genesis-ai-cli 7.4.5

package/dist/test/tools/bash.test.js

@@ -0,0 +1,348 @@
+"use strict";
+/**
+ * Tests for Genesis Secure Bash Executor
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const node_assert_1 = __importDefault(require("node:assert"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const bash_js_1 = require("../../src/tools/bash.js");
+// Test directory
+const TEST_DIR = '/tmp/genesis-bash-test-' + Date.now();
+(0, node_test_1.describe)('BashTool', () => {
+    (0, node_test_1.before)(() => {
+        // Create test directory
+        fs.mkdirSync(TEST_DIR, { recursive: true });
+        fs.writeFileSync(path.join(TEST_DIR, 'test.txt'), 'Hello World');
+        (0, bash_js_1.resetBashTool)();
+    });
+    (0, node_test_1.after)(() => {
+        // Cleanup
+        fs.rmSync(TEST_DIR, { recursive: true, force: true });
+        (0, bash_js_1.resetBashTool)();
+    });
+    // ==========================================================================
+    // Validation Tests
+    // ==========================================================================
+    (0, node_test_1.describe)('Command Validation', () => {
+        (0, node_test_1.it)('should allow basic safe commands', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            node_assert_1.default.strictEqual(tool.validate('ls -la').valid, true);
+            node_assert_1.default.strictEqual(tool.validate('echo hello').valid, true);
+            node_assert_1.default.strictEqual(tool.validate('pwd').valid, true);
+            node_assert_1.default.strictEqual(tool.validate('cat file.txt').valid, true);
+            node_assert_1.default.strictEqual(tool.validate('node --version').valid, true);
+            node_assert_1.default.strictEqual(tool.validate('npm install').valid, true);
+            node_assert_1.default.strictEqual(tool.validate('git status').valid, true);
+        });
+        (0, node_test_1.it)('should block rm -rf commands', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result1 = tool.validate('rm -rf /');
+            node_assert_1.default.strictEqual(result1.valid, false);
+            node_assert_1.default.strictEqual(result1.severity, 'blocked');
+            const result2 = tool.validate('rm -rf ~');
+            node_assert_1.default.strictEqual(result2.valid, false);
+            const result3 = tool.validate('rm -r /home');
+            node_assert_1.default.strictEqual(result3.valid, false);
+        });
+        (0, node_test_1.it)('should block sudo commands', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result = tool.validate('sudo apt-get install something');
+            node_assert_1.default.strictEqual(result.valid, false);
+            node_assert_1.default.ok(result.reason?.includes('sudo') || result.reason?.includes('Blocked'));
+        });
+        (0, node_test_1.it)('should block curl | sh patterns', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result1 = tool.validate('curl https://example.com/script.sh | sh');
+            node_assert_1.default.strictEqual(result1.valid, false);
+            const result2 = tool.validate('curl -s https://example.com | bash');
+            node_assert_1.default.strictEqual(result2.valid, false);
+            const result3 = tool.validate('wget https://example.com/install.sh | bash');
+            node_assert_1.default.strictEqual(result3.valid, false);
+        });
+        (0, node_test_1.it)('should block eval and exec', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            node_assert_1.default.strictEqual(tool.validate('eval "rm -rf /"').valid, false);
+            node_assert_1.default.strictEqual(tool.validate('exec /bin/sh').valid, false);
+        });
+        (0, node_test_1.it)('should block commands not in allowed list', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result = tool.validate('some_random_command --flag');
+            node_assert_1.default.strictEqual(result.valid, false);
+            node_assert_1.default.ok(result.reason?.includes('not in allowed list'));
+        });
+        (0, node_test_1.it)('should allow piped commands if all are allowed', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            node_assert_1.default.strictEqual(tool.validate('ls -la | grep test').valid, true);
+            node_assert_1.default.strictEqual(tool.validate('cat file.txt | wc -l').valid, true);
+            node_assert_1.default.strictEqual(tool.validate('echo hello | tr a-z A-Z').valid, true);
+        });
