opc-agent 1.1.1 → 1.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (139) hide show
  1. package/CHANGELOG.md +51 -51
  2. package/CONTRIBUTING.md +75 -75
  3. package/README.md +222 -126
  4. package/README.zh-CN.md +129 -80
  5. package/dist/channels/web.js +256 -256
  6. package/dist/deploy/hermes.js +22 -22
  7. package/dist/deploy/openclaw.js +31 -31
  8. package/dist/templates/code-reviewer.js +5 -5
  9. package/dist/templates/customer-service.js +2 -2
  10. package/dist/templates/data-analyst.js +5 -5
  11. package/dist/templates/knowledge-base.js +2 -2
  12. package/dist/templates/sales-assistant.js +4 -4
  13. package/dist/templates/teacher.js +6 -6
  14. package/docs/.vitepress/config.ts +103 -103
  15. package/docs/api/cli.md +48 -48
  16. package/docs/api/oad-schema.md +64 -64
  17. package/docs/api/sdk.md +80 -80
  18. package/docs/guide/concepts.md +51 -51
  19. package/docs/guide/configuration.md +79 -79
  20. package/docs/guide/deployment.md +42 -42
  21. package/docs/guide/getting-started.md +44 -44
  22. package/docs/guide/templates.md +28 -28
  23. package/docs/guide/testing.md +84 -84
  24. package/docs/index.md +27 -27
  25. package/docs/zh/api/cli.md +54 -54
  26. package/docs/zh/api/oad-schema.md +87 -87
  27. package/docs/zh/api/sdk.md +102 -102
  28. package/docs/zh/guide/concepts.md +104 -104
  29. package/docs/zh/guide/configuration.md +135 -135
  30. package/docs/zh/guide/deployment.md +81 -81
  31. package/docs/zh/guide/getting-started.md +82 -82
  32. package/docs/zh/guide/templates.md +84 -84
  33. package/docs/zh/guide/testing.md +88 -88
  34. package/docs/zh/index.md +27 -27
  35. package/examples/customer-service-demo/README.md +90 -90
  36. package/examples/customer-service-demo/oad.yaml +107 -107
  37. package/package.json +1 -1
  38. package/src/analytics/index.ts +66 -66
  39. package/src/channels/discord.ts +192 -192
  40. package/src/channels/email.ts +177 -177
  41. package/src/channels/feishu.ts +236 -236
  42. package/src/channels/index.ts +15 -15
  43. package/src/channels/slack.ts +160 -160
  44. package/src/channels/telegram.ts +90 -90
  45. package/src/channels/voice.ts +106 -106
  46. package/src/channels/web.ts +596 -596
  47. package/src/channels/webhook.ts +199 -199
  48. package/src/channels/websocket.ts +87 -87
  49. package/src/channels/wechat.ts +149 -149
  50. package/src/core/a2a.ts +143 -143
  51. package/src/core/agent.ts +152 -152
  52. package/src/core/analytics-engine.ts +186 -186
  53. package/src/core/auth.ts +57 -57
  54. package/src/core/cache.ts +141 -141
  55. package/src/core/compose.ts +77 -77
  56. package/src/core/config.ts +14 -14
  57. package/src/core/errors.ts +148 -148
  58. package/src/core/hitl.ts +138 -138
  59. package/src/core/knowledge.ts +210 -210
  60. package/src/core/logger.ts +57 -57
  61. package/src/core/orchestrator.ts +215 -215
  62. package/src/core/performance.ts +187 -187
  63. package/src/core/rate-limiter.ts +128 -128
  64. package/src/core/room.ts +109 -109
  65. package/src/core/runtime.ts +152 -152
  66. package/src/core/sandbox.ts +101 -101
  67. package/src/core/security.ts +171 -171
  68. package/src/core/types.ts +68 -68
  69. package/src/core/versioning.ts +106 -106
  70. package/src/core/watch.ts +178 -178
  71. package/src/core/workflow.ts +235 -235
  72. package/src/deploy/hermes.ts +156 -156
  73. package/src/deploy/openclaw.ts +200 -200
  74. package/src/dtv/data.ts +29 -29
  75. package/src/dtv/trust.ts +43 -43
  76. package/src/dtv/value.ts +47 -47
  77. package/src/i18n/index.ts +216 -216
  78. package/src/index.ts +110 -110
