Function Test_GetCommit_IFC_FeatureFlag

pkg/github/repositories_test.go:632–744

Test_GetCommit_IFC_FeatureFlag verifies that the IFC security label is only attached to get_commit results when the ifc_labels feature flag is enabled, and that the label content matches the commit-contents rule (untrusted on public repos, trusted on private). It also confirms the label is omitted w

(t *testing.T)

// misclassified. get_commit is representative of every tool wired through the
// shared attachRepoVisibilityIFCLabel helper.
func Test_GetCommit_IFC_FeatureFlag(t *testing.T) {
	t.Parallel()

	serverTool := GetCommit(translations.NullTranslationHelper)

	mockCommit := &github.RepositoryCommit{
		SHA:     github.Ptr("abc123def456"),
		Commit:  &github.Commit{Message: github.Ptr("First commit")},
		HTMLURL: github.Ptr("https://github.com/owner/repo/commit/abc123def456"),
	}

	makeMockClient := func(isPrivate bool) *http.Client {
		return MockHTTPClientWithHandlers(map[string]http.HandlerFunc{
			GetReposCommitsByOwnerByRepoByRef: mockResponse(t, http.StatusOK, mockCommit),
			GetReposByOwnerByRepo: mockResponse(t, http.StatusOK, map[string]any{
				"name":    "repo",
				"private": isPrivate,
			}),
		})
	}

	reqParams := map[string]any{
		"owner": "owner",
		"repo":  "repo",
		"sha":   "abc123def456",
	}

	t.Run("feature flag disabled omits ifc label from result meta", func(t *testing.T) {
		deps := BaseDeps{
			Client: mustNewGHClient(t, makeMockClient(false)),
		}
		handler := serverTool.Handler(deps)

		request := createMCPRequest(reqParams)
		result, err := handler(ContextWithDeps(context.Background(), deps), &request)
		require.NoError(t, err)
		require.False(t, result.IsError)

		assert.Nil(t, result.Meta, "result meta should be nil when IFC labels are disabled")
	})

	t.Run("feature flag enabled on public repo emits public untrusted label", func(t *testing.T) {
		deps := BaseDeps{
			Client:         mustNewGHClient(t, makeMockClient(false)),
			featureChecker: featureCheckerFor(FeatureFlagIFCLabels),
		}
		handler := serverTool.Handler(deps)

		request := createMCPRequest(reqParams)
		result, err := handler(ContextWithDeps(context.Background(), deps), &request)
		require.NoError(t, err)
		require.False(t, result.IsError)

		require.NotNil(t, result.Meta)
		ifcLabel, ok := result.Meta["ifc"]
		require.True(t, ok, "result meta should contain ifc key")

		ifcJSON, err := json.Marshal(ifcLabel)