antcolony

6.5 KB

1. // tests/e2e-sandbox.mjs — antcolony#18 "each worker in its own sealed box": what a session sees inside the bubblewrap box.
2. // No tickets, no Claude: `./colony box <project>` prints the box's argv prefix, the test runs commands inside it.
3. // COLONY_E2E_SANDBOX_DIR (default .scratch/e2e-sandbox)
4. import { spawnSync } from 'node:child_process';
5. import { mkdirSync, rmSync, writeFileSync, existsSync } from 'node:fs';
6. import { dirname, join, resolve } from 'node:path';
7. import { fileURLToPath } from 'node:url';
9. const APP = resolve(dirname(fileURLToPath(import.meta.url)), '..');
10. const W = process.env.COLONY_E2E_SANDBOX_DIR || join(APP, '.scratch', 'e2e-sandbox');
11. let passes = 0, failures = 0;
12. const check = (name, ok, detail = '') => { if (ok) { passes++; console.log('ok ' + name); } else { failures++; console.log('FAIL ' + name + (detail ? ' — ' + detail : '')); } };
14. rmSync(W, { recursive: true, force: true });
15. const P = join(W, 'projects'), APPD = join(W, 'apps', 'app'), LIB = join(W, 'apps', 'lib'), OTHER = join(W, 'apps', 'other'), LIVE = join(W, 'live', 'app');
16. for (const d of [P, APPD, LIB, OTHER, LIVE]) mkdirSync(d, { recursive: true });
17. const reg = (name, o) => writeFileSync(join(P, name + '.json'), JSON.stringify({ name, concept: '', dev: { host: 'e2e-host', folder: o.dev }, dependsOn: o.deps || [], ...(o.live ? { live: { host: 'e2e-host', folder: o.live, url: 'x' } } : {}) }));
18. reg('app', { dev: APPD, deps: ['lib'], live: LIVE });
19. reg('lib', { dev: LIB });
20. reg('other', { dev: OTHER });
21. for (const [d, t] of [[APPD, 'app'], [LIB, 'lib'], [OTHER, 'other'], [LIVE, 'live']]) writeFileSync(join(d, 'file.txt'), t);
22. writeFileSync(join(APPD, '.env'), 'SECRET=1');
23. writeFileSync(join(LIB, '.env'), 'SECRET=2');
24. writeFileSync(join(APPD, '.env.example'), 'SECRET=');
26. const env = { ...process.env, COLONY_PROJECTS_DIR: P, COLONY_HOST: 'e2e-host', COLONY_SANDBOX: 'on', COLONY_SANDBOX_RO: '/nonexistent', COLONY_TOKEN_FILE: '/tmp/none', COLONY_CREATOR_TOKEN_FILE: '/tmp/none2' };
27. const box = (project, extra = [], e = env) => {
28. const r = spawnSync(join(APP, 'colony'), ['box', project, ...extra], { env: e, encoding: 'utf8' });
29. return { code: r.status, args: r.stdout.split('\n').filter(Boolean), out: r.stdout + r.stderr };
30. };
31. const inside = (b, script) => spawnSync(b.args[0], [...b.args.slice(1), 'sh', '-c', script], { env, encoding: 'utf8', timeout: 30000 });
32. const HOME = process.env.HOME;
34. const b = box('app');
35. check('box prints a bwrap command', b.args[0] === '/usr/bin/bwrap' && b.args.includes('--die-with-parent'), b.out);
36. let r = inside(b, `cat ${APPD}/file.txt; echo; cat ${LIB}/file.txt`);
37. check('sees its own folder and the folder of a project it depends on', r.stdout.split('\n').filter(Boolean).join(',') === 'app,lib', r.stdout + r.stderr);
38. r = inside(b, `echo x > ${APPD}/new.txt && echo wrote`);
39. check('writes into its own folder', r.stdout.trim() === 'wrote' && existsSync(join(APPD, 'new.txt')), r.stderr);
40. r = inside(b, `echo x > ${LIB}/new.txt; echo rc=$?`);
41. check('cannot write into a dependency folder (read-only)', /rc=[1-9]/.test(r.stdout) && !existsSync(join(LIB, 'new.txt')), r.stdout + r.stderr);
42. r = inside(b, `ls ${OTHER} 2>&1; echo rc=$?`);
43. check('does not see a project it does not depend on', /rc=[1-9]/.test(r.stdout) && !/file.txt/.test(r.stdout), r.stdout);
44. r = inside(b, `ls ${W}/apps 2>&1`);
