Function test_eval_perm

crates/chat-cli/src/cli/chat/tools/fs_write.rs:1318–1463

()

    #[tokio::test]
    async fn test_eval_perm() {
        const DENIED_PATH_ONE: &str = "/some/denied/path";
        const DENIED_PATH_GLOB: &str = "/denied/glob/**/path";
        const ALLOW_PATH_ONE: &str = "/some/allow/path";
        const ALLOW_PATH_GLOB: &str = "/allowed/glob/**/path";

        let mut agent = Agent {
            name: "test_agent".to_string(),
            tools_settings: {
                let mut map = HashMap::<ToolSettingTarget, serde_json::Value>::new();
                map.insert(
                    ToolSettingTarget("fs_write".to_string()),
                    serde_json::json!({
                        "allowedPaths": [ALLOW_PATH_ONE, ALLOW_PATH_GLOB],
                        "deniedPaths": [DENIED_PATH_ONE, DENIED_PATH_GLOB]
                    }),
                );
                map
            },
            ..Default::default()
        };

        let os = Os::new().await.unwrap();

        // Test path not matching any patterns - should ask
        let tool_should_ask = serde_json::from_value::<FsWrite>(serde_json::json!({
            "path": "/not/a/denied/path/file.txt",
            "command": "create",
            "file_text": "content in nested path"
        }))
        .unwrap();

        let res = tool_should_ask.eval_perm(&os, &agent);
        assert!(matches!(res, PermissionEvalResult::Ask));

        // Test path matching denied pattern - should deny
        let tool_should_deny = serde_json::from_value::<FsWrite>(serde_json::json!({
            "path": "/some/denied/path/file.txt",
            "command": "create",
            "file_text": "content in nested path"
        }))
        .unwrap();

        let res = tool_should_deny.eval_perm(&os, &agent);
        assert!(
            matches!(res, PermissionEvalResult::Deny(ref deny_list) if deny_list.contains(&DENIED_PATH_ONE.to_string()))
        );

        let tool_should_deny = serde_json::from_value::<FsWrite>(serde_json::json!({
            "path": "/some/denied/path/subdir/",
            "command": "create",
            "file_text": "content in nested path"
        }))
        .unwrap();

        let res = tool_should_deny.eval_perm(&os, &agent);
        assert!(matches!(res, PermissionEvalResult::Deny(ref deny_list) if
        deny_list.contains(&DENIED_PATH_ONE.to_string())));