jschoubben
1c7356c247
mesh/delivery-group group feat/sdk1 rejected: composed together: the checker's verdict at the members' heads (428d048dd50a): unit: git.novox.be/novox/mesh-sdk/…
mesh/delivery closed: a newer head of the same pull request
mesh/check failed: unit: git.novox.be/novox/mesh-sdk/go/process.TestStatePutWritesAKeyWhole: a Put through a short blackout: 0, mesh-mail's state send…
Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL
45 lines
2.5 KiB
Go
45 lines
2.5 KiB
Go
package catalogue
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
// What a provider serves its consumers is the terminal's (novox/hq issue 339): any key under its `serves`, and any
|
|
// setting a served value asks for, is set at the terminal alone — a verb that could change a port could point every
|
|
// consumer at a listener of the caller's own. So is any setting a file marked `trusted` asks for.
|
|
func TestTerminalKeysAreDerived(t *testing.T) {
|
|
postgres := Manifest{Module: "postgres", Serves: map[string]map[string]any{"postgres-database": {"port": 5432.0}}}
|
|
keycloak := Manifest{Module: "keycloak", Serves: map[string]map[string]any{"oidc-client": {
|
|
"issuer": "${setting:issuer}", "token-path": "/protocol/openid-connect/token"}}}
|
|
power := Manifest{Module: "power", Resources: []map[string]any{
|
|
{"id": "logind", "type": "file", "path": "/etc/systemd/logind.conf.d/power.conf", "trusted": true,
|
|
"content": "HandleLidSwitch=${setting:handle-lid-switch}\n"},
|
|
{"id": "note", "type": "file", "path": "/var/lib/power/note", "trusted": false, "content": "${setting:greeting}\n"},
|
|
// Unmarked counts as trusted (fail closed): only `"trusted": false` lets a verb change what a file asks for.
|
|
{"id": "unmarked", "type": "file", "path": "/etc/power/unmarked", "content": "${setting:unmarked}\n"}}}
|
|
agent := Manifest{Module: "claude-code", Resources: []map[string]any{{"id": "settings", "type": "file",
|
|
"path": "/var/lib/agent/settings.json", "merge": MergeJSON,
|
|
"content": "{\n \"role\": \"\",\n \"mcp_servers\": {},\n \"managed_settings\": {}\n}\n"}}}
|
|
for _, c := range []struct {
|
|
m Manifest
|
|
want string
|
|
}{
|
|
{postgres, "places,accesses,port"},
|
|
{keycloak, "places,accesses,issuer,token-path"},
|
|
{power, "places,accesses,handle-lid-switch,unmarked"},
|
|
{Manifest{Module: "plain"}, "places,accesses"},
|
|
// A mergeable file asks for every key its own content names (novox/hq issue 340): the agent's module keeps
|
|
// what every Claude Code session on a node obeys in one.
|
|
{agent, "places,accesses,managed_settings,mcp_servers,role"},
|
|
{Manifest{Module: "notifier", Resources: []map[string]any{{"id": "look", "type": "file", "path": "/var/lib/n/look.json",
|
|
"merge": MergeJSON, "trusted": false, "content": `{"font": 13}`}}}, "places,accesses"},
|
|
{Manifest{Module: "empty", Resources: []map[string]any{{"id": "config", "type": "file", "path": "/var/lib/e/c.json",
|
|
"merge": MergeJSON, "content": `{}`}}}, "places,accesses"},
|
|
} {
|
|
if got := strings.Join(TerminalKeys(c.m), ","); got != c.want {
|
|
t.Errorf("%s: %s; want %s", c.m.Module, got, c.want)
|
|
}
|
|
}
|
|
}
|