@oxagen/cli 0.6.0 → 0.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent/__tests__/judge.test.js +11 -6
- package/dist/agent/__tests__/judge.test.js.map +1 -1
- package/dist/agent/__tests__/loop-errors.test.js +32 -1
- package/dist/agent/__tests__/loop-errors.test.js.map +1 -1
- package/dist/agent/__tests__/loop-gating.test.d.ts +2 -0
- package/dist/agent/__tests__/loop-gating.test.d.ts.map +1 -0
- package/dist/agent/__tests__/loop-gating.test.js +94 -0
- package/dist/agent/__tests__/loop-gating.test.js.map +1 -0
- package/dist/agent/__tests__/model-router.test.js +16 -0
- package/dist/agent/__tests__/model-router.test.js.map +1 -1
- package/dist/agent/__tests__/permissions.test.d.ts +2 -0
- package/dist/agent/__tests__/permissions.test.d.ts.map +1 -0
- package/dist/agent/__tests__/permissions.test.js +206 -0
- package/dist/agent/__tests__/permissions.test.js.map +1 -0
- package/dist/agent/__tests__/pipeline-telemetry.test.d.ts +2 -0
- package/dist/agent/__tests__/pipeline-telemetry.test.d.ts.map +1 -0
- package/dist/agent/__tests__/pipeline-telemetry.test.js +158 -0
- package/dist/agent/__tests__/pipeline-telemetry.test.js.map +1 -0
- package/dist/agent/__tests__/pipeline.test.js +12 -3
- package/dist/agent/__tests__/pipeline.test.js.map +1 -1
- package/dist/agent/__tests__/rate-card.test.d.ts +2 -0
- package/dist/agent/__tests__/rate-card.test.d.ts.map +1 -0
- package/dist/agent/__tests__/rate-card.test.js +69 -0
- package/dist/agent/__tests__/rate-card.test.js.map +1 -0
- package/dist/agent/__tests__/system-prompt.test.d.ts +2 -0
- package/dist/agent/__tests__/system-prompt.test.d.ts.map +1 -0
- package/dist/agent/__tests__/system-prompt.test.js +29 -0
- package/dist/agent/__tests__/system-prompt.test.js.map +1 -0
- package/dist/agent/__tests__/trace-format-verbose.test.d.ts +2 -0
- package/dist/agent/__tests__/trace-format-verbose.test.d.ts.map +1 -0
- package/dist/agent/__tests__/trace-format-verbose.test.js +93 -0
- package/dist/agent/__tests__/trace-format-verbose.test.js.map +1 -0
- package/dist/agent/__tests__/verbose-log.test.d.ts +2 -0
- package/dist/agent/__tests__/verbose-log.test.d.ts.map +1 -0
- package/dist/agent/__tests__/verbose-log.test.js +69 -0
- package/dist/agent/__tests__/verbose-log.test.js.map +1 -0
- package/dist/agent/evaluator.d.ts.map +1 -1
- package/dist/agent/evaluator.js +8 -4
- package/dist/agent/evaluator.js.map +1 -1
- package/dist/agent/fleet/orchestrator.d.ts +5 -0
- package/dist/agent/fleet/orchestrator.d.ts.map +1 -1
- package/dist/agent/fleet/orchestrator.js +3 -0
- package/dist/agent/fleet/orchestrator.js.map +1 -1
- package/dist/agent/fleet/types.d.ts +2 -0
- package/dist/agent/fleet/types.d.ts.map +1 -1
- package/dist/agent/judge.d.ts +11 -3
- package/dist/agent/judge.d.ts.map +1 -1
- package/dist/agent/judge.js +15 -3
- package/dist/agent/judge.js.map +1 -1
- package/dist/agent/loop.d.ts +35 -0
- package/dist/agent/loop.d.ts.map +1 -1
- package/dist/agent/loop.js +147 -48
- package/dist/agent/loop.js.map +1 -1
- package/dist/agent/model-router.d.ts +5 -19
- package/dist/agent/model-router.d.ts.map +1 -1
- package/dist/agent/model-router.js +19 -42
- package/dist/agent/model-router.js.map +1 -1
- package/dist/agent/permissions.d.ts +103 -0
- package/dist/agent/permissions.d.ts.map +1 -0
- package/dist/agent/permissions.js +245 -0
- package/dist/agent/permissions.js.map +1 -0
- package/dist/agent/pipeline.d.ts +13 -3
- package/dist/agent/pipeline.d.ts.map +1 -1
- package/dist/agent/pipeline.js +66 -15
- package/dist/agent/pipeline.js.map +1 -1
- package/dist/agent/planner.d.ts +3 -0
- package/dist/agent/planner.d.ts.map +1 -1
- package/dist/agent/planner.js +14 -1
- package/dist/agent/planner.js.map +1 -1
- package/dist/agent/prompt-enhancer.d.ts +9 -0
- package/dist/agent/prompt-enhancer.d.ts.map +1 -1
- package/dist/agent/prompt-enhancer.js +23 -1
- package/dist/agent/prompt-enhancer.js.map +1 -1
- package/dist/agent/rate-card.d.ts +77 -0
- package/dist/agent/rate-card.d.ts.map +1 -0
- package/dist/agent/rate-card.js +99 -0
- package/dist/agent/rate-card.js.map +1 -0
- package/dist/agent/system-prompt.d.ts +5 -0
- package/dist/agent/system-prompt.d.ts.map +1 -1
- package/dist/agent/system-prompt.js +13 -4
- package/dist/agent/system-prompt.js.map +1 -1
- package/dist/agent/tools.d.ts +8 -4
- package/dist/agent/tools.d.ts.map +1 -1
- package/dist/agent/tools.js +35 -4
- package/dist/agent/tools.js.map +1 -1
- package/dist/agent/trace-format.d.ts +7 -0
- package/dist/agent/trace-format.d.ts.map +1 -1
- package/dist/agent/trace-format.js +114 -0
- package/dist/agent/trace-format.js.map +1 -1
- package/dist/agent/trace.d.ts +59 -0
- package/dist/agent/trace.d.ts.map +1 -1
- package/dist/agent/verbose-log.d.ts +8 -0
- package/dist/agent/verbose-log.d.ts.map +1 -0
- package/dist/agent/verbose-log.js +53 -0
- package/dist/agent/verbose-log.js.map +1 -0
- package/dist/agents/__tests__/loader.test.d.ts +2 -0
- package/dist/agents/__tests__/loader.test.d.ts.map +1 -0
- package/dist/agents/__tests__/loader.test.js +88 -0
- package/dist/agents/__tests__/loader.test.js.map +1 -0
- package/dist/agents/__tests__/tools.test.d.ts +2 -0
- package/dist/agents/__tests__/tools.test.d.ts.map +1 -0
- package/dist/agents/__tests__/tools.test.js +40 -0
- package/dist/agents/__tests__/tools.test.js.map +1 -0
- package/dist/agents/index.d.ts +12 -0
- package/dist/agents/index.d.ts.map +1 -0
- package/dist/agents/index.js +4 -0
- package/dist/agents/index.js.map +1 -0
- package/dist/agents/loader.d.ts +25 -0
- package/dist/agents/loader.d.ts.map +1 -0
- package/dist/agents/loader.js +133 -0
- package/dist/agents/loader.js.map +1 -0
- package/dist/agents/tools.d.ts +14 -0
- package/dist/agents/tools.d.ts.map +1 -0
- package/dist/agents/tools.js +21 -0
- package/dist/agents/tools.js.map +1 -0
- package/dist/agents/types.d.ts +27 -0
- package/dist/agents/types.d.ts.map +1 -0
- package/dist/agents/types.js +11 -0
- package/dist/agents/types.js.map +1 -0
- package/dist/agents/write.d.ts +10 -0
- package/dist/agents/write.d.ts.map +1 -0
- package/dist/agents/write.js +28 -0
- package/dist/agents/write.js.map +1 -0
- package/dist/commands/__tests__/agent.test.d.ts +2 -0
- package/dist/commands/__tests__/agent.test.d.ts.map +1 -0
- package/dist/commands/__tests__/agent.test.js +82 -0
- package/dist/commands/__tests__/agent.test.js.map +1 -0
- package/dist/commands/__tests__/command.test.d.ts +2 -0
