let5see/clawdbot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test: simplify sandbox path guard test

Browse Source
This commit is contained in:
Peter Steinberger
2026-01-19 14:46:07 +00:00
parent 5df58e404f
commit cf2fe4b4c5
1 changed files with 0 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
src/agents/pi-tools.create-clawdbot-coding-tools.adds-claude-style-aliases-schemas-without-dropping-g.test.ts
View File

@@ -75,32 +75,6 @@ describe("createClawdbotCodingTools", () => {
const outsidePath = path.join(os.tmpdir(), "clawdbot-outside.txt"); const outsidePath = path.join(os.tmpdir(), "clawdbot-outside.txt");
await fs.writeFile(outsidePath, "outside", "utf8"); await fs.writeFile(outsidePath, "outside", "utf8");
try { try {
const sandbox = {
enabled: true,
sessionKey: "sandbox:test",
workspaceDir: tmpDir,
agentWorkspaceDir: path.join(os.tmpdir(), "clawdbot-workspace"),
workspaceAccess: "ro",
containerName: "clawdbot-sbx-test",
containerWorkdir: "/workspace",
docker: {
image: "clawdbot-sandbox:bookworm-slim",
containerPrefix: "clawdbot-sbx-",
workdir: "/workspace",
readOnlyRoot: true,
tmpfs: [],
network: "none",
user: "1000:1000",
capDrop: ["ALL"],
env: { LANG: "C.UTF-8" },
},
tools: {
allow: ["read"],
deny: [],
},
browserAllowHostControl: false,
};
const readTool = createSandboxedReadTool(tmpDir); const readTool = createSandboxedReadTool(tmpDir);
await expect(readTool.execute("tool-sbx-1", { file_path: outsidePath })).rejects.toThrow(); await expect(readTool.execute("tool-sbx-1", { file_path: outsidePath })).rejects.toThrow();
} finally { } finally {