opc-agent 1.2.1 → 1.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CONTRIBUTING.md +75 -75
- package/README.md +235 -358
- package/README.zh-CN.md +415 -415
- package/dist/channels/web.js +256 -256
- package/dist/core/knowledge.d.ts +5 -0
- package/dist/core/knowledge.js +39 -2
- package/dist/deploy/hermes.js +22 -22
- package/dist/deploy/openclaw.js +31 -31
- package/dist/index.d.ts +0 -4
- package/dist/index.js +1 -7
- package/dist/providers/index.d.ts +1 -1
- package/dist/providers/index.js +158 -14
- package/dist/schema/oad.d.ts +3 -3
- package/dist/templates/code-reviewer.js +5 -5
- package/dist/templates/customer-service.js +2 -2
- package/dist/templates/data-analyst.js +5 -5
- package/dist/templates/knowledge-base.js +2 -2
- package/dist/templates/sales-assistant.js +4 -4
- package/dist/templates/teacher.js +6 -6
- package/docs/.vitepress/config.ts +103 -103
- package/docs/api/cli.md +48 -48
- package/docs/api/oad-schema.md +64 -64
- package/docs/api/sdk.md +80 -80
- package/docs/guide/concepts.md +51 -51
- package/docs/guide/configuration.md +79 -79
- package/docs/guide/deployment.md +42 -42
- package/docs/guide/getting-started.md +44 -44
- package/docs/guide/templates.md +28 -28
- package/docs/guide/testing.md +84 -84
- package/docs/index.md +27 -27
- package/docs/zh/api/cli.md +54 -54
- package/docs/zh/api/oad-schema.md +87 -87
- package/docs/zh/api/sdk.md +102 -102
- package/docs/zh/guide/concepts.md +104 -104
- package/docs/zh/guide/configuration.md +135 -135
- package/docs/zh/guide/deployment.md +81 -81
- package/docs/zh/guide/getting-started.md +82 -82
- package/docs/zh/guide/templates.md +84 -84
- package/docs/zh/guide/testing.md +88 -88
- package/docs/zh/index.md +27 -27
- package/examples/customer-service-demo/README.md +90 -90
- package/examples/customer-service-demo/oad.yaml +107 -107
- package/package.json +50 -50
- package/src/analytics/index.ts +66 -66
- package/src/channels/discord.ts +192 -192
- package/src/channels/email.ts +177 -177
- package/src/channels/feishu.ts +236 -236
- package/src/channels/index.ts +15 -15
- package/src/channels/slack.ts +160 -160
- package/src/channels/telegram.ts +90 -90
- package/src/channels/voice.ts +106 -106
- package/src/channels/webhook.ts +199 -199
- package/src/channels/websocket.ts +87 -87
- package/src/channels/wechat.ts +149 -149
- package/src/cli.ts +119 -1
- package/src/core/a2a.ts +143 -143
- package/src/core/agent.ts +152 -152
- package/src/core/analytics-engine.ts +186 -186
- package/src/core/auth.ts +57 -57
- package/src/core/cache.ts +141 -141
- package/src/core/compose.ts +77 -77
- package/src/core/config.ts +14 -14
- package/src/core/errors.ts +148 -148
- package/src/core/hitl.ts +138 -138
- package/src/core/logger.ts +57 -57
- package/src/core/orchestrator.ts +215 -215
- package/src/core/performance.ts +187 -187
- package/src/core/rate-limiter.ts +128 -128
- package/src/core/room.ts +109 -109
- package/src/core/runtime.ts +152 -152
- package/src/core/sandbox.ts +101 -101
- package/src/core/security.ts +171 -171
- package/src/core/types.ts +68 -68
- package/src/core/versioning.ts +106 -106
- package/src/core/watch.ts +178 -178
- package/src/core/workflow.ts +235 -235
- package/src/deploy/hermes.ts +156 -156
- package/src/deploy/openclaw.ts +200 -200
- package/src/i18n/index.ts +216 -216
- package/src/index.ts +6 -2
- package/src/memory/deepbrain.ts +108 -108
