flowent 0.0.1 → 0.0.5

package/backend/tests/unit/sandbox/test_sandbox_tools.py

@@ -0,0 +1,78 @@
+from flowent.sandbox import build_bwrap_cmd
+from flowent.settings import Settings
+
+
+def test_build_bwrap_cmd_mounts_cwd_read_only_and_chdirs_into_it(tmp_path):
+    cmd = build_bwrap_cmd([], "pwd", cwd=tmp_path)
+
+    assert cmd[:13] == [
+        "bwrap",
+        "--ro-bind",
+        "/",
+        "/",
+        "--dev",
+        "/dev",
+        "--proc",
+        "/proc",
+        "--tmpfs",
+        "/tmp",
+        "--ro-bind",
+        str(tmp_path),
+        str(tmp_path),
+    ]
+    assert "--bind" not in cmd
+    assert "--unshare-net" in cmd
+    assert "--chdir" in cmd
+    chdir_index = cmd.index("--chdir")
+    assert cmd[chdir_index : chdir_index + 2] == ["--chdir", str(tmp_path)]
+    assert cmd[-5:] == ["--new-session", "--", "bash", "-c", "pwd"]
+
+
+def test_build_bwrap_cmd_binds_write_dirs_and_preserves_network_when_allowed(tmp_path):
+    writable = tmp_path / "workspace"
+    writable.mkdir()
+
+    cmd = build_bwrap_cmd(
+        [str(writable)],
+        "pwd",
+        allow_network=True,
+        cwd=writable,
+    )
+
+    assert [
+        "--ro-bind",
+        str(writable),
+        str(writable),
+    ] in [cmd[index : index + 3] for index in range(len(cmd) - 2)]
+    bind_index = cmd.index("--bind")
+    assert cmd[bind_index : bind_index + 3] == [
+        "--bind",
+        str(writable),
+        str(writable),
+    ]
+    assert "--unshare-net" not in cmd
+    chdir_index = cmd.index("--chdir")
+    assert cmd[chdir_index : chdir_index + 2] == ["--chdir", str(writable)]
+    assert cmd[-3:] == ["bash", "-c", "pwd"]
+
+
+def test_build_bwrap_cmd_resolves_relative_write_dirs_against_working_dir(
+    monkeypatch,
+    tmp_path,
+):
+    writable = tmp_path / "workspace"
+    writable.mkdir()
+
+    monkeypatch.setattr(
+        "flowent.settings.get_settings",
+        lambda: Settings(working_dir=str(tmp_path)),
+    )
+
+    cmd = build_bwrap_cmd(["./workspace"], "pwd", cwd=tmp_path)
+
+    bind_index = cmd.index("--bind")
+    assert cmd[bind_index : bind_index + 3] == [
+        "--bind",
+        str(writable),
+        str(writable),
+    ]

package/backend/tests/unit/security/test_security.py

@@ -0,0 +1,124 @@
+from flowent.agent import Agent
+from flowent.models import NodeConfig, NodeType
+from flowent.security import authorize
+from flowent.settings import Settings
+
+
+def test_authorize_allows_edit_within_write_dirs(tmp_path):
+    target = tmp_path / "allowed.txt"
+    agent = Agent(
+        NodeConfig(
+            node_type=NodeType.AGENT,
+            tools=["edit"],
+            write_dirs=[str(tmp_path)],
+        )
+    )
+
+    result = authorize("edit", agent, {"path": str(target)})
+
+    assert result is None
+
+
+def test_authorize_rejects_edit_when_write_dirs_empty(tmp_path):
+    agent = Agent(
+        NodeConfig(
+            node_type=NodeType.AGENT,
+            tools=["edit"],
+            write_dirs=[],
+        )
+    )
+
+    result = authorize("edit", agent, {"path": str(tmp_path / "blocked.txt")})
+
+    assert result == "Write access is disabled for this workflow"
+
+
+def test_authorize_rejects_edit_outside_write_dirs(tmp_path):
+    allowed = tmp_path / "allowed"
+    allowed.mkdir()
+    blocked = tmp_path / "blocked.txt"
+    agent = Agent(
+        NodeConfig(
+            node_type=NodeType.AGENT,
+            tools=["edit"],
+            write_dirs=[str(allowed)],
+        )
+    )
+
+    result = authorize("edit", agent, {"path": str(blocked)})
+
+    assert result == f"Path not in write_dirs: {blocked}"
+
+
+def test_authorize_resolves_relative_write_dirs_against_working_dir(
+    monkeypatch,
+    tmp_path,
+):
+    allowed = tmp_path / "allowed"
+    allowed.mkdir()
+    agent = Agent(
+        NodeConfig(
+            node_type=NodeType.AGENT,
+            tools=["edit"],
+            write_dirs=["./allowed"],
+        )
+    )
+
+    monkeypatch.setattr(
+        "flowent.settings.get_settings",
+        lambda: Settings(working_dir=str(tmp_path)),
+    )
+
+    result = authorize("edit", agent, {"path": str(allowed / "file.txt")})
+
+    assert result is None
+
+
+def test_authorize_allows_fetch_when_network_enabled():
+    agent = Agent(
+        NodeConfig(
+            node_type=NodeType.AGENT,
+            tools=["fetch"],
+            allow_network=True,
+        )
+    )
+
+    result = authorize("fetch", agent, {"url": "https://example.com"})
+
+    assert result is None
+
+
+def test_authorize_rejects_fetch_when_network_disabled():
+    agent = Agent(
+        NodeConfig(
+            node_type=NodeType.AGENT,
+            tools=["fetch"],
+            allow_network=False,
+        )
+    )
+
+    result = authorize("fetch", agent, {"url": "https://example.com"})
+
+    assert result == "Network access is disabled for this workflow"
+
+
+def test_authorize_allows_other_tools_by_default():
+    agent = Agent(NodeConfig(node_type=NodeType.AGENT, tools=["exec"]))
+
+    result = authorize("exec", agent, {"command": "pwd"})
+
+    assert result is None
+
+
+def test_authorize_rejects_assistant_only_tools_for_workflow_nodes():
+    agent = Agent(
+        NodeConfig(
+            node_type=NodeType.AGENT,
+            role_name="Worker",
+            tools=["list_workflows"],
+        )
+    )
+
+    result = authorize("list_workflows", agent, {})
+
+    assert result == "Ask the Assistant to manage workflows or settings"