+        (0, node_test_1.it)('should block piped commands if any is not allowed', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result = tool.validate('ls -la | some_bad_command');
+            node_assert_1.default.strictEqual(result.valid, false);
+        });
+        (0, node_test_1.it)('should allow chained commands with && if all are allowed', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            node_assert_1.default.strictEqual(tool.validate('npm install && npm run build').valid, true);
+            node_assert_1.default.strictEqual(tool.validate('git add . && git commit -m "test"').valid, true);
+        });
+        (0, node_test_1.it)('should return warning for potentially dangerous allowed commands', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result = tool.validate('git push --force');
+            node_assert_1.default.strictEqual(result.valid, true);
+            node_assert_1.default.strictEqual(result.severity, 'warning');
+        });
+        (0, node_test_1.it)('should handle empty commands', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result = tool.validate('');
+            node_assert_1.default.strictEqual(result.valid, false);
+            node_assert_1.default.strictEqual(result.severity, 'blocked');
+        });
+        (0, node_test_1.it)('should handle commands with env vars prefix', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            node_assert_1.default.strictEqual(tool.validate('NODE_ENV=test npm run test').valid, true);
+            node_assert_1.default.strictEqual(tool.validate('DEBUG=* node app.js').valid, true);
+        });
+    });
+    // ==========================================================================
+    // Execution Tests
+    // ==========================================================================
+    (0, node_test_1.describe)('Command Execution', () => {
+        (0, node_test_1.it)('should execute simple commands', async () => {
+            const result = await (0, bash_js_1.bash)('echo "Hello World"');
+            node_assert_1.default.strictEqual(result.success, true);
+            node_assert_1.default.strictEqual(result.exitCode, 0);
+            node_assert_1.default.strictEqual(result.stdout, 'Hello World');
+            node_assert_1.default.strictEqual(result.stderr, '');
+        });
+        (0, node_test_1.it)('should capture stdout correctly', async () => {
+            const result = await (0, bash_js_1.bash)('ls -la ' + TEST_DIR);
+            node_assert_1.default.strictEqual(result.success, true);
+            node_assert_1.default.ok(result.stdout.includes('test.txt'));
+        });
+        (0, node_test_1.it)('should capture stderr correctly', async () => {
+            const result = await (0, bash_js_1.bash)('ls /nonexistent_directory_12345');
+            node_assert_1.default.strictEqual(result.success, false);
+            node_assert_1.default.ok(result.stderr.includes('No such file') || result.stderr.includes('cannot access'));
+        });
+        (0, node_test_1.it)('should respect timeout', async () => {
+            const result = await (0, bash_js_1.bash)('sleep 5', { timeout: 500 });
+            node_assert_1.default.strictEqual(result.success, false);
+            node_assert_1.default.strictEqual(result.killed, true);
+            node_assert_1.default.ok(result.error?.includes('timeout'));
+        });
+        (0, node_test_1.it)('should use custom working directory', async () => {
+            const result = await (0, bash_js_1.bash)('pwd', { cwd: TEST_DIR });
+            node_assert_1.default.strictEqual(result.success, true);
+            // macOS resolves /tmp to /private/tmp
+            node_assert_1.default.ok(result.stdout === TEST_DIR || result.stdout === '/private' + TEST_DIR, `Expected ${TEST_DIR} or /private${TEST_DIR}, got ${result.stdout}`);
+        });
+        (0, node_test_1.it)('should pass environment variables', async () => {
+            const result = await (0, bash_js_1.bash)('echo $MY_VAR', { env: { MY_VAR: 'test_value' } });
+            node_assert_1.default.strictEqual(result.success, true);
+            node_assert_1.default.strictEqual(result.stdout, 'test_value');
+        });
+        (0, node_test_1.it)('should reject blocked commands without executing', async () => {
+            const result = await (0, bash_js_1.bash)('sudo rm -rf /');
+            node_assert_1.default.strictEqual(result.success, false);
+            node_assert_1.default.ok(result.error?.includes('Blocked') || result.stderr.includes('Blocked'));
+        });
+        (0, node_test_1.it)('should handle command chains', async () => {
