-
Notifications
You must be signed in to change notification settings - Fork 65
/
policy-converter.spec.js
73 lines (69 loc) · 1.66 KB
/
policy-converter.spec.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
import 'ses'
import test from 'ava'
import { POLICY_ITEM_ROOT, POLICY_ITEM_WILDCARD } from '../src/constants.js'
import { toEndoPolicy } from '../src/policy-converter.js'
/**
* @typedef {import('@endo/compartment-mapper').PolicyItem &
* import('../src/types.js').RootPolicy} LavaMoatPackagePolicyItem
*/
test('toEndoPolicy - basic', async (t) => {
/** @type {import('lavamoat-core').LavaMoatPolicy} */
const lmPolicy = {
resources: {
a: {
packages: {
b: true,
},
globals: {
console: true,
},
builtin: {
'fs.readFile': true,
},
},
},
}
/**
* @type {import('@endo/compartment-mapper').Policy<LavaMoatPackagePolicyItem>}
*/
const expected = {
defaultAttenuator: '@lavamoat/endomoat/attenuator',
entry: {
globals: [POLICY_ITEM_ROOT],
noGlobalFreeze: true,
packages: POLICY_ITEM_WILDCARD,
builtins: POLICY_ITEM_WILDCARD,
},
resources: {
'lavamoat-core': {
globals: {
'console.warn': true,
},
builtins: undefined,
packages: undefined,
},
'@lavamoat/endomoat': {
packages: {
'lavamoat-core': true,
},
globals: undefined,
builtins: {
'node:console': true,
'node:path': true,
},
},
a: {
packages: { b: true },
globals: { console: true },
builtins: {
fs: {
attenuate: '@lavamoat/endomoat/attenuator',
params: ['readFile'],
},
},
},
},
}
const actual = await toEndoPolicy(lmPolicy)
t.deepEqual(actual, expected)
})