mirror of
https://github.com/openai/codex.git
synced 2026-09-10 20:26:47 +00:00
fe140d4c8e
## Why Patch targets can use a different path convention from the Codex host, so host-native path conversion can misclassify writable roots and requested permissions. ## What changed - Evaluate patch targets as `PathUri` values with the active filesystem policy context, including workspace roots and the executor's path convention. - Distinguish executor-managed sandboxing from local platform sandboxing when deciding whether a patch can be auto-approved and how to normalize additional write permissions. - Make full-disk and special-path policy checks honor the selected executor's Windows or POSIX convention. ## Testing Add coverage for Windows executor URIs, full-disk policy aliases, remote patch permission requests, sandbox availability, and owner-provided workspace roots. GitOrigin-RevId: 1a054ea443efd342623c67432762f85c53d20c15
80 lines
2.8 KiB
Rust
80 lines
2.8 KiB
Rust
use super::*;
|
|
use crate::session::tests::make_session_and_context;
|
|
use crate::session::tests::update_selected_settings_for_test;
|
|
use codex_protocol::models::PermissionProfile;
|
|
use codex_protocol::models::PermissionProfileSnapshot;
|
|
use codex_protocol::protocol::AskForApproval;
|
|
use codex_utils_path_uri::PathUri;
|
|
use pretty_assertions::assert_eq;
|
|
use std::sync::Arc;
|
|
|
|
use tempfile::tempdir;
|
|
|
|
#[test]
|
|
fn convert_apply_patch_maps_add_variant() {
|
|
let tmp = tempdir().expect("tmp");
|
|
let path = tmp.path().join("a.txt");
|
|
let path_uri = PathUri::from_host_native_path(&path).expect("absolute test path");
|
|
let action = ApplyPatchAction::new_add_for_test(&path_uri, "hello".to_string());
|
|
|
|
let got = convert_apply_patch_to_protocol(&action);
|
|
|
|
assert_eq!(
|
|
got.get(path.as_path()),
|
|
Some(&FileChange::Add {
|
|
content: "hello".to_string()
|
|
})
|
|
);
|
|
}
|
|
|
|
#[tokio::test]
|
|
async fn prepare_apply_patch_uses_action_policy_before_turn_policy() {
|
|
let (_, mut turn) = make_session_and_context().await;
|
|
Arc::make_mut(&mut turn.config)
|
|
.permissions
|
|
.approval_policy
|
|
.set(AskForApproval::Never)
|
|
.expect("set admitted turn approval policy");
|
|
let mut step = StepContext::for_test(Arc::new(turn));
|
|
let step_settings = &mut Arc::get_mut(&mut step)
|
|
.expect("unshared test step")
|
|
.settings;
|
|
update_selected_settings_for_test(Arc::make_mut(step_settings), |selected| {
|
|
selected
|
|
.approval_policy
|
|
.set(AskForApproval::OnRequest)
|
|
.expect("set captured approval policy");
|
|
});
|
|
let tmp = tempdir().expect("tmp");
|
|
let path = tmp.path().join("outside.txt");
|
|
let path_uri = PathUri::from_host_native_path(&path).expect("absolute test path");
|
|
let action = ApplyPatchAction::new_add_for_test(&path_uri, "hello".to_string());
|
|
let permission_profile = PermissionProfile::read_only();
|
|
let file_system_policy = permission_profile.file_system_sandbox_policy();
|
|
let mut environment = step
|
|
.environments
|
|
.primary()
|
|
.expect("primary environment")
|
|
.clone();
|
|
environment.config_mut().permission_profile =
|
|
PermissionProfileSnapshot::legacy(permission_profile);
|
|
let sandbox = environment.sandbox_context(/*additional_permissions*/ None);
|
|
let context = sandbox.policy_context().expect("local sandbox context");
|
|
|
|
let prepared = prepare_apply_patch(
|
|
&step,
|
|
&environment,
|
|
&file_system_policy,
|
|
&context,
|
|
PatchSandboxRoute::Platform(codex_protocol::config_types::WindowsSandboxLevel::Disabled),
|
|
action,
|
|
)
|
|
.expect("issuing action policy should request approval");
|
|
|
|
assert!(!prepared.auto_approved);
|
|
assert!(matches!(
|
|
prepared.exec_approval_requirement,
|
|
ExecApprovalRequirement::NeedsApproval { .. }
|
|
));
|
|
}
|