mirror of
https://github.com/esengine/DeepSeek-Reasonix.git
synced 2026-11-07 10:45:59 -10:00
YHH
23f0a011c4
A workspace's reasonix.toml and .reasonix/settings.json are read as
untrusted input.
- [sandbox]: bash may only move to enforce and network only to false;
forbid_read and denied_domains add to the user's; allow_write entries
and workspace_root apply only when they resolve inside the workspace.
${VAR} in sandbox and proxy paths expands from the process environment
only.
- [permissions] mode, allow and allow_dynamic_bash, [network] proxy
settings and [desktop] default_tool_approval_mode are read from the
user config only; deny and ask add to the user's. An "always allow"
given in a workspace is stored under the Reasonix home
(project-grants.json) rather than in the checkout.
- Programs a workspace declares (hooks, language servers, providers,
tools.search.rg_path, tools.shell.path, [browser], tools.system_one
endpoints and the local Laya runtime) run only once approved for that
folder. An approval records the declaration and a digest of the files
it names, is kept under the Reasonix home, and is checked again before
each start; a change refuses the start with ErrProjectProgramChanged.
`reasonix trust` lists and approves them, and saving hooks from the
hooks page approves the block written. Model settings that named only
a held-back provider fall back to the user's choice.
- Single program paths may not point into the workspace, a temporary
directory, an allow_write root or a toolchain cache.
- Sandbox write roots and host write directories keep the identity they
had when first granted; a root whose identity changed is dropped with
sandbox.write_root_redirected or sandbox.write_root_changed. The
host-writable directory list lives in internal/base/hostwrite.
- Every ignored value is reported as a load warning with a typed reason
(Config.IgnoredProjectSettings); held-back programs raise the
project_programs_awaiting_approval notice.
105 lines
3.3 KiB
Go
105 lines
3.3 KiB
Go
package boot
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"reasonix/internal/contract/event"
|
|
"reasonix/internal/contract/provider"
|
|
)
|
|
|
|
// A model or effort switch rebuilds the runtime while reusing the serving
|
|
// generation's sidecars and discovered assembly. Reuse must not freeze the
|
|
// provider-visible prefix: what the switched runtime sends has to match a cold
|
|
// build of the same model, byte for byte, or the switch quietly keeps serving
|
|
// the previous generation's contract.
|
|
func TestEffectSwitchReusingGenerationMatchesColdBuild(t *testing.T) {
|
|
isolateConfigHome(t)
|
|
dir := robustTempDir(t)
|
|
t.Chdir(dir)
|
|
|
|
recA, recB := &effectRecordingProvider{}, &effectRecordingProvider{}
|
|
provider.Register("switch-effect-a", func(provider.Config) (provider.Provider, error) { return recA, nil })
|
|
provider.Register("switch-effect-b", func(provider.Config) (provider.Provider, error) { return recB, nil })
|
|
writeFile(t, dir, "reasonix.toml", `
|
|
default_model = "model-a"
|
|
|
|
[agent]
|
|
system_prompt = "BASE"
|
|
|
|
[[providers]]
|
|
name = "model-a"
|
|
kind = "switch-effect-a"
|
|
model = "x"
|
|
|
|
[[providers]]
|
|
name = "model-b"
|
|
kind = "switch-effect-b"
|
|
model = "y"
|
|
`)
|
|
approveWorkspace(t, dir)
|
|
|
|
ctx := context.Background()
|
|
serving, err := BuildRuntime(ctx, Options{Sink: event.Discard})
|
|
if err != nil {
|
|
t.Fatalf("BuildRuntime: %v", err)
|
|
}
|
|
defer serving.Controller.Close()
|
|
|
|
cold, err := BuildRuntime(ctx, Options{Model: "model-b/y", Sink: event.Discard})
|
|
if err != nil {
|
|
t.Fatalf("cold BuildRuntime: %v", err)
|
|
}
|
|
defer cold.Controller.Close()
|
|
if err := cold.Controller.Run(ctx, "reply ok"); err != nil {
|
|
t.Fatalf("cold Run: %v", err)
|
|
}
|
|
|
|
// Exactly what serve hands back for a switch (see reuseFromLastBuild).
|
|
opts := Options{Model: "model-b/y", Sink: event.Discard}
|
|
opts.RuntimeReload = RuntimeReload{
|
|
ForceFullRebuild: true,
|
|
Extensions: serving.Extensions,
|
|
Owner: serving.Owner,
|
|
PreviousSnapshot: serving.Snapshot,
|
|
PreviousDispatcher: serving.Dispatcher,
|
|
PreviousPlan: serving.Plan,
|
|
ReuseAssembly: serving.Assembly,
|
|
}
|
|
if serving.Plan != nil {
|
|
opts.Graph = serving.Plan.Graph
|
|
}
|
|
switched, err := BuildRuntime(ctx, opts)
|
|
if err != nil {
|
|
t.Fatalf("switch BuildRuntime: %v", err)
|
|
}
|
|
defer switched.Controller.Close()
|
|
if err := switched.Controller.Run(ctx, "reply ok"); err != nil {
|
|
t.Fatalf("switched Run: %v", err)
|
|
}
|
|
|
|
if len(recA.requests()) != 0 {
|
|
t.Fatalf("the outgoing model served %d requests after the switch", len(recA.requests()))
|
|
}
|
|
reqs := recB.requests()
|
|
if len(reqs) != 2 {
|
|
t.Fatalf("target model saw %d requests, want the cold build's and the switched one", len(reqs))
|
|
}
|
|
coldReq, switchedReq := reqs[0], reqs[1]
|
|
if len(coldReq.Messages) == 0 || len(switchedReq.Messages) == 0 {
|
|
t.Fatal("no messages reached the provider boundary")
|
|
}
|
|
if got, want := switchedReq.Messages[0].Content, coldReq.Messages[0].Content; got != want {
|
|
t.Errorf("reused assembly changed the system prefix:\n switched: %.200q\n cold: %.200q", got, want)
|
|
}
|
|
coldTools, switchedTools := toolNames(coldReq), toolNames(switchedReq)
|
|
if len(coldTools) != len(switchedTools) {
|
|
t.Fatalf("tool surface size %d after switch, want %d", len(switchedTools), len(coldTools))
|
|
}
|
|
for name := range coldTools {
|
|
if !switchedTools[name] {
|
|
t.Errorf("tool %q missing from the switched runtime's surface", name)
|
|
}
|
|
}
|
|
}
|