feat: switch to opencode

tests/test_webhook.py

@@ -29,9 +29,13 @@ class FakeStorage:
 
 
 class FakeGitea:
-    def __init__(self) -> None:
+    def __init__(self, permitted: bool = True) -> None:
+        self.permitted = permitted
         self.comments: list[str] = []
 
+    async def has_write_permission(self, *_args):
+        return self.permitted
+
     async def create_comment(self, _owner, _repo, _number, body):
         self.comments.append(body)
         return len(self.comments)
@@ -72,6 +76,21 @@ async def test_authorized_command_is_queued() -> None:
     assert "queued" in gitea.comments[0]
 
 
+async def test_unauthorized_command_is_rejected_and_deduplicated() -> None:
+    storage = FakeStorage()
+    gitea = FakeGitea(permitted=False)
+    container = SimpleNamespace(storage=storage, gitea=gitea)
+    event = _event_from_payload("delivery", payload("/agent implement"))
+    assert event is not None
+
+    await _handle_command(container, event)
+    await _handle_command(container, event)
+
+    assert storage.jobs == []
+    assert len(gitea.comments) == 1
+    assert "write permission" in gitea.comments[0]
+
+
 async def test_iterate_message_is_preserved_on_queued_job() -> None:
     storage = FakeStorage()
     container = SimpleNamespace(storage=storage, gitea=FakeGitea())