ceos/opencode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

test(core): cover managed output read permissions (#31166)

Browse source
This commit is contained in:
Kit Langton 2026-06-06 21:58:41 -04:00 • committed by GitHub
commit 1025540fcc
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
packages/core/test/permission.test.ts
View file

@ -161,6 +161,21 @@ describe("PermissionV2", () => {
}), }),
) )
it.effect("allows managed output reads without granting external directory access", () =>
Effect.gen(function* () {
yield* setup([
{ action: "*", resource: "*", effect: "deny" },
{ action: "read", resource: "*", effect: "allow" },
])
const service = yield* PermissionV2.Service
expect(yield* service.ask(assertion({ resources: ["tool_123"] }))).toMatchObject({ effect: "allow" })
expect(
yield* service.ask(assertion({ action: "external_directory", resources: ["/tmp/tool-output/*"] })),
).toMatchObject({ effect: "deny" })
}),
)
it.effect("uses build permissions when the Session agent is omitted", () => it.effect("uses build permissions when the Session agent is omitted", () =>
Effect.gen(function* () { Effect.gen(function* () {
yield* setup() yield* setup()