45. check('the folder beside its own lists only what is bound', r.stdout.split('\n').filter(Boolean).sort().join(',') === 'app,lib', r.stdout);
46. r = inside(b, `cat ${APPD}/.env | wc -c; cat ${LIB}/.env | wc -c; cat ${APPD}/.env.example`);
47. check('.env files are empty inside, examples stay', r.stdout.trim().split('\n').join(',') === '0,0,SECRET=', r.stdout);
48. r = inside(b, `ls -A ${HOME}`);
49. check('home holds only the claude login + toolchain (no .config, .ssh, .bash_history)', !/\.config|\.ssh|bash_history|Downloads|Dokumente/.test(r.stdout), r.stdout);
50. r = inside(b, `ls ${HOME}/.ssh ${LIVE} 2>&1; echo rc=$?`);
51. check('no ssh keys and no live folder without a deploy mark', /rc=[1-9]/.test(r.stdout) && !/file.txt/.test(r.stdout), r.stdout);
52. r = inside(b, `echo "t=\${COLONY_TOKEN_FILE:-unset} c=\${COLONY_CREATOR_TOKEN_FILE:-unset}"`);
53. check('the tickets tokens are not in the environment', r.stdout.trim() === 't=unset c=unset', r.stdout);
54. r = inside(b, `ls /media/STORAGE/projects 2>/dev/null ; ls /mnt /root /srv 2>&1 | wc -l`);
55. check('the rest of the disk is gone (/media/STORAGE/projects holds only the bound folders)', r.stdout.split('\n').filter(l => /^[a-z]/.test(l)).join(',') === 'antcolony-scheduler' && r.stdout.trim().endsWith('3'), r.stdout);
56. r = inside(b, `ps -e | wc -l`);
57. check('own process namespace (only its own processes)', Number(r.stdout.trim()) < 12, r.stdout);
58. r = inside(b, `node -e "require('http').get('http://127.0.0.1:1',()=>{}).on('error',e=>console.log(e.code))"; getent hosts localhost | head -1`);
59. check('tools and the network stack work (node, name lookup)', /ECONNREFUSED/.test(r.stdout) && /localhost/.test(r.stdout), r.stdout + r.stderr);
61. const d = box('app', ['--deploy']);
62. r = inside(d, `echo x > ${LIVE}/deployed.txt && echo wrote; ls -d ${HOME}/.ssh 2>&1 | head -1`);
63. check('a deploy ticket may write the live folder', /wrote/.test(r.stdout) && existsSync(join(LIVE, 'deployed.txt')), r.stdout + r.stderr);
64. check('a deploy ticket gets the ssh keys read-only (when the user has some)', !existsSync(HOME + '/.ssh') || /\.ssh/.test(r.stdout), r.stdout);
65. r = inside(d, `ls ${OTHER} 2>&1; echo rc=$?`);
66. check('a deploy ticket still does not see other projects', /rc=[1-9]/.test(r.stdout), r.stdout);
68. const off = box('app', [], { ...env, COLONY_SANDBOX: 'off' });
69. check('COLONY_SANDBOX=off → no prefix (host access, only for tests)', off.args.length === 0, off.out);
71. // the deploy mark
72. const m = spawnSync(join(APP, 'bin', 'hybriel'), [join(APP, 'tests', 'sandbox-mark.hl')], { env, encoding: 'utf8', cwd: APP });
73. const want = ['summary-mark=true', 'no-mark=false', 'null-events=false', 'non-creator-comment=false'];
74. check('deploy mark: only the exact line `colony-deploy: yes` in the ticket text (or a creator comment) counts', want.every(x => m.stdout.includes(x)), m.stdout + m.stderr);
76. // the scheduler working on itself: the runs of all sessions are not visible
77. reg('antcolony', { dev: APP });
78. const sb = box('antcolony', [], { ...env, COLONY_HOME: APP });
79. r = inside(sb, `ls ${APP}/runs | wc -l; ls ${APP}/lib | head -1`);
80. check('the scheduler folder: its own code is there, the runs of all sessions are not', r.stdout.split('\n')[0].trim() === '0' && /\.hl$/.test(r.stdout.split('\n')[1] || ''), r.stdout + r.stderr);
82. console.log(`\n${passes} passed, ${failures} failed`);
83. process.exit(failures ? 1 : 0);