- package/dist/commands/__tests__/command.test.d.ts.map +1 -0
- package/dist/commands/__tests__/command.test.js +73 -0
- package/dist/commands/__tests__/command.test.js.map +1 -0
- package/dist/commands/__tests__/cost.test.d.ts +2 -0
- package/dist/commands/__tests__/cost.test.d.ts.map +1 -0
- package/dist/commands/__tests__/cost.test.js +139 -0
- package/dist/commands/__tests__/cost.test.js.map +1 -0
- package/dist/commands/__tests__/graph.pull.test.d.ts +2 -0
- package/dist/commands/__tests__/graph.pull.test.d.ts.map +1 -0
- package/dist/commands/__tests__/graph.pull.test.js +259 -0
- package/dist/commands/__tests__/graph.pull.test.js.map +1 -0
- package/dist/commands/__tests__/mcp.test.d.ts +2 -0
- package/dist/commands/__tests__/mcp.test.d.ts.map +1 -0
- package/dist/commands/__tests__/mcp.test.js +88 -0
- package/dist/commands/__tests__/mcp.test.js.map +1 -0
- package/dist/commands/__tests__/rules.test.d.ts +2 -0
- package/dist/commands/__tests__/rules.test.d.ts.map +1 -0
- package/dist/commands/__tests__/rules.test.js +95 -0
- package/dist/commands/__tests__/rules.test.js.map +1 -0
- package/dist/commands/__tests__/settings.test.d.ts +2 -0
- package/dist/commands/__tests__/settings.test.d.ts.map +1 -0
- package/dist/commands/__tests__/settings.test.js +83 -0
- package/dist/commands/__tests__/settings.test.js.map +1 -0
- package/dist/commands/agent.d.ts +15 -0
- package/dist/commands/agent.d.ts.map +1 -0
- package/dist/commands/agent.js +58 -0
- package/dist/commands/agent.js.map +1 -0
- package/dist/commands/command.d.ts +17 -0
- package/dist/commands/command.d.ts.map +1 -0
- package/dist/commands/command.js +74 -0
- package/dist/commands/command.js.map +1 -0
- package/dist/commands/config.js.map +1 -1
- package/dist/commands/cost.d.ts +10 -0
- package/dist/commands/cost.d.ts.map +1 -0
- package/dist/commands/cost.js +140 -0
- package/dist/commands/cost.js.map +1 -0
- package/dist/commands/graph.pull.d.ts +15 -0
- package/dist/commands/graph.pull.d.ts.map +1 -0
- package/dist/commands/graph.pull.js +137 -0
- package/dist/commands/graph.pull.js.map +1 -0
- package/dist/commands/graph.status.d.ts +10 -0
- package/dist/commands/graph.status.d.ts.map +1 -0
- package/dist/commands/graph.status.js +75 -0
- package/dist/commands/graph.status.js.map +1 -0
- package/dist/commands/mcp.d.ts +18 -0
- package/dist/commands/mcp.d.ts.map +1 -0
- package/dist/commands/mcp.js +183 -0
- package/dist/commands/mcp.js.map +1 -0
- package/dist/commands/rules.d.ts +19 -0
- package/dist/commands/rules.d.ts.map +1 -0
- package/dist/commands/rules.js +96 -0
- package/dist/commands/rules.js.map +1 -0
- package/dist/commands/settings.d.ts +10 -0
- package/dist/commands/settings.d.ts.map +1 -0
- package/dist/commands/settings.js +117 -0
- package/dist/commands/settings.js.map +1 -0
- package/dist/index.js +297 -1
- package/dist/index.js.map +1 -1
- package/dist/lib/config.d.ts +2 -0
- package/dist/lib/config.d.ts.map +1 -1
- package/dist/lib/config.js.map +1 -1
- package/dist/mcp/__tests__/client.test.d.ts +2 -0
- package/dist/mcp/__tests__/client.test.d.ts.map +1 -0
- package/dist/mcp/__tests__/client.test.js +101 -0
- package/dist/mcp/__tests__/client.test.js.map +1 -0
- package/dist/mcp/client.d.ts +89 -0
- package/dist/mcp/client.d.ts.map +1 -0
- package/dist/mcp/client.js +201 -0
- package/dist/mcp/client.js.map +1 -0
- package/dist/repl/__tests__/components.test.js +50 -1
- package/dist/repl/__tests__/components.test.js.map +1 -1
- package/dist/repl/components.d.ts +18 -1
- package/dist/repl/components.d.ts.map +1 -1
- package/dist/repl/components.js +32 -2
- package/dist/repl/components.js.map +1 -1
- package/dist/repl/interactive.d.ts +5 -0
- package/dist/repl/interactive.d.ts.map +1 -1
- package/dist/repl/interactive.js +124 -11
- package/dist/repl/interactive.js.map +1 -1
- package/dist/repl/one-shot.d.ts +16 -0
- package/dist/repl/one-shot.d.ts.map +1 -1
- package/dist/repl/one-shot.js +71 -1
- package/dist/repl/one-shot.js.map +1 -1
- package/dist/rules/__tests__/enforce.test.d.ts +2 -0
- package/dist/rules/__tests__/enforce.test.d.ts.map +1 -0
- package/dist/rules/__tests__/enforce.test.js +58 -0
- package/dist/rules/__tests__/enforce.test.js.map +1 -0
- package/dist/rules/__tests__/loader.test.d.ts +2 -0
- package/dist/rules/__tests__/loader.test.d.ts.map +1 -0
- package/dist/rules/__tests__/loader.test.js +54 -0
- package/dist/rules/__tests__/loader.test.js.map +1 -0
- package/dist/rules/enforce.d.ts +23 -0
- package/dist/rules/enforce.d.ts.map +1 -0
- package/dist/rules/enforce.js +36 -0
- package/dist/rules/enforce.js.map +1 -0
- package/dist/rules/index.d.ts +10 -0
- package/dist/rules/index.d.ts.map +1 -0
- package/dist/rules/index.js +4 -0
- package/dist/rules/index.js.map +1 -0
- package/dist/rules/loader.d.ts +10 -0
- package/dist/rules/loader.d.ts.map +1 -0
- package/dist/rules/loader.js +77 -0
- package/dist/rules/loader.js.map +1 -0
- package/dist/rules/types.d.ts +39 -0
- package/dist/rules/types.d.ts.map +1 -0
- package/dist/rules/types.js +16 -0
- package/dist/rules/types.js.map +1 -0
- package/dist/rules/write.d.ts +10 -0
- package/dist/rules/write.d.ts.map +1 -0
- package/dist/rules/write.js +28 -0
- package/dist/rules/write.js.map +1 -0
- package/dist/settings/__tests__/gate.test.d.ts +2 -0
- package/dist/settings/__tests__/gate.test.d.ts.map +1 -0
- package/dist/settings/__tests__/gate.test.js +137 -0
- package/dist/settings/__tests__/gate.test.js.map +1 -0
- package/dist/settings/__tests__/hooks.test.d.ts +2 -0
- package/dist/settings/__tests__/hooks.test.d.ts.map +1 -0
- package/dist/settings/__tests__/hooks.test.js +103 -0
- package/dist/settings/__tests__/hooks.test.js.map +1 -0
- package/dist/settings/__tests__/mcp-write.test.d.ts +2 -0
- package/dist/settings/__tests__/mcp-write.test.d.ts.map +1 -0
- package/dist/settings/__tests__/mcp-write.test.js +77 -0
- package/dist/settings/__tests__/mcp-write.test.js.map +1 -0
- package/dist/settings/__tests__/permissions-gate.test.d.ts +2 -0
- package/dist/settings/__tests__/permissions-gate.test.d.ts.map +1 -0
- package/dist/settings/__tests__/permissions-gate.test.js +75 -0
- package/dist/settings/__tests__/permissions-gate.test.js.map +1 -0
- package/dist/settings/__tests__/resolve.test.d.ts +2 -0
- package/dist/settings/__tests__/resolve.test.d.ts.map +1 -0
- package/dist/settings/__tests__/resolve.test.js +109 -0
