42b121bd0d
* fix: use openclaude paths in diagnostics and settings * fix: strip leaked reasoning from assistant output * fix: preserve legacy claude config compatibility * fix: tighten path and reasoning compatibility * fix: buffer streamed reasoning leak preambles * test: cover openclaude migration and reasoning fixes * test: isolate execFileNoThrow from cross-file mocks
66 lines
2.2 KiB
TypeScript
66 lines
2.2 KiB
TypeScript
import { expect, test } from 'bun:test'
|
|
import { mkdtempSync, writeFileSync } from 'node:fs'
|
|
import { tmpdir } from 'node:os'
|
|
import { join } from 'node:path'
|
|
|
|
async function importFreshExecFileNoThrowModule() {
|
|
return import(`./execFileNoThrow.ts?ts=${Date.now()}-${Math.random()}`)
|
|
}
|
|
|
|
test('execFileNoThrowWithCwd rejects shell-like executable names', async () => {
|
|
const { execFileNoThrowWithCwd } = await importFreshExecFileNoThrowModule()
|
|
const result = await execFileNoThrowWithCwd('openclaude && whoami', [])
|
|
|
|
expect(result.code).toBe(1)
|
|
expect(result.error).toContain('Unsafe executable')
|
|
})
|
|
|
|
test('execFileNoThrowWithCwd rejects cwd values with control characters', async () => {
|
|
const { execFileNoThrowWithCwd } = await importFreshExecFileNoThrowModule()
|
|
const result = await execFileNoThrowWithCwd(process.execPath, ['--version'], {
|
|
cwd: 'C:\\repo\nmalicious',
|
|
})
|
|
|
|
expect(result.code).toBe(1)
|
|
expect(result.error).toContain('Unsafe working directory')
|
|
})
|
|
|
|
test('execFileNoThrowWithCwd rejects arguments with control characters', async () => {
|
|
const { execFileNoThrowWithCwd } = await importFreshExecFileNoThrowModule()
|
|
const result = await execFileNoThrowWithCwd(process.execPath, [
|
|
'--version\nmalicious',
|
|
])
|
|
|
|
expect(result.code).toBe(1)
|
|
expect(result.error).toContain('Unsafe argument')
|
|
})
|
|
|
|
test('execFileNoThrowWithCwd rejects environment entries with control characters', async () => {
|
|
const { execFileNoThrowWithCwd } = await importFreshExecFileNoThrowModule()
|
|
const result = await execFileNoThrowWithCwd(process.execPath, ['--version'], {
|
|
env: {
|
|
...process.env,
|
|
BAD_ENV: 'line1\nline2',
|
|
},
|
|
})
|
|
|
|
expect(result.code).toBe(1)
|
|
expect(result.error).toContain('Unsafe environment')
|
|
})
|
|
|
|
test('execFileNoThrowWithCwd preserves Windows .cmd compatibility', async () => {
|
|
if (process.platform !== 'win32') {
|
|
return
|
|
}
|
|
const { execFileNoThrowWithCwd } = await importFreshExecFileNoThrowModule()
|
|
|
|
const dir = mkdtempSync(join(tmpdir(), 'openclaude-execfile-'))
|
|
const file = join(dir, 'hello.cmd')
|
|
writeFileSync(file, '@echo off\r\necho hello\r\n')
|
|
|
|
const result = await execFileNoThrowWithCwd(file, [])
|
|
|
|
expect(result.code).toBe(0)
|
|
expect(result.stdout).toContain('hello')
|
|
})
|