  79. package/src/marketplace/index.ts +223 -223
  80. package/src/memory/deepbrain.ts +108 -108
  81. package/src/memory/index.ts +34 -34
  82. package/src/plugins/index.ts +208 -208
  83. package/src/providers/index.ts +183 -183
  84. package/src/schema/oad.ts +155 -155
  85. package/src/skills/base.ts +16 -16
  86. package/src/skills/document.ts +100 -100
  87. package/src/skills/http.ts +35 -35
  88. package/src/skills/index.ts +27 -27
  89. package/src/skills/scheduler.ts +80 -80
  90. package/src/skills/webhook-trigger.ts +59 -59
  91. package/src/templates/code-reviewer.ts +34 -34
  92. package/src/templates/customer-service.ts +80 -80
  93. package/src/templates/data-analyst.ts +70 -70
  94. package/src/templates/executive-assistant.ts +71 -71
  95. package/src/templates/financial-advisor.ts +60 -60
  96. package/src/templates/knowledge-base.ts +31 -31
  97. package/src/templates/legal-assistant.ts +71 -71
  98. package/src/templates/sales-assistant.ts +79 -79
  99. package/src/templates/teacher.ts +79 -79
  100. package/src/testing/index.ts +181 -181
  101. package/src/tools/calculator.ts +73 -73
  102. package/src/tools/datetime.ts +149 -149
  103. package/src/tools/json-transform.ts +187 -187
  104. package/src/tools/mcp.ts +76 -76
  105. package/src/tools/text-analysis.ts +116 -116
  106. package/templates/Dockerfile +15 -15
  107. package/templates/code-reviewer/README.md +27 -27
  108. package/templates/code-reviewer/oad.yaml +41 -41
  109. package/templates/customer-service/README.md +22 -22
  110. package/templates/customer-service/oad.yaml +36 -36
  111. package/templates/docker-compose.yml +21 -21
  112. package/templates/knowledge-base/README.md +28 -28
  113. package/templates/knowledge-base/oad.yaml +38 -38
  114. package/templates/sales-assistant/README.md +26 -26
  115. package/templates/sales-assistant/oad.yaml +43 -43
  116. package/tests/a2a.test.ts +66 -66
  117. package/tests/agent.test.ts +72 -72
  118. package/tests/analytics.test.ts +50 -50
  119. package/tests/channel.test.ts +39 -39
  120. package/tests/e2e.test.ts +134 -134
  121. package/tests/errors.test.ts +83 -83
  122. package/tests/hitl.test.ts +71 -71
  123. package/tests/i18n.test.ts +41 -41
  124. package/tests/mcp.test.ts +54 -54
  125. package/tests/oad.test.ts +68 -68
  126. package/tests/performance.test.ts +115 -115
  127. package/tests/plugin.test.ts +74 -74
  128. package/tests/room.test.ts +106 -106
  129. package/tests/runtime.test.ts +42 -42
  130. package/tests/sandbox.test.ts +46 -46
  131. package/tests/security.test.ts +60 -60
  132. package/tests/templates.test.ts +77 -77
  133. package/tests/v070.test.ts +76 -76
  134. package/tests/versioning.test.ts +75 -75
  135. package/tests/voice.test.ts +61 -61
  136. package/tests/webhook.test.ts +29 -29
  137. package/tests/workflow.test.ts +143 -143
  138. package/tsconfig.json +19 -19
  139. package/vitest.config.ts +9 -9
@@ -1,74 +1,74 @@
1
- import { describe, it, expect } from 'vitest';
2
- import { PluginManager } from '../src/plugins';
3
- import type { IPlugin } from '../src/plugins';
4
-
5
- describe('Plugin System', () => {
6
- it('should register and list plugins', () => {
7
- const pm = new PluginManager();
8
- const plugin: IPlugin = { name: 'test-plugin', version: '1.0.0', description: 'Test' };
9
- pm.register(plugin);
10
- expect(pm.has('test-plugin')).toBe(true);
11
- expect(pm.list().length).toBe(1);
12
- expect(pm.list()[0].name).toBe('test-plugin');
13
- });
14
-
15
- it('should run lifecycle hooks', async () => {
16
- const pm = new PluginManager();
