ConusAI vendor v0.1.0-beta.114

test/native-admission.test.ts

@@ -0,0 +1,35 @@
+// SPDX-License-Identifier: LicenseRef-ConusAI-Template-1.0
+// The worker admits a job that leaves the process only for the person it acts for (apps/worker/src/
+// native-admission.ts): the job's intent names the permissions that person must still hold. A module
+// job that declares a platform operation and has no intent is refused every time it runs, so every
+// such job has one.
+
+import * as documents from "@app/modules/documents" // kit:documents
+import * as knowledge from "@app/modules/knowledge" // kit:knowledge
+import type { ModuleManifest } from "@conusai-kit/core"
+import { describe, expect, it } from "vitest"
+import { JOB_INTENT_PERMISSIONS } from "../apps/worker/src/native-admission.js"
+
+const manifests: ModuleManifest[] = [
+  documents.documentsModule, // kit:documents
+  knowledge.knowledgeModule, // kit:knowledge
+]
+
+describe("the worker's native job admission", () => {
+  it("has an intent for every module job that declares a platform operation", () => {
+    for (const manifest of manifests) {
+      const jobs = Object.keys(manifest.jobs ?? {})
+      const declared = (manifest.serviceRequirements ?? [])
+        .filter((requirement) => requirement.transport === "platform")
+        .flatMap((requirement) => Object.keys(requirement.operations))
+        .filter((operation) => jobs.includes(operation))
+      for (const job of declared) expect(JOB_INTENT_PERMISSIONS[job]?.length, job).toBeGreaterThan(0)
+    }
+  })
+
+  // kit:knowledge:begin
+  it("admits the automatic PDF intake only while its administrator may still manage knowledge", () => {
+    expect(JOB_INTENT_PERMISSIONS[knowledge.AUTO_INDEX_JOB]).toEqual(["knowledge.knowledge.manage"])
+  })
+  // kit:knowledge:end
+})