- package/dist/settings/__tests__/resolve.test.js.map +1 -0
- package/dist/settings/__tests__/runtime.test.d.ts +2 -0
- package/dist/settings/__tests__/runtime.test.d.ts.map +1 -0
- package/dist/settings/__tests__/runtime.test.js +72 -0
- package/dist/settings/__tests__/runtime.test.js.map +1 -0
- package/dist/settings/__tests__/schema.test.d.ts +2 -0
- package/dist/settings/__tests__/schema.test.d.ts.map +1 -0
- package/dist/settings/__tests__/schema.test.js +55 -0
- package/dist/settings/__tests__/schema.test.js.map +1 -0
- package/dist/settings/__tests__/write.test.d.ts +2 -0
- package/dist/settings/__tests__/write.test.d.ts.map +1 -0
- package/dist/settings/__tests__/write.test.js +61 -0
- package/dist/settings/__tests__/write.test.js.map +1 -0
- package/dist/settings/gate.d.ts +34 -0
- package/dist/settings/gate.d.ts.map +1 -0
- package/dist/settings/gate.js +50 -0
- package/dist/settings/gate.js.map +1 -0
- package/dist/settings/hooks.d.ts +26 -0
- package/dist/settings/hooks.d.ts.map +1 -0
- package/dist/settings/hooks.js +115 -0
- package/dist/settings/hooks.js.map +1 -0
- package/dist/settings/index.d.ts +23 -0
- package/dist/settings/index.d.ts.map +1 -0
- package/dist/settings/index.js +23 -0
- package/dist/settings/index.js.map +1 -0
- package/dist/settings/mcp-write.d.ts +41 -0
- package/dist/settings/mcp-write.d.ts.map +1 -0
- package/dist/settings/mcp-write.js +61 -0
- package/dist/settings/mcp-write.js.map +1 -0
- package/dist/settings/permissions-gate.d.ts +19 -0
- package/dist/settings/permissions-gate.d.ts.map +1 -0
- package/dist/settings/permissions-gate.js +103 -0
- package/dist/settings/permissions-gate.js.map +1 -0
- package/dist/settings/resolve.d.ts +37 -0
- package/dist/settings/resolve.d.ts.map +1 -0
- package/dist/settings/resolve.js +169 -0
- package/dist/settings/resolve.js.map +1 -0
- package/dist/settings/runtime.d.ts +28 -0
- package/dist/settings/runtime.d.ts.map +1 -0
- package/dist/settings/runtime.js +45 -0
- package/dist/settings/runtime.js.map +1 -0
- package/dist/settings/schema.d.ts +1387 -0
- package/dist/settings/schema.d.ts.map +1 -0
- package/dist/settings/schema.js +146 -0
- package/dist/settings/schema.js.map +1 -0
- package/dist/settings/write.d.ts +37 -0
- package/dist/settings/write.d.ts.map +1 -0
- package/dist/settings/write.js +85 -0
- package/dist/settings/write.js.map +1 -0
- package/dist/slash/__tests__/expand.test.d.ts +2 -0
- package/dist/slash/__tests__/expand.test.d.ts.map +1 -0
- package/dist/slash/__tests__/expand.test.js +44 -0
- package/dist/slash/__tests__/expand.test.js.map +1 -0
- package/dist/slash/__tests__/loader.test.d.ts +2 -0
- package/dist/slash/__tests__/loader.test.d.ts.map +1 -0
- package/dist/slash/__tests__/loader.test.js +48 -0
- package/dist/slash/__tests__/loader.test.js.map +1 -0
- package/dist/slash/expand.d.ts +32 -0
- package/dist/slash/expand.d.ts.map +1 -0
- package/dist/slash/expand.js +48 -0
- package/dist/slash/expand.js.map +1 -0
- package/dist/slash/index.d.ts +11 -0
- package/dist/slash/index.d.ts.map +1 -0
- package/dist/slash/index.js +4 -0
- package/dist/slash/index.js.map +1 -0
- package/dist/slash/loader.d.ts +10 -0
- package/dist/slash/loader.d.ts.map +1 -0
- package/dist/slash/loader.js +64 -0
- package/dist/slash/loader.js.map +1 -0
- package/dist/slash/types.d.ts +24 -0
- package/dist/slash/types.d.ts.map +1 -0
- package/dist/slash/types.js +11 -0
- package/dist/slash/types.js.map +1 -0
- package/dist/slash/write.d.ts +10 -0
- package/dist/slash/write.d.ts.map +1 -0
- package/dist/slash/write.js +26 -0
- package/dist/slash/write.js.map +1 -0
- package/dist/tui/fleet-view/index.d.ts.map +1 -1
- package/dist/tui/fleet-view/index.js +5 -1
- package/dist/tui/fleet-view/index.js.map +1 -1
- package/package.json +5 -1
|
@@ -0,0 +1,137 @@
|
|
|
1
|
+
import { describe, it, expect, beforeEach, afterEach } from "vitest";
|
|
2
|
+
import { tool } from "ai";
|
|
3
|
+
import { z } from "zod";
|
|
4
|
+
import { mkdtempSync, rmSync, existsSync } from "node:fs";
|
|
5
|
+
import { tmpdir } from "node:os";
|
|
6
|
+
import { join } from "node:path";
|
|
7
|
+
import { wrapToolsWithGate } from "../gate.js";
|
|
8
|
+
const CWD = process.cwd();
|
|
9
|
+
/** Build a tool set that records each execution into `calls`. */
|
|
10
|
+
function makeTools(calls) {
|
|
11
|
+
return {
|
|
12
|
+
bash: tool({
|
|
13
|
+
description: "run a command",
|
|
14
|
+
inputSchema: z.object({ command: z.string() }),
|
|
15
|
+
execute: async ({ command }) => {
|
|
16
|
+
calls.push(`bash:${command}`);
|
|
17
|
+
return `ran: ${command}`;
|
|
18
|
+
},
|
|
19
|
+
}),
|
|
20
|
+
write_file: tool({
|
|
21
|
+
description: "write a file",
|
|
22
|
+
inputSchema: z.object({ path: z.string(), content: z.string() }),
|
|
23
|
+
execute: async ({ path }) => {
|
|
24
|
+
calls.push(`write:${path}`);
|
|
25
|
+
return `wrote ${path}`;
|
|
26
|
+
},
|
|
27
|
+
}),
|
|
28
|
+
};
|
|
29
|
+
}
|
|
30
|
+
const CALL_OPTS = { toolCallId: "test", messages: [] };
|
|
31
|
+
async function call(tools, name, input) {
|
|
32
|
+
const exec = tools[name]?.execute;
|
|
33
|
+
if (!exec)
|
|
34
|
+
throw new Error(`no execute for ${name}`);
|
|
35
|
+
return exec(input, CALL_OPTS);
|
|
36
|
+
}
|
|
37
|
+
describe("wrapToolsWithGate", () => {
|
|
38
|
+
it("returns the same tool set when nothing is configured", () => {
|
|
39
|
+
const tools = makeTools([]);
|
|
40
|
+
expect(wrapToolsWithGate(tools, { cwd: CWD })).toBe(tools);
|
|
41
|
+
});
|
|
42
|
+
it("blocks a denied tool and never calls the original execute", async () => {
|
|
43
|
+
const calls = [];
|
|
44
|
+
const blocked = [];
|
|
45
|
+
const permissions = { deny: ["Bash(rm -rf*)"] };
|
|
46
|
+
const gated = wrapToolsWithGate(makeTools(calls), {
|
|
47
|
+
cwd: CWD,
|
|
48
|
+
permissions,
|
|
49
|
+
onBlocked: (name) => blocked.push(name),
|
|
50
|
+
});
|
|
51
|
+
const result = await call(gated, "bash", { command: "rm -rf /tmp/x" });
|
|
52
|
+
expect(String(result)).toContain("⛔");
|
|
53
|
+
expect(String(result)).toContain("Permission denied");
|
|
54
|
+
expect(calls).toEqual([]); // original never ran
|
|
55
|
+
expect(blocked).toEqual(["bash"]);
|
|
56
|
+
});
|
|
57
|
+
it("gates MCP tools by their mcp__server__tool name", async () => {
|
|
58
|
+
const calls = [];
|
|
59
|
+
const mcpTools = {
|
|
60
|
+
mcp__github__delete_repo: tool({
|
|
61
|
