Function TestApplyDefaultTools

pkg/workflow/compiler_safe_outputs_test.go:454–684

TestApplyDefaultTools tests default tool application logic

(t *testing.T)

// TestApplyDefaultTools tests default tool application logic
func TestApplyDefaultTools(t *testing.T) {
	tests := []struct {
		name                 string
		tools                map[string]any
		safeOutputs          *SafeOutputsConfig
		sandboxConfig        *SandboxConfig
		networkPermissions   *NetworkPermissions
		expectedGitHub       bool // true if github tool should exist
		expectedEdit         bool
		expectedBash         bool
		checkBashWildcard    bool
		checkGitCommands     bool
		checkBashDefault     bool
		expectedBashCommands []string
	}{
		{
			name:           "nil tools creates github tool",
			tools:          nil,
			expectedGitHub: true,
			expectedEdit:   false,
			expectedBash:   false,
		},
		{
			name:           "empty tools adds github tool",
			tools:          map[string]any{},
			expectedGitHub: true,
			expectedEdit:   false,
			expectedBash:   false,
		},
		{
			name: "github explicitly disabled",
			tools: map[string]any{
				"github": false,
			},
			expectedGitHub: false,
			expectedEdit:   false,
			expectedBash:   false,
		},
		{
			name:  "sandbox enabled adds edit and bash",
			tools: map[string]any{},
			sandboxConfig: &SandboxConfig{
				Agent: &AgentSandboxConfig{
					ID: "awf",
				},
			},
			expectedGitHub:    true,
			expectedEdit:      true,
			expectedBash:      true,
			checkBashWildcard: false, // Sandbox adds bash but may also include default commands
		},
		{
			name:  "firewall enabled adds edit and bash",
			tools: map[string]any{},
			networkPermissions: &NetworkPermissions{
				Firewall: &FirewallConfig{
					Enabled: true,
				},