claude-dev-env 2.4.0 → 2.7.0

package/scripts/tests/test_code_review_constants.py

@@ -0,0 +1,80 @@
+"""Specifications for the permission modes the review binary is asked for.
+
+The review binary accepts one permission mode for an ordinary caller and a
+different one for root. Naming the wrong mode means the binary refuses the
+call, no review runs, and no stamp is ever minted.
+"""
+
+from __future__ import annotations
+
+import importlib
+import os
+
+import pytest
+
+from dev_env_scripts_constants import code_review_constants
+
+
+BYPASS_MODE_TOKEN: str = "bypassPermissions"
+ACCEPT_EDITS_MODE_TOKEN: str = "acceptEdits"
+ROOT_USER_ID: int = 0
+UNPRIVILEGED_USER_ID: int = 1000
+
+
+def _permission_mode_seen_by(
+    monkeypatch: pytest.MonkeyPatch, effective_user_id: int
+) -> str:
+    """Read the review permission mode a caller with this user id resolves."""
+    monkeypatch.setattr(os, "geteuid", lambda: effective_user_id)
+    reloaded_constants = importlib.reload(code_review_constants)
+    return str(reloaded_constants.REVIEW_PERMISSION_MODE)
+
+
+def test_root_detection_agrees_with_this_process(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setattr(os, "geteuid", lambda: ROOT_USER_ID)
+    reloaded_constants = importlib.reload(code_review_constants)
+
+    assert reloaded_constants.IS_ROOT_CALLER is True
+    assert reloaded_constants.ROOT_EFFECTIVE_USER_ID == ROOT_USER_ID
+
+
+def test_bypass_mode_names_the_token_the_binary_reads() -> None:
+    assert code_review_constants.PERMISSION_MODE_BYPASS == BYPASS_MODE_TOKEN
+
+
+def test_accept_edits_mode_names_the_token_the_binary_reads() -> None:
+    assert code_review_constants.PERMISSION_MODE_ACCEPT_EDITS == ACCEPT_EDITS_MODE_TOKEN
+
+
+def test_a_root_caller_resolves_the_mode_the_binary_accepts(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    assert _permission_mode_seen_by(monkeypatch, ROOT_USER_ID) == (
+        ACCEPT_EDITS_MODE_TOKEN
+    )
+
+
+def test_an_ordinary_caller_resolves_the_bypass_mode(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    assert _permission_mode_seen_by(monkeypatch, UNPRIVILEGED_USER_ID) == (
+        BYPASS_MODE_TOKEN
+    )
+
+
+def test_a_platform_without_a_user_id_still_loads_the_constants(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    """Windows exposes no ``os.geteuid``, and the module still imports.
+
+    Reading a missing ``os.geteuid`` raises, and every caller of the review
+    invoker dies at import. A platform that reports no user id is never the
+    root the review binary refuses, so it reads as an ordinary caller.
+    """
+    monkeypatch.delattr(os, "geteuid", raising=False)
+    reloaded_constants = importlib.reload(code_review_constants)
+
+    assert reloaded_constants.IS_ROOT_CALLER is False
+    assert reloaded_constants.REVIEW_PERMISSION_MODE == BYPASS_MODE_TOKEN

