jason.woltje
cfe7535533
authorityBudgetCovered named claude-code to decide whether an account quota covers every future launch, which fails the row 65 scan. The bus host now passes each harness module's own countsAccount answer, read once with its levels in harnessLevels, through autonomyHost to the broker. Without the lookup no account quota counts (fail closed); the provider/model branch is unchanged.
63 lines
4.7 KiB
JavaScript
63 lines
4.7 KiB
JavaScript
import test from 'node:test';
|
|
import assert from 'node:assert/strict';
|
|
import { decisionAutonomy } from '../src/rails.mjs';
|
|
import { VERB_RIGHTS } from '../src/org-rights.mjs';
|
|
|
|
test('AU absent key preserves fixed levels; present per-class levels are read', () => {
|
|
for (const name of ['merge', 'policy', 'cross-role']) assert.equal(decisionAutonomy(name), 'out of the loop');
|
|
assert.equal(decisionAutonomy('authority'), 'in the loop');
|
|
assert.equal(decisionAutonomy('merge', { merge: 'near the loop' }), 'near the loop');
|
|
});
|
|
test('AU unknown class or level refuses instead of inventing a default', () => {
|
|
assert.throws(() => decisionAutonomy('unknown'), { code: 'invalid-autonomy' });
|
|
assert.throws(() => decisionAutonomy('merge', { merge: 'automatic' }), { code: 'invalid-autonomy' });
|
|
});
|
|
test('AU owner-only Console verbs have explicit null rights', () => {
|
|
for (const verb of ['autonomy.get.console','autonomy.set.console','decision.confirm.console','decision.reverse.console']) assert.equal(VERB_RIGHTS[verb], null, verb);
|
|
});
|
|
import { tmp, rolesCopy, businessDoc, writeJson } from './helpers.mjs';
|
|
import { rmSync } from 'node:fs';
|
|
import { join } from 'node:path';
|
|
import { validateBusinessDocument } from '../src/organization-config.mjs';
|
|
import { organizationWriter } from '../src/organization.mjs';
|
|
test('AU setting validates in the organization file; every writer refuses non-owner edits',t=>{
|
|
const root=tmp();t.after(()=>rmSync(root,{recursive:true,force:true}));
|
|
const rolesDir=rolesCopy(root),doc=businessDoc(root);doc.autonomy={merge:'in the loop'};
|
|
assert.equal(validateBusinessDocument(doc,join(root,'acme.json'),{rolesDir}).autonomy.merge,'in the loop');
|
|
for(const autonomy of [{unknown:'in the loop'},{merge:'fast'},{deploy:'out of the loop'}])assert.throws(()=>validateBusinessDocument({...doc,autonomy},join(root,'acme.json'),{rolesDir}),{code:'invalid-autonomy'});
|
|
writeJson(join(root,'businesses/acme.json'),doc);
|
|
const writer=organizationWriter({dir:root,rolesDir}),old=writer.read('acme');
|
|
for(const actor of ['coder','tester','member'])assert.throws(()=>writer.write('acme',{...doc,autonomy:{merge:'out of the loop'}},{revision:old.revision,actor}),{code:'human-required'});
|
|
});
|
|
|
|
import {authorityBudgetCovered} from '../src/autonomy.mjs';
|
|
test('AU authority budgets cover all selectable models and only enforced account harnesses',()=>{
|
|
const cap={limit:0,since:'2026-01-01T00:00:00.000Z'};
|
|
const b={plugins:{harness:['pi'],'limit-check':['token-limit']},launch:{models:{one:{provider:'one',model:'m'},two:{provider:'two',model:'n'}},limits:{tokens:{providers:{one:cap}}}}};
|
|
assert.equal(authorityBudgetCovered(b),false);
|
|
b.launch.limits.tokens.models={two:{n:cap}};assert.equal(authorityBudgetCovered(b),true);
|
|
b.plugins['limit-check']=[];assert.equal(authorityBudgetCovered(b),false);
|
|
b.launch.account={name:'shared'};b.launch.limits.tokens={keys:{shared:cap}};b.plugins['limit-check']=['token-limit'];
|
|
// What today's two harness modules declare (packages/plugins/harness/*/index.mjs countsAccount).
|
|
const declared={countsAccount:h=>({'claude-code':true,pi:false})[h]??null};
|
|
assert.equal(authorityBudgetCovered(b,declared),false);
|
|
b.plugins.harness=['claude-code'];assert.equal(authorityBudgetCovered(b,declared),true);
|
|
b.plugins.harness.push('pi');assert.equal(authorityBudgetCovered(b,declared),false);
|
|
b.plugins.harness=['claude-code'];b.plugins['limit-check']=['daily-quota'];b.launch.limits.tokens={daily:{shared:{...cap,reset:'00:00',timeZone:'UTC'}}};assert.equal(authorityBudgetCovered(b,declared),true);
|
|
});
|
|
test('AU an account quota covers authority only when every enabled harness declares it spends the launch account (#1873)',()=>{
|
|
const cap={limit:0,since:'2026-01-01T00:00:00.000Z'};
|
|
const b={plugins:{harness:['alpha','beta'],'limit-check':['token-limit']},launch:{account:{name:'shared'},models:{one:{provider:'one',model:'m'}},limits:{tokens:{keys:{shared:cap}}}}};
|
|
const declares=map=>({countsAccount:h=>map[h]??null});
|
|
// The declared fact decides, whatever the harness is called.
|
|
assert.equal(authorityBudgetCovered(b,declares({alpha:true,beta:true})),true);
|
|
assert.equal(authorityBudgetCovered(b,declares({alpha:true,beta:false})),false);
|
|
assert.equal(authorityBudgetCovered(b,declares({alpha:true})),false,'an undeclared harness is not covered');
|
|
assert.equal(authorityBudgetCovered(b,declares({alpha:true,beta:'yes'})),false,'only true counts');
|
|
b.plugins.harness=['claude-code'];
|
|
assert.equal(authorityBudgetCovered(b,declares({'claude-code':false})),false,'the name alone covers nothing');
|
|
assert.equal(authorityBudgetCovered(b),false,'no lookup: fail closed');
|
|
// The provider/model branch needs no harness fact.
|
|
b.launch.limits.tokens.providers={one:cap};assert.equal(authorityBudgetCovered(b),true);
|
|
});
|