fix: confine Agent and MCP data access

2026-07-10 16:38:08 +08:00
parent 73fa28a178
commit f4968d6657
25 changed files with 1521 additions and 221 deletions
@@ -43,6 +43,9 @@ jobs:
      - name: Install dependencies
        run: npm ci

+      - name: Install Linux sandbox dependency
+        run: sudo apt-get update && sudo apt-get install --yes bubblewrap
+
      - name: Wait for Postgres
        run: |
          node <<'NODE'
@@ -85,6 +88,9 @@ jobs:
          cd ..
          cargo install --path crates/cph-cli --locked

+      - name: Prove real Claude SDK Bash sandbox boundary
+        run: /usr/bin/setpriv --no-new-privs npx vitest run test/integration/agent-sandbox-linux.test.ts
+
      - name: Run unit tests
        run: npx vitest run test/unit

@@ -93,7 +99,9 @@ jobs:
      - name: Run integration tests (mock provider, real prisma + cph)
        run: |
          npx prisma migrate deploy --schema prisma/schema.prisma
-          npx vitest run test/integration --exclude test/integration/real-model.test.ts
+          npx vitest run test/integration \
+            --exclude test/integration/real-model.test.ts \
+            --exclude test/integration/agent-sandbox-linux.test.ts
        env:
          DATABASE_URL: postgresql://paradigm:paradigm@127.0.0.1:5432/cph_hub_test