Function TestBuildAWFConfigJSON_SchemaCompliance

pkg/workflow/awf_config_test.go:1070–1162

TestBuildAWFConfigJSON_SchemaCompliance validates that BuildAWFConfigJSON always produces JSON that conforms to the embedded AWF config schema. This test provides coverage for the validateAWFConfigJSON path, which is triggered at compile time when --validate is used (WorkflowData.ValidateAWFConfig =

(t *testing.T)

// (WorkflowData.ValidateAWFConfig == true). Running it unconditionally here ensures schema
// compliance is verified in CI without the per-compile performance cost.
func TestBuildAWFConfigJSON_SchemaCompliance(t *testing.T) {
	cases := []struct {
		name   string
		config AWFCommandConfig
	}{
		{
			name: "basic config with firewall and allowed domains",
			config: AWFCommandConfig{
				EngineName:     "copilot",
				AllowedDomains: "github.com,api.github.com",
				WorkflowData: &WorkflowData{
					EngineConfig: &EngineConfig{ID: "copilot"},
					NetworkPermissions: &NetworkPermissions{
						Firewall: &FirewallConfig{Enabled: true},
					},
				},
			},
		},
		{
			name: "config without network section",
			config: AWFCommandConfig{
				EngineName: "copilot",
				WorkflowData: &WorkflowData{
					EngineConfig: &EngineConfig{ID: "copilot"},
				},
			},
		},
		{
			name: "config with pinned firewall version",
			config: AWFCommandConfig{
				EngineName:     "copilot",
				AllowedDomains: "github.com",
				WorkflowData: &WorkflowData{
					EngineConfig: &EngineConfig{ID: "copilot"},
					NetworkPermissions: &NetworkPermissions{
						Firewall: &FirewallConfig{Enabled: true, Version: "v0.24.0"},
					},
				},
			},
		},
		{
			name: "config with model-fallback disabled",
			config: AWFCommandConfig{
				EngineName:     "copilot",
				AllowedDomains: "github.com",
				WorkflowData: func() *WorkflowData {
					disabled := TemplatableBool("false")
					return &WorkflowData{
						EngineConfig: &EngineConfig{ID: "copilot"},
						SandboxConfig: &SandboxConfig{
							Agent: &AgentSandboxConfig{
								ModelFallback: &disabled,
							},
						},
						NetworkPermissions: &NetworkPermissions{
							Firewall: &FirewallConfig{Enabled: true},
						},
					}