+
description: "delete",
|
|
62
|
+
inputSchema: z.object({ repo: z.string() }),
|
|
63
|
+
execute: async () => {
|
|
64
|
+
calls.push("deleted");
|
|
65
|
+
return "deleted";
|
|
66
|
+
},
|
|
67
|
+
}),
|
|
68
|
+
};
|
|
69
|
+
const gated = wrapToolsWithGate(mcpTools, {
|
|
70
|
+
cwd: CWD,
|
|
71
|
+
permissions: { deny: ["mcp__github__delete_*"] },
|
|
72
|
+
});
|
|
73
|
+
const result = await call(gated, "mcp__github__delete_repo", { repo: "x" });
|
|
74
|
+
expect(String(result)).toContain("⛔");
|
|
75
|
+
expect(calls).toEqual([]);
|
|
76
|
+
});
|
|
77
|
+
it("passes an allowed tool through to the original execute", async () => {
|
|
78
|
+
const calls = [];
|
|
79
|
+
const permissions = { deny: ["Bash(rm -rf*)"] };
|
|
80
|
+
const gated = wrapToolsWithGate(makeTools(calls), { cwd: CWD, permissions });
|
|
81
|
+
const result = await call(gated, "bash", { command: "git status" });
|
|
82
|
+
expect(result).toBe("ran: git status");
|
|
83
|
+
expect(calls).toEqual(["bash:git status"]);
|
|
84
|
+
});
|
|
85
|
+
it("surfaces the rule text (denyReasons) instead of the raw glob when a guard blocks", async () => {
|
|
86
|
+
const calls = [];
|
|
87
|
+
const blocked = [];
|
|
88
|
+
const gated = wrapToolsWithGate(makeTools(calls), {
|
|
89
|
+
cwd: CWD,
|
|
90
|
+
permissions: { deny: ["Bash(rm -rf*)"] },
|
|
91
|
+
denyReasons: { "Bash(rm -rf*)": 'rule "no-rm-rf" — Never run destructive recursive deletes.' },
|
|
92
|
+
onBlocked: (_n, reason) => blocked.push(reason),
|
|
93
|
+
});
|
|
94
|
+
const result = await call(gated, "bash", { command: "rm -rf /tmp/x" });
|
|
95
|
+
expect(String(result)).toContain("Never run destructive recursive deletes.");
|
|
96
|
+
expect(String(result)).toContain('rule "no-rm-rf"');
|
|
97
|
+
expect(calls).toEqual([]);
|
|
98
|
+
expect(blocked[0]).toContain("no-rm-rf");
|
|
99
|
+
});
|
|
100
|
+
it("blocks a tool when a PreToolUse hook vetoes it", async () => {
|
|
101
|
+
const calls = [];
|
|
102
|
+
const blocked = [];
|
|
103
|
+
const hooks = {
|
|
104
|
+
PreToolUse: [{ matcher: "bash", hooks: [{ type: "command", command: 'echo "denied by policy" >&2; exit 1' }] }],
|
|
105
|
+
};
|
|
106
|
+
const gated = wrapToolsWithGate(makeTools(calls), {
|
|
107
|
+
cwd: CWD,
|
|
108
|
+
hooks,
|
|
109
|
+
onBlocked: (name, reason) => blocked.push(`${name}:${reason}`),
|
|
110
|
+
});
|
|
111
|
+
const result = await call(gated, "bash", { command: "ls" });
|
|
112
|
+
expect(String(result)).toContain("Blocked by PreToolUse hook");
|
|
113
|
+
expect(String(result)).toContain("denied by policy");
|
|
114
|
+
expect(calls).toEqual([]);
|
|
115
|
+
expect(blocked[0]).toContain("bash:");
|
|
116
|
+
});
|
|
117
|
+
describe("PostToolUse side effects", () => {
|
|
118
|
+
let dir;
|
|
119
|
+
beforeEach(() => {
|
|
120
|
+
dir = mkdtempSync(join(tmpdir(), "oxagen-gate-"));
|
|
121
|
+
});
|
|
122
|
+
afterEach(() => rmSync(dir, { recursive: true, force: true }));
|
|
123
|
+
it("runs PostToolUse after a successful execute without blocking", async () => {
|
|
124
|
+
const calls = [];
|
|
125
|
+
const marker = join(dir, "post.ran");
|
|
126
|
+
const hooks = {
|
|
127
|
+
PostToolUse: [{ matcher: "write_file", hooks: [{ type: "command", command: `touch '${marker}'` }] }],
|
|
128
|
+
};
|
|
129
|
+
const gated = wrapToolsWithGate(makeTools(calls), { cwd: CWD, hooks });
|
|
130
|
+
const result = await call(gated, "write_file", { path: "a.txt", content: "x" });
|
|
131
|
+
expect(result).toBe("wrote a.txt");
|
|
132
|
+
expect(calls).toEqual(["write:a.txt"]);
|
|
133
|
+
expect(existsSync(marker)).toBe(true);
|
|
134
|
+
});
|
|
135
|
+
});
|
|
136
|
+
});
|
|
137
|
+
//# sourceMappingURL=gate.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"gate.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/gate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,IAAI,EAAgB,MAAM,IAAI,CAAC;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAE1B,iEAAiE;AACjE,SAAS,SAAS,CAAC,KAAe;IAChC,OAAO;QACL,IAAI,EAAE,IAAI,CAAC;YACT,WAAW,EAAE,eAAe;YAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7B,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;gBAC9B,OAAO,QAAQ,OAAO,EAAE,CAAC;YAC3B,CAAC;SACF,CAAC;QACF,UAAU,EAAE,IAAI,CAAC;YACf,WAAW,EAAE,cAAc;YAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAChE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC1B,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;gBAC5B,OAAO,SAAS,IAAI,EAAE,CAAC;YACzB,CAAC;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAGD,MAAM,SAAS,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAyB,CAAC;AAE9E,KAAK,UAAU,IAAI,CAAC,KAAc,EAAE,IAAY,EAAE,KAAc;IAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,KAAc,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAgB,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;YAChD,GAAG,EAAE,GAAG;YACR,WAAW;YACX,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB;QAChD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAY;YACxB,wBAAwB,EAAE,IAAI,CAAC;gBAC7B,WAAW,EAAE,QAAQ;gBACrB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3C,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,OAAO,SAAS,CAAC;gBACnB,CAAC;aACF,CAAC;SACH,CAAC;QACF,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE;YACxC,GAAG,EAAE,GAAG;YACR,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAgB,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;YAChD,GAAG,EAAE,GAAG;YACR,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE;YACxC,WAAW,EAAE,EAAE,eAAe,EAAE,4DAA4D,EAAE;YAC9F,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,EAAE,CAAC;SAChH,CAAC;QACF,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;YAChD,GAAG,EAAE,GAAG;YACR,KAAK;YACL,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,IAAI,GAAW,CAAC;QAChB,UAAU,CAAC,GAAG,EAAE;YACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE/D,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACrC,MAAM,KAAK,GAAU;gBACnB,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;aACrG,CAAC;YACF,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAChF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hooks.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/hooks.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,103 @@
|
|
|
1
|
+
import { describe, it, expect } from "vitest";
|
|
2
|
+
import { runHooks } from "../hooks.js";
|
|
3
|
+
const CWD = process.cwd();
|
|
4
|
+
describe("runHooks", () => {
