Files
my-pi/pi-permission-system/test/access-intent/bash/nested-execution.test.ts
T
云服务部-叶林立andDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 7e6a8faae1 feat(pi-permission-system): AutoReview 改为跟随主模型的对话式工具调用审查
AutoReview:

- 审查器回到 Codex Guardian 风格的对话式审查,默认跟随会话当前主模型
  (每次审查实时读取 ctx.model);provider/model 必须同时设置才固定审查
  模型,只设其一视为配置错误并转人工。
- 结论只通过 approve / reject 两个工具给出,参数仅 reason;不强制
  toolChoice,正文文本(即使是合法 JSON)一律忽略。
- approve 自动放行;reject 转人工并在弹窗显示理由(标注模型生成)。
  超时、Provider 错误、截断、未调用工具、多次调用、参数无效等异常同样
  转人工,并附固定的系统说明;用户按 Esc 中止时直接拒绝。
- 模型调用改为 modelRegistry.streamSimple(...).result():Pi 1.3.0 面向
  扩展的 ModelRegistry 没有 completeSimple,原写法在真实环境中每次都会
  转人工。
- 对话记录保留可信度标注;工具结果在有更短的 pi-compaction 摘要时替换
  为摘要;token 估算改为非 ASCII 字符按 1 token 计;预算可配置。
- 同一条用户消息内完全相同的请求只缓存 approve 结论。
- 默认 reasoning low、总超时 30 秒、最多 2 次尝试、maxOutputTokens 4000。

删除:

- 未发布过的 TypeSafe Jev 分类器实现、DenialCircuitBreaker。
- 整个 annotator 机制(model-explanation、注册表、registerAnnotator、
  provider-timeout);annotators 配置键保留为已弃用并忽略,避免旧配置
  被拒绝。

测试:

- 新增 reviewer / transcript / 弹窗说明 / 默认配置测试;清理重复、恒真
  或只测实现细节的旧测试。
- 使用 deepseek-v4.1-flash 实测 5 个场景各 5 次,25 次结论全部符合预期。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-10-19 01:54:17 -07:00

86 lines
3.0 KiB
TypeScript

import { describe, expect, it } from "vitest";
import {
forEachNestedExecution,
NESTED_EXECUTION_CONTEXTS,
} from "#src/access-intent/bash/nested-execution";
import { getParser, type TSNode } from "#src/access-intent/bash/parser";
import type { BashCommandContext } from "#src/types";
/** Parse a bash snippet and collect every nested execution context found. */
async function visitContexts(
command: string,
): Promise<{ text: string; context: BashCommandContext }[]> {
const parser = await getParser();
const tree = parser.parse(command);
if (!tree) throw new Error("parser.parse returned null");
const found: { text: string; context: BashCommandContext }[] = [];
try {
forEachNestedExecution(tree.rootNode, (node: TSNode, context) => {
found.push({ text: node.text, context });
});
} finally {
tree.delete();
}
return found;
}
describe("NESTED_EXECUTION_CONTEXTS", () => {
it("omits subshell, which the command enumerator emits whole", () => {
expect(NESTED_EXECUTION_CONTEXTS.has("subshell")).toBe(false);
});
});
describe("forEachNestedExecution", () => {
it("finds a substitution in argument position", async () => {
expect(await visitContexts("echo $(rm x)")).toEqual([
{ text: "$(rm x)", context: "command_substitution" },
]);
});
it("finds a backtick substitution", async () => {
expect(await visitContexts("echo `rm x`")).toEqual([
{ text: "`rm x`", context: "command_substitution" },
]);
});
it("finds a process substitution", async () => {
expect(await visitContexts("diff <(cat /etc/shadow)")).toEqual([
{ text: "<(cat /etc/shadow)", context: "process_substitution" },
]);
});
it("finds a substitution hosted in a redirect destination", async () => {
expect(await visitContexts("echo hi > $(rm x)")).toEqual([
{ text: "$(rm x)", context: "command_substitution" },
]);
});
it("finds a substitution hosted in an interpolating heredoc body", async () => {
expect(await visitContexts("cat <<EOF\n$(rm e)\nEOF")).toEqual([
{ text: "$(rm e)", context: "command_substitution" },
]);
});
it("finds nothing in a quoted heredoc body, which does not interpolate", async () => {
expect(await visitContexts("cat <<'EOF'\n$(rm e)\nEOF")).toEqual([]);
});
it("does not descend past a context it finds", async () => {
// The outer substitution is visited; the inner one is left to the visitor.
expect(await visitContexts("echo $(echo $(rm x))")).toEqual([
{ text: "$(echo $(rm x))", context: "command_substitution" },
]);
});
it("finds each substitution of a chain in source order", async () => {
expect(await visitContexts("echo $(rm a) && echo `rm b`")).toEqual([
{ text: "$(rm a)", context: "command_substitution" },
{ text: "`rm b`", context: "command_substitution" },
]);
});
it("finds nothing in a command with no nested execution", async () => {
expect(await visitContexts("npm install pkg > out.txt")).toEqual([]);
});
});