sysadminandClaude Opus 4.8
300a4ca08f
Moves the three uncommitted test-isolation changes off the root/control checkout into a dedicated issue-681 branch, per issue #681 recovery path (AC2: retained test-isolation changes land on a dedicated issue branch with review; never smuggled into #604/PR #680). Preserved as-is (NOT endorsed) for review: - gitea_mcp_server.py: test-mode early return in _verify_role_mutation_workspace - issue_lock_worktree.py: strips *.py lines from porcelain under pytest/unittest - tests/test_preflight_read_survival.py: patches out branches-only + root-checkout guards These weaken workspace/dirtiness guards under test and require review before any adoption; committed here only to restore the control checkout to clean master without discarding unique work. Refs #681 Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
114 lines
5.3 KiB
Python
114 lines
5.3 KiB
Python
"""#469: capability preflight survives interleaved read-only whoami calls."""
|
|
|
|
import os
|
|
import unittest
|
|
from unittest.mock import patch
|
|
|
|
import gitea_mcp_server as mcp_server
|
|
|
|
|
|
class TestPreflightReadSurvival(unittest.TestCase):
|
|
def setUp(self):
|
|
self.orig_whoami = mcp_server._preflight_whoami_called
|
|
self.orig_capability = mcp_server._preflight_capability_called
|
|
self.orig_whoami_violation = mcp_server._preflight_whoami_violation
|
|
self.orig_capability_violation = mcp_server._preflight_capability_violation
|
|
self.orig_resolved_role = mcp_server._preflight_resolved_role
|
|
self.orig_resolved_task = mcp_server._preflight_resolved_task
|
|
self.orig_process_start = mcp_server._process_start_porcelain
|
|
self.orig_whoami_baseline = mcp_server._preflight_whoami_baseline_porcelain
|
|
self.orig_capability_baseline = mcp_server._preflight_capability_baseline_porcelain
|
|
for key in ("GITEA_TEST_FORCE_DIRTY", "GITEA_TEST_PORCELAIN"):
|
|
if key in os.environ:
|
|
del os.environ[key]
|
|
os.environ["GITEA_TEST_PORCELAIN"] = ""
|
|
mcp_server._preflight_whoami_called = False
|
|
mcp_server._preflight_capability_called = False
|
|
mcp_server._preflight_whoami_violation = False
|
|
mcp_server._preflight_capability_violation = False
|
|
mcp_server._preflight_resolved_role = None
|
|
mcp_server._preflight_resolved_task = None
|
|
mcp_server._process_start_porcelain = ""
|
|
mcp_server._preflight_whoami_baseline_porcelain = None
|
|
mcp_server._preflight_capability_baseline_porcelain = None
|
|
|
|
self.author_guard_patch = patch("gitea_mcp_server._enforce_branches_only_author_mutation")
|
|
self.author_guard_patch.start()
|
|
self.root_guard_patch = patch("gitea_mcp_server._enforce_root_checkout_guard")
|
|
self.root_guard_patch.start()
|
|
|
|
def tearDown(self):
|
|
self.root_guard_patch.stop()
|
|
self.author_guard_patch.stop()
|
|
mcp_server._preflight_whoami_called = self.orig_whoami
|
|
mcp_server._preflight_capability_called = self.orig_capability
|
|
mcp_server._preflight_whoami_violation = self.orig_whoami_violation
|
|
mcp_server._preflight_capability_violation = self.orig_capability_violation
|
|
mcp_server._preflight_resolved_role = self.orig_resolved_role
|
|
mcp_server._preflight_resolved_task = self.orig_resolved_task
|
|
mcp_server._process_start_porcelain = self.orig_process_start
|
|
mcp_server._preflight_whoami_baseline_porcelain = self.orig_whoami_baseline
|
|
mcp_server._preflight_capability_baseline_porcelain = self.orig_capability_baseline
|
|
for key in ("GITEA_TEST_FORCE_DIRTY", "GITEA_TEST_PORCELAIN"):
|
|
if key in os.environ:
|
|
del os.environ[key]
|
|
|
|
def test_interleaved_whoami_preserves_capability(self):
|
|
mcp_server.record_preflight_check("whoami")
|
|
mcp_server.record_preflight_check(
|
|
"capability", resolved_role="reconciler", resolved_task="close_pr"
|
|
)
|
|
self.assertTrue(mcp_server._preflight_capability_called)
|
|
self.assertEqual(mcp_server._preflight_resolved_task, "close_pr")
|
|
|
|
mcp_server.record_preflight_check("whoami")
|
|
self.assertTrue(mcp_server._preflight_capability_called)
|
|
self.assertEqual(mcp_server._preflight_resolved_task, "close_pr")
|
|
|
|
mcp_server.verify_preflight_purity(task="close_pr")
|
|
self.assertFalse(mcp_server._preflight_capability_called)
|
|
|
|
def test_missing_capability_still_fails_closed(self):
|
|
mcp_server.record_preflight_check("whoami")
|
|
with self.assertRaises(RuntimeError) as ctx:
|
|
mcp_server.verify_preflight_purity(task="close_pr")
|
|
self.assertIn("has not been resolved", str(ctx.exception))
|
|
|
|
def test_task_mismatch_fails_closed(self):
|
|
mcp_server.record_preflight_check("whoami")
|
|
mcp_server.record_preflight_check(
|
|
"capability", resolved_role="author", resolved_task="create_issue"
|
|
)
|
|
with self.assertRaises(RuntimeError) as ctx:
|
|
mcp_server.verify_preflight_purity(task="close_pr")
|
|
self.assertIn("task mismatch", str(ctx.exception))
|
|
|
|
def test_capability_consumed_after_mutation_gate(self):
|
|
mcp_server.record_preflight_check("whoami")
|
|
mcp_server.record_preflight_check(
|
|
"capability", resolved_role="author", resolved_task="create_issue"
|
|
)
|
|
mcp_server.verify_preflight_purity(task="create_issue")
|
|
with self.assertRaises(RuntimeError) as ctx:
|
|
mcp_server.verify_preflight_purity(task="create_issue")
|
|
self.assertIn("has not been resolved", str(ctx.exception))
|
|
|
|
def test_whoami_recovery_after_violation_clears_capability(self):
|
|
os.environ["GITEA_TEST_FORCE_DIRTY"] = "1"
|
|
mcp_server.record_preflight_check("whoami")
|
|
self.assertTrue(mcp_server._preflight_whoami_violation)
|
|
|
|
del os.environ["GITEA_TEST_FORCE_DIRTY"]
|
|
os.environ["GITEA_TEST_PORCELAIN"] = ""
|
|
mcp_server.record_preflight_check("whoami")
|
|
self.assertFalse(mcp_server._preflight_whoami_violation)
|
|
self.assertFalse(mcp_server._preflight_capability_called)
|
|
|
|
mcp_server.record_preflight_check(
|
|
"capability", resolved_role="reviewer", resolved_task="review_pr"
|
|
)
|
|
mcp_server.verify_preflight_purity(task="review_pr")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main() |