ci: probe Blacksmith display wake and audio TCC (scratch, not for merge)

Author: richiemcilroy

.github/workflows/bs-recording-probe.yml

@@ -123,11 +123,37 @@ jobs:
 
       - name: Probe displays and ScreenCaptureKit
         run: |
+          pmset -g | head -30
+          cat > /tmp/disp.swift <<'SWIFT0'
+          import CoreGraphics
+          print("pre-wake main", CGMainDisplayID(), "asleep", CGDisplayIsAsleep(CGMainDisplayID()), "active", CGDisplayIsActive(CGMainDisplayID()))
+          SWIFT0
+          swiftc /tmp/disp.swift -o /tmp/disp0 && /tmp/disp0 || true
+          echo "--- before wake"; ioreg -n IODisplayWrangler -r -d 1 2>/dev/null | grep -i power | head -3 || true
+          sudo pmset -a displaysleep 0 sleep 0 disksleep 0 || true
+          caffeinate -u -t 2 || true
+          nohup caffeinate -dimsu > /dev/null 2>&1 &
+          sleep 2
+          # Microphone lives in the per-user TCC database
+          udb="$HOME/Library/Application Support/com.apple.TCC/TCC.db"
+          ls -la "$udb" || true
+          now=$(date +%s)
+          sort -u "$RUNNER_TEMP/capture-binaries" | grep '^/' | while read -r client; do
+            for service in kTCCServiceMicrophone kTCCServiceScreenCapture; do
+              sqlite3 "$udb" "INSERT OR REPLACE INTO access (service,client,client_type,auth_value,auth_reason,auth_version,indirect_object_identifier,flags,last_modified) VALUES ('$service','$client',1,2,4,1,'UNUSED',0,$now);" || echo "user db insert failed for $client"
+            done
+          done
+          killall tccd || true
+          sudo killall tccd || true
+          sleep 2
           cat > /tmp/disp.swift <<'SWIFT'
           import CoreGraphics
           import ScreenCaptureKit
           import Foundation
-          print("CGMainDisplayID", CGMainDisplayID(), "preflight", CGPreflightScreenCaptureAccess())
+          print("CGMainDisplayID", CGMainDisplayID(), "preflight", CGPreflightScreenCaptureAccess(), "asleep", CGDisplayIsAsleep(CGMainDisplayID()), "active", CGDisplayIsActive(CGMainDisplayID()), "online", CGDisplayIsOnline(CGMainDisplayID()), "bounds", CGDisplayBounds(CGMainDisplayID()))
+          var on = [CGDirectDisplayID](repeating: 0, count: 8); var m: UInt32 = 0
+          CGGetOnlineDisplayList(8, &on, &m)
+          for i in 0..<Int(m) { print("online", on[i], CGDisplayBounds(on[i]), "asleep", CGDisplayIsAsleep(on[i])) }
           var ids = [CGDirectDisplayID](repeating: 0, count: 8); var n: UInt32 = 0
           CGGetActiveDisplayList(8, &ids, &n)
           for i in 0..<Int(n) { print("active", ids[i], CGDisplayBounds(ids[i])) }
@@ -156,11 +182,11 @@ jobs:
             sleep 12
             pid=$(pgrep -f "cap-verify-stimulus" | head -1)
             echo "pid $pid"; cat /tmp/stim-$variant.out; echo "log:"; cat /tmp/stim-$variant.jsonl | head -5
-            if [ -n "$pid" ]; then sample "$pid" 2 -file /tmp/sample-$variant.txt >/dev/null 2>&1; grep -A45 "Thread_.*DispatchQueue_1: com.apple.main-thread" /tmp/sample-$variant.txt | cut -c1-160 | head -60; pkill -f cap-verify-stimulus || true; fi
+            if [ -n "$pid" ]; then log show --last 20s --style compact --predicate 'process == "tccd" OR process == "coreaudiod"' 2>/dev/null | grep -iE "deny|prompt|auth|microphone|tcc|error" | tail -15 || true; sample "$pid" 2 -file /tmp/sample-$variant.txt >/dev/null 2>&1; grep -A45 "Thread_.*DispatchQueue_1: com.apple.main-thread" /tmp/sample-$variant.txt | cut -c1-160 | head -60; pkill -f cap-verify-stimulus || true; fi
             sleep 2
           done
 
       - name: Probe one capture case
         run: |
-          RUST_LOG=cap_recording=debug,scap_targets=debug CAP_VERIFY_CASE=recording/instant/late-mic CAP_VERIFY_TIER=full CAP_VERIFY_REPEAT=1 \
+          RUST_LOG=cap_recording=debug,scap_targets=debug CAP_VERIFY_CASE=recording/instant/late-mic,recording/studio-screen/gated,recording/instant/system-only CAP_VERIFY_TIER=full CAP_VERIFY_REPEAT=1 \
             cargo test --locked -p cap-verify --test recording real_capture -- --nocapture 2>&1 | grep -iE "display|content filter|AsContentFilter|FAIL|pass|xfail|shareable" | head -40 || true