Yaowei Zheng
45bfae6e94
Initial import of all source code, config, and README assets: the packages workspace (cli, core, server, web, docs, landing, skills), build scripts, tooling config, and CI workflows. Includes the data-layout revision made on this branch: the local data root defaults to ~/.penguin/data (PENGUIN_HOME still overrides; the installer keeps its binaries in ~/.penguin), and every Agent lives under <project>/agents/<agent>/ — path helpers, the three agent-enumeration scans, the system prompt, built-in Skills, tests and docs all follow the new layout. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018ihk8iQuo3kv2aPjAYEPuR
62 lines
2.3 KiB
TypeScript
62 lines
2.3 KiB
TypeScript
/**
|
|
* Unit tests for Workspace validation: only requires an existing directory;
|
|
* location is not constrained to the Project directory (reachability is
|
|
* governed by file permissions).
|
|
*/
|
|
import fs from "node:fs/promises";
|
|
import path from "node:path";
|
|
import { afterEach, beforeEach, describe, expect, it } from "vitest";
|
|
import { HttpError } from "../src/http/errors.js";
|
|
import { assertWorkspaceAllowed } from "../src/services/workspace-guard.js";
|
|
import { makeTempRoot } from "./helpers.js";
|
|
|
|
describe("workspace-guard", () => {
|
|
let root: string;
|
|
let projectA: string;
|
|
|
|
beforeEach(async () => {
|
|
root = await makeTempRoot();
|
|
projectA = path.join(root, "project-aaaa0001");
|
|
await fs.mkdir(path.join(projectA, "workdir"), { recursive: true });
|
|
});
|
|
afterEach(async () => {
|
|
await fs.rm(root, { recursive: true, force: true });
|
|
});
|
|
|
|
const guard = (workspace: string) => assertWorkspaceAllowed({ workspace });
|
|
|
|
it("已存在的目录放行并返回 realpath", async () => {
|
|
const ws = await guard(path.join(projectA, "workdir"));
|
|
expect(ws).toBe(await fs.realpath(path.join(projectA, "workdir")));
|
|
});
|
|
|
|
it("Project 目录之外的任意目录同样放行", async () => {
|
|
const outside = path.join(root, "elsewhere");
|
|
await fs.mkdir(outside, { recursive: true });
|
|
await expect(guard(outside)).resolves.toBe(await fs.realpath(outside));
|
|
});
|
|
|
|
it("符号链接解析为 realpath 后返回", async () => {
|
|
const outside = path.join(root, "linked");
|
|
await fs.mkdir(outside, { recursive: true });
|
|
const link = path.join(projectA, "escape");
|
|
await fs.symlink(outside, link, "dir");
|
|
await expect(guard(link)).resolves.toBe(await fs.realpath(outside));
|
|
});
|
|
|
|
it("不存在的路径 → 400 workspace_not_found", async () => {
|
|
const err = await guard(path.join(projectA, "ghost")).catch((e: unknown) => e);
|
|
expect(err).toBeInstanceOf(HttpError);
|
|
expect((err as HttpError).status).toBe(400);
|
|
expect((err as HttpError).code).toBe("workspace_not_found");
|
|
});
|
|
|
|
it("文件（非目录）→ 400 workspace_not_found", async () => {
|
|
const file = path.join(projectA, "a-file.txt");
|
|
await fs.writeFile(file, "x", "utf8");
|
|
const err = await guard(file).catch((e: unknown) => e);
|
|
expect((err as HttpError).status).toBe(400);
|
|
expect((err as HttpError).code).toBe("workspace_not_found");
|
|
});
|
|
});
|