test: repair and update secure-exec test suites for current APIs

Author: NathanFlurry

crates/execution/tests/python.rs

@@ -725,6 +725,12 @@ export async function loadPyodide(options) {
                     | PythonVfsRpcMethod::SubprocessRun => {
                         panic!("unexpected non-filesystem Python RPC: {:?}", request.method)
                     }
+                    other => {
+                        panic!(
+                            "unexpected Python VFS RPC method in this test: {other:?} for {}",
+                            request.path
+                        )
+                    }
                 }
             }
             Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {

crates/kernel/tests/api_surface.rs

@@ -421,6 +421,54 @@ fn kernel_process_umask_applies_to_created_files_and_directories() {
     kernel.waitpid(process.pid()).expect("wait for shell");
 }
 
+#[test]
+fn read_dir_with_types_for_process_reports_entries_and_enforces_driver_ownership() {
+    let mut config = KernelVmConfig::new("vm-api-readdir-types");
+    config.permissions = Permissions::allow_all();
+    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
+    kernel
+        .register_driver(CommandDriver::new("shell", ["sh"]))
+        .expect("register shell");
+    kernel
+        .register_driver(CommandDriver::new("other", ["other"]))
+        .expect("register other driver");
+    kernel
+        .filesystem_mut()
+        .write_file("/tmp/typed-file.txt", b"hello".to_vec())
+        .expect("seed typed file");
+    kernel
+        .filesystem_mut()
+        .mkdir("/tmp/typed-dir", true)
+        .expect("seed typed dir");
+
+    let process = spawn_shell(&mut kernel);
+    let entries = kernel
+        .read_dir_with_types_for_process("shell", process.pid(), "/tmp")
+        .expect("read typed entries");
+
+    let file_entry = entries
+        .iter()
+        .find(|entry| entry.name == "typed-file.txt")
+        .expect("typed file entry");
+    assert!(!file_entry.is_directory);
+    assert!(!file_entry.is_symbolic_link);
+
+    let dir_entry = entries
+        .iter()
+        .find(|entry| entry.name == "typed-dir")
+        .expect("typed dir entry");
+    assert!(dir_entry.is_directory);
+    assert!(!dir_entry.is_symbolic_link);
+
+    assert_kernel_error_code(
+        kernel.read_dir_with_types_for_process("other", process.pid(), "/tmp"),
+        "EPERM",
+    );
+
+    process.finish(0);
+    kernel.waitpid(process.pid()).expect("wait for shell");
+}
+
 #[test]
 fn kernel_fd_surface_reads_exact_byte_counts_from_device_nodes() {
     let mut config = KernelVmConfig::new("vm-api-fd-devices");

crates/sidecar/tests/architecture_guards.rs

@@ -35,8 +35,9 @@
 //! * Build scripts (`build.rs`, `*_build_support.rs`, ...), `tests/` and
 //!   `benches/` directories, and inline `#[cfg(test)]` modules are excluded
 //!   from the scan (they are not production host-access surface).
-//! * `crates/execution/src/benchmark.rs` and `crates/execution/src/bin/` hold
-//!   benchmarking/dev tooling and are excluded for the same reason.
+//! * `crates/execution/src/benchmark.rs`, `crates/execution/src/bin/`, and
+//!   `crates/native-baseline/` hold benchmarking/dev tooling and are excluded
+//!   for the same reason.
 //!
 //! If you are adding a genuinely new sanctioned chokepoint, add its
 //! repo-relative path to the relevant allowlist below WITH a comment
@@ -108,6 +109,7 @@ fn is_excluded_file(rel: &Path) -> bool {
         || s.ends_with("v8_bridge_build.rs")
         // Benchmarking / dev tooling, not production host-access surface.
         || s == "crates/execution/src/benchmark.rs"
+        || s.starts_with("crates/native-baseline/")
         || s.contains("/src/bin/")
 }
 