17
- const calls: string[] = [];
18
-
19
- pm.register({
20
- name: 'hook-plugin',
21
- version: '1.0.0',
22
- hooks: {
23
- beforeInit: async () => { calls.push('beforeInit'); },
24
- afterInit: async () => { calls.push('afterInit'); },
25
- beforeShutdown: async () => { calls.push('beforeShutdown'); },
26
- },
27
- });
28
-
29
- await pm.runHook('beforeInit');
30
- await pm.runHook('afterInit');
31
- await pm.runHook('beforeShutdown');
32
- expect(calls).toEqual(['beforeInit', 'afterInit', 'beforeShutdown']);
33
- });
34
-
35
- it('should collect skills from plugins', () => {
36
- const pm = new PluginManager();
37
- pm.register({
38
- name: 'skill-plugin',
39
- version: '1.0.0',
40
- skills: [{
41
- name: 'test-skill',
42
- description: 'Test',
43
- execute: async () => ({ handled: false, confidence: 0 }),
44
- }],
45
- });
46
-
47
- expect(pm.getAllSkills().length).toBe(1);
48
- expect(pm.getAllSkills()[0].name).toBe('test-skill');
49
- });
50
-
51
- it('should unregister plugins', () => {
52
- const pm = new PluginManager();
53
- pm.register({ name: 'temp', version: '1.0.0' });
54
- pm.unregister('temp');
55
- expect(pm.has('temp')).toBe(false);
56
- });
57
-
58
- it('should run hooks from multiple plugins in order', async () => {
59
- const pm = new PluginManager();
60
- const order: string[] = [];
61
-
62
- pm.register({
63
- name: 'p1', version: '1.0.0',
64
- hooks: { beforeInit: async () => { order.push('p1'); } },
65
- });
66
- pm.register({
67
- name: 'p2', version: '1.0.0',
68
- hooks: { beforeInit: async () => { order.push('p2'); } },
69
- });
70
-
71
- await pm.runHook('beforeInit');
72
- expect(order).toEqual(['p1', 'p2']);
73
- });
74
- });
1
+ import { describe, it, expect } from 'vitest';
2
+ import { PluginManager } from '../src/plugins';
3
+ import type { IPlugin } from '../src/plugins';
4
+
5
+ describe('Plugin System', () => {
6
+ it('should register and list plugins', () => {
7
+ const pm = new PluginManager();
8
+ const plugin: IPlugin = { name: 'test-plugin', version: '1.0.0', description: 'Test' };
9
+ pm.register(plugin);
10
+ expect(pm.has('test-plugin')).toBe(true);
11
+ expect(pm.list().length).toBe(1);
12
+ expect(pm.list()[0].name).toBe('test-plugin');
13
+ });
14
+
15
+ it('should run lifecycle hooks', async () => {
16
+ const pm = new PluginManager();
17
+ const calls: string[] = [];
18
+
19
+ pm.register({
20
+ name: 'hook-plugin',
21
+ version: '1.0.0',
22
+ hooks: {
23
+ beforeInit: async () => { calls.push('beforeInit'); },
24
+ afterInit: async () => { calls.push('afterInit'); },
25
+ beforeShutdown: async () => { calls.push('beforeShutdown'); },
26
+ },
27
+ });
28
+
29
+ await pm.runHook('beforeInit');
30
+ await pm.runHook('afterInit');
31
+ await pm.runHook('beforeShutdown');
32
+ expect(calls).toEqual(['beforeInit', 'afterInit', 'beforeShutdown']);
33
+ });
34
+
35
+ it('should collect skills from plugins', () => {
36
+ const pm = new PluginManager();
37
+ pm.register({
38
+ name: 'skill-plugin',
39
+ version: '1.0.0',
40
+ skills: [{
41
+ name: 'test-skill',
42
+ description: 'Test',
43
+ execute: async () => ({ handled: false, confidence: 0 }),
44
+ }],
45
+ });
46
+
47
+ expect(pm.getAllSkills().length).toBe(1);
48
+ expect(pm.getAllSkills()[0].name).toBe('test-skill');
49
+ });
50
+
51
+ it('should unregister plugins', () => {
52
+ const pm = new PluginManager();
53
+ pm.register({ name: 'temp', version: '1.0.0' });
54
+ pm.unregister('temp');
55
+ expect(pm.has('temp')).toBe(false);
56
+ });
57
+
58
+ it('should run hooks from multiple plugins in order', async () => {
