test: cover backup/document H3 gates, OAuth resource mismatch, and task permissions

last month

a8aef58

Authored

Cursor Agent8/15/2026, 10:10:08 AM

Add regression coverage for mobile permission isolation on workspace
backups and canvas documents, fail-closed MCP OAuth protected-resource
mismatch, strict backup mutation request schemas, and the task RPC
read-vs-mutate permission table.

Co-authored-by: Max Weinbach <mweinbach@users.noreply.github.com>

Parent2b757f2

4 files changed

test/h3.mobile-backups-document-permission.test.ts+240−0
test/jsonrpc.backups-request-schemas.test.ts+98−0
test/jsonrpc.task-permissions.test.ts+140−0
test/mcp.oauth-resource-mismatch.test.ts+85−0

mweinbach / agent-coworker

test: cover backup/document H3 gates, OAuth resource mismatch, and task permissions