@@ -326,6 +328,10 @@ const ENV_ALLOW: &[&str] = &[
     // Node import cache reads an operator timeout knob before materializing
     // host-side runtime assets for VM startup.
     "crates/execution/src/node_import_cache.rs",
+    // Host-side perf phase diagnostics toggles, read from operator env and not
+    // guest-reachable.
+    "crates/execution/src/javascript.rs",
+    "crates/sidecar/src/filesystem.rs",
     "crates/v8-runtime/src/bridge.rs",
     "crates/sidecar/src/execution.rs",
     "crates/sidecar/src/plugins/s3_common.rs",

crates/sidecar/tests/fixtures/limits-inventory.json

@@ -30,6 +30,12 @@
 		"class": "invariant",
 		"rationale": "Clamps a guest timer delay to the JS setTimeout ceiling (2^31-1 ms); a leak guard so a timer thread cannot outlive its session by pinning the session Arc, mirroring the standard setTimeout max rather than operator policy."
 	},
+	{
+		"name": "NET_BRIDGE_MAX_RAW_WRITE_BYTES",
+		"path": "crates/execution/assets/v8-bridge.source.js",
+		"class": "invariant",
+		"rationale": "Internal socket bridge flush granularity that preserves backpressure under the wired socket buffered-byte limit; not an operator policy cap."
+	},
 	{
 		"name": "JAVASCRIPT_EVENT_CHANNEL_CAPACITY",
 		"path": "crates/execution/src/javascript.rs",
@@ -90,6 +96,12 @@
 		"rationale": "Python VFS RPC timeout.",
 		"wired": "VmLimits.python.vfs_rpc_timeout_ms"
 	},
+	{
+		"name": "PYTHON_SOCKET_MAX_RECV",
+		"path": "crates/sidecar/src/execution.rs",
+		"class": "policy-deferred",
+		"rationale": "Guest Python socket recv request clamp for one synchronous host read; bounded by default, fold into Python/socket VmLimits if operators need to tune it."
+	},
 	{
 		"name": "V8_SESSION_FRAME_CHANNEL_CAPACITY",
 		"path": "crates/execution/src/v8_host.rs",

crates/sidecar/tests/protocol.rs

@@ -923,6 +923,7 @@ fn checked_in_bare_schema_covers_all_top_level_frame_payload_types() {
         "CloseStdinRequest",
         "KillProcessRequest",
         "GetProcessSnapshotRequest",
+        "GetResourceSnapshotRequest",
         "FindListenerRequest",
         "FindBoundUdpRequest",
         "GetSignalStateRequest",
@@ -951,6 +952,7 @@ fn checked_in_bare_schema_covers_all_top_level_frame_payload_types() {
         "StdinClosedResponse",
         "ProcessKilledResponse",
         "ProcessSnapshotResponse",
+        "ResourceSnapshotResponse",
         "ListenerSnapshotResponse",
         "BoundUdpSnapshotResponse",
         "SignalStateResponse",

crates/sidecar/tests/python.rs

@@ -1364,7 +1364,6 @@ print(json.dumps({
     assert_eq!(python_written, "from python");
 }
 
-#[test]
 fn python_runtime_supports_file_delete_and_rename() {
     assert_node_available();
 
@@ -1506,7 +1505,6 @@ print(json.dumps(results))
     );
 }
 
-#[test]
 fn python_runtime_supports_raw_tcp_and_udp_sockets() {
     assert_node_available();
 
@@ -1594,7 +1592,6 @@ print(json.dumps(result))
     assert_eq!(parsed["udp"], "ping udp");
 }
 
-#[test]
 fn python_runtime_supports_symlink_readlink_and_metadata() {
     assert_node_available();
 
@@ -3884,6 +3881,9 @@ fn python_suite() {
     python_runtime_blocks_pyodide_js_escape_hatches();
     concurrent_python_processes_stay_isolated_across_vms();
     python_runtime_mounts_workspace_over_the_kernel_vfs();
+    python_runtime_supports_file_delete_and_rename();
+    python_runtime_supports_raw_tcp_and_udp_sockets();
+    python_runtime_supports_symlink_readlink_and_metadata();
     workspace_files_are_shared_between_javascript_and_python_runtimes();
     python_workspace_mount_respects_read_only_root_permissions();
     python_runtime_blocks_mapped_pyodide_cache_symlink_metadata_escape();