1. 1use serde_json::json;
2. 2use vak_agent::{ApprovalMode, auto_approve};
3. 3use vak_permission::{AskSource, Mode};
4. 4
5. 5#[test]
6. 6fn approve_safe_never_bypasses_explicit_rules_or_circuit_breaker()
7. 7-> Result<(), Box<dyn std::error::Error>> {
8. 8 let cwd = tempfile::tempdir()?;
9. 9 let input = json!({"path": "file.txt"});
10. 10
11. 11 assert!(!auto_approve(
12. 12 ApprovalMode::ApproveSafe,
13. 13 AskSource::Rule,
14. 14 "write",
15. 15 &input,
16. 16 Mode::WorkspaceWrite,
17. 17 true,
18. 18 cwd.path(),
19. 19 ));
20. 20 assert!(!auto_approve(
21. 21 ApprovalMode::ApproveSafe,
22. 22 AskSource::CircuitBreaker,
23. 23 "read",
24. 24 &input,
25. 25 Mode::ReadOnly,
26. 26 true,
27. 27 cwd.path(),
28. 28 ));
29. 29 assert!(!auto_approve(
30. 30 ApprovalMode::AutoApprove,
31. 31 AskSource::CircuitBreaker,
32. 32 "read",
33. 33 &input,
34. 34 Mode::ReadOnly,
35. 35 true,
36. 36 cwd.path(),
37. 37 ));
38. 38 Ok(())
39. 39}
40. 40
41. 41#[test]
42. 42fn approve_safe_rejects_paths_that_escape_the_workspace() -> Result<(), Box<dyn std::error::Error>>
43. 43{
44. 44 let cwd = tempfile::tempdir()?;
45. 45 let input = json!({"path": "../outside.txt"});
46. 46
47. 47 assert!(!auto_approve(
48. 48 ApprovalMode::ApproveSafe,
49. 49 AskSource::Scope,
50. 50 "write",
51. 51 &input,
52. 52 Mode::WorkspaceWrite,
53. 53 true,
54. 54 cwd.path(),
55. 55 ));
56. 56 Ok(())
57. 57}
58. 58
59. 59/// An approver that refuses without consulting anyone must say so.
60. 60///
61. 61/// `AutoDeny` used to produce "denied by user: ..." on unattended
62. 62/// surfaces. No user was asked — the gate was never put to a person — and
63. 63/// the wording sent the model looking for a substitute tool and the
64. 64/// operator looking for a decision nobody made. The refusal is the same;
65. 65/// only the attribution is corrected.
66. 66#[test]
67. 67fn an_unanswerable_approver_does_not_blame_a_user() {
68. 68 assert!(
69. 69 !vak_agent::Approver::answerable(&vak_agent::AutoDeny),
70. 70 "AutoDeny consults no one and must not claim to be answerable"
71. 71 );
72. 72 assert!(
73. 73 vak_agent::Approver::answerable(&vak_agent::AutoApprove),
74. 74 "AutoApprove resolves gates, so it is answerable"
75. 75 );
76. 76}
77. 77