feat: US-007 - Create ssh2-sftp-transfer fixture

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: NathanFlurry

packages/secure-exec/tests/e2e-docker/dockerfiles/sshd.Dockerfile

@@ -5,6 +5,7 @@ RUN apk add --no-cache openssh \
  && echo "testuser:testpass" | chpasswd \
  && sed -i 's/^#PasswordAuthentication.*/PasswordAuthentication yes/' /etc/ssh/sshd_config \
  && sed -i 's/^#PermitEmptyPasswords.*/PermitEmptyPasswords no/' /etc/ssh/sshd_config \
- && mkdir -p /home/testuser/upload
+ && mkdir -p /home/testuser/upload \
+ && chown testuser:testuser /home/testuser/upload
 EXPOSE 22
 CMD ["/usr/sbin/sshd", "-D", "-e"]

packages/secure-exec/tests/e2e-docker/ssh2-sftp-transfer/fixture.json

@@ -0,0 +1,9 @@
+{
+	"entry": "src/index.js",
+	"expectation": "fail",
+	"services": ["ssh"],
+	"fail": {
+		"code": 1,
+		"stderrIncludes": "net.Socket is not supported in sandbox"
+	}
+}

packages/secure-exec/tests/e2e-docker/ssh2-sftp-transfer/package.json

@@ -0,0 +1,8 @@
+{
+	"name": "e2e-docker-ssh2-sftp-transfer",
+	"private": true,
+	"type": "commonjs",
+	"dependencies": {
+		"ssh2": "1.17.0"
+	}
+}

packages/secure-exec/tests/e2e-docker/ssh2-sftp-transfer/src/index.js

@@ -0,0 +1,59 @@
+const { Client } = require("ssh2");
+
+async function main() {
+	const result = await new Promise((resolve, reject) => {
+		const conn = new Client();
+
+		conn.on("ready", () => {
+			conn.sftp((err, sftp) => {
+				if (err) return reject(err);
+
+				const remotePath = "/home/testuser/upload/test-e2e.txt";
+				const content = "hello-sftp-sandbox";
+
+				// Write file
+				const writeStream = sftp.createWriteStream(remotePath);
+				writeStream.end(content, () => {
+					// Read it back
+					sftp.readFile(remotePath, "utf8", (err, data) => {
+						if (err) return reject(err);
+
+						// Stat it
+						sftp.stat(remotePath, (err, stats) => {
+							if (err) return reject(err);
+
+							// Delete it
+							sftp.unlink(remotePath, (err) => {
+								conn.end();
+								if (err) return reject(err);
+								resolve({
+									connected: true,
+									written: content,
+									readBack: data,
+									match: data === content,
+									size: stats.size,
+								});
+							});
+						});
+					});
+				});
+			});
+		});
+
+		conn.on("error", reject);
+
+		conn.connect({
+			host: process.env.SSH_HOST,
+			port: Number(process.env.SSH_PORT),
+			username: "testuser",
+			password: "testpass",
+		});
+	});
+
+	console.log(JSON.stringify(result));
+}
+
+main().catch((err) => {
+	console.error(err.message);
+	process.exit(1);
+});