openclaw/src/infra/path-alias-guards.test.ts

import fs from "node:fs/promises";
import path from "node:path";
import { describe, expect, it } from "vitest";
import { assertNoPathAliasEscape } from "./path-alias-guards.js";

async function withTempRoot<T>(run: (root: string) => Promise<T>): Promise<T> {
  const base = await fs.mkdtemp(path.join(process.cwd(), "openclaw-path-alias-"));
  const root = path.join(base, "root");
  await fs.mkdir(root, { recursive: true });
  try {
    return await run(root);
  } finally {
    await fs.rm(base, { recursive: true, force: true });
  }
}

describe("assertNoPathAliasEscape", () => {
  it.runIf(process.platform !== "win32")(
    "rejects broken final symlink targets outside root",
    async () => {
      await withTempRoot(async (root) => {
        const outside = path.join(path.dirname(root), "outside");
        await fs.mkdir(outside, { recursive: true });
        const linkPath = path.join(root, "jump");
        await fs.symlink(path.join(outside, "owned.txt"), linkPath);

        await expect(
          assertNoPathAliasEscape({
            absolutePath: linkPath,
            rootPath: root,
            boundaryLabel: "sandbox root",
          }),
        ).rejects.toThrow(/Symlink escapes sandbox root/);
      });
    },
  );

  it.runIf(process.platform !== "win32")(
    "allows broken final symlink targets that remain inside root",
    async () => {
      await withTempRoot(async (root) => {
        const linkPath = path.join(root, "jump");
        await fs.symlink(path.join(root, "missing", "owned.txt"), linkPath);

        await expect(
          assertNoPathAliasEscape({
            absolutePath: linkPath,
            rootPath: root,
            boundaryLabel: "sandbox root",
          }),
        ).resolves.toBeUndefined();
      });
    },
  );

  it.runIf(process.platform !== "win32")(
    "rejects broken targets that traverse via an in-root symlink alias",
    async () => {
      await withTempRoot(async (root) => {
        const outside = path.join(path.dirname(root), "outside");
        await fs.mkdir(outside, { recursive: true });
        await fs.symlink(outside, path.join(root, "hop"));
        const linkPath = path.join(root, "jump");
        await fs.symlink(path.join("hop", "missing", "owned.txt"), linkPath);

        await expect(
          assertNoPathAliasEscape({
            absolutePath: linkPath,
            rootPath: root,
            boundaryLabel: "sandbox root",
          }),
        ).rejects.toThrow(/Symlink escapes sandbox root/);
      });
    },
  );
});