) {
  const GURL dangerous_url =
      embedded_https_test_server().GetURL("c.com", "/title1.html");
  AddDangerousUrl(dangerous_url);
  CheckUrl(dangerous_url, false);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingDelayedWarningBrowserTest,
                       BlockPhishingSiteWithDelayedWarning) {
  const GURL phishing_url =
      embedded_https_test_server().GetURL("c.com", "/title1.html");
  AddPhishingUrl(phishing_url);
  CheckUrl(phishing_url, false);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingSafeBrowsingBrowserTest,
                       RequireSafeBrowsing) {
  // Disable SafeBrowsing.
  safe_browsing::SetSafeBrowsingState(
      browser()->GetProfile()->GetPrefs(),
      safe_browsing::SafeBrowsingState::NO_SAFE_BROWSING);

  // This would otherwise be allowed, but since we don't have SafeBrowsing to
  // check if it's dangerous, we assume it is unsafe.
  const GURL normally_allowed_url =
      embedded_https_test_server().GetURL("a.com", "/title1.html");
  CheckUrl(normally_allowed_url, false);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingNoSafetyChecksBrowserTest,
                       DontRequireSafeBrowsing) {
  // Disable SafeBrowsing.
  safe_browsing::SetSafeBrowsingState(
      browser()->GetProfile()->GetPrefs(),
      safe_browsing::SafeBrowsingState::NO_SAFE_BROWSING);

  // SafeBrowsing is not mandatory in this configuration.
  const GURL url = embedded_https_test_server().GetURL("a.com", "/title1.html");
  CheckUrl(url, true);
}

IN_PROC_BROWSER_TEST_F(ExecutionEngineUrlGatingNoSafetyChecksBrowserTest,
                       IgnoreBlocklist) {
  // The blocklist is ignored in this configuration.
  const GURL blocked_url =
      embedded_https_test_server().GetURL("bar.com", "/title1.html");
  CheckUrl(blocked_url, true);
}

#endif  // BUILDFLAG(SAFE_BROWSING_AVAILABLE)

}  // namespace

}  // namespace actor