mirror of
https://github.com/Termix-SSH/Termix.git
synced 2026-10-09 13:21:47 +00:00
test: run the posix-only ai agent tests on linux only
This commit is contained in:
LukeGus committed
1 parent
bf817d8bd1
commit
7305a44b19
3 files changed
+170
-143
No files matched your search
@@ -12,6 +12,9 @@ import {
|
||||
import { providerPath } from "../../../src/backend/agents/routes.js";
|
||||
import { REMOTE_RUNNER } from "../../../src/backend/agents/remote-runner.js";
|
||||
|
||||
// These run sh, git and agent binaries the way a remote Linux host does.
|
||||
const posix = it.skipIf(process.platform === "win32");
|
||||
|
||||
describe("remote agent boundaries", () => {
|
||||
it("rejects shell syntax and invalid targets", () => {
|
||||
const start = {
|
||||
@@ -78,74 +81,78 @@ if(args[0]==='serve') {
|
||||
});
|
||||
`;
|
||||
for (const agent of ["pi", "claude", "codex", "opencode"] as const) {
|
||||
it(`${agent}: native protocol streams a turn and returns to ready`, async () => {
|
||||
const dir = await mkdtemp(join(tmpdir(), "termix-agent-test-"));
|
||||
const executable = join(dir, "fake-agent");
|
||||
const image = join(dir, "image.png");
|
||||
await writeFile(image, "image");
|
||||
await writeFile(executable, fake, { mode: 0o700 });
|
||||
const child = spawn(process.execPath, ["-e", REMOTE_RUNNER], {
|
||||
env: { ...process.env, HOME: dir },
|
||||
stdio: ["pipe", "pipe", "pipe"],
|
||||
});
|
||||
const events: Record<string, unknown>[] = [];
|
||||
let stderr = "";
|
||||
child.stderr.on("data", (d) => (stderr += d));
|
||||
const send = (m: unknown) => child.stdin.write(JSON.stringify(m) + "\n");
|
||||
try {
|
||||
await new Promise<void>((resolve, reject) => {
|
||||
const timer = setTimeout(
|
||||
() => reject(Error("timeout " + stderr + JSON.stringify(events))),
|
||||
12000,
|
||||
);
|
||||
let prompted = false;
|
||||
createInterface({ input: child.stdout }).on("line", (line) => {
|
||||
const m = JSON.parse(line);
|
||||
events.push(m);
|
||||
if (m.kind === "error") {
|
||||
clearTimeout(timer);
|
||||
reject(Error(m.text));
|
||||
}
|
||||
if (m.kind === "permission")
|
||||
send({ type: "answer", requestId: m.requestId, allow: true });
|
||||
if (m.kind === "status" && m.text === "ready") {
|
||||
if (!prompted) {
|
||||
prompted = true;
|
||||
send({
|
||||
type: "prompt",
|
||||
text: "hello",
|
||||
attachments: [{ path: image, mime: "image/png" }],
|
||||
});
|
||||
} else {
|
||||
clearTimeout(timer);
|
||||
resolve();
|
||||
}
|
||||
}
|
||||
});
|
||||
send({
|
||||
type: "start",
|
||||
config: {
|
||||
agent,
|
||||
id: "test-session",
|
||||
cwd: dir,
|
||||
executable,
|
||||
model: "test-model",
|
||||
proxyUrl: "http://127.0.0.1:1",
|
||||
token: "temporary-token",
|
||||
providerType:
|
||||
agent === "claude" ? "anthropic" : "openai_compatible",
|
||||
},
|
||||
});
|
||||
posix(
|
||||
`${agent}: native protocol streams a turn and returns to ready`,
|
||||
async () => {
|
||||
const dir = await mkdtemp(join(tmpdir(), "termix-agent-test-"));
|
||||
const executable = join(dir, "fake-agent");
|
||||
const image = join(dir, "image.png");
|
||||
await writeFile(image, "image");
|
||||
await writeFile(executable, fake, { mode: 0o700 });
|
||||
const child = spawn(process.execPath, ["-e", REMOTE_RUNNER], {
|
||||
env: { ...process.env, HOME: dir },
|
||||
stdio: ["pipe", "pipe", "pipe"],
|
||||
});
|
||||
expect(
|
||||
events.some((e) => e.kind === "text" && e.text === "verified"),
