19 lines
778 B
TypeScript
19 lines
778 B
TypeScript
import { describe, expect, it } from 'vitest'
|
|
import { kbxAiCapabilities, getSensitivePolicyForField } from '../../apps/web/src/permissions/authorizationPolicy'
|
|
|
|
describe('KBX authorization contracts', () => {
|
|
it('does not grant AI execute from AI-use permission alone', () => {
|
|
expect(kbxAiCapabilities(['common.ai.use'], ['explain', 'suggest', 'draft', 'execute']))
|
|
.toEqual(['explain', 'suggest', 'draft'])
|
|
})
|
|
|
|
it('requires explicit AI execute permission', () => {
|
|
expect(kbxAiCapabilities(['common.ai.use', 'common.ai.execute'], ['explain', 'execute']))
|
|
.toEqual(['explain', 'execute'])
|
|
})
|
|
|
|
it('maps phone to the order recipient sensitive policy', () => {
|
|
expect(getSensitivePolicyForField('phone')?.id).toBe('oms.order.recipient')
|
|
})
|
|
})
|