@haposoft/cafekit 0.18.2 → 0.18.4

package/bin/__tests__/omp-hooks.test.js

@@ -163,3 +163,27 @@ test('an empty stdin is denied under omp, where Claude asks', () => {
   assert.equal(output.permissionDecision, 'deny');
   assert.match(output.permissionDecisionReason, /Sensitive access could not be evaluated safely\./);
 });
+
+test('omp edits that move, rename or hide their target cannot reach a protected file', () => {
+  withSecretProject((root) => {
+    const run = (tool, input) => verdict(path.join(INSTALLED, 'privacy-block.cjs'), { tool_name: tool, tool_input: input, cwd: root });
+    // Envelopes as omp delivers them to extensions: it adds `path`/`paths` from file headers.
+    assert.equal(run('edit', { input: '[notes.md#ABCD]\nMV .env', path: 'notes.md', paths: ['notes.md'] }).decision, 'deny', 'hashline MV');
+    assert.equal(run('edit', { path: 'notes.md', edits: [{ op: 'update', rename: '.omp/runtime.json', diff: '' }] }).decision, 'deny', 'patch rename');
+    assert.equal(run('edit', { input: '*** Edit File: .env\n@@\n+X=1' }).decision, 'deny', 'sloppy header');
+    assert.equal(run('edit', { input: 'no file header at all' }).decision, 'deny', 'an edit that names no file is not evaluated');
+    assert.equal(run('edit', { input: '[notes.md#ABCD]\nPUT >2:\n+x', path: 'notes.md', paths: ['notes.md'] }).decision, null, 'an ordinary edit passes');
+  });
+});
+
+test('omp read selectors and eval code cannot reach a secret file', () => {
+  withSecretProject((root) => {
+    fs.writeFileSync(path.join(root, 'README.md'), 'hi\n');
+    const run = (tool, input) => verdict(path.join(INSTALLED, 'privacy-block.cjs'), { tool_name: tool, tool_input: input, cwd: root });
+    assert.equal(run('read', { path: '.env:raw' }).decision, 'deny', 'raw selector');
+    assert.equal(run('read', { path: '.env:1-50' }).decision, 'deny', 'line range selector');
+    assert.equal(run('read', { path: 'README.md:1-5' }).decision, null, 'a selector on an ordinary file passes');
+    assert.equal(run('eval', { language: 'python', code: "print(open('.env').read())" }).decision, 'deny', 'eval naming a secret');
+    assert.equal(run('eval', { language: 'python', code: 'credentials = 1\nprint(credentials)' }).decision, null, 'an identifier is not a file');
+  });
+});

package/bin/__tests__/orca-session.test.js

@@ -15,6 +15,7 @@ const os = require('node:os');
 const path = require('node:path');
 const { spawnSync } = require('node:child_process');
 const { test } = require('node:test');
+const { installCodexHookRuntime } = require('./codex-hook-runtime-fixture.cjs');
 
 const PACKAGE_ROOT = path.join(__dirname, '..', '..');
 const CLAUDE_HOOK = path.join(PACKAGE_ROOT, 'src/claude/hooks/session.cjs');
@@ -142,22 +143,7 @@ test('no token ever reaches stdout, stderr, or the Claude env file', () => {
 // ---------------------------------------------------------------------------------------
 
 function composeCodexHookTree(root) {
-  const hooksDir = path.join(root, '.codex', 'hooks');
-  fs.mkdirSync(path.join(hooksDir, 'lib'), { recursive: true });
-  fs.copyFileSync(path.join(PACKAGE_ROOT, 'src/codex/hooks/session.cjs'), path.join(hooksDir, 'session.cjs'));
-  fs.copyFileSync(path.join(PACKAGE_ROOT, 'src/codex/hooks/lib/hook-context.cjs'),
-    path.join(hooksDir, 'lib', 'hook-context.cjs'));
-  fs.copyFileSync(path.join(PACKAGE_ROOT, 'src/codex/hooks/lib/privacy-state.cjs'),
-    path.join(hooksDir, 'lib', 'privacy-state.cjs'));
-  fs.copyFileSync(path.join(PACKAGE_ROOT, 'src/codex/hooks/lib/rules-reservation.cjs'),
-    path.join(hooksDir, 'lib', 'rules-reservation.cjs'));
-  fs.copyFileSync(path.join(PACKAGE_ROOT, 'src/claude/hooks/lib/update-check.cjs'),
-    path.join(hooksDir, 'lib', 'update-check.cjs'));
-  fs.copyFileSync(path.join(PACKAGE_ROOT, 'src/claude/hooks/lib/runtime-path-safety.cjs'),
-    path.join(hooksDir, 'lib', 'runtime-path-safety.cjs'));
-  for (const name of ['privacy-paths.cjs', 'privacy-command-analysis.cjs']) {
-    fs.copyFileSync(path.join(PACKAGE_ROOT, 'src/claude/hooks/lib', name), path.join(hooksDir, 'lib', name));
-  }
+  const hooksDir = installCodexHookRuntime(root);
   return path.join(hooksDir, 'session.cjs');
 }