|
||||
).toBe(true);
|
||||
if (agent === "claude")
|
||||
expect(events.some((e) => e.kind === "permission")).toBe(true);
|
||||
} finally {
|
||||
send({ type: "stop" });
|
||||
await new Promise((resolve) => child.once("exit", resolve));
|
||||
await rm(dir, { recursive: true, force: true });
|
||||
}
|
||||
}, 15000);
|
||||
const events: Record<string, unknown>[] = [];
|
||||
let stderr = "";
|
||||
child.stderr.on("data", (d) => (stderr += d));
|
||||
const send = (m: unknown) => child.stdin.write(JSON.stringify(m) + "\n");
|
||||
try {
|
||||
await new Promise<void>((resolve, reject) => {
|
||||
const timer = setTimeout(
|
||||
() => reject(Error("timeout " + stderr + JSON.stringify(events))),
|
||||
12000,
|
||||
);
|
||||
let prompted = false;
|
||||
createInterface({ input: child.stdout }).on("line", (line) => {
|
||||
const m = JSON.parse(line);
|
||||
events.push(m);
|
||||
if (m.kind === "error") {
|
||||
clearTimeout(timer);
|
||||
reject(Error(m.text));
|
||||
}
|
||||
if (m.kind === "permission")
|
||||
send({ type: "answer", requestId: m.requestId, allow: true });
|
||||
if (m.kind === "status" && m.text === "ready") {
|
||||
if (!prompted) {
|
||||
prompted = true;
|
||||
send({
|
||||
type: "prompt",
|
||||
text: "hello",
|
||||
attachments: [{ path: image, mime: "image/png" }],
|
||||
});
|
||||
} else {
|
||||
clearTimeout(timer);
|
||||
resolve();
|
||||
}
|
||||
}
|
||||
});
|
||||
send({
|
||||
type: "start",
|
||||
config: {
|
||||
agent,
|
||||
id: "test-session",
|
||||
cwd: dir,
|
||||
executable,
|
||||
model: "test-model",
|
||||
proxyUrl: "http://127.0.0.1:1",
|
||||
token: "temporary-token",
|
||||
providerType:
|
||||
agent === "claude" ? "anthropic" : "openai_compatible",
|
||||
},
|
||||
});
|
||||
});
|
||||
expect(
|
||||
events.some((e) => e.kind === "text" && e.text === "verified"),
|
||||
).toBe(true);
|
||||
if (agent === "claude")
|
||||
expect(events.some((e) => e.kind === "permission")).toBe(true);
|
||||
} finally {
|
||||
send({ type: "stop" });
|
||||
await new Promise((resolve) => child.once("exit", resolve));
|
||||
await rm(dir, { recursive: true, force: true });
|
||||
}
|
||||
},
|
||||
15000,
|
||||
);
|
||||
}
|
||||
@@ -8,6 +8,9 @@ import {
|
||||
forwardingScript,
|
||||
} from "../../../src/backend/agents/forwarding.js";
|
||||
|
||||
// These run sh, git and agent binaries the way a remote Linux host does.
|
||||
const posix = it.skipIf(process.platform === "win32");
|
||||
|
||||
async function fixture(mode = "no") {
|
||||
const dir = await mkdtemp(join(tmpdir(), "termix-forwarding-"));
|
||||
const bin = join(dir, "bin");
|
||||
@@ -53,22 +56,25 @@ exit 0
|
||||
};
|
||||
}
|
||||
|
||||
it("adds a scoped rule before existing Match blocks and is idempotent", async () => {
|
||||
const f = await fixture();
|
||||
try {
|
||||
expect(f.run()).toContain("Enabled loopback remote forwarding");
|
||||
const config = await f.config();
|
||||
expect(config).toContain(
|
||||
"AllowTcpForwarding no\n# BEGIN Termix Agent root 10.1.1.35\nMatch User root Address 10.1.1.35\n AllowTcpForwarding remote\n PermitListen 127.0.0.1:*\n GatewayPorts no",
|
||||
);
|
||||
expect(config).toContain("Match Address 10.1.1.3\n DenyUsers root");
|
||||
expect(f.run()).toContain("already allowed");
|
||||
expect(await f.config()).toBe(config);
|
||||
} finally {
|
||||
await f.close();
|
||||
}
|
||||
});
|
||||
it("preserves existing local forwarding", async () => {
|
||||
posix(
|
