HomerandClaude Opus 5.5
28ff205ed0
LLeMbas CLI 2.0 is LLeMbas-server-specific (CLI rule 2). Removed: the anthropic, gemini, ollama and responses clients, context discovery and llama-swap unloading (discover.ts), the Connection schema with its dialect, auth, key_cmd, discover, unload_url and one_model_at_a_time, the model `fallback` (it only ever moved to another server), effort_map and cache, and the multi-connection refs. Kept: openai-chat, http, sse, think, effort, tokens and all of src/lembas. - connections.yaml holds the login (`type: webui`, as lembas login writes it). A custom entry from 1.x is read past with a warning that says how to log in, so an old file still starts; with several logins left, the latest is used and the others named. - A model's ref is the id the server serves it under; the older forms (`<login>/<id>`, `<login>/<model>`) still resolve and config.yaml is rewritten once. Without a login there is no model, and the error (and the first-run screen, now the sign-in alone) says `lembas login <address>`. - A login to another server signs this machine out of the previous one. - The window is the server's word (no discovery); a capacity group comes from the server's `capacity.group` alone; embeddings use the server's /v1/embeddings. - `lembas models` lists the server's models; install.sh's starter files, the README and the JSON schemas say the same. Tests: every fixture is a login now (the fake server lists models, answers other GETs with 404, and can hand one model to another script, as a server with several backends); the dialect suites and the cross-connection tests are gone with their code. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
50 lines
2.5 KiB
TypeScript
50 lines
2.5 KiB
TypeScript
// A command corrected on its approval card (after LLeMbas): what the user wrote is judged again —
|
|
// the hardline and a written deny hold for it — and the model is told that the line it wrote is
|
|
// not the one that ran.
|
|
import { afterEach, expect, test } from "bun:test"
|
|
import { mkdirSync, mkdtempSync, writeFileSync } from "node:fs"
|
|
import { tmpdir } from "node:os"
|
|
import { join } from "node:path"
|
|
import { createApp } from "../src/app.ts"
|
|
import type { AskReply } from "../src/bus/index.ts"
|
|
import { paths } from "../src/config/paths.ts"
|
|
import { delta, fakeProvider, toolCall, type Fake } from "./fake-provider.ts"
|
|
|
|
let fake: Fake | undefined
|
|
afterEach(() => fake?.stop())
|
|
|
|
function app(edit: string, config = "") {
|
|
fake = fakeProvider([{ chunks: [toolCall(0, "b1", "bash", '{"command":"echo one"}')] }, { chunks: [delta({ content: "ok" }, "stop")] }])
|
|
mkdirSync(paths.config, { recursive: true })
|
|
writeFileSync(join(paths.config, "connections.yaml"), `connections:\n f:\n type: webui\n url: ${fake.url}\n models: { f/m: {} }\n`, { mode: 0o600 })
|
|
writeFileSync(join(paths.config, "config.yaml"), `model: f/m\ntitles: prompt\n${config}`)
|
|
return createApp({ cwd: mkdtempSync(join(tmpdir(), "ph-approve-")), mode: "manual", store: false, snapshots: false, asker: { ask: async (): Promise<AskReply> => ({ kind: "once", command: edit }) } })
|
|
}
|
|
const result = () => fake!.requests[1].messages.at(-1).content as string
|
|
|
|
test("the edited command runs, and the result says so first", async () => {
|
|
const a = app("echo two")
|
|
await a.engine.prompt("go")
|
|
expect(result()).toStartWith("[#0001]\nThe user changed the command before allowing it. What ran: echo two")
|
|
expect(result()).toContain("two")
|
|
expect(result()).not.toContain("one\n")
|
|
})
|
|
|
|
test("an edit onto the hardline is refused, and nothing runs", async () => {
|
|
const a = app("rm -rf /")
|
|
await a.engine.prompt("go")
|
|
expect(result()).toContain("The user changed the command to `rm -rf /`, and that is refused")
|
|
})
|
|
|
|
test("an edit onto a written deny is refused, also behind a wrapper", async () => {
|
|
const a = app("sudo -u x git push origin main", 'permission:\n bash: { "git push *": deny }\n')
|
|
await a.engine.prompt("go")
|
|
expect(result()).toContain("and that is refused: denied by permission rules")
|
|
})
|
|
|
|
test("allowing the command as it was written is an ordinary allow", async () => {
|
|
const a = app("echo one")
|
|
await a.engine.prompt("go")
|
|
expect(result()).not.toContain("The user changed the command")
|
|
})
|