jschoubben
9a12f2851f
ADR 0593 §1 and §7: compose, its bus reader and runtime reader, takein, validate, the overlay generator, the composer's run and mesh-compose, and the judgement of a move leave mesh-sdk for the node-engine's internal packages, so no other module composes and a change to them rebuilds only the node-engine. The shapes others read (the composer's request and verdict, the overlay's names, compositions and answers) stay in mesh-sdk. The node's grant is now a golden file of what the grants part composes, since the composer of the bus's user list leaves mesh-sdk too. Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL
51 lines
2.7 KiB
Go
51 lines
2.7 KiB
Go
package validate
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
// **The validator a controller imports is the host's**: a declaration the host takes passes, and one
|
|
// it refuses is refused with the host's own words, every problem at once.
|
|
func TestTheValidatorIsTheHosts(t *testing.T) {
|
|
good := `{"declaration": 1, "resources": [{"id": "d", "type": "directory", "path": "/var/lib/x", "mode": "0755"}]}`
|
|
if problems := Declaration([]byte(good)); problems != nil {
|
|
t.Fatalf("a declaration the host takes was refused: %v", problems)
|
|
}
|
|
// And one carrying the lease epoch and sequence the controller sends it under (novox/hq to-be 45
|
|
// §6): a controller validating with this package may send them.
|
|
ordered := `{"declaration": 1, "epoch": 57, "sequence": 3, "resources": [{"id": "d", "type": "directory", "path": "/var/lib/x", "mode": "0755"}]}`
|
|
if problems := Declaration([]byte(ordered)); problems != nil {
|
|
t.Fatalf("a declaration carrying its order was refused: %v", problems)
|
|
}
|
|
// And one carrying a file's owner-at-runtime and the files the provisioner fills (novox/hq ADR 0349 §5): the
|
|
// reader takes them before any controller sends them.
|
|
owned := `{"declaration": 1, "filled_files": ["/etc/x"], "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a", "owner-at-runtime": "owned"}]}`
|
|
if problems := Declaration([]byte(owned)); problems != nil {
|
|
t.Fatalf("a declaration saying who owns a file at runtime was refused: %v", problems)
|
|
}
|
|
// And one naming the provisioner client's account (novox/hq ADR 0349 §4).
|
|
named := `{"declaration": 1, "provisioner_account": "mesh-node-provisioner", "filled_files": ["/etc/x"], "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a", "owner-at-runtime": "owned"}]}`
|
|
if problems := Declaration([]byte(named)); problems != nil {
|
|
t.Fatalf("a declaration naming the provisioner client's account was refused: %v", problems)
|
|
}
|
|
for _, bad := range []string{
|
|
`{"declaration": 1, "provisioner_account": "root", "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a"}]}`,
|
|
`{"declaration": 1, "filled_files": ["/etc/none"], "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a", "owner-at-runtime": "owned"}]}`,
|
|
`{"declaration": 1, "resources": []}`,
|
|
`{"declaration": 99, "resources": [{"id": "d", "type": "directory", "path": "/x"}]}`,
|
|
`{"declaration": 1, "resources": [{"id": "d", "type": "nothing-the-host-knows"}]}`,
|
|
`not json`,
|
|
} {
|
|
problems := Declaration([]byte(bad))
|
|
if len(problems) == 0 {
|
|
t.Errorf("a declaration the host refuses was passed: %s", bad)
|
|
}
|
|
for _, p := range problems {
|
|
if strings.TrimSpace(p) == "" {
|
|
t.Errorf("a problem said nothing, for %s", bad)
|
|
}
|
|
}
|
|
}
|
|
}
|