Advance WebGPU volume and bounded workflows

This commit is contained in:
mes123456
2026-08-14 18:08:29 -04:00
parent 3da1dfc804
commit 68d50f810f
119 changed files with 9028 additions and 430 deletions

View File

@@ -23,7 +23,7 @@ try {
fs.writeFileSync(path.join(temporary, `${name}.cjs`), output);
}
const { gateScriptExecution, gateServerScriptJob } = require(path.join(temporary, "scripting-platform.cjs"));
const { createScriptExecutionAudit, gateScriptExecution, gateServerScriptJob } = require(path.join(temporary, "scripting-platform.cjs"));
const digest = "a".repeat(64);
const manifest = {
schemaVersion: 1,
@@ -56,7 +56,13 @@ try {
assert.equal(approved.issues[0]?.code, "SCRIPT_SANDBOX_UNAVAILABLE");
assert.equal(server.status, "BLOCKED");
assert.equal(server.issues[0]?.code, "SERVER_JOB_UNAVAILABLE");
process.stdout.write("scripting-isolation-ok status=BLOCKED approved-key=sandbox-unavailable server=unavailable execution=disabled\n");
const audit = await createScriptExecutionAudit(manifest, "clean", new Set(["approved-key"]), { requestId: "isolation-check", requestedAt: "2026-08-12T12:00:00.000Z" });
assert.equal(audit.decision, "DENY");
assert.equal(audit.reason, "SCRIPT_SANDBOX_UNAVAILABLE");
assert.equal(audit.approvedKey, true);
assert.match(audit.manifestSha256, /^[a-f0-9]{64}$/);
assert.match(audit.requestSha256, /^[a-f0-9]{64}$/);
process.stdout.write("scripting-isolation-ok status=BLOCKED audit=DENY approved-key=sandbox-unavailable server=unavailable execution=disabled\n");
}
finally {
fs.rmSync(temporary, { recursive: true, force: true });