mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-26 10:26:26 +01:00
Harold KimandPaperclip
98df214917
When reusing a Codex sandbox, the workspace-restore step now performs an auth-merge check before adopting the sandbox's auth.json. The merge fails closed when: - host or sandbox Codex auth is unusable (missing token or account) - the subscription payload shapes differ between host and sandbox - subscription account identities do not match Additional hardening: node absence on PATH during the embedded decision script now exits non-zero instead of silently falling through. Co-change comments link parseAuth (the embedded script) to hasUsableAuthPayload (codex-home.ts) so a future auth-format change cannot silently diverge between the two implementations. Co-Authored-By: Paperclip <noreply@paperclip.ing>
27 lines
926 B
TypeScript
27 lines
926 B
TypeScript
import { describe, expect, it } from "vitest";
|
|
import { workspaceDiffQuerySchema, workspaceDiffResponseSchema } from "../src/contracts.js";
|
|
import { diffResponse } from "./fixtures.js";
|
|
|
|
describe("workspace diff plugin contracts", () => {
|
|
it("normalizes query options from plugin data parameters", () => {
|
|
expect(workspaceDiffQuerySchema.parse({
|
|
view: "head",
|
|
baseRef: " main ",
|
|
includeUntracked: "false",
|
|
path: ["src/app.ts, README.md", "packages/shared/src/index.ts"],
|
|
})).toEqual({
|
|
view: "head",
|
|
baseRef: "main",
|
|
includeUntracked: false,
|
|
paths: ["src/app.ts", "README.md", "packages/shared/src/index.ts"],
|
|
});
|
|
});
|
|
|
|
it("validates the plugin-owned response shape", () => {
|
|
expect(workspaceDiffResponseSchema.parse(diffResponse())).toMatchObject({
|
|
workspaceId: "11111111-1111-4111-8111-111111111111",
|
|
stats: { fileCount: 1 },
|
|
});
|
|
});
|
|
});
|