||||
"adds a scoped rule before existing Match blocks and is idempotent",
|
||||
async () => {
|
||||
const f = await fixture();
|
||||
try {
|
||||
expect(f.run()).toContain("Enabled loopback remote forwarding");
|
||||
const config = await f.config();
|
||||
expect(config).toContain(
|
||||
"AllowTcpForwarding no\n# BEGIN Termix Agent root 10.1.1.35\nMatch User root Address 10.1.1.35\n AllowTcpForwarding remote\n PermitListen 127.0.0.1:*\n GatewayPorts no",
|
||||
);
|
||||
expect(config).toContain("Match Address 10.1.1.3\n DenyUsers root");
|
||||
expect(f.run()).toContain("already allowed");
|
||||
expect(await f.config()).toBe(config);
|
||||
} finally {
|
||||
await f.close();
|
||||
}
|
||||
},
|
||||
);
|
||||
posix("preserves existing local forwarding", async () => {
|
||||
const f = await fixture("local");
|
||||
try {
|
||||
f.run();
|
||||
|
||||
@@ -11,6 +11,9 @@ import { tmpdir } from "node:os";
|
||||
import { join } from "node:path";
|
||||
import { spawnSync, execFileSync } from "node:child_process";
|
||||
import { REMOTE_WORKSPACE } from "../../../src/backend/agents/workspace.js";
|
||||
|
||||
// These run sh, git and agent binaries the way a remote Linux host does.
|
||||
const posix = it.skipIf(process.platform === "win32");
|
||||
let home: string, cwd: string;
|
||||
beforeEach(() => {
|
||||
home = mkdtempSync(join(tmpdir(), "termix-workspace-"));
|
||||
@@ -34,61 +37,72 @@ function git(...args: string[]) {
|
||||
stdio: ["pipe", "pipe", "pipe"],
|
||||
});
|
||||
}
|
||||
it("uploads an image without trusting the caller's MIME type and preserves exact bytes", () => {
|
||||
const data = Buffer.from([137, 80, 78, 71, 13, 10, 26, 10, 0, 1, 2]);
|
||||
const a = run({
|
||||
operation: "upload",
|
||||
name: "image.png",
|
||||
data: data.toString("base64"),
|
||||
});
|
||||
expect(a.mime).toBe("image/png");
|
||||
expect(readFileSync(a.path)).toEqual(data);
|
||||
expect(
|
||||
a.path.startsWith(
|
||||
join(home, ".local/state/termix-agents/test/attachments"),
|
||||
),
|
||||
).toBe(true);
|
||||
});
|
||||
it("rejects oversized files, directories and references outside the workspace", () => {
|
||||
writeFileSync(join(home, "outside"), "secret");
|
||||
symlinkSync(join(home, "outside"), join(cwd, "escape"));
|
||||
writeFileSync(join(cwd, "large"), Buffer.alloc(1024 * 1024 + 1));
|
||||
for (const path of ["../outside", "escape", "large", "."])
|
||||
expect(() => run({ operation: "reference", path })).toThrow();
|
||||
});
|
||||
it("shows staged, unstaged and untracked changes and creates an isolated branch", () => {
|
||||
git("init");
|
||||
git("config", "user.name", "Test");
|
||||
git("config", "user.email", "test@example.com");
|
||||
mkdirSync(join(cwd, "nested"));
|
||||
writeFileSync(join(cwd, "nested", "deleted.txt"), "nested base\n");
|
||||
writeFileSync(join(cwd, "file.txt"), "base\n");
|
||||
git("add", ".");
|
||||
git("commit", "-m", "initial");
|
||||
writeFileSync(join(cwd, "file.txt"), "staged\n");
|
||||
git("add", ".");
|
||||
writeFileSync(join(cwd, "file.txt"), "working\n");
|
||||
writeFileSync(join(cwd, "new.txt"), "untracked");
|
||||
expect(run({ operation: "status" }).files).toContainEqual({
|
||||
status: "??",
|
||||
path: "new.txt",
|
||||
});
|
||||
const diff = run({ operation: "diff", path: "file.txt" }).diff;
|
||||
expect(diff).toContain("+working");
|
||||
expect(diff).toContain("+staged");
|
||||
expect(run({ operation: "diff", path: "new.txt" }).diff).toContain(
