Function TestCompilerNetworkPermissionsExtraction

pkg/workflow/network_test.go:12–266

(t *testing.T)

)

func TestCompilerNetworkPermissionsExtraction(t *testing.T) {
	compiler := NewCompiler()

	// Helper function to create a temporary workflow file for testing
	createTempWorkflowFile := func(content string) (string, func()) {
		tmpDir, err := os.MkdirTemp("", "test-workflow-")
		if err != nil {
			t.Fatalf("Failed to create temp dir: %v", err)
		}

		filePath := filepath.Join(tmpDir, "test.md")
		err = os.WriteFile(filePath, []byte(content), 0644)
		if err != nil {
			t.Fatalf("Failed to write temp file: %v", err)
		}

		cleanup := func() {
			os.RemoveAll(tmpDir)
		}

		return filePath, cleanup
	}

	t.Run("Extract top-level network permissions", func(t *testing.T) {
		yamlContent := `---
on: push
engine:
  id: claude
  model: claude-3-5-sonnet-20241022
network:
  allowed:
    - "github.com"
    - "*.example.com"
    - "api.trusted.com"
strict: false
---

# Test Workflow
This is a test workflow with network permissions.`

		filePath, cleanup := createTempWorkflowFile(yamlContent)
		defer cleanup()

		workflowData, err := compiler.ParseWorkflowFile(filePath)
		if err != nil {
			t.Fatalf("Failed to parse workflow: %v", err)
		}

		if workflowData.NetworkPermissions == nil {
			t.Fatal("Expected network permissions to be extracted")
		}

		expectedDomains := []string{"github.com", "*.example.com", "api.trusted.com"}
		if len(workflowData.NetworkPermissions.Allowed) != len(expectedDomains) {
			t.Fatalf("Expected %d allowed domains, got %d", len(expectedDomains), len(workflowData.NetworkPermissions.Allowed))
		}

		for i, expected := range expectedDomains {