mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-29 21:07:40 +01:00
DottaandClaude Opus 4.8
ec7adcaf3d
Foundation for opt-in `tailscale_https` exposure of managed branch runtimes, implementing the PAP-17049 plan under the PAP-17050 threat-model verdict. Broker (packages/tailscale-https-broker): root/dedicated-account host broker exposing only idempotent list/expose/remove over a Unix socket. Implements the six required verdict controls: SO_PEERCRED + UID/GID allowlist + unguessable broker-issued lease handles (req #1); dedicated port allowlist + /proc listener ownership/loopback proof before mutation (req #2); per-mutation transaction (strict-parse serve JSON -> verify absence/exact-lease -> verify :443 -> one fixed per-port op -> reread -> require only-intended-changed + :443 identical -> atomic root-owned registry commit, quarantine-on-ambiguity) (req #3); execve/shell=false argv built only from canonical integers + fixed tokens, pinned CLI schema (req #4); versioned length-bounded strict-JSON protocol (req #5); bounded append-only audit events (req #6). Deny-by-default for Funnel/cert/Services/reset/set-config/path-handlers/:443/reserved ports. Shared contract (packages/shared): single source of truth for exposure config, lifecycle state (pending/ready/failed/cleanup_pending/removed), listener ownership, and status, with strict zod validators and deterministic app/HMR port-pair + URL derivation so DB/server/UI/runtime cannot drift. Tests: broker 57/57, shared runtime-exposure 13/13, both typecheck clean. Server/DB/UI lifecycle integration + docs land in follow-on commits. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
52 lines
2.2 KiB
TypeScript
52 lines
2.2 KiB
TypeScript
import { describe, expect, it } from "vitest";
|
|
import { assertCanonicalPort, parseCanonicalIntegerString } from "./integers.js";
|
|
|
|
describe("assertCanonicalPort", () => {
|
|
it("accepts in-range integers", () => {
|
|
expect(assertCanonicalPort(1)).toBe(1);
|
|
expect(assertCanonicalPort(42010)).toBe(42010);
|
|
expect(assertCanonicalPort(65535)).toBe(65535);
|
|
});
|
|
|
|
it("rejects non-numbers, non-integers, and out-of-range", () => {
|
|
expect(() => assertCanonicalPort("42010")).toThrow();
|
|
expect(() => assertCanonicalPort(42010.5)).toThrow();
|
|
expect(() => assertCanonicalPort(0)).toThrow();
|
|
expect(() => assertCanonicalPort(-1)).toThrow();
|
|
expect(() => assertCanonicalPort(65536)).toThrow();
|
|
expect(() => assertCanonicalPort(Number.NaN)).toThrow();
|
|
expect(() => assertCanonicalPort(Infinity)).toThrow();
|
|
expect(() => assertCanonicalPort(null)).toThrow();
|
|
});
|
|
});
|
|
|
|
describe("parseCanonicalIntegerString", () => {
|
|
it("accepts canonical decimal strings", () => {
|
|
expect(parseCanonicalIntegerString("0")).toBe(0);
|
|
expect(parseCanonicalIntegerString("42010")).toBe(42010);
|
|
});
|
|
|
|
it("rejects signs, whitespace, leading zeros, decimals, and exponents", () => {
|
|
expect(() => parseCanonicalIntegerString("+42010")).toThrow();
|
|
expect(() => parseCanonicalIntegerString("-1")).toThrow();
|
|
expect(() => parseCanonicalIntegerString(" 42010")).toThrow();
|
|
expect(() => parseCanonicalIntegerString("42010 ")).toThrow();
|
|
expect(() => parseCanonicalIntegerString("007")).toThrow();
|
|
expect(() => parseCanonicalIntegerString("00")).toThrow();
|
|
expect(() => parseCanonicalIntegerString("4.2")).toThrow();
|
|
expect(() => parseCanonicalIntegerString("4e2")).toThrow();
|
|
});
|
|
|
|
it("rejects Unicode digits and non-string input", () => {
|
|
// Arabic-Indic digits for 42010.
|
|
expect(() => parseCanonicalIntegerString("٤٢٠١٠")).toThrow();
|
|
// Fullwidth digits.
|
|
expect(() => parseCanonicalIntegerString("４２０１０")).toThrow();
|
|
expect(() => parseCanonicalIntegerString(42010 as unknown as string)).toThrow();
|
|
});
|
|
|
|
it("rejects integer overflow beyond safe range", () => {
|
|
expect(() => parseCanonicalIntegerString("99999999999999999999")).toThrow();
|
|
});
|
|
});
|