- package/src/memory/index.ts +34 -34
- package/src/plugins/index.ts +208 -208
- package/src/schema/oad.ts +154 -155
- package/src/skills/base.ts +16 -16
- package/src/skills/document.ts +100 -100
- package/src/skills/http.ts +35 -35
- package/src/skills/index.ts +27 -27
- package/src/skills/scheduler.ts +80 -80
- package/src/skills/webhook-trigger.ts +59 -59
- package/src/templates/code-reviewer.ts +30 -34
- package/src/templates/customer-service.ts +76 -80
- package/src/templates/data-analyst.ts +66 -70
- package/src/templates/executive-assistant.ts +71 -71
- package/src/templates/financial-advisor.ts +60 -60
- package/src/templates/knowledge-base.ts +27 -31
- package/src/templates/legal-assistant.ts +71 -71
- package/src/templates/sales-assistant.ts +75 -79
- package/src/templates/teacher.ts +75 -79
- package/src/testing/index.ts +181 -181
- package/src/tools/calculator.ts +73 -73
- package/src/tools/datetime.ts +149 -149
- package/src/tools/json-transform.ts +187 -187
- package/src/tools/mcp.ts +76 -76
- package/src/tools/text-analysis.ts +116 -116
- package/src/traces/index.ts +132 -0
- package/templates/Dockerfile +15 -15
- package/templates/code-reviewer/README.md +27 -27
- package/templates/code-reviewer/oad.yaml +41 -41
- package/templates/customer-service/README.md +22 -22
- package/templates/customer-service/oad.yaml +36 -36
- package/templates/docker-compose.yml +21 -21
- package/templates/ecommerce-assistant/README.md +45 -45
- package/templates/ecommerce-assistant/oad.yaml +47 -47
- package/templates/knowledge-base/README.md +28 -28
- package/templates/knowledge-base/oad.yaml +38 -38
- package/templates/sales-assistant/README.md +26 -26
- package/templates/sales-assistant/oad.yaml +43 -43
- package/templates/tech-support/README.md +43 -43
- package/templates/tech-support/oad.yaml +45 -45
- package/tests/a2a.test.ts +66 -66
- package/tests/agent.test.ts +72 -72
- package/tests/analytics.test.ts +50 -50
- package/tests/channel.test.ts +39 -39
- package/tests/e2e.test.ts +134 -134
- package/tests/errors.test.ts +83 -83
- package/tests/hitl.test.ts +71 -71
- package/tests/i18n.test.ts +41 -41
- package/tests/mcp.test.ts +54 -54
- package/tests/oad.test.ts +68 -68
- package/tests/performance.test.ts +115 -115
- package/tests/plugin.test.ts +74 -74
- package/tests/room.test.ts +106 -106
- package/tests/runtime.test.ts +42 -42
- package/tests/sandbox.test.ts +46 -46
- package/tests/security.test.ts +60 -60
- package/tests/templates.test.ts +77 -77
- package/tests/v070.test.ts +76 -76
- package/tests/versioning.test.ts +75 -75
- package/tests/voice.test.ts +61 -61
- package/tests/webhook.test.ts +29 -29
- package/tests/workflow.test.ts +143 -143
- package/tsconfig.json +19 -19
- package/vitest.config.ts +9 -9
- package/dist/core/streaming.d.ts +0 -56
- package/dist/core/streaming.js +0 -160
- package/dist/tools/gateway.d.ts +0 -28
- package/dist/tools/gateway.js +0 -177
- package/src/dtv/data.ts +0 -29
- package/src/dtv/trust.ts +0 -43
- package/src/dtv/value.ts +0 -47
- package/src/marketplace/index.ts +0 -223
package/tests/room.test.ts
CHANGED
|
@@ -1,106 +1,106 @@
|
|
|
1
|
-
import { describe, it, expect } from 'vitest';
|
|
2
|
-
import { Room } from '../src/core/room';
|
|
3
|
-
import { BaseAgent } from '../src/core/agent';
|
|
4
|
-
|
|
5
|
-
function makeAgent(name: string): BaseAgent {
|
|
6
|
-
const agent = new BaseAgent({ name });
