openclaw/src/secrets/ref-contract.test.ts

34 lines
1.1 KiB
TypeScript

import { describe, expect, it } from "vitest";
import {
INVALID_EXEC_SECRET_REF_IDS,
VALID_EXEC_SECRET_REF_IDS,
} from "../test-utils/secret-ref-test-vectors.js";
import { isValidExecSecretRefId, validateExecSecretRefId } from "./ref-contract.js";
describe("exec secret ref id validation", () => {
it("accepts valid exec secret ref ids", () => {
for (const id of VALID_EXEC_SECRET_REF_IDS) {
expect(isValidExecSecretRefId(id), `expected valid id: ${id}`).toBe(true);
expect(validateExecSecretRefId(id)).toEqual({ ok: true });
}
});
it("rejects invalid exec secret ref ids", () => {
for (const id of INVALID_EXEC_SECRET_REF_IDS) {
expect(isValidExecSecretRefId(id), `expected invalid id: ${id}`).toBe(false);
expect(validateExecSecretRefId(id).ok).toBe(false);
}
});
it("reports traversal segment failures separately", () => {
expect(validateExecSecretRefId("a/../b")).toEqual({
ok: false,
reason: "traversal-segment",
});
expect(validateExecSecretRefId("a/./b")).toEqual({
ok: false,
reason: "traversal-segment",
});
});
});