lofyerandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
698a15ad14
Make agent backends configurable and governable with encrypted credentials, explicit context sharing, and tool approval boundaries. Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
50 lines
1.5 KiB
TypeScript
50 lines
1.5 KiB
TypeScript
import { describe, expect, it, vi } from 'vitest'
|
|
import type { AgentEvent } from '../shared/contracts'
|
|
import { ToolApprovalBroker } from './tool-approval-broker'
|
|
|
|
describe('ToolApprovalBroker', () => {
|
|
it('supports configurable session grants without bypassing the first prompt', async () => {
|
|
const broker = new ToolApprovalBroker()
|
|
const send = vi.fn<(event: AgentEvent) => void>()
|
|
const firstApproval = broker.request(
|
|
'session',
|
|
'cf725fa7-709f-4417-81f7-40d0aa84da78',
|
|
'workspace',
|
|
new AbortController().signal,
|
|
send
|
|
)
|
|
const event = send.mock.calls[0]?.[0]
|
|
expect(event).toMatchObject({ type: 'approval' })
|
|
if (!event || event.type !== 'approval') {
|
|
throw new Error('Approval event was not emitted')
|
|
}
|
|
|
|
broker.respond(event.approvalId, true)
|
|
await expect(firstApproval).resolves.toBeUndefined()
|
|
|
|
await expect(
|
|
broker.request(
|
|
'session',
|
|
'90536266-3db8-4d64-969d-552635c3172e',
|
|
'workspace',
|
|
new AbortController().signal,
|
|
send
|
|
)
|
|
).resolves.toBeUndefined()
|
|
expect(send).toHaveBeenCalledOnce()
|
|
})
|
|
|
|
it('denies tool execution when enterprise policy has not authorized it', async () => {
|
|
const broker = new ToolApprovalBroker()
|
|
await expect(
|
|
broker.request(
|
|
'policy',
|
|
'90536266-3db8-4d64-969d-552635c3172e',
|
|
'workspace',
|
|
new AbortController().signal,
|
|
vi.fn()
|
|
)
|
|
).rejects.toThrow('企业策略尚未授权')
|
|
})
|
|
})
|