package/scripts/tests/test_codex_capability_bridge.py

@@ -0,0 +1,91 @@
+import json
+import subprocess
+import sys
+from pathlib import Path
+
+import pytest
+
+from codex_capability_bridge import translate_capability
+
+
+@pytest.mark.parametrize("source_surface, expected_target, capability_payload", [("TaskList", "update_plan", {"plan": []}), ("TaskCreate", "update_plan", {"name": "review", "status": "pending"}), ("TaskUpdate", "update_plan", {"name": "review", "status": "pending"}), ("Task", "multi_agent_v1__spawn_agent", {"prompt": "review"}), ("SendMessage", "multi_agent_v1__send_input", {"message": "review"}), ("TaskOutput", "multi_agent_v1__wait_agent", {"task_id": "task-1"}), ("TaskStop", "multi_agent_v1__close_agent", {"task_id": "task-1"})])
+def test_maps_capability(source_surface: str, expected_target: str, capability_payload: dict[str, object]) -> None:
+    translated_record = translate_capability(source_surface, capability_payload)
+    assert translated_record["target"] == expected_target
+
+
+def test_normalizes_alias_and_task_payload() -> None:
+    translated_record = translate_capability("task_create", {"subject": "write tests", "status": "in-progress"})
+    assert translated_record["payload"] == {"plan": [{"step": "write tests", "status": "in_progress"}]}
+
+
+def test_rejects_bad_payload_and_schedule() -> None:
+    assert translate_capability("TaskUpdate", {"name": "x", "status": "later"})["status"] == "malformed"
+    assert translate_capability("ScheduleWakeup", {})["status"] == "unsupported"
+
+
+def test_rejects_unknown_and_private_paths() -> None:
+    assert translate_capability("NoSuchSurface", {})["status"] == "unknown"
+    assert translate_capability("SendMessage", {"message": "C:\\Users\\melan\\secret"})["status"] == "rejected"
+
+
+@pytest.mark.parametrize("private_path", ["C:/private/file", "\\\\server\\share\\file", "/private/file", "~/secret", "$HOME/secret", "%USERPROFILE%\\secret", "safe/../secret"])
+def test_rejects_absolute_private_and_traversal_paths(private_path: str) -> None:
+    assert translate_capability("SendMessage", {"message": private_path})["status"] == "rejected"
+
+
+def test_validates_mapped_surface_payloads() -> None:
+    assert translate_capability("spawn", {"message": "hello"})["status"] == "malformed"
+    assert translate_capability("stop", {"task_id": 3})["status"] == "malformed"
+    assert translate_capability("TaskList", {"plan": [{"step": "review"}]})["status"] == "malformed"
+
+
+def test_translation_is_byte_identical_for_repeated_input() -> None:
+    payload = {"message": "hello", "agent_id": "agent-1"}
+    first_json = json.dumps(translate_capability("message", payload), sort_keys=True, separators=(",", ":"))
+    second_json = json.dumps(translate_capability("message", payload), sort_keys=True, separators=(",", ":"))
+    assert first_json == second_json
+
+
+def test_translation_does_not_execute_payload() -> None:
+    payload = {"message": "__import__('subprocess').run('whoami')"}
+    translated_record = translate_capability("message", payload)
+    assert translated_record["payload"] == payload
+
+
+def test_translation_is_deterministic_and_cli_is_json() -> None:
+    payload = {"message": "hello", "agent_id": "agent-1"}
+    first_record = translate_capability("SendMessage", payload)
+    second_record = translate_capability("SendMessage", payload)
+    assert first_record == second_record
+    script_path = Path(__file__).parents[1] / "codex_capability_bridge.py"
+    cli_run = subprocess.run([sys.executable, str(script_path), "SendMessage", json.dumps(payload)], capture_output=True, text=True, check=True)
+    assert json.loads(cli_run.stdout) == first_record
+
+
+def test_cli_rejects_malformed_payload_with_one_json_error_record() -> None:
+    script_path = Path(__file__).parents[1] / "codex_capability_bridge.py"
+    cli_run = subprocess.run(
+        [sys.executable, str(script_path), "SendMessage", "{"],
+        capture_output=True,
+        text=True,
+    )
+    assert cli_run.returncode != 0
+    assert json.loads(cli_run.stdout) == {
+        "source": "unknown",
+        "status": "error",
+        "error": "payload must be valid JSON",
+    }
+    assert cli_run.stderr == ""
+
+
+def test_cli_rejects_malformed_arguments_with_one_json_error_record() -> None:
+    script_path = Path(__file__).parents[1] / "codex_capability_bridge.py"
+    cli_run = subprocess.run(
+        [sys.executable, str(script_path)],
+        capture_output=True,
+        text=True,
+    )
+    assert cli_run.returncode != 0
+    assert json.loads(cli_run.stdout)["status"] == "error"
+    assert cli_run.stderr == ""