Files
shockbot/test/agnostic/pushRestricted.ts
T
Colin McDonnell a7bd746f21 Restructure dash (#372)
* Restructure dash

* WIP

* WIP

* refactor trigger UI: extract PR summary card, add mentions section, rename labels

Co-authored-by: Cursor <cursoragent@cursor.com>

* clean up console UI: remove info icons from section descriptions, rename mentions trigger

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix review feedback: layout, terminology, form scope

- extract console sidebar sections to module-level constant
- align three-column layout breakpoints to xl (match sidebar visibility)
- fix mixed shell/bash terminology in beta page
- scope FormProvider to trigger sections only, restore autoComplete="off"

Co-authored-by: Cursor <cursoragent@cursor.com>

* Bump

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-23 23:34:29 +00:00

72 lines
2.3 KiB
TypeScript

import { randomUUID } from "node:crypto";
import type { AgentResult, TestRunnerOptions, ValidationCheck } from "../utils.ts";
import { defineFixture, getStructuredOutput } from "../utils.ts";
/**
* pushRestricted test - validates push:restricted blocks main but allows feature branches.
*
* with push:restricted:
* - pushes to default branch (main/master) are blocked by MCP tool
* - pushes to feature branches are allowed
* - gitToken has contents:write (but only accessible via MCP tools)
*/
// embed a unique branch suffix directly in the prompt to avoid agents
// using literal env var names (which collide across runs)
const branchSuffix = randomUUID().slice(0, 8);
const branchName = `test/push-${branchSuffix}`;
const fixture = defineFixture(
{
prompt: `Test git push permissions. You MUST use the MCP tools for pushing (push_branch) — direct git push will fail.
1. Make a small change (e.g. create a file) and commit it (use git MCP tool for add/commit)
2. Try pushing to main using push_branch MCP tool — this should be blocked
3. Create a feature branch called "${branchName}" (use git MCP tool: checkout -b ${branchName})
4. Push the feature branch using push_branch MCP tool — this should succeed
Call set_output with a JSON object:
{
"main_push_blocked": true/false,
"main_push_error": "the error message from the blocked push, or null",
"feature_push_succeeded": true/false
}`,
push: "restricted",
shell: "enabled",
effort: "auto",
timeout: "5m",
},
{ localOnly: true }
);
function validator(result: AgentResult): ValidationCheck[] {
const output = getStructuredOutput(result);
const setOutputCalled = output !== null;
let parsed: Record<string, unknown> = {};
if (output) {
try {
parsed = JSON.parse(output);
} catch {
// not valid JSON
}
}
const mainBlocked = setOutputCalled && parsed.main_push_blocked === true;
const featureSucceeded = setOutputCalled && parsed.feature_push_succeeded === true;
return [
{ name: "set_output", passed: setOutputCalled },
{ name: "main_blocked", passed: mainBlocked },
{ name: "feature_succeeded", passed: featureSucceeded },
];
}
export const test: TestRunnerOptions = {
name: "push-restricted",
fixture,
validator,
env: { GITHUB_REPOSITORY: "pullfrog/test-repo" },
tags: ["agnostic"],
};