ec601ca13d
Machine-produced by `pnpm run rescope-vendor --apply` plus the regeneration it prints: `pnpm install` for the lockfile, `pnpm run gen-third-party-notices`, `verify-translation-pairing --write` for the touched bilingual pairs, `gen-doc-graphs`, and one typert snapshot whose ids embed character offsets. `pnpm run rescope-vendor --check` verifies the result. Renames nine vendored packages (cordis, cosmokit, schemastery and the six @cordisjs plugins) and every reference that resolves them: manifest names and dependency keys, module specifiers including declare-module merges, cordis.yml plugin names, tsconfig paths, every Markdown fence, and `docs/` prose. Directory names, upstream versions, and dependency ranges are unchanged, so vendor/README.md still reads as an upstream snapshot; its manifest table gains an upstream-name column so THIRD_PARTY_NOTICES keeps MIT attribution pointed at each fork's origin. The tutorial tier follows the rename end to end: its yaml fences named plugins the Loader can no longer resolve, its `ts ignore-check` fences disagreed with the compiled fences beside them, and its prose quoted both. The contracts that told readers to keep upstream names — the root convention and the vendoring cookbook's tree comment and manifest invariant — now say to rescope instead. Two rules read `@deepseek-ai/` as "another workspace plugin": the client bundle purity gate now names the vendored libraries a browser bundle inlines, and the files where a bare `cordis` is an agent-preset id keep that product data.
59 lines
2.6 KiB
TypeScript
59 lines
2.6 KiB
TypeScript
/**
|
|
* The win32 chain's argv contract, denial dialect, and runner-failure rules,
|
|
* exercised through the REAL LocalSandboxProvider.confine() with an injected
|
|
* platform and runner argv prefix. Platform-independent assertions: they run
|
|
* in every CI lane (Windows included, where sandbox-local's own POSIX-only
|
|
* suites are excluded) — the end-to-end runner behavior lives in
|
|
* runner.spec.ts on win32 hosts.
|
|
*/
|
|
|
|
import { tmpdir } from 'node:os'
|
|
import { describe, expect, it, vi } from 'vitest'
|
|
import { Context } from '@deepseek-ai/cordis'
|
|
import type { SandboxPolicy } from '@deepseek-ai/dsh-sandbox'
|
|
import { LocalSandboxProvider } from '@deepseek-ai/dsh-sandbox-local'
|
|
|
|
const RO: SandboxPolicy = { mode: 'read-only', workspaceRoot: '/ws' }
|
|
const WW: SandboxPolicy = { mode: 'workspace-write', workspaceRoot: '/ws' }
|
|
|
|
async function setup(internals: LocalSandboxProvider['internals']) {
|
|
const ctx = new Context()
|
|
await ctx.plugin(LocalSandboxProvider, {})
|
|
const sandbox = ctx.sandbox as LocalSandboxProvider
|
|
sandbox.internals = internals
|
|
return sandbox
|
|
}
|
|
|
|
describe('windows-acl win32 chain (LocalSandboxProvider)', () => {
|
|
it('workspace-write: runner argv prefix, explicit temp, mode flag, full enforcement, ACL denial dialect', async () => {
|
|
const probeWindowsAcl = vi.fn(() => true)
|
|
const sandbox = await setup({
|
|
platform: 'win32',
|
|
windowsAclRunnerArgs: ['node', 'windows-acl-runner.js'],
|
|
probeWindowsAcl,
|
|
})
|
|
const confined = sandbox.confine(['pwsh', '/Command', 'x'], WW)
|
|
expect(confined.argv).toEqual([
|
|
'node', 'windows-acl-runner.js',
|
|
'--workspace', '/ws',
|
|
'--temp', tmpdir(),
|
|
'--mode', 'workspace-write',
|
|
'--',
|
|
'pwsh', '/Command', 'x',
|
|
])
|
|
expect(confined.enforcement).toBe('full')
|
|
expect(confined.denialSignatures).toEqual(['access is denied', 'access to the path', 'permission denied'])
|
|
expect(confined.runnerFailureRules).toEqual([{ allowedExitCodes: [127], fatalSignatures: ['windows-acl-run: '] }])
|
|
// A sole candidate is selected unprobed.
|
|
expect(probeWindowsAcl).not.toHaveBeenCalled()
|
|
})
|
|
|
|
it('read-only: same runner and contract, read-only mode flag', async () => {
|
|
const sandbox = await setup({ platform: 'win32', windowsAclRunnerArgs: ['node', 'windows-acl-runner.js'] })
|
|
const confined = sandbox.confine(['true'], RO)
|
|
expect(confined.argv.slice(-4)).toEqual(['--mode', 'read-only', '--', 'true'])
|
|
expect(confined.enforcement).toBe('full')
|
|
expect(confined.runnerFailureRules).toEqual([{ allowedExitCodes: [127], fatalSignatures: ['windows-acl-run: '] }])
|
|
})
|
|
})
|