j VdZddlmZddlZddlmcmZddl Z ddl Z e jjddddl Z de jd<ddlmZgdZd d d ifd d ddfddddfddddddfddddfddddfgZdifddd ifdddifd!ifddd"ifd dd"ifd#d$d%d&ifgZGd'd(Zy))u(Tests for v3.6 Harness — regression: safe commands must remain ALLOW. chair_authorization_id=CHAIR-AUTH-TASK-2703-V36-HARNESS-MVP-260528 DoD #7: existing safe commands must not be blocked (false-positive prevention). Also covers edge cases: None input, empty dict, malformed tool_input, etc. ) annotationsNz/home/jay/workspace1ANU_V36_HARNESS_TEST_MODE)evaluate)-zpython3 -m pytestzpython3 -m pytest tests/ -vz#python3 -m pytest tests/harness/ -vz.pytest tests/harness/test_v36_harness_rules.pyzpytest --tb=shortz git statuszgit log --oneline -10zgit log --format='%H %s' -5zgit diff HEAD~1zgit diffzgit diff --statz git show HEADz git branchz git branch -azgit fetch originz git remote -vzgh pr view 158zgh pr view 158 --json statez gh pr listzgh pr list --state opengh run view 12345z gh run listzgh issue view 100z gh issue listz2cat /home/jay/workspace/memory/events/task-2703.mdz#cat /home/jay/.claude/settings.jsonzls -la /home/jay/workspacez+ls /home/jay/workspace/scripts/harness/v36/z7grep -r 'evaluate' /home/jay/workspace/scripts/harness/zDgrep 'matched_rule' /home/jay/workspace/scripts/harness/v36/guard.pyz9head -20 /home/jay/workspace/scripts/harness/v36/rules.pyz6wc -l /home/jay/workspace/scripts/harness/v36/rules.pyz1python3 -c "import json; print(json.loads('{}'))"zpython3 -c "print('hello')"zecho 'test output'z+find /home/jay/workspace/tests -name '*.py'z which python3zenv | grep ANUzgit log --all --onelinezgit stash listzgit tagzpip listzpython3 --versionzmkdir -p /tmp/test-harness-dirzcp /tmp/test.py /tmp/test2.pyRead file_path0/home/jay/workspace/scripts/harness/v36/guard.pyGlobz**/*.py)patternpathGreprLSPhoverzguard.py) operationfilePathline characterTaskzcheck somethingbash) descriptiontypeWebFetchzhttps://example.comz what is this?)urlpromptBashcommandWritels)rN UnknownTool arbitraryvalceZdZejj dedZejj dedZ ejj de dZ dZ dZ dZd Zd Zd Zd Zd ZdZy)TestSafeCommandsAllowcmdc tdd|ii}|d}d}||k(}|stjd|fd||ftj|tj|dz}tjd|d |dd |j d d |j d dzd|iz}t tj|dx}x}}y)NrrdecisionALLOW==z%(py1)s == %(py4)spy1py4z)REGRESSION: Safe command blocked! cmd: decision: rule: matched_rulez reason: reason >assert %(py6)spy6r @pytest_ar_call_reprcompare _saferepr_format_assertmsggetAssertionError_format_explanation)selfr'd @py_assert0 @py_assert3 @py_assert2 @py_format5 @py_format7s @/home/jay/workspace/tests/harness/test_v36_harness_regression.pytest_safe_bash_command_allowsz3TestSafeCommandsAllow.test_safe_bash_command_allowsds Vi-r 2}  }'  }      !(  WZ=+,uu^,/0x+  -      ztool_name,tool_inputc t||i}|d}d}||k(}|stjd|fd||ftj|tj|dz}tjd|d|d|dd |j d d zd |iz}t tj|dx}x}}y) Nr)r*r+r-r.z'REGRESSION: Safe tool blocked! tool: z input: r1r2r3r5r6r7) r? tool_name tool_inputr@rArBrCrDrEs rFtest_safe_non_bash_tool_allowsz4TestSafeCommandsAllow.test_safe_non_bash_tool_allowsos Y B /}  }'  }      !