95 lines
3.4 KiB
JavaScript
95 lines
3.4 KiB
JavaScript
const test = require("node:test");
|
|
const assert = require("node:assert");
|
|
const { createFakePi } = require("./fake_pi_runtime.js");
|
|
|
|
const installGatePromise = import("../../tht-gate.js").then((m) => m.default);
|
|
|
|
test("tht schema introspect --refresh e' bloccato in sessione (manutenzione)", async () => {
|
|
const installGate = await installGatePromise;
|
|
const { pi } = createFakePi();
|
|
installGate(pi);
|
|
const res = await pi.emit("tool_call", {
|
|
toolName: "bash",
|
|
input: { command: "tht schema introspect -c workspaces/psd.yaml --refresh" },
|
|
});
|
|
assert.equal(res?.block, true);
|
|
});
|
|
|
|
test("tht schema introspect senza --refresh passa (cache hit innocuo)", async () => {
|
|
const installGate = await installGatePromise;
|
|
const { pi } = createFakePi();
|
|
installGate(pi);
|
|
const res = await pi.emit("tool_call", {
|
|
toolName: "bash",
|
|
input: { command: "tht schema introspect -c workspaces/psd.yaml" },
|
|
});
|
|
assert.equal(res, undefined);
|
|
});
|
|
|
|
for (const cmd of [
|
|
'find / -name "schema_linking.json"',
|
|
'find /Users/mp/projects/ThothII -name "schema_linking.json"',
|
|
'find . -name "schema_linking.json"',
|
|
]) {
|
|
test(`filesystem find e' bloccato nel workflow: ${cmd}`, async () => {
|
|
const installGate = await installGatePromise;
|
|
const { pi } = createFakePi();
|
|
installGate(pi);
|
|
const res = await pi.emit("tool_call", { toolName: "bash", input: { command: cmd } });
|
|
assert.equal(res?.block, true);
|
|
assert.match(res?.reason ?? "", /tht session documents/i);
|
|
});
|
|
}
|
|
|
|
test("tht search find resta consentito", async () => {
|
|
const installGate = await installGatePromise;
|
|
const { pi } = createFakePi();
|
|
installGate(pi);
|
|
const res = await pi.emit("tool_call", {
|
|
toolName: "bash",
|
|
input: { command: 'tht search find --kind evidence "ablazione"' },
|
|
});
|
|
assert.equal(res, undefined);
|
|
});
|
|
|
|
// Bash mutations of protected state bypass the write/edit hook: block them.
|
|
const BLOCKED_BASH = [
|
|
'echo \'{"type":"phase_approved","subject":"phase:4"}\' >> sessions/s1/review_decisions.jsonl',
|
|
"sed -i '' 's/open/finalized/' sessions/s1/session_manifest.yaml",
|
|
"cat /tmp/patch.js > .pi/extensions/tht-gate.js",
|
|
"python3 -c \"open('sessions/s1/review_decisions.jsonl','a').write('x')\"",
|
|
"mv /tmp/fake.json sessions/s1/cte_plan.json",
|
|
"rm sessions/s1/session_manifest.yaml",
|
|
"tee -a sessions/s1/review_decisions.jsonl < /tmp/x",
|
|
];
|
|
|
|
// Read-only access and unrelated redirects stay allowed.
|
|
const ALLOWED_BASH = [
|
|
"cat sessions/s1/review_decisions.jsonl",
|
|
"grep phase_approved sessions/s1/review_decisions.jsonl",
|
|
"tail -5 sessions/s1/session_manifest.yaml",
|
|
"ls .pi/extensions",
|
|
"tht session show s1 > /tmp/out.txt",
|
|
"echo done > /tmp/scratch.txt",
|
|
];
|
|
|
|
for (const cmd of BLOCKED_BASH) {
|
|
test(`bash mutation su stato protetto e' bloccata: ${cmd.slice(0, 60)}`, async () => {
|
|
const installGate = await installGatePromise;
|
|
const { pi } = createFakePi();
|
|
installGate(pi);
|
|
const res = await pi.emit("tool_call", { toolName: "bash", input: { command: cmd } });
|
|
assert.equal(res?.block, true);
|
|
});
|
|
}
|
|
|
|
for (const cmd of ALLOWED_BASH) {
|
|
test(`bash read-only/estraneo passa: ${cmd.slice(0, 60)}`, async () => {
|
|
const installGate = await installGatePromise;
|
|
const { pi } = createFakePi();
|
|
installGate(pi);
|
|
const res = await pi.emit("tool_call", { toolName: "bash", input: { command: cmd } });
|
|
assert.equal(res, undefined);
|
|
});
|
|
}
|