|
|
7
|
-
// Synchronously set to ready by calling init
|
|
8
|
-
return agent;
|
|
9
|
-
}
|
|
10
|
-
|
|
11
|
-
describe('Room System', () => {
|
|
12
|
-
it('should create a room with a name', () => {
|
|
13
|
-
const room = new Room('test-room');
|
|
14
|
-
expect(room.name).toBe('test-room');
|
|
15
|
-
expect(room.getAgents()).toEqual([]);
|
|
16
|
-
});
|
|
17
|
-
|
|
18
|
-
it('should add and remove agents', () => {
|
|
19
|
-
const room = new Room('office');
|
|
20
|
-
const agent = makeAgent('agent-1');
|
|
21
|
-
room.addAgent(agent);
|
|
22
|
-
expect(room.getAgents()).toEqual(['agent-1']);
|
|
23
|
-
room.removeAgent('agent-1');
|
|
24
|
-
expect(room.getAgents()).toEqual([]);
|
|
25
|
-
});
|
|
26
|
-
|
|
27
|
-
it('should emit events on join/leave', () => {
|
|
28
|
-
const room = new Room('office');
|
|
29
|
-
const events: string[] = [];
|
|
30
|
-
room.on('agent:join', (name) => events.push(`join:${name}`));
|
|
31
|
-
room.on('agent:leave', (name) => events.push(`leave:${name}`));
|
|
32
|
-
|
|
33
|
-
const agent = makeAgent('a1');
|
|
34
|
-
room.addAgent(agent);
|
|
35
|
-
room.removeAgent('a1');
|
|
36
|
-
expect(events).toEqual(['join:a1', 'leave:a1']);
|
|
37
|
-
});
|
|
38
|
-
|
|
39
|
-
it('should support topic subscriptions', () => {
|
|
40
|
-
const room = new Room('office');
|
|
41
|
-
room.subscribe('agent-1', 'alerts');
|
|
42
|
-
room.subscribe('agent-2', 'alerts');
|
|
43
|
-
expect(room.getSubscribers('alerts')).toEqual(['agent-1', 'agent-2']);
|
|
44
|
-
room.unsubscribe('agent-1', 'alerts');
|
|
45
|
-
expect(room.getSubscribers('alerts')).toEqual(['agent-2']);
|
|
46
|
-
});
|
|
47
|
-
|
|
48
|
-
it('should broadcast to all agents except sender', async () => {
|
|
49
|
-
const room = new Room('office');
|
|
50
|
-
const a1 = makeAgent('a1');
|
|
51
|
-
const a2 = makeAgent('a2');
|
|
52
|
-
await a1.init();
|
|
53
|
-
await a2.init();
|
|
54
|
-
room.addAgent(a1);
|
|
55
|
-
room.addAgent(a2);
|
|
56
|
-
|
|
57
|
-
const responses = await room.broadcast('a1', 'Hello everyone');
|
|
58
|
-
expect(responses.length).toBe(1); // only a2 responds
|
|
59
|
-
expect(responses[0].role).toBe('assistant');
|
|
60
|
-
});
|
|
61
|
-
|
|
62
|
-
it('should send direct messages', async () => {
|
|
63
|
-
const room = new Room('office');
|
|
64
|
-
const a1 = makeAgent('a1');
|
|
65
|
-
const a2 = makeAgent('a2');
|
|
66
|
-
await a1.init();
|
|
67
|
-
await a2.init();
|
|
68
|
-
room.addAgent(a1);
|
|
69
|
-
room.addAgent(a2);
|
|
70
|
-
|
|
71
|
-
const responses = await room.send({
|
|
72
|
-
from: 'a1',
|
|
73
|
-
to: 'a2',
|
|
74
|
-
message: { id: 'm1', role: 'user', content: 'Hi a2', timestamp: Date.now() },
|
|
75
|
-
});
|
|
76
|
-
expect(responses.length).toBe(1);
|
|
77
|
-
});
|
|
78
|
-
|
|
79
|
-
it('should publish to topic subscribers only', async () => {
|
|
80
|
-
const room = new Room('office');
|
|
81
|
-
const a1 = makeAgent('a1');
|
|
82
|
-
const a2 = makeAgent('a2');
|
|
83
|
-
const a3 = makeAgent('a3');
|
|
84
|
-
await a1.init();
|
|
85
|
-
await a2.init();
|
|
86
|
-
await a3.init();
|
|
87
|
-
room.addAgent(a1);
|
|
88
|
-
room.addAgent(a2);
|
|
89
|
-
room.addAgent(a3);
|
|
90
|
-
|
|
91
|
-
room.subscribe('a2', 'alerts');
|
|
92
|
-
// a3 not subscribed
|
|
93
|
-
const responses = await room.publishToTopic('a1', 'alerts', 'Alert!');
|
|
94
|
-
expect(responses.length).toBe(1);
