Function test_hierarchy_resolution

test_security.py:569–650

Test command hierarchy resolution.

()

def test_hierarchy_resolution():
    """Test command hierarchy resolution."""
    print("\nTesting hierarchy resolution:\n")
    passed = 0
    failed = 0

    with tempfile.TemporaryDirectory() as tmphome:
        with tempfile.TemporaryDirectory() as tmpproject:
            # Use temporary_home for cross-platform compatibility
            with temporary_home(tmphome):
                org_dir = Path(tmphome) / ".autoforge"
                org_dir.mkdir()
                org_config_path = org_dir / "config.yaml"

                # Create org config with allowed and blocked commands
                org_config_path.write_text("""version: 1
allowed_commands:
  - name: jq
    description: JSON processor
  - name: python3
    description: Python interpreter
blocked_commands:
  - terraform
  - kubectl
""")

                project_dir = Path(tmpproject)
                project_autoforge = project_dir / ".autoforge"
                project_autoforge.mkdir()
                project_config = project_autoforge / "allowed_commands.yaml"

                # Create project config
                project_config.write_text("""version: 1
commands:
  - name: swift
    description: Swift compiler
""")

                # Test 1: Org allowed commands are included
                allowed, blocked = get_effective_commands(project_dir)
                if "jq" in allowed and "python3" in allowed:
                    print("  PASS: Org allowed commands included")
                    passed += 1
                else:
                    print("  FAIL: Org allowed commands included")
                    print(f"         jq in allowed: {'jq' in allowed}")
                    print(f"         python3 in allowed: {'python3' in allowed}")
                    failed += 1

                # Test 2: Org blocked commands are in blocklist
                if "terraform" in blocked and "kubectl" in blocked:
                    print("  PASS: Org blocked commands in blocklist")
                    passed += 1
                else:
                    print("  FAIL: Org blocked commands in blocklist")
                    failed += 1

                # Test 3: Project commands are included