flowent 0.0.6 → 0.0.10

package/backend/tests/unit/sandbox/test_sandbox_tools.py

@@ -1,78 +0,0 @@
-from flowent.sandbox import build_bwrap_cmd
-from flowent.settings import Settings
-
-
-def test_build_bwrap_cmd_mounts_cwd_read_only_and_chdirs_into_it(tmp_path):
-    cmd = build_bwrap_cmd([], "pwd", cwd=tmp_path)
-
-    assert cmd[:13] == [
-        "bwrap",
-        "--ro-bind",
-        "/",
-        "/",
-        "--dev",
-        "/dev",
-        "--proc",
-        "/proc",
-        "--tmpfs",
-        "/tmp",
-        "--ro-bind",
-        str(tmp_path),
-        str(tmp_path),
-    ]
-    assert "--bind" not in cmd
-    assert "--unshare-net" in cmd
-    assert "--chdir" in cmd
-    chdir_index = cmd.index("--chdir")
-    assert cmd[chdir_index : chdir_index + 2] == ["--chdir", str(tmp_path)]
-    assert cmd[-5:] == ["--new-session", "--", "bash", "-c", "pwd"]
-
-
-def test_build_bwrap_cmd_binds_write_dirs_and_preserves_network_when_allowed(tmp_path):
-    writable = tmp_path / "workspace"
-    writable.mkdir()
-
-    cmd = build_bwrap_cmd(
-        [str(writable)],
-        "pwd",
-        allow_network=True,
-        cwd=writable,
-    )
-
-    assert [
-        "--ro-bind",
-        str(writable),
-        str(writable),
-    ] in [cmd[index : index + 3] for index in range(len(cmd) - 2)]
-    bind_index = cmd.index("--bind")
-    assert cmd[bind_index : bind_index + 3] == [
-        "--bind",
-        str(writable),
-        str(writable),
-    ]
-    assert "--unshare-net" not in cmd
-    chdir_index = cmd.index("--chdir")
-    assert cmd[chdir_index : chdir_index + 2] == ["--chdir", str(writable)]
-    assert cmd[-3:] == ["bash", "-c", "pwd"]
-
-
-def test_build_bwrap_cmd_resolves_relative_write_dirs_against_working_dir(
-    monkeypatch,
-    tmp_path,
-):
-    writable = tmp_path / "workspace"
-    writable.mkdir()
-
-    monkeypatch.setattr(
-        "flowent.settings.get_settings",
-        lambda: Settings(working_dir=str(tmp_path)),
-    )
-
-    cmd = build_bwrap_cmd(["./workspace"], "pwd", cwd=tmp_path)
-
-    bind_index = cmd.index("--bind")
-    assert cmd[bind_index : bind_index + 3] == [
-        "--bind",
-        str(writable),
-        str(writable),
-    ]

package/backend/tests/unit/security/test_security.py

@@ -1,124 +0,0 @@
-from flowent.agent import Agent
-from flowent.models import NodeConfig, NodeType
-from flowent.security import authorize
-from flowent.settings import Settings
-
-
-def test_authorize_allows_edit_within_write_dirs(tmp_path):
-    target = tmp_path / "allowed.txt"
-    agent = Agent(
-        NodeConfig(
-            node_type=NodeType.AGENT,
-            tools=["edit"],
-            write_dirs=[str(tmp_path)],
-        )
-    )
-
-    result = authorize("edit", agent, {"path": str(target)})
-
-    assert result is None
-
-
-def test_authorize_rejects_edit_when_write_dirs_empty(tmp_path):
-    agent = Agent(
-        NodeConfig(
-            node_type=NodeType.AGENT,
-            tools=["edit"],
-            write_dirs=[],
-        )
-    )
-
-    result = authorize("edit", agent, {"path": str(tmp_path / "blocked.txt")})
-
-    assert result == "Write access is disabled for this workflow"
-
-
-def test_authorize_rejects_edit_outside_write_dirs(tmp_path):
-    allowed = tmp_path / "allowed"
-    allowed.mkdir()
-    blocked = tmp_path / "blocked.txt"
-    agent = Agent(
-        NodeConfig(
-            node_type=NodeType.AGENT,
-            tools=["edit"],
-            write_dirs=[str(allowed)],
-        )
-    )
-
-    result = authorize("edit", agent, {"path": str(blocked)})
-
-    assert result == f"Path not in write_dirs: {blocked}"
-
-
-def test_authorize_resolves_relative_write_dirs_against_working_dir(
-    monkeypatch,
-    tmp_path,
-):
-    allowed = tmp_path / "allowed"
-    allowed.mkdir()
-    agent = Agent(
-        NodeConfig(
-            node_type=NodeType.AGENT,
-            tools=["edit"],
-            write_dirs=["./allowed"],
-        )
-    )
-
-    monkeypatch.setattr(
-        "flowent.settings.get_settings",
-        lambda: Settings(working_dir=str(tmp_path)),
-    )
-
-    result = authorize("edit", agent, {"path": str(allowed / "file.txt")})
-
-    assert result is None
-
-
-def test_authorize_allows_fetch_when_network_enabled():
-    agent = Agent(
-        NodeConfig(
-            node_type=NodeType.AGENT,
-            tools=["fetch"],
-            allow_network=True,
-        )
-    )
-
-    result = authorize("fetch", agent, {"url": "https://example.com"})
-
-    assert result is None
-
-
-def test_authorize_rejects_fetch_when_network_disabled():
-    agent = Agent(
-        NodeConfig(
-            node_type=NodeType.AGENT,
-            tools=["fetch"],
-            allow_network=False,
-        )
-    )
-
-    result = authorize("fetch", agent, {"url": "https://example.com"})
-
-    assert result == "Network access is disabled for this workflow"
-
-
-def test_authorize_allows_other_tools_by_default():
-    agent = Agent(NodeConfig(node_type=NodeType.AGENT, tools=["exec"]))
-
-    result = authorize("exec", agent, {"command": "pwd"})
-
-    assert result is None
-
-
-def test_authorize_rejects_assistant_only_tools_for_workflow_nodes():
-    agent = Agent(
-        NodeConfig(
-            node_type=NodeType.AGENT,
-            role_name="Worker",
-            tools=["list_workflows"],
-        )
-    )
-
-    result = authorize("list_workflows", agent, {})
-
-    assert result == "Ask the Assistant to manage workflows or settings"