@akira-tl/forgerelay 0.2.1 → 0.2.3

package/scripts/debug/accept.mjs

@@ -83,6 +83,11 @@ try {
   assert.equal(initialized.message.result.serverInfo.name, "forgerelay");
   assert.equal(initialized.message.result.serverInfo.title, "ForgeRelay");
   assert.equal(initialized.message.result.serverInfo.version, packageJson.version);
+  const serverInstructions = initialized.message.result.instructions ?? "";
+  assert.match(serverInstructions, /Shell commands may modify ordinary project files/);
+  assert.match(serverInstructions, /\/etc\/sudoers/);
+  assert.match(serverInstructions, /configuration files through shell only when the user's request explicitly calls for that configuration change/);
+  assert.doesNotMatch(serverInstructions, /Do not create or modify files with bash/);
   pass(
     "MCP initialize",
     JSON.stringify(initialized.message.result.serverInfo),
@@ -103,9 +108,13 @@ try {
     params: {},
   }).message.result.tools;
   const toolNames = tools.map((tool) => tool.name);
-  for (const expected of ["open_workspace", "close_worktree", "read", "write", "edit", "grep", "glob", "ls", "bash"]) {
+  for (const expected of ["open_workspace", "close_worktree", "read", "write", "edit", "rename", "delete", "grep", "glob", "ls", "bash"]) {
     assert.ok(toolNames.includes(expected), `missing debug tool ${expected}`);
   }
+  const bashTool = tools.find((tool) => tool.name === "bash");
+  assert.match(bashTool?.description ?? "", /may modify ordinary project files/);
+  assert.match(bashTool?.description ?? "", /\/etc\/sudoers/);
+  assert.doesNotMatch(bashTool?.description ?? "", /Do not use bash to create, move, rename, or delete project files/);
   pass("MCP tools/list", `${toolNames.length} tools: ${toolNames.join(", ")}`);
 
   const opened = callTool(oauth.accessToken, sessionId, 3, "open_workspace", {
@@ -146,6 +155,21 @@ try {
   assert.equal(failedEdit.isError, true);
   pass("failed tool path", "edit returned isError=true and triggered AfterToolFailure");
 
+  const renamedWorkspaceFile = callTool(oauth.accessToken, sessionId, 74, "rename", {
+    workspaceId,
+    path: "acceptance.txt",
+    newPath: "renamed-acceptance.txt",
+  });
+  assert.equal(renamedWorkspaceFile.isError, undefined);
+  assert.equal(readFileSync(join(checkoutWorkspace, "renamed-acceptance.txt"), "utf8"), "forgerelay 7677 acceptance\n");
+  const deletedWorkspaceFile = callTool(oauth.accessToken, sessionId, 75, "delete", {
+    workspaceId,
+    path: "renamed-acceptance.txt",
+  });
+  assert.equal(deletedWorkspaceFile.isError, undefined);
+  assert.equal(existsSync(join(checkoutWorkspace, "renamed-acceptance.txt")), false);
+  pass("rename + delete", "workspace file renamed and deleted through MCP");
+
   mkdirSync(tempAcceptanceRoot, { recursive: true });
   const tempFile = join(tempAcceptanceRoot, "mcp-temp.txt");
   const tempWritten = callTool(oauth.accessToken, sessionId, 70, "write", {
@@ -169,13 +193,28 @@ try {
   assert.equal(tempEdited.isError, undefined);
   assert.equal(readFileSync(tempFile, "utf8"), "forgerelay temp after edit\n");
 
+  const renamedTempFile = join(tempAcceptanceRoot, "mcp-temp-renamed.txt");
+  const tempRenamed = callTool(oauth.accessToken, sessionId, 76, "rename", {
+    workspaceId,
+    path: tempFile,
+    newPath: renamedTempFile,
+  });
+  assert.equal(tempRenamed.isError, undefined);
+  assert.equal(readFileSync(renamedTempFile, "utf8"), "forgerelay temp after edit\n");
+  const tempDeleted = callTool(oauth.accessToken, sessionId, 77, "delete", {
+    workspaceId,
+    path: renamedTempFile,
+  });
+  assert.equal(tempDeleted.isError, undefined);
+  assert.equal(existsSync(renamedTempFile), false);
+
   const outsideRoots = callTool(oauth.accessToken, sessionId, 73, "read", {
     workspaceId,
     path: join(homedir(), "forgerelay-debug-outside-roots.txt"),
   });
   assert.equal(outsideRoots.isError, true);
   assert.match(toolText(outsideRoots), /outside allowed roots/i);
-  pass("OS temp file tools", "write + read + edit passed; arbitrary home path rejected");
+  pass("OS temp file tools", "write + read + edit + rename + delete passed; arbitrary home path rejected");
 
   setupGitProject(gitProject);
   const worktreeOpened = callTool(oauth.accessToken, sessionId, 8, "open_workspace", {