tests/test_bash_authorization.py

• _Clock · class · L22-L27 — class _Clock
• init · method · L23-L24 — def init(self, value: float = 1000.0) -> None
• call · method · L26-L27 — def call(self) -> float
• _proposal · function · L30-L39 — def _proposal(workspace: Path, *, command: str = "echo allowed") -> dict
• _consume · function · L42-L49 — def _consume(capability: dict) -> dict
• _service · function · L52-L58 — def _service(workspace: Path, **kwargs) -> BashAuthorizationService
• test_skill_network_admission_is_consulted_on_authorize · function · L61-L80 — def test_skill_network_admission_is_consulted_on_authorize(tmp_path, monkeypatch)
• _admit · function · L64-L73 — def _admit(**kwargs)
• test_capability_is_bound_and_single_use · function · L83-L93 — def test_capability_is_bound_and_single_use(tmp_path)
• test_tampered_binding_is_rejected · function · L97-L105 — def test_tampered_binding_is_rejected(tmp_path, field)
• test_expired_capability_is_rejected · function · L108-L116 — def test_expired_capability_is_rejected(tmp_path)
• test_host_independently_checks_generation_when_lifecycle_stamps_it · function · L119-L129 — def test_host_independently_checks_generation_when_lifecycle_stamps_it(tmp_path)
• test_cwd_escape_and_symlink_escape_are_rejected · function · L132-L147 — def test_cwd_escape_and_symlink_escape_are_rejected(tmp_path)
• test_explicit_allowed_root_can_authorize_cwd · function · L150-L161 — def test_explicit_allowed_root_can_authorize_cwd(tmp_path)
• test_sdk_without_host_authorization_fails_before_subprocess · function · L164-L170 — def test_sdk_without_host_authorization_fails_before_subprocess(tmp_path, monkeypatch)
• test_worker_rejects_tampered_capability_before_subprocess · function · L173-L207 — def test_worker_rejects_tampered_capability_before_subprocess(tmp_path, monkeypatch)
• tampered_authorizer · function · L185-L201 — def tampered_authorizer(method, args)
• test_worker_local_replay_window_is_bounded · function · L210-L219 — def test_worker_local_replay_window_is_bounded()
• test_sdk_executes_only_after_issue_and_consume_and_reports_diff · function · L222-L265 — def test_sdk_executes_only_after_issue_and_consume_and_reports_diff( tmp_path, monkeypatch )
• authorization · function · L235-L244 — def authorization(method, args)
• test_host_dispatcher_permission_gate_and_secret_safe_audit · function · L268-L329 — def test_host_dispatcher_permission_gate_and_secret_safe_audit(tmp_path, monkeypatch)
• test_secret_file_reference_is_rejected_by_host · function · L332-L337 — def test_secret_file_reference_is_rejected_by_host(tmp_path)
• test_result_must_match_consumed_token_and_records_once · function · L340-L355 — def test_result_must_match_consumed_token_and_records_once(tmp_path)
• test_consumed_unreported_capability_is_eventually_purged · function · L358-L382 — def test_consumed_unreported_capability_is_eventually_purged(tmp_path)
• _real_authorizer · function · L385-L402 — def _real_authorizer(tmp_path)
• authorization · function · L392-L400 — def authorization(method, args)
• test_a_timed_out_command_takes_its_children_with_it · function · L405-L447 — def test_a_timed_out_command_takes_its_children_with_it(tmp_path, monkeypatch)
• test_a_shell_that_exits_first_does_not_escape_the_deadline · function · L450-L494 — def test_a_shell_that_exits_first_does_not_escape_the_deadline(tmp_path, monkeypatch)
• test_command_output_is_bounded_as_it_is_produced · function · L497-L519 — def test_command_output_is_bounded_as_it_is_produced(tmp_path, monkeypatch)