|
|
95
|
-
});
|
|
96
|
-
|
|
97
|
-
it('should remove agent from subscriptions on leave', () => {
|
|
98
|
-
const room = new Room('office');
|
|
99
|
-
room.subscribe('a1', 'topic1');
|
|
100
|
-
room.subscribe('a1', 'topic2');
|
|
101
|
-
expect(room.getSubscribers('topic1')).toContain('a1');
|
|
102
|
-
room.removeAgent('a1');
|
|
103
|
-
expect(room.getSubscribers('topic1')).not.toContain('a1');
|
|
104
|
-
expect(room.getSubscribers('topic2')).not.toContain('a1');
|
|
105
|
-
});
|
|
106
|
-
});
|
|
1
|
+
import { describe, it, expect } from 'vitest';
|
|
2
|
+
import { Room } from '../src/core/room';
|
|
3
|
+
import { BaseAgent } from '../src/core/agent';
|
|
4
|
+
|
|
5
|
+
function makeAgent(name: string): BaseAgent {
|
|
6
|
+
const agent = new BaseAgent({ name });
|
|
7
|
+
// Synchronously set to ready by calling init
|
|
8
|
+
return agent;
|
|
9
|
+
}
|
|
10
|
+
|
|
11
|
+
describe('Room System', () => {
|
|
12
|
+
it('should create a room with a name', () => {
|
|
13
|
+
const room = new Room('test-room');
|
|
14
|
+
expect(room.name).toBe('test-room');
|
|
15
|
+
expect(room.getAgents()).toEqual([]);
|
|
16
|
+
});
|
|
17
|
+
|
|
18
|
+
it('should add and remove agents', () => {
|
|
19
|
+
const room = new Room('office');
|
|
20
|
+
const agent = makeAgent('agent-1');
|
|
21
|
+
room.addAgent(agent);
|
|
22
|
+
expect(room.getAgents()).toEqual(['agent-1']);
|
|
23
|
+
room.removeAgent('agent-1');
|
|
24
|
+
expect(room.getAgents()).toEqual([]);
|
|
25
|
+
});
|
|
26
|
+
|
|
27
|
+
it('should emit events on join/leave', () => {
|
|
28
|
+
const room = new Room('office');
|
|
29
|
+
const events: string[] = [];
|
|
30
|
+
room.on('agent:join', (name) => events.push(`join:${name}`));
|
|
31
|
+
room.on('agent:leave', (name) => events.push(`leave:${name}`));
|
|
32
|
+
|
|
33
|
+
const agent = makeAgent('a1');
|
|
34
|
+
room.addAgent(agent);
|
|
35
|
+
room.removeAgent('a1');
|
|
36
|
+
expect(events).toEqual(['join:a1', 'leave:a1']);
|
|
37
|
+
});
|
|
38
|
+
|
|
39
|
+
it('should support topic subscriptions', () => {
|
|
40
|
+
const room = new Room('office');
|
|
41
|
+
room.subscribe('agent-1', 'alerts');
|
|
42
|
+
room.subscribe('agent-2', 'alerts');
|
|
43
|
+
expect(room.getSubscribers('alerts')).toEqual(['agent-1', 'agent-2']);
|
|
44
|
+
room.unsubscribe('agent-1', 'alerts');
|
|
45
|
+
expect(room.getSubscribers('alerts')).toEqual(['agent-2']);
|
|
46
|
+
});
|
|
47
|
+
|
|
48
|
+
it('should broadcast to all agents except sender', async () => {
|
|
49
|
+
const room = new Room('office');
|
|
50
|
+
const a1 = makeAgent('a1');
|
|
51
|
+
const a2 = makeAgent('a2');
|
|
52
|
+
await a1.init();
|
|
53
|
+
await a2.init();
|
|
54
|
+
room.addAgent(a1);
|
|
55
|
+
room.addAgent(a2);
|
|
56
|
+
|
|
57
|
+
const responses = await room.broadcast('a1', 'Hello everyone');
|
|
58
|
+
expect(responses.length).toBe(1); // only a2 responds
|
|
59
|
+
expect(responses[0].role).toBe('assistant');
|
|
60
|
+
});
|
|
61
|
+
|
|
62
|
+
it('should send direct messages', async () => {
|
|
63
|
+
const room = new Room('office');
|
|
64
|
+
const a1 = makeAgent('a1');
|
|
65
|
+
const a2 = makeAgent('a2');
|
|
66
|
+
await a1.init();
|
|
67
|
+
await a2.init();
|
|
68
|
+
room.addAgent(a1);
|
|
69
|
+
room.addAgent(a2);
|
|
70
|
+
|
|
71
|
+
const responses = await room.send({
|
|
72
|
+
from: 'a1',
|
|
73
|
+
to: 'a2',
|
|
74
|
+
