@gotgenes/pi-permission-system 17.0.0 → 17.1.1

package/test/handlers/gates/skill-read.test.ts

@@ -1,8 +1,12 @@
 import { describe, expect, it, vi } from "vitest";
 import { describeSkillReadGate } from "#src/handlers/gates/skill-read";
 import type { ToolCallContext } from "#src/handlers/gates/types";
+import { PathNormalizer } from "#src/path-normalizer";
 import type { SkillPromptEntry } from "#src/skill-prompt-sanitizer";
 
+// All test tccs use cwd "/test/project"; one normalizer serves every call.
+const normalizer = new PathNormalizer("linux", "/test/project");
+
 // ── SDK stubs ──────────────────────────────────────────────────────────────
 vi.mock("@earendil-works/pi-coding-agent", async (importOriginal) => {
   const original =
@@ -41,34 +45,39 @@ function makeTcc(overrides: Partial<ToolCallContext> = {}): ToolCallContext {
 
 describe("describeSkillReadGate", () => {
   it("returns null when tool is not read", () => {
-    const result = describeSkillReadGate(makeTcc({ toolName: "write" }), () => [
-      makeSkillEntry(),
-    ]);
+    const result = describeSkillReadGate(
+      makeTcc({ toolName: "write" }),
+      normalizer,
+      () => [makeSkillEntry()],
+    );
     expect(result).toBeNull();
   });
 
   it("returns null when no active skill entries", () => {
-    const result = describeSkillReadGate(makeTcc(), () => []);
+    const result = describeSkillReadGate(makeTcc(), normalizer, () => []);
     expect(result).toBeNull();
   });
 
   it("returns null when read path does not match any skill", () => {
     const result = describeSkillReadGate(
       makeTcc({ input: { path: "/test/project/src/index.ts" } }),
+      normalizer,
       () => [makeSkillEntry()],
     );
     expect(result).toBeNull();
   });
 
   it("returns null when input has no path", () => {
-    const result = describeSkillReadGate(makeTcc({ input: {} }), () => [
-      makeSkillEntry(),
-    ]);
+    const result = describeSkillReadGate(
+      makeTcc({ input: {} }),
+      normalizer,
+      () => [makeSkillEntry()],
+    );
     expect(result).toBeNull();
   });
 
   it("returns GateDescriptor with preResolved.state matching skill entry state (ask)", () => {
-    const result = describeSkillReadGate(makeTcc(), () => [
+    const result = describeSkillReadGate(makeTcc(), normalizer, () => [
       makeSkillEntry({ state: "ask" }),
     ]);
     expect(result).not.toBeNull();
@@ -77,7 +86,7 @@ describe("describeSkillReadGate", () => {
   });
 
   it("returns GateDescriptor with preResolved.state matching skill entry state (allow)", () => {
-    const result = describeSkillReadGate(makeTcc(), () => [
+    const result = describeSkillReadGate(makeTcc(), normalizer, () => [
       makeSkillEntry({ state: "allow" }),
     ]);
     expect(result).not.toBeNull();
@@ -86,7 +95,7 @@ describe("describeSkillReadGate", () => {
   });
 
   it("returns GateDescriptor with preResolved.state matching skill entry state (deny)", () => {
-    const result = describeSkillReadGate(makeTcc(), () => [
+    const result = describeSkillReadGate(makeTcc(), normalizer, () => [
       makeSkillEntry({ state: "deny" }),
     ]);
     expect(result).not.toBeNull();
@@ -95,7 +104,7 @@ describe("describeSkillReadGate", () => {
   });
 
   it("decision surface is 'skill' and decision value is the skill name", () => {
-    const result = describeSkillReadGate(makeTcc(), () => [
+    const result = describeSkillReadGate(makeTcc(), normalizer, () => [
       makeSkillEntry({ name: "my-skill" }),
     ])!;
     expect(result.decision.surface).toBe("skill");
@@ -103,7 +112,7 @@ describe("describeSkillReadGate", () => {
   });
 
