vrr/opencode
2
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-19 15:23:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

test(core): cover managed output read permissions (#31166)

Browse source
This commit is contained in:
Kit Langton 2026-06-06 21:58:41 -04:00 • committed by GitHub
parent eb9a683b40
commit 1025540fcc
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
packages/core/test/permission.test.ts
View file

@ -161,6 +161,21 @@ describe("PermissionV2", () => {
}),
)
it.effect("allows managed output reads without granting external directory access", () =>
Effect.gen(function* () {
yield* setup([
{ action: "*", resource: "*", effect: "deny" },
{ action: "read", resource: "*", effect: "allow" },
])
const service = yield* PermissionV2.Service
expect(yield* service.ask(assertion({ resources: ["tool_123"] }))).toMatchObject({ effect: "allow" })
expect(
yield* service.ask(assertion({ action: "external_directory", resources: ["/tmp/tool-output/*"] })),
).toMatchObject({ effect: "deny" })
}),
)
it.effect("uses build permissions when the Session agent is omitted", () =>
Effect.gen(function* () {
yield* setup()