Function TestExecutorHandlerErrorDeniesPreToolUse

pkg/hooks/handler_test.go:130–164

TestExecutorHandlerErrorDeniesPreToolUse documents the contract that any handler error (not just a non-zero exit) flows into the existing fail-closed behavior for PreToolUse.

(t *testing.T)

// handler error (not just a non-zero exit) flows into the existing
// fail-closed behavior for PreToolUse.
func TestExecutorHandlerErrorDeniesPreToolUse(t *testing.T) {
	t.Parallel()

	const customType HookType = "always-fails"

	registry := NewRegistry()
	registry.Register(customType, func(_ HandlerEnv, _ Hook) (Handler, error) {
		return handlerFunc(func(context.Context, []byte) (HandlerResult, error) {
			return HandlerResult{ExitCode: -1}, errors.New("kaboom")
		}), nil
	})

	config := &Config{
		PreToolUse: []MatcherConfig{
			{
				Matcher: "*",
				Hooks: []Hook{
					{Type: customType, Timeout: 5},
				},
			},
		},
	}

	exec := NewExecutorWithRegistry(config, t.TempDir(), nil, registry)
	input := &Input{
		SessionID: "test-session",
		ToolName:  "shell",
		ToolUseID: "test-id",
	}

	result, err := exec.Dispatch(t.Context(), EventPreToolUse, input)
	require.NoError(t, err)
	assert.False(t, result.Allowed)
	assert.Equal(t, -1, result.ExitCode)
}

// TestExecutorHandlerErrorPreservesStderr pins the contract that when a
// handler returns an error, the diagnostic stderr it captured before