59
+ const pm = new PluginManager();
60
+ const order: string[] = [];
61
+
62
+ pm.register({
63
+ name: 'p1', version: '1.0.0',
64
+ hooks: { beforeInit: async () => { order.push('p1'); } },
65
+ });
66
+ pm.register({
67
+ name: 'p2', version: '1.0.0',
68
+ hooks: { beforeInit: async () => { order.push('p2'); } },
69
+ });
70
+
71
+ await pm.runHook('beforeInit');
72
+ expect(order).toEqual(['p1', 'p2']);
73
+ });
74
+ });
@@ -1,106 +1,106 @@
1
- import { describe, it, expect } from 'vitest';
2
- import { Room } from '../src/core/room';
3
- import { BaseAgent } from '../src/core/agent';
4
-
5
- function makeAgent(name: string): BaseAgent {
6
- const agent = new BaseAgent({ name });
7
- // Synchronously set to ready by calling init
8
- return agent;
9
- }
10
-
11
- describe('Room System', () => {
12
- it('should create a room with a name', () => {
13
- const room = new Room('test-room');
14
- expect(room.name).toBe('test-room');
15
- expect(room.getAgents()).toEqual([]);
16
- });
17
-
18
- it('should add and remove agents', () => {
19
- const room = new Room('office');
20
- const agent = makeAgent('agent-1');
21
- room.addAgent(agent);
22
- expect(room.getAgents()).toEqual(['agent-1']);
23
- room.removeAgent('agent-1');
24
- expect(room.getAgents()).toEqual([]);
25
- });
26
-
27
- it('should emit events on join/leave', () => {
28
- const room = new Room('office');
29
- const events: string[] = [];
30
- room.on('agent:join', (name) => events.push(`join:${name}`));
31
- room.on('agent:leave', (name) => events.push(`leave:${name}`));
32
-
33
- const agent = makeAgent('a1');
34
- room.addAgent(agent);
35
- room.removeAgent('a1');
36
- expect(events).toEqual(['join:a1', 'leave:a1']);
37
- });
38
-
39
- it('should support topic subscriptions', () => {
40
- const room = new Room('office');
41
- room.subscribe('agent-1', 'alerts');
42
- room.subscribe('agent-2', 'alerts');
43
- expect(room.getSubscribers('alerts')).toEqual(['agent-1', 'agent-2']);
44
- room.unsubscribe('agent-1', 'alerts');
45
- expect(room.getSubscribers('alerts')).toEqual(['agent-2']);
46
- });
47
-
48
- it('should broadcast to all agents except sender', async () => {
49
- const room = new Room('office');
50
- const a1 = makeAgent('a1');
51
- const a2 = makeAgent('a2');
52
- await a1.init();
53
- await a2.init();
54
- room.addAgent(a1);
55
- room.addAgent(a2);
56
-
57
- const responses = await room.broadcast('a1', 'Hello everyone');
58
- expect(responses.length).toBe(1); // only a2 responds
59
- expect(responses[0].role).toBe('assistant');
60
- });
61
-
62
- it('should send direct messages', async () => {
63
- const room = new Room('office');
64
- const a1 = makeAgent('a1');
65
- const a2 = makeAgent('a2');
66
- await a1.init();
67
- await a2.init();
68
- room.addAgent(a1);
69
- room.addAgent(a2);
70
-
71
- const responses = await room.send({
72
- from: 'a1',
73
- to: 'a2',
74
- message: { id: 'm1', role: 'user', content: 'Hi a2', timestamp: Date.now() },
75
- });
76
- expect(responses.length).toBe(1);
77
- });
78
-
79
- it('should publish to topic subscribers only', async () => {
80
- const room = new Room('office');
81
- const a1 = makeAgent('a1');
82
- const a2 = makeAgent('a2');
83
- const a3 = makeAgent('a3');
84
- await a1.init();
85
- await a2.init();
86
- await a3.init();
87
- room.addAgent(a1);
88
- room.addAgent(a2);
89
- room.addAgent(a3);
90
-
91
- room.subscribe('a2', 'alerts');
92
- // a3 not subscribed
93
- const responses = await room.publishToTopic('a1', 'alerts', 'Alert!');
94
- expect(responses.length).toBe(1);
95
- });
96
-
97