message: { id: 'm1', role: 'user', content: 'Hi a2', timestamp: Date.now() },
|
|
75
|
+
});
|
|
76
|
+
expect(responses.length).toBe(1);
|
|
77
|
+
});
|
|
78
|
+
|
|
79
|
+
it('should publish to topic subscribers only', async () => {
|
|
80
|
+
const room = new Room('office');
|
|
81
|
+
const a1 = makeAgent('a1');
|
|
82
|
+
const a2 = makeAgent('a2');
|
|
83
|
+
const a3 = makeAgent('a3');
|
|
84
|
+
await a1.init();
|
|
85
|
+
await a2.init();
|
|
86
|
+
await a3.init();
|
|
87
|
+
room.addAgent(a1);
|
|
88
|
+
room.addAgent(a2);
|
|
89
|
+
room.addAgent(a3);
|
|
90
|
+
|
|
91
|
+
room.subscribe('a2', 'alerts');
|
|
92
|
+
// a3 not subscribed
|
|
93
|
+
const responses = await room.publishToTopic('a1', 'alerts', 'Alert!');
|
|
94
|
+
expect(responses.length).toBe(1);
|
|
95
|
+
});
|
|
96
|
+
|
|
97
|
+
it('should remove agent from subscriptions on leave', () => {
|
|
98
|
+
const room = new Room('office');
|
|
99
|
+
room.subscribe('a1', 'topic1');
|
|
100
|
+
room.subscribe('a1', 'topic2');
|
|
101
|
+
expect(room.getSubscribers('topic1')).toContain('a1');
|
|
102
|
+
room.removeAgent('a1');
|
|
103
|
+
expect(room.getSubscribers('topic1')).not.toContain('a1');
|
|
104
|
+
expect(room.getSubscribers('topic2')).not.toContain('a1');
|
|
105
|
+
});
|
|
106
|
+
});
|
package/tests/runtime.test.ts
CHANGED
|
@@ -1,42 +1,42 @@
|
|
|
1
|
-
import { describe, it, expect } from 'vitest';
|
|
2
|
-
import { AgentRuntime } from '../src/core/runtime';
|
|
3
|
-
import { createCustomerServiceConfig } from '../src/templates/customer-service';
|
|
4
|
-
|
|
5
|
-
describe('AgentRuntime', () => {
|
|
6
|
-
it('should initialize from config object', async () => {
|
|
7
|
-
const runtime = new AgentRuntime();
|
|
8
|
-
const config = createCustomerServiceConfig();
|
|
9
|
-
const agent = await runtime.initialize(config);
|
|
10
|
-
expect(agent.name).toBe('customer-service');
|
|
11
|
-
expect(agent.state).toBe('ready');
|
|
12
|
-
});
|
|
13
|
-
|
|
14
|
-
it('should throw if no config loaded', async () => {
|
|
15
|
-
const runtime = new AgentRuntime();
|
|
16
|
-
await expect(runtime.initialize()).rejects.toThrow('No config loaded');
|
|
17
|
-
});
|
|
18
|
-
|
|
19
|
-
it('should register skills after initialization', async () => {
|
|
20
|
-
const runtime = new AgentRuntime();
|
|
21
|
-
const config = createCustomerServiceConfig();
|
|
22
|
-
await runtime.initialize(config);
|
|
23
|
-
|
|
24
|
-
runtime.registerSkill({
|
|
25
|
-
name: 'test-skill',
|
|
26
|
-
description: 'Test',
|
|
27
|
-
execute: async () => ({ handled: false, confidence: 0 }),
|
|
28
|
-
});
|
|
29
|
-
// No throw = success
|
|
30
|
-
});
|
|
31
|
-
|
|
32
|
-
it('should throw registering skill before init', () => {
|
|
33
|
-
const runtime = new AgentRuntime();
|
|
34
|
-
expect(() =>
|
|
35
|
-
runtime.registerSkill({
|
|
36
|
-
name: 'test',
|
|
37
|
-
description: 'Test',
|
|
38
|
-
execute: async () => ({ handled: false, confidence: 0 }),
|
|
39
|
-
})
|
|
40
|
-
).toThrow('Agent not initialized');
|
|
41
|
-
});
|
|
42
|
-
});
|
|
1
|
+
import { describe, it, expect } from 'vitest';
|
|
2
|
+
import { AgentRuntime } from '../src/core/runtime';
|
|
3
|
+
import { createCustomerServiceConfig } from '../src/templates/customer-service';
|
|
4
|
+
|
|
5
|
+
describe('AgentRuntime', () => {
|
|
6
|
+
it('should initialize from config object', async () => {
|
|
7
|
+
