Add ACP-backed role sessions

2026-08-16 10:08:03 +08:00
parent d59c4a654f
commit a80fe68d57
34 changed files with 1683 additions and 887 deletions
@@ -0,0 +1,23 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import type { RequestPermissionRequest } from "@agentclientprotocol/sdk";
+import { decidePermission } from "../src/acp/client.js";
+
+const request = (rawInput: unknown): RequestPermissionRequest => ({
+  sessionId: "session",
+  toolCall: { toolCallId: "call", title: "bash git status", kind: "execute", name: "bash", rawInput },
+  options: [
+    { optionId: "allow", name: "Allow", kind: "allow_once" },
+    { optionId: "reject", name: "Reject", kind: "reject_once" }
+  ]
+});
+
+test("permission deny and allowlist fail closed", () => {
+  assert.equal(decidePermission(request("git status"), { permissionMode: "deny", allowedTools: [], allowedCommandPatterns: [] }).outcome.outcome, "selected");
+  const allowed = decidePermission(request("git status"), { permissionMode: "allowlist", allowedTools: ["bash"], allowedCommandPatterns: ["^git status$"] });
+  assert.deepEqual(allowed.outcome, { outcome: "selected", optionId: "allow" });
+  const missingDetail = decidePermission(request(undefined), { permissionMode: "allowlist", allowedTools: ["bash"], allowedCommandPatterns: ["^git status$"] });
+  assert.deepEqual(missingDetail.outcome, { outcome: "selected", optionId: "reject" });
+  const destructive = decidePermission(request("rm -rf /"), { permissionMode: "allowlist", allowedTools: ["bash"], allowedCommandPatterns: ["^git status$"] });
+  assert.deepEqual(destructive.outcome, { outcome: "selected", optionId: "reject" });
+});