Merge branch 'worktree-agent-a5a04e3ef680c61db' into feat/flow-debugger-script-entry

2026-09-08 01:19:07 -04:00
parent b74d3f4de9 3f4fde3e35
commit e5ca703714
5 changed files with 23 additions and 11 deletions
@@ -343,10 +343,15 @@ public class FlowDebugRunnerTests
    }

    [Fact]
-    public void RoleGate_TheTwoRunCommands_AreDeployerOnly()
+    public void RoleGate_TheThreeRunCommands_AreDeployerOnly()
    {
        // arch-review F3: a Live run executes scripts and writes attributes, so it stays Deployer-only.
-        foreach (var cmd in new object[] { new FlowDebugRunMethodCommand(1, null), new FlowDebugRunValueChangeCommand(1, "a", "b") })
+        foreach (var cmd in new object[]
+                 {
+                     new FlowDebugRunMethodCommand(1, null),
+                     new FlowDebugRunValueChangeCommand(1, "a", "b"),
+                     new FlowDebugRunScriptCommand(1, "Manual", null, null),
+                 })
            Assert.Equal(new[] { "Deployer" }, ManagementActor.GetRequiredRoles(cmd));
    }

@@ -151,6 +151,7 @@ public class RequiredRoleMatrixTests
        // for a past incident and an auditor must be able to follow them.
        ["FlowDebugRunMethod"] = [Roles.Deployer],
        ["FlowDebugRunValueChange"] = [Roles.Deployer],
+        ["FlowDebugRunScript"] = [Roles.Deployer],
        ["FlowDebugReplay"] = FlowDebuggerReplayers,

        // ---- Two-person secured write ----------------------------------------------