paperclipai/paperclip
1
0 Fork 0
mirror of https://github.com/paperclipai/paperclip.git synced 2026-11-07 06:16:06 -10:00
Code Issues Packages Projects Releases 1 Wiki Activity

test(commentary): a granted agent reads another agent's existing entry

Browse Source 
Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
DottaandClaude Opus 5.5 committed 2026-11-07 09:54:59 -06:00
1 parent b7ce188c02
commit 778856de09
1 file changed
+9
Download Patch File Download Diff File Expand all files Collapse all files
server/src/__tests__/agent-commentary-reader.test.ts
+9
View File
@@ -134,6 +134,15 @@ describe("agent commentary browsing", () => {
expect((await request(app).get(`${url}/${firstId}`)).status).toBe(200);
actor = { type: "agent", companyId, agentId: secondAgentId };
expect((await request(app).get(`${url}/${firstId}`)).status).toBe(403);
await db.insert(companyMemberships).values({ companyId, principalType: "agent", principalId: secondAgentId, status: "active", membershipRole: "member" }).onConflictDoNothing();
await db.insert(principalPermissionGrants).values({ companyId, principalType: "agent", principalId: secondAgentId, permissionKey: "commentary:view" });
try {
expect((await request(app).get(`${url}/${firstId}`)).status).toBe(200);
expect((await request(app).get(url)).status).toBe(200);
} finally {
await db.delete(principalPermissionGrants).where(eq(principalPermissionGrants.principalId, secondAgentId));
await db.delete(companyMemberships).where(eq(companyMemberships.principalId, secondAgentId));
}
actor = { type: "board", source: "session", userId: "viewer", companyIds: [companyId] };
const denied = await request(app).get(url).expect(403);
expect(denied.body.error).toContain("commentary:view");