bbs.profullstack/logicsrc
1
0
Fork 0
mirror of https://github.com/profullstack/logicsrc.git synced 2026-08-14 14:57:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Handle non-finite policy risk scores (#75)

Browse source
This commit is contained in:
phucnguyen1707 2026-06-15 15:23:47 +07:00 • committed by GitHub
parent 8a86d14ffd
commit ae371b91d0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 37 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

25
packages/account-core/src/index.test.ts
View file

@ -24,6 +24,12 @@ describe("account-core", () => {
expect(riskBandForScore(score)).toBe("high");
});
it("treats non-finite risk scores as critical", () => {
expect(riskBandForScore(Number.NaN)).toBe("critical");
expect(riskBandForScore(Number.POSITIVE_INFINITY)).toBe("critical");
expect(riskBandForScore(Number.NEGATIVE_INFINITY)).toBe("critical");
});
it("requires approval for gated actions with matching grants", () => {
const result = evaluateAccountPolicy({
action: "email:send",
@ -41,6 +47,25 @@ describe("account-core", () => {
expect(result.decision).toBe("approval_required");
});
it.each([Number.NaN, Number.POSITIVE_INFINITY, Number.NEGATIVE_INFINITY])("fails closed for non-finite policy risk score %s", (riskScore) => {
const result = evaluateAccountPolicy({
action: "social:profile:read",
riskScore,
principal: { type: "agent", id: "reader-agent" },
grant: {
id: "grant_read",
accountId: "account_1",
principal: { type: "agent", id: "reader-agent" },
permissions: ["social:profile:read"],
policy: [],
createdAt: new Date(0).toISOString()
}
});
expect(result.riskScore).toBe(1);
expect(result.decision).toBe("deny");
});
it.each([
{ principal: { type: "agent" as const, id: "trusted-agent", trusted: true }, expected: "allow" },
{ principal: { type: "agent" as const, id: "untrusted-agent", trusted: false }, expected: "approval_required" },