- it('should remove agent from subscriptions on leave', () => {
98
- const room = new Room('office');
99
- room.subscribe('a1', 'topic1');
100
- room.subscribe('a1', 'topic2');
101
- expect(room.getSubscribers('topic1')).toContain('a1');
102
- room.removeAgent('a1');
103
- expect(room.getSubscribers('topic1')).not.toContain('a1');
104
- expect(room.getSubscribers('topic2')).not.toContain('a1');
105
- });
106
- });
1
+ import { describe, it, expect } from 'vitest';
2
+ import { Room } from '../src/core/room';
3
+ import { BaseAgent } from '../src/core/agent';
4
+
5
+ function makeAgent(name: string): BaseAgent {
6
+ const agent = new BaseAgent({ name });
7
+ // Synchronously set to ready by calling init
8
+ return agent;
9
+ }
10
+
11
+ describe('Room System', () => {
12
+ it('should create a room with a name', () => {
13
+ const room = new Room('test-room');
14
+ expect(room.name).toBe('test-room');
15
+ expect(room.getAgents()).toEqual([]);
16
+ });
17
+
18
+ it('should add and remove agents', () => {
19
+ const room = new Room('office');
20
+ const agent = makeAgent('agent-1');
21
+ room.addAgent(agent);
22
+ expect(room.getAgents()).toEqual(['agent-1']);
23
+ room.removeAgent('agent-1');
24
+ expect(room.getAgents()).toEqual([]);
25
+ });
26
+
27
+ it('should emit events on join/leave', () => {
28
+ const room = new Room('office');
29
+ const events: string[] = [];
30
+ room.on('agent:join', (name) => events.push(`join:${name}`));
31
+ room.on('agent:leave', (name) => events.push(`leave:${name}`));
32
+
33
+ const agent = makeAgent('a1');
34
+ room.addAgent(agent);
35
+ room.removeAgent('a1');
36
+ expect(events).toEqual(['join:a1', 'leave:a1']);
37
+ });
38
+
39
+ it('should support topic subscriptions', () => {
40
+ const room = new Room('office');
41
+ room.subscribe('agent-1', 'alerts');
42
+ room.subscribe('agent-2', 'alerts');
43
+ expect(room.getSubscribers('alerts')).toEqual(['agent-1', 'agent-2']);
44
+ room.unsubscribe('agent-1', 'alerts');
45
+ expect(room.getSubscribers('alerts')).toEqual(['agent-2']);
46
+ });
47
+
48
+ it('should broadcast to all agents except sender', async () => {
49
+ const room = new Room('office');
50
+ const a1 = makeAgent('a1');
51
+ const a2 = makeAgent('a2');
52
+ await a1.init();
53
+ await a2.init();
54
+ room.addAgent(a1);
55
+ room.addAgent(a2);
56
+
57
+ const responses = await room.broadcast('a1', 'Hello everyone');
58
+ expect(responses.length).toBe(1); // only a2 responds
59
+ expect(responses[0].role).toBe('assistant');
60
+ });
61
+
62
+ it('should send direct messages', async () => {
63
+ const room = new Room('office');
64
+ const a1 = makeAgent('a1');
65
+ const a2 = makeAgent('a2');
66
+ await a1.init();
67
+ await a2.init();
68
+ room.addAgent(a1);
69
+ room.addAgent(a2);
70
+
71
+ const responses = await room.send({
72
+ from: 'a1',
73
+ to: 'a2',
74
+ message: { id: 'm1', role: 'user', content: 'Hi a2', timestamp: Date.now() },
75
+ });
76
+ expect(responses.length).toBe(1);
77
+ });
78
+
79
+ it('should publish to topic subscribers only', async () => {
80
+ const room = new Room('office');
81
+ const a1 = makeAgent('a1');
82
+ const a2 = makeAgent('a2');
83
+ const a3 = makeAgent('a3');
84
+ await a1.init();
85
+ await a2.init();
86
+ await a3.init();
87
+ room.addAgent(a1);
88
+ room.addAgent(a2);
89
+ room.addAgent(a3);
90
+
91
+ room.subscribe('a2', 'alerts');
92
+ // a3 not subscribed
93
+ const responses = await room.publishToTopic('a1', 'alerts', 'Alert!');
94
+ expect(responses.length).toBe(1);
95
+ });
96
+
97
+ it('should remove agent from subscriptions on leave', () => {
