fix: render registry workspaces for harness

2026-08-05 16:03:45 +02:00
parent ece9cfda50
commit bd798b1c96
21 changed files with 659 additions and 69 deletions
@@ -61,6 +61,13 @@ test("rejects unknown keys and invalid immutable IDs", () => {
    .toThrow(/id/i);
 });

+test("rejects executable or otherwise custom YAML tags in canonical descriptors", () => {
+  expect(() => parseWorkspaceYaml(validYaml.replace(
+    "name: Policlinico San Donato",
+    "name: !command echo-never-execute",
+  ))).toThrow(/tag|yaml/i);
+});
+
 test("accepts optional connection ports and timeouts but rejects unsafe values", () => {
  expect(parseWorkspaceYaml(validYaml).dwh.port).toBe(5432);
  expect(() => parseWorkspaceYaml(validYaml.replace("port: 5432", "port: 0")))