@nomicfoundation/edr 0.12.0-next.3 → 0.12.0-next.4

package/index.d.ts

@@ -812,14 +812,36 @@ export interface PathPermission {
   /** The targeted path guarded by the permission */
   path: string
 }
-/** Determines the status of file system access */
+/**
+ * Determines the level of file system access for the given path.
+ *
+ * Exact path matching is used for file permissions. Prefix matching is used
+ * for directory permissions.
+ *
+ * Giving write access to configuration files, source files or executables
+ * in a project is considered dangerous, because it can be used by malicious
+ * Solidity dependencies to escape the EVM sandbox. It is therefore
+ * recommended to give write access to specific safe files only. If write
+ * access to a directory is needed, please make sure that it doesn't contain
+ * configuration files, source files or executables neither in the top level
+ * directory, nor in any subdirectories.
+*/
 export enum FsAccessPermission {
-  /** FS access is allowed with `read` + `write` permission */
-  ReadWrite = 0,
-  /** Only reading is allowed */
-  Read = 1,
-  /** Only writing is allowed */
-  Write = 2
+  /** Allows reading and writing the file */
+  ReadWriteFile = 0,
+  /** Only allows reading the file */
+  ReadFile = 1,
+  /** Only allows writing the file */
+  WriteFile = 2,
+  /**
+   * Allows reading and writing all files in the directory and its
+   * subdirectories
+   */
+  DangerouslyReadWriteDirectory = 3,
+  /** Allows reading all files in the directory and its subdirectories */
+  ReadDirectory = 4,
+  /** Allows writing all files in the directory and its subdirectories */
+  DangerouslyWriteDirectory = 5
 }
 export interface AddressLabel {
   /** The address to label */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nomicfoundation/edr",
-  "version": "0.12.0-next.3",
+  "version": "0.12.0-next.4",
   "devDependencies": {
     "@napi-rs/cli": "^2.18.4",
     "@nomicfoundation/ethereumjs-util": "^9.0.4",
@@ -59,13 +59,13 @@
   "repository": "NomicFoundation/edr.git",
   "types": "index.d.ts",
   "optionalDependencies": {
-    "@nomicfoundation/edr-darwin-arm64": "0.12.0-next.3",
-    "@nomicfoundation/edr-darwin-x64": "0.12.0-next.3",
-    "@nomicfoundation/edr-linux-arm64-gnu": "0.12.0-next.3",
-    "@nomicfoundation/edr-linux-arm64-musl": "0.12.0-next.3",
-    "@nomicfoundation/edr-linux-x64-gnu": "0.12.0-next.3",
-    "@nomicfoundation/edr-linux-x64-musl": "0.12.0-next.3",
-    "@nomicfoundation/edr-win32-x64-msvc": "0.12.0-next.3"
+    "@nomicfoundation/edr-darwin-arm64": "0.12.0-next.4",
+    "@nomicfoundation/edr-darwin-x64": "0.12.0-next.4",
+    "@nomicfoundation/edr-linux-arm64-gnu": "0.12.0-next.4",
+    "@nomicfoundation/edr-linux-arm64-musl": "0.12.0-next.4",
+    "@nomicfoundation/edr-linux-x64-gnu": "0.12.0-next.4",
+    "@nomicfoundation/edr-linux-x64-musl": "0.12.0-next.4",
+    "@nomicfoundation/edr-win32-x64-msvc": "0.12.0-next.4"
   },
   "scripts": {
     "artifacts": "napi artifacts",

package/src/mock/time.rs

@@ -1,7 +1,10 @@
 use std::sync::Arc;
 
+use edr_eth::{spec::ChainSpec, B256};
+use edr_evm::spec::RuntimeSpec;
 use edr_generic::GenericChainSpec;
 use edr_napi_core::logger::Logger;
+use edr_rpc_eth::RpcSpec;
 use edr_solidity::contract_decoder::ContractDecoder;
 use napi::{bindgen_prelude::BigInt, tokio::runtime, Env, JsObject};
 use napi_derive::napi;
@@ -106,7 +109,15 @@ pub fn create_provider_with_mock_timer(
             edr_provider::Provider::<GenericChainSpec, Arc<edr_provider::time::MockTime>>::new(
                 runtime.clone(),
                 Box::new(logger),
-                Box::new(move |event| subscription_callback.call(event)),
+                Box::new(move |event| {
+                    let event = edr_napi_core::subscription::SubscriptionEvent::new::<
+                        <GenericChainSpec as RuntimeSpec>::Block,
+                        <GenericChainSpec as RpcSpec>::RpcBlock<B256>,
+                        <GenericChainSpec as ChainSpec>::SignedTransaction,
+                    >(event);
+
+                    subscription_callback.call(event);
+                }),
                 provider_config,
                 contract_decoder.clone(),
                 timer,

package/src/solidity_tests/config.rs

@@ -657,24 +657,55 @@ impl From<PathPermission> for foundry_cheatcodes::PathPermission {
     }
 }
 
-/// Determines the status of file system access
+/**
+ * Determines the level of file system access for the given path.
+ *
+ * Exact path matching is used for file permissions. Prefix matching is used
+ * for directory permissions.
+ *
+ * Giving write access to configuration files, source files or executables
+ * in a project is considered dangerous, because it can be used by malicious
+ * Solidity dependencies to escape the EVM sandbox. It is therefore
+ * recommended to give write access to specific safe files only. If write
+ * access to a directory is needed, please make sure that it doesn't contain
+ * configuration files, source files or executables neither in the top level
+ * directory, nor in any subdirectories.
+ */
 #[napi]
 #[derive(Debug, serde::Serialize)]
 pub enum FsAccessPermission {
-    /// FS access is allowed with `read` + `write` permission
-    ReadWrite,
-    /// Only reading is allowed
-    Read,
-    /// Only writing is allowed
-    Write,
+    /// Allows reading and writing the file
+    ReadWriteFile,
+    /// Only allows reading the file
+    ReadFile,
+    /// Only allows writing the file
+    WriteFile,
+    /// Allows reading and writing all files in the directory and its
+    /// subdirectories
+    DangerouslyReadWriteDirectory,
+    /// Allows reading all files in the directory and its subdirectories
+    ReadDirectory,
+    /// Allows writing all files in the directory and its subdirectories
+    DangerouslyWriteDirectory,
 }
 
 impl From<FsAccessPermission> for foundry_cheatcodes::FsAccessPermission {
     fn from(value: FsAccessPermission) -> Self {
         match value {
-            FsAccessPermission::ReadWrite => foundry_cheatcodes::FsAccessPermission::ReadWrite,
-            FsAccessPermission::Read => foundry_cheatcodes::FsAccessPermission::Read,
-            FsAccessPermission::Write => foundry_cheatcodes::FsAccessPermission::Write,
+            FsAccessPermission::ReadWriteFile => {
+                foundry_cheatcodes::FsAccessPermission::ReadWriteFile
+            }
+            FsAccessPermission::ReadFile => foundry_cheatcodes::FsAccessPermission::ReadFile,
+            FsAccessPermission::WriteFile => foundry_cheatcodes::FsAccessPermission::WriteFile,
+            FsAccessPermission::DangerouslyReadWriteDirectory => {
+                foundry_cheatcodes::FsAccessPermission::DangerouslyReadWriteDirectory
+            }
+            FsAccessPermission::ReadDirectory => {
+                foundry_cheatcodes::FsAccessPermission::ReadDirectory
+            }
+            FsAccessPermission::DangerouslyWriteDirectory => {
+                foundry_cheatcodes::FsAccessPermission::DangerouslyWriteDirectory
+            }
         }
     }
 }