Function TestValidateToolConfiguration

pkg/workflow/compiler_validators_test.go:358–426

TestValidateToolConfiguration tests safe-outputs, GitHub tools, and dispatch validation.

(t *testing.T)

// TestValidateToolConfiguration tests safe-outputs, GitHub tools, and dispatch validation.
func TestValidateToolConfiguration(t *testing.T) {
	tests := []struct {
		name          string
		workflowData  *WorkflowData
		permissions   string // raw permissions YAML to parse
		shouldError   bool
		errorContains string
	}{
		{
			name: "minimal workflow passes",
			workflowData: &WorkflowData{
				Name:            "Test",
				MarkdownContent: "# Test",
				AI:              "copilot",
			},
			permissions: "",
			shouldError: false,
		},
		{
			name: "agentic-workflows tool requires actions read permission",
			workflowData: &WorkflowData{
				Name:            "Test",
				MarkdownContent: "# Test",
				AI:              "copilot",
				Tools: map[string]any{
					"agentic-workflows": map[string]any{},
				},
				Permissions: "",
			},
			permissions:   "",
			shouldError:   true,
			errorContains: "Missing required permission for agentic-workflows tool",
		},
		{
			name: "agentic-workflows tool with actions read succeeds",
			workflowData: &WorkflowData{
				Name:            "Test",
				MarkdownContent: "# Test",
				AI:              "copilot",
				Tools: map[string]any{
					"agentic-workflows": map[string]any{},
				},
				Permissions: "permissions:\n  actions: read\n",
			},
			permissions: "permissions:\n  actions: read\n",
			shouldError: false,
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			tmpDir := testutil.TempDir(t, "tool-test")
			markdownPath := filepath.Join(tmpDir, "test.md")

			compiler := NewCompiler()
			parsedPermissions := NewPermissionsParser(tt.permissions).ToPermissions()

			err := compiler.validateToolConfiguration(tt.workflowData, markdownPath, parsedPermissions)