|
|
5
|
+
it("returns a no-op outcome when there are no hooks", async () => {
|
|
6
|
+
expect(await runHooks(undefined, { event: "SessionStart", cwd: CWD })).toEqual({
|
|
7
|
+
blocked: false,
|
|
8
|
+
output: "",
|
|
9
|
+
});
|
|
10
|
+
});
|
|
11
|
+
it("captures SessionStart stdout as context", async () => {
|
|
12
|
+
const hooks = {
|
|
13
|
+
SessionStart: [{ hooks: [{ type: "command", command: "echo 'on-call: alice'" }] }],
|
|
14
|
+
};
|
|
15
|
+
const out = await runHooks(hooks, { event: "SessionStart", cwd: CWD });
|
|
16
|
+
expect(out.blocked).toBe(false);
|
|
17
|
+
expect(out.output).toContain("on-call: alice");
|
|
18
|
+
});
|
|
19
|
+
it("feeds the event payload to the hook on stdin", async () => {
|
|
20
|
+
const hooks = {
|
|
21
|
+
PreToolUse: [{ matcher: "*", hooks: [{ type: "command", command: "cat" }] }],
|
|
22
|
+
};
|
|
23
|
+
const out = await runHooks(hooks, {
|
|
24
|
+
event: "PreToolUse",
|
|
25
|
+
cwd: CWD,
|
|
26
|
+
tool: { name: "bash", input: { command: "ls" } },
|
|
27
|
+
});
|
|
28
|
+
expect(out.output).toContain('"name":"bash"');
|
|
29
|
+
expect(out.output).toContain('"command":"ls"');
|
|
30
|
+
});
|
|
31
|
+
it("blocks a PreToolUse tool when a hook exits non-zero, surfacing stderr", async () => {
|
|
32
|
+
const hooks = {
|
|
33
|
+
PreToolUse: [{ matcher: "bash", hooks: [{ type: "command", command: 'echo "no shell here" >&2; exit 1' }] }],
|
|
34
|
+
};
|
|
35
|
+
const out = await runHooks(hooks, {
|
|
36
|
+
event: "PreToolUse",
|
|
37
|
+
cwd: CWD,
|
|
38
|
+
tool: { name: "bash", input: { command: "ls" } },
|
|
39
|
+
});
|
|
40
|
+
expect(out.blocked).toBe(true);
|
|
41
|
+
expect(out.reason).toContain("no shell here");
|
|
42
|
+
});
|
|
43
|
+
it("does not block when the PreToolUse hook exits zero", async () => {
|
|
44
|
+
const hooks = {
|
|
45
|
+
PreToolUse: [{ matcher: "bash", hooks: [{ type: "command", command: "true" }] }],
|
|
46
|
+
};
|
|
47
|
+
const out = await runHooks(hooks, {
|
|
48
|
+
event: "PreToolUse",
|
|
49
|
+
cwd: CWD,
|
|
50
|
+
tool: { name: "bash", input: {} },
|
|
51
|
+
});
|
|
52
|
+
expect(out.blocked).toBe(false);
|
|
53
|
+
});
|
|
54
|
+
it("only runs hooks whose matcher globs the tool name", async () => {
|
|
55
|
+
const hooks = {
|
|
56
|
+
PreToolUse: [{ matcher: "write_file", hooks: [{ type: "command", command: "exit 1" }] }],
|
|
57
|
+
};
|
|
58
|
+
// tool is bash → matcher write_file does not apply → not blocked
|
|
59
|
+
const bash = await runHooks(hooks, {
|
|
60
|
+
event: "PreToolUse",
|
|
61
|
+
cwd: CWD,
|
|
62
|
+
tool: { name: "bash", input: {} },
|
|
63
|
+
});
|
|
64
|
+
expect(bash.blocked).toBe(false);
|
|
65
|
+
// tool is write_file → matcher applies → blocked
|
|
66
|
+
const write = await runHooks(hooks, {
|
|
67
|
+
event: "PreToolUse",
|
|
68
|
+
cwd: CWD,
|
|
69
|
+
tool: { name: "write_file", input: {} },
|
|
70
|
+
});
|
|
71
|
+
expect(write.blocked).toBe(true);
|
|
72
|
+
});
|
|
73
|
+
it("never blocks on PostToolUse, even on a non-zero exit", async () => {
|
|
74
|
+
const hooks = {
|
|
75
|
+
PostToolUse: [{ matcher: "*", hooks: [{ type: "command", command: "echo done; exit 3" }] }],
|
|
76
|
+
};
|
|
77
|
+
const out = await runHooks(hooks, {
|
|
78
|
+
event: "PostToolUse",
|
|
79
|
+
cwd: CWD,
|
|
80
|
+
tool: { name: "write_file", input: {} },
|
|
81
|
+
});
|
|
82
|
+
expect(out.blocked).toBe(false);
|
|
83
|
+
expect(out.output).toContain("done");
|
|
84
|
+
});
|
|
85
|
+
it("kills and blocks a PreToolUse hook that exceeds its timeout", async () => {
|
|
86
|
+
const hooks = {
|
|
87
|
+
PreToolUse: [{ matcher: "*", hooks: [{ type: "command", command: "sleep 5", timeoutMs: 50 }] }],
|
|
88
|
+
};
|
|
89
|
+
const out = await runHooks(hooks, {
|
|
90
|
+
event: "PreToolUse",
|
|
91
|
+
cwd: CWD,
|
|
92
|
+
tool: { name: "bash", input: {} },
|
|
93
|
+
});
|
|
94
|
+
expect(out.blocked).toBe(true);
|
|
95
|
+
expect(out.reason).toContain("timed out");
|
|
96
|
+
});
|
|
97
|
+
it("returns a no-op when the event has no registered matchers", async () => {
|
|
98
|
+
const hooks = { SessionStart: [{ hooks: [{ type: "command", command: "echo x" }] }] };
|
|
99
|
+
expect(await runHooks(hooks, { event: "PreToolUse", cwd: CWD, tool: { name: "bash", input: {} } }))
|
|
100
|
+
.toEqual({ blocked: false, output: "" });
|
|
101
|
+
});
|
|
102
|
+
});
|
|
103
|
+
//# sourceMappingURL=hooks.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hooks.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/hooks.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAE1B,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7E,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,KAAK,GAAU;YACnB,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC;SACnF,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;SAC7E,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAChC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,EAAE,CAAC;SAC7G,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAChC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;SACjF,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAChC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;SACzF,CAAC;QACF,iEAAiE;QACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YACjC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,iDAAiD;QACjD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAClC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,KAAK,GAAU;YACnB,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;SAC5F,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAChC,KAAK,EAAE,aAAa;YACpB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;SAChG,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAChC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAU,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7F,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;aAChG,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"mcp-write.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/mcp-write.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,77 @@
|
|
|
1
|
+
import { describe, it, expect, beforeEach, afterEach } from "vitest";
|
|
2
|
+
import { mkdtempSync, rmSync } from "node:fs";
|
|
3
|
+
import { tmpdir } from "node:os";
|
|
4
|
+
import { join } from "node:path";
|
|
5
|
+
import { writeMcpServer, removeMcpServer, setMcpServerDisabled, findServerScope, } from "../mcp-write.js";
