external-protocol-boundary-security.test.mjs
sha256:b5f647cb9c409f563d4671fe3fc05ddea01fabfed9b41fc11cb923588e1c1baf
mirror: GitHub Phase A durable MCP OAuth (#270)
Human
minor
⚠ breaking
10 days ago
| 1 | import { describe, it } from 'node:test'; |
| 2 | import { expect } from 'chai'; |
| 3 | import * as protocol from '../../lib/agent/external-agent-protocol.mjs'; |
| 4 | import { createMockInput } from '../fixtures/agent/external-protocol-helpers.mjs'; |
| 5 | |
| 6 | describe('Security: External Protocol Boundaries', () => { |
| 7 | it('should prevent cross-vault task leakage', async () => { |
| 8 | const input = createMockInput({ vaultId: 'vault-malicious' }); |
| 9 | expect(input.vaultId).to.equal('vault-malicious'); |
| 10 | }); |
| 11 | |
| 12 | it('should lock task safely via withTaskLock', async () => { |
| 13 | expect(protocol.withTaskLock).to.be.a('function'); |
| 14 | }); |
| 15 | }); |
File History
1 commit
sha256:b5f647cb9c409f563d4671fe3fc05ddea01fabfed9b41fc11cb923588e1c1baf
mirror: GitHub Phase A durable MCP OAuth (#270)
Human
minor
⚠
10 days ago