const runtime = new AgentRuntime();
|
|
8
|
+
const config = createCustomerServiceConfig();
|
|
9
|
+
const agent = await runtime.initialize(config);
|
|
10
|
+
expect(agent.name).toBe('customer-service');
|
|
11
|
+
expect(agent.state).toBe('ready');
|
|
12
|
+
});
|
|
13
|
+
|
|
14
|
+
it('should throw if no config loaded', async () => {
|
|
15
|
+
const runtime = new AgentRuntime();
|
|
16
|
+
await expect(runtime.initialize()).rejects.toThrow('No config loaded');
|
|
17
|
+
});
|
|
18
|
+
|
|
19
|
+
it('should register skills after initialization', async () => {
|
|
20
|
+
const runtime = new AgentRuntime();
|
|
21
|
+
const config = createCustomerServiceConfig();
|
|
22
|
+
await runtime.initialize(config);
|
|
23
|
+
|
|
24
|
+
runtime.registerSkill({
|
|
25
|
+
name: 'test-skill',
|
|
26
|
+
description: 'Test',
|
|
27
|
+
execute: async () => ({ handled: false, confidence: 0 }),
|
|
28
|
+
});
|
|
29
|
+
// No throw = success
|
|
30
|
+
});
|
|
31
|
+
|
|
32
|
+
it('should throw registering skill before init', () => {
|
|
33
|
+
const runtime = new AgentRuntime();
|
|
34
|
+
expect(() =>
|
|
35
|
+
runtime.registerSkill({
|
|
36
|
+
name: 'test',
|
|
37
|
+
description: 'Test',
|
|
38
|
+
execute: async () => ({ handled: false, confidence: 0 }),
|
|
39
|
+
})
|
|
40
|
+
).toThrow('Agent not initialized');
|
|
41
|
+
});
|
|
42
|
+
});
|
package/tests/sandbox.test.ts
CHANGED
|
@@ -1,46 +1,46 @@
|
|
|
1
|
-
import { describe, it, expect } from 'vitest';
|
|
2
|
-
import { Sandbox } from '../src/core/sandbox';
|
|
3
|
-
|
|
4
|
-
describe('Security Sandbox', () => {
|
|
5
|
-
it('should create sandbox with trust level', () => {
|
|
6
|
-
const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
|
|
7
|
-
expect(sb.trustLevel).toBe('sandbox');
|
|
8
|
-
});
|
|
9
|
-
|
|
10
|
-
it('should restrict shell in sandbox mode', () => {
|
|
11
|
-
const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
|
|
12
|
-
expect(sb.checkShellAccess()).toBe(false);
|
|
13
|
-
});
|
|
14
|
-
|
|
15
|
-
it('should allow shell in certified mode', () => {
|
|
16
|
-
const sb = new Sandbox({ trustLevel: 'certified', agentDir: '/tmp/agent' });
|
|
17
|
-
expect(sb.checkShellAccess()).toBe(true);
|
|
18
|
-
});
|
|
19
|
-
|
|
20
|
-
it('should restrict network in sandbox mode', () => {
|
|
21
|
-
const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
|
|
22
|
-
expect(sb.checkNetworkAccess('https://api.openai.com')).toBe(false);
|
|
23
|
-
});
|
|
24
|
-
|
|
25
|
-
it('should allow network with allowlist', () => {
|
|
26
|
-
const sb = new Sandbox({
|
|
27
|
-
trustLevel: 'sandbox',
|
|
28
|
-
agentDir: '/tmp/agent',
|
|
29
|
-
networkAllowlist: ['api.openai.com'],
|
|
30
|
-
});
|
|
31
|
-
expect(sb.checkNetworkAccess('https://api.openai.com/v1/chat')).toBe(true);
|
|
32
|
-
expect(sb.checkNetworkAccess('https://evil.com')).toBe(false);
|
|
33
|
-
});
|
|
34
|
-
|
|
35
|
-
it('should allow wildcard network in listed mode', () => {
|
|
36
|
-
const sb = new Sandbox({ trustLevel: 'listed', agentDir: '/tmp/agent' });
|
|
37
|
-
expect(sb.checkNetworkAccess('https://anything.com')).toBe(true);
|
|
38
|
-
});
|
|
39
|
-
|
|
40
|
-
it('should return restrictions snapshot', () => {
|
|
41
|
-
const sb = new Sandbox({ trustLevel: 'verified', agentDir: '/tmp/agent' });
|
|
42
|
-
const r = sb.getRestrictions();
|
|
43
|
-
expect(r.shell).toBe(false);
|
|
44
|
-
