Test relative workspace containment - #12
Conversation
Co-authored-by: Medulla <medulla@tinyhumans.ai>
|
Warning Review limit reached
This review includes 1 billable file and costs up to $0.25. Or wait 23 minutes for your next included review. View limit detailsLimit details: You’ve used the included review currently available. Review configuration: ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Advanced Run ID: 📒 Files selected for processing (1)
Comment |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Tiny Sweeper reviewTiny Sweeper reviewed this change across 6 lane(s) and found 0 active actionable finding(s). Detailed lane evidence and any incomplete work are listed below. State: Ready for maintainer review Review snapshot
Completeness: Complete What changedThe review could not produce a supported behavioral summary; inspect the cited changed surface and lane details below. FeaturesNone identified with supported citations. TestsNo supported feature-to-test mapping was produced. Test execution is not inferred. FindingsNo active actionable findings. Before mergeNone. How this fits togetherflowchart LR
n0["with_trusted_root"]:::impacted
n1["...iptor_is_pinned_to_its_literal_wire_shape"]:::impacted
n2["the_descriptor_round_trips_through_json"]:::impacted
n3["the_builders_set_each_field"]:::impacted
n4["with_policy_id"]:::impacted
n5["with_sandbox"]:::impacted
n1 -->|calls| n0
n1 -->|tests| n0
n1 -->|calls| n4
n1 -->|tests| n4
n1 -->|calls| n5
n1 -->|tests| n5
n2 -->|calls| n0
n2 -->|tests| n0
n2 -->|calls| n4
n2 -->|tests| n4
n2 -->|calls| n5
n2 -->|tests| n5
n3 -->|calls| n0
n3 -->|tests| n0
n3 -->|calls| n4
n3 -->|tests| n4
n3 -->|calls| n5
n3 -->|tests| n5
classDef changed fill:#0d4429,stroke:#238636,color:#e6edf3
classDef impacted fill:#161b22,stroke:#6e7681,color:#c9d1d9
classDef flagged fill:#5a1e02,stroke:#d93f0b,color:#ffffff
classDef blocking fill:#67060c,stroke:#f85149,color:#ffffff
Agent review detailscritique
security
tests
commits
description
e2e
Evidence and run details
|
There was a problem hiding this comment.
tinysweeper found nothing blocking. Approving.
$0.0027 · 29,219 in / 3,679 out · 0 cached (0%) · ladder/vectors, gpt-5.6-luna, deepseek/deepseek-v4-flash · 98 embedded
critique: $0.0009 · 12,272 in / 473 out · 0 cached (0%) · gpt-5.6-luna
security: $0.0009 · 12,028 in / 425 out · 0 cached (0%) · gpt-5.6-luna
description: $0.0006 · 3,424 in / 1,765 out · 0 cached (0%) · deepseek/deepseek-v4-flash
Summary
Adds a regression test confirming that workspace descriptors anchor relative roots and candidate paths to the process current directory.
Related issue
None.
API or behavior changes
None.
Validation
cargo fmt --all -- --checkcargo clippy --all-targets --all-features -- -D warningscargo build --all-targets --all-featurescargo test --all-features.github/scripts/check-file-coverage.sh 90 coverage.json(97.63% total; every source file meets the 90% requirement)Tests
Added
relative_roots_and_candidates_are_anchored_to_the_current_directory.Documentation
No documentation change: this is coverage for documented existing behavior.
Checklist
#[allow(...)],#[ignore], or relaxed lints.envcontents in the diff or the description