Files
my-pi/pi-permission-system/test/config-reporter.test.ts
T
云服务部-叶林立andDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2aa1be0b54 feat: 组合包配置以包内 config/ 为唯一来源,并新增受保护写入人工审批
配置统一:权限策略、硬防御、Tool Search、提示词封面以及新迁入的
RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展
直接读取已安装组合包内的 config/,pi install / pi update 即完成部署;
删除 rebuild-bundle-config.mjs 与 bundle-manifest.json,my-pi/ 只保留
日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本
reset 回发布版本。AGENTS.md 新增「组合包配置原则」。

脚本整合:search_config.sh / ssh_config.sh 合并为 configure.sh
search|ssh;install.sh / update.sh 共享函数抽到 scripts/lib.sh,远程
安装器改为先下载到临时文件再执行,下载失败可被检测。

权限:hard-guards 新增 protectedWrites,写入 Pi 凭据/设置、已安装
组合包与扩展目录、pi-ssh 凭据库时一律人工确认(跳过 AutoReview、
yolo 与 Session grant,无 UI 时拒绝);放行 ls、LSP 查询、ctx 只读、
web_search、Chrome 只读与 git 只读命令,skill_manage 改为 ask。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-10-20 01:05:31 -07:00

81 lines
2.6 KiB
TypeScript

import {
mkdirSync,
mkdtempSync,
readFileSync,
rmSync,
writeFileSync,
} from "node:fs";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { expect, test } from "vitest";
import { buildResolvedConfigLogEntry } from "#src/config-reporter";
import { createPermissionSystemLogger } from "#src/logging";
import type { ResolvedPolicyPaths } from "#src/permission-manager";
import { PermissionManager } from "#src/permission-manager";
test("buildResolvedConfigLogEntry reports global and agent policy paths", () => {
const policyPaths: ResolvedPolicyPaths = {
globalConfigPath: "/bundle/config/pi-permission-policy.jsonc",
globalConfigExists: true,
agentsDir: "/home/user/.pi/agent/agents",
agentsDirExists: true,
projectAgentsDir: null,
projectAgentsDirExists: false,
};
const result = buildResolvedConfigLogEntry({ policyPaths });
expect(result).toEqual(policyPaths);
});
test("config.resolved entry appears in review log via logger", () => {
const tempDir = mkdtempSync(join(tmpdir(), "config-resolved-log-"));
try {
const logsDir = join(tempDir, "logs");
mkdirSync(logsDir, { recursive: true });
const reviewLogPath = join(logsDir, "review.jsonl");
const debugLogPath = join(logsDir, "debug.jsonl");
const globalConfigPath = join(tempDir, "pi-permissions.jsonc");
writeFileSync(globalConfigPath, "{}", "utf-8");
const agentsDir = join(tempDir, "agents");
const pm = new PermissionManager({
globalConfigPath,
agentsDir,
});
const logger = createPermissionSystemLogger({
getConfig: () => ({
debugLog: false,
permissionReviewLog: true,
yoloMode: false,
doublePressToConfirm: true,
}),
debugLogPath,
reviewLogPath,
ensureLogsDirectory: () => undefined,
});
const policyPaths = pm.getResolvedPolicyPaths();
const entry = buildResolvedConfigLogEntry({ policyPaths });
logger.review(
"config.resolved",
entry as unknown as Record<string, unknown>,
);
const logContent = readFileSync(reviewLogPath, "utf-8").trim();
const parsed = JSON.parse(logContent) as Record<string, unknown>;
expect(parsed.event).toBe("config.resolved");
expect(parsed.globalConfigPath).toBe(globalConfigPath);
expect(parsed.globalConfigExists).toBe(true);
expect(parsed.agentsDir).toBe(agentsDir);
expect(parsed.agentsDirExists).toBe(false);
expect(parsed.projectAgentsDir).toBe(null);
expect(parsed.projectAgentsDirExists).toBe(false);
} finally {
rmSync(tempDir, { recursive: true, force: true });
}
});