Function TestValidateStrictModeEdgeCases

pkg/workflow/strict_mode_validation_test.go:508–573

TestValidateStrictModeEdgeCases tests edge cases for the validateStrictMode function

(t *testing.T)

// TestValidateStrictModeEdgeCases tests edge cases for the validateStrictMode function
func TestValidateStrictModeEdgeCases(t *testing.T) {
	tests := []struct {
		name               string
		frontmatter        map[string]any
		networkPermissions *NetworkPermissions
		expectError        bool
		errorMsg           string
	}{
		{
			name:        "empty frontmatter with valid network",
			frontmatter: map[string]any{},
			networkPermissions: &NetworkPermissions{
				Allowed: []string{"api.example.com"},
			},
			expectError: false,
		},
		{
			name:        "nil frontmatter map is handled",
			frontmatter: nil,
			networkPermissions: &NetworkPermissions{
				Allowed: []string{"api.example.com"},
			},
			expectError: false,
		},
		{
			name: "invalid permissions type is handled gracefully",
			frontmatter: map[string]any{
				"on":          "push",
				"permissions": "invalid-string-value",
			},
			networkPermissions: &NetworkPermissions{
				Allowed: []string{"api.example.com"},
			},
			expectError: false,
		},
		{
			name: "permissions as array is handled gracefully",
			frontmatter: map[string]any{
				"on":          "push",
				"permissions": []string{"contents:read"},
			},
			networkPermissions: &NetworkPermissions{
				Allowed: []string{"api.example.com"},
			},
			expectError: false,
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			compiler := NewCompiler()
			compiler.SetStrictMode(true)
			err := compiler.validateStrictMode(tt.frontmatter, tt.networkPermissions)

			if tt.expectError && err == nil {
				t.Error("Expected validation to fail but it succeeded")
			} else if !tt.expectError && err != nil {
				t.Errorf("Expected validation to succeed but it failed: %v", err)