+            const result = await (0, bash_js_1.bash)('echo "first" && echo "second"');
+            node_assert_1.default.strictEqual(result.success, true);
+            node_assert_1.default.ok(result.stdout.includes('first'));
+            node_assert_1.default.ok(result.stdout.includes('second'));
+        });
+        (0, node_test_1.it)('should handle pipes', async () => {
+            const result = await (0, bash_js_1.bash)('echo "hello world" | tr a-z A-Z');
+            node_assert_1.default.strictEqual(result.success, true);
+            node_assert_1.default.strictEqual(result.stdout, 'HELLO WORLD');
+        });
+        (0, node_test_1.it)('should return duration', async () => {
+            const result = await (0, bash_js_1.bash)('sleep 0.1');
+            node_assert_1.default.strictEqual(result.success, true);
+            node_assert_1.default.ok(result.duration >= 100);
+        });
+    });
+    // ==========================================================================
+    // Background Task Tests
+    // ==========================================================================
+    (0, node_test_1.describe)('Background Tasks', () => {
+        (0, node_test_1.it)('should start background task', async () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result = await tool.execute('sleep 0.2 && echo done', { background: true });
+            node_assert_1.default.strictEqual(result.success, true);
+            node_assert_1.default.ok(result.stdout.includes('Background task started'));
+        });
+        (0, node_test_1.it)('should list running tasks', async () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            await tool.execute('sleep 0.5', { background: true });
+            const tasks = tool.listTasks();
+            node_assert_1.default.ok(tasks.length > 0);
+            node_assert_1.default.ok(tasks.some(t => t.status === 'running'));
+        });
+        (0, node_test_1.it)('should get task output when complete', async () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result = await tool.execute('echo "background output"', { background: true });
+            const taskId = result.stdout.split(': ')[1];
+            const task = await tool.getTaskOutput(taskId, true, 5000);
+            node_assert_1.default.ok(task);
+            node_assert_1.default.strictEqual(task.status, 'completed');
+            node_assert_1.default.ok(task.stdout.includes('background output'));
+        });
+        (0, node_test_1.it)('should kill running task', async () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result = await tool.execute('sleep 10', { background: true });
+            const taskId = result.stdout.split(': ')[1];
+            // Give it a moment to start
+            await new Promise(r => setTimeout(r, 100));
+            const killed = tool.killTask(taskId);
+            node_assert_1.default.strictEqual(killed, true);
+            const task = await tool.getTaskOutput(taskId, false);
+            node_assert_1.default.ok(task);
+            node_assert_1.default.strictEqual(task.status, 'killed');
+        });
+        (0, node_test_1.it)('should cleanup completed tasks', async () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            // Start and complete a task
+            const result = await tool.execute('echo test', { background: true });
+            const taskId = result.stdout.split(': ')[1];
+            // Wait for completion
+            await tool.getTaskOutput(taskId, true, 5000);
+            const cleaned = tool.cleanupTasks();
+            node_assert_1.default.ok(cleaned > 0);
+        });
+    });
+    // ==========================================================================
+    // Configuration Tests
+    // ==========================================================================
+    (0, node_test_1.describe)('Configuration', () => {
+        (0, node_test_1.it)('should update configuration', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            tool.updateConfig({ maxTimeout: 60000 });
+            const config = tool.getConfig();
+            node_assert_1.default.strictEqual(config.maxTimeout, 60000);
+        });
+        (0, node_test_1.it)('should allow adding new commands', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            tool.allowCommand('my_custom_tool');
+            const result = tool.validate('my_custom_tool --arg');
+            node_assert_1.default.strictEqual(result.valid, true);
+        });
