Autumn-27
b513b656aa
所有目标流量可经统一的全局代理出网(http/https/socks5,支持 user:pass): - 开启流量捕获时,作为 MITM 记录代理的上游(流量照录再经代理出网); 拦截与透传两条路径都走上游,不泄露源 IP。 - 关闭捕获时,直接注入 agent 的 bash 环境与 WebFetch;proxyEnv 增加 ALL_PROXY 以支持 socks5。 配置存于 settings KV 表(无需迁移),前端系统配置页新增「全局代理」卡片。 与网络搜索代理、LLM 代理相互独立。
80 lines
3.3 KiB
Go
80 lines
3.3 KiB
Go
package agent
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func TestRenderSystemOverrideAndFallback(t *testing.T) {
|
|
t.Cleanup(func() { PromptOverride = nil })
|
|
|
|
// no override → built-in default
|
|
PromptOverride = nil
|
|
if got := renderSystem("planner", "DEFAULT", PlannerVars{Goal: "g"}); got != "DEFAULT" {
|
|
t.Fatalf("no override should give default, got %q", got)
|
|
}
|
|
|
|
// override → rendered with vars
|
|
PromptOverride = func(k string) (string, bool) {
|
|
if k == "planner" {
|
|
return "目标:{{.Goal}} 范围:{{.Scope}}", true
|
|
}
|
|
return "", false
|
|
}
|
|
if got := renderSystem("planner", "DEFAULT", PlannerVars{Goal: "拿下X", Scope: "*.x.com"}); got != "目标:拿下X 范围:*.x.com" {
|
|
t.Fatalf("override render: %q", got)
|
|
}
|
|
|
|
// override referencing a non-catalog var → execution error → fallback to default
|
|
PromptOverride = func(k string) (string, bool) { return "{{.NotInCatalog}}", true }
|
|
if got := renderSystem("planner", "DEFAULT", PlannerVars{Goal: "x"}); got != "DEFAULT" {
|
|
t.Fatalf("bad var should fall back to default, got %q", got)
|
|
}
|
|
|
|
// full plannerSystem path: DB body [A] is honored, then the code-owned tail
|
|
// [C] (中间产物输出规约) is ALWAYS appended — editing the body can't drop it.
|
|
PromptOverride = func(k string) (string, bool) { return "PLANNER {{.Goal}}", true }
|
|
got := plannerSystem("拿下X", "/data", "/data")
|
|
if !strings.HasPrefix(got, "PLANNER 拿下X") {
|
|
t.Fatalf("plannerSystem body not honored: %q", got)
|
|
}
|
|
if !strings.Contains(got, "中间产物输出规约") || !strings.Contains(got, "/data") {
|
|
t.Fatalf("plannerSystem missing code-owned artifact tail: %q", got)
|
|
}
|
|
|
|
// worker dual-text via {{if .ProxyAddr}} in a user template, plus the code tail:
|
|
// [B] trafficTool present only when RECORDING (caCert set — the MITM is on, so
|
|
// the traffic_* tools exist), [C] artifact spec always present. The trafficTool
|
|
// block is gated on the CA (arg 2), NOT on ProxyAddr — a global egress proxy
|
|
// with capture off routes traffic but records nothing.
|
|
PromptOverride = func(k string) (string, bool) {
|
|
return "{{if .ProxyAddr}}走代理 {{.ProxyAddr}}{{else}}手动{{end}}", true
|
|
}
|
|
recording := workerSystem("127.0.0.1:8080", "/ca.pem", "/data", "/data")
|
|
if !strings.HasPrefix(recording, "走代理 127.0.0.1:8080") {
|
|
t.Fatalf("worker proxy branch body: %q", recording)
|
|
}
|
|
if !strings.Contains(recording, "traffic_search") {
|
|
t.Fatalf("worker while recording should inject trafficTool: %q", recording)
|
|
}
|
|
if !strings.Contains(recording, "中间产物输出规约") {
|
|
t.Fatalf("worker missing artifact tail: %q", recording)
|
|
}
|
|
// Egress proxy set but capture OFF (no CA): the ProxyAddr template branch still
|
|
// renders, but the trafficTool block must NOT — those tools are not registered.
|
|
egressOnly := workerSystem("127.0.0.1:8080", "", "/data", "/data")
|
|
if !strings.HasPrefix(egressOnly, "走代理 127.0.0.1:8080") {
|
|
t.Fatalf("worker egress-only branch body: %q", egressOnly)
|
|
}
|
|
if strings.Contains(egressOnly, "traffic_search") {
|
|
t.Fatalf("worker without recording must NOT inject trafficTool: %q", egressOnly)
|
|
}
|
|
noProxy := workerSystem("", "", "/data", "/data")
|
|
if !strings.HasPrefix(noProxy, "手动") {
|
|
t.Fatalf("worker no-proxy branch body: %q", noProxy)
|
|
}
|
|
if strings.Contains(noProxy, "traffic_search") {
|
|
t.Fatalf("worker without proxy must NOT inject trafficTool: %q", noProxy)
|
|
}
|
|
}
|