(   m$"~&Z=+,uu^,/  1      rHc  t||i}|d}d}||k(}|stjd|fd||ftj|tj|dz}tjd|d|d|dd |j d d zd |iz}t tj|d x}x}}y #t$r(} tjd|d|d| Yd } ~ y d } ~ wwxYw)u3Edge cases must never raise — fail-safe to ALLOW.r)r*r+r-r.z%Edge case unexpectedly blocked: tool=z, input=z , decision=z, rule=r3r5r6Nz"evaluate raised on edge case tool=z: ) rr8r9r:r;r<r=r> Exceptionpytestfail) r?rJrKr@rArBrCrDrEes rF(test_edge_case_allows_and_does_not_raisez>TestSafeCommandsAllow.test_edge_case_allows_and_does_not_raisezs gJ3AZ= G =G+  =G  I!  I%,  8 }HZN[jM,GAEE.4I3LN       g KKrNrOrPr?r@rArBrCrDrErQs rF test_none_context_does_not_raisez6TestSafeCommandsAllow.test_none_context_does_not_raises C)T!2D9AZ= +G +=G+ + + +=G + + += + + +G + + + + + + + C KK=aSA B B CBB B=B88B=c tdddid}|d}d}||k(}|sltjd|fd||ftj|tj|d z}d d |iz}t tj |d x}x}}y #t $r"}tjd |Yd }~y d }~wwxYw)z*Malformed context (string) must not raise.rrr!z bad contextr)r*r+r-r.rTr6Nz%evaluate raised with string context: rUrVs rF%test_malformed_context_does_not_raisez;TestSafeCommandsAllow.test_malformed_context_does_not_raises E)T!2MBAZ= +G +=G+ + + +=G + + += + + +G + + + + + + + E KK?sC D D ErXc$tddddi}|d}d}||k(}|sltjd|fd||ftj|tj|d z}d d |iz}t tj |d x}x}}y ) z Writing .py files must be ALLOW.r z3/home/jay/workspace/scripts/harness/v36/new_rule.pyz# coder contentr)r*r+r-r.rTr6Nrr8r9r:r=r>r?r@rArBrCrDrEs rFtest_write_to_py_file_allowsz2TestSafeCommandsAllow.test_write_to_py_file_allowssk  O\d e   }''}''''}'''}''''''''''rHc$tddddi}|d}d}||k(}|sltjd|fd||ftj|tj|d z}d d |iz}t tj |d x}x}}y ) z:Writing .json files must be ALLOW (non-.done, non-report).r z/home/jay/workspace/config.jsonz{}r\r)r*r+r-r.rTr6Nr^r_s rFtest_write_to_json_file_allowsz4TestSafeCommandsAllow.test_write_to_json_file_allowssj  ; M   }''}''''}'''}''''''''''rHc&tdddddi}|d}d}||k(}|sltjd|fd ||ftj|tj|d z}d d |iz}t tj |d x}x}}y )z Editing .py files must be ALLOW.Editr z # commentz# updated comment)r old_string new_stringr)r*r+r-r.rTr6Nr^r_s rFtest_edit_to_py_file_allowsz1TestSafeCommandsAllow.test_edit_to_py_file_allowssr  O)1   }''}''''}'''}''''''''''rHc"tdddii}|d}d}||k(}|sltjd|fd||ftj|tj|dz}d d |iz}t tj |d x}x}}y ) z'gh run view without --watch must ALLOW.rrrr)r*r+r-r.rTr6Nr^r_s rF%test_gh_run_view_without_watch_allowsz;TestSafeCommandsAllow.test_gh_run_view_without_watch_allowssd Vi)<=r B}''}''''}'''}''''''''''rHc"tdddii}|d}d}||k(}|sltjd|fd||ftj|tj|dz}d d |iz}t tj |d x}x}}|d }d }||k(}|sltjd|fd||ftj|tj|dz}d d |iz}t tj |d x}x}}y )z?git push to any branch is DENY per spec (all git push blocked).rrz#git push origin feature/test-branchr)DENYr+r-r.rTr6Nr3zpattern.forbidden_tool_or_shellr^r_s rF&test_git_push_to_feature_branch_deniedzrs# () +. &'.1h kM NO ,A BC -B CD 'z1ST UV . ?@./JK  RL i_ i  bM It )T [%()  g(g(rH