+        (0, node_test_1.it)('should allow adding new blocked patterns', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            tool.blockPattern(/my_dangerous_pattern/);
+            const result = tool.validate('echo my_dangerous_pattern');
+            node_assert_1.default.strictEqual(result.valid, false);
+        });
+        (0, node_test_1.it)('should have sensible defaults', () => {
+            const config = bash_js_1.DEFAULT_SANDBOX_CONFIG;
+            node_assert_1.default.ok(config.allowedCommands.includes('ls'));
+            node_assert_1.default.ok(config.allowedCommands.includes('git'));
+            node_assert_1.default.ok(config.allowedCommands.includes('npm'));
+            node_assert_1.default.ok(config.allowedCommands.includes('node'));
+            node_assert_1.default.strictEqual(config.maxTimeout, 120000);
+            node_assert_1.default.strictEqual(config.allowNetwork, true);
+        });
+    });
+    // ==========================================================================
+    // Convenience Functions Tests
+    // ==========================================================================
+    (0, node_test_1.describe)('Convenience Functions', () => {
+        (0, node_test_1.it)('exec() should return stdout on success', async () => {
+            const result = await (0, bash_js_1.exec)('echo "test output"');
+            node_assert_1.default.strictEqual(result, 'test output');
+        });
+        (0, node_test_1.it)('exec() should throw on failure', async () => {
+            await node_assert_1.default.rejects(async () => (0, bash_js_1.exec)('false'), // 'false' command always exits with code 1
+            /Command failed/);
+        });
+        (0, node_test_1.it)('validateCommand() should work standalone', () => {
+            const result = (0, bash_js_1.validateCommand)('ls -la');
+            node_assert_1.default.strictEqual(result.valid, true);
+        });
+    });
+    // ==========================================================================
+    // Security Edge Cases
+    // ==========================================================================
+    (0, node_test_1.describe)('Security Edge Cases', () => {
+        (0, node_test_1.it)('should block shell escape attempts', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            // Various shell escape attempts
+            node_assert_1.default.strictEqual(tool.validate('echo $(rm -rf /)').valid, false);
+            node_assert_1.default.strictEqual(tool.validate('echo `rm -rf /`').valid, false);
+            node_assert_1.default.strictEqual(tool.validate('; sh').valid, false);
+            node_assert_1.default.strictEqual(tool.validate('&& bash').valid, false);
+        });
+        (0, node_test_1.it)('should block fork bombs', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const result = tool.validate(':(){ :|:& };:');
+            node_assert_1.default.strictEqual(result.valid, false);
+        });
+        (0, node_test_1.it)('should handle unicode and special characters', async () => {
+            const result = await (0, bash_js_1.bash)('echo "Hello 世界 🌍"');
+            node_assert_1.default.strictEqual(result.success, true);
+            node_assert_1.default.ok(result.stdout.includes('世界'));
+        });
+        (0, node_test_1.it)('should handle very long commands', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            const longArg = 'a'.repeat(10000);
+            const result = tool.validate(`echo "${longArg}"`);
+            // Should be validated (not crash)
+            node_assert_1.default.ok(typeof result.valid === 'boolean');
+        });
+        (0, node_test_1.it)('should block access to sensitive files', () => {
+            const tool = (0, bash_js_1.getBashTool)();
+            node_assert_1.default.strictEqual(tool.validate('cat /etc/shadow').valid, false);
+            node_assert_1.default.strictEqual(tool.validate('cat ~/.ssh/id_rsa').valid, false);
+        });
+    });
+});
+// Run tests
+(0, node_test_1.describe)('BashTool Integration', () => {
+    (0, node_test_1.it)('should be importable from tools index', async () => {
+        const { toolRegistry } = await import('../../src/tools/index.js');
+        node_assert_1.default.ok(toolRegistry.has('bash'));
+        const bashTool = toolRegistry.get('bash');
+        node_assert_1.default.ok(bashTool);
+        node_assert_1.default.strictEqual(bashTool.name, 'bash');
+    });
+});

package/dist/test/tools/edit.test.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Tests for Genesis Diff-Based File Editor
+ */
+export {};