   it("denialContext contains the skill name and read path", () => {
-    const result = describeSkillReadGate(makeTcc(), () => [
+    const result = describeSkillReadGate(makeTcc(), normalizer, () => [
       makeSkillEntry({ name: "librarian" }),
     ])!;
     expect(result.denialContext).toEqual({
@@ -117,6 +126,7 @@ describe("describeSkillReadGate", () => {
   it("promptDetails includes skill_read source and skillName", () => {
     const result = describeSkillReadGate(
       makeTcc({ agentName: "test-agent", toolCallId: "tc-42" }),
+      normalizer,
       () => [makeSkillEntry({ name: "my-skill" })],
     )!;
     expect(result.promptDetails).toMatchObject({
@@ -132,6 +142,7 @@ describe("describeSkillReadGate", () => {
   it("logContext includes skill_read source and skillName", () => {
     const result = describeSkillReadGate(
       makeTcc({ agentName: "agent-1" }),
+      normalizer,
       () => [makeSkillEntry({ name: "librarian" })],
     )!;
     expect(result.logContext).toMatchObject({
@@ -142,7 +153,9 @@ describe("describeSkillReadGate", () => {
   });
 
   it("surface is 'skill' on the descriptor", () => {
-    const result = describeSkillReadGate(makeTcc(), () => [makeSkillEntry()])!;
+    const result = describeSkillReadGate(makeTcc(), normalizer, () => [
+      makeSkillEntry(),
+    ])!;
     expect(result.surface).toBe("skill");
   });
 });

package/test/handlers/gates/tool-call-gate-pipeline.test.ts

@@ -2,6 +2,7 @@ import { beforeEach, describe, expect, it, vi } from "vitest";
 
 import type { AccessPath } from "#src/access-intent/access-path";
 import { ToolCallGatePipeline } from "#src/handlers/gates/tool-call-gate-pipeline";
+import { PathNormalizer } from "#src/path-normalizer";
 
 import {
   makeGateInputs,
@@ -172,7 +173,7 @@ describe("ToolCallGatePipeline", () => {
       expect(mockBashProgramParse).toHaveBeenCalledTimes(1);
       expect(mockBashProgramParse).toHaveBeenCalledWith(
         "echo hello",
-        "/test/project",
+        expect.any(PathNormalizer),
       );
     });
 

package/test/handlers/gates/tool.test.ts

@@ -53,6 +53,7 @@ describe("describeToolGate", () => {
       makeTcc({ toolName: "read" }),
       makeCheckResult("ask"),
       makeFormatter(),
+      "linux",
     );
     expect(desc.surface).toBe("read");
     expect(desc.decision.surface).toBe("read");
@@ -63,6 +64,7 @@ describe("describeToolGate", () => {
       makeTcc({ toolName: "write" }),
       makeCheckResult("ask"),
       makeFormatter(),
+      "linux",
     );
     expect(desc.decision.value).toBe("write");
   });
@@ -76,6 +78,7 @@ describe("describeToolGate", () => {
       makeTcc({ toolName: "bash", input: { command: "git status" } }),
       check,
       makeFormatter(),
+      "linux",
     );
     expect(desc.surface).toBe("bash");
     expect(desc.decision.surface).toBe("bash");
@@ -91,6 +94,7 @@ describe("describeToolGate", () => {
       makeTcc({ toolName: "mcp", input: { tool: "server:tool" } }),
       check,
       makeFormatter(),
+      "linux",
     );
     expect(desc.surface).toBe("mcp");
     expect(desc.decision.surface).toBe("mcp");
@@ -99,7 +103,7 @@ describe("describeToolGate", () => {
 
