63 lines
2.4 KiB
JavaScript
63 lines
2.4 KiB
JavaScript
|
const test = require("node:test");
|
||
|
|
const assert = require("node:assert/strict");
|
||
|
|
const { buildSdkAgentEnv, DANGEROUS_ENV_KEYS, isDangerousEnvKey } = require("./env.cjs");
|
||
|
|
|
||
|
|
test("merges shellEnv + requestedAgentEnv (requested wins)", () => {
|
||
|
|
const env = buildSdkAgentEnv({
|
||
|
|
shellEnv: { PATH: "/usr/bin", FOO: "shell" },
|
||
|
|
requestedAgentEnv: { FOO: "req", BAR: "req" },
|
||
|
|
});
|
||
|
|
assert.equal(env.PATH, "/usr/bin");
|
||
|
|
assert.equal(env.FOO, "req");
|
||
|
|
assert.equal(env.BAR, "req");
|
||
|
|
});
|
||
|
|
|
||
|
|
test("filters dangerous env keys from requestedAgentEnv", () => {
|
||
|
|
const env = buildSdkAgentEnv({
|
||
|
|
shellEnv: { PATH: "/usr/bin" },
|
||
|
|
requestedAgentEnv: { LD_PRELOAD: "/evil.so", NODE_OPTIONS: "--x", BASH_FUNC_foo: "y", SAFE: "ok" },
|
||
|
|
});
|
||
|
|
assert.equal(env.LD_PRELOAD, undefined);
|
||
|
|
assert.equal(env.NODE_OPTIONS, undefined);
|
||
|
|
assert.equal(env.BASH_FUNC_foo, undefined);
|
||
|
|
assert.equal(env.SAFE, "ok");
|
||
|
|
});
|
||
|
|
|
||
|
|
test("filters dangerous env keys from shellEnv", () => {
|
||
|
|
const env = buildSdkAgentEnv({
|
||
|
|
shellEnv: { PATH: "/usr/bin", NODE_OPTIONS: "--require /evil.js", BASH_FUNC_x: "() { :; }", SAFE: "ok" },
|
||
|
|
requestedAgentEnv: {},
|
||
|
|
});
|
||
|
|
assert.equal(env.PATH, "/usr/bin");
|
||
|
|
assert.equal(env.NODE_OPTIONS, undefined);
|
||
|
|
assert.equal(env.BASH_FUNC_x, undefined);
|
||
|
|
assert.equal(env.SAFE, "ok");
|
||
|
|
});
|
||
|
|
|
||
|
|
test("isDangerousEnvKey flags blocklist and BASH_FUNC_ prefix", () => {
|
||
|
|
assert.equal(isDangerousEnvKey("DYLD_INSERT_LIBRARIES"), true);
|
||
|
|
assert.equal(isDangerousEnvKey("dyld_insert_libraries"), true);
|
||
|
|
assert.equal(isDangerousEnvKey("node_options"), true);
|
||
|
|
assert.equal(isDangerousEnvKey("BASH_FUNC_x%%"), true);
|
||
|
|
assert.equal(isDangerousEnvKey("bash_func_x%%"), true);
|
||
|
|
assert.equal(isDangerousEnvKey("PATH"), false);
|
||
|
|
});
|
||
|
|
|
||
|
|
test("applies withCliDiscoveryEnv hook", () => {
|
||
|
|
const env = buildSdkAgentEnv({
|
||
|
|
shellEnv: { PATH: "/usr/bin" },
|
||
|
|
requestedAgentEnv: {},
|
||
|
|
withCliDiscoveryEnv: (e) => ({ ...e, NETCATTY_TOOL_CLI_DISCOVERY: "/tmp/x.json" }),
|
||
|
|
});
|
||
|
|
assert.equal(env.NETCATTY_TOOL_CLI_DISCOVERY, "/tmp/x.json");
|
||
|
|
});
|
||
|
|
|
||
|
|
test("normalizes CLAUDE_CODE_EXECUTABLE via injected normalizer", () => {
|
||
|
|
const env = buildSdkAgentEnv({
|
||
|
|
shellEnv: { PATH: "/usr/bin" },
|
||
|
|
requestedAgentEnv: { CLAUDE_CODE_EXECUTABLE: "/old/claude" },
|
||
|
|
normalizeClaudeCodeExecutableEnv: (e) => ({ ...e, CLAUDE_CODE_EXECUTABLE: "/new/claude" }),
|
||
|
|
});
|
||
|
|
assert.equal(env.CLAUDE_CODE_EXECUTABLE, "/new/claude");
|
||
|
|
});
|