LLM/moltbot
1
0
Fork 0
mirror of https://github.com/moltbot/moltbot.git synced 2026-05-13 15:47:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

test: tighten tlon security assertions

Browse Source
This commit is contained in:
Shakker
2026-05-11 09:47:44 +01:00
parent 7e8f74ded4
commit 0f4a37c828
1 changed files with 16 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
extensions/tlon/src/security.test.ts
View File

@@ -126,24 +126,24 @@ describe("Security: DM Allowlist", () => {
});
it("uses the ingress command gate for owner-only command authorization", async () => {
await expect(
resolveTlonCommandAuthorizationWithIngress({
senderShip: "~zod",
ownerShip: "zod",
useAccessGroups: true,
}),
).resolves.toMatchObject({
commandAccess: { authorized: true },
const authorized = await resolveTlonCommandAuthorizationWithIngress({
senderShip: "~zod",
ownerShip: "zod",
useAccessGroups: true,
});
await expect(
resolveTlonCommandAuthorizationWithIngress({
senderShip: "~nec",
ownerShip: "~zod",
useAccessGroups: true,
}),
).resolves.toMatchObject({
commandAccess: { authorized: false },
expect(authorized.commandAccess.requested).toBe(true);
expect(authorized.commandAccess.authorized).toBe(true);
expect(authorized.commandAccess.shouldBlockControlCommand).toBe(false);
expect(authorized.commandAccess.reasonCode).toBe("command_authorized");
const unauthorized = await resolveTlonCommandAuthorizationWithIngress({
senderShip: "~nec",
ownerShip: "~zod",
useAccessGroups: true,
});
expect(unauthorized.commandAccess.requested).toBe(true);
expect(unauthorized.commandAccess.authorized).toBe(false);
expect(unauthorized.commandAccess.shouldBlockControlCommand).toBe(false);
});
});
});