Function test_100_command_limit

test_security_integration.py:358–389

Test that configs with >100 commands are rejected.

()

def test_100_command_limit():
    """Test that configs with >100 commands are rejected."""
    print("\n" + "=" * 70)
    print("TEST 9: 100 command limit enforced")
    print("=" * 70)

    with tempfile.TemporaryDirectory() as tmpdir:
        project_dir = Path(tmpdir)

        # Create config with 101 commands
        autoforge_dir = project_dir / ".autoforge"
        autoforge_dir.mkdir()

        commands = [
            f"  - name: cmd{i}\n    description: Command {i}" for i in range(101)
        ]
        (autoforge_dir / "allowed_commands.yaml").write_text(
            "version: 1\ncommands:\n" + "\n".join(commands)
        )

        # Try to run cmd0 (should be blocked - config is invalid)
        input_data = {"tool_name": "Bash", "tool_input": {"command": "cmd0"}}
        context = {"project_dir": str(project_dir)}

        result = asyncio.run(bash_security_hook(input_data, context=context))

        if result.get("decision") == "block":
            print("✅ PASS: Config with >100 commands rejected")
            return True
        else:
            print("❌ FAIL: Config with >100 commands should be rejected")
            return False


def main():