54 lines · 2 KBtext/plain; charset=utf-8
The Coline App SDK: apps, tools, file types and surfaces that run inside Coline workspaces, and public websites with Coline Sites. TypeScript, with an in-memory test workspace. MIT.
| 4 |
| /** Apply the production permission/effect table to every fake call. */ |
| 5 | export function guardTestCapabilities( |
| 6 | capabilities: ColineCapabilities, |
| 7 | config: CapabilityGateConfig, |
| 8 | options: { interactive?: boolean; appPrincipal?: boolean } = {}, |
| 9 | ): ColineCapabilities { |
| 10 | const gate = createCapabilityGate(config); |
| 11 | function wrap(value: object, path: string): object { |
| 12 | return new Proxy(value, { |
| 13 | get(target, key, receiver): unknown { |
| 14 | const child: unknown = Reflect.get(target, key, receiver); |
| 15 | if (typeof key !== "string") return child; |
| 16 | const operation = path ? `${path}.${key}` : key; |
| 17 | if (typeof child === "function") { |
| 18 | if (operation === "storage.collection") { |
| 19 | return (...args: unknown[]) => |
| 20 | wrap(Reflect.apply(child, target, args) as object, "storage.records"); |
| 21 | } |
| 22 | return async (...args: unknown[]) => { |
| 23 | gate.assert(operation); |
| 24 | if ( |
| 25 | !options.interactive && |
| 26 | (operation.startsWith("pickers.") || |
| 27 | operation.startsWith("navigation.") || |
| 28 | operation === "realtime.subscribe" || |
| 29 | operation === "tools.invoke") |
| 30 | ) { |
| 31 | throw Object.assign(new Error(`${operation} requires an interactive surface.`), { |
| 32 | code: "capability_unavailable", |
| 33 | }); |
| 34 | } |
| 35 | if ( |
| 36 | options.appPrincipal && |
| 37 | /^(files|members|search\.query|tasks|calendar|messages|references)\./.test( |
| 38 | `${operation}.`, |
| 39 | ) |
| 40 | ) { |
| 41 | throw Object.assign(new Error(`${operation} requires a user principal.`), { |
| 42 | code: "requires_user_principal", |
| 43 | }); |
| 44 | } |
| 45 | return Reflect.apply(child, target, args) as unknown; |
| 46 | }; |
| 47 | } |
| 48 | return child !== null && typeof child === "object" ? wrap(child, operation) : child; |
| 49 | }, |
| 50 | }); |
| 51 | } |
| 52 | return wrap(capabilities, "") as ColineCapabilities; |
| 53 | } |
| 54 |