Something went wrong. Try again.
small gleam coding and (not yet) persistent agent daemon with a detachable cli
Something went wrong. Try again.
Go
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667package config
import ( "os" "path/filepath" "testing")
func TestCapabilityPrecedenceAndPrivateStore(t *testing.T) { home := t.TempDir() if err := SetCapability(home, "s1", "skills", "draft", true, false); err != nil { t.Fatal(err) } if err := SetCapability(home, "s1", "skills", "draft", false, true); err != nil { t.Fatal(err) } prefs, err := ReadCapabilityPrefs(home) if err != nil { t.Fatal(err) } if !prefs.Enabled("s1", "skills", "draft") || prefs.Enabled("s2", "skills", "draft") || !prefs.Enabled("s1", "skills", "other") { t.Fatalf("incorrect scope: %+v", prefs) } info, err := os.Stat(filepath.Join(home, "capabilities.json")) if err != nil { t.Fatal(err) } if info.Mode().Perm() != 0600 { t.Fatalf("preferences mode: %v", info.Mode()) }}
func TestMCPCredentialsPrivateAndFailClosed(t *testing.T) { home := t.TempDir() secret := MCPServerSecrets{BearerToken: "never-log-me"} if err := SetMCPServerSecrets(home, "docs", secret); err != nil { t.Fatal(err) } path := filepath.Join(home, "mcp-credentials.json") info, err := os.Stat(path) if err != nil { t.Fatal(err) } if info.Mode().Perm() != 0600 { t.Fatalf("credentials mode: %v", info.Mode()) } c, err := ReadMCPCredentials(home) if err != nil || c.Servers["docs"].BearerToken != secret.BearerToken { t.Fatalf("credential round-trip: %v", err) } if err := os.Chmod(path, 0644); err != nil { t.Fatal(err) } if _, err := ReadMCPCredentials(home); err == nil { t.Fatal("accepted world-readable credentials") } if err := os.Remove(path); err != nil { t.Fatal(err) } if err := os.Symlink(filepath.Join(home, "other"), path); err != nil { t.Fatal(err) } if _, err := ReadMCPCredentials(home); err == nil { t.Fatal("accepted symlink credentials") }}