82 lines
2.3 KiB
TypeScript
82 lines
2.3 KiB
TypeScript
import { describe, expect, it } from "vitest";
|
|
import { buildEmbeddedSandboxInfo } from "./pi-embedded-runner.js";
|
|
import type { SandboxContext } from "./sandbox.js";
|
|
|
|
function createSandboxContext(overrides?: Partial<SandboxContext>): SandboxContext {
|
|
const base = {
|
|
enabled: true,
|
|
sessionKey: "session:test",
|
|
workspaceDir: "/tmp/openclaw-sandbox",
|
|
agentWorkspaceDir: "/tmp/openclaw-workspace",
|
|
workspaceAccess: "none",
|
|
containerName: "openclaw-sbx-test",
|
|
containerWorkdir: "/workspace",
|
|
docker: {
|
|
image: "openclaw-sandbox:bookworm-slim",
|
|
containerPrefix: "openclaw-sbx-",
|
|
workdir: "/workspace",
|
|
readOnlyRoot: true,
|
|
tmpfs: ["/tmp"],
|
|
network: "none",
|
|
user: "1000:1000",
|
|
capDrop: ["ALL"],
|
|
env: { LANG: "C.UTF-8" },
|
|
},
|
|
tools: {
|
|
allow: ["exec"],
|
|
deny: ["browser"],
|
|
},
|
|
browserAllowHostControl: true,
|
|
browser: {
|
|
bridgeUrl: "http://localhost:9222",
|
|
noVncUrl: "http://localhost:6080",
|
|
containerName: "openclaw-sbx-browser-test",
|
|
},
|
|
} satisfies SandboxContext;
|
|
return { ...base, ...overrides };
|
|
}
|
|
|
|
describe("buildEmbeddedSandboxInfo", () => {
|
|
it("returns undefined when sandbox is missing", () => {
|
|
expect(buildEmbeddedSandboxInfo()).toBeUndefined();
|
|
});
|
|
|
|
it("maps sandbox context into prompt info", () => {
|
|
const sandbox = createSandboxContext();
|
|
|
|
expect(buildEmbeddedSandboxInfo(sandbox)).toEqual({
|
|
enabled: true,
|
|
workspaceDir: "/tmp/openclaw-sandbox",
|
|
containerWorkspaceDir: "/workspace",
|
|
workspaceAccess: "none",
|
|
agentWorkspaceMount: undefined,
|
|
browserBridgeUrl: "http://localhost:9222",
|
|
browserNoVncUrl: "http://localhost:6080",
|
|
hostBrowserAllowed: true,
|
|
});
|
|
});
|
|
|
|
it("includes elevated info when allowed", () => {
|
|
const sandbox = createSandboxContext({
|
|
browserAllowHostControl: false,
|
|
browser: undefined,
|
|
});
|
|
|
|
expect(
|
|
buildEmbeddedSandboxInfo(sandbox, {
|
|
enabled: true,
|
|
allowed: true,
|
|
defaultLevel: "on",
|
|
}),
|
|
).toEqual({
|
|
enabled: true,
|
|
workspaceDir: "/tmp/openclaw-sandbox",
|
|
containerWorkspaceDir: "/workspace",
|
|
workspaceAccess: "none",
|
|
agentWorkspaceMount: undefined,
|
|
hostBrowserAllowed: false,
|
|
elevated: { allowed: true, defaultLevel: "on" },
|
|
});
|
|
});
|
|
});
|