1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
using System.Buffers.Binary;
using System.Text;
using System.Text.Json;
using Agent.Admin.Client;
using Agent.Windows.Diagnostics;
namespace Agent.Windows.Tests;
public sealed class AdministrativeBoundaryTests
{
[Fact]
public async Task Administrative_protocol_round_trips_only_the_fixed_network_request_shape()
{
var request = new AdminRequest(AdminProtocol.Version, "apply-network", Guid.NewGuid(), "S-1-15-2-1", "local",
[new("127.0.0.1", 11434)], false);
using var stream = new MemoryStream();
await AdminProtocol.WriteAsync(stream, request, TestContext.Current.CancellationToken);
stream.Position = 0;
AdminRequest actual = await AdminProtocol.ReadAsync<AdminRequest>(stream, TestContext.Current.CancellationToken);
Assert.Equal(request.Version, actual.Version);
Assert.Equal(request.Operation, actual.Operation);
Assert.Equal(request.TaskId, actual.TaskId);
Assert.Equal(request.ApplicationSid, actual.ApplicationSid);
Assert.Equal(request.NetworkAccess, actual.NetworkAccess);
Assert.Equal(request.OriginallyLoopbackExempt, actual.OriginallyLoopbackExempt);
Assert.Equal(request.Endpoints, actual.Endpoints);
string json = Encoding.UTF8.GetString(stream.ToArray());
Assert.DoesNotContain("executable", json, StringComparison.OrdinalIgnoreCase);
Assert.DoesNotContain("commandLine", json, StringComparison.OrdinalIgnoreCase);
Assert.DoesNotContain("securityDescriptor", json, StringComparison.OrdinalIgnoreCase);
Assert.DoesNotContain("layer", json, StringComparison.OrdinalIgnoreCase);
Assert.DoesNotContain("action", json, StringComparison.OrdinalIgnoreCase);
}
[Fact]
public async Task Administrative_protocol_rejects_oversized_messages_before_allocation()
{
byte[] header = new byte[4];
BinaryPrimitives.WriteInt32LittleEndian(header, AdminProtocol.MaxMessageBytes + 1);
using var stream = new MemoryStream(header);
await Assert.ThrowsAsync<InvalidDataException>(() => AdminProtocol.ReadAsync<AdminRequest>(stream,
TestContext.Current.CancellationToken));
}
[Fact]
public async Task Administrative_protocol_rejects_fields_outside_the_fixed_schema()
{
byte[] payload = Encoding.UTF8.GetBytes("""{"version":1,"operation":"hello","taskId":"00000000-0000-0000-0000-000000000000","command":"cmd.exe"}""");
byte[] framed = new byte[payload.Length + 4];
BinaryPrimitives.WriteInt32LittleEndian(framed, payload.Length);
payload.CopyTo(framed.AsSpan(4));
using var stream = new MemoryStream(framed);
await Assert.ThrowsAsync<JsonException>(() => AdminProtocol.ReadAsync<AdminRequest>(stream,
TestContext.Current.CancellationToken));
}
[Fact]
public void Manifests_and_native_call_ownership_match_the_process_boundary()
{
string root = RepositoryRoot();
string mainManifest = File.ReadAllText(Path.Combine(root, "src", "Agent.App", "app.manifest"));
string helperManifest = File.ReadAllText(Path.Combine(root, "src", "Agent.Admin", "Agent.Admin.Host", "app.manifest"));
Assert.Contains("level=\"asInvoker\"", mainManifest, StringComparison.Ordinal);
Assert.Contains("level=\"requireAdministrator\"", helperManifest, StringComparison.Ordinal);
Assert.Contains("uiAccess=\"false\"", helperManifest, StringComparison.Ordinal);
string normalNative = File.ReadAllText(Path.Combine(root, "src", "Agent.Windows", "NativeMethods.txt"));
Assert.DoesNotContain("FwpmTransactionBegin0", normalNative, StringComparison.Ordinal);
Assert.DoesNotContain("FwpmFilterAdd0", normalNative, StringComparison.Ordinal);
Assert.DoesNotContain("NetworkIsolationSetAppContainerConfig", normalNative, StringComparison.Ordinal);
string helperNative = File.ReadAllText(Path.Combine(root, "src", "Agent.Admin", "Agent.Admin.Host", "NativeMethods.txt"));
Assert.Contains("FwpmTransactionBegin0", helperNative, StringComparison.Ordinal);
Assert.Contains("NetworkIsolationSetAppContainerConfig", helperNative, StringComparison.Ordinal);
string client = File.ReadAllText(Path.Combine(root, "src", "Agent.Admin", "Agent.Admin.Client", "ElevatedNetworkSession.cs"));
Assert.Contains("PipeRejectRemoteClients", client, StringComparison.Ordinal);
}
[Theory]
[InlineData("0.1.0.0", true)]
[InlineData("0.1.0", true)]
[InlineData("0.1.1.0", false)]
[InlineData("invalid", false)]
public void Helper_compatibility_compares_parsed_major_minor_build(string helperFileVersion, bool expected)
{
Assert.Equal(expected, WindowsPlatformCheck.HasSameReleaseIdentity(new Version(0, 1, 0, 0), helperFileVersion));
}
private static string RepositoryRoot()
{
DirectoryInfo? current = new(AppContext.BaseDirectory);
while (current is not null)
{
if (File.Exists(Path.Combine(current.FullName, "AgentSandboxMcp.slnx"))) return current.FullName;
current = current.Parent;
}
throw new DirectoryNotFoundException("Repository root was not found.");
}
}
|