   it("populates denialContext with kind 'tool' and check result", () => {
     const check = makeCheckResult("deny", { toolName: "read" });
-    const desc = describeToolGate(makeTcc(), check, makeFormatter());
+    const desc = describeToolGate(makeTcc(), check, makeFormatter(), "linux");
     expect(desc.denialContext).toEqual({
       kind: "tool",
       check,
@@ -114,6 +118,7 @@ describe("describeToolGate", () => {
       makeTcc({ agentName: "my-agent" }),
       check,
       makeFormatter(),
+      "linux",
     );
     expect(desc.denialContext.agentName).toBe("my-agent");
   });
@@ -124,6 +129,7 @@ describe("describeToolGate", () => {
       makeTcc({ toolName: "bash", input: { command: "ls" } }),
       check,
       makeFormatter(),
+      "linux",
     );
     expect(desc.denialContext).toMatchObject({
       kind: "tool",
@@ -140,6 +146,7 @@ describe("describeToolGate", () => {
       makeTcc({ toolName: "bash", input: { command: "git status" } }),
       check,
       makeFormatter(),
+      "linux",
     );
     expect(desc.sessionApproval).toBeDefined();
     expect(desc.sessionApproval?.surface).toBe("bash");
@@ -156,6 +163,7 @@ describe("describeToolGate", () => {
       }),
       check,
       makeFormatter(),
+      "linux",
     );
     expect(desc.sessionApproval?.surface).toBe("edit");
     expect(desc.sessionApproval?.representativePattern).toBe("/test/project/*");
@@ -174,6 +182,7 @@ describe("describeToolGate", () => {
       }),
       check,
       makeFormatter(),
+      "linux",
     );
     expect(desc.sessionApproval?.representativePattern).toBe(
       "/test/project/src/*",
@@ -186,6 +195,7 @@ describe("describeToolGate", () => {
       makeTcc({ toolName: "read", agentName: "my-agent", toolCallId: "tc-42" }),
       check,
       makeFormatter(),
+      "linux",
     );
     expect(desc.promptDetails).toMatchObject({
       source: "tool_call",
@@ -203,6 +213,7 @@ describe("describeToolGate", () => {
       makeTcc({ toolName: "bash", input: { command: "ls" } }),
       check,
       makeFormatter(),
+      "linux",
     );
     expect(desc.logContext).toMatchObject({
       source: "tool_call",
@@ -216,6 +227,7 @@ describe("describeToolGate", () => {
       makeTcc({ toolName: "edit", input: { path: "/a.ts" } }),
       makeCheckResult("ask", { toolName: "edit" }),
       makeFormatter(),
+      "linux",
     );
     expect(desc.surface).toBe("edit");
     expect(desc.input).toEqual({ path: "/a.ts" });

package/test/helpers/gate-fixtures.ts

@@ -10,6 +10,7 @@ import { GateRunner } from "#src/handlers/gates/runner";
 import type { SkillInputGateInputs } from "#src/handlers/gates/skill-input-gate-pipeline";
 import type { ToolCallGateInputs } from "#src/handlers/gates/tool-call-gate-pipeline";
 import type { ToolCallContext } from "#src/handlers/gates/types";
+import { PathNormalizer } from "#src/path-normalizer";
 import type { ScopedPermissionResolver } from "#src/permission-resolver";
 import type { SessionApprovalRecorder } from "#src/session-approval-recorder";
 import type { SkillPromptEntry } from "#src/skill-prompt-sanitizer";
@@ -253,6 +254,8 @@ export function makeGateInputs(
     getActiveSkillEntries?: () => SkillPromptEntry[];
     getInfrastructureReadDirs?: () => string[];
     getToolPreviewLimits?: () => ToolPreviewFormatterOptions;
+    getPathNormalizer?: () => PathNormalizer;
+    getPlatform?: () => NodeJS.Platform;
   } = {},
 ): ToolCallGateInputs {
   return {
@@ -268,6 +271,13 @@ export function makeGateInputs(
         toolTextSummaryMaxLength: 100,
         toolInputLogPreviewMaxLength: 200,
       })),
+    getPathNormalizer:
+      overrides.getPathNormalizer ??
+      vi.fn<() => PathNormalizer>(
+        () => new PathNormalizer(process.platform, "/test/cwd"),
+      ),
+    getPlatform:
+      overrides.getPlatform ?? vi.fn<() => NodeJS.Platform>(() => "linux"),
   };
 }
 

package/test/helpers/session-fixtures.ts

@@ -126,6 +126,7 @@ export function makeRealSession(overrides?: {
   sessionRules?: SessionRules;
   configStore?: SessionConfigStore;
   gateway?: PromptingGatewayLifecycle;
+  platform?: NodeJS.Platform;
 }): {
   session: PermissionSession;
   paths: ExtensionPaths;
@@ -146,6 +147,7 @@ export function makeRealSession(overrides?: {
   const sessionRules = overrides?.sessionRules ?? new SessionRules();
   const configStore = overrides?.configStore ?? makeConfigStore();
   const gateway = overrides?.gateway ?? makeGateway();
+  const platform = overrides?.platform ?? process.platform;
   const session = new PermissionSession(
     paths,
     forwarding,
@@ -153,6 +155,7 @@ export function makeRealSession(overrides?: {
     sessionRules,
     configStore,
     gateway,
+    platform,
   );
   return {
     session,