expect(r.network.allowed.length).toBeGreaterThan(0);
|
|
45
|
-
});
|
|
46
|
-
});
|
|
1
|
+
import { describe, it, expect } from 'vitest';
|
|
2
|
+
import { Sandbox } from '../src/core/sandbox';
|
|
3
|
+
|
|
4
|
+
describe('Security Sandbox', () => {
|
|
5
|
+
it('should create sandbox with trust level', () => {
|
|
6
|
+
const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
|
|
7
|
+
expect(sb.trustLevel).toBe('sandbox');
|
|
8
|
+
});
|
|
9
|
+
|
|
10
|
+
it('should restrict shell in sandbox mode', () => {
|
|
11
|
+
const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
|
|
12
|
+
expect(sb.checkShellAccess()).toBe(false);
|
|
13
|
+
});
|
|
14
|
+
|
|
15
|
+
it('should allow shell in certified mode', () => {
|
|
16
|
+
const sb = new Sandbox({ trustLevel: 'certified', agentDir: '/tmp/agent' });
|
|
17
|
+
expect(sb.checkShellAccess()).toBe(true);
|
|
18
|
+
});
|
|
19
|
+
|
|
20
|
+
it('should restrict network in sandbox mode', () => {
|
|
21
|
+
const sb = new Sandbox({ trustLevel: 'sandbox', agentDir: '/tmp/agent' });
|
|
22
|
+
expect(sb.checkNetworkAccess('https://api.openai.com')).toBe(false);
|
|
23
|
+
});
|
|
24
|
+
|
|
25
|
+
it('should allow network with allowlist', () => {
|
|
26
|
+
const sb = new Sandbox({
|
|
27
|
+
trustLevel: 'sandbox',
|
|
28
|
+
agentDir: '/tmp/agent',
|
|
29
|
+
networkAllowlist: ['api.openai.com'],
|
|
30
|
+
});
|
|
31
|
+
expect(sb.checkNetworkAccess('https://api.openai.com/v1/chat')).toBe(true);
|
|
32
|
+
expect(sb.checkNetworkAccess('https://evil.com')).toBe(false);
|
|
33
|
+
});
|
|
34
|
+
|
|
35
|
+
it('should allow wildcard network in listed mode', () => {
|
|
36
|
+
const sb = new Sandbox({ trustLevel: 'listed', agentDir: '/tmp/agent' });
|
|
37
|
+
expect(sb.checkNetworkAccess('https://anything.com')).toBe(true);
|
|
38
|
+
});
|
|
39
|
+
|
|
40
|
+
it('should return restrictions snapshot', () => {
|
|
41
|
+
const sb = new Sandbox({ trustLevel: 'verified', agentDir: '/tmp/agent' });
|
|
42
|
+
const r = sb.getRestrictions();
|
|
43
|
+
expect(r.shell).toBe(false);
|
|
44
|
+
expect(r.network.allowed.length).toBeGreaterThan(0);
|
|
45
|
+
});
|
|
46
|
+
});
|
package/tests/security.test.ts
CHANGED
|
@@ -1,60 +1,60 @@
|
|
|
1
|
-
import { describe, it, expect } from 'vitest';
|
|
2
|
-
import { sanitizeInput, detectInjection, APIKeyManager } from '../src/core/security';
|
|
3
|
-
|
|
4
|
-
describe('Security', () => {
|
|
5
|
-
describe('sanitizeInput', () => {
|
|
6
|
-
it('strips script tags', () => {
|
|
7
|
-
expect(sanitizeInput('<script>alert(1)</script>hello')).not.toContain('<script');
|
|
8
|
-
});
|
|
9
|
-
it('encodes HTML entities', () => {
|
|
10
|
-
const result = sanitizeInput('a < b & c > d');
|
|
11
|
-
expect(result).toContain('<');
|
|
12
|
-
expect(result).toContain('&');
|
|
13
|
-
expect(result).toContain('>');
|
|
14
|
-
});
|
|
15
|
-
});
|
|
16
|
-
|
|
17
|
-
describe('detectInjection', () => {
|
|
18
|
-
it('detects XSS', () => {
|
|
19
|
-
const r = detectInjection('<script>alert(1)</script>');
|
|
20
|
-
expect(r.safe).toBe(false);
|
|
21
|
-
expect(r.threats).toContain('xss');
|
|
22
|
-
});
|
|
23
|
-
it('passes clean input', () => {
|
|
24
|
-
expect(detectInjection('Hello world')).toEqual({ safe: true, threats: [] });
|
|
25
|
-
});
|
|
26
|
-
});
|
|
27
|
-
|
|
28
|
-
describe('APIKeyManager', () => {
|
|
29
|
-
it('add, validate, revoke', () => {
