Files
my-pi/pi-permission-system/test/config-pipeline.test.ts
T
云服务部-叶林立andDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2aa1be0b54 feat: 组合包配置以包内 config/ 为唯一来源,并新增受保护写入人工审批
配置统一:权限策略、硬防御、Tool Search、提示词封面以及新迁入的
RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展
直接读取已安装组合包内的 config/,pi install / pi update 即完成部署;
删除 rebuild-bundle-config.mjs 与 bundle-manifest.json,my-pi/ 只保留
日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本
reset 回发布版本。AGENTS.md 新增「组合包配置原则」。

脚本整合:search_config.sh / ssh_config.sh 合并为 configure.sh
search|ssh;install.sh / update.sh 共享函数抽到 scripts/lib.sh,远程
安装器改为先下载到临时文件再执行,下载失败可被检测。

权限:hard-guards 新增 protectedWrites,写入 Pi 凭据/设置、已安装
组合包与扩展目录、pi-ssh 凭据库时一律人工确认(跳过 AutoReview、
yolo 与 Session grant,无 UI 时拒绝);放行 ls、LSP 查询、ctx 只读、
web_search、Chrome 只读与 git 只读命令,skill_manage 改为 ask。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-10-20 01:05:31 -07:00

104 lines
4.0 KiB
TypeScript

import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
import { tmpdir } from "node:os";
import { dirname, join } from "node:path";
import { afterEach, beforeEach, describe, expect, it } from "vitest";
import { loadAndMergeConfigs } from "#src/config-loader";
import { normalizePermissionSystemConfig } from "#src/extension-config";
import {
DEFAULT_RENDER_BUDGET,
resolveRenderBudget,
} from "#src/presentation/dialog-renderer";
/**
* Full-pipeline seam tests: write a temp config.json → loadAndMergeConfigs →
* normalizePermissionSystemConfig → assert values survive end to end.
*
* These tests guard the seam between the two normalizers — the class of bug
* fixed in #332, where a field declared on PermissionSystemExtensionConfig was
* silently dropped by the UnifiedPermissionConfig intermediate.
*/
describe("config pipeline seam", () => {
let tempDir: string;
let globalConfigPath: string;
beforeEach(() => {
tempDir = mkdtempSync(join(tmpdir(), "config-pipeline-test-"));
// Tests inject a temp policy path; the bundle config/ file is never touched.
globalConfigPath = join(tempDir, "config", "pi-permission-policy.jsonc");
});
afterEach(() => {
rmSync(tempDir, { recursive: true, force: true });
});
function writeGlobal(content: Record<string, unknown>): void {
mkdirSync(dirname(globalConfigPath), { recursive: true });
writeFileSync(globalConfigPath, JSON.stringify(content));
}
it("a runtime knob survives the full pipeline", () => {
writeGlobal({ debugLog: true });
const mergeResult = loadAndMergeConfigs(globalConfigPath);
const config = normalizePermissionSystemConfig(mergeResult.merged);
expect(config.debugLog).toBe(true);
});
// The deprecated caps traverse the pipeline backwards from every other field:
// they must reach the merge intermediate (so the deprecation detector sees an
// operator's setting) and stop there, never reaching a runtime consumer.
it("a deprecated preview cap reaches the merge intermediate but not the runtime config", () => {
writeGlobal({ toolInputPreviewMaxLength: 1000 });
const mergeResult = loadAndMergeConfigs(globalConfigPath);
const config = normalizePermissionSystemConfig(mergeResult.merged);
expect(mergeResult.merged.toolInputPreviewMaxLength).toBe(1000);
expect(config).not.toHaveProperty("toolInputPreviewMaxLength");
});
it("dialog budget fields survive the full pipeline and resolve to a render budget", () => {
writeGlobal({ promptMaxRows: 12, promptFieldMaxWidth: 80 });
const mergeResult = loadAndMergeConfigs(globalConfigPath);
const config = normalizePermissionSystemConfig(mergeResult.merged);
expect(config.promptMaxRows).toBe(12);
expect(config.promptFieldMaxWidth).toBe(80);
expect(resolveRenderBudget(config)).toEqual({
maxRows: 12,
fieldMaxWidth: 80,
});
});
it("falls back to the default render budget when the config names neither field", () => {
const mergeResult = loadAndMergeConfigs(globalConfigPath);
const config = normalizePermissionSystemConfig(mergeResult.merged);
expect(resolveRenderBudget(config)).toEqual(DEFAULT_RENDER_BUDGET);
});
it("a deprecated text-summary cap likewise stops at the merge intermediate", () => {
writeGlobal({ toolTextSummaryMaxLength: 250 });
const mergeResult = loadAndMergeConfigs(globalConfigPath);
const config = normalizePermissionSystemConfig(mergeResult.merged);
expect(mergeResult.merged.toolTextSummaryMaxLength).toBe(250);
expect(config).not.toHaveProperty("toolTextSummaryMaxLength");
});
it("defaults apply when config file is absent", () => {
// No config file written — the injected path does not exist.
const mergeResult = loadAndMergeConfigs(globalConfigPath);
const config = normalizePermissionSystemConfig(mergeResult.merged);
expect(config.debugLog).toBe(false);
expect(config.permissionReviewLog).toBe(true);
expect(config.yoloMode).toBe(false);
});
});