mirror of
https://github.com/hanzoai/bot.git
synced 2026-11-02 00:42:49 +00:00
zooqueen
adb8e1f802
Squash merge of 1,462 upstream commits with openclaw→hanzo-bot naming transforms applied. Conflicts resolved favoring our main branch to preserve existing customizations. Key upstream additions: - iOS Security Stack (concurrency locks, runtime guards, TTS fallback) - Discord CDN hostname allowlisting for SSRF protection - Discord mention handling improvements - Various bug fixes and stability improvements
116 lines
2.8 KiB
JSON
116 lines
2.8 KiB
JSON
{
|
|
"cases": [
|
|
{
|
|
"name": "binding matches when env key order changes",
|
|
"request": {
|
|
"host": "node",
|
|
"command": "git diff",
|
|
"binding": {
|
|
"argv": ["git", "diff"],
|
|
"cwd": null,
|
|
"agentId": null,
|
|
"sessionKey": null,
|
|
"env": { "SAFE_A": "1", "SAFE_B": "2" }
|
|
}
|
|
},
|
|
"invoke": {
|
|
"argv": ["git", "diff"],
|
|
"binding": {
|
|
"cwd": null,
|
|
"agentId": null,
|
|
"sessionKey": null,
|
|
"env": { "SAFE_B": "2", "SAFE_A": "1" }
|
|
}
|
|
},
|
|
"expected": { "ok": true }
|
|
},
|
|
{
|
|
"name": "binding rejects env mismatch",
|
|
"request": {
|
|
"host": "node",
|
|
"command": "git diff",
|
|
"binding": {
|
|
"argv": ["git", "diff"],
|
|
"cwd": null,
|
|
"agentId": null,
|
|
"sessionKey": null,
|
|
"env": { "SAFE": "1" }
|
|
}
|
|
},
|
|
"invoke": {
|
|
"argv": ["git", "diff"],
|
|
"binding": {
|
|
"cwd": null,
|
|
"agentId": null,
|
|
"sessionKey": null,
|
|
"env": { "SAFE": "2" }
|
|
}
|
|
},
|
|
"expected": { "ok": false, "code": "APPROVAL_ENV_MISMATCH" }
|
|
},
|
|
{
|
|
"name": "binding rejects unbound env overrides",
|
|
"request": {
|
|
"host": "node",
|
|
"command": "git diff",
|
|
"binding": {
|
|
"argv": ["git", "diff"],
|
|
"cwd": null,
|
|
"agentId": null,
|
|
"sessionKey": null
|
|
}
|
|
},
|
|
"invoke": {
|
|
"argv": ["git", "diff"],
|
|
"binding": {
|
|
"cwd": null,
|
|
"agentId": null,
|
|
"sessionKey": null,
|
|
"env": { "GIT_EXTERNAL_DIFF": "/tmp/pwn.sh" }
|
|
}
|
|
},
|
|
"expected": { "ok": false, "code": "APPROVAL_ENV_BINDING_MISSING" }
|
|
},
|
|
{
|
|
"name": "missing binding rejects requests even with matching argv",
|
|
"request": {
|
|
"host": "node",
|
|
"command": "echo SAFE",
|
|
"commandArgv": ["echo", "SAFE"]
|
|
},
|
|
"invoke": {
|
|
"argv": ["echo", "SAFE"],
|
|
"binding": {
|
|
"cwd": null,
|
|
"agentId": null,
|
|
"sessionKey": null
|
|
}
|
|
},
|
|
"expected": { "ok": false, "code": "APPROVAL_REQUEST_MISMATCH" }
|
|
},
|
|
{
|
|
"name": "binding stays authoritative when legacy command text diverges",
|
|
"request": {
|
|
"host": "node",
|
|
"command": "echo STALE",
|
|
"commandArgv": ["echo", "STALE"],
|
|
"binding": {
|
|
"argv": ["echo", "SAFE"],
|
|
"cwd": null,
|
|
"agentId": null,
|
|
"sessionKey": null
|
|
}
|
|
},
|
|
"invoke": {
|
|
"argv": ["echo", "SAFE"],
|
|
"binding": {
|
|
"cwd": null,
|
|
"agentId": null,
|
|
"sessionKey": null
|
|
}
|
|
},
|
|
"expected": { "ok": true }
|
|
}
|
|
]
|
|
}
|