|
|
6
|
+
import { loadSettings, clearSettingsCache } from "../resolve.js";
|
|
7
|
+
let dir;
|
|
8
|
+
let userPath;
|
|
9
|
+
const ctx = () => ({ cwd: dir, userSettingsPath: userPath });
|
|
10
|
+
const resolve = () => loadSettings({ ...ctx(), noCache: true }).settings;
|
|
11
|
+
beforeEach(() => {
|
|
12
|
+
dir = mkdtempSync(join(tmpdir(), "oxagen-mcpwrite-"));
|
|
13
|
+
userPath = join(dir, "user-settings.json");
|
|
14
|
+
clearSettingsCache();
|
|
15
|
+
});
|
|
16
|
+
afterEach(() => {
|
|
17
|
+
rmSync(dir, { recursive: true, force: true });
|
|
18
|
+
clearSettingsCache();
|
|
19
|
+
});
|
|
20
|
+
describe("writeMcpServer", () => {
|
|
21
|
+
it("adds a stdio server to the project scope", () => {
|
|
22
|
+
writeMcpServer({
|
|
23
|
+
...ctx(),
|
|
24
|
+
name: "fs",
|
|
25
|
+
config: { transport: "stdio", command: "npx", args: ["-y", "server-fs"] },
|
|
26
|
+
});
|
|
27
|
+
const fs = resolve().mcpServers?.fs;
|
|
28
|
+
expect(fs?.transport).toBe("stdio");
|
|
29
|
+
if (fs?.transport === "stdio")
|
|
30
|
+
expect(fs.command).toBe("npx");
|
|
31
|
+
});
|
|
32
|
+
it("adds an http server to a chosen scope", () => {
|
|
33
|
+
writeMcpServer({
|
|
34
|
+
...ctx(),
|
|
35
|
+
scope: "local",
|
|
36
|
+
name: "remote",
|
|
37
|
+
config: { transport: "streamable-http", url: "https://mcp.example.com", auth: "none" },
|
|
38
|
+
});
|
|
39
|
+
expect(findServerScope("remote", ctx())?.scope).toBe("local");
|
|
40
|
+
});
|
|
41
|
+
});
|
|
42
|
+
describe("findServerScope", () => {
|
|
43
|
+
it("returns the highest-precedence scope that defines a server", () => {
|
|
44
|
+
writeMcpServer({ ...ctx(), scope: "project", name: "s", config: { transport: "stdio", command: "a", args: [] } });
|
|
45
|
+
writeMcpServer({ ...ctx(), scope: "local", name: "s", config: { transport: "stdio", command: "b", args: [] } });
|
|
46
|
+
expect(findServerScope("s", ctx())?.scope).toBe("local");
|
|
47
|
+
});
|
|
48
|
+
it("returns null when the server is unknown", () => {
|
|
49
|
+
expect(findServerScope("ghost", ctx())).toBeNull();
|
|
50
|
+
});
|
|
51
|
+
});
|
|
52
|
+
describe("removeMcpServer", () => {
|
|
53
|
+
it("removes an existing server (auto-detecting its scope)", () => {
|
|
54
|
+
writeMcpServer({ ...ctx(), scope: "project", name: "s", config: { transport: "stdio", command: "a", args: [] } });
|
|
55
|
+
const res = removeMcpServer({ ...ctx(), name: "s" });
|
|
56
|
+
expect(res.found).toBe(true);
|
|
57
|
+
expect(resolve().mcpServers?.s).toBeUndefined();
|
|
58
|
+
});
|
|
59
|
+
it("reports not-found for an unknown server", () => {
|
|
60
|
+
expect(removeMcpServer({ ...ctx(), name: "ghost" }).found).toBe(false);
|
|
61
|
+
});
|
|
62
|
+
});
|
|
63
|
+
describe("setMcpServerDisabled", () => {
|
|
64
|
+
it("toggles the disabled flag", () => {
|
|
65
|
+
writeMcpServer({ ...ctx(), name: "s", config: { transport: "stdio", command: "a", args: [] } });
|
|
66
|
+
expect(setMcpServerDisabled({ ...ctx(), name: "s", disabled: true }).found).toBe(true);
|
|
67
|
+
const s = resolve().mcpServers?.s;
|
|
68
|
+
expect(s && "disabled" in s && s.disabled).toBe(true);
|
|
69
|
+
setMcpServerDisabled({ ...ctx(), name: "s", disabled: false });
|
|
70
|
+
const s2 = resolve().mcpServers?.s;
|
|
71
|
+
expect(s2 && "disabled" in s2 && s2.disabled).toBe(false);
|
|
72
|
+
});
|
|
73
|
+
it("reports not-found for an unknown server", () => {
|
|
74
|
+
expect(setMcpServerDisabled({ ...ctx(), name: "ghost", disabled: true }).found).toBe(false);
|
|
75
|
+
});
|
|
76
|
+
});
|
|
77
|
+
//# sourceMappingURL=mcp-write.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"mcp-write.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/mcp-write.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEjE,IAAI,GAAW,CAAC;AAChB,IAAI,QAAgB,CAAC;AAErB,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC7D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;AAEzE,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtD,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC3C,kBAAkB,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,kBAAkB,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,cAAc,CAAC;YACb,GAAG,GAAG,EAAE;YACR,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;SAC1E,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,EAAE,EAAE,SAAS,KAAK,OAAO;YAAE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,cAAc,CAAC;YACb,GAAG,GAAG,EAAE;YACR,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,EAAE,yBAAyB,EAAE,IAAI,EAAE,MAAM,EAAE;SACvF,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAClH,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChH,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAClH,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,oBAAoB,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,IAAI,UAAU,IAAI,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"permissions-gate.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/permissions-gate.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,75 @@
|
|
|
1
|
+
import { describe, it, expect } from "vitest";
|
|
2
|
+
import { evaluateLocalPermission, parseRule } from "../permissions-gate.js";
|
|
3
|
+
describe("parseRule", () => {
|
|
4
|
+
it("parses a bare tool", () => {
|
|
5
|
+
expect(parseRule("Edit")).toEqual({ tool: "Edit" });
|
|
6
|
+
});
|
|
7
|
+
it("parses a tool with a pattern", () => {
|
|
8
|
+
expect(parseRule("Bash(git push*)")).toEqual({ tool: "Bash", pattern: "git push*" });
|
|
9
|
+
});
|
|
10
|
+
it("keeps parens inside the pattern when the rule ends with ')'", () => {
|
|
11
|
+
expect(parseRule("Bash(echo (hi))")).toEqual({ tool: "Bash", pattern: "echo (hi)" });
|
|
12
|
+
});
|
|
13
|
+
});
|
|
14
|
+
describe("evaluateLocalPermission", () => {
|
|
15
|
+
it("allows everything when no permissions are configured", () => {
|
|
16
|
+
expect(evaluateLocalPermission("bash", { command: "rm -rf /" }, undefined).decision).toBe("allow");
|
|
17
|
+
});
|
|
18
|
+
it("denies a matching deny rule (bash command subject)", () => {
|
|
19
|
+
const perms = { deny: ["Bash(rm -rf*)"] };
|
|
20
|
+
const r = evaluateLocalPermission("bash", { command: "rm -rf /tmp/x" }, perms);
|
|
21
|
+
expect(r.decision).toBe("deny");
|
|
22
|
+
expect(r.rule).toBe("Bash(rm -rf*)");
|
|
23
|
+
});
|
|
24
|
+
it("maps write_file to Write and matches on the path subject", () => {
|
|
25
|
+
