mirror of
https://github.com/NCBM/plyngent.git
synced 2026-07-25 08:04:57 +08:00
60 lines
1.9 KiB
Python
60 lines
1.9 KiB
Python
"""Workspace policy requires bound InstanceState."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
|
|
from plyngent.tools.context import InstanceState, bind_instance
|
|
from plyngent.tools.workspace import (
|
|
WorkspaceError,
|
|
clear_workspace_root,
|
|
get_workspace_root,
|
|
resolve_path,
|
|
set_workspace_root,
|
|
)
|
|
|
|
|
|
def test_unbound_get_workspace_errors() -> None:
|
|
with pytest.raises(WorkspaceError, match="instance state is not bound"):
|
|
_ = get_workspace_root()
|
|
|
|
|
|
def test_set_workspace_on_bound_instance(tmp_path: Path) -> None:
|
|
instance = InstanceState()
|
|
with bind_instance(instance):
|
|
path = set_workspace_root(tmp_path)
|
|
assert instance.workspace_root == path
|
|
assert instance.workspace.root == path
|
|
assert get_workspace_root() == path
|
|
|
|
|
|
def test_clear_clears_bound_instance(tmp_path: Path) -> None:
|
|
instance = InstanceState()
|
|
with bind_instance(instance):
|
|
_ = set_workspace_root(tmp_path)
|
|
clear_workspace_root()
|
|
assert instance.workspace_root is None
|
|
with pytest.raises(WorkspaceError, match="workspace root is not set"):
|
|
_ = get_workspace_root()
|
|
|
|
|
|
def test_resolve_path_uses_instance_root(tmp_path: Path) -> None:
|
|
target = tmp_path / "note.txt"
|
|
_ = target.write_text("hi", encoding="utf-8")
|
|
instance = InstanceState(workspace_root=tmp_path.resolve())
|
|
with bind_instance(instance):
|
|
resolved = resolve_path("note.txt")
|
|
assert resolved == target.resolve()
|
|
|
|
|
|
def test_path_denylist_uses_instance_policy(tmp_path: Path) -> None:
|
|
secret = tmp_path / "secrets"
|
|
secret.mkdir()
|
|
_ = (secret / "x.txt").write_text("no", encoding="utf-8")
|
|
instance = InstanceState(workspace_root=tmp_path.resolve())
|
|
instance.workspace.path_denylist = ("/secrets/",)
|
|
with bind_instance(instance), pytest.raises(WorkspaceError, match="denied by policy"):
|
|
_ = resolve_path("secrets/x.txt")
|