|
||||
"+untracked",
|
||||
);
|
||||
const wt = run({ operation: "worktree", branch: "termix/test" });
|
||||
expect(readFileSync(join(wt.path, "file.txt"), "utf8")).toBe("base\n");
|
||||
expect(readFileSync(join(cwd, "file.txt"), "utf8")).toBe("working\n");
|
||||
expect(() => run({ operation: "worktree", branch: "termix/test" })).toThrow();
|
||||
rmSync(join(cwd, "nested"), { recursive: true });
|
||||
expect(run({ operation: "diff", path: "nested/deleted.txt" }).diff).toContain(
|
||||
"-nested base",
|
||||
);
|
||||
rmSync(join(cwd, "file.txt"));
|
||||
expect(run({ operation: "diff", path: "file.txt" }).diff).toContain(
|
||||
"-staged",
|
||||
);
|
||||
});
|
||||
posix(
|
||||
"uploads an image without trusting the caller's MIME type and preserves exact bytes",
|
||||
() => {
|
||||
const data = Buffer.from([137, 80, 78, 71, 13, 10, 26, 10, 0, 1, 2]);
|
||||
const a = run({
|
||||
operation: "upload",
|
||||
name: "image.png",
|
||||
data: data.toString("base64"),
|
||||
});
|
||||
expect(a.mime).toBe("image/png");
|
||||
expect(readFileSync(a.path)).toEqual(data);
|
||||
expect(
|
||||
a.path.startsWith(
|
||||
join(home, ".local/state/termix-agents/test/attachments"),
|
||||
),
|
||||
).toBe(true);
|
||||
},
|
||||
);
|
||||
posix(
|
||||
"rejects oversized files, directories and references outside the workspace",
|
||||
() => {
|
||||
writeFileSync(join(home, "outside"), "secret");
|
||||
symlinkSync(join(home, "outside"), join(cwd, "escape"));
|
||||
writeFileSync(join(cwd, "large"), Buffer.alloc(1024 * 1024 + 1));
|
||||
for (const path of ["../outside", "escape", "large", "."])
|
||||
expect(() => run({ operation: "reference", path })).toThrow();
|
||||
},
|
||||
);
|
||||
posix(
|
||||
"shows staged, unstaged and untracked changes and creates an isolated branch",
|
||||
() => {
|
||||
git("init");
|
||||
git("config", "user.name", "Test");
|
||||
git("config", "user.email", "test@example.com");
|
||||
mkdirSync(join(cwd, "nested"));
|
||||
writeFileSync(join(cwd, "nested", "deleted.txt"), "nested base\n");
|
||||
writeFileSync(join(cwd, "file.txt"), "base\n");
|
||||
git("add", ".");
|
||||
git("commit", "-m", "initial");
|
||||
writeFileSync(join(cwd, "file.txt"), "staged\n");
|
||||
git("add", ".");
|
||||
writeFileSync(join(cwd, "file.txt"), "working\n");
|
||||
writeFileSync(join(cwd, "new.txt"), "untracked");
|
||||
expect(run({ operation: "status" }).files).toContainEqual({
|
||||
status: "??",
|
||||
path: "new.txt",
|
||||
});
|
||||
const diff = run({ operation: "diff", path: "file.txt" }).diff;
|
||||
expect(diff).toContain("+working");
|
||||
expect(diff).toContain("+staged");
|
||||
expect(run({ operation: "diff", path: "new.txt" }).diff).toContain(
|
||||
"+untracked",
|
||||
);
|
||||
const wt = run({ operation: "worktree", branch: "termix/test" });
|
||||
expect(readFileSync(join(wt.path, "file.txt"), "utf8")).toBe("base\n");
|
||||
expect(readFileSync(join(cwd, "file.txt"), "utf8")).toBe("working\n");
|
||||
expect(() =>
|
||||
run({ operation: "worktree", branch: "termix/test" }),
|
||||
).toThrow();
|
||||
rmSync(join(cwd, "nested"), { recursive: true });
|
||||
expect(
|
||||
run({ operation: "diff", path: "nested/deleted.txt" }).diff,
|
||||
).toContain("-nested base");
|
||||
rmSync(join(cwd, "file.txt"));
|
||||
expect(run({ operation: "diff", path: "file.txt" }).diff).toContain(
|
||||
"-staged",
|
||||
);
|
||||
},
|
||||
);
|
||||
Reference in new issue
Block a user