const perms = { deny: ["Write(.env*)"] };
|
|
26
|
+
expect(evaluateLocalPermission("write_file", { path: ".env.local" }, perms).decision).toBe("deny");
|
|
27
|
+
expect(evaluateLocalPermission("write_file", { path: "src/app.ts" }, perms).decision).toBe("allow");
|
|
28
|
+
});
|
|
29
|
+
it("deny wins over allow at the same scope", () => {
|
|
30
|
+
const perms = { allow: ["Bash(git*)"], deny: ["Bash(git push*)"] };
|
|
31
|
+
expect(evaluateLocalPermission("bash", { command: "git push origin" }, perms).decision).toBe("deny");
|
|
32
|
+
expect(evaluateLocalPermission("bash", { command: "git status" }, perms).decision).toBe("allow");
|
|
33
|
+
});
|
|
34
|
+
it("allow rule overrides defaultMode deny", () => {
|
|
35
|
+
const perms = { defaultMode: "deny", allow: ["Read"] };
|
|
36
|
+
expect(evaluateLocalPermission("read_file", { path: "x.ts" }, perms).decision).toBe("allow");
|
|
37
|
+
expect(evaluateLocalPermission("bash", { command: "ls" }, perms).decision).toBe("deny");
|
|
38
|
+
});
|
|
39
|
+
it("bypassPermissions allows anything not explicitly denied", () => {
|
|
40
|
+
const perms = { defaultMode: "bypassPermissions" };
|
|
41
|
+
expect(evaluateLocalPermission("bash", { command: "anything" }, perms).decision).toBe("allow");
|
|
42
|
+
const denied = { defaultMode: "bypassPermissions", deny: ["Bash"] };
|
|
43
|
+
expect(evaluateLocalPermission("bash", { command: "x" }, denied).decision).toBe("deny");
|
|
44
|
+
});
|
|
45
|
+
it("a bare tool rule matches every subject for that tool", () => {
|
|
46
|
+
const perms = { deny: ["Bash"] };
|
|
47
|
+
expect(evaluateLocalPermission("bash", { command: "echo hi" }, perms).decision).toBe("deny");
|
|
48
|
+
});
|
|
49
|
+
it("default mode allows when nothing matches", () => {
|
|
50
|
+
const perms = { deny: ["Write(.env*)"] };
|
|
51
|
+
expect(evaluateLocalPermission("read_file", { path: "x.ts" }, perms).decision).toBe("allow");
|
|
52
|
+
});
|
|
53
|
+
it("handles unknown tools and malformed input safely", () => {
|
|
54
|
+
expect(evaluateLocalPermission("mystery", null, { deny: ["mystery"] }).decision).toBe("deny");
|
|
55
|
+
expect(evaluateLocalPermission("bash", undefined, { deny: ["Bash(x*)"] }).decision).toBe("allow");
|
|
56
|
+
});
|
|
57
|
+
describe("MCP tool name globbing", () => {
|
|
58
|
+
it("denies an mcp__server__tool via a glob rule", () => {
|
|
59
|
+
const perms = { deny: ["mcp__github__delete_*"] };
|
|
60
|
+
expect(evaluateLocalPermission("mcp__github__delete_repo", {}, perms).decision).toBe("deny");
|
|
61
|
+
expect(evaluateLocalPermission("mcp__github__create_issue", {}, perms).decision).toBe("allow");
|
|
62
|
+
});
|
|
63
|
+
it("lets allow rules whitelist MCP tools under defaultMode deny", () => {
|
|
64
|
+
const perms = { defaultMode: "deny", allow: ["mcp__github__*", "Read"] };
|
|
65
|
+
expect(evaluateLocalPermission("mcp__github__create_issue", {}, perms).decision).toBe("allow");
|
|
66
|
+
expect(evaluateLocalPermission("mcp__other__tool", {}, perms).decision).toBe("deny");
|
|
67
|
+
});
|
|
68
|
+
it("does not let an MCP glob bleed into local tools", () => {
|
|
69
|
+
const perms = { deny: ["mcp__*"] };
|
|
70
|
+
expect(evaluateLocalPermission("bash", { command: "ls" }, perms).decision).toBe("allow");
|
|
71
|
+
expect(evaluateLocalPermission("mcp__x__y", {}, perms).decision).toBe("deny");
|
|
72
|
+
});
|
|
73
|
+
});
|
|
74
|
+
});
|
|
75
|
+
//# sourceMappingURL=permissions-gate.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"permissions-gate.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/permissions-gate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAG5E,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,uBAAuB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnG,MAAM,CAAC,uBAAuB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,KAAK,GAAgB,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAChF,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrG,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,KAAK,GAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,uBAAuB,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7F,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,KAAK,GAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;QAChE,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACjF,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,uBAAuB,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9F,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC/D,MAAM,CAAC,uBAAuB,CAAC,0BAA0B,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7F,MAAM,CAAC,uBAAuB,CAAC,2BAA2B,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,KAAK,GAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC;YACtF,MAAM,CAAC,uBAAuB,CAAC,2BAA2B,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/F,MAAM,CAAC,uBAAuB,CAAC,kBAAkB,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzF,MAAM,CAAC,uBAAuB,CAAC,WAAW,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"resolve.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/resolve.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,109 @@
|
|
|
1
|
+
import { describe, it, expect, beforeEach, afterEach } from "vitest";
|
|
2
|
+
import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from "node:fs";
|
|
3
|
+
import { tmpdir } from "node:os";
|
|
4
|
+
import { join } from "node:path";
|
|
5
|
+
import { loadSettings, getScopePaths, clearSettingsCache } from "../resolve.js";
|
|
6
|
+
let dir;
|
|
7
|
+
let userPath;
|
|
8
|
+
function write(scope, body) {
|
|
9
|
+
const paths = getScopePaths({ cwd: dir, userSettingsPath: userPath });
|
|
10
|
+
mkdirSync(join(paths[scope], ".."), { recursive: true });
|
|
11
|
+
writeFileSync(paths[scope], JSON.stringify(body), "utf8");
|
|
12
|
+
}
|
|
13
|
+
function resolve() {
|
|
14
|
+
return loadSettings({ cwd: dir, userSettingsPath: userPath, noCache: true }).settings;
|
|
15
|
+
}
|
|
16
|
+
beforeEach(() => {
|
|
17
|
+
dir = mkdtempSync(join(tmpdir(), "oxagen-settings-"));
|
|
18
|
+
userPath = join(dir, "user-settings.json");
|
|
19
|
+
clearSettingsCache();
|
|
20
|
+
});
|
|
21
|
+
afterEach(() => {
|
|
22
|
+
rmSync(dir, { recursive: true, force: true });
|
|
23
|
+
clearSettingsCache();
|
|
24
|
+
});
|
|
25
|
+
describe("loadSettings precedence", () => {
|
|
26
|
+
it("returns empty settings when no files exist", () => {
|
|
27
|
+
expect(resolve()).toEqual({});
|