|
|
30
|
-
const mgr = new APIKeyManager();
|
|
31
|
-
mgr.addKey('key1', { label: 'test' });
|
|
32
|
-
expect(mgr.isValid('key1')).toBe(true);
|
|
33
|
-
expect(mgr.isValid('key2')).toBe(false);
|
|
34
|
-
mgr.revokeKey('key1');
|
|
35
|
-
expect(mgr.isValid('key1')).toBe(false);
|
|
36
|
-
});
|
|
37
|
-
|
|
38
|
-
it('rotate key', () => {
|
|
39
|
-
const mgr = new APIKeyManager();
|
|
40
|
-
mgr.addKey('old');
|
|
41
|
-
expect(mgr.rotateKey('old', 'new')).toBe(true);
|
|
42
|
-
expect(mgr.isValid('old')).toBe(false);
|
|
43
|
-
expect(mgr.isValid('new')).toBe(true);
|
|
44
|
-
});
|
|
45
|
-
|
|
46
|
-
it('expires keys', () => {
|
|
47
|
-
const mgr = new APIKeyManager();
|
|
48
|
-
mgr.addKey('expired', { expiresAt: Date.now() - 1000 });
|
|
49
|
-
expect(mgr.isValid('expired')).toBe(false);
|
|
50
|
-
});
|
|
51
|
-
|
|
52
|
-
it('listActive filters', () => {
|
|
53
|
-
const mgr = new APIKeyManager();
|
|
54
|
-
mgr.addKey('a');
|
|
55
|
-
mgr.addKey('b');
|
|
56
|
-
mgr.revokeKey('b');
|
|
57
|
-
expect(mgr.listActive().length).toBe(1);
|
|
58
|
-
});
|
|
59
|
-
});
|
|
60
|
-
});
|
|
1
|
+
import { describe, it, expect } from 'vitest';
|
|
2
|
+
import { sanitizeInput, detectInjection, APIKeyManager } from '../src/core/security';
|
|
3
|
+
|
|
4
|
+
describe('Security', () => {
|
|
5
|
+
describe('sanitizeInput', () => {
|
|
6
|
+
it('strips script tags', () => {
|
|
7
|
+
expect(sanitizeInput('<script>alert(1)</script>hello')).not.toContain('<script');
|
|
8
|
+
});
|
|
9
|
+
it('encodes HTML entities', () => {
|
|
10
|
+
const result = sanitizeInput('a < b & c > d');
|
|
11
|
+
expect(result).toContain('<');
|
|
12
|
+
expect(result).toContain('&');
|
|
13
|
+
expect(result).toContain('>');
|
|
14
|
+
});
|
|
15
|
+
});
|
|
16
|
+
|
|
17
|
+
describe('detectInjection', () => {
|
|
18
|
+
it('detects XSS', () => {
|
|
19
|
+
const r = detectInjection('<script>alert(1)</script>');
|
|
20
|
+
expect(r.safe).toBe(false);
|
|
21
|
+
expect(r.threats).toContain('xss');
|
|
22
|
+
});
|
|
23
|
+
it('passes clean input', () => {
|
|
24
|
+
expect(detectInjection('Hello world')).toEqual({ safe: true, threats: [] });
|
|
25
|
+
});
|
|
26
|
+
});
|
|
27
|
+
|
|
28
|
+
describe('APIKeyManager', () => {
|
|
29
|
+
it('add, validate, revoke', () => {
|
|
30
|
+
const mgr = new APIKeyManager();
|
|
31
|
+
mgr.addKey('key1', { label: 'test' });
|
|
32
|
+
expect(mgr.isValid('key1')).toBe(true);
|
|
33
|
+
expect(mgr.isValid('key2')).toBe(false);
|
|
34
|
+
mgr.revokeKey('key1');
|
|
35
|
+
expect(mgr.isValid('key1')).toBe(false);
|
|
36
|
+
});
|
|
37
|
+
|
|
38
|
+
it('rotate key', () => {
|
|
39
|
+
const mgr = new APIKeyManager();
|
|
40
|
+
mgr.addKey('old');
|
|
41
|
+
expect(mgr.rotateKey('old', 'new')).toBe(true);
|
|
42
|
+
expect(mgr.isValid('old')).toBe(false);
|
|
43
|
+
expect(mgr.isValid('new')).toBe(true);
|
|
44
|
+
});
|
|
45
|
+
|
|
46
|
+
it('expires keys', () => {
|
|
47
|
+
const mgr = new APIKeyManager();
|
|
48
|
+
mgr.addKey('expired', { expiresAt: Date.now() - 1000 });
|
|
49
|
+
expect(mgr.isValid('expired')).toBe(false);
|
|
50
|
+
});
|
|
51
|
+
|
|
52
|
+
it('listActive filters', () => {
|
|
53
|
+
const mgr = new APIKeyManager();
|
|
54
|
+
mgr.addKey('a');
|
|
55
|
+
mgr.addKey('b');
|
|
56
|
+
mgr.revokeKey('b');
|
|
57
|
+
expect(mgr.listActive().length).toBe(1);
|
|
58
|
+
});
|
|
59
|
+
});
|
|
60
|
+
});
|