From cd043f650b77ffad2fcd0c436046b37c8881ccab Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Fri, 23 Oct 2026 17:00:04 -0400
Subject: [PATCH] Tests: the recovery folder needs read access too; the Place
 queue check runs for any active tool

---
 crates/mcp/tests/automation_roots.rs | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/crates/mcp/tests/automation_roots.rs b/crates/mcp/tests/automation_roots.rs
index ba098bf2d..d45ecc714 100644
--- a/crates/mcp/tests/automation_roots.rs
+++ b/crates/mcp/tests/automation_roots.rs
@@ -114,7 +114,13 @@ fn saves_exports_and_captures_go_only_into_the_write_root() {
         json!({"command": "prefs.set", "params": {"key": "recoveryFolder", "value": s(&base.join("outside"))}}),
         "outside the write root",
     );
-    ok(&mut server, "run_command", json!({"command": "prefs.set", "params": {"key": "recoveryFolder", "value": s(&base.join("out"))}}));
+    // Data Recovery lists and restores what is in its folder too: write access alone isn't enough.
+    refused(
+        &mut server,
+        "run_command",
+        json!({"command": "prefs.set", "params": {"key": "recoveryFolder", "value": s(&base.join("out"))}}),
+        "outside the read root",
+    );
     refused(&mut server, "run_command", json!({"command": "plugin.reload", "params": {"path": s(&base.join("outside"))}}), "outside the read root");
 
     // The document saved inside the write root saves again in place.
@@ -157,11 +163,10 @@ fn links_out_of_a_root_are_refused() {
 }
 
 /// The Place tool keeps its queue until a click, which no scope confines: a queued file outside the
-/// read root is refused when the queue is set.
+/// read root is refused when the queue is set (whichever tool is active when it is).
 #[test]
-fn the_place_queue_names_only_files_inside_the_read_root() {
+fn a_place_queue_names_only_files_inside_the_read_root() {
     let (mut server, base) = confined("place-queue", true, true);
-    let queue = |file: &str| json!({"tool": "place", "key": "queue", "value": {"entries": [{"params": {"path": s(&base.join(file))}, "name": "x", "width": 10, "height": 10}]}});
-    ok(&mut server, "run_command", json!({"command": "tool.setOption", "params": queue("in/a.svg")}));
+    let queue = |file: &str| json!({"key": "queue", "value": {"entries": [{"params": {"path": s(&base.join(file))}, "name": "x", "width": 10, "height": 10}]}});
     refused(&mut server, "run_command", json!({"command": "tool.setOption", "params": queue("outside/b.svg")}), "outside the read root");
 }