mirror of
https://github.com/AgentSeal/codeburn.git
synced 2026-08-27 01:14:02 +00:00
094f9f1d43
Extra High MERGE AFTER FIX: source-scraping the setup file treated a comment containing 'HERMES_HOME' as isolation. The lists now live in a side-effect-free module that applyIsolation and the declaration test both import. Comment-only sabotage fails with hermes:HERMES_HOME.
29 lines
1.3 KiB
TypeScript
29 lines
1.3 KiB
TypeScript
// Static guard: every PROVIDER_ENV_VARS entry must be CLEARED or REDIRECTED
|
|
// by tests/setup/env-isolation.ts. A data-dir override that is fingerprinted
|
|
// for cache invalidation but not isolated in tests leaks the developer's real
|
|
// sessions into fixture parses — green on CI (no HERMES_HOME), red on a
|
|
// Hermes-shell laptop. The named hole was HERMES_HOME; the class is every
|
|
// sibling override that session-cache already knows about.
|
|
//
|
|
// The lists are imported from the same module applyIsolation() uses. Extra
|
|
// High #1064: scraping setup-file source treated a comment containing
|
|
// `'HERMES_HOME'` as isolation (false-green). Runtime membership cannot.
|
|
import { describe, expect, it } from 'vitest'
|
|
|
|
import { PROVIDER_ENV_VARS } from '../src/session-cache.js'
|
|
import { CLEARED, REDIRECTED } from './setup/env-isolation-vars.js'
|
|
|
|
describe('env-isolation covers PROVIDER_ENV_VARS', () => {
|
|
it('clears or redirects every provider data-dir override so a developer shell cannot leak real sessions into fixtures', () => {
|
|
const isolated = new Set<string>([...CLEARED, ...REDIRECTED])
|
|
|
|
const missing: string[] = []
|
|
for (const [provider, vars] of Object.entries(PROVIDER_ENV_VARS)) {
|
|
for (const varName of vars) {
|
|
if (!isolated.has(varName)) missing.push(`${provider}:${varName}`)
|
|
}
|
|
}
|
|
|
|
expect(missing).toEqual([])
|
|
})
|
|
})
|