98
+ const room = new Room('office');
99
+ room.subscribe('a1', 'topic1');
100
+ room.subscribe('a1', 'topic2');
101
+ expect(room.getSubscribers('topic1')).toContain('a1');
102
+ room.removeAgent('a1');
103
+ expect(room.getSubscribers('topic1')).not.toContain('a1');
104
+ expect(room.getSubscribers('topic2')).not.toContain('a1');
105
+ });
106
+ });
@@ -1,42 +1,42 @@
1
- import { describe, it, expect } from 'vitest';
2
- import { AgentRuntime } from '../src/core/runtime';
3
- import { createCustomerServiceConfig } from '../src/templates/customer-service';
4
-
5
- describe('AgentRuntime', () => {
6
- it('should initialize from config object', async () => {
7
- const runtime = new AgentRuntime();
8
- const config = createCustomerServiceConfig();
9
- const agent = await runtime.initialize(config);
10
- expect(agent.name).toBe('customer-service');
11
- expect(agent.state).toBe('ready');
12
- });
13
-
14
- it('should throw if no config loaded', async () => {
15
- const runtime = new AgentRuntime();
16
- await expect(runtime.initialize()).rejects.toThrow('No config loaded');
17
- });
18
-
19
- it('should register skills after initialization', async () => {
20
- const runtime = new AgentRuntime();
21
- const config = createCustomerServiceConfig();
22
- await runtime.initialize(config);
23
-
24
- runtime.registerSkill({
25
- name: 'test-skill',
26
- description: 'Test',
27
- execute: async () => ({ handled: false, confidence: 0 }),
28
- });
29
- // No throw = success
30
- });
31
-
32
- it('should throw registering skill before init', () => {
33
- const runtime = new AgentRuntime();
34
- expect(() =>
35
- runtime.registerSkill({
36
- name: 'test',
37
- description: 'Test',
38
- execute: async () => ({ handled: false, confidence: 0 }),
39
- })
40
- ).toThrow('Agent not initialized');
41
- });
42
- });
1
+ import { describe, it, expect } from 'vitest';
2
+ import { AgentRuntime } from '../src/core/runtime';
3
+ import { createCustomerServiceConfig } from '../src/templates/customer-service';
4
+
5
+ describe('AgentRuntime', () => {
6
+ it('should initialize from config object', async () => {
7
+ const runtime = new AgentRuntime();
8
+ const config = createCustomerServiceConfig();
9
+ const agent = await runtime.initialize(config);
10
+ expect(agent.name).toBe('customer-service');
11
+ expect(agent.state).toBe('ready');
12
+ });
13
+
14
+ it('should throw if no config loaded', async () => {
15
+ const runtime = new AgentRuntime();
16
+ await expect(runtime.initialize()).rejects.toThrow('No config loaded');
17
+ });
18
+
19
+ it('should register skills after initialization', async () => {
20
+ const runtime = new AgentRuntime();
21
+ const config = createCustomerServiceConfig();
22
+ await runtime.initialize(config);
23
+
24
+ runtime.registerSkill({
25
+ name: 'test-skill',
26
+ description: 'Test',
27
+ execute: async () => ({ handled: false, confidence: 0 }),
28
+ });
29
+ // No throw = success
30
+ });
31
+
32
+ it('should throw registering skill before init', () => {
33
+ const runtime = new AgentRuntime();
34
+ expect(() =>
35
+ runtime.registerSkill({
36
+ name: 'test',
37
+ description: 'Test',
38
+ execute: async () => ({ handled: false, confidence: 0 }),
39
+ })
40
+ ).toThrow('Agent not initialized');
41
+ });
42
+ });
@@ -1,46 +1,46 @@
1
- import { describe, it, expect } from 'vitest';
2
- import { Sandbox } from '../src/core/sandbox';
3
-
4
- describe('Security Sandbox', () => {
5
- it('should create sandbox with trust level', () => {
6
- const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
7
