ZacharyZhang-NY/omarchycn
2
2
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases 3 Wiki Activity

AI tests: restricted PATH guarantees installer branch coverage

Browse Source 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QKxGW1raAWaqeU8WdHsMsp
This commit is contained in:
ZacharyZhang-NY
2026-08-24 21:01:54 -04:00
co-authored by Claude Fable 5
parent 1cf6d455d7
commit 327442a1e7
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/shell.d/omarchycn-ai-test.sh
+6 -1
View File
@@ -149,7 +149,12 @@ chmod +x "$TEST_HOME/stubs/omarchy-mise-install"
echo "sk-secret-1" | omarchy-cn-ai-secret set deepseek > /dev/null
mkdir -p "$HOME/.claude"
printf '{"permissions":{"allow":["Bash"]},"env":{"KEEP":"1"}}' > "$HOME/.claude/settings.json"
omarchy-cn-ai-default good > /dev/null
# Restricted PATH guarantees claude is absent so the installer branch runs
restricted="$TEST_HOME/stubs:$ROOT/bin:/usr/bin:/bin"
if PATH="$restricted" command -v claude > /dev/null 2>&1; then
fail "precondition: claude must not be visible on the restricted PATH"
fi
PATH="$restricted" omarchy-cn-ai-default good > /dev/null
[[ $(jq -r '.env.KEEP' "$HOME/.claude/settings.json") == 1 ]] || fail "ai-default preserves user env"
[[ $(jq -r '.permissions.allow[0]' "$HOME/.claude/settings.json") == Bash ]] || fail "ai-default preserves permissions"
[[ $(jq -r '.env.ANTHROPIC_BASE_URL' "$HOME/.claude/settings.json") == "https://api.deepseek.com/anthropic" ]] || fail "ai-default env written"