[Init] Initial commit - NetMesh terminal manager

electron/bridges/aiBridge/sdk/env.test.cjs

@@ -0,0 +1,62 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const { buildSdkAgentEnv, DANGEROUS_ENV_KEYS, isDangerousEnvKey } = require("./env.cjs");
+
+test("merges shellEnv + requestedAgentEnv (requested wins)", () => {
+  const env = buildSdkAgentEnv({
+    shellEnv: { PATH: "/usr/bin", FOO: "shell" },
+    requestedAgentEnv: { FOO: "req", BAR: "req" },
+  });
+  assert.equal(env.PATH, "/usr/bin");
+  assert.equal(env.FOO, "req");
+  assert.equal(env.BAR, "req");
+});
+
+test("filters dangerous env keys from requestedAgentEnv", () => {
+  const env = buildSdkAgentEnv({
+    shellEnv: { PATH: "/usr/bin" },
+    requestedAgentEnv: { LD_PRELOAD: "/evil.so", NODE_OPTIONS: "--x", BASH_FUNC_foo: "y", SAFE: "ok" },
+  });
+  assert.equal(env.LD_PRELOAD, undefined);
+  assert.equal(env.NODE_OPTIONS, undefined);
+  assert.equal(env.BASH_FUNC_foo, undefined);
+  assert.equal(env.SAFE, "ok");
+});
+
+test("filters dangerous env keys from shellEnv", () => {
+  const env = buildSdkAgentEnv({
+    shellEnv: { PATH: "/usr/bin", NODE_OPTIONS: "--require /evil.js", BASH_FUNC_x: "() { :; }", SAFE: "ok" },
+    requestedAgentEnv: {},
+  });
+  assert.equal(env.PATH, "/usr/bin");
+  assert.equal(env.NODE_OPTIONS, undefined);
+  assert.equal(env.BASH_FUNC_x, undefined);
+  assert.equal(env.SAFE, "ok");
+});
+
+test("isDangerousEnvKey flags blocklist and BASH_FUNC_ prefix", () => {
+  assert.equal(isDangerousEnvKey("DYLD_INSERT_LIBRARIES"), true);
+  assert.equal(isDangerousEnvKey("dyld_insert_libraries"), true);
+  assert.equal(isDangerousEnvKey("node_options"), true);
+  assert.equal(isDangerousEnvKey("BASH_FUNC_x%%"), true);
+  assert.equal(isDangerousEnvKey("bash_func_x%%"), true);
+  assert.equal(isDangerousEnvKey("PATH"), false);
+});
+
+test("applies withCliDiscoveryEnv hook", () => {
+  const env = buildSdkAgentEnv({
+    shellEnv: { PATH: "/usr/bin" },
+    requestedAgentEnv: {},
+    withCliDiscoveryEnv: (e) => ({ ...e, NETCATTY_TOOL_CLI_DISCOVERY: "/tmp/x.json" }),
+  });
+  assert.equal(env.NETCATTY_TOOL_CLI_DISCOVERY, "/tmp/x.json");
+});
+
+test("normalizes CLAUDE_CODE_EXECUTABLE via injected normalizer", () => {
+  const env = buildSdkAgentEnv({
+    shellEnv: { PATH: "/usr/bin" },
+    requestedAgentEnv: { CLAUDE_CODE_EXECUTABLE: "/old/claude" },
+    normalizeClaudeCodeExecutableEnv: (e) => ({ ...e, CLAUDE_CODE_EXECUTABLE: "/new/claude" }),
+  });
+  assert.equal(env.CLAUDE_CODE_EXECUTABLE, "/new/claude");
+});