- expect(sb.trustLevel).toBe('sandbox');
8
- });
9
-
10
- it('should restrict shell in sandbox mode', () => {
11
- const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
12
- expect(sb.checkShellAccess()).toBe(false);
13
- });
14
-
15
- it('should allow shell in certified mode', () => {
16
- const sb = new Sandbox({ trustLevel: 'certified', agentDir: '/tmp/agent' });
17
- expect(sb.checkShellAccess()).toBe(true);
18
- });
19
-
20
- it('should restrict network in sandbox mode', () => {
21
- const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
22
- expect(sb.checkNetworkAccess('https://api.openai.com')).toBe(false);
23
- });
24
-
25
- it('should allow network with allowlist', () => {
26
- const sb = new Sandbox({
27
- trustLevel: 'sandbox',
28
- agentDir: '/tmp/agent',
29
- networkAllowlist: ['api.openai.com'],
30
- });
31
- expect(sb.checkNetworkAccess('https://api.openai.com/v1/chat')).toBe(true);
32
- expect(sb.checkNetworkAccess('https://evil.com')).toBe(false);
33
- });
34
-
35
- it('should allow wildcard network in listed mode', () => {
36
- const sb = new Sandbox({ trustLevel: 'listed', agentDir: '/tmp/agent' });
37
- expect(sb.checkNetworkAccess('https://anything.com')).toBe(true);
38
- });
39
-
40
- it('should return restrictions snapshot', () => {
41
- const sb = new Sandbox({ trustLevel: 'verified', agentDir: '/tmp/agent' });
42
- const r = sb.getRestrictions();
43
- expect(r.shell).toBe(false);
44
- expect(r.network.allowed.length).toBeGreaterThan(0);
45
- });
46
- });
1
+ import { describe, it, expect } from 'vitest';
2
+ import { Sandbox } from '../src/core/sandbox';
3
+
4
+ describe('Security Sandbox', () => {
5
+ it('should create sandbox with trust level', () => {
6
+ const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
7
+ expect(sb.trustLevel).toBe('sandbox');
8
+ });
9
+
10
+ it('should restrict shell in sandbox mode', () => {
11
+ const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
12
+ expect(sb.checkShellAccess()).toBe(false);
13
+ });
14
+
15
+ it('should allow shell in certified mode', () => {
16
+ const sb = new Sandbox({ trustLevel: 'certified', agentDir: '/tmp/agent' });
17
+ expect(sb.checkShellAccess()).toBe(true);
18
+ });
19
+
20
+ it('should restrict network in sandbox mode', () => {
21
+ const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
22
+ expect(sb.checkNetworkAccess('https://api.openai.com')).toBe(false);
23
+ });
24
+
25
+ it('should allow network with allowlist', () => {
26
+ const sb = new Sandbox({
27
+ trustLevel: 'sandbox',
28
+ agentDir: '/tmp/agent',
29
+ networkAllowlist: ['api.openai.com'],
30
+ });
31
+ expect(sb.checkNetworkAccess('https://api.openai.com/v1/chat')).toBe(true);
32
+ expect(sb.checkNetworkAccess('https://evil.com')).toBe(false);
33
+ });
34
+
35
+ it('should allow wildcard network in listed mode', () => {
36
+ const sb = new Sandbox({ trustLevel: 'listed', agentDir: '/tmp/agent' });
37
+ expect(sb.checkNetworkAccess('https://anything.com')).toBe(true);
38
+ });
39
+
40
+ it('should return restrictions snapshot', () => {
41
+ const sb = new Sandbox({ trustLevel: 'verified', agentDir: '/tmp/agent' });
42
+ const r = sb.getRestrictions();
43
+ expect(r.shell).toBe(false);
44
+ expect(r.network.allowed.length).toBeGreaterThan(0);
45
+ });
46
+ });
@@ -1,60 +1,60 @@
1
- import { describe, it, expect } from 'vitest';
2
- import { sanitizeInput, detectInjection, APIKeyManager } from '../src/core/security';
3
-
4
- describe('Security', () => {
5
- describe('sanitizeInput', () => {
6
- it('strips script tags', () => {
7
