Testing Guide

pnpm test runs Vitest unit tests.

Initial Sprint 20 coverage focuses on deterministic safety helpers:

• authorization helper behavior;
• permission checks and AuthorizationError;
• import target normalization and blocked unsafe targets;
• controlled import execution modes;
• communication outbox active channel and status filters;
• agent draft safety and blocked tool/capability rules.

Tests should remain fast, local, and deterministic. They must not require production secrets or external providers. Database-heavy checks belong in migration and seed verification scripts unless a true integration-test harness is added.