|
28
|
+
});
|
|
29
|
+
it("local overrides project overrides user for scalars", () => {
|
|
30
|
+
write("user", { model: "u/model", apiUrl: "https://u.example.com" });
|
|
31
|
+
write("project", { model: "p/model" });
|
|
32
|
+
write("local", { model: "l/model" });
|
|
33
|
+
const s = resolve();
|
|
34
|
+
expect(s.model).toBe("l/model");
|
|
35
|
+
// apiUrl only set at user scope — survives the merge
|
|
36
|
+
expect(s.apiUrl).toBe("https://u.example.com");
|
|
37
|
+
});
|
|
38
|
+
it("merges env keys across scopes, higher scope winning per key", () => {
|
|
39
|
+
write("user", { env: { A: "1", B: "1" } });
|
|
40
|
+
write("project", { env: { B: "2", C: "2" } });
|
|
41
|
+
expect(resolve().env).toEqual({ A: "1", B: "2", C: "2" });
|
|
42
|
+
});
|
|
43
|
+
it("concatenates and dedupes permission allow/deny; higher scope's mode wins", () => {
|
|
44
|
+
write("user", { permissions: { defaultMode: "default", deny: ["Bash(rm*)"], allow: ["Read"] } });
|
|
45
|
+
write("project", {
|
|
46
|
+
permissions: { defaultMode: "deny", deny: ["Bash(rm*)", "Write(.env*)"] },
|
|
47
|
+
});
|
|
48
|
+
const p = resolve().permissions;
|
|
49
|
+
expect(p.defaultMode).toBe("deny");
|
|
50
|
+
expect(p.deny).toEqual(["Bash(rm*)", "Write(.env*)"]); // deduped
|
|
51
|
+
expect(p.allow).toEqual(["Read"]);
|
|
52
|
+
});
|
|
53
|
+
it("concatenates hooks per event across scopes", () => {
|
|
54
|
+
write("user", { hooks: { PreToolUse: [{ matcher: "bash", hooks: [{ type: "command", command: "a" }] }] } });
|
|
55
|
+
write("local", { hooks: { PreToolUse: [{ matcher: "write_file", hooks: [{ type: "command", command: "b" }] }] } });
|
|
56
|
+
const pre = resolve().hooks?.PreToolUse;
|
|
57
|
+
expect(pre).toHaveLength(2);
|
|
58
|
+
expect(pre?.[0]?.matcher).toBe("bash");
|
|
59
|
+
expect(pre?.[1]?.matcher).toBe("write_file");
|
|
60
|
+
});
|
|
61
|
+
it("merges mcpServers by key", () => {
|
|
62
|
+
write("user", { mcpServers: { a: { transport: "stdio", command: "x", args: [] } } });
|
|
63
|
+
write("project", { mcpServers: { b: { transport: "stdio", command: "y", args: [] } } });
|
|
64
|
+
expect(Object.keys(resolve().mcpServers ?? {})).toEqual(["a", "b"]);
|
|
65
|
+
});
|
|
66
|
+
});
|
|
67
|
+
describe("env var expansion", () => {
|
|
68
|
+
const KEY = "OXAGEN_TEST_EXPAND_VAL";
|
|
69
|
+
afterEach(() => {
|
|
70
|
+
delete process.env[KEY];
|
|
71
|
+
});
|
|
72
|
+
it("expands ${VAR} in string values", () => {
|
|
73
|
+
process.env[KEY] = "expanded";
|
|
74
|
+
write("project", { env: { TOKEN: `pre-\${${KEY}}-post` } });
|
|
75
|
+
expect(resolve().env?.TOKEN).toBe("pre-expanded-post");
|
|
76
|
+
});
|
|
77
|
+
});
|
|
78
|
+
describe("invalid files", () => {
|
|
79
|
+
it("records a scope error but still merges the valid scopes", () => {
|
|
80
|
+
write("project", { model: "good/model" });
|
|
81
|
+
// hand-write an invalid local file (bad apiUrl)
|
|
82
|
+
const paths = getScopePaths({ cwd: dir, userSettingsPath: userPath });
|
|
83
|
+
writeFileSync(paths.local, JSON.stringify({ apiUrl: "nope" }), "utf8");
|
|
84
|
+
const resolved = loadSettings({ cwd: dir, userSettingsPath: userPath, noCache: true });
|
|
85
|
+
expect(resolved.settings.model).toBe("good/model");
|
|
86
|
+
const local = resolved.scopes.find((s) => s.scope === "local");
|
|
87
|
+
expect(local?.error).toBeTruthy();
|
|
88
|
+
});
|
|
89
|
+
it("records an error for malformed JSON", () => {
|
|
90
|
+
const paths = getScopePaths({ cwd: dir, userSettingsPath: userPath });
|
|
91
|
+
mkdirSync(join(paths.project, ".."), { recursive: true });
|
|
92
|
+
writeFileSync(paths.project, "{ not json", "utf8");
|
|
93
|
+
const resolved = loadSettings({ cwd: dir, userSettingsPath: userPath, noCache: true });
|
|
94
|
+
expect(resolved.scopes.find((s) => s.scope === "project")?.error).toContain("invalid JSON");
|
|
95
|
+
});
|
|
96
|
+
});
|
|
97
|
+
describe("cache", () => {
|
|
98
|
+
it("caches by scope paths and clears on demand", () => {
|
|
99
|
+
write("project", { model: "v1/model" });
|
|
100
|
+
const first = loadSettings({ cwd: dir, userSettingsPath: userPath });
|
|
101
|
+
expect(first.settings.model).toBe("v1/model");
|
|
102
|
+
// overwrite on disk; cached read still returns the old value
|
|
103
|
+
write("project", { model: "v2/model" });
|
|
104
|
+
expect(loadSettings({ cwd: dir, userSettingsPath: userPath }).settings.model).toBe("v1/model");
|
|
105
|
+
clearSettingsCache();
|
|
106
|
+
expect(loadSettings({ cwd: dir, userSettingsPath: userPath }).settings.model).toBe("v2/model");
|
|
107
|
+
});
|
|
108
|
+
});
|
|
109
|
+
//# sourceMappingURL=resolve.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"resolve.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/resolve.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGhF,IAAI,GAAW,CAAC;AAChB,IAAI,QAAgB,CAAC;AAErB,SAAS,KAAK,CAAC,KAAmC,EAAE,IAAoB;IACtE,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,OAAO;IACd,OAAO,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;AACxF,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtD,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC3C,kBAAkB,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,kBAAkB,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACrE,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,qDAAqD;QACrD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,KAAK,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACjG,KAAK,CAAC,SAAS,EAAE;YACf,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE;SAC1E,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC,WAAY,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU;QACjE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5G,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACnH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACrF,KAAK,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,MAAM,GAAG,GAAG,wBAAwB,CAAC;IACrC,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;QAC9B,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1C,gDAAgD;QAChD,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;IACrB,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,6DAA6D;QAC7D,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/F,kBAAkB,EAAE,CAAC;QACrB,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"runtime.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/runtime.test.ts"],"names":[],"mappings":""}
|