- expect(sanitizeInput('<script>alert(1)</script>hello')).not.toContain('<script');
8
- });
9
- it('encodes HTML entities', () => {
10
- const result = sanitizeInput('a < b & c > d');
11
- expect(result).toContain('&lt;');
12
- expect(result).toContain('&amp;');
13
- expect(result).toContain('&gt;');
14
- });
15
- });
16
-
17
- describe('detectInjection', () => {
18
- it('detects XSS', () => {
19
- const r = detectInjection('<script>alert(1)</script>');
20
- expect(r.safe).toBe(false);
21
- expect(r.threats).toContain('xss');
22
- });
23
- it('passes clean input', () => {
24
- expect(detectInjection('Hello world')).toEqual({ safe: true, threats: [] });
25
- });
26
- });
27
-
28
- describe('APIKeyManager', () => {
29
- it('add, validate, revoke', () => {
30
- const mgr = new APIKeyManager();
31
- mgr.addKey('key1', { label: 'test' });
32
- expect(mgr.isValid('key1')).toBe(true);
33
- expect(mgr.isValid('key2')).toBe(false);
34
- mgr.revokeKey('key1');
35
- expect(mgr.isValid('key1')).toBe(false);
36
- });
37
-
38
- it('rotate key', () => {
39
- const mgr = new APIKeyManager();
40
- mgr.addKey('old');
41
- expect(mgr.rotateKey('old', 'new')).toBe(true);
42
- expect(mgr.isValid('old')).toBe(false);
43
- expect(mgr.isValid('new')).toBe(true);
44
- });
45
-
46
- it('expires keys', () => {
47
- const mgr = new APIKeyManager();
48
- mgr.addKey('expired', { expiresAt: Date.now() - 1000 });
49
- expect(mgr.isValid('expired')).toBe(false);
50
- });
51
-
52
- it('listActive filters', () => {
53
- const mgr = new APIKeyManager();
54
- mgr.addKey('a');
55
- mgr.addKey('b');
56
- mgr.revokeKey('b');
57
- expect(mgr.listActive().length).toBe(1);
58
- });
59
- });
60
- });
1
+ import { describe, it, expect } from 'vitest';
2
+ import { sanitizeInput, detectInjection, APIKeyManager } from '../src/core/security';
3
+
4
+ describe('Security', () => {
5
+ describe('sanitizeInput', () => {
6
+ it('strips script tags', () => {
7
+ expect(sanitizeInput('<script>alert(1)</script>hello')).not.toContain('<script');
8
+ });
9
+ it('encodes HTML entities', () => {
10
+ const result = sanitizeInput('a < b & c > d');
11
+ expect(result).toContain('&lt;');
12
+ expect(result).toContain('&amp;');
13
+ expect(result).toContain('&gt;');
14
+ });
15
+ });
16
+
17
+ describe('detectInjection', () => {
18
+ it('detects XSS', () => {
19
+ const r = detectInjection('<script>alert(1)</script>');
20
+ expect(r.safe).toBe(false);
21
+ expect(r.threats).toContain('xss');
22
+ });
23
+ it('passes clean input', () => {
24
+ expect(detectInjection('Hello world')).toEqual({ safe: true, threats: [] });
25
+ });
26
+ });
27
+
28
+ describe('APIKeyManager', () => {
29
+ it('add, validate, revoke', () => {
30
+ const mgr = new APIKeyManager();
31
+ mgr.addKey('key1', { label: 'test' });
32
+ expect(mgr.isValid('key1')).toBe(true);
33
+ expect(mgr.isValid('key2')).toBe(false);
34
+ mgr.revokeKey('key1');
35
+ expect(mgr.isValid('key1')).toBe(false);
36
+ });
37
+
38
+ it('rotate key', () => {
39
+ const mgr = new APIKeyManager();
40
+ mgr.addKey('old');
41
+ expect(mgr.rotateKey('old', 'new')).toBe(true);
42
+ expect(mgr.isValid('old')).toBe(false);
43
+ expect(mgr.isValid('new')).toBe(true);
44
+ });
45
+
46
+ it('expires keys', () => {
47
+ const mgr = new APIKeyManager();
48
+ mgr.addKey('expired', { expiresAt: Date.now() - 1000 });
49
+ expect(mgr.isValid('expired')).toBe(false);
50
+ });
51
+
52
+ it('listActive filters', () => {
53
+ const mgr = new APIKeyManager();
54
+ mgr.addKey('a');
55
+ mgr.addKey('b');
56
+ mgr.revokeKey('b');
57
+ expect(mgr.listActive().length).toBe(1);
58
+ });
59
+ });
60
+ });