Agent Police Department v1.0.0 MVP

tests/policy.test.js

@@ -0,0 +1,92 @@
+// tests/policy.test.js
+
+require('../__mocks__/chrome.js');
+const { loadPolicy, savePolicy, checkPolicy } = require('../lib/policy.js');
+
+describe('Policy', () => {
+  beforeEach(() => {
+    global.__chromeStore = {};
+  });
+
+  test('loadPolicy returns default policy when none stored', async () => {
+    const policy = await loadPolicy();
+    expect(policy).toBeDefined();
+    expect(policy.version).toBe(1);
+    expect(policy.rules).toHaveLength(6);
+    expect(policy.rules[0].type).toBe('allowed_domains');
+  });
+
+  test('savePolicy increments version', async () => {
+    const policy = await loadPolicy();
+    const saved = await savePolicy(policy);
+    expect(saved.version).toBe(2);
+  });
+
+  test('checkPolicy allows permitted domains', () => {
+    const event = {
+      type: 'api_call',
+      tool: 'fetch',
+      target: 'https://github.com/api',
+      url: 'https://claude.ai/chat'
+    };
+    const policy = {
+      rules: [
+        { id: 'rule1', type: 'allowed_domains', enabled: true, params: { domains: ['github.com'] } }
+      ]
+    };
+    const result = checkPolicy(event, policy);
+    expect(result.outcome).toBe('allowed');
+    expect(result.severity).toBe('info');
+  });
+
+  test('checkPolicy flags disallowed domains', () => {
+    const event = {
+      type: 'api_call',
+      tool: 'fetch',
+      target: 'https://evil.com/api',
+      url: 'https://claude.ai/chat'
+    };
+    const policy = {
+      rules: [
+        { id: 'rule1', type: 'allowed_domains', enabled: true, params: { domains: ['github.com'] } }
+      ]
+    };
+    const result = checkPolicy(event, policy);
+    expect(result.outcome).toBe('violation');
+    expect(result.severity).toBe('high');
+    expect(result.ruleId).toBe('rule1');
+  });
+
+  test('checkPolicy flags disallowed tools', () => {
+    const event = {
+      type: 'tool_use',
+      tool: 'eval',
+      target: 'script.js',
+      url: 'https://claude.ai/chat'
+    };
+    const policy = {
+      rules: [
+        { id: 'rule1', type: 'disallowed_tools', enabled: true, params: { tools: ['eval'] } }
+      ]
+    };
+    const result = checkPolicy(event, policy);
+    expect(result.outcome).toBe('violation');
+    expect(result.severity).toBe('critical');
+  });
+
+  test('disabled rules are ignored', () => {
+    const event = {
+      type: 'tool_use',
+      tool: 'eval',
+      target: 'script.js',
+      url: 'https://claude.ai/chat'
+    };
+    const policy = {
+      rules: [
+        { id: 'rule1', type: 'disallowed_tools', enabled: false, params: { tools: ['eval'] } }
+      ]
+    };
+    const result = checkPolicy(event, policy);
+    expect(result.outcome).toBe('allowed');
+  });
+});