116 lines
2.7 KiB
TypeScript
116 lines
2.7 KiB
TypeScript
import { createSandbox } from "./environment/node_sandbox";
|
|
import { expect, test } from "@jest/globals";
|
|
import { System } from "./system";
|
|
|
|
test("Run a Node sandbox", async () => {
|
|
let system = new System("server");
|
|
system.registerSyscalls("", [], {
|
|
addNumbers: (ctx, a, b) => {
|
|
return a + b;
|
|
},
|
|
failingSyscall: () => {
|
|
throw new Error("#fail");
|
|
},
|
|
});
|
|
system.registerSyscalls("", ["restricted"], {
|
|
restrictedSyscall: () => {
|
|
return "restricted";
|
|
},
|
|
});
|
|
system.registerSyscalls("", ["dangerous"], {
|
|
dangerousSyscall: () => {
|
|
return "yay";
|
|
},
|
|
});
|
|
let plug = await system.load(
|
|
"test",
|
|
{
|
|
requiredPermissions: ["dangerous"],
|
|
functions: {
|
|
addTen: {
|
|
code: `(() => {
|
|
return {
|
|
default: (n) => {
|
|
return n + 10;
|
|
}
|
|
};
|
|
})()`,
|
|
},
|
|
addNumbersSyscall: {
|
|
code: `(() => {
|
|
return {
|
|
default: async (a, b) => {
|
|
return await self.syscall("addNumbers", a, b);
|
|
}
|
|
};
|
|
})()`,
|
|
},
|
|
errorOut: {
|
|
code: `(() => {
|
|
return {
|
|
default: () => {
|
|
throw Error("BOOM");
|
|
}
|
|
};
|
|
})()`,
|
|
},
|
|
errorOutSys: {
|
|
code: `(() => {
|
|
return {
|
|
default: async () => {
|
|
await self.syscall("failingSyscall");
|
|
}
|
|
};
|
|
})()`,
|
|
},
|
|
restrictedTest: {
|
|
code: `(() => {
|
|
return {
|
|
default: async () => {
|
|
await self.syscall("restrictedSyscall");
|
|
}
|
|
};
|
|
})()`,
|
|
},
|
|
dangerousTest: {
|
|
code: `(() => {
|
|
return {
|
|
default: async () => {
|
|
return await self.syscall("dangerousSyscall");
|
|
}
|
|
};
|
|
})()`,
|
|
},
|
|
},
|
|
},
|
|
createSandbox
|
|
);
|
|
expect(await plug.invoke("addTen", [10])).toBe(20);
|
|
for (let i = 0; i < 100; i++) {
|
|
expect(await plug.invoke("addNumbersSyscall", [10, i])).toBe(10 + i);
|
|
}
|
|
try {
|
|
await plug.invoke("errorOut", []);
|
|
expect(true).toBe(false);
|
|
} catch (e: any) {
|
|
expect(e.message).toBe("BOOM");
|
|
}
|
|
try {
|
|
await plug.invoke("errorOutSys", []);
|
|
expect(true).toBe(false);
|
|
} catch (e: any) {
|
|
expect(e.message).toBe("#fail");
|
|
}
|
|
try {
|
|
await plug.invoke("restrictedTest", []);
|
|
expect(true).toBe(false);
|
|
} catch (e: any) {
|
|
expect(e.message).toBe(
|
|
"Missing permission 'restricted' for syscall restrictedSyscall"
|
|
);
|
|
}
|
|
expect(await plug.invoke("dangerousTest", [])).toBe("yay");
|
|
|
|
await system.unloadAll();
|
|
});
|