Permit safe cross-run output declarations
This commit is contained in:
@@ -42,6 +42,23 @@ func TestResolveUsesExactCommittedDeclaration(t *testing.T) {
|
||||
}
|
||||
}
|
||||
|
||||
func TestResolveUsesCarriedDeclarationFromEarlierRun(t *testing.T) {
|
||||
cfg, paths := previousCacheTestConfig(t)
|
||||
store := &storage.FakeBackend{}
|
||||
declaration := committedPublishedArtifactForTest("narratio.artifact.session_recap", "artifacts/session_recap.md", []byte("# recap\n"), "recap-generation")
|
||||
declaration.DestinationKey = strings.Replace(declaration.DestinationKey, "/runs/previous-run/", "/runs/origin-run/", 1)
|
||||
exactKey := seedCommittedPreviousState(t, store, cfg, previousManifestWithOutput(t, cfg, "artifacts/session_recap.md", nil), []artifacts.RemoteArtifact{declaration})
|
||||
|
||||
plan, err := Resolve(context.Background(), cfg, paths, []artifacts.PreviousArtifactRequirement{{Name: "session_recap", Required: true}}, store)
|
||||
if err != nil {
|
||||
t.Fatalf("Resolve() error = %v", err)
|
||||
}
|
||||
record := findRecord(plan.Records, InputKindArtifact)
|
||||
if record == nil || record.RemoteKey != exactKey {
|
||||
t.Fatalf("artifact record = %#v, want exact carried key %q", record, exactKey)
|
||||
}
|
||||
}
|
||||
|
||||
func TestResolveDerivesLocalPathFromCommittedDestination(t *testing.T) {
|
||||
cfg, paths := previousCacheTestConfig(t)
|
||||
cfg.Pipeline.Scriptorium.Artifacts["session_recap"] = config.ScriptoriumArtifactConfig{Enabled: true, OutputPath: "configured/ignored.md"}
|
||||
@@ -63,12 +80,12 @@ func TestResolveDerivesLocalPathFromCommittedDestination(t *testing.T) {
|
||||
|
||||
func TestPublishedOutputRelativePathRejectsUnsafeDestination(t *testing.T) {
|
||||
sessionPrefix := artifacts.S3SessionPrefix("dnd", "sample-campaign", "2026-04-26")
|
||||
_, err := publishedOutputRelativePath(sessionPrefix, "previous-run", artifacts.S3RunPrefix(sessionPrefix, "previous-run")+"artifacts/session_recap.md")
|
||||
if err == nil || !strings.Contains(err.Error(), "outside selected run published-output prefix") {
|
||||
_, err := publishedOutputRelativePath(sessionPrefix, artifacts.S3RunPrefix(sessionPrefix, "previous-run")+"artifacts/session_recap.md")
|
||||
if err == nil || !strings.Contains(err.Error(), "outside its immutable run published-output prefix") {
|
||||
t.Fatalf("publishedOutputRelativePath() error = %v, want prefix rejection", err)
|
||||
}
|
||||
_, err = publishedOutputRelativePath(sessionPrefix, "previous-run", artifacts.S3RunPrefix(sessionPrefix, "previous-run")+"published/../session_recap.md")
|
||||
if err == nil || !strings.Contains(err.Error(), "published output destination") {
|
||||
_, err = publishedOutputRelativePath(sessionPrefix, artifacts.S3RunPrefix(sessionPrefix, "previous-run")+"published/../session_recap.md")
|
||||
if err == nil || !strings.Contains(err.Error(), "clean relative object key") {
|
||||
t.Fatalf("publishedOutputRelativePath() error = %v, want unsafe destination rejection", err)
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user