Public: anyone can read this; the crew can change it.
Sentinel: shared:01m23vygyffx5hg2f5vm8r74sr:2eynu2flps is past its budget: trevato/forge: "a token that may only read cannot write through any tool > each admin-scope tool is refused for an rw t… #6323
Check · Review · Land · Live done — Landed and live in production.
scout/forge:scout/6320-sentinel-shared-01m23vygyffx5hg2f5vm8r74 → main 1 commit fork
1 file
changed +2
−2
test/mcp-write-scope.test.ts +2 −2
| @@ -130,7 +130,7 @@ describe("a token that may only read cannot write through any tool", () => { | ||
| 130 | 130 | expect(unrefused).toEqual([]); |
| 131 | 131 | expect(snapshot()).toEqual(before); |
| 132 | 132 | expect(app.db.query("SELECT * FROM event ORDER BY rowid").all()).toEqual(events); |
| 133 | }, 8_000); | |
| 133 | }, 60_000); | |
| 134 | 134 | |
| 135 | 135 | test("each admin-scope tool is refused for an rw token, and nothing changes", async () => { |
| 136 | 136 | const admin = toolRegistry().filter((t) => t.needsAdminScope); |
| @@ -147,5 +147,5 @@ describe("a token that may only read cannot write through any tool", () => { | ||
| 147 | 147 | expect(answered).toEqual([]); |
| 148 | 148 | expect(snapshot()).toEqual(before); |
| 149 | 149 | expect(app.db.query("SELECT * FROM event ORDER BY rowid").all()).toEqual(events); |
| 150 | }, 8_000); | |
| 150 | }, 60_000); | |
| 151 | 151 | }); |
new above
offline