mirror of
https://github.com/andrewyng/openworker.git
synced 2026-09-04 07:20:10 +00:00
Rohit C Prasad
06a4365132
'Allow read-only commands' on shell cards — fail-closed classifier (local reads + pipelines only; no network/interpreters/writes), session-scoped, persisted with grants. Consent cards get an in-place Enable button.
73 lines
3.7 KiB
TypeScript
73 lines
3.7 KiB
TypeScript
import { test, expect } from "./fixtures";
|
|
|
|
// Sharing v1 (OPE-7): the picker's "Import coworker…" door, the zip-import consent flow
|
|
// (trust warning first, capabilities behind a chevron, replaces-note), and per-coworker
|
|
// export from Settings ▸ Coworkers.
|
|
|
|
test("picker's Import door lands on Settings ▸ Coworkers at the Add section", async ({ page }) => {
|
|
await page.goto("/");
|
|
await page.getByText("New session").first().click();
|
|
await page.getByTestId("coworker-chip").click();
|
|
await page.getByTestId("import-coworker").click();
|
|
|
|
// Settings ▸ Coworkers opened, with the Add section (the import surface) present.
|
|
await expect(page.getByText("Add coworkers")).toBeVisible();
|
|
await expect(page.getByRole("combobox")).toBeVisible();
|
|
});
|
|
|
|
test("zip import: trust warning leads, tools collapse behind a chevron, replaces-note shows", async ({
|
|
page,
|
|
}) => {
|
|
await page.goto("/");
|
|
await page.getByTestId("account-row").click();
|
|
await page.getByRole("button", { name: "Settings", exact: true }).click();
|
|
await page.getByRole("button", { name: "Coworkers", exact: true }).click();
|
|
|
|
// Pick the Bundle zip mode and feed a file through the hidden input.
|
|
await page.getByRole("combobox").selectOption("zip");
|
|
await page.getByTestId("persona-zip-input").setInputFiles({
|
|
name: "team-sec.zip",
|
|
mimeType: "application/zip",
|
|
buffer: Buffer.from("fake-zip-bytes"),
|
|
});
|
|
|
|
const review = page.getByTestId("consent-review");
|
|
await expect(review).toBeVisible();
|
|
// The trust warning comes FIRST (owner design).
|
|
await expect(review.getByText(/Only enable coworkers from someone you trust/)).toBeVisible();
|
|
|
|
const card = page.getByTestId("consent-team-sec");
|
|
await expect(card.getByText("Team Security Coworker").first()).toBeVisible();
|
|
await expect(card.getByText(/Can read files, create & edit files and run shell commands/)).toBeVisible();
|
|
|
|
// Exact tools hidden until the chevron is clicked.
|
|
await expect(card.getByText("code_files · search · shell")).toHaveCount(0);
|
|
await card.getByTestId("consent-tools-toggle").click();
|
|
await expect(card.getByText("code_files · search · shell")).toBeVisible();
|
|
|
|
// Version + replaces + grew-capabilities re-consent note; recommended connector shown.
|
|
await expect(card.getByTestId("replaces-note")).toContainText("Replaces Team Security Coworker v1");
|
|
await expect(card.getByTestId("replaces-note")).toContainText("MORE capabilities");
|
|
await expect(card.getByText(/github.*(recommended).*open fix PRs/)).toBeVisible();
|
|
|
|
// Imported coworker landed disabled in the list above, pending consent —
|
|
// and the card itself carries the Enable action (no hunting back up the list).
|
|
const row = page.locator(".divide-y > div").filter({ hasText: "Team Security Coworker" });
|
|
await expect(row.getByRole("checkbox", { name: "Enabled" })).not.toBeChecked();
|
|
await card.getByTestId("consent-enable-team-sec").click();
|
|
await expect(card.getByTestId("consent-enabled")).toContainText("it's in your coworker picker");
|
|
await expect(row.getByRole("checkbox", { name: "Enabled" })).toBeChecked();
|
|
});
|
|
|
|
test("Export… zips an installed coworker's bundle to a chosen folder", async ({ page }) => {
|
|
await page.goto("/");
|
|
await page.getByTestId("account-row").click();
|
|
await page.getByRole("button", { name: "Settings", exact: true }).click();
|
|
await page.getByRole("button", { name: "Coworkers", exact: true }).click();
|
|
|
|
// The installed (non-builtin) fixture persona carries the Export affordance;
|
|
// the native folder pick is server-mocked → /tmp/picked-folder.
|
|
await page.getByTestId("persona-export-acme-notes").click();
|
|
await expect(page.getByText("Exported to /tmp/picked-folder/acme-notes-coworker-v1.zip")).toBeVisible();
|
|
});
|