feat: add deployable alpha silo

2026-07-11 00:25:45 +08:00
parent 44557da499
commit 9e954790dc
57 changed files with 2792 additions and 400 deletions
@@ -0,0 +1,31 @@
+import { access, mkdir, mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { Readable } from "node:stream";
+import { afterEach, describe, expect, it } from "vitest";
+import { writeNewWorkspaceFileNoFollow } from "../../src/security/workspaceFiles.js";
+
+const roots: string[] = [];
+
+describe("inbound workspace file limits", () => {
+  const itOnLinux = process.platform === "linux" ? it : it.skip;
+  afterEach(async () => {
+    await Promise.all(roots.splice(0).map((root) => rm(root, { recursive: true, force: true })));
+  });
+
+  itOnLinux("fails and removes the partial file when the byte limit is exceeded", async () => {
+    const root = await mkdtemp(join(tmpdir(), "cph-workspace-limit-"));
+    roots.push(root);
+    const workspace = join(root, "project");
+    await mkdir(workspace);
+
+    await expect(writeNewWorkspaceFileNoFollow(
+      root,
+      workspace,
+      "too-large.bin",
+      Readable.from([Buffer.from("1234")]),
+      3,
+    )).rejects.toMatchObject({ reason: "limit" });
+    await expect(access(join(workspace, "too-large.bin"))).